netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-589w-p7g5-j9f7
GHSA-6h6x-2w77-g8ff
GHSA-835v-757c-5xp4
GHSA-f7w3-5qrp-w366
GHSA-jf45-gpgx-q896
GHSA-p65q-g2jh-6h2p
GHSA-pc8p-p24v-x4w9
GHSA-qc95-8fhj-7w2p
GHSA-r9rm-6hq8-gjx5
GHSA-rc53-7w76-rh28
GHSA-v5mf-w56g-h37h
GHSA-wr6r-9j99-vcgv
GHSA-wrv4-vrjr-m5jr
GHSA-x5fc-fxp8-hf5q
GHSA-x9xv-c2rh-4ggr
GHSA-xfjf-878m-6487
This commit is contained in:
advisory-database[bot]
2023-07-10 03:31:34 +00:00
parent 33df004d35
commit 48fd502c87
16 changed files with 192 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/07/GHSA-589w-p7g5-j9f7/GHSA-589w-p7g5-j9f7.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-589w-p7g5-j9f7",
"modified": "2023-07-04T03:31:56Z",
"modified": "2023-07-10T03:30:24Z",
"published": "2023-07-04T03:31:56Z",
"aliases": [
"CVE-2023-20771"
],
"details": "In display, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07671046; Issue ID: ALPS07671046.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-362"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/07/GHSA-6h6x-2w77-g8ff/GHSA-6h6x-2w77-g8ff.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6h6x-2w77-g8ff",
"modified": "2023-07-10T03:30:24Z",
"published": "2023-07-10T03:30:24Z",
"aliases": [
"CVE-2023-37287"
],
"details": "SmartBPM.NET has a vulnerability of using hard-coded authentication key. An unauthenticated remote attacker can exploit this vulnerability to access system with regular user privilege to read application data, and execute submission and approval processes.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37287"
},
{
"type": "WEB",
"url": "https://www.twcert.org.tw/tw/cp-132-7222-cdfd0-1.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-798"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/07/GHSA-835v-757c-5xp4/GHSA-835v-757c-5xp4.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-835v-757c-5xp4",
"modified": "2023-07-04T03:31:56Z",
"modified": "2023-07-10T03:30:24Z",
"published": "2023-07-04T03:31:56Z",
"aliases": [
"CVE-2023-20766"
],
"details": "In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573237; Issue ID: ALPS07573202.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/07/GHSA-f7w3-5qrp-w366/GHSA-f7w3-5qrp-w366.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f7w3-5qrp-w366",
"modified": "2023-07-10T03:30:24Z",
"published": "2023-07-10T03:30:24Z",
"aliases": [
"CVE-2023-37286"
],
"details": "SmartSoft SmartBPM.NET has a vulnerability of using hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code and disrupt service.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37286"
},
{
"type": "WEB",
"url": "https://www.twcert.org.tw/tw/cp-132-7221-438c6-1.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-798"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/07/GHSA-jf45-gpgx-q896/GHSA-jf45-gpgx-q896.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jf45-gpgx-q896",
"modified": "2023-07-04T03:31:56Z",
"modified": "2023-07-10T03:30:24Z",
"published": "2023-07-04T03:31:56Z",
"aliases": [
"CVE-2023-20761"
],
"details": "In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628604; Issue ID: ALPS07628582.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/07/GHSA-p65q-g2jh-6h2p/GHSA-p65q-g2jh-6h2p.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p65q-g2jh-6h2p",
"modified": "2023-07-04T03:31:56Z",
"modified": "2023-07-10T03:30:24Z",
"published": "2023-07-04T03:31:56Z",
"aliases": [
"CVE-2023-20768"
],
"details": "In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07560720; Issue ID: ALPS07559800.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-843"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/07/GHSA-pc8p-p24v-x4w9/GHSA-pc8p-p24v-x4w9.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pc8p-p24v-x4w9",
"modified": "2023-07-04T03:31:56Z",
"modified": "2023-07-10T03:30:24Z",
"published": "2023-07-04T03:31:56Z",
"aliases": [
"CVE-2023-20772"
],
"details": "In vow, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441796; Issue ID: ALPS07441796.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-862"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/07/GHSA-qc95-8fhj-7w2p/GHSA-qc95-8fhj-7w2p.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qc95-8fhj-7w2p",
"modified": "2023-07-04T03:31:56Z",
"modified": "2023-07-10T03:30:24Z",
"published": "2023-07-04T03:31:56Z",
"aliases": [
"CVE-2023-20773"
],
"details": "In vow, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07611449; Issue ID: ALPS07441735.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-862"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/07/GHSA-r9rm-6hq8-gjx5/GHSA-r9rm-6hq8-gjx5.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r9rm-6hq8-gjx5",
"modified": "2023-07-04T03:31:56Z",
"modified": "2023-07-10T03:30:24Z",
"published": "2023-07-04T03:31:56Z",
"aliases": [
"CVE-2023-20767"
],
"details": "In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629585; Issue ID: ALPS07629584.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/07/GHSA-rc53-7w76-rh28/GHSA-rc53-7w76-rh28.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rc53-7w76-rh28",
"modified": "2023-07-04T03:31:56Z",
"modified": "2023-07-10T03:30:23Z",
"published": "2023-07-04T03:31:56Z",
"aliases": [
"CVE-2023-20759"
],
"details": "In cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07634601.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/07/GHSA-v5mf-w56g-h37h/GHSA-v5mf-w56g-h37h.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v5mf-w56g-h37h",
"modified": "2023-07-04T03:31:55Z",
"modified": "2023-07-10T03:30:23Z",
"published": "2023-07-04T03:31:55Z",
"aliases": [
"CVE-2023-20757"
],
"details": "In cmdq, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07636133.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/07/GHSA-wr6r-9j99-vcgv/GHSA-wr6r-9j99-vcgv.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wr6r-9j99-vcgv",
"modified": "2023-07-04T03:31:56Z",
"modified": "2023-07-10T03:30:24Z",
"published": "2023-07-04T03:31:56Z",
"aliases": [
"CVE-2023-20774"
],
"details": "In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07292228; Issue ID: ALPS07292228.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/07/GHSA-wrv4-vrjr-m5jr/GHSA-wrv4-vrjr-m5jr.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wrv4-vrjr-m5jr",
"modified": "2023-07-10T03:30:24Z",
"published": "2023-07-10T03:30:24Z",
"aliases": [
"CVE-2023-37288"
],
"details": "SmartBPM.NET has a vulnerability of using hard-coded authentication key. An unauthenticated remote attacker can exploit this vulnerability to access system with regular user privilege to read application data, and execute submission and approval processes.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37288"
},
{
"type": "WEB",
"url": "https://www.twcert.org.tw/tw/cp-132-7223-af8f8-1.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-23"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/07/GHSA-x5fc-fxp8-hf5q/GHSA-x5fc-fxp8-hf5q.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x5fc-fxp8-hf5q",
"modified": "2023-07-04T03:31:56Z",
"modified": "2023-07-10T03:30:23Z",
"published": "2023-07-04T03:31:56Z",
"aliases": [
"CVE-2023-20760"
],
"details": "In apu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629578; Issue ID: ALPS07629578.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/07/GHSA-x9xv-c2rh-4ggr/GHSA-x9xv-c2rh-4ggr.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x9xv-c2rh-4ggr",
"modified": "2023-07-04T03:31:55Z",
"modified": "2023-07-10T03:30:23Z",
"published": "2023-07-04T03:31:55Z",
"aliases": [
"CVE-2023-20758"
],
"details": "In cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07636130.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/07/GHSA-xfjf-878m-6487/GHSA-xfjf-878m-6487.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xfjf-878m-6487",
"modified": "2023-07-04T03:31:56Z",
"modified": "2023-07-10T03:30:24Z",
"published": "2023-07-04T03:31:56Z",
"aliases": [
"CVE-2023-20775"
],
"details": "In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07978760; Issue ID: ALPS07363410.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"github_reviewed": false,