netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-08-08 18:32:49 +00:00
parent aca2cb6420
commit 483eeeb1ec
57 changed files with 1010 additions and 105 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/03/GHSA-frcq-c5pr-jg4q/GHSA-frcq-c5pr-jg4q.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-frcq-c5pr-jg4q",
"modified": "2024-03-27T00:30:55Z",
"modified": "2024-08-08T18:31:18Z",
"published": "2024-03-27T00:30:55Z",
"aliases": [
"CVE-2023-50702"
],
"details": "Sikka SSCWindowsService 5 2023-09-14 executes a program as LocalSystem but allows full control by low-privileged users (and low-privileged users have write access to %PROGRAMDATA%\\SSCService). Consequently, low-privileged users can execute arbitrary code as LocalSystem.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-26T23:15:46Z"
advisories/unreviewed/2024/03/GHSA-px8r-9qv3-6525/GHSA-px8r-9qv3-6525.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-px8r-9qv3-6525",
"modified": "2024-03-06T00:31:27Z",
"modified": "2024-08-08T18:31:18Z",
"published": "2024-03-06T00:31:27Z",
"aliases": [
"CVE-2024-27765"
],
"details": "Directory Traversal vulnerability in Jeewms v.3.7 and before allows a remote attacker to obtain sensitive information via the cgformTemplateController component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-22"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-05T23:15:08Z"
advisories/unreviewed/2024/04/GHSA-6cjw-2w3q-pv7g/GHSA-6cjw-2w3q-pv7g.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6cjw-2w3q-pv7g",
"modified": "2024-06-10T18:30:55Z",
"modified": "2024-08-08T18:31:19Z",
"published": "2024-04-19T18:31:15Z",
"aliases": [
"CVE-2023-50008"
],
"details": "Buffer Overflow vulnerability in Ffmpeg v.n6.1-3-g466799d4f5 allows a local attacker to execute arbitrary code via the av_malloc function in libavutil/mem.c:105:9 component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -41,9 +44,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-19T17:15:52Z"
advisories/unreviewed/2024/04/GHSA-7xjx-6mf4-7xgc/GHSA-7xjx-6mf4-7xgc.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7xjx-6mf4-7xgc",
"modified": "2024-04-18T21:30:31Z",
"modified": "2024-08-08T18:31:19Z",
"published": "2024-04-18T21:30:31Z",
"aliases": [
"CVE-2024-30923"
],
"details": "SQL Injection vulnerability in DerbyNet v9.0 and below allows a remote attacker to execute arbitrary code via the where Clause in Racer Document Rendering",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-18T21:15:07Z"
advisories/unreviewed/2024/04/GHSA-8wq2-m78j-qq93/GHSA-8wq2-m78j-qq93.json
+1 -1
View File
@@ -36,7 +36,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/04/GHSA-97rm-7vq8-qwj2/GHSA-97rm-7vq8-qwj2.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-97rm-7vq8-qwj2",
"modified": "2024-04-17T18:31:34Z",
"modified": "2024-08-08T18:31:19Z",
"published": "2024-04-17T18:31:34Z",
"aliases": [
"CVE-2023-5397"
advisories/unreviewed/2024/04/GHSA-h47h-5hqh-63xw/GHSA-h47h-5hqh-63xw.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h47h-5hqh-63xw",
"modified": "2024-04-26T06:30:32Z",
"modified": "2024-08-08T18:31:19Z",
"published": "2024-04-26T06:30:32Z",
"aliases": [
"CVE-2024-22633"
],
"details": "Setor Informatica Sistema Inteligente para Laboratorios (S.I.L.) 388 was discovered to contain a remote code execution (RCE) vulnerability via the hprinter parameter. This vulnerability is triggered via a crafted POST request.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-26T04:15:08Z"
advisories/unreviewed/2024/05/GHSA-8g8j-p6r7-xj34/GHSA-8g8j-p6r7-xj34.json
+7 -4
View File
File diff suppressed because one or more lines are too long
advisories/unreviewed/2024/05/GHSA-c473-m4mh-crhw/GHSA-c473-m4mh-crhw.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c473-m4mh-crhw",
"modified": "2024-05-14T18:31:02Z",
"modified": "2024-08-08T18:31:19Z",
"published": "2024-05-14T18:31:02Z",
"aliases": [
"CVE-2024-35009"
],
"details": "idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/share_switch.php?mudi=switch&dataType=&fieldName=state&fieldName2=state&tabName=banner&dataID=6.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-352"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-14T16:17:30Z"
advisories/unreviewed/2024/05/GHSA-gx5g-rjjv-754q/GHSA-gx5g-rjjv-754q.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/05/GHSA-jmpm-75w8-qgjx/GHSA-jmpm-75w8-qgjx.json
+2 -1
View File
@@ -40,7 +40,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-1264"
"CWE-1264",
"CWE-400"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/05/GHSA-r8x8-rv8c-j266/GHSA-r8x8-rv8c-j266.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r8x8-rv8c-j266",
"modified": "2024-06-10T18:31:03Z",
"modified": "2024-08-08T18:31:19Z",
"published": "2024-05-18T21:30:35Z",
"aliases": [
"CVE-2024-36048"
],
"details": "QAbstractOAuth in Qt Network Authorization in Qt before 5.15.17, 6.x before 6.2.13, 6.3.x through 6.5.x before 6.5.6, and 6.6.x through 6.7.x before 6.7.1 uses only the time to seed the PRNG, which may result in guessable values.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -41,9 +44,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-335"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-18T21:15:47Z"
advisories/unreviewed/2024/05/GHSA-rvfp-m6f3-8v6h/GHSA-rvfp-m6f3-8v6h.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rvfp-m6f3-8v6h",
"modified": "2024-05-14T18:30:49Z",
"modified": "2024-08-08T18:31:19Z",
"published": "2024-05-14T18:30:49Z",
"aliases": [
"CVE-2024-34230"
],
"details": "A cross-site scripting (XSS) vulnerability in Sourcecodester Laboratory Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the System Information parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-14T15:38:37Z"
advisories/unreviewed/2024/05/GHSA-wx4v-qgjj-9f5j/GHSA-wx4v-qgjj-9f5j.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wx4v-qgjj-9f5j",
"modified": "2024-05-20T18:31:24Z",
"modified": "2024-08-08T18:31:19Z",
"published": "2024-05-20T18:31:24Z",
"aliases": [
"CVE-2024-35579"
],
"details": "Tenda AX1806 v1.0.0.1 contains a stack overflow via the iptv.city.vlan parameter in the function formSetIptv.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-20T18:15:10Z"
advisories/unreviewed/2024/06/GHSA-4rvm-m82p-p79p/GHSA-4rvm-m82p-p79p.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/06/GHSA-5729-2v3w-2h7m/GHSA-5729-2v3w-2h7m.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5729-2v3w-2h7m",
"modified": "2024-06-18T12:30:42Z",
"modified": "2024-08-08T18:31:19Z",
"published": "2024-06-18T12:30:42Z",
"aliases": [
"CVE-2024-6110"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2024/06/GHSA-62hv-vfr8-65mw/GHSA-62hv-vfr8-65mw.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-62hv-vfr8-65mw",
"modified": "2024-06-17T21:31:11Z",
"modified": "2024-08-08T18:31:19Z",
"published": "2024-06-17T21:31:11Z",
"aliases": [
"CVE-2024-6065"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2024/06/GHSA-9r6p-56h8-7v76/GHSA-9r6p-56h8-7v76.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9r6p-56h8-7v76",
"modified": "2024-06-17T21:31:11Z",
"modified": "2024-08-08T18:31:19Z",
"published": "2024-06-17T21:31:11Z",
"aliases": [
"CVE-2024-6066"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2024/06/GHSA-gh8f-3437-7ch5/GHSA-gh8f-3437-7ch5.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gh8f-3437-7ch5",
"modified": "2024-06-18T00:31:24Z",
"modified": "2024-08-08T18:31:19Z",
"published": "2024-06-18T00:31:24Z",
"aliases": [
"CVE-2024-6067"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2024/06/GHSA-grm8-7p8f-2rp6/GHSA-grm8-7p8f-2rp6.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-grm8-7p8f-2rp6",
"modified": "2024-06-14T18:31:45Z",
"modified": "2024-08-08T18:31:19Z",
"published": "2024-06-14T18:31:45Z",
"aliases": [
"CVE-2024-36597"
],
"details": "Aegon Life v1.0 was discovered to contain a SQL injection vulnerability via the client_id parameter at clientStatus.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-14T18:15:27Z"

Some files were not shown because too many files have changed in this diff Show More