netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-6wx3-3pp4-7q95
GHSA-259r-2fr5-87c3
GHSA-39v4-4m6h-c4rm
GHSA-5p29-m8h2-83cg
GHSA-6v6c-gc45-x65c
GHSA-8w8f-p52c-f5w7
GHSA-99gp-p4g8-wrh7
GHSA-99pm-h8wp-8xpw
GHSA-cc59-mwcm-hxv4
GHSA-f6q6-67qx-rv6q
GHSA-f86q-9xmw-hpfx
GHSA-fhgv-ff6m-33hx
GHSA-frf6-468r-3v33
GHSA-gfhx-2xqr-982p
GHSA-p93q-jr7q-q29w
GHSA-pp7c-w62w-w9jq
GHSA-qxg7-vqqh-9gpf
GHSA-rprw-7v7r-h7jp
GHSA-vjvp-pp6v-gjcf
GHSA-w9h2-c9f6-73r6
GHSA-wcmq-fchf-hwch
GHSA-wgvv-23v4-wwj5
GHSA-wj6j-6g37-7vch
GHSA-wvp5-cmpq-4c47
This commit is contained in:
advisory-database[bot]
2024-02-12 15:31:45 +00:00
parent ac70434eac
commit 29cbeace5d
24 changed files with 228 additions and 85 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/05/GHSA-6wx3-3pp4-7q95/GHSA-6wx3-3pp4-7q95.json
+5 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6wx3-3pp4-7q95",
"modified": "2022-05-24T17:34:48Z",
"modified": "2024-02-12T15:30:22Z",
"published": "2022-05-24T17:34:48Z",
"aliases": [
"CVE-2019-2392"
],
"details": "A user authorized to perform database queries may trigger denial of service by issuing specially crafted queries, which use the $mod operator to overflow negative values. This issue affects: MongoDB Inc. MongoDB Server v4.4 versions prior to 4.4.1; v4.2 versions prior to 4.2.9; v4.0 versions prior to 4.0.20; v3.6 versions prior to 3.6.20.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
advisories/unreviewed/2024/02/GHSA-259r-2fr5-87c3/GHSA-259r-2fr5-87c3.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-259r-2fr5-87c3",
"modified": "2024-02-08T21:30:38Z",
"modified": "2024-02-12T15:30:22Z",
"published": "2024-02-08T21:30:38Z",
"aliases": [
"CVE-2024-24496"
],
"details": "An issue in Daily Habit Tracker v.1.0 allows a remote attacker to manipulate trackers via the home.php, add-tracker.php, delete-tracker.php, update-tracker.php components.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-287"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-08T21:15:08Z"
advisories/unreviewed/2024/02/GHSA-39v4-4m6h-c4rm/GHSA-39v4-4m6h-c4rm.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-39v4-4m6h-c4rm",
"modified": "2024-02-09T15:31:26Z",
"modified": "2024-02-12T15:30:23Z",
"published": "2024-02-09T15:31:26Z",
"aliases": [
"CVE-2024-25309"
],
"details": "Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'pass' parameter at School/teacher_login.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-09T13:15:42Z"
advisories/unreviewed/2024/02/GHSA-5p29-m8h2-83cg/GHSA-5p29-m8h2-83cg.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5p29-m8h2-83cg",
"modified": "2024-02-08T21:30:38Z",
"modified": "2024-02-12T15:30:22Z",
"published": "2024-02-08T21:30:38Z",
"aliases": [
"CVE-2024-24495"
],
"details": "SQL Injection vulnerability in delete-tracker.php in Daily Habit Tracker v.1.0 allows a remote attacker to execute arbitrary code via crafted GET request.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-08T21:15:08Z"
advisories/unreviewed/2024/02/GHSA-6v6c-gc45-x65c/GHSA-6v6c-gc45-x65c.json
+46
View File
@@ -0,0 +1,46 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6v6c-gc45-x65c",
"modified": "2024-02-12T15:30:23Z",
"published": "2024-02-12T15:30:23Z",
"aliases": [
"CVE-2024-1062"
],
"details": "A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in log_entry_attr.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1062"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2024-1062"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2256711"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2261879"
}
],
"database_specific": {
"cwe_ids": [
"CWE-122"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-12T13:15:09Z"
}
}
advisories/unreviewed/2024/02/GHSA-8w8f-p52c-f5w7/GHSA-8w8f-p52c-f5w7.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8w8f-p52c-f5w7",
"modified": "2024-02-09T15:31:26Z",
"modified": "2024-02-12T15:30:23Z",
"published": "2024-02-09T15:31:26Z",
"aliases": [
"CVE-2024-25307"
],
"details": "Code-projects Cinema Seat Reservation System 1.0 allows SQL Injection via the 'id' parameter at \"/Cinema-Reservation/booking.php?id=1.\"",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-09T14:15:08Z"
advisories/unreviewed/2024/02/GHSA-99gp-p4g8-wrh7/GHSA-99gp-p4g8-wrh7.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-99gp-p4g8-wrh7",
"modified": "2024-02-08T21:30:38Z",
"modified": "2024-02-12T15:30:23Z",
"published": "2024-02-08T21:30:38Z",
"aliases": [
"CVE-2024-24497"
],
"details": "SQL Injection vulnerability in Employee Management System v.1.0 allows a remote attacker to execute arbitrary SQL commands via the txtusername and txtpassword parameters in the login.php components.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-08T21:15:08Z"
advisories/unreviewed/2024/02/GHSA-99pm-h8wp-8xpw/GHSA-99pm-h8wp-8xpw.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-99pm-h8wp-8xpw",
"modified": "2024-02-09T15:31:26Z",
"modified": "2024-02-12T15:30:23Z",
"published": "2024-02-09T15:31:26Z",
"aliases": [
"CVE-2024-25310"
],
"details": "Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at \"School/delete.php?id=5.\"",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-09T14:15:08Z"
advisories/unreviewed/2024/02/GHSA-cc59-mwcm-hxv4/GHSA-cc59-mwcm-hxv4.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cc59-mwcm-hxv4",
"modified": "2024-02-09T15:31:26Z",
"modified": "2024-02-12T15:30:23Z",
"published": "2024-02-09T15:31:26Z",
"aliases": [
"CVE-2024-25315"
],
"details": "Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'rid' parameter in Hotel/admin/roombook.php?rid=2.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-09T14:15:08Z"
advisories/unreviewed/2024/02/GHSA-f6q6-67qx-rv6q/GHSA-f6q6-67qx-rv6q.json
+31
View File
@@ -0,0 +1,31 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f6q6-67qx-rv6q",
"modified": "2024-02-12T15:30:23Z",
"published": "2024-02-12T15:30:23Z",
"aliases": [
"CVE-2024-1420"
],
"details": "Rejected reason: **REJECT** This is a duplicate of CVE-2024-1049. Please use CVE-2024-1049 instead.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1420"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-12T15:15:07Z"
}
}
advisories/unreviewed/2024/02/GHSA-f86q-9xmw-hpfx/GHSA-f86q-9xmw-hpfx.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f86q-9xmw-hpfx",
"modified": "2024-02-08T21:30:38Z",
"modified": "2024-02-12T15:30:23Z",
"published": "2024-02-08T21:30:38Z",
"aliases": [
"CVE-2024-24498"
],
"details": "Unrestricted File Upload vulnerability in Employee Management System 1.0 allows a remote attacker to execute arbitrary code via the edit-photo.php component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-434"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-08T21:15:08Z"
advisories/unreviewed/2024/02/GHSA-fhgv-ff6m-33hx/GHSA-fhgv-ff6m-33hx.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fhgv-ff6m-33hx",
"modified": "2024-02-09T15:31:26Z",
"modified": "2024-02-12T15:30:23Z",
"published": "2024-02-09T15:31:26Z",
"aliases": [
"CVE-2024-25302"
],
"details": "Sourcecodester Event Student Attendance System 1.0, allows SQL Injection via the 'student' parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-09T14:15:08Z"
advisories/unreviewed/2024/02/GHSA-frf6-468r-3v33/GHSA-frf6-468r-3v33.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-frf6-468r-3v33",
"modified": "2024-02-09T15:31:26Z",
"modified": "2024-02-12T15:30:23Z",
"published": "2024-02-09T15:31:26Z",
"aliases": [
"CVE-2024-25312"
],
"details": "Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'id' parameter at \"School/sub_delete.php?id=5.\"",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-09T13:15:42Z"
advisories/unreviewed/2024/02/GHSA-gfhx-2xqr-982p/GHSA-gfhx-2xqr-982p.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gfhx-2xqr-982p",
"modified": "2024-02-07T15:30:48Z",
"modified": "2024-02-12T15:30:22Z",
"published": "2024-02-07T15:30:48Z",
"aliases": [
"CVE-2024-24131"
],
"details": "SuperWebMailer v9.31.0.01799 was discovered to contain a reflected cross-site scripting (XSS) vulenrability via the component api.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-07T14:15:52Z"
advisories/unreviewed/2024/02/GHSA-p93q-jr7q-q29w/GHSA-p93q-jr7q-q29w.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p93q-jr7q-q29w",
"modified": "2024-02-09T15:31:26Z",
"modified": "2024-02-12T15:30:23Z",
"published": "2024-02-09T15:31:26Z",
"aliases": [
"CVE-2024-25314"
],
"details": "Code-projects Hotel Managment System 1.0, allows SQL Injection via the 'sid' parameter in Hotel/admin/show.php?sid=2.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-09T14:15:08Z"
advisories/unreviewed/2024/02/GHSA-pp7c-w62w-w9jq/GHSA-pp7c-w62w-w9jq.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pp7c-w62w-w9jq",
"modified": "2024-02-09T15:31:25Z",
"modified": "2024-02-12T15:30:23Z",
"published": "2024-02-09T15:31:25Z",
"aliases": [
"CVE-2024-25305"
],
"details": "Code-projects Simple School Managment System 1.0 allows Authentication Bypass via the username and password parameters at School/index.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-09T13:15:41Z"
advisories/unreviewed/2024/02/GHSA-qxg7-vqqh-9gpf/GHSA-qxg7-vqqh-9gpf.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qxg7-vqqh-9gpf",
"modified": "2024-02-09T15:31:25Z",
"modified": "2024-02-12T15:30:23Z",
"published": "2024-02-09T15:31:25Z",
"aliases": [
"CVE-2024-25306"
],
"details": "Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'aname' parameter at \"School/index.php\".",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-09T13:15:42Z"
advisories/unreviewed/2024/02/GHSA-rprw-7v7r-h7jp/GHSA-rprw-7v7r-h7jp.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rprw-7v7r-h7jp",
"modified": "2024-02-09T09:31:31Z",
"modified": "2024-02-12T15:30:23Z",
"published": "2024-02-09T09:31:31Z",
"aliases": [
"CVE-2024-25675"
],
"details": "An issue was discovered in MISP before 2.4.184. A client does not need to use POST to start an export generation process. This is related to app/Controller/JobsController.php and app/View/Events/export.ctp.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-09T09:15:08Z"
advisories/unreviewed/2024/02/GHSA-vjvp-pp6v-gjcf/GHSA-vjvp-pp6v-gjcf.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vjvp-pp6v-gjcf",
"modified": "2024-02-09T15:31:25Z",
"modified": "2024-02-12T15:30:23Z",
"published": "2024-02-09T15:31:25Z",
"aliases": [
"CVE-2024-25304"
],
"details": "Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'apass' parameter at \"School/index.php.\"",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-09T13:15:41Z"
advisories/unreviewed/2024/02/GHSA-w9h2-c9f6-73r6/GHSA-w9h2-c9f6-73r6.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w9h2-c9f6-73r6",
"modified": "2024-02-09T15:31:25Z",
"modified": "2024-02-12T15:30:23Z",
"published": "2024-02-09T15:31:25Z",
"aliases": [
"CVE-2024-25308"
],
"details": "Code-projects Simple School Managment System 1.0 allows SQL Injection via the 'name' parameter at School/teacher_login.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-09T13:15:42Z"

Some files were not shown because too many files have changed in this diff Show More