netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-08-06 15:32:37 +00:00
parent 2e5d7ba5d5
commit 3ef71dbca7
70 changed files with 1883 additions and 63 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/02/GHSA-wvh6-x26c-2299/GHSA-wvh6-x26c-2299.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wvh6-x26c-2299",
"modified": "2023-02-10T00:30:20Z",
"modified": "2024-08-06T15:30:46Z",
"published": "2023-02-02T21:33:34Z",
"aliases": [
"CVE-2023-0253"
advisories/unreviewed/2024/03/GHSA-7x4x-j7vx-3p29/GHSA-7x4x-j7vx-3p29.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7x4x-j7vx-3p29",
"modified": "2024-03-26T15:30:51Z",
"modified": "2024-08-06T15:30:47Z",
"published": "2024-03-26T15:30:51Z",
"aliases": [
"CVE-2024-23722"
],
"details": "In Fluent Bit 2.1.8 through 2.2.1, a NULL pointer dereference can be caused via an invalid HTTP payload with the content type of x-www-form-urlencoded. It crashes and does not restart. This could result in logs not being delivered properly.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-26T15:15:49Z"
advisories/unreviewed/2024/03/GHSA-g3pj-7fp2-jhxr/GHSA-g3pj-7fp2-jhxr.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g3pj-7fp2-jhxr",
"modified": "2024-03-26T21:30:47Z",
"modified": "2024-08-06T15:30:47Z",
"published": "2024-03-26T21:30:47Z",
"aliases": [
"CVE-2024-28545"
],
"details": "Tenda AC18 V15.03.05.05 contains a command injection vulnerablility in the deviceName parameter of formsetUsbUnload function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-77"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-26T21:15:53Z"
advisories/unreviewed/2024/03/GHSA-g56h-9v2h-9x2c/GHSA-g56h-9v2h-9x2c.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g56h-9v2h-9x2c",
"modified": "2024-03-07T03:30:41Z",
"modified": "2024-08-06T15:30:46Z",
"published": "2024-03-07T03:30:41Z",
"aliases": [
"CVE-2024-26566"
],
"details": "An issue in Cute Http File Server v.3.1 allows a remote attacker to escalate privileges via the password verification component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-288"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-07T01:15:52Z"
advisories/unreviewed/2024/03/GHSA-jmmm-pcpp-rrc4/GHSA-jmmm-pcpp-rrc4.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jmmm-pcpp-rrc4",
"modified": "2024-03-06T09:30:26Z",
"modified": "2024-08-06T15:30:47Z",
"published": "2024-03-06T09:30:26Z",
"aliases": [
"CVE-2023-52584"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nspmi: mediatek: Fix UAF on device remove\n\nThe pmif driver data that contains the clocks is allocated along with\nspmi_controller.\nOn device remove, spmi_controller will be freed first, and then devres\n, including the clocks, will be cleanup.\nThis leads to UAF because putting the clocks will access the clocks in\nthe pmif driver data, which is already freed along with spmi_controller.\n\nThis can be reproduced by enabling DEBUG_TEST_DRIVER_REMOVE and\nbuilding the kernel with KASAN.\n\nFix the UAF issue by using unmanaged clk_bulk_get() and putting the\nclocks before freeing spmi_controller.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N"
}
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": null,
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-06T07:15:07Z"
advisories/unreviewed/2024/03/GHSA-qhcw-x4hm-xwrx/GHSA-qhcw-x4hm-xwrx.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qhcw-x4hm-xwrx",
"modified": "2024-03-21T03:36:45Z",
"modified": "2024-08-06T15:30:47Z",
"published": "2024-03-21T03:36:45Z",
"aliases": [
"CVE-2023-49983"
],
"details": "A cross-site scripting (XSS) vulnerability in the component /management/class of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-21T02:49:38Z"
advisories/unreviewed/2024/03/GHSA-r8c8-q2jq-wjq4/GHSA-r8c8-q2jq-wjq4.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r8c8-q2jq-wjq4",
"modified": "2024-03-07T21:30:22Z",
"modified": "2024-08-06T15:30:47Z",
"published": "2024-03-07T21:30:22Z",
"aliases": [
"CVE-2024-27707"
],
"details": "Server Side Request Forgery (SSRF) vulnerability in hcengineering Huly Platform v.0.6.202 allows attackers to run arbitrary code via upload of crafted SVG file.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-918"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-07T21:15:08Z"
advisories/unreviewed/2024/03/GHSA-rxm4-85x6-2778/GHSA-rxm4-85x6-2778.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rxm4-85x6-2778",
"modified": "2024-03-06T03:30:29Z",
"modified": "2024-08-06T15:30:46Z",
"published": "2024-03-06T03:30:29Z",
"aliases": [
"CVE-2023-49971"
],
"details": "A cross-site scripting (XSS) vulnerability in Customer Support System v1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter at /customer_support/index.php?page=customer_list.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-06T01:15:07Z"
advisories/unreviewed/2024/06/GHSA-5frq-4cx3-frc8/GHSA-5frq-4cx3-frc8.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5frq-4cx3-frc8",
"modified": "2024-06-11T12:31:02Z",
"modified": "2024-08-06T15:30:47Z",
"published": "2024-06-11T12:31:02Z",
"aliases": [
"CVE-2024-35206"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2024/06/GHSA-988h-7hff-q3fr/GHSA-988h-7hff-q3fr.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-988h-7hff-q3fr",
"modified": "2024-06-15T03:30:35Z",
"modified": "2024-08-06T15:30:48Z",
"published": "2024-06-15T03:30:35Z",
"aliases": [
"CVE-2023-6696"
@@ -36,7 +36,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-862"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/06/GHSA-m249-8gm7-xrcf/GHSA-m249-8gm7-xrcf.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m249-8gm7-xrcf",
"modified": "2024-06-11T12:31:02Z",
"modified": "2024-08-06T15:30:47Z",
"published": "2024-06-11T12:31:02Z",
"aliases": [
"CVE-2024-35207"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2024/06/GHSA-ppq4-8j5q-qjjx/GHSA-ppq4-8j5q-qjjx.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-ppq4-8j5q-qjjx",
"modified": "2024-06-11T12:31:02Z",
"modified": "2024-08-06T15:30:47Z",
"published": "2024-06-11T12:31:02Z",
"aliases": [
"CVE-2024-35209"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2024/06/GHSA-qhx2-rhqq-2wmm/GHSA-qhx2-rhqq-2wmm.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qhx2-rhqq-2wmm",
"modified": "2024-06-11T12:31:02Z",
"modified": "2024-08-06T15:30:47Z",
"published": "2024-06-11T12:31:02Z",
"aliases": [
"CVE-2024-35211"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2024/06/GHSA-qvr7-cp8f-g7f2/GHSA-qvr7-cp8f-g7f2.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qvr7-cp8f-g7f2",
"modified": "2024-06-11T12:31:02Z",
"modified": "2024-08-06T15:30:47Z",
"published": "2024-06-11T12:31:02Z",
"aliases": [
"CVE-2024-35212"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2024/06/GHSA-rqwx-x259-3ggm/GHSA-rqwx-x259-3ggm.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rqwx-x259-3ggm",
"modified": "2024-06-11T12:31:02Z",
"modified": "2024-08-06T15:30:47Z",
"published": "2024-06-11T12:31:02Z",
"aliases": [
"CVE-2024-35208"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2024/06/GHSA-wv82-j9h6-2q8w/GHSA-wv82-j9h6-2q8w.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wv82-j9h6-2q8w",
"modified": "2024-06-07T18:30:38Z",
"modified": "2024-08-06T15:30:47Z",
"published": "2024-06-07T18:30:38Z",
"aliases": [
"CVE-2024-5745"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2024/06/GHSA-wxxx-g5q4-gvrr/GHSA-wxxx-g5q4-gvrr.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wxxx-g5q4-gvrr",
"modified": "2024-06-20T18:34:09Z",
"modified": "2024-08-06T15:30:48Z",
"published": "2024-06-20T18:34:09Z",
"aliases": [
"CVE-2024-37344"
advisories/unreviewed/2024/06/GHSA-x8h6-96m2-gv4q/GHSA-x8h6-96m2-gv4q.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x8h6-96m2-gv4q",
"modified": "2024-06-11T12:31:02Z",
"modified": "2024-08-06T15:30:47Z",
"published": "2024-06-11T12:31:02Z",
"aliases": [
"CVE-2024-35210"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2024/07/GHSA-86g8-833h-3hcm/GHSA-86g8-833h-3hcm.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-86g8-833h-3hcm",
"modified": "2024-07-12T15:31:28Z",
"modified": "2024-08-06T15:30:48Z",
"published": "2024-07-12T15:31:28Z",
"aliases": [
"CVE-2024-40951"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: fix NULL pointer dereference in ocfs2_abort_trigger()\n\nbdev->bd_super has been removed and commit 8887b94d9322 change the usage\nfrom bdev->bd_super to b_assoc_map->host->i_sb. Since ocfs2 hasn't set\nbh->b_assoc_map, it will trigger NULL pointer dereference when calling\ninto ocfs2_abort_trigger().\n\nActually this was pointed out in history, see commit 74e364ad1b13. But\nI've made a mistake when reviewing commit 8887b94d9322 and then\nre-introduce this regression.\n\nSince we cannot revive bdev in buffer head, so fix this issue by\ninitializing all types of ocfs2 triggers when fill super, and then get the\nspecific ocfs2 trigger from ocfs2_caching_info when access journal.\n\n[joseph.qi@linux.alibaba.com: v2]\n Link: https://lkml.kernel.org/r/20240602112045.1112708-1-joseph.qi@linux.alibaba.com",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-12T13:15:17Z"
advisories/unreviewed/2024/07/GHSA-8vm5-mx6j-hvfc/GHSA-8vm5-mx6j-hvfc.json
+5 -1
View File
@@ -1,13 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8vm5-mx6j-hvfc",
"modified": "2024-08-01T09:30:48Z",
"modified": "2024-08-06T15:30:48Z",
"published": "2024-07-26T12:35:48Z",
"aliases": [
"CVE-2024-41684"
],
"details": "This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to missing secure flag for the session cookies associated with the router's web management interface. An attacker with remote access could exploit this by intercepting transmission within an HTTP session on the vulnerable system.\n\nSuccessful exploitation of this vulnerability could allow the attacker to capture cookies and compromise the targeted system.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"

Some files were not shown because too many files have changed in this diff Show More