netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-09-18 15:32:21 +00:00
parent 2ddae8949a
commit 38ee44057b
108 changed files with 3577 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/06/GHSA-c7vf-6j49-jq2x/GHSA-c7vf-6j49-jq2x.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c7vf-6j49-jq2x",
"modified": "2024-06-06T18:30:57Z",
"modified": "2024-09-18T15:30:47Z",
"published": "2024-06-06T18:30:57Z",
"aliases": [
"CVE-2024-36745"
],
"details": "An issue in OneFlow-Inc. Oneflow v0.9.1 allows attackers to cause a Denial of Service (DoS) via inputting a negative value into the oneflow.index_select parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-06T18:15:16Z"
advisories/unreviewed/2024/06/GHSA-wjxm-v88j-7gj4/GHSA-wjxm-v88j-7gj4.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wjxm-v88j-7gj4",
"modified": "2024-06-06T18:30:57Z",
"modified": "2024-09-18T15:30:47Z",
"published": "2024-06-06T18:30:57Z",
"aliases": [
"CVE-2024-36736"
],
"details": "An issue in the oneflow.permute component of OneFlow-Inc. Oneflow v0.9.1 causes an incorrect calculation when the same dimension operation is performed.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-682"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-06T18:15:16Z"
advisories/unreviewed/2024/07/GHSA-4cvc-j8gf-mg3g/GHSA-4cvc-j8gf-mg3g.json
+1
View File
@@ -32,6 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-312",
"CWE-316"
],
"severity": "MODERATE",
advisories/unreviewed/2024/07/GHSA-hwc3-h295-hhg9/GHSA-hwc3-h295-hhg9.json
+1 -1
View File
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-565"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/07/GHSA-rf42-gqmw-5vh9/GHSA-rf42-gqmw-5vh9.json
+2 -1
View File
@@ -32,7 +32,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-256"
"CWE-256",
"CWE-522"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/09/GHSA-27j9-vfp3-773q/GHSA-27j9-vfp3-773q.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-27j9-vfp3-773q",
"modified": "2024-09-18T15:30:53Z",
"published": "2024-09-18T15:30:53Z",
"aliases": [
"CVE-2024-46581"
],
"details": "Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46581"
},
{
"type": "WEB",
"url": "https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#7c3324f08b21445fb00f1e8eaa26283f"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:17Z"
}
}
advisories/unreviewed/2024/09/GHSA-27vc-rww5-64v8/GHSA-27vc-rww5-64v8.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-27vc-rww5-64v8",
"modified": "2024-09-18T15:30:52Z",
"published": "2024-09-18T15:30:52Z",
"aliases": [
"CVE-2024-46557"
],
"details": "Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46557"
},
{
"type": "WEB",
"url": "https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#8817e09b31b04ebebdaa5d6df1415df0"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:16Z"
}
}
advisories/unreviewed/2024/09/GHSA-2gmp-x9r7-xp6q/GHSA-2gmp-x9r7-xp6q.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2gmp-x9r7-xp6q",
"modified": "2024-09-18T15:30:52Z",
"published": "2024-09-18T15:30:52Z",
"aliases": [
"CVE-2024-31197"
],
"details": "Improper Null Termination vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::Port:unpack.\n\nThis issue affects libfluid: 0.1.0.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-31197"
},
{
"type": "WEB",
"url": "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31197"
}
],
"database_specific": {
"cwe_ids": [
"CWE-170"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T14:15:19Z"
}
}
advisories/unreviewed/2024/09/GHSA-2mj4-2m9q-g49h/GHSA-2mj4-2m9q-g49h.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2mj4-2m9q-g49h",
"modified": "2024-09-18T15:30:53Z",
"published": "2024-09-18T15:30:53Z",
"aliases": [
"CVE-2024-46582"
],
"details": "Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvAddr parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46582"
},
{
"type": "WEB",
"url": "https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#20001f379c5641a1ab4f7ce459ce3db0"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:17Z"
}
}
advisories/unreviewed/2024/09/GHSA-2qj2-rq28-64cc/GHSA-2qj2-rq28-64cc.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2qj2-rq28-64cc",
"modified": "2024-09-18T15:30:53Z",
"published": "2024-09-18T15:30:53Z",
"aliases": [
"CVE-2024-46596"
],
"details": "Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAct parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46596"
},
{
"type": "WEB",
"url": "https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#d049794ac4804e48968cb77589d5ec45"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:18Z"
}
}
advisories/unreviewed/2024/09/GHSA-39hm-m9hv-pfcr/GHSA-39hm-m9hv-pfcr.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-39hm-m9hv-pfcr",
"modified": "2024-09-18T15:30:52Z",
"published": "2024-09-18T15:30:52Z",
"aliases": [
"CVE-2024-46554"
],
"details": "Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the profname parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46554"
},
{
"type": "WEB",
"url": "https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#ee86534f23b84f2cbfa9401ee1d9d179"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:16Z"
}
}
advisories/unreviewed/2024/09/GHSA-3cmw-x7g9-558m/GHSA-3cmw-x7g9-558m.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3cmw-x7g9-558m",
"modified": "2024-09-18T15:30:52Z",
"published": "2024-09-18T15:30:52Z",
"aliases": [
"CVE-2024-39590"
],
"details": "Multiple invalid pointer dereference vulnerabilities exist in the OpenPLC Runtime EtherNet/IP parser functionality of OpenPLC_v3 16bf8bac1a36d95b73e7b8722d0edb8b9c5bb56a. A specially crafted EtherNet/IP request can lead to denial of service. An attacker can send a series of EtherNet/IP requests to trigger these vulnerabilities.This instance of the vulnerability occurs within the `Protected_Logical_Write_Reply` function",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-39590"
},
{
"type": "WEB",
"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-2016"
}
],
"database_specific": {
"cwe_ids": [
"CWE-704"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:15Z"
}
}
advisories/unreviewed/2024/09/GHSA-3jm6-w42x-q7xv/GHSA-3jm6-w42x-q7xv.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3jm6-w42x-q7xv",
"modified": "2024-09-18T15:30:52Z",
"published": "2024-09-18T15:30:52Z",
"aliases": [
"CVE-2024-31195"
],
"details": "Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::MultipartReplyTable::unpack.\n\nThis issue affects libfluid: 0.1.0.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-31195"
},
{
"type": "WEB",
"url": "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31195"
}
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T14:15:19Z"
}
}
advisories/unreviewed/2024/09/GHSA-3mxv-x893-5542/GHSA-3mxv-x893-5542.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3mxv-x893-5542",
"modified": "2024-09-18T15:30:51Z",
"published": "2024-09-18T15:30:51Z",
"aliases": [
"CVE-2024-31174"
],
"details": "Out-of-bounds Read vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of10::FeaturesReply::unpack.\n\nThis issue affects libfluid: 0.1.0.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-31174"
},
{
"type": "WEB",
"url": "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31174"
}
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T14:15:14Z"
}
}
advisories/unreviewed/2024/09/GHSA-3v74-rm67-6782/GHSA-3v74-rm67-6782.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3v74-rm67-6782",
"modified": "2024-09-18T15:30:52Z",
"published": "2024-09-18T15:30:52Z",
"aliases": [
"CVE-2023-28451"
],
"details": "An issue was discovered in Technitium 11.0.2. There is a vulnerability (called BadDNS) in DNS resolving software, which triggers a resolver to ignore valid responses, thus causing DoS (denial of service) for normal resolution. The effects of an exploit would be widespread and highly impactful, because the attacker could just forge a response targeting the source port of a vulnerable resolver without the need to guess the correct TXID.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28451"
},
{
"type": "WEB",
"url": "https://gist.github.com/idealeer/89947ca07836fd0f7e9761198ca9a0f3."
},
{
"type": "WEB",
"url": "https://technitium.com/dns"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:13Z"
}
}
advisories/unreviewed/2024/09/GHSA-3w5w-2v95-54r9/GHSA-3w5w-2v95-54r9.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3w5w-2v95-54r9",
"modified": "2024-09-18T15:30:52Z",
"published": "2024-09-18T15:30:52Z",
"aliases": [
"CVE-2024-46553"
],
"details": "Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ipaddrmsk%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46553"
},
{
"type": "WEB",
"url": "https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#1e21ab70186245aa8fb17578863216e2"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:16Z"
}
}
advisories/unreviewed/2024/09/GHSA-3x4g-4374-v83h/GHSA-3x4g-4374-v83h.json
+1
View File
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-1188",
"CWE-453"
],
"severity": "MODERATE",
advisories/unreviewed/2024/09/GHSA-45fw-7wjh-qgj9/GHSA-45fw-7wjh-qgj9.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-45fw-7wjh-qgj9",
"modified": "2024-09-18T15:30:52Z",
"published": "2024-09-18T15:30:52Z",
"aliases": [
"CVE-2024-46558"
],
"details": "Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the newProname parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46558"
},
{
"type": "WEB",
"url": "https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#43e2ae152385466180ebec957696ceaa"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:17Z"
}
}
advisories/unreviewed/2024/09/GHSA-45r4-jrvf-27wr/GHSA-45r4-jrvf-27wr.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-45r4-jrvf-27wr",
"modified": "2024-09-18T15:30:53Z",
"published": "2024-09-18T15:30:53Z",
"aliases": [
"CVE-2024-46571"
],
"details": "Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPPPSrvNm parameter at fwuser.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46571"
},
{
"type": "WEB",
"url": "https://ink-desk-28f.notion.site/Draytek-vigor-3910-Analysis-Report-b3b23e150c4f4bab822c3c47fd7b9de9#b325c78d0d4643b6a2e7703a811f1dd5"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:17Z"
}
}
advisories/unreviewed/2024/09/GHSA-4pwx-m3xw-8xj9/GHSA-4pwx-m3xw-8xj9.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4pwx-m3xw-8xj9",
"modified": "2024-09-18T15:30:51Z",
"published": "2024-09-18T15:30:51Z",
"aliases": [
"CVE-2024-31175"
],
"details": "Unchecked Return Value to NULL Pointer Dereference vulnerability in Open Networking Foundation (ONF) libfluid (libfluid_msg module). This vulnerability is associated with program routine fluid_msg::of13::TablePropertiesList::unpack.\n\nThis issue affects libfluid: 0.1.0.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-31175"
},
{
"type": "WEB",
"url": "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-31175"
}
],
"database_specific": {
"cwe_ids": [
"CWE-690"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T14:15:14Z"
}
}

Some files were not shown because too many files have changed in this diff Show More