mirror of
https://github.com/netbirdio/advisory-database.git
synced 2026-05-22 18:04:22 -07:00
Advisory Database Sync
This commit is contained in:
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-3g6v-v5hj-c234",
|
||||
"modified": "2024-04-17T21:30:44Z",
|
||||
"modified": "2024-10-10T12:31:11Z",
|
||||
"published": "2024-02-23T15:30:37Z",
|
||||
"aliases": [
|
||||
"CVE-2024-26596"
|
||||
@@ -21,6 +21,10 @@
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26596"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/69a1e2d938dbbfcff0e064269adf60ad26dbb102"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/844f104790bd69c2e4dbb9ee3eba46fde1fcea7b"
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-7q77-pgmv-vv9r",
|
||||
"modified": "2024-04-17T12:32:04Z",
|
||||
"modified": "2024-10-10T12:31:11Z",
|
||||
"published": "2024-04-17T12:32:04Z",
|
||||
"aliases": [
|
||||
"CVE-2024-26876"
|
||||
@@ -22,6 +22,10 @@
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/28a94271bd50e4cf498df0381f776f8ea40a289e"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/50f4b57e9a9db4ede9294f39b9e75b5f26bae9b7"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/955c1252930677762e0db2b6b9e36938c887445c"
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-958q-v58v-6fr2",
|
||||
"modified": "2024-04-17T12:32:03Z",
|
||||
"modified": "2024-10-10T12:31:11Z",
|
||||
"published": "2024-04-17T12:32:03Z",
|
||||
"aliases": [
|
||||
"CVE-2024-26836"
|
||||
@@ -22,6 +22,10 @@
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/2bfbe1e0aed00ba51d58573c79452fada3f62ed4"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/2deb10a99671afda30f834e95e5b992a805bba6a"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/6f7d0f5fd8e440c3446560100ac4ff9a55eec340"
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-pjr2-pwcr-ffrh",
|
||||
"modified": "2024-04-04T09:30:35Z",
|
||||
"modified": "2024-10-10T12:31:11Z",
|
||||
"published": "2024-04-04T09:30:35Z",
|
||||
"aliases": [
|
||||
"CVE-2024-26785"
|
||||
@@ -25,6 +25,10 @@
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/fc719ecbca45c9c046640d72baddba3d83e0bc0b"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/fd4d5cd7a2e8f08357c9bfc0905957cffe8ce568"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-9r2w-3mr4-v6gq",
|
||||
"modified": "2024-06-03T18:55:51Z",
|
||||
"modified": "2024-10-10T12:31:11Z",
|
||||
"published": "2024-05-01T06:31:43Z",
|
||||
"aliases": [
|
||||
"CVE-2024-27012"
|
||||
@@ -21,6 +21,10 @@
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27012"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/164936b2fc88883341fe7a2d9c42b69020e5cafd"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/86658fc7414d4b9e25c2699d751034537503d637"
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-cx5c-hrvr-85gj",
|
||||
"modified": "2024-05-01T15:30:36Z",
|
||||
"modified": "2024-10-10T12:31:11Z",
|
||||
"published": "2024-05-01T15:30:36Z",
|
||||
"aliases": [
|
||||
"CVE-2024-27072"
|
||||
@@ -25,6 +25,10 @@
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/65e6a2773d655172143cc0b927cdc89549842895"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/dea46e246ef0f98d89d59a4229157cd9ffb636bf"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-qfxq-cgcj-hcmg",
|
||||
"modified": "2024-05-03T03:30:47Z",
|
||||
"modified": "2024-10-10T12:31:11Z",
|
||||
"published": "2024-05-01T06:31:43Z",
|
||||
"aliases": [
|
||||
"CVE-2024-27011"
|
||||
@@ -26,6 +26,10 @@
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/86a1471d7cde792941109b93b558b5dc078b9ee9"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/a1bd2a38a1c6388fc8556816dc203c3e9dc52237"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4EZ6PJW7VOZ224TD7N4JZNU6KV32ZJ53"
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-qv2f-765q-7wrf",
|
||||
"modified": "2024-05-20T12:30:28Z",
|
||||
"modified": "2024-10-10T12:31:11Z",
|
||||
"published": "2024-05-20T12:30:28Z",
|
||||
"aliases": [
|
||||
"CVE-2024-35963"
|
||||
@@ -18,6 +18,10 @@
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-35963"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/0c18a64039aa3f1c16f208d197c65076da798137"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/50173882bb187e70e37bac01385b9b114019bee2"
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-v94w-hwf5-4rj5",
|
||||
"modified": "2024-05-20T12:30:28Z",
|
||||
"modified": "2024-10-10T12:31:11Z",
|
||||
"published": "2024-05-20T12:30:28Z",
|
||||
"aliases": [
|
||||
"CVE-2024-35964"
|
||||
@@ -22,6 +22,10 @@
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/0c4a89f4690478969729c7ba5f69d53d8516aa12"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/6a6baa1ee7a9df33adbf932305053520b9741b35"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/9e8742cdfc4b0e65266bb4a901a19462bda9285e"
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-vwrr-j6j5-7xgm",
|
||||
"modified": "2024-05-01T06:31:42Z",
|
||||
"modified": "2024-10-10T12:31:11Z",
|
||||
"published": "2024-05-01T06:31:42Z",
|
||||
"aliases": [
|
||||
"CVE-2024-26972"
|
||||
@@ -18,6 +18,10 @@
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-26972"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/3faea7810e2b3e9a9a92ef42d7e5feaeb8ff7133"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/62b5ae00c2b835639002ce898ccb5d82c51073ae"
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-w79p-phhc-5r23",
|
||||
"modified": "2024-05-20T12:30:28Z",
|
||||
"modified": "2024-10-10T12:31:11Z",
|
||||
"published": "2024-05-20T12:30:28Z",
|
||||
"aliases": [
|
||||
"CVE-2024-35965"
|
||||
@@ -18,6 +18,10 @@
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-35965"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/28234f8ab69c522ba447f3e041bbfbb284c5959a"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/4f3951242ace5efc7131932e2e01e6ac6baed846"
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-66hj-w2gx-rg6c",
|
||||
"modified": "2024-09-09T15:30:37Z",
|
||||
"modified": "2024-10-10T12:31:11Z",
|
||||
"published": "2024-06-21T12:31:20Z",
|
||||
"aliases": [
|
||||
"CVE-2024-36478"
|
||||
@@ -28,6 +28,10 @@
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/a2db328b0839312c169eb42746ec46fc1ab53ed2"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/aaadb755f2d684f715a6eb85cb7243aa0c67dfa9"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
|
||||
@@ -29,6 +29,7 @@
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-119",
|
||||
"CWE-787",
|
||||
"CWE-788"
|
||||
],
|
||||
"severity": "HIGH",
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-x5q7-5ch5-5m3v",
|
||||
"modified": "2024-06-19T15:30:54Z",
|
||||
"modified": "2024-10-10T12:31:11Z",
|
||||
"published": "2024-06-19T15:30:54Z",
|
||||
"aliases": [
|
||||
"CVE-2024-38594"
|
||||
@@ -29,6 +29,10 @@
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/6f476aff2d8da1a189621c4c16a76a6c534e4312"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/b538fefeb1026aad9dcdcbb410c42b56dff8aae9"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-fmj3-3r47-vh2g",
|
||||
"modified": "2024-09-10T18:30:42Z",
|
||||
"modified": "2024-10-10T12:31:11Z",
|
||||
"published": "2024-08-26T12:31:19Z",
|
||||
"aliases": [
|
||||
"CVE-2024-43895"
|
||||
@@ -29,6 +29,10 @@
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/50e376f1fe3bf571d0645ddf48ad37eb58323919"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/5357141b4c2e2b332b6f11607ba8c5fbc2669a10"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://git.kernel.org/stable/c/70275bb960c71d313254473d38c14e7101cee5ad"
|
||||
|
||||
@@ -0,0 +1,38 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-2qhq-fw98-h6wg",
|
||||
"modified": "2024-10-10T12:31:12Z",
|
||||
"published": "2024-10-10T12:31:12Z",
|
||||
"aliases": [
|
||||
"CVE-2024-45121"
|
||||
],
|
||||
"details": "Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on integrity. Exploitation of this issue does not require user interaction.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45121"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://helpx.adobe.com/security/products/magento/apsb24-73.html"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-284"
|
||||
],
|
||||
"severity": "MODERATE",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-10-10T10:15:04Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,38 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-3fr3-gcqh-3m2g",
|
||||
"modified": "2024-10-10T12:31:12Z",
|
||||
"published": "2024-10-10T12:31:12Z",
|
||||
"aliases": [
|
||||
"CVE-2024-45117"
|
||||
],
|
||||
"details": "Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An admin attacker could exploit this vulnerability to read files from the system outside of the intended directories via PHP filter chain and also can have a low-availability impact on the service. Exploitation of this issue does not require user interaction and scope is changed.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L"
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45117"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://helpx.adobe.com/security/products/magento/apsb24-73.html"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-20"
|
||||
],
|
||||
"severity": "HIGH",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-10-10T10:15:04Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,38 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-46fm-x82m-5f74",
|
||||
"modified": "2024-10-10T12:31:12Z",
|
||||
"published": "2024-10-10T12:31:12Z",
|
||||
"aliases": [
|
||||
"CVE-2024-45122"
|
||||
],
|
||||
"details": "Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and have a low impact on confidentiality. Exploitation of this issue does not require user interaction.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45122"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://helpx.adobe.com/security/products/magento/apsb24-73.html"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-284"
|
||||
],
|
||||
"severity": "MODERATE",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-10-10T10:15:05Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,38 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-47jp-46c9-25vf",
|
||||
"modified": "2024-10-10T12:31:12Z",
|
||||
"published": "2024-10-10T12:31:12Z",
|
||||
"aliases": [
|
||||
"CVE-2024-45120"
|
||||
],
|
||||
"details": "Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability that could lead to a security feature bypass. An attacker could exploit this vulnerability to alter a condition between the check and the use of a resource, having a low impact on integrity. Exploitation of this issue requires user interaction.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45120"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://helpx.adobe.com/security/products/magento/apsb24-73.html"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-367"
|
||||
],
|
||||
"severity": "MODERATE",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-10-10T10:15:04Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,38 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-4f89-5cwm-rm5g",
|
||||
"modified": "2024-10-10T12:31:13Z",
|
||||
"published": "2024-10-10T12:31:13Z",
|
||||
"aliases": [
|
||||
"CVE-2024-45134"
|
||||
],
|
||||
"details": "Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by an Information Exposure vulnerability that could result in a security feature bypass. An admin attacker could leverage this vulnerability to have a low impact on confidentiality which may aid in further attacks. Exploitation of this issue does not require user interaction.",
|
||||
"severity": [
|
||||
{
|
||||
"type": "CVSS_V3",
|
||||
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N"
|
||||
}
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45134"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://helpx.adobe.com/security/products/magento/apsb24-73.html"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
"CWE-200"
|
||||
],
|
||||
"severity": "LOW",
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2024-10-10T10:15:07Z"
|
||||
}
|
||||
}
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user