netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-11-26 15:32:46 +00:00
parent e6464a5e9e
commit 3096417759
43 changed files with 1381 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/02/GHSA-h9xw-259p-x86h/GHSA-h9xw-259p-x86h.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h9xw-259p-x86h",
"modified": "2024-02-16T21:31:31Z",
"modified": "2024-11-26T15:30:59Z",
"published": "2024-02-16T21:31:31Z",
"aliases": [
"CVE-2024-0019"
],
"details": "In setListening of AppOpsControllerImpl.java, there is a possible way to hide the microphone privacy indicator when restarting systemUI due to a missing check for active recordings. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-16T20:15:47Z"
advisories/unreviewed/2024/03/GHSA-p559-89wh-h48w/GHSA-p559-89wh-h48w.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p559-89wh-h48w",
"modified": "2024-03-11T18:31:08Z",
"modified": "2024-11-26T15:30:59Z",
"published": "2024-03-11T18:31:08Z",
"aliases": [
"CVE-2024-0053"
],
"details": "In getCustomPrinterIcon of PrintManagerService.java, there is a possible way to view other user's images due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-11T17:15:45Z"
advisories/unreviewed/2024/03/GHSA-qp4c-f9fg-vrxf/GHSA-qp4c-f9fg-vrxf.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qp4c-f9fg-vrxf",
"modified": "2024-03-11T18:31:07Z",
"modified": "2024-11-26T15:30:59Z",
"published": "2024-03-11T18:31:07Z",
"aliases": [
"CVE-2024-0039"
],
"details": "In attp_build_value_cmd of att_protocol.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-11T17:15:45Z"
advisories/unreviewed/2024/08/GHSA-296c-8m99-q77p/GHSA-296c-8m99-q77p.json
+2 -1
View File
@@ -28,7 +28,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-119"
"CWE-119",
"CWE-787"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/08/GHSA-57cg-pmv4-v925/GHSA-57cg-pmv4-v925.json
+11 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-57cg-pmv4-v925",
"modified": "2024-08-12T15:30:51Z",
"modified": "2024-11-26T15:31:00Z",
"published": "2024-08-12T15:30:51Z",
"aliases": [
"CVE-2024-6640"
],
"details": "In ICMPv6 Neighbor Discovery (ND), the ID is always 0. When pf is configured to allow ND and block incoming Echo Requests, a crafted Echo Request packet after a Neighbor Solicitation (NS) can trigger an Echo Reply. The packet has to come from the same host as the NS and have a zero as identifier to match the state created by the Neighbor Discovery and allow replies to be generated.\n\nICMPv6 packets with identifier value of zero bypass firewall rules written on the assumption that the incoming packets are going to create a state in the state table.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -21,13 +24,17 @@
{
"type": "WEB",
"url": "https://security.freebsd.org/advisories/FreeBSD-SA-24:05.pf.asc"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240816-0008"
}
],
"database_specific": {
"cwe_ids": [
"CWE-276"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-12T13:38:39Z"
advisories/unreviewed/2024/08/GHSA-6cvr-wmr3-636f/GHSA-6cvr-wmr3-636f.json
+1
View File
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-125",
"CWE-126"
],
"severity": "HIGH",
advisories/unreviewed/2024/08/GHSA-gf7m-c4p9-5gvh/GHSA-gf7m-c4p9-5gvh.json
+1
View File
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-125",
"CWE-126"
],
"severity": "MODERATE",
advisories/unreviewed/2024/11/GHSA-22pf-6rh7-89gj/GHSA-22pf-6rh7-89gj.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-22pf-6rh7-89gj",
"modified": "2024-11-26T15:31:03Z",
"published": "2024-11-26T15:31:03Z",
"aliases": [
"CVE-2024-9928"
],
"details": "A vulnerability exists in NSD570 login panel that does not restrict excessive authentication attempts. If exploited, this could\ncause account takeover and unauthorized access to the system\nwhen an attacker conducts brute-force attacks against the\nequipment login. Note that the system supports only one concurrent session and implements a delay of more than a second\nbetween failed login attempts making it difficult to automate the\nattacks.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9928"
},
{
"type": "WEB",
"url": "https://publisher.hitachienergy.com/preview?DocumentID=8DBD000173&LanguageCode=en&DocumentPartId=&Action=launch"
}
],
"database_specific": {
"cwe_ids": [
"CWE-307"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-26T14:15:22Z"
}
}
advisories/unreviewed/2024/11/GHSA-3r9h-5xmh-8j4q/GHSA-3r9h-5xmh-8j4q.json
+43
View File
@@ -0,0 +1,43 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3r9h-5xmh-8j4q",
"modified": "2024-11-26T15:31:03Z",
"published": "2024-11-26T15:31:03Z",
"aliases": [
"CVE-2024-11708"
],
"details": "Missing thread synchronization primitives could have led to a data race on members of the PlaybackParams structure. This vulnerability affects Firefox < 133 and Thunderbird < 133.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11708"
},
{
"type": "WEB",
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1922912"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-63"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-67"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-26T14:15:20Z"
}
}
advisories/unreviewed/2024/11/GHSA-49gp-6j88-r9j7/GHSA-49gp-6j88-r9j7.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-49gp-6j88-r9j7",
"modified": "2024-11-26T15:31:01Z",
"published": "2024-11-26T15:31:01Z",
"aliases": [
"CVE-2017-18306"
],
"details": "Information disclosure due to uninitialized variable.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2017-18306"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-26T14:15:17Z"
}
}
advisories/unreviewed/2024/11/GHSA-4c4w-pcg8-6hq9/GHSA-4c4w-pcg8-6hq9.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4c4w-pcg8-6hq9",
"modified": "2024-11-26T15:31:03Z",
"published": "2024-11-26T15:31:03Z",
"aliases": [
"CVE-2024-53976"
],
"details": "Under certain circumstances, navigating to a webpage would result in the address missing from the location URL bar, making it unclear what the URL was for the loaded webpage. This vulnerability affects Firefox for iOS < 133.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53976"
},
{
"type": "WEB",
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1905749"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-66"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-26T14:15:21Z"
}
}
advisories/unreviewed/2024/11/GHSA-4jp9-q9g7-48gr/GHSA-4jp9-q9g7-48gr.json
+51
View File
@@ -0,0 +1,51 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4jp9-q9g7-48gr",
"modified": "2024-11-26T15:31:02Z",
"published": "2024-11-26T15:31:02Z",
"aliases": [
"CVE-2024-11697"
],
"details": "When handling keypress events, an attacker may have been able to trick a user into bypassing the \"Open Executable File?\" confirmation dialog. This could have led to malicious code execution. This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Thunderbird < 133, and Thunderbird < 128.5.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11697"
},
{
"type": "WEB",
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1842187"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-63"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-64"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-67"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-68"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-26T14:15:19Z"
}
}
advisories/unreviewed/2024/11/GHSA-4qc3-fmcj-w66w/GHSA-4qc3-fmcj-w66w.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4qc3-fmcj-w66w",
"modified": "2024-11-26T12:41:37Z",
"modified": "2024-11-26T15:31:01Z",
"published": "2024-11-26T12:41:37Z",
"aliases": [
"CVE-2024-47250"
@@ -21,6 +21,10 @@
{
"type": "WEB",
"url": "https://lists.apache.org/thread/zdb50spojlqbn0yxd866mbzqjt2vpt85"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2024/11/26/4"
}
],
"database_specific": {
advisories/unreviewed/2024/11/GHSA-53mx-8hhc-gmp3/GHSA-53mx-8hhc-gmp3.json
+59
View File
@@ -0,0 +1,59 @@
{
"schema_version": "1.4.0",
"id": "GHSA-53mx-8hhc-gmp3",
"modified": "2024-11-26T15:31:01Z",
"published": "2024-11-26T15:31:01Z",
"aliases": [
"CVE-2024-11691"
],
"details": "An attacker could have caused memory corruption due to a flaw in Apple's GPU driver; this can be avoided by working around the flaw. \n*Note: This issue only affected macOS operating systems. Other operating systems are unaffected.* This vulnerability affects Firefox < 133, Firefox ESR < 128.5, Firefox ESR < 115.18, Thunderbird < 133, and Thunderbird < 128.5.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11691"
},
{
"type": "WEB",
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1914707"
},
{
"type": "WEB",
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1924184"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-63"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-64"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-65"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-67"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-68"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-26T14:15:18Z"
}
}
advisories/unreviewed/2024/11/GHSA-77rq-3336-8w4x/GHSA-77rq-3336-8w4x.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-77rq-3336-8w4x",
"modified": "2024-11-26T15:31:01Z",
"published": "2024-11-26T15:31:01Z",
"aliases": [
"CVE-2018-5852"
],
"details": "An unsigned integer underflow vulnerability in IPA driver result into a buffer over-read while reading NAT entry using debugfs command 'cat /sys/kernel/debug/ipa/ip4_nat'",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-5852"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-126"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-26T14:15:17Z"
}
}
advisories/unreviewed/2024/11/GHSA-7gfr-xrcc-jm66/GHSA-7gfr-xrcc-jm66.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7gfr-xrcc-jm66",
"modified": "2024-11-26T15:31:01Z",
"published": "2024-11-26T15:31:01Z",
"aliases": [
"CVE-2018-11816"
],
"details": "Crafted Binder Request Causes Heap UAF in MediaServer",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-11816"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/may-2018-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-26T14:15:17Z"
}
}
advisories/unreviewed/2024/11/GHSA-7mjq-fcrm-26pg/GHSA-7mjq-fcrm-26pg.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7mjq-fcrm-26pg",
"modified": "2024-11-26T12:41:37Z",
"modified": "2024-11-26T15:31:01Z",
"published": "2024-11-26T12:41:37Z",
"aliases": [
"CVE-2024-38831"
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-77"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/11/GHSA-7r4q-q89f-2mcg/GHSA-7r4q-q89f-2mcg.json
+43
View File
@@ -0,0 +1,43 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7r4q-q89f-2mcg",
"modified": "2024-11-26T15:31:03Z",
"published": "2024-11-26T15:31:02Z",
"aliases": [
"CVE-2024-11702"
],
"details": "Copying sensitive information from Private Browsing tabs on Android, such as passwords, may have inadvertently stored data in the cloud-based clipboard history if enabled. This vulnerability affects Firefox < 133 and Thunderbird < 133.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11702"
},
{
"type": "WEB",
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1918884"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-63"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-67"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-26T14:15:19Z"
}
}
advisories/unreviewed/2024/11/GHSA-845f-27fw-gjw9/GHSA-845f-27fw-gjw9.json
+43
View File
@@ -0,0 +1,43 @@
{
"schema_version": "1.4.0",
"id": "GHSA-845f-27fw-gjw9",
"modified": "2024-11-26T15:31:02Z",
"published": "2024-11-26T15:31:02Z",
"aliases": [
"CVE-2024-11700"
],
"details": "Malicious websites may have been able to user intent confirmation through tapjacking. This could have led to users unknowingly approving the launch of external applications, potentially exposing them to underlying vulnerabilities. This vulnerability affects Firefox < 133 and Thunderbird < 133.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11700"
},
{
"type": "WEB",
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1836921"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-63"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-67"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-26T14:15:19Z"
}
}
advisories/unreviewed/2024/11/GHSA-8rq4-c5x2-x4g8/GHSA-8rq4-c5x2-x4g8.json
+43
View File
@@ -0,0 +1,43 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8rq4-c5x2-x4g8",
"modified": "2024-11-26T15:31:03Z",
"published": "2024-11-26T15:31:02Z",
"aliases": [
"CVE-2024-11706"
],
"details": "A null pointer dereference may have inadvertently occurred in `pk12util`, and specifically in the `SEC_ASN1DecodeItem_Util` function, when handling malformed or improperly formatted input files. This vulnerability affects Firefox < 133 and Thunderbird < 133.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11706"
},
{
"type": "WEB",
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1923767"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-63"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-67"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-26T14:15:20Z"
}
}

Some files were not shown because too many files have changed in this diff Show More