netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-24cr-56gf-fx38
GHSA-63hm-fq62-wc3p
GHSA-mw2v-p95m-2vqg
GHSA-p492-c975-6xjf
GHSA-rx57-ww84-jwhw
GHSA-vc79-65pr-q82v
GHSA-vg2g-72mx-mj33
This commit is contained in:
advisory-database[bot]
2023-07-15 00:31:49 +00:00
parent 83891cd1b1
commit 2a16e9e1fb
7 changed files with 151 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/07/GHSA-24cr-56gf-fx38/GHSA-24cr-56gf-fx38.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/07/GHSA-63hm-fq62-wc3p/GHSA-63hm-fq62-wc3p.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-362"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/07/GHSA-mw2v-p95m-2vqg/GHSA-mw2v-p95m-2vqg.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mw2v-p95m-2vqg",
"modified": "2023-07-15T00:30:34Z",
"published": "2023-07-15T00:30:34Z",
"aliases": [
"CVE-2023-37794"
],
"details": "WAYOS FBM-291W 19.09.11V was discovered to contain a command injection vulnerability via the component /upgrade_filter.asp.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37794"
},
{
"type": "WEB",
"url": "https://github.com/PwnYouLin/IOT_vul/tree/main/wayos/1"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/07/GHSA-p492-c975-6xjf/GHSA-p492-c975-6xjf.json
+5 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p492-c975-6xjf",
"modified": "2023-07-10T18:30:48Z",
"modified": "2023-07-15T00:30:32Z",
"published": "2023-07-10T18:30:48Z",
"aliases": [
"CVE-2023-2967"
],
"details": "The TinyMCE Custom Styles WordPress plugin before 1.1.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
advisories/unreviewed/2023/07/GHSA-rx57-ww84-jwhw/GHSA-rx57-ww84-jwhw.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rx57-ww84-jwhw",
"modified": "2023-07-15T00:30:34Z",
"published": "2023-07-15T00:30:34Z",
"aliases": [
"CVE-2023-37793"
],
"details": "WAYOS FBM-291W 19.09.11V was discovered to contain a buffer overflow via the component /upgrade_filter.asp.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37793"
},
{
"type": "WEB",
"url": "https://github.com/PwnYouLin/IOT_vul/blob/main/wayos/2/readme.md"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/07/GHSA-vc79-65pr-q82v/GHSA-vc79-65pr-q82v.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vc79-65pr-q82v",
"modified": "2023-07-15T00:30:34Z",
"published": "2023-07-15T00:30:34Z",
"aliases": [
"CVE-2023-38337"
],
"details": "rswag before 2.10.1 allows remote attackers to read arbitrary JSON and YAML files via directory traversal, because rswag-api can expose a file that is not the OpenAPI (or Swagger) specification file of a project.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38337"
},
{
"type": "WEB",
"url": "https://github.com/rswag/rswag/issues/653"
},
{
"type": "WEB",
"url": "https://github.com/rswag/rswag/compare/2.9.0...2.10.1"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/07/GHSA-vg2g-72mx-mj33/GHSA-vg2g-72mx-mj33.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vg2g-72mx-mj33",
"modified": "2023-07-15T00:30:34Z",
"published": "2023-07-15T00:30:34Z",
"aliases": [
"CVE-2023-38336"
],
"details": "netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38336"
},
{
"type": "WEB",
"url": "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1039689"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}