netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2025-03-03 12:32:01 +00:00
parent 2e63e2eecf
commit 3165047a60
32 changed files with 1095 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/10/GHSA-w22f-vwwp-37pr/GHSA-w22f-vwwp-37pr.json
+9 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w22f-vwwp-37pr",
"modified": "2024-10-22T18:32:11Z",
"modified": "2025-03-03T12:30:31Z",
"published": "2024-10-22T18:32:11Z",
"aliases": [
"CVE-2024-10234"
@@ -19,6 +19,14 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10234"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:2025"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:2026"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2024-10234"
advisories/unreviewed/2025/02/GHSA-gghq-qp34-gqg8/GHSA-gghq-qp34-gqg8.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gghq-qp34-gqg8",
"modified": "2025-03-03T09:30:34Z",
"modified": "2025-03-03T12:30:31Z",
"published": "2025-02-12T15:32:02Z",
"aliases": [
"CVE-2025-1244"
@@ -43,6 +43,10 @@
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:1964"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2025:2022"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2025-1244"
advisories/unreviewed/2025/03/GHSA-24vm-48r8-7jq6/GHSA-24vm-48r8-7jq6.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-24vm-48r8-7jq6",
"modified": "2025-03-03T12:30:32Z",
"published": "2025-03-03T12:30:32Z",
"aliases": [
"CVE-2024-38426"
],
"details": "While processing the authentication message in UE, improper authentication may lead to information disclosure.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38426"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-287"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-03T11:15:11Z"
}
}
advisories/unreviewed/2025/03/GHSA-32hq-jmxj-p7pr/GHSA-32hq-jmxj-p7pr.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-32hq-jmxj-p7pr",
"modified": "2025-03-03T12:30:33Z",
"published": "2025-03-03T12:30:33Z",
"aliases": [
"CVE-2024-53014"
],
"details": "Memory corruption may occur while validating ports and channels in Audio driver.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53014"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-129"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-03T11:15:13Z"
}
}
advisories/unreviewed/2025/03/GHSA-465f-4qw5-v44q/GHSA-465f-4qw5-v44q.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-465f-4qw5-v44q",
"modified": "2025-03-03T12:30:32Z",
"published": "2025-03-03T12:30:32Z",
"aliases": [
"CVE-2024-49836"
],
"details": "Memory corruption may occur during the synchronization of the camera`s frame processing pipeline.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-49836"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-129"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-03T11:15:12Z"
}
}
advisories/unreviewed/2025/03/GHSA-48q8-jcx3-378c/GHSA-48q8-jcx3-378c.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-48q8-jcx3-378c",
"modified": "2025-03-03T12:30:33Z",
"published": "2025-03-03T12:30:33Z",
"aliases": [
"CVE-2024-53030"
],
"details": "Memory corruption while processing input message passed from FE driver.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53030"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-03T11:15:14Z"
}
}
advisories/unreviewed/2025/03/GHSA-4c7c-vf23-fq42/GHSA-4c7c-vf23-fq42.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4c7c-vf23-fq42",
"modified": "2025-03-03T12:30:32Z",
"published": "2025-03-03T12:30:32Z",
"aliases": [
"CVE-2024-43055"
],
"details": "Memory corruption while processing camera use case IOCTL call.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43055"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-03T11:15:11Z"
}
}
advisories/unreviewed/2025/03/GHSA-57r4-vcg6-xmgf/GHSA-57r4-vcg6-xmgf.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-57r4-vcg6-xmgf",
"modified": "2025-03-03T12:30:32Z",
"published": "2025-03-03T12:30:32Z",
"aliases": [
"CVE-2024-53023"
],
"details": "Memory corruption may occur while accessing a variable during extended back to back tests.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53023"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-03T11:15:13Z"
}
}
advisories/unreviewed/2025/03/GHSA-5pg7-35m9-25qj/GHSA-5pg7-35m9-25qj.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5pg7-35m9-25qj",
"modified": "2025-03-03T12:30:32Z",
"published": "2025-03-03T12:30:32Z",
"aliases": [
"CVE-2024-43060"
],
"details": "Memory corruption during voice activation, when sound model parameters are loaded from HLOS to ADSP.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43060"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-823"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-03T11:15:12Z"
}
}
advisories/unreviewed/2025/03/GHSA-658r-mcr3-mw76/GHSA-658r-mcr3-mw76.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-658r-mcr3-mw76",
"modified": "2025-03-03T12:30:32Z",
"published": "2025-03-03T12:30:32Z",
"aliases": [
"CVE-2024-53022"
],
"details": "Memory corruption may occur during communication between primary and guest VM.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53022"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-03T11:15:13Z"
}
}
advisories/unreviewed/2025/03/GHSA-6grj-mxj6-346g/GHSA-6grj-mxj6-346g.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6grj-mxj6-346g",
"modified": "2025-03-03T12:30:33Z",
"published": "2025-03-03T12:30:32Z",
"aliases": [
"CVE-2024-53025"
],
"details": "Transient DOS can occur while processing UCI command.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53025"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-190"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-03T11:15:14Z"
}
}
advisories/unreviewed/2025/03/GHSA-6x4p-xg8f-2h67/GHSA-6x4p-xg8f-2h67.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6x4p-xg8f-2h67",
"modified": "2025-03-03T12:30:32Z",
"published": "2025-03-03T12:30:32Z",
"aliases": [
"CVE-2024-53012"
],
"details": "Memory corruption may occur due to improper input validation in clock device.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53012"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-03T11:15:13Z"
}
}
advisories/unreviewed/2025/03/GHSA-7g83-7r9m-4q2j/GHSA-7g83-7r9m-4q2j.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7g83-7r9m-4q2j",
"modified": "2025-03-03T12:30:32Z",
"published": "2025-03-03T12:30:32Z",
"aliases": [
"CVE-2024-53024"
],
"details": "Memory corruption in display driver while detaching a device.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53024"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-03T11:15:13Z"
}
}
advisories/unreviewed/2025/03/GHSA-7hgc-c47c-w4p9/GHSA-7hgc-c47c-w4p9.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7hgc-c47c-w4p9",
"modified": "2025-03-03T12:30:32Z",
"published": "2025-03-03T12:30:32Z",
"aliases": [
"CVE-2024-43057"
],
"details": "Memory corruption while processing command in Glink linux.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43057"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-03T11:15:11Z"
}
}
advisories/unreviewed/2025/03/GHSA-92vg-px9c-73fc/GHSA-92vg-px9c-73fc.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-92vg-px9c-73fc",
"modified": "2025-03-03T12:30:32Z",
"published": "2025-03-03T12:30:32Z",
"aliases": [
"CVE-2024-43059"
],
"details": "Memory corruption while invoking IOCTL calls from the use-space for HGSL memory node.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43059"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-03T11:15:12Z"
}
}
advisories/unreviewed/2025/03/GHSA-c5hm-fr3r-98xm/GHSA-c5hm-fr3r-98xm.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c5hm-fr3r-98xm",
"modified": "2025-03-03T12:30:33Z",
"published": "2025-03-03T12:30:33Z",
"aliases": [
"CVE-2024-53027"
],
"details": "Transient DOS may occur while processing the country IE.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53027"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-03T11:15:14Z"
}
}
advisories/unreviewed/2025/03/GHSA-g25r-jvm6-wcv9/GHSA-g25r-jvm6-wcv9.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g25r-jvm6-wcv9",
"modified": "2025-03-03T12:30:33Z",
"published": "2025-03-03T12:30:33Z",
"aliases": [
"CVE-2024-53031"
],
"details": "Memory corruption while reading a type value from a buffer controlled by the Guest Virtual Machine.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53031"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-03T11:15:14Z"
}
}
advisories/unreviewed/2025/03/GHSA-g5qp-3jx2-p69r/GHSA-g5qp-3jx2-p69r.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g5qp-3jx2-p69r",
"modified": "2025-03-03T12:30:31Z",
"published": "2025-03-03T12:30:31Z",
"aliases": [
"CVE-2024-8186"
],
"details": "An issue has been discovered in GitLab CE/EE affecting all versions from 16.6 before 17.7.6, 17.8 before 17.8.4, and 17.9 before 17.9.1. An attacker could inject HMTL into the child item search potentially leading to XSS in certain situations.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8186"
},
{
"type": "WEB",
"url": "https://hackerone.com/reports/2655757"
},
{
"type": "WEB",
"url": "https://gitlab.com/gitlab-org/gitlab/-/issues/480751"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-03T10:15:09Z"
}
}
advisories/unreviewed/2025/03/GHSA-ggqm-rv53-68hr/GHSA-ggqm-rv53-68hr.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-ggqm-rv53-68hr",
"modified": "2025-03-03T12:30:33Z",
"published": "2025-03-03T12:30:33Z",
"aliases": [
"CVE-2024-53033"
],
"details": "Memory corruption while doing Escape call when user provides valid kernel address in the place of valid user buffer address.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53033"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-822"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-03T11:15:15Z"
}
}
advisories/unreviewed/2025/03/GHSA-grh2-c3rj-hgjx/GHSA-grh2-c3rj-hgjx.json
+34
View File
@@ -0,0 +1,34 @@
{
"schema_version": "1.4.0",
"id": "GHSA-grh2-c3rj-hgjx",
"modified": "2025-03-03T12:30:32Z",
"published": "2025-03-03T12:30:32Z",
"aliases": [
"CVE-2024-53011"
],
"details": "Information disclosure may occur due to improper permission and access controls to Video Analytics engine.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53011"
},
{
"type": "WEB",
"url": "https://docs.qualcomm.com/product/publicresources/securitybulletin/march-2025-bulletin.html"
}
],
"database_specific": {
"cwe_ids": [],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-03-03T11:15:13Z"
}
}

Some files were not shown because too many files have changed in this diff Show More