Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2025-03-25 15:32:49 +00:00
parent 890bdfbc2c
commit 37f1959a46
103 changed files with 1168 additions and 199 deletions
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-7hpv-rcx2-vjx9",
-  "modified": "2022-05-24T17:23:48Z",
+  "modified": "2025-03-25T15:31:09Z",
  "published": "2022-05-24T17:23:48Z",
  "aliases": [
    "CVE-2020-4316"
  ],
  "details": "IBM Publishing Engine 6.0.6, 6.0.6.1, and 7.0 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by sending a http:// link to a user or by planting this link in a site the user goes to. The cookie will be sent to the insecure link and the attacker can then obtain the cookie value by snooping the traffic. IBM X-Force ID: 177354.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-wj8f-vwpr-gq38",
-  "modified": "2022-05-24T17:08:45Z",
+  "modified": "2025-03-25T15:31:09Z",
  "published": "2022-05-24T17:08:45Z",
  "aliases": [
    "CVE-2019-4431"
  ],
  "details": "IBM Rational Publishing Engine 6.0.6 and 6.0.6.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 162888.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -24,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
    "severity": "LOW",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-2chf-w4v5-vmmg",
-  "modified": "2023-02-15T18:30:19Z",
+  "modified": "2025-03-25T15:31:09Z",
  "published": "2023-02-07T21:30:23Z",
  "aliases": [
    "CVE-2022-47412"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-2r47-fxrj-f7vv",
-  "modified": "2023-02-17T15:30:25Z",
+  "modified": "2025-03-25T15:31:13Z",
  "published": "2023-02-09T18:30:27Z",
  "aliases": [
    "CVE-2022-48295"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-39m8-rph8-x6gj",
-  "modified": "2023-02-16T15:30:30Z",
+  "modified": "2025-03-25T15:31:10Z",
  "published": "2023-02-07T21:30:22Z",
  "aliases": [
    "CVE-2022-45768"
@@ -30,7 +30,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-77"
+      "CWE-77",
+      "CWE-78"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -26,7 +26,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-77"
+      "CWE-77",
+      "CWE-78"
    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-4j3q-rqjq-x3f3",
-  "modified": "2023-02-17T00:30:28Z",
+  "modified": "2025-03-25T15:31:11Z",
  "published": "2023-02-08T21:30:20Z",
  "aliases": [
    "CVE-2023-0751"
@@ -22,10 +22,16 @@
    {
      "type": "WEB",
      "url": "https://security.FreeBSD.org/advisories/FreeBSD-SA-23:01.geli.asc"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.netapp.com/advisory/ntap-20230316-0004"
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-20"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -25,7 +25,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-284"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-5cxj-h7vw-5448",
-  "modified": "2023-02-16T18:30:28Z",
+  "modified": "2025-03-25T15:31:10Z",
  "published": "2023-02-08T00:30:34Z",
  "aliases": [
    "CVE-2022-47415"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-5f27-4gv5-7jhc",
-  "modified": "2023-02-17T15:30:26Z",
+  "modified": "2025-03-25T15:31:13Z",
  "published": "2023-02-09T18:30:27Z",
  "aliases": [
    "CVE-2022-48296"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-5xw7-xf7p-gm82",
-  "modified": "2023-02-16T15:30:29Z",
+  "modified": "2025-03-25T15:31:10Z",
  "published": "2023-02-07T21:30:22Z",
  "aliases": [
    "CVE-2022-46663"
@@ -23,6 +23,10 @@
      "type": "WEB",
      "url": "https://github.com/gwsw/less/commit/a78e1351113cef564d790a730d657a321624d79c"
    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LR7AUWB34JD4PCW3HHASBEDGGHFWPAQP"
+    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LR7AUWB34JD4PCW3HHASBEDGGHFWPAQP"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-6x74-cjf9-r2hc",
-  "modified": "2023-02-16T21:30:27Z",
+  "modified": "2025-03-25T15:31:13Z",
  "published": "2023-02-09T18:30:27Z",
  "aliases": [
    "CVE-2022-48297"
@@ -30,6 +30,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-1284",
      "CWE-20"
    ],
    "severity": "HIGH",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-7qcw-gg9p-56xr",
-  "modified": "2023-02-15T21:30:31Z",
+  "modified": "2025-03-25T15:31:10Z",
  "published": "2023-02-08T00:30:35Z",
  "aliases": [
    "CVE-2022-47413"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-c9q4-2w45-hjcr",
-  "modified": "2023-02-16T21:30:27Z",
+  "modified": "2025-03-25T15:31:13Z",
  "published": "2023-02-09T18:30:27Z",
  "aliases": [
    "CVE-2022-48298"
@@ -30,6 +30,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-1284",
      "CWE-20"
    ],
    "severity": "HIGH",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-h98q-9vm9-92vw",
-  "modified": "2023-02-16T18:30:27Z",
+  "modified": "2025-03-25T15:31:10Z",
  "published": "2023-02-08T00:30:34Z",
  "aliases": [
    "CVE-2022-47416"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-mw5v-q85w-g5pq",
-  "modified": "2023-02-16T18:30:27Z",
+  "modified": "2025-03-25T15:31:11Z",
  "published": "2023-02-08T00:30:34Z",
  "aliases": [
    "CVE-2022-47417"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-pmjf-pf92-c43q",
-  "modified": "2023-02-16T21:30:28Z",
+  "modified": "2025-03-25T15:31:13Z",
  "published": "2023-02-09T18:30:27Z",
  "aliases": [
    "CVE-2022-48299"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-rr3r-2gr7-hh53",
-  "modified": "2023-02-15T21:30:31Z",
+  "modified": "2025-03-25T15:31:10Z",
  "published": "2023-02-08T00:30:35Z",
  "aliases": [
    "CVE-2022-47414"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-w58h-9w4c-p7rf",
-  "modified": "2023-02-16T18:30:27Z",
+  "modified": "2025-03-25T15:31:11Z",
  "published": "2023-02-08T00:30:34Z",
  "aliases": [
    "CVE-2022-47418"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-xgrf-rhvw-h8mr",
-  "modified": "2023-02-16T15:30:29Z",
+  "modified": "2025-03-25T15:31:12Z",
  "published": "2023-02-09T18:30:27Z",
  "aliases": [
    "CVE-2022-48286"
@@ -30,6 +30,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-269",
      "CWE-863"
    ],
    "severity": "HIGH",
--- a/Show More
+++ b/Show More