Publish Advisories

GHSA-qfjv-998w-q48f GHSA-2mfm-m7q3-xch8 GHSA-2qwg-cqpg-9qrr GHSA-3pfw-5ffm-ww42 GHSA-477j-vcp2-hh67 GHSA-48ww-vppq-9c8v GHSA-759c-p77c-j97r GHSA-9w96-264r-8f55 GHSA-gmwj-428v-53wv GHSA-j63f-r65c-3x8x GHSA-m93x-j22f-53v7 GHSA-r3w7-mfpm-c2vw GHSA-wgfc-mmg5-p2xv
2026-05-22 18:04:22 -07:00 · 2024-03-04 21:32:15 +00:00
parent d96e9c74eb
commit 3bf60f5e18
13 changed files with 497 additions and 2 deletions
@@ -1,12 +1,12 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-qfjv-998w-q48f",
-  "modified": "2021-09-16T19:56:56Z",
+  "modified": "2024-03-04T21:31:13Z",
  "published": "2018-11-06T23:15:46Z",
  "aliases": [
    "CVE-2018-17186"
  ],
-  "summary": "High severity vulnerability that affects org.apache.syncope:syncope-core",
+  "summary": "Improper Restriction of XML External Entity Reference in org.apache.syncope:syncope-core",
  "details": "An administrator with workflow definition entitlements can use DTD to perform malicious operations, including but not limited to file read, file write, and code execution.",
  "severity": [
    {
@@ -59,6 +59,10 @@
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-17186"
    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/apache/syncope/commit/a0f35f45f8ca5c98853ae8477fb2db81a84709a"
+    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/advisories/GHSA-qfjv-998w-q48f"
@@ -0,0 +1,39 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2mfm-m7q3-xch8",
+  "modified": "2024-03-04T21:31:11Z",
+  "published": "2024-03-04T21:31:11Z",
+  "aliases": [
+    "CVE-2021-47107"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Fix READDIR buffer overflow\n\nIf a client sends a READDIR count argument that is too small (say,\nzero), then the buffer size calculation in the new init_dirlist\nhelper functions results in an underflow, allowing the XDR stream\nfunctions to write beyond the actual buffer.\n\nThis calculation has always been suspect. NFSD has never sanity-\nchecked the READDIR count argument, but the old entry encoders\nmanaged the problem correctly.\n\nWith the commits below, entry encoding changed, exposing the\nunderflow to the pointer arithmetic in xdr_reserve_space().\n\nModern NFS clients attempt to retrieve as much data as possible\nfor each READDIR request. Also, we have no unit tests that\nexercise the behavior of READDIR at the lower bound of @count\nvalues. Thus this case was missed during testing.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-47107"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/53b1119a6e5028b125f431a0116ba73510d82a72"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/eabc0aab98e5218ceecd82069b0d6fdfff5ee885"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-03-04T19:15:18Z"
+  }
+}
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2qwg-cqpg-9qrr",
+  "modified": "2024-03-04T21:31:11Z",
+  "published": "2024-03-04T21:31:11Z",
+  "aliases": [
+    "CVE-2023-6068"
+  ],
+  "details": "On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect operation of the configured ACL for a port resulting in some packets that should be denied being permitted and some",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6068"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.arista.com/en/support/advisories-notices/security-advisory/19023-security-advisory-0091"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-283"
+    ],
+    "severity": "LOW",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-03-04T20:15:50Z"
+  }
+}
@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3pfw-5ffm-ww42",
+  "modified": "2024-03-04T21:31:11Z",
+  "published": "2024-03-04T21:31:11Z",
+  "aliases": [
+    "CVE-2023-32331"
+  ],
+  "details": "IBM Connect:Express for UNIX 1.5.0 is vulnerable to a buffer overflow that could allow a remote attacker to cause a denial of service through its browser UI.  IBM X-Force ID:  254979.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32331"
+    },
+    {
+      "type": "WEB",
+      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/254979"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.ibm.com/support/pages/node/7011443"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-119"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-03-04T19:15:18Z"
+  }
+}
@@ -0,0 +1,39 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-477j-vcp2-hh67",
+  "modified": "2024-03-04T21:31:11Z",
+  "published": "2024-03-04T21:31:11Z",
+  "aliases": [
+    "CVE-2021-47105"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: xsk: return xsk buffers back to pool when cleaning the ring\n\nCurrently we only NULL the xdp_buff pointer in the internal SW ring but\nwe never give it back to the xsk buffer pool. This means that buffers\ncan be leaked out of the buff pool and never be used again.\n\nAdd missing xsk_buff_free() call to the routine that is supposed to\nclean the entries that are left in the ring so that these buffers in the\numem can be used by other sockets.\n\nAlso, only go through the space that is actually left to be cleaned\ninstead of a whole ring.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-47105"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/ad6d20da2cfbe14b7b1200d15f39e65988b0b9e8"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/afe8a3ba85ec2a6b6849367e25c06a2f8e0ddd05"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-03-04T19:15:18Z"
+  }
+}
@@ -0,0 +1,39 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-48ww-vppq-9c8v",
+  "modified": "2024-03-04T21:31:11Z",
+  "published": "2024-03-04T21:31:11Z",
+  "aliases": [
+    "CVE-2021-47108"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/mediatek: hdmi: Perform NULL pointer check for mtk_hdmi_conf\n\nIn commit 41ca9caaae0b\n(\"drm/mediatek: hdmi: Add check for CEA modes only\") a check\nfor CEA modes was added to function mtk_hdmi_bridge_mode_valid()\nin order to address possible issues on MT8167;\nmoreover, with commit c91026a938c2\n(\"drm/mediatek: hdmi: Add optional limit on maximal HDMI mode clock\")\nanother similar check was introduced.\n\nUnfortunately though, at the time of writing, MT8173 does not provide\nany mtk_hdmi_conf structure and this is crashing the kernel with NULL\npointer upon entering mtk_hdmi_bridge_mode_valid(), which happens as\nsoon as a HDMI cable gets plugged in.\n\nTo fix this regression, add a NULL pointer check for hdmi->conf in the\nsaid function, restoring HDMI functionality and avoiding NULL pointer\nkernel panics.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-47108"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/3b8e19a0aa3933a785be9f1541afd8d398c4ec69"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/71d07ebc5000b9c1d140e99e7493b0bafa954776"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-03-04T19:15:18Z"
+  }
+}
@@ -0,0 +1,63 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-759c-p77c-j97r",
+  "modified": "2024-03-04T21:31:11Z",
+  "published": "2024-03-04T21:31:11Z",
+  "aliases": [
+    "CVE-2021-47104"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nIB/qib: Fix memory leak in qib_user_sdma_queue_pkts()\n\nThe wrong goto label was used for the error case and missed cleanup of the\npkt allocation.\n\nAddresses-Coverity-ID: 1493352 (\"Resource leak\")",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-47104"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/0aaec9c5f60754b56f84460ea439b8c5e91f4caa"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/1ced0a3015a95c6a6db45e37250912c4c86697ab"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/76b648063eb36c72dfc0a6896de8a0a7d2c7841c"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/79dcbd8176152b860028b62f81a635d987365752"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/7cf6466e00a77b0a914b7b2c28a1fc7947d55e59"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/aefcc25f3a0cd28a87d11d41d30419a12cd26a34"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/bee90911e0138c76ee67458ac0d58b38a3190f65"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/d53456492b5d02033c73dfa0f3b94c86337791ba"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-03-04T19:15:18Z"
+  }
+}
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9w96-264r-8f55",
+  "modified": "2024-03-04T21:31:11Z",
+  "published": "2024-03-04T21:31:11Z",
+  "aliases": [
+    "CVE-2024-27889"
+  ],
+  "details": "Multiple SQL Injection vulnerabilities exist in the reporting application of the Arista Edge Threat Management - Arista NG Firewall (NGFW). A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on the underlying operating system with elevated privileges.\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27889"
+    },
+    {
+      "type": "WEB",
+      "url": "https://https://www.arista.com/en/support/advisories-notices/security-advisory/19038-security-advisory-0093"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-03-04T20:15:50Z"
+  }
+}
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-j63f-r65c-3x8x",
+  "modified": "2024-03-04T21:31:11Z",
+  "published": "2024-03-04T21:31:11Z",
+  "aliases": [
+    "CVE-2024-1319"
+  ],
+  "details": "The Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the attendees list on any post type regardless of status. (e.g. draft, private, pending review, password-protected, and trashed posts).",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1319"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/5904dc7e-1058-4c40-bca3-66ba57b1414b"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-03-04T21:15:07Z"
+  }
+}
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-m93x-j22f-53v7",
+  "modified": "2024-03-04T21:31:11Z",
+  "published": "2024-03-04T21:31:11Z",
+  "aliases": [
+    "CVE-2024-2168"
+  ],
+  "details": "A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/operations/expense_category.php of the component HTTP POST Request Handler. The manipulation of the argument status leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-255678 is the identifier assigned to this vulnerability.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2168"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.255678"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.255678"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.yuque.com/mailemonyeyongjuan/nekc0f/uoobn101h48xv6ih"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-03-04T21:15:07Z"
+  }
+}
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-r3w7-mfpm-c2vw",
+  "modified": "2024-03-04T21:31:11Z",
+  "published": "2024-03-04T21:31:11Z",
+  "aliases": [
+    "CVE-2024-2048"
+  ],
+  "details": "Vault and Vault Enterprise (“Vault”) TLS certificate auth method did not correctly validate client certificates when configured with a non-CA certificate as trusted certificate. In this configuration, an attacker may be able to craft a malicious certificate that could be used to bypass authentication. Fixed in Vault 1.15.5 and 1.14.10.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-2048"
+    },
+    {
+      "type": "WEB",
+      "url": "https://discuss.hashicorp.com/t/hcsec-2024-05-vault-cert-auth-method-did-not-correctly-validate-non-ca-certificates/63382"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-295"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-03-04T20:15:50Z"
+  }
+}
@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-wgfc-mmg5-p2xv",
+  "modified": "2024-03-04T21:31:11Z",
+  "published": "2024-03-04T21:31:11Z",
+  "aliases": [
+    "CVE-2024-1316"
+  ],
+  "details": "The Event Tickets and Registration WordPress plugin before 5.8.1, Events Tickets Plus WordPress plugin before 5.9.1 does not prevent users with at least the contributor role from leaking the existence of certain events they shouldn't have access to. (e.g. draft, private, pending review, pw-protected, and trashed events).",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1316"
+    },
+    {
+      "type": "WEB",
+      "url": "https://wpscan.com/vulnerability/d80dfe2f-207d-4cdf-8c71-27936c6318e5"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-03-04T21:15:07Z"
+  }
+}