netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-pqjh-mmh7-2g8c
GHSA-54v8-3w5h-ggf6
GHSA-63q4-8wcf-wg8f
GHSA-8v44-2x42-qwmw
GHSA-f6v5-hjxr-p24j
GHSA-mfqw-44wg-mrpf
This commit is contained in:
advisory-database[bot]
2024-07-08 12:32:38 +00:00
parent 71cc9bad0c
commit 3996636014
6 changed files with 181 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/05/GHSA-pqjh-mmh7-2g8c/GHSA-pqjh-mmh7-2g8c.json
+9 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pqjh-mmh7-2g8c",
"modified": "2022-05-24T17:32:22Z",
"modified": "2024-07-08T12:31:04Z",
"published": "2022-05-24T17:32:22Z",
"aliases": [
"CVE-2019-8761"
],
"details": "This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Catalina 10.15. Parsing a maliciously crafted text file may lead to disclosure of user information.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -25,6 +28,10 @@
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT210722"
},
{
"type": "WEB",
"url": "https://www.paulosyibelo.com/2021/04/this-man-thought-opening-txt-file-is.html"
}
],
"database_specific": {
advisories/unreviewed/2023/11/GHSA-54v8-3w5h-ggf6/GHSA-54v8-3w5h-ggf6.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-54v8-3w5h-ggf6",
"modified": "2023-11-16T18:30:30Z",
"modified": "2024-07-08T12:31:04Z",
"published": "2023-11-13T00:30:17Z",
"aliases": [
"CVE-2023-28696"
advisories/unreviewed/2024/07/GHSA-63q4-8wcf-wg8f/GHSA-63q4-8wcf-wg8f.json
+43
View File
@@ -0,0 +1,43 @@
{
"schema_version": "1.4.0",
"id": "GHSA-63q4-8wcf-wg8f",
"modified": "2024-07-08T12:31:05Z",
"published": "2024-07-08T12:31:05Z",
"aliases": [
"CVE-2024-27903"
],
"details": "OpenVPN plug-ins on Windows with OpenVPN 2.6.9 and earlier could be loaded from any directory, which allows an attacker to load an arbitrary plug-in which can be used to interact with the privileged OpenVPN interactive service.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27903"
},
{
"type": "WEB",
"url": "https://community.openvpn.net/openvpn/wiki/CVE-2024-27903"
},
{
"type": "WEB",
"url": "https://openvpn.net/security-advisory/ovpnx-vulnerability-cve-2024-27903-cve-2024-27459-cve-2024-24974"
},
{
"type": "WEB",
"url": "https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07534.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-283"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-08T11:15:10Z"
}
}
advisories/unreviewed/2024/07/GHSA-8v44-2x42-qwmw/GHSA-8v44-2x42-qwmw.json
+42
View File
@@ -0,0 +1,42 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8v44-2x42-qwmw",
"modified": "2024-07-08T12:31:06Z",
"published": "2024-07-08T12:31:06Z",
"aliases": [
"CVE-2024-37999"
],
"details": "A vulnerability has been identified in Medicalis Workflow Orchestrator (All versions). The affected application executes as a trusted account with high privileges and network access. This could allow an authenticated local attacker to escalate privileges.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37999"
},
{
"type": "WEB",
"url": "https://www.siemens-healthineers.com/en-us/support-documentation/cybersecurity/shsa-501799"
}
],
"database_specific": {
"cwe_ids": [
"CWE-282"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-08T11:15:10Z"
}
}
advisories/unreviewed/2024/07/GHSA-f6v5-hjxr-p24j/GHSA-f6v5-hjxr-p24j.json
+43
View File
@@ -0,0 +1,43 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f6v5-hjxr-p24j",
"modified": "2024-07-08T12:31:05Z",
"published": "2024-07-08T12:31:05Z",
"aliases": [
"CVE-2024-27459"
],
"details": "The interactive service in OpenVPN 2.6.9 and earlier allows an attacker to send data causing a stack overflow which can be used to execute arbitrary code with more privileges.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27459"
},
{
"type": "WEB",
"url": "https://community.openvpn.net/openvpn/wiki/CVE-2024-27459"
},
{
"type": "WEB",
"url": "https://openvpn.net/security-advisory/ovpnx-vulnerability-cve-2024-27903-cve-2024-27459-cve-2024-24974"
},
{
"type": "WEB",
"url": "https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07534.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-08T11:15:10Z"
}
}
advisories/unreviewed/2024/07/GHSA-mfqw-44wg-mrpf/GHSA-mfqw-44wg-mrpf.json
+43
View File
@@ -0,0 +1,43 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mfqw-44wg-mrpf",
"modified": "2024-07-08T12:31:05Z",
"published": "2024-07-08T12:31:05Z",
"aliases": [
"CVE-2024-24974"
],
"details": "The interactive service in OpenVPN 2.6.9 and earlier allows the OpenVPN service pipe to be accessed remotely, which allows a remote attacker to interact with the privileged OpenVPN interactive service.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24974"
},
{
"type": "WEB",
"url": "https://community.openvpn.net/openvpn/wiki/CVE-2024-24974"
},
{
"type": "WEB",
"url": "https://openvpn.net/security-advisory/ovpnx-vulnerability-cve-2024-27903-cve-2024-27459-cve-2024-24974"
},
{
"type": "WEB",
"url": "https://www.mail-archive.com/openvpn-users@lists.sourceforge.net/msg07534.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-923"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-08T11:15:10Z"
}
}