diff --git a/advisories/unreviewed/2023/07/GHSA-589w-p7g5-j9f7/GHSA-589w-p7g5-j9f7.json b/advisories/unreviewed/2023/07/GHSA-589w-p7g5-j9f7/GHSA-589w-p7g5-j9f7.json index c0cf76c8a50..5ef607dc1a1 100644 --- a/advisories/unreviewed/2023/07/GHSA-589w-p7g5-j9f7/GHSA-589w-p7g5-j9f7.json +++ b/advisories/unreviewed/2023/07/GHSA-589w-p7g5-j9f7/GHSA-589w-p7g5-j9f7.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-589w-p7g5-j9f7", - "modified": "2023-07-04T03:31:56Z", + "modified": "2023-07-10T03:30:24Z", "published": "2023-07-04T03:31:56Z", "aliases": [ "CVE-2023-20771" ], "details": "In display, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07671046; Issue ID: ALPS07671046.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-362" ], "severity": null, "github_reviewed": false, diff --git a/advisories/unreviewed/2023/07/GHSA-6h6x-2w77-g8ff/GHSA-6h6x-2w77-g8ff.json b/advisories/unreviewed/2023/07/GHSA-6h6x-2w77-g8ff/GHSA-6h6x-2w77-g8ff.json new file mode 100644 index 00000000000..fc6e4ee0612 --- /dev/null +++ b/advisories/unreviewed/2023/07/GHSA-6h6x-2w77-g8ff/GHSA-6h6x-2w77-g8ff.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6h6x-2w77-g8ff", + "modified": "2023-07-10T03:30:24Z", + "published": "2023-07-10T03:30:24Z", + "aliases": [ + "CVE-2023-37287" + ], + "details": "SmartBPM.NET has a vulnerability of using hard-coded authentication key. An unauthenticated remote attacker can exploit this vulnerability to access system with regular user privilege to read application data, and execute submission and approval processes.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37287" + }, + { + "type": "WEB", + "url": "https://www.twcert.org.tw/tw/cp-132-7222-cdfd0-1.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-798" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": null + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2023/07/GHSA-835v-757c-5xp4/GHSA-835v-757c-5xp4.json b/advisories/unreviewed/2023/07/GHSA-835v-757c-5xp4/GHSA-835v-757c-5xp4.json index 9cac6960383..7613151500e 100644 --- a/advisories/unreviewed/2023/07/GHSA-835v-757c-5xp4/GHSA-835v-757c-5xp4.json +++ b/advisories/unreviewed/2023/07/GHSA-835v-757c-5xp4/GHSA-835v-757c-5xp4.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-835v-757c-5xp4", - "modified": "2023-07-04T03:31:56Z", + "modified": "2023-07-10T03:30:24Z", "published": "2023-07-04T03:31:56Z", "aliases": [ "CVE-2023-20766" ], "details": "In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07573237; Issue ID: ALPS07573202.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-787" ], "severity": null, "github_reviewed": false, diff --git a/advisories/unreviewed/2023/07/GHSA-f7w3-5qrp-w366/GHSA-f7w3-5qrp-w366.json b/advisories/unreviewed/2023/07/GHSA-f7w3-5qrp-w366/GHSA-f7w3-5qrp-w366.json new file mode 100644 index 00000000000..14d8b65ae63 --- /dev/null +++ b/advisories/unreviewed/2023/07/GHSA-f7w3-5qrp-w366/GHSA-f7w3-5qrp-w366.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f7w3-5qrp-w366", + "modified": "2023-07-10T03:30:24Z", + "published": "2023-07-10T03:30:24Z", + "aliases": [ + "CVE-2023-37286" + ], + "details": "SmartSoft SmartBPM.NET has a vulnerability of using hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code and disrupt service.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37286" + }, + { + "type": "WEB", + "url": "https://www.twcert.org.tw/tw/cp-132-7221-438c6-1.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-798" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": null + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2023/07/GHSA-jf45-gpgx-q896/GHSA-jf45-gpgx-q896.json b/advisories/unreviewed/2023/07/GHSA-jf45-gpgx-q896/GHSA-jf45-gpgx-q896.json index 8cec37cb752..13aea9ce888 100644 --- a/advisories/unreviewed/2023/07/GHSA-jf45-gpgx-q896/GHSA-jf45-gpgx-q896.json +++ b/advisories/unreviewed/2023/07/GHSA-jf45-gpgx-q896/GHSA-jf45-gpgx-q896.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-jf45-gpgx-q896", - "modified": "2023-07-04T03:31:56Z", + "modified": "2023-07-10T03:30:24Z", "published": "2023-07-04T03:31:56Z", "aliases": [ "CVE-2023-20761" ], "details": "In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07628604; Issue ID: ALPS07628582.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-787" ], "severity": null, "github_reviewed": false, diff --git a/advisories/unreviewed/2023/07/GHSA-p65q-g2jh-6h2p/GHSA-p65q-g2jh-6h2p.json b/advisories/unreviewed/2023/07/GHSA-p65q-g2jh-6h2p/GHSA-p65q-g2jh-6h2p.json index 04c2815d899..98187d638f5 100644 --- a/advisories/unreviewed/2023/07/GHSA-p65q-g2jh-6h2p/GHSA-p65q-g2jh-6h2p.json +++ b/advisories/unreviewed/2023/07/GHSA-p65q-g2jh-6h2p/GHSA-p65q-g2jh-6h2p.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-p65q-g2jh-6h2p", - "modified": "2023-07-04T03:31:56Z", + "modified": "2023-07-10T03:30:24Z", "published": "2023-07-04T03:31:56Z", "aliases": [ "CVE-2023-20768" ], "details": "In ion, there is a possible out of bounds read due to type confusion. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07560720; Issue ID: ALPS07559800.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-843" ], "severity": null, "github_reviewed": false, diff --git a/advisories/unreviewed/2023/07/GHSA-pc8p-p24v-x4w9/GHSA-pc8p-p24v-x4w9.json b/advisories/unreviewed/2023/07/GHSA-pc8p-p24v-x4w9/GHSA-pc8p-p24v-x4w9.json index 8fc8e658a98..4b3650a1ba0 100644 --- a/advisories/unreviewed/2023/07/GHSA-pc8p-p24v-x4w9/GHSA-pc8p-p24v-x4w9.json +++ b/advisories/unreviewed/2023/07/GHSA-pc8p-p24v-x4w9/GHSA-pc8p-p24v-x4w9.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-pc8p-p24v-x4w9", - "modified": "2023-07-04T03:31:56Z", + "modified": "2023-07-10T03:30:24Z", "published": "2023-07-04T03:31:56Z", "aliases": [ "CVE-2023-20772" ], "details": "In vow, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441796; Issue ID: ALPS07441796.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-862" ], "severity": null, "github_reviewed": false, diff --git a/advisories/unreviewed/2023/07/GHSA-qc95-8fhj-7w2p/GHSA-qc95-8fhj-7w2p.json b/advisories/unreviewed/2023/07/GHSA-qc95-8fhj-7w2p/GHSA-qc95-8fhj-7w2p.json index b9186e44b57..1d3c5310936 100644 --- a/advisories/unreviewed/2023/07/GHSA-qc95-8fhj-7w2p/GHSA-qc95-8fhj-7w2p.json +++ b/advisories/unreviewed/2023/07/GHSA-qc95-8fhj-7w2p/GHSA-qc95-8fhj-7w2p.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-qc95-8fhj-7w2p", - "modified": "2023-07-04T03:31:56Z", + "modified": "2023-07-10T03:30:24Z", "published": "2023-07-04T03:31:56Z", "aliases": [ "CVE-2023-20773" ], "details": "In vow, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07611449; Issue ID: ALPS07441735.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-862" ], "severity": null, "github_reviewed": false, diff --git a/advisories/unreviewed/2023/07/GHSA-r9rm-6hq8-gjx5/GHSA-r9rm-6hq8-gjx5.json b/advisories/unreviewed/2023/07/GHSA-r9rm-6hq8-gjx5/GHSA-r9rm-6hq8-gjx5.json index 45c3cf6c856..01285aad97b 100644 --- a/advisories/unreviewed/2023/07/GHSA-r9rm-6hq8-gjx5/GHSA-r9rm-6hq8-gjx5.json +++ b/advisories/unreviewed/2023/07/GHSA-r9rm-6hq8-gjx5/GHSA-r9rm-6hq8-gjx5.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-r9rm-6hq8-gjx5", - "modified": "2023-07-04T03:31:56Z", + "modified": "2023-07-10T03:30:24Z", "published": "2023-07-04T03:31:56Z", "aliases": [ "CVE-2023-20767" ], "details": "In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629585; Issue ID: ALPS07629584.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-787" ], "severity": null, "github_reviewed": false, diff --git a/advisories/unreviewed/2023/07/GHSA-rc53-7w76-rh28/GHSA-rc53-7w76-rh28.json b/advisories/unreviewed/2023/07/GHSA-rc53-7w76-rh28/GHSA-rc53-7w76-rh28.json index 1ac413ed7cf..91f1f6d2147 100644 --- a/advisories/unreviewed/2023/07/GHSA-rc53-7w76-rh28/GHSA-rc53-7w76-rh28.json +++ b/advisories/unreviewed/2023/07/GHSA-rc53-7w76-rh28/GHSA-rc53-7w76-rh28.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-rc53-7w76-rh28", - "modified": "2023-07-04T03:31:56Z", + "modified": "2023-07-10T03:30:23Z", "published": "2023-07-04T03:31:56Z", "aliases": [ "CVE-2023-20759" ], "details": "In cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07634601.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -25,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-787" ], "severity": null, "github_reviewed": false, diff --git a/advisories/unreviewed/2023/07/GHSA-v5mf-w56g-h37h/GHSA-v5mf-w56g-h37h.json b/advisories/unreviewed/2023/07/GHSA-v5mf-w56g-h37h/GHSA-v5mf-w56g-h37h.json index 7f8f3ea34d7..72b0b562241 100644 --- a/advisories/unreviewed/2023/07/GHSA-v5mf-w56g-h37h/GHSA-v5mf-w56g-h37h.json +++ b/advisories/unreviewed/2023/07/GHSA-v5mf-w56g-h37h/GHSA-v5mf-w56g-h37h.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-v5mf-w56g-h37h", - "modified": "2023-07-04T03:31:55Z", + "modified": "2023-07-10T03:30:23Z", "published": "2023-07-04T03:31:55Z", "aliases": [ "CVE-2023-20757" ], "details": "In cmdq, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07636133.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-787" ], "severity": null, "github_reviewed": false, diff --git a/advisories/unreviewed/2023/07/GHSA-wr6r-9j99-vcgv/GHSA-wr6r-9j99-vcgv.json b/advisories/unreviewed/2023/07/GHSA-wr6r-9j99-vcgv/GHSA-wr6r-9j99-vcgv.json index 41a2fb294e4..9890d5421a8 100644 --- a/advisories/unreviewed/2023/07/GHSA-wr6r-9j99-vcgv/GHSA-wr6r-9j99-vcgv.json +++ b/advisories/unreviewed/2023/07/GHSA-wr6r-9j99-vcgv/GHSA-wr6r-9j99-vcgv.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-wr6r-9j99-vcgv", - "modified": "2023-07-04T03:31:56Z", + "modified": "2023-07-10T03:30:24Z", "published": "2023-07-04T03:31:56Z", "aliases": [ "CVE-2023-20774" ], "details": "In display, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07292228; Issue ID: ALPS07292228.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-125" ], "severity": null, "github_reviewed": false, diff --git a/advisories/unreviewed/2023/07/GHSA-wrv4-vrjr-m5jr/GHSA-wrv4-vrjr-m5jr.json b/advisories/unreviewed/2023/07/GHSA-wrv4-vrjr-m5jr/GHSA-wrv4-vrjr-m5jr.json new file mode 100644 index 00000000000..95a5d00f92e --- /dev/null +++ b/advisories/unreviewed/2023/07/GHSA-wrv4-vrjr-m5jr/GHSA-wrv4-vrjr-m5jr.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wrv4-vrjr-m5jr", + "modified": "2023-07-10T03:30:24Z", + "published": "2023-07-10T03:30:24Z", + "aliases": [ + "CVE-2023-37288" + ], + "details": "SmartBPM.NET has a vulnerability of using hard-coded authentication key. An unauthenticated remote attacker can exploit this vulnerability to access system with regular user privilege to read application data, and execute submission and approval processes.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37288" + }, + { + "type": "WEB", + "url": "https://www.twcert.org.tw/tw/cp-132-7223-af8f8-1.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-23" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": null + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2023/07/GHSA-x5fc-fxp8-hf5q/GHSA-x5fc-fxp8-hf5q.json b/advisories/unreviewed/2023/07/GHSA-x5fc-fxp8-hf5q/GHSA-x5fc-fxp8-hf5q.json index 64a13023ded..b230885a9af 100644 --- a/advisories/unreviewed/2023/07/GHSA-x5fc-fxp8-hf5q/GHSA-x5fc-fxp8-hf5q.json +++ b/advisories/unreviewed/2023/07/GHSA-x5fc-fxp8-hf5q/GHSA-x5fc-fxp8-hf5q.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-x5fc-fxp8-hf5q", - "modified": "2023-07-04T03:31:56Z", + "modified": "2023-07-10T03:30:23Z", "published": "2023-07-04T03:31:56Z", "aliases": [ "CVE-2023-20760" ], "details": "In apu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07629578; Issue ID: ALPS07629578.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-787" ], "severity": null, "github_reviewed": false, diff --git a/advisories/unreviewed/2023/07/GHSA-x9xv-c2rh-4ggr/GHSA-x9xv-c2rh-4ggr.json b/advisories/unreviewed/2023/07/GHSA-x9xv-c2rh-4ggr/GHSA-x9xv-c2rh-4ggr.json index a34ee6e8e98..249b584e041 100644 --- a/advisories/unreviewed/2023/07/GHSA-x9xv-c2rh-4ggr/GHSA-x9xv-c2rh-4ggr.json +++ b/advisories/unreviewed/2023/07/GHSA-x9xv-c2rh-4ggr/GHSA-x9xv-c2rh-4ggr.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-x9xv-c2rh-4ggr", - "modified": "2023-07-04T03:31:55Z", + "modified": "2023-07-10T03:30:23Z", "published": "2023-07-04T03:31:55Z", "aliases": [ "CVE-2023-20758" ], "details": "In cmdq, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07636133; Issue ID: ALPS07636130.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -25,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-787" ], "severity": null, "github_reviewed": false, diff --git a/advisories/unreviewed/2023/07/GHSA-xfjf-878m-6487/GHSA-xfjf-878m-6487.json b/advisories/unreviewed/2023/07/GHSA-xfjf-878m-6487/GHSA-xfjf-878m-6487.json index b6e8c04bee8..717b08e4087 100644 --- a/advisories/unreviewed/2023/07/GHSA-xfjf-878m-6487/GHSA-xfjf-878m-6487.json +++ b/advisories/unreviewed/2023/07/GHSA-xfjf-878m-6487/GHSA-xfjf-878m-6487.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-xfjf-878m-6487", - "modified": "2023-07-04T03:31:56Z", + "modified": "2023-07-10T03:30:24Z", "published": "2023-07-04T03:31:56Z", "aliases": [ "CVE-2023-20775" ], "details": "In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07978760; Issue ID: ALPS07363410.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-787" ], "severity": null, "github_reviewed": false,