netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-08-01 21:33:12 +00:00
parent 138b380eeb
commit 458fb38ce1
67 changed files with 1243 additions and 129 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/04/GHSA-65pf-462r-g52c/GHSA-65pf-462r-g52c.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-65pf-462r-g52c",
"modified": "2022-04-30T18:09:49Z",
"modified": "2024-08-01T21:31:37Z",
"published": "2022-04-30T18:09:49Z",
"aliases": [
"CVE-1999-0029"
],
"details": "root privileges via buffer overflow in ordist command on SGI IRIX systems.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2022/04/GHSA-ch8f-f5g7-vhhr/GHSA-ch8f-f5g7-vhhr.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-ch8f-f5g7-vhhr",
"modified": "2022-04-30T18:09:48Z",
"modified": "2024-08-01T21:31:38Z",
"published": "2022-04-30T18:09:48Z",
"aliases": [
"CVE-1999-0013"
],
"details": "Stolen credentials from SSH clients via ssh-agent program, allowing other local users to access remote accounts belonging to the ssh-agent user.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-522"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2022/04/GHSA-qm75-vj9c-hjcf/GHSA-qm75-vj9c-hjcf.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qm75-vj9c-hjcf",
"modified": "2022-04-30T18:09:51Z",
"modified": "2024-08-01T21:31:37Z",
"published": "2022-04-30T18:09:51Z",
"aliases": [
"CVE-1999-0043"
],
"details": "Command execution via shell metachars in INN daemon (innd) 1.5 using \"newgroup\" and \"rmgroup\" control messages, and others.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-78"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2022/04/GHSA-r96j-7gxg-wp39/GHSA-r96j-7gxg-wp39.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r96j-7gxg-wp39",
"modified": "2022-04-30T18:09:50Z",
"modified": "2024-08-01T21:31:37Z",
"published": "2022-04-30T18:09:50Z",
"aliases": [
"CVE-1999-0022"
],
"details": "Local user gains root privileges via buffer overflow in rdist, via expstr() function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2022/04/GHSA-wh9q-9hjg-qw4c/GHSA-wh9q-9hjg-qw4c.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wh9q-9hjg-qw4c",
"modified": "2022-04-30T18:12:46Z",
"modified": "2024-08-01T21:31:38Z",
"published": "2022-04-30T18:12:46Z",
"aliases": [
"CVE-1999-1588"
],
"details": "Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning with \"NLPS:002:002:\" to the listen (aka System V listener) port, TCP port 2766.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -37,7 +40,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2022/04/GHSA-xqg2-r5rv-62x6/GHSA-xqg2-r5rv-62x6.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xqg2-r5rv-62x6",
"modified": "2022-04-30T18:09:53Z",
"modified": "2024-08-01T21:31:38Z",
"published": "2022-04-30T18:09:53Z",
"aliases": [
"CVE-1999-0069"
],
"details": "Solaris ufsrestore buffer overflow.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2022/05/GHSA-7c8f-5r89-mjgx/GHSA-7c8f-5r89-mjgx.json
+2 -1
View File
@@ -32,7 +32,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-287"
"CWE-287",
"CWE-288"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2023/01/GHSA-mxv6-m383-394f/GHSA-mxv6-m383-394f.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-75"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/02/GHSA-895f-2fwm-hcv8/GHSA-895f-2fwm-hcv8.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-895f-2fwm-hcv8",
"modified": "2024-02-13T06:30:28Z",
"modified": "2024-08-01T21:31:39Z",
"published": "2024-02-13T06:30:28Z",
"aliases": [
"CVE-2023-52431"
],
"details": "The Plack::Middleware::XSRFBlock package before 0.0.19 for Perl allows attackers to bypass a CSRF protection mechanism via an empty form value and an empty cookie (if signed cookies are disabled).",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-269"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-13T05:15:08Z"
advisories/unreviewed/2024/02/GHSA-cc2p-f3qf-3fr6/GHSA-cc2p-f3qf-3fr6.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cc2p-f3qf-3fr6",
"modified": "2024-02-12T18:31:07Z",
"modified": "2024-08-01T21:31:39Z",
"published": "2024-02-12T18:31:07Z",
"aliases": [
"CVE-2023-6294"
],
"details": "The Popup Builder WordPress plugin before 4.2.6 does not validate a parameter before making a request to it, which could allow users with the administrator role to perform SSRF attack in Multisite WordPress configurations.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-352"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-12T16:15:08Z"
advisories/unreviewed/2024/02/GHSA-f9x8-85w7-chxv/GHSA-f9x8-85w7-chxv.json
+15 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f9x8-85w7-chxv",
"modified": "2024-02-13T03:30:20Z",
"modified": "2024-08-01T21:31:39Z",
"published": "2024-02-13T03:30:20Z",
"aliases": [
"CVE-2023-42374"
],
"details": "An issue in mystenlabs Sui Blockchain before v.1.6.3 allow a remote attacker to execute arbitrary code and cause a denial of service via a crafted compressed script to the Sui node component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -26,6 +29,14 @@
"type": "WEB",
"url": "https://beosin.com/resources/\"memory-bomb\"-vulnerability-causes-sui-node-to-crash?lang=en-US"
},
{
"type": "WEB",
"url": "https://beosin.com/resources/%22memory-bomb%22-vulnerability-causes-sui-node-to-crash?lang=en-US"
},
{
"type": "WEB",
"url": "https://medium.com/%40Beosin_com/memory-bomb-vulnerability-causes-sui-node-to-crash-7e8e3ef5057c"
},
{
"type": "WEB",
"url": "https://medium.com/@Beosin_com/memory-bomb-vulnerability-causes-sui-node-to-crash-7e8e3ef5057c"
@@ -33,9 +44,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-13T01:15:07Z"
advisories/unreviewed/2024/02/GHSA-r57p-gw8h-38xj/GHSA-r57p-gw8h-38xj.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r57p-gw8h-38xj",
"modified": "2024-02-08T06:30:24Z",
"modified": "2024-08-01T21:31:38Z",
"published": "2024-02-08T06:30:24Z",
"aliases": [
"CVE-2024-24091"
],
"details": "Yealink Meeting Server before v26.0.0.66 was discovered to contain an OS command injection vulnerability via the file upload interface.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-08T06:15:51Z"
advisories/unreviewed/2024/03/GHSA-53g5-chm2-f34r/GHSA-53g5-chm2-f34r.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-53g5-chm2-f34r",
"modified": "2024-03-25T15:30:39Z",
"modified": "2024-08-01T21:31:39Z",
"published": "2024-03-25T15:30:39Z",
"aliases": [
"CVE-2024-28387"
],
"details": "An issue in axonaut v.3.1.23 and before allows a remote attacker to obtain sensitive information via the log.txt component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-312"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-25T14:15:09Z"
advisories/unreviewed/2024/03/GHSA-7ph5-37r4-fwh8/GHSA-7ph5-37r4-fwh8.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7ph5-37r4-fwh8",
"modified": "2024-03-20T15:32:29Z",
"modified": "2024-08-01T21:31:39Z",
"published": "2024-03-20T15:32:29Z",
"aliases": [
"CVE-2024-0337"
],
"details": "The Travelpayouts: All Travel Brands in One Place WordPress plugin through 1.1.15 is vulnerable to Open Redirect due to insufficient validation on the travelpayouts_redirect variable. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-20T05:15:45Z"
advisories/unreviewed/2024/03/GHSA-m8qw-mppg-7364/GHSA-m8qw-mppg-7364.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m8qw-mppg-7364",
"modified": "2024-03-20T15:32:29Z",
"modified": "2024-08-01T21:31:39Z",
"published": "2024-03-20T15:32:29Z",
"aliases": [
"CVE-2024-1983"
],
"details": "The Simple Ajax Chat WordPress plugin before 20240223 does not prevent visitors from using malicious Names when using the chat, which will be reflected unsanitized to other users.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-20T05:15:45Z"
advisories/unreviewed/2024/03/GHSA-mxm9-3p22-jh4c/GHSA-mxm9-3p22-jh4c.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mxm9-3p22-jh4c",
"modified": "2024-03-22T12:30:46Z",
"modified": "2024-08-01T21:31:39Z",
"published": "2024-03-22T12:30:46Z",
"aliases": [
"CVE-2024-25168"
],
"details": "SQL injection vulnerability in snow snow v.2.0.0 allows a remote attacker to execute arbitrary code via the dataScope parameter of the system/role/list interface.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-22T12:15:07Z"
advisories/unreviewed/2024/03/GHSA-pmm3-68q9-57jg/GHSA-pmm3-68q9-57jg.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pmm3-68q9-57jg",
"modified": "2024-03-22T06:30:24Z",
"modified": "2024-08-01T21:31:39Z",
"published": "2024-03-22T06:30:24Z",
"aliases": [
"CVE-2024-29272"
],
"details": "Arbitrary File Upload vulnerability in VvvebJs before version 1.7.5, allows unauthenticated remote attackers to execute arbitrary code and obtain sensitive information via the sanitizeFileName parameter in save.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-434"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-22T04:15:11Z"
advisories/unreviewed/2024/05/GHSA-287w-9xcw-2gqp/GHSA-287w-9xcw-2gqp.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-287w-9xcw-2gqp",
"modified": "2024-05-16T09:33:05Z",
"modified": "2024-08-01T21:31:40Z",
"published": "2024-05-16T09:33:05Z",
"aliases": [
"CVE-2024-4962"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2024/05/GHSA-38cv-ch3v-j5cw/GHSA-38cv-ch3v-j5cw.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-38cv-ch3v-j5cw",
"modified": "2024-06-10T18:30:57Z",
"modified": "2024-08-01T21:31:40Z",
"published": "2024-05-08T15:30:43Z",
"aliases": [
"CVE-2024-32113"
],
"details": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue affects Apache OFBiz: before 18.12.13.\n\nUsers are recommended to upgrade to version 18.12.13, which fixes the issue.\n\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
@@ -43,7 +46,7 @@
"cwe_ids": [
"CWE-22"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-08T15:15:10Z"
advisories/unreviewed/2024/05/GHSA-7c5r-r7cr-56w7/GHSA-7c5r-r7cr-56w7.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7c5r-r7cr-56w7",
"modified": "2024-05-16T06:30:51Z",
"modified": "2024-08-01T21:31:40Z",
"published": "2024-05-16T06:30:51Z",
"aliases": [
"CVE-2024-4961"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [

Some files were not shown because too many files have changed in this diff Show More