diff --git a/advisories/github-reviewed/2022/05/GHSA-3gp9-h8hw-pxpw/GHSA-3gp9-h8hw-pxpw.json b/advisories/github-reviewed/2022/05/GHSA-3gp9-h8hw-pxpw/GHSA-3gp9-h8hw-pxpw.json index 58199e2a822..7bd27cd5abd 100644 --- a/advisories/github-reviewed/2022/05/GHSA-3gp9-h8hw-pxpw/GHSA-3gp9-h8hw-pxpw.json +++ b/advisories/github-reviewed/2022/05/GHSA-3gp9-h8hw-pxpw/GHSA-3gp9-h8hw-pxpw.json @@ -1080,9 +1080,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2022-11-01T21:40:37Z", diff --git a/advisories/github-reviewed/2022/05/GHSA-r7p6-fr3x-r877/GHSA-r7p6-fr3x-r877.json b/advisories/github-reviewed/2022/05/GHSA-r7p6-fr3x-r877/GHSA-r7p6-fr3x-r877.json index a73ae5dc2af..60ba937bafd 100644 --- a/advisories/github-reviewed/2022/05/GHSA-r7p6-fr3x-r877/GHSA-r7p6-fr3x-r877.json +++ b/advisories/github-reviewed/2022/05/GHSA-r7p6-fr3x-r877/GHSA-r7p6-fr3x-r877.json @@ -8,9 +8,7 @@ ], "summary": "CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file", "details": "CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a `.php` file, which reveals the installation path in an error message, as demonstrated by `dispatcher.php` and certain other files.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/05/GHSA-rw73-xmpv-j5x2/GHSA-rw73-xmpv-j5x2.json b/advisories/github-reviewed/2022/05/GHSA-rw73-xmpv-j5x2/GHSA-rw73-xmpv-j5x2.json index 82d58fd5386..587f01c28dc 100644 --- a/advisories/github-reviewed/2022/05/GHSA-rw73-xmpv-j5x2/GHSA-rw73-xmpv-j5x2.json +++ b/advisories/github-reviewed/2022/05/GHSA-rw73-xmpv-j5x2/GHSA-rw73-xmpv-j5x2.json @@ -8,9 +8,7 @@ ], "summary": "CakePHP directory traversal vulnerability allows remote attackers to read arbitrary files", "details": "Directory traversal vulnerability in `app/webroot/js/vendors.php` in Cake Software Foundation CakePHP before 1.1.8.3544 allows remote attackers to read arbitrary files via a `..` (dot dot) in the file parameter, followed by a filename ending with `%00` and a `.js` filename.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/05/GHSA-rxg9-xrhp-64gj/GHSA-rxg9-xrhp-64gj.json b/advisories/github-reviewed/2022/05/GHSA-rxg9-xrhp-64gj/GHSA-rxg9-xrhp-64gj.json index 2e5b57600dd..1bf8f369284 100644 --- a/advisories/github-reviewed/2022/05/GHSA-rxg9-xrhp-64gj/GHSA-rxg9-xrhp-64gj.json +++ b/advisories/github-reviewed/2022/05/GHSA-rxg9-xrhp-64gj/GHSA-rxg9-xrhp-64gj.json @@ -69,9 +69,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2022-10-25T17:35:53Z", diff --git a/advisories/github-reviewed/2023/02/GHSA-5x36-7567-3cw6/GHSA-5x36-7567-3cw6.json b/advisories/github-reviewed/2023/02/GHSA-5x36-7567-3cw6/GHSA-5x36-7567-3cw6.json index 3c45be5cca3..ce9719705f7 100644 --- a/advisories/github-reviewed/2023/02/GHSA-5x36-7567-3cw6/GHSA-5x36-7567-3cw6.json +++ b/advisories/github-reviewed/2023/02/GHSA-5x36-7567-3cw6/GHSA-5x36-7567-3cw6.json @@ -3,14 +3,10 @@ "id": "GHSA-5x36-7567-3cw6", "modified": "2023-02-28T20:31:05Z", "published": "2023-02-28T20:31:05Z", - "aliases": [ - - ], + "aliases": [], "summary": "partial_sort contains Out-of-bounds Read in release mode", "details": "Affected versions of this crate were using a debug assertion to validate the `last` parameter of `partial_sort()`. This would allow invalid inputs to cause an out-of-bounds read instead of immediately panicking, when compiled without debug assertions.\n\nAll writes are bounds-checked, so the out-of-bounds memory access is read-only. This also means that the first attempted out-of-bounds write will panic, limiting the possible reads.\n\nThe accessible region is further limited by an initial bounds-checked read at `(last / 2) - 1`, i.e., it is proportional to the size of the vector.\n\nThis bug has been fixed in v0.2.0.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2023/02/GHSA-mrrw-grhq-86gf/GHSA-mrrw-grhq-86gf.json b/advisories/github-reviewed/2023/02/GHSA-mrrw-grhq-86gf/GHSA-mrrw-grhq-86gf.json index 0ae65bd4572..6f4031ef5d3 100644 --- a/advisories/github-reviewed/2023/02/GHSA-mrrw-grhq-86gf/GHSA-mrrw-grhq-86gf.json +++ b/advisories/github-reviewed/2023/02/GHSA-mrrw-grhq-86gf/GHSA-mrrw-grhq-86gf.json @@ -3,14 +3,10 @@ "id": "GHSA-mrrw-grhq-86gf", "modified": "2023-02-28T20:30:10Z", "published": "2023-02-28T20:30:10Z", - "aliases": [ - - ], + "aliases": [], "summary": "Ascii (crate) allows out-of-bounds array indexing in safe code", "details": "Affected version of this crate had implementation of `From<&mut AsciiStr>` for `&mut [u8]` and `&mut str`. This can result in out-of-bounds array indexing in safe code.\n\nThe flaw was corrected in commit [8a6c779](https://github.com/tomprogrammer/rust-ascii/pull/63/commits/8a6c7798c202766bd57d70fb8d12739dd68fb9dc) by removing those impls.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -51,9 +47,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2023-02-28T20:30:10Z", diff --git a/advisories/github-reviewed/2023/03/GHSA-3gxf-9r58-2ghg/GHSA-3gxf-9r58-2ghg.json b/advisories/github-reviewed/2023/03/GHSA-3gxf-9r58-2ghg/GHSA-3gxf-9r58-2ghg.json index 63eac184531..a7d90bf3873 100644 --- a/advisories/github-reviewed/2023/03/GHSA-3gxf-9r58-2ghg/GHSA-3gxf-9r58-2ghg.json +++ b/advisories/github-reviewed/2023/03/GHSA-3gxf-9r58-2ghg/GHSA-3gxf-9r58-2ghg.json @@ -3,14 +3,10 @@ "id": "GHSA-3gxf-9r58-2ghg", "modified": "2023-03-24T22:01:35Z", "published": "2023-03-24T22:01:35Z", - "aliases": [ - - ], + "aliases": [], "summary": "`openssl` `X509NameBuilder::build` returned object is not thread safe", "details": "OpenSSL has a `modified` bit that it can set on on `X509_NAME` objects. If this bit is set then the object is not thread-safe even when it appears the code is not modifying the value.\n\nThanks to David Benjamin (Google) for reporting this issue.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -43,9 +39,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2023-03-24T22:01:35Z", diff --git a/advisories/github-reviewed/2023/03/GHSA-jhjm-5xjg-mpqp/GHSA-jhjm-5xjg-mpqp.json b/advisories/github-reviewed/2023/03/GHSA-jhjm-5xjg-mpqp/GHSA-jhjm-5xjg-mpqp.json index f708e7bc46c..3e65ecf6f82 100644 --- a/advisories/github-reviewed/2023/03/GHSA-jhjm-5xjg-mpqp/GHSA-jhjm-5xjg-mpqp.json +++ b/advisories/github-reviewed/2023/03/GHSA-jhjm-5xjg-mpqp/GHSA-jhjm-5xjg-mpqp.json @@ -50,9 +50,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2023-03-21T22:41:55Z", diff --git a/advisories/github-reviewed/2023/04/GHSA-x2xw-hw8g-6773/GHSA-x2xw-hw8g-6773.json b/advisories/github-reviewed/2023/04/GHSA-x2xw-hw8g-6773/GHSA-x2xw-hw8g-6773.json index e17d41014ea..f53c0d6c59e 100644 --- a/advisories/github-reviewed/2023/04/GHSA-x2xw-hw8g-6773/GHSA-x2xw-hw8g-6773.json +++ b/advisories/github-reviewed/2023/04/GHSA-x2xw-hw8g-6773/GHSA-x2xw-hw8g-6773.json @@ -8,9 +8,7 @@ ], "summary": "govuk_tech_docs vulnerable to unescaped HTML on search results page", "details": "### Impact\n\nPages that are indexed in search results have their entire contents indexed, including any HTML code snippets. These HTML snippets would appear in the search results unsanitised, so it was possible to render arbitrary HTML or run arbitrary scripts.\n\nThis is a low risk security issue; to exploit it, an attacker would need to find a way of committing malicious code to a page indexed by a site that uses tech-docs-gem (which are typically not editable by untrusted users). Their code would also be limited by the relatively short length that's rendered in the corresponding search result. Nevertheless, the XSS would then be triggerable by visiting a pre-constructed URL (/search/index.html?q=some+search+term), which users could be tricked into clicking on through social engineering.\n\n### Patches\n\nThis has been fixed in v3.3.1. HTML is now sanitised in search results.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2023/05/GHSA-hjp3-5g2q-7jww/GHSA-hjp3-5g2q-7jww.json b/advisories/github-reviewed/2023/05/GHSA-hjp3-5g2q-7jww/GHSA-hjp3-5g2q-7jww.json index f8c26632a4e..be62ef71b2f 100644 --- a/advisories/github-reviewed/2023/05/GHSA-hjp3-5g2q-7jww/GHSA-hjp3-5g2q-7jww.json +++ b/advisories/github-reviewed/2023/05/GHSA-hjp3-5g2q-7jww/GHSA-hjp3-5g2q-7jww.json @@ -70,9 +70,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2023-05-01T14:00:47Z", diff --git a/advisories/github-reviewed/2023/05/GHSA-m69h-4frq-vwq7/GHSA-m69h-4frq-vwq7.json b/advisories/github-reviewed/2023/05/GHSA-m69h-4frq-vwq7/GHSA-m69h-4frq-vwq7.json index 28703adc3c5..2a37ac9463c 100644 --- a/advisories/github-reviewed/2023/05/GHSA-m69h-4frq-vwq7/GHSA-m69h-4frq-vwq7.json +++ b/advisories/github-reviewed/2023/05/GHSA-m69h-4frq-vwq7/GHSA-m69h-4frq-vwq7.json @@ -54,9 +54,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2023-05-05T02:21:41Z", diff --git a/advisories/github-reviewed/2023/05/GHSA-mgc4-wqv7-4pxm/GHSA-mgc4-wqv7-4pxm.json b/advisories/github-reviewed/2023/05/GHSA-mgc4-wqv7-4pxm/GHSA-mgc4-wqv7-4pxm.json index a3415f8411c..32192a73533 100644 --- a/advisories/github-reviewed/2023/05/GHSA-mgc4-wqv7-4pxm/GHSA-mgc4-wqv7-4pxm.json +++ b/advisories/github-reviewed/2023/05/GHSA-mgc4-wqv7-4pxm/GHSA-mgc4-wqv7-4pxm.json @@ -3,9 +3,7 @@ "id": "GHSA-mgc4-wqv7-4pxm", "modified": "2023-05-18T17:29:43Z", "published": "2023-05-18T17:29:43Z", - "aliases": [ - - ], + "aliases": [], "summary": "SwiftNIO vulnerable to HTTP request smuggling using malformed Transfer-Encoding header", "details": "### Impact\n\nAffected SwiftNIO systems are vulnerable to request smuggling attacks, in which they parse a given HTTP message differently from other network parties, potentially seeing a different number of requests than other servers. This can lead to failures of authentication, routing, and other issues.\n\nThis vulnerability can be found in the bundled copy of the Node.JS HTTP parser used in the `NIOHTTP1` module.\n\n### Workarounds\n\nNo workaround is available, users must upgrade.\n\n### References\n\nhttps://nodejs.org/en/blog/vulnerability/february-2020-security-releases/#http-request-smuggling-using-malformed-transfer-encoding-header-critical-cve-2019-15605", "severity": [ diff --git a/advisories/github-reviewed/2023/11/GHSA-475v-pq2g-fp9g/GHSA-475v-pq2g-fp9g.json b/advisories/github-reviewed/2023/11/GHSA-475v-pq2g-fp9g/GHSA-475v-pq2g-fp9g.json index d6e12abc666..00fbf2691d2 100644 --- a/advisories/github-reviewed/2023/11/GHSA-475v-pq2g-fp9g/GHSA-475v-pq2g-fp9g.json +++ b/advisories/github-reviewed/2023/11/GHSA-475v-pq2g-fp9g/GHSA-475v-pq2g-fp9g.json @@ -3,14 +3,10 @@ "id": "GHSA-475v-pq2g-fp9g", "modified": "2023-11-08T15:03:09Z", "published": "2023-11-08T15:03:09Z", - "aliases": [ - - ], + "aliases": [], "summary": "s2n-quic potential denial of service via crafted stream frames", "details": "### Impact\nAn issue in s2n-quic could result in unnecessary resource utilization when peers open streams beyond advertised limits.\n\nImpacted versions: <= v1.30.0.\n\n### Patches\nThe patch is included in v1.31.0 [1].\n\n### Workarounds\nThere is no workaround. Applications using s2n-quic should upgrade to the most recent release of s2n-quic.\n\nIf you have any questions or comments about this advisory, we ask that you contact AWS Security via our vulnerability reporting page [2] or directly via email to [aws-security@amazon.com](mailto:aws-security@amazon.com). Please do not create a public GitHub issue.\n\n[1] https://github.com/aws/s2n-quic/releases/tag/v1.31.0\n[2] https://aws.amazon.com/security/vulnerability-reporting\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -54,9 +50,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2023-11-08T15:03:09Z", diff --git a/advisories/unreviewed/2022/04/GHSA-24f9-34c8-68cp/GHSA-24f9-34c8-68cp.json b/advisories/unreviewed/2022/04/GHSA-24f9-34c8-68cp/GHSA-24f9-34c8-68cp.json index e32d2948450..52cb8767672 100644 --- a/advisories/unreviewed/2022/04/GHSA-24f9-34c8-68cp/GHSA-24f9-34c8-68cp.json +++ b/advisories/unreviewed/2022/04/GHSA-24f9-34c8-68cp/GHSA-24f9-34c8-68cp.json @@ -7,12 +7,8 @@ "CVE-2001-0804" ], "details": "Directory traversal vulnerability in story.pl in Interactive Story 1.3 allows a remote attacker to read arbitrary files via a .. (dot dot) attack on the \"next\" parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-24pg-m258-76qq/GHSA-24pg-m258-76qq.json b/advisories/unreviewed/2022/04/GHSA-24pg-m258-76qq/GHSA-24pg-m258-76qq.json index 327e0089817..490fddd5678 100644 --- a/advisories/unreviewed/2022/04/GHSA-24pg-m258-76qq/GHSA-24pg-m258-76qq.json +++ b/advisories/unreviewed/2022/04/GHSA-24pg-m258-76qq/GHSA-24pg-m258-76qq.json @@ -7,12 +7,8 @@ "CVE-2001-0729" ], "details": "Apache 1.3.20 on Windows servers allows remote attackers to bypass the default index page and list directory contents via a URL with a large number of / (slash) characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-25vp-vxhw-85ww/GHSA-25vp-vxhw-85ww.json b/advisories/unreviewed/2022/04/GHSA-25vp-vxhw-85ww/GHSA-25vp-vxhw-85ww.json index 69d415cb81f..79a6983ce46 100644 --- a/advisories/unreviewed/2022/04/GHSA-25vp-vxhw-85ww/GHSA-25vp-vxhw-85ww.json +++ b/advisories/unreviewed/2022/04/GHSA-25vp-vxhw-85ww/GHSA-25vp-vxhw-85ww.json @@ -7,12 +7,8 @@ "CVE-2001-0488" ], "details": "pcltotiff in HP-UX 10.x has unnecessary set group id permissions, which allows local users to cause a denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-277h-m4vc-5wqc/GHSA-277h-m4vc-5wqc.json b/advisories/unreviewed/2022/04/GHSA-277h-m4vc-5wqc/GHSA-277h-m4vc-5wqc.json index 93895dfa48a..4b0addcc51b 100644 --- a/advisories/unreviewed/2022/04/GHSA-277h-m4vc-5wqc/GHSA-277h-m4vc-5wqc.json +++ b/advisories/unreviewed/2022/04/GHSA-277h-m4vc-5wqc/GHSA-277h-m4vc-5wqc.json @@ -7,12 +7,8 @@ "CVE-2001-0719" ], "details": "Buffer overflow in Microsoft Windows Media Player 6.4 allows remote attackers to execute arbitrary code via a malformed Advanced Streaming Format (ASF) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-283r-9v3h-5q9m/GHSA-283r-9v3h-5q9m.json b/advisories/unreviewed/2022/04/GHSA-283r-9v3h-5q9m/GHSA-283r-9v3h-5q9m.json index 3c4537e6cc3..79ebbdce4bc 100644 --- a/advisories/unreviewed/2022/04/GHSA-283r-9v3h-5q9m/GHSA-283r-9v3h-5q9m.json +++ b/advisories/unreviewed/2022/04/GHSA-283r-9v3h-5q9m/GHSA-283r-9v3h-5q9m.json @@ -7,12 +7,8 @@ "CVE-2001-0496" ], "details": "kdesu in kdelibs package creates world readable temporary files containing authentication info, which can allow local users to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2f4r-5cwh-8v4h/GHSA-2f4r-5cwh-8v4h.json b/advisories/unreviewed/2022/04/GHSA-2f4r-5cwh-8v4h/GHSA-2f4r-5cwh-8v4h.json index ef6d1768d4f..be9ab4ee4e8 100644 --- a/advisories/unreviewed/2022/04/GHSA-2f4r-5cwh-8v4h/GHSA-2f4r-5cwh-8v4h.json +++ b/advisories/unreviewed/2022/04/GHSA-2f4r-5cwh-8v4h/GHSA-2f4r-5cwh-8v4h.json @@ -7,12 +7,8 @@ "CVE-2001-0494" ], "details": "Buffer overflow in IPSwitch IMail SMTP server 6.06 and possibly prior versions allows remote attackers to execute arbitrary code via a long From: header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2g7w-59mh-c4mv/GHSA-2g7w-59mh-c4mv.json b/advisories/unreviewed/2022/04/GHSA-2g7w-59mh-c4mv/GHSA-2g7w-59mh-c4mv.json index dec519ebe0e..887f785c7f2 100644 --- a/advisories/unreviewed/2022/04/GHSA-2g7w-59mh-c4mv/GHSA-2g7w-59mh-c4mv.json +++ b/advisories/unreviewed/2022/04/GHSA-2g7w-59mh-c4mv/GHSA-2g7w-59mh-c4mv.json @@ -7,12 +7,8 @@ "CVE-2001-0632" ], "details": "Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a remote attacker to gain additional privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2gjj-x74c-fh87/GHSA-2gjj-x74c-fh87.json b/advisories/unreviewed/2022/04/GHSA-2gjj-x74c-fh87/GHSA-2gjj-x74c-fh87.json index 902b41f51e5..795efcf9aa7 100644 --- a/advisories/unreviewed/2022/04/GHSA-2gjj-x74c-fh87/GHSA-2gjj-x74c-fh87.json +++ b/advisories/unreviewed/2022/04/GHSA-2gjj-x74c-fh87/GHSA-2gjj-x74c-fh87.json @@ -7,12 +7,8 @@ "CVE-2001-0577" ], "details": "recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first command line argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2mmc-p4xh-3fcf/GHSA-2mmc-p4xh-3fcf.json b/advisories/unreviewed/2022/04/GHSA-2mmc-p4xh-3fcf/GHSA-2mmc-p4xh-3fcf.json index c772975238f..afaf667cccc 100644 --- a/advisories/unreviewed/2022/04/GHSA-2mmc-p4xh-3fcf/GHSA-2mmc-p4xh-3fcf.json +++ b/advisories/unreviewed/2022/04/GHSA-2mmc-p4xh-3fcf/GHSA-2mmc-p4xh-3fcf.json @@ -7,12 +7,8 @@ "CVE-2001-0549" ], "details": "Symantec LiveUpdate 1.5 stores proxy passwords in cleartext in a registry key, which could allow local users to obtain the passwords.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2pcg-p7wq-33j6/GHSA-2pcg-p7wq-33j6.json b/advisories/unreviewed/2022/04/GHSA-2pcg-p7wq-33j6/GHSA-2pcg-p7wq-33j6.json index 5ed1596328a..968a883f4b8 100644 --- a/advisories/unreviewed/2022/04/GHSA-2pcg-p7wq-33j6/GHSA-2pcg-p7wq-33j6.json +++ b/advisories/unreviewed/2022/04/GHSA-2pcg-p7wq-33j6/GHSA-2pcg-p7wq-33j6.json @@ -7,12 +7,8 @@ "CVE-2001-0704" ], "details": "tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to discover the full path to the working directory via a URL with a template argument for a file that does not exist.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2qm4-5wpq-jgj4/GHSA-2qm4-5wpq-jgj4.json b/advisories/unreviewed/2022/04/GHSA-2qm4-5wpq-jgj4/GHSA-2qm4-5wpq-jgj4.json index ed727879c97..8a405d8c735 100644 --- a/advisories/unreviewed/2022/04/GHSA-2qm4-5wpq-jgj4/GHSA-2qm4-5wpq-jgj4.json +++ b/advisories/unreviewed/2022/04/GHSA-2qm4-5wpq-jgj4/GHSA-2qm4-5wpq-jgj4.json @@ -7,12 +7,8 @@ "CVE-2001-0805" ], "details": "Directory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to read arbitrary files via a .. (dot dot) in the pg parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2r4r-h566-5q6r/GHSA-2r4r-h566-5q6r.json b/advisories/unreviewed/2022/04/GHSA-2r4r-h566-5q6r/GHSA-2r4r-h566-5q6r.json index bd4078375ee..aec611b2279 100644 --- a/advisories/unreviewed/2022/04/GHSA-2r4r-h566-5q6r/GHSA-2r4r-h566-5q6r.json +++ b/advisories/unreviewed/2022/04/GHSA-2r4r-h566-5q6r/GHSA-2r4r-h566-5q6r.json @@ -7,12 +7,8 @@ "CVE-2001-0675" ], "details": "Rit Research Labs The Bat! 1.51 for Windows allows a remote attacker to cause a denial of service by sending an email to a user's account containing a carriage return that is not followed by a line feed .", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2wgc-2cv4-ww9r/GHSA-2wgc-2cv4-ww9r.json b/advisories/unreviewed/2022/04/GHSA-2wgc-2cv4-ww9r/GHSA-2wgc-2cv4-ww9r.json index cefe417ae1e..b166acad5ad 100644 --- a/advisories/unreviewed/2022/04/GHSA-2wgc-2cv4-ww9r/GHSA-2wgc-2cv4-ww9r.json +++ b/advisories/unreviewed/2022/04/GHSA-2wgc-2cv4-ww9r/GHSA-2wgc-2cv4-ww9r.json @@ -7,12 +7,8 @@ "CVE-2001-0679" ], "details": "A buffer overflow in InterScan VirusWall 3.23 and 3.3 allows a remote attacker to execute arbitrary code by sending a long HELO command to the server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2x3x-ch63-vcqp/GHSA-2x3x-ch63-vcqp.json b/advisories/unreviewed/2022/04/GHSA-2x3x-ch63-vcqp/GHSA-2x3x-ch63-vcqp.json index 444730ff6bd..bea038decc0 100644 --- a/advisories/unreviewed/2022/04/GHSA-2x3x-ch63-vcqp/GHSA-2x3x-ch63-vcqp.json +++ b/advisories/unreviewed/2022/04/GHSA-2x3x-ch63-vcqp/GHSA-2x3x-ch63-vcqp.json @@ -7,12 +7,8 @@ "CVE-2001-0705" ], "details": "Directory traversal vulnerability in tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to read arbitrary files on the web server via a URL with \"dot dot\" sequences in the template argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-35hr-3jc6-7qrp/GHSA-35hr-3jc6-7qrp.json b/advisories/unreviewed/2022/04/GHSA-35hr-3jc6-7qrp/GHSA-35hr-3jc6-7qrp.json index 30a30f3c29d..e83b4057a35 100644 --- a/advisories/unreviewed/2022/04/GHSA-35hr-3jc6-7qrp/GHSA-35hr-3jc6-7qrp.json +++ b/advisories/unreviewed/2022/04/GHSA-35hr-3jc6-7qrp/GHSA-35hr-3jc6-7qrp.json @@ -7,12 +7,8 @@ "CVE-2001-0664" ], "details": "Internet Explorer 5.5 and 5.01 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the \"Zone Spoofing vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-37xh-63cr-2v48/GHSA-37xh-63cr-2v48.json b/advisories/unreviewed/2022/04/GHSA-37xh-63cr-2v48/GHSA-37xh-63cr-2v48.json index 3c49b4028fd..67fcdf97799 100644 --- a/advisories/unreviewed/2022/04/GHSA-37xh-63cr-2v48/GHSA-37xh-63cr-2v48.json +++ b/advisories/unreviewed/2022/04/GHSA-37xh-63cr-2v48/GHSA-37xh-63cr-2v48.json @@ -7,12 +7,8 @@ "CVE-2001-0570" ], "details": "minicom 1.83.1 and earlier allows a local attacker to gain additional privileges via numerous format string attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3cfx-pw87-g2gg/GHSA-3cfx-pw87-g2gg.json b/advisories/unreviewed/2022/04/GHSA-3cfx-pw87-g2gg/GHSA-3cfx-pw87-g2gg.json index bedad0e3143..0cd2b3c81ad 100644 --- a/advisories/unreviewed/2022/04/GHSA-3cfx-pw87-g2gg/GHSA-3cfx-pw87-g2gg.json +++ b/advisories/unreviewed/2022/04/GHSA-3cfx-pw87-g2gg/GHSA-3cfx-pw87-g2gg.json @@ -7,12 +7,8 @@ "CVE-2001-0833" ], "details": "Buffer overflow in otrcrep in Oracle 8.0.x through 9.0.1 allows local users to execute arbitrary code via a long ORACLE_HOME environment variable, aka the \"Oracle Trace Collection Security Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3chf-9q2g-qc3v/GHSA-3chf-9q2g-qc3v.json b/advisories/unreviewed/2022/04/GHSA-3chf-9q2g-qc3v/GHSA-3chf-9q2g-qc3v.json index e19eb3d544e..2acf6f94e4b 100644 --- a/advisories/unreviewed/2022/04/GHSA-3chf-9q2g-qc3v/GHSA-3chf-9q2g-qc3v.json +++ b/advisories/unreviewed/2022/04/GHSA-3chf-9q2g-qc3v/GHSA-3chf-9q2g-qc3v.json @@ -7,12 +7,8 @@ "CVE-2001-0701" ], "details": "Buffer overflow in ptexec in the Sun Validation Test Suite 4.3 and earlier allows a local user to gain privileges via a long -o argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3fr2-x8c2-c8pr/GHSA-3fr2-x8c2-c8pr.json b/advisories/unreviewed/2022/04/GHSA-3fr2-x8c2-c8pr/GHSA-3fr2-x8c2-c8pr.json index c52cc48cbb0..21c33636971 100644 --- a/advisories/unreviewed/2022/04/GHSA-3fr2-x8c2-c8pr/GHSA-3fr2-x8c2-c8pr.json +++ b/advisories/unreviewed/2022/04/GHSA-3fr2-x8c2-c8pr/GHSA-3fr2-x8c2-c8pr.json @@ -7,12 +7,8 @@ "CVE-2001-0646" ], "details": "Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 allows a remote attacker to perform a denial of service (hang) by creating a directory name of a specific length.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3grw-4p5f-54jg/GHSA-3grw-4p5f-54jg.json b/advisories/unreviewed/2022/04/GHSA-3grw-4p5f-54jg/GHSA-3grw-4p5f-54jg.json index 5dedf6ac2cd..312cbef16bd 100644 --- a/advisories/unreviewed/2022/04/GHSA-3grw-4p5f-54jg/GHSA-3grw-4p5f-54jg.json +++ b/advisories/unreviewed/2022/04/GHSA-3grw-4p5f-54jg/GHSA-3grw-4p5f-54jg.json @@ -7,12 +7,8 @@ "CVE-2001-0678" ], "details": "A buffer overflow in reggo.dll file used by Trend Micro InterScan VirusWall prior to 3.51 build 1349 for Windows NT 3.5 and InterScan WebManager 1.2 allows a local attacker to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3hq4-xvv4-32rv/GHSA-3hq4-xvv4-32rv.json b/advisories/unreviewed/2022/04/GHSA-3hq4-xvv4-32rv/GHSA-3hq4-xvv4-32rv.json index 5fb059dc06d..6d6d0c00f58 100644 --- a/advisories/unreviewed/2022/04/GHSA-3hq4-xvv4-32rv/GHSA-3hq4-xvv4-32rv.json +++ b/advisories/unreviewed/2022/04/GHSA-3hq4-xvv4-32rv/GHSA-3hq4-xvv4-32rv.json @@ -7,12 +7,8 @@ "CVE-2001-0543" ], "details": "Memory leak in NNTP service in Windows NT 4.0 and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed posts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-3m99-vrqx-m6h7/GHSA-3m99-vrqx-m6h7.json b/advisories/unreviewed/2022/04/GHSA-3m99-vrqx-m6h7/GHSA-3m99-vrqx-m6h7.json index 27c5a5ef5b7..16241bd3150 100644 --- a/advisories/unreviewed/2022/04/GHSA-3m99-vrqx-m6h7/GHSA-3m99-vrqx-m6h7.json +++ b/advisories/unreviewed/2022/04/GHSA-3m99-vrqx-m6h7/GHSA-3m99-vrqx-m6h7.json @@ -7,12 +7,8 @@ "CVE-2001-0537" ], "details": "HTTP server for Cisco IOS 11.3 to 12.2 allows attackers to bypass authentication and execute arbitrary commands, when local authorization is being used, by specifying a high access level in the URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-3p45-phfh-52wq/GHSA-3p45-phfh-52wq.json b/advisories/unreviewed/2022/04/GHSA-3p45-phfh-52wq/GHSA-3p45-phfh-52wq.json index 08b9d91f7f4..2b1b3895679 100644 --- a/advisories/unreviewed/2022/04/GHSA-3p45-phfh-52wq/GHSA-3p45-phfh-52wq.json +++ b/advisories/unreviewed/2022/04/GHSA-3p45-phfh-52wq/GHSA-3p45-phfh-52wq.json @@ -7,12 +7,8 @@ "CVE-2001-0698" ], "details": "Directory traversal vulnerability in NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to list arbitrary files and directories via the 'nlist ...' command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3pqf-w3gx-274j/GHSA-3pqf-w3gx-274j.json b/advisories/unreviewed/2022/04/GHSA-3pqf-w3gx-274j/GHSA-3pqf-w3gx-274j.json index 4ae41421007..c8dedbd9686 100644 --- a/advisories/unreviewed/2022/04/GHSA-3pqf-w3gx-274j/GHSA-3pqf-w3gx-274j.json +++ b/advisories/unreviewed/2022/04/GHSA-3pqf-w3gx-274j/GHSA-3pqf-w3gx-274j.json @@ -7,12 +7,8 @@ "CVE-2001-0519" ], "details": "Aladdin eSafe Gateway versions 2.x allows a remote attacker to circumvent HTML SCRIPT filtering via a special arrangement of HTML tags which includes SCRIPT tags embedded within other SCRIPT tags.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3q6v-jv77-fpxc/GHSA-3q6v-jv77-fpxc.json b/advisories/unreviewed/2022/04/GHSA-3q6v-jv77-fpxc/GHSA-3q6v-jv77-fpxc.json index 6dc2e4ac906..541c30ab978 100644 --- a/advisories/unreviewed/2022/04/GHSA-3q6v-jv77-fpxc/GHSA-3q6v-jv77-fpxc.json +++ b/advisories/unreviewed/2022/04/GHSA-3q6v-jv77-fpxc/GHSA-3q6v-jv77-fpxc.json @@ -7,12 +7,8 @@ "CVE-2001-0782" ], "details": "KDE ktvision 0.1.1-271 and earlier allows local attackers to gain root privileges via a symlink attack on a user configuration file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3r34-w4xc-wf2m/GHSA-3r34-w4xc-wf2m.json b/advisories/unreviewed/2022/04/GHSA-3r34-w4xc-wf2m/GHSA-3r34-w4xc-wf2m.json index 36a90bfa7e9..04a2ae7933a 100644 --- a/advisories/unreviewed/2022/04/GHSA-3r34-w4xc-wf2m/GHSA-3r34-w4xc-wf2m.json +++ b/advisories/unreviewed/2022/04/GHSA-3r34-w4xc-wf2m/GHSA-3r34-w4xc-wf2m.json @@ -7,12 +7,8 @@ "CVE-2001-0742" ], "details": "Buffer overflow in Computalynx CMail POP3 mail server 2.4.9 allows remote attackers to run arbitrary code via a long HELO command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3rw6-mp6q-pg53/GHSA-3rw6-mp6q-pg53.json b/advisories/unreviewed/2022/04/GHSA-3rw6-mp6q-pg53/GHSA-3rw6-mp6q-pg53.json index e882da4daa6..4d674c4ca8a 100644 --- a/advisories/unreviewed/2022/04/GHSA-3rw6-mp6q-pg53/GHSA-3rw6-mp6q-pg53.json +++ b/advisories/unreviewed/2022/04/GHSA-3rw6-mp6q-pg53/GHSA-3rw6-mp6q-pg53.json @@ -7,12 +7,8 @@ "CVE-2001-0596" ], "details": "Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3vhr-9x24-76hj/GHSA-3vhr-9x24-76hj.json b/advisories/unreviewed/2022/04/GHSA-3vhr-9x24-76hj/GHSA-3vhr-9x24-76hj.json index ce361c7df68..6f9812ebc79 100644 --- a/advisories/unreviewed/2022/04/GHSA-3vhr-9x24-76hj/GHSA-3vhr-9x24-76hj.json +++ b/advisories/unreviewed/2022/04/GHSA-3vhr-9x24-76hj/GHSA-3vhr-9x24-76hj.json @@ -7,12 +7,8 @@ "CVE-2001-0724" ], "details": "Internet Explorer 5.5 allows remote attackers to bypass security restrictions via malformed URLs that contain dotless IP addresses, which causes Internet Explorer to process the page in the Intranet Zone, which may have fewer security restrictions, aka the \"Zone Spoofing Vulnerability variant\" of CVE-2001-0664.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3xc3-m57q-hj7g/GHSA-3xc3-m57q-hj7g.json b/advisories/unreviewed/2022/04/GHSA-3xc3-m57q-hj7g/GHSA-3xc3-m57q-hj7g.json index c69b7bb2df6..76ad32afde7 100644 --- a/advisories/unreviewed/2022/04/GHSA-3xc3-m57q-hj7g/GHSA-3xc3-m57q-hj7g.json +++ b/advisories/unreviewed/2022/04/GHSA-3xc3-m57q-hj7g/GHSA-3xc3-m57q-hj7g.json @@ -7,12 +7,8 @@ "CVE-2001-0626" ], "details": "O'Reilly Website Professional 2.5.4 and earlier allows remote attackers to determine the physical path to the root directory via a URL request containing a \":\" character.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-428r-jfg5-x94p/GHSA-428r-jfg5-x94p.json b/advisories/unreviewed/2022/04/GHSA-428r-jfg5-x94p/GHSA-428r-jfg5-x94p.json index c4d6c817549..807988870af 100644 --- a/advisories/unreviewed/2022/04/GHSA-428r-jfg5-x94p/GHSA-428r-jfg5-x94p.json +++ b/advisories/unreviewed/2022/04/GHSA-428r-jfg5-x94p/GHSA-428r-jfg5-x94p.json @@ -7,12 +7,8 @@ "CVE-2001-0764" ], "details": "Buffer overflow in ntping in scotty 2.1.0 allows local users to execute arbitrary code via a long hostname as a command line argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-432r-vhq4-vhjx/GHSA-432r-vhq4-vhjx.json b/advisories/unreviewed/2022/04/GHSA-432r-vhq4-vhjx/GHSA-432r-vhq4-vhjx.json index 5e62c050837..6311bf08914 100644 --- a/advisories/unreviewed/2022/04/GHSA-432r-vhq4-vhjx/GHSA-432r-vhq4-vhjx.json +++ b/advisories/unreviewed/2022/04/GHSA-432r-vhq4-vhjx/GHSA-432r-vhq4-vhjx.json @@ -7,12 +7,8 @@ "CVE-2001-0635" ], "details": "Red Hat Linux 7.1 sets insecure permissions on swap files created during installation, which can allow a local attacker to gain additional privileges by reading sensitive information from the swap file, such as passwords.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-46c6-wcjc-4jq6/GHSA-46c6-wcjc-4jq6.json b/advisories/unreviewed/2022/04/GHSA-46c6-wcjc-4jq6/GHSA-46c6-wcjc-4jq6.json index e427aee9634..353187c51a3 100644 --- a/advisories/unreviewed/2022/04/GHSA-46c6-wcjc-4jq6/GHSA-46c6-wcjc-4jq6.json +++ b/advisories/unreviewed/2022/04/GHSA-46c6-wcjc-4jq6/GHSA-46c6-wcjc-4jq6.json @@ -7,12 +7,8 @@ "CVE-2001-0618" ], "details": "Orinoco RG-1000 wireless Residential Gateway uses the last 5 digits of the 'Network Name' or SSID as the default Wired Equivalent Privacy (WEP) encryption key. Since the SSID occurs in the clear during communications, a remote attacker could determine the WEP key and decrypt RG-1000 traffic.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-46vx-93wq-r354/GHSA-46vx-93wq-r354.json b/advisories/unreviewed/2022/04/GHSA-46vx-93wq-r354/GHSA-46vx-93wq-r354.json index 7b31e6d8c76..f231276356a 100644 --- a/advisories/unreviewed/2022/04/GHSA-46vx-93wq-r354/GHSA-46vx-93wq-r354.json +++ b/advisories/unreviewed/2022/04/GHSA-46vx-93wq-r354/GHSA-46vx-93wq-r354.json @@ -7,12 +7,8 @@ "CVE-2001-0842" ], "details": "Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-473v-8xrg-7236/GHSA-473v-8xrg-7236.json b/advisories/unreviewed/2022/04/GHSA-473v-8xrg-7236/GHSA-473v-8xrg-7236.json index c716ed0fab4..198896b37dd 100644 --- a/advisories/unreviewed/2022/04/GHSA-473v-8xrg-7236/GHSA-473v-8xrg-7236.json +++ b/advisories/unreviewed/2022/04/GHSA-473v-8xrg-7236/GHSA-473v-8xrg-7236.json @@ -7,12 +7,8 @@ "CVE-2001-0523" ], "details": "eEye SecureIIS versions 1.0.3 and earlier allows a remote attacker to bypass filtering of requests made to SecureIIS by escaping HTML characters within the request, which could allow a remote attacker to use restricted variables and perform directory traversal attacks on vulnerable programs that would otherwise be protected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-47jp-q4w3-c7fm/GHSA-47jp-q4w3-c7fm.json b/advisories/unreviewed/2022/04/GHSA-47jp-q4w3-c7fm/GHSA-47jp-q4w3-c7fm.json index 2d7ee51ed0f..74302489f4a 100644 --- a/advisories/unreviewed/2022/04/GHSA-47jp-q4w3-c7fm/GHSA-47jp-q4w3-c7fm.json +++ b/advisories/unreviewed/2022/04/GHSA-47jp-q4w3-c7fm/GHSA-47jp-q4w3-c7fm.json @@ -7,12 +7,8 @@ "CVE-2001-0487" ], "details": "AIX SNMP server snmpd allows remote attackers to cause a denial of service via a RST during the TCP connection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4876-9pfh-883m/GHSA-4876-9pfh-883m.json b/advisories/unreviewed/2022/04/GHSA-4876-9pfh-883m/GHSA-4876-9pfh-883m.json index 70cc1d3651a..e482a4a3600 100644 --- a/advisories/unreviewed/2022/04/GHSA-4876-9pfh-883m/GHSA-4876-9pfh-883m.json +++ b/advisories/unreviewed/2022/04/GHSA-4876-9pfh-883m/GHSA-4876-9pfh-883m.json @@ -7,12 +7,8 @@ "CVE-2001-0603" ], "details": "Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeatedly sending large (> 10Kb) amounts of data to the DIIOP - CORBA service on TCP port 63148.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-48q5-2vm3-g897/GHSA-48q5-2vm3-g897.json b/advisories/unreviewed/2022/04/GHSA-48q5-2vm3-g897/GHSA-48q5-2vm3-g897.json index fcd4b0c4466..b23e2bb7fa5 100644 --- a/advisories/unreviewed/2022/04/GHSA-48q5-2vm3-g897/GHSA-48q5-2vm3-g897.json +++ b/advisories/unreviewed/2022/04/GHSA-48q5-2vm3-g897/GHSA-48q5-2vm3-g897.json @@ -7,12 +7,8 @@ "CVE-2001-0541" ], "details": "Buffer overflow in Microsoft Windows Media Player 7.1 and earlier allows remote attackers to execute arbitrary commands via a malformed Windows Media Station (.NSC) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-498h-q6g5-5x85/GHSA-498h-q6g5-5x85.json b/advisories/unreviewed/2022/04/GHSA-498h-q6g5-5x85/GHSA-498h-q6g5-5x85.json index 8abeda9d4f6..7424ebafa90 100644 --- a/advisories/unreviewed/2022/04/GHSA-498h-q6g5-5x85/GHSA-498h-q6g5-5x85.json +++ b/advisories/unreviewed/2022/04/GHSA-498h-q6g5-5x85/GHSA-498h-q6g5-5x85.json @@ -7,12 +7,8 @@ "CVE-2001-0776" ], "details": "Buffer overflow in DynFX MailServer version 2.10 allows remote attackers to conduct a denial of service via a long username to the POP3 service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-49cp-mq89-xq82/GHSA-49cp-mq89-xq82.json b/advisories/unreviewed/2022/04/GHSA-49cp-mq89-xq82/GHSA-49cp-mq89-xq82.json index 5e7a3c1c368..a6e06d17e84 100644 --- a/advisories/unreviewed/2022/04/GHSA-49cp-mq89-xq82/GHSA-49cp-mq89-xq82.json +++ b/advisories/unreviewed/2022/04/GHSA-49cp-mq89-xq82/GHSA-49cp-mq89-xq82.json @@ -7,12 +7,8 @@ "CVE-2001-0835" ], "details": "Cross-site scripting vulnerability in Webalizer 2.01-06, and possibly other versions, allows remote attackers to inject arbitrary HTML tags by specifying them in (1) search keywords embedded in HTTP referrer information, or (2) host names that are retrieved via a reverse DNS lookup.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4cm7-6h7r-qm2p/GHSA-4cm7-6h7r-qm2p.json b/advisories/unreviewed/2022/04/GHSA-4cm7-6h7r-qm2p/GHSA-4cm7-6h7r-qm2p.json index d4a8fb25bb9..c206320f096 100644 --- a/advisories/unreviewed/2022/04/GHSA-4cm7-6h7r-qm2p/GHSA-4cm7-6h7r-qm2p.json +++ b/advisories/unreviewed/2022/04/GHSA-4cm7-6h7r-qm2p/GHSA-4cm7-6h7r-qm2p.json @@ -7,12 +7,8 @@ "CVE-2001-0775" ], "details": "Buffer overflow in xloadimage 4.1 (aka xli 1.16 and 1.17) in Linux allows remote attackers to execute arbitrary code via a FACES format image containing a long (1) Firstname or (2) Lastname field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-4fm7-gv4j-hx3r/GHSA-4fm7-gv4j-hx3r.json b/advisories/unreviewed/2022/04/GHSA-4fm7-gv4j-hx3r/GHSA-4fm7-gv4j-hx3r.json index a39b7b9a8a0..a336410f37b 100644 --- a/advisories/unreviewed/2022/04/GHSA-4fm7-gv4j-hx3r/GHSA-4fm7-gv4j-hx3r.json +++ b/advisories/unreviewed/2022/04/GHSA-4fm7-gv4j-hx3r/GHSA-4fm7-gv4j-hx3r.json @@ -7,12 +7,8 @@ "CVE-2001-0740" ], "details": "3COM OfficeConnect 812 and 840 ADSL Router 4.2, running OCR812 router software 1.1.9 and earlier, allows remote attackers to cause a denial of service via a long string containing a large number of \"%s\" strings, possibly triggering a format string vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4g2c-h3mq-5rv5/GHSA-4g2c-h3mq-5rv5.json b/advisories/unreviewed/2022/04/GHSA-4g2c-h3mq-5rv5/GHSA-4g2c-h3mq-5rv5.json index 6ca3c90a3ed..8854e509589 100644 --- a/advisories/unreviewed/2022/04/GHSA-4g2c-h3mq-5rv5/GHSA-4g2c-h3mq-5rv5.json +++ b/advisories/unreviewed/2022/04/GHSA-4g2c-h3mq-5rv5/GHSA-4g2c-h3mq-5rv5.json @@ -7,12 +7,8 @@ "CVE-2001-0631" ], "details": "Centrinity First Class Internet Services 5.50 allows for the circumventing of the default 'spam' filters via the presence of '<@>' in the 'From:' field, which allows remote attackers to send spoofed email with the identity of local users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4g4h-9c64-2wvp/GHSA-4g4h-9c64-2wvp.json b/advisories/unreviewed/2022/04/GHSA-4g4h-9c64-2wvp/GHSA-4g4h-9c64-2wvp.json index 607eac1dde4..4a0210d9e04 100644 --- a/advisories/unreviewed/2022/04/GHSA-4g4h-9c64-2wvp/GHSA-4g4h-9c64-2wvp.json +++ b/advisories/unreviewed/2022/04/GHSA-4g4h-9c64-2wvp/GHSA-4g4h-9c64-2wvp.json @@ -7,12 +7,8 @@ "CVE-2001-0760" ], "details": "Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch.asp that does not provide the session field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4j6c-74jw-w252/GHSA-4j6c-74jw-w252.json b/advisories/unreviewed/2022/04/GHSA-4j6c-74jw-w252/GHSA-4j6c-74jw-w252.json index 244599b91d0..3af9bb79126 100644 --- a/advisories/unreviewed/2022/04/GHSA-4j6c-74jw-w252/GHSA-4j6c-74jw-w252.json +++ b/advisories/unreviewed/2022/04/GHSA-4j6c-74jw-w252/GHSA-4j6c-74jw-w252.json @@ -7,12 +7,8 @@ "CVE-2001-0628" ], "details": "Microsoft Word 2000 does not check AutoRecovery (.asd) files for macros, which allows a local attacker to execute arbitrary macros with the user ID of the Word user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4jfp-q875-j8vm/GHSA-4jfp-q875-j8vm.json b/advisories/unreviewed/2022/04/GHSA-4jfp-q875-j8vm/GHSA-4jfp-q875-j8vm.json index eb960331f21..62ccc588553 100644 --- a/advisories/unreviewed/2022/04/GHSA-4jfp-q875-j8vm/GHSA-4jfp-q875-j8vm.json +++ b/advisories/unreviewed/2022/04/GHSA-4jfp-q875-j8vm/GHSA-4jfp-q875-j8vm.json @@ -7,12 +7,8 @@ "CVE-2001-0547" ], "details": "Memory leak in the proxy service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows local attackers to cause a denial of service (resource exhaustion).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4jh6-gh8q-jcwr/GHSA-4jh6-gh8q-jcwr.json b/advisories/unreviewed/2022/04/GHSA-4jh6-gh8q-jcwr/GHSA-4jh6-gh8q-jcwr.json index f952afcd57e..4a04af4ffd4 100644 --- a/advisories/unreviewed/2022/04/GHSA-4jh6-gh8q-jcwr/GHSA-4jh6-gh8q-jcwr.json +++ b/advisories/unreviewed/2022/04/GHSA-4jh6-gh8q-jcwr/GHSA-4jh6-gh8q-jcwr.json @@ -7,12 +7,8 @@ "CVE-2001-0478" ], "details": "Directory traversal vulnerability in phpMyAdmin 2.2.0 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4jrf-5jjq-9v28/GHSA-4jrf-5jjq-9v28.json b/advisories/unreviewed/2022/04/GHSA-4jrf-5jjq-9v28/GHSA-4jrf-5jjq-9v28.json index 89f240fc9ea..c121fb2d22d 100644 --- a/advisories/unreviewed/2022/04/GHSA-4jrf-5jjq-9v28/GHSA-4jrf-5jjq-9v28.json +++ b/advisories/unreviewed/2022/04/GHSA-4jrf-5jjq-9v28/GHSA-4jrf-5jjq-9v28.json @@ -7,12 +7,8 @@ "CVE-2001-0553" ], "details": "SSH Secure Shell 3.0.0 on Unix systems does not properly perform password authentication to the sshd2 daemon, which allows local users to gain access to accounts with short password fields, such as locked accounts that use \"NP\" in the password field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4m9v-c2fv-vcv2/GHSA-4m9v-c2fv-vcv2.json b/advisories/unreviewed/2022/04/GHSA-4m9v-c2fv-vcv2/GHSA-4m9v-c2fv-vcv2.json index c828553a01a..f03e8286192 100644 --- a/advisories/unreviewed/2022/04/GHSA-4m9v-c2fv-vcv2/GHSA-4m9v-c2fv-vcv2.json +++ b/advisories/unreviewed/2022/04/GHSA-4m9v-c2fv-vcv2/GHSA-4m9v-c2fv-vcv2.json @@ -7,12 +7,8 @@ "CVE-2001-0565" ], "details": "Buffer overflow in mailx in Solaris 8 and earlier allows a local attacker to gain additional privileges via a long '-F' command line option.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4pfw-m3q5-m9v8/GHSA-4pfw-m3q5-m9v8.json b/advisories/unreviewed/2022/04/GHSA-4pfw-m3q5-m9v8/GHSA-4pfw-m3q5-m9v8.json index b8b88bf9aac..40b759d3e5d 100644 --- a/advisories/unreviewed/2022/04/GHSA-4pfw-m3q5-m9v8/GHSA-4pfw-m3q5-m9v8.json +++ b/advisories/unreviewed/2022/04/GHSA-4pfw-m3q5-m9v8/GHSA-4pfw-m3q5-m9v8.json @@ -7,12 +7,8 @@ "CVE-2001-0535" ], "details": "Example applications (Exampleapps) in ColdFusion Server 4.x do not properly restrict prevent access from outside the local host's domain, which allows remote attackers to conduct upload, read, or execute files by spoofing the \"HTTP Host\" (CGI.Host) variable in (1) the \"Web Publish\" example script, and (2) the \"Email\" example script.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4x46-r7gx-8cp5/GHSA-4x46-r7gx-8cp5.json b/advisories/unreviewed/2022/04/GHSA-4x46-r7gx-8cp5/GHSA-4x46-r7gx-8cp5.json index eac90fa1e5d..244ed0026e2 100644 --- a/advisories/unreviewed/2022/04/GHSA-4x46-r7gx-8cp5/GHSA-4x46-r7gx-8cp5.json +++ b/advisories/unreviewed/2022/04/GHSA-4x46-r7gx-8cp5/GHSA-4x46-r7gx-8cp5.json @@ -7,12 +7,8 @@ "CVE-2001-0755" ], "details": "Buffer overflow in ftp daemon (ftpd) 6.2 in Debian GNU/Linux allows attackers to cause a denial of service and possibly execute arbitrary code via a long SITE command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-58wf-w6hc-fcfx/GHSA-58wf-w6hc-fcfx.json b/advisories/unreviewed/2022/04/GHSA-58wf-w6hc-fcfx/GHSA-58wf-w6hc-fcfx.json index 334e77a9654..72bf509c7d6 100644 --- a/advisories/unreviewed/2022/04/GHSA-58wf-w6hc-fcfx/GHSA-58wf-w6hc-fcfx.json +++ b/advisories/unreviewed/2022/04/GHSA-58wf-w6hc-fcfx/GHSA-58wf-w6hc-fcfx.json @@ -7,12 +7,8 @@ "CVE-2001-0552" ], "details": "ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-59h7-cqx3-mx33/GHSA-59h7-cqx3-mx33.json b/advisories/unreviewed/2022/04/GHSA-59h7-cqx3-mx33/GHSA-59h7-cqx3-mx33.json index afaff0133b7..34623b33f1d 100644 --- a/advisories/unreviewed/2022/04/GHSA-59h7-cqx3-mx33/GHSA-59h7-cqx3-mx33.json +++ b/advisories/unreviewed/2022/04/GHSA-59h7-cqx3-mx33/GHSA-59h7-cqx3-mx33.json @@ -7,12 +7,8 @@ "CVE-2001-0522" ], "details": "Format string vulnerability in Gnu Privacy Guard (aka GnuPG or gpg) 1.05 and earlier can allow an attacker to gain privileges via format strings in the original filename that is stored in an encrypted file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5f24-vx32-7w83/GHSA-5f24-vx32-7w83.json b/advisories/unreviewed/2022/04/GHSA-5f24-vx32-7w83/GHSA-5f24-vx32-7w83.json index 7554a6cf4e3..20a8aff53ad 100644 --- a/advisories/unreviewed/2022/04/GHSA-5f24-vx32-7w83/GHSA-5f24-vx32-7w83.json +++ b/advisories/unreviewed/2022/04/GHSA-5f24-vx32-7w83/GHSA-5f24-vx32-7w83.json @@ -7,12 +7,8 @@ "CVE-2001-0611" ], "details": "Becky! 2.00.05 and earlier can allow a remote attacker to gain additional privileges via a buffer overflow attack on long messages without newline characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5jpm-5xp5-m5wv/GHSA-5jpm-5xp5-m5wv.json b/advisories/unreviewed/2022/04/GHSA-5jpm-5xp5-m5wv/GHSA-5jpm-5xp5-m5wv.json index 2de73229136..368ef8bed45 100644 --- a/advisories/unreviewed/2022/04/GHSA-5jpm-5xp5-m5wv/GHSA-5jpm-5xp5-m5wv.json +++ b/advisories/unreviewed/2022/04/GHSA-5jpm-5xp5-m5wv/GHSA-5jpm-5xp5-m5wv.json @@ -7,12 +7,8 @@ "CVE-2001-0575" ], "details": "Buffer overflow in lpshut in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a long first argument to lpshut.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5m2j-5xgp-rhp5/GHSA-5m2j-5xgp-rhp5.json b/advisories/unreviewed/2022/04/GHSA-5m2j-5xgp-rhp5/GHSA-5m2j-5xgp-rhp5.json index fccd1b279ba..df7c75c3df8 100644 --- a/advisories/unreviewed/2022/04/GHSA-5m2j-5xgp-rhp5/GHSA-5m2j-5xgp-rhp5.json +++ b/advisories/unreviewed/2022/04/GHSA-5m2j-5xgp-rhp5/GHSA-5m2j-5xgp-rhp5.json @@ -7,12 +7,8 @@ "CVE-2001-0786" ], "details": "Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 stores user passwords in plaintext in the pUser.Dat file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5pm6-5rq5-p2j6/GHSA-5pm6-5rq5-p2j6.json b/advisories/unreviewed/2022/04/GHSA-5pm6-5rq5-p2j6/GHSA-5pm6-5rq5-p2j6.json index 76548bbc802..ab6bfc2e29b 100644 --- a/advisories/unreviewed/2022/04/GHSA-5pm6-5rq5-p2j6/GHSA-5pm6-5rq5-p2j6.json +++ b/advisories/unreviewed/2022/04/GHSA-5pm6-5rq5-p2j6/GHSA-5pm6-5rq5-p2j6.json @@ -7,12 +7,8 @@ "CVE-2001-0847" ], "details": "Lotus Domino Web Server 5.x allows remote attackers to gain sensitive information by accessing the default navigator $defaultNav via (1) URL encoding the request, or (2) directly requesting the ReplicaID.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5prc-wx72-q987/GHSA-5prc-wx72-q987.json b/advisories/unreviewed/2022/04/GHSA-5prc-wx72-q987/GHSA-5prc-wx72-q987.json index 5bb72a1bfb1..5a961ad7d06 100644 --- a/advisories/unreviewed/2022/04/GHSA-5prc-wx72-q987/GHSA-5prc-wx72-q987.json +++ b/advisories/unreviewed/2022/04/GHSA-5prc-wx72-q987/GHSA-5prc-wx72-q987.json @@ -7,12 +7,8 @@ "CVE-2001-0491" ], "details": "Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside the ftp root via dot dot attacks, such as (1) .... in CWD, (2) .. in NLST, or (3) ... in NLST.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5qjv-rqph-2fm2/GHSA-5qjv-rqph-2fm2.json b/advisories/unreviewed/2022/04/GHSA-5qjv-rqph-2fm2/GHSA-5qjv-rqph-2fm2.json index 027702fd564..0487d0742d7 100644 --- a/advisories/unreviewed/2022/04/GHSA-5qjv-rqph-2fm2/GHSA-5qjv-rqph-2fm2.json +++ b/advisories/unreviewed/2022/04/GHSA-5qjv-rqph-2fm2/GHSA-5qjv-rqph-2fm2.json @@ -7,12 +7,8 @@ "CVE-2001-0726" ], "details": "Outlook Web Access (OWA) in Microsoft Exchange 5.5 Server, when used with Internet Explorer, does not properly detect certain inline script, which can allow remote attackers to perform arbitrary actions on a user's Exchange mailbox via an HTML e-mail message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5w96-mm3w-h55f/GHSA-5w96-mm3w-h55f.json b/advisories/unreviewed/2022/04/GHSA-5w96-mm3w-h55f/GHSA-5w96-mm3w-h55f.json index cb7620b8053..8948550aa68 100644 --- a/advisories/unreviewed/2022/04/GHSA-5w96-mm3w-h55f/GHSA-5w96-mm3w-h55f.json +++ b/advisories/unreviewed/2022/04/GHSA-5w96-mm3w-h55f/GHSA-5w96-mm3w-h55f.json @@ -7,12 +7,8 @@ "CVE-2001-0747" ], "details": "Buffer overflow in iPlanet Web Server (iWS) Enterprise Edition 4.1, service packs 3 through 7, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long method name in an HTTP request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5x6p-786j-xgfm/GHSA-5x6p-786j-xgfm.json b/advisories/unreviewed/2022/04/GHSA-5x6p-786j-xgfm/GHSA-5x6p-786j-xgfm.json index 2d38ab8ab48..ad2b388e32e 100644 --- a/advisories/unreviewed/2022/04/GHSA-5x6p-786j-xgfm/GHSA-5x6p-786j-xgfm.json +++ b/advisories/unreviewed/2022/04/GHSA-5x6p-786j-xgfm/GHSA-5x6p-786j-xgfm.json @@ -7,12 +7,8 @@ "CVE-2001-0757" ], "details": "Cisco 6400 Access Concentrator Node Route Processor 2 (NRP2) 12.1DC card does not properly disable access when a password has not been set for vtys, which allows remote attackers to obtain access via telnet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5xc8-p2x4-cp2p/GHSA-5xc8-p2x4-cp2p.json b/advisories/unreviewed/2022/04/GHSA-5xc8-p2x4-cp2p/GHSA-5xc8-p2x4-cp2p.json index 83b1ffd150c..c55825d666a 100644 --- a/advisories/unreviewed/2022/04/GHSA-5xc8-p2x4-cp2p/GHSA-5xc8-p2x4-cp2p.json +++ b/advisories/unreviewed/2022/04/GHSA-5xc8-p2x4-cp2p/GHSA-5xc8-p2x4-cp2p.json @@ -7,12 +7,8 @@ "CVE-2001-0669" ], "details": "Various Intrusion Detection Systems (IDS) including (1) Cisco Secure Intrusion Detection System, (2) Cisco Catalyst 6000 Intrusion Detection System Module, (3) Dragon Sensor 4.x, (4) Snort before 1.8.1, (5) ISS RealSecure Network Sensor 5.x and 6.x before XPU 3.2, and (6) ISS RealSecure Server Sensor 5.5 and 6.0 for Windows, allow remote attackers to evade detection of HTTP attacks via non-standard \"%u\" Unicode encoding of ASCII characters in the requested URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6266-8x64-9g76/GHSA-6266-8x64-9g76.json b/advisories/unreviewed/2022/04/GHSA-6266-8x64-9g76/GHSA-6266-8x64-9g76.json index 71136be73c0..2e3a563712b 100644 --- a/advisories/unreviewed/2022/04/GHSA-6266-8x64-9g76/GHSA-6266-8x64-9g76.json +++ b/advisories/unreviewed/2022/04/GHSA-6266-8x64-9g76/GHSA-6266-8x64-9g76.json @@ -7,12 +7,8 @@ "CVE-2001-0450" ], "details": "Directory traversal vulnerability in Transsoft FTP Broker before 5.5 allows attackers to (1) delete arbitrary files via DELETE, or (2) list arbitrary directories via LIST, via a .. (dot dot) in the file name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-62wj-cpc7-6vf8/GHSA-62wj-cpc7-6vf8.json b/advisories/unreviewed/2022/04/GHSA-62wj-cpc7-6vf8/GHSA-62wj-cpc7-6vf8.json index c464d0a172b..284650f62f2 100644 --- a/advisories/unreviewed/2022/04/GHSA-62wj-cpc7-6vf8/GHSA-62wj-cpc7-6vf8.json +++ b/advisories/unreviewed/2022/04/GHSA-62wj-cpc7-6vf8/GHSA-62wj-cpc7-6vf8.json @@ -7,12 +7,8 @@ "CVE-2001-0694" ], "details": "Directory traversal vulnerability in WFTPD 3.00 R5 allows a remote attacker to view arbitrary files via a dot dot attack in the CD command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-64rp-5x3g-4984/GHSA-64rp-5x3g-4984.json b/advisories/unreviewed/2022/04/GHSA-64rp-5x3g-4984/GHSA-64rp-5x3g-4984.json index 2c325a92842..079e799eccb 100644 --- a/advisories/unreviewed/2022/04/GHSA-64rp-5x3g-4984/GHSA-64rp-5x3g-4984.json +++ b/advisories/unreviewed/2022/04/GHSA-64rp-5x3g-4984/GHSA-64rp-5x3g-4984.json @@ -7,12 +7,8 @@ "CVE-2001-0806" ], "details": "Apple MacOS X 10.0 and 10.1 allow a local user to read and write to a user's desktop folder via insecure default permissions for the Desktop when it is created in some languages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-65pg-39m2-53qg/GHSA-65pg-39m2-53qg.json b/advisories/unreviewed/2022/04/GHSA-65pg-39m2-53qg/GHSA-65pg-39m2-53qg.json index bfe11004dcd..5c3b3378ee2 100644 --- a/advisories/unreviewed/2022/04/GHSA-65pg-39m2-53qg/GHSA-65pg-39m2-53qg.json +++ b/advisories/unreviewed/2022/04/GHSA-65pg-39m2-53qg/GHSA-65pg-39m2-53qg.json @@ -7,12 +7,8 @@ "CVE-2001-0578" ], "details": "Buffer overflow in lpforms in SCO OpenServer 5.0-5.0.6 can allow a local attacker to gain additional privileges via a long first argument to the lpforms command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-65x5-3mwx-8fmv/GHSA-65x5-3mwx-8fmv.json b/advisories/unreviewed/2022/04/GHSA-65x5-3mwx-8fmv/GHSA-65x5-3mwx-8fmv.json index 989a1a07d59..7bb70064505 100644 --- a/advisories/unreviewed/2022/04/GHSA-65x5-3mwx-8fmv/GHSA-65x5-3mwx-8fmv.json +++ b/advisories/unreviewed/2022/04/GHSA-65x5-3mwx-8fmv/GHSA-65x5-3mwx-8fmv.json @@ -7,12 +7,8 @@ "CVE-2001-0484" ], "details": "Tektronix PhaserLink 850 does not require authentication for access to configuration pages such as _ncl_subjects.shtml and _ncl_items.shtml, which allows remote attackers to modify configuration information and cause a denial of service by accessing the pages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-665c-5jg7-rfq4/GHSA-665c-5jg7-rfq4.json b/advisories/unreviewed/2022/04/GHSA-665c-5jg7-rfq4/GHSA-665c-5jg7-rfq4.json index cecde218a3f..cc30d21d2ee 100644 --- a/advisories/unreviewed/2022/04/GHSA-665c-5jg7-rfq4/GHSA-665c-5jg7-rfq4.json +++ b/advisories/unreviewed/2022/04/GHSA-665c-5jg7-rfq4/GHSA-665c-5jg7-rfq4.json @@ -7,12 +7,8 @@ "CVE-2001-0567" ], "details": "Digital Creations Zope 2.3.2 and earlier allows a local attacker to gain additional privileges via the changing of ZClass permission mappings for objects and methods in the ZClass.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-674r-63x7-g3cq/GHSA-674r-63x7-g3cq.json b/advisories/unreviewed/2022/04/GHSA-674r-63x7-g3cq/GHSA-674r-63x7-g3cq.json index 830404e2575..02dedae3669 100644 --- a/advisories/unreviewed/2022/04/GHSA-674r-63x7-g3cq/GHSA-674r-63x7-g3cq.json +++ b/advisories/unreviewed/2022/04/GHSA-674r-63x7-g3cq/GHSA-674r-63x7-g3cq.json @@ -7,12 +7,8 @@ "CVE-2001-0569" ], "details": "Digital Creations Zope 2.3.1 b1 and earlier contains a problem in the method return values related to the classes (1) ObjectManager, (2) PropertyManager, and (3) PropertySheet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-67xj-xw4w-wp3q/GHSA-67xj-xw4w-wp3q.json b/advisories/unreviewed/2022/04/GHSA-67xj-xw4w-wp3q/GHSA-67xj-xw4w-wp3q.json index e2456c5b777..3b174dfceb0 100644 --- a/advisories/unreviewed/2022/04/GHSA-67xj-xw4w-wp3q/GHSA-67xj-xw4w-wp3q.json +++ b/advisories/unreviewed/2022/04/GHSA-67xj-xw4w-wp3q/GHSA-67xj-xw4w-wp3q.json @@ -7,12 +7,8 @@ "CVE-2001-0666" ], "details": "Outlook Web Access (OWA) in Microsoft Exchange 2000 allows an authenticated user to cause a denial of service (CPU consumption) via a malformed OWA request for a deeply nested folder within the user's mailbox.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-69cf-v4wg-q552/GHSA-69cf-v4wg-q552.json b/advisories/unreviewed/2022/04/GHSA-69cf-v4wg-q552/GHSA-69cf-v4wg-q552.json index e5c407fe2f8..e55b9c3ee43 100644 --- a/advisories/unreviewed/2022/04/GHSA-69cf-v4wg-q552/GHSA-69cf-v4wg-q552.json +++ b/advisories/unreviewed/2022/04/GHSA-69cf-v4wg-q552/GHSA-69cf-v4wg-q552.json @@ -7,12 +7,8 @@ "CVE-2001-0473" ], "details": "Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-69xr-m7gp-9vw2/GHSA-69xr-m7gp-9vw2.json b/advisories/unreviewed/2022/04/GHSA-69xr-m7gp-9vw2/GHSA-69xr-m7gp-9vw2.json index 34b85685ad1..d45614ce661 100644 --- a/advisories/unreviewed/2022/04/GHSA-69xr-m7gp-9vw2/GHSA-69xr-m7gp-9vw2.json +++ b/advisories/unreviewed/2022/04/GHSA-69xr-m7gp-9vw2/GHSA-69xr-m7gp-9vw2.json @@ -7,12 +7,8 @@ "CVE-2001-0584" ], "details": "IMAP server in Alt-N Technologies MDaemon 3.5.6 allows a local user to cause a denial of service (hang) via long (1) SELECT or (2) EXAMINE commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6f8g-r5vh-cvjj/GHSA-6f8g-r5vh-cvjj.json b/advisories/unreviewed/2022/04/GHSA-6f8g-r5vh-cvjj/GHSA-6f8g-r5vh-cvjj.json index ac5d3eec7ac..464db604347 100644 --- a/advisories/unreviewed/2022/04/GHSA-6f8g-r5vh-cvjj/GHSA-6f8g-r5vh-cvjj.json +++ b/advisories/unreviewed/2022/04/GHSA-6f8g-r5vh-cvjj/GHSA-6f8g-r5vh-cvjj.json @@ -7,12 +7,8 @@ "CVE-2001-0728" ], "details": "Buffer overflow in Compaq Management Agents before 5.2, included in Compaq Web-enabled Management Software, allows local users to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6fvf-gg5c-754m/GHSA-6fvf-gg5c-754m.json b/advisories/unreviewed/2022/04/GHSA-6fvf-gg5c-754m/GHSA-6fvf-gg5c-754m.json index e7f4f9ee1da..bc87acad690 100644 --- a/advisories/unreviewed/2022/04/GHSA-6fvf-gg5c-754m/GHSA-6fvf-gg5c-754m.json +++ b/advisories/unreviewed/2022/04/GHSA-6fvf-gg5c-754m/GHSA-6fvf-gg5c-754m.json @@ -7,12 +7,8 @@ "CVE-2001-0820" ], "details": "Buffer overflows in GazTek ghttpd 1.4 allows a remote attacker to execute arbitrary code via long arguments that are passed to (1) the Log function in util.c, or (2) serveconnection in protocol.c.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6fwg-fxq9-gm78/GHSA-6fwg-fxq9-gm78.json b/advisories/unreviewed/2022/04/GHSA-6fwg-fxq9-gm78/GHSA-6fwg-fxq9-gm78.json index acf1db829ba..6907079cbc8 100644 --- a/advisories/unreviewed/2022/04/GHSA-6fwg-fxq9-gm78/GHSA-6fwg-fxq9-gm78.json +++ b/advisories/unreviewed/2022/04/GHSA-6fwg-fxq9-gm78/GHSA-6fwg-fxq9-gm78.json @@ -7,12 +7,8 @@ "CVE-2001-0599" ], "details": "Sybase Adaptive Server Anywhere Database Engine 6.0.3.2747 and earlier as included with Symantec Ghost 6.5 allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts of data to port 2638.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6gpw-hxc4-7rm4/GHSA-6gpw-hxc4-7rm4.json b/advisories/unreviewed/2022/04/GHSA-6gpw-hxc4-7rm4/GHSA-6gpw-hxc4-7rm4.json index 896b9a2c30f..8ecf1bac12a 100644 --- a/advisories/unreviewed/2022/04/GHSA-6gpw-hxc4-7rm4/GHSA-6gpw-hxc4-7rm4.json +++ b/advisories/unreviewed/2022/04/GHSA-6gpw-hxc4-7rm4/GHSA-6gpw-hxc4-7rm4.json @@ -7,12 +7,8 @@ "CVE-2001-0816" ], "details": "OpenSSH before 2.9.9, when running sftp using sftp-server and using restricted keypairs, allows remote authenticated users to bypass authorized_keys2 command= restrictions using sftp commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6hwh-jc6p-xc7w/GHSA-6hwh-jc6p-xc7w.json b/advisories/unreviewed/2022/04/GHSA-6hwh-jc6p-xc7w/GHSA-6hwh-jc6p-xc7w.json index c4bc3c96928..305aa203031 100644 --- a/advisories/unreviewed/2022/04/GHSA-6hwh-jc6p-xc7w/GHSA-6hwh-jc6p-xc7w.json +++ b/advisories/unreviewed/2022/04/GHSA-6hwh-jc6p-xc7w/GHSA-6hwh-jc6p-xc7w.json @@ -7,12 +7,8 @@ "CVE-2001-0785" ], "details": "Directory traversal in Webpaging interface in Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 allows allows remote attackers to read arbitrary files via a .. (dot dot) attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6jw9-8f44-h84j/GHSA-6jw9-8f44-h84j.json b/advisories/unreviewed/2022/04/GHSA-6jw9-8f44-h84j/GHSA-6jw9-8f44-h84j.json index bbfc3741c9e..59044f370a9 100644 --- a/advisories/unreviewed/2022/04/GHSA-6jw9-8f44-h84j/GHSA-6jw9-8f44-h84j.json +++ b/advisories/unreviewed/2022/04/GHSA-6jw9-8f44-h84j/GHSA-6jw9-8f44-h84j.json @@ -7,12 +7,8 @@ "CVE-2001-0693" ], "details": "WebTrends HTTP Server 3.1c and 3.5 allows a remote attacker to view script source code via a filename followed by an encoded space (%20).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6m6j-2f5r-3rfw/GHSA-6m6j-2f5r-3rfw.json b/advisories/unreviewed/2022/04/GHSA-6m6j-2f5r-3rfw/GHSA-6m6j-2f5r-3rfw.json index d9fd791aca5..4f860720ae6 100644 --- a/advisories/unreviewed/2022/04/GHSA-6m6j-2f5r-3rfw/GHSA-6m6j-2f5r-3rfw.json +++ b/advisories/unreviewed/2022/04/GHSA-6m6j-2f5r-3rfw/GHSA-6m6j-2f5r-3rfw.json @@ -7,12 +7,8 @@ "CVE-2001-0615" ], "details": "Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' (dot dot) attack such as '...' or '....'.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6r42-r86w-9j76/GHSA-6r42-r86w-9j76.json b/advisories/unreviewed/2022/04/GHSA-6r42-r86w-9j76/GHSA-6r42-r86w-9j76.json index 14d754ee3a7..ec31b1d0f68 100644 --- a/advisories/unreviewed/2022/04/GHSA-6r42-r86w-9j76/GHSA-6r42-r86w-9j76.json +++ b/advisories/unreviewed/2022/04/GHSA-6r42-r86w-9j76/GHSA-6r42-r86w-9j76.json @@ -7,12 +7,8 @@ "CVE-2001-0524" ], "details": "eEye SecureIIS versions 1.0.3 and earlier does not perform length checking on individual HTTP headers, which allows a remote attacker to send arbitrary length strings to IIS, contrary to an advertised feature of SecureIIS versions 1.0.3 and earlier.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-72jx-7mwq-4jpr/GHSA-72jx-7mwq-4jpr.json b/advisories/unreviewed/2022/04/GHSA-72jx-7mwq-4jpr/GHSA-72jx-7mwq-4jpr.json index 89bbf8c516a..ea916d06732 100644 --- a/advisories/unreviewed/2022/04/GHSA-72jx-7mwq-4jpr/GHSA-72jx-7mwq-4jpr.json +++ b/advisories/unreviewed/2022/04/GHSA-72jx-7mwq-4jpr/GHSA-72jx-7mwq-4jpr.json @@ -7,12 +7,8 @@ "CVE-2001-0665" ], "details": "Internet Explorer 6 and earlier allows remote attackers to cause certain HTTP requests to be automatically executed and appear to come from the user, which could allow attackers to gain privileges or execute operations within web-based services, aka the \"HTTP Request Encoding vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-73qf-8rmx-rv5r/GHSA-73qf-8rmx-rv5r.json b/advisories/unreviewed/2022/04/GHSA-73qf-8rmx-rv5r/GHSA-73qf-8rmx-rv5r.json index d9e5e311b2d..91f1e3b3038 100644 --- a/advisories/unreviewed/2022/04/GHSA-73qf-8rmx-rv5r/GHSA-73qf-8rmx-rv5r.json +++ b/advisories/unreviewed/2022/04/GHSA-73qf-8rmx-rv5r/GHSA-73qf-8rmx-rv5r.json @@ -7,12 +7,8 @@ "CVE-2001-0586" ], "details": "TrendMicro ScanMail for Exchange 3.5 Evaluation allows a local attacker to recover the administrative credentials for ScanMail via a combination of unprotected registry keys and weakly encrypted passwords.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-74gw-g55g-jr63/GHSA-74gw-g55g-jr63.json b/advisories/unreviewed/2022/04/GHSA-74gw-g55g-jr63/GHSA-74gw-g55g-jr63.json index 21cb301de8f..ebbfd477a24 100644 --- a/advisories/unreviewed/2022/04/GHSA-74gw-g55g-jr63/GHSA-74gw-g55g-jr63.json +++ b/advisories/unreviewed/2022/04/GHSA-74gw-g55g-jr63/GHSA-74gw-g55g-jr63.json @@ -7,12 +7,8 @@ "CVE-2001-0756" ], "details": "CatalogMgr.pl in VirtualCatalog (incorrectly claimed to be in VirtualCart) allows remote attackers to execute arbitrary code via the template parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-75j3-qq88-rrpc/GHSA-75j3-qq88-rrpc.json b/advisories/unreviewed/2022/04/GHSA-75j3-qq88-rrpc/GHSA-75j3-qq88-rrpc.json index 42fc88e4e46..00d1da8f629 100644 --- a/advisories/unreviewed/2022/04/GHSA-75j3-qq88-rrpc/GHSA-75j3-qq88-rrpc.json +++ b/advisories/unreviewed/2022/04/GHSA-75j3-qq88-rrpc/GHSA-75j3-qq88-rrpc.json @@ -7,12 +7,8 @@ "CVE-2001-0514" ], "details": "SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts arbitrary community strings with requested MIB modifications, which allows remote attackers to obtain sensitive information such as WEP keys, cause a denial of service, or gain access to the network.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-77f8-m38g-v3j6/GHSA-77f8-m38g-v3j6.json b/advisories/unreviewed/2022/04/GHSA-77f8-m38g-v3j6/GHSA-77f8-m38g-v3j6.json index c956fc2c1da..4e232e61346 100644 --- a/advisories/unreviewed/2022/04/GHSA-77f8-m38g-v3j6/GHSA-77f8-m38g-v3j6.json +++ b/advisories/unreviewed/2022/04/GHSA-77f8-m38g-v3j6/GHSA-77f8-m38g-v3j6.json @@ -7,12 +7,8 @@ "CVE-2001-0503" ], "details": "Microsoft NetMeeting 3.01 with Remote Desktop Sharing enabled allows remote attackers to cause a denial of service via a malformed string to the NetMeeting service port, aka a variant of the \"NetMeeting Desktop Sharing\" vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-78c3-v436-q543/GHSA-78c3-v436-q543.json b/advisories/unreviewed/2022/04/GHSA-78c3-v436-q543/GHSA-78c3-v436-q543.json index 69db1e9ce65..56e50ecbcd1 100644 --- a/advisories/unreviewed/2022/04/GHSA-78c3-v436-q543/GHSA-78c3-v436-q543.json +++ b/advisories/unreviewed/2022/04/GHSA-78c3-v436-q543/GHSA-78c3-v436-q543.json @@ -7,12 +7,8 @@ "CVE-2001-0597" ], "details": "Zetetic Secure Tool for Recalling Important Passwords (STRIP) 0.5 and earlier for the PalmOS allows a local attacker to recover passwords via a brute force attack. This attack is made feasible by STRIP's use of SysRandom, which is seeded by TimeGetTicks, and an implementation flaw which vastly reduces the password 'search space'.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-792f-vcf6-566f/GHSA-792f-vcf6-566f.json b/advisories/unreviewed/2022/04/GHSA-792f-vcf6-566f/GHSA-792f-vcf6-566f.json index 6f67c7ac20b..f8009645e9c 100644 --- a/advisories/unreviewed/2022/04/GHSA-792f-vcf6-566f/GHSA-792f-vcf6-566f.json +++ b/advisories/unreviewed/2022/04/GHSA-792f-vcf6-566f/GHSA-792f-vcf6-566f.json @@ -7,12 +7,8 @@ "CVE-2001-0595" ], "details": "Buffer overflow in the kcsSUNWIOsolf.so library in Solaris 7 and 8 allows local attackers to execute arbitrary commands via the KCMS_PROFILES environment variable, e.g. as demonstrated using the kcms_configure program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7c5g-v27v-9rr3/GHSA-7c5g-v27v-9rr3.json b/advisories/unreviewed/2022/04/GHSA-7c5g-v27v-9rr3/GHSA-7c5g-v27v-9rr3.json index c9db7286af6..9f56ae90c70 100644 --- a/advisories/unreviewed/2022/04/GHSA-7c5g-v27v-9rr3/GHSA-7c5g-v27v-9rr3.json +++ b/advisories/unreviewed/2022/04/GHSA-7c5g-v27v-9rr3/GHSA-7c5g-v27v-9rr3.json @@ -7,12 +7,8 @@ "CVE-2001-0774" ], "details": "Tripwire 1.3.1, 2.2.1 and 2.3.0 allows local users to overwrite arbitrary files and possible gain privileges via a symbolic link attack on temporary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7g57-m97c-4jc7/GHSA-7g57-m97c-4jc7.json b/advisories/unreviewed/2022/04/GHSA-7g57-m97c-4jc7/GHSA-7g57-m97c-4jc7.json index 8e8f8fcc2ce..45c5e5c5ba4 100644 --- a/advisories/unreviewed/2022/04/GHSA-7g57-m97c-4jc7/GHSA-7g57-m97c-4jc7.json +++ b/advisories/unreviewed/2022/04/GHSA-7g57-m97c-4jc7/GHSA-7g57-m97c-4jc7.json @@ -7,12 +7,8 @@ "CVE-2001-0620" ], "details": "iPlanet Calendar Server 5.0p2 and earlier allows a local attacker to gain access to the Netscape Admin Server (NAS) LDAP database and read arbitrary files by obtaining the cleartext administrator username and password from the configuration file, which has insecure permissions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7gvm-vjh8-p7jh/GHSA-7gvm-vjh8-p7jh.json b/advisories/unreviewed/2022/04/GHSA-7gvm-vjh8-p7jh/GHSA-7gvm-vjh8-p7jh.json index 6c1f986e2bb..e7408fb31ab 100644 --- a/advisories/unreviewed/2022/04/GHSA-7gvm-vjh8-p7jh/GHSA-7gvm-vjh8-p7jh.json +++ b/advisories/unreviewed/2022/04/GHSA-7gvm-vjh8-p7jh/GHSA-7gvm-vjh8-p7jh.json @@ -7,12 +7,8 @@ "CVE-2001-0720" ], "details": "Internet Explorer 5.1 for Macintosh on Mac OS X allows remote attackers to execute arbitrary commands by causing a BinHex or MacBinary file type to be downloaded, which causes the files to be executed if automatic decoding is enabled.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7hvg-572p-33pg/GHSA-7hvg-572p-33pg.json b/advisories/unreviewed/2022/04/GHSA-7hvg-572p-33pg/GHSA-7hvg-572p-33pg.json index 3020bd0f45d..13e20626f07 100644 --- a/advisories/unreviewed/2022/04/GHSA-7hvg-572p-33pg/GHSA-7hvg-572p-33pg.json +++ b/advisories/unreviewed/2022/04/GHSA-7hvg-572p-33pg/GHSA-7hvg-572p-33pg.json @@ -7,12 +7,8 @@ "CVE-2001-0482" ], "details": "Configuration error in Argus PitBull LX allows root users to bypass specified access control restrictions and cause a denial of service or execute arbitrary commands by modifying kernel variables such as MaxFiles, MaxInodes, and ModProbePath in /proc/sys via calls to sysctl.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7mqh-m7g2-m4gv/GHSA-7mqh-m7g2-m4gv.json b/advisories/unreviewed/2022/04/GHSA-7mqh-m7g2-m4gv/GHSA-7mqh-m7g2-m4gv.json index f9f8e905b2b..522780898c0 100644 --- a/advisories/unreviewed/2022/04/GHSA-7mqh-m7g2-m4gv/GHSA-7mqh-m7g2-m4gv.json +++ b/advisories/unreviewed/2022/04/GHSA-7mqh-m7g2-m4gv/GHSA-7mqh-m7g2-m4gv.json @@ -7,12 +7,8 @@ "CVE-2001-0703" ], "details": "tradecli.dll in Arcadia Internet Store 1.0 allows a remote attacker to cause a denial of service via a URL request with an MS-DOS device name in the template parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7pw9-r7h7-2x88/GHSA-7pw9-r7h7-2x88.json b/advisories/unreviewed/2022/04/GHSA-7pw9-r7h7-2x88/GHSA-7pw9-r7h7-2x88.json index a5972b748bf..5c6f16c2cbf 100644 --- a/advisories/unreviewed/2022/04/GHSA-7pw9-r7h7-2x88/GHSA-7pw9-r7h7-2x88.json +++ b/advisories/unreviewed/2022/04/GHSA-7pw9-r7h7-2x88/GHSA-7pw9-r7h7-2x88.json @@ -7,12 +7,8 @@ "CVE-2001-0623" ], "details": "sendfiled, as included with Simple Asynchronous File Transfer (SAFT), on various Linux systems does not properly drop privileges when sending notification emails, which allows local attackers to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7qc5-86ww-mrvw/GHSA-7qc5-86ww-mrvw.json b/advisories/unreviewed/2022/04/GHSA-7qc5-86ww-mrvw/GHSA-7qc5-86ww-mrvw.json index 5d18940c966..a23a4b5056a 100644 --- a/advisories/unreviewed/2022/04/GHSA-7qc5-86ww-mrvw/GHSA-7qc5-86ww-mrvw.json +++ b/advisories/unreviewed/2022/04/GHSA-7qc5-86ww-mrvw/GHSA-7qc5-86ww-mrvw.json @@ -7,12 +7,8 @@ "CVE-2001-0526" ], "details": "Buffer overflow in the Xview library as used by mailtool in Solaris 8 and earlier allows a local attacker to gain privileges via the OPENWINHOME environment variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7qpj-5967-8rc2/GHSA-7qpj-5967-8rc2.json b/advisories/unreviewed/2022/04/GHSA-7qpj-5967-8rc2/GHSA-7qpj-5967-8rc2.json index 5af8bb0a3f4..4471565e9e9 100644 --- a/advisories/unreviewed/2022/04/GHSA-7qpj-5967-8rc2/GHSA-7qpj-5967-8rc2.json +++ b/advisories/unreviewed/2022/04/GHSA-7qpj-5967-8rc2/GHSA-7qpj-5967-8rc2.json @@ -7,12 +7,8 @@ "CVE-2001-0528" ], "details": "Oracle E-Business Suite Release 11i Applications Desktop Integrator (ADI) version 7.x includes a debug version of FNDPUB11I.DLL, which logs the APPS schema password in cleartext in a debug file, which allows local users to obtain the password and gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7rm2-mhc5-4p95/GHSA-7rm2-mhc5-4p95.json b/advisories/unreviewed/2022/04/GHSA-7rm2-mhc5-4p95/GHSA-7rm2-mhc5-4p95.json index 6d0a819bdda..854017b607b 100644 --- a/advisories/unreviewed/2022/04/GHSA-7rm2-mhc5-4p95/GHSA-7rm2-mhc5-4p95.json +++ b/advisories/unreviewed/2022/04/GHSA-7rm2-mhc5-4p95/GHSA-7rm2-mhc5-4p95.json @@ -7,12 +7,8 @@ "CVE-2001-0718" ], "details": "Vulnerability in (1) Microsoft Excel 2002 and earlier and (2) Microsoft PowerPoint 2002 and earlier allows attackers to bypass macro restrictions and execute arbitrary commands by modifying the data stream in the document.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7v8f-8hjw-gcj7/GHSA-7v8f-8hjw-gcj7.json b/advisories/unreviewed/2022/04/GHSA-7v8f-8hjw-gcj7/GHSA-7v8f-8hjw-gcj7.json index d44377d5695..f3e6670acbc 100644 --- a/advisories/unreviewed/2022/04/GHSA-7v8f-8hjw-gcj7/GHSA-7v8f-8hjw-gcj7.json +++ b/advisories/unreviewed/2022/04/GHSA-7v8f-8hjw-gcj7/GHSA-7v8f-8hjw-gcj7.json @@ -7,12 +7,8 @@ "CVE-2001-0605" ], "details": "Headlight Software MyGetright prior to 1.0b allows a remote attacker to upload and/or overwrite arbitrary files via a malicious .dld (skins-data) file which contains long strings of random data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7vg3-7c6c-2744/GHSA-7vg3-7c6c-2744.json b/advisories/unreviewed/2022/04/GHSA-7vg3-7c6c-2744/GHSA-7vg3-7c6c-2744.json index 855836455c3..295cd48e28f 100644 --- a/advisories/unreviewed/2022/04/GHSA-7vg3-7c6c-2744/GHSA-7vg3-7c6c-2744.json +++ b/advisories/unreviewed/2022/04/GHSA-7vg3-7c6c-2744/GHSA-7vg3-7c6c-2744.json @@ -7,12 +7,8 @@ "CVE-2001-0767" ], "details": "Directory traversal vulnerability in GuildFTPd 0.9.7 allows attackers to list or read arbitrary files and directories via a .. in (1) LS or (2) GET.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7vqj-q42p-29c8/GHSA-7vqj-q42p-29c8.json b/advisories/unreviewed/2022/04/GHSA-7vqj-q42p-29c8/GHSA-7vqj-q42p-29c8.json index 39893042756..fee8e445acb 100644 --- a/advisories/unreviewed/2022/04/GHSA-7vqj-q42p-29c8/GHSA-7vqj-q42p-29c8.json +++ b/advisories/unreviewed/2022/04/GHSA-7vqj-q42p-29c8/GHSA-7vqj-q42p-29c8.json @@ -7,12 +7,8 @@ "CVE-2001-0691" ], "details": "Buffer overflows in Washington University imapd 2000a through 2000c could allow local users without shell access to execute code as themselves in certain configurations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8238-m3xw-jq5m/GHSA-8238-m3xw-jq5m.json b/advisories/unreviewed/2022/04/GHSA-8238-m3xw-jq5m/GHSA-8238-m3xw-jq5m.json index 4359babccf0..41a48cb832a 100644 --- a/advisories/unreviewed/2022/04/GHSA-8238-m3xw-jq5m/GHSA-8238-m3xw-jq5m.json +++ b/advisories/unreviewed/2022/04/GHSA-8238-m3xw-jq5m/GHSA-8238-m3xw-jq5m.json @@ -7,12 +7,8 @@ "CVE-2001-0750" ], "details": "Cisco IOS 12.1(2)T, 12.1(3)T allow remote attackers to cause a denial of service (reload) via a connection to TCP ports 3100-3999, 5100-5999, 7100-7999 and 10100-10999.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-827c-6mjj-g23r/GHSA-827c-6mjj-g23r.json b/advisories/unreviewed/2022/04/GHSA-827c-6mjj-g23r/GHSA-827c-6mjj-g23r.json index 4118cdca4c4..c8b4b26ac8e 100644 --- a/advisories/unreviewed/2022/04/GHSA-827c-6mjj-g23r/GHSA-827c-6mjj-g23r.json +++ b/advisories/unreviewed/2022/04/GHSA-827c-6mjj-g23r/GHSA-827c-6mjj-g23r.json @@ -7,12 +7,8 @@ "CVE-2001-0594" ], "details": "kcms_configure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overflow in a command line argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-85h9-3vwr-4rx2/GHSA-85h9-3vwr-4rx2.json b/advisories/unreviewed/2022/04/GHSA-85h9-3vwr-4rx2/GHSA-85h9-3vwr-4rx2.json index e6c759d86c0..7742860f9f3 100644 --- a/advisories/unreviewed/2022/04/GHSA-85h9-3vwr-4rx2/GHSA-85h9-3vwr-4rx2.json +++ b/advisories/unreviewed/2022/04/GHSA-85h9-3vwr-4rx2/GHSA-85h9-3vwr-4rx2.json @@ -7,12 +7,8 @@ "CVE-2001-0579" ], "details": "lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument to the command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-87wq-w6qm-2mhm/GHSA-87wq-w6qm-2mhm.json b/advisories/unreviewed/2022/04/GHSA-87wq-w6qm-2mhm/GHSA-87wq-w6qm-2mhm.json index 38c6ee2f2e3..0718c87f799 100644 --- a/advisories/unreviewed/2022/04/GHSA-87wq-w6qm-2mhm/GHSA-87wq-w6qm-2mhm.json +++ b/advisories/unreviewed/2022/04/GHSA-87wq-w6qm-2mhm/GHSA-87wq-w6qm-2mhm.json @@ -7,12 +7,8 @@ "CVE-2001-0790" ], "details": "Specter IDS version 4.5 and 5.0 allows a remote attacker to cause a denial of service (CPU exhaustion) via a port scan, which causes the server to consume CPU while preparing alerts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8cwj-qxjh-6vq7/GHSA-8cwj-qxjh-6vq7.json b/advisories/unreviewed/2022/04/GHSA-8cwj-qxjh-6vq7/GHSA-8cwj-qxjh-6vq7.json index 648c67b018b..bedd665082b 100644 --- a/advisories/unreviewed/2022/04/GHSA-8cwj-qxjh-6vq7/GHSA-8cwj-qxjh-6vq7.json +++ b/advisories/unreviewed/2022/04/GHSA-8cwj-qxjh-6vq7/GHSA-8cwj-qxjh-6vq7.json @@ -7,12 +7,8 @@ "CVE-2001-0787" ], "details": "LPRng in Red Hat Linux 7.0 and 7.1 does not properly drop memberships in supplemental groups when lowering privileges, which could allow a local user to elevate privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8f76-2j73-w6rg/GHSA-8f76-2j73-w6rg.json b/advisories/unreviewed/2022/04/GHSA-8f76-2j73-w6rg/GHSA-8f76-2j73-w6rg.json index c033ed077f0..7692e0c7a88 100644 --- a/advisories/unreviewed/2022/04/GHSA-8f76-2j73-w6rg/GHSA-8f76-2j73-w6rg.json +++ b/advisories/unreviewed/2022/04/GHSA-8f76-2j73-w6rg/GHSA-8f76-2j73-w6rg.json @@ -7,12 +7,8 @@ "CVE-2001-0745" ], "details": "Netscape 4.7x allows remote attackers to obtain sensitive information such as the user's login, mailbox location and installation path via Javascript that accesses the mailbox: URL in the document.referrer property.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8fhg-mqqf-c565/GHSA-8fhg-mqqf-c565.json b/advisories/unreviewed/2022/04/GHSA-8fhg-mqqf-c565/GHSA-8fhg-mqqf-c565.json index 585ca4222ed..0c2dd950b29 100644 --- a/advisories/unreviewed/2022/04/GHSA-8fhg-mqqf-c565/GHSA-8fhg-mqqf-c565.json +++ b/advisories/unreviewed/2022/04/GHSA-8fhg-mqqf-c565/GHSA-8fhg-mqqf-c565.json @@ -7,12 +7,8 @@ "CVE-2001-0826" ], "details": "Buffer overflows in CesarFTPD 0.98b allows remote attackers to execute arbitrary commands via long arguments to (1) HELP, (2) USER, (3) PASS, (4) PORT, (5) DELE, (6) REST, (7) RMD, or (8) MKD.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8j96-c82h-gg6h/GHSA-8j96-c82h-gg6h.json b/advisories/unreviewed/2022/04/GHSA-8j96-c82h-gg6h/GHSA-8j96-c82h-gg6h.json index 19f175103bd..9e819d2fbf1 100644 --- a/advisories/unreviewed/2022/04/GHSA-8j96-c82h-gg6h/GHSA-8j96-c82h-gg6h.json +++ b/advisories/unreviewed/2022/04/GHSA-8j96-c82h-gg6h/GHSA-8j96-c82h-gg6h.json @@ -7,12 +7,8 @@ "CVE-2001-0515" ], "details": "Oracle Listener in Oracle 7.3 and 8i allows remote attackers to cause a denial of service via a malformed connection packet with a large offset_to_data value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8jqm-vv7r-59xc/GHSA-8jqm-vv7r-59xc.json b/advisories/unreviewed/2022/04/GHSA-8jqm-vv7r-59xc/GHSA-8jqm-vv7r-59xc.json index 55d3cc400f3..d34f6c065fc 100644 --- a/advisories/unreviewed/2022/04/GHSA-8jqm-vv7r-59xc/GHSA-8jqm-vv7r-59xc.json +++ b/advisories/unreviewed/2022/04/GHSA-8jqm-vv7r-59xc/GHSA-8jqm-vv7r-59xc.json @@ -7,12 +7,8 @@ "CVE-2001-0692" ], "details": "SMTP proxy in WatchGuard Firebox (2500 and 4500) 4.5 and 4.6 allows a remote attacker to bypass firewall filtering via a base64 MIME encoded email attachment whose boundary name ends in two dashes.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8m44-v843-h5cp/GHSA-8m44-v843-h5cp.json b/advisories/unreviewed/2022/04/GHSA-8m44-v843-h5cp/GHSA-8m44-v843-h5cp.json index c3bda63685c..5dde026e4a2 100644 --- a/advisories/unreviewed/2022/04/GHSA-8m44-v843-h5cp/GHSA-8m44-v843-h5cp.json +++ b/advisories/unreviewed/2022/04/GHSA-8m44-v843-h5cp/GHSA-8m44-v843-h5cp.json @@ -7,12 +7,8 @@ "CVE-2001-0493" ], "details": "Small HTTP server 2.03 allows remote attackers to cause a denial of service via a URL that contains an MS-DOS device name such as aux.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8p2x-j374-7m2g/GHSA-8p2x-j374-7m2g.json b/advisories/unreviewed/2022/04/GHSA-8p2x-j374-7m2g/GHSA-8p2x-j374-7m2g.json index 0f024703ce5..c44f42db107 100644 --- a/advisories/unreviewed/2022/04/GHSA-8p2x-j374-7m2g/GHSA-8p2x-j374-7m2g.json +++ b/advisories/unreviewed/2022/04/GHSA-8p2x-j374-7m2g/GHSA-8p2x-j374-7m2g.json @@ -7,12 +7,8 @@ "CVE-2001-0622" ], "details": "The web management service on Cisco Content Service series 11000 switches (CSS) before WebNS 4.01B29s or WebNS 4.10B17s allows a remote attacker to gain additional privileges by directly requesting the web management URL instead of navigating through the interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8q4x-48mh-8fjc/GHSA-8q4x-48mh-8fjc.json b/advisories/unreviewed/2022/04/GHSA-8q4x-48mh-8fjc/GHSA-8q4x-48mh-8fjc.json index 3df34f7a3e5..d86ec0e4060 100644 --- a/advisories/unreviewed/2022/04/GHSA-8q4x-48mh-8fjc/GHSA-8q4x-48mh-8fjc.json +++ b/advisories/unreviewed/2022/04/GHSA-8q4x-48mh-8fjc/GHSA-8q4x-48mh-8fjc.json @@ -7,12 +7,8 @@ "CVE-2001-0625" ], "details": "ftpdownload in Computer Associates InoculateIT 6.0 allows a local attacker to overwrite arbitrary files via a symlink attack on /tmp/ftpdownload.log .", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8r29-p7h5-7m8x/GHSA-8r29-p7h5-7m8x.json b/advisories/unreviewed/2022/04/GHSA-8r29-p7h5-7m8x/GHSA-8r29-p7h5-7m8x.json index 83221a1619d..cf9c3e984aa 100644 --- a/advisories/unreviewed/2022/04/GHSA-8r29-p7h5-7m8x/GHSA-8r29-p7h5-7m8x.json +++ b/advisories/unreviewed/2022/04/GHSA-8r29-p7h5-7m8x/GHSA-8r29-p7h5-7m8x.json @@ -7,12 +7,8 @@ "CVE-2001-0779" ], "details": "Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8wq5-p3mm-cf7x/GHSA-8wq5-p3mm-cf7x.json b/advisories/unreviewed/2022/04/GHSA-8wq5-p3mm-cf7x/GHSA-8wq5-p3mm-cf7x.json index d69e043662e..0eb76ebe402 100644 --- a/advisories/unreviewed/2022/04/GHSA-8wq5-p3mm-cf7x/GHSA-8wq5-p3mm-cf7x.json +++ b/advisories/unreviewed/2022/04/GHSA-8wq5-p3mm-cf7x/GHSA-8wq5-p3mm-cf7x.json @@ -7,12 +7,8 @@ "CVE-2001-0739" ], "details": "Guardian Digital WebTool in EnGarde Secure Linux 1.0.1 allows restarted services to inherit some environmental variables, which could allow local users to gain root privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8x7r-52w5-mjv9/GHSA-8x7r-52w5-mjv9.json b/advisories/unreviewed/2022/04/GHSA-8x7r-52w5-mjv9/GHSA-8x7r-52w5-mjv9.json index d42e2328f2a..ef0977bede5 100644 --- a/advisories/unreviewed/2022/04/GHSA-8x7r-52w5-mjv9/GHSA-8x7r-52w5-mjv9.json +++ b/advisories/unreviewed/2022/04/GHSA-8x7r-52w5-mjv9/GHSA-8x7r-52w5-mjv9.json @@ -7,12 +7,8 @@ "CVE-2001-0832" ], "details": "Vulnerability in Oracle 8.0.x through 9.0.1 on Unix allows local users to overwrite arbitrary files, possibly via a symlink attack or incorrect file permissions in (1) the ORACLE_HOME/rdbms/log directory or (2) an alternate directory as specified in the ORACLE_HOME environmental variable, aka the \"Oracle File Overwrite Security Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8xg9-rqqm-wr86/GHSA-8xg9-rqqm-wr86.json b/advisories/unreviewed/2022/04/GHSA-8xg9-rqqm-wr86/GHSA-8xg9-rqqm-wr86.json index 77033485b20..1eba0eb1e7f 100644 --- a/advisories/unreviewed/2022/04/GHSA-8xg9-rqqm-wr86/GHSA-8xg9-rqqm-wr86.json +++ b/advisories/unreviewed/2022/04/GHSA-8xg9-rqqm-wr86/GHSA-8xg9-rqqm-wr86.json @@ -7,12 +7,8 @@ "CVE-2001-0780" ], "details": "Directory traversal vulnerability in cosmicpro.cgi in Cosmicperl Directory Pro 2.0 allows remote attackers to gain sensitive information via a .. (dot dot) in the SHOW parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-93xq-2hp2-cg7q/GHSA-93xq-2hp2-cg7q.json b/advisories/unreviewed/2022/04/GHSA-93xq-2hp2-cg7q/GHSA-93xq-2hp2-cg7q.json index 63ba1adba45..00dabaa67b6 100644 --- a/advisories/unreviewed/2022/04/GHSA-93xq-2hp2-cg7q/GHSA-93xq-2hp2-cg7q.json +++ b/advisories/unreviewed/2022/04/GHSA-93xq-2hp2-cg7q/GHSA-93xq-2hp2-cg7q.json @@ -7,12 +7,8 @@ "CVE-2001-0727" ], "details": "Internet Explorer 6.0 allows remote attackers to execute arbitrary code by modifying the Content-Disposition and Content-Type header fields in a way that causes Internet Explorer to believe that the file is safe to open without prompting the user, aka the \"File Execution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-94cx-m6gv-p8qw/GHSA-94cx-m6gv-p8qw.json b/advisories/unreviewed/2022/04/GHSA-94cx-m6gv-p8qw/GHSA-94cx-m6gv-p8qw.json index fa5cca95a71..dfac2f8e664 100644 --- a/advisories/unreviewed/2022/04/GHSA-94cx-m6gv-p8qw/GHSA-94cx-m6gv-p8qw.json +++ b/advisories/unreviewed/2022/04/GHSA-94cx-m6gv-p8qw/GHSA-94cx-m6gv-p8qw.json @@ -7,12 +7,8 @@ "CVE-2001-0508" ], "details": "Vulnerability in IIS 5.0 allows remote attackers to cause a denial of service (restart) via a long, invalid WebDAV request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-94ff-m62p-rpc5/GHSA-94ff-m62p-rpc5.json b/advisories/unreviewed/2022/04/GHSA-94ff-m62p-rpc5/GHSA-94ff-m62p-rpc5.json index de11a66ef17..c418f3ffae9 100644 --- a/advisories/unreviewed/2022/04/GHSA-94ff-m62p-rpc5/GHSA-94ff-m62p-rpc5.json +++ b/advisories/unreviewed/2022/04/GHSA-94ff-m62p-rpc5/GHSA-94ff-m62p-rpc5.json @@ -7,12 +7,8 @@ "CVE-2001-0676" ], "details": "Directory traversal vulnerability in Rit Research Labs The Bat! 1.48f and earlier allows a remote attacker to create arbitrary files via a \"dot dot\" attack in the filename for an attachment.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-956w-rx7m-f6rf/GHSA-956w-rx7m-f6rf.json b/advisories/unreviewed/2022/04/GHSA-956w-rx7m-f6rf/GHSA-956w-rx7m-f6rf.json index fded75f3455..6b084e81db7 100644 --- a/advisories/unreviewed/2022/04/GHSA-956w-rx7m-f6rf/GHSA-956w-rx7m-f6rf.json +++ b/advisories/unreviewed/2022/04/GHSA-956w-rx7m-f6rf/GHSA-956w-rx7m-f6rf.json @@ -7,12 +7,8 @@ "CVE-2001-0604" ], "details": "Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via URL requests (>8Kb) containing a large number of '/' characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9637-cjv4-p929/GHSA-9637-cjv4-p929.json b/advisories/unreviewed/2022/04/GHSA-9637-cjv4-p929/GHSA-9637-cjv4-p929.json index 5f4d926bad3..dc7da013024 100644 --- a/advisories/unreviewed/2022/04/GHSA-9637-cjv4-p929/GHSA-9637-cjv4-p929.json +++ b/advisories/unreviewed/2022/04/GHSA-9637-cjv4-p929/GHSA-9637-cjv4-p929.json @@ -7,12 +7,8 @@ "CVE-2001-0606" ], "details": "Vulnerability in iPlanet Web Server 4.X in HP-UX 11.04 (VVOS) with VirtualVault A.04.00 allows a remote attacker to create a denial of service via the HTTPS service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-966p-8hf7-x9cm/GHSA-966p-8hf7-x9cm.json b/advisories/unreviewed/2022/04/GHSA-966p-8hf7-x9cm/GHSA-966p-8hf7-x9cm.json index 44ba5096f7e..96f0203b1a8 100644 --- a/advisories/unreviewed/2022/04/GHSA-966p-8hf7-x9cm/GHSA-966p-8hf7-x9cm.json +++ b/advisories/unreviewed/2022/04/GHSA-966p-8hf7-x9cm/GHSA-966p-8hf7-x9cm.json @@ -7,12 +7,8 @@ "CVE-2001-0483" ], "details": "Configuration error in Axent Raptor Firewall 6.5 allows remote attackers to use the firewall as a proxy to access internal web resources when the http.noproxy Rule is not set.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-96xp-88f9-73v2/GHSA-96xp-88f9-73v2.json b/advisories/unreviewed/2022/04/GHSA-96xp-88f9-73v2/GHSA-96xp-88f9-73v2.json index 27740bfd5b7..db7e5d2e460 100644 --- a/advisories/unreviewed/2022/04/GHSA-96xp-88f9-73v2/GHSA-96xp-88f9-73v2.json +++ b/advisories/unreviewed/2022/04/GHSA-96xp-88f9-73v2/GHSA-96xp-88f9-73v2.json @@ -7,12 +7,8 @@ "CVE-2001-0778" ], "details": "OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space (%20).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-974r-j647-cxfm/GHSA-974r-j647-cxfm.json b/advisories/unreviewed/2022/04/GHSA-974r-j647-cxfm/GHSA-974r-j647-cxfm.json index 163a145f63e..79357720f5a 100644 --- a/advisories/unreviewed/2022/04/GHSA-974r-j647-cxfm/GHSA-974r-j647-cxfm.json +++ b/advisories/unreviewed/2022/04/GHSA-974r-j647-cxfm/GHSA-974r-j647-cxfm.json @@ -7,12 +7,8 @@ "CVE-2001-0533" ], "details": "Buffer overflow in libi18n library in IBM AIX 5.1 and 4.3.x allows local users to gain root privileges via a long LANG environmental variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-982w-46v4-62v7/GHSA-982w-46v4-62v7.json b/advisories/unreviewed/2022/04/GHSA-982w-46v4-62v7/GHSA-982w-46v4-62v7.json index e30eb220e5f..2ac7625866e 100644 --- a/advisories/unreviewed/2022/04/GHSA-982w-46v4-62v7/GHSA-982w-46v4-62v7.json +++ b/advisories/unreviewed/2022/04/GHSA-982w-46v4-62v7/GHSA-982w-46v4-62v7.json @@ -7,12 +7,8 @@ "CVE-2001-0557" ], "details": "T. Hauck Jana Webserver 1.46 and earlier allows a remote attacker to view arbitrary files via a '..' (dot dot) attack which is URL encoded (%2e%2e).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9cf4-53j8-hcv6/GHSA-9cf4-53j8-hcv6.json b/advisories/unreviewed/2022/04/GHSA-9cf4-53j8-hcv6/GHSA-9cf4-53j8-hcv6.json index 4e98e2f7610..5a080e08ebf 100644 --- a/advisories/unreviewed/2022/04/GHSA-9cf4-53j8-hcv6/GHSA-9cf4-53j8-hcv6.json +++ b/advisories/unreviewed/2022/04/GHSA-9cf4-53j8-hcv6/GHSA-9cf4-53j8-hcv6.json @@ -7,12 +7,8 @@ "CVE-2001-0659" ], "details": "Buffer overflow in IrDA driver providing infrared data exchange on Windows 2000 allows attackers who are physically close to the machine to cause a denial of service (reboot) via a malformed IrDA packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9gff-q82g-327q/GHSA-9gff-q82g-327q.json b/advisories/unreviewed/2022/04/GHSA-9gff-q82g-327q/GHSA-9gff-q82g-327q.json index 7667f9fc391..a1c66691467 100644 --- a/advisories/unreviewed/2022/04/GHSA-9gff-q82g-327q/GHSA-9gff-q82g-327q.json +++ b/advisories/unreviewed/2022/04/GHSA-9gff-q82g-327q/GHSA-9gff-q82g-327q.json @@ -7,12 +7,8 @@ "CVE-2001-0821" ], "details": "The default configuration of DCShop 1.002 beta places sensitive files in the cgi-bin directory, which could allow remote attackers to read sensitive data via an HTTP GET request for (1) orders.txt or (2) auth_user_file.txt.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9ggc-843g-q3g8/GHSA-9ggc-843g-q3g8.json b/advisories/unreviewed/2022/04/GHSA-9ggc-843g-q3g8/GHSA-9ggc-843g-q3g8.json index 11044ee0685..2f722f10e6a 100644 --- a/advisories/unreviewed/2022/04/GHSA-9ggc-843g-q3g8/GHSA-9ggc-843g-q3g8.json +++ b/advisories/unreviewed/2022/04/GHSA-9ggc-843g-q3g8/GHSA-9ggc-843g-q3g8.json @@ -7,12 +7,8 @@ "CVE-2001-0546" ], "details": "Memory leak in H.323 Gatekeeper Service in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause a denial of service (resource exhaustion) via a large amount of malformed H.323 data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9gm3-f4rm-2qfw/GHSA-9gm3-f4rm-2qfw.json b/advisories/unreviewed/2022/04/GHSA-9gm3-f4rm-2qfw/GHSA-9gm3-f4rm-2qfw.json index 6d971ac0aae..2e959fcd59c 100644 --- a/advisories/unreviewed/2022/04/GHSA-9gm3-f4rm-2qfw/GHSA-9gm3-f4rm-2qfw.json +++ b/advisories/unreviewed/2022/04/GHSA-9gm3-f4rm-2qfw/GHSA-9gm3-f4rm-2qfw.json @@ -7,12 +7,8 @@ "CVE-2001-0663" ], "details": "Terminal Server in Windows NT and Windows 2000 allows remote attackers to cause a denial of service via a sequence of invalid Remote Desktop Protocol (RDP) packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9h44-mprw-x9wq/GHSA-9h44-mprw-x9wq.json b/advisories/unreviewed/2022/04/GHSA-9h44-mprw-x9wq/GHSA-9h44-mprw-x9wq.json index 8a6c0ef6bd3..50e109d5bb2 100644 --- a/advisories/unreviewed/2022/04/GHSA-9h44-mprw-x9wq/GHSA-9h44-mprw-x9wq.json +++ b/advisories/unreviewed/2022/04/GHSA-9h44-mprw-x9wq/GHSA-9h44-mprw-x9wq.json @@ -7,12 +7,8 @@ "CVE-2001-0616" ], "details": "Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (e.g., GET /aux HTTP/1.0).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9m2p-5h5q-x254/GHSA-9m2p-5h5q-x254.json b/advisories/unreviewed/2022/04/GHSA-9m2p-5h5q-x254/GHSA-9m2p-5h5q-x254.json index 41508d54bad..32cb918b345 100644 --- a/advisories/unreviewed/2022/04/GHSA-9m2p-5h5q-x254/GHSA-9m2p-5h5q-x254.json +++ b/advisories/unreviewed/2022/04/GHSA-9m2p-5h5q-x254/GHSA-9m2p-5h5q-x254.json @@ -7,12 +7,8 @@ "CVE-2001-0827" ], "details": "Cerberus FTP server 1.0 - 1.5 allows remote attackers to cause a denial of service (crash) via a large number of \"PASV\" requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9mr6-qr78-8xhw/GHSA-9mr6-qr78-8xhw.json b/advisories/unreviewed/2022/04/GHSA-9mr6-qr78-8xhw/GHSA-9mr6-qr78-8xhw.json index 08b6cb0f931..7fa38d74b2b 100644 --- a/advisories/unreviewed/2022/04/GHSA-9mr6-qr78-8xhw/GHSA-9mr6-qr78-8xhw.json +++ b/advisories/unreviewed/2022/04/GHSA-9mr6-qr78-8xhw/GHSA-9mr6-qr78-8xhw.json @@ -7,12 +7,8 @@ "CVE-2001-0582" ], "details": "Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' (dot dot) attack, or variations, in (1) GET, (2) CD, (3) NLST, (4) SIZE, (5) RETR.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9p38-h93c-5h77/GHSA-9p38-h93c-5h77.json b/advisories/unreviewed/2022/04/GHSA-9p38-h93c-5h77/GHSA-9p38-h93c-5h77.json index 5ce1d28b21c..2de518187e1 100644 --- a/advisories/unreviewed/2022/04/GHSA-9p38-h93c-5h77/GHSA-9p38-h93c-5h77.json +++ b/advisories/unreviewed/2022/04/GHSA-9p38-h93c-5h77/GHSA-9p38-h93c-5h77.json @@ -7,12 +7,8 @@ "CVE-2001-0475" ], "details": "index.php in Jelsoft vBulletin does not properly initialize a PHP variable that is used to store template information, which allows remote attackers to execute arbitrary PHP code via special characters in the templatecache parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9q4c-pvg2-44c3/GHSA-9q4c-pvg2-44c3.json b/advisories/unreviewed/2022/04/GHSA-9q4c-pvg2-44c3/GHSA-9q4c-pvg2-44c3.json index 80ed790948d..4fe9e889a6f 100644 --- a/advisories/unreviewed/2022/04/GHSA-9q4c-pvg2-44c3/GHSA-9q4c-pvg2-44c3.json +++ b/advisories/unreviewed/2022/04/GHSA-9q4c-pvg2-44c3/GHSA-9q4c-pvg2-44c3.json @@ -7,12 +7,8 @@ "CVE-2001-0601" ], "details": "Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via HTTP requests containing certain combinations of UNICODE characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9rw7-2gcj-3x9m/GHSA-9rw7-2gcj-3x9m.json b/advisories/unreviewed/2022/04/GHSA-9rw7-2gcj-3x9m/GHSA-9rw7-2gcj-3x9m.json index 3d6b9a0ec79..79baa134f8b 100644 --- a/advisories/unreviewed/2022/04/GHSA-9rw7-2gcj-3x9m/GHSA-9rw7-2gcj-3x9m.json +++ b/advisories/unreviewed/2022/04/GHSA-9rw7-2gcj-3x9m/GHSA-9rw7-2gcj-3x9m.json @@ -7,12 +7,8 @@ "CVE-2001-0743" ], "details": "Paging function in O'Reilly WebBoard Pager 4.10 allows remote attackers to cause a denial of service via a message with an escaped ' character followed by JavaScript commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9v7q-899m-38w5/GHSA-9v7q-899m-38w5.json b/advisories/unreviewed/2022/04/GHSA-9v7q-899m-38w5/GHSA-9v7q-899m-38w5.json index 0d5df51ed36..aa981c9b4f5 100644 --- a/advisories/unreviewed/2022/04/GHSA-9v7q-899m-38w5/GHSA-9v7q-899m-38w5.json +++ b/advisories/unreviewed/2022/04/GHSA-9v7q-899m-38w5/GHSA-9v7q-899m-38w5.json @@ -7,12 +7,8 @@ "CVE-2001-0828" ], "details": "A cross-site scripting vulnerability in Caucho Technology Resin before 1.2.4 allows a malicious webmaster to embed Javascript in a hyperlink that ends in a .jsp extension, which causes an error message that does not properly quote the Javascript.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9wv9-8c98-wx74/GHSA-9wv9-8c98-wx74.json b/advisories/unreviewed/2022/04/GHSA-9wv9-8c98-wx74/GHSA-9wv9-8c98-wx74.json index 462b3cbab67..e3e6ca752b9 100644 --- a/advisories/unreviewed/2022/04/GHSA-9wv9-8c98-wx74/GHSA-9wv9-8c98-wx74.json +++ b/advisories/unreviewed/2022/04/GHSA-9wv9-8c98-wx74/GHSA-9wv9-8c98-wx74.json @@ -7,12 +7,8 @@ "CVE-2001-0545" ], "details": "IIS 4.0 with URL redirection enabled allows remote attackers to cause a denial of service (crash) via a malformed request that specifies a length that is different than the actual length.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c2hj-4gfw-x63q/GHSA-c2hj-4gfw-x63q.json b/advisories/unreviewed/2022/04/GHSA-c2hj-4gfw-x63q/GHSA-c2hj-4gfw-x63q.json index 4f61daabac3..db5fb41608c 100644 --- a/advisories/unreviewed/2022/04/GHSA-c2hj-4gfw-x63q/GHSA-c2hj-4gfw-x63q.json +++ b/advisories/unreviewed/2022/04/GHSA-c2hj-4gfw-x63q/GHSA-c2hj-4gfw-x63q.json @@ -7,12 +7,8 @@ "CVE-2001-0643" ], "details": "Internet Explorer 5.5 does not display the Class ID (CLSID) when it is at the end of the file name, which could allow attackers to trick the user into executing dangerous programs by making it appear that the document is of a safe file type.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c4jx-rv29-5jqp/GHSA-c4jx-rv29-5jqp.json b/advisories/unreviewed/2022/04/GHSA-c4jx-rv29-5jqp/GHSA-c4jx-rv29-5jqp.json index ad55671e1c3..47bb89b722f 100644 --- a/advisories/unreviewed/2022/04/GHSA-c4jx-rv29-5jqp/GHSA-c4jx-rv29-5jqp.json +++ b/advisories/unreviewed/2022/04/GHSA-c4jx-rv29-5jqp/GHSA-c4jx-rv29-5jqp.json @@ -7,12 +7,8 @@ "CVE-2001-0853" ], "details": "Directory traversal vulnerability in Entrust GetAccess allows remote attackers to read arbitrary files via a .. (dot dot) in the locale parameter to (1) helpwin.gas.bat or (2) AboutBox.gas.bat.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c5px-j32w-fcqp/GHSA-c5px-j32w-fcqp.json b/advisories/unreviewed/2022/04/GHSA-c5px-j32w-fcqp/GHSA-c5px-j32w-fcqp.json index a580a94c35d..6d86be96bab 100644 --- a/advisories/unreviewed/2022/04/GHSA-c5px-j32w-fcqp/GHSA-c5px-j32w-fcqp.json +++ b/advisories/unreviewed/2022/04/GHSA-c5px-j32w-fcqp/GHSA-c5px-j32w-fcqp.json @@ -7,12 +7,8 @@ "CVE-2001-0815" ], "details": "Buffer overflow in PerlIS.dll in Activestate ActivePerl 5.6.1.629 and earlier allows remote attackers to execute arbitrary code via an HTTP request for a long filename that ends in a .pl extension.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c68f-m73r-c2q7/GHSA-c68f-m73r-c2q7.json b/advisories/unreviewed/2022/04/GHSA-c68f-m73r-c2q7/GHSA-c68f-m73r-c2q7.json index a8a58e611a5..ea8196f661e 100644 --- a/advisories/unreviewed/2022/04/GHSA-c68f-m73r-c2q7/GHSA-c68f-m73r-c2q7.json +++ b/advisories/unreviewed/2022/04/GHSA-c68f-m73r-c2q7/GHSA-c68f-m73r-c2q7.json @@ -7,12 +7,8 @@ "CVE-2001-0754" ], "details": "Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via a series of large ICMP ECHO REPLY (ping) packets, which cause it to enter ROMMON mode and stop forwarding packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c7h7-cjhx-gphr/GHSA-c7h7-cjhx-gphr.json b/advisories/unreviewed/2022/04/GHSA-c7h7-cjhx-gphr/GHSA-c7h7-cjhx-gphr.json index 76749efaa55..109f719a190 100644 --- a/advisories/unreviewed/2022/04/GHSA-c7h7-cjhx-gphr/GHSA-c7h7-cjhx-gphr.json +++ b/advisories/unreviewed/2022/04/GHSA-c7h7-cjhx-gphr/GHSA-c7h7-cjhx-gphr.json @@ -7,12 +7,8 @@ "CVE-2001-0477" ], "details": "Vulnerability in WebCalendar 0.9.26 allows remote command execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c7rf-c8f3-mrwv/GHSA-c7rf-c8f3-mrwv.json b/advisories/unreviewed/2022/04/GHSA-c7rf-c8f3-mrwv/GHSA-c7rf-c8f3-mrwv.json index eeb6c1fb483..63b6bcf3c53 100644 --- a/advisories/unreviewed/2022/04/GHSA-c7rf-c8f3-mrwv/GHSA-c7rf-c8f3-mrwv.json +++ b/advisories/unreviewed/2022/04/GHSA-c7rf-c8f3-mrwv/GHSA-c7rf-c8f3-mrwv.json @@ -7,12 +7,8 @@ "CVE-2001-0495" ], "details": "Directory traversal in DataWizard WebXQ server 1.204 allows remote attackers to view files outside of the web root via a .. (dot dot) attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c8f4-4c6h-gr66/GHSA-c8f4-4c6h-gr66.json b/advisories/unreviewed/2022/04/GHSA-c8f4-4c6h-gr66/GHSA-c8f4-4c6h-gr66.json index e7f90adc12a..b97cff5c0de 100644 --- a/advisories/unreviewed/2022/04/GHSA-c8f4-4c6h-gr66/GHSA-c8f4-4c6h-gr66.json +++ b/advisories/unreviewed/2022/04/GHSA-c8f4-4c6h-gr66/GHSA-c8f4-4c6h-gr66.json @@ -7,12 +7,8 @@ "CVE-2001-0602" ], "details": "Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated (>400) URL requests for DOS devices.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c8mr-fhvj-www3/GHSA-c8mr-fhvj-www3.json b/advisories/unreviewed/2022/04/GHSA-c8mr-fhvj-www3/GHSA-c8mr-fhvj-www3.json index e00ab86cef0..f9ef20fb8a4 100644 --- a/advisories/unreviewed/2022/04/GHSA-c8mr-fhvj-www3/GHSA-c8mr-fhvj-www3.json +++ b/advisories/unreviewed/2022/04/GHSA-c8mr-fhvj-www3/GHSA-c8mr-fhvj-www3.json @@ -7,12 +7,8 @@ "CVE-2001-0685" ], "details": "Thibault Godouet FCron prior to 1.1.1 allows a local user to corrupt another user's crontab file via a symlink attack on the fcrontab temporary file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cccc-x5r4-7h2q/GHSA-cccc-x5r4-7h2q.json b/advisories/unreviewed/2022/04/GHSA-cccc-x5r4-7h2q/GHSA-cccc-x5r4-7h2q.json index 1100c774df5..9acf0dd8270 100644 --- a/advisories/unreviewed/2022/04/GHSA-cccc-x5r4-7h2q/GHSA-cccc-x5r4-7h2q.json +++ b/advisories/unreviewed/2022/04/GHSA-cccc-x5r4-7h2q/GHSA-cccc-x5r4-7h2q.json @@ -7,12 +7,8 @@ "CVE-2001-0706" ], "details": "Maximum Rumpus FTP Server 2.0.3 dev and before allows an attacker to cause a denial of service (crash) via a mkdir command that specifies a large number of sub-folders.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cjmv-88gc-55q9/GHSA-cjmv-88gc-55q9.json b/advisories/unreviewed/2022/04/GHSA-cjmv-88gc-55q9/GHSA-cjmv-88gc-55q9.json index 1749d86089a..ddd4e5b0502 100644 --- a/advisories/unreviewed/2022/04/GHSA-cjmv-88gc-55q9/GHSA-cjmv-88gc-55q9.json +++ b/advisories/unreviewed/2022/04/GHSA-cjmv-88gc-55q9/GHSA-cjmv-88gc-55q9.json @@ -7,12 +7,8 @@ "CVE-2001-0592" ], "details": "Watchguard Firebox II prior to 4.6 allows a remote attacker to create a denial of service in the kernel via a large stream (>10,000) of malformed ICMP or TCP packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cjp9-x9jx-mcw7/GHSA-cjp9-x9jx-mcw7.json b/advisories/unreviewed/2022/04/GHSA-cjp9-x9jx-mcw7/GHSA-cjp9-x9jx-mcw7.json index 7f8b5c92e6f..5a9638b4df0 100644 --- a/advisories/unreviewed/2022/04/GHSA-cjp9-x9jx-mcw7/GHSA-cjp9-x9jx-mcw7.json +++ b/advisories/unreviewed/2022/04/GHSA-cjp9-x9jx-mcw7/GHSA-cjp9-x9jx-mcw7.json @@ -7,12 +7,8 @@ "CVE-2001-0716" ], "details": "Citrix MetaFrame 1.8 Server with Service Pack 3, and XP Server Service Pack 1 and earlier, allows remote attackers to cause a denial of service (crash) via a large number of incomplete connections to the server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cmr4-j5x4-54pj/GHSA-cmr4-j5x4-54pj.json b/advisories/unreviewed/2022/04/GHSA-cmr4-j5x4-54pj/GHSA-cmr4-j5x4-54pj.json index 1d4e0351f53..e89f0095a91 100644 --- a/advisories/unreviewed/2022/04/GHSA-cmr4-j5x4-54pj/GHSA-cmr4-j5x4-54pj.json +++ b/advisories/unreviewed/2022/04/GHSA-cmr4-j5x4-54pj/GHSA-cmr4-j5x4-54pj.json @@ -7,12 +7,8 @@ "CVE-2001-0634" ], "details": "Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cpvf-r648-g69g/GHSA-cpvf-r648-g69g.json b/advisories/unreviewed/2022/04/GHSA-cpvf-r648-g69g/GHSA-cpvf-r648-g69g.json index 4f5f2d490e6..69c99716ef1 100644 --- a/advisories/unreviewed/2022/04/GHSA-cpvf-r648-g69g/GHSA-cpvf-r648-g69g.json +++ b/advisories/unreviewed/2022/04/GHSA-cpvf-r648-g69g/GHSA-cpvf-r648-g69g.json @@ -7,12 +7,8 @@ "CVE-2001-0753" ], "details": "Cisco CBOS 2.3.8 and earlier stores the passwords for (1) exec and (2) enable in cleartext in the NVRAM and a configuration file, which could allow unauthorized users to obtain the passwords and gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cqp5-p2gh-94fp/GHSA-cqp5-p2gh-94fp.json b/advisories/unreviewed/2022/04/GHSA-cqp5-p2gh-94fp/GHSA-cqp5-p2gh-94fp.json index 68a122053ad..bb47184aa4b 100644 --- a/advisories/unreviewed/2022/04/GHSA-cqp5-p2gh-94fp/GHSA-cqp5-p2gh-94fp.json +++ b/advisories/unreviewed/2022/04/GHSA-cqp5-p2gh-94fp/GHSA-cqp5-p2gh-94fp.json @@ -7,12 +7,8 @@ "CVE-2001-0772" ], "details": "Buffer overflows and other vulnerabilities in multiple Common Desktop Environment (CDE) modules in HP-UX 10.10 through 11.11 allow attackers to cause a denial of service and possibly gain additional privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cvjw-q229-564h/GHSA-cvjw-q229-564h.json b/advisories/unreviewed/2022/04/GHSA-cvjw-q229-564h/GHSA-cvjw-q229-564h.json index 537e5e015f2..d181006bf54 100644 --- a/advisories/unreviewed/2022/04/GHSA-cvjw-q229-564h/GHSA-cvjw-q229-564h.json +++ b/advisories/unreviewed/2022/04/GHSA-cvjw-q229-564h/GHSA-cvjw-q229-564h.json @@ -7,12 +7,8 @@ "CVE-2001-0556" ], "details": "The Nirvana Editor (NEdit) 5.1.1 and earlier allows a local attacker to overwrite other users' files via a symlink attack on (1) backup files or (2) temporary files used when nedit prints a file or portions of a file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-f2pj-5wrm-j9xg/GHSA-f2pj-5wrm-j9xg.json b/advisories/unreviewed/2022/04/GHSA-f2pj-5wrm-j9xg/GHSA-f2pj-5wrm-j9xg.json index 168bb1cffe6..b0074e261ad 100644 --- a/advisories/unreviewed/2022/04/GHSA-f2pj-5wrm-j9xg/GHSA-f2pj-5wrm-j9xg.json +++ b/advisories/unreviewed/2022/04/GHSA-f2pj-5wrm-j9xg/GHSA-f2pj-5wrm-j9xg.json @@ -7,12 +7,8 @@ "CVE-2001-0647" ], "details": "Orange Web Server 2.1, based on GoAhead, allows a remote attacker to perform a denial of service via an HTTP GET request that does not include the HTTP version.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-f339-mc56-c6fp/GHSA-f339-mc56-c6fp.json b/advisories/unreviewed/2022/04/GHSA-f339-mc56-c6fp/GHSA-f339-mc56-c6fp.json index e76cb0787b4..d79a0d40a89 100644 --- a/advisories/unreviewed/2022/04/GHSA-f339-mc56-c6fp/GHSA-f339-mc56-c6fp.json +++ b/advisories/unreviewed/2022/04/GHSA-f339-mc56-c6fp/GHSA-f339-mc56-c6fp.json @@ -7,12 +7,8 @@ "CVE-2001-0588" ], "details": "sendmail 8.9.3, as included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6, can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-f374-v37m-vrcw/GHSA-f374-v37m-vrcw.json b/advisories/unreviewed/2022/04/GHSA-f374-v37m-vrcw/GHSA-f374-v37m-vrcw.json index f0978352e92..e6d30d85dde 100644 --- a/advisories/unreviewed/2022/04/GHSA-f374-v37m-vrcw/GHSA-f374-v37m-vrcw.json +++ b/advisories/unreviewed/2022/04/GHSA-f374-v37m-vrcw/GHSA-f374-v37m-vrcw.json @@ -7,12 +7,8 @@ "CVE-2001-0748" ], "details": "Acme.Serve 1.7, as used in Cisco Secure ACS Unix and possibly other products, allows remote attackers to read arbitrary files by prepending several / (slash) characters to the URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-f6r9-3w39-f287/GHSA-f6r9-3w39-f287.json b/advisories/unreviewed/2022/04/GHSA-f6r9-3w39-f287/GHSA-f6r9-3w39-f287.json index cbc59880ce2..123f4bb5442 100644 --- a/advisories/unreviewed/2022/04/GHSA-f6r9-3w39-f287/GHSA-f6r9-3w39-f287.json +++ b/advisories/unreviewed/2022/04/GHSA-f6r9-3w39-f287/GHSA-f6r9-3w39-f287.json @@ -7,12 +7,8 @@ "CVE-2001-0568" ], "details": "Digital Creations Zope 2.3.1 b1 and earlier allows a local attacker (Zope user) with through-the-web scripting capabilities to alter ZClasses class attributes.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-f6xj-phm6-mw84/GHSA-f6xj-phm6-mw84.json b/advisories/unreviewed/2022/04/GHSA-f6xj-phm6-mw84/GHSA-f6xj-phm6-mw84.json index 0f55434ba6d..6fccaa72eec 100644 --- a/advisories/unreviewed/2022/04/GHSA-f6xj-phm6-mw84/GHSA-f6xj-phm6-mw84.json +++ b/advisories/unreviewed/2022/04/GHSA-f6xj-phm6-mw84/GHSA-f6xj-phm6-mw84.json @@ -7,12 +7,8 @@ "CVE-2001-0560" ], "details": "Buffer overflow in Vixie cron 3.0.1-56 and earlier could allow a local attacker to gain additional privileges via a long username (> 20 characters).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-f8gc-rwq9-w3v6/GHSA-f8gc-rwq9-w3v6.json b/advisories/unreviewed/2022/04/GHSA-f8gc-rwq9-w3v6/GHSA-f8gc-rwq9-w3v6.json index f807df409bc..f4df77eb8d9 100644 --- a/advisories/unreviewed/2022/04/GHSA-f8gc-rwq9-w3v6/GHSA-f8gc-rwq9-w3v6.json +++ b/advisories/unreviewed/2022/04/GHSA-f8gc-rwq9-w3v6/GHSA-f8gc-rwq9-w3v6.json @@ -7,12 +7,8 @@ "CVE-2001-0589" ], "details": "NetScreen ScreenOS prior to 2.5r6 on the NetScreen-10 and Netscreen-100 can allow a local attacker to bypass the DMZ 'denial' policy via specific traffic patterns.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fcgj-gmh5-659g/GHSA-fcgj-gmh5-659g.json b/advisories/unreviewed/2022/04/GHSA-fcgj-gmh5-659g/GHSA-fcgj-gmh5-659g.json index a8b8cade1ba..caf17a2d2e9 100644 --- a/advisories/unreviewed/2022/04/GHSA-fcgj-gmh5-659g/GHSA-fcgj-gmh5-659g.json +++ b/advisories/unreviewed/2022/04/GHSA-fcgj-gmh5-659g/GHSA-fcgj-gmh5-659g.json @@ -7,12 +7,8 @@ "CVE-2001-0633" ], "details": "Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '..' (dot dot) attack in the sample script 'codebrws.asp'.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fhxw-w85p-hp94/GHSA-fhxw-w85p-hp94.json b/advisories/unreviewed/2022/04/GHSA-fhxw-w85p-hp94/GHSA-fhxw-w85p-hp94.json index 308efcac17b..811de1630d1 100644 --- a/advisories/unreviewed/2022/04/GHSA-fhxw-w85p-hp94/GHSA-fhxw-w85p-hp94.json +++ b/advisories/unreviewed/2022/04/GHSA-fhxw-w85p-hp94/GHSA-fhxw-w85p-hp94.json @@ -7,12 +7,8 @@ "CVE-2001-0518" ], "details": "Oracle listener before Oracle 9i allows attackers to cause a denial of service by repeatedly sending the first portion of a fragmented Oracle command without sending the remainder of the command, which causes the listener to hang.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fj7j-6rv7-xjr4/GHSA-fj7j-6rv7-xjr4.json b/advisories/unreviewed/2022/04/GHSA-fj7j-6rv7-xjr4/GHSA-fj7j-6rv7-xjr4.json index ad0d0b4c86d..da56390bd58 100644 --- a/advisories/unreviewed/2022/04/GHSA-fj7j-6rv7-xjr4/GHSA-fj7j-6rv7-xjr4.json +++ b/advisories/unreviewed/2022/04/GHSA-fj7j-6rv7-xjr4/GHSA-fj7j-6rv7-xjr4.json @@ -7,12 +7,8 @@ "CVE-2001-0824" ], "details": "Cross-site scripting vulnerability in IBM WebSphere 3.02 and 3.5 FP2 allows remote attackers to execute Javascript by inserting the Javascript into (1) a request for a .JSP file, or (2) a request to the webapp/examples/ directory, which inserts the Javascript into an error page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fm8p-vqh4-8h4g/GHSA-fm8p-vqh4-8h4g.json b/advisories/unreviewed/2022/04/GHSA-fm8p-vqh4-8h4g/GHSA-fm8p-vqh4-8h4g.json index e23c682d85b..63fa1c9913a 100644 --- a/advisories/unreviewed/2022/04/GHSA-fm8p-vqh4-8h4g/GHSA-fm8p-vqh4-8h4g.json +++ b/advisories/unreviewed/2022/04/GHSA-fm8p-vqh4-8h4g/GHSA-fm8p-vqh4-8h4g.json @@ -7,12 +7,8 @@ "CVE-2001-0711" ], "details": "Cisco IOS 11.x and 12.0 with ATM support allows attackers to cause a denial of service via the undocumented Interim Local Management Interface (ILMI) SNMP community string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fmxc-729m-p4cj/GHSA-fmxc-729m-p4cj.json b/advisories/unreviewed/2022/04/GHSA-fmxc-729m-p4cj/GHSA-fmxc-729m-p4cj.json index 356ee54d11f..6537643d744 100644 --- a/advisories/unreviewed/2022/04/GHSA-fmxc-729m-p4cj/GHSA-fmxc-729m-p4cj.json +++ b/advisories/unreviewed/2022/04/GHSA-fmxc-729m-p4cj/GHSA-fmxc-729m-p4cj.json @@ -7,12 +7,8 @@ "CVE-2001-0540" ], "details": "Memory leak in Terminal servers in Windows NT and Windows 2000 allows remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed Remote Desktop Protocol (RDP) requests to port 3389.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fq5j-pgh2-4grh/GHSA-fq5j-pgh2-4grh.json b/advisories/unreviewed/2022/04/GHSA-fq5j-pgh2-4grh/GHSA-fq5j-pgh2-4grh.json index 5e9bdb025c8..101d8614103 100644 --- a/advisories/unreviewed/2022/04/GHSA-fq5j-pgh2-4grh/GHSA-fq5j-pgh2-4grh.json +++ b/advisories/unreviewed/2022/04/GHSA-fq5j-pgh2-4grh/GHSA-fq5j-pgh2-4grh.json @@ -7,12 +7,8 @@ "CVE-2001-0550" ], "details": "wu-ftpd 2.6.1 allows remote attackers to execute arbitrary commands via a \"~{\" argument to commands such as CWD, which is not properly handled by the glob function (ftpglob).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-frxm-7vvw-wmmx/GHSA-frxm-7vvw-wmmx.json b/advisories/unreviewed/2022/04/GHSA-frxm-7vvw-wmmx/GHSA-frxm-7vvw-wmmx.json index fef01308f12..77aa216b91d 100644 --- a/advisories/unreviewed/2022/04/GHSA-frxm-7vvw-wmmx/GHSA-frxm-7vvw-wmmx.json +++ b/advisories/unreviewed/2022/04/GHSA-frxm-7vvw-wmmx/GHSA-frxm-7vvw-wmmx.json @@ -7,12 +7,8 @@ "CVE-2001-0551" ], "details": "Buffer overflow in CDE Print Viewer (dtprintinfo) allows local users to execute arbitrary code by copying text from the clipboard into the Help window.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fvc2-whgq-43r4/GHSA-fvc2-whgq-43r4.json b/advisories/unreviewed/2022/04/GHSA-fvc2-whgq-43r4/GHSA-fvc2-whgq-43r4.json index 92865bd0d93..ac624128d90 100644 --- a/advisories/unreviewed/2022/04/GHSA-fvc2-whgq-43r4/GHSA-fvc2-whgq-43r4.json +++ b/advisories/unreviewed/2022/04/GHSA-fvc2-whgq-43r4/GHSA-fvc2-whgq-43r4.json @@ -7,12 +7,8 @@ "CVE-2001-0761" ], "details": "Buffer overflow in HttpSave.dll in Trend Micro InterScan WebManager 1.2 allows remote attackers to execute arbitrary code via a long value to a certain parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fvj2-vpv2-q7wf/GHSA-fvj2-vpv2-q7wf.json b/advisories/unreviewed/2022/04/GHSA-fvj2-vpv2-q7wf/GHSA-fvj2-vpv2-q7wf.json index 5239304865d..15873bb0ae2 100644 --- a/advisories/unreviewed/2022/04/GHSA-fvj2-vpv2-q7wf/GHSA-fvj2-vpv2-q7wf.json +++ b/advisories/unreviewed/2022/04/GHSA-fvj2-vpv2-q7wf/GHSA-fvj2-vpv2-q7wf.json @@ -7,12 +7,8 @@ "CVE-2001-0576" ], "details": "lpusers as included with SCO OpenServer 5.0 through 5.0.6 allows a local attacker to gain additional privileges via a buffer overflow attack in the '-u' command line parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-fvq6-58cc-f6vv/GHSA-fvq6-58cc-f6vv.json b/advisories/unreviewed/2022/04/GHSA-fvq6-58cc-f6vv/GHSA-fvq6-58cc-f6vv.json index abce815ec0b..2addfe5abe1 100644 --- a/advisories/unreviewed/2022/04/GHSA-fvq6-58cc-f6vv/GHSA-fvq6-58cc-f6vv.json +++ b/advisories/unreviewed/2022/04/GHSA-fvq6-58cc-f6vv/GHSA-fvq6-58cc-f6vv.json @@ -7,12 +7,8 @@ "CVE-2001-0741" ], "details": "Cisco Hot Standby Routing Protocol (HSRP) allows local attackers to cause a denial of service by spoofing HSRP packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fvqm-5v9c-fh3r/GHSA-fvqm-5v9c-fh3r.json b/advisories/unreviewed/2022/04/GHSA-fvqm-5v9c-fh3r/GHSA-fvqm-5v9c-fh3r.json index 2ed29f38aea..4007aba24e5 100644 --- a/advisories/unreviewed/2022/04/GHSA-fvqm-5v9c-fh3r/GHSA-fvqm-5v9c-fh3r.json +++ b/advisories/unreviewed/2022/04/GHSA-fvqm-5v9c-fh3r/GHSA-fvqm-5v9c-fh3r.json @@ -7,12 +7,8 @@ "CVE-2001-0517" ], "details": "Oracle listener in Oracle 8i on Solaris allows remote attackers to cause a denial of service via a malformed connection packet with a maximum transport data size that is set to 0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-g8fq-6mmc-pgc5/GHSA-g8fq-6mmc-pgc5.json b/advisories/unreviewed/2022/04/GHSA-g8fq-6mmc-pgc5/GHSA-g8fq-6mmc-pgc5.json index 2d64b21abac..7c0e6657417 100644 --- a/advisories/unreviewed/2022/04/GHSA-g8fq-6mmc-pgc5/GHSA-g8fq-6mmc-pgc5.json +++ b/advisories/unreviewed/2022/04/GHSA-g8fq-6mmc-pgc5/GHSA-g8fq-6mmc-pgc5.json @@ -7,12 +7,8 @@ "CVE-2001-0686" ], "details": "Buffer overflow in mail included with SunOS 5.8 for x86 allows a local user to gain privileges via a long HOME environment variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-g8g3-c8xg-6m3p/GHSA-g8g3-c8xg-6m3p.json b/advisories/unreviewed/2022/04/GHSA-g8g3-c8xg-6m3p/GHSA-g8g3-c8xg-6m3p.json index c21e0b1281e..96106c712ef 100644 --- a/advisories/unreviewed/2022/04/GHSA-g8g3-c8xg-6m3p/GHSA-g8g3-c8xg-6m3p.json +++ b/advisories/unreviewed/2022/04/GHSA-g8g3-c8xg-6m3p/GHSA-g8g3-c8xg-6m3p.json @@ -7,12 +7,8 @@ "CVE-2001-0699" ], "details": "Buffer overflow in cb_reset in the System Service Processor (SSP) package of SunOS 5.8 allows a local user to execute arbitrary code via a long argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-g9ch-8fx3-4rwr/GHSA-g9ch-8fx3-4rwr.json b/advisories/unreviewed/2022/04/GHSA-g9ch-8fx3-4rwr/GHSA-g9ch-8fx3-4rwr.json index 81fd91e06de..20ca2b3906e 100644 --- a/advisories/unreviewed/2022/04/GHSA-g9ch-8fx3-4rwr/GHSA-g9ch-8fx3-4rwr.json +++ b/advisories/unreviewed/2022/04/GHSA-g9ch-8fx3-4rwr/GHSA-g9ch-8fx3-4rwr.json @@ -7,12 +7,8 @@ "CVE-2001-0759" ], "details": "Buffer overflow in bctool in Jetico BestCrypt 0.8.1 and earlier allows local users to execute arbitrary code via a file or directory with a long pathname, which is processed during an unmount.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gcxg-pq25-8wh2/GHSA-gcxg-pq25-8wh2.json b/advisories/unreviewed/2022/04/GHSA-gcxg-pq25-8wh2/GHSA-gcxg-pq25-8wh2.json index 11e10a0501a..afd1aad4201 100644 --- a/advisories/unreviewed/2022/04/GHSA-gcxg-pq25-8wh2/GHSA-gcxg-pq25-8wh2.json +++ b/advisories/unreviewed/2022/04/GHSA-gcxg-pq25-8wh2/GHSA-gcxg-pq25-8wh2.json @@ -7,12 +7,8 @@ "CVE-2001-0500" ], "details": "Buffer overflow in ISAPI extension (idq.dll) in Index Server 2.0 and Indexing Service 2000 in IIS 6.0 beta and earlier allows remote attackers to execute arbitrary commands via a long argument to Internet Data Administration (.ida) and Internet Data Query (.idq) files such as default.ida, as commonly exploited by Code Red.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-ghhc-qjq5-rx7m/GHSA-ghhc-qjq5-rx7m.json b/advisories/unreviewed/2022/04/GHSA-ghhc-qjq5-rx7m/GHSA-ghhc-qjq5-rx7m.json index b683735b17b..de706e2d1a5 100644 --- a/advisories/unreviewed/2022/04/GHSA-ghhc-qjq5-rx7m/GHSA-ghhc-qjq5-rx7m.json +++ b/advisories/unreviewed/2022/04/GHSA-ghhc-qjq5-rx7m/GHSA-ghhc-qjq5-rx7m.json @@ -7,12 +7,8 @@ "CVE-2001-0629" ], "details": "HP Event Correlation Service (ecsd) as included with OpenView Network Node Manager 6.1 allows a remote attacker to gain addition privileges via a buffer overflow attack in the '-restore_config' command line parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-ghm6-wmwg-rrqw/GHSA-ghm6-wmwg-rrqw.json b/advisories/unreviewed/2022/04/GHSA-ghm6-wmwg-rrqw/GHSA-ghm6-wmwg-rrqw.json index 97764e6c016..65465ddfc0b 100644 --- a/advisories/unreviewed/2022/04/GHSA-ghm6-wmwg-rrqw/GHSA-ghm6-wmwg-rrqw.json +++ b/advisories/unreviewed/2022/04/GHSA-ghm6-wmwg-rrqw/GHSA-ghm6-wmwg-rrqw.json @@ -7,12 +7,8 @@ "CVE-2001-0713" ], "details": "Sendmail before 8.12.1 does not properly drop privileges when the -C option is used to load custom configuration files, which allows local users to gain privileges via malformed arguments in the configuration file whose names contain characters with the high bit set, such as (1) macro names that are one character long, (2) a variable setting which is processed by the setoption function, or (3) a Modifiers setting which is processed by the getmodifiers function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gphh-99vm-m2wj/GHSA-gphh-99vm-m2wj.json b/advisories/unreviewed/2022/04/GHSA-gphh-99vm-m2wj/GHSA-gphh-99vm-m2wj.json index b1aa78c4698..4cf8224680b 100644 --- a/advisories/unreviewed/2022/04/GHSA-gphh-99vm-m2wj/GHSA-gphh-99vm-m2wj.json +++ b/advisories/unreviewed/2022/04/GHSA-gphh-99vm-m2wj/GHSA-gphh-99vm-m2wj.json @@ -7,12 +7,8 @@ "CVE-2001-0784" ], "details": "Directory traversal vulnerability in Icecast 1.3.10 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack using encoded URL characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gpqf-2gcw-mwj8/GHSA-gpqf-2gcw-mwj8.json b/advisories/unreviewed/2022/04/GHSA-gpqf-2gcw-mwj8/GHSA-gpqf-2gcw-mwj8.json index 3c43e5607e0..56e5e2ba71d 100644 --- a/advisories/unreviewed/2022/04/GHSA-gpqf-2gcw-mwj8/GHSA-gpqf-2gcw-mwj8.json +++ b/advisories/unreviewed/2022/04/GHSA-gpqf-2gcw-mwj8/GHSA-gpqf-2gcw-mwj8.json @@ -7,12 +7,8 @@ "CVE-2001-0649" ], "details": "Personal Web Sharing 1.5.5 allows a remote attacker to cause a denial of service via a long HTTP request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gqgv-gqmh-7hw4/GHSA-gqgv-gqmh-7hw4.json b/advisories/unreviewed/2022/04/GHSA-gqgv-gqmh-7hw4/GHSA-gqgv-gqmh-7hw4.json index e2206ceabc1..b862ad6ede3 100644 --- a/advisories/unreviewed/2022/04/GHSA-gqgv-gqmh-7hw4/GHSA-gqgv-gqmh-7hw4.json +++ b/advisories/unreviewed/2022/04/GHSA-gqgv-gqmh-7hw4/GHSA-gqgv-gqmh-7hw4.json @@ -7,12 +7,8 @@ "CVE-2001-0781" ], "details": "Buffer overflow in SpoonFTP 1.0.0.12 allows remote attackers to execute arbitrary code via a long argument to the commands (1) CWD or (2) LIST.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-h23c-8wqc-gprc/GHSA-h23c-8wqc-gprc.json b/advisories/unreviewed/2022/04/GHSA-h23c-8wqc-gprc/GHSA-h23c-8wqc-gprc.json index 0d25aee72f3..3565dc260aa 100644 --- a/advisories/unreviewed/2022/04/GHSA-h23c-8wqc-gprc/GHSA-h23c-8wqc-gprc.json +++ b/advisories/unreviewed/2022/04/GHSA-h23c-8wqc-gprc/GHSA-h23c-8wqc-gprc.json @@ -7,12 +7,8 @@ "CVE-2001-0837" ], "details": "DeltaThree Pc-To-Phone 3.0.3 places sensitive data in world-readable locations in the installation directory, which allows local users to read the information in (1) temp.html, (2) the log folder, and (3) the PhoneBook folder.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h243-jxv9-h6mp/GHSA-h243-jxv9-h6mp.json b/advisories/unreviewed/2022/04/GHSA-h243-jxv9-h6mp/GHSA-h243-jxv9-h6mp.json index 838fd713a1e..8f22c6247d2 100644 --- a/advisories/unreviewed/2022/04/GHSA-h243-jxv9-h6mp/GHSA-h243-jxv9-h6mp.json +++ b/advisories/unreviewed/2022/04/GHSA-h243-jxv9-h6mp/GHSA-h243-jxv9-h6mp.json @@ -7,12 +7,8 @@ "CVE-2001-0789" ], "details": "Format string vulnerability in avpkeeper in Kaspersky KAV 3.5.135.2 for Sendmail allows remote attackers to cause a denial of service or possibly execute arbitrary code via a malformed mail message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h24p-9fvg-4v6q/GHSA-h24p-9fvg-4v6q.json b/advisories/unreviewed/2022/04/GHSA-h24p-9fvg-4v6q/GHSA-h24p-9fvg-4v6q.json index d4e288c5f21..87ec8be246b 100644 --- a/advisories/unreviewed/2022/04/GHSA-h24p-9fvg-4v6q/GHSA-h24p-9fvg-4v6q.json +++ b/advisories/unreviewed/2022/04/GHSA-h24p-9fvg-4v6q/GHSA-h24p-9fvg-4v6q.json @@ -7,12 +7,8 @@ "CVE-2001-0645" ], "details": "Symantec/AXENT NetProwler 3.5.x contains several default passwords, which could allow remote attackers to (1) access to the management tier via the \"admin\" password, or (2) connect to a MySQL ODBC from the management tier using a blank password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h36f-47pj-244w/GHSA-h36f-47pj-244w.json b/advisories/unreviewed/2022/04/GHSA-h36f-47pj-244w/GHSA-h36f-47pj-244w.json index 7780df0197c..950836d053f 100644 --- a/advisories/unreviewed/2022/04/GHSA-h36f-47pj-244w/GHSA-h36f-47pj-244w.json +++ b/advisories/unreviewed/2022/04/GHSA-h36f-47pj-244w/GHSA-h36f-47pj-244w.json @@ -7,12 +7,8 @@ "CVE-2001-0712" ], "details": "The rendering engine in Internet Explorer determines the MIME type independently of the type that is specified by the server, which allows remote servers to automatically execute script which is placed in a file whose MIME type does not normally support scripting, such as text (.txt), JPEG (.jpg), etc.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h45q-cxr9-cw4p/GHSA-h45q-cxr9-cw4p.json b/advisories/unreviewed/2022/04/GHSA-h45q-cxr9-cw4p/GHSA-h45q-cxr9-cw4p.json index e919bcedf15..8b1ac2a3c44 100644 --- a/advisories/unreviewed/2022/04/GHSA-h45q-cxr9-cw4p/GHSA-h45q-cxr9-cw4p.json +++ b/advisories/unreviewed/2022/04/GHSA-h45q-cxr9-cw4p/GHSA-h45q-cxr9-cw4p.json @@ -7,12 +7,8 @@ "CVE-2001-0509" ], "details": "Vulnerabilities in RPC servers in (1) Microsoft Exchange Server 2000 and earlier, (2) Microsoft SQL Server 2000 and earlier, (3) Windows NT 4.0, and (4) Windows 2000 allow remote attackers to cause a denial of service via malformed inputs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-h5ww-48rq-646f/GHSA-h5ww-48rq-646f.json b/advisories/unreviewed/2022/04/GHSA-h5ww-48rq-646f/GHSA-h5ww-48rq-646f.json index eb794225f4d..5c583217799 100644 --- a/advisories/unreviewed/2022/04/GHSA-h5ww-48rq-646f/GHSA-h5ww-48rq-646f.json +++ b/advisories/unreviewed/2022/04/GHSA-h5ww-48rq-646f/GHSA-h5ww-48rq-646f.json @@ -7,12 +7,8 @@ "CVE-2001-0548" ], "details": "Buffer overflow in dtmail in Solaris 2.6 and 7 allows local users to gain privileges via the MAIL environment variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h7hm-72pg-fq5f/GHSA-h7hm-72pg-fq5f.json b/advisories/unreviewed/2022/04/GHSA-h7hm-72pg-fq5f/GHSA-h7hm-72pg-fq5f.json index 22602cbd783..048b5f89075 100644 --- a/advisories/unreviewed/2022/04/GHSA-h7hm-72pg-fq5f/GHSA-h7hm-72pg-fq5f.json +++ b/advisories/unreviewed/2022/04/GHSA-h7hm-72pg-fq5f/GHSA-h7hm-72pg-fq5f.json @@ -7,12 +7,8 @@ "CVE-2001-0636" ], "details": "Buffer overflows in Raytheon SilentRunner allow remote attackers to (1) cause a denial of service in the collector (cle.exe) component of SilentRunner 2.0 via traffic containing long passwords, or (2) execute arbitrary commands via long HTTP queries in the Knowledge Browser component in SilentRunner 2.0 and 2.0.1. NOTE: It is highly likely that this candidate will be split into multiple candidates.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hf9r-c6mp-mc6p/GHSA-hf9r-c6mp-mc6p.json b/advisories/unreviewed/2022/04/GHSA-hf9r-c6mp-mc6p/GHSA-hf9r-c6mp-mc6p.json index fce0878c927..fc15cfa76d1 100644 --- a/advisories/unreviewed/2022/04/GHSA-hf9r-c6mp-mc6p/GHSA-hf9r-c6mp-mc6p.json +++ b/advisories/unreviewed/2022/04/GHSA-hf9r-c6mp-mc6p/GHSA-hf9r-c6mp-mc6p.json @@ -7,12 +7,8 @@ "CVE-2001-0841" ], "details": "Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hg3w-82wv-hh9m/GHSA-hg3w-82wv-hh9m.json b/advisories/unreviewed/2022/04/GHSA-hg3w-82wv-hh9m/GHSA-hg3w-82wv-hh9m.json index ce4a4e62abb..caf8ed6b5f8 100644 --- a/advisories/unreviewed/2022/04/GHSA-hg3w-82wv-hh9m/GHSA-hg3w-82wv-hh9m.json +++ b/advisories/unreviewed/2022/04/GHSA-hg3w-82wv-hh9m/GHSA-hg3w-82wv-hh9m.json @@ -7,12 +7,8 @@ "CVE-2001-0696" ], "details": "NetWin SurgeFTP 2.0a and 1.0b allows a remote attacker to cause a denial of service (crash) via a CD command to a directory with an MS-DOS device name such as con.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hhv6-r3jx-874r/GHSA-hhv6-r3jx-874r.json b/advisories/unreviewed/2022/04/GHSA-hhv6-r3jx-874r/GHSA-hhv6-r3jx-874r.json index ce801f30cdd..54bd4788842 100644 --- a/advisories/unreviewed/2022/04/GHSA-hhv6-r3jx-874r/GHSA-hhv6-r3jx-874r.json +++ b/advisories/unreviewed/2022/04/GHSA-hhv6-r3jx-874r/GHSA-hhv6-r3jx-874r.json @@ -7,12 +7,8 @@ "CVE-2001-0534" ], "details": "Multiple buffer overflows in RADIUS daemon radiusd in (1) Merit 3.6b and (2) Lucent 2.1-2 RADIUS allow remote attackers to cause a denial of service or execute arbitrary commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hvv3-ghc7-mq9w/GHSA-hvv3-ghc7-mq9w.json b/advisories/unreviewed/2022/04/GHSA-hvv3-ghc7-mq9w/GHSA-hvv3-ghc7-mq9w.json index 177dbab06e2..5545d334ce5 100644 --- a/advisories/unreviewed/2022/04/GHSA-hvv3-ghc7-mq9w/GHSA-hvv3-ghc7-mq9w.json +++ b/advisories/unreviewed/2022/04/GHSA-hvv3-ghc7-mq9w/GHSA-hvv3-ghc7-mq9w.json @@ -7,12 +7,8 @@ "CVE-2001-0486" ], "details": "Remote attackers can cause a denial of service in Novell BorderManager 3.6 and earlier by sending TCP SYN flood to port 353.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-j23g-vxj2-8h48/GHSA-j23g-vxj2-8h48.json b/advisories/unreviewed/2022/04/GHSA-j23g-vxj2-8h48/GHSA-j23g-vxj2-8h48.json index 9ef3bd7566e..a2d308963d8 100644 --- a/advisories/unreviewed/2022/04/GHSA-j23g-vxj2-8h48/GHSA-j23g-vxj2-8h48.json +++ b/advisories/unreviewed/2022/04/GHSA-j23g-vxj2-8h48/GHSA-j23g-vxj2-8h48.json @@ -7,12 +7,8 @@ "CVE-2001-0571" ], "details": "Directory traversal vulnerability in the web server for (1) Elron Internet Manager (IM) Message Inspector and (2) Anti-Virus before 3.0.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the requested URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-j3w4-jrr4-3qpc/GHSA-j3w4-jrr4-3qpc.json b/advisories/unreviewed/2022/04/GHSA-j3w4-jrr4-3qpc/GHSA-j3w4-jrr4-3qpc.json index ee3f0acaa76..65c6931b9f7 100644 --- a/advisories/unreviewed/2022/04/GHSA-j3w4-jrr4-3qpc/GHSA-j3w4-jrr4-3qpc.json +++ b/advisories/unreviewed/2022/04/GHSA-j3w4-jrr4-3qpc/GHSA-j3w4-jrr4-3qpc.json @@ -7,12 +7,8 @@ "CVE-2001-0652" ], "details": "Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESEARCHPATH environmental variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-j7gx-9mq3-49g8/GHSA-j7gx-9mq3-49g8.json b/advisories/unreviewed/2022/04/GHSA-j7gx-9mq3-49g8/GHSA-j7gx-9mq3-49g8.json index 2b0dd282d5e..224213ea7bd 100644 --- a/advisories/unreviewed/2022/04/GHSA-j7gx-9mq3-49g8/GHSA-j7gx-9mq3-49g8.json +++ b/advisories/unreviewed/2022/04/GHSA-j7gx-9mq3-49g8/GHSA-j7gx-9mq3-49g8.json @@ -7,12 +7,8 @@ "CVE-2001-0735" ], "details": "Buffer overflow in cfingerd 1.4.3 and earlier with the ALLOW_LINE_PARSING option enabled allows local users to execute arbitrary code via a long line in the .nofinger file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-j8fh-67mv-3pg8/GHSA-j8fh-67mv-3pg8.json b/advisories/unreviewed/2022/04/GHSA-j8fh-67mv-3pg8/GHSA-j8fh-67mv-3pg8.json index 09b4bcba4f1..0203105f269 100644 --- a/advisories/unreviewed/2022/04/GHSA-j8fh-67mv-3pg8/GHSA-j8fh-67mv-3pg8.json +++ b/advisories/unreviewed/2022/04/GHSA-j8fh-67mv-3pg8/GHSA-j8fh-67mv-3pg8.json @@ -7,12 +7,8 @@ "CVE-2001-0777" ], "details": "Omnicron OmniHTTPd 2.0.8 allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests for PHP scripts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-j8m2-54mq-4grp/GHSA-j8m2-54mq-4grp.json b/advisories/unreviewed/2022/04/GHSA-j8m2-54mq-4grp/GHSA-j8m2-54mq-4grp.json index f1f9de75bac..abeef8aa0e1 100644 --- a/advisories/unreviewed/2022/04/GHSA-j8m2-54mq-4grp/GHSA-j8m2-54mq-4grp.json +++ b/advisories/unreviewed/2022/04/GHSA-j8m2-54mq-4grp/GHSA-j8m2-54mq-4grp.json @@ -7,12 +7,8 @@ "CVE-2001-0613" ], "details": "Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service via a long POST URL request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jcrp-36fq-63rp/GHSA-jcrp-36fq-63rp.json b/advisories/unreviewed/2022/04/GHSA-jcrp-36fq-63rp/GHSA-jcrp-36fq-63rp.json index 388036376da..a72c0dc5938 100644 --- a/advisories/unreviewed/2022/04/GHSA-jcrp-36fq-63rp/GHSA-jcrp-36fq-63rp.json +++ b/advisories/unreviewed/2022/04/GHSA-jcrp-36fq-63rp/GHSA-jcrp-36fq-63rp.json @@ -7,12 +7,8 @@ "CVE-2001-0562" ], "details": "a1disp.cgi program in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to execute commands via a specially crafted URL which includes shell metacharacters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jff3-2vxf-7gwc/GHSA-jff3-2vxf-7gwc.json b/advisories/unreviewed/2022/04/GHSA-jff3-2vxf-7gwc/GHSA-jff3-2vxf-7gwc.json index 1c95a90cd77..e87d3e9a6c3 100644 --- a/advisories/unreviewed/2022/04/GHSA-jff3-2vxf-7gwc/GHSA-jff3-2vxf-7gwc.json +++ b/advisories/unreviewed/2022/04/GHSA-jff3-2vxf-7gwc/GHSA-jff3-2vxf-7gwc.json @@ -7,12 +7,8 @@ "CVE-2001-0836" ], "details": "Buffer overflow in Oracle9iAS Web Cache 2.0.0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jh4f-cp39-x2ff/GHSA-jh4f-cp39-x2ff.json b/advisories/unreviewed/2022/04/GHSA-jh4f-cp39-x2ff/GHSA-jh4f-cp39-x2ff.json index 6e1ce5491e3..399b7889823 100644 --- a/advisories/unreviewed/2022/04/GHSA-jh4f-cp39-x2ff/GHSA-jh4f-cp39-x2ff.json +++ b/advisories/unreviewed/2022/04/GHSA-jh4f-cp39-x2ff/GHSA-jh4f-cp39-x2ff.json @@ -7,12 +7,8 @@ "CVE-2001-0818" ], "details": "A buffer overflow the '\\s' console command in MDBMS 0.99b9 and earlier allows remote attackers to execute arbitrary commands by sending the command a large amount of data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jmjg-jcjr-28rp/GHSA-jmjg-jcjr-28rp.json b/advisories/unreviewed/2022/04/GHSA-jmjg-jcjr-28rp/GHSA-jmjg-jcjr-28rp.json index c803158d366..38693ca8342 100644 --- a/advisories/unreviewed/2022/04/GHSA-jmjg-jcjr-28rp/GHSA-jmjg-jcjr-28rp.json +++ b/advisories/unreviewed/2022/04/GHSA-jmjg-jcjr-28rp/GHSA-jmjg-jcjr-28rp.json @@ -7,12 +7,8 @@ "CVE-2001-0479" ], "details": "Directory traversal vulnerability in phpPgAdmin 2.2.1 and earlier versions allows remote attackers to execute arbitrary code via a .. (dot dot) in an argument to the sql.php script.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jpc6-v6xg-2hrr/GHSA-jpc6-v6xg-2hrr.json b/advisories/unreviewed/2022/04/GHSA-jpc6-v6xg-2hrr/GHSA-jpc6-v6xg-2hrr.json index d3b151c07c0..f95f1e5d930 100644 --- a/advisories/unreviewed/2022/04/GHSA-jpc6-v6xg-2hrr/GHSA-jpc6-v6xg-2hrr.json +++ b/advisories/unreviewed/2022/04/GHSA-jpc6-v6xg-2hrr/GHSA-jpc6-v6xg-2hrr.json @@ -7,12 +7,8 @@ "CVE-2001-0783" ], "details": "Cisco TFTP server 1.1 allows remote attackers to read arbitrary files via a ..(dot dot) attack in the GET command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jpw5-m4fc-7qm3/GHSA-jpw5-m4fc-7qm3.json b/advisories/unreviewed/2022/04/GHSA-jpw5-m4fc-7qm3/GHSA-jpw5-m4fc-7qm3.json index bae80301ccc..b0cf2df96b8 100644 --- a/advisories/unreviewed/2022/04/GHSA-jpw5-m4fc-7qm3/GHSA-jpw5-m4fc-7qm3.json +++ b/advisories/unreviewed/2022/04/GHSA-jpw5-m4fc-7qm3/GHSA-jpw5-m4fc-7qm3.json @@ -7,12 +7,8 @@ "CVE-2001-0762" ], "details": "Buffer overflow in su-wrapper 1.1.1 allows local users to execute arbitrary code via a long first argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jqcv-2ph4-7vv9/GHSA-jqcv-2ph4-7vv9.json b/advisories/unreviewed/2022/04/GHSA-jqcv-2ph4-7vv9/GHSA-jqcv-2ph4-7vv9.json index 9cc87599741..be56d68d79c 100644 --- a/advisories/unreviewed/2022/04/GHSA-jqcv-2ph4-7vv9/GHSA-jqcv-2ph4-7vv9.json +++ b/advisories/unreviewed/2022/04/GHSA-jqcv-2ph4-7vv9/GHSA-jqcv-2ph4-7vv9.json @@ -7,12 +7,8 @@ "CVE-2001-0746" ], "details": "Buffer overflow in Web Publisher in iPlanet Web Server Enterprise Edition 4.1 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a request for a long URI with (1) GETPROPERTIES, (2) GETATTRIBUTENAMES, or other methods.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jv2h-8qmf-grhx/GHSA-jv2h-8qmf-grhx.json b/advisories/unreviewed/2022/04/GHSA-jv2h-8qmf-grhx/GHSA-jv2h-8qmf-grhx.json index f0a9e24440a..b25a93b7f2b 100644 --- a/advisories/unreviewed/2022/04/GHSA-jv2h-8qmf-grhx/GHSA-jv2h-8qmf-grhx.json +++ b/advisories/unreviewed/2022/04/GHSA-jv2h-8qmf-grhx/GHSA-jv2h-8qmf-grhx.json @@ -7,12 +7,8 @@ "CVE-2001-0808" ], "details": "gnatsweb.pl in GNATS GnatsWeb 2.7 through 3.95 allows remote attackers to execute arbitrary commands via certain characters in the help_file parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jv87-5579-838c/GHSA-jv87-5579-838c.json b/advisories/unreviewed/2022/04/GHSA-jv87-5579-838c/GHSA-jv87-5579-838c.json index 8ed58edb4bc..2ab520a8861 100644 --- a/advisories/unreviewed/2022/04/GHSA-jv87-5579-838c/GHSA-jv87-5579-838c.json +++ b/advisories/unreviewed/2022/04/GHSA-jv87-5579-838c/GHSA-jv87-5579-838c.json @@ -7,12 +7,8 @@ "CVE-2001-0520" ], "details": "Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent filtering of SCRIPT tags by embedding the scripts within certain HTML tags including (1) onload in the BODY tag, (2) href in the A tag, (3) the BUTTON tag, (4) the INPUT tag, or (5) any other tag in which scripts can be defined.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jvcm-f82v-38gx/GHSA-jvcm-f82v-38gx.json b/advisories/unreviewed/2022/04/GHSA-jvcm-f82v-38gx/GHSA-jvcm-f82v-38gx.json index d900c013299..338cbc5e9cd 100644 --- a/advisories/unreviewed/2022/04/GHSA-jvcm-f82v-38gx/GHSA-jvcm-f82v-38gx.json +++ b/advisories/unreviewed/2022/04/GHSA-jvcm-f82v-38gx/GHSA-jvcm-f82v-38gx.json @@ -7,12 +7,8 @@ "CVE-2001-0490" ], "details": "Buffer overflow in WINAMP 2.6x and 2.7x allows attackers to execute arbitrary code via a long string in an AIP file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jvwf-8fwp-jh46/GHSA-jvwf-8fwp-jh46.json b/advisories/unreviewed/2022/04/GHSA-jvwf-8fwp-jh46/GHSA-jvwf-8fwp-jh46.json index 08c11296775..015f6cc748d 100644 --- a/advisories/unreviewed/2022/04/GHSA-jvwf-8fwp-jh46/GHSA-jvwf-8fwp-jh46.json +++ b/advisories/unreviewed/2022/04/GHSA-jvwf-8fwp-jh46/GHSA-jvwf-8fwp-jh46.json @@ -7,12 +7,8 @@ "CVE-2001-0581" ], "details": "Spytech Spynet Chat Server 6.5 allows a remote attacker to create a denial of service (crash) via a large number of connections to port 6387.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jvxm-j4x4-hgqw/GHSA-jvxm-j4x4-hgqw.json b/advisories/unreviewed/2022/04/GHSA-jvxm-j4x4-hgqw/GHSA-jvxm-j4x4-hgqw.json index 8695bb5b925..a391cd451a3 100644 --- a/advisories/unreviewed/2022/04/GHSA-jvxm-j4x4-hgqw/GHSA-jvxm-j4x4-hgqw.json +++ b/advisories/unreviewed/2022/04/GHSA-jvxm-j4x4-hgqw/GHSA-jvxm-j4x4-hgqw.json @@ -7,12 +7,8 @@ "CVE-2001-0840" ], "details": "Buffer overflow in Compaq Insight Manager XE 2.1b and earlier allows remote attackers to execute arbitrary code via (1) SNMP and (2) DMI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jxjg-6pwx-g6rw/GHSA-jxjg-6pwx-g6rw.json b/advisories/unreviewed/2022/04/GHSA-jxjg-6pwx-g6rw/GHSA-jxjg-6pwx-g6rw.json index 7aad3f8c8dd..1844b538dbf 100644 --- a/advisories/unreviewed/2022/04/GHSA-jxjg-6pwx-g6rw/GHSA-jxjg-6pwx-g6rw.json +++ b/advisories/unreviewed/2022/04/GHSA-jxjg-6pwx-g6rw/GHSA-jxjg-6pwx-g6rw.json @@ -7,12 +7,8 @@ "CVE-2001-0610" ], "details": "kfm as included with KDE 1.x can allow a local attacker to gain additional privileges via a symlink attack in the kfm cache directory in /tmp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m2pc-rxcm-4m43/GHSA-m2pc-rxcm-4m43.json b/advisories/unreviewed/2022/04/GHSA-m2pc-rxcm-4m43/GHSA-m2pc-rxcm-4m43.json index 65814a67969..d019252973a 100644 --- a/advisories/unreviewed/2022/04/GHSA-m2pc-rxcm-4m43/GHSA-m2pc-rxcm-4m43.json +++ b/advisories/unreviewed/2022/04/GHSA-m2pc-rxcm-4m43/GHSA-m2pc-rxcm-4m43.json @@ -7,12 +7,8 @@ "CVE-2001-0707" ], "details": "Denicomp RSHD 2.18 and earlier allows a remote attacker to cause a denial of service (crash) via a long string to port 514.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m2pv-5rf7-cmwq/GHSA-m2pv-5rf7-cmwq.json b/advisories/unreviewed/2022/04/GHSA-m2pv-5rf7-cmwq/GHSA-m2pv-5rf7-cmwq.json index 4f9ce5fb7e2..7e3712bc078 100644 --- a/advisories/unreviewed/2022/04/GHSA-m2pv-5rf7-cmwq/GHSA-m2pv-5rf7-cmwq.json +++ b/advisories/unreviewed/2022/04/GHSA-m2pv-5rf7-cmwq/GHSA-m2pv-5rf7-cmwq.json @@ -7,12 +7,8 @@ "CVE-2001-0612" ], "details": "McAfee Remote Desktop 3.0 and earlier allows remote attackers to cause a denial of service (crash) via a large number of packets to port 5045.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m2wr-gcf2-334f/GHSA-m2wr-gcf2-334f.json b/advisories/unreviewed/2022/04/GHSA-m2wr-gcf2-334f/GHSA-m2wr-gcf2-334f.json index 9ac9857503e..ed53e27672f 100644 --- a/advisories/unreviewed/2022/04/GHSA-m2wr-gcf2-334f/GHSA-m2wr-gcf2-334f.json +++ b/advisories/unreviewed/2022/04/GHSA-m2wr-gcf2-334f/GHSA-m2wr-gcf2-334f.json @@ -7,12 +7,8 @@ "CVE-2001-0498" ], "details": "Transparent Network Substrate (TNS) over Net8 (SQLNet) in Oracle 8i 8.1.7 and earlier allows remote attackers to cause a denial of service via a malformed SQLNet connection request with a large offset in the header extension.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m5f2-cr33-6jvp/GHSA-m5f2-cr33-6jvp.json b/advisories/unreviewed/2022/04/GHSA-m5f2-cr33-6jvp/GHSA-m5f2-cr33-6jvp.json index fa7a975e83b..ff04035362b 100644 --- a/advisories/unreviewed/2022/04/GHSA-m5f2-cr33-6jvp/GHSA-m5f2-cr33-6jvp.json +++ b/advisories/unreviewed/2022/04/GHSA-m5f2-cr33-6jvp/GHSA-m5f2-cr33-6jvp.json @@ -7,12 +7,8 @@ "CVE-2001-0809" ], "details": "Vulnerability in CIFS/9000 Server (SAMBA) A.01.06 and earlier in HP-UX 11.0 and 11.11, when configured as a print server, allows local users to overwrite arbitrary files by modifying certain resources.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m5hh-422h-x5pc/GHSA-m5hh-422h-x5pc.json b/advisories/unreviewed/2022/04/GHSA-m5hh-422h-x5pc/GHSA-m5hh-422h-x5pc.json index 63cb3973126..2cd162ba886 100644 --- a/advisories/unreviewed/2022/04/GHSA-m5hh-422h-x5pc/GHSA-m5hh-422h-x5pc.json +++ b/advisories/unreviewed/2022/04/GHSA-m5hh-422h-x5pc/GHSA-m5hh-422h-x5pc.json @@ -7,12 +7,8 @@ "CVE-2001-0572" ], "details": "The SSH protocols 1 and 2 (aka SSH-2) as implemented in OpenSSH and other packages have various weaknesses which can allow a remote attacker to obtain the following information via sniffing: (1) password lengths or ranges of lengths, which simplifies brute force password guessing, (2) whether RSA or DSA authentication is being used, (3) the number of authorized_keys in RSA authentication, or (4) the lengths of shell commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m763-87mj-7rmg/GHSA-m763-87mj-7rmg.json b/advisories/unreviewed/2022/04/GHSA-m763-87mj-7rmg/GHSA-m763-87mj-7rmg.json index 25b129545d7..6a34362909c 100644 --- a/advisories/unreviewed/2022/04/GHSA-m763-87mj-7rmg/GHSA-m763-87mj-7rmg.json +++ b/advisories/unreviewed/2022/04/GHSA-m763-87mj-7rmg/GHSA-m763-87mj-7rmg.json @@ -7,12 +7,8 @@ "CVE-2001-0752" ], "details": "Cisco CBOS 2.3.8 and earlier allows remote attackers to cause a denial of service via an ICMP ECHO REQUEST (ping) with the IP Record Route option set.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m7h7-j2x5-9v3x/GHSA-m7h7-j2x5-9v3x.json b/advisories/unreviewed/2022/04/GHSA-m7h7-j2x5-9v3x/GHSA-m7h7-j2x5-9v3x.json index 032459dd1e4..c65f0fe94cf 100644 --- a/advisories/unreviewed/2022/04/GHSA-m7h7-j2x5-9v3x/GHSA-m7h7-j2x5-9v3x.json +++ b/advisories/unreviewed/2022/04/GHSA-m7h7-j2x5-9v3x/GHSA-m7h7-j2x5-9v3x.json @@ -7,12 +7,8 @@ "CVE-2001-0788" ], "details": "Internet Software Solutions Air Messenger LAN Server (AMLServer) 3.4.2 allows remote attackers to obtain an absolute path for the server directory by viewing the Location header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m9gf-mmfj-vqj6/GHSA-m9gf-mmfj-vqj6.json b/advisories/unreviewed/2022/04/GHSA-m9gf-mmfj-vqj6/GHSA-m9gf-mmfj-vqj6.json index ffc4dedd6b7..a7c817e3284 100644 --- a/advisories/unreviewed/2022/04/GHSA-m9gf-mmfj-vqj6/GHSA-m9gf-mmfj-vqj6.json +++ b/advisories/unreviewed/2022/04/GHSA-m9gf-mmfj-vqj6/GHSA-m9gf-mmfj-vqj6.json @@ -7,12 +7,8 @@ "CVE-2001-0585" ], "details": "Gordano NTMail 6.0.3c allows a remote attacker to create a denial of service via a long (>= 255 characters) URL request to port 8000 or port 9000.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mc97-4cw2-jh8m/GHSA-mc97-4cw2-jh8m.json b/advisories/unreviewed/2022/04/GHSA-mc97-4cw2-jh8m/GHSA-mc97-4cw2-jh8m.json index 323fa3b90a6..aa03ef6e6c3 100644 --- a/advisories/unreviewed/2022/04/GHSA-mc97-4cw2-jh8m/GHSA-mc97-4cw2-jh8m.json +++ b/advisories/unreviewed/2022/04/GHSA-mc97-4cw2-jh8m/GHSA-mc97-4cw2-jh8m.json @@ -7,12 +7,8 @@ "CVE-2001-0677" ], "details": "Eudora 5.0.2 allows a remote attacker to read arbitrary files via an email with the path of the target file in the \"Attachment Converted\" MIME header, which sends the file when the email is forwarded to the attacker by the user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mg4x-h578-v8w3/GHSA-mg4x-h578-v8w3.json b/advisories/unreviewed/2022/04/GHSA-mg4x-h578-v8w3/GHSA-mg4x-h578-v8w3.json index 1e3a8a4ed2c..46710829056 100644 --- a/advisories/unreviewed/2022/04/GHSA-mg4x-h578-v8w3/GHSA-mg4x-h578-v8w3.json +++ b/advisories/unreviewed/2022/04/GHSA-mg4x-h578-v8w3/GHSA-mg4x-h578-v8w3.json @@ -7,12 +7,8 @@ "CVE-2001-0648" ], "details": "Directory traversal vulnerability in PHProjekt 2.1 and earlier allows a remote attacker to conduct unauthorized activities via a dot dot (..) attack on the file module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mg5j-frhw-mwxq/GHSA-mg5j-frhw-mwxq.json b/advisories/unreviewed/2022/04/GHSA-mg5j-frhw-mwxq/GHSA-mg5j-frhw-mwxq.json index ce575ee1e86..df6f998dacb 100644 --- a/advisories/unreviewed/2022/04/GHSA-mg5j-frhw-mwxq/GHSA-mg5j-frhw-mwxq.json +++ b/advisories/unreviewed/2022/04/GHSA-mg5j-frhw-mwxq/GHSA-mg5j-frhw-mwxq.json @@ -7,12 +7,8 @@ "CVE-2001-0765" ], "details": "BisonFTP V4R1 allows local users to access directories outside of their home directory by uploading .bdl files, which can then be linked to other directories.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mgmp-q4v6-9gm5/GHSA-mgmp-q4v6-9gm5.json b/advisories/unreviewed/2022/04/GHSA-mgmp-q4v6-9gm5/GHSA-mgmp-q4v6-9gm5.json index b3e30e45a60..44f715b45d8 100644 --- a/advisories/unreviewed/2022/04/GHSA-mgmp-q4v6-9gm5/GHSA-mgmp-q4v6-9gm5.json +++ b/advisories/unreviewed/2022/04/GHSA-mgmp-q4v6-9gm5/GHSA-mgmp-q4v6-9gm5.json @@ -7,12 +7,8 @@ "CVE-2001-0687" ], "details": "Broker FTP server 5.9.5 for Windows NT and 9x allows a remote attacker to retrieve privileged web server system information by (1) issuing a CD command (CD C:) followed by the LS command, (2) specifying arbitrary paths in the UNC format (\\\\computername\\sharename).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mhpq-q2qx-vh3p/GHSA-mhpq-q2qx-vh3p.json b/advisories/unreviewed/2022/04/GHSA-mhpq-q2qx-vh3p/GHSA-mhpq-q2qx-vh3p.json index 7fa9a3d526c..fdc84f9f639 100644 --- a/advisories/unreviewed/2022/04/GHSA-mhpq-q2qx-vh3p/GHSA-mhpq-q2qx-vh3p.json +++ b/advisories/unreviewed/2022/04/GHSA-mhpq-q2qx-vh3p/GHSA-mhpq-q2qx-vh3p.json @@ -7,12 +7,8 @@ "CVE-2001-0708" ], "details": "Denicomp REXECD 1.05 and earlier allows a remote attacker to cause a denial of service (crash) via a long string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mm32-hgw5-cw3m/GHSA-mm32-hgw5-cw3m.json b/advisories/unreviewed/2022/04/GHSA-mm32-hgw5-cw3m/GHSA-mm32-hgw5-cw3m.json index 39a20852825..8b977475548 100644 --- a/advisories/unreviewed/2022/04/GHSA-mm32-hgw5-cw3m/GHSA-mm32-hgw5-cw3m.json +++ b/advisories/unreviewed/2022/04/GHSA-mm32-hgw5-cw3m/GHSA-mm32-hgw5-cw3m.json @@ -7,12 +7,8 @@ "CVE-2001-0722" ], "details": "Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript in an about: URL, aka the \"First Cookie Handling Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mqp5-7qvm-xrpr/GHSA-mqp5-7qvm-xrpr.json b/advisories/unreviewed/2022/04/GHSA-mqp5-7qvm-xrpr/GHSA-mqp5-7qvm-xrpr.json index 3d4df03fe3b..a3bcd4595d6 100644 --- a/advisories/unreviewed/2022/04/GHSA-mqp5-7qvm-xrpr/GHSA-mqp5-7qvm-xrpr.json +++ b/advisories/unreviewed/2022/04/GHSA-mqp5-7qvm-xrpr/GHSA-mqp5-7qvm-xrpr.json @@ -7,12 +7,8 @@ "CVE-2001-0650" ], "details": "Cisco devices IOS 12.0 and earlier allow a remote attacker to cause a crash, or bad route updates, via malformed BGP updates with unrecognized transitive attribute.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mv6h-78g8-x45x/GHSA-mv6h-78g8-x45x.json b/advisories/unreviewed/2022/04/GHSA-mv6h-78g8-x45x/GHSA-mv6h-78g8-x45x.json index 25a3786f115..25d92ec94ab 100644 --- a/advisories/unreviewed/2022/04/GHSA-mv6h-78g8-x45x/GHSA-mv6h-78g8-x45x.json +++ b/advisories/unreviewed/2022/04/GHSA-mv6h-78g8-x45x/GHSA-mv6h-78g8-x45x.json @@ -7,12 +7,8 @@ "CVE-2001-0580" ], "details": "Hughes Technologies Virtual DNS (VDNS) Server 1.0 allows a remote attacker to create a denial of service by connecting to port 6070, sending some data, and closing the connection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mwp3-rx54-m69v/GHSA-mwp3-rx54-m69v.json b/advisories/unreviewed/2022/04/GHSA-mwp3-rx54-m69v/GHSA-mwp3-rx54-m69v.json index ae50a02efdf..4549f2b5b1b 100644 --- a/advisories/unreviewed/2022/04/GHSA-mwp3-rx54-m69v/GHSA-mwp3-rx54-m69v.json +++ b/advisories/unreviewed/2022/04/GHSA-mwp3-rx54-m69v/GHSA-mwp3-rx54-m69v.json @@ -7,12 +7,8 @@ "CVE-2001-0555" ], "details": "ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. (dot dot) attack through (1) the SITEWare Editor's Desktop or (2) the template parameter in SWEditServlet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p3jq-qmvq-m9fc/GHSA-p3jq-qmvq-m9fc.json b/advisories/unreviewed/2022/04/GHSA-p3jq-qmvq-m9fc/GHSA-p3jq-qmvq-m9fc.json index 7c6de3a036d..2d6d17f0919 100644 --- a/advisories/unreviewed/2022/04/GHSA-p3jq-qmvq-m9fc/GHSA-p3jq-qmvq-m9fc.json +++ b/advisories/unreviewed/2022/04/GHSA-p3jq-qmvq-m9fc/GHSA-p3jq-qmvq-m9fc.json @@ -7,12 +7,8 @@ "CVE-2001-0481" ], "details": "Vulnerability in rpmdrake in Mandrake Linux 8.0 related to insecure temporary file handling.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p79g-8r36-j3jg/GHSA-p79g-8r36-j3jg.json b/advisories/unreviewed/2022/04/GHSA-p79g-8r36-j3jg/GHSA-p79g-8r36-j3jg.json index 314bfe7c33d..f16204ee17c 100644 --- a/advisories/unreviewed/2022/04/GHSA-p79g-8r36-j3jg/GHSA-p79g-8r36-j3jg.json +++ b/advisories/unreviewed/2022/04/GHSA-p79g-8r36-j3jg/GHSA-p79g-8r36-j3jg.json @@ -7,12 +7,8 @@ "CVE-2001-0668" ], "details": "Buffer overflow in line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to execute arbitrary commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p86p-x498-prcv/GHSA-p86p-x498-prcv.json b/advisories/unreviewed/2022/04/GHSA-p86p-x498-prcv/GHSA-p86p-x498-prcv.json index 1fd86b11bdf..40199718d1c 100644 --- a/advisories/unreviewed/2022/04/GHSA-p86p-x498-prcv/GHSA-p86p-x498-prcv.json +++ b/advisories/unreviewed/2022/04/GHSA-p86p-x498-prcv/GHSA-p86p-x498-prcv.json @@ -7,12 +7,8 @@ "CVE-2001-0792" ], "details": "Format string vulnerability in XChat 1.2.x allows remote attackers to execute arbitrary code via a malformed nickname.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p9gc-mhgg-w6vh/GHSA-p9gc-mhgg-w6vh.json b/advisories/unreviewed/2022/04/GHSA-p9gc-mhgg-w6vh/GHSA-p9gc-mhgg-w6vh.json index e003e6573f7..b2165dc216d 100644 --- a/advisories/unreviewed/2022/04/GHSA-p9gc-mhgg-w6vh/GHSA-p9gc-mhgg-w6vh.json +++ b/advisories/unreviewed/2022/04/GHSA-p9gc-mhgg-w6vh/GHSA-p9gc-mhgg-w6vh.json @@ -7,12 +7,8 @@ "CVE-2001-0507" ], "details": "IIS 5.0 uses relative paths to find system files that will run in-process, which allows local users to gain privileges via a Trojan horse file, aka the \"System file listing privilege elevation\" vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p9rr-h67j-76x2/GHSA-p9rr-h67j-76x2.json b/advisories/unreviewed/2022/04/GHSA-p9rr-h67j-76x2/GHSA-p9rr-h67j-76x2.json index f19e4d69033..375ea78fa2d 100644 --- a/advisories/unreviewed/2022/04/GHSA-p9rr-h67j-76x2/GHSA-p9rr-h67j-76x2.json +++ b/advisories/unreviewed/2022/04/GHSA-p9rr-h67j-76x2/GHSA-p9rr-h67j-76x2.json @@ -7,12 +7,8 @@ "CVE-2001-0644" ], "details": "Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the \"Rumpus User Database\" file in the prefs folder, which could allow attackers to gain privileges on the server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pf7f-q38v-f2qc/GHSA-pf7f-q38v-f2qc.json b/advisories/unreviewed/2022/04/GHSA-pf7f-q38v-f2qc/GHSA-pf7f-q38v-f2qc.json index e9666d50895..f75b4248aad 100644 --- a/advisories/unreviewed/2022/04/GHSA-pf7f-q38v-f2qc/GHSA-pf7f-q38v-f2qc.json +++ b/advisories/unreviewed/2022/04/GHSA-pf7f-q38v-f2qc/GHSA-pf7f-q38v-f2qc.json @@ -7,12 +7,8 @@ "CVE-2001-0684" ], "details": "Netscape Collabra Server 3.5.4 and earlier allows a remote attacker to cause a denial of service by sending seven or more characters to TCP port 5239.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pfcp-38f2-6hrr/GHSA-pfcp-38f2-6hrr.json b/advisories/unreviewed/2022/04/GHSA-pfcp-38f2-6hrr/GHSA-pfcp-38f2-6hrr.json index c11a5e77ca0..1871a431c82 100644 --- a/advisories/unreviewed/2022/04/GHSA-pfcp-38f2-6hrr/GHSA-pfcp-38f2-6hrr.json +++ b/advisories/unreviewed/2022/04/GHSA-pfcp-38f2-6hrr/GHSA-pfcp-38f2-6hrr.json @@ -7,12 +7,8 @@ "CVE-2001-0593" ], "details": "Anaconda Partners Clipper 3.3 and earlier allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in the template parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pg3c-p7fr-9gh2/GHSA-pg3c-p7fr-9gh2.json b/advisories/unreviewed/2022/04/GHSA-pg3c-p7fr-9gh2/GHSA-pg3c-p7fr-9gh2.json index 4dce42c121b..aff3f4b4a51 100644 --- a/advisories/unreviewed/2022/04/GHSA-pg3c-p7fr-9gh2/GHSA-pg3c-p7fr-9gh2.json +++ b/advisories/unreviewed/2022/04/GHSA-pg3c-p7fr-9gh2/GHSA-pg3c-p7fr-9gh2.json @@ -7,12 +7,8 @@ "CVE-2001-0721" ], "details": "Universal Plug and Play (UPnP) in Windows 98, 98SE, ME, and XP allows remote attackers to cause a denial of service (memory consumption or crash) via a malformed UPnP request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pgcc-58m2-q23c/GHSA-pgcc-58m2-q23c.json b/advisories/unreviewed/2022/04/GHSA-pgcc-58m2-q23c/GHSA-pgcc-58m2-q23c.json index 5ab696eb41c..f2a40325cce 100644 --- a/advisories/unreviewed/2022/04/GHSA-pgcc-58m2-q23c/GHSA-pgcc-58m2-q23c.json +++ b/advisories/unreviewed/2022/04/GHSA-pgcc-58m2-q23c/GHSA-pgcc-58m2-q23c.json @@ -7,12 +7,8 @@ "CVE-2001-0521" ], "details": "Aladdin eSafe Gateway versions 3.0 and earlier allows a remote attacker to circumvent HTML SCRIPT filtering via the UNICODE encoding of SCRIPT tags within the HTML document.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pgww-7pvc-gxvm/GHSA-pgww-7pvc-gxvm.json b/advisories/unreviewed/2022/04/GHSA-pgww-7pvc-gxvm/GHSA-pgww-7pvc-gxvm.json index 125b423040e..0798f33499b 100644 --- a/advisories/unreviewed/2022/04/GHSA-pgww-7pvc-gxvm/GHSA-pgww-7pvc-gxvm.json +++ b/advisories/unreviewed/2022/04/GHSA-pgww-7pvc-gxvm/GHSA-pgww-7pvc-gxvm.json @@ -7,12 +7,8 @@ "CVE-2001-0794" ], "details": "Buffer overflow in A-FTP Anonymous FTP Server allows remote attackers to cause a denial of service via a long USER command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-ph82-8323-g7fc/GHSA-ph82-8323-g7fc.json b/advisories/unreviewed/2022/04/GHSA-ph82-8323-g7fc/GHSA-ph82-8323-g7fc.json index f91933a7055..db5b3924bf1 100644 --- a/advisories/unreviewed/2022/04/GHSA-ph82-8323-g7fc/GHSA-ph82-8323-g7fc.json +++ b/advisories/unreviewed/2022/04/GHSA-ph82-8323-g7fc/GHSA-ph82-8323-g7fc.json @@ -7,12 +7,8 @@ "CVE-2001-0525" ], "details": "Buffer overflow in dsh in dqs 3.2.7 in SuSE Linux 7.0 and earlier, and possibly other operating systems, allows local users to gain privileges via a long first command line argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-phxm-5734-wmwm/GHSA-phxm-5734-wmwm.json b/advisories/unreviewed/2022/04/GHSA-phxm-5734-wmwm/GHSA-phxm-5734-wmwm.json index f76f2d5c5dc..cc9054ed731 100644 --- a/advisories/unreviewed/2022/04/GHSA-phxm-5734-wmwm/GHSA-phxm-5734-wmwm.json +++ b/advisories/unreviewed/2022/04/GHSA-phxm-5734-wmwm/GHSA-phxm-5734-wmwm.json @@ -7,12 +7,8 @@ "CVE-2001-0768" ], "details": "GuildFTPd 0.9.7 stores user names and passwords in plaintext in the default.usr file, which allows local users to gain privileges as other FTP users by reading the file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-ppgw-xx7q-mwfh/GHSA-ppgw-xx7q-mwfh.json b/advisories/unreviewed/2022/04/GHSA-ppgw-xx7q-mwfh/GHSA-ppgw-xx7q-mwfh.json index d873290a0a3..ec8d78c3562 100644 --- a/advisories/unreviewed/2022/04/GHSA-ppgw-xx7q-mwfh/GHSA-ppgw-xx7q-mwfh.json +++ b/advisories/unreviewed/2022/04/GHSA-ppgw-xx7q-mwfh/GHSA-ppgw-xx7q-mwfh.json @@ -7,12 +7,8 @@ "CVE-2001-0591" ], "details": "Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remote attacker to read or execute arbitrary .jsp files via a '..' (dot dot) attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-ppqc-x76v-9j38/GHSA-ppqc-x76v-9j38.json b/advisories/unreviewed/2022/04/GHSA-ppqc-x76v-9j38/GHSA-ppqc-x76v-9j38.json index bc9aaa85247..9ce612ff8c1 100644 --- a/advisories/unreviewed/2022/04/GHSA-ppqc-x76v-9j38/GHSA-ppqc-x76v-9j38.json +++ b/advisories/unreviewed/2022/04/GHSA-ppqc-x76v-9j38/GHSA-ppqc-x76v-9j38.json @@ -7,12 +7,8 @@ "CVE-2001-0791" ], "details": "Trend Micro InterScan VirusWall for Windows NT allows remote attackers to make configuration changes by directly calling certain CGI programs, which do not restrict access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pqjr-vcr7-q9hv/GHSA-pqjr-vcr7-q9hv.json b/advisories/unreviewed/2022/04/GHSA-pqjr-vcr7-q9hv/GHSA-pqjr-vcr7-q9hv.json index 8ff9b51d9e6..f326dd1189a 100644 --- a/advisories/unreviewed/2022/04/GHSA-pqjr-vcr7-q9hv/GHSA-pqjr-vcr7-q9hv.json +++ b/advisories/unreviewed/2022/04/GHSA-pqjr-vcr7-q9hv/GHSA-pqjr-vcr7-q9hv.json @@ -7,12 +7,8 @@ "CVE-2001-0619" ], "details": "The Lucent Closed Network protocol can allow remote attackers to join Closed Network networks which they do not have access to. The 'Network Name' or SSID, which is used as a shared secret to join the network, is transmitted in the clear.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pqp4-m4cg-2cqf/GHSA-pqp4-m4cg-2cqf.json b/advisories/unreviewed/2022/04/GHSA-pqp4-m4cg-2cqf/GHSA-pqp4-m4cg-2cqf.json index 9dbe4e09c21..eeb431ba568 100644 --- a/advisories/unreviewed/2022/04/GHSA-pqp4-m4cg-2cqf/GHSA-pqp4-m4cg-2cqf.json +++ b/advisories/unreviewed/2022/04/GHSA-pqp4-m4cg-2cqf/GHSA-pqp4-m4cg-2cqf.json @@ -7,12 +7,8 @@ "CVE-2001-0660" ], "details": "Outlook Web Access (OWA) in Microsoft Exchange 5.5, SP4 and earlier, allows remote attackers to identify valid user email addresses by directly accessing a back-end function that processes the global address list (GAL).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pqwr-pvf3-j99w/GHSA-pqwr-pvf3-j99w.json b/advisories/unreviewed/2022/04/GHSA-pqwr-pvf3-j99w/GHSA-pqwr-pvf3-j99w.json index 0857405b577..fd889279ff9 100644 --- a/advisories/unreviewed/2022/04/GHSA-pqwr-pvf3-j99w/GHSA-pqwr-pvf3-j99w.json +++ b/advisories/unreviewed/2022/04/GHSA-pqwr-pvf3-j99w/GHSA-pqwr-pvf3-j99w.json @@ -7,12 +7,8 @@ "CVE-2001-0466" ], "details": "Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pwqq-cjfr-9p7q/GHSA-pwqq-cjfr-9p7q.json b/advisories/unreviewed/2022/04/GHSA-pwqq-cjfr-9p7q/GHSA-pwqq-cjfr-9p7q.json index 03e8ce7c87b..d1022a62859 100644 --- a/advisories/unreviewed/2022/04/GHSA-pwqq-cjfr-9p7q/GHSA-pwqq-cjfr-9p7q.json +++ b/advisories/unreviewed/2022/04/GHSA-pwqq-cjfr-9p7q/GHSA-pwqq-cjfr-9p7q.json @@ -7,12 +7,8 @@ "CVE-2001-0561" ], "details": "Directory traversal vulnerability in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in (1) a1disp2.cgi, (2) a1disp3.cgi, or (3) a1disp4.cgi.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-q258-g5w9-5g82/GHSA-q258-g5w9-5g82.json b/advisories/unreviewed/2022/04/GHSA-q258-g5w9-5g82/GHSA-q258-g5w9-5g82.json index f1d12e503a5..98096edc809 100644 --- a/advisories/unreviewed/2022/04/GHSA-q258-g5w9-5g82/GHSA-q258-g5w9-5g82.json +++ b/advisories/unreviewed/2022/04/GHSA-q258-g5w9-5g82/GHSA-q258-g5w9-5g82.json @@ -7,12 +7,8 @@ "CVE-2001-0822" ], "details": "FPF kernel module 1.0 allows a remote attacker to cause a denial of service via fragmented packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-q594-7xf7-r573/GHSA-q594-7xf7-r573.json b/advisories/unreviewed/2022/04/GHSA-q594-7xf7-r573/GHSA-q594-7xf7-r573.json index b0639fcaae6..b87eaddd44b 100644 --- a/advisories/unreviewed/2022/04/GHSA-q594-7xf7-r573/GHSA-q594-7xf7-r573.json +++ b/advisories/unreviewed/2022/04/GHSA-q594-7xf7-r573/GHSA-q594-7xf7-r573.json @@ -7,12 +7,8 @@ "CVE-2001-0773" ], "details": "Cayman 3220-H DSL Router 1.0 allows remote attacker to cause a denial of service (crash) via a series of SYN or TCP connect requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-q8cv-frx7-5xrc/GHSA-q8cv-frx7-5xrc.json b/advisories/unreviewed/2022/04/GHSA-q8cv-frx7-5xrc/GHSA-q8cv-frx7-5xrc.json index 4ec2e40b414..4d05ee7f292 100644 --- a/advisories/unreviewed/2022/04/GHSA-q8cv-frx7-5xrc/GHSA-q8cv-frx7-5xrc.json +++ b/advisories/unreviewed/2022/04/GHSA-q8cv-frx7-5xrc/GHSA-q8cv-frx7-5xrc.json @@ -7,12 +7,8 @@ "CVE-2001-0733" ], "details": "The #sinclude directive in Embedded Perl (ePerl) 2.2.14 and earlier allows a remote attacker to execute arbitrary code by modifying the 'sinclude' file to point to another file that contains a #include directive that references a file that contains the code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-q9jq-hvf8-hhx9/GHSA-q9jq-hvf8-hhx9.json b/advisories/unreviewed/2022/04/GHSA-q9jq-hvf8-hhx9/GHSA-q9jq-hvf8-hhx9.json index f7780ff1351..b0a99ef4b1c 100644 --- a/advisories/unreviewed/2022/04/GHSA-q9jq-hvf8-hhx9/GHSA-q9jq-hvf8-hhx9.json +++ b/advisories/unreviewed/2022/04/GHSA-q9jq-hvf8-hhx9/GHSA-q9jq-hvf8-hhx9.json @@ -7,12 +7,8 @@ "CVE-2001-0689" ], "details": "Vulnerability in TrendMicro Virus Control System 1.8 allows a remote attacker to view configuration files and change the configuration via a certain CGI program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qcj9-r95j-g5gq/GHSA-qcj9-r95j-g5gq.json b/advisories/unreviewed/2022/04/GHSA-qcj9-r95j-g5gq/GHSA-qcj9-r95j-g5gq.json index 0b3879f6c5c..ec058dd763e 100644 --- a/advisories/unreviewed/2022/04/GHSA-qcj9-r95j-g5gq/GHSA-qcj9-r95j-g5gq.json +++ b/advisories/unreviewed/2022/04/GHSA-qcj9-r95j-g5gq/GHSA-qcj9-r95j-g5gq.json @@ -7,12 +7,8 @@ "CVE-2001-0492" ], "details": "Netcruiser Web server version 0.1.2.8 and earlier allows remote attackers to determine the physical path of the server via a URL containing (1) con, (2) com2, or (3) com3.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qf9q-9x9f-q6jp/GHSA-qf9q-9x9f-q6jp.json b/advisories/unreviewed/2022/04/GHSA-qf9q-9x9f-q6jp/GHSA-qf9q-9x9f-q6jp.json index 698256fd78b..68711364ab4 100644 --- a/advisories/unreviewed/2022/04/GHSA-qf9q-9x9f-q6jp/GHSA-qf9q-9x9f-q6jp.json +++ b/advisories/unreviewed/2022/04/GHSA-qf9q-9x9f-q6jp/GHSA-qf9q-9x9f-q6jp.json @@ -7,12 +7,8 @@ "CVE-2001-0723" ], "details": "Internet Explorer 5.5 and 6.0 allows remote attackers to read and modify user cookies via Javascript, aka the \"Second Cookie Handling Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qgc4-q259-hqvf/GHSA-qgc4-q259-hqvf.json b/advisories/unreviewed/2022/04/GHSA-qgc4-q259-hqvf/GHSA-qgc4-q259-hqvf.json index dd16fc784f0..c2b7a24cb76 100644 --- a/advisories/unreviewed/2022/04/GHSA-qgc4-q259-hqvf/GHSA-qgc4-q259-hqvf.json +++ b/advisories/unreviewed/2022/04/GHSA-qgc4-q259-hqvf/GHSA-qgc4-q259-hqvf.json @@ -7,12 +7,8 @@ "CVE-2001-0683" ], "details": "Memory leak in Netscape Collabra Server 3.5.4 and earlier allows a remote attacker to cause a denial of service (memory exhaustion) by repeatedly sending approximately 5K of data to TCP port 5238.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qr36-6223-92fj/GHSA-qr36-6223-92fj.json b/advisories/unreviewed/2022/04/GHSA-qr36-6223-92fj/GHSA-qr36-6223-92fj.json index a2a401e0308..62a779a69ab 100644 --- a/advisories/unreviewed/2022/04/GHSA-qr36-6223-92fj/GHSA-qr36-6223-92fj.json +++ b/advisories/unreviewed/2022/04/GHSA-qr36-6223-92fj/GHSA-qr36-6223-92fj.json @@ -7,12 +7,8 @@ "CVE-2001-0563" ], "details": "ElectroSystems Engineering Inc. ElectroComm 2.0 and earlier allows a remote attacker to create a denial of service via large (> 160000 character) strings sent to port 23.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-r37v-9rmc-jc9m/GHSA-r37v-9rmc-jc9m.json b/advisories/unreviewed/2022/04/GHSA-r37v-9rmc-jc9m/GHSA-r37v-9rmc-jc9m.json index 6d8e4a0fa51..e09fc991123 100644 --- a/advisories/unreviewed/2022/04/GHSA-r37v-9rmc-jc9m/GHSA-r37v-9rmc-jc9m.json +++ b/advisories/unreviewed/2022/04/GHSA-r37v-9rmc-jc9m/GHSA-r37v-9rmc-jc9m.json @@ -7,12 +7,8 @@ "CVE-2001-0674" ], "details": "Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a hexadecimal encoded dot-dot attack (eg. http://www.server.com/%2e%2e/%2e%2e) in an HTTP URL request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-r3px-pvv4-w76c/GHSA-r3px-pvv4-w76c.json b/advisories/unreviewed/2022/04/GHSA-r3px-pvv4-w76c/GHSA-r3px-pvv4-w76c.json index cb2aa0928be..b8c2e8bcc52 100644 --- a/advisories/unreviewed/2022/04/GHSA-r3px-pvv4-w76c/GHSA-r3px-pvv4-w76c.json +++ b/advisories/unreviewed/2022/04/GHSA-r3px-pvv4-w76c/GHSA-r3px-pvv4-w76c.json @@ -7,12 +7,8 @@ "CVE-2001-0583" ], "details": "Alt-N Technologies MDaemon 3.5.4 allows a remote attacker to create a denial of service via the URL request of a MS-DOS device (such as GET /aux) to (1) the Worldclient service at port 3000, or (2) the Webconfig service at port 3001.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-r467-8m32-3x44/GHSA-r467-8m32-3x44.json b/advisories/unreviewed/2022/04/GHSA-r467-8m32-3x44/GHSA-r467-8m32-3x44.json index 307ed1fa566..f2ff9ecc084 100644 --- a/advisories/unreviewed/2022/04/GHSA-r467-8m32-3x44/GHSA-r467-8m32-3x44.json +++ b/advisories/unreviewed/2022/04/GHSA-r467-8m32-3x44/GHSA-r467-8m32-3x44.json @@ -7,12 +7,8 @@ "CVE-2001-0501" ], "details": "Microsoft Word 2002 and earlier allows attackers to automatically execute macros without warning the user by embedding the macros in a manner that escapes detection by the security scanner.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-r5wp-92q4-r3r8/GHSA-r5wp-92q4-r3r8.json b/advisories/unreviewed/2022/04/GHSA-r5wp-92q4-r3r8/GHSA-r5wp-92q4-r3r8.json index 18d7a47ef7d..44641abca9f 100644 --- a/advisories/unreviewed/2022/04/GHSA-r5wp-92q4-r3r8/GHSA-r5wp-92q4-r3r8.json +++ b/advisories/unreviewed/2022/04/GHSA-r5wp-92q4-r3r8/GHSA-r5wp-92q4-r3r8.json @@ -7,12 +7,8 @@ "CVE-2001-0839" ], "details": "ibillpm.pl in iBill password management system generates weak passwords based on a client's MASTER_ACCOUNT, which allows remote attackers to modify account information in the .htpasswd file via brute force password guessing.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rc2w-wpf9-mqc6/GHSA-rc2w-wpf9-mqc6.json b/advisories/unreviewed/2022/04/GHSA-rc2w-wpf9-mqc6/GHSA-rc2w-wpf9-mqc6.json index 9ed7249fe5f..c67e0eb4d2c 100644 --- a/advisories/unreviewed/2022/04/GHSA-rc2w-wpf9-mqc6/GHSA-rc2w-wpf9-mqc6.json +++ b/advisories/unreviewed/2022/04/GHSA-rc2w-wpf9-mqc6/GHSA-rc2w-wpf9-mqc6.json @@ -7,12 +7,8 @@ "CVE-2001-0758" ], "details": "Directory traversal vulnerability in Shambala 4.5 allows remote attackers to escape the FTP root directory via \"CWD ...\" command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rj4m-fq3g-6m6w/GHSA-rj4m-fq3g-6m6w.json b/advisories/unreviewed/2022/04/GHSA-rj4m-fq3g-6m6w/GHSA-rj4m-fq3g-6m6w.json index 60421c9c0b2..67c85552e02 100644 --- a/advisories/unreviewed/2022/04/GHSA-rj4m-fq3g-6m6w/GHSA-rj4m-fq3g-6m6w.json +++ b/advisories/unreviewed/2022/04/GHSA-rj4m-fq3g-6m6w/GHSA-rj4m-fq3g-6m6w.json @@ -7,12 +7,8 @@ "CVE-2001-0680" ], "details": "Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 allows a remote attacker to traverse directories on the web server via a \"dot dot\" attack in a LIST (ls) command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rm67-4g2p-fc5g/GHSA-rm67-4g2p-fc5g.json b/advisories/unreviewed/2022/04/GHSA-rm67-4g2p-fc5g/GHSA-rm67-4g2p-fc5g.json index 35209dc328d..36be5dbbd7c 100644 --- a/advisories/unreviewed/2022/04/GHSA-rm67-4g2p-fc5g/GHSA-rm67-4g2p-fc5g.json +++ b/advisories/unreviewed/2022/04/GHSA-rm67-4g2p-fc5g/GHSA-rm67-4g2p-fc5g.json @@ -7,12 +7,8 @@ "CVE-2001-0770" ], "details": "Buffer overflow in GuildFTPd Server 0.97 allows remote attacker to execute arbitrary code via a long SITE command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rmrv-gqcf-mxp5/GHSA-rmrv-gqcf-mxp5.json b/advisories/unreviewed/2022/04/GHSA-rmrv-gqcf-mxp5/GHSA-rmrv-gqcf-mxp5.json index ef05c0eeb09..0dd761846b9 100644 --- a/advisories/unreviewed/2022/04/GHSA-rmrv-gqcf-mxp5/GHSA-rmrv-gqcf-mxp5.json +++ b/advisories/unreviewed/2022/04/GHSA-rmrv-gqcf-mxp5/GHSA-rmrv-gqcf-mxp5.json @@ -7,12 +7,8 @@ "CVE-2001-0737" ], "details": "A long 'synch' delay in Logitech wireless mice and keyboard receivers allows a remote attacker to hijack connections via a man-in-the-middle attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rr68-4frw-wr7p/GHSA-rr68-4frw-wr7p.json b/advisories/unreviewed/2022/04/GHSA-rr68-4frw-wr7p/GHSA-rr68-4frw-wr7p.json index b4c6db41851..349a8249236 100644 --- a/advisories/unreviewed/2022/04/GHSA-rr68-4frw-wr7p/GHSA-rr68-4frw-wr7p.json +++ b/advisories/unreviewed/2022/04/GHSA-rr68-4frw-wr7p/GHSA-rr68-4frw-wr7p.json @@ -7,12 +7,8 @@ "CVE-2001-0527" ], "details": "DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (|) and newlines into the last name in the registration form, which will create an extra entry in the registration database.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rrv8-9998-54j9/GHSA-rrv8-9998-54j9.json b/advisories/unreviewed/2022/04/GHSA-rrv8-9998-54j9/GHSA-rrv8-9998-54j9.json index fee1f89c688..ef86a976252 100644 --- a/advisories/unreviewed/2022/04/GHSA-rrv8-9998-54j9/GHSA-rrv8-9998-54j9.json +++ b/advisories/unreviewed/2022/04/GHSA-rrv8-9998-54j9/GHSA-rrv8-9998-54j9.json @@ -7,12 +7,8 @@ "CVE-2001-0505" ], "details": "Multiple memory leaks in Microsoft Services for Unix 2.0 allow remote attackers to cause a denial of service (memory exhaustion) via a large number of malformed requests to (1) the Telnet service, or (2) the NFS service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rw69-vhf8-p5r9/GHSA-rw69-vhf8-p5r9.json b/advisories/unreviewed/2022/04/GHSA-rw69-vhf8-p5r9/GHSA-rw69-vhf8-p5r9.json index f8a1ffcc730..93b53522ef7 100644 --- a/advisories/unreviewed/2022/04/GHSA-rw69-vhf8-p5r9/GHSA-rw69-vhf8-p5r9.json +++ b/advisories/unreviewed/2022/04/GHSA-rw69-vhf8-p5r9/GHSA-rw69-vhf8-p5r9.json @@ -7,12 +7,8 @@ "CVE-2001-0681" ], "details": "Buffer overflow in ftpd in QPC QVT/Net 5.0 and QVT/Term 5.0 allows a remote attacker to cause a denial of service via a long (1) username or (2) password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rw9p-vcxp-p42f/GHSA-rw9p-vcxp-p42f.json b/advisories/unreviewed/2022/04/GHSA-rw9p-vcxp-p42f/GHSA-rw9p-vcxp-p42f.json index 3ef324d711e..73ee1be83d1 100644 --- a/advisories/unreviewed/2022/04/GHSA-rw9p-vcxp-p42f/GHSA-rw9p-vcxp-p42f.json +++ b/advisories/unreviewed/2022/04/GHSA-rw9p-vcxp-p42f/GHSA-rw9p-vcxp-p42f.json @@ -7,12 +7,8 @@ "CVE-2001-0544" ], "details": "IIS 5.0 allows local users to cause a denial of service (hang) via by installing content that produces a certain invalid MIME Content-Type header, which corrupts the File Type table.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v23w-48rr-p76g/GHSA-v23w-48rr-p76g.json b/advisories/unreviewed/2022/04/GHSA-v23w-48rr-p76g/GHSA-v23w-48rr-p76g.json index c5547bd6dd6..ba7e2df5404 100644 --- a/advisories/unreviewed/2022/04/GHSA-v23w-48rr-p76g/GHSA-v23w-48rr-p76g.json +++ b/advisories/unreviewed/2022/04/GHSA-v23w-48rr-p76g/GHSA-v23w-48rr-p76g.json @@ -7,12 +7,8 @@ "CVE-2001-0749" ], "details": "Beck IPC GmbH IPC@CHIP Embedded-Webserver allows remote attackers to read arbitrary files via a webserver root directory set to system root.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v26x-mmmw-vpcf/GHSA-v26x-mmmw-vpcf.json b/advisories/unreviewed/2022/04/GHSA-v26x-mmmw-vpcf/GHSA-v26x-mmmw-vpcf.json index 88d8b5d69a0..6a7b043a4d1 100644 --- a/advisories/unreviewed/2022/04/GHSA-v26x-mmmw-vpcf/GHSA-v26x-mmmw-vpcf.json +++ b/advisories/unreviewed/2022/04/GHSA-v26x-mmmw-vpcf/GHSA-v26x-mmmw-vpcf.json @@ -7,12 +7,8 @@ "CVE-2001-0614" ], "details": "Carello E-Commerce 1.2.1 and earlier allows a remote attacker to gain additional privileges and execute arbitrary commands via a specially constructed URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v2gf-33gc-47jc/GHSA-v2gf-33gc-47jc.json b/advisories/unreviewed/2022/04/GHSA-v2gf-33gc-47jc/GHSA-v2gf-33gc-47jc.json index bf2ef86b1f6..66d62a5c9b2 100644 --- a/advisories/unreviewed/2022/04/GHSA-v2gf-33gc-47jc/GHSA-v2gf-33gc-47jc.json +++ b/advisories/unreviewed/2022/04/GHSA-v2gf-33gc-47jc/GHSA-v2gf-33gc-47jc.json @@ -7,12 +7,8 @@ "CVE-2001-0513" ], "details": "Oracle listener process on Windows NT redirects connection requests to another port and creates a separate thread to process the request, which allows remote attackers to cause a denial of service by repeatedly connecting to the Oracle listener but not connecting to the redirected port.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v342-cw75-3jq9/GHSA-v342-cw75-3jq9.json b/advisories/unreviewed/2022/04/GHSA-v342-cw75-3jq9/GHSA-v342-cw75-3jq9.json index 7af0ef485b0..23a90b1caba 100644 --- a/advisories/unreviewed/2022/04/GHSA-v342-cw75-3jq9/GHSA-v342-cw75-3jq9.json +++ b/advisories/unreviewed/2022/04/GHSA-v342-cw75-3jq9/GHSA-v342-cw75-3jq9.json @@ -7,12 +7,8 @@ "CVE-2001-0621" ], "details": "The FTP server on Cisco Content Service 11000 series switches (CSS) before WebNS 4.01B23s and WebNS 4.10B13s allows an attacker who is an FTP user to read and write arbitrary files via GET or PUT commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v476-48f2-w7pm/GHSA-v476-48f2-w7pm.json b/advisories/unreviewed/2022/04/GHSA-v476-48f2-w7pm/GHSA-v476-48f2-w7pm.json index 6e0ea11a07c..66ec1d3c0de 100644 --- a/advisories/unreviewed/2022/04/GHSA-v476-48f2-w7pm/GHSA-v476-48f2-w7pm.json +++ b/advisories/unreviewed/2022/04/GHSA-v476-48f2-w7pm/GHSA-v476-48f2-w7pm.json @@ -7,12 +7,8 @@ "CVE-2001-0831" ], "details": "Unknown vulnerability in Oracle Label Security in Oracle 8.1.7 and 9.0.1, when audit functionality, SET_LABEL, or SQL*Predicate is being used, allows local users to gain additional access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v59f-9wq8-3hgg/GHSA-v59f-9wq8-3hgg.json b/advisories/unreviewed/2022/04/GHSA-v59f-9wq8-3hgg/GHSA-v59f-9wq8-3hgg.json index e109c9721d3..abfe6b609fa 100644 --- a/advisories/unreviewed/2022/04/GHSA-v59f-9wq8-3hgg/GHSA-v59f-9wq8-3hgg.json +++ b/advisories/unreviewed/2022/04/GHSA-v59f-9wq8-3hgg/GHSA-v59f-9wq8-3hgg.json @@ -7,12 +7,8 @@ "CVE-2001-0751" ], "details": "Cisco switches and routers running CBOS 2.3.8 and earlier use predictable TCP Initial Sequence Numbers (ISN), which allows remote attackers to spoof or hijack TCP connections.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v6hf-54vc-wr5c/GHSA-v6hf-54vc-wr5c.json b/advisories/unreviewed/2022/04/GHSA-v6hf-54vc-wr5c/GHSA-v6hf-54vc-wr5c.json index bf350041e9c..99631e1e73a 100644 --- a/advisories/unreviewed/2022/04/GHSA-v6hf-54vc-wr5c/GHSA-v6hf-54vc-wr5c.json +++ b/advisories/unreviewed/2022/04/GHSA-v6hf-54vc-wr5c/GHSA-v6hf-54vc-wr5c.json @@ -7,12 +7,8 @@ "CVE-2001-0834" ], "details": "htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) by specifying a large file such as /dev/zero, or (2) read arbitrary files by uploading an alternate configuration file that specifies the target file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v995-9m4x-qchc/GHSA-v995-9m4x-qchc.json b/advisories/unreviewed/2022/04/GHSA-v995-9m4x-qchc/GHSA-v995-9m4x-qchc.json index 1dbccad450f..139745994ba 100644 --- a/advisories/unreviewed/2022/04/GHSA-v995-9m4x-qchc/GHSA-v995-9m4x-qchc.json +++ b/advisories/unreviewed/2022/04/GHSA-v995-9m4x-qchc/GHSA-v995-9m4x-qchc.json @@ -7,12 +7,8 @@ "CVE-2001-0709" ], "details": "Microsoft IIS 4.0 and before, when installed on a FAT partition, allows a remote attacker to obtain source code of ASP files via a URL encoded with Unicode.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vc9x-422x-j6wh/GHSA-vc9x-422x-j6wh.json b/advisories/unreviewed/2022/04/GHSA-vc9x-422x-j6wh/GHSA-vc9x-422x-j6wh.json index e7a7147ffff..04de341ccc2 100644 --- a/advisories/unreviewed/2022/04/GHSA-vc9x-422x-j6wh/GHSA-vc9x-422x-j6wh.json +++ b/advisories/unreviewed/2022/04/GHSA-vc9x-422x-j6wh/GHSA-vc9x-422x-j6wh.json @@ -7,12 +7,8 @@ "CVE-2001-0608" ], "details": "HP architected interface facility (AIF) as includes with MPE/iX 5.5 through 6.5 running on a HP3000 allows an attacker to gain additional privileges and gain access to databases via the AIF - AIFCHANGELOGON program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vgvr-p7mx-p57j/GHSA-vgvr-p7mx-p57j.json b/advisories/unreviewed/2022/04/GHSA-vgvr-p7mx-p57j/GHSA-vgvr-p7mx-p57j.json index d8dab52934b..4c31650b07e 100644 --- a/advisories/unreviewed/2022/04/GHSA-vgvr-p7mx-p57j/GHSA-vgvr-p7mx-p57j.json +++ b/advisories/unreviewed/2022/04/GHSA-vgvr-p7mx-p57j/GHSA-vgvr-p7mx-p57j.json @@ -7,12 +7,8 @@ "CVE-2001-0763" ], "details": "Buffer overflow in Linux xinetd 2.1.8.9pre11-1 and earlier may allow remote attackers to execute arbitrary code via a long ident response, which is not properly handled by the svc_logprint function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vh7p-m8gj-7qq3/GHSA-vh7p-m8gj-7qq3.json b/advisories/unreviewed/2022/04/GHSA-vh7p-m8gj-7qq3/GHSA-vh7p-m8gj-7qq3.json index d59be749051..c3d3b18d793 100644 --- a/advisories/unreviewed/2022/04/GHSA-vh7p-m8gj-7qq3/GHSA-vh7p-m8gj-7qq3.json +++ b/advisories/unreviewed/2022/04/GHSA-vh7p-m8gj-7qq3/GHSA-vh7p-m8gj-7qq3.json @@ -7,12 +7,8 @@ "CVE-2001-0630" ], "details": "Directory traversal vulnerability in MIMAnet viewsrc.cgi 2.0 allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in the 'loc' variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vhx2-58f3-9f8j/GHSA-vhx2-58f3-9f8j.json b/advisories/unreviewed/2022/04/GHSA-vhx2-58f3-9f8j/GHSA-vhx2-58f3-9f8j.json index d45b167e480..8586ab51023 100644 --- a/advisories/unreviewed/2022/04/GHSA-vhx2-58f3-9f8j/GHSA-vhx2-58f3-9f8j.json +++ b/advisories/unreviewed/2022/04/GHSA-vhx2-58f3-9f8j/GHSA-vhx2-58f3-9f8j.json @@ -7,12 +7,8 @@ "CVE-2001-0642" ], "details": "Directory traversal vulnerability in IncrediMail version 1400185 and earlier allows local users to overwrite files on the local hard drive by appending .. (dot dot) sequences to filenames listed in the content.ini file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vjg8-57hm-fxmj/GHSA-vjg8-57hm-fxmj.json b/advisories/unreviewed/2022/04/GHSA-vjg8-57hm-fxmj/GHSA-vjg8-57hm-fxmj.json index 942d2b72d58..b5f6f597e17 100644 --- a/advisories/unreviewed/2022/04/GHSA-vjg8-57hm-fxmj/GHSA-vjg8-57hm-fxmj.json +++ b/advisories/unreviewed/2022/04/GHSA-vjg8-57hm-fxmj/GHSA-vjg8-57hm-fxmj.json @@ -7,12 +7,8 @@ "CVE-2001-0506" ], "details": "Buffer overflow in ssinc.dll in IIS 5.0 and 4.0 allows local users to gain system privileges via a Server-Side Includes (SSI) directive for a long filename, which triggers the overflow when the directory name is added, aka the \"SSI privilege elevation\" vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vmr4-xpmw-84pf/GHSA-vmr4-xpmw-84pf.json b/advisories/unreviewed/2022/04/GHSA-vmr4-xpmw-84pf/GHSA-vmr4-xpmw-84pf.json index 1274db06e26..ce67658e516 100644 --- a/advisories/unreviewed/2022/04/GHSA-vmr4-xpmw-84pf/GHSA-vmr4-xpmw-84pf.json +++ b/advisories/unreviewed/2022/04/GHSA-vmr4-xpmw-84pf/GHSA-vmr4-xpmw-84pf.json @@ -7,12 +7,8 @@ "CVE-2001-0671" ], "details": "Buffer overflows in (1) send_status, (2) kill_print, and (3) chk_fhost in lpd in AIX 4.3 and 5.1 allow remote attackers to gain root privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vmrx-337p-88gv/GHSA-vmrx-337p-88gv.json b/advisories/unreviewed/2022/04/GHSA-vmrx-337p-88gv/GHSA-vmrx-337p-88gv.json index d5c4c8c261a..d7451d08777 100644 --- a/advisories/unreviewed/2022/04/GHSA-vmrx-337p-88gv/GHSA-vmrx-337p-88gv.json +++ b/advisories/unreviewed/2022/04/GHSA-vmrx-337p-88gv/GHSA-vmrx-337p-88gv.json @@ -7,12 +7,8 @@ "CVE-2001-0658" ], "details": "Cross-site scripting (CSS) vulnerability in Microsoft Internet Security and Acceleration (ISA) Server 2000 allows remote attackers to cause other clients to execute certain script or read cookies via malicious script in an invalid URL that is not properly quoted in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vqw8-7vgj-vq9c/GHSA-vqw8-7vgj-vq9c.json b/advisories/unreviewed/2022/04/GHSA-vqw8-7vgj-vq9c/GHSA-vqw8-7vgj-vq9c.json index 58704d1879a..a4f642cbb2f 100644 --- a/advisories/unreviewed/2022/04/GHSA-vqw8-7vgj-vq9c/GHSA-vqw8-7vgj-vq9c.json +++ b/advisories/unreviewed/2022/04/GHSA-vqw8-7vgj-vq9c/GHSA-vqw8-7vgj-vq9c.json @@ -7,12 +7,8 @@ "CVE-2001-0697" ], "details": "NetWin SurgeFTP prior to 1.1h allows a remote attacker to cause a denial of service (crash) via an 'ls ..' command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vrqv-jfm9-wq9q/GHSA-vrqv-jfm9-wq9q.json b/advisories/unreviewed/2022/04/GHSA-vrqv-jfm9-wq9q/GHSA-vrqv-jfm9-wq9q.json index 884703f6981..6e4eefd99f9 100644 --- a/advisories/unreviewed/2022/04/GHSA-vrqv-jfm9-wq9q/GHSA-vrqv-jfm9-wq9q.json +++ b/advisories/unreviewed/2022/04/GHSA-vrqv-jfm9-wq9q/GHSA-vrqv-jfm9-wq9q.json @@ -7,12 +7,8 @@ "CVE-2001-0489" ], "details": "Format string vulnerability in gftp prior to 2.0.8 allows remote malicious FTP servers to execute arbitrary commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vw5c-mpv8-qjf6/GHSA-vw5c-mpv8-qjf6.json b/advisories/unreviewed/2022/04/GHSA-vw5c-mpv8-qjf6/GHSA-vw5c-mpv8-qjf6.json index 61b5686837e..a1b5a05f96c 100644 --- a/advisories/unreviewed/2022/04/GHSA-vw5c-mpv8-qjf6/GHSA-vw5c-mpv8-qjf6.json +++ b/advisories/unreviewed/2022/04/GHSA-vw5c-mpv8-qjf6/GHSA-vw5c-mpv8-qjf6.json @@ -7,12 +7,8 @@ "CVE-2001-0573" ], "details": "lsfs in AIX 4.x allows a local user to gain additional privileges by creating Trojan horse programs named (1) grep or (2) lslv in a certain directory that is under the user's control, which cause lsfs to access the programs in that directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vwm4-vhxv-9c48/GHSA-vwm4-vhxv-9c48.json b/advisories/unreviewed/2022/04/GHSA-vwm4-vhxv-9c48/GHSA-vwm4-vhxv-9c48.json index b3245bcac4d..71c43791b80 100644 --- a/advisories/unreviewed/2022/04/GHSA-vwm4-vhxv-9c48/GHSA-vwm4-vhxv-9c48.json +++ b/advisories/unreviewed/2022/04/GHSA-vwm4-vhxv-9c48/GHSA-vwm4-vhxv-9c48.json @@ -7,12 +7,8 @@ "CVE-2001-0702" ], "details": "Cerberus FTP 1.5 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long (1) username, (2) password, or (3) PASV command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vxvf-m47h-xpm3/GHSA-vxvf-m47h-xpm3.json b/advisories/unreviewed/2022/04/GHSA-vxvf-m47h-xpm3/GHSA-vxvf-m47h-xpm3.json index 10e9db9e6ee..659d84ae293 100644 --- a/advisories/unreviewed/2022/04/GHSA-vxvf-m47h-xpm3/GHSA-vxvf-m47h-xpm3.json +++ b/advisories/unreviewed/2022/04/GHSA-vxvf-m47h-xpm3/GHSA-vxvf-m47h-xpm3.json @@ -7,12 +7,8 @@ "CVE-2001-0807" ], "details": "Internet Explorer 5.0, and possibly other versions, may allow remote attackers (malicious web pages) to read known text files from a client's hard drive via a SCRIPT tag with a SRC value that points to the text file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-w29j-xq6f-jhmr/GHSA-w29j-xq6f-jhmr.json b/advisories/unreviewed/2022/04/GHSA-w29j-xq6f-jhmr/GHSA-w29j-xq6f-jhmr.json index 34e11a695d8..62d2b3731d4 100644 --- a/advisories/unreviewed/2022/04/GHSA-w29j-xq6f-jhmr/GHSA-w29j-xq6f-jhmr.json +++ b/advisories/unreviewed/2022/04/GHSA-w29j-xq6f-jhmr/GHSA-w29j-xq6f-jhmr.json @@ -7,12 +7,8 @@ "CVE-2001-0617" ], "details": "Allied Telesyn AT-AR220e cable/DSL router firmware 1.08a RC14 with the portmapper and the 'Virtual Server' enabled can allow a remote attacker to gain access to mapped services even though the single portmappings may be disabled.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-w38q-jf8r-5q4w/GHSA-w38q-jf8r-5q4w.json b/advisories/unreviewed/2022/04/GHSA-w38q-jf8r-5q4w/GHSA-w38q-jf8r-5q4w.json index b4038c13329..7098cb9f96f 100644 --- a/advisories/unreviewed/2022/04/GHSA-w38q-jf8r-5q4w/GHSA-w38q-jf8r-5q4w.json +++ b/advisories/unreviewed/2022/04/GHSA-w38q-jf8r-5q4w/GHSA-w38q-jf8r-5q4w.json @@ -7,12 +7,8 @@ "CVE-2001-0825" ], "details": "Buffer overflow in internal string handling routines of xinetd before 2.1.8.8 allows remote attackers to execute arbitrary commands via a length argument of zero or less, which disables the length check.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-w4fp-j2mm-3rrv/GHSA-w4fp-j2mm-3rrv.json b/advisories/unreviewed/2022/04/GHSA-w4fp-j2mm-3rrv/GHSA-w4fp-j2mm-3rrv.json index 065b64cab3a..0da30f7868b 100644 --- a/advisories/unreviewed/2022/04/GHSA-w4fp-j2mm-3rrv/GHSA-w4fp-j2mm-3rrv.json +++ b/advisories/unreviewed/2022/04/GHSA-w4fp-j2mm-3rrv/GHSA-w4fp-j2mm-3rrv.json @@ -7,12 +7,8 @@ "CVE-2001-0566" ], "details": "Cisco Catalyst 2900XL switch allows a remote attacker to create a denial of service via an empty UDP packet sent to port 161 (SNMP) when SNMP is disabled.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-w4h5-5xwp-3m26/GHSA-w4h5-5xwp-3m26.json b/advisories/unreviewed/2022/04/GHSA-w4h5-5xwp-3m26/GHSA-w4h5-5xwp-3m26.json index 9b80325b91d..c3393053c1e 100644 --- a/advisories/unreviewed/2022/04/GHSA-w4h5-5xwp-3m26/GHSA-w4h5-5xwp-3m26.json +++ b/advisories/unreviewed/2022/04/GHSA-w4h5-5xwp-3m26/GHSA-w4h5-5xwp-3m26.json @@ -7,12 +7,8 @@ "CVE-2001-0700" ], "details": "Buffer overflow in w3m 0.2.1 and earlier allows a remote attacker to execute arbitrary code via a long base64 encoded MIME header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-w55g-rvcg-557g/GHSA-w55g-rvcg-557g.json b/advisories/unreviewed/2022/04/GHSA-w55g-rvcg-557g/GHSA-w55g-rvcg-557g.json index 95a10cd53c4..697e07d1240 100644 --- a/advisories/unreviewed/2022/04/GHSA-w55g-rvcg-557g/GHSA-w55g-rvcg-557g.json +++ b/advisories/unreviewed/2022/04/GHSA-w55g-rvcg-557g/GHSA-w55g-rvcg-557g.json @@ -7,12 +7,8 @@ "CVE-2001-0598" ], "details": "Symantec Ghost 6.5 and earlier allows a remote attacker to create a denial of service by sending large (> 45Kb) amounts of data to the Ghost Configuration Server on port 1347, which triggers an error that is not properly handled.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-w743-8w2p-vcx8/GHSA-w743-8w2p-vcx8.json b/advisories/unreviewed/2022/04/GHSA-w743-8w2p-vcx8/GHSA-w743-8w2p-vcx8.json index 1e3ef0c02fd..e0995a6799d 100644 --- a/advisories/unreviewed/2022/04/GHSA-w743-8w2p-vcx8/GHSA-w743-8w2p-vcx8.json +++ b/advisories/unreviewed/2022/04/GHSA-w743-8w2p-vcx8/GHSA-w743-8w2p-vcx8.json @@ -7,12 +7,8 @@ "CVE-2001-0738" ], "details": "LogLine function in klogd in sysklogd 1.3 in various Linux distributions allows an attacker to cause a denial of service (hang) by causing null bytes to be placed in log messages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-w7gq-qfwh-xj2g/GHSA-w7gq-qfwh-xj2g.json b/advisories/unreviewed/2022/04/GHSA-w7gq-qfwh-xj2g/GHSA-w7gq-qfwh-xj2g.json index 0bab47bdfe6..effb04f13e9 100644 --- a/advisories/unreviewed/2022/04/GHSA-w7gq-qfwh-xj2g/GHSA-w7gq-qfwh-xj2g.json +++ b/advisories/unreviewed/2022/04/GHSA-w7gq-qfwh-xj2g/GHSA-w7gq-qfwh-xj2g.json @@ -7,12 +7,8 @@ "CVE-2001-0542" ], "details": "Buffer overflows in Microsoft SQL Server 7.0 and 2000 allow attackers with access to SQL Server to execute arbitrary code through the functions (1) raiserror, (2) formatmessage, or (3) xp_sprintf. NOTE: the C runtime format string vulnerability reported in MS01-060 is identified by CVE-2001-0879.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-w7pw-r66f-j336/GHSA-w7pw-r66f-j336.json b/advisories/unreviewed/2022/04/GHSA-w7pw-r66f-j336/GHSA-w7pw-r66f-j336.json index 093fc32b135..c4842eaca07 100644 --- a/advisories/unreviewed/2022/04/GHSA-w7pw-r66f-j336/GHSA-w7pw-r66f-j336.json +++ b/advisories/unreviewed/2022/04/GHSA-w7pw-r66f-j336/GHSA-w7pw-r66f-j336.json @@ -7,12 +7,8 @@ "CVE-2001-0624" ], "details": "QNX 2.4 allows a local user to read arbitrary files by directly accessing the mount point for the FAT disk partition, e.g. /fs-dos.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-w87c-vrw9-p6ww/GHSA-w87c-vrw9-p6ww.json b/advisories/unreviewed/2022/04/GHSA-w87c-vrw9-p6ww/GHSA-w87c-vrw9-p6ww.json index 9ab873966d2..030a11e1fb6 100644 --- a/advisories/unreviewed/2022/04/GHSA-w87c-vrw9-p6ww/GHSA-w87c-vrw9-p6ww.json +++ b/advisories/unreviewed/2022/04/GHSA-w87c-vrw9-p6ww/GHSA-w87c-vrw9-p6ww.json @@ -7,12 +7,8 @@ "CVE-2001-0469" ], "details": "rwho daemon rwhod in FreeBSD 4.2 and earlier, and possibly other operating systems, allows remote attackers to cause a denial of service via malformed packets with a short length.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wcm2-97pp-qw79/GHSA-wcm2-97pp-qw79.json b/advisories/unreviewed/2022/04/GHSA-wcm2-97pp-qw79/GHSA-wcm2-97pp-qw79.json index fd74ecbde7f..c1e34770837 100644 --- a/advisories/unreviewed/2022/04/GHSA-wcm2-97pp-qw79/GHSA-wcm2-97pp-qw79.json +++ b/advisories/unreviewed/2022/04/GHSA-wcm2-97pp-qw79/GHSA-wcm2-97pp-qw79.json @@ -7,12 +7,8 @@ "CVE-2001-0480" ], "details": "Directory traversal vulnerability in Alex's FTP Server 0.7 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the (1) GET or (2) CD commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wg3f-9jg5-mqm8/GHSA-wg3f-9jg5-mqm8.json b/advisories/unreviewed/2022/04/GHSA-wg3f-9jg5-mqm8/GHSA-wg3f-9jg5-mqm8.json index e02285e526e..e270ee7a6a1 100644 --- a/advisories/unreviewed/2022/04/GHSA-wg3f-9jg5-mqm8/GHSA-wg3f-9jg5-mqm8.json +++ b/advisories/unreviewed/2022/04/GHSA-wg3f-9jg5-mqm8/GHSA-wg3f-9jg5-mqm8.json @@ -7,12 +7,8 @@ "CVE-2001-0695" ], "details": "WFTPD 3.00 R5 allows a remote attacker to cause a denial of service by making repeated requests to cd to the floppy drive (A:\\).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wg63-hgm9-2f74/GHSA-wg63-hgm9-2f74.json b/advisories/unreviewed/2022/04/GHSA-wg63-hgm9-2f74/GHSA-wg63-hgm9-2f74.json index d320b7b3af6..de5ff2852ce 100644 --- a/advisories/unreviewed/2022/04/GHSA-wg63-hgm9-2f74/GHSA-wg63-hgm9-2f74.json +++ b/advisories/unreviewed/2022/04/GHSA-wg63-hgm9-2f74/GHSA-wg63-hgm9-2f74.json @@ -7,12 +7,8 @@ "CVE-2001-0502" ], "details": "Running Windows 2000 LDAP Server over SSL, a function does not properly check the permissions of a user request when the directory principal is a domain user and the data attribute is the domain password, which allows local users to modify the login password of other users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wg6x-3j33-cqjr/GHSA-wg6x-3j33-cqjr.json b/advisories/unreviewed/2022/04/GHSA-wg6x-3j33-cqjr/GHSA-wg6x-3j33-cqjr.json index 2a0fd1bd994..126514b89f2 100644 --- a/advisories/unreviewed/2022/04/GHSA-wg6x-3j33-cqjr/GHSA-wg6x-3j33-cqjr.json +++ b/advisories/unreviewed/2022/04/GHSA-wg6x-3j33-cqjr/GHSA-wg6x-3j33-cqjr.json @@ -7,12 +7,8 @@ "CVE-2001-0530" ], "details": "Spearhead NetGAP 200 and 300 before build 78 allow a remote attacker to bypass file blocking and content inspection via specially encoded URLs which include '%' characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wh97-7rv6-fvfx/GHSA-wh97-7rv6-fvfx.json b/advisories/unreviewed/2022/04/GHSA-wh97-7rv6-fvfx/GHSA-wh97-7rv6-fvfx.json index 348bc8d546f..d67bdf4efb8 100644 --- a/advisories/unreviewed/2022/04/GHSA-wh97-7rv6-fvfx/GHSA-wh97-7rv6-fvfx.json +++ b/advisories/unreviewed/2022/04/GHSA-wh97-7rv6-fvfx/GHSA-wh97-7rv6-fvfx.json @@ -7,12 +7,8 @@ "CVE-2001-0600" ], "details": "Lotus Domino R5 prior to 5.0.7 allows a remote attacker to create a denial of service via repeated URL requests with the same HTTP headers, such as (1) Accept, (2) Accept-Charset, (3) Accept-Encoding, (4) Accept-Language, and (5) Content-Type.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wjjg-qcjc-rrj3/GHSA-wjjg-qcjc-rrj3.json b/advisories/unreviewed/2022/04/GHSA-wjjg-qcjc-rrj3/GHSA-wjjg-qcjc-rrj3.json index c39b4821ca9..43c877b1c28 100644 --- a/advisories/unreviewed/2022/04/GHSA-wjjg-qcjc-rrj3/GHSA-wjjg-qcjc-rrj3.json +++ b/advisories/unreviewed/2022/04/GHSA-wjjg-qcjc-rrj3/GHSA-wjjg-qcjc-rrj3.json @@ -7,12 +7,8 @@ "CVE-2001-0504" ], "details": "Vulnerability in authentication process for SMTP service in Microsoft Windows 2000 allows remote attackers to use incorrect credentials to gain privileges and conduct activities such as mail relaying.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wmjp-jcfp-7jf8/GHSA-wmjp-jcfp-7jf8.json b/advisories/unreviewed/2022/04/GHSA-wmjp-jcfp-7jf8/GHSA-wmjp-jcfp-7jf8.json index dac42767fe6..60cfc8a87c4 100644 --- a/advisories/unreviewed/2022/04/GHSA-wmjp-jcfp-7jf8/GHSA-wmjp-jcfp-7jf8.json +++ b/advisories/unreviewed/2022/04/GHSA-wmjp-jcfp-7jf8/GHSA-wmjp-jcfp-7jf8.json @@ -7,12 +7,8 @@ "CVE-2001-0690" ], "details": "Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wp33-mjh9-8whw/GHSA-wp33-mjh9-8whw.json b/advisories/unreviewed/2022/04/GHSA-wp33-mjh9-8whw/GHSA-wp33-mjh9-8whw.json index b7459f3e7ec..1d3acfa7d27 100644 --- a/advisories/unreviewed/2022/04/GHSA-wp33-mjh9-8whw/GHSA-wp33-mjh9-8whw.json +++ b/advisories/unreviewed/2022/04/GHSA-wp33-mjh9-8whw/GHSA-wp33-mjh9-8whw.json @@ -7,12 +7,8 @@ "CVE-2001-0448" ], "details": "Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service via an HTTP GET HTTP request to the aux directory, and possibly other directories with legacy DOS device names.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wpp7-4crq-f956/GHSA-wpp7-4crq-f956.json b/advisories/unreviewed/2022/04/GHSA-wpp7-4crq-f956/GHSA-wpp7-4crq-f956.json index c9d7b9cbc09..ff75d898e15 100644 --- a/advisories/unreviewed/2022/04/GHSA-wpp7-4crq-f956/GHSA-wpp7-4crq-f956.json +++ b/advisories/unreviewed/2022/04/GHSA-wpp7-4crq-f956/GHSA-wpp7-4crq-f956.json @@ -7,12 +7,8 @@ "CVE-2001-0688" ], "details": "Broker FTP Server 5.9.5.0 allows a remote attacker to cause a denial of service by repeatedly issuing an invalid CD or CWD (\"CD . .\") command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wq4g-59xh-hgm3/GHSA-wq4g-59xh-hgm3.json b/advisories/unreviewed/2022/04/GHSA-wq4g-59xh-hgm3/GHSA-wq4g-59xh-hgm3.json index 0e55bfb1a86..fc8a183ca6a 100644 --- a/advisories/unreviewed/2022/04/GHSA-wq4g-59xh-hgm3/GHSA-wq4g-59xh-hgm3.json +++ b/advisories/unreviewed/2022/04/GHSA-wq4g-59xh-hgm3/GHSA-wq4g-59xh-hgm3.json @@ -7,12 +7,8 @@ "CVE-2001-0516" ], "details": "Oracle listener between Oracle 9i and Oracle 8.0 allows remote attackers to cause a denial of service via a malformed connection packet that contains an incorrect requester_version value that does not match an expected offset to the data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wv45-cm76-g47p/GHSA-wv45-cm76-g47p.json b/advisories/unreviewed/2022/04/GHSA-wv45-cm76-g47p/GHSA-wv45-cm76-g47p.json index 1de9e29a589..f53a565d589 100644 --- a/advisories/unreviewed/2022/04/GHSA-wv45-cm76-g47p/GHSA-wv45-cm76-g47p.json +++ b/advisories/unreviewed/2022/04/GHSA-wv45-cm76-g47p/GHSA-wv45-cm76-g47p.json @@ -7,12 +7,8 @@ "CVE-2001-0587" ], "details": "deliver program in MMDF 2.43.3b in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wwm2-x3fp-c6ph/GHSA-wwm2-x3fp-c6ph.json b/advisories/unreviewed/2022/04/GHSA-wwm2-x3fp-c6ph/GHSA-wwm2-x3fp-c6ph.json index cf6c2e752a8..8168a3f8b14 100644 --- a/advisories/unreviewed/2022/04/GHSA-wwm2-x3fp-c6ph/GHSA-wwm2-x3fp-c6ph.json +++ b/advisories/unreviewed/2022/04/GHSA-wwm2-x3fp-c6ph/GHSA-wwm2-x3fp-c6ph.json @@ -7,12 +7,8 @@ "CVE-2001-0771" ], "details": "Spytech SpyAnywhere 1.50 allows remote attackers to gain administrator access via a single character in the \"loginpass\" field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wxj7-wg2v-8362/GHSA-wxj7-wg2v-8362.json b/advisories/unreviewed/2022/04/GHSA-wxj7-wg2v-8362/GHSA-wxj7-wg2v-8362.json index b8c657fdc9c..93d9d84389a 100644 --- a/advisories/unreviewed/2022/04/GHSA-wxj7-wg2v-8362/GHSA-wxj7-wg2v-8362.json +++ b/advisories/unreviewed/2022/04/GHSA-wxj7-wg2v-8362/GHSA-wxj7-wg2v-8362.json @@ -7,12 +7,8 @@ "CVE-2001-0817" ], "details": "Vulnerability in HP-UX line printer daemon (rlpdaemon) in HP-UX 10.01 through 11.11 allows remote attackers to modify arbitrary files and gain root privileges via a certain print request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x55p-rh55-qcxv/GHSA-x55p-rh55-qcxv.json b/advisories/unreviewed/2022/04/GHSA-x55p-rh55-qcxv/GHSA-x55p-rh55-qcxv.json index 930c2234e7e..cbe29f3ff6c 100644 --- a/advisories/unreviewed/2022/04/GHSA-x55p-rh55-qcxv/GHSA-x55p-rh55-qcxv.json +++ b/advisories/unreviewed/2022/04/GHSA-x55p-rh55-qcxv/GHSA-x55p-rh55-qcxv.json @@ -7,12 +7,8 @@ "CVE-2001-0499" ], "details": "Buffer overflow in Transparent Network Substrate (TNS) Listener in Oracle 8i 8.1.7 and earlier allows remote attackers to gain privileges via a long argument to the commands (1) STATUS, (2) PING, (3) SERVICES, (4) TRC_FILE, (5) SAVE_CONFIG, or (6) RELOAD.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x5hv-pj66-v68q/GHSA-x5hv-pj66-v68q.json b/advisories/unreviewed/2022/04/GHSA-x5hv-pj66-v68q/GHSA-x5hv-pj66-v68q.json index bb0c89153a1..a42a189a404 100644 --- a/advisories/unreviewed/2022/04/GHSA-x5hv-pj66-v68q/GHSA-x5hv-pj66-v68q.json +++ b/advisories/unreviewed/2022/04/GHSA-x5hv-pj66-v68q/GHSA-x5hv-pj66-v68q.json @@ -7,12 +7,8 @@ "CVE-2001-0641" ], "details": "Buffer overflow in man program in various distributions of Linux allows local user to execute arbitrary code as group man via a long -S option.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x6g9-pg8p-c822/GHSA-x6g9-pg8p-c822.json b/advisories/unreviewed/2022/04/GHSA-x6g9-pg8p-c822/GHSA-x6g9-pg8p-c822.json index 1f508753e4e..dfc9f12200b 100644 --- a/advisories/unreviewed/2022/04/GHSA-x6g9-pg8p-c822/GHSA-x6g9-pg8p-c822.json +++ b/advisories/unreviewed/2022/04/GHSA-x6g9-pg8p-c822/GHSA-x6g9-pg8p-c822.json @@ -7,12 +7,8 @@ "CVE-2001-0607" ], "details": "asecure as included with HP-UX 10.01 through 11.00 can allow a local attacker to create a denial of service and gain additional privileges via unsafe permissions on the asecure program, a different vulnerability than CVE-2000-0083.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x7jp-wrv8-52h3/GHSA-x7jp-wrv8-52h3.json b/advisories/unreviewed/2022/04/GHSA-x7jp-wrv8-52h3/GHSA-x7jp-wrv8-52h3.json index 1f63c4c5051..7d01299a664 100644 --- a/advisories/unreviewed/2022/04/GHSA-x7jp-wrv8-52h3/GHSA-x7jp-wrv8-52h3.json +++ b/advisories/unreviewed/2022/04/GHSA-x7jp-wrv8-52h3/GHSA-x7jp-wrv8-52h3.json @@ -7,12 +7,8 @@ "CVE-2001-0730" ], "details": "split-logfile in Apache 1.3.20 allows remote attackers to overwrite arbitrary files that end in the .log extension via an HTTP request with a / (slash) in the Host: header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x7mj-wjqj-jc9c/GHSA-x7mj-wjqj-jc9c.json b/advisories/unreviewed/2022/04/GHSA-x7mj-wjqj-jc9c/GHSA-x7mj-wjqj-jc9c.json index 7d413118c5c..c108af09cb4 100644 --- a/advisories/unreviewed/2022/04/GHSA-x7mj-wjqj-jc9c/GHSA-x7mj-wjqj-jc9c.json +++ b/advisories/unreviewed/2022/04/GHSA-x7mj-wjqj-jc9c/GHSA-x7mj-wjqj-jc9c.json @@ -7,12 +7,8 @@ "CVE-2001-0574" ], "details": "Directory traversal vulnerability in MP3Mystic prior to 1.04b3 allows a remote attacker to download arbitrary files via a '..' (dot dot) in the URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x8w9-p5vr-g9q8/GHSA-x8w9-p5vr-g9q8.json b/advisories/unreviewed/2022/04/GHSA-x8w9-p5vr-g9q8/GHSA-x8w9-p5vr-g9q8.json index faea3146997..953a0e53cc0 100644 --- a/advisories/unreviewed/2022/04/GHSA-x8w9-p5vr-g9q8/GHSA-x8w9-p5vr-g9q8.json +++ b/advisories/unreviewed/2022/04/GHSA-x8w9-p5vr-g9q8/GHSA-x8w9-p5vr-g9q8.json @@ -7,12 +7,8 @@ "CVE-2001-0558" ], "details": "T. Hauck Jana Webserver 2.01 beta 1 and earlier allows a remote attacker to create a denial of service via a URL request which includes a MS-DOS device name (i.e. GET /aux HTTP/1.0).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x955-p245-jg2j/GHSA-x955-p245-jg2j.json b/advisories/unreviewed/2022/04/GHSA-x955-p245-jg2j/GHSA-x955-p245-jg2j.json index 7fb7bd2e1f0..6ec7233e024 100644 --- a/advisories/unreviewed/2022/04/GHSA-x955-p245-jg2j/GHSA-x955-p245-jg2j.json +++ b/advisories/unreviewed/2022/04/GHSA-x955-p245-jg2j/GHSA-x955-p245-jg2j.json @@ -7,12 +7,8 @@ "CVE-2001-0474" ], "details": "Utah-glx in Mesa before 3.3-14 on Mandrake Linux 7.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/glxmemory file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x95q-59mj-wfrx/GHSA-x95q-59mj-wfrx.json b/advisories/unreviewed/2022/04/GHSA-x95q-59mj-wfrx/GHSA-x95q-59mj-wfrx.json index ebad6517b2b..f0e9ccc46b8 100644 --- a/advisories/unreviewed/2022/04/GHSA-x95q-59mj-wfrx/GHSA-x95q-59mj-wfrx.json +++ b/advisories/unreviewed/2022/04/GHSA-x95q-59mj-wfrx/GHSA-x95q-59mj-wfrx.json @@ -7,12 +7,8 @@ "CVE-2001-0476" ], "details": "Multiple buffer overflows in s.cgi program in Aspseek search engine 1.03 and earlier allow remote attackers to execute arbitrary commands via (1) a long HTTP query string, or (2) a long tmpl parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x995-3jq6-p477/GHSA-x995-3jq6-p477.json b/advisories/unreviewed/2022/04/GHSA-x995-3jq6-p477/GHSA-x995-3jq6-p477.json index 833a0c1e78f..d0469ec168a 100644 --- a/advisories/unreviewed/2022/04/GHSA-x995-3jq6-p477/GHSA-x995-3jq6-p477.json +++ b/advisories/unreviewed/2022/04/GHSA-x995-3jq6-p477/GHSA-x995-3jq6-p477.json @@ -7,12 +7,8 @@ "CVE-2001-0852" ], "details": "TUX HTTP server 2.1.0-2 in Red Hat Linux allows remote attackers to cause a denial of service via a long Host: header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xgxx-52g8-m9j3/GHSA-xgxx-52g8-m9j3.json b/advisories/unreviewed/2022/04/GHSA-xgxx-52g8-m9j3/GHSA-xgxx-52g8-m9j3.json index f45d2b115ef..5ae5982acf5 100644 --- a/advisories/unreviewed/2022/04/GHSA-xgxx-52g8-m9j3/GHSA-xgxx-52g8-m9j3.json +++ b/advisories/unreviewed/2022/04/GHSA-xgxx-52g8-m9j3/GHSA-xgxx-52g8-m9j3.json @@ -7,12 +7,8 @@ "CVE-2001-0471" ], "details": "SSH daemon version 1 (aka SSHD-1 or SSH-1) 1.2.30 and earlier does not log repeated login attempts, which could allow remote attackers to compromise accounts without detection via a brute force attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xh29-wvh5-6vww/GHSA-xh29-wvh5-6vww.json b/advisories/unreviewed/2022/04/GHSA-xh29-wvh5-6vww/GHSA-xh29-wvh5-6vww.json index bfba641cbb4..c2396b163f9 100644 --- a/advisories/unreviewed/2022/04/GHSA-xh29-wvh5-6vww/GHSA-xh29-wvh5-6vww.json +++ b/advisories/unreviewed/2022/04/GHSA-xh29-wvh5-6vww/GHSA-xh29-wvh5-6vww.json @@ -7,12 +7,8 @@ "CVE-2001-0662" ], "details": "RPC endpoint mapper in Windows NT 4.0 allows remote attackers to cause a denial of service (loss of RPC services) via a malformed request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xqxf-jjq4-grw6/GHSA-xqxf-jjq4-grw6.json b/advisories/unreviewed/2022/04/GHSA-xqxf-jjq4-grw6/GHSA-xqxf-jjq4-grw6.json index 1cece7407be..51e562496a8 100644 --- a/advisories/unreviewed/2022/04/GHSA-xqxf-jjq4-grw6/GHSA-xqxf-jjq4-grw6.json +++ b/advisories/unreviewed/2022/04/GHSA-xqxf-jjq4-grw6/GHSA-xqxf-jjq4-grw6.json @@ -7,12 +7,8 @@ "CVE-2001-0736" ], "details": "Vulnerability in (1) pine before 4.33 and (2) the pico editor, included with pine, allows local users local users to overwrite arbitrary files via a symlink attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xwgr-px3j-45w8/GHSA-xwgr-px3j-45w8.json b/advisories/unreviewed/2022/04/GHSA-xwgr-px3j-45w8/GHSA-xwgr-px3j-45w8.json index c7f30e59f7a..092ce74ef42 100644 --- a/advisories/unreviewed/2022/04/GHSA-xwgr-px3j-45w8/GHSA-xwgr-px3j-45w8.json +++ b/advisories/unreviewed/2022/04/GHSA-xwgr-px3j-45w8/GHSA-xwgr-px3j-45w8.json @@ -7,12 +7,8 @@ "CVE-2001-0769" ], "details": "Memory leak in GuildFTPd Server 0.97 allows remote attackers to cause a denial of service via a request containing a null character.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xxqr-h45r-xgm7/GHSA-xxqr-h45r-xgm7.json b/advisories/unreviewed/2022/04/GHSA-xxqr-h45r-xgm7/GHSA-xxqr-h45r-xgm7.json index 67ea84e56ee..1d16adada39 100644 --- a/advisories/unreviewed/2022/04/GHSA-xxqr-h45r-xgm7/GHSA-xxqr-h45r-xgm7.json +++ b/advisories/unreviewed/2022/04/GHSA-xxqr-h45r-xgm7/GHSA-xxqr-h45r-xgm7.json @@ -7,12 +7,8 @@ "CVE-2001-0538" ], "details": "Microsoft Outlook View ActiveX Control in Microsoft Outlook 2002 and earlier allows remote attackers to execute arbitrary commands via a malicious HTML e-mail message or web page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xxwc-wcp3-hfp4/GHSA-xxwc-wcp3-hfp4.json b/advisories/unreviewed/2022/04/GHSA-xxwc-wcp3-hfp4/GHSA-xxwc-wcp3-hfp4.json index def98589659..7af58ef8b8d 100644 --- a/advisories/unreviewed/2022/04/GHSA-xxwc-wcp3-hfp4/GHSA-xxwc-wcp3-hfp4.json +++ b/advisories/unreviewed/2022/04/GHSA-xxwc-wcp3-hfp4/GHSA-xxwc-wcp3-hfp4.json @@ -7,12 +7,8 @@ "CVE-2001-0559" ], "details": "crontab in Vixie cron 3.0.1 and earlier does not properly drop privileges after the failed parsing of a modification operation, which could allow a local attacker to gain additional privileges when an editor is called to correct the error.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xxwv-v223-5w4w/GHSA-xxwv-v223-5w4w.json b/advisories/unreviewed/2022/04/GHSA-xxwv-v223-5w4w/GHSA-xxwv-v223-5w4w.json index fbd3e069888..5ba183fbe4a 100644 --- a/advisories/unreviewed/2022/04/GHSA-xxwv-v223-5w4w/GHSA-xxwv-v223-5w4w.json +++ b/advisories/unreviewed/2022/04/GHSA-xxwv-v223-5w4w/GHSA-xxwv-v223-5w4w.json @@ -7,12 +7,8 @@ "CVE-2001-0838" ], "details": "Format string vulnerability in Network Solutions Rwhoisd 1.5.x allows remote attackers to execute arbitrary code via format string specifiers in the -soa command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-236c-rp7g-fqf2/GHSA-236c-rp7g-fqf2.json b/advisories/unreviewed/2022/05/GHSA-236c-rp7g-fqf2/GHSA-236c-rp7g-fqf2.json index 52b3d358b0e..c1764f5086f 100644 --- a/advisories/unreviewed/2022/05/GHSA-236c-rp7g-fqf2/GHSA-236c-rp7g-fqf2.json +++ b/advisories/unreviewed/2022/05/GHSA-236c-rp7g-fqf2/GHSA-236c-rp7g-fqf2.json @@ -7,12 +7,8 @@ "CVE-2021-1227" ], "details": "A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the NX-API on an affected device. An attacker could exploit this vulnerability by persuading a user of the NX-API to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user. The attacker could view and modify the device configuration. Note: The NX-API feature is disabled by default.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-23rx-x963-qprq/GHSA-23rx-x963-qprq.json b/advisories/unreviewed/2022/05/GHSA-23rx-x963-qprq/GHSA-23rx-x963-qprq.json index b65ac6a8925..48ef64b62b8 100644 --- a/advisories/unreviewed/2022/05/GHSA-23rx-x963-qprq/GHSA-23rx-x963-qprq.json +++ b/advisories/unreviewed/2022/05/GHSA-23rx-x963-qprq/GHSA-23rx-x963-qprq.json @@ -7,12 +7,8 @@ "CVE-2020-36240" ], "details": "The ResourceDownloadRewriteRule class in Crowd before version 4.0.4, and from version 4.1.0 before 4.1.2 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-24pc-7pxr-jg3q/GHSA-24pc-7pxr-jg3q.json b/advisories/unreviewed/2022/05/GHSA-24pc-7pxr-jg3q/GHSA-24pc-7pxr-jg3q.json index ed0d9b69f4d..dc490b9ea15 100644 --- a/advisories/unreviewed/2022/05/GHSA-24pc-7pxr-jg3q/GHSA-24pc-7pxr-jg3q.json +++ b/advisories/unreviewed/2022/05/GHSA-24pc-7pxr-jg3q/GHSA-24pc-7pxr-jg3q.json @@ -7,12 +7,8 @@ "CVE-2021-27132" ], "details": "SerComm AG Combo VD625 AGSOT_2.1.0 devices allow CRLF injection (for HTTP header injection) in the download function via the Content-Disposition header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-257g-8w4g-3cc3/GHSA-257g-8w4g-3cc3.json b/advisories/unreviewed/2022/05/GHSA-257g-8w4g-3cc3/GHSA-257g-8w4g-3cc3.json index d515e67d95b..707107ea326 100644 --- a/advisories/unreviewed/2022/05/GHSA-257g-8w4g-3cc3/GHSA-257g-8w4g-3cc3.json +++ b/advisories/unreviewed/2022/05/GHSA-257g-8w4g-3cc3/GHSA-257g-8w4g-3cc3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-258j-hjx4-w4m2/GHSA-258j-hjx4-w4m2.json b/advisories/unreviewed/2022/05/GHSA-258j-hjx4-w4m2/GHSA-258j-hjx4-w4m2.json index 622aaab6728..e0fcf05d67b 100644 --- a/advisories/unreviewed/2022/05/GHSA-258j-hjx4-w4m2/GHSA-258j-hjx4-w4m2.json +++ b/advisories/unreviewed/2022/05/GHSA-258j-hjx4-w4m2/GHSA-258j-hjx4-w4m2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-258p-xh3c-g68w/GHSA-258p-xh3c-g68w.json b/advisories/unreviewed/2022/05/GHSA-258p-xh3c-g68w/GHSA-258p-xh3c-g68w.json index 72374c91a3d..a949c8610a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-258p-xh3c-g68w/GHSA-258p-xh3c-g68w.json +++ b/advisories/unreviewed/2022/05/GHSA-258p-xh3c-g68w/GHSA-258p-xh3c-g68w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-26g9-w943-5ghm/GHSA-26g9-w943-5ghm.json b/advisories/unreviewed/2022/05/GHSA-26g9-w943-5ghm/GHSA-26g9-w943-5ghm.json index 762867c7687..452ec6d73cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-26g9-w943-5ghm/GHSA-26g9-w943-5ghm.json +++ b/advisories/unreviewed/2022/05/GHSA-26g9-w943-5ghm/GHSA-26g9-w943-5ghm.json @@ -7,12 +7,8 @@ "CVE-2020-12529" ], "details": "An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2 There is a SSRF in the LDAP access check, allowing an attacker to scan for open ports.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-27p2-q4g5-wxm8/GHSA-27p2-q4g5-wxm8.json b/advisories/unreviewed/2022/05/GHSA-27p2-q4g5-wxm8/GHSA-27p2-q4g5-wxm8.json index 6d884e38728..b4ae2090056 100644 --- a/advisories/unreviewed/2022/05/GHSA-27p2-q4g5-wxm8/GHSA-27p2-q4g5-wxm8.json +++ b/advisories/unreviewed/2022/05/GHSA-27p2-q4g5-wxm8/GHSA-27p2-q4g5-wxm8.json @@ -7,12 +7,8 @@ "CVE-2021-22183" ], "details": "An issue has been discovered in GitLab affecting all versions starting with 11.8. GitLab was vulnerable to a stored XSS in the epics page, which could be exploited with user interactions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-289r-fr2j-6m55/GHSA-289r-fr2j-6m55.json b/advisories/unreviewed/2022/05/GHSA-289r-fr2j-6m55/GHSA-289r-fr2j-6m55.json index d51f6b701f5..200eddbf517 100644 --- a/advisories/unreviewed/2022/05/GHSA-289r-fr2j-6m55/GHSA-289r-fr2j-6m55.json +++ b/advisories/unreviewed/2022/05/GHSA-289r-fr2j-6m55/GHSA-289r-fr2j-6m55.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2f58-3p8j-4mx4/GHSA-2f58-3p8j-4mx4.json b/advisories/unreviewed/2022/05/GHSA-2f58-3p8j-4mx4/GHSA-2f58-3p8j-4mx4.json index 7e779d8efef..f00c189b65f 100644 --- a/advisories/unreviewed/2022/05/GHSA-2f58-3p8j-4mx4/GHSA-2f58-3p8j-4mx4.json +++ b/advisories/unreviewed/2022/05/GHSA-2f58-3p8j-4mx4/GHSA-2f58-3p8j-4mx4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2f7j-f5g4-9827/GHSA-2f7j-f5g4-9827.json b/advisories/unreviewed/2022/05/GHSA-2f7j-f5g4-9827/GHSA-2f7j-f5g4-9827.json index 6490c625227..faf80b84c7d 100644 --- a/advisories/unreviewed/2022/05/GHSA-2f7j-f5g4-9827/GHSA-2f7j-f5g4-9827.json +++ b/advisories/unreviewed/2022/05/GHSA-2f7j-f5g4-9827/GHSA-2f7j-f5g4-9827.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2fqp-gw29-6924/GHSA-2fqp-gw29-6924.json b/advisories/unreviewed/2022/05/GHSA-2fqp-gw29-6924/GHSA-2fqp-gw29-6924.json index f9f64a01c34..261b38262db 100644 --- a/advisories/unreviewed/2022/05/GHSA-2fqp-gw29-6924/GHSA-2fqp-gw29-6924.json +++ b/advisories/unreviewed/2022/05/GHSA-2fqp-gw29-6924/GHSA-2fqp-gw29-6924.json @@ -7,12 +7,8 @@ "CVE-2021-20340" ], "details": "IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194451.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2gxp-7297-pp9h/GHSA-2gxp-7297-pp9h.json b/advisories/unreviewed/2022/05/GHSA-2gxp-7297-pp9h/GHSA-2gxp-7297-pp9h.json index 2d986e2e32c..b97f2014467 100644 --- a/advisories/unreviewed/2022/05/GHSA-2gxp-7297-pp9h/GHSA-2gxp-7297-pp9h.json +++ b/advisories/unreviewed/2022/05/GHSA-2gxp-7297-pp9h/GHSA-2gxp-7297-pp9h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2r68-8x78-ffgh/GHSA-2r68-8x78-ffgh.json b/advisories/unreviewed/2022/05/GHSA-2r68-8x78-ffgh/GHSA-2r68-8x78-ffgh.json index 612b906ff7d..28b7972d860 100644 --- a/advisories/unreviewed/2022/05/GHSA-2r68-8x78-ffgh/GHSA-2r68-8x78-ffgh.json +++ b/advisories/unreviewed/2022/05/GHSA-2r68-8x78-ffgh/GHSA-2r68-8x78-ffgh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2r6r-vm5x-qh4p/GHSA-2r6r-vm5x-qh4p.json b/advisories/unreviewed/2022/05/GHSA-2r6r-vm5x-qh4p/GHSA-2r6r-vm5x-qh4p.json index 989f6350ab6..d9d31084618 100644 --- a/advisories/unreviewed/2022/05/GHSA-2r6r-vm5x-qh4p/GHSA-2r6r-vm5x-qh4p.json +++ b/advisories/unreviewed/2022/05/GHSA-2r6r-vm5x-qh4p/GHSA-2r6r-vm5x-qh4p.json @@ -7,12 +7,8 @@ "CVE-2021-21514" ], "details": "Dell EMC OpenManage Server Administrator (OMSA) versions 9.5 and prior contain a path traversal vulnerability. A remote user with admin privileges could potentially exploit this vulnerability to view arbitrary files on the target system by sending a specially crafted URL request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2rf2-p79x-79wj/GHSA-2rf2-p79x-79wj.json b/advisories/unreviewed/2022/05/GHSA-2rf2-p79x-79wj/GHSA-2rf2-p79x-79wj.json index 06d68e2395a..605d7e06dcf 100644 --- a/advisories/unreviewed/2022/05/GHSA-2rf2-p79x-79wj/GHSA-2rf2-p79x-79wj.json +++ b/advisories/unreviewed/2022/05/GHSA-2rf2-p79x-79wj/GHSA-2rf2-p79x-79wj.json @@ -7,12 +7,8 @@ "CVE-2021-27931" ], "details": "LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp. One can send a request crafted with an XXE payload and achieve outcomes such as reading local server files or denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2w33-vxph-6jr3/GHSA-2w33-vxph-6jr3.json b/advisories/unreviewed/2022/05/GHSA-2w33-vxph-6jr3/GHSA-2w33-vxph-6jr3.json index c0497fa8e51..60ba90c7a6d 100644 --- a/advisories/unreviewed/2022/05/GHSA-2w33-vxph-6jr3/GHSA-2w33-vxph-6jr3.json +++ b/advisories/unreviewed/2022/05/GHSA-2w33-vxph-6jr3/GHSA-2w33-vxph-6jr3.json @@ -7,12 +7,8 @@ "CVE-2019-18629" ], "details": "Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow an attacker to execute an unwanted binary during a exploited clone install. This requires creating a clone file and signing that file with a compromised private key.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2wcq-89pp-jvvv/GHSA-2wcq-89pp-jvvv.json b/advisories/unreviewed/2022/05/GHSA-2wcq-89pp-jvvv/GHSA-2wcq-89pp-jvvv.json index 536107bdb2c..38873308939 100644 --- a/advisories/unreviewed/2022/05/GHSA-2wcq-89pp-jvvv/GHSA-2wcq-89pp-jvvv.json +++ b/advisories/unreviewed/2022/05/GHSA-2wcq-89pp-jvvv/GHSA-2wcq-89pp-jvvv.json @@ -7,12 +7,8 @@ "CVE-2021-25333" ], "details": "Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance information over the lockscreen via scanning specific QR code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2xgx-2v3w-62r6/GHSA-2xgx-2v3w-62r6.json b/advisories/unreviewed/2022/05/GHSA-2xgx-2v3w-62r6/GHSA-2xgx-2v3w-62r6.json index 228b98bc959..41760a37a0c 100644 --- a/advisories/unreviewed/2022/05/GHSA-2xgx-2v3w-62r6/GHSA-2xgx-2v3w-62r6.json +++ b/advisories/unreviewed/2022/05/GHSA-2xgx-2v3w-62r6/GHSA-2xgx-2v3w-62r6.json @@ -7,12 +7,8 @@ "CVE-2021-26702" ], "details": "EPrints 3.4.2 exposes a reflected XSS opportunity in the dataset parameter to the cgi/dataset_dictionary URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2xwj-g27r-p9cr/GHSA-2xwj-g27r-p9cr.json b/advisories/unreviewed/2022/05/GHSA-2xwj-g27r-p9cr/GHSA-2xwj-g27r-p9cr.json index caf1a862f85..2c778f13060 100644 --- a/advisories/unreviewed/2022/05/GHSA-2xwj-g27r-p9cr/GHSA-2xwj-g27r-p9cr.json +++ b/advisories/unreviewed/2022/05/GHSA-2xwj-g27r-p9cr/GHSA-2xwj-g27r-p9cr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-32mh-jmjq-p49p/GHSA-32mh-jmjq-p49p.json b/advisories/unreviewed/2022/05/GHSA-32mh-jmjq-p49p/GHSA-32mh-jmjq-p49p.json index 863049ba04e..e0b8bead16b 100644 --- a/advisories/unreviewed/2022/05/GHSA-32mh-jmjq-p49p/GHSA-32mh-jmjq-p49p.json +++ b/advisories/unreviewed/2022/05/GHSA-32mh-jmjq-p49p/GHSA-32mh-jmjq-p49p.json @@ -7,12 +7,8 @@ "CVE-2021-3252" ], "details": "KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials will always be returned in plain-text from the local server during the KACO XP100U authentication process, regardless of whatever passwords have been provided, which leads to an information disclosure vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-36m7-j2mr-5864/GHSA-36m7-j2mr-5864.json b/advisories/unreviewed/2022/05/GHSA-36m7-j2mr-5864/GHSA-36m7-j2mr-5864.json index 6af8c301984..999eacaedd2 100644 --- a/advisories/unreviewed/2022/05/GHSA-36m7-j2mr-5864/GHSA-36m7-j2mr-5864.json +++ b/advisories/unreviewed/2022/05/GHSA-36m7-j2mr-5864/GHSA-36m7-j2mr-5864.json @@ -7,12 +7,8 @@ "CVE-2020-36254" ], "details": "scp.c in Dropbear before 2020.79 mishandles the filename of . or an empty filename, a related issue to CVE-2018-20685.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-398j-x47f-2q99/GHSA-398j-x47f-2q99.json b/advisories/unreviewed/2022/05/GHSA-398j-x47f-2q99/GHSA-398j-x47f-2q99.json index 9fcd5c02516..33e54732ea3 100644 --- a/advisories/unreviewed/2022/05/GHSA-398j-x47f-2q99/GHSA-398j-x47f-2q99.json +++ b/advisories/unreviewed/2022/05/GHSA-398j-x47f-2q99/GHSA-398j-x47f-2q99.json @@ -7,12 +7,8 @@ "CVE-2021-23963" ], "details": "When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control over the currently granted permission. This vulnerability affects Firefox < 85.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-39rg-m8qv-7ff5/GHSA-39rg-m8qv-7ff5.json b/advisories/unreviewed/2022/05/GHSA-39rg-m8qv-7ff5/GHSA-39rg-m8qv-7ff5.json index f97a0222bac..c7f43db6637 100644 --- a/advisories/unreviewed/2022/05/GHSA-39rg-m8qv-7ff5/GHSA-39rg-m8qv-7ff5.json +++ b/advisories/unreviewed/2022/05/GHSA-39rg-m8qv-7ff5/GHSA-39rg-m8qv-7ff5.json @@ -7,12 +7,8 @@ "CVE-2021-22189" ], "details": "Starting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to the validation of the certificates for the Fortinet OTP that could result in authentication issues.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3c6v-c67v-hx4q/GHSA-3c6v-c67v-hx4q.json b/advisories/unreviewed/2022/05/GHSA-3c6v-c67v-hx4q/GHSA-3c6v-c67v-hx4q.json index db589c9fec2..f99f5a49140 100644 --- a/advisories/unreviewed/2022/05/GHSA-3c6v-c67v-hx4q/GHSA-3c6v-c67v-hx4q.json +++ b/advisories/unreviewed/2022/05/GHSA-3c6v-c67v-hx4q/GHSA-3c6v-c67v-hx4q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3ccq-6jj2-4rxc/GHSA-3ccq-6jj2-4rxc.json b/advisories/unreviewed/2022/05/GHSA-3ccq-6jj2-4rxc/GHSA-3ccq-6jj2-4rxc.json index 1a4fdd97dc1..914dae96f21 100644 --- a/advisories/unreviewed/2022/05/GHSA-3ccq-6jj2-4rxc/GHSA-3ccq-6jj2-4rxc.json +++ b/advisories/unreviewed/2022/05/GHSA-3ccq-6jj2-4rxc/GHSA-3ccq-6jj2-4rxc.json @@ -7,12 +7,8 @@ "CVE-2021-20076" ], "details": "Tenable.sc and Tenable.sc Core versions 5.13.0 through 5.17.0 were found to contain a vulnerability that could allow an authenticated, unprivileged user to perform Remote Code Execution (RCE) on the Tenable.sc server via Hypertext Preprocessor unserialization.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3f89-5qh9-mvf8/GHSA-3f89-5qh9-mvf8.json b/advisories/unreviewed/2022/05/GHSA-3f89-5qh9-mvf8/GHSA-3f89-5qh9-mvf8.json index 1ca8fe4ff1d..6042f470453 100644 --- a/advisories/unreviewed/2022/05/GHSA-3f89-5qh9-mvf8/GHSA-3f89-5qh9-mvf8.json +++ b/advisories/unreviewed/2022/05/GHSA-3f89-5qh9-mvf8/GHSA-3f89-5qh9-mvf8.json @@ -7,12 +7,8 @@ "CVE-2019-18944" ], "details": "Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to reflected XSS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3m7j-m5w9-6wr7/GHSA-3m7j-m5w9-6wr7.json b/advisories/unreviewed/2022/05/GHSA-3m7j-m5w9-6wr7/GHSA-3m7j-m5w9-6wr7.json index e3bcb2c95e5..821b247672e 100644 --- a/advisories/unreviewed/2022/05/GHSA-3m7j-m5w9-6wr7/GHSA-3m7j-m5w9-6wr7.json +++ b/advisories/unreviewed/2022/05/GHSA-3m7j-m5w9-6wr7/GHSA-3m7j-m5w9-6wr7.json @@ -7,12 +7,8 @@ "CVE-2020-35664" ], "details": "An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. There is cross-site scripting (XSS) in the console.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3m9j-9gr2-vv75/GHSA-3m9j-9gr2-vv75.json b/advisories/unreviewed/2022/05/GHSA-3m9j-9gr2-vv75/GHSA-3m9j-9gr2-vv75.json index 86c22447e00..937ac55056c 100644 --- a/advisories/unreviewed/2022/05/GHSA-3m9j-9gr2-vv75/GHSA-3m9j-9gr2-vv75.json +++ b/advisories/unreviewed/2022/05/GHSA-3m9j-9gr2-vv75/GHSA-3m9j-9gr2-vv75.json @@ -7,12 +7,8 @@ "CVE-2021-21156" ], "details": "Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted script.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3q3f-m2cj-5323/GHSA-3q3f-m2cj-5323.json b/advisories/unreviewed/2022/05/GHSA-3q3f-m2cj-5323/GHSA-3q3f-m2cj-5323.json index acbc35aa3f2..6730ed0769d 100644 --- a/advisories/unreviewed/2022/05/GHSA-3q3f-m2cj-5323/GHSA-3q3f-m2cj-5323.json +++ b/advisories/unreviewed/2022/05/GHSA-3q3f-m2cj-5323/GHSA-3q3f-m2cj-5323.json @@ -7,12 +7,8 @@ "CVE-2020-4975" ], "details": "IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 192435.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3q9w-xx57-q783/GHSA-3q9w-xx57-q783.json b/advisories/unreviewed/2022/05/GHSA-3q9w-xx57-q783/GHSA-3q9w-xx57-q783.json index 660eebe3b43..fbf5cbc1cea 100644 --- a/advisories/unreviewed/2022/05/GHSA-3q9w-xx57-q783/GHSA-3q9w-xx57-q783.json +++ b/advisories/unreviewed/2022/05/GHSA-3q9w-xx57-q783/GHSA-3q9w-xx57-q783.json @@ -7,12 +7,8 @@ "CVE-2021-27888" ], "details": "ZendTo before 6.06-4 Beta allows XSS during the display of a drop-off in which a filename has unexpected characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3qm7-9jrc-h4gp/GHSA-3qm7-9jrc-h4gp.json b/advisories/unreviewed/2022/05/GHSA-3qm7-9jrc-h4gp/GHSA-3qm7-9jrc-h4gp.json index 990c7d57e4b..3aa92615b4c 100644 --- a/advisories/unreviewed/2022/05/GHSA-3qm7-9jrc-h4gp/GHSA-3qm7-9jrc-h4gp.json +++ b/advisories/unreviewed/2022/05/GHSA-3qm7-9jrc-h4gp/GHSA-3qm7-9jrc-h4gp.json @@ -7,12 +7,8 @@ "CVE-2021-22878" ], "details": "Nextcloud Server prior to 20.0.6 is vulnerable to reflected cross-site scripting (XSS) due to lack of sanitization in `OC.Notification.show`.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3qwh-w55v-784g/GHSA-3qwh-w55v-784g.json b/advisories/unreviewed/2022/05/GHSA-3qwh-w55v-784g/GHSA-3qwh-w55v-784g.json index bf9b6d82917..85ebe947170 100644 --- a/advisories/unreviewed/2022/05/GHSA-3qwh-w55v-784g/GHSA-3qwh-w55v-784g.json +++ b/advisories/unreviewed/2022/05/GHSA-3qwh-w55v-784g/GHSA-3qwh-w55v-784g.json @@ -7,12 +7,8 @@ "CVE-2021-27670" ], "details": "Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3rjx-v36w-2rw5/GHSA-3rjx-v36w-2rw5.json b/advisories/unreviewed/2022/05/GHSA-3rjx-v36w-2rw5/GHSA-3rjx-v36w-2rw5.json index f904e57100d..a031003207d 100644 --- a/advisories/unreviewed/2022/05/GHSA-3rjx-v36w-2rw5/GHSA-3rjx-v36w-2rw5.json +++ b/advisories/unreviewed/2022/05/GHSA-3rjx-v36w-2rw5/GHSA-3rjx-v36w-2rw5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3rxp-2593-q684/GHSA-3rxp-2593-q684.json b/advisories/unreviewed/2022/05/GHSA-3rxp-2593-q684/GHSA-3rxp-2593-q684.json index dd243848c58..2507ea20247 100644 --- a/advisories/unreviewed/2022/05/GHSA-3rxp-2593-q684/GHSA-3rxp-2593-q684.json +++ b/advisories/unreviewed/2022/05/GHSA-3rxp-2593-q684/GHSA-3rxp-2593-q684.json @@ -7,12 +7,8 @@ "CVE-2020-4863" ], "details": "IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190566.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3wrg-wf8p-659h/GHSA-3wrg-wf8p-659h.json b/advisories/unreviewed/2022/05/GHSA-3wrg-wf8p-659h/GHSA-3wrg-wf8p-659h.json index 7b054d21a20..c40e822ad0f 100644 --- a/advisories/unreviewed/2022/05/GHSA-3wrg-wf8p-659h/GHSA-3wrg-wf8p-659h.json +++ b/advisories/unreviewed/2022/05/GHSA-3wrg-wf8p-659h/GHSA-3wrg-wf8p-659h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3xjh-pmmx-g7v2/GHSA-3xjh-pmmx-g7v2.json b/advisories/unreviewed/2022/05/GHSA-3xjh-pmmx-g7v2/GHSA-3xjh-pmmx-g7v2.json index cbcf6a504fd..a76bfa56c30 100644 --- a/advisories/unreviewed/2022/05/GHSA-3xjh-pmmx-g7v2/GHSA-3xjh-pmmx-g7v2.json +++ b/advisories/unreviewed/2022/05/GHSA-3xjh-pmmx-g7v2/GHSA-3xjh-pmmx-g7v2.json @@ -7,12 +7,8 @@ "CVE-2021-0406" ], "details": "In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05471418.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4343-v7g7-q3hr/GHSA-4343-v7g7-q3hr.json b/advisories/unreviewed/2022/05/GHSA-4343-v7g7-q3hr/GHSA-4343-v7g7-q3hr.json index 4a801dc075a..7ce4deede3f 100644 --- a/advisories/unreviewed/2022/05/GHSA-4343-v7g7-q3hr/GHSA-4343-v7g7-q3hr.json +++ b/advisories/unreviewed/2022/05/GHSA-4343-v7g7-q3hr/GHSA-4343-v7g7-q3hr.json @@ -7,12 +7,8 @@ "CVE-2021-22188" ], "details": "An issue has been discovered in GitLab affecting all versions starting with 13.0. Confidential issue titles in Gitlab were readable by an unauthorised user via branch logs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-45hc-g9jq-5gv7/GHSA-45hc-g9jq-5gv7.json b/advisories/unreviewed/2022/05/GHSA-45hc-g9jq-5gv7/GHSA-45hc-g9jq-5gv7.json index 6902419c0bb..9d0fd3f5050 100644 --- a/advisories/unreviewed/2022/05/GHSA-45hc-g9jq-5gv7/GHSA-45hc-g9jq-5gv7.json +++ b/advisories/unreviewed/2022/05/GHSA-45hc-g9jq-5gv7/GHSA-45hc-g9jq-5gv7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-45xc-93qj-34cg/GHSA-45xc-93qj-34cg.json b/advisories/unreviewed/2022/05/GHSA-45xc-93qj-34cg/GHSA-45xc-93qj-34cg.json index 7c0fa01fe70..181d42e9db7 100644 --- a/advisories/unreviewed/2022/05/GHSA-45xc-93qj-34cg/GHSA-45xc-93qj-34cg.json +++ b/advisories/unreviewed/2022/05/GHSA-45xc-93qj-34cg/GHSA-45xc-93qj-34cg.json @@ -7,12 +7,8 @@ "CVE-2021-26475" ], "details": "EPrints 3.4.2 exposes a reflected XSS opportunity in the via a cgi/cal URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4634-gx3f-xvxf/GHSA-4634-gx3f-xvxf.json b/advisories/unreviewed/2022/05/GHSA-4634-gx3f-xvxf/GHSA-4634-gx3f-xvxf.json index b47997dcedc..203173a760b 100644 --- a/advisories/unreviewed/2022/05/GHSA-4634-gx3f-xvxf/GHSA-4634-gx3f-xvxf.json +++ b/advisories/unreviewed/2022/05/GHSA-4634-gx3f-xvxf/GHSA-4634-gx3f-xvxf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-47r6-8wvh-5vg2/GHSA-47r6-8wvh-5vg2.json b/advisories/unreviewed/2022/05/GHSA-47r6-8wvh-5vg2/GHSA-47r6-8wvh-5vg2.json index 0598065eca4..25121a0fd2b 100644 --- a/advisories/unreviewed/2022/05/GHSA-47r6-8wvh-5vg2/GHSA-47r6-8wvh-5vg2.json +++ b/advisories/unreviewed/2022/05/GHSA-47r6-8wvh-5vg2/GHSA-47r6-8wvh-5vg2.json @@ -7,12 +7,8 @@ "CVE-2021-21513" ], "details": "Dell EMC OpenManage Server Administrator (OMSA) version 9.5 Microsoft Windows installations with Distributed Web Server (DWS) enabled configuration contains an authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain admin access on the affected system.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-49f3-c8wm-q9gp/GHSA-49f3-c8wm-q9gp.json b/advisories/unreviewed/2022/05/GHSA-49f3-c8wm-q9gp/GHSA-49f3-c8wm-q9gp.json index 46357e91e4b..5a97f5d874c 100644 --- a/advisories/unreviewed/2022/05/GHSA-49f3-c8wm-q9gp/GHSA-49f3-c8wm-q9gp.json +++ b/advisories/unreviewed/2022/05/GHSA-49f3-c8wm-q9gp/GHSA-49f3-c8wm-q9gp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4f6f-x4m3-rhqj/GHSA-4f6f-x4m3-rhqj.json b/advisories/unreviewed/2022/05/GHSA-4f6f-x4m3-rhqj/GHSA-4f6f-x4m3-rhqj.json index 296712be6a9..69a72382457 100644 --- a/advisories/unreviewed/2022/05/GHSA-4f6f-x4m3-rhqj/GHSA-4f6f-x4m3-rhqj.json +++ b/advisories/unreviewed/2022/05/GHSA-4f6f-x4m3-rhqj/GHSA-4f6f-x4m3-rhqj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4hh5-2hp6-3q94/GHSA-4hh5-2hp6-3q94.json b/advisories/unreviewed/2022/05/GHSA-4hh5-2hp6-3q94/GHSA-4hh5-2hp6-3q94.json index ad2078d1803..2c216a3c8e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-4hh5-2hp6-3q94/GHSA-4hh5-2hp6-3q94.json +++ b/advisories/unreviewed/2022/05/GHSA-4hh5-2hp6-3q94/GHSA-4hh5-2hp6-3q94.json @@ -7,12 +7,8 @@ "CVE-2020-24175" ], "details": "Buffer overflow in Yz1 0.30 and 0.32, as used in IZArc 4.4, ZipGenius 6.3.2.3116, and Explzh (extension) 8.14, allows attackers to execute arbitrary code via a crafted archive file, related to filename handling.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4hq8-rhcf-fxwv/GHSA-4hq8-rhcf-fxwv.json b/advisories/unreviewed/2022/05/GHSA-4hq8-rhcf-fxwv/GHSA-4hq8-rhcf-fxwv.json index ba3b70df47a..c940f2459c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-4hq8-rhcf-fxwv/GHSA-4hq8-rhcf-fxwv.json +++ b/advisories/unreviewed/2022/05/GHSA-4hq8-rhcf-fxwv/GHSA-4hq8-rhcf-fxwv.json @@ -7,12 +7,8 @@ "CVE-2020-12702" ], "details": "Weak encryption in the Quick Pairing mode in the eWeLink mobile application (Android application V4.9.2 and earlier, iOS application V4.9.1 and earlier) allows physically proximate attackers to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during the pairing process.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4j74-99vm-hh36/GHSA-4j74-99vm-hh36.json b/advisories/unreviewed/2022/05/GHSA-4j74-99vm-hh36/GHSA-4j74-99vm-hh36.json index 01a71ff76b2..5a1ddec2525 100644 --- a/advisories/unreviewed/2022/05/GHSA-4j74-99vm-hh36/GHSA-4j74-99vm-hh36.json +++ b/advisories/unreviewed/2022/05/GHSA-4j74-99vm-hh36/GHSA-4j74-99vm-hh36.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4jch-x64f-4whq/GHSA-4jch-x64f-4whq.json b/advisories/unreviewed/2022/05/GHSA-4jch-x64f-4whq/GHSA-4jch-x64f-4whq.json index e8a20dcace6..8c8c3225fa1 100644 --- a/advisories/unreviewed/2022/05/GHSA-4jch-x64f-4whq/GHSA-4jch-x64f-4whq.json +++ b/advisories/unreviewed/2022/05/GHSA-4jch-x64f-4whq/GHSA-4jch-x64f-4whq.json @@ -7,12 +7,8 @@ "CVE-2020-4719" ], "details": "The IBM Cloud APM 8.1.4 server will issue a DNS request to resolve any hostname specified in the Cloud Event Management Webhook URL configuration definition. This could enable an authenticated user with admin authorization to create DNS query strings that are not hostnames. IBM X-Force ID: 187861.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4jcm-5f43-fc7p/GHSA-4jcm-5f43-fc7p.json b/advisories/unreviewed/2022/05/GHSA-4jcm-5f43-fc7p/GHSA-4jcm-5f43-fc7p.json index 43d77cdf5f5..8a75e9dca05 100644 --- a/advisories/unreviewed/2022/05/GHSA-4jcm-5f43-fc7p/GHSA-4jcm-5f43-fc7p.json +++ b/advisories/unreviewed/2022/05/GHSA-4jcm-5f43-fc7p/GHSA-4jcm-5f43-fc7p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4jgg-xq73-m9g4/GHSA-4jgg-xq73-m9g4.json b/advisories/unreviewed/2022/05/GHSA-4jgg-xq73-m9g4/GHSA-4jgg-xq73-m9g4.json index 9648a0233ec..c39667abfc2 100644 --- a/advisories/unreviewed/2022/05/GHSA-4jgg-xq73-m9g4/GHSA-4jgg-xq73-m9g4.json +++ b/advisories/unreviewed/2022/05/GHSA-4jgg-xq73-m9g4/GHSA-4jgg-xq73-m9g4.json @@ -7,12 +7,8 @@ "CVE-2021-26725" ], "details": "Path Traversal vulnerability when changing timezone using web GUI of Nozomi Networks Guardian, CMC allows an authenticated administrator to read-protected system files. This issue affects: Nozomi Networks Guardian 20.0.7.3 version 20.0.7.3 and prior versions. Nozomi Networks CMC 20.0.7.3 version 20.0.7.3 and prior versions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4m3w-hp54-4622/GHSA-4m3w-hp54-4622.json b/advisories/unreviewed/2022/05/GHSA-4m3w-hp54-4622/GHSA-4m3w-hp54-4622.json index 7ee572b7258..aa6f23b7d5f 100644 --- a/advisories/unreviewed/2022/05/GHSA-4m3w-hp54-4622/GHSA-4m3w-hp54-4622.json +++ b/advisories/unreviewed/2022/05/GHSA-4m3w-hp54-4622/GHSA-4m3w-hp54-4622.json @@ -7,12 +7,8 @@ "CVE-2019-25020" ], "details": "An issue was discovered in Scytl sVote 2.1. Because the sdm-ws-rest API does not require authentication, an attacker can retrieve the administrative configuration by sending a POST request to the /sdm-ws-rest/preconfiguration URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4m64-74mc-www8/GHSA-4m64-74mc-www8.json b/advisories/unreviewed/2022/05/GHSA-4m64-74mc-www8/GHSA-4m64-74mc-www8.json index 2bf6e8fc69a..bdfad743cf0 100644 --- a/advisories/unreviewed/2022/05/GHSA-4m64-74mc-www8/GHSA-4m64-74mc-www8.json +++ b/advisories/unreviewed/2022/05/GHSA-4m64-74mc-www8/GHSA-4m64-74mc-www8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4mvg-3c82-rv73/GHSA-4mvg-3c82-rv73.json b/advisories/unreviewed/2022/05/GHSA-4mvg-3c82-rv73/GHSA-4mvg-3c82-rv73.json index 1b2108205b8..4ba25169cca 100644 --- a/advisories/unreviewed/2022/05/GHSA-4mvg-3c82-rv73/GHSA-4mvg-3c82-rv73.json +++ b/advisories/unreviewed/2022/05/GHSA-4mvg-3c82-rv73/GHSA-4mvg-3c82-rv73.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4mwc-fv8c-wp9f/GHSA-4mwc-fv8c-wp9f.json b/advisories/unreviewed/2022/05/GHSA-4mwc-fv8c-wp9f/GHSA-4mwc-fv8c-wp9f.json index a03f9d245c6..6c00c26399f 100644 --- a/advisories/unreviewed/2022/05/GHSA-4mwc-fv8c-wp9f/GHSA-4mwc-fv8c-wp9f.json +++ b/advisories/unreviewed/2022/05/GHSA-4mwc-fv8c-wp9f/GHSA-4mwc-fv8c-wp9f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4pfw-794r-7wqp/GHSA-4pfw-794r-7wqp.json b/advisories/unreviewed/2022/05/GHSA-4pfw-794r-7wqp/GHSA-4pfw-794r-7wqp.json index 2bf29abe3e5..1f836efbfbf 100644 --- a/advisories/unreviewed/2022/05/GHSA-4pfw-794r-7wqp/GHSA-4pfw-794r-7wqp.json +++ b/advisories/unreviewed/2022/05/GHSA-4pfw-794r-7wqp/GHSA-4pfw-794r-7wqp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4r7w-cvqp-58f8/GHSA-4r7w-cvqp-58f8.json b/advisories/unreviewed/2022/05/GHSA-4r7w-cvqp-58f8/GHSA-4r7w-cvqp-58f8.json index 7c964f34a36..d367c70fc80 100644 --- a/advisories/unreviewed/2022/05/GHSA-4r7w-cvqp-58f8/GHSA-4r7w-cvqp-58f8.json +++ b/advisories/unreviewed/2022/05/GHSA-4r7w-cvqp-58f8/GHSA-4r7w-cvqp-58f8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4v82-m79g-wgg4/GHSA-4v82-m79g-wgg4.json b/advisories/unreviewed/2022/05/GHSA-4v82-m79g-wgg4/GHSA-4v82-m79g-wgg4.json index 3026d9c2950..9785f838677 100644 --- a/advisories/unreviewed/2022/05/GHSA-4v82-m79g-wgg4/GHSA-4v82-m79g-wgg4.json +++ b/advisories/unreviewed/2022/05/GHSA-4v82-m79g-wgg4/GHSA-4v82-m79g-wgg4.json @@ -7,12 +7,8 @@ "CVE-2021-2138" ], "details": "Vulnerability in the Oracle Cloud Infrastructure Data Science Notebook Sessions. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Oracle Cloud Infrastructure Data Science Notebook Sessions executes to compromise Oracle Cloud Infrastructure Data Science Notebook Sessions. Successful attacks of this vulnerability can resultin unauthorized update, insert or delete access to some of Oracle Cloud Infrastructure Data Science Notebook Sessions accessible data as well as unauthorized read access to a subset of Oracle Cloud Infrastructure Data Science Notebook Sessions accessible data. All affected customers were notified of CVE-2021-2138 by Oracle. CVSS 3.1 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4w73-rc2p-p6jp/GHSA-4w73-rc2p-p6jp.json b/advisories/unreviewed/2022/05/GHSA-4w73-rc2p-p6jp/GHSA-4w73-rc2p-p6jp.json index 362e868edbe..7e2c07bfb52 100644 --- a/advisories/unreviewed/2022/05/GHSA-4w73-rc2p-p6jp/GHSA-4w73-rc2p-p6jp.json +++ b/advisories/unreviewed/2022/05/GHSA-4w73-rc2p-p6jp/GHSA-4w73-rc2p-p6jp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4x66-x689-32wf/GHSA-4x66-x689-32wf.json b/advisories/unreviewed/2022/05/GHSA-4x66-x689-32wf/GHSA-4x66-x689-32wf.json index 9400908beb5..6acbdf27b20 100644 --- a/advisories/unreviewed/2022/05/GHSA-4x66-x689-32wf/GHSA-4x66-x689-32wf.json +++ b/advisories/unreviewed/2022/05/GHSA-4x66-x689-32wf/GHSA-4x66-x689-32wf.json @@ -7,12 +7,8 @@ "CVE-2020-7120" ], "details": "A local authenticated buffer overflow vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in ClearPass OnGuard could allow local authenticated users to cause a buffer overflow condition. A successful exploit could allow a local attacker to execute arbitrary code within the context the binary is running in, which is a lower privileged account.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-52g9-8355-62qv/GHSA-52g9-8355-62qv.json b/advisories/unreviewed/2022/05/GHSA-52g9-8355-62qv/GHSA-52g9-8355-62qv.json index 260356070ce..113c421ff69 100644 --- a/advisories/unreviewed/2022/05/GHSA-52g9-8355-62qv/GHSA-52g9-8355-62qv.json +++ b/advisories/unreviewed/2022/05/GHSA-52g9-8355-62qv/GHSA-52g9-8355-62qv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-56x4-r7hf-449r/GHSA-56x4-r7hf-449r.json b/advisories/unreviewed/2022/05/GHSA-56x4-r7hf-449r/GHSA-56x4-r7hf-449r.json index 900c85d416d..05061ffe455 100644 --- a/advisories/unreviewed/2022/05/GHSA-56x4-r7hf-449r/GHSA-56x4-r7hf-449r.json +++ b/advisories/unreviewed/2022/05/GHSA-56x4-r7hf-449r/GHSA-56x4-r7hf-449r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -47,9 +45,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-57pj-jxfw-3mpj/GHSA-57pj-jxfw-3mpj.json b/advisories/unreviewed/2022/05/GHSA-57pj-jxfw-3mpj/GHSA-57pj-jxfw-3mpj.json index 59c6f7a9ff4..a256ab5c792 100644 --- a/advisories/unreviewed/2022/05/GHSA-57pj-jxfw-3mpj/GHSA-57pj-jxfw-3mpj.json +++ b/advisories/unreviewed/2022/05/GHSA-57pj-jxfw-3mpj/GHSA-57pj-jxfw-3mpj.json @@ -7,12 +7,8 @@ "CVE-2021-22182" ], "details": "An issue has been discovered in GitLab affecting all versions starting with 13.7. GitLab was vulnerable to a stored XSS in merge request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5f2f-2j4j-7xxw/GHSA-5f2f-2j4j-7xxw.json b/advisories/unreviewed/2022/05/GHSA-5f2f-2j4j-7xxw/GHSA-5f2f-2j4j-7xxw.json index b75c05c0431..eb9ddf4e3cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-5f2f-2j4j-7xxw/GHSA-5f2f-2j4j-7xxw.json +++ b/advisories/unreviewed/2022/05/GHSA-5f2f-2j4j-7xxw/GHSA-5f2f-2j4j-7xxw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5f6x-vc29-3295/GHSA-5f6x-vc29-3295.json b/advisories/unreviewed/2022/05/GHSA-5f6x-vc29-3295/GHSA-5f6x-vc29-3295.json index 5a6da71941f..8826cbe537b 100644 --- a/advisories/unreviewed/2022/05/GHSA-5f6x-vc29-3295/GHSA-5f6x-vc29-3295.json +++ b/advisories/unreviewed/2022/05/GHSA-5f6x-vc29-3295/GHSA-5f6x-vc29-3295.json @@ -7,12 +7,8 @@ "CVE-2021-22643" ], "details": "Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5g9f-7jhc-fjq7/GHSA-5g9f-7jhc-fjq7.json b/advisories/unreviewed/2022/05/GHSA-5g9f-7jhc-fjq7/GHSA-5g9f-7jhc-fjq7.json index 211ff513f2d..f62aee40faa 100644 --- a/advisories/unreviewed/2022/05/GHSA-5g9f-7jhc-fjq7/GHSA-5g9f-7jhc-fjq7.json +++ b/advisories/unreviewed/2022/05/GHSA-5g9f-7jhc-fjq7/GHSA-5g9f-7jhc-fjq7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5gmw-9g47-7w93/GHSA-5gmw-9g47-7w93.json b/advisories/unreviewed/2022/05/GHSA-5gmw-9g47-7w93/GHSA-5gmw-9g47-7w93.json index e8961ecaffb..e0bdf5c205f 100644 --- a/advisories/unreviewed/2022/05/GHSA-5gmw-9g47-7w93/GHSA-5gmw-9g47-7w93.json +++ b/advisories/unreviewed/2022/05/GHSA-5gmw-9g47-7w93/GHSA-5gmw-9g47-7w93.json @@ -7,12 +7,8 @@ "CVE-2021-3010" ], "details": "There are multiple persistent cross-site scripting (XSS) vulnerabilities in the web interface of OpenText Content Server Version 20.3. The application allows a remote attacker to introduce arbitrary JavaScript by crafting malicious form values that are later not sanitized.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5hg6-vh9p-5frg/GHSA-5hg6-vh9p-5frg.json b/advisories/unreviewed/2022/05/GHSA-5hg6-vh9p-5frg/GHSA-5hg6-vh9p-5frg.json index b42c6de79a9..bec8dbea9d3 100644 --- a/advisories/unreviewed/2022/05/GHSA-5hg6-vh9p-5frg/GHSA-5hg6-vh9p-5frg.json +++ b/advisories/unreviewed/2022/05/GHSA-5hg6-vh9p-5frg/GHSA-5hg6-vh9p-5frg.json @@ -7,12 +7,8 @@ "CVE-2021-22683" ], "details": "Fatek FvDesigner Version 1.5.76 and prior is vulnerable to an out-of-bounds write while processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5hm5-4qp7-8rcf/GHSA-5hm5-4qp7-8rcf.json b/advisories/unreviewed/2022/05/GHSA-5hm5-4qp7-8rcf/GHSA-5hm5-4qp7-8rcf.json index 959bb05c737..0addc405629 100644 --- a/advisories/unreviewed/2022/05/GHSA-5hm5-4qp7-8rcf/GHSA-5hm5-4qp7-8rcf.json +++ b/advisories/unreviewed/2022/05/GHSA-5hm5-4qp7-8rcf/GHSA-5hm5-4qp7-8rcf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5hq3-8hcw-572m/GHSA-5hq3-8hcw-572m.json b/advisories/unreviewed/2022/05/GHSA-5hq3-8hcw-572m/GHSA-5hq3-8hcw-572m.json index e8b257a6901..22486397ed8 100644 --- a/advisories/unreviewed/2022/05/GHSA-5hq3-8hcw-572m/GHSA-5hq3-8hcw-572m.json +++ b/advisories/unreviewed/2022/05/GHSA-5hq3-8hcw-572m/GHSA-5hq3-8hcw-572m.json @@ -7,12 +7,8 @@ "CVE-2021-23954" ], "details": "Using the new logical assignment operators in a JavaScript switch statement could have caused a type confusion, leading to a memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 85, Thunderbird < 78.7, and Firefox ESR < 78.7.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5hv6-7w3w-8wmj/GHSA-5hv6-7w3w-8wmj.json b/advisories/unreviewed/2022/05/GHSA-5hv6-7w3w-8wmj/GHSA-5hv6-7w3w-8wmj.json index 6ee5224a61c..f320e4009c0 100644 --- a/advisories/unreviewed/2022/05/GHSA-5hv6-7w3w-8wmj/GHSA-5hv6-7w3w-8wmj.json +++ b/advisories/unreviewed/2022/05/GHSA-5hv6-7w3w-8wmj/GHSA-5hv6-7w3w-8wmj.json @@ -7,12 +7,8 @@ "CVE-2021-20663" ], "details": "Cross-site scripting vulnerability in in Role authority setting screen of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type 6.7.5 and earlier (Movable Type 6.7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5hv8-h736-6fwx/GHSA-5hv8-h736-6fwx.json b/advisories/unreviewed/2022/05/GHSA-5hv8-h736-6fwx/GHSA-5hv8-h736-6fwx.json index 0bb0998ba87..33c6be282af 100644 --- a/advisories/unreviewed/2022/05/GHSA-5hv8-h736-6fwx/GHSA-5hv8-h736-6fwx.json +++ b/advisories/unreviewed/2022/05/GHSA-5hv8-h736-6fwx/GHSA-5hv8-h736-6fwx.json @@ -7,12 +7,8 @@ "CVE-2021-1230" ], "details": "A vulnerability with the Border Gateway Protocol (BGP) for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to cause a routing process to crash, which could lead to a denial of service (DoS) condition. This vulnerability is due to an issue with the installation of routes upon receipt of a BGP update. An attacker could exploit this vulnerability by sending a crafted BGP update to an affected device. A successful exploit could allow the attacker to cause the routing process to crash, which could cause the device to reload. This vulnerability applies to both Internal BGP (IBGP) and External BGP (EBGP). Note: The Cisco implementation of BGP accepts incoming BGP traffic from explicitly configured peers only. To exploit this vulnerability, an attacker would need to send a specific BGP update message over an established TCP connection that appears to come from a trusted BGP peer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5j84-2mfg-4v5r/GHSA-5j84-2mfg-4v5r.json b/advisories/unreviewed/2022/05/GHSA-5j84-2mfg-4v5r/GHSA-5j84-2mfg-4v5r.json index 662bf157bdb..93e156dbb10 100644 --- a/advisories/unreviewed/2022/05/GHSA-5j84-2mfg-4v5r/GHSA-5j84-2mfg-4v5r.json +++ b/advisories/unreviewed/2022/05/GHSA-5j84-2mfg-4v5r/GHSA-5j84-2mfg-4v5r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5jmq-jhgh-33jr/GHSA-5jmq-jhgh-33jr.json b/advisories/unreviewed/2022/05/GHSA-5jmq-jhgh-33jr/GHSA-5jmq-jhgh-33jr.json index be34b7afb85..17fc0612194 100644 --- a/advisories/unreviewed/2022/05/GHSA-5jmq-jhgh-33jr/GHSA-5jmq-jhgh-33jr.json +++ b/advisories/unreviewed/2022/05/GHSA-5jmq-jhgh-33jr/GHSA-5jmq-jhgh-33jr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5mqj-v3fr-pg3x/GHSA-5mqj-v3fr-pg3x.json b/advisories/unreviewed/2022/05/GHSA-5mqj-v3fr-pg3x/GHSA-5mqj-v3fr-pg3x.json index bc90abb4eed..f9ccfc95147 100644 --- a/advisories/unreviewed/2022/05/GHSA-5mqj-v3fr-pg3x/GHSA-5mqj-v3fr-pg3x.json +++ b/advisories/unreviewed/2022/05/GHSA-5mqj-v3fr-pg3x/GHSA-5mqj-v3fr-pg3x.json @@ -7,12 +7,8 @@ "CVE-2021-24031" ], "details": "In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file permissions (matching the input) would only be set at completion time. Output files could therefore be readable or writable to unintended parties.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5mvf-vvh4-mj9c/GHSA-5mvf-vvh4-mj9c.json b/advisories/unreviewed/2022/05/GHSA-5mvf-vvh4-mj9c/GHSA-5mvf-vvh4-mj9c.json index 237c4187598..5030a1b2850 100644 --- a/advisories/unreviewed/2022/05/GHSA-5mvf-vvh4-mj9c/GHSA-5mvf-vvh4-mj9c.json +++ b/advisories/unreviewed/2022/05/GHSA-5mvf-vvh4-mj9c/GHSA-5mvf-vvh4-mj9c.json @@ -7,12 +7,8 @@ "CVE-2021-25830" ], "details": "A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.2.0.236-v5.6.4.13. An attacker must request the conversion of the crafted file from DOCT into DOCX format. Using the chain of two other bugs related to improper string handling, an attacker can achieve remote code execution on DocumentServer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5q75-r4xj-cjrr/GHSA-5q75-r4xj-cjrr.json b/advisories/unreviewed/2022/05/GHSA-5q75-r4xj-cjrr/GHSA-5q75-r4xj-cjrr.json index 4a8f6aea781..4b55c1d2078 100644 --- a/advisories/unreviewed/2022/05/GHSA-5q75-r4xj-cjrr/GHSA-5q75-r4xj-cjrr.json +++ b/advisories/unreviewed/2022/05/GHSA-5q75-r4xj-cjrr/GHSA-5q75-r4xj-cjrr.json @@ -7,12 +7,8 @@ "CVE-2020-26609" ], "details": "fastadmin V1.0.0.20200506_beta contains a cross-site scripting (XSS) vulnerability which may allow an attacker to obtain administrator credentials to log in to the background.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5qpm-64j6-5684/GHSA-5qpm-64j6-5684.json b/advisories/unreviewed/2022/05/GHSA-5qpm-64j6-5684/GHSA-5qpm-64j6-5684.json index 20b59401e14..9aecf30c5f8 100644 --- a/advisories/unreviewed/2022/05/GHSA-5qpm-64j6-5684/GHSA-5qpm-64j6-5684.json +++ b/advisories/unreviewed/2022/05/GHSA-5qpm-64j6-5684/GHSA-5qpm-64j6-5684.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5rjj-25hf-wf28/GHSA-5rjj-25hf-wf28.json b/advisories/unreviewed/2022/05/GHSA-5rjj-25hf-wf28/GHSA-5rjj-25hf-wf28.json index 14fc38bb439..58fa93de466 100644 --- a/advisories/unreviewed/2022/05/GHSA-5rjj-25hf-wf28/GHSA-5rjj-25hf-wf28.json +++ b/advisories/unreviewed/2022/05/GHSA-5rjj-25hf-wf28/GHSA-5rjj-25hf-wf28.json @@ -7,12 +7,8 @@ "CVE-2019-25023" ], "details": "An issue was discovered in Scytl sVote 2.1. Because the IP address from an X-Forwarded-For header (which can be manipulated client-side) is used for the internal application logs, an attacker can inject wrong IP addresses into these logs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5wq9-489q-pp4g/GHSA-5wq9-489q-pp4g.json b/advisories/unreviewed/2022/05/GHSA-5wq9-489q-pp4g/GHSA-5wq9-489q-pp4g.json index 9d2ce25f1c0..b0b7e81ecfa 100644 --- a/advisories/unreviewed/2022/05/GHSA-5wq9-489q-pp4g/GHSA-5wq9-489q-pp4g.json +++ b/advisories/unreviewed/2022/05/GHSA-5wq9-489q-pp4g/GHSA-5wq9-489q-pp4g.json @@ -7,12 +7,8 @@ "CVE-2020-36255" ], "details": "An issue was discovered in IdentityModel (aka ScottBrady.IdentityModel) before 1.3.0. The Branca implementation allows an attacker to modify and forge authentication tokens.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5wx9-g7j9-7cvc/GHSA-5wx9-g7j9-7cvc.json b/advisories/unreviewed/2022/05/GHSA-5wx9-g7j9-7cvc/GHSA-5wx9-g7j9-7cvc.json index cd10d96e6c6..6f2726469b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-5wx9-g7j9-7cvc/GHSA-5wx9-g7j9-7cvc.json +++ b/advisories/unreviewed/2022/05/GHSA-5wx9-g7j9-7cvc/GHSA-5wx9-g7j9-7cvc.json @@ -7,12 +7,8 @@ "CVE-2021-25335" ], "details": "Improper lockscreen status check in cocktailbar service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows unauthenticated users to access hidden notification contents over the lockscreen in specific condition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5x2g-3h77-9j2q/GHSA-5x2g-3h77-9j2q.json b/advisories/unreviewed/2022/05/GHSA-5x2g-3h77-9j2q/GHSA-5x2g-3h77-9j2q.json index 6d4f8a549c9..5f095eb98c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-5x2g-3h77-9j2q/GHSA-5x2g-3h77-9j2q.json +++ b/advisories/unreviewed/2022/05/GHSA-5x2g-3h77-9j2q/GHSA-5x2g-3h77-9j2q.json @@ -7,12 +7,8 @@ "CVE-2021-23130" ], "details": "An issue was discovered in Joomla! 2.5.0 through 3.9.24. Missing filtering of feed fields could lead to xss issues.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6346-27p9-5355/GHSA-6346-27p9-5355.json b/advisories/unreviewed/2022/05/GHSA-6346-27p9-5355/GHSA-6346-27p9-5355.json index e2eb8b80761..d607447c137 100644 --- a/advisories/unreviewed/2022/05/GHSA-6346-27p9-5355/GHSA-6346-27p9-5355.json +++ b/advisories/unreviewed/2022/05/GHSA-6346-27p9-5355/GHSA-6346-27p9-5355.json @@ -7,12 +7,8 @@ "CVE-2021-27730" ], "details": "Accellion FTA 9_12_432 and earlier is affected by argument injection via a crafted POST request to an admin endpoint. The fixed version is FTA_9_12_444 and later.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6473-48q6-rp78/GHSA-6473-48q6-rp78.json b/advisories/unreviewed/2022/05/GHSA-6473-48q6-rp78/GHSA-6473-48q6-rp78.json index 81924107bbd..86a749cd598 100644 --- a/advisories/unreviewed/2022/05/GHSA-6473-48q6-rp78/GHSA-6473-48q6-rp78.json +++ b/advisories/unreviewed/2022/05/GHSA-6473-48q6-rp78/GHSA-6473-48q6-rp78.json @@ -7,12 +7,8 @@ "CVE-2021-20660" ], "details": "Cross-site scripting vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to inject an arbitrary script via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-66mx-93rr-rg39/GHSA-66mx-93rr-rg39.json b/advisories/unreviewed/2022/05/GHSA-66mx-93rr-rg39/GHSA-66mx-93rr-rg39.json index 7c6c6945056..19601e2798b 100644 --- a/advisories/unreviewed/2022/05/GHSA-66mx-93rr-rg39/GHSA-66mx-93rr-rg39.json +++ b/advisories/unreviewed/2022/05/GHSA-66mx-93rr-rg39/GHSA-66mx-93rr-rg39.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -59,9 +57,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-672j-7w35-wcrv/GHSA-672j-7w35-wcrv.json b/advisories/unreviewed/2022/05/GHSA-672j-7w35-wcrv/GHSA-672j-7w35-wcrv.json index 1045133486c..a92ae74edca 100644 --- a/advisories/unreviewed/2022/05/GHSA-672j-7w35-wcrv/GHSA-672j-7w35-wcrv.json +++ b/advisories/unreviewed/2022/05/GHSA-672j-7w35-wcrv/GHSA-672j-7w35-wcrv.json @@ -7,12 +7,8 @@ "CVE-2021-27904" ], "details": "An issue was discovered in app/Model/SharingGroupServer.php in MISP 2.4.139. In the implementation of Sharing Groups, the \"all org\" flag sometimes provided view access to unintended actors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6ffc-qmf6-7p73/GHSA-6ffc-qmf6-7p73.json b/advisories/unreviewed/2022/05/GHSA-6ffc-qmf6-7p73/GHSA-6ffc-qmf6-7p73.json index 7eba8d316b9..96ebf7a4cc3 100644 --- a/advisories/unreviewed/2022/05/GHSA-6ffc-qmf6-7p73/GHSA-6ffc-qmf6-7p73.json +++ b/advisories/unreviewed/2022/05/GHSA-6ffc-qmf6-7p73/GHSA-6ffc-qmf6-7p73.json @@ -7,12 +7,8 @@ "CVE-2021-25339" ], "details": "Improper address validation in HArx in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given a compromised kernel, to corrupt EL2 memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6j89-3rxh-pr77/GHSA-6j89-3rxh-pr77.json b/advisories/unreviewed/2022/05/GHSA-6j89-3rxh-pr77/GHSA-6j89-3rxh-pr77.json index 7a5804d5212..fbdf3057061 100644 --- a/advisories/unreviewed/2022/05/GHSA-6j89-3rxh-pr77/GHSA-6j89-3rxh-pr77.json +++ b/advisories/unreviewed/2022/05/GHSA-6j89-3rxh-pr77/GHSA-6j89-3rxh-pr77.json @@ -7,12 +7,8 @@ "CVE-2019-18945" ], "details": "Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to privilege escalation vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6jcj-wgch-673v/GHSA-6jcj-wgch-673v.json b/advisories/unreviewed/2022/05/GHSA-6jcj-wgch-673v/GHSA-6jcj-wgch-673v.json index 5313417d1ad..21a29474bb6 100644 --- a/advisories/unreviewed/2022/05/GHSA-6jcj-wgch-673v/GHSA-6jcj-wgch-673v.json +++ b/advisories/unreviewed/2022/05/GHSA-6jcj-wgch-673v/GHSA-6jcj-wgch-673v.json @@ -7,12 +7,8 @@ "CVE-2021-1450" ], "details": "A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials on the device. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending one or more crafted IPC messages to the AnyConnect process on an affected device. A successful exploit could allow the attacker to stop the AnyConnect process, causing a DoS condition on the device. Note: The process under attack will automatically restart so no action is needed by the user or admin.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6jxq-3qrv-892j/GHSA-6jxq-3qrv-892j.json b/advisories/unreviewed/2022/05/GHSA-6jxq-3qrv-892j/GHSA-6jxq-3qrv-892j.json index cddf518414c..d5936144808 100644 --- a/advisories/unreviewed/2022/05/GHSA-6jxq-3qrv-892j/GHSA-6jxq-3qrv-892j.json +++ b/advisories/unreviewed/2022/05/GHSA-6jxq-3qrv-892j/GHSA-6jxq-3qrv-892j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6m9p-3vwc-4p47/GHSA-6m9p-3vwc-4p47.json b/advisories/unreviewed/2022/05/GHSA-6m9p-3vwc-4p47/GHSA-6m9p-3vwc-4p47.json index 12369f055f2..8da8a1cfb48 100644 --- a/advisories/unreviewed/2022/05/GHSA-6m9p-3vwc-4p47/GHSA-6m9p-3vwc-4p47.json +++ b/advisories/unreviewed/2022/05/GHSA-6m9p-3vwc-4p47/GHSA-6m9p-3vwc-4p47.json @@ -7,12 +7,8 @@ "CVE-2020-8296" ], "details": "Nextcloud Server prior to 20.0.0 stores passwords in a recoverable format even when external storage is not configured.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6qgc-vw4g-mxw4/GHSA-6qgc-vw4g-mxw4.json b/advisories/unreviewed/2022/05/GHSA-6qgc-vw4g-mxw4/GHSA-6qgc-vw4g-mxw4.json index 6c4a7ff642a..e99fa83aaf0 100644 --- a/advisories/unreviewed/2022/05/GHSA-6qgc-vw4g-mxw4/GHSA-6qgc-vw4g-mxw4.json +++ b/advisories/unreviewed/2022/05/GHSA-6qgc-vw4g-mxw4/GHSA-6qgc-vw4g-mxw4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6qm8-hwqx-wv6m/GHSA-6qm8-hwqx-wv6m.json b/advisories/unreviewed/2022/05/GHSA-6qm8-hwqx-wv6m/GHSA-6qm8-hwqx-wv6m.json index 4b95f8cfda1..36869f4ab78 100644 --- a/advisories/unreviewed/2022/05/GHSA-6qm8-hwqx-wv6m/GHSA-6qm8-hwqx-wv6m.json +++ b/advisories/unreviewed/2022/05/GHSA-6qm8-hwqx-wv6m/GHSA-6qm8-hwqx-wv6m.json @@ -7,12 +7,8 @@ "CVE-2021-27804" ], "details": "JPEG XL (aka jpeg-xl) through 0.3.2 allows writable memory corruption.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6qwq-xgr6-xc8j/GHSA-6qwq-xgr6-xc8j.json b/advisories/unreviewed/2022/05/GHSA-6qwq-xgr6-xc8j/GHSA-6qwq-xgr6-xc8j.json index 5d419d288d8..5d27c236f9e 100644 --- a/advisories/unreviewed/2022/05/GHSA-6qwq-xgr6-xc8j/GHSA-6qwq-xgr6-xc8j.json +++ b/advisories/unreviewed/2022/05/GHSA-6qwq-xgr6-xc8j/GHSA-6qwq-xgr6-xc8j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6wg5-3r55-6w88/GHSA-6wg5-3r55-6w88.json b/advisories/unreviewed/2022/05/GHSA-6wg5-3r55-6w88/GHSA-6wg5-3r55-6w88.json index 7388724dd74..10a3826c19a 100644 --- a/advisories/unreviewed/2022/05/GHSA-6wg5-3r55-6w88/GHSA-6wg5-3r55-6w88.json +++ b/advisories/unreviewed/2022/05/GHSA-6wg5-3r55-6w88/GHSA-6wg5-3r55-6w88.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7382-875q-cwm6/GHSA-7382-875q-cwm6.json b/advisories/unreviewed/2022/05/GHSA-7382-875q-cwm6/GHSA-7382-875q-cwm6.json index fc580c36804..2e9b456baba 100644 --- a/advisories/unreviewed/2022/05/GHSA-7382-875q-cwm6/GHSA-7382-875q-cwm6.json +++ b/advisories/unreviewed/2022/05/GHSA-7382-875q-cwm6/GHSA-7382-875q-cwm6.json @@ -7,12 +7,8 @@ "CVE-2021-0367" ], "details": "In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05371580; Issue ID: ALPS05379085.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-756r-754x-rvfh/GHSA-756r-754x-rvfh.json b/advisories/unreviewed/2022/05/GHSA-756r-754x-rvfh/GHSA-756r-754x-rvfh.json index f78784e80b0..4c92abfe0e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-756r-754x-rvfh/GHSA-756r-754x-rvfh.json +++ b/advisories/unreviewed/2022/05/GHSA-756r-754x-rvfh/GHSA-756r-754x-rvfh.json @@ -7,12 +7,8 @@ "CVE-2021-21515" ], "details": "Dell EMC SourceOne, versions 7.2SP10 and prior, contain a Stored Cross-Site Scripting vulnerability. A remote low privileged attacker may potentially exploit this vulnerability, to hijack user sessions or to trick a victim application user to unknowingly send arbitrary requests to the server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-76w2-8wcp-pfv6/GHSA-76w2-8wcp-pfv6.json b/advisories/unreviewed/2022/05/GHSA-76w2-8wcp-pfv6/GHSA-76w2-8wcp-pfv6.json index 50013216255..d688a0a3755 100644 --- a/advisories/unreviewed/2022/05/GHSA-76w2-8wcp-pfv6/GHSA-76w2-8wcp-pfv6.json +++ b/advisories/unreviewed/2022/05/GHSA-76w2-8wcp-pfv6/GHSA-76w2-8wcp-pfv6.json @@ -7,12 +7,8 @@ "CVE-2021-22670" ], "details": "An uninitialized pointer may be exploited in Fatek FvDesigner Version 1.5.76 and prior while the application is processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-77r2-rjfh-m7wh/GHSA-77r2-rjfh-m7wh.json b/advisories/unreviewed/2022/05/GHSA-77r2-rjfh-m7wh/GHSA-77r2-rjfh-m7wh.json index 690d73d9c44..6ce2947bd98 100644 --- a/advisories/unreviewed/2022/05/GHSA-77r2-rjfh-m7wh/GHSA-77r2-rjfh-m7wh.json +++ b/advisories/unreviewed/2022/05/GHSA-77r2-rjfh-m7wh/GHSA-77r2-rjfh-m7wh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-77xh-fchr-jp69/GHSA-77xh-fchr-jp69.json b/advisories/unreviewed/2022/05/GHSA-77xh-fchr-jp69/GHSA-77xh-fchr-jp69.json index 39bd7895502..e3a023ff253 100644 --- a/advisories/unreviewed/2022/05/GHSA-77xh-fchr-jp69/GHSA-77xh-fchr-jp69.json +++ b/advisories/unreviewed/2022/05/GHSA-77xh-fchr-jp69/GHSA-77xh-fchr-jp69.json @@ -7,12 +7,8 @@ "CVE-2021-25342" ], "details": "Calling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauthorized actions including denial of service attack by hijacking the provider.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-78cq-mc55-x9rg/GHSA-78cq-mc55-x9rg.json b/advisories/unreviewed/2022/05/GHSA-78cq-mc55-x9rg/GHSA-78cq-mc55-x9rg.json index 867fd0913ce..911c34a35f7 100644 --- a/advisories/unreviewed/2022/05/GHSA-78cq-mc55-x9rg/GHSA-78cq-mc55-x9rg.json +++ b/advisories/unreviewed/2022/05/GHSA-78cq-mc55-x9rg/GHSA-78cq-mc55-x9rg.json @@ -7,12 +7,8 @@ "CVE-2021-21155" ], "details": "Heap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7f4h-7g5j-9333/GHSA-7f4h-7g5j-9333.json b/advisories/unreviewed/2022/05/GHSA-7f4h-7g5j-9333/GHSA-7f4h-7g5j-9333.json index 123e6e35df4..bc3b0df2791 100644 --- a/advisories/unreviewed/2022/05/GHSA-7f4h-7g5j-9333/GHSA-7f4h-7g5j-9333.json +++ b/advisories/unreviewed/2022/05/GHSA-7f4h-7g5j-9333/GHSA-7f4h-7g5j-9333.json @@ -7,12 +7,8 @@ "CVE-2020-22474" ], "details": "In webERP 4.15, the ManualContents.php file allows users to specify the \"Language\" parameter, which can lead to local file inclusion.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7h2v-2fwm-pjjh/GHSA-7h2v-2fwm-pjjh.json b/advisories/unreviewed/2022/05/GHSA-7h2v-2fwm-pjjh/GHSA-7h2v-2fwm-pjjh.json index 4a378b1c39f..03197f34111 100644 --- a/advisories/unreviewed/2022/05/GHSA-7h2v-2fwm-pjjh/GHSA-7h2v-2fwm-pjjh.json +++ b/advisories/unreviewed/2022/05/GHSA-7h2v-2fwm-pjjh/GHSA-7h2v-2fwm-pjjh.json @@ -7,12 +7,8 @@ "CVE-2021-23128" ], "details": "An issue was discovered in Joomla! 3.2.0 through 3.9.24. The core shipped but unused randval implementation within FOF (FOFEncryptRandval) used an potential insecure implemetation. That has now been replaced with a call to 'random_bytes()' and its backport that is shipped within random_compat.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7m3j-jx6g-3jmj/GHSA-7m3j-jx6g-3jmj.json b/advisories/unreviewed/2022/05/GHSA-7m3j-jx6g-3jmj/GHSA-7m3j-jx6g-3jmj.json index a826f4ffd68..67344896fbd 100644 --- a/advisories/unreviewed/2022/05/GHSA-7m3j-jx6g-3jmj/GHSA-7m3j-jx6g-3jmj.json +++ b/advisories/unreviewed/2022/05/GHSA-7m3j-jx6g-3jmj/GHSA-7m3j-jx6g-3jmj.json @@ -7,12 +7,8 @@ "CVE-2021-26904" ], "details": "LMA ISIDA Retriever 5.2 allows SQL Injection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7p29-8vr2-rmvx/GHSA-7p29-8vr2-rmvx.json b/advisories/unreviewed/2022/05/GHSA-7p29-8vr2-rmvx/GHSA-7p29-8vr2-rmvx.json index 12ac15380ba..d90bb499f2b 100644 --- a/advisories/unreviewed/2022/05/GHSA-7p29-8vr2-rmvx/GHSA-7p29-8vr2-rmvx.json +++ b/advisories/unreviewed/2022/05/GHSA-7p29-8vr2-rmvx/GHSA-7p29-8vr2-rmvx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7ppf-q9mq-qg3g/GHSA-7ppf-q9mq-qg3g.json b/advisories/unreviewed/2022/05/GHSA-7ppf-q9mq-qg3g/GHSA-7ppf-q9mq-qg3g.json index a30f43d7700..6bfc702bc3c 100644 --- a/advisories/unreviewed/2022/05/GHSA-7ppf-q9mq-qg3g/GHSA-7ppf-q9mq-qg3g.json +++ b/advisories/unreviewed/2022/05/GHSA-7ppf-q9mq-qg3g/GHSA-7ppf-q9mq-qg3g.json @@ -7,12 +7,8 @@ "CVE-2021-20665" ], "details": "Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7r3j-528q-4g56/GHSA-7r3j-528q-4g56.json b/advisories/unreviewed/2022/05/GHSA-7r3j-528q-4g56/GHSA-7r3j-528q-4g56.json index 3d1b41b0786..f21dfbc8993 100644 --- a/advisories/unreviewed/2022/05/GHSA-7r3j-528q-4g56/GHSA-7r3j-528q-4g56.json +++ b/advisories/unreviewed/2022/05/GHSA-7r3j-528q-4g56/GHSA-7r3j-528q-4g56.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7rj5-2x5r-5j6v/GHSA-7rj5-2x5r-5j6v.json b/advisories/unreviewed/2022/05/GHSA-7rj5-2x5r-5j6v/GHSA-7rj5-2x5r-5j6v.json index 7dff438b47a..fd83c325741 100644 --- a/advisories/unreviewed/2022/05/GHSA-7rj5-2x5r-5j6v/GHSA-7rj5-2x5r-5j6v.json +++ b/advisories/unreviewed/2022/05/GHSA-7rj5-2x5r-5j6v/GHSA-7rj5-2x5r-5j6v.json @@ -7,12 +7,8 @@ "CVE-2020-15938" ], "details": "When traffic other than HTTP/S (eg: SSH traffic, etc...) traverses the FortiGate in version below 6.2.5 and below 6.4.2 on port 80/443, it is not redirected to the transparent proxy policy for processing, as it doesn't have a valid HTTP header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7vwq-44q4-jhr2/GHSA-7vwq-44q4-jhr2.json b/advisories/unreviewed/2022/05/GHSA-7vwq-44q4-jhr2/GHSA-7vwq-44q4-jhr2.json index cace202914f..b50b29018e4 100644 --- a/advisories/unreviewed/2022/05/GHSA-7vwq-44q4-jhr2/GHSA-7vwq-44q4-jhr2.json +++ b/advisories/unreviewed/2022/05/GHSA-7vwq-44q4-jhr2/GHSA-7vwq-44q4-jhr2.json @@ -7,12 +7,8 @@ "CVE-2021-20656" ], "details": "Exposure of information through directory listing in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to obtain the information inside the system, such as directories and/or file configurations via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-85hw-fg4q-hw9j/GHSA-85hw-fg4q-hw9j.json b/advisories/unreviewed/2022/05/GHSA-85hw-fg4q-hw9j/GHSA-85hw-fg4q-hw9j.json index 0790c161981..34742c364e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-85hw-fg4q-hw9j/GHSA-85hw-fg4q-hw9j.json +++ b/advisories/unreviewed/2022/05/GHSA-85hw-fg4q-hw9j/GHSA-85hw-fg4q-hw9j.json @@ -7,12 +7,8 @@ "CVE-2021-25306" ], "details": "A buffer overflow vulnerability in the AT command interface of Gigaset DX600A v41.00-175 devices allows remote attackers to force a device reboot by sending relatively long AT commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-85x9-gv45-8hqx/GHSA-85x9-gv45-8hqx.json b/advisories/unreviewed/2022/05/GHSA-85x9-gv45-8hqx/GHSA-85x9-gv45-8hqx.json index 7c151d66479..a076bfdbceb 100644 --- a/advisories/unreviewed/2022/05/GHSA-85x9-gv45-8hqx/GHSA-85x9-gv45-8hqx.json +++ b/advisories/unreviewed/2022/05/GHSA-85x9-gv45-8hqx/GHSA-85x9-gv45-8hqx.json @@ -7,12 +7,8 @@ "CVE-2021-22666" ], "details": "Fatek FvDesigner Version 1.5.76 and prior is vulnerable to a stack-based buffer overflow while project files are being processed, allowing an attacker to craft a special project file that may permit arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-876v-7v7c-4xcf/GHSA-876v-7v7c-4xcf.json b/advisories/unreviewed/2022/05/GHSA-876v-7v7c-4xcf/GHSA-876v-7v7c-4xcf.json index 13f0fdd48da..370871e5134 100644 --- a/advisories/unreviewed/2022/05/GHSA-876v-7v7c-4xcf/GHSA-876v-7v7c-4xcf.json +++ b/advisories/unreviewed/2022/05/GHSA-876v-7v7c-4xcf/GHSA-876v-7v7c-4xcf.json @@ -7,12 +7,8 @@ "CVE-2021-26903" ], "details": "LMA ISIDA Retriever 5.2 is vulnerable to XSS via query['text'].", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8865-jmrq-w257/GHSA-8865-jmrq-w257.json b/advisories/unreviewed/2022/05/GHSA-8865-jmrq-w257/GHSA-8865-jmrq-w257.json index 5f87cdd361a..c816d71ea51 100644 --- a/advisories/unreviewed/2022/05/GHSA-8865-jmrq-w257/GHSA-8865-jmrq-w257.json +++ b/advisories/unreviewed/2022/05/GHSA-8865-jmrq-w257/GHSA-8865-jmrq-w257.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-88ph-pg47-2g2q/GHSA-88ph-pg47-2g2q.json b/advisories/unreviewed/2022/05/GHSA-88ph-pg47-2g2q/GHSA-88ph-pg47-2g2q.json index 68336c394bf..fbcd6ba55f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-88ph-pg47-2g2q/GHSA-88ph-pg47-2g2q.json +++ b/advisories/unreviewed/2022/05/GHSA-88ph-pg47-2g2q/GHSA-88ph-pg47-2g2q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8m2w-rpr3-g4wf/GHSA-8m2w-rpr3-g4wf.json b/advisories/unreviewed/2022/05/GHSA-8m2w-rpr3-g4wf/GHSA-8m2w-rpr3-g4wf.json index 4b614fefd1d..cd33aa8729c 100644 --- a/advisories/unreviewed/2022/05/GHSA-8m2w-rpr3-g4wf/GHSA-8m2w-rpr3-g4wf.json +++ b/advisories/unreviewed/2022/05/GHSA-8m2w-rpr3-g4wf/GHSA-8m2w-rpr3-g4wf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8m73-qxc4-m26m/GHSA-8m73-qxc4-m26m.json b/advisories/unreviewed/2022/05/GHSA-8m73-qxc4-m26m/GHSA-8m73-qxc4-m26m.json index 4601083277c..652f2b04472 100644 --- a/advisories/unreviewed/2022/05/GHSA-8m73-qxc4-m26m/GHSA-8m73-qxc4-m26m.json +++ b/advisories/unreviewed/2022/05/GHSA-8m73-qxc4-m26m/GHSA-8m73-qxc4-m26m.json @@ -7,12 +7,8 @@ "CVE-2020-25690" ], "details": "An out-of-bounds write flaw was found in FontForge in versions before 20200314 while parsing SFD files containing certain LayerCount tokens. This flaw allows an attacker to manipulate the memory allocated on the heap, causing the application to crash or execute arbitrary code. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8mqf-hqpq-qxwj/GHSA-8mqf-hqpq-qxwj.json b/advisories/unreviewed/2022/05/GHSA-8mqf-hqpq-qxwj/GHSA-8mqf-hqpq-qxwj.json index 3e1ea7612c7..fd1e4abb887 100644 --- a/advisories/unreviewed/2022/05/GHSA-8mqf-hqpq-qxwj/GHSA-8mqf-hqpq-qxwj.json +++ b/advisories/unreviewed/2022/05/GHSA-8mqf-hqpq-qxwj/GHSA-8mqf-hqpq-qxwj.json @@ -7,12 +7,8 @@ "CVE-2021-25343" ], "details": "Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions including denial of service attack by hijacking the provider.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8p87-5p57-jm4v/GHSA-8p87-5p57-jm4v.json b/advisories/unreviewed/2022/05/GHSA-8p87-5p57-jm4v/GHSA-8p87-5p57-jm4v.json index 7cbacfe3ea1..aaa65f5c3e6 100644 --- a/advisories/unreviewed/2022/05/GHSA-8p87-5p57-jm4v/GHSA-8p87-5p57-jm4v.json +++ b/advisories/unreviewed/2022/05/GHSA-8p87-5p57-jm4v/GHSA-8p87-5p57-jm4v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8rmr-hp4j-94w8/GHSA-8rmr-hp4j-94w8.json b/advisories/unreviewed/2022/05/GHSA-8rmr-hp4j-94w8/GHSA-8rmr-hp4j-94w8.json index 434a16c4526..c55a2d3e95d 100644 --- a/advisories/unreviewed/2022/05/GHSA-8rmr-hp4j-94w8/GHSA-8rmr-hp4j-94w8.json +++ b/advisories/unreviewed/2022/05/GHSA-8rmr-hp4j-94w8/GHSA-8rmr-hp4j-94w8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8rp4-gqh3-jpxm/GHSA-8rp4-gqh3-jpxm.json b/advisories/unreviewed/2022/05/GHSA-8rp4-gqh3-jpxm/GHSA-8rp4-gqh3-jpxm.json index e4e90c1d717..1e95c32acf2 100644 --- a/advisories/unreviewed/2022/05/GHSA-8rp4-gqh3-jpxm/GHSA-8rp4-gqh3-jpxm.json +++ b/advisories/unreviewed/2022/05/GHSA-8rp4-gqh3-jpxm/GHSA-8rp4-gqh3-jpxm.json @@ -7,12 +7,8 @@ "CVE-2021-26565" ], "details": "Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to obtain sensitive information via an HTTP session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8rrc-xf7x-g3cf/GHSA-8rrc-xf7x-g3cf.json b/advisories/unreviewed/2022/05/GHSA-8rrc-xf7x-g3cf/GHSA-8rrc-xf7x-g3cf.json index 18e50dbb9d7..2270ae7927c 100644 --- a/advisories/unreviewed/2022/05/GHSA-8rrc-xf7x-g3cf/GHSA-8rrc-xf7x-g3cf.json +++ b/advisories/unreviewed/2022/05/GHSA-8rrc-xf7x-g3cf/GHSA-8rrc-xf7x-g3cf.json @@ -7,12 +7,8 @@ "CVE-2021-23127" ], "details": "An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of an insufficient length for the 2FA secret accoring to RFC 4226 of 10 bytes vs 20 bytes.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8w82-qfxh-635c/GHSA-8w82-qfxh-635c.json b/advisories/unreviewed/2022/05/GHSA-8w82-qfxh-635c/GHSA-8w82-qfxh-635c.json index 99ffaee2b62..fbc2f13576d 100644 --- a/advisories/unreviewed/2022/05/GHSA-8w82-qfxh-635c/GHSA-8w82-qfxh-635c.json +++ b/advisories/unreviewed/2022/05/GHSA-8w82-qfxh-635c/GHSA-8w82-qfxh-635c.json @@ -7,12 +7,8 @@ "CVE-2021-23953" ], "details": "If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin information, when said information is served as chunked data. This vulnerability affects Firefox < 85, Thunderbird < 78.7, and Firefox ESR < 78.7.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-934r-96cm-hv8f/GHSA-934r-96cm-hv8f.json b/advisories/unreviewed/2022/05/GHSA-934r-96cm-hv8f/GHSA-934r-96cm-hv8f.json index deb04fcb601..0a28ea734d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-934r-96cm-hv8f/GHSA-934r-96cm-hv8f.json +++ b/advisories/unreviewed/2022/05/GHSA-934r-96cm-hv8f/GHSA-934r-96cm-hv8f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-938v-j4j7-5c9m/GHSA-938v-j4j7-5c9m.json b/advisories/unreviewed/2022/05/GHSA-938v-j4j7-5c9m/GHSA-938v-j4j7-5c9m.json index 128766398f9..a5c2310670d 100644 --- a/advisories/unreviewed/2022/05/GHSA-938v-j4j7-5c9m/GHSA-938v-j4j7-5c9m.json +++ b/advisories/unreviewed/2022/05/GHSA-938v-j4j7-5c9m/GHSA-938v-j4j7-5c9m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-942j-wgv7-6vhf/GHSA-942j-wgv7-6vhf.json b/advisories/unreviewed/2022/05/GHSA-942j-wgv7-6vhf/GHSA-942j-wgv7-6vhf.json index cc9941be061..5efe4e195f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-942j-wgv7-6vhf/GHSA-942j-wgv7-6vhf.json +++ b/advisories/unreviewed/2022/05/GHSA-942j-wgv7-6vhf/GHSA-942j-wgv7-6vhf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9445-66j5-fhvj/GHSA-9445-66j5-fhvj.json b/advisories/unreviewed/2022/05/GHSA-9445-66j5-fhvj/GHSA-9445-66j5-fhvj.json index 49bd81420d7..996945dd536 100644 --- a/advisories/unreviewed/2022/05/GHSA-9445-66j5-fhvj/GHSA-9445-66j5-fhvj.json +++ b/advisories/unreviewed/2022/05/GHSA-9445-66j5-fhvj/GHSA-9445-66j5-fhvj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-94jc-v9rf-w32j/GHSA-94jc-v9rf-w32j.json b/advisories/unreviewed/2022/05/GHSA-94jc-v9rf-w32j/GHSA-94jc-v9rf-w32j.json index f8db9ff6bf5..038441ddba8 100644 --- a/advisories/unreviewed/2022/05/GHSA-94jc-v9rf-w32j/GHSA-94jc-v9rf-w32j.json +++ b/advisories/unreviewed/2022/05/GHSA-94jc-v9rf-w32j/GHSA-94jc-v9rf-w32j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-954j-r82g-vr2p/GHSA-954j-r82g-vr2p.json b/advisories/unreviewed/2022/05/GHSA-954j-r82g-vr2p/GHSA-954j-r82g-vr2p.json index 237659c3c08..5cc5ce92db3 100644 --- a/advisories/unreviewed/2022/05/GHSA-954j-r82g-vr2p/GHSA-954j-r82g-vr2p.json +++ b/advisories/unreviewed/2022/05/GHSA-954j-r82g-vr2p/GHSA-954j-r82g-vr2p.json @@ -7,12 +7,8 @@ "CVE-2021-20662" ], "details": "Missing authentication for critical function in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to alter the setting information without the access privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-96rr-c4vc-33w4/GHSA-96rr-c4vc-33w4.json b/advisories/unreviewed/2022/05/GHSA-96rr-c4vc-33w4/GHSA-96rr-c4vc-33w4.json index 273640fc4cc..6aea4aeca5f 100644 --- a/advisories/unreviewed/2022/05/GHSA-96rr-c4vc-33w4/GHSA-96rr-c4vc-33w4.json +++ b/advisories/unreviewed/2022/05/GHSA-96rr-c4vc-33w4/GHSA-96rr-c4vc-33w4.json @@ -7,12 +7,8 @@ "CVE-2020-11297" ], "details": "Denial of service in WLAN module due to improper check of subtypes in logic where excessive frames are dropped in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9768-8435-chr8/GHSA-9768-8435-chr8.json b/advisories/unreviewed/2022/05/GHSA-9768-8435-chr8/GHSA-9768-8435-chr8.json index 0b3df374739..9f7f92f9eb3 100644 --- a/advisories/unreviewed/2022/05/GHSA-9768-8435-chr8/GHSA-9768-8435-chr8.json +++ b/advisories/unreviewed/2022/05/GHSA-9768-8435-chr8/GHSA-9768-8435-chr8.json @@ -7,12 +7,8 @@ "CVE-2021-26927" ], "details": "A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c may lead to program crash and denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-97jg-548g-76gg/GHSA-97jg-548g-76gg.json b/advisories/unreviewed/2022/05/GHSA-97jg-548g-76gg/GHSA-97jg-548g-76gg.json index 315e866f648..88ca4c110ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-97jg-548g-76gg/GHSA-97jg-548g-76gg.json +++ b/advisories/unreviewed/2022/05/GHSA-97jg-548g-76gg/GHSA-97jg-548g-76gg.json @@ -7,12 +7,8 @@ "CVE-2021-27228" ], "details": "An issue was discovered in Shinobi through ocean version 1. lib/auth.js has Incorrect Access Control. Valid API Keys are held in an internal JS Object. Therefore an attacker can use JS Proto Method names (such as constructor or hasOwnProperty) to convince the System that the supplied API Key exists in the underlying JS object, and consequently achieve complete access to User/Admin/Super API functions, as demonstrated by a /super/constructor/accounts/list URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-97v8-7jpx-39p8/GHSA-97v8-7jpx-39p8.json b/advisories/unreviewed/2022/05/GHSA-97v8-7jpx-39p8/GHSA-97v8-7jpx-39p8.json index 80fed49c473..faa2b8cbc0f 100644 --- a/advisories/unreviewed/2022/05/GHSA-97v8-7jpx-39p8/GHSA-97v8-7jpx-39p8.json +++ b/advisories/unreviewed/2022/05/GHSA-97v8-7jpx-39p8/GHSA-97v8-7jpx-39p8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-98c9-6pp5-rhr8/GHSA-98c9-6pp5-rhr8.json b/advisories/unreviewed/2022/05/GHSA-98c9-6pp5-rhr8/GHSA-98c9-6pp5-rhr8.json index b90ca80c60e..7df39555e06 100644 --- a/advisories/unreviewed/2022/05/GHSA-98c9-6pp5-rhr8/GHSA-98c9-6pp5-rhr8.json +++ b/advisories/unreviewed/2022/05/GHSA-98c9-6pp5-rhr8/GHSA-98c9-6pp5-rhr8.json @@ -7,12 +7,8 @@ "CVE-2020-19762" ], "details": "Automated Logic Corporation (ALC) WebCTRL System 6.5 and prior allows remote attackers to execute any JavaScript code via a XSS payload for the first parameter in a GET request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-98w3-q668-fx6q/GHSA-98w3-q668-fx6q.json b/advisories/unreviewed/2022/05/GHSA-98w3-q668-fx6q/GHSA-98w3-q668-fx6q.json index 9bdd46332e4..f0126d904bf 100644 --- a/advisories/unreviewed/2022/05/GHSA-98w3-q668-fx6q/GHSA-98w3-q668-fx6q.json +++ b/advisories/unreviewed/2022/05/GHSA-98w3-q668-fx6q/GHSA-98w3-q668-fx6q.json @@ -7,12 +7,8 @@ "CVE-2019-18947" ], "details": "Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to information disclosure.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-99qg-2w8q-6fqv/GHSA-99qg-2w8q-6fqv.json b/advisories/unreviewed/2022/05/GHSA-99qg-2w8q-6fqv/GHSA-99qg-2w8q-6fqv.json index 26f02402065..1bc12509fa4 100644 --- a/advisories/unreviewed/2022/05/GHSA-99qg-2w8q-6fqv/GHSA-99qg-2w8q-6fqv.json +++ b/advisories/unreviewed/2022/05/GHSA-99qg-2w8q-6fqv/GHSA-99qg-2w8q-6fqv.json @@ -7,12 +7,8 @@ "CVE-2008-6531" ], "details": "The WebWork 1 web application framework in Atlassian JIRA before 3.13.2 allows remote attackers to invoke exposed public JIRA methods via a crafted URL that is dynamically transformed into method calls, aka \"WebWork 1 Parameter Injection Hole.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9cw6-xmv9-q69p/GHSA-9cw6-xmv9-q69p.json b/advisories/unreviewed/2022/05/GHSA-9cw6-xmv9-q69p/GHSA-9cw6-xmv9-q69p.json index 143c2eff48f..4101d52cded 100644 --- a/advisories/unreviewed/2022/05/GHSA-9cw6-xmv9-q69p/GHSA-9cw6-xmv9-q69p.json +++ b/advisories/unreviewed/2022/05/GHSA-9cw6-xmv9-q69p/GHSA-9cw6-xmv9-q69p.json @@ -7,12 +7,8 @@ "CVE-2021-1361" ], "details": "A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode that are running Cisco NX-OS Software could allow an unauthenticated, remote attacker to create, delete, or overwrite arbitrary files with root privileges on the device. This vulnerability exists because TCP port 9075 is incorrectly configured to listen and respond to external connection requests. An attacker could exploit this vulnerability by sending crafted TCP packets to an IP address that is configured on a local interface on TCP port 9075. A successful exploit could allow the attacker to create, delete, or overwrite arbitrary files, including sensitive files that are related to the device configuration. For example, the attacker could add a user account without the device administrator knowing.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9f9p-5j8g-3cmm/GHSA-9f9p-5j8g-3cmm.json b/advisories/unreviewed/2022/05/GHSA-9f9p-5j8g-3cmm/GHSA-9f9p-5j8g-3cmm.json index 27948e0c347..5815a6e9f17 100644 --- a/advisories/unreviewed/2022/05/GHSA-9f9p-5j8g-3cmm/GHSA-9f9p-5j8g-3cmm.json +++ b/advisories/unreviewed/2022/05/GHSA-9f9p-5j8g-3cmm/GHSA-9f9p-5j8g-3cmm.json @@ -7,12 +7,8 @@ "CVE-2020-24686" ], "details": "The vulnerabilities can be exploited to cause the web visualization component of the PLC to stop and not respond, leading to genuine users losing remote visibility of the PLC state. If a user attempts to login to the PLC while this vulnerability is exploited, the PLC will show an error state and refuse connections to Automation Builder. The execution of the PLC application is not affected by this vulnerability. This issue affects ABB AC500 V2 products with onboard Ethernet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9gp3-pxg2-3gqf/GHSA-9gp3-pxg2-3gqf.json b/advisories/unreviewed/2022/05/GHSA-9gp3-pxg2-3gqf/GHSA-9gp3-pxg2-3gqf.json index ccfe209bcc5..b15afde4fe1 100644 --- a/advisories/unreviewed/2022/05/GHSA-9gp3-pxg2-3gqf/GHSA-9gp3-pxg2-3gqf.json +++ b/advisories/unreviewed/2022/05/GHSA-9gp3-pxg2-3gqf/GHSA-9gp3-pxg2-3gqf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9m6c-p5qg-gwgr/GHSA-9m6c-p5qg-gwgr.json b/advisories/unreviewed/2022/05/GHSA-9m6c-p5qg-gwgr/GHSA-9m6c-p5qg-gwgr.json index 24c371ce3f3..ca36dd43f5f 100644 --- a/advisories/unreviewed/2022/05/GHSA-9m6c-p5qg-gwgr/GHSA-9m6c-p5qg-gwgr.json +++ b/advisories/unreviewed/2022/05/GHSA-9m6c-p5qg-gwgr/GHSA-9m6c-p5qg-gwgr.json @@ -7,12 +7,8 @@ "CVE-2021-27317" ], "details": "Cross Site Scripting (XSS) vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via the comment parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9pf5-f78q-q36r/GHSA-9pf5-f78q-q36r.json b/advisories/unreviewed/2022/05/GHSA-9pf5-f78q-q36r/GHSA-9pf5-f78q-q36r.json index e0e2095d36e..fe3047a2e99 100644 --- a/advisories/unreviewed/2022/05/GHSA-9pf5-f78q-q36r/GHSA-9pf5-f78q-q36r.json +++ b/advisories/unreviewed/2022/05/GHSA-9pf5-f78q-q36r/GHSA-9pf5-f78q-q36r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9r57-f699-h3mm/GHSA-9r57-f699-h3mm.json b/advisories/unreviewed/2022/05/GHSA-9r57-f699-h3mm/GHSA-9r57-f699-h3mm.json index 99bc1c32f2c..faa964b1a09 100644 --- a/advisories/unreviewed/2022/05/GHSA-9r57-f699-h3mm/GHSA-9r57-f699-h3mm.json +++ b/advisories/unreviewed/2022/05/GHSA-9r57-f699-h3mm/GHSA-9r57-f699-h3mm.json @@ -7,12 +7,8 @@ "CVE-2021-20441" ], "details": "IBM Security Verify Bridge uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196617.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9vx8-499f-5qv7/GHSA-9vx8-499f-5qv7.json b/advisories/unreviewed/2022/05/GHSA-9vx8-499f-5qv7/GHSA-9vx8-499f-5qv7.json index 4336dba5255..20a00419391 100644 --- a/advisories/unreviewed/2022/05/GHSA-9vx8-499f-5qv7/GHSA-9vx8-499f-5qv7.json +++ b/advisories/unreviewed/2022/05/GHSA-9vx8-499f-5qv7/GHSA-9vx8-499f-5qv7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9w35-73xp-56pr/GHSA-9w35-73xp-56pr.json b/advisories/unreviewed/2022/05/GHSA-9w35-73xp-56pr/GHSA-9w35-73xp-56pr.json index d3a96ef08c3..6d4b9221b87 100644 --- a/advisories/unreviewed/2022/05/GHSA-9w35-73xp-56pr/GHSA-9w35-73xp-56pr.json +++ b/advisories/unreviewed/2022/05/GHSA-9w35-73xp-56pr/GHSA-9w35-73xp-56pr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9w4f-3vvw-mjvj/GHSA-9w4f-3vvw-mjvj.json b/advisories/unreviewed/2022/05/GHSA-9w4f-3vvw-mjvj/GHSA-9w4f-3vvw-mjvj.json index 8ca2c83192c..5ad35a0a88e 100644 --- a/advisories/unreviewed/2022/05/GHSA-9w4f-3vvw-mjvj/GHSA-9w4f-3vvw-mjvj.json +++ b/advisories/unreviewed/2022/05/GHSA-9w4f-3vvw-mjvj/GHSA-9w4f-3vvw-mjvj.json @@ -7,12 +7,8 @@ "CVE-2021-21150" ], "details": "Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9wj8-jc24-2m5j/GHSA-9wj8-jc24-2m5j.json b/advisories/unreviewed/2022/05/GHSA-9wj8-jc24-2m5j/GHSA-9wj8-jc24-2m5j.json index 69119046edd..d350d6346c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-9wj8-jc24-2m5j/GHSA-9wj8-jc24-2m5j.json +++ b/advisories/unreviewed/2022/05/GHSA-9wj8-jc24-2m5j/GHSA-9wj8-jc24-2m5j.json @@ -7,12 +7,8 @@ "CVE-2020-11280" ], "details": "Denial of service while processing fine timing measurement request (FTMR) frame with reserved bits set in the FTM parameter IE due to improper error handling in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9xcm-8x7r-552c/GHSA-9xcm-8x7r-552c.json b/advisories/unreviewed/2022/05/GHSA-9xcm-8x7r-552c/GHSA-9xcm-8x7r-552c.json index 7b79fc5cf99..e12625369b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-9xcm-8x7r-552c/GHSA-9xcm-8x7r-552c.json +++ b/advisories/unreviewed/2022/05/GHSA-9xcm-8x7r-552c/GHSA-9xcm-8x7r-552c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9xqv-vx9r-6f38/GHSA-9xqv-vx9r-6f38.json b/advisories/unreviewed/2022/05/GHSA-9xqv-vx9r-6f38/GHSA-9xqv-vx9r-6f38.json index 5cc22a6f2ed..3143f114efe 100644 --- a/advisories/unreviewed/2022/05/GHSA-9xqv-vx9r-6f38/GHSA-9xqv-vx9r-6f38.json +++ b/advisories/unreviewed/2022/05/GHSA-9xqv-vx9r-6f38/GHSA-9xqv-vx9r-6f38.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c23x-r777-vmjw/GHSA-c23x-r777-vmjw.json b/advisories/unreviewed/2022/05/GHSA-c23x-r777-vmjw/GHSA-c23x-r777-vmjw.json index cbde2385cf0..c92418a2519 100644 --- a/advisories/unreviewed/2022/05/GHSA-c23x-r777-vmjw/GHSA-c23x-r777-vmjw.json +++ b/advisories/unreviewed/2022/05/GHSA-c23x-r777-vmjw/GHSA-c23x-r777-vmjw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c523-23wv-j77q/GHSA-c523-23wv-j77q.json b/advisories/unreviewed/2022/05/GHSA-c523-23wv-j77q/GHSA-c523-23wv-j77q.json index 96145b25319..67a95e29eff 100644 --- a/advisories/unreviewed/2022/05/GHSA-c523-23wv-j77q/GHSA-c523-23wv-j77q.json +++ b/advisories/unreviewed/2022/05/GHSA-c523-23wv-j77q/GHSA-c523-23wv-j77q.json @@ -7,12 +7,8 @@ "CVE-2021-23131" ], "details": "An issue was discovered in Joomla! 3.2.0 through 3.9.24. Missing input validation within the template manager.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c73q-37qc-p5j8/GHSA-c73q-37qc-p5j8.json b/advisories/unreviewed/2022/05/GHSA-c73q-37qc-p5j8/GHSA-c73q-37qc-p5j8.json index d68c9afee39..c1c5d431b1a 100644 --- a/advisories/unreviewed/2022/05/GHSA-c73q-37qc-p5j8/GHSA-c73q-37qc-p5j8.json +++ b/advisories/unreviewed/2022/05/GHSA-c73q-37qc-p5j8/GHSA-c73q-37qc-p5j8.json @@ -7,12 +7,8 @@ "CVE-2021-26686" ], "details": "A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in the underlying database.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c9vq-pfm9-7pjp/GHSA-c9vq-pfm9-7pjp.json b/advisories/unreviewed/2022/05/GHSA-c9vq-pfm9-7pjp/GHSA-c9vq-pfm9-7pjp.json index 85874b0d84d..ace95803bdb 100644 --- a/advisories/unreviewed/2022/05/GHSA-c9vq-pfm9-7pjp/GHSA-c9vq-pfm9-7pjp.json +++ b/advisories/unreviewed/2022/05/GHSA-c9vq-pfm9-7pjp/GHSA-c9vq-pfm9-7pjp.json @@ -7,12 +7,8 @@ "CVE-2021-27318" ], "details": "Cross Site Scripting (XSS) vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via the lastname parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cc5x-973x-6p4m/GHSA-cc5x-973x-6p4m.json b/advisories/unreviewed/2022/05/GHSA-cc5x-973x-6p4m/GHSA-cc5x-973x-6p4m.json index 9a5e7dd9b9a..bdd3c9c6b3a 100644 --- a/advisories/unreviewed/2022/05/GHSA-cc5x-973x-6p4m/GHSA-cc5x-973x-6p4m.json +++ b/advisories/unreviewed/2022/05/GHSA-cc5x-973x-6p4m/GHSA-cc5x-973x-6p4m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cf7h-gr4c-wwxh/GHSA-cf7h-gr4c-wwxh.json b/advisories/unreviewed/2022/05/GHSA-cf7h-gr4c-wwxh/GHSA-cf7h-gr4c-wwxh.json index 9fe4893ee89..57d35c303c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-cf7h-gr4c-wwxh/GHSA-cf7h-gr4c-wwxh.json +++ b/advisories/unreviewed/2022/05/GHSA-cf7h-gr4c-wwxh/GHSA-cf7h-gr4c-wwxh.json @@ -7,12 +7,8 @@ "CVE-2021-3151" ], "details": "i-doit before 1.16.0 is affected by Stored Cross-Site Scripting (XSS) issues that could allow remote authenticated attackers to inject arbitrary web script or HTML via C__MONITORING__CONFIG__TITLE, SM2__C__MONITORING__CONFIG__TITLE, C__MONITORING__CONFIG__PATH, SM2__C__MONITORING__CONFIG__PATH, C__MONITORING__CONFIG__ADDRESS, or SM2__C__MONITORING__CONFIG__ADDRESS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cgj5-m6v7-hf6x/GHSA-cgj5-m6v7-hf6x.json b/advisories/unreviewed/2022/05/GHSA-cgj5-m6v7-hf6x/GHSA-cgj5-m6v7-hf6x.json index 9cd554d441c..a5d7cb15224 100644 --- a/advisories/unreviewed/2022/05/GHSA-cgj5-m6v7-hf6x/GHSA-cgj5-m6v7-hf6x.json +++ b/advisories/unreviewed/2022/05/GHSA-cgj5-m6v7-hf6x/GHSA-cgj5-m6v7-hf6x.json @@ -7,12 +7,8 @@ "CVE-2021-23962" ], "details": "Incorrect use of the '' method could have led to a user-after-poison and a potentially exploitable crash. This vulnerability affects Firefox < 85.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-chmw-mgxc-gvfx/GHSA-chmw-mgxc-gvfx.json b/advisories/unreviewed/2022/05/GHSA-chmw-mgxc-gvfx/GHSA-chmw-mgxc-gvfx.json index eae97e8b318..b60fb0f1585 100644 --- a/advisories/unreviewed/2022/05/GHSA-chmw-mgxc-gvfx/GHSA-chmw-mgxc-gvfx.json +++ b/advisories/unreviewed/2022/05/GHSA-chmw-mgxc-gvfx/GHSA-chmw-mgxc-gvfx.json @@ -7,12 +7,8 @@ "CVE-2019-18946" ], "details": "Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to session fixation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-chvg-47qc-prxj/GHSA-chvg-47qc-prxj.json b/advisories/unreviewed/2022/05/GHSA-chvg-47qc-prxj/GHSA-chvg-47qc-prxj.json index a5c055bddfa..9dd313df6ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-chvg-47qc-prxj/GHSA-chvg-47qc-prxj.json +++ b/advisories/unreviewed/2022/05/GHSA-chvg-47qc-prxj/GHSA-chvg-47qc-prxj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cj8v-3m6g-6r37/GHSA-cj8v-3m6g-6r37.json b/advisories/unreviewed/2022/05/GHSA-cj8v-3m6g-6r37/GHSA-cj8v-3m6g-6r37.json index 1ec5423e9d3..3f2df9e223a 100644 --- a/advisories/unreviewed/2022/05/GHSA-cj8v-3m6g-6r37/GHSA-cj8v-3m6g-6r37.json +++ b/advisories/unreviewed/2022/05/GHSA-cj8v-3m6g-6r37/GHSA-cj8v-3m6g-6r37.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cm5g-7gvh-66wv/GHSA-cm5g-7gvh-66wv.json b/advisories/unreviewed/2022/05/GHSA-cm5g-7gvh-66wv/GHSA-cm5g-7gvh-66wv.json index f1420c7da33..1906863d1d3 100644 --- a/advisories/unreviewed/2022/05/GHSA-cm5g-7gvh-66wv/GHSA-cm5g-7gvh-66wv.json +++ b/advisories/unreviewed/2022/05/GHSA-cm5g-7gvh-66wv/GHSA-cm5g-7gvh-66wv.json @@ -7,12 +7,8 @@ "CVE-2021-22661" ], "details": "Changing the password on the module webpage does not require the user to type in the current password first. Thus, the password could be changed by a user or external process without knowledge of the current password on the ICX35-HWC-A and ICX35-HWC-E (Versions 1.9.62 and prior).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cm5x-j39v-m82v/GHSA-cm5x-j39v-m82v.json b/advisories/unreviewed/2022/05/GHSA-cm5x-j39v-m82v/GHSA-cm5x-j39v-m82v.json index beb7da56cfe..e7aee9b10d9 100644 --- a/advisories/unreviewed/2022/05/GHSA-cm5x-j39v-m82v/GHSA-cm5x-j39v-m82v.json +++ b/advisories/unreviewed/2022/05/GHSA-cm5x-j39v-m82v/GHSA-cm5x-j39v-m82v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cmcw-cw5c-rg22/GHSA-cmcw-cw5c-rg22.json b/advisories/unreviewed/2022/05/GHSA-cmcw-cw5c-rg22/GHSA-cmcw-cw5c-rg22.json index 31054391fa0..3d78d8e9324 100644 --- a/advisories/unreviewed/2022/05/GHSA-cmcw-cw5c-rg22/GHSA-cmcw-cw5c-rg22.json +++ b/advisories/unreviewed/2022/05/GHSA-cmcw-cw5c-rg22/GHSA-cmcw-cw5c-rg22.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cq9r-xgxq-8rgc/GHSA-cq9r-xgxq-8rgc.json b/advisories/unreviewed/2022/05/GHSA-cq9r-xgxq-8rgc/GHSA-cq9r-xgxq-8rgc.json index c441c60b92b..ca8090758bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-cq9r-xgxq-8rgc/GHSA-cq9r-xgxq-8rgc.json +++ b/advisories/unreviewed/2022/05/GHSA-cq9r-xgxq-8rgc/GHSA-cq9r-xgxq-8rgc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cqrp-pfpx-f7vj/GHSA-cqrp-pfpx-f7vj.json b/advisories/unreviewed/2022/05/GHSA-cqrp-pfpx-f7vj/GHSA-cqrp-pfpx-f7vj.json index e7b63310654..1b9e153662e 100644 --- a/advisories/unreviewed/2022/05/GHSA-cqrp-pfpx-f7vj/GHSA-cqrp-pfpx-f7vj.json +++ b/advisories/unreviewed/2022/05/GHSA-cqrp-pfpx-f7vj/GHSA-cqrp-pfpx-f7vj.json @@ -7,12 +7,8 @@ "CVE-2020-22475" ], "details": "\"Tasks\" application version before 9.7.3 is affected by insecure permissions. The VoiceCommandActivity application component allows arbitrary applications on a device to add tasks with no restrictions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-crhc-r83w-662j/GHSA-crhc-r83w-662j.json b/advisories/unreviewed/2022/05/GHSA-crhc-r83w-662j/GHSA-crhc-r83w-662j.json index 901cd963d00..fe2b6c753d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-crhc-r83w-662j/GHSA-crhc-r83w-662j.json +++ b/advisories/unreviewed/2022/05/GHSA-crhc-r83w-662j/GHSA-crhc-r83w-662j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-crm4-q8rq-r3g4/GHSA-crm4-q8rq-r3g4.json b/advisories/unreviewed/2022/05/GHSA-crm4-q8rq-r3g4/GHSA-crm4-q8rq-r3g4.json index 2bda74b7007..3d4c4bbb735 100644 --- a/advisories/unreviewed/2022/05/GHSA-crm4-q8rq-r3g4/GHSA-crm4-q8rq-r3g4.json +++ b/advisories/unreviewed/2022/05/GHSA-crm4-q8rq-r3g4/GHSA-crm4-q8rq-r3g4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cvh4-vf6f-2qvj/GHSA-cvh4-vf6f-2qvj.json b/advisories/unreviewed/2022/05/GHSA-cvh4-vf6f-2qvj/GHSA-cvh4-vf6f-2qvj.json index 1f9958be52d..3871a135477 100644 --- a/advisories/unreviewed/2022/05/GHSA-cvh4-vf6f-2qvj/GHSA-cvh4-vf6f-2qvj.json +++ b/advisories/unreviewed/2022/05/GHSA-cvh4-vf6f-2qvj/GHSA-cvh4-vf6f-2qvj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cvqr-93m2-6777/GHSA-cvqr-93m2-6777.json b/advisories/unreviewed/2022/05/GHSA-cvqr-93m2-6777/GHSA-cvqr-93m2-6777.json index 5e22e61e438..136ad1c0a52 100644 --- a/advisories/unreviewed/2022/05/GHSA-cvqr-93m2-6777/GHSA-cvqr-93m2-6777.json +++ b/advisories/unreviewed/2022/05/GHSA-cvqr-93m2-6777/GHSA-cvqr-93m2-6777.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cvrm-cr3m-qj92/GHSA-cvrm-cr3m-qj92.json b/advisories/unreviewed/2022/05/GHSA-cvrm-cr3m-qj92/GHSA-cvrm-cr3m-qj92.json index 7b1953b6f83..9264e06b271 100644 --- a/advisories/unreviewed/2022/05/GHSA-cvrm-cr3m-qj92/GHSA-cvrm-cr3m-qj92.json +++ b/advisories/unreviewed/2022/05/GHSA-cvrm-cr3m-qj92/GHSA-cvrm-cr3m-qj92.json @@ -7,12 +7,8 @@ "CVE-2020-35571" ], "details": "An issue was discovered in MantisBT through 2.24.3. In the helper_ensure_confirmed call in manage_custom_field_update.php, the custom field name is not sanitized. This may be problematic depending on CSP settings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cw7x-vcp5-44ch/GHSA-cw7x-vcp5-44ch.json b/advisories/unreviewed/2022/05/GHSA-cw7x-vcp5-44ch/GHSA-cw7x-vcp5-44ch.json index 8c9ca5c209d..0bfac2b63cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-cw7x-vcp5-44ch/GHSA-cw7x-vcp5-44ch.json +++ b/advisories/unreviewed/2022/05/GHSA-cw7x-vcp5-44ch/GHSA-cw7x-vcp5-44ch.json @@ -7,12 +7,8 @@ "CVE-2020-4953" ], "details": "IBM Planning Analytics 2.0 could allow a remote authenticated attacker to obtain information about an organization's internal structure by exposing sensitive information in HTTP repsonses. IBM X-Force ID: 192029.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cx76-c2xc-cfqc/GHSA-cx76-c2xc-cfqc.json b/advisories/unreviewed/2022/05/GHSA-cx76-c2xc-cfqc/GHSA-cx76-c2xc-cfqc.json index 75971989337..563d645956a 100644 --- a/advisories/unreviewed/2022/05/GHSA-cx76-c2xc-cfqc/GHSA-cx76-c2xc-cfqc.json +++ b/advisories/unreviewed/2022/05/GHSA-cx76-c2xc-cfqc/GHSA-cx76-c2xc-cfqc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cx9h-c692-2vcm/GHSA-cx9h-c692-2vcm.json b/advisories/unreviewed/2022/05/GHSA-cx9h-c692-2vcm/GHSA-cx9h-c692-2vcm.json index 77e847082e6..5d31846a737 100644 --- a/advisories/unreviewed/2022/05/GHSA-cx9h-c692-2vcm/GHSA-cx9h-c692-2vcm.json +++ b/advisories/unreviewed/2022/05/GHSA-cx9h-c692-2vcm/GHSA-cx9h-c692-2vcm.json @@ -7,12 +7,8 @@ "CVE-2020-28199" ], "details": "best it Amazon Pay Plugin before 9.4.2 for Shopware exposes Sensitive Information to an Unauthorized Actor.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cxc9-2m79-6f46/GHSA-cxc9-2m79-6f46.json b/advisories/unreviewed/2022/05/GHSA-cxc9-2m79-6f46/GHSA-cxc9-2m79-6f46.json index 2f94e7fb243..7a1cd1963f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-cxc9-2m79-6f46/GHSA-cxc9-2m79-6f46.json +++ b/advisories/unreviewed/2022/05/GHSA-cxc9-2m79-6f46/GHSA-cxc9-2m79-6f46.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cxgq-frm4-w3gh/GHSA-cxgq-frm4-w3gh.json b/advisories/unreviewed/2022/05/GHSA-cxgq-frm4-w3gh/GHSA-cxgq-frm4-w3gh.json index f7d060ebb82..d3adb47c3a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-cxgq-frm4-w3gh/GHSA-cxgq-frm4-w3gh.json +++ b/advisories/unreviewed/2022/05/GHSA-cxgq-frm4-w3gh/GHSA-cxgq-frm4-w3gh.json @@ -7,12 +7,8 @@ "CVE-2021-21157" ], "details": "Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f392-jc49-593j/GHSA-f392-jc49-593j.json b/advisories/unreviewed/2022/05/GHSA-f392-jc49-593j/GHSA-f392-jc49-593j.json index 5acc150efa4..f7e83b0fc44 100644 --- a/advisories/unreviewed/2022/05/GHSA-f392-jc49-593j/GHSA-f392-jc49-593j.json +++ b/advisories/unreviewed/2022/05/GHSA-f392-jc49-593j/GHSA-f392-jc49-593j.json @@ -7,12 +7,8 @@ "CVE-2021-25252" ], "details": "Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f3g9-x4jw-849g/GHSA-f3g9-x4jw-849g.json b/advisories/unreviewed/2022/05/GHSA-f3g9-x4jw-849g/GHSA-f3g9-x4jw-849g.json index 5e09b792b07..c32b0f9f19b 100644 --- a/advisories/unreviewed/2022/05/GHSA-f3g9-x4jw-849g/GHSA-f3g9-x4jw-849g.json +++ b/advisories/unreviewed/2022/05/GHSA-f3g9-x4jw-849g/GHSA-f3g9-x4jw-849g.json @@ -7,12 +7,8 @@ "CVE-2021-23959" ], "details": "An XSS bug in internal error pages could have led to various spoofing attacks, including other error pages and the address bar. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 85.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f3gj-pgpx-63wj/GHSA-f3gj-pgpx-63wj.json b/advisories/unreviewed/2022/05/GHSA-f3gj-pgpx-63wj/GHSA-f3gj-pgpx-63wj.json index e48cfcf0e49..79fc9cc98b7 100644 --- a/advisories/unreviewed/2022/05/GHSA-f3gj-pgpx-63wj/GHSA-f3gj-pgpx-63wj.json +++ b/advisories/unreviewed/2022/05/GHSA-f3gj-pgpx-63wj/GHSA-f3gj-pgpx-63wj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f3gr-qvc9-j8pv/GHSA-f3gr-qvc9-j8pv.json b/advisories/unreviewed/2022/05/GHSA-f3gr-qvc9-j8pv/GHSA-f3gr-qvc9-j8pv.json index 3baf5d0a0ad..a2cae4ae6d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-f3gr-qvc9-j8pv/GHSA-f3gr-qvc9-j8pv.json +++ b/advisories/unreviewed/2022/05/GHSA-f3gr-qvc9-j8pv/GHSA-f3gr-qvc9-j8pv.json @@ -7,12 +7,8 @@ "CVE-2020-11286" ], "details": "An Untrusted Pointer Dereference can occur while doing USB control transfers, if multiple requests of different standard request categories like device, interface & endpoint are made together. in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f3pg-rpwp-6vpc/GHSA-f3pg-rpwp-6vpc.json b/advisories/unreviewed/2022/05/GHSA-f3pg-rpwp-6vpc/GHSA-f3pg-rpwp-6vpc.json index 4d3028ad25e..7264f0ef1a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-f3pg-rpwp-6vpc/GHSA-f3pg-rpwp-6vpc.json +++ b/advisories/unreviewed/2022/05/GHSA-f3pg-rpwp-6vpc/GHSA-f3pg-rpwp-6vpc.json @@ -7,12 +7,8 @@ "CVE-2020-15937" ], "details": "An improper neutralization of input vulnerability in FortiGate version 6.2.x below 6.2.5 and 6.4.x below 6.4.1 may allow a remote attacker to perform a stored cross site scripting attack (XSS) via the IPS and WAF logs dashboard.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f5g5-7jmh-g5m2/GHSA-f5g5-7jmh-g5m2.json b/advisories/unreviewed/2022/05/GHSA-f5g5-7jmh-g5m2/GHSA-f5g5-7jmh-g5m2.json index 82ee81e45a3..aa171c310af 100644 --- a/advisories/unreviewed/2022/05/GHSA-f5g5-7jmh-g5m2/GHSA-f5g5-7jmh-g5m2.json +++ b/advisories/unreviewed/2022/05/GHSA-f5g5-7jmh-g5m2/GHSA-f5g5-7jmh-g5m2.json @@ -7,12 +7,8 @@ "CVE-2021-26703" ], "details": "EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted JSON/XML input to a cgi/ajax/phrase URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f5rx-w2r6-vxr8/GHSA-f5rx-w2r6-vxr8.json b/advisories/unreviewed/2022/05/GHSA-f5rx-w2r6-vxr8/GHSA-f5rx-w2r6-vxr8.json index d0f81d4a2d9..3e2744a4770 100644 --- a/advisories/unreviewed/2022/05/GHSA-f5rx-w2r6-vxr8/GHSA-f5rx-w2r6-vxr8.json +++ b/advisories/unreviewed/2022/05/GHSA-f5rx-w2r6-vxr8/GHSA-f5rx-w2r6-vxr8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f66v-3757-hppx/GHSA-f66v-3757-hppx.json b/advisories/unreviewed/2022/05/GHSA-f66v-3757-hppx/GHSA-f66v-3757-hppx.json index 129955894c5..ad76ab93601 100644 --- a/advisories/unreviewed/2022/05/GHSA-f66v-3757-hppx/GHSA-f66v-3757-hppx.json +++ b/advisories/unreviewed/2022/05/GHSA-f66v-3757-hppx/GHSA-f66v-3757-hppx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f82m-qq46-pcww/GHSA-f82m-qq46-pcww.json b/advisories/unreviewed/2022/05/GHSA-f82m-qq46-pcww/GHSA-f82m-qq46-pcww.json index 99922ed039f..61987279989 100644 --- a/advisories/unreviewed/2022/05/GHSA-f82m-qq46-pcww/GHSA-f82m-qq46-pcww.json +++ b/advisories/unreviewed/2022/05/GHSA-f82m-qq46-pcww/GHSA-f82m-qq46-pcww.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f9j7-g2gf-qjjv/GHSA-f9j7-g2gf-qjjv.json b/advisories/unreviewed/2022/05/GHSA-f9j7-g2gf-qjjv/GHSA-f9j7-g2gf-qjjv.json index 2cf11880c85..0f23bc4fff7 100644 --- a/advisories/unreviewed/2022/05/GHSA-f9j7-g2gf-qjjv/GHSA-f9j7-g2gf-qjjv.json +++ b/advisories/unreviewed/2022/05/GHSA-f9j7-g2gf-qjjv/GHSA-f9j7-g2gf-qjjv.json @@ -7,12 +7,8 @@ "CVE-2020-35327" ], "details": "SQL injection vulnerability was discovered in Courier Management System 1.0, which can be exploited via the ref_no (POST) parameter to admin_class.php", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fc9p-j9x4-gr35/GHSA-fc9p-j9x4-gr35.json b/advisories/unreviewed/2022/05/GHSA-fc9p-j9x4-gr35/GHSA-fc9p-j9x4-gr35.json index f7fc3be1491..b8cf496ae3a 100644 --- a/advisories/unreviewed/2022/05/GHSA-fc9p-j9x4-gr35/GHSA-fc9p-j9x4-gr35.json +++ b/advisories/unreviewed/2022/05/GHSA-fc9p-j9x4-gr35/GHSA-fc9p-j9x4-gr35.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fcmp-pc8h-ff6j/GHSA-fcmp-pc8h-ff6j.json b/advisories/unreviewed/2022/05/GHSA-fcmp-pc8h-ff6j/GHSA-fcmp-pc8h-ff6j.json index 34ffda934d8..3cb8b7277ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-fcmp-pc8h-ff6j/GHSA-fcmp-pc8h-ff6j.json +++ b/advisories/unreviewed/2022/05/GHSA-fcmp-pc8h-ff6j/GHSA-fcmp-pc8h-ff6j.json @@ -7,12 +7,8 @@ "CVE-2020-35329" ], "details": "Courier Management System 1.0 1.0 is affected by SQL Injection via 'MULTIPART street '.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fcq4-j7rv-crch/GHSA-fcq4-j7rv-crch.json b/advisories/unreviewed/2022/05/GHSA-fcq4-j7rv-crch/GHSA-fcq4-j7rv-crch.json index 153eec31a7c..25c713619d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-fcq4-j7rv-crch/GHSA-fcq4-j7rv-crch.json +++ b/advisories/unreviewed/2022/05/GHSA-fcq4-j7rv-crch/GHSA-fcq4-j7rv-crch.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ffjg-mw44-7fw8/GHSA-ffjg-mw44-7fw8.json b/advisories/unreviewed/2022/05/GHSA-ffjg-mw44-7fw8/GHSA-ffjg-mw44-7fw8.json index e3eb55d32d4..4c5fe8f62ba 100644 --- a/advisories/unreviewed/2022/05/GHSA-ffjg-mw44-7fw8/GHSA-ffjg-mw44-7fw8.json +++ b/advisories/unreviewed/2022/05/GHSA-ffjg-mw44-7fw8/GHSA-ffjg-mw44-7fw8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ffqj-7pgc-cmj5/GHSA-ffqj-7pgc-cmj5.json b/advisories/unreviewed/2022/05/GHSA-ffqj-7pgc-cmj5/GHSA-ffqj-7pgc-cmj5.json index d14fefe865c..e177629d1c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-ffqj-7pgc-cmj5/GHSA-ffqj-7pgc-cmj5.json +++ b/advisories/unreviewed/2022/05/GHSA-ffqj-7pgc-cmj5/GHSA-ffqj-7pgc-cmj5.json @@ -7,12 +7,8 @@ "CVE-2021-24032" ], "details": "Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fj3m-f5px-cp9p/GHSA-fj3m-f5px-cp9p.json b/advisories/unreviewed/2022/05/GHSA-fj3m-f5px-cp9p/GHSA-fj3m-f5px-cp9p.json index 5adc7e38658..17a151ead61 100644 --- a/advisories/unreviewed/2022/05/GHSA-fj3m-f5px-cp9p/GHSA-fj3m-f5px-cp9p.json +++ b/advisories/unreviewed/2022/05/GHSA-fj3m-f5px-cp9p/GHSA-fj3m-f5px-cp9p.json @@ -7,12 +7,8 @@ "CVE-2020-16243" ], "details": "Multiple buffer overflow vulnerabilities exist when LeviStudioU (Version 2019-09-21 and prior) processes project files. Opening a specially crafted project file could allow an attacker to exploit and execute code under the privileges of the application.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fj94-8m6h-2j28/GHSA-fj94-8m6h-2j28.json b/advisories/unreviewed/2022/05/GHSA-fj94-8m6h-2j28/GHSA-fj94-8m6h-2j28.json index d8908fc32e5..117066d1f00 100644 --- a/advisories/unreviewed/2022/05/GHSA-fj94-8m6h-2j28/GHSA-fj94-8m6h-2j28.json +++ b/advisories/unreviewed/2022/05/GHSA-fj94-8m6h-2j28/GHSA-fj94-8m6h-2j28.json @@ -7,12 +7,8 @@ "CVE-2020-4856" ], "details": "IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190459.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fpr2-m5hr-2pmm/GHSA-fpr2-m5hr-2pmm.json b/advisories/unreviewed/2022/05/GHSA-fpr2-m5hr-2pmm/GHSA-fpr2-m5hr-2pmm.json index 49e7c1b18d4..2b2e724a0f4 100644 --- a/advisories/unreviewed/2022/05/GHSA-fpr2-m5hr-2pmm/GHSA-fpr2-m5hr-2pmm.json +++ b/advisories/unreviewed/2022/05/GHSA-fpr2-m5hr-2pmm/GHSA-fpr2-m5hr-2pmm.json @@ -7,12 +7,8 @@ "CVE-2021-27189" ], "details": "The CIRA Canadian Shield app before 4.0.13 for iOS lacks SSL Certificate Validation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fqjw-rgv6-j77q/GHSA-fqjw-rgv6-j77q.json b/advisories/unreviewed/2022/05/GHSA-fqjw-rgv6-j77q/GHSA-fqjw-rgv6-j77q.json index 7e03437764e..c1c95009424 100644 --- a/advisories/unreviewed/2022/05/GHSA-fqjw-rgv6-j77q/GHSA-fqjw-rgv6-j77q.json +++ b/advisories/unreviewed/2022/05/GHSA-fqjw-rgv6-j77q/GHSA-fqjw-rgv6-j77q.json @@ -7,12 +7,8 @@ "CVE-2021-21724" ], "details": "A ZTE product has a memory leak vulnerability. Due to the product's improper handling of memory release in certain scenarios, a local attacker with device permissions repeatedly attenuated the optical signal to cause memory leak and abnormal service. This affects: ZXR10 8900E, all versions up to V3.03.20R2B30P1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fqx6-v4f3-6f2w/GHSA-fqx6-v4f3-6f2w.json b/advisories/unreviewed/2022/05/GHSA-fqx6-v4f3-6f2w/GHSA-fqx6-v4f3-6f2w.json index 9ad368e4dc3..cdf395ce1b8 100644 --- a/advisories/unreviewed/2022/05/GHSA-fqx6-v4f3-6f2w/GHSA-fqx6-v4f3-6f2w.json +++ b/advisories/unreviewed/2022/05/GHSA-fqx6-v4f3-6f2w/GHSA-fqx6-v4f3-6f2w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fr34-5cph-525x/GHSA-fr34-5cph-525x.json b/advisories/unreviewed/2022/05/GHSA-fr34-5cph-525x/GHSA-fr34-5cph-525x.json index 0de159fc266..3cee645977f 100644 --- a/advisories/unreviewed/2022/05/GHSA-fr34-5cph-525x/GHSA-fr34-5cph-525x.json +++ b/advisories/unreviewed/2022/05/GHSA-fr34-5cph-525x/GHSA-fr34-5cph-525x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fv94-f3jq-q69q/GHSA-fv94-f3jq-q69q.json b/advisories/unreviewed/2022/05/GHSA-fv94-f3jq-q69q/GHSA-fv94-f3jq-q69q.json index 4c257480641..ba51dd2d3a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-fv94-f3jq-q69q/GHSA-fv94-f3jq-q69q.json +++ b/advisories/unreviewed/2022/05/GHSA-fv94-f3jq-q69q/GHSA-fv94-f3jq-q69q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fw35-ggqm-93fg/GHSA-fw35-ggqm-93fg.json b/advisories/unreviewed/2022/05/GHSA-fw35-ggqm-93fg/GHSA-fw35-ggqm-93fg.json index d55989115c9..f6f10551e5b 100644 --- a/advisories/unreviewed/2022/05/GHSA-fw35-ggqm-93fg/GHSA-fw35-ggqm-93fg.json +++ b/advisories/unreviewed/2022/05/GHSA-fw35-ggqm-93fg/GHSA-fw35-ggqm-93fg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fwxv-gqjv-m57v/GHSA-fwxv-gqjv-m57v.json b/advisories/unreviewed/2022/05/GHSA-fwxv-gqjv-m57v/GHSA-fwxv-gqjv-m57v.json index 22bbb5aab59..e0e87410980 100644 --- a/advisories/unreviewed/2022/05/GHSA-fwxv-gqjv-m57v/GHSA-fwxv-gqjv-m57v.json +++ b/advisories/unreviewed/2022/05/GHSA-fwxv-gqjv-m57v/GHSA-fwxv-gqjv-m57v.json @@ -7,12 +7,8 @@ "CVE-2021-26476" ], "details": "EPrints 3.4.2 allows remote attackers to execute OS commands via crafted LaTeX input to a cgi/cal?year= URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fx7p-34hm-2cm5/GHSA-fx7p-34hm-2cm5.json b/advisories/unreviewed/2022/05/GHSA-fx7p-34hm-2cm5/GHSA-fx7p-34hm-2cm5.json index 2f86c4935cb..6c4ed173771 100644 --- a/advisories/unreviewed/2022/05/GHSA-fx7p-34hm-2cm5/GHSA-fx7p-34hm-2cm5.json +++ b/advisories/unreviewed/2022/05/GHSA-fx7p-34hm-2cm5/GHSA-fx7p-34hm-2cm5.json @@ -7,12 +7,8 @@ "CVE-2020-28657" ], "details": "In bPanel 2.0, the administrative ajax endpoints (aka ajax/aj_*.php) are accessible without authentication and allow SQL injections, which could lead to platform compromise.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fxpg-8qq8-225c/GHSA-fxpg-8qq8-225c.json b/advisories/unreviewed/2022/05/GHSA-fxpg-8qq8-225c/GHSA-fxpg-8qq8-225c.json index 2ee89d13202..37e6dde50b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-fxpg-8qq8-225c/GHSA-fxpg-8qq8-225c.json +++ b/advisories/unreviewed/2022/05/GHSA-fxpg-8qq8-225c/GHSA-fxpg-8qq8-225c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g26q-ppp8-jj4r/GHSA-g26q-ppp8-jj4r.json b/advisories/unreviewed/2022/05/GHSA-g26q-ppp8-jj4r/GHSA-g26q-ppp8-jj4r.json index 9ae618541c4..6889ef8c99e 100644 --- a/advisories/unreviewed/2022/05/GHSA-g26q-ppp8-jj4r/GHSA-g26q-ppp8-jj4r.json +++ b/advisories/unreviewed/2022/05/GHSA-g26q-ppp8-jj4r/GHSA-g26q-ppp8-jj4r.json @@ -7,12 +7,8 @@ "CVE-2021-27839" ], "details": "A CSV injection vulnerability found in Online Invoicing System (OIS) 4.3 and below can be exploited by users to perform malicious actions such as redirecting admins to unknown or harmful websites, or disclosing other clients' details that the user did not have access to.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g2pp-5mmc-fhvg/GHSA-g2pp-5mmc-fhvg.json b/advisories/unreviewed/2022/05/GHSA-g2pp-5mmc-fhvg/GHSA-g2pp-5mmc-fhvg.json index 8b3255b1bda..3088c50438b 100644 --- a/advisories/unreviewed/2022/05/GHSA-g2pp-5mmc-fhvg/GHSA-g2pp-5mmc-fhvg.json +++ b/advisories/unreviewed/2022/05/GHSA-g2pp-5mmc-fhvg/GHSA-g2pp-5mmc-fhvg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g33j-xwrp-hpfv/GHSA-g33j-xwrp-hpfv.json b/advisories/unreviewed/2022/05/GHSA-g33j-xwrp-hpfv/GHSA-g33j-xwrp-hpfv.json index 5c20c7166ae..9342c07ead2 100644 --- a/advisories/unreviewed/2022/05/GHSA-g33j-xwrp-hpfv/GHSA-g33j-xwrp-hpfv.json +++ b/advisories/unreviewed/2022/05/GHSA-g33j-xwrp-hpfv/GHSA-g33j-xwrp-hpfv.json @@ -7,12 +7,8 @@ "CVE-2021-21517" ], "details": "SRS Policy Manager 6.X is affected by an XML External Entity Injection (XXE) vulnerability due to a misconfigured XML parser that processes user-supplied DTD input without sufficient validation. A remote unauthenticated attacker can potentially exploit this vulnerability to read system files as a non-root user and may be able to temporarily disrupt the ESRS service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g664-hj5c-r32g/GHSA-g664-hj5c-r32g.json b/advisories/unreviewed/2022/05/GHSA-g664-hj5c-r32g/GHSA-g664-hj5c-r32g.json index 50b8cdbe31b..d4bb5592d5c 100644 --- a/advisories/unreviewed/2022/05/GHSA-g664-hj5c-r32g/GHSA-g664-hj5c-r32g.json +++ b/advisories/unreviewed/2022/05/GHSA-g664-hj5c-r32g/GHSA-g664-hj5c-r32g.json @@ -7,12 +7,8 @@ "CVE-2021-20658" ], "details": "SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g75w-vcgr-6v4q/GHSA-g75w-vcgr-6v4q.json b/advisories/unreviewed/2022/05/GHSA-g75w-vcgr-6v4q/GHSA-g75w-vcgr-6v4q.json index 484f8a82261..95638ef584c 100644 --- a/advisories/unreviewed/2022/05/GHSA-g75w-vcgr-6v4q/GHSA-g75w-vcgr-6v4q.json +++ b/advisories/unreviewed/2022/05/GHSA-g75w-vcgr-6v4q/GHSA-g75w-vcgr-6v4q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g7qv-r3gj-p6h6/GHSA-g7qv-r3gj-p6h6.json b/advisories/unreviewed/2022/05/GHSA-g7qv-r3gj-p6h6/GHSA-g7qv-r3gj-p6h6.json index 434c76153ce..e81ba849d04 100644 --- a/advisories/unreviewed/2022/05/GHSA-g7qv-r3gj-p6h6/GHSA-g7qv-r3gj-p6h6.json +++ b/advisories/unreviewed/2022/05/GHSA-g7qv-r3gj-p6h6/GHSA-g7qv-r3gj-p6h6.json @@ -7,12 +7,8 @@ "CVE-2021-25345" ], "details": "Graphic format mismatch while converting video format in hwcomposer prior to SMR Mar-2021 Release 1 results in kernel panic due to unsupported format.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g926-r78h-rfvj/GHSA-g926-r78h-rfvj.json b/advisories/unreviewed/2022/05/GHSA-g926-r78h-rfvj/GHSA-g926-r78h-rfvj.json index d4161677a2c..b3612fdc2ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-g926-r78h-rfvj/GHSA-g926-r78h-rfvj.json +++ b/advisories/unreviewed/2022/05/GHSA-g926-r78h-rfvj/GHSA-g926-r78h-rfvj.json @@ -7,12 +7,8 @@ "CVE-2021-27901" ], "details": "An issue was discovered on LG mobile devices with Android OS 11 software. They mishandle fingerprint recognition because local high beam mode (LHBM) does not function properly during bright illumination. The LG ID is LVE-SMP-210001 (March 2021).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gcm8-3m4m-6m4j/GHSA-gcm8-3m4m-6m4j.json b/advisories/unreviewed/2022/05/GHSA-gcm8-3m4m-6m4j/GHSA-gcm8-3m4m-6m4j.json index a83c19b29e0..c338c5a2622 100644 --- a/advisories/unreviewed/2022/05/GHSA-gcm8-3m4m-6m4j/GHSA-gcm8-3m4m-6m4j.json +++ b/advisories/unreviewed/2022/05/GHSA-gcm8-3m4m-6m4j/GHSA-gcm8-3m4m-6m4j.json @@ -7,12 +7,8 @@ "CVE-2021-0366" ], "details": "In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05371580; Issue ID: ALPS05379093.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gcp3-gfr7-rcqp/GHSA-gcp3-gfr7-rcqp.json b/advisories/unreviewed/2022/05/GHSA-gcp3-gfr7-rcqp/GHSA-gcp3-gfr7-rcqp.json index 2581723a372..cdf173dc8bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-gcp3-gfr7-rcqp/GHSA-gcp3-gfr7-rcqp.json +++ b/advisories/unreviewed/2022/05/GHSA-gcp3-gfr7-rcqp/GHSA-gcp3-gfr7-rcqp.json @@ -7,12 +7,8 @@ "CVE-2020-10519" ], "details": "A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-controlled configuration of the underlying parsers used by GitHub Pages were not sufficiently restricted and made it possible to execute commands on the GitHub Enterprise Server instance. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to 2.22.7 and was fixed in 2.22.7, 2.21.15, and 2.20.24. The underlying issues contributing to this vulnerability were identified through the GitHub Security Bug Bounty program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gcw2-hf24-m7fv/GHSA-gcw2-hf24-m7fv.json b/advisories/unreviewed/2022/05/GHSA-gcw2-hf24-m7fv/GHSA-gcw2-hf24-m7fv.json index 86812372028..86aa1974e2a 100644 --- a/advisories/unreviewed/2022/05/GHSA-gcw2-hf24-m7fv/GHSA-gcw2-hf24-m7fv.json +++ b/advisories/unreviewed/2022/05/GHSA-gcw2-hf24-m7fv/GHSA-gcw2-hf24-m7fv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gf2q-c6x2-hw42/GHSA-gf2q-c6x2-hw42.json b/advisories/unreviewed/2022/05/GHSA-gf2q-c6x2-hw42/GHSA-gf2q-c6x2-hw42.json index 5b7fdb33b5e..c7969e83764 100644 --- a/advisories/unreviewed/2022/05/GHSA-gf2q-c6x2-hw42/GHSA-gf2q-c6x2-hw42.json +++ b/advisories/unreviewed/2022/05/GHSA-gf2q-c6x2-hw42/GHSA-gf2q-c6x2-hw42.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gf82-9fq8-333q/GHSA-gf82-9fq8-333q.json b/advisories/unreviewed/2022/05/GHSA-gf82-9fq8-333q/GHSA-gf82-9fq8-333q.json index ee742b974dc..ca76e3453c6 100644 --- a/advisories/unreviewed/2022/05/GHSA-gf82-9fq8-333q/GHSA-gf82-9fq8-333q.json +++ b/advisories/unreviewed/2022/05/GHSA-gf82-9fq8-333q/GHSA-gf82-9fq8-333q.json @@ -7,12 +7,8 @@ "CVE-2020-12528" ], "details": "An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. Improper use of access validation allows a logged in user to kill web2go sessions in the account he should not have access to.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gg6v-4qwx-rfpc/GHSA-gg6v-4qwx-rfpc.json b/advisories/unreviewed/2022/05/GHSA-gg6v-4qwx-rfpc/GHSA-gg6v-4qwx-rfpc.json index fb5997a7464..2655b9826bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-gg6v-4qwx-rfpc/GHSA-gg6v-4qwx-rfpc.json +++ b/advisories/unreviewed/2022/05/GHSA-gg6v-4qwx-rfpc/GHSA-gg6v-4qwx-rfpc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ghgh-jcjq-6hx2/GHSA-ghgh-jcjq-6hx2.json b/advisories/unreviewed/2022/05/GHSA-ghgh-jcjq-6hx2/GHSA-ghgh-jcjq-6hx2.json index abd6d8dbf18..508d670967b 100644 --- a/advisories/unreviewed/2022/05/GHSA-ghgh-jcjq-6hx2/GHSA-ghgh-jcjq-6hx2.json +++ b/advisories/unreviewed/2022/05/GHSA-ghgh-jcjq-6hx2/GHSA-ghgh-jcjq-6hx2.json @@ -7,12 +7,8 @@ "CVE-2021-0405" ], "details": "In performance driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05466547.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gp5g-75v2-9x72/GHSA-gp5g-75v2-9x72.json b/advisories/unreviewed/2022/05/GHSA-gp5g-75v2-9x72/GHSA-gp5g-75v2-9x72.json index 8534ce738e3..5d711d103af 100644 --- a/advisories/unreviewed/2022/05/GHSA-gp5g-75v2-9x72/GHSA-gp5g-75v2-9x72.json +++ b/advisories/unreviewed/2022/05/GHSA-gp5g-75v2-9x72/GHSA-gp5g-75v2-9x72.json @@ -7,12 +7,8 @@ "CVE-2020-29030" ], "details": "Cross-Site Request Forgery (CSRF) vulnerability in web GUI of Secomea GateManager allows an attacker to execute malicious code. This issue affects: Secomea GateManager All versions prior to 9.4.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gp5m-rxrx-pfrj/GHSA-gp5m-rxrx-pfrj.json b/advisories/unreviewed/2022/05/GHSA-gp5m-rxrx-pfrj/GHSA-gp5m-rxrx-pfrj.json index 6349177afe5..b9f351944e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-gp5m-rxrx-pfrj/GHSA-gp5m-rxrx-pfrj.json +++ b/advisories/unreviewed/2022/05/GHSA-gp5m-rxrx-pfrj/GHSA-gp5m-rxrx-pfrj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gp95-57cx-8m7x/GHSA-gp95-57cx-8m7x.json b/advisories/unreviewed/2022/05/GHSA-gp95-57cx-8m7x/GHSA-gp95-57cx-8m7x.json index 883adcafd24..0c074311cde 100644 --- a/advisories/unreviewed/2022/05/GHSA-gp95-57cx-8m7x/GHSA-gp95-57cx-8m7x.json +++ b/advisories/unreviewed/2022/05/GHSA-gp95-57cx-8m7x/GHSA-gp95-57cx-8m7x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-grjw-9qmf-c947/GHSA-grjw-9qmf-c947.json b/advisories/unreviewed/2022/05/GHSA-grjw-9qmf-c947/GHSA-grjw-9qmf-c947.json index cb48573b9b2..13154939368 100644 --- a/advisories/unreviewed/2022/05/GHSA-grjw-9qmf-c947/GHSA-grjw-9qmf-c947.json +++ b/advisories/unreviewed/2022/05/GHSA-grjw-9qmf-c947/GHSA-grjw-9qmf-c947.json @@ -7,12 +7,8 @@ "CVE-2021-21065" ], "details": "Adobe Bridge version 11.0 (and earlier) is affected by an out-of-bounds write vulnerability when parsing TTF files that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gv3c-8hg4-9hxx/GHSA-gv3c-8hg4-9hxx.json b/advisories/unreviewed/2022/05/GHSA-gv3c-8hg4-9hxx/GHSA-gv3c-8hg4-9hxx.json index 1b963656ad6..71a31958cf3 100644 --- a/advisories/unreviewed/2022/05/GHSA-gv3c-8hg4-9hxx/GHSA-gv3c-8hg4-9hxx.json +++ b/advisories/unreviewed/2022/05/GHSA-gv3c-8hg4-9hxx/GHSA-gv3c-8hg4-9hxx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gw8v-4jm5-5fgc/GHSA-gw8v-4jm5-5fgc.json b/advisories/unreviewed/2022/05/GHSA-gw8v-4jm5-5fgc/GHSA-gw8v-4jm5-5fgc.json index 95ef0799a7a..66476cba760 100644 --- a/advisories/unreviewed/2022/05/GHSA-gw8v-4jm5-5fgc/GHSA-gw8v-4jm5-5fgc.json +++ b/advisories/unreviewed/2022/05/GHSA-gw8v-4jm5-5fgc/GHSA-gw8v-4jm5-5fgc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gx3m-2wcq-p82x/GHSA-gx3m-2wcq-p82x.json b/advisories/unreviewed/2022/05/GHSA-gx3m-2wcq-p82x/GHSA-gx3m-2wcq-p82x.json index a21fb6e5ee1..15571e2ffca 100644 --- a/advisories/unreviewed/2022/05/GHSA-gx3m-2wcq-p82x/GHSA-gx3m-2wcq-p82x.json +++ b/advisories/unreviewed/2022/05/GHSA-gx3m-2wcq-p82x/GHSA-gx3m-2wcq-p82x.json @@ -7,12 +7,8 @@ "CVE-2021-20659" ], "details": "SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecified vectors. If the file is PHP script, an attacker may execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gxcj-pjgw-2hvw/GHSA-gxcj-pjgw-2hvw.json b/advisories/unreviewed/2022/05/GHSA-gxcj-pjgw-2hvw/GHSA-gxcj-pjgw-2hvw.json index 60c221df391..da6aab17df5 100644 --- a/advisories/unreviewed/2022/05/GHSA-gxcj-pjgw-2hvw/GHSA-gxcj-pjgw-2hvw.json +++ b/advisories/unreviewed/2022/05/GHSA-gxcj-pjgw-2hvw/GHSA-gxcj-pjgw-2hvw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h24g-qx52-8pp4/GHSA-h24g-qx52-8pp4.json b/advisories/unreviewed/2022/05/GHSA-h24g-qx52-8pp4/GHSA-h24g-qx52-8pp4.json index e44e8a5ed07..179ee5f08d2 100644 --- a/advisories/unreviewed/2022/05/GHSA-h24g-qx52-8pp4/GHSA-h24g-qx52-8pp4.json +++ b/advisories/unreviewed/2022/05/GHSA-h24g-qx52-8pp4/GHSA-h24g-qx52-8pp4.json @@ -7,12 +7,8 @@ "CVE-2020-21224" ], "details": "A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0. A remote attacker can send a malicious login packet to the control server", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h2wp-qp38-rjj4/GHSA-h2wp-qp38-rjj4.json b/advisories/unreviewed/2022/05/GHSA-h2wp-qp38-rjj4/GHSA-h2wp-qp38-rjj4.json index a3e6e1f4ffd..34f968d2488 100644 --- a/advisories/unreviewed/2022/05/GHSA-h2wp-qp38-rjj4/GHSA-h2wp-qp38-rjj4.json +++ b/advisories/unreviewed/2022/05/GHSA-h2wp-qp38-rjj4/GHSA-h2wp-qp38-rjj4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h2wx-3fxp-pjpq/GHSA-h2wx-3fxp-pjpq.json b/advisories/unreviewed/2022/05/GHSA-h2wx-3fxp-pjpq/GHSA-h2wx-3fxp-pjpq.json index a475a21fe51..cd2ed92b325 100644 --- a/advisories/unreviewed/2022/05/GHSA-h2wx-3fxp-pjpq/GHSA-h2wx-3fxp-pjpq.json +++ b/advisories/unreviewed/2022/05/GHSA-h2wx-3fxp-pjpq/GHSA-h2wx-3fxp-pjpq.json @@ -7,12 +7,8 @@ "CVE-2021-22651" ], "details": "When loading a specially crafted file, Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are, while processing the extraction of temporary files, suffering from a directory traversal vulnerability, which allows an attacker to store arbitrary scripts into automatic startup folders.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h3pg-gp68-xvvq/GHSA-h3pg-gp68-xvvq.json b/advisories/unreviewed/2022/05/GHSA-h3pg-gp68-xvvq/GHSA-h3pg-gp68-xvvq.json index 63ef3306673..313a1ec783d 100644 --- a/advisories/unreviewed/2022/05/GHSA-h3pg-gp68-xvvq/GHSA-h3pg-gp68-xvvq.json +++ b/advisories/unreviewed/2022/05/GHSA-h3pg-gp68-xvvq/GHSA-h3pg-gp68-xvvq.json @@ -7,12 +7,8 @@ "CVE-2020-23518" ], "details": "Cross Site Scripting (XSS) vulnerability in UltimateKode Neo Billing - Accounting, Invoicing And CRM Software up to version 3.5 which allows remote attackers to inject arbitrary web script or HTML.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h4x6-hpff-rvc4/GHSA-h4x6-hpff-rvc4.json b/advisories/unreviewed/2022/05/GHSA-h4x6-hpff-rvc4/GHSA-h4x6-hpff-rvc4.json index e5f07070d42..12428c28e49 100644 --- a/advisories/unreviewed/2022/05/GHSA-h4x6-hpff-rvc4/GHSA-h4x6-hpff-rvc4.json +++ b/advisories/unreviewed/2022/05/GHSA-h4x6-hpff-rvc4/GHSA-h4x6-hpff-rvc4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h653-jr5m-q8p4/GHSA-h653-jr5m-q8p4.json b/advisories/unreviewed/2022/05/GHSA-h653-jr5m-q8p4/GHSA-h653-jr5m-q8p4.json index feccd3cc10f..c4e67bf3826 100644 --- a/advisories/unreviewed/2022/05/GHSA-h653-jr5m-q8p4/GHSA-h653-jr5m-q8p4.json +++ b/advisories/unreviewed/2022/05/GHSA-h653-jr5m-q8p4/GHSA-h653-jr5m-q8p4.json @@ -7,12 +7,8 @@ "CVE-2021-21152" ], "details": "Heap buffer overflow in Media in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h84w-4wfq-6h9c/GHSA-h84w-4wfq-6h9c.json b/advisories/unreviewed/2022/05/GHSA-h84w-4wfq-6h9c/GHSA-h84w-4wfq-6h9c.json index 73b7eb3d4f2..38eaf327f4c 100644 --- a/advisories/unreviewed/2022/05/GHSA-h84w-4wfq-6h9c/GHSA-h84w-4wfq-6h9c.json +++ b/advisories/unreviewed/2022/05/GHSA-h84w-4wfq-6h9c/GHSA-h84w-4wfq-6h9c.json @@ -7,12 +7,8 @@ "CVE-2021-26724" ], "details": "OS Command Injection vulnerability when changing date settings or hostname using web GUI of Nozomi Networks Guardian and CMC allows authenticated administrators to perform remote code execution. This issue affects: Nozomi Networks Guardian 20.0.7.3 version 20.0.7.3 and prior versions. Nozomi Networks CMC 20.0.7.3 version 20.0.7.3 and prior versions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h87g-cj47-crv7/GHSA-h87g-cj47-crv7.json b/advisories/unreviewed/2022/05/GHSA-h87g-cj47-crv7/GHSA-h87g-cj47-crv7.json index 876e38b443a..7c524c573c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-h87g-cj47-crv7/GHSA-h87g-cj47-crv7.json +++ b/advisories/unreviewed/2022/05/GHSA-h87g-cj47-crv7/GHSA-h87g-cj47-crv7.json @@ -7,12 +7,8 @@ "CVE-2021-3355" ], "details": "A stored-self XSS exists in LightCMS v1.3.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/SensitiveWords.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h8m9-2c4v-j2jx/GHSA-h8m9-2c4v-j2jx.json b/advisories/unreviewed/2022/05/GHSA-h8m9-2c4v-j2jx/GHSA-h8m9-2c4v-j2jx.json index 62603cca9ba..639097cfc8a 100644 --- a/advisories/unreviewed/2022/05/GHSA-h8m9-2c4v-j2jx/GHSA-h8m9-2c4v-j2jx.json +++ b/advisories/unreviewed/2022/05/GHSA-h8m9-2c4v-j2jx/GHSA-h8m9-2c4v-j2jx.json @@ -7,12 +7,8 @@ "CVE-2021-23958" ], "details": "The browser could have been confused into transferring a screen sharing state into another tab, which would leak unintended information. This vulnerability affects Firefox < 85.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hg96-hf3m-f7hp/GHSA-hg96-hf3m-f7hp.json b/advisories/unreviewed/2022/05/GHSA-hg96-hf3m-f7hp/GHSA-hg96-hf3m-f7hp.json index ae2cff5c2ea..909b2e66a3a 100644 --- a/advisories/unreviewed/2022/05/GHSA-hg96-hf3m-f7hp/GHSA-hg96-hf3m-f7hp.json +++ b/advisories/unreviewed/2022/05/GHSA-hg96-hf3m-f7hp/GHSA-hg96-hf3m-f7hp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hhhg-hg3w-g9j5/GHSA-hhhg-hg3w-g9j5.json b/advisories/unreviewed/2022/05/GHSA-hhhg-hg3w-g9j5/GHSA-hhhg-hg3w-g9j5.json index 983e24950c6..9ae67554663 100644 --- a/advisories/unreviewed/2022/05/GHSA-hhhg-hg3w-g9j5/GHSA-hhhg-hg3w-g9j5.json +++ b/advisories/unreviewed/2022/05/GHSA-hhhg-hg3w-g9j5/GHSA-hhhg-hg3w-g9j5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hhhg-rjff-g8v8/GHSA-hhhg-rjff-g8v8.json b/advisories/unreviewed/2022/05/GHSA-hhhg-rjff-g8v8/GHSA-hhhg-rjff-g8v8.json index ebcf5188175..09c6b8be660 100644 --- a/advisories/unreviewed/2022/05/GHSA-hhhg-rjff-g8v8/GHSA-hhhg-rjff-g8v8.json +++ b/advisories/unreviewed/2022/05/GHSA-hhhg-rjff-g8v8/GHSA-hhhg-rjff-g8v8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hmmc-9q6p-vgg6/GHSA-hmmc-9q6p-vgg6.json b/advisories/unreviewed/2022/05/GHSA-hmmc-9q6p-vgg6/GHSA-hmmc-9q6p-vgg6.json index 7381dc5efbc..80d7727dbf7 100644 --- a/advisories/unreviewed/2022/05/GHSA-hmmc-9q6p-vgg6/GHSA-hmmc-9q6p-vgg6.json +++ b/advisories/unreviewed/2022/05/GHSA-hmmc-9q6p-vgg6/GHSA-hmmc-9q6p-vgg6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hp88-gg5p-j7jj/GHSA-hp88-gg5p-j7jj.json b/advisories/unreviewed/2022/05/GHSA-hp88-gg5p-j7jj/GHSA-hp88-gg5p-j7jj.json index 05f45467f2d..1f02f269da9 100644 --- a/advisories/unreviewed/2022/05/GHSA-hp88-gg5p-j7jj/GHSA-hp88-gg5p-j7jj.json +++ b/advisories/unreviewed/2022/05/GHSA-hp88-gg5p-j7jj/GHSA-hp88-gg5p-j7jj.json @@ -7,12 +7,8 @@ "CVE-2021-22294" ], "details": "A component API of the HarmonyOS 2.0 has a permission bypass vulnerability. Local attackers may exploit this vulnerability to issue commands repeatedly, exhausting system service resources.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hp9x-3xwh-q8cv/GHSA-hp9x-3xwh-q8cv.json b/advisories/unreviewed/2022/05/GHSA-hp9x-3xwh-q8cv/GHSA-hp9x-3xwh-q8cv.json index e92fea573d9..b97c380df8d 100644 --- a/advisories/unreviewed/2022/05/GHSA-hp9x-3xwh-q8cv/GHSA-hp9x-3xwh-q8cv.json +++ b/advisories/unreviewed/2022/05/GHSA-hp9x-3xwh-q8cv/GHSA-hp9x-3xwh-q8cv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hpqm-fqwv-8ffg/GHSA-hpqm-fqwv-8ffg.json b/advisories/unreviewed/2022/05/GHSA-hpqm-fqwv-8ffg/GHSA-hpqm-fqwv-8ffg.json index d03a19ece9b..b899bfd25b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-hpqm-fqwv-8ffg/GHSA-hpqm-fqwv-8ffg.json +++ b/advisories/unreviewed/2022/05/GHSA-hpqm-fqwv-8ffg/GHSA-hpqm-fqwv-8ffg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hr8c-cph5-f43g/GHSA-hr8c-cph5-f43g.json b/advisories/unreviewed/2022/05/GHSA-hr8c-cph5-f43g/GHSA-hr8c-cph5-f43g.json index 61607b3c25d..95ff7148c42 100644 --- a/advisories/unreviewed/2022/05/GHSA-hr8c-cph5-f43g/GHSA-hr8c-cph5-f43g.json +++ b/advisories/unreviewed/2022/05/GHSA-hr8c-cph5-f43g/GHSA-hr8c-cph5-f43g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hrgf-mc75-gm4x/GHSA-hrgf-mc75-gm4x.json b/advisories/unreviewed/2022/05/GHSA-hrgf-mc75-gm4x/GHSA-hrgf-mc75-gm4x.json index 6456092c2cb..67bcb97825e 100644 --- a/advisories/unreviewed/2022/05/GHSA-hrgf-mc75-gm4x/GHSA-hrgf-mc75-gm4x.json +++ b/advisories/unreviewed/2022/05/GHSA-hrgf-mc75-gm4x/GHSA-hrgf-mc75-gm4x.json @@ -7,12 +7,8 @@ "CVE-2020-35852" ], "details": "Chatbox is affected by cross-site scripting (XSS). An attacker has to upload any XSS payload with SVG, XML file in Chatbox. There is no restriction on file upload in Chatbox which leads to stored XSS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hrqw-h4fg-w3j3/GHSA-hrqw-h4fg-w3j3.json b/advisories/unreviewed/2022/05/GHSA-hrqw-h4fg-w3j3/GHSA-hrqw-h4fg-w3j3.json index 4fbfd2a833d..38a8d3af76f 100644 --- a/advisories/unreviewed/2022/05/GHSA-hrqw-h4fg-w3j3/GHSA-hrqw-h4fg-w3j3.json +++ b/advisories/unreviewed/2022/05/GHSA-hrqw-h4fg-w3j3/GHSA-hrqw-h4fg-w3j3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hrvc-r9q5-cgjx/GHSA-hrvc-r9q5-cgjx.json b/advisories/unreviewed/2022/05/GHSA-hrvc-r9q5-cgjx/GHSA-hrvc-r9q5-cgjx.json index b464cb6649a..762451dc941 100644 --- a/advisories/unreviewed/2022/05/GHSA-hrvc-r9q5-cgjx/GHSA-hrvc-r9q5-cgjx.json +++ b/advisories/unreviewed/2022/05/GHSA-hrvc-r9q5-cgjx/GHSA-hrvc-r9q5-cgjx.json @@ -7,12 +7,8 @@ "CVE-2019-25021" ], "details": "An issue was discovered in Scytl sVote 2.1. Due to the implementation of the database manager, an attacker can access the OrientDB by providing admin as the admin password. A different password cannot be set because of the implementation in code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j22p-r4r6-vmw5/GHSA-j22p-r4r6-vmw5.json b/advisories/unreviewed/2022/05/GHSA-j22p-r4r6-vmw5/GHSA-j22p-r4r6-vmw5.json index e20126bc7e4..34d2b8f094f 100644 --- a/advisories/unreviewed/2022/05/GHSA-j22p-r4r6-vmw5/GHSA-j22p-r4r6-vmw5.json +++ b/advisories/unreviewed/2022/05/GHSA-j22p-r4r6-vmw5/GHSA-j22p-r4r6-vmw5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j28w-7p4q-hrq8/GHSA-j28w-7p4q-hrq8.json b/advisories/unreviewed/2022/05/GHSA-j28w-7p4q-hrq8/GHSA-j28w-7p4q-hrq8.json index 80c1f20df5e..4a7bc8cd83e 100644 --- a/advisories/unreviewed/2022/05/GHSA-j28w-7p4q-hrq8/GHSA-j28w-7p4q-hrq8.json +++ b/advisories/unreviewed/2022/05/GHSA-j28w-7p4q-hrq8/GHSA-j28w-7p4q-hrq8.json @@ -7,12 +7,8 @@ "CVE-2021-22647" ], "details": "Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to multiple out-of-bounds write issues while processing project files, which may allow an attacker to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j3f6-5wcm-3v96/GHSA-j3f6-5wcm-3v96.json b/advisories/unreviewed/2022/05/GHSA-j3f6-5wcm-3v96/GHSA-j3f6-5wcm-3v96.json index 8f08b7ae9c9..9808611e0d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-j3f6-5wcm-3v96/GHSA-j3f6-5wcm-3v96.json +++ b/advisories/unreviewed/2022/05/GHSA-j3f6-5wcm-3v96/GHSA-j3f6-5wcm-3v96.json @@ -7,12 +7,8 @@ "CVE-2020-9479" ], "details": "When loading a UDF, a specially crafted zip file could allow files to be placed outside of the UDF deployment directory. This issue affected Apache AsterixDB unreleased builds between commits 580b81aa5e8888b8e1b0620521a1c9680e54df73 and 28c0ee84f1387ab5d0659e9e822f4e3923ddc22d. Note: this CVE may be REJECTed as the issue did not affect any released versions of Apache AsterixDB", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j4c8-2w3r-v274/GHSA-j4c8-2w3r-v274.json b/advisories/unreviewed/2022/05/GHSA-j4c8-2w3r-v274/GHSA-j4c8-2w3r-v274.json index a780610abfe..451dba3469d 100644 --- a/advisories/unreviewed/2022/05/GHSA-j4c8-2w3r-v274/GHSA-j4c8-2w3r-v274.json +++ b/advisories/unreviewed/2022/05/GHSA-j4c8-2w3r-v274/GHSA-j4c8-2w3r-v274.json @@ -7,12 +7,8 @@ "CVE-2020-4725" ], "details": "IBM Monitoring (IBM Cloud APM 8.1.4 ) could allow an authenticated user to modify HTML content by sending a specially crafted HTTP request to the APM UI, which could mislead another user. IBM X-Force ID: 187974.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j6c3-f6p8-qv65/GHSA-j6c3-f6p8-qv65.json b/advisories/unreviewed/2022/05/GHSA-j6c3-f6p8-qv65/GHSA-j6c3-f6p8-qv65.json index 4f13e2418a2..46482d59828 100644 --- a/advisories/unreviewed/2022/05/GHSA-j6c3-f6p8-qv65/GHSA-j6c3-f6p8-qv65.json +++ b/advisories/unreviewed/2022/05/GHSA-j6c3-f6p8-qv65/GHSA-j6c3-f6p8-qv65.json @@ -7,12 +7,8 @@ "CVE-2020-4726" ], "details": "The IBM Application Performance Monitoring UI (IBM Cloud APM 8.1.4) allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 187975.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j7h4-p7f6-r3rm/GHSA-j7h4-p7f6-r3rm.json b/advisories/unreviewed/2022/05/GHSA-j7h4-p7f6-r3rm/GHSA-j7h4-p7f6-r3rm.json index 70b31639e44..cba7080076b 100644 --- a/advisories/unreviewed/2022/05/GHSA-j7h4-p7f6-r3rm/GHSA-j7h4-p7f6-r3rm.json +++ b/advisories/unreviewed/2022/05/GHSA-j7h4-p7f6-r3rm/GHSA-j7h4-p7f6-r3rm.json @@ -7,12 +7,8 @@ "CVE-2019-18943" ], "details": "Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to XML External Entity Processing (XXE) on certain operations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j86v-4vf3-rfmv/GHSA-j86v-4vf3-rfmv.json b/advisories/unreviewed/2022/05/GHSA-j86v-4vf3-rfmv/GHSA-j86v-4vf3-rfmv.json index 94dcc6ed1a8..a1b12c65227 100644 --- a/advisories/unreviewed/2022/05/GHSA-j86v-4vf3-rfmv/GHSA-j86v-4vf3-rfmv.json +++ b/advisories/unreviewed/2022/05/GHSA-j86v-4vf3-rfmv/GHSA-j86v-4vf3-rfmv.json @@ -7,12 +7,8 @@ "CVE-2020-29075" ], "details": "Acrobat Reader DC versions 2020.013.20066 (and earlier), 2020.001.30010 (and earlier) and 2017.011.30180 (and earlier) are affected by an information exposure vulnerability, that could enable an attacker to get a DNS interaction and track if the user has opened or closed a PDF file when loaded from the filesystem without a prompt. User interaction is required to exploit this vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jc34-5g4w-8xm5/GHSA-jc34-5g4w-8xm5.json b/advisories/unreviewed/2022/05/GHSA-jc34-5g4w-8xm5/GHSA-jc34-5g4w-8xm5.json index a95a39fb0b7..0d21d8b026b 100644 --- a/advisories/unreviewed/2022/05/GHSA-jc34-5g4w-8xm5/GHSA-jc34-5g4w-8xm5.json +++ b/advisories/unreviewed/2022/05/GHSA-jc34-5g4w-8xm5/GHSA-jc34-5g4w-8xm5.json @@ -7,12 +7,8 @@ "CVE-2020-35328" ], "details": "Courier Management System 1.0 - 'First Name' Stored XSS", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jf2q-69fh-6qqg/GHSA-jf2q-69fh-6qqg.json b/advisories/unreviewed/2022/05/GHSA-jf2q-69fh-6qqg/GHSA-jf2q-69fh-6qqg.json index c9b153baa4a..093a630aae2 100644 --- a/advisories/unreviewed/2022/05/GHSA-jf2q-69fh-6qqg/GHSA-jf2q-69fh-6qqg.json +++ b/advisories/unreviewed/2022/05/GHSA-jf2q-69fh-6qqg/GHSA-jf2q-69fh-6qqg.json @@ -7,12 +7,8 @@ "CVE-2021-23955" ], "details": "The browser could have been confused into transferring a pointer lock state into another tab, which could have lead to clickjacking attacks. This vulnerability affects Firefox < 85.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jf8x-8g86-xx78/GHSA-jf8x-8g86-xx78.json b/advisories/unreviewed/2022/05/GHSA-jf8x-8g86-xx78/GHSA-jf8x-8g86-xx78.json index 6bd7480369b..07b1ad76e58 100644 --- a/advisories/unreviewed/2022/05/GHSA-jf8x-8g86-xx78/GHSA-jf8x-8g86-xx78.json +++ b/advisories/unreviewed/2022/05/GHSA-jf8x-8g86-xx78/GHSA-jf8x-8g86-xx78.json @@ -7,12 +7,8 @@ "CVE-2020-35594" ], "details": "Zoho ManageEngine ADManager Plus before 7066 allows XSS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jfpf-rm39-8vq9/GHSA-jfpf-rm39-8vq9.json b/advisories/unreviewed/2022/05/GHSA-jfpf-rm39-8vq9/GHSA-jfpf-rm39-8vq9.json index 7febdef67d2..6b4880a3132 100644 --- a/advisories/unreviewed/2022/05/GHSA-jfpf-rm39-8vq9/GHSA-jfpf-rm39-8vq9.json +++ b/advisories/unreviewed/2022/05/GHSA-jfpf-rm39-8vq9/GHSA-jfpf-rm39-8vq9.json @@ -7,12 +7,8 @@ "CVE-2020-11281" ], "details": "Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jg96-3p93-wmvr/GHSA-jg96-3p93-wmvr.json b/advisories/unreviewed/2022/05/GHSA-jg96-3p93-wmvr/GHSA-jg96-3p93-wmvr.json index 3ce7e48cb54..66b352198d9 100644 --- a/advisories/unreviewed/2022/05/GHSA-jg96-3p93-wmvr/GHSA-jg96-3p93-wmvr.json +++ b/advisories/unreviewed/2022/05/GHSA-jg96-3p93-wmvr/GHSA-jg96-3p93-wmvr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jj7x-vc24-mq4r/GHSA-jj7x-vc24-mq4r.json b/advisories/unreviewed/2022/05/GHSA-jj7x-vc24-mq4r/GHSA-jj7x-vc24-mq4r.json index 4cb4d1296b4..c3b51ab8ae3 100644 --- a/advisories/unreviewed/2022/05/GHSA-jj7x-vc24-mq4r/GHSA-jj7x-vc24-mq4r.json +++ b/advisories/unreviewed/2022/05/GHSA-jj7x-vc24-mq4r/GHSA-jj7x-vc24-mq4r.json @@ -7,12 +7,8 @@ "CVE-2021-3273" ], "details": "Nagios XI below 5.7 is affected by code injection in the /nagiosxi/admin/graphtemplates.php component. To exploit this vulnerability, someone must have an admin user account in Nagios XI's web system.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jmqq-vjpq-9xcm/GHSA-jmqq-vjpq-9xcm.json b/advisories/unreviewed/2022/05/GHSA-jmqq-vjpq-9xcm/GHSA-jmqq-vjpq-9xcm.json index f4cdc1846e6..f7ca46e23b1 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmqq-vjpq-9xcm/GHSA-jmqq-vjpq-9xcm.json +++ b/advisories/unreviewed/2022/05/GHSA-jmqq-vjpq-9xcm/GHSA-jmqq-vjpq-9xcm.json @@ -7,12 +7,8 @@ "CVE-2021-20442" ], "details": "IBM Security Verify Bridge contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 196618.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jmxf-5qxj-85w9/GHSA-jmxf-5qxj-85w9.json b/advisories/unreviewed/2022/05/GHSA-jmxf-5qxj-85w9/GHSA-jmxf-5qxj-85w9.json index a60a64b209a..800d1a39076 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmxf-5qxj-85w9/GHSA-jmxf-5qxj-85w9.json +++ b/advisories/unreviewed/2022/05/GHSA-jmxf-5qxj-85w9/GHSA-jmxf-5qxj-85w9.json @@ -7,12 +7,8 @@ "CVE-2021-25829" ], "details": "An improper binary stream data handling issue was found in the [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3. Using this bug, an attacker is able to produce a denial of service attack that can eventually shut down the target server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jqfv-hjr7-7h32/GHSA-jqfv-hjr7-7h32.json b/advisories/unreviewed/2022/05/GHSA-jqfv-hjr7-7h32/GHSA-jqfv-hjr7-7h32.json index 62d5b2d0b6f..f792004603d 100644 --- a/advisories/unreviewed/2022/05/GHSA-jqfv-hjr7-7h32/GHSA-jqfv-hjr7-7h32.json +++ b/advisories/unreviewed/2022/05/GHSA-jqfv-hjr7-7h32/GHSA-jqfv-hjr7-7h32.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jw3c-jgq3-cf92/GHSA-jw3c-jgq3-cf92.json b/advisories/unreviewed/2022/05/GHSA-jw3c-jgq3-cf92/GHSA-jw3c-jgq3-cf92.json index c9c0fc297e7..efe8a1714ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-jw3c-jgq3-cf92/GHSA-jw3c-jgq3-cf92.json +++ b/advisories/unreviewed/2022/05/GHSA-jw3c-jgq3-cf92/GHSA-jw3c-jgq3-cf92.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jw7g-5p4f-2mpw/GHSA-jw7g-5p4f-2mpw.json b/advisories/unreviewed/2022/05/GHSA-jw7g-5p4f-2mpw/GHSA-jw7g-5p4f-2mpw.json index eea0425bb32..865311923ea 100644 --- a/advisories/unreviewed/2022/05/GHSA-jw7g-5p4f-2mpw/GHSA-jw7g-5p4f-2mpw.json +++ b/advisories/unreviewed/2022/05/GHSA-jw7g-5p4f-2mpw/GHSA-jw7g-5p4f-2mpw.json @@ -7,12 +7,8 @@ "CVE-2021-20661" ], "details": "Directory traversal vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows authenticated attackers to delete arbitrary files and/or directories on the server via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jx3c-cqwp-ww97/GHSA-jx3c-cqwp-ww97.json b/advisories/unreviewed/2022/05/GHSA-jx3c-cqwp-ww97/GHSA-jx3c-cqwp-ww97.json index c91e4dd1483..5c08afbc94c 100644 --- a/advisories/unreviewed/2022/05/GHSA-jx3c-cqwp-ww97/GHSA-jx3c-cqwp-ww97.json +++ b/advisories/unreviewed/2022/05/GHSA-jx3c-cqwp-ww97/GHSA-jx3c-cqwp-ww97.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jx85-pcwq-c9wc/GHSA-jx85-pcwq-c9wc.json b/advisories/unreviewed/2022/05/GHSA-jx85-pcwq-c9wc/GHSA-jx85-pcwq-c9wc.json index 7b0c82a4cd4..7890b2ac0f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-jx85-pcwq-c9wc/GHSA-jx85-pcwq-c9wc.json +++ b/advisories/unreviewed/2022/05/GHSA-jx85-pcwq-c9wc/GHSA-jx85-pcwq-c9wc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m22p-g8pc-2fw4/GHSA-m22p-g8pc-2fw4.json b/advisories/unreviewed/2022/05/GHSA-m22p-g8pc-2fw4/GHSA-m22p-g8pc-2fw4.json index 4e950ad4a21..2c9c1608e3d 100644 --- a/advisories/unreviewed/2022/05/GHSA-m22p-g8pc-2fw4/GHSA-m22p-g8pc-2fw4.json +++ b/advisories/unreviewed/2022/05/GHSA-m22p-g8pc-2fw4/GHSA-m22p-g8pc-2fw4.json @@ -7,12 +7,8 @@ "CVE-2021-27368" ], "details": "The Contact page in Monica 2.19.1 allows stored XSS via the First Name field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m252-hx7q-7p3h/GHSA-m252-hx7q-7p3h.json b/advisories/unreviewed/2022/05/GHSA-m252-hx7q-7p3h/GHSA-m252-hx7q-7p3h.json index 305569de77f..32603ea117b 100644 --- a/advisories/unreviewed/2022/05/GHSA-m252-hx7q-7p3h/GHSA-m252-hx7q-7p3h.json +++ b/advisories/unreviewed/2022/05/GHSA-m252-hx7q-7p3h/GHSA-m252-hx7q-7p3h.json @@ -7,12 +7,8 @@ "CVE-2021-25831" ], "details": "A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3. An attacker must request the conversion of the crafted file from PPTT into PPTX format. Using the chain of two other bugs related to improper string handling, a remote attacker can obtain remote code execution on DocumentServer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m3qv-6q2r-jvq6/GHSA-m3qv-6q2r-jvq6.json b/advisories/unreviewed/2022/05/GHSA-m3qv-6q2r-jvq6/GHSA-m3qv-6q2r-jvq6.json index ed08d59dc5a..fdd5b2e6469 100644 --- a/advisories/unreviewed/2022/05/GHSA-m3qv-6q2r-jvq6/GHSA-m3qv-6q2r-jvq6.json +++ b/advisories/unreviewed/2022/05/GHSA-m3qv-6q2r-jvq6/GHSA-m3qv-6q2r-jvq6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m4px-vm6f-pg92/GHSA-m4px-vm6f-pg92.json b/advisories/unreviewed/2022/05/GHSA-m4px-vm6f-pg92/GHSA-m4px-vm6f-pg92.json index 71b204812a7..44f245466bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-m4px-vm6f-pg92/GHSA-m4px-vm6f-pg92.json +++ b/advisories/unreviewed/2022/05/GHSA-m4px-vm6f-pg92/GHSA-m4px-vm6f-pg92.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m4x9-6p9j-3hx6/GHSA-m4x9-6p9j-3hx6.json b/advisories/unreviewed/2022/05/GHSA-m4x9-6p9j-3hx6/GHSA-m4x9-6p9j-3hx6.json index 1542f0d3602..4bea7635270 100644 --- a/advisories/unreviewed/2022/05/GHSA-m4x9-6p9j-3hx6/GHSA-m4x9-6p9j-3hx6.json +++ b/advisories/unreviewed/2022/05/GHSA-m4x9-6p9j-3hx6/GHSA-m4x9-6p9j-3hx6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -55,9 +53,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m5h2-xg59-x76g/GHSA-m5h2-xg59-x76g.json b/advisories/unreviewed/2022/05/GHSA-m5h2-xg59-x76g/GHSA-m5h2-xg59-x76g.json index 64b4e376e49..308343f22b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-m5h2-xg59-x76g/GHSA-m5h2-xg59-x76g.json +++ b/advisories/unreviewed/2022/05/GHSA-m5h2-xg59-x76g/GHSA-m5h2-xg59-x76g.json @@ -7,12 +7,8 @@ "CVE-2020-25161" ], "details": "The WADashboard component of WebAccess/SCADA Versions 9.0 and prior may allow an attacker to control or influence a path used in an operation on the filesystem and remotely execute code as an administrator.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m5h3-jr9w-ww4r/GHSA-m5h3-jr9w-ww4r.json b/advisories/unreviewed/2022/05/GHSA-m5h3-jr9w-ww4r/GHSA-m5h3-jr9w-ww4r.json index 37786646474..df7d59112cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-m5h3-jr9w-ww4r/GHSA-m5h3-jr9w-ww4r.json +++ b/advisories/unreviewed/2022/05/GHSA-m5h3-jr9w-ww4r/GHSA-m5h3-jr9w-ww4r.json @@ -7,12 +7,8 @@ "CVE-2021-1393" ], "details": "Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information, create diagnostic files, and make limited configuration changes. For more information about these vulnerabilities, see the Details section of this advisory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m6mv-2cmv-2vpr/GHSA-m6mv-2cmv-2vpr.json b/advisories/unreviewed/2022/05/GHSA-m6mv-2cmv-2vpr/GHSA-m6mv-2cmv-2vpr.json index 110696a11e7..ec4b32f1ce7 100644 --- a/advisories/unreviewed/2022/05/GHSA-m6mv-2cmv-2vpr/GHSA-m6mv-2cmv-2vpr.json +++ b/advisories/unreviewed/2022/05/GHSA-m6mv-2cmv-2vpr/GHSA-m6mv-2cmv-2vpr.json @@ -7,12 +7,8 @@ "CVE-2021-22662" ], "details": "A use after free issue has been identified in Fatek FvDesigner Version 1.5.76 and prior in the way the application processes project files, allowing an attacker to craft a special project file that may permit arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mfqv-9gj9-6f5v/GHSA-mfqv-9gj9-6f5v.json b/advisories/unreviewed/2022/05/GHSA-mfqv-9gj9-6f5v/GHSA-mfqv-9gj9-6f5v.json index 9daa8bc001a..2a8ccd9f8c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-mfqv-9gj9-6f5v/GHSA-mfqv-9gj9-6f5v.json +++ b/advisories/unreviewed/2022/05/GHSA-mfqv-9gj9-6f5v/GHSA-mfqv-9gj9-6f5v.json @@ -7,12 +7,8 @@ "CVE-2021-25832" ], "details": "A heap buffer overflow vulnerability inside of BMP image processing was found at [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v6.0.0. Using this vulnerability, an attacker is able to gain remote code executions on DocumentServer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mgjr-p4gg-pwhx/GHSA-mgjr-p4gg-pwhx.json b/advisories/unreviewed/2022/05/GHSA-mgjr-p4gg-pwhx/GHSA-mgjr-p4gg-pwhx.json index cfee20b514b..161cbce952d 100644 --- a/advisories/unreviewed/2022/05/GHSA-mgjr-p4gg-pwhx/GHSA-mgjr-p4gg-pwhx.json +++ b/advisories/unreviewed/2022/05/GHSA-mgjr-p4gg-pwhx/GHSA-mgjr-p4gg-pwhx.json @@ -7,12 +7,8 @@ "CVE-2021-27330" ], "details": "Triconsole Datepicker Calendar <3.77 is affected by cross-site scripting (XSS) in calendar_form.php. Attackers can read authentication cookies that are still active, which can be used to perform further attacks such as reading browser history, directory listings, and file contents.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mhhx-j3qv-fpc8/GHSA-mhhx-j3qv-fpc8.json b/advisories/unreviewed/2022/05/GHSA-mhhx-j3qv-fpc8/GHSA-mhhx-j3qv-fpc8.json index 5e3980a6111..d44352dbe6b 100644 --- a/advisories/unreviewed/2022/05/GHSA-mhhx-j3qv-fpc8/GHSA-mhhx-j3qv-fpc8.json +++ b/advisories/unreviewed/2022/05/GHSA-mhhx-j3qv-fpc8/GHSA-mhhx-j3qv-fpc8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mj9g-jm8w-h9p4/GHSA-mj9g-jm8w-h9p4.json b/advisories/unreviewed/2022/05/GHSA-mj9g-jm8w-h9p4/GHSA-mj9g-jm8w-h9p4.json index e94778064c6..c3cb5eca398 100644 --- a/advisories/unreviewed/2022/05/GHSA-mj9g-jm8w-h9p4/GHSA-mj9g-jm8w-h9p4.json +++ b/advisories/unreviewed/2022/05/GHSA-mj9g-jm8w-h9p4/GHSA-mj9g-jm8w-h9p4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mjgw-69fr-p4h2/GHSA-mjgw-69fr-p4h2.json b/advisories/unreviewed/2022/05/GHSA-mjgw-69fr-p4h2/GHSA-mjgw-69fr-p4h2.json index ddb9df04424..8c3ad89356a 100644 --- a/advisories/unreviewed/2022/05/GHSA-mjgw-69fr-p4h2/GHSA-mjgw-69fr-p4h2.json +++ b/advisories/unreviewed/2022/05/GHSA-mjgw-69fr-p4h2/GHSA-mjgw-69fr-p4h2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mjqq-xhvr-c2mf/GHSA-mjqq-xhvr-c2mf.json b/advisories/unreviewed/2022/05/GHSA-mjqq-xhvr-c2mf/GHSA-mjqq-xhvr-c2mf.json index 2037de20f73..4dfdc54d3f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-mjqq-xhvr-c2mf/GHSA-mjqq-xhvr-c2mf.json +++ b/advisories/unreviewed/2022/05/GHSA-mjqq-xhvr-c2mf/GHSA-mjqq-xhvr-c2mf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mmc5-fxr8-4xpv/GHSA-mmc5-fxr8-4xpv.json b/advisories/unreviewed/2022/05/GHSA-mmc5-fxr8-4xpv/GHSA-mmc5-fxr8-4xpv.json index f78f5a9ea9b..d1bbe9a55df 100644 --- a/advisories/unreviewed/2022/05/GHSA-mmc5-fxr8-4xpv/GHSA-mmc5-fxr8-4xpv.json +++ b/advisories/unreviewed/2022/05/GHSA-mmc5-fxr8-4xpv/GHSA-mmc5-fxr8-4xpv.json @@ -7,12 +7,8 @@ "CVE-2020-23534" ], "details": "A server-side request forgery (SSRF) vulnerability in Upgrade.php of gopeak masterlab 2.1.5, via the 'source' parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mp33-8vpj-672c/GHSA-mp33-8vpj-672c.json b/advisories/unreviewed/2022/05/GHSA-mp33-8vpj-672c/GHSA-mp33-8vpj-672c.json index 71b51534da6..7147f6bcb05 100644 --- a/advisories/unreviewed/2022/05/GHSA-mp33-8vpj-672c/GHSA-mp33-8vpj-672c.json +++ b/advisories/unreviewed/2022/05/GHSA-mp33-8vpj-672c/GHSA-mp33-8vpj-672c.json @@ -7,12 +7,8 @@ "CVE-2021-27225" ], "details": "In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users (who have coding permissions) to read and overwrite notebooks in projects that they are not authorized to access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mpvq-g86j-p48m/GHSA-mpvq-g86j-p48m.json b/advisories/unreviewed/2022/05/GHSA-mpvq-g86j-p48m/GHSA-mpvq-g86j-p48m.json index 7be9a1080a7..b49dcdd8820 100644 --- a/advisories/unreviewed/2022/05/GHSA-mpvq-g86j-p48m/GHSA-mpvq-g86j-p48m.json +++ b/advisories/unreviewed/2022/05/GHSA-mpvq-g86j-p48m/GHSA-mpvq-g86j-p48m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mr33-rjv2-q977/GHSA-mr33-rjv2-q977.json b/advisories/unreviewed/2022/05/GHSA-mr33-rjv2-q977/GHSA-mr33-rjv2-q977.json index 383a8ec856d..cba536dae5f 100644 --- a/advisories/unreviewed/2022/05/GHSA-mr33-rjv2-q977/GHSA-mr33-rjv2-q977.json +++ b/advisories/unreviewed/2022/05/GHSA-mr33-rjv2-q977/GHSA-mr33-rjv2-q977.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mw9h-x2gx-jjfr/GHSA-mw9h-x2gx-jjfr.json b/advisories/unreviewed/2022/05/GHSA-mw9h-x2gx-jjfr/GHSA-mw9h-x2gx-jjfr.json index 004079b369f..ed666c9a72e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mw9h-x2gx-jjfr/GHSA-mw9h-x2gx-jjfr.json +++ b/advisories/unreviewed/2022/05/GHSA-mw9h-x2gx-jjfr/GHSA-mw9h-x2gx-jjfr.json @@ -7,12 +7,8 @@ "CVE-2020-11278" ], "details": "Possible denial of service while handling host WMI command due to improper validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mwrv-7784-j7w2/GHSA-mwrv-7784-j7w2.json b/advisories/unreviewed/2022/05/GHSA-mwrv-7784-j7w2/GHSA-mwrv-7784-j7w2.json index 73c05e748ec..56fccaef57b 100644 --- a/advisories/unreviewed/2022/05/GHSA-mwrv-7784-j7w2/GHSA-mwrv-7784-j7w2.json +++ b/advisories/unreviewed/2022/05/GHSA-mwrv-7784-j7w2/GHSA-mwrv-7784-j7w2.json @@ -7,12 +7,8 @@ "CVE-2020-11282" ], "details": "Improper access control when using mmap with the kgsl driver with a special offset value that can be provided to map the memstore of the GPU to user space in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mx42-9hvj-grhj/GHSA-mx42-9hvj-grhj.json b/advisories/unreviewed/2022/05/GHSA-mx42-9hvj-grhj/GHSA-mx42-9hvj-grhj.json index 54b6a206bef..8f725513629 100644 --- a/advisories/unreviewed/2022/05/GHSA-mx42-9hvj-grhj/GHSA-mx42-9hvj-grhj.json +++ b/advisories/unreviewed/2022/05/GHSA-mx42-9hvj-grhj/GHSA-mx42-9hvj-grhj.json @@ -7,12 +7,8 @@ "CVE-2019-18628" ], "details": "Xerox AltaLink B8045/B8055/B8065/B8075/B8090 and C8030/C8035/C8045/C8055/C8070 multifunction printers with software releases before 101.00x.099.28200 allow a user with administrative privileges to turn off data encryption on the device, thus leaving it open to potential cryptographic information disclosure.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p2wc-8cjx-9584/GHSA-p2wc-8cjx-9584.json b/advisories/unreviewed/2022/05/GHSA-p2wc-8cjx-9584/GHSA-p2wc-8cjx-9584.json index 8627f863218..a903929047a 100644 --- a/advisories/unreviewed/2022/05/GHSA-p2wc-8cjx-9584/GHSA-p2wc-8cjx-9584.json +++ b/advisories/unreviewed/2022/05/GHSA-p2wc-8cjx-9584/GHSA-p2wc-8cjx-9584.json @@ -7,12 +7,8 @@ "CVE-2020-11270" ], "details": "Possible denial of service due to RTT responder consistently rejects all FTMR by transmitting FTM1 with failure status in the FTM parameter IE in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p2wq-wjg9-46r4/GHSA-p2wq-wjg9-46r4.json b/advisories/unreviewed/2022/05/GHSA-p2wq-wjg9-46r4/GHSA-p2wq-wjg9-46r4.json index 3379b0a0117..a997545c83f 100644 --- a/advisories/unreviewed/2022/05/GHSA-p2wq-wjg9-46r4/GHSA-p2wq-wjg9-46r4.json +++ b/advisories/unreviewed/2022/05/GHSA-p2wq-wjg9-46r4/GHSA-p2wq-wjg9-46r4.json @@ -7,12 +7,8 @@ "CVE-2021-25334" ], "details": "Improper input check in wallpaper service in Samsung mobile devices prior to SMR Feb-2021 Release 1 allows untrusted application to cause permanent denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p36p-r3w8-8q4p/GHSA-p36p-r3w8-8q4p.json b/advisories/unreviewed/2022/05/GHSA-p36p-r3w8-8q4p/GHSA-p36p-r3w8-8q4p.json index db92772e5c2..f009d9793a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-p36p-r3w8-8q4p/GHSA-p36p-r3w8-8q4p.json +++ b/advisories/unreviewed/2022/05/GHSA-p36p-r3w8-8q4p/GHSA-p36p-r3w8-8q4p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p65g-q79m-939x/GHSA-p65g-q79m-939x.json b/advisories/unreviewed/2022/05/GHSA-p65g-q79m-939x/GHSA-p65g-q79m-939x.json index 7f27d9fe05a..7cc66a1165c 100644 --- a/advisories/unreviewed/2022/05/GHSA-p65g-q79m-939x/GHSA-p65g-q79m-939x.json +++ b/advisories/unreviewed/2022/05/GHSA-p65g-q79m-939x/GHSA-p65g-q79m-939x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p8hp-fv7f-7946/GHSA-p8hp-fv7f-7946.json b/advisories/unreviewed/2022/05/GHSA-p8hp-fv7f-7946/GHSA-p8hp-fv7f-7946.json index 1b9a9c886e0..1936c26b366 100644 --- a/advisories/unreviewed/2022/05/GHSA-p8hp-fv7f-7946/GHSA-p8hp-fv7f-7946.json +++ b/advisories/unreviewed/2022/05/GHSA-p8hp-fv7f-7946/GHSA-p8hp-fv7f-7946.json @@ -7,12 +7,8 @@ "CVE-2021-22296" ], "details": "A component of the HarmonyOS 2.0 has a DoS vulnerability. Local attackers may exploit this vulnerability to mount a file system to the target device, causing DoS of the file system.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p8mf-qgvp-6754/GHSA-p8mf-qgvp-6754.json b/advisories/unreviewed/2022/05/GHSA-p8mf-qgvp-6754/GHSA-p8mf-qgvp-6754.json index 5cc5b3a9c0c..cc523a9b1ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-p8mf-qgvp-6754/GHSA-p8mf-qgvp-6754.json +++ b/advisories/unreviewed/2022/05/GHSA-p8mf-qgvp-6754/GHSA-p8mf-qgvp-6754.json @@ -7,12 +7,8 @@ "CVE-2020-11271" ], "details": "Possible out of bounds while accessing global control elements due to race condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p938-6r45-wv6w/GHSA-p938-6r45-wv6w.json b/advisories/unreviewed/2022/05/GHSA-p938-6r45-wv6w/GHSA-p938-6r45-wv6w.json index d0b1897588c..2d90106982b 100644 --- a/advisories/unreviewed/2022/05/GHSA-p938-6r45-wv6w/GHSA-p938-6r45-wv6w.json +++ b/advisories/unreviewed/2022/05/GHSA-p938-6r45-wv6w/GHSA-p938-6r45-wv6w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pcj5-9g7c-gq3c/GHSA-pcj5-9g7c-gq3c.json b/advisories/unreviewed/2022/05/GHSA-pcj5-9g7c-gq3c/GHSA-pcj5-9g7c-gq3c.json index 39c2d071ce4..2024edc3c3e 100644 --- a/advisories/unreviewed/2022/05/GHSA-pcj5-9g7c-gq3c/GHSA-pcj5-9g7c-gq3c.json +++ b/advisories/unreviewed/2022/05/GHSA-pcj5-9g7c-gq3c/GHSA-pcj5-9g7c-gq3c.json @@ -7,12 +7,8 @@ "CVE-2020-11276" ], "details": "Possible buffer over read while processing P2P IE and NOA attribute of beacon and probe response frames due to improper validation of P2P IE and NOA attribute lengths in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pcvx-6475-h84c/GHSA-pcvx-6475-h84c.json b/advisories/unreviewed/2022/05/GHSA-pcvx-6475-h84c/GHSA-pcvx-6475-h84c.json index 989d2aa1de2..2449c12b74f 100644 --- a/advisories/unreviewed/2022/05/GHSA-pcvx-6475-h84c/GHSA-pcvx-6475-h84c.json +++ b/advisories/unreviewed/2022/05/GHSA-pcvx-6475-h84c/GHSA-pcvx-6475-h84c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pf2q-6q6p-25p9/GHSA-pf2q-6q6p-25p9.json b/advisories/unreviewed/2022/05/GHSA-pf2q-6q6p-25p9/GHSA-pf2q-6q6p-25p9.json index af27b56dc09..c9c2e44f298 100644 --- a/advisories/unreviewed/2022/05/GHSA-pf2q-6q6p-25p9/GHSA-pf2q-6q6p-25p9.json +++ b/advisories/unreviewed/2022/05/GHSA-pf2q-6q6p-25p9/GHSA-pf2q-6q6p-25p9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pf85-cpf7-rq34/GHSA-pf85-cpf7-rq34.json b/advisories/unreviewed/2022/05/GHSA-pf85-cpf7-rq34/GHSA-pf85-cpf7-rq34.json index 5116ed58323..68a694ca936 100644 --- a/advisories/unreviewed/2022/05/GHSA-pf85-cpf7-rq34/GHSA-pf85-cpf7-rq34.json +++ b/advisories/unreviewed/2022/05/GHSA-pf85-cpf7-rq34/GHSA-pf85-cpf7-rq34.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-phv2-f2vc-9gf8/GHSA-phv2-f2vc-9gf8.json b/advisories/unreviewed/2022/05/GHSA-phv2-f2vc-9gf8/GHSA-phv2-f2vc-9gf8.json index 3278e546a39..483cb1d50fa 100644 --- a/advisories/unreviewed/2022/05/GHSA-phv2-f2vc-9gf8/GHSA-phv2-f2vc-9gf8.json +++ b/advisories/unreviewed/2022/05/GHSA-phv2-f2vc-9gf8/GHSA-phv2-f2vc-9gf8.json @@ -7,12 +7,8 @@ "CVE-2021-25332" ], "details": "Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to contacts information over the lockscreen in specific condition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pmg3-fq5j-v84g/GHSA-pmg3-fq5j-v84g.json b/advisories/unreviewed/2022/05/GHSA-pmg3-fq5j-v84g/GHSA-pmg3-fq5j-v84g.json index 56fc9b7fc8c..7d45c2b296e 100644 --- a/advisories/unreviewed/2022/05/GHSA-pmg3-fq5j-v84g/GHSA-pmg3-fq5j-v84g.json +++ b/advisories/unreviewed/2022/05/GHSA-pmg3-fq5j-v84g/GHSA-pmg3-fq5j-v84g.json @@ -7,12 +7,8 @@ "CVE-2021-25330" ], "details": "Calling of non-existent provider in MobileWips application prior to SMR Feb-2021 Release 1 allows unauthorized actions including denial of service attack by hijacking the provider.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ppq5-6h29-8hm2/GHSA-ppq5-6h29-8hm2.json b/advisories/unreviewed/2022/05/GHSA-ppq5-6h29-8hm2/GHSA-ppq5-6h29-8hm2.json index 57379f46bc8..ef98c519dc5 100644 --- a/advisories/unreviewed/2022/05/GHSA-ppq5-6h29-8hm2/GHSA-ppq5-6h29-8hm2.json +++ b/advisories/unreviewed/2022/05/GHSA-ppq5-6h29-8hm2/GHSA-ppq5-6h29-8hm2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pq5r-x8h8-c67r/GHSA-pq5r-x8h8-c67r.json b/advisories/unreviewed/2022/05/GHSA-pq5r-x8h8-c67r/GHSA-pq5r-x8h8-c67r.json index ba54a889596..0efa3522709 100644 --- a/advisories/unreviewed/2022/05/GHSA-pq5r-x8h8-c67r/GHSA-pq5r-x8h8-c67r.json +++ b/advisories/unreviewed/2022/05/GHSA-pq5r-x8h8-c67r/GHSA-pq5r-x8h8-c67r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pqr7-274x-7pxj/GHSA-pqr7-274x-7pxj.json b/advisories/unreviewed/2022/05/GHSA-pqr7-274x-7pxj/GHSA-pqr7-274x-7pxj.json index 7eadbcf3ab2..2fb997c3ae9 100644 --- a/advisories/unreviewed/2022/05/GHSA-pqr7-274x-7pxj/GHSA-pqr7-274x-7pxj.json +++ b/advisories/unreviewed/2022/05/GHSA-pqr7-274x-7pxj/GHSA-pqr7-274x-7pxj.json @@ -7,12 +7,8 @@ "CVE-2021-1229" ], "details": "A vulnerability in ICMP Version 6 (ICMPv6) processing in Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a slow system memory leak, which over time could lead to a denial of service (DoS) condition. This vulnerability is due to improper error handling when an IPv6-configured interface receives a specific type of ICMPv6 packet. An attacker could exploit this vulnerability by sending a sustained rate of crafted ICMPv6 packets to a local IPv6 address on a targeted device. A successful exploit could allow the attacker to cause a system memory leak in the ICMPv6 process on the device. As a result, the ICMPv6 process could run out of system memory and stop processing traffic. The device could then drop all ICMPv6 packets, causing traffic instability on the device. Restoring device functionality would require a device reboot.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pr65-pvq8-rq7c/GHSA-pr65-pvq8-rq7c.json b/advisories/unreviewed/2022/05/GHSA-pr65-pvq8-rq7c/GHSA-pr65-pvq8-rq7c.json index 0b771bee883..8452ce79be9 100644 --- a/advisories/unreviewed/2022/05/GHSA-pr65-pvq8-rq7c/GHSA-pr65-pvq8-rq7c.json +++ b/advisories/unreviewed/2022/05/GHSA-pr65-pvq8-rq7c/GHSA-pr65-pvq8-rq7c.json @@ -7,12 +7,8 @@ "CVE-2020-11277" ], "details": "Possible race condition during async fastrpc session after sending RPC message due to the fastrpc ctx gets free during async session in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pvh9-p4pw-h78q/GHSA-pvh9-p4pw-h78q.json b/advisories/unreviewed/2022/05/GHSA-pvh9-p4pw-h78q/GHSA-pvh9-p4pw-h78q.json index 7f109c1c384..55c76f1daea 100644 --- a/advisories/unreviewed/2022/05/GHSA-pvh9-p4pw-h78q/GHSA-pvh9-p4pw-h78q.json +++ b/advisories/unreviewed/2022/05/GHSA-pvh9-p4pw-h78q/GHSA-pvh9-p4pw-h78q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pwg3-x4rj-q4jw/GHSA-pwg3-x4rj-q4jw.json b/advisories/unreviewed/2022/05/GHSA-pwg3-x4rj-q4jw/GHSA-pwg3-x4rj-q4jw.json index d77e778bb5a..c1cabe421ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-pwg3-x4rj-q4jw/GHSA-pwg3-x4rj-q4jw.json +++ b/advisories/unreviewed/2022/05/GHSA-pwg3-x4rj-q4jw/GHSA-pwg3-x4rj-q4jw.json @@ -7,12 +7,8 @@ "CVE-2020-4857" ], "details": "IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190460.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-px3x-mvc9-v7vg/GHSA-px3x-mvc9-v7vg.json b/advisories/unreviewed/2022/05/GHSA-px3x-mvc9-v7vg/GHSA-px3x-mvc9-v7vg.json index e427c86e32d..de393dc6db1 100644 --- a/advisories/unreviewed/2022/05/GHSA-px3x-mvc9-v7vg/GHSA-px3x-mvc9-v7vg.json +++ b/advisories/unreviewed/2022/05/GHSA-px3x-mvc9-v7vg/GHSA-px3x-mvc9-v7vg.json @@ -7,12 +7,8 @@ "CVE-2020-4866" ], "details": "IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190742.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-px6h-j7vf-8699/GHSA-px6h-j7vf-8699.json b/advisories/unreviewed/2022/05/GHSA-px6h-j7vf-8699/GHSA-px6h-j7vf-8699.json index 77c62839535..fb1d1f0727f 100644 --- a/advisories/unreviewed/2022/05/GHSA-px6h-j7vf-8699/GHSA-px6h-j7vf-8699.json +++ b/advisories/unreviewed/2022/05/GHSA-px6h-j7vf-8699/GHSA-px6h-j7vf-8699.json @@ -7,12 +7,8 @@ "CVE-2021-3342" ], "details": "EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted LaTeX input to a cgi/latex2png?latex= URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q2qh-vm9w-g4wf/GHSA-q2qh-vm9w-g4wf.json b/advisories/unreviewed/2022/05/GHSA-q2qh-vm9w-g4wf/GHSA-q2qh-vm9w-g4wf.json index 6637fedea31..1ca33161e45 100644 --- a/advisories/unreviewed/2022/05/GHSA-q2qh-vm9w-g4wf/GHSA-q2qh-vm9w-g4wf.json +++ b/advisories/unreviewed/2022/05/GHSA-q2qh-vm9w-g4wf/GHSA-q2qh-vm9w-g4wf.json @@ -7,12 +7,8 @@ "CVE-2021-25341" ], "details": "Calling of non-existent provider in S Assistant prior to version 6.5.01.22 allows unauthorized actions including denial of service attack by hijacking the provider.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q4vp-79rq-94cg/GHSA-q4vp-79rq-94cg.json b/advisories/unreviewed/2022/05/GHSA-q4vp-79rq-94cg/GHSA-q4vp-79rq-94cg.json index 6feea5f6818..e20afb11ed9 100644 --- a/advisories/unreviewed/2022/05/GHSA-q4vp-79rq-94cg/GHSA-q4vp-79rq-94cg.json +++ b/advisories/unreviewed/2022/05/GHSA-q4vp-79rq-94cg/GHSA-q4vp-79rq-94cg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q6vm-3q95-jvvp/GHSA-q6vm-3q95-jvvp.json b/advisories/unreviewed/2022/05/GHSA-q6vm-3q95-jvvp/GHSA-q6vm-3q95-jvvp.json index e2b9614c9d0..832183d2525 100644 --- a/advisories/unreviewed/2022/05/GHSA-q6vm-3q95-jvvp/GHSA-q6vm-3q95-jvvp.json +++ b/advisories/unreviewed/2022/05/GHSA-q6vm-3q95-jvvp/GHSA-q6vm-3q95-jvvp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q7pq-xhw5-p4xw/GHSA-q7pq-xhw5-p4xw.json b/advisories/unreviewed/2022/05/GHSA-q7pq-xhw5-p4xw/GHSA-q7pq-xhw5-p4xw.json index ef0833f3c74..702647a8772 100644 --- a/advisories/unreviewed/2022/05/GHSA-q7pq-xhw5-p4xw/GHSA-q7pq-xhw5-p4xw.json +++ b/advisories/unreviewed/2022/05/GHSA-q7pq-xhw5-p4xw/GHSA-q7pq-xhw5-p4xw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q8cq-p98h-wf2v/GHSA-q8cq-p98h-wf2v.json b/advisories/unreviewed/2022/05/GHSA-q8cq-p98h-wf2v/GHSA-q8cq-p98h-wf2v.json index 5da99dfc09a..1b768b82d1d 100644 --- a/advisories/unreviewed/2022/05/GHSA-q8cq-p98h-wf2v/GHSA-q8cq-p98h-wf2v.json +++ b/advisories/unreviewed/2022/05/GHSA-q8cq-p98h-wf2v/GHSA-q8cq-p98h-wf2v.json @@ -7,12 +7,8 @@ "CVE-2020-12530" ], "details": "An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. There is an XSS issue in the redirect.php allowing an attacker to inject code via a get parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q9cg-7392-75cw/GHSA-q9cg-7392-75cw.json b/advisories/unreviewed/2022/05/GHSA-q9cg-7392-75cw/GHSA-q9cg-7392-75cw.json index 72d67e9a968..a97bc2f75c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-q9cg-7392-75cw/GHSA-q9cg-7392-75cw.json +++ b/advisories/unreviewed/2022/05/GHSA-q9cg-7392-75cw/GHSA-q9cg-7392-75cw.json @@ -7,12 +7,8 @@ "CVE-2021-27550" ], "details": "Polaris Office v9.102.66 is affected by a divide-by-zero error in PolarisOffice.exe and EngineDLL.dll that may cause a local denial of service. To exploit the vulnerability, someone must open a crafted PDF file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q9cp-m9vw-25xh/GHSA-q9cp-m9vw-25xh.json b/advisories/unreviewed/2022/05/GHSA-q9cp-m9vw-25xh/GHSA-q9cp-m9vw-25xh.json index ba576d50fed..65730f3b74f 100644 --- a/advisories/unreviewed/2022/05/GHSA-q9cp-m9vw-25xh/GHSA-q9cp-m9vw-25xh.json +++ b/advisories/unreviewed/2022/05/GHSA-q9cp-m9vw-25xh/GHSA-q9cp-m9vw-25xh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q9m5-5m39-7whx/GHSA-q9m5-5m39-7whx.json b/advisories/unreviewed/2022/05/GHSA-q9m5-5m39-7whx/GHSA-q9m5-5m39-7whx.json index 4bfb549ed6b..253c24e455b 100644 --- a/advisories/unreviewed/2022/05/GHSA-q9m5-5m39-7whx/GHSA-q9m5-5m39-7whx.json +++ b/advisories/unreviewed/2022/05/GHSA-q9m5-5m39-7whx/GHSA-q9m5-5m39-7whx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q9xv-9vww-9m7g/GHSA-q9xv-9vww-9m7g.json b/advisories/unreviewed/2022/05/GHSA-q9xv-9vww-9m7g/GHSA-q9xv-9vww-9m7g.json index dce9c6fd7a9..c820cab398e 100644 --- a/advisories/unreviewed/2022/05/GHSA-q9xv-9vww-9m7g/GHSA-q9xv-9vww-9m7g.json +++ b/advisories/unreviewed/2022/05/GHSA-q9xv-9vww-9m7g/GHSA-q9xv-9vww-9m7g.json @@ -7,12 +7,8 @@ "CVE-2021-27198" ], "details": "An issue was discovered in Visualware MyConnection Server through 11.0b build 5382. Unauthenticated Remote Code Execution can occur via Arbitrary File Upload in the web service when using a myspeed/sf?filename= URI. This application is written in Java and is thus cross-platform. The Windows installation runs as SYSTEM, which means that exploitation gives one Administrator privileges on the target system.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qg55-26rh-hq58/GHSA-qg55-26rh-hq58.json b/advisories/unreviewed/2022/05/GHSA-qg55-26rh-hq58/GHSA-qg55-26rh-hq58.json index 19be5f8f74e..8a5a570604e 100644 --- a/advisories/unreviewed/2022/05/GHSA-qg55-26rh-hq58/GHSA-qg55-26rh-hq58.json +++ b/advisories/unreviewed/2022/05/GHSA-qg55-26rh-hq58/GHSA-qg55-26rh-hq58.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qhvm-2jxc-mqxw/GHSA-qhvm-2jxc-mqxw.json b/advisories/unreviewed/2022/05/GHSA-qhvm-2jxc-mqxw/GHSA-qhvm-2jxc-mqxw.json index be8c03546d7..da556b1b795 100644 --- a/advisories/unreviewed/2022/05/GHSA-qhvm-2jxc-mqxw/GHSA-qhvm-2jxc-mqxw.json +++ b/advisories/unreviewed/2022/05/GHSA-qhvm-2jxc-mqxw/GHSA-qhvm-2jxc-mqxw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qj24-4wh9-7xq5/GHSA-qj24-4wh9-7xq5.json b/advisories/unreviewed/2022/05/GHSA-qj24-4wh9-7xq5/GHSA-qj24-4wh9-7xq5.json index f19c847fcf2..1990c06d029 100644 --- a/advisories/unreviewed/2022/05/GHSA-qj24-4wh9-7xq5/GHSA-qj24-4wh9-7xq5.json +++ b/advisories/unreviewed/2022/05/GHSA-qj24-4wh9-7xq5/GHSA-qj24-4wh9-7xq5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qjqq-jx62-v43m/GHSA-qjqq-jx62-v43m.json b/advisories/unreviewed/2022/05/GHSA-qjqq-jx62-v43m/GHSA-qjqq-jx62-v43m.json index 10fc5e46873..8d8f07c1d05 100644 --- a/advisories/unreviewed/2022/05/GHSA-qjqq-jx62-v43m/GHSA-qjqq-jx62-v43m.json +++ b/advisories/unreviewed/2022/05/GHSA-qjqq-jx62-v43m/GHSA-qjqq-jx62-v43m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qvw3-rf6g-2w3x/GHSA-qvw3-rf6g-2w3x.json b/advisories/unreviewed/2022/05/GHSA-qvw3-rf6g-2w3x/GHSA-qvw3-rf6g-2w3x.json index 9ea599d2fe8..ffadb530c32 100644 --- a/advisories/unreviewed/2022/05/GHSA-qvw3-rf6g-2w3x/GHSA-qvw3-rf6g-2w3x.json +++ b/advisories/unreviewed/2022/05/GHSA-qvw3-rf6g-2w3x/GHSA-qvw3-rf6g-2w3x.json @@ -7,12 +7,8 @@ "CVE-2021-23960" ], "details": "Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially exploitable crash. This vulnerability affects Firefox < 85, Thunderbird < 78.7, and Firefox ESR < 78.7.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qxxr-xxwm-9w7g/GHSA-qxxr-xxwm-9w7g.json b/advisories/unreviewed/2022/05/GHSA-qxxr-xxwm-9w7g/GHSA-qxxr-xxwm-9w7g.json index ebd0ca25e42..c033d063743 100644 --- a/advisories/unreviewed/2022/05/GHSA-qxxr-xxwm-9w7g/GHSA-qxxr-xxwm-9w7g.json +++ b/advisories/unreviewed/2022/05/GHSA-qxxr-xxwm-9w7g/GHSA-qxxr-xxwm-9w7g.json @@ -7,12 +7,8 @@ "CVE-2019-18942" ], "details": "Micro Focus Solutions Business Manager versions prior to 11.7.1 are vulnerable to stored XSS. The application reflects previously stored user input without encoding.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r384-9q9m-w3m5/GHSA-r384-9q9m-w3m5.json b/advisories/unreviewed/2022/05/GHSA-r384-9q9m-w3m5/GHSA-r384-9q9m-w3m5.json index 42ff71d8e84..1a6b7da3165 100644 --- a/advisories/unreviewed/2022/05/GHSA-r384-9q9m-w3m5/GHSA-r384-9q9m-w3m5.json +++ b/advisories/unreviewed/2022/05/GHSA-r384-9q9m-w3m5/GHSA-r384-9q9m-w3m5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r398-3hpm-rw83/GHSA-r398-3hpm-rw83.json b/advisories/unreviewed/2022/05/GHSA-r398-3hpm-rw83/GHSA-r398-3hpm-rw83.json index 08ef5e75419..931f4066eb2 100644 --- a/advisories/unreviewed/2022/05/GHSA-r398-3hpm-rw83/GHSA-r398-3hpm-rw83.json +++ b/advisories/unreviewed/2022/05/GHSA-r398-3hpm-rw83/GHSA-r398-3hpm-rw83.json @@ -7,12 +7,8 @@ "CVE-2020-11272" ], "details": "Before enqueuing a frame to the PE queue for further processing, an entry in a hash table can be deleted and using a stale version later can lead to use after free condition in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r3c7-2c6p-8qmc/GHSA-r3c7-2c6p-8qmc.json b/advisories/unreviewed/2022/05/GHSA-r3c7-2c6p-8qmc/GHSA-r3c7-2c6p-8qmc.json index c99e4eacf4c..085bf443345 100644 --- a/advisories/unreviewed/2022/05/GHSA-r3c7-2c6p-8qmc/GHSA-r3c7-2c6p-8qmc.json +++ b/advisories/unreviewed/2022/05/GHSA-r3c7-2c6p-8qmc/GHSA-r3c7-2c6p-8qmc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r56v-99h2-76vh/GHSA-r56v-99h2-76vh.json b/advisories/unreviewed/2022/05/GHSA-r56v-99h2-76vh/GHSA-r56v-99h2-76vh.json index d363026bbdf..7c3cbe4d16e 100644 --- a/advisories/unreviewed/2022/05/GHSA-r56v-99h2-76vh/GHSA-r56v-99h2-76vh.json +++ b/advisories/unreviewed/2022/05/GHSA-r56v-99h2-76vh/GHSA-r56v-99h2-76vh.json @@ -7,12 +7,8 @@ "CVE-2021-23957" ], "details": "Navigations through the Android-specific `intent` URL scheme could have been misused to escape iframe sandbox. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 85.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r6r2-gvcm-979j/GHSA-r6r2-gvcm-979j.json b/advisories/unreviewed/2022/05/GHSA-r6r2-gvcm-979j/GHSA-r6r2-gvcm-979j.json index 9f9f8f80bc4..d6ac083912f 100644 --- a/advisories/unreviewed/2022/05/GHSA-r6r2-gvcm-979j/GHSA-r6r2-gvcm-979j.json +++ b/advisories/unreviewed/2022/05/GHSA-r6r2-gvcm-979j/GHSA-r6r2-gvcm-979j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r77v-287j-34fv/GHSA-r77v-287j-34fv.json b/advisories/unreviewed/2022/05/GHSA-r77v-287j-34fv/GHSA-r77v-287j-34fv.json index f86a8bc2276..66f2ea7dc58 100644 --- a/advisories/unreviewed/2022/05/GHSA-r77v-287j-34fv/GHSA-r77v-287j-34fv.json +++ b/advisories/unreviewed/2022/05/GHSA-r77v-287j-34fv/GHSA-r77v-287j-34fv.json @@ -7,12 +7,8 @@ "CVE-2021-27731" ], "details": "Accellion FTA 9_12_432 and earlier is affected by stored XSS via a crafted POST request to a user endpoint. The fixed version is FTA_9_12_444 and later.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r8fj-wcw2-6qvh/GHSA-r8fj-wcw2-6qvh.json b/advisories/unreviewed/2022/05/GHSA-r8fj-wcw2-6qvh/GHSA-r8fj-wcw2-6qvh.json index b7a314b62f0..95089a6a6c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-r8fj-wcw2-6qvh/GHSA-r8fj-wcw2-6qvh.json +++ b/advisories/unreviewed/2022/05/GHSA-r8fj-wcw2-6qvh/GHSA-r8fj-wcw2-6qvh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r8r8-mhhg-vjch/GHSA-r8r8-mhhg-vjch.json b/advisories/unreviewed/2022/05/GHSA-r8r8-mhhg-vjch/GHSA-r8r8-mhhg-vjch.json index 7908c5860a6..c6384e0c8d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-r8r8-mhhg-vjch/GHSA-r8r8-mhhg-vjch.json +++ b/advisories/unreviewed/2022/05/GHSA-r8r8-mhhg-vjch/GHSA-r8r8-mhhg-vjch.json @@ -7,12 +7,8 @@ "CVE-2019-25022" ], "details": "An issue was discovered in Scytl sVote 2.1. An attacker can inject code that gets executed by creating an election-event and injecting a payload over an event alias, because the application calls Runtime.getRuntime().exec() without validation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rg43-4x9m-w9jh/GHSA-rg43-4x9m-w9jh.json b/advisories/unreviewed/2022/05/GHSA-rg43-4x9m-w9jh/GHSA-rg43-4x9m-w9jh.json index fc64b915517..0814433bd5c 100644 --- a/advisories/unreviewed/2022/05/GHSA-rg43-4x9m-w9jh/GHSA-rg43-4x9m-w9jh.json +++ b/advisories/unreviewed/2022/05/GHSA-rg43-4x9m-w9jh/GHSA-rg43-4x9m-w9jh.json @@ -7,12 +7,8 @@ "CVE-2020-8032" ], "details": "A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root. This issue affects: openSUSE Factory cyrus-sasl version 2.1.27-4.2 and prior versions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rr49-v752-xw3c/GHSA-rr49-v752-xw3c.json b/advisories/unreviewed/2022/05/GHSA-rr49-v752-xw3c/GHSA-rr49-v752-xw3c.json index eac2db03e72..f8f0ffa077b 100644 --- a/advisories/unreviewed/2022/05/GHSA-rr49-v752-xw3c/GHSA-rr49-v752-xw3c.json +++ b/advisories/unreviewed/2022/05/GHSA-rr49-v752-xw3c/GHSA-rr49-v752-xw3c.json @@ -7,12 +7,8 @@ "CVE-2020-29658" ], "details": "Zoho ManageEngine Application Control Plus before 100523 has an insecure SSL configuration setting for Nginx, leading to Privilege Escalation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rr98-pccv-8m4w/GHSA-rr98-pccv-8m4w.json b/advisories/unreviewed/2022/05/GHSA-rr98-pccv-8m4w/GHSA-rr98-pccv-8m4w.json index 34439f75695..e6fbef67c62 100644 --- a/advisories/unreviewed/2022/05/GHSA-rr98-pccv-8m4w/GHSA-rr98-pccv-8m4w.json +++ b/advisories/unreviewed/2022/05/GHSA-rr98-pccv-8m4w/GHSA-rr98-pccv-8m4w.json @@ -7,12 +7,8 @@ "CVE-2021-27799" ], "details": "ean_leading_zeroes in backend/upcean.c in Zint Barcode Generator 2.19.1 has a stack-based buffer overflow that is reachable from the C API through an application that includes the Zint Barcode Generator library code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rv55-hj2q-9p3q/GHSA-rv55-hj2q-9p3q.json b/advisories/unreviewed/2022/05/GHSA-rv55-hj2q-9p3q/GHSA-rv55-hj2q-9p3q.json index e51c4baea0a..3f164d3dfb2 100644 --- a/advisories/unreviewed/2022/05/GHSA-rv55-hj2q-9p3q/GHSA-rv55-hj2q-9p3q.json +++ b/advisories/unreviewed/2022/05/GHSA-rv55-hj2q-9p3q/GHSA-rv55-hj2q-9p3q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rwwq-42pw-cjqq/GHSA-rwwq-42pw-cjqq.json b/advisories/unreviewed/2022/05/GHSA-rwwq-42pw-cjqq/GHSA-rwwq-42pw-cjqq.json index 053bf21b136..7e623df1de4 100644 --- a/advisories/unreviewed/2022/05/GHSA-rwwq-42pw-cjqq/GHSA-rwwq-42pw-cjqq.json +++ b/advisories/unreviewed/2022/05/GHSA-rwwq-42pw-cjqq/GHSA-rwwq-42pw-cjqq.json @@ -7,12 +7,8 @@ "CVE-2020-7836" ], "details": "VOICEYE WSActiveBridgeES versions prior to 2.1.0.3 contains a stack-based buffer overflow vulnerability caused by improper bound checking parameter given by attack. It finally leads to a stack-based buffer overflow via access to crafted web page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v2rv-5w2r-qqhg/GHSA-v2rv-5w2r-qqhg.json b/advisories/unreviewed/2022/05/GHSA-v2rv-5w2r-qqhg/GHSA-v2rv-5w2r-qqhg.json index d355bbdd5ab..d3a1bfc1e44 100644 --- a/advisories/unreviewed/2022/05/GHSA-v2rv-5w2r-qqhg/GHSA-v2rv-5w2r-qqhg.json +++ b/advisories/unreviewed/2022/05/GHSA-v2rv-5w2r-qqhg/GHSA-v2rv-5w2r-qqhg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v598-3w4j-2787/GHSA-v598-3w4j-2787.json b/advisories/unreviewed/2022/05/GHSA-v598-3w4j-2787/GHSA-v598-3w4j-2787.json index a353c5be12a..a039dc24487 100644 --- a/advisories/unreviewed/2022/05/GHSA-v598-3w4j-2787/GHSA-v598-3w4j-2787.json +++ b/advisories/unreviewed/2022/05/GHSA-v598-3w4j-2787/GHSA-v598-3w4j-2787.json @@ -7,12 +7,8 @@ "CVE-2021-27514" ], "details": "EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-force authentication bypass (such as in CVE-2021-27513 exploitation).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v6wf-5rwf-gjw6/GHSA-v6wf-5rwf-gjw6.json b/advisories/unreviewed/2022/05/GHSA-v6wf-5rwf-gjw6/GHSA-v6wf-5rwf-gjw6.json index c43b87a1a03..879b3d454c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-v6wf-5rwf-gjw6/GHSA-v6wf-5rwf-gjw6.json +++ b/advisories/unreviewed/2022/05/GHSA-v6wf-5rwf-gjw6/GHSA-v6wf-5rwf-gjw6.json @@ -7,12 +7,8 @@ "CVE-2021-22638" ], "details": "Fatek FvDesigner Version 1.5.76 and prior is vulnerable to an out-of-bounds read while processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v6wq-h9m7-9q37/GHSA-v6wq-h9m7-9q37.json b/advisories/unreviewed/2022/05/GHSA-v6wq-h9m7-9q37/GHSA-v6wq-h9m7-9q37.json index c17015f5363..ecfed170f05 100644 --- a/advisories/unreviewed/2022/05/GHSA-v6wq-h9m7-9q37/GHSA-v6wq-h9m7-9q37.json +++ b/advisories/unreviewed/2022/05/GHSA-v6wq-h9m7-9q37/GHSA-v6wq-h9m7-9q37.json @@ -7,12 +7,8 @@ "CVE-2020-3664" ], "details": "Out of bound read access in hypervisor due to an invalid read access attempt by passing invalid addresses in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v7gv-m5f9-wh8w/GHSA-v7gv-m5f9-wh8w.json b/advisories/unreviewed/2022/05/GHSA-v7gv-m5f9-wh8w/GHSA-v7gv-m5f9-wh8w.json index 93851b74e98..38e3d9c7b36 100644 --- a/advisories/unreviewed/2022/05/GHSA-v7gv-m5f9-wh8w/GHSA-v7gv-m5f9-wh8w.json +++ b/advisories/unreviewed/2022/05/GHSA-v7gv-m5f9-wh8w/GHSA-v7gv-m5f9-wh8w.json @@ -7,12 +7,8 @@ "CVE-2021-0402" ], "details": "In jpeg, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05433311.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vgpr-fwc5-7j92/GHSA-vgpr-fwc5-7j92.json b/advisories/unreviewed/2022/05/GHSA-vgpr-fwc5-7j92/GHSA-vgpr-fwc5-7j92.json index 2a3fb452476..dc195c50a6b 100644 --- a/advisories/unreviewed/2022/05/GHSA-vgpr-fwc5-7j92/GHSA-vgpr-fwc5-7j92.json +++ b/advisories/unreviewed/2022/05/GHSA-vgpr-fwc5-7j92/GHSA-vgpr-fwc5-7j92.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vj6g-qrfv-q27w/GHSA-vj6g-qrfv-q27w.json b/advisories/unreviewed/2022/05/GHSA-vj6g-qrfv-q27w/GHSA-vj6g-qrfv-q27w.json index d6faaaa200e..00228044dc2 100644 --- a/advisories/unreviewed/2022/05/GHSA-vj6g-qrfv-q27w/GHSA-vj6g-qrfv-q27w.json +++ b/advisories/unreviewed/2022/05/GHSA-vj6g-qrfv-q27w/GHSA-vj6g-qrfv-q27w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vjq2-3fhj-f82c/GHSA-vjq2-3fhj-f82c.json b/advisories/unreviewed/2022/05/GHSA-vjq2-3fhj-f82c/GHSA-vjq2-3fhj-f82c.json index b4c78020ef4..ecc901f494e 100644 --- a/advisories/unreviewed/2022/05/GHSA-vjq2-3fhj-f82c/GHSA-vjq2-3fhj-f82c.json +++ b/advisories/unreviewed/2022/05/GHSA-vjq2-3fhj-f82c/GHSA-vjq2-3fhj-f82c.json @@ -7,12 +7,8 @@ "CVE-2021-23956" ], "details": "An ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory. This was addressed by adding a new prompt. This vulnerability affects Firefox < 85.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vm8f-p2gm-gmqv/GHSA-vm8f-p2gm-gmqv.json b/advisories/unreviewed/2022/05/GHSA-vm8f-p2gm-gmqv/GHSA-vm8f-p2gm-gmqv.json index c66b584bad9..716985cde00 100644 --- a/advisories/unreviewed/2022/05/GHSA-vm8f-p2gm-gmqv/GHSA-vm8f-p2gm-gmqv.json +++ b/advisories/unreviewed/2022/05/GHSA-vm8f-p2gm-gmqv/GHSA-vm8f-p2gm-gmqv.json @@ -7,12 +7,8 @@ "CVE-2021-23132" ], "details": "An issue was discovered in Joomla! 3.0.0 through 3.9.24. com_media allowed paths that are not intended for image uploads", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vq93-74jf-7wp7/GHSA-vq93-74jf-7wp7.json b/advisories/unreviewed/2022/05/GHSA-vq93-74jf-7wp7/GHSA-vq93-74jf-7wp7.json index c79b9d361cd..b2baa3c3c2a 100644 --- a/advisories/unreviewed/2022/05/GHSA-vq93-74jf-7wp7/GHSA-vq93-74jf-7wp7.json +++ b/advisories/unreviewed/2022/05/GHSA-vq93-74jf-7wp7/GHSA-vq93-74jf-7wp7.json @@ -7,12 +7,8 @@ "CVE-2021-20350" ], "details": "IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194707.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vr7j-8r5h-pmp6/GHSA-vr7j-8r5h-pmp6.json b/advisories/unreviewed/2022/05/GHSA-vr7j-8r5h-pmp6/GHSA-vr7j-8r5h-pmp6.json index 6811f637df5..bede8a71d00 100644 --- a/advisories/unreviewed/2022/05/GHSA-vr7j-8r5h-pmp6/GHSA-vr7j-8r5h-pmp6.json +++ b/advisories/unreviewed/2022/05/GHSA-vr7j-8r5h-pmp6/GHSA-vr7j-8r5h-pmp6.json @@ -7,12 +7,8 @@ "CVE-2021-20351" ], "details": "IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194708.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vr8w-9hf4-f445/GHSA-vr8w-9hf4-f445.json b/advisories/unreviewed/2022/05/GHSA-vr8w-9hf4-f445/GHSA-vr8w-9hf4-f445.json index ede077a15b4..431d87129da 100644 --- a/advisories/unreviewed/2022/05/GHSA-vr8w-9hf4-f445/GHSA-vr8w-9hf4-f445.json +++ b/advisories/unreviewed/2022/05/GHSA-vr8w-9hf4-f445/GHSA-vr8w-9hf4-f445.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vvfw-x7gp-frc8/GHSA-vvfw-x7gp-frc8.json b/advisories/unreviewed/2022/05/GHSA-vvfw-x7gp-frc8/GHSA-vvfw-x7gp-frc8.json index 233282e4ccf..130654f5d03 100644 --- a/advisories/unreviewed/2022/05/GHSA-vvfw-x7gp-frc8/GHSA-vvfw-x7gp-frc8.json +++ b/advisories/unreviewed/2022/05/GHSA-vvfw-x7gp-frc8/GHSA-vvfw-x7gp-frc8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vvw2-6xj7-ff35/GHSA-vvw2-6xj7-ff35.json b/advisories/unreviewed/2022/05/GHSA-vvw2-6xj7-ff35/GHSA-vvw2-6xj7-ff35.json index 58c62b7bc6b..54a18a1a066 100644 --- a/advisories/unreviewed/2022/05/GHSA-vvw2-6xj7-ff35/GHSA-vvw2-6xj7-ff35.json +++ b/advisories/unreviewed/2022/05/GHSA-vvw2-6xj7-ff35/GHSA-vvw2-6xj7-ff35.json @@ -7,12 +7,8 @@ "CVE-2021-1367" ], "details": "A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted PIM packet to an affected device. A successful exploit could allow the attacker to cause a traffic loop, resulting in a DoS condition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vwm9-4mjh-m96x/GHSA-vwm9-4mjh-m96x.json b/advisories/unreviewed/2022/05/GHSA-vwm9-4mjh-m96x/GHSA-vwm9-4mjh-m96x.json index 08d23980d44..e7e74d59d6e 100644 --- a/advisories/unreviewed/2022/05/GHSA-vwm9-4mjh-m96x/GHSA-vwm9-4mjh-m96x.json +++ b/advisories/unreviewed/2022/05/GHSA-vwm9-4mjh-m96x/GHSA-vwm9-4mjh-m96x.json @@ -7,12 +7,8 @@ "CVE-2020-7847" ], "details": "The ipTIME NAS product allows an arbitrary file upload vulnerability in the Manage Bulletins/Upload feature, which can be leveraged to gain remote code execution. This issue affects: pTIME NAS 1.4.36.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vx2p-m3j3-fj93/GHSA-vx2p-m3j3-fj93.json b/advisories/unreviewed/2022/05/GHSA-vx2p-m3j3-fj93/GHSA-vx2p-m3j3-fj93.json index a890f70987a..3a0fd612e5d 100644 --- a/advisories/unreviewed/2022/05/GHSA-vx2p-m3j3-fj93/GHSA-vx2p-m3j3-fj93.json +++ b/advisories/unreviewed/2022/05/GHSA-vx2p-m3j3-fj93/GHSA-vx2p-m3j3-fj93.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vx8w-7wqp-2fq6/GHSA-vx8w-7wqp-2fq6.json b/advisories/unreviewed/2022/05/GHSA-vx8w-7wqp-2fq6/GHSA-vx8w-7wqp-2fq6.json index d3819872bd7..9f1bd794d12 100644 --- a/advisories/unreviewed/2022/05/GHSA-vx8w-7wqp-2fq6/GHSA-vx8w-7wqp-2fq6.json +++ b/advisories/unreviewed/2022/05/GHSA-vx8w-7wqp-2fq6/GHSA-vx8w-7wqp-2fq6.json @@ -7,12 +7,8 @@ "CVE-2010-1685" ], "details": "Stack-based buffer overflow in CursorArts ZipWrangler 1.20 allows user-assisted remote attackers to execute arbitrary code via a ZIP file containing a file with a long filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w2q8-6j3f-ccxf/GHSA-w2q8-6j3f-ccxf.json b/advisories/unreviewed/2022/05/GHSA-w2q8-6j3f-ccxf/GHSA-w2q8-6j3f-ccxf.json index 55c83807128..ddda8c62ffb 100644 --- a/advisories/unreviewed/2022/05/GHSA-w2q8-6j3f-ccxf/GHSA-w2q8-6j3f-ccxf.json +++ b/advisories/unreviewed/2022/05/GHSA-w2q8-6j3f-ccxf/GHSA-w2q8-6j3f-ccxf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w3fg-fr8j-9444/GHSA-w3fg-fr8j-9444.json b/advisories/unreviewed/2022/05/GHSA-w3fg-fr8j-9444/GHSA-w3fg-fr8j-9444.json index faa861b3eac..53719936a12 100644 --- a/advisories/unreviewed/2022/05/GHSA-w3fg-fr8j-9444/GHSA-w3fg-fr8j-9444.json +++ b/advisories/unreviewed/2022/05/GHSA-w3fg-fr8j-9444/GHSA-w3fg-fr8j-9444.json @@ -7,12 +7,8 @@ "CVE-2020-11283" ], "details": "A buffer overflow can occur when playing an MKV clip due to lack of input validation in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w4mr-vhgh-2fq7/GHSA-w4mr-vhgh-2fq7.json b/advisories/unreviewed/2022/05/GHSA-w4mr-vhgh-2fq7/GHSA-w4mr-vhgh-2fq7.json index d18dcc24dea..f2b75735e7c 100644 --- a/advisories/unreviewed/2022/05/GHSA-w4mr-vhgh-2fq7/GHSA-w4mr-vhgh-2fq7.json +++ b/advisories/unreviewed/2022/05/GHSA-w4mr-vhgh-2fq7/GHSA-w4mr-vhgh-2fq7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w7vp-fx35-p349/GHSA-w7vp-fx35-p349.json b/advisories/unreviewed/2022/05/GHSA-w7vp-fx35-p349/GHSA-w7vp-fx35-p349.json index 4a29e605f61..d1fb865c59b 100644 --- a/advisories/unreviewed/2022/05/GHSA-w7vp-fx35-p349/GHSA-w7vp-fx35-p349.json +++ b/advisories/unreviewed/2022/05/GHSA-w7vp-fx35-p349/GHSA-w7vp-fx35-p349.json @@ -7,12 +7,8 @@ "CVE-2021-21066" ], "details": "Adobe Bridge version 11.0 (and earlier) is affected by an out-of-bounds write vulnerability when parsing TTF files that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w8ww-rjx9-2r6h/GHSA-w8ww-rjx9-2r6h.json b/advisories/unreviewed/2022/05/GHSA-w8ww-rjx9-2r6h/GHSA-w8ww-rjx9-2r6h.json index f469c631908..636c381d16d 100644 --- a/advisories/unreviewed/2022/05/GHSA-w8ww-rjx9-2r6h/GHSA-w8ww-rjx9-2r6h.json +++ b/advisories/unreviewed/2022/05/GHSA-w8ww-rjx9-2r6h/GHSA-w8ww-rjx9-2r6h.json @@ -7,12 +7,8 @@ "CVE-2020-35556" ], "details": "An issue was discovered in Acronis Cyber Protect before 15 Update 1 build 26172. Because the local notification service misconfigures CORS, information disclosure can occur.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w9wh-wwhg-6m8w/GHSA-w9wh-wwhg-6m8w.json b/advisories/unreviewed/2022/05/GHSA-w9wh-wwhg-6m8w/GHSA-w9wh-wwhg-6m8w.json index e0e9a5f284d..21146b1d332 100644 --- a/advisories/unreviewed/2022/05/GHSA-w9wh-wwhg-6m8w/GHSA-w9wh-wwhg-6m8w.json +++ b/advisories/unreviewed/2022/05/GHSA-w9wh-wwhg-6m8w/GHSA-w9wh-wwhg-6m8w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wc7j-ww93-98v3/GHSA-wc7j-ww93-98v3.json b/advisories/unreviewed/2022/05/GHSA-wc7j-ww93-98v3/GHSA-wc7j-ww93-98v3.json index d51fa9869c2..cbf0896352b 100644 --- a/advisories/unreviewed/2022/05/GHSA-wc7j-ww93-98v3/GHSA-wc7j-ww93-98v3.json +++ b/advisories/unreviewed/2022/05/GHSA-wc7j-ww93-98v3/GHSA-wc7j-ww93-98v3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wh6q-v4rw-9chw/GHSA-wh6q-v4rw-9chw.json b/advisories/unreviewed/2022/05/GHSA-wh6q-v4rw-9chw/GHSA-wh6q-v4rw-9chw.json index 236db8a0b42..56ea8ff39a6 100644 --- a/advisories/unreviewed/2022/05/GHSA-wh6q-v4rw-9chw/GHSA-wh6q-v4rw-9chw.json +++ b/advisories/unreviewed/2022/05/GHSA-wh6q-v4rw-9chw/GHSA-wh6q-v4rw-9chw.json @@ -7,12 +7,8 @@ "CVE-2021-25331" ], "details": "Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance information over the lockscreen in specific condition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wp59-9grx-jh34/GHSA-wp59-9grx-jh34.json b/advisories/unreviewed/2022/05/GHSA-wp59-9grx-jh34/GHSA-wp59-9grx-jh34.json index b1a348f136d..13e1d8449c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-wp59-9grx-jh34/GHSA-wp59-9grx-jh34.json +++ b/advisories/unreviewed/2022/05/GHSA-wp59-9grx-jh34/GHSA-wp59-9grx-jh34.json @@ -7,12 +7,8 @@ "CVE-2021-27371" ], "details": "The Contact page in Monica 2.19.1 allows stored XSS via the Description field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wpq8-mgpj-h53w/GHSA-wpq8-mgpj-h53w.json b/advisories/unreviewed/2022/05/GHSA-wpq8-mgpj-h53w/GHSA-wpq8-mgpj-h53w.json index 86bf06dec90..c782beaba4a 100644 --- a/advisories/unreviewed/2022/05/GHSA-wpq8-mgpj-h53w/GHSA-wpq8-mgpj-h53w.json +++ b/advisories/unreviewed/2022/05/GHSA-wpq8-mgpj-h53w/GHSA-wpq8-mgpj-h53w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wvm5-q52j-8r24/GHSA-wvm5-q52j-8r24.json b/advisories/unreviewed/2022/05/GHSA-wvm5-q52j-8r24/GHSA-wvm5-q52j-8r24.json index 1f7d862f481..3a4cec7e9f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-wvm5-q52j-8r24/GHSA-wvm5-q52j-8r24.json +++ b/advisories/unreviewed/2022/05/GHSA-wvm5-q52j-8r24/GHSA-wvm5-q52j-8r24.json @@ -7,12 +7,8 @@ "CVE-2020-7846" ], "details": "Helpcom before v10.0 contains a file download and execution vulnerability caused by storing hardcoded cryptographic key. It finally leads to a file download and execution via access to crafted web page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ww8w-98rf-98pg/GHSA-ww8w-98rf-98pg.json b/advisories/unreviewed/2022/05/GHSA-ww8w-98rf-98pg/GHSA-ww8w-98rf-98pg.json index 7beb8308c99..30621bc5098 100644 --- a/advisories/unreviewed/2022/05/GHSA-ww8w-98rf-98pg/GHSA-ww8w-98rf-98pg.json +++ b/advisories/unreviewed/2022/05/GHSA-ww8w-98rf-98pg/GHSA-ww8w-98rf-98pg.json @@ -7,12 +7,8 @@ "CVE-2021-21725" ], "details": "A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to access files in other directories by performing specific operations, resulting in information leak. This affects: ZXHN H196Q V9.1.0C2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wwrq-59mq-v8w2/GHSA-wwrq-59mq-v8w2.json b/advisories/unreviewed/2022/05/GHSA-wwrq-59mq-v8w2/GHSA-wwrq-59mq-v8w2.json index b5f4a665b19..ca2511695c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-wwrq-59mq-v8w2/GHSA-wwrq-59mq-v8w2.json +++ b/advisories/unreviewed/2022/05/GHSA-wwrq-59mq-v8w2/GHSA-wwrq-59mq-v8w2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x2xx-hqx8-2mv5/GHSA-x2xx-hqx8-2mv5.json b/advisories/unreviewed/2022/05/GHSA-x2xx-hqx8-2mv5/GHSA-x2xx-hqx8-2mv5.json index 599429fd61d..a413535fbf9 100644 --- a/advisories/unreviewed/2022/05/GHSA-x2xx-hqx8-2mv5/GHSA-x2xx-hqx8-2mv5.json +++ b/advisories/unreviewed/2022/05/GHSA-x2xx-hqx8-2mv5/GHSA-x2xx-hqx8-2mv5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x39g-fjmg-xwx2/GHSA-x39g-fjmg-xwx2.json b/advisories/unreviewed/2022/05/GHSA-x39g-fjmg-xwx2/GHSA-x39g-fjmg-xwx2.json index 12b23e7d72c..0c4beecbbb2 100644 --- a/advisories/unreviewed/2022/05/GHSA-x39g-fjmg-xwx2/GHSA-x39g-fjmg-xwx2.json +++ b/advisories/unreviewed/2022/05/GHSA-x39g-fjmg-xwx2/GHSA-x39g-fjmg-xwx2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x3pf-797q-q9j6/GHSA-x3pf-797q-q9j6.json b/advisories/unreviewed/2022/05/GHSA-x3pf-797q-q9j6/GHSA-x3pf-797q-q9j6.json index 52672fffb57..d932131b5fb 100644 --- a/advisories/unreviewed/2022/05/GHSA-x3pf-797q-q9j6/GHSA-x3pf-797q-q9j6.json +++ b/advisories/unreviewed/2022/05/GHSA-x3pf-797q-q9j6/GHSA-x3pf-797q-q9j6.json @@ -7,12 +7,8 @@ "CVE-2020-29047" ], "details": "The wp-hotel-booking plugin through 1.10.2 for WordPress allows remote attackers to execute arbitrary code because of an unserialize operation on the thimpress_hotel_booking_1 cookie in load in includes/class-wphb-sessions.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x5fh-xfvr-gg7m/GHSA-x5fh-xfvr-gg7m.json b/advisories/unreviewed/2022/05/GHSA-x5fh-xfvr-gg7m/GHSA-x5fh-xfvr-gg7m.json index d26f81ef8d6..9d9b3875b4a 100644 --- a/advisories/unreviewed/2022/05/GHSA-x5fh-xfvr-gg7m/GHSA-x5fh-xfvr-gg7m.json +++ b/advisories/unreviewed/2022/05/GHSA-x5fh-xfvr-gg7m/GHSA-x5fh-xfvr-gg7m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x5pm-xx4m-ggx2/GHSA-x5pm-xx4m-ggx2.json b/advisories/unreviewed/2022/05/GHSA-x5pm-xx4m-ggx2/GHSA-x5pm-xx4m-ggx2.json index e1f8b9a0453..6808cf8a9ba 100644 --- a/advisories/unreviewed/2022/05/GHSA-x5pm-xx4m-ggx2/GHSA-x5pm-xx4m-ggx2.json +++ b/advisories/unreviewed/2022/05/GHSA-x5pm-xx4m-ggx2/GHSA-x5pm-xx4m-ggx2.json @@ -7,12 +7,8 @@ "CVE-2020-11287" ], "details": "Allowing RTT frames to be linked with non randomized MAC address by comparing the sequence numbers can lead to information disclosure. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x5wc-772j-qv7j/GHSA-x5wc-772j-qv7j.json b/advisories/unreviewed/2022/05/GHSA-x5wc-772j-qv7j/GHSA-x5wc-772j-qv7j.json index 2d44362b2cc..2c3db593094 100644 --- a/advisories/unreviewed/2022/05/GHSA-x5wc-772j-qv7j/GHSA-x5wc-772j-qv7j.json +++ b/advisories/unreviewed/2022/05/GHSA-x5wc-772j-qv7j/GHSA-x5wc-772j-qv7j.json @@ -7,12 +7,8 @@ "CVE-2021-0401" ], "details": "In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05418265.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x682-pjg8-jch2/GHSA-x682-pjg8-jch2.json b/advisories/unreviewed/2022/05/GHSA-x682-pjg8-jch2/GHSA-x682-pjg8-jch2.json index aa0d5911f2d..c2ccd4c8475 100644 --- a/advisories/unreviewed/2022/05/GHSA-x682-pjg8-jch2/GHSA-x682-pjg8-jch2.json +++ b/advisories/unreviewed/2022/05/GHSA-x682-pjg8-jch2/GHSA-x682-pjg8-jch2.json @@ -7,12 +7,8 @@ "CVE-2021-27369" ], "details": "The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x87g-4c45-mvv5/GHSA-x87g-4c45-mvv5.json b/advisories/unreviewed/2022/05/GHSA-x87g-4c45-mvv5/GHSA-x87g-4c45-mvv5.json index 9459530de03..c822388f128 100644 --- a/advisories/unreviewed/2022/05/GHSA-x87g-4c45-mvv5/GHSA-x87g-4c45-mvv5.json +++ b/advisories/unreviewed/2022/05/GHSA-x87g-4c45-mvv5/GHSA-x87g-4c45-mvv5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x8jm-gv8p-6967/GHSA-x8jm-gv8p-6967.json b/advisories/unreviewed/2022/05/GHSA-x8jm-gv8p-6967/GHSA-x8jm-gv8p-6967.json index 0b7af6bad1c..74860a14aa1 100644 --- a/advisories/unreviewed/2022/05/GHSA-x8jm-gv8p-6967/GHSA-x8jm-gv8p-6967.json +++ b/advisories/unreviewed/2022/05/GHSA-x8jm-gv8p-6967/GHSA-x8jm-gv8p-6967.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xgvx-m8xh-737m/GHSA-xgvx-m8xh-737m.json b/advisories/unreviewed/2022/05/GHSA-xgvx-m8xh-737m/GHSA-xgvx-m8xh-737m.json index 0d24e608b5a..500699ff860 100644 --- a/advisories/unreviewed/2022/05/GHSA-xgvx-m8xh-737m/GHSA-xgvx-m8xh-737m.json +++ b/advisories/unreviewed/2022/05/GHSA-xgvx-m8xh-737m/GHSA-xgvx-m8xh-737m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xh66-6hj7-62mw/GHSA-xh66-6hj7-62mw.json b/advisories/unreviewed/2022/05/GHSA-xh66-6hj7-62mw/GHSA-xh66-6hj7-62mw.json index fb4014ad840..eb5c5438896 100644 --- a/advisories/unreviewed/2022/05/GHSA-xh66-6hj7-62mw/GHSA-xh66-6hj7-62mw.json +++ b/advisories/unreviewed/2022/05/GHSA-xh66-6hj7-62mw/GHSA-xh66-6hj7-62mw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xhff-wwww-hj4w/GHSA-xhff-wwww-hj4w.json b/advisories/unreviewed/2022/05/GHSA-xhff-wwww-hj4w/GHSA-xhff-wwww-hj4w.json index 234fefcb8fa..326f1deb6dd 100644 --- a/advisories/unreviewed/2022/05/GHSA-xhff-wwww-hj4w/GHSA-xhff-wwww-hj4w.json +++ b/advisories/unreviewed/2022/05/GHSA-xhff-wwww-hj4w/GHSA-xhff-wwww-hj4w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xj63-5v6j-3xr7/GHSA-xj63-5v6j-3xr7.json b/advisories/unreviewed/2022/05/GHSA-xj63-5v6j-3xr7/GHSA-xj63-5v6j-3xr7.json index 447351bddb0..a4e544538e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-xj63-5v6j-3xr7/GHSA-xj63-5v6j-3xr7.json +++ b/advisories/unreviewed/2022/05/GHSA-xj63-5v6j-3xr7/GHSA-xj63-5v6j-3xr7.json @@ -7,12 +7,8 @@ "CVE-2019-11684" ], "details": "Improper Access Control in the RCP+ server of the Bosch Video Recording Manager (VRM) component allows arbitrary and unauthenticated access to a limited subset of certificates, stored in the underlying Microsoft Windows operating system. The fixed versions implement modified authentication checks. Prior releases of VRM software version 3.70 are considered unaffected. This vulnerability affects VRM v3.70.x, v3.71 < v3.71.0034 and v3.81 < 3.81.0050; DIVAR IP 5000 3.80 < 3.80.0039; BVMS all versions using VRM.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xjcj-m8p7-67rr/GHSA-xjcj-m8p7-67rr.json b/advisories/unreviewed/2022/05/GHSA-xjcj-m8p7-67rr/GHSA-xjcj-m8p7-67rr.json index 2da63c41955..f7346519f2d 100644 --- a/advisories/unreviewed/2022/05/GHSA-xjcj-m8p7-67rr/GHSA-xjcj-m8p7-67rr.json +++ b/advisories/unreviewed/2022/05/GHSA-xjcj-m8p7-67rr/GHSA-xjcj-m8p7-67rr.json @@ -7,12 +7,8 @@ "CVE-2021-27581" ], "details": "The Blog module in Kentico CMS 5.5 R2 build 5.5.3996 allows SQL injection via the tagname parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xjm8-5h8c-cc2g/GHSA-xjm8-5h8c-cc2g.json b/advisories/unreviewed/2022/05/GHSA-xjm8-5h8c-cc2g/GHSA-xjm8-5h8c-cc2g.json index 779636d467b..c58d9663bd4 100644 --- a/advisories/unreviewed/2022/05/GHSA-xjm8-5h8c-cc2g/GHSA-xjm8-5h8c-cc2g.json +++ b/advisories/unreviewed/2022/05/GHSA-xjm8-5h8c-cc2g/GHSA-xjm8-5h8c-cc2g.json @@ -7,12 +7,8 @@ "CVE-2021-25346" ], "details": "A possible arbitrary memory overwrite vulnerabilities in quram library version prior to SMR Jan-2021 Release 1 allow arbitrary code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xjvm-vf2p-w3rh/GHSA-xjvm-vf2p-w3rh.json b/advisories/unreviewed/2022/05/GHSA-xjvm-vf2p-w3rh/GHSA-xjvm-vf2p-w3rh.json index b096557e0d8..0e0ff72779b 100644 --- a/advisories/unreviewed/2022/05/GHSA-xjvm-vf2p-w3rh/GHSA-xjvm-vf2p-w3rh.json +++ b/advisories/unreviewed/2022/05/GHSA-xjvm-vf2p-w3rh/GHSA-xjvm-vf2p-w3rh.json @@ -7,12 +7,8 @@ "CVE-2020-4931" ], "details": "IBM MQ 9.1 LTS, 9.2 LTS, and 9.1 CD AMQP Channels could allow an authenticated user to cause a denial of service due to an issue processing messages. IBM X-Force ID: 191747.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xm78-jfcw-x97f/GHSA-xm78-jfcw-x97f.json b/advisories/unreviewed/2022/05/GHSA-xm78-jfcw-x97f/GHSA-xm78-jfcw-x97f.json index 2cb615f1b54..7266838cad5 100644 --- a/advisories/unreviewed/2022/05/GHSA-xm78-jfcw-x97f/GHSA-xm78-jfcw-x97f.json +++ b/advisories/unreviewed/2022/05/GHSA-xm78-jfcw-x97f/GHSA-xm78-jfcw-x97f.json @@ -7,12 +7,8 @@ "CVE-2021-26704" ], "details": "EPrints 3.4.2 allows remote attackers to execute arbitrary commands via crafted input to the verb parameter in a cgi/toolbox/toolbox URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xm85-53qc-rpxj/GHSA-xm85-53qc-rpxj.json b/advisories/unreviewed/2022/05/GHSA-xm85-53qc-rpxj/GHSA-xm85-53qc-rpxj.json index 265b0164ef8..2f5301d57a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-xm85-53qc-rpxj/GHSA-xm85-53qc-rpxj.json +++ b/advisories/unreviewed/2022/05/GHSA-xm85-53qc-rpxj/GHSA-xm85-53qc-rpxj.json @@ -7,12 +7,8 @@ "CVE-2020-26200" ], "details": "A component of Kaspersky custom boot loader allowed loading of untrusted UEFI modules due to insufficient check of their authenticity. This component is incorporated in Kaspersky Rescue Disk (KRD) and was trusted by the Authentication Agent of Full Disk Encryption in Kaspersky Endpoint Security (KES). This issue allowed to bypass the UEFI Secure Boot security feature. An attacker would need physical access to the computer to exploit it. Otherwise, local administrator privileges would be required to modify the boot loader component.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xmmq-jpx2-43px/GHSA-xmmq-jpx2-43px.json b/advisories/unreviewed/2022/05/GHSA-xmmq-jpx2-43px/GHSA-xmmq-jpx2-43px.json index bc1ff7fecef..5dd2763af3c 100644 --- a/advisories/unreviewed/2022/05/GHSA-xmmq-jpx2-43px/GHSA-xmmq-jpx2-43px.json +++ b/advisories/unreviewed/2022/05/GHSA-xmmq-jpx2-43px/GHSA-xmmq-jpx2-43px.json @@ -7,12 +7,8 @@ "CVE-2021-1396" ], "details": "Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information, create diagnostic files, and make limited configuration changes. For more information about these vulnerabilities, see the Details section of this advisory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xq2q-96g9-r4pc/GHSA-xq2q-96g9-r4pc.json b/advisories/unreviewed/2022/05/GHSA-xq2q-96g9-r4pc/GHSA-xq2q-96g9-r4pc.json index 5d92f7cf9ed..aaf000a5168 100644 --- a/advisories/unreviewed/2022/05/GHSA-xq2q-96g9-r4pc/GHSA-xq2q-96g9-r4pc.json +++ b/advisories/unreviewed/2022/05/GHSA-xq2q-96g9-r4pc/GHSA-xq2q-96g9-r4pc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xvgm-94gf-3957/GHSA-xvgm-94gf-3957.json b/advisories/unreviewed/2022/05/GHSA-xvgm-94gf-3957/GHSA-xvgm-94gf-3957.json index 0b9cf1442bb..ffd144592a1 100644 --- a/advisories/unreviewed/2022/05/GHSA-xvgm-94gf-3957/GHSA-xvgm-94gf-3957.json +++ b/advisories/unreviewed/2022/05/GHSA-xvgm-94gf-3957/GHSA-xvgm-94gf-3957.json @@ -7,12 +7,8 @@ "CVE-2021-3124" ], "details": "Stored cross-site scripting (XSS) in form field in robust.systems product Custom Global Variables v 1.0.5 allows a remote attacker to inject arbitrary code via the vars[0][name] field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xvr9-jr9p-grf3/GHSA-xvr9-jr9p-grf3.json b/advisories/unreviewed/2022/05/GHSA-xvr9-jr9p-grf3/GHSA-xvr9-jr9p-grf3.json index 9d02f09cdfe..94b48938840 100644 --- a/advisories/unreviewed/2022/05/GHSA-xvr9-jr9p-grf3/GHSA-xvr9-jr9p-grf3.json +++ b/advisories/unreviewed/2022/05/GHSA-xvr9-jr9p-grf3/GHSA-xvr9-jr9p-grf3.json @@ -7,12 +7,8 @@ "CVE-2020-24036" ], "details": "PHP object injection in the Ajax endpoint of the backend in ForkCMS below version 5.8.3 allows an authenticated remote user to execute malicious code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xx4w-vp73-2842/GHSA-xx4w-vp73-2842.json b/advisories/unreviewed/2022/05/GHSA-xx4w-vp73-2842/GHSA-xx4w-vp73-2842.json index 36e4a6b60c1..2b75a72312f 100644 --- a/advisories/unreviewed/2022/05/GHSA-xx4w-vp73-2842/GHSA-xx4w-vp73-2842.json +++ b/advisories/unreviewed/2022/05/GHSA-xx4w-vp73-2842/GHSA-xx4w-vp73-2842.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xx8c-rpq7-pg6p/GHSA-xx8c-rpq7-pg6p.json b/advisories/unreviewed/2022/05/GHSA-xx8c-rpq7-pg6p/GHSA-xx8c-rpq7-pg6p.json index 049747bdf1b..df900095641 100644 --- a/advisories/unreviewed/2022/05/GHSA-xx8c-rpq7-pg6p/GHSA-xx8c-rpq7-pg6p.json +++ b/advisories/unreviewed/2022/05/GHSA-xx8c-rpq7-pg6p/GHSA-xx8c-rpq7-pg6p.json @@ -7,12 +7,8 @@ "CVE-2021-26926" ], "details": "A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program crash.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-c68j-5prp-rc5r/GHSA-c68j-5prp-rc5r.json b/advisories/unreviewed/2022/08/GHSA-c68j-5prp-rc5r/GHSA-c68j-5prp-rc5r.json index 6a5a56164f0..30b60c9ac63 100644 --- a/advisories/unreviewed/2022/08/GHSA-c68j-5prp-rc5r/GHSA-c68j-5prp-rc5r.json +++ b/advisories/unreviewed/2022/08/GHSA-c68j-5prp-rc5r/GHSA-c68j-5prp-rc5r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-9c97-cr35-rhc3/GHSA-9c97-cr35-rhc3.json b/advisories/unreviewed/2022/09/GHSA-9c97-cr35-rhc3/GHSA-9c97-cr35-rhc3.json index 6c463749f36..1d3ea8d7cb3 100644 --- a/advisories/unreviewed/2022/09/GHSA-9c97-cr35-rhc3/GHSA-9c97-cr35-rhc3.json +++ b/advisories/unreviewed/2022/09/GHSA-9c97-cr35-rhc3/GHSA-9c97-cr35-rhc3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-f8g9-2rhq-m53g/GHSA-f8g9-2rhq-m53g.json b/advisories/unreviewed/2022/09/GHSA-f8g9-2rhq-m53g/GHSA-f8g9-2rhq-m53g.json index 3b1342ee823..edc3b811804 100644 --- a/advisories/unreviewed/2022/09/GHSA-f8g9-2rhq-m53g/GHSA-f8g9-2rhq-m53g.json +++ b/advisories/unreviewed/2022/09/GHSA-f8g9-2rhq-m53g/GHSA-f8g9-2rhq-m53g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-cfxr-5c54-rj3m/GHSA-cfxr-5c54-rj3m.json b/advisories/unreviewed/2022/12/GHSA-cfxr-5c54-rj3m/GHSA-cfxr-5c54-rj3m.json index d2da858f396..d026fec319d 100644 --- a/advisories/unreviewed/2022/12/GHSA-cfxr-5c54-rj3m/GHSA-cfxr-5c54-rj3m.json +++ b/advisories/unreviewed/2022/12/GHSA-cfxr-5c54-rj3m/GHSA-cfxr-5c54-rj3m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-xj56-q6pv-vrx6/GHSA-xj56-q6pv-vrx6.json b/advisories/unreviewed/2022/12/GHSA-xj56-q6pv-vrx6/GHSA-xj56-q6pv-vrx6.json index 0215db8260f..7dd1625fdea 100644 --- a/advisories/unreviewed/2022/12/GHSA-xj56-q6pv-vrx6/GHSA-xj56-q6pv-vrx6.json +++ b/advisories/unreviewed/2022/12/GHSA-xj56-q6pv-vrx6/GHSA-xj56-q6pv-vrx6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-8788-qqrx-g6jg/GHSA-8788-qqrx-g6jg.json b/advisories/unreviewed/2023/01/GHSA-8788-qqrx-g6jg/GHSA-8788-qqrx-g6jg.json index 75bf657edc0..e9c231e96c6 100644 --- a/advisories/unreviewed/2023/01/GHSA-8788-qqrx-g6jg/GHSA-8788-qqrx-g6jg.json +++ b/advisories/unreviewed/2023/01/GHSA-8788-qqrx-g6jg/GHSA-8788-qqrx-g6jg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-222x-4qhm-7h5f/GHSA-222x-4qhm-7h5f.json b/advisories/unreviewed/2023/02/GHSA-222x-4qhm-7h5f/GHSA-222x-4qhm-7h5f.json index 6a664005fb3..9f8453641c6 100644 --- a/advisories/unreviewed/2023/02/GHSA-222x-4qhm-7h5f/GHSA-222x-4qhm-7h5f.json +++ b/advisories/unreviewed/2023/02/GHSA-222x-4qhm-7h5f/GHSA-222x-4qhm-7h5f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-26c3-c3ww-r8vj/GHSA-26c3-c3ww-r8vj.json b/advisories/unreviewed/2023/02/GHSA-26c3-c3ww-r8vj/GHSA-26c3-c3ww-r8vj.json index 1c737ca55c6..6475c3be840 100644 --- a/advisories/unreviewed/2023/02/GHSA-26c3-c3ww-r8vj/GHSA-26c3-c3ww-r8vj.json +++ b/advisories/unreviewed/2023/02/GHSA-26c3-c3ww-r8vj/GHSA-26c3-c3ww-r8vj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-2m8w-xj74-wv7h/GHSA-2m8w-xj74-wv7h.json b/advisories/unreviewed/2023/02/GHSA-2m8w-xj74-wv7h/GHSA-2m8w-xj74-wv7h.json index 394a6b58726..13443f083e9 100644 --- a/advisories/unreviewed/2023/02/GHSA-2m8w-xj74-wv7h/GHSA-2m8w-xj74-wv7h.json +++ b/advisories/unreviewed/2023/02/GHSA-2m8w-xj74-wv7h/GHSA-2m8w-xj74-wv7h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-32gr-j934-98f7/GHSA-32gr-j934-98f7.json b/advisories/unreviewed/2023/02/GHSA-32gr-j934-98f7/GHSA-32gr-j934-98f7.json index a2904ea1c30..ef31601c9a2 100644 --- a/advisories/unreviewed/2023/02/GHSA-32gr-j934-98f7/GHSA-32gr-j934-98f7.json +++ b/advisories/unreviewed/2023/02/GHSA-32gr-j934-98f7/GHSA-32gr-j934-98f7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-33gm-x234-gjx5/GHSA-33gm-x234-gjx5.json b/advisories/unreviewed/2023/02/GHSA-33gm-x234-gjx5/GHSA-33gm-x234-gjx5.json index f034fc9e29b..28f00157e60 100644 --- a/advisories/unreviewed/2023/02/GHSA-33gm-x234-gjx5/GHSA-33gm-x234-gjx5.json +++ b/advisories/unreviewed/2023/02/GHSA-33gm-x234-gjx5/GHSA-33gm-x234-gjx5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-33h2-c39r-888q/GHSA-33h2-c39r-888q.json b/advisories/unreviewed/2023/02/GHSA-33h2-c39r-888q/GHSA-33h2-c39r-888q.json index 6c278db11fc..32b9bdbc684 100644 --- a/advisories/unreviewed/2023/02/GHSA-33h2-c39r-888q/GHSA-33h2-c39r-888q.json +++ b/advisories/unreviewed/2023/02/GHSA-33h2-c39r-888q/GHSA-33h2-c39r-888q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-3mg2-w983-r26q/GHSA-3mg2-w983-r26q.json b/advisories/unreviewed/2023/02/GHSA-3mg2-w983-r26q/GHSA-3mg2-w983-r26q.json index 6e70f924672..2e5959b9ccf 100644 --- a/advisories/unreviewed/2023/02/GHSA-3mg2-w983-r26q/GHSA-3mg2-w983-r26q.json +++ b/advisories/unreviewed/2023/02/GHSA-3mg2-w983-r26q/GHSA-3mg2-w983-r26q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-525g-j2g4-q3rq/GHSA-525g-j2g4-q3rq.json b/advisories/unreviewed/2023/02/GHSA-525g-j2g4-q3rq/GHSA-525g-j2g4-q3rq.json index 49576e42428..ef9933d56e3 100644 --- a/advisories/unreviewed/2023/02/GHSA-525g-j2g4-q3rq/GHSA-525g-j2g4-q3rq.json +++ b/advisories/unreviewed/2023/02/GHSA-525g-j2g4-q3rq/GHSA-525g-j2g4-q3rq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-5mv8-rhrv-42gh/GHSA-5mv8-rhrv-42gh.json b/advisories/unreviewed/2023/02/GHSA-5mv8-rhrv-42gh/GHSA-5mv8-rhrv-42gh.json index 98a84ef938a..76c0a574887 100644 --- a/advisories/unreviewed/2023/02/GHSA-5mv8-rhrv-42gh/GHSA-5mv8-rhrv-42gh.json +++ b/advisories/unreviewed/2023/02/GHSA-5mv8-rhrv-42gh/GHSA-5mv8-rhrv-42gh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-68h6-hrx4-35m4/GHSA-68h6-hrx4-35m4.json b/advisories/unreviewed/2023/02/GHSA-68h6-hrx4-35m4/GHSA-68h6-hrx4-35m4.json index ec91a271f79..3a97926bb6d 100644 --- a/advisories/unreviewed/2023/02/GHSA-68h6-hrx4-35m4/GHSA-68h6-hrx4-35m4.json +++ b/advisories/unreviewed/2023/02/GHSA-68h6-hrx4-35m4/GHSA-68h6-hrx4-35m4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-6x57-mq48-25mv/GHSA-6x57-mq48-25mv.json b/advisories/unreviewed/2023/02/GHSA-6x57-mq48-25mv/GHSA-6x57-mq48-25mv.json index c82c1182321..e3e1f04fab0 100644 --- a/advisories/unreviewed/2023/02/GHSA-6x57-mq48-25mv/GHSA-6x57-mq48-25mv.json +++ b/advisories/unreviewed/2023/02/GHSA-6x57-mq48-25mv/GHSA-6x57-mq48-25mv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-88h3-v66m-cv23/GHSA-88h3-v66m-cv23.json b/advisories/unreviewed/2023/02/GHSA-88h3-v66m-cv23/GHSA-88h3-v66m-cv23.json index c37c62f770f..dede15de75f 100644 --- a/advisories/unreviewed/2023/02/GHSA-88h3-v66m-cv23/GHSA-88h3-v66m-cv23.json +++ b/advisories/unreviewed/2023/02/GHSA-88h3-v66m-cv23/GHSA-88h3-v66m-cv23.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-9q2f-m82h-h6rp/GHSA-9q2f-m82h-h6rp.json b/advisories/unreviewed/2023/02/GHSA-9q2f-m82h-h6rp/GHSA-9q2f-m82h-h6rp.json index 1e82e56e603..360e072c722 100644 --- a/advisories/unreviewed/2023/02/GHSA-9q2f-m82h-h6rp/GHSA-9q2f-m82h-h6rp.json +++ b/advisories/unreviewed/2023/02/GHSA-9q2f-m82h-h6rp/GHSA-9q2f-m82h-h6rp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-9xqm-m59j-x893/GHSA-9xqm-m59j-x893.json b/advisories/unreviewed/2023/02/GHSA-9xqm-m59j-x893/GHSA-9xqm-m59j-x893.json index db1080e0ee1..a911a763e04 100644 --- a/advisories/unreviewed/2023/02/GHSA-9xqm-m59j-x893/GHSA-9xqm-m59j-x893.json +++ b/advisories/unreviewed/2023/02/GHSA-9xqm-m59j-x893/GHSA-9xqm-m59j-x893.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-c73x-h54w-jq65/GHSA-c73x-h54w-jq65.json b/advisories/unreviewed/2023/02/GHSA-c73x-h54w-jq65/GHSA-c73x-h54w-jq65.json index 83365732e95..a72956ab454 100644 --- a/advisories/unreviewed/2023/02/GHSA-c73x-h54w-jq65/GHSA-c73x-h54w-jq65.json +++ b/advisories/unreviewed/2023/02/GHSA-c73x-h54w-jq65/GHSA-c73x-h54w-jq65.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-c924-38p9-78hh/GHSA-c924-38p9-78hh.json b/advisories/unreviewed/2023/02/GHSA-c924-38p9-78hh/GHSA-c924-38p9-78hh.json index faf0936c464..d8eb3f56204 100644 --- a/advisories/unreviewed/2023/02/GHSA-c924-38p9-78hh/GHSA-c924-38p9-78hh.json +++ b/advisories/unreviewed/2023/02/GHSA-c924-38p9-78hh/GHSA-c924-38p9-78hh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-cr8w-xxqw-fm2m/GHSA-cr8w-xxqw-fm2m.json b/advisories/unreviewed/2023/02/GHSA-cr8w-xxqw-fm2m/GHSA-cr8w-xxqw-fm2m.json index 988f18704c7..9017525a962 100644 --- a/advisories/unreviewed/2023/02/GHSA-cr8w-xxqw-fm2m/GHSA-cr8w-xxqw-fm2m.json +++ b/advisories/unreviewed/2023/02/GHSA-cr8w-xxqw-fm2m/GHSA-cr8w-xxqw-fm2m.json @@ -7,12 +7,8 @@ "CVE-2023-1018" ], "details": "An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte read past the end of a TPM2.0 command in the CryptParameterDecryption routine. An attacker who can successfully exploit this vulnerability can read or access sensitive data stored in the TPM.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-fjg6-cxgj-mf3h/GHSA-fjg6-cxgj-mf3h.json b/advisories/unreviewed/2023/02/GHSA-fjg6-cxgj-mf3h/GHSA-fjg6-cxgj-mf3h.json index d5bcb32415b..883d2889222 100644 --- a/advisories/unreviewed/2023/02/GHSA-fjg6-cxgj-mf3h/GHSA-fjg6-cxgj-mf3h.json +++ b/advisories/unreviewed/2023/02/GHSA-fjg6-cxgj-mf3h/GHSA-fjg6-cxgj-mf3h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-gpp4-r7hj-jx6g/GHSA-gpp4-r7hj-jx6g.json b/advisories/unreviewed/2023/02/GHSA-gpp4-r7hj-jx6g/GHSA-gpp4-r7hj-jx6g.json index 280a78e1009..cc4cac81b9a 100644 --- a/advisories/unreviewed/2023/02/GHSA-gpp4-r7hj-jx6g/GHSA-gpp4-r7hj-jx6g.json +++ b/advisories/unreviewed/2023/02/GHSA-gpp4-r7hj-jx6g/GHSA-gpp4-r7hj-jx6g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-h2h5-5v73-3q9c/GHSA-h2h5-5v73-3q9c.json b/advisories/unreviewed/2023/02/GHSA-h2h5-5v73-3q9c/GHSA-h2h5-5v73-3q9c.json index cd0d3deb7e8..0b7f3fd79ca 100644 --- a/advisories/unreviewed/2023/02/GHSA-h2h5-5v73-3q9c/GHSA-h2h5-5v73-3q9c.json +++ b/advisories/unreviewed/2023/02/GHSA-h2h5-5v73-3q9c/GHSA-h2h5-5v73-3q9c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-hg47-49fq-q324/GHSA-hg47-49fq-q324.json b/advisories/unreviewed/2023/02/GHSA-hg47-49fq-q324/GHSA-hg47-49fq-q324.json index 1e81b00c66a..c96ce50e278 100644 --- a/advisories/unreviewed/2023/02/GHSA-hg47-49fq-q324/GHSA-hg47-49fq-q324.json +++ b/advisories/unreviewed/2023/02/GHSA-hg47-49fq-q324/GHSA-hg47-49fq-q324.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-j2p5-wh5f-rq2f/GHSA-j2p5-wh5f-rq2f.json b/advisories/unreviewed/2023/02/GHSA-j2p5-wh5f-rq2f/GHSA-j2p5-wh5f-rq2f.json index 3bbdbf14907..ec78f9f7f8a 100644 --- a/advisories/unreviewed/2023/02/GHSA-j2p5-wh5f-rq2f/GHSA-j2p5-wh5f-rq2f.json +++ b/advisories/unreviewed/2023/02/GHSA-j2p5-wh5f-rq2f/GHSA-j2p5-wh5f-rq2f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-jp4v-7j7r-jrc5/GHSA-jp4v-7j7r-jrc5.json b/advisories/unreviewed/2023/02/GHSA-jp4v-7j7r-jrc5/GHSA-jp4v-7j7r-jrc5.json index 5e95cb654be..723edb30d70 100644 --- a/advisories/unreviewed/2023/02/GHSA-jp4v-7j7r-jrc5/GHSA-jp4v-7j7r-jrc5.json +++ b/advisories/unreviewed/2023/02/GHSA-jp4v-7j7r-jrc5/GHSA-jp4v-7j7r-jrc5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-mrmq-w889-437f/GHSA-mrmq-w889-437f.json b/advisories/unreviewed/2023/02/GHSA-mrmq-w889-437f/GHSA-mrmq-w889-437f.json index 85f81bcfb55..25483d5e0ce 100644 --- a/advisories/unreviewed/2023/02/GHSA-mrmq-w889-437f/GHSA-mrmq-w889-437f.json +++ b/advisories/unreviewed/2023/02/GHSA-mrmq-w889-437f/GHSA-mrmq-w889-437f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-pxm3-f86h-vqrh/GHSA-pxm3-f86h-vqrh.json b/advisories/unreviewed/2023/02/GHSA-pxm3-f86h-vqrh/GHSA-pxm3-f86h-vqrh.json index cc9eaf1de8b..8ed4e8d155a 100644 --- a/advisories/unreviewed/2023/02/GHSA-pxm3-f86h-vqrh/GHSA-pxm3-f86h-vqrh.json +++ b/advisories/unreviewed/2023/02/GHSA-pxm3-f86h-vqrh/GHSA-pxm3-f86h-vqrh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-qmx9-wr57-3mx9/GHSA-qmx9-wr57-3mx9.json b/advisories/unreviewed/2023/02/GHSA-qmx9-wr57-3mx9/GHSA-qmx9-wr57-3mx9.json index 249a4cb360c..dd05f56c575 100644 --- a/advisories/unreviewed/2023/02/GHSA-qmx9-wr57-3mx9/GHSA-qmx9-wr57-3mx9.json +++ b/advisories/unreviewed/2023/02/GHSA-qmx9-wr57-3mx9/GHSA-qmx9-wr57-3mx9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-qrgj-qccj-whvx/GHSA-qrgj-qccj-whvx.json b/advisories/unreviewed/2023/02/GHSA-qrgj-qccj-whvx/GHSA-qrgj-qccj-whvx.json index acb81546105..fc5a36dc3f2 100644 --- a/advisories/unreviewed/2023/02/GHSA-qrgj-qccj-whvx/GHSA-qrgj-qccj-whvx.json +++ b/advisories/unreviewed/2023/02/GHSA-qrgj-qccj-whvx/GHSA-qrgj-qccj-whvx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-v655-j5c9-6fx6/GHSA-v655-j5c9-6fx6.json b/advisories/unreviewed/2023/02/GHSA-v655-j5c9-6fx6/GHSA-v655-j5c9-6fx6.json index 66c8c91d0ab..e529cc9f0d8 100644 --- a/advisories/unreviewed/2023/02/GHSA-v655-j5c9-6fx6/GHSA-v655-j5c9-6fx6.json +++ b/advisories/unreviewed/2023/02/GHSA-v655-j5c9-6fx6/GHSA-v655-j5c9-6fx6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-v8vq-prc2-j6gx/GHSA-v8vq-prc2-j6gx.json b/advisories/unreviewed/2023/02/GHSA-v8vq-prc2-j6gx/GHSA-v8vq-prc2-j6gx.json index 9dca16f3b20..eef7c34cc77 100644 --- a/advisories/unreviewed/2023/02/GHSA-v8vq-prc2-j6gx/GHSA-v8vq-prc2-j6gx.json +++ b/advisories/unreviewed/2023/02/GHSA-v8vq-prc2-j6gx/GHSA-v8vq-prc2-j6gx.json @@ -7,12 +7,8 @@ "CVE-2023-23916" ], "details": "An allocation of resources without limits or throttling vulnerability exists in curl