netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-3mq7-j5f9-79xq
GHSA-7qfp-8qgp-4xc8
GHSA-chvg-xhgp-pg84
GHSA-fpcv-v65p-wv5w
GHSA-rx58-wmcf-8vpm
GHSA-w4xx-6m5j-27fx
This commit is contained in:
advisory-database[bot]
2024-03-25 21:32:29 +00:00
parent bb7251f339
commit 2e7d6f8e2e
6 changed files with 219 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/03/GHSA-3mq7-j5f9-79xq/GHSA-3mq7-j5f9-79xq.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3mq7-j5f9-79xq",
"modified": "2024-03-25T21:31:08Z",
"published": "2024-03-25T21:31:08Z",
"aliases": [
"CVE-2024-2425"
],
"details": "\nA denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in the device. If exploited, the web server will crash and need a manual restart to recover it.\n\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2425"
},
{
"type": "WEB",
"url": "https://https://www.rockwellautomation.com/en-us/support/advisory.SD1664.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-25T21:15:47Z"
}
}
advisories/unreviewed/2024/03/GHSA-7qfp-8qgp-4xc8/GHSA-7qfp-8qgp-4xc8.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7qfp-8qgp-4xc8",
"modified": "2024-03-25T21:31:08Z",
"published": "2024-03-25T21:31:08Z",
"aliases": [
"CVE-2024-2427"
],
"details": "\nA denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper traffic throttling in the device. If multiple data packets are sent to the device repeatedly the device will crash and require a manual restart to recover.\n\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2427"
},
{
"type": "WEB",
"url": "https://www.rockwellautomation.com/en-us/support/advisory.SD1664.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-25T21:15:47Z"
}
}
advisories/unreviewed/2024/03/GHSA-chvg-xhgp-pg84/GHSA-chvg-xhgp-pg84.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-chvg-xhgp-pg84",
"modified": "2024-03-25T21:31:08Z",
"published": "2024-03-25T21:31:08Z",
"aliases": [
"CVE-2024-29440"
],
"details": "An unauthorized access vulnerability has been discovered in ROS2 Humble Hawksbill versions where ROS_VERSION is 2 and ROS_PYTHON_VERSION is 3. This vulnerability could potentially allow a malicious user to gain unauthorized access to multiple ROS2 nodes remotely. Unauthorized access to these nodes could result in compromised system integrity, the execution of arbitrary commands, and disclosure of sensitive information.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29440"
},
{
"type": "WEB",
"url": "https://github.com/yashpatelphd/CVE-2024-29440"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-25T21:15:47Z"
}
}
advisories/unreviewed/2024/03/GHSA-fpcv-v65p-wv5w/GHSA-fpcv-v65p-wv5w.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fpcv-v65p-wv5w",
"modified": "2024-03-25T21:31:08Z",
"published": "2024-03-25T21:31:08Z",
"aliases": [
"CVE-2024-29666"
],
"details": "Insecure Permissions vulnerability in Vehicle Monitoring platform system CMSV6 v.7.31.0.2 through v.7.32.0.3 allows a remote attacker to escalate privileges via the default password component.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29666"
},
{
"type": "WEB",
"url": "https://github.com/whgojp/cve-reports/wiki/There-is-a-weak-password-in-the-CMSV6-vehicle-monitoring-platform-system"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-25T19:15:59Z"
}
}
advisories/unreviewed/2024/03/GHSA-rx58-wmcf-8vpm/GHSA-rx58-wmcf-8vpm.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rx58-wmcf-8vpm",
"modified": "2024-03-25T21:31:08Z",
"published": "2024-03-25T21:31:08Z",
"aliases": [
"CVE-2024-2426"
],
"details": "\nA denial-of-service vulnerability exists in the Rockwell Automation PowerFlex® 527 due to improper input validation in the device. If exploited, a disruption in the CIP communication will occur and a manual restart will be required by the user to recover it.\n\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2426"
},
{
"type": "WEB",
"url": "https://www.rockwellautomation.com/en-us/support/advisory.SD1664.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-25T21:15:47Z"
}
}
advisories/unreviewed/2024/03/GHSA-w4xx-6m5j-27fx/GHSA-w4xx-6m5j-27fx.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w4xx-6m5j-27fx",
"modified": "2024-03-25T21:31:08Z",
"published": "2024-03-25T21:31:08Z",
"aliases": [
"CVE-2024-29515"
],
"details": "File Upload vulnerability in lepton v.7.1.0 allows a remote authenticated attackers to execute arbitrary code via uploading a crafted PHP file to the save.php and config.php component.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-29515"
},
{
"type": "WEB",
"url": "https://github.com/zzq66/cve7"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-25T19:15:59Z"
}
}