diff --git a/advisories/github-reviewed/2020/09/GHSA-2cf5-4w76-r9qv/GHSA-2cf5-4w76-r9qv.json b/advisories/github-reviewed/2020/09/GHSA-2cf5-4w76-r9qv/GHSA-2cf5-4w76-r9qv.json index 933fb290490..b105bf05e5a 100644 --- a/advisories/github-reviewed/2020/09/GHSA-2cf5-4w76-r9qv/GHSA-2cf5-4w76-r9qv.json +++ b/advisories/github-reviewed/2020/09/GHSA-2cf5-4w76-r9qv/GHSA-2cf5-4w76-r9qv.json @@ -3,9 +3,7 @@ "id": "GHSA-2cf5-4w76-r9qv", "modified": "2024-01-29T20:54:51Z", "published": "2020-09-04T14:57:38Z", - "aliases": [ - - ], + "aliases": [], "summary": "Arbitrary Code Execution in handlebars", "details": "Versions of `handlebars` prior to 3.0.8 or 4.5.2 are vulnerable to Arbitrary Code Execution. The package's lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript in the system. It can be used to run arbitrary code in a server processing Handlebars templates or on a victim's browser (effectively serving as Cross-Site Scripting).\n\nThe following template can be used to demonstrate the vulnerability: \n```{{#with \"constructor\"}}\n\t{{#with split as |a|}}\n\t\t{{pop (push \"alert('Vulnerable Handlebars JS');\")}}\n\t\t{{#with (concat (lookup join (slice 0 1)))}}\n\t\t\t{{#each (slice 2 3)}}\n\t\t\t\t{{#with (apply 0 a)}}\n\t\t\t\t\t{{.}}\n\t\t\t\t{{/with}}\n\t\t\t{{/each}}\n\t\t{{/with}}\n\t{{/with}}\n{{/with}}```\n\n\n## Recommendation\n\nUpgrade to version 3.0.8, 4.5.2 or later.", "severity": [ diff --git a/advisories/github-reviewed/2020/09/GHSA-6x33-pw7p-hmpq/GHSA-6x33-pw7p-hmpq.json b/advisories/github-reviewed/2020/09/GHSA-6x33-pw7p-hmpq/GHSA-6x33-pw7p-hmpq.json index 2ebf7d641ea..ba4c0a3e1ea 100644 --- a/advisories/github-reviewed/2020/09/GHSA-6x33-pw7p-hmpq/GHSA-6x33-pw7p-hmpq.json +++ b/advisories/github-reviewed/2020/09/GHSA-6x33-pw7p-hmpq/GHSA-6x33-pw7p-hmpq.json @@ -3,9 +3,7 @@ "id": "GHSA-6x33-pw7p-hmpq", "modified": "2024-01-29T20:57:00Z", "published": "2020-09-04T17:59:49Z", - "aliases": [ - - ], + "aliases": [], "summary": "Denial of Service in http-proxy", "details": "Versions of `http-proxy` prior to 1.18.1 are vulnerable to Denial of Service. An HTTP request with a long body triggers an `ERR_HTTP_HEADERS_SENT` unhandled exception that crashes the proxy server. This is only possible when the proxy server sets headers in the proxy request using the `proxyReq.setHeader` function. \n\nFor a proxy server running on `http://localhost:3000`, the following curl request triggers the unhandled exception: \n```curl -XPOST http://localhost:3000 -d \"$(python -c 'print(\"x\"*1025)')\"```\n\n\n## Recommendation\n\nUpgrade to version 1.18.1 or later", "severity": [ diff --git a/advisories/github-reviewed/2021/12/GHSA-h86j-6h6m-qjqw/GHSA-h86j-6h6m-qjqw.json b/advisories/github-reviewed/2021/12/GHSA-h86j-6h6m-qjqw/GHSA-h86j-6h6m-qjqw.json index b2bf852dff8..d04d8a7189d 100644 --- a/advisories/github-reviewed/2021/12/GHSA-h86j-6h6m-qjqw/GHSA-h86j-6h6m-qjqw.json +++ b/advisories/github-reviewed/2021/12/GHSA-h86j-6h6m-qjqw/GHSA-h86j-6h6m-qjqw.json @@ -8,9 +8,7 @@ ], "summary": "Cross-Site Request Forgery in remdex/livehelperchat", "details": "An attacker is able to log out a user if a logged-in user visits the attacker's website. While this cannot harm a user's account, it can be a great annoyance and is a valid CSRF.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2021/12/GHSA-mf4f-j588-5xm8/GHSA-mf4f-j588-5xm8.json b/advisories/github-reviewed/2021/12/GHSA-mf4f-j588-5xm8/GHSA-mf4f-j588-5xm8.json index 0523736d5ec..2adf4df5492 100644 --- a/advisories/github-reviewed/2021/12/GHSA-mf4f-j588-5xm8/GHSA-mf4f-j588-5xm8.json +++ b/advisories/github-reviewed/2021/12/GHSA-mf4f-j588-5xm8/GHSA-mf4f-j588-5xm8.json @@ -3,14 +3,10 @@ "id": "GHSA-mf4f-j588-5xm8", "modified": "2021-12-14T15:29:17Z", "published": "2021-12-14T21:07:14Z", - "aliases": [ - - ], + "aliases": [], "summary": "Apache Log4j Remote Code Execution", "details": "### Impact\n\nOpencast uses an Apache Log4j2 version which, combined with older JDK versions, can be used for remote code execution attacks which have been found to be actively exploited.\n\nApache Log4j2 <=2.14.1 JNDI features is not sufficiently protected. An attacker who can control log messages or log message parameters can execute arbitrary code when message lookup substitution is enabled.\n\n### Who is affected\n\n- Opencast before 9.10 or 10.6 are affected\n - Log4j version: all 2.x versions before 2.15.0 are affected\n\n### Patches\n\nThe issue has been fixed in Opencast 9.10 and 10.6.\n\n### Workarounds\n\nThe vulnerability can be mitigated by setting system property `log4j2.formatMsgNoLookups` to `true`.\n\n### References\n\n- [Opencast pull request mitigating the vulnerability](https://github.com/opencast/opencast/pull/3253)\n- [CVE-2021-44228 Detail](https://nvd.nist.gov/vuln/detail/CVE-2021-44228)\n- [Analysis and Remediation Guidance to the Log4j Zero-Day RCE (CVE-2021-44228) Vulnerability](https://www.veracode.com/blog/security-news/urgent-analysis-and-remediation-guidance-log4j-zero-day-rce-cve-2021-44228)\n- [VE-2021-44228 – Log4j 2 Vulnerability Analysis](https://www.randori.com/blog/cve-2021-44228/)\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n* Open an issue in [our issue tracker](https://github.com/opencast/opencast/issues)\n* Email us at [security@opencast.org](mailto:security@opencast.org)\n\n\n### Note about dependencies\n\nThis issue affects many Java applications. Please also verify these are not vulnerable.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -78,9 +74,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2021-12-14T15:22:20Z", diff --git a/advisories/github-reviewed/2021/12/GHSA-xxfh-x98p-j8fr/GHSA-xxfh-x98p-j8fr.json b/advisories/github-reviewed/2021/12/GHSA-xxfh-x98p-j8fr/GHSA-xxfh-x98p-j8fr.json index 34a3988331b..1c7b06e121b 100644 --- a/advisories/github-reviewed/2021/12/GHSA-xxfh-x98p-j8fr/GHSA-xxfh-x98p-j8fr.json +++ b/advisories/github-reviewed/2021/12/GHSA-xxfh-x98p-j8fr/GHSA-xxfh-x98p-j8fr.json @@ -3,14 +3,10 @@ "id": "GHSA-xxfh-x98p-j8fr", "modified": "2021-12-11T21:25:16Z", "published": "2021-12-10T20:15:37Z", - "aliases": [ - - ], + "aliases": [], "summary": "Remote code injection in Log4j (through pax-logging-log4j2)", "details": "### Impact\nRemote Code Execution.\n\n### Patches\nUsers of pax-logging 1.11.9 should update to 1.11.10.\nUsers of pax-logging 2.0.10 should update to 2.0.11.\n\n### Workarounds\nSet system property `-Dlog4j2.formatMsgNoLookups=true`\n\n### References\nhttps://github.com/advisories/GHSA-jfh8-c2jp-5v3q\n\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -66,9 +62,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2021-12-10T18:54:56Z", diff --git a/advisories/github-reviewed/2022/05/GHSA-5qp6-78pr-gv8c/GHSA-5qp6-78pr-gv8c.json b/advisories/github-reviewed/2022/05/GHSA-5qp6-78pr-gv8c/GHSA-5qp6-78pr-gv8c.json index 8860f212389..7166c55fdf8 100644 --- a/advisories/github-reviewed/2022/05/GHSA-5qp6-78pr-gv8c/GHSA-5qp6-78pr-gv8c.json +++ b/advisories/github-reviewed/2022/05/GHSA-5qp6-78pr-gv8c/GHSA-5qp6-78pr-gv8c.json @@ -8,9 +8,7 @@ ], "summary": "PHP OpenID Library Denial of Service vulnerability", "details": "Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (CPU and memory consumption) via XRDS data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/05/GHSA-89cp-fvcc-hxh7/GHSA-89cp-fvcc-hxh7.json b/advisories/github-reviewed/2022/05/GHSA-89cp-fvcc-hxh7/GHSA-89cp-fvcc-hxh7.json index 662dd8d86bf..ff5c1fd2fb0 100644 --- a/advisories/github-reviewed/2022/05/GHSA-89cp-fvcc-hxh7/GHSA-89cp-fvcc-hxh7.json +++ b/advisories/github-reviewed/2022/05/GHSA-89cp-fvcc-hxh7/GHSA-89cp-fvcc-hxh7.json @@ -8,9 +8,7 @@ ], "summary": "Symfony Access Control Vulnerability", "details": "Symfony 2.0.x before 2.0.20, 2.1.x before 2.1.5, and 2.2-dev, when the internal routes configuration is enabled, allows remote attackers to access arbitrary services via vectors involving a URI beginning with a `/_internal` substring.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2024/01/GHSA-62cf-jvpp-48q6/GHSA-62cf-jvpp-48q6.json b/advisories/github-reviewed/2024/01/GHSA-62cf-jvpp-48q6/GHSA-62cf-jvpp-48q6.json index 2c309fdb248..90a104a8562 100644 --- a/advisories/github-reviewed/2024/01/GHSA-62cf-jvpp-48q6/GHSA-62cf-jvpp-48q6.json +++ b/advisories/github-reviewed/2024/01/GHSA-62cf-jvpp-48q6/GHSA-62cf-jvpp-48q6.json @@ -8,9 +8,7 @@ ], "summary": "Drupal Denial of Service vulnerability", "details": "Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a denial-of-service (DoS) condition.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -37,9 +35,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-01-19T22:11:17Z", diff --git a/advisories/github-reviewed/2024/01/GHSA-8r5v-vm4m-4g25/GHSA-8r5v-vm4m-4g25.json b/advisories/github-reviewed/2024/01/GHSA-8r5v-vm4m-4g25/GHSA-8r5v-vm4m-4g25.json index 33140a3790a..dfa540168f9 100644 --- a/advisories/github-reviewed/2024/01/GHSA-8r5v-vm4m-4g25/GHSA-8r5v-vm4m-4g25.json +++ b/advisories/github-reviewed/2024/01/GHSA-8r5v-vm4m-4g25/GHSA-8r5v-vm4m-4g25.json @@ -3,14 +3,10 @@ "id": "GHSA-8r5v-vm4m-4g25", "modified": "2024-01-19T15:24:56Z", "published": "2024-01-19T15:24:56Z", - "aliases": [ - - ], + "aliases": [], "summary": "Resource exhaustion vulnerability in h2 may lead to Denial of Service (DoS)", "details": "An attacker with an HTTP/2 connection to an affected endpoint can send a steady stream of invalid frames to force the\ngeneration of reset frames on the victim endpoint.\nBy closing their recv window, the attacker could then force these resets to be queued in an unbounded fashion,\nresulting in Out Of Memory (OOM) and high CPU usage.\n\nThis fix is corrected in [hyperium/h2#737](https://github.com/hyperium/h2/pull/737), which limits the total number of\ninternal error resets emitted by default before the connection is closed.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -74,9 +70,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-01-19T15:24:56Z", diff --git a/advisories/unreviewed/2021/12/GHSA-26g2-gh8x-5xrm/GHSA-26g2-gh8x-5xrm.json b/advisories/unreviewed/2021/12/GHSA-26g2-gh8x-5xrm/GHSA-26g2-gh8x-5xrm.json index 1683abd6eab..01be20feb31 100644 --- a/advisories/unreviewed/2021/12/GHSA-26g2-gh8x-5xrm/GHSA-26g2-gh8x-5xrm.json +++ b/advisories/unreviewed/2021/12/GHSA-26g2-gh8x-5xrm/GHSA-26g2-gh8x-5xrm.json @@ -7,12 +7,8 @@ "CVE-2021-42987" ], "details": "Eltima USB Network Gate is affected by Integer Overflow. IOCTL Handler 0x22001B in the USB Network Gate above 7.0.1370 below 9.2.2420 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-26g9-qm28-697j/GHSA-26g9-qm28-697j.json b/advisories/unreviewed/2021/12/GHSA-26g9-qm28-697j/GHSA-26g9-qm28-697j.json index 3a0a3057ed8..2588e81ac2f 100644 --- a/advisories/unreviewed/2021/12/GHSA-26g9-qm28-697j/GHSA-26g9-qm28-697j.json +++ b/advisories/unreviewed/2021/12/GHSA-26g9-qm28-697j/GHSA-26g9-qm28-697j.json @@ -7,12 +7,8 @@ "CVE-2021-37082" ], "details": "There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to motionhub crash.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-26gj-hvfr-rqwg/GHSA-26gj-hvfr-rqwg.json b/advisories/unreviewed/2021/12/GHSA-26gj-hvfr-rqwg/GHSA-26gj-hvfr-rqwg.json index f5d3d25b303..4a6f3ef6adb 100644 --- a/advisories/unreviewed/2021/12/GHSA-26gj-hvfr-rqwg/GHSA-26gj-hvfr-rqwg.json +++ b/advisories/unreviewed/2021/12/GHSA-26gj-hvfr-rqwg/GHSA-26gj-hvfr-rqwg.json @@ -7,12 +7,8 @@ "CVE-2021-37094" ], "details": "There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-2796-xm8f-wrr7/GHSA-2796-xm8f-wrr7.json b/advisories/unreviewed/2021/12/GHSA-2796-xm8f-wrr7/GHSA-2796-xm8f-wrr7.json index 09872e43e25..1f9cb3eb84c 100644 --- a/advisories/unreviewed/2021/12/GHSA-2796-xm8f-wrr7/GHSA-2796-xm8f-wrr7.json +++ b/advisories/unreviewed/2021/12/GHSA-2796-xm8f-wrr7/GHSA-2796-xm8f-wrr7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-27vq-c7q6-wxpx/GHSA-27vq-c7q6-wxpx.json b/advisories/unreviewed/2021/12/GHSA-27vq-c7q6-wxpx/GHSA-27vq-c7q6-wxpx.json index a66abf41a47..8addd1142ad 100644 --- a/advisories/unreviewed/2021/12/GHSA-27vq-c7q6-wxpx/GHSA-27vq-c7q6-wxpx.json +++ b/advisories/unreviewed/2021/12/GHSA-27vq-c7q6-wxpx/GHSA-27vq-c7q6-wxpx.json @@ -7,12 +7,8 @@ "CVE-2021-42979" ], "details": "NoMachine Cloud Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Cloud Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-2cg5-v97f-xqfq/GHSA-2cg5-v97f-xqfq.json b/advisories/unreviewed/2021/12/GHSA-2cg5-v97f-xqfq/GHSA-2cg5-v97f-xqfq.json index 931fa633315..2d8372321f4 100644 --- a/advisories/unreviewed/2021/12/GHSA-2cg5-v97f-xqfq/GHSA-2cg5-v97f-xqfq.json +++ b/advisories/unreviewed/2021/12/GHSA-2cg5-v97f-xqfq/GHSA-2cg5-v97f-xqfq.json @@ -7,12 +7,8 @@ "CVE-2021-32592" ], "details": "An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an attacker to perform a DLL Hijack attack on affected devices via a malicious OpenSSL engine library in the search path.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-2fpq-jhjc-vqfv/GHSA-2fpq-jhjc-vqfv.json b/advisories/unreviewed/2021/12/GHSA-2fpq-jhjc-vqfv/GHSA-2fpq-jhjc-vqfv.json index 77089af19b3..db142251494 100644 --- a/advisories/unreviewed/2021/12/GHSA-2fpq-jhjc-vqfv/GHSA-2fpq-jhjc-vqfv.json +++ b/advisories/unreviewed/2021/12/GHSA-2fpq-jhjc-vqfv/GHSA-2fpq-jhjc-vqfv.json @@ -7,12 +7,8 @@ "CVE-2021-44527" ], "details": "A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gained access to the network to perform a Deny of Service (DoS) attack on the affected switch.This vulnerability is fixed in UniFi Switch firmware 5.76.6 and later.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-2vrf-6p2h-rj7x/GHSA-2vrf-6p2h-rj7x.json b/advisories/unreviewed/2021/12/GHSA-2vrf-6p2h-rj7x/GHSA-2vrf-6p2h-rj7x.json index 02a03ab37e8..e7512d5ce9b 100644 --- a/advisories/unreviewed/2021/12/GHSA-2vrf-6p2h-rj7x/GHSA-2vrf-6p2h-rj7x.json +++ b/advisories/unreviewed/2021/12/GHSA-2vrf-6p2h-rj7x/GHSA-2vrf-6p2h-rj7x.json @@ -7,12 +7,8 @@ "CVE-2021-43686" ], "details": "nZEDb v0.4.20 is affected by a Cross Site Scripting (XSS) vulnerability in www/pages/api.php. The exit function will terminate the script and print the message which has the input $_GET['t'].", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-32hr-rxc3-hqx7/GHSA-32hr-rxc3-hqx7.json b/advisories/unreviewed/2021/12/GHSA-32hr-rxc3-hqx7/GHSA-32hr-rxc3-hqx7.json index 39b9791bd7d..4d4a20c3086 100644 --- a/advisories/unreviewed/2021/12/GHSA-32hr-rxc3-hqx7/GHSA-32hr-rxc3-hqx7.json +++ b/advisories/unreviewed/2021/12/GHSA-32hr-rxc3-hqx7/GHSA-32hr-rxc3-hqx7.json @@ -7,12 +7,8 @@ "CVE-2020-27356" ], "details": "The debug-meta-data plugin 1.1.2 for WordPress allows XSS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-32rx-f52q-fcwp/GHSA-32rx-f52q-fcwp.json b/advisories/unreviewed/2021/12/GHSA-32rx-f52q-fcwp/GHSA-32rx-f52q-fcwp.json index 29129abe488..e6817bd377e 100644 --- a/advisories/unreviewed/2021/12/GHSA-32rx-f52q-fcwp/GHSA-32rx-f52q-fcwp.json +++ b/advisories/unreviewed/2021/12/GHSA-32rx-f52q-fcwp/GHSA-32rx-f52q-fcwp.json @@ -7,12 +7,8 @@ "CVE-2021-43673" ], "details": "dzzoffice 2.02.1_SC_UTF8 is affected by a Cross Site Scripting (XSS) vulnerability in explorerfile.php. The output of exit function will be print for the user exit(json_encode($return)).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-34v8-w8fc-vfgr/GHSA-34v8-w8fc-vfgr.json b/advisories/unreviewed/2021/12/GHSA-34v8-w8fc-vfgr/GHSA-34v8-w8fc-vfgr.json index 02a656bb5b2..b4861bffceb 100644 --- a/advisories/unreviewed/2021/12/GHSA-34v8-w8fc-vfgr/GHSA-34v8-w8fc-vfgr.json +++ b/advisories/unreviewed/2021/12/GHSA-34v8-w8fc-vfgr/GHSA-34v8-w8fc-vfgr.json @@ -7,12 +7,8 @@ "CVE-2021-37080" ], "details": "There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-3724-4mmc-j59x/GHSA-3724-4mmc-j59x.json b/advisories/unreviewed/2021/12/GHSA-3724-4mmc-j59x/GHSA-3724-4mmc-j59x.json index 1d048b5c8f4..5b9a9ef9555 100644 --- a/advisories/unreviewed/2021/12/GHSA-3724-4mmc-j59x/GHSA-3724-4mmc-j59x.json +++ b/advisories/unreviewed/2021/12/GHSA-3724-4mmc-j59x/GHSA-3724-4mmc-j59x.json @@ -7,12 +7,8 @@ "CVE-2021-42976" ], "details": "NoMachine Enterprise Desktop is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Desktop above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-37p2-chh2-92f8/GHSA-37p2-chh2-92f8.json b/advisories/unreviewed/2021/12/GHSA-37p2-chh2-92f8/GHSA-37p2-chh2-92f8.json index cfd22349ddc..5be28f63b56 100644 --- a/advisories/unreviewed/2021/12/GHSA-37p2-chh2-92f8/GHSA-37p2-chh2-92f8.json +++ b/advisories/unreviewed/2021/12/GHSA-37p2-chh2-92f8/GHSA-37p2-chh2-92f8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-39r8-3fqx-c3cj/GHSA-39r8-3fqx-c3cj.json b/advisories/unreviewed/2021/12/GHSA-39r8-3fqx-c3cj/GHSA-39r8-3fqx-c3cj.json index 49403778fd8..5b04b1960d1 100644 --- a/advisories/unreviewed/2021/12/GHSA-39r8-3fqx-c3cj/GHSA-39r8-3fqx-c3cj.json +++ b/advisories/unreviewed/2021/12/GHSA-39r8-3fqx-c3cj/GHSA-39r8-3fqx-c3cj.json @@ -7,12 +7,8 @@ "CVE-2020-29177" ], "details": "Z-BlogPHP v1.6.1.2100 was discovered to contain an arbitrary file deletion vulnerability via \\app_del.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2021/12/GHSA-3f3f-hw6v-3frj/GHSA-3f3f-hw6v-3frj.json b/advisories/unreviewed/2021/12/GHSA-3f3f-hw6v-3frj/GHSA-3f3f-hw6v-3frj.json index 257c53b81fe..5dd53acbe16 100644 --- a/advisories/unreviewed/2021/12/GHSA-3f3f-hw6v-3frj/GHSA-3f3f-hw6v-3frj.json +++ b/advisories/unreviewed/2021/12/GHSA-3f3f-hw6v-3frj/GHSA-3f3f-hw6v-3frj.json @@ -7,12 +7,8 @@ "CVE-2021-24718" ], "details": "The Contact Form, Survey & Popup Form Plugin for WordPress plugin before 1.5 does not properly sanitize some of its settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-3f87-h53g-6x57/GHSA-3f87-h53g-6x57.json b/advisories/unreviewed/2021/12/GHSA-3f87-h53g-6x57/GHSA-3f87-h53g-6x57.json index e92c730d454..c4ef18fadd3 100644 --- a/advisories/unreviewed/2021/12/GHSA-3f87-h53g-6x57/GHSA-3f87-h53g-6x57.json +++ b/advisories/unreviewed/2021/12/GHSA-3f87-h53g-6x57/GHSA-3f87-h53g-6x57.json @@ -7,12 +7,8 @@ "CVE-2021-20493" ], "details": "IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 197794.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-3pxm-5xmj-mpm2/GHSA-3pxm-5xmj-mpm2.json b/advisories/unreviewed/2021/12/GHSA-3pxm-5xmj-mpm2/GHSA-3pxm-5xmj-mpm2.json index bce1958dcf9..1e3350922f2 100644 --- a/advisories/unreviewed/2021/12/GHSA-3pxm-5xmj-mpm2/GHSA-3pxm-5xmj-mpm2.json +++ b/advisories/unreviewed/2021/12/GHSA-3pxm-5xmj-mpm2/GHSA-3pxm-5xmj-mpm2.json @@ -7,12 +7,8 @@ "CVE-2021-42685" ], "details": "An Integer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105 . The IOCTL Handler 0x22005B in the Accops HyWorks DVM Tools prior to v3.3.1.105 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-3r5m-qgj5-854w/GHSA-3r5m-qgj5-854w.json b/advisories/unreviewed/2021/12/GHSA-3r5m-qgj5-854w/GHSA-3r5m-qgj5-854w.json index 134514208ca..72fa919b479 100644 --- a/advisories/unreviewed/2021/12/GHSA-3r5m-qgj5-854w/GHSA-3r5m-qgj5-854w.json +++ b/advisories/unreviewed/2021/12/GHSA-3r5m-qgj5-854w/GHSA-3r5m-qgj5-854w.json @@ -7,12 +7,8 @@ "CVE-2021-43360" ], "details": "Sunnet eHRD e-mail delivery task schedule’s serialization function has inadequate input object validation and restriction, which allows a post-authenticated remote attacker with database access privilege, to execute arbitrary code and control the system or interrupt services.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-3w49-m976-rm7j/GHSA-3w49-m976-rm7j.json b/advisories/unreviewed/2021/12/GHSA-3w49-m976-rm7j/GHSA-3w49-m976-rm7j.json index d2cc4aa4565..84d682b096b 100644 --- a/advisories/unreviewed/2021/12/GHSA-3w49-m976-rm7j/GHSA-3w49-m976-rm7j.json +++ b/advisories/unreviewed/2021/12/GHSA-3w49-m976-rm7j/GHSA-3w49-m976-rm7j.json @@ -7,12 +7,8 @@ "CVE-2021-37061" ], "details": "There is a Uncontrolled Resource Consumption vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Screen projection application denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-3xmg-78j5-xfw9/GHSA-3xmg-78j5-xfw9.json b/advisories/unreviewed/2021/12/GHSA-3xmg-78j5-xfw9/GHSA-3xmg-78j5-xfw9.json index 3412359cf0e..8d5ddb81948 100644 --- a/advisories/unreviewed/2021/12/GHSA-3xmg-78j5-xfw9/GHSA-3xmg-78j5-xfw9.json +++ b/advisories/unreviewed/2021/12/GHSA-3xmg-78j5-xfw9/GHSA-3xmg-78j5-xfw9.json @@ -7,12 +7,8 @@ "CVE-2021-43687" ], "details": "chamilo-lms v1.11.14 is affected by a Cross Site Scripting (XSS) vulnerability in /plugin/jcapture/applet.php if an attacker passes a message hex2bin in the cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-45jj-6gxc-rh25/GHSA-45jj-6gxc-rh25.json b/advisories/unreviewed/2021/12/GHSA-45jj-6gxc-rh25/GHSA-45jj-6gxc-rh25.json index d6a28f1f0b7..32dff0e3658 100644 --- a/advisories/unreviewed/2021/12/GHSA-45jj-6gxc-rh25/GHSA-45jj-6gxc-rh25.json +++ b/advisories/unreviewed/2021/12/GHSA-45jj-6gxc-rh25/GHSA-45jj-6gxc-rh25.json @@ -7,12 +7,8 @@ "CVE-2021-39890" ], "details": "It was possible to bypass 2FA for LDAP users and access some specific pages with Basic Authentication in GitLab 14.1.1 and above.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-464v-qw54-xxxf/GHSA-464v-qw54-xxxf.json b/advisories/unreviewed/2021/12/GHSA-464v-qw54-xxxf/GHSA-464v-qw54-xxxf.json index dd9ce494f0c..6bf24c52244 100644 --- a/advisories/unreviewed/2021/12/GHSA-464v-qw54-xxxf/GHSA-464v-qw54-xxxf.json +++ b/advisories/unreviewed/2021/12/GHSA-464v-qw54-xxxf/GHSA-464v-qw54-xxxf.json @@ -7,12 +7,8 @@ "CVE-2021-37072" ], "details": "There is a Incorrect Calculation of Buffer Size vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to memory crash.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-46vv-9wj7-qvxg/GHSA-46vv-9wj7-qvxg.json b/advisories/unreviewed/2021/12/GHSA-46vv-9wj7-qvxg/GHSA-46vv-9wj7-qvxg.json index f9642b82781..e33ac0735f0 100644 --- a/advisories/unreviewed/2021/12/GHSA-46vv-9wj7-qvxg/GHSA-46vv-9wj7-qvxg.json +++ b/advisories/unreviewed/2021/12/GHSA-46vv-9wj7-qvxg/GHSA-46vv-9wj7-qvxg.json @@ -7,12 +7,8 @@ "CVE-2021-44022" ], "details": "A reachable assertion vulnerability in Trend Micro Apex One could allow an attacker to crash the program on affected installations, leading to a denial-of-service (DoS). Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-49f3-3ch6-4x47/GHSA-49f3-3ch6-4x47.json b/advisories/unreviewed/2021/12/GHSA-49f3-3ch6-4x47/GHSA-49f3-3ch6-4x47.json index b19a68d23cb..3e4cb220841 100644 --- a/advisories/unreviewed/2021/12/GHSA-49f3-3ch6-4x47/GHSA-49f3-3ch6-4x47.json +++ b/advisories/unreviewed/2021/12/GHSA-49f3-3ch6-4x47/GHSA-49f3-3ch6-4x47.json @@ -7,12 +7,8 @@ "CVE-2021-20851" ], "details": "Cross-site request forgery (CSRF) vulnerability in Browser and Operating System Finder versions prior to 1.2 allows a remote unauthenticated attacker to hijack the authentication of an administrator via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-4cmw-rq6h-3v7m/GHSA-4cmw-rq6h-3v7m.json b/advisories/unreviewed/2021/12/GHSA-4cmw-rq6h-3v7m/GHSA-4cmw-rq6h-3v7m.json index 04613435fca..0508c55b7ef 100644 --- a/advisories/unreviewed/2021/12/GHSA-4cmw-rq6h-3v7m/GHSA-4cmw-rq6h-3v7m.json +++ b/advisories/unreviewed/2021/12/GHSA-4cmw-rq6h-3v7m/GHSA-4cmw-rq6h-3v7m.json @@ -7,12 +7,8 @@ "CVE-2021-40334" ], "details": "Missing Handler vulnerability in the proprietary management protocol (port TCP 5558) of Hitachi Energy FOX61x, XCM20 allows an attacker that exploits the vulnerability by activating SSH on port TCP 5558 to cause disruption to the NMS and NE communication. This issue affects: Hitachi Energy FOX61x versions prior to R15A. Hitachi Energy XCM20 versions prior to R15A.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2021/12/GHSA-4gvv-82j8-4qwx/GHSA-4gvv-82j8-4qwx.json b/advisories/unreviewed/2021/12/GHSA-4gvv-82j8-4qwx/GHSA-4gvv-82j8-4qwx.json index d0278c5bffb..40181ab58de 100644 --- a/advisories/unreviewed/2021/12/GHSA-4gvv-82j8-4qwx/GHSA-4gvv-82j8-4qwx.json +++ b/advisories/unreviewed/2021/12/GHSA-4gvv-82j8-4qwx/GHSA-4gvv-82j8-4qwx.json @@ -7,12 +7,8 @@ "CVE-2021-42131" ], "details": "A SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with access to the Inforail Service to perform privilege escalation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-4h2m-fw75-5h66/GHSA-4h2m-fw75-5h66.json b/advisories/unreviewed/2021/12/GHSA-4h2m-fw75-5h66/GHSA-4h2m-fw75-5h66.json index ec48a8b214c..11b6633bab0 100644 --- a/advisories/unreviewed/2021/12/GHSA-4h2m-fw75-5h66/GHSA-4h2m-fw75-5h66.json +++ b/advisories/unreviewed/2021/12/GHSA-4h2m-fw75-5h66/GHSA-4h2m-fw75-5h66.json @@ -7,12 +7,8 @@ "CVE-2021-37089" ], "details": "There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to kernel restart.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-4jx4-q2fr-hj53/GHSA-4jx4-q2fr-hj53.json b/advisories/unreviewed/2021/12/GHSA-4jx4-q2fr-hj53/GHSA-4jx4-q2fr-hj53.json index dd128528781..9af707ef09c 100644 --- a/advisories/unreviewed/2021/12/GHSA-4jx4-q2fr-hj53/GHSA-4jx4-q2fr-hj53.json +++ b/advisories/unreviewed/2021/12/GHSA-4jx4-q2fr-hj53/GHSA-4jx4-q2fr-hj53.json @@ -7,12 +7,8 @@ "CVE-2021-37055" ], "details": "There is a Logic bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to obtain certain device information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2021/12/GHSA-4pm4-24vg-5873/GHSA-4pm4-24vg-5873.json b/advisories/unreviewed/2021/12/GHSA-4pm4-24vg-5873/GHSA-4pm4-24vg-5873.json index fef9a6545d8..b0c73ce449b 100644 --- a/advisories/unreviewed/2021/12/GHSA-4pm4-24vg-5873/GHSA-4pm4-24vg-5873.json +++ b/advisories/unreviewed/2021/12/GHSA-4pm4-24vg-5873/GHSA-4pm4-24vg-5873.json @@ -7,12 +7,8 @@ "CVE-2021-43681" ], "details": "SakuraPanel v1.0.1.1 is affected by a Cross Site Scripting (XSS) vulnerability in /master/core/PostHandler.php. The exit function will terminate the script and print the message $data['proxy_name'].", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-4qm3-4v98-g42c/GHSA-4qm3-4v98-g42c.json b/advisories/unreviewed/2021/12/GHSA-4qm3-4v98-g42c/GHSA-4qm3-4v98-g42c.json index bcdf6fba917..2988b7434af 100644 --- a/advisories/unreviewed/2021/12/GHSA-4qm3-4v98-g42c/GHSA-4qm3-4v98-g42c.json +++ b/advisories/unreviewed/2021/12/GHSA-4qm3-4v98-g42c/GHSA-4qm3-4v98-g42c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-4rv3-gffj-q2p5/GHSA-4rv3-gffj-q2p5.json b/advisories/unreviewed/2021/12/GHSA-4rv3-gffj-q2p5/GHSA-4rv3-gffj-q2p5.json index 0e4c388c6a0..3d501f2e24e 100644 --- a/advisories/unreviewed/2021/12/GHSA-4rv3-gffj-q2p5/GHSA-4rv3-gffj-q2p5.json +++ b/advisories/unreviewed/2021/12/GHSA-4rv3-gffj-q2p5/GHSA-4rv3-gffj-q2p5.json @@ -7,12 +7,8 @@ "CVE-2021-44148" ], "details": "GL.iNet GL-AR150 2.x before 3.x devices, configured as repeaters, allow cgi-bin/router_cgi?action=scanwifi XSS when an attacker creates an SSID with an XSS payload as the name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-52m7-gvgw-j355/GHSA-52m7-gvgw-j355.json b/advisories/unreviewed/2021/12/GHSA-52m7-gvgw-j355/GHSA-52m7-gvgw-j355.json index b49783b0c8e..cf54b879cd3 100644 --- a/advisories/unreviewed/2021/12/GHSA-52m7-gvgw-j355/GHSA-52m7-gvgw-j355.json +++ b/advisories/unreviewed/2021/12/GHSA-52m7-gvgw-j355/GHSA-52m7-gvgw-j355.json @@ -7,12 +7,8 @@ "CVE-2021-43003" ], "details": "Amzetta zPortal Windows zClient is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal Windows zClient <= v3.2.8180.148 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-54wf-xwvm-j98j/GHSA-54wf-xwvm-j98j.json b/advisories/unreviewed/2021/12/GHSA-54wf-xwvm-j98j/GHSA-54wf-xwvm-j98j.json index d928ed7fa3b..1faaacf598f 100644 --- a/advisories/unreviewed/2021/12/GHSA-54wf-xwvm-j98j/GHSA-54wf-xwvm-j98j.json +++ b/advisories/unreviewed/2021/12/GHSA-54wf-xwvm-j98j/GHSA-54wf-xwvm-j98j.json @@ -7,12 +7,8 @@ "CVE-2021-20857" ], "details": "Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-58pg-75f2-3jxj/GHSA-58pg-75f2-3jxj.json b/advisories/unreviewed/2021/12/GHSA-58pg-75f2-3jxj/GHSA-58pg-75f2-3jxj.json index 43a2c7423d2..446ab840f3e 100644 --- a/advisories/unreviewed/2021/12/GHSA-58pg-75f2-3jxj/GHSA-58pg-75f2-3jxj.json +++ b/advisories/unreviewed/2021/12/GHSA-58pg-75f2-3jxj/GHSA-58pg-75f2-3jxj.json @@ -7,12 +7,8 @@ "CVE-2021-23258" ], "details": "Authenticated users with Administrator or Developer roles may execute OS commands by SPEL Expression in Spring beans. SPEL Expression does not have security restrictions, which will cause attackers to execute arbitrary commands remotely (RCE).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-5cxv-f998-83v8/GHSA-5cxv-f998-83v8.json b/advisories/unreviewed/2021/12/GHSA-5cxv-f998-83v8/GHSA-5cxv-f998-83v8.json index 8495ed0f671..e66016b0d51 100644 --- a/advisories/unreviewed/2021/12/GHSA-5cxv-f998-83v8/GHSA-5cxv-f998-83v8.json +++ b/advisories/unreviewed/2021/12/GHSA-5cxv-f998-83v8/GHSA-5cxv-f998-83v8.json @@ -7,12 +7,8 @@ "CVE-2021-42127" ], "details": "A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 using Inforail Service allows arbitrary code execution via Data Repository Service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-5f3c-9rrr-9rp4/GHSA-5f3c-9rrr-9rp4.json b/advisories/unreviewed/2021/12/GHSA-5f3c-9rrr-9rp4/GHSA-5f3c-9rrr-9rp4.json index 8dbf3206783..3aa344add3e 100644 --- a/advisories/unreviewed/2021/12/GHSA-5f3c-9rrr-9rp4/GHSA-5f3c-9rrr-9rp4.json +++ b/advisories/unreviewed/2021/12/GHSA-5f3c-9rrr-9rp4/GHSA-5f3c-9rrr-9rp4.json @@ -7,12 +7,8 @@ "CVE-2021-20847" ], "details": "Cross-site scripting vulnerability in Wi-Fi STATION SH-52A (38JP_1_11G, 38JP_1_11J, 38JP_1_11K, 38JP_1_11L, 38JP_1_26F, 38JP_1_26G, 38JP_1_26J, 38JP_2_03B, and 38JP_2_03C) allows a remote unauthenticated attacker to inject an arbitrary script via WebUI of the device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-5fx7-rr4q-mjpx/GHSA-5fx7-rr4q-mjpx.json b/advisories/unreviewed/2021/12/GHSA-5fx7-rr4q-mjpx/GHSA-5fx7-rr4q-mjpx.json index 91732d4f0b5..738da16b489 100644 --- a/advisories/unreviewed/2021/12/GHSA-5fx7-rr4q-mjpx/GHSA-5fx7-rr4q-mjpx.json +++ b/advisories/unreviewed/2021/12/GHSA-5fx7-rr4q-mjpx/GHSA-5fx7-rr4q-mjpx.json @@ -7,12 +7,8 @@ "CVE-2021-25784" ], "details": "Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Edit Article.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-5p7c-j35c-49w7/GHSA-5p7c-j35c-49w7.json b/advisories/unreviewed/2021/12/GHSA-5p7c-j35c-49w7/GHSA-5p7c-j35c-49w7.json index f3594f34a88..3a970adb811 100644 --- a/advisories/unreviewed/2021/12/GHSA-5p7c-j35c-49w7/GHSA-5p7c-j35c-49w7.json +++ b/advisories/unreviewed/2021/12/GHSA-5p7c-j35c-49w7/GHSA-5p7c-j35c-49w7.json @@ -7,12 +7,8 @@ "CVE-2021-37048" ], "details": "There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to fake visitors to control PC,play a video,etc.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-5q7q-7mx2-p7hf/GHSA-5q7q-7mx2-p7hf.json b/advisories/unreviewed/2021/12/GHSA-5q7q-7mx2-p7hf/GHSA-5q7q-7mx2-p7hf.json index 616b319925e..27230915db5 100644 --- a/advisories/unreviewed/2021/12/GHSA-5q7q-7mx2-p7hf/GHSA-5q7q-7mx2-p7hf.json +++ b/advisories/unreviewed/2021/12/GHSA-5q7q-7mx2-p7hf/GHSA-5q7q-7mx2-p7hf.json @@ -7,12 +7,8 @@ "CVE-2021-20858" ], "details": "Cross-site scripting vulnerability in ELECOM LAN router WRC-2533GHBK-I firmware v1.20 and prior allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-5rv8-9mmg-vr86/GHSA-5rv8-9mmg-vr86.json b/advisories/unreviewed/2021/12/GHSA-5rv8-9mmg-vr86/GHSA-5rv8-9mmg-vr86.json index 866940bec1f..1b37970c23e 100644 --- a/advisories/unreviewed/2021/12/GHSA-5rv8-9mmg-vr86/GHSA-5rv8-9mmg-vr86.json +++ b/advisories/unreviewed/2021/12/GHSA-5rv8-9mmg-vr86/GHSA-5rv8-9mmg-vr86.json @@ -7,12 +7,8 @@ "CVE-2021-37077" ], "details": "There is a NULL Pointer Dereference vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to kernel crash.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-5vp7-vvx6-j367/GHSA-5vp7-vvx6-j367.json b/advisories/unreviewed/2021/12/GHSA-5vp7-vvx6-j367/GHSA-5vp7-vvx6-j367.json index 0cad6219635..5495f1da16a 100644 --- a/advisories/unreviewed/2021/12/GHSA-5vp7-vvx6-j367/GHSA-5vp7-vvx6-j367.json +++ b/advisories/unreviewed/2021/12/GHSA-5vp7-vvx6-j367/GHSA-5vp7-vvx6-j367.json @@ -7,12 +7,8 @@ "CVE-2021-37046" ], "details": "There is a Memory leak vulnerability with the codec detection module in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart due to memory exhaustion.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-63q6-5crp-ppcf/GHSA-63q6-5crp-ppcf.json b/advisories/unreviewed/2021/12/GHSA-63q6-5crp-ppcf/GHSA-63q6-5crp-ppcf.json index dc731534ff7..d815ed36bc1 100644 --- a/advisories/unreviewed/2021/12/GHSA-63q6-5crp-ppcf/GHSA-63q6-5crp-ppcf.json +++ b/advisories/unreviewed/2021/12/GHSA-63q6-5crp-ppcf/GHSA-63q6-5crp-ppcf.json @@ -7,12 +7,8 @@ "CVE-2021-37099" ], "details": "There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to delete any file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-63qm-gr74-hvj8/GHSA-63qm-gr74-hvj8.json b/advisories/unreviewed/2021/12/GHSA-63qm-gr74-hvj8/GHSA-63qm-gr74-hvj8.json index a967c4f1435..38f831ae808 100644 --- a/advisories/unreviewed/2021/12/GHSA-63qm-gr74-hvj8/GHSA-63qm-gr74-hvj8.json +++ b/advisories/unreviewed/2021/12/GHSA-63qm-gr74-hvj8/GHSA-63qm-gr74-hvj8.json @@ -7,12 +7,8 @@ "CVE-2021-37056" ], "details": "There is an Improper permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to obtain certain device information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-647f-mvfq-8f5g/GHSA-647f-mvfq-8f5g.json b/advisories/unreviewed/2021/12/GHSA-647f-mvfq-8f5g/GHSA-647f-mvfq-8f5g.json index 87e6c0e9a05..99ad372effe 100644 --- a/advisories/unreviewed/2021/12/GHSA-647f-mvfq-8f5g/GHSA-647f-mvfq-8f5g.json +++ b/advisories/unreviewed/2021/12/GHSA-647f-mvfq-8f5g/GHSA-647f-mvfq-8f5g.json @@ -7,12 +7,8 @@ "CVE-2021-42994" ], "details": "Donglify is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Donglify above 1.0.12309 below 1.7.14110 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-66gx-65jv-6rfw/GHSA-66gx-65jv-6rfw.json b/advisories/unreviewed/2021/12/GHSA-66gx-65jv-6rfw/GHSA-66gx-65jv-6rfw.json index 3423c98c231..b81a0b72836 100644 --- a/advisories/unreviewed/2021/12/GHSA-66gx-65jv-6rfw/GHSA-66gx-65jv-6rfw.json +++ b/advisories/unreviewed/2021/12/GHSA-66gx-65jv-6rfw/GHSA-66gx-65jv-6rfw.json @@ -7,12 +7,8 @@ "CVE-2021-37063" ], "details": "There is a Cryptographic Issues vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to read and delete images of Harmony devices.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2021/12/GHSA-66h7-82h8-5pgq/GHSA-66h7-82h8-5pgq.json b/advisories/unreviewed/2021/12/GHSA-66h7-82h8-5pgq/GHSA-66h7-82h8-5pgq.json index e67ea7535f4..8526875272d 100644 --- a/advisories/unreviewed/2021/12/GHSA-66h7-82h8-5pgq/GHSA-66h7-82h8-5pgq.json +++ b/advisories/unreviewed/2021/12/GHSA-66h7-82h8-5pgq/GHSA-66h7-82h8-5pgq.json @@ -7,12 +7,8 @@ "CVE-2021-37067" ], "details": "There is a Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Confidentiality impacted.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-6857-r4gq-xgmw/GHSA-6857-r4gq-xgmw.json b/advisories/unreviewed/2021/12/GHSA-6857-r4gq-xgmw/GHSA-6857-r4gq-xgmw.json index 4ea318f833b..e0ac041e91a 100644 --- a/advisories/unreviewed/2021/12/GHSA-6857-r4gq-xgmw/GHSA-6857-r4gq-xgmw.json +++ b/advisories/unreviewed/2021/12/GHSA-6857-r4gq-xgmw/GHSA-6857-r4gq-xgmw.json @@ -7,12 +7,8 @@ "CVE-2021-24866" ], "details": "The WP Data Access WordPress plugin before 5.0.0 does not properly sanitise and escape the backup_date parameter before using it a SQL statement, leading to a SQL injection issue and could allow arbitrary table deletion", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-69pv-7jmq-p3xp/GHSA-69pv-7jmq-p3xp.json b/advisories/unreviewed/2021/12/GHSA-69pv-7jmq-p3xp/GHSA-69pv-7jmq-p3xp.json index 67b832f6a86..24b0c7f7234 100644 --- a/advisories/unreviewed/2021/12/GHSA-69pv-7jmq-p3xp/GHSA-69pv-7jmq-p3xp.json +++ b/advisories/unreviewed/2021/12/GHSA-69pv-7jmq-p3xp/GHSA-69pv-7jmq-p3xp.json @@ -7,12 +7,8 @@ "CVE-2021-40859" ], "details": "Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management application full administrative access to the device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2021/12/GHSA-6f6c-wh7w-4382/GHSA-6f6c-wh7w-4382.json b/advisories/unreviewed/2021/12/GHSA-6f6c-wh7w-4382/GHSA-6f6c-wh7w-4382.json index 3aa0e4899cc..4fd8521c7a4 100644 --- a/advisories/unreviewed/2021/12/GHSA-6f6c-wh7w-4382/GHSA-6f6c-wh7w-4382.json +++ b/advisories/unreviewed/2021/12/GHSA-6f6c-wh7w-4382/GHSA-6f6c-wh7w-4382.json @@ -7,12 +7,8 @@ "CVE-2021-37073" ], "details": "There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the detection result is tampered with.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-6jwf-w968-6fp9/GHSA-6jwf-w968-6fp9.json b/advisories/unreviewed/2021/12/GHSA-6jwf-w968-6fp9/GHSA-6jwf-w968-6fp9.json index 57ffeff5cdc..4a74e6bb94e 100644 --- a/advisories/unreviewed/2021/12/GHSA-6jwf-w968-6fp9/GHSA-6jwf-w968-6fp9.json +++ b/advisories/unreviewed/2021/12/GHSA-6jwf-w968-6fp9/GHSA-6jwf-w968-6fp9.json @@ -7,12 +7,8 @@ "CVE-2021-37071" ], "details": "There is a Business Logic Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to persistent dos.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2021/12/GHSA-6mpr-qcqw-wp65/GHSA-6mpr-qcqw-wp65.json b/advisories/unreviewed/2021/12/GHSA-6mpr-qcqw-wp65/GHSA-6mpr-qcqw-wp65.json index 74e1bc02284..3d02d933272 100644 --- a/advisories/unreviewed/2021/12/GHSA-6mpr-qcqw-wp65/GHSA-6mpr-qcqw-wp65.json +++ b/advisories/unreviewed/2021/12/GHSA-6mpr-qcqw-wp65/GHSA-6mpr-qcqw-wp65.json @@ -7,12 +7,8 @@ "CVE-2021-42688" ], "details": "An Integer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22005B in the Accops HyWorks Windows Client prior to v 3.2.8.200 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-6pq5-g5mf-96hw/GHSA-6pq5-g5mf-96hw.json b/advisories/unreviewed/2021/12/GHSA-6pq5-g5mf-96hw/GHSA-6pq5-g5mf-96hw.json index e88d03e6308..33e8e0dea4b 100644 --- a/advisories/unreviewed/2021/12/GHSA-6pq5-g5mf-96hw/GHSA-6pq5-g5mf-96hw.json +++ b/advisories/unreviewed/2021/12/GHSA-6pq5-g5mf-96hw/GHSA-6pq5-g5mf-96hw.json @@ -7,12 +7,8 @@ "CVE-2021-20852" ], "details": "Buffer overflow vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator privilege to execute an arbitrary OS command via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-6v7r-rprm-9cxf/GHSA-6v7r-rprm-9cxf.json b/advisories/unreviewed/2021/12/GHSA-6v7r-rprm-9cxf/GHSA-6v7r-rprm-9cxf.json index 81df4ea6b35..d9ef1e9d35c 100644 --- a/advisories/unreviewed/2021/12/GHSA-6v7r-rprm-9cxf/GHSA-6v7r-rprm-9cxf.json +++ b/advisories/unreviewed/2021/12/GHSA-6v7r-rprm-9cxf/GHSA-6v7r-rprm-9cxf.json @@ -7,12 +7,8 @@ "CVE-2021-37298" ], "details": "Laravel v5.1 was discovered to contain a deserialization vulnerability via the component \\Mockery\\Generator\\DefinedTargetClass.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-744v-vg57-852g/GHSA-744v-vg57-852g.json b/advisories/unreviewed/2021/12/GHSA-744v-vg57-852g/GHSA-744v-vg57-852g.json index 65cf3d4df48..7f0e7135bad 100644 --- a/advisories/unreviewed/2021/12/GHSA-744v-vg57-852g/GHSA-744v-vg57-852g.json +++ b/advisories/unreviewed/2021/12/GHSA-744v-vg57-852g/GHSA-744v-vg57-852g.json @@ -7,12 +7,8 @@ "CVE-2021-28236" ], "details": "LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-756m-jgjv-8g68/GHSA-756m-jgjv-8g68.json b/advisories/unreviewed/2021/12/GHSA-756m-jgjv-8g68/GHSA-756m-jgjv-8g68.json index ca84fea6a52..7e7386ed91d 100644 --- a/advisories/unreviewed/2021/12/GHSA-756m-jgjv-8g68/GHSA-756m-jgjv-8g68.json +++ b/advisories/unreviewed/2021/12/GHSA-756m-jgjv-8g68/GHSA-756m-jgjv-8g68.json @@ -7,12 +7,8 @@ "CVE-2021-24943" ], "details": "The Registrations for the Events Calendar WordPress plugin before 2.7.6 does not sanitise and escape the event_id in the rtec_send_unregister_link AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL statement, leading to an unauthenticated SQL injection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-7j2q-gmf9-hmhh/GHSA-7j2q-gmf9-hmhh.json b/advisories/unreviewed/2021/12/GHSA-7j2q-gmf9-hmhh/GHSA-7j2q-gmf9-hmhh.json index 4083ece3a49..3c2178c218e 100644 --- a/advisories/unreviewed/2021/12/GHSA-7j2q-gmf9-hmhh/GHSA-7j2q-gmf9-hmhh.json +++ b/advisories/unreviewed/2021/12/GHSA-7j2q-gmf9-hmhh/GHSA-7j2q-gmf9-hmhh.json @@ -7,12 +7,8 @@ "CVE-2021-24935" ], "details": "The WP Google Fonts WordPress plugin before 3.1.5 does not escape the googlefont_ajax_name and googlefont_ajax_family parameter of the googlefont_action AJAx action (available to any authenticated user) before outputing them in attributes, leading Reflected Cross-Site Scripting issues", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-7m2v-fm55-pr79/GHSA-7m2v-fm55-pr79.json b/advisories/unreviewed/2021/12/GHSA-7m2v-fm55-pr79/GHSA-7m2v-fm55-pr79.json index 605668c15ae..808ebbc308d 100644 --- a/advisories/unreviewed/2021/12/GHSA-7m2v-fm55-pr79/GHSA-7m2v-fm55-pr79.json +++ b/advisories/unreviewed/2021/12/GHSA-7m2v-fm55-pr79/GHSA-7m2v-fm55-pr79.json @@ -7,12 +7,8 @@ "CVE-2021-43006" ], "details": "AmZetta Amzetta zPortal DVM Tools is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal DVM Tools <= v3.3.148.148 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-7p58-rq3f-p4j3/GHSA-7p58-rq3f-p4j3.json b/advisories/unreviewed/2021/12/GHSA-7p58-rq3f-p4j3/GHSA-7p58-rq3f-p4j3.json index c991260bf05..82e64ddb0e5 100644 --- a/advisories/unreviewed/2021/12/GHSA-7p58-rq3f-p4j3/GHSA-7p58-rq3f-p4j3.json +++ b/advisories/unreviewed/2021/12/GHSA-7p58-rq3f-p4j3/GHSA-7p58-rq3f-p4j3.json @@ -7,12 +7,8 @@ "CVE-2021-40091" ], "details": "An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-7rm9-8r56-3fwr/GHSA-7rm9-8r56-3fwr.json b/advisories/unreviewed/2021/12/GHSA-7rm9-8r56-3fwr/GHSA-7rm9-8r56-3fwr.json index e8c94df4ad6..b7932958749 100644 --- a/advisories/unreviewed/2021/12/GHSA-7rm9-8r56-3fwr/GHSA-7rm9-8r56-3fwr.json +++ b/advisories/unreviewed/2021/12/GHSA-7rm9-8r56-3fwr/GHSA-7rm9-8r56-3fwr.json @@ -7,12 +7,8 @@ "CVE-2021-29756" ], "details": "IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site request forgery (CSRF) in the My Inbox page which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 202167.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-7rpc-mvmm-qr9f/GHSA-7rpc-mvmm-qr9f.json b/advisories/unreviewed/2021/12/GHSA-7rpc-mvmm-qr9f/GHSA-7rpc-mvmm-qr9f.json index 283cfb7cf6b..f1453dd746d 100644 --- a/advisories/unreviewed/2021/12/GHSA-7rpc-mvmm-qr9f/GHSA-7rpc-mvmm-qr9f.json +++ b/advisories/unreviewed/2021/12/GHSA-7rpc-mvmm-qr9f/GHSA-7rpc-mvmm-qr9f.json @@ -7,12 +7,8 @@ "CVE-2021-35346" ], "details": "tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function HevcSpsUnit::short_term_ref_pic_set(int) in hevc.cpp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-7rrv-p595-8xg5/GHSA-7rrv-p595-8xg5.json b/advisories/unreviewed/2021/12/GHSA-7rrv-p595-8xg5/GHSA-7rrv-p595-8xg5.json index c47f220e45e..5e181b6ed42 100644 --- a/advisories/unreviewed/2021/12/GHSA-7rrv-p595-8xg5/GHSA-7rrv-p595-8xg5.json +++ b/advisories/unreviewed/2021/12/GHSA-7rrv-p595-8xg5/GHSA-7rrv-p595-8xg5.json @@ -7,12 +7,8 @@ "CVE-2021-37070" ], "details": "There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to process crash.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-7x5v-x5hh-f8f3/GHSA-7x5v-x5hh-f8f3.json b/advisories/unreviewed/2021/12/GHSA-7x5v-x5hh-f8f3/GHSA-7x5v-x5hh-f8f3.json index 559ab613c5c..b31cf40505e 100644 --- a/advisories/unreviewed/2021/12/GHSA-7x5v-x5hh-f8f3/GHSA-7x5v-x5hh-f8f3.json +++ b/advisories/unreviewed/2021/12/GHSA-7x5v-x5hh-f8f3/GHSA-7x5v-x5hh-f8f3.json @@ -7,12 +7,8 @@ "CVE-2021-25041" ], "details": "The Photo Gallery by 10Web WordPress plugin before 1.5.68 is vulnerable to Reflected Cross-Site Scripting (XSS) issues via the bwg_album_breadcrumb_0 and shortcode_id GET parameters passed to the bwg_frontend_data AJAX action", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-7xc3-h85x-39mf/GHSA-7xc3-h85x-39mf.json b/advisories/unreviewed/2021/12/GHSA-7xc3-h85x-39mf/GHSA-7xc3-h85x-39mf.json index 5aee3da0e79..9ce0bd3bce5 100644 --- a/advisories/unreviewed/2021/12/GHSA-7xc3-h85x-39mf/GHSA-7xc3-h85x-39mf.json +++ b/advisories/unreviewed/2021/12/GHSA-7xc3-h85x-39mf/GHSA-7xc3-h85x-39mf.json @@ -7,12 +7,8 @@ "CVE-2021-40578" ], "details": "Authenticated Blind & Error-based SQL injection vulnerability was discovered in Online Enrollment Management System in PHP and PayPal Free Source Code 1.0, that allows attackers to obtain sensitive information and execute arbitrary SQL commands via IDNO parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-83p4-mx2g-gv7f/GHSA-83p4-mx2g-gv7f.json b/advisories/unreviewed/2021/12/GHSA-83p4-mx2g-gv7f/GHSA-83p4-mx2g-gv7f.json index 6632dbf18fc..a6baf648e6e 100644 --- a/advisories/unreviewed/2021/12/GHSA-83p4-mx2g-gv7f/GHSA-83p4-mx2g-gv7f.json +++ b/advisories/unreviewed/2021/12/GHSA-83p4-mx2g-gv7f/GHSA-83p4-mx2g-gv7f.json @@ -7,12 +7,8 @@ "CVE-2021-42988" ], "details": "Eltima USB Network Gate is affected by Buffer Overflow. IOCTL Handler 0x22001B in the USB Network Gate above 7.0.1370 below 9.2.2420 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-8c8h-r7v9-wmwq/GHSA-8c8h-r7v9-wmwq.json b/advisories/unreviewed/2021/12/GHSA-8c8h-r7v9-wmwq/GHSA-8c8h-r7v9-wmwq.json index e772eeedac4..3ff475f5d2c 100644 --- a/advisories/unreviewed/2021/12/GHSA-8c8h-r7v9-wmwq/GHSA-8c8h-r7v9-wmwq.json +++ b/advisories/unreviewed/2021/12/GHSA-8c8h-r7v9-wmwq/GHSA-8c8h-r7v9-wmwq.json @@ -7,12 +7,8 @@ "CVE-2021-24938" ], "details": "The WOOCS WordPress plugin before 1.3.7.1 does not sanitise and escape the key parameter of the woocs_update_profiles_data AJAX action (available to any authenticated user) before outputting it back in the response, leading to a Reflected cross-Site Scripting issue", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-8cr9-rq58-w482/GHSA-8cr9-rq58-w482.json b/advisories/unreviewed/2021/12/GHSA-8cr9-rq58-w482/GHSA-8cr9-rq58-w482.json index d762c90df41..41ec6a70ac2 100644 --- a/advisories/unreviewed/2021/12/GHSA-8cr9-rq58-w482/GHSA-8cr9-rq58-w482.json +++ b/advisories/unreviewed/2021/12/GHSA-8cr9-rq58-w482/GHSA-8cr9-rq58-w482.json @@ -7,12 +7,8 @@ "CVE-2021-25783" ], "details": "Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Article Search.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-8g5j-gq7m-gjfc/GHSA-8g5j-gq7m-gjfc.json b/advisories/unreviewed/2021/12/GHSA-8g5j-gq7m-gjfc/GHSA-8g5j-gq7m-gjfc.json index a9a1649a0c5..bbf5067d8bf 100644 --- a/advisories/unreviewed/2021/12/GHSA-8g5j-gq7m-gjfc/GHSA-8g5j-gq7m-gjfc.json +++ b/advisories/unreviewed/2021/12/GHSA-8g5j-gq7m-gjfc/GHSA-8g5j-gq7m-gjfc.json @@ -7,12 +7,8 @@ "CVE-2021-37059" ], "details": "There is a Weaknesses Introduced During Design", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2021/12/GHSA-8ggf-hm8x-6hp7/GHSA-8ggf-hm8x-6hp7.json b/advisories/unreviewed/2021/12/GHSA-8ggf-hm8x-6hp7/GHSA-8ggf-hm8x-6hp7.json index bb8bff3d71c..f418819dadb 100644 --- a/advisories/unreviewed/2021/12/GHSA-8ggf-hm8x-6hp7/GHSA-8ggf-hm8x-6hp7.json +++ b/advisories/unreviewed/2021/12/GHSA-8ggf-hm8x-6hp7/GHSA-8ggf-hm8x-6hp7.json @@ -7,12 +7,8 @@ "CVE-2021-26777" ], "details": "Buffer overflow vulnerability in function SetFirewall in index.cgi in CIRCUTOR COMPACT DC-S BASIC smart metering concentrator Firwmare version CIR_CDC_v1.2.17, allows attackers to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-8p44-cmf6-jhfj/GHSA-8p44-cmf6-jhfj.json b/advisories/unreviewed/2021/12/GHSA-8p44-cmf6-jhfj/GHSA-8p44-cmf6-jhfj.json index 962a433219f..048b62b6fa3 100644 --- a/advisories/unreviewed/2021/12/GHSA-8p44-cmf6-jhfj/GHSA-8p44-cmf6-jhfj.json +++ b/advisories/unreviewed/2021/12/GHSA-8p44-cmf6-jhfj/GHSA-8p44-cmf6-jhfj.json @@ -7,12 +7,8 @@ "CVE-2021-37096" ], "details": "There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to user privacy disclosed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-8qx5-5p59-qw5x/GHSA-8qx5-5p59-qw5x.json b/advisories/unreviewed/2021/12/GHSA-8qx5-5p59-qw5x/GHSA-8qx5-5p59-qw5x.json index db2b244c643..e0d00e59706 100644 --- a/advisories/unreviewed/2021/12/GHSA-8qx5-5p59-qw5x/GHSA-8qx5-5p59-qw5x.json +++ b/advisories/unreviewed/2021/12/GHSA-8qx5-5p59-qw5x/GHSA-8qx5-5p59-qw5x.json @@ -7,12 +7,8 @@ "CVE-2021-37011" ], "details": "There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-8rq5-r7hg-52gr/GHSA-8rq5-r7hg-52gr.json b/advisories/unreviewed/2021/12/GHSA-8rq5-r7hg-52gr/GHSA-8rq5-r7hg-52gr.json index 366edce57b9..bbaa813e5ca 100644 --- a/advisories/unreviewed/2021/12/GHSA-8rq5-r7hg-52gr/GHSA-8rq5-r7hg-52gr.json +++ b/advisories/unreviewed/2021/12/GHSA-8rq5-r7hg-52gr/GHSA-8rq5-r7hg-52gr.json @@ -7,12 +7,8 @@ "CVE-2021-24939" ], "details": "The LoginWP (Formerly Peter's Login Redirect) WordPress plugin before 3.0.0.5 does not sanitise and escape the rul_login_url and rul_logout_url parameter before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting issue", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-8w4w-47r7-gx5v/GHSA-8w4w-47r7-gx5v.json b/advisories/unreviewed/2021/12/GHSA-8w4w-47r7-gx5v/GHSA-8w4w-47r7-gx5v.json index 5ae6b45e93e..cdb261e2534 100644 --- a/advisories/unreviewed/2021/12/GHSA-8w4w-47r7-gx5v/GHSA-8w4w-47r7-gx5v.json +++ b/advisories/unreviewed/2021/12/GHSA-8w4w-47r7-gx5v/GHSA-8w4w-47r7-gx5v.json @@ -7,12 +7,8 @@ "CVE-2021-40096" ], "details": "A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via modification of the authorisationUrl in some integration configurations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-922p-4vr4-cgvc/GHSA-922p-4vr4-cgvc.json b/advisories/unreviewed/2021/12/GHSA-922p-4vr4-cgvc/GHSA-922p-4vr4-cgvc.json index 04c55da9051..894659df503 100644 --- a/advisories/unreviewed/2021/12/GHSA-922p-4vr4-cgvc/GHSA-922p-4vr4-cgvc.json +++ b/advisories/unreviewed/2021/12/GHSA-922p-4vr4-cgvc/GHSA-922p-4vr4-cgvc.json @@ -7,12 +7,8 @@ "CVE-2015-20106" ], "details": "The ClickBank Affiliate Ads WordPress plugin through 1.20 does not escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-92j8-9v66-gpxg/GHSA-92j8-9v66-gpxg.json b/advisories/unreviewed/2021/12/GHSA-92j8-9v66-gpxg/GHSA-92j8-9v66-gpxg.json index 66857084c48..6f972f0beea 100644 --- a/advisories/unreviewed/2021/12/GHSA-92j8-9v66-gpxg/GHSA-92j8-9v66-gpxg.json +++ b/advisories/unreviewed/2021/12/GHSA-92j8-9v66-gpxg/GHSA-92j8-9v66-gpxg.json @@ -7,12 +7,8 @@ "CVE-2021-42993" ], "details": "FlexiHub For Windows is affected by Integer Overflow. IOCTL Handler 0x22001B in the FlexiHub For Windows above 2.0.4340 below 5.3.14268 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-93c3-hgqg-2fpr/GHSA-93c3-hgqg-2fpr.json b/advisories/unreviewed/2021/12/GHSA-93c3-hgqg-2fpr/GHSA-93c3-hgqg-2fpr.json index 7f6ce867f8a..05e52250932 100644 --- a/advisories/unreviewed/2021/12/GHSA-93c3-hgqg-2fpr/GHSA-93c3-hgqg-2fpr.json +++ b/advisories/unreviewed/2021/12/GHSA-93c3-hgqg-2fpr/GHSA-93c3-hgqg-2fpr.json @@ -7,12 +7,8 @@ "CVE-2021-37065" ], "details": "There is a Integer Overflow or Wraparound vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Confidentiality or Availability impacted.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-94pj-f7mj-c6q8/GHSA-94pj-f7mj-c6q8.json b/advisories/unreviewed/2021/12/GHSA-94pj-f7mj-c6q8/GHSA-94pj-f7mj-c6q8.json index 178941c21e3..9d2a62f5b4d 100644 --- a/advisories/unreviewed/2021/12/GHSA-94pj-f7mj-c6q8/GHSA-94pj-f7mj-c6q8.json +++ b/advisories/unreviewed/2021/12/GHSA-94pj-f7mj-c6q8/GHSA-94pj-f7mj-c6q8.json @@ -7,12 +7,8 @@ "CVE-2021-40313" ], "details": "Piwigo v11.5 was discovered to contain a SQL injection vulnerability via the parameter pwg_token in /admin/batch_manager_global.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-94q6-cm2f-p4pc/GHSA-94q6-cm2f-p4pc.json b/advisories/unreviewed/2021/12/GHSA-94q6-cm2f-p4pc/GHSA-94q6-cm2f-p4pc.json index 5f36785ff0c..973adae05c7 100644 --- a/advisories/unreviewed/2021/12/GHSA-94q6-cm2f-p4pc/GHSA-94q6-cm2f-p4pc.json +++ b/advisories/unreviewed/2021/12/GHSA-94q6-cm2f-p4pc/GHSA-94q6-cm2f-p4pc.json @@ -7,12 +7,8 @@ "CVE-2021-40333" ], "details": "Weak Password Requirements vulnerability in Hitachi Energy FOX61x, XCM20 allows an attacker to gain unauthorized access to the Data Communication Network (DCN) routing configuration. This issue affects: Hitachi Energy FOX61x versions prior to R15A. Hitachi Energy XCM20 versions prior to R15A.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-9558-55mx-wf4p/GHSA-9558-55mx-wf4p.json b/advisories/unreviewed/2021/12/GHSA-9558-55mx-wf4p/GHSA-9558-55mx-wf4p.json index a98fb9c66b0..81d3e8377ff 100644 --- a/advisories/unreviewed/2021/12/GHSA-9558-55mx-wf4p/GHSA-9558-55mx-wf4p.json +++ b/advisories/unreviewed/2021/12/GHSA-9558-55mx-wf4p/GHSA-9558-55mx-wf4p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-9739-cp23-84gj/GHSA-9739-cp23-84gj.json b/advisories/unreviewed/2021/12/GHSA-9739-cp23-84gj/GHSA-9739-cp23-84gj.json index 52499ef17ba..08680eccb3d 100644 --- a/advisories/unreviewed/2021/12/GHSA-9739-cp23-84gj/GHSA-9739-cp23-84gj.json +++ b/advisories/unreviewed/2021/12/GHSA-9739-cp23-84gj/GHSA-9739-cp23-84gj.json @@ -7,12 +7,8 @@ "CVE-2021-31632" ], "details": "b2evolution CMS v7.2.3 was discovered to contain a SQL injection vulnerability via the parameter cfqueryparam in the User login section. This vulnerability allows attackers to execute arbitrary code via a crafted input.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-996g-8rhx-rwmj/GHSA-996g-8rhx-rwmj.json b/advisories/unreviewed/2021/12/GHSA-996g-8rhx-rwmj/GHSA-996g-8rhx-rwmj.json index a6711cf3483..eb61d0385a5 100644 --- a/advisories/unreviewed/2021/12/GHSA-996g-8rhx-rwmj/GHSA-996g-8rhx-rwmj.json +++ b/advisories/unreviewed/2021/12/GHSA-996g-8rhx-rwmj/GHSA-996g-8rhx-rwmj.json @@ -7,12 +7,8 @@ "CVE-2021-42990" ], "details": "FlexiHub For Windows is affected by Buffer Overflow. IOCTL Handler 0x22001B in the FlexiHub For Windows above 2.0.4340 below 5.3.14268 allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-9cjc-8427-pcw9/GHSA-9cjc-8427-pcw9.json b/advisories/unreviewed/2021/12/GHSA-9cjc-8427-pcw9/GHSA-9cjc-8427-pcw9.json index 860afa355ae..81c4c9feb4d 100644 --- a/advisories/unreviewed/2021/12/GHSA-9cjc-8427-pcw9/GHSA-9cjc-8427-pcw9.json +++ b/advisories/unreviewed/2021/12/GHSA-9cjc-8427-pcw9/GHSA-9cjc-8427-pcw9.json @@ -7,12 +7,8 @@ "CVE-2021-42977" ], "details": "NoMachine Enterprise Desktop is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Desktop above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-9cr9-j2r9-7m87/GHSA-9cr9-j2r9-7m87.json b/advisories/unreviewed/2021/12/GHSA-9cr9-j2r9-7m87/GHSA-9cr9-j2r9-7m87.json index aa146a4fe15..49effc0e82c 100644 --- a/advisories/unreviewed/2021/12/GHSA-9cr9-j2r9-7m87/GHSA-9cr9-j2r9-7m87.json +++ b/advisories/unreviewed/2021/12/GHSA-9cr9-j2r9-7m87/GHSA-9cr9-j2r9-7m87.json @@ -7,12 +7,8 @@ "CVE-2021-20855" ], "details": "Cross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-9g45-92g8-474m/GHSA-9g45-92g8-474m.json b/advisories/unreviewed/2021/12/GHSA-9g45-92g8-474m/GHSA-9g45-92g8-474m.json index 480ad60b901..7f3842d9fc6 100644 --- a/advisories/unreviewed/2021/12/GHSA-9g45-92g8-474m/GHSA-9g45-92g8-474m.json +++ b/advisories/unreviewed/2021/12/GHSA-9g45-92g8-474m/GHSA-9g45-92g8-474m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-9p49-7vh4-82rx/GHSA-9p49-7vh4-82rx.json b/advisories/unreviewed/2021/12/GHSA-9p49-7vh4-82rx/GHSA-9p49-7vh4-82rx.json index 664606e59cc..a9128a9d76c 100644 --- a/advisories/unreviewed/2021/12/GHSA-9p49-7vh4-82rx/GHSA-9p49-7vh4-82rx.json +++ b/advisories/unreviewed/2021/12/GHSA-9p49-7vh4-82rx/GHSA-9p49-7vh4-82rx.json @@ -7,12 +7,8 @@ "CVE-2021-43931" ], "details": "The authentication algorithm of the WebHMI portal is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-9pcg-8c48-p52v/GHSA-9pcg-8c48-p52v.json b/advisories/unreviewed/2021/12/GHSA-9pcg-8c48-p52v/GHSA-9pcg-8c48-p52v.json index 4bd9f8c4ff1..8e2d7542903 100644 --- a/advisories/unreviewed/2021/12/GHSA-9pcg-8c48-p52v/GHSA-9pcg-8c48-p52v.json +++ b/advisories/unreviewed/2021/12/GHSA-9pcg-8c48-p52v/GHSA-9pcg-8c48-p52v.json @@ -7,12 +7,8 @@ "CVE-2021-42687" ], "details": "A Buffer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22005B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-9q2w-v7mg-939r/GHSA-9q2w-v7mg-939r.json b/advisories/unreviewed/2021/12/GHSA-9q2w-v7mg-939r/GHSA-9q2w-v7mg-939r.json index b009f5482de..d15af9cd913 100644 --- a/advisories/unreviewed/2021/12/GHSA-9q2w-v7mg-939r/GHSA-9q2w-v7mg-939r.json +++ b/advisories/unreviewed/2021/12/GHSA-9q2w-v7mg-939r/GHSA-9q2w-v7mg-939r.json @@ -7,12 +7,8 @@ "CVE-2020-19611" ], "details": "Cross Site Scripting (XSS) in redirect module of Racktables version 0.21.2, allows an attacker to inject arbitrary web script or HTML via the op parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-9qr5-88v5-9335/GHSA-9qr5-88v5-9335.json b/advisories/unreviewed/2021/12/GHSA-9qr5-88v5-9335/GHSA-9qr5-88v5-9335.json index b1ecfc971f7..736e98d8ace 100644 --- a/advisories/unreviewed/2021/12/GHSA-9qr5-88v5-9335/GHSA-9qr5-88v5-9335.json +++ b/advisories/unreviewed/2021/12/GHSA-9qr5-88v5-9335/GHSA-9qr5-88v5-9335.json @@ -7,12 +7,8 @@ "CVE-2021-43689" ], "details": "manage (last update Oct 24, 2017) is affected by is affected by a Cross Site Scripting (XSS) vulnerability in Application/Home/Controller/GoodsController.class.php. The exit function will terminate the script and print a message which have values from $_POST.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-9w23-w7jv-q3wg/GHSA-9w23-w7jv-q3wg.json b/advisories/unreviewed/2021/12/GHSA-9w23-w7jv-q3wg/GHSA-9w23-w7jv-q3wg.json index f7b789c22a8..2930d856f59 100644 --- a/advisories/unreviewed/2021/12/GHSA-9w23-w7jv-q3wg/GHSA-9w23-w7jv-q3wg.json +++ b/advisories/unreviewed/2021/12/GHSA-9w23-w7jv-q3wg/GHSA-9w23-w7jv-q3wg.json @@ -7,12 +7,8 @@ "CVE-2021-44347" ], "details": "SQL Injection vulnerability exists in TuziCMS v2.0.6 in App\\Manage\\Controller\\GuestbookController.class.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-c359-88vr-m2f2/GHSA-c359-88vr-m2f2.json b/advisories/unreviewed/2021/12/GHSA-c359-88vr-m2f2/GHSA-c359-88vr-m2f2.json index 604762194a9..b1ccff754b0 100644 --- a/advisories/unreviewed/2021/12/GHSA-c359-88vr-m2f2/GHSA-c359-88vr-m2f2.json +++ b/advisories/unreviewed/2021/12/GHSA-c359-88vr-m2f2/GHSA-c359-88vr-m2f2.json @@ -7,12 +7,8 @@ "CVE-2021-37087" ], "details": "There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers can create arbitrary file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-c54h-j86w-wmh6/GHSA-c54h-j86w-wmh6.json b/advisories/unreviewed/2021/12/GHSA-c54h-j86w-wmh6/GHSA-c54h-j86w-wmh6.json index b5d30c0b567..b49ce4f75aa 100644 --- a/advisories/unreviewed/2021/12/GHSA-c54h-j86w-wmh6/GHSA-c54h-j86w-wmh6.json +++ b/advisories/unreviewed/2021/12/GHSA-c54h-j86w-wmh6/GHSA-c54h-j86w-wmh6.json @@ -7,12 +7,8 @@ "CVE-2021-42986" ], "details": "NoMachine Enterprise Client is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Client above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-c5x3-r36q-xxfh/GHSA-c5x3-r36q-xxfh.json b/advisories/unreviewed/2021/12/GHSA-c5x3-r36q-xxfh/GHSA-c5x3-r36q-xxfh.json index 059c3e5f037..a4bcf5823a8 100644 --- a/advisories/unreviewed/2021/12/GHSA-c5x3-r36q-xxfh/GHSA-c5x3-r36q-xxfh.json +++ b/advisories/unreviewed/2021/12/GHSA-c5x3-r36q-xxfh/GHSA-c5x3-r36q-xxfh.json @@ -7,12 +7,8 @@ "CVE-2021-44352" ], "details": "A Stack-based Buffer Overflow vlnerability exists in the Tenda AC15 V15.03.05.18_multi device via the list parameter in a post request in goform/SetIpMacBind.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-cf57-84pg-q3g7/GHSA-cf57-84pg-q3g7.json b/advisories/unreviewed/2021/12/GHSA-cf57-84pg-q3g7/GHSA-cf57-84pg-q3g7.json index 3a24f2b0014..db4f764840c 100644 --- a/advisories/unreviewed/2021/12/GHSA-cf57-84pg-q3g7/GHSA-cf57-84pg-q3g7.json +++ b/advisories/unreviewed/2021/12/GHSA-cf57-84pg-q3g7/GHSA-cf57-84pg-q3g7.json @@ -7,12 +7,8 @@ "CVE-2021-43638" ], "details": "Amazon Amazon WorkSpaces agent is affected by Integer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-cg8x-pxqh-mr33/GHSA-cg8x-pxqh-mr33.json b/advisories/unreviewed/2021/12/GHSA-cg8x-pxqh-mr33/GHSA-cg8x-pxqh-mr33.json index 61089bd90d4..e9b44496f95 100644 --- a/advisories/unreviewed/2021/12/GHSA-cg8x-pxqh-mr33/GHSA-cg8x-pxqh-mr33.json +++ b/advisories/unreviewed/2021/12/GHSA-cg8x-pxqh-mr33/GHSA-cg8x-pxqh-mr33.json @@ -7,12 +7,8 @@ "CVE-2021-37085" ], "details": "There is a Encoding timing vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-ch5j-vx43-x3h2/GHSA-ch5j-vx43-x3h2.json b/advisories/unreviewed/2021/12/GHSA-ch5j-vx43-x3h2/GHSA-ch5j-vx43-x3h2.json index 37805676dca..60d267440e2 100644 --- a/advisories/unreviewed/2021/12/GHSA-ch5j-vx43-x3h2/GHSA-ch5j-vx43-x3h2.json +++ b/advisories/unreviewed/2021/12/GHSA-ch5j-vx43-x3h2/GHSA-ch5j-vx43-x3h2.json @@ -7,12 +7,8 @@ "CVE-2021-44047" ], "details": "A use-after-free vulnerability exists when reading a DWF/DWFX file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing DWF/DWFX files. Crafted data in a DWF/DWFX file and lack of proper validation of input data can trigger a write operation past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-cvqf-ghwg-56gj/GHSA-cvqf-ghwg-56gj.json b/advisories/unreviewed/2021/12/GHSA-cvqf-ghwg-56gj/GHSA-cvqf-ghwg-56gj.json index c0be229efbd..461ffa48c55 100644 --- a/advisories/unreviewed/2021/12/GHSA-cvqf-ghwg-56gj/GHSA-cvqf-ghwg-56gj.json +++ b/advisories/unreviewed/2021/12/GHSA-cvqf-ghwg-56gj/GHSA-cvqf-ghwg-56gj.json @@ -7,12 +7,8 @@ "CVE-2021-22956" ], "details": "An uncontrolled resource consumption vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 that could allow an attacker with access to NSIP or SNIP with management interface access to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-f88h-2xxc-h4r4/GHSA-f88h-2xxc-h4r4.json b/advisories/unreviewed/2021/12/GHSA-f88h-2xxc-h4r4/GHSA-f88h-2xxc-h4r4.json index 35073e6ddad..e792531800a 100644 --- a/advisories/unreviewed/2021/12/GHSA-f88h-2xxc-h4r4/GHSA-f88h-2xxc-h4r4.json +++ b/advisories/unreviewed/2021/12/GHSA-f88h-2xxc-h4r4/GHSA-f88h-2xxc-h4r4.json @@ -7,12 +7,8 @@ "CVE-2021-40154" ], "details": "NXP LPC55S69 devices before A3 have a buffer over-read via a crafted wlength value in a GET Descriptor Configuration request during use of USB In-System Programming (ISP) mode. This discloses protected flash memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-f8m6-8wfx-7hpr/GHSA-f8m6-8wfx-7hpr.json b/advisories/unreviewed/2021/12/GHSA-f8m6-8wfx-7hpr/GHSA-f8m6-8wfx-7hpr.json index 30876a65d82..1f5b5c025b7 100644 --- a/advisories/unreviewed/2021/12/GHSA-f8m6-8wfx-7hpr/GHSA-f8m6-8wfx-7hpr.json +++ b/advisories/unreviewed/2021/12/GHSA-f8m6-8wfx-7hpr/GHSA-f8m6-8wfx-7hpr.json @@ -7,12 +7,8 @@ "CVE-2021-24759" ], "details": "The PDF.js Viewer WordPress plugin before 2.0.2 does not escape some of its shortcode and Gutenberg Block attributes, which could allow users with a role as low as Contributor to to perform Cross-Site Scripting attacks", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-f98m-xwh6-wgfq/GHSA-f98m-xwh6-wgfq.json b/advisories/unreviewed/2021/12/GHSA-f98m-xwh6-wgfq/GHSA-f98m-xwh6-wgfq.json index 0803f5acbf5..42b2cfcd5ea 100644 --- a/advisories/unreviewed/2021/12/GHSA-f98m-xwh6-wgfq/GHSA-f98m-xwh6-wgfq.json +++ b/advisories/unreviewed/2021/12/GHSA-f98m-xwh6-wgfq/GHSA-f98m-xwh6-wgfq.json @@ -7,12 +7,8 @@ "CVE-2021-44280" ], "details": "attendance management system 1.0 is affected by a SQL injection vulnerability in admin/incFunctions.php through the makeSafe function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-f9xr-r9gv-jc8r/GHSA-f9xr-r9gv-jc8r.json b/advisories/unreviewed/2021/12/GHSA-f9xr-r9gv-jc8r/GHSA-f9xr-r9gv-jc8r.json index 70992a56dfb..a3a76fcdcbc 100644 --- a/advisories/unreviewed/2021/12/GHSA-f9xr-r9gv-jc8r/GHSA-f9xr-r9gv-jc8r.json +++ b/advisories/unreviewed/2021/12/GHSA-f9xr-r9gv-jc8r/GHSA-f9xr-r9gv-jc8r.json @@ -7,12 +7,8 @@ "CVE-2020-27413" ], "details": "An issue was discovered in Mahavitaran android application 7.50 and below, allows local attackers to read cleartext username and password while the user is logged into the application.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-fg34-7vm6-7mc4/GHSA-fg34-7vm6-7mc4.json b/advisories/unreviewed/2021/12/GHSA-fg34-7vm6-7mc4/GHSA-fg34-7vm6-7mc4.json index 6d39ef60344..f277377af0f 100644 --- a/advisories/unreviewed/2021/12/GHSA-fg34-7vm6-7mc4/GHSA-fg34-7vm6-7mc4.json +++ b/advisories/unreviewed/2021/12/GHSA-fg34-7vm6-7mc4/GHSA-fg34-7vm6-7mc4.json @@ -7,12 +7,8 @@ "CVE-2021-43176" ], "details": "The GOautodial API prior to commit 3c3a979 made on October 13th, 2021 takes a user-supplied “action” parameter and appends a .php file extension to locate and load the correct PHP file to implement the API call. Vulnerable versions of GOautodial do not sanitize the user input that specifies the action. This permits an attacker to execute any PHP source file with a .php extension that is present on the disk and readable by the GOautodial web server process. Combined with CVE-2021-43175, it is possible for the attacker to do this without valid credentials. CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-fmw2-6w6r-r52f/GHSA-fmw2-6w6r-r52f.json b/advisories/unreviewed/2021/12/GHSA-fmw2-6w6r-r52f/GHSA-fmw2-6w6r-r52f.json index eae40c81901..699922425b2 100644 --- a/advisories/unreviewed/2021/12/GHSA-fmw2-6w6r-r52f/GHSA-fmw2-6w6r-r52f.json +++ b/advisories/unreviewed/2021/12/GHSA-fmw2-6w6r-r52f/GHSA-fmw2-6w6r-r52f.json @@ -7,12 +7,8 @@ "CVE-2021-42133" ], "details": "An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform an arbitrary file write.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-fqp4-xmg3-px7j/GHSA-fqp4-xmg3-px7j.json b/advisories/unreviewed/2021/12/GHSA-fqp4-xmg3-px7j/GHSA-fqp4-xmg3-px7j.json index 6344cc9375f..010fd4b6376 100644 --- a/advisories/unreviewed/2021/12/GHSA-fqp4-xmg3-px7j/GHSA-fqp4-xmg3-px7j.json +++ b/advisories/unreviewed/2021/12/GHSA-fqp4-xmg3-px7j/GHSA-fqp4-xmg3-px7j.json @@ -7,12 +7,8 @@ "CVE-2021-42681" ], "details": "A Buffer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105. The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-fr2h-5mph-34mj/GHSA-fr2h-5mph-34mj.json b/advisories/unreviewed/2021/12/GHSA-fr2h-5mph-34mj/GHSA-fr2h-5mph-34mj.json index ac5feb8c082..d8a5880aca0 100644 --- a/advisories/unreviewed/2021/12/GHSA-fr2h-5mph-34mj/GHSA-fr2h-5mph-34mj.json +++ b/advisories/unreviewed/2021/12/GHSA-fr2h-5mph-34mj/GHSA-fr2h-5mph-34mj.json @@ -7,12 +7,8 @@ "CVE-2021-43683" ], "details": "pictshare v1.5 is affected by a Cross Site Scripting (XSS) vulnerability in api/info.php. The exit function will terminate the script and print the message which has $_REQUEST['hash'].", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-fw34-pr2f-mcfm/GHSA-fw34-pr2f-mcfm.json b/advisories/unreviewed/2021/12/GHSA-fw34-pr2f-mcfm/GHSA-fw34-pr2f-mcfm.json index 20c158d6511..92e95dccbbc 100644 --- a/advisories/unreviewed/2021/12/GHSA-fw34-pr2f-mcfm/GHSA-fw34-pr2f-mcfm.json +++ b/advisories/unreviewed/2021/12/GHSA-fw34-pr2f-mcfm/GHSA-fw34-pr2f-mcfm.json @@ -7,12 +7,8 @@ "CVE-2021-44349" ], "details": "SQL Injection vulnerability exists in TuziCMS v2.0.6 via the id parameter in App\\Manage\\Controller\\DownloadController.class.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-fxvx-vr53-hwhm/GHSA-fxvx-vr53-hwhm.json b/advisories/unreviewed/2021/12/GHSA-fxvx-vr53-hwhm/GHSA-fxvx-vr53-hwhm.json index 52dbbf654e3..d267eb3da5c 100644 --- a/advisories/unreviewed/2021/12/GHSA-fxvx-vr53-hwhm/GHSA-fxvx-vr53-hwhm.json +++ b/advisories/unreviewed/2021/12/GHSA-fxvx-vr53-hwhm/GHSA-fxvx-vr53-hwhm.json @@ -7,12 +7,8 @@ "CVE-2021-44050" ], "details": "CA Network Flow Analysis (NFA) 21.2.1 and earlier contain a SQL injection vulnerability in the NFA web application, due to insufficient input validation, that could potentially allow an authenticated user to access sensitive data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-g559-66g4-jx42/GHSA-g559-66g4-jx42.json b/advisories/unreviewed/2021/12/GHSA-g559-66g4-jx42/GHSA-g559-66g4-jx42.json index 5dd16da50c3..928e492787d 100644 --- a/advisories/unreviewed/2021/12/GHSA-g559-66g4-jx42/GHSA-g559-66g4-jx42.json +++ b/advisories/unreviewed/2021/12/GHSA-g559-66g4-jx42/GHSA-g559-66g4-jx42.json @@ -7,12 +7,8 @@ "CVE-2021-37100" ], "details": "There is a Improper Authentication vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to account authentication bypassed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-g5f2-2vwc-fg5m/GHSA-g5f2-2vwc-fg5m.json b/advisories/unreviewed/2021/12/GHSA-g5f2-2vwc-fg5m/GHSA-g5f2-2vwc-fg5m.json index 596ec062c68..5a0973b1a82 100644 --- a/advisories/unreviewed/2021/12/GHSA-g5f2-2vwc-fg5m/GHSA-g5f2-2vwc-fg5m.json +++ b/advisories/unreviewed/2021/12/GHSA-g5f2-2vwc-fg5m/GHSA-g5f2-2vwc-fg5m.json @@ -7,12 +7,8 @@ "CVE-2021-20860" ], "details": "Cross-site request forgery (CSRF) vulnerability in ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior) allows a remote authenticated attacker to hijack the authentication of an administrator via a specially crafted page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-g83m-vp5r-mgmm/GHSA-g83m-vp5r-mgmm.json b/advisories/unreviewed/2021/12/GHSA-g83m-vp5r-mgmm/GHSA-g83m-vp5r-mgmm.json index 53d07d1279d..0fc0c6c63ef 100644 --- a/advisories/unreviewed/2021/12/GHSA-g83m-vp5r-mgmm/GHSA-g83m-vp5r-mgmm.json +++ b/advisories/unreviewed/2021/12/GHSA-g83m-vp5r-mgmm/GHSA-g83m-vp5r-mgmm.json @@ -7,12 +7,8 @@ "CVE-2021-42682" ], "details": "An Integer Overflow vulnerability exists in Accops HyWorks DVM Tools prior to v3.3.1.105 .The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-g8fq-94r8-q3pf/GHSA-g8fq-94r8-q3pf.json b/advisories/unreviewed/2021/12/GHSA-g8fq-94r8-q3pf/GHSA-g8fq-94r8-q3pf.json index 375b843c4a6..5ec23a53f3e 100644 --- a/advisories/unreviewed/2021/12/GHSA-g8fq-94r8-q3pf/GHSA-g8fq-94r8-q3pf.json +++ b/advisories/unreviewed/2021/12/GHSA-g8fq-94r8-q3pf/GHSA-g8fq-94r8-q3pf.json @@ -7,12 +7,8 @@ "CVE-2021-44019" ], "details": "An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-44020 and 44021.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-g9f2-f8h3-8qjr/GHSA-g9f2-f8h3-8qjr.json b/advisories/unreviewed/2021/12/GHSA-g9f2-f8h3-8qjr/GHSA-g9f2-f8h3-8qjr.json index 83b52d73c49..11d3039761c 100644 --- a/advisories/unreviewed/2021/12/GHSA-g9f2-f8h3-8qjr/GHSA-g9f2-f8h3-8qjr.json +++ b/advisories/unreviewed/2021/12/GHSA-g9f2-f8h3-8qjr/GHSA-g9f2-f8h3-8qjr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-gh7q-h8q2-hp4j/GHSA-gh7q-h8q2-hp4j.json b/advisories/unreviewed/2021/12/GHSA-gh7q-h8q2-hp4j/GHSA-gh7q-h8q2-hp4j.json index 68d600c77c3..4420f8a471e 100644 --- a/advisories/unreviewed/2021/12/GHSA-gh7q-h8q2-hp4j/GHSA-gh7q-h8q2-hp4j.json +++ b/advisories/unreviewed/2021/12/GHSA-gh7q-h8q2-hp4j/GHSA-gh7q-h8q2-hp4j.json @@ -7,12 +7,8 @@ "CVE-2021-25785" ], "details": "Taocms v2.5Beta5 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Management column.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-gxhj-2fv3-v798/GHSA-gxhj-2fv3-v798.json b/advisories/unreviewed/2021/12/GHSA-gxhj-2fv3-v798/GHSA-gxhj-2fv3-v798.json index 28c84ed94fa..d9b50d514e6 100644 --- a/advisories/unreviewed/2021/12/GHSA-gxhj-2fv3-v798/GHSA-gxhj-2fv3-v798.json +++ b/advisories/unreviewed/2021/12/GHSA-gxhj-2fv3-v798/GHSA-gxhj-2fv3-v798.json @@ -7,12 +7,8 @@ "CVE-2021-43682" ], "details": "thinkphp-bjyblog (last update Jun 4 2021) is affected by a Cross Site Scripting (XSS) vulnerability in AdminBaseController.class.php. The exit function will terminate the script and print the message to the user which has $_SERVER['HTTP_HOST'].", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-gxj5-6fw2-663j/GHSA-gxj5-6fw2-663j.json b/advisories/unreviewed/2021/12/GHSA-gxj5-6fw2-663j/GHSA-gxj5-6fw2-663j.json index 0f8448d2ad0..f77a60a637c 100644 --- a/advisories/unreviewed/2021/12/GHSA-gxj5-6fw2-663j/GHSA-gxj5-6fw2-663j.json +++ b/advisories/unreviewed/2021/12/GHSA-gxj5-6fw2-663j/GHSA-gxj5-6fw2-663j.json @@ -7,12 +7,8 @@ "CVE-2021-37086" ], "details": "There is a Improper Preservation of Permissions vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers which can isolate and read synchronization files of other applications across the UID sandbox.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-h54c-fc27-mr9x/GHSA-h54c-fc27-mr9x.json b/advisories/unreviewed/2021/12/GHSA-h54c-fc27-mr9x/GHSA-h54c-fc27-mr9x.json index da76d33e4fc..a8aecd73284 100644 --- a/advisories/unreviewed/2021/12/GHSA-h54c-fc27-mr9x/GHSA-h54c-fc27-mr9x.json +++ b/advisories/unreviewed/2021/12/GHSA-h54c-fc27-mr9x/GHSA-h54c-fc27-mr9x.json @@ -7,12 +7,8 @@ "CVE-2021-43358" ], "details": "Sunnet eHRD has inadequate filtering for special characters in URLs, which allows a remote attacker to perform path traversal attacks without authentication, access restricted paths and download system files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-h69f-m5j2-6g8m/GHSA-h69f-m5j2-6g8m.json b/advisories/unreviewed/2021/12/GHSA-h69f-m5j2-6g8m/GHSA-h69f-m5j2-6g8m.json index a071c5a3f77..b91b5a0d151 100644 --- a/advisories/unreviewed/2021/12/GHSA-h69f-m5j2-6g8m/GHSA-h69f-m5j2-6g8m.json +++ b/advisories/unreviewed/2021/12/GHSA-h69f-m5j2-6g8m/GHSA-h69f-m5j2-6g8m.json @@ -7,12 +7,8 @@ "CVE-2020-27414" ], "details": "Mahavitaran android application 7.50 and prior transmit sensitive information in URL parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header, MITM or browser history.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-h75q-p944-4jvr/GHSA-h75q-p944-4jvr.json b/advisories/unreviewed/2021/12/GHSA-h75q-p944-4jvr/GHSA-h75q-p944-4jvr.json index 8b2bc06f409..11551efbafa 100644 --- a/advisories/unreviewed/2021/12/GHSA-h75q-p944-4jvr/GHSA-h75q-p944-4jvr.json +++ b/advisories/unreviewed/2021/12/GHSA-h75q-p944-4jvr/GHSA-h75q-p944-4jvr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-h94f-223c-f5mw/GHSA-h94f-223c-f5mw.json b/advisories/unreviewed/2021/12/GHSA-h94f-223c-f5mw/GHSA-h94f-223c-f5mw.json index 0b0cdf5db13..402818a7f7d 100644 --- a/advisories/unreviewed/2021/12/GHSA-h94f-223c-f5mw/GHSA-h94f-223c-f5mw.json +++ b/advisories/unreviewed/2021/12/GHSA-h94f-223c-f5mw/GHSA-h94f-223c-f5mw.json @@ -7,12 +7,8 @@ "CVE-2021-23260" ], "details": "Authenticated users with Site roles may inject XSS scripts via file names that will execute in the browser for this and other users of the same site.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-hf2g-mf2f-2q73/GHSA-hf2g-mf2f-2q73.json b/advisories/unreviewed/2021/12/GHSA-hf2g-mf2f-2q73/GHSA-hf2g-mf2f-2q73.json index 3fd426fc2a9..40f55027704 100644 --- a/advisories/unreviewed/2021/12/GHSA-hf2g-mf2f-2q73/GHSA-hf2g-mf2f-2q73.json +++ b/advisories/unreviewed/2021/12/GHSA-hf2g-mf2f-2q73/GHSA-hf2g-mf2f-2q73.json @@ -7,12 +7,8 @@ "CVE-2021-36198" ], "details": "Successful exploitation of this vulnerability could allow an unauthorized user to access sensitive data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-hgcw-m9r8-99rp/GHSA-hgcw-m9r8-99rp.json b/advisories/unreviewed/2021/12/GHSA-hgcw-m9r8-99rp/GHSA-hgcw-m9r8-99rp.json index b45b7482a82..dd746e1119f 100644 --- a/advisories/unreviewed/2021/12/GHSA-hgcw-m9r8-99rp/GHSA-hgcw-m9r8-99rp.json +++ b/advisories/unreviewed/2021/12/GHSA-hgcw-m9r8-99rp/GHSA-hgcw-m9r8-99rp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-hj35-99wc-7f3m/GHSA-hj35-99wc-7f3m.json b/advisories/unreviewed/2021/12/GHSA-hj35-99wc-7f3m/GHSA-hj35-99wc-7f3m.json index 2f81f9aa95a..6678babd3a0 100644 --- a/advisories/unreviewed/2021/12/GHSA-hj35-99wc-7f3m/GHSA-hj35-99wc-7f3m.json +++ b/advisories/unreviewed/2021/12/GHSA-hj35-99wc-7f3m/GHSA-hj35-99wc-7f3m.json @@ -7,12 +7,8 @@ "CVE-2021-42972" ], "details": "NoMachine Server is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-hpm3-9h69-7v94/GHSA-hpm3-9h69-7v94.json b/advisories/unreviewed/2021/12/GHSA-hpm3-9h69-7v94/GHSA-hpm3-9h69-7v94.json index ed9db0d0dc9..06933615a37 100644 --- a/advisories/unreviewed/2021/12/GHSA-hpm3-9h69-7v94/GHSA-hpm3-9h69-7v94.json +++ b/advisories/unreviewed/2021/12/GHSA-hpm3-9h69-7v94/GHSA-hpm3-9h69-7v94.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-hpmh-gxfc-p35h/GHSA-hpmh-gxfc-p35h.json b/advisories/unreviewed/2021/12/GHSA-hpmh-gxfc-p35h/GHSA-hpmh-gxfc-p35h.json index 9f819cb0bf6..25cf35554b9 100644 --- a/advisories/unreviewed/2021/12/GHSA-hpmh-gxfc-p35h/GHSA-hpmh-gxfc-p35h.json +++ b/advisories/unreviewed/2021/12/GHSA-hpmh-gxfc-p35h/GHSA-hpmh-gxfc-p35h.json @@ -7,12 +7,8 @@ "CVE-2021-37062" ], "details": "There is a Improper Validation of Array Index vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to memory overflow and information leakage.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-hpqr-f42r-wc5h/GHSA-hpqr-f42r-wc5h.json b/advisories/unreviewed/2021/12/GHSA-hpqr-f42r-wc5h/GHSA-hpqr-f42r-wc5h.json index 1ad30ba4535..56d6f753c82 100644 --- a/advisories/unreviewed/2021/12/GHSA-hpqr-f42r-wc5h/GHSA-hpqr-f42r-wc5h.json +++ b/advisories/unreviewed/2021/12/GHSA-hpqr-f42r-wc5h/GHSA-hpqr-f42r-wc5h.json @@ -7,12 +7,8 @@ "CVE-2021-37081" ], "details": "There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to nearby crash.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-hvc6-hc99-g3qf/GHSA-hvc6-hc99-g3qf.json b/advisories/unreviewed/2021/12/GHSA-hvc6-hc99-g3qf/GHSA-hvc6-hc99-g3qf.json index 3839925698c..bcc62d0303c 100644 --- a/advisories/unreviewed/2021/12/GHSA-hvc6-hc99-g3qf/GHSA-hvc6-hc99-g3qf.json +++ b/advisories/unreviewed/2021/12/GHSA-hvc6-hc99-g3qf/GHSA-hvc6-hc99-g3qf.json @@ -7,12 +7,8 @@ "CVE-2021-44020" ], "details": "An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-44019 and 44021.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-j2hp-qmrf-626c/GHSA-j2hp-qmrf-626c.json b/advisories/unreviewed/2021/12/GHSA-j2hp-qmrf-626c/GHSA-j2hp-qmrf-626c.json index 8103b0c9bce..6ac175e54b8 100644 --- a/advisories/unreviewed/2021/12/GHSA-j2hp-qmrf-626c/GHSA-j2hp-qmrf-626c.json +++ b/advisories/unreviewed/2021/12/GHSA-j2hp-qmrf-626c/GHSA-j2hp-qmrf-626c.json @@ -7,12 +7,8 @@ "CVE-2021-23259" ], "details": "Authenticated users with Administrator or Developer roles may execute OS commands by Groovy Script which uses Groovy lib to render a webpage. The groovy script does not have security restrictions, which will cause attackers to execute arbitrary commands remotely(RCE).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-j2pv-v7wm-5hcj/GHSA-j2pv-v7wm-5hcj.json b/advisories/unreviewed/2021/12/GHSA-j2pv-v7wm-5hcj/GHSA-j2pv-v7wm-5hcj.json index 47295c1d7bd..edde63754ad 100644 --- a/advisories/unreviewed/2021/12/GHSA-j2pv-v7wm-5hcj/GHSA-j2pv-v7wm-5hcj.json +++ b/advisories/unreviewed/2021/12/GHSA-j2pv-v7wm-5hcj/GHSA-j2pv-v7wm-5hcj.json @@ -7,12 +7,8 @@ "CVE-2021-42132" ], "details": "A command Injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary command execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-j2v6-44xc-c6px/GHSA-j2v6-44xc-c6px.json b/advisories/unreviewed/2021/12/GHSA-j2v6-44xc-c6px/GHSA-j2v6-44xc-c6px.json index aa709d94428..412d6b79324 100644 --- a/advisories/unreviewed/2021/12/GHSA-j2v6-44xc-c6px/GHSA-j2v6-44xc-c6px.json +++ b/advisories/unreviewed/2021/12/GHSA-j2v6-44xc-c6px/GHSA-j2v6-44xc-c6px.json @@ -7,12 +7,8 @@ "CVE-2021-37088" ], "details": "There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to attackers can write any content to any file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-j37p-fpqx-6gf6/GHSA-j37p-fpqx-6gf6.json b/advisories/unreviewed/2021/12/GHSA-j37p-fpqx-6gf6/GHSA-j37p-fpqx-6gf6.json index 71eb8cfb6d2..fb4af2ee91e 100644 --- a/advisories/unreviewed/2021/12/GHSA-j37p-fpqx-6gf6/GHSA-j37p-fpqx-6gf6.json +++ b/advisories/unreviewed/2021/12/GHSA-j37p-fpqx-6gf6/GHSA-j37p-fpqx-6gf6.json @@ -7,12 +7,8 @@ "CVE-2021-20854" ], "details": "ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-j5x3-56mj-r5cf/GHSA-j5x3-56mj-r5cf.json b/advisories/unreviewed/2021/12/GHSA-j5x3-56mj-r5cf/GHSA-j5x3-56mj-r5cf.json index 79e7106b087..dcb11977684 100644 --- a/advisories/unreviewed/2021/12/GHSA-j5x3-56mj-r5cf/GHSA-j5x3-56mj-r5cf.json +++ b/advisories/unreviewed/2021/12/GHSA-j5x3-56mj-r5cf/GHSA-j5x3-56mj-r5cf.json @@ -7,12 +7,8 @@ "CVE-2021-20859" ], "details": "ELECOM LAN routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior) allows a network-adjacent authenticated attacker to execute an arbitrary OS command via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-j666-w6gg-2g2w/GHSA-j666-w6gg-2g2w.json b/advisories/unreviewed/2021/12/GHSA-j666-w6gg-2g2w/GHSA-j666-w6gg-2g2w.json index c4dde1c504d..8ad188f3f0e 100644 --- a/advisories/unreviewed/2021/12/GHSA-j666-w6gg-2g2w/GHSA-j666-w6gg-2g2w.json +++ b/advisories/unreviewed/2021/12/GHSA-j666-w6gg-2g2w/GHSA-j666-w6gg-2g2w.json @@ -7,12 +7,8 @@ "CVE-2021-37066" ], "details": "There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to process crash.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-j7g2-qwww-39r8/GHSA-j7g2-qwww-39r8.json b/advisories/unreviewed/2021/12/GHSA-j7g2-qwww-39r8/GHSA-j7g2-qwww-39r8.json index c62ff7789cd..5d498d0c0ba 100644 --- a/advisories/unreviewed/2021/12/GHSA-j7g2-qwww-39r8/GHSA-j7g2-qwww-39r8.json +++ b/advisories/unreviewed/2021/12/GHSA-j7g2-qwww-39r8/GHSA-j7g2-qwww-39r8.json @@ -7,12 +7,8 @@ "CVE-2021-42996" ], "details": "Donglify is affected by Integer Overflow. IOCTL Handler 0x22001B in the Donglify above 1.0.12309 below 1.7.14110 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-jh4j-8vrr-grg5/GHSA-jh4j-8vrr-grg5.json b/advisories/unreviewed/2021/12/GHSA-jh4j-8vrr-grg5/GHSA-jh4j-8vrr-grg5.json index f9e0fce1048..8c48322f100 100644 --- a/advisories/unreviewed/2021/12/GHSA-jh4j-8vrr-grg5/GHSA-jh4j-8vrr-grg5.json +++ b/advisories/unreviewed/2021/12/GHSA-jh4j-8vrr-grg5/GHSA-jh4j-8vrr-grg5.json @@ -7,12 +7,8 @@ "CVE-2021-44186" ], "details": "Adobe Bridge versions 11.1.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious SGI file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-jvrm-5w3f-73xf/GHSA-jvrm-5w3f-73xf.json b/advisories/unreviewed/2021/12/GHSA-jvrm-5w3f-73xf/GHSA-jvrm-5w3f-73xf.json index 1ab87f980a6..2b14b506e5f 100644 --- a/advisories/unreviewed/2021/12/GHSA-jvrm-5w3f-73xf/GHSA-jvrm-5w3f-73xf.json +++ b/advisories/unreviewed/2021/12/GHSA-jvrm-5w3f-73xf/GHSA-jvrm-5w3f-73xf.json @@ -7,12 +7,8 @@ "CVE-2021-40809" ], "details": "An issue was discovered in Jamf Pro before 10.32.0, aka PI-009921. An account can be granted incorrect privileges in response to authentication that uses specific sign-on workflows.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-m6jv-9ffr-vrj7/GHSA-m6jv-9ffr-vrj7.json b/advisories/unreviewed/2021/12/GHSA-m6jv-9ffr-vrj7/GHSA-m6jv-9ffr-vrj7.json index 839f16f24cc..1c4523a0c5f 100644 --- a/advisories/unreviewed/2021/12/GHSA-m6jv-9ffr-vrj7/GHSA-m6jv-9ffr-vrj7.json +++ b/advisories/unreviewed/2021/12/GHSA-m6jv-9ffr-vrj7/GHSA-m6jv-9ffr-vrj7.json @@ -7,12 +7,8 @@ "CVE-2021-37043" ], "details": "There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious application processes occupy system resources.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-m87v-c4qx-cmpc/GHSA-m87v-c4qx-cmpc.json b/advisories/unreviewed/2021/12/GHSA-m87v-c4qx-cmpc/GHSA-m87v-c4qx-cmpc.json index 29d9d75008c..6e6fce6f5dc 100644 --- a/advisories/unreviewed/2021/12/GHSA-m87v-c4qx-cmpc/GHSA-m87v-c4qx-cmpc.json +++ b/advisories/unreviewed/2021/12/GHSA-m87v-c4qx-cmpc/GHSA-m87v-c4qx-cmpc.json @@ -7,12 +7,8 @@ "CVE-2021-42983" ], "details": "NoMachine Enterprise Client is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Enterprise Client above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-m96v-85pp-7pjm/GHSA-m96v-85pp-7pjm.json b/advisories/unreviewed/2021/12/GHSA-m96v-85pp-7pjm/GHSA-m96v-85pp-7pjm.json index dab18d6b16f..eb45f8df84d 100644 --- a/advisories/unreviewed/2021/12/GHSA-m96v-85pp-7pjm/GHSA-m96v-85pp-7pjm.json +++ b/advisories/unreviewed/2021/12/GHSA-m96v-85pp-7pjm/GHSA-m96v-85pp-7pjm.json @@ -7,12 +7,8 @@ "CVE-2021-43469" ], "details": "VINGA WR-N300U 77.102.1.4853 is affected by a command execution vulnerability in the goahead component.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-mfc2-qp9w-5vj4/GHSA-mfc2-qp9w-5vj4.json b/advisories/unreviewed/2021/12/GHSA-mfc2-qp9w-5vj4/GHSA-mfc2-qp9w-5vj4.json index 660d67a6652..bc20dc59dc7 100644 --- a/advisories/unreviewed/2021/12/GHSA-mfc2-qp9w-5vj4/GHSA-mfc2-qp9w-5vj4.json +++ b/advisories/unreviewed/2021/12/GHSA-mfc2-qp9w-5vj4/GHSA-mfc2-qp9w-5vj4.json @@ -7,12 +7,8 @@ "CVE-2021-35344" ], "details": "tsMuxer v2.6.16 was discovered to contain a heap-based buffer overflow via the function BitStreamReader::getCurVal in bitStream.h.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-mg6c-xr2j-v4fv/GHSA-mg6c-xr2j-v4fv.json b/advisories/unreviewed/2021/12/GHSA-mg6c-xr2j-v4fv/GHSA-mg6c-xr2j-v4fv.json index a50f232af2d..26c8b8aa588 100644 --- a/advisories/unreviewed/2021/12/GHSA-mg6c-xr2j-v4fv/GHSA-mg6c-xr2j-v4fv.json +++ b/advisories/unreviewed/2021/12/GHSA-mg6c-xr2j-v4fv/GHSA-mg6c-xr2j-v4fv.json @@ -7,12 +7,8 @@ "CVE-2021-41716" ], "details": "Maharashtra State Electricity Board Mahavitara Android Application 8.20 and prior is vulnerable to remote account takeover due to OTP fixation vulnerability in password rest function", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-mjp9-fwhq-c9rm/GHSA-mjp9-fwhq-c9rm.json b/advisories/unreviewed/2021/12/GHSA-mjp9-fwhq-c9rm/GHSA-mjp9-fwhq-c9rm.json index 86488b20a4e..ba1e57f0809 100644 --- a/advisories/unreviewed/2021/12/GHSA-mjp9-fwhq-c9rm/GHSA-mjp9-fwhq-c9rm.json +++ b/advisories/unreviewed/2021/12/GHSA-mjp9-fwhq-c9rm/GHSA-mjp9-fwhq-c9rm.json @@ -7,12 +7,8 @@ "CVE-2021-20853" ], "details": "ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a network-adjacent attacker with an administrator privilege to execute arbitrary OS commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-mp42-3cqm-wg6h/GHSA-mp42-3cqm-wg6h.json b/advisories/unreviewed/2021/12/GHSA-mp42-3cqm-wg6h/GHSA-mp42-3cqm-wg6h.json index 21c1a5cef06..65fbf72d4bb 100644 --- a/advisories/unreviewed/2021/12/GHSA-mp42-3cqm-wg6h/GHSA-mp42-3cqm-wg6h.json +++ b/advisories/unreviewed/2021/12/GHSA-mp42-3cqm-wg6h/GHSA-mp42-3cqm-wg6h.json @@ -7,12 +7,8 @@ "CVE-2021-29849" ], "details": "IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 205281.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-mrjh-hc9f-vfff/GHSA-mrjh-hc9f-vfff.json b/advisories/unreviewed/2021/12/GHSA-mrjh-hc9f-vfff/GHSA-mrjh-hc9f-vfff.json index f4b36fbf8c0..c08149ac8d8 100644 --- a/advisories/unreviewed/2021/12/GHSA-mrjh-hc9f-vfff/GHSA-mrjh-hc9f-vfff.json +++ b/advisories/unreviewed/2021/12/GHSA-mrjh-hc9f-vfff/GHSA-mrjh-hc9f-vfff.json @@ -7,12 +7,8 @@ "CVE-2021-42973" ], "details": "NoMachine Server is affected by Integer Overflow. IOCTL Handler 0x22001B in the NoMachine Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-mxrp-jrwv-r3r4/GHSA-mxrp-jrwv-r3r4.json b/advisories/unreviewed/2021/12/GHSA-mxrp-jrwv-r3r4/GHSA-mxrp-jrwv-r3r4.json index 8d5a4865d62..a24d0508397 100644 --- a/advisories/unreviewed/2021/12/GHSA-mxrp-jrwv-r3r4/GHSA-mxrp-jrwv-r3r4.json +++ b/advisories/unreviewed/2021/12/GHSA-mxrp-jrwv-r3r4/GHSA-mxrp-jrwv-r3r4.json @@ -7,12 +7,8 @@ "CVE-2015-20105" ], "details": "The ClickBank Affiliate Ads WordPress plugin through 1.20 does not have CSRF check when saving its settings, allowing attacker to make logged in admin change them via a CSRF attack. Furthermore, due to the lack of escaping when they are outputting, it could also lead to Stored Cross-Site Scripting issues", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-pf63-23gc-pj5p/GHSA-pf63-23gc-pj5p.json b/advisories/unreviewed/2021/12/GHSA-pf63-23gc-pj5p/GHSA-pf63-23gc-pj5p.json index 4ee92cf3a68..f74fbd05718 100644 --- a/advisories/unreviewed/2021/12/GHSA-pf63-23gc-pj5p/GHSA-pf63-23gc-pj5p.json +++ b/advisories/unreviewed/2021/12/GHSA-pf63-23gc-pj5p/GHSA-pf63-23gc-pj5p.json @@ -7,12 +7,8 @@ "CVE-2021-42683" ], "details": "A Buffer Overflow vulnerability exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22001B allows local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-pf9p-78xv-v5r8/GHSA-pf9p-78xv-v5r8.json b/advisories/unreviewed/2021/12/GHSA-pf9p-78xv-v5r8/GHSA-pf9p-78xv-v5r8.json index 6968ccaaa07..81188928cd1 100644 --- a/advisories/unreviewed/2021/12/GHSA-pf9p-78xv-v5r8/GHSA-pf9p-78xv-v5r8.json +++ b/advisories/unreviewed/2021/12/GHSA-pf9p-78xv-v5r8/GHSA-pf9p-78xv-v5r8.json @@ -7,12 +7,8 @@ "CVE-2021-42125" ], "details": "An unrestricted file upload vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to write dangerous files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-pfg7-cgcv-vjfq/GHSA-pfg7-cgcv-vjfq.json b/advisories/unreviewed/2021/12/GHSA-pfg7-cgcv-vjfq/GHSA-pfg7-cgcv-vjfq.json index 9bfe3329284..c3e5971b0e6 100644 --- a/advisories/unreviewed/2021/12/GHSA-pfg7-cgcv-vjfq/GHSA-pfg7-cgcv-vjfq.json +++ b/advisories/unreviewed/2021/12/GHSA-pfg7-cgcv-vjfq/GHSA-pfg7-cgcv-vjfq.json @@ -7,12 +7,8 @@ "CVE-2021-44045" ], "details": "An out-of-bounds write vulnerability exists when reading a DGN file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists within the parsing of DGN files. Crafted data in a DGN file and lack of proper validation for the XFAT sectors count can trigger a write operation past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-pgw2-c4q3-g5cf/GHSA-pgw2-c4q3-g5cf.json b/advisories/unreviewed/2021/12/GHSA-pgw2-c4q3-g5cf/GHSA-pgw2-c4q3-g5cf.json index 7cf6e913a95..b107d6b7a44 100644 --- a/advisories/unreviewed/2021/12/GHSA-pgw2-c4q3-g5cf/GHSA-pgw2-c4q3-g5cf.json +++ b/advisories/unreviewed/2021/12/GHSA-pgw2-c4q3-g5cf/GHSA-pgw2-c4q3-g5cf.json @@ -7,12 +7,8 @@ "CVE-2021-36760" ], "details": "In accountrecoveryendpoint/recoverpassword.do in WSO2 Identity Server 5.7.0, it is possible to perform a DOM-Based XSS attack affecting the callback parameter modifying the URL that precedes the callback parameter. Once the username or password reset procedure is completed, the JavaScript code will be executed. (recoverpassword.do also has an open redirect issue for a similar reason.)", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-pmx6-p7g8-55gf/GHSA-pmx6-p7g8-55gf.json b/advisories/unreviewed/2021/12/GHSA-pmx6-p7g8-55gf/GHSA-pmx6-p7g8-55gf.json index 7e0b4540b9b..dfe440fb4e8 100644 --- a/advisories/unreviewed/2021/12/GHSA-pmx6-p7g8-55gf/GHSA-pmx6-p7g8-55gf.json +++ b/advisories/unreviewed/2021/12/GHSA-pmx6-p7g8-55gf/GHSA-pmx6-p7g8-55gf.json @@ -7,12 +7,8 @@ "CVE-2021-43772" ], "details": "Trend Micro Security 2021 v17.0 (Consumer) contains a vulnerability that allows files inside the protected folder to be modified without any detection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-pphv-vr7m-3j53/GHSA-pphv-vr7m-3j53.json b/advisories/unreviewed/2021/12/GHSA-pphv-vr7m-3j53/GHSA-pphv-vr7m-3j53.json index 40924007060..3e181ea1698 100644 --- a/advisories/unreviewed/2021/12/GHSA-pphv-vr7m-3j53/GHSA-pphv-vr7m-3j53.json +++ b/advisories/unreviewed/2021/12/GHSA-pphv-vr7m-3j53/GHSA-pphv-vr7m-3j53.json @@ -7,12 +7,8 @@ "CVE-2021-44185" ], "details": "Adobe Bridge versions 11.1.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious RGB file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-prv3-crch-qf6r/GHSA-prv3-crch-qf6r.json b/advisories/unreviewed/2021/12/GHSA-prv3-crch-qf6r/GHSA-prv3-crch-qf6r.json index 33385fc56a2..bef6697b631 100644 --- a/advisories/unreviewed/2021/12/GHSA-prv3-crch-qf6r/GHSA-prv3-crch-qf6r.json +++ b/advisories/unreviewed/2021/12/GHSA-prv3-crch-qf6r/GHSA-prv3-crch-qf6r.json @@ -7,12 +7,8 @@ "CVE-2021-43679" ], "details": "ecshop v2.7.3 is affected by a SQL injection vulnerability in shopex\\ecshop\\upload\\api\\client\\api.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-pvc5-fhvw-c2wm/GHSA-pvc5-fhvw-c2wm.json b/advisories/unreviewed/2021/12/GHSA-pvc5-fhvw-c2wm/GHSA-pvc5-fhvw-c2wm.json index 425b4df152b..9f3ebc87add 100644 --- a/advisories/unreviewed/2021/12/GHSA-pvc5-fhvw-c2wm/GHSA-pvc5-fhvw-c2wm.json +++ b/advisories/unreviewed/2021/12/GHSA-pvc5-fhvw-c2wm/GHSA-pvc5-fhvw-c2wm.json @@ -7,12 +7,8 @@ "CVE-2021-44044" ], "details": "An out-of-bounds write vulnerability exists when reading a JPG file using Open Design Alliance Drawings SDK before 2022.11. The specific issue exists with parsing JPG files. Crafted data in a JPG (4 extraneous bytes before the marker 0xca) can trigger a write operation past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-q5c9-9c6m-cvqq/GHSA-q5c9-9c6m-cvqq.json b/advisories/unreviewed/2021/12/GHSA-q5c9-9c6m-cvqq/GHSA-q5c9-9c6m-cvqq.json index 2032edfb2a7..97bc6d35e70 100644 --- a/advisories/unreviewed/2021/12/GHSA-q5c9-9c6m-cvqq/GHSA-q5c9-9c6m-cvqq.json +++ b/advisories/unreviewed/2021/12/GHSA-q5c9-9c6m-cvqq/GHSA-q5c9-9c6m-cvqq.json @@ -7,12 +7,8 @@ "CVE-2021-43000" ], "details": "Amzetta zPortal Windows zClient is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal Windows zClient <= v3.2.8180.148 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-qcg7-g679-h3pp/GHSA-qcg7-g679-h3pp.json b/advisories/unreviewed/2021/12/GHSA-qcg7-g679-h3pp/GHSA-qcg7-g679-h3pp.json index 02ad0a8175b..d7c656b15b1 100644 --- a/advisories/unreviewed/2021/12/GHSA-qcg7-g679-h3pp/GHSA-qcg7-g679-h3pp.json +++ b/advisories/unreviewed/2021/12/GHSA-qcg7-g679-h3pp/GHSA-qcg7-g679-h3pp.json @@ -7,12 +7,8 @@ "CVE-2021-31631" ], "details": "b2evolution CMS v7.2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the User login page. This vulnerability allows attackers to escalate privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-qggx-95j5-5w5c/GHSA-qggx-95j5-5w5c.json b/advisories/unreviewed/2021/12/GHSA-qggx-95j5-5w5c/GHSA-qggx-95j5-5w5c.json index 2446466a0d5..a27f3df85b8 100644 --- a/advisories/unreviewed/2021/12/GHSA-qggx-95j5-5w5c/GHSA-qggx-95j5-5w5c.json +++ b/advisories/unreviewed/2021/12/GHSA-qggx-95j5-5w5c/GHSA-qggx-95j5-5w5c.json @@ -7,12 +7,8 @@ "CVE-2020-29176" ], "details": "An arbitrary file upload vulnerability in Z-BlogPHP v1.6.1.2100 allows attackers to execute arbitrary code via a crafted JPG file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-qhr5-fxfp-xr69/GHSA-qhr5-fxfp-xr69.json b/advisories/unreviewed/2021/12/GHSA-qhr5-fxfp-xr69/GHSA-qhr5-fxfp-xr69.json index df02a453f70..34795297cb8 100644 --- a/advisories/unreviewed/2021/12/GHSA-qhr5-fxfp-xr69/GHSA-qhr5-fxfp-xr69.json +++ b/advisories/unreviewed/2021/12/GHSA-qhr5-fxfp-xr69/GHSA-qhr5-fxfp-xr69.json @@ -7,12 +7,8 @@ "CVE-2021-43690" ], "details": "YurunProxy v0.01 is affected by a Cross Site Scripting (XSS) vulnerability in src/Client.php. The exit function will terminate the script and print a message which have values from the socket_read.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-qhvf-58cr-6vq3/GHSA-qhvf-58cr-6vq3.json b/advisories/unreviewed/2021/12/GHSA-qhvf-58cr-6vq3/GHSA-qhvf-58cr-6vq3.json index 657e1d1abea..ee3b9c63535 100644 --- a/advisories/unreviewed/2021/12/GHSA-qhvf-58cr-6vq3/GHSA-qhvf-58cr-6vq3.json +++ b/advisories/unreviewed/2021/12/GHSA-qhvf-58cr-6vq3/GHSA-qhvf-58cr-6vq3.json @@ -7,12 +7,8 @@ "CVE-2021-42130" ], "details": "A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-qjpp-82mc-9gw6/GHSA-qjpp-82mc-9gw6.json b/advisories/unreviewed/2021/12/GHSA-qjpp-82mc-9gw6/GHSA-qjpp-82mc-9gw6.json index 19518c11688..475d7e57ec0 100644 --- a/advisories/unreviewed/2021/12/GHSA-qjpp-82mc-9gw6/GHSA-qjpp-82mc-9gw6.json +++ b/advisories/unreviewed/2021/12/GHSA-qjpp-82mc-9gw6/GHSA-qjpp-82mc-9gw6.json @@ -7,12 +7,8 @@ "CVE-2021-42129" ], "details": "A command injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary command execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-qw4v-hwx2-4gp2/GHSA-qw4v-hwx2-4gp2.json b/advisories/unreviewed/2021/12/GHSA-qw4v-hwx2-4gp2/GHSA-qw4v-hwx2-4gp2.json index 204bd1ecdc4..8e2b379b1ed 100644 --- a/advisories/unreviewed/2021/12/GHSA-qw4v-hwx2-4gp2/GHSA-qw4v-hwx2-4gp2.json +++ b/advisories/unreviewed/2021/12/GHSA-qw4v-hwx2-4gp2/GHSA-qw4v-hwx2-4gp2.json @@ -7,12 +7,8 @@ "CVE-2021-37057" ], "details": "There is a Improper Validation of Array Index vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to restart the phone.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-qxwx-c654-v423/GHSA-qxwx-c654-v423.json b/advisories/unreviewed/2021/12/GHSA-qxwx-c654-v423/GHSA-qxwx-c654-v423.json index 163442abd42..81cdea1679c 100644 --- a/advisories/unreviewed/2021/12/GHSA-qxwx-c654-v423/GHSA-qxwx-c654-v423.json +++ b/advisories/unreviewed/2021/12/GHSA-qxwx-c654-v423/GHSA-qxwx-c654-v423.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-r2j8-fmw2-73rf/GHSA-r2j8-fmw2-73rf.json b/advisories/unreviewed/2021/12/GHSA-r2j8-fmw2-73rf/GHSA-r2j8-fmw2-73rf.json index 9de344abf69..02373357d20 100644 --- a/advisories/unreviewed/2021/12/GHSA-r2j8-fmw2-73rf/GHSA-r2j8-fmw2-73rf.json +++ b/advisories/unreviewed/2021/12/GHSA-r2j8-fmw2-73rf/GHSA-r2j8-fmw2-73rf.json @@ -7,12 +7,8 @@ "CVE-2021-20856" ], "details": "Cross-site scripting vulnerability in ELECOM LAN routers (WRH-733GBK firmware v1.02.9 and prior and WRH-733GWH firmware v1.02.9 and prior) allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-r763-2x4q-j7xx/GHSA-r763-2x4q-j7xx.json b/advisories/unreviewed/2021/12/GHSA-r763-2x4q-j7xx/GHSA-r763-2x4q-j7xx.json index 3490203d982..28253d5bd26 100644 --- a/advisories/unreviewed/2021/12/GHSA-r763-2x4q-j7xx/GHSA-r763-2x4q-j7xx.json +++ b/advisories/unreviewed/2021/12/GHSA-r763-2x4q-j7xx/GHSA-r763-2x4q-j7xx.json @@ -7,12 +7,8 @@ "CVE-2021-43991" ], "details": "The Kentico Xperience CMS version 13.0 – 13.0.43 is vulnerable to a persistent Cross-Site Scripting (XSS) vulnerability (also known as Stored or Second-Order XSS). Persistent XSS vulnerabilities occur when the application stores and retrieves client supplied data without proper handling of dangerous content. This type of XSS vulnerability is exploited by submitting malicious script content to the application which is then retrieved and executed by other application users. The attacker could exploit this to conduct a range of attacks against users of the affected application such as session hijacking, account take over and accessing sensitive data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-rc9p-cjq8-2vpg/GHSA-rc9p-cjq8-2vpg.json b/advisories/unreviewed/2021/12/GHSA-rc9p-cjq8-2vpg/GHSA-rc9p-cjq8-2vpg.json index f1a328307c6..c81c119a628 100644 --- a/advisories/unreviewed/2021/12/GHSA-rc9p-cjq8-2vpg/GHSA-rc9p-cjq8-2vpg.json +++ b/advisories/unreviewed/2021/12/GHSA-rc9p-cjq8-2vpg/GHSA-rc9p-cjq8-2vpg.json @@ -7,12 +7,8 @@ "CVE-2021-28237" ], "details": "LibreDWG v0.12.3 was discovered to contain a heap-buffer overflow via decode_preR13.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-rgrq-wj36-mqjf/GHSA-rgrq-wj36-mqjf.json b/advisories/unreviewed/2021/12/GHSA-rgrq-wj36-mqjf/GHSA-rgrq-wj36-mqjf.json index 36f9cd3d75c..3c8c8de0d4a 100644 --- a/advisories/unreviewed/2021/12/GHSA-rgrq-wj36-mqjf/GHSA-rgrq-wj36-mqjf.json +++ b/advisories/unreviewed/2021/12/GHSA-rgrq-wj36-mqjf/GHSA-rgrq-wj36-mqjf.json @@ -7,12 +7,8 @@ "CVE-2021-44348" ], "details": "SQL Injection vulnerability exists in TuziCMS v2.0.6 via the id parameer in App\\Manage\\Controller\\AdvertController.class.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-rhh2-2xqm-4xj9/GHSA-rhh2-2xqm-4xj9.json b/advisories/unreviewed/2021/12/GHSA-rhh2-2xqm-4xj9/GHSA-rhh2-2xqm-4xj9.json index fff0f7a3ef9..53f39d281d7 100644 --- a/advisories/unreviewed/2021/12/GHSA-rhh2-2xqm-4xj9/GHSA-rhh2-2xqm-4xj9.json +++ b/advisories/unreviewed/2021/12/GHSA-rhh2-2xqm-4xj9/GHSA-rhh2-2xqm-4xj9.json @@ -7,12 +7,8 @@ "CVE-2020-12140" ], "details": "A buffer overflow in os/net/mac/ble/ble-l2cap.c in the BLE stack in Contiki-NG 4.4 and earlier allows an attacker to execute arbitrary code via malicious L2CAP frames.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-rq3c-5748-pf79/GHSA-rq3c-5748-pf79.json b/advisories/unreviewed/2021/12/GHSA-rq3c-5748-pf79/GHSA-rq3c-5748-pf79.json index 2af871ff805..e28c634a0a1 100644 --- a/advisories/unreviewed/2021/12/GHSA-rq3c-5748-pf79/GHSA-rq3c-5748-pf79.json +++ b/advisories/unreviewed/2021/12/GHSA-rq3c-5748-pf79/GHSA-rq3c-5748-pf79.json @@ -7,12 +7,8 @@ "CVE-2021-37084" ], "details": "There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious invoking other functions of the Smart Assistant through text messages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-rvhw-67v9-6cg9/GHSA-rvhw-67v9-6cg9.json b/advisories/unreviewed/2021/12/GHSA-rvhw-67v9-6cg9/GHSA-rvhw-67v9-6cg9.json index ac96303c890..f2f048778a4 100644 --- a/advisories/unreviewed/2021/12/GHSA-rvhw-67v9-6cg9/GHSA-rvhw-67v9-6cg9.json +++ b/advisories/unreviewed/2021/12/GHSA-rvhw-67v9-6cg9/GHSA-rvhw-67v9-6cg9.json @@ -7,12 +7,8 @@ "CVE-2021-37047" ], "details": "There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause some services to restart.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-rwm6-qx2j-8fmr/GHSA-rwm6-qx2j-8fmr.json b/advisories/unreviewed/2021/12/GHSA-rwm6-qx2j-8fmr/GHSA-rwm6-qx2j-8fmr.json index 2efe4cbb338..3a045d73dc1 100644 --- a/advisories/unreviewed/2021/12/GHSA-rwm6-qx2j-8fmr/GHSA-rwm6-qx2j-8fmr.json +++ b/advisories/unreviewed/2021/12/GHSA-rwm6-qx2j-8fmr/GHSA-rwm6-qx2j-8fmr.json @@ -7,12 +7,8 @@ "CVE-2021-24041" ], "details": "A missing bounds check in image blurring code prior to WhatsApp for Android v2.21.22.7 and WhatsApp Business for Android v2.21.22.7 could have allowed an out-of-bounds write if a user sent a malicious image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-v2pc-4786-wv8f/GHSA-v2pc-4786-wv8f.json b/advisories/unreviewed/2021/12/GHSA-v2pc-4786-wv8f/GHSA-v2pc-4786-wv8f.json index 1f06d9b15ba..d3bc85da663 100644 --- a/advisories/unreviewed/2021/12/GHSA-v2pc-4786-wv8f/GHSA-v2pc-4786-wv8f.json +++ b/advisories/unreviewed/2021/12/GHSA-v2pc-4786-wv8f/GHSA-v2pc-4786-wv8f.json @@ -7,12 +7,8 @@ "CVE-2021-44187" ], "details": "Adobe Bridge versions 11.1.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious SGI file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-v4xw-qmpv-pr5g/GHSA-v4xw-qmpv-pr5g.json b/advisories/unreviewed/2021/12/GHSA-v4xw-qmpv-pr5g/GHSA-v4xw-qmpv-pr5g.json index 57a7f2a40ad..40f9a713b9c 100644 --- a/advisories/unreviewed/2021/12/GHSA-v4xw-qmpv-pr5g/GHSA-v4xw-qmpv-pr5g.json +++ b/advisories/unreviewed/2021/12/GHSA-v4xw-qmpv-pr5g/GHSA-v4xw-qmpv-pr5g.json @@ -7,12 +7,8 @@ "CVE-2021-44046" ], "details": "An out-of-bounds write vulnerability exists when reading U3D files in Open Design Alliance PRC SDK before 2022.11. An unchecked return value of a function (verifying input data from a U3D file) leads to an out-of-bounds write. An attacker can leverage this vulnerability to execute code in the context of the current process.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-v5x7-7m6q-5hvf/GHSA-v5x7-7m6q-5hvf.json b/advisories/unreviewed/2021/12/GHSA-v5x7-7m6q-5hvf/GHSA-v5x7-7m6q-5hvf.json index 6f8f10c4070..836749fb754 100644 --- a/advisories/unreviewed/2021/12/GHSA-v5x7-7m6q-5hvf/GHSA-v5x7-7m6q-5hvf.json +++ b/advisories/unreviewed/2021/12/GHSA-v5x7-7m6q-5hvf/GHSA-v5x7-7m6q-5hvf.json @@ -7,12 +7,8 @@ "CVE-2021-23262" ], "details": "Authenticated administrators may modify the main YAML configuration file and load a Java class resulting in RCE.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-v77r-m6p5-82m8/GHSA-v77r-m6p5-82m8.json b/advisories/unreviewed/2021/12/GHSA-v77r-m6p5-82m8/GHSA-v77r-m6p5-82m8.json index 9d2df15dec3..cda77bc7ecb 100644 --- a/advisories/unreviewed/2021/12/GHSA-v77r-m6p5-82m8/GHSA-v77r-m6p5-82m8.json +++ b/advisories/unreviewed/2021/12/GHSA-v77r-m6p5-82m8/GHSA-v77r-m6p5-82m8.json @@ -7,12 +7,8 @@ "CVE-2021-24924" ], "details": "The Email Log WordPress plugin before 2.4.8 does not escape the d parameter before outputting it back in an attribute in the Log page, leading to a Reflected Cross-Site Scripting issue", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-v838-9cq8-hrhc/GHSA-v838-9cq8-hrhc.json b/advisories/unreviewed/2021/12/GHSA-v838-9cq8-hrhc/GHSA-v838-9cq8-hrhc.json index 9c2df4c711d..c527a55f849 100644 --- a/advisories/unreviewed/2021/12/GHSA-v838-9cq8-hrhc/GHSA-v838-9cq8-hrhc.json +++ b/advisories/unreviewed/2021/12/GHSA-v838-9cq8-hrhc/GHSA-v838-9cq8-hrhc.json @@ -7,12 +7,8 @@ "CVE-2021-42980" ], "details": "NoMachine Cloud Server is affected by Buffer Overflow. IOCTL Handler 0x22001B in the NoMachine Cloud Server above 4.0.346 and below 7.7.4 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-v978-p5g5-3r76/GHSA-v978-p5g5-3r76.json b/advisories/unreviewed/2021/12/GHSA-v978-p5g5-3r76/GHSA-v978-p5g5-3r76.json index 07c71cba4d6..4e339b5c039 100644 --- a/advisories/unreviewed/2021/12/GHSA-v978-p5g5-3r76/GHSA-v978-p5g5-3r76.json +++ b/advisories/unreviewed/2021/12/GHSA-v978-p5g5-3r76/GHSA-v978-p5g5-3r76.json @@ -7,12 +7,8 @@ "CVE-2021-43963" ], "details": "An issue was discovered in Couchbase Sync Gateway 2.7.0 through 2.8.2. The bucket credentials used to read and write data in Couchbase Server were insecurely being stored in the metadata within sync documents written to the bucket. Users with read access could use these credentials to obtain write access. (This issue does not affect clusters where Sync Gateway is authenticated with X.509 client certificates. This issue also does not affect clusters where shared bucket access is not enabled on Sync Gateway.)", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-vh44-3832-vcr2/GHSA-vh44-3832-vcr2.json b/advisories/unreviewed/2021/12/GHSA-vh44-3832-vcr2/GHSA-vh44-3832-vcr2.json index 5fa62790f9d..e4a60aa6ae9 100644 --- a/advisories/unreviewed/2021/12/GHSA-vh44-3832-vcr2/GHSA-vh44-3832-vcr2.json +++ b/advisories/unreviewed/2021/12/GHSA-vh44-3832-vcr2/GHSA-vh44-3832-vcr2.json @@ -7,12 +7,8 @@ "CVE-2021-38909" ], "details": "IBM Cognos Analytics 11.1.7 and 11.2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 209706.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-vh8g-5qx4-gf72/GHSA-vh8g-5qx4-gf72.json b/advisories/unreviewed/2021/12/GHSA-vh8g-5qx4-gf72/GHSA-vh8g-5qx4-gf72.json index 6d8cb88b18d..716de978f33 100644 --- a/advisories/unreviewed/2021/12/GHSA-vh8g-5qx4-gf72/GHSA-vh8g-5qx4-gf72.json +++ b/advisories/unreviewed/2021/12/GHSA-vh8g-5qx4-gf72/GHSA-vh8g-5qx4-gf72.json @@ -7,12 +7,8 @@ "CVE-2021-37090" ], "details": "There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to process crash.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-vrf8-x8c6-hvgw/GHSA-vrf8-x8c6-hvgw.json b/advisories/unreviewed/2021/12/GHSA-vrf8-x8c6-hvgw/GHSA-vrf8-x8c6-hvgw.json index af84f65f7f7..7ca80979816 100644 --- a/advisories/unreviewed/2021/12/GHSA-vrf8-x8c6-hvgw/GHSA-vrf8-x8c6-hvgw.json +++ b/advisories/unreviewed/2021/12/GHSA-vrf8-x8c6-hvgw/GHSA-vrf8-x8c6-hvgw.json @@ -7,12 +7,8 @@ "CVE-2021-37064" ], "details": "There is a Improper Limitation of a Pathname to a Restricted Directory vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to arbitrary file created.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-vrh8-5phj-x6h2/GHSA-vrh8-5phj-x6h2.json b/advisories/unreviewed/2021/12/GHSA-vrh8-5phj-x6h2/GHSA-vrh8-5phj-x6h2.json index 0acacd30ac1..c0532a4d6fd 100644 --- a/advisories/unreviewed/2021/12/GHSA-vrh8-5phj-x6h2/GHSA-vrh8-5phj-x6h2.json +++ b/advisories/unreviewed/2021/12/GHSA-vrh8-5phj-x6h2/GHSA-vrh8-5phj-x6h2.json @@ -7,12 +7,8 @@ "CVE-2021-35242" ], "details": "Serv-U server responds with valid CSRFToken when the request contains only Session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-vvcf-vw9f-7qr5/GHSA-vvcf-vw9f-7qr5.json b/advisories/unreviewed/2021/12/GHSA-vvcf-vw9f-7qr5/GHSA-vvcf-vw9f-7qr5.json index 87427719b1e..6e0350f1317 100644 --- a/advisories/unreviewed/2021/12/GHSA-vvcf-vw9f-7qr5/GHSA-vvcf-vw9f-7qr5.json +++ b/advisories/unreviewed/2021/12/GHSA-vvcf-vw9f-7qr5/GHSA-vvcf-vw9f-7qr5.json @@ -7,12 +7,8 @@ "CVE-2021-44479" ], "details": "NXP Kinetis K82 devices have a buffer over-read via a crafted wlength value in a GET Status-Other request during use of USB In-System Programming (ISP) mode. This discloses protected flash memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-vwrw-268p-vrw7/GHSA-vwrw-268p-vrw7.json b/advisories/unreviewed/2021/12/GHSA-vwrw-268p-vrw7/GHSA-vwrw-268p-vrw7.json index 61d9873f452..d0d3051f61b 100644 --- a/advisories/unreviewed/2021/12/GHSA-vwrw-268p-vrw7/GHSA-vwrw-268p-vrw7.json +++ b/advisories/unreviewed/2021/12/GHSA-vwrw-268p-vrw7/GHSA-vwrw-268p-vrw7.json @@ -7,12 +7,8 @@ "CVE-2021-43002" ], "details": "Amzetta zPortal DVM Tools is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amzetta zPortal DVM Tools <= v3.3.148.148 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-vwxq-pwm2-rf57/GHSA-vwxq-pwm2-rf57.json b/advisories/unreviewed/2021/12/GHSA-vwxq-pwm2-rf57/GHSA-vwxq-pwm2-rf57.json index d58c7888abb..1245fbae43d 100644 --- a/advisories/unreviewed/2021/12/GHSA-vwxq-pwm2-rf57/GHSA-vwxq-pwm2-rf57.json +++ b/advisories/unreviewed/2021/12/GHSA-vwxq-pwm2-rf57/GHSA-vwxq-pwm2-rf57.json @@ -7,12 +7,8 @@ "CVE-2021-43637" ], "details": "Amazon WorkSpaces agent is affected by Buffer Overflow. IOCTL Handler 0x22001B in the Amazon WorkSpaces agent below v1.0.1.1537 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-w2h6-9f22-wxjx/GHSA-w2h6-9f22-wxjx.json b/advisories/unreviewed/2021/12/GHSA-w2h6-9f22-wxjx/GHSA-w2h6-9f22-wxjx.json index f54fa36d4bc..fffb3356cba 100644 --- a/advisories/unreviewed/2021/12/GHSA-w2h6-9f22-wxjx/GHSA-w2h6-9f22-wxjx.json +++ b/advisories/unreviewed/2021/12/GHSA-w2h6-9f22-wxjx/GHSA-w2h6-9f22-wxjx.json @@ -7,12 +7,8 @@ "CVE-2021-42686" ], "details": "An Integer Overflow exists in Accops HyWorks Windows Client prior to v 3.2.8.200. The IOCTL Handler 0x22001B in the Accops HyWorks Windows Client prior to v 3.2.8.200 allow local attackers to execute arbitrary code in kernel mode or cause a denial of service (memory corruption and OS crash) via specially crafted I/O Request Packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-w2mh-7rhp-pm58/GHSA-w2mh-7rhp-pm58.json b/advisories/unreviewed/2021/12/GHSA-w2mh-7rhp-pm58/GHSA-w2mh-7rhp-pm58.json index 998662ee36c..5caa5cd79ee 100644 --- a/advisories/unreviewed/2021/12/GHSA-w2mh-7rhp-pm58/GHSA-w2mh-7rhp-pm58.json +++ b/advisories/unreviewed/2021/12/GHSA-w2mh-7rhp-pm58/GHSA-w2mh-7rhp-pm58.json @@ -7,12 +7,8 @@ "CVE-2021-43471" ], "details": "In Canon LBP223 printers, the System Manager Mode login does not require an account password or PIN. An attacker can remotely shut down the device after entering the background, creating a denial of service vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-w3vf-7fpc-9fww/GHSA-w3vf-7fpc-9fww.json b/advisories/unreviewed/2021/12/GHSA-w3vf-7fpc-9fww/GHSA-w3vf-7fpc-9fww.json index cb929dc0651..917ab8f68db 100644 --- a/advisories/unreviewed/2021/12/GHSA-w3vf-7fpc-9fww/GHSA-w3vf-7fpc-9fww.json +++ b/advisories/unreviewed/2021/12/GHSA-w3vf-7fpc-9fww/GHSA-w3vf-7fpc-9fww.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-w52v-mf92-rmg7/GHSA-w52v-mf92-rmg7.json b/advisories/unreviewed/2021/12/GHSA-w52v-mf92-rmg7/GHSA-w52v-mf92-rmg7.json index 40a9a8cd093..1b241f6bc69 100644 --- a/advisories/unreviewed/2021/12/GHSA-w52v-mf92-rmg7/GHSA-w52v-mf92-rmg7.json +++ b/advisories/unreviewed/2021/12/GHSA-w52v-mf92-rmg7/GHSA-w52v-mf92-rmg7.json @@ -7,12 +7,8 @@ "CVE-2021-44048" ], "details": "An out-of-bounds write vulnerability exists when reading a TIF file using Open Design Alliance (ODA) Drawings Explorer before 2022.11. The specific issue exists after loading TIF files. Crafted data in a TIF file can trigger a write operation past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of the current process.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-w7r5-r5gp-95jc/GHSA-w7r5-r5gp-95jc.json b/advisories/unreviewed/2021/12/GHSA-w7r5-r5gp-95jc/GHSA-w7r5-r5gp-95jc.json index fad8085bf11..e7caf710e15 100644 --- a/advisories/unreviewed/2021/12/GHSA-w7r5-r5gp-95jc/GHSA-w7r5-r5gp-95jc.json +++ b/advisories/unreviewed/2021/12/GHSA-w7r5-r5gp-95jc/GHSA-w7r5-r5gp-95jc.json @@ -7,12 +7,8 @@ "CVE-2021-20863" ], "details": "OS command injection vulnerability in ELECOM routers (WRC-1167GST2 firmware v1.25 and prior, WRC-1167GST2A firmware v1.25 and prior, WRC-1167GST2H firmware v1.25 and prior, WRC-2533GS2-B firmware v1.52 and prior, WRC-2533GS2-W firmware v1.52 and prior, WRC-1750GS firmware v1.03 and prior, WRC-1750GSV firmware v2.11 and prior, WRC-1900GST firmware v1.03 and prior, WRC-2533GST firmware v1.03 and prior, WRC-2533GSTA firmware v1.03 and prior, WRC-2533GST2 firmware v1.25 and prior, WRC-2533GST2SP firmware v1.25 and prior, WRC-2533GST2-G firmware v1.25 and prior, and EDWRC-2533GST2 firmware v1.25 and prior) allows a network-adjacent authenticated attackers to execute an arbitrary OS command with the root privilege via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-whcp-cmr3-4vgp/GHSA-whcp-cmr3-4vgp.json b/advisories/unreviewed/2021/12/GHSA-whcp-cmr3-4vgp/GHSA-whcp-cmr3-4vgp.json index ab22c9bce93..166cc75a5e8 100644 --- a/advisories/unreviewed/2021/12/GHSA-whcp-cmr3-4vgp/GHSA-whcp-cmr3-4vgp.json +++ b/advisories/unreviewed/2021/12/GHSA-whcp-cmr3-4vgp/GHSA-whcp-cmr3-4vgp.json @@ -7,12 +7,8 @@ "CVE-2021-20470" ], "details": "IBM Cognos Analytics 11.1.7 and 11.2.0 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 196339.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-wmrg-883r-jcp6/GHSA-wmrg-883r-jcp6.json b/advisories/unreviewed/2021/12/GHSA-wmrg-883r-jcp6/GHSA-wmrg-883r-jcp6.json index 445fa1c0938..c327eaca8d7 100644 --- a/advisories/unreviewed/2021/12/GHSA-wmrg-883r-jcp6/GHSA-wmrg-883r-jcp6.json +++ b/advisories/unreviewed/2021/12/GHSA-wmrg-883r-jcp6/GHSA-wmrg-883r-jcp6.json @@ -7,12 +7,8 @@ "CVE-2021-35415" ], "details": "A stored cross-site scripting (XSS) vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the course \"Title\" and \"Content\" fields.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-wr64-8539-w4g9/GHSA-wr64-8539-w4g9.json b/advisories/unreviewed/2021/12/GHSA-wr64-8539-w4g9/GHSA-wr64-8539-w4g9.json index d067f2351ae..378b5df5232 100644 --- a/advisories/unreviewed/2021/12/GHSA-wr64-8539-w4g9/GHSA-wr64-8539-w4g9.json +++ b/advisories/unreviewed/2021/12/GHSA-wr64-8539-w4g9/GHSA-wr64-8539-w4g9.json @@ -7,12 +7,8 @@ "CVE-2021-35414" ], "details": "Chamilo LMS v1.11.x was discovered to contain a SQL injection via the doc parameter in main/plagiarism/compilatio/upload.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-x3fm-96g7-h798/GHSA-x3fm-96g7-h798.json b/advisories/unreviewed/2021/12/GHSA-x3fm-96g7-h798/GHSA-x3fm-96g7-h798.json index 095f0a04efc..42eb6c15fd8 100644 --- a/advisories/unreviewed/2021/12/GHSA-x3fm-96g7-h798/GHSA-x3fm-96g7-h798.json +++ b/advisories/unreviewed/2021/12/GHSA-x3fm-96g7-h798/GHSA-x3fm-96g7-h798.json @@ -7,12 +7,8 @@ "CVE-2021-42711" ], "details": "Barracuda Network Access Client before 5.2.2 creates a Temporary File in a Directory with Insecure Permissions. This file is executed with SYSTEM privileges when an unprivileged user performs a repair operation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-xf53-cw5f-wr7r/GHSA-xf53-cw5f-wr7r.json b/advisories/unreviewed/2021/12/GHSA-xf53-cw5f-wr7r/GHSA-xf53-cw5f-wr7r.json index d2b63bdb645..44053be4aae 100644 --- a/advisories/unreviewed/2021/12/GHSA-xf53-cw5f-wr7r/GHSA-xf53-cw5f-wr7r.json +++ b/advisories/unreviewed/2021/12/GHSA-xf53-cw5f-wr7r/GHSA-xf53-cw5f-wr7r.json @@ -7,12 +7,8 @@ "CVE-2021-37076" ], "details": "There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-xff6-c2cq-cpw8/GHSA-xff6-c2cq-cpw8.json b/advisories/unreviewed/2021/12/GHSA-xff6-c2cq-cpw8/GHSA-xff6-c2cq-cpw8.json index 76233221263..4c86d10b219 100644 --- a/advisories/unreviewed/2021/12/GHSA-xff6-c2cq-cpw8/GHSA-xff6-c2cq-cpw8.json +++ b/advisories/unreviewed/2021/12/GHSA-xff6-c2cq-cpw8/GHSA-xff6-c2cq-cpw8.json @@ -7,12 +7,8 @@ "CVE-2021-37060" ], "details": "There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to SAMGR Heap Address Leakage.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-xfwf-gv74-qfmc/GHSA-xfwf-gv74-qfmc.json b/advisories/unreviewed/2021/12/GHSA-xfwf-gv74-qfmc/GHSA-xfwf-gv74-qfmc.json index 8018af5ecf0..60958a17162 100644 --- a/advisories/unreviewed/2021/12/GHSA-xfwf-gv74-qfmc/GHSA-xfwf-gv74-qfmc.json +++ b/advisories/unreviewed/2021/12/GHSA-xfwf-gv74-qfmc/GHSA-xfwf-gv74-qfmc.json @@ -7,12 +7,8 @@ "CVE-2021-37095" ], "details": "There is a Integer Overflow or Wraparound vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to remote denial of service and potential remote code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-xj2x-h5m7-w8gv/GHSA-xj2x-h5m7-w8gv.json b/advisories/unreviewed/2021/12/GHSA-xj2x-h5m7-w8gv/GHSA-xj2x-h5m7-w8gv.json index 73c40e21c4a..89c4df58b61 100644 --- a/advisories/unreviewed/2021/12/GHSA-xj2x-h5m7-w8gv/GHSA-xj2x-h5m7-w8gv.json +++ b/advisories/unreviewed/2021/12/GHSA-xj2x-h5m7-w8gv/GHSA-xj2x-h5m7-w8gv.json @@ -7,12 +7,8 @@ "CVE-2021-37940" ], "details": "An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server integration. Using this vulnerability, a malicious Workplace Search admin could use the GHES integration to view hosts that might not be publicly accessible.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-xj38-xc52-mx4x/GHSA-xj38-xc52-mx4x.json b/advisories/unreviewed/2021/12/GHSA-xj38-xc52-mx4x/GHSA-xj38-xc52-mx4x.json index 2ece81d9f28..d5a2cb9744a 100644 --- a/advisories/unreviewed/2021/12/GHSA-xj38-xc52-mx4x/GHSA-xj38-xc52-mx4x.json +++ b/advisories/unreviewed/2021/12/GHSA-xj38-xc52-mx4x/GHSA-xj38-xc52-mx4x.json @@ -7,12 +7,8 @@ "CVE-2021-44021" ], "details": "An unnecessary privilege vulnerability in Trend Micro Worry-Free Business Security 10.0 SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-44019 and 44020.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-xqww-pvrp-pccm/GHSA-xqww-pvrp-pccm.json b/advisories/unreviewed/2021/12/GHSA-xqww-pvrp-pccm/GHSA-xqww-pvrp-pccm.json index f223a0f58f6..95335c424ea 100644 --- a/advisories/unreviewed/2021/12/GHSA-xqww-pvrp-pccm/GHSA-xqww-pvrp-pccm.json +++ b/advisories/unreviewed/2021/12/GHSA-xqww-pvrp-pccm/GHSA-xqww-pvrp-pccm.json @@ -7,12 +7,8 @@ "CVE-2021-24714" ], "details": "The Import any XML or CSV File to WordPress plugin before 3.6.3 does not escape the Import's Title and Unique Identifier fields before outputting them in admin pages, which could allow high privilege users to perform Cross-Site attacks even when the unfiltered_html capability is disallowed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-xw2f-f9v2-gh6f/GHSA-xw2f-f9v2-gh6f.json b/advisories/unreviewed/2021/12/GHSA-xw2f-f9v2-gh6f/GHSA-xw2f-f9v2-gh6f.json index fccaa3d23e5..cee5e73d25f 100644 --- a/advisories/unreviewed/2021/12/GHSA-xw2f-f9v2-gh6f/GHSA-xw2f-f9v2-gh6f.json +++ b/advisories/unreviewed/2021/12/GHSA-xw2f-f9v2-gh6f/GHSA-xw2f-f9v2-gh6f.json @@ -7,12 +7,8 @@ "CVE-2021-23261" ], "details": "Authenticated administrators may override the system configuration file and cause a denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2021/12/GHSA-xw88-4xx7-j3f3/GHSA-xw88-4xx7-j3f3.json b/advisories/unreviewed/2021/12/GHSA-xw88-4xx7-j3f3/GHSA-xw88-4xx7-j3f3.json index 36a480b53ef..18de2cc0229 100644 --- a/advisories/unreviewed/2021/12/GHSA-xw88-4xx7-j3f3/GHSA-xw88-4xx7-j3f3.json +++ b/advisories/unreviewed/2021/12/GHSA-xw88-4xx7-j3f3/GHSA-xw88-4xx7-j3f3.json @@ -7,12 +7,8 @@ "CVE-2021-37083" ], "details": "There is a NULL Pointer Dereference vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Denial of Service Attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-xwgf-rg8j-2j5x/GHSA-xwgf-rg8j-2j5x.json b/advisories/unreviewed/2021/12/GHSA-xwgf-rg8j-2j5x/GHSA-xwgf-rg8j-2j5x.json index 638cde3b0f4..14df329b47a 100644 --- a/advisories/unreviewed/2021/12/GHSA-xwgf-rg8j-2j5x/GHSA-xwgf-rg8j-2j5x.json +++ b/advisories/unreviewed/2021/12/GHSA-xwgf-rg8j-2j5x/GHSA-xwgf-rg8j-2j5x.json @@ -7,12 +7,8 @@ "CVE-2021-22955" ], "details": "A unauthenticated denial of service vulnerability exists in Citrix ADC <13.0-83.27, <12.1-63.22 and 11.1-65.23 when configured as a VPN (Gateway) or AAA virtual server could allow an attacker to cause a temporary disruption of the Management GUI, Nitro API, and RPC communication.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-m92x-373g-xc36/GHSA-m92x-373g-xc36.json b/advisories/unreviewed/2022/02/GHSA-m92x-373g-xc36/GHSA-m92x-373g-xc36.json index cf7ee4227d8..c31e64764e9 100644 --- a/advisories/unreviewed/2022/02/GHSA-m92x-373g-xc36/GHSA-m92x-373g-xc36.json +++ b/advisories/unreviewed/2022/02/GHSA-m92x-373g-xc36/GHSA-m92x-373g-xc36.json @@ -7,12 +7,8 @@ "CVE-2020-16154" ], "details": "The App::cpanminus package 1.7044 for Perl allows Signature Verification Bypass.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-229h-mpm4-83qq/GHSA-229h-mpm4-83qq.json b/advisories/unreviewed/2022/05/GHSA-229h-mpm4-83qq/GHSA-229h-mpm4-83qq.json index f06e05f5698..2b33b772dee 100644 --- a/advisories/unreviewed/2022/05/GHSA-229h-mpm4-83qq/GHSA-229h-mpm4-83qq.json +++ b/advisories/unreviewed/2022/05/GHSA-229h-mpm4-83qq/GHSA-229h-mpm4-83qq.json @@ -7,12 +7,8 @@ "CVE-2009-2372" ], "details": "Drupal 6.x before 6.13 does not prevent users from modifying user signatures after the associated comment format has been changed to an administrator-controlled input format, which allows remote authenticated users to inject arbitrary web script, HTML, and possibly PHP code via a crafted user signature.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-23f2-7h54-3w8p/GHSA-23f2-7h54-3w8p.json b/advisories/unreviewed/2022/05/GHSA-23f2-7h54-3w8p/GHSA-23f2-7h54-3w8p.json index 67ace95b829..bf15f0052b2 100644 --- a/advisories/unreviewed/2022/05/GHSA-23f2-7h54-3w8p/GHSA-23f2-7h54-3w8p.json +++ b/advisories/unreviewed/2022/05/GHSA-23f2-7h54-3w8p/GHSA-23f2-7h54-3w8p.json @@ -7,12 +7,8 @@ "CVE-2009-2299" ], "details": "The Artofdefence Hyperguard Web Application Firewall (WAF) module before 2.5.5-11635, 3.0 before 3.0.3-11636, and 3.1 before 3.1.1-11637, a module for the Apache HTTP Server, allows remote attackers to cause a denial of service (memory consumption) via an HTTP request with a large Content-Length value but no POST data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2424-8qh4-3ggg/GHSA-2424-8qh4-3ggg.json b/advisories/unreviewed/2022/05/GHSA-2424-8qh4-3ggg/GHSA-2424-8qh4-3ggg.json index 503db026af1..214f9cae2cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-2424-8qh4-3ggg/GHSA-2424-8qh4-3ggg.json +++ b/advisories/unreviewed/2022/05/GHSA-2424-8qh4-3ggg/GHSA-2424-8qh4-3ggg.json @@ -7,12 +7,8 @@ "CVE-2009-2312" ], "details": "SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in config.txt and uses insecure permissions for this file, which allows local users to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2449-jcgg-97px/GHSA-2449-jcgg-97px.json b/advisories/unreviewed/2022/05/GHSA-2449-jcgg-97px/GHSA-2449-jcgg-97px.json index a006468c9b8..dfeda46c5a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-2449-jcgg-97px/GHSA-2449-jcgg-97px.json +++ b/advisories/unreviewed/2022/05/GHSA-2449-jcgg-97px/GHSA-2449-jcgg-97px.json @@ -7,12 +7,8 @@ "CVE-2009-2283" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the help jsp scripts in Sun Java Web Console 3.0.2 through 3.0.5, and Sun Java Web Console in Solaris 10, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-25fg-pjf6-wj33/GHSA-25fg-pjf6-wj33.json b/advisories/unreviewed/2022/05/GHSA-25fg-pjf6-wj33/GHSA-25fg-pjf6-wj33.json index b07b7d7a37b..26d7d3caba8 100644 --- a/advisories/unreviewed/2022/05/GHSA-25fg-pjf6-wj33/GHSA-25fg-pjf6-wj33.json +++ b/advisories/unreviewed/2022/05/GHSA-25fg-pjf6-wj33/GHSA-25fg-pjf6-wj33.json @@ -7,12 +7,8 @@ "CVE-2009-1984" ], "details": "Unspecified vulnerability in the Application Install component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the Patch Administrator.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-25rw-qhcc-7gp7/GHSA-25rw-qhcc-7gp7.json b/advisories/unreviewed/2022/05/GHSA-25rw-qhcc-7gp7/GHSA-25rw-qhcc-7gp7.json index b32f5cf339b..ea93b599d9a 100644 --- a/advisories/unreviewed/2022/05/GHSA-25rw-qhcc-7gp7/GHSA-25rw-qhcc-7gp7.json +++ b/advisories/unreviewed/2022/05/GHSA-25rw-qhcc-7gp7/GHSA-25rw-qhcc-7gp7.json @@ -7,12 +7,8 @@ "CVE-2009-2306" ], "details": "The ARD-9808 DVR card security camera stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a file containing usernames and passwords via a direct request for dvr.ini.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-264v-wvvx-84j4/GHSA-264v-wvvx-84j4.json b/advisories/unreviewed/2022/05/GHSA-264v-wvvx-84j4/GHSA-264v-wvvx-84j4.json index f020a0dc24f..4381d06dbc7 100644 --- a/advisories/unreviewed/2022/05/GHSA-264v-wvvx-84j4/GHSA-264v-wvvx-84j4.json +++ b/advisories/unreviewed/2022/05/GHSA-264v-wvvx-84j4/GHSA-264v-wvvx-84j4.json @@ -7,12 +7,8 @@ "CVE-2009-2095" ], "details": "PHP remote file inclusion vulnerability in template/simpledefault/admin/_masterlayout.php in Mundi Mail 0.8.2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the top parameter. NOTE: when allow_url_fopen is disabled, directory traversal attacks are possible to include and execute arbitrary local files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-26g9-59f6-jrc2/GHSA-26g9-59f6-jrc2.json b/advisories/unreviewed/2022/05/GHSA-26g9-59f6-jrc2/GHSA-26g9-59f6-jrc2.json index dfb3f72d1cf..7f4c286c9a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-26g9-59f6-jrc2/GHSA-26g9-59f6-jrc2.json +++ b/advisories/unreviewed/2022/05/GHSA-26g9-59f6-jrc2/GHSA-26g9-59f6-jrc2.json @@ -7,12 +7,8 @@ "CVE-2009-2098" ], "details": "SQL injection vulnerability in topicler.php in phPortal 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-26jq-wgp9-f66h/GHSA-26jq-wgp9-f66h.json b/advisories/unreviewed/2022/05/GHSA-26jq-wgp9-f66h/GHSA-26jq-wgp9-f66h.json index b4df96da621..b9e4c8128ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-26jq-wgp9-f66h/GHSA-26jq-wgp9-f66h.json +++ b/advisories/unreviewed/2022/05/GHSA-26jq-wgp9-f66h/GHSA-26jq-wgp9-f66h.json @@ -7,12 +7,8 @@ "CVE-2009-2375" ], "details": "Stack-based buffer overflow in Photo DVD Maker 8.02, and possibly earlier versions, allows remote attackers to execute arbitrary code via a long File_Name parameter in a .pdm file. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-27c9-9r9p-q3x6/GHSA-27c9-9r9p-q3x6.json b/advisories/unreviewed/2022/05/GHSA-27c9-9r9p-q3x6/GHSA-27c9-9r9p-q3x6.json index e4923630655..50eba28fdc8 100644 --- a/advisories/unreviewed/2022/05/GHSA-27c9-9r9p-q3x6/GHSA-27c9-9r9p-q3x6.json +++ b/advisories/unreviewed/2022/05/GHSA-27c9-9r9p-q3x6/GHSA-27c9-9r9p-q3x6.json @@ -7,12 +7,8 @@ "CVE-2009-2358" ], "details": "TekRADIUS 3.0 uses BUILTIN\\Users:R permissions for the TekRADIUS.ini file, which allows local users to obtain obfuscated database credentials by reading this file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2863-x4gc-m9xw/GHSA-2863-x4gc-m9xw.json b/advisories/unreviewed/2022/05/GHSA-2863-x4gc-m9xw/GHSA-2863-x4gc-m9xw.json index 75796dd2cc1..378df9de33a 100644 --- a/advisories/unreviewed/2022/05/GHSA-2863-x4gc-m9xw/GHSA-2863-x4gc-m9xw.json +++ b/advisories/unreviewed/2022/05/GHSA-2863-x4gc-m9xw/GHSA-2863-x4gc-m9xw.json @@ -7,12 +7,8 @@ "CVE-2009-2275" ], "details": "Directory traversal vulnerability in frontend/x3/stats/lastvisit.html in cPanel allows remote attackers to read arbitrary files via a .. (dot dot) in the domain parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-28hq-5337-p2wc/GHSA-28hq-5337-p2wc.json b/advisories/unreviewed/2022/05/GHSA-28hq-5337-p2wc/GHSA-28hq-5337-p2wc.json index 7b80cb7a68e..9586e6eaef2 100644 --- a/advisories/unreviewed/2022/05/GHSA-28hq-5337-p2wc/GHSA-28hq-5337-p2wc.json +++ b/advisories/unreviewed/2022/05/GHSA-28hq-5337-p2wc/GHSA-28hq-5337-p2wc.json @@ -7,12 +7,8 @@ "CVE-2009-2180" ], "details": "Multiple directory traversal vulnerabilities in upfiles/index.php in Pc4 Uploader 10.0 and earlier allow remote attackers to read arbitrary files via (1) a .. (dot dot) or (2) absolute path in the file parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-28x6-9x2p-p6mq/GHSA-28x6-9x2p-p6mq.json b/advisories/unreviewed/2022/05/GHSA-28x6-9x2p-p6mq/GHSA-28x6-9x2p-p6mq.json index 6184b1d9d73..f47701c2478 100644 --- a/advisories/unreviewed/2022/05/GHSA-28x6-9x2p-p6mq/GHSA-28x6-9x2p-p6mq.json +++ b/advisories/unreviewed/2022/05/GHSA-28x6-9x2p-p6mq/GHSA-28x6-9x2p-p6mq.json @@ -7,12 +7,8 @@ "CVE-2009-2064" ], "details": "Microsoft Internet Explorer 8, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to \"HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2cv8-42wc-fw72/GHSA-2cv8-42wc-fw72.json b/advisories/unreviewed/2022/05/GHSA-2cv8-42wc-fw72/GHSA-2cv8-42wc-fw72.json index 9508667810d..b48bc543825 100644 --- a/advisories/unreviewed/2022/05/GHSA-2cv8-42wc-fw72/GHSA-2cv8-42wc-fw72.json +++ b/advisories/unreviewed/2022/05/GHSA-2cv8-42wc-fw72/GHSA-2cv8-42wc-fw72.json @@ -7,12 +7,8 @@ "CVE-2009-2455" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in webadmin/admin.php in @mail 5.6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) type and (2) func parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2ffh-54r5-v5h5/GHSA-2ffh-54r5-v5h5.json b/advisories/unreviewed/2022/05/GHSA-2ffh-54r5-v5h5/GHSA-2ffh-54r5-v5h5.json index b70b37609bb..f04cb673eaa 100644 --- a/advisories/unreviewed/2022/05/GHSA-2ffh-54r5-v5h5/GHSA-2ffh-54r5-v5h5.json +++ b/advisories/unreviewed/2022/05/GHSA-2ffh-54r5-v5h5/GHSA-2ffh-54r5-v5h5.json @@ -7,12 +7,8 @@ "CVE-2009-2394" ], "details": "SQL injection vulnerability in cat.php in SMSPages 1.0 in Mr.Saphp Arabic Script Mobile (aka Messages Library) 2.0 allows remote attackers to execute arbitrary SQL commands via the CatID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2fgv-c9q9-5wwh/GHSA-2fgv-c9q9-5wwh.json b/advisories/unreviewed/2022/05/GHSA-2fgv-c9q9-5wwh/GHSA-2fgv-c9q9-5wwh.json index b278579fdf2..f64908cadc4 100644 --- a/advisories/unreviewed/2022/05/GHSA-2fgv-c9q9-5wwh/GHSA-2fgv-c9q9-5wwh.json +++ b/advisories/unreviewed/2022/05/GHSA-2fgv-c9q9-5wwh/GHSA-2fgv-c9q9-5wwh.json @@ -7,12 +7,8 @@ "CVE-2009-2468" ], "details": "Integer overflow in Apple CoreGraphics, as used in Safari before 4.0.3, Mozilla Firefox before 3.0.12, and Mac OS X 10.4.11 and 10.5.8, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long text run that triggers a heap-based buffer overflow during font glyph rendering, a related issue to CVE-2009-1194.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2fvw-3vhp-2m2r/GHSA-2fvw-3vhp-2m2r.json b/advisories/unreviewed/2022/05/GHSA-2fvw-3vhp-2m2r/GHSA-2fvw-3vhp-2m2r.json index f60cd7c16e0..1ce19d5e48a 100644 --- a/advisories/unreviewed/2022/05/GHSA-2fvw-3vhp-2m2r/GHSA-2fvw-3vhp-2m2r.json +++ b/advisories/unreviewed/2022/05/GHSA-2fvw-3vhp-2m2r/GHSA-2fvw-3vhp-2m2r.json @@ -7,12 +7,8 @@ "CVE-2009-2256" ], "details": "The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to cause a denial of service (web outage) via an HTTP POST request to cgi-bin/firmwarecfg.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2gq8-2h6m-37fj/GHSA-2gq8-2h6m-37fj.json b/advisories/unreviewed/2022/05/GHSA-2gq8-2h6m-37fj/GHSA-2gq8-2h6m-37fj.json index 02b7471e20b..aec96d2598f 100644 --- a/advisories/unreviewed/2022/05/GHSA-2gq8-2h6m-37fj/GHSA-2gq8-2h6m-37fj.json +++ b/advisories/unreviewed/2022/05/GHSA-2gq8-2h6m-37fj/GHSA-2gq8-2h6m-37fj.json @@ -7,12 +7,8 @@ "CVE-2009-2456" ], "details": "The DS\\NDSD component in Novell eDirectory 8.8 before SP5 allows remote attackers to cause a denial of service (ndsd core dump) via an LDAP request containing multiple . (dot) wildcard characters in the Relative Distinguished Name (RDN).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2h46-jqvr-3m6v/GHSA-2h46-jqvr-3m6v.json b/advisories/unreviewed/2022/05/GHSA-2h46-jqvr-3m6v/GHSA-2h46-jqvr-3m6v.json index adcd4f7ad9d..4514050da1d 100644 --- a/advisories/unreviewed/2022/05/GHSA-2h46-jqvr-3m6v/GHSA-2h46-jqvr-3m6v.json +++ b/advisories/unreviewed/2022/05/GHSA-2h46-jqvr-3m6v/GHSA-2h46-jqvr-3m6v.json @@ -7,12 +7,8 @@ "CVE-2009-2341" ], "details": "SQL injection vulnerability in albumdetail.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the albumid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2hg7-9ph2-q8p9/GHSA-2hg7-9ph2-q8p9.json b/advisories/unreviewed/2022/05/GHSA-2hg7-9ph2-q8p9/GHSA-2hg7-9ph2-q8p9.json index 8025995643e..553460ee6b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-2hg7-9ph2-q8p9/GHSA-2hg7-9ph2-q8p9.json +++ b/advisories/unreviewed/2022/05/GHSA-2hg7-9ph2-q8p9/GHSA-2hg7-9ph2-q8p9.json @@ -7,12 +7,8 @@ "CVE-2009-2813" ], "details": "Samba 3.4 before 3.4.2, 3.3 before 3.3.8, 3.2 before 3.2.15, and 3.0.12 through 3.0.36, as used in the SMB subsystem in Apple Mac OS X 10.5.8 when Windows File Sharing is enabled, Fedora 11, and other operating systems, does not properly handle errors in resolving pathnames, which allows remote authenticated users to bypass intended sharing restrictions, and read, create, or modify files, in certain circumstances involving user accounts that lack home directories.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -140,9 +136,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2j54-2x3p-5g5f/GHSA-2j54-2x3p-5g5f.json b/advisories/unreviewed/2022/05/GHSA-2j54-2x3p-5g5f/GHSA-2j54-2x3p-5g5f.json index ec50da9946c..a8a9e45ef2d 100644 --- a/advisories/unreviewed/2022/05/GHSA-2j54-2x3p-5g5f/GHSA-2j54-2x3p-5g5f.json +++ b/advisories/unreviewed/2022/05/GHSA-2j54-2x3p-5g5f/GHSA-2j54-2x3p-5g5f.json @@ -7,12 +7,8 @@ "CVE-2009-2545" ], "details": "SQL injection vulnerability in Advanced Electron Forum (AEF) 1.x, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the filename in an uploaded attachment. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2jcm-hjv4-6679/GHSA-2jcm-hjv4-6679.json b/advisories/unreviewed/2022/05/GHSA-2jcm-hjv4-6679/GHSA-2jcm-hjv4-6679.json index a61f2164360..02364b02bf0 100644 --- a/advisories/unreviewed/2022/05/GHSA-2jcm-hjv4-6679/GHSA-2jcm-hjv4-6679.json +++ b/advisories/unreviewed/2022/05/GHSA-2jcm-hjv4-6679/GHSA-2jcm-hjv4-6679.json @@ -7,12 +7,8 @@ "CVE-2009-1947" ], "details": "SQL injection vulnerability in the UnbDbEncode function in unb_lib/database.lib.php in Unclassified NewsBoard (UNB) 1.6.4 allows remote attackers to execute arbitrary SQL commands via the Query parameter in a search action to forum.php, a different vector than CVE-2005-3686.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2jv7-c5x2-xf95/GHSA-2jv7-c5x2-xf95.json b/advisories/unreviewed/2022/05/GHSA-2jv7-c5x2-xf95/GHSA-2jv7-c5x2-xf95.json index 86473f6dd67..e639cfa3ef2 100644 --- a/advisories/unreviewed/2022/05/GHSA-2jv7-c5x2-xf95/GHSA-2jv7-c5x2-xf95.json +++ b/advisories/unreviewed/2022/05/GHSA-2jv7-c5x2-xf95/GHSA-2jv7-c5x2-xf95.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2p2w-h5hm-5h78/GHSA-2p2w-h5hm-5h78.json b/advisories/unreviewed/2022/05/GHSA-2p2w-h5hm-5h78/GHSA-2p2w-h5hm-5h78.json index 9901e1d7eac..34bcf685fbe 100644 --- a/advisories/unreviewed/2022/05/GHSA-2p2w-h5hm-5h78/GHSA-2p2w-h5hm-5h78.json +++ b/advisories/unreviewed/2022/05/GHSA-2p2w-h5hm-5h78/GHSA-2p2w-h5hm-5h78.json @@ -7,12 +7,8 @@ "CVE-2009-2119" ], "details": "Cross-site scripting (XSS) vulnerability in the login interface (my.logon.php3) in F5 FirePass SSL VPN 5.5 through 5.5.2 and 6.0 through 6.0.3 allows remote attackers to inject arbitrary web script or HTML via a base64-encoded xcho parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2pcp-v6xv-h7m7/GHSA-2pcp-v6xv-h7m7.json b/advisories/unreviewed/2022/05/GHSA-2pcp-v6xv-h7m7/GHSA-2pcp-v6xv-h7m7.json index 3d4e4bf32e0..c01e9b68e29 100644 --- a/advisories/unreviewed/2022/05/GHSA-2pcp-v6xv-h7m7/GHSA-2pcp-v6xv-h7m7.json +++ b/advisories/unreviewed/2022/05/GHSA-2pcp-v6xv-h7m7/GHSA-2pcp-v6xv-h7m7.json @@ -7,12 +7,8 @@ "CVE-2009-2089" ], "details": "The Migration component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, when tracing is enabled and a 6.1 to 7.0 migration has occurred, allows remote authenticated users to obtain sensitive information by reading a Migration Trace file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2pf9-qfhh-xmmp/GHSA-2pf9-qfhh-xmmp.json b/advisories/unreviewed/2022/05/GHSA-2pf9-qfhh-xmmp/GHSA-2pf9-qfhh-xmmp.json index 544d3680d67..b3ebe261d34 100644 --- a/advisories/unreviewed/2022/05/GHSA-2pf9-qfhh-xmmp/GHSA-2pf9-qfhh-xmmp.json +++ b/advisories/unreviewed/2022/05/GHSA-2pf9-qfhh-xmmp/GHSA-2pf9-qfhh-xmmp.json @@ -7,12 +7,8 @@ "CVE-2009-2309" ], "details": "SQL injection vulnerability in index.php in Codice CMS 2 allows remote attackers to execute arbitrary SQL commands via the tag parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2qfw-pxqf-m278/GHSA-2qfw-pxqf-m278.json b/advisories/unreviewed/2022/05/GHSA-2qfw-pxqf-m278/GHSA-2qfw-pxqf-m278.json index 103b045454d..2db02cfb57a 100644 --- a/advisories/unreviewed/2022/05/GHSA-2qfw-pxqf-m278/GHSA-2qfw-pxqf-m278.json +++ b/advisories/unreviewed/2022/05/GHSA-2qfw-pxqf-m278/GHSA-2qfw-pxqf-m278.json @@ -7,12 +7,8 @@ "CVE-2009-1918" ], "details": "Microsoft Internet Explorer 5.01 SP4 and 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 do not properly handle table operations, which allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption by adding malformed elements to an empty DIV element, related to the getElementsByTagName method, aka \"HTML Objects Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2rrp-mjwj-c49q/GHSA-2rrp-mjwj-c49q.json b/advisories/unreviewed/2022/05/GHSA-2rrp-mjwj-c49q/GHSA-2rrp-mjwj-c49q.json index 1ff2699d773..a7df03641af 100644 --- a/advisories/unreviewed/2022/05/GHSA-2rrp-mjwj-c49q/GHSA-2rrp-mjwj-c49q.json +++ b/advisories/unreviewed/2022/05/GHSA-2rrp-mjwj-c49q/GHSA-2rrp-mjwj-c49q.json @@ -7,12 +7,8 @@ "CVE-2009-2338" ], "details": "Directory traversal vulnerability in includes/startmodules.inc.php in FreeWebshop.org 2.2.9 R2, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang_file parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2v73-9rwq-75qc/GHSA-2v73-9rwq-75qc.json b/advisories/unreviewed/2022/05/GHSA-2v73-9rwq-75qc/GHSA-2v73-9rwq-75qc.json index f9a2353c623..ef0c4ebf65b 100644 --- a/advisories/unreviewed/2022/05/GHSA-2v73-9rwq-75qc/GHSA-2v73-9rwq-75qc.json +++ b/advisories/unreviewed/2022/05/GHSA-2v73-9rwq-75qc/GHSA-2v73-9rwq-75qc.json @@ -7,12 +7,8 @@ "CVE-2009-1959" ], "details": "Off-by-one error in the event_wallops function in fe-common/irc/fe-events.c in irssi 0.8.13 allows remote IRC servers to cause a denial of service (crash) via an empty command, which triggers a one-byte buffer under-read and a one-byte buffer underflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2vg3-2jpr-xp58/GHSA-2vg3-2jpr-xp58.json b/advisories/unreviewed/2022/05/GHSA-2vg3-2jpr-xp58/GHSA-2vg3-2jpr-xp58.json index 9301bd68636..892db5edf79 100644 --- a/advisories/unreviewed/2022/05/GHSA-2vg3-2jpr-xp58/GHSA-2vg3-2jpr-xp58.json +++ b/advisories/unreviewed/2022/05/GHSA-2vg3-2jpr-xp58/GHSA-2vg3-2jpr-xp58.json @@ -7,12 +7,8 @@ "CVE-2009-2389" ], "details": "Multiple SQL injection vulnerabilities in newsscript.php in USOLVED NEWSolved 1.1.6, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) jahr or (2) idneu parameter in an archive action, or (3) the newsid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2vx8-fp5p-f94q/GHSA-2vx8-fp5p-f94q.json b/advisories/unreviewed/2022/05/GHSA-2vx8-fp5p-f94q/GHSA-2vx8-fp5p-f94q.json index 792114ee1a2..28fbcd359c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-2vx8-fp5p-f94q/GHSA-2vx8-fp5p-f94q.json +++ b/advisories/unreviewed/2022/05/GHSA-2vx8-fp5p-f94q/GHSA-2vx8-fp5p-f94q.json @@ -7,12 +7,8 @@ "CVE-2009-2475" ], "details": "Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to (1) LayoutQueue, (2) Cursor.predefined, (3) AccessibleResourceBundle.getContents, (4) ImageReaderSpi.STANDARD_INPUT_TYPE, (5) ImageWriterSpi.STANDARD_OUTPUT_TYPE, (6) the imageio plugins, (7) DnsContext.debug, (8) RmfFileReader/StandardMidiFileWriter.types, (9) AbstractSaslImpl.logger, (10) Synth.Region.uiToRegionMap/lowerCaseNameMap, (11) the Introspector class and a cache of BeanInfo, and (12) JAX-WS, a different vulnerability than CVE-2009-2673.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2x8w-vwh8-qfm3/GHSA-2x8w-vwh8-qfm3.json b/advisories/unreviewed/2022/05/GHSA-2x8w-vwh8-qfm3/GHSA-2x8w-vwh8-qfm3.json index 92a2af751f8..cb9cd5a2cf4 100644 --- a/advisories/unreviewed/2022/05/GHSA-2x8w-vwh8-qfm3/GHSA-2x8w-vwh8-qfm3.json +++ b/advisories/unreviewed/2022/05/GHSA-2x8w-vwh8-qfm3/GHSA-2x8w-vwh8-qfm3.json @@ -7,12 +7,8 @@ "CVE-2009-2111" ], "details": "Static code injection vulnerability in add_reg.php in DB Top Sites 1.0 allows remote attackers to inject arbitrary PHP code via a crafted (1) url and (2) location parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2xmp-4pp9-8g46/GHSA-2xmp-4pp9-8g46.json b/advisories/unreviewed/2022/05/GHSA-2xmp-4pp9-8g46/GHSA-2xmp-4pp9-8g46.json index a68ec4cf1b4..d456a2e24c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-2xmp-4pp9-8g46/GHSA-2xmp-4pp9-8g46.json +++ b/advisories/unreviewed/2022/05/GHSA-2xmp-4pp9-8g46/GHSA-2xmp-4pp9-8g46.json @@ -7,12 +7,8 @@ "CVE-2009-2179" ], "details": "SQL injection vulnerability in search.php in phpDatingClub 3.7 allows remote attackers to execute arbitrary SQL commands via the sform[day] parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2xq8-5hcx-pxxh/GHSA-2xq8-5hcx-pxxh.json b/advisories/unreviewed/2022/05/GHSA-2xq8-5hcx-pxxh/GHSA-2xq8-5hcx-pxxh.json index a5c62b6e2b1..afd0168fb45 100644 --- a/advisories/unreviewed/2022/05/GHSA-2xq8-5hcx-pxxh/GHSA-2xq8-5hcx-pxxh.json +++ b/advisories/unreviewed/2022/05/GHSA-2xq8-5hcx-pxxh/GHSA-2xq8-5hcx-pxxh.json @@ -7,12 +7,8 @@ "CVE-2009-2293" ], "details": "Optimum Web Design Tutorial Share 3.5.0 and earlier allows remote attackers to bypass authentication and obtain administrative access by setting the usernamed cookie parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2xxv-635v-2vww/GHSA-2xxv-635v-2vww.json b/advisories/unreviewed/2022/05/GHSA-2xxv-635v-2vww/GHSA-2xxv-635v-2vww.json index 59978cc0b32..05ed41b7392 100644 --- a/advisories/unreviewed/2022/05/GHSA-2xxv-635v-2vww/GHSA-2xxv-635v-2vww.json +++ b/advisories/unreviewed/2022/05/GHSA-2xxv-635v-2vww/GHSA-2xxv-635v-2vww.json @@ -7,12 +7,8 @@ "CVE-2009-1972" ], "details": "Unspecified vulnerability in the Auditing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect integrity, related to DBMS_SYS_SQL and DBMS_SQL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-34vp-g596-7mwh/GHSA-34vp-g596-7mwh.json b/advisories/unreviewed/2022/05/GHSA-34vp-g596-7mwh/GHSA-34vp-g596-7mwh.json index 3fddd2fd8bf..92b3cf35949 100644 --- a/advisories/unreviewed/2022/05/GHSA-34vp-g596-7mwh/GHSA-34vp-g596-7mwh.json +++ b/advisories/unreviewed/2022/05/GHSA-34vp-g596-7mwh/GHSA-34vp-g596-7mwh.json @@ -7,12 +7,8 @@ "CVE-2009-2307" ], "details": "SQL injection vulnerability in the CWGuestBook module 2.1 and earlier for MAXdev MDPro (aka MD-Pro) allows remote attackers to execute arbitrary SQL commands via the rid parameter in a viewrecords action to modules.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3577-gjw9-mvjx/GHSA-3577-gjw9-mvjx.json b/advisories/unreviewed/2022/05/GHSA-3577-gjw9-mvjx/GHSA-3577-gjw9-mvjx.json index 8e9f723c2a9..80413e140fa 100644 --- a/advisories/unreviewed/2022/05/GHSA-3577-gjw9-mvjx/GHSA-3577-gjw9-mvjx.json +++ b/advisories/unreviewed/2022/05/GHSA-3577-gjw9-mvjx/GHSA-3577-gjw9-mvjx.json @@ -7,12 +7,8 @@ "CVE-2009-2340" ], "details": "SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtUserName (aka User Name) parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-35p4-9mmc-6xh6/GHSA-35p4-9mmc-6xh6.json b/advisories/unreviewed/2022/05/GHSA-35p4-9mmc-6xh6/GHSA-35p4-9mmc-6xh6.json index 5517740eaaa..aac0f090579 100644 --- a/advisories/unreviewed/2022/05/GHSA-35p4-9mmc-6xh6/GHSA-35p4-9mmc-6xh6.json +++ b/advisories/unreviewed/2022/05/GHSA-35p4-9mmc-6xh6/GHSA-35p4-9mmc-6xh6.json @@ -7,12 +7,8 @@ "CVE-2009-2385" ], "details": "SQL injection vulnerability in the awardsMembers function in Sources/Profile.php in the Member Awards component 1.0.2 for Simple Machines Forum (SMF) allows remote attackers to execute arbitrary SQL commands via the id parameter in a profile action to index.php. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-35r7-4rp8-9885/GHSA-35r7-4rp8-9885.json b/advisories/unreviewed/2022/05/GHSA-35r7-4rp8-9885/GHSA-35r7-4rp8-9885.json index 20c48a5ce6a..d78d6955412 100644 --- a/advisories/unreviewed/2022/05/GHSA-35r7-4rp8-9885/GHSA-35r7-4rp8-9885.json +++ b/advisories/unreviewed/2022/05/GHSA-35r7-4rp8-9885/GHSA-35r7-4rp8-9885.json @@ -7,12 +7,8 @@ "CVE-2009-2460" ], "details": "Multiple stack-based buffer overflows in mathtex.cgi in mathTeX, when downloaded before 20090713, have unspecified impact and remote attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-36gv-vcm7-9gf5/GHSA-36gv-vcm7-9gf5.json b/advisories/unreviewed/2022/05/GHSA-36gv-vcm7-9gf5/GHSA-36gv-vcm7-9gf5.json index 7c4ecda0d6e..b39a05991e7 100644 --- a/advisories/unreviewed/2022/05/GHSA-36gv-vcm7-9gf5/GHSA-36gv-vcm7-9gf5.json +++ b/advisories/unreviewed/2022/05/GHSA-36gv-vcm7-9gf5/GHSA-36gv-vcm7-9gf5.json @@ -7,12 +7,8 @@ "CVE-2009-2116" ], "details": "Directory traversal vulnerability in admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to list directory contents via a .. (dot dot) in the dir parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-376p-c8r5-gg6r/GHSA-376p-c8r5-gg6r.json b/advisories/unreviewed/2022/05/GHSA-376p-c8r5-gg6r/GHSA-376p-c8r5-gg6r.json index 27944f3d8d8..3c32b297574 100644 --- a/advisories/unreviewed/2022/05/GHSA-376p-c8r5-gg6r/GHSA-376p-c8r5-gg6r.json +++ b/advisories/unreviewed/2022/05/GHSA-376p-c8r5-gg6r/GHSA-376p-c8r5-gg6r.json @@ -7,12 +7,8 @@ "CVE-2009-2224" ], "details": "Directory traversal vulnerability in ang/shared/flags.php in AN Guestbook 0.7.8, when register_globals is enabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the g_lang parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-37xq-q353-rr52/GHSA-37xq-q353-rr52.json b/advisories/unreviewed/2022/05/GHSA-37xq-q353-rr52/GHSA-37xq-q353-rr52.json index 70847728399..cd277584dbd 100644 --- a/advisories/unreviewed/2022/05/GHSA-37xq-q353-rr52/GHSA-37xq-q353-rr52.json +++ b/advisories/unreviewed/2022/05/GHSA-37xq-q353-rr52/GHSA-37xq-q353-rr52.json @@ -7,12 +7,8 @@ "CVE-2009-2004" ], "details": "Multiple SQL injection vulnerabilities in main/mySpace/myStudents.php in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) student and (2) course parameters, a different vector than CVE-2007-2902.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-39m7-7p2w-vfpx/GHSA-39m7-7p2w-vfpx.json b/advisories/unreviewed/2022/05/GHSA-39m7-7p2w-vfpx/GHSA-39m7-7p2w-vfpx.json index ec11577d0a2..4cd317c15e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-39m7-7p2w-vfpx/GHSA-39m7-7p2w-vfpx.json +++ b/advisories/unreviewed/2022/05/GHSA-39m7-7p2w-vfpx/GHSA-39m7-7p2w-vfpx.json @@ -7,12 +7,8 @@ "CVE-2009-2076" ], "details": "Cross-site scripting (XSS) vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via (1) exposed filters in the Views UI administrative interface and in the (2) view name parameter in the define custom views feature. NOTE: vector 2 is only exploitable by users with administer views permissions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-39v5-c8j7-2628/GHSA-39v5-c8j7-2628.json b/advisories/unreviewed/2022/05/GHSA-39v5-c8j7-2628/GHSA-39v5-c8j7-2628.json index a792b85467c..82a8d2fd281 100644 --- a/advisories/unreviewed/2022/05/GHSA-39v5-c8j7-2628/GHSA-39v5-c8j7-2628.json +++ b/advisories/unreviewed/2022/05/GHSA-39v5-c8j7-2628/GHSA-39v5-c8j7-2628.json @@ -7,12 +7,8 @@ "CVE-2009-2744" ], "details": "Unspecified vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27 allows remote attackers to cause a denial of service via unknown vectors, related to \"an error in fixpacks 6.1.0.23 and 6.1.0.25.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3f3j-954h-4x49/GHSA-3f3j-954h-4x49.json b/advisories/unreviewed/2022/05/GHSA-3f3j-954h-4x49/GHSA-3f3j-954h-4x49.json index a4b2ca7ba7f..acd78131bbe 100644 --- a/advisories/unreviewed/2022/05/GHSA-3f3j-954h-4x49/GHSA-3f3j-954h-4x49.json +++ b/advisories/unreviewed/2022/05/GHSA-3f3j-954h-4x49/GHSA-3f3j-954h-4x49.json @@ -7,12 +7,8 @@ "CVE-2009-2093" ], "details": "SQL injection vulnerability in the console in IBM WebSphere Partner Gateway (WPG) Enterprise 6.0 before FP8, 6.1 before FP3, 6.1.1 before FP2, and 6.2 before FP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3fc2-jqm9-wxw3/GHSA-3fc2-jqm9-wxw3.json b/advisories/unreviewed/2022/05/GHSA-3fc2-jqm9-wxw3/GHSA-3fc2-jqm9-wxw3.json index ccbb008d851..d652fa19b6a 100644 --- a/advisories/unreviewed/2022/05/GHSA-3fc2-jqm9-wxw3/GHSA-3fc2-jqm9-wxw3.json +++ b/advisories/unreviewed/2022/05/GHSA-3fc2-jqm9-wxw3/GHSA-3fc2-jqm9-wxw3.json @@ -7,12 +7,8 @@ "CVE-2009-2155" ], "details": "Cross-site scripting (XSS) vulnerability in report/ReportViewAction.do in WebNMS Free Edition 5 allows remote attackers to inject arbitrary web script or HTML via the type parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3g33-3wh4-cfqw/GHSA-3g33-3wh4-cfqw.json b/advisories/unreviewed/2022/05/GHSA-3g33-3wh4-cfqw/GHSA-3g33-3wh4-cfqw.json index 08a838769cd..1b6ef8539ef 100644 --- a/advisories/unreviewed/2022/05/GHSA-3g33-3wh4-cfqw/GHSA-3g33-3wh4-cfqw.json +++ b/advisories/unreviewed/2022/05/GHSA-3g33-3wh4-cfqw/GHSA-3g33-3wh4-cfqw.json @@ -7,12 +7,8 @@ "CVE-2009-2294" ], "details": "Integer overflow in the Png_datainfo_callback function in Dillo 2.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PNG image with crafted (1) width or (2) height values.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3gvv-2m22-m3cj/GHSA-3gvv-2m22-m3cj.json b/advisories/unreviewed/2022/05/GHSA-3gvv-2m22-m3cj/GHSA-3gvv-2m22-m3cj.json index 6fbda3be607..5ec509e8469 100644 --- a/advisories/unreviewed/2022/05/GHSA-3gvv-2m22-m3cj/GHSA-3gvv-2m22-m3cj.json +++ b/advisories/unreviewed/2022/05/GHSA-3gvv-2m22-m3cj/GHSA-3gvv-2m22-m3cj.json @@ -7,12 +7,8 @@ "CVE-2009-1965" ], "details": "Unspecified vulnerability in the Net Foundation Layer component in Oracle Database 9.2.0.8 and 10.1.0.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3j95-hrrj-gfw8/GHSA-3j95-hrrj-gfw8.json b/advisories/unreviewed/2022/05/GHSA-3j95-hrrj-gfw8/GHSA-3j95-hrrj-gfw8.json index 7582be67303..98a08f5ae54 100644 --- a/advisories/unreviewed/2022/05/GHSA-3j95-hrrj-gfw8/GHSA-3j95-hrrj-gfw8.json +++ b/advisories/unreviewed/2022/05/GHSA-3j95-hrrj-gfw8/GHSA-3j95-hrrj-gfw8.json @@ -7,12 +7,8 @@ "CVE-2009-2288" ], "details": "statuswml.cgi in Nagios before 3.1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) ping or (2) Traceroute parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3jcm-pqj4-w2mw/GHSA-3jcm-pqj4-w2mw.json b/advisories/unreviewed/2022/05/GHSA-3jcm-pqj4-w2mw/GHSA-3jcm-pqj4-w2mw.json index 0edb2fcb628..b24c8202e1f 100644 --- a/advisories/unreviewed/2022/05/GHSA-3jcm-pqj4-w2mw/GHSA-3jcm-pqj4-w2mw.json +++ b/advisories/unreviewed/2022/05/GHSA-3jcm-pqj4-w2mw/GHSA-3jcm-pqj4-w2mw.json @@ -7,12 +7,8 @@ "CVE-2009-1996" ], "details": "Unspecified vulnerability in the Logical Standby component in Oracle Database allows remote authenticated users to affect integrity via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3jf4-h2h6-qc4x/GHSA-3jf4-h2h6-qc4x.json b/advisories/unreviewed/2022/05/GHSA-3jf4-h2h6-qc4x/GHSA-3jf4-h2h6-qc4x.json index 87aa02dc567..f866abc5adb 100644 --- a/advisories/unreviewed/2022/05/GHSA-3jf4-h2h6-qc4x/GHSA-3jf4-h2h6-qc4x.json +++ b/advisories/unreviewed/2022/05/GHSA-3jf4-h2h6-qc4x/GHSA-3jf4-h2h6-qc4x.json @@ -7,12 +7,8 @@ "CVE-2009-1985" ], "details": "Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3jq3-gh97-4gcf/GHSA-3jq3-gh97-4gcf.json b/advisories/unreviewed/2022/05/GHSA-3jq3-gh97-4gcf/GHSA-3jq3-gh97-4gcf.json index 1e092cc2066..f2ea09b42be 100644 --- a/advisories/unreviewed/2022/05/GHSA-3jq3-gh97-4gcf/GHSA-3jq3-gh97-4gcf.json +++ b/advisories/unreviewed/2022/05/GHSA-3jq3-gh97-4gcf/GHSA-3jq3-gh97-4gcf.json @@ -7,12 +7,8 @@ "CVE-2009-2337" ], "details": "SQL injection vulnerability in includes/module/book/index.inc.php in w3b|cms Gaestebuch Guestbook Module 3.0.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the spam_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3pg2-4qfr-5gqp/GHSA-3pg2-4qfr-5gqp.json b/advisories/unreviewed/2022/05/GHSA-3pg2-4qfr-5gqp/GHSA-3pg2-4qfr-5gqp.json index 1bfea3f71e6..098e00d02d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-3pg2-4qfr-5gqp/GHSA-3pg2-4qfr-5gqp.json +++ b/advisories/unreviewed/2022/05/GHSA-3pg2-4qfr-5gqp/GHSA-3pg2-4qfr-5gqp.json @@ -7,12 +7,8 @@ "CVE-2009-2262" ], "details": "PHP remote file inclusion vulnerability in install/di.php in AjaxPortal 3.0 allows remote attackers to execute arbitrary PHP code via a URL in the pathtoserverdata parameter. NOTE: the installation instructions specify deleting the install/ folder.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3pp6-447c-q84w/GHSA-3pp6-447c-q84w.json b/advisories/unreviewed/2022/05/GHSA-3pp6-447c-q84w/GHSA-3pp6-447c-q84w.json index 7f8c9b99421..8902d967d96 100644 --- a/advisories/unreviewed/2022/05/GHSA-3pp6-447c-q84w/GHSA-3pp6-447c-q84w.json +++ b/advisories/unreviewed/2022/05/GHSA-3pp6-447c-q84w/GHSA-3pp6-447c-q84w.json @@ -7,12 +7,8 @@ "CVE-2009-2212" ], "details": "The CQWeb server in IBM Rational ClearQuest 7.0.0 before 7.0.0.6 and 7.0.1 before 7.0.1.5 allows attackers to discover a (1) username or (2) password via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3q7v-8c55-wjvj/GHSA-3q7v-8c55-wjvj.json b/advisories/unreviewed/2022/05/GHSA-3q7v-8c55-wjvj/GHSA-3q7v-8c55-wjvj.json index 21d40055544..d9057de11a6 100644 --- a/advisories/unreviewed/2022/05/GHSA-3q7v-8c55-wjvj/GHSA-3q7v-8c55-wjvj.json +++ b/advisories/unreviewed/2022/05/GHSA-3q7v-8c55-wjvj/GHSA-3q7v-8c55-wjvj.json @@ -7,12 +7,8 @@ "CVE-2009-1920" ], "details": "The JScript scripting engine 5.1, 5.6, 5.7, and 5.8 in JScript.dll in Microsoft Windows, as used in Internet Explorer, does not properly load decoded scripts into memory before execution, which allows remote attackers to execute arbitrary code via a crafted web site that triggers memory corruption, aka \"JScript Remote Code Execution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3qhj-558h-vvvj/GHSA-3qhj-558h-vvvj.json b/advisories/unreviewed/2022/05/GHSA-3qhj-558h-vvvj/GHSA-3qhj-558h-vvvj.json index 72ae09b168f..0ad2d028483 100644 --- a/advisories/unreviewed/2022/05/GHSA-3qhj-558h-vvvj/GHSA-3qhj-558h-vvvj.json +++ b/advisories/unreviewed/2022/05/GHSA-3qhj-558h-vvvj/GHSA-3qhj-558h-vvvj.json @@ -7,12 +7,8 @@ "CVE-2009-2217" ], "details": "Cross-site scripting (XSS) vulnerability in NBBC before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via an invalid URL in a BBCode img tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3r8c-x2gq-vxw3/GHSA-3r8c-x2gq-vxw3.json b/advisories/unreviewed/2022/05/GHSA-3r8c-x2gq-vxw3/GHSA-3r8c-x2gq-vxw3.json index 6bfeb246399..bd07077d13d 100644 --- a/advisories/unreviewed/2022/05/GHSA-3r8c-x2gq-vxw3/GHSA-3r8c-x2gq-vxw3.json +++ b/advisories/unreviewed/2022/05/GHSA-3r8c-x2gq-vxw3/GHSA-3r8c-x2gq-vxw3.json @@ -7,12 +7,8 @@ "CVE-2009-2206" ], "details": "Multiple heap-based buffer overflows in the AudioCodecs library in the CoreAudio component in Apple iPhone OS before 3.1, and iPhone OS before 3.1.1 for iPod touch, allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted (1) AAC or (2) MP3 file, as demonstrated by a ringtone with malformed entries in the sample size table.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3w57-2x48-2wv9/GHSA-3w57-2x48-2wv9.json b/advisories/unreviewed/2022/05/GHSA-3w57-2x48-2wv9/GHSA-3w57-2x48-2wv9.json index ade7095a89a..98d5a66243a 100644 --- a/advisories/unreviewed/2022/05/GHSA-3w57-2x48-2wv9/GHSA-3w57-2x48-2wv9.json +++ b/advisories/unreviewed/2022/05/GHSA-3w57-2x48-2wv9/GHSA-3w57-2x48-2wv9.json @@ -7,12 +7,8 @@ "CVE-2009-2230" ], "details": "SQL injection vulnerability in inc/datahandlers/user.php in MyBB (aka MyBulletinBoard) before 1.4.7 allows remote authenticated users to execute arbitrary SQL commands via the birthdayprivacy parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3wjg-5c66-hpr4/GHSA-3wjg-5c66-hpr4.json b/advisories/unreviewed/2022/05/GHSA-3wjg-5c66-hpr4/GHSA-3wjg-5c66-hpr4.json index 9d021ee1357..9a40b236497 100644 --- a/advisories/unreviewed/2022/05/GHSA-3wjg-5c66-hpr4/GHSA-3wjg-5c66-hpr4.json +++ b/advisories/unreviewed/2022/05/GHSA-3wjg-5c66-hpr4/GHSA-3wjg-5c66-hpr4.json @@ -7,12 +7,8 @@ "CVE-2009-2556" ], "details": "Google Chrome before 2.0.172.37 allows attackers to leverage renderer access to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger excessive memory allocation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-42gj-vxw3-2cfr/GHSA-42gj-vxw3-2cfr.json b/advisories/unreviewed/2022/05/GHSA-42gj-vxw3-2cfr/GHSA-42gj-vxw3-2cfr.json index 28ce5fc0cbe..a784f135370 100644 --- a/advisories/unreviewed/2022/05/GHSA-42gj-vxw3-2cfr/GHSA-42gj-vxw3-2cfr.json +++ b/advisories/unreviewed/2022/05/GHSA-42gj-vxw3-2cfr/GHSA-42gj-vxw3-2cfr.json @@ -7,12 +7,8 @@ "CVE-2009-2419" ], "details": "Use-after-free vulnerability in the servePendingRequests function in WebCore in WebKit in Apple Safari 4.0 and 4.0.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted HTML document that references a zero-length .js file and the JavaScript reload function. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-43m9-7488-qw9p/GHSA-43m9-7488-qw9p.json b/advisories/unreviewed/2022/05/GHSA-43m9-7488-qw9p/GHSA-43m9-7488-qw9p.json index dd39953fdb0..daa07e0b668 100644 --- a/advisories/unreviewed/2022/05/GHSA-43m9-7488-qw9p/GHSA-43m9-7488-qw9p.json +++ b/advisories/unreviewed/2022/05/GHSA-43m9-7488-qw9p/GHSA-43m9-7488-qw9p.json @@ -7,12 +7,8 @@ "CVE-2009-2258" ], "details": "Directory traversal vulnerability in cgi-bin/webcm in the administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to list arbitrary directories via a .. (dot dot) in the nextpage parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-43w7-r28v-f9wx/GHSA-43w7-r28v-f9wx.json b/advisories/unreviewed/2022/05/GHSA-43w7-r28v-f9wx/GHSA-43w7-r28v-f9wx.json index 0bdb3c9922b..4d0695dc08c 100644 --- a/advisories/unreviewed/2022/05/GHSA-43w7-r28v-f9wx/GHSA-43w7-r28v-f9wx.json +++ b/advisories/unreviewed/2022/05/GHSA-43w7-r28v-f9wx/GHSA-43w7-r28v-f9wx.json @@ -7,12 +7,8 @@ "CVE-2009-2749" ], "details": "Feature Pack for Communications Enabled Applications (CEA) before 1.0.0.1 for IBM WebSphere Application Server 7.0.0.7 uses predictable session values, which allows man-in-the-middle attackers to spoof a collaboration session by guessing the value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-44q3-f2xv-x29r/GHSA-44q3-f2xv-x29r.json b/advisories/unreviewed/2022/05/GHSA-44q3-f2xv-x29r/GHSA-44q3-f2xv-x29r.json index 22823ba8ccd..893c54edd6b 100644 --- a/advisories/unreviewed/2022/05/GHSA-44q3-f2xv-x29r/GHSA-44q3-f2xv-x29r.json +++ b/advisories/unreviewed/2022/05/GHSA-44q3-f2xv-x29r/GHSA-44q3-f2xv-x29r.json @@ -7,12 +7,8 @@ "CVE-2009-2552" ], "details": "Multiple directory traversal vulnerabilities in comments.php in Super Simple Blog Script 2.5.4 allow remote attackers to overwrite, include, and execute arbitrary local files via the entry parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-45vv-5qvx-vg7v/GHSA-45vv-5qvx-vg7v.json b/advisories/unreviewed/2022/05/GHSA-45vv-5qvx-vg7v/GHSA-45vv-5qvx-vg7v.json index ef6e65b94c1..10887fba335 100644 --- a/advisories/unreviewed/2022/05/GHSA-45vv-5qvx-vg7v/GHSA-45vv-5qvx-vg7v.json +++ b/advisories/unreviewed/2022/05/GHSA-45vv-5qvx-vg7v/GHSA-45vv-5qvx-vg7v.json @@ -7,12 +7,8 @@ "CVE-2009-2530" ], "details": "Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka \"Uninitialized Memory Corruption Vulnerability,\" a different vulnerability than CVE-2009-2531.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4643-w74c-m4wv/GHSA-4643-w74c-m4wv.json b/advisories/unreviewed/2022/05/GHSA-4643-w74c-m4wv/GHSA-4643-w74c-m4wv.json index 90a2f04b715..d98fa824957 100644 --- a/advisories/unreviewed/2022/05/GHSA-4643-w74c-m4wv/GHSA-4643-w74c-m4wv.json +++ b/advisories/unreviewed/2022/05/GHSA-4643-w74c-m4wv/GHSA-4643-w74c-m4wv.json @@ -7,12 +7,8 @@ "CVE-2009-2335" ], "details": "WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. NOTE: the vendor reportedly disputes the significance of this issue, indicating that the behavior exists for \"user convenience.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-46c8-qfh8-7cvf/GHSA-46c8-qfh8-7cvf.json b/advisories/unreviewed/2022/05/GHSA-46c8-qfh8-7cvf/GHSA-46c8-qfh8-7cvf.json index 2b417df2b46..d9e11418d1b 100644 --- a/advisories/unreviewed/2022/05/GHSA-46c8-qfh8-7cvf/GHSA-46c8-qfh8-7cvf.json +++ b/advisories/unreviewed/2022/05/GHSA-46c8-qfh8-7cvf/GHSA-46c8-qfh8-7cvf.json @@ -7,12 +7,8 @@ "CVE-2009-2005" ], "details": "Cross-site request forgery (CSRF) vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspecified victims and add new personal agenda items via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-473m-7p62-7x2j/GHSA-473m-7p62-7x2j.json b/advisories/unreviewed/2022/05/GHSA-473m-7p62-7x2j/GHSA-473m-7p62-7x2j.json index d8bc2d6cbe2..ccebebfe89f 100644 --- a/advisories/unreviewed/2022/05/GHSA-473m-7p62-7x2j/GHSA-473m-7p62-7x2j.json +++ b/advisories/unreviewed/2022/05/GHSA-473m-7p62-7x2j/GHSA-473m-7p62-7x2j.json @@ -7,12 +7,8 @@ "CVE-2009-2182" ], "details": "Multiple PHP remote file inclusion vulnerabilities in Campsite 3.3.0 RC1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[g_campsiteDir] parameter to (1) ad_popup.php, (2) camp_html.php, (3) init_content.php, (4) logout.php, (5) menu.php, and (6) set-author.php in admin-files/; (7) conf/liveuser_configuration.php; (8) include/phorum_load.php; (9) CommandProcessor.php and (10) index.php in admin-files/article_import; and (11) add.php, (12) add_move.php, (13) autopublish.php, and (14) autopublish_del.php in admin-files/articles/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-483p-23q4-52hc/GHSA-483p-23q4-52hc.json b/advisories/unreviewed/2022/05/GHSA-483p-23q4-52hc/GHSA-483p-23q4-52hc.json index 42dcc4bae28..982421606ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-483p-23q4-52hc/GHSA-483p-23q4-52hc.json +++ b/advisories/unreviewed/2022/05/GHSA-483p-23q4-52hc/GHSA-483p-23q4-52hc.json @@ -7,12 +7,8 @@ "CVE-2009-2463" ], "details": "Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors that trigger buffer overflows.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -132,9 +128,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4849-cfqq-r8pq/GHSA-4849-cfqq-r8pq.json b/advisories/unreviewed/2022/05/GHSA-4849-cfqq-r8pq/GHSA-4849-cfqq-r8pq.json index 3c1fdf39624..b8595b61d19 100644 --- a/advisories/unreviewed/2022/05/GHSA-4849-cfqq-r8pq/GHSA-4849-cfqq-r8pq.json +++ b/advisories/unreviewed/2022/05/GHSA-4849-cfqq-r8pq/GHSA-4849-cfqq-r8pq.json @@ -7,12 +7,8 @@ "CVE-2009-2265" ], "details": "Multiple directory traversal vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to create executable files in arbitrary directories via directory traversal sequences in the input to unspecified connector modules, as exploited in the wild for remote code execution in July 2009, related to the file browser and the editor/filemanager/connectors/ directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-492q-86f5-c96f/GHSA-492q-86f5-c96f.json b/advisories/unreviewed/2022/05/GHSA-492q-86f5-c96f/GHSA-492q-86f5-c96f.json index 9c769c60c50..a568244b768 100644 --- a/advisories/unreviewed/2022/05/GHSA-492q-86f5-c96f/GHSA-492q-86f5-c96f.json +++ b/advisories/unreviewed/2022/05/GHSA-492q-86f5-c96f/GHSA-492q-86f5-c96f.json @@ -7,12 +7,8 @@ "CVE-2009-2466" ], "details": "The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) nsDOMClassInfo.cpp, (2) JS_HashTableRawLookup, and (3) MirrorWrappedNativeParent and js_LockGCThingRT.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -120,9 +116,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-49ph-hwvm-6g78/GHSA-49ph-hwvm-6g78.json b/advisories/unreviewed/2022/05/GHSA-49ph-hwvm-6g78/GHSA-49ph-hwvm-6g78.json index 08eca6611b8..b0faff03508 100644 --- a/advisories/unreviewed/2022/05/GHSA-49ph-hwvm-6g78/GHSA-49ph-hwvm-6g78.json +++ b/advisories/unreviewed/2022/05/GHSA-49ph-hwvm-6g78/GHSA-49ph-hwvm-6g78.json @@ -7,12 +7,8 @@ "CVE-2009-1929" ], "details": "Heap-based buffer overflow in the Microsoft Terminal Services Client ActiveX control running RDP 6.1 on Windows XP SP2, Vista SP1 or SP2, or Server 2008 Gold or SP2; or 5.2 or 6.1 on Windows XP SP3; allows remote attackers to execute arbitrary code via unspecified parameters to unknown methods, aka \"Remote Desktop Connection ActiveX Control Heap Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4c74-q8v9-572h/GHSA-4c74-q8v9-572h.json b/advisories/unreviewed/2022/05/GHSA-4c74-q8v9-572h/GHSA-4c74-q8v9-572h.json index 3d2e383ad83..413f2a10166 100644 --- a/advisories/unreviewed/2022/05/GHSA-4c74-q8v9-572h/GHSA-4c74-q8v9-572h.json +++ b/advisories/unreviewed/2022/05/GHSA-4c74-q8v9-572h/GHSA-4c74-q8v9-572h.json @@ -7,12 +7,8 @@ "CVE-2009-2348" ], "details": "Android 1.5 CRBxx allows local users to bypass the (1) Manifest.permission.CAMERA (aka android.permission.CAMERA) and (2) Manifest.permission.AUDIO_RECORD (aka android.permission.RECORD_AUDIO) configuration settings by installing and executing an application that does not make a permission request before using the camera or microphone.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4cc8-gf3c-3mrc/GHSA-4cc8-gf3c-3mrc.json b/advisories/unreviewed/2022/05/GHSA-4cc8-gf3c-3mrc/GHSA-4cc8-gf3c-3mrc.json index 4165b9c8d20..f262dffece9 100644 --- a/advisories/unreviewed/2022/05/GHSA-4cc8-gf3c-3mrc/GHSA-4cc8-gf3c-3mrc.json +++ b/advisories/unreviewed/2022/05/GHSA-4cc8-gf3c-3mrc/GHSA-4cc8-gf3c-3mrc.json @@ -7,12 +7,8 @@ "CVE-2009-2336" ], "details": "The forgotten mail interface in WordPress and WordPress MU before 2.8.1 exhibits different behavior for a password request depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. NOTE: the vendor reportedly disputes the significance of this issue, indicating that the behavior exists for \"user convenience.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4fg2-8v24-w9hq/GHSA-4fg2-8v24-w9hq.json b/advisories/unreviewed/2022/05/GHSA-4fg2-8v24-w9hq/GHSA-4fg2-8v24-w9hq.json index cf217d81bf1..bfb80213d8b 100644 --- a/advisories/unreviewed/2022/05/GHSA-4fg2-8v24-w9hq/GHSA-4fg2-8v24-w9hq.json +++ b/advisories/unreviewed/2022/05/GHSA-4fg2-8v24-w9hq/GHSA-4fg2-8v24-w9hq.json @@ -7,12 +7,8 @@ "CVE-2009-2538" ], "details": "The Nokia N95 running Symbian OS 9.2, N82, and N810 Internet Tablet allow remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4gmf-xhm3-2555/GHSA-4gmf-xhm3-2555.json b/advisories/unreviewed/2022/05/GHSA-4gmf-xhm3-2555/GHSA-4gmf-xhm3-2555.json index 866ec513b04..2b5c03dea09 100644 --- a/advisories/unreviewed/2022/05/GHSA-4gmf-xhm3-2555/GHSA-4gmf-xhm3-2555.json +++ b/advisories/unreviewed/2022/05/GHSA-4gmf-xhm3-2555/GHSA-4gmf-xhm3-2555.json @@ -7,12 +7,8 @@ "CVE-2009-2231" ], "details": "MIDAS 1.43 allows remote attackers to bypass authentication and obtain administrative access via an admin account record in a MIDAS cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4hfq-m672-xv3h/GHSA-4hfq-m672-xv3h.json b/advisories/unreviewed/2022/05/GHSA-4hfq-m672-xv3h/GHSA-4hfq-m672-xv3h.json index aec25bccb6a..629f0bf7cb1 100644 --- a/advisories/unreviewed/2022/05/GHSA-4hfq-m672-xv3h/GHSA-4hfq-m672-xv3h.json +++ b/advisories/unreviewed/2022/05/GHSA-4hfq-m672-xv3h/GHSA-4hfq-m672-xv3h.json @@ -7,12 +7,8 @@ "CVE-2009-2451" ], "details": "Multiple SQL injection vulnerabilities in index.php in MIM:InfiniX 1.2.003 and possibly earlier versions allow remote attackers to execute arbitrary SQL commands via the (1) month and (2) year parameters in a calendar action, or (3) a search term in the search form.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4hgq-5r5v-c93x/GHSA-4hgq-5r5v-c93x.json b/advisories/unreviewed/2022/05/GHSA-4hgq-5r5v-c93x/GHSA-4hgq-5r5v-c93x.json index 1eeb15a1ef6..9b895edd23c 100644 --- a/advisories/unreviewed/2022/05/GHSA-4hgq-5r5v-c93x/GHSA-4hgq-5r5v-c93x.json +++ b/advisories/unreviewed/2022/05/GHSA-4hgq-5r5v-c93x/GHSA-4hgq-5r5v-c93x.json @@ -7,12 +7,8 @@ "CVE-2009-1964" ], "details": "Unspecified vulnerability in the Workspace Manager component in Oracle Database 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4hwj-jpq2-j34p/GHSA-4hwj-jpq2-j34p.json b/advisories/unreviewed/2022/05/GHSA-4hwj-jpq2-j34p/GHSA-4hwj-jpq2-j34p.json index 403db660dc5..2a89f3dc84d 100644 --- a/advisories/unreviewed/2022/05/GHSA-4hwj-jpq2-j34p/GHSA-4hwj-jpq2-j34p.json +++ b/advisories/unreviewed/2022/05/GHSA-4hwj-jpq2-j34p/GHSA-4hwj-jpq2-j34p.json @@ -7,12 +7,8 @@ "CVE-2009-2080" ], "details": "admin.php in MRCGIGUY The Ticket System 2.0 does not properly restrict access, which allows remote attackers to (1) obtain sensitive configuration information via the editconfig action or (2) change the administrator's password via the id parameter in an editop action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4pgf-7qx2-4h3r/GHSA-4pgf-7qx2-4h3r.json b/advisories/unreviewed/2022/05/GHSA-4pgf-7qx2-4h3r/GHSA-4pgf-7qx2-4h3r.json index 4d4f15b670b..8d7a90495ef 100644 --- a/advisories/unreviewed/2022/05/GHSA-4pgf-7qx2-4h3r/GHSA-4pgf-7qx2-4h3r.json +++ b/advisories/unreviewed/2022/05/GHSA-4pgf-7qx2-4h3r/GHSA-4pgf-7qx2-4h3r.json @@ -7,12 +7,8 @@ "CVE-2009-2321" ], "details": "cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to cause a denial of service (configuration reset) via a RESTORE=RESTORE query string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4qw2-xvcc-px75/GHSA-4qw2-xvcc-px75.json b/advisories/unreviewed/2022/05/GHSA-4qw2-xvcc-px75/GHSA-4qw2-xvcc-px75.json index ecc1dd444f4..4a0a9469c07 100644 --- a/advisories/unreviewed/2022/05/GHSA-4qw2-xvcc-px75/GHSA-4qw2-xvcc-px75.json +++ b/advisories/unreviewed/2022/05/GHSA-4qw2-xvcc-px75/GHSA-4qw2-xvcc-px75.json @@ -7,12 +7,8 @@ "CVE-2009-2296" ], "details": "The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not properly implement the nfs_portmon setting, which allows remote attackers to access shares, and read, create, and modify arbitrary files, via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4r69-2cvx-7m83/GHSA-4r69-2cvx-7m83.json b/advisories/unreviewed/2022/05/GHSA-4r69-2cvx-7m83/GHSA-4r69-2cvx-7m83.json index ad3207d4a5b..d5096cd952c 100644 --- a/advisories/unreviewed/2022/05/GHSA-4r69-2cvx-7m83/GHSA-4r69-2cvx-7m83.json +++ b/advisories/unreviewed/2022/05/GHSA-4r69-2cvx-7m83/GHSA-4r69-2cvx-7m83.json @@ -7,12 +7,8 @@ "CVE-2009-1924" ], "details": "Integer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 allows remote WINS replication partners to execute arbitrary code via crafted data structures in a packet, aka \"WINS Integer Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4r9m-gmj4-v54c/GHSA-4r9m-gmj4-v54c.json b/advisories/unreviewed/2022/05/GHSA-4r9m-gmj4-v54c/GHSA-4r9m-gmj4-v54c.json index 91c807ff05b..9073bdc8b96 100644 --- a/advisories/unreviewed/2022/05/GHSA-4r9m-gmj4-v54c/GHSA-4r9m-gmj4-v54c.json +++ b/advisories/unreviewed/2022/05/GHSA-4r9m-gmj4-v54c/GHSA-4r9m-gmj4-v54c.json @@ -7,12 +7,8 @@ "CVE-2009-2415" ], "details": "Multiple integer overflows in memcached 1.1.12 and 1.2.2 allow remote attackers to execute arbitrary code via vectors involving length attributes that trigger heap-based buffer overflows.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4rfm-m8cv-g888/GHSA-4rfm-m8cv-g888.json b/advisories/unreviewed/2022/05/GHSA-4rfm-m8cv-g888/GHSA-4rfm-m8cv-g888.json index 4ed7d96d2f8..dddd4b08776 100644 --- a/advisories/unreviewed/2022/05/GHSA-4rfm-m8cv-g888/GHSA-4rfm-m8cv-g888.json +++ b/advisories/unreviewed/2022/05/GHSA-4rfm-m8cv-g888/GHSA-4rfm-m8cv-g888.json @@ -7,12 +7,8 @@ "CVE-2009-2088" ], "details": "The Servlet Engine/Web Container component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, when SPNEGO Single Sign-on (SSO) and disableSecurityPreInvokeOnFilters are configured, allows remote attackers to bypass authentication via a request for a \"secure URL,\" related to a certain invokefilterscompatibility property.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4wj9-j34x-wjxp/GHSA-4wj9-j34x-wjxp.json b/advisories/unreviewed/2022/05/GHSA-4wj9-j34x-wjxp/GHSA-4wj9-j34x-wjxp.json index 5a62246a121..d77a54f0947 100644 --- a/advisories/unreviewed/2022/05/GHSA-4wj9-j34x-wjxp/GHSA-4wj9-j34x-wjxp.json +++ b/advisories/unreviewed/2022/05/GHSA-4wj9-j34x-wjxp/GHSA-4wj9-j34x-wjxp.json @@ -7,12 +7,8 @@ "CVE-2009-1956" ], "details": "Off-by-one error in the apr_brigade_vprintf function in Apache APR-util before 1.3.5 on big-endian platforms allows remote attackers to obtain sensitive information or cause a denial of service (application crash) via crafted input.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -224,9 +220,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4xgj-hvh9-w7vh/GHSA-4xgj-hvh9-w7vh.json b/advisories/unreviewed/2022/05/GHSA-4xgj-hvh9-w7vh/GHSA-4xgj-hvh9-w7vh.json index fa245291d35..a630f7ed20e 100644 --- a/advisories/unreviewed/2022/05/GHSA-4xgj-hvh9-w7vh/GHSA-4xgj-hvh9-w7vh.json +++ b/advisories/unreviewed/2022/05/GHSA-4xgj-hvh9-w7vh/GHSA-4xgj-hvh9-w7vh.json @@ -7,12 +7,8 @@ "CVE-2009-2353" ], "details": "encoder.php in eAccelerator allows remote attackers to execute arbitrary code by copying a local executable file to a location under the web root via the -o option, and then making a direct request to this file, related to upload of image files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-52wx-6vvh-8hww/GHSA-52wx-6vvh-8hww.json b/advisories/unreviewed/2022/05/GHSA-52wx-6vvh-8hww/GHSA-52wx-6vvh-8hww.json index 737e28be729..4d020644269 100644 --- a/advisories/unreviewed/2022/05/GHSA-52wx-6vvh-8hww/GHSA-52wx-6vvh-8hww.json +++ b/advisories/unreviewed/2022/05/GHSA-52wx-6vvh-8hww/GHSA-52wx-6vvh-8hww.json @@ -7,12 +7,8 @@ "CVE-2009-2050" ], "details": "Cisco Unified Communications Manager (aka CUCM, formerly CallManager) before 6.1(1) allows remote attackers to cause a denial of service (voice-services outage) via a malformed header in a SIP message, aka Bug ID CSCsi46466.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-53hc-vrqp-w59h/GHSA-53hc-vrqp-w59h.json b/advisories/unreviewed/2022/05/GHSA-53hc-vrqp-w59h/GHSA-53hc-vrqp-w59h.json index 569e4a2421b..a8b4fb55b76 100644 --- a/advisories/unreviewed/2022/05/GHSA-53hc-vrqp-w59h/GHSA-53hc-vrqp-w59h.json +++ b/advisories/unreviewed/2022/05/GHSA-53hc-vrqp-w59h/GHSA-53hc-vrqp-w59h.json @@ -7,12 +7,8 @@ "CVE-2009-2291" ], "details": "Unspecified vulnerability in LoginToboggan 6.x-1.x before 6.x-1.5, a module for Drupal, when \"Allow users to login using their e-mail address\" is enabled, allows remote blocked users to bypass intended access restrictions via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-54c4-23hm-v988/GHSA-54c4-23hm-v988.json b/advisories/unreviewed/2022/05/GHSA-54c4-23hm-v988/GHSA-54c4-23hm-v988.json index 68e9f76369f..40ac6847e7e 100644 --- a/advisories/unreviewed/2022/05/GHSA-54c4-23hm-v988/GHSA-54c4-23hm-v988.json +++ b/advisories/unreviewed/2022/05/GHSA-54c4-23hm-v988/GHSA-54c4-23hm-v988.json @@ -7,12 +7,8 @@ "CVE-2009-2334" ], "details": "wp-admin/admin.php in WordPress and WordPress MU before 2.8.1 does not require administrative authentication to access the configuration of a plugin, which allows remote attackers to specify a configuration file in the page parameter to obtain sensitive information or modify this file, as demonstrated by the (1) collapsing-archives/options.txt, (2) akismet/readme.txt, (3) related-ways-to-take-action/options.php, (4) wp-security-scan/securityscan.php, and (5) wp-ids/ids-admin.php files. NOTE: this can be leveraged for cross-site scripting (XSS) and denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-54f3-hvp7-3hw2/GHSA-54f3-hvp7-3hw2.json b/advisories/unreviewed/2022/05/GHSA-54f3-hvp7-3hw2/GHSA-54f3-hvp7-3hw2.json index 946a1bf2def..2d2412545e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-54f3-hvp7-3hw2/GHSA-54f3-hvp7-3hw2.json +++ b/advisories/unreviewed/2022/05/GHSA-54f3-hvp7-3hw2/GHSA-54f3-hvp7-3hw2.json @@ -7,12 +7,8 @@ "CVE-2009-2439" ], "details": "Multiple SQL injection vulnerabilities in Web Development House Alibaba Clone allow remote attackers to execute arbitrary SQL commands via the (1) IndustryID parameter to category.php and the (2) SellerID parameter to supplier/view_contact_details.php. NOTE: this is a product that was developed by a third party; it is not associated with alibaba.com or the Alibaba Group.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-54qq-6vrx-c2j9/GHSA-54qq-6vrx-c2j9.json b/advisories/unreviewed/2022/05/GHSA-54qq-6vrx-c2j9/GHSA-54qq-6vrx-c2j9.json index 8074a6214f5..c397d996419 100644 --- a/advisories/unreviewed/2022/05/GHSA-54qq-6vrx-c2j9/GHSA-54qq-6vrx-c2j9.json +++ b/advisories/unreviewed/2022/05/GHSA-54qq-6vrx-c2j9/GHSA-54qq-6vrx-c2j9.json @@ -7,12 +7,8 @@ "CVE-2009-2183" ], "details": "Directory traversal vulnerability in admin-files/ad.php in Campsite 3.3.0 RC1 allows remote attackers to read and possibly execute arbitrary local files via a .. (dot dot) in the GLOBALS[g_campsiteDir] parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-54xq-gf73-9vx2/GHSA-54xq-gf73-9vx2.json b/advisories/unreviewed/2022/05/GHSA-54xq-gf73-9vx2/GHSA-54xq-gf73-9vx2.json index c1be1062b36..6211452988e 100644 --- a/advisories/unreviewed/2022/05/GHSA-54xq-gf73-9vx2/GHSA-54xq-gf73-9vx2.json +++ b/advisories/unreviewed/2022/05/GHSA-54xq-gf73-9vx2/GHSA-54xq-gf73-9vx2.json @@ -7,12 +7,8 @@ "CVE-2009-2544" ], "details": "Directory traversal vulnerability in the Marcelo Costa FileServer component 1.0 for Microsoft Windows Live Messenger and Messenger Plus! Live (MPL) allows remote authenticated users to list arbitrary directories and read arbitrary files via a .. (dot dot) in a pathname.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5552-8c45-5q92/GHSA-5552-8c45-5q92.json b/advisories/unreviewed/2022/05/GHSA-5552-8c45-5q92/GHSA-5552-8c45-5q92.json index 768c09ee905..eb554c51265 100644 --- a/advisories/unreviewed/2022/05/GHSA-5552-8c45-5q92/GHSA-5552-8c45-5q92.json +++ b/advisories/unreviewed/2022/05/GHSA-5552-8c45-5q92/GHSA-5552-8c45-5q92.json @@ -7,12 +7,8 @@ "CVE-2009-2310" ], "details": "SQL injection vulnerability in include/get_read.php in Extensible-BioLawCom CMS (X-BLC) 0.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the section parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5558-3h54-4jfj/GHSA-5558-3h54-4jfj.json b/advisories/unreviewed/2022/05/GHSA-5558-3h54-4jfj/GHSA-5558-3h54-4jfj.json index bc8487045c0..e2fbbd2bc00 100644 --- a/advisories/unreviewed/2022/05/GHSA-5558-3h54-4jfj/GHSA-5558-3h54-4jfj.json +++ b/advisories/unreviewed/2022/05/GHSA-5558-3h54-4jfj/GHSA-5558-3h54-4jfj.json @@ -7,12 +7,8 @@ "CVE-2009-2277" ], "details": "Cross-site scripting (XSS) vulnerability in WebAccess in VMware VirtualCenter 2.0.2 and 2.5 and VMware ESX 3.0.3 and 3.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to \"context data.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-55m9-4rpx-g73h/GHSA-55m9-4rpx-g73h.json b/advisories/unreviewed/2022/05/GHSA-55m9-4rpx-g73h/GHSA-55m9-4rpx-g73h.json index 562fd0e6b9a..9584ed3d59c 100644 --- a/advisories/unreviewed/2022/05/GHSA-55m9-4rpx-g73h/GHSA-55m9-4rpx-g73h.json +++ b/advisories/unreviewed/2022/05/GHSA-55m9-4rpx-g73h/GHSA-55m9-4rpx-g73h.json @@ -7,12 +7,8 @@ "CVE-2009-1940" ], "details": "Cross-site scripting (XSS) vulnerability in the administrator panel in the com_users core component for Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-562r-9m3x-wj3f/GHSA-562r-9m3x-wj3f.json b/advisories/unreviewed/2022/05/GHSA-562r-9m3x-wj3f/GHSA-562r-9m3x-wj3f.json index 8728f9ff4b5..56f2e047af1 100644 --- a/advisories/unreviewed/2022/05/GHSA-562r-9m3x-wj3f/GHSA-562r-9m3x-wj3f.json +++ b/advisories/unreviewed/2022/05/GHSA-562r-9m3x-wj3f/GHSA-562r-9m3x-wj3f.json @@ -7,12 +7,8 @@ "CVE-2009-2740" ], "details": "kmxIds.sys before 7.3.1.18 in CA Host-Based Intrusion Prevention System (HIPS) 8.1 allows remote attackers to cause a denial of service (system crash) via a malformed packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-56cp-qp6w-hp6h/GHSA-56cp-qp6w-hp6h.json b/advisories/unreviewed/2022/05/GHSA-56cp-qp6w-hp6h/GHSA-56cp-qp6w-hp6h.json index 9bb9e7bd3fc..7a47440f50e 100644 --- a/advisories/unreviewed/2022/05/GHSA-56cp-qp6w-hp6h/GHSA-56cp-qp6w-hp6h.json +++ b/advisories/unreviewed/2022/05/GHSA-56cp-qp6w-hp6h/GHSA-56cp-qp6w-hp6h.json @@ -7,12 +7,8 @@ "CVE-2009-2090" ], "details": "Unspecified vulnerability in wsadmin in the System Management/Repository component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 allows remote attackers to bypass intended Java Management Extensions (JMX) Management Beans (aka MBeans) access restrictions, and cause a denial of service (daemon stop), via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-577j-jwcq-9jxq/GHSA-577j-jwcq-9jxq.json b/advisories/unreviewed/2022/05/GHSA-577j-jwcq-9jxq/GHSA-577j-jwcq-9jxq.json index ea17a10aee4..466372170d8 100644 --- a/advisories/unreviewed/2022/05/GHSA-577j-jwcq-9jxq/GHSA-577j-jwcq-9jxq.json +++ b/advisories/unreviewed/2022/05/GHSA-577j-jwcq-9jxq/GHSA-577j-jwcq-9jxq.json @@ -7,12 +7,8 @@ "CVE-2009-1983" ], "details": "Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows remote attackers to affect integrity via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-58g7-f54v-2jg8/GHSA-58g7-f54v-2jg8.json b/advisories/unreviewed/2022/05/GHSA-58g7-f54v-2jg8/GHSA-58g7-f54v-2jg8.json index b0a38cc8b40..7846d5191bb 100644 --- a/advisories/unreviewed/2022/05/GHSA-58g7-f54v-2jg8/GHSA-58g7-f54v-2jg8.json +++ b/advisories/unreviewed/2022/05/GHSA-58g7-f54v-2jg8/GHSA-58g7-f54v-2jg8.json @@ -7,12 +7,8 @@ "CVE-2009-2260" ], "details": "stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attackers to obtain sensitive information by sniffing the network.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-58hv-2vjm-27h5/GHSA-58hv-2vjm-27h5.json b/advisories/unreviewed/2022/05/GHSA-58hv-2vjm-27h5/GHSA-58hv-2vjm-27h5.json index f7994d2d025..4eba51189b9 100644 --- a/advisories/unreviewed/2022/05/GHSA-58hv-2vjm-27h5/GHSA-58hv-2vjm-27h5.json +++ b/advisories/unreviewed/2022/05/GHSA-58hv-2vjm-27h5/GHSA-58hv-2vjm-27h5.json @@ -7,12 +7,8 @@ "CVE-2009-2059" ], "details": "Opera, possibly before 9.25, uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an \"SSL tampering\" attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-599h-6j66-vpc4/GHSA-599h-6j66-vpc4.json b/advisories/unreviewed/2022/05/GHSA-599h-6j66-vpc4/GHSA-599h-6j66-vpc4.json index 04f6c8a7a2c..b96030a34e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-599h-6j66-vpc4/GHSA-599h-6j66-vpc4.json +++ b/advisories/unreviewed/2022/05/GHSA-599h-6j66-vpc4/GHSA-599h-6j66-vpc4.json @@ -7,12 +7,8 @@ "CVE-2009-2351" ], "details": "Opera 9.52 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header, a related issue to CVE-2009-1312. NOTE: it was later reported that 10.00 Beta 3 Build 1699 is also affected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-59wr-x3f6-83f2/GHSA-59wr-x3f6-83f2.json b/advisories/unreviewed/2022/05/GHSA-59wr-x3f6-83f2/GHSA-59wr-x3f6-83f2.json index ba7f29ad9ff..b1cab94df66 100644 --- a/advisories/unreviewed/2022/05/GHSA-59wr-x3f6-83f2/GHSA-59wr-x3f6-83f2.json +++ b/advisories/unreviewed/2022/05/GHSA-59wr-x3f6-83f2/GHSA-59wr-x3f6-83f2.json @@ -7,12 +7,8 @@ "CVE-2009-1997" ], "details": "Unspecified vulnerability in the Authentication component in Oracle Database 10.2.0.3 and 11.1.0.7 allows remote attackers to affect confidentiality via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5fvh-wp4h-m832/GHSA-5fvh-wp4h-m832.json b/advisories/unreviewed/2022/05/GHSA-5fvh-wp4h-m832/GHSA-5fvh-wp4h-m832.json index 7d8c15c6049..2e423dd8fca 100644 --- a/advisories/unreviewed/2022/05/GHSA-5fvh-wp4h-m832/GHSA-5fvh-wp4h-m832.json +++ b/advisories/unreviewed/2022/05/GHSA-5fvh-wp4h-m832/GHSA-5fvh-wp4h-m832.json @@ -7,12 +7,8 @@ "CVE-2009-1962" ], "details": "Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the (1) xfig-eps[PID], (2) xfig-pic[PID].pix, (3) xfig-pic[PID].err, (4) xfig-pcx[PID].pix, (5) xfig-xfigrc[PID], (6) xfig[PID], (7) xfig-print[PID], (8) xfig-export[PID].err, (9) xfig-batch[PID], (10) xfig-exp[PID], or (11) xfig-spell.[PID] temporary files, where [PID] is a process ID.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5g27-7962-cxwr/GHSA-5g27-7962-cxwr.json b/advisories/unreviewed/2022/05/GHSA-5g27-7962-cxwr/GHSA-5g27-7962-cxwr.json index b913f70ab5c..28c17a82344 100644 --- a/advisories/unreviewed/2022/05/GHSA-5g27-7962-cxwr/GHSA-5g27-7962-cxwr.json +++ b/advisories/unreviewed/2022/05/GHSA-5g27-7962-cxwr/GHSA-5g27-7962-cxwr.json @@ -7,12 +7,8 @@ "CVE-2009-1969" ], "details": "Unspecified vulnerability in the Auditing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5g54-gg85-4fg3/GHSA-5g54-gg85-4fg3.json b/advisories/unreviewed/2022/05/GHSA-5g54-gg85-4fg3/GHSA-5g54-gg85-4fg3.json index dadf1df7705..6db6f1399d9 100644 --- a/advisories/unreviewed/2022/05/GHSA-5g54-gg85-4fg3/GHSA-5g54-gg85-4fg3.json +++ b/advisories/unreviewed/2022/05/GHSA-5g54-gg85-4fg3/GHSA-5g54-gg85-4fg3.json @@ -7,12 +7,8 @@ "CVE-2009-2192" ], "details": "MobileMe in Apple Mac OS X 10.5 before 10.5.8 does not properly delete credentials upon signout from the preference pane, which makes it easier for attackers to hijack a MobileMe session via unspecified vectors, related to a \"logic issue.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5g7p-p9w3-gf4w/GHSA-5g7p-p9w3-gf4w.json b/advisories/unreviewed/2022/05/GHSA-5g7p-p9w3-gf4w/GHSA-5g7p-p9w3-gf4w.json index b879b4b76b2..6f30bbfee5b 100644 --- a/advisories/unreviewed/2022/05/GHSA-5g7p-p9w3-gf4w/GHSA-5g7p-p9w3-gf4w.json +++ b/advisories/unreviewed/2022/05/GHSA-5g7p-p9w3-gf4w/GHSA-5g7p-p9w3-gf4w.json @@ -7,12 +7,8 @@ "CVE-2009-1942" ], "details": "Cross-site scripting (XSS) vulnerability in the Quiz module 5.x, 6.x-2.x before 6.x-2.2, and 6.x-3.x before 6.x-3.0, a module for Drupal, allows remote authenticated users, with create quizzes or quiz questions access, to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5jp6-4vvv-9mxv/GHSA-5jp6-4vvv-9mxv.json b/advisories/unreviewed/2022/05/GHSA-5jp6-4vvv-9mxv/GHSA-5jp6-4vvv-9mxv.json index e0b23b93120..5e0c70646ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-5jp6-4vvv-9mxv/GHSA-5jp6-4vvv-9mxv.json +++ b/advisories/unreviewed/2022/05/GHSA-5jp6-4vvv-9mxv/GHSA-5jp6-4vvv-9mxv.json @@ -7,12 +7,8 @@ "CVE-2009-2214" ], "details": "The Secure Gateway service in Citrix Secure Gateway 3.1 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an unspecified request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5m4c-cp4p-wj7w/GHSA-5m4c-cp4p-wj7w.json b/advisories/unreviewed/2022/05/GHSA-5m4c-cp4p-wj7w/GHSA-5m4c-cp4p-wj7w.json index 042513d1aa7..ff236cd411a 100644 --- a/advisories/unreviewed/2022/05/GHSA-5m4c-cp4p-wj7w/GHSA-5m4c-cp4p-wj7w.json +++ b/advisories/unreviewed/2022/05/GHSA-5m4c-cp4p-wj7w/GHSA-5m4c-cp4p-wj7w.json @@ -7,12 +7,8 @@ "CVE-2009-2274" ], "details": "The Huawei D100 allows remote attackers to obtain sensitive information via a direct request to (1) lan_status_adv.asp, (2) wlan_basic_cfg.asp, or (3) lancfg.asp in en/, related to use of JavaScript to protect against reading file contents.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5mp2-ghvf-gw3v/GHSA-5mp2-ghvf-gw3v.json b/advisories/unreviewed/2022/05/GHSA-5mp2-ghvf-gw3v/GHSA-5mp2-ghvf-gw3v.json index 6426a3b4b7e..b038f0a926f 100644 --- a/advisories/unreviewed/2022/05/GHSA-5mp2-ghvf-gw3v/GHSA-5mp2-ghvf-gw3v.json +++ b/advisories/unreviewed/2022/05/GHSA-5mp2-ghvf-gw3v/GHSA-5mp2-ghvf-gw3v.json @@ -7,12 +7,8 @@ "CVE-2009-2467" ], "details": "Mozilla Firefox before 3.0.12 and 3.5 before 3.5.1 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving a Flash object, a slow script dialog, and the unloading of the Flash plugin, which triggers attempted use of a deleted object.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5pv5-ffpr-6ccq/GHSA-5pv5-ffpr-6ccq.json b/advisories/unreviewed/2022/05/GHSA-5pv5-ffpr-6ccq/GHSA-5pv5-ffpr-6ccq.json index 75933a53a4f..169e5c09402 100644 --- a/advisories/unreviewed/2022/05/GHSA-5pv5-ffpr-6ccq/GHSA-5pv5-ffpr-6ccq.json +++ b/advisories/unreviewed/2022/05/GHSA-5pv5-ffpr-6ccq/GHSA-5pv5-ffpr-6ccq.json @@ -7,12 +7,8 @@ "CVE-2009-2376" ], "details": "Cross-site scripting (XSS) vulnerability in the Html::textarea function in application/libraries/Html.php in TangoCMS 2.x before 2.3.0 allows remote attackers to inject arbitrary web script or HTML via the value parameter, related to the Contact module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5qmq-wqf9-chpc/GHSA-5qmq-wqf9-chpc.json b/advisories/unreviewed/2022/05/GHSA-5qmq-wqf9-chpc/GHSA-5qmq-wqf9-chpc.json index a1a7e812378..514e75f1eba 100644 --- a/advisories/unreviewed/2022/05/GHSA-5qmq-wqf9-chpc/GHSA-5qmq-wqf9-chpc.json +++ b/advisories/unreviewed/2022/05/GHSA-5qmq-wqf9-chpc/GHSA-5qmq-wqf9-chpc.json @@ -7,12 +7,8 @@ "CVE-2009-2063" ], "details": "Opera, possibly before 9.25, processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5qr4-w8xg-rw2m/GHSA-5qr4-w8xg-rw2m.json b/advisories/unreviewed/2022/05/GHSA-5qr4-w8xg-rw2m/GHSA-5qr4-w8xg-rw2m.json index c8272f826aa..45d6912cc84 100644 --- a/advisories/unreviewed/2022/05/GHSA-5qr4-w8xg-rw2m/GHSA-5qr4-w8xg-rw2m.json +++ b/advisories/unreviewed/2022/05/GHSA-5qr4-w8xg-rw2m/GHSA-5qr4-w8xg-rw2m.json @@ -7,12 +7,8 @@ "CVE-2009-2219" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in phpCollegeExchange 0.1.5c allow remote attackers to inject arbitrary web script or HTML via the (1) _SESSION[handle] parameter to (a) home.php, (b) books/allbooks.php, or (c) books/home.php; or the (2) home parameter to (d) i_head.php or (e) i_nav.php, or (f) allbooks.php, (g) home.php, or (h) i_nav.php in books/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5rj8-9pp4-878m/GHSA-5rj8-9pp4-878m.json b/advisories/unreviewed/2022/05/GHSA-5rj8-9pp4-878m/GHSA-5rj8-9pp4-878m.json index 39157b43e7a..4273113ec29 100644 --- a/advisories/unreviewed/2022/05/GHSA-5rj8-9pp4-878m/GHSA-5rj8-9pp4-878m.json +++ b/advisories/unreviewed/2022/05/GHSA-5rj8-9pp4-878m/GHSA-5rj8-9pp4-878m.json @@ -7,12 +7,8 @@ "CVE-2009-1916" ], "details": "dig.php in GScripts.net DNS Tools allows remote attackers to execute arbitrary commands via shell metacharacters in the ns parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5w8g-gh9j-f5h4/GHSA-5w8g-gh9j-f5h4.json b/advisories/unreviewed/2022/05/GHSA-5w8g-gh9j-f5h4/GHSA-5w8g-gh9j-f5h4.json index 403277be448..ef09a9032a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-5w8g-gh9j-f5h4/GHSA-5w8g-gh9j-f5h4.json +++ b/advisories/unreviewed/2022/05/GHSA-5w8g-gh9j-f5h4/GHSA-5w8g-gh9j-f5h4.json @@ -7,12 +7,8 @@ "CVE-2009-2236" ], "details": "SQL injection vulnerability in yad-admin/login.php in Your Article Directory allows remote attackers to execute arbitrary SQL commands via the txtAdminEmail parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5wvh-4wwc-wh7w/GHSA-5wvh-4wwc-wh7w.json b/advisories/unreviewed/2022/05/GHSA-5wvh-4wwc-wh7w/GHSA-5wvh-4wwc-wh7w.json index 0db9b80a723..fe6b218580a 100644 --- a/advisories/unreviewed/2022/05/GHSA-5wvh-4wwc-wh7w/GHSA-5wvh-4wwc-wh7w.json +++ b/advisories/unreviewed/2022/05/GHSA-5wvh-4wwc-wh7w/GHSA-5wvh-4wwc-wh7w.json @@ -7,12 +7,8 @@ "CVE-2009-2232" ], "details": "SQL injection vulnerability in image.php in Softbiz Banner Ad Management Script allows remote attackers to execute arbitrary SQL commands via the size_id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5wxh-q84q-jxf2/GHSA-5wxh-q84q-jxf2.json b/advisories/unreviewed/2022/05/GHSA-5wxh-q84q-jxf2/GHSA-5wxh-q84q-jxf2.json index 841d9b7cf9b..60cfa29894a 100644 --- a/advisories/unreviewed/2022/05/GHSA-5wxh-q84q-jxf2/GHSA-5wxh-q84q-jxf2.json +++ b/advisories/unreviewed/2022/05/GHSA-5wxh-q84q-jxf2/GHSA-5wxh-q84q-jxf2.json @@ -7,12 +7,8 @@ "CVE-2009-2142" ], "details": "Multiple SQL injection vulnerabilities in admin/index.asp in Zip Store Chat 4.0 and 5.0 allow remote attackers to execute arbitrary SQL commands via the (1) login and (2) senha parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5x2f-7539-frwf/GHSA-5x2f-7539-frwf.json b/advisories/unreviewed/2022/05/GHSA-5x2f-7539-frwf/GHSA-5x2f-7539-frwf.json index e976fb8d573..a50a7606f1c 100644 --- a/advisories/unreviewed/2022/05/GHSA-5x2f-7539-frwf/GHSA-5x2f-7539-frwf.json +++ b/advisories/unreviewed/2022/05/GHSA-5x2f-7539-frwf/GHSA-5x2f-7539-frwf.json @@ -7,12 +7,8 @@ "CVE-2009-2432" ], "details": "WordPress and WordPress MU before 2.8.1 allow remote attackers to obtain sensitive information via a direct request to wp-settings.php, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-633w-96qq-p94x/GHSA-633w-96qq-p94x.json b/advisories/unreviewed/2022/05/GHSA-633w-96qq-p94x/GHSA-633w-96qq-p94x.json index ed087e1d47c..960feae8394 100644 --- a/advisories/unreviewed/2022/05/GHSA-633w-96qq-p94x/GHSA-633w-96qq-p94x.json +++ b/advisories/unreviewed/2022/05/GHSA-633w-96qq-p94x/GHSA-633w-96qq-p94x.json @@ -7,12 +7,8 @@ "CVE-2009-1991" ], "details": "Unspecified vulnerability in the Oracle Text component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity, related to CTXSYS.DRVXTABC. NOTE: the previous information was obtained from the October 2009 CPU. Oracle has not commented on claims from an established researcher that this is for multiple SQL injection vulnerabilities via the (1) idx_owner or (2) idx_name parameters to the create_tables procedure.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6389-9rrq-f234/GHSA-6389-9rrq-f234.json b/advisories/unreviewed/2022/05/GHSA-6389-9rrq-f234/GHSA-6389-9rrq-f234.json index 2786f427bc9..f458c9497bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-6389-9rrq-f234/GHSA-6389-9rrq-f234.json +++ b/advisories/unreviewed/2022/05/GHSA-6389-9rrq-f234/GHSA-6389-9rrq-f234.json @@ -7,12 +7,8 @@ "CVE-2009-2441" ], "details": "Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via the entry parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-648w-fmj6-586x/GHSA-648w-fmj6-586x.json b/advisories/unreviewed/2022/05/GHSA-648w-fmj6-586x/GHSA-648w-fmj6-586x.json index 5bb7b857898..c209199cc1e 100644 --- a/advisories/unreviewed/2022/05/GHSA-648w-fmj6-586x/GHSA-648w-fmj6-586x.json +++ b/advisories/unreviewed/2022/05/GHSA-648w-fmj6-586x/GHSA-648w-fmj6-586x.json @@ -7,12 +7,8 @@ "CVE-2009-2373" ], "details": "Cross-site scripting (XSS) vulnerability in the Forum module in Drupal 6.x before 6.13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-654f-pfp4-h5x6/GHSA-654f-pfp4-h5x6.json b/advisories/unreviewed/2022/05/GHSA-654f-pfp4-h5x6/GHSA-654f-pfp4-h5x6.json index a484949c2ca..501bf2b4d9d 100644 --- a/advisories/unreviewed/2022/05/GHSA-654f-pfp4-h5x6/GHSA-654f-pfp4-h5x6.json +++ b/advisories/unreviewed/2022/05/GHSA-654f-pfp4-h5x6/GHSA-654f-pfp4-h5x6.json @@ -7,12 +7,8 @@ "CVE-2009-1977" ], "details": "Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the July 2009 Oracle CPU. Oracle has not commented on claims from an independent researcher that this vulnerability allows attackers to bypass authentication via unknown vectors involving the username parameter and login.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-65j9-xwcc-hcc6/GHSA-65j9-xwcc-hcc6.json b/advisories/unreviewed/2022/05/GHSA-65j9-xwcc-hcc6/GHSA-65j9-xwcc-hcc6.json index a2267a65e1c..2b471da98ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-65j9-xwcc-hcc6/GHSA-65j9-xwcc-hcc6.json +++ b/advisories/unreviewed/2022/05/GHSA-65j9-xwcc-hcc6/GHSA-65j9-xwcc-hcc6.json @@ -7,12 +7,8 @@ "CVE-2009-2147" ], "details": "SQL injection vulnerability in fdown.php in phpWebThings 1.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-66qh-59pw-qjhv/GHSA-66qh-59pw-qjhv.json b/advisories/unreviewed/2022/05/GHSA-66qh-59pw-qjhv/GHSA-66qh-59pw-qjhv.json index a81a8258d90..9c0d0d7313b 100644 --- a/advisories/unreviewed/2022/05/GHSA-66qh-59pw-qjhv/GHSA-66qh-59pw-qjhv.json +++ b/advisories/unreviewed/2022/05/GHSA-66qh-59pw-qjhv/GHSA-66qh-59pw-qjhv.json @@ -7,12 +7,8 @@ "CVE-2009-2369" ], "details": "Integer overflow in the wxImage::Create function in src/common/image.cpp in wxWidgets 2.8.10 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted JPEG file, which triggers a heap-based buffer overflow. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-66r2-9m7r-3cvc/GHSA-66r2-9m7r-3cvc.json b/advisories/unreviewed/2022/05/GHSA-66r2-9m7r-3cvc/GHSA-66r2-9m7r-3cvc.json index 9e790dd70a8..9f23b4a944a 100644 --- a/advisories/unreviewed/2022/05/GHSA-66r2-9m7r-3cvc/GHSA-66r2-9m7r-3cvc.json +++ b/advisories/unreviewed/2022/05/GHSA-66r2-9m7r-3cvc/GHSA-66r2-9m7r-3cvc.json @@ -7,12 +7,8 @@ "CVE-2009-2450" ], "details": "The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Personal Firewall 3.5 before 3.5.0.14, allows local users to gain privileges via crafted METHOD_NEITHER IOCTL requests to \\Device\\OAmon containing arbitrary kernel addresses, as demonstrated using the 0x830020C3 IOCTL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-66x7-vp27-6978/GHSA-66x7-vp27-6978.json b/advisories/unreviewed/2022/05/GHSA-66x7-vp27-6978/GHSA-66x7-vp27-6978.json index 3e1338e1525..22f4fe29a1a 100644 --- a/advisories/unreviewed/2022/05/GHSA-66x7-vp27-6978/GHSA-66x7-vp27-6978.json +++ b/advisories/unreviewed/2022/05/GHSA-66x7-vp27-6978/GHSA-66x7-vp27-6978.json @@ -7,12 +7,8 @@ "CVE-2009-2270" ], "details": "Unrestricted file upload vulnerability in member/uploads_edit.php in dedecms 5.3 allows remote attackers to execute arbitrary code by uploading a file with a double extension in the filename, then accessing this file via unspecified vectors, as demonstrated by a .jpg.php filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6726-5cj2-9h6f/GHSA-6726-5cj2-9h6f.json b/advisories/unreviewed/2022/05/GHSA-6726-5cj2-9h6f/GHSA-6726-5cj2-9h6f.json index 31a393b2f62..f2a8cfa6579 100644 --- a/advisories/unreviewed/2022/05/GHSA-6726-5cj2-9h6f/GHSA-6726-5cj2-9h6f.json +++ b/advisories/unreviewed/2022/05/GHSA-6726-5cj2-9h6f/GHSA-6726-5cj2-9h6f.json @@ -7,12 +7,8 @@ "CVE-2009-2281" ], "details": "Multiple heap-based buffer underflows in the readPostBody function in cgiutil.c in mapserv in MapServer 4.x through 4.10.4 and 5.x before 5.4.2 allow remote attackers to execute arbitrary code via (1) a crafted Content-Length HTTP header or (2) a large HTTP request, related to an integer overflow that triggers a heap-based buffer overflow. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2009-0840.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6797-3vc4-x4hv/GHSA-6797-3vc4-x4hv.json b/advisories/unreviewed/2022/05/GHSA-6797-3vc4-x4hv/GHSA-6797-3vc4-x4hv.json index 81841c76ab2..4cd0d001818 100644 --- a/advisories/unreviewed/2022/05/GHSA-6797-3vc4-x4hv/GHSA-6797-3vc4-x4hv.json +++ b/advisories/unreviewed/2022/05/GHSA-6797-3vc4-x4hv/GHSA-6797-3vc4-x4hv.json @@ -7,12 +7,8 @@ "CVE-2009-2302" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the q parameter in a search action. NOTE: it was later reported that 5.2.1 is also affected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-67p7-54p8-gf98/GHSA-67p7-54p8-gf98.json b/advisories/unreviewed/2022/05/GHSA-67p7-54p8-gf98/GHSA-67p7-54p8-gf98.json index e3814939fa2..7190346d27a 100644 --- a/advisories/unreviewed/2022/05/GHSA-67p7-54p8-gf98/GHSA-67p7-54p8-gf98.json +++ b/advisories/unreviewed/2022/05/GHSA-67p7-54p8-gf98/GHSA-67p7-54p8-gf98.json @@ -7,12 +7,8 @@ "CVE-2009-2427" ], "details": "SQL injection vulnerability in co-profile.php in Jobbr 2.2.7 allows remote attackers to execute arbitrary SQL commands via the emp_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-67rf-55wq-rpmf/GHSA-67rf-55wq-rpmf.json b/advisories/unreviewed/2022/05/GHSA-67rf-55wq-rpmf/GHSA-67rf-55wq-rpmf.json index bba718c2863..5547a6b5837 100644 --- a/advisories/unreviewed/2022/05/GHSA-67rf-55wq-rpmf/GHSA-67rf-55wq-rpmf.json +++ b/advisories/unreviewed/2022/05/GHSA-67rf-55wq-rpmf/GHSA-67rf-55wq-rpmf.json @@ -7,12 +7,8 @@ "CVE-2009-2822" ], "details": "AirPort Utility before 5.5.1 for Apple AirPort Base Station does not properly distribute MAC address ACLs to network extenders, which allows remote attackers to bypass intended access restrictions via an 802.11 authentication frame.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-69p6-gr8g-6vhp/GHSA-69p6-gr8g-6vhp.json b/advisories/unreviewed/2022/05/GHSA-69p6-gr8g-6vhp/GHSA-69p6-gr8g-6vhp.json index a5d3b9cb2c2..1b855d19eb3 100644 --- a/advisories/unreviewed/2022/05/GHSA-69p6-gr8g-6vhp/GHSA-69p6-gr8g-6vhp.json +++ b/advisories/unreviewed/2022/05/GHSA-69p6-gr8g-6vhp/GHSA-69p6-gr8g-6vhp.json @@ -7,12 +7,8 @@ "CVE-2009-1932" ], "details": "Multiple integer overflows in the (1) user_info_callback, (2) user_endrow_callback, and (3) gst_pngdec_task functions (ext/libpng/gstpngdec.c) in GStreamer Good Plug-ins (aka gst-plugins-good or gstreamer-plugins-good) 0.10.15 allow remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted PNG file, which triggers a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-69v4-mh7p-68f3/GHSA-69v4-mh7p-68f3.json b/advisories/unreviewed/2022/05/GHSA-69v4-mh7p-68f3/GHSA-69v4-mh7p-68f3.json index 6f2779e4de1..6f22e0e5136 100644 --- a/advisories/unreviewed/2022/05/GHSA-69v4-mh7p-68f3/GHSA-69v4-mh7p-68f3.json +++ b/advisories/unreviewed/2022/05/GHSA-69v4-mh7p-68f3/GHSA-69v4-mh7p-68f3.json @@ -7,12 +7,8 @@ "CVE-2009-1926" ], "details": "Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to cause a denial of service (TCP outage) via a series of TCP sessions that have pending data and a (1) small or (2) zero receive window size, and remain in the FIN-WAIT-1 or FIN-WAIT-2 state indefinitely, aka \"TCP/IP Orphaned Connections Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-69vf-m5h7-8fwr/GHSA-69vf-m5h7-8fwr.json b/advisories/unreviewed/2022/05/GHSA-69vf-m5h7-8fwr/GHSA-69vf-m5h7-8fwr.json index 77b2e2230fb..94a7a0f5134 100644 --- a/advisories/unreviewed/2022/05/GHSA-69vf-m5h7-8fwr/GHSA-69vf-m5h7-8fwr.json +++ b/advisories/unreviewed/2022/05/GHSA-69vf-m5h7-8fwr/GHSA-69vf-m5h7-8fwr.json @@ -7,12 +7,8 @@ "CVE-2009-2445" ], "details": "Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6.1 before SP12, and 7.0 through Update 6, when running on Windows, allows remote attackers to read arbitrary JSP files via an alternate data stream syntax, as demonstrated by a .jsp::$DATA URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6crq-w9mv-v5mf/GHSA-6crq-w9mv-v5mf.json b/advisories/unreviewed/2022/05/GHSA-6crq-w9mv-v5mf/GHSA-6crq-w9mv-v5mf.json index b2b384c3597..90f0fe91b18 100644 --- a/advisories/unreviewed/2022/05/GHSA-6crq-w9mv-v5mf/GHSA-6crq-w9mv-v5mf.json +++ b/advisories/unreviewed/2022/05/GHSA-6crq-w9mv-v5mf/GHSA-6crq-w9mv-v5mf.json @@ -7,12 +7,8 @@ "CVE-2009-2286" ], "details": "Buffer overflow in compface 1.5.2 and earlier allows user-assisted attackers to cause a denial of service (crash) via a long declaration in a .xbm file. NOTE: this issue only affects compface on distributions that used a certain patch.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6fhm-xqc2-c7hc/GHSA-6fhm-xqc2-c7hc.json b/advisories/unreviewed/2022/05/GHSA-6fhm-xqc2-c7hc/GHSA-6fhm-xqc2-c7hc.json index 4098c3bd3c8..805079bcd20 100644 --- a/advisories/unreviewed/2022/05/GHSA-6fhm-xqc2-c7hc/GHSA-6fhm-xqc2-c7hc.json +++ b/advisories/unreviewed/2022/05/GHSA-6fhm-xqc2-c7hc/GHSA-6fhm-xqc2-c7hc.json @@ -7,12 +7,8 @@ "CVE-2009-2254" ], "details": "Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/sqlpatch.php, which allows remote attackers to execute arbitrary SQL commands via the query_string parameter in an execute action, in conjunction with a PATH_INFO of password_forgotten.php, related to a \"SQL Execution\" issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6hvr-9v7h-3923/GHSA-6hvr-9v7h-3923.json b/advisories/unreviewed/2022/05/GHSA-6hvr-9v7h-3923/GHSA-6hvr-9v7h-3923.json index 6800c78e93a..0015faf1d55 100644 --- a/advisories/unreviewed/2022/05/GHSA-6hvr-9v7h-3923/GHSA-6hvr-9v7h-3923.json +++ b/advisories/unreviewed/2022/05/GHSA-6hvr-9v7h-3923/GHSA-6hvr-9v7h-3923.json @@ -7,12 +7,8 @@ "CVE-2009-2569" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Verlihub Control Panel (VHCP) 1.7e allow remote attackers to inject arbitrary web script or HTML via (1) the nick parameter in a login action to index.php or (2) the URI in a news request to index.html.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6jjh-3xhq-xhpf/GHSA-6jjh-3xhq-xhpf.json b/advisories/unreviewed/2022/05/GHSA-6jjh-3xhq-xhpf/GHSA-6jjh-3xhq-xhpf.json index a326647eb61..6ee98ab0830 100644 --- a/advisories/unreviewed/2022/05/GHSA-6jjh-3xhq-xhpf/GHSA-6jjh-3xhq-xhpf.json +++ b/advisories/unreviewed/2022/05/GHSA-6jjh-3xhq-xhpf/GHSA-6jjh-3xhq-xhpf.json @@ -7,12 +7,8 @@ "CVE-2009-2102" ], "details": "SQL injection vulnerability in the Jumi (com_jumi) component 2.0.3 and possibly other versions for Joomla allows remote attackers to execute arbitrary SQL commands via the fileid parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6m53-9vwf-wfq2/GHSA-6m53-9vwf-wfq2.json b/advisories/unreviewed/2022/05/GHSA-6m53-9vwf-wfq2/GHSA-6m53-9vwf-wfq2.json index 36f8ccf1876..69b33532c66 100644 --- a/advisories/unreviewed/2022/05/GHSA-6m53-9vwf-wfq2/GHSA-6m53-9vwf-wfq2.json +++ b/advisories/unreviewed/2022/05/GHSA-6m53-9vwf-wfq2/GHSA-6m53-9vwf-wfq2.json @@ -7,12 +7,8 @@ "CVE-2009-1975" ], "details": "Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect confidentiality, integrity, and availability, related to the WLS Console Package.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6m6f-qg2x-g8vj/GHSA-6m6f-qg2x-g8vj.json b/advisories/unreviewed/2022/05/GHSA-6m6f-qg2x-g8vj/GHSA-6m6f-qg2x-g8vj.json index 3bfcd601f29..2ee254fe337 100644 --- a/advisories/unreviewed/2022/05/GHSA-6m6f-qg2x-g8vj/GHSA-6m6f-qg2x-g8vj.json +++ b/advisories/unreviewed/2022/05/GHSA-6m6f-qg2x-g8vj/GHSA-6m6f-qg2x-g8vj.json @@ -7,12 +7,8 @@ "CVE-2009-2223" ], "details": "Directory traversal vulnerability in locms/smarty.php in LightOpenCMS 0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cwd parameter. NOTE: remote file inclusion attacks may be possible.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6pj5-mm38-9526/GHSA-6pj5-mm38-9526.json b/advisories/unreviewed/2022/05/GHSA-6pj5-mm38-9526/GHSA-6pj5-mm38-9526.json index 63e67cfc4f0..98d273e5b26 100644 --- a/advisories/unreviewed/2022/05/GHSA-6pj5-mm38-9526/GHSA-6pj5-mm38-9526.json +++ b/advisories/unreviewed/2022/05/GHSA-6pj5-mm38-9526/GHSA-6pj5-mm38-9526.json @@ -7,12 +7,8 @@ "CVE-2009-2075" ], "details": "Nodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2, a module for Drupal, does not properly restrict access when displaying node titles, which has unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6qh4-xqvp-g8h9/GHSA-6qh4-xqvp-g8h9.json b/advisories/unreviewed/2022/05/GHSA-6qh4-xqvp-g8h9/GHSA-6qh4-xqvp-g8h9.json index 2e110ef547f..673f0f2f0b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-6qh4-xqvp-g8h9/GHSA-6qh4-xqvp-g8h9.json +++ b/advisories/unreviewed/2022/05/GHSA-6qh4-xqvp-g8h9/GHSA-6qh4-xqvp-g8h9.json @@ -7,12 +7,8 @@ "CVE-2009-2238" ], "details": "Unrestricted file upload vulnerability in includes/shared_scripts/wysiwyg_editor/assetmanager/assetmanager.asp in DMXReady Registration Manager 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in assets/webblogmanager.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6v6x-8c4v-jw69/GHSA-6v6x-8c4v-jw69.json b/advisories/unreviewed/2022/05/GHSA-6v6x-8c4v-jw69/GHSA-6v6x-8c4v-jw69.json index 4622ab9c345..79612ac0dff 100644 --- a/advisories/unreviewed/2022/05/GHSA-6v6x-8c4v-jw69/GHSA-6v6x-8c4v-jw69.json +++ b/advisories/unreviewed/2022/05/GHSA-6v6x-8c4v-jw69/GHSA-6v6x-8c4v-jw69.json @@ -7,12 +7,8 @@ "CVE-2009-1967" ], "details": "Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1966.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6w27-694r-crm4/GHSA-6w27-694r-crm4.json b/advisories/unreviewed/2022/05/GHSA-6w27-694r-crm4/GHSA-6w27-694r-crm4.json index c11775a3db9..13930d7a612 100644 --- a/advisories/unreviewed/2022/05/GHSA-6w27-694r-crm4/GHSA-6w27-694r-crm4.json +++ b/advisories/unreviewed/2022/05/GHSA-6w27-694r-crm4/GHSA-6w27-694r-crm4.json @@ -7,12 +7,8 @@ "CVE-2009-2343" ], "details": "Cross-site scripting (XSS) vulnerability in people.php in Zoph before 0.7.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-727g-wx9c-g3r4/GHSA-727g-wx9c-g3r4.json b/advisories/unreviewed/2022/05/GHSA-727g-wx9c-g3r4/GHSA-727g-wx9c-g3r4.json index 3ed7150517e..af1cef9e2b7 100644 --- a/advisories/unreviewed/2022/05/GHSA-727g-wx9c-g3r4/GHSA-727g-wx9c-g3r4.json +++ b/advisories/unreviewed/2022/05/GHSA-727g-wx9c-g3r4/GHSA-727g-wx9c-g3r4.json @@ -7,12 +7,8 @@ "CVE-2009-2215" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in URD before 0.6.2 allow remote attackers to inject arbitrary web script or HTML via vectors related to the fatal_error page and unspecified other components.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-744f-fx3c-748c/GHSA-744f-fx3c-748c.json b/advisories/unreviewed/2022/05/GHSA-744f-fx3c-748c/GHSA-744f-fx3c-748c.json index f4c1b6b1ea0..ce379dd9113 100644 --- a/advisories/unreviewed/2022/05/GHSA-744f-fx3c-748c/GHSA-744f-fx3c-748c.json +++ b/advisories/unreviewed/2022/05/GHSA-744f-fx3c-748c/GHSA-744f-fx3c-748c.json @@ -7,12 +7,8 @@ "CVE-2009-2261" ], "details": "PeaZIP 2.6.1, 2.5.1, and earlier on Windows allows user-assisted remote attackers to execute arbitrary commands via a .zip archive with a .txt file whose name contains | (pipe) characters and a command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-747q-6v52-9hjf/GHSA-747q-6v52-9hjf.json b/advisories/unreviewed/2022/05/GHSA-747q-6v52-9hjf/GHSA-747q-6v52-9hjf.json index bde0802eaf8..1010c28296b 100644 --- a/advisories/unreviewed/2022/05/GHSA-747q-6v52-9hjf/GHSA-747q-6v52-9hjf.json +++ b/advisories/unreviewed/2022/05/GHSA-747q-6v52-9hjf/GHSA-747q-6v52-9hjf.json @@ -7,12 +7,8 @@ "CVE-2009-1923" ], "details": "Heap-based buffer overflow in the Windows Internet Name Service (WINS) component for Microsoft Windows 2000 SP4 and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted WINS replication packet that triggers an incorrect buffer-length calculation, aka \"WINS Heap Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-75jf-fx6q-2qjm/GHSA-75jf-fx6q-2qjm.json b/advisories/unreviewed/2022/05/GHSA-75jf-fx6q-2qjm/GHSA-75jf-fx6q-2qjm.json index fab5c3a8d97..8b4d283e7c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-75jf-fx6q-2qjm/GHSA-75jf-fx6q-2qjm.json +++ b/advisories/unreviewed/2022/05/GHSA-75jf-fx6q-2qjm/GHSA-75jf-fx6q-2qjm.json @@ -7,12 +7,8 @@ "CVE-2009-2535" ], "details": "Mozilla Firefox before 2.0.0.19 and 3.x before 3.0.5, SeaMonkey, and Thunderbird allow remote attackers to cause a denial of service (memory consumption and application crash) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7644-gj3v-88qr/GHSA-7644-gj3v-88qr.json b/advisories/unreviewed/2022/05/GHSA-7644-gj3v-88qr/GHSA-7644-gj3v-88qr.json index e7fd815a07e..77a581e4404 100644 --- a/advisories/unreviewed/2022/05/GHSA-7644-gj3v-88qr/GHSA-7644-gj3v-88qr.json +++ b/advisories/unreviewed/2022/05/GHSA-7644-gj3v-88qr/GHSA-7644-gj3v-88qr.json @@ -7,12 +7,8 @@ "CVE-2009-2318" ], "details": "The Axesstel MV 410R allows remote attackers to cause a denial of service via a flood of SYN packets, a related issue to CVE-1999-0116.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-76hp-m43v-6q55/GHSA-76hp-m43v-6q55.json b/advisories/unreviewed/2022/05/GHSA-76hp-m43v-6q55/GHSA-76hp-m43v-6q55.json index 7d3fa1ab986..e92a76018ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-76hp-m43v-6q55/GHSA-76hp-m43v-6q55.json +++ b/advisories/unreviewed/2022/05/GHSA-76hp-m43v-6q55/GHSA-76hp-m43v-6q55.json @@ -7,12 +7,8 @@ "CVE-2009-2395" ], "details": "SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the category parameter in an itemlist action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-76p8-35jq-5x43/GHSA-76p8-35jq-5x43.json b/advisories/unreviewed/2022/05/GHSA-76p8-35jq-5x43/GHSA-76p8-35jq-5x43.json index fdb325d6077..45a282ea029 100644 --- a/advisories/unreviewed/2022/05/GHSA-76p8-35jq-5x43/GHSA-76p8-35jq-5x43.json +++ b/advisories/unreviewed/2022/05/GHSA-76p8-35jq-5x43/GHSA-76p8-35jq-5x43.json @@ -7,12 +7,8 @@ "CVE-2009-2287" ], "details": "The kvm_arch_vcpu_ioctl_set_sregs function in the KVM in Linux kernel 2.6 before 2.6.30, when running on x86 systems, does not validate the page table root in a KVM_SET_SREGS call, which allows local users to cause a denial of service (crash or hang) via a crafted cr3 value, which triggers a NULL pointer dereference in the gfn_to_rmap function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-76r9-88g8-fpcq/GHSA-76r9-88g8-fpcq.json b/advisories/unreviewed/2022/05/GHSA-76r9-88g8-fpcq/GHSA-76r9-88g8-fpcq.json index 16ab1546586..9e4cf8ef131 100644 --- a/advisories/unreviewed/2022/05/GHSA-76r9-88g8-fpcq/GHSA-76r9-88g8-fpcq.json +++ b/advisories/unreviewed/2022/05/GHSA-76r9-88g8-fpcq/GHSA-76r9-88g8-fpcq.json @@ -7,12 +7,8 @@ "CVE-2009-2560" ], "details": "Multiple unspecified vulnerabilities in Wireshark 1.2.0 allow remote attackers to cause a denial of service (application crash) via a file that records a malformed packet trace and is processed by the (1) Bluetooth L2CAP, (2) RADIUS, or (3) MIOP dissector. NOTE: it was later reported that the RADIUS issue also affects 0.10.13 through 1.0.9.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-779x-pqv5-6gpc/GHSA-779x-pqv5-6gpc.json b/advisories/unreviewed/2022/05/GHSA-779x-pqv5-6gpc/GHSA-779x-pqv5-6gpc.json index 0db59e14613..c249ec0d50d 100644 --- a/advisories/unreviewed/2022/05/GHSA-779x-pqv5-6gpc/GHSA-779x-pqv5-6gpc.json +++ b/advisories/unreviewed/2022/05/GHSA-779x-pqv5-6gpc/GHSA-779x-pqv5-6gpc.json @@ -7,12 +7,8 @@ "CVE-2009-1994" ], "details": "Unspecified vulnerability in the Oracle Spatial component in Oracle Database 10.1.0.5 allows remote authenticated users to affect confidentiality, integrity, and availability, related to MDSYS.PRVT_CMT_CBK.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7926-wx9p-5h52/GHSA-7926-wx9p-5h52.json b/advisories/unreviewed/2022/05/GHSA-7926-wx9p-5h52/GHSA-7926-wx9p-5h52.json index e84e2e9c4c2..c8712908eed 100644 --- a/advisories/unreviewed/2022/05/GHSA-7926-wx9p-5h52/GHSA-7926-wx9p-5h52.json +++ b/advisories/unreviewed/2022/05/GHSA-7926-wx9p-5h52/GHSA-7926-wx9p-5h52.json @@ -7,12 +7,8 @@ "CVE-2009-2435" ], "details": "The Sametime server in IBM Lotus Instant Messaging and Web Conferencing 6.5.1 generates error messages for a failed logon attempt with different time delays depending on whether the user account exists, which allows remote attackers to enumerate valid usernames.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-793x-29wj-rgcp/GHSA-793x-29wj-rgcp.json b/advisories/unreviewed/2022/05/GHSA-793x-29wj-rgcp/GHSA-793x-29wj-rgcp.json index f50c92b9981..f2b154b9c4b 100644 --- a/advisories/unreviewed/2022/05/GHSA-793x-29wj-rgcp/GHSA-793x-29wj-rgcp.json +++ b/advisories/unreviewed/2022/05/GHSA-793x-29wj-rgcp/GHSA-793x-29wj-rgcp.json @@ -7,12 +7,8 @@ "CVE-2009-2263" ], "details": "Directory traversal vulnerability in index.php in Awesome PHP Mega File Manager 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-79j4-mgpg-frj9/GHSA-79j4-mgpg-frj9.json b/advisories/unreviewed/2022/05/GHSA-79j4-mgpg-frj9/GHSA-79j4-mgpg-frj9.json index 8cfa8dab776..0863a50a8de 100644 --- a/advisories/unreviewed/2022/05/GHSA-79j4-mgpg-frj9/GHSA-79j4-mgpg-frj9.json +++ b/advisories/unreviewed/2022/05/GHSA-79j4-mgpg-frj9/GHSA-79j4-mgpg-frj9.json @@ -7,12 +7,8 @@ "CVE-2009-2070" ], "details": "Opera displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7c32-8cww-86vm/GHSA-7c32-8cww-86vm.json b/advisories/unreviewed/2022/05/GHSA-7c32-8cww-86vm/GHSA-7c32-8cww-86vm.json index 942bf854e26..a0fee7c3858 100644 --- a/advisories/unreviewed/2022/05/GHSA-7c32-8cww-86vm/GHSA-7c32-8cww-86vm.json +++ b/advisories/unreviewed/2022/05/GHSA-7c32-8cww-86vm/GHSA-7c32-8cww-86vm.json @@ -7,12 +7,8 @@ "CVE-2009-2188" ], "details": "Buffer overflow in ImageIO in Apple Mac OS X 10.5 before 10.5.8, and Safari before 4.0.3, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image with crafted EXIF metadata.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7c7q-3jw9-88x4/GHSA-7c7q-3jw9-88x4.json b/advisories/unreviewed/2022/05/GHSA-7c7q-3jw9-88x4/GHSA-7c7q-3jw9-88x4.json index cad9db6cf4e..ccae8e972e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-7c7q-3jw9-88x4/GHSA-7c7q-3jw9-88x4.json +++ b/advisories/unreviewed/2022/05/GHSA-7c7q-3jw9-88x4/GHSA-7c7q-3jw9-88x4.json @@ -7,12 +7,8 @@ "CVE-2009-2356" ], "details": "Multiple stack-based buffer overflows in the pgsqlQuery function in NullLogic Groupware 1.2.7, when PostgreSQL is used, might allow remote attackers to execute arbitrary code via input to the (1) POP3, (2) SMTP, or (3) web component that triggers a long SQL query.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7gx9-355f-94x4/GHSA-7gx9-355f-94x4.json b/advisories/unreviewed/2022/05/GHSA-7gx9-355f-94x4/GHSA-7gx9-355f-94x4.json index d2d20601d72..412891822d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-7gx9-355f-94x4/GHSA-7gx9-355f-94x4.json +++ b/advisories/unreviewed/2022/05/GHSA-7gx9-355f-94x4/GHSA-7gx9-355f-94x4.json @@ -7,12 +7,8 @@ "CVE-2009-2091" ], "details": "The System Management/Repository component in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 on z/OS uses weak file permissions for new applications, which allows remote attackers to obtain sensitive information via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7j42-53vc-p6r7/GHSA-7j42-53vc-p6r7.json b/advisories/unreviewed/2022/05/GHSA-7j42-53vc-p6r7/GHSA-7j42-53vc-p6r7.json index 461a4019e39..92648a526a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-7j42-53vc-p6r7/GHSA-7j42-53vc-p6r7.json +++ b/advisories/unreviewed/2022/05/GHSA-7j42-53vc-p6r7/GHSA-7j42-53vc-p6r7.json @@ -7,12 +7,8 @@ "CVE-2009-1915" ], "details": "Stack-based buffer overflow in the URL Search Hook (ICQToolBar.dll) in ICQ 6.5 allows remote attackers to cause a denial of service (persistent crash) and possibly execute arbitrary code via an Internet shortcut .URL file containing a long URL parameter, which triggers a crash when browsing a folder that contains this file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7mp8-f6pp-68r5/GHSA-7mp8-f6pp-68r5.json b/advisories/unreviewed/2022/05/GHSA-7mp8-f6pp-68r5/GHSA-7mp8-f6pp-68r5.json index d4094a26844..a21fcd8998a 100644 --- a/advisories/unreviewed/2022/05/GHSA-7mp8-f6pp-68r5/GHSA-7mp8-f6pp-68r5.json +++ b/advisories/unreviewed/2022/05/GHSA-7mp8-f6pp-68r5/GHSA-7mp8-f6pp-68r5.json @@ -7,12 +7,8 @@ "CVE-2009-2424" ], "details": "Cross-site scripting (XSS) vulnerability in search.php in Ebay Clone 2009 allows remote attackers to inject arbitrary web script or HTML via the mode parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7pjx-r98g-p4qj/GHSA-7pjx-r98g-p4qj.json b/advisories/unreviewed/2022/05/GHSA-7pjx-r98g-p4qj/GHSA-7pjx-r98g-p4qj.json index 93c8562cd95..c99af5e727b 100644 --- a/advisories/unreviewed/2022/05/GHSA-7pjx-r98g-p4qj/GHSA-7pjx-r98g-p4qj.json +++ b/advisories/unreviewed/2022/05/GHSA-7pjx-r98g-p4qj/GHSA-7pjx-r98g-p4qj.json @@ -7,12 +7,8 @@ "CVE-2009-2344" ], "details": "The web-based management interfaces in Sourcefire Defense Center (DC) and 3D Sensor before 4.8.2 allow remote authenticated users to gain privileges via a $admin value for the admin parameter in an edit action to admin/user/user.cgi and unspecified other components.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7q4w-gjvp-92qw/GHSA-7q4w-gjvp-92qw.json b/advisories/unreviewed/2022/05/GHSA-7q4w-gjvp-92qw/GHSA-7q4w-gjvp-92qw.json index fb99291bf20..35ec84879a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-7q4w-gjvp-92qw/GHSA-7q4w-gjvp-92qw.json +++ b/advisories/unreviewed/2022/05/GHSA-7q4w-gjvp-92qw/GHSA-7q4w-gjvp-92qw.json @@ -7,12 +7,8 @@ "CVE-2009-2305" ], "details": "The ARD-9808 DVR card security camera allows remote attackers to cause a denial of service via a long URI composed of //.\\ (slash slash dot backslash) sequences.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7q88-4hj3-987c/GHSA-7q88-4hj3-987c.json b/advisories/unreviewed/2022/05/GHSA-7q88-4hj3-987c/GHSA-7q88-4hj3-987c.json index a28e3b06c50..f58e1eaec85 100644 --- a/advisories/unreviewed/2022/05/GHSA-7q88-4hj3-987c/GHSA-7q88-4hj3-987c.json +++ b/advisories/unreviewed/2022/05/GHSA-7q88-4hj3-987c/GHSA-7q88-4hj3-987c.json @@ -7,12 +7,8 @@ "CVE-2009-1968" ], "details": "Unspecified vulnerability in the Secure Enterprise Search component in Oracle Database 10.1.8.3 allows remote attackers to affect integrity via unknown vectors. NOTE: the previous information was obtained from the July 2009 CPU. Oracle has not commented on claims from an established researcher that this is cross-site scripting (XSS) via the search_p_groups parameter in search/query/search.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7vfh-g24g-5m5r/GHSA-7vfh-g24g-5m5r.json b/advisories/unreviewed/2022/05/GHSA-7vfh-g24g-5m5r/GHSA-7vfh-g24g-5m5r.json index e0a38591f58..db81d3a8937 100644 --- a/advisories/unreviewed/2022/05/GHSA-7vfh-g24g-5m5r/GHSA-7vfh-g24g-5m5r.json +++ b/advisories/unreviewed/2022/05/GHSA-7vfh-g24g-5m5r/GHSA-7vfh-g24g-5m5r.json @@ -7,12 +7,8 @@ "CVE-2009-1944" ], "details": "Stack-based buffer overflow in AIMP 2.51 build 330 allows remote attackers to execute arbitrary code via an MP3 file with a long ID3 tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7vr5-484f-g6q6/GHSA-7vr5-484f-g6q6.json b/advisories/unreviewed/2022/05/GHSA-7vr5-484f-g6q6/GHSA-7vr5-484f-g6q6.json index 55b350476dc..777ad7e579d 100644 --- a/advisories/unreviewed/2022/05/GHSA-7vr5-484f-g6q6/GHSA-7vr5-484f-g6q6.json +++ b/advisories/unreviewed/2022/05/GHSA-7vr5-484f-g6q6/GHSA-7vr5-484f-g6q6.json @@ -7,12 +7,8 @@ "CVE-2009-2743" ], "details": "IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27, and 7.0 before 7.0.0.7, does not properly handle an exception occurring after use of wsadmin scripts and configuration of JAAS-J2C Authentication Data, which allows local users to obtain sensitive information by reading the First Failure Data Capture (FFDC) log file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7w4p-8h85-g97q/GHSA-7w4p-8h85-g97q.json b/advisories/unreviewed/2022/05/GHSA-7w4p-8h85-g97q/GHSA-7w4p-8h85-g97q.json index 8fbc052ad6c..6a1a54c4bb7 100644 --- a/advisories/unreviewed/2022/05/GHSA-7w4p-8h85-g97q/GHSA-7w4p-8h85-g97q.json +++ b/advisories/unreviewed/2022/05/GHSA-7w4p-8h85-g97q/GHSA-7w4p-8h85-g97q.json @@ -7,12 +7,8 @@ "CVE-2009-2554" ], "details": "SQL injection vulnerability in the search method in jobline.class.php in Jobline (com_jobline) 1.1.2.2, 1.3.1, and possibly earlier versions, a component for Joomla!, allows remote attackers to execute arbitrary SQL commands via the search parameter in a results action to index.php, which invokes the search method from the searchJobPostings function in jobline.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7wh8-f9r4-g53c/GHSA-7wh8-f9r4-g53c.json b/advisories/unreviewed/2022/05/GHSA-7wh8-f9r4-g53c/GHSA-7wh8-f9r4-g53c.json index 821157e164e..628745ced2b 100644 --- a/advisories/unreviewed/2022/05/GHSA-7wh8-f9r4-g53c/GHSA-7wh8-f9r4-g53c.json +++ b/advisories/unreviewed/2022/05/GHSA-7wh8-f9r4-g53c/GHSA-7wh8-f9r4-g53c.json @@ -7,12 +7,8 @@ "CVE-2009-2364" ], "details": "Stack-based buffer overflow in Mp3-Nator 2.0 allows remote attackers to execute arbitrary code via (1) a long string in a .plf file and (2) a long string in the listdata.dat file, possibly related to a track entry.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7x2r-cg6w-8rwf/GHSA-7x2r-cg6w-8rwf.json b/advisories/unreviewed/2022/05/GHSA-7x2r-cg6w-8rwf/GHSA-7x2r-cg6w-8rwf.json index 8db7e2567db..ddbb0316e43 100644 --- a/advisories/unreviewed/2022/05/GHSA-7x2r-cg6w-8rwf/GHSA-7x2r-cg6w-8rwf.json +++ b/advisories/unreviewed/2022/05/GHSA-7x2r-cg6w-8rwf/GHSA-7x2r-cg6w-8rwf.json @@ -7,12 +7,8 @@ "CVE-2009-2465" ], "details": "Mozilla Firefox before 3.0.12 and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via vectors involving double frame construction, related to (1) nsHTMLContentSink.cpp, (2) nsXMLContentSink.cpp, and (3) nsPresShell.cpp, and the nsSubDocumentFrame::Reflow function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-82j4-9f5j-mmfx/GHSA-82j4-9f5j-mmfx.json b/advisories/unreviewed/2022/05/GHSA-82j4-9f5j-mmfx/GHSA-82j4-9f5j-mmfx.json index f2a1c1d0021..ea62068b753 100644 --- a/advisories/unreviewed/2022/05/GHSA-82j4-9f5j-mmfx/GHSA-82j4-9f5j-mmfx.json +++ b/advisories/unreviewed/2022/05/GHSA-82j4-9f5j-mmfx/GHSA-82j4-9f5j-mmfx.json @@ -7,12 +7,8 @@ "CVE-2009-2002" ], "details": "Unspecified vulnerability in the WebLogic Portal component in BEA Product Suite 8.1.6, 9.2.3, 10.0.1, 10.2.1, and 10.3.1.0.0 allows remote attackers to affect integrity via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-82xg-93p7-mqqc/GHSA-82xg-93p7-mqqc.json b/advisories/unreviewed/2022/05/GHSA-82xg-93p7-mqqc/GHSA-82xg-93p7-mqqc.json index c5a79fd1509..70a7c41ef23 100644 --- a/advisories/unreviewed/2022/05/GHSA-82xg-93p7-mqqc/GHSA-82xg-93p7-mqqc.json +++ b/advisories/unreviewed/2022/05/GHSA-82xg-93p7-mqqc/GHSA-82xg-93p7-mqqc.json @@ -7,12 +7,8 @@ "CVE-2009-2205" ], "details": "Stack-based buffer overflow in the Java Web Start command launcher in Java for Mac OS X 10.5 before Update 5 allows attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-834r-6gg7-9fwg/GHSA-834r-6gg7-9fwg.json b/advisories/unreviewed/2022/05/GHSA-834r-6gg7-9fwg/GHSA-834r-6gg7-9fwg.json index 89bda6142fc..0208f6dd1f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-834r-6gg7-9fwg/GHSA-834r-6gg7-9fwg.json +++ b/advisories/unreviewed/2022/05/GHSA-834r-6gg7-9fwg/GHSA-834r-6gg7-9fwg.json @@ -7,12 +7,8 @@ "CVE-2009-2081" ], "details": "Directory traversal vulnerability in help.php in phpWebThings 1.5.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the module parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-84rg-x54x-9hr2/GHSA-84rg-x54x-9hr2.json b/advisories/unreviewed/2022/05/GHSA-84rg-x54x-9hr2/GHSA-84rg-x54x-9hr2.json index 9d7d0766335..2eaff384de8 100644 --- a/advisories/unreviewed/2022/05/GHSA-84rg-x54x-9hr2/GHSA-84rg-x54x-9hr2.json +++ b/advisories/unreviewed/2022/05/GHSA-84rg-x54x-9hr2/GHSA-84rg-x54x-9hr2.json @@ -7,12 +7,8 @@ "CVE-2009-2378" ], "details": "PHP remote file inclusion vulnerability in formmailer.admin.inc.php in Jax FormMailer 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the BASE_DIR[jax_formmailer] parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-875j-h634-3xpp/GHSA-875j-h634-3xpp.json b/advisories/unreviewed/2022/05/GHSA-875j-h634-3xpp/GHSA-875j-h634-3xpp.json index ee7484a3f47..a48c6ed8696 100644 --- a/advisories/unreviewed/2022/05/GHSA-875j-h634-3xpp/GHSA-875j-h634-3xpp.json +++ b/advisories/unreviewed/2022/05/GHSA-875j-h634-3xpp/GHSA-875j-h634-3xpp.json @@ -7,12 +7,8 @@ "CVE-2009-2057" ], "details": "Microsoft Internet Explorer before 8 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an \"SSL tampering\" attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8989-85q8-3j83/GHSA-8989-85q8-3j83.json b/advisories/unreviewed/2022/05/GHSA-8989-85q8-3j83/GHSA-8989-85q8-3j83.json index 6092b4ce576..4aaffdd17e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-8989-85q8-3j83/GHSA-8989-85q8-3j83.json +++ b/advisories/unreviewed/2022/05/GHSA-8989-85q8-3j83/GHSA-8989-85q8-3j83.json @@ -7,12 +7,8 @@ "CVE-2009-2234" ], "details": "Multiple SQL injection vulnerabilities in admin.php in VICIDIAL Call Center Suite 2.0.5-173 allow remote attackers to execute arbitrary SQL commands via the (1) Username parameter ($PHP_AUTH_USER) and (2) Password parameter ($PHP_AUTH_PW).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8cfm-h4m4-f6q9/GHSA-8cfm-h4m4-f6q9.json b/advisories/unreviewed/2022/05/GHSA-8cfm-h4m4-f6q9/GHSA-8cfm-h4m4-f6q9.json index cf285f3236b..3d8a8a76781 100644 --- a/advisories/unreviewed/2022/05/GHSA-8cfm-h4m4-f6q9/GHSA-8cfm-h4m4-f6q9.json +++ b/advisories/unreviewed/2022/05/GHSA-8cfm-h4m4-f6q9/GHSA-8cfm-h4m4-f6q9.json @@ -7,12 +7,8 @@ "CVE-2009-2562" ], "details": "Unspecified vulnerability in the AFS dissector in Wireshark 0.9.2 through 1.2.0 allows remote attackers to cause a denial of service (crash) via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8f2f-mjxj-j85g/GHSA-8f2f-mjxj-j85g.json b/advisories/unreviewed/2022/05/GHSA-8f2f-mjxj-j85g/GHSA-8f2f-mjxj-j85g.json index 55ea7ffa933..8da6185d396 100644 --- a/advisories/unreviewed/2022/05/GHSA-8f2f-mjxj-j85g/GHSA-8f2f-mjxj-j85g.json +++ b/advisories/unreviewed/2022/05/GHSA-8f2f-mjxj-j85g/GHSA-8f2f-mjxj-j85g.json @@ -7,12 +7,8 @@ "CVE-2009-2198" ], "details": "Apple GarageBand before 5.1 reconfigures Safari to accept all cookies regardless of domain name, which makes it easier for remote web servers to track users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8f45-r54p-39mm/GHSA-8f45-r54p-39mm.json b/advisories/unreviewed/2022/05/GHSA-8f45-r54p-39mm/GHSA-8f45-r54p-39mm.json index 3e93092b50f..70dac706733 100644 --- a/advisories/unreviewed/2022/05/GHSA-8f45-r54p-39mm/GHSA-8f45-r54p-39mm.json +++ b/advisories/unreviewed/2022/05/GHSA-8f45-r54p-39mm/GHSA-8f45-r54p-39mm.json @@ -7,12 +7,8 @@ "CVE-2009-2240" ], "details": "Cross-site scripting (XSS) vulnerability in AD2000 free-sw leger (aka Web Conference Room Free) 1.6.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8fwx-gvc3-2xgx/GHSA-8fwx-gvc3-2xgx.json b/advisories/unreviewed/2022/05/GHSA-8fwx-gvc3-2xgx/GHSA-8fwx-gvc3-2xgx.json index c43f512510c..a52dca19301 100644 --- a/advisories/unreviewed/2022/05/GHSA-8fwx-gvc3-2xgx/GHSA-8fwx-gvc3-2xgx.json +++ b/advisories/unreviewed/2022/05/GHSA-8fwx-gvc3-2xgx/GHSA-8fwx-gvc3-2xgx.json @@ -7,12 +7,8 @@ "CVE-2009-2448" ], "details": "Cross-site scripting (XSS) vulnerability in ogp_show.php in Online Guestbook Pro 5.1 allows remote attackers to inject arbitrary web script or HTML via the search_choice parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8g9h-pmc4-wcr4/GHSA-8g9h-pmc4-wcr4.json b/advisories/unreviewed/2022/05/GHSA-8g9h-pmc4-wcr4/GHSA-8g9h-pmc4-wcr4.json index 9420123fb3d..8cbe33422c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-8g9h-pmc4-wcr4/GHSA-8g9h-pmc4-wcr4.json +++ b/advisories/unreviewed/2022/05/GHSA-8g9h-pmc4-wcr4/GHSA-8g9h-pmc4-wcr4.json @@ -7,12 +7,8 @@ "CVE-2009-2541" ], "details": "The web browser on the Sony PLAYSTATION 3 (PS3) allows remote attackers to cause a denial of service (memory consumption and console hang) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8gvq-jr59-xhjj/GHSA-8gvq-jr59-xhjj.json b/advisories/unreviewed/2022/05/GHSA-8gvq-jr59-xhjj/GHSA-8gvq-jr59-xhjj.json index 69cc4bab94a..71ed574a4f7 100644 --- a/advisories/unreviewed/2022/05/GHSA-8gvq-jr59-xhjj/GHSA-8gvq-jr59-xhjj.json +++ b/advisories/unreviewed/2022/05/GHSA-8gvq-jr59-xhjj/GHSA-8gvq-jr59-xhjj.json @@ -7,12 +7,8 @@ "CVE-2009-1982" ], "details": "Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2 and 12.0.6 allows remote attackers to affect integrity via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8j74-6x75-vf94/GHSA-8j74-6x75-vf94.json b/advisories/unreviewed/2022/05/GHSA-8j74-6x75-vf94/GHSA-8j74-6x75-vf94.json index 67f6fd9fe77..846023de6c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-8j74-6x75-vf94/GHSA-8j74-6x75-vf94.json +++ b/advisories/unreviewed/2022/05/GHSA-8j74-6x75-vf94/GHSA-8j74-6x75-vf94.json @@ -7,12 +7,8 @@ "CVE-2009-2053" ], "details": "Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2a)su1, and 7.1 before 7.1(2) allows remote attackers to cause a denial of service (file-descriptor exhaustion and SCCP outage) via a flood of TCP packets, aka Bug ID CSCsx32236.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8jfm-rmxf-hfp3/GHSA-8jfm-rmxf-hfp3.json b/advisories/unreviewed/2022/05/GHSA-8jfm-rmxf-hfp3/GHSA-8jfm-rmxf-hfp3.json index 4f7d2f68f26..c7092f0b97e 100644 --- a/advisories/unreviewed/2022/05/GHSA-8jfm-rmxf-hfp3/GHSA-8jfm-rmxf-hfp3.json +++ b/advisories/unreviewed/2022/05/GHSA-8jfm-rmxf-hfp3/GHSA-8jfm-rmxf-hfp3.json @@ -7,12 +7,8 @@ "CVE-2009-2352" ], "details": "Google Chrome 1.0.154.48 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header, a related issue to CVE-2009-1312. NOTE: it was later reported that 2.0.172.28, 2.0.172.37, and 3.0.193.2 Beta are also affected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8p44-473g-jww5/GHSA-8p44-473g-jww5.json b/advisories/unreviewed/2022/05/GHSA-8p44-473g-jww5/GHSA-8p44-473g-jww5.json index d3856d4c5e7..238ab2243a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-8p44-473g-jww5/GHSA-8p44-473g-jww5.json +++ b/advisories/unreviewed/2022/05/GHSA-8p44-473g-jww5/GHSA-8p44-473g-jww5.json @@ -7,12 +7,8 @@ "CVE-2009-2105" ], "details": "SQL injection vulnerability in the References database (t3references) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8p4m-57hv-c47q/GHSA-8p4m-57hv-c47q.json b/advisories/unreviewed/2022/05/GHSA-8p4m-57hv-c47q/GHSA-8p4m-57hv-c47q.json index 5cff368a887..391f8f4fc7c 100644 --- a/advisories/unreviewed/2022/05/GHSA-8p4m-57hv-c47q/GHSA-8p4m-57hv-c47q.json +++ b/advisories/unreviewed/2022/05/GHSA-8p4m-57hv-c47q/GHSA-8p4m-57hv-c47q.json @@ -7,12 +7,8 @@ "CVE-2009-1917" ], "details": "Microsoft Internet Explorer 6 SP1; Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2; and Internet Explorer 7 and 8 for Windows XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 do not properly handle attempts to access deleted objects in memory, which allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption, aka \"Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8pfq-mg4c-j74x/GHSA-8pfq-mg4c-j74x.json b/advisories/unreviewed/2022/05/GHSA-8pfq-mg4c-j74x/GHSA-8pfq-mg4c-j74x.json index 45ff4ef42d4..b05a4fd9026 100644 --- a/advisories/unreviewed/2022/05/GHSA-8pfq-mg4c-j74x/GHSA-8pfq-mg4c-j74x.json +++ b/advisories/unreviewed/2022/05/GHSA-8pfq-mg4c-j74x/GHSA-8pfq-mg4c-j74x.json @@ -7,12 +7,8 @@ "CVE-2009-1987" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools - Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.49.21 allows remote attackers to affect integrity via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8v6f-m3jw-whfq/GHSA-8v6f-m3jw-whfq.json b/advisories/unreviewed/2022/05/GHSA-8v6f-m3jw-whfq/GHSA-8v6f-m3jw-whfq.json index 0c142f99eaa..75998873308 100644 --- a/advisories/unreviewed/2022/05/GHSA-8v6f-m3jw-whfq/GHSA-8v6f-m3jw-whfq.json +++ b/advisories/unreviewed/2022/05/GHSA-8v6f-m3jw-whfq/GHSA-8v6f-m3jw-whfq.json @@ -7,12 +7,8 @@ "CVE-2009-2083" ], "details": "Cross-site scripting (XSS) vulnerability in the term data detail page in Taxonomy manager 5.x before 5.x-1.2, a module for Drupal, allows remote authenticated users, with administer taxonomy privileges or the ability to use free tagging to add taxonomy terms, to inject arbitrary web script or HTML via \"Parent and related terms.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8v8g-jpqq-2cx6/GHSA-8v8g-jpqq-2cx6.json b/advisories/unreviewed/2022/05/GHSA-8v8g-jpqq-2cx6/GHSA-8v8g-jpqq-2cx6.json index 2e37286fd02..fb0177ed465 100644 --- a/advisories/unreviewed/2022/05/GHSA-8v8g-jpqq-2cx6/GHSA-8v8g-jpqq-2cx6.json +++ b/advisories/unreviewed/2022/05/GHSA-8v8g-jpqq-2cx6/GHSA-8v8g-jpqq-2cx6.json @@ -7,12 +7,8 @@ "CVE-2009-2211" ], "details": "Cross-site scripting (XSS) vulnerability in the CQWeb server in IBM Rational ClearQuest 7.0.0 before 7.0.0.6 and 7.0.1 before 7.0.1.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8x3h-773x-wqv3/GHSA-8x3h-773x-wqv3.json b/advisories/unreviewed/2022/05/GHSA-8x3h-773x-wqv3/GHSA-8x3h-773x-wqv3.json index e103ccaf04c..a757a708ce6 100644 --- a/advisories/unreviewed/2022/05/GHSA-8x3h-773x-wqv3/GHSA-8x3h-773x-wqv3.json +++ b/advisories/unreviewed/2022/05/GHSA-8x3h-773x-wqv3/GHSA-8x3h-773x-wqv3.json @@ -7,12 +7,8 @@ "CVE-2009-2193" ], "details": "Buffer overflow in the kernel in Apple Mac OS X 10.5 before 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (system crash) via a crafted AppleTalk response packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8x6x-39qq-q9mc/GHSA-8x6x-39qq-q9mc.json b/advisories/unreviewed/2022/05/GHSA-8x6x-39qq-q9mc/GHSA-8x6x-39qq-q9mc.json index d9c2f38b339..c3eeef23219 100644 --- a/advisories/unreviewed/2022/05/GHSA-8x6x-39qq-q9mc/GHSA-8x6x-39qq-q9mc.json +++ b/advisories/unreviewed/2022/05/GHSA-8x6x-39qq-q9mc/GHSA-8x6x-39qq-q9mc.json @@ -7,12 +7,8 @@ "CVE-2009-2060" ], "details": "src/net/http/http_transaction_winhttp.cc in Google Chrome before 1.0.154.53 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an \"SSL tampering\" attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9354-f967-7fw8/GHSA-9354-f967-7fw8.json b/advisories/unreviewed/2022/05/GHSA-9354-f967-7fw8/GHSA-9354-f967-7fw8.json index 9021150eac1..a9e6432d8b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-9354-f967-7fw8/GHSA-9354-f967-7fw8.json +++ b/advisories/unreviewed/2022/05/GHSA-9354-f967-7fw8/GHSA-9354-f967-7fw8.json @@ -7,12 +7,8 @@ "CVE-2009-2431" ], "details": "WordPress 2.7.1 places the username of a post's author in an HTML comment, which allows remote attackers to obtain sensitive information by reading the HTML source.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-93v5-x8jv-x8pv/GHSA-93v5-x8jv-x8pv.json b/advisories/unreviewed/2022/05/GHSA-93v5-x8jv-x8pv/GHSA-93v5-x8jv-x8pv.json index 82121950445..4ac4089ab10 100644 --- a/advisories/unreviewed/2022/05/GHSA-93v5-x8jv-x8pv/GHSA-93v5-x8jv-x8pv.json +++ b/advisories/unreviewed/2022/05/GHSA-93v5-x8jv-x8pv/GHSA-93v5-x8jv-x8pv.json @@ -7,12 +7,8 @@ "CVE-2009-1989" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 33, and 9.0 Bundle 24 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-94jm-xm3g-97hf/GHSA-94jm-xm3g-97hf.json b/advisories/unreviewed/2022/05/GHSA-94jm-xm3g-97hf/GHSA-94jm-xm3g-97hf.json index 48680d0306b..5975103fad4 100644 --- a/advisories/unreviewed/2022/05/GHSA-94jm-xm3g-97hf/GHSA-94jm-xm3g-97hf.json +++ b/advisories/unreviewed/2022/05/GHSA-94jm-xm3g-97hf/GHSA-94jm-xm3g-97hf.json @@ -7,12 +7,8 @@ "CVE-2009-1999" ], "details": "Unspecified vulnerability in the Business Intelligence Enterprise Edition component in unspecified Oracle Application Server versions allows remote attackers to affect integrity via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-98mx-whjc-jqv8/GHSA-98mx-whjc-jqv8.json b/advisories/unreviewed/2022/05/GHSA-98mx-whjc-jqv8/GHSA-98mx-whjc-jqv8.json index ed9b68643fe..63e1575ba42 100644 --- a/advisories/unreviewed/2022/05/GHSA-98mx-whjc-jqv8/GHSA-98mx-whjc-jqv8.json +++ b/advisories/unreviewed/2022/05/GHSA-98mx-whjc-jqv8/GHSA-98mx-whjc-jqv8.json @@ -7,12 +7,8 @@ "CVE-2009-2377" ], "details": "Buffer overflow in the Avax Vector ActiveX control in avPreview.ocx in AVAX-software Avax Vector ActiveX 1.3 allows remote attackers to cause a denial of service (application crash) via a long PrinterName property.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-99jc-c7x2-j288/GHSA-99jc-c7x2-j288.json b/advisories/unreviewed/2022/05/GHSA-99jc-c7x2-j288/GHSA-99jc-c7x2-j288.json index f5d3e61607e..16db65680a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-99jc-c7x2-j288/GHSA-99jc-c7x2-j288.json +++ b/advisories/unreviewed/2022/05/GHSA-99jc-c7x2-j288/GHSA-99jc-c7x2-j288.json @@ -7,12 +7,8 @@ "CVE-2009-2297" ], "details": "Unspecified vulnerability in the udp subsystem in the kernel in Sun Solaris 10, and OpenSolaris snv_90 through snv_108, when Solaris Trusted Extensions is enabled, allows remote attackers to cause a denial of service (panic) via unspecified vectors involving the crgetlabel function, related to a \"TX panic.\" NOTE: this issue exists because of a regression in earlier kernel patches.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9cm7-33j4-mq73/GHSA-9cm7-33j4-mq73.json b/advisories/unreviewed/2022/05/GHSA-9cm7-33j4-mq73/GHSA-9cm7-33j4-mq73.json index f34c744812d..36bdfa77a84 100644 --- a/advisories/unreviewed/2022/05/GHSA-9cm7-33j4-mq73/GHSA-9cm7-33j4-mq73.json +++ b/advisories/unreviewed/2022/05/GHSA-9cm7-33j4-mq73/GHSA-9cm7-33j4-mq73.json @@ -7,12 +7,8 @@ "CVE-2009-2150" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in Campus Virtual-LMS allow (1) remote attackers to hijack the authentication of arbitrary users for requests that terminate a session via login/logout.php, and might allow remote attackers to hijack the authentication of certain users via a (2) ADD or (3) DELETE action to enrolments/step2.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9f4m-hww2-fg52/GHSA-9f4m-hww2-fg52.json b/advisories/unreviewed/2022/05/GHSA-9f4m-hww2-fg52/GHSA-9f4m-hww2-fg52.json index 84587a663d8..cd828843e80 100644 --- a/advisories/unreviewed/2022/05/GHSA-9f4m-hww2-fg52/GHSA-9f4m-hww2-fg52.json +++ b/advisories/unreviewed/2022/05/GHSA-9f4m-hww2-fg52/GHSA-9f4m-hww2-fg52.json @@ -7,12 +7,8 @@ "CVE-2009-2429" ], "details": "SmartFilter Web Gateway Security 4.2.1.00 stores user credentials in cleartext in admin_backup.xml files and uses insecure permissions for these files, which allows local users to gain privileges. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9f5q-hvhm-5v62/GHSA-9f5q-hvhm-5v62.json b/advisories/unreviewed/2022/05/GHSA-9f5q-hvhm-5v62/GHSA-9f5q-hvhm-5v62.json index ba898035008..9de1aaee07a 100644 --- a/advisories/unreviewed/2022/05/GHSA-9f5q-hvhm-5v62/GHSA-9f5q-hvhm-5v62.json +++ b/advisories/unreviewed/2022/05/GHSA-9f5q-hvhm-5v62/GHSA-9f5q-hvhm-5v62.json @@ -7,12 +7,8 @@ "CVE-2009-2292" ], "details": "Cross-site scripting (XSS) vulnerability in Appleple a-News 2.32 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9f5r-6wg4-cf3w/GHSA-9f5r-6wg4-cf3w.json b/advisories/unreviewed/2022/05/GHSA-9f5r-6wg4-cf3w/GHSA-9f5r-6wg4-cf3w.json index 23f9fe45c67..b2bb421086c 100644 --- a/advisories/unreviewed/2022/05/GHSA-9f5r-6wg4-cf3w/GHSA-9f5r-6wg4-cf3w.json +++ b/advisories/unreviewed/2022/05/GHSA-9f5r-6wg4-cf3w/GHSA-9f5r-6wg4-cf3w.json @@ -7,12 +7,8 @@ "CVE-2009-2437" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Rentventory 1.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) username (aka Login) and (2) password parameters in a login action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9frq-28g7-h578/GHSA-9frq-28g7-h578.json b/advisories/unreviewed/2022/05/GHSA-9frq-28g7-h578/GHSA-9frq-28g7-h578.json index b390f2aac00..b3c0db98db3 100644 --- a/advisories/unreviewed/2022/05/GHSA-9frq-28g7-h578/GHSA-9frq-28g7-h578.json +++ b/advisories/unreviewed/2022/05/GHSA-9frq-28g7-h578/GHSA-9frq-28g7-h578.json @@ -7,12 +7,8 @@ "CVE-2009-2565" ], "details": "Cross-site scripting (XSS) vulnerability in Perl CGI's By Mrs. Shiromuku shiromuku(fs6)DIARY 2.40 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9g49-v8fv-gvm8/GHSA-9g49-v8fv-gvm8.json b/advisories/unreviewed/2022/05/GHSA-9g49-v8fv-gvm8/GHSA-9g49-v8fv-gvm8.json index 359e945b2d9..e24010097ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-9g49-v8fv-gvm8/GHSA-9g49-v8fv-gvm8.json +++ b/advisories/unreviewed/2022/05/GHSA-9g49-v8fv-gvm8/GHSA-9g49-v8fv-gvm8.json @@ -7,12 +7,8 @@ "CVE-2009-2185" ], "details": "The ASN.1 parser (pluto/asn1.c, libstrongswan/asn1/asn1.c, libstrongswan/asn1/asn1_parser.c) in (a) strongSwan 2.8 before 2.8.10, 4.2 before 4.2.16, and 4.3 before 4.3.2; and (b) openSwan 2.6 before 2.6.22 and 2.4 before 2.4.15 allows remote attackers to cause a denial of service (pluto IKE daemon crash) via an X.509 certificate with (1) crafted Relative Distinguished Names (RDNs), (2) a crafted UTCTIME string, or (3) a crafted GENERALIZEDTIME string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9h5j-rqv3-jwc2/GHSA-9h5j-rqv3-jwc2.json b/advisories/unreviewed/2022/05/GHSA-9h5j-rqv3-jwc2/GHSA-9h5j-rqv3-jwc2.json index 595105cac08..6b7e4643e3e 100644 --- a/advisories/unreviewed/2022/05/GHSA-9h5j-rqv3-jwc2/GHSA-9h5j-rqv3-jwc2.json +++ b/advisories/unreviewed/2022/05/GHSA-9h5j-rqv3-jwc2/GHSA-9h5j-rqv3-jwc2.json @@ -7,12 +7,8 @@ "CVE-2009-2235" ], "details": "SQL injection vulnerability in page.php in Your Articles Directory allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9m5v-gg35-rhxj/GHSA-9m5v-gg35-rhxj.json b/advisories/unreviewed/2022/05/GHSA-9m5v-gg35-rhxj/GHSA-9m5v-gg35-rhxj.json index 47e64c62e6c..cc13748045e 100644 --- a/advisories/unreviewed/2022/05/GHSA-9m5v-gg35-rhxj/GHSA-9m5v-gg35-rhxj.json +++ b/advisories/unreviewed/2022/05/GHSA-9m5v-gg35-rhxj/GHSA-9m5v-gg35-rhxj.json @@ -7,12 +7,8 @@ "CVE-2009-2355" ], "details": "The forum module in NullLogic Groupware 1.2.7 allows remote authenticated users to cause a denial of service (application crash) by specifying (1) an empty string or (2) a non-numeric string when selecting a forum, related to the fmessagelist function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9m8c-73x8-cj68/GHSA-9m8c-73x8-cj68.json b/advisories/unreviewed/2022/05/GHSA-9m8c-73x8-cj68/GHSA-9m8c-73x8-cj68.json index 35e5b3e1bc2..86402e7d816 100644 --- a/advisories/unreviewed/2022/05/GHSA-9m8c-73x8-cj68/GHSA-9m8c-73x8-cj68.json +++ b/advisories/unreviewed/2022/05/GHSA-9m8c-73x8-cj68/GHSA-9m8c-73x8-cj68.json @@ -7,12 +7,8 @@ "CVE-2009-2121" ], "details": "Buffer overflow in the browser kernel in Google Chrome before 2.0.172.33 allows remote HTTP servers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted response.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9phf-78xf-gm33/GHSA-9phf-78xf-gm33.json b/advisories/unreviewed/2022/05/GHSA-9phf-78xf-gm33/GHSA-9phf-78xf-gm33.json index faa45e7f198..948c8db309f 100644 --- a/advisories/unreviewed/2022/05/GHSA-9phf-78xf-gm33/GHSA-9phf-78xf-gm33.json +++ b/advisories/unreviewed/2022/05/GHSA-9phf-78xf-gm33/GHSA-9phf-78xf-gm33.json @@ -7,12 +7,8 @@ "CVE-2009-2003" ], "details": "Ascad Networks Password Protector SD 1.3.1 allows remote attackers to bypass authentication and gain administrative access by setting the (1) c7portal and (2) cookname cookies to \"admin.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9rqx-mvpj-vrhc/GHSA-9rqx-mvpj-vrhc.json b/advisories/unreviewed/2022/05/GHSA-9rqx-mvpj-vrhc/GHSA-9rqx-mvpj-vrhc.json index 53ae31a67d9..4db45f67cf5 100644 --- a/advisories/unreviewed/2022/05/GHSA-9rqx-mvpj-vrhc/GHSA-9rqx-mvpj-vrhc.json +++ b/advisories/unreviewed/2022/05/GHSA-9rqx-mvpj-vrhc/GHSA-9rqx-mvpj-vrhc.json @@ -7,12 +7,8 @@ "CVE-2009-2001" ], "details": "Unspecified vulnerability in the PL/SQL component in Oracle Database 10.2.0.4 and 11.1.0.7 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9v88-wfr2-2gxh/GHSA-9v88-wfr2-2gxh.json b/advisories/unreviewed/2022/05/GHSA-9v88-wfr2-2gxh/GHSA-9v88-wfr2-2gxh.json index 2b8fd3864a6..b48df3b3f15 100644 --- a/advisories/unreviewed/2022/05/GHSA-9v88-wfr2-2gxh/GHSA-9v88-wfr2-2gxh.json +++ b/advisories/unreviewed/2022/05/GHSA-9v88-wfr2-2gxh/GHSA-9v88-wfr2-2gxh.json @@ -7,12 +7,8 @@ "CVE-2009-2061" ], "details": "Mozilla Firefox before 3.0.10 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9vc6-7j3x-7x4v/GHSA-9vc6-7j3x-7x4v.json b/advisories/unreviewed/2022/05/GHSA-9vc6-7j3x-7x4v/GHSA-9vc6-7j3x-7x4v.json index 2ab26736ea7..1f33fa05d2c 100644 --- a/advisories/unreviewed/2022/05/GHSA-9vc6-7j3x-7x4v/GHSA-9vc6-7j3x-7x4v.json +++ b/advisories/unreviewed/2022/05/GHSA-9vc6-7j3x-7x4v/GHSA-9vc6-7j3x-7x4v.json @@ -7,12 +7,8 @@ "CVE-2009-2473" ], "details": "neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9vpx-h84q-68h2/GHSA-9vpx-h84q-68h2.json b/advisories/unreviewed/2022/05/GHSA-9vpx-h84q-68h2/GHSA-9vpx-h84q-68h2.json index 42903c3e4e1..2f9b8bf3da6 100644 --- a/advisories/unreviewed/2022/05/GHSA-9vpx-h84q-68h2/GHSA-9vpx-h84q-68h2.json +++ b/advisories/unreviewed/2022/05/GHSA-9vpx-h84q-68h2/GHSA-9vpx-h84q-68h2.json @@ -7,12 +7,8 @@ "CVE-2009-1943" ], "details": "Stack-based buffer overflow in the IKE service (ireIke.exe) in SafeNet SoftRemote before 10.8.6 allows remote attackers to execute arbitrary code via a long request to UDP port 62514.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9w79-fpqx-hcfm/GHSA-9w79-fpqx-hcfm.json b/advisories/unreviewed/2022/05/GHSA-9w79-fpqx-hcfm/GHSA-9w79-fpqx-hcfm.json index 1a24906fec6..69888592fce 100644 --- a/advisories/unreviewed/2022/05/GHSA-9w79-fpqx-hcfm/GHSA-9w79-fpqx-hcfm.json +++ b/advisories/unreviewed/2022/05/GHSA-9w79-fpqx-hcfm/GHSA-9w79-fpqx-hcfm.json @@ -7,12 +7,8 @@ "CVE-2009-2404" ], "details": "Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, SeaMonkey, Evolution, Pidgin, and AOL Instant Messenger (AIM), allows remote SSL servers to cause a denial of service (application crash) or possibly execute arbitrary code via a long domain name in the subject's Common Name (CN) field of an X.509 certificate, related to the cert_TestHostName function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9x38-fqhc-vfhf/GHSA-9x38-fqhc-vfhf.json b/advisories/unreviewed/2022/05/GHSA-9x38-fqhc-vfhf/GHSA-9x38-fqhc-vfhf.json index 287d37c5c61..d85eb340663 100644 --- a/advisories/unreviewed/2022/05/GHSA-9x38-fqhc-vfhf/GHSA-9x38-fqhc-vfhf.json +++ b/advisories/unreviewed/2022/05/GHSA-9x38-fqhc-vfhf/GHSA-9x38-fqhc-vfhf.json @@ -7,12 +7,8 @@ "CVE-2009-2564" ], "details": "NOS Microsystems getPlus Download Manager, as used in Adobe Reader 1.6.2.36 and possibly other versions, Corel getPlus Download Manager before 1.5.0.48, and possibly other products, installs NOS\\bin\\getPlus_HelperSvc.exe with insecure permissions (Everyone:Full Control), which allows local users to gain SYSTEM privileges by replacing getPlus_HelperSvc.exe with a Trojan horse program, as demonstrated by use of getPlus Download Manager within Adobe Reader. NOTE: within Adobe Reader, the scope of this issue is limited because the program is deleted and the associated service is not automatically launched after a successful installation and reboot.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9xvx-v7hr-p3gr/GHSA-9xvx-v7hr-p3gr.json b/advisories/unreviewed/2022/05/GHSA-9xvx-v7hr-p3gr/GHSA-9xvx-v7hr-p3gr.json index 0a869baeec0..c6c6f25a021 100644 --- a/advisories/unreviewed/2022/05/GHSA-9xvx-v7hr-p3gr/GHSA-9xvx-v7hr-p3gr.json +++ b/advisories/unreviewed/2022/05/GHSA-9xvx-v7hr-p3gr/GHSA-9xvx-v7hr-p3gr.json @@ -7,12 +7,8 @@ "CVE-2009-2436" ], "details": "SQL injection vulnerability in page.php in Online Dating Software MyPHPDating 1.0 allows remote attackers to execute arbitrary SQL commands via the page_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c2q2-8p87-4x7h/GHSA-c2q2-8p87-4x7h.json b/advisories/unreviewed/2022/05/GHSA-c2q2-8p87-4x7h/GHSA-c2q2-8p87-4x7h.json index 02e325fd144..3ae31938bba 100644 --- a/advisories/unreviewed/2022/05/GHSA-c2q2-8p87-4x7h/GHSA-c2q2-8p87-4x7h.json +++ b/advisories/unreviewed/2022/05/GHSA-c2q2-8p87-4x7h/GHSA-c2q2-8p87-4x7h.json @@ -7,12 +7,8 @@ "CVE-2009-1995" ], "details": "Unspecified vulnerability in the Advanced Queuing component in Oracle Database 10.2.0.4 and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMS_AQ_INV.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c36p-gqxq-hcgq/GHSA-c36p-gqxq-hcgq.json b/advisories/unreviewed/2022/05/GHSA-c36p-gqxq-hcgq/GHSA-c36p-gqxq-hcgq.json index b145d311403..8573e66586a 100644 --- a/advisories/unreviewed/2022/05/GHSA-c36p-gqxq-hcgq/GHSA-c36p-gqxq-hcgq.json +++ b/advisories/unreviewed/2022/05/GHSA-c36p-gqxq-hcgq/GHSA-c36p-gqxq-hcgq.json @@ -7,12 +7,8 @@ "CVE-2009-1935" ], "details": "Integer overflow in the pipe_build_write_buffer function (sys/kern/sys_pipe.c) in the direct write optimization feature in the pipe implementation in FreeBSD 7.1 through 7.2 and 6.3 through 6.4 allows local users to bypass virtual-to-physical address lookups and read sensitive information in memory pages via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c3mf-mvv5-325h/GHSA-c3mf-mvv5-325h.json b/advisories/unreviewed/2022/05/GHSA-c3mf-mvv5-325h/GHSA-c3mf-mvv5-325h.json index 4adfe45d1f6..9f06294b921 100644 --- a/advisories/unreviewed/2022/05/GHSA-c3mf-mvv5-325h/GHSA-c3mf-mvv5-325h.json +++ b/advisories/unreviewed/2022/05/GHSA-c3mf-mvv5-325h/GHSA-c3mf-mvv5-325h.json @@ -7,12 +7,8 @@ "CVE-2009-2324" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in FCKeditor before 2.6.4.1 allow remote attackers to inject arbitrary web script or HTML via components in the samples (aka _samples) directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c42p-m5wc-8hf3/GHSA-c42p-m5wc-8hf3.json b/advisories/unreviewed/2022/05/GHSA-c42p-m5wc-8hf3/GHSA-c42p-m5wc-8hf3.json index 60a80c47850..2a5d515b5f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-c42p-m5wc-8hf3/GHSA-c42p-m5wc-8hf3.json +++ b/advisories/unreviewed/2022/05/GHSA-c42p-m5wc-8hf3/GHSA-c42p-m5wc-8hf3.json @@ -7,12 +7,8 @@ "CVE-2009-2542" ], "details": "Netscape 6 and 8 allows remote attackers to cause a denial of service (memory consumption) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c4cq-mvr5-74hm/GHSA-c4cq-mvr5-74hm.json b/advisories/unreviewed/2022/05/GHSA-c4cq-mvr5-74hm/GHSA-c4cq-mvr5-74hm.json index 8a41e531ad3..81c1643fcb5 100644 --- a/advisories/unreviewed/2022/05/GHSA-c4cq-mvr5-74hm/GHSA-c4cq-mvr5-74hm.json +++ b/advisories/unreviewed/2022/05/GHSA-c4cq-mvr5-74hm/GHSA-c4cq-mvr5-74hm.json @@ -7,12 +7,8 @@ "CVE-2009-1973" ], "details": "Unspecified vulnerability in the Virtual Private Database component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect confidentiality and integrity, related to VPD policies.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c525-q4hc-xc2v/GHSA-c525-q4hc-xc2v.json b/advisories/unreviewed/2022/05/GHSA-c525-q4hc-xc2v/GHSA-c525-q4hc-xc2v.json index 8a79373f447..42d91138b77 100644 --- a/advisories/unreviewed/2022/05/GHSA-c525-q4hc-xc2v/GHSA-c525-q4hc-xc2v.json +++ b/advisories/unreviewed/2022/05/GHSA-c525-q4hc-xc2v/GHSA-c525-q4hc-xc2v.json @@ -7,12 +7,8 @@ "CVE-2009-2304" ], "details": "index.php in Aardvark Topsites PHP 5.2.0 and earlier allows remote attackers to obtain sensitive information via a nonexistent account name in the u parameter in a rate action, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c74q-xg62-9cwm/GHSA-c74q-xg62-9cwm.json b/advisories/unreviewed/2022/05/GHSA-c74q-xg62-9cwm/GHSA-c74q-xg62-9cwm.json index 78c6579d7a5..c3ae2d37933 100644 --- a/advisories/unreviewed/2022/05/GHSA-c74q-xg62-9cwm/GHSA-c74q-xg62-9cwm.json +++ b/advisories/unreviewed/2022/05/GHSA-c74q-xg62-9cwm/GHSA-c74q-xg62-9cwm.json @@ -7,12 +7,8 @@ "CVE-2009-2417" ], "details": "lib/ssluse.c in cURL and libcurl 7.4 through 7.19.5, when OpenSSL is used, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -132,9 +128,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c794-94g7-5hfq/GHSA-c794-94g7-5hfq.json b/advisories/unreviewed/2022/05/GHSA-c794-94g7-5hfq/GHSA-c794-94g7-5hfq.json index 19ef8e1c78f..c6382d319a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-c794-94g7-5hfq/GHSA-c794-94g7-5hfq.json +++ b/advisories/unreviewed/2022/05/GHSA-c794-94g7-5hfq/GHSA-c794-94g7-5hfq.json @@ -7,12 +7,8 @@ "CVE-2009-2444" ], "details": "Directory traversal vulnerability in maillinglist/setup/step1.php.inc in ADbNewsSender before 1.5.6, and 2.0 before RC2, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the path_to_lang parameter to setup/index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c7v3-hxxm-v6mr/GHSA-c7v3-hxxm-v6mr.json b/advisories/unreviewed/2022/05/GHSA-c7v3-hxxm-v6mr/GHSA-c7v3-hxxm-v6mr.json index af93f2258b2..a58a3248c15 100644 --- a/advisories/unreviewed/2022/05/GHSA-c7v3-hxxm-v6mr/GHSA-c7v3-hxxm-v6mr.json +++ b/advisories/unreviewed/2022/05/GHSA-c7v3-hxxm-v6mr/GHSA-c7v3-hxxm-v6mr.json @@ -7,12 +7,8 @@ "CVE-2009-2120" ], "details": "Multiple SQL injection vulnerabilities in TekBase All-in-One 3.1 allow remote authenticated users to execute arbitrary SQL commands via the (1) ids parameter to admin.php, the (2) y parameter to members.php, and other unspecified vectors. NOTE: vector 1 requires administrative access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c825-8v8j-34hc/GHSA-c825-8v8j-34hc.json b/advisories/unreviewed/2022/05/GHSA-c825-8v8j-34hc/GHSA-c825-8v8j-34hc.json index b00950a09f2..ea00fe3eef4 100644 --- a/advisories/unreviewed/2022/05/GHSA-c825-8v8j-34hc/GHSA-c825-8v8j-34hc.json +++ b/advisories/unreviewed/2022/05/GHSA-c825-8v8j-34hc/GHSA-c825-8v8j-34hc.json @@ -7,12 +7,8 @@ "CVE-2009-2092" ], "details": "IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.5 does not properly read the portletServingEnabled parameter in ibm-portlet-ext.xmi, which allows remote attackers to bypass intended access restrictions via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c99x-27j7-3pfr/GHSA-c99x-27j7-3pfr.json b/advisories/unreviewed/2022/05/GHSA-c99x-27j7-3pfr/GHSA-c99x-27j7-3pfr.json index be24eec60fd..d31e667f404 100644 --- a/advisories/unreviewed/2022/05/GHSA-c99x-27j7-3pfr/GHSA-c99x-27j7-3pfr.json +++ b/advisories/unreviewed/2022/05/GHSA-c99x-27j7-3pfr/GHSA-c99x-27j7-3pfr.json @@ -7,12 +7,8 @@ "CVE-2009-2145" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in transLucid 1.75 allow remote attackers to inject arbitrary web script or HTML via the (a) NodeID and (b) action parameters to the default URI, and the (c) NodeID parameter to the default URI for the admin section; and allow remote authenticated users to inject arbitrary web script or HTML via the (d) Title (aka page name) and (e) Url fields in a (1) new or (2) modified page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ccp7-5ffx-937x/GHSA-ccp7-5ffx-937x.json b/advisories/unreviewed/2022/05/GHSA-ccp7-5ffx-937x/GHSA-ccp7-5ffx-937x.json index 58ddc776f6d..4bfa7fe1c57 100644 --- a/advisories/unreviewed/2022/05/GHSA-ccp7-5ffx-937x/GHSA-ccp7-5ffx-937x.json +++ b/advisories/unreviewed/2022/05/GHSA-ccp7-5ffx-937x/GHSA-ccp7-5ffx-937x.json @@ -7,12 +7,8 @@ "CVE-2009-2222" ], "details": "Directory traversal vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in unspecified vectors, probably related to mail.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cf48-vrcc-8rqr/GHSA-cf48-vrcc-8rqr.json b/advisories/unreviewed/2022/05/GHSA-cf48-vrcc-8rqr/GHSA-cf48-vrcc-8rqr.json index f8a47d864ed..9ac0f3401d8 100644 --- a/advisories/unreviewed/2022/05/GHSA-cf48-vrcc-8rqr/GHSA-cf48-vrcc-8rqr.json +++ b/advisories/unreviewed/2022/05/GHSA-cf48-vrcc-8rqr/GHSA-cf48-vrcc-8rqr.json @@ -7,12 +7,8 @@ "CVE-2009-2101" ], "details": "Directory traversal vulnerability in archive.php in TorrentVolve 1.4, when register_globals is enabled, allows remote attackers to delete arbitrary files via a .. (dot dot) in the deleteTorrent parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cfqj-m3w2-2vv9/GHSA-cfqj-m3w2-2vv9.json b/advisories/unreviewed/2022/05/GHSA-cfqj-m3w2-2vv9/GHSA-cfqj-m3w2-2vv9.json index 55e62dc7e00..7f486819277 100644 --- a/advisories/unreviewed/2022/05/GHSA-cfqj-m3w2-2vv9/GHSA-cfqj-m3w2-2vv9.json +++ b/advisories/unreviewed/2022/05/GHSA-cfqj-m3w2-2vv9/GHSA-cfqj-m3w2-2vv9.json @@ -7,12 +7,8 @@ "CVE-2009-2013" ], "details": "SQL injection vulnerability in bin/aps_browse_sources.php in Frontis 3.9.01.24 allows remote attackers to execute arbitrary SQL commands via the source_class parameter in a browse_classes action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cg57-5mxp-25jg/GHSA-cg57-5mxp-25jg.json b/advisories/unreviewed/2022/05/GHSA-cg57-5mxp-25jg/GHSA-cg57-5mxp-25jg.json index 324e7734d06..a75a50b47a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-cg57-5mxp-25jg/GHSA-cg57-5mxp-25jg.json +++ b/advisories/unreviewed/2022/05/GHSA-cg57-5mxp-25jg/GHSA-cg57-5mxp-25jg.json @@ -7,12 +7,8 @@ "CVE-2009-2065" ], "details": "Mozilla Firefox 3.0.10, and possibly other versions, detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to \"HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cg5r-cv97-3vg7/GHSA-cg5r-cv97-3vg7.json b/advisories/unreviewed/2022/05/GHSA-cg5r-cv97-3vg7/GHSA-cg5r-cv97-3vg7.json index a1fe15b0407..eac3f8dd209 100644 --- a/advisories/unreviewed/2022/05/GHSA-cg5r-cv97-3vg7/GHSA-cg5r-cv97-3vg7.json +++ b/advisories/unreviewed/2022/05/GHSA-cg5r-cv97-3vg7/GHSA-cg5r-cv97-3vg7.json @@ -7,12 +7,8 @@ "CVE-2009-2360" ], "details": "Cross-site scripting (XSS) vulnerability in passwd/main.php in the Passwd module before 3.1.1 for Horde allows remote attackers to inject arbitrary web script or HTML via the backend parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ch7c-r59p-c6q5/GHSA-ch7c-r59p-c6q5.json b/advisories/unreviewed/2022/05/GHSA-ch7c-r59p-c6q5/GHSA-ch7c-r59p-c6q5.json index 51abd54db3a..571e79083bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-ch7c-r59p-c6q5/GHSA-ch7c-r59p-c6q5.json +++ b/advisories/unreviewed/2022/05/GHSA-ch7c-r59p-c6q5/GHSA-ch7c-r59p-c6q5.json @@ -7,12 +7,8 @@ "CVE-2009-2374" ], "details": "Drupal 5.x before 5.19 and 6.x before 6.13 does not properly sanitize failed login attempts for pages that contain a sortable table, which includes the username and password in links that can be read from (1) the HTTP referer header of external web sites that are visited from those links or (2) when page caching is enabled, the Drupal page cache.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-chp6-8qcf-v8wh/GHSA-chp6-8qcf-v8wh.json b/advisories/unreviewed/2022/05/GHSA-chp6-8qcf-v8wh/GHSA-chp6-8qcf-v8wh.json index a64e6c0a1fc..b9a568abe90 100644 --- a/advisories/unreviewed/2022/05/GHSA-chp6-8qcf-v8wh/GHSA-chp6-8qcf-v8wh.json +++ b/advisories/unreviewed/2022/05/GHSA-chp6-8qcf-v8wh/GHSA-chp6-8qcf-v8wh.json @@ -7,12 +7,8 @@ "CVE-2009-2123" ], "details": "Multiple SQL injection vulnerabilities in Elvin 1.2.0 allow remote attackers to execute arbitrary SQL commands via the (1) inUser (aka Username) and (2) inPass (aka Password) parameters to (a) inc/login.ei, reachable through login.php; and the (3) id parameter to (b) show_bug.php and (c) show_activity.php. NOTE: it was later reported that vector 3c also affects 1.2.2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cqfw-r98j-hj52/GHSA-cqfw-r98j-hj52.json b/advisories/unreviewed/2022/05/GHSA-cqfw-r98j-hj52/GHSA-cqfw-r98j-hj52.json index f373d71c8bb..3ac8bd4a688 100644 --- a/advisories/unreviewed/2022/05/GHSA-cqfw-r98j-hj52/GHSA-cqfw-r98j-hj52.json +++ b/advisories/unreviewed/2022/05/GHSA-cqfw-r98j-hj52/GHSA-cqfw-r98j-hj52.json @@ -7,12 +7,8 @@ "CVE-2009-2269" ], "details": "SQL injection vulnerability in Empire CMS 5.1 allows remote attackers to execute arbitrary SQL commands via the bid parameter to the default URI under e/tool/gbook/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cvh6-597h-ppxp/GHSA-cvh6-597h-ppxp.json b/advisories/unreviewed/2022/05/GHSA-cvh6-597h-ppxp/GHSA-cvh6-597h-ppxp.json index c32b7690f9b..a1c427e4adc 100644 --- a/advisories/unreviewed/2022/05/GHSA-cvh6-597h-ppxp/GHSA-cvh6-597h-ppxp.json +++ b/advisories/unreviewed/2022/05/GHSA-cvh6-597h-ppxp/GHSA-cvh6-597h-ppxp.json @@ -7,12 +7,8 @@ "CVE-2009-2443" ], "details": "Siteframe 3.2.3, and other 3.2.x versions, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cwjg-5m9m-f385/GHSA-cwjg-5m9m-f385.json b/advisories/unreviewed/2022/05/GHSA-cwjg-5m9m-f385/GHSA-cwjg-5m9m-f385.json index 2ed38189acb..3ffe196b960 100644 --- a/advisories/unreviewed/2022/05/GHSA-cwjg-5m9m-f385/GHSA-cwjg-5m9m-f385.json +++ b/advisories/unreviewed/2022/05/GHSA-cwjg-5m9m-f385/GHSA-cwjg-5m9m-f385.json @@ -7,12 +7,8 @@ "CVE-2009-1933" ], "details": "Kerberos in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_117, does not properly manage credential caches, which allows local users to access Kerberized NFS mount points and Kerberized NFS shares via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cxmw-fgm7-87f2/GHSA-cxmw-fgm7-87f2.json b/advisories/unreviewed/2022/05/GHSA-cxmw-fgm7-87f2/GHSA-cxmw-fgm7-87f2.json index 31ca70798f3..da455bb2e5c 100644 --- a/advisories/unreviewed/2022/05/GHSA-cxmw-fgm7-87f2/GHSA-cxmw-fgm7-87f2.json +++ b/advisories/unreviewed/2022/05/GHSA-cxmw-fgm7-87f2/GHSA-cxmw-fgm7-87f2.json @@ -7,12 +7,8 @@ "CVE-2009-2371" ], "details": "Advanced Forum 6.x before 6.x-1.1, a module for Drupal, does not prevent users from modifying user signatures after the associated comment format has been changed to an administrator-controlled input format, which allows remote authenticated users to inject arbitrary web script, HTML, and possibly PHP code via a crafted user signature.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f43m-q2pc-w9hw/GHSA-f43m-q2pc-w9hw.json b/advisories/unreviewed/2022/05/GHSA-f43m-q2pc-w9hw/GHSA-f43m-q2pc-w9hw.json index d213792cf14..39a0e749598 100644 --- a/advisories/unreviewed/2022/05/GHSA-f43m-q2pc-w9hw/GHSA-f43m-q2pc-w9hw.json +++ b/advisories/unreviewed/2022/05/GHSA-f43m-q2pc-w9hw/GHSA-f43m-q2pc-w9hw.json @@ -7,12 +7,8 @@ "CVE-2009-2561" ], "details": "Unspecified vulnerability in the sFlow dissector in Wireshark 1.2.0 allows remote attackers to cause a denial of service (CPU and memory consumption) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f5f6-2567-gcch/GHSA-f5f6-2567-gcch.json b/advisories/unreviewed/2022/05/GHSA-f5f6-2567-gcch/GHSA-f5f6-2567-gcch.json index f1fa1558c1d..876c1a9a093 100644 --- a/advisories/unreviewed/2022/05/GHSA-f5f6-2567-gcch/GHSA-f5f6-2567-gcch.json +++ b/advisories/unreviewed/2022/05/GHSA-f5f6-2567-gcch/GHSA-f5f6-2567-gcch.json @@ -7,12 +7,8 @@ "CVE-2009-2539" ], "details": "The Aigo P8860 allows remote attackers to cause a denial of service (memory consumption and browser hang) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f6vh-hx47-j2pg/GHSA-f6vh-hx47-j2pg.json b/advisories/unreviewed/2022/05/GHSA-f6vh-hx47-j2pg/GHSA-f6vh-hx47-j2pg.json index c873a2967a5..6ba617f195c 100644 --- a/advisories/unreviewed/2022/05/GHSA-f6vh-hx47-j2pg/GHSA-f6vh-hx47-j2pg.json +++ b/advisories/unreviewed/2022/05/GHSA-f6vh-hx47-j2pg/GHSA-f6vh-hx47-j2pg.json @@ -7,12 +7,8 @@ "CVE-2009-2082" ], "details": "SQL injection vulnerability in insidepage.php in Creative Web Solutions Multi-Level CMS 1.21 allows remote attackers to execute arbitrary SQL commands via the catid parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f7cm-qqw7-79pg/GHSA-f7cm-qqw7-79pg.json b/advisories/unreviewed/2022/05/GHSA-f7cm-qqw7-79pg/GHSA-f7cm-qqw7-79pg.json index 660ce4e9e78..58a6f2c5fea 100644 --- a/advisories/unreviewed/2022/05/GHSA-f7cm-qqw7-79pg/GHSA-f7cm-qqw7-79pg.json +++ b/advisories/unreviewed/2022/05/GHSA-f7cm-qqw7-79pg/GHSA-f7cm-qqw7-79pg.json @@ -7,12 +7,8 @@ "CVE-2009-2301" ], "details": "The radware AppWall Web Application Firewall (WAF) 1.0.2.6, with Gateway 4.6.0.2, allows remote attackers to read source code via a direct request to (1) funcs.inc, (2) defines.inc, or (3) msg.inc in Management/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f9c7-97j5-6357/GHSA-f9c7-97j5-6357.json b/advisories/unreviewed/2022/05/GHSA-f9c7-97j5-6357/GHSA-f9c7-97j5-6357.json index 2cd03d7b543..de1e9afda5d 100644 --- a/advisories/unreviewed/2022/05/GHSA-f9c7-97j5-6357/GHSA-f9c7-97j5-6357.json +++ b/advisories/unreviewed/2022/05/GHSA-f9c7-97j5-6357/GHSA-f9c7-97j5-6357.json @@ -7,12 +7,8 @@ "CVE-2009-2107" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Webmedia Explorer (webmex) 5.09 and 5.10 allow remote attackers to inject arbitrary web script or HTML via event handlers such as onmouseover in the (1) search or (2) tag parameters; (3) arbitrary invalid parameter names that are not properly handled when triggered on a column; (4) bookmark parameter in an edit action; or (5) email parameter in a remember action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fh98-95cv-h257/GHSA-fh98-95cv-h257.json b/advisories/unreviewed/2022/05/GHSA-fh98-95cv-h257/GHSA-fh98-95cv-h257.json index b2480552ebf..196ac973ce8 100644 --- a/advisories/unreviewed/2022/05/GHSA-fh98-95cv-h257/GHSA-fh98-95cv-h257.json +++ b/advisories/unreviewed/2022/05/GHSA-fh98-95cv-h257/GHSA-fh98-95cv-h257.json @@ -7,12 +7,8 @@ "CVE-2009-2342" ], "details": "Cross-site scripting (XSS) vulnerability in admin.php (aka the login page) in Content Management Made Easy (CMME) before 1.22 allows remote attackers to inject arbitrary web script or HTML via the username field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fm9c-6g88-w6vp/GHSA-fm9c-6g88-w6vp.json b/advisories/unreviewed/2022/05/GHSA-fm9c-6g88-w6vp/GHSA-fm9c-6g88-w6vp.json index 7cabd5c1bd8..48787e3bc2e 100644 --- a/advisories/unreviewed/2022/05/GHSA-fm9c-6g88-w6vp/GHSA-fm9c-6g88-w6vp.json +++ b/advisories/unreviewed/2022/05/GHSA-fm9c-6g88-w6vp/GHSA-fm9c-6g88-w6vp.json @@ -7,12 +7,8 @@ "CVE-2009-2284" ], "details": "Cross-site scripting (XSS) vulnerability in phpMyAdmin before 3.2.0.1 allows remote attackers to inject arbitrary web script or HTML via a crafted SQL bookmark.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fmgc-6ph7-vh6x/GHSA-fmgc-6ph7-vh6x.json b/advisories/unreviewed/2022/05/GHSA-fmgc-6ph7-vh6x/GHSA-fmgc-6ph7-vh6x.json index 8ad109410b8..f37e27e4c62 100644 --- a/advisories/unreviewed/2022/05/GHSA-fmgc-6ph7-vh6x/GHSA-fmgc-6ph7-vh6x.json +++ b/advisories/unreviewed/2022/05/GHSA-fmgc-6ph7-vh6x/GHSA-fmgc-6ph7-vh6x.json @@ -7,12 +7,8 @@ "CVE-2009-1966" ], "details": "Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors, a different vulnerability than CVE-2009-1967.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fmqq-qq9r-jcq6/GHSA-fmqq-qq9r-jcq6.json b/advisories/unreviewed/2022/05/GHSA-fmqq-qq9r-jcq6/GHSA-fmqq-qq9r-jcq6.json index d3615b2dc47..2eb2acce156 100644 --- a/advisories/unreviewed/2022/05/GHSA-fmqq-qq9r-jcq6/GHSA-fmqq-qq9r-jcq6.json +++ b/advisories/unreviewed/2022/05/GHSA-fmqq-qq9r-jcq6/GHSA-fmqq-qq9r-jcq6.json @@ -7,12 +7,8 @@ "CVE-2009-2078" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Booktree 5.x before 5.x-7.3 and 6.x before 6.x-1.1, a module for Drupal, allow remote attackers to inject arbitrary web script or HTML via the (1) node title and (2) node body in a tree root page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fph5-grvq-gv75/GHSA-fph5-grvq-gv75.json b/advisories/unreviewed/2022/05/GHSA-fph5-grvq-gv75/GHSA-fph5-grvq-gv75.json index 5add147c2d4..01128372d59 100644 --- a/advisories/unreviewed/2022/05/GHSA-fph5-grvq-gv75/GHSA-fph5-grvq-gv75.json +++ b/advisories/unreviewed/2022/05/GHSA-fph5-grvq-gv75/GHSA-fph5-grvq-gv75.json @@ -7,12 +7,8 @@ "CVE-2009-2077" ], "details": "Drupal 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to bypass access restrictions and (1) read unpublished content from anonymous users when a view is already configured to display the content, and (2) read private content in generated queries.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-frxh-c3xp-x2g7/GHSA-frxh-c3xp-x2g7.json b/advisories/unreviewed/2022/05/GHSA-frxh-c3xp-x2g7/GHSA-frxh-c3xp-x2g7.json index b6ec7663a65..797faf2b1b9 100644 --- a/advisories/unreviewed/2022/05/GHSA-frxh-c3xp-x2g7/GHSA-frxh-c3xp-x2g7.json +++ b/advisories/unreviewed/2022/05/GHSA-frxh-c3xp-x2g7/GHSA-frxh-c3xp-x2g7.json @@ -7,12 +7,8 @@ "CVE-2009-1925" ], "details": "The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 does not properly manage state information, which allows remote attackers to execute arbitrary code by sending packets to a listening service, and thereby triggering misinterpretation of an unspecified field as a function pointer, aka \"TCP/IP Timestamps Code Execution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fwmx-4jwq-vm4w/GHSA-fwmx-4jwq-vm4w.json b/advisories/unreviewed/2022/05/GHSA-fwmx-4jwq-vm4w/GHSA-fwmx-4jwq-vm4w.json index 88cfd75fbc2..9f06225cf5c 100644 --- a/advisories/unreviewed/2022/05/GHSA-fwmx-4jwq-vm4w/GHSA-fwmx-4jwq-vm4w.json +++ b/advisories/unreviewed/2022/05/GHSA-fwmx-4jwq-vm4w/GHSA-fwmx-4jwq-vm4w.json @@ -7,12 +7,8 @@ "CVE-2009-2392" ], "details": "SQL injection vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to execute arbitrary SQL commands via the tid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fx69-p49f-2rj3/GHSA-fx69-p49f-2rj3.json b/advisories/unreviewed/2022/05/GHSA-fx69-p49f-2rj3/GHSA-fx69-p49f-2rj3.json index f38f3f89809..82c314faf64 100644 --- a/advisories/unreviewed/2022/05/GHSA-fx69-p49f-2rj3/GHSA-fx69-p49f-2rj3.json +++ b/advisories/unreviewed/2022/05/GHSA-fx69-p49f-2rj3/GHSA-fx69-p49f-2rj3.json @@ -7,12 +7,8 @@ "CVE-2009-2819" ], "details": "AFP Client in Apple Mac OS X 10.5.8 allows remote AFP servers to execute arbitrary code or cause a denial of service (memory corruption and system crash) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fxw5-28xr-82fm/GHSA-fxw5-28xr-82fm.json b/advisories/unreviewed/2022/05/GHSA-fxw5-28xr-82fm/GHSA-fxw5-28xr-82fm.json index 420b5d1943e..02f4e66ca28 100644 --- a/advisories/unreviewed/2022/05/GHSA-fxw5-28xr-82fm/GHSA-fxw5-28xr-82fm.json +++ b/advisories/unreviewed/2022/05/GHSA-fxw5-28xr-82fm/GHSA-fxw5-28xr-82fm.json @@ -7,12 +7,8 @@ "CVE-2009-2762" ], "details": "wp-login.php in WordPress 2.8.3 and earlier allows remote attackers to force a password reset for the first user in the database, possibly the administrator, via a key[] array variable in a resetpass (aka rp) action, which bypasses a check that assumes that $key is not an array.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fxx7-77w2-v3x5/GHSA-fxx7-77w2-v3x5.json b/advisories/unreviewed/2022/05/GHSA-fxx7-77w2-v3x5/GHSA-fxx7-77w2-v3x5.json index 0b96ad8dee4..c0d8d892f77 100644 --- a/advisories/unreviewed/2022/05/GHSA-fxx7-77w2-v3x5/GHSA-fxx7-77w2-v3x5.json +++ b/advisories/unreviewed/2022/05/GHSA-fxx7-77w2-v3x5/GHSA-fxx7-77w2-v3x5.json @@ -7,12 +7,8 @@ "CVE-2009-2381" ], "details": "Gizmo 3.1.0.79 on Linux does not verify a server's SSL certificate, which allows remote servers to obtain the credentials of arbitrary users via a spoofed certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g2cv-r3c9-79p9/GHSA-g2cv-r3c9-79p9.json b/advisories/unreviewed/2022/05/GHSA-g2cv-r3c9-79p9/GHSA-g2cv-r3c9-79p9.json index aa5bf99bf27..a2a2bd561e4 100644 --- a/advisories/unreviewed/2022/05/GHSA-g2cv-r3c9-79p9/GHSA-g2cv-r3c9-79p9.json +++ b/advisories/unreviewed/2022/05/GHSA-g2cv-r3c9-79p9/GHSA-g2cv-r3c9-79p9.json @@ -7,12 +7,8 @@ "CVE-2009-2006" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) search_term parameter to main/auth/courses.php; the (2) frm_title and (3) frm_content parameters in a new personal agenda item action; the (4) title and (5) tutor_name parameters in a new course action; and the (6) student and (7) course parameters to main/mySpace/myStudents.php. NOTE: vectors 2 and 3 might only be exploitable via a separate CSRF vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g2w3-xhcf-hpmp/GHSA-g2w3-xhcf-hpmp.json b/advisories/unreviewed/2022/05/GHSA-g2w3-xhcf-hpmp/GHSA-g2w3-xhcf-hpmp.json index e1cf50ed7f5..374c67db55a 100644 --- a/advisories/unreviewed/2022/05/GHSA-g2w3-xhcf-hpmp/GHSA-g2w3-xhcf-hpmp.json +++ b/advisories/unreviewed/2022/05/GHSA-g2w3-xhcf-hpmp/GHSA-g2w3-xhcf-hpmp.json @@ -7,12 +7,8 @@ "CVE-2009-2387" ], "details": "Unspecified vulnerability in the proc filesystem in Sun OpenSolaris snv_49 through snv_109 allows local users to cause a denial of service (deadlock and panic) via unknown vectors, related to the ldt_rewrite_syscall function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g347-3vm4-xrvv/GHSA-g347-3vm4-xrvv.json b/advisories/unreviewed/2022/05/GHSA-g347-3vm4-xrvv/GHSA-g347-3vm4-xrvv.json index a562a96bf2e..db2732a7696 100644 --- a/advisories/unreviewed/2022/05/GHSA-g347-3vm4-xrvv/GHSA-g347-3vm4-xrvv.json +++ b/advisories/unreviewed/2022/05/GHSA-g347-3vm4-xrvv/GHSA-g347-3vm4-xrvv.json @@ -7,12 +7,8 @@ "CVE-2009-2184" ], "details": "Absolute path traversal vulnerability in forcedownload.php in Gravy Media Photo Host 1.0.8 allows remote attackers to read arbitrary files via an encoded \"/\" (slash) in the file parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g3jf-m3wg-xx5w/GHSA-g3jf-m3wg-xx5w.json b/advisories/unreviewed/2022/05/GHSA-g3jf-m3wg-xx5w/GHSA-g3jf-m3wg-xx5w.json index d238a128939..90e95ee58d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-g3jf-m3wg-xx5w/GHSA-g3jf-m3wg-xx5w.json +++ b/advisories/unreviewed/2022/05/GHSA-g3jf-m3wg-xx5w/GHSA-g3jf-m3wg-xx5w.json @@ -7,12 +7,8 @@ "CVE-2009-2221" ], "details": "Cross-site scripting (XSS) vulnerability in PHP-I-BOARD 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g3x9-82h5-gj65/GHSA-g3x9-82h5-gj65.json b/advisories/unreviewed/2022/05/GHSA-g3x9-82h5-gj65/GHSA-g3x9-82h5-gj65.json index 692016559ed..1e6c3d7d7ef 100644 --- a/advisories/unreviewed/2022/05/GHSA-g3x9-82h5-gj65/GHSA-g3x9-82h5-gj65.json +++ b/advisories/unreviewed/2022/05/GHSA-g3x9-82h5-gj65/GHSA-g3x9-82h5-gj65.json @@ -7,12 +7,8 @@ "CVE-2009-2072" ], "details": "Apple Safari does not require a cached certificate before displaying a lock icon for an https web site, which allows man-in-the-middle attackers to spoof an arbitrary https site by sending the browser a crafted (1) 4xx or (2) 5xx CONNECT response page for an https request sent through a proxy server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g43q-mc2v-h35w/GHSA-g43q-mc2v-h35w.json b/advisories/unreviewed/2022/05/GHSA-g43q-mc2v-h35w/GHSA-g43q-mc2v-h35w.json index 4c8e191f4cd..06a0df1a6ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-g43q-mc2v-h35w/GHSA-g43q-mc2v-h35w.json +++ b/advisories/unreviewed/2022/05/GHSA-g43q-mc2v-h35w/GHSA-g43q-mc2v-h35w.json @@ -7,12 +7,8 @@ "CVE-2009-1914" ], "details": "The pci_register_iommu_region function in arch/sparc/kernel/pci_common.c in the Linux kernel before 2.6.29 on the sparc64 platform allows local users to cause a denial of service (system crash) by reading the /proc/iomem file, related to uninitialized pointers and the request_resource function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g5xp-gp5r-x65p/GHSA-g5xp-gp5r-x65p.json b/advisories/unreviewed/2022/05/GHSA-g5xp-gp5r-x65p/GHSA-g5xp-gp5r-x65p.json index f99261c76e4..79d746b1294 100644 --- a/advisories/unreviewed/2022/05/GHSA-g5xp-gp5r-x65p/GHSA-g5xp-gp5r-x65p.json +++ b/advisories/unreviewed/2022/05/GHSA-g5xp-gp5r-x65p/GHSA-g5xp-gp5r-x65p.json @@ -7,12 +7,8 @@ "CVE-2009-2276" ], "details": "SQL injection vulnerability in voteforus.php in the Vote For Us extension 1.0.1 and earlier for PunBB allows remote attackers to execute arbitrary SQL commands via the out parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g64f-whgh-84jj/GHSA-g64f-whgh-84jj.json b/advisories/unreviewed/2022/05/GHSA-g64f-whgh-84jj/GHSA-g64f-whgh-84jj.json index e0817d8fc93..d329551d65d 100644 --- a/advisories/unreviewed/2022/05/GHSA-g64f-whgh-84jj/GHSA-g64f-whgh-84jj.json +++ b/advisories/unreviewed/2022/05/GHSA-g64f-whgh-84jj/GHSA-g64f-whgh-84jj.json @@ -7,12 +7,8 @@ "CVE-2009-2208" ], "details": "FreeBSD 6.3, 6.4, 7.1, and 7.2 does not enforce permissions on the SIOCSIFINFO_IN6 IOCTL, which allows local users to modify or disable IPv6 network interfaces, as demonstrated by modifying the MTU.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g6wx-699h-cmpm/GHSA-g6wx-699h-cmpm.json b/advisories/unreviewed/2022/05/GHSA-g6wx-699h-cmpm/GHSA-g6wx-699h-cmpm.json index 6cc559050e7..e1ae2163e8b 100644 --- a/advisories/unreviewed/2022/05/GHSA-g6wx-699h-cmpm/GHSA-g6wx-699h-cmpm.json +++ b/advisories/unreviewed/2022/05/GHSA-g6wx-699h-cmpm/GHSA-g6wx-699h-cmpm.json @@ -7,12 +7,8 @@ "CVE-2009-2330" ], "details": "Cross-site scripting (XSS) vulnerability in admin/admin_menu.php in CMS Chainuk 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the menu parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g7c7-j522-mv47/GHSA-g7c7-j522-mv47.json b/advisories/unreviewed/2022/05/GHSA-g7c7-j522-mv47/GHSA-g7c7-j522-mv47.json index bb646ff6066..a45de4d0619 100644 --- a/advisories/unreviewed/2022/05/GHSA-g7c7-j522-mv47/GHSA-g7c7-j522-mv47.json +++ b/advisories/unreviewed/2022/05/GHSA-g7c7-j522-mv47/GHSA-g7c7-j522-mv47.json @@ -7,12 +7,8 @@ "CVE-2009-2074" ], "details": "Cross-site scripting (XSS) vulnerability in Nodequeue 5.x before 5.x-2.7 and 6.x before 6.x-2.2, a module for Drupal, allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via vocabulary names.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g7r2-48fm-96cq/GHSA-g7r2-48fm-96cq.json b/advisories/unreviewed/2022/05/GHSA-g7r2-48fm-96cq/GHSA-g7r2-48fm-96cq.json index 6d9b49fe140..5f3cee347fd 100644 --- a/advisories/unreviewed/2022/05/GHSA-g7r2-48fm-96cq/GHSA-g7r2-48fm-96cq.json +++ b/advisories/unreviewed/2022/05/GHSA-g7r2-48fm-96cq/GHSA-g7r2-48fm-96cq.json @@ -7,12 +7,8 @@ "CVE-2009-2421" ], "details": "The CFCharacterSetInitInlineBuffer method in CoreFoundation.dll in Apple Safari 3.2.3 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via a \"high-bit character\" in a URL fragment for an unspecified protocol.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g9ch-j48j-jfg7/GHSA-g9ch-j48j-jfg7.json b/advisories/unreviewed/2022/05/GHSA-g9ch-j48j-jfg7/GHSA-g9ch-j48j-jfg7.json index 485783b8fa0..33ab422b566 100644 --- a/advisories/unreviewed/2022/05/GHSA-g9ch-j48j-jfg7/GHSA-g9ch-j48j-jfg7.json +++ b/advisories/unreviewed/2022/05/GHSA-g9ch-j48j-jfg7/GHSA-g9ch-j48j-jfg7.json @@ -7,12 +7,8 @@ "CVE-2009-2425" ], "details": "Tor before 0.2.0.35 allows remote attackers to cause a denial of service (application crash) via a malformed router descriptor.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g9rg-m48v-pqpf/GHSA-g9rg-m48v-pqpf.json b/advisories/unreviewed/2022/05/GHSA-g9rg-m48v-pqpf/GHSA-g9rg-m48v-pqpf.json index 299ea2f834e..a7caf5cb258 100644 --- a/advisories/unreviewed/2022/05/GHSA-g9rg-m48v-pqpf/GHSA-g9rg-m48v-pqpf.json +++ b/advisories/unreviewed/2022/05/GHSA-g9rg-m48v-pqpf/GHSA-g9rg-m48v-pqpf.json @@ -7,12 +7,8 @@ "CVE-2009-2195" ], "details": "Buffer overflow in WebKit in Apple Safari before 4.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted floating-point numbers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gfm5-6996-gv93/GHSA-gfm5-6996-gv93.json b/advisories/unreviewed/2022/05/GHSA-gfm5-6996-gv93/GHSA-gfm5-6996-gv93.json index 9b729cb56be..8c3869cddaf 100644 --- a/advisories/unreviewed/2022/05/GHSA-gfm5-6996-gv93/GHSA-gfm5-6996-gv93.json +++ b/advisories/unreviewed/2022/05/GHSA-gfm5-6996-gv93/GHSA-gfm5-6996-gv93.json @@ -7,12 +7,8 @@ "CVE-2009-2546" ], "details": "Directory traversal vulnerability in Advanced Electron Forum (AEF) 1.x allows remote attackers to determine the existence of arbitrary files via the avatargalfile parameter when changing an avatar, which leaks the existence of the file in an error message. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ggpg-hpjr-gqrh/GHSA-ggpg-hpjr-gqrh.json b/advisories/unreviewed/2022/05/GHSA-ggpg-hpjr-gqrh/GHSA-ggpg-hpjr-gqrh.json index 89421a5647a..2c2efd65dc5 100644 --- a/advisories/unreviewed/2022/05/GHSA-ggpg-hpjr-gqrh/GHSA-ggpg-hpjr-gqrh.json +++ b/advisories/unreviewed/2022/05/GHSA-ggpg-hpjr-gqrh/GHSA-ggpg-hpjr-gqrh.json @@ -7,12 +7,8 @@ "CVE-2009-2285" ], "details": "Buffer underflow in the LZWDecodeCompat function in libtiff 3.8.2 allows context-dependent attackers to cause a denial of service (crash) via a crafted TIFF image, a different vulnerability than CVE-2008-2327.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gjgf-fgq7-f6p3/GHSA-gjgf-fgq7-f6p3.json b/advisories/unreviewed/2022/05/GHSA-gjgf-fgq7-f6p3/GHSA-gjgf-fgq7-f6p3.json index 897f30ea6d4..a2e635716c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-gjgf-fgq7-f6p3/GHSA-gjgf-fgq7-f6p3.json +++ b/advisories/unreviewed/2022/05/GHSA-gjgf-fgq7-f6p3/GHSA-gjgf-fgq7-f6p3.json @@ -7,12 +7,8 @@ "CVE-2009-2298" ], "details": "Stack-based buffer overflow in rping in HP OpenView Network Node Manager (OV NNM) 7.53 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a CGI request to webappmon.exe. NOTE: this may overlap CVE-2009-1420.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gm74-vvqx-5v3w/GHSA-gm74-vvqx-5v3w.json b/advisories/unreviewed/2022/05/GHSA-gm74-vvqx-5v3w/GHSA-gm74-vvqx-5v3w.json index 219910ab38b..8e8e0c66aff 100644 --- a/advisories/unreviewed/2022/05/GHSA-gm74-vvqx-5v3w/GHSA-gm74-vvqx-5v3w.json +++ b/advisories/unreviewed/2022/05/GHSA-gm74-vvqx-5v3w/GHSA-gm74-vvqx-5v3w.json @@ -7,12 +7,8 @@ "CVE-2009-2322" ], "details": "Cross-site scripting (XSS) vulnerability in cgi-bin/sysconf.cgi on the Axesstel MV 410R allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gm83-wf9j-jhqj/GHSA-gm83-wf9j-jhqj.json b/advisories/unreviewed/2022/05/GHSA-gm83-wf9j-jhqj/GHSA-gm83-wf9j-jhqj.json index bcec6acc0be..bf89a92550a 100644 --- a/advisories/unreviewed/2022/05/GHSA-gm83-wf9j-jhqj/GHSA-gm83-wf9j-jhqj.json +++ b/advisories/unreviewed/2022/05/GHSA-gm83-wf9j-jhqj/GHSA-gm83-wf9j-jhqj.json @@ -7,12 +7,8 @@ "CVE-2009-2216" ], "details": "Cross-site scripting (XSS) vulnerability in CMD_REDIRECT in DirectAdmin 1.33.6 and earlier allows remote attackers to inject arbitrary web script or HTML via the URI in a view=advanced request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gphm-8f5h-pv33/GHSA-gphm-8f5h-pv33.json b/advisories/unreviewed/2022/05/GHSA-gphm-8f5h-pv33/GHSA-gphm-8f5h-pv33.json index 0f2fb6bfc22..a12f4929e8c 100644 --- a/advisories/unreviewed/2022/05/GHSA-gphm-8f5h-pv33/GHSA-gphm-8f5h-pv33.json +++ b/advisories/unreviewed/2022/05/GHSA-gphm-8f5h-pv33/GHSA-gphm-8f5h-pv33.json @@ -7,12 +7,8 @@ "CVE-2009-2462" ], "details": "The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) the frame chain and synchronous events, (2) a SetMayHaveFrame assertion and nsCSSFrameConstructor::CreateFloatingLetterFrame, (3) nsCSSFrameConstructor::ConstructFrame, (4) the child list and initial reflow, (5) GetLastSpecialSibling, (6) nsFrameManager::GetPrimaryFrameFor and MathML, (7) nsFrame::GetBoxAscent, (8) nsCSSFrameConstructor::AdjustParentFrame, (9) nsDOMOfflineResourceList, and (10) nsContentUtils::ComparePosition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -144,9 +140,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gq8f-fx39-v9hv/GHSA-gq8f-fx39-v9hv.json b/advisories/unreviewed/2022/05/GHSA-gq8f-fx39-v9hv/GHSA-gq8f-fx39-v9hv.json index 2462e69acad..b3923ded419 100644 --- a/advisories/unreviewed/2022/05/GHSA-gq8f-fx39-v9hv/GHSA-gq8f-fx39-v9hv.json +++ b/advisories/unreviewed/2022/05/GHSA-gq8f-fx39-v9hv/GHSA-gq8f-fx39-v9hv.json @@ -7,12 +7,8 @@ "CVE-2009-1950" ], "details": "SQL injection vulnerability in yorum.asp in WebEyes Guest Book 3 allows remote attackers to execute arbitrary SQL commands via the mesajid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gwmw-74gj-55qx/GHSA-gwmw-74gj-55qx.json b/advisories/unreviewed/2022/05/GHSA-gwmw-74gj-55qx/GHSA-gwmw-74gj-55qx.json index 490ee71de52..5793bd8bcee 100644 --- a/advisories/unreviewed/2022/05/GHSA-gwmw-74gj-55qx/GHSA-gwmw-74gj-55qx.json +++ b/advisories/unreviewed/2022/05/GHSA-gwmw-74gj-55qx/GHSA-gwmw-74gj-55qx.json @@ -7,12 +7,8 @@ "CVE-2009-2470" ], "details": "Mozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to cause a denial of service (data stream corruption) via a long domain name in a reply.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h25q-gqwv-8969/GHSA-h25q-gqwv-8969.json b/advisories/unreviewed/2022/05/GHSA-h25q-gqwv-8969/GHSA-h25q-gqwv-8969.json index b551d7972c5..03939d3e4c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-h25q-gqwv-8969/GHSA-h25q-gqwv-8969.json +++ b/advisories/unreviewed/2022/05/GHSA-h25q-gqwv-8969/GHSA-h25q-gqwv-8969.json @@ -7,12 +7,8 @@ "CVE-2009-2237" ], "details": "Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify \"nodes or classes of nodes\" via unknown vectors, probably related to registered procedures (aka actions).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h2wr-499p-hg96/GHSA-h2wr-499p-hg96.json b/advisories/unreviewed/2022/05/GHSA-h2wr-499p-hg96/GHSA-h2wr-499p-hg96.json index 34b343a8413..dd379000d14 100644 --- a/advisories/unreviewed/2022/05/GHSA-h2wr-499p-hg96/GHSA-h2wr-499p-hg96.json +++ b/advisories/unreviewed/2022/05/GHSA-h2wr-499p-hg96/GHSA-h2wr-499p-hg96.json @@ -7,12 +7,8 @@ "CVE-2009-2339" ], "details": "SQL injection vulnerability in index.php in Rentventory allows remote attackers to execute arbitrary SQL commands via the product parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h49j-rhfc-qqvg/GHSA-h49j-rhfc-qqvg.json b/advisories/unreviewed/2022/05/GHSA-h49j-rhfc-qqvg/GHSA-h49j-rhfc-qqvg.json index 678d5c1cd5a..bf6e55cceb9 100644 --- a/advisories/unreviewed/2022/05/GHSA-h49j-rhfc-qqvg/GHSA-h49j-rhfc-qqvg.json +++ b/advisories/unreviewed/2022/05/GHSA-h49j-rhfc-qqvg/GHSA-h49j-rhfc-qqvg.json @@ -7,12 +7,8 @@ "CVE-2009-1981" ], "details": "Unspecified vulnerability in the Highly Interactive Client component in Siebel Product Suite 7.5.3, 7.7.2, 7.8.2, 8.0.0.5, and 8.1.0 allows local users to affect confidentiality and integrity via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h555-7qwc-mr94/GHSA-h555-7qwc-mr94.json b/advisories/unreviewed/2022/05/GHSA-h555-7qwc-mr94/GHSA-h555-7qwc-mr94.json index b6f896db0cf..35bb1353ae6 100644 --- a/advisories/unreviewed/2022/05/GHSA-h555-7qwc-mr94/GHSA-h555-7qwc-mr94.json +++ b/advisories/unreviewed/2022/05/GHSA-h555-7qwc-mr94/GHSA-h555-7qwc-mr94.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h5jp-m3hr-6xqj/GHSA-h5jp-m3hr-6xqj.json b/advisories/unreviewed/2022/05/GHSA-h5jp-m3hr-6xqj/GHSA-h5jp-m3hr-6xqj.json index 10583ef69f5..287f81b8c7a 100644 --- a/advisories/unreviewed/2022/05/GHSA-h5jp-m3hr-6xqj/GHSA-h5jp-m3hr-6xqj.json +++ b/advisories/unreviewed/2022/05/GHSA-h5jp-m3hr-6xqj/GHSA-h5jp-m3hr-6xqj.json @@ -7,12 +7,8 @@ "CVE-2009-2548" ], "details": "Format string vulnerability in Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the (1) nickname and (2) datafile fields in a join request, which is not properly handled when logging an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h5wp-vm75-cxvw/GHSA-h5wp-vm75-cxvw.json b/advisories/unreviewed/2022/05/GHSA-h5wp-vm75-cxvw/GHSA-h5wp-vm75-cxvw.json index d0b381667dc..9fd4bc24e2a 100644 --- a/advisories/unreviewed/2022/05/GHSA-h5wp-vm75-cxvw/GHSA-h5wp-vm75-cxvw.json +++ b/advisories/unreviewed/2022/05/GHSA-h5wp-vm75-cxvw/GHSA-h5wp-vm75-cxvw.json @@ -7,12 +7,8 @@ "CVE-2009-2233" ], "details": "The admin interface in AWScripts.com Gallery Search Engine 1.5 allows remote attackers to bypass authentication and gain administrative access by setting the awse_logged cookie to 1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h5xg-p4ch-38qf/GHSA-h5xg-p4ch-38qf.json b/advisories/unreviewed/2022/05/GHSA-h5xg-p4ch-38qf/GHSA-h5xg-p4ch-38qf.json index 22a6b2607f1..1b112c863e6 100644 --- a/advisories/unreviewed/2022/05/GHSA-h5xg-p4ch-38qf/GHSA-h5xg-p4ch-38qf.json +++ b/advisories/unreviewed/2022/05/GHSA-h5xg-p4ch-38qf/GHSA-h5xg-p4ch-38qf.json @@ -7,12 +7,8 @@ "CVE-2009-2273" ], "details": "The default configuration of the Wi-Fi component on the Huawei D100 does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h7r6-pwr8-3jgr/GHSA-h7r6-pwr8-3jgr.json b/advisories/unreviewed/2022/05/GHSA-h7r6-pwr8-3jgr/GHSA-h7r6-pwr8-3jgr.json index 97f24220379..6b70f2d11aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-h7r6-pwr8-3jgr/GHSA-h7r6-pwr8-3jgr.json +++ b/advisories/unreviewed/2022/05/GHSA-h7r6-pwr8-3jgr/GHSA-h7r6-pwr8-3jgr.json @@ -7,12 +7,8 @@ "CVE-2009-1948" ], "details": "Multiple directory traversal vulnerabilities in forum.php in Unclassified NewsBoard (UNB) 1.6.4, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to (1) read arbitrary recently-modified files via a .. (dot dot) in the GLOBALS[filename] parameter or (2) include and execute arbitrary local files via a .. (dot dot) in the GLOBALS[UTE][__tplCollection][a][file] parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h87r-9587-v4mp/GHSA-h87r-9587-v4mp.json b/advisories/unreviewed/2022/05/GHSA-h87r-9587-v4mp/GHSA-h87r-9587-v4mp.json index 45c5e008a73..e55704e9d8f 100644 --- a/advisories/unreviewed/2022/05/GHSA-h87r-9587-v4mp/GHSA-h87r-9587-v4mp.json +++ b/advisories/unreviewed/2022/05/GHSA-h87r-9587-v4mp/GHSA-h87r-9587-v4mp.json @@ -7,12 +7,8 @@ "CVE-2009-1951" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in PropertyMax Pro FREE 0.3 allows remote attackers to inject arbitrary web script or HTML via the pl parameter in a mi action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h983-8jqg-vmp6/GHSA-h983-8jqg-vmp6.json b/advisories/unreviewed/2022/05/GHSA-h983-8jqg-vmp6/GHSA-h983-8jqg-vmp6.json index f22642faa09..fd659840edc 100644 --- a/advisories/unreviewed/2022/05/GHSA-h983-8jqg-vmp6/GHSA-h983-8jqg-vmp6.json +++ b/advisories/unreviewed/2022/05/GHSA-h983-8jqg-vmp6/GHSA-h983-8jqg-vmp6.json @@ -7,12 +7,8 @@ "CVE-2009-2200" ], "details": "WebKit in Apple Safari before 4.0.3 does not properly restrict the URL scheme of the pluginspage attribute of an EMBED element, which allows user-assisted remote attackers to launch arbitrary file: URLs and obtain sensitive information via a crafted HTML document.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h9g5-j37v-9x8v/GHSA-h9g5-j37v-9x8v.json b/advisories/unreviewed/2022/05/GHSA-h9g5-j37v-9x8v/GHSA-h9g5-j37v-9x8v.json index 48d1f10de17..6560a87c69f 100644 --- a/advisories/unreviewed/2022/05/GHSA-h9g5-j37v-9x8v/GHSA-h9g5-j37v-9x8v.json +++ b/advisories/unreviewed/2022/05/GHSA-h9g5-j37v-9x8v/GHSA-h9g5-j37v-9x8v.json @@ -7,12 +7,8 @@ "CVE-2009-2106" ], "details": "SQL injection vulnerability in the Virtual Civil Services (civserv) extension 4.3.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h9ww-ghm2-rrpv/GHSA-h9ww-ghm2-rrpv.json b/advisories/unreviewed/2022/05/GHSA-h9ww-ghm2-rrpv/GHSA-h9ww-ghm2-rrpv.json index dd3ef43f16d..9138feb34dc 100644 --- a/advisories/unreviewed/2022/05/GHSA-h9ww-ghm2-rrpv/GHSA-h9ww-ghm2-rrpv.json +++ b/advisories/unreviewed/2022/05/GHSA-h9ww-ghm2-rrpv/GHSA-h9ww-ghm2-rrpv.json @@ -7,12 +7,8 @@ "CVE-2009-2379" ], "details": "Directory traversal vulnerability in public/index.php in BIGACE Web CMS 2.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cmd parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hc84-qcxp-gp62/GHSA-hc84-qcxp-gp62.json b/advisories/unreviewed/2022/05/GHSA-hc84-qcxp-gp62/GHSA-hc84-qcxp-gp62.json index fd4eb8a349c..faa886cca0d 100644 --- a/advisories/unreviewed/2022/05/GHSA-hc84-qcxp-gp62/GHSA-hc84-qcxp-gp62.json +++ b/advisories/unreviewed/2022/05/GHSA-hc84-qcxp-gp62/GHSA-hc84-qcxp-gp62.json @@ -7,12 +7,8 @@ "CVE-2009-2314" ], "details": "Race condition in the Sun Lightweight Availability Collection Tool 3.0 on Solaris 7 through 10 allows local users to overwrite arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hcgh-9h6j-c933/GHSA-hcgh-9h6j-c933.json b/advisories/unreviewed/2022/05/GHSA-hcgh-9h6j-c933/GHSA-hcgh-9h6j-c933.json index 27b7f631b4b..f16b521e822 100644 --- a/advisories/unreviewed/2022/05/GHSA-hcgh-9h6j-c933/GHSA-hcgh-9h6j-c933.json +++ b/advisories/unreviewed/2022/05/GHSA-hcgh-9h6j-c933/GHSA-hcgh-9h6j-c933.json @@ -7,12 +7,8 @@ "CVE-2009-2194" ], "details": "Apple Mac OS X 10.5 before 10.5.8 does not properly share file descriptors over local sockets, which allows local users to cause a denial of service (system crash) by placing file descriptors in messages sent to a socket that has no receiver, related to a \"synchronization issue.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hch6-jfw7-rx77/GHSA-hch6-jfw7-rx77.json b/advisories/unreviewed/2022/05/GHSA-hch6-jfw7-rx77/GHSA-hch6-jfw7-rx77.json index 22f3ae6ee76..56972ac759b 100644 --- a/advisories/unreviewed/2022/05/GHSA-hch6-jfw7-rx77/GHSA-hch6-jfw7-rx77.json +++ b/advisories/unreviewed/2022/05/GHSA-hch6-jfw7-rx77/GHSA-hch6-jfw7-rx77.json @@ -7,12 +7,8 @@ "CVE-2009-2323" ], "details": "The web interface on the Axesstel MV 410R redirects users back to the referring page after execution of some CGI scripts, which makes it easier for remote attackers to avoid detection of cross-site request forgery (CSRF) attacks, as demonstrated by a redirect from the cgi-bin/wireless.cgi script.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hcmm-gh5q-xv6f/GHSA-hcmm-gh5q-xv6f.json b/advisories/unreviewed/2022/05/GHSA-hcmm-gh5q-xv6f/GHSA-hcmm-gh5q-xv6f.json index a2024750be8..2fabab33b9b 100644 --- a/advisories/unreviewed/2022/05/GHSA-hcmm-gh5q-xv6f/GHSA-hcmm-gh5q-xv6f.json +++ b/advisories/unreviewed/2022/05/GHSA-hcmm-gh5q-xv6f/GHSA-hcmm-gh5q-xv6f.json @@ -7,12 +7,8 @@ "CVE-2009-2242" ], "details": "SQL injection vulnerability in active_appointments.asp in ASP Inline Corporate Calendar allows remote attackers to execute arbitrary SQL commands via the order parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hf4g-g9p5-j8r5/GHSA-hf4g-g9p5-j8r5.json b/advisories/unreviewed/2022/05/GHSA-hf4g-g9p5-j8r5/GHSA-hf4g-g9p5-j8r5.json index b1251e17066..7968089f7a6 100644 --- a/advisories/unreviewed/2022/05/GHSA-hf4g-g9p5-j8r5/GHSA-hf4g-g9p5-j8r5.json +++ b/advisories/unreviewed/2022/05/GHSA-hf4g-g9p5-j8r5/GHSA-hf4g-g9p5-j8r5.json @@ -7,12 +7,8 @@ "CVE-2009-2073" ], "details": "Cross-site request forgery (CSRF) vulnerability in Linksys WRT160N wireless router hardware 1 and firmware 1.02.2 allows remote attackers to hijack the authentication of other users for unspecified requests via unknown vectors, as demonstrated using administrator privileges and actions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hfvg-qx3h-rpgq/GHSA-hfvg-qx3h-rpgq.json b/advisories/unreviewed/2022/05/GHSA-hfvg-qx3h-rpgq/GHSA-hfvg-qx3h-rpgq.json index b5a65865f2b..790e74b96c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-hfvg-qx3h-rpgq/GHSA-hfvg-qx3h-rpgq.json +++ b/advisories/unreviewed/2022/05/GHSA-hfvg-qx3h-rpgq/GHSA-hfvg-qx3h-rpgq.json @@ -7,12 +7,8 @@ "CVE-2009-2011" ], "details": "Worldweaver DX Studio Player 3.0.29.0, 3.0.22.0, 3.0.12.0, and probably other versions before 3.0.29.1, when used as a plug-in for Firefox, does not restrict access to the shell.execute JavaScript API method, which allows remote attackers to execute arbitrary commands via a .dxstudio file that invokes this method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hgmj-xfjc-p5m9/GHSA-hgmj-xfjc-p5m9.json b/advisories/unreviewed/2022/05/GHSA-hgmj-xfjc-p5m9/GHSA-hgmj-xfjc-p5m9.json index 0b6c0592f36..6f0aa6901ea 100644 --- a/advisories/unreviewed/2022/05/GHSA-hgmj-xfjc-p5m9/GHSA-hgmj-xfjc-p5m9.json +++ b/advisories/unreviewed/2022/05/GHSA-hgmj-xfjc-p5m9/GHSA-hgmj-xfjc-p5m9.json @@ -7,12 +7,8 @@ "CVE-2009-2110" ], "details": "Multiple directory traversal vulnerabilities in DB Top Sites 1.0, when magic_quotes_gpc is disabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the u parameter to (1) full.php, (2) index.php, and (3) contact.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hjh9-8f7g-h763/GHSA-hjh9-8f7g-h763.json b/advisories/unreviewed/2022/05/GHSA-hjh9-8f7g-h763/GHSA-hjh9-8f7g-h763.json index f8072320b53..9aceeae4de1 100644 --- a/advisories/unreviewed/2022/05/GHSA-hjh9-8f7g-h763/GHSA-hjh9-8f7g-h763.json +++ b/advisories/unreviewed/2022/05/GHSA-hjh9-8f7g-h763/GHSA-hjh9-8f7g-h763.json @@ -7,12 +7,8 @@ "CVE-2009-1980" ], "details": "Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hjjm-r972-jjw7/GHSA-hjjm-r972-jjw7.json b/advisories/unreviewed/2022/05/GHSA-hjjm-r972-jjw7/GHSA-hjjm-r972-jjw7.json index d66fb4a3aea..2a57be1f9d8 100644 --- a/advisories/unreviewed/2022/05/GHSA-hjjm-r972-jjw7/GHSA-hjjm-r972-jjw7.json +++ b/advisories/unreviewed/2022/05/GHSA-hjjm-r972-jjw7/GHSA-hjjm-r972-jjw7.json @@ -7,12 +7,8 @@ "CVE-2009-2449" ], "details": "Directory traversal vulnerability in maillinglist/admin/change_config.php in ADbNewsSender before 1.5.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the path_to_lang parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hjr9-4q5j-6jj5/GHSA-hjr9-4q5j-6jj5.json b/advisories/unreviewed/2022/05/GHSA-hjr9-4q5j-6jj5/GHSA-hjr9-4q5j-6jj5.json index 43f2e87bba3..635d27b3988 100644 --- a/advisories/unreviewed/2022/05/GHSA-hjr9-4q5j-6jj5/GHSA-hjr9-4q5j-6jj5.json +++ b/advisories/unreviewed/2022/05/GHSA-hjr9-4q5j-6jj5/GHSA-hjr9-4q5j-6jj5.json @@ -7,12 +7,8 @@ "CVE-2009-2289" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in Arcade Trade Script 1.0 beta allows remote attackers to inject arbitrary web script or HTML via the q parameter in a gamelist action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hm24-p578-9g92/GHSA-hm24-p578-9g92.json b/advisories/unreviewed/2022/05/GHSA-hm24-p578-9g92/GHSA-hm24-p578-9g92.json index 7c31846e67f..fe9ec8f5ef1 100644 --- a/advisories/unreviewed/2022/05/GHSA-hm24-p578-9g92/GHSA-hm24-p578-9g92.json +++ b/advisories/unreviewed/2022/05/GHSA-hm24-p578-9g92/GHSA-hm24-p578-9g92.json @@ -7,12 +7,8 @@ "CVE-2009-1960" ], "details": "inc/init.php in DokuWiki 2009-02-14, rc2009-02-06, and rc2009-01-30, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via the config_cascade[main][default][] parameter to doku.php. NOTE: PHP remote file inclusion is also possible in PHP 5 using ftp:// URLs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hm4x-hjgr-4g5m/GHSA-hm4x-hjgr-4g5m.json b/advisories/unreviewed/2022/05/GHSA-hm4x-hjgr-4g5m/GHSA-hm4x-hjgr-4g5m.json index 3eaf4e70641..90a8c58e850 100644 --- a/advisories/unreviewed/2022/05/GHSA-hm4x-hjgr-4g5m/GHSA-hm4x-hjgr-4g5m.json +++ b/advisories/unreviewed/2022/05/GHSA-hm4x-hjgr-4g5m/GHSA-hm4x-hjgr-4g5m.json @@ -7,12 +7,8 @@ "CVE-2009-1971" ], "details": "Unspecified vulnerability in the Data Pump component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.7 allows remote authenticated users to affect integrity via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hm7r-j6jm-9r7p/GHSA-hm7r-j6jm-9r7p.json b/advisories/unreviewed/2022/05/GHSA-hm7r-j6jm-9r7p/GHSA-hm7r-j6jm-9r7p.json index be6200e3867..83b261d680d 100644 --- a/advisories/unreviewed/2022/05/GHSA-hm7r-j6jm-9r7p/GHSA-hm7r-j6jm-9r7p.json +++ b/advisories/unreviewed/2022/05/GHSA-hm7r-j6jm-9r7p/GHSA-hm7r-j6jm-9r7p.json @@ -7,12 +7,8 @@ "CVE-2009-2354" ], "details": "SQL injection vulnerability in the auth_checkpass function in the login page in NullLogic Groupware 1.2.7 allows remote attackers to execute arbitrary SQL commands via the username parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hmf5-7mhf-fpjh/GHSA-hmf5-7mhf-fpjh.json b/advisories/unreviewed/2022/05/GHSA-hmf5-7mhf-fpjh/GHSA-hmf5-7mhf-fpjh.json index dc426063048..7a801120c5c 100644 --- a/advisories/unreviewed/2022/05/GHSA-hmf5-7mhf-fpjh/GHSA-hmf5-7mhf-fpjh.json +++ b/advisories/unreviewed/2022/05/GHSA-hmf5-7mhf-fpjh/GHSA-hmf5-7mhf-fpjh.json @@ -7,12 +7,8 @@ "CVE-2009-2820" ], "details": "The web interface in CUPS before 1.4.2, as used on Apple Mac OS X before 10.6.2 and other platforms, does not properly handle (1) HTTP headers and (2) HTML templates, which allows remote attackers to conduct cross-site scripting (XSS) attacks and HTTP response splitting attacks via vectors related to (a) the product's web interface, (b) the configuration of the print system, and (c) the titles of printed jobs, as demonstrated by an XSS attack that uses the kerberos parameter to the admin program, and leverages attribute injection and HTTP Parameter Pollution (HPP) issues.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hpfv-mcxc-3xmg/GHSA-hpfv-mcxc-3xmg.json b/advisories/unreviewed/2022/05/GHSA-hpfv-mcxc-3xmg/GHSA-hpfv-mcxc-3xmg.json index 59451979300..ba50c52eb91 100644 --- a/advisories/unreviewed/2022/05/GHSA-hpfv-mcxc-3xmg/GHSA-hpfv-mcxc-3xmg.json +++ b/advisories/unreviewed/2022/05/GHSA-hpfv-mcxc-3xmg/GHSA-hpfv-mcxc-3xmg.json @@ -7,12 +7,8 @@ "CVE-2009-2097" ], "details": "SQL injection vulnerability in system/application/controllers/catalog.php in Zoki Soft Zoki Catalog (aka Smart Catalog) allows remote attackers to execute arbitrary SQL commands via the search_text parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hrxh-4mp8-5gfr/GHSA-hrxh-4mp8-5gfr.json b/advisories/unreviewed/2022/05/GHSA-hrxh-4mp8-5gfr/GHSA-hrxh-4mp8-5gfr.json index 0c3cc2346b3..ed5acfe40bb 100644 --- a/advisories/unreviewed/2022/05/GHSA-hrxh-4mp8-5gfr/GHSA-hrxh-4mp8-5gfr.json +++ b/advisories/unreviewed/2022/05/GHSA-hrxh-4mp8-5gfr/GHSA-hrxh-4mp8-5gfr.json @@ -7,12 +7,8 @@ "CVE-2009-2271" ], "details": "The Huawei D100 has (1) a certain default administrator password for the web interface, and does not force a password change; and has (2) a default password of admin for the admin account in the telnet interface; which makes it easier for remote attackers to obtain access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hv3m-h9vv-rfcv/GHSA-hv3m-h9vv-rfcv.json b/advisories/unreviewed/2022/05/GHSA-hv3m-h9vv-rfcv/GHSA-hv3m-h9vv-rfcv.json index cf6b54fd2e2..2fb0926d5e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-hv3m-h9vv-rfcv/GHSA-hv3m-h9vv-rfcv.json +++ b/advisories/unreviewed/2022/05/GHSA-hv3m-h9vv-rfcv/GHSA-hv3m-h9vv-rfcv.json @@ -7,12 +7,8 @@ "CVE-2009-2300" ], "details": "The management interface in the phion airlock Web Application Firewall (WAF) 4.1-10.41 does not properly handle CGI requests that specify large width and height parameters for an image, which allows remote attackers to execute arbitrary commands or cause a denial of service (resource consumption) via a crafted request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hv45-2mc3-vpw6/GHSA-hv45-2mc3-vpw6.json b/advisories/unreviewed/2022/05/GHSA-hv45-2mc3-vpw6/GHSA-hv45-2mc3-vpw6.json index 646165df5d7..0866d162e6e 100644 --- a/advisories/unreviewed/2022/05/GHSA-hv45-2mc3-vpw6/GHSA-hv45-2mc3-vpw6.json +++ b/advisories/unreviewed/2022/05/GHSA-hv45-2mc3-vpw6/GHSA-hv45-2mc3-vpw6.json @@ -7,12 +7,8 @@ "CVE-2009-2320" ], "details": "The web interface on the Axesstel MV 410R relies on client-side JavaScript code to validate input, which allows remote attackers to send crafted data, and possibly have unspecified other impact, via a client that does not process JavaScript.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hvh6-9h3j-3grm/GHSA-hvh6-9h3j-3grm.json b/advisories/unreviewed/2022/05/GHSA-hvh6-9h3j-3grm/GHSA-hvh6-9h3j-3grm.json index 2b31140f1b2..41d8c97e553 100644 --- a/advisories/unreviewed/2022/05/GHSA-hvh6-9h3j-3grm/GHSA-hvh6-9h3j-3grm.json +++ b/advisories/unreviewed/2022/05/GHSA-hvh6-9h3j-3grm/GHSA-hvh6-9h3j-3grm.json @@ -7,12 +7,8 @@ "CVE-2009-1939" ], "details": "Cross-site scripting (XSS) vulnerability in the JA_Purity template for Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hvxg-4q3q-rp48/GHSA-hvxg-4q3q-rp48.json b/advisories/unreviewed/2022/05/GHSA-hvxg-4q3q-rp48/GHSA-hvxg-4q3q-rp48.json index 9caba020b41..afd53f32916 100644 --- a/advisories/unreviewed/2022/05/GHSA-hvxg-4q3q-rp48/GHSA-hvxg-4q3q-rp48.json +++ b/advisories/unreviewed/2022/05/GHSA-hvxg-4q3q-rp48/GHSA-hvxg-4q3q-rp48.json @@ -7,12 +7,8 @@ "CVE-2009-2122" ], "details": "SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hwj7-w9gg-qjqq/GHSA-hwj7-w9gg-qjqq.json b/advisories/unreviewed/2022/05/GHSA-hwj7-w9gg-qjqq/GHSA-hwj7-w9gg-qjqq.json index 87922960319..7d289e0d842 100644 --- a/advisories/unreviewed/2022/05/GHSA-hwj7-w9gg-qjqq/GHSA-hwj7-w9gg-qjqq.json +++ b/advisories/unreviewed/2022/05/GHSA-hwj7-w9gg-qjqq/GHSA-hwj7-w9gg-qjqq.json @@ -7,12 +7,8 @@ "CVE-2009-2117" ], "details": "uye_paneli.php in phPortal 1.0 allows remote attackers to bypass authentication and obtain administrative access by setting the kulladi cookie to a valid username.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j22f-6vv2-v625/GHSA-j22f-6vv2-v625.json b/advisories/unreviewed/2022/05/GHSA-j22f-6vv2-v625/GHSA-j22f-6vv2-v625.json index cf553e39f4f..a53ef7f6d14 100644 --- a/advisories/unreviewed/2022/05/GHSA-j22f-6vv2-v625/GHSA-j22f-6vv2-v625.json +++ b/advisories/unreviewed/2022/05/GHSA-j22f-6vv2-v625/GHSA-j22f-6vv2-v625.json @@ -7,12 +7,8 @@ "CVE-2009-2203" ], "details": "Buffer overflow in Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MPEG-4 video file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j39h-m6w2-6x67/GHSA-j39h-m6w2-6x67.json b/advisories/unreviewed/2022/05/GHSA-j39h-m6w2-6x67/GHSA-j39h-m6w2-6x67.json index 732b7fe27ec..f9f6b7da34f 100644 --- a/advisories/unreviewed/2022/05/GHSA-j39h-m6w2-6x67/GHSA-j39h-m6w2-6x67.json +++ b/advisories/unreviewed/2022/05/GHSA-j39h-m6w2-6x67/GHSA-j39h-m6w2-6x67.json @@ -7,12 +7,8 @@ "CVE-2009-2100" ], "details": "Directory traversal vulnerability in the JoomlaPraise Projectfork (com_projectfork) component 2.0.10 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the section parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j43m-4g82-xm2q/GHSA-j43m-4g82-xm2q.json b/advisories/unreviewed/2022/05/GHSA-j43m-4g82-xm2q/GHSA-j43m-4g82-xm2q.json index 0c7550ef709..0963f8c1404 100644 --- a/advisories/unreviewed/2022/05/GHSA-j43m-4g82-xm2q/GHSA-j43m-4g82-xm2q.json +++ b/advisories/unreviewed/2022/05/GHSA-j43m-4g82-xm2q/GHSA-j43m-4g82-xm2q.json @@ -7,12 +7,8 @@ "CVE-2009-2239" ], "details": "SQL injection vulnerability in the (1) casinobase (com_casinobase), (2) casino_blackjack (com_casino_blackjack), and (3) casino_videopoker (com_casino_videopoker) components 0.3.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j58f-q3cq-42r5/GHSA-j58f-q3cq-42r5.json b/advisories/unreviewed/2022/05/GHSA-j58f-q3cq-42r5/GHSA-j58f-q3cq-42r5.json index 44c6518e8d8..5ea3b741673 100644 --- a/advisories/unreviewed/2022/05/GHSA-j58f-q3cq-42r5/GHSA-j58f-q3cq-42r5.json +++ b/advisories/unreviewed/2022/05/GHSA-j58f-q3cq-42r5/GHSA-j58f-q3cq-42r5.json @@ -7,12 +7,8 @@ "CVE-2009-1957" ], "details": "charon/sa/ike_sa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via an invalid IKE_SA_INIT request that triggers \"an incomplete state,\" followed by a CREATE_CHILD_SA request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j5rv-6xpg-vcc4/GHSA-j5rv-6xpg-vcc4.json b/advisories/unreviewed/2022/05/GHSA-j5rv-6xpg-vcc4/GHSA-j5rv-6xpg-vcc4.json index f00dce28c71..ceb48264566 100644 --- a/advisories/unreviewed/2022/05/GHSA-j5rv-6xpg-vcc4/GHSA-j5rv-6xpg-vcc4.json +++ b/advisories/unreviewed/2022/05/GHSA-j5rv-6xpg-vcc4/GHSA-j5rv-6xpg-vcc4.json @@ -7,12 +7,8 @@ "CVE-2009-2332" ], "details": "CMS Chainuk 1.2 and earlier allows remote attackers to obtain sensitive information via (1) a crafted id parameter to index.php or (2) a nonexistent folder name in the id parameter to admin/admin_delete.php, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j6fm-wq3j-46v7/GHSA-j6fm-wq3j-46v7.json b/advisories/unreviewed/2022/05/GHSA-j6fm-wq3j-46v7/GHSA-j6fm-wq3j-46v7.json index d1fe06917b4..9226feaf272 100644 --- a/advisories/unreviewed/2022/05/GHSA-j6fm-wq3j-46v7/GHSA-j6fm-wq3j-46v7.json +++ b/advisories/unreviewed/2022/05/GHSA-j6fm-wq3j-46v7/GHSA-j6fm-wq3j-46v7.json @@ -7,12 +7,8 @@ "CVE-2009-2326" ], "details": "Multiple SQL injection vulnerabilities in KerviNet Forum 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) an enter_parol cookie to index.php in an auto action or (2) the topic parameter to message.php. NOTE: vector 2 can be leveraged for a cross-site scripting (XSS) attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j82x-rqp4-5wq8/GHSA-j82x-rqp4-5wq8.json b/advisories/unreviewed/2022/05/GHSA-j82x-rqp4-5wq8/GHSA-j82x-rqp4-5wq8.json index 6f465b28e9a..db8918bb143 100644 --- a/advisories/unreviewed/2022/05/GHSA-j82x-rqp4-5wq8/GHSA-j82x-rqp4-5wq8.json +++ b/advisories/unreviewed/2022/05/GHSA-j82x-rqp4-5wq8/GHSA-j82x-rqp4-5wq8.json @@ -7,12 +7,8 @@ "CVE-2009-2199" ], "details": "Incomplete blacklist vulnerability in WebKit in Apple Safari before 4.0.3, as used on iPhone OS before 3.1, iPhone OS before 3.1.1 for iPod touch, and other platforms, allows remote attackers to spoof domain names in URLs, and possibly conduct phishing attacks, via unspecified homoglyphs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j8jf-vmrq-6wf6/GHSA-j8jf-vmrq-6wf6.json b/advisories/unreviewed/2022/05/GHSA-j8jf-vmrq-6wf6/GHSA-j8jf-vmrq-6wf6.json index 681beef1514..9657f3da7d3 100644 --- a/advisories/unreviewed/2022/05/GHSA-j8jf-vmrq-6wf6/GHSA-j8jf-vmrq-6wf6.json +++ b/advisories/unreviewed/2022/05/GHSA-j8jf-vmrq-6wf6/GHSA-j8jf-vmrq-6wf6.json @@ -7,12 +7,8 @@ "CVE-2009-2478" ], "details": "Mozilla Firefox 3.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via unspecified vectors, related to a \"flash bug.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j9m8-735q-6m8v/GHSA-j9m8-735q-6m8v.json b/advisories/unreviewed/2022/05/GHSA-j9m8-735q-6m8v/GHSA-j9m8-735q-6m8v.json index f03c86f9e9e..07e0b6cdae7 100644 --- a/advisories/unreviewed/2022/05/GHSA-j9m8-735q-6m8v/GHSA-j9m8-735q-6m8v.json +++ b/advisories/unreviewed/2022/05/GHSA-j9m8-735q-6m8v/GHSA-j9m8-735q-6m8v.json @@ -7,12 +7,8 @@ "CVE-2009-2398" ], "details": "Directory traversal vulnerability in test/index.php in PHP-Sugar 0.80 allows remote attackers to read arbitrary files via a ..// (dot dot slash slash) in the t parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jc3c-whr2-jgwr/GHSA-jc3c-whr2-jgwr.json b/advisories/unreviewed/2022/05/GHSA-jc3c-whr2-jgwr/GHSA-jc3c-whr2-jgwr.json index 20547e107b7..a739f8dff27 100644 --- a/advisories/unreviewed/2022/05/GHSA-jc3c-whr2-jgwr/GHSA-jc3c-whr2-jgwr.json +++ b/advisories/unreviewed/2022/05/GHSA-jc3c-whr2-jgwr/GHSA-jc3c-whr2-jgwr.json @@ -7,12 +7,8 @@ "CVE-2009-1953" ], "details": "IBM FileNet Content Manager 4.0, 4.0.1, and 4.5, as used in IBM WebSphere Application Server (WAS) and Oracle BEA WebLogic Application Server, when the CE Web Services listener has a certain WSEAF configuration, does not properly restrict use of a cached Subject, which allows remote attackers to obtain access with the credentials of a recently authenticated user via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jcc7-3mf9-88xj/GHSA-jcc7-3mf9-88xj.json b/advisories/unreviewed/2022/05/GHSA-jcc7-3mf9-88xj/GHSA-jcc7-3mf9-88xj.json index bb4a74193f3..aca6c293957 100644 --- a/advisories/unreviewed/2022/05/GHSA-jcc7-3mf9-88xj/GHSA-jcc7-3mf9-88xj.json +++ b/advisories/unreviewed/2022/05/GHSA-jcc7-3mf9-88xj/GHSA-jcc7-3mf9-88xj.json @@ -7,12 +7,8 @@ "CVE-2009-2401" ], "details": "Cross-site scripting (XSS) vulnerability in PHPEcho CMS 2.0-rc3 allows remote attackers to inject arbitrary web script or HTML via a forum post.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jcmv-592c-r6rw/GHSA-jcmv-592c-r6rw.json b/advisories/unreviewed/2022/05/GHSA-jcmv-592c-r6rw/GHSA-jcmv-592c-r6rw.json index 97f038ae9a1..ed7d449998c 100644 --- a/advisories/unreviewed/2022/05/GHSA-jcmv-592c-r6rw/GHSA-jcmv-592c-r6rw.json +++ b/advisories/unreviewed/2022/05/GHSA-jcmv-592c-r6rw/GHSA-jcmv-592c-r6rw.json @@ -7,12 +7,8 @@ "CVE-2009-2363" ], "details": "Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.00.215 allows remote attackers to execute arbitrary code via a .pls playlist file with a playlist entry containing a long File1 argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jg35-f72m-4r85/GHSA-jg35-f72m-4r85.json b/advisories/unreviewed/2022/05/GHSA-jg35-f72m-4r85/GHSA-jg35-f72m-4r85.json index b44b9232a0e..352e8227eea 100644 --- a/advisories/unreviewed/2022/05/GHSA-jg35-f72m-4r85/GHSA-jg35-f72m-4r85.json +++ b/advisories/unreviewed/2022/05/GHSA-jg35-f72m-4r85/GHSA-jg35-f72m-4r85.json @@ -7,12 +7,8 @@ "CVE-2009-2209" ], "details": "SQL injection vulnerability in rscms_mod_newsview.php in RS-CMS 2.1 allows remote attackers to execute arbitrary SQL commands via the key parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jhh8-5vg7-8rmx/GHSA-jhh8-5vg7-8rmx.json b/advisories/unreviewed/2022/05/GHSA-jhh8-5vg7-8rmx/GHSA-jhh8-5vg7-8rmx.json index 58c9c0f7092..37bb95ebc06 100644 --- a/advisories/unreviewed/2022/05/GHSA-jhh8-5vg7-8rmx/GHSA-jhh8-5vg7-8rmx.json +++ b/advisories/unreviewed/2022/05/GHSA-jhh8-5vg7-8rmx/GHSA-jhh8-5vg7-8rmx.json @@ -7,12 +7,8 @@ "CVE-2009-2010" ], "details": "Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS (FCMS) 1.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) thread parameter to messageboard.php, (2) member parameter to profile.php, (3) pid parameter to gallery/index.php, and the (4) fcms_login_id cookie parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jj66-cwfh-3cq4/GHSA-jj66-cwfh-3cq4.json b/advisories/unreviewed/2022/05/GHSA-jj66-cwfh-3cq4/GHSA-jj66-cwfh-3cq4.json index 62b465e47a3..8e32697cab3 100644 --- a/advisories/unreviewed/2022/05/GHSA-jj66-cwfh-3cq4/GHSA-jj66-cwfh-3cq4.json +++ b/advisories/unreviewed/2022/05/GHSA-jj66-cwfh-3cq4/GHSA-jj66-cwfh-3cq4.json @@ -7,12 +7,8 @@ "CVE-2009-2566" ], "details": "Stack-based buffer overflow in TFM MMPlayer 2.0, and possibly 2.0.0.30, allows remote attackers to execute arbitrary code via a long string in a playlist (.m3u) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jm6c-m4wh-43rw/GHSA-jm6c-m4wh-43rw.json b/advisories/unreviewed/2022/05/GHSA-jm6c-m4wh-43rw/GHSA-jm6c-m4wh-43rw.json index d618863601f..f321eb9626f 100644 --- a/advisories/unreviewed/2022/05/GHSA-jm6c-m4wh-43rw/GHSA-jm6c-m4wh-43rw.json +++ b/advisories/unreviewed/2022/05/GHSA-jm6c-m4wh-43rw/GHSA-jm6c-m4wh-43rw.json @@ -7,12 +7,8 @@ "CVE-2009-1986" ], "details": "Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect confidentiality via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jmx7-35p9-v235/GHSA-jmx7-35p9-v235.json b/advisories/unreviewed/2022/05/GHSA-jmx7-35p9-v235/GHSA-jmx7-35p9-v235.json index cae1da4ed35..e58ce55ef62 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmx7-35p9-v235/GHSA-jmx7-35p9-v235.json +++ b/advisories/unreviewed/2022/05/GHSA-jmx7-35p9-v235/GHSA-jmx7-35p9-v235.json @@ -7,12 +7,8 @@ "CVE-2009-2536" ], "details": "Microsoft Internet Explorer 5 through 8 allows remote attackers to cause a denial of service (memory consumption and application crash) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jp32-cjwg-36rw/GHSA-jp32-cjwg-36rw.json b/advisories/unreviewed/2022/05/GHSA-jp32-cjwg-36rw/GHSA-jp32-cjwg-36rw.json index ec0e5fd699a..a2ca9f6eca0 100644 --- a/advisories/unreviewed/2022/05/GHSA-jp32-cjwg-36rw/GHSA-jp32-cjwg-36rw.json +++ b/advisories/unreviewed/2022/05/GHSA-jp32-cjwg-36rw/GHSA-jp32-cjwg-36rw.json @@ -7,12 +7,8 @@ "CVE-2009-2325" ], "details": "Directory traversal vulnerability in index.php in Clicknet CMS 2.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the side parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jvvw-4c7p-rr6q/GHSA-jvvw-4c7p-rr6q.json b/advisories/unreviewed/2022/05/GHSA-jvvw-4c7p-rr6q/GHSA-jvvw-4c7p-rr6q.json index acd212eba4c..90cc2b64e1b 100644 --- a/advisories/unreviewed/2022/05/GHSA-jvvw-4c7p-rr6q/GHSA-jvvw-4c7p-rr6q.json +++ b/advisories/unreviewed/2022/05/GHSA-jvvw-4c7p-rr6q/GHSA-jvvw-4c7p-rr6q.json @@ -7,12 +7,8 @@ "CVE-2009-2255" ], "details": "Zen Cart 1.3.8a, 1.3.8, and earlier does not require administrative authentication for admin/record_company.php, which allows remote attackers to execute arbitrary code by uploading a .php file via the record_company_image parameter in conjunction with a PATH_INFO of password_forgotten.php, then accessing this file via a direct request to the file in images/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jvx7-q77c-wfr7/GHSA-jvx7-q77c-wfr7.json b/advisories/unreviewed/2022/05/GHSA-jvx7-q77c-wfr7/GHSA-jvx7-q77c-wfr7.json index 32df52d51d6..e5b8ca073ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-jvx7-q77c-wfr7/GHSA-jvx7-q77c-wfr7.json +++ b/advisories/unreviewed/2022/05/GHSA-jvx7-q77c-wfr7/GHSA-jvx7-q77c-wfr7.json @@ -7,12 +7,8 @@ "CVE-2009-2547" ], "details": "Integer underflow in Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service (crash) via a VoIP over Network (VON) packet to port 2305 with a negative packet_size value, which triggers a buffer over-read.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jxcr-5w4r-w9w4/GHSA-jxcr-5w4r-w9w4.json b/advisories/unreviewed/2022/05/GHSA-jxcr-5w4r-w9w4/GHSA-jxcr-5w4r-w9w4.json index 10ed71de1b3..f2be7ed4435 100644 --- a/advisories/unreviewed/2022/05/GHSA-jxcr-5w4r-w9w4/GHSA-jxcr-5w4r-w9w4.json +++ b/advisories/unreviewed/2022/05/GHSA-jxcr-5w4r-w9w4/GHSA-jxcr-5w4r-w9w4.json @@ -7,12 +7,8 @@ "CVE-2009-2079" ], "details": "Cross-site scripting (XSS) vulnerability in the administrative page interface in Taxonomy manager 5.x before 5.x-1.2 and 6.x before 6.x-1.1, a module for Drupal, allows remote authenticated users, with administer taxonomy privileges or the ability to use free tagging to add taxonomy terms, to inject arbitrary web script or HTML via (1) vocabulary names, (2) synonyms, and (3) term names.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m35j-f245-626g/GHSA-m35j-f245-626g.json b/advisories/unreviewed/2022/05/GHSA-m35j-f245-626g/GHSA-m35j-f245-626g.json index dc1a7f3ddca..81cf5bfa0e6 100644 --- a/advisories/unreviewed/2022/05/GHSA-m35j-f245-626g/GHSA-m35j-f245-626g.json +++ b/advisories/unreviewed/2022/05/GHSA-m35j-f245-626g/GHSA-m35j-f245-626g.json @@ -7,12 +7,8 @@ "CVE-2009-2268" ], "details": "Cross-site scripting (XSS) vulnerability in the Cross-Domain Controller (CDC) servlet in Sun Java System Access Manager 6 2005Q1, 7 2005Q4, and 7.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m3f4-wc9w-4x5r/GHSA-m3f4-wc9w-4x5r.json b/advisories/unreviewed/2022/05/GHSA-m3f4-wc9w-4x5r/GHSA-m3f4-wc9w-4x5r.json index 03ca6aeb58d..5f5e7d86410 100644 --- a/advisories/unreviewed/2022/05/GHSA-m3f4-wc9w-4x5r/GHSA-m3f4-wc9w-4x5r.json +++ b/advisories/unreviewed/2022/05/GHSA-m3f4-wc9w-4x5r/GHSA-m3f4-wc9w-4x5r.json @@ -7,12 +7,8 @@ "CVE-2009-2452" ], "details": "Multiple unspecified vulnerabilities in Citrix Licensing 11.5 have unknown impact and attack vectors, related to \"underlying components of the License Management Console.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m4x9-9v5g-7v88/GHSA-m4x9-9v5g-7v88.json b/advisories/unreviewed/2022/05/GHSA-m4x9-9v5g-7v88/GHSA-m4x9-9v5g-7v88.json index 13431459021..3eca2fd237a 100644 --- a/advisories/unreviewed/2022/05/GHSA-m4x9-9v5g-7v88/GHSA-m4x9-9v5g-7v88.json +++ b/advisories/unreviewed/2022/05/GHSA-m4x9-9v5g-7v88/GHSA-m4x9-9v5g-7v88.json @@ -7,12 +7,8 @@ "CVE-2009-2009" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) curdirpath parameter to main/document/slideshow.php and the (2) file parameter to main/exercice/testheaderpage.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m69j-j4vr-8rcj/GHSA-m69j-j4vr-8rcj.json b/advisories/unreviewed/2022/05/GHSA-m69j-j4vr-8rcj/GHSA-m69j-j4vr-8rcj.json index 129838ecc16..bb2bf50db3e 100644 --- a/advisories/unreviewed/2022/05/GHSA-m69j-j4vr-8rcj/GHSA-m69j-j4vr-8rcj.json +++ b/advisories/unreviewed/2022/05/GHSA-m69j-j4vr-8rcj/GHSA-m69j-j4vr-8rcj.json @@ -7,12 +7,8 @@ "CVE-2009-2118" ], "details": "Integer overflow in IrfanView 4.23, when the resampling or screen fitting option is enabled, allows remote attackers to execute arbitrary code via a crafted TIFF 1 BPP image, which triggers a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m92q-826m-xc5f/GHSA-m92q-826m-xc5f.json b/advisories/unreviewed/2022/05/GHSA-m92q-826m-xc5f/GHSA-m92q-826m-xc5f.json index 9e274edcb2f..9d29f4fb040 100644 --- a/advisories/unreviewed/2022/05/GHSA-m92q-826m-xc5f/GHSA-m92q-826m-xc5f.json +++ b/advisories/unreviewed/2022/05/GHSA-m92q-826m-xc5f/GHSA-m92q-826m-xc5f.json @@ -7,12 +7,8 @@ "CVE-2009-2148" ], "details": "SQL injection vulnerability in news/index.php in Campus Virtual-LMS allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m9f8-cvc2-r5mx/GHSA-m9f8-cvc2-r5mx.json b/advisories/unreviewed/2022/05/GHSA-m9f8-cvc2-r5mx/GHSA-m9f8-cvc2-r5mx.json index 4dbc2abcd15..40b4722e65b 100644 --- a/advisories/unreviewed/2022/05/GHSA-m9f8-cvc2-r5mx/GHSA-m9f8-cvc2-r5mx.json +++ b/advisories/unreviewed/2022/05/GHSA-m9f8-cvc2-r5mx/GHSA-m9f8-cvc2-r5mx.json @@ -7,12 +7,8 @@ "CVE-2009-2087" ], "details": "The Web Services functionality in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5, in certain circumstances involving the ibm-webservicesclient-bind.xmi file and custom password encryption, uses weak password obfuscation, which allows local users to cause a denial of service (deployment failure) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mc68-3chj-wmp4/GHSA-mc68-3chj-wmp4.json b/advisories/unreviewed/2022/05/GHSA-mc68-3chj-wmp4/GHSA-mc68-3chj-wmp4.json index 545cab997b6..23494dd37d2 100644 --- a/advisories/unreviewed/2022/05/GHSA-mc68-3chj-wmp4/GHSA-mc68-3chj-wmp4.json +++ b/advisories/unreviewed/2022/05/GHSA-mc68-3chj-wmp4/GHSA-mc68-3chj-wmp4.json @@ -7,12 +7,8 @@ "CVE-2009-2056" ], "details": "Cisco IOS XR 3.8.1 and earlier allows remote authenticated users to cause a denial of service (process crash) via vectors involving a BGP UPDATE message with many AS numbers prepended to the AS path.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mcx8-qrwm-525r/GHSA-mcx8-qrwm-525r.json b/advisories/unreviewed/2022/05/GHSA-mcx8-qrwm-525r/GHSA-mcx8-qrwm-525r.json index d6fb554cbd6..6f1167d9eac 100644 --- a/advisories/unreviewed/2022/05/GHSA-mcx8-qrwm-525r/GHSA-mcx8-qrwm-525r.json +++ b/advisories/unreviewed/2022/05/GHSA-mcx8-qrwm-525r/GHSA-mcx8-qrwm-525r.json @@ -7,12 +7,8 @@ "CVE-2009-2201" ], "details": "The screensharing feature in the Admin application in Apple Xsan before 2.2 places a cleartext username and password in a URL within an error dialog, which allows physically proximate attackers to obtain credentials by reading this dialog.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mfqq-vjgh-p2ff/GHSA-mfqq-vjgh-p2ff.json b/advisories/unreviewed/2022/05/GHSA-mfqq-vjgh-p2ff/GHSA-mfqq-vjgh-p2ff.json index 95728aea66f..7be776fdc81 100644 --- a/advisories/unreviewed/2022/05/GHSA-mfqq-vjgh-p2ff/GHSA-mfqq-vjgh-p2ff.json +++ b/advisories/unreviewed/2022/05/GHSA-mfqq-vjgh-p2ff/GHSA-mfqq-vjgh-p2ff.json @@ -7,12 +7,8 @@ "CVE-2009-2380" ], "details": "Cross-site scripting (XSS) vulnerability in includes/functions.php in 4images 1.7 through 1.7.7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the url variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mg4r-6wqc-c2mf/GHSA-mg4r-6wqc-c2mf.json b/advisories/unreviewed/2022/05/GHSA-mg4r-6wqc-c2mf/GHSA-mg4r-6wqc-c2mf.json index b92af8ebaba..8f5070f05a6 100644 --- a/advisories/unreviewed/2022/05/GHSA-mg4r-6wqc-c2mf/GHSA-mg4r-6wqc-c2mf.json +++ b/advisories/unreviewed/2022/05/GHSA-mg4r-6wqc-c2mf/GHSA-mg4r-6wqc-c2mf.json @@ -7,12 +7,8 @@ "CVE-2009-2558" ], "details": "system/message.php in Admin News Tools 2.5 does not properly restrict access, which allows remote attackers to post news messages via a direct request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mg86-2vf3-5mjq/GHSA-mg86-2vf3-5mjq.json b/advisories/unreviewed/2022/05/GHSA-mg86-2vf3-5mjq/GHSA-mg86-2vf3-5mjq.json index f97cdd52140..b5175c5e552 100644 --- a/advisories/unreviewed/2022/05/GHSA-mg86-2vf3-5mjq/GHSA-mg86-2vf3-5mjq.json +++ b/advisories/unreviewed/2022/05/GHSA-mg86-2vf3-5mjq/GHSA-mg86-2vf3-5mjq.json @@ -7,12 +7,8 @@ "CVE-2009-1998" ], "details": "Unspecified vulnerability in the Oracle Communications Order and Service Management component in Oracle Industry Applications 2.8.0, 6.2.0, 6.3.0, and 6.3.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mh3v-4rgv-c829/GHSA-mh3v-4rgv-c829.json b/advisories/unreviewed/2022/05/GHSA-mh3v-4rgv-c829/GHSA-mh3v-4rgv-c829.json index 320958e0c54..3d006169ea0 100644 --- a/advisories/unreviewed/2022/05/GHSA-mh3v-4rgv-c829/GHSA-mh3v-4rgv-c829.json +++ b/advisories/unreviewed/2022/05/GHSA-mh3v-4rgv-c829/GHSA-mh3v-4rgv-c829.json @@ -7,12 +7,8 @@ "CVE-2009-2152" ], "details": "SQL injection vulnerability in a_index.php in AdaptWeb 0.9.2 allows remote attackers to execute arbitrary SQL commands via the CodigoDisciplina parameter in a TopicosCadastro1 action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mh54-522r-8782/GHSA-mh54-522r-8782.json b/advisories/unreviewed/2022/05/GHSA-mh54-522r-8782/GHSA-mh54-522r-8782.json index 75f1de6f71a..f0814cc459f 100644 --- a/advisories/unreviewed/2022/05/GHSA-mh54-522r-8782/GHSA-mh54-522r-8782.json +++ b/advisories/unreviewed/2022/05/GHSA-mh54-522r-8782/GHSA-mh54-522r-8782.json @@ -7,12 +7,8 @@ "CVE-2009-1974" ], "details": "Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Servlet Container Package.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mpq3-rc62-w4vm/GHSA-mpq3-rc62-w4vm.json b/advisories/unreviewed/2022/05/GHSA-mpq3-rc62-w4vm/GHSA-mpq3-rc62-w4vm.json index 3b12fa4c3fc..5a306e15954 100644 --- a/advisories/unreviewed/2022/05/GHSA-mpq3-rc62-w4vm/GHSA-mpq3-rc62-w4vm.json +++ b/advisories/unreviewed/2022/05/GHSA-mpq3-rc62-w4vm/GHSA-mpq3-rc62-w4vm.json @@ -7,12 +7,8 @@ "CVE-2009-2571" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in VerliAdmin 0.3.7 and 0.3.8 allow remote attackers to inject arbitrary web script or HTML via (1) the URI, (2) the q parameter, (3) the nick parameter, or (4) the nick parameter in a bantest action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mq7m-9xgj-476p/GHSA-mq7m-9xgj-476p.json b/advisories/unreviewed/2022/05/GHSA-mq7m-9xgj-476p/GHSA-mq7m-9xgj-476p.json index 840dc9de2d5..8be3a209733 100644 --- a/advisories/unreviewed/2022/05/GHSA-mq7m-9xgj-476p/GHSA-mq7m-9xgj-476p.json +++ b/advisories/unreviewed/2022/05/GHSA-mq7m-9xgj-476p/GHSA-mq7m-9xgj-476p.json @@ -7,12 +7,8 @@ "CVE-2009-2226" ], "details": "Cross-site scripting (XSS) vulnerability in Let's PHP! Tree BBS 2004/11/23 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mqcc-6c28-c652/GHSA-mqcc-6c28-c652.json b/advisories/unreviewed/2022/05/GHSA-mqcc-6c28-c652/GHSA-mqcc-6c28-c652.json index b2c55f17bd7..55cf4bb08c0 100644 --- a/advisories/unreviewed/2022/05/GHSA-mqcc-6c28-c652/GHSA-mqcc-6c28-c652.json +++ b/advisories/unreviewed/2022/05/GHSA-mqcc-6c28-c652/GHSA-mqcc-6c28-c652.json @@ -7,12 +7,8 @@ "CVE-2009-2393" ], "details": "admin/index.php in Virtuenetz Virtue Online Test Generator does not require administrative privileges, which allows remote authenticated users to have an unknown impact via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mrw3-g74m-r724/GHSA-mrw3-g74m-r724.json b/advisories/unreviewed/2022/05/GHSA-mrw3-g74m-r724/GHSA-mrw3-g74m-r724.json index d2d1e35bc7b..ce485672f38 100644 --- a/advisories/unreviewed/2022/05/GHSA-mrw3-g74m-r724/GHSA-mrw3-g74m-r724.json +++ b/advisories/unreviewed/2022/05/GHSA-mrw3-g74m-r724/GHSA-mrw3-g74m-r724.json @@ -7,12 +7,8 @@ "CVE-2009-2458" ], "details": "Unspecified vulnerability in Sun Fire V215 Server, when using XVR-100 graphic cards on system boards with part number 375-3463 and a hardware dash level -04 or later, allows remote attackers to cause a denial of service (panic) via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mvfx-gq6c-f353/GHSA-mvfx-gq6c-f353.json b/advisories/unreviewed/2022/05/GHSA-mvfx-gq6c-f353/GHSA-mvfx-gq6c-f353.json index 69e81f359f5..aa47f2de49f 100644 --- a/advisories/unreviewed/2022/05/GHSA-mvfx-gq6c-f353/GHSA-mvfx-gq6c-f353.json +++ b/advisories/unreviewed/2022/05/GHSA-mvfx-gq6c-f353/GHSA-mvfx-gq6c-f353.json @@ -7,12 +7,8 @@ "CVE-2009-2189" ], "details": "The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does not limit the rate of (1) Router Advertisement and (2) Neighbor Discovery packets, which allows remote attackers to cause a denial of service (resource consumption and device restart) by sending many packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mxvw-6j8c-q2m2/GHSA-mxvw-6j8c-q2m2.json b/advisories/unreviewed/2022/05/GHSA-mxvw-6j8c-q2m2/GHSA-mxvw-6j8c-q2m2.json index 8d169dda079..8f55babd9d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxvw-6j8c-q2m2/GHSA-mxvw-6j8c-q2m2.json +++ b/advisories/unreviewed/2022/05/GHSA-mxvw-6j8c-q2m2/GHSA-mxvw-6j8c-q2m2.json @@ -7,12 +7,8 @@ "CVE-2009-2099" ], "details": "SQL injection vulnerability in the iJoomla RSS Feeder (com_ijoomla_rss) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in an xml action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p43p-g2pm-w7p8/GHSA-p43p-g2pm-w7p8.json b/advisories/unreviewed/2022/05/GHSA-p43p-g2pm-w7p8/GHSA-p43p-g2pm-w7p8.json index 2219ee08645..f9e1d88344b 100644 --- a/advisories/unreviewed/2022/05/GHSA-p43p-g2pm-w7p8/GHSA-p43p-g2pm-w7p8.json +++ b/advisories/unreviewed/2022/05/GHSA-p43p-g2pm-w7p8/GHSA-p43p-g2pm-w7p8.json @@ -7,12 +7,8 @@ "CVE-2009-2362" ], "details": "Stack-based buffer overflow in KUDRSOFT AudioPLUS 2.0.0.215 allows remote attackers to execute arbitrary code via a long string in a (1) .lst or (2) .m3u playlist file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p54g-mf9q-782r/GHSA-p54g-mf9q-782r.json b/advisories/unreviewed/2022/05/GHSA-p54g-mf9q-782r/GHSA-p54g-mf9q-782r.json index a6f2b77bdf4..8145ba63f99 100644 --- a/advisories/unreviewed/2022/05/GHSA-p54g-mf9q-782r/GHSA-p54g-mf9q-782r.json +++ b/advisories/unreviewed/2022/05/GHSA-p54g-mf9q-782r/GHSA-p54g-mf9q-782r.json @@ -7,12 +7,8 @@ "CVE-2009-1979" ], "details": "Unspecified vulnerability in the Network Authentication component in Oracle Database 10.1.0.5 and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2009 CPU. Oracle has not commented on claims from an independent researcher that this is related to improper validation of the AUTH_SESSKEY parameter length that leads to arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p5gm-4836-g2w5/GHSA-p5gm-4836-g2w5.json b/advisories/unreviewed/2022/05/GHSA-p5gm-4836-g2w5/GHSA-p5gm-4836-g2w5.json index 803395afedc..3ddb62014b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-p5gm-4836-g2w5/GHSA-p5gm-4836-g2w5.json +++ b/advisories/unreviewed/2022/05/GHSA-p5gm-4836-g2w5/GHSA-p5gm-4836-g2w5.json @@ -7,12 +7,8 @@ "CVE-2009-2319" ], "details": "The default configuration of the Wi-Fi component on the Axesstel MV 410R does not use encryption, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p67h-5cwv-hq8r/GHSA-p67h-5cwv-hq8r.json b/advisories/unreviewed/2022/05/GHSA-p67h-5cwv-hq8r/GHSA-p67h-5cwv-hq8r.json index f47d169efff..4a2fa893136 100644 --- a/advisories/unreviewed/2022/05/GHSA-p67h-5cwv-hq8r/GHSA-p67h-5cwv-hq8r.json +++ b/advisories/unreviewed/2022/05/GHSA-p67h-5cwv-hq8r/GHSA-p67h-5cwv-hq8r.json @@ -7,12 +7,8 @@ "CVE-2009-2000" ], "details": "Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.7 allows remote attackers to affect confidentiality via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p7pf-x444-qg77/GHSA-p7pf-x444-qg77.json b/advisories/unreviewed/2022/05/GHSA-p7pf-x444-qg77/GHSA-p7pf-x444-qg77.json index 99361623102..268b5068fc6 100644 --- a/advisories/unreviewed/2022/05/GHSA-p7pf-x444-qg77/GHSA-p7pf-x444-qg77.json +++ b/advisories/unreviewed/2022/05/GHSA-p7pf-x444-qg77/GHSA-p7pf-x444-qg77.json @@ -7,12 +7,8 @@ "CVE-2009-2399" ], "details": "PHP remote file inclusion vulnerability in dm-albums/template/album.php in DM FileManager 3.9.4, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITY_FILE parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p7q9-mj2f-crg9/GHSA-p7q9-mj2f-crg9.json b/advisories/unreviewed/2022/05/GHSA-p7q9-mj2f-crg9/GHSA-p7q9-mj2f-crg9.json index dbe7bff415e..19dbadcc8d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-p7q9-mj2f-crg9/GHSA-p7q9-mj2f-crg9.json +++ b/advisories/unreviewed/2022/05/GHSA-p7q9-mj2f-crg9/GHSA-p7q9-mj2f-crg9.json @@ -7,12 +7,8 @@ "CVE-2009-2104" ], "details": "Cross-site scripting (XSS) vulnerability in the Modern Guestbook / Commenting System (ve_guestbook) extension 2.7.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p823-qr2p-j2x5/GHSA-p823-qr2p-j2x5.json b/advisories/unreviewed/2022/05/GHSA-p823-qr2p-j2x5/GHSA-p823-qr2p-j2x5.json index 0699708df51..16614d25127 100644 --- a/advisories/unreviewed/2022/05/GHSA-p823-qr2p-j2x5/GHSA-p823-qr2p-j2x5.json +++ b/advisories/unreviewed/2022/05/GHSA-p823-qr2p-j2x5/GHSA-p823-qr2p-j2x5.json @@ -7,12 +7,8 @@ "CVE-2009-2440" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in JNM Guestbook 3.0 allows remote attackers to inject arbitrary web script or HTML via the page parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p9vg-fw5v-fm75/GHSA-p9vg-fw5v-fm75.json b/advisories/unreviewed/2022/05/GHSA-p9vg-fw5v-fm75/GHSA-p9vg-fw5v-fm75.json index c2807ee3675..77bb120c831 100644 --- a/advisories/unreviewed/2022/05/GHSA-p9vg-fw5v-fm75/GHSA-p9vg-fw5v-fm75.json +++ b/advisories/unreviewed/2022/05/GHSA-p9vg-fw5v-fm75/GHSA-p9vg-fw5v-fm75.json @@ -7,12 +7,8 @@ "CVE-2009-1976" ], "details": "Unspecified vulnerability in the HTTP Server component in Oracle Application Server 10.1.2.3 allows remote attackers to affect integrity via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pc96-724m-2vxp/GHSA-pc96-724m-2vxp.json b/advisories/unreviewed/2022/05/GHSA-pc96-724m-2vxp/GHSA-pc96-724m-2vxp.json index 349a5cd9049..8fe456aadfb 100644 --- a/advisories/unreviewed/2022/05/GHSA-pc96-724m-2vxp/GHSA-pc96-724m-2vxp.json +++ b/advisories/unreviewed/2022/05/GHSA-pc96-724m-2vxp/GHSA-pc96-724m-2vxp.json @@ -7,12 +7,8 @@ "CVE-2009-2068" ], "details": "Google Chrome detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to \"HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pcxm-q3h4-prrq/GHSA-pcxm-q3h4-prrq.json b/advisories/unreviewed/2022/05/GHSA-pcxm-q3h4-prrq/GHSA-pcxm-q3h4-prrq.json index ee1dad149f3..5f4e64d4ba1 100644 --- a/advisories/unreviewed/2022/05/GHSA-pcxm-q3h4-prrq/GHSA-pcxm-q3h4-prrq.json +++ b/advisories/unreviewed/2022/05/GHSA-pcxm-q3h4-prrq/GHSA-pcxm-q3h4-prrq.json @@ -7,12 +7,8 @@ "CVE-2009-2471" ], "details": "The setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object wrapping, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted call, related to XPCNativeWrapper.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pf37-xpvh-73gx/GHSA-pf37-xpvh-73gx.json b/advisories/unreviewed/2022/05/GHSA-pf37-xpvh-73gx/GHSA-pf37-xpvh-73gx.json index 04109cc402b..d9b2998c1bb 100644 --- a/advisories/unreviewed/2022/05/GHSA-pf37-xpvh-73gx/GHSA-pf37-xpvh-73gx.json +++ b/advisories/unreviewed/2022/05/GHSA-pf37-xpvh-73gx/GHSA-pf37-xpvh-73gx.json @@ -7,12 +7,8 @@ "CVE-2009-2012" ], "details": "Unspecified vulnerability in idmap in Sun OpenSolaris snv_88 through snv_110, when a CIFS server is enabled, allows local users to cause a denial of service (idpmapd daemon crash and idmapd outage) via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pf98-qrgh-fjmm/GHSA-pf98-qrgh-fjmm.json b/advisories/unreviewed/2022/05/GHSA-pf98-qrgh-fjmm/GHSA-pf98-qrgh-fjmm.json index 5824fc618e0..a9f7e7edcae 100644 --- a/advisories/unreviewed/2022/05/GHSA-pf98-qrgh-fjmm/GHSA-pf98-qrgh-fjmm.json +++ b/advisories/unreviewed/2022/05/GHSA-pf98-qrgh-fjmm/GHSA-pf98-qrgh-fjmm.json @@ -7,12 +7,8 @@ "CVE-2009-2388" ], "details": "SQL injection vulnerability in admin/index.php in Opial 1.0 allows remote attackers to execute arbitrary SQL commands via the txtPassword parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pfc2-9qhm-x6x5/GHSA-pfc2-9qhm-x6x5.json b/advisories/unreviewed/2022/05/GHSA-pfc2-9qhm-x6x5/GHSA-pfc2-9qhm-x6x5.json index 9f8e8b1b54e..f5cf93d487a 100644 --- a/advisories/unreviewed/2022/05/GHSA-pfc2-9qhm-x6x5/GHSA-pfc2-9qhm-x6x5.json +++ b/advisories/unreviewed/2022/05/GHSA-pfc2-9qhm-x6x5/GHSA-pfc2-9qhm-x6x5.json @@ -7,12 +7,8 @@ "CVE-2009-1930" ], "details": "The Telnet service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows remote Telnet servers to execute arbitrary code on a client machine by replaying the NTLM credentials of a client user, aka \"Telnet Credential Reflection Vulnerability,\" a related issue to CVE-2000-0834.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pgw9-5whm-4494/GHSA-pgw9-5whm-4494.json b/advisories/unreviewed/2022/05/GHSA-pgw9-5whm-4494/GHSA-pgw9-5whm-4494.json index c109676214a..a7b052e539a 100644 --- a/advisories/unreviewed/2022/05/GHSA-pgw9-5whm-4494/GHSA-pgw9-5whm-4494.json +++ b/advisories/unreviewed/2022/05/GHSA-pgw9-5whm-4494/GHSA-pgw9-5whm-4494.json @@ -7,12 +7,8 @@ "CVE-2009-1945" ], "details": "SQL injection vulnerability in webCal3_detail.asp in WebCal 3.04 allows remote attackers to execute arbitrary SQL commands via the event_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pgx3-7h5c-ggf2/GHSA-pgx3-7h5c-ggf2.json b/advisories/unreviewed/2022/05/GHSA-pgx3-7h5c-ggf2/GHSA-pgx3-7h5c-ggf2.json index fab9f3d74ea..86585428533 100644 --- a/advisories/unreviewed/2022/05/GHSA-pgx3-7h5c-ggf2/GHSA-pgx3-7h5c-ggf2.json +++ b/advisories/unreviewed/2022/05/GHSA-pgx3-7h5c-ggf2/GHSA-pgx3-7h5c-ggf2.json @@ -7,12 +7,8 @@ "CVE-2009-2457" ], "details": "The DS\\NDSD component in Novell eDirectory 8.8 before SP5 allows remote attackers to cause a denial of service (crash) via a malformed bind LDAP packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-phf5-35mw-v3wq/GHSA-phf5-35mw-v3wq.json b/advisories/unreviewed/2022/05/GHSA-phf5-35mw-v3wq/GHSA-phf5-35mw-v3wq.json index e5acc8ed00a..ebca73d09fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-phf5-35mw-v3wq/GHSA-phf5-35mw-v3wq.json +++ b/advisories/unreviewed/2022/05/GHSA-phf5-35mw-v3wq/GHSA-phf5-35mw-v3wq.json @@ -7,12 +7,8 @@ "CVE-2009-2368" ], "details": "Unspecified vulnerability in Socks Server 5 before 3.7.8-8 has unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-phr7-7gxr-wmj9/GHSA-phr7-7gxr-wmj9.json b/advisories/unreviewed/2022/05/GHSA-phr7-7gxr-wmj9/GHSA-phr7-7gxr-wmj9.json index b015629121a..9927c66f840 100644 --- a/advisories/unreviewed/2022/05/GHSA-phr7-7gxr-wmj9/GHSA-phr7-7gxr-wmj9.json +++ b/advisories/unreviewed/2022/05/GHSA-phr7-7gxr-wmj9/GHSA-phr7-7gxr-wmj9.json @@ -7,12 +7,8 @@ "CVE-2009-2316" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in IBM Tivoli Identity Manager (ITIM) 5.0 allow remote attackers to inject arbitrary web script or HTML by entering an unspecified URL in (1) the self-service UI interface or (2) the console interface. NOTE: it was later reported that 4.6.0 is also affected by the first vector.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-phx4-phq2-rjfc/GHSA-phx4-phq2-rjfc.json b/advisories/unreviewed/2022/05/GHSA-phx4-phq2-rjfc/GHSA-phx4-phq2-rjfc.json index 8adbd153498..dbd7acbde64 100644 --- a/advisories/unreviewed/2022/05/GHSA-phx4-phq2-rjfc/GHSA-phx4-phq2-rjfc.json +++ b/advisories/unreviewed/2022/05/GHSA-phx4-phq2-rjfc/GHSA-phx4-phq2-rjfc.json @@ -7,12 +7,8 @@ "CVE-2009-1922" ], "details": "The Message Queuing (aka MSMQ) service for Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP2, and Vista Gold does not properly validate unspecified IOCTL request data from user mode before passing this data to kernel mode, which allows local users to gain privileges via a crafted request, aka \"MSMQ Null Pointer Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pjc7-3xhj-pmwq/GHSA-pjc7-3xhj-pmwq.json b/advisories/unreviewed/2022/05/GHSA-pjc7-3xhj-pmwq/GHSA-pjc7-3xhj-pmwq.json index e61f030e77a..a13908afd96 100644 --- a/advisories/unreviewed/2022/05/GHSA-pjc7-3xhj-pmwq/GHSA-pjc7-3xhj-pmwq.json +++ b/advisories/unreviewed/2022/05/GHSA-pjc7-3xhj-pmwq/GHSA-pjc7-3xhj-pmwq.json @@ -7,12 +7,8 @@ "CVE-2009-2741" ], "details": "Unspecified vulnerability in the wberuntimeear application in the test servlet in IBM WebSphere Business Events 6.1 and 6.2 allows remote attackers to execute arbitrary code via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pm9j-fmr9-h964/GHSA-pm9j-fmr9-h964.json b/advisories/unreviewed/2022/05/GHSA-pm9j-fmr9-h964/GHSA-pm9j-fmr9-h964.json index 92cee7b6fe1..c530f182854 100644 --- a/advisories/unreviewed/2022/05/GHSA-pm9j-fmr9-h964/GHSA-pm9j-fmr9-h964.json +++ b/advisories/unreviewed/2022/05/GHSA-pm9j-fmr9-h964/GHSA-pm9j-fmr9-h964.json @@ -7,12 +7,8 @@ "CVE-2009-1958" ], "details": "charon/sa/tasks/child_create.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL checks for TSi and TSr payloads, which allows remote attackers to cause a denial of service via an IKE_AUTH request without a (1) TSi or (2) TSr traffic selector.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pmv5-rqxh-9rpv/GHSA-pmv5-rqxh-9rpv.json b/advisories/unreviewed/2022/05/GHSA-pmv5-rqxh-9rpv/GHSA-pmv5-rqxh-9rpv.json index 7ce9a5b08aa..dacbf6f247f 100644 --- a/advisories/unreviewed/2022/05/GHSA-pmv5-rqxh-9rpv/GHSA-pmv5-rqxh-9rpv.json +++ b/advisories/unreviewed/2022/05/GHSA-pmv5-rqxh-9rpv/GHSA-pmv5-rqxh-9rpv.json @@ -7,12 +7,8 @@ "CVE-2009-2447" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in ogp_show.php in Online Guestbook Pro 5.1 allow remote attackers to inject arbitrary web script or HTML via the (1) search or (2) display parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ppv9-mhh3-6g69/GHSA-ppv9-mhh3-6g69.json b/advisories/unreviewed/2022/05/GHSA-ppv9-mhh3-6g69/GHSA-ppv9-mhh3-6g69.json index e9e2093b69e..dd0c80d9040 100644 --- a/advisories/unreviewed/2022/05/GHSA-ppv9-mhh3-6g69/GHSA-ppv9-mhh3-6g69.json +++ b/advisories/unreviewed/2022/05/GHSA-ppv9-mhh3-6g69/GHSA-ppv9-mhh3-6g69.json @@ -7,12 +7,8 @@ "CVE-2009-2115" ], "details": "admin.php in SkyBlueCanvas 1.1 r237 allows remote authenticated administrators to obtain sensitive information via an invalid id parameter, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pqw6-9pgr-fr4x/GHSA-pqw6-9pgr-fr4x.json b/advisories/unreviewed/2022/05/GHSA-pqw6-9pgr-fr4x/GHSA-pqw6-9pgr-fr4x.json index 92e60707d99..ef5705cfe1a 100644 --- a/advisories/unreviewed/2022/05/GHSA-pqw6-9pgr-fr4x/GHSA-pqw6-9pgr-fr4x.json +++ b/advisories/unreviewed/2022/05/GHSA-pqw6-9pgr-fr4x/GHSA-pqw6-9pgr-fr4x.json @@ -7,12 +7,8 @@ "CVE-2009-2058" ], "details": "Apple Safari before 3.2.2 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an \"SSL tampering\" attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pwhc-6vjg-8jh2/GHSA-pwhc-6vjg-8jh2.json b/advisories/unreviewed/2022/05/GHSA-pwhc-6vjg-8jh2/GHSA-pwhc-6vjg-8jh2.json index 1982411b6b3..0b49c0364a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-pwhc-6vjg-8jh2/GHSA-pwhc-6vjg-8jh2.json +++ b/advisories/unreviewed/2022/05/GHSA-pwhc-6vjg-8jh2/GHSA-pwhc-6vjg-8jh2.json @@ -7,12 +7,8 @@ "CVE-2009-2114" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in admin.php in SkyBlueCanvas 1.1 r237 allow remote attackers to inject arbitrary web script or HTML via the (1) mgroup, (2) mgr, (3) objtype, (4) id, and (5) dir parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-px2h-xv8p-wffv/GHSA-px2h-xv8p-wffv.json b/advisories/unreviewed/2022/05/GHSA-px2h-xv8p-wffv/GHSA-px2h-xv8p-wffv.json index 495f99a0a67..c4d9b313bee 100644 --- a/advisories/unreviewed/2022/05/GHSA-px2h-xv8p-wffv/GHSA-px2h-xv8p-wffv.json +++ b/advisories/unreviewed/2022/05/GHSA-px2h-xv8p-wffv/GHSA-px2h-xv8p-wffv.json @@ -7,12 +7,8 @@ "CVE-2009-2570" ], "details": "Stack-based buffer overflow in the Symantec.FaxViewerControl.1 ActiveX control in WinFax\\DCCFAXVW.DLL in Symantec WinFax Pro 10.03 allows remote attackers to execute arbitrary code via a long argument to the AppendFax method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-px8q-fjrw-66qc/GHSA-px8q-fjrw-66qc.json b/advisories/unreviewed/2022/05/GHSA-px8q-fjrw-66qc/GHSA-px8q-fjrw-66qc.json index 181d569898d..e7a67a022c0 100644 --- a/advisories/unreviewed/2022/05/GHSA-px8q-fjrw-66qc/GHSA-px8q-fjrw-66qc.json +++ b/advisories/unreviewed/2022/05/GHSA-px8q-fjrw-66qc/GHSA-px8q-fjrw-66qc.json @@ -7,12 +7,8 @@ "CVE-2009-1990" ], "details": "Unspecified vulnerability in the Business Intelligence Enterprise Edition component in Oracle Application Server 10.1.3.4.1 allows local users to affect confidentiality via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q48j-6v3w-g92f/GHSA-q48j-6v3w-g92f.json b/advisories/unreviewed/2022/05/GHSA-q48j-6v3w-g92f/GHSA-q48j-6v3w-g92f.json index 447bcb7785c..2b8331edb9d 100644 --- a/advisories/unreviewed/2022/05/GHSA-q48j-6v3w-g92f/GHSA-q48j-6v3w-g92f.json +++ b/advisories/unreviewed/2022/05/GHSA-q48j-6v3w-g92f/GHSA-q48j-6v3w-g92f.json @@ -7,12 +7,8 @@ "CVE-2009-2066" ], "details": "Apple Safari detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to \"HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q4g6-cqqm-v5xw/GHSA-q4g6-cqqm-v5xw.json b/advisories/unreviewed/2022/05/GHSA-q4g6-cqqm-v5xw/GHSA-q4g6-cqqm-v5xw.json index 8ec4bdd735f..bb1edb4c7fa 100644 --- a/advisories/unreviewed/2022/05/GHSA-q4g6-cqqm-v5xw/GHSA-q4g6-cqqm-v5xw.json +++ b/advisories/unreviewed/2022/05/GHSA-q4g6-cqqm-v5xw/GHSA-q4g6-cqqm-v5xw.json @@ -7,12 +7,8 @@ "CVE-2009-2290" ], "details": "SQL injection vulnerability in the Boy Scout Advancement (com_bsadv) component 0.3 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a (1) account or (2) event task to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q4v2-h6h4-cgv4/GHSA-q4v2-h6h4-cgv4.json b/advisories/unreviewed/2022/05/GHSA-q4v2-h6h4-cgv4/GHSA-q4v2-h6h4-cgv4.json index c3a5f403c7a..87637991db8 100644 --- a/advisories/unreviewed/2022/05/GHSA-q4v2-h6h4-cgv4/GHSA-q4v2-h6h4-cgv4.json +++ b/advisories/unreviewed/2022/05/GHSA-q4v2-h6h4-cgv4/GHSA-q4v2-h6h4-cgv4.json @@ -7,12 +7,8 @@ "CVE-2009-2187" ], "details": "Multiple memory leaks in the (1) IP and (2) IPv6 multicast implementation in the kernel in Sun Solaris 10, and OpenSolaris snv_67 through snv_93, allow local users to cause a denial of service (memory consumption) via vectors related to the association of (a) DL_ENABMULTI_REQ and (b) DL_DISABMULTI_REQ messages with ARP messages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q4wr-x53p-mqh6/GHSA-q4wr-x53p-mqh6.json b/advisories/unreviewed/2022/05/GHSA-q4wr-x53p-mqh6/GHSA-q4wr-x53p-mqh6.json index 6262506dd15..de3e7db5363 100644 --- a/advisories/unreviewed/2022/05/GHSA-q4wr-x53p-mqh6/GHSA-q4wr-x53p-mqh6.json +++ b/advisories/unreviewed/2022/05/GHSA-q4wr-x53p-mqh6/GHSA-q4wr-x53p-mqh6.json @@ -7,12 +7,8 @@ "CVE-2009-1993" ], "details": "Unspecified vulnerability in the Application Express component in Oracle Database 3.0.1 allows remote authenticated users to affect confidentiality and integrity, related to FLOWS_030000.WWV_EXECUTE_IMMEDIATE.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q537-p4r4-mhjx/GHSA-q537-p4r4-mhjx.json b/advisories/unreviewed/2022/05/GHSA-q537-p4r4-mhjx/GHSA-q537-p4r4-mhjx.json index aa94c2e0f93..e784dfb4b70 100644 --- a/advisories/unreviewed/2022/05/GHSA-q537-p4r4-mhjx/GHSA-q537-p4r4-mhjx.json +++ b/advisories/unreviewed/2022/05/GHSA-q537-p4r4-mhjx/GHSA-q537-p4r4-mhjx.json @@ -7,12 +7,8 @@ "CVE-2009-2126" ], "details": "Cross-site scripting (XSS) vulnerability in close_bug.php in Elvin before 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the title (aka subject) field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q55r-8w3j-vfv2/GHSA-q55r-8w3j-vfv2.json b/advisories/unreviewed/2022/05/GHSA-q55r-8w3j-vfv2/GHSA-q55r-8w3j-vfv2.json index 7c3c2bdc5a1..1b6b279d507 100644 --- a/advisories/unreviewed/2022/05/GHSA-q55r-8w3j-vfv2/GHSA-q55r-8w3j-vfv2.json +++ b/advisories/unreviewed/2022/05/GHSA-q55r-8w3j-vfv2/GHSA-q55r-8w3j-vfv2.json @@ -7,12 +7,8 @@ "CVE-2009-2308" ], "details": "Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation (aka Affiliates) module 1.1.0 and earlier for PunBB allow remote attackers to execute arbitrary SQL commands via the (1) in or (2) out parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q5p7-3m7c-3878/GHSA-q5p7-3m7c-3878.json b/advisories/unreviewed/2022/05/GHSA-q5p7-3m7c-3878/GHSA-q5p7-3m7c-3878.json index 145b3169c49..a463b29bcf8 100644 --- a/advisories/unreviewed/2022/05/GHSA-q5p7-3m7c-3878/GHSA-q5p7-3m7c-3878.json +++ b/advisories/unreviewed/2022/05/GHSA-q5p7-3m7c-3878/GHSA-q5p7-3m7c-3878.json @@ -7,12 +7,8 @@ "CVE-2009-2370" ], "details": "Cross-site scripting (XSS) vulnerability in Advanced Forum 5.x before 5.x-1.1 and 6.x before 6.x-1.1, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q6m8-j9h7-334r/GHSA-q6m8-j9h7-334r.json b/advisories/unreviewed/2022/05/GHSA-q6m8-j9h7-334r/GHSA-q6m8-j9h7-334r.json index 6d6f63d58c4..780670df473 100644 --- a/advisories/unreviewed/2022/05/GHSA-q6m8-j9h7-334r/GHSA-q6m8-j9h7-334r.json +++ b/advisories/unreviewed/2022/05/GHSA-q6m8-j9h7-334r/GHSA-q6m8-j9h7-334r.json @@ -7,12 +7,8 @@ "CVE-2009-2313" ], "details": "Directory traversal vulnerability in index.php in Jinzora Media Jukebox 2.8 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the name parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q8f5-jfgc-wgv5/GHSA-q8f5-jfgc-wgv5.json b/advisories/unreviewed/2022/05/GHSA-q8f5-jfgc-wgv5/GHSA-q8f5-jfgc-wgv5.json index 0fcd3017177..31f427b88a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-q8f5-jfgc-wgv5/GHSA-q8f5-jfgc-wgv5.json +++ b/advisories/unreviewed/2022/05/GHSA-q8f5-jfgc-wgv5/GHSA-q8f5-jfgc-wgv5.json @@ -7,12 +7,8 @@ "CVE-2009-2567" ], "details": "SQL injection vulnerability in the Almond Classifieds (com_aclassf) component 5.6.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q8wr-mc75-9wjp/GHSA-q8wr-mc75-9wjp.json b/advisories/unreviewed/2022/05/GHSA-q8wr-mc75-9wjp/GHSA-q8wr-mc75-9wjp.json index 009ffd983ef..614c810a20e 100644 --- a/advisories/unreviewed/2022/05/GHSA-q8wr-mc75-9wjp/GHSA-q8wr-mc75-9wjp.json +++ b/advisories/unreviewed/2022/05/GHSA-q8wr-mc75-9wjp/GHSA-q8wr-mc75-9wjp.json @@ -7,12 +7,8 @@ "CVE-2009-2446" ], "details": "Multiple format string vulnerabilities in the dispatch_command function in libmysqld/sql_parse.cc in mysqld in MySQL 4.0.0 through 5.0.83 allow remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in a database name in a (1) COM_CREATE_DB or (2) COM_DROP_DB request. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q9wj-wcmj-8r7j/GHSA-q9wj-wcmj-8r7j.json b/advisories/unreviewed/2022/05/GHSA-q9wj-wcmj-8r7j/GHSA-q9wj-wcmj-8r7j.json index 7a727103fab..dd2cee54249 100644 --- a/advisories/unreviewed/2022/05/GHSA-q9wj-wcmj-8r7j/GHSA-q9wj-wcmj-8r7j.json +++ b/advisories/unreviewed/2022/05/GHSA-q9wj-wcmj-8r7j/GHSA-q9wj-wcmj-8r7j.json @@ -7,12 +7,8 @@ "CVE-2009-2748" ], "details": "Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.29 and 7.1 before 7.0.0.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qc63-fx82-fmqf/GHSA-qc63-fx82-fmqf.json b/advisories/unreviewed/2022/05/GHSA-qc63-fx82-fmqf/GHSA-qc63-fx82-fmqf.json index 0cd81f40caf..781cbc1e2bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-qc63-fx82-fmqf/GHSA-qc63-fx82-fmqf.json +++ b/advisories/unreviewed/2022/05/GHSA-qc63-fx82-fmqf/GHSA-qc63-fx82-fmqf.json @@ -7,12 +7,8 @@ "CVE-2009-2181" ], "details": "Cross-site scripting (XSS) vulnerability in admin-files/templates/list_dir.php in Campsite 3.3.0 RC1 allows remote attackers to inject arbitrary web script or HTML via the listbasedir parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qfhp-cf5p-v49w/GHSA-qfhp-cf5p-v49w.json b/advisories/unreviewed/2022/05/GHSA-qfhp-cf5p-v49w/GHSA-qfhp-cf5p-v49w.json index b4dcef9f675..6d30133699f 100644 --- a/advisories/unreviewed/2022/05/GHSA-qfhp-cf5p-v49w/GHSA-qfhp-cf5p-v49w.json +++ b/advisories/unreviewed/2022/05/GHSA-qfhp-cf5p-v49w/GHSA-qfhp-cf5p-v49w.json @@ -7,12 +7,8 @@ "CVE-2009-2069" ], "details": "Microsoft Internet Explorer before 8 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qfx6-gjvm-grhg/GHSA-qfx6-gjvm-grhg.json b/advisories/unreviewed/2022/05/GHSA-qfx6-gjvm-grhg/GHSA-qfx6-gjvm-grhg.json index ce78101e2a4..4901ac54fa9 100644 --- a/advisories/unreviewed/2022/05/GHSA-qfx6-gjvm-grhg/GHSA-qfx6-gjvm-grhg.json +++ b/advisories/unreviewed/2022/05/GHSA-qfx6-gjvm-grhg/GHSA-qfx6-gjvm-grhg.json @@ -7,12 +7,8 @@ "CVE-2009-2328" ], "details": "admin/edit_user.php in KerviNet Forum 1.1 and earlier does not require administrative authentication, which allows remote attackers to delete arbitrary accounts and conduct SQL injection attacks via the del_user_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qhcw-5j3h-wgx3/GHSA-qhcw-5j3h-wgx3.json b/advisories/unreviewed/2022/05/GHSA-qhcw-5j3h-wgx3/GHSA-qhcw-5j3h-wgx3.json index 20eeb1ea5c1..82589851adf 100644 --- a/advisories/unreviewed/2022/05/GHSA-qhcw-5j3h-wgx3/GHSA-qhcw-5j3h-wgx3.json +++ b/advisories/unreviewed/2022/05/GHSA-qhcw-5j3h-wgx3/GHSA-qhcw-5j3h-wgx3.json @@ -7,12 +7,8 @@ "CVE-2009-2433" ], "details": "Stack-based buffer overflow in the AddFavorite method in Microsoft Internet Explorer allows remote attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a long URL in the first argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qj8c-mx4x-hh37/GHSA-qj8c-mx4x-hh37.json b/advisories/unreviewed/2022/05/GHSA-qj8c-mx4x-hh37/GHSA-qj8c-mx4x-hh37.json index 909eb0e7d52..4f41266176b 100644 --- a/advisories/unreviewed/2022/05/GHSA-qj8c-mx4x-hh37/GHSA-qj8c-mx4x-hh37.json +++ b/advisories/unreviewed/2022/05/GHSA-qj8c-mx4x-hh37/GHSA-qj8c-mx4x-hh37.json @@ -7,12 +7,8 @@ "CVE-2009-2052" ], "details": "Cisco Unified Communications Manager (aka CUCM, formerly CallManager) 4.x, 5.x before 5.1(3g), 6.x before 6.1(4), 7.0 before 7.0(2), and 7.1 before 7.1(2); and Cisco Unified Presence 1.x, 6.x before 6.0(6), and 7.x before 7.0(4); allows remote attackers to cause a denial of service (TCP services outage) via a large number of TCP connections, related to \"tracking of network connections,\" aka Bug IDs CSCsq22534 and CSCsw52371.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qjfp-57ww-cfpq/GHSA-qjfp-57ww-cfpq.json b/advisories/unreviewed/2022/05/GHSA-qjfp-57ww-cfpq/GHSA-qjfp-57ww-cfpq.json index 6f6b661b506..74daaea0eaf 100644 --- a/advisories/unreviewed/2022/05/GHSA-qjfp-57ww-cfpq/GHSA-qjfp-57ww-cfpq.json +++ b/advisories/unreviewed/2022/05/GHSA-qjfp-57ww-cfpq/GHSA-qjfp-57ww-cfpq.json @@ -7,12 +7,8 @@ "CVE-2009-2568" ], "details": "Stack-based buffer overflow in Sorinara Streaming Audio Player (SAP) 0.9 allows remote attackers to execute arbitrary code via a long string in a playlist (.m3u) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qm3m-5rgr-2hq8/GHSA-qm3m-5rgr-2hq8.json b/advisories/unreviewed/2022/05/GHSA-qm3m-5rgr-2hq8/GHSA-qm3m-5rgr-2hq8.json index ce2b6e44952..a35bc3e9a9f 100644 --- a/advisories/unreviewed/2022/05/GHSA-qm3m-5rgr-2hq8/GHSA-qm3m-5rgr-2hq8.json +++ b/advisories/unreviewed/2022/05/GHSA-qm3m-5rgr-2hq8/GHSA-qm3m-5rgr-2hq8.json @@ -7,12 +7,8 @@ "CVE-2009-2346" ], "details": "The IAX2 protocol implementation in Asterisk Open Source 1.2.x before 1.2.35, 1.4.x before 1.4.26.2, 1.6.0.x before 1.6.0.15, and 1.6.1.x before 1.6.1.6; Business Edition B.x.x before B.2.5.10, C.2.x before C.2.4.3, and C.3.x before C.3.1.1; and s800i 1.3.x before 1.3.0.3 allows remote attackers to cause a denial of service (call-number exhaustion) by initiating many IAX2 message exchanges, a related issue to CVE-2008-3263.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qq94-q2jg-wv4r/GHSA-qq94-q2jg-wv4r.json b/advisories/unreviewed/2022/05/GHSA-qq94-q2jg-wv4r/GHSA-qq94-q2jg-wv4r.json index b9525893527..abf71aa7f87 100644 --- a/advisories/unreviewed/2022/05/GHSA-qq94-q2jg-wv4r/GHSA-qq94-q2jg-wv4r.json +++ b/advisories/unreviewed/2022/05/GHSA-qq94-q2jg-wv4r/GHSA-qq94-q2jg-wv4r.json @@ -7,12 +7,8 @@ "CVE-2009-2555" ], "details": "Heap-based buffer overflow in src/jsregexp.cc in Google V8 before 1.1.10.14, as used in Google Chrome before 2.0.172.37, allows remote attackers to execute arbitrary code in the Chrome sandbox via a crafted JavaScript regular expression.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qq9j-3pwq-87gm/GHSA-qq9j-3pwq-87gm.json b/advisories/unreviewed/2022/05/GHSA-qq9j-3pwq-87gm/GHSA-qq9j-3pwq-87gm.json index 10d062f6527..d146cf52e92 100644 --- a/advisories/unreviewed/2022/05/GHSA-qq9j-3pwq-87gm/GHSA-qq9j-3pwq-87gm.json +++ b/advisories/unreviewed/2022/05/GHSA-qq9j-3pwq-87gm/GHSA-qq9j-3pwq-87gm.json @@ -7,12 +7,8 @@ "CVE-2009-2085" ], "details": "The Security component in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.25 and 7.0 before 7.0.0.5 does not properly handle use of Identity Assertion with CSIv2 Security, which allows remote attackers to bypass intended CSIv2 access restrictions via vectors involving Enterprise JavaBeans (EJB).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qqvw-45f8-3xvq/GHSA-qqvw-45f8-3xvq.json b/advisories/unreviewed/2022/05/GHSA-qqvw-45f8-3xvq/GHSA-qqvw-45f8-3xvq.json index 7823276ef5f..4c5eeccd589 100644 --- a/advisories/unreviewed/2022/05/GHSA-qqvw-45f8-3xvq/GHSA-qqvw-45f8-3xvq.json +++ b/advisories/unreviewed/2022/05/GHSA-qqvw-45f8-3xvq/GHSA-qqvw-45f8-3xvq.json @@ -7,12 +7,8 @@ "CVE-2009-1963" ], "details": "Unspecified vulnerability in the Network Foundation component in Oracle Database 11.1.0.6 allows remote authenticated users to affect integrity and availability via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qqxj-hjhg-gcx6/GHSA-qqxj-hjhg-gcx6.json b/advisories/unreviewed/2022/05/GHSA-qqxj-hjhg-gcx6/GHSA-qqxj-hjhg-gcx6.json index 30be77b81cf..9d60deac385 100644 --- a/advisories/unreviewed/2022/05/GHSA-qqxj-hjhg-gcx6/GHSA-qqxj-hjhg-gcx6.json +++ b/advisories/unreviewed/2022/05/GHSA-qqxj-hjhg-gcx6/GHSA-qqxj-hjhg-gcx6.json @@ -7,12 +7,8 @@ "CVE-2009-2365" ], "details": "SQL injection vulnerability in login.asp in DataCheck Solutions GalleryPal FE 1.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qr6c-5p22-3q9v/GHSA-qr6c-5p22-3q9v.json b/advisories/unreviewed/2022/05/GHSA-qr6c-5p22-3q9v/GHSA-qr6c-5p22-3q9v.json index 2071963b3b2..c51fded234d 100644 --- a/advisories/unreviewed/2022/05/GHSA-qr6c-5p22-3q9v/GHSA-qr6c-5p22-3q9v.json +++ b/advisories/unreviewed/2022/05/GHSA-qr6c-5p22-3q9v/GHSA-qr6c-5p22-3q9v.json @@ -7,12 +7,8 @@ "CVE-2009-2084" ], "details": "Simple Linux Utility for Resource Management (SLURM) 1.2 and 1.3 before 1.3.14 does not properly set supplementary groups before invoking (1) sbcast from the slurmd daemon or (2) strigger from the slurmctld daemon, which might allow local SLURM users to modify files and gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qvrc-hgq4-x7gw/GHSA-qvrc-hgq4-x7gw.json b/advisories/unreviewed/2022/05/GHSA-qvrc-hgq4-x7gw/GHSA-qvrc-hgq4-x7gw.json index d46006a2d5b..f555f4f47b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-qvrc-hgq4-x7gw/GHSA-qvrc-hgq4-x7gw.json +++ b/advisories/unreviewed/2022/05/GHSA-qvrc-hgq4-x7gw/GHSA-qvrc-hgq4-x7gw.json @@ -7,12 +7,8 @@ "CVE-2009-2350" ], "details": "Microsoft Internet Explorer 6.0.2900.2180 and earlier does not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header, a related issue to CVE-2009-1312.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qwmc-7c7g-54gx/GHSA-qwmc-7c7g-54gx.json b/advisories/unreviewed/2022/05/GHSA-qwmc-7c7g-54gx/GHSA-qwmc-7c7g-54gx.json index 848a8e0c4b9..dbd83a61aac 100644 --- a/advisories/unreviewed/2022/05/GHSA-qwmc-7c7g-54gx/GHSA-qwmc-7c7g-54gx.json +++ b/advisories/unreviewed/2022/05/GHSA-qwmc-7c7g-54gx/GHSA-qwmc-7c7g-54gx.json @@ -7,12 +7,8 @@ "CVE-2009-2464" ], "details": "The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to loading multiple RDF files in a XUL tree element.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qx3m-v6p5-458w/GHSA-qx3m-v6p5-458w.json b/advisories/unreviewed/2022/05/GHSA-qx3m-v6p5-458w/GHSA-qx3m-v6p5-458w.json index c76cbf27cb4..c674569caa2 100644 --- a/advisories/unreviewed/2022/05/GHSA-qx3m-v6p5-458w/GHSA-qx3m-v6p5-458w.json +++ b/advisories/unreviewed/2022/05/GHSA-qx3m-v6p5-458w/GHSA-qx3m-v6p5-458w.json @@ -7,12 +7,8 @@ "CVE-2009-2225" ], "details": "Stack-based buffer overflow in SureThing CD/DVD Labeler 5.1.616 trial version allows user-assisted remote attackers to execute arbitrary code via a crafted (1) m3u or (2) pls playlist file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r3c9-qr4c-gm4p/GHSA-r3c9-qr4c-gm4p.json b/advisories/unreviewed/2022/05/GHSA-r3c9-qr4c-gm4p/GHSA-r3c9-qr4c-gm4p.json index c1ce1b56d0c..562faf8c784 100644 --- a/advisories/unreviewed/2022/05/GHSA-r3c9-qr4c-gm4p/GHSA-r3c9-qr4c-gm4p.json +++ b/advisories/unreviewed/2022/05/GHSA-r3c9-qr4c-gm4p/GHSA-r3c9-qr4c-gm4p.json @@ -7,12 +7,8 @@ "CVE-2009-2426" ], "details": "The connection_edge_process_relay_cell_not_open function in src/or/relay.c in Tor 0.2.x before 0.2.0.35 and 0.1.x before 0.1.2.8-beta allows exit relays to have an unspecified impact by causing controllers to accept DNS responses that redirect to an internal IP address via unknown vectors. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r3m9-p95m-422h/GHSA-r3m9-p95m-422h.json b/advisories/unreviewed/2022/05/GHSA-r3m9-p95m-422h/GHSA-r3m9-p95m-422h.json index 6f52b4295e7..a55f3f155d3 100644 --- a/advisories/unreviewed/2022/05/GHSA-r3m9-p95m-422h/GHSA-r3m9-p95m-422h.json +++ b/advisories/unreviewed/2022/05/GHSA-r3m9-p95m-422h/GHSA-r3m9-p95m-422h.json @@ -7,12 +7,8 @@ "CVE-2009-2559" ], "details": "Buffer overflow in the IPMI dissector in Wireshark 1.2.0 allows remote attackers to cause a denial of service (crash) via unspecified vectors related to an array index error. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r3rg-38gc-7x9q/GHSA-r3rg-38gc-7x9q.json b/advisories/unreviewed/2022/05/GHSA-r3rg-38gc-7x9q/GHSA-r3rg-38gc-7x9q.json index b019e25133b..2dd09ce501c 100644 --- a/advisories/unreviewed/2022/05/GHSA-r3rg-38gc-7x9q/GHSA-r3rg-38gc-7x9q.json +++ b/advisories/unreviewed/2022/05/GHSA-r3rg-38gc-7x9q/GHSA-r3rg-38gc-7x9q.json @@ -7,12 +7,8 @@ "CVE-2009-2267" ], "details": "VMware Workstation 6.5.x before 6.5.3 build 185404, VMware Player 2.5.x before 2.5.3 build 185404, VMware ACE 2.5.x before 2.5.3 build 185404, VMware Server 1.x before 1.0.10 build 203137 and 2.x before 2.0.2 build 203138, VMware Fusion 2.x before 2.0.6 build 196839, VMware ESXi 3.5 and 4.0, and VMware ESX 2.5.5, 3.0.3, 3.5, and 4.0, when Virtual-8086 mode is used, do not properly set the exception code upon a page fault (aka #PF) exception, which allows guest OS users to gain privileges on the guest OS by specifying a crafted value for the cs register.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r42m-qqqw-rx75/GHSA-r42m-qqqw-rx75.json b/advisories/unreviewed/2022/05/GHSA-r42m-qqqw-rx75/GHSA-r42m-qqqw-rx75.json index 175cd42bd76..cd77ab46fa4 100644 --- a/advisories/unreviewed/2022/05/GHSA-r42m-qqqw-rx75/GHSA-r42m-qqqw-rx75.json +++ b/advisories/unreviewed/2022/05/GHSA-r42m-qqqw-rx75/GHSA-r42m-qqqw-rx75.json @@ -7,12 +7,8 @@ "CVE-2009-2549" ], "details": "Armed Assault (aka ArmA) 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service via a join packet with a final field whose value is (1) 0, which triggers a server crash related to memory allocation, or (2) 1, which triggers CPU/memory consumption and a NULL pointer dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r4pm-r3ff-g34j/GHSA-r4pm-r3ff-g34j.json b/advisories/unreviewed/2022/05/GHSA-r4pm-r3ff-g34j/GHSA-r4pm-r3ff-g34j.json index 9b910d01884..a197b09a243 100644 --- a/advisories/unreviewed/2022/05/GHSA-r4pm-r3ff-g34j/GHSA-r4pm-r3ff-g34j.json +++ b/advisories/unreviewed/2022/05/GHSA-r4pm-r3ff-g34j/GHSA-r4pm-r3ff-g34j.json @@ -7,12 +7,8 @@ "CVE-2009-2007" ], "details": "Multiple directory traversal vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to (1) read portions of arbitrary files via a .. (dot dot) and a ..\\ (dot dot backslash) in the lang parameter to main/exercice/hotspot_lang_conversion.php and (2) read arbitrary files via a .. (dot dot) in the doc_url parameter to main/exercice/Hpdownload.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r5fm-q7h8-jqhr/GHSA-r5fm-q7h8-jqhr.json b/advisories/unreviewed/2022/05/GHSA-r5fm-q7h8-jqhr/GHSA-r5fm-q7h8-jqhr.json index 908f3490647..6881d7200ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-r5fm-q7h8-jqhr/GHSA-r5fm-q7h8-jqhr.json +++ b/advisories/unreviewed/2022/05/GHSA-r5fm-q7h8-jqhr/GHSA-r5fm-q7h8-jqhr.json @@ -7,12 +7,8 @@ "CVE-2009-2563" ], "details": "Unspecified vulnerability in the Infiniband dissector in Wireshark 1.0.6 through 1.2.0, when running on unspecified platforms, allows remote attackers to cause a denial of service (crash) via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r5mf-fgmj-mcc4/GHSA-r5mf-fgmj-mcc4.json b/advisories/unreviewed/2022/05/GHSA-r5mf-fgmj-mcc4/GHSA-r5mf-fgmj-mcc4.json index fad1f787067..9487e0a65f3 100644 --- a/advisories/unreviewed/2022/05/GHSA-r5mf-fgmj-mcc4/GHSA-r5mf-fgmj-mcc4.json +++ b/advisories/unreviewed/2022/05/GHSA-r5mf-fgmj-mcc4/GHSA-r5mf-fgmj-mcc4.json @@ -7,12 +7,8 @@ "CVE-2009-1992" ], "details": "Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.4 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r6hj-9v4h-whwg/GHSA-r6hj-9v4h-whwg.json b/advisories/unreviewed/2022/05/GHSA-r6hj-9v4h-whwg/GHSA-r6hj-9v4h-whwg.json index c380dae4f4e..1d2149001c1 100644 --- a/advisories/unreviewed/2022/05/GHSA-r6hj-9v4h-whwg/GHSA-r6hj-9v4h-whwg.json +++ b/advisories/unreviewed/2022/05/GHSA-r6hj-9v4h-whwg/GHSA-r6hj-9v4h-whwg.json @@ -7,12 +7,8 @@ "CVE-2009-2390" ], "details": "SQL injection vulnerability in the BookFlip (com_bookflip) component 2.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the book_id parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r6wx-j8f2-9xr4/GHSA-r6wx-j8f2-9xr4.json b/advisories/unreviewed/2022/05/GHSA-r6wx-j8f2-9xr4/GHSA-r6wx-j8f2-9xr4.json index fd473ca25bd..c520ccf6b43 100644 --- a/advisories/unreviewed/2022/05/GHSA-r6wx-j8f2-9xr4/GHSA-r6wx-j8f2-9xr4.json +++ b/advisories/unreviewed/2022/05/GHSA-r6wx-j8f2-9xr4/GHSA-r6wx-j8f2-9xr4.json @@ -7,12 +7,8 @@ "CVE-2009-2543" ], "details": "Multiple unspecified vulnerabilities in the IBM Proventia engine 4.9.0.0.44 20081231, as used in IBM Proventia Network Mail Security System, Network Mail Security System Virtual Appliance, Desktop Endpoint Security, Network Multi-Function Security (MFS), and possibly other products, allow remote attackers to bypass detection of malware via a modified (1) ZIP or (2) CAB archive, a related issue to CVE-2009-1240.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r7q5-fxwm-r7v5/GHSA-r7q5-fxwm-r7v5.json b/advisories/unreviewed/2022/05/GHSA-r7q5-fxwm-r7v5/GHSA-r7q5-fxwm-r7v5.json index 2cb5847787e..a878b48aa98 100644 --- a/advisories/unreviewed/2022/05/GHSA-r7q5-fxwm-r7v5/GHSA-r7q5-fxwm-r7v5.json +++ b/advisories/unreviewed/2022/05/GHSA-r7q5-fxwm-r7v5/GHSA-r7q5-fxwm-r7v5.json @@ -7,12 +7,8 @@ "CVE-2009-2383" ], "details": "SQL injection vulnerability in BTE_RW_webajax.php in the Related Sites plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the guid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r968-27hg-qg35/GHSA-r968-27hg-qg35.json b/advisories/unreviewed/2022/05/GHSA-r968-27hg-qg35/GHSA-r968-27hg-qg35.json index 40d668b1ae3..e063e0113a1 100644 --- a/advisories/unreviewed/2022/05/GHSA-r968-27hg-qg35/GHSA-r968-27hg-qg35.json +++ b/advisories/unreviewed/2022/05/GHSA-r968-27hg-qg35/GHSA-r968-27hg-qg35.json @@ -7,12 +7,8 @@ "CVE-2009-2461" ], "details": "mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rf3m-97mp-6cvj/GHSA-rf3m-97mp-6cvj.json b/advisories/unreviewed/2022/05/GHSA-rf3m-97mp-6cvj/GHSA-rf3m-97mp-6cvj.json index 7845f60e46d..ed754d2d930 100644 --- a/advisories/unreviewed/2022/05/GHSA-rf3m-97mp-6cvj/GHSA-rf3m-97mp-6cvj.json +++ b/advisories/unreviewed/2022/05/GHSA-rf3m-97mp-6cvj/GHSA-rf3m-97mp-6cvj.json @@ -7,12 +7,8 @@ "CVE-2009-2533" ], "details": "rmserver in RealNetworks Helix Server and Helix Mobile Server before 13.0.0 allows remote attackers to cause a denial of service (daemon exit) via multiple RTSP SET_PARAMETER requests with empty DataConvertBuffer headers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rf9v-v5mw-m5p4/GHSA-rf9v-v5mw-m5p4.json b/advisories/unreviewed/2022/05/GHSA-rf9v-v5mw-m5p4/GHSA-rf9v-v5mw-m5p4.json index 301f9c53090..90ace949f59 100644 --- a/advisories/unreviewed/2022/05/GHSA-rf9v-v5mw-m5p4/GHSA-rf9v-v5mw-m5p4.json +++ b/advisories/unreviewed/2022/05/GHSA-rf9v-v5mw-m5p4/GHSA-rf9v-v5mw-m5p4.json @@ -7,12 +7,8 @@ "CVE-2009-2103" ], "details": "SQL injection vulnerability in the Frontend MP3 Player (fe_mp3player) 0.2.3 and earlier extension for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rfq6-68cg-96fq/GHSA-rfq6-68cg-96fq.json b/advisories/unreviewed/2022/05/GHSA-rfq6-68cg-96fq/GHSA-rfq6-68cg-96fq.json index 188c6e49d15..7275ca23301 100644 --- a/advisories/unreviewed/2022/05/GHSA-rfq6-68cg-96fq/GHSA-rfq6-68cg-96fq.json +++ b/advisories/unreviewed/2022/05/GHSA-rfq6-68cg-96fq/GHSA-rfq6-68cg-96fq.json @@ -7,12 +7,8 @@ "CVE-2009-2361" ], "details": "SQL injection vulnerability in include/class.staff.php in osTicket before 1.6 RC5 allows remote attackers to execute arbitrary SQL commands via the staff username parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rgvf-r288-6rqr/GHSA-rgvf-r288-6rqr.json b/advisories/unreviewed/2022/05/GHSA-rgvf-r288-6rqr/GHSA-rgvf-r288-6rqr.json index 4dde8349cdc..27bed616b9a 100644 --- a/advisories/unreviewed/2022/05/GHSA-rgvf-r288-6rqr/GHSA-rgvf-r288-6rqr.json +++ b/advisories/unreviewed/2022/05/GHSA-rgvf-r288-6rqr/GHSA-rgvf-r288-6rqr.json @@ -7,12 +7,8 @@ "CVE-2009-1970" ], "details": "Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2009-0991.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rph9-qgvh-wxm6/GHSA-rph9-qgvh-wxm6.json b/advisories/unreviewed/2022/05/GHSA-rph9-qgvh-wxm6/GHSA-rph9-qgvh-wxm6.json index 423e29ec55b..6ad6888f00f 100644 --- a/advisories/unreviewed/2022/05/GHSA-rph9-qgvh-wxm6/GHSA-rph9-qgvh-wxm6.json +++ b/advisories/unreviewed/2022/05/GHSA-rph9-qgvh-wxm6/GHSA-rph9-qgvh-wxm6.json @@ -7,12 +7,8 @@ "CVE-2009-2397" ], "details": "Directory traversal vulnerability in download.php in Audio Article Directory allows remote attackers to read arbitrary files via directory traversal sequences in the file parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rphr-394v-3fp2/GHSA-rphr-394v-3fp2.json b/advisories/unreviewed/2022/05/GHSA-rphr-394v-3fp2/GHSA-rphr-394v-3fp2.json index e93c283cc74..5ac0ca8c515 100644 --- a/advisories/unreviewed/2022/05/GHSA-rphr-394v-3fp2/GHSA-rphr-394v-3fp2.json +++ b/advisories/unreviewed/2022/05/GHSA-rphr-394v-3fp2/GHSA-rphr-394v-3fp2.json @@ -7,12 +7,8 @@ "CVE-2009-2333" ], "details": "Multiple directory traversal vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the menu parameter to admin/admin_menu.php, and the id parameter to (2) index.php and (3) admin/admin_edit.php; and (4) delete arbitrary local files via a .. (dot dot) in the id parameter to admin/admin_delete.php. NOTE: vector 2 can be leveraged for static code injection by sending a crafted menu parameter to admin/admin_menu.php, and then sending an id=../menu.csv request to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rpmr-ccg5-2fg9/GHSA-rpmr-ccg5-2fg9.json b/advisories/unreviewed/2022/05/GHSA-rpmr-ccg5-2fg9/GHSA-rpmr-ccg5-2fg9.json index 33dbfb90f33..09d0c34daee 100644 --- a/advisories/unreviewed/2022/05/GHSA-rpmr-ccg5-2fg9/GHSA-rpmr-ccg5-2fg9.json +++ b/advisories/unreviewed/2022/05/GHSA-rpmr-ccg5-2fg9/GHSA-rpmr-ccg5-2fg9.json @@ -7,12 +7,8 @@ "CVE-2009-2557" ], "details": "Directory traversal vulnerability in system/download.php in Admin News Tools 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the fichier parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rrxp-x5qm-57vj/GHSA-rrxp-x5qm-57vj.json b/advisories/unreviewed/2022/05/GHSA-rrxp-x5qm-57vj/GHSA-rrxp-x5qm-57vj.json index 0aa6048c22a..65b86f89cb6 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrxp-x5qm-57vj/GHSA-rrxp-x5qm-57vj.json +++ b/advisories/unreviewed/2022/05/GHSA-rrxp-x5qm-57vj/GHSA-rrxp-x5qm-57vj.json @@ -7,12 +7,8 @@ "CVE-2009-2218" ], "details": "Multiple PHP remote file inclusion vulnerabilities in phpCollegeExchange 0.1.5c, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the home parameter to (1) i_head.php, (2) i_nav.php, (3) user_new_2.php, or (4) house/myrents.php; or (5) allbooks.php, (6) home.php, or (7) mybooks.php in books/. NOTE: house/myrents.php was also separately reported as a local file inclusion issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rx6c-5fvf-3rr3/GHSA-rx6c-5fvf-3rr3.json b/advisories/unreviewed/2022/05/GHSA-rx6c-5fvf-3rr3/GHSA-rx6c-5fvf-3rr3.json index 36d651549e4..fbf85eec3f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-rx6c-5fvf-3rr3/GHSA-rx6c-5fvf-3rr3.json +++ b/advisories/unreviewed/2022/05/GHSA-rx6c-5fvf-3rr3/GHSA-rx6c-5fvf-3rr3.json @@ -7,12 +7,8 @@ "CVE-2009-1937" ], "details": "Cross-site scripting (XSS) vulnerability in the comment posting feature in LightNEasy 2.2.1 \"no database\" (aka flat) and 2.2.2 SQLite allows remote attackers to inject arbitrary web script or HTML via the (1) commentname (aka Author), (2) commentemail (aka Email), and (3) commentmessage (aka Comment) parameters. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v4x4-2fqj-xpmh/GHSA-v4x4-2fqj-xpmh.json b/advisories/unreviewed/2022/05/GHSA-v4x4-2fqj-xpmh/GHSA-v4x4-2fqj-xpmh.json index fd32a4ab579..f7f84a304ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-v4x4-2fqj-xpmh/GHSA-v4x4-2fqj-xpmh.json +++ b/advisories/unreviewed/2022/05/GHSA-v4x4-2fqj-xpmh/GHSA-v4x4-2fqj-xpmh.json @@ -7,12 +7,8 @@ "CVE-2009-2386" ], "details": "Insecure method vulnerability in Awingsoft Awakening Winds3D Viewer plugin 3.5.0.0, 3.0.0.5, and possibly other versions allows remote attackers to force the download and execution of arbitrary files via the GetURL method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v5wf-xj74-p6wm/GHSA-v5wf-xj74-p6wm.json b/advisories/unreviewed/2022/05/GHSA-v5wf-xj74-p6wm/GHSA-v5wf-xj74-p6wm.json index 96802cea24b..929581beb5c 100644 --- a/advisories/unreviewed/2022/05/GHSA-v5wf-xj74-p6wm/GHSA-v5wf-xj74-p6wm.json +++ b/advisories/unreviewed/2022/05/GHSA-v5wf-xj74-p6wm/GHSA-v5wf-xj74-p6wm.json @@ -7,12 +7,8 @@ "CVE-2009-2241" ], "details": "Cross-site scripting (XSS) vulnerability in search.asp in ASP Inline Corporate Calendar allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v64c-5fc8-qv5x/GHSA-v64c-5fc8-qv5x.json b/advisories/unreviewed/2022/05/GHSA-v64c-5fc8-qv5x/GHSA-v64c-5fc8-qv5x.json index 57fbe3a7449..22ffb190514 100644 --- a/advisories/unreviewed/2022/05/GHSA-v64c-5fc8-qv5x/GHSA-v64c-5fc8-qv5x.json +++ b/advisories/unreviewed/2022/05/GHSA-v64c-5fc8-qv5x/GHSA-v64c-5fc8-qv5x.json @@ -7,12 +7,8 @@ "CVE-2009-2459" ], "details": "Multiple unspecified vulnerabilities in mimeTeX, when downloaded before 20090713, have unknown impact and attack vectors related to the (1) \\environ, (2) \\input, and (3) \\counter TeX directives.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v7hf-28pc-c7qx/GHSA-v7hf-28pc-c7qx.json b/advisories/unreviewed/2022/05/GHSA-v7hf-28pc-c7qx/GHSA-v7hf-28pc-c7qx.json index 1e14b2bfbd6..bde71442dd2 100644 --- a/advisories/unreviewed/2022/05/GHSA-v7hf-28pc-c7qx/GHSA-v7hf-28pc-c7qx.json +++ b/advisories/unreviewed/2022/05/GHSA-v7hf-28pc-c7qx/GHSA-v7hf-28pc-c7qx.json @@ -7,12 +7,8 @@ "CVE-2009-2384" ], "details": "Buffer overflow in amp.exe in Brothersoft PEamp 1.02b allows user-assisted remote attackers to execute arbitrary code via a long string in a .m3u playlist file. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v8cc-p6g2-vwwf/GHSA-v8cc-p6g2-vwwf.json b/advisories/unreviewed/2022/05/GHSA-v8cc-p6g2-vwwf/GHSA-v8cc-p6g2-vwwf.json index 82a17ddca85..e0448836603 100644 --- a/advisories/unreviewed/2022/05/GHSA-v8cc-p6g2-vwwf/GHSA-v8cc-p6g2-vwwf.json +++ b/advisories/unreviewed/2022/05/GHSA-v8cc-p6g2-vwwf/GHSA-v8cc-p6g2-vwwf.json @@ -7,12 +7,8 @@ "CVE-2009-2196" ], "details": "Unspecified vulnerability in Apple Safari 4 before 4.0.3 allows remote web servers to place an arbitrary web site in the Top Sites view, and possibly conduct phishing attacks, via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v8pj-9wqq-62p4/GHSA-v8pj-9wqq-62p4.json b/advisories/unreviewed/2022/05/GHSA-v8pj-9wqq-62p4/GHSA-v8pj-9wqq-62p4.json index a404daf811a..7de981403cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-v8pj-9wqq-62p4/GHSA-v8pj-9wqq-62p4.json +++ b/advisories/unreviewed/2022/05/GHSA-v8pj-9wqq-62p4/GHSA-v8pj-9wqq-62p4.json @@ -7,12 +7,8 @@ "CVE-2009-2311" ], "details": "SQL injection vulnerability in the rGallery plugin 1.2.3 for WoltLab Burning Board (WBB3) allows remote attackers to execute arbitrary SQL commands via the userID parameter in the RGalleryUserGallery page to index.php, a different vector than CVE-2008-4627.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v93g-jrxq-6qr3/GHSA-v93g-jrxq-6qr3.json b/advisories/unreviewed/2022/05/GHSA-v93g-jrxq-6qr3/GHSA-v93g-jrxq-6qr3.json index 56f006ee77a..563311295c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-v93g-jrxq-6qr3/GHSA-v93g-jrxq-6qr3.json +++ b/advisories/unreviewed/2022/05/GHSA-v93g-jrxq-6qr3/GHSA-v93g-jrxq-6qr3.json @@ -7,12 +7,8 @@ "CVE-2009-2357" ], "details": "The default configuration of TekRADIUS 3.0 uses the sa account to communicate with Microsoft SQL Server, which makes it easier for remote attackers to obtain privileged access to the database and the underlying Windows operating system.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v9mm-j6r3-xv8r/GHSA-v9mm-j6r3-xv8r.json b/advisories/unreviewed/2022/05/GHSA-v9mm-j6r3-xv8r/GHSA-v9mm-j6r3-xv8r.json index b549477f1cd..5a34ea9b83a 100644 --- a/advisories/unreviewed/2022/05/GHSA-v9mm-j6r3-xv8r/GHSA-v9mm-j6r3-xv8r.json +++ b/advisories/unreviewed/2022/05/GHSA-v9mm-j6r3-xv8r/GHSA-v9mm-j6r3-xv8r.json @@ -7,12 +7,8 @@ "CVE-2009-2186" ], "details": "Unspecified vulnerability in Adobe Shockwave Player before 11.0.0.465 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2009-1860, related to an older issue that \"was previously resolved in Shockwave Player 11.0.0.465.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v9vr-7v4q-684f/GHSA-v9vr-7v4q-684f.json b/advisories/unreviewed/2022/05/GHSA-v9vr-7v4q-684f/GHSA-v9vr-7v4q-684f.json index 1b9ad73aa85..69e58d35fd4 100644 --- a/advisories/unreviewed/2022/05/GHSA-v9vr-7v4q-684f/GHSA-v9vr-7v4q-684f.json +++ b/advisories/unreviewed/2022/05/GHSA-v9vr-7v4q-684f/GHSA-v9vr-7v4q-684f.json @@ -7,12 +7,8 @@ "CVE-2009-2190" ], "details": "launchd in Apple Mac OS X 10.5 before 10.5.8 allows remote attackers to cause a denial of service (individual service outage) by making many connections to an inetd-based launchd service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vc59-w22h-6chj/GHSA-vc59-w22h-6chj.json b/advisories/unreviewed/2022/05/GHSA-vc59-w22h-6chj/GHSA-vc59-w22h-6chj.json index 0b5a08790d3..ac869fc3b10 100644 --- a/advisories/unreviewed/2022/05/GHSA-vc59-w22h-6chj/GHSA-vc59-w22h-6chj.json +++ b/advisories/unreviewed/2022/05/GHSA-vc59-w22h-6chj/GHSA-vc59-w22h-6chj.json @@ -7,12 +7,8 @@ "CVE-2009-2420" ], "details": "Apple Safari 3.2.3 does not properly implement the file: protocol handler, which allows remote attackers to read arbitrary files or cause a denial of service (launch of multiple Windows Explorer instances) via vectors involving an unspecified HTML tag, possibly a related issue to CVE-2009-1703.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vf2q-hvf8-f62h/GHSA-vf2q-hvf8-f62h.json b/advisories/unreviewed/2022/05/GHSA-vf2q-hvf8-f62h/GHSA-vf2q-hvf8-f62h.json index 5a6a607627f..71bbb4aa62d 100644 --- a/advisories/unreviewed/2022/05/GHSA-vf2q-hvf8-f62h/GHSA-vf2q-hvf8-f62h.json +++ b/advisories/unreviewed/2022/05/GHSA-vf2q-hvf8-f62h/GHSA-vf2q-hvf8-f62h.json @@ -7,12 +7,8 @@ "CVE-2009-2347" ], "details": "Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attackers to execute arbitrary code via a TIFF image with large (1) width and (2) height values, which triggers a heap-based buffer overflow in the (a) cvt_whole_image function in tiff2rgba and (b) tiffcvt function in rgb2ycbcr.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -136,9 +132,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vf34-gg37-3qc4/GHSA-vf34-gg37-3qc4.json b/advisories/unreviewed/2022/05/GHSA-vf34-gg37-3qc4/GHSA-vf34-gg37-3qc4.json index d55c2fc87b5..265abb3b5ee 100644 --- a/advisories/unreviewed/2022/05/GHSA-vf34-gg37-3qc4/GHSA-vf34-gg37-3qc4.json +++ b/advisories/unreviewed/2022/05/GHSA-vf34-gg37-3qc4/GHSA-vf34-gg37-3qc4.json @@ -7,12 +7,8 @@ "CVE-2009-2067" ], "details": "Opera detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to \"HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vfwc-xrqr-66vc/GHSA-vfwc-xrqr-66vc.json b/advisories/unreviewed/2022/05/GHSA-vfwc-xrqr-66vc/GHSA-vfwc-xrqr-66vc.json index 54f28401177..f7c7d1b4014 100644 --- a/advisories/unreviewed/2022/05/GHSA-vfwc-xrqr-66vc/GHSA-vfwc-xrqr-66vc.json +++ b/advisories/unreviewed/2022/05/GHSA-vfwc-xrqr-66vc/GHSA-vfwc-xrqr-66vc.json @@ -7,12 +7,8 @@ "CVE-2009-1949" ], "details": "import_wbb1.php in Unclassified NewsBoard (UNB) 1.6.4 allows remote attackers to obtain sensitive information via a direct request, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vhh6-w5vf-pv9w/GHSA-vhh6-w5vf-pv9w.json b/advisories/unreviewed/2022/05/GHSA-vhh6-w5vf-pv9w/GHSA-vhh6-w5vf-pv9w.json index 105976ab09c..93a13e78d04 100644 --- a/advisories/unreviewed/2022/05/GHSA-vhh6-w5vf-pv9w/GHSA-vhh6-w5vf-pv9w.json +++ b/advisories/unreviewed/2022/05/GHSA-vhh6-w5vf-pv9w/GHSA-vhh6-w5vf-pv9w.json @@ -7,12 +7,8 @@ "CVE-2009-2207" ], "details": "The MobileMail component in Apple iPhone OS 3.0 and 3.0.1, and iPhone OS 3.0 for iPod touch, lists deleted e-mail messages in Spotlight search results, which might allow local users to obtain sensitive information by reading these messages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vj8v-78gc-7pjq/GHSA-vj8v-78gc-7pjq.json b/advisories/unreviewed/2022/05/GHSA-vj8v-78gc-7pjq/GHSA-vj8v-78gc-7pjq.json index 5a5fb674576..efec31ab318 100644 --- a/advisories/unreviewed/2022/05/GHSA-vj8v-78gc-7pjq/GHSA-vj8v-78gc-7pjq.json +++ b/advisories/unreviewed/2022/05/GHSA-vj8v-78gc-7pjq/GHSA-vj8v-78gc-7pjq.json @@ -7,12 +7,8 @@ "CVE-2009-2742" ], "details": "Cross-site scripting (XSS) vulnerability in Eclipse Help in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.27 allows remote attackers to inject arbitrary web script or HTML via unspecified input.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vjp4-46m9-7f4m/GHSA-vjp4-46m9-7f4m.json b/advisories/unreviewed/2022/05/GHSA-vjp4-46m9-7f4m/GHSA-vjp4-46m9-7f4m.json index df76fb46790..881791da1f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-vjp4-46m9-7f4m/GHSA-vjp4-46m9-7f4m.json +++ b/advisories/unreviewed/2022/05/GHSA-vjp4-46m9-7f4m/GHSA-vjp4-46m9-7f4m.json @@ -7,12 +7,8 @@ "CVE-2009-2438" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in the search module in ClanSphere 2009.0 and 2009.0.2 allows remote attackers to inject arbitrary web script or HTML via the text parameter in a list action. NOTE: this might overlap CVE-2008-1399.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vm22-rxqv-w5xr/GHSA-vm22-rxqv-w5xr.json b/advisories/unreviewed/2022/05/GHSA-vm22-rxqv-w5xr/GHSA-vm22-rxqv-w5xr.json index f0d9365da79..8a6824820e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-vm22-rxqv-w5xr/GHSA-vm22-rxqv-w5xr.json +++ b/advisories/unreviewed/2022/05/GHSA-vm22-rxqv-w5xr/GHSA-vm22-rxqv-w5xr.json @@ -7,12 +7,8 @@ "CVE-2009-2434" ], "details": "Buffer overflow in the syscall implementation in IBM AIX 5.3 allows local users to gain privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vmfg-4frj-fmfg/GHSA-vmfg-4frj-fmfg.json b/advisories/unreviewed/2022/05/GHSA-vmfg-4frj-fmfg/GHSA-vmfg-4frj-fmfg.json index 815374a4252..153a1691efa 100644 --- a/advisories/unreviewed/2022/05/GHSA-vmfg-4frj-fmfg/GHSA-vmfg-4frj-fmfg.json +++ b/advisories/unreviewed/2022/05/GHSA-vmfg-4frj-fmfg/GHSA-vmfg-4frj-fmfg.json @@ -7,12 +7,8 @@ "CVE-2009-2411" ], "details": "Multiple integer overflows in the libsvn_delta library in Subversion before 1.5.7, and 1.6.x before 1.6.4, allow remote authenticated users and remote Subversion servers to execute arbitrary code via an svndiff stream with large windows that trigger a heap-based buffer overflow, a related issue to CVE-2009-2412.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -124,9 +120,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vpcr-4vw2-r6wh/GHSA-vpcr-4vw2-r6wh.json b/advisories/unreviewed/2022/05/GHSA-vpcr-4vw2-r6wh/GHSA-vpcr-4vw2-r6wh.json index 5af299d68f9..5537b4ede4a 100644 --- a/advisories/unreviewed/2022/05/GHSA-vpcr-4vw2-r6wh/GHSA-vpcr-4vw2-r6wh.json +++ b/advisories/unreviewed/2022/05/GHSA-vpcr-4vw2-r6wh/GHSA-vpcr-4vw2-r6wh.json @@ -7,12 +7,8 @@ "CVE-2009-2202" ], "details": "Apple QuickTime before 7.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted H.264 movie file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vq8q-648x-2vcp/GHSA-vq8q-648x-2vcp.json b/advisories/unreviewed/2022/05/GHSA-vq8q-648x-2vcp/GHSA-vq8q-648x-2vcp.json index 8e312b0c2c6..5eaebd2505e 100644 --- a/advisories/unreviewed/2022/05/GHSA-vq8q-648x-2vcp/GHSA-vq8q-648x-2vcp.json +++ b/advisories/unreviewed/2022/05/GHSA-vq8q-648x-2vcp/GHSA-vq8q-648x-2vcp.json @@ -7,12 +7,8 @@ "CVE-2009-2228" ], "details": "Cross-site scripting (XSS) vulnerability in engine.php in Kasseler CMS allows remote attackers to inject arbitrary web script or HTML via the url parameter in a redirect action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vr58-2w95-qccf/GHSA-vr58-2w95-qccf.json b/advisories/unreviewed/2022/05/GHSA-vr58-2w95-qccf/GHSA-vr58-2w95-qccf.json index 88464653b2a..e133671208f 100644 --- a/advisories/unreviewed/2022/05/GHSA-vr58-2w95-qccf/GHSA-vr58-2w95-qccf.json +++ b/advisories/unreviewed/2022/05/GHSA-vr58-2w95-qccf/GHSA-vr58-2w95-qccf.json @@ -7,12 +7,8 @@ "CVE-2009-2469" ], "details": "Mozilla Firefox before 3.0.12 does not properly handle an SVG element that has a property with a watch function and an __defineSetter__ function, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted document, related to a certain pointer misinterpretation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vrqg-fhw8-px6v/GHSA-vrqg-fhw8-px6v.json b/advisories/unreviewed/2022/05/GHSA-vrqg-fhw8-px6v/GHSA-vrqg-fhw8-px6v.json index 1915e234a09..c010471d507 100644 --- a/advisories/unreviewed/2022/05/GHSA-vrqg-fhw8-px6v/GHSA-vrqg-fhw8-px6v.json +++ b/advisories/unreviewed/2022/05/GHSA-vrqg-fhw8-px6v/GHSA-vrqg-fhw8-px6v.json @@ -7,12 +7,8 @@ "CVE-2009-1978" ], "details": "Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the July 2009 Oracle CPU. Oracle has not commented on claims from an independent researcher that this vulnerability allows remote authenticated users to execute arbitrary code with SYSTEM privileges via vectors involving property_box.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vrwf-68x6-8428/GHSA-vrwf-68x6-8428.json b/advisories/unreviewed/2022/05/GHSA-vrwf-68x6-8428/GHSA-vrwf-68x6-8428.json index 89d9e456df6..116a15dbe9a 100644 --- a/advisories/unreviewed/2022/05/GHSA-vrwf-68x6-8428/GHSA-vrwf-68x6-8428.json +++ b/advisories/unreviewed/2022/05/GHSA-vrwf-68x6-8428/GHSA-vrwf-68x6-8428.json @@ -7,12 +7,8 @@ "CVE-2009-2227" ], "details": "Stack-based buffer overflow in B Labs Bopup Communication Server 3.2.26.5460 allows remote attackers to execute arbitrary code via a crafted request to TCP port 19810.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vvrc-262j-cc4f/GHSA-vvrc-262j-cc4f.json b/advisories/unreviewed/2022/05/GHSA-vvrc-262j-cc4f/GHSA-vvrc-262j-cc4f.json index 3dbe64a5d27..08e39142b99 100644 --- a/advisories/unreviewed/2022/05/GHSA-vvrc-262j-cc4f/GHSA-vvrc-262j-cc4f.json +++ b/advisories/unreviewed/2022/05/GHSA-vvrc-262j-cc4f/GHSA-vvrc-262j-cc4f.json @@ -7,12 +7,8 @@ "CVE-2009-2143" ], "details": "PHP remote file inclusion vulnerability in firestats-wordpress.php in the FireStats plugin before 1.6.2-stable for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the fs_javascript parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vx9v-7cj2-j28v/GHSA-vx9v-7cj2-j28v.json b/advisories/unreviewed/2022/05/GHSA-vx9v-7cj2-j28v/GHSA-vx9v-7cj2-j28v.json index 107e5042aea..2449e87cb37 100644 --- a/advisories/unreviewed/2022/05/GHSA-vx9v-7cj2-j28v/GHSA-vx9v-7cj2-j28v.json +++ b/advisories/unreviewed/2022/05/GHSA-vx9v-7cj2-j28v/GHSA-vx9v-7cj2-j28v.json @@ -7,12 +7,8 @@ "CVE-2009-2551" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in ScriptsEz Easy Image Downloader allow remote attackers to inject arbitrary web script or HTML via the id parameter in a detail action to (1) main.php and possibly (2) demo_page.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vxgc-3h52-vgxp/GHSA-vxgc-3h52-vgxp.json b/advisories/unreviewed/2022/05/GHSA-vxgc-3h52-vgxp/GHSA-vxgc-3h52-vgxp.json index 705c0e94030..62d10ceb247 100644 --- a/advisories/unreviewed/2022/05/GHSA-vxgc-3h52-vgxp/GHSA-vxgc-3h52-vgxp.json +++ b/advisories/unreviewed/2022/05/GHSA-vxgc-3h52-vgxp/GHSA-vxgc-3h52-vgxp.json @@ -7,12 +7,8 @@ "CVE-2009-2750" ], "details": "IBM WebSphere Service Registry and Repository (WSRR) 6.3.0 before FP2 does not have the intended configuration properties, which allows remote authenticated users to obtain unspecified data access via a property query.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w2mm-2636-p44v/GHSA-w2mm-2636-p44v.json b/advisories/unreviewed/2022/05/GHSA-w2mm-2636-p44v/GHSA-w2mm-2636-p44v.json index 5968387e2f7..6ec5e11a0d2 100644 --- a/advisories/unreviewed/2022/05/GHSA-w2mm-2636-p44v/GHSA-w2mm-2636-p44v.json +++ b/advisories/unreviewed/2022/05/GHSA-w2mm-2636-p44v/GHSA-w2mm-2636-p44v.json @@ -7,12 +7,8 @@ "CVE-2009-2112" ], "details": "Directory traversal vulnerability in include/page_bottom.php in phpFK 7.03 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the _FORUM[settings_design_style] parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w2pv-vxm3-7jr4/GHSA-w2pv-vxm3-7jr4.json b/advisories/unreviewed/2022/05/GHSA-w2pv-vxm3-7jr4/GHSA-w2pv-vxm3-7jr4.json index 8b78cb3f381..2efc4de115f 100644 --- a/advisories/unreviewed/2022/05/GHSA-w2pv-vxm3-7jr4/GHSA-w2pv-vxm3-7jr4.json +++ b/advisories/unreviewed/2022/05/GHSA-w2pv-vxm3-7jr4/GHSA-w2pv-vxm3-7jr4.json @@ -7,12 +7,8 @@ "CVE-2009-2295" ], "details": "Multiple integer overflows in CamlImages 2.2 and earlier might allow context-dependent attackers to execute arbitrary code via a crafted PNG image with large width and height values that trigger a heap-based buffer overflow in the (1) read_png_file or (2) read_png_file_as_rgb24 function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w39c-wjw2-365q/GHSA-w39c-wjw2-365q.json b/advisories/unreviewed/2022/05/GHSA-w39c-wjw2-365q/GHSA-w39c-wjw2-365q.json index 3676236e574..ae072cea0d3 100644 --- a/advisories/unreviewed/2022/05/GHSA-w39c-wjw2-365q/GHSA-w39c-wjw2-365q.json +++ b/advisories/unreviewed/2022/05/GHSA-w39c-wjw2-365q/GHSA-w39c-wjw2-365q.json @@ -7,12 +7,8 @@ "CVE-2009-2428" ], "details": "Multiple SQL injection vulnerabilities in Tausch Ticket Script 3 allow remote attackers to execute arbitrary SQL commands via the (1) userid parameter to suchauftraege_user.php and the (2) descr parameter to vote.php; and other unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w3jp-p4xg-pfwx/GHSA-w3jp-p4xg-pfwx.json b/advisories/unreviewed/2022/05/GHSA-w3jp-p4xg-pfwx/GHSA-w3jp-p4xg-pfwx.json index 13d5cab9b2c..818a7e84c5e 100644 --- a/advisories/unreviewed/2022/05/GHSA-w3jp-p4xg-pfwx/GHSA-w3jp-p4xg-pfwx.json +++ b/advisories/unreviewed/2022/05/GHSA-w3jp-p4xg-pfwx/GHSA-w3jp-p4xg-pfwx.json @@ -7,12 +7,8 @@ "CVE-2009-2191" ], "details": "Format string vulnerability in Login Window in Apple Mac OS X 10.4.11 and 10.5 before 10.5.8 allows attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in an application name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w3rq-pqrj-8wp6/GHSA-w3rq-pqrj-8wp6.json b/advisories/unreviewed/2022/05/GHSA-w3rq-pqrj-8wp6/GHSA-w3rq-pqrj-8wp6.json index 77a29ae5a89..164f691b983 100644 --- a/advisories/unreviewed/2022/05/GHSA-w3rq-pqrj-8wp6/GHSA-w3rq-pqrj-8wp6.json +++ b/advisories/unreviewed/2022/05/GHSA-w3rq-pqrj-8wp6/GHSA-w3rq-pqrj-8wp6.json @@ -7,12 +7,8 @@ "CVE-2009-2329" ], "details": "KerviNet Forum 1.1 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) admin/head.php, or (2) voting_diagram.php, (3) voting.php, (4) topics_search.php, (5) topics_list.php, (6) top_part.php, (7) quick_search.php, (8) quick_reply.php, (9) moder_menu.php, (10) messages_list.php, (11) menu.php, (12) head.php, (13) forums_list.php, (14) forum_statistics.php, (15) forum_info.php, or (16) birthday.php in include_files/, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w468-5jh3-rjmq/GHSA-w468-5jh3-rjmq.json b/advisories/unreviewed/2022/05/GHSA-w468-5jh3-rjmq/GHSA-w468-5jh3-rjmq.json index 6b3a779ff0d..f8c170f1966 100644 --- a/advisories/unreviewed/2022/05/GHSA-w468-5jh3-rjmq/GHSA-w468-5jh3-rjmq.json +++ b/advisories/unreviewed/2022/05/GHSA-w468-5jh3-rjmq/GHSA-w468-5jh3-rjmq.json @@ -7,12 +7,8 @@ "CVE-2009-2442" ], "details": "Cross-site scripting (XSS) vulnerability in public/index.php in Linea21 1.2.1 allows remote attackers to inject arbitrary web script or HTML via the search parameter in a resultats-recherche action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w48v-2whm-cj57/GHSA-w48v-2whm-cj57.json b/advisories/unreviewed/2022/05/GHSA-w48v-2whm-cj57/GHSA-w48v-2whm-cj57.json index d2ac96b13cd..81f05405dda 100644 --- a/advisories/unreviewed/2022/05/GHSA-w48v-2whm-cj57/GHSA-w48v-2whm-cj57.json +++ b/advisories/unreviewed/2022/05/GHSA-w48v-2whm-cj57/GHSA-w48v-2whm-cj57.json @@ -7,12 +7,8 @@ "CVE-2009-2454" ], "details": "Cross-site scripting (XSS) vulnerability in Citrix Web Interface 4.6, 5.0, and 5.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w4g4-v88p-5wq3/GHSA-w4g4-v88p-5wq3.json b/advisories/unreviewed/2022/05/GHSA-w4g4-v88p-5wq3/GHSA-w4g4-v88p-5wq3.json index 4ec486c3e31..994572a379b 100644 --- a/advisories/unreviewed/2022/05/GHSA-w4g4-v88p-5wq3/GHSA-w4g4-v88p-5wq3.json +++ b/advisories/unreviewed/2022/05/GHSA-w4g4-v88p-5wq3/GHSA-w4g4-v88p-5wq3.json @@ -7,12 +7,8 @@ "CVE-2009-2453" ], "details": "Citrix XenApp (formerly Presentation Server) 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is defined with the Access Gateway Advanced Edition filters, which allows attackers to bypass intended access restrictions via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w4v9-mpr7-54gm/GHSA-w4v9-mpr7-54gm.json b/advisories/unreviewed/2022/05/GHSA-w4v9-mpr7-54gm/GHSA-w4v9-mpr7-54gm.json index f55bfb33348..3d104a1493b 100644 --- a/advisories/unreviewed/2022/05/GHSA-w4v9-mpr7-54gm/GHSA-w4v9-mpr7-54gm.json +++ b/advisories/unreviewed/2022/05/GHSA-w4v9-mpr7-54gm/GHSA-w4v9-mpr7-54gm.json @@ -7,12 +7,8 @@ "CVE-2009-2327" ], "details": "Cross-site scripting (XSS) vulnerability in add_voting.php in KerviNet Forum 1.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the v_variant1 parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w5xj-x2c5-3g47/GHSA-w5xj-x2c5-3g47.json b/advisories/unreviewed/2022/05/GHSA-w5xj-x2c5-3g47/GHSA-w5xj-x2c5-3g47.json index 3a1be92cbf8..6dd8b37a88f 100644 --- a/advisories/unreviewed/2022/05/GHSA-w5xj-x2c5-3g47/GHSA-w5xj-x2c5-3g47.json +++ b/advisories/unreviewed/2022/05/GHSA-w5xj-x2c5-3g47/GHSA-w5xj-x2c5-3g47.json @@ -7,12 +7,8 @@ "CVE-2009-2204" ], "details": "Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS before 3.0.1 allows remote attackers to execute arbitrary code, obtain GPS coordinates, or enable the microphone via an SMS message that triggers memory corruption, as demonstrated by Charlie Miller at SyScan '09 Singapore.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w646-j359-7q63/GHSA-w646-j359-7q63.json b/advisories/unreviewed/2022/05/GHSA-w646-j359-7q63/GHSA-w646-j359-7q63.json index ff1a67ee69b..04998cbd443 100644 --- a/advisories/unreviewed/2022/05/GHSA-w646-j359-7q63/GHSA-w646-j359-7q63.json +++ b/advisories/unreviewed/2022/05/GHSA-w646-j359-7q63/GHSA-w646-j359-7q63.json @@ -7,12 +7,8 @@ "CVE-2009-2096" ], "details": "SQL injection vulnerability in house/listing_view.php in phpCollegeExchange 0.1.5c allows remote attackers to execute arbitrary SQL commands via the itemnr parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w67x-c7w9-jw4q/GHSA-w67x-c7w9-jw4q.json b/advisories/unreviewed/2022/05/GHSA-w67x-c7w9-jw4q/GHSA-w67x-c7w9-jw4q.json index 7f94a6ea9d2..a1a1ea2b758 100644 --- a/advisories/unreviewed/2022/05/GHSA-w67x-c7w9-jw4q/GHSA-w67x-c7w9-jw4q.json +++ b/advisories/unreviewed/2022/05/GHSA-w67x-c7w9-jw4q/GHSA-w67x-c7w9-jw4q.json @@ -7,12 +7,8 @@ "CVE-2009-2303" ], "details": "index.php in Aardvark Topsites PHP 5.2.1 and earlier allows remote attackers to obtain sensitive information via a negative integer value for the start parameter in a search action, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w98w-3mj2-7wj3/GHSA-w98w-3mj2-7wj3.json b/advisories/unreviewed/2022/05/GHSA-w98w-3mj2-7wj3/GHSA-w98w-3mj2-7wj3.json index ee009bc88ba..48bdcbf8694 100644 --- a/advisories/unreviewed/2022/05/GHSA-w98w-3mj2-7wj3/GHSA-w98w-3mj2-7wj3.json +++ b/advisories/unreviewed/2022/05/GHSA-w98w-3mj2-7wj3/GHSA-w98w-3mj2-7wj3.json @@ -7,12 +7,8 @@ "CVE-2009-2410" ], "details": "The local_handler_callback function in server/responder/pam/pam_LOCAL_domain.c in sssd 0.4.1 does not properly handle blank-password accounts in the SSSD BE database, which allows context-dependent attackers to obtain access by sending the account's username, in conjunction with an arbitrary password, over an ssh connection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wcpv-6xc3-pvh5/GHSA-wcpv-6xc3-pvh5.json b/advisories/unreviewed/2022/05/GHSA-wcpv-6xc3-pvh5/GHSA-wcpv-6xc3-pvh5.json index a58ab0be41f..03f9cc36c69 100644 --- a/advisories/unreviewed/2022/05/GHSA-wcpv-6xc3-pvh5/GHSA-wcpv-6xc3-pvh5.json +++ b/advisories/unreviewed/2022/05/GHSA-wcpv-6xc3-pvh5/GHSA-wcpv-6xc3-pvh5.json @@ -7,12 +7,8 @@ "CVE-2009-2534" ], "details": "RealNetworks Helix Server and Helix Mobile Server before 13.0.0 allow remote attackers to cause a denial of service (daemon crash) via an RTSP SETUP request that (1) specifies the / URI or (2) lacks a / character in the URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wfgr-mjw4-7xpm/GHSA-wfgr-mjw4-7xpm.json b/advisories/unreviewed/2022/05/GHSA-wfgr-mjw4-7xpm/GHSA-wfgr-mjw4-7xpm.json index be63b1023d7..d4e97691966 100644 --- a/advisories/unreviewed/2022/05/GHSA-wfgr-mjw4-7xpm/GHSA-wfgr-mjw4-7xpm.json +++ b/advisories/unreviewed/2022/05/GHSA-wfgr-mjw4-7xpm/GHSA-wfgr-mjw4-7xpm.json @@ -7,12 +7,8 @@ "CVE-2009-1934" ], "details": "Cross-site scripting (XSS) vulnerability in the Reverse Proxy Plug-in in Sun Java System Web Server 6.1 before SP11 allows remote attackers to inject arbitrary web script or HTML via the query string in situations that result in a 502 Gateway error.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wfjh-r5w7-m7m6/GHSA-wfjh-r5w7-m7m6.json b/advisories/unreviewed/2022/05/GHSA-wfjh-r5w7-m7m6/GHSA-wfjh-r5w7-m7m6.json index 2184eb0a800..3361e118fe6 100644 --- a/advisories/unreviewed/2022/05/GHSA-wfjh-r5w7-m7m6/GHSA-wfjh-r5w7-m7m6.json +++ b/advisories/unreviewed/2022/05/GHSA-wfjh-r5w7-m7m6/GHSA-wfjh-r5w7-m7m6.json @@ -7,12 +7,8 @@ "CVE-2009-2108" ], "details": "git-daemon in git 1.4.4.5 through 1.6.3 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a request containing extra unrecognized arguments.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wgmm-f3jx-2p53/GHSA-wgmm-f3jx-2p53.json b/advisories/unreviewed/2022/05/GHSA-wgmm-f3jx-2p53/GHSA-wgmm-f3jx-2p53.json index 85ae9aad58d..5af0949f299 100644 --- a/advisories/unreviewed/2022/05/GHSA-wgmm-f3jx-2p53/GHSA-wgmm-f3jx-2p53.json +++ b/advisories/unreviewed/2022/05/GHSA-wgmm-f3jx-2p53/GHSA-wgmm-f3jx-2p53.json @@ -7,12 +7,8 @@ "CVE-2009-2423" ], "details": "SQL injection vulnerability in category.php in Ebay Clone 2009 allows remote attackers to execute arbitrary SQL commands via the cate_id parameter in a list action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wjqq-crmc-62qj/GHSA-wjqq-crmc-62qj.json b/advisories/unreviewed/2022/05/GHSA-wjqq-crmc-62qj/GHSA-wjqq-crmc-62qj.json index f9dfb76012e..fe5e99eb50c 100644 --- a/advisories/unreviewed/2022/05/GHSA-wjqq-crmc-62qj/GHSA-wjqq-crmc-62qj.json +++ b/advisories/unreviewed/2022/05/GHSA-wjqq-crmc-62qj/GHSA-wjqq-crmc-62qj.json @@ -7,12 +7,8 @@ "CVE-2009-1928" ], "details": "Stack consumption vulnerability in the LDAP service in Active Directory on Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2; Active Directory Application Mode (ADAM) on Windows XP SP2 and SP3 and Server 2003 SP2; and Active Directory Lightweight Directory Service (AD LDS) on Windows Server 2008 Gold and SP2 allows remote attackers to cause a denial of service (system hang) via a malformed (1) LDAP or (2) LDAPS request, aka \"LSASS Recursive Stack Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wp4r-4843-vx39/GHSA-wp4r-4843-vx39.json b/advisories/unreviewed/2022/05/GHSA-wp4r-4843-vx39/GHSA-wp4r-4843-vx39.json index 51a9ccb8803..b2c269598a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-wp4r-4843-vx39/GHSA-wp4r-4843-vx39.json +++ b/advisories/unreviewed/2022/05/GHSA-wp4r-4843-vx39/GHSA-wp4r-4843-vx39.json @@ -7,12 +7,8 @@ "CVE-2009-2062" ], "details": "Apple Safari before 3.2.2 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying this CONNECT response to specify a 302 redirect to an arbitrary https web site.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wp6c-mcj9-26jv/GHSA-wp6c-mcj9-26jv.json b/advisories/unreviewed/2022/05/GHSA-wp6c-mcj9-26jv/GHSA-wp6c-mcj9-26jv.json index ed824c1c806..d8fa031bd4b 100644 --- a/advisories/unreviewed/2022/05/GHSA-wp6c-mcj9-26jv/GHSA-wp6c-mcj9-26jv.json +++ b/advisories/unreviewed/2022/05/GHSA-wp6c-mcj9-26jv/GHSA-wp6c-mcj9-26jv.json @@ -7,12 +7,8 @@ "CVE-2009-1946" ], "details": "PHP remote file inclusion vulnerability in latestposts.php in AdaptBB 1.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the forumspath parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wpm3-jfj7-v295/GHSA-wpm3-jfj7-v295.json b/advisories/unreviewed/2022/05/GHSA-wpm3-jfj7-v295/GHSA-wpm3-jfj7-v295.json index cc993471cd5..746ee406a25 100644 --- a/advisories/unreviewed/2022/05/GHSA-wpm3-jfj7-v295/GHSA-wpm3-jfj7-v295.json +++ b/advisories/unreviewed/2022/05/GHSA-wpm3-jfj7-v295/GHSA-wpm3-jfj7-v295.json @@ -7,12 +7,8 @@ "CVE-2009-1952" ], "details": "Multiple SQL injection vulnerabilities in the administrative login feature in PropertyMax Pro FREE 0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ww7v-rv5h-gmwm/GHSA-ww7v-rv5h-gmwm.json b/advisories/unreviewed/2022/05/GHSA-ww7v-rv5h-gmwm/GHSA-ww7v-rv5h-gmwm.json index 5a6b72b454d..7b7166aca94 100644 --- a/advisories/unreviewed/2022/05/GHSA-ww7v-rv5h-gmwm/GHSA-ww7v-rv5h-gmwm.json +++ b/advisories/unreviewed/2022/05/GHSA-ww7v-rv5h-gmwm/GHSA-ww7v-rv5h-gmwm.json @@ -7,12 +7,8 @@ "CVE-2009-2266" ], "details": "OXID eShop 4.x before 4.1.4-21266, 3.x, and 2.x allows remote attackers to obtain sensitive information (session details and order history of other users) via a crafted cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wx3q-mhwj-6vqq/GHSA-wx3q-mhwj-6vqq.json b/advisories/unreviewed/2022/05/GHSA-wx3q-mhwj-6vqq/GHSA-wx3q-mhwj-6vqq.json index afed5a00952..9462c05a484 100644 --- a/advisories/unreviewed/2022/05/GHSA-wx3q-mhwj-6vqq/GHSA-wx3q-mhwj-6vqq.json +++ b/advisories/unreviewed/2022/05/GHSA-wx3q-mhwj-6vqq/GHSA-wx3q-mhwj-6vqq.json @@ -7,12 +7,8 @@ "CVE-2009-2229" ], "details": "Directory traversal vulnerability in engine.php in Kasseler CMS 1.3.5 lite allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter during a download action, a different vector than CVE-2008-3087. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x36f-m7f6-6mhj/GHSA-x36f-m7f6-6mhj.json b/advisories/unreviewed/2022/05/GHSA-x36f-m7f6-6mhj/GHSA-x36f-m7f6-6mhj.json index 0df7446325a..644184bc7ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-x36f-m7f6-6mhj/GHSA-x36f-m7f6-6mhj.json +++ b/advisories/unreviewed/2022/05/GHSA-x36f-m7f6-6mhj/GHSA-x36f-m7f6-6mhj.json @@ -7,12 +7,8 @@ "CVE-2009-2391" ], "details": "Cross-site scripting (XSS) vulnerability in text.php in Virtuenetz Virtue Online Test Generator allows remote attackers to inject arbitrary web script or HTML via the tid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x3gg-ffv7-p97q/GHSA-x3gg-ffv7-p97q.json b/advisories/unreviewed/2022/05/GHSA-x3gg-ffv7-p97q/GHSA-x3gg-ffv7-p97q.json index ce5881fcc78..cb500a9ffd4 100644 --- a/advisories/unreviewed/2022/05/GHSA-x3gg-ffv7-p97q/GHSA-x3gg-ffv7-p97q.json +++ b/advisories/unreviewed/2022/05/GHSA-x3gg-ffv7-p97q/GHSA-x3gg-ffv7-p97q.json @@ -7,12 +7,8 @@ "CVE-2009-2402" ], "details": "SQL injection vulnerability in index.php in the forum module in PHPEcho CMS 2.0-rc3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a thread action, a different vector than CVE-2008-0355.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x5gw-v7fx-h638/GHSA-x5gw-v7fx-h638.json b/advisories/unreviewed/2022/05/GHSA-x5gw-v7fx-h638/GHSA-x5gw-v7fx-h638.json index 6690364f2e0..784d3df1781 100644 --- a/advisories/unreviewed/2022/05/GHSA-x5gw-v7fx-h638/GHSA-x5gw-v7fx-h638.json +++ b/advisories/unreviewed/2022/05/GHSA-x5gw-v7fx-h638/GHSA-x5gw-v7fx-h638.json @@ -7,12 +7,8 @@ "CVE-2009-2220" ], "details": "Multiple directory traversal vulnerabilities in Tribiq CMS 5.0.12c, when register_globals is enabled and magic_quotes_gpc is disabled, allow remote attackers to include and possibly execute arbitrary files via directory traversal sequences in the template_path parameter to (1) masthead.inc.php, (2) toppanel.inc.php, and (3) contact.inc.php in templates/mytribiqsite/tribiq-CL-9000/includes; and the use_template_family parameter to (4) templates/mytribiqsite/tribiq-CL-9000/includes/nlarlist_content.inc.php. NOTE: the tribal-GPL-1066/includes/header.inc.php vector is already covered by CVE-2008-4894.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x5hg-hv2j-7wv6/GHSA-x5hg-hv2j-7wv6.json b/advisories/unreviewed/2022/05/GHSA-x5hg-hv2j-7wv6/GHSA-x5hg-hv2j-7wv6.json index b26e4fb1ed7..3fb523cae1b 100644 --- a/advisories/unreviewed/2022/05/GHSA-x5hg-hv2j-7wv6/GHSA-x5hg-hv2j-7wv6.json +++ b/advisories/unreviewed/2022/05/GHSA-x5hg-hv2j-7wv6/GHSA-x5hg-hv2j-7wv6.json @@ -7,12 +7,8 @@ "CVE-2009-1938" ], "details": "Cross-site scripting (XSS) vulnerability in Joomla! 1.5.x through 1.5.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to database output and the frontend administrative panel.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x5rp-cvj4-pqwq/GHSA-x5rp-cvj4-pqwq.json b/advisories/unreviewed/2022/05/GHSA-x5rp-cvj4-pqwq/GHSA-x5rp-cvj4-pqwq.json index a5727fe61c0..3036e540487 100644 --- a/advisories/unreviewed/2022/05/GHSA-x5rp-cvj4-pqwq/GHSA-x5rp-cvj4-pqwq.json +++ b/advisories/unreviewed/2022/05/GHSA-x5rp-cvj4-pqwq/GHSA-x5rp-cvj4-pqwq.json @@ -7,12 +7,8 @@ "CVE-2009-2430" ], "details": "Unspecified vulnerability in auditconfig in Sun Solaris 8, 9, 10, and OpenSolaris snv_01 through snv_58, when Solaris Auditing is enabled, allows local users with an RBAC execution profile for auditconfig to gain privileges via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x68x-ch2m-c24j/GHSA-x68x-ch2m-c24j.json b/advisories/unreviewed/2022/05/GHSA-x68x-ch2m-c24j/GHSA-x68x-ch2m-c24j.json index ed273ea736a..f7fa974e367 100644 --- a/advisories/unreviewed/2022/05/GHSA-x68x-ch2m-c24j/GHSA-x68x-ch2m-c24j.json +++ b/advisories/unreviewed/2022/05/GHSA-x68x-ch2m-c24j/GHSA-x68x-ch2m-c24j.json @@ -7,12 +7,8 @@ "CVE-2009-2345" ], "details": "Multiple SQL injection vulnerabilities in ClanSphere before 2009.0.1 allow remote attackers to execute arbitrary SQL commands via unknown parameters to the gbook module and unspecified other components.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x736-3gm2-79w7/GHSA-x736-3gm2-79w7.json b/advisories/unreviewed/2022/05/GHSA-x736-3gm2-79w7/GHSA-x736-3gm2-79w7.json index a474b104eee..2f518d7b911 100644 --- a/advisories/unreviewed/2022/05/GHSA-x736-3gm2-79w7/GHSA-x736-3gm2-79w7.json +++ b/advisories/unreviewed/2022/05/GHSA-x736-3gm2-79w7/GHSA-x736-3gm2-79w7.json @@ -7,12 +7,8 @@ "CVE-2009-1941" ], "details": "PAD Site Scripts 3.6 stores sensitive information under the web document root with insufficient access control, which allows remote attackers to download the database and obtain sensitive information via a direct request for dbbackup.txt.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x7f5-cr2c-qwr8/GHSA-x7f5-cr2c-qwr8.json b/advisories/unreviewed/2022/05/GHSA-x7f5-cr2c-qwr8/GHSA-x7f5-cr2c-qwr8.json index 0ae7d17a053..409ea439c6f 100644 --- a/advisories/unreviewed/2022/05/GHSA-x7f5-cr2c-qwr8/GHSA-x7f5-cr2c-qwr8.json +++ b/advisories/unreviewed/2022/05/GHSA-x7f5-cr2c-qwr8/GHSA-x7f5-cr2c-qwr8.json @@ -7,12 +7,8 @@ "CVE-2009-2153" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in Impleo Music Collection 2.0 allows remote attackers to inject arbitrary web script or HTML via the sort parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x9rg-63qg-5x2v/GHSA-x9rg-63qg-5x2v.json b/advisories/unreviewed/2022/05/GHSA-x9rg-63qg-5x2v/GHSA-x9rg-63qg-5x2v.json index 961ad92f1fd..ce51335376e 100644 --- a/advisories/unreviewed/2022/05/GHSA-x9rg-63qg-5x2v/GHSA-x9rg-63qg-5x2v.json +++ b/advisories/unreviewed/2022/05/GHSA-x9rg-63qg-5x2v/GHSA-x9rg-63qg-5x2v.json @@ -7,12 +7,8 @@ "CVE-2009-2746" ], "details": "Cross-site request forgery (CSRF) vulnerability in the administrative console in the Security component in IBM WebSphere Application Server (WAS) 6.0.2 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 allows remote attackers to hijack the authentication of administrators via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x9rv-vww8-vmj9/GHSA-x9rv-vww8-vmj9.json b/advisories/unreviewed/2022/05/GHSA-x9rv-vww8-vmj9/GHSA-x9rv-vww8-vmj9.json index db4b351aa66..f4ba61ec551 100644 --- a/advisories/unreviewed/2022/05/GHSA-x9rv-vww8-vmj9/GHSA-x9rv-vww8-vmj9.json +++ b/advisories/unreviewed/2022/05/GHSA-x9rv-vww8-vmj9/GHSA-x9rv-vww8-vmj9.json @@ -7,12 +7,8 @@ "CVE-2009-2474" ], "details": "neon before 0.28.6, when OpenSSL or GnuTLS is used, does not properly handle a '\\0' character in a domain name in the subject's Common Name (CN) field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a legitimate Certification Authority, a related issue to CVE-2009-2408.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xc2g-r5wr-6qmc/GHSA-xc2g-r5wr-6qmc.json b/advisories/unreviewed/2022/05/GHSA-xc2g-r5wr-6qmc/GHSA-xc2g-r5wr-6qmc.json index 8dee924cc1c..4237c71df5d 100644 --- a/advisories/unreviewed/2022/05/GHSA-xc2g-r5wr-6qmc/GHSA-xc2g-r5wr-6qmc.json +++ b/advisories/unreviewed/2022/05/GHSA-xc2g-r5wr-6qmc/GHSA-xc2g-r5wr-6qmc.json @@ -7,12 +7,8 @@ "CVE-2009-2257" ], "details": "The administrative web interface on the Netgear DG632 with firmware 3.4.0_ap allows remote attackers to bypass authentication via a direct request to (1) gateway/commands/saveconfig.html, and (2) stattbl.htm, (3) modemmenu.htm, (4) onload.htm, (5) form.css, (6) utility.js, and possibly (7) indextop.htm in html/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xc9p-79f6-v2v9/GHSA-xc9p-79f6-v2v9.json b/advisories/unreviewed/2022/05/GHSA-xc9p-79f6-v2v9/GHSA-xc9p-79f6-v2v9.json index 25cbd0a5f00..f2cd08b64a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-xc9p-79f6-v2v9/GHSA-xc9p-79f6-v2v9.json +++ b/advisories/unreviewed/2022/05/GHSA-xc9p-79f6-v2v9/GHSA-xc9p-79f6-v2v9.json @@ -7,12 +7,8 @@ "CVE-2009-2151" ], "details": "Directory traversal vulnerability in index.php in AdaptWeb 0.9.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the newlang parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xggx-wg32-cjw8/GHSA-xggx-wg32-cjw8.json b/advisories/unreviewed/2022/05/GHSA-xggx-wg32-cjw8/GHSA-xggx-wg32-cjw8.json index f31b4ecd2df..e12d12182e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-xggx-wg32-cjw8/GHSA-xggx-wg32-cjw8.json +++ b/advisories/unreviewed/2022/05/GHSA-xggx-wg32-cjw8/GHSA-xggx-wg32-cjw8.json @@ -7,12 +7,8 @@ "CVE-2009-1988" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise HRMS eProfile Manager component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8.9 Bundle 19, and 9.0 Bundle 9 allows remote authenticated users to affect confidentiality via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xgx7-92gq-gr3r/GHSA-xgx7-92gq-gr3r.json b/advisories/unreviewed/2022/05/GHSA-xgx7-92gq-gr3r/GHSA-xgx7-92gq-gr3r.json index 9491428d15e..86a8273a5e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-xgx7-92gq-gr3r/GHSA-xgx7-92gq-gr3r.json +++ b/advisories/unreviewed/2022/05/GHSA-xgx7-92gq-gr3r/GHSA-xgx7-92gq-gr3r.json @@ -7,12 +7,8 @@ "CVE-2009-2317" ], "details": "The Axesstel MV 410R has a certain default administrator password, and does not force a password change, which makes it easier for remote attackers to obtain access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xh6m-92pm-858v/GHSA-xh6m-92pm-858v.json b/advisories/unreviewed/2022/05/GHSA-xh6m-92pm-858v/GHSA-xh6m-92pm-858v.json index a53edc6588e..4d8690af86a 100644 --- a/advisories/unreviewed/2022/05/GHSA-xh6m-92pm-858v/GHSA-xh6m-92pm-858v.json +++ b/advisories/unreviewed/2022/05/GHSA-xh6m-92pm-858v/GHSA-xh6m-92pm-858v.json @@ -7,12 +7,8 @@ "CVE-2009-2747" ], "details": "The Java Naming and Directory Interface (JNDI) implementation in IBM WebSphere Application Server (WAS) 6.0 before 6.0.2.39, 6.1 before 6.1.0.29, and 7.0 before 7.0.0.7 does not properly restrict access to UserRegistry object methods, which allows remote attackers to obtain sensitive information via a crafted method call.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xj2h-mwjp-6j9v/GHSA-xj2h-mwjp-6j9v.json b/advisories/unreviewed/2022/05/GHSA-xj2h-mwjp-6j9v/GHSA-xj2h-mwjp-6j9v.json index 021dd2f580b..191114d76f8 100644 --- a/advisories/unreviewed/2022/05/GHSA-xj2h-mwjp-6j9v/GHSA-xj2h-mwjp-6j9v.json +++ b/advisories/unreviewed/2022/05/GHSA-xj2h-mwjp-6j9v/GHSA-xj2h-mwjp-6j9v.json @@ -7,12 +7,8 @@ "CVE-2009-2366" ], "details": "SQL injection vulnerability in login.asp in DataCheck Solutions ForumPal FE 1.1 and ForumPal 1.5 allows remote attackers to execute arbitrary SQL commands via the (1) password parameter in 1.1 and (2) p_password parameter in 1.5. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xm3p-m4gm-9w7r/GHSA-xm3p-m4gm-9w7r.json b/advisories/unreviewed/2022/05/GHSA-xm3p-m4gm-9w7r/GHSA-xm3p-m4gm-9w7r.json index 75d559d9d0d..375cfe508fb 100644 --- a/advisories/unreviewed/2022/05/GHSA-xm3p-m4gm-9w7r/GHSA-xm3p-m4gm-9w7r.json +++ b/advisories/unreviewed/2022/05/GHSA-xm3p-m4gm-9w7r/GHSA-xm3p-m4gm-9w7r.json @@ -7,12 +7,8 @@ "CVE-2009-2331" ], "details": "Multiple static code injection vulnerabilities in CMS Chainuk 1.2 and earlier allow remote attackers to inject arbitrary PHP code (1) into settings.php via the menu parameter to admin_settings.php or (2) into a content/=NUMBER.php file via the title parameter to admin_new.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xm94-78r5-v85h/GHSA-xm94-78r5-v85h.json b/advisories/unreviewed/2022/05/GHSA-xm94-78r5-v85h/GHSA-xm94-78r5-v85h.json index 84b71d1271c..b8f282ce59a 100644 --- a/advisories/unreviewed/2022/05/GHSA-xm94-78r5-v85h/GHSA-xm94-78r5-v85h.json +++ b/advisories/unreviewed/2022/05/GHSA-xm94-78r5-v85h/GHSA-xm94-78r5-v85h.json @@ -7,12 +7,8 @@ "CVE-2009-2094" ], "details": "Unspecified vulnerability in IBM WebSphere Commerce 6.0 Enterprise before 6.0.0.8, when trace is enabled, allows local users to obtain sensitive information via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xmfm-x5xv-628r/GHSA-xmfm-x5xv-628r.json b/advisories/unreviewed/2022/05/GHSA-xmfm-x5xv-628r/GHSA-xmfm-x5xv-628r.json index c7df8c4ebdf..15f951e7184 100644 --- a/advisories/unreviewed/2022/05/GHSA-xmfm-x5xv-628r/GHSA-xmfm-x5xv-628r.json +++ b/advisories/unreviewed/2022/05/GHSA-xmfm-x5xv-628r/GHSA-xmfm-x5xv-628r.json @@ -7,12 +7,8 @@ "CVE-2009-2553" ], "details": "Multiple SQL injection vulnerabilities in comments.php in Super Simple Blog Script 2.5.4, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the entry parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xmgw-g27r-xxpm/GHSA-xmgw-g27r-xxpm.json b/advisories/unreviewed/2022/05/GHSA-xmgw-g27r-xxpm/GHSA-xmgw-g27r-xxpm.json index c671385cdd5..7f28065c4da 100644 --- a/advisories/unreviewed/2022/05/GHSA-xmgw-g27r-xxpm/GHSA-xmgw-g27r-xxpm.json +++ b/advisories/unreviewed/2022/05/GHSA-xmgw-g27r-xxpm/GHSA-xmgw-g27r-xxpm.json @@ -7,12 +7,8 @@ "CVE-2009-2210" ], "details": "Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a multipart/alternative e-mail message containing a text/enhanced part that triggers access to an incorrect object type.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xmwj-78cf-9q9f/GHSA-xmwj-78cf-9q9f.json b/advisories/unreviewed/2022/05/GHSA-xmwj-78cf-9q9f/GHSA-xmwj-78cf-9q9f.json index 7373b43c0cf..bf29a0bb072 100644 --- a/advisories/unreviewed/2022/05/GHSA-xmwj-78cf-9q9f/GHSA-xmwj-78cf-9q9f.json +++ b/advisories/unreviewed/2022/05/GHSA-xmwj-78cf-9q9f/GHSA-xmwj-78cf-9q9f.json @@ -7,12 +7,8 @@ "CVE-2009-2400" ], "details": "SQL injection vulnerability in the PHP (com_php) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xpgr-h993-w58x/GHSA-xpgr-h993-w58x.json b/advisories/unreviewed/2022/05/GHSA-xpgr-h993-w58x/GHSA-xpgr-h993-w58x.json index 1497de76361..71874bb2782 100644 --- a/advisories/unreviewed/2022/05/GHSA-xpgr-h993-w58x/GHSA-xpgr-h993-w58x.json +++ b/advisories/unreviewed/2022/05/GHSA-xpgr-h993-w58x/GHSA-xpgr-h993-w58x.json @@ -7,12 +7,8 @@ "CVE-2009-2243" ], "details": "SQL injection vulnerability in active_appointments.asp in ASP Inline Corporate Calendar allows remote attackers to execute arbitrary SQL commands via the sortby parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xq44-w95m-vr58/GHSA-xq44-w95m-vr58.json b/advisories/unreviewed/2022/05/GHSA-xq44-w95m-vr58/GHSA-xq44-w95m-vr58.json index ed231fcc913..9483bfe2e95 100644 --- a/advisories/unreviewed/2022/05/GHSA-xq44-w95m-vr58/GHSA-xq44-w95m-vr58.json +++ b/advisories/unreviewed/2022/05/GHSA-xq44-w95m-vr58/GHSA-xq44-w95m-vr58.json @@ -7,12 +7,8 @@ "CVE-2009-2071" ], "details": "Google Chrome before 1.0.154.53 displays a cached certificate for a (1) 4xx or (2) 5xx CONNECT response page returned by a proxy server, which allows man-in-the-middle attackers to spoof an arbitrary https site by letting a browser obtain a valid certificate from this site during one request, and then sending the browser a crafted 502 response page upon a subsequent request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xq48-v3hh-p87r/GHSA-xq48-v3hh-p87r.json b/advisories/unreviewed/2022/05/GHSA-xq48-v3hh-p87r/GHSA-xq48-v3hh-p87r.json index 799e6817f4c..76a31e6fabd 100644 --- a/advisories/unreviewed/2022/05/GHSA-xq48-v3hh-p87r/GHSA-xq48-v3hh-p87r.json +++ b/advisories/unreviewed/2022/05/GHSA-xq48-v3hh-p87r/GHSA-xq48-v3hh-p87r.json @@ -7,12 +7,8 @@ "CVE-2009-2048" ], "details": "Cross-site scripting (XSS) vulnerability in the Administration interface in Cisco Customer Response Solutions (CRS) before 7.0(1) SR2 in Cisco Unified Contact Center Express (aka CCX) server allows remote authenticated users to inject arbitrary web script or HTML into the CCX database via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xrgv-2w7g-m84q/GHSA-xrgv-2w7g-m84q.json b/advisories/unreviewed/2022/05/GHSA-xrgv-2w7g-m84q/GHSA-xrgv-2w7g-m84q.json index a7c18d1b39b..c46f5b49258 100644 --- a/advisories/unreviewed/2022/05/GHSA-xrgv-2w7g-m84q/GHSA-xrgv-2w7g-m84q.json +++ b/advisories/unreviewed/2022/05/GHSA-xrgv-2w7g-m84q/GHSA-xrgv-2w7g-m84q.json @@ -7,12 +7,8 @@ "CVE-2009-2751" ], "details": "IBM WebSphere Commerce 7.0 uses the same cryptographic key for session attributes and merchant data encryption, which has unspecified impact and remote attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xv87-5fp5-4jrj/GHSA-xv87-5fp5-4jrj.json b/advisories/unreviewed/2022/05/GHSA-xv87-5fp5-4jrj/GHSA-xv87-5fp5-4jrj.json index b2726ce7e0f..6f6dc9ecb69 100644 --- a/advisories/unreviewed/2022/05/GHSA-xv87-5fp5-4jrj/GHSA-xv87-5fp5-4jrj.json +++ b/advisories/unreviewed/2022/05/GHSA-xv87-5fp5-4jrj/GHSA-xv87-5fp5-4jrj.json @@ -7,12 +7,8 @@ "CVE-2009-2124" ], "details": "Directory traversal vulnerability in page.php in Elvin 1.2.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xwrr-w87j-j7m5/GHSA-xwrr-w87j-j7m5.json b/advisories/unreviewed/2022/05/GHSA-xwrr-w87j-j7m5/GHSA-xwrr-w87j-j7m5.json index 13441e3ca3a..7d08a0ae0ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-xwrr-w87j-j7m5/GHSA-xwrr-w87j-j7m5.json +++ b/advisories/unreviewed/2022/05/GHSA-xwrr-w87j-j7m5/GHSA-xwrr-w87j-j7m5.json @@ -7,12 +7,8 @@ "CVE-2009-2359" ], "details": "Multiple SQL injection vulnerabilities in TekRADIUS 3.0 allow context-dependent attackers to execute arbitrary SQL commands via (1) the GUI client, as demonstrated by input to the Browse Users text box in the Users tab; or (2) the command-line client, as demonstrated by a certain trcli -r command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xwvm-8xx6-229v/GHSA-xwvm-8xx6-229v.json b/advisories/unreviewed/2022/05/GHSA-xwvm-8xx6-229v/GHSA-xwvm-8xx6-229v.json index 46718d3d12d..eb40fa902b9 100644 --- a/advisories/unreviewed/2022/05/GHSA-xwvm-8xx6-229v/GHSA-xwvm-8xx6-229v.json +++ b/advisories/unreviewed/2022/05/GHSA-xwvm-8xx6-229v/GHSA-xwvm-8xx6-229v.json @@ -7,12 +7,8 @@ "CVE-2009-2472" ], "details": "Mozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during object construction, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted document, related to a \"cross origin wrapper bypass.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xxf8-w472-5r42/GHSA-xxf8-w472-5r42.json b/advisories/unreviewed/2022/05/GHSA-xxf8-w472-5r42/GHSA-xxf8-w472-5r42.json index 82bca20ee7a..1c01d420c61 100644 --- a/advisories/unreviewed/2022/05/GHSA-xxf8-w472-5r42/GHSA-xxf8-w472-5r42.json +++ b/advisories/unreviewed/2022/05/GHSA-xxf8-w472-5r42/GHSA-xxf8-w472-5r42.json @@ -7,12 +7,8 @@ "CVE-2009-2396" ], "details": "PHP remote file inclusion vulnerability in template/album.php in DM Albums 1.9.2, as used standalone or as a WordPress plugin, allows remote attackers to execute arbitrary PHP code via a URL in the SECURITY_FILE parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xxgp-39jq-p3c6/GHSA-xxgp-39jq-p3c6.json b/advisories/unreviewed/2022/05/GHSA-xxgp-39jq-p3c6/GHSA-xxgp-39jq-p3c6.json index 928adf873a1..067bde128ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-xxgp-39jq-p3c6/GHSA-xxgp-39jq-p3c6.json +++ b/advisories/unreviewed/2022/05/GHSA-xxgp-39jq-p3c6/GHSA-xxgp-39jq-p3c6.json @@ -7,12 +7,8 @@ "CVE-2009-2014" ], "details": "SQL injection vulnerability in the ComSchool (com_school) component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the classid parameter in a showclass action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-29ph-hfjm-vrf7/GHSA-29ph-hfjm-vrf7.json b/advisories/unreviewed/2023/02/GHSA-29ph-hfjm-vrf7/GHSA-29ph-hfjm-vrf7.json index 8480780597a..dc3ba813c59 100644 --- a/advisories/unreviewed/2023/02/GHSA-29ph-hfjm-vrf7/GHSA-29ph-hfjm-vrf7.json +++ b/advisories/unreviewed/2023/02/GHSA-29ph-hfjm-vrf7/GHSA-29ph-hfjm-vrf7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-2mqh-jw97-9h7h/GHSA-2mqh-jw97-9h7h.json b/advisories/unreviewed/2023/02/GHSA-2mqh-jw97-9h7h/GHSA-2mqh-jw97-9h7h.json index 472c43f0b45..823ba73b5ae 100644 --- a/advisories/unreviewed/2023/02/GHSA-2mqh-jw97-9h7h/GHSA-2mqh-jw97-9h7h.json +++ b/advisories/unreviewed/2023/02/GHSA-2mqh-jw97-9h7h/GHSA-2mqh-jw97-9h7h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-4r36-vxg8-p9vx/GHSA-4r36-vxg8-p9vx.json b/advisories/unreviewed/2023/02/GHSA-4r36-vxg8-p9vx/GHSA-4r36-vxg8-p9vx.json index f03a360e1f1..d189593d84a 100644 --- a/advisories/unreviewed/2023/02/GHSA-4r36-vxg8-p9vx/GHSA-4r36-vxg8-p9vx.json +++ b/advisories/unreviewed/2023/02/GHSA-4r36-vxg8-p9vx/GHSA-4r36-vxg8-p9vx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-4vm4-g86c-mg83/GHSA-4vm4-g86c-mg83.json b/advisories/unreviewed/2023/02/GHSA-4vm4-g86c-mg83/GHSA-4vm4-g86c-mg83.json index 4a016a70048..57f591dc271 100644 --- a/advisories/unreviewed/2023/02/GHSA-4vm4-g86c-mg83/GHSA-4vm4-g86c-mg83.json +++ b/advisories/unreviewed/2023/02/GHSA-4vm4-g86c-mg83/GHSA-4vm4-g86c-mg83.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-596g-4347-jmmq/GHSA-596g-4347-jmmq.json b/advisories/unreviewed/2023/02/GHSA-596g-4347-jmmq/GHSA-596g-4347-jmmq.json index ed19363fe63..13cc204e033 100644 --- a/advisories/unreviewed/2023/02/GHSA-596g-4347-jmmq/GHSA-596g-4347-jmmq.json +++ b/advisories/unreviewed/2023/02/GHSA-596g-4347-jmmq/GHSA-596g-4347-jmmq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-59hw-87ch-xp5v/GHSA-59hw-87ch-xp5v.json b/advisories/unreviewed/2023/02/GHSA-59hw-87ch-xp5v/GHSA-59hw-87ch-xp5v.json index 84398d8571c..2fcf088319c 100644 --- a/advisories/unreviewed/2023/02/GHSA-59hw-87ch-xp5v/GHSA-59hw-87ch-xp5v.json +++ b/advisories/unreviewed/2023/02/GHSA-59hw-87ch-xp5v/GHSA-59hw-87ch-xp5v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-5v93-vgwv-qch2/GHSA-5v93-vgwv-qch2.json b/advisories/unreviewed/2023/02/GHSA-5v93-vgwv-qch2/GHSA-5v93-vgwv-qch2.json index d6a36a1c382..6d3e6c9b327 100644 --- a/advisories/unreviewed/2023/02/GHSA-5v93-vgwv-qch2/GHSA-5v93-vgwv-qch2.json +++ b/advisories/unreviewed/2023/02/GHSA-5v93-vgwv-qch2/GHSA-5v93-vgwv-qch2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-6hfv-ggj7-68jh/GHSA-6hfv-ggj7-68jh.json b/advisories/unreviewed/2023/02/GHSA-6hfv-ggj7-68jh/GHSA-6hfv-ggj7-68jh.json index d6bbfd7e043..7541216f70a 100644 --- a/advisories/unreviewed/2023/02/GHSA-6hfv-ggj7-68jh/GHSA-6hfv-ggj7-68jh.json +++ b/advisories/unreviewed/2023/02/GHSA-6hfv-ggj7-68jh/GHSA-6hfv-ggj7-68jh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-7737-vff2-9jq5/GHSA-7737-vff2-9jq5.json b/advisories/unreviewed/2023/02/GHSA-7737-vff2-9jq5/GHSA-7737-vff2-9jq5.json index a71bbea598c..095f7124b34 100644 --- a/advisories/unreviewed/2023/02/GHSA-7737-vff2-9jq5/GHSA-7737-vff2-9jq5.json +++ b/advisories/unreviewed/2023/02/GHSA-7737-vff2-9jq5/GHSA-7737-vff2-9jq5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-77pv-69c3-pjgf/GHSA-77pv-69c3-pjgf.json b/advisories/unreviewed/2023/02/GHSA-77pv-69c3-pjgf/GHSA-77pv-69c3-pjgf.json index 132d38d50d7..bfc59816eb8 100644 --- a/advisories/unreviewed/2023/02/GHSA-77pv-69c3-pjgf/GHSA-77pv-69c3-pjgf.json +++ b/advisories/unreviewed/2023/02/GHSA-77pv-69c3-pjgf/GHSA-77pv-69c3-pjgf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-8839-p94r-4mv2/GHSA-8839-p94r-4mv2.json b/advisories/unreviewed/2023/02/GHSA-8839-p94r-4mv2/GHSA-8839-p94r-4mv2.json index 7fec638e3c4..971855bb4bf 100644 --- a/advisories/unreviewed/2023/02/GHSA-8839-p94r-4mv2/GHSA-8839-p94r-4mv2.json +++ b/advisories/unreviewed/2023/02/GHSA-8839-p94r-4mv2/GHSA-8839-p94r-4mv2.json @@ -7,12 +7,8 @@ "CVE-2023-0884" ], "details": "An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.3 before 15.6.7, all versions starting from 15.7 before 15.7.6, all versions starting from 15.8 before 15.8.1. An attacker may upload a crafted CI job artifact zip file in a project that uses dynamic child pipelines and make a sidekiq job allocate a lot of memory. In GitLab instances where Sidekiq is memory-limited, this may cause Denial of Service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-c73m-grr7-62gx/GHSA-c73m-grr7-62gx.json b/advisories/unreviewed/2023/02/GHSA-c73m-grr7-62gx/GHSA-c73m-grr7-62gx.json index 69bee9d2455..a2e62761ee3 100644 --- a/advisories/unreviewed/2023/02/GHSA-c73m-grr7-62gx/GHSA-c73m-grr7-62gx.json +++ b/advisories/unreviewed/2023/02/GHSA-c73m-grr7-62gx/GHSA-c73m-grr7-62gx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-c8gv-h2p7-9j69/GHSA-c8gv-h2p7-9j69.json b/advisories/unreviewed/2023/02/GHSA-c8gv-h2p7-9j69/GHSA-c8gv-h2p7-9j69.json index 9f6cc09a849..ce0b880e28c 100644 --- a/advisories/unreviewed/2023/02/GHSA-c8gv-h2p7-9j69/GHSA-c8gv-h2p7-9j69.json +++ b/advisories/unreviewed/2023/02/GHSA-c8gv-h2p7-9j69/GHSA-c8gv-h2p7-9j69.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-c93f-7869-prcf/GHSA-c93f-7869-prcf.json b/advisories/unreviewed/2023/02/GHSA-c93f-7869-prcf/GHSA-c93f-7869-prcf.json index 707e6729b1b..c74e1413a42 100644 --- a/advisories/unreviewed/2023/02/GHSA-c93f-7869-prcf/GHSA-c93f-7869-prcf.json +++ b/advisories/unreviewed/2023/02/GHSA-c93f-7869-prcf/GHSA-c93f-7869-prcf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-chrg-mx57-ghvc/GHSA-chrg-mx57-ghvc.json b/advisories/unreviewed/2023/02/GHSA-chrg-mx57-ghvc/GHSA-chrg-mx57-ghvc.json index a84a305d6f7..308063fd788 100644 --- a/advisories/unreviewed/2023/02/GHSA-chrg-mx57-ghvc/GHSA-chrg-mx57-ghvc.json +++ b/advisories/unreviewed/2023/02/GHSA-chrg-mx57-ghvc/GHSA-chrg-mx57-ghvc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-fq74-5m7h-m7fv/GHSA-fq74-5m7h-m7fv.json b/advisories/unreviewed/2023/02/GHSA-fq74-5m7h-m7fv/GHSA-fq74-5m7h-m7fv.json index c0d5f3666a7..9f8279475f0 100644 --- a/advisories/unreviewed/2023/02/GHSA-fq74-5m7h-m7fv/GHSA-fq74-5m7h-m7fv.json +++ b/advisories/unreviewed/2023/02/GHSA-fq74-5m7h-m7fv/GHSA-fq74-5m7h-m7fv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-fw8v-fr5c-x5f2/GHSA-fw8v-fr5c-x5f2.json b/advisories/unreviewed/2023/02/GHSA-fw8v-fr5c-x5f2/GHSA-fw8v-fr5c-x5f2.json index 58d11705703..0e10f67a9a6 100644 --- a/advisories/unreviewed/2023/02/GHSA-fw8v-fr5c-x5f2/GHSA-fw8v-fr5c-x5f2.json +++ b/advisories/unreviewed/2023/02/GHSA-fw8v-fr5c-x5f2/GHSA-fw8v-fr5c-x5f2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-gchf-frc2-7ccg/GHSA-gchf-frc2-7ccg.json b/advisories/unreviewed/2023/02/GHSA-gchf-frc2-7ccg/GHSA-gchf-frc2-7ccg.json index e2219e101f2..1cd1eec1e04 100644 --- a/advisories/unreviewed/2023/02/GHSA-gchf-frc2-7ccg/GHSA-gchf-frc2-7ccg.json +++ b/advisories/unreviewed/2023/02/GHSA-gchf-frc2-7ccg/GHSA-gchf-frc2-7ccg.json @@ -7,12 +7,8 @@ "CVE-2023-0885" ], "details": "An issue has been discovered in GitLab CE/EE affecting all versions starting from 14.0 before 15.6.7, all versions starting from 15.7 before 15.7.6, all versions starting from 15.8 before 15.8.1. It was possible to trigger a DoS attack by uploading a malicious Helm chart.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-gmhr-ccqm-6w75/GHSA-gmhr-ccqm-6w75.json b/advisories/unreviewed/2023/02/GHSA-gmhr-ccqm-6w75/GHSA-gmhr-ccqm-6w75.json index ea804d4a84a..c9d71657dfe 100644 --- a/advisories/unreviewed/2023/02/GHSA-gmhr-ccqm-6w75/GHSA-gmhr-ccqm-6w75.json +++ b/advisories/unreviewed/2023/02/GHSA-gmhr-ccqm-6w75/GHSA-gmhr-ccqm-6w75.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-gxm4-5549-v3j5/GHSA-gxm4-5549-v3j5.json b/advisories/unreviewed/2023/02/GHSA-gxm4-5549-v3j5/GHSA-gxm4-5549-v3j5.json index a95c666ecab..46437a905ed 100644 --- a/advisories/unreviewed/2023/02/GHSA-gxm4-5549-v3j5/GHSA-gxm4-5549-v3j5.json +++ b/advisories/unreviewed/2023/02/GHSA-gxm4-5549-v3j5/GHSA-gxm4-5549-v3j5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-pffm-c6m3-rc4c/GHSA-pffm-c6m3-rc4c.json b/advisories/unreviewed/2023/02/GHSA-pffm-c6m3-rc4c/GHSA-pffm-c6m3-rc4c.json index 3b78a35100a..d3917be17f2 100644 --- a/advisories/unreviewed/2023/02/GHSA-pffm-c6m3-rc4c/GHSA-pffm-c6m3-rc4c.json +++ b/advisories/unreviewed/2023/02/GHSA-pffm-c6m3-rc4c/GHSA-pffm-c6m3-rc4c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-qcr6-2fhj-83g3/GHSA-qcr6-2fhj-83g3.json b/advisories/unreviewed/2023/02/GHSA-qcr6-2fhj-83g3/GHSA-qcr6-2fhj-83g3.json index 4068d4cbcf2..f8d80d1edf3 100644 --- a/advisories/unreviewed/2023/02/GHSA-qcr6-2fhj-83g3/GHSA-qcr6-2fhj-83g3.json +++ b/advisories/unreviewed/2023/02/GHSA-qcr6-2fhj-83g3/GHSA-qcr6-2fhj-83g3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-qhrp-rhv5-gv43/GHSA-qhrp-rhv5-gv43.json b/advisories/unreviewed/2023/02/GHSA-qhrp-rhv5-gv43/GHSA-qhrp-rhv5-gv43.json index 36c8dc3d6ad..813197aca6a 100644 --- a/advisories/unreviewed/2023/02/GHSA-qhrp-rhv5-gv43/GHSA-qhrp-rhv5-gv43.json +++ b/advisories/unreviewed/2023/02/GHSA-qhrp-rhv5-gv43/GHSA-qhrp-rhv5-gv43.json @@ -7,12 +7,8 @@ "CVE-2023-0886" ], "details": "A lack of length validation in GitLab CE/EE affecting all versions from 12.4 before 15.6.7, 15.7 before 15.7.6, and 15.8 before 15.8.1 allows an authenticated attacker to create a large Issue description via GraphQL which, when repeatedly requested, saturates CPU usage.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-r2fh-99j3-j6mx/GHSA-r2fh-99j3-j6mx.json b/advisories/unreviewed/2023/02/GHSA-r2fh-99j3-j6mx/GHSA-r2fh-99j3-j6mx.json index 2335a4a1fb9..8d97c790e14 100644 --- a/advisories/unreviewed/2023/02/GHSA-r2fh-99j3-j6mx/GHSA-r2fh-99j3-j6mx.json +++ b/advisories/unreviewed/2023/02/GHSA-r2fh-99j3-j6mx/GHSA-r2fh-99j3-j6mx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-rqpg-mqjr-3783/GHSA-rqpg-mqjr-3783.json b/advisories/unreviewed/2023/02/GHSA-rqpg-mqjr-3783/GHSA-rqpg-mqjr-3783.json index fd8df297f0a..f1f09a6f4b3 100644 --- a/advisories/unreviewed/2023/02/GHSA-rqpg-mqjr-3783/GHSA-rqpg-mqjr-3783.json +++ b/advisories/unreviewed/2023/02/GHSA-rqpg-mqjr-3783/GHSA-rqpg-mqjr-3783.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-rx5g-cx83-pghh/GHSA-rx5g-cx83-pghh.json b/advisories/unreviewed/2023/02/GHSA-rx5g-cx83-pghh/GHSA-rx5g-cx83-pghh.json index cfd567168f4..234d9632f83 100644 --- a/advisories/unreviewed/2023/02/GHSA-rx5g-cx83-pghh/GHSA-rx5g-cx83-pghh.json +++ b/advisories/unreviewed/2023/02/GHSA-rx5g-cx83-pghh/GHSA-rx5g-cx83-pghh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-wj5x-h527-5hh4/GHSA-wj5x-h527-5hh4.json b/advisories/unreviewed/2023/02/GHSA-wj5x-h527-5hh4/GHSA-wj5x-h527-5hh4.json index 7a8dfe5b3b5..0a3d1b94318 100644 --- a/advisories/unreviewed/2023/02/GHSA-wj5x-h527-5hh4/GHSA-wj5x-h527-5hh4.json +++ b/advisories/unreviewed/2023/02/GHSA-wj5x-h527-5hh4/GHSA-wj5x-h527-5hh4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-x4fx-m377-5gr8/GHSA-x4fx-m377-5gr8.json b/advisories/unreviewed/2023/02/GHSA-x4fx-m377-5gr8/GHSA-x4fx-m377-5gr8.json index 821c3b0e61c..b84124f468c 100644 --- a/advisories/unreviewed/2023/02/GHSA-x4fx-m377-5gr8/GHSA-x4fx-m377-5gr8.json +++ b/advisories/unreviewed/2023/02/GHSA-x4fx-m377-5gr8/GHSA-x4fx-m377-5gr8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-27p4-hpxf-27x2/GHSA-27p4-hpxf-27x2.json b/advisories/unreviewed/2023/03/GHSA-27p4-hpxf-27x2/GHSA-27p4-hpxf-27x2.json index 465674a1668..7017f9ee9db 100644 --- a/advisories/unreviewed/2023/03/GHSA-27p4-hpxf-27x2/GHSA-27p4-hpxf-27x2.json +++ b/advisories/unreviewed/2023/03/GHSA-27p4-hpxf-27x2/GHSA-27p4-hpxf-27x2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-345p-pc4m-43vp/GHSA-345p-pc4m-43vp.json b/advisories/unreviewed/2023/03/GHSA-345p-pc4m-43vp/GHSA-345p-pc4m-43vp.json index 650efce5445..ef62cbe0eb0 100644 --- a/advisories/unreviewed/2023/03/GHSA-345p-pc4m-43vp/GHSA-345p-pc4m-43vp.json +++ b/advisories/unreviewed/2023/03/GHSA-345p-pc4m-43vp/GHSA-345p-pc4m-43vp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-35g5-fmhj-f29q/GHSA-35g5-fmhj-f29q.json b/advisories/unreviewed/2023/03/GHSA-35g5-fmhj-f29q/GHSA-35g5-fmhj-f29q.json index 35c4fe7befa..4c7c1fc1b5b 100644 --- a/advisories/unreviewed/2023/03/GHSA-35g5-fmhj-f29q/GHSA-35g5-fmhj-f29q.json +++ b/advisories/unreviewed/2023/03/GHSA-35g5-fmhj-f29q/GHSA-35g5-fmhj-f29q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-48mp-8j5m-9mg5/GHSA-48mp-8j5m-9mg5.json b/advisories/unreviewed/2023/03/GHSA-48mp-8j5m-9mg5/GHSA-48mp-8j5m-9mg5.json index 4b30a61fbd3..a084be56d34 100644 --- a/advisories/unreviewed/2023/03/GHSA-48mp-8j5m-9mg5/GHSA-48mp-8j5m-9mg5.json +++ b/advisories/unreviewed/2023/03/GHSA-48mp-8j5m-9mg5/GHSA-48mp-8j5m-9mg5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-4c88-rc57-94rf/GHSA-4c88-rc57-94rf.json b/advisories/unreviewed/2023/03/GHSA-4c88-rc57-94rf/GHSA-4c88-rc57-94rf.json index 760ea85e801..475fade4f36 100644 --- a/advisories/unreviewed/2023/03/GHSA-4c88-rc57-94rf/GHSA-4c88-rc57-94rf.json +++ b/advisories/unreviewed/2023/03/GHSA-4c88-rc57-94rf/GHSA-4c88-rc57-94rf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-5pgr-37hm-gqpw/GHSA-5pgr-37hm-gqpw.json b/advisories/unreviewed/2023/03/GHSA-5pgr-37hm-gqpw/GHSA-5pgr-37hm-gqpw.json index fe4751dd609..ea16b814f2e 100644 --- a/advisories/unreviewed/2023/03/GHSA-5pgr-37hm-gqpw/GHSA-5pgr-37hm-gqpw.json +++ b/advisories/unreviewed/2023/03/GHSA-5pgr-37hm-gqpw/GHSA-5pgr-37hm-gqpw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/03/GHSA-6hv6-xfrp-h8h8/GHSA-6hv6-xfrp-h8h8.json b/advisories/unreviewed/2023/03/GHSA-6hv6-xfrp-h8h8/GHSA-6hv6-xfrp-h8h8.json index 945c08fe07a..6422a473330 100644 --- a/advisories/unreviewed/2023/03/GHSA-6hv6-xfrp-h8h8/GHSA-6hv6-xfrp-h8h8.json +++ b/advisories/unreviewed/2023/03/GHSA-6hv6-xfrp-h8h8/GHSA-6hv6-xfrp-h8h8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-7gcx-83mm-qfhq/GHSA-7gcx-83mm-qfhq.json b/advisories/unreviewed/2023/03/GHSA-7gcx-83mm-qfhq/GHSA-7gcx-83mm-qfhq.json index 899a468c9d2..261e89de029 100644 --- a/advisories/unreviewed/2023/03/GHSA-7gcx-83mm-qfhq/GHSA-7gcx-83mm-qfhq.json +++ b/advisories/unreviewed/2023/03/GHSA-7gcx-83mm-qfhq/GHSA-7gcx-83mm-qfhq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-934x-9h25-m7fx/GHSA-934x-9h25-m7fx.json b/advisories/unreviewed/2023/03/GHSA-934x-9h25-m7fx/GHSA-934x-9h25-m7fx.json index cebd40a3493..c7b5ae61a64 100644 --- a/advisories/unreviewed/2023/03/GHSA-934x-9h25-m7fx/GHSA-934x-9h25-m7fx.json +++ b/advisories/unreviewed/2023/03/GHSA-934x-9h25-m7fx/GHSA-934x-9h25-m7fx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-9w87-qf4h-4fc6/GHSA-9w87-qf4h-4fc6.json b/advisories/unreviewed/2023/03/GHSA-9w87-qf4h-4fc6/GHSA-9w87-qf4h-4fc6.json index 5ae4421a70b..a3ff8c9aa53 100644 --- a/advisories/unreviewed/2023/03/GHSA-9w87-qf4h-4fc6/GHSA-9w87-qf4h-4fc6.json +++ b/advisories/unreviewed/2023/03/GHSA-9w87-qf4h-4fc6/GHSA-9w87-qf4h-4fc6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-fg8g-w97j-ff9c/GHSA-fg8g-w97j-ff9c.json b/advisories/unreviewed/2023/03/GHSA-fg8g-w97j-ff9c/GHSA-fg8g-w97j-ff9c.json index 5b7e0bafd02..36569eeab5b 100644 --- a/advisories/unreviewed/2023/03/GHSA-fg8g-w97j-ff9c/GHSA-fg8g-w97j-ff9c.json +++ b/advisories/unreviewed/2023/03/GHSA-fg8g-w97j-ff9c/GHSA-fg8g-w97j-ff9c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-fj79-cqcm-7g2m/GHSA-fj79-cqcm-7g2m.json b/advisories/unreviewed/2023/03/GHSA-fj79-cqcm-7g2m/GHSA-fj79-cqcm-7g2m.json index b098554f54c..3949e78cce6 100644 --- a/advisories/unreviewed/2023/03/GHSA-fj79-cqcm-7g2m/GHSA-fj79-cqcm-7g2m.json +++ b/advisories/unreviewed/2023/03/GHSA-fj79-cqcm-7g2m/GHSA-fj79-cqcm-7g2m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-g2xx-x8p8-3xvq/GHSA-g2xx-x8p8-3xvq.json b/advisories/unreviewed/2023/03/GHSA-g2xx-x8p8-3xvq/GHSA-g2xx-x8p8-3xvq.json index 62d96c1e32b..aa65692e2d0 100644 --- a/advisories/unreviewed/2023/03/GHSA-g2xx-x8p8-3xvq/GHSA-g2xx-x8p8-3xvq.json +++ b/advisories/unreviewed/2023/03/GHSA-g2xx-x8p8-3xvq/GHSA-g2xx-x8p8-3xvq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-j573-qjhq-5w49/GHSA-j573-qjhq-5w49.json b/advisories/unreviewed/2023/03/GHSA-j573-qjhq-5w49/GHSA-j573-qjhq-5w49.json index 6c7cc29ebd7..0af6617c8fd 100644 --- a/advisories/unreviewed/2023/03/GHSA-j573-qjhq-5w49/GHSA-j573-qjhq-5w49.json +++ b/advisories/unreviewed/2023/03/GHSA-j573-qjhq-5w49/GHSA-j573-qjhq-5w49.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-jxqg-p2g2-h68r/GHSA-jxqg-p2g2-h68r.json b/advisories/unreviewed/2023/03/GHSA-jxqg-p2g2-h68r/GHSA-jxqg-p2g2-h68r.json index ad5acd4548c..ea22ad0f2d0 100644 --- a/advisories/unreviewed/2023/03/GHSA-jxqg-p2g2-h68r/GHSA-jxqg-p2g2-h68r.json +++ b/advisories/unreviewed/2023/03/GHSA-jxqg-p2g2-h68r/GHSA-jxqg-p2g2-h68r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-mqx3-4hhf-cvpv/GHSA-mqx3-4hhf-cvpv.json b/advisories/unreviewed/2023/03/GHSA-mqx3-4hhf-cvpv/GHSA-mqx3-4hhf-cvpv.json index 43b2ca7df10..e7b0b131c6a 100644 --- a/advisories/unreviewed/2023/03/GHSA-mqx3-4hhf-cvpv/GHSA-mqx3-4hhf-cvpv.json +++ b/advisories/unreviewed/2023/03/GHSA-mqx3-4hhf-cvpv/GHSA-mqx3-4hhf-cvpv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-mrwc-w456-rmvm/GHSA-mrwc-w456-rmvm.json b/advisories/unreviewed/2023/03/GHSA-mrwc-w456-rmvm/GHSA-mrwc-w456-rmvm.json index 40f7604ce60..6c7d0b4043c 100644 --- a/advisories/unreviewed/2023/03/GHSA-mrwc-w456-rmvm/GHSA-mrwc-w456-rmvm.json +++ b/advisories/unreviewed/2023/03/GHSA-mrwc-w456-rmvm/GHSA-mrwc-w456-rmvm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-p8h7-hpjf-wvxq/GHSA-p8h7-hpjf-wvxq.json b/advisories/unreviewed/2023/03/GHSA-p8h7-hpjf-wvxq/GHSA-p8h7-hpjf-wvxq.json index af962e7c7cb..ace0157591d 100644 --- a/advisories/unreviewed/2023/03/GHSA-p8h7-hpjf-wvxq/GHSA-p8h7-hpjf-wvxq.json +++ b/advisories/unreviewed/2023/03/GHSA-p8h7-hpjf-wvxq/GHSA-p8h7-hpjf-wvxq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-v2m3-6m6p-mpfj/GHSA-v2m3-6m6p-mpfj.json b/advisories/unreviewed/2023/03/GHSA-v2m3-6m6p-mpfj/GHSA-v2m3-6m6p-mpfj.json index 8714afad556..a00f65e7ca0 100644 --- a/advisories/unreviewed/2023/03/GHSA-v2m3-6m6p-mpfj/GHSA-v2m3-6m6p-mpfj.json +++ b/advisories/unreviewed/2023/03/GHSA-v2m3-6m6p-mpfj/GHSA-v2m3-6m6p-mpfj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-vgrw-gggp-4wx3/GHSA-vgrw-gggp-4wx3.json b/advisories/unreviewed/2023/03/GHSA-vgrw-gggp-4wx3/GHSA-vgrw-gggp-4wx3.json index dff49ef0990..ff35062c767 100644 --- a/advisories/unreviewed/2023/03/GHSA-vgrw-gggp-4wx3/GHSA-vgrw-gggp-4wx3.json +++ b/advisories/unreviewed/2023/03/GHSA-vgrw-gggp-4wx3/GHSA-vgrw-gggp-4wx3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-xfm4-w623-4vcg/GHSA-xfm4-w623-4vcg.json b/advisories/unreviewed/2023/03/GHSA-xfm4-w623-4vcg/GHSA-xfm4-w623-4vcg.json index 41364180c5a..fe33615f33f 100644 --- a/advisories/unreviewed/2023/03/GHSA-xfm4-w623-4vcg/GHSA-xfm4-w623-4vcg.json +++ b/advisories/unreviewed/2023/03/GHSA-xfm4-w623-4vcg/GHSA-xfm4-w623-4vcg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-xjfg-q3x7-vhvm/GHSA-xjfg-q3x7-vhvm.json b/advisories/unreviewed/2023/03/GHSA-xjfg-q3x7-vhvm/GHSA-xjfg-q3x7-vhvm.json index 93c1c5505dc..e1ba497ec04 100644 --- a/advisories/unreviewed/2023/03/GHSA-xjfg-q3x7-vhvm/GHSA-xjfg-q3x7-vhvm.json +++ b/advisories/unreviewed/2023/03/GHSA-xjfg-q3x7-vhvm/GHSA-xjfg-q3x7-vhvm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-23pw-5m4p-mjgm/GHSA-23pw-5m4p-mjgm.json b/advisories/unreviewed/2024/01/GHSA-23pw-5m4p-mjgm/GHSA-23pw-5m4p-mjgm.json index f2d3d93e168..76a6127d8bc 100644 --- a/advisories/unreviewed/2024/01/GHSA-23pw-5m4p-mjgm/GHSA-23pw-5m4p-mjgm.json +++ b/advisories/unreviewed/2024/01/GHSA-23pw-5m4p-mjgm/GHSA-23pw-5m4p-mjgm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-2fc2-v762-gmfr/GHSA-2fc2-v762-gmfr.json b/advisories/unreviewed/2024/01/GHSA-2fc2-v762-gmfr/GHSA-2fc2-v762-gmfr.json index 0ef1ac8333b..f458a1283fb 100644 --- a/advisories/unreviewed/2024/01/GHSA-2fc2-v762-gmfr/GHSA-2fc2-v762-gmfr.json +++ b/advisories/unreviewed/2024/01/GHSA-2fc2-v762-gmfr/GHSA-2fc2-v762-gmfr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-2hv2-4qf7-p9g4/GHSA-2hv2-4qf7-p9g4.json b/advisories/unreviewed/2024/01/GHSA-2hv2-4qf7-p9g4/GHSA-2hv2-4qf7-p9g4.json index e2cb34e306c..bbe06fe8c42 100644 --- a/advisories/unreviewed/2024/01/GHSA-2hv2-4qf7-p9g4/GHSA-2hv2-4qf7-p9g4.json +++ b/advisories/unreviewed/2024/01/GHSA-2hv2-4qf7-p9g4/GHSA-2hv2-4qf7-p9g4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-486w-gvrc-84v6/GHSA-486w-gvrc-84v6.json b/advisories/unreviewed/2024/01/GHSA-486w-gvrc-84v6/GHSA-486w-gvrc-84v6.json index a70db819dee..a92880990ab 100644 --- a/advisories/unreviewed/2024/01/GHSA-486w-gvrc-84v6/GHSA-486w-gvrc-84v6.json +++ b/advisories/unreviewed/2024/01/GHSA-486w-gvrc-84v6/GHSA-486w-gvrc-84v6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-4j67-9x24-qjw7/GHSA-4j67-9x24-qjw7.json b/advisories/unreviewed/2024/01/GHSA-4j67-9x24-qjw7/GHSA-4j67-9x24-qjw7.json index 95b0e692f2b..be31eeb800e 100644 --- a/advisories/unreviewed/2024/01/GHSA-4j67-9x24-qjw7/GHSA-4j67-9x24-qjw7.json +++ b/advisories/unreviewed/2024/01/GHSA-4j67-9x24-qjw7/GHSA-4j67-9x24-qjw7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-4q8f-pj5f-x55c/GHSA-4q8f-pj5f-x55c.json b/advisories/unreviewed/2024/01/GHSA-4q8f-pj5f-x55c/GHSA-4q8f-pj5f-x55c.json index adea7566672..cb66f0a91cb 100644 --- a/advisories/unreviewed/2024/01/GHSA-4q8f-pj5f-x55c/GHSA-4q8f-pj5f-x55c.json +++ b/advisories/unreviewed/2024/01/GHSA-4q8f-pj5f-x55c/GHSA-4q8f-pj5f-x55c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-54pv-rcf3-p7vr/GHSA-54pv-rcf3-p7vr.json b/advisories/unreviewed/2024/01/GHSA-54pv-rcf3-p7vr/GHSA-54pv-rcf3-p7vr.json index 55c36be9f94..612ada1273f 100644 --- a/advisories/unreviewed/2024/01/GHSA-54pv-rcf3-p7vr/GHSA-54pv-rcf3-p7vr.json +++ b/advisories/unreviewed/2024/01/GHSA-54pv-rcf3-p7vr/GHSA-54pv-rcf3-p7vr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-588j-j83f-cmh7/GHSA-588j-j83f-cmh7.json b/advisories/unreviewed/2024/01/GHSA-588j-j83f-cmh7/GHSA-588j-j83f-cmh7.json index 136b1308dc0..d55372ec261 100644 --- a/advisories/unreviewed/2024/01/GHSA-588j-j83f-cmh7/GHSA-588j-j83f-cmh7.json +++ b/advisories/unreviewed/2024/01/GHSA-588j-j83f-cmh7/GHSA-588j-j83f-cmh7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-5qc9-fpq2-q643/GHSA-5qc9-fpq2-q643.json b/advisories/unreviewed/2024/01/GHSA-5qc9-fpq2-q643/GHSA-5qc9-fpq2-q643.json index 20c41084b79..7ca946dbc07 100644 --- a/advisories/unreviewed/2024/01/GHSA-5qc9-fpq2-q643/GHSA-5qc9-fpq2-q643.json +++ b/advisories/unreviewed/2024/01/GHSA-5qc9-fpq2-q643/GHSA-5qc9-fpq2-q643.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-6jf4-pg2m-9838/GHSA-6jf4-pg2m-9838.json b/advisories/unreviewed/2024/01/GHSA-6jf4-pg2m-9838/GHSA-6jf4-pg2m-9838.json index 631b60992f0..544532e4dd8 100644 --- a/advisories/unreviewed/2024/01/GHSA-6jf4-pg2m-9838/GHSA-6jf4-pg2m-9838.json +++ b/advisories/unreviewed/2024/01/GHSA-6jf4-pg2m-9838/GHSA-6jf4-pg2m-9838.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-6r8x-gvxw-7mfq/GHSA-6r8x-gvxw-7mfq.json b/advisories/unreviewed/2024/01/GHSA-6r8x-gvxw-7mfq/GHSA-6r8x-gvxw-7mfq.json index 859caf55a58..c4c66b29e6f 100644 --- a/advisories/unreviewed/2024/01/GHSA-6r8x-gvxw-7mfq/GHSA-6r8x-gvxw-7mfq.json +++ b/advisories/unreviewed/2024/01/GHSA-6r8x-gvxw-7mfq/GHSA-6r8x-gvxw-7mfq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-8495-3292-crgg/GHSA-8495-3292-crgg.json b/advisories/unreviewed/2024/01/GHSA-8495-3292-crgg/GHSA-8495-3292-crgg.json index 66429d4ad30..8c827018cc1 100644 --- a/advisories/unreviewed/2024/01/GHSA-8495-3292-crgg/GHSA-8495-3292-crgg.json +++ b/advisories/unreviewed/2024/01/GHSA-8495-3292-crgg/GHSA-8495-3292-crgg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-8m2p-3j92-v9rw/GHSA-8m2p-3j92-v9rw.json b/advisories/unreviewed/2024/01/GHSA-8m2p-3j92-v9rw/GHSA-8m2p-3j92-v9rw.json index e7b9b4ebbc8..2c9aca2fe8e 100644 --- a/advisories/unreviewed/2024/01/GHSA-8m2p-3j92-v9rw/GHSA-8m2p-3j92-v9rw.json +++ b/advisories/unreviewed/2024/01/GHSA-8m2p-3j92-v9rw/GHSA-8m2p-3j92-v9rw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-96f9-wjw8-f7j4/GHSA-96f9-wjw8-f7j4.json b/advisories/unreviewed/2024/01/GHSA-96f9-wjw8-f7j4/GHSA-96f9-wjw8-f7j4.json index 6eef3d58b3e..087052fd003 100644 --- a/advisories/unreviewed/2024/01/GHSA-96f9-wjw8-f7j4/GHSA-96f9-wjw8-f7j4.json +++ b/advisories/unreviewed/2024/01/GHSA-96f9-wjw8-f7j4/GHSA-96f9-wjw8-f7j4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-c65v-98gj-rwxh/GHSA-c65v-98gj-rwxh.json b/advisories/unreviewed/2024/01/GHSA-c65v-98gj-rwxh/GHSA-c65v-98gj-rwxh.json index dc9bc6dcf24..672f5dcac15 100644 --- a/advisories/unreviewed/2024/01/GHSA-c65v-98gj-rwxh/GHSA-c65v-98gj-rwxh.json +++ b/advisories/unreviewed/2024/01/GHSA-c65v-98gj-rwxh/GHSA-c65v-98gj-rwxh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-cf62-62c9-rpwv/GHSA-cf62-62c9-rpwv.json b/advisories/unreviewed/2024/01/GHSA-cf62-62c9-rpwv/GHSA-cf62-62c9-rpwv.json index 06c7d499c6e..6f9a79321a0 100644 --- a/advisories/unreviewed/2024/01/GHSA-cf62-62c9-rpwv/GHSA-cf62-62c9-rpwv.json +++ b/advisories/unreviewed/2024/01/GHSA-cf62-62c9-rpwv/GHSA-cf62-62c9-rpwv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-f6vg-w657-ph8f/GHSA-f6vg-w657-ph8f.json b/advisories/unreviewed/2024/01/GHSA-f6vg-w657-ph8f/GHSA-f6vg-w657-ph8f.json index 73bb3104aec..3b711bd174e 100644 --- a/advisories/unreviewed/2024/01/GHSA-f6vg-w657-ph8f/GHSA-f6vg-w657-ph8f.json +++ b/advisories/unreviewed/2024/01/GHSA-f6vg-w657-ph8f/GHSA-f6vg-w657-ph8f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-fhg2-qchh-3c8g/GHSA-fhg2-qchh-3c8g.json b/advisories/unreviewed/2024/01/GHSA-fhg2-qchh-3c8g/GHSA-fhg2-qchh-3c8g.json index 4e87a01b1e7..be63186e40d 100644 --- a/advisories/unreviewed/2024/01/GHSA-fhg2-qchh-3c8g/GHSA-fhg2-qchh-3c8g.json +++ b/advisories/unreviewed/2024/01/GHSA-fhg2-qchh-3c8g/GHSA-fhg2-qchh-3c8g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-fw75-hwpp-7cm4/GHSA-fw75-hwpp-7cm4.json b/advisories/unreviewed/2024/01/GHSA-fw75-hwpp-7cm4/GHSA-fw75-hwpp-7cm4.json index 58eb17d0b46..45204c0e04d 100644 --- a/advisories/unreviewed/2024/01/GHSA-fw75-hwpp-7cm4/GHSA-fw75-hwpp-7cm4.json +++ b/advisories/unreviewed/2024/01/GHSA-fw75-hwpp-7cm4/GHSA-fw75-hwpp-7cm4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-fx2f-42hp-8x9w/GHSA-fx2f-42hp-8x9w.json b/advisories/unreviewed/2024/01/GHSA-fx2f-42hp-8x9w/GHSA-fx2f-42hp-8x9w.json index 61f695dc31f..8db659cac73 100644 --- a/advisories/unreviewed/2024/01/GHSA-fx2f-42hp-8x9w/GHSA-fx2f-42hp-8x9w.json +++ b/advisories/unreviewed/2024/01/GHSA-fx2f-42hp-8x9w/GHSA-fx2f-42hp-8x9w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-gcrv-p564-68qm/GHSA-gcrv-p564-68qm.json b/advisories/unreviewed/2024/01/GHSA-gcrv-p564-68qm/GHSA-gcrv-p564-68qm.json index 5f0aac0526d..399a8c2f5aa 100644 --- a/advisories/unreviewed/2024/01/GHSA-gcrv-p564-68qm/GHSA-gcrv-p564-68qm.json +++ b/advisories/unreviewed/2024/01/GHSA-gcrv-p564-68qm/GHSA-gcrv-p564-68qm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-gmxg-c36j-9c9p/GHSA-gmxg-c36j-9c9p.json b/advisories/unreviewed/2024/01/GHSA-gmxg-c36j-9c9p/GHSA-gmxg-c36j-9c9p.json index c79579474c8..12d2b3fc965 100644 --- a/advisories/unreviewed/2024/01/GHSA-gmxg-c36j-9c9p/GHSA-gmxg-c36j-9c9p.json +++ b/advisories/unreviewed/2024/01/GHSA-gmxg-c36j-9c9p/GHSA-gmxg-c36j-9c9p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-h3w7-w9rh-w829/GHSA-h3w7-w9rh-w829.json b/advisories/unreviewed/2024/01/GHSA-h3w7-w9rh-w829/GHSA-h3w7-w9rh-w829.json index 0cf1c4383bf..49cd1fffb2f 100644 --- a/advisories/unreviewed/2024/01/GHSA-h3w7-w9rh-w829/GHSA-h3w7-w9rh-w829.json +++ b/advisories/unreviewed/2024/01/GHSA-h3w7-w9rh-w829/GHSA-h3w7-w9rh-w829.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-hw3h-gc2r-whp8/GHSA-hw3h-gc2r-whp8.json b/advisories/unreviewed/2024/01/GHSA-hw3h-gc2r-whp8/GHSA-hw3h-gc2r-whp8.json index c82c72d54b3..0f3052f7d6f 100644 --- a/advisories/unreviewed/2024/01/GHSA-hw3h-gc2r-whp8/GHSA-hw3h-gc2r-whp8.json +++ b/advisories/unreviewed/2024/01/GHSA-hw3h-gc2r-whp8/GHSA-hw3h-gc2r-whp8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-j548-j2hv-85jg/GHSA-j548-j2hv-85jg.json b/advisories/unreviewed/2024/01/GHSA-j548-j2hv-85jg/GHSA-j548-j2hv-85jg.json index 41d6e76d48e..3fdf83b00b5 100644 --- a/advisories/unreviewed/2024/01/GHSA-j548-j2hv-85jg/GHSA-j548-j2hv-85jg.json +++ b/advisories/unreviewed/2024/01/GHSA-j548-j2hv-85jg/GHSA-j548-j2hv-85jg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-j8pf-3mrg-4487/GHSA-j8pf-3mrg-4487.json b/advisories/unreviewed/2024/01/GHSA-j8pf-3mrg-4487/GHSA-j8pf-3mrg-4487.json index d65f169c1c7..6b828412aa0 100644 --- a/advisories/unreviewed/2024/01/GHSA-j8pf-3mrg-4487/GHSA-j8pf-3mrg-4487.json +++ b/advisories/unreviewed/2024/01/GHSA-j8pf-3mrg-4487/GHSA-j8pf-3mrg-4487.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-m266-vjjw-ch44/GHSA-m266-vjjw-ch44.json b/advisories/unreviewed/2024/01/GHSA-m266-vjjw-ch44/GHSA-m266-vjjw-ch44.json index 8a86f9b1612..6800e1efbfc 100644 --- a/advisories/unreviewed/2024/01/GHSA-m266-vjjw-ch44/GHSA-m266-vjjw-ch44.json +++ b/advisories/unreviewed/2024/01/GHSA-m266-vjjw-ch44/GHSA-m266-vjjw-ch44.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-m6vj-6wj8-cpxm/GHSA-m6vj-6wj8-cpxm.json b/advisories/unreviewed/2024/01/GHSA-m6vj-6wj8-cpxm/GHSA-m6vj-6wj8-cpxm.json index fe6378569bd..be78d376985 100644 --- a/advisories/unreviewed/2024/01/GHSA-m6vj-6wj8-cpxm/GHSA-m6vj-6wj8-cpxm.json +++ b/advisories/unreviewed/2024/01/GHSA-m6vj-6wj8-cpxm/GHSA-m6vj-6wj8-cpxm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-pmxg-6ch5-59w6/GHSA-pmxg-6ch5-59w6.json b/advisories/unreviewed/2024/01/GHSA-pmxg-6ch5-59w6/GHSA-pmxg-6ch5-59w6.json index 76c6e479cb9..15be788464f 100644 --- a/advisories/unreviewed/2024/01/GHSA-pmxg-6ch5-59w6/GHSA-pmxg-6ch5-59w6.json +++ b/advisories/unreviewed/2024/01/GHSA-pmxg-6ch5-59w6/GHSA-pmxg-6ch5-59w6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-q88m-37xh-2769/GHSA-q88m-37xh-2769.json b/advisories/unreviewed/2024/01/GHSA-q88m-37xh-2769/GHSA-q88m-37xh-2769.json index f9cf380bbae..ace25c86b55 100644 --- a/advisories/unreviewed/2024/01/GHSA-q88m-37xh-2769/GHSA-q88m-37xh-2769.json +++ b/advisories/unreviewed/2024/01/GHSA-q88m-37xh-2769/GHSA-q88m-37xh-2769.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-q9qm-6pf8-r7mm/GHSA-q9qm-6pf8-r7mm.json b/advisories/unreviewed/2024/01/GHSA-q9qm-6pf8-r7mm/GHSA-q9qm-6pf8-r7mm.json index 55397b7b327..69651dd69b3 100644 --- a/advisories/unreviewed/2024/01/GHSA-q9qm-6pf8-r7mm/GHSA-q9qm-6pf8-r7mm.json +++ b/advisories/unreviewed/2024/01/GHSA-q9qm-6pf8-r7mm/GHSA-q9qm-6pf8-r7mm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-qvh4-gpc4-xm9x/GHSA-qvh4-gpc4-xm9x.json b/advisories/unreviewed/2024/01/GHSA-qvh4-gpc4-xm9x/GHSA-qvh4-gpc4-xm9x.json index 434e8430abc..f075166df09 100644 --- a/advisories/unreviewed/2024/01/GHSA-qvh4-gpc4-xm9x/GHSA-qvh4-gpc4-xm9x.json +++ b/advisories/unreviewed/2024/01/GHSA-qvh4-gpc4-xm9x/GHSA-qvh4-gpc4-xm9x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-r6c5-g5wv-w8wx/GHSA-r6c5-g5wv-w8wx.json b/advisories/unreviewed/2024/01/GHSA-r6c5-g5wv-w8wx/GHSA-r6c5-g5wv-w8wx.json index c9cb6bc4bba..b35df814cbb 100644 --- a/advisories/unreviewed/2024/01/GHSA-r6c5-g5wv-w8wx/GHSA-r6c5-g5wv-w8wx.json +++ b/advisories/unreviewed/2024/01/GHSA-r6c5-g5wv-w8wx/GHSA-r6c5-g5wv-w8wx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-r783-c85g-qfwm/GHSA-r783-c85g-qfwm.json b/advisories/unreviewed/2024/01/GHSA-r783-c85g-qfwm/GHSA-r783-c85g-qfwm.json index 853fa7d8357..5c92dd0b9b3 100644 --- a/advisories/unreviewed/2024/01/GHSA-r783-c85g-qfwm/GHSA-r783-c85g-qfwm.json +++ b/advisories/unreviewed/2024/01/GHSA-r783-c85g-qfwm/GHSA-r783-c85g-qfwm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-rfg6-p6q6-8frj/GHSA-rfg6-p6q6-8frj.json b/advisories/unreviewed/2024/01/GHSA-rfg6-p6q6-8frj/GHSA-rfg6-p6q6-8frj.json index 4628ce1806e..43aba07e369 100644 --- a/advisories/unreviewed/2024/01/GHSA-rfg6-p6q6-8frj/GHSA-rfg6-p6q6-8frj.json +++ b/advisories/unreviewed/2024/01/GHSA-rfg6-p6q6-8frj/GHSA-rfg6-p6q6-8frj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-rvr5-9pgv-pj7m/GHSA-rvr5-9pgv-pj7m.json b/advisories/unreviewed/2024/01/GHSA-rvr5-9pgv-pj7m/GHSA-rvr5-9pgv-pj7m.json index 0ba70ef9898..d47e12aad87 100644 --- a/advisories/unreviewed/2024/01/GHSA-rvr5-9pgv-pj7m/GHSA-rvr5-9pgv-pj7m.json +++ b/advisories/unreviewed/2024/01/GHSA-rvr5-9pgv-pj7m/GHSA-rvr5-9pgv-pj7m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-v26x-w7v7-7q7c/GHSA-v26x-w7v7-7q7c.json b/advisories/unreviewed/2024/01/GHSA-v26x-w7v7-7q7c/GHSA-v26x-w7v7-7q7c.json index 51cda7797e7..9e9317496f8 100644 --- a/advisories/unreviewed/2024/01/GHSA-v26x-w7v7-7q7c/GHSA-v26x-w7v7-7q7c.json +++ b/advisories/unreviewed/2024/01/GHSA-v26x-w7v7-7q7c/GHSA-v26x-w7v7-7q7c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-vrp7-hqrc-f29q/GHSA-vrp7-hqrc-f29q.json b/advisories/unreviewed/2024/01/GHSA-vrp7-hqrc-f29q/GHSA-vrp7-hqrc-f29q.json index 867725ec07d..14aa9dc52c9 100644 --- a/advisories/unreviewed/2024/01/GHSA-vrp7-hqrc-f29q/GHSA-vrp7-hqrc-f29q.json +++ b/advisories/unreviewed/2024/01/GHSA-vrp7-hqrc-f29q/GHSA-vrp7-hqrc-f29q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-wc83-fp2q-r52p/GHSA-wc83-fp2q-r52p.json b/advisories/unreviewed/2024/01/GHSA-wc83-fp2q-r52p/GHSA-wc83-fp2q-r52p.json index 14fea8b88e4..4c3a3d55c93 100644 --- a/advisories/unreviewed/2024/01/GHSA-wc83-fp2q-r52p/GHSA-wc83-fp2q-r52p.json +++ b/advisories/unreviewed/2024/01/GHSA-wc83-fp2q-r52p/GHSA-wc83-fp2q-r52p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-wwmg-32cv-jw5j/GHSA-wwmg-32cv-jw5j.json b/advisories/unreviewed/2024/01/GHSA-wwmg-32cv-jw5j/GHSA-wwmg-32cv-jw5j.json index 6c3d9bd63ba..ff481448b55 100644 --- a/advisories/unreviewed/2024/01/GHSA-wwmg-32cv-jw5j/GHSA-wwmg-32cv-jw5j.json +++ b/advisories/unreviewed/2024/01/GHSA-wwmg-32cv-jw5j/GHSA-wwmg-32cv-jw5j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-4w42-hx2p-m2jw/GHSA-4w42-hx2p-m2jw.json b/advisories/unreviewed/2024/02/GHSA-4w42-hx2p-m2jw/GHSA-4w42-hx2p-m2jw.json index 3f7a7528149..1f20219da79 100644 --- a/advisories/unreviewed/2024/02/GHSA-4w42-hx2p-m2jw/GHSA-4w42-hx2p-m2jw.json +++ b/advisories/unreviewed/2024/02/GHSA-4w42-hx2p-m2jw/GHSA-4w42-hx2p-m2jw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-c6f2-5665-5p8p/GHSA-c6f2-5665-5p8p.json b/advisories/unreviewed/2024/02/GHSA-c6f2-5665-5p8p/GHSA-c6f2-5665-5p8p.json index f488858f9e3..f49aaed3dca 100644 --- a/advisories/unreviewed/2024/02/GHSA-c6f2-5665-5p8p/GHSA-c6f2-5665-5p8p.json +++ b/advisories/unreviewed/2024/02/GHSA-c6f2-5665-5p8p/GHSA-c6f2-5665-5p8p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-cq73-wfw9-gvq8/GHSA-cq73-wfw9-gvq8.json b/advisories/unreviewed/2024/02/GHSA-cq73-wfw9-gvq8/GHSA-cq73-wfw9-gvq8.json index beb87636329..517128e3b3a 100644 --- a/advisories/unreviewed/2024/02/GHSA-cq73-wfw9-gvq8/GHSA-cq73-wfw9-gvq8.json +++ b/advisories/unreviewed/2024/02/GHSA-cq73-wfw9-gvq8/GHSA-cq73-wfw9-gvq8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-h9x2-hcp5-73rx/GHSA-h9x2-hcp5-73rx.json b/advisories/unreviewed/2024/02/GHSA-h9x2-hcp5-73rx/GHSA-h9x2-hcp5-73rx.json index 5daf990f021..431abbe0696 100644 --- a/advisories/unreviewed/2024/02/GHSA-h9x2-hcp5-73rx/GHSA-h9x2-hcp5-73rx.json +++ b/advisories/unreviewed/2024/02/GHSA-h9x2-hcp5-73rx/GHSA-h9x2-hcp5-73rx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-jmpf-9fgv-p5cr/GHSA-jmpf-9fgv-p5cr.json b/advisories/unreviewed/2024/02/GHSA-jmpf-9fgv-p5cr/GHSA-jmpf-9fgv-p5cr.json index 7d606557d25..6d0c3c5c386 100644 --- a/advisories/unreviewed/2024/02/GHSA-jmpf-9fgv-p5cr/GHSA-jmpf-9fgv-p5cr.json +++ b/advisories/unreviewed/2024/02/GHSA-jmpf-9fgv-p5cr/GHSA-jmpf-9fgv-p5cr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-jqqj-j2ch-3qv8/GHSA-jqqj-j2ch-3qv8.json b/advisories/unreviewed/2024/02/GHSA-jqqj-j2ch-3qv8/GHSA-jqqj-j2ch-3qv8.json index 5e618a2d701..0d1603a79af 100644 --- a/advisories/unreviewed/2024/02/GHSA-jqqj-j2ch-3qv8/GHSA-jqqj-j2ch-3qv8.json +++ b/advisories/unreviewed/2024/02/GHSA-jqqj-j2ch-3qv8/GHSA-jqqj-j2ch-3qv8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-p943-xf69-x33h/GHSA-p943-xf69-x33h.json b/advisories/unreviewed/2024/02/GHSA-p943-xf69-x33h/GHSA-p943-xf69-x33h.json index e3593424632..5d762fd032b 100644 --- a/advisories/unreviewed/2024/02/GHSA-p943-xf69-x33h/GHSA-p943-xf69-x33h.json +++ b/advisories/unreviewed/2024/02/GHSA-p943-xf69-x33h/GHSA-p943-xf69-x33h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-xvhr-3rcv-j8f8/GHSA-xvhr-3rcv-j8f8.json b/advisories/unreviewed/2024/02/GHSA-xvhr-3rcv-j8f8/GHSA-xvhr-3rcv-j8f8.json index 58d7654603d..a64933381c7 100644 --- a/advisories/unreviewed/2024/02/GHSA-xvhr-3rcv-j8f8/GHSA-xvhr-3rcv-j8f8.json +++ b/advisories/unreviewed/2024/02/GHSA-xvhr-3rcv-j8f8/GHSA-xvhr-3rcv-j8f8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-5q6f-gm4w-g552/GHSA-5q6f-gm4w-g552.json b/advisories/unreviewed/2024/03/GHSA-5q6f-gm4w-g552/GHSA-5q6f-gm4w-g552.json index 0fda960ca84..f1bc0bf9d5b 100644 --- a/advisories/unreviewed/2024/03/GHSA-5q6f-gm4w-g552/GHSA-5q6f-gm4w-g552.json +++ b/advisories/unreviewed/2024/03/GHSA-5q6f-gm4w-g552/GHSA-5q6f-gm4w-g552.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-7639-4x37-qfj8/GHSA-7639-4x37-qfj8.json b/advisories/unreviewed/2024/03/GHSA-7639-4x37-qfj8/GHSA-7639-4x37-qfj8.json index 0837fa63164..4b78edf4c1a 100644 --- a/advisories/unreviewed/2024/03/GHSA-7639-4x37-qfj8/GHSA-7639-4x37-qfj8.json +++ b/advisories/unreviewed/2024/03/GHSA-7639-4x37-qfj8/GHSA-7639-4x37-qfj8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-9g2f-rcrg-3f74/GHSA-9g2f-rcrg-3f74.json b/advisories/unreviewed/2024/03/GHSA-9g2f-rcrg-3f74/GHSA-9g2f-rcrg-3f74.json index b2c28afd1ef..67e54833bbb 100644 --- a/advisories/unreviewed/2024/03/GHSA-9g2f-rcrg-3f74/GHSA-9g2f-rcrg-3f74.json +++ b/advisories/unreviewed/2024/03/GHSA-9g2f-rcrg-3f74/GHSA-9g2f-rcrg-3f74.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-fpf2-cr84-mrv9/GHSA-fpf2-cr84-mrv9.json b/advisories/unreviewed/2024/03/GHSA-fpf2-cr84-mrv9/GHSA-fpf2-cr84-mrv9.json index 5509d6aff1c..41914eeb789 100644 --- a/advisories/unreviewed/2024/03/GHSA-fpf2-cr84-mrv9/GHSA-fpf2-cr84-mrv9.json +++ b/advisories/unreviewed/2024/03/GHSA-fpf2-cr84-mrv9/GHSA-fpf2-cr84-mrv9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-gm28-rj7w-mj3m/GHSA-gm28-rj7w-mj3m.json b/advisories/unreviewed/2024/03/GHSA-gm28-rj7w-mj3m/GHSA-gm28-rj7w-mj3m.json index 9ec9fbd55a2..1cb0a1f098a 100644 --- a/advisories/unreviewed/2024/03/GHSA-gm28-rj7w-mj3m/GHSA-gm28-rj7w-mj3m.json +++ b/advisories/unreviewed/2024/03/GHSA-gm28-rj7w-mj3m/GHSA-gm28-rj7w-mj3m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-jj3x-6fjg-wcr7/GHSA-jj3x-6fjg-wcr7.json b/advisories/unreviewed/2024/03/GHSA-jj3x-6fjg-wcr7/GHSA-jj3x-6fjg-wcr7.json index 582c284c77d..88b2b5f4894 100644 --- a/advisories/unreviewed/2024/03/GHSA-jj3x-6fjg-wcr7/GHSA-jj3x-6fjg-wcr7.json +++ b/advisories/unreviewed/2024/03/GHSA-jj3x-6fjg-wcr7/GHSA-jj3x-6fjg-wcr7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-m966-6288-pj94/GHSA-m966-6288-pj94.json b/advisories/unreviewed/2024/03/GHSA-m966-6288-pj94/GHSA-m966-6288-pj94.json index d37fd11c6df..b55bd8bd378 100644 --- a/advisories/unreviewed/2024/03/GHSA-m966-6288-pj94/GHSA-m966-6288-pj94.json +++ b/advisories/unreviewed/2024/03/GHSA-m966-6288-pj94/GHSA-m966-6288-pj94.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-mxmg-v768-hh7w/GHSA-mxmg-v768-hh7w.json b/advisories/unreviewed/2024/03/GHSA-mxmg-v768-hh7w/GHSA-mxmg-v768-hh7w.json index de8006cfc18..6b2932937cc 100644 --- a/advisories/unreviewed/2024/03/GHSA-mxmg-v768-hh7w/GHSA-mxmg-v768-hh7w.json +++ b/advisories/unreviewed/2024/03/GHSA-mxmg-v768-hh7w/GHSA-mxmg-v768-hh7w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-pq5r-rp8m-p9vh/GHSA-pq5r-rp8m-p9vh.json b/advisories/unreviewed/2024/03/GHSA-pq5r-rp8m-p9vh/GHSA-pq5r-rp8m-p9vh.json index 3d6df2b7bcd..5fea69739ad 100644 --- a/advisories/unreviewed/2024/03/GHSA-pq5r-rp8m-p9vh/GHSA-pq5r-rp8m-p9vh.json +++ b/advisories/unreviewed/2024/03/GHSA-pq5r-rp8m-p9vh/GHSA-pq5r-rp8m-p9vh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-r345-j492-57q4/GHSA-r345-j492-57q4.json b/advisories/unreviewed/2024/03/GHSA-r345-j492-57q4/GHSA-r345-j492-57q4.json index 0b86dfe3ae4..56d72034a95 100644 --- a/advisories/unreviewed/2024/03/GHSA-r345-j492-57q4/GHSA-r345-j492-57q4.json +++ b/advisories/unreviewed/2024/03/GHSA-r345-j492-57q4/GHSA-r345-j492-57q4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-rxj8-fv7g-cp4v/GHSA-rxj8-fv7g-cp4v.json b/advisories/unreviewed/2024/03/GHSA-rxj8-fv7g-cp4v/GHSA-rxj8-fv7g-cp4v.json index 189ab4a71b4..cf32fc635ae 100644 --- a/advisories/unreviewed/2024/03/GHSA-rxj8-fv7g-cp4v/GHSA-rxj8-fv7g-cp4v.json +++ b/advisories/unreviewed/2024/03/GHSA-rxj8-fv7g-cp4v/GHSA-rxj8-fv7g-cp4v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-vj7g-5fj3-rc83/GHSA-vj7g-5fj3-rc83.json b/advisories/unreviewed/2024/03/GHSA-vj7g-5fj3-rc83/GHSA-vj7g-5fj3-rc83.json index fc8f0a9a489..f2713f4befb 100644 --- a/advisories/unreviewed/2024/03/GHSA-vj7g-5fj3-rc83/GHSA-vj7g-5fj3-rc83.json +++ b/advisories/unreviewed/2024/03/GHSA-vj7g-5fj3-rc83/GHSA-vj7g-5fj3-rc83.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-wxh9-34f7-vmrc/GHSA-wxh9-34f7-vmrc.json b/advisories/unreviewed/2024/03/GHSA-wxh9-34f7-vmrc/GHSA-wxh9-34f7-vmrc.json index 7bf7444e69b..a6b0546fc12 100644 --- a/advisories/unreviewed/2024/03/GHSA-wxh9-34f7-vmrc/GHSA-wxh9-34f7-vmrc.json +++ b/advisories/unreviewed/2024/03/GHSA-wxh9-34f7-vmrc/GHSA-wxh9-34f7-vmrc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-x8xc-vcqw-36qc/GHSA-x8xc-vcqw-36qc.json b/advisories/unreviewed/2024/03/GHSA-x8xc-vcqw-36qc/GHSA-x8xc-vcqw-36qc.json index 8671cb37ac1..5f5f4bb1968 100644 --- a/advisories/unreviewed/2024/03/GHSA-x8xc-vcqw-36qc/GHSA-x8xc-vcqw-36qc.json +++ b/advisories/unreviewed/2024/03/GHSA-x8xc-vcqw-36qc/GHSA-x8xc-vcqw-36qc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-xv4r-44qp-78wm/GHSA-xv4r-44qp-78wm.json b/advisories/unreviewed/2024/03/GHSA-xv4r-44qp-78wm/GHSA-xv4r-44qp-78wm.json index 1b4807b3c69..b002a753396 100644 --- a/advisories/unreviewed/2024/03/GHSA-xv4r-44qp-78wm/GHSA-xv4r-44qp-78wm.json +++ b/advisories/unreviewed/2024/03/GHSA-xv4r-44qp-78wm/GHSA-xv4r-44qp-78wm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-2fhr-94vx-gjwj/GHSA-2fhr-94vx-gjwj.json b/advisories/unreviewed/2024/04/GHSA-2fhr-94vx-gjwj/GHSA-2fhr-94vx-gjwj.json index 8994b09413e..c537643e356 100644 --- a/advisories/unreviewed/2024/04/GHSA-2fhr-94vx-gjwj/GHSA-2fhr-94vx-gjwj.json +++ b/advisories/unreviewed/2024/04/GHSA-2fhr-94vx-gjwj/GHSA-2fhr-94vx-gjwj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-2h9f-ppj9-gcvv/GHSA-2h9f-ppj9-gcvv.json b/advisories/unreviewed/2024/04/GHSA-2h9f-ppj9-gcvv/GHSA-2h9f-ppj9-gcvv.json index 61702c270c5..8511359043f 100644 --- a/advisories/unreviewed/2024/04/GHSA-2h9f-ppj9-gcvv/GHSA-2h9f-ppj9-gcvv.json +++ b/advisories/unreviewed/2024/04/GHSA-2h9f-ppj9-gcvv/GHSA-2h9f-ppj9-gcvv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-2qw2-mf8f-r46g/GHSA-2qw2-mf8f-r46g.json b/advisories/unreviewed/2024/04/GHSA-2qw2-mf8f-r46g/GHSA-2qw2-mf8f-r46g.json index c4a1c787e5a..548f624ce16 100644 --- a/advisories/unreviewed/2024/04/GHSA-2qw2-mf8f-r46g/GHSA-2qw2-mf8f-r46g.json +++ b/advisories/unreviewed/2024/04/GHSA-2qw2-mf8f-r46g/GHSA-2qw2-mf8f-r46g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-2v33-23h8-f74g/GHSA-2v33-23h8-f74g.json b/advisories/unreviewed/2024/04/GHSA-2v33-23h8-f74g/GHSA-2v33-23h8-f74g.json index b1f88b39a76..b91bdc13193 100644 --- a/advisories/unreviewed/2024/04/GHSA-2v33-23h8-f74g/GHSA-2v33-23h8-f74g.json +++ b/advisories/unreviewed/2024/04/GHSA-2v33-23h8-f74g/GHSA-2v33-23h8-f74g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-2v7g-px7m-px6j/GHSA-2v7g-px7m-px6j.json b/advisories/unreviewed/2024/04/GHSA-2v7g-px7m-px6j/GHSA-2v7g-px7m-px6j.json index a372d42f5d0..d714fa2c6f9 100644 --- a/advisories/unreviewed/2024/04/GHSA-2v7g-px7m-px6j/GHSA-2v7g-px7m-px6j.json +++ b/advisories/unreviewed/2024/04/GHSA-2v7g-px7m-px6j/GHSA-2v7g-px7m-px6j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-349c-6q2h-wwhm/GHSA-349c-6q2h-wwhm.json b/advisories/unreviewed/2024/04/GHSA-349c-6q2h-wwhm/GHSA-349c-6q2h-wwhm.json index 3eba931f837..eb56795fd13 100644 --- a/advisories/unreviewed/2024/04/GHSA-349c-6q2h-wwhm/GHSA-349c-6q2h-wwhm.json +++ b/advisories/unreviewed/2024/04/GHSA-349c-6q2h-wwhm/GHSA-349c-6q2h-wwhm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-3cjh-h2h5-qjc2/GHSA-3cjh-h2h5-qjc2.json b/advisories/unreviewed/2024/04/GHSA-3cjh-h2h5-qjc2/GHSA-3cjh-h2h5-qjc2.json index 06aed46cff5..0373a2d12c6 100644 --- a/advisories/unreviewed/2024/04/GHSA-3cjh-h2h5-qjc2/GHSA-3cjh-h2h5-qjc2.json +++ b/advisories/unreviewed/2024/04/GHSA-3cjh-h2h5-qjc2/GHSA-3cjh-h2h5-qjc2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-3ghc-2486-hrxh/GHSA-3ghc-2486-hrxh.json b/advisories/unreviewed/2024/04/GHSA-3ghc-2486-hrxh/GHSA-3ghc-2486-hrxh.json index 10cc160e1e0..e2e710459ee 100644 --- a/advisories/unreviewed/2024/04/GHSA-3ghc-2486-hrxh/GHSA-3ghc-2486-hrxh.json +++ b/advisories/unreviewed/2024/04/GHSA-3ghc-2486-hrxh/GHSA-3ghc-2486-hrxh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-3qfm-m53j-9vq3/GHSA-3qfm-m53j-9vq3.json b/advisories/unreviewed/2024/04/GHSA-3qfm-m53j-9vq3/GHSA-3qfm-m53j-9vq3.json index c0674a934a4..4a36ea2d9fd 100644 --- a/advisories/unreviewed/2024/04/GHSA-3qfm-m53j-9vq3/GHSA-3qfm-m53j-9vq3.json +++ b/advisories/unreviewed/2024/04/GHSA-3qfm-m53j-9vq3/GHSA-3qfm-m53j-9vq3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-3qjr-4g82-68jf/GHSA-3qjr-4g82-68jf.json b/advisories/unreviewed/2024/04/GHSA-3qjr-4g82-68jf/GHSA-3qjr-4g82-68jf.json index b76621689d6..3b35d74e27d 100644 --- a/advisories/unreviewed/2024/04/GHSA-3qjr-4g82-68jf/GHSA-3qjr-4g82-68jf.json +++ b/advisories/unreviewed/2024/04/GHSA-3qjr-4g82-68jf/GHSA-3qjr-4g82-68jf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-3rqv-3fwm-p58c/GHSA-3rqv-3fwm-p58c.json b/advisories/unreviewed/2024/04/GHSA-3rqv-3fwm-p58c/GHSA-3rqv-3fwm-p58c.json index eef2003d5f4..eed937c1b66 100644 --- a/advisories/unreviewed/2024/04/GHSA-3rqv-3fwm-p58c/GHSA-3rqv-3fwm-p58c.json +++ b/advisories/unreviewed/2024/04/GHSA-3rqv-3fwm-p58c/GHSA-3rqv-3fwm-p58c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-3xvr-7cqm-9j53/GHSA-3xvr-7cqm-9j53.json b/advisories/unreviewed/2024/04/GHSA-3xvr-7cqm-9j53/GHSA-3xvr-7cqm-9j53.json index 87336100769..4d8b5832d10 100644 --- a/advisories/unreviewed/2024/04/GHSA-3xvr-7cqm-9j53/GHSA-3xvr-7cqm-9j53.json +++ b/advisories/unreviewed/2024/04/GHSA-3xvr-7cqm-9j53/GHSA-3xvr-7cqm-9j53.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-4359-2h7h-5jm3/GHSA-4359-2h7h-5jm3.json b/advisories/unreviewed/2024/04/GHSA-4359-2h7h-5jm3/GHSA-4359-2h7h-5jm3.json index 6b8576a4976..4d8baebc86a 100644 --- a/advisories/unreviewed/2024/04/GHSA-4359-2h7h-5jm3/GHSA-4359-2h7h-5jm3.json +++ b/advisories/unreviewed/2024/04/GHSA-4359-2h7h-5jm3/GHSA-4359-2h7h-5jm3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-43h7-7hr5-fjcq/GHSA-43h7-7hr5-fjcq.json b/advisories/unreviewed/2024/04/GHSA-43h7-7hr5-fjcq/GHSA-43h7-7hr5-fjcq.json index ddc3d74e65b..f1a38464ea6 100644 --- a/advisories/unreviewed/2024/04/GHSA-43h7-7hr5-fjcq/GHSA-43h7-7hr5-fjcq.json +++ b/advisories/unreviewed/2024/04/GHSA-43h7-7hr5-fjcq/GHSA-43h7-7hr5-fjcq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-4jwm-p35r-q67q/GHSA-4jwm-p35r-q67q.json b/advisories/unreviewed/2024/04/GHSA-4jwm-p35r-q67q/GHSA-4jwm-p35r-q67q.json index 735caaef331..44ee633ca35 100644 --- a/advisories/unreviewed/2024/04/GHSA-4jwm-p35r-q67q/GHSA-4jwm-p35r-q67q.json +++ b/advisories/unreviewed/2024/04/GHSA-4jwm-p35r-q67q/GHSA-4jwm-p35r-q67q.json @@ -7,12 +7,8 @@ "CVE-2024-1905" ], "details": "The Smart Forms WordPress plugin before 2.6.96 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/04/GHSA-4x2c-gqrf-gvf9/GHSA-4x2c-gqrf-gvf9.json b/advisories/unreviewed/2024/04/GHSA-4x2c-gqrf-gvf9/GHSA-4x2c-gqrf-gvf9.json index 42a880d99d5..822e416bcc4 100644 --- a/advisories/unreviewed/2024/04/GHSA-4x2c-gqrf-gvf9/GHSA-4x2c-gqrf-gvf9.json +++ b/advisories/unreviewed/2024/04/GHSA-4x2c-gqrf-gvf9/GHSA-4x2c-gqrf-gvf9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-4x7f-vqx4-93xq/GHSA-4x7f-vqx4-93xq.json b/advisories/unreviewed/2024/04/GHSA-4x7f-vqx4-93xq/GHSA-4x7f-vqx4-93xq.json index f2c39c8d9ae..a7e903b605e 100644 --- a/advisories/unreviewed/2024/04/GHSA-4x7f-vqx4-93xq/GHSA-4x7f-vqx4-93xq.json +++ b/advisories/unreviewed/2024/04/GHSA-4x7f-vqx4-93xq/GHSA-4x7f-vqx4-93xq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-5656-3635-q384/GHSA-5656-3635-q384.json b/advisories/unreviewed/2024/04/GHSA-5656-3635-q384/GHSA-5656-3635-q384.json index dd907a7ab8c..f82079c8224 100644 --- a/advisories/unreviewed/2024/04/GHSA-5656-3635-q384/GHSA-5656-3635-q384.json +++ b/advisories/unreviewed/2024/04/GHSA-5656-3635-q384/GHSA-5656-3635-q384.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/04/GHSA-58j4-c8m7-xcgv/GHSA-58j4-c8m7-xcgv.json b/advisories/unreviewed/2024/04/GHSA-58j4-c8m7-xcgv/GHSA-58j4-c8m7-xcgv.json index 79282f5616e..d3d1e255078 100644 --- a/advisories/unreviewed/2024/04/GHSA-58j4-c8m7-xcgv/GHSA-58j4-c8m7-xcgv.json +++ b/advisories/unreviewed/2024/04/GHSA-58j4-c8m7-xcgv/GHSA-58j4-c8m7-xcgv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-59wx-5mpv-jf8p/GHSA-59wx-5mpv-jf8p.json b/advisories/unreviewed/2024/04/GHSA-59wx-5mpv-jf8p/GHSA-59wx-5mpv-jf8p.json index f3132964dc4..738714530f3 100644 --- a/advisories/unreviewed/2024/04/GHSA-59wx-5mpv-jf8p/GHSA-59wx-5mpv-jf8p.json +++ b/advisories/unreviewed/2024/04/GHSA-59wx-5mpv-jf8p/GHSA-59wx-5mpv-jf8p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-5xxc-3cwr-rgj7/GHSA-5xxc-3cwr-rgj7.json b/advisories/unreviewed/2024/04/GHSA-5xxc-3cwr-rgj7/GHSA-5xxc-3cwr-rgj7.json index 8ed22be0b09..c7dafd9fe1f 100644 --- a/advisories/unreviewed/2024/04/GHSA-5xxc-3cwr-rgj7/GHSA-5xxc-3cwr-rgj7.json +++ b/advisories/unreviewed/2024/04/GHSA-5xxc-3cwr-rgj7/GHSA-5xxc-3cwr-rgj7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-635h-wj98-gqhv/GHSA-635h-wj98-gqhv.json b/advisories/unreviewed/2024/04/GHSA-635h-wj98-gqhv/GHSA-635h-wj98-gqhv.json index 7b328bfec8c..ee1d2f8a5ff 100644 --- a/advisories/unreviewed/2024/04/GHSA-635h-wj98-gqhv/GHSA-635h-wj98-gqhv.json +++ b/advisories/unreviewed/2024/04/GHSA-635h-wj98-gqhv/GHSA-635h-wj98-gqhv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-6393-6w3w-9w86/GHSA-6393-6w3w-9w86.json b/advisories/unreviewed/2024/04/GHSA-6393-6w3w-9w86/GHSA-6393-6w3w-9w86.json index 7a7e00134ea..8123a2c72be 100644 --- a/advisories/unreviewed/2024/04/GHSA-6393-6w3w-9w86/GHSA-6393-6w3w-9w86.json +++ b/advisories/unreviewed/2024/04/GHSA-6393-6w3w-9w86/GHSA-6393-6w3w-9w86.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-6cv6-hf8q-pxx2/GHSA-6cv6-hf8q-pxx2.json b/advisories/unreviewed/2024/04/GHSA-6cv6-hf8q-pxx2/GHSA-6cv6-hf8q-pxx2.json index c7752d76d14..05a6cf53af3 100644 --- a/advisories/unreviewed/2024/04/GHSA-6cv6-hf8q-pxx2/GHSA-6cv6-hf8q-pxx2.json +++ b/advisories/unreviewed/2024/04/GHSA-6cv6-hf8q-pxx2/GHSA-6cv6-hf8q-pxx2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-6gjj-j8cj-v7v3/GHSA-6gjj-j8cj-v7v3.json b/advisories/unreviewed/2024/04/GHSA-6gjj-j8cj-v7v3/GHSA-6gjj-j8cj-v7v3.json index 2d9efd039fb..e8cf5b8b2b4 100644 --- a/advisories/unreviewed/2024/04/GHSA-6gjj-j8cj-v7v3/GHSA-6gjj-j8cj-v7v3.json +++ b/advisories/unreviewed/2024/04/GHSA-6gjj-j8cj-v7v3/GHSA-6gjj-j8cj-v7v3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-6vvc-wq83-2w8f/GHSA-6vvc-wq83-2w8f.json b/advisories/unreviewed/2024/04/GHSA-6vvc-wq83-2w8f/GHSA-6vvc-wq83-2w8f.json index 4435a46eaff..333f4307366 100644 --- a/advisories/unreviewed/2024/04/GHSA-6vvc-wq83-2w8f/GHSA-6vvc-wq83-2w8f.json +++ b/advisories/unreviewed/2024/04/GHSA-6vvc-wq83-2w8f/GHSA-6vvc-wq83-2w8f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-75mr-qv3c-5mmf/GHSA-75mr-qv3c-5mmf.json b/advisories/unreviewed/2024/04/GHSA-75mr-qv3c-5mmf/GHSA-75mr-qv3c-5mmf.json index 73392ae2189..5a4349217a8 100644 --- a/advisories/unreviewed/2024/04/GHSA-75mr-qv3c-5mmf/GHSA-75mr-qv3c-5mmf.json +++ b/advisories/unreviewed/2024/04/GHSA-75mr-qv3c-5mmf/GHSA-75mr-qv3c-5mmf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-7f66-fgh3-955x/GHSA-7f66-fgh3-955x.json b/advisories/unreviewed/2024/04/GHSA-7f66-fgh3-955x/GHSA-7f66-fgh3-955x.json index 2d0ca43f2f4..f94ce60ff89 100644 --- a/advisories/unreviewed/2024/04/GHSA-7f66-fgh3-955x/GHSA-7f66-fgh3-955x.json +++ b/advisories/unreviewed/2024/04/GHSA-7f66-fgh3-955x/GHSA-7f66-fgh3-955x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-7m76-8vv9-hcqm/GHSA-7m76-8vv9-hcqm.json b/advisories/unreviewed/2024/04/GHSA-7m76-8vv9-hcqm/GHSA-7m76-8vv9-hcqm.json index 793399cb149..55a028ceb8f 100644 --- a/advisories/unreviewed/2024/04/GHSA-7m76-8vv9-hcqm/GHSA-7m76-8vv9-hcqm.json +++ b/advisories/unreviewed/2024/04/GHSA-7m76-8vv9-hcqm/GHSA-7m76-8vv9-hcqm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-894f-rh68-m2vm/GHSA-894f-rh68-m2vm.json b/advisories/unreviewed/2024/04/GHSA-894f-rh68-m2vm/GHSA-894f-rh68-m2vm.json index 8ca01dd89c4..025989a56eb 100644 --- a/advisories/unreviewed/2024/04/GHSA-894f-rh68-m2vm/GHSA-894f-rh68-m2vm.json +++ b/advisories/unreviewed/2024/04/GHSA-894f-rh68-m2vm/GHSA-894f-rh68-m2vm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-8f29-7cmc-83vw/GHSA-8f29-7cmc-83vw.json b/advisories/unreviewed/2024/04/GHSA-8f29-7cmc-83vw/GHSA-8f29-7cmc-83vw.json index 24cead2c200..4dfc50f12ea 100644 --- a/advisories/unreviewed/2024/04/GHSA-8f29-7cmc-83vw/GHSA-8f29-7cmc-83vw.json +++ b/advisories/unreviewed/2024/04/GHSA-8f29-7cmc-83vw/GHSA-8f29-7cmc-83vw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-8g9x-vm55-m3mq/GHSA-8g9x-vm55-m3mq.json b/advisories/unreviewed/2024/04/GHSA-8g9x-vm55-m3mq/GHSA-8g9x-vm55-m3mq.json index 71ef6bac369..485e79c7cff 100644 --- a/advisories/unreviewed/2024/04/GHSA-8g9x-vm55-m3mq/GHSA-8g9x-vm55-m3mq.json +++ b/advisories/unreviewed/2024/04/GHSA-8g9x-vm55-m3mq/GHSA-8g9x-vm55-m3mq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-8vjg-37gr-gvx7/GHSA-8vjg-37gr-gvx7.json b/advisories/unreviewed/2024/04/GHSA-8vjg-37gr-gvx7/GHSA-8vjg-37gr-gvx7.json index 47a8ebb2bc1..e1d67e41d0b 100644 --- a/advisories/unreviewed/2024/04/GHSA-8vjg-37gr-gvx7/GHSA-8vjg-37gr-gvx7.json +++ b/advisories/unreviewed/2024/04/GHSA-8vjg-37gr-gvx7/GHSA-8vjg-37gr-gvx7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-92fr-gqp9-2ww5/GHSA-92fr-gqp9-2ww5.json b/advisories/unreviewed/2024/04/GHSA-92fr-gqp9-2ww5/GHSA-92fr-gqp9-2ww5.json index bb11125d6b4..319f14bb319 100644 --- a/advisories/unreviewed/2024/04/GHSA-92fr-gqp9-2ww5/GHSA-92fr-gqp9-2ww5.json +++ b/advisories/unreviewed/2024/04/GHSA-92fr-gqp9-2ww5/GHSA-92fr-gqp9-2ww5.json @@ -7,12 +7,8 @@ "CVE-2024-32268" ], "details": "An issue in Tuya Smart camera U6N v.3.2.5 allows a remote attacker to cause a denial of service via a crafted packet to the network connection component.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/04/GHSA-959v-hpg2-3f7w/GHSA-959v-hpg2-3f7w.json b/advisories/unreviewed/2024/04/GHSA-959v-hpg2-3f7w/GHSA-959v-hpg2-3f7w.json index ac081af39da..39d61a13b94 100644 --- a/advisories/unreviewed/2024/04/GHSA-959v-hpg2-3f7w/GHSA-959v-hpg2-3f7w.json +++ b/advisories/unreviewed/2024/04/GHSA-959v-hpg2-3f7w/GHSA-959v-hpg2-3f7w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-95q7-rqp4-3w49/GHSA-95q7-rqp4-3w49.json b/advisories/unreviewed/2024/04/GHSA-95q7-rqp4-3w49/GHSA-95q7-rqp4-3w49.json index 4c76f104725..b20fb657a05 100644 --- a/advisories/unreviewed/2024/04/GHSA-95q7-rqp4-3w49/GHSA-95q7-rqp4-3w49.json +++ b/advisories/unreviewed/2024/04/GHSA-95q7-rqp4-3w49/GHSA-95q7-rqp4-3w49.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-963m-mgxp-cg5w/GHSA-963m-mgxp-cg5w.json b/advisories/unreviewed/2024/04/GHSA-963m-mgxp-cg5w/GHSA-963m-mgxp-cg5w.json index 1e5f11a5005..7701c3edffe 100644 --- a/advisories/unreviewed/2024/04/GHSA-963m-mgxp-cg5w/GHSA-963m-mgxp-cg5w.json +++ b/advisories/unreviewed/2024/04/GHSA-963m-mgxp-cg5w/GHSA-963m-mgxp-cg5w.json @@ -7,12 +7,8 @@ "CVE-2023-46270" ], "details": "MacPaw The Unarchiver before 4.3.6 contains vulnerability related to missing quarantine attributes for extracted items.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/04/GHSA-992x-5q5j-jmp5/GHSA-992x-5q5j-jmp5.json b/advisories/unreviewed/2024/04/GHSA-992x-5q5j-jmp5/GHSA-992x-5q5j-jmp5.json index bdb4340f747..894dfbf1d82 100644 --- a/advisories/unreviewed/2024/04/GHSA-992x-5q5j-jmp5/GHSA-992x-5q5j-jmp5.json +++ b/advisories/unreviewed/2024/04/GHSA-992x-5q5j-jmp5/GHSA-992x-5q5j-jmp5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-994v-8mpg-9f54/GHSA-994v-8mpg-9f54.json b/advisories/unreviewed/2024/04/GHSA-994v-8mpg-9f54/GHSA-994v-8mpg-9f54.json index bfb4b8f0006..d44c4fac6cb 100644 --- a/advisories/unreviewed/2024/04/GHSA-994v-8mpg-9f54/GHSA-994v-8mpg-9f54.json +++ b/advisories/unreviewed/2024/04/GHSA-994v-8mpg-9f54/GHSA-994v-8mpg-9f54.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-9f97-gpg7-4cqv/GHSA-9f97-gpg7-4cqv.json b/advisories/unreviewed/2024/04/GHSA-9f97-gpg7-4cqv/GHSA-9f97-gpg7-4cqv.json index 72199021abf..a0d8056e754 100644 --- a/advisories/unreviewed/2024/04/GHSA-9f97-gpg7-4cqv/GHSA-9f97-gpg7-4cqv.json +++ b/advisories/unreviewed/2024/04/GHSA-9f97-gpg7-4cqv/GHSA-9f97-gpg7-4cqv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/04/GHSA-9fp7-23v8-qw68/GHSA-9fp7-23v8-qw68.json b/advisories/unreviewed/2024/04/GHSA-9fp7-23v8-qw68/GHSA-9fp7-23v8-qw68.json index 5665f48872c..ab944742798 100644 --- a/advisories/unreviewed/2024/04/GHSA-9fp7-23v8-qw68/GHSA-9fp7-23v8-qw68.json +++ b/advisories/unreviewed/2024/04/GHSA-9fp7-23v8-qw68/GHSA-9fp7-23v8-qw68.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-9xch-xvj3-fmf3/GHSA-9xch-xvj3-fmf3.json b/advisories/unreviewed/2024/04/GHSA-9xch-xvj3-fmf3/GHSA-9xch-xvj3-fmf3.json index f3504762151..3b820edbdd9 100644 --- a/advisories/unreviewed/2024/04/GHSA-9xch-xvj3-fmf3/GHSA-9xch-xvj3-fmf3.json +++ b/advisories/unreviewed/2024/04/GHSA-9xch-xvj3-fmf3/GHSA-9xch-xvj3-fmf3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -51,9 +49,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/04/GHSA-9xqh-c85q-wvfr/GHSA-9xqh-c85q-wvfr.json b/advisories/unreviewed/2024/04/GHSA-9xqh-c85q-wvfr/GHSA-9xqh-c85q-wvfr.json index d6b02bd5698..8365388f423 100644 --- a/advisories/unreviewed/2024/04/GHSA-9xqh-c85q-wvfr/GHSA-9xqh-c85q-wvfr.json +++ b/advisories/unreviewed/2024/04/GHSA-9xqh-c85q-wvfr/GHSA-9xqh-c85q-wvfr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-c3cg-v373-7p8j/GHSA-c3cg-v373-7p8j.json b/advisories/unreviewed/2024/04/GHSA-c3cg-v373-7p8j/GHSA-c3cg-v373-7p8j.json index f2de2bb081b..8c27947c48d 100644 --- a/advisories/unreviewed/2024/04/GHSA-c3cg-v373-7p8j/GHSA-c3cg-v373-7p8j.json +++ b/advisories/unreviewed/2024/04/GHSA-c3cg-v373-7p8j/GHSA-c3cg-v373-7p8j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-c63r-p9j6-xm6r/GHSA-c63r-p9j6-xm6r.json b/advisories/unreviewed/2024/04/GHSA-c63r-p9j6-xm6r/GHSA-c63r-p9j6-xm6r.json index e6978a6962c..15e70f8fa79 100644 --- a/advisories/unreviewed/2024/04/GHSA-c63r-p9j6-xm6r/GHSA-c63r-p9j6-xm6r.json +++ b/advisories/unreviewed/2024/04/GHSA-c63r-p9j6-xm6r/GHSA-c63r-p9j6-xm6r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-crgh-9gf9-cqq9/GHSA-crgh-9gf9-cqq9.json b/advisories/unreviewed/2024/04/GHSA-crgh-9gf9-cqq9/GHSA-crgh-9gf9-cqq9.json index 88ac03480ed..65983cfed40 100644 --- a/advisories/unreviewed/2024/04/GHSA-crgh-9gf9-cqq9/GHSA-crgh-9gf9-cqq9.json +++ b/advisories/unreviewed/2024/04/GHSA-crgh-9gf9-cqq9/GHSA-crgh-9gf9-cqq9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-fj75-q86h-2r5g/GHSA-fj75-q86h-2r5g.json b/advisories/unreviewed/2024/04/GHSA-fj75-q86h-2r5g/GHSA-fj75-q86h-2r5g.json index 33f7b44ea28..848fe14dfd0 100644 --- a/advisories/unreviewed/2024/04/GHSA-fj75-q86h-2r5g/GHSA-fj75-q86h-2r5g.json +++ b/advisories/unreviewed/2024/04/GHSA-fj75-q86h-2r5g/GHSA-fj75-q86h-2r5g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-fwrh-xmxv-qj39/GHSA-fwrh-xmxv-qj39.json b/advisories/unreviewed/2024/04/GHSA-fwrh-xmxv-qj39/GHSA-fwrh-xmxv-qj39.json index 6ebbf0cfaaa..1cb6cfcdaa0 100644 --- a/advisories/unreviewed/2024/04/GHSA-fwrh-xmxv-qj39/GHSA-fwrh-xmxv-qj39.json +++ b/advisories/unreviewed/2024/04/GHSA-fwrh-xmxv-qj39/GHSA-fwrh-xmxv-qj39.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-g5vg-rvq4-mq5p/GHSA-g5vg-rvq4-mq5p.json b/advisories/unreviewed/2024/04/GHSA-g5vg-rvq4-mq5p/GHSA-g5vg-rvq4-mq5p.json index 77636b3e3de..45fbe37a916 100644 --- a/advisories/unreviewed/2024/04/GHSA-g5vg-rvq4-mq5p/GHSA-g5vg-rvq4-mq5p.json +++ b/advisories/unreviewed/2024/04/GHSA-g5vg-rvq4-mq5p/GHSA-g5vg-rvq4-mq5p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-g666-fcvg-24h3/GHSA-g666-fcvg-24h3.json b/advisories/unreviewed/2024/04/GHSA-g666-fcvg-24h3/GHSA-g666-fcvg-24h3.json index ffa989abc49..77941820597 100644 --- a/advisories/unreviewed/2024/04/GHSA-g666-fcvg-24h3/GHSA-g666-fcvg-24h3.json +++ b/advisories/unreviewed/2024/04/GHSA-g666-fcvg-24h3/GHSA-g666-fcvg-24h3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-g7qj-fx7v-pm5j/GHSA-g7qj-fx7v-pm5j.json b/advisories/unreviewed/2024/04/GHSA-g7qj-fx7v-pm5j/GHSA-g7qj-fx7v-pm5j.json index bced2e74254..76e4115099b 100644 --- a/advisories/unreviewed/2024/04/GHSA-g7qj-fx7v-pm5j/GHSA-g7qj-fx7v-pm5j.json +++ b/advisories/unreviewed/2024/04/GHSA-g7qj-fx7v-pm5j/GHSA-g7qj-fx7v-pm5j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-g89g-74wr-qhg3/GHSA-g89g-74wr-qhg3.json b/advisories/unreviewed/2024/04/GHSA-g89g-74wr-qhg3/GHSA-g89g-74wr-qhg3.json index 6622beb6481..3610092e0b6 100644 --- a/advisories/unreviewed/2024/04/GHSA-g89g-74wr-qhg3/GHSA-g89g-74wr-qhg3.json +++ b/advisories/unreviewed/2024/04/GHSA-g89g-74wr-qhg3/GHSA-g89g-74wr-qhg3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-g99q-g998-c275/GHSA-g99q-g998-c275.json b/advisories/unreviewed/2024/04/GHSA-g99q-g998-c275/GHSA-g99q-g998-c275.json index 8743dae3165..90e74ba9a2f 100644 --- a/advisories/unreviewed/2024/04/GHSA-g99q-g998-c275/GHSA-g99q-g998-c275.json +++ b/advisories/unreviewed/2024/04/GHSA-g99q-g998-c275/GHSA-g99q-g998-c275.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-gfgj-cf2r-6ffw/GHSA-gfgj-cf2r-6ffw.json b/advisories/unreviewed/2024/04/GHSA-gfgj-cf2r-6ffw/GHSA-gfgj-cf2r-6ffw.json index eaa40437837..6180b044e99 100644 --- a/advisories/unreviewed/2024/04/GHSA-gfgj-cf2r-6ffw/GHSA-gfgj-cf2r-6ffw.json +++ b/advisories/unreviewed/2024/04/GHSA-gfgj-cf2r-6ffw/GHSA-gfgj-cf2r-6ffw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-gr5j-xcqm-p2ph/GHSA-gr5j-xcqm-p2ph.json b/advisories/unreviewed/2024/04/GHSA-gr5j-xcqm-p2ph/GHSA-gr5j-xcqm-p2ph.json index dfa73b1c803..b7def8fa2f3 100644 --- a/advisories/unreviewed/2024/04/GHSA-gr5j-xcqm-p2ph/GHSA-gr5j-xcqm-p2ph.json +++ b/advisories/unreviewed/2024/04/GHSA-gr5j-xcqm-p2ph/GHSA-gr5j-xcqm-p2ph.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-gv7p-f5gp-mj9q/GHSA-gv7p-f5gp-mj9q.json b/advisories/unreviewed/2024/04/GHSA-gv7p-f5gp-mj9q/GHSA-gv7p-f5gp-mj9q.json index cd020184394..c84f23fc9e5 100644 --- a/advisories/unreviewed/2024/04/GHSA-gv7p-f5gp-mj9q/GHSA-gv7p-f5gp-mj9q.json +++ b/advisories/unreviewed/2024/04/GHSA-gv7p-f5gp-mj9q/GHSA-gv7p-f5gp-mj9q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-gwq4-xh4c-9x95/GHSA-gwq4-xh4c-9x95.json b/advisories/unreviewed/2024/04/GHSA-gwq4-xh4c-9x95/GHSA-gwq4-xh4c-9x95.json index 3329a047a46..c69a95b7874 100644 --- a/advisories/unreviewed/2024/04/GHSA-gwq4-xh4c-9x95/GHSA-gwq4-xh4c-9x95.json +++ b/advisories/unreviewed/2024/04/GHSA-gwq4-xh4c-9x95/GHSA-gwq4-xh4c-9x95.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-h47p-p2xw-fphp/GHSA-h47p-p2xw-fphp.json b/advisories/unreviewed/2024/04/GHSA-h47p-p2xw-fphp/GHSA-h47p-p2xw-fphp.json index f32f3d85689..714f373e165 100644 --- a/advisories/unreviewed/2024/04/GHSA-h47p-p2xw-fphp/GHSA-h47p-p2xw-fphp.json +++ b/advisories/unreviewed/2024/04/GHSA-h47p-p2xw-fphp/GHSA-h47p-p2xw-fphp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-hf5c-hjgx-rmrw/GHSA-hf5c-hjgx-rmrw.json b/advisories/unreviewed/2024/04/GHSA-hf5c-hjgx-rmrw/GHSA-hf5c-hjgx-rmrw.json index 398e72ac3fe..9ccc7c65fdb 100644 --- a/advisories/unreviewed/2024/04/GHSA-hf5c-hjgx-rmrw/GHSA-hf5c-hjgx-rmrw.json +++ b/advisories/unreviewed/2024/04/GHSA-hf5c-hjgx-rmrw/GHSA-hf5c-hjgx-rmrw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-hh44-mx2m-2w3w/GHSA-hh44-mx2m-2w3w.json b/advisories/unreviewed/2024/04/GHSA-hh44-mx2m-2w3w/GHSA-hh44-mx2m-2w3w.json index bd7a7afa5f7..0b9fc350171 100644 --- a/advisories/unreviewed/2024/04/GHSA-hh44-mx2m-2w3w/GHSA-hh44-mx2m-2w3w.json +++ b/advisories/unreviewed/2024/04/GHSA-hh44-mx2m-2w3w/GHSA-hh44-mx2m-2w3w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-hv3r-8m2g-v7cq/GHSA-hv3r-8m2g-v7cq.json b/advisories/unreviewed/2024/04/GHSA-hv3r-8m2g-v7cq/GHSA-hv3r-8m2g-v7cq.json index 44ca82d7b20..a6b45ed96a1 100644 --- a/advisories/unreviewed/2024/04/GHSA-hv3r-8m2g-v7cq/GHSA-hv3r-8m2g-v7cq.json +++ b/advisories/unreviewed/2024/04/GHSA-hv3r-8m2g-v7cq/GHSA-hv3r-8m2g-v7cq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-j3xx-xw6j-f8q3/GHSA-j3xx-xw6j-f8q3.json b/advisories/unreviewed/2024/04/GHSA-j3xx-xw6j-f8q3/GHSA-j3xx-xw6j-f8q3.json index 74198c3cc25..2dc8645b035 100644 --- a/advisories/unreviewed/2024/04/GHSA-j3xx-xw6j-f8q3/GHSA-j3xx-xw6j-f8q3.json +++ b/advisories/unreviewed/2024/04/GHSA-j3xx-xw6j-f8q3/GHSA-j3xx-xw6j-f8q3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-j6m3-4fcr-hq62/GHSA-j6m3-4fcr-hq62.json b/advisories/unreviewed/2024/04/GHSA-j6m3-4fcr-hq62/GHSA-j6m3-4fcr-hq62.json index c526b0d3452..68029e71207 100644 --- a/advisories/unreviewed/2024/04/GHSA-j6m3-4fcr-hq62/GHSA-j6m3-4fcr-hq62.json +++ b/advisories/unreviewed/2024/04/GHSA-j6m3-4fcr-hq62/GHSA-j6m3-4fcr-hq62.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-jc65-rh6v-pv5p/GHSA-jc65-rh6v-pv5p.json b/advisories/unreviewed/2024/04/GHSA-jc65-rh6v-pv5p/GHSA-jc65-rh6v-pv5p.json index 041caabf60a..ed8c41019c3 100644 --- a/advisories/unreviewed/2024/04/GHSA-jc65-rh6v-pv5p/GHSA-jc65-rh6v-pv5p.json +++ b/advisories/unreviewed/2024/04/GHSA-jc65-rh6v-pv5p/GHSA-jc65-rh6v-pv5p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-jg72-rmmw-hp49/GHSA-jg72-rmmw-hp49.json b/advisories/unreviewed/2024/04/GHSA-jg72-rmmw-hp49/GHSA-jg72-rmmw-hp49.json index ac26cbc5b0f..85fcab06f8c 100644 --- a/advisories/unreviewed/2024/04/GHSA-jg72-rmmw-hp49/GHSA-jg72-rmmw-hp49.json +++ b/advisories/unreviewed/2024/04/GHSA-jg72-rmmw-hp49/GHSA-jg72-rmmw-hp49.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-jh84-c2j7-r7w4/GHSA-jh84-c2j7-r7w4.json b/advisories/unreviewed/2024/04/GHSA-jh84-c2j7-r7w4/GHSA-jh84-c2j7-r7w4.json index 55c25eb394b..5c9890a5555 100644 --- a/advisories/unreviewed/2024/04/GHSA-jh84-c2j7-r7w4/GHSA-jh84-c2j7-r7w4.json +++ b/advisories/unreviewed/2024/04/GHSA-jh84-c2j7-r7w4/GHSA-jh84-c2j7-r7w4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-jr3w-q7cr-jxm2/GHSA-jr3w-q7cr-jxm2.json b/advisories/unreviewed/2024/04/GHSA-jr3w-q7cr-jxm2/GHSA-jr3w-q7cr-jxm2.json index bcec9d99101..977f43abaea 100644 --- a/advisories/unreviewed/2024/04/GHSA-jr3w-q7cr-jxm2/GHSA-jr3w-q7cr-jxm2.json +++ b/advisories/unreviewed/2024/04/GHSA-jr3w-q7cr-jxm2/GHSA-jr3w-q7cr-jxm2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/04/GHSA-m49v-wpwj-vj3x/GHSA-m49v-wpwj-vj3x.json b/advisories/unreviewed/2024/04/GHSA-m49v-wpwj-vj3x/GHSA-m49v-wpwj-vj3x.json index 62f32b079f4..91ecb88ca72 100644 --- a/advisories/unreviewed/2024/04/GHSA-m49v-wpwj-vj3x/GHSA-m49v-wpwj-vj3x.json +++ b/advisories/unreviewed/2024/04/GHSA-m49v-wpwj-vj3x/GHSA-m49v-wpwj-vj3x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-m4rg-wp77-xw59/GHSA-m4rg-wp77-xw59.json b/advisories/unreviewed/2024/04/GHSA-m4rg-wp77-xw59/GHSA-m4rg-wp77-xw59.json index e5aa170ee53..3ecfbcf626f 100644 --- a/advisories/unreviewed/2024/04/GHSA-m4rg-wp77-xw59/GHSA-m4rg-wp77-xw59.json +++ b/advisories/unreviewed/2024/04/GHSA-m4rg-wp77-xw59/GHSA-m4rg-wp77-xw59.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-mp8f-xwf5-rv6v/GHSA-mp8f-xwf5-rv6v.json b/advisories/unreviewed/2024/04/GHSA-mp8f-xwf5-rv6v/GHSA-mp8f-xwf5-rv6v.json index c562616d89f..b0550f99096 100644 --- a/advisories/unreviewed/2024/04/GHSA-mp8f-xwf5-rv6v/GHSA-mp8f-xwf5-rv6v.json +++ b/advisories/unreviewed/2024/04/GHSA-mp8f-xwf5-rv6v/GHSA-mp8f-xwf5-rv6v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-mw23-jwm4-23g8/GHSA-mw23-jwm4-23g8.json b/advisories/unreviewed/2024/04/GHSA-mw23-jwm4-23g8/GHSA-mw23-jwm4-23g8.json index 176d35c3198..bfdb092eb00 100644 --- a/advisories/unreviewed/2024/04/GHSA-mw23-jwm4-23g8/GHSA-mw23-jwm4-23g8.json +++ b/advisories/unreviewed/2024/04/GHSA-mw23-jwm4-23g8/GHSA-mw23-jwm4-23g8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-phc8-j9rw-cv2q/GHSA-phc8-j9rw-cv2q.json b/advisories/unreviewed/2024/04/GHSA-phc8-j9rw-cv2q/GHSA-phc8-j9rw-cv2q.json index eec401ba991..0d7b9c2a02a 100644 --- a/advisories/unreviewed/2024/04/GHSA-phc8-j9rw-cv2q/GHSA-phc8-j9rw-cv2q.json +++ b/advisories/unreviewed/2024/04/GHSA-phc8-j9rw-cv2q/GHSA-phc8-j9rw-cv2q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-phhp-cvw3-v4hr/GHSA-phhp-cvw3-v4hr.json b/advisories/unreviewed/2024/04/GHSA-phhp-cvw3-v4hr/GHSA-phhp-cvw3-v4hr.json index fba0d24bb17..fd936e5ee79 100644 --- a/advisories/unreviewed/2024/04/GHSA-phhp-cvw3-v4hr/GHSA-phhp-cvw3-v4hr.json +++ b/advisories/unreviewed/2024/04/GHSA-phhp-cvw3-v4hr/GHSA-phhp-cvw3-v4hr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-q2pw-g7vq-q2cm/GHSA-q2pw-g7vq-q2cm.json b/advisories/unreviewed/2024/04/GHSA-q2pw-g7vq-q2cm/GHSA-q2pw-g7vq-q2cm.json index 24371264666..e654b5537a6 100644 --- a/advisories/unreviewed/2024/04/GHSA-q2pw-g7vq-q2cm/GHSA-q2pw-g7vq-q2cm.json +++ b/advisories/unreviewed/2024/04/GHSA-q2pw-g7vq-q2cm/GHSA-q2pw-g7vq-q2cm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-q3mj-8r6m-xx6h/GHSA-q3mj-8r6m-xx6h.json b/advisories/unreviewed/2024/04/GHSA-q3mj-8r6m-xx6h/GHSA-q3mj-8r6m-xx6h.json index 839dd89f906..4b80175274f 100644 --- a/advisories/unreviewed/2024/04/GHSA-q3mj-8r6m-xx6h/GHSA-q3mj-8r6m-xx6h.json +++ b/advisories/unreviewed/2024/04/GHSA-q3mj-8r6m-xx6h/GHSA-q3mj-8r6m-xx6h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-q3rr-7hjc-7c55/GHSA-q3rr-7hjc-7c55.json b/advisories/unreviewed/2024/04/GHSA-q3rr-7hjc-7c55/GHSA-q3rr-7hjc-7c55.json index 4b296c0228f..de6af95146f 100644 --- a/advisories/unreviewed/2024/04/GHSA-q3rr-7hjc-7c55/GHSA-q3rr-7hjc-7c55.json +++ b/advisories/unreviewed/2024/04/GHSA-q3rr-7hjc-7c55/GHSA-q3rr-7hjc-7c55.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-q59j-4j35-wm99/GHSA-q59j-4j35-wm99.json b/advisories/unreviewed/2024/04/GHSA-q59j-4j35-wm99/GHSA-q59j-4j35-wm99.json index 2aaf37cd653..f710cde13a0 100644 --- a/advisories/unreviewed/2024/04/GHSA-q59j-4j35-wm99/GHSA-q59j-4j35-wm99.json +++ b/advisories/unreviewed/2024/04/GHSA-q59j-4j35-wm99/GHSA-q59j-4j35-wm99.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-q8qm-w223-fx6w/GHSA-q8qm-w223-fx6w.json b/advisories/unreviewed/2024/04/GHSA-q8qm-w223-fx6w/GHSA-q8qm-w223-fx6w.json index c475f0ebcfe..50de6805c4d 100644 --- a/advisories/unreviewed/2024/04/GHSA-q8qm-w223-fx6w/GHSA-q8qm-w223-fx6w.json +++ b/advisories/unreviewed/2024/04/GHSA-q8qm-w223-fx6w/GHSA-q8qm-w223-fx6w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-qqfg-7xr5-8hvg/GHSA-qqfg-7xr5-8hvg.json b/advisories/unreviewed/2024/04/GHSA-qqfg-7xr5-8hvg/GHSA-qqfg-7xr5-8hvg.json index 460d1492053..fbda1670d69 100644 --- a/advisories/unreviewed/2024/04/GHSA-qqfg-7xr5-8hvg/GHSA-qqfg-7xr5-8hvg.json +++ b/advisories/unreviewed/2024/04/GHSA-qqfg-7xr5-8hvg/GHSA-qqfg-7xr5-8hvg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-rq49-j5jp-7mr4/GHSA-rq49-j5jp-7mr4.json b/advisories/unreviewed/2024/04/GHSA-rq49-j5jp-7mr4/GHSA-rq49-j5jp-7mr4.json index c905feb0a52..6c0d8f967e8 100644 --- a/advisories/unreviewed/2024/04/GHSA-rq49-j5jp-7mr4/GHSA-rq49-j5jp-7mr4.json +++ b/advisories/unreviewed/2024/04/GHSA-rq49-j5jp-7mr4/GHSA-rq49-j5jp-7mr4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-rqw7-3533-cfwv/GHSA-rqw7-3533-cfwv.json b/advisories/unreviewed/2024/04/GHSA-rqw7-3533-cfwv/GHSA-rqw7-3533-cfwv.json index 3e5808aa2de..6fab43079e0 100644 --- a/advisories/unreviewed/2024/04/GHSA-rqw7-3533-cfwv/GHSA-rqw7-3533-cfwv.json +++ b/advisories/unreviewed/2024/04/GHSA-rqw7-3533-cfwv/GHSA-rqw7-3533-cfwv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-rr4m-8whr-q39q/GHSA-rr4m-8whr-q39q.json b/advisories/unreviewed/2024/04/GHSA-rr4m-8whr-q39q/GHSA-rr4m-8whr-q39q.json index 1b727f7171f..cc0f00ead1a 100644 --- a/advisories/unreviewed/2024/04/GHSA-rr4m-8whr-q39q/GHSA-rr4m-8whr-q39q.json +++ b/advisories/unreviewed/2024/04/GHSA-rr4m-8whr-q39q/GHSA-rr4m-8whr-q39q.json @@ -7,12 +7,8 @@ "CVE-2024-33339" ], "details": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/04/GHSA-rrx7-mfpg-89v6/GHSA-rrx7-mfpg-89v6.json b/advisories/unreviewed/2024/04/GHSA-rrx7-mfpg-89v6/GHSA-rrx7-mfpg-89v6.json index 791a7b1a4b8..8cd5e8ce5e4 100644 --- a/advisories/unreviewed/2024/04/GHSA-rrx7-mfpg-89v6/GHSA-rrx7-mfpg-89v6.json +++ b/advisories/unreviewed/2024/04/GHSA-rrx7-mfpg-89v6/GHSA-rrx7-mfpg-89v6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-v23m-2w4c-ghv7/GHSA-v23m-2w4c-ghv7.json b/advisories/unreviewed/2024/04/GHSA-v23m-2w4c-ghv7/GHSA-v23m-2w4c-ghv7.json index 26525f68f30..4a0241a6d24 100644 --- a/advisories/unreviewed/2024/04/GHSA-v23m-2w4c-ghv7/GHSA-v23m-2w4c-ghv7.json +++ b/advisories/unreviewed/2024/04/GHSA-v23m-2w4c-ghv7/GHSA-v23m-2w4c-ghv7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-v68j-ghq9-ffvc/GHSA-v68j-ghq9-ffvc.json b/advisories/unreviewed/2024/04/GHSA-v68j-ghq9-ffvc/GHSA-v68j-ghq9-ffvc.json index 6289f9d8bfd..e0e235059f4 100644 --- a/advisories/unreviewed/2024/04/GHSA-v68j-ghq9-ffvc/GHSA-v68j-ghq9-ffvc.json +++ b/advisories/unreviewed/2024/04/GHSA-v68j-ghq9-ffvc/GHSA-v68j-ghq9-ffvc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-v6w4-wqg7-225c/GHSA-v6w4-wqg7-225c.json b/advisories/unreviewed/2024/04/GHSA-v6w4-wqg7-225c/GHSA-v6w4-wqg7-225c.json index c3412974c85..2340f599f05 100644 --- a/advisories/unreviewed/2024/04/GHSA-v6w4-wqg7-225c/GHSA-v6w4-wqg7-225c.json +++ b/advisories/unreviewed/2024/04/GHSA-v6w4-wqg7-225c/GHSA-v6w4-wqg7-225c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-v85g-vq6j-4j44/GHSA-v85g-vq6j-4j44.json b/advisories/unreviewed/2024/04/GHSA-v85g-vq6j-4j44/GHSA-v85g-vq6j-4j44.json index b16627b5eb4..b3d640d690f 100644 --- a/advisories/unreviewed/2024/04/GHSA-v85g-vq6j-4j44/GHSA-v85g-vq6j-4j44.json +++ b/advisories/unreviewed/2024/04/GHSA-v85g-vq6j-4j44/GHSA-v85g-vq6j-4j44.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-vfj7-w3gq-g683/GHSA-vfj7-w3gq-g683.json b/advisories/unreviewed/2024/04/GHSA-vfj7-w3gq-g683/GHSA-vfj7-w3gq-g683.json index 64b4e22c881..0e8b8e627a8 100644 --- a/advisories/unreviewed/2024/04/GHSA-vfj7-w3gq-g683/GHSA-vfj7-w3gq-g683.json +++ b/advisories/unreviewed/2024/04/GHSA-vfj7-w3gq-g683/GHSA-vfj7-w3gq-g683.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-vvjc-x5q2-8qr6/GHSA-vvjc-x5q2-8qr6.json b/advisories/unreviewed/2024/04/GHSA-vvjc-x5q2-8qr6/GHSA-vvjc-x5q2-8qr6.json index 7a27233895c..f1845de8285 100644 --- a/advisories/unreviewed/2024/04/GHSA-vvjc-x5q2-8qr6/GHSA-vvjc-x5q2-8qr6.json +++ b/advisories/unreviewed/2024/04/GHSA-vvjc-x5q2-8qr6/GHSA-vvjc-x5q2-8qr6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-vw3m-pvf6-gxw8/GHSA-vw3m-pvf6-gxw8.json b/advisories/unreviewed/2024/04/GHSA-vw3m-pvf6-gxw8/GHSA-vw3m-pvf6-gxw8.json index ec47bb4b362..dff925dcf58 100644 --- a/advisories/unreviewed/2024/04/GHSA-vw3m-pvf6-gxw8/GHSA-vw3m-pvf6-gxw8.json +++ b/advisories/unreviewed/2024/04/GHSA-vw3m-pvf6-gxw8/GHSA-vw3m-pvf6-gxw8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-vwmw-q649-87fw/GHSA-vwmw-q649-87fw.json b/advisories/unreviewed/2024/04/GHSA-vwmw-q649-87fw/GHSA-vwmw-q649-87fw.json index d9d2d3821b3..40788409add 100644 --- a/advisories/unreviewed/2024/04/GHSA-vwmw-q649-87fw/GHSA-vwmw-q649-87fw.json +++ b/advisories/unreviewed/2024/04/GHSA-vwmw-q649-87fw/GHSA-vwmw-q649-87fw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-w6gm-jg83-rm6w/GHSA-w6gm-jg83-rm6w.json b/advisories/unreviewed/2024/04/GHSA-w6gm-jg83-rm6w/GHSA-w6gm-jg83-rm6w.json index d49dbbaa6e0..6233dd7165d 100644 --- a/advisories/unreviewed/2024/04/GHSA-w6gm-jg83-rm6w/GHSA-w6gm-jg83-rm6w.json +++ b/advisories/unreviewed/2024/04/GHSA-w6gm-jg83-rm6w/GHSA-w6gm-jg83-rm6w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-w9cw-hv7g-qxq8/GHSA-w9cw-hv7g-qxq8.json b/advisories/unreviewed/2024/04/GHSA-w9cw-hv7g-qxq8/GHSA-w9cw-hv7g-qxq8.json index 5607eef547d..e23e9c1b495 100644 --- a/advisories/unreviewed/2024/04/GHSA-w9cw-hv7g-qxq8/GHSA-w9cw-hv7g-qxq8.json +++ b/advisories/unreviewed/2024/04/GHSA-w9cw-hv7g-qxq8/GHSA-w9cw-hv7g-qxq8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-w9f6-3j24-j2wj/GHSA-w9f6-3j24-j2wj.json b/advisories/unreviewed/2024/04/GHSA-w9f6-3j24-j2wj/GHSA-w9f6-3j24-j2wj.json index 1b6996db606..03ffc290ef2 100644 --- a/advisories/unreviewed/2024/04/GHSA-w9f6-3j24-j2wj/GHSA-w9f6-3j24-j2wj.json +++ b/advisories/unreviewed/2024/04/GHSA-w9f6-3j24-j2wj/GHSA-w9f6-3j24-j2wj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-wpv3-6qr5-9rmx/GHSA-wpv3-6qr5-9rmx.json b/advisories/unreviewed/2024/04/GHSA-wpv3-6qr5-9rmx/GHSA-wpv3-6qr5-9rmx.json index 9b419e452f8..94a1f6c530d 100644 --- a/advisories/unreviewed/2024/04/GHSA-wpv3-6qr5-9rmx/GHSA-wpv3-6qr5-9rmx.json +++ b/advisories/unreviewed/2024/04/GHSA-wpv3-6qr5-9rmx/GHSA-wpv3-6qr5-9rmx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-x28v-j697-2r2c/GHSA-x28v-j697-2r2c.json b/advisories/unreviewed/2024/04/GHSA-x28v-j697-2r2c/GHSA-x28v-j697-2r2c.json index 5f28d8569da..3fd462edc00 100644 --- a/advisories/unreviewed/2024/04/GHSA-x28v-j697-2r2c/GHSA-x28v-j697-2r2c.json +++ b/advisories/unreviewed/2024/04/GHSA-x28v-j697-2r2c/GHSA-x28v-j697-2r2c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-x6x2-3r7p-w8cx/GHSA-x6x2-3r7p-w8cx.json b/advisories/unreviewed/2024/04/GHSA-x6x2-3r7p-w8cx/GHSA-x6x2-3r7p-w8cx.json index 9c3517ed665..259faa79f6b 100644 --- a/advisories/unreviewed/2024/04/GHSA-x6x2-3r7p-w8cx/GHSA-x6x2-3r7p-w8cx.json +++ b/advisories/unreviewed/2024/04/GHSA-x6x2-3r7p-w8cx/GHSA-x6x2-3r7p-w8cx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-x7gc-r4xg-v7c2/GHSA-x7gc-r4xg-v7c2.json b/advisories/unreviewed/2024/04/GHSA-x7gc-r4xg-v7c2/GHSA-x7gc-r4xg-v7c2.json index 21f85f6fd47..1de1145dae5 100644 --- a/advisories/unreviewed/2024/04/GHSA-x7gc-r4xg-v7c2/GHSA-x7gc-r4xg-v7c2.json +++ b/advisories/unreviewed/2024/04/GHSA-x7gc-r4xg-v7c2/GHSA-x7gc-r4xg-v7c2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-xh2c-m49q-f2gf/GHSA-xh2c-m49q-f2gf.json b/advisories/unreviewed/2024/04/GHSA-xh2c-m49q-f2gf/GHSA-xh2c-m49q-f2gf.json index fc1c9c212a9..52c1f156af3 100644 --- a/advisories/unreviewed/2024/04/GHSA-xh2c-m49q-f2gf/GHSA-xh2c-m49q-f2gf.json +++ b/advisories/unreviewed/2024/04/GHSA-xh2c-m49q-f2gf/GHSA-xh2c-m49q-f2gf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-xmgc-h398-rg8w/GHSA-xmgc-h398-rg8w.json b/advisories/unreviewed/2024/04/GHSA-xmgc-h398-rg8w/GHSA-xmgc-h398-rg8w.json index 17b7a965839..8fa66520dc7 100644 --- a/advisories/unreviewed/2024/04/GHSA-xmgc-h398-rg8w/GHSA-xmgc-h398-rg8w.json +++ b/advisories/unreviewed/2024/04/GHSA-xmgc-h398-rg8w/GHSA-xmgc-h398-rg8w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-53gm-jvjh-xr34/GHSA-53gm-jvjh-xr34.json b/advisories/unreviewed/2024/05/GHSA-53gm-jvjh-xr34/GHSA-53gm-jvjh-xr34.json index 00b0741faa7..ebfd92854f8 100644 --- a/advisories/unreviewed/2024/05/GHSA-53gm-jvjh-xr34/GHSA-53gm-jvjh-xr34.json +++ b/advisories/unreviewed/2024/05/GHSA-53gm-jvjh-xr34/GHSA-53gm-jvjh-xr34.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-6gwg-c5gq-mp9h/GHSA-6gwg-c5gq-mp9h.json b/advisories/unreviewed/2024/05/GHSA-6gwg-c5gq-mp9h/GHSA-6gwg-c5gq-mp9h.json index 699c8f3b141..556e079d097 100644 --- a/advisories/unreviewed/2024/05/GHSA-6gwg-c5gq-mp9h/GHSA-6gwg-c5gq-mp9h.json +++ b/advisories/unreviewed/2024/05/GHSA-6gwg-c5gq-mp9h/GHSA-6gwg-c5gq-mp9h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-mh44-x3cr-7p25/GHSA-mh44-x3cr-7p25.json b/advisories/unreviewed/2024/05/GHSA-mh44-x3cr-7p25/GHSA-mh44-x3cr-7p25.json index 3a1318b91ad..91d74cb9fe0 100644 --- a/advisories/unreviewed/2024/05/GHSA-mh44-x3cr-7p25/GHSA-mh44-x3cr-7p25.json +++ b/advisories/unreviewed/2024/05/GHSA-mh44-x3cr-7p25/GHSA-mh44-x3cr-7p25.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-vq2q-wrwm-2ggf/GHSA-vq2q-wrwm-2ggf.json b/advisories/unreviewed/2024/05/GHSA-vq2q-wrwm-2ggf/GHSA-vq2q-wrwm-2ggf.json index 160e0dc00fd..d9221c96c9d 100644 --- a/advisories/unreviewed/2024/05/GHSA-vq2q-wrwm-2ggf/GHSA-vq2q-wrwm-2ggf.json +++ b/advisories/unreviewed/2024/05/GHSA-vq2q-wrwm-2ggf/GHSA-vq2q-wrwm-2ggf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-4wf7-5pg3-w9j6/GHSA-4wf7-5pg3-w9j6.json b/advisories/unreviewed/2024/06/GHSA-4wf7-5pg3-w9j6/GHSA-4wf7-5pg3-w9j6.json index dc15dc92c92..3e21ef2e5e9 100644 --- a/advisories/unreviewed/2024/06/GHSA-4wf7-5pg3-w9j6/GHSA-4wf7-5pg3-w9j6.json +++ b/advisories/unreviewed/2024/06/GHSA-4wf7-5pg3-w9j6/GHSA-4wf7-5pg3-w9j6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/06/GHSA-j732-2x82-535h/GHSA-j732-2x82-535h.json b/advisories/unreviewed/2024/06/GHSA-j732-2x82-535h/GHSA-j732-2x82-535h.json index bde6bcde6f6..c928144ff48 100644 --- a/advisories/unreviewed/2024/06/GHSA-j732-2x82-535h/GHSA-j732-2x82-535h.json +++ b/advisories/unreviewed/2024/06/GHSA-j732-2x82-535h/GHSA-j732-2x82-535h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-6phm-74mw-7r5r/GHSA-6phm-74mw-7r5r.json b/advisories/unreviewed/2024/07/GHSA-6phm-74mw-7r5r/GHSA-6phm-74mw-7r5r.json index 9008a1b32af..af180375ed0 100644 --- a/advisories/unreviewed/2024/07/GHSA-6phm-74mw-7r5r/GHSA-6phm-74mw-7r5r.json +++ b/advisories/unreviewed/2024/07/GHSA-6phm-74mw-7r5r/GHSA-6phm-74mw-7r5r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-f59j-xqfp-p59g/GHSA-f59j-xqfp-p59g.json b/advisories/unreviewed/2024/07/GHSA-f59j-xqfp-p59g/GHSA-f59j-xqfp-p59g.json index 3a274020b16..5e62ca643ab 100644 --- a/advisories/unreviewed/2024/07/GHSA-f59j-xqfp-p59g/GHSA-f59j-xqfp-p59g.json +++ b/advisories/unreviewed/2024/07/GHSA-f59j-xqfp-p59g/GHSA-f59j-xqfp-p59g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-269x-4f35-gf3h/GHSA-269x-4f35-gf3h.json b/advisories/unreviewed/2024/08/GHSA-269x-4f35-gf3h/GHSA-269x-4f35-gf3h.json index 2f5ece6537c..94fde7bf213 100644 --- a/advisories/unreviewed/2024/08/GHSA-269x-4f35-gf3h/GHSA-269x-4f35-gf3h.json +++ b/advisories/unreviewed/2024/08/GHSA-269x-4f35-gf3h/GHSA-269x-4f35-gf3h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-37c4-pj3v-mf79/GHSA-37c4-pj3v-mf79.json b/advisories/unreviewed/2024/08/GHSA-37c4-pj3v-mf79/GHSA-37c4-pj3v-mf79.json index 7aa83fa2dee..22a9aa5f7fc 100644 --- a/advisories/unreviewed/2024/08/GHSA-37c4-pj3v-mf79/GHSA-37c4-pj3v-mf79.json +++ b/advisories/unreviewed/2024/08/GHSA-37c4-pj3v-mf79/GHSA-37c4-pj3v-mf79.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-42gg-98x6-j389/GHSA-42gg-98x6-j389.json b/advisories/unreviewed/2024/08/GHSA-42gg-98x6-j389/GHSA-42gg-98x6-j389.json index 87784cdec3a..b9c7cd6c75e 100644 --- a/advisories/unreviewed/2024/08/GHSA-42gg-98x6-j389/GHSA-42gg-98x6-j389.json +++ b/advisories/unreviewed/2024/08/GHSA-42gg-98x6-j389/GHSA-42gg-98x6-j389.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-4qph-c4vr-m25p/GHSA-4qph-c4vr-m25p.json b/advisories/unreviewed/2024/08/GHSA-4qph-c4vr-m25p/GHSA-4qph-c4vr-m25p.json index da81e60fc4b..db26813ce32 100644 --- a/advisories/unreviewed/2024/08/GHSA-4qph-c4vr-m25p/GHSA-4qph-c4vr-m25p.json +++ b/advisories/unreviewed/2024/08/GHSA-4qph-c4vr-m25p/GHSA-4qph-c4vr-m25p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-565f-cr27-p63x/GHSA-565f-cr27-p63x.json b/advisories/unreviewed/2024/08/GHSA-565f-cr27-p63x/GHSA-565f-cr27-p63x.json index 1c567ab923d..1382f8da706 100644 --- a/advisories/unreviewed/2024/08/GHSA-565f-cr27-p63x/GHSA-565f-cr27-p63x.json +++ b/advisories/unreviewed/2024/08/GHSA-565f-cr27-p63x/GHSA-565f-cr27-p63x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-5752-wxxv-m9xh/GHSA-5752-wxxv-m9xh.json b/advisories/unreviewed/2024/08/GHSA-5752-wxxv-m9xh/GHSA-5752-wxxv-m9xh.json index 0cbd4851d60..182ef1587da 100644 --- a/advisories/unreviewed/2024/08/GHSA-5752-wxxv-m9xh/GHSA-5752-wxxv-m9xh.json +++ b/advisories/unreviewed/2024/08/GHSA-5752-wxxv-m9xh/GHSA-5752-wxxv-m9xh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-58q5-g3vc-4rgh/GHSA-58q5-g3vc-4rgh.json b/advisories/unreviewed/2024/08/GHSA-58q5-g3vc-4rgh/GHSA-58q5-g3vc-4rgh.json index ae5afd8f849..19dbd909100 100644 --- a/advisories/unreviewed/2024/08/GHSA-58q5-g3vc-4rgh/GHSA-58q5-g3vc-4rgh.json +++ b/advisories/unreviewed/2024/08/GHSA-58q5-g3vc-4rgh/GHSA-58q5-g3vc-4rgh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-5ffp-85mp-h2q2/GHSA-5ffp-85mp-h2q2.json b/advisories/unreviewed/2024/08/GHSA-5ffp-85mp-h2q2/GHSA-5ffp-85mp-h2q2.json index a4956f8b065..95719e54e9a 100644 --- a/advisories/unreviewed/2024/08/GHSA-5ffp-85mp-h2q2/GHSA-5ffp-85mp-h2q2.json +++ b/advisories/unreviewed/2024/08/GHSA-5ffp-85mp-h2q2/GHSA-5ffp-85mp-h2q2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-63vm-hcp4-j9j3/GHSA-63vm-hcp4-j9j3.json b/advisories/unreviewed/2024/08/GHSA-63vm-hcp4-j9j3/GHSA-63vm-hcp4-j9j3.json index bbac96d2f8c..19c75977f89 100644 --- a/advisories/unreviewed/2024/08/GHSA-63vm-hcp4-j9j3/GHSA-63vm-hcp4-j9j3.json +++ b/advisories/unreviewed/2024/08/GHSA-63vm-hcp4-j9j3/GHSA-63vm-hcp4-j9j3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-8v6h-j8r8-9mjq/GHSA-8v6h-j8r8-9mjq.json b/advisories/unreviewed/2024/08/GHSA-8v6h-j8r8-9mjq/GHSA-8v6h-j8r8-9mjq.json index f2502ef06bc..a9789051ef3 100644 --- a/advisories/unreviewed/2024/08/GHSA-8v6h-j8r8-9mjq/GHSA-8v6h-j8r8-9mjq.json +++ b/advisories/unreviewed/2024/08/GHSA-8v6h-j8r8-9mjq/GHSA-8v6h-j8r8-9mjq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-92cr-jqq3-99x4/GHSA-92cr-jqq3-99x4.json b/advisories/unreviewed/2024/08/GHSA-92cr-jqq3-99x4/GHSA-92cr-jqq3-99x4.json index 1ef9a7397be..1140cda226c 100644 --- a/advisories/unreviewed/2024/08/GHSA-92cr-jqq3-99x4/GHSA-92cr-jqq3-99x4.json +++ b/advisories/unreviewed/2024/08/GHSA-92cr-jqq3-99x4/GHSA-92cr-jqq3-99x4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-95mr-34pq-hc3c/GHSA-95mr-34pq-hc3c.json b/advisories/unreviewed/2024/08/GHSA-95mr-34pq-hc3c/GHSA-95mr-34pq-hc3c.json index 652731fa401..d105d0fa47a 100644 --- a/advisories/unreviewed/2024/08/GHSA-95mr-34pq-hc3c/GHSA-95mr-34pq-hc3c.json +++ b/advisories/unreviewed/2024/08/GHSA-95mr-34pq-hc3c/GHSA-95mr-34pq-hc3c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-9p66-4vgq-5fjx/GHSA-9p66-4vgq-5fjx.json b/advisories/unreviewed/2024/08/GHSA-9p66-4vgq-5fjx/GHSA-9p66-4vgq-5fjx.json index 8229b30aca1..dbe12892c4f 100644 --- a/advisories/unreviewed/2024/08/GHSA-9p66-4vgq-5fjx/GHSA-9p66-4vgq-5fjx.json +++ b/advisories/unreviewed/2024/08/GHSA-9p66-4vgq-5fjx/GHSA-9p66-4vgq-5fjx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-9wpw-58rw-f8gm/GHSA-9wpw-58rw-f8gm.json b/advisories/unreviewed/2024/08/GHSA-9wpw-58rw-f8gm/GHSA-9wpw-58rw-f8gm.json index 3ad9e068748..af04305824b 100644 --- a/advisories/unreviewed/2024/08/GHSA-9wpw-58rw-f8gm/GHSA-9wpw-58rw-f8gm.json +++ b/advisories/unreviewed/2024/08/GHSA-9wpw-58rw-f8gm/GHSA-9wpw-58rw-f8gm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-c7v6-r97x-ppjq/GHSA-c7v6-r97x-ppjq.json b/advisories/unreviewed/2024/08/GHSA-c7v6-r97x-ppjq/GHSA-c7v6-r97x-ppjq.json index 63e8d41c1cd..3c0ba70b201 100644 --- a/advisories/unreviewed/2024/08/GHSA-c7v6-r97x-ppjq/GHSA-c7v6-r97x-ppjq.json +++ b/advisories/unreviewed/2024/08/GHSA-c7v6-r97x-ppjq/GHSA-c7v6-r97x-ppjq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-f3px-8f8h-rcxh/GHSA-f3px-8f8h-rcxh.json b/advisories/unreviewed/2024/08/GHSA-f3px-8f8h-rcxh/GHSA-f3px-8f8h-rcxh.json index 999cebca3de..86c7aa62f99 100644 --- a/advisories/unreviewed/2024/08/GHSA-f3px-8f8h-rcxh/GHSA-f3px-8f8h-rcxh.json +++ b/advisories/unreviewed/2024/08/GHSA-f3px-8f8h-rcxh/GHSA-f3px-8f8h-rcxh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-f5h7-3v7h-xww3/GHSA-f5h7-3v7h-xww3.json b/advisories/unreviewed/2024/08/GHSA-f5h7-3v7h-xww3/GHSA-f5h7-3v7h-xww3.json index a737b732e82..8f927550466 100644 --- a/advisories/unreviewed/2024/08/GHSA-f5h7-3v7h-xww3/GHSA-f5h7-3v7h-xww3.json +++ b/advisories/unreviewed/2024/08/GHSA-f5h7-3v7h-xww3/GHSA-f5h7-3v7h-xww3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-f8mh-6mf7-mh58/GHSA-f8mh-6mf7-mh58.json b/advisories/unreviewed/2024/08/GHSA-f8mh-6mf7-mh58/GHSA-f8mh-6mf7-mh58.json index 717255a3bbc..ffa030bcc0c 100644 --- a/advisories/unreviewed/2024/08/GHSA-f8mh-6mf7-mh58/GHSA-f8mh-6mf7-mh58.json +++ b/advisories/unreviewed/2024/08/GHSA-f8mh-6mf7-mh58/GHSA-f8mh-6mf7-mh58.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-g877-jjjq-5fjc/GHSA-g877-jjjq-5fjc.json b/advisories/unreviewed/2024/08/GHSA-g877-jjjq-5fjc/GHSA-g877-jjjq-5fjc.json index 1319fa33a1e..aeec148f28c 100644 --- a/advisories/unreviewed/2024/08/GHSA-g877-jjjq-5fjc/GHSA-g877-jjjq-5fjc.json +++ b/advisories/unreviewed/2024/08/GHSA-g877-jjjq-5fjc/GHSA-g877-jjjq-5fjc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-gc88-hrfw-f9hq/GHSA-gc88-hrfw-f9hq.json b/advisories/unreviewed/2024/08/GHSA-gc88-hrfw-f9hq/GHSA-gc88-hrfw-f9hq.json index d7bf6b9243d..56416be9a0e 100644 --- a/advisories/unreviewed/2024/08/GHSA-gc88-hrfw-f9hq/GHSA-gc88-hrfw-f9hq.json +++ b/advisories/unreviewed/2024/08/GHSA-gc88-hrfw-f9hq/GHSA-gc88-hrfw-f9hq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -55,9 +53,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-hg5m-x49p-g9h8/GHSA-hg5m-x49p-g9h8.json b/advisories/unreviewed/2024/08/GHSA-hg5m-x49p-g9h8/GHSA-hg5m-x49p-g9h8.json index 594236c8155..f74bc5445e0 100644 --- a/advisories/unreviewed/2024/08/GHSA-hg5m-x49p-g9h8/GHSA-hg5m-x49p-g9h8.json +++ b/advisories/unreviewed/2024/08/GHSA-hg5m-x49p-g9h8/GHSA-hg5m-x49p-g9h8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-hpf9-cfgc-pw67/GHSA-hpf9-cfgc-pw67.json b/advisories/unreviewed/2024/08/GHSA-hpf9-cfgc-pw67/GHSA-hpf9-cfgc-pw67.json index f008211e83b..cd090e14f14 100644 --- a/advisories/unreviewed/2024/08/GHSA-hpf9-cfgc-pw67/GHSA-hpf9-cfgc-pw67.json +++ b/advisories/unreviewed/2024/08/GHSA-hpf9-cfgc-pw67/GHSA-hpf9-cfgc-pw67.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-hx96-9f4r-rwcp/GHSA-hx96-9f4r-rwcp.json b/advisories/unreviewed/2024/08/GHSA-hx96-9f4r-rwcp/GHSA-hx96-9f4r-rwcp.json index fd85d40b13e..70286a754e1 100644 --- a/advisories/unreviewed/2024/08/GHSA-hx96-9f4r-rwcp/GHSA-hx96-9f4r-rwcp.json +++ b/advisories/unreviewed/2024/08/GHSA-hx96-9f4r-rwcp/GHSA-hx96-9f4r-rwcp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-mgj9-j8fg-4qpr/GHSA-mgj9-j8fg-4qpr.json b/advisories/unreviewed/2024/08/GHSA-mgj9-j8fg-4qpr/GHSA-mgj9-j8fg-4qpr.json index 12e45ba8b35..b03b1a1b89e 100644 --- a/advisories/unreviewed/2024/08/GHSA-mgj9-j8fg-4qpr/GHSA-mgj9-j8fg-4qpr.json +++ b/advisories/unreviewed/2024/08/GHSA-mgj9-j8fg-4qpr/GHSA-mgj9-j8fg-4qpr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-p6r2-36r4-m6vj/GHSA-p6r2-36r4-m6vj.json b/advisories/unreviewed/2024/08/GHSA-p6r2-36r4-m6vj/GHSA-p6r2-36r4-m6vj.json index 97a5a7efec0..84354c1a8fb 100644 --- a/advisories/unreviewed/2024/08/GHSA-p6r2-36r4-m6vj/GHSA-p6r2-36r4-m6vj.json +++ b/advisories/unreviewed/2024/08/GHSA-p6r2-36r4-m6vj/GHSA-p6r2-36r4-m6vj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-p736-fp6q-qr5j/GHSA-p736-fp6q-qr5j.json b/advisories/unreviewed/2024/08/GHSA-p736-fp6q-qr5j/GHSA-p736-fp6q-qr5j.json index 0545b284ea7..78dff6dcfbc 100644 --- a/advisories/unreviewed/2024/08/GHSA-p736-fp6q-qr5j/GHSA-p736-fp6q-qr5j.json +++ b/advisories/unreviewed/2024/08/GHSA-p736-fp6q-qr5j/GHSA-p736-fp6q-qr5j.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:X/V:X/RE:L/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-r9hx-cmxm-cg5j/GHSA-r9hx-cmxm-cg5j.json b/advisories/unreviewed/2024/08/GHSA-r9hx-cmxm-cg5j/GHSA-r9hx-cmxm-cg5j.json index 6ffa372dc04..6dab9f67cfd 100644 --- a/advisories/unreviewed/2024/08/GHSA-r9hx-cmxm-cg5j/GHSA-r9hx-cmxm-cg5j.json +++ b/advisories/unreviewed/2024/08/GHSA-r9hx-cmxm-cg5j/GHSA-r9hx-cmxm-cg5j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-v4c3-qgm8-jh35/GHSA-v4c3-qgm8-jh35.json b/advisories/unreviewed/2024/08/GHSA-v4c3-qgm8-jh35/GHSA-v4c3-qgm8-jh35.json index 08121285c80..3971d3928a8 100644 --- a/advisories/unreviewed/2024/08/GHSA-v4c3-qgm8-jh35/GHSA-v4c3-qgm8-jh35.json +++ b/advisories/unreviewed/2024/08/GHSA-v4c3-qgm8-jh35/GHSA-v4c3-qgm8-jh35.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-v5c2-f543-4vhm/GHSA-v5c2-f543-4vhm.json b/advisories/unreviewed/2024/08/GHSA-v5c2-f543-4vhm/GHSA-v5c2-f543-4vhm.json index 6252027d621..6b9b0c29ec3 100644 --- a/advisories/unreviewed/2024/08/GHSA-v5c2-f543-4vhm/GHSA-v5c2-f543-4vhm.json +++ b/advisories/unreviewed/2024/08/GHSA-v5c2-f543-4vhm/GHSA-v5c2-f543-4vhm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-vpr7-cgq2-g5rr/GHSA-vpr7-cgq2-g5rr.json b/advisories/unreviewed/2024/08/GHSA-vpr7-cgq2-g5rr/GHSA-vpr7-cgq2-g5rr.json index c01a3102a3d..591e80d0efd 100644 --- a/advisories/unreviewed/2024/08/GHSA-vpr7-cgq2-g5rr/GHSA-vpr7-cgq2-g5rr.json +++ b/advisories/unreviewed/2024/08/GHSA-vpr7-cgq2-g5rr/GHSA-vpr7-cgq2-g5rr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-xmjj-hrw9-x35m/GHSA-xmjj-hrw9-x35m.json b/advisories/unreviewed/2024/08/GHSA-xmjj-hrw9-x35m/GHSA-xmjj-hrw9-x35m.json index f69dc6353db..a0e44e1b5aa 100644 --- a/advisories/unreviewed/2024/08/GHSA-xmjj-hrw9-x35m/GHSA-xmjj-hrw9-x35m.json +++ b/advisories/unreviewed/2024/08/GHSA-xmjj-hrw9-x35m/GHSA-xmjj-hrw9-x35m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY",