netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-m97r-wj82-82xw
GHSA-8hw4-gj79-m365
GHSA-5gr2-8w66-g9j9
GHSA-66pm-7m3q-gh7c
GHSA-7w4h-76j5-gqgx
GHSA-85wf-77c7-2h37
GHSA-cv6h-7p3x-q58x
GHSA-fjp6-hgv6-f8gw
GHSA-jm6v-mv47-p2gv
GHSA-vhc9-98xp-277v
This commit is contained in:
advisory-database[bot]
2023-11-20 12:31:59 +00:00
parent 85e65cb7fc
commit 3aefc01a83
10 changed files with 313 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2021/12/GHSA-m97r-wj82-82xw/GHSA-m97r-wj82-82xw.json
+4
View File
@@ -24,6 +24,10 @@
{
"type": "WEB",
"url": "https://www.incibe-cert.es/en/early-warning/security-advisories/parallels-remote-application-server-credentials-management-errors"
},
{
"type": "WEB",
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso/parallels-remote-application-server-credentials-management-errors"
}
],
"database_specific": {
advisories/unreviewed/2022/10/GHSA-8hw4-gj79-m365/GHSA-8hw4-gj79-m365.json
+5 -1
View File
@@ -24,11 +24,15 @@
{
"type": "WEB",
"url": "https://www.incibe-cert.es/en/early-warning/ics-advisories/multiple-vulnerabilities-zgr-tps200-ng"
},
{
"type": "WEB",
"url": "https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-zgr-tps200-ng"
}
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2023/11/GHSA-5gr2-8w66-g9j9/GHSA-5gr2-8w66-g9j9.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5gr2-8w66-g9j9",
"modified": "2023-11-20T12:30:27Z",
"published": "2023-11-20T12:30:27Z",
"aliases": [
"CVE-2023-46100"
],
"details": "in OpenHarmony v3.2.2 and prior versions allow a local attacker get sensitive buffer information through use of uninitialized resource.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46100"
},
{
"type": "WEB",
"url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2023/2023-12.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-908"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-11-20T12:15:08Z"
}
}
advisories/unreviewed/2023/11/GHSA-66pm-7m3q-gh7c/GHSA-66pm-7m3q-gh7c.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-66pm-7m3q-gh7c",
"modified": "2023-11-20T12:30:27Z",
"published": "2023-11-20T12:30:27Z",
"aliases": [
"CVE-2023-43612"
],
"details": "in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary file read and write through improper preservation of permissions.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-43612"
},
{
"type": "WEB",
"url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2023/2023-12.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-281"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-11-20T12:15:08Z"
}
}
advisories/unreviewed/2023/11/GHSA-7w4h-76j5-gqgx/GHSA-7w4h-76j5-gqgx.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7w4h-76j5-gqgx",
"modified": "2023-11-20T12:30:27Z",
"published": "2023-11-20T12:30:27Z",
"aliases": [
"CVE-2023-47217"
],
"details": "in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through buffer overflow.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47217"
},
{
"type": "WEB",
"url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2023/2023-12.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-11-20T12:15:08Z"
}
}
advisories/unreviewed/2023/11/GHSA-85wf-77c7-2h37/GHSA-85wf-77c7-2h37.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-85wf-77c7-2h37",
"modified": "2023-11-20T12:30:27Z",
"published": "2023-11-20T12:30:27Z",
"aliases": [
"CVE-2023-5593"
],
"details": "The out-of-bounds write vulnerability in the Windows-based SecuExtender SSL VPN Client software version 4.0.4.0 could allow an authenticated local user to gain a privilege escalation by sending a crafted CREATE message.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5593"
},
{
"type": "WEB",
"url": "https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-out-of-bounds-write-vulnerability-in-secuextender-ssl-vpn-client-software"
}
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-11-20T12:15:09Z"
}
}
advisories/unreviewed/2023/11/GHSA-cv6h-7p3x-q58x/GHSA-cv6h-7p3x-q58x.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cv6h-7p3x-q58x",
"modified": "2023-11-20T12:30:27Z",
"published": "2023-11-20T12:30:27Z",
"aliases": [
"CVE-2023-6045"
],
"details": "in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through type confusion.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6045"
},
{
"type": "WEB",
"url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2023/2023-12.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-843"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-11-20T12:15:09Z"
}
}
advisories/unreviewed/2023/11/GHSA-fjp6-hgv6-f8gw/GHSA-fjp6-hgv6-f8gw.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fjp6-hgv6-f8gw",
"modified": "2023-11-20T12:30:27Z",
"published": "2023-11-20T12:30:27Z",
"aliases": [
"CVE-2023-42774"
],
"details": "in OpenHarmony v3.2.2 and prior versions allow a local attacker get confidential information through incorrect default permissions.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-42774"
},
{
"type": "WEB",
"url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2023/2023-12.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-276"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-11-20T12:15:08Z"
}
}
advisories/unreviewed/2023/11/GHSA-jm6v-mv47-p2gv/GHSA-jm6v-mv47-p2gv.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jm6v-mv47-p2gv",
"modified": "2023-11-20T12:30:27Z",
"published": "2023-11-20T12:30:27Z",
"aliases": [
"CVE-2023-46705"
],
"details": "in OpenHarmony v3.2.2 and prior versions allow a local attacker causes system information leak through type confusion.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46705"
},
{
"type": "WEB",
"url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2023/2023-12.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-843"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-11-20T12:15:08Z"
}
}
advisories/unreviewed/2023/11/GHSA-vhc9-98xp-277v/GHSA-vhc9-98xp-277v.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vhc9-98xp-277v",
"modified": "2023-11-20T12:30:27Z",
"published": "2023-11-20T12:30:27Z",
"aliases": [
"CVE-2023-3116"
],
"details": "in OpenHarmony v3.2.2 and prior versions allow a local attacker get confidential information or rewrite sensitive file through incorrect default permissions.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-3116"
},
{
"type": "WEB",
"url": "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2023/2023-12.md"
}
],
"database_specific": {
"cwe_ids": [
"CWE-276"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-11-20T12:15:07Z"
}
}