diff --git a/advisories/github-reviewed/2021/11/GHSA-xx4c-jj58-r7x6/GHSA-xx4c-jj58-r7x6.json b/advisories/github-reviewed/2021/11/GHSA-xx4c-jj58-r7x6/GHSA-xx4c-jj58-r7x6.json index df66fdd4b5f..10bcb0cdd3a 100644 --- a/advisories/github-reviewed/2021/11/GHSA-xx4c-jj58-r7x6/GHSA-xx4c-jj58-r7x6.json +++ b/advisories/github-reviewed/2021/11/GHSA-xx4c-jj58-r7x6/GHSA-xx4c-jj58-r7x6.json @@ -3,9 +3,7 @@ "id": "GHSA-xx4c-jj58-r7x6", "modified": "2022-07-12T00:11:53Z", "published": "2021-11-19T20:14:23Z", - "aliases": [ - - ], + "aliases": [], "summary": "Inefficient Regular Expression Complexity in Validator.js", "details": "### Impact\nVersions of `validator` prior to 13.7.0 are affected by an inefficient Regular Expression complexity when using the `rtrim` and `trim` sanitizers.\n\n### Patches\nThe problem has been patched in validator 13.7.0", "severity": [ diff --git a/advisories/github-reviewed/2022/01/GHSA-cvp7-c586-cmf4/GHSA-cvp7-c586-cmf4.json b/advisories/github-reviewed/2022/01/GHSA-cvp7-c586-cmf4/GHSA-cvp7-c586-cmf4.json index 2d30ab970b0..010403b73ac 100644 --- a/advisories/github-reviewed/2022/01/GHSA-cvp7-c586-cmf4/GHSA-cvp7-c586-cmf4.json +++ b/advisories/github-reviewed/2022/01/GHSA-cvp7-c586-cmf4/GHSA-cvp7-c586-cmf4.json @@ -9,9 +9,7 @@ ], "summary": "Withdrawn: Code Injection in loguru", "details": "# Withdrawn\n\nThis advisory has been withdrawn after the maintainers of loguru noted this issue is not a security vulnerability and the CVE has been revoked. We have [stopped](https://github.com/Delgan/loguru/issues/563#issuecomment-1025223732) Dependabot alerts regarding this issue.\n\n## Original Description\n\nIn versions of loguru up to and including 0.5.3 a lack of sanitization on log serialization can lead to arbitrary code execution. The maintainer disputes the issue, but has altered behavior of the library in commit 4b0070a4f30cbf6d5e12e6274b242b62ea11c81b. See https://github.com/Delgan/loguru/issues/563 for further discussion of the issue. The function in question is intended for internal use only, but is not restricted. This has been patched in version 0.6.0.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/01/GHSA-gm68-g349-gxgg/GHSA-gm68-g349-gxgg.json b/advisories/github-reviewed/2022/01/GHSA-gm68-g349-gxgg/GHSA-gm68-g349-gxgg.json index b1c6fb8b5a2..f338b5766d6 100644 --- a/advisories/github-reviewed/2022/01/GHSA-gm68-g349-gxgg/GHSA-gm68-g349-gxgg.json +++ b/advisories/github-reviewed/2022/01/GHSA-gm68-g349-gxgg/GHSA-gm68-g349-gxgg.json @@ -8,9 +8,7 @@ ], "summary": "Denial of service in bingrep", "details": "Bingrep v0.8.5 was discovered to contain a memory allocation failure which can cause a Denial of Service (DoS).", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/01/GHSA-h79x-98r2-g6qc/GHSA-h79x-98r2-g6qc.json b/advisories/github-reviewed/2022/01/GHSA-h79x-98r2-g6qc/GHSA-h79x-98r2-g6qc.json index eb9d7ea1a25..5eb6da8575d 100644 --- a/advisories/github-reviewed/2022/01/GHSA-h79x-98r2-g6qc/GHSA-h79x-98r2-g6qc.json +++ b/advisories/github-reviewed/2022/01/GHSA-h79x-98r2-g6qc/GHSA-h79x-98r2-g6qc.json @@ -3,9 +3,7 @@ "id": "GHSA-h79x-98r2-g6qc", "modified": "2022-01-24T22:08:04Z", "published": "2022-01-21T23:02:15Z", - "aliases": [ - - ], + "aliases": [], "summary": "Impersonation of other users (passing XBOX Live authentication) by theft of logins in PocketMine-MP", "details": "# Impact\nMinecraft Bedrock authentication and its protocol encryption are inseparably linked. One is not complete without the other.\n\nThis vulnerability affects servers which are able to be directly connected to via the internet (i.e. not behind a proxy).\n\nIf you are using a proxy, please check that it supports protocol encryption and that it is enabled.\n\n# Technical details\n
\nclick to expand\n\n## Basics\n\n1. The client generates a private ECC key `clientPriv` which it uses to complete ECDH for encryption.\n2. A JWT containing the public key `clientPub` corresponding to this key is signed by Microsoft servers with the [Mojang root public key](https://github.com/pmmp/PocketMine-MP/blob/stable/src/network/mcpe/auth/ProcessLoginTask.php#L42) `mojangPub`.\n3. The server verifies that the token was issued by Microsoft servers by verifying the JWT signature with `mojangPub`.\n\n## Why this is a problem\nHowever, this only ensures that the token was issued by Microsoft. It does _not_ ensure that the client actually possesses the private key corresponding to the public key in the token.\nIn a login replay attack, the attacker sends a login captured from another session. This login is valid because it is verifiable by `mojangPub`; however, without encryption, the server doesn't know that the client actually possesses `clientPriv`, and the authenticity of the client cannot be verified.\n\n## How encryption prevents the attack\n\n1. The server calculates a shared secret for encryption using ECDH of `serverPriv` and `clientPub`.\n2. It then signs a return token using `serverPriv` and sends this to the client, along with `serverPub`.\n3. The client then verifies the JWT using `serverPub`, and calculates the same shared secret as the server using `clientPriv` and `serverPub`.\n\nIf the client does not possess `clientPriv` (i.e. because it replayed a stolen login), then the session cannot proceed once encryption is enabled, since the client cannot calculate the shared secret needed to decrypt the server packets and encrypt its own packets.\n\n**Since PM3 does not implement protocol encryption, this means that ALL versions of PM3 are affected by this login stealing attack.**\n\n## How does the attacker capture a login in the first place?\nThe typical way to do this would be to trick a player into joining a server controlled by the attacker. This would allow the attacker to grab the login from the connection and store it for future use.\n\n## Are the logins valid forever?\nNo. All the JWTs have expiry dates after which they cannot be used. These expiry dates are typically 2-3 days after the token was issued by XBOX servers. PocketMine-MP 3.x does verify these expiry dates, so the use-by dates of these attacks are limited.\n\n
\n\n# Patches\nThis problem has been fixed in all 4.x versions by implementing Minecraft protocol encryption.\n\n~This has not yet been addressed on 3.x, but since this vulnerability is already public knowledge, the advisory has been released early to make sure people are aware of it and the mitigation steps they can take.~\n\nUpdate 2022-01-22: This has been fixed on 3.x by d28be4eaf24a890f7ef110a51181a3d806a6acca.\n\n# Workarounds\n- Use a proxy that supports encryption such as [gophertunnel](https://github.com/Sandertv/gophertunnel) between your server and players. Make sure that the server only accepts connections from the proxy. If the proxy is on the same machine as the server, you can use `server-ip=127.0.0.1` to ensure that only the proxy can create connections for you.\n\nThe following things may help mitigate the problem:\n- Verify that the `LoginPacket` `serverAddress` field is the same as the server's exposed domain name. For example: https://github.com/JustTalDevelops/AntiLoginForger\n**WARNING: THIS DOES NOT SOLVE THE ROOT ISSUE. YOU WILL REMAIN VULNERABLE UNLESS YOU UPGRADE.**\n\n# For more information\nIf you have any questions or comments about this advisory:\n* Email us at [team@pmmp.io](mailto:team@pmmp.io)\n", "severity": [ @@ -50,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2022-01-21T21:16:04Z", diff --git a/advisories/github-reviewed/2022/01/GHSA-pmcr-2rhp-36hr/GHSA-pmcr-2rhp-36hr.json b/advisories/github-reviewed/2022/01/GHSA-pmcr-2rhp-36hr/GHSA-pmcr-2rhp-36hr.json index dc8fc8f0b40..c0e41f1aca2 100644 --- a/advisories/github-reviewed/2022/01/GHSA-pmcr-2rhp-36hr/GHSA-pmcr-2rhp-36hr.json +++ b/advisories/github-reviewed/2022/01/GHSA-pmcr-2rhp-36hr/GHSA-pmcr-2rhp-36hr.json @@ -8,9 +8,7 @@ ], "summary": "SQL injection in github.com/navidrome/navidrome", "details": "model/criteria/criteria.go in Navidrome before 0.47.5 is vulnerable to SQL injection attacks when processing crafted Smart Playlists. An authenticated user could abuse this to extract arbitrary data from the database, including the user table (which contains sensitive information such as the users' encrypted passwords).", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/01/GHSA-wjfq-88q2-r34j/GHSA-wjfq-88q2-r34j.json b/advisories/github-reviewed/2022/01/GHSA-wjfq-88q2-r34j/GHSA-wjfq-88q2-r34j.json index 70139bf6302..eaa0defb2ad 100644 --- a/advisories/github-reviewed/2022/01/GHSA-wjfq-88q2-r34j/GHSA-wjfq-88q2-r34j.json +++ b/advisories/github-reviewed/2022/01/GHSA-wjfq-88q2-r34j/GHSA-wjfq-88q2-r34j.json @@ -3,9 +3,7 @@ "id": "GHSA-wjfq-88q2-r34j", "modified": "2022-01-21T21:16:09Z", "published": "2022-01-21T23:02:14Z", - "aliases": [ - - ], + "aliases": [], "summary": "Unhandled exception when decoding form response JSON", "details": "### Impact\nWhen handling form responses from the client (`ModalFormResponsePacket`), the Minecraft Windows client may send weird JSON that `json_decode()` can't understand. A workaround for this is implemented in `InGamePacketHandler::stupid_json_decode()`.\n\nAn `InvalidArgumentException` is thrown by this function when it fails to fix an error found in the JSON, which is not caught by the caller. This leads to a server crash.\n\n### Patches\n56fe71d939c38fe14e18a31a673a9331bcc0e4ca\n\n### Workarounds\nA plugin may handle `DataPacketReceiveEvent`, capture `ModalFormResponsePacket` and run the provided JSON through `stupid_json_decode`.\n\nNote that this requires copying the body of the function to a plugin, since the function is currently private.\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Email us at [team@pmmp.io](mailto:team@pmmp.io)\n", "severity": [ @@ -54,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-01-21T21:16:09Z", diff --git a/advisories/github-reviewed/2022/05/GHSA-qg7x-4h4q-3m49/GHSA-qg7x-4h4q-3m49.json b/advisories/github-reviewed/2022/05/GHSA-qg7x-4h4q-3m49/GHSA-qg7x-4h4q-3m49.json index 6c81e4e4e32..5f130cebd7c 100644 --- a/advisories/github-reviewed/2022/05/GHSA-qg7x-4h4q-3m49/GHSA-qg7x-4h4q-3m49.json +++ b/advisories/github-reviewed/2022/05/GHSA-qg7x-4h4q-3m49/GHSA-qg7x-4h4q-3m49.json @@ -69,9 +69,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-01-30T21:10:30Z", diff --git a/advisories/unreviewed/2021/11/GHSA-22qh-5xm8-3xfw/GHSA-22qh-5xm8-3xfw.json b/advisories/unreviewed/2021/11/GHSA-22qh-5xm8-3xfw/GHSA-22qh-5xm8-3xfw.json index c061f7f72d0..fe6df74e237 100644 --- a/advisories/unreviewed/2021/11/GHSA-22qh-5xm8-3xfw/GHSA-22qh-5xm8-3xfw.json +++ b/advisories/unreviewed/2021/11/GHSA-22qh-5xm8-3xfw/GHSA-22qh-5xm8-3xfw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/11/GHSA-ccqw-rpfw-2m25/GHSA-ccqw-rpfw-2m25.json b/advisories/unreviewed/2021/11/GHSA-ccqw-rpfw-2m25/GHSA-ccqw-rpfw-2m25.json index 0030aa7dcb9..88f23e52715 100644 --- a/advisories/unreviewed/2021/11/GHSA-ccqw-rpfw-2m25/GHSA-ccqw-rpfw-2m25.json +++ b/advisories/unreviewed/2021/11/GHSA-ccqw-rpfw-2m25/GHSA-ccqw-rpfw-2m25.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/11/GHSA-f2fj-cj3g-rj2x/GHSA-f2fj-cj3g-rj2x.json b/advisories/unreviewed/2021/11/GHSA-f2fj-cj3g-rj2x/GHSA-f2fj-cj3g-rj2x.json index 0321394b6e4..9d779a8b08b 100644 --- a/advisories/unreviewed/2021/11/GHSA-f2fj-cj3g-rj2x/GHSA-f2fj-cj3g-rj2x.json +++ b/advisories/unreviewed/2021/11/GHSA-f2fj-cj3g-rj2x/GHSA-f2fj-cj3g-rj2x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/11/GHSA-h99v-fr29-7p28/GHSA-h99v-fr29-7p28.json b/advisories/unreviewed/2021/11/GHSA-h99v-fr29-7p28/GHSA-h99v-fr29-7p28.json index f7149f5fc23..d5a8b36c011 100644 --- a/advisories/unreviewed/2021/11/GHSA-h99v-fr29-7p28/GHSA-h99v-fr29-7p28.json +++ b/advisories/unreviewed/2021/11/GHSA-h99v-fr29-7p28/GHSA-h99v-fr29-7p28.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/11/GHSA-j86w-wm9c-rcfm/GHSA-j86w-wm9c-rcfm.json b/advisories/unreviewed/2021/11/GHSA-j86w-wm9c-rcfm/GHSA-j86w-wm9c-rcfm.json index 07c165c338c..5cd08666292 100644 --- a/advisories/unreviewed/2021/11/GHSA-j86w-wm9c-rcfm/GHSA-j86w-wm9c-rcfm.json +++ b/advisories/unreviewed/2021/11/GHSA-j86w-wm9c-rcfm/GHSA-j86w-wm9c-rcfm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/11/GHSA-jm3c-54xp-46qx/GHSA-jm3c-54xp-46qx.json b/advisories/unreviewed/2021/11/GHSA-jm3c-54xp-46qx/GHSA-jm3c-54xp-46qx.json index f8c6c8ac9ed..d493c288e5f 100644 --- a/advisories/unreviewed/2021/11/GHSA-jm3c-54xp-46qx/GHSA-jm3c-54xp-46qx.json +++ b/advisories/unreviewed/2021/11/GHSA-jm3c-54xp-46qx/GHSA-jm3c-54xp-46qx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/11/GHSA-vrhq-hx93-3cxp/GHSA-vrhq-hx93-3cxp.json b/advisories/unreviewed/2021/11/GHSA-vrhq-hx93-3cxp/GHSA-vrhq-hx93-3cxp.json index 34cdce9ceb7..7ae095abec7 100644 --- a/advisories/unreviewed/2021/11/GHSA-vrhq-hx93-3cxp/GHSA-vrhq-hx93-3cxp.json +++ b/advisories/unreviewed/2021/11/GHSA-vrhq-hx93-3cxp/GHSA-vrhq-hx93-3cxp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/11/GHSA-vx48-mxh7-h8m4/GHSA-vx48-mxh7-h8m4.json b/advisories/unreviewed/2021/11/GHSA-vx48-mxh7-h8m4/GHSA-vx48-mxh7-h8m4.json index bbf514e1497..28b01162ea9 100644 --- a/advisories/unreviewed/2021/11/GHSA-vx48-mxh7-h8m4/GHSA-vx48-mxh7-h8m4.json +++ b/advisories/unreviewed/2021/11/GHSA-vx48-mxh7-h8m4/GHSA-vx48-mxh7-h8m4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-3p76-j79h-ff2w/GHSA-3p76-j79h-ff2w.json b/advisories/unreviewed/2021/12/GHSA-3p76-j79h-ff2w/GHSA-3p76-j79h-ff2w.json index 2e6b9335c9c..a74aee1ede6 100644 --- a/advisories/unreviewed/2021/12/GHSA-3p76-j79h-ff2w/GHSA-3p76-j79h-ff2w.json +++ b/advisories/unreviewed/2021/12/GHSA-3p76-j79h-ff2w/GHSA-3p76-j79h-ff2w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-65hc-w5gc-vhhp/GHSA-65hc-w5gc-vhhp.json b/advisories/unreviewed/2021/12/GHSA-65hc-w5gc-vhhp/GHSA-65hc-w5gc-vhhp.json index f6ced9afc96..2302d28fe0c 100644 --- a/advisories/unreviewed/2021/12/GHSA-65hc-w5gc-vhhp/GHSA-65hc-w5gc-vhhp.json +++ b/advisories/unreviewed/2021/12/GHSA-65hc-w5gc-vhhp/GHSA-65hc-w5gc-vhhp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-8859-p82c-88c7/GHSA-8859-p82c-88c7.json b/advisories/unreviewed/2021/12/GHSA-8859-p82c-88c7/GHSA-8859-p82c-88c7.json index 26fa9d3ab6f..df42bcf9c9f 100644 --- a/advisories/unreviewed/2021/12/GHSA-8859-p82c-88c7/GHSA-8859-p82c-88c7.json +++ b/advisories/unreviewed/2021/12/GHSA-8859-p82c-88c7/GHSA-8859-p82c-88c7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-9r2h-rc6j-37jj/GHSA-9r2h-rc6j-37jj.json b/advisories/unreviewed/2021/12/GHSA-9r2h-rc6j-37jj/GHSA-9r2h-rc6j-37jj.json index 1c9c71ae72e..d5bc57db986 100644 --- a/advisories/unreviewed/2021/12/GHSA-9r2h-rc6j-37jj/GHSA-9r2h-rc6j-37jj.json +++ b/advisories/unreviewed/2021/12/GHSA-9r2h-rc6j-37jj/GHSA-9r2h-rc6j-37jj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-cjfc-g68m-vj47/GHSA-cjfc-g68m-vj47.json b/advisories/unreviewed/2021/12/GHSA-cjfc-g68m-vj47/GHSA-cjfc-g68m-vj47.json index ebd3635f787..5589a4e4d0c 100644 --- a/advisories/unreviewed/2021/12/GHSA-cjfc-g68m-vj47/GHSA-cjfc-g68m-vj47.json +++ b/advisories/unreviewed/2021/12/GHSA-cjfc-g68m-vj47/GHSA-cjfc-g68m-vj47.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-hvfq-hq4c-p3w4/GHSA-hvfq-hq4c-p3w4.json b/advisories/unreviewed/2021/12/GHSA-hvfq-hq4c-p3w4/GHSA-hvfq-hq4c-p3w4.json index c6691804a18..d6f38fbc38c 100644 --- a/advisories/unreviewed/2021/12/GHSA-hvfq-hq4c-p3w4/GHSA-hvfq-hq4c-p3w4.json +++ b/advisories/unreviewed/2021/12/GHSA-hvfq-hq4c-p3w4/GHSA-hvfq-hq4c-p3w4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-r89h-r4w4-jr4p/GHSA-r89h-r4w4-jr4p.json b/advisories/unreviewed/2021/12/GHSA-r89h-r4w4-jr4p/GHSA-r89h-r4w4-jr4p.json index 41fbf0845bf..3715aa7aeea 100644 --- a/advisories/unreviewed/2021/12/GHSA-r89h-r4w4-jr4p/GHSA-r89h-r4w4-jr4p.json +++ b/advisories/unreviewed/2021/12/GHSA-r89h-r4w4-jr4p/GHSA-r89h-r4w4-jr4p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-rx6w-jv8h-xw6p/GHSA-rx6w-jv8h-xw6p.json b/advisories/unreviewed/2021/12/GHSA-rx6w-jv8h-xw6p/GHSA-rx6w-jv8h-xw6p.json index 88af798efc2..6059640036c 100644 --- a/advisories/unreviewed/2021/12/GHSA-rx6w-jv8h-xw6p/GHSA-rx6w-jv8h-xw6p.json +++ b/advisories/unreviewed/2021/12/GHSA-rx6w-jv8h-xw6p/GHSA-rx6w-jv8h-xw6p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-v4vg-cx5m-vc5g/GHSA-v4vg-cx5m-vc5g.json b/advisories/unreviewed/2021/12/GHSA-v4vg-cx5m-vc5g/GHSA-v4vg-cx5m-vc5g.json index dee5e43549d..cc8e2e7d535 100644 --- a/advisories/unreviewed/2021/12/GHSA-v4vg-cx5m-vc5g/GHSA-v4vg-cx5m-vc5g.json +++ b/advisories/unreviewed/2021/12/GHSA-v4vg-cx5m-vc5g/GHSA-v4vg-cx5m-vc5g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-ww6f-vp8m-358f/GHSA-ww6f-vp8m-358f.json b/advisories/unreviewed/2021/12/GHSA-ww6f-vp8m-358f/GHSA-ww6f-vp8m-358f.json index bb0a80f45ef..5fd967db5ae 100644 --- a/advisories/unreviewed/2021/12/GHSA-ww6f-vp8m-358f/GHSA-ww6f-vp8m-358f.json +++ b/advisories/unreviewed/2021/12/GHSA-ww6f-vp8m-358f/GHSA-ww6f-vp8m-358f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-26jj-ccwx-5rwc/GHSA-26jj-ccwx-5rwc.json b/advisories/unreviewed/2022/01/GHSA-26jj-ccwx-5rwc/GHSA-26jj-ccwx-5rwc.json index d206303ffbd..4d1b9b6bc21 100644 --- a/advisories/unreviewed/2022/01/GHSA-26jj-ccwx-5rwc/GHSA-26jj-ccwx-5rwc.json +++ b/advisories/unreviewed/2022/01/GHSA-26jj-ccwx-5rwc/GHSA-26jj-ccwx-5rwc.json @@ -7,12 +7,8 @@ "CVE-2021-46325" ], "details": "Espruino 2v10.246 was discovered to contain a stack buffer overflow via src/jsutils.c in vcbprintf.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-2986-5hcf-cm8g/GHSA-2986-5hcf-cm8g.json b/advisories/unreviewed/2022/01/GHSA-2986-5hcf-cm8g/GHSA-2986-5hcf-cm8g.json index a9248716ff2..696c9b23cd3 100644 --- a/advisories/unreviewed/2022/01/GHSA-2986-5hcf-cm8g/GHSA-2986-5hcf-cm8g.json +++ b/advisories/unreviewed/2022/01/GHSA-2986-5hcf-cm8g/GHSA-2986-5hcf-cm8g.json @@ -7,12 +7,8 @@ "CVE-2021-31821" ], "details": "When the Windows Tentacle docker image starts up it logs all the commands that it runs along with the arguments, which writes the Octopus Server API key in plaintext. This does not affect the Linux Docker image", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-2hmc-2j98-55mm/GHSA-2hmc-2j98-55mm.json b/advisories/unreviewed/2022/01/GHSA-2hmc-2j98-55mm/GHSA-2hmc-2j98-55mm.json index ed0401bdc34..22a099d2af2 100644 --- a/advisories/unreviewed/2022/01/GHSA-2hmc-2j98-55mm/GHSA-2hmc-2j98-55mm.json +++ b/advisories/unreviewed/2022/01/GHSA-2hmc-2j98-55mm/GHSA-2hmc-2j98-55mm.json @@ -7,12 +7,8 @@ "CVE-2020-23315" ], "details": "There is an ASSERTION (pFuncBody->GetYieldRegister() == oldYieldRegister) failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-beta.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-2rqw-mg55-mp69/GHSA-2rqw-mg55-mp69.json b/advisories/unreviewed/2022/01/GHSA-2rqw-mg55-mp69/GHSA-2rqw-mg55-mp69.json index 7d52cc45e54..ae604ec93dd 100644 --- a/advisories/unreviewed/2022/01/GHSA-2rqw-mg55-mp69/GHSA-2rqw-mg55-mp69.json +++ b/advisories/unreviewed/2022/01/GHSA-2rqw-mg55-mp69/GHSA-2rqw-mg55-mp69.json @@ -7,12 +7,8 @@ "CVE-2021-46243" ], "details": "An untrusted pointer dereference vulnerability exists in HDF5 v1.13.1-1 via the function H5O__dtype_decode_helper () at hdf5/src/H5Odtype.c. This vulnerability can lead to a Denial of Service (DoS).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-2vv3-q2gp-2rjv/GHSA-2vv3-q2gp-2rjv.json b/advisories/unreviewed/2022/01/GHSA-2vv3-q2gp-2rjv/GHSA-2vv3-q2gp-2rjv.json index 6c38bfe0e8f..ae98619e905 100644 --- a/advisories/unreviewed/2022/01/GHSA-2vv3-q2gp-2rjv/GHSA-2vv3-q2gp-2rjv.json +++ b/advisories/unreviewed/2022/01/GHSA-2vv3-q2gp-2rjv/GHSA-2vv3-q2gp-2rjv.json @@ -7,12 +7,8 @@ "CVE-2021-23233" ], "details": "Sensitive endpoints in Fresenius Kabi Agilia Link+ v3.0 and prior can be accessed without any authentication information such as the session cookie. An attacker can send requests to sensitive endpoints as an unauthenticated user to perform critical actions or modify critical configuration parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-2vxp-rq9r-5v72/GHSA-2vxp-rq9r-5v72.json b/advisories/unreviewed/2022/01/GHSA-2vxp-rq9r-5v72/GHSA-2vxp-rq9r-5v72.json index 5e3dcb64c6e..837f8341a56 100644 --- a/advisories/unreviewed/2022/01/GHSA-2vxp-rq9r-5v72/GHSA-2vxp-rq9r-5v72.json +++ b/advisories/unreviewed/2022/01/GHSA-2vxp-rq9r-5v72/GHSA-2vxp-rq9r-5v72.json @@ -7,12 +7,8 @@ "CVE-2020-4876" ], "details": "IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 190839.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-2xm9-4m89-4qwr/GHSA-2xm9-4m89-4qwr.json b/advisories/unreviewed/2022/01/GHSA-2xm9-4m89-4qwr/GHSA-2xm9-4m89-4qwr.json index 84c5299f9fd..33fbcdb6fda 100644 --- a/advisories/unreviewed/2022/01/GHSA-2xm9-4m89-4qwr/GHSA-2xm9-4m89-4qwr.json +++ b/advisories/unreviewed/2022/01/GHSA-2xm9-4m89-4qwr/GHSA-2xm9-4m89-4qwr.json @@ -7,12 +7,8 @@ "CVE-2021-44829" ], "details": "Cross Site Scripting (XSS) vulnerability exists in index.html in AFI WebACMS through 2.1.0 via the the ID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-347m-w2v2-fmv3/GHSA-347m-w2v2-fmv3.json b/advisories/unreviewed/2022/01/GHSA-347m-w2v2-fmv3/GHSA-347m-w2v2-fmv3.json index a238fd314d0..af98aa621ee 100644 --- a/advisories/unreviewed/2022/01/GHSA-347m-w2v2-fmv3/GHSA-347m-w2v2-fmv3.json +++ b/advisories/unreviewed/2022/01/GHSA-347m-w2v2-fmv3/GHSA-347m-w2v2-fmv3.json @@ -7,12 +7,8 @@ "CVE-2022-22173" ], "details": "A Missing Release of Memory after Effective Lifetime vulnerability in the Public Key Infrastructure daemon (pkid) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause Denial of Service (DoS). In a scenario where Public Key Infrastructure (PKI) is used in combination with Certificate Revocation List (CRL), if the CRL fails to download the memory allocated to store the CRL is not released. Repeated occurrences will eventually consume all available memory and lead to an inoperable state of the affected system causing a DoS. This issue affects Juniper Networks Junos OS: All versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S10; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R2-S5, 19.4R3-S5; 20.1 versions prior to 20.1R3-S1; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2, 21.1R3; 21.2 versions prior to 21.2R1-S1, 21.2R2. This issue can be observed by monitoring the memory utilization of the pkid process via: root@jtac-srx1500-r2003> show system processes extensive | match pki 20931 root 20 0 733M 14352K select 0:00 0.00% pkid which increases over time: root@jtac-srx1500-r2003> show system processes extensive | match pki 22587 root 20 0 901M 181M select 0:03 0.00% pkid", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-359p-g7pq-4gxh/GHSA-359p-g7pq-4gxh.json b/advisories/unreviewed/2022/01/GHSA-359p-g7pq-4gxh/GHSA-359p-g7pq-4gxh.json index ef5f4e8158c..2409f705009 100644 --- a/advisories/unreviewed/2022/01/GHSA-359p-g7pq-4gxh/GHSA-359p-g7pq-4gxh.json +++ b/advisories/unreviewed/2022/01/GHSA-359p-g7pq-4gxh/GHSA-359p-g7pq-4gxh.json @@ -7,12 +7,8 @@ "CVE-2022-21250" ], "details": "Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: GL Accounts). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Trade Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Trade Management accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-3ccx-8rq3-28hx/GHSA-3ccx-8rq3-28hx.json b/advisories/unreviewed/2022/01/GHSA-3ccx-8rq3-28hx/GHSA-3ccx-8rq3-28hx.json index 78060c05345..d2c6fbbafc6 100644 --- a/advisories/unreviewed/2022/01/GHSA-3ccx-8rq3-28hx/GHSA-3ccx-8rq3-28hx.json +++ b/advisories/unreviewed/2022/01/GHSA-3ccx-8rq3-28hx/GHSA-3ccx-8rq3-28hx.json @@ -7,12 +7,8 @@ "CVE-2022-23127" ], "details": "Cross-site Scripting vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS MobileHMI versions 10.96.2 and prior allows a remote unauthenticated attacker to gain authentication information of an MC Works64 or MobileHMI and perform any operation using the acquired authentication information, by injecting a malicious script in the URL of a monitoring screen delivered from the MC Works64 server or MobileHMI server to an application for mobile devices and leading a legitimate user to access this URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-3g8v-6552-p38w/GHSA-3g8v-6552-p38w.json b/advisories/unreviewed/2022/01/GHSA-3g8v-6552-p38w/GHSA-3g8v-6552-p38w.json index 78ee7e54795..6018b2a0d2e 100644 --- a/advisories/unreviewed/2022/01/GHSA-3g8v-6552-p38w/GHSA-3g8v-6552-p38w.json +++ b/advisories/unreviewed/2022/01/GHSA-3g8v-6552-p38w/GHSA-3g8v-6552-p38w.json @@ -7,12 +7,8 @@ "CVE-2022-22733" ], "details": "Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apache ShardingSphere ElasticJob-UI 3.x version 3.0.0 and prior versions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-3j89-cv92-pv3w/GHSA-3j89-cv92-pv3w.json b/advisories/unreviewed/2022/01/GHSA-3j89-cv92-pv3w/GHSA-3j89-cv92-pv3w.json index 343c1bfc2cf..78b2fe3ff15 100644 --- a/advisories/unreviewed/2022/01/GHSA-3j89-cv92-pv3w/GHSA-3j89-cv92-pv3w.json +++ b/advisories/unreviewed/2022/01/GHSA-3j89-cv92-pv3w/GHSA-3j89-cv92-pv3w.json @@ -7,12 +7,8 @@ "CVE-2021-46240" ], "details": "A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_dump_vrml_sffield () at scene_manager/scene_dump.c. This vulnerability can lead to a Denial of Service (DoS).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-3jvq-22jp-22pp/GHSA-3jvq-22jp-22pp.json b/advisories/unreviewed/2022/01/GHSA-3jvq-22jp-22pp/GHSA-3jvq-22jp-22pp.json index 57473a7d8fd..ce6751bc226 100644 --- a/advisories/unreviewed/2022/01/GHSA-3jvq-22jp-22pp/GHSA-3jvq-22jp-22pp.json +++ b/advisories/unreviewed/2022/01/GHSA-3jvq-22jp-22pp/GHSA-3jvq-22jp-22pp.json @@ -7,12 +7,8 @@ "CVE-2022-22180" ], "details": "An Improper Check for Unusual or Exceptional Conditions vulnerability in the processing of specific IPv6 packets on certain EX Series devices may lead to exhaustion of DMA memory causing a Denial of Service (DoS). Over time, exploitation of this vulnerability may cause traffic to stop being forwarded, or a crash of the fxpc process. An indication of the issue occurring may be observed through the following log messages: Sep 13 17:14:59 hostname : %PFE-3: fpc0 (buf alloc) failed allocating packet buffer Sep 13 17:14:59 hostname : %PFE-7: fpc0 brcm_pkt_buf_alloc:393 (buf alloc) failed allocating packet buffer When Packet DMA heap utilization reaches 99%, the system will become unstable. Packet DMA heap utilization can be monitored using the command: user@junos# request pfe execute target fpc0 timeout 30 command \"show heap\" ID Base Total(b) Free(b) Used(b) % Name -- ---------- ----------- ----------- ----------- --- ----------- 0 213301a8 536870488 387228840 149641648 27 Kernel 1 91800000 8388608 3735120 4653488 55 DMA 2 92000000 75497472 74452192 1045280 1 PKT DMA DESC 3 d330000 335544320 257091400 78452920 23 Bcm_sdk 4 96800000 184549376 2408 184546968 99 Packet DMA <<<< 5 903fffe0 20971504 20971504 0 0 Blob This issue affects: Juniper Networks Junos OS 18.4 versions prior to 18.4R2-S10, 18.4R3-S10 on EX2300 Series, EX2300-MP Series, EX3400 Series; 19.1 versions prior to 19.1R3-S7 on EX2300 Series, EX2300-MP Series, EX3400 Series; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4 on EX2300 Series, EX2300-MP Series, EX3400 Series; 19.3 versions prior to 19.3R3-S5 on EX2300 Series, EX2300-MP Series, EX3400 Series; 19.4 versions prior to 19.4R3-S7 on EX2300 Series, EX2300-MP Series, EX3400 Series; 20.1 versions prior to 20.1R3-S3 on EX2300 Series, EX2300-MP Series, EX3400 Series; 20.2 versions prior to 20.2R3-S3 on EX2300 Series, EX2300-MP Series, EX3400 Series; 20.3 versions prior to 20.3R3-S2 on EX2300 Series, EX2300-MP Series, EX3400 Series; 20.4 versions prior to 20.4R3-S1 on EX2300 Series, EX2300-MP Series, EX3400 Series; 21.1 versions prior to 21.1R2-S2, 21.1R3 on EX2300 Series, EX2300-MP Series, EX3400 Series; 21.2 versions prior to 21.2R1-S2, 21.2R2 on EX2300 Series, EX2300-MP Series, EX3400 Series; 21.3 versions prior to 21.3R1-S1, 21.3R2 on EX2300 Series, EX2300-MP Series, EX3400 Series.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-3mm4-w7v6-4rhv/GHSA-3mm4-w7v6-4rhv.json b/advisories/unreviewed/2022/01/GHSA-3mm4-w7v6-4rhv/GHSA-3mm4-w7v6-4rhv.json index b3df1534e8e..4331cad12dd 100644 --- a/advisories/unreviewed/2022/01/GHSA-3mm4-w7v6-4rhv/GHSA-3mm4-w7v6-4rhv.json +++ b/advisories/unreviewed/2022/01/GHSA-3mm4-w7v6-4rhv/GHSA-3mm4-w7v6-4rhv.json @@ -7,12 +7,8 @@ "CVE-2022-23435" ], "details": "decoding.c in android-gif-drawable before 1.2.24 does not limit the maximum length of a comment, leading to denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-3r3c-xv8w-hfp3/GHSA-3r3c-xv8w-hfp3.json b/advisories/unreviewed/2022/01/GHSA-3r3c-xv8w-hfp3/GHSA-3r3c-xv8w-hfp3.json index f0a633c8933..440fde4403b 100644 --- a/advisories/unreviewed/2022/01/GHSA-3r3c-xv8w-hfp3/GHSA-3r3c-xv8w-hfp3.json +++ b/advisories/unreviewed/2022/01/GHSA-3r3c-xv8w-hfp3/GHSA-3r3c-xv8w-hfp3.json @@ -7,12 +7,8 @@ "CVE-2021-33848" ], "details": "Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 is vulnerable to reflected cross-site scripting attacks. An attacker could inject JavaScript in a GET parameter of HTTP requests and perform unauthorized actions such as stealing internal information and performing actions in context of an authenticated user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-3vpr-5c7j-jpgx/GHSA-3vpr-5c7j-jpgx.json b/advisories/unreviewed/2022/01/GHSA-3vpr-5c7j-jpgx/GHSA-3vpr-5c7j-jpgx.json index f3476d288d9..863123ac309 100644 --- a/advisories/unreviewed/2022/01/GHSA-3vpr-5c7j-jpgx/GHSA-3vpr-5c7j-jpgx.json +++ b/advisories/unreviewed/2022/01/GHSA-3vpr-5c7j-jpgx/GHSA-3vpr-5c7j-jpgx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-3vqf-rm2x-wv2w/GHSA-3vqf-rm2x-wv2w.json b/advisories/unreviewed/2022/01/GHSA-3vqf-rm2x-wv2w/GHSA-3vqf-rm2x-wv2w.json index af50dcf15a4..7ba0140880d 100644 --- a/advisories/unreviewed/2022/01/GHSA-3vqf-rm2x-wv2w/GHSA-3vqf-rm2x-wv2w.json +++ b/advisories/unreviewed/2022/01/GHSA-3vqf-rm2x-wv2w/GHSA-3vqf-rm2x-wv2w.json @@ -7,12 +7,8 @@ "CVE-2022-22171" ], "details": "An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a Denial of Service (DoS) by sending specific packets over VXLAN which cause the PFE to reset. This issue affects: Juniper Networks Junos OS 19.4 versions prior to 19.4R3-S7; 20.1 versions prior to 20.1R3-S3; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S2; 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R2; 21.3 versions prior to 21.3R1-S1, 21.3R2. This issue does not affect versions of Junos OS prior to 19.4R1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-42g4-xc42-5fr4/GHSA-42g4-xc42-5fr4.json b/advisories/unreviewed/2022/01/GHSA-42g4-xc42-5fr4/GHSA-42g4-xc42-5fr4.json index c85d94de12f..5cac03848b5 100644 --- a/advisories/unreviewed/2022/01/GHSA-42g4-xc42-5fr4/GHSA-42g4-xc42-5fr4.json +++ b/advisories/unreviewed/2022/01/GHSA-42g4-xc42-5fr4/GHSA-42g4-xc42-5fr4.json @@ -7,12 +7,8 @@ "CVE-2021-41835" ], "details": "Fresenius Kabi Agilia Link + version 3.0 does not enforce transport layer encryption. Therefore, transmitted data may be sent in cleartext. Transport layer encryption is offered on Port TCP/443, but the affected service does not perform an automated redirect from the unencrypted service on Port TCP/80 to the encrypted service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-42vh-q74p-v48f/GHSA-42vh-q74p-v48f.json b/advisories/unreviewed/2022/01/GHSA-42vh-q74p-v48f/GHSA-42vh-q74p-v48f.json index 1cd0927bfef..3b40217bbbe 100644 --- a/advisories/unreviewed/2022/01/GHSA-42vh-q74p-v48f/GHSA-42vh-q74p-v48f.json +++ b/advisories/unreviewed/2022/01/GHSA-42vh-q74p-v48f/GHSA-42vh-q74p-v48f.json @@ -7,12 +7,8 @@ "CVE-2021-44245" ], "details": "An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System (CTMS) 1.0 via the (1) username and (2) contactno parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-43pw-jffv-mcr7/GHSA-43pw-jffv-mcr7.json b/advisories/unreviewed/2022/01/GHSA-43pw-jffv-mcr7/GHSA-43pw-jffv-mcr7.json index 0ae3dcdc9e9..d734da65703 100644 --- a/advisories/unreviewed/2022/01/GHSA-43pw-jffv-mcr7/GHSA-43pw-jffv-mcr7.json +++ b/advisories/unreviewed/2022/01/GHSA-43pw-jffv-mcr7/GHSA-43pw-jffv-mcr7.json @@ -7,12 +7,8 @@ "CVE-2020-4875" ], "details": "IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 190838.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-4f29-g223-2grv/GHSA-4f29-g223-2grv.json b/advisories/unreviewed/2022/01/GHSA-4f29-g223-2grv/GHSA-4f29-g223-2grv.json index adf18ab5504..4195f5ea941 100644 --- a/advisories/unreviewed/2022/01/GHSA-4f29-g223-2grv/GHSA-4f29-g223-2grv.json +++ b/advisories/unreviewed/2022/01/GHSA-4f29-g223-2grv/GHSA-4f29-g223-2grv.json @@ -7,12 +7,8 @@ "CVE-2022-22176" ], "details": "An Improper Validation of Syntactic Correctness of Input vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks Junos OS allows an adjacent unauthenticated attacker sending a malformed DHCP packet to cause a crash of jdhcpd and thereby a Denial of Service (DoS). If option-82 is configured in a DHCP snooping / -security scenario, jdhcpd crashes if a specific malformed DHCP request packet is received. The DHCP functionality is impacted while jdhcpd restarts, and continued exploitation of the vulnerability will lead to the unavailability of the DHCP service and thereby a sustained DoS. This issue affects Juniper Networks Junos OS 13.2 version 13.2R1 and later versions prior to 15.1R7-S11; 18.3 versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S10; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R2-S7, 19.3R3-S4; 19.4 versions prior to 19.4R3-S6; 20.1 versions prior to 20.1R3-S3; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R1-S1, 21.2R2. This issue does not affect Juniper Networks Junos OS version 12.3R12 and prior versions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-4h5q-q65q-355x/GHSA-4h5q-q65q-355x.json b/advisories/unreviewed/2022/01/GHSA-4h5q-q65q-355x/GHSA-4h5q-q65q-355x.json index 4eb3ba03d26..9214a18efde 100644 --- a/advisories/unreviewed/2022/01/GHSA-4h5q-q65q-355x/GHSA-4h5q-q65q-355x.json +++ b/advisories/unreviewed/2022/01/GHSA-4h5q-q65q-355x/GHSA-4h5q-q65q-355x.json @@ -7,12 +7,8 @@ "CVE-2021-38786" ], "details": "There is a NULL pointer dereference in media/libcedarc/vdecoder of Allwinner R818 SoC Android Q SDK V1.0, which could cause a media crash (denial of service).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-4jfc-569c-hghm/GHSA-4jfc-569c-hghm.json b/advisories/unreviewed/2022/01/GHSA-4jfc-569c-hghm/GHSA-4jfc-569c-hghm.json index 99cf05fe4c9..32623139ce0 100644 --- a/advisories/unreviewed/2022/01/GHSA-4jfc-569c-hghm/GHSA-4jfc-569c-hghm.json +++ b/advisories/unreviewed/2022/01/GHSA-4jfc-569c-hghm/GHSA-4jfc-569c-hghm.json @@ -7,12 +7,8 @@ "CVE-2021-46238" ], "details": "GPAC v1.1.0 was discovered to contain a stack overflow via the function gf_node_get_name () at scenegraph/base_scenegraph.c. This vulnerability can lead to a program crash, causing a Denial of Service (DoS).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-4m8v-5wv8-cxqr/GHSA-4m8v-5wv8-cxqr.json b/advisories/unreviewed/2022/01/GHSA-4m8v-5wv8-cxqr/GHSA-4m8v-5wv8-cxqr.json index f0eb4fe7930..3e6405f59c0 100644 --- a/advisories/unreviewed/2022/01/GHSA-4m8v-5wv8-cxqr/GHSA-4m8v-5wv8-cxqr.json +++ b/advisories/unreviewed/2022/01/GHSA-4m8v-5wv8-cxqr/GHSA-4m8v-5wv8-cxqr.json @@ -7,12 +7,8 @@ "CVE-2021-46343" ], "details": "There is an Assertion 'context_p->token.type == LEXER_LITERAL' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-4x7q-rcvp-6cw4/GHSA-4x7q-rcvp-6cw4.json b/advisories/unreviewed/2022/01/GHSA-4x7q-rcvp-6cw4/GHSA-4x7q-rcvp-6cw4.json index b1150a70249..cad13963cbc 100644 --- a/advisories/unreviewed/2022/01/GHSA-4x7q-rcvp-6cw4/GHSA-4x7q-rcvp-6cw4.json +++ b/advisories/unreviewed/2022/01/GHSA-4x7q-rcvp-6cw4/GHSA-4x7q-rcvp-6cw4.json @@ -7,12 +7,8 @@ "CVE-2021-46348" ], "details": "There is an Assertion 'ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)' failed at /jerry-core/ecma/base/ecma-literal-storage.c in JerryScript 3.0.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-52h2-329h-239p/GHSA-52h2-329h-239p.json b/advisories/unreviewed/2022/01/GHSA-52h2-329h-239p/GHSA-52h2-329h-239p.json index 025be338a34..9c6969530f3 100644 --- a/advisories/unreviewed/2022/01/GHSA-52h2-329h-239p/GHSA-52h2-329h-239p.json +++ b/advisories/unreviewed/2022/01/GHSA-52h2-329h-239p/GHSA-52h2-329h-239p.json @@ -7,12 +7,8 @@ "CVE-2021-35683" ], "details": "Vulnerability in the Oracle Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported version that is affected is Prior to 11.1.2.4.047. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Essbase Administration Services. While the vulnerability is in Oracle Essbase Administration Services, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Essbase Administration Services. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-56fg-32qc-v967/GHSA-56fg-32qc-v967.json b/advisories/unreviewed/2022/01/GHSA-56fg-32qc-v967/GHSA-56fg-32qc-v967.json index afd7df92981..8bc3bab60c0 100644 --- a/advisories/unreviewed/2022/01/GHSA-56fg-32qc-v967/GHSA-56fg-32qc-v967.json +++ b/advisories/unreviewed/2022/01/GHSA-56fg-32qc-v967/GHSA-56fg-32qc-v967.json @@ -7,12 +7,8 @@ "CVE-2022-22164" ], "details": "An Improper Initialization vulnerability in Juniper Networks Junos OS Evolved may cause a commit operation for disabling the telnet service to not take effect as expected, resulting in the telnet service staying enabled. When it is not intended to be operating on the device, an administrator can issue the following command to verify whether telnet is operating in the background: user@device > show system connections | grep :23 tcp 0 0 0.0.0.0:23 0.0.0.0:* LISTEN 20879/xinetd This issue affects: Juniper Networks Junos OS Evolved All versions prior to 20.4R2-S2-EVO; 21.1 version 21.1R1-EVO and later versions; 21.2 versions prior to 21.2R2-EVO.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-57jj-772p-fq8q/GHSA-57jj-772p-fq8q.json b/advisories/unreviewed/2022/01/GHSA-57jj-772p-fq8q/GHSA-57jj-772p-fq8q.json index 1b0a20238d4..4b783f4aaa4 100644 --- a/advisories/unreviewed/2022/01/GHSA-57jj-772p-fq8q/GHSA-57jj-772p-fq8q.json +++ b/advisories/unreviewed/2022/01/GHSA-57jj-772p-fq8q/GHSA-57jj-772p-fq8q.json @@ -7,12 +7,8 @@ "CVE-2021-46028" ], "details": "In mblog <= 3.5.0 there is a CSRF vulnerability in the background article management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, the article will be deleted.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-57pr-5x8r-p45v/GHSA-57pr-5x8r-p45v.json b/advisories/unreviewed/2022/01/GHSA-57pr-5x8r-p45v/GHSA-57pr-5x8r-p45v.json index 6b6b07bf0a8..8110340fdb4 100644 --- a/advisories/unreviewed/2022/01/GHSA-57pr-5x8r-p45v/GHSA-57pr-5x8r-p45v.json +++ b/advisories/unreviewed/2022/01/GHSA-57pr-5x8r-p45v/GHSA-57pr-5x8r-p45v.json @@ -7,12 +7,8 @@ "CVE-2021-46330" ], "details": "Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fx_ArrayBuffer_prototype_concat.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-5mgw-p3mp-fxpw/GHSA-5mgw-p3mp-fxpw.json b/advisories/unreviewed/2022/01/GHSA-5mgw-p3mp-fxpw/GHSA-5mgw-p3mp-fxpw.json index 06e8e2404f3..fd274dffcfb 100644 --- a/advisories/unreviewed/2022/01/GHSA-5mgw-p3mp-fxpw/GHSA-5mgw-p3mp-fxpw.json +++ b/advisories/unreviewed/2022/01/GHSA-5mgw-p3mp-fxpw/GHSA-5mgw-p3mp-fxpw.json @@ -7,12 +7,8 @@ "CVE-2022-22170" ], "details": "A Missing Release of Resource after Effective Lifetime vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an unauthenticated networked attacker to cause a Denial of Service (DoS) by sending specific packets over VXLAN which cause heap memory to leak and on exhaustion the PFE to reset. The heap memory utilization can be monitored with the command: user@host> show chassis fpc This issue affects: Juniper Networks Junos OS 19.4 versions prior to 19.4R2-S6, 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R2. This issue does not affect versions of Junos OS prior to 19.4R1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-5pjp-vw2m-28p6/GHSA-5pjp-vw2m-28p6.json b/advisories/unreviewed/2022/01/GHSA-5pjp-vw2m-28p6/GHSA-5pjp-vw2m-28p6.json index ea8929bfe08..ef6b417bb27 100644 --- a/advisories/unreviewed/2022/01/GHSA-5pjp-vw2m-28p6/GHSA-5pjp-vw2m-28p6.json +++ b/advisories/unreviewed/2022/01/GHSA-5pjp-vw2m-28p6/GHSA-5pjp-vw2m-28p6.json @@ -7,12 +7,8 @@ "CVE-2021-46025" ], "details": "A Cross SIte Scripting (XSS) vulnerability exists in OneBlog <= 2.2.8. via the add function in the operation tab list in the background.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-5w5q-5c76-p78m/GHSA-5w5q-5c76-p78m.json b/advisories/unreviewed/2022/01/GHSA-5w5q-5c76-p78m/GHSA-5w5q-5c76-p78m.json index c216153f330..50ba00f34e2 100644 --- a/advisories/unreviewed/2022/01/GHSA-5w5q-5c76-p78m/GHSA-5w5q-5c76-p78m.json +++ b/advisories/unreviewed/2022/01/GHSA-5w5q-5c76-p78m/GHSA-5w5q-5c76-p78m.json @@ -7,12 +7,8 @@ "CVE-2022-22177" ], "details": "A release of illegal memory vulnerability in the snmpd daemon of Juniper Networks Junos OS, Junos OS Evolved allows an attacker to halt the snmpd daemon causing a sustained Denial of Service (DoS) to the service until it is manually restarted. This issue impacts any version of SNMP – v1,v2, v3 This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S20; 15.1 versions prior to 15.1R7-S11; 18.3 versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S10; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R2-S5, 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2-S2, 21.1R3; 21.2 versions prior to 21.2R1-S2, 21.2R2. Juniper Networks Junos OS Evolved 21.2 versions prior to 21.2R3-EVO; 21.3 versions prior to 21.3R2-EVO.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-5x25-cf4r-8pqp/GHSA-5x25-cf4r-8pqp.json b/advisories/unreviewed/2022/01/GHSA-5x25-cf4r-8pqp/GHSA-5x25-cf4r-8pqp.json index 94d4c3f7359..b5213405923 100644 --- a/advisories/unreviewed/2022/01/GHSA-5x25-cf4r-8pqp/GHSA-5x25-cf4r-8pqp.json +++ b/advisories/unreviewed/2022/01/GHSA-5x25-cf4r-8pqp/GHSA-5x25-cf4r-8pqp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-63gj-7jw2-qccf/GHSA-63gj-7jw2-qccf.json b/advisories/unreviewed/2022/01/GHSA-63gj-7jw2-qccf/GHSA-63gj-7jw2-qccf.json index 3a84c2434eb..922d7801a38 100644 --- a/advisories/unreviewed/2022/01/GHSA-63gj-7jw2-qccf/GHSA-63gj-7jw2-qccf.json +++ b/advisories/unreviewed/2022/01/GHSA-63gj-7jw2-qccf/GHSA-63gj-7jw2-qccf.json @@ -7,12 +7,8 @@ "CVE-2022-23128" ], "details": "Incomplete List of Disallowed Inputs vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01), ICONICS GENESIS64 versions 10.95.3 to 10.97, ICONICS Hyper Historian versions 10.95.3 to 10.97, ICONICS AnalytiX versions 10.95.3 to 10.97 and ICONICS MobileHMI versions 10.95.3 to 10.97 allows a remote unauthenticated attacker to bypass the authentication of MC Works64, GENESIS64, Hyper Historian, AnalytiX and MobileHMI, and gain unauthorized access to the products, by sending specially crafted WebSocket packets to FrameWorX server, one of the functions of the products.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-66fw-g9r2-4h3p/GHSA-66fw-g9r2-4h3p.json b/advisories/unreviewed/2022/01/GHSA-66fw-g9r2-4h3p/GHSA-66fw-g9r2-4h3p.json index 2a4bbda9e00..14da7cbe6e5 100644 --- a/advisories/unreviewed/2022/01/GHSA-66fw-g9r2-4h3p/GHSA-66fw-g9r2-4h3p.json +++ b/advisories/unreviewed/2022/01/GHSA-66fw-g9r2-4h3p/GHSA-66fw-g9r2-4h3p.json @@ -7,12 +7,8 @@ "CVE-2021-46327" ], "details": "Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fx_Array_prototype_sort.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-6jm6-629v-r6pc/GHSA-6jm6-629v-r6pc.json b/advisories/unreviewed/2022/01/GHSA-6jm6-629v-r6pc/GHSA-6jm6-629v-r6pc.json index b48740e541e..201a5298b80 100644 --- a/advisories/unreviewed/2022/01/GHSA-6jm6-629v-r6pc/GHSA-6jm6-629v-r6pc.json +++ b/advisories/unreviewed/2022/01/GHSA-6jm6-629v-r6pc/GHSA-6jm6-629v-r6pc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-6v7x-jpwr-grh2/GHSA-6v7x-jpwr-grh2.json b/advisories/unreviewed/2022/01/GHSA-6v7x-jpwr-grh2/GHSA-6v7x-jpwr-grh2.json index 6876ceb154c..67483a9540f 100644 --- a/advisories/unreviewed/2022/01/GHSA-6v7x-jpwr-grh2/GHSA-6v7x-jpwr-grh2.json +++ b/advisories/unreviewed/2022/01/GHSA-6v7x-jpwr-grh2/GHSA-6v7x-jpwr-grh2.json @@ -7,12 +7,8 @@ "CVE-2021-23236" ], "details": "Requests may be used to interrupt the normal operation of the device. When exploited, Fresenius Kabi Agilia Link+ version 3.0 must be rebooted via a hard reset triggered by pressing a button on the rack system.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-72wq-mgch-x85f/GHSA-72wq-mgch-x85f.json b/advisories/unreviewed/2022/01/GHSA-72wq-mgch-x85f/GHSA-72wq-mgch-x85f.json index 2c7718f2ac1..f6d5f25df8a 100644 --- a/advisories/unreviewed/2022/01/GHSA-72wq-mgch-x85f/GHSA-72wq-mgch-x85f.json +++ b/advisories/unreviewed/2022/01/GHSA-72wq-mgch-x85f/GHSA-72wq-mgch-x85f.json @@ -7,12 +7,8 @@ "CVE-2022-21244" ], "details": "Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2, 20.0.0.0 and 20.0.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Portfolio Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Portfolio Management accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-74x6-4m9v-24wj/GHSA-74x6-4m9v-24wj.json b/advisories/unreviewed/2022/01/GHSA-74x6-4m9v-24wj/GHSA-74x6-4m9v-24wj.json index e019b252525..63b93756c09 100644 --- a/advisories/unreviewed/2022/01/GHSA-74x6-4m9v-24wj/GHSA-74x6-4m9v-24wj.json +++ b/advisories/unreviewed/2022/01/GHSA-74x6-4m9v-24wj/GHSA-74x6-4m9v-24wj.json @@ -7,12 +7,8 @@ "CVE-2022-22156" ], "details": "An Improper Certificate Validation weakness in the Juniper Networks Junos OS allows an attacker to perform Person-in-the-Middle (PitM) attacks when a system script is fetched from a remote source at a specified HTTPS URL, which may compromise the integrity and confidentiality of the device. The following command can be executed by an administrator via the CLI to refresh a script from a remote location, which is affected from this vulnerability: >request system scripts refresh-from (commit | event | extension-service | op | snmp) file filename url This issue affects: Juniper Networks Junos OS All versions prior to 18.4R2-S9, 18.4R3-S9; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R3-S7; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R3; 20.3 versions prior to 20.3R2-S1, 20.3R3; 20.4 versions prior to 20.4R2; 21.1 versions prior to 21.1R1-S1, 21.1R2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-76hq-7c4p-7vcg/GHSA-76hq-7c4p-7vcg.json b/advisories/unreviewed/2022/01/GHSA-76hq-7c4p-7vcg/GHSA-76hq-7c4p-7vcg.json index 5975f015694..be2473d3d6f 100644 --- a/advisories/unreviewed/2022/01/GHSA-76hq-7c4p-7vcg/GHSA-76hq-7c4p-7vcg.json +++ b/advisories/unreviewed/2022/01/GHSA-76hq-7c4p-7vcg/GHSA-76hq-7c4p-7vcg.json @@ -7,12 +7,8 @@ "CVE-2021-46027" ], "details": "mysiteforme, as of 19-12-2022, has a CSRF vulnerability in the background blog management. The attacker constructs a CSRF load. Once the administrator clicks a malicious link, a blog tag will be added", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-78c5-jfvv-4698/GHSA-78c5-jfvv-4698.json b/advisories/unreviewed/2022/01/GHSA-78c5-jfvv-4698/GHSA-78c5-jfvv-4698.json index 68ba3ee28a8..7568c4d0ced 100644 --- a/advisories/unreviewed/2022/01/GHSA-78c5-jfvv-4698/GHSA-78c5-jfvv-4698.json +++ b/advisories/unreviewed/2022/01/GHSA-78c5-jfvv-4698/GHSA-78c5-jfvv-4698.json @@ -7,12 +7,8 @@ "CVE-2021-44593" ], "details": "Simple College Website 1.0 is vulnerable to unauthenticated file upload & remote code execution via UNION-based SQL injection in the username parameter on /admin/login.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-7c49-mcqp-m9wp/GHSA-7c49-mcqp-m9wp.json b/advisories/unreviewed/2022/01/GHSA-7c49-mcqp-m9wp/GHSA-7c49-mcqp-m9wp.json index 9b78a3bee24..00657a1e544 100644 --- a/advisories/unreviewed/2022/01/GHSA-7c49-mcqp-m9wp/GHSA-7c49-mcqp-m9wp.json +++ b/advisories/unreviewed/2022/01/GHSA-7c49-mcqp-m9wp/GHSA-7c49-mcqp-m9wp.json @@ -7,12 +7,8 @@ "CVE-2022-22162" ], "details": "A Generation of Error Message Containing Sensitive Information vulnerability in the CLI of Juniper Networks Junos OS allows a locally authenticated attacker with low privileges to elevate these to the level of any other user logged in via J-Web at this time, potential leading to a full compromise of the device. This issue affects Juniper Networks Junos OS: All versions prior to 15.1R7-S11; 18.3 versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S10; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R1-S1, 21.2R2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-7cwj-qrmc-fh7m/GHSA-7cwj-qrmc-fh7m.json b/advisories/unreviewed/2022/01/GHSA-7cwj-qrmc-fh7m/GHSA-7cwj-qrmc-fh7m.json index 15fe561c542..00fcf5e395e 100644 --- a/advisories/unreviewed/2022/01/GHSA-7cwj-qrmc-fh7m/GHSA-7cwj-qrmc-fh7m.json +++ b/advisories/unreviewed/2022/01/GHSA-7cwj-qrmc-fh7m/GHSA-7cwj-qrmc-fh7m.json @@ -7,12 +7,8 @@ "CVE-2022-22169" ], "details": "An Improper Initialization vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an attacker who sends specific packets in certain orders and at specific timings to force OSPFv3 to unexpectedly enter graceful-restart (GR helper mode) even though there is not any Grace-LSA received in OSPFv3 causing a Denial of Service (DoS). Unexpectedly entering GR helper mode might cause the OSPFv3 neighbor adjacency formed on this interface to be stuck in the \"INIT\" state which can be observed by issuing the following command: user@device> show ospf3 neighbor ID Interface State xx.xx.xx.xx ae100.0 Init <<<<<<<<<< An indicator of compromise can be seen in log files when traceoptions for OSPFv3 are enabled before the issue occurs. These logfile messages are as follows: OSPF restart signaling: Received hello with LR bit set from nbr ip=xx::xx id=xx.xx.xx.xx. Set oob-resync capabilty 1. OSPF Restart Signaling: Start helper mode for nbr ip xx::xx id xx.xx.xx.xx OSPF restart signaling: abort helper mode for nbr ip=xx::xx id=xx.xx.xx.xx OSPF neighbor xx::xx (realm ipv6-unicast area xx.xx.xx.xx) state changed from Full to Init due to 1WayRcvd (event reason: neighbor is in one-way mode) (nbr helped: 0) This issue affects: Juniper Networks Junos OS. 15.1 versions prior to 15.1R7-S11; 18.3 versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S10; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S7, 19.2R3-S4; 19.3 versions prior to 19.3R2-S7, 19.3R3-S4; 19.4 versions prior to 19.4R3-S6; 20.1 versions prior to 20.1R3-S1; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R2-S2, 20.4R3; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R1-S1, 21.2R2. This issue does not affect any version of Juniper Networks Junos OS 12.3. This issue affects Juniper Networks Junos OS Evolved all versions prior to 21.2R2-EVO.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-7jv6-43f7-v344/GHSA-7jv6-43f7-v344.json b/advisories/unreviewed/2022/01/GHSA-7jv6-43f7-v344/GHSA-7jv6-43f7-v344.json index 9d35e2ffca6..4274d58a255 100644 --- a/advisories/unreviewed/2022/01/GHSA-7jv6-43f7-v344/GHSA-7jv6-43f7-v344.json +++ b/advisories/unreviewed/2022/01/GHSA-7jv6-43f7-v344/GHSA-7jv6-43f7-v344.json @@ -7,12 +7,8 @@ "CVE-2021-46234" ], "details": "A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability can lead to a Denial of Service (DoS).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-7mf8-9863-h6pw/GHSA-7mf8-9863-h6pw.json b/advisories/unreviewed/2022/01/GHSA-7mf8-9863-h6pw/GHSA-7mf8-9863-h6pw.json index 3ffafe51f3f..9afccdcfe51 100644 --- a/advisories/unreviewed/2022/01/GHSA-7mf8-9863-h6pw/GHSA-7mf8-9863-h6pw.json +++ b/advisories/unreviewed/2022/01/GHSA-7mf8-9863-h6pw/GHSA-7mf8-9863-h6pw.json @@ -7,12 +7,8 @@ "CVE-2021-46350" ], "details": "There is an Assertion 'ecma_is_value_object (value)' failed at jerryscript/jerry-core/ecma/base/ecma-helpers-value.c in JerryScript 3.0.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-7mw2-m38p-22r4/GHSA-7mw2-m38p-22r4.json b/advisories/unreviewed/2022/01/GHSA-7mw2-m38p-22r4/GHSA-7mw2-m38p-22r4.json index 2862c5927c4..06ba169148e 100644 --- a/advisories/unreviewed/2022/01/GHSA-7mw2-m38p-22r4/GHSA-7mw2-m38p-22r4.json +++ b/advisories/unreviewed/2022/01/GHSA-7mw2-m38p-22r4/GHSA-7mw2-m38p-22r4.json @@ -7,12 +7,8 @@ "CVE-2021-44092" ], "details": "An SQL Injection vulnerability exists in code-projects Pharmacy Management 1.0 via the username parameter in the administer login form.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-82f9-p6mv-5rcx/GHSA-82f9-p6mv-5rcx.json b/advisories/unreviewed/2022/01/GHSA-82f9-p6mv-5rcx/GHSA-82f9-p6mv-5rcx.json index 4af507703ae..53649de6262 100644 --- a/advisories/unreviewed/2022/01/GHSA-82f9-p6mv-5rcx/GHSA-82f9-p6mv-5rcx.json +++ b/advisories/unreviewed/2022/01/GHSA-82f9-p6mv-5rcx/GHSA-82f9-p6mv-5rcx.json @@ -7,12 +7,8 @@ "CVE-2022-22161" ], "details": "An Uncontrolled Resource Consumption vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated network based attacker to cause 100% CPU load and the device to become unresponsive by sending a flood of traffic to the out-of-band management ethernet port. Continued receipted of a flood will create a sustained Denial of Service (DoS) condition. Once the flood subsides the system will recover by itself. An indication that the system is affected by this issue would be that an irq handled by the fman process is shown to be using a high percentage of CPU cycles like in the following example output: user@host> show system processes extensive ... PID USERNAME PRI NICE SIZE RES STATE TIME WCPU COMMAND 31 root -84 -187 0K 16K WAIT 22.2H 56939.26% irq96: fman0 This issue affects Juniper Networks Junos OS: All versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S9; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R2-S7, 19.3R3-S4; 19.4 versions prior to 19.4R2-S5, 19.4R3-S5; 20.1 versions prior to 20.1R3-S1; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R2-S2, 20.4R3; 21.1 versions prior to 21.1R2; 21.2 versions prior to 21.2R1-S1, 21.2R2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-89wc-v8x9-wrv5/GHSA-89wc-v8x9-wrv5.json b/advisories/unreviewed/2022/01/GHSA-89wc-v8x9-wrv5/GHSA-89wc-v8x9-wrv5.json index 676087bbdc8..8b771e1b690 100644 --- a/advisories/unreviewed/2022/01/GHSA-89wc-v8x9-wrv5/GHSA-89wc-v8x9-wrv5.json +++ b/advisories/unreviewed/2022/01/GHSA-89wc-v8x9-wrv5/GHSA-89wc-v8x9-wrv5.json @@ -7,12 +7,8 @@ "CVE-2021-4032" ], "details": "A vulnerability was found in the Linux kernel's KVM subsystem in arch/x86/kvm/lapic.c kvm_free_lapic when a failure allocation was detected. In this flaw the KVM subsystem may crash the kernel due to mishandling of memory errors that happens during VCPU construction, which allows an attacker with special user privilege to cause a denial of service. This flaw affects kernel versions prior to 5.15 rc7.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-8fqp-54rg-gv75/GHSA-8fqp-54rg-gv75.json b/advisories/unreviewed/2022/01/GHSA-8fqp-54rg-gv75/GHSA-8fqp-54rg-gv75.json index ce69caef3c0..8b3b6368c99 100644 --- a/advisories/unreviewed/2022/01/GHSA-8fqp-54rg-gv75/GHSA-8fqp-54rg-gv75.json +++ b/advisories/unreviewed/2022/01/GHSA-8fqp-54rg-gv75/GHSA-8fqp-54rg-gv75.json @@ -7,12 +7,8 @@ "CVE-2021-46237" ], "details": "An untrusted pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_node_unregister () at scenegraph/base_scenegraph.c. This vulnerability can lead to a Denial of Service (DoS).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-8whv-9rrr-8p39/GHSA-8whv-9rrr-8p39.json b/advisories/unreviewed/2022/01/GHSA-8whv-9rrr-8p39/GHSA-8whv-9rrr-8p39.json index e39c17f4e67..5102cd4c82d 100644 --- a/advisories/unreviewed/2022/01/GHSA-8whv-9rrr-8p39/GHSA-8whv-9rrr-8p39.json +++ b/advisories/unreviewed/2022/01/GHSA-8whv-9rrr-8p39/GHSA-8whv-9rrr-8p39.json @@ -7,12 +7,8 @@ "CVE-2022-22175" ], "details": "An Improper Locking vulnerability in the SIP ALG of Juniper Networks Junos OS on MX Series and SRX Series allows an unauthenticated networked attacker to cause a flowprocessing daemon (flowd) crash and thereby a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. This issue can occur in a scenario where the SIP ALG is enabled and specific SIP messages are being processed simultaneously. This issue affects: Juniper Networks Junos OS on MX Series and SRX Series 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R2-S2, 21.1R3; 21.2 versions prior to 21.2R1-S2, 21.2R2; 21.3 versions prior to 21.3R1-S1, 21.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-8xjg-wj8f-q7jg/GHSA-8xjg-wj8f-q7jg.json b/advisories/unreviewed/2022/01/GHSA-8xjg-wj8f-q7jg/GHSA-8xjg-wj8f-q7jg.json index e385c5f3453..ed693b1102c 100644 --- a/advisories/unreviewed/2022/01/GHSA-8xjg-wj8f-q7jg/GHSA-8xjg-wj8f-q7jg.json +++ b/advisories/unreviewed/2022/01/GHSA-8xjg-wj8f-q7jg/GHSA-8xjg-wj8f-q7jg.json @@ -7,12 +7,8 @@ "CVE-2021-46345" ], "details": "There is an Assertion 'cesu8_cursor_p == cesu8_end_p' failed at /jerry-core/lit/lit-strings.c in JerryScript 3.0.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-969m-m65f-7m6f/GHSA-969m-m65f-7m6f.json b/advisories/unreviewed/2022/01/GHSA-969m-m65f-7m6f/GHSA-969m-m65f-7m6f.json index 161a0e4a9d2..7a8961f3caa 100644 --- a/advisories/unreviewed/2022/01/GHSA-969m-m65f-7m6f/GHSA-969m-m65f-7m6f.json +++ b/advisories/unreviewed/2022/01/GHSA-969m-m65f-7m6f/GHSA-969m-m65f-7m6f.json @@ -7,12 +7,8 @@ "CVE-2021-46061" ], "details": "An SQL Injection vulnerability exists in Sourcecodester Computer and Mobile Repair Shop Management system (RSMS) 1.0 via the code parameter in /rsms/ node app.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-96xp-643q-fhqg/GHSA-96xp-643q-fhqg.json b/advisories/unreviewed/2022/01/GHSA-96xp-643q-fhqg/GHSA-96xp-643q-fhqg.json index 5e7f77acdf1..07b27a46639 100644 --- a/advisories/unreviewed/2022/01/GHSA-96xp-643q-fhqg/GHSA-96xp-643q-fhqg.json +++ b/advisories/unreviewed/2022/01/GHSA-96xp-643q-fhqg/GHSA-96xp-643q-fhqg.json @@ -7,12 +7,8 @@ "CVE-2020-4877" ], "details": "IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could be vulnerable to unauthorized modifications by using public fields in public classes. IBM X-Force ID: 190843.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-988q-3gg8-f4r5/GHSA-988q-3gg8-f4r5.json b/advisories/unreviewed/2022/01/GHSA-988q-3gg8-f4r5/GHSA-988q-3gg8-f4r5.json index ebf00e22cce..115cb624c1b 100644 --- a/advisories/unreviewed/2022/01/GHSA-988q-3gg8-f4r5/GHSA-988q-3gg8-f4r5.json +++ b/advisories/unreviewed/2022/01/GHSA-988q-3gg8-f4r5/GHSA-988q-3gg8-f4r5.json @@ -7,12 +7,8 @@ "CVE-2021-46335" ], "details": "Moddable SDK v11.5.0 was discovered to contain a NULL pointer dereference in the component fx_Function_prototype_hasInstance.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-9f28-3755-pm9c/GHSA-9f28-3755-pm9c.json b/advisories/unreviewed/2022/01/GHSA-9f28-3755-pm9c/GHSA-9f28-3755-pm9c.json index 38066613e3b..ba0056669af 100644 --- a/advisories/unreviewed/2022/01/GHSA-9f28-3755-pm9c/GHSA-9f28-3755-pm9c.json +++ b/advisories/unreviewed/2022/01/GHSA-9f28-3755-pm9c/GHSA-9f28-3755-pm9c.json @@ -7,12 +7,8 @@ "CVE-2021-44244" ], "details": "An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username parameter in login.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-9q64-8g8h-wr27/GHSA-9q64-8g8h-wr27.json b/advisories/unreviewed/2022/01/GHSA-9q64-8g8h-wr27/GHSA-9q64-8g8h-wr27.json index 0191073d812..6ba8d6b2cac 100644 --- a/advisories/unreviewed/2022/01/GHSA-9q64-8g8h-wr27/GHSA-9q64-8g8h-wr27.json +++ b/advisories/unreviewed/2022/01/GHSA-9q64-8g8h-wr27/GHSA-9q64-8g8h-wr27.json @@ -7,12 +7,8 @@ "CVE-2022-23130" ], "details": "Buffer Over-read vulnerability in Mitsubishi Electric MC Works64 versions 4.00A (10.95.201.23) to 4.04E (10.95.210.01), ICONICS GENESIS64 versions 10.97 and prior and ICONICS Hyper Historian versions 10.97 and prior allows an attacker to cause a DoS condition in the database server by getting a legitimate user to import a configuration file containing specially crafted stored procedures into GENESIS64 or MC Works64 and execute commands against the database from GENESIS64 or MC Works64.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-9qpx-hw6q-qw9h/GHSA-9qpx-hw6q-qw9h.json b/advisories/unreviewed/2022/01/GHSA-9qpx-hw6q-qw9h/GHSA-9qpx-hw6q-qw9h.json index 033c14a75cc..d6eec6747ca 100644 --- a/advisories/unreviewed/2022/01/GHSA-9qpx-hw6q-qw9h/GHSA-9qpx-hw6q-qw9h.json +++ b/advisories/unreviewed/2022/01/GHSA-9qpx-hw6q-qw9h/GHSA-9qpx-hw6q-qw9h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-9r4f-wr6h-rg8h/GHSA-9r4f-wr6h-rg8h.json b/advisories/unreviewed/2022/01/GHSA-9r4f-wr6h-rg8h/GHSA-9r4f-wr6h-rg8h.json index 518c91c9fdd..8b420e0aee3 100644 --- a/advisories/unreviewed/2022/01/GHSA-9r4f-wr6h-rg8h/GHSA-9r4f-wr6h-rg8h.json +++ b/advisories/unreviewed/2022/01/GHSA-9r4f-wr6h-rg8h/GHSA-9r4f-wr6h-rg8h.json @@ -7,12 +7,8 @@ "CVE-2022-22174" ], "details": "A vulnerability in the processing of inbound IPv6 packets in Juniper Networks Junos OS on QFX5000 Series and EX4600 switches may cause the memory to not be freed, leading to a packet DMA memory leak, and eventual Denial of Service (DoS) condition. Once the condition occurs, further packet processing will be impacted, creating a sustained Denial of Service (DoS) condition. The following error logs may be observed using the \"show heap\" command and the device may eventually run out of memory if such packets are received continuously. Jan 12 12:00:00 device-name fpc0 (buf alloc) failed allocating packet buffer Jan 12 12:00:01 device-name fpc0 (buf alloc) failed allocating packet buffer user@device-name> request pfe execute target fpc0 timeout 30 command \"show heap\" ID Base Total(b) Free(b) Used(b) % Name -- ---------- ----------- ----------- ----------- --- ----------- 0 246fc1a8 536870488 353653752 183216736 34 Kernel 1 91800000 16777216 12069680 4707536 28 DMA 2 92800000 75497472 69997640 5499832 7 PKT DMA DESC 3 106fc000 335544320 221425960 114118360 34 Bcm_sdk 4 97000000 176160768 200 176160568 99 Packet DMA <<<<<<<<<<<<<< 5 903fffe0 20971504 20971504 0 0 Blob This issue affects Juniper Networks Junos OS on QFX5000 Series, EX4600: 18.3R3 versions prior to 18.3R3-S6; 18.4 versions prior to 18.4R2-S9, 18.4R3-S9; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S3; 19.3 versions prior to 19.3R2-S7, 19.3R3-S4; 19.4 versions prior to 19.4R2-S5, 19.4R3-S6; 20.1 versions prior to 20.1R3-S1; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R1-S1, 21.2R2. This issue does not affect Juniper Networks Junos OS: Any versions prior to 17.4R3; 18.1 versions prior to 18.1R3-S6; 18.2 versions prior to 18.2R3; 18.3 versions prior to 18.3R3; 18.4 versions prior to 18.4R2; 19.1 versions prior to 19.1R2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-c56r-j7rj-7ggx/GHSA-c56r-j7rj-7ggx.json b/advisories/unreviewed/2022/01/GHSA-c56r-j7rj-7ggx/GHSA-c56r-j7rj-7ggx.json index 658f4de149d..8ddc1b65736 100644 --- a/advisories/unreviewed/2022/01/GHSA-c56r-j7rj-7ggx/GHSA-c56r-j7rj-7ggx.json +++ b/advisories/unreviewed/2022/01/GHSA-c56r-j7rj-7ggx/GHSA-c56r-j7rj-7ggx.json @@ -7,12 +7,8 @@ "CVE-2021-46338" ], "details": "There is an Assertion 'ecma_is_lexical_environment (object_p)' failed at /base/ecma-helpers.c(ecma_get_lex_env_type) in JerryScript 3.0.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-c97c-hrfm-f3wc/GHSA-c97c-hrfm-f3wc.json b/advisories/unreviewed/2022/01/GHSA-c97c-hrfm-f3wc/GHSA-c97c-hrfm-f3wc.json index 760295ee828..48ccbb62d63 100644 --- a/advisories/unreviewed/2022/01/GHSA-c97c-hrfm-f3wc/GHSA-c97c-hrfm-f3wc.json +++ b/advisories/unreviewed/2022/01/GHSA-c97c-hrfm-f3wc/GHSA-c97c-hrfm-f3wc.json @@ -7,12 +7,8 @@ "CVE-2021-46346" ], "details": "There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.c(ecma_builtin_date_prototype_dispatch_set):421 in JerryScript 3.0.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-c9g2-65fq-w8q5/GHSA-c9g2-65fq-w8q5.json b/advisories/unreviewed/2022/01/GHSA-c9g2-65fq-w8q5/GHSA-c9g2-65fq-w8q5.json index 3dcef8c484f..6ab235fdcf6 100644 --- a/advisories/unreviewed/2022/01/GHSA-c9g2-65fq-w8q5/GHSA-c9g2-65fq-w8q5.json +++ b/advisories/unreviewed/2022/01/GHSA-c9g2-65fq-w8q5/GHSA-c9g2-65fq-w8q5.json @@ -7,12 +7,8 @@ "CVE-2021-3866" ], "details": "Cross-site Scripting (XSS) - Stored in GitHub repository zulip/zulip prior to main.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-cp2p-rqxq-j88v/GHSA-cp2p-rqxq-j88v.json b/advisories/unreviewed/2022/01/GHSA-cp2p-rqxq-j88v/GHSA-cp2p-rqxq-j88v.json index c179b1bca7f..9306879aea7 100644 --- a/advisories/unreviewed/2022/01/GHSA-cp2p-rqxq-j88v/GHSA-cp2p-rqxq-j88v.json +++ b/advisories/unreviewed/2022/01/GHSA-cp2p-rqxq-j88v/GHSA-cp2p-rqxq-j88v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-f8q9-grmr-v94f/GHSA-f8q9-grmr-v94f.json b/advisories/unreviewed/2022/01/GHSA-f8q9-grmr-v94f/GHSA-f8q9-grmr-v94f.json index f5d93294218..7eb3f202f73 100644 --- a/advisories/unreviewed/2022/01/GHSA-f8q9-grmr-v94f/GHSA-f8q9-grmr-v94f.json +++ b/advisories/unreviewed/2022/01/GHSA-f8q9-grmr-v94f/GHSA-f8q9-grmr-v94f.json @@ -7,12 +7,8 @@ "CVE-2022-21246" ], "details": "Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Operations Monitor. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Communications Operations Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Operations Monitor accessible data as well as unauthorized read access to a subset of Oracle Communications Operations Monitor accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-fg7h-7gr8-7c25/GHSA-fg7h-7gr8-7c25.json b/advisories/unreviewed/2022/01/GHSA-fg7h-7gr8-7c25/GHSA-fg7h-7gr8-7c25.json index a7e1206546d..fd4a11f6f46 100644 --- a/advisories/unreviewed/2022/01/GHSA-fg7h-7gr8-7c25/GHSA-fg7h-7gr8-7c25.json +++ b/advisories/unreviewed/2022/01/GHSA-fg7h-7gr8-7c25/GHSA-fg7h-7gr8-7c25.json @@ -7,12 +7,8 @@ "CVE-2022-21252" ], "details": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-fqgg-p436-r4xf/GHSA-fqgg-p436-r4xf.json b/advisories/unreviewed/2022/01/GHSA-fqgg-p436-r4xf/GHSA-fqgg-p436-r4xf.json index e46210c183d..3100ae78cbd 100644 --- a/advisories/unreviewed/2022/01/GHSA-fqgg-p436-r4xf/GHSA-fqgg-p436-r4xf.json +++ b/advisories/unreviewed/2022/01/GHSA-fqgg-p436-r4xf/GHSA-fqgg-p436-r4xf.json @@ -7,12 +7,8 @@ "CVE-2021-46311" ], "details": "A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_destroy_routes () at scenegraph/vrml_route.c. This vulnerability can lead to a Denial of Service (DoS).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-fvrw-gf6r-cvvq/GHSA-fvrw-gf6r-cvvq.json b/advisories/unreviewed/2022/01/GHSA-fvrw-gf6r-cvvq/GHSA-fvrw-gf6r-cvvq.json index c9c38a93785..5ec91934171 100644 --- a/advisories/unreviewed/2022/01/GHSA-fvrw-gf6r-cvvq/GHSA-fvrw-gf6r-cvvq.json +++ b/advisories/unreviewed/2022/01/GHSA-fvrw-gf6r-cvvq/GHSA-fvrw-gf6r-cvvq.json @@ -7,12 +7,8 @@ "CVE-2022-21247" ], "details": "Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1 and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Session, Execute Catalog Role privilege with network access via Oracle Net to compromise Core RDBMS. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Core RDBMS accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-fxj2-prj4-mpf5/GHSA-fxj2-prj4-mpf5.json b/advisories/unreviewed/2022/01/GHSA-fxj2-prj4-mpf5/GHSA-fxj2-prj4-mpf5.json index c050ec3408e..80fc3127975 100644 --- a/advisories/unreviewed/2022/01/GHSA-fxj2-prj4-mpf5/GHSA-fxj2-prj4-mpf5.json +++ b/advisories/unreviewed/2022/01/GHSA-fxj2-prj4-mpf5/GHSA-fxj2-prj4-mpf5.json @@ -7,12 +7,8 @@ "CVE-2021-40595" ], "details": "SQL injection vulnerability in Sourcecodester Online Leave Management System v1 by oretnom23, allows attackers to execute arbitrary SQL commands via the username parameter to /leave_system/classes/Login.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-g4r6-gqhm-r23f/GHSA-g4r6-gqhm-r23f.json b/advisories/unreviewed/2022/01/GHSA-g4r6-gqhm-r23f/GHSA-g4r6-gqhm-r23f.json index 655abd1802b..2a926dfdec4 100644 --- a/advisories/unreviewed/2022/01/GHSA-g4r6-gqhm-r23f/GHSA-g4r6-gqhm-r23f.json +++ b/advisories/unreviewed/2022/01/GHSA-g4r6-gqhm-r23f/GHSA-g4r6-gqhm-r23f.json @@ -7,12 +7,8 @@ "CVE-2021-46333" ], "details": "Moddable SDK v11.5.0 was discovered to contain an invalid memory access vulnerability via the component __asan_memmove.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-gmr6-7p48-2v8m/GHSA-gmr6-7p48-2v8m.json b/advisories/unreviewed/2022/01/GHSA-gmr6-7p48-2v8m/GHSA-gmr6-7p48-2v8m.json index 8b48a2ec62e..60e511aee5f 100644 --- a/advisories/unreviewed/2022/01/GHSA-gmr6-7p48-2v8m/GHSA-gmr6-7p48-2v8m.json +++ b/advisories/unreviewed/2022/01/GHSA-gmr6-7p48-2v8m/GHSA-gmr6-7p48-2v8m.json @@ -7,12 +7,8 @@ "CVE-2021-44091" ], "details": "A Cross-Site Scripting (XSS) vulnerability exists in Courcecodester Multi Restaurant Table Reservation System 1.0 in register.php via the (1) fullname, (2) phone, and (3) address parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-gp9g-4g8w-7c72/GHSA-gp9g-4g8w-7c72.json b/advisories/unreviewed/2022/01/GHSA-gp9g-4g8w-7c72/GHSA-gp9g-4g8w-7c72.json index 8b28edd1890..63a82718493 100644 --- a/advisories/unreviewed/2022/01/GHSA-gp9g-4g8w-7c72/GHSA-gp9g-4g8w-7c72.json +++ b/advisories/unreviewed/2022/01/GHSA-gp9g-4g8w-7c72/GHSA-gp9g-4g8w-7c72.json @@ -7,12 +7,8 @@ "CVE-2021-46313" ], "details": "The binary MP4Box in GPAC v1.0.1 was discovered to contain a segmentation fault via the function __memmove_avx_unaligned_erms (). This vulnerability can lead to a Denial of Service (DoS).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-gpqg-9388-qcwr/GHSA-gpqg-9388-qcwr.json b/advisories/unreviewed/2022/01/GHSA-gpqg-9388-qcwr/GHSA-gpqg-9388-qcwr.json index 76b208b6350..70f70a147de 100644 --- a/advisories/unreviewed/2022/01/GHSA-gpqg-9388-qcwr/GHSA-gpqg-9388-qcwr.json +++ b/advisories/unreviewed/2022/01/GHSA-gpqg-9388-qcwr/GHSA-gpqg-9388-qcwr.json @@ -7,12 +7,8 @@ "CVE-2022-23120" ], "details": "A code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to escalate privileges and run arbitrary code in the context of root. Please note: an attacker must first obtain access to the target agent in an un-activated and unconfigured state in order to exploit this vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-h2m5-pc23-rcvh/GHSA-h2m5-pc23-rcvh.json b/advisories/unreviewed/2022/01/GHSA-h2m5-pc23-rcvh/GHSA-h2m5-pc23-rcvh.json index 366a7b6831c..e9218c807d0 100644 --- a/advisories/unreviewed/2022/01/GHSA-h2m5-pc23-rcvh/GHSA-h2m5-pc23-rcvh.json +++ b/advisories/unreviewed/2022/01/GHSA-h2m5-pc23-rcvh/GHSA-h2m5-pc23-rcvh.json @@ -7,12 +7,8 @@ "CVE-2022-22552" ], "details": "Dell EMC AppSync versions 3.9 to 4.3 contain a clickjacking vulnerability in AppSync. A remote unauthenticated attacker could potentially exploit this vulnerability to trick the victim into executing state changing operations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-h4gj-73w7-82hq/GHSA-h4gj-73w7-82hq.json b/advisories/unreviewed/2022/01/GHSA-h4gj-73w7-82hq/GHSA-h4gj-73w7-82hq.json index e7f3e291887..c74d7275658 100644 --- a/advisories/unreviewed/2022/01/GHSA-h4gj-73w7-82hq/GHSA-h4gj-73w7-82hq.json +++ b/advisories/unreviewed/2022/01/GHSA-h4gj-73w7-82hq/GHSA-h4gj-73w7-82hq.json @@ -7,12 +7,8 @@ "CVE-2021-46339" ], "details": "There is an Assertion 'lit_is_valid_cesu8_string (string_p, string_size)' failed at /base/ecma-helpers-string.c(ecma_new_ecma_string_from_utf8) in JerryScript 3.0.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-hgwp-3fxv-f6m7/GHSA-hgwp-3fxv-f6m7.json b/advisories/unreviewed/2022/01/GHSA-hgwp-3fxv-f6m7/GHSA-hgwp-3fxv-f6m7.json index c38eec0a81f..ada6a11ff73 100644 --- a/advisories/unreviewed/2022/01/GHSA-hgwp-3fxv-f6m7/GHSA-hgwp-3fxv-f6m7.json +++ b/advisories/unreviewed/2022/01/GHSA-hgwp-3fxv-f6m7/GHSA-hgwp-3fxv-f6m7.json @@ -7,12 +7,8 @@ "CVE-2021-46332" ], "details": "Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Getter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-hv5p-2fm6-37xc/GHSA-hv5p-2fm6-37xc.json b/advisories/unreviewed/2022/01/GHSA-hv5p-2fm6-37xc/GHSA-hv5p-2fm6-37xc.json index 12f21507e7a..397024396af 100644 --- a/advisories/unreviewed/2022/01/GHSA-hv5p-2fm6-37xc/GHSA-hv5p-2fm6-37xc.json +++ b/advisories/unreviewed/2022/01/GHSA-hv5p-2fm6-37xc/GHSA-hv5p-2fm6-37xc.json @@ -7,12 +7,8 @@ "CVE-2022-22152" ], "details": "A Protection Mechanism Failure vulnerability in the REST API of Juniper Networks Contrail Service Orchestration allows one tenant on the system to view confidential configuration details of another tenant on the same system. By utilizing the REST API, one tenant is able to obtain information on another tenant's firewall configuration and access control policies, as well as other sensitive information, exposing the tenant to reduced defense against malicious attacks or exploitation via additional undetermined vulnerabilities. This issue affects Juniper Networks Contrail Service Orchestration versions prior to 6.1.0 Patch 3.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-hvw2-8437-r836/GHSA-hvw2-8437-r836.json b/advisories/unreviewed/2022/01/GHSA-hvw2-8437-r836/GHSA-hvw2-8437-r836.json index 3b9f21fa5da..c43ddd1890a 100644 --- a/advisories/unreviewed/2022/01/GHSA-hvw2-8437-r836/GHSA-hvw2-8437-r836.json +++ b/advisories/unreviewed/2022/01/GHSA-hvw2-8437-r836/GHSA-hvw2-8437-r836.json @@ -7,12 +7,8 @@ "CVE-2021-44090" ], "details": "An SQL Injection vulnerability exists in Sourcecodester Online Reviewer System 1.0 via the password parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-jhfj-rgfj-cvqh/GHSA-jhfj-rgfj-cvqh.json b/advisories/unreviewed/2022/01/GHSA-jhfj-rgfj-cvqh/GHSA-jhfj-rgfj-cvqh.json index 6f05763beef..87cf339b505 100644 --- a/advisories/unreviewed/2022/01/GHSA-jhfj-rgfj-cvqh/GHSA-jhfj-rgfj-cvqh.json +++ b/advisories/unreviewed/2022/01/GHSA-jhfj-rgfj-cvqh/GHSA-jhfj-rgfj-cvqh.json @@ -7,12 +7,8 @@ "CVE-2021-46236" ], "details": "A NULL pointer dereference vulnerability exists in GPAC v1.1.0 via the function gf_sg_vrml_field_pointer_del () at scenegraph/vrml_tools.c. This vulnerability can lead to a Denial of Service (DoS).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-jph5-m8w5-jfg6/GHSA-jph5-m8w5-jfg6.json b/advisories/unreviewed/2022/01/GHSA-jph5-m8w5-jfg6/GHSA-jph5-m8w5-jfg6.json index 9a15407cf90..c383678c0f0 100644 --- a/advisories/unreviewed/2022/01/GHSA-jph5-m8w5-jfg6/GHSA-jph5-m8w5-jfg6.json +++ b/advisories/unreviewed/2022/01/GHSA-jph5-m8w5-jfg6/GHSA-jph5-m8w5-jfg6.json @@ -7,12 +7,8 @@ "CVE-2021-46351" ], "details": "There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.c(ecma_builtin_date_prototype_dispatch_set):421 in JerryScript 3.0.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-jpmr-g8fr-7x23/GHSA-jpmr-g8fr-7x23.json b/advisories/unreviewed/2022/01/GHSA-jpmr-g8fr-7x23/GHSA-jpmr-g8fr-7x23.json index 6670a66d055..bdd8e6853d8 100644 --- a/advisories/unreviewed/2022/01/GHSA-jpmr-g8fr-7x23/GHSA-jpmr-g8fr-7x23.json +++ b/advisories/unreviewed/2022/01/GHSA-jpmr-g8fr-7x23/GHSA-jpmr-g8fr-7x23.json @@ -7,12 +7,8 @@ "CVE-2021-44464" ], "details": "Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 contains service credentials likely to be common across all instances. An attacker in possession of the password may gain privileges on all installations of this software.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-m2cw-h5p2-hjpq/GHSA-m2cw-h5p2-hjpq.json b/advisories/unreviewed/2022/01/GHSA-m2cw-h5p2-hjpq/GHSA-m2cw-h5p2-hjpq.json index ce1f9b5091e..620a92e0747 100644 --- a/advisories/unreviewed/2022/01/GHSA-m2cw-h5p2-hjpq/GHSA-m2cw-h5p2-hjpq.json +++ b/advisories/unreviewed/2022/01/GHSA-m2cw-h5p2-hjpq/GHSA-m2cw-h5p2-hjpq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-m2jp-6q38-p4fm/GHSA-m2jp-6q38-p4fm.json b/advisories/unreviewed/2022/01/GHSA-m2jp-6q38-p4fm/GHSA-m2jp-6q38-p4fm.json index 69dad5aab68..408bd0fbd7f 100644 --- a/advisories/unreviewed/2022/01/GHSA-m2jp-6q38-p4fm/GHSA-m2jp-6q38-p4fm.json +++ b/advisories/unreviewed/2022/01/GHSA-m2jp-6q38-p4fm/GHSA-m2jp-6q38-p4fm.json @@ -7,12 +7,8 @@ "CVE-2021-46239" ], "details": "The binary MP4Box in GPAC v1.1.0 was discovered to contain an invalid free vulnerability via the function gf_free () at utils/alloc.c. This vulnerability can lead to a Denial of Service (DoS).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-m3q7-jvp5-mr96/GHSA-m3q7-jvp5-mr96.json b/advisories/unreviewed/2022/01/GHSA-m3q7-jvp5-mr96/GHSA-m3q7-jvp5-mr96.json index d37a3146870..5d0877e8760 100644 --- a/advisories/unreviewed/2022/01/GHSA-m3q7-jvp5-mr96/GHSA-m3q7-jvp5-mr96.json +++ b/advisories/unreviewed/2022/01/GHSA-m3q7-jvp5-mr96/GHSA-m3q7-jvp5-mr96.json @@ -7,12 +7,8 @@ "CVE-2022-21251" ], "details": "Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Instance Main). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Installed Base. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-m467-8fv2-x525/GHSA-m467-8fv2-x525.json b/advisories/unreviewed/2022/01/GHSA-m467-8fv2-x525/GHSA-m467-8fv2-x525.json index 31d646f2467..44cc62ca1cb 100644 --- a/advisories/unreviewed/2022/01/GHSA-m467-8fv2-x525/GHSA-m467-8fv2-x525.json +++ b/advisories/unreviewed/2022/01/GHSA-m467-8fv2-x525/GHSA-m467-8fv2-x525.json @@ -7,12 +7,8 @@ "CVE-2022-22168" ], "details": "An Improper Validation of Specified Type of Input vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to trigger a Missing Release of Memory after Effective Lifetime vulnerability. Continued exploitation of this vulnerability will eventually lead to an FPC reboot and thereby a Denial of Service (DoS). This issue affects: Juniper Networks Junos OS on vMX and MX150: All versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S5; 19.4 versions prior to 19.4R2-S5, 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R1-S1, 21.2R2; 21.3 versions prior to 21.3R1-S1, 21.3R2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-m48x-q5f2-q428/GHSA-m48x-q5f2-q428.json b/advisories/unreviewed/2022/01/GHSA-m48x-q5f2-q428/GHSA-m48x-q5f2-q428.json index 5431fe085de..6d14003ffad 100644 --- a/advisories/unreviewed/2022/01/GHSA-m48x-q5f2-q428/GHSA-m48x-q5f2-q428.json +++ b/advisories/unreviewed/2022/01/GHSA-m48x-q5f2-q428/GHSA-m48x-q5f2-q428.json @@ -7,12 +7,8 @@ "CVE-2021-46326" ], "details": "Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __asan_memcpy.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-m5pf-fxhf-9c22/GHSA-m5pf-fxhf-9c22.json b/advisories/unreviewed/2022/01/GHSA-m5pf-fxhf-9c22/GHSA-m5pf-fxhf-9c22.json index d31ef25c698..4e89750879e 100644 --- a/advisories/unreviewed/2022/01/GHSA-m5pf-fxhf-9c22/GHSA-m5pf-fxhf-9c22.json +++ b/advisories/unreviewed/2022/01/GHSA-m5pf-fxhf-9c22/GHSA-m5pf-fxhf-9c22.json @@ -7,12 +7,8 @@ "CVE-2021-33966" ], "details": "Cross site scripting (XSS) vulnerability in spotweb 1.4.9, allows authenticated attackers to execute arbitrary code via crafted GET request to the login page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-m7r6-rhww-33qh/GHSA-m7r6-rhww-33qh.json b/advisories/unreviewed/2022/01/GHSA-m7r6-rhww-33qh/GHSA-m7r6-rhww-33qh.json index 897b8b6ecc8..93de7bcbc21 100644 --- a/advisories/unreviewed/2022/01/GHSA-m7r6-rhww-33qh/GHSA-m7r6-rhww-33qh.json +++ b/advisories/unreviewed/2022/01/GHSA-m7r6-rhww-33qh/GHSA-m7r6-rhww-33qh.json @@ -7,12 +7,8 @@ "CVE-2022-21243" ], "details": "Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2, 20.0.0.0 and 20.0.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Portfolio Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Primavera Portfolio Management. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-mgwf-4gww-g338/GHSA-mgwf-4gww-g338.json b/advisories/unreviewed/2022/01/GHSA-mgwf-4gww-g338/GHSA-mgwf-4gww-g338.json index c6340c90c6f..62d6ff75865 100644 --- a/advisories/unreviewed/2022/01/GHSA-mgwf-4gww-g338/GHSA-mgwf-4gww-g338.json +++ b/advisories/unreviewed/2022/01/GHSA-mgwf-4gww-g338/GHSA-mgwf-4gww-g338.json @@ -7,12 +7,8 @@ "CVE-2020-4879" ], "details": "IBM Cognos Controller 10.4.0, 10.4.1, and 10.4.2 could allow a remote attacker to bypass security restrictions, caused by improper validation of authentication cookies. IBM X-Force ID: 190847.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-mhv6-jm4c-7hqp/GHSA-mhv6-jm4c-7hqp.json b/advisories/unreviewed/2022/01/GHSA-mhv6-jm4c-7hqp/GHSA-mhv6-jm4c-7hqp.json index 320f83da62c..280472b0bc4 100644 --- a/advisories/unreviewed/2022/01/GHSA-mhv6-jm4c-7hqp/GHSA-mhv6-jm4c-7hqp.json +++ b/advisories/unreviewed/2022/01/GHSA-mhv6-jm4c-7hqp/GHSA-mhv6-jm4c-7hqp.json @@ -7,12 +7,8 @@ "CVE-2021-46349" ], "details": "There is an Assertion 'type == ECMA_OBJECT_TYPE_GENERAL || type == ECMA_OBJECT_TYPE_PROXY' failed at /jerry-core/ecma/operations/ecma-objects.c in JerryScript 3.0.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-mvx9-f55c-65h5/GHSA-mvx9-f55c-65h5.json b/advisories/unreviewed/2022/01/GHSA-mvx9-f55c-65h5/GHSA-mvx9-f55c-65h5.json index 1726583f4ec..a6e0296af46 100644 --- a/advisories/unreviewed/2022/01/GHSA-mvx9-f55c-65h5/GHSA-mvx9-f55c-65h5.json +++ b/advisories/unreviewed/2022/01/GHSA-mvx9-f55c-65h5/GHSA-mvx9-f55c-65h5.json @@ -7,12 +7,8 @@ "CVE-2022-22553" ], "details": "Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vulnerability that can be exploited from UI and CLI. An adjacent unauthenticated attacker could potentially exploit this vulnerability, leading to password brute-forcing. Account takeover is possible if weak passwords are used by users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-p6cr-hm6f-97rw/GHSA-p6cr-hm6f-97rw.json b/advisories/unreviewed/2022/01/GHSA-p6cr-hm6f-97rw/GHSA-p6cr-hm6f-97rw.json index c2523b14d7e..fefaf1f58b3 100644 --- a/advisories/unreviewed/2022/01/GHSA-p6cr-hm6f-97rw/GHSA-p6cr-hm6f-97rw.json +++ b/advisories/unreviewed/2022/01/GHSA-p6cr-hm6f-97rw/GHSA-p6cr-hm6f-97rw.json @@ -7,12 +7,8 @@ "CVE-2022-22167" ], "details": "A traffic classification vulnerability in Juniper Networks Junos OS on the SRX Series Services Gateways may allow an attacker to bypass Juniper Deep Packet Inspection (JDPI) rules and access unauthorized networks or resources, when 'no-syn-check' is enabled on the device. While JDPI correctly classifies out-of-state asymmetric TCP flows as the dynamic-application UNKNOWN, this classification is not provided to the policy module properly and hence traffic continues to use the pre-id-default-policy, which is more permissive, causing the firewall to allow traffic to be forwarded that should have been denied. This issue only occurs when 'set security flow tcp-session no-syn-check' is configured on the device. This issue affects Juniper Networks Junos OS on SRX Series: 18.4 versions prior to 18.4R2-S10, 18.4R3-S10; 19.1 versions prior to 19.1R3-S8; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S3; 19.4 versions prior to 19.4R3-S5; 20.1 versions prior to 20.1R3-S1; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R2-S2, 20.4R3; 21.1 versions prior to 21.1R2-S2, 21.1R3; 21.2 versions prior to 21.2R2. This issue does not affect Juniper Networks Junos OS versions prior to 18.4R1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-pg23-wvf8-rvmv/GHSA-pg23-wvf8-rvmv.json b/advisories/unreviewed/2022/01/GHSA-pg23-wvf8-rvmv/GHSA-pg23-wvf8-rvmv.json index 173d629b0ff..25c043a05be 100644 --- a/advisories/unreviewed/2022/01/GHSA-pg23-wvf8-rvmv/GHSA-pg23-wvf8-rvmv.json +++ b/advisories/unreviewed/2022/01/GHSA-pg23-wvf8-rvmv/GHSA-pg23-wvf8-rvmv.json @@ -7,12 +7,8 @@ "CVE-2022-22178" ], "details": "A Stack-based Buffer Overflow vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on MX Series and SRX series allows an unauthenticated networked attacker to cause a flowd crash and thereby a Denial of Service (DoS). Continued receipt of these specific packets will cause a sustained Denial of Service condition. This issue can be triggered by a specific Session Initiation Protocol (SIP) invite packet if the SIP ALG is enabled. Due to this, the PIC will be rebooted and all traffic that traverses the PIC will be dropped. This issue affects: Juniper Networks Junos OS 20.4 versions prior to 20.4R3-S2; 21.1 versions prior to 21.1R2-S1, 21.1R3; 21.2 versions prior to 21.2R2; 21.3 versions prior to 21.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 20.4R1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-phph-j24c-wpj7/GHSA-phph-j24c-wpj7.json b/advisories/unreviewed/2022/01/GHSA-phph-j24c-wpj7/GHSA-phph-j24c-wpj7.json index fd19cec0532..84a6dbcb8f0 100644 --- a/advisories/unreviewed/2022/01/GHSA-phph-j24c-wpj7/GHSA-phph-j24c-wpj7.json +++ b/advisories/unreviewed/2022/01/GHSA-phph-j24c-wpj7/GHSA-phph-j24c-wpj7.json @@ -7,12 +7,8 @@ "CVE-2022-21242" ], "details": "Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2, 20.0.0.0 and 20.0.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera Portfolio Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-ppgm-7vhc-7c56/GHSA-ppgm-7vhc-7c56.json b/advisories/unreviewed/2022/01/GHSA-ppgm-7vhc-7c56/GHSA-ppgm-7vhc-7c56.json index f12189114c1..ddb59747403 100644 --- a/advisories/unreviewed/2022/01/GHSA-ppgm-7vhc-7c56/GHSA-ppgm-7vhc-7c56.json +++ b/advisories/unreviewed/2022/01/GHSA-ppgm-7vhc-7c56/GHSA-ppgm-7vhc-7c56.json @@ -7,12 +7,8 @@ "CVE-2021-46324" ], "details": "Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-q2w7-c9wp-g9h9/GHSA-q2w7-c9wp-g9h9.json b/advisories/unreviewed/2022/01/GHSA-q2w7-c9wp-g9h9/GHSA-q2w7-c9wp-g9h9.json index 04a1f275c11..215808df6cc 100644 --- a/advisories/unreviewed/2022/01/GHSA-q2w7-c9wp-g9h9/GHSA-q2w7-c9wp-g9h9.json +++ b/advisories/unreviewed/2022/01/GHSA-q2w7-c9wp-g9h9/GHSA-q2w7-c9wp-g9h9.json @@ -7,12 +7,8 @@ "CVE-2021-35687" ], "details": "Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Unified Metadata Manager). Supported versions that are affected are 8.0.7-8.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-q67g-rxmw-649c/GHSA-q67g-rxmw-649c.json b/advisories/unreviewed/2022/01/GHSA-q67g-rxmw-649c/GHSA-q67g-rxmw-649c.json index fe1985c0502..86fae17ea16 100644 --- a/advisories/unreviewed/2022/01/GHSA-q67g-rxmw-649c/GHSA-q67g-rxmw-649c.json +++ b/advisories/unreviewed/2022/01/GHSA-q67g-rxmw-649c/GHSA-q67g-rxmw-649c.json @@ -7,12 +7,8 @@ "CVE-2022-22153" ], "details": "An Insufficient Algorithmic Complexity combined with an Allocation of Resources Without Limits or Throttling vulnerability in the flow processing daemon (flowd) of Juniper Networks Junos OS on SRX Series and MX Series with SPC3 allows an unauthenticated network attacker to cause latency in transit packet processing and even packet loss. If transit traffic includes a significant percentage (> 5%) of fragmented packets which need to be reassembled, high latency or packet drops might be observed. This issue affects Juniper Networks Junos OS on SRX Series, MX Series with SPC3: All versions prior to 18.2R3; 18.3 versions prior to 18.3R3; 18.4 versions prior to 18.4R2-S9, 18.4R3; 19.1 versions prior to 19.1R2; 19.2 versions prior to 19.2R1-S1, 19.2R2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-q8jq-r84f-f54x/GHSA-q8jq-r84f-f54x.json b/advisories/unreviewed/2022/01/GHSA-q8jq-r84f-f54x/GHSA-q8jq-r84f-f54x.json index 31e12f23a03..7822b630506 100644 --- a/advisories/unreviewed/2022/01/GHSA-q8jq-r84f-f54x/GHSA-q8jq-r84f-f54x.json +++ b/advisories/unreviewed/2022/01/GHSA-q8jq-r84f-f54x/GHSA-q8jq-r84f-f54x.json @@ -7,12 +7,8 @@ "CVE-2021-46336" ], "details": "There is an Assertion 'opts & PARSER_CLASS_LITERAL_CTOR_PRESENT' failed at /parser/js/js-parser-expr.c(parser_parse_class_body) in JerryScript 3.0.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-qgv7-2wcr-vmm2/GHSA-qgv7-2wcr-vmm2.json b/advisories/unreviewed/2022/01/GHSA-qgv7-2wcr-vmm2/GHSA-qgv7-2wcr-vmm2.json index 490e90cb518..6ac7e7295cb 100644 --- a/advisories/unreviewed/2022/01/GHSA-qgv7-2wcr-vmm2/GHSA-qgv7-2wcr-vmm2.json +++ b/advisories/unreviewed/2022/01/GHSA-qgv7-2wcr-vmm2/GHSA-qgv7-2wcr-vmm2.json @@ -7,12 +7,8 @@ "CVE-2021-46331" ], "details": "Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetPrototype.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-r465-758h-7ff9/GHSA-r465-758h-7ff9.json b/advisories/unreviewed/2022/01/GHSA-r465-758h-7ff9/GHSA-r465-758h-7ff9.json index aaf5fc2ecc6..eaccc6e9c3c 100644 --- a/advisories/unreviewed/2022/01/GHSA-r465-758h-7ff9/GHSA-r465-758h-7ff9.json +++ b/advisories/unreviewed/2022/01/GHSA-r465-758h-7ff9/GHSA-r465-758h-7ff9.json @@ -7,12 +7,8 @@ "CVE-2022-22163" ], "details": "An Improper Input Validation vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a crash of jdhcpd and thereby a Denial of Service (DoS). If a device is configured as DHCPv6 local server and persistent storage is enabled, jdhcpd will crash when receiving a specific DHCPv6 message. This issue affects: Juniper Networks Junos OS All versions prior to 15.1R7-S11; 18.4 versions prior to 18.4R3-S9; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S3; 19.4 versions prior to 19.4R3-S5; 20.1 versions prior to 20.1R3-S1; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2; 21.2 versions prior to 21.2R2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-r4xc-g4x2-59j9/GHSA-r4xc-g4x2-59j9.json b/advisories/unreviewed/2022/01/GHSA-r4xc-g4x2-59j9/GHSA-r4xc-g4x2-59j9.json index f08fd3cd7db..55e5c21b8cf 100644 --- a/advisories/unreviewed/2022/01/GHSA-r4xc-g4x2-59j9/GHSA-r4xc-g4x2-59j9.json +++ b/advisories/unreviewed/2022/01/GHSA-r4xc-g4x2-59j9/GHSA-r4xc-g4x2-59j9.json @@ -7,12 +7,8 @@ "CVE-2021-46342" ], "details": "There is an Assertion 'ecma_is_lexical_environment (obj_p) || !ecma_op_object_is_fast_array (obj_p)' failed at /jerry-core/ecma/base/ecma-helpers.c in JerryScript 3.0.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-rhw6-mfvp-rwr4/GHSA-rhw6-mfvp-rwr4.json b/advisories/unreviewed/2022/01/GHSA-rhw6-mfvp-rwr4/GHSA-rhw6-mfvp-rwr4.json index e13a7f4bbe4..ec637e74314 100644 --- a/advisories/unreviewed/2022/01/GHSA-rhw6-mfvp-rwr4/GHSA-rhw6-mfvp-rwr4.json +++ b/advisories/unreviewed/2022/01/GHSA-rhw6-mfvp-rwr4/GHSA-rhw6-mfvp-rwr4.json @@ -7,12 +7,8 @@ "CVE-2022-23119" ], "details": "A directory traversal vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to read arbitrary files from the file system. Please note: an attacker must first obtain compromised access to the target Deep Security Manager (DSM) or the target agent must be not yet activated or configured in order to exploit this vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-rm6j-8p3f-rxmg/GHSA-rm6j-8p3f-rxmg.json b/advisories/unreviewed/2022/01/GHSA-rm6j-8p3f-rxmg/GHSA-rm6j-8p3f-rxmg.json index 763efae8f24..9ba55791b88 100644 --- a/advisories/unreviewed/2022/01/GHSA-rm6j-8p3f-rxmg/GHSA-rm6j-8p3f-rxmg.json +++ b/advisories/unreviewed/2022/01/GHSA-rm6j-8p3f-rxmg/GHSA-rm6j-8p3f-rxmg.json @@ -7,12 +7,8 @@ "CVE-2021-35686" ], "details": "Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Unified Metadata Manager). Supported versions that are affected are 8.0.7-8.1.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-rpjh-63xm-7922/GHSA-rpjh-63xm-7922.json b/advisories/unreviewed/2022/01/GHSA-rpjh-63xm-7922/GHSA-rpjh-63xm-7922.json index 0d091d662e9..be215ca4215 100644 --- a/advisories/unreviewed/2022/01/GHSA-rpjh-63xm-7922/GHSA-rpjh-63xm-7922.json +++ b/advisories/unreviewed/2022/01/GHSA-rpjh-63xm-7922/GHSA-rpjh-63xm-7922.json @@ -7,12 +7,8 @@ "CVE-2021-29785" ], "details": "IBM Security SOAR V42 and V43could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 203169.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-rq88-x89h-6r64/GHSA-rq88-x89h-6r64.json b/advisories/unreviewed/2022/01/GHSA-rq88-x89h-6r64/GHSA-rq88-x89h-6r64.json index 5e9011881e5..fcfa9a0752a 100644 --- a/advisories/unreviewed/2022/01/GHSA-rq88-x89h-6r64/GHSA-rq88-x89h-6r64.json +++ b/advisories/unreviewed/2022/01/GHSA-rq88-x89h-6r64/GHSA-rq88-x89h-6r64.json @@ -7,12 +7,8 @@ "CVE-2021-4143" ], "details": "Cross-site Scripting (XSS) - Generic in GitHub repository bigbluebutton/bigbluebutton prior to 2.4.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-v3cc-qm43-9jhp/GHSA-v3cc-qm43-9jhp.json b/advisories/unreviewed/2022/01/GHSA-v3cc-qm43-9jhp/GHSA-v3cc-qm43-9jhp.json index ab520f9fb3b..966d0b6270d 100644 --- a/advisories/unreviewed/2022/01/GHSA-v3cc-qm43-9jhp/GHSA-v3cc-qm43-9jhp.json +++ b/advisories/unreviewed/2022/01/GHSA-v3cc-qm43-9jhp/GHSA-v3cc-qm43-9jhp.json @@ -7,12 +7,8 @@ "CVE-2022-22157" ], "details": "A traffic classification vulnerability in Juniper Networks Junos OS on the SRX Series Services Gateways may allow an attacker to bypass Juniper Deep Packet Inspection (JDPI) rules and access unauthorized networks or resources, when 'no-syn-check' is enabled on the device. JDPI incorrectly classifies out-of-state asymmetric TCP flows as the dynamic-application INCONCLUSIVE instead of UNKNOWN, which is more permissive, causing the firewall to allow traffic to be forwarded that should have been denied. This issue only occurs when 'set security flow tcp-session no-syn-check' is configured on the device. This issue affects Juniper Networks Junos OS on SRX Series: 18.4 versions prior to 18.4R2-S9, 18.4R3-S9; 19.1 versions prior to 19.1R2-S3, 19.1R3-S6; 19.2 versions prior to 19.2R1-S7, 19.2R3-S3; 19.3 versions prior to 19.3R2-S6, 19.3R3-S2; 19.4 versions prior to 19.4R2-S5, 19.4R3-S3; 20.1 versions prior to 20.1R2-S2, 20.1R3; 20.2 versions prior to 20.2R3-S1; 20.3 versions prior to 20.3R3; 20.4 versions prior to 20.4R2-S1, 20.4R3; 21.1 versions prior to 21.1R1-S1, 21.1R2. This issue does not affect Juniper Networks Junos OS versions prior to 18.4R1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-v545-q372-52wc/GHSA-v545-q372-52wc.json b/advisories/unreviewed/2022/01/GHSA-v545-q372-52wc/GHSA-v545-q372-52wc.json index 4075bdad9a9..247b01d7c94 100644 --- a/advisories/unreviewed/2022/01/GHSA-v545-q372-52wc/GHSA-v545-q372-52wc.json +++ b/advisories/unreviewed/2022/01/GHSA-v545-q372-52wc/GHSA-v545-q372-52wc.json @@ -7,12 +7,8 @@ "CVE-2021-46328" ], "details": "Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __libc_start_main.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-v6f8-xxj7-93g3/GHSA-v6f8-xxj7-93g3.json b/advisories/unreviewed/2022/01/GHSA-v6f8-xxj7-93g3/GHSA-v6f8-xxj7-93g3.json index 37a99a897bc..2975560088f 100644 --- a/advisories/unreviewed/2022/01/GHSA-v6f8-xxj7-93g3/GHSA-v6f8-xxj7-93g3.json +++ b/advisories/unreviewed/2022/01/GHSA-v6f8-xxj7-93g3/GHSA-v6f8-xxj7-93g3.json @@ -7,12 +7,8 @@ "CVE-2022-22172" ], "details": "A Missing Release of Memory after Effective Lifetime vulnerability in the Layer-2 control protocols daemon (l2cpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent attacker to cause a memory leak. Continued exploitation can lead to memory exhaustion and thereby a Denial of Service (DoS). This issue occurs when specific LLDP packets are received. The impact of the l2cpd cores is that if any of the stp protocols (rstp, mstp or vstp) is used then stp re-converges and traffic loss will occur during that time. Also if any services depend on LLDP state (like PoE or VoIP device recognition) then these will also be affected. The memory utilization of the L2CPd process can be monitored with the following command: user@host> show system processes extensive | match l2cpd 1234 root 52 0 521M 43412K RUN 1 4:02 34.47% l2cpd This issue affects: Juniper Networks Junos OS 18.4 version 18.4R2-S4 and later versions prior to 18.4R2-S10. 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S5; 19.4 versions prior to 19.4R3-S7; 20.1 versions prior to 20.1R3-S3; 20.2 versions prior to 20.2R3-S2; 20.3 versions prior to 20.3R3-S1; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R2-S2, 21.1R3; 21.2 versions prior to 21.2R2; Juniper Networks Junos OS Evolved All versions prior to 20.4R3-S2-EVO; 21.1 version 21.1R1-EVO and later versions; 21.2 versions prior to 21.2R2-EVO. This issue does not affect: Juniper Networks Junos OS 19.1 version 19.1R1 and later versions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-v6ff-g4q4-fqx2/GHSA-v6ff-g4q4-fqx2.json b/advisories/unreviewed/2022/01/GHSA-v6ff-g4q4-fqx2/GHSA-v6ff-g4q4-fqx2.json index 913a49bc35d..66123a6a18e 100644 --- a/advisories/unreviewed/2022/01/GHSA-v6ff-g4q4-fqx2/GHSA-v6ff-g4q4-fqx2.json +++ b/advisories/unreviewed/2022/01/GHSA-v6ff-g4q4-fqx2/GHSA-v6ff-g4q4-fqx2.json @@ -7,12 +7,8 @@ "CVE-2021-46337" ], "details": "There is an Assertion 'page_p != NULL' failed at /parser/js/js-parser-mem.c(parser_list_get) in JerryScript 3.0.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-v8qm-c69g-x57q/GHSA-v8qm-c69g-x57q.json b/advisories/unreviewed/2022/01/GHSA-v8qm-c69g-x57q/GHSA-v8qm-c69g-x57q.json index 134edd6a9c3..1f2828656d8 100644 --- a/advisories/unreviewed/2022/01/GHSA-v8qm-c69g-x57q/GHSA-v8qm-c69g-x57q.json +++ b/advisories/unreviewed/2022/01/GHSA-v8qm-c69g-x57q/GHSA-v8qm-c69g-x57q.json @@ -7,12 +7,8 @@ "CVE-2022-23129" ], "details": "Plaintext Storage of a Password vulnerability in Mitsubishi Electric MC Works64 versions 4.04E (10.95.210.01) and prior and ICONICS GENESIS64 versions 10.90 to 10.97 allows a local authenticated attacker to gain authentication information and to access the database illegally. This is because when configuration information of GridWorX, a database linkage function of GENESIS64 and MC Works64, is exported to a CSV file, the authentication information is saved in plaintext, and an attacker who can access this CSV file can gain the authentication information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-vcvj-q392-hvpc/GHSA-vcvj-q392-hvpc.json b/advisories/unreviewed/2022/01/GHSA-vcvj-q392-hvpc/GHSA-vcvj-q392-hvpc.json index 40073c51491..7ca28a6a419 100644 --- a/advisories/unreviewed/2022/01/GHSA-vcvj-q392-hvpc/GHSA-vcvj-q392-hvpc.json +++ b/advisories/unreviewed/2022/01/GHSA-vcvj-q392-hvpc/GHSA-vcvj-q392-hvpc.json @@ -7,12 +7,8 @@ "CVE-2021-44738" ], "details": "Buffer overflow vulnerability has been identified in Lexmark devices through 2021-12-07 in postscript interpreter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-vh5r-wc55-95x6/GHSA-vh5r-wc55-95x6.json b/advisories/unreviewed/2022/01/GHSA-vh5r-wc55-95x6/GHSA-vh5r-wc55-95x6.json index d8a57f9abba..5ca0afed92b 100644 --- a/advisories/unreviewed/2022/01/GHSA-vh5r-wc55-95x6/GHSA-vh5r-wc55-95x6.json +++ b/advisories/unreviewed/2022/01/GHSA-vh5r-wc55-95x6/GHSA-vh5r-wc55-95x6.json @@ -7,12 +7,8 @@ "CVE-2021-46334" ], "details": "Moddable SDK v11.5.0 was discovered to contain a stack buffer overflow via the component __interceptor_strcat.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-vrxh-5gxg-rmhm/GHSA-vrxh-5gxg-rmhm.json b/advisories/unreviewed/2022/01/GHSA-vrxh-5gxg-rmhm/GHSA-vrxh-5gxg-rmhm.json index 5badb9ee5a2..7ee215af2f1 100644 --- a/advisories/unreviewed/2022/01/GHSA-vrxh-5gxg-rmhm/GHSA-vrxh-5gxg-rmhm.json +++ b/advisories/unreviewed/2022/01/GHSA-vrxh-5gxg-rmhm/GHSA-vrxh-5gxg-rmhm.json @@ -7,12 +7,8 @@ "CVE-2021-46244" ], "details": "A Divide By Zero vulnerability exists in HDF5 v1.13.1-1 vis the function H5T__complete_copy () at /hdf5/src/H5T.c. This vulnerability causes an aritmetic exception, leading to a Denial of Service (DoS).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-vvwm-gcgm-h9j6/GHSA-vvwm-gcgm-h9j6.json b/advisories/unreviewed/2022/01/GHSA-vvwm-gcgm-h9j6/GHSA-vvwm-gcgm-h9j6.json index a893fe14563..d1694a0bf23 100644 --- a/advisories/unreviewed/2022/01/GHSA-vvwm-gcgm-h9j6/GHSA-vvwm-gcgm-h9j6.json +++ b/advisories/unreviewed/2022/01/GHSA-vvwm-gcgm-h9j6/GHSA-vvwm-gcgm-h9j6.json @@ -7,12 +7,8 @@ "CVE-2021-33846" ], "details": "Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 issues authentication tokens to authenticated users that are signed with a symmetric encryption key. An attacker in possession of the key can issue valid JWTs and impersonate arbitrary users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-vwrw-2hr4-p2rx/GHSA-vwrw-2hr4-p2rx.json b/advisories/unreviewed/2022/01/GHSA-vwrw-2hr4-p2rx/GHSA-vwrw-2hr4-p2rx.json index f21f53ff312..dfa23ec419d 100644 --- a/advisories/unreviewed/2022/01/GHSA-vwrw-2hr4-p2rx/GHSA-vwrw-2hr4-p2rx.json +++ b/advisories/unreviewed/2022/01/GHSA-vwrw-2hr4-p2rx/GHSA-vwrw-2hr4-p2rx.json @@ -7,12 +7,8 @@ "CVE-2022-21255" ], "details": "Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: UI Servlet). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Configurator accessible data as well as unauthorized access to critical data or complete access to all Oracle Configurator accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-vx8c-ppgj-6wg7/GHSA-vx8c-ppgj-6wg7.json b/advisories/unreviewed/2022/01/GHSA-vx8c-ppgj-6wg7/GHSA-vx8c-ppgj-6wg7.json index 38c9d87cec0..b4ea831a3d7 100644 --- a/advisories/unreviewed/2022/01/GHSA-vx8c-ppgj-6wg7/GHSA-vx8c-ppgj-6wg7.json +++ b/advisories/unreviewed/2022/01/GHSA-vx8c-ppgj-6wg7/GHSA-vx8c-ppgj-6wg7.json @@ -7,12 +7,8 @@ "CVE-2021-31562" ], "details": "The SSL/TLS configuration of Fresenius Kabi Agilia Link + version 3.0 has serious deficiencies that may allow an attacker to compromise SSL/TLS sessions in different ways. An attacker may be able to eavesdrop on transferred data, manipulate data allegedly secured by SSL/TLS, and impersonate an entity to gain access to sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-w7gv-qp22-428h/GHSA-w7gv-qp22-428h.json b/advisories/unreviewed/2022/01/GHSA-w7gv-qp22-428h/GHSA-w7gv-qp22-428h.json index a992272d2db..856d7e15eae 100644 --- a/advisories/unreviewed/2022/01/GHSA-w7gv-qp22-428h/GHSA-w7gv-qp22-428h.json +++ b/advisories/unreviewed/2022/01/GHSA-w7gv-qp22-428h/GHSA-w7gv-qp22-428h.json @@ -7,12 +7,8 @@ "CVE-2022-22154" ], "details": "In a Junos Fusion scenario an External Control of Critical State Data vulnerability in the Satellite Device (SD) control state machine of Juniper Networks Junos OS allows an attacker who is able to make physical changes to the cabling of the device to cause a denial of service (DoS). An SD can get rebooted and subsequently controlled by an Aggregation Device (AD) which does not belong to the original Fusion setup and is just connected to an extended port of the SD. To carry out this attack the attacker needs to have physical access to the cabling between the SD and the original AD. This issue affects: Juniper Networks Junos OS 16.1R1 and later versions prior to 18.4R3-S10; 19.1 versions prior to 19.1R3-S7; 19.2 versions prior to 19.2R3-S4. This issue does not affect Juniper Networks Junos OS versions prior to 16.1R1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-wccm-hrj5-mmjf/GHSA-wccm-hrj5-mmjf.json b/advisories/unreviewed/2022/01/GHSA-wccm-hrj5-mmjf/GHSA-wccm-hrj5-mmjf.json index f8e6622f70e..5116c9e9533 100644 --- a/advisories/unreviewed/2022/01/GHSA-wccm-hrj5-mmjf/GHSA-wccm-hrj5-mmjf.json +++ b/advisories/unreviewed/2022/01/GHSA-wccm-hrj5-mmjf/GHSA-wccm-hrj5-mmjf.json @@ -7,12 +7,8 @@ "CVE-2021-46329" ], "details": "Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component _fini.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-wcp3-6gpr-378g/GHSA-wcp3-6gpr-378g.json b/advisories/unreviewed/2022/01/GHSA-wcp3-6gpr-378g/GHSA-wcp3-6gpr-378g.json index 4a7ec4a52b6..eced99d688b 100644 --- a/advisories/unreviewed/2022/01/GHSA-wcp3-6gpr-378g/GHSA-wcp3-6gpr-378g.json +++ b/advisories/unreviewed/2022/01/GHSA-wcp3-6gpr-378g/GHSA-wcp3-6gpr-378g.json @@ -7,12 +7,8 @@ "CVE-2021-46026" ], "details": "mysiteforme, as of 19-12-2022, is vulnerable to Cross Site Scripting (XSS) via the add blog tag function in the blog tag in the background blog management.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-wj92-jwcq-3hpf/GHSA-wj92-jwcq-3hpf.json b/advisories/unreviewed/2022/01/GHSA-wj92-jwcq-3hpf/GHSA-wj92-jwcq-3hpf.json index 3e26ff568eb..027ca751a9f 100644 --- a/advisories/unreviewed/2022/01/GHSA-wj92-jwcq-3hpf/GHSA-wj92-jwcq-3hpf.json +++ b/advisories/unreviewed/2022/01/GHSA-wj92-jwcq-3hpf/GHSA-wj92-jwcq-3hpf.json @@ -7,12 +7,8 @@ "CVE-2021-46340" ], "details": "There is an Assertion 'context_p->stack_top_uint8 == SCAN_STACK_TRY_STATEMENT || context_p->stack_top_uint8 == SCAN_STACK_CATCH_STATEMENT' failed at /parser/js/js-scanner.c(scanner_scan_statement_end) in JerryScript 3.0.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-x4cr-9jmw-52fv/GHSA-x4cr-9jmw-52fv.json b/advisories/unreviewed/2022/01/GHSA-x4cr-9jmw-52fv/GHSA-x4cr-9jmw-52fv.json index 77866fb4b02..8ef69d1351e 100644 --- a/advisories/unreviewed/2022/01/GHSA-x4cr-9jmw-52fv/GHSA-x4cr-9jmw-52fv.json +++ b/advisories/unreviewed/2022/01/GHSA-x4cr-9jmw-52fv/GHSA-x4cr-9jmw-52fv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-x4ff-3f7v-q327/GHSA-x4ff-3f7v-q327.json b/advisories/unreviewed/2022/01/GHSA-x4ff-3f7v-q327/GHSA-x4ff-3f7v-q327.json index 8817b008878..44e54c34a2d 100644 --- a/advisories/unreviewed/2022/01/GHSA-x4ff-3f7v-q327/GHSA-x4ff-3f7v-q327.json +++ b/advisories/unreviewed/2022/01/GHSA-x4ff-3f7v-q327/GHSA-x4ff-3f7v-q327.json @@ -7,12 +7,8 @@ "CVE-2022-22160" ], "details": "An Unchecked Error Condition vulnerability in the subscriber management daemon (smgd) of Juniper Networks Junos OS allows an unauthenticated adjacent attacker to cause a crash of and thereby a Denial of Service (DoS). In a subscriber management / broadband edge environment if a single session group configuration contains dual-stack and a pp0 interface, smgd will crash and restart every time a PPPoE client sends a specific message. This issue affects Juniper Networks Junos OS on MX Series: 16.1 version 16.1R1 and later versions prior to 18.4R3-S10; 19.1 versions prior to 19.1R2-S3, 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R3-S5; 20.1 versions prior to 20.1R3-S3; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S2; 20.4 versions prior to 20.4R3; 21.1 versions prior to 21.1R3; 21.2 versions prior to 21.2R2. This issue does not affect Juniper Networks Junos OS versions prior to 16.1R1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-x6f9-ggpf-g22c/GHSA-x6f9-ggpf-g22c.json b/advisories/unreviewed/2022/01/GHSA-x6f9-ggpf-g22c/GHSA-x6f9-ggpf-g22c.json index 7a529db72cc..8f2f2098f7a 100644 --- a/advisories/unreviewed/2022/01/GHSA-x6f9-ggpf-g22c/GHSA-x6f9-ggpf-g22c.json +++ b/advisories/unreviewed/2022/01/GHSA-x6f9-ggpf-g22c/GHSA-x6f9-ggpf-g22c.json @@ -7,12 +7,8 @@ "CVE-2022-22551" ], "details": "DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An Adjacent, unauthenticated attacker could potentially exploit this vulnerability, and hijack the victim session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-x9pw-hh7v-wjpf/GHSA-x9pw-hh7v-wjpf.json b/advisories/unreviewed/2022/01/GHSA-x9pw-hh7v-wjpf/GHSA-x9pw-hh7v-wjpf.json index 7b68cfb470d..4a6ab5d7ca8 100644 --- a/advisories/unreviewed/2022/01/GHSA-x9pw-hh7v-wjpf/GHSA-x9pw-hh7v-wjpf.json +++ b/advisories/unreviewed/2022/01/GHSA-x9pw-hh7v-wjpf/GHSA-x9pw-hh7v-wjpf.json @@ -7,12 +7,8 @@ "CVE-2021-46242" ], "details": "HDF5 v1.13.1-1 was discovered to contain a heap-use-after free via the component H5AC_unpin_entry.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-x9v8-cw49-c7pf/GHSA-x9v8-cw49-c7pf.json b/advisories/unreviewed/2022/01/GHSA-x9v8-cw49-c7pf/GHSA-x9v8-cw49-c7pf.json index dd099382e41..ded3543a488 100644 --- a/advisories/unreviewed/2022/01/GHSA-x9v8-cw49-c7pf/GHSA-x9v8-cw49-c7pf.json +++ b/advisories/unreviewed/2022/01/GHSA-x9v8-cw49-c7pf/GHSA-x9v8-cw49-c7pf.json @@ -7,12 +7,8 @@ "CVE-2022-22179" ], "details": "A Improper Validation of Specified Index, Position, or Offset in Input vulnerability in the Juniper DHCP daemon (jdhcpd) of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a crash of jdhcpd and thereby a Denial of Service (DoS). In a scenario where DHCP relay or local server is configured the problem can be triggered if a DHCPv4 packet with specific options is received leading to a corruption of the options read from the packet. This corruption can then lead to jdhcpd crash and restart. This issue affects: Juniper Networks Junos OS 17.4R1 and later versions prior to 18.4R3-S10; 19.1 versions prior to 19.1R3-S7; 19.2 versions prior to 19.2R1-S8, 19.2R3-S4; 19.3 versions prior to 19.3R3-S4; 19.4 versions prior to 19.4R3-S6; 20.1 versions prior to 20.1R3-S2; 20.2 versions prior to 20.2R3-S3; 20.3 versions prior to 20.3R3-S2; 20.4 versions prior to 20.4R3-S1; 21.1 versions prior to 21.1R2-S2, 21.1R3; 21.2 versions prior to 21.2R1-S2, 21.2R2, 21.2R3; 21.3 versions prior to 21.3R1-S1, 21.3R2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-xcx8-phhc-xp94/GHSA-xcx8-phhc-xp94.json b/advisories/unreviewed/2022/01/GHSA-xcx8-phhc-xp94/GHSA-xcx8-phhc-xp94.json index c1868373f43..618eac6ff90 100644 --- a/advisories/unreviewed/2022/01/GHSA-xcx8-phhc-xp94/GHSA-xcx8-phhc-xp94.json +++ b/advisories/unreviewed/2022/01/GHSA-xcx8-phhc-xp94/GHSA-xcx8-phhc-xp94.json @@ -7,12 +7,8 @@ "CVE-2021-46347" ], "details": "There is an Assertion 'ecma_object_check_class_name_is_object (obj_p)' failed at /jerry-core/ecma/operations/ecma-objects.c in JerryScript 3.0.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-xm77-x7xq-ghc4/GHSA-xm77-x7xq-ghc4.json b/advisories/unreviewed/2022/01/GHSA-xm77-x7xq-ghc4/GHSA-xm77-x7xq-ghc4.json index c4d496e1944..7bc28e2a0cd 100644 --- a/advisories/unreviewed/2022/01/GHSA-xm77-x7xq-ghc4/GHSA-xm77-x7xq-ghc4.json +++ b/advisories/unreviewed/2022/01/GHSA-xm77-x7xq-ghc4/GHSA-xm77-x7xq-ghc4.json @@ -7,12 +7,8 @@ "CVE-2021-46344" ], "details": "There is an Assertion 'flags & PARSER_PATTERN_HAS_REST_ELEMENT' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-xrfx-3p5r-5f5j/GHSA-xrfx-3p5r-5f5j.json b/advisories/unreviewed/2022/01/GHSA-xrfx-3p5r-5f5j/GHSA-xrfx-3p5r-5f5j.json index 26f6d1a529a..60da5ed70f9 100644 --- a/advisories/unreviewed/2022/01/GHSA-xrfx-3p5r-5f5j/GHSA-xrfx-3p5r-5f5j.json +++ b/advisories/unreviewed/2022/01/GHSA-xrfx-3p5r-5f5j/GHSA-xrfx-3p5r-5f5j.json @@ -7,12 +7,8 @@ "CVE-2021-46323" ], "details": "Espruino 2v11.251 was discovered to contain a SEGV vulnerability via src/jsinteractive.c in jsiGetDeviceFromClass.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/02/GHSA-92ww-hwmg-qq7p/GHSA-92ww-hwmg-qq7p.json b/advisories/unreviewed/2022/02/GHSA-92ww-hwmg-qq7p/GHSA-92ww-hwmg-qq7p.json index c819645034e..7c429b017bd 100644 --- a/advisories/unreviewed/2022/02/GHSA-92ww-hwmg-qq7p/GHSA-92ww-hwmg-qq7p.json +++ b/advisories/unreviewed/2022/02/GHSA-92ww-hwmg-qq7p/GHSA-92ww-hwmg-qq7p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-95xc-w6r5-66hq/GHSA-95xc-w6r5-66hq.json b/advisories/unreviewed/2022/02/GHSA-95xc-w6r5-66hq/GHSA-95xc-w6r5-66hq.json index 3223d51fd07..496e6ee975e 100644 --- a/advisories/unreviewed/2022/02/GHSA-95xc-w6r5-66hq/GHSA-95xc-w6r5-66hq.json +++ b/advisories/unreviewed/2022/02/GHSA-95xc-w6r5-66hq/GHSA-95xc-w6r5-66hq.json @@ -7,12 +7,8 @@ "CVE-2022-23366" ], "details": "HMS v1.0 was discovered to contain a SQL injection vulnerability via patientlogin.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-pv66-8g6m-55pg/GHSA-pv66-8g6m-55pg.json b/advisories/unreviewed/2022/02/GHSA-pv66-8g6m-55pg/GHSA-pv66-8g6m-55pg.json index 3ad8b29f040..05763020a03 100644 --- a/advisories/unreviewed/2022/02/GHSA-pv66-8g6m-55pg/GHSA-pv66-8g6m-55pg.json +++ b/advisories/unreviewed/2022/02/GHSA-pv66-8g6m-55pg/GHSA-pv66-8g6m-55pg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-223c-vgc5-mrv4/GHSA-223c-vgc5-mrv4.json b/advisories/unreviewed/2022/05/GHSA-223c-vgc5-mrv4/GHSA-223c-vgc5-mrv4.json index 07a29b6d25d..714c95581ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-223c-vgc5-mrv4/GHSA-223c-vgc5-mrv4.json +++ b/advisories/unreviewed/2022/05/GHSA-223c-vgc5-mrv4/GHSA-223c-vgc5-mrv4.json @@ -7,12 +7,8 @@ "CVE-2008-6758" ], "details": "Cross-site request forgery (CSRF) vulnerability in cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to hijack the authentication of arbitrary users for requests that conduct persistent cross-site scripting (XSS) attacks via the cart_name parameter in a save action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-22xx-cxvr-pv54/GHSA-22xx-cxvr-pv54.json b/advisories/unreviewed/2022/05/GHSA-22xx-cxvr-pv54/GHSA-22xx-cxvr-pv54.json index 546edf7b227..40623eced65 100644 --- a/advisories/unreviewed/2022/05/GHSA-22xx-cxvr-pv54/GHSA-22xx-cxvr-pv54.json +++ b/advisories/unreviewed/2022/05/GHSA-22xx-cxvr-pv54/GHSA-22xx-cxvr-pv54.json @@ -7,12 +7,8 @@ "CVE-2008-6266" ], "details": "SQL injection vulnerability in links.php in Appalachian State University phpWebSite allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewlink action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2339-wm5r-x92c/GHSA-2339-wm5r-x92c.json b/advisories/unreviewed/2022/05/GHSA-2339-wm5r-x92c/GHSA-2339-wm5r-x92c.json index aef12c397aa..a20590f3ef0 100644 --- a/advisories/unreviewed/2022/05/GHSA-2339-wm5r-x92c/GHSA-2339-wm5r-x92c.json +++ b/advisories/unreviewed/2022/05/GHSA-2339-wm5r-x92c/GHSA-2339-wm5r-x92c.json @@ -7,12 +7,8 @@ "CVE-2008-7038" ], "details": "SQL injection vulnerability in the My_eGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showgall action to modules.php. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2395-q2xh-c2x6/GHSA-2395-q2xh-c2x6.json b/advisories/unreviewed/2022/05/GHSA-2395-q2xh-c2x6/GHSA-2395-q2xh-c2x6.json index 24c460b3da1..b68fa4aa264 100644 --- a/advisories/unreviewed/2022/05/GHSA-2395-q2xh-c2x6/GHSA-2395-q2xh-c2x6.json +++ b/advisories/unreviewed/2022/05/GHSA-2395-q2xh-c2x6/GHSA-2395-q2xh-c2x6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-23v6-mxrm-p953/GHSA-23v6-mxrm-p953.json b/advisories/unreviewed/2022/05/GHSA-23v6-mxrm-p953/GHSA-23v6-mxrm-p953.json index 0b93411af5a..2d5a5c4edf8 100644 --- a/advisories/unreviewed/2022/05/GHSA-23v6-mxrm-p953/GHSA-23v6-mxrm-p953.json +++ b/advisories/unreviewed/2022/05/GHSA-23v6-mxrm-p953/GHSA-23v6-mxrm-p953.json @@ -7,12 +7,8 @@ "CVE-2008-4875" ], "details": "Directory traversal vulnerability in the web server in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote authenticated users to read arbitrary files via a .. (dot dot) in a GET request. NOTE: this can be leveraged with CVE-2008-4874 for unauthenticated access to sensitive files such as (1) save.dat and (2) apply.log, which can contain other credentials such as the Skype username and password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-242r-9p6x-v4gr/GHSA-242r-9p6x-v4gr.json b/advisories/unreviewed/2022/05/GHSA-242r-9p6x-v4gr/GHSA-242r-9p6x-v4gr.json index 115b0dfe4e4..0e229696e08 100644 --- a/advisories/unreviewed/2022/05/GHSA-242r-9p6x-v4gr/GHSA-242r-9p6x-v4gr.json +++ b/advisories/unreviewed/2022/05/GHSA-242r-9p6x-v4gr/GHSA-242r-9p6x-v4gr.json @@ -7,12 +7,8 @@ "CVE-2008-6503" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in PrestaShop 1.1.0.3 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) admin/login.php and (2) order.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-245w-9j9c-6g45/GHSA-245w-9j9c-6g45.json b/advisories/unreviewed/2022/05/GHSA-245w-9j9c-6g45/GHSA-245w-9j9c-6g45.json index 5be026bf936..17bff34b68d 100644 --- a/advisories/unreviewed/2022/05/GHSA-245w-9j9c-6g45/GHSA-245w-9j9c-6g45.json +++ b/advisories/unreviewed/2022/05/GHSA-245w-9j9c-6g45/GHSA-245w-9j9c-6g45.json @@ -7,12 +7,8 @@ "CVE-2010-4311" ], "details": "Free Simple Software 1.0 stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-247f-cp88-29rp/GHSA-247f-cp88-29rp.json b/advisories/unreviewed/2022/05/GHSA-247f-cp88-29rp/GHSA-247f-cp88-29rp.json index f8739c64f31..4ec2e914bbd 100644 --- a/advisories/unreviewed/2022/05/GHSA-247f-cp88-29rp/GHSA-247f-cp88-29rp.json +++ b/advisories/unreviewed/2022/05/GHSA-247f-cp88-29rp/GHSA-247f-cp88-29rp.json @@ -7,12 +7,8 @@ "CVE-2008-5552" ], "details": "The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks via a CRLF sequence in conjunction with a crafted Content-Type header, as demonstrated by a header with a utf-7 charset value. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to \"address every conceivable XSS attack scenario.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-255r-f4p7-p9r5/GHSA-255r-f4p7-p9r5.json b/advisories/unreviewed/2022/05/GHSA-255r-f4p7-p9r5/GHSA-255r-f4p7-p9r5.json index a7a6f5489bc..66dab29f4b9 100644 --- a/advisories/unreviewed/2022/05/GHSA-255r-f4p7-p9r5/GHSA-255r-f4p7-p9r5.json +++ b/advisories/unreviewed/2022/05/GHSA-255r-f4p7-p9r5/GHSA-255r-f4p7-p9r5.json @@ -7,12 +7,8 @@ "CVE-2008-5544" ], "details": "Hacksoft The Hacker 6.3.1.2.174 and possibly 6.3.0.9.081, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-25w9-qw26-8c4r/GHSA-25w9-qw26-8c4r.json b/advisories/unreviewed/2022/05/GHSA-25w9-qw26-8c4r/GHSA-25w9-qw26-8c4r.json index 43a2439ccec..3f9e945a679 100644 --- a/advisories/unreviewed/2022/05/GHSA-25w9-qw26-8c4r/GHSA-25w9-qw26-8c4r.json +++ b/advisories/unreviewed/2022/05/GHSA-25w9-qw26-8c4r/GHSA-25w9-qw26-8c4r.json @@ -7,12 +7,8 @@ "CVE-2008-5401" ], "details": "Stack-based buffer overflow in the image tooltip implementation in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a long image filename, related to \"AIM IMG Tag Parsing.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-268w-4hfm-qgc4/GHSA-268w-4hfm-qgc4.json b/advisories/unreviewed/2022/05/GHSA-268w-4hfm-qgc4/GHSA-268w-4hfm-qgc4.json index db59166b4f6..143433f3c5a 100644 --- a/advisories/unreviewed/2022/05/GHSA-268w-4hfm-qgc4/GHSA-268w-4hfm-qgc4.json +++ b/advisories/unreviewed/2022/05/GHSA-268w-4hfm-qgc4/GHSA-268w-4hfm-qgc4.json @@ -7,12 +7,8 @@ "CVE-2008-6988" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Easy Photo Gallery (aka Ezphotogallery) 2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) galleryid parameter to gallery.php, and the (2) size or (3) imageid parameters to show.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-26qm-jcfr-w44c/GHSA-26qm-jcfr-w44c.json b/advisories/unreviewed/2022/05/GHSA-26qm-jcfr-w44c/GHSA-26qm-jcfr-w44c.json index 22058332815..6bf4c53c688 100644 --- a/advisories/unreviewed/2022/05/GHSA-26qm-jcfr-w44c/GHSA-26qm-jcfr-w44c.json +++ b/advisories/unreviewed/2022/05/GHSA-26qm-jcfr-w44c/GHSA-26qm-jcfr-w44c.json @@ -7,12 +7,8 @@ "CVE-2010-3217" ], "details": "Double free vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a Word document with crafted List Format Override (LFO) records, aka \"Word Pointer Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2768-c9pp-fhfg/GHSA-2768-c9pp-fhfg.json b/advisories/unreviewed/2022/05/GHSA-2768-c9pp-fhfg/GHSA-2768-c9pp-fhfg.json index 5ccad1d5ee5..b8458629d07 100644 --- a/advisories/unreviewed/2022/05/GHSA-2768-c9pp-fhfg/GHSA-2768-c9pp-fhfg.json +++ b/advisories/unreviewed/2022/05/GHSA-2768-c9pp-fhfg/GHSA-2768-c9pp-fhfg.json @@ -7,12 +7,8 @@ "CVE-2010-4870" ], "details": "SQL injection vulnerability in index.php in BloofoxCMS 0.3.5 allows remote attackers to execute arbitrary SQL commands via the gender parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-27cf-pw5g-62cx/GHSA-27cf-pw5g-62cx.json b/advisories/unreviewed/2022/05/GHSA-27cf-pw5g-62cx/GHSA-27cf-pw5g-62cx.json index 801611c8d98..41be181d376 100644 --- a/advisories/unreviewed/2022/05/GHSA-27cf-pw5g-62cx/GHSA-27cf-pw5g-62cx.json +++ b/advisories/unreviewed/2022/05/GHSA-27cf-pw5g-62cx/GHSA-27cf-pw5g-62cx.json @@ -7,12 +7,8 @@ "CVE-2010-3397" ], "details": "Untrusted search path vulnerability in PGP Desktop 9.9.0 Build 397, 9.10.x, 10.0.0 Build 2732, and probably other versions allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse tsp.dll or tvttsp.dll that is located in the same folder as a .p12, .pem, .pgp, .prk, .prvkr, .pubkr, .rnd, or .skr file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-29j4-w239-xhgq/GHSA-29j4-w239-xhgq.json b/advisories/unreviewed/2022/05/GHSA-29j4-w239-xhgq/GHSA-29j4-w239-xhgq.json index 08ac4d9b5fa..0f633c12ec0 100644 --- a/advisories/unreviewed/2022/05/GHSA-29j4-w239-xhgq/GHSA-29j4-w239-xhgq.json +++ b/advisories/unreviewed/2022/05/GHSA-29j4-w239-xhgq/GHSA-29j4-w239-xhgq.json @@ -7,12 +7,8 @@ "CVE-2008-5693" ], "details": "Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2c82-gggj-55f4/GHSA-2c82-gggj-55f4.json b/advisories/unreviewed/2022/05/GHSA-2c82-gggj-55f4/GHSA-2c82-gggj-55f4.json index dd4e7c9c390..b50e9a14fc3 100644 --- a/advisories/unreviewed/2022/05/GHSA-2c82-gggj-55f4/GHSA-2c82-gggj-55f4.json +++ b/advisories/unreviewed/2022/05/GHSA-2c82-gggj-55f4/GHSA-2c82-gggj-55f4.json @@ -7,12 +7,8 @@ "CVE-2010-3945" ], "details": "Buffer overflow in the CGM image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted CGM image in an Office document, aka \"CGM Image Converter Buffer Overrun Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2c86-c788-7r54/GHSA-2c86-c788-7r54.json b/advisories/unreviewed/2022/05/GHSA-2c86-c788-7r54/GHSA-2c86-c788-7r54.json index 849b25e2fbb..24a539a65c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-2c86-c788-7r54/GHSA-2c86-c788-7r54.json +++ b/advisories/unreviewed/2022/05/GHSA-2c86-c788-7r54/GHSA-2c86-c788-7r54.json @@ -7,12 +7,8 @@ "CVE-2008-5234" ], "details": "Multiple heap-based buffer overflows in xine-lib 1.1.12, and other versions before 1.1.15, allow remote attackers to execute arbitrary code via vectors related to (1) a crafted metadata atom size processed by the parse_moov_atom function in demux_qt.c and (2) frame reading in the id3v23_interp_frame function in id3.c. NOTE: as of 20081122, it is possible that vector 1 has not been fixed in 1.1.15.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2c9h-c498-472c/GHSA-2c9h-c498-472c.json b/advisories/unreviewed/2022/05/GHSA-2c9h-c498-472c/GHSA-2c9h-c498-472c.json index 92663631e6f..d040cbb5742 100644 --- a/advisories/unreviewed/2022/05/GHSA-2c9h-c498-472c/GHSA-2c9h-c498-472c.json +++ b/advisories/unreviewed/2022/05/GHSA-2c9h-c498-472c/GHSA-2c9h-c498-472c.json @@ -7,12 +7,8 @@ "CVE-2008-7138" ], "details": "The Manager in Eye-Fi 1.1.2 generates predictable snonce values based on the time of day, which allows remote attackers to bypass authentication and upload arbitrary images by guessing the snonce.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2cjf-q722-7gc5/GHSA-2cjf-q722-7gc5.json b/advisories/unreviewed/2022/05/GHSA-2cjf-q722-7gc5/GHSA-2cjf-q722-7gc5.json index 9eec2e42460..011afbcfe73 100644 --- a/advisories/unreviewed/2022/05/GHSA-2cjf-q722-7gc5/GHSA-2cjf-q722-7gc5.json +++ b/advisories/unreviewed/2022/05/GHSA-2cjf-q722-7gc5/GHSA-2cjf-q722-7gc5.json @@ -7,12 +7,8 @@ "CVE-2008-6572" ], "details": "SQL injection vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows remote attackers to execute arbitrary SQL commands via the keyword parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2f22-97gm-hw85/GHSA-2f22-97gm-hw85.json b/advisories/unreviewed/2022/05/GHSA-2f22-97gm-hw85/GHSA-2f22-97gm-hw85.json index e1bed9163b0..8a470bdda63 100644 --- a/advisories/unreviewed/2022/05/GHSA-2f22-97gm-hw85/GHSA-2f22-97gm-hw85.json +++ b/advisories/unreviewed/2022/05/GHSA-2f22-97gm-hw85/GHSA-2f22-97gm-hw85.json @@ -7,12 +7,8 @@ "CVE-2008-5668" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Textpattern (aka Txp CMS) 4.0.5 allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to setup/index.php or (2) the name parameter to index.php in the comments preview section.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2ff3-f8pr-gg3g/GHSA-2ff3-f8pr-gg3g.json b/advisories/unreviewed/2022/05/GHSA-2ff3-f8pr-gg3g/GHSA-2ff3-f8pr-gg3g.json index 3b21bb65a55..2ac6607e220 100644 --- a/advisories/unreviewed/2022/05/GHSA-2ff3-f8pr-gg3g/GHSA-2ff3-f8pr-gg3g.json +++ b/advisories/unreviewed/2022/05/GHSA-2ff3-f8pr-gg3g/GHSA-2ff3-f8pr-gg3g.json @@ -7,12 +7,8 @@ "CVE-2010-3216" ], "details": "Microsoft Word 2002 SP3 and Office 2004 for Mac allow remote attackers to execute arbitrary code via a crafted Word document containing bookmarks that trigger use of an invalid pointer and memory corruption, aka \"Word Bookmarks Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2fjp-hx49-4fqh/GHSA-2fjp-hx49-4fqh.json b/advisories/unreviewed/2022/05/GHSA-2fjp-hx49-4fqh/GHSA-2fjp-hx49-4fqh.json index fc87f8097ff..0e234087f3b 100644 --- a/advisories/unreviewed/2022/05/GHSA-2fjp-hx49-4fqh/GHSA-2fjp-hx49-4fqh.json +++ b/advisories/unreviewed/2022/05/GHSA-2fjp-hx49-4fqh/GHSA-2fjp-hx49-4fqh.json @@ -7,12 +7,8 @@ "CVE-2010-2571" ], "details": "Array index error in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher 97 file, aka \"Memory Corruption Due To Invalid Index Into Array in Pubconv.dll Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2gr2-w7w7-3x6x/GHSA-2gr2-w7w7-3x6x.json b/advisories/unreviewed/2022/05/GHSA-2gr2-w7w7-3x6x/GHSA-2gr2-w7w7-3x6x.json index 223278baca4..003ba9eb5c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-2gr2-w7w7-3x6x/GHSA-2gr2-w7w7-3x6x.json +++ b/advisories/unreviewed/2022/05/GHSA-2gr2-w7w7-3x6x/GHSA-2gr2-w7w7-3x6x.json @@ -7,12 +7,8 @@ "CVE-2014-0984" ], "details": "The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation of a Route Permission Table entry password upon encountering the first incorrect character, which allows remote attackers to obtain passwords via a brute-force attack that relies on timing differences in responses to incorrect password guesses, aka a timing side-channel attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2gv9-8fwv-h6jx/GHSA-2gv9-8fwv-h6jx.json b/advisories/unreviewed/2022/05/GHSA-2gv9-8fwv-h6jx/GHSA-2gv9-8fwv-h6jx.json index 7f8a1ece8a4..b727b191bdc 100644 --- a/advisories/unreviewed/2022/05/GHSA-2gv9-8fwv-h6jx/GHSA-2gv9-8fwv-h6jx.json +++ b/advisories/unreviewed/2022/05/GHSA-2gv9-8fwv-h6jx/GHSA-2gv9-8fwv-h6jx.json @@ -7,12 +7,8 @@ "CVE-2011-0276" ], "details": "HP OpenView Performance Insight Server 5.2, 5.3, 5.31, 5.4, and 5.41 contains a \"hidden account\" in the com.trinagy.security.XMLUserManager Java class, which allows remote attackers to execute arbitrary code via the doPost method in the com.trinagy.servlet.HelpManagerServlet class.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2jg3-m268-f597/GHSA-2jg3-m268-f597.json b/advisories/unreviewed/2022/05/GHSA-2jg3-m268-f597/GHSA-2jg3-m268-f597.json index 0bf9f3f88b9..a5b087ab60a 100644 --- a/advisories/unreviewed/2022/05/GHSA-2jg3-m268-f597/GHSA-2jg3-m268-f597.json +++ b/advisories/unreviewed/2022/05/GHSA-2jg3-m268-f597/GHSA-2jg3-m268-f597.json @@ -7,12 +7,8 @@ "CVE-2008-4931" ], "details": "Cross-site scripting (XSS) vulnerability in the account module in firmCHANNEL Digital Signage 3.24, and possibly earlier versions, allows remote attackers to inject arbitrary web script or HTML via the action parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2m57-rxhp-5h39/GHSA-2m57-rxhp-5h39.json b/advisories/unreviewed/2022/05/GHSA-2m57-rxhp-5h39/GHSA-2m57-rxhp-5h39.json index 6994080abd0..9407c9ec679 100644 --- a/advisories/unreviewed/2022/05/GHSA-2m57-rxhp-5h39/GHSA-2m57-rxhp-5h39.json +++ b/advisories/unreviewed/2022/05/GHSA-2m57-rxhp-5h39/GHSA-2m57-rxhp-5h39.json @@ -7,12 +7,8 @@ "CVE-2008-5100" ], "details": "The strong name (SN) implementation in Microsoft .NET Framework 2.0.50727 relies on the digital signature Public Key Token embedded in the pathname of a DLL file instead of the digital signature of this file itself, which makes it easier for attackers to bypass Global Assembly Cache (GAC) and Code Access Security (CAS) protection mechanisms, aka MSRC ticket MSRC8566gs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2mpc-gh83-hx93/GHSA-2mpc-gh83-hx93.json b/advisories/unreviewed/2022/05/GHSA-2mpc-gh83-hx93/GHSA-2mpc-gh83-hx93.json index 4fe7a166848..da226b8a26f 100644 --- a/advisories/unreviewed/2022/05/GHSA-2mpc-gh83-hx93/GHSA-2mpc-gh83-hx93.json +++ b/advisories/unreviewed/2022/05/GHSA-2mpc-gh83-hx93/GHSA-2mpc-gh83-hx93.json @@ -7,12 +7,8 @@ "CVE-2010-2748" ], "details": "Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly check an unspecified boundary during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka \"Word Boundary Check Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2p9c-p5jq-7j4g/GHSA-2p9c-p5jq-7j4g.json b/advisories/unreviewed/2022/05/GHSA-2p9c-p5jq-7j4g/GHSA-2p9c-p5jq-7j4g.json index f3e0d661560..07536e2325b 100644 --- a/advisories/unreviewed/2022/05/GHSA-2p9c-p5jq-7j4g/GHSA-2p9c-p5jq-7j4g.json +++ b/advisories/unreviewed/2022/05/GHSA-2p9c-p5jq-7j4g/GHSA-2p9c-p5jq-7j4g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2pw5-cx79-f464/GHSA-2pw5-cx79-f464.json b/advisories/unreviewed/2022/05/GHSA-2pw5-cx79-f464/GHSA-2pw5-cx79-f464.json index f2426f5d246..f870ade556b 100644 --- a/advisories/unreviewed/2022/05/GHSA-2pw5-cx79-f464/GHSA-2pw5-cx79-f464.json +++ b/advisories/unreviewed/2022/05/GHSA-2pw5-cx79-f464/GHSA-2pw5-cx79-f464.json @@ -7,12 +7,8 @@ "CVE-2008-7029" ], "details": "Unrestricted file upload vulnerability in usercp.php in AlilG Application AliBoard Beta allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as an avatar, then accessing it via a direct request to the file in uploads/avatars/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2pxh-g2p3-2pg9/GHSA-2pxh-g2p3-2pg9.json b/advisories/unreviewed/2022/05/GHSA-2pxh-g2p3-2pg9/GHSA-2pxh-g2p3-2pg9.json index 025afc34aad..5cab9dff91f 100644 --- a/advisories/unreviewed/2022/05/GHSA-2pxh-g2p3-2pg9/GHSA-2pxh-g2p3-2pg9.json +++ b/advisories/unreviewed/2022/05/GHSA-2pxh-g2p3-2pg9/GHSA-2pxh-g2p3-2pg9.json @@ -7,12 +7,8 @@ "CVE-2008-6989" ], "details": "SQL injection vulnerability in gallery.php in Easy Photo Gallery (aka Ezphotogallery) 2.1 allows remote attackers to execute arbitrary SQL commands via the username parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2q9v-9rr4-w95c/GHSA-2q9v-9rr4-w95c.json b/advisories/unreviewed/2022/05/GHSA-2q9v-9rr4-w95c/GHSA-2q9v-9rr4-w95c.json index dfed4e901c5..56c3bf255b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-2q9v-9rr4-w95c/GHSA-2q9v-9rr4-w95c.json +++ b/advisories/unreviewed/2022/05/GHSA-2q9v-9rr4-w95c/GHSA-2q9v-9rr4-w95c.json @@ -7,12 +7,8 @@ "CVE-2010-4294" ], "details": "The frame decompression functionality in the VMnc media codec in VMware Movie Decoder before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548, VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548 on Windows, VMware Player 2.5.x before 2.5.5 build 246459 and 3.x before 3.1.2 build 301548 on Windows, and VMware Server 2.x on Windows does not properly validate an unspecified size field, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted video file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2rc6-m8fx-55w4/GHSA-2rc6-m8fx-55w4.json b/advisories/unreviewed/2022/05/GHSA-2rc6-m8fx-55w4/GHSA-2rc6-m8fx-55w4.json index 8174ff4f5c4..eca90cfd147 100644 --- a/advisories/unreviewed/2022/05/GHSA-2rc6-m8fx-55w4/GHSA-2rc6-m8fx-55w4.json +++ b/advisories/unreviewed/2022/05/GHSA-2rc6-m8fx-55w4/GHSA-2rc6-m8fx-55w4.json @@ -7,12 +7,8 @@ "CVE-2010-4188" ], "details": "The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with an IFWV chunk with a size field of 0, which is used in the calculation of a file offset and causes invalid data to be used as a loop counter, triggering a heap-based buffer overflow, a different vulnerability than CVE-2010-2587 and CVE-2010-2588.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2rwr-j5mc-pp8c/GHSA-2rwr-j5mc-pp8c.json b/advisories/unreviewed/2022/05/GHSA-2rwr-j5mc-pp8c/GHSA-2rwr-j5mc-pp8c.json index 869d125dbc2..2f9c19bac8b 100644 --- a/advisories/unreviewed/2022/05/GHSA-2rwr-j5mc-pp8c/GHSA-2rwr-j5mc-pp8c.json +++ b/advisories/unreviewed/2022/05/GHSA-2rwr-j5mc-pp8c/GHSA-2rwr-j5mc-pp8c.json @@ -7,12 +7,8 @@ "CVE-2008-5237" ], "details": "Multiple integer overflows in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via (1) crafted width and height values that are not validated by the mymng_process_header function in demux_mng.c before use in an allocation calculation or (2) crafted current_atom_size and string_size values processed by the parse_reference_atom function in demux_qt.c for an RDRF_ATOM string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2v9h-342r-qg3g/GHSA-2v9h-342r-qg3g.json b/advisories/unreviewed/2022/05/GHSA-2v9h-342r-qg3g/GHSA-2v9h-342r-qg3g.json index ad0f956a0b1..813d74f5881 100644 --- a/advisories/unreviewed/2022/05/GHSA-2v9h-342r-qg3g/GHSA-2v9h-342r-qg3g.json +++ b/advisories/unreviewed/2022/05/GHSA-2v9h-342r-qg3g/GHSA-2v9h-342r-qg3g.json @@ -7,12 +7,8 @@ "CVE-2008-6980" ], "details": "SQL injection vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to execute arbitrary SQL commands via the results_per_page parameter to index.php. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2vq6-7g93-mrhp/GHSA-2vq6-7g93-mrhp.json b/advisories/unreviewed/2022/05/GHSA-2vq6-7g93-mrhp/GHSA-2vq6-7g93-mrhp.json index afa965857a1..e039acf5b18 100644 --- a/advisories/unreviewed/2022/05/GHSA-2vq6-7g93-mrhp/GHSA-2vq6-7g93-mrhp.json +++ b/advisories/unreviewed/2022/05/GHSA-2vq6-7g93-mrhp/GHSA-2vq6-7g93-mrhp.json @@ -7,12 +7,8 @@ "CVE-2010-4403" ], "details": "The Register Plus plugin 3.5.1 and earlier for WordPress allows remote attackers to obtain sensitive information via a direct request to (1) dash_widget.php and (2) register-plus.php, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2w53-4977-5w7j/GHSA-2w53-4977-5w7j.json b/advisories/unreviewed/2022/05/GHSA-2w53-4977-5w7j/GHSA-2w53-4977-5w7j.json index f06158420f4..2118d8aa1b1 100644 --- a/advisories/unreviewed/2022/05/GHSA-2w53-4977-5w7j/GHSA-2w53-4977-5w7j.json +++ b/advisories/unreviewed/2022/05/GHSA-2w53-4977-5w7j/GHSA-2w53-4977-5w7j.json @@ -7,12 +7,8 @@ "CVE-2008-4999" ], "details": "Nortel Networks UNIStim IP Phone 0604DAS allows remote attackers to cause a denial of service (crash) via a long ping packet (\"ping of death\"). NOTE: this issue could not be reproduced by a third party, who tested it on 0604DAD. In addition, the original researcher was not able to reliably reproduce the issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2x96-rv57-c9rf/GHSA-2x96-rv57-c9rf.json b/advisories/unreviewed/2022/05/GHSA-2x96-rv57-c9rf/GHSA-2x96-rv57-c9rf.json index 819bc82c140..712f3e35c2b 100644 --- a/advisories/unreviewed/2022/05/GHSA-2x96-rv57-c9rf/GHSA-2x96-rv57-c9rf.json +++ b/advisories/unreviewed/2022/05/GHSA-2x96-rv57-c9rf/GHSA-2x96-rv57-c9rf.json @@ -7,12 +7,8 @@ "CVE-2008-6619" ], "details": "Unrestricted file upload vulnerability in class/ApplyDB.php in ClassSystem 2.3 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in class/UploadHomepage/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-334f-5c7w-6p82/GHSA-334f-5c7w-6p82.json b/advisories/unreviewed/2022/05/GHSA-334f-5c7w-6p82/GHSA-334f-5c7w-6p82.json index 7455bd91621..7b35a917066 100644 --- a/advisories/unreviewed/2022/05/GHSA-334f-5c7w-6p82/GHSA-334f-5c7w-6p82.json +++ b/advisories/unreviewed/2022/05/GHSA-334f-5c7w-6p82/GHSA-334f-5c7w-6p82.json @@ -7,12 +7,8 @@ "CVE-2010-3337" ], "details": "Untrusted search path vulnerability in Microsoft Office 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka \"Insecure Library Loading Vulnerability.\" NOTE: this might overlap CVE-2010-3141 and CVE-2010-3142.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-337c-6wwr-wfqm/GHSA-337c-6wwr-wfqm.json b/advisories/unreviewed/2022/05/GHSA-337c-6wwr-wfqm/GHSA-337c-6wwr-wfqm.json index cf2392d2af2..c99c3c87614 100644 --- a/advisories/unreviewed/2022/05/GHSA-337c-6wwr-wfqm/GHSA-337c-6wwr-wfqm.json +++ b/advisories/unreviewed/2022/05/GHSA-337c-6wwr-wfqm/GHSA-337c-6wwr-wfqm.json @@ -7,12 +7,8 @@ "CVE-2008-6617" ], "details": "Unrestricted file upload vulnerability in adm/visual/upload.php in SiteXS CMS 0.1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in images/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-34wr-q9h7-hx52/GHSA-34wr-q9h7-hx52.json b/advisories/unreviewed/2022/05/GHSA-34wr-q9h7-hx52/GHSA-34wr-q9h7-hx52.json index 529289f37fc..be937d492d8 100644 --- a/advisories/unreviewed/2022/05/GHSA-34wr-q9h7-hx52/GHSA-34wr-q9h7-hx52.json +++ b/advisories/unreviewed/2022/05/GHSA-34wr-q9h7-hx52/GHSA-34wr-q9h7-hx52.json @@ -7,12 +7,8 @@ "CVE-2008-5425" ], "details": "ESet NOD32 2.70.0039.0000 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many \"Content-type: message/rfc822;\" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-359q-vfg7-7chr/GHSA-359q-vfg7-7chr.json b/advisories/unreviewed/2022/05/GHSA-359q-vfg7-7chr/GHSA-359q-vfg7-7chr.json index ec1e239df0b..9843e2c729b 100644 --- a/advisories/unreviewed/2022/05/GHSA-359q-vfg7-7chr/GHSA-359q-vfg7-7chr.json +++ b/advisories/unreviewed/2022/05/GHSA-359q-vfg7-7chr/GHSA-359q-vfg7-7chr.json @@ -7,12 +7,8 @@ "CVE-2008-5090" ], "details": "Electron Inc. Advanced Electron Forum before 1.0.7 allows remote attackers to execute arbitrary PHP code via PHP code embedded in bbcode in the email parameter, which is processed by the preg_replace function with the eval switch.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-35w5-2xwx-jpp4/GHSA-35w5-2xwx-jpp4.json b/advisories/unreviewed/2022/05/GHSA-35w5-2xwx-jpp4/GHSA-35w5-2xwx-jpp4.json index 18f940dc4a9..b622d685b58 100644 --- a/advisories/unreviewed/2022/05/GHSA-35w5-2xwx-jpp4/GHSA-35w5-2xwx-jpp4.json +++ b/advisories/unreviewed/2022/05/GHSA-35w5-2xwx-jpp4/GHSA-35w5-2xwx-jpp4.json @@ -7,12 +7,8 @@ "CVE-2010-4115" ], "details": "HP StorageWorks Modular Smart Array P2000 G3 firmware TS100R011, TS100R025, TS100P002, TS200R005, TS201R014, and TS201R015 installs an undocumented admin account with a default \"!admin\" password, which allows remote attackers to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3642-x49m-7rpc/GHSA-3642-x49m-7rpc.json b/advisories/unreviewed/2022/05/GHSA-3642-x49m-7rpc/GHSA-3642-x49m-7rpc.json index ace7373a1b6..21af6431029 100644 --- a/advisories/unreviewed/2022/05/GHSA-3642-x49m-7rpc/GHSA-3642-x49m-7rpc.json +++ b/advisories/unreviewed/2022/05/GHSA-3642-x49m-7rpc/GHSA-3642-x49m-7rpc.json @@ -7,12 +7,8 @@ "CVE-2008-6899" ], "details": "Multiple buffer overflows in freeSSHd 1.2.1 allow remote authenticated users to cause a denial of service (crash) and execute arbitrary code via a long (1) open, (2) unlink, (3) mkdir, (4) rmdir, or (5) stat SFTP command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3754-x86m-fj9m/GHSA-3754-x86m-fj9m.json b/advisories/unreviewed/2022/05/GHSA-3754-x86m-fj9m/GHSA-3754-x86m-fj9m.json index a827fe0d65c..4bb97d59ee8 100644 --- a/advisories/unreviewed/2022/05/GHSA-3754-x86m-fj9m/GHSA-3754-x86m-fj9m.json +++ b/advisories/unreviewed/2022/05/GHSA-3754-x86m-fj9m/GHSA-3754-x86m-fj9m.json @@ -7,12 +7,8 @@ "CVE-2008-4775" ], "details": "Cross-site scripting (XSS) vulnerability in pmd_pdf.php in phpMyAdmin 3.0.0, and possibly other versions including 2.11.9.2 and 3.0.1, when register_globals is enabled, allows remote attackers to inject arbitrary web script or HTML via the db parameter, a different vector than CVE-2006-6942 and CVE-2007-5977.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-38hv-wgp2-rgf9/GHSA-38hv-wgp2-rgf9.json b/advisories/unreviewed/2022/05/GHSA-38hv-wgp2-rgf9/GHSA-38hv-wgp2-rgf9.json index de1a07f2d01..184462b015e 100644 --- a/advisories/unreviewed/2022/05/GHSA-38hv-wgp2-rgf9/GHSA-38hv-wgp2-rgf9.json +++ b/advisories/unreviewed/2022/05/GHSA-38hv-wgp2-rgf9/GHSA-38hv-wgp2-rgf9.json @@ -7,12 +7,8 @@ "CVE-2008-6645" ], "details": "Cross-site scripting (XSS) vulnerability in Opencosmo VisualSentinel 0.7 allows remote attackers to inject arbitrary web script or HTML via the User-Agent header ($_SERVER ['HTTP_USER_AGENT']), which is not properly handled when displaying log files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-38vq-hh87-cj57/GHSA-38vq-hh87-cj57.json b/advisories/unreviewed/2022/05/GHSA-38vq-hh87-cj57/GHSA-38vq-hh87-cj57.json index 6460fd53f91..2b40637e8bb 100644 --- a/advisories/unreviewed/2022/05/GHSA-38vq-hh87-cj57/GHSA-38vq-hh87-cj57.json +++ b/advisories/unreviewed/2022/05/GHSA-38vq-hh87-cj57/GHSA-38vq-hh87-cj57.json @@ -7,12 +7,8 @@ "CVE-2008-6027" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in BLUEPAGE CMS 2.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) whl, (2) var_1, and (3) search parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-396v-64fx-m3wv/GHSA-396v-64fx-m3wv.json b/advisories/unreviewed/2022/05/GHSA-396v-64fx-m3wv/GHSA-396v-64fx-m3wv.json index ba60f6d6bd0..fc802eda848 100644 --- a/advisories/unreviewed/2022/05/GHSA-396v-64fx-m3wv/GHSA-396v-64fx-m3wv.json +++ b/advisories/unreviewed/2022/05/GHSA-396v-64fx-m3wv/GHSA-396v-64fx-m3wv.json @@ -7,12 +7,8 @@ "CVE-2008-5792" ], "details": "PHP remote file inclusion vulnerability in show_joined.php in Indiscripts Enthusiast 3.1.4, and possibly earlier, allows remote attackers to execute arbitrary PHP code via a URL in the path parameter. NOTE: the researcher also points out the analogous directory traversal issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3c9r-9m8x-7j76/GHSA-3c9r-9m8x-7j76.json b/advisories/unreviewed/2022/05/GHSA-3c9r-9m8x-7j76/GHSA-3c9r-9m8x-7j76.json index 42eade093f6..c9167b4a0b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-3c9r-9m8x-7j76/GHSA-3c9r-9m8x-7j76.json +++ b/advisories/unreviewed/2022/05/GHSA-3c9r-9m8x-7j76/GHSA-3c9r-9m8x-7j76.json @@ -7,12 +7,8 @@ "CVE-2008-6979" ], "details": "Cross-site scripting (XSS) vulnerability in as_archives.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to inject arbitrary web script or HTML via the results_per_page parameter to index.php. NOTE: some of these details are obtained from third party information. NOTE: this issue might be resultant from a separate SQL injection vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3cgp-ch6g-mqc5/GHSA-3cgp-ch6g-mqc5.json b/advisories/unreviewed/2022/05/GHSA-3cgp-ch6g-mqc5/GHSA-3cgp-ch6g-mqc5.json index a98f5675196..b6c5c526f48 100644 --- a/advisories/unreviewed/2022/05/GHSA-3cgp-ch6g-mqc5/GHSA-3cgp-ch6g-mqc5.json +++ b/advisories/unreviewed/2022/05/GHSA-3cgp-ch6g-mqc5/GHSA-3cgp-ch6g-mqc5.json @@ -7,12 +7,8 @@ "CVE-2010-4233" ], "details": "The Linux installation on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 has a default password of m for the root account, and a default password of merlin for the mg3500 account, which makes it easier for remote attackers to obtain access via the TELNET interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3fx3-qcjv-qr6h/GHSA-3fx3-qcjv-qr6h.json b/advisories/unreviewed/2022/05/GHSA-3fx3-qcjv-qr6h/GHSA-3fx3-qcjv-qr6h.json index 5fd68556691..f5226d8681d 100644 --- a/advisories/unreviewed/2022/05/GHSA-3fx3-qcjv-qr6h/GHSA-3fx3-qcjv-qr6h.json +++ b/advisories/unreviewed/2022/05/GHSA-3fx3-qcjv-qr6h/GHSA-3fx3-qcjv-qr6h.json @@ -7,12 +7,8 @@ "CVE-2008-5353" ], "details": "The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and applications in a privileged context, as demonstrated by \"deserializing Calendar objects\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -188,9 +184,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3gcv-3vj4-42c9/GHSA-3gcv-3vj4-42c9.json b/advisories/unreviewed/2022/05/GHSA-3gcv-3vj4-42c9/GHSA-3gcv-3vj4-42c9.json index 7cd06c11b47..873f74a0b16 100644 --- a/advisories/unreviewed/2022/05/GHSA-3gcv-3vj4-42c9/GHSA-3gcv-3vj4-42c9.json +++ b/advisories/unreviewed/2022/05/GHSA-3gcv-3vj4-42c9/GHSA-3gcv-3vj4-42c9.json @@ -7,12 +7,8 @@ "CVE-2010-3947" ], "details": "Heap-based buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 allows remote attackers to execute arbitrary code via a crafted TIFF image in an Office document, aka \"TIFF Image Converter Heap Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3h5w-8f3f-63f2/GHSA-3h5w-8f3f-63f2.json b/advisories/unreviewed/2022/05/GHSA-3h5w-8f3f-63f2/GHSA-3h5w-8f3f-63f2.json index c760c31d2b2..83131261468 100644 --- a/advisories/unreviewed/2022/05/GHSA-3h5w-8f3f-63f2/GHSA-3h5w-8f3f-63f2.json +++ b/advisories/unreviewed/2022/05/GHSA-3h5w-8f3f-63f2/GHSA-3h5w-8f3f-63f2.json @@ -7,12 +7,8 @@ "CVE-2010-4848" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in addlink.php in AXScripts AxsLinks 0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) url or (2) title parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3h9g-97xj-j9fj/GHSA-3h9g-97xj-j9fj.json b/advisories/unreviewed/2022/05/GHSA-3h9g-97xj-j9fj/GHSA-3h9g-97xj-j9fj.json index e2d48a64746..dcd97a3f5ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-3h9g-97xj-j9fj/GHSA-3h9g-97xj-j9fj.json +++ b/advisories/unreviewed/2022/05/GHSA-3h9g-97xj-j9fj/GHSA-3h9g-97xj-j9fj.json @@ -7,12 +7,8 @@ "CVE-2008-5679" ], "details": "The HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code via crafted web pages that trigger an invalid pointer calculation and heap corruption.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3hgj-mv27-wj4g/GHSA-3hgj-mv27-wj4g.json b/advisories/unreviewed/2022/05/GHSA-3hgj-mv27-wj4g/GHSA-3hgj-mv27-wj4g.json index 672e06b6b5d..222081c09a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-3hgj-mv27-wj4g/GHSA-3hgj-mv27-wj4g.json +++ b/advisories/unreviewed/2022/05/GHSA-3hgj-mv27-wj4g/GHSA-3hgj-mv27-wj4g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3hjg-c8jc-c68f/GHSA-3hjg-c8jc-c68f.json b/advisories/unreviewed/2022/05/GHSA-3hjg-c8jc-c68f/GHSA-3hjg-c8jc-c68f.json index 9b269139250..53016288335 100644 --- a/advisories/unreviewed/2022/05/GHSA-3hjg-c8jc-c68f/GHSA-3hjg-c8jc-c68f.json +++ b/advisories/unreviewed/2022/05/GHSA-3hjg-c8jc-c68f/GHSA-3hjg-c8jc-c68f.json @@ -7,12 +7,8 @@ "CVE-2008-6565" ], "details": "Cross-site scripting (XSS) vulnerability in Invision Power Board 2.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via an IFRAME tag in the signature.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3hv5-2p2f-9642/GHSA-3hv5-2p2f-9642.json b/advisories/unreviewed/2022/05/GHSA-3hv5-2p2f-9642/GHSA-3hv5-2p2f-9642.json index 35a10f59b8d..40579bf36f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-3hv5-2p2f-9642/GHSA-3hv5-2p2f-9642.json +++ b/advisories/unreviewed/2022/05/GHSA-3hv5-2p2f-9642/GHSA-3hv5-2p2f-9642.json @@ -7,12 +7,8 @@ "CVE-2008-6359" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in Max's Guestbook allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, and (3) message parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3j3m-56xj-93qf/GHSA-3j3m-56xj-93qf.json b/advisories/unreviewed/2022/05/GHSA-3j3m-56xj-93qf/GHSA-3j3m-56xj-93qf.json index ddb89636c50..3c5dc4b7a64 100644 --- a/advisories/unreviewed/2022/05/GHSA-3j3m-56xj-93qf/GHSA-3j3m-56xj-93qf.json +++ b/advisories/unreviewed/2022/05/GHSA-3j3m-56xj-93qf/GHSA-3j3m-56xj-93qf.json @@ -7,12 +7,8 @@ "CVE-2008-6510" ], "details": "Cross-site scripting (XSS) vulnerability in login.jsp in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to inject arbitrary web script or HTML via the url parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3jwh-q6hx-pvmh/GHSA-3jwh-q6hx-pvmh.json b/advisories/unreviewed/2022/05/GHSA-3jwh-q6hx-pvmh/GHSA-3jwh-q6hx-pvmh.json index 7e610de5668..9bb1f570a13 100644 --- a/advisories/unreviewed/2022/05/GHSA-3jwh-q6hx-pvmh/GHSA-3jwh-q6hx-pvmh.json +++ b/advisories/unreviewed/2022/05/GHSA-3jwh-q6hx-pvmh/GHSA-3jwh-q6hx-pvmh.json @@ -7,12 +7,8 @@ "CVE-2008-5658" ], "details": "Directory traversal vulnerability in the ZipArchive::extractTo function in PHP 5.2.6 and earlier allows context-dependent attackers to write arbitrary files via a ZIP file with a file whose name contains .. (dot dot) sequences.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3jwm-23jh-8fh8/GHSA-3jwm-23jh-8fh8.json b/advisories/unreviewed/2022/05/GHSA-3jwm-23jh-8fh8/GHSA-3jwm-23jh-8fh8.json index aa21593ca8a..a91057f358b 100644 --- a/advisories/unreviewed/2022/05/GHSA-3jwm-23jh-8fh8/GHSA-3jwm-23jh-8fh8.json +++ b/advisories/unreviewed/2022/05/GHSA-3jwm-23jh-8fh8/GHSA-3jwm-23jh-8fh8.json @@ -7,12 +7,8 @@ "CVE-2010-1990" ], "details": "Mozilla Firefox 3.6.x, 3.5.x, 3.0.19, and earlier, and SeaMonkey, executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service (excessive application launches) via an HTML document with many IFRAME elements.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3jxv-2g3q-q23g/GHSA-3jxv-2g3q-q23g.json b/advisories/unreviewed/2022/05/GHSA-3jxv-2g3q-q23g/GHSA-3jxv-2g3q-q23g.json index f18bd74611d..94e61e535bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-3jxv-2g3q-q23g/GHSA-3jxv-2g3q-q23g.json +++ b/advisories/unreviewed/2022/05/GHSA-3jxv-2g3q-q23g/GHSA-3jxv-2g3q-q23g.json @@ -7,12 +7,8 @@ "CVE-2008-5236" ], "details": "Multiple heap-based buffer overflows in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allow remote attackers to execute arbitrary code via vectors related to (1) a crafted EBML element length processed by the parse_block_group function in demux_matroska.c; (2) a certain combination of sps, w, and h values processed by the real_parse_audio_specific_data and demux_real_send_chunk functions in demux_real.c; and (3) an unspecified combination of three values processed by the open_ra_file function in demux_realaudio.c. NOTE: vector 2 reportedly exists because of an incomplete fix in 1.1.15.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3mg9-wjxc-5593/GHSA-3mg9-wjxc-5593.json b/advisories/unreviewed/2022/05/GHSA-3mg9-wjxc-5593/GHSA-3mg9-wjxc-5593.json index 5fff901dd46..e013aad5e8f 100644 --- a/advisories/unreviewed/2022/05/GHSA-3mg9-wjxc-5593/GHSA-3mg9-wjxc-5593.json +++ b/advisories/unreviewed/2022/05/GHSA-3mg9-wjxc-5593/GHSA-3mg9-wjxc-5593.json @@ -7,12 +7,8 @@ "CVE-2008-7212" ], "details": "MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to obtain sensitive information via certain requests to mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3mp4-xvjw-xm88/GHSA-3mp4-xvjw-xm88.json b/advisories/unreviewed/2022/05/GHSA-3mp4-xvjw-xm88/GHSA-3mp4-xvjw-xm88.json index a765014be4a..28f2c4df77d 100644 --- a/advisories/unreviewed/2022/05/GHSA-3mp4-xvjw-xm88/GHSA-3mp4-xvjw-xm88.json +++ b/advisories/unreviewed/2022/05/GHSA-3mp4-xvjw-xm88/GHSA-3mp4-xvjw-xm88.json @@ -7,12 +7,8 @@ "CVE-2010-4980" ], "details": "SQL injection vulnerability in packagedetails.php in iScripts ReserveLogic 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3p29-2xvp-xq25/GHSA-3p29-2xvp-xq25.json b/advisories/unreviewed/2022/05/GHSA-3p29-2xvp-xq25/GHSA-3p29-2xvp-xq25.json index 76db0f0b591..c03b87f1f0c 100644 --- a/advisories/unreviewed/2022/05/GHSA-3p29-2xvp-xq25/GHSA-3p29-2xvp-xq25.json +++ b/advisories/unreviewed/2022/05/GHSA-3p29-2xvp-xq25/GHSA-3p29-2xvp-xq25.json @@ -7,12 +7,8 @@ "CVE-2008-7174" ], "details": "Multiple buffer overflows in the Jura Internet Connection Kit for the Jura Impressa F90 coffee maker allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors related to improper use of the gets and sprintf functions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3px7-qfpp-9fx8/GHSA-3px7-qfpp-9fx8.json b/advisories/unreviewed/2022/05/GHSA-3px7-qfpp-9fx8/GHSA-3px7-qfpp-9fx8.json index bafc11fc3fb..cf3d0daa230 100644 --- a/advisories/unreviewed/2022/05/GHSA-3px7-qfpp-9fx8/GHSA-3px7-qfpp-9fx8.json +++ b/advisories/unreviewed/2022/05/GHSA-3px7-qfpp-9fx8/GHSA-3px7-qfpp-9fx8.json @@ -7,12 +7,8 @@ "CVE-2010-4784" ], "details": "Multiple SQL injection vulnerabilities in member.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3q72-ch8q-5j47/GHSA-3q72-ch8q-5j47.json b/advisories/unreviewed/2022/05/GHSA-3q72-ch8q-5j47/GHSA-3q72-ch8q-5j47.json index c5b9605ad26..961b5dc9614 100644 --- a/advisories/unreviewed/2022/05/GHSA-3q72-ch8q-5j47/GHSA-3q72-ch8q-5j47.json +++ b/advisories/unreviewed/2022/05/GHSA-3q72-ch8q-5j47/GHSA-3q72-ch8q-5j47.json @@ -7,12 +7,8 @@ "CVE-2008-6528" ], "details": "NTFS TmaxSoft JEUS 5 before Fix 26 allows remote attackers to read the source code for scripts by appending ::$DATA to the URL, which accesses the alternate data stream.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3qw6-xf3r-vm35/GHSA-3qw6-xf3r-vm35.json b/advisories/unreviewed/2022/05/GHSA-3qw6-xf3r-vm35/GHSA-3qw6-xf3r-vm35.json index 5c3cd433b3e..3a6eea44ee8 100644 --- a/advisories/unreviewed/2022/05/GHSA-3qw6-xf3r-vm35/GHSA-3qw6-xf3r-vm35.json +++ b/advisories/unreviewed/2022/05/GHSA-3qw6-xf3r-vm35/GHSA-3qw6-xf3r-vm35.json @@ -7,12 +7,8 @@ "CVE-2008-7221" ], "details": "Cross-site request forgery (CSRF) vulnerability in RunCMS 1.6.1 allows remote attackers to hijack the authentication of administrators for requests that (1) add new administrators or (2) modify user profiles via a crafted request to system/admin.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3vh3-h94g-wh9r/GHSA-3vh3-h94g-wh9r.json b/advisories/unreviewed/2022/05/GHSA-3vh3-h94g-wh9r/GHSA-3vh3-h94g-wh9r.json index 331c6410686..4d274cc49c1 100644 --- a/advisories/unreviewed/2022/05/GHSA-3vh3-h94g-wh9r/GHSA-3vh3-h94g-wh9r.json +++ b/advisories/unreviewed/2022/05/GHSA-3vh3-h94g-wh9r/GHSA-3vh3-h94g-wh9r.json @@ -7,12 +7,8 @@ "CVE-2008-5393" ], "details": "UPR-Kernel in Ubuntu Privacy Remix (UPR) before 8.04_r1 includes kernel support for mounting RAID arrays, which might allow remote attackers to bypass intended isolation mechanisms by (1) reading from or (2) writing to these arrays.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3vqr-47f5-c2xr/GHSA-3vqr-47f5-c2xr.json b/advisories/unreviewed/2022/05/GHSA-3vqr-47f5-c2xr/GHSA-3vqr-47f5-c2xr.json index f55e81af4ca..7aa62be2cf7 100644 --- a/advisories/unreviewed/2022/05/GHSA-3vqr-47f5-c2xr/GHSA-3vqr-47f5-c2xr.json +++ b/advisories/unreviewed/2022/05/GHSA-3vqr-47f5-c2xr/GHSA-3vqr-47f5-c2xr.json @@ -7,12 +7,8 @@ "CVE-2008-7266" ], "details": "Cross-site scripting (XSS) vulnerability in an unspecified Shockwave Flash file in RSA Adaptive Authentication 2.x and 5.7.x allows remote attackers to inject arbitrary web script or HTML via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3whr-qgm8-hgrg/GHSA-3whr-qgm8-hgrg.json b/advisories/unreviewed/2022/05/GHSA-3whr-qgm8-hgrg/GHSA-3whr-qgm8-hgrg.json index 148e555cc93..8d1e67b92ee 100644 --- a/advisories/unreviewed/2022/05/GHSA-3whr-qgm8-hgrg/GHSA-3whr-qgm8-hgrg.json +++ b/advisories/unreviewed/2022/05/GHSA-3whr-qgm8-hgrg/GHSA-3whr-qgm8-hgrg.json @@ -7,12 +7,8 @@ "CVE-2008-4932" ], "details": "webmail/modules/filesystem/edit.php in U-Mail Webmail server 4.91 allows remote attackers to overwrite arbitrary files via an absolute pathname in the path parameter and arbitrary content in the content parameter. NOTE: this can be leveraged for code execution by writing to a file under the web document root.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3x4p-cw57-cgf8/GHSA-3x4p-cw57-cgf8.json b/advisories/unreviewed/2022/05/GHSA-3x4p-cw57-cgf8/GHSA-3x4p-cw57-cgf8.json index 2afd110c231..92923a31431 100644 --- a/advisories/unreviewed/2022/05/GHSA-3x4p-cw57-cgf8/GHSA-3x4p-cw57-cgf8.json +++ b/advisories/unreviewed/2022/05/GHSA-3x4p-cw57-cgf8/GHSA-3x4p-cw57-cgf8.json @@ -7,12 +7,8 @@ "CVE-2010-4255" ], "details": "The fixup_page_fault function in arch/x86/traps.c in Xen 4.0.1 and earlier on 64-bit platforms, when paravirtualization is enabled, does not verify that kernel mode is used to call the handle_gdt_ldt_mapping_fault function, which allows guest OS users to cause a denial of service (host OS BUG_ON) via a crafted memory access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3x5p-6jhj-5q3p/GHSA-3x5p-6jhj-5q3p.json b/advisories/unreviewed/2022/05/GHSA-3x5p-6jhj-5q3p/GHSA-3x5p-6jhj-5q3p.json index 642126e48af..2033cc59247 100644 --- a/advisories/unreviewed/2022/05/GHSA-3x5p-6jhj-5q3p/GHSA-3x5p-6jhj-5q3p.json +++ b/advisories/unreviewed/2022/05/GHSA-3x5p-6jhj-5q3p/GHSA-3x5p-6jhj-5q3p.json @@ -7,12 +7,8 @@ "CVE-2008-5548" ], "details": "VirusBuster 4.5.11.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-423j-x6cf-vmrf/GHSA-423j-x6cf-vmrf.json b/advisories/unreviewed/2022/05/GHSA-423j-x6cf-vmrf/GHSA-423j-x6cf-vmrf.json index 6c888e742dd..89397979a94 100644 --- a/advisories/unreviewed/2022/05/GHSA-423j-x6cf-vmrf/GHSA-423j-x6cf-vmrf.json +++ b/advisories/unreviewed/2022/05/GHSA-423j-x6cf-vmrf/GHSA-423j-x6cf-vmrf.json @@ -7,12 +7,8 @@ "CVE-2008-4727" ], "details": "Cross-site scripting (XSS) vulnerability in the contact update page (ss/bwgkoemr.P_UpdateEmrgContacts) in SunGard Banner Student 7.3 allows remote attackers to inject arbitrary web script or HTML via the addr1 parameter. NOTE: this might be resultant from a CSRF vulnerability, but there are insufficient details to be sure.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-42xp-gpw5-93cm/GHSA-42xp-gpw5-93cm.json b/advisories/unreviewed/2022/05/GHSA-42xp-gpw5-93cm/GHSA-42xp-gpw5-93cm.json index ca484ff53bc..55fb3915360 100644 --- a/advisories/unreviewed/2022/05/GHSA-42xp-gpw5-93cm/GHSA-42xp-gpw5-93cm.json +++ b/advisories/unreviewed/2022/05/GHSA-42xp-gpw5-93cm/GHSA-42xp-gpw5-93cm.json @@ -7,12 +7,8 @@ "CVE-2008-7213" ], "details": "Cross-site scripting (XSS) vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to inject arbitrary web script or HTML via the Command parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-433v-vgvp-w55j/GHSA-433v-vgvp-w55j.json b/advisories/unreviewed/2022/05/GHSA-433v-vgvp-w55j/GHSA-433v-vgvp-w55j.json index c23c4ebcca7..d06a16b929c 100644 --- a/advisories/unreviewed/2022/05/GHSA-433v-vgvp-w55j/GHSA-433v-vgvp-w55j.json +++ b/advisories/unreviewed/2022/05/GHSA-433v-vgvp-w55j/GHSA-433v-vgvp-w55j.json @@ -7,12 +7,8 @@ "CVE-2008-4734" ], "details": "Cross-site request forgery (CSRF) vulnerability in the wpcr_do_options_page function in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to perform unauthorized actions as administrators via a request that sets the wpcr_hidden_form_input parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-442c-c4xc-v7x8/GHSA-442c-c4xc-v7x8.json b/advisories/unreviewed/2022/05/GHSA-442c-c4xc-v7x8/GHSA-442c-c4xc-v7x8.json index ed70437d14e..881181d95e4 100644 --- a/advisories/unreviewed/2022/05/GHSA-442c-c4xc-v7x8/GHSA-442c-c4xc-v7x8.json +++ b/advisories/unreviewed/2022/05/GHSA-442c-c4xc-v7x8/GHSA-442c-c4xc-v7x8.json @@ -7,12 +7,8 @@ "CVE-2011-0407" ], "details": "SQL injection vulnerability in the store function in _phenotype/system/class/PhenoTypeDataObject.class.php in Phenotype CMS 3.0 allows remote attackers to execute arbitrary SQL commands via a crafted URI, as demonstrated by Gallery/gal_id/1/image1,1.html. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4469-wgph-9v83/GHSA-4469-wgph-9v83.json b/advisories/unreviewed/2022/05/GHSA-4469-wgph-9v83/GHSA-4469-wgph-9v83.json index 2f2cfad63a5..867e7cab0b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-4469-wgph-9v83/GHSA-4469-wgph-9v83.json +++ b/advisories/unreviewed/2022/05/GHSA-4469-wgph-9v83/GHSA-4469-wgph-9v83.json @@ -7,12 +7,8 @@ "CVE-2008-5400" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in mvnForum before 1.2.1 GA allow remote attackers to (1) create forums, (2) change account privileges, (3) enable accounts, or (4) disable accounts as a product administrator via unspecified vectors, possibly related to HTTP Referer headers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4483-hx63-9239/GHSA-4483-hx63-9239.json b/advisories/unreviewed/2022/05/GHSA-4483-hx63-9239/GHSA-4483-hx63-9239.json index ffb9410164b..335bd323a67 100644 --- a/advisories/unreviewed/2022/05/GHSA-4483-hx63-9239/GHSA-4483-hx63-9239.json +++ b/advisories/unreviewed/2022/05/GHSA-4483-hx63-9239/GHSA-4483-hx63-9239.json @@ -7,12 +7,8 @@ "CVE-2008-5715" ], "details": "Mozilla Firefox 3.0.5 on Windows Vista allows remote attackers to cause a denial of service (application crash) via JavaScript code with a long string value for the hash property (aka location.hash). NOTE: it was later reported that earlier versions are also affected, and that the impact is CPU consumption and application hang in unspecified circumstances perhaps involving other platforms.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-463w-4vfg-qcpp/GHSA-463w-4vfg-qcpp.json b/advisories/unreviewed/2022/05/GHSA-463w-4vfg-qcpp/GHSA-463w-4vfg-qcpp.json index dde559d47ed..0e54be0cc69 100644 --- a/advisories/unreviewed/2022/05/GHSA-463w-4vfg-qcpp/GHSA-463w-4vfg-qcpp.json +++ b/advisories/unreviewed/2022/05/GHSA-463w-4vfg-qcpp/GHSA-463w-4vfg-qcpp.json @@ -7,12 +7,8 @@ "CVE-2008-5546" ], "details": "VirusBlokAda VBA32 3.12.8.5, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-482p-ffx2-mg3c/GHSA-482p-ffx2-mg3c.json b/advisories/unreviewed/2022/05/GHSA-482p-ffx2-mg3c/GHSA-482p-ffx2-mg3c.json index f93e3eb0b0c..2d7be59e5ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-482p-ffx2-mg3c/GHSA-482p-ffx2-mg3c.json +++ b/advisories/unreviewed/2022/05/GHSA-482p-ffx2-mg3c/GHSA-482p-ffx2-mg3c.json @@ -7,12 +7,8 @@ "CVE-2008-6593" ], "details": "SQL injection vulnerability in LightNEasy/lightneasy.php in LightNEasy SQLite 1.2.2 and earlier allows remote attackers to inject arbitrary PHP code into comments.dat via the dlid parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-485f-hww5-mmf8/GHSA-485f-hww5-mmf8.json b/advisories/unreviewed/2022/05/GHSA-485f-hww5-mmf8/GHSA-485f-hww5-mmf8.json index aff7d91fdfc..f96ffc9d81a 100644 --- a/advisories/unreviewed/2022/05/GHSA-485f-hww5-mmf8/GHSA-485f-hww5-mmf8.json +++ b/advisories/unreviewed/2022/05/GHSA-485f-hww5-mmf8/GHSA-485f-hww5-mmf8.json @@ -7,12 +7,8 @@ "CVE-2008-6592" ], "details": "thumbsup.php in Thumbs-Up 1.12, as used in LightNEasy \"no database\" (aka flat) and SQLite 1.2.2 and earlier, allows remote attackers to copy, rename, and read arbitrary files via directory traversal sequences in the image parameter with a modified cache_dir parameter containing a %00 (encoded null byte).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-486w-64vq-9f27/GHSA-486w-64vq-9f27.json b/advisories/unreviewed/2022/05/GHSA-486w-64vq-9f27/GHSA-486w-64vq-9f27.json index dfef1db6496..999b780f590 100644 --- a/advisories/unreviewed/2022/05/GHSA-486w-64vq-9f27/GHSA-486w-64vq-9f27.json +++ b/advisories/unreviewed/2022/05/GHSA-486w-64vq-9f27/GHSA-486w-64vq-9f27.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-489c-vgw5-xjr9/GHSA-489c-vgw5-xjr9.json b/advisories/unreviewed/2022/05/GHSA-489c-vgw5-xjr9/GHSA-489c-vgw5-xjr9.json index 6b2f82cb0ba..4cedcb133ee 100644 --- a/advisories/unreviewed/2022/05/GHSA-489c-vgw5-xjr9/GHSA-489c-vgw5-xjr9.json +++ b/advisories/unreviewed/2022/05/GHSA-489c-vgw5-xjr9/GHSA-489c-vgw5-xjr9.json @@ -7,12 +7,8 @@ "CVE-2011-4061" ], "details": "Multiple untrusted search path vulnerabilities in (1) db2rspgn and (2) kbbacf1 in IBM DB2 Express Edition 9.7, as used in the IBM Tivoli Monitoring for Databases: DB2 Agent, allow local users to gain privileges via a Trojan horse libkbb.so in the current working directory, related to the DT_RPATH ELF header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-48cw-j5g8-rjgq/GHSA-48cw-j5g8-rjgq.json b/advisories/unreviewed/2022/05/GHSA-48cw-j5g8-rjgq/GHSA-48cw-j5g8-rjgq.json index 1bf291ce411..f49223235e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-48cw-j5g8-rjgq/GHSA-48cw-j5g8-rjgq.json +++ b/advisories/unreviewed/2022/05/GHSA-48cw-j5g8-rjgq/GHSA-48cw-j5g8-rjgq.json @@ -7,12 +7,8 @@ "CVE-2008-5097" ], "details": "SQL injection vulnerability in index.php in MyFWB 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-49h2-jr49-vcvx/GHSA-49h2-jr49-vcvx.json b/advisories/unreviewed/2022/05/GHSA-49h2-jr49-vcvx/GHSA-49h2-jr49-vcvx.json index 30a40f7e6f9..c73ad16ba40 100644 --- a/advisories/unreviewed/2022/05/GHSA-49h2-jr49-vcvx/GHSA-49h2-jr49-vcvx.json +++ b/advisories/unreviewed/2022/05/GHSA-49h2-jr49-vcvx/GHSA-49h2-jr49-vcvx.json @@ -7,12 +7,8 @@ "CVE-2010-2573" ], "details": "Integer underflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3, PowerPoint Viewer SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka \"PowerPoint Integer Underflow Causes Heap Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4c72-xmxx-j6j8/GHSA-4c72-xmxx-j6j8.json b/advisories/unreviewed/2022/05/GHSA-4c72-xmxx-j6j8/GHSA-4c72-xmxx-j6j8.json index 48499d56c70..4f595b1acad 100644 --- a/advisories/unreviewed/2022/05/GHSA-4c72-xmxx-j6j8/GHSA-4c72-xmxx-j6j8.json +++ b/advisories/unreviewed/2022/05/GHSA-4c72-xmxx-j6j8/GHSA-4c72-xmxx-j6j8.json @@ -7,12 +7,8 @@ "CVE-2008-5521" ], "details": "Avira AntiVir 7.9.0.36 and possibly 7.8.1.28, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4c8w-pff7-v5h9/GHSA-4c8w-pff7-v5h9.json b/advisories/unreviewed/2022/05/GHSA-4c8w-pff7-v5h9/GHSA-4c8w-pff7-v5h9.json index 420ac0e184c..be4a8f71b67 100644 --- a/advisories/unreviewed/2022/05/GHSA-4c8w-pff7-v5h9/GHSA-4c8w-pff7-v5h9.json +++ b/advisories/unreviewed/2022/05/GHSA-4c8w-pff7-v5h9/GHSA-4c8w-pff7-v5h9.json @@ -7,12 +7,8 @@ "CVE-2008-5164" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to (a) viewarticle.php and (b) viewarticle2.php and the (2) PATH_INFO to viewarticle.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4fm7-m3w8-94f8/GHSA-4fm7-m3w8-94f8.json b/advisories/unreviewed/2022/05/GHSA-4fm7-m3w8-94f8/GHSA-4fm7-m3w8-94f8.json index 939103a099f..0600c5e7697 100644 --- a/advisories/unreviewed/2022/05/GHSA-4fm7-m3w8-94f8/GHSA-4fm7-m3w8-94f8.json +++ b/advisories/unreviewed/2022/05/GHSA-4fm7-m3w8-94f8/GHSA-4fm7-m3w8-94f8.json @@ -7,12 +7,8 @@ "CVE-2008-6069" ], "details": "SQL injection vulnerability in e107chat.php in the eChat plugin 4.2 for e107, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the nick parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4gh8-9m8f-2rff/GHSA-4gh8-9m8f-2rff.json b/advisories/unreviewed/2022/05/GHSA-4gh8-9m8f-2rff/GHSA-4gh8-9m8f-2rff.json index f9a31281db6..3f7f121f8c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-4gh8-9m8f-2rff/GHSA-4gh8-9m8f-2rff.json +++ b/advisories/unreviewed/2022/05/GHSA-4gh8-9m8f-2rff/GHSA-4gh8-9m8f-2rff.json @@ -7,12 +7,8 @@ "CVE-2008-6946" ], "details": "Cross-site scripting (XSS) vulnerability in manageproject.php in Collabtive 0.4.8 allows user-assisted remote attackers to inject arbitrary web script or HTML via the project Name, which is not properly handled when the administrator performs an editform action, related to admin.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4h75-mp4x-555f/GHSA-4h75-mp4x-555f.json b/advisories/unreviewed/2022/05/GHSA-4h75-mp4x-555f/GHSA-4h75-mp4x-555f.json index d8e4bd4a815..c2f57738b6d 100644 --- a/advisories/unreviewed/2022/05/GHSA-4h75-mp4x-555f/GHSA-4h75-mp4x-555f.json +++ b/advisories/unreviewed/2022/05/GHSA-4h75-mp4x-555f/GHSA-4h75-mp4x-555f.json @@ -7,12 +7,8 @@ "CVE-2008-4844" ], "details": "Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving (1) an XML Island, (2) XML DSOs, or (3) Tabular Data Control (TDC) in a crafted HTML or XML document, as demonstrated by nested SPAN or MARQUEE elements, and exploited in the wild in December 2008.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -104,9 +100,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4j94-8hv9-wvr9/GHSA-4j94-8hv9-wvr9.json b/advisories/unreviewed/2022/05/GHSA-4j94-8hv9-wvr9/GHSA-4j94-8hv9-wvr9.json index 4cfeb729000..23e180ad440 100644 --- a/advisories/unreviewed/2022/05/GHSA-4j94-8hv9-wvr9/GHSA-4j94-8hv9-wvr9.json +++ b/advisories/unreviewed/2022/05/GHSA-4j94-8hv9-wvr9/GHSA-4j94-8hv9-wvr9.json @@ -7,12 +7,8 @@ "CVE-2008-5225" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI under (1) SearchResults/ and (2) Services/ in dsdn/dsweb/, and (3) the default URI under unspecified docushare/dsweb/ServicesLib/Group-#/ directories.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4jpx-c84g-pgh5/GHSA-4jpx-c84g-pgh5.json b/advisories/unreviewed/2022/05/GHSA-4jpx-c84g-pgh5/GHSA-4jpx-c84g-pgh5.json index 7eadce0e17d..8ce80aaff10 100644 --- a/advisories/unreviewed/2022/05/GHSA-4jpx-c84g-pgh5/GHSA-4jpx-c84g-pgh5.json +++ b/advisories/unreviewed/2022/05/GHSA-4jpx-c84g-pgh5/GHSA-4jpx-c84g-pgh5.json @@ -7,12 +7,8 @@ "CVE-2008-7059" ], "details": "SQL injection vulnerability in index.php in One-News Beta 2 allows remote attackers to execute arbitrary SQL commands via the q parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4m3f-gxf5-6jm9/GHSA-4m3f-gxf5-6jm9.json b/advisories/unreviewed/2022/05/GHSA-4m3f-gxf5-6jm9/GHSA-4m3f-gxf5-6jm9.json index 2eadbcdbe33..49f7fb4b8c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-4m3f-gxf5-6jm9/GHSA-4m3f-gxf5-6jm9.json +++ b/advisories/unreviewed/2022/05/GHSA-4m3f-gxf5-6jm9/GHSA-4m3f-gxf5-6jm9.json @@ -7,12 +7,8 @@ "CVE-2008-5303" ], "details": "Race condition in the rmtree function in File::Path 1.08 (lib/File/Path.pm) in Perl 5.8.8 allows local users to to delete arbitrary files via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448. It is different from CVE-2008-5302 due to affected versions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4m4w-ppgv-r57x/GHSA-4m4w-ppgv-r57x.json b/advisories/unreviewed/2022/05/GHSA-4m4w-ppgv-r57x/GHSA-4m4w-ppgv-r57x.json index d252b2baf27..9bd9912d935 100644 --- a/advisories/unreviewed/2022/05/GHSA-4m4w-ppgv-r57x/GHSA-4m4w-ppgv-r57x.json +++ b/advisories/unreviewed/2022/05/GHSA-4m4w-ppgv-r57x/GHSA-4m4w-ppgv-r57x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4p67-wfmq-75w4/GHSA-4p67-wfmq-75w4.json b/advisories/unreviewed/2022/05/GHSA-4p67-wfmq-75w4/GHSA-4p67-wfmq-75w4.json index 2070b437601..3ea45d77c7c 100644 --- a/advisories/unreviewed/2022/05/GHSA-4p67-wfmq-75w4/GHSA-4p67-wfmq-75w4.json +++ b/advisories/unreviewed/2022/05/GHSA-4p67-wfmq-75w4/GHSA-4p67-wfmq-75w4.json @@ -7,12 +7,8 @@ "CVE-2008-4638" ], "details": "qioadmin in the Quick I/O for Database feature in Symantec Veritas File System (VxFS) on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4q4f-7qmg-9hr3/GHSA-4q4f-7qmg-9hr3.json b/advisories/unreviewed/2022/05/GHSA-4q4f-7qmg-9hr3/GHSA-4q4f-7qmg-9hr3.json index f52ce276cc6..f354573e93d 100644 --- a/advisories/unreviewed/2022/05/GHSA-4q4f-7qmg-9hr3/GHSA-4q4f-7qmg-9hr3.json +++ b/advisories/unreviewed/2022/05/GHSA-4q4f-7qmg-9hr3/GHSA-4q4f-7qmg-9hr3.json @@ -7,12 +7,8 @@ "CVE-2008-6646" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in CoronaMatrix phpAddressBook 2.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4qwm-vc77-jcqw/GHSA-4qwm-vc77-jcqw.json b/advisories/unreviewed/2022/05/GHSA-4qwm-vc77-jcqw/GHSA-4qwm-vc77-jcqw.json index 8c64e682298..37007e8e8d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-4qwm-vc77-jcqw/GHSA-4qwm-vc77-jcqw.json +++ b/advisories/unreviewed/2022/05/GHSA-4qwm-vc77-jcqw/GHSA-4qwm-vc77-jcqw.json @@ -7,12 +7,8 @@ "CVE-2010-4277" ], "details": "Cross-site scripting (XSS) vulnerability in lembedded-video.php in the Embedded Video plugin 4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the content parameter to wp-admin/post.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4v49-wc47-43g8/GHSA-4v49-wc47-43g8.json b/advisories/unreviewed/2022/05/GHSA-4v49-wc47-43g8/GHSA-4v49-wc47-43g8.json index 4d089a7b9dd..9d95ad2e41f 100644 --- a/advisories/unreviewed/2022/05/GHSA-4v49-wc47-43g8/GHSA-4v49-wc47-43g8.json +++ b/advisories/unreviewed/2022/05/GHSA-4v49-wc47-43g8/GHSA-4v49-wc47-43g8.json @@ -7,12 +7,8 @@ "CVE-2008-5029" ], "details": "The __scm_destroy function in net/core/scm.c in the Linux kernel 2.6.27.4, 2.6.26, and earlier makes indirect recursive calls to itself through calls to the fput function, which allows local users to cause a denial of service (panic) via vectors related to sending an SCM_RIGHTS message through a UNIX domain socket and closing file descriptors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -164,9 +160,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4v6r-gxrx-pjw8/GHSA-4v6r-gxrx-pjw8.json b/advisories/unreviewed/2022/05/GHSA-4v6r-gxrx-pjw8/GHSA-4v6r-gxrx-pjw8.json index 63a3f1ccd90..06addb2befc 100644 --- a/advisories/unreviewed/2022/05/GHSA-4v6r-gxrx-pjw8/GHSA-4v6r-gxrx-pjw8.json +++ b/advisories/unreviewed/2022/05/GHSA-4v6r-gxrx-pjw8/GHSA-4v6r-gxrx-pjw8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4w88-q6w3-v8qg/GHSA-4w88-q6w3-v8qg.json b/advisories/unreviewed/2022/05/GHSA-4w88-q6w3-v8qg/GHSA-4w88-q6w3-v8qg.json index c10c9346512..f0cf9a00797 100644 --- a/advisories/unreviewed/2022/05/GHSA-4w88-q6w3-v8qg/GHSA-4w88-q6w3-v8qg.json +++ b/advisories/unreviewed/2022/05/GHSA-4w88-q6w3-v8qg/GHSA-4w88-q6w3-v8qg.json @@ -7,12 +7,8 @@ "CVE-2008-7015" ], "details": "Unreal engine 3, as used in Unreal Tournament 3 1.3, Frontlines: Fuel of War 1.1.1, and other products, allows remote attackers to cause a denial of service (server exit) via a packet with a large length value that triggers a memory allocation failure.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4wqg-8wg4-c3m7/GHSA-4wqg-8wg4-c3m7.json b/advisories/unreviewed/2022/05/GHSA-4wqg-8wg4-c3m7/GHSA-4wqg-8wg4-c3m7.json index 2ea7f7c9e56..7043198bea8 100644 --- a/advisories/unreviewed/2022/05/GHSA-4wqg-8wg4-c3m7/GHSA-4wqg-8wg4-c3m7.json +++ b/advisories/unreviewed/2022/05/GHSA-4wqg-8wg4-c3m7/GHSA-4wqg-8wg4-c3m7.json @@ -7,12 +7,8 @@ "CVE-2008-6986" ], "details": "SQL injection vulnerability in the actionMultipleAddProduct function in includes/classes/shopping_cart.php in Zen Cart 1.3.0 through 1.3.8a, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the products_id array parameter in a multiple_products_add_product action, a different vulnerability than CVE-2008-6985.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-526x-4gfg-f5vp/GHSA-526x-4gfg-f5vp.json b/advisories/unreviewed/2022/05/GHSA-526x-4gfg-f5vp/GHSA-526x-4gfg-f5vp.json index 5353890bdb2..ce5f380ee0c 100644 --- a/advisories/unreviewed/2022/05/GHSA-526x-4gfg-f5vp/GHSA-526x-4gfg-f5vp.json +++ b/advisories/unreviewed/2022/05/GHSA-526x-4gfg-f5vp/GHSA-526x-4gfg-f5vp.json @@ -7,12 +7,8 @@ "CVE-2008-7245" ], "details": "Opera 9.52 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a \"printing DoS attack,\" possibly a related issue to CVE-2009-0821.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-52gf-v954-cv76/GHSA-52gf-v954-cv76.json b/advisories/unreviewed/2022/05/GHSA-52gf-v954-cv76/GHSA-52gf-v954-cv76.json index 8c1bfb15525..e2cb23a4062 100644 --- a/advisories/unreviewed/2022/05/GHSA-52gf-v954-cv76/GHSA-52gf-v954-cv76.json +++ b/advisories/unreviewed/2022/05/GHSA-52gf-v954-cv76/GHSA-52gf-v954-cv76.json @@ -7,12 +7,8 @@ "CVE-2008-6256" ], "details": "SQL injection vulnerability in admincp/admincalendar.php in vBulletin 3.7.3.pl1 allows remote authenticated administrators to execute arbitrary SQL commands via the holidayinfo[recurring] parameter, a different vector than CVE-2005-3022.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-53gr-p79j-q7q9/GHSA-53gr-p79j-q7q9.json b/advisories/unreviewed/2022/05/GHSA-53gr-p79j-q7q9/GHSA-53gr-p79j-q7q9.json index 2d5a43275ce..29acea0e1ba 100644 --- a/advisories/unreviewed/2022/05/GHSA-53gr-p79j-q7q9/GHSA-53gr-p79j-q7q9.json +++ b/advisories/unreviewed/2022/05/GHSA-53gr-p79j-q7q9/GHSA-53gr-p79j-q7q9.json @@ -7,12 +7,8 @@ "CVE-2008-4871" ], "details": "Cross-site scripting (XSS) vulnerability in My Little Forum 1.75 and 2.0 Beta 23 allows remote attackers to inject arbitrary web script or HTML via BBcode IMG tags.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-53j3-95c5-wpjm/GHSA-53j3-95c5-wpjm.json b/advisories/unreviewed/2022/05/GHSA-53j3-95c5-wpjm/GHSA-53j3-95c5-wpjm.json index 2e97e3355a0..ce06aa286a0 100644 --- a/advisories/unreviewed/2022/05/GHSA-53j3-95c5-wpjm/GHSA-53j3-95c5-wpjm.json +++ b/advisories/unreviewed/2022/05/GHSA-53j3-95c5-wpjm/GHSA-53j3-95c5-wpjm.json @@ -7,12 +7,8 @@ "CVE-2008-5233" ], "details": "xine-lib 1.1.12, and other versions before 1.1.15, does not check for failure of malloc in circumstances including (1) the mymng_process_header function in demux_mng.c, (2) the open_mod_file function in demux_mod.c, and (3) frame_buffer allocation in the real_parse_audio_specific_data function in demux_real.c, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted media file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-53r3-hg2h-cxvw/GHSA-53r3-hg2h-cxvw.json b/advisories/unreviewed/2022/05/GHSA-53r3-hg2h-cxvw/GHSA-53r3-hg2h-cxvw.json index 92b671ff2c3..64c0ec17dc6 100644 --- a/advisories/unreviewed/2022/05/GHSA-53r3-hg2h-cxvw/GHSA-53r3-hg2h-cxvw.json +++ b/advisories/unreviewed/2022/05/GHSA-53r3-hg2h-cxvw/GHSA-53r3-hg2h-cxvw.json @@ -7,12 +7,8 @@ "CVE-2008-6099" ], "details": "PHP remote file inclusion vulnerability in index.php in RPortal 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file_op parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-53wr-m9j5-6chc/GHSA-53wr-m9j5-6chc.json b/advisories/unreviewed/2022/05/GHSA-53wr-m9j5-6chc/GHSA-53wr-m9j5-6chc.json index e0f316b4fbc..f42e8c38719 100644 --- a/advisories/unreviewed/2022/05/GHSA-53wr-m9j5-6chc/GHSA-53wr-m9j5-6chc.json +++ b/advisories/unreviewed/2022/05/GHSA-53wr-m9j5-6chc/GHSA-53wr-m9j5-6chc.json @@ -7,12 +7,8 @@ "CVE-2010-4790" ], "details": "Directory traversal vulnerability in FilterFTP 2.0.3, 2.0.5, and probably earlier versions, allows remote FTP servers to write arbitrary files via a \"..\\\" (dot dot backslash) in a filename. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-545h-2xw4-7w2f/GHSA-545h-2xw4-7w2f.json b/advisories/unreviewed/2022/05/GHSA-545h-2xw4-7w2f/GHSA-545h-2xw4-7w2f.json index 45cf51d212c..196fc508da3 100644 --- a/advisories/unreviewed/2022/05/GHSA-545h-2xw4-7w2f/GHSA-545h-2xw4-7w2f.json +++ b/advisories/unreviewed/2022/05/GHSA-545h-2xw4-7w2f/GHSA-545h-2xw4-7w2f.json @@ -7,12 +7,8 @@ "CVE-2008-5545" ], "details": "Trend Micro VSAPI 8.700.0.1004 in Trend Micro AntiVirus, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5467-vhqx-qjxg/GHSA-5467-vhqx-qjxg.json b/advisories/unreviewed/2022/05/GHSA-5467-vhqx-qjxg/GHSA-5467-vhqx-qjxg.json index 0acb1544fab..34ec8bbafc6 100644 --- a/advisories/unreviewed/2022/05/GHSA-5467-vhqx-qjxg/GHSA-5467-vhqx-qjxg.json +++ b/advisories/unreviewed/2022/05/GHSA-5467-vhqx-qjxg/GHSA-5467-vhqx-qjxg.json @@ -7,12 +7,8 @@ "CVE-2008-6994" ], "details": "Stack-based buffer overflow in the SaveAs feature (SaveFileAsWithFilter function) in win_util.cc in Google Chrome 0.2.149.27 allows user-assisted remote attackers to execute arbitrary code via a web page with a long TITLE element, which triggers the overflow when the user saves the page and a long filename is generated. NOTE: it might be possible to exploit this issue via an HTTP response that includes a long filename in a Content-Disposition header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-54h7-7m32-h7mg/GHSA-54h7-7m32-h7mg.json b/advisories/unreviewed/2022/05/GHSA-54h7-7m32-h7mg/GHSA-54h7-7m32-h7mg.json index e51836dfc04..b53aa200e6c 100644 --- a/advisories/unreviewed/2022/05/GHSA-54h7-7m32-h7mg/GHSA-54h7-7m32-h7mg.json +++ b/advisories/unreviewed/2022/05/GHSA-54h7-7m32-h7mg/GHSA-54h7-7m32-h7mg.json @@ -7,12 +7,8 @@ "CVE-2008-6061" ], "details": "Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) controller files created by Techsmith Camtasia Studio before 5 allows remote attackers to inject arbitrary additional SWF content via a URL in the csPreloader parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-55jq-r559-gvw6/GHSA-55jq-r559-gvw6.json b/advisories/unreviewed/2022/05/GHSA-55jq-r559-gvw6/GHSA-55jq-r559-gvw6.json index 03717db2f9f..595f1dd7882 100644 --- a/advisories/unreviewed/2022/05/GHSA-55jq-r559-gvw6/GHSA-55jq-r559-gvw6.json +++ b/advisories/unreviewed/2022/05/GHSA-55jq-r559-gvw6/GHSA-55jq-r559-gvw6.json @@ -7,12 +7,8 @@ "CVE-2010-5029" ], "details": "SQL injection vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the show parameter in a web action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5649-jm82-fg53/GHSA-5649-jm82-fg53.json b/advisories/unreviewed/2022/05/GHSA-5649-jm82-fg53/GHSA-5649-jm82-fg53.json index 54d42d8a7c4..30c742d3555 100644 --- a/advisories/unreviewed/2022/05/GHSA-5649-jm82-fg53/GHSA-5649-jm82-fg53.json +++ b/advisories/unreviewed/2022/05/GHSA-5649-jm82-fg53/GHSA-5649-jm82-fg53.json @@ -7,12 +7,8 @@ "CVE-2008-5419" ], "details": "Stack-based buffer overflow in SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center 5.2 SP5 and 6.0 allows remote attackers to execute arbitrary code via multiple SST_CTGTRANS requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-565g-m29m-4549/GHSA-565g-m29m-4549.json b/advisories/unreviewed/2022/05/GHSA-565g-m29m-4549/GHSA-565g-m29m-4549.json index 2f60f0c5ac7..0bb342ad86e 100644 --- a/advisories/unreviewed/2022/05/GHSA-565g-m29m-4549/GHSA-565g-m29m-4549.json +++ b/advisories/unreviewed/2022/05/GHSA-565g-m29m-4549/GHSA-565g-m29m-4549.json @@ -7,12 +7,8 @@ "CVE-2008-5051" ], "details": "SQL injection vulnerability in the JooBlog (com_jb2) component 0.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PostID parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-56gm-vr9p-4jrr/GHSA-56gm-vr9p-4jrr.json b/advisories/unreviewed/2022/05/GHSA-56gm-vr9p-4jrr/GHSA-56gm-vr9p-4jrr.json index b35f3d90402..6236b4b7a0c 100644 --- a/advisories/unreviewed/2022/05/GHSA-56gm-vr9p-4jrr/GHSA-56gm-vr9p-4jrr.json +++ b/advisories/unreviewed/2022/05/GHSA-56gm-vr9p-4jrr/GHSA-56gm-vr9p-4jrr.json @@ -7,12 +7,8 @@ "CVE-2010-4095" ], "details": "Directory traversal vulnerability in the FTP client in Serengeti Systems Incorporated Robo-FTP 3.7.3, and probably other versions before 3.7.5, allows remote FTP servers to write arbitrary files via a .. (dot dot) in a filename in a server response.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-56q6-gwrw-94vp/GHSA-56q6-gwrw-94vp.json b/advisories/unreviewed/2022/05/GHSA-56q6-gwrw-94vp/GHSA-56q6-gwrw-94vp.json index 4c31e57e931..a109eb98ffa 100644 --- a/advisories/unreviewed/2022/05/GHSA-56q6-gwrw-94vp/GHSA-56q6-gwrw-94vp.json +++ b/advisories/unreviewed/2022/05/GHSA-56q6-gwrw-94vp/GHSA-56q6-gwrw-94vp.json @@ -7,12 +7,8 @@ "CVE-2008-5222" ], "details": "SQL injection vulnerability in login.asp in Dvbbs 8.2.0 allows remote attackers to execute arbitrary SQL commands via the username parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5848-87gf-wvqv/GHSA-5848-87gf-wvqv.json b/advisories/unreviewed/2022/05/GHSA-5848-87gf-wvqv/GHSA-5848-87gf-wvqv.json index 11beec0d7e2..ef3ac6471e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-5848-87gf-wvqv/GHSA-5848-87gf-wvqv.json +++ b/advisories/unreviewed/2022/05/GHSA-5848-87gf-wvqv/GHSA-5848-87gf-wvqv.json @@ -7,12 +7,8 @@ "CVE-2008-5394" ], "details": "/bin/login in shadow 4.0.18.1 in Debian GNU/Linux, and probably other Linux distributions, allows local users in the utmp group to overwrite arbitrary files via a symlink attack on a temporary file referenced in a line (aka ut_line) field in a utmp entry.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5884-8f6m-9wpp/GHSA-5884-8f6m-9wpp.json b/advisories/unreviewed/2022/05/GHSA-5884-8f6m-9wpp/GHSA-5884-8f6m-9wpp.json index 885f10dc1b4..e6e7823f836 100644 --- a/advisories/unreviewed/2022/05/GHSA-5884-8f6m-9wpp/GHSA-5884-8f6m-9wpp.json +++ b/advisories/unreviewed/2022/05/GHSA-5884-8f6m-9wpp/GHSA-5884-8f6m-9wpp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5939-fv68-jcpj/GHSA-5939-fv68-jcpj.json b/advisories/unreviewed/2022/05/GHSA-5939-fv68-jcpj/GHSA-5939-fv68-jcpj.json index f7101b3c621..f0b7dd50da3 100644 --- a/advisories/unreviewed/2022/05/GHSA-5939-fv68-jcpj/GHSA-5939-fv68-jcpj.json +++ b/advisories/unreviewed/2022/05/GHSA-5939-fv68-jcpj/GHSA-5939-fv68-jcpj.json @@ -7,12 +7,8 @@ "CVE-2010-4899" ], "details": "SQL injection vulnerability in c.php in CMS WebManager-Pro before 8.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-594g-rvq4-vvxr/GHSA-594g-rvq4-vvxr.json b/advisories/unreviewed/2022/05/GHSA-594g-rvq4-vvxr/GHSA-594g-rvq4-vvxr.json index 6b412f12b57..5e5a9158961 100644 --- a/advisories/unreviewed/2022/05/GHSA-594g-rvq4-vvxr/GHSA-594g-rvq4-vvxr.json +++ b/advisories/unreviewed/2022/05/GHSA-594g-rvq4-vvxr/GHSA-594g-rvq4-vvxr.json @@ -7,12 +7,8 @@ "CVE-2008-5050" ], "details": "Off-by-one error in the get_unicode_name function (libclamav/vba_extract.c) in Clam Anti-Virus (ClamAV) before 0.94.1 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted VBA project file, which triggers a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-59qq-28wj-jxpf/GHSA-59qq-28wj-jxpf.json b/advisories/unreviewed/2022/05/GHSA-59qq-28wj-jxpf/GHSA-59qq-28wj-jxpf.json index 0fa710cceab..922c66ce538 100644 --- a/advisories/unreviewed/2022/05/GHSA-59qq-28wj-jxpf/GHSA-59qq-28wj-jxpf.json +++ b/advisories/unreviewed/2022/05/GHSA-59qq-28wj-jxpf/GHSA-59qq-28wj-jxpf.json @@ -7,12 +7,8 @@ "CVE-2008-7108" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Carmosa phpCart 3.4 through 4.6.4 allow remote attackers to inject arbitrary web script or HTML via the (1) quantity or (2) Add Engraving fields to the default URI; (3) Quantity field to phpcart.php; (4) Name, (5) Company, (6) Address, (7) City, and (8) Province/State fields in a checkout action to phpcart.php; and other unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-59xc-r9vv-8cgv/GHSA-59xc-r9vv-8cgv.json b/advisories/unreviewed/2022/05/GHSA-59xc-r9vv-8cgv/GHSA-59xc-r9vv-8cgv.json index 13c80e3ac80..79a407ec96a 100644 --- a/advisories/unreviewed/2022/05/GHSA-59xc-r9vv-8cgv/GHSA-59xc-r9vv-8cgv.json +++ b/advisories/unreviewed/2022/05/GHSA-59xc-r9vv-8cgv/GHSA-59xc-r9vv-8cgv.json @@ -7,12 +7,8 @@ "CVE-2010-1901" ], "details": "Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly handle unspecified properties in rich text data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted RTF document, aka \"Word RTF Parsing Engine Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5c4q-785x-6xr5/GHSA-5c4q-785x-6xr5.json b/advisories/unreviewed/2022/05/GHSA-5c4q-785x-6xr5/GHSA-5c4q-785x-6xr5.json index 1618ea30937..483d6fb0d89 100644 --- a/advisories/unreviewed/2022/05/GHSA-5c4q-785x-6xr5/GHSA-5c4q-785x-6xr5.json +++ b/advisories/unreviewed/2022/05/GHSA-5c4q-785x-6xr5/GHSA-5c4q-785x-6xr5.json @@ -7,12 +7,8 @@ "CVE-2008-5238" ], "details": "Integer overflow in the real_parse_mdpr function in demux_real.c in xine-lib 1.1.12, and other versions before 1.1.15, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted stream_name_size field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5c55-48vw-gfh5/GHSA-5c55-48vw-gfh5.json b/advisories/unreviewed/2022/05/GHSA-5c55-48vw-gfh5/GHSA-5c55-48vw-gfh5.json index 9021e91d9c9..de2694a2d2e 100644 --- a/advisories/unreviewed/2022/05/GHSA-5c55-48vw-gfh5/GHSA-5c55-48vw-gfh5.json +++ b/advisories/unreviewed/2022/05/GHSA-5c55-48vw-gfh5/GHSA-5c55-48vw-gfh5.json @@ -7,12 +7,8 @@ "CVE-2010-3235" ], "details": "Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka \"Formula Biff Record Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5c7q-5827-28ch/GHSA-5c7q-5827-28ch.json b/advisories/unreviewed/2022/05/GHSA-5c7q-5827-28ch/GHSA-5c7q-5827-28ch.json index 51ecdfcc593..ecef4c10164 100644 --- a/advisories/unreviewed/2022/05/GHSA-5c7q-5827-28ch/GHSA-5c7q-5827-28ch.json +++ b/advisories/unreviewed/2022/05/GHSA-5c7q-5827-28ch/GHSA-5c7q-5827-28ch.json @@ -7,12 +7,8 @@ "CVE-2008-5531" ], "details": "Fortinet Antivirus 3.113.0.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5f4j-48gx-59pq/GHSA-5f4j-48gx-59pq.json b/advisories/unreviewed/2022/05/GHSA-5f4j-48gx-59pq/GHSA-5f4j-48gx-59pq.json index e654281a07b..ae1b87fde36 100644 --- a/advisories/unreviewed/2022/05/GHSA-5f4j-48gx-59pq/GHSA-5f4j-48gx-59pq.json +++ b/advisories/unreviewed/2022/05/GHSA-5f4j-48gx-59pq/GHSA-5f4j-48gx-59pq.json @@ -7,12 +7,8 @@ "CVE-2010-1898" ], "details": "The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP1, 2.0 SP2, 3.5, 3.5 SP1, and 3.5.1, and Microsoft Silverlight 2 and 3 before 3.0.50611.0 on Windows and before 3.0.41130.0 on Mac OS X, does not properly handle interfaces and delegations to virtual methods, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (aka XBAP), (2) a crafted ASP.NET application, or (3) a crafted .NET Framework application, aka \"Microsoft Silverlight and Microsoft .NET Framework CLR Virtual Method Delegate Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5fwv-px3v-6qxv/GHSA-5fwv-px3v-6qxv.json b/advisories/unreviewed/2022/05/GHSA-5fwv-px3v-6qxv/GHSA-5fwv-px3v-6qxv.json index f8210a9ea34..a0cfde346e4 100644 --- a/advisories/unreviewed/2022/05/GHSA-5fwv-px3v-6qxv/GHSA-5fwv-px3v-6qxv.json +++ b/advisories/unreviewed/2022/05/GHSA-5fwv-px3v-6qxv/GHSA-5fwv-px3v-6qxv.json @@ -7,12 +7,8 @@ "CVE-2008-5077" ], "details": "OpenSSL 0.9.8i and earlier does not properly check the return value from the EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature for DSA and ECDSA keys.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5g8q-4hvv-f9qp/GHSA-5g8q-4hvv-f9qp.json b/advisories/unreviewed/2022/05/GHSA-5g8q-4hvv-f9qp/GHSA-5g8q-4hvv-f9qp.json index feb9c5ca856..fd654ae39f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-5g8q-4hvv-f9qp/GHSA-5g8q-4hvv-f9qp.json +++ b/advisories/unreviewed/2022/05/GHSA-5g8q-4hvv-f9qp/GHSA-5g8q-4hvv-f9qp.json @@ -7,12 +7,8 @@ "CVE-2008-6039" ], "details": "Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5j2c-m7w9-79w6/GHSA-5j2c-m7w9-79w6.json b/advisories/unreviewed/2022/05/GHSA-5j2c-m7w9-79w6/GHSA-5j2c-m7w9-79w6.json index 6018df7b2d5..6f1a0cbc088 100644 --- a/advisories/unreviewed/2022/05/GHSA-5j2c-m7w9-79w6/GHSA-5j2c-m7w9-79w6.json +++ b/advisories/unreviewed/2022/05/GHSA-5j2c-m7w9-79w6/GHSA-5j2c-m7w9-79w6.json @@ -7,12 +7,8 @@ "CVE-2008-6439" ], "details": "Cross-site scripting (XSS) vulnerability in search_results.php in ABK-Soft AbleDating 2.4 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5j8m-f4q8-6hvx/GHSA-5j8m-f4q8-6hvx.json b/advisories/unreviewed/2022/05/GHSA-5j8m-f4q8-6hvx/GHSA-5j8m-f4q8-6hvx.json index 996ce830436..cc3c46c4774 100644 --- a/advisories/unreviewed/2022/05/GHSA-5j8m-f4q8-6hvx/GHSA-5j8m-f4q8-6hvx.json +++ b/advisories/unreviewed/2022/05/GHSA-5j8m-f4q8-6hvx/GHSA-5j8m-f4q8-6hvx.json @@ -7,12 +7,8 @@ "CVE-2008-6589" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in LightNEasy \"no database\" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to inject arbitrary web script or HTML via the page parameter to (1) index.php and (2) LightNEasy.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5jpx-h96g-mgmr/GHSA-5jpx-h96g-mgmr.json b/advisories/unreviewed/2022/05/GHSA-5jpx-h96g-mgmr/GHSA-5jpx-h96g-mgmr.json index 1ff6e4708c7..a698930c46d 100644 --- a/advisories/unreviewed/2022/05/GHSA-5jpx-h96g-mgmr/GHSA-5jpx-h96g-mgmr.json +++ b/advisories/unreviewed/2022/05/GHSA-5jpx-h96g-mgmr/GHSA-5jpx-h96g-mgmr.json @@ -7,12 +7,8 @@ "CVE-2010-4232" ], "details": "The web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to bypass authentication via a // (slash slash) at the beginning of a URI, as demonstrated by the //system.html URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5jv6-qv6x-6m4f/GHSA-5jv6-qv6x-6m4f.json b/advisories/unreviewed/2022/05/GHSA-5jv6-qv6x-6m4f/GHSA-5jv6-qv6x-6m4f.json index 304741bde38..d975e7a5e34 100644 --- a/advisories/unreviewed/2022/05/GHSA-5jv6-qv6x-6m4f/GHSA-5jv6-qv6x-6m4f.json +++ b/advisories/unreviewed/2022/05/GHSA-5jv6-qv6x-6m4f/GHSA-5jv6-qv6x-6m4f.json @@ -7,12 +7,8 @@ "CVE-2008-7175" ], "details": "Cross-site scripting (XSS) vulnerability in wp-admin/admin.php in NextGEN Gallery 0.96 and earlier plugin for Wordpress allows remote attackers to inject arbitrary web script or HTML via the picture description field in a page edit action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5m5q-hh88-rhc3/GHSA-5m5q-hh88-rhc3.json b/advisories/unreviewed/2022/05/GHSA-5m5q-hh88-rhc3/GHSA-5m5q-hh88-rhc3.json index e6d64417d0c..415e6631e26 100644 --- a/advisories/unreviewed/2022/05/GHSA-5m5q-hh88-rhc3/GHSA-5m5q-hh88-rhc3.json +++ b/advisories/unreviewed/2022/05/GHSA-5m5q-hh88-rhc3/GHSA-5m5q-hh88-rhc3.json @@ -7,12 +7,8 @@ "CVE-2008-5750" ], "details": "Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5mhc-ccxf-v56m/GHSA-5mhc-ccxf-v56m.json b/advisories/unreviewed/2022/05/GHSA-5mhc-ccxf-v56m/GHSA-5mhc-ccxf-v56m.json index e9bdb035fd3..96cbceaf500 100644 --- a/advisories/unreviewed/2022/05/GHSA-5mhc-ccxf-v56m/GHSA-5mhc-ccxf-v56m.json +++ b/advisories/unreviewed/2022/05/GHSA-5mhc-ccxf-v56m/GHSA-5mhc-ccxf-v56m.json @@ -7,12 +7,8 @@ "CVE-2008-5526" ], "details": "DrWeb Anti-virus 4.44.0.09170, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5mvg-7mqq-mfx7/GHSA-5mvg-7mqq-mfx7.json b/advisories/unreviewed/2022/05/GHSA-5mvg-7mqq-mfx7/GHSA-5mvg-7mqq-mfx7.json index 59c07a37e63..a466cdba141 100644 --- a/advisories/unreviewed/2022/05/GHSA-5mvg-7mqq-mfx7/GHSA-5mvg-7mqq-mfx7.json +++ b/advisories/unreviewed/2022/05/GHSA-5mvg-7mqq-mfx7/GHSA-5mvg-7mqq-mfx7.json @@ -7,12 +7,8 @@ "CVE-2010-3758" ], "details": "Multiple stack-based buffer overflows in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allow remote attackers to execute arbitrary code via vectors involving the (1) AGI_SendToLog (aka _SendToLog) function; the (2) group, (3) workgroup, or (4) domain name field to the USER_S_AddADGroup function; the (5) user_path variable to the FXCLI_checkIndexDBLocation function; or (6) the _AGI_S_ActivateLTScriptReply (aka ActivateLTScriptReply) function. NOTE: this might overlap CVE-2010-3059.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5p54-jj38-3hxj/GHSA-5p54-jj38-3hxj.json b/advisories/unreviewed/2022/05/GHSA-5p54-jj38-3hxj/GHSA-5p54-jj38-3hxj.json index 96886152a11..05ff4662df7 100644 --- a/advisories/unreviewed/2022/05/GHSA-5p54-jj38-3hxj/GHSA-5p54-jj38-3hxj.json +++ b/advisories/unreviewed/2022/05/GHSA-5p54-jj38-3hxj/GHSA-5p54-jj38-3hxj.json @@ -7,12 +7,8 @@ "CVE-2010-4408" ], "details": "Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1 does not require entry of the administrator's password at the time of modifying a user account, which makes it easier for context-dependent attackers to gain privileges by leveraging a (1) unattended workstation or (2) cross-site request forgery (CSRF) vulnerability, a related issue to CVE-2010-3449.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5pqf-cvxf-hcgp/GHSA-5pqf-cvxf-hcgp.json b/advisories/unreviewed/2022/05/GHSA-5pqf-cvxf-hcgp/GHSA-5pqf-cvxf-hcgp.json index f36321ce585..341fbb91197 100644 --- a/advisories/unreviewed/2022/05/GHSA-5pqf-cvxf-hcgp/GHSA-5pqf-cvxf-hcgp.json +++ b/advisories/unreviewed/2022/05/GHSA-5pqf-cvxf-hcgp/GHSA-5pqf-cvxf-hcgp.json @@ -7,12 +7,8 @@ "CVE-2010-4097" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0 and 5.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) mail, (2) title, (3) u, and (4) url parameters. NOTE: the q parameter is already covered by CVE-2009-2302.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5r6r-qx28-2675/GHSA-5r6r-qx28-2675.json b/advisories/unreviewed/2022/05/GHSA-5r6r-qx28-2675/GHSA-5r6r-qx28-2675.json index e4d1d9b5e49..8e691d01ad7 100644 --- a/advisories/unreviewed/2022/05/GHSA-5r6r-qx28-2675/GHSA-5r6r-qx28-2675.json +++ b/advisories/unreviewed/2022/05/GHSA-5r6r-qx28-2675/GHSA-5r6r-qx28-2675.json @@ -7,12 +7,8 @@ "CVE-2011-0322" ], "details": "Unspecified vulnerability in EMC RSA Access Manager Server 5.5.x, 6.0.x, and 6.1.x allows remote attackers to access resources via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5rrc-5x47-wvvv/GHSA-5rrc-5x47-wvvv.json b/advisories/unreviewed/2022/05/GHSA-5rrc-5x47-wvvv/GHSA-5rrc-5x47-wvvv.json index 88d44845f11..ec474adea81 100644 --- a/advisories/unreviewed/2022/05/GHSA-5rrc-5x47-wvvv/GHSA-5rrc-5x47-wvvv.json +++ b/advisories/unreviewed/2022/05/GHSA-5rrc-5x47-wvvv/GHSA-5rrc-5x47-wvvv.json @@ -7,12 +7,8 @@ "CVE-2008-4829" ], "details": "Multiple buffer overflows in lib/http.c in Streamripper 1.63.5 allow remote attackers to execute arbitrary code via (1) a long \"Zwitterion v\" HTTP header, related to the http_parse_sc_header function; (2) a crafted pls playlist with a long entry, related to the http_get_pls function; or (3) a crafted m3u playlist with a long File entry, related to the http_get_m3u function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5w4p-h578-jm2v/GHSA-5w4p-h578-jm2v.json b/advisories/unreviewed/2022/05/GHSA-5w4p-h578-jm2v/GHSA-5w4p-h578-jm2v.json index 194f43099c5..cdae7aaa43f 100644 --- a/advisories/unreviewed/2022/05/GHSA-5w4p-h578-jm2v/GHSA-5w4p-h578-jm2v.json +++ b/advisories/unreviewed/2022/05/GHSA-5w4p-h578-jm2v/GHSA-5w4p-h578-jm2v.json @@ -7,12 +7,8 @@ "CVE-2010-4192" ], "details": "Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted 3D Assets 0xFFFFFF88 type record that triggers an incorrect memory allocation, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4190, CVE-2010-4191, and CVE-2010-4306.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5wfj-j89g-mr47/GHSA-5wfj-j89g-mr47.json b/advisories/unreviewed/2022/05/GHSA-5wfj-j89g-mr47/GHSA-5wfj-j89g-mr47.json index d92e73a5f6c..bfb0b3b5c5a 100644 --- a/advisories/unreviewed/2022/05/GHSA-5wfj-j89g-mr47/GHSA-5wfj-j89g-mr47.json +++ b/advisories/unreviewed/2022/05/GHSA-5wfj-j89g-mr47/GHSA-5wfj-j89g-mr47.json @@ -7,12 +7,8 @@ "CVE-2010-4693" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Coppermine Photo Gallery 1.5.10 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) h and (2) t parameters to help.php, or (3) picfile_XXX parameter to searchnew.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5x6q-3q26-2rq9/GHSA-5x6q-3q26-2rq9.json b/advisories/unreviewed/2022/05/GHSA-5x6q-3q26-2rq9/GHSA-5x6q-3q26-2rq9.json index 6a915263f24..f1cb9d56be4 100644 --- a/advisories/unreviewed/2022/05/GHSA-5x6q-3q26-2rq9/GHSA-5x6q-3q26-2rq9.json +++ b/advisories/unreviewed/2022/05/GHSA-5x6q-3q26-2rq9/GHSA-5x6q-3q26-2rq9.json @@ -7,12 +7,8 @@ "CVE-2008-6823" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in the management interface on the A-LINK WL54AP3 and WL54AP2 access points before firmware 1.4.2-eng1 allow remote attackers to hijack the authentication of administrators for requests that (1) modify the network configuration via certain parameters to goform/formWanTcpipSetup or (2) modify credentials via certain parameters to goform/formPasswordSetup.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5xqh-c6cj-mp62/GHSA-5xqh-c6cj-mp62.json b/advisories/unreviewed/2022/05/GHSA-5xqh-c6cj-mp62/GHSA-5xqh-c6cj-mp62.json index d4b18302e89..01320cd696e 100644 --- a/advisories/unreviewed/2022/05/GHSA-5xqh-c6cj-mp62/GHSA-5xqh-c6cj-mp62.json +++ b/advisories/unreviewed/2022/05/GHSA-5xqh-c6cj-mp62/GHSA-5xqh-c6cj-mp62.json @@ -7,12 +7,8 @@ "CVE-2008-5159" ], "details": "Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to cause a denial of service (crash) via a large string length argument, which triggers memory corruption.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5xr2-3h2h-5cjv/GHSA-5xr2-3h2h-5cjv.json b/advisories/unreviewed/2022/05/GHSA-5xr2-3h2h-5cjv/GHSA-5xr2-3h2h-5cjv.json index e920a077b31..783b129ecc7 100644 --- a/advisories/unreviewed/2022/05/GHSA-5xr2-3h2h-5cjv/GHSA-5xr2-3h2h-5cjv.json +++ b/advisories/unreviewed/2022/05/GHSA-5xr2-3h2h-5cjv/GHSA-5xr2-3h2h-5cjv.json @@ -7,12 +7,8 @@ "CVE-2008-6736" ], "details": "Flat Calendar 1.1 does not properly restrict access to administrative functions, which allows remote attackers to (1) add new events via calAdd.php, as reachable from admin/add.php, or (2) delete events via admin/deleteEvent.php. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-63rq-3xg5-w7p2/GHSA-63rq-3xg5-w7p2.json b/advisories/unreviewed/2022/05/GHSA-63rq-3xg5-w7p2/GHSA-63rq-3xg5-w7p2.json index 0c058a44977..fc0c115434d 100644 --- a/advisories/unreviewed/2022/05/GHSA-63rq-3xg5-w7p2/GHSA-63rq-3xg5-w7p2.json +++ b/advisories/unreviewed/2022/05/GHSA-63rq-3xg5-w7p2/GHSA-63rq-3xg5-w7p2.json @@ -7,12 +7,8 @@ "CVE-2010-2562" ], "details": "Microsoft Office Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Excel file, aka \"Excel Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6424-vrhh-f9cc/GHSA-6424-vrhh-f9cc.json b/advisories/unreviewed/2022/05/GHSA-6424-vrhh-f9cc/GHSA-6424-vrhh-f9cc.json index 353ee1d021d..64b9eba025b 100644 --- a/advisories/unreviewed/2022/05/GHSA-6424-vrhh-f9cc/GHSA-6424-vrhh-f9cc.json +++ b/advisories/unreviewed/2022/05/GHSA-6424-vrhh-f9cc/GHSA-6424-vrhh-f9cc.json @@ -7,12 +7,8 @@ "CVE-2008-6590" ], "details": "Multiple directory traversal vulnerabilities in LightNEasy \"no database\" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allow remote attackers to read arbitrary files via a .. (dot dot) in the page parameter to (1) index.php and (2) LightNEasy.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-65xv-wrrq-q434/GHSA-65xv-wrrq-q434.json b/advisories/unreviewed/2022/05/GHSA-65xv-wrrq-q434/GHSA-65xv-wrrq-q434.json index c85dc1e373e..923efd8772c 100644 --- a/advisories/unreviewed/2022/05/GHSA-65xv-wrrq-q434/GHSA-65xv-wrrq-q434.json +++ b/advisories/unreviewed/2022/05/GHSA-65xv-wrrq-q434/GHSA-65xv-wrrq-q434.json @@ -7,12 +7,8 @@ "CVE-2008-5445" ], "details": "Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is a denial of service in observiced.exe via malformed private Protocol data that triggers a NULL pointer dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-66h5-29p5-x9fq/GHSA-66h5-29p5-x9fq.json b/advisories/unreviewed/2022/05/GHSA-66h5-29p5-x9fq/GHSA-66h5-29p5-x9fq.json index de30e63363a..8eb299f5d55 100644 --- a/advisories/unreviewed/2022/05/GHSA-66h5-29p5-x9fq/GHSA-66h5-29p5-x9fq.json +++ b/advisories/unreviewed/2022/05/GHSA-66h5-29p5-x9fq/GHSA-66h5-29p5-x9fq.json @@ -7,12 +7,8 @@ "CVE-2010-4333" ], "details": "Pointter PHP Micro-Blogging Social Network 1.8 allows remote attackers to bypass authentication and obtain administrative privileges via arbitrary values of the auser and apass cookies.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-683p-j88j-jvf2/GHSA-683p-j88j-jvf2.json b/advisories/unreviewed/2022/05/GHSA-683p-j88j-jvf2/GHSA-683p-j88j-jvf2.json index abc9c49c104..d357d728e3d 100644 --- a/advisories/unreviewed/2022/05/GHSA-683p-j88j-jvf2/GHSA-683p-j88j-jvf2.json +++ b/advisories/unreviewed/2022/05/GHSA-683p-j88j-jvf2/GHSA-683p-j88j-jvf2.json @@ -7,12 +7,8 @@ "CVE-2008-6618" ], "details": "Multiple SQL injection vulnerabilities in ClassSystem 2.3 allow remote attackers to execute arbitrary SQL commands via the teacher_id parameter in (1) class/HomepageMain.php and (2) class/HomepageTop.php, and (3) the message_id parameter in class/MessageReply.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-684r-hjf4-qjrh/GHSA-684r-hjf4-qjrh.json b/advisories/unreviewed/2022/05/GHSA-684r-hjf4-qjrh/GHSA-684r-hjf4-qjrh.json index cf0b47fec07..5336c1d0c4c 100644 --- a/advisories/unreviewed/2022/05/GHSA-684r-hjf4-qjrh/GHSA-684r-hjf4-qjrh.json +++ b/advisories/unreviewed/2022/05/GHSA-684r-hjf4-qjrh/GHSA-684r-hjf4-qjrh.json @@ -7,12 +7,8 @@ "CVE-2008-5707" ], "details": "SQL injection vulnerability in urunler.asp in Iltaweb Alisveris Sistemi allows remote attackers to execute arbitrary SQL commands via the catno parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-687f-mfxq-m4c2/GHSA-687f-mfxq-m4c2.json b/advisories/unreviewed/2022/05/GHSA-687f-mfxq-m4c2/GHSA-687f-mfxq-m4c2.json index b32d4e5e3c8..6795e4d34e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-687f-mfxq-m4c2/GHSA-687f-mfxq-m4c2.json +++ b/advisories/unreviewed/2022/05/GHSA-687f-mfxq-m4c2/GHSA-687f-mfxq-m4c2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-68c6-3m87-9qj2/GHSA-68c6-3m87-9qj2.json b/advisories/unreviewed/2022/05/GHSA-68c6-3m87-9qj2/GHSA-68c6-3m87-9qj2.json index 896cfdda1ef..ddd7d7cd2db 100644 --- a/advisories/unreviewed/2022/05/GHSA-68c6-3m87-9qj2/GHSA-68c6-3m87-9qj2.json +++ b/advisories/unreviewed/2022/05/GHSA-68c6-3m87-9qj2/GHSA-68c6-3m87-9qj2.json @@ -7,12 +7,8 @@ "CVE-2008-6935" ], "details": "Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an im:// URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-68j2-2v53-vhg2/GHSA-68j2-2v53-vhg2.json b/advisories/unreviewed/2022/05/GHSA-68j2-2v53-vhg2/GHSA-68j2-2v53-vhg2.json index be181c06ed8..568f4f66570 100644 --- a/advisories/unreviewed/2022/05/GHSA-68j2-2v53-vhg2/GHSA-68j2-2v53-vhg2.json +++ b/advisories/unreviewed/2022/05/GHSA-68j2-2v53-vhg2/GHSA-68j2-2v53-vhg2.json @@ -7,12 +7,8 @@ "CVE-2008-7209" ], "details": "Unrestricted file upload vulnerability in the add2 action in a_upload.php in OneCMS 2.4, and possibly earlier, allows remote attackers to execute arbitrary code by uploading a file with an executable extension and using a safe content type such as image/gif, then accessing it via a direct request to the file in an unspecified directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-68w3-hcjc-pxw8/GHSA-68w3-hcjc-pxw8.json b/advisories/unreviewed/2022/05/GHSA-68w3-hcjc-pxw8/GHSA-68w3-hcjc-pxw8.json index 0ec6eb58935..80b0ef47f9a 100644 --- a/advisories/unreviewed/2022/05/GHSA-68w3-hcjc-pxw8/GHSA-68w3-hcjc-pxw8.json +++ b/advisories/unreviewed/2022/05/GHSA-68w3-hcjc-pxw8/GHSA-68w3-hcjc-pxw8.json @@ -7,12 +7,8 @@ "CVE-2010-2733" ], "details": "Cross-site scripting (XSS) vulnerability in the Web Monitor in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka \"UAG XSS Allows EOP Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-694q-mqc8-23w4/GHSA-694q-mqc8-23w4.json b/advisories/unreviewed/2022/05/GHSA-694q-mqc8-23w4/GHSA-694q-mqc8-23w4.json index 22a906fab8d..acc5c866b4c 100644 --- a/advisories/unreviewed/2022/05/GHSA-694q-mqc8-23w4/GHSA-694q-mqc8-23w4.json +++ b/advisories/unreviewed/2022/05/GHSA-694q-mqc8-23w4/GHSA-694q-mqc8-23w4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6cv4-fcmj-6mp5/GHSA-6cv4-fcmj-6mp5.json b/advisories/unreviewed/2022/05/GHSA-6cv4-fcmj-6mp5/GHSA-6cv4-fcmj-6mp5.json index 61030fec2f2..12ef6d25968 100644 --- a/advisories/unreviewed/2022/05/GHSA-6cv4-fcmj-6mp5/GHSA-6cv4-fcmj-6mp5.json +++ b/advisories/unreviewed/2022/05/GHSA-6cv4-fcmj-6mp5/GHSA-6cv4-fcmj-6mp5.json @@ -7,12 +7,8 @@ "CVE-2010-4229" ], "details": "Directory traversal vulnerability in an unspecified servlet in the Inventory component in ZENworks Asset Management (ZAM) in Novell ZENworks Configuration Management 10.3 before 10.3.2, and 11, allows remote attackers to overwrite files, and subsequently execute arbitrary code, via directory traversal sequences in a filename field in an upload request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6cx9-pwgj-7m88/GHSA-6cx9-pwgj-7m88.json b/advisories/unreviewed/2022/05/GHSA-6cx9-pwgj-7m88/GHSA-6cx9-pwgj-7m88.json index dcf892eae1d..22f0196461e 100644 --- a/advisories/unreviewed/2022/05/GHSA-6cx9-pwgj-7m88/GHSA-6cx9-pwgj-7m88.json +++ b/advisories/unreviewed/2022/05/GHSA-6cx9-pwgj-7m88/GHSA-6cx9-pwgj-7m88.json @@ -7,12 +7,8 @@ "CVE-2008-6045" ], "details": "Session fixation vulnerability in shopping_cart.php in xt:Commerce 3.0.4 and earlier allows remote attackers to hijack web sessions by setting the XTCsid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6f6h-rwhv-q9gg/GHSA-6f6h-rwhv-q9gg.json b/advisories/unreviewed/2022/05/GHSA-6f6h-rwhv-q9gg/GHSA-6f6h-rwhv-q9gg.json index 081619ef710..65288ef1f09 100644 --- a/advisories/unreviewed/2022/05/GHSA-6f6h-rwhv-q9gg/GHSA-6f6h-rwhv-q9gg.json +++ b/advisories/unreviewed/2022/05/GHSA-6f6h-rwhv-q9gg/GHSA-6f6h-rwhv-q9gg.json @@ -7,12 +7,8 @@ "CVE-2008-5998" ], "details": "Multiple SQL injection vulnerabilities in the ajax_checklist_save function in the Ajax Checklist module 5.x before 5.x-1.1 for Drupal allow remote authenticated users, with \"update ajax checklists\" permissions, to execute arbitrary SQL commands via a save operation, related to the (1) nid, (2) qid, and (3) state parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6fmj-cv39-m2r9/GHSA-6fmj-cv39-m2r9.json b/advisories/unreviewed/2022/05/GHSA-6fmj-cv39-m2r9/GHSA-6fmj-cv39-m2r9.json index 0294a87da17..51bf519cd02 100644 --- a/advisories/unreviewed/2022/05/GHSA-6fmj-cv39-m2r9/GHSA-6fmj-cv39-m2r9.json +++ b/advisories/unreviewed/2022/05/GHSA-6fmj-cv39-m2r9/GHSA-6fmj-cv39-m2r9.json @@ -7,12 +7,8 @@ "CVE-2008-7024" ], "details": "admin.php in Arz Development The Gemini Portal 4.7 and earlier allows remote attackers to bypass authentication and gain administrator privileges by setting the user cookie to \"admin\" and setting the name parameter to \"users.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6g4r-vrqf-8344/GHSA-6g4r-vrqf-8344.json b/advisories/unreviewed/2022/05/GHSA-6g4r-vrqf-8344/GHSA-6g4r-vrqf-8344.json index fa17afd380c..4711775c672 100644 --- a/advisories/unreviewed/2022/05/GHSA-6g4r-vrqf-8344/GHSA-6g4r-vrqf-8344.json +++ b/advisories/unreviewed/2022/05/GHSA-6g4r-vrqf-8344/GHSA-6g4r-vrqf-8344.json @@ -7,12 +7,8 @@ "CVE-2008-5853" ], "details": "Chilek Content Management System (aka ChiCoMaS) 2.0.4 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to (1) obtain database credentials via a direct request for config.inc or (2) read database backups via a request for a backup/ URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6h23-ph84-8fvv/GHSA-6h23-ph84-8fvv.json b/advisories/unreviewed/2022/05/GHSA-6h23-ph84-8fvv/GHSA-6h23-ph84-8fvv.json index 65fcf366da7..cbec1b667cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-6h23-ph84-8fvv/GHSA-6h23-ph84-8fvv.json +++ b/advisories/unreviewed/2022/05/GHSA-6h23-ph84-8fvv/GHSA-6h23-ph84-8fvv.json @@ -7,12 +7,8 @@ "CVE-2008-5115" ], "details": "Cross-site request forgery (CSRF) vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to hijack the authentication of administrators for requests that update the password via idm/admin/changeself.jsp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6h9x-2p3x-8j6g/GHSA-6h9x-2p3x-8j6g.json b/advisories/unreviewed/2022/05/GHSA-6h9x-2p3x-8j6g/GHSA-6h9x-2p3x-8j6g.json index 8432f0b3aec..bc421af754e 100644 --- a/advisories/unreviewed/2022/05/GHSA-6h9x-2p3x-8j6g/GHSA-6h9x-2p3x-8j6g.json +++ b/advisories/unreviewed/2022/05/GHSA-6h9x-2p3x-8j6g/GHSA-6h9x-2p3x-8j6g.json @@ -7,12 +7,8 @@ "CVE-2008-6554" ], "details": "cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build 070426 allows remote attackers to execute arbitrary commands via shell metacharacters in the query string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6hv2-q69h-5974/GHSA-6hv2-q69h-5974.json b/advisories/unreviewed/2022/05/GHSA-6hv2-q69h-5974/GHSA-6hv2-q69h-5974.json index 1c3606eb3f0..be2dd0ea17f 100644 --- a/advisories/unreviewed/2022/05/GHSA-6hv2-q69h-5974/GHSA-6hv2-q69h-5974.json +++ b/advisories/unreviewed/2022/05/GHSA-6hv2-q69h-5974/GHSA-6hv2-q69h-5974.json @@ -7,12 +7,8 @@ "CVE-2010-5051" ], "details": "Cross-site scripting (XSS) vulnerability in admin/core/admin_func.php in razorCMS 1.0 stable allows remote attackers to inject arbitrary web script or HTML via the content parameter in an edit action to admin/index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6mcc-jcrh-h969/GHSA-6mcc-jcrh-h969.json b/advisories/unreviewed/2022/05/GHSA-6mcc-jcrh-h969/GHSA-6mcc-jcrh-h969.json index 484cc96a793..864ce59b4ea 100644 --- a/advisories/unreviewed/2022/05/GHSA-6mcc-jcrh-h969/GHSA-6mcc-jcrh-h969.json +++ b/advisories/unreviewed/2022/05/GHSA-6mcc-jcrh-h969/GHSA-6mcc-jcrh-h969.json @@ -7,12 +7,8 @@ "CVE-2008-6444" ], "details": "Stack-based buffer overflow in CSTransfer.dll in Baidu Hi IM might allow remote attackers to execute arbitrary code via a crafted packet, probably related to an improper length value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6mm9-r7wf-jwhj/GHSA-6mm9-r7wf-jwhj.json b/advisories/unreviewed/2022/05/GHSA-6mm9-r7wf-jwhj/GHSA-6mm9-r7wf-jwhj.json index 5a79825d3a2..f665d7518f7 100644 --- a/advisories/unreviewed/2022/05/GHSA-6mm9-r7wf-jwhj/GHSA-6mm9-r7wf-jwhj.json +++ b/advisories/unreviewed/2022/05/GHSA-6mm9-r7wf-jwhj/GHSA-6mm9-r7wf-jwhj.json @@ -7,12 +7,8 @@ "CVE-2011-0228" ], "details": "The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints parameter during validation of X.509 certificate chains, which allows man-in-the-middle attackers to spoof an SSL server by using a non-CA certificate to sign a certificate for an arbitrary domain.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6mpg-v9p2-xw8m/GHSA-6mpg-v9p2-xw8m.json b/advisories/unreviewed/2022/05/GHSA-6mpg-v9p2-xw8m/GHSA-6mpg-v9p2-xw8m.json index bd1c316cc05..5b2f1b16f12 100644 --- a/advisories/unreviewed/2022/05/GHSA-6mpg-v9p2-xw8m/GHSA-6mpg-v9p2-xw8m.json +++ b/advisories/unreviewed/2022/05/GHSA-6mpg-v9p2-xw8m/GHSA-6mpg-v9p2-xw8m.json @@ -7,12 +7,8 @@ "CVE-2014-2533" ], "details": "/sbin/ifwatchd in BlackBerry QNX Neutrino RTOS 6.4.x and 6.5.x allows local users to gain privileges by providing an arbitrary program name as a command-line argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6p24-mjw7-mgwh/GHSA-6p24-mjw7-mgwh.json b/advisories/unreviewed/2022/05/GHSA-6p24-mjw7-mgwh/GHSA-6p24-mjw7-mgwh.json index fa455cb2815..0f16852d898 100644 --- a/advisories/unreviewed/2022/05/GHSA-6p24-mjw7-mgwh/GHSA-6p24-mjw7-mgwh.json +++ b/advisories/unreviewed/2022/05/GHSA-6p24-mjw7-mgwh/GHSA-6p24-mjw7-mgwh.json @@ -7,12 +7,8 @@ "CVE-2008-6679" ], "details": "Buffer overflow in the BaseFont writer module in Ghostscript 8.62, and possibly other versions, allows remote attackers to cause a denial of service (ps2pdf crash) and possibly execute arbitrary code via a crafted Postscript file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6pcv-57hj-r55g/GHSA-6pcv-57hj-r55g.json b/advisories/unreviewed/2022/05/GHSA-6pcv-57hj-r55g/GHSA-6pcv-57hj-r55g.json index f3f0667afa2..b6d672248dd 100644 --- a/advisories/unreviewed/2022/05/GHSA-6pcv-57hj-r55g/GHSA-6pcv-57hj-r55g.json +++ b/advisories/unreviewed/2022/05/GHSA-6pcv-57hj-r55g/GHSA-6pcv-57hj-r55g.json @@ -7,12 +7,8 @@ "CVE-2010-4867" ], "details": "Directory traversal vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the bn parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6ppf-8jhp-9vrj/GHSA-6ppf-8jhp-9vrj.json b/advisories/unreviewed/2022/05/GHSA-6ppf-8jhp-9vrj/GHSA-6ppf-8jhp-9vrj.json index 1b03ca06f51..e7ee36946f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-6ppf-8jhp-9vrj/GHSA-6ppf-8jhp-9vrj.json +++ b/advisories/unreviewed/2022/05/GHSA-6ppf-8jhp-9vrj/GHSA-6ppf-8jhp-9vrj.json @@ -7,12 +7,8 @@ "CVE-2008-5182" ], "details": "The inotify functionality in Linux kernel 2.6 before 2.6.28-rc5 might allow local users to gain privileges via unknown vectors related to race conditions in inotify watch removal and umount.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6q83-cwp9-5ph3/GHSA-6q83-cwp9-5ph3.json b/advisories/unreviewed/2022/05/GHSA-6q83-cwp9-5ph3/GHSA-6q83-cwp9-5ph3.json index 441d64b4b04..98886d322c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-6q83-cwp9-5ph3/GHSA-6q83-cwp9-5ph3.json +++ b/advisories/unreviewed/2022/05/GHSA-6q83-cwp9-5ph3/GHSA-6q83-cwp9-5ph3.json @@ -7,12 +7,8 @@ "CVE-2008-5336" ], "details": "SQL injection vulnerability in index.php in WebStudio CMS allows remote attackers to execute arbitrary SQL commands via the pageid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6qr6-mgvw-vh8f/GHSA-6qr6-mgvw-vh8f.json b/advisories/unreviewed/2022/05/GHSA-6qr6-mgvw-vh8f/GHSA-6qr6-mgvw-vh8f.json index d02762da645..773d0817945 100644 --- a/advisories/unreviewed/2022/05/GHSA-6qr6-mgvw-vh8f/GHSA-6qr6-mgvw-vh8f.json +++ b/advisories/unreviewed/2022/05/GHSA-6qr6-mgvw-vh8f/GHSA-6qr6-mgvw-vh8f.json @@ -7,12 +7,8 @@ "CVE-2010-3214" ], "details": "Stack-based buffer overflow in Microsoft Word 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; Word Viewer; Office Web Apps; and Word Web App allows remote attackers to execute arbitrary code via a crafted Word document, aka \"Word Stack Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6r3f-jrxp-9vvc/GHSA-6r3f-jrxp-9vvc.json b/advisories/unreviewed/2022/05/GHSA-6r3f-jrxp-9vvc/GHSA-6r3f-jrxp-9vvc.json index 9d86c209429..5aeeb84e936 100644 --- a/advisories/unreviewed/2022/05/GHSA-6r3f-jrxp-9vvc/GHSA-6r3f-jrxp-9vvc.json +++ b/advisories/unreviewed/2022/05/GHSA-6r3f-jrxp-9vvc/GHSA-6r3f-jrxp-9vvc.json @@ -7,12 +7,8 @@ "CVE-2008-7161" ], "details": "Fortinet FortiGuard Fortinet FortiGate-1000 3.00 build 040075,070111 allows remote attackers to bypass URL filtering via fragmented GET or POST requests that use HTTP/1.0 without the Host header. NOTE: this issue might be related to CVE-2005-3058.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6rgv-f9r3-qj2j/GHSA-6rgv-f9r3-qj2j.json b/advisories/unreviewed/2022/05/GHSA-6rgv-f9r3-qj2j/GHSA-6rgv-f9r3-qj2j.json index d782c9be13a..4e207369381 100644 --- a/advisories/unreviewed/2022/05/GHSA-6rgv-f9r3-qj2j/GHSA-6rgv-f9r3-qj2j.json +++ b/advisories/unreviewed/2022/05/GHSA-6rgv-f9r3-qj2j/GHSA-6rgv-f9r3-qj2j.json @@ -7,12 +7,8 @@ "CVE-2008-5073" ], "details": "Heap-based buffer overflow in an ActiveX control in Novell ZENworks Desktop Management 6.5 allows remote attackers to execute arbitrary code via a long argument to the CanUninstall method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6vfp-9jj7-g4x4/GHSA-6vfp-9jj7-g4x4.json b/advisories/unreviewed/2022/05/GHSA-6vfp-9jj7-g4x4/GHSA-6vfp-9jj7-g4x4.json index 8b01eeecc0c..e566610be80 100644 --- a/advisories/unreviewed/2022/05/GHSA-6vfp-9jj7-g4x4/GHSA-6vfp-9jj7-g4x4.json +++ b/advisories/unreviewed/2022/05/GHSA-6vfp-9jj7-g4x4/GHSA-6vfp-9jj7-g4x4.json @@ -7,12 +7,8 @@ "CVE-2008-7142" ], "details": "Absolute path traversal vulnerability in the Disk Usage module (frontend/x/diskusage/index.html) in cPanel 11.18.3 allows remote attackers to list arbitrary directories via the showtree parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6vw8-p3h2-qw42/GHSA-6vw8-p3h2-qw42.json b/advisories/unreviewed/2022/05/GHSA-6vw8-p3h2-qw42/GHSA-6vw8-p3h2-qw42.json index b405a0a8e9e..f068d111e22 100644 --- a/advisories/unreviewed/2022/05/GHSA-6vw8-p3h2-qw42/GHSA-6vw8-p3h2-qw42.json +++ b/advisories/unreviewed/2022/05/GHSA-6vw8-p3h2-qw42/GHSA-6vw8-p3h2-qw42.json @@ -7,12 +7,8 @@ "CVE-2008-5579" ], "details": "Absolute path traversal vulnerability in mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to read arbitrary files via a full pathname in the sFileName parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6vxq-vqv5-3r5q/GHSA-6vxq-vqv5-3r5q.json b/advisories/unreviewed/2022/05/GHSA-6vxq-vqv5-3r5q/GHSA-6vxq-vqv5-3r5q.json index 9c766885522..ae50b8d2f4d 100644 --- a/advisories/unreviewed/2022/05/GHSA-6vxq-vqv5-3r5q/GHSA-6vxq-vqv5-3r5q.json +++ b/advisories/unreviewed/2022/05/GHSA-6vxq-vqv5-3r5q/GHSA-6vxq-vqv5-3r5q.json @@ -7,12 +7,8 @@ "CVE-2010-4907" ], "details": "Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.3 allows remote attackers to inject arbitrary web script or HTML via the user parameter. NOTE: the from parameter is already covered by CVE-2009-4562.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6wgw-2fwc-c2jw/GHSA-6wgw-2fwc-c2jw.json b/advisories/unreviewed/2022/05/GHSA-6wgw-2fwc-c2jw/GHSA-6wgw-2fwc-c2jw.json index 4c86f0dc0b2..8ea4501ca5c 100644 --- a/advisories/unreviewed/2022/05/GHSA-6wgw-2fwc-c2jw/GHSA-6wgw-2fwc-c2jw.json +++ b/advisories/unreviewed/2022/05/GHSA-6wgw-2fwc-c2jw/GHSA-6wgw-2fwc-c2jw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6xvj-hfc5-c4v6/GHSA-6xvj-hfc5-c4v6.json b/advisories/unreviewed/2022/05/GHSA-6xvj-hfc5-c4v6/GHSA-6xvj-hfc5-c4v6.json index 76af36740bd..a1c1dcd2041 100644 --- a/advisories/unreviewed/2022/05/GHSA-6xvj-hfc5-c4v6/GHSA-6xvj-hfc5-c4v6.json +++ b/advisories/unreviewed/2022/05/GHSA-6xvj-hfc5-c4v6/GHSA-6xvj-hfc5-c4v6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-722h-pf8p-7g85/GHSA-722h-pf8p-7g85.json b/advisories/unreviewed/2022/05/GHSA-722h-pf8p-7g85/GHSA-722h-pf8p-7g85.json index a2b04706fda..67f41156430 100644 --- a/advisories/unreviewed/2022/05/GHSA-722h-pf8p-7g85/GHSA-722h-pf8p-7g85.json +++ b/advisories/unreviewed/2022/05/GHSA-722h-pf8p-7g85/GHSA-722h-pf8p-7g85.json @@ -7,12 +7,8 @@ "CVE-2008-5957" ], "details": "SQL injection vulnerability in the Mydyngallery (com_mydyngallery) component 1.4.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the directory parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-72qp-74c2-m684/GHSA-72qp-74c2-m684.json b/advisories/unreviewed/2022/05/GHSA-72qp-74c2-m684/GHSA-72qp-74c2-m684.json index 934ac2924e4..b7e03675436 100644 --- a/advisories/unreviewed/2022/05/GHSA-72qp-74c2-m684/GHSA-72qp-74c2-m684.json +++ b/advisories/unreviewed/2022/05/GHSA-72qp-74c2-m684/GHSA-72qp-74c2-m684.json @@ -7,12 +7,8 @@ "CVE-2010-3896" ], "details": "The ESSearchApplication directory tree in IBM OmniFind Enterprise Edition 8.x and 9.x does not require authentication, which allows remote attackers to modify the server configuration via a request to palette.do.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-735m-hmhh-5jph/GHSA-735m-hmhh-5jph.json b/advisories/unreviewed/2022/05/GHSA-735m-hmhh-5jph/GHSA-735m-hmhh-5jph.json index 735dabf29e1..34c821288ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-735m-hmhh-5jph/GHSA-735m-hmhh-5jph.json +++ b/advisories/unreviewed/2022/05/GHSA-735m-hmhh-5jph/GHSA-735m-hmhh-5jph.json @@ -7,12 +7,8 @@ "CVE-2008-4616" ], "details": "The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-supplied values to calculate a shared key.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-73p7-g7vq-jp9w/GHSA-73p7-g7vq-jp9w.json b/advisories/unreviewed/2022/05/GHSA-73p7-g7vq-jp9w/GHSA-73p7-g7vq-jp9w.json index 5105668586d..5916c95b8ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-73p7-g7vq-jp9w/GHSA-73p7-g7vq-jp9w.json +++ b/advisories/unreviewed/2022/05/GHSA-73p7-g7vq-jp9w/GHSA-73p7-g7vq-jp9w.json @@ -7,12 +7,8 @@ "CVE-2008-5547" ], "details": "HAURI ViRobot 2008.12.4.1499 and possibly 2008.9.12.1375, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7443-8957-rjqm/GHSA-7443-8957-rjqm.json b/advisories/unreviewed/2022/05/GHSA-7443-8957-rjqm/GHSA-7443-8957-rjqm.json index 61de0bd538d..4ce5eb09d4e 100644 --- a/advisories/unreviewed/2022/05/GHSA-7443-8957-rjqm/GHSA-7443-8957-rjqm.json +++ b/advisories/unreviewed/2022/05/GHSA-7443-8957-rjqm/GHSA-7443-8957-rjqm.json @@ -7,12 +7,8 @@ "CVE-2010-2732" ], "details": "Open redirect vulnerability in the web interface in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, aka \"UAG Redirection Spoofing Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-74g9-993v-wpc4/GHSA-74g9-993v-wpc4.json b/advisories/unreviewed/2022/05/GHSA-74g9-993v-wpc4/GHSA-74g9-993v-wpc4.json index 2ed9ddb41a9..52bad9c8c22 100644 --- a/advisories/unreviewed/2022/05/GHSA-74g9-993v-wpc4/GHSA-74g9-993v-wpc4.json +++ b/advisories/unreviewed/2022/05/GHSA-74g9-993v-wpc4/GHSA-74g9-993v-wpc4.json @@ -7,12 +7,8 @@ "CVE-2008-6164" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in DreamCost HostAdmin 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the page parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-74m2-p4jx-f8gv/GHSA-74m2-p4jx-f8gv.json b/advisories/unreviewed/2022/05/GHSA-74m2-p4jx-f8gv/GHSA-74m2-p4jx-f8gv.json index b7a72d2095a..ba48c2cc290 100644 --- a/advisories/unreviewed/2022/05/GHSA-74m2-p4jx-f8gv/GHSA-74m2-p4jx-f8gv.json +++ b/advisories/unreviewed/2022/05/GHSA-74m2-p4jx-f8gv/GHSA-74m2-p4jx-f8gv.json @@ -7,12 +7,8 @@ "CVE-2008-5674" ], "details": "Multiple array index errors in the HTTP server in Darkwet Network webcamXP 3.72.440.0 and earlier and beta 4.05.280 and earlier allow remote attackers to cause a denial of service (device crash) and read portions of memory via (1) an invalid camnum parameter to the pocketpc component and (2) an invalid id parameter to the show_gallery_pic component.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-75c7-jhv8-2qrh/GHSA-75c7-jhv8-2qrh.json b/advisories/unreviewed/2022/05/GHSA-75c7-jhv8-2qrh/GHSA-75c7-jhv8-2qrh.json index ca8abd917d4..a800b8d00b9 100644 --- a/advisories/unreviewed/2022/05/GHSA-75c7-jhv8-2qrh/GHSA-75c7-jhv8-2qrh.json +++ b/advisories/unreviewed/2022/05/GHSA-75c7-jhv8-2qrh/GHSA-75c7-jhv8-2qrh.json @@ -7,12 +7,8 @@ "CVE-2010-3238" ], "details": "Microsoft Excel 2002 SP3 and 2003 SP3, and Office 2004 for Mac, does not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka \"Negative Future Function Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-75v4-pf3w-q8gv/GHSA-75v4-pf3w-q8gv.json b/advisories/unreviewed/2022/05/GHSA-75v4-pf3w-q8gv/GHSA-75v4-pf3w-q8gv.json index b1290130b1d..0e2c9429dfb 100644 --- a/advisories/unreviewed/2022/05/GHSA-75v4-pf3w-q8gv/GHSA-75v4-pf3w-q8gv.json +++ b/advisories/unreviewed/2022/05/GHSA-75v4-pf3w-q8gv/GHSA-75v4-pf3w-q8gv.json @@ -7,12 +7,8 @@ "CVE-2008-5043" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the web-based interface in IBM Metrica Service Assurance Framework allow remote authenticated users to inject arbitrary web script or HTML via (1) the elementid parameter in a generatedreportresults action to the ReportTree program, (2) the jnlpname parameter to the Launch program, or (3) the :tasklabel parameter to the ReportRequest program, related to the name of a report.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-76jq-8wqx-96ch/GHSA-76jq-8wqx-96ch.json b/advisories/unreviewed/2022/05/GHSA-76jq-8wqx-96ch/GHSA-76jq-8wqx-96ch.json index 0099ef08e25..d3f1f1c36f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-76jq-8wqx-96ch/GHSA-76jq-8wqx-96ch.json +++ b/advisories/unreviewed/2022/05/GHSA-76jq-8wqx-96ch/GHSA-76jq-8wqx-96ch.json @@ -7,12 +7,8 @@ "CVE-2010-4573" ], "details": "The Update Installer in VMware ESXi 4.1, when a modified sfcb.cfg is present, does not properly configure the SFCB authentication mode, which allows remote attackers to obtain access via an arbitrary username and password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-78j2-xvgc-hm94/GHSA-78j2-xvgc-hm94.json b/advisories/unreviewed/2022/05/GHSA-78j2-xvgc-hm94/GHSA-78j2-xvgc-hm94.json index 83a1b81cb56..a188f6fcb0b 100644 --- a/advisories/unreviewed/2022/05/GHSA-78j2-xvgc-hm94/GHSA-78j2-xvgc-hm94.json +++ b/advisories/unreviewed/2022/05/GHSA-78j2-xvgc-hm94/GHSA-78j2-xvgc-hm94.json @@ -7,12 +7,8 @@ "CVE-2011-0420" ], "details": "The grapheme_extract function in the Internationalization extension (Intl) for ICU for PHP 5.3.5 allows context-dependent attackers to cause a denial of service (crash) via an invalid size argument, which triggers a NULL pointer dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-79mr-p6x2-hw9g/GHSA-79mr-p6x2-hw9g.json b/advisories/unreviewed/2022/05/GHSA-79mr-p6x2-hw9g/GHSA-79mr-p6x2-hw9g.json index db9e55a9874..bdde98ce74b 100644 --- a/advisories/unreviewed/2022/05/GHSA-79mr-p6x2-hw9g/GHSA-79mr-p6x2-hw9g.json +++ b/advisories/unreviewed/2022/05/GHSA-79mr-p6x2-hw9g/GHSA-79mr-p6x2-hw9g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7c62-hjf7-xjjr/GHSA-7c62-hjf7-xjjr.json b/advisories/unreviewed/2022/05/GHSA-7c62-hjf7-xjjr/GHSA-7c62-hjf7-xjjr.json index 44f5cf0e273..be615355e05 100644 --- a/advisories/unreviewed/2022/05/GHSA-7c62-hjf7-xjjr/GHSA-7c62-hjf7-xjjr.json +++ b/advisories/unreviewed/2022/05/GHSA-7c62-hjf7-xjjr/GHSA-7c62-hjf7-xjjr.json @@ -7,12 +7,8 @@ "CVE-2008-4777" ], "details": "SQL injection vulnerability in the Showroom Joomlearn LMS (com_lms) component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the cat parameter in a showTests task.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7cfg-5g87-442j/GHSA-7cfg-5g87-442j.json b/advisories/unreviewed/2022/05/GHSA-7cfg-5g87-442j/GHSA-7cfg-5g87-442j.json index 5ba150e4a75..aa6cb0696e7 100644 --- a/advisories/unreviewed/2022/05/GHSA-7cfg-5g87-442j/GHSA-7cfg-5g87-442j.json +++ b/advisories/unreviewed/2022/05/GHSA-7cfg-5g87-442j/GHSA-7cfg-5g87-442j.json @@ -7,12 +7,8 @@ "CVE-2008-6644" ], "details": "Cross-site scripting (XSS) vulnerability in Default.aspx in DotNetNuke 4.8.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7fgh-8wj3-28pj/GHSA-7fgh-8wj3-28pj.json b/advisories/unreviewed/2022/05/GHSA-7fgh-8wj3-28pj/GHSA-7fgh-8wj3-28pj.json index 228dc37c67d..0a095903008 100644 --- a/advisories/unreviewed/2022/05/GHSA-7fgh-8wj3-28pj/GHSA-7fgh-8wj3-28pj.json +++ b/advisories/unreviewed/2022/05/GHSA-7fgh-8wj3-28pj/GHSA-7fgh-8wj3-28pj.json @@ -7,12 +7,8 @@ "CVE-2008-5523" ], "details": "avast! antivirus 4.8.1281.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7gp9-qpvg-436r/GHSA-7gp9-qpvg-436r.json b/advisories/unreviewed/2022/05/GHSA-7gp9-qpvg-436r/GHSA-7gp9-qpvg-436r.json index 207cee82e04..fec4d87bf3e 100644 --- a/advisories/unreviewed/2022/05/GHSA-7gp9-qpvg-436r/GHSA-7gp9-qpvg-436r.json +++ b/advisories/unreviewed/2022/05/GHSA-7gp9-qpvg-436r/GHSA-7gp9-qpvg-436r.json @@ -7,12 +7,8 @@ "CVE-2010-3276" ], "details": "libdirectx_plugin.dll in VideoLAN VLC Media Player before 1.1.8 allows remote attackers to execute arbitrary code via a crafted width in an NSV file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7hcq-2jp2-x4wq/GHSA-7hcq-2jp2-x4wq.json b/advisories/unreviewed/2022/05/GHSA-7hcq-2jp2-x4wq/GHSA-7hcq-2jp2-x4wq.json index d4072056815..e0c92769a70 100644 --- a/advisories/unreviewed/2022/05/GHSA-7hcq-2jp2-x4wq/GHSA-7hcq-2jp2-x4wq.json +++ b/advisories/unreviewed/2022/05/GHSA-7hcq-2jp2-x4wq/GHSA-7hcq-2jp2-x4wq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7hmv-6p8v-7rmw/GHSA-7hmv-6p8v-7rmw.json b/advisories/unreviewed/2022/05/GHSA-7hmv-6p8v-7rmw/GHSA-7hmv-6p8v-7rmw.json index 30003783eae..b7d3430c34b 100644 --- a/advisories/unreviewed/2022/05/GHSA-7hmv-6p8v-7rmw/GHSA-7hmv-6p8v-7rmw.json +++ b/advisories/unreviewed/2022/05/GHSA-7hmv-6p8v-7rmw/GHSA-7hmv-6p8v-7rmw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7hvv-ww63-97rc/GHSA-7hvv-ww63-97rc.json b/advisories/unreviewed/2022/05/GHSA-7hvv-ww63-97rc/GHSA-7hvv-ww63-97rc.json index dec9922b6b0..8bf40ddda15 100644 --- a/advisories/unreviewed/2022/05/GHSA-7hvv-ww63-97rc/GHSA-7hvv-ww63-97rc.json +++ b/advisories/unreviewed/2022/05/GHSA-7hvv-ww63-97rc/GHSA-7hvv-ww63-97rc.json @@ -7,12 +7,8 @@ "CVE-2008-7082" ], "details": "MyBB (aka MyBulletinBoard) 1.4.3 includes the sensitive my_post_key parameter in URLs to moderation.php with the (1) mergeposts, (2) split, and (3) deleteposts actions, which allows remote attackers to steal the token and bypass the cross-site request forgery (CSRF) protection mechanism to hijack the authentication of moderators by reading the token from the HTTP Referer header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7jhv-x45q-jhqc/GHSA-7jhv-x45q-jhqc.json b/advisories/unreviewed/2022/05/GHSA-7jhv-x45q-jhqc/GHSA-7jhv-x45q-jhqc.json index d7cf7e12061..520942292c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-7jhv-x45q-jhqc/GHSA-7jhv-x45q-jhqc.json +++ b/advisories/unreviewed/2022/05/GHSA-7jhv-x45q-jhqc/GHSA-7jhv-x45q-jhqc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7jpf-2wg2-crww/GHSA-7jpf-2wg2-crww.json b/advisories/unreviewed/2022/05/GHSA-7jpf-2wg2-crww/GHSA-7jpf-2wg2-crww.json index 77c5b34224f..ca2ad092473 100644 --- a/advisories/unreviewed/2022/05/GHSA-7jpf-2wg2-crww/GHSA-7jpf-2wg2-crww.json +++ b/advisories/unreviewed/2022/05/GHSA-7jpf-2wg2-crww/GHSA-7jpf-2wg2-crww.json @@ -7,12 +7,8 @@ "CVE-2008-5247" ], "details": "The real_parse_audio_specific_data function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, uses an untrusted height (aka codec_data_length) value as a divisor, which allow remote attackers to cause a denial of service (divide-by-zero error and crash) via a zero value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7jx3-hfqx-539h/GHSA-7jx3-hfqx-539h.json b/advisories/unreviewed/2022/05/GHSA-7jx3-hfqx-539h/GHSA-7jx3-hfqx-539h.json index 2e6930bb205..bce9c26a52e 100644 --- a/advisories/unreviewed/2022/05/GHSA-7jx3-hfqx-539h/GHSA-7jx3-hfqx-539h.json +++ b/advisories/unreviewed/2022/05/GHSA-7jx3-hfqx-539h/GHSA-7jx3-hfqx-539h.json @@ -7,12 +7,8 @@ "CVE-2008-6643" ], "details": "LokiCMS 0.3.4 and possibly earlier versions does not properly restrict access to administrative functions, which allows remote attackers to bypass intended restrictions and modify configuration settings via the LokiACTION parameter in a direct request to admin.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7mm8-fmcf-mvw9/GHSA-7mm8-fmcf-mvw9.json b/advisories/unreviewed/2022/05/GHSA-7mm8-fmcf-mvw9/GHSA-7mm8-fmcf-mvw9.json index fad495ef03e..d630694441a 100644 --- a/advisories/unreviewed/2022/05/GHSA-7mm8-fmcf-mvw9/GHSA-7mm8-fmcf-mvw9.json +++ b/advisories/unreviewed/2022/05/GHSA-7mm8-fmcf-mvw9/GHSA-7mm8-fmcf-mvw9.json @@ -7,12 +7,8 @@ "CVE-2008-5866" ], "details": "The Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 has public as its default SNMP read/write community, which makes it easier for remote attackers to obtain sensitive information or modify SNMP variables.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7p22-rr7f-4rjq/GHSA-7p22-rr7f-4rjq.json b/advisories/unreviewed/2022/05/GHSA-7p22-rr7f-4rjq/GHSA-7p22-rr7f-4rjq.json index 18d3aba83d9..91af420ad04 100644 --- a/advisories/unreviewed/2022/05/GHSA-7p22-rr7f-4rjq/GHSA-7p22-rr7f-4rjq.json +++ b/advisories/unreviewed/2022/05/GHSA-7p22-rr7f-4rjq/GHSA-7p22-rr7f-4rjq.json @@ -7,12 +7,8 @@ "CVE-2008-6219" ], "details": "nsrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and Client 7.3.x and 7.4, 7.4.1, 7.4.2, Client and Storage Node for Open VMS 7.3.2 ECO6 and earlier, Module for Microsoft Exchange 5.1 and earlier, Module for Microsoft Applications 2.0 and earlier, Module for Meditech 2.0 and earlier, and PowerSnap 2.4 SP1 and earlier does not properly control the allocation of memory, which allows remote attackers to cause a denial of service (memory exhaustion) via multiple crafted RPC requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7p5g-hr77-f36q/GHSA-7p5g-hr77-f36q.json b/advisories/unreviewed/2022/05/GHSA-7p5g-hr77-f36q/GHSA-7p5g-hr77-f36q.json index 0b169cfcd51..f3ea496b32f 100644 --- a/advisories/unreviewed/2022/05/GHSA-7p5g-hr77-f36q/GHSA-7p5g-hr77-f36q.json +++ b/advisories/unreviewed/2022/05/GHSA-7p5g-hr77-f36q/GHSA-7p5g-hr77-f36q.json @@ -7,12 +7,8 @@ "CVE-2008-5671" ], "details": "PHP remote file inclusion vulnerability in index.php in Joomla! 1.0.11 through 1.0.14, when RG_EMULATION is enabled in configuration.php, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7p9r-xcgh-c2m3/GHSA-7p9r-xcgh-c2m3.json b/advisories/unreviewed/2022/05/GHSA-7p9r-xcgh-c2m3/GHSA-7p9r-xcgh-c2m3.json index 4a1e9ba6bca..f29342dbfbe 100644 --- a/advisories/unreviewed/2022/05/GHSA-7p9r-xcgh-c2m3/GHSA-7p9r-xcgh-c2m3.json +++ b/advisories/unreviewed/2022/05/GHSA-7p9r-xcgh-c2m3/GHSA-7p9r-xcgh-c2m3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7q7q-55jw-ww4f/GHSA-7q7q-55jw-ww4f.json b/advisories/unreviewed/2022/05/GHSA-7q7q-55jw-ww4f/GHSA-7q7q-55jw-ww4f.json index d5275c049d0..0db7a707d0d 100644 --- a/advisories/unreviewed/2022/05/GHSA-7q7q-55jw-ww4f/GHSA-7q7q-55jw-ww4f.json +++ b/advisories/unreviewed/2022/05/GHSA-7q7q-55jw-ww4f/GHSA-7q7q-55jw-ww4f.json @@ -7,12 +7,8 @@ "CVE-2008-7025" ], "details": "TrueVector in Check Point ZoneAlarm 8.0.020.000, with vsmon.exe running, allows remote HTTP proxies to cause a denial of service (crash) and disable the HIDS module via a crafted response.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7rfw-vg62-m5wc/GHSA-7rfw-vg62-m5wc.json b/advisories/unreviewed/2022/05/GHSA-7rfw-vg62-m5wc/GHSA-7rfw-vg62-m5wc.json index d9d2bee4c26..dc3022be1af 100644 --- a/advisories/unreviewed/2022/05/GHSA-7rfw-vg62-m5wc/GHSA-7rfw-vg62-m5wc.json +++ b/advisories/unreviewed/2022/05/GHSA-7rfw-vg62-m5wc/GHSA-7rfw-vg62-m5wc.json @@ -7,12 +7,8 @@ "CVE-2010-4086" ], "details": "dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Director (.dir) media file with an invalid element size, a different vulnerability than CVE-2010-2581, CVE-2010-2880, CVE-2010-4084, CVE-2010-4085, and CVE-2010-4088.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7rvm-25xv-r32f/GHSA-7rvm-25xv-r32f.json b/advisories/unreviewed/2022/05/GHSA-7rvm-25xv-r32f/GHSA-7rvm-25xv-r32f.json index df85a358fca..707f3e14b0e 100644 --- a/advisories/unreviewed/2022/05/GHSA-7rvm-25xv-r32f/GHSA-7rvm-25xv-r32f.json +++ b/advisories/unreviewed/2022/05/GHSA-7rvm-25xv-r32f/GHSA-7rvm-25xv-r32f.json @@ -7,12 +7,8 @@ "CVE-2010-5025" ], "details": "Cross-site scripting (XSS) vulnerability in manage/main.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote attackers to inject arbitrary web script or HTML via the fld_path parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7vhw-7q5w-734v/GHSA-7vhw-7q5w-734v.json b/advisories/unreviewed/2022/05/GHSA-7vhw-7q5w-734v/GHSA-7vhw-7q5w-734v.json index b0299c766ba..f460294d5d0 100644 --- a/advisories/unreviewed/2022/05/GHSA-7vhw-7q5w-734v/GHSA-7vhw-7q5w-734v.json +++ b/advisories/unreviewed/2022/05/GHSA-7vhw-7q5w-734v/GHSA-7vhw-7q5w-734v.json @@ -7,12 +7,8 @@ "CVE-2010-4906" ], "details": "SQL injection vulnerability in zp-core/full-image.php in Zenphoto 1.3 and 1.3.1.2 allows remote attackers to execute arbitrary SQL commands via the a parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7w4m-m9fg-9759/GHSA-7w4m-m9fg-9759.json b/advisories/unreviewed/2022/05/GHSA-7w4m-m9fg-9759/GHSA-7w4m-m9fg-9759.json index 7ef757f0b05..318050fb95d 100644 --- a/advisories/unreviewed/2022/05/GHSA-7w4m-m9fg-9759/GHSA-7w4m-m9fg-9759.json +++ b/advisories/unreviewed/2022/05/GHSA-7w4m-m9fg-9759/GHSA-7w4m-m9fg-9759.json @@ -7,12 +7,8 @@ "CVE-2008-5575" ], "details": "Session fixation vulnerability in Pro Clan Manager 0.4.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7x87-p94m-4r53/GHSA-7x87-p94m-4r53.json b/advisories/unreviewed/2022/05/GHSA-7x87-p94m-4r53/GHSA-7x87-p94m-4r53.json index d4081944021..69144a20fa6 100644 --- a/advisories/unreviewed/2022/05/GHSA-7x87-p94m-4r53/GHSA-7x87-p94m-4r53.json +++ b/advisories/unreviewed/2022/05/GHSA-7x87-p94m-4r53/GHSA-7x87-p94m-4r53.json @@ -7,12 +7,8 @@ "CVE-2008-5420" ], "details": "The SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center before 6.1 does not properly authenticate SST_SENDFILE requests, which allows remote attackers to read arbitrary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7xp6-7877-fr5p/GHSA-7xp6-7877-fr5p.json b/advisories/unreviewed/2022/05/GHSA-7xp6-7877-fr5p/GHSA-7xp6-7877-fr5p.json index c5cb2f998df..058f207965c 100644 --- a/advisories/unreviewed/2022/05/GHSA-7xp6-7877-fr5p/GHSA-7xp6-7877-fr5p.json +++ b/advisories/unreviewed/2022/05/GHSA-7xp6-7877-fr5p/GHSA-7xp6-7877-fr5p.json @@ -7,12 +7,8 @@ "CVE-2010-2728" ], "details": "Heap-based buffer overflow in Microsoft Outlook 2002 SP3, 2003 SP3, and 2007 SP2, when Online Mode for an Exchange Server is enabled, allows remote attackers to execute arbitrary code via a crafted e-mail message, aka \"Heap Based Buffer Overflow in Outlook Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7xqf-j5rr-m37g/GHSA-7xqf-j5rr-m37g.json b/advisories/unreviewed/2022/05/GHSA-7xqf-j5rr-m37g/GHSA-7xqf-j5rr-m37g.json index 00efb43e1f8..512cb5293bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-7xqf-j5rr-m37g/GHSA-7xqf-j5rr-m37g.json +++ b/advisories/unreviewed/2022/05/GHSA-7xqf-j5rr-m37g/GHSA-7xqf-j5rr-m37g.json @@ -7,12 +7,8 @@ "CVE-2010-5048" ], "details": "Cross-site scripting (XSS) vulnerability in admin.jcomments.php in the JoomlaTune JComments (com_jcomments) component 2.1.0.0 for Joomla! allows remote authenticated users to inject arbitrary web script or HTML via the name parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-825g-r7c5-p5p5/GHSA-825g-r7c5-p5p5.json b/advisories/unreviewed/2022/05/GHSA-825g-r7c5-p5p5/GHSA-825g-r7c5-p5p5.json index 6193ed7ee22..89fd6de0a88 100644 --- a/advisories/unreviewed/2022/05/GHSA-825g-r7c5-p5p5/GHSA-825g-r7c5-p5p5.json +++ b/advisories/unreviewed/2022/05/GHSA-825g-r7c5-p5p5/GHSA-825g-r7c5-p5p5.json @@ -7,12 +7,8 @@ "CVE-2008-5158" ], "details": "Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to bypass authentication and perform administrative actions via vectors involving \"simply skipping the auth stage.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-838x-95mf-gv8m/GHSA-838x-95mf-gv8m.json b/advisories/unreviewed/2022/05/GHSA-838x-95mf-gv8m/GHSA-838x-95mf-gv8m.json index 5383b775403..a3ff109e0ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-838x-95mf-gv8m/GHSA-838x-95mf-gv8m.json +++ b/advisories/unreviewed/2022/05/GHSA-838x-95mf-gv8m/GHSA-838x-95mf-gv8m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-84w5-gxxj-77r2/GHSA-84w5-gxxj-77r2.json b/advisories/unreviewed/2022/05/GHSA-84w5-gxxj-77r2/GHSA-84w5-gxxj-77r2.json index 1a7caf8d7c6..7c1b331055f 100644 --- a/advisories/unreviewed/2022/05/GHSA-84w5-gxxj-77r2/GHSA-84w5-gxxj-77r2.json +++ b/advisories/unreviewed/2022/05/GHSA-84w5-gxxj-77r2/GHSA-84w5-gxxj-77r2.json @@ -7,12 +7,8 @@ "CVE-2010-3976" ], "details": "Untrusted search path vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Flash Player.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-84wc-8895-92r4/GHSA-84wc-8895-92r4.json b/advisories/unreviewed/2022/05/GHSA-84wc-8895-92r4/GHSA-84wc-8895-92r4.json index 9199608637e..d1928a7ab16 100644 --- a/advisories/unreviewed/2022/05/GHSA-84wc-8895-92r4/GHSA-84wc-8895-92r4.json +++ b/advisories/unreviewed/2022/05/GHSA-84wc-8895-92r4/GHSA-84wc-8895-92r4.json @@ -7,12 +7,8 @@ "CVE-2008-5564" ], "details": "Unspecified vulnerability in the media server in Orb Networks Orb before 2.01.0025 allows remote attackers to cause a denial of service (daemon crash) via a malformed HTTP request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-84wj-6mhh-jgr7/GHSA-84wj-6mhh-jgr7.json b/advisories/unreviewed/2022/05/GHSA-84wj-6mhh-jgr7/GHSA-84wj-6mhh-jgr7.json index 78a65f48abd..fa3aed6a2db 100644 --- a/advisories/unreviewed/2022/05/GHSA-84wj-6mhh-jgr7/GHSA-84wj-6mhh-jgr7.json +++ b/advisories/unreviewed/2022/05/GHSA-84wj-6mhh-jgr7/GHSA-84wj-6mhh-jgr7.json @@ -7,12 +7,8 @@ "CVE-2008-5624" ], "details": "PHP 5 before 5.2.7 does not properly initialize the page_uid and page_gid global variables for use by the SAPI php_getuid function, which allows context-dependent attackers to bypass safe_mode restrictions via variable settings that are intended to be restricted to root, as demonstrated by a setting of /etc for the error_log variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-84wr-7m4v-hrcf/GHSA-84wr-7m4v-hrcf.json b/advisories/unreviewed/2022/05/GHSA-84wr-7m4v-hrcf/GHSA-84wr-7m4v-hrcf.json index 7eb66ec7177..06c3a9b71fe 100644 --- a/advisories/unreviewed/2022/05/GHSA-84wr-7m4v-hrcf/GHSA-84wr-7m4v-hrcf.json +++ b/advisories/unreviewed/2022/05/GHSA-84wr-7m4v-hrcf/GHSA-84wr-7m4v-hrcf.json @@ -7,12 +7,8 @@ "CVE-2008-6757" ], "details": "Cross-site scripting (XSS) vulnerability in manuals_search.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to inject arbitrary web script or HTML via the manuals_search parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-85vr-cvfq-7pgw/GHSA-85vr-cvfq-7pgw.json b/advisories/unreviewed/2022/05/GHSA-85vr-cvfq-7pgw/GHSA-85vr-cvfq-7pgw.json index f690a9f8784..37ba7df20fb 100644 --- a/advisories/unreviewed/2022/05/GHSA-85vr-cvfq-7pgw/GHSA-85vr-cvfq-7pgw.json +++ b/advisories/unreviewed/2022/05/GHSA-85vr-cvfq-7pgw/GHSA-85vr-cvfq-7pgw.json @@ -7,12 +7,8 @@ "CVE-2008-4611" ], "details": "SQL injection vulnerability in index.php in PHP Arsivimiz Php Ziyaretci Defteri allows remote attackers to execute arbitrary SQL commands via the sayfa parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-86p2-97hv-9p2j/GHSA-86p2-97hv-9p2j.json b/advisories/unreviewed/2022/05/GHSA-86p2-97hv-9p2j/GHSA-86p2-97hv-9p2j.json index 04468f30fa3..78a383106fa 100644 --- a/advisories/unreviewed/2022/05/GHSA-86p2-97hv-9p2j/GHSA-86p2-97hv-9p2j.json +++ b/advisories/unreviewed/2022/05/GHSA-86p2-97hv-9p2j/GHSA-86p2-97hv-9p2j.json @@ -7,12 +7,8 @@ "CVE-2010-4926" ], "details": "SQL injection vulnerability in the TimeTrack (com_timetrack) component 1.2.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the ct_id parameter in a timetrack action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-878c-hrf6-3mqq/GHSA-878c-hrf6-3mqq.json b/advisories/unreviewed/2022/05/GHSA-878c-hrf6-3mqq/GHSA-878c-hrf6-3mqq.json index 8e13a980ee4..eb4c6a21b99 100644 --- a/advisories/unreviewed/2022/05/GHSA-878c-hrf6-3mqq/GHSA-878c-hrf6-3mqq.json +++ b/advisories/unreviewed/2022/05/GHSA-878c-hrf6-3mqq/GHSA-878c-hrf6-3mqq.json @@ -7,12 +7,8 @@ "CVE-2008-5669" ], "details": "index.php in the comments preview section in Textpattern (aka Txp CMS) 4.0.5 allows remote attackers to cause a denial of service via a long message parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-87rv-5pg2-g76r/GHSA-87rv-5pg2-g76r.json b/advisories/unreviewed/2022/05/GHSA-87rv-5pg2-g76r/GHSA-87rv-5pg2-g76r.json index 4cdcb888881..81294ed2aab 100644 --- a/advisories/unreviewed/2022/05/GHSA-87rv-5pg2-g76r/GHSA-87rv-5pg2-g76r.json +++ b/advisories/unreviewed/2022/05/GHSA-87rv-5pg2-g76r/GHSA-87rv-5pg2-g76r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-897q-vpfw-ww4m/GHSA-897q-vpfw-ww4m.json b/advisories/unreviewed/2022/05/GHSA-897q-vpfw-ww4m/GHSA-897q-vpfw-ww4m.json index 0dcc390854a..5aa7c1f7033 100644 --- a/advisories/unreviewed/2022/05/GHSA-897q-vpfw-ww4m/GHSA-897q-vpfw-ww4m.json +++ b/advisories/unreviewed/2022/05/GHSA-897q-vpfw-ww4m/GHSA-897q-vpfw-ww4m.json @@ -7,12 +7,8 @@ "CVE-2008-6926" ], "details": "Directory traversal vulnerability in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the scriptpath_show parameter in a GoAhead action. NOTE: this issue only crosses privilege boundaries when security settings such as disable_functions and safe_mode are active, since exploitation requires uploading of executable code to a home directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-89fw-c9h3-h2f5/GHSA-89fw-c9h3-h2f5.json b/advisories/unreviewed/2022/05/GHSA-89fw-c9h3-h2f5/GHSA-89fw-c9h3-h2f5.json index a2a7533c27c..9c61dac536e 100644 --- a/advisories/unreviewed/2022/05/GHSA-89fw-c9h3-h2f5/GHSA-89fw-c9h3-h2f5.json +++ b/advisories/unreviewed/2022/05/GHSA-89fw-c9h3-h2f5/GHSA-89fw-c9h3-h2f5.json @@ -7,12 +7,8 @@ "CVE-2008-6701" ], "details": "NetScout (formerly Network General) Visualizer V2100 and InfiniStream i1730 do not restrict access to ResourceManager/en_US/domains/add_domain.jsp, which allows remote attackers to gain administrator privileges via a direct request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8cc9-5rm3-3m89/GHSA-8cc9-5rm3-3m89.json b/advisories/unreviewed/2022/05/GHSA-8cc9-5rm3-3m89/GHSA-8cc9-5rm3-3m89.json index bd036e1b64b..a031a4b6e1e 100644 --- a/advisories/unreviewed/2022/05/GHSA-8cc9-5rm3-3m89/GHSA-8cc9-5rm3-3m89.json +++ b/advisories/unreviewed/2022/05/GHSA-8cc9-5rm3-3m89/GHSA-8cc9-5rm3-3m89.json @@ -7,12 +7,8 @@ "CVE-2008-6666" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Kronos webTA allow remote attackers to inject arbitrary web script or HTML via the description field to (1) servlet/com.threeis.webta.H710selProject and (2) servlet/com.threeis.webta.H720editProjectInfo. NOTE: BID:29610 states that the initial report was incorrect, but the reason for this conclusion is unknown.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8f39-8vhp-c49f/GHSA-8f39-8vhp-c49f.json b/advisories/unreviewed/2022/05/GHSA-8f39-8vhp-c49f/GHSA-8f39-8vhp-c49f.json index 0142bfaba93..973e342025d 100644 --- a/advisories/unreviewed/2022/05/GHSA-8f39-8vhp-c49f/GHSA-8f39-8vhp-c49f.json +++ b/advisories/unreviewed/2022/05/GHSA-8f39-8vhp-c49f/GHSA-8f39-8vhp-c49f.json @@ -7,12 +7,8 @@ "CVE-2008-4876" ], "details": "Cross-site scripting (XSS) vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web script or HTML via the request URL, which is not properly handled in a 404 web error page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8fg7-332r-767g/GHSA-8fg7-332r-767g.json b/advisories/unreviewed/2022/05/GHSA-8fg7-332r-767g/GHSA-8fg7-332r-767g.json index f2da6bbcc9f..bcc8858b1e6 100644 --- a/advisories/unreviewed/2022/05/GHSA-8fg7-332r-767g/GHSA-8fg7-332r-767g.json +++ b/advisories/unreviewed/2022/05/GHSA-8fg7-332r-767g/GHSA-8fg7-332r-767g.json @@ -7,12 +7,8 @@ "CVE-2010-4298" ], "details": "SQL injection vulnerability in the download module in Free Simple Software 1.0 allows remote attackers to execute arbitrary SQL commands via the downloads_id parameter in a download_now action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8fh4-fw2w-p33q/GHSA-8fh4-fw2w-p33q.json b/advisories/unreviewed/2022/05/GHSA-8fh4-fw2w-p33q/GHSA-8fh4-fw2w-p33q.json index b4cff60c250..e7d50e65a4c 100644 --- a/advisories/unreviewed/2022/05/GHSA-8fh4-fw2w-p33q/GHSA-8fh4-fw2w-p33q.json +++ b/advisories/unreviewed/2022/05/GHSA-8fh4-fw2w-p33q/GHSA-8fh4-fw2w-p33q.json @@ -7,12 +7,8 @@ "CVE-2008-5524" ], "details": "CAT-QuickHeal 10.00 and possibly 9.50, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8gjc-8rv5-crcg/GHSA-8gjc-8rv5-crcg.json b/advisories/unreviewed/2022/05/GHSA-8gjc-8rv5-crcg/GHSA-8gjc-8rv5-crcg.json index 41b7c6fbfc2..201dc199b34 100644 --- a/advisories/unreviewed/2022/05/GHSA-8gjc-8rv5-crcg/GHSA-8gjc-8rv5-crcg.json +++ b/advisories/unreviewed/2022/05/GHSA-8gjc-8rv5-crcg/GHSA-8gjc-8rv5-crcg.json @@ -7,12 +7,8 @@ "CVE-2008-6793" ], "details": "The get_file_type function in lib/file_content.php in DFLabs PTK 0.1, 0.2, and 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters after an arg1= sequence in a filename within a forensic image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8hhh-f5w3-7hvf/GHSA-8hhh-f5w3-7hvf.json b/advisories/unreviewed/2022/05/GHSA-8hhh-f5w3-7hvf/GHSA-8hhh-f5w3-7hvf.json index a33282249fc..92a02f59038 100644 --- a/advisories/unreviewed/2022/05/GHSA-8hhh-f5w3-7hvf/GHSA-8hhh-f5w3-7hvf.json +++ b/advisories/unreviewed/2022/05/GHSA-8hhh-f5w3-7hvf/GHSA-8hhh-f5w3-7hvf.json @@ -7,12 +7,8 @@ "CVE-2008-5747" ], "details": "F-Prot 4.6.8 for GNU/Linux allows remote attackers to bypass anti-virus protection via a crafted ELF program with a \"corrupted\" header that still allows the program to be executed. NOTE: due to an error in the initial disclosure, F-secure was incorrectly stated as the vendor.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8hpm-8996-59q7/GHSA-8hpm-8996-59q7.json b/advisories/unreviewed/2022/05/GHSA-8hpm-8996-59q7/GHSA-8hpm-8996-59q7.json index dcbdf9f69e5..9c84653003f 100644 --- a/advisories/unreviewed/2022/05/GHSA-8hpm-8996-59q7/GHSA-8hpm-8996-59q7.json +++ b/advisories/unreviewed/2022/05/GHSA-8hpm-8996-59q7/GHSA-8hpm-8996-59q7.json @@ -7,12 +7,8 @@ "CVE-2011-0345" ], "details": "Directory traversal vulnerability in the NMS server in Alcatel-Lucent OmniVista 4760 R5.1.06.03 and earlier allows remote attackers to read arbitrary files via directory traversal sequences in HTTP GET requests, related to the lang variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8hwp-gqff-c4f8/GHSA-8hwp-gqff-c4f8.json b/advisories/unreviewed/2022/05/GHSA-8hwp-gqff-c4f8/GHSA-8hwp-gqff-c4f8.json index 775f992f7f3..4928952d053 100644 --- a/advisories/unreviewed/2022/05/GHSA-8hwp-gqff-c4f8/GHSA-8hwp-gqff-c4f8.json +++ b/advisories/unreviewed/2022/05/GHSA-8hwp-gqff-c4f8/GHSA-8hwp-gqff-c4f8.json @@ -7,12 +7,8 @@ "CVE-2008-6948" ], "details": "Unrestricted file upload vulnerability in Collabtive 0.4.8 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and using a text/plain MIME type, then accessing it via a direct request to the file in files/, related to (1) the showproject action in managefile.php or (2) the Messages feature.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8j44-692v-gxcw/GHSA-8j44-692v-gxcw.json b/advisories/unreviewed/2022/05/GHSA-8j44-692v-gxcw/GHSA-8j44-692v-gxcw.json index 23e67093fb4..c9a4e2af40a 100644 --- a/advisories/unreviewed/2022/05/GHSA-8j44-692v-gxcw/GHSA-8j44-692v-gxcw.json +++ b/advisories/unreviewed/2022/05/GHSA-8j44-692v-gxcw/GHSA-8j44-692v-gxcw.json @@ -7,12 +7,8 @@ "CVE-2010-3138" ], "details": "Untrusted search path vulnerability in the Indeo Codec in iac25_32.ax in Microsoft Windows XP SP3 allows local users to gain privileges via a Trojan horse iacenc.dll file in the current working directory, as demonstrated by access through BS.Player or Media Player Classic to a directory that contains a .avi, .mka, .ra, or .ram file, aka \"Indeo Codec Insecure Library Loading Vulnerability.\" NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8j6p-hw9p-9vh5/GHSA-8j6p-hw9p-9vh5.json b/advisories/unreviewed/2022/05/GHSA-8j6p-hw9p-9vh5/GHSA-8j6p-hw9p-9vh5.json index a83867f17ef..b364224f769 100644 --- a/advisories/unreviewed/2022/05/GHSA-8j6p-hw9p-9vh5/GHSA-8j6p-hw9p-9vh5.json +++ b/advisories/unreviewed/2022/05/GHSA-8j6p-hw9p-9vh5/GHSA-8j6p-hw9p-9vh5.json @@ -7,12 +7,8 @@ "CVE-2008-6194" ], "details": "Memory leak in the DNS server in Microsoft Windows allows remote attackers to cause a denial of service (memory consumption) via DNS packets. NOTE: this issue reportedly exists because of an incorrect fix for CVE-2007-3898.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8jrx-4wqj-328p/GHSA-8jrx-4wqj-328p.json b/advisories/unreviewed/2022/05/GHSA-8jrx-4wqj-328p/GHSA-8jrx-4wqj-328p.json index 51c7a15eb2e..9760100fa49 100644 --- a/advisories/unreviewed/2022/05/GHSA-8jrx-4wqj-328p/GHSA-8jrx-4wqj-328p.json +++ b/advisories/unreviewed/2022/05/GHSA-8jrx-4wqj-328p/GHSA-8jrx-4wqj-328p.json @@ -7,12 +7,8 @@ "CVE-2008-7143" ], "details": "phpBB 2.0.23 includes the session ID in a request to modcp.php when the moderator or administrator closes a thread, which allows remote attackers to hijack the session via a post in the thread containing a URL to a remotely hosted image, which might include the session ID in the Referer header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8p6q-rjmr-6gp9/GHSA-8p6q-rjmr-6gp9.json b/advisories/unreviewed/2022/05/GHSA-8p6q-rjmr-6gp9/GHSA-8p6q-rjmr-6gp9.json index d5b9e0de276..1cac893acf2 100644 --- a/advisories/unreviewed/2022/05/GHSA-8p6q-rjmr-6gp9/GHSA-8p6q-rjmr-6gp9.json +++ b/advisories/unreviewed/2022/05/GHSA-8p6q-rjmr-6gp9/GHSA-8p6q-rjmr-6gp9.json @@ -7,12 +7,8 @@ "CVE-2008-6218" ], "details": "Memory leak in the png_handle_tEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0 beta36 allows context-dependent attackers to cause a denial of service (memory exhaustion) via a crafted PNG file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8ph9-x262-cchw/GHSA-8ph9-x262-cchw.json b/advisories/unreviewed/2022/05/GHSA-8ph9-x262-cchw/GHSA-8ph9-x262-cchw.json index e43fde99b6d..e667b0a8379 100644 --- a/advisories/unreviewed/2022/05/GHSA-8ph9-x262-cchw/GHSA-8ph9-x262-cchw.json +++ b/advisories/unreviewed/2022/05/GHSA-8ph9-x262-cchw/GHSA-8ph9-x262-cchw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8pm7-x4vr-pg77/GHSA-8pm7-x4vr-pg77.json b/advisories/unreviewed/2022/05/GHSA-8pm7-x4vr-pg77/GHSA-8pm7-x4vr-pg77.json index 4fe6ac1bbe2..a60837a6710 100644 --- a/advisories/unreviewed/2022/05/GHSA-8pm7-x4vr-pg77/GHSA-8pm7-x4vr-pg77.json +++ b/advisories/unreviewed/2022/05/GHSA-8pm7-x4vr-pg77/GHSA-8pm7-x4vr-pg77.json @@ -7,12 +7,8 @@ "CVE-2008-5563" ], "details": "Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.x, 3.1.x, 3.2.x, 3.3.1.x, and 3.3.2.x allows remote attackers to cause a denial of service (device crash) via a malformed Extensible Authentication Protocol (EAP) frame.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8qm4-vmvc-xrpj/GHSA-8qm4-vmvc-xrpj.json b/advisories/unreviewed/2022/05/GHSA-8qm4-vmvc-xrpj/GHSA-8qm4-vmvc-xrpj.json index 790ad4611a6..0de41fc4daa 100644 --- a/advisories/unreviewed/2022/05/GHSA-8qm4-vmvc-xrpj/GHSA-8qm4-vmvc-xrpj.json +++ b/advisories/unreviewed/2022/05/GHSA-8qm4-vmvc-xrpj/GHSA-8qm4-vmvc-xrpj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8vc4-5x78-9hxf/GHSA-8vc4-5x78-9hxf.json b/advisories/unreviewed/2022/05/GHSA-8vc4-5x78-9hxf/GHSA-8vc4-5x78-9hxf.json index c9670daffca..03090a2c1c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-8vc4-5x78-9hxf/GHSA-8vc4-5x78-9hxf.json +++ b/advisories/unreviewed/2022/05/GHSA-8vc4-5x78-9hxf/GHSA-8vc4-5x78-9hxf.json @@ -7,12 +7,8 @@ "CVE-2008-5302" ], "details": "Race condition in the rmtree function in File::Path 1.08 and 2.07 (lib/File/Path.pm) in Perl 5.8.8 and 5.10.0 allows local users to create arbitrary setuid binaries via a symlink attack, a different vulnerability than CVE-2005-0448, CVE-2004-0452, and CVE-2008-2827. NOTE: this is a regression error related to CVE-2005-0448. It is different from CVE-2008-5303 due to affected versions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8vq6-8xq6-mp5r/GHSA-8vq6-8xq6-mp5r.json b/advisories/unreviewed/2022/05/GHSA-8vq6-8xq6-mp5r/GHSA-8vq6-8xq6-mp5r.json index 4c3a52682b5..32975bbed4e 100644 --- a/advisories/unreviewed/2022/05/GHSA-8vq6-8xq6-mp5r/GHSA-8vq6-8xq6-mp5r.json +++ b/advisories/unreviewed/2022/05/GHSA-8vq6-8xq6-mp5r/GHSA-8vq6-8xq6-mp5r.json @@ -7,12 +7,8 @@ "CVE-2010-5280" ], "details": "Directory traversal vulnerability in the Community Builder Enhanced (CBE) (com_cbe) component 1.4.8, 1.4.9, and 1.4.10 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the tabname parameter in a userProfile action to index.php. NOTE: this can be leveraged to execute arbitrary code by using the file upload feature.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8xjv-499v-6ghx/GHSA-8xjv-499v-6ghx.json b/advisories/unreviewed/2022/05/GHSA-8xjv-499v-6ghx/GHSA-8xjv-499v-6ghx.json index faaa6bf928d..e22080f5dee 100644 --- a/advisories/unreviewed/2022/05/GHSA-8xjv-499v-6ghx/GHSA-8xjv-499v-6ghx.json +++ b/advisories/unreviewed/2022/05/GHSA-8xjv-499v-6ghx/GHSA-8xjv-499v-6ghx.json @@ -7,12 +7,8 @@ "CVE-2010-4900" ], "details": "Open redirect vulnerability in c.php in CMS WebManager-Pro 8.1 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8xr5-7qq5-vpgf/GHSA-8xr5-7qq5-vpgf.json b/advisories/unreviewed/2022/05/GHSA-8xr5-7qq5-vpgf/GHSA-8xr5-7qq5-vpgf.json index fddef186ccc..fd2fd99e883 100644 --- a/advisories/unreviewed/2022/05/GHSA-8xr5-7qq5-vpgf/GHSA-8xr5-7qq5-vpgf.json +++ b/advisories/unreviewed/2022/05/GHSA-8xr5-7qq5-vpgf/GHSA-8xr5-7qq5-vpgf.json @@ -7,12 +7,8 @@ "CVE-2008-4742" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in interface/Login.php in TimeTrex 2.2.11 allow remote attackers to inject arbitrary web script or HTML via the (1) password and (2) user_name parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-92fw-f58x-hghj/GHSA-92fw-f58x-hghj.json b/advisories/unreviewed/2022/05/GHSA-92fw-f58x-hghj/GHSA-92fw-f58x-hghj.json index a676549537f..16ec954d191 100644 --- a/advisories/unreviewed/2022/05/GHSA-92fw-f58x-hghj/GHSA-92fw-f58x-hghj.json +++ b/advisories/unreviewed/2022/05/GHSA-92fw-f58x-hghj/GHSA-92fw-f58x-hghj.json @@ -7,12 +7,8 @@ "CVE-2008-4910" ], "details": "The BasicService in Sun Java Web Start allows remote attackers to execute arbitrary programs on a client machine via a file:// URL argument to the showDocument method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-938c-gh9h-4wpx/GHSA-938c-gh9h-4wpx.json b/advisories/unreviewed/2022/05/GHSA-938c-gh9h-4wpx/GHSA-938c-gh9h-4wpx.json index 748924ed010..df4998f74c1 100644 --- a/advisories/unreviewed/2022/05/GHSA-938c-gh9h-4wpx/GHSA-938c-gh9h-4wpx.json +++ b/advisories/unreviewed/2022/05/GHSA-938c-gh9h-4wpx/GHSA-938c-gh9h-4wpx.json @@ -7,12 +7,8 @@ "CVE-2008-7215" ], "details": "The Image Manager in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to rename arbitrary files and cause a denial of service via modified file[NewFile][name], file[NewFile][tmp_name], and file[NewFile][size] parameters in a FileUpload command, which are used to modify equivalent variables in $_FILES that are accessed when the is_uploaded_file check fails.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-93j2-mrhw-5h99/GHSA-93j2-mrhw-5h99.json b/advisories/unreviewed/2022/05/GHSA-93j2-mrhw-5h99/GHSA-93j2-mrhw-5h99.json index bfb21914dd2..b0c44148471 100644 --- a/advisories/unreviewed/2022/05/GHSA-93j2-mrhw-5h99/GHSA-93j2-mrhw-5h99.json +++ b/advisories/unreviewed/2022/05/GHSA-93j2-mrhw-5h99/GHSA-93j2-mrhw-5h99.json @@ -7,12 +7,8 @@ "CVE-2010-3977" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in wp-content/plugins/cforms/lib_ajax.php in cforms WordPress plugin 11.5 allow remote attackers to inject arbitrary web script or HTML via the (1) rs and (2) rsargs[] parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9465-jq8h-f9jp/GHSA-9465-jq8h-f9jp.json b/advisories/unreviewed/2022/05/GHSA-9465-jq8h-f9jp/GHSA-9465-jq8h-f9jp.json index eac9d98ec96..176aeb721db 100644 --- a/advisories/unreviewed/2022/05/GHSA-9465-jq8h-f9jp/GHSA-9465-jq8h-f9jp.json +++ b/advisories/unreviewed/2022/05/GHSA-9465-jq8h-f9jp/GHSA-9465-jq8h-f9jp.json @@ -7,12 +7,8 @@ "CVE-2008-6250" ], "details": "SQL injection vulnerability in Comdev Web Blogger 4.1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the arcmonth parameter to a blog page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-94gx-xmmj-98qj/GHSA-94gx-xmmj-98qj.json b/advisories/unreviewed/2022/05/GHSA-94gx-xmmj-98qj/GHSA-94gx-xmmj-98qj.json index ca466d6bcdf..85c6aa81bd8 100644 --- a/advisories/unreviewed/2022/05/GHSA-94gx-xmmj-98qj/GHSA-94gx-xmmj-98qj.json +++ b/advisories/unreviewed/2022/05/GHSA-94gx-xmmj-98qj/GHSA-94gx-xmmj-98qj.json @@ -7,12 +7,8 @@ "CVE-2010-4983" ], "details": "SQL injection vulnerability in profile.php in iScripts CyberMatch 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-96f5-h2ww-jqjm/GHSA-96f5-h2ww-jqjm.json b/advisories/unreviewed/2022/05/GHSA-96f5-h2ww-jqjm/GHSA-96f5-h2ww-jqjm.json index e8cbac51475..19b3cea0c6e 100644 --- a/advisories/unreviewed/2022/05/GHSA-96f5-h2ww-jqjm/GHSA-96f5-h2ww-jqjm.json +++ b/advisories/unreviewed/2022/05/GHSA-96f5-h2ww-jqjm/GHSA-96f5-h2ww-jqjm.json @@ -7,12 +7,8 @@ "CVE-2008-5569" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in PHPepperShop 1.4 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO to (1) index.php or (2) shop/kontakt.php, or (3) shop_kunden_mgmt.php or (4) SHOP_KONFIGURATION.php in shop/Admin/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9833-hjvv-3qpp/GHSA-9833-hjvv-3qpp.json b/advisories/unreviewed/2022/05/GHSA-9833-hjvv-3qpp/GHSA-9833-hjvv-3qpp.json index b25a252bcdb..0a28d3d9e8a 100644 --- a/advisories/unreviewed/2022/05/GHSA-9833-hjvv-3qpp/GHSA-9833-hjvv-3qpp.json +++ b/advisories/unreviewed/2022/05/GHSA-9833-hjvv-3qpp/GHSA-9833-hjvv-3qpp.json @@ -7,12 +7,8 @@ "CVE-2008-7023" ], "details": "Aruba Mobility Controller running ArubaOS 3.3.1.16, and possibly other versions, installs the same default X.509 certificate for all installations, which allows remote attackers to bypass authentication. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-98ph-h6g2-6pmj/GHSA-98ph-h6g2-6pmj.json b/advisories/unreviewed/2022/05/GHSA-98ph-h6g2-6pmj/GHSA-98ph-h6g2-6pmj.json index abc560934b4..be72c375579 100644 --- a/advisories/unreviewed/2022/05/GHSA-98ph-h6g2-6pmj/GHSA-98ph-h6g2-6pmj.json +++ b/advisories/unreviewed/2022/05/GHSA-98ph-h6g2-6pmj/GHSA-98ph-h6g2-6pmj.json @@ -7,12 +7,8 @@ "CVE-2008-7091" ], "details": "Multiple SQL injection vulnerabilities in Pligg 9.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to vote.php, which is not properly handled in libs/link.php; (2) id parameter to trackback.php; (3) an unspecified parameter to submit.php; (4) requestTitle variable in a query to story.php; (5) requestID and (6) requestTitle variables in recommend.php; (7) categoryID parameter to cloud.php; (8) title parameter to out.php; (9) username parameter to login.php; (10) id parameter to cvote.php; and (11) commentid parameter to edit.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-98r3-hhp2-gpgm/GHSA-98r3-hhp2-gpgm.json b/advisories/unreviewed/2022/05/GHSA-98r3-hhp2-gpgm/GHSA-98r3-hhp2-gpgm.json index 428b27956ed..162753d6956 100644 --- a/advisories/unreviewed/2022/05/GHSA-98r3-hhp2-gpgm/GHSA-98r3-hhp2-gpgm.json +++ b/advisories/unreviewed/2022/05/GHSA-98r3-hhp2-gpgm/GHSA-98r3-hhp2-gpgm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9c66-92gm-23j6/GHSA-9c66-92gm-23j6.json b/advisories/unreviewed/2022/05/GHSA-9c66-92gm-23j6/GHSA-9c66-92gm-23j6.json index e5f6ff66d98..fe97dbdc784 100644 --- a/advisories/unreviewed/2022/05/GHSA-9c66-92gm-23j6/GHSA-9c66-92gm-23j6.json +++ b/advisories/unreviewed/2022/05/GHSA-9c66-92gm-23j6/GHSA-9c66-92gm-23j6.json @@ -7,12 +7,8 @@ "CVE-2008-6517" ], "details": "SQL injection vulnerability in NewsHOWLER 1.03 Beta allows remote attackers to execute arbitrary SQL commands via the news_user cookie parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9hgh-p6fq-92mm/GHSA-9hgh-p6fq-92mm.json b/advisories/unreviewed/2022/05/GHSA-9hgh-p6fq-92mm/GHSA-9hgh-p6fq-92mm.json index 74a6948d7ac..2e1d1fd817f 100644 --- a/advisories/unreviewed/2022/05/GHSA-9hgh-p6fq-92mm/GHSA-9hgh-p6fq-92mm.json +++ b/advisories/unreviewed/2022/05/GHSA-9hgh-p6fq-92mm/GHSA-9hgh-p6fq-92mm.json @@ -7,12 +7,8 @@ "CVE-2008-5005" ], "details": "Multiple stack-based buffer overflows in (1) University of Washington IMAP Toolkit 2002 through 2007c, (2) University of Washington Alpine 2.00 and earlier, and (3) Panda IMAP allow (a) local users to gain privileges by specifying a long folder extension argument on the command line to the tmail or dmail program; and (b) remote attackers to execute arbitrary code by sending e-mail to a destination mailbox name composed of a username and '+' character followed by a long string, processed by the tmail or possibly dmail program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9m2m-qj89-4hwm/GHSA-9m2m-qj89-4hwm.json b/advisories/unreviewed/2022/05/GHSA-9m2m-qj89-4hwm/GHSA-9m2m-qj89-4hwm.json index f7a12a23fe7..08358734323 100644 --- a/advisories/unreviewed/2022/05/GHSA-9m2m-qj89-4hwm/GHSA-9m2m-qj89-4hwm.json +++ b/advisories/unreviewed/2022/05/GHSA-9m2m-qj89-4hwm/GHSA-9m2m-qj89-4hwm.json @@ -7,12 +7,8 @@ "CVE-2008-6765" ], "details": "ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to access the contents of an arbitrary shopping cart via a modified cart_name parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9mwq-pph6-9fp8/GHSA-9mwq-pph6-9fp8.json b/advisories/unreviewed/2022/05/GHSA-9mwq-pph6-9fp8/GHSA-9mwq-pph6-9fp8.json index 5f3b5984d17..9d330d45eab 100644 --- a/advisories/unreviewed/2022/05/GHSA-9mwq-pph6-9fp8/GHSA-9mwq-pph6-9fp8.json +++ b/advisories/unreviewed/2022/05/GHSA-9mwq-pph6-9fp8/GHSA-9mwq-pph6-9fp8.json @@ -7,12 +7,8 @@ "CVE-2008-5534" ], "details": "ESET NOD32 Antivirus 3662 and possibly 3440, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9r6p-3954-jm8w/GHSA-9r6p-3954-jm8w.json b/advisories/unreviewed/2022/05/GHSA-9r6p-3954-jm8w/GHSA-9r6p-3954-jm8w.json index a66232898fa..b395513ff17 100644 --- a/advisories/unreviewed/2022/05/GHSA-9r6p-3954-jm8w/GHSA-9r6p-3954-jm8w.json +++ b/advisories/unreviewed/2022/05/GHSA-9r6p-3954-jm8w/GHSA-9r6p-3954-jm8w.json @@ -7,12 +7,8 @@ "CVE-2008-6816" ], "details": "Eaton MGEOPS Network Shutdown Module before 3.10 Build 13 allows remote attackers to execute arbitrary code by adding a custom action to the MGE frontend via pane_actionbutton.php, and then executing this action via exec_action.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9rw8-jxgx-3mx7/GHSA-9rw8-jxgx-3mx7.json b/advisories/unreviewed/2022/05/GHSA-9rw8-jxgx-3mx7/GHSA-9rw8-jxgx-3mx7.json index 479e2eefeb5..d9553275b0d 100644 --- a/advisories/unreviewed/2022/05/GHSA-9rw8-jxgx-3mx7/GHSA-9rw8-jxgx-3mx7.json +++ b/advisories/unreviewed/2022/05/GHSA-9rw8-jxgx-3mx7/GHSA-9rw8-jxgx-3mx7.json @@ -7,12 +7,8 @@ "CVE-2008-6406" ], "details": "Cross-site scripting (XSS) vulnerability in admin.php in DataLife Engine (DLE) 7.2 allows remote attackers to inject arbitrary web script or HTML via the query string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9rxv-7gp9-6vrm/GHSA-9rxv-7gp9-6vrm.json b/advisories/unreviewed/2022/05/GHSA-9rxv-7gp9-6vrm/GHSA-9rxv-7gp9-6vrm.json index 976ffaf3cbc..6a46efc7854 100644 --- a/advisories/unreviewed/2022/05/GHSA-9rxv-7gp9-6vrm/GHSA-9rxv-7gp9-6vrm.json +++ b/advisories/unreviewed/2022/05/GHSA-9rxv-7gp9-6vrm/GHSA-9rxv-7gp9-6vrm.json @@ -7,12 +7,8 @@ "CVE-2010-4513" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Zimplit CMS 3.0, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) file parameter in a load action to zimplit.php and (2) client parameter to English_manual_version_2.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9v56-wwgq-6p6m/GHSA-9v56-wwgq-6p6m.json b/advisories/unreviewed/2022/05/GHSA-9v56-wwgq-6p6m/GHSA-9v56-wwgq-6p6m.json index a5dc35bb531..039f573d205 100644 --- a/advisories/unreviewed/2022/05/GHSA-9v56-wwgq-6p6m/GHSA-9v56-wwgq-6p6m.json +++ b/advisories/unreviewed/2022/05/GHSA-9v56-wwgq-6p6m/GHSA-9v56-wwgq-6p6m.json @@ -7,12 +7,8 @@ "CVE-2008-5120" ], "details": "Stack-based buffer overflow in the Process Software MultiNet finger service (aka FINGERD) for HP OpenVMS 8.3 allows remote attackers to execute arbitrary code via a long request string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9vg7-f3r8-62f3/GHSA-9vg7-f3r8-62f3.json b/advisories/unreviewed/2022/05/GHSA-9vg7-f3r8-62f3/GHSA-9vg7-f3r8-62f3.json index 102b735c79a..6addd8e56fe 100644 --- a/advisories/unreviewed/2022/05/GHSA-9vg7-f3r8-62f3/GHSA-9vg7-f3r8-62f3.json +++ b/advisories/unreviewed/2022/05/GHSA-9vg7-f3r8-62f3/GHSA-9vg7-f3r8-62f3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9vrp-p632-632f/GHSA-9vrp-p632-632f.json b/advisories/unreviewed/2022/05/GHSA-9vrp-p632-632f/GHSA-9vrp-p632-632f.json index 0d0dd05d4e8..bbb3968e055 100644 --- a/advisories/unreviewed/2022/05/GHSA-9vrp-p632-632f/GHSA-9vrp-p632-632f.json +++ b/advisories/unreviewed/2022/05/GHSA-9vrp-p632-632f/GHSA-9vrp-p632-632f.json @@ -7,12 +7,8 @@ "CVE-2008-7269" ], "details": "Open redirect vulnerability in api.php in SiteEngine 5.x allows user-assisted remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the forward parameter in a logout action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9vxq-x797-gr8g/GHSA-9vxq-x797-gr8g.json b/advisories/unreviewed/2022/05/GHSA-9vxq-x797-gr8g/GHSA-9vxq-x797-gr8g.json index f4bd5c77a9f..30fd2b6f0fb 100644 --- a/advisories/unreviewed/2022/05/GHSA-9vxq-x797-gr8g/GHSA-9vxq-x797-gr8g.json +++ b/advisories/unreviewed/2022/05/GHSA-9vxq-x797-gr8g/GHSA-9vxq-x797-gr8g.json @@ -7,12 +7,8 @@ "CVE-2010-1879" ], "details": "Unspecified vulnerability in Quartz.dll for DirectShow; Windows Media Format Runtime 9, 9.5, and 11; Media Encoder 9; and the Asycfilt.dll COM component allows remote attackers to execute arbitrary code via a media file with crafted compression data, aka \"Media Decompression Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9x38-7p3m-g6xf/GHSA-9x38-7p3m-g6xf.json b/advisories/unreviewed/2022/05/GHSA-9x38-7p3m-g6xf/GHSA-9x38-7p3m-g6xf.json index 43225058ce4..a1e40a94845 100644 --- a/advisories/unreviewed/2022/05/GHSA-9x38-7p3m-g6xf/GHSA-9x38-7p3m-g6xf.json +++ b/advisories/unreviewed/2022/05/GHSA-9x38-7p3m-g6xf/GHSA-9x38-7p3m-g6xf.json @@ -7,12 +7,8 @@ "CVE-2010-4006" ], "details": "Multiple SQL injection vulnerabilities in search.php in WSN Links 5.0.x before 5.0.81, 5.1.x before 5.1.51, and 6.0.x before 6.0.1 allow remote attackers to execute arbitrary SQL commands via the (1) namecondition or (2) namesearch parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c22x-m825-4cw6/GHSA-c22x-m825-4cw6.json b/advisories/unreviewed/2022/05/GHSA-c22x-m825-4cw6/GHSA-c22x-m825-4cw6.json index 441fc472217..6be86a7ee25 100644 --- a/advisories/unreviewed/2022/05/GHSA-c22x-m825-4cw6/GHSA-c22x-m825-4cw6.json +++ b/advisories/unreviewed/2022/05/GHSA-c22x-m825-4cw6/GHSA-c22x-m825-4cw6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c2fw-x5gx-3qxr/GHSA-c2fw-x5gx-3qxr.json b/advisories/unreviewed/2022/05/GHSA-c2fw-x5gx-3qxr/GHSA-c2fw-x5gx-3qxr.json index 51763e61cea..c06406a6bea 100644 --- a/advisories/unreviewed/2022/05/GHSA-c2fw-x5gx-3qxr/GHSA-c2fw-x5gx-3qxr.json +++ b/advisories/unreviewed/2022/05/GHSA-c2fw-x5gx-3qxr/GHSA-c2fw-x5gx-3qxr.json @@ -7,12 +7,8 @@ "CVE-2008-7009" ], "details": "Buffer overflow in multiscan.exe in Check Point ZoneAlarm Security Suite 7.0.483.000 and 8.0.020.000 allows local users to execute arbitrary code via a file or directory with a long path. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c45x-xf6p-9qhc/GHSA-c45x-xf6p-9qhc.json b/advisories/unreviewed/2022/05/GHSA-c45x-xf6p-9qhc/GHSA-c45x-xf6p-9qhc.json index 90799a5076e..8ba680180b1 100644 --- a/advisories/unreviewed/2022/05/GHSA-c45x-xf6p-9qhc/GHSA-c45x-xf6p-9qhc.json +++ b/advisories/unreviewed/2022/05/GHSA-c45x-xf6p-9qhc/GHSA-c45x-xf6p-9qhc.json @@ -7,12 +7,8 @@ "CVE-2008-7249" ], "details": "Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, and probably later, allows user-assisted remote attackers to execute arbitrary code via a long HTTP request method in a crafted access.log file, a different vulnerability than CVE-2008-1167.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c4jq-jh2m-qwwx/GHSA-c4jq-jh2m-qwwx.json b/advisories/unreviewed/2022/05/GHSA-c4jq-jh2m-qwwx/GHSA-c4jq-jh2m-qwwx.json index 61dca3135cc..23d78fc9ab2 100644 --- a/advisories/unreviewed/2022/05/GHSA-c4jq-jh2m-qwwx/GHSA-c4jq-jh2m-qwwx.json +++ b/advisories/unreviewed/2022/05/GHSA-c4jq-jh2m-qwwx/GHSA-c4jq-jh2m-qwwx.json @@ -7,12 +7,8 @@ "CVE-2010-4149" ], "details": "Directory traversal vulnerability in FreshWebMaster Fresh FTP 5.36, 5.37, and possibly earlier, allows remote FTP servers to write arbitrary files via a \"..\\\" (dot dot backslash) in a filename. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c75v-x4mp-38cg/GHSA-c75v-x4mp-38cg.json b/advisories/unreviewed/2022/05/GHSA-c75v-x4mp-38cg/GHSA-c75v-x4mp-38cg.json index cfdb01e9e15..b43f40caf48 100644 --- a/advisories/unreviewed/2022/05/GHSA-c75v-x4mp-38cg/GHSA-c75v-x4mp-38cg.json +++ b/advisories/unreviewed/2022/05/GHSA-c75v-x4mp-38cg/GHSA-c75v-x4mp-38cg.json @@ -7,12 +7,8 @@ "CVE-2010-3960" ], "details": "Hyper-V in Microsoft Windows Server 2008 Gold, SP2, and R2 allows guest OS users to cause a denial of service (host OS hang) by sending a crafted encapsulated packet over the VMBus, aka \"Hyper-V VMBus Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c8cm-3pj7-pfp7/GHSA-c8cm-3pj7-pfp7.json b/advisories/unreviewed/2022/05/GHSA-c8cm-3pj7-pfp7/GHSA-c8cm-3pj7-pfp7.json index b5cb6439900..8dfb9bfbbcb 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8cm-3pj7-pfp7/GHSA-c8cm-3pj7-pfp7.json +++ b/advisories/unreviewed/2022/05/GHSA-c8cm-3pj7-pfp7/GHSA-c8cm-3pj7-pfp7.json @@ -7,12 +7,8 @@ "CVE-2008-6195" ], "details": "Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.80.1.1 and earlier allows remote attackers to read arbitrary files via a subdirectory name followed by \"..\" sequences, a different vulnerability than CVE-2008-1643.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c93p-x52p-5f64/GHSA-c93p-x52p-5f64.json b/advisories/unreviewed/2022/05/GHSA-c93p-x52p-5f64/GHSA-c93p-x52p-5f64.json index 4791b258c21..732b7cdc63c 100644 --- a/advisories/unreviewed/2022/05/GHSA-c93p-x52p-5f64/GHSA-c93p-x52p-5f64.json +++ b/advisories/unreviewed/2022/05/GHSA-c93p-x52p-5f64/GHSA-c93p-x52p-5f64.json @@ -7,12 +7,8 @@ "CVE-2008-7193" ], "details": "PHPKIT 1.6.4 PL1 includes the session ID in the URL, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks by reading the PHPKITSID parameter from the HTTP Referer and using it in a request to (1) modify the user profile via upload_files/include.php or (2) create a new administrator via upload_files/pk/include.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c9fj-rcg9-g5cf/GHSA-c9fj-rcg9-g5cf.json b/advisories/unreviewed/2022/05/GHSA-c9fj-rcg9-g5cf/GHSA-c9fj-rcg9-g5cf.json index 2721027984c..228aa856070 100644 --- a/advisories/unreviewed/2022/05/GHSA-c9fj-rcg9-g5cf/GHSA-c9fj-rcg9-g5cf.json +++ b/advisories/unreviewed/2022/05/GHSA-c9fj-rcg9-g5cf/GHSA-c9fj-rcg9-g5cf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c9hq-5752-gr62/GHSA-c9hq-5752-gr62.json b/advisories/unreviewed/2022/05/GHSA-c9hq-5752-gr62/GHSA-c9hq-5752-gr62.json index c28d3d7aa60..ae0ea60dc2c 100644 --- a/advisories/unreviewed/2022/05/GHSA-c9hq-5752-gr62/GHSA-c9hq-5752-gr62.json +++ b/advisories/unreviewed/2022/05/GHSA-c9hq-5752-gr62/GHSA-c9hq-5752-gr62.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c9pj-mwph-2xjm/GHSA-c9pj-mwph-2xjm.json b/advisories/unreviewed/2022/05/GHSA-c9pj-mwph-2xjm/GHSA-c9pj-mwph-2xjm.json index fb9df9a6c2b..5eba7401900 100644 --- a/advisories/unreviewed/2022/05/GHSA-c9pj-mwph-2xjm/GHSA-c9pj-mwph-2xjm.json +++ b/advisories/unreviewed/2022/05/GHSA-c9pj-mwph-2xjm/GHSA-c9pj-mwph-2xjm.json @@ -7,12 +7,8 @@ "CVE-2008-5161" ], "details": "Error handling in the SSH protocol in (1) SSH Tectia Client and Server and Connector 4.0 through 4.4.11, 5.0 through 5.2.4, and 5.3 through 5.3.8; Client and Server and ConnectSecure 6.0 through 6.0.4; Server for Linux on IBM System z 6.0.4; Server for IBM z/OS 5.5.1 and earlier, 6.0.0, and 6.0.1; and Client 4.0-J through 4.3.3-J and 4.0-K through 4.3.10-K; and (2) OpenSSH 4.7p1 and possibly other versions, when using a block cipher algorithm in Cipher Block Chaining (CBC) mode, makes it easier for remote attackers to recover certain plaintext data from an arbitrary block of ciphertext in an SSH session via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ccgr-4vvf-g3vr/GHSA-ccgr-4vvf-g3vr.json b/advisories/unreviewed/2022/05/GHSA-ccgr-4vvf-g3vr/GHSA-ccgr-4vvf-g3vr.json index 2c3dee2c8b0..4b6d11474c2 100644 --- a/advisories/unreviewed/2022/05/GHSA-ccgr-4vvf-g3vr/GHSA-ccgr-4vvf-g3vr.json +++ b/advisories/unreviewed/2022/05/GHSA-ccgr-4vvf-g3vr/GHSA-ccgr-4vvf-g3vr.json @@ -7,12 +7,8 @@ "CVE-2008-6521" ], "details": "index.php in Terracotta (aka OpenTerracotta) 0.6.1 allows remote attackers to obtain sensitive information via an invalid File parameter, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-chj8-f33h-qgp9/GHSA-chj8-f33h-qgp9.json b/advisories/unreviewed/2022/05/GHSA-chj8-f33h-qgp9/GHSA-chj8-f33h-qgp9.json index 87b5867b672..e949f6625dc 100644 --- a/advisories/unreviewed/2022/05/GHSA-chj8-f33h-qgp9/GHSA-chj8-f33h-qgp9.json +++ b/advisories/unreviewed/2022/05/GHSA-chj8-f33h-qgp9/GHSA-chj8-f33h-qgp9.json @@ -7,12 +7,8 @@ "CVE-2010-2561" ], "details": "Microsoft XML Core Services (aka MSXML) 3.0 does not properly handle HTTP responses, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted response, aka \"Msxml2.XMLHTTP.3.0 Response Handling Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-chv2-wjfm-8vf8/GHSA-chv2-wjfm-8vf8.json b/advisories/unreviewed/2022/05/GHSA-chv2-wjfm-8vf8/GHSA-chv2-wjfm-8vf8.json index dfa1768e938..49d99c9cfb7 100644 --- a/advisories/unreviewed/2022/05/GHSA-chv2-wjfm-8vf8/GHSA-chv2-wjfm-8vf8.json +++ b/advisories/unreviewed/2022/05/GHSA-chv2-wjfm-8vf8/GHSA-chv2-wjfm-8vf8.json @@ -7,12 +7,8 @@ "CVE-2008-6985" ], "details": "Multiple SQL injection vulnerabilities in includes/classes/shopping_cart.php in Zen Cart 1.2.0 through 1.3.8a, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the id parameter when (1) adding or (2) updating the shopping cart.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cmh5-jc3p-3x8f/GHSA-cmh5-jc3p-3x8f.json b/advisories/unreviewed/2022/05/GHSA-cmh5-jc3p-3x8f/GHSA-cmh5-jc3p-3x8f.json index 58955fa91fd..53f1b0a7e00 100644 --- a/advisories/unreviewed/2022/05/GHSA-cmh5-jc3p-3x8f/GHSA-cmh5-jc3p-3x8f.json +++ b/advisories/unreviewed/2022/05/GHSA-cmh5-jc3p-3x8f/GHSA-cmh5-jc3p-3x8f.json @@ -7,12 +7,8 @@ "CVE-2008-5583" ], "details": "Cross-site request forgery (CSRF) vulnerability in index.php in ProjectPier 0.8 and earlier allows remote attackers to perform actions as an administrator via the query string, as demonstrated by a delete project action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cmrj-r9pg-7pm9/GHSA-cmrj-r9pg-7pm9.json b/advisories/unreviewed/2022/05/GHSA-cmrj-r9pg-7pm9/GHSA-cmrj-r9pg-7pm9.json index 0219bc43fee..6f96ca46949 100644 --- a/advisories/unreviewed/2022/05/GHSA-cmrj-r9pg-7pm9/GHSA-cmrj-r9pg-7pm9.json +++ b/advisories/unreviewed/2022/05/GHSA-cmrj-r9pg-7pm9/GHSA-cmrj-r9pg-7pm9.json @@ -7,12 +7,8 @@ "CVE-2010-4322" ], "details": "Cross-site scripting (XSS) vulnerability in gwtTeaming.rpc in Novell Vibe OnPrem 3 BETA allows remote authenticated users to inject arbitrary web script or HTML via the Micro Blog (aka What Are You Working On?) field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cp42-6q89-8m7p/GHSA-cp42-6q89-8m7p.json b/advisories/unreviewed/2022/05/GHSA-cp42-6q89-8m7p/GHSA-cp42-6q89-8m7p.json index 637b7264a4a..75be2ea1763 100644 --- a/advisories/unreviewed/2022/05/GHSA-cp42-6q89-8m7p/GHSA-cp42-6q89-8m7p.json +++ b/advisories/unreviewed/2022/05/GHSA-cp42-6q89-8m7p/GHSA-cp42-6q89-8m7p.json @@ -7,12 +7,8 @@ "CVE-2008-7185" ], "details": "GNOME Rhythmbox 0.11.5 allows remote attackers to cause a denial of service (segmentation fault and crash) via a playlist (.pls) file with a long Title field, possibly related to the g_hash_table_lookup function in b-playlist-manager.c.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cpcw-38mc-g2w6/GHSA-cpcw-38mc-g2w6.json b/advisories/unreviewed/2022/05/GHSA-cpcw-38mc-g2w6/GHSA-cpcw-38mc-g2w6.json index f0f2a593d4b..bbb6c7fd0fb 100644 --- a/advisories/unreviewed/2022/05/GHSA-cpcw-38mc-g2w6/GHSA-cpcw-38mc-g2w6.json +++ b/advisories/unreviewed/2022/05/GHSA-cpcw-38mc-g2w6/GHSA-cpcw-38mc-g2w6.json @@ -7,12 +7,8 @@ "CVE-2010-4087" ], "details": "IML32.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a .dir file with a crafted mmap record containing an invalid length of a VSWV entry, a different vulnerability than CVE-2010-4089.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cpjj-7j43-crq5/GHSA-cpjj-7j43-crq5.json b/advisories/unreviewed/2022/05/GHSA-cpjj-7j43-crq5/GHSA-cpjj-7j43-crq5.json index 2c16a4a8236..0739bd23e88 100644 --- a/advisories/unreviewed/2022/05/GHSA-cpjj-7j43-crq5/GHSA-cpjj-7j43-crq5.json +++ b/advisories/unreviewed/2022/05/GHSA-cpjj-7j43-crq5/GHSA-cpjj-7j43-crq5.json @@ -7,12 +7,8 @@ "CVE-2008-5315" ], "details": "Directory traversal vulnerability in the web interface in Apple iPhone Configuration Web Utility 1.0 on Windows allows remote attackers to read arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cr3j-x4x8-5wrh/GHSA-cr3j-x4x8-5wrh.json b/advisories/unreviewed/2022/05/GHSA-cr3j-x4x8-5wrh/GHSA-cr3j-x4x8-5wrh.json index 041085ea97c..22f2bf42461 100644 --- a/advisories/unreviewed/2022/05/GHSA-cr3j-x4x8-5wrh/GHSA-cr3j-x4x8-5wrh.json +++ b/advisories/unreviewed/2022/05/GHSA-cr3j-x4x8-5wrh/GHSA-cr3j-x4x8-5wrh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cr8x-x9w7-qwpf/GHSA-cr8x-x9w7-qwpf.json b/advisories/unreviewed/2022/05/GHSA-cr8x-x9w7-qwpf/GHSA-cr8x-x9w7-qwpf.json index 9d9ab875145..5cef4133b84 100644 --- a/advisories/unreviewed/2022/05/GHSA-cr8x-x9w7-qwpf/GHSA-cr8x-x9w7-qwpf.json +++ b/advisories/unreviewed/2022/05/GHSA-cr8x-x9w7-qwpf/GHSA-cr8x-x9w7-qwpf.json @@ -7,12 +7,8 @@ "CVE-2008-6947" ], "details": "Collabtive 0.4.8 allows remote attackers to bypass authentication and create new users, including administrators, via unspecified vectors associated with the added mode in a users action to admin.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cv8c-hh5w-6j6h/GHSA-cv8c-hh5w-6j6h.json b/advisories/unreviewed/2022/05/GHSA-cv8c-hh5w-6j6h/GHSA-cv8c-hh5w-6j6h.json index 87871abe2f9..010ae76d2ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-cv8c-hh5w-6j6h/GHSA-cv8c-hh5w-6j6h.json +++ b/advisories/unreviewed/2022/05/GHSA-cv8c-hh5w-6j6h/GHSA-cv8c-hh5w-6j6h.json @@ -7,12 +7,8 @@ "CVE-2010-3335" ], "details": "Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka \"Drawing Exception Handling Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cv9p-m7pc-2rc6/GHSA-cv9p-m7pc-2rc6.json b/advisories/unreviewed/2022/05/GHSA-cv9p-m7pc-2rc6/GHSA-cv9p-m7pc-2rc6.json index fa85ecc5920..dee6c0c65f7 100644 --- a/advisories/unreviewed/2022/05/GHSA-cv9p-m7pc-2rc6/GHSA-cv9p-m7pc-2rc6.json +++ b/advisories/unreviewed/2022/05/GHSA-cv9p-m7pc-2rc6/GHSA-cv9p-m7pc-2rc6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cvwx-v78v-3w58/GHSA-cvwx-v78v-3w58.json b/advisories/unreviewed/2022/05/GHSA-cvwx-v78v-3w58/GHSA-cvwx-v78v-3w58.json index ac8a031f306..4074519fe14 100644 --- a/advisories/unreviewed/2022/05/GHSA-cvwx-v78v-3w58/GHSA-cvwx-v78v-3w58.json +++ b/advisories/unreviewed/2022/05/GHSA-cvwx-v78v-3w58/GHSA-cvwx-v78v-3w58.json @@ -7,12 +7,8 @@ "CVE-2008-6394" ], "details": "SQL injection vulnerability in core/user.php in CS-Cart 1.3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the cs_cookies[customer_user_id] cookie parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cwq3-9m45-v2wc/GHSA-cwq3-9m45-v2wc.json b/advisories/unreviewed/2022/05/GHSA-cwq3-9m45-v2wc/GHSA-cwq3-9m45-v2wc.json index ac6b0302dcd..59e670a8a14 100644 --- a/advisories/unreviewed/2022/05/GHSA-cwq3-9m45-v2wc/GHSA-cwq3-9m45-v2wc.json +++ b/advisories/unreviewed/2022/05/GHSA-cwq3-9m45-v2wc/GHSA-cwq3-9m45-v2wc.json @@ -7,12 +7,8 @@ "CVE-2010-4330" ], "details": "Directory traversal vulnerability in includes/controller.php in Pulse CMS Basic before 1.2.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the p parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cwwm-5pm5-mpxq/GHSA-cwwm-5pm5-mpxq.json b/advisories/unreviewed/2022/05/GHSA-cwwm-5pm5-mpxq/GHSA-cwwm-5pm5-mpxq.json index 0ffbe25f2d3..adb87d6d988 100644 --- a/advisories/unreviewed/2022/05/GHSA-cwwm-5pm5-mpxq/GHSA-cwwm-5pm5-mpxq.json +++ b/advisories/unreviewed/2022/05/GHSA-cwwm-5pm5-mpxq/GHSA-cwwm-5pm5-mpxq.json @@ -7,12 +7,8 @@ "CVE-2010-3898" ], "details": "IBM OmniFind Enterprise Edition 8.x and 9.x does not properly restrict the cookie path of administrator (aka ESAdmin) cookies, which might allow remote attackers to bypass authentication by leveraging access to other pages on the web site.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cx7m-cgrp-rw2q/GHSA-cx7m-cgrp-rw2q.json b/advisories/unreviewed/2022/05/GHSA-cx7m-cgrp-rw2q/GHSA-cx7m-cgrp-rw2q.json index 26371a5ca56..28d5afcadb5 100644 --- a/advisories/unreviewed/2022/05/GHSA-cx7m-cgrp-rw2q/GHSA-cx7m-cgrp-rw2q.json +++ b/advisories/unreviewed/2022/05/GHSA-cx7m-cgrp-rw2q/GHSA-cx7m-cgrp-rw2q.json @@ -7,12 +7,8 @@ "CVE-2008-6702" ], "details": "S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service (crash) via a long nickname, which triggers an exception.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cxqg-gpwj-m747/GHSA-cxqg-gpwj-m747.json b/advisories/unreviewed/2022/05/GHSA-cxqg-gpwj-m747/GHSA-cxqg-gpwj-m747.json index 64c57bb2374..7584bd683a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-cxqg-gpwj-m747/GHSA-cxqg-gpwj-m747.json +++ b/advisories/unreviewed/2022/05/GHSA-cxqg-gpwj-m747/GHSA-cxqg-gpwj-m747.json @@ -7,12 +7,8 @@ "CVE-2008-4733" ], "details": "Cross-site scripting (XSS) vulnerability in wpcommentremix.php in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) replytotext, (2) quotetext, (3) originallypostedby, (4) sep, (5) maxtags, (6) tagsep, (7) tagheadersep, (8) taglabel, and (9) tagheaderlabel parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cxv4-h4g4-fxp6/GHSA-cxv4-h4g4-fxp6.json b/advisories/unreviewed/2022/05/GHSA-cxv4-h4g4-fxp6/GHSA-cxv4-h4g4-fxp6.json index 234e2a16595..e95bf38946b 100644 --- a/advisories/unreviewed/2022/05/GHSA-cxv4-h4g4-fxp6/GHSA-cxv4-h4g4-fxp6.json +++ b/advisories/unreviewed/2022/05/GHSA-cxv4-h4g4-fxp6/GHSA-cxv4-h4g4-fxp6.json @@ -7,12 +7,8 @@ "CVE-2008-6473" ], "details": "_blogadata/include/init_pass2.php in Blogator-script 0.95 allows remote attackers to change the password for arbitrary users via a modified \"a\" parameter with a \"%\" wildcard symbol in the b parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cxvw-3p7r-4cx6/GHSA-cxvw-3p7r-4cx6.json b/advisories/unreviewed/2022/05/GHSA-cxvw-3p7r-4cx6/GHSA-cxvw-3p7r-4cx6.json index 0e28c99083a..fbcffaffd3a 100644 --- a/advisories/unreviewed/2022/05/GHSA-cxvw-3p7r-4cx6/GHSA-cxvw-3p7r-4cx6.json +++ b/advisories/unreviewed/2022/05/GHSA-cxvw-3p7r-4cx6/GHSA-cxvw-3p7r-4cx6.json @@ -7,12 +7,8 @@ "CVE-2008-5551" ], "details": "The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting data at two different positions within an HTML document, related to STYLE elements and the CSS expression property, aka a \"double injection.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f266-wwgf-729j/GHSA-f266-wwgf-729j.json b/advisories/unreviewed/2022/05/GHSA-f266-wwgf-729j/GHSA-f266-wwgf-729j.json index db679050bd3..6fd31f3a8ac 100644 --- a/advisories/unreviewed/2022/05/GHSA-f266-wwgf-729j/GHSA-f266-wwgf-729j.json +++ b/advisories/unreviewed/2022/05/GHSA-f266-wwgf-729j/GHSA-f266-wwgf-729j.json @@ -7,12 +7,8 @@ "CVE-2008-6880" ], "details": "SQL injection vulnerability in joke.php in EasySiteNetwork Free Jokes Website allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f375-5mqr-hv34/GHSA-f375-5mqr-hv34.json b/advisories/unreviewed/2022/05/GHSA-f375-5mqr-hv34/GHSA-f375-5mqr-hv34.json index 5f7482cf48f..eac113f2165 100644 --- a/advisories/unreviewed/2022/05/GHSA-f375-5mqr-hv34/GHSA-f375-5mqr-hv34.json +++ b/advisories/unreviewed/2022/05/GHSA-f375-5mqr-hv34/GHSA-f375-5mqr-hv34.json @@ -7,12 +7,8 @@ "CVE-2008-6074" ], "details": "Directory traversal vulnerability in frame.php in phpcrs 2.06 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the importFunction parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f3rf-78w5-mwvx/GHSA-f3rf-78w5-mwvx.json b/advisories/unreviewed/2022/05/GHSA-f3rf-78w5-mwvx/GHSA-f3rf-78w5-mwvx.json index 18c0d1e1b7a..830e7548d47 100644 --- a/advisories/unreviewed/2022/05/GHSA-f3rf-78w5-mwvx/GHSA-f3rf-78w5-mwvx.json +++ b/advisories/unreviewed/2022/05/GHSA-f3rf-78w5-mwvx/GHSA-f3rf-78w5-mwvx.json @@ -7,12 +7,8 @@ "CVE-2008-7011" ], "details": "The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, and Shadow Ops, allows remote authenticated users to cause a denial of service (server exit) via multiple file downloads from the server, which triggers an assertion failure when the Closing flag in UnChan.cpp is set.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f437-wvp3-3vmp/GHSA-f437-wvp3-3vmp.json b/advisories/unreviewed/2022/05/GHSA-f437-wvp3-3vmp/GHSA-f437-wvp3-3vmp.json index b031effcab7..3a82d1f96d9 100644 --- a/advisories/unreviewed/2022/05/GHSA-f437-wvp3-3vmp/GHSA-f437-wvp3-3vmp.json +++ b/advisories/unreviewed/2022/05/GHSA-f437-wvp3-3vmp/GHSA-f437-wvp3-3vmp.json @@ -7,12 +7,8 @@ "CVE-2008-5243" ], "details": "The real_parse_headers function in demux_real.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input length value to \"reindex into an allocated buffer,\" which allows remote attackers to cause a denial of service (crash) via a crafted value, probably an array index error.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f4h9-7637-5hqr/GHSA-f4h9-7637-5hqr.json b/advisories/unreviewed/2022/05/GHSA-f4h9-7637-5hqr/GHSA-f4h9-7637-5hqr.json index e12fc826727..c15eb35bb7d 100644 --- a/advisories/unreviewed/2022/05/GHSA-f4h9-7637-5hqr/GHSA-f4h9-7637-5hqr.json +++ b/advisories/unreviewed/2022/05/GHSA-f4h9-7637-5hqr/GHSA-f4h9-7637-5hqr.json @@ -7,12 +7,8 @@ "CVE-2008-5241" ], "details": "Integer underflow in demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, allows remote attackers to cause a denial of service (crash) via a crafted media file that results in a small value of moov_atom_size in a compressed MOV (aka CMOV_ATOM).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f4hx-h73p-3c7p/GHSA-f4hx-h73p-3c7p.json b/advisories/unreviewed/2022/05/GHSA-f4hx-h73p-3c7p/GHSA-f4hx-h73p-3c7p.json index d6233705a60..7d857a7ce63 100644 --- a/advisories/unreviewed/2022/05/GHSA-f4hx-h73p-3c7p/GHSA-f4hx-h73p-3c7p.json +++ b/advisories/unreviewed/2022/05/GHSA-f4hx-h73p-3c7p/GHSA-f4hx-h73p-3c7p.json @@ -7,12 +7,8 @@ "CVE-2008-7137" ], "details": "WS-Proxy in Eye-Fi 1.1.2 allows remote attackers to cause a denial of service (crash) via an empty query string to port 59278 and other unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f595-6hwf-pv87/GHSA-f595-6hwf-pv87.json b/advisories/unreviewed/2022/05/GHSA-f595-6hwf-pv87/GHSA-f595-6hwf-pv87.json index 145f784250f..5fc423edde4 100644 --- a/advisories/unreviewed/2022/05/GHSA-f595-6hwf-pv87/GHSA-f595-6hwf-pv87.json +++ b/advisories/unreviewed/2022/05/GHSA-f595-6hwf-pv87/GHSA-f595-6hwf-pv87.json @@ -7,12 +7,8 @@ "CVE-2010-3955" ], "details": "pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3 does not properly perform array indexing, which allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka \"Array Indexing Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f6j7-rj3p-cfvv/GHSA-f6j7-rj3p-cfvv.json b/advisories/unreviewed/2022/05/GHSA-f6j7-rj3p-cfvv/GHSA-f6j7-rj3p-cfvv.json index 7966a724736..0ad83751411 100644 --- a/advisories/unreviewed/2022/05/GHSA-f6j7-rj3p-cfvv/GHSA-f6j7-rj3p-cfvv.json +++ b/advisories/unreviewed/2022/05/GHSA-f6j7-rj3p-cfvv/GHSA-f6j7-rj3p-cfvv.json @@ -7,12 +7,8 @@ "CVE-2010-1903" ], "details": "Microsoft Office Word 2002 SP3 and 2003 SP3, and Office Word Viewer, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a malformed record in a Word file, aka \"Word HTML Linked Objects Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f6pg-fw4f-f5v9/GHSA-f6pg-fw4f-f5v9.json b/advisories/unreviewed/2022/05/GHSA-f6pg-fw4f-f5v9/GHSA-f6pg-fw4f-f5v9.json index 323e768ee43..e44cb33cd3a 100644 --- a/advisories/unreviewed/2022/05/GHSA-f6pg-fw4f-f5v9/GHSA-f6pg-fw4f-f5v9.json +++ b/advisories/unreviewed/2022/05/GHSA-f6pg-fw4f-f5v9/GHSA-f6pg-fw4f-f5v9.json @@ -7,12 +7,8 @@ "CVE-2008-5399" ], "details": "Cross-site scripting (XSS) vulnerability in the listonlineusers (aka \"Who's online\") component in mvnForum before 1.2.1 GA allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f847-3v2w-c8jm/GHSA-f847-3v2w-c8jm.json b/advisories/unreviewed/2022/05/GHSA-f847-3v2w-c8jm/GHSA-f847-3v2w-c8jm.json index 62a94184235..3fc14a48d05 100644 --- a/advisories/unreviewed/2022/05/GHSA-f847-3v2w-c8jm/GHSA-f847-3v2w-c8jm.json +++ b/advisories/unreviewed/2022/05/GHSA-f847-3v2w-c8jm/GHSA-f847-3v2w-c8jm.json @@ -7,12 +7,8 @@ "CVE-2008-4800" ], "details": "The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic Tool allows remote attackers to cause a denial of service (NULL pointer dereference and Internet Explorer 6.0 crash) via a large negative integer argument to the GetEntryPointForThread method. NOTE: this issue might only be exploitable in limited environments or non-default browser settings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f9pr-r235-w4j8/GHSA-f9pr-r235-w4j8.json b/advisories/unreviewed/2022/05/GHSA-f9pr-r235-w4j8/GHSA-f9pr-r235-w4j8.json index b0d34b1851e..fe01ee3cfd6 100644 --- a/advisories/unreviewed/2022/05/GHSA-f9pr-r235-w4j8/GHSA-f9pr-r235-w4j8.json +++ b/advisories/unreviewed/2022/05/GHSA-f9pr-r235-w4j8/GHSA-f9pr-r235-w4j8.json @@ -7,12 +7,8 @@ "CVE-2010-3242" ], "details": "Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka \"Ghost Record Type Parsing Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fc49-345f-3vvm/GHSA-fc49-345f-3vvm.json b/advisories/unreviewed/2022/05/GHSA-fc49-345f-3vvm/GHSA-fc49-345f-3vvm.json index 06fedf17101..944f6945883 100644 --- a/advisories/unreviewed/2022/05/GHSA-fc49-345f-3vvm/GHSA-fc49-345f-3vvm.json +++ b/advisories/unreviewed/2022/05/GHSA-fc49-345f-3vvm/GHSA-fc49-345f-3vvm.json @@ -7,12 +7,8 @@ "CVE-2008-6563" ], "details": "Buffer overflow in the XML parser in Trillian 3.1.9.0, and possibly earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted DTD file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fc5j-prg9-w9r3/GHSA-fc5j-prg9-w9r3.json b/advisories/unreviewed/2022/05/GHSA-fc5j-prg9-w9r3/GHSA-fc5j-prg9-w9r3.json index 48f0a5d35a3..f7e564bed41 100644 --- a/advisories/unreviewed/2022/05/GHSA-fc5j-prg9-w9r3/GHSA-fc5j-prg9-w9r3.json +++ b/advisories/unreviewed/2022/05/GHSA-fc5j-prg9-w9r3/GHSA-fc5j-prg9-w9r3.json @@ -7,12 +7,8 @@ "CVE-2008-7187" ], "details": "Coppermine Photo Gallery (CPG) 1.4.14 allows remote attackers to obtain sensitive information via a direct request to include/slideshow.inc.php, which leaks the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fg5f-v678-7qvv/GHSA-fg5f-v678-7qvv.json b/advisories/unreviewed/2022/05/GHSA-fg5f-v678-7qvv/GHSA-fg5f-v678-7qvv.json index 9729285222e..03d2b0feccf 100644 --- a/advisories/unreviewed/2022/05/GHSA-fg5f-v678-7qvv/GHSA-fg5f-v678-7qvv.json +++ b/advisories/unreviewed/2022/05/GHSA-fg5f-v678-7qvv/GHSA-fg5f-v678-7qvv.json @@ -7,12 +7,8 @@ "CVE-2010-3951" ], "details": "Buffer overflow in the FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted FlashPix image in an Office document, aka \"FlashPix Image Converter Buffer Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fg75-chcf-xjg7/GHSA-fg75-chcf-xjg7.json b/advisories/unreviewed/2022/05/GHSA-fg75-chcf-xjg7/GHSA-fg75-chcf-xjg7.json index 646dabac16d..b9f59a11e07 100644 --- a/advisories/unreviewed/2022/05/GHSA-fg75-chcf-xjg7/GHSA-fg75-chcf-xjg7.json +++ b/advisories/unreviewed/2022/05/GHSA-fg75-chcf-xjg7/GHSA-fg75-chcf-xjg7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fgj3-98fg-ggv4/GHSA-fgj3-98fg-ggv4.json b/advisories/unreviewed/2022/05/GHSA-fgj3-98fg-ggv4/GHSA-fgj3-98fg-ggv4.json index b95af46131d..1646fe6bc32 100644 --- a/advisories/unreviewed/2022/05/GHSA-fgj3-98fg-ggv4/GHSA-fgj3-98fg-ggv4.json +++ b/advisories/unreviewed/2022/05/GHSA-fgj3-98fg-ggv4/GHSA-fgj3-98fg-ggv4.json @@ -7,12 +7,8 @@ "CVE-2010-4327" ], "details": "Unspecified vulnerability in the NCP service in Novell eDirectory 8.8.5 before 8.8.5.6 and 8.8.6 before 8.8.6.2 allows remote attackers to cause a denial of service (hang) via a malformed FileSetLock request to port 524.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fh4q-8jf5-mfcw/GHSA-fh4q-8jf5-mfcw.json b/advisories/unreviewed/2022/05/GHSA-fh4q-8jf5-mfcw/GHSA-fh4q-8jf5-mfcw.json index 53826717aff..d2c7d42ef28 100644 --- a/advisories/unreviewed/2022/05/GHSA-fh4q-8jf5-mfcw/GHSA-fh4q-8jf5-mfcw.json +++ b/advisories/unreviewed/2022/05/GHSA-fh4q-8jf5-mfcw/GHSA-fh4q-8jf5-mfcw.json @@ -7,12 +7,8 @@ "CVE-2008-7065" ], "details": "Siemens C450 IP and C475 IP VoIP devices allow remote attackers to cause a denial of service (disconnected calls and device reboot) via a crafted SIP packet to UDP port 5060.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fjhw-c6hq-xvf8/GHSA-fjhw-c6hq-xvf8.json b/advisories/unreviewed/2022/05/GHSA-fjhw-c6hq-xvf8/GHSA-fjhw-c6hq-xvf8.json index f0fd84eeb4d..64f23731497 100644 --- a/advisories/unreviewed/2022/05/GHSA-fjhw-c6hq-xvf8/GHSA-fjhw-c6hq-xvf8.json +++ b/advisories/unreviewed/2022/05/GHSA-fjhw-c6hq-xvf8/GHSA-fjhw-c6hq-xvf8.json @@ -7,12 +7,8 @@ "CVE-2008-7184" ], "details": "Cross-site scripting (XSS) vulnerability in Diigo Toolbar and Diigolet allows remote attackers to inject arbitrary web script or HTML via a public comment.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fjj9-88r7-m7jg/GHSA-fjj9-88r7-m7jg.json b/advisories/unreviewed/2022/05/GHSA-fjj9-88r7-m7jg/GHSA-fjj9-88r7-m7jg.json index c7622fe0f22..f3a66b9f9df 100644 --- a/advisories/unreviewed/2022/05/GHSA-fjj9-88r7-m7jg/GHSA-fjj9-88r7-m7jg.json +++ b/advisories/unreviewed/2022/05/GHSA-fjj9-88r7-m7jg/GHSA-fjj9-88r7-m7jg.json @@ -7,12 +7,8 @@ "CVE-2008-5532" ], "details": "Ikarus Virus Utilities T3.1.1.45.0 and possibly T3.1.1.34.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fjw5-gg3p-qgcr/GHSA-fjw5-gg3p-qgcr.json b/advisories/unreviewed/2022/05/GHSA-fjw5-gg3p-qgcr/GHSA-fjw5-gg3p-qgcr.json index 9950544c5df..90eeb3cfa46 100644 --- a/advisories/unreviewed/2022/05/GHSA-fjw5-gg3p-qgcr/GHSA-fjw5-gg3p-qgcr.json +++ b/advisories/unreviewed/2022/05/GHSA-fjw5-gg3p-qgcr/GHSA-fjw5-gg3p-qgcr.json @@ -7,12 +7,8 @@ "CVE-2008-6480" ], "details": "Cross-site request forgery (CSRF) vulnerability in engine/modules/imagepreview.php in Datalife Engine 6.7 allows remote attackers to hijack the authentication of arbitrary users for requests that use a modified image parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fm4r-v379-gc4v/GHSA-fm4r-v379-gc4v.json b/advisories/unreviewed/2022/05/GHSA-fm4r-v379-gc4v/GHSA-fm4r-v379-gc4v.json index ca482e4fd1f..c1858e35017 100644 --- a/advisories/unreviewed/2022/05/GHSA-fm4r-v379-gc4v/GHSA-fm4r-v379-gc4v.json +++ b/advisories/unreviewed/2022/05/GHSA-fm4r-v379-gc4v/GHSA-fm4r-v379-gc4v.json @@ -7,12 +7,8 @@ "CVE-2008-5535" ], "details": "Norman Antivirus 5.80.02, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fmfq-vq8h-c3vf/GHSA-fmfq-vq8h-c3vf.json b/advisories/unreviewed/2022/05/GHSA-fmfq-vq8h-c3vf/GHSA-fmfq-vq8h-c3vf.json index 90f60bfa3aa..2ab46f1ea8e 100644 --- a/advisories/unreviewed/2022/05/GHSA-fmfq-vq8h-c3vf/GHSA-fmfq-vq8h-c3vf.json +++ b/advisories/unreviewed/2022/05/GHSA-fmfq-vq8h-c3vf/GHSA-fmfq-vq8h-c3vf.json @@ -7,12 +7,8 @@ "CVE-2008-6255" ], "details": "Multiple SQL injection vulnerabilities in vBulletin 3.7.4 allow remote authenticated administrators to execute arbitrary SQL commands via the (1) answer parameter to admincp/verify.php, (2) extension parameter in an edit action to admincp/attachmentpermission.php, and the (3) iperm parameter to admincp/image.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fmhg-h6vw-qwgj/GHSA-fmhg-h6vw-qwgj.json b/advisories/unreviewed/2022/05/GHSA-fmhg-h6vw-qwgj/GHSA-fmhg-h6vw-qwgj.json index e7c042ddab7..ca7a8fcd7eb 100644 --- a/advisories/unreviewed/2022/05/GHSA-fmhg-h6vw-qwgj/GHSA-fmhg-h6vw-qwgj.json +++ b/advisories/unreviewed/2022/05/GHSA-fmhg-h6vw-qwgj/GHSA-fmhg-h6vw-qwgj.json @@ -7,12 +7,8 @@ "CVE-2010-4295" ], "details": "Race condition in the mounting process in vmware-mount in VMware Workstation 7.x before 7.1.2 build 301548 on Linux, VMware Player 3.1.x before 3.1.2 build 301548 on Linux, VMware Server 2.0.2 on Linux, and VMware Fusion 3.1.x before 3.1.2 build 332101 allows host OS users to gain privileges via vectors involving temporary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fpfv-m93h-jxf2/GHSA-fpfv-m93h-jxf2.json b/advisories/unreviewed/2022/05/GHSA-fpfv-m93h-jxf2/GHSA-fpfv-m93h-jxf2.json index 8c09700df48..d27098f31d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-fpfv-m93h-jxf2/GHSA-fpfv-m93h-jxf2.json +++ b/advisories/unreviewed/2022/05/GHSA-fpfv-m93h-jxf2/GHSA-fpfv-m93h-jxf2.json @@ -7,12 +7,8 @@ "CVE-2010-3894" ], "details": "Stack-based buffer overflow in the Java_com_ibm_es_oss_CryptionNative_ESEncrypt function in /opt/IBM/es/lib/libffq.cryptionjni.so in the login form in the administration interface in IBM OmniFind Enterprise Edition before 8.5 FP6 allows remote attackers to execute arbitrary code via a long password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fq9j-8fvv-f2v6/GHSA-fq9j-8fvv-f2v6.json b/advisories/unreviewed/2022/05/GHSA-fq9j-8fvv-f2v6/GHSA-fq9j-8fvv-f2v6.json index 014e9e2f59c..6dc9e30524d 100644 --- a/advisories/unreviewed/2022/05/GHSA-fq9j-8fvv-f2v6/GHSA-fq9j-8fvv-f2v6.json +++ b/advisories/unreviewed/2022/05/GHSA-fq9j-8fvv-f2v6/GHSA-fq9j-8fvv-f2v6.json @@ -7,12 +7,8 @@ "CVE-2008-6060" ], "details": "Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by InfoSoft FusionCharts allows remote attackers to inject arbitrary additional SWF content via a URL in the SRC attribute of an IMG element in the dataURL parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fr6h-cjvx-hrf6/GHSA-fr6h-cjvx-hrf6.json b/advisories/unreviewed/2022/05/GHSA-fr6h-cjvx-hrf6/GHSA-fr6h-cjvx-hrf6.json index 8b5f91bc432..bb35e4fc735 100644 --- a/advisories/unreviewed/2022/05/GHSA-fr6h-cjvx-hrf6/GHSA-fr6h-cjvx-hrf6.json +++ b/advisories/unreviewed/2022/05/GHSA-fr6h-cjvx-hrf6/GHSA-fr6h-cjvx-hrf6.json @@ -7,12 +7,8 @@ "CVE-2010-4325" ], "details": "Buffer overflow in gwwww1.dll in GroupWise Internet Agent (GWIA) in Novell GroupWise before 8.02HP2 allows remote attackers to execute arbitrary code via a crafted TZID variable in a VCALENDAR message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-frch-4gjp-rjjv/GHSA-frch-4gjp-rjjv.json b/advisories/unreviewed/2022/05/GHSA-frch-4gjp-rjjv/GHSA-frch-4gjp-rjjv.json index a47e0c9bc0f..6e2daa9024d 100644 --- a/advisories/unreviewed/2022/05/GHSA-frch-4gjp-rjjv/GHSA-frch-4gjp-rjjv.json +++ b/advisories/unreviewed/2022/05/GHSA-frch-4gjp-rjjv/GHSA-frch-4gjp-rjjv.json @@ -7,12 +7,8 @@ "CVE-2008-5557" ], "details": "Heap-based buffer overflow in ext/mbstring/libmbfl/filters/mbfilter_htmlent.c in the mbstring extension in PHP 4.3.0 through 5.2.6 allows context-dependent attackers to execute arbitrary code via a crafted string containing an HTML entity, which is not properly handled during Unicode conversion, related to the (1) mb_convert_encoding, (2) mb_check_encoding, (3) mb_convert_variables, and (4) mb_parse_str functions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-frpw-365x-666v/GHSA-frpw-365x-666v.json b/advisories/unreviewed/2022/05/GHSA-frpw-365x-666v/GHSA-frpw-365x-666v.json index aab865473fa..dbe468dba17 100644 --- a/advisories/unreviewed/2022/05/GHSA-frpw-365x-666v/GHSA-frpw-365x-666v.json +++ b/advisories/unreviewed/2022/05/GHSA-frpw-365x-666v/GHSA-frpw-365x-666v.json @@ -7,12 +7,8 @@ "CVE-2010-4189" ], "details": "The IML32 module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie containing a GIF image with a crafted global color table size value, which causes an out-of-range pointer offset.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fv55-wvf8-g56x/GHSA-fv55-wvf8-g56x.json b/advisories/unreviewed/2022/05/GHSA-fv55-wvf8-g56x/GHSA-fv55-wvf8-g56x.json index 25c2ccfebad..00faf752d43 100644 --- a/advisories/unreviewed/2022/05/GHSA-fv55-wvf8-g56x/GHSA-fv55-wvf8-g56x.json +++ b/advisories/unreviewed/2022/05/GHSA-fv55-wvf8-g56x/GHSA-fv55-wvf8-g56x.json @@ -7,12 +7,8 @@ "CVE-2010-3954" ], "details": "Microsoft Publisher 2002 SP3, 2003 SP3, and 2010 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Publisher file, aka \"Microsoft Publisher Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fvfm-ghv5-q5j8/GHSA-fvfm-ghv5-q5j8.json b/advisories/unreviewed/2022/05/GHSA-fvfm-ghv5-q5j8/GHSA-fvfm-ghv5-q5j8.json index afdcafb9965..2fa090c7b01 100644 --- a/advisories/unreviewed/2022/05/GHSA-fvfm-ghv5-q5j8/GHSA-fvfm-ghv5-q5j8.json +++ b/advisories/unreviewed/2022/05/GHSA-fvfm-ghv5-q5j8/GHSA-fvfm-ghv5-q5j8.json @@ -7,12 +7,8 @@ "CVE-2008-5176" ], "details": "Multiple buffer overflows in Client Software WinCom LPD Total 3.0.2.623 and earlier allow remote attackers to execute arbitrary code via (1) a long 0x02 command to the remote administration service on TCP port 13500 or (2) a long invalid control filename to LPDService.exe on TCP port 515.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fw7w-h8vj-jx4g/GHSA-fw7w-h8vj-jx4g.json b/advisories/unreviewed/2022/05/GHSA-fw7w-h8vj-jx4g/GHSA-fw7w-h8vj-jx4g.json index 83b2327f058..f8b437d16c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-fw7w-h8vj-jx4g/GHSA-fw7w-h8vj-jx4g.json +++ b/advisories/unreviewed/2022/05/GHSA-fw7w-h8vj-jx4g/GHSA-fw7w-h8vj-jx4g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fxqj-593j-27xw/GHSA-fxqj-593j-27xw.json b/advisories/unreviewed/2022/05/GHSA-fxqj-593j-27xw/GHSA-fxqj-593j-27xw.json index 077a2bf4ec3..cee93f706f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-fxqj-593j-27xw/GHSA-fxqj-593j-27xw.json +++ b/advisories/unreviewed/2022/05/GHSA-fxqj-593j-27xw/GHSA-fxqj-593j-27xw.json @@ -7,12 +7,8 @@ "CVE-2010-4882" ], "details": "Cross-site scripting (XSS) vulnerability in autocms.php in Auto CMS 1.6 allows remote attackers to inject arbitrary web script or HTML via the sitetitle parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fxwq-j34g-248f/GHSA-fxwq-j34g-248f.json b/advisories/unreviewed/2022/05/GHSA-fxwq-j34g-248f/GHSA-fxwq-j34g-248f.json index c684a6d8b72..b0c69cb0b29 100644 --- a/advisories/unreviewed/2022/05/GHSA-fxwq-j34g-248f/GHSA-fxwq-j34g-248f.json +++ b/advisories/unreviewed/2022/05/GHSA-fxwq-j34g-248f/GHSA-fxwq-j34g-248f.json @@ -7,12 +7,8 @@ "CVE-2008-7013" ], "details": "NetService.dll in Baidu Hi IM allows remote servers to cause a denial of service (client crash) via a crafted login response that triggers a divide-by-zero error.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g26h-7j58-88wq/GHSA-g26h-7j58-88wq.json b/advisories/unreviewed/2022/05/GHSA-g26h-7j58-88wq/GHSA-g26h-7j58-88wq.json index f6061a6b4a7..5836bddb31a 100644 --- a/advisories/unreviewed/2022/05/GHSA-g26h-7j58-88wq/GHSA-g26h-7j58-88wq.json +++ b/advisories/unreviewed/2022/05/GHSA-g26h-7j58-88wq/GHSA-g26h-7j58-88wq.json @@ -7,12 +7,8 @@ "CVE-2008-7214" ], "details": "Cross-site request forgery (CSRF) vulnerability in administrator/index2.php in MOStlyCE before 2.4, as used in Mambo 4.6.3 and earlier, allows remote attackers to hijack the authentication of administrators for requests that add new administrator accounts via the save task in a com_users action, as demonstrated using a separate XSS vulnerability in mambots/editors/mostlyce/jscripts/tiny_mce/filemanager/connectors/php/connector.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g2p8-j4c9-c329/GHSA-g2p8-j4c9-c329.json b/advisories/unreviewed/2022/05/GHSA-g2p8-j4c9-c329/GHSA-g2p8-j4c9-c329.json index a22974907a4..7c9c4d53cb3 100644 --- a/advisories/unreviewed/2022/05/GHSA-g2p8-j4c9-c329/GHSA-g2p8-j4c9-c329.json +++ b/advisories/unreviewed/2022/05/GHSA-g2p8-j4c9-c329/GHSA-g2p8-j4c9-c329.json @@ -7,12 +7,8 @@ "CVE-2014-3740" ], "details": "Cross-site scripting (XSS) vulnerability in SpiceWorks before 7.2.00195 allows remote authenticated users to inject arbitrary web script or HTML via the Summary field in a ticket request to the portal page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g4q7-4cgj-g72g/GHSA-g4q7-4cgj-g72g.json b/advisories/unreviewed/2022/05/GHSA-g4q7-4cgj-g72g/GHSA-g4q7-4cgj-g72g.json index c5103279b86..3680ef7734e 100644 --- a/advisories/unreviewed/2022/05/GHSA-g4q7-4cgj-g72g/GHSA-g4q7-4cgj-g72g.json +++ b/advisories/unreviewed/2022/05/GHSA-g4q7-4cgj-g72g/GHSA-g4q7-4cgj-g72g.json @@ -7,12 +7,8 @@ "CVE-2010-4323" ], "details": "Heap-based buffer overflow in novell-tftp.exe in Novell ZENworks Configuration Manager (ZCM) 10.3.1, 10.3.2, and 11.0, and earlier versions, allows remote attackers to execute arbitrary code via a long TFTP request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g76q-f38j-rpvf/GHSA-g76q-f38j-rpvf.json b/advisories/unreviewed/2022/05/GHSA-g76q-f38j-rpvf/GHSA-g76q-f38j-rpvf.json index 5dd9bf1fb0a..23d8fb31c91 100644 --- a/advisories/unreviewed/2022/05/GHSA-g76q-f38j-rpvf/GHSA-g76q-f38j-rpvf.json +++ b/advisories/unreviewed/2022/05/GHSA-g76q-f38j-rpvf/GHSA-g76q-f38j-rpvf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g8mv-grjq-mr6f/GHSA-g8mv-grjq-mr6f.json b/advisories/unreviewed/2022/05/GHSA-g8mv-grjq-mr6f/GHSA-g8mv-grjq-mr6f.json index 151a4aecdde..6dc5279a6f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-g8mv-grjq-mr6f/GHSA-g8mv-grjq-mr6f.json +++ b/advisories/unreviewed/2022/05/GHSA-g8mv-grjq-mr6f/GHSA-g8mv-grjq-mr6f.json @@ -7,12 +7,8 @@ "CVE-2008-6427" ], "details": "SQL injection vulnerability in index.php in Hivemaker Professional 1.0.2 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g928-9c86-8mr8/GHSA-g928-9c86-8mr8.json b/advisories/unreviewed/2022/05/GHSA-g928-9c86-8mr8/GHSA-g928-9c86-8mr8.json index 90d4e4eda6e..a1cf5084d5b 100644 --- a/advisories/unreviewed/2022/05/GHSA-g928-9c86-8mr8/GHSA-g928-9c86-8mr8.json +++ b/advisories/unreviewed/2022/05/GHSA-g928-9c86-8mr8/GHSA-g928-9c86-8mr8.json @@ -7,12 +7,8 @@ "CVE-2008-4696" ], "details": "Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the \"optional fragment\"), which is not properly escaped before storage in the History Search database (aka md.dat).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g97x-cqx3-893w/GHSA-g97x-cqx3-893w.json b/advisories/unreviewed/2022/05/GHSA-g97x-cqx3-893w/GHSA-g97x-cqx3-893w.json index 4f6eed37e52..6e0d1fbe72b 100644 --- a/advisories/unreviewed/2022/05/GHSA-g97x-cqx3-893w/GHSA-g97x-cqx3-893w.json +++ b/advisories/unreviewed/2022/05/GHSA-g97x-cqx3-893w/GHSA-g97x-cqx3-893w.json @@ -7,12 +7,8 @@ "CVE-2008-5541" ], "details": "Sophos Anti-Virus 4.33.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g9wg-pff2-mcx7/GHSA-g9wg-pff2-mcx7.json b/advisories/unreviewed/2022/05/GHSA-g9wg-pff2-mcx7/GHSA-g9wg-pff2-mcx7.json index 9a358d97d6b..4e8d07601d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-g9wg-pff2-mcx7/GHSA-g9wg-pff2-mcx7.json +++ b/advisories/unreviewed/2022/05/GHSA-g9wg-pff2-mcx7/GHSA-g9wg-pff2-mcx7.json @@ -7,12 +7,8 @@ "CVE-2008-4662" ], "details": "Directory traversal vulnerability in admin.php in LokiCMS 0.3.4, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gcm4-8f83-gq2h/GHSA-gcm4-8f83-gq2h.json b/advisories/unreviewed/2022/05/GHSA-gcm4-8f83-gq2h/GHSA-gcm4-8f83-gq2h.json index 09817f7f94e..4726c49d9c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-gcm4-8f83-gq2h/GHSA-gcm4-8f83-gq2h.json +++ b/advisories/unreviewed/2022/05/GHSA-gcm4-8f83-gq2h/GHSA-gcm4-8f83-gq2h.json @@ -7,12 +7,8 @@ "CVE-2008-4726" ], "details": "Stack-based buffer overflow in the SFTP subsystem in GoodTech SSH 6.4 allows remote authenticated users to execute arbitrary code via a long string to the (1) open (aka SSH_FXP_OPEN), (2) unlink, (3) opendir, and other unspecified parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gcq2-fc8w-fh67/GHSA-gcq2-fc8w-fh67.json b/advisories/unreviewed/2022/05/GHSA-gcq2-fc8w-fh67/GHSA-gcq2-fc8w-fh67.json index c4158fe36e2..3225d314316 100644 --- a/advisories/unreviewed/2022/05/GHSA-gcq2-fc8w-fh67/GHSA-gcq2-fc8w-fh67.json +++ b/advisories/unreviewed/2022/05/GHSA-gcq2-fc8w-fh67/GHSA-gcq2-fc8w-fh67.json @@ -7,12 +7,8 @@ "CVE-2008-4828" ], "details": "Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, and 5.4.0.0 through 5.4.1.96, and the TSM Express client 5.3.3.0 through 5.3.6.4, allow remote attackers to execute arbitrary code via (1) a request packet that is not properly parsed by an unspecified \"generic string handling function\" or (2) a crafted NodeName in a dicuGetIdentifyRequest request packet, related to the (a) Web GUI and (b) Java GUI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gf7x-7c2m-9485/GHSA-gf7x-7c2m-9485.json b/advisories/unreviewed/2022/05/GHSA-gf7x-7c2m-9485/GHSA-gf7x-7c2m-9485.json index 1e949ba7003..4fc75ddb788 100644 --- a/advisories/unreviewed/2022/05/GHSA-gf7x-7c2m-9485/GHSA-gf7x-7c2m-9485.json +++ b/advisories/unreviewed/2022/05/GHSA-gf7x-7c2m-9485/GHSA-gf7x-7c2m-9485.json @@ -7,12 +7,8 @@ "CVE-2010-4407" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in AlGuest 1.1c-patched allow remote attackers to inject arbitrary web script or HTML via the (1) nome (nickname), (2) messaggio (message), and (3) link (homepage) parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gfg2-2gww-4ffv/GHSA-gfg2-2gww-4ffv.json b/advisories/unreviewed/2022/05/GHSA-gfg2-2gww-4ffv/GHSA-gfg2-2gww-4ffv.json index 79949450dbf..38e6462c8a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-gfg2-2gww-4ffv/GHSA-gfg2-2gww-4ffv.json +++ b/advisories/unreviewed/2022/05/GHSA-gfg2-2gww-4ffv/GHSA-gfg2-2gww-4ffv.json @@ -7,12 +7,8 @@ "CVE-2011-0355" ], "details": "Cisco Nexus 1000V Virtual Ethernet Module (VEM) 4.0(4) SV1(1) through SV1(3b), as used in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, does not properly handle dropped packets, which allows guest OS users to cause a denial of service (ESX or ESXi host OS crash) by sending an 802.1Q tagged packet over an access vEthernet port, aka Cisco Bug ID CSCtj17451.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gfh7-6m9h-pgf9/GHSA-gfh7-6m9h-pgf9.json b/advisories/unreviewed/2022/05/GHSA-gfh7-6m9h-pgf9/GHSA-gfh7-6m9h-pgf9.json index 016e6a1dbcd..cac05dcb623 100644 --- a/advisories/unreviewed/2022/05/GHSA-gfh7-6m9h-pgf9/GHSA-gfh7-6m9h-pgf9.json +++ b/advisories/unreviewed/2022/05/GHSA-gfh7-6m9h-pgf9/GHSA-gfh7-6m9h-pgf9.json @@ -7,12 +7,8 @@ "CVE-2008-6479" ], "details": "Cross-site request forgery (CSRF) vulnerability in the \"change password\" feature in the VZPP web interface for Parallels Virtuozzo 25.4.swsoft (build 3.0.0-25.4.swsoft) allows remote attackers to modify the password via a link or IMG tag to vz/cp/pwd.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gg7f-9m2h-jpjx/GHSA-gg7f-9m2h-jpjx.json b/advisories/unreviewed/2022/05/GHSA-gg7f-9m2h-jpjx/GHSA-gg7f-9m2h-jpjx.json index 6a4fff93317..d3e2fe846a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-gg7f-9m2h-jpjx/GHSA-gg7f-9m2h-jpjx.json +++ b/advisories/unreviewed/2022/05/GHSA-gg7f-9m2h-jpjx/GHSA-gg7f-9m2h-jpjx.json @@ -7,12 +7,8 @@ "CVE-2008-5427" ], "details": "Norton Antivirus in Norton Internet Security 15.5.0.23 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many \"Content-type: message/rfc822;\" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ghmr-qg34-gcpr/GHSA-ghmr-qg34-gcpr.json b/advisories/unreviewed/2022/05/GHSA-ghmr-qg34-gcpr/GHSA-ghmr-qg34-gcpr.json index d1df4c5a61a..b777e21458c 100644 --- a/advisories/unreviewed/2022/05/GHSA-ghmr-qg34-gcpr/GHSA-ghmr-qg34-gcpr.json +++ b/advisories/unreviewed/2022/05/GHSA-ghmr-qg34-gcpr/GHSA-ghmr-qg34-gcpr.json @@ -7,12 +7,8 @@ "CVE-2008-6824" ], "details": "The management interface on the A-LINK WL54AP3 and WL54AP2 access points has a blank default password for the admin account, which makes it easier for remote attackers to obtain access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ghr8-wxfj-fqp2/GHSA-ghr8-wxfj-fqp2.json b/advisories/unreviewed/2022/05/GHSA-ghr8-wxfj-fqp2/GHSA-ghr8-wxfj-fqp2.json index b407932ebed..b5779865880 100644 --- a/advisories/unreviewed/2022/05/GHSA-ghr8-wxfj-fqp2/GHSA-ghr8-wxfj-fqp2.json +++ b/advisories/unreviewed/2022/05/GHSA-ghr8-wxfj-fqp2/GHSA-ghr8-wxfj-fqp2.json @@ -7,12 +7,8 @@ "CVE-2010-4783" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Web Scripts Easy Banner Free 2009.05.18, when magic_quotes_gpc is disabled, allow remote attackers to inject arbitrary web script or HTML via the (1) siteurl and (2) urlbanner parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ghxm-jmwh-2vrh/GHSA-ghxm-jmwh-2vrh.json b/advisories/unreviewed/2022/05/GHSA-ghxm-jmwh-2vrh/GHSA-ghxm-jmwh-2vrh.json index 1e529bcbdfa..f30e95812da 100644 --- a/advisories/unreviewed/2022/05/GHSA-ghxm-jmwh-2vrh/GHSA-ghxm-jmwh-2vrh.json +++ b/advisories/unreviewed/2022/05/GHSA-ghxm-jmwh-2vrh/GHSA-ghxm-jmwh-2vrh.json @@ -7,12 +7,8 @@ "CVE-2010-4865" ], "details": "SQL injection vulnerability in the JE Guestbook (com_jeguestbook) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the d_itemid parameter in an item_detail action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gj6f-7h35-44xq/GHSA-gj6f-7h35-44xq.json b/advisories/unreviewed/2022/05/GHSA-gj6f-7h35-44xq/GHSA-gj6f-7h35-44xq.json index cae4fd259a7..870cd0c0fc6 100644 --- a/advisories/unreviewed/2022/05/GHSA-gj6f-7h35-44xq/GHSA-gj6f-7h35-44xq.json +++ b/advisories/unreviewed/2022/05/GHSA-gj6f-7h35-44xq/GHSA-gj6f-7h35-44xq.json @@ -7,12 +7,8 @@ "CVE-2008-5276" ], "details": "Integer overflow in the ReadRealIndex function in real.c in the Real demuxer plugin in VideoLAN VLC media player 0.9.0 through 0.9.7 allows remote attackers to execute arbitrary code via a malformed RealMedia (.rm) file that triggers a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gjpr-j462-595q/GHSA-gjpr-j462-595q.json b/advisories/unreviewed/2022/05/GHSA-gjpr-j462-595q/GHSA-gjpr-j462-595q.json index 106a48fd67f..8bee36b601b 100644 --- a/advisories/unreviewed/2022/05/GHSA-gjpr-j462-595q/GHSA-gjpr-j462-595q.json +++ b/advisories/unreviewed/2022/05/GHSA-gjpr-j462-595q/GHSA-gjpr-j462-595q.json @@ -7,12 +7,8 @@ "CVE-2008-7173" ], "details": "The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly restrict access to privileged functions, which allows remote attackers to cause a denial of service (physical damage), modify coffee settings, and possibly execute code via a crafted request. NOTE: this issue is being included in CVE because the denial of service may include financial loss or water damage.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gjvg-m6j6-mjvv/GHSA-gjvg-m6j6-mjvv.json b/advisories/unreviewed/2022/05/GHSA-gjvg-m6j6-mjvv/GHSA-gjvg-m6j6-mjvv.json index 0a3b0450152..dde2081e135 100644 --- a/advisories/unreviewed/2022/05/GHSA-gjvg-m6j6-mjvv/GHSA-gjvg-m6j6-mjvv.json +++ b/advisories/unreviewed/2022/05/GHSA-gjvg-m6j6-mjvv/GHSA-gjvg-m6j6-mjvv.json @@ -7,12 +7,8 @@ "CVE-2008-5694" ], "details": "PHP remote file inclusion vulnerability in lib/jpgraph/jpgraph_errhandler.inc.php in Sandbox 1.4.1 might allow remote attackers to execute arbitrary PHP code via unspecified vectors. NOTE: the issue, if any, may be located in Aditus JpGraph rather than Sandbox. If so, then this should not be treated as an issue in Sandbox.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gm69-8xmr-8wqr/GHSA-gm69-8xmr-8wqr.json b/advisories/unreviewed/2022/05/GHSA-gm69-8xmr-8wqr/GHSA-gm69-8xmr-8wqr.json index 1b47163c6d4..b1b656d6a5a 100644 --- a/advisories/unreviewed/2022/05/GHSA-gm69-8xmr-8wqr/GHSA-gm69-8xmr-8wqr.json +++ b/advisories/unreviewed/2022/05/GHSA-gm69-8xmr-8wqr/GHSA-gm69-8xmr-8wqr.json @@ -7,12 +7,8 @@ "CVE-2008-5553" ], "details": "The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 disables itself upon encountering a certain X-XSS-Protection HTTP header, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting this header after a CRLF sequence. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to \"address every conceivable XSS attack scenario.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gqpx-99v5-r9g9/GHSA-gqpx-99v5-r9g9.json b/advisories/unreviewed/2022/05/GHSA-gqpx-99v5-r9g9/GHSA-gqpx-99v5-r9g9.json index bf34f7d5b93..3eedee1de43 100644 --- a/advisories/unreviewed/2022/05/GHSA-gqpx-99v5-r9g9/GHSA-gqpx-99v5-r9g9.json +++ b/advisories/unreviewed/2022/05/GHSA-gqpx-99v5-r9g9/GHSA-gqpx-99v5-r9g9.json @@ -7,12 +7,8 @@ "CVE-2008-6056" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in World Recipe 2.11 allow remote attackers to inject arbitrary web script or HTML via the (1) n parameter to emailrecipe.aspx, (2) id parameter to recipedetail.aspx, and the (3) catid parameter to validatefieldlength.aspx.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gr45-cvr4-72f3/GHSA-gr45-cvr4-72f3.json b/advisories/unreviewed/2022/05/GHSA-gr45-cvr4-72f3/GHSA-gr45-cvr4-72f3.json index 7f69799b282..39545560adf 100644 --- a/advisories/unreviewed/2022/05/GHSA-gr45-cvr4-72f3/GHSA-gr45-cvr4-72f3.json +++ b/advisories/unreviewed/2022/05/GHSA-gr45-cvr4-72f3/GHSA-gr45-cvr4-72f3.json @@ -7,12 +7,8 @@ "CVE-2010-3891" ], "details": "Cross-site request forgery (CSRF) vulnerability in ESAdmin/security.do in the administrator interface in IBM OmniFind Enterprise Edition before 9.1 allows remote attackers to hijack the authentication of administrators for requests that add an administrative user via a saveNewUser action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gr6h-7m4g-pj7f/GHSA-gr6h-7m4g-pj7f.json b/advisories/unreviewed/2022/05/GHSA-gr6h-7m4g-pj7f/GHSA-gr6h-7m4g-pj7f.json index 326c830e6ed..62cb381c609 100644 --- a/advisories/unreviewed/2022/05/GHSA-gr6h-7m4g-pj7f/GHSA-gr6h-7m4g-pj7f.json +++ b/advisories/unreviewed/2022/05/GHSA-gr6h-7m4g-pj7f/GHSA-gr6h-7m4g-pj7f.json @@ -7,12 +7,8 @@ "CVE-2008-4827" ], "details": "Multiple heap-based buffer overflows in the AddTab method in the (1) Tab and (2) CTab ActiveX controls in c1sizer.ocx and the (3) TabOne ActiveX control in sizerone.ocx in ComponentOne SizerOne 8.0.20081.140, as used in ComponentOne Studio for ActiveX 2008, TSC2 Help Desk 4.1.8, SAP GUI 6.40 Patch 29 and 7.10, and possibly other products, allow remote attackers to execute arbitrary code by adding many tabs, or adding tabs with long tab captions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gv7w-55hp-ch9m/GHSA-gv7w-55hp-ch9m.json b/advisories/unreviewed/2022/05/GHSA-gv7w-55hp-ch9m/GHSA-gv7w-55hp-ch9m.json index b733329c9b4..83c6677a318 100644 --- a/advisories/unreviewed/2022/05/GHSA-gv7w-55hp-ch9m/GHSA-gv7w-55hp-ch9m.json +++ b/advisories/unreviewed/2022/05/GHSA-gv7w-55hp-ch9m/GHSA-gv7w-55hp-ch9m.json @@ -7,12 +7,8 @@ "CVE-2008-7095" ], "details": "The SNMP daemon in ArubaOS 3.3.2.6 in Aruba Mobility Controller does not restrict SNMP access, which allows remote attackers to (1) read all SNMP community strings via SNMP-COMMUNITY-MIB::snmpCommunityName (1.3.6.1.6.3.18.1.1.1.2) or SNMP-VIEW-BASED-ACM-MIB::vacmGroupName (1.3.6.1.6.3.16.1.2.1.3) with knowledge of one community string, and (2) read SNMPv3 user names via SNMP-USER-BASED-SM-MIB or SNMP-VIEW-BASED-ACM-MIB.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gvmg-2852-c2v2/GHSA-gvmg-2852-c2v2.json b/advisories/unreviewed/2022/05/GHSA-gvmg-2852-c2v2/GHSA-gvmg-2852-c2v2.json index 0a2a1732aa7..1a9f4cb5827 100644 --- a/advisories/unreviewed/2022/05/GHSA-gvmg-2852-c2v2/GHSA-gvmg-2852-c2v2.json +++ b/advisories/unreviewed/2022/05/GHSA-gvmg-2852-c2v2/GHSA-gvmg-2852-c2v2.json @@ -7,12 +7,8 @@ "CVE-2008-5229" ], "details": "Stack-based buffer overflow in Microsoft Device IO Control in iphlpapi.dll in Microsoft Windows Vista Gold and SP1 allows local users in the Network Configuration Operator group to gain privileges or cause a denial of service (system crash) via a large invalid PrefixLength to the CreateIpForwardEntry2 method, as demonstrated by a \"route add\" command. NOTE: this issue might not cross privilege boundaries.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gvvf-v65f-jf8j/GHSA-gvvf-v65f-jf8j.json b/advisories/unreviewed/2022/05/GHSA-gvvf-v65f-jf8j/GHSA-gvvf-v65f-jf8j.json index dc54561ebc5..defd7b4b64a 100644 --- a/advisories/unreviewed/2022/05/GHSA-gvvf-v65f-jf8j/GHSA-gvvf-v65f-jf8j.json +++ b/advisories/unreviewed/2022/05/GHSA-gvvf-v65f-jf8j/GHSA-gvvf-v65f-jf8j.json @@ -7,12 +7,8 @@ "CVE-2010-1902" ], "details": "Buffer overflow in Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via unspecified properties in the data in a crafted RTF document, aka \"Word RTF Parsing Buffer Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gx74-hw7g-frrw/GHSA-gx74-hw7g-frrw.json b/advisories/unreviewed/2022/05/GHSA-gx74-hw7g-frrw/GHSA-gx74-hw7g-frrw.json index 4ad59f5a466..8c53ac0920b 100644 --- a/advisories/unreviewed/2022/05/GHSA-gx74-hw7g-frrw/GHSA-gx74-hw7g-frrw.json +++ b/advisories/unreviewed/2022/05/GHSA-gx74-hw7g-frrw/GHSA-gx74-hw7g-frrw.json @@ -7,12 +7,8 @@ "CVE-2008-6200" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Swiki 1.5 allow remote attackers to inject arbitrary web script or HTML via (1) the query string and (2) a new wiki entry.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gx9q-fp62-mw35/GHSA-gx9q-fp62-mw35.json b/advisories/unreviewed/2022/05/GHSA-gx9q-fp62-mw35/GHSA-gx9q-fp62-mw35.json index 0ff70de7e7b..2cd388f81b0 100644 --- a/advisories/unreviewed/2022/05/GHSA-gx9q-fp62-mw35/GHSA-gx9q-fp62-mw35.json +++ b/advisories/unreviewed/2022/05/GHSA-gx9q-fp62-mw35/GHSA-gx9q-fp62-mw35.json @@ -7,12 +7,8 @@ "CVE-2008-6728" ], "details": "SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action to modules.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gxww-rc9c-h62v/GHSA-gxww-rc9c-h62v.json b/advisories/unreviewed/2022/05/GHSA-gxww-rc9c-h62v/GHSA-gxww-rc9c-h62v.json index 279fd3dab12..b795b130597 100644 --- a/advisories/unreviewed/2022/05/GHSA-gxww-rc9c-h62v/GHSA-gxww-rc9c-h62v.json +++ b/advisories/unreviewed/2022/05/GHSA-gxww-rc9c-h62v/GHSA-gxww-rc9c-h62v.json @@ -7,12 +7,8 @@ "CVE-2008-5522" ], "details": "AVG Anti-Virus 8.0.0.161, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h2hx-5hmq-xm34/GHSA-h2hx-5hmq-xm34.json b/advisories/unreviewed/2022/05/GHSA-h2hx-5hmq-xm34/GHSA-h2hx-5hmq-xm34.json index 9bbc47fbc35..4b1a89cb9cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-h2hx-5hmq-xm34/GHSA-h2hx-5hmq-xm34.json +++ b/advisories/unreviewed/2022/05/GHSA-h2hx-5hmq-xm34/GHSA-h2hx-5hmq-xm34.json @@ -7,12 +7,8 @@ "CVE-2010-3241" ], "details": "Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate binary file-format information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka \"Out-of-Bounds Memory Write in Parsing Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h2pj-vj4x-w4fp/GHSA-h2pj-vj4x-w4fp.json b/advisories/unreviewed/2022/05/GHSA-h2pj-vj4x-w4fp/GHSA-h2pj-vj4x-w4fp.json index 399ea014862..87542278be2 100644 --- a/advisories/unreviewed/2022/05/GHSA-h2pj-vj4x-w4fp/GHSA-h2pj-vj4x-w4fp.json +++ b/advisories/unreviewed/2022/05/GHSA-h2pj-vj4x-w4fp/GHSA-h2pj-vj4x-w4fp.json @@ -7,12 +7,8 @@ "CVE-2008-6508" ], "details": "Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to bypass authentication and access the admin interface via a .. (dot dot) in a URI that matches the Exclude-Strings list, as demonstrated by a /setup/setup-/.. sequence in a URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h2vw-w82v-gjxx/GHSA-h2vw-w82v-gjxx.json b/advisories/unreviewed/2022/05/GHSA-h2vw-w82v-gjxx/GHSA-h2vw-w82v-gjxx.json index 1df7248e487..3f43a6a09cc 100644 --- a/advisories/unreviewed/2022/05/GHSA-h2vw-w82v-gjxx/GHSA-h2vw-w82v-gjxx.json +++ b/advisories/unreviewed/2022/05/GHSA-h2vw-w82v-gjxx/GHSA-h2vw-w82v-gjxx.json @@ -7,12 +7,8 @@ "CVE-2008-5870" ], "details": "FastStone Image Viewer 3.6 allows user-assisted attackers to cause a denial of service (application crash) via a malformed BMP image with large width and height values, possibly a related issue to CVE-2007-1942.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h34m-x2pv-cg7h/GHSA-h34m-x2pv-cg7h.json b/advisories/unreviewed/2022/05/GHSA-h34m-x2pv-cg7h/GHSA-h34m-x2pv-cg7h.json index fd76c672958..2f941d5889b 100644 --- a/advisories/unreviewed/2022/05/GHSA-h34m-x2pv-cg7h/GHSA-h34m-x2pv-cg7h.json +++ b/advisories/unreviewed/2022/05/GHSA-h34m-x2pv-cg7h/GHSA-h34m-x2pv-cg7h.json @@ -7,12 +7,8 @@ "CVE-2011-0258" ], "details": "Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted image description associated with an mp4v tag in a movie file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h3pq-gc7r-6m6p/GHSA-h3pq-gc7r-6m6p.json b/advisories/unreviewed/2022/05/GHSA-h3pq-gc7r-6m6p/GHSA-h3pq-gc7r-6m6p.json index 72d3245c584..1c93171edcf 100644 --- a/advisories/unreviewed/2022/05/GHSA-h3pq-gc7r-6m6p/GHSA-h3pq-gc7r-6m6p.json +++ b/advisories/unreviewed/2022/05/GHSA-h3pq-gc7r-6m6p/GHSA-h3pq-gc7r-6m6p.json @@ -7,12 +7,8 @@ "CVE-2008-6584" ], "details": "html/index.php in TorrentFlux 2.3 allows remote authenticated users to execute arbitrary code via a URL with a file containing an executable extension in the url_upload parameter, which is downloaded by TorrentFlux and can be accessed via a direct request in a html/downloads/ user directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h458-3c33-9wh9/GHSA-h458-3c33-9wh9.json b/advisories/unreviewed/2022/05/GHSA-h458-3c33-9wh9/GHSA-h458-3c33-9wh9.json index df42ec84b01..e3afd504a01 100644 --- a/advisories/unreviewed/2022/05/GHSA-h458-3c33-9wh9/GHSA-h458-3c33-9wh9.json +++ b/advisories/unreviewed/2022/05/GHSA-h458-3c33-9wh9/GHSA-h458-3c33-9wh9.json @@ -7,12 +7,8 @@ "CVE-2008-6713" ], "details": "World in Conflict (WIC) 1.008 and earlier allows remote attackers to cause a denial of service (access violation and crash) via a zero-byte data block to TCP port 48000, which triggers a NULL pointer dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h4hc-rm3c-w49f/GHSA-h4hc-rm3c-w49f.json b/advisories/unreviewed/2022/05/GHSA-h4hc-rm3c-w49f/GHSA-h4hc-rm3c-w49f.json index 1dd1f495630..ee01c9fb37f 100644 --- a/advisories/unreviewed/2022/05/GHSA-h4hc-rm3c-w49f/GHSA-h4hc-rm3c-w49f.json +++ b/advisories/unreviewed/2022/05/GHSA-h4hc-rm3c-w49f/GHSA-h4hc-rm3c-w49f.json @@ -7,12 +7,8 @@ "CVE-2008-5440" ], "details": "Unspecified vulnerability in the TimesTen Data Server component in Oracle Database 7.0.5.0.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this is a format string vulnerability via the msg parameter in the evtdump CGI module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h4r7-8jrf-4687/GHSA-h4r7-8jrf-4687.json b/advisories/unreviewed/2022/05/GHSA-h4r7-8jrf-4687/GHSA-h4r7-8jrf-4687.json index 93add9de43b..6ec9a0c159c 100644 --- a/advisories/unreviewed/2022/05/GHSA-h4r7-8jrf-4687/GHSA-h4r7-8jrf-4687.json +++ b/advisories/unreviewed/2022/05/GHSA-h4r7-8jrf-4687/GHSA-h4r7-8jrf-4687.json @@ -7,12 +7,8 @@ "CVE-2010-5024" ], "details": "SQL injection vulnerability in manage/add_user.php in CuteSITE CMS 1.2.3 and 1.5.0 allows remote authenticated users, with Read privileges, to execute arbitrary SQL commands via the user_id parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h5ph-4698-hx9r/GHSA-h5ph-4698-hx9r.json b/advisories/unreviewed/2022/05/GHSA-h5ph-4698-hx9r/GHSA-h5ph-4698-hx9r.json index ddc9ad69477..e6cad2409f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-h5ph-4698-hx9r/GHSA-h5ph-4698-hx9r.json +++ b/advisories/unreviewed/2022/05/GHSA-h5ph-4698-hx9r/GHSA-h5ph-4698-hx9r.json @@ -7,12 +7,8 @@ "CVE-2008-6063" ], "details": "Microsoft Word 2007, when the \"Save as PDF\" add-on is enabled, places an absolute pathname in the Subject field during an \"Email as PDF\" operation, which allows remote attackers to obtain sensitive information such as the sender's account name and a Temporary Internet Files subdirectory name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h74v-j22p-29hp/GHSA-h74v-j22p-29hp.json b/advisories/unreviewed/2022/05/GHSA-h74v-j22p-29hp/GHSA-h74v-j22p-29hp.json index b83fc2ad4e0..2719b49b25e 100644 --- a/advisories/unreviewed/2022/05/GHSA-h74v-j22p-29hp/GHSA-h74v-j22p-29hp.json +++ b/advisories/unreviewed/2022/05/GHSA-h74v-j22p-29hp/GHSA-h74v-j22p-29hp.json @@ -7,12 +7,8 @@ "CVE-2010-4868" ], "details": "Cross-site scripting (XSS) vulnerability in search.php3 (aka search.php) in W-Agora 4.2.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the bn parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h776-w786-6h4h/GHSA-h776-w786-6h4h.json b/advisories/unreviewed/2022/05/GHSA-h776-w786-6h4h/GHSA-h776-w786-6h4h.json index 5a9f018d8b0..51acb9f2309 100644 --- a/advisories/unreviewed/2022/05/GHSA-h776-w786-6h4h/GHSA-h776-w786-6h4h.json +++ b/advisories/unreviewed/2022/05/GHSA-h776-w786-6h4h/GHSA-h776-w786-6h4h.json @@ -7,12 +7,8 @@ "CVE-2008-7111" ], "details": "The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 does not restrict the filenames or extensions of uploaded files, which makes it easier for remote attackers to execute arbitrary code or overwrite files by leveraging CVE-2008-7110 and CVE-2008-7109.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h788-w896-v8j8/GHSA-h788-w896-v8j8.json b/advisories/unreviewed/2022/05/GHSA-h788-w896-v8j8/GHSA-h788-w896-v8j8.json index 41e65844eb0..a8f17da5984 100644 --- a/advisories/unreviewed/2022/05/GHSA-h788-w896-v8j8/GHSA-h788-w896-v8j8.json +++ b/advisories/unreviewed/2022/05/GHSA-h788-w896-v8j8/GHSA-h788-w896-v8j8.json @@ -7,12 +7,8 @@ "CVE-2010-4930" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in @mail Webmail before 6.2.0 allows remote attackers to inject arbitrary web script or HTML via the MailType parameter in a mail/auth/processlogin action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h7rw-gcq3-87vf/GHSA-h7rw-gcq3-87vf.json b/advisories/unreviewed/2022/05/GHSA-h7rw-gcq3-87vf/GHSA-h7rw-gcq3-87vf.json index 7c8290ff3fb..d3e0bd6ef8c 100644 --- a/advisories/unreviewed/2022/05/GHSA-h7rw-gcq3-87vf/GHSA-h7rw-gcq3-87vf.json +++ b/advisories/unreviewed/2022/05/GHSA-h7rw-gcq3-87vf/GHSA-h7rw-gcq3-87vf.json @@ -7,12 +7,8 @@ "CVE-2010-2750" ], "details": "Array index error in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka \"Word Index Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h834-xm8f-qq56/GHSA-h834-xm8f-qq56.json b/advisories/unreviewed/2022/05/GHSA-h834-xm8f-qq56/GHSA-h834-xm8f-qq56.json index 069794616f0..0b9a4d61cbf 100644 --- a/advisories/unreviewed/2022/05/GHSA-h834-xm8f-qq56/GHSA-h834-xm8f-qq56.json +++ b/advisories/unreviewed/2022/05/GHSA-h834-xm8f-qq56/GHSA-h834-xm8f-qq56.json @@ -7,12 +7,8 @@ "CVE-2008-5284" ], "details": "The web server in IEA Software RadiusNT and RadiusX 5.1.38 and other versions before 5.1.44, Emerald 5.0.49 and other versions before 5.0.52, Air Marshal 2.0.4 and other versions before 2.0.8, and Radius test client (aka Radlogin) 4.0.20 and earlier, allows remote attackers to cause a denial of service (crash) via an HTTP Content-Length header with a negative value, which triggers a single byte overwrite of memory using a NULL terminator. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h9c9-vxf6-2qqg/GHSA-h9c9-vxf6-2qqg.json b/advisories/unreviewed/2022/05/GHSA-h9c9-vxf6-2qqg/GHSA-h9c9-vxf6-2qqg.json index a4c3cf95563..4663ef7250f 100644 --- a/advisories/unreviewed/2022/05/GHSA-h9c9-vxf6-2qqg/GHSA-h9c9-vxf6-2qqg.json +++ b/advisories/unreviewed/2022/05/GHSA-h9c9-vxf6-2qqg/GHSA-h9c9-vxf6-2qqg.json @@ -7,12 +7,8 @@ "CVE-2010-4880" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in calendar.class.php in ApPHP Calendar (ApPHP CAL) allow remote attackers to inject arbitrary web script or HTML via the (1) category_name, (2) category_description, (3) event_name, or (4) event_description parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hc53-8x9j-fg2x/GHSA-hc53-8x9j-fg2x.json b/advisories/unreviewed/2022/05/GHSA-hc53-8x9j-fg2x/GHSA-hc53-8x9j-fg2x.json index 3b7869360a5..b1529bcd9e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-hc53-8x9j-fg2x/GHSA-hc53-8x9j-fg2x.json +++ b/advisories/unreviewed/2022/05/GHSA-hc53-8x9j-fg2x/GHSA-hc53-8x9j-fg2x.json @@ -7,12 +7,8 @@ "CVE-2011-0092" ], "details": "The LZW stream decompression functionality in ORMELEMS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 allows remote attackers to execute arbitrary code via a Visio file with a malformed VisioDocument stream that triggers an exception handler that accesses an object that has not been fully initialized, which triggers memory corruption, aka \"Visio Object Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hg7x-qv4j-5cmg/GHSA-hg7x-qv4j-5cmg.json b/advisories/unreviewed/2022/05/GHSA-hg7x-qv4j-5cmg/GHSA-hg7x-qv4j-5cmg.json index ea5f1565ae0..fac6210a09f 100644 --- a/advisories/unreviewed/2022/05/GHSA-hg7x-qv4j-5cmg/GHSA-hg7x-qv4j-5cmg.json +++ b/advisories/unreviewed/2022/05/GHSA-hg7x-qv4j-5cmg/GHSA-hg7x-qv4j-5cmg.json @@ -7,12 +7,8 @@ "CVE-2008-5731" ], "details": "The PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9.9.0 build 397 allows local users to cause a denial of service (system crash) and possibly gain privileges via a certain METHOD_BUFFERED IOCTL request that overwrites portions of memory, related to a \"Driver Collapse.\" NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hggm-r8hf-gwj5/GHSA-hggm-r8hf-gwj5.json b/advisories/unreviewed/2022/05/GHSA-hggm-r8hf-gwj5/GHSA-hggm-r8hf-gwj5.json index 14d0baef733..b83c5acdde9 100644 --- a/advisories/unreviewed/2022/05/GHSA-hggm-r8hf-gwj5/GHSA-hggm-r8hf-gwj5.json +++ b/advisories/unreviewed/2022/05/GHSA-hggm-r8hf-gwj5/GHSA-hggm-r8hf-gwj5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hgwv-fv62-4pqv/GHSA-hgwv-fv62-4pqv.json b/advisories/unreviewed/2022/05/GHSA-hgwv-fv62-4pqv/GHSA-hgwv-fv62-4pqv.json index 7fb2c5eef0e..0ebb27749dd 100644 --- a/advisories/unreviewed/2022/05/GHSA-hgwv-fv62-4pqv/GHSA-hgwv-fv62-4pqv.json +++ b/advisories/unreviewed/2022/05/GHSA-hgwv-fv62-4pqv/GHSA-hgwv-fv62-4pqv.json @@ -7,12 +7,8 @@ "CVE-2008-7060" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in One-News Beta 2 allow remote attackers to inject arbitrary HTML and web script via the (1) title or (2) content parameters in a news item to add.php, and the (3) itemnum, (4) author, or (5) comment parameters in a comment to index.php. NOTE: vectors 1 and 2 require user authentication.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hhfx-8rv5-3qj7/GHSA-hhfx-8rv5-3qj7.json b/advisories/unreviewed/2022/05/GHSA-hhfx-8rv5-3qj7/GHSA-hhfx-8rv5-3qj7.json index 16d11bee6ce..f086f8a1343 100644 --- a/advisories/unreviewed/2022/05/GHSA-hhfx-8rv5-3qj7/GHSA-hhfx-8rv5-3qj7.json +++ b/advisories/unreviewed/2022/05/GHSA-hhfx-8rv5-3qj7/GHSA-hhfx-8rv5-3qj7.json @@ -7,12 +7,8 @@ "CVE-2008-4683" ], "details": "The dissect_btacl function in packet-bthci_acl.c in the Bluetooth ACL dissector in Wireshark 0.99.2 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via a packet with an invalid length, related to an erroneous tvb_memcpy call.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hhjw-fwx5-h53g/GHSA-hhjw-fwx5-h53g.json b/advisories/unreviewed/2022/05/GHSA-hhjw-fwx5-h53g/GHSA-hhjw-fwx5-h53g.json index b89b08c1635..bf2e0a7e7dd 100644 --- a/advisories/unreviewed/2022/05/GHSA-hhjw-fwx5-h53g/GHSA-hhjw-fwx5-h53g.json +++ b/advisories/unreviewed/2022/05/GHSA-hhjw-fwx5-h53g/GHSA-hhjw-fwx5-h53g.json @@ -7,12 +7,8 @@ "CVE-2010-4190" ], "details": "Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Director movie with a crafted CSWV RIFF chunk that causes an incorrect calculation of an offset for a substructure, which causes an out-of-bounds \"seek\" of heap memory, a different vulnerability than CVE-2011-0555, CVE-2010-4093, CVE-2010-4187, CVE-2010-4191, CVE-2010-4192, and CVE-2010-4306.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hj38-j9jq-rjpp/GHSA-hj38-j9jq-rjpp.json b/advisories/unreviewed/2022/05/GHSA-hj38-j9jq-rjpp/GHSA-hj38-j9jq-rjpp.json index 416e9704042..b2b27080ec8 100644 --- a/advisories/unreviewed/2022/05/GHSA-hj38-j9jq-rjpp/GHSA-hj38-j9jq-rjpp.json +++ b/advisories/unreviewed/2022/05/GHSA-hj38-j9jq-rjpp/GHSA-hj38-j9jq-rjpp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hj53-2vf5-rh93/GHSA-hj53-2vf5-rh93.json b/advisories/unreviewed/2022/05/GHSA-hj53-2vf5-rh93/GHSA-hj53-2vf5-rh93.json index eb882a65bb3..965af87c641 100644 --- a/advisories/unreviewed/2022/05/GHSA-hj53-2vf5-rh93/GHSA-hj53-2vf5-rh93.json +++ b/advisories/unreviewed/2022/05/GHSA-hj53-2vf5-rh93/GHSA-hj53-2vf5-rh93.json @@ -7,12 +7,8 @@ "CVE-2008-4684" ], "details": "packet-frame in Wireshark 0.99.2 through 1.0.3 does not properly handle exceptions thrown by post dissectors, which allows remote attackers to cause a denial of service (application crash) via a certain series of packets, as demonstrated by enabling the (1) PRP or (2) MATE post dissector.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hjh4-wxxw-fcrw/GHSA-hjh4-wxxw-fcrw.json b/advisories/unreviewed/2022/05/GHSA-hjh4-wxxw-fcrw/GHSA-hjh4-wxxw-fcrw.json index 2db8363c985..e026dc4afcd 100644 --- a/advisories/unreviewed/2022/05/GHSA-hjh4-wxxw-fcrw/GHSA-hjh4-wxxw-fcrw.json +++ b/advisories/unreviewed/2022/05/GHSA-hjh4-wxxw-fcrw/GHSA-hjh4-wxxw-fcrw.json @@ -7,12 +7,8 @@ "CVE-2010-5030" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to inject arbitrary web script or HTML via the lang parameter in a web action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hqv5-49rw-222p/GHSA-hqv5-49rw-222p.json b/advisories/unreviewed/2022/05/GHSA-hqv5-49rw-222p/GHSA-hqv5-49rw-222p.json index 3a3e377cdb7..7d408ff2565 100644 --- a/advisories/unreviewed/2022/05/GHSA-hqv5-49rw-222p/GHSA-hqv5-49rw-222p.json +++ b/advisories/unreviewed/2022/05/GHSA-hqv5-49rw-222p/GHSA-hqv5-49rw-222p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hqxm-hj8w-47m4/GHSA-hqxm-hj8w-47m4.json b/advisories/unreviewed/2022/05/GHSA-hqxm-hj8w-47m4/GHSA-hqxm-hj8w-47m4.json index 88cf3528535..19b47c08d1b 100644 --- a/advisories/unreviewed/2022/05/GHSA-hqxm-hj8w-47m4/GHSA-hqxm-hj8w-47m4.json +++ b/advisories/unreviewed/2022/05/GHSA-hqxm-hj8w-47m4/GHSA-hqxm-hj8w-47m4.json @@ -7,12 +7,8 @@ "CVE-2008-6591" ], "details": "LightNEasy \"no database\" (aka flat) version 1.2.2, and possibly SQLite version 1.2.2, allows remote attackers to create arbitrary files via the page parameter to (1) index.php and (2) LightNEasy.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hrm3-68f9-5g6j/GHSA-hrm3-68f9-5g6j.json b/advisories/unreviewed/2022/05/GHSA-hrm3-68f9-5g6j/GHSA-hrm3-68f9-5g6j.json index 00f61d4d135..a1c459e2ca8 100644 --- a/advisories/unreviewed/2022/05/GHSA-hrm3-68f9-5g6j/GHSA-hrm3-68f9-5g6j.json +++ b/advisories/unreviewed/2022/05/GHSA-hrm3-68f9-5g6j/GHSA-hrm3-68f9-5g6j.json @@ -7,12 +7,8 @@ "CVE-2008-4725" ], "details": "Cross-site scripting (XSS) vulnerability in Opera.dll in Opera 9.52 allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly escaped before storage in the History Search database (aka md.dat), a different vector than CVE-2008-4696. NOTE: some of these issues were addressed before 9.60.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hrm9-4xwc-pjv8/GHSA-hrm9-4xwc-pjv8.json b/advisories/unreviewed/2022/05/GHSA-hrm9-4xwc-pjv8/GHSA-hrm9-4xwc-pjv8.json index 1c64d4a8ffb..4a93f9e619b 100644 --- a/advisories/unreviewed/2022/05/GHSA-hrm9-4xwc-pjv8/GHSA-hrm9-4xwc-pjv8.json +++ b/advisories/unreviewed/2022/05/GHSA-hrm9-4xwc-pjv8/GHSA-hrm9-4xwc-pjv8.json @@ -7,12 +7,8 @@ "CVE-2008-6843" ], "details": "Directory traversal vulnerability in index.php in Fantastico, as used with cPanel 11.x, allows remote attackers to read arbitrary files via a .. (dot dot) in the sup3r parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hv6c-6rww-5vx8/GHSA-hv6c-6rww-5vx8.json b/advisories/unreviewed/2022/05/GHSA-hv6c-6rww-5vx8/GHSA-hv6c-6rww-5vx8.json index bfea08f73df..2956b9739ba 100644 --- a/advisories/unreviewed/2022/05/GHSA-hv6c-6rww-5vx8/GHSA-hv6c-6rww-5vx8.json +++ b/advisories/unreviewed/2022/05/GHSA-hv6c-6rww-5vx8/GHSA-hv6c-6rww-5vx8.json @@ -7,12 +7,8 @@ "CVE-2008-5530" ], "details": "Ewido Security Suite 4.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hv8v-8gq8-6q29/GHSA-hv8v-8gq8-6q29.json b/advisories/unreviewed/2022/05/GHSA-hv8v-8gq8-6q29/GHSA-hv8v-8gq8-6q29.json index d5dd91dbace..842456e8364 100644 --- a/advisories/unreviewed/2022/05/GHSA-hv8v-8gq8-6q29/GHSA-hv8v-8gq8-6q29.json +++ b/advisories/unreviewed/2022/05/GHSA-hv8v-8gq8-6q29/GHSA-hv8v-8gq8-6q29.json @@ -7,12 +7,8 @@ "CVE-2010-3762" ], "details": "ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled, does not properly handle certain bad signatures if multiple trust anchors exist for a single zone, which allows remote attackers to cause a denial of service (daemon crash) via a DNS query.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hw4f-rwcw-rpqj/GHSA-hw4f-rwcw-rpqj.json b/advisories/unreviewed/2022/05/GHSA-hw4f-rwcw-rpqj/GHSA-hw4f-rwcw-rpqj.json index 3a57047cdc5..94ff1a7c9a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-hw4f-rwcw-rpqj/GHSA-hw4f-rwcw-rpqj.json +++ b/advisories/unreviewed/2022/05/GHSA-hw4f-rwcw-rpqj/GHSA-hw4f-rwcw-rpqj.json @@ -7,12 +7,8 @@ "CVE-2008-5538" ], "details": "Prevx Prevx1 2, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hxc4-2cq3-gm3w/GHSA-hxc4-2cq3-gm3w.json b/advisories/unreviewed/2022/05/GHSA-hxc4-2cq3-gm3w/GHSA-hxc4-2cq3-gm3w.json index 1a6e5a1959a..1fd510f145f 100644 --- a/advisories/unreviewed/2022/05/GHSA-hxc4-2cq3-gm3w/GHSA-hxc4-2cq3-gm3w.json +++ b/advisories/unreviewed/2022/05/GHSA-hxc4-2cq3-gm3w/GHSA-hxc4-2cq3-gm3w.json @@ -7,12 +7,8 @@ "CVE-2010-3984" ], "details": "Buffer overflow in mng_core_com.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft Content Distribution r12.0 SP1 and r12.5 SP2 rollup, and CA ARCserve Replication and High Availability (RHA) r15.0 SP1 allows remote attackers to execute arbitrary code via a crafted create_session_bab operation in a SOAP request to xosoapapi.asmx.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hxp6-963m-8348/GHSA-hxp6-963m-8348.json b/advisories/unreviewed/2022/05/GHSA-hxp6-963m-8348/GHSA-hxp6-963m-8348.json index cc61f4a1e85..bb0baa08eaf 100644 --- a/advisories/unreviewed/2022/05/GHSA-hxp6-963m-8348/GHSA-hxp6-963m-8348.json +++ b/advisories/unreviewed/2022/05/GHSA-hxp6-963m-8348/GHSA-hxp6-963m-8348.json @@ -7,12 +7,8 @@ "CVE-2008-5116" ], "details": "Directory traversal vulnerability in idm/includes/helpServer.jsp in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to read arbitrary files in the filesystem of the IDM server via directory traversal sequences in the ext parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hxxh-mvfp-pm76/GHSA-hxxh-mvfp-pm76.json b/advisories/unreviewed/2022/05/GHSA-hxxh-mvfp-pm76/GHSA-hxxh-mvfp-pm76.json index be19593b3d9..7c68399fdc7 100644 --- a/advisories/unreviewed/2022/05/GHSA-hxxh-mvfp-pm76/GHSA-hxxh-mvfp-pm76.json +++ b/advisories/unreviewed/2022/05/GHSA-hxxh-mvfp-pm76/GHSA-hxxh-mvfp-pm76.json @@ -7,12 +7,8 @@ "CVE-2010-1881" ], "details": "The FieldList ActiveX control in the Microsoft Access Wizard Controls in ACCWIZ.dll in Microsoft Office Access 2003 SP3 does not properly interact with the memory-access approach used by Internet Explorer and Office during instantiation, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTML document that references this control along with crafted persistent storage data, aka \"ACCWIZ.dll Uninitialized Variable Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j27v-pj6v-rp49/GHSA-j27v-pj6v-rp49.json b/advisories/unreviewed/2022/05/GHSA-j27v-pj6v-rp49/GHSA-j27v-pj6v-rp49.json index 6902c84e37f..dc6fa3788b3 100644 --- a/advisories/unreviewed/2022/05/GHSA-j27v-pj6v-rp49/GHSA-j27v-pj6v-rp49.json +++ b/advisories/unreviewed/2022/05/GHSA-j27v-pj6v-rp49/GHSA-j27v-pj6v-rp49.json @@ -7,12 +7,8 @@ "CVE-2008-5828" ], "details": "Microsoft Windows Live Messenger Client 8.5.1 and earlier, when MSN Protocol Version 15 (MSNP15) is used over a NAT session, allows remote attackers to discover intranet IP addresses and port numbers by reading the (1) IPv4InternalAddrsAndPorts, (2) IPv4Internal-Addrs, and (3) IPv4Internal-Port header fields.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j28j-44j3-4pf2/GHSA-j28j-44j3-4pf2.json b/advisories/unreviewed/2022/05/GHSA-j28j-44j3-4pf2/GHSA-j28j-44j3-4pf2.json index 136e09ae3bf..373f021ef50 100644 --- a/advisories/unreviewed/2022/05/GHSA-j28j-44j3-4pf2/GHSA-j28j-44j3-4pf2.json +++ b/advisories/unreviewed/2022/05/GHSA-j28j-44j3-4pf2/GHSA-j28j-44j3-4pf2.json @@ -7,12 +7,8 @@ "CVE-2008-4762" ], "details": "Stack-based buffer overflow in freeSSHd 1.2.1 allows remote authenticated users to cause a denial of service (service crash) and potentially execute arbitrary code via a long argument to the (1) rename and (2) realpath parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j2m3-6m57-7jjv/GHSA-j2m3-6m57-7jjv.json b/advisories/unreviewed/2022/05/GHSA-j2m3-6m57-7jjv/GHSA-j2m3-6m57-7jjv.json index 829d8801aae..89807f7a73a 100644 --- a/advisories/unreviewed/2022/05/GHSA-j2m3-6m57-7jjv/GHSA-j2m3-6m57-7jjv.json +++ b/advisories/unreviewed/2022/05/GHSA-j2m3-6m57-7jjv/GHSA-j2m3-6m57-7jjv.json @@ -7,12 +7,8 @@ "CVE-2008-7061" ], "details": "The tooltip manager (chrome/views/tooltip_manager.cc) in Google Chrome 0.2.149.29 Build 1798 and possibly other versions before 0.2.149.30 allows remote attackers to cause a denial of service (CPU consumption or crash) via a tag with a long title attribute, which is not properly handled when displaying a tooltip, a different vulnerability than CVE-2008-6994. NOTE: there is inconsistent information about the environments under which this issue exists.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j395-pgw8-whr3/GHSA-j395-pgw8-whr3.json b/advisories/unreviewed/2022/05/GHSA-j395-pgw8-whr3/GHSA-j395-pgw8-whr3.json index d590dc2abb0..80114848c43 100644 --- a/advisories/unreviewed/2022/05/GHSA-j395-pgw8-whr3/GHSA-j395-pgw8-whr3.json +++ b/advisories/unreviewed/2022/05/GHSA-j395-pgw8-whr3/GHSA-j395-pgw8-whr3.json @@ -7,12 +7,8 @@ "CVE-2008-4681" ], "details": "Unspecified vulnerability in the Bluetooth RFCOMM dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via unknown packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j4cq-cj3p-h367/GHSA-j4cq-cj3p-h367.json b/advisories/unreviewed/2022/05/GHSA-j4cq-cj3p-h367/GHSA-j4cq-cj3p-h367.json index df3b3a3b65e..3d3038fdb8b 100644 --- a/advisories/unreviewed/2022/05/GHSA-j4cq-cj3p-h367/GHSA-j4cq-cj3p-h367.json +++ b/advisories/unreviewed/2022/05/GHSA-j4cq-cj3p-h367/GHSA-j4cq-cj3p-h367.json @@ -7,12 +7,8 @@ "CVE-2008-6775" ], "details": "HTC Touch Pro and HTC Touch Cruise vCard allows remote attackers to cause denial of service (CPU consumption, SMS consumption, and connectivity loss) via a flood of vCards to UDP port 9204.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j4qq-7qwm-w2p2/GHSA-j4qq-7qwm-w2p2.json b/advisories/unreviewed/2022/05/GHSA-j4qq-7qwm-w2p2/GHSA-j4qq-7qwm-w2p2.json index 8e357e5d576..c62a3077752 100644 --- a/advisories/unreviewed/2022/05/GHSA-j4qq-7qwm-w2p2/GHSA-j4qq-7qwm-w2p2.json +++ b/advisories/unreviewed/2022/05/GHSA-j4qq-7qwm-w2p2/GHSA-j4qq-7qwm-w2p2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j567-hhpj-mqh2/GHSA-j567-hhpj-mqh2.json b/advisories/unreviewed/2022/05/GHSA-j567-hhpj-mqh2/GHSA-j567-hhpj-mqh2.json index d053d4f10b4..bf21a4ae5f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-j567-hhpj-mqh2/GHSA-j567-hhpj-mqh2.json +++ b/advisories/unreviewed/2022/05/GHSA-j567-hhpj-mqh2/GHSA-j567-hhpj-mqh2.json @@ -7,12 +7,8 @@ "CVE-2008-7030" ], "details": "Multiple SQL injection vulnerabilities in Site2Nite Real Estate Web allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field to an unspecified component, possibly agentlist.asp. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j5q2-839v-3446/GHSA-j5q2-839v-3446.json b/advisories/unreviewed/2022/05/GHSA-j5q2-839v-3446/GHSA-j5q2-839v-3446.json index 2284ff66696..c7a7334ca09 100644 --- a/advisories/unreviewed/2022/05/GHSA-j5q2-839v-3446/GHSA-j5q2-839v-3446.json +++ b/advisories/unreviewed/2022/05/GHSA-j5q2-839v-3446/GHSA-j5q2-839v-3446.json @@ -7,12 +7,8 @@ "CVE-2008-7089" ], "details": "Cross-site scripting (XSS) vulnerability in Pligg 9.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the keyword parameter in a search action to user.php and other unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j62j-v7xw-jfcc/GHSA-j62j-v7xw-jfcc.json b/advisories/unreviewed/2022/05/GHSA-j62j-v7xw-jfcc/GHSA-j62j-v7xw-jfcc.json index df67a602d47..0d9b4b214e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-j62j-v7xw-jfcc/GHSA-j62j-v7xw-jfcc.json +++ b/advisories/unreviewed/2022/05/GHSA-j62j-v7xw-jfcc/GHSA-j62j-v7xw-jfcc.json @@ -7,12 +7,8 @@ "CVE-2010-5049" ], "details": "SQL injection vulnerability in events.php in Zabbix 1.8.1 and earlier allows remote attackers to execute arbitrary SQL commands via the nav_time parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j6h9-29jj-pxjv/GHSA-j6h9-29jj-pxjv.json b/advisories/unreviewed/2022/05/GHSA-j6h9-29jj-pxjv/GHSA-j6h9-29jj-pxjv.json index 50506ef02e5..978c3596745 100644 --- a/advisories/unreviewed/2022/05/GHSA-j6h9-29jj-pxjv/GHSA-j6h9-29jj-pxjv.json +++ b/advisories/unreviewed/2022/05/GHSA-j6h9-29jj-pxjv/GHSA-j6h9-29jj-pxjv.json @@ -7,12 +7,8 @@ "CVE-2008-5426" ], "details": "Kaspersky Internet Security Suite 2009 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many \"Content-type: message/rfc822;\" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j7wh-2prr-hc43/GHSA-j7wh-2prr-hc43.json b/advisories/unreviewed/2022/05/GHSA-j7wh-2prr-hc43/GHSA-j7wh-2prr-hc43.json index bf234c292dd..8a5669a6b62 100644 --- a/advisories/unreviewed/2022/05/GHSA-j7wh-2prr-hc43/GHSA-j7wh-2prr-hc43.json +++ b/advisories/unreviewed/2022/05/GHSA-j7wh-2prr-hc43/GHSA-j7wh-2prr-hc43.json @@ -7,12 +7,8 @@ "CVE-2010-2564" ], "details": "Buffer overflow in Microsoft Windows Movie Maker (WMM) 2.1, 2.6, and 6.0 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted project file, aka \"Movie Maker Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j8gv-9x2g-gmwj/GHSA-j8gv-9x2g-gmwj.json b/advisories/unreviewed/2022/05/GHSA-j8gv-9x2g-gmwj/GHSA-j8gv-9x2g-gmwj.json index 8996612094f..2be0c1ff8b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-j8gv-9x2g-gmwj/GHSA-j8gv-9x2g-gmwj.json +++ b/advisories/unreviewed/2022/05/GHSA-j8gv-9x2g-gmwj/GHSA-j8gv-9x2g-gmwj.json @@ -7,12 +7,8 @@ "CVE-2008-5431" ], "details": "Teamtek Universal FTP Server 1.0.44 allows remote attackers to cause a denial of service via (1) a certain CWD command, (2) a long LIST command, or (3) a certain PORT command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j8mf-xx3p-jgjq/GHSA-j8mf-xx3p-jgjq.json b/advisories/unreviewed/2022/05/GHSA-j8mf-xx3p-jgjq/GHSA-j8mf-xx3p-jgjq.json index 82ff99c5400..82e5269c610 100644 --- a/advisories/unreviewed/2022/05/GHSA-j8mf-xx3p-jgjq/GHSA-j8mf-xx3p-jgjq.json +++ b/advisories/unreviewed/2022/05/GHSA-j8mf-xx3p-jgjq/GHSA-j8mf-xx3p-jgjq.json @@ -7,12 +7,8 @@ "CVE-2008-5700" ], "details": "libata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SG_IO requests, which allows local users to cause a denial of service (Programmed I/O mode on drives) via multiple simultaneous invocations of an unspecified test program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -124,9 +120,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j92f-xw2p-xfrr/GHSA-j92f-xw2p-xfrr.json b/advisories/unreviewed/2022/05/GHSA-j92f-xw2p-xfrr/GHSA-j92f-xw2p-xfrr.json index 84e31ec010f..c2d7dde05e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-j92f-xw2p-xfrr/GHSA-j92f-xw2p-xfrr.json +++ b/advisories/unreviewed/2022/05/GHSA-j92f-xw2p-xfrr/GHSA-j92f-xw2p-xfrr.json @@ -7,12 +7,8 @@ "CVE-2010-4282" ], "details": "Multiple directory traversal vulnerabilities in Pandora FMS before 3.1.1 allow remote attackers to include and execute arbitrary local files via (1) the page parameter to ajax.php or (2) the id parameter to general/pandora_help.php, and allow remote attackers to include and execute, create, modify, or delete arbitrary local files via (3) the layout parameter to operation/agentes/networkmap.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j9q4-c7cr-r2mp/GHSA-j9q4-c7cr-r2mp.json b/advisories/unreviewed/2022/05/GHSA-j9q4-c7cr-r2mp/GHSA-j9q4-c7cr-r2mp.json index 41163a54fc4..b95be82d085 100644 --- a/advisories/unreviewed/2022/05/GHSA-j9q4-c7cr-r2mp/GHSA-j9q4-c7cr-r2mp.json +++ b/advisories/unreviewed/2022/05/GHSA-j9q4-c7cr-r2mp/GHSA-j9q4-c7cr-r2mp.json @@ -7,12 +7,8 @@ "CVE-2008-6846" ], "details": "Multiple stack-based buffer overflows in avast! Linux Home Edition 1.0.5, 1.0.5-1, and 1.0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via a malformed (1) ISO or (2) RPM file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j9qq-p6mw-h9pq/GHSA-j9qq-p6mw-h9pq.json b/advisories/unreviewed/2022/05/GHSA-j9qq-p6mw-h9pq/GHSA-j9qq-p6mw-h9pq.json index 620b7ff5c29..c7b5a6e393b 100644 --- a/advisories/unreviewed/2022/05/GHSA-j9qq-p6mw-h9pq/GHSA-j9qq-p6mw-h9pq.json +++ b/advisories/unreviewed/2022/05/GHSA-j9qq-p6mw-h9pq/GHSA-j9qq-p6mw-h9pq.json @@ -7,12 +7,8 @@ "CVE-2008-4788" ], "details": "Microsoft Internet Explorer 6 omits high-bit URL-encoded characters when displaying the address bar, which allows remote attackers to spoof the address bar via a URL with a domain name that differs from an important domain name only in these characters, as demonstrated by using exam%A9ple.com to spoof example.com, aka MSRC ticket MSRC7900.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jc7j-gx5r-wrwp/GHSA-jc7j-gx5r-wrwp.json b/advisories/unreviewed/2022/05/GHSA-jc7j-gx5r-wrwp/GHSA-jc7j-gx5r-wrwp.json index e8bc7dde9e6..e5ffff536b9 100644 --- a/advisories/unreviewed/2022/05/GHSA-jc7j-gx5r-wrwp/GHSA-jc7j-gx5r-wrwp.json +++ b/advisories/unreviewed/2022/05/GHSA-jc7j-gx5r-wrwp/GHSA-jc7j-gx5r-wrwp.json @@ -7,12 +7,8 @@ "CVE-2008-5537" ], "details": "PC Tools AntiVirus 4.4.2.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jc8v-wj8g-cw4m/GHSA-jc8v-wj8g-cw4m.json b/advisories/unreviewed/2022/05/GHSA-jc8v-wj8g-cw4m/GHSA-jc8v-wj8g-cw4m.json index f88fa038295..fd984ee227a 100644 --- a/advisories/unreviewed/2022/05/GHSA-jc8v-wj8g-cw4m/GHSA-jc8v-wj8g-cw4m.json +++ b/advisories/unreviewed/2022/05/GHSA-jc8v-wj8g-cw4m/GHSA-jc8v-wj8g-cw4m.json @@ -7,12 +7,8 @@ "CVE-2008-5402" ], "details": "Double free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a crafted XML expression, related to the \"IMG SRC ID.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jch4-5383-w2vq/GHSA-jch4-5383-w2vq.json b/advisories/unreviewed/2022/05/GHSA-jch4-5383-w2vq/GHSA-jch4-5383-w2vq.json index 7ae5ae63f07..0f50dc52e9f 100644 --- a/advisories/unreviewed/2022/05/GHSA-jch4-5383-w2vq/GHSA-jch4-5383-w2vq.json +++ b/advisories/unreviewed/2022/05/GHSA-jch4-5383-w2vq/GHSA-jch4-5383-w2vq.json @@ -7,12 +7,8 @@ "CVE-2010-4161" ], "details": "The udp_queue_rcv_skb function in net/ipv4/udp.c in a certain Red Hat build of the Linux kernel 2.6.18 in Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (deadlock and system hang) by sending UDP traffic to a socket that has a crafted socket filter, a related issue to CVE-2010-4158.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jcx3-6qqp-pp92/GHSA-jcx3-6qqp-pp92.json b/advisories/unreviewed/2022/05/GHSA-jcx3-6qqp-pp92/GHSA-jcx3-6qqp-pp92.json index c070a6f3c33..eb0e4c63ae2 100644 --- a/advisories/unreviewed/2022/05/GHSA-jcx3-6qqp-pp92/GHSA-jcx3-6qqp-pp92.json +++ b/advisories/unreviewed/2022/05/GHSA-jcx3-6qqp-pp92/GHSA-jcx3-6qqp-pp92.json @@ -7,12 +7,8 @@ "CVE-2010-4280" ], "details": "Multiple SQL injection vulnerabilities in Pandora FMS before 3.1.1 allow remote authenticated users to execute arbitrary SQL commands via (1) the id_group parameter in an operation/agentes/ver_agente action to ajax.php or (2) the group_id parameter in an operation/agentes/estado_agente action to index.php, related to operation/agentes/estado_agente.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jf24-554x-42mw/GHSA-jf24-554x-42mw.json b/advisories/unreviewed/2022/05/GHSA-jf24-554x-42mw/GHSA-jf24-554x-42mw.json index e29a43238e7..d8c6cd2dfab 100644 --- a/advisories/unreviewed/2022/05/GHSA-jf24-554x-42mw/GHSA-jf24-554x-42mw.json +++ b/advisories/unreviewed/2022/05/GHSA-jf24-554x-42mw/GHSA-jf24-554x-42mw.json @@ -7,12 +7,8 @@ "CVE-2008-4682" ], "details": "wtap.c in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application abort) via a malformed Tamos CommView capture file (aka .ncf file) with an \"unknown/unexpected packet type\" that triggers a failed assertion.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jf69-v79x-2mpc/GHSA-jf69-v79x-2mpc.json b/advisories/unreviewed/2022/05/GHSA-jf69-v79x-2mpc/GHSA-jf69-v79x-2mpc.json index dd25ca5cb9f..04aa2171cd8 100644 --- a/advisories/unreviewed/2022/05/GHSA-jf69-v79x-2mpc/GHSA-jf69-v79x-2mpc.json +++ b/advisories/unreviewed/2022/05/GHSA-jf69-v79x-2mpc/GHSA-jf69-v79x-2mpc.json @@ -7,12 +7,8 @@ "CVE-2008-6845" ], "details": "The unpack feature in ClamAV 0.93.3 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a corrupted LZH file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jfj3-65wx-x2c9/GHSA-jfj3-65wx-x2c9.json b/advisories/unreviewed/2022/05/GHSA-jfj3-65wx-x2c9/GHSA-jfj3-65wx-x2c9.json index dfd6140fd08..02b69318c9c 100644 --- a/advisories/unreviewed/2022/05/GHSA-jfj3-65wx-x2c9/GHSA-jfj3-65wx-x2c9.json +++ b/advisories/unreviewed/2022/05/GHSA-jfj3-65wx-x2c9/GHSA-jfj3-65wx-x2c9.json @@ -7,12 +7,8 @@ "CVE-2008-6435" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in phpSQLiteCMS 1 RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) lang[home], (2) lang[admin_menu], and (3) lang[admin_menu_page_overview] parameters to cms/includes/header.inc.php; and the (4) lang[login_username] and (5) lang[login_password] parameters to cms/includes/login.inc.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jfpp-cqw2-38m3/GHSA-jfpp-cqw2-38m3.json b/advisories/unreviewed/2022/05/GHSA-jfpp-cqw2-38m3/GHSA-jfpp-cqw2-38m3.json index bdaa728b433..74fb0d03c04 100644 --- a/advisories/unreviewed/2022/05/GHSA-jfpp-cqw2-38m3/GHSA-jfpp-cqw2-38m3.json +++ b/advisories/unreviewed/2022/05/GHSA-jfpp-cqw2-38m3/GHSA-jfpp-cqw2-38m3.json @@ -7,12 +7,8 @@ "CVE-2008-7244" ], "details": "Mozilla Firefox 3.0.1 and earlier allows remote attackers to cause a denial of service (browser hang) by calling the window.print function in a loop, aka a \"printing DoS attack,\" possibly a related issue to CVE-2009-0821.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jfwm-528r-fhxv/GHSA-jfwm-528r-fhxv.json b/advisories/unreviewed/2022/05/GHSA-jfwm-528r-fhxv/GHSA-jfwm-528r-fhxv.json index 84ab7225faa..446ff65679b 100644 --- a/advisories/unreviewed/2022/05/GHSA-jfwm-528r-fhxv/GHSA-jfwm-528r-fhxv.json +++ b/advisories/unreviewed/2022/05/GHSA-jfwm-528r-fhxv/GHSA-jfwm-528r-fhxv.json @@ -7,12 +7,8 @@ "CVE-2010-4874" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in users.php in NinkoBB 1.3 RC5 allow remote attackers to inject arbitrary web script or HTML via the (1) first_name, (2) last_name, (3) msn, or (4) aim parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jg3w-mqv8-94g3/GHSA-jg3w-mqv8-94g3.json b/advisories/unreviewed/2022/05/GHSA-jg3w-mqv8-94g3/GHSA-jg3w-mqv8-94g3.json index bc803abe1ce..bf3e2003496 100644 --- a/advisories/unreviewed/2022/05/GHSA-jg3w-mqv8-94g3/GHSA-jg3w-mqv8-94g3.json +++ b/advisories/unreviewed/2022/05/GHSA-jg3w-mqv8-94g3/GHSA-jg3w-mqv8-94g3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jggr-wh5p-v9vq/GHSA-jggr-wh5p-v9vq.json b/advisories/unreviewed/2022/05/GHSA-jggr-wh5p-v9vq/GHSA-jggr-wh5p-v9vq.json index 7046bd94321..940795a6d81 100644 --- a/advisories/unreviewed/2022/05/GHSA-jggr-wh5p-v9vq/GHSA-jggr-wh5p-v9vq.json +++ b/advisories/unreviewed/2022/05/GHSA-jggr-wh5p-v9vq/GHSA-jggr-wh5p-v9vq.json @@ -7,12 +7,8 @@ "CVE-2008-6431" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in BMForum 5.6 allow remote attackers to inject arbitrary web script or HTML via the (1) outpused parameter to index.php, the (2) footer_copyright and (3) verandproname parameters to newtem/footer/bsd01footer.php, and the (4) topads and (5) myplugin parameters to newtem/header/bsd01header.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jm5p-667w-f236/GHSA-jm5p-667w-f236.json b/advisories/unreviewed/2022/05/GHSA-jm5p-667w-f236/GHSA-jm5p-667w-f236.json index f94700473c6..125882a69f4 100644 --- a/advisories/unreviewed/2022/05/GHSA-jm5p-667w-f236/GHSA-jm5p-667w-f236.json +++ b/advisories/unreviewed/2022/05/GHSA-jm5p-667w-f236/GHSA-jm5p-667w-f236.json @@ -7,12 +7,8 @@ "CVE-2008-7268" ], "details": "The phpinfo function in SiteEngine 5.x allows remote attackers to obtain system information by setting the action parameter to php_info in misc.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jmqp-g8hx-fqqc/GHSA-jmqp-g8hx-fqqc.json b/advisories/unreviewed/2022/05/GHSA-jmqp-g8hx-fqqc/GHSA-jmqp-g8hx-fqqc.json index 0f8fb0db268..5012137d3db 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmqp-g8hx-fqqc/GHSA-jmqp-g8hx-fqqc.json +++ b/advisories/unreviewed/2022/05/GHSA-jmqp-g8hx-fqqc/GHSA-jmqp-g8hx-fqqc.json @@ -7,12 +7,8 @@ "CVE-2010-5046" ], "details": "Cross-site scripting (XSS) vulnerability in admin.php in ecoCMS allows remote attackers to inject arbitrary web script or HTML via the p parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jmqp-vg78-6cv7/GHSA-jmqp-vg78-6cv7.json b/advisories/unreviewed/2022/05/GHSA-jmqp-vg78-6cv7/GHSA-jmqp-vg78-6cv7.json index a1369c434c2..6cc20cae9f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmqp-vg78-6cv7/GHSA-jmqp-vg78-6cv7.json +++ b/advisories/unreviewed/2022/05/GHSA-jmqp-vg78-6cv7/GHSA-jmqp-vg78-6cv7.json @@ -7,12 +7,8 @@ "CVE-2008-6760" ], "details": "ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via an unauthenticated add and save action for a shopping cart in cart_save.php, which reveals the SQL table names in an error message, related to code that mishandles the lack of a user_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jp7v-h4m9-4fwg/GHSA-jp7v-h4m9-4fwg.json b/advisories/unreviewed/2022/05/GHSA-jp7v-h4m9-4fwg/GHSA-jp7v-h4m9-4fwg.json index affacefda5b..333918b5724 100644 --- a/advisories/unreviewed/2022/05/GHSA-jp7v-h4m9-4fwg/GHSA-jp7v-h4m9-4fwg.json +++ b/advisories/unreviewed/2022/05/GHSA-jp7v-h4m9-4fwg/GHSA-jp7v-h4m9-4fwg.json @@ -7,12 +7,8 @@ "CVE-2008-6953" ], "details": "Buffer overflow in oovoo.exe in ooVoo 1.7.1.35, and possibly other versions before 1.7.1.59, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long oovoo: URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jpgq-g76m-35jv/GHSA-jpgq-g76m-35jv.json b/advisories/unreviewed/2022/05/GHSA-jpgq-g76m-35jv/GHSA-jpgq-g76m-35jv.json index ea5b8f8e34b..c17f96c2819 100644 --- a/advisories/unreviewed/2022/05/GHSA-jpgq-g76m-35jv/GHSA-jpgq-g76m-35jv.json +++ b/advisories/unreviewed/2022/05/GHSA-jpgq-g76m-35jv/GHSA-jpgq-g76m-35jv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jpmg-3wrf-2xq2/GHSA-jpmg-3wrf-2xq2.json b/advisories/unreviewed/2022/05/GHSA-jpmg-3wrf-2xq2/GHSA-jpmg-3wrf-2xq2.json index e3efe1b69ea..a602d2ff444 100644 --- a/advisories/unreviewed/2022/05/GHSA-jpmg-3wrf-2xq2/GHSA-jpmg-3wrf-2xq2.json +++ b/advisories/unreviewed/2022/05/GHSA-jpmg-3wrf-2xq2/GHSA-jpmg-3wrf-2xq2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jv67-453q-wxm3/GHSA-jv67-453q-wxm3.json b/advisories/unreviewed/2022/05/GHSA-jv67-453q-wxm3/GHSA-jv67-453q-wxm3.json index dc1984714e6..7fe75ca5f0d 100644 --- a/advisories/unreviewed/2022/05/GHSA-jv67-453q-wxm3/GHSA-jv67-453q-wxm3.json +++ b/advisories/unreviewed/2022/05/GHSA-jv67-453q-wxm3/GHSA-jv67-453q-wxm3.json @@ -7,12 +7,8 @@ "CVE-2008-5032" ], "details": "Stack-based buffer overflow in VideoLAN VLC media player 0.5.0 through 0.9.5 might allow user-assisted attackers to execute arbitrary code via the header of an invalid CUE image file, related to modules/access/vcd/cdrom.c. NOTE: this identifier originally included an issue related to RealText, but that issue has been assigned a separate identifier, CVE-2008-5036.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jvcx-g8c3-q6w7/GHSA-jvcx-g8c3-q6w7.json b/advisories/unreviewed/2022/05/GHSA-jvcx-g8c3-q6w7/GHSA-jvcx-g8c3-q6w7.json index 665fe8d4456..62280976bb8 100644 --- a/advisories/unreviewed/2022/05/GHSA-jvcx-g8c3-q6w7/GHSA-jvcx-g8c3-q6w7.json +++ b/advisories/unreviewed/2022/05/GHSA-jvcx-g8c3-q6w7/GHSA-jvcx-g8c3-q6w7.json @@ -7,12 +7,8 @@ "CVE-2008-6511" ], "details": "Open redirect vulnerability in login.jsp in Openfire 3.6.0a and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the url parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jw26-8m9h-2xm5/GHSA-jw26-8m9h-2xm5.json b/advisories/unreviewed/2022/05/GHSA-jw26-8m9h-2xm5/GHSA-jw26-8m9h-2xm5.json index 6d647dcfa15..f6ed8d51273 100644 --- a/advisories/unreviewed/2022/05/GHSA-jw26-8m9h-2xm5/GHSA-jw26-8m9h-2xm5.json +++ b/advisories/unreviewed/2022/05/GHSA-jw26-8m9h-2xm5/GHSA-jw26-8m9h-2xm5.json @@ -7,12 +7,8 @@ "CVE-2008-6556" ], "details": "cgi-bin/webutil.pl in The Puppet Master WebUtil 2.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the whois command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jw49-q6gw-45w7/GHSA-jw49-q6gw-45w7.json b/advisories/unreviewed/2022/05/GHSA-jw49-q6gw-45w7/GHSA-jw49-q6gw-45w7.json index 50621e415f6..62acc7ddcd7 100644 --- a/advisories/unreviewed/2022/05/GHSA-jw49-q6gw-45w7/GHSA-jw49-q6gw-45w7.json +++ b/advisories/unreviewed/2022/05/GHSA-jw49-q6gw-45w7/GHSA-jw49-q6gw-45w7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jwpq-9gh6-w8cq/GHSA-jwpq-9gh6-w8cq.json b/advisories/unreviewed/2022/05/GHSA-jwpq-9gh6-w8cq/GHSA-jwpq-9gh6-w8cq.json index e3bec7ea821..9402981e246 100644 --- a/advisories/unreviewed/2022/05/GHSA-jwpq-9gh6-w8cq/GHSA-jwpq-9gh6-w8cq.json +++ b/advisories/unreviewed/2022/05/GHSA-jwpq-9gh6-w8cq/GHSA-jwpq-9gh6-w8cq.json @@ -7,12 +7,8 @@ "CVE-2010-1554" ], "details": "Stack-based buffer overflow in getnnmdata.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers to execute arbitrary code via an invalid iCount parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jx4v-m6x5-3c22/GHSA-jx4v-m6x5-3c22.json b/advisories/unreviewed/2022/05/GHSA-jx4v-m6x5-3c22/GHSA-jx4v-m6x5-3c22.json index 9bf91c69c8b..06285b2115f 100644 --- a/advisories/unreviewed/2022/05/GHSA-jx4v-m6x5-3c22/GHSA-jx4v-m6x5-3c22.json +++ b/advisories/unreviewed/2022/05/GHSA-jx4v-m6x5-3c22/GHSA-jx4v-m6x5-3c22.json @@ -7,12 +7,8 @@ "CVE-2010-3893" ], "details": "The administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x does not restrict use of a session ID (aka SID) value to a single IP address, which allows remote attackers to perform arbitrary administrative actions by leveraging cookie theft, related to a \"session impersonation\" issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jxfj-xcj7-rvmm/GHSA-jxfj-xcj7-rvmm.json b/advisories/unreviewed/2022/05/GHSA-jxfj-xcj7-rvmm/GHSA-jxfj-xcj7-rvmm.json index 67495a397e3..20a7b48b5ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-jxfj-xcj7-rvmm/GHSA-jxfj-xcj7-rvmm.json +++ b/advisories/unreviewed/2022/05/GHSA-jxfj-xcj7-rvmm/GHSA-jxfj-xcj7-rvmm.json @@ -7,12 +7,8 @@ "CVE-2008-4825" ], "details": "Multiple buffer overflows in UltraISO 9.3.1.2633, and possibly other versions before 9.3.3.2685, allow user-assisted attackers to execute arbitrary code via a crafted (1) CIF, (2) C2D, or (3) GI file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jxjv-4m8c-326g/GHSA-jxjv-4m8c-326g.json b/advisories/unreviewed/2022/05/GHSA-jxjv-4m8c-326g/GHSA-jxjv-4m8c-326g.json index f312b7ae46e..616eb363b26 100644 --- a/advisories/unreviewed/2022/05/GHSA-jxjv-4m8c-326g/GHSA-jxjv-4m8c-326g.json +++ b/advisories/unreviewed/2022/05/GHSA-jxjv-4m8c-326g/GHSA-jxjv-4m8c-326g.json @@ -7,12 +7,8 @@ "CVE-2010-3899" ], "details": "IBM OmniFind Enterprise Edition 8.x and 9.x performs web crawls with an unlimited recursion depth, which allows remote web servers to cause a denial of service (infinite loop) via a crafted series of documents.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m227-w3jm-cmgq/GHSA-m227-w3jm-cmgq.json b/advisories/unreviewed/2022/05/GHSA-m227-w3jm-cmgq/GHSA-m227-w3jm-cmgq.json index d7c454e7cba..17404350a61 100644 --- a/advisories/unreviewed/2022/05/GHSA-m227-w3jm-cmgq/GHSA-m227-w3jm-cmgq.json +++ b/advisories/unreviewed/2022/05/GHSA-m227-w3jm-cmgq/GHSA-m227-w3jm-cmgq.json @@ -7,12 +7,8 @@ "CVE-2008-6062" ], "details": "Cross-site scripting (XSS) vulnerability in ActionScript in arbitrary Shockwave Flash (SWF) files created by Adobe Dreamweaver, when the Insert Flash Video feature is used, allows remote attackers to inject arbitrary web script or HTML via an asfunction: URI in the skinName parameter. NOTE: this may overlap CVE-2007-6242, CVE-2007-6244, or CVE-2007-6637.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m249-hh62-97m2/GHSA-m249-hh62-97m2.json b/advisories/unreviewed/2022/05/GHSA-m249-hh62-97m2/GHSA-m249-hh62-97m2.json index ccfac0fcd78..ca54b2e1c8c 100644 --- a/advisories/unreviewed/2022/05/GHSA-m249-hh62-97m2/GHSA-m249-hh62-97m2.json +++ b/advisories/unreviewed/2022/05/GHSA-m249-hh62-97m2/GHSA-m249-hh62-97m2.json @@ -7,12 +7,8 @@ "CVE-2010-5298" ], "details": "Race condition in the ssl3_read_bytes function in s3_pkt.c in OpenSSL through 1.0.1g, when SSL_MODE_RELEASE_BUFFERS is enabled, allows remote attackers to inject data across sessions or cause a denial of service (use-after-free and parsing error) via an SSL connection in a multithreaded environment.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m27c-hj4c-ppvv/GHSA-m27c-hj4c-ppvv.json b/advisories/unreviewed/2022/05/GHSA-m27c-hj4c-ppvv/GHSA-m27c-hj4c-ppvv.json index 72fbf69eeb1..86ef27c87cc 100644 --- a/advisories/unreviewed/2022/05/GHSA-m27c-hj4c-ppvv/GHSA-m27c-hj4c-ppvv.json +++ b/advisories/unreviewed/2022/05/GHSA-m27c-hj4c-ppvv/GHSA-m27c-hj4c-ppvv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m2h5-q2vq-2g9x/GHSA-m2h5-q2vq-2g9x.json b/advisories/unreviewed/2022/05/GHSA-m2h5-q2vq-2g9x/GHSA-m2h5-q2vq-2g9x.json index aebb7851b31..9859968d038 100644 --- a/advisories/unreviewed/2022/05/GHSA-m2h5-q2vq-2g9x/GHSA-m2h5-q2vq-2g9x.json +++ b/advisories/unreviewed/2022/05/GHSA-m2h5-q2vq-2g9x/GHSA-m2h5-q2vq-2g9x.json @@ -7,12 +7,8 @@ "CVE-2008-7005" ], "details": "include/modules/top/1-random_quote.php in Minb Is Not a Blog (minb) 0.1.0 allows remote attackers to execute arbitrary PHP code via the quotes_to_edit parameter. NOTE: this issue has been reported as an unrestricted file upload by some sources, but that is a potential consequence of code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m3r6-w876-373h/GHSA-m3r6-w876-373h.json b/advisories/unreviewed/2022/05/GHSA-m3r6-w876-373h/GHSA-m3r6-w876-373h.json index f175a947df5..cc1de6bfa00 100644 --- a/advisories/unreviewed/2022/05/GHSA-m3r6-w876-373h/GHSA-m3r6-w876-373h.json +++ b/advisories/unreviewed/2022/05/GHSA-m3r6-w876-373h/GHSA-m3r6-w876-373h.json @@ -7,12 +7,8 @@ "CVE-2008-5403" ], "details": "Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbitrary code via a malformed XML tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m3wg-6jv7-pjg8/GHSA-m3wg-6jv7-pjg8.json b/advisories/unreviewed/2022/05/GHSA-m3wg-6jv7-pjg8/GHSA-m3wg-6jv7-pjg8.json index 4ea9bddeec6..a5fb31b326b 100644 --- a/advisories/unreviewed/2022/05/GHSA-m3wg-6jv7-pjg8/GHSA-m3wg-6jv7-pjg8.json +++ b/advisories/unreviewed/2022/05/GHSA-m3wg-6jv7-pjg8/GHSA-m3wg-6jv7-pjg8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m46c-vr29-4hrg/GHSA-m46c-vr29-4hrg.json b/advisories/unreviewed/2022/05/GHSA-m46c-vr29-4hrg/GHSA-m46c-vr29-4hrg.json index 8e79f634e09..6b1a30b1a8f 100644 --- a/advisories/unreviewed/2022/05/GHSA-m46c-vr29-4hrg/GHSA-m46c-vr29-4hrg.json +++ b/advisories/unreviewed/2022/05/GHSA-m46c-vr29-4hrg/GHSA-m46c-vr29-4hrg.json @@ -7,12 +7,8 @@ "CVE-2008-6585" ], "details": "Cross-site request forgery (CSRF) vulnerability in html/admin.php in TorrentFlux 2.3 allows remote attackers to hijack the authentication of administrators for requests that add new accounts via the addUser action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m5fr-j5m9-qp5q/GHSA-m5fr-j5m9-qp5q.json b/advisories/unreviewed/2022/05/GHSA-m5fr-j5m9-qp5q/GHSA-m5fr-j5m9-qp5q.json index a7e7360e11c..84f5719302c 100644 --- a/advisories/unreviewed/2022/05/GHSA-m5fr-j5m9-qp5q/GHSA-m5fr-j5m9-qp5q.json +++ b/advisories/unreviewed/2022/05/GHSA-m5fr-j5m9-qp5q/GHSA-m5fr-j5m9-qp5q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m5gr-42wf-5c95/GHSA-m5gr-42wf-5c95.json b/advisories/unreviewed/2022/05/GHSA-m5gr-42wf-5c95/GHSA-m5gr-42wf-5c95.json index 638e99edca3..ccc57685a0b 100644 --- a/advisories/unreviewed/2022/05/GHSA-m5gr-42wf-5c95/GHSA-m5gr-42wf-5c95.json +++ b/advisories/unreviewed/2022/05/GHSA-m5gr-42wf-5c95/GHSA-m5gr-42wf-5c95.json @@ -7,12 +7,8 @@ "CVE-2008-5525" ], "details": "ClamAV 0.94.1 and possibly 0.93.1, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m5hr-9qvg-jxh5/GHSA-m5hr-9qvg-jxh5.json b/advisories/unreviewed/2022/05/GHSA-m5hr-9qvg-jxh5/GHSA-m5hr-9qvg-jxh5.json index cd07b840223..d92ad56e52d 100644 --- a/advisories/unreviewed/2022/05/GHSA-m5hr-9qvg-jxh5/GHSA-m5hr-9qvg-jxh5.json +++ b/advisories/unreviewed/2022/05/GHSA-m5hr-9qvg-jxh5/GHSA-m5hr-9qvg-jxh5.json @@ -7,12 +7,8 @@ "CVE-2008-5242" ], "details": "demux_qt.c in xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not validate the count field before calling calloc for STSD_ATOM atom allocation, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted media file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m667-v5hg-wmvc/GHSA-m667-v5hg-wmvc.json b/advisories/unreviewed/2022/05/GHSA-m667-v5hg-wmvc/GHSA-m667-v5hg-wmvc.json index 9ae6125eff0..70f97673c4c 100644 --- a/advisories/unreviewed/2022/05/GHSA-m667-v5hg-wmvc/GHSA-m667-v5hg-wmvc.json +++ b/advisories/unreviewed/2022/05/GHSA-m667-v5hg-wmvc/GHSA-m667-v5hg-wmvc.json @@ -7,12 +7,8 @@ "CVE-2008-5964" ], "details": "Session fixation vulnerability in Social ImpressCMS before 1.1.1 RC1 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m77c-32jr-gfqq/GHSA-m77c-32jr-gfqq.json b/advisories/unreviewed/2022/05/GHSA-m77c-32jr-gfqq/GHSA-m77c-32jr-gfqq.json index 24588a4b16e..1e42f5db957 100644 --- a/advisories/unreviewed/2022/05/GHSA-m77c-32jr-gfqq/GHSA-m77c-32jr-gfqq.json +++ b/advisories/unreviewed/2022/05/GHSA-m77c-32jr-gfqq/GHSA-m77c-32jr-gfqq.json @@ -7,12 +7,8 @@ "CVE-2010-4279" ], "details": "The default configuration of Pandora FMS 3.1 and earlier specifies an empty string for the loginhash_pwd field, which allows remote attackers to bypass authentication by sending a request to index.php with \"admin\" in the loginhash_user parameter, in conjunction with the md5 hash of \"admin\" in the loginhash_data parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m7m4-2p38-j9fh/GHSA-m7m4-2p38-j9fh.json b/advisories/unreviewed/2022/05/GHSA-m7m4-2p38-j9fh/GHSA-m7m4-2p38-j9fh.json index ef3d7af6542..278cb19848d 100644 --- a/advisories/unreviewed/2022/05/GHSA-m7m4-2p38-j9fh/GHSA-m7m4-2p38-j9fh.json +++ b/advisories/unreviewed/2022/05/GHSA-m7m4-2p38-j9fh/GHSA-m7m4-2p38-j9fh.json @@ -7,12 +7,8 @@ "CVE-2008-7032" ], "details": "Web Management Console Cross-site request forgery (CSRF) vulnerability in the web management console in F5 BIG-IP 9.4.3 allows remote attackers to hijack the authentication of administrators for requests that create new administrators and execute shell commands, as demonstrated using tmui/Control/form.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m7m9-pfxp-4f67/GHSA-m7m9-pfxp-4f67.json b/advisories/unreviewed/2022/05/GHSA-m7m9-pfxp-4f67/GHSA-m7m9-pfxp-4f67.json index e6900640a1f..71de338e8a1 100644 --- a/advisories/unreviewed/2022/05/GHSA-m7m9-pfxp-4f67/GHSA-m7m9-pfxp-4f67.json +++ b/advisories/unreviewed/2022/05/GHSA-m7m9-pfxp-4f67/GHSA-m7m9-pfxp-4f67.json @@ -7,12 +7,8 @@ "CVE-2008-7090" ], "details": "Multiple directory traversal vulnerabilities in Pligg 9.9 and earlier allow remote attackers to (1) determine the existence of arbitrary files via a .. (dot dot) in the $tb_url variable in trackback.php, or (2) include arbitrary files via a .. (dot dot) in the template parameter to settemplate.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m82r-6rq8-8hv3/GHSA-m82r-6rq8-8hv3.json b/advisories/unreviewed/2022/05/GHSA-m82r-6rq8-8hv3/GHSA-m82r-6rq8-8hv3.json index 87ef900d129..ee3b5e5bd5a 100644 --- a/advisories/unreviewed/2022/05/GHSA-m82r-6rq8-8hv3/GHSA-m82r-6rq8-8hv3.json +++ b/advisories/unreviewed/2022/05/GHSA-m82r-6rq8-8hv3/GHSA-m82r-6rq8-8hv3.json @@ -7,12 +7,8 @@ "CVE-2010-3220" ], "details": "Unspecified vulnerability in Microsoft Word 2002 SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka \"Word Parsing Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m8qm-jxhh-94x8/GHSA-m8qm-jxhh-94x8.json b/advisories/unreviewed/2022/05/GHSA-m8qm-jxhh-94x8/GHSA-m8qm-jxhh-94x8.json index 789115ef278..4142b0e95ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-m8qm-jxhh-94x8/GHSA-m8qm-jxhh-94x8.json +++ b/advisories/unreviewed/2022/05/GHSA-m8qm-jxhh-94x8/GHSA-m8qm-jxhh-94x8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m92p-44qp-c48w/GHSA-m92p-44qp-c48w.json b/advisories/unreviewed/2022/05/GHSA-m92p-44qp-c48w/GHSA-m92p-44qp-c48w.json index 1a4b0fc1451..343fc8bb695 100644 --- a/advisories/unreviewed/2022/05/GHSA-m92p-44qp-c48w/GHSA-m92p-44qp-c48w.json +++ b/advisories/unreviewed/2022/05/GHSA-m92p-44qp-c48w/GHSA-m92p-44qp-c48w.json @@ -7,12 +7,8 @@ "CVE-2008-5240" ], "details": "xine-lib 1.1.12, and other 1.1.15 and earlier versions, relies on an untrusted input value to determine the memory allocation and does not check the result for (1) the MATROSKA_ID_TR_CODECPRIVATE track entry element processed by demux_matroska.c; and (2) PROP_TAG, (3) MDPR_TAG, and (4) CONT_TAG chunks processed by the real_parse_headers function in demux_real.c; which allows remote attackers to cause a denial of service (NULL pointer dereference and crash) or possibly execute arbitrary code via a crafted value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mcm4-fv4w-h3q4/GHSA-mcm4-fv4w-h3q4.json b/advisories/unreviewed/2022/05/GHSA-mcm4-fv4w-h3q4/GHSA-mcm4-fv4w-h3q4.json index 63f66df0f2c..6f6807de740 100644 --- a/advisories/unreviewed/2022/05/GHSA-mcm4-fv4w-h3q4/GHSA-mcm4-fv4w-h3q4.json +++ b/advisories/unreviewed/2022/05/GHSA-mcm4-fv4w-h3q4/GHSA-mcm4-fv4w-h3q4.json @@ -7,12 +7,8 @@ "CVE-2010-3759" ], "details": "FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 writes a certain value to a memory location specified by a UDP packet field, which allows remote attackers to execute arbitrary code via multiple requests. NOTE: this might overlap CVE-2010-3058.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mf46-vg7x-6qx8/GHSA-mf46-vg7x-6qx8.json b/advisories/unreviewed/2022/05/GHSA-mf46-vg7x-6qx8/GHSA-mf46-vg7x-6qx8.json index 39f069f72c0..30ca957e950 100644 --- a/advisories/unreviewed/2022/05/GHSA-mf46-vg7x-6qx8/GHSA-mf46-vg7x-6qx8.json +++ b/advisories/unreviewed/2022/05/GHSA-mf46-vg7x-6qx8/GHSA-mf46-vg7x-6qx8.json @@ -7,12 +7,8 @@ "CVE-2008-7216" ], "details": "Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the generated clip.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mf8f-jrrj-qjh4/GHSA-mf8f-jrrj-qjh4.json b/advisories/unreviewed/2022/05/GHSA-mf8f-jrrj-qjh4/GHSA-mf8f-jrrj-qjh4.json index cf49d1e9b67..7a8b1958fdd 100644 --- a/advisories/unreviewed/2022/05/GHSA-mf8f-jrrj-qjh4/GHSA-mf8f-jrrj-qjh4.json +++ b/advisories/unreviewed/2022/05/GHSA-mf8f-jrrj-qjh4/GHSA-mf8f-jrrj-qjh4.json @@ -7,12 +7,8 @@ "CVE-2008-6083" ], "details": "Directory traversal vulnerability in header.php in TXTshop beta 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mfp9-xw7w-fwfc/GHSA-mfp9-xw7w-fwfc.json b/advisories/unreviewed/2022/05/GHSA-mfp9-xw7w-fwfc/GHSA-mfp9-xw7w-fwfc.json index 2432cab9205..6e7fc626c53 100644 --- a/advisories/unreviewed/2022/05/GHSA-mfp9-xw7w-fwfc/GHSA-mfp9-xw7w-fwfc.json +++ b/advisories/unreviewed/2022/05/GHSA-mfp9-xw7w-fwfc/GHSA-mfp9-xw7w-fwfc.json @@ -7,12 +7,8 @@ "CVE-2008-7242" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in MODx CMS 0.9.6.1 and 0.9.6.1p1 allo remote attackers to inject arbitrary web script or HTML via the (1) search, (2) \"a,\" (3) messagesubject, and (4) messagebody parameters to certain pages as reachable from manager/index.php; (5) highlight, (6) id, (7) email, (8) name, and (9) parent parameters to index.php; and the (10) docgrp and (11) moreResultsPage parameters to index-ajax.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mh5m-5r69-7g2f/GHSA-mh5m-5r69-7g2f.json b/advisories/unreviewed/2022/05/GHSA-mh5m-5r69-7g2f/GHSA-mh5m-5r69-7g2f.json index 4c6607d7ab6..958fc86939f 100644 --- a/advisories/unreviewed/2022/05/GHSA-mh5m-5r69-7g2f/GHSA-mh5m-5r69-7g2f.json +++ b/advisories/unreviewed/2022/05/GHSA-mh5m-5r69-7g2f/GHSA-mh5m-5r69-7g2f.json @@ -7,12 +7,8 @@ "CVE-2008-4830" ], "details": "Insecure method vulnerability in the KWEdit ActiveX control in SAP GUI 6.40 Patch 29 (KWEDIT.DLL 6400.1.1.41) and 7.10 Patch 5 (KWEDIT.DLL 7100.1.1.43) allows remote attackers to (1) overwrite arbitrary files via the SaveDocumentAs method or (2) read or execute arbitrary files via the OpenDocument method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mh8r-x9cq-9xpw/GHSA-mh8r-x9cq-9xpw.json b/advisories/unreviewed/2022/05/GHSA-mh8r-x9cq-9xpw/GHSA-mh8r-x9cq-9xpw.json index a06c8f6257e..23a093aad39 100644 --- a/advisories/unreviewed/2022/05/GHSA-mh8r-x9cq-9xpw/GHSA-mh8r-x9cq-9xpw.json +++ b/advisories/unreviewed/2022/05/GHSA-mh8r-x9cq-9xpw/GHSA-mh8r-x9cq-9xpw.json @@ -7,12 +7,8 @@ "CVE-2010-4836" ], "details": "Cross-site scripting (XSS) vulnerability in register.html in PHPShop 2.1 EE and earlier allows remote attackers to inject arbitrary web script or HTML via the name_new parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mj8x-9xq4-2q6r/GHSA-mj8x-9xq4-2q6r.json b/advisories/unreviewed/2022/05/GHSA-mj8x-9xq4-2q6r/GHSA-mj8x-9xq4-2q6r.json index 46dcb7060bb..369dad9433c 100644 --- a/advisories/unreviewed/2022/05/GHSA-mj8x-9xq4-2q6r/GHSA-mj8x-9xq4-2q6r.json +++ b/advisories/unreviewed/2022/05/GHSA-mj8x-9xq4-2q6r/GHSA-mj8x-9xq4-2q6r.json @@ -7,12 +7,8 @@ "CVE-2008-5260" ], "details": "Heap-based buffer overflow in the CamImage.CamImage.1 ActiveX control in AxisCamControl.ocx in AXIS Camera Control 2.40.0.0 allows remote attackers to execute arbitrary code via a long image_pan_tilt property value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mjhf-5jqj-rmgj/GHSA-mjhf-5jqj-rmgj.json b/advisories/unreviewed/2022/05/GHSA-mjhf-5jqj-rmgj/GHSA-mjhf-5jqj-rmgj.json index 154d6ff10bb..69f299a5875 100644 --- a/advisories/unreviewed/2022/05/GHSA-mjhf-5jqj-rmgj/GHSA-mjhf-5jqj-rmgj.json +++ b/advisories/unreviewed/2022/05/GHSA-mjhf-5jqj-rmgj/GHSA-mjhf-5jqj-rmgj.json @@ -7,12 +7,8 @@ "CVE-2008-5259" ], "details": "Integer signedness error in DivX Web Player 1.4.2.7, and possibly earlier versions, allows remote attackers to execute arbitrary code via a DivX file containing a crafted Stream Format (STRF) chunk, which triggers a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mjw4-35m8-h2p3/GHSA-mjw4-35m8-h2p3.json b/advisories/unreviewed/2022/05/GHSA-mjw4-35m8-h2p3/GHSA-mjw4-35m8-h2p3.json index dc644d7550d..af1797f101a 100644 --- a/advisories/unreviewed/2022/05/GHSA-mjw4-35m8-h2p3/GHSA-mjw4-35m8-h2p3.json +++ b/advisories/unreviewed/2022/05/GHSA-mjw4-35m8-h2p3/GHSA-mjw4-35m8-h2p3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mm7x-c8mh-mw5q/GHSA-mm7x-c8mh-mw5q.json b/advisories/unreviewed/2022/05/GHSA-mm7x-c8mh-mw5q/GHSA-mm7x-c8mh-mw5q.json index 465123f65ab..9473ef6717d 100644 --- a/advisories/unreviewed/2022/05/GHSA-mm7x-c8mh-mw5q/GHSA-mm7x-c8mh-mw5q.json +++ b/advisories/unreviewed/2022/05/GHSA-mm7x-c8mh-mw5q/GHSA-mm7x-c8mh-mw5q.json @@ -7,12 +7,8 @@ "CVE-2008-5869" ], "details": "Cross-site scripting (XSS) vulnerability in the Proxim Wireless Tsunami MP.11 2411 with firmware 3.0.3 allows remote authenticated users to inject arbitrary web script or HTML via the system.sysName.0 SNMP OID.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mmfc-28m2-824q/GHSA-mmfc-28m2-824q.json b/advisories/unreviewed/2022/05/GHSA-mmfc-28m2-824q/GHSA-mmfc-28m2-824q.json index 72f9c2276ee..afbec590483 100644 --- a/advisories/unreviewed/2022/05/GHSA-mmfc-28m2-824q/GHSA-mmfc-28m2-824q.json +++ b/advisories/unreviewed/2022/05/GHSA-mmfc-28m2-824q/GHSA-mmfc-28m2-824q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mmj8-qxh6-33c9/GHSA-mmj8-qxh6-33c9.json b/advisories/unreviewed/2022/05/GHSA-mmj8-qxh6-33c9/GHSA-mmj8-qxh6-33c9.json index 05709815077..d6778cff3ef 100644 --- a/advisories/unreviewed/2022/05/GHSA-mmj8-qxh6-33c9/GHSA-mmj8-qxh6-33c9.json +++ b/advisories/unreviewed/2022/05/GHSA-mmj8-qxh6-33c9/GHSA-mmj8-qxh6-33c9.json @@ -7,12 +7,8 @@ "CVE-2008-5429" ], "details": "Incredimail build 5853710 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many \"Content-type: message/rfc822;\" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mmxq-2794-vggw/GHSA-mmxq-2794-vggw.json b/advisories/unreviewed/2022/05/GHSA-mmxq-2794-vggw/GHSA-mmxq-2794-vggw.json index 7ab222d9726..45c41e13328 100644 --- a/advisories/unreviewed/2022/05/GHSA-mmxq-2794-vggw/GHSA-mmxq-2794-vggw.json +++ b/advisories/unreviewed/2022/05/GHSA-mmxq-2794-vggw/GHSA-mmxq-2794-vggw.json @@ -7,12 +7,8 @@ "CVE-2010-3952" ], "details": "The FlashPix image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted FlashPix image in an Office document, aka \"FlashPix Image Converter Heap Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mr4x-mgq9-cf52/GHSA-mr4x-mgq9-cf52.json b/advisories/unreviewed/2022/05/GHSA-mr4x-mgq9-cf52/GHSA-mr4x-mgq9-cf52.json index 34f08b92e84..f36e6620e0e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mr4x-mgq9-cf52/GHSA-mr4x-mgq9-cf52.json +++ b/advisories/unreviewed/2022/05/GHSA-mr4x-mgq9-cf52/GHSA-mr4x-mgq9-cf52.json @@ -7,12 +7,8 @@ "CVE-2008-6437" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in PHPFreeForum 1.0 RC2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) message parameter to error.php, and the (2) nickname and (3) randomid parameters to part/menu.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mrcv-q79f-p425/GHSA-mrcv-q79f-p425.json b/advisories/unreviewed/2022/05/GHSA-mrcv-q79f-p425/GHSA-mrcv-q79f-p425.json index 5397e78bc48..3ba97502bdf 100644 --- a/advisories/unreviewed/2022/05/GHSA-mrcv-q79f-p425/GHSA-mrcv-q79f-p425.json +++ b/advisories/unreviewed/2022/05/GHSA-mrcv-q79f-p425/GHSA-mrcv-q79f-p425.json @@ -7,12 +7,8 @@ "CVE-2010-3950" ], "details": "The TIFF image converter in the graphics filters in Microsoft Office XP SP3, Office Converter Pack, and Works 9 does not properly convert data, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TIFF image in an Office document, aka \"TIFF Image Converter Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mrv3-h573-pvqg/GHSA-mrv3-h573-pvqg.json b/advisories/unreviewed/2022/05/GHSA-mrv3-h573-pvqg/GHSA-mrv3-h573-pvqg.json index bb2c0d1d7f6..a39bec97ebb 100644 --- a/advisories/unreviewed/2022/05/GHSA-mrv3-h573-pvqg/GHSA-mrv3-h573-pvqg.json +++ b/advisories/unreviewed/2022/05/GHSA-mrv3-h573-pvqg/GHSA-mrv3-h573-pvqg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mv4g-2fqv-5g5h/GHSA-mv4g-2fqv-5g5h.json b/advisories/unreviewed/2022/05/GHSA-mv4g-2fqv-5g5h/GHSA-mv4g-2fqv-5g5h.json index 31f0809092f..f574ad398f3 100644 --- a/advisories/unreviewed/2022/05/GHSA-mv4g-2fqv-5g5h/GHSA-mv4g-2fqv-5g5h.json +++ b/advisories/unreviewed/2022/05/GHSA-mv4g-2fqv-5g5h/GHSA-mv4g-2fqv-5g5h.json @@ -7,12 +7,8 @@ "CVE-2010-4151" ], "details": "SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than CVE-2005-2989, CVE-2006-2503, and CVE-2009-1033.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mv6v-6p7c-wgw6/GHSA-mv6v-6p7c-wgw6.json b/advisories/unreviewed/2022/05/GHSA-mv6v-6p7c-wgw6/GHSA-mv6v-6p7c-wgw6.json index dee0716c7f4..70194270b91 100644 --- a/advisories/unreviewed/2022/05/GHSA-mv6v-6p7c-wgw6/GHSA-mv6v-6p7c-wgw6.json +++ b/advisories/unreviewed/2022/05/GHSA-mv6v-6p7c-wgw6/GHSA-mv6v-6p7c-wgw6.json @@ -7,12 +7,8 @@ "CVE-2008-5584" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in ProjectPier 0.8 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) a message, (2) a milestone, or (3) a display name in a profile, or the (4) a or (5) c parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mw2f-f9cv-429m/GHSA-mw2f-f9cv-429m.json b/advisories/unreviewed/2022/05/GHSA-mw2f-f9cv-429m/GHSA-mw2f-f9cv-429m.json index 14a11ce5b28..fd95f66c963 100644 --- a/advisories/unreviewed/2022/05/GHSA-mw2f-f9cv-429m/GHSA-mw2f-f9cv-429m.json +++ b/advisories/unreviewed/2022/05/GHSA-mw2f-f9cv-429m/GHSA-mw2f-f9cv-429m.json @@ -7,12 +7,8 @@ "CVE-2010-2734" ], "details": "Cross-site scripting (XSS) vulnerability in the mobile portal in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka \"XSS Issue on UAG Mobile Portal Website in Forefront Unified Access Gateway Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mwf8-694v-fr83/GHSA-mwf8-694v-fr83.json b/advisories/unreviewed/2022/05/GHSA-mwf8-694v-fr83/GHSA-mwf8-694v-fr83.json index 7398486e5c2..5c716d91c38 100644 --- a/advisories/unreviewed/2022/05/GHSA-mwf8-694v-fr83/GHSA-mwf8-694v-fr83.json +++ b/advisories/unreviewed/2022/05/GHSA-mwf8-694v-fr83/GHSA-mwf8-694v-fr83.json @@ -7,12 +7,8 @@ "CVE-2008-5543" ], "details": "Symantec AntiVirus (SAV) 10, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mxhj-3mv6-mh6c/GHSA-mxhj-3mv6-mh6c.json b/advisories/unreviewed/2022/05/GHSA-mxhj-3mv6-mh6c/GHSA-mxhj-3mv6-mh6c.json index a07fd7673f3..20118744c23 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxhj-3mv6-mh6c/GHSA-mxhj-3mv6-mh6c.json +++ b/advisories/unreviewed/2022/05/GHSA-mxhj-3mv6-mh6c/GHSA-mxhj-3mv6-mh6c.json @@ -7,12 +7,8 @@ "CVE-2008-5554" ], "details": "The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not properly handle some HTTP headers that appear after a CRLF sequence in a URI, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS or redirection attacks, as demonstrated by the (1) Location and (2) Set-Cookie HTTP headers. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to \"address every conceivable XSS attack scenario.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p2xf-59pp-g3wc/GHSA-p2xf-59pp-g3wc.json b/advisories/unreviewed/2022/05/GHSA-p2xf-59pp-g3wc/GHSA-p2xf-59pp-g3wc.json index b51721f3685..1feacbe8018 100644 --- a/advisories/unreviewed/2022/05/GHSA-p2xf-59pp-g3wc/GHSA-p2xf-59pp-g3wc.json +++ b/advisories/unreviewed/2022/05/GHSA-p2xf-59pp-g3wc/GHSA-p2xf-59pp-g3wc.json @@ -7,12 +7,8 @@ "CVE-2008-6441" ], "details": "Format string vulnerability in the Epic Games Unreal engine client, as used in multiple games, allows remote servers to execute arbitrary code via (1) the CLASS parameter in a DLMGR command, (2) a malformed package (PKG), and possibly (3) the LEVEL parameter in a WELCOME command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p4pg-9hcc-p5mf/GHSA-p4pg-9hcc-p5mf.json b/advisories/unreviewed/2022/05/GHSA-p4pg-9hcc-p5mf/GHSA-p4pg-9hcc-p5mf.json index 415ae6452c7..046354d963c 100644 --- a/advisories/unreviewed/2022/05/GHSA-p4pg-9hcc-p5mf/GHSA-p4pg-9hcc-p5mf.json +++ b/advisories/unreviewed/2022/05/GHSA-p4pg-9hcc-p5mf/GHSA-p4pg-9hcc-p5mf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p4vc-vrgw-5wmm/GHSA-p4vc-vrgw-5wmm.json b/advisories/unreviewed/2022/05/GHSA-p4vc-vrgw-5wmm/GHSA-p4vc-vrgw-5wmm.json index 41a46824241..457ea94b4a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-p4vc-vrgw-5wmm/GHSA-p4vc-vrgw-5wmm.json +++ b/advisories/unreviewed/2022/05/GHSA-p4vc-vrgw-5wmm/GHSA-p4vc-vrgw-5wmm.json @@ -7,12 +7,8 @@ "CVE-2010-4612" ], "details": "Multiple SQL injection vulnerabilities in index.php in Hycus CMS 1.0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) user_name and (2) usr_email parameters to user/1/hregister.html, (3) usr_email parameter to user/1/hlogin.html, (4) useremail parameter to user/1/forgotpass.html, and the (5) q parameter to search/1.html. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p4x2-qw3q-67wr/GHSA-p4x2-qw3q-67wr.json b/advisories/unreviewed/2022/05/GHSA-p4x2-qw3q-67wr/GHSA-p4x2-qw3q-67wr.json index 251cf4b9622..409de355c2a 100644 --- a/advisories/unreviewed/2022/05/GHSA-p4x2-qw3q-67wr/GHSA-p4x2-qw3q-67wr.json +++ b/advisories/unreviewed/2022/05/GHSA-p4x2-qw3q-67wr/GHSA-p4x2-qw3q-67wr.json @@ -7,12 +7,8 @@ "CVE-2010-4283" ], "details": "PHP remote file inclusion vulnerability in extras/pandora_diag.php in Pandora FMS before 3.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the argv[1] parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p56c-w946-p77f/GHSA-p56c-w946-p77f.json b/advisories/unreviewed/2022/05/GHSA-p56c-w946-p77f/GHSA-p56c-w946-p77f.json index 463a4d71e3f..2a351b6fad9 100644 --- a/advisories/unreviewed/2022/05/GHSA-p56c-w946-p77f/GHSA-p56c-w946-p77f.json +++ b/advisories/unreviewed/2022/05/GHSA-p56c-w946-p77f/GHSA-p56c-w946-p77f.json @@ -7,12 +7,8 @@ "CVE-2008-4778" ], "details": "SQL injection vulnerability in the gallery module in Koobi CMS 4.3.0 allows remote attackers to execute arbitrary SQL commands via the galid parameter in a showimages action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p56m-c783-5pjh/GHSA-p56m-c783-5pjh.json b/advisories/unreviewed/2022/05/GHSA-p56m-c783-5pjh/GHSA-p56m-c783-5pjh.json index b2d23b563ed..0080d21a45e 100644 --- a/advisories/unreviewed/2022/05/GHSA-p56m-c783-5pjh/GHSA-p56m-c783-5pjh.json +++ b/advisories/unreviewed/2022/05/GHSA-p56m-c783-5pjh/GHSA-p56m-c783-5pjh.json @@ -7,12 +7,8 @@ "CVE-2008-7225" ], "details": "Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p58w-xvp4-pqvm/GHSA-p58w-xvp4-pqvm.json b/advisories/unreviewed/2022/05/GHSA-p58w-xvp4-pqvm/GHSA-p58w-xvp4-pqvm.json index d9c9c34d0a4..4c5205186f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-p58w-xvp4-pqvm/GHSA-p58w-xvp4-pqvm.json +++ b/advisories/unreviewed/2022/05/GHSA-p58w-xvp4-pqvm/GHSA-p58w-xvp4-pqvm.json @@ -7,12 +7,8 @@ "CVE-2008-5757" ], "details": "Cross-site scripting (XSS) vulnerability in textarea/index.php in Textpattern (aka Txp CMS) 4.0.6 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the Body parameter in an article action. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p5qj-w5wr-j75h/GHSA-p5qj-w5wr-j75h.json b/advisories/unreviewed/2022/05/GHSA-p5qj-w5wr-j75h/GHSA-p5qj-w5wr-j75h.json index 5bc279ef929..fcf9afb8610 100644 --- a/advisories/unreviewed/2022/05/GHSA-p5qj-w5wr-j75h/GHSA-p5qj-w5wr-j75h.json +++ b/advisories/unreviewed/2022/05/GHSA-p5qj-w5wr-j75h/GHSA-p5qj-w5wr-j75h.json @@ -7,12 +7,8 @@ "CVE-2008-6949" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in Collabtive 0.4.8 allow remote attackers to hijack the authentication of administrators for requests that (1) submit or edit a new project, or (2) upload files to a project, or (3) attach files to messages via unknown vectors. NOTE: these issues can be leveraged with other vulnerabilities to create remote attack vectors that do not require authentication.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p652-r243-c9cj/GHSA-p652-r243-c9cj.json b/advisories/unreviewed/2022/05/GHSA-p652-r243-c9cj/GHSA-p652-r243-c9cj.json index f64006813b9..c5ab94b129a 100644 --- a/advisories/unreviewed/2022/05/GHSA-p652-r243-c9cj/GHSA-p652-r243-c9cj.json +++ b/advisories/unreviewed/2022/05/GHSA-p652-r243-c9cj/GHSA-p652-r243-c9cj.json @@ -7,12 +7,8 @@ "CVE-2010-2747" ], "details": "Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle an uninitialized pointer during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka \"Word Uninitialized Pointer Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p7mx-j9j5-hv76/GHSA-p7mx-j9j5-hv76.json b/advisories/unreviewed/2022/05/GHSA-p7mx-j9j5-hv76/GHSA-p7mx-j9j5-hv76.json index 501664277c2..96b646d766e 100644 --- a/advisories/unreviewed/2022/05/GHSA-p7mx-j9j5-hv76/GHSA-p7mx-j9j5-hv76.json +++ b/advisories/unreviewed/2022/05/GHSA-p7mx-j9j5-hv76/GHSA-p7mx-j9j5-hv76.json @@ -7,12 +7,8 @@ "CVE-2008-7078" ], "details": "Multiple buffer overflows in Rumpus before 6.0.1 allow remote attackers to (1) cause a denial of service (segmentation fault) via a long HTTP verb in the HTTP component; and allow remote authenticated users to execute arbitrary code via a long argument to the (2) MKD, (3) XMKD, (4) RMD, and other unspecified commands in the FTP component.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p7rw-cjjv-6cc4/GHSA-p7rw-cjjv-6cc4.json b/advisories/unreviewed/2022/05/GHSA-p7rw-cjjv-6cc4/GHSA-p7rw-cjjv-6cc4.json index 49dbdb32372..d3d3e4ddd73 100644 --- a/advisories/unreviewed/2022/05/GHSA-p7rw-cjjv-6cc4/GHSA-p7rw-cjjv-6cc4.json +++ b/advisories/unreviewed/2022/05/GHSA-p7rw-cjjv-6cc4/GHSA-p7rw-cjjv-6cc4.json @@ -7,12 +7,8 @@ "CVE-2008-5124" ], "details": "JSCAPE Secure FTP Applet 4.8.0 and earlier does not ask the user to verify a new or mismatched SSH host key, which makes it easier for remote attackers to perform man-in-the-middle attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p854-c355-26cj/GHSA-p854-c355-26cj.json b/advisories/unreviewed/2022/05/GHSA-p854-c355-26cj/GHSA-p854-c355-26cj.json index ef25b173fa8..8eff0f717f8 100644 --- a/advisories/unreviewed/2022/05/GHSA-p854-c355-26cj/GHSA-p854-c355-26cj.json +++ b/advisories/unreviewed/2022/05/GHSA-p854-c355-26cj/GHSA-p854-c355-26cj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p88h-2m92-262w/GHSA-p88h-2m92-262w.json b/advisories/unreviewed/2022/05/GHSA-p88h-2m92-262w/GHSA-p88h-2m92-262w.json index cffecf42a93..49c6afb69ba 100644 --- a/advisories/unreviewed/2022/05/GHSA-p88h-2m92-262w/GHSA-p88h-2m92-262w.json +++ b/advisories/unreviewed/2022/05/GHSA-p88h-2m92-262w/GHSA-p88h-2m92-262w.json @@ -7,12 +7,8 @@ "CVE-2008-6149" ], "details": "SQL injection vulnerability in the mDigg (com_mdigg) component 2.2.8 for Joomla! allows remote attackers to execute arbitrary SQL commands via the cagtegory parameter in a story_lists action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p98c-c5fg-822p/GHSA-p98c-c5fg-822p.json b/advisories/unreviewed/2022/05/GHSA-p98c-c5fg-822p/GHSA-p98c-c5fg-822p.json index ac1ece89688..ad80789f4a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-p98c-c5fg-822p/GHSA-p98c-c5fg-822p.json +++ b/advisories/unreviewed/2022/05/GHSA-p98c-c5fg-822p/GHSA-p98c-c5fg-822p.json @@ -7,12 +7,8 @@ "CVE-2008-6038" ], "details": "SQL injection vulnerability in index.php in MapCal 0.1 allows remote attackers to execute arbitrary SQL commands via the id parameter in an editevent action, possibly related to dsp_editevent.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p9hm-764f-6864/GHSA-p9hm-764f-6864.json b/advisories/unreviewed/2022/05/GHSA-p9hm-764f-6864/GHSA-p9hm-764f-6864.json index 79c2ab4b264..e8176be9bb3 100644 --- a/advisories/unreviewed/2022/05/GHSA-p9hm-764f-6864/GHSA-p9hm-764f-6864.json +++ b/advisories/unreviewed/2022/05/GHSA-p9hm-764f-6864/GHSA-p9hm-764f-6864.json @@ -7,12 +7,8 @@ "CVE-2010-4089" ], "details": "IML32.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a .dir file containing \"duplicated LCSM entries in mmap record,\" a different vulnerability than CVE-2010-4087.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p9qc-jx9p-h9xh/GHSA-p9qc-jx9p-h9xh.json b/advisories/unreviewed/2022/05/GHSA-p9qc-jx9p-h9xh/GHSA-p9qc-jx9p-h9xh.json index b765e676bdc..fc3ee9a64e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-p9qc-jx9p-h9xh/GHSA-p9qc-jx9p-h9xh.json +++ b/advisories/unreviewed/2022/05/GHSA-p9qc-jx9p-h9xh/GHSA-p9qc-jx9p-h9xh.json @@ -7,12 +7,8 @@ "CVE-2010-4236" ], "details": "Untrusted search path vulnerability in estaskwrapper in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges via an ES_LIBRARY_PATH environment variable and a modified PATH environment variable, which is used during execution of the estasklight program, a different vulnerability than CVE-2010-3895.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pc45-gjcg-vcrg/GHSA-pc45-gjcg-vcrg.json b/advisories/unreviewed/2022/05/GHSA-pc45-gjcg-vcrg/GHSA-pc45-gjcg-vcrg.json index b3114af791b..d777a48b78f 100644 --- a/advisories/unreviewed/2022/05/GHSA-pc45-gjcg-vcrg/GHSA-pc45-gjcg-vcrg.json +++ b/advisories/unreviewed/2022/05/GHSA-pc45-gjcg-vcrg/GHSA-pc45-gjcg-vcrg.json @@ -7,12 +7,8 @@ "CVE-2008-6587" ], "details": "Cross-site request forgery (CSRF) vulnerability in index.tmpl in Vuze (formerly Azureus HTML WebUI), probably 0.7.6, allows remote attackers to hijack the authentication of users for requests that force the download of arbitrary torrent files via the upurl parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pfxx-rj6r-jhrv/GHSA-pfxx-rj6r-jhrv.json b/advisories/unreviewed/2022/05/GHSA-pfxx-rj6r-jhrv/GHSA-pfxx-rj6r-jhrv.json index b897c35e9b1..0fe4a9e9140 100644 --- a/advisories/unreviewed/2022/05/GHSA-pfxx-rj6r-jhrv/GHSA-pfxx-rj6r-jhrv.json +++ b/advisories/unreviewed/2022/05/GHSA-pfxx-rj6r-jhrv/GHSA-pfxx-rj6r-jhrv.json @@ -7,12 +7,8 @@ "CVE-2010-3897" ], "details": "ESSearchApplication/palette.do in IBM OmniFind Enterprise Edition 8.x and 9.x includes the administrator password in the HTML source code, which might allow remote attackers to obtain sensitive information by leveraging read access to this file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pgrp-jx4h-jvwf/GHSA-pgrp-jx4h-jvwf.json b/advisories/unreviewed/2022/05/GHSA-pgrp-jx4h-jvwf/GHSA-pgrp-jx4h-jvwf.json index 9081cbdbe3c..35d1583a487 100644 --- a/advisories/unreviewed/2022/05/GHSA-pgrp-jx4h-jvwf/GHSA-pgrp-jx4h-jvwf.json +++ b/advisories/unreviewed/2022/05/GHSA-pgrp-jx4h-jvwf/GHSA-pgrp-jx4h-jvwf.json @@ -7,12 +7,8 @@ "CVE-2008-7222" ], "details": "Cross-site scripting (XSS) vulnerability in system/admin.php in RunCMS 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the rank_title parameter in a RankForumAdd action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-phx3-5jq9-vmp6/GHSA-phx3-5jq9-vmp6.json b/advisories/unreviewed/2022/05/GHSA-phx3-5jq9-vmp6/GHSA-phx3-5jq9-vmp6.json index 4b5e8dfa999..13aa6a9161f 100644 --- a/advisories/unreviewed/2022/05/GHSA-phx3-5jq9-vmp6/GHSA-phx3-5jq9-vmp6.json +++ b/advisories/unreviewed/2022/05/GHSA-phx3-5jq9-vmp6/GHSA-phx3-5jq9-vmp6.json @@ -7,12 +7,8 @@ "CVE-2008-6754" ], "details": "The Personal Sticky Threads addon 1.0.3c for vBulletin allows remote authenticated users to read the title, author, and pages of an arbitrary thread by toggling a personal sticky.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-phxj-wq6j-j348/GHSA-phxj-wq6j-j348.json b/advisories/unreviewed/2022/05/GHSA-phxj-wq6j-j348/GHSA-phxj-wq6j-j348.json index a1f404a19fc..1799510780b 100644 --- a/advisories/unreviewed/2022/05/GHSA-phxj-wq6j-j348/GHSA-phxj-wq6j-j348.json +++ b/advisories/unreviewed/2022/05/GHSA-phxj-wq6j-j348/GHSA-phxj-wq6j-j348.json @@ -7,12 +7,8 @@ "CVE-2008-5424" ], "details": "The MimeOleClearDirtyTree function in InetComm.dll in Microsoft Outlook Express 6.00.2900.5512 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many \"Content-type: message/rfc822;\" headers, which allows remote attackers to cause a denial of service (infinite loop) via a large e-mail message, a related issue to CVE-2006-1173.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pj49-56rq-x2cw/GHSA-pj49-56rq-x2cw.json b/advisories/unreviewed/2022/05/GHSA-pj49-56rq-x2cw/GHSA-pj49-56rq-x2cw.json index ddcebb2c364..972b3b40765 100644 --- a/advisories/unreviewed/2022/05/GHSA-pj49-56rq-x2cw/GHSA-pj49-56rq-x2cw.json +++ b/advisories/unreviewed/2022/05/GHSA-pj49-56rq-x2cw/GHSA-pj49-56rq-x2cw.json @@ -7,12 +7,8 @@ "CVE-2010-4088" ], "details": "dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a .dir file with \"duplicated references to the same KEY* chunk,\" a different vulnerability than CVE-2010-2581, CVE-2010-4084, CVE-2010-4085, and CVE-2010-4086.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pjjf-xfv6-m83w/GHSA-pjjf-xfv6-m83w.json b/advisories/unreviewed/2022/05/GHSA-pjjf-xfv6-m83w/GHSA-pjjf-xfv6-m83w.json index 70db1a5c9cd..de204ef8fdf 100644 --- a/advisories/unreviewed/2022/05/GHSA-pjjf-xfv6-m83w/GHSA-pjjf-xfv6-m83w.json +++ b/advisories/unreviewed/2022/05/GHSA-pjjf-xfv6-m83w/GHSA-pjjf-xfv6-m83w.json @@ -7,12 +7,8 @@ "CVE-2008-6996" ], "details": "Google Chrome BETA (0.2.149.27) does not prompt the user before saving an executable file, which makes it easier for remote attackers or malware to cause a denial of service (disk consumption) or exploit other vulnerabilities via a URL that references an executable file, possibly related to the \"ask where to save each file before downloading\" setting.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pjjj-jx9c-m2q5/GHSA-pjjj-jx9c-m2q5.json b/advisories/unreviewed/2022/05/GHSA-pjjj-jx9c-m2q5/GHSA-pjjj-jx9c-m2q5.json index 35ede58d621..0a5639c98f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-pjjj-jx9c-m2q5/GHSA-pjjj-jx9c-m2q5.json +++ b/advisories/unreviewed/2022/05/GHSA-pjjj-jx9c-m2q5/GHSA-pjjj-jx9c-m2q5.json @@ -7,12 +7,8 @@ "CVE-2008-4685" ], "details": "Use-after-free vulnerability in the dissect_q931_cause_ie function in packet-q931.c in the Q.931 dissector in Wireshark 0.10.3 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via certain packets that trigger an exception.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pjv6-mw7h-w83g/GHSA-pjv6-mw7h-w83g.json b/advisories/unreviewed/2022/05/GHSA-pjv6-mw7h-w83g/GHSA-pjv6-mw7h-w83g.json index 774b07992a1..fb36091fbc9 100644 --- a/advisories/unreviewed/2022/05/GHSA-pjv6-mw7h-w83g/GHSA-pjv6-mw7h-w83g.json +++ b/advisories/unreviewed/2022/05/GHSA-pjv6-mw7h-w83g/GHSA-pjv6-mw7h-w83g.json @@ -7,12 +7,8 @@ "CVE-2008-6180" ], "details": "SQL injection vulnerability in system/nlb_user.class.php in NewLife Blogger 3.0 and earlier, and possibly 3.3.1, allows remote attackers to execute arbitrary SQL commands via the nlb3 cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pjxg-9586-2cjq/GHSA-pjxg-9586-2cjq.json b/advisories/unreviewed/2022/05/GHSA-pjxg-9586-2cjq/GHSA-pjxg-9586-2cjq.json index 4a6fc813131..08dd65729ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-pjxg-9586-2cjq/GHSA-pjxg-9586-2cjq.json +++ b/advisories/unreviewed/2022/05/GHSA-pjxg-9586-2cjq/GHSA-pjxg-9586-2cjq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pm7w-vpf7-v76r/GHSA-pm7w-vpf7-v76r.json b/advisories/unreviewed/2022/05/GHSA-pm7w-vpf7-v76r/GHSA-pm7w-vpf7-v76r.json index 5f0d389df36..58db39ccee7 100644 --- a/advisories/unreviewed/2022/05/GHSA-pm7w-vpf7-v76r/GHSA-pm7w-vpf7-v76r.json +++ b/advisories/unreviewed/2022/05/GHSA-pm7w-vpf7-v76r/GHSA-pm7w-vpf7-v76r.json @@ -7,12 +7,8 @@ "CVE-2008-6044" ], "details": "Cross-site scripting (XSS) vulnerability in advanced_search_result.php in xt:Commerce 3.0.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the keywords parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pmrg-cp69-mxq2/GHSA-pmrg-cp69-mxq2.json b/advisories/unreviewed/2022/05/GHSA-pmrg-cp69-mxq2/GHSA-pmrg-cp69-mxq2.json index 3a4f07ef678..5762269180c 100644 --- a/advisories/unreviewed/2022/05/GHSA-pmrg-cp69-mxq2/GHSA-pmrg-cp69-mxq2.json +++ b/advisories/unreviewed/2022/05/GHSA-pmrg-cp69-mxq2/GHSA-pmrg-cp69-mxq2.json @@ -7,12 +7,8 @@ "CVE-2008-5105" ], "details": "KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash or hang) via certain (1) APPE, (2) CWD, (3) DELE, (4) MKD, (5) RMD, (6) RETR, (7) RNFR, (8) RNTO, (9) SIZE, and (10) STOR commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pmw4-jjw4-7rgr/GHSA-pmw4-jjw4-7rgr.json b/advisories/unreviewed/2022/05/GHSA-pmw4-jjw4-7rgr/GHSA-pmw4-jjw4-7rgr.json index 433133de1b7..6145450039e 100644 --- a/advisories/unreviewed/2022/05/GHSA-pmw4-jjw4-7rgr/GHSA-pmw4-jjw4-7rgr.json +++ b/advisories/unreviewed/2022/05/GHSA-pmw4-jjw4-7rgr/GHSA-pmw4-jjw4-7rgr.json @@ -7,12 +7,8 @@ "CVE-2010-4231" ], "details": "Directory traversal vulnerability in the web-based administration interface on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pqr2-vxcq-xhh2/GHSA-pqr2-vxcq-xhh2.json b/advisories/unreviewed/2022/05/GHSA-pqr2-vxcq-xhh2/GHSA-pqr2-vxcq-xhh2.json index a7c56c0357e..ee9526f2746 100644 --- a/advisories/unreviewed/2022/05/GHSA-pqr2-vxcq-xhh2/GHSA-pqr2-vxcq-xhh2.json +++ b/advisories/unreviewed/2022/05/GHSA-pqr2-vxcq-xhh2/GHSA-pqr2-vxcq-xhh2.json @@ -7,12 +7,8 @@ "CVE-2008-5528" ], "details": "Aladdin eSafe 7.0.17.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-prg5-357m-6gr2/GHSA-prg5-357m-6gr2.json b/advisories/unreviewed/2022/05/GHSA-prg5-357m-6gr2/GHSA-prg5-357m-6gr2.json index fa97ee70858..ef367fe8994 100644 --- a/advisories/unreviewed/2022/05/GHSA-prg5-357m-6gr2/GHSA-prg5-357m-6gr2.json +++ b/advisories/unreviewed/2022/05/GHSA-prg5-357m-6gr2/GHSA-prg5-357m-6gr2.json @@ -7,12 +7,8 @@ "CVE-2008-5680" ], "details": "Multiple buffer overflows in Opera before 9.63 might allow (1) remote attackers to execute arbitrary code via a crafted text area, or allow (2) user-assisted remote attackers to execute arbitrary code via a long host name in a file: URL. NOTE: this might overlap CVE-2008-5178.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pv42-jr5w-x5vg/GHSA-pv42-jr5w-x5vg.json b/advisories/unreviewed/2022/05/GHSA-pv42-jr5w-x5vg/GHSA-pv42-jr5w-x5vg.json index 693e75ff45e..26f690a02c0 100644 --- a/advisories/unreviewed/2022/05/GHSA-pv42-jr5w-x5vg/GHSA-pv42-jr5w-x5vg.json +++ b/advisories/unreviewed/2022/05/GHSA-pv42-jr5w-x5vg/GHSA-pv42-jr5w-x5vg.json @@ -7,12 +7,8 @@ "CVE-2008-6555" ], "details": "cgi-bin/webutil.pl in The Puppet Master WebUtil allows remote attackers to execute arbitrary commands via shell metacharacters in the dig command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pv9g-qpfc-676g/GHSA-pv9g-qpfc-676g.json b/advisories/unreviewed/2022/05/GHSA-pv9g-qpfc-676g/GHSA-pv9g-qpfc-676g.json index 041e3bc0ccd..52ff15fe652 100644 --- a/advisories/unreviewed/2022/05/GHSA-pv9g-qpfc-676g/GHSA-pv9g-qpfc-676g.json +++ b/advisories/unreviewed/2022/05/GHSA-pv9g-qpfc-676g/GHSA-pv9g-qpfc-676g.json @@ -7,12 +7,8 @@ "CVE-2010-3336" ], "details": "Microsoft Office XP SP3, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka \"MSO Large SPID Read AV Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pvgg-v9px-7wx6/GHSA-pvgg-v9px-7wx6.json b/advisories/unreviewed/2022/05/GHSA-pvgg-v9px-7wx6/GHSA-pvgg-v9px-7wx6.json index 5f326a8e25b..067e237e32a 100644 --- a/advisories/unreviewed/2022/05/GHSA-pvgg-v9px-7wx6/GHSA-pvgg-v9px-7wx6.json +++ b/advisories/unreviewed/2022/05/GHSA-pvgg-v9px-7wx6/GHSA-pvgg-v9px-7wx6.json @@ -7,12 +7,8 @@ "CVE-2008-6766" ], "details": "cart_save.php in ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to cause a denial of service (excessive shopping carts) via a flood of requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pvwc-4c48-gcmh/GHSA-pvwc-4c48-gcmh.json b/advisories/unreviewed/2022/05/GHSA-pvwc-4c48-gcmh/GHSA-pvwc-4c48-gcmh.json index 19f5208041f..7bc49c3ba9e 100644 --- a/advisories/unreviewed/2022/05/GHSA-pvwc-4c48-gcmh/GHSA-pvwc-4c48-gcmh.json +++ b/advisories/unreviewed/2022/05/GHSA-pvwc-4c48-gcmh/GHSA-pvwc-4c48-gcmh.json @@ -7,12 +7,8 @@ "CVE-2008-5539" ], "details": "RISING Antivirus 21.06.31.00 and possibly 20.61.42.00, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pwrq-j4r3-977f/GHSA-pwrq-j4r3-977f.json b/advisories/unreviewed/2022/05/GHSA-pwrq-j4r3-977f/GHSA-pwrq-j4r3-977f.json index 4540baf47d7..54d6b5901b2 100644 --- a/advisories/unreviewed/2022/05/GHSA-pwrq-j4r3-977f/GHSA-pwrq-j4r3-977f.json +++ b/advisories/unreviewed/2022/05/GHSA-pwrq-j4r3-977f/GHSA-pwrq-j4r3-977f.json @@ -7,12 +7,8 @@ "CVE-2008-4990" ], "details": "Enomaly Elastic Computing Platform (ECP), formerly Enomalism, before 2.1.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/enomalism2.pid temporary file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pwxq-hx7r-rw94/GHSA-pwxq-hx7r-rw94.json b/advisories/unreviewed/2022/05/GHSA-pwxq-hx7r-rw94/GHSA-pwxq-hx7r-rw94.json index 5819f291fc9..a6ce06dc850 100644 --- a/advisories/unreviewed/2022/05/GHSA-pwxq-hx7r-rw94/GHSA-pwxq-hx7r-rw94.json +++ b/advisories/unreviewed/2022/05/GHSA-pwxq-hx7r-rw94/GHSA-pwxq-hx7r-rw94.json @@ -7,12 +7,8 @@ "CVE-2010-1888" ], "details": "Race condition in the kernel in Microsoft Windows XP SP3 allows local users to gain privileges via vectors involving thread creation, aka \"Windows Kernel Data Initialization Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q233-wr5g-wcv6/GHSA-q233-wr5g-wcv6.json b/advisories/unreviewed/2022/05/GHSA-q233-wr5g-wcv6/GHSA-q233-wr5g-wcv6.json index 0487620f258..bb8a5bffa63 100644 --- a/advisories/unreviewed/2022/05/GHSA-q233-wr5g-wcv6/GHSA-q233-wr5g-wcv6.json +++ b/advisories/unreviewed/2022/05/GHSA-q233-wr5g-wcv6/GHSA-q233-wr5g-wcv6.json @@ -7,12 +7,8 @@ "CVE-2010-2570" ], "details": "Heap-based buffer overflow in pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, 2007 SP2, and 2010 allows remote attackers to execute arbitrary code via a crafted Publisher file that uses an old file format, aka \"Heap Overrun in pubconv.dll Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q234-9925-w6jp/GHSA-q234-9925-w6jp.json b/advisories/unreviewed/2022/05/GHSA-q234-9925-w6jp/GHSA-q234-9925-w6jp.json index 0feb95629a1..9f502617d43 100644 --- a/advisories/unreviewed/2022/05/GHSA-q234-9925-w6jp/GHSA-q234-9925-w6jp.json +++ b/advisories/unreviewed/2022/05/GHSA-q234-9925-w6jp/GHSA-q234-9925-w6jp.json @@ -7,12 +7,8 @@ "CVE-2008-7257" ], "details": "CRLF injection vulnerability in +webvpn+/index.html in WebVPN on Cisco Adaptive Security Appliances (ASA) 5580 series devices with software before 8.1(2) allows remote attackers to inject arbitrary HTTP headers as demonstrated by a redirect attack involving a %0d%0aLocation%3a sequence in a URI, or conduct HTTP response splitting attacks via unspecified vectors, aka Bug ID CSCsr09163.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q24r-hw65-97ff/GHSA-q24r-hw65-97ff.json b/advisories/unreviewed/2022/05/GHSA-q24r-hw65-97ff/GHSA-q24r-hw65-97ff.json index c279d4fd623..b58ac67af58 100644 --- a/advisories/unreviewed/2022/05/GHSA-q24r-hw65-97ff/GHSA-q24r-hw65-97ff.json +++ b/advisories/unreviewed/2022/05/GHSA-q24r-hw65-97ff/GHSA-q24r-hw65-97ff.json @@ -7,12 +7,8 @@ "CVE-2010-4363" ], "details": "Multiple SQL injection vulnerabilities in contact.php in MRCGIGUY (MCG) FreeTicket 1.0.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) email parameters in a showtickets action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q24w-77p5-v6q8/GHSA-q24w-77p5-v6q8.json b/advisories/unreviewed/2022/05/GHSA-q24w-77p5-v6q8/GHSA-q24w-77p5-v6q8.json index c60302dc752..c3be32bba0d 100644 --- a/advisories/unreviewed/2022/05/GHSA-q24w-77p5-v6q8/GHSA-q24w-77p5-v6q8.json +++ b/advisories/unreviewed/2022/05/GHSA-q24w-77p5-v6q8/GHSA-q24w-77p5-v6q8.json @@ -7,12 +7,8 @@ "CVE-2008-5285" ], "details": "Wireshark 1.0.4 and earlier allows remote attackers to cause a denial of service via a long SMTP request, which triggers an infinite loop.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q36j-6vm5-cjhc/GHSA-q36j-6vm5-cjhc.json b/advisories/unreviewed/2022/05/GHSA-q36j-6vm5-cjhc/GHSA-q36j-6vm5-cjhc.json index 4e12ba0079d..cefbda5e868 100644 --- a/advisories/unreviewed/2022/05/GHSA-q36j-6vm5-cjhc/GHSA-q36j-6vm5-cjhc.json +++ b/advisories/unreviewed/2022/05/GHSA-q36j-6vm5-cjhc/GHSA-q36j-6vm5-cjhc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q376-825x-2mgx/GHSA-q376-825x-2mgx.json b/advisories/unreviewed/2022/05/GHSA-q376-825x-2mgx/GHSA-q376-825x-2mgx.json index 690b7eb05d7..21fbaf3232b 100644 --- a/advisories/unreviewed/2022/05/GHSA-q376-825x-2mgx/GHSA-q376-825x-2mgx.json +++ b/advisories/unreviewed/2022/05/GHSA-q376-825x-2mgx/GHSA-q376-825x-2mgx.json @@ -7,12 +7,8 @@ "CVE-2010-1900" ], "details": "Microsoft Office Word 2002 SP3, 2003 SP3, and 2007 SP2; Microsoft Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Word Viewer; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Works 9 do not properly handle malformed records in a Word file, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted file, aka \"Word Record Parsing Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q395-pc7p-84w6/GHSA-q395-pc7p-84w6.json b/advisories/unreviewed/2022/05/GHSA-q395-pc7p-84w6/GHSA-q395-pc7p-84w6.json index e0e861a224a..ca81f9b1568 100644 --- a/advisories/unreviewed/2022/05/GHSA-q395-pc7p-84w6/GHSA-q395-pc7p-84w6.json +++ b/advisories/unreviewed/2022/05/GHSA-q395-pc7p-84w6/GHSA-q395-pc7p-84w6.json @@ -7,12 +7,8 @@ "CVE-2010-3148" ], "details": "Untrusted search path vulnerability in Microsoft Visio 2003 SP3 allows local users to gain privileges via a Trojan horse mfc71enu.dll file in the current working directory, as demonstrated by a directory that contains a .vsd, .vdx, .vst, or .vtx file, aka \"Microsoft Visio Insecure Library Loading Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q3qq-4fjq-v74p/GHSA-q3qq-4fjq-v74p.json b/advisories/unreviewed/2022/05/GHSA-q3qq-4fjq-v74p/GHSA-q3qq-4fjq-v74p.json index cb87df4e443..947f7f6198a 100644 --- a/advisories/unreviewed/2022/05/GHSA-q3qq-4fjq-v74p/GHSA-q3qq-4fjq-v74p.json +++ b/advisories/unreviewed/2022/05/GHSA-q3qq-4fjq-v74p/GHSA-q3qq-4fjq-v74p.json @@ -7,12 +7,8 @@ "CVE-2010-4242" ], "details": "The hci_uart_tty_open function in the HCI UART driver (drivers/bluetooth/hci_ldisc.c) in the Linux kernel 2.6.36, and possibly other versions, does not verify whether the tty has a write operation, which allows local users to cause a denial of service (NULL pointer dereference) via vectors related to the Bluetooth driver.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -100,9 +96,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q578-mw8r-r8v5/GHSA-q578-mw8r-r8v5.json b/advisories/unreviewed/2022/05/GHSA-q578-mw8r-r8v5/GHSA-q578-mw8r-r8v5.json index 42687f9aed9..fe78c7dc88e 100644 --- a/advisories/unreviewed/2022/05/GHSA-q578-mw8r-r8v5/GHSA-q578-mw8r-r8v5.json +++ b/advisories/unreviewed/2022/05/GHSA-q578-mw8r-r8v5/GHSA-q578-mw8r-r8v5.json @@ -7,12 +7,8 @@ "CVE-2010-2569" ], "details": "pubconv.dll (aka the Publisher Converter DLL) in Microsoft Publisher 2002 SP3, 2003 SP3, and 2007 SP2 does not properly handle an unspecified size field in certain older file formats, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted Publisher file, aka \"Size Value Heap Corruption in pubconv.dll Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q6pj-j9hq-v2j8/GHSA-q6pj-j9hq-v2j8.json b/advisories/unreviewed/2022/05/GHSA-q6pj-j9hq-v2j8/GHSA-q6pj-j9hq-v2j8.json index 40ef2749654..39f86409d42 100644 --- a/advisories/unreviewed/2022/05/GHSA-q6pj-j9hq-v2j8/GHSA-q6pj-j9hq-v2j8.json +++ b/advisories/unreviewed/2022/05/GHSA-q6pj-j9hq-v2j8/GHSA-q6pj-j9hq-v2j8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q778-j99q-6335/GHSA-q778-j99q-6335.json b/advisories/unreviewed/2022/05/GHSA-q778-j99q-6335/GHSA-q778-j99q-6335.json index 8546691d86a..5d76aea81ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-q778-j99q-6335/GHSA-q778-j99q-6335.json +++ b/advisories/unreviewed/2022/05/GHSA-q778-j99q-6335/GHSA-q778-j99q-6335.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q7xr-35mh-wq2h/GHSA-q7xr-35mh-wq2h.json b/advisories/unreviewed/2022/05/GHSA-q7xr-35mh-wq2h/GHSA-q7xr-35mh-wq2h.json index 1a3851330a1..68ca3740b6c 100644 --- a/advisories/unreviewed/2022/05/GHSA-q7xr-35mh-wq2h/GHSA-q7xr-35mh-wq2h.json +++ b/advisories/unreviewed/2022/05/GHSA-q7xr-35mh-wq2h/GHSA-q7xr-35mh-wq2h.json @@ -7,12 +7,8 @@ "CVE-2008-7208" ], "details": "Multiple SQL injection vulnerabilities in OneCMS 2.4, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) username parameter ($usernameb variable) to a_login.php or (2) user parameter to staff.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q8pm-q44h-mwjm/GHSA-q8pm-q44h-mwjm.json b/advisories/unreviewed/2022/05/GHSA-q8pm-q44h-mwjm/GHSA-q8pm-q44h-mwjm.json index 9b4ce033a53..cc6b47438b0 100644 --- a/advisories/unreviewed/2022/05/GHSA-q8pm-q44h-mwjm/GHSA-q8pm-q44h-mwjm.json +++ b/advisories/unreviewed/2022/05/GHSA-q8pm-q44h-mwjm/GHSA-q8pm-q44h-mwjm.json @@ -7,12 +7,8 @@ "CVE-2010-4958" ], "details": "SQL injection vulnerability in index.php in Prado Portal 1.2.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q8wj-wrgg-4x6c/GHSA-q8wj-wrgg-4x6c.json b/advisories/unreviewed/2022/05/GHSA-q8wj-wrgg-4x6c/GHSA-q8wj-wrgg-4x6c.json index a0d513c0d31..ac593a9ddee 100644 --- a/advisories/unreviewed/2022/05/GHSA-q8wj-wrgg-4x6c/GHSA-q8wj-wrgg-4x6c.json +++ b/advisories/unreviewed/2022/05/GHSA-q8wj-wrgg-4x6c/GHSA-q8wj-wrgg-4x6c.json @@ -7,12 +7,8 @@ "CVE-2010-4937" ], "details": "Multiple SQL injection vulnerabilities in the Amblog (com_amblog) component 1.0 for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) articleid or (2) catid parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q94v-58qf-j5g7/GHSA-q94v-58qf-j5g7.json b/advisories/unreviewed/2022/05/GHSA-q94v-58qf-j5g7/GHSA-q94v-58qf-j5g7.json index 432d5588086..ac1f99dc231 100644 --- a/advisories/unreviewed/2022/05/GHSA-q94v-58qf-j5g7/GHSA-q94v-58qf-j5g7.json +++ b/advisories/unreviewed/2022/05/GHSA-q94v-58qf-j5g7/GHSA-q94v-58qf-j5g7.json @@ -7,12 +7,8 @@ "CVE-2008-5527" ], "details": "ESET Smart Security, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q98g-xp96-f3cm/GHSA-q98g-xp96-f3cm.json b/advisories/unreviewed/2022/05/GHSA-q98g-xp96-f3cm/GHSA-q98g-xp96-f3cm.json index b61fb79895c..71b8314fe2c 100644 --- a/advisories/unreviewed/2022/05/GHSA-q98g-xp96-f3cm/GHSA-q98g-xp96-f3cm.json +++ b/advisories/unreviewed/2022/05/GHSA-q98g-xp96-f3cm/GHSA-q98g-xp96-f3cm.json @@ -7,12 +7,8 @@ "CVE-2008-7087" ], "details": "PHP remote file inclusion vulnerability in search_wA.php in OpenPro 1.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the LIBPATH parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q9pr-v3jr-x26x/GHSA-q9pr-v3jr-x26x.json b/advisories/unreviewed/2022/05/GHSA-q9pr-v3jr-x26x/GHSA-q9pr-v3jr-x26x.json index baa907fe2a4..89489d39603 100644 --- a/advisories/unreviewed/2022/05/GHSA-q9pr-v3jr-x26x/GHSA-q9pr-v3jr-x26x.json +++ b/advisories/unreviewed/2022/05/GHSA-q9pr-v3jr-x26x/GHSA-q9pr-v3jr-x26x.json @@ -7,12 +7,8 @@ "CVE-2010-4230" ], "details": "Stack-based buffer overflow in a certain ActiveX control for the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to execute arbitrary code via a long string in the first argument to the connect method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qfh4-2jgc-5v7g/GHSA-qfh4-2jgc-5v7g.json b/advisories/unreviewed/2022/05/GHSA-qfh4-2jgc-5v7g/GHSA-qfh4-2jgc-5v7g.json index 5b61ef75ef5..7c57c2f4a1b 100644 --- a/advisories/unreviewed/2022/05/GHSA-qfh4-2jgc-5v7g/GHSA-qfh4-2jgc-5v7g.json +++ b/advisories/unreviewed/2022/05/GHSA-qfh4-2jgc-5v7g/GHSA-qfh4-2jgc-5v7g.json @@ -7,12 +7,8 @@ "CVE-2010-4185" ], "details": "SQL injection vulnerability in index.php in Energine, possibly 2.3.8 and earlier, allows remote attackers to execute arbitrary SQL commands via the NRGNSID cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qg5m-434j-7fvc/GHSA-qg5m-434j-7fvc.json b/advisories/unreviewed/2022/05/GHSA-qg5m-434j-7fvc/GHSA-qg5m-434j-7fvc.json index 2816d8082af..19ce92f9015 100644 --- a/advisories/unreviewed/2022/05/GHSA-qg5m-434j-7fvc/GHSA-qg5m-434j-7fvc.json +++ b/advisories/unreviewed/2022/05/GHSA-qg5m-434j-7fvc/GHSA-qg5m-434j-7fvc.json @@ -7,12 +7,8 @@ "CVE-2008-5268" ], "details": "SQL injection vulnerability in content/forums/reply.asp in ASPPortal allows remote attackers to execute arbitrary SQL commands via the Topic_Id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qgg8-9g55-hvf5/GHSA-qgg8-9g55-hvf5.json b/advisories/unreviewed/2022/05/GHSA-qgg8-9g55-hvf5/GHSA-qgg8-9g55-hvf5.json index 1545c91d81e..100dd8dee0d 100644 --- a/advisories/unreviewed/2022/05/GHSA-qgg8-9g55-hvf5/GHSA-qgg8-9g55-hvf5.json +++ b/advisories/unreviewed/2022/05/GHSA-qgg8-9g55-hvf5/GHSA-qgg8-9g55-hvf5.json @@ -7,12 +7,8 @@ "CVE-2010-4234" ], "details": "The web server on the Camtron CMNC-200 Full HD IP Camera and TecVoz CMNC-200 Megapixel IP Camera with firmware 1.102A-008 allows remote attackers to cause a denial of service (device reboot) via a large number of requests in a short time interval.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qgjr-23fm-j744/GHSA-qgjr-23fm-j744.json b/advisories/unreviewed/2022/05/GHSA-qgjr-23fm-j744/GHSA-qgjr-23fm-j744.json index 1de70facc46..dc0f7b8c42b 100644 --- a/advisories/unreviewed/2022/05/GHSA-qgjr-23fm-j744/GHSA-qgjr-23fm-j744.json +++ b/advisories/unreviewed/2022/05/GHSA-qgjr-23fm-j744/GHSA-qgjr-23fm-j744.json @@ -7,12 +7,8 @@ "CVE-2008-5692" ], "details": "Ipswitch WS_FTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and read logs via a logLogout action to FTPLogServer/login.asp followed by a request to FTPLogServer/LogViewer.asp with the localhostnull account name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qhrp-xq7c-vp3q/GHSA-qhrp-xq7c-vp3q.json b/advisories/unreviewed/2022/05/GHSA-qhrp-xq7c-vp3q/GHSA-qhrp-xq7c-vp3q.json index d5bad12e8d6..c9844507f0c 100644 --- a/advisories/unreviewed/2022/05/GHSA-qhrp-xq7c-vp3q/GHSA-qhrp-xq7c-vp3q.json +++ b/advisories/unreviewed/2022/05/GHSA-qhrp-xq7c-vp3q/GHSA-qhrp-xq7c-vp3q.json @@ -7,12 +7,8 @@ "CVE-2008-5581" ], "details": "PHP remote file inclusion vulnerability in mini-pub.php/front-end/img.php in mini-pub 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the sFileName parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qhrx-q7mr-q5x7/GHSA-qhrx-q7mr-q5x7.json b/advisories/unreviewed/2022/05/GHSA-qhrx-q7mr-q5x7/GHSA-qhrx-q7mr-q5x7.json index f1c01c0f678..d5a727263b8 100644 --- a/advisories/unreviewed/2022/05/GHSA-qhrx-q7mr-q5x7/GHSA-qhrx-q7mr-q5x7.json +++ b/advisories/unreviewed/2022/05/GHSA-qhrx-q7mr-q5x7/GHSA-qhrx-q7mr-q5x7.json @@ -7,12 +7,8 @@ "CVE-2008-5416" ], "details": "Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine (WMSDE) on Windows Server 2003 SP1 and SP2; and Windows Internal Database (WYukon) SP2 allows remote authenticated users to cause a denial of service (access violation exception) or execute arbitrary code by calling the sp_replwritetovarbin extended stored procedure with a set of invalid parameters that trigger memory overwrite, aka \"SQL Server sp_replwritetovarbin Limited Memory Overwrite Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qj6g-5j96-p3mc/GHSA-qj6g-5j96-p3mc.json b/advisories/unreviewed/2022/05/GHSA-qj6g-5j96-p3mc/GHSA-qj6g-5j96-p3mc.json index 28eb3761a4c..bbcdd4573fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-qj6g-5j96-p3mc/GHSA-qj6g-5j96-p3mc.json +++ b/advisories/unreviewed/2022/05/GHSA-qj6g-5j96-p3mc/GHSA-qj6g-5j96-p3mc.json @@ -7,12 +7,8 @@ "CVE-2008-6418" ], "details": "SQL injection vulnerability in scrape.php in TorrentTrader before 2008-05-13 allows remote attackers to execute arbitrary SQL commands via the info_hash parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qq3g-2vhj-h4wr/GHSA-qq3g-2vhj-h4wr.json b/advisories/unreviewed/2022/05/GHSA-qq3g-2vhj-h4wr/GHSA-qq3g-2vhj-h4wr.json index 41d5b78f7a6..81fcfc384be 100644 --- a/advisories/unreviewed/2022/05/GHSA-qq3g-2vhj-h4wr/GHSA-qq3g-2vhj-h4wr.json +++ b/advisories/unreviewed/2022/05/GHSA-qq3g-2vhj-h4wr/GHSA-qq3g-2vhj-h4wr.json @@ -7,12 +7,8 @@ "CVE-2008-5660" ], "details": "Format string vulnerability in the vinagre_utils_show_error function (src/vinagre-utils.c) in Vinagre 0.5.x before 0.5.2 and 2.x before 2.24.2 might allow remote attackers to execute arbitrary code via format string specifiers in a crafted URI or VNC server response.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qq4x-fwvx-7q2h/GHSA-qq4x-fwvx-7q2h.json b/advisories/unreviewed/2022/05/GHSA-qq4x-fwvx-7q2h/GHSA-qq4x-fwvx-7q2h.json index e8d8f48393d..f3bdc03485d 100644 --- a/advisories/unreviewed/2022/05/GHSA-qq4x-fwvx-7q2h/GHSA-qq4x-fwvx-7q2h.json +++ b/advisories/unreviewed/2022/05/GHSA-qq4x-fwvx-7q2h/GHSA-qq4x-fwvx-7q2h.json @@ -7,12 +7,8 @@ "CVE-2008-5266" ], "details": "Cross-site scripting (XSS) vulnerability in configuration/httpListenerEdit.jsf in the GlassFish 2 UR2 b04 webadmin interface in Sun Java System Application Server 9.1_01 build b09d-fcs and 9.1_02 build b04-fcs allows remote attackers to inject arbitrary web script or HTML via the name parameter, a different vector than CVE-2008-2751.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qq75-75c9-p3pm/GHSA-qq75-75c9-p3pm.json b/advisories/unreviewed/2022/05/GHSA-qq75-75c9-p3pm/GHSA-qq75-75c9-p3pm.json index 8d96f4a0841..1e193b8559f 100644 --- a/advisories/unreviewed/2022/05/GHSA-qq75-75c9-p3pm/GHSA-qq75-75c9-p3pm.json +++ b/advisories/unreviewed/2022/05/GHSA-qq75-75c9-p3pm/GHSA-qq75-75c9-p3pm.json @@ -7,12 +7,8 @@ "CVE-2008-5282" ], "details": "Multiple stack-based buffer overflows in W3C Amaya Web Browser 10.0.1 allow remote attackers to execute arbitrary code via (1) a link with a long HREF attribute, and (2) a DIV tag with a long id attribute.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qq92-j3h2-ch3x/GHSA-qq92-j3h2-ch3x.json b/advisories/unreviewed/2022/05/GHSA-qq92-j3h2-ch3x/GHSA-qq92-j3h2-ch3x.json index fe2ba288915..1a9117ac788 100644 --- a/advisories/unreviewed/2022/05/GHSA-qq92-j3h2-ch3x/GHSA-qq92-j3h2-ch3x.json +++ b/advisories/unreviewed/2022/05/GHSA-qq92-j3h2-ch3x/GHSA-qq92-j3h2-ch3x.json @@ -7,12 +7,8 @@ "CVE-2010-4328" ], "details": "Multiple stack-based buffer overflows in opt/novell/iprint/bin/ipsmd in Novell iPrint for Linux Open Enterprise Server 2 SP2 and SP3 allow remote attackers to execute arbitrary code via unspecified LPR opcodes.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qqmm-47mh-w3h6/GHSA-qqmm-47mh-w3h6.json b/advisories/unreviewed/2022/05/GHSA-qqmm-47mh-w3h6/GHSA-qqmm-47mh-w3h6.json index 12ea39f6707..e660988a9cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-qqmm-47mh-w3h6/GHSA-qqmm-47mh-w3h6.json +++ b/advisories/unreviewed/2022/05/GHSA-qqmm-47mh-w3h6/GHSA-qqmm-47mh-w3h6.json @@ -7,12 +7,8 @@ "CVE-2008-5787" ], "details": "Directory traversal vulnerability in mod.php in Arab Portal 2.1 on Windows allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, in conjunction with a show action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qr75-p27m-crxr/GHSA-qr75-p27m-crxr.json b/advisories/unreviewed/2022/05/GHSA-qr75-p27m-crxr/GHSA-qr75-p27m-crxr.json index 5edc324ddcc..b9132e5af43 100644 --- a/advisories/unreviewed/2022/05/GHSA-qr75-p27m-crxr/GHSA-qr75-p27m-crxr.json +++ b/advisories/unreviewed/2022/05/GHSA-qr75-p27m-crxr/GHSA-qr75-p27m-crxr.json @@ -7,12 +7,8 @@ "CVE-2008-5036" ], "details": "Stack-based buffer overflow in VideoLAN VLC media player 0.9.x before 0.9.6 might allow user-assisted attackers to execute arbitrary code via an an invalid RealText (rt) subtitle file, related to the ParseRealText function in modules/demux/subtitle.c. NOTE: this issue was SPLIT from CVE-2008-5032 on 20081110.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qrm4-g52w-7374/GHSA-qrm4-g52w-7374.json b/advisories/unreviewed/2022/05/GHSA-qrm4-g52w-7374/GHSA-qrm4-g52w-7374.json index 9502799125e..4031c74e230 100644 --- a/advisories/unreviewed/2022/05/GHSA-qrm4-g52w-7374/GHSA-qrm4-g52w-7374.json +++ b/advisories/unreviewed/2022/05/GHSA-qrm4-g52w-7374/GHSA-qrm4-g52w-7374.json @@ -7,12 +7,8 @@ "CVE-2010-4331" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Seo Panel 2.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) default_news or (2) sponsors cookies, which are not properly handled by (a) controllers/index.ctrl.php or (b) controllers/settings.ctrl.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qrpc-576w-m89j/GHSA-qrpc-576w-m89j.json b/advisories/unreviewed/2022/05/GHSA-qrpc-576w-m89j/GHSA-qrpc-576w-m89j.json index 8ddc67dd428..6ebd41edbdc 100644 --- a/advisories/unreviewed/2022/05/GHSA-qrpc-576w-m89j/GHSA-qrpc-576w-m89j.json +++ b/advisories/unreviewed/2022/05/GHSA-qrpc-576w-m89j/GHSA-qrpc-576w-m89j.json @@ -7,12 +7,8 @@ "CVE-2010-3892" ], "details": "Session fixation vulnerability in the login form in the administrator interface in IBM OmniFind Enterprise Edition 8.x and 9.x allows remote attackers to hijack web sessions by replaying a session ID (aka SID) value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qrqx-wqch-hjh4/GHSA-qrqx-wqch-hjh4.json b/advisories/unreviewed/2022/05/GHSA-qrqx-wqch-hjh4/GHSA-qrqx-wqch-hjh4.json index cf0193c2380..9368eb389e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-qrqx-wqch-hjh4/GHSA-qrqx-wqch-hjh4.json +++ b/advisories/unreviewed/2022/05/GHSA-qrqx-wqch-hjh4/GHSA-qrqx-wqch-hjh4.json @@ -7,12 +7,8 @@ "CVE-2010-2572" ], "details": "Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint 95 document, aka \"PowerPoint Parsing Buffer Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qwrc-jw89-7579/GHSA-qwrc-jw89-7579.json b/advisories/unreviewed/2022/05/GHSA-qwrc-jw89-7579/GHSA-qwrc-jw89-7579.json index 96b4912fe37..1aead25af42 100644 --- a/advisories/unreviewed/2022/05/GHSA-qwrc-jw89-7579/GHSA-qwrc-jw89-7579.json +++ b/advisories/unreviewed/2022/05/GHSA-qwrc-jw89-7579/GHSA-qwrc-jw89-7579.json @@ -7,12 +7,8 @@ "CVE-2010-4281" ], "details": "Incomplete blacklist vulnerability in the safe_url_extraclean function in ajax.php in Pandora FMS before 3.1.1 allows remote attackers to execute arbitrary PHP code by using a page parameter containing a UNC share pathname, which bypasses the check for the : (colon) character.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qx57-9wcq-8jq6/GHSA-qx57-9wcq-8jq6.json b/advisories/unreviewed/2022/05/GHSA-qx57-9wcq-8jq6/GHSA-qx57-9wcq-8jq6.json index 427fecf6467..af80433e73d 100644 --- a/advisories/unreviewed/2022/05/GHSA-qx57-9wcq-8jq6/GHSA-qx57-9wcq-8jq6.json +++ b/advisories/unreviewed/2022/05/GHSA-qx57-9wcq-8jq6/GHSA-qx57-9wcq-8jq6.json @@ -7,12 +7,8 @@ "CVE-2008-5520" ], "details": "AhnLab V3 2008.12.4.1 and possibly 2008.9.13.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qxcg-58f3-9fmx/GHSA-qxcg-58f3-9fmx.json b/advisories/unreviewed/2022/05/GHSA-qxcg-58f3-9fmx/GHSA-qxcg-58f3-9fmx.json index 2adeaf46e79..35d6bdf43cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-qxcg-58f3-9fmx/GHSA-qxcg-58f3-9fmx.json +++ b/advisories/unreviewed/2022/05/GHSA-qxcg-58f3-9fmx/GHSA-qxcg-58f3-9fmx.json @@ -7,12 +7,8 @@ "CVE-2010-4152" ], "details": "SQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the i and th vectors are already covered by CVE-2009-0646.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r3mj-758w-78mm/GHSA-r3mj-758w-78mm.json b/advisories/unreviewed/2022/05/GHSA-r3mj-758w-78mm/GHSA-r3mj-758w-78mm.json index 4aa60412a5a..793eab4d428 100644 --- a/advisories/unreviewed/2022/05/GHSA-r3mj-758w-78mm/GHSA-r3mj-758w-78mm.json +++ b/advisories/unreviewed/2022/05/GHSA-r3mj-758w-78mm/GHSA-r3mj-758w-78mm.json @@ -7,12 +7,8 @@ "CVE-2008-5982" ], "details": "Format string vulnerability in BMC PATROL Agent before 3.7.30 allows remote attackers to execute arbitrary code via format string specifiers in an invalid version number to TCP port 3181, which are not properly handled when writing a log message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r3pj-22pj-9252/GHSA-r3pj-22pj-9252.json b/advisories/unreviewed/2022/05/GHSA-r3pj-22pj-9252/GHSA-r3pj-22pj-9252.json index 2ccb45a2713..37278a5e66b 100644 --- a/advisories/unreviewed/2022/05/GHSA-r3pj-22pj-9252/GHSA-r3pj-22pj-9252.json +++ b/advisories/unreviewed/2022/05/GHSA-r3pj-22pj-9252/GHSA-r3pj-22pj-9252.json @@ -7,12 +7,8 @@ "CVE-2010-4977" ], "details": "SQL injection vulnerability in menu.php in the Canteen (com_canteen) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the mealid parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r47x-v4ww-q7cr/GHSA-r47x-v4ww-q7cr.json b/advisories/unreviewed/2022/05/GHSA-r47x-v4ww-q7cr/GHSA-r47x-v4ww-q7cr.json index 8429bf237b4..4ea503d3ef1 100644 --- a/advisories/unreviewed/2022/05/GHSA-r47x-v4ww-q7cr/GHSA-r47x-v4ww-q7cr.json +++ b/advisories/unreviewed/2022/05/GHSA-r47x-v4ww-q7cr/GHSA-r47x-v4ww-q7cr.json @@ -7,12 +7,8 @@ "CVE-2008-7110" ], "details": "Directory traversal vulnerability in the Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 allows remote attackers to upload files to arbitrary locations via a .. (dot dot) in a request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r635-23w3-8797/GHSA-r635-23w3-8797.json b/advisories/unreviewed/2022/05/GHSA-r635-23w3-8797/GHSA-r635-23w3-8797.json index c49e1108bf3..7399b31bcdd 100644 --- a/advisories/unreviewed/2022/05/GHSA-r635-23w3-8797/GHSA-r635-23w3-8797.json +++ b/advisories/unreviewed/2022/05/GHSA-r635-23w3-8797/GHSA-r635-23w3-8797.json @@ -7,12 +7,8 @@ "CVE-2008-5540" ], "details": "Secure Computing Secure Web Gateway (aka Webwasher), when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r78h-r76m-gfm8/GHSA-r78h-r76m-gfm8.json b/advisories/unreviewed/2022/05/GHSA-r78h-r76m-gfm8/GHSA-r78h-r76m-gfm8.json index 013856e3cba..c878572c5da 100644 --- a/advisories/unreviewed/2022/05/GHSA-r78h-r76m-gfm8/GHSA-r78h-r76m-gfm8.json +++ b/advisories/unreviewed/2022/05/GHSA-r78h-r76m-gfm8/GHSA-r78h-r76m-gfm8.json @@ -7,12 +7,8 @@ "CVE-2010-3218" ], "details": "Heap-based buffer overflow in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via malformed records in a Word document, aka \"Word Heap Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r8rq-gjq6-2jqq/GHSA-r8rq-gjq6-2jqq.json b/advisories/unreviewed/2022/05/GHSA-r8rq-gjq6-2jqq/GHSA-r8rq-gjq6-2jqq.json index 8562db3867b..9293051b5ee 100644 --- a/advisories/unreviewed/2022/05/GHSA-r8rq-gjq6-2jqq/GHSA-r8rq-gjq6-2jqq.json +++ b/advisories/unreviewed/2022/05/GHSA-r8rq-gjq6-2jqq/GHSA-r8rq-gjq6-2jqq.json @@ -7,12 +7,8 @@ "CVE-2008-6486" ], "details": "PHP remote file inclusion vulnerability in slideshow_uploadvideo.content.php in SharedLog, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[root_dir] parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r8rv-9vg6-2rcm/GHSA-r8rv-9vg6-2rcm.json b/advisories/unreviewed/2022/05/GHSA-r8rv-9vg6-2rcm/GHSA-r8rv-9vg6-2rcm.json index 18b95bd8e58..4a38db7b440 100644 --- a/advisories/unreviewed/2022/05/GHSA-r8rv-9vg6-2rcm/GHSA-r8rv-9vg6-2rcm.json +++ b/advisories/unreviewed/2022/05/GHSA-r8rv-9vg6-2rcm/GHSA-r8rv-9vg6-2rcm.json @@ -7,12 +7,8 @@ "CVE-2008-6008" ], "details": "hyBook Guestbook Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for hyBook.mdb.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r922-66fj-rg53/GHSA-r922-66fj-rg53.json b/advisories/unreviewed/2022/05/GHSA-r922-66fj-rg53/GHSA-r922-66fj-rg53.json index e7a173cf79c..c4eef272d87 100644 --- a/advisories/unreviewed/2022/05/GHSA-r922-66fj-rg53/GHSA-r922-66fj-rg53.json +++ b/advisories/unreviewed/2022/05/GHSA-r922-66fj-rg53/GHSA-r922-66fj-rg53.json @@ -7,12 +7,8 @@ "CVE-2010-3215" ], "details": "Microsoft Word 2002 SP3 and Office 2004 for Mac do not properly handle unspecified return values during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka \"Word Return Value Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r996-hr3f-f6c5/GHSA-r996-hr3f-f6c5.json b/advisories/unreviewed/2022/05/GHSA-r996-hr3f-f6c5/GHSA-r996-hr3f-f6c5.json index 0be2e6ea33a..4ab4e6d348c 100644 --- a/advisories/unreviewed/2022/05/GHSA-r996-hr3f-f6c5/GHSA-r996-hr3f-f6c5.json +++ b/advisories/unreviewed/2022/05/GHSA-r996-hr3f-f6c5/GHSA-r996-hr3f-f6c5.json @@ -7,12 +7,8 @@ "CVE-2010-4227" ], "details": "The xdrDecodeString function in XNFS.NLM in Novell Netware 6.5 before SP8 allows remote attackers to cause a denial of service (abend) or execute arbitrary code via a crafted, signed value in a NFS RPC request to port UDP 1234, leading to a stack-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r9jp-jvgf-rjh7/GHSA-r9jp-jvgf-rjh7.json b/advisories/unreviewed/2022/05/GHSA-r9jp-jvgf-rjh7/GHSA-r9jp-jvgf-rjh7.json index 5eb37d660e5..398e8848ba6 100644 --- a/advisories/unreviewed/2022/05/GHSA-r9jp-jvgf-rjh7/GHSA-r9jp-jvgf-rjh7.json +++ b/advisories/unreviewed/2022/05/GHSA-r9jp-jvgf-rjh7/GHSA-r9jp-jvgf-rjh7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r9rg-2wj8-2vm9/GHSA-r9rg-2wj8-2vm9.json b/advisories/unreviewed/2022/05/GHSA-r9rg-2wj8-2vm9/GHSA-r9rg-2wj8-2vm9.json index 7f07ad8e440..03af111f589 100644 --- a/advisories/unreviewed/2022/05/GHSA-r9rg-2wj8-2vm9/GHSA-r9rg-2wj8-2vm9.json +++ b/advisories/unreviewed/2022/05/GHSA-r9rg-2wj8-2vm9/GHSA-r9rg-2wj8-2vm9.json @@ -7,12 +7,8 @@ "CVE-2010-4358" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in gb.cgi in MRCGIGUY (MCG) Guestbook 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) name, (2) email, (3) website, and (4) message parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r9vc-22j7-758h/GHSA-r9vc-22j7-758h.json b/advisories/unreviewed/2022/05/GHSA-r9vc-22j7-758h/GHSA-r9vc-22j7-758h.json index bb05b669850..d58826d1436 100644 --- a/advisories/unreviewed/2022/05/GHSA-r9vc-22j7-758h/GHSA-r9vc-22j7-758h.json +++ b/advisories/unreviewed/2022/05/GHSA-r9vc-22j7-758h/GHSA-r9vc-22j7-758h.json @@ -7,12 +7,8 @@ "CVE-2008-7054" ], "details": "Multiple directory traversal vulnerabilities in ezContents 2.0.3 allow remote attackers to include and execute arbitrary local files via the (1) gsLanguage and (2) language_home parameters to modules/diary/showdiary.php; (3) admin_home, (4) gsLanguage, and (5) language_home parameters to modules/diary/showdiarydetail.php; (6) gsLanguage and (7) language_home parameters to modules/diary/submit_diary.php; (8) admin_home parameter to modules/news/news_summary.php; (9) nLink, (10) gsLanguage, and (11) language_home parameters to modules/news/inlinenews.php; and possibly other unspecified vectors in (12) diary/showeventlist.php, (13) gallery/showgallery.php, (14) reviews/showreviews.php, (15) gallery/showgallerydetails.php, (16) reviews/showreviewsdetails.php, (17) news/shownewsdetails.php, (18) gallery/submit_gallery.php, (19) guestbook/submit_guestbook.php, (20) reviews/submit_reviews.php, (21) news/submit_news.php, (22) diary/inlineeventlist.php, and (23) news/archivednews_summary.php in modules/, related to the lack of directory traversal protection in modules/moduleSec.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rcvm-w356-8p99/GHSA-rcvm-w356-8p99.json b/advisories/unreviewed/2022/05/GHSA-rcvm-w356-8p99/GHSA-rcvm-w356-8p99.json index a925cc8198e..20090050aa3 100644 --- a/advisories/unreviewed/2022/05/GHSA-rcvm-w356-8p99/GHSA-rcvm-w356-8p99.json +++ b/advisories/unreviewed/2022/05/GHSA-rcvm-w356-8p99/GHSA-rcvm-w356-8p99.json @@ -7,12 +7,8 @@ "CVE-2008-5263" ], "details": "Multiple stack-based buffer overflows in the mt_codec::getHdrHead function in kernel/kls_hdr/fmt_codec_hdr.cpp in ksquirrel-libs 0.8.0 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE image (aka .hdr file).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rg9h-pjp2-v552/GHSA-rg9h-pjp2-v552.json b/advisories/unreviewed/2022/05/GHSA-rg9h-pjp2-v552/GHSA-rg9h-pjp2-v552.json index a194333cdfa..778886342f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-rg9h-pjp2-v552/GHSA-rg9h-pjp2-v552.json +++ b/advisories/unreviewed/2022/05/GHSA-rg9h-pjp2-v552/GHSA-rg9h-pjp2-v552.json @@ -7,12 +7,8 @@ "CVE-2008-4732" ], "details": "SQL injection vulnerability in ajax_comments.php in the WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the p parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rgq5-xhv3-xmmf/GHSA-rgq5-xhv3-xmmf.json b/advisories/unreviewed/2022/05/GHSA-rgq5-xhv3-xmmf/GHSA-rgq5-xhv3-xmmf.json index 29e35ed83e3..24a4bc2301e 100644 --- a/advisories/unreviewed/2022/05/GHSA-rgq5-xhv3-xmmf/GHSA-rgq5-xhv3-xmmf.json +++ b/advisories/unreviewed/2022/05/GHSA-rgq5-xhv3-xmmf/GHSA-rgq5-xhv3-xmmf.json @@ -7,12 +7,8 @@ "CVE-2008-7026" ], "details": "Unrestricted file upload vulnerability in filesystem3.class.php in eFront 3.5.1 build 2710 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension as an avatar, then accessing it via a direct request to the file in (1) student/avatars/ or (2) professor/avatars/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rhc9-w9j2-xc59/GHSA-rhc9-w9j2-xc59.json b/advisories/unreviewed/2022/05/GHSA-rhc9-w9j2-xc59/GHSA-rhc9-w9j2-xc59.json index f5027d7fd0f..b51db05e31e 100644 --- a/advisories/unreviewed/2022/05/GHSA-rhc9-w9j2-xc59/GHSA-rhc9-w9j2-xc59.json +++ b/advisories/unreviewed/2022/05/GHSA-rhc9-w9j2-xc59/GHSA-rhc9-w9j2-xc59.json @@ -7,12 +7,8 @@ "CVE-2010-3895" ], "details": "esRunCommand in IBM OmniFind Enterprise Edition before 9.1 allows local users to gain privileges by specifying an arbitrary command name as the first argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rj3f-292m-phwf/GHSA-rj3f-292m-phwf.json b/advisories/unreviewed/2022/05/GHSA-rj3f-292m-phwf/GHSA-rj3f-292m-phwf.json index 4a3ac339c22..30e43c8e958 100644 --- a/advisories/unreviewed/2022/05/GHSA-rj3f-292m-phwf/GHSA-rj3f-292m-phwf.json +++ b/advisories/unreviewed/2022/05/GHSA-rj3f-292m-phwf/GHSA-rj3f-292m-phwf.json @@ -7,12 +7,8 @@ "CVE-2011-0364" ], "details": "The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted st_upload request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rj98-p7x9-pmrc/GHSA-rj98-p7x9-pmrc.json b/advisories/unreviewed/2022/05/GHSA-rj98-p7x9-pmrc/GHSA-rj98-p7x9-pmrc.json index 4445c7f31f5..d30b941a22a 100644 --- a/advisories/unreviewed/2022/05/GHSA-rj98-p7x9-pmrc/GHSA-rj98-p7x9-pmrc.json +++ b/advisories/unreviewed/2022/05/GHSA-rj98-p7x9-pmrc/GHSA-rj98-p7x9-pmrc.json @@ -7,12 +7,8 @@ "CVE-2008-7031" ], "details": "Heap-based buffer overflow in Foxit Remote Access Server (aka WAC Server) 2.0 Build 3503 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long SSH packets, a different vulnerability than CVE-2008-0151.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rqm3-w6pg-frpw/GHSA-rqm3-w6pg-frpw.json b/advisories/unreviewed/2022/05/GHSA-rqm3-w6pg-frpw/GHSA-rqm3-w6pg-frpw.json index 06239560131..dbd6ca5396a 100644 --- a/advisories/unreviewed/2022/05/GHSA-rqm3-w6pg-frpw/GHSA-rqm3-w6pg-frpw.json +++ b/advisories/unreviewed/2022/05/GHSA-rqm3-w6pg-frpw/GHSA-rqm3-w6pg-frpw.json @@ -7,12 +7,8 @@ "CVE-2008-5735" ], "details": "Stack-based buffer overflow in skin.c in CoolPlayer 2.17 through 2.19 allows remote attackers to execute arbitrary code via a large PlaylistSkin value in a skin file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rr2v-7hf7-65mj/GHSA-rr2v-7hf7-65mj.json b/advisories/unreviewed/2022/05/GHSA-rr2v-7hf7-65mj/GHSA-rr2v-7hf7-65mj.json index 7a89fa9078b..17a0f6b925e 100644 --- a/advisories/unreviewed/2022/05/GHSA-rr2v-7hf7-65mj/GHSA-rr2v-7hf7-65mj.json +++ b/advisories/unreviewed/2022/05/GHSA-rr2v-7hf7-65mj/GHSA-rr2v-7hf7-65mj.json @@ -7,12 +7,8 @@ "CVE-2008-5670" ], "details": "Textpattern (aka Txp CMS) 4.0.5 does not ask for the old password during a password reset, which makes it easier for remote attackers to change a password after hijacking a session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rr93-4fjx-8j39/GHSA-rr93-4fjx-8j39.json b/advisories/unreviewed/2022/05/GHSA-rr93-4fjx-8j39/GHSA-rr93-4fjx-8j39.json index 84cb5fe8f39..6a2d62161ba 100644 --- a/advisories/unreviewed/2022/05/GHSA-rr93-4fjx-8j39/GHSA-rr93-4fjx-8j39.json +++ b/advisories/unreviewed/2022/05/GHSA-rr93-4fjx-8j39/GHSA-rr93-4fjx-8j39.json @@ -7,12 +7,8 @@ "CVE-2008-6759" ], "details": "ViArt Shop (aka Shopping Cart) 3.5 allows remote attackers to obtain sensitive information via a URL in the POST_DATA parameter to manuals_search.php, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rr9c-g956-7m3m/GHSA-rr9c-g956-7m3m.json b/advisories/unreviewed/2022/05/GHSA-rr9c-g956-7m3m/GHSA-rr9c-g956-7m3m.json index a245312d5ea..7748a99b725 100644 --- a/advisories/unreviewed/2022/05/GHSA-rr9c-g956-7m3m/GHSA-rr9c-g956-7m3m.json +++ b/advisories/unreviewed/2022/05/GHSA-rr9c-g956-7m3m/GHSA-rr9c-g956-7m3m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rv93-54r4-pppm/GHSA-rv93-54r4-pppm.json b/advisories/unreviewed/2022/05/GHSA-rv93-54r4-pppm/GHSA-rv93-54r4-pppm.json index ed46c922056..020e4d4815a 100644 --- a/advisories/unreviewed/2022/05/GHSA-rv93-54r4-pppm/GHSA-rv93-54r4-pppm.json +++ b/advisories/unreviewed/2022/05/GHSA-rv93-54r4-pppm/GHSA-rv93-54r4-pppm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rvg3-83c6-fx75/GHSA-rvg3-83c6-fx75.json b/advisories/unreviewed/2022/05/GHSA-rvg3-83c6-fx75/GHSA-rvg3-83c6-fx75.json index e2c08fc435d..95766dc22d9 100644 --- a/advisories/unreviewed/2022/05/GHSA-rvg3-83c6-fx75/GHSA-rvg3-83c6-fx75.json +++ b/advisories/unreviewed/2022/05/GHSA-rvg3-83c6-fx75/GHSA-rvg3-83c6-fx75.json @@ -7,12 +7,8 @@ "CVE-2008-5558" ], "details": "Asterisk Open Source 1.2.26 through 1.2.30.3 and Business Edition B.2.3.5 through B.2.5.5, when realtime IAX2 users are enabled, allows remote attackers to cause a denial of service (crash) via authentication attempts involving (1) an unknown user or (2) a user using hostname matching.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rxqx-q7w3-5qc5/GHSA-rxqx-q7w3-5qc5.json b/advisories/unreviewed/2022/05/GHSA-rxqx-q7w3-5qc5/GHSA-rxqx-q7w3-5qc5.json index 7e9f755b29d..4b752480e42 100644 --- a/advisories/unreviewed/2022/05/GHSA-rxqx-q7w3-5qc5/GHSA-rxqx-q7w3-5qc5.json +++ b/advisories/unreviewed/2022/05/GHSA-rxqx-q7w3-5qc5/GHSA-rxqx-q7w3-5qc5.json @@ -7,12 +7,8 @@ "CVE-2008-6748" ], "details": "Eval injection vulnerability in Megacubo 5.0.7 allows remote attackers to inject and execute arbitrary PHP code via the play action in a mega:// URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v2qr-5x6m-cfqv/GHSA-v2qr-5x6m-cfqv.json b/advisories/unreviewed/2022/05/GHSA-v2qr-5x6m-cfqv/GHSA-v2qr-5x6m-cfqv.json index 64f29ed4673..a0822b74a24 100644 --- a/advisories/unreviewed/2022/05/GHSA-v2qr-5x6m-cfqv/GHSA-v2qr-5x6m-cfqv.json +++ b/advisories/unreviewed/2022/05/GHSA-v2qr-5x6m-cfqv/GHSA-v2qr-5x6m-cfqv.json @@ -7,12 +7,8 @@ "CVE-2008-5536" ], "details": "Panda Antivirus 9.0.0.4, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v2rw-vqv9-4gch/GHSA-v2rw-vqv9-4gch.json b/advisories/unreviewed/2022/05/GHSA-v2rw-vqv9-4gch/GHSA-v2rw-vqv9-4gch.json index 0056ce36820..67d8d825751 100644 --- a/advisories/unreviewed/2022/05/GHSA-v2rw-vqv9-4gch/GHSA-v2rw-vqv9-4gch.json +++ b/advisories/unreviewed/2022/05/GHSA-v2rw-vqv9-4gch/GHSA-v2rw-vqv9-4gch.json @@ -7,12 +7,8 @@ "CVE-2008-4874" ], "details": "The web component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 has a back door \"service\" account with \"service\" as its password, which makes it easier for remote attackers to obtain access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v4g6-jxjq-q8p5/GHSA-v4g6-jxjq-q8p5.json b/advisories/unreviewed/2022/05/GHSA-v4g6-jxjq-q8p5/GHSA-v4g6-jxjq-q8p5.json index b210ed200de..deb2f13178e 100644 --- a/advisories/unreviewed/2022/05/GHSA-v4g6-jxjq-q8p5/GHSA-v4g6-jxjq-q8p5.json +++ b/advisories/unreviewed/2022/05/GHSA-v4g6-jxjq-q8p5/GHSA-v4g6-jxjq-q8p5.json @@ -7,12 +7,8 @@ "CVE-2010-3199" ], "details": "Untrusted search path vulnerability in TortoiseSVN 1.6.10, Build 19898 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a file that is processed by Tortoise. NOTE: this is only a vulnerability when a file extension is associated with TortoiseProc or TortoiseMerge, which is not the default.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v4h2-5g9q-46fg/GHSA-v4h2-5g9q-46fg.json b/advisories/unreviewed/2022/05/GHSA-v4h2-5g9q-46fg/GHSA-v4h2-5g9q-46fg.json index 16e4eba08f7..1745c1714da 100644 --- a/advisories/unreviewed/2022/05/GHSA-v4h2-5g9q-46fg/GHSA-v4h2-5g9q-46fg.json +++ b/advisories/unreviewed/2022/05/GHSA-v4h2-5g9q-46fg/GHSA-v4h2-5g9q-46fg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v4wc-v886-8pvp/GHSA-v4wc-v886-8pvp.json b/advisories/unreviewed/2022/05/GHSA-v4wc-v886-8pvp/GHSA-v4wc-v886-8pvp.json index cffc37a3db8..31a99d30ac7 100644 --- a/advisories/unreviewed/2022/05/GHSA-v4wc-v886-8pvp/GHSA-v4wc-v886-8pvp.json +++ b/advisories/unreviewed/2022/05/GHSA-v4wc-v886-8pvp/GHSA-v4wc-v886-8pvp.json @@ -7,12 +7,8 @@ "CVE-2008-7211" ], "details": "CreativeLabs es1371mp.sys 5.1.3612.0 WDM audio driver, as used in Ensoniq PCI 1371 sound cards and when running on Windows Vista, does not create a Functional Device Object (FDO) to prevent user-moade access to the Physical Device Object (PDO), which allows local users to gain SYSTEM privileges via a crafted IRP request that dereferences a NULL FsContext pointer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v5wh-j9h4-9f2g/GHSA-v5wh-j9h4-9f2g.json b/advisories/unreviewed/2022/05/GHSA-v5wh-j9h4-9f2g/GHSA-v5wh-j9h4-9f2g.json index e508366d95c..3ecc14d5d82 100644 --- a/advisories/unreviewed/2022/05/GHSA-v5wh-j9h4-9f2g/GHSA-v5wh-j9h4-9f2g.json +++ b/advisories/unreviewed/2022/05/GHSA-v5wh-j9h4-9f2g/GHSA-v5wh-j9h4-9f2g.json @@ -7,12 +7,8 @@ "CVE-2008-7084" ], "details": "Directory traversal vulnerability in the web server 1.0 in Velocity Security Management System allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v62v-445r-w7rj/GHSA-v62v-445r-w7rj.json b/advisories/unreviewed/2022/05/GHSA-v62v-445r-w7rj/GHSA-v62v-445r-w7rj.json index 5a8cc5f3b1d..608866adb49 100644 --- a/advisories/unreviewed/2022/05/GHSA-v62v-445r-w7rj/GHSA-v62v-445r-w7rj.json +++ b/advisories/unreviewed/2022/05/GHSA-v62v-445r-w7rj/GHSA-v62v-445r-w7rj.json @@ -7,12 +7,8 @@ "CVE-2010-4370" ], "details": "Multiple integer overflows in the in_midi plugin in Winamp before 5.6 allow remote attackers to execute arbitrary code via a crafted MIDI file that triggers a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v6cv-jf2w-vf97/GHSA-v6cv-jf2w-vf97.json b/advisories/unreviewed/2022/05/GHSA-v6cv-jf2w-vf97/GHSA-v6cv-jf2w-vf97.json index aa18deec004..4933a82b291 100644 --- a/advisories/unreviewed/2022/05/GHSA-v6cv-jf2w-vf97/GHSA-v6cv-jf2w-vf97.json +++ b/advisories/unreviewed/2022/05/GHSA-v6cv-jf2w-vf97/GHSA-v6cv-jf2w-vf97.json @@ -7,12 +7,8 @@ "CVE-2008-5533" ], "details": "K7AntiVirus 7.10.541 and possibly 7.10.454, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v9g5-pw95-r644/GHSA-v9g5-pw95-r644.json b/advisories/unreviewed/2022/05/GHSA-v9g5-pw95-r644/GHSA-v9g5-pw95-r644.json index a1825e8133c..23a2cf187ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-v9g5-pw95-r644/GHSA-v9g5-pw95-r644.json +++ b/advisories/unreviewed/2022/05/GHSA-v9g5-pw95-r644/GHSA-v9g5-pw95-r644.json @@ -7,12 +7,8 @@ "CVE-2008-6927" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in autoinstall4imagesgalleryupgrade.php in the Fantastico De Luxe Module for cPanel allow remote attackers to inject arbitrary web script or HTML via the (1) localapp, (2) updatedir, (3) scriptpath_show, (4) domain_show, (5) thispage, (6) thisapp, and (7) currentversion parameters in an Upgrade action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vcfh-ffm4-cq9m/GHSA-vcfh-ffm4-cq9m.json b/advisories/unreviewed/2022/05/GHSA-vcfh-ffm4-cq9m/GHSA-vcfh-ffm4-cq9m.json index 007c7f7f997..15f44b769be 100644 --- a/advisories/unreviewed/2022/05/GHSA-vcfh-ffm4-cq9m/GHSA-vcfh-ffm4-cq9m.json +++ b/advisories/unreviewed/2022/05/GHSA-vcfh-ffm4-cq9m/GHSA-vcfh-ffm4-cq9m.json @@ -7,12 +7,8 @@ "CVE-2010-3890" ], "details": "Cross-site scripting (XSS) vulnerability in IBM OmniFind Enterprise Edition before 9.1 allows remote attackers to inject arbitrary web script or HTML via the command parameter to the administration interface, as demonstrated by the command parameter to ESAdmin/collection.do.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vcjp-2g6v-4gp6/GHSA-vcjp-2g6v-4gp6.json b/advisories/unreviewed/2022/05/GHSA-vcjp-2g6v-4gp6/GHSA-vcjp-2g6v-4gp6.json index 99d64c625a9..5562c9c71f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-vcjp-2g6v-4gp6/GHSA-vcjp-2g6v-4gp6.json +++ b/advisories/unreviewed/2022/05/GHSA-vcjp-2g6v-4gp6/GHSA-vcjp-2g6v-4gp6.json @@ -7,12 +7,8 @@ "CVE-2008-5689" ], "details": "tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted SIOCGTUNPARAM IOCTL request, which triggers a NULL pointer dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vcmg-5vv8-446j/GHSA-vcmg-5vv8-446j.json b/advisories/unreviewed/2022/05/GHSA-vcmg-5vv8-446j/GHSA-vcmg-5vv8-446j.json index 43987abcf56..a1ed304375a 100644 --- a/advisories/unreviewed/2022/05/GHSA-vcmg-5vv8-446j/GHSA-vcmg-5vv8-446j.json +++ b/advisories/unreviewed/2022/05/GHSA-vcmg-5vv8-446j/GHSA-vcmg-5vv8-446j.json @@ -7,12 +7,8 @@ "CVE-2008-6438" ], "details": "SQL injection vulnerability in macgurublog_menu/macgurublog.php in the MacGuru BLOG Engine plugin 2.2 for e107 allows remote attackers to execute arbitrary SQL commands via the uid parameter, a different vector than CVE-2008-2455. NOTE: it was later reported that 2.1.4 is also affected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vf7v-fxq6-4mfc/GHSA-vf7v-fxq6-4mfc.json b/advisories/unreviewed/2022/05/GHSA-vf7v-fxq6-4mfc/GHSA-vf7v-fxq6-4mfc.json index 1347822349b..f51837bad64 100644 --- a/advisories/unreviewed/2022/05/GHSA-vf7v-fxq6-4mfc/GHSA-vf7v-fxq6-4mfc.json +++ b/advisories/unreviewed/2022/05/GHSA-vf7v-fxq6-4mfc/GHSA-vf7v-fxq6-4mfc.json @@ -7,12 +7,8 @@ "CVE-2008-5264" ], "details": "Cross-site scripting (XSS) vulnerability in searcher.exe in Tornado Knowledge Retrieval System 4.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the p parameter in a root action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vfp4-vxgp-j26v/GHSA-vfp4-vxgp-j26v.json b/advisories/unreviewed/2022/05/GHSA-vfp4-vxgp-j26v/GHSA-vfp4-vxgp-j26v.json index bb259c72698..d4464f3fc43 100644 --- a/advisories/unreviewed/2022/05/GHSA-vfp4-vxgp-j26v/GHSA-vfp4-vxgp-j26v.json +++ b/advisories/unreviewed/2022/05/GHSA-vfp4-vxgp-j26v/GHSA-vfp4-vxgp-j26v.json @@ -7,12 +7,8 @@ "CVE-2008-5555" ], "details": "Microsoft Internet Explorer 8.0 Beta 2 relies on the XDomainRequestAllowed HTTP header to authorize data exchange between domains, which allows remote attackers to bypass the product's XSS Filter protection mechanism, and conduct XSS and cross-domain attacks, by injecting this header after a CRLF sequence, related to \"XDomainRequest Allowed Injection (XAI).\" NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to \"address every conceivable XSS attack scenario.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vgfj-45qm-r7fv/GHSA-vgfj-45qm-r7fv.json b/advisories/unreviewed/2022/05/GHSA-vgfj-45qm-r7fv/GHSA-vgfj-45qm-r7fv.json index 229608e92eb..edd6e79dcf5 100644 --- a/advisories/unreviewed/2022/05/GHSA-vgfj-45qm-r7fv/GHSA-vgfj-45qm-r7fv.json +++ b/advisories/unreviewed/2022/05/GHSA-vgfj-45qm-r7fv/GHSA-vgfj-45qm-r7fv.json @@ -7,12 +7,8 @@ "CVE-2008-4730" ], "details": "Cross-site scripting (XSS) vulnerability in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openid_trust_root parameter and an inconsistent openid_return_to parameter, which is not properly handled in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vh5q-pcjq-4383/GHSA-vh5q-pcjq-4383.json b/advisories/unreviewed/2022/05/GHSA-vh5q-pcjq-4383/GHSA-vh5q-pcjq-4383.json index 28c688fa868..c258617a34a 100644 --- a/advisories/unreviewed/2022/05/GHSA-vh5q-pcjq-4383/GHSA-vh5q-pcjq-4383.json +++ b/advisories/unreviewed/2022/05/GHSA-vh5q-pcjq-4383/GHSA-vh5q-pcjq-4383.json @@ -7,12 +7,8 @@ "CVE-2010-4402" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Register Plus plugin 3.5.1 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) firstname, (2) lastname, (3) website, (4) aim, (5) yahoo, (6) jabber, (7) about, (8) pass1, and (9) pass2 parameters in a register action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vhq2-p9cv-x883/GHSA-vhq2-p9cv-x883.json b/advisories/unreviewed/2022/05/GHSA-vhq2-p9cv-x883/GHSA-vhq2-p9cv-x883.json index 841ffca384b..85feb773ee7 100644 --- a/advisories/unreviewed/2022/05/GHSA-vhq2-p9cv-x883/GHSA-vhq2-p9cv-x883.json +++ b/advisories/unreviewed/2022/05/GHSA-vhq2-p9cv-x883/GHSA-vhq2-p9cv-x883.json @@ -7,12 +7,8 @@ "CVE-2008-5745" ], "details": "Integer overflow in quartz.dll in the DirectShow framework in Microsoft Windows Media Player (WMP) 9, 10, and 11, including 11.0.5721.5260, allows remote attackers to cause a denial of service (application crash) via a crafted (1) WAV, (2) SND, or (3) MID file. NOTE: this has been incorrectly reported as a code-execution vulnerability. NOTE: it is not clear whether this issue is related to CVE-2008-4927.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vmjv-mxvq-6g4x/GHSA-vmjv-mxvq-6g4x.json b/advisories/unreviewed/2022/05/GHSA-vmjv-mxvq-6g4x/GHSA-vmjv-mxvq-6g4x.json index 5ac713d84f1..9060397a78c 100644 --- a/advisories/unreviewed/2022/05/GHSA-vmjv-mxvq-6g4x/GHSA-vmjv-mxvq-6g4x.json +++ b/advisories/unreviewed/2022/05/GHSA-vmjv-mxvq-6g4x/GHSA-vmjv-mxvq-6g4x.json @@ -7,12 +7,8 @@ "CVE-2010-4828" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in SolarWinds Orion Network Performance Monitor (NPM) 10.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Title parameter to MapView.aspx; NetObject parameter to (2) NodeDetails.aspx and (3) InterfaceDetails.aspx; and the (4) ChartName parameter to CustomChart.aspx.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vqfc-8pxq-vr5h/GHSA-vqfc-8pxq-vr5h.json b/advisories/unreviewed/2022/05/GHSA-vqfc-8pxq-vr5h/GHSA-vqfc-8pxq-vr5h.json index 3cf527c736e..b03264ed7df 100644 --- a/advisories/unreviewed/2022/05/GHSA-vqfc-8pxq-vr5h/GHSA-vqfc-8pxq-vr5h.json +++ b/advisories/unreviewed/2022/05/GHSA-vqfc-8pxq-vr5h/GHSA-vqfc-8pxq-vr5h.json @@ -7,12 +7,8 @@ "CVE-2010-3146" ], "details": "Multiple untrusted search path vulnerabilities in Microsoft Groove 2007 SP2 allow local users to gain privileges via a Trojan horse (1) mso.dll or (2) GroovePerfmon.dll file in the current working directory, as demonstrated by a directory that contains a Groove vCard (.vcg) or Groove Tool Archive (.gta) file, aka \"Microsoft Groove Insecure Library Loading Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vqpj-c365-5qxp/GHSA-vqpj-c365-5qxp.json b/advisories/unreviewed/2022/05/GHSA-vqpj-c365-5qxp/GHSA-vqpj-c365-5qxp.json index dc9cf5b96cc..8265ff8e6f4 100644 --- a/advisories/unreviewed/2022/05/GHSA-vqpj-c365-5qxp/GHSA-vqpj-c365-5qxp.json +++ b/advisories/unreviewed/2022/05/GHSA-vqpj-c365-5qxp/GHSA-vqpj-c365-5qxp.json @@ -7,12 +7,8 @@ "CVE-2008-5922" ], "details": "Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Cant Find A Gaming CMS (CFAGCMS) 1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) main and (2) right parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vrj5-ww9h-qh46/GHSA-vrj5-ww9h-qh46.json b/advisories/unreviewed/2022/05/GHSA-vrj5-ww9h-qh46/GHSA-vrj5-ww9h-qh46.json index 80d6a0c9f7d..52242c7219a 100644 --- a/advisories/unreviewed/2022/05/GHSA-vrj5-ww9h-qh46/GHSA-vrj5-ww9h-qh46.json +++ b/advisories/unreviewed/2022/05/GHSA-vrj5-ww9h-qh46/GHSA-vrj5-ww9h-qh46.json @@ -7,12 +7,8 @@ "CVE-2008-6509" ], "details": "SQL injection vulnerability in CallLogDAO in SIP Plugin in Openfire 3.6.0a and earlier allows remote attackers to execute arbitrary SQL commands via the type parameter to sipark-log-summary.jsp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vrqj-4f32-p884/GHSA-vrqj-4f32-p884.json b/advisories/unreviewed/2022/05/GHSA-vrqj-4f32-p884/GHSA-vrqj-4f32-p884.json index f19e90252f9..74a14e89bfc 100644 --- a/advisories/unreviewed/2022/05/GHSA-vrqj-4f32-p884/GHSA-vrqj-4f32-p884.json +++ b/advisories/unreviewed/2022/05/GHSA-vrqj-4f32-p884/GHSA-vrqj-4f32-p884.json @@ -7,12 +7,8 @@ "CVE-2010-4297" ], "details": "The VMware Tools update functionality in VMware Workstation 6.5.x before 6.5.5 build 328052 and 7.x before 7.1.2 build 301548; VMware Player 2.5.x before 2.5.5 build 328052 and 3.1.x before 3.1.2 build 301548; VMware Server 2.0.2; VMware Fusion 2.x before 2.0.8 build 328035 and 3.1.x before 3.1.2 build 332101; VMware ESXi 3.5, 4.0, and 4.1; and VMware ESX 3.0.3, 3.5, 4.0, and 4.1 allows host OS users to gain privileges on the guest OS via unspecified vectors, related to a \"command injection\" issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vv4f-xcqh-2xqq/GHSA-vv4f-xcqh-2xqq.json b/advisories/unreviewed/2022/05/GHSA-vv4f-xcqh-2xqq/GHSA-vv4f-xcqh-2xqq.json index 4c137c250fd..2e8e5514737 100644 --- a/advisories/unreviewed/2022/05/GHSA-vv4f-xcqh-2xqq/GHSA-vv4f-xcqh-2xqq.json +++ b/advisories/unreviewed/2022/05/GHSA-vv4f-xcqh-2xqq/GHSA-vv4f-xcqh-2xqq.json @@ -7,12 +7,8 @@ "CVE-2010-4332" ], "details": "Pointter PHP Content Management System 1.0 allows remote attackers to bypass authentication and obtain administrative privileges via arbitrary values of the auser and apass cookies.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vw9q-9wcc-rxmc/GHSA-vw9q-9wcc-rxmc.json b/advisories/unreviewed/2022/05/GHSA-vw9q-9wcc-rxmc/GHSA-vw9q-9wcc-rxmc.json index 5e56b5261cc..90aa9c53f65 100644 --- a/advisories/unreviewed/2022/05/GHSA-vw9q-9wcc-rxmc/GHSA-vw9q-9wcc-rxmc.json +++ b/advisories/unreviewed/2022/05/GHSA-vw9q-9wcc-rxmc/GHSA-vw9q-9wcc-rxmc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vwcj-c7v2-8r5p/GHSA-vwcj-c7v2-8r5p.json b/advisories/unreviewed/2022/05/GHSA-vwcj-c7v2-8r5p/GHSA-vwcj-c7v2-8r5p.json index 62110990666..4729320b373 100644 --- a/advisories/unreviewed/2022/05/GHSA-vwcj-c7v2-8r5p/GHSA-vwcj-c7v2-8r5p.json +++ b/advisories/unreviewed/2022/05/GHSA-vwcj-c7v2-8r5p/GHSA-vwcj-c7v2-8r5p.json @@ -7,12 +7,8 @@ "CVE-2008-6557" ], "details": "cgi-bin/webutil.pl in The Puppet Master WebUtil 2.7 allows remote attackers to execute arbitrary commands via shell metacharacters in the details command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vx7j-xjrp-5gjh/GHSA-vx7j-xjrp-5gjh.json b/advisories/unreviewed/2022/05/GHSA-vx7j-xjrp-5gjh/GHSA-vx7j-xjrp-5gjh.json index 53c5faef3e9..84d402b0d00 100644 --- a/advisories/unreviewed/2022/05/GHSA-vx7j-xjrp-5gjh/GHSA-vx7j-xjrp-5gjh.json +++ b/advisories/unreviewed/2022/05/GHSA-vx7j-xjrp-5gjh/GHSA-vx7j-xjrp-5gjh.json @@ -7,12 +7,8 @@ "CVE-2010-5002" ], "details": "Cross-site scripting (XSS) vulnerability in modules/slideshowmodule/slideshow.js.php in Exponent CMS 0.97.0 allows remote attackers to inject arbitrary web script or HTML via the u parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vxmj-g28c-3v84/GHSA-vxmj-g28c-3v84.json b/advisories/unreviewed/2022/05/GHSA-vxmj-g28c-3v84/GHSA-vxmj-g28c-3v84.json index c9778aaa5cc..ba5ee067a67 100644 --- a/advisories/unreviewed/2022/05/GHSA-vxmj-g28c-3v84/GHSA-vxmj-g28c-3v84.json +++ b/advisories/unreviewed/2022/05/GHSA-vxmj-g28c-3v84/GHSA-vxmj-g28c-3v84.json @@ -7,12 +7,8 @@ "CVE-2008-7186" ], "details": "Coppermine Photo Gallery (CPG) 1.4.14 does not restrict access to update.php, which allows remote attackers to obtain sensitive information such as the database table prefix via a direct request. NOTE: this might be leveraged for attacks against CVE-2008-0504.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vxx9-rqm9-wvhp/GHSA-vxx9-rqm9-wvhp.json b/advisories/unreviewed/2022/05/GHSA-vxx9-rqm9-wvhp/GHSA-vxx9-rqm9-wvhp.json index bea350fb85a..e4697579392 100644 --- a/advisories/unreviewed/2022/05/GHSA-vxx9-rqm9-wvhp/GHSA-vxx9-rqm9-wvhp.json +++ b/advisories/unreviewed/2022/05/GHSA-vxx9-rqm9-wvhp/GHSA-vxx9-rqm9-wvhp.json @@ -7,12 +7,8 @@ "CVE-2008-4680" ], "details": "packet-usb.c in the USB dissector in Wireshark 0.99.7 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via a malformed USB Request Block (URB).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w2rp-298m-8m2f/GHSA-w2rp-298m-8m2f.json b/advisories/unreviewed/2022/05/GHSA-w2rp-298m-8m2f/GHSA-w2rp-298m-8m2f.json index f8aab84dea5..afd1f9cf210 100644 --- a/advisories/unreviewed/2022/05/GHSA-w2rp-298m-8m2f/GHSA-w2rp-298m-8m2f.json +++ b/advisories/unreviewed/2022/05/GHSA-w2rp-298m-8m2f/GHSA-w2rp-298m-8m2f.json @@ -7,12 +7,8 @@ "CVE-2010-5038" ], "details": "PHP remote file inclusion vulnerability in contact/contact.php in Groone's Simple Contact Form allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w3cc-g5gv-rc8v/GHSA-w3cc-g5gv-rc8v.json b/advisories/unreviewed/2022/05/GHSA-w3cc-g5gv-rc8v/GHSA-w3cc-g5gv-rc8v.json index d6e1c1b8969..92dc0371405 100644 --- a/advisories/unreviewed/2022/05/GHSA-w3cc-g5gv-rc8v/GHSA-w3cc-g5gv-rc8v.json +++ b/advisories/unreviewed/2022/05/GHSA-w3cc-g5gv-rc8v/GHSA-w3cc-g5gv-rc8v.json @@ -7,12 +7,8 @@ "CVE-2008-5300" ], "details": "Linux kernel 2.6.28 allows local users to cause a denial of service (\"soft lockup\" and process loss) via a large number of sendmsg function calls, which does not block during AF_UNIX garbage collection and triggers an OOM condition, a different vulnerability than CVE-2008-5029.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -140,9 +136,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w3g5-m74v-6h4q/GHSA-w3g5-m74v-6h4q.json b/advisories/unreviewed/2022/05/GHSA-w3g5-m74v-6h4q/GHSA-w3g5-m74v-6h4q.json index bd6bdac430c..7a4b36c0f82 100644 --- a/advisories/unreviewed/2022/05/GHSA-w3g5-m74v-6h4q/GHSA-w3g5-m74v-6h4q.json +++ b/advisories/unreviewed/2022/05/GHSA-w3g5-m74v-6h4q/GHSA-w3g5-m74v-6h4q.json @@ -7,12 +7,8 @@ "CVE-2010-4881" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in calendar.class.php in ApPHP Calendar (ApPHP CAL) allow remote attackers to hijack the authentication of unspecified victims for requests that use the (1) category_name, (2) category_description, (3) event_name, or (4) event_description parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w4jm-8grf-7wqc/GHSA-w4jm-8grf-7wqc.json b/advisories/unreviewed/2022/05/GHSA-w4jm-8grf-7wqc/GHSA-w4jm-8grf-7wqc.json index d3dce0e1041..8ad400e9013 100644 --- a/advisories/unreviewed/2022/05/GHSA-w4jm-8grf-7wqc/GHSA-w4jm-8grf-7wqc.json +++ b/advisories/unreviewed/2022/05/GHSA-w4jm-8grf-7wqc/GHSA-w4jm-8grf-7wqc.json @@ -7,12 +7,8 @@ "CVE-2008-6051" ], "details": "MetaCart Free stores metacart.mdb under the web root with insufficient access control, which allows remote attackers to obtain usernames and passwords via a direct request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w6p8-2rhg-6vh7/GHSA-w6p8-2rhg-6vh7.json b/advisories/unreviewed/2022/05/GHSA-w6p8-2rhg-6vh7/GHSA-w6p8-2rhg-6vh7.json index 589ee4f1aab..231726b1df5 100644 --- a/advisories/unreviewed/2022/05/GHSA-w6p8-2rhg-6vh7/GHSA-w6p8-2rhg-6vh7.json +++ b/advisories/unreviewed/2022/05/GHSA-w6p8-2rhg-6vh7/GHSA-w6p8-2rhg-6vh7.json @@ -7,12 +7,8 @@ "CVE-2008-7192" ], "details": "Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board (wBB) 3.0.1, and possibly other 3.x versions, allows remote attackers to hijack the authentication of users for requests that delete private messages via the pmID parameter in a delete action in a PM page, a different vulnerability than CVE-2008-0472.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w77v-9mp2-fhr5/GHSA-w77v-9mp2-fhr5.json b/advisories/unreviewed/2022/05/GHSA-w77v-9mp2-fhr5/GHSA-w77v-9mp2-fhr5.json index 1c2ee88e6b3..cd2b2bfb9d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-w77v-9mp2-fhr5/GHSA-w77v-9mp2-fhr5.json +++ b/advisories/unreviewed/2022/05/GHSA-w77v-9mp2-fhr5/GHSA-w77v-9mp2-fhr5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w7h9-gw4m-x346/GHSA-w7h9-gw4m-x346.json b/advisories/unreviewed/2022/05/GHSA-w7h9-gw4m-x346/GHSA-w7h9-gw4m-x346.json index 6b1ef012530..413dc61f98f 100644 --- a/advisories/unreviewed/2022/05/GHSA-w7h9-gw4m-x346/GHSA-w7h9-gw4m-x346.json +++ b/advisories/unreviewed/2022/05/GHSA-w7h9-gw4m-x346/GHSA-w7h9-gw4m-x346.json @@ -7,12 +7,8 @@ "CVE-2008-5935" ], "details": "Facto stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing the password via a direct request for database/facto.mdb. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w7jr-5292-3wmh/GHSA-w7jr-5292-3wmh.json b/advisories/unreviewed/2022/05/GHSA-w7jr-5292-3wmh/GHSA-w7jr-5292-3wmh.json index a9eb5a79299..a73988d3d71 100644 --- a/advisories/unreviewed/2022/05/GHSA-w7jr-5292-3wmh/GHSA-w7jr-5292-3wmh.json +++ b/advisories/unreviewed/2022/05/GHSA-w7jr-5292-3wmh/GHSA-w7jr-5292-3wmh.json @@ -7,12 +7,8 @@ "CVE-2008-5446" ], "details": "Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10 CU2 and 12.0.6 allows remote authenticated users to affect confidentiality via unknown vectors. NOTE: the previous information was obtained from the January 2009 CPU. Oracle has not commented on reliable researcher claims that this issue is related to unrestricted guest access to the \"About Us Page\" in the Oracle Applications Framework (OAF), which allows attackers to obtain sensitive system and application environment information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w92f-fprr-h2jq/GHSA-w92f-fprr-h2jq.json b/advisories/unreviewed/2022/05/GHSA-w92f-fprr-h2jq/GHSA-w92f-fprr-h2jq.json index 90d50e949c0..b03c2848231 100644 --- a/advisories/unreviewed/2022/05/GHSA-w92f-fprr-h2jq/GHSA-w92f-fprr-h2jq.json +++ b/advisories/unreviewed/2022/05/GHSA-w92f-fprr-h2jq/GHSA-w92f-fprr-h2jq.json @@ -7,12 +7,8 @@ "CVE-2008-7070" ], "details": "Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a \" (quote) followed by command line switches in a (1) irc:///, (2) irc6:///, (3) ircs:///, or (4) and ircs6:/// URI. NOTE: this might be due to an incomplete fix for CVE-2007-2951.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w97q-5pwp-jc64/GHSA-w97q-5pwp-jc64.json b/advisories/unreviewed/2022/05/GHSA-w97q-5pwp-jc64/GHSA-w97q-5pwp-jc64.json index fb223641dbc..31eca43f9aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-w97q-5pwp-jc64/GHSA-w97q-5pwp-jc64.json +++ b/advisories/unreviewed/2022/05/GHSA-w97q-5pwp-jc64/GHSA-w97q-5pwp-jc64.json @@ -7,12 +7,8 @@ "CVE-2008-6522" ], "details": "Multiple directory traversal vulnerabilities in the RenderFile function in ContentRender.class.php in Terracotta (aka OpenTerracotta) 0.6.1, and possibly other versions, allow remote attackers to list arbitrary directories and read arbitrary files via a .. (dot dot) in the (1) CurrentDirectory and (2) File parameters to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w9p3-9v5m-q2g3/GHSA-w9p3-9v5m-q2g3.json b/advisories/unreviewed/2022/05/GHSA-w9p3-9v5m-q2g3/GHSA-w9p3-9v5m-q2g3.json index efb69eac877..e7c99233abf 100644 --- a/advisories/unreviewed/2022/05/GHSA-w9p3-9v5m-q2g3/GHSA-w9p3-9v5m-q2g3.json +++ b/advisories/unreviewed/2022/05/GHSA-w9p3-9v5m-q2g3/GHSA-w9p3-9v5m-q2g3.json @@ -7,12 +7,8 @@ "CVE-2008-6712" ], "details": "The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request, which triggers a NULL pointer dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w9qp-vgv8-mxfq/GHSA-w9qp-vgv8-mxfq.json b/advisories/unreviewed/2022/05/GHSA-w9qp-vgv8-mxfq/GHSA-w9qp-vgv8-mxfq.json index aa8e24ed7d0..bfc4651d46b 100644 --- a/advisories/unreviewed/2022/05/GHSA-w9qp-vgv8-mxfq/GHSA-w9qp-vgv8-mxfq.json +++ b/advisories/unreviewed/2022/05/GHSA-w9qp-vgv8-mxfq/GHSA-w9qp-vgv8-mxfq.json @@ -7,12 +7,8 @@ "CVE-2008-4741" ], "details": "Directory traversal vulnerability in index.php in FAR-PHP 1.00, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the c parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w9vw-r38j-pm48/GHSA-w9vw-r38j-pm48.json b/advisories/unreviewed/2022/05/GHSA-w9vw-r38j-pm48/GHSA-w9vw-r38j-pm48.json index 98db3549748..ceb48fc3392 100644 --- a/advisories/unreviewed/2022/05/GHSA-w9vw-r38j-pm48/GHSA-w9vw-r38j-pm48.json +++ b/advisories/unreviewed/2022/05/GHSA-w9vw-r38j-pm48/GHSA-w9vw-r38j-pm48.json @@ -7,12 +7,8 @@ "CVE-2008-5616" ], "details": "Stack-based buffer overflow in the demux_open_vqf function in libmpdemux/demux_vqf.c in MPlayer 1.0 rc2 before r28150 allows remote attackers to execute arbitrary code via a malformed TwinVQ file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w9w5-9fqq-8956/GHSA-w9w5-9fqq-8956.json b/advisories/unreviewed/2022/05/GHSA-w9w5-9fqq-8956/GHSA-w9w5-9fqq-8956.json index 09ac8911201..652eaf2ece9 100644 --- a/advisories/unreviewed/2022/05/GHSA-w9w5-9fqq-8956/GHSA-w9w5-9fqq-8956.json +++ b/advisories/unreviewed/2022/05/GHSA-w9w5-9fqq-8956/GHSA-w9w5-9fqq-8956.json @@ -7,12 +7,8 @@ "CVE-2010-3237" ], "details": "Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka \"Merge Cell Record Pointer Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wc5w-8r86-c387/GHSA-wc5w-8r86-c387.json b/advisories/unreviewed/2022/05/GHSA-wc5w-8r86-c387/GHSA-wc5w-8r86-c387.json index 71017caa0a6..cf720a66271 100644 --- a/advisories/unreviewed/2022/05/GHSA-wc5w-8r86-c387/GHSA-wc5w-8r86-c387.json +++ b/advisories/unreviewed/2022/05/GHSA-wc5w-8r86-c387/GHSA-wc5w-8r86-c387.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wc6h-rjj3-rv8r/GHSA-wc6h-rjj3-rv8r.json b/advisories/unreviewed/2022/05/GHSA-wc6h-rjj3-rv8r/GHSA-wc6h-rjj3-rv8r.json index 939a66f2351..b34b1c88c39 100644 --- a/advisories/unreviewed/2022/05/GHSA-wc6h-rjj3-rv8r/GHSA-wc6h-rjj3-rv8r.json +++ b/advisories/unreviewed/2022/05/GHSA-wc6h-rjj3-rv8r/GHSA-wc6h-rjj3-rv8r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wcmq-9r4x-w336/GHSA-wcmq-9r4x-w336.json b/advisories/unreviewed/2022/05/GHSA-wcmq-9r4x-w336/GHSA-wcmq-9r4x-w336.json index c95b4fc305d..799835e2585 100644 --- a/advisories/unreviewed/2022/05/GHSA-wcmq-9r4x-w336/GHSA-wcmq-9r4x-w336.json +++ b/advisories/unreviewed/2022/05/GHSA-wcmq-9r4x-w336/GHSA-wcmq-9r4x-w336.json @@ -7,12 +7,8 @@ "CVE-2008-5211" ], "details": "Cross-site scripting (XSS) vulnerability in search.php in Sphider 1.3.4, when the search suggestion feature is enabled, allows remote attackers to inject arbitrary web script or HTML via the query parameter, a different vector than CVE-2006-2506.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wfcj-wxg9-rcr6/GHSA-wfcj-wxg9-rcr6.json b/advisories/unreviewed/2022/05/GHSA-wfcj-wxg9-rcr6/GHSA-wfcj-wxg9-rcr6.json index c178b0ccd9c..e23ef14aa72 100644 --- a/advisories/unreviewed/2022/05/GHSA-wfcj-wxg9-rcr6/GHSA-wfcj-wxg9-rcr6.json +++ b/advisories/unreviewed/2022/05/GHSA-wfcj-wxg9-rcr6/GHSA-wfcj-wxg9-rcr6.json @@ -7,12 +7,8 @@ "CVE-2010-4963" ], "details": "SQL injection vulnerability in folder/list in Hulihan BXR 0.6.8 allows remote attackers to execute arbitrary SQL commands via the order_by parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wfjg-hh7x-gpv7/GHSA-wfjg-hh7x-gpv7.json b/advisories/unreviewed/2022/05/GHSA-wfjg-hh7x-gpv7/GHSA-wfjg-hh7x-gpv7.json index 0b934a60962..6f00418d985 100644 --- a/advisories/unreviewed/2022/05/GHSA-wfjg-hh7x-gpv7/GHSA-wfjg-hh7x-gpv7.json +++ b/advisories/unreviewed/2022/05/GHSA-wfjg-hh7x-gpv7/GHSA-wfjg-hh7x-gpv7.json @@ -7,12 +7,8 @@ "CVE-2010-3334" ], "details": "Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2010, Office 2004 and 2008 for Mac, Office for Mac 2011, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code via an Office document containing an Office Art Drawing record with crafted msofbtSp records and unspecified flags, which triggers memory corruption, aka \"Office Art Drawing Records Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wfvp-xx28-7wrh/GHSA-wfvp-xx28-7wrh.json b/advisories/unreviewed/2022/05/GHSA-wfvp-xx28-7wrh/GHSA-wfvp-xx28-7wrh.json index 18002a8a21b..7976eb0143e 100644 --- a/advisories/unreviewed/2022/05/GHSA-wfvp-xx28-7wrh/GHSA-wfvp-xx28-7wrh.json +++ b/advisories/unreviewed/2022/05/GHSA-wfvp-xx28-7wrh/GHSA-wfvp-xx28-7wrh.json @@ -7,12 +7,8 @@ "CVE-2010-4313" ], "details": "Unrestricted file upload vulnerability in fileman_file_upload.php in Orbis CMS 1.0.2 allows remote authenticated users to execute arbitrary code by uploading a .php file, and then accessing it via a direct request to the file in uploads/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wg2w-95m7-8cfm/GHSA-wg2w-95m7-8cfm.json b/advisories/unreviewed/2022/05/GHSA-wg2w-95m7-8cfm/GHSA-wg2w-95m7-8cfm.json index 9db01ad5307..e04b0368229 100644 --- a/advisories/unreviewed/2022/05/GHSA-wg2w-95m7-8cfm/GHSA-wg2w-95m7-8cfm.json +++ b/advisories/unreviewed/2022/05/GHSA-wg2w-95m7-8cfm/GHSA-wg2w-95m7-8cfm.json @@ -7,12 +7,8 @@ "CVE-2008-5884" ], "details": "AyeView 2.20 allows user-assisted attackers to cause a denial of service (application crash) via a GIF file with a malformed header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wg6m-m95x-w5j3/GHSA-wg6m-m95x-w5j3.json b/advisories/unreviewed/2022/05/GHSA-wg6m-m95x-w5j3/GHSA-wg6m-m95x-w5j3.json index ad75ba3411d..61b95b8af10 100644 --- a/advisories/unreviewed/2022/05/GHSA-wg6m-m95x-w5j3/GHSA-wg6m-m95x-w5j3.json +++ b/advisories/unreviewed/2022/05/GHSA-wg6m-m95x-w5j3/GHSA-wg6m-m95x-w5j3.json @@ -7,12 +7,8 @@ "CVE-2008-7170" ], "details": "GSC build 2067 and earlier relies on the client to enforce administrator privileges, which allows remote attackers to execute arbitrary administrator commands via a crafted packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-whgh-2r37-m9vr/GHSA-whgh-2r37-m9vr.json b/advisories/unreviewed/2022/05/GHSA-whgh-2r37-m9vr/GHSA-whgh-2r37-m9vr.json index 6e7657e3568..cf07dee626a 100644 --- a/advisories/unreviewed/2022/05/GHSA-whgh-2r37-m9vr/GHSA-whgh-2r37-m9vr.json +++ b/advisories/unreviewed/2022/05/GHSA-whgh-2r37-m9vr/GHSA-whgh-2r37-m9vr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wjcf-x5xh-gf27/GHSA-wjcf-x5xh-gf27.json b/advisories/unreviewed/2022/05/GHSA-wjcf-x5xh-gf27/GHSA-wjcf-x5xh-gf27.json index f9194ba3fba..ece19154ee9 100644 --- a/advisories/unreviewed/2022/05/GHSA-wjcf-x5xh-gf27/GHSA-wjcf-x5xh-gf27.json +++ b/advisories/unreviewed/2022/05/GHSA-wjcf-x5xh-gf27/GHSA-wjcf-x5xh-gf27.json @@ -7,12 +7,8 @@ "CVE-2008-4787" ], "details": "Visual truncation vulnerability in Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar via a URL with a hostname containing many   (Non-Blocking Space character) sequences, which are rendered as whitespace, aka MSRC ticket MSRC7899, a related issue to CVE-2003-1025.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wjhm-rfrv-chrc/GHSA-wjhm-rfrv-chrc.json b/advisories/unreviewed/2022/05/GHSA-wjhm-rfrv-chrc/GHSA-wjhm-rfrv-chrc.json index 61fe5a6ad23..b2e7e6a4eb1 100644 --- a/advisories/unreviewed/2022/05/GHSA-wjhm-rfrv-chrc/GHSA-wjhm-rfrv-chrc.json +++ b/advisories/unreviewed/2022/05/GHSA-wjhm-rfrv-chrc/GHSA-wjhm-rfrv-chrc.json @@ -7,12 +7,8 @@ "CVE-2008-6478" ], "details": "Cross-site request forgery (CSRF) vulnerability in the file manager in the VZPP web interface for Parallels Virtuozzo 365.6.swsoft (build 4.0.0-365.6.swsoft) and 25.4.swsoft (build 3.0.0-25.4.swsoft) allows remote attackers to create and delete arbitrary files as the administrator via a link or IMG tag to (1) create-file and (2) list-control in vz/cp/vzdir/infrman/envs/files/; or modify system configuration via the path parameter to vz/cp/vzdir/infrman/envs/files/index.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wp5j-ppw9-22mw/GHSA-wp5j-ppw9-22mw.json b/advisories/unreviewed/2022/05/GHSA-wp5j-ppw9-22mw/GHSA-wp5j-ppw9-22mw.json index 553d5dd0c74..c1ef281cbfa 100644 --- a/advisories/unreviewed/2022/05/GHSA-wp5j-ppw9-22mw/GHSA-wp5j-ppw9-22mw.json +++ b/advisories/unreviewed/2022/05/GHSA-wp5j-ppw9-22mw/GHSA-wp5j-ppw9-22mw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wp8m-9w93-3fj9/GHSA-wp8m-9w93-3fj9.json b/advisories/unreviewed/2022/05/GHSA-wp8m-9w93-3fj9/GHSA-wp8m-9w93-3fj9.json index e1242141275..b89512b91ba 100644 --- a/advisories/unreviewed/2022/05/GHSA-wp8m-9w93-3fj9/GHSA-wp8m-9w93-3fj9.json +++ b/advisories/unreviewed/2022/05/GHSA-wp8m-9w93-3fj9/GHSA-wp8m-9w93-3fj9.json @@ -7,12 +7,8 @@ "CVE-2010-4903" ], "details": "SQL injection vulnerability in index.php in CubeCart 4.3.3 allows remote attackers to execute arbitrary SQL commands via the searchStr parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wpwg-m383-7qwg/GHSA-wpwg-m383-7qwg.json b/advisories/unreviewed/2022/05/GHSA-wpwg-m383-7qwg/GHSA-wpwg-m383-7qwg.json index 39db62a0568..1c6df3ec823 100644 --- a/advisories/unreviewed/2022/05/GHSA-wpwg-m383-7qwg/GHSA-wpwg-m383-7qwg.json +++ b/advisories/unreviewed/2022/05/GHSA-wpwg-m383-7qwg/GHSA-wpwg-m383-7qwg.json @@ -7,12 +7,8 @@ "CVE-2010-4278" ], "details": "operation/agentes/networkmap.php in Pandora FMS before 3.1.1 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the layout parameter in an operation/agentes/networkmap action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wqrh-3rh7-qwh7/GHSA-wqrh-3rh7-qwh7.json b/advisories/unreviewed/2022/05/GHSA-wqrh-3rh7-qwh7/GHSA-wqrh-3rh7-qwh7.json index 99a2f976874..780ad4c83dc 100644 --- a/advisories/unreviewed/2022/05/GHSA-wqrh-3rh7-qwh7/GHSA-wqrh-3rh7-qwh7.json +++ b/advisories/unreviewed/2022/05/GHSA-wqrh-3rh7-qwh7/GHSA-wqrh-3rh7-qwh7.json @@ -7,12 +7,8 @@ "CVE-2008-7165" ], "details": "Cross-site request forgery in cp06_wifi_m_nocifr.cgi in the administrator panel in TELECOM ITALIA Alice Gate2 Plus Wi-Fi allows remote attackers to hijack the authentication of administrators for requests that disable Wi-Fi encryption via certain values for the wlChannel and wlRadioEnable parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wr5p-hwm7-65qv/GHSA-wr5p-hwm7-65qv.json b/advisories/unreviewed/2022/05/GHSA-wr5p-hwm7-65qv/GHSA-wr5p-hwm7-65qv.json index adb4493451d..5ab2f5308ba 100644 --- a/advisories/unreviewed/2022/05/GHSA-wr5p-hwm7-65qv/GHSA-wr5p-hwm7-65qv.json +++ b/advisories/unreviewed/2022/05/GHSA-wr5p-hwm7-65qv/GHSA-wr5p-hwm7-65qv.json @@ -7,12 +7,8 @@ "CVE-2008-6497" ], "details": "The Neostrada Livebox ADSL Router allows remote attackers to cause a denial of service (network outage) via multiple HTTP requests for the /- URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wrh9-pxv5-hf6w/GHSA-wrh9-pxv5-hf6w.json b/advisories/unreviewed/2022/05/GHSA-wrh9-pxv5-hf6w/GHSA-wrh9-pxv5-hf6w.json index 487f1db2246..02427900a1a 100644 --- a/advisories/unreviewed/2022/05/GHSA-wrh9-pxv5-hf6w/GHSA-wrh9-pxv5-hf6w.json +++ b/advisories/unreviewed/2022/05/GHSA-wrh9-pxv5-hf6w/GHSA-wrh9-pxv5-hf6w.json @@ -7,12 +7,8 @@ "CVE-2008-4654" ], "details": "Stack-based buffer overflow in the parse_master function in the Ty demux plugin (modules/demux/ty.c) in VLC Media Player 0.9.0 through 0.9.4 allows remote attackers to execute arbitrary code via a TiVo TY media file with a header containing a crafted size value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wrq5-wh4q-qgfh/GHSA-wrq5-wh4q-qgfh.json b/advisories/unreviewed/2022/05/GHSA-wrq5-wh4q-qgfh/GHSA-wrq5-wh4q-qgfh.json index 95b8849850f..723aeb0a74e 100644 --- a/advisories/unreviewed/2022/05/GHSA-wrq5-wh4q-qgfh/GHSA-wrq5-wh4q-qgfh.json +++ b/advisories/unreviewed/2022/05/GHSA-wrq5-wh4q-qgfh/GHSA-wrq5-wh4q-qgfh.json @@ -7,12 +7,8 @@ "CVE-2008-4751" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in iPei Guestbook 2.0 allows remote attackers to inject arbitrary web script or HTML via the pg parameter, a different vector than CVE-2005-4597.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wrqj-hmv6-rx3j/GHSA-wrqj-hmv6-rx3j.json b/advisories/unreviewed/2022/05/GHSA-wrqj-hmv6-rx3j/GHSA-wrqj-hmv6-rx3j.json index 5b5c1234208..53cf5d898ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-wrqj-hmv6-rx3j/GHSA-wrqj-hmv6-rx3j.json +++ b/advisories/unreviewed/2022/05/GHSA-wrqj-hmv6-rx3j/GHSA-wrqj-hmv6-rx3j.json @@ -7,12 +7,8 @@ "CVE-2008-5428" ], "details": "Opera 9.51 on Windows XP does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many \"Content-type: message/rfc822;\" headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-www3-g8xp-cqvc/GHSA-www3-g8xp-cqvc.json b/advisories/unreviewed/2022/05/GHSA-www3-g8xp-cqvc/GHSA-www3-g8xp-cqvc.json index f55fd458ab4..aa14c85888a 100644 --- a/advisories/unreviewed/2022/05/GHSA-www3-g8xp-cqvc/GHSA-www3-g8xp-cqvc.json +++ b/advisories/unreviewed/2022/05/GHSA-www3-g8xp-cqvc/GHSA-www3-g8xp-cqvc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wxfq-r6w9-2mg2/GHSA-wxfq-r6w9-2mg2.json b/advisories/unreviewed/2022/05/GHSA-wxfq-r6w9-2mg2/GHSA-wxfq-r6w9-2mg2.json index 101488a1cad..867363102ea 100644 --- a/advisories/unreviewed/2022/05/GHSA-wxfq-r6w9-2mg2/GHSA-wxfq-r6w9-2mg2.json +++ b/advisories/unreviewed/2022/05/GHSA-wxfq-r6w9-2mg2/GHSA-wxfq-r6w9-2mg2.json @@ -7,12 +7,8 @@ "CVE-2010-4435" ], "details": "Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability, related to CDE Calendar Manager Service Daemon and RPC. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from other software vendors that this affects other operating systems, such as HP-UX, or claims from a reliable third party that this is a buffer overflow in rpc.cmsd via long XDR-encoded ASCII strings in RPC call 10.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wxg7-pwwm-j9r9/GHSA-wxg7-pwwm-j9r9.json b/advisories/unreviewed/2022/05/GHSA-wxg7-pwwm-j9r9/GHSA-wxg7-pwwm-j9r9.json index af05b422098..4fa23f5a55c 100644 --- a/advisories/unreviewed/2022/05/GHSA-wxg7-pwwm-j9r9/GHSA-wxg7-pwwm-j9r9.json +++ b/advisories/unreviewed/2022/05/GHSA-wxg7-pwwm-j9r9/GHSA-wxg7-pwwm-j9r9.json @@ -7,12 +7,8 @@ "CVE-2008-5580" ], "details": "mini-pub.php/front-end/cat.php in mini-pub 0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in the sFileName argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x248-r79p-756c/GHSA-x248-r79p-756c.json b/advisories/unreviewed/2022/05/GHSA-x248-r79p-756c/GHSA-x248-r79p-756c.json index b05f14a2f5a..eadf4f26c83 100644 --- a/advisories/unreviewed/2022/05/GHSA-x248-r79p-756c/GHSA-x248-r79p-756c.json +++ b/advisories/unreviewed/2022/05/GHSA-x248-r79p-756c/GHSA-x248-r79p-756c.json @@ -7,12 +7,8 @@ "CVE-2008-5079" ], "details": "net/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to cause a denial of service (kernel infinite loop) by making two calls to svc_listen for the same socket, and then reading a /proc/net/atm/*vc file, related to corruption of the vcc table.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -136,9 +132,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x25g-r4mr-6x6p/GHSA-x25g-r4mr-6x6p.json b/advisories/unreviewed/2022/05/GHSA-x25g-r4mr-6x6p/GHSA-x25g-r4mr-6x6p.json index 8a5327f1618..6b01e874508 100644 --- a/advisories/unreviewed/2022/05/GHSA-x25g-r4mr-6x6p/GHSA-x25g-r4mr-6x6p.json +++ b/advisories/unreviewed/2022/05/GHSA-x25g-r4mr-6x6p/GHSA-x25g-r4mr-6x6p.json @@ -7,12 +7,8 @@ "CVE-2008-4763" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in sample.php in WiKID wClient-PHP 3.0-2 and earlier allow remote attackers to inject arbitrary web script or HTML via the PHP_SELF variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x273-679p-f3v7/GHSA-x273-679p-f3v7.json b/advisories/unreviewed/2022/05/GHSA-x273-679p-f3v7/GHSA-x273-679p-f3v7.json index 006da4df0b7..4eebcd7cb35 100644 --- a/advisories/unreviewed/2022/05/GHSA-x273-679p-f3v7/GHSA-x273-679p-f3v7.json +++ b/advisories/unreviewed/2022/05/GHSA-x273-679p-f3v7/GHSA-x273-679p-f3v7.json @@ -7,12 +7,8 @@ "CVE-2008-5887" ], "details": "phplist before 2.10.8 allows remote attackers to include files via unknown vectors, related to a \"local file include vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x2pv-83q9-6jmr/GHSA-x2pv-83q9-6jmr.json b/advisories/unreviewed/2022/05/GHSA-x2pv-83q9-6jmr/GHSA-x2pv-83q9-6jmr.json index 0cc6d1935d0..f8b988e7cb8 100644 --- a/advisories/unreviewed/2022/05/GHSA-x2pv-83q9-6jmr/GHSA-x2pv-83q9-6jmr.json +++ b/advisories/unreviewed/2022/05/GHSA-x2pv-83q9-6jmr/GHSA-x2pv-83q9-6jmr.json @@ -7,12 +7,8 @@ "CVE-2008-6660" ], "details": "Unrestricted file upload vulnerability in bigdump.php in Alexey Ozerov BigDump 0.29b allows remote attackers to execute arbitrary code by uploading a file with an executable extension followed by a .sql extension, then accessing this file via a direct request. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x2v9-xf8h-q3mw/GHSA-x2v9-xf8h-q3mw.json b/advisories/unreviewed/2022/05/GHSA-x2v9-xf8h-q3mw/GHSA-x2v9-xf8h-q3mw.json index a97e9eaed8d..6c3b0c96b79 100644 --- a/advisories/unreviewed/2022/05/GHSA-x2v9-xf8h-q3mw/GHSA-x2v9-xf8h-q3mw.json +++ b/advisories/unreviewed/2022/05/GHSA-x2v9-xf8h-q3mw/GHSA-x2v9-xf8h-q3mw.json @@ -7,12 +7,8 @@ "CVE-2008-6234" ], "details": "SQL injection vulnerability in the com_musica module in Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x3cp-59ch-mrjg/GHSA-x3cp-59ch-mrjg.json b/advisories/unreviewed/2022/05/GHSA-x3cp-59ch-mrjg/GHSA-x3cp-59ch-mrjg.json index d113db824db..6502b71b7c6 100644 --- a/advisories/unreviewed/2022/05/GHSA-x3cp-59ch-mrjg/GHSA-x3cp-59ch-mrjg.json +++ b/advisories/unreviewed/2022/05/GHSA-x3cp-59ch-mrjg/GHSA-x3cp-59ch-mrjg.json @@ -7,12 +7,8 @@ "CVE-2008-7243" ], "details": "Cross-site request forgery (CSRF) vulnerability in page 34 in MODx CMS 0.9.6.1 and 0.9.6.1p1 allows remote attackers to hijack the authentication of other users for requests that modify passwords via manager/index.php. NOTE: due to the lack of details, it is not clear whether this is related to CVE-2008-5941.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x3r2-p3h2-85wm/GHSA-x3r2-p3h2-85wm.json b/advisories/unreviewed/2022/05/GHSA-x3r2-p3h2-85wm/GHSA-x3r2-p3h2-85wm.json index b0f579bec67..fc96e30baa6 100644 --- a/advisories/unreviewed/2022/05/GHSA-x3r2-p3h2-85wm/GHSA-x3r2-p3h2-85wm.json +++ b/advisories/unreviewed/2022/05/GHSA-x3r2-p3h2-85wm/GHSA-x3r2-p3h2-85wm.json @@ -7,12 +7,8 @@ "CVE-2008-5106" ], "details": "Buffer overflow in KarjaSoft Sami FTP Server 2.0.x allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a long argument to an arbitrary command, which triggers the overflow when the SamyFtp.binlog log file is viewed in the management console. NOTE: this may overlap CVE-2006-0441 and CVE-2006-2212.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x3rx-qh45-xr53/GHSA-x3rx-qh45-xr53.json b/advisories/unreviewed/2022/05/GHSA-x3rx-qh45-xr53/GHSA-x3rx-qh45-xr53.json index b306d2414d0..75bb73fdc80 100644 --- a/advisories/unreviewed/2022/05/GHSA-x3rx-qh45-xr53/GHSA-x3rx-qh45-xr53.json +++ b/advisories/unreviewed/2022/05/GHSA-x3rx-qh45-xr53/GHSA-x3rx-qh45-xr53.json @@ -7,12 +7,8 @@ "CVE-2008-4612" ], "details": "Cross-site scripting (XSS) vulnerability in PortalApp 4.0 allows remote attackers to inject arbitrary web script or HTML via the keywords parameter to (1) forums.asp and (2) content.asp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x44v-w8g5-7886/GHSA-x44v-w8g5-7886.json b/advisories/unreviewed/2022/05/GHSA-x44v-w8g5-7886/GHSA-x44v-w8g5-7886.json index 72b1997270e..dcdca4c204d 100644 --- a/advisories/unreviewed/2022/05/GHSA-x44v-w8g5-7886/GHSA-x44v-w8g5-7886.json +++ b/advisories/unreviewed/2022/05/GHSA-x44v-w8g5-7886/GHSA-x44v-w8g5-7886.json @@ -7,12 +7,8 @@ "CVE-2010-4941" ], "details": "SQL injection vulnerability in the Teams (com_teams) component 1_1028_100809_1711 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PlayerID parameter in a player save action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x4mw-c395-vvjx/GHSA-x4mw-c395-vvjx.json b/advisories/unreviewed/2022/05/GHSA-x4mw-c395-vvjx/GHSA-x4mw-c395-vvjx.json index c775cab19ab..d9fd937b177 100644 --- a/advisories/unreviewed/2022/05/GHSA-x4mw-c395-vvjx/GHSA-x4mw-c395-vvjx.json +++ b/advisories/unreviewed/2022/05/GHSA-x4mw-c395-vvjx/GHSA-x4mw-c395-vvjx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x6f2-59xh-8mrv/GHSA-x6f2-59xh-8mrv.json b/advisories/unreviewed/2022/05/GHSA-x6f2-59xh-8mrv/GHSA-x6f2-59xh-8mrv.json index 5afb83af5ed..2a509f9b119 100644 --- a/advisories/unreviewed/2022/05/GHSA-x6f2-59xh-8mrv/GHSA-x6f2-59xh-8mrv.json +++ b/advisories/unreviewed/2022/05/GHSA-x6f2-59xh-8mrv/GHSA-x6f2-59xh-8mrv.json @@ -7,12 +7,8 @@ "CVE-2008-6866" ], "details": "SQL injection vulnerability in modules.php in the Current_Issue module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a summary action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x6pj-7792-5gvw/GHSA-x6pj-7792-5gvw.json b/advisories/unreviewed/2022/05/GHSA-x6pj-7792-5gvw/GHSA-x6pj-7792-5gvw.json index 00b2f7fe792..803576e872c 100644 --- a/advisories/unreviewed/2022/05/GHSA-x6pj-7792-5gvw/GHSA-x6pj-7792-5gvw.json +++ b/advisories/unreviewed/2022/05/GHSA-x6pj-7792-5gvw/GHSA-x6pj-7792-5gvw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x8rm-rp78-m5wj/GHSA-x8rm-rp78-m5wj.json b/advisories/unreviewed/2022/05/GHSA-x8rm-rp78-m5wj/GHSA-x8rm-rp78-m5wj.json index d44b37435f3..db68fa20600 100644 --- a/advisories/unreviewed/2022/05/GHSA-x8rm-rp78-m5wj/GHSA-x8rm-rp78-m5wj.json +++ b/advisories/unreviewed/2022/05/GHSA-x8rm-rp78-m5wj/GHSA-x8rm-rp78-m5wj.json @@ -7,12 +7,8 @@ "CVE-2010-4922" ], "details": "Multiple SQL injection vulnerabilities in Allinta CMS 22.07.2010 allow remote attackers to execute arbitrary SQL commands via the i parameter in an edit action to (1) contentAE.asp or (2) templatesAE.asp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x925-mr4g-97q9/GHSA-x925-mr4g-97q9.json b/advisories/unreviewed/2022/05/GHSA-x925-mr4g-97q9/GHSA-x925-mr4g-97q9.json index 9859c71759a..dc64547c709 100644 --- a/advisories/unreviewed/2022/05/GHSA-x925-mr4g-97q9/GHSA-x925-mr4g-97q9.json +++ b/advisories/unreviewed/2022/05/GHSA-x925-mr4g-97q9/GHSA-x925-mr4g-97q9.json @@ -7,12 +7,8 @@ "CVE-2008-6981" ], "details": "index.php in phpAdultSite CMS, possibly 2.3.2, allows remote attackers to obtain the full installation path via an invalid results_per_page parameter, which leaks the path in an error message. NOTE: this issue might be resultant from a separate SQL injection vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x93g-j874-2hqr/GHSA-x93g-j874-2hqr.json b/advisories/unreviewed/2022/05/GHSA-x93g-j874-2hqr/GHSA-x93g-j874-2hqr.json index d5903e8cf10..df4b5dcaafc 100644 --- a/advisories/unreviewed/2022/05/GHSA-x93g-j874-2hqr/GHSA-x93g-j874-2hqr.json +++ b/advisories/unreviewed/2022/05/GHSA-x93g-j874-2hqr/GHSA-x93g-j874-2hqr.json @@ -7,12 +7,8 @@ "CVE-2008-7055" ], "details": "module.php in ezContents 2.0.3 allows remote attackers to bypass the directory traversal protection mechanism to include and execute arbitrary local files via \"....//\" (doubled dot dot slash) sequences in the link parameter, which is not properly filtered using the str_replace function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x9qw-wpgc-3724/GHSA-x9qw-wpgc-3724.json b/advisories/unreviewed/2022/05/GHSA-x9qw-wpgc-3724/GHSA-x9qw-wpgc-3724.json index 91cf04cfee1..d44a28cd4c0 100644 --- a/advisories/unreviewed/2022/05/GHSA-x9qw-wpgc-3724/GHSA-x9qw-wpgc-3724.json +++ b/advisories/unreviewed/2022/05/GHSA-x9qw-wpgc-3724/GHSA-x9qw-wpgc-3724.json @@ -7,12 +7,8 @@ "CVE-2008-5625" ], "details": "PHP 5 before 5.2.7 does not enforce the error_log safe_mode restrictions when safe_mode is enabled through a php_admin_flag setting in httpd.conf, which allows context-dependent attackers to write to arbitrary files by placing a \"php_value error_log\" entry in a .htaccess file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xc4j-7429-3rp8/GHSA-xc4j-7429-3rp8.json b/advisories/unreviewed/2022/05/GHSA-xc4j-7429-3rp8/GHSA-xc4j-7429-3rp8.json index 7c66031e022..a8b75268a50 100644 --- a/advisories/unreviewed/2022/05/GHSA-xc4j-7429-3rp8/GHSA-xc4j-7429-3rp8.json +++ b/advisories/unreviewed/2022/05/GHSA-xc4j-7429-3rp8/GHSA-xc4j-7429-3rp8.json @@ -7,12 +7,8 @@ "CVE-2008-7145" ], "details": "Multiple SQL injection vulnerabilities in index.php in CoronaMatrix phpAddressBook 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xch7-9q6w-x5c6/GHSA-xch7-9q6w-x5c6.json b/advisories/unreviewed/2022/05/GHSA-xch7-9q6w-x5c6/GHSA-xch7-9q6w-x5c6.json index c5cb59d3797..b79d5ebb075 100644 --- a/advisories/unreviewed/2022/05/GHSA-xch7-9q6w-x5c6/GHSA-xch7-9q6w-x5c6.json +++ b/advisories/unreviewed/2022/05/GHSA-xch7-9q6w-x5c6/GHSA-xch7-9q6w-x5c6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xfqp-8rrq-q42f/GHSA-xfqp-8rrq-q42f.json b/advisories/unreviewed/2022/05/GHSA-xfqp-8rrq-q42f/GHSA-xfqp-8rrq-q42f.json index 3f0a7aafed7..0bea89115ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-xfqp-8rrq-q42f/GHSA-xfqp-8rrq-q42f.json +++ b/advisories/unreviewed/2022/05/GHSA-xfqp-8rrq-q42f/GHSA-xfqp-8rrq-q42f.json @@ -7,12 +7,8 @@ "CVE-2008-6159" ], "details": "Content Management Made Easy (CMME) 1.19 allows remote attackers to obtain system information via a direct request to info.php, which invokes the phpinfo function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xg99-mpwj-gf2c/GHSA-xg99-mpwj-gf2c.json b/advisories/unreviewed/2022/05/GHSA-xg99-mpwj-gf2c/GHSA-xg99-mpwj-gf2c.json index 04e1613a1ab..a685ef78fdf 100644 --- a/advisories/unreviewed/2022/05/GHSA-xg99-mpwj-gf2c/GHSA-xg99-mpwj-gf2c.json +++ b/advisories/unreviewed/2022/05/GHSA-xg99-mpwj-gf2c/GHSA-xg99-mpwj-gf2c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xg9j-97mr-8v79/GHSA-xg9j-97mr-8v79.json b/advisories/unreviewed/2022/05/GHSA-xg9j-97mr-8v79/GHSA-xg9j-97mr-8v79.json index dfe8e11888e..cd7720be652 100644 --- a/advisories/unreviewed/2022/05/GHSA-xg9j-97mr-8v79/GHSA-xg9j-97mr-8v79.json +++ b/advisories/unreviewed/2022/05/GHSA-xg9j-97mr-8v79/GHSA-xg9j-97mr-8v79.json @@ -7,12 +7,8 @@ "CVE-2008-6043" ], "details": "Multiple SQL injection vulnerabilities in PHP Pro Bid (PPB) 6.04 allow remote attackers to execute arbitrary SQL commands via the (1) order_field and (2) order_type parameters to categories.php and unspecified other components. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xgj7-qp9r-4v2c/GHSA-xgj7-qp9r-4v2c.json b/advisories/unreviewed/2022/05/GHSA-xgj7-qp9r-4v2c/GHSA-xgj7-qp9r-4v2c.json index d2664a6ad98..9ba772a8ce4 100644 --- a/advisories/unreviewed/2022/05/GHSA-xgj7-qp9r-4v2c/GHSA-xgj7-qp9r-4v2c.json +++ b/advisories/unreviewed/2022/05/GHSA-xgj7-qp9r-4v2c/GHSA-xgj7-qp9r-4v2c.json @@ -7,12 +7,8 @@ "CVE-2008-5163" ], "details": "Multiple SQL injection vulnerabilities in The Rat CMS Pre-Alpha 2 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) viewarticle.php and (2) viewarticle2.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xh8j-pqxf-hqm9/GHSA-xh8j-pqxf-hqm9.json b/advisories/unreviewed/2022/05/GHSA-xh8j-pqxf-hqm9/GHSA-xh8j-pqxf-hqm9.json index 656167f8a45..c7868814fbe 100644 --- a/advisories/unreviewed/2022/05/GHSA-xh8j-pqxf-hqm9/GHSA-xh8j-pqxf-hqm9.json +++ b/advisories/unreviewed/2022/05/GHSA-xh8j-pqxf-hqm9/GHSA-xh8j-pqxf-hqm9.json @@ -7,12 +7,8 @@ "CVE-2008-5349" ], "details": "Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows remote attackers to cause a denial of service (CPU consumption) via a crafted RSA public key.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -140,9 +136,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xh98-xq72-x84p/GHSA-xh98-xq72-x84p.json b/advisories/unreviewed/2022/05/GHSA-xh98-xq72-x84p/GHSA-xh98-xq72-x84p.json index 5eab744ed5f..9914104672f 100644 --- a/advisories/unreviewed/2022/05/GHSA-xh98-xq72-x84p/GHSA-xh98-xq72-x84p.json +++ b/advisories/unreviewed/2022/05/GHSA-xh98-xq72-x84p/GHSA-xh98-xq72-x84p.json @@ -7,12 +7,8 @@ "CVE-2008-7267" ], "details": "SQL injection vulnerability in announcements.php in SiteEngine 5.x allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xhmf-rvv9-w8mf/GHSA-xhmf-rvv9-w8mf.json b/advisories/unreviewed/2022/05/GHSA-xhmf-rvv9-w8mf/GHSA-xhmf-rvv9-w8mf.json index 945c84fbf53..e245ff5507b 100644 --- a/advisories/unreviewed/2022/05/GHSA-xhmf-rvv9-w8mf/GHSA-xhmf-rvv9-w8mf.json +++ b/advisories/unreviewed/2022/05/GHSA-xhmf-rvv9-w8mf/GHSA-xhmf-rvv9-w8mf.json @@ -7,12 +7,8 @@ "CVE-2008-7139" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in WS-Proxy in Eye-Fi 1.1.2 allow remote attackers to hijack the authentication of users for requests that modify configuration via a SOAPAction parameter of (1) urn:SetOptions for autostart, (2) urn:SetDesktopSync for file upload, or (3) urn:SetFolderConfig for file download location or modification of authentication credentials; and (4) urn:AddNetwork for adding an arbitrary Service Set Identifier (SSID) to hijack the image upload.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xp58-h76m-67p4/GHSA-xp58-h76m-67p4.json b/advisories/unreviewed/2022/05/GHSA-xp58-h76m-67p4/GHSA-xp58-h76m-67p4.json index 59d36c077d3..1d9272a6a50 100644 --- a/advisories/unreviewed/2022/05/GHSA-xp58-h76m-67p4/GHSA-xp58-h76m-67p4.json +++ b/advisories/unreviewed/2022/05/GHSA-xp58-h76m-67p4/GHSA-xp58-h76m-67p4.json @@ -7,12 +7,8 @@ "CVE-2008-4918" ], "details": "Cross-site scripting (XSS) vulnerability in SonicWALL SonicOS Enhanced before 4.0.1.1, as used in SonicWALL Pro 2040 and TZ 180 and 190, allows remote attackers to inject arbitrary web script or HTML into arbitrary web sites via a URL to a site that is blocked based on content filtering, which is not properly handled in the CFS block page, aka \"universal website hijacking.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xpp7-7jm5-hh44/GHSA-xpp7-7jm5-hh44.json b/advisories/unreviewed/2022/05/GHSA-xpp7-7jm5-hh44/GHSA-xpp7-7jm5-hh44.json index a34ea09aded..485d7e84f32 100644 --- a/advisories/unreviewed/2022/05/GHSA-xpp7-7jm5-hh44/GHSA-xpp7-7jm5-hh44.json +++ b/advisories/unreviewed/2022/05/GHSA-xpp7-7jm5-hh44/GHSA-xpp7-7jm5-hh44.json @@ -7,12 +7,8 @@ "CVE-2008-5542" ], "details": "Sunbelt VIPRE 3.1.1832.2 and possibly 3.1.1633.1, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka \"EXE info\") at the beginning, and modifying the filename to have (1) no extension, (2) a .txt extension, or (3) a .jpg extension, as demonstrated by a document containing a CVE-2006-5745 exploit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xq2p-cgwj-87m3/GHSA-xq2p-cgwj-87m3.json b/advisories/unreviewed/2022/05/GHSA-xq2p-cgwj-87m3/GHSA-xq2p-cgwj-87m3.json index 33baaa2f8b2..57e3776532b 100644 --- a/advisories/unreviewed/2022/05/GHSA-xq2p-cgwj-87m3/GHSA-xq2p-cgwj-87m3.json +++ b/advisories/unreviewed/2022/05/GHSA-xq2p-cgwj-87m3/GHSA-xq2p-cgwj-87m3.json @@ -7,12 +7,8 @@ "CVE-2010-4052" ], "details": "Stack consumption vulnerability in the regcomp implementation in the GNU C Library (aka glibc or libc6) through 2.11.3, and 2.12.x through 2.12.2, allows context-dependent attackers to cause a denial of service (resource exhaustion) via a regular expression containing adjacent repetition operators, as demonstrated by a {10,}{10,}{10,}{10,} sequence in the proftpd.gnu.c exploit for ProFTPD.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xrf9-vrwv-8rg6/GHSA-xrf9-vrwv-8rg6.json b/advisories/unreviewed/2022/05/GHSA-xrf9-vrwv-8rg6/GHSA-xrf9-vrwv-8rg6.json index 11c00285d7b..e57c694b452 100644 --- a/advisories/unreviewed/2022/05/GHSA-xrf9-vrwv-8rg6/GHSA-xrf9-vrwv-8rg6.json +++ b/advisories/unreviewed/2022/05/GHSA-xrf9-vrwv-8rg6/GHSA-xrf9-vrwv-8rg6.json @@ -7,12 +7,8 @@ "CVE-2008-5239" ], "details": "xine-lib 1.1.12, and other 1.1.15 and earlier versions, does not properly handle (a) negative and (b) zero values during unspecified read function calls in input_file.c, input_net.c, input_smb.c, and input_http.c, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via vectors such as (1) a file or (2) an HTTP response, which triggers consequences such as out-of-bounds reads and heap-based buffer overflows.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xwh4-g756-hmwc/GHSA-xwh4-g756-hmwc.json b/advisories/unreviewed/2022/05/GHSA-xwh4-g756-hmwc/GHSA-xwh4-g756-hmwc.json index a05e22046ef..15f4d10ccbf 100644 --- a/advisories/unreviewed/2022/05/GHSA-xwh4-g756-hmwc/GHSA-xwh4-g756-hmwc.json +++ b/advisories/unreviewed/2022/05/GHSA-xwh4-g756-hmwc/GHSA-xwh4-g756-hmwc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xwwh-734j-cfhm/GHSA-xwwh-734j-cfhm.json b/advisories/unreviewed/2022/05/GHSA-xwwh-734j-cfhm/GHSA-xwwh-734j-cfhm.json index 4f8d0d99939..b9c9b742042 100644 --- a/advisories/unreviewed/2022/05/GHSA-xwwh-734j-cfhm/GHSA-xwwh-734j-cfhm.json +++ b/advisories/unreviewed/2022/05/GHSA-xwwh-734j-cfhm/GHSA-xwwh-734j-cfhm.json @@ -7,12 +7,8 @@ "CVE-2008-5810" ], "details": "WBPublish (aka WBPublish.exe) in Fujitsu-Siemens WebTransactions 7.0, 7.1, and possibly other versions allows remote attackers to execute arbitrary commands via shell metacharacters in input that is sent through HTTP and improperly used during temporary session data cleanup, possibly related to (1) directory names, (2) template names, and (3) session IDs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xx67-mj7c-3wvg/GHSA-xx67-mj7c-3wvg.json b/advisories/unreviewed/2022/05/GHSA-xx67-mj7c-3wvg/GHSA-xx67-mj7c-3wvg.json index e7940f2c07c..f560aa5f57e 100644 --- a/advisories/unreviewed/2022/05/GHSA-xx67-mj7c-3wvg/GHSA-xx67-mj7c-3wvg.json +++ b/advisories/unreviewed/2022/05/GHSA-xx67-mj7c-3wvg/GHSA-xx67-mj7c-3wvg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xx6q-6r5h-4mc3/GHSA-xx6q-6r5h-4mc3.json b/advisories/unreviewed/2022/05/GHSA-xx6q-6r5h-4mc3/GHSA-xx6q-6r5h-4mc3.json index 7a7dd371bdb..1e7a990ef37 100644 --- a/advisories/unreviewed/2022/05/GHSA-xx6q-6r5h-4mc3/GHSA-xx6q-6r5h-4mc3.json +++ b/advisories/unreviewed/2022/05/GHSA-xx6q-6r5h-4mc3/GHSA-xx6q-6r5h-4mc3.json @@ -7,12 +7,8 @@ "CVE-2008-5381" ], "details": "Buffer overflow in the URL processing in ffdshow (aka ffdshow-tryout) before SVN revision 2347 allows remote attackers to execute arbitrary code via a long URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xxww-hv47-2ppx/GHSA-xxww-hv47-2ppx.json b/advisories/unreviewed/2022/05/GHSA-xxww-hv47-2ppx/GHSA-xxww-hv47-2ppx.json index a013a4b06a0..5ab04efbc4d 100644 --- a/advisories/unreviewed/2022/05/GHSA-xxww-hv47-2ppx/GHSA-xxww-hv47-2ppx.json +++ b/advisories/unreviewed/2022/05/GHSA-xxww-hv47-2ppx/GHSA-xxww-hv47-2ppx.json @@ -7,12 +7,8 @@ "CVE-2008-7246" ], "details": "Google Chrome 0.2.149.29 and earlier allows remote attackers to cause a denial of service (unusable browser) by calling the window.print function in a loop, aka a \"printing DoS attack,\" possibly a related issue to CVE-2009-0821.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-hjr8-mfq8-phqh/GHSA-hjr8-mfq8-phqh.json b/advisories/unreviewed/2022/12/GHSA-hjr8-mfq8-phqh/GHSA-hjr8-mfq8-phqh.json index e4b44c8dc9f..d4b4b5b557a 100644 --- a/advisories/unreviewed/2022/12/GHSA-hjr8-mfq8-phqh/GHSA-hjr8-mfq8-phqh.json +++ b/advisories/unreviewed/2022/12/GHSA-hjr8-mfq8-phqh/GHSA-hjr8-mfq8-phqh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-3fj6-mr6m-6xvw/GHSA-3fj6-mr6m-6xvw.json b/advisories/unreviewed/2023/01/GHSA-3fj6-mr6m-6xvw/GHSA-3fj6-mr6m-6xvw.json index de1d8301d84..968ceb05921 100644 --- a/advisories/unreviewed/2023/01/GHSA-3fj6-mr6m-6xvw/GHSA-3fj6-mr6m-6xvw.json +++ b/advisories/unreviewed/2023/01/GHSA-3fj6-mr6m-6xvw/GHSA-3fj6-mr6m-6xvw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-5c2v-jh2g-24cj/GHSA-5c2v-jh2g-24cj.json b/advisories/unreviewed/2023/01/GHSA-5c2v-jh2g-24cj/GHSA-5c2v-jh2g-24cj.json index 4fba1bd6a97..299d42dac29 100644 --- a/advisories/unreviewed/2023/01/GHSA-5c2v-jh2g-24cj/GHSA-5c2v-jh2g-24cj.json +++ b/advisories/unreviewed/2023/01/GHSA-5c2v-jh2g-24cj/GHSA-5c2v-jh2g-24cj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-5h7m-mq92-ggc6/GHSA-5h7m-mq92-ggc6.json b/advisories/unreviewed/2023/01/GHSA-5h7m-mq92-ggc6/GHSA-5h7m-mq92-ggc6.json index 3279b091af2..9295b4333e6 100644 --- a/advisories/unreviewed/2023/01/GHSA-5h7m-mq92-ggc6/GHSA-5h7m-mq92-ggc6.json +++ b/advisories/unreviewed/2023/01/GHSA-5h7m-mq92-ggc6/GHSA-5h7m-mq92-ggc6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-63q5-87g5-fg36/GHSA-63q5-87g5-fg36.json b/advisories/unreviewed/2023/01/GHSA-63q5-87g5-fg36/GHSA-63q5-87g5-fg36.json index fb4dcb0d441..afd1a92c8c0 100644 --- a/advisories/unreviewed/2023/01/GHSA-63q5-87g5-fg36/GHSA-63q5-87g5-fg36.json +++ b/advisories/unreviewed/2023/01/GHSA-63q5-87g5-fg36/GHSA-63q5-87g5-fg36.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-6jcx-qcjx-h99m/GHSA-6jcx-qcjx-h99m.json b/advisories/unreviewed/2023/01/GHSA-6jcx-qcjx-h99m/GHSA-6jcx-qcjx-h99m.json index 4ba2aa0be64..5fa086a877b 100644 --- a/advisories/unreviewed/2023/01/GHSA-6jcx-qcjx-h99m/GHSA-6jcx-qcjx-h99m.json +++ b/advisories/unreviewed/2023/01/GHSA-6jcx-qcjx-h99m/GHSA-6jcx-qcjx-h99m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-6pj2-5fm2-2pxx/GHSA-6pj2-5fm2-2pxx.json b/advisories/unreviewed/2023/01/GHSA-6pj2-5fm2-2pxx/GHSA-6pj2-5fm2-2pxx.json index 603ae6df715..330ff69a924 100644 --- a/advisories/unreviewed/2023/01/GHSA-6pj2-5fm2-2pxx/GHSA-6pj2-5fm2-2pxx.json +++ b/advisories/unreviewed/2023/01/GHSA-6pj2-5fm2-2pxx/GHSA-6pj2-5fm2-2pxx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-8cxr-cq5c-vwmw/GHSA-8cxr-cq5c-vwmw.json b/advisories/unreviewed/2023/01/GHSA-8cxr-cq5c-vwmw/GHSA-8cxr-cq5c-vwmw.json index bdd4f6bd349..9fcfe75e409 100644 --- a/advisories/unreviewed/2023/01/GHSA-8cxr-cq5c-vwmw/GHSA-8cxr-cq5c-vwmw.json +++ b/advisories/unreviewed/2023/01/GHSA-8cxr-cq5c-vwmw/GHSA-8cxr-cq5c-vwmw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-93mf-8jhx-j3mg/GHSA-93mf-8jhx-j3mg.json b/advisories/unreviewed/2023/01/GHSA-93mf-8jhx-j3mg/GHSA-93mf-8jhx-j3mg.json index cb61e299118..bf51aad22f8 100644 --- a/advisories/unreviewed/2023/01/GHSA-93mf-8jhx-j3mg/GHSA-93mf-8jhx-j3mg.json +++ b/advisories/unreviewed/2023/01/GHSA-93mf-8jhx-j3mg/GHSA-93mf-8jhx-j3mg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-cr28-68mj-mpg4/GHSA-cr28-68mj-mpg4.json b/advisories/unreviewed/2023/01/GHSA-cr28-68mj-mpg4/GHSA-cr28-68mj-mpg4.json index b1eea45e09a..49a31667ddc 100644 --- a/advisories/unreviewed/2023/01/GHSA-cr28-68mj-mpg4/GHSA-cr28-68mj-mpg4.json +++ b/advisories/unreviewed/2023/01/GHSA-cr28-68mj-mpg4/GHSA-cr28-68mj-mpg4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/01/GHSA-ff9p-3jg4-r2j6/GHSA-ff9p-3jg4-r2j6.json b/advisories/unreviewed/2023/01/GHSA-ff9p-3jg4-r2j6/GHSA-ff9p-3jg4-r2j6.json index 0fd160e4186..2fd7637e542 100644 --- a/advisories/unreviewed/2023/01/GHSA-ff9p-3jg4-r2j6/GHSA-ff9p-3jg4-r2j6.json +++ b/advisories/unreviewed/2023/01/GHSA-ff9p-3jg4-r2j6/GHSA-ff9p-3jg4-r2j6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-g9r7-hq6j-vv4r/GHSA-g9r7-hq6j-vv4r.json b/advisories/unreviewed/2023/01/GHSA-g9r7-hq6j-vv4r/GHSA-g9r7-hq6j-vv4r.json index 8401266eab6..460fbe760d9 100644 --- a/advisories/unreviewed/2023/01/GHSA-g9r7-hq6j-vv4r/GHSA-g9r7-hq6j-vv4r.json +++ b/advisories/unreviewed/2023/01/GHSA-g9r7-hq6j-vv4r/GHSA-g9r7-hq6j-vv4r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-hqm4-gqw3-f629/GHSA-hqm4-gqw3-f629.json b/advisories/unreviewed/2023/01/GHSA-hqm4-gqw3-f629/GHSA-hqm4-gqw3-f629.json index 076cafe9c31..ee239084cb3 100644 --- a/advisories/unreviewed/2023/01/GHSA-hqm4-gqw3-f629/GHSA-hqm4-gqw3-f629.json +++ b/advisories/unreviewed/2023/01/GHSA-hqm4-gqw3-f629/GHSA-hqm4-gqw3-f629.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-hv3j-pf66-34pj/GHSA-hv3j-pf66-34pj.json b/advisories/unreviewed/2023/01/GHSA-hv3j-pf66-34pj/GHSA-hv3j-pf66-34pj.json index 94bdecd4eac..bb680aa5f40 100644 --- a/advisories/unreviewed/2023/01/GHSA-hv3j-pf66-34pj/GHSA-hv3j-pf66-34pj.json +++ b/advisories/unreviewed/2023/01/GHSA-hv3j-pf66-34pj/GHSA-hv3j-pf66-34pj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-jx8f-64xg-p4fj/GHSA-jx8f-64xg-p4fj.json b/advisories/unreviewed/2023/01/GHSA-jx8f-64xg-p4fj/GHSA-jx8f-64xg-p4fj.json index 4889997e8cd..d1f0d64889e 100644 --- a/advisories/unreviewed/2023/01/GHSA-jx8f-64xg-p4fj/GHSA-jx8f-64xg-p4fj.json +++ b/advisories/unreviewed/2023/01/GHSA-jx8f-64xg-p4fj/GHSA-jx8f-64xg-p4fj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/01/GHSA-mmpf-hqvm-whr2/GHSA-mmpf-hqvm-whr2.json b/advisories/unreviewed/2023/01/GHSA-mmpf-hqvm-whr2/GHSA-mmpf-hqvm-whr2.json index a6e9e15788a..3af1f9e8f6a 100644 --- a/advisories/unreviewed/2023/01/GHSA-mmpf-hqvm-whr2/GHSA-mmpf-hqvm-whr2.json +++ b/advisories/unreviewed/2023/01/GHSA-mmpf-hqvm-whr2/GHSA-mmpf-hqvm-whr2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-pw9p-6xwp-hhv6/GHSA-pw9p-6xwp-hhv6.json b/advisories/unreviewed/2023/01/GHSA-pw9p-6xwp-hhv6/GHSA-pw9p-6xwp-hhv6.json index 6f59717fbca..e65da182cdc 100644 --- a/advisories/unreviewed/2023/01/GHSA-pw9p-6xwp-hhv6/GHSA-pw9p-6xwp-hhv6.json +++ b/advisories/unreviewed/2023/01/GHSA-pw9p-6xwp-hhv6/GHSA-pw9p-6xwp-hhv6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/01/GHSA-rxwj-9j86-c578/GHSA-rxwj-9j86-c578.json b/advisories/unreviewed/2023/01/GHSA-rxwj-9j86-c578/GHSA-rxwj-9j86-c578.json index f5e7bddb429..17bc9a4196d 100644 --- a/advisories/unreviewed/2023/01/GHSA-rxwj-9j86-c578/GHSA-rxwj-9j86-c578.json +++ b/advisories/unreviewed/2023/01/GHSA-rxwj-9j86-c578/GHSA-rxwj-9j86-c578.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-xpm8-wwj4-8r2r/GHSA-xpm8-wwj4-8r2r.json b/advisories/unreviewed/2023/01/GHSA-xpm8-wwj4-8r2r/GHSA-xpm8-wwj4-8r2r.json index b26b703819b..578a2add1ec 100644 --- a/advisories/unreviewed/2023/01/GHSA-xpm8-wwj4-8r2r/GHSA-xpm8-wwj4-8r2r.json +++ b/advisories/unreviewed/2023/01/GHSA-xpm8-wwj4-8r2r/GHSA-xpm8-wwj4-8r2r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-4j3q-rqjq-x3f3/GHSA-4j3q-rqjq-x3f3.json b/advisories/unreviewed/2023/02/GHSA-4j3q-rqjq-x3f3/GHSA-4j3q-rqjq-x3f3.json index 0f4116d2b71..d4dca14e2df 100644 --- a/advisories/unreviewed/2023/02/GHSA-4j3q-rqjq-x3f3/GHSA-4j3q-rqjq-x3f3.json +++ b/advisories/unreviewed/2023/02/GHSA-4j3q-rqjq-x3f3/GHSA-4j3q-rqjq-x3f3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-5fm8-cm8w-fm9w/GHSA-5fm8-cm8w-fm9w.json b/advisories/unreviewed/2023/02/GHSA-5fm8-cm8w-fm9w/GHSA-5fm8-cm8w-fm9w.json index becdfc3eb4e..8e2ad28275e 100644 --- a/advisories/unreviewed/2023/02/GHSA-5fm8-cm8w-fm9w/GHSA-5fm8-cm8w-fm9w.json +++ b/advisories/unreviewed/2023/02/GHSA-5fm8-cm8w-fm9w/GHSA-5fm8-cm8w-fm9w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-5rg3-6jx4-c2qf/GHSA-5rg3-6jx4-c2qf.json b/advisories/unreviewed/2023/02/GHSA-5rg3-6jx4-c2qf/GHSA-5rg3-6jx4-c2qf.json index e3bcffc070c..6250992c46a 100644 --- a/advisories/unreviewed/2023/02/GHSA-5rg3-6jx4-c2qf/GHSA-5rg3-6jx4-c2qf.json +++ b/advisories/unreviewed/2023/02/GHSA-5rg3-6jx4-c2qf/GHSA-5rg3-6jx4-c2qf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-h27p-fqrc-98gx/GHSA-h27p-fqrc-98gx.json b/advisories/unreviewed/2023/02/GHSA-h27p-fqrc-98gx/GHSA-h27p-fqrc-98gx.json index f9c2accb260..a7f1ed74015 100644 --- a/advisories/unreviewed/2023/02/GHSA-h27p-fqrc-98gx/GHSA-h27p-fqrc-98gx.json +++ b/advisories/unreviewed/2023/02/GHSA-h27p-fqrc-98gx/GHSA-h27p-fqrc-98gx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-pg33-6wvv-gqx3/GHSA-pg33-6wvv-gqx3.json b/advisories/unreviewed/2023/02/GHSA-pg33-6wvv-gqx3/GHSA-pg33-6wvv-gqx3.json index 4c6cdd257a7..c399b34b0ab 100644 --- a/advisories/unreviewed/2023/02/GHSA-pg33-6wvv-gqx3/GHSA-pg33-6wvv-gqx3.json +++ b/advisories/unreviewed/2023/02/GHSA-pg33-6wvv-gqx3/GHSA-pg33-6wvv-gqx3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-vm69-7xwv-v7gm/GHSA-vm69-7xwv-v7gm.json b/advisories/unreviewed/2023/02/GHSA-vm69-7xwv-v7gm/GHSA-vm69-7xwv-v7gm.json index f2ee6efbee0..d90688a9a8f 100644 --- a/advisories/unreviewed/2023/02/GHSA-vm69-7xwv-v7gm/GHSA-vm69-7xwv-v7gm.json +++ b/advisories/unreviewed/2023/02/GHSA-vm69-7xwv-v7gm/GHSA-vm69-7xwv-v7gm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/08/GHSA-fh54-998j-j424/GHSA-fh54-998j-j424.json b/advisories/unreviewed/2023/08/GHSA-fh54-998j-j424/GHSA-fh54-998j-j424.json index 599a90dde11..49c83c6b09c 100644 --- a/advisories/unreviewed/2023/08/GHSA-fh54-998j-j424/GHSA-fh54-998j-j424.json +++ b/advisories/unreviewed/2023/08/GHSA-fh54-998j-j424/GHSA-fh54-998j-j424.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-292c-cv4c-47f7/GHSA-292c-cv4c-47f7.json b/advisories/unreviewed/2024/05/GHSA-292c-cv4c-47f7/GHSA-292c-cv4c-47f7.json index 12e106e6190..ad70f6224d6 100644 --- a/advisories/unreviewed/2024/05/GHSA-292c-cv4c-47f7/GHSA-292c-cv4c-47f7.json +++ b/advisories/unreviewed/2024/05/GHSA-292c-cv4c-47f7/GHSA-292c-cv4c-47f7.json @@ -7,12 +7,8 @@ "CVE-2024-27034" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: compress: fix to cover normal cluster write with cp_rwsem\n\nWhen we overwrite compressed cluster w/ normal cluster, we should\nnot unlock cp_rwsem during f2fs_write_raw_pages(), otherwise data\nwill be corrupted if partial blocks were persisted before CP & SPOR,\ndue to cluster metadata wasn't updated atomically.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-2gg6-7q9p-2qrr/GHSA-2gg6-7q9p-2qrr.json b/advisories/unreviewed/2024/05/GHSA-2gg6-7q9p-2qrr/GHSA-2gg6-7q9p-2qrr.json index 64f5741dfe4..b680bb49d8d 100644 --- a/advisories/unreviewed/2024/05/GHSA-2gg6-7q9p-2qrr/GHSA-2gg6-7q9p-2qrr.json +++ b/advisories/unreviewed/2024/05/GHSA-2gg6-7q9p-2qrr/GHSA-2gg6-7q9p-2qrr.json @@ -7,12 +7,8 @@ "CVE-2024-27039" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: hisilicon: hi3559a: Fix an erroneous devm_kfree()\n\n'p_clk' is an array allocated just before the for loop for all clk that\nneed to be registered.\nIt is incremented at each loop iteration.\n\nIf a clk_register() call fails, 'p_clk' may point to something different\nfrom what should be freed.\n\nThe best we can do, is to avoid this wrong release of memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-2jfm-78v6-9p3x/GHSA-2jfm-78v6-9p3x.json b/advisories/unreviewed/2024/05/GHSA-2jfm-78v6-9p3x/GHSA-2jfm-78v6-9p3x.json index e23315ffe4b..0660a68ef24 100644 --- a/advisories/unreviewed/2024/05/GHSA-2jfm-78v6-9p3x/GHSA-2jfm-78v6-9p3x.json +++ b/advisories/unreviewed/2024/05/GHSA-2jfm-78v6-9p3x/GHSA-2jfm-78v6-9p3x.json @@ -7,12 +7,8 @@ "CVE-2023-52652" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nNTB: fix possible name leak in ntb_register_device()\n\nIf device_register() fails in ntb_register_device(), the device name\nallocated by dev_set_name() should be freed. As per the comment in\ndevice_register(), callers should use put_device() to give up the\nreference in the error path. So fix this by calling put_device() in the\nerror path so that the name can be freed in kobject_cleanup().\n\nAs a result of this, put_device() in the error path of\nntb_register_device() is removed and the actual error is returned.\n\n[mani: reworded commit message]", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-2jv6-v65m-qjx7/GHSA-2jv6-v65m-qjx7.json b/advisories/unreviewed/2024/05/GHSA-2jv6-v65m-qjx7/GHSA-2jv6-v65m-qjx7.json index 0771632401c..4c718a071ff 100644 --- a/advisories/unreviewed/2024/05/GHSA-2jv6-v65m-qjx7/GHSA-2jv6-v65m-qjx7.json +++ b/advisories/unreviewed/2024/05/GHSA-2jv6-v65m-qjx7/GHSA-2jv6-v65m-qjx7.json @@ -7,12 +7,8 @@ "CVE-2024-26975" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\npowercap: intel_rapl: Fix a NULL pointer dereference\n\nA NULL pointer dereference is triggered when probing the MMIO RAPL\ndriver on platforms with CPU ID not listed in intel_rapl_common CPU\nmodel list.\n\nThis is because the intel_rapl_common module still probes on such\nplatforms even if 'defaults_msr' is not set after commit 1488ac990ac8\n(\"powercap: intel_rapl: Allow probing without CPUID match\"). Thus the\nMMIO RAPL rp->priv->defaults is NULL when registering to RAPL framework.\n\nFix the problem by adding sanity check to ensure rp->priv->rapl_defaults\nis always valid.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-3fp6-h65v-mprr/GHSA-3fp6-h65v-mprr.json b/advisories/unreviewed/2024/05/GHSA-3fp6-h65v-mprr/GHSA-3fp6-h65v-mprr.json index 191184e92c4..5a09fc4148e 100644 --- a/advisories/unreviewed/2024/05/GHSA-3fp6-h65v-mprr/GHSA-3fp6-h65v-mprr.json +++ b/advisories/unreviewed/2024/05/GHSA-3fp6-h65v-mprr/GHSA-3fp6-h65v-mprr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-3qw8-r23q-rc4p/GHSA-3qw8-r23q-rc4p.json b/advisories/unreviewed/2024/05/GHSA-3qw8-r23q-rc4p/GHSA-3qw8-r23q-rc4p.json index 950bac967b7..ec153dfd0e0 100644 --- a/advisories/unreviewed/2024/05/GHSA-3qw8-r23q-rc4p/GHSA-3qw8-r23q-rc4p.json +++ b/advisories/unreviewed/2024/05/GHSA-3qw8-r23q-rc4p/GHSA-3qw8-r23q-rc4p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-6jg4-p8m6-m9mp/GHSA-6jg4-p8m6-m9mp.json b/advisories/unreviewed/2024/05/GHSA-6jg4-p8m6-m9mp/GHSA-6jg4-p8m6-m9mp.json index b96630ab5a5..b8f75aa1095 100644 --- a/advisories/unreviewed/2024/05/GHSA-6jg4-p8m6-m9mp/GHSA-6jg4-p8m6-m9mp.json +++ b/advisories/unreviewed/2024/05/GHSA-6jg4-p8m6-m9mp/GHSA-6jg4-p8m6-m9mp.json @@ -7,12 +7,8 @@ "CVE-2024-26971" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: qcom: gcc-ipq5018: fix terminating of frequency table arrays\n\nThe frequency table arrays are supposed to be terminated with an\nempty element. Add such entry to the end of the arrays where it\nis missing in order to avoid possible out-of-bound access when\nthe table is traversed by functions like qcom_find_freq() or\nqcom_find_freq_floor().", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-8979-xf4w-fmjp/GHSA-8979-xf4w-fmjp.json b/advisories/unreviewed/2024/05/GHSA-8979-xf4w-fmjp/GHSA-8979-xf4w-fmjp.json index 0709c18c819..cbadad1741b 100644 --- a/advisories/unreviewed/2024/05/GHSA-8979-xf4w-fmjp/GHSA-8979-xf4w-fmjp.json +++ b/advisories/unreviewed/2024/05/GHSA-8979-xf4w-fmjp/GHSA-8979-xf4w-fmjp.json @@ -7,12 +7,8 @@ "CVE-2024-26968" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nclk: qcom: gcc-ipq9574: fix terminating of frequency table arrays\n\nThe frequency table arrays are supposed to be terminated with an\nempty element. Add such entry to the end of the arrays where it\nis missing in order to avoid possible out-of-bound access when\nthe table is traversed by functions like qcom_find_freq() or\nqcom_find_freq_floor().\n\nOnly compile tested.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-93q3-24jj-x39c/GHSA-93q3-24jj-x39c.json b/advisories/unreviewed/2024/05/GHSA-93q3-24jj-x39c/GHSA-93q3-24jj-x39c.json index b177c6fa8ce..52d568bd4bb 100644 --- a/advisories/unreviewed/2024/05/GHSA-93q3-24jj-x39c/GHSA-93q3-24jj-x39c.json +++ b/advisories/unreviewed/2024/05/GHSA-93q3-24jj-x39c/GHSA-93q3-24jj-x39c.json @@ -7,12 +7,8 @@ "CVE-2024-27023" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd: Fix missing release of 'active_io' for flush\n\nsubmit_flushes\n atomic_set(&mddev->flush_pending, 1);\n rdev_for_each_rcu(rdev, mddev)\n atomic_inc(&mddev->flush_pending);\n bi->bi_end_io = md_end_flush\n submit_bio(bi);\n /* flush io is done first */\n md_end_flush\n if (atomic_dec_and_test(&mddev->flush_pending))\n percpu_ref_put(&mddev->active_io)\n -> active_io is not released\n\n if (atomic_dec_and_test(&mddev->flush_pending))\n -> missing release of active_io\n\nFor consequence, mddev_suspend() will wait for 'active_io' to be zero\nforever.\n\nFix this problem by releasing 'active_io' in submit_flushes() if\n'flush_pending' is decreased to zero.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-f8c2-mrqx-hg5v/GHSA-f8c2-mrqx-hg5v.json b/advisories/unreviewed/2024/05/GHSA-f8c2-mrqx-hg5v/GHSA-f8c2-mrqx-hg5v.json index bf34bf0e29e..21c2f3a3e76 100644 --- a/advisories/unreviewed/2024/05/GHSA-f8c2-mrqx-hg5v/GHSA-f8c2-mrqx-hg5v.json +++ b/advisories/unreviewed/2024/05/GHSA-f8c2-mrqx-hg5v/GHSA-f8c2-mrqx-hg5v.json @@ -7,12 +7,8 @@ "CVE-2024-27033" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic\n\nverify_blkaddr() will trigger panic once we inject fault into\nf2fs_is_valid_blkaddr(), fix to remove this unnecessary f2fs_bug_on().", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-fc7q-x42h-7ff2/GHSA-fc7q-x42h-7ff2.json b/advisories/unreviewed/2024/05/GHSA-fc7q-x42h-7ff2/GHSA-fc7q-x42h-7ff2.json index 3a5225d6fe5..f9bd8066b21 100644 --- a/advisories/unreviewed/2024/05/GHSA-fc7q-x42h-7ff2/GHSA-fc7q-x42h-7ff2.json +++ b/advisories/unreviewed/2024/05/GHSA-fc7q-x42h-7ff2/GHSA-fc7q-x42h-7ff2.json @@ -7,12 +7,8 @@ "CVE-2024-26938" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/i915/bios: Tolerate devdata==NULL in intel_bios_encoder_supports_dp_dual_mode()\n\nIf we have no VBT, or the VBT didn't declare the encoder\nin question, we won't have the 'devdata' for the encoder.\nInstead of oopsing just bail early.\n\nWe won't be able to tell whether the port is DP++ or not,\nbut so be it.\n\n(cherry picked from commit 26410896206342c8a80d2b027923e9ee7d33b733)", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-p35v-6xhj-q8qh/GHSA-p35v-6xhj-q8qh.json b/advisories/unreviewed/2024/05/GHSA-p35v-6xhj-q8qh/GHSA-p35v-6xhj-q8qh.json index 84a79aea6e1..38325cb0a8a 100644 --- a/advisories/unreviewed/2024/05/GHSA-p35v-6xhj-q8qh/GHSA-p35v-6xhj-q8qh.json +++ b/advisories/unreviewed/2024/05/GHSA-p35v-6xhj-q8qh/GHSA-p35v-6xhj-q8qh.json @@ -7,12 +7,8 @@ "CVE-2024-27042" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Fix potential out-of-bounds access in 'amdgpu_discovery_reg_base_init()'\n\nThe issue arises when the array 'adev->vcn.vcn_config' is accessed\nbefore checking if the index 'adev->vcn.num_vcn_inst' is within the\nbounds of the array.\n\nThe fix involves moving the bounds check before the array access. This\nensures that 'adev->vcn.num_vcn_inst' is within the bounds of the array\nbefore it is used as an index.\n\nFixes the below:\ndrivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c:1289 amdgpu_discovery_reg_base_init() error: testing array offset 'adev->vcn.num_vcn_inst' after use.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-p8xq-m5g2-cvrc/GHSA-p8xq-m5g2-cvrc.json b/advisories/unreviewed/2024/05/GHSA-p8xq-m5g2-cvrc/GHSA-p8xq-m5g2-cvrc.json index f524d5b1c23..8fa599afe39 100644 --- a/advisories/unreviewed/2024/05/GHSA-p8xq-m5g2-cvrc/GHSA-p8xq-m5g2-cvrc.json +++ b/advisories/unreviewed/2024/05/GHSA-p8xq-m5g2-cvrc/GHSA-p8xq-m5g2-cvrc.json @@ -7,12 +7,8 @@ "CVE-2024-27031" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFS: Fix nfs_netfs_issue_read() xarray locking for writeback interrupt\n\nThe loop inside nfs_netfs_issue_read() currently does not disable\ninterrupts while iterating through pages in the xarray to submit\nfor NFS read. This is not safe though since after taking xa_lock,\nanother page in the mapping could be processed for writeback inside\nan interrupt, and deadlock can occur. The fix is simple and clean\nif we use xa_for_each_range(), which handles the iteration with RCU\nwhile reducing code complexity.\n\nThe problem is easily reproduced with the following test:\n mount -o vers=3,fsc 127.0.0.1:/export /mnt/nfs\n dd if=/dev/zero of=/mnt/nfs/file1.bin bs=4096 count=1\n echo 3 > /proc/sys/vm/drop_caches\n dd if=/mnt/nfs/file1.bin of=/dev/null\n umount /mnt/nfs\n\nOn the console with a lockdep-enabled kernel a message similar to\nthe following will be seen:\n\n ================================\n WARNING: inconsistent lock state\n 6.7.0-lockdbg+ #10 Not tainted\n --------------------------------\n inconsistent {IN-SOFTIRQ-W} -> {SOFTIRQ-ON-W} usage.\n test5/1708 [HC0[0]:SC0[0]:HE1:SE1] takes:\n ffff888127baa598 (&xa->xa_lock#4){+.?.}-{3:3}, at:\nnfs_netfs_issue_read+0x1b2/0x4b0 [nfs]\n {IN-SOFTIRQ-W} state was registered at:\n lock_acquire+0x144/0x380\n _raw_spin_lock_irqsave+0x4e/0xa0\n __folio_end_writeback+0x17e/0x5c0\n folio_end_writeback+0x93/0x1b0\n iomap_finish_ioend+0xeb/0x6a0\n blk_update_request+0x204/0x7f0\n blk_mq_end_request+0x30/0x1c0\n blk_complete_reqs+0x7e/0xa0\n __do_softirq+0x113/0x544\n __irq_exit_rcu+0xfe/0x120\n irq_exit_rcu+0xe/0x20\n sysvec_call_function_single+0x6f/0x90\n asm_sysvec_call_function_single+0x1a/0x20\n pv_native_safe_halt+0xf/0x20\n default_idle+0x9/0x20\n default_idle_call+0x67/0xa0\n do_idle+0x2b5/0x300\n cpu_startup_entry+0x34/0x40\n start_secondary+0x19d/0x1c0\n secondary_startup_64_no_verify+0x18f/0x19b\n irq event stamp: 176891\n hardirqs last enabled at (176891): []\n_raw_spin_unlock_irqrestore+0x44/0x60\n hardirqs last disabled at (176890): []\n_raw_spin_lock_irqsave+0x79/0xa0\n softirqs last enabled at (176646): []\n__irq_exit_rcu+0xfe/0x120\n softirqs last disabled at (176633): []\n__irq_exit_rcu+0xfe/0x120\n\n other info that might help us debug this:\n Possible unsafe locking scenario:\n\n CPU0\n ----\n lock(&xa->xa_lock#4);\n \n lock(&xa->xa_lock#4);\n\n *** DEADLOCK ***\n\n 2 locks held by test5/1708:\n #0: ffff888127baa498 (&sb->s_type->i_mutex_key#22){++++}-{4:4}, at:\n nfs_start_io_read+0x28/0x90 [nfs]\n #1: ffff888127baa650 (mapping.invalidate_lock#3){.+.+}-{4:4}, at:\n page_cache_ra_unbounded+0xa4/0x280\n\n stack backtrace:\n CPU: 6 PID: 1708 Comm: test5 Kdump: loaded Not tainted 6.7.0-lockdbg+\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-1.fc39\n04/01/2014\n Call Trace:\n dump_stack_lvl+0x5b/0x90\n mark_lock+0xb3f/0xd20\n __lock_acquire+0x77b/0x3360\n _raw_spin_lock+0x34/0x80\n nfs_netfs_issue_read+0x1b2/0x4b0 [nfs]\n netfs_begin_read+0x77f/0x980 [netfs]\n nfs_netfs_readahead+0x45/0x60 [nfs]\n nfs_readahead+0x323/0x5a0 [nfs]\n read_pages+0xf3/0x5c0\n page_cache_ra_unbounded+0x1c8/0x280\n filemap_get_pages+0x38c/0xae0\n filemap_read+0x206/0x5e0\n nfs_file_read+0xb7/0x140 [nfs]\n vfs_read+0x2a9/0x460\n ksys_read+0xb7/0x140", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-qw45-gv2r-frwm/GHSA-qw45-gv2r-frwm.json b/advisories/unreviewed/2024/05/GHSA-qw45-gv2r-frwm/GHSA-qw45-gv2r-frwm.json index 077447e404b..88d052571d6 100644 --- a/advisories/unreviewed/2024/05/GHSA-qw45-gv2r-frwm/GHSA-qw45-gv2r-frwm.json +++ b/advisories/unreviewed/2024/05/GHSA-qw45-gv2r-frwm/GHSA-qw45-gv2r-frwm.json @@ -7,12 +7,8 @@ "CVE-2024-27026" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nvmxnet3: Fix missing reserved tailroom\n\nUse rbi->len instead of rcd->len for non-dataring packet.\n\nFound issue:\n XDP_WARN: xdp_update_frame_from_buff(line:278): Driver BUG: missing reserved tailroom\n WARNING: CPU: 0 PID: 0 at net/core/xdp.c:586 xdp_warn+0xf/0x20\n CPU: 0 PID: 0 Comm: swapper/0 Tainted: G W O 6.5.1 #1\n RIP: 0010:xdp_warn+0xf/0x20\n ...\n ? xdp_warn+0xf/0x20\n xdp_do_redirect+0x15f/0x1c0\n vmxnet3_run_xdp+0x17a/0x400 [vmxnet3]\n vmxnet3_process_xdp+0xe4/0x760 [vmxnet3]\n ? vmxnet3_tq_tx_complete.isra.0+0x21e/0x2c0 [vmxnet3]\n vmxnet3_rq_rx_complete+0x7ad/0x1120 [vmxnet3]\n vmxnet3_poll_rx_only+0x2d/0xa0 [vmxnet3]\n __napi_poll+0x20/0x180\n net_rx_action+0x177/0x390", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-vc8w-q4f6-f3fg/GHSA-vc8w-q4f6-f3fg.json b/advisories/unreviewed/2024/05/GHSA-vc8w-q4f6-f3fg/GHSA-vc8w-q4f6-f3fg.json index 3e8e7d0d001..65f133bf467 100644 --- a/advisories/unreviewed/2024/05/GHSA-vc8w-q4f6-f3fg/GHSA-vc8w-q4f6-f3fg.json +++ b/advisories/unreviewed/2024/05/GHSA-vc8w-q4f6-f3fg/GHSA-vc8w-q4f6-f3fg.json @@ -7,12 +7,8 @@ "CVE-2024-27036" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: Fix writeback data corruption\n\ncifs writeback doesn't correctly handle the case where\ncifs_extend_writeback() hits a point where it is considering an additional\nfolio, but this would overrun the wsize - at which point it drops out of\nthe xarray scanning loop and calls xas_pause(). The problem is that\nxas_pause() advances the loop counter - thereby skipping that page.\n\nWhat needs to happen is for xas_reset() to be called any time we decide we\ndon't want to process the page we're looking at, but rather send the\nrequest we are building and start a new one.\n\nFix this by copying and adapting the netfslib writepages code as a\ntemporary measure, with cifs writeback intending to be offloaded to\nnetfslib in the near future.\n\nThis also fixes the issue with the use of filemap_get_folios_tag() causing\nretry of a bunch of pages which the extender already dealt with.\n\nThis can be tested by creating, say, a 64K file somewhere not on cifs\n(otherwise copy-offload may get underfoot), mounting a cifs share with a\nwsize of 64000, copying the file to it and then comparing the original file\nand the copy:\n\n dd if=/dev/urandom of=/tmp/64K bs=64k count=1\n mount //192.168.6.1/test /mnt -o user=...,pass=...,wsize=64000\n cp /tmp/64K /mnt/64K\n cmp /tmp/64K /mnt/64K\n\nWithout the fix, the cmp fails at position 64000 (or shortly thereafter).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-vpc3-576f-68c6/GHSA-vpc3-576f-68c6.json b/advisories/unreviewed/2024/05/GHSA-vpc3-576f-68c6/GHSA-vpc3-576f-68c6.json index 34faacd501e..fd1eb6568e6 100644 --- a/advisories/unreviewed/2024/05/GHSA-vpc3-576f-68c6/GHSA-vpc3-576f-68c6.json +++ b/advisories/unreviewed/2024/05/GHSA-vpc3-576f-68c6/GHSA-vpc3-576f-68c6.json @@ -7,12 +7,8 @@ "CVE-2023-52649" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vkms: Avoid reading beyond LUT array\n\nWhen the floor LUT index (drm_fixp2int(lut_index) is the last\nindex of the array the ceil LUT index will point to an entry\nbeyond the array. Make sure we guard against it and use the\nvalue of the floor LUT index.\n\nv3:\n - Drop bits from commit description that didn't contribute\n anything of value", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-x846-9rxh-mcv9/GHSA-x846-9rxh-mcv9.json b/advisories/unreviewed/2024/05/GHSA-x846-9rxh-mcv9/GHSA-x846-9rxh-mcv9.json index a933e799acd..e0da02fec50 100644 --- a/advisories/unreviewed/2024/05/GHSA-x846-9rxh-mcv9/GHSA-x846-9rxh-mcv9.json +++ b/advisories/unreviewed/2024/05/GHSA-x846-9rxh-mcv9/GHSA-x846-9rxh-mcv9.json @@ -7,12 +7,8 @@ "CVE-2024-26941" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/dp: Fix divide-by-zero regression on DP MST unplug with nouveau\n\nFix a regression when using nouveau and unplugging a StarTech MSTDP122DP\nDisplayPort 1.2 MST hub (the same regression does not appear when using\na Cable Matters DisplayPort 1.4 MST hub). Trace:\n\n divide error: 0000 [#1] PREEMPT SMP PTI\n CPU: 7 PID: 2962 Comm: Xorg Not tainted 6.8.0-rc3+ #744\n Hardware name: Razer Blade/DANA_MB, BIOS 01.01 08/31/2018\n RIP: 0010:drm_dp_bw_overhead+0xb4/0x110 [drm_display_helper]\n Code: c6 b8 01 00 00 00 75 61 01 c6 41 0f af f3 41 0f af f1 c1 e1 04 48 63 c7 31 d2 89 ff 48 8b 5d f8 c9 48 0f af f1 48 8d 44 06 ff <48> f7 f7 31 d2 31 c9 31 f6 31 ff 45 31 c0 45 31 c9 45 31 d2 45 31\n RSP: 0018:ffffb2c5c211fa30 EFLAGS: 00010206\n RAX: ffffffffffffffff RBX: 0000000000000000 RCX: 0000000000f59b00\n RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000\n RBP: ffffb2c5c211fa48 R08: 0000000000000001 R09: 0000000000000020\n R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000023b4a\n R13: ffff91d37d165800 R14: ffff91d36fac6d80 R15: ffff91d34a764010\n FS: 00007f4a1ca3fa80(0000) GS:ffff91d6edbc0000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000559491d49000 CR3: 000000011d180002 CR4: 00000000003706f0\n Call Trace:\n \n ? show_regs+0x6d/0x80\n ? die+0x37/0xa0\n ? do_trap+0xd4/0xf0\n ? do_error_trap+0x71/0xb0\n ? drm_dp_bw_overhead+0xb4/0x110 [drm_display_helper]\n ? exc_divide_error+0x3a/0x70\n ? drm_dp_bw_overhead+0xb4/0x110 [drm_display_helper]\n ? asm_exc_divide_error+0x1b/0x20\n ? drm_dp_bw_overhead+0xb4/0x110 [drm_display_helper]\n ? drm_dp_calc_pbn_mode+0x2e/0x70 [drm_display_helper]\n nv50_msto_atomic_check+0xda/0x120 [nouveau]\n drm_atomic_helper_check_modeset+0xa87/0xdf0 [drm_kms_helper]\n drm_atomic_helper_check+0x19/0xa0 [drm_kms_helper]\n nv50_disp_atomic_check+0x13f/0x2f0 [nouveau]\n drm_atomic_check_only+0x668/0xb20 [drm]\n ? drm_connector_list_iter_next+0x86/0xc0 [drm]\n drm_atomic_commit+0x58/0xd0 [drm]\n ? __pfx___drm_printfn_info+0x10/0x10 [drm]\n drm_atomic_connector_commit_dpms+0xd7/0x100 [drm]\n drm_mode_obj_set_property_ioctl+0x1c5/0x450 [drm]\n ? __pfx_drm_connector_property_set_ioctl+0x10/0x10 [drm]\n drm_connector_property_set_ioctl+0x3b/0x60 [drm]\n drm_ioctl_kernel+0xb9/0x120 [drm]\n drm_ioctl+0x2d0/0x550 [drm]\n ? __pfx_drm_connector_property_set_ioctl+0x10/0x10 [drm]\n nouveau_drm_ioctl+0x61/0xc0 [nouveau]\n __x64_sys_ioctl+0xa0/0xf0\n do_syscall_64+0x76/0x140\n ? do_syscall_64+0x85/0x140\n ? do_syscall_64+0x85/0x140\n entry_SYSCALL_64_after_hwframe+0x6e/0x76\n RIP: 0033:0x7f4a1cd1a94f\n Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <41> 89 c0 3d 00 f0 ff ff 77 1f 48 8b 44 24 18 64 48 2b 04 25 28 00\n RSP: 002b:00007ffd2f1df520 EFLAGS: 00000246 ORIG_RAX: 0000000000000010\n RAX: ffffffffffffffda RBX: 00007ffd2f1df5b0 RCX: 00007f4a1cd1a94f\n RDX: 00007ffd2f1df5b0 RSI: 00000000c01064ab RDI: 000000000000000f\n RBP: 00000000c01064ab R08: 000056347932deb8 R09: 000056347a7d99c0\n R10: 0000000000000000 R11: 0000000000000246 R12: 000056347938a220\n R13: 000000000000000f R14: 0000563479d9f3f0 R15: 0000000000000000\n \n Modules linked in: rfcomm xt_conntrack nft_chain_nat xt_MASQUERADE nf_nat nf_conntrack_netlink nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 xfrm_user xfrm_algo xt_addrtype nft_compat nf_tables nfnetlink br_netfilter bridge stp llc ccm cmac algif_hash overlay algif_skcipher af_alg bnep binfmt_misc snd_sof_pci_intel_cnl snd_sof_intel_hda_common snd_soc_hdac_hda snd_sof_pci snd_sof_xtensa_dsp snd_sof_intel_hda snd_sof snd_sof_utils snd_soc_acpi_intel_match snd_soc_acpi snd_soc_core snd_compress snd_sof_intel_hda_mlink snd_hda_ext_core iwlmvm intel_rapl_msr intel_rapl_common intel_tcc_cooling x86_pkg_temp_thermal intel_powerclamp mac80211 coretemp kvm_intel snd_hda_codec_hdmi kvm snd_hda_\n---truncated---", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-xqh7-2cpx-qr3f/GHSA-xqh7-2cpx-qr3f.json b/advisories/unreviewed/2024/05/GHSA-xqh7-2cpx-qr3f/GHSA-xqh7-2cpx-qr3f.json index 0fea96f279b..c734951271d 100644 --- a/advisories/unreviewed/2024/05/GHSA-xqh7-2cpx-qr3f/GHSA-xqh7-2cpx-qr3f.json +++ b/advisories/unreviewed/2024/05/GHSA-xqh7-2cpx-qr3f/GHSA-xqh7-2cpx-qr3f.json @@ -7,12 +7,8 @@ "CVE-2024-27029" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix mmhub client id out-of-bounds access\n\nProperly handle cid 0x140.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/06/GHSA-5ccr-x72v-c947/GHSA-5ccr-x72v-c947.json b/advisories/unreviewed/2024/06/GHSA-5ccr-x72v-c947/GHSA-5ccr-x72v-c947.json index 5977541be54..50a9f6c17b9 100644 --- a/advisories/unreviewed/2024/06/GHSA-5ccr-x72v-c947/GHSA-5ccr-x72v-c947.json +++ b/advisories/unreviewed/2024/06/GHSA-5ccr-x72v-c947/GHSA-5ccr-x72v-c947.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-623w-rmj9-c99m/GHSA-623w-rmj9-c99m.json b/advisories/unreviewed/2024/06/GHSA-623w-rmj9-c99m/GHSA-623w-rmj9-c99m.json index 45aaaf16ac8..0caa3824e2f 100644 --- a/advisories/unreviewed/2024/06/GHSA-623w-rmj9-c99m/GHSA-623w-rmj9-c99m.json +++ b/advisories/unreviewed/2024/06/GHSA-623w-rmj9-c99m/GHSA-623w-rmj9-c99m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-6vg7-562r-mh4w/GHSA-6vg7-562r-mh4w.json b/advisories/unreviewed/2024/06/GHSA-6vg7-562r-mh4w/GHSA-6vg7-562r-mh4w.json index 54753790e2f..2bbcf717554 100644 --- a/advisories/unreviewed/2024/06/GHSA-6vg7-562r-mh4w/GHSA-6vg7-562r-mh4w.json +++ b/advisories/unreviewed/2024/06/GHSA-6vg7-562r-mh4w/GHSA-6vg7-562r-mh4w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-79xc-jx7x-797q/GHSA-79xc-jx7x-797q.json b/advisories/unreviewed/2024/06/GHSA-79xc-jx7x-797q/GHSA-79xc-jx7x-797q.json index d90efe588a6..fe6f1f30f12 100644 --- a/advisories/unreviewed/2024/06/GHSA-79xc-jx7x-797q/GHSA-79xc-jx7x-797q.json +++ b/advisories/unreviewed/2024/06/GHSA-79xc-jx7x-797q/GHSA-79xc-jx7x-797q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-8458-987w-9cm9/GHSA-8458-987w-9cm9.json b/advisories/unreviewed/2024/06/GHSA-8458-987w-9cm9/GHSA-8458-987w-9cm9.json index 4c9dffad3c4..f6c420ee800 100644 --- a/advisories/unreviewed/2024/06/GHSA-8458-987w-9cm9/GHSA-8458-987w-9cm9.json +++ b/advisories/unreviewed/2024/06/GHSA-8458-987w-9cm9/GHSA-8458-987w-9cm9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/06/GHSA-h3vq-5r52-r6hp/GHSA-h3vq-5r52-r6hp.json b/advisories/unreviewed/2024/06/GHSA-h3vq-5r52-r6hp/GHSA-h3vq-5r52-r6hp.json index 73ac7ba367d..54c9ac3d9fc 100644 --- a/advisories/unreviewed/2024/06/GHSA-h3vq-5r52-r6hp/GHSA-h3vq-5r52-r6hp.json +++ b/advisories/unreviewed/2024/06/GHSA-h3vq-5r52-r6hp/GHSA-h3vq-5r52-r6hp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-qmh4-3pqf-jg3h/GHSA-qmh4-3pqf-jg3h.json b/advisories/unreviewed/2024/06/GHSA-qmh4-3pqf-jg3h/GHSA-qmh4-3pqf-jg3h.json index fd6c479c603..91cc399c2b9 100644 --- a/advisories/unreviewed/2024/06/GHSA-qmh4-3pqf-jg3h/GHSA-qmh4-3pqf-jg3h.json +++ b/advisories/unreviewed/2024/06/GHSA-qmh4-3pqf-jg3h/GHSA-qmh4-3pqf-jg3h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-2294-53w4-gch9/GHSA-2294-53w4-gch9.json b/advisories/unreviewed/2024/07/GHSA-2294-53w4-gch9/GHSA-2294-53w4-gch9.json index a208d9f4968..e8db830685a 100644 --- a/advisories/unreviewed/2024/07/GHSA-2294-53w4-gch9/GHSA-2294-53w4-gch9.json +++ b/advisories/unreviewed/2024/07/GHSA-2294-53w4-gch9/GHSA-2294-53w4-gch9.json @@ -7,12 +7,8 @@ "CVE-2022-48829" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes\n\niattr::ia_size is a loff_t, so these NFSv3 procedures must be\ncareful to deal with incoming client size values that are larger\nthan s64_max without corrupting the value.\n\nSilently capping the value results in storing a different value\nthan the client passed in which is unexpected behavior, so remove\nthe min_t() check in decode_sattr3().\n\nNote that RFC 1813 permits only the WRITE procedure to return\nNFS3ERR_FBIG. We believe that NFSv3 reference implementations\nalso return NFS3ERR_FBIG when ia_size is too large.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-24q7-jrrv-9x9w/GHSA-24q7-jrrv-9x9w.json b/advisories/unreviewed/2024/07/GHSA-24q7-jrrv-9x9w/GHSA-24q7-jrrv-9x9w.json index fdfff5ec9ae..6510e2b010c 100644 --- a/advisories/unreviewed/2024/07/GHSA-24q7-jrrv-9x9w/GHSA-24q7-jrrv-9x9w.json +++ b/advisories/unreviewed/2024/07/GHSA-24q7-jrrv-9x9w/GHSA-24q7-jrrv-9x9w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-2pcf-g2rx-pqwj/GHSA-2pcf-g2rx-pqwj.json b/advisories/unreviewed/2024/07/GHSA-2pcf-g2rx-pqwj/GHSA-2pcf-g2rx-pqwj.json index 04b24f3b3c4..96c62f3e872 100644 --- a/advisories/unreviewed/2024/07/GHSA-2pcf-g2rx-pqwj/GHSA-2pcf-g2rx-pqwj.json +++ b/advisories/unreviewed/2024/07/GHSA-2pcf-g2rx-pqwj/GHSA-2pcf-g2rx-pqwj.json @@ -7,12 +7,8 @@ "CVE-2022-48812" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: lantiq_gswip: don't use devres for mdiobus\n\nAs explained in commits:\n74b6d7d13307 (\"net: dsa: realtek: register the MDIO bus under devres\")\n5135e96a3dd2 (\"net: dsa: don't allocate the slave_mii_bus using devres\")\n\nmdiobus_free() will panic when called from devm_mdiobus_free() <-\ndevres_release_all() <- __device_release_driver(), and that mdiobus was\nnot previously unregistered.\n\nThe GSWIP switch is a platform device, so the initial set of constraints\nthat I thought would cause this (I2C or SPI buses which call ->remove on\n->shutdown) do not apply. But there is one more which applies here.\n\nIf the DSA master itself is on a bus that calls ->remove from ->shutdown\n(like dpaa2-eth, which is on the fsl-mc bus), there is a device link\nbetween the switch and the DSA master, and device_links_unbind_consumers()\nwill unbind the GSWIP switch driver on shutdown.\n\nSo the same treatment must be applied to all DSA switch drivers, which\nis: either use devres for both the mdiobus allocation and registration,\nor don't use devres at all.\n\nThe gswip driver has the code structure in place for orderly mdiobus\nremoval, so just replace devm_mdiobus_alloc() with the non-devres\nvariant, and add manual free where necessary, to ensure that we don't\nlet devres free a still-registered bus.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-2r6x-62fv-h4q4/GHSA-2r6x-62fv-h4q4.json b/advisories/unreviewed/2024/07/GHSA-2r6x-62fv-h4q4/GHSA-2r6x-62fv-h4q4.json index f136ff3dd77..0f4523017f6 100644 --- a/advisories/unreviewed/2024/07/GHSA-2r6x-62fv-h4q4/GHSA-2r6x-62fv-h4q4.json +++ b/advisories/unreviewed/2024/07/GHSA-2r6x-62fv-h4q4/GHSA-2r6x-62fv-h4q4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-3g45-cr6q-gf5g/GHSA-3g45-cr6q-gf5g.json b/advisories/unreviewed/2024/07/GHSA-3g45-cr6q-gf5g/GHSA-3g45-cr6q-gf5g.json index ac1ac06030f..6cb549f7a32 100644 --- a/advisories/unreviewed/2024/07/GHSA-3g45-cr6q-gf5g/GHSA-3g45-cr6q-gf5g.json +++ b/advisories/unreviewed/2024/07/GHSA-3g45-cr6q-gf5g/GHSA-3g45-cr6q-gf5g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-3hm2-vm5h-2p2m/GHSA-3hm2-vm5h-2p2m.json b/advisories/unreviewed/2024/07/GHSA-3hm2-vm5h-2p2m/GHSA-3hm2-vm5h-2p2m.json index 70359edf23e..f6701eb2d46 100644 --- a/advisories/unreviewed/2024/07/GHSA-3hm2-vm5h-2p2m/GHSA-3hm2-vm5h-2p2m.json +++ b/advisories/unreviewed/2024/07/GHSA-3hm2-vm5h-2p2m/GHSA-3hm2-vm5h-2p2m.json @@ -7,12 +7,8 @@ "CVE-2022-48794" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ieee802154: at86rf230: Stop leaking skb's\n\nUpon error the ieee802154_xmit_complete() helper is not called. Only\nieee802154_wake_queue() is called manually. In the Tx case we then leak\nthe skb structure.\n\nFree the skb structure upon error before returning when appropriate.\n\nAs the 'is_tx = 0' cannot be moved in the complete handler because of a\npossible race between the delay in switching to STATE_RX_AACK_ON and a\nnew interrupt, we introduce an intermediate 'was_tx' boolean just for\nthis purpose.\n\nThere is no Fixes tag applying here, many changes have been made on this\narea and the issue kind of always existed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-55x8-qm73-mrfg/GHSA-55x8-qm73-mrfg.json b/advisories/unreviewed/2024/07/GHSA-55x8-qm73-mrfg/GHSA-55x8-qm73-mrfg.json index 2c0f3d4b484..c391ce61650 100644 --- a/advisories/unreviewed/2024/07/GHSA-55x8-qm73-mrfg/GHSA-55x8-qm73-mrfg.json +++ b/advisories/unreviewed/2024/07/GHSA-55x8-qm73-mrfg/GHSA-55x8-qm73-mrfg.json @@ -13,9 +13,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-59f9-39vx-2r92/GHSA-59f9-39vx-2r92.json b/advisories/unreviewed/2024/07/GHSA-59f9-39vx-2r92/GHSA-59f9-39vx-2r92.json index e217a8088bb..1e03bd6d407 100644 --- a/advisories/unreviewed/2024/07/GHSA-59f9-39vx-2r92/GHSA-59f9-39vx-2r92.json +++ b/advisories/unreviewed/2024/07/GHSA-59f9-39vx-2r92/GHSA-59f9-39vx-2r92.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-5fxw-3wp6-wxjf/GHSA-5fxw-3wp6-wxjf.json b/advisories/unreviewed/2024/07/GHSA-5fxw-3wp6-wxjf/GHSA-5fxw-3wp6-wxjf.json index 894a6e4e5e7..b787bf1125e 100644 --- a/advisories/unreviewed/2024/07/GHSA-5fxw-3wp6-wxjf/GHSA-5fxw-3wp6-wxjf.json +++ b/advisories/unreviewed/2024/07/GHSA-5fxw-3wp6-wxjf/GHSA-5fxw-3wp6-wxjf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-5rjr-qvpw-gg98/GHSA-5rjr-qvpw-gg98.json b/advisories/unreviewed/2024/07/GHSA-5rjr-qvpw-gg98/GHSA-5rjr-qvpw-gg98.json index 590420d9a9c..1337e8ed9f2 100644 --- a/advisories/unreviewed/2024/07/GHSA-5rjr-qvpw-gg98/GHSA-5rjr-qvpw-gg98.json +++ b/advisories/unreviewed/2024/07/GHSA-5rjr-qvpw-gg98/GHSA-5rjr-qvpw-gg98.json @@ -7,12 +7,8 @@ "CVE-2022-48784" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncfg80211: fix race in netlink owner interface destruction\n\nMy previous fix here to fix the deadlock left a race where\nthe exact same deadlock (see the original commit referenced\nbelow) can still happen if cfg80211_destroy_ifaces() already\nruns while nl80211_netlink_notify() is still marking some\ninterfaces as nl_owner_dead.\n\nThe race happens because we have two loops here - first we\ndev_close() all the netdevs, and then we destroy them. If we\nalso have two netdevs (first one need only be a wdev though)\nthen we can find one during the first iteration, close it,\nand go to the second iteration -- but then find two, and try\nto destroy also the one we didn't close yet.\n\nFix this by only iterating once.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-69pm-pf6g-jvrq/GHSA-69pm-pf6g-jvrq.json b/advisories/unreviewed/2024/07/GHSA-69pm-pf6g-jvrq/GHSA-69pm-pf6g-jvrq.json index ac3672ac5fd..e2ff7eb8ee9 100644 --- a/advisories/unreviewed/2024/07/GHSA-69pm-pf6g-jvrq/GHSA-69pm-pf6g-jvrq.json +++ b/advisories/unreviewed/2024/07/GHSA-69pm-pf6g-jvrq/GHSA-69pm-pf6g-jvrq.json @@ -7,12 +7,8 @@ "CVE-2022-48807" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nice: Fix KASAN error in LAG NETDEV_UNREGISTER handler\n\nCurrently, the same handler is called for both a NETDEV_BONDING_INFO\nLAG unlink notification as for a NETDEV_UNREGISTER call. This is\ncausing a problem though, since the netdev_notifier_info passed has\na different structure depending on which event is passed. The problem\nmanifests as a call trace from a BUG: KASAN stack-out-of-bounds error.\n\nFix this by creating a handler specific to NETDEV_UNREGISTER that only\nis passed valid elements in the netdev_notifier_info struct for the\nNETDEV_UNREGISTER event.\n\nAlso included is the removal of an unbalanced dev_put on the peer_netdev\nand related braces.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-736h-7p7r-vh9c/GHSA-736h-7p7r-vh9c.json b/advisories/unreviewed/2024/07/GHSA-736h-7p7r-vh9c/GHSA-736h-7p7r-vh9c.json index 397b597f508..f61a88448ab 100644 --- a/advisories/unreviewed/2024/07/GHSA-736h-7p7r-vh9c/GHSA-736h-7p7r-vh9c.json +++ b/advisories/unreviewed/2024/07/GHSA-736h-7p7r-vh9c/GHSA-736h-7p7r-vh9c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-747h-2wj2-cmvf/GHSA-747h-2wj2-cmvf.json b/advisories/unreviewed/2024/07/GHSA-747h-2wj2-cmvf/GHSA-747h-2wj2-cmvf.json index f4cb9456f86..6c0ec6fc4c8 100644 --- a/advisories/unreviewed/2024/07/GHSA-747h-2wj2-cmvf/GHSA-747h-2wj2-cmvf.json +++ b/advisories/unreviewed/2024/07/GHSA-747h-2wj2-cmvf/GHSA-747h-2wj2-cmvf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-7hv8-w78q-v936/GHSA-7hv8-w78q-v936.json b/advisories/unreviewed/2024/07/GHSA-7hv8-w78q-v936/GHSA-7hv8-w78q-v936.json index daff764b3aa..6da61c650e6 100644 --- a/advisories/unreviewed/2024/07/GHSA-7hv8-w78q-v936/GHSA-7hv8-w78q-v936.json +++ b/advisories/unreviewed/2024/07/GHSA-7hv8-w78q-v936/GHSA-7hv8-w78q-v936.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-7j6g-455m-7jv4/GHSA-7j6g-455m-7jv4.json b/advisories/unreviewed/2024/07/GHSA-7j6g-455m-7jv4/GHSA-7j6g-455m-7jv4.json index b58be79bd61..2d402158702 100644 --- a/advisories/unreviewed/2024/07/GHSA-7j6g-455m-7jv4/GHSA-7j6g-455m-7jv4.json +++ b/advisories/unreviewed/2024/07/GHSA-7j6g-455m-7jv4/GHSA-7j6g-455m-7jv4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-83q8-2hc2-hgqr/GHSA-83q8-2hc2-hgqr.json b/advisories/unreviewed/2024/07/GHSA-83q8-2hc2-hgqr/GHSA-83q8-2hc2-hgqr.json index da50d666196..18a058f76d7 100644 --- a/advisories/unreviewed/2024/07/GHSA-83q8-2hc2-hgqr/GHSA-83q8-2hc2-hgqr.json +++ b/advisories/unreviewed/2024/07/GHSA-83q8-2hc2-hgqr/GHSA-83q8-2hc2-hgqr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-88c6-6wm4-m6c3/GHSA-88c6-6wm4-m6c3.json b/advisories/unreviewed/2024/07/GHSA-88c6-6wm4-m6c3/GHSA-88c6-6wm4-m6c3.json index 778f8ec1587..2df4fb7e2a0 100644 --- a/advisories/unreviewed/2024/07/GHSA-88c6-6wm4-m6c3/GHSA-88c6-6wm4-m6c3.json +++ b/advisories/unreviewed/2024/07/GHSA-88c6-6wm4-m6c3/GHSA-88c6-6wm4-m6c3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-8ccr-7w7q-vmr3/GHSA-8ccr-7w7q-vmr3.json b/advisories/unreviewed/2024/07/GHSA-8ccr-7w7q-vmr3/GHSA-8ccr-7w7q-vmr3.json index bb480433bdb..1fad1103edf 100644 --- a/advisories/unreviewed/2024/07/GHSA-8ccr-7w7q-vmr3/GHSA-8ccr-7w7q-vmr3.json +++ b/advisories/unreviewed/2024/07/GHSA-8ccr-7w7q-vmr3/GHSA-8ccr-7w7q-vmr3.json @@ -7,12 +7,8 @@ "CVE-2022-48797" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm: don't try to NUMA-migrate COW pages that have other uses\n\nOded Gabbay reports that enabling NUMA balancing causes corruption with\nhis Gaudi accelerator test load:\n\n \"All the details are in the bug, but the bottom line is that somehow,\n this patch causes corruption when the numa balancing feature is\n enabled AND we don't use process affinity AND we use GUP to pin pages\n so our accelerator can DMA to/from system memory.\n\n Either disabling numa balancing, using process affinity to bind to\n specific numa-node or reverting this patch causes the bug to\n disappear\"\n\nand Oded bisected the issue to commit 09854ba94c6a (\"mm: do_wp_page()\nsimplification\").\n\nNow, the NUMA balancing shouldn't actually be changing the writability\nof a page, and as such shouldn't matter for COW. But it appears it\ndoes. Suspicious.\n\nHowever, regardless of that, the condition for enabling NUMA faults in\nchange_pte_range() is nonsensical. It uses \"page_mapcount(page)\" to\ndecide if a COW page should be NUMA-protected or not, and that makes\nabsolutely no sense.\n\nThe number of mappings a page has is irrelevant: not only does GUP get a\nreference to a page as in Oded's case, but the other mappings migth be\npaged out and the only reference to them would be in the page count.\n\nSince we should never try to NUMA-balance a page that we can't move\nanyway due to other references, just fix the code to use 'page_count()'.\nOded confirms that that fixes his issue.\n\nNow, this does imply that something in NUMA balancing ends up changing\npage protections (other than the obvious one of making the page\ninaccessible to get the NUMA faulting information). Otherwise the COW\nsimplification wouldn't matter - since doing the GUP on the page would\nmake sure it's writable.\n\nThe cause of that permission change would be good to figure out too,\nsince it clearly results in spurious COW events - but fixing the\nnonsensical test that just happened to work before is obviously the\nCorrectThing(tm) to do regardless.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-9pmj-3qpr-77vh/GHSA-9pmj-3qpr-77vh.json b/advisories/unreviewed/2024/07/GHSA-9pmj-3qpr-77vh/GHSA-9pmj-3qpr-77vh.json index acd8e1ccf1a..c62a7f97b12 100644 --- a/advisories/unreviewed/2024/07/GHSA-9pmj-3qpr-77vh/GHSA-9pmj-3qpr-77vh.json +++ b/advisories/unreviewed/2024/07/GHSA-9pmj-3qpr-77vh/GHSA-9pmj-3qpr-77vh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-9pvc-v9gg-mq34/GHSA-9pvc-v9gg-mq34.json b/advisories/unreviewed/2024/07/GHSA-9pvc-v9gg-mq34/GHSA-9pvc-v9gg-mq34.json index 238bba692cc..84636576eb4 100644 --- a/advisories/unreviewed/2024/07/GHSA-9pvc-v9gg-mq34/GHSA-9pvc-v9gg-mq34.json +++ b/advisories/unreviewed/2024/07/GHSA-9pvc-v9gg-mq34/GHSA-9pvc-v9gg-mq34.json @@ -7,12 +7,8 @@ "CVE-2022-48819" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ntcp: take care of mixed splice()/sendmsg(MSG_ZEROCOPY) case\n\nsyzbot found that mixing sendpage() and sendmsg(MSG_ZEROCOPY)\ncalls over the same TCP socket would again trigger the\ninfamous warning in inet_sock_destruct()\n\n\tWARN_ON(sk_forward_alloc_get(sk));\n\nWhile Talal took into account a mix of regular copied data\nand MSG_ZEROCOPY one in the same skb, the sendpage() path\nhas been forgotten.\n\nWe want the charging to happen for sendpage(), because\npages could be coming from a pipe. What is missing is the\ndowngrading of pure zerocopy status to make sure\nsk_forward_alloc will stay synced.\n\nAdd tcp_downgrade_zcopy_pure() helper so that we can\nuse it from the two callers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-9qqr-ccc4-rhg7/GHSA-9qqr-ccc4-rhg7.json b/advisories/unreviewed/2024/07/GHSA-9qqr-ccc4-rhg7/GHSA-9qqr-ccc4-rhg7.json index bce3102ce97..7f07b11ac0b 100644 --- a/advisories/unreviewed/2024/07/GHSA-9qqr-ccc4-rhg7/GHSA-9qqr-ccc4-rhg7.json +++ b/advisories/unreviewed/2024/07/GHSA-9qqr-ccc4-rhg7/GHSA-9qqr-ccc4-rhg7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-cm9w-2x7j-gc65/GHSA-cm9w-2x7j-gc65.json b/advisories/unreviewed/2024/07/GHSA-cm9w-2x7j-gc65/GHSA-cm9w-2x7j-gc65.json index d4729c24566..6b68acb8b64 100644 --- a/advisories/unreviewed/2024/07/GHSA-cm9w-2x7j-gc65/GHSA-cm9w-2x7j-gc65.json +++ b/advisories/unreviewed/2024/07/GHSA-cm9w-2x7j-gc65/GHSA-cm9w-2x7j-gc65.json @@ -7,12 +7,8 @@ "CVE-2021-47623" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/fixmap: Fix VM debug warning on unmap\n\nUnmapping a fixmap entry is done by calling __set_fixmap()\nwith FIXMAP_PAGE_CLEAR as flags.\n\nToday, powerpc __set_fixmap() calls map_kernel_page().\n\nmap_kernel_page() is not happy when called a second time\nfor the same page.\n\n\tWARNING: CPU: 0 PID: 1 at arch/powerpc/mm/pgtable.c:194 set_pte_at+0xc/0x1e8\n\tCPU: 0 PID: 1 Comm: swapper Not tainted 5.16.0-rc3-s3k-dev-01993-g350ff07feb7d-dirty #682\n\tNIP: c0017cd4 LR: c00187f0 CTR: 00000010\n\tREGS: e1011d50 TRAP: 0700 Not tainted (5.16.0-rc3-s3k-dev-01993-g350ff07feb7d-dirty)\n\tMSR: 00029032 CR: 42000208 XER: 00000000\n\n\tGPR00: c0165fec e1011e10 c14c0000 c0ee2550 ff800000 c0f3d000 00000000 c001686c\n\tGPR08: 00001000 b00045a9 00000001 c0f58460 c0f50000 00000000 c0007e10 00000000\n\tGPR16: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000\n\tGPR24: 00000000 00000000 c0ee2550 00000000 c0f57000 00000ff8 00000000 ff800000\n\tNIP [c0017cd4] set_pte_at+0xc/0x1e8\n\tLR [c00187f0] map_kernel_page+0x9c/0x100\n\tCall Trace:\n\t[e1011e10] [c0736c68] vsnprintf+0x358/0x6c8 (unreliable)\n\t[e1011e30] [c0165fec] __set_fixmap+0x30/0x44\n\t[e1011e40] [c0c13bdc] early_iounmap+0x11c/0x170\n\t[e1011e70] [c0c06cb0] ioremap_legacy_serial_console+0x88/0xc0\n\t[e1011e90] [c0c03634] do_one_initcall+0x80/0x178\n\t[e1011ef0] [c0c0385c] kernel_init_freeable+0xb4/0x250\n\t[e1011f20] [c0007e34] kernel_init+0x24/0x140\n\t[e1011f30] [c0016268] ret_from_kernel_thread+0x5c/0x64\n\tInstruction dump:\n\t7fe3fb78 48019689 80010014 7c630034 83e1000c 5463d97e 7c0803a6 38210010\n\t4e800020 81250000 712a0001 41820008 <0fe00000> 9421ffe0 93e1001c 48000030\n\nImplement unmap_kernel_page() which clears an existing pte.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-fcw4-rj76-q6cg/GHSA-fcw4-rj76-q6cg.json b/advisories/unreviewed/2024/07/GHSA-fcw4-rj76-q6cg/GHSA-fcw4-rj76-q6cg.json index 1b1f0f619a4..94290605447 100644 --- a/advisories/unreviewed/2024/07/GHSA-fcw4-rj76-q6cg/GHSA-fcw4-rj76-q6cg.json +++ b/advisories/unreviewed/2024/07/GHSA-fcw4-rj76-q6cg/GHSA-fcw4-rj76-q6cg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-fjqw-397c-pg22/GHSA-fjqw-397c-pg22.json b/advisories/unreviewed/2024/07/GHSA-fjqw-397c-pg22/GHSA-fjqw-397c-pg22.json index 9dae42439c7..1bd9d659675 100644 --- a/advisories/unreviewed/2024/07/GHSA-fjqw-397c-pg22/GHSA-fjqw-397c-pg22.json +++ b/advisories/unreviewed/2024/07/GHSA-fjqw-397c-pg22/GHSA-fjqw-397c-pg22.json @@ -7,12 +7,8 @@ "CVE-2022-48776" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmtd: parsers: qcom: Fix missing free for pparts in cleanup\n\nMtdpart doesn't free pparts when a cleanup function is declared.\nAdd missing free for pparts in cleanup function for smem to fix the\nleak.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-g7rj-j8mg-3883/GHSA-g7rj-j8mg-3883.json b/advisories/unreviewed/2024/07/GHSA-g7rj-j8mg-3883/GHSA-g7rj-j8mg-3883.json index 7abbf3706df..5f77c5f39ea 100644 --- a/advisories/unreviewed/2024/07/GHSA-g7rj-j8mg-3883/GHSA-g7rj-j8mg-3883.json +++ b/advisories/unreviewed/2024/07/GHSA-g7rj-j8mg-3883/GHSA-g7rj-j8mg-3883.json @@ -7,12 +7,8 @@ "CVE-2022-48825" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qedf: Add stag_work to all the vports\n\nCall trace seen when creating NPIV ports, only 32 out of 64 show online.\nstag work was not initialized for vport, hence initialize the stag work.\n\nWARNING: CPU: 8 PID: 645 at kernel/workqueue.c:1635 __queue_delayed_work+0x68/0x80\nCPU: 8 PID: 645 Comm: kworker/8:1 Kdump: loaded Tainted: G IOE --------- --\n 4.18.0-348.el8.x86_64 #1\nHardware name: Dell Inc. PowerEdge MX740c/0177V9, BIOS 2.12.2 07/09/2021\nWorkqueue: events fc_lport_timeout [libfc]\nRIP: 0010:__queue_delayed_work+0x68/0x80\nCode: 89 b2 88 00 00 00 44 89 82 90 00 00 00 48 01 c8 48 89 42 50 41 81\nf8 00 20 00 00 75 1d e9 60 24 07 00 44 89 c7 e9 98 f6 ff ff <0f> 0b eb\nc5 0f 0b eb a1 0f 0b eb a7 0f 0b eb ac 44 89 c6 e9 40 23\nRSP: 0018:ffffae514bc3be40 EFLAGS: 00010006\nRAX: ffff8d25d6143750 RBX: 0000000000000202 RCX: 0000000000000002\nRDX: ffff8d2e31383748 RSI: ffff8d25c000d600 RDI: ffff8d2e31383788\nRBP: ffff8d2e31380de0 R08: 0000000000002000 R09: ffff8d2e31383750\nR10: ffffffffc0c957e0 R11: ffff8d2624800000 R12: ffff8d2e31380a58\nR13: ffff8d2d915eb000 R14: ffff8d25c499b5c0 R15: ffff8d2e31380e18\nFS: 0000000000000000(0000) GS:ffff8d2d1fb00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 000055fd0484b8b8 CR3: 00000008ffc10006 CR4: 00000000007706e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nPKRU: 55555554\nCall Trace:\n queue_delayed_work_on+0x36/0x40\n qedf_elsct_send+0x57/0x60 [qedf]\n fc_lport_enter_flogi+0x90/0xc0 [libfc]\n fc_lport_timeout+0xb7/0x140 [libfc]\n process_one_work+0x1a7/0x360\n ? create_worker+0x1a0/0x1a0\n worker_thread+0x30/0x390\n ? create_worker+0x1a0/0x1a0\n kthread+0x116/0x130\n ? kthread_flush_work_fn+0x10/0x10\n ret_from_fork+0x35/0x40\n ---[ end trace 008f00f722f2c2ff ]--\n\nInitialize stag work for all the vports.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-g9jr-cm69-rqc6/GHSA-g9jr-cm69-rqc6.json b/advisories/unreviewed/2024/07/GHSA-g9jr-cm69-rqc6/GHSA-g9jr-cm69-rqc6.json index 4b5f115d5c7..6bc259ee9e0 100644 --- a/advisories/unreviewed/2024/07/GHSA-g9jr-cm69-rqc6/GHSA-g9jr-cm69-rqc6.json +++ b/advisories/unreviewed/2024/07/GHSA-g9jr-cm69-rqc6/GHSA-g9jr-cm69-rqc6.json @@ -7,12 +7,8 @@ "CVE-2022-48810" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table() on failure path\n\nip[6]mr_free_table() can only be called under RTNL lock.\n\nRTNL: assertion failed at net/core/dev.c (10367)\nWARNING: CPU: 1 PID: 5890 at net/core/dev.c:10367 unregister_netdevice_many+0x1246/0x1850 net/core/dev.c:10367\nModules linked in:\nCPU: 1 PID: 5890 Comm: syz-executor.2 Not tainted 5.16.0-syzkaller-11627-g422ee58dc0ef #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nRIP: 0010:unregister_netdevice_many+0x1246/0x1850 net/core/dev.c:10367\nCode: 0f 85 9b ee ff ff e8 69 07 4b fa ba 7f 28 00 00 48 c7 c6 00 90 ae 8a 48 c7 c7 40 90 ae 8a c6 05 6d b1 51 06 01 e8 8c 90 d8 01 <0f> 0b e9 70 ee ff ff e8 3e 07 4b fa 4c 89 e7 e8 86 2a 59 fa e9 ee\nRSP: 0018:ffffc900046ff6e0 EFLAGS: 00010286\nRAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000\nRDX: ffff888050f51d00 RSI: ffffffff815fa008 RDI: fffff520008dfece\nRBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000\nR10: ffffffff815f3d6e R11: 0000000000000000 R12: 00000000fffffff4\nR13: dffffc0000000000 R14: ffffc900046ff750 R15: ffff88807b7dc000\nFS: 00007f4ab736e700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007fee0b4f8990 CR3: 000000001e7d2000 CR4: 00000000003506e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n \n mroute_clean_tables+0x244/0xb40 net/ipv6/ip6mr.c:1509\n ip6mr_free_table net/ipv6/ip6mr.c:389 [inline]\n ip6mr_rules_init net/ipv6/ip6mr.c:246 [inline]\n ip6mr_net_init net/ipv6/ip6mr.c:1306 [inline]\n ip6mr_net_init+0x3f0/0x4e0 net/ipv6/ip6mr.c:1298\n ops_init+0xaf/0x470 net/core/net_namespace.c:140\n setup_net+0x54f/0xbb0 net/core/net_namespace.c:331\n copy_net_ns+0x318/0x760 net/core/net_namespace.c:475\n create_new_namespaces+0x3f6/0xb20 kernel/nsproxy.c:110\n copy_namespaces+0x391/0x450 kernel/nsproxy.c:178\n copy_process+0x2e0c/0x7300 kernel/fork.c:2167\n kernel_clone+0xe7/0xab0 kernel/fork.c:2555\n __do_sys_clone+0xc8/0x110 kernel/fork.c:2672\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x44/0xae\nRIP: 0033:0x7f4ab89f9059\nCode: Unable to access opcode bytes at RIP 0x7f4ab89f902f.\nRSP: 002b:00007f4ab736e118 EFLAGS: 00000206 ORIG_RAX: 0000000000000038\nRAX: ffffffffffffffda RBX: 00007f4ab8b0bf60 RCX: 00007f4ab89f9059\nRDX: 0000000020000280 RSI: 0000000020000270 RDI: 0000000040200000\nRBP: 00007f4ab8a5308d R08: 0000000020000300 R09: 0000000020000300\nR10: 00000000200002c0 R11: 0000000000000206 R12: 0000000000000000\nR13: 00007ffc3977cc1f R14: 00007f4ab736e300 R15: 0000000000022000\n ", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-gg88-333c-97wf/GHSA-gg88-333c-97wf.json b/advisories/unreviewed/2024/07/GHSA-gg88-333c-97wf/GHSA-gg88-333c-97wf.json index f54631738a1..1022249b6a5 100644 --- a/advisories/unreviewed/2024/07/GHSA-gg88-333c-97wf/GHSA-gg88-333c-97wf.json +++ b/advisories/unreviewed/2024/07/GHSA-gg88-333c-97wf/GHSA-gg88-333c-97wf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-h4fq-wqr3-5hg3/GHSA-h4fq-wqr3-5hg3.json b/advisories/unreviewed/2024/07/GHSA-h4fq-wqr3-5hg3/GHSA-h4fq-wqr3-5hg3.json index 7bfd61f237b..ac18e9a66e9 100644 --- a/advisories/unreviewed/2024/07/GHSA-h4fq-wqr3-5hg3/GHSA-h4fq-wqr3-5hg3.json +++ b/advisories/unreviewed/2024/07/GHSA-h4fq-wqr3-5hg3/GHSA-h4fq-wqr3-5hg3.json @@ -7,12 +7,8 @@ "CVE-2022-48798" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ns390/cio: verify the driver availability for path_event call\n\nIf no driver is attached to a device or the driver does not provide the\npath_event function, an FCES path-event on this device could end up in a\nkernel-panic. Verify the driver availability before the path_event\nfunction call.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-h7pc-vx5r-jf48/GHSA-h7pc-vx5r-jf48.json b/advisories/unreviewed/2024/07/GHSA-h7pc-vx5r-jf48/GHSA-h7pc-vx5r-jf48.json index e456f1ff510..eab3c57e3ef 100644 --- a/advisories/unreviewed/2024/07/GHSA-h7pc-vx5r-jf48/GHSA-h7pc-vx5r-jf48.json +++ b/advisories/unreviewed/2024/07/GHSA-h7pc-vx5r-jf48/GHSA-h7pc-vx5r-jf48.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-h97v-622h-3hvc/GHSA-h97v-622h-3hvc.json b/advisories/unreviewed/2024/07/GHSA-h97v-622h-3hvc/GHSA-h97v-622h-3hvc.json index 6de5e5ca81d..c03139c8c2f 100644 --- a/advisories/unreviewed/2024/07/GHSA-h97v-622h-3hvc/GHSA-h97v-622h-3hvc.json +++ b/advisories/unreviewed/2024/07/GHSA-h97v-622h-3hvc/GHSA-h97v-622h-3hvc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-j476-hf2q-984g/GHSA-j476-hf2q-984g.json b/advisories/unreviewed/2024/07/GHSA-j476-hf2q-984g/GHSA-j476-hf2q-984g.json index 141942b04a7..34aa0faeafb 100644 --- a/advisories/unreviewed/2024/07/GHSA-j476-hf2q-984g/GHSA-j476-hf2q-984g.json +++ b/advisories/unreviewed/2024/07/GHSA-j476-hf2q-984g/GHSA-j476-hf2q-984g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-j4rr-5cq7-mpjq/GHSA-j4rr-5cq7-mpjq.json b/advisories/unreviewed/2024/07/GHSA-j4rr-5cq7-mpjq/GHSA-j4rr-5cq7-mpjq.json index 2ce3d220db5..b3541f788f8 100644 --- a/advisories/unreviewed/2024/07/GHSA-j4rr-5cq7-mpjq/GHSA-j4rr-5cq7-mpjq.json +++ b/advisories/unreviewed/2024/07/GHSA-j4rr-5cq7-mpjq/GHSA-j4rr-5cq7-mpjq.json @@ -7,12 +7,8 @@ "CVE-2022-48818" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: mv88e6xxx: don't use devres for mdiobus\n\nAs explained in commits:\n74b6d7d13307 (\"net: dsa: realtek: register the MDIO bus under devres\")\n5135e96a3dd2 (\"net: dsa: don't allocate the slave_mii_bus using devres\")\n\nmdiobus_free() will panic when called from devm_mdiobus_free() <-\ndevres_release_all() <- __device_release_driver(), and that mdiobus was\nnot previously unregistered.\n\nThe mv88e6xxx is an MDIO device, so the initial set of constraints that\nI thought would cause this (I2C or SPI buses which call ->remove on\n->shutdown) do not apply. But there is one more which applies here.\n\nIf the DSA master itself is on a bus that calls ->remove from ->shutdown\n(like dpaa2-eth, which is on the fsl-mc bus), there is a device link\nbetween the switch and the DSA master, and device_links_unbind_consumers()\nwill unbind the Marvell switch driver on shutdown.\n\nsystemd-shutdown[1]: Powering off.\nmv88e6085 0x0000000008b96000:00 sw_gl0: Link is Down\nfsl-mc dpbp.9: Removing from iommu group 7\nfsl-mc dpbp.8: Removing from iommu group 7\n------------[ cut here ]------------\nkernel BUG at drivers/net/phy/mdio_bus.c:677!\nInternal error: Oops - BUG: 0 [#1] PREEMPT SMP\nModules linked in:\nCPU: 0 PID: 1 Comm: systemd-shutdow Not tainted 5.16.5-00040-gdc05f73788e5 #15\npc : mdiobus_free+0x44/0x50\nlr : devm_mdiobus_free+0x10/0x20\nCall trace:\n mdiobus_free+0x44/0x50\n devm_mdiobus_free+0x10/0x20\n devres_release_all+0xa0/0x100\n __device_release_driver+0x190/0x220\n device_release_driver_internal+0xac/0xb0\n device_links_unbind_consumers+0xd4/0x100\n __device_release_driver+0x4c/0x220\n device_release_driver_internal+0xac/0xb0\n device_links_unbind_consumers+0xd4/0x100\n __device_release_driver+0x94/0x220\n device_release_driver+0x28/0x40\n bus_remove_device+0x118/0x124\n device_del+0x174/0x420\n fsl_mc_device_remove+0x24/0x40\n __fsl_mc_device_remove+0xc/0x20\n device_for_each_child+0x58/0xa0\n dprc_remove+0x90/0xb0\n fsl_mc_driver_remove+0x20/0x5c\n __device_release_driver+0x21c/0x220\n device_release_driver+0x28/0x40\n bus_remove_device+0x118/0x124\n device_del+0x174/0x420\n fsl_mc_bus_remove+0x80/0x100\n fsl_mc_bus_shutdown+0xc/0x1c\n platform_shutdown+0x20/0x30\n device_shutdown+0x154/0x330\n kernel_power_off+0x34/0x6c\n __do_sys_reboot+0x15c/0x250\n __arm64_sys_reboot+0x20/0x30\n invoke_syscall.constprop.0+0x4c/0xe0\n do_el0_svc+0x4c/0x150\n el0_svc+0x24/0xb0\n el0t_64_sync_handler+0xa8/0xb0\n el0t_64_sync+0x178/0x17c\n\nSo the same treatment must be applied to all DSA switch drivers, which\nis: either use devres for both the mdiobus allocation and registration,\nor don't use devres at all.\n\nThe Marvell driver already has a good structure for mdiobus removal, so\njust plug in mdiobus_free and get rid of devres.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-j7cj-9mpv-gjcc/GHSA-j7cj-9mpv-gjcc.json b/advisories/unreviewed/2024/07/GHSA-j7cj-9mpv-gjcc/GHSA-j7cj-9mpv-gjcc.json index c26f7468f4e..4aba4c783b5 100644 --- a/advisories/unreviewed/2024/07/GHSA-j7cj-9mpv-gjcc/GHSA-j7cj-9mpv-gjcc.json +++ b/advisories/unreviewed/2024/07/GHSA-j7cj-9mpv-gjcc/GHSA-j7cj-9mpv-gjcc.json @@ -7,12 +7,8 @@ "CVE-2022-48785" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nipv6: mcast: use rcu-safe version of ipv6_get_lladdr()\n\nSome time ago 8965779d2c0e (\"ipv6,mcast: always hold idev->lock before mca_lock\")\nswitched ipv6_get_lladdr() to __ipv6_get_lladdr(), which is rcu-unsafe\nversion. That was OK, because idev->lock was held for these codepaths.\n\nIn 88e2ca308094 (\"mld: convert ifmcaddr6 to RCU\") these external locks were\nremoved, so we probably need to restore the original rcu-safe call.\n\nOtherwise, we occasionally get a machine crashed/stalled with the following\nin dmesg:\n\n[ 3405.966610][T230589] general protection fault, probably for non-canonical address 0xdead00000000008c: 0000 [#1] SMP NOPTI\n[ 3405.982083][T230589] CPU: 44 PID: 230589 Comm: kworker/44:3 Tainted: G O 5.15.19-cloudflare-2022.2.1 #1\n[ 3405.998061][T230589] Hardware name: SUPA-COOL-SERV\n[ 3406.009552][T230589] Workqueue: mld mld_ifc_work\n[ 3406.017224][T230589] RIP: 0010:__ipv6_get_lladdr+0x34/0x60\n[ 3406.025780][T230589] Code: 57 10 48 83 c7 08 48 89 e5 48 39 d7 74 3e 48 8d 82 38 ff ff ff eb 13 48 8b 90 d0 00 00 00 48 8d 82 38 ff ff ff 48 39 d7 74 22 <66> 83 78 32 20 77 1b 75 e4 89 ca 23 50 2c 75 dd 48 8b 50 08 48 8b\n[ 3406.055748][T230589] RSP: 0018:ffff94e4b3fc3d10 EFLAGS: 00010202\n[ 3406.065617][T230589] RAX: dead00000000005a RBX: ffff94e4b3fc3d30 RCX: 0000000000000040\n[ 3406.077477][T230589] RDX: dead000000000122 RSI: ffff94e4b3fc3d30 RDI: ffff8c3a31431008\n[ 3406.089389][T230589] RBP: ffff94e4b3fc3d10 R08: 0000000000000000 R09: 0000000000000000\n[ 3406.101445][T230589] R10: ffff8c3a31430000 R11: 000000000000000b R12: ffff8c2c37887100\n[ 3406.113553][T230589] R13: ffff8c3a39537000 R14: 00000000000005dc R15: ffff8c3a31431000\n[ 3406.125730][T230589] FS: 0000000000000000(0000) GS:ffff8c3b9fc80000(0000) knlGS:0000000000000000\n[ 3406.138992][T230589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[ 3406.149895][T230589] CR2: 00007f0dfea1db60 CR3: 000000387b5f2000 CR4: 0000000000350ee0\n[ 3406.162421][T230589] Call Trace:\n[ 3406.170235][T230589] \n[ 3406.177736][T230589] mld_newpack+0xfe/0x1a0\n[ 3406.186686][T230589] add_grhead+0x87/0xa0\n[ 3406.195498][T230589] add_grec+0x485/0x4e0\n[ 3406.204310][T230589] ? newidle_balance+0x126/0x3f0\n[ 3406.214024][T230589] mld_ifc_work+0x15d/0x450\n[ 3406.223279][T230589] process_one_work+0x1e6/0x380\n[ 3406.232982][T230589] worker_thread+0x50/0x3a0\n[ 3406.242371][T230589] ? rescuer_thread+0x360/0x360\n[ 3406.252175][T230589] kthread+0x127/0x150\n[ 3406.261197][T230589] ? set_kthread_struct+0x40/0x40\n[ 3406.271287][T230589] ret_from_fork+0x22/0x30\n[ 3406.280812][T230589] \n[ 3406.288937][T230589] Modules linked in: ... [last unloaded: kheaders]\n[ 3406.476714][T230589] ---[ end trace 3525a7655f2f3b9e ]---", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-jvh6-h6x8-v3hx/GHSA-jvh6-h6x8-v3hx.json b/advisories/unreviewed/2024/07/GHSA-jvh6-h6x8-v3hx/GHSA-jvh6-h6x8-v3hx.json index fdba9f38ac4..284ccc277e6 100644 --- a/advisories/unreviewed/2024/07/GHSA-jvh6-h6x8-v3hx/GHSA-jvh6-h6x8-v3hx.json +++ b/advisories/unreviewed/2024/07/GHSA-jvh6-h6x8-v3hx/GHSA-jvh6-h6x8-v3hx.json @@ -7,12 +7,8 @@ "CVE-2024-40536" ], "details": "Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 were discovered to contain a stack overflow via the pin_3g_code parameter in the config_3g_para function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-jxff-45f6-mfww/GHSA-jxff-45f6-mfww.json b/advisories/unreviewed/2024/07/GHSA-jxff-45f6-mfww/GHSA-jxff-45f6-mfww.json index 1ed93943abf..804575995f9 100644 --- a/advisories/unreviewed/2024/07/GHSA-jxff-45f6-mfww/GHSA-jxff-45f6-mfww.json +++ b/advisories/unreviewed/2024/07/GHSA-jxff-45f6-mfww/GHSA-jxff-45f6-mfww.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-m2xw-6755-w968/GHSA-m2xw-6755-w968.json b/advisories/unreviewed/2024/07/GHSA-m2xw-6755-w968/GHSA-m2xw-6755-w968.json index dfcbef528a5..40966a2ca93 100644 --- a/advisories/unreviewed/2024/07/GHSA-m2xw-6755-w968/GHSA-m2xw-6755-w968.json +++ b/advisories/unreviewed/2024/07/GHSA-m2xw-6755-w968/GHSA-m2xw-6755-w968.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-m69g-w5vx-jwq5/GHSA-m69g-w5vx-jwq5.json b/advisories/unreviewed/2024/07/GHSA-m69g-w5vx-jwq5/GHSA-m69g-w5vx-jwq5.json index 4cf6c92e67a..662a37f753b 100644 --- a/advisories/unreviewed/2024/07/GHSA-m69g-w5vx-jwq5/GHSA-m69g-w5vx-jwq5.json +++ b/advisories/unreviewed/2024/07/GHSA-m69g-w5vx-jwq5/GHSA-m69g-w5vx-jwq5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-m6hj-x59q-53qg/GHSA-m6hj-x59q-53qg.json b/advisories/unreviewed/2024/07/GHSA-m6hj-x59q-53qg/GHSA-m6hj-x59q-53qg.json index 1debd90942d..c7c3de40a74 100644 --- a/advisories/unreviewed/2024/07/GHSA-m6hj-x59q-53qg/GHSA-m6hj-x59q-53qg.json +++ b/advisories/unreviewed/2024/07/GHSA-m6hj-x59q-53qg/GHSA-m6hj-x59q-53qg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-mjwh-9466-wvvf/GHSA-mjwh-9466-wvvf.json b/advisories/unreviewed/2024/07/GHSA-mjwh-9466-wvvf/GHSA-mjwh-9466-wvvf.json index 6157dc0cc3c..9ad6976837e 100644 --- a/advisories/unreviewed/2024/07/GHSA-mjwh-9466-wvvf/GHSA-mjwh-9466-wvvf.json +++ b/advisories/unreviewed/2024/07/GHSA-mjwh-9466-wvvf/GHSA-mjwh-9466-wvvf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-mrxf-58rx-jr57/GHSA-mrxf-58rx-jr57.json b/advisories/unreviewed/2024/07/GHSA-mrxf-58rx-jr57/GHSA-mrxf-58rx-jr57.json index d289e93c885..1ce21fc24b7 100644 --- a/advisories/unreviewed/2024/07/GHSA-mrxf-58rx-jr57/GHSA-mrxf-58rx-jr57.json +++ b/advisories/unreviewed/2024/07/GHSA-mrxf-58rx-jr57/GHSA-mrxf-58rx-jr57.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-qj3j-6m66-g436/GHSA-qj3j-6m66-g436.json b/advisories/unreviewed/2024/07/GHSA-qj3j-6m66-g436/GHSA-qj3j-6m66-g436.json index cd37fd8a7fb..085a91e6d09 100644 --- a/advisories/unreviewed/2024/07/GHSA-qj3j-6m66-g436/GHSA-qj3j-6m66-g436.json +++ b/advisories/unreviewed/2024/07/GHSA-qj3j-6m66-g436/GHSA-qj3j-6m66-g436.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-qv99-r3jr-9wm2/GHSA-qv99-r3jr-9wm2.json b/advisories/unreviewed/2024/07/GHSA-qv99-r3jr-9wm2/GHSA-qv99-r3jr-9wm2.json index f74ab329fff..06e42c2dd74 100644 --- a/advisories/unreviewed/2024/07/GHSA-qv99-r3jr-9wm2/GHSA-qv99-r3jr-9wm2.json +++ b/advisories/unreviewed/2024/07/GHSA-qv99-r3jr-9wm2/GHSA-qv99-r3jr-9wm2.json @@ -7,12 +7,8 @@ "CVE-2022-48786" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nvsock: remove vsock from connected table when connect is interrupted by a signal\n\nvsock_connect() expects that the socket could already be in the\nTCP_ESTABLISHED state when the connecting task wakes up with a signal\npending. If this happens the socket will be in the connected table, and\nit is not removed when the socket state is reset. In this situation it's\ncommon for the process to retry connect(), and if the connection is\nsuccessful the socket will be added to the connected table a second\ntime, corrupting the list.\n\nPrevent this by calling vsock_remove_connected() if a signal is received\nwhile waiting for a connection. This is harmless if the socket is not in\nthe connected table, and if it is in the table then removing it will\nprevent list corruption from a double add.\n\nNote for backporting: this patch requires d5afa82c977e (\"vsock: correct\nremoval of socket from the list\"), which is in all current stable trees\nexcept 4.9.y.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-r86p-wqv3-xrr5/GHSA-r86p-wqv3-xrr5.json b/advisories/unreviewed/2024/07/GHSA-r86p-wqv3-xrr5/GHSA-r86p-wqv3-xrr5.json index 67aad46a455..340c63bd60b 100644 --- a/advisories/unreviewed/2024/07/GHSA-r86p-wqv3-xrr5/GHSA-r86p-wqv3-xrr5.json +++ b/advisories/unreviewed/2024/07/GHSA-r86p-wqv3-xrr5/GHSA-r86p-wqv3-xrr5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-rg57-w2fr-7hgm/GHSA-rg57-w2fr-7hgm.json b/advisories/unreviewed/2024/07/GHSA-rg57-w2fr-7hgm/GHSA-rg57-w2fr-7hgm.json index b8c2fe622f2..24ecb90f5b8 100644 --- a/advisories/unreviewed/2024/07/GHSA-rg57-w2fr-7hgm/GHSA-rg57-w2fr-7hgm.json +++ b/advisories/unreviewed/2024/07/GHSA-rg57-w2fr-7hgm/GHSA-rg57-w2fr-7hgm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-rjc6-cvvw-m8x9/GHSA-rjc6-cvvw-m8x9.json b/advisories/unreviewed/2024/07/GHSA-rjc6-cvvw-m8x9/GHSA-rjc6-cvvw-m8x9.json index ff0758f2fc3..22dde009b2e 100644 --- a/advisories/unreviewed/2024/07/GHSA-rjc6-cvvw-m8x9/GHSA-rjc6-cvvw-m8x9.json +++ b/advisories/unreviewed/2024/07/GHSA-rjc6-cvvw-m8x9/GHSA-rjc6-cvvw-m8x9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-rm3x-hgp8-pvxp/GHSA-rm3x-hgp8-pvxp.json b/advisories/unreviewed/2024/07/GHSA-rm3x-hgp8-pvxp/GHSA-rm3x-hgp8-pvxp.json index 142adfe0c4b..6117b4115ab 100644 --- a/advisories/unreviewed/2024/07/GHSA-rm3x-hgp8-pvxp/GHSA-rm3x-hgp8-pvxp.json +++ b/advisories/unreviewed/2024/07/GHSA-rm3x-hgp8-pvxp/GHSA-rm3x-hgp8-pvxp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-rwf6-2rvc-66m9/GHSA-rwf6-2rvc-66m9.json b/advisories/unreviewed/2024/07/GHSA-rwf6-2rvc-66m9/GHSA-rwf6-2rvc-66m9.json index dfbac104066..54033e5c665 100644 --- a/advisories/unreviewed/2024/07/GHSA-rwf6-2rvc-66m9/GHSA-rwf6-2rvc-66m9.json +++ b/advisories/unreviewed/2024/07/GHSA-rwf6-2rvc-66m9/GHSA-rwf6-2rvc-66m9.json @@ -7,12 +7,8 @@ "CVE-2022-48811" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nibmvnic: don't release napi in __ibmvnic_open()\n\nIf __ibmvnic_open() encounters an error such as when setting link state,\nit calls release_resources() which frees the napi structures needlessly.\nInstead, have __ibmvnic_open() only clean up the work it did so far (i.e.\ndisable napi and irqs) and leave the rest to the callers.\n\nIf caller of __ibmvnic_open() is ibmvnic_open(), it should release the\nresources immediately. If the caller is do_reset() or do_hard_reset(),\nthey will release the resources on the next reset.\n\nThis fixes following crash that occurred when running the drmgr command\nseveral times to add/remove a vnic interface:\n\n\t[102056] ibmvnic 30000003 env3: Disabling rx_scrq[6] irq\n\t[102056] ibmvnic 30000003 env3: Disabling rx_scrq[7] irq\n\t[102056] ibmvnic 30000003 env3: Replenished 8 pools\n\tKernel attempted to read user page (10) - exploit attempt? (uid: 0)\n\tBUG: Kernel NULL pointer dereference on read at 0x00000010\n\tFaulting instruction address: 0xc000000000a3c840\n\tOops: Kernel access of bad area, sig: 11 [#1]\n\tLE PAGE_SIZE=64K MMU=Radix SMP NR_CPUS=2048 NUMA pSeries\n\t...\n\tCPU: 9 PID: 102056 Comm: kworker/9:2 Kdump: loaded Not tainted 5.16.0-rc5-autotest-g6441998e2e37 #1\n\tWorkqueue: events_long __ibmvnic_reset [ibmvnic]\n\tNIP: c000000000a3c840 LR: c0080000029b5378 CTR: c000000000a3c820\n\tREGS: c0000000548e37e0 TRAP: 0300 Not tainted (5.16.0-rc5-autotest-g6441998e2e37)\n\tMSR: 8000000000009033 CR: 28248484 XER: 00000004\n\tCFAR: c0080000029bdd24 DAR: 0000000000000010 DSISR: 40000000 IRQMASK: 0\n\tGPR00: c0080000029b55d0 c0000000548e3a80 c0000000028f0200 0000000000000000\n\t...\n\tNIP [c000000000a3c840] napi_enable+0x20/0xc0\n\tLR [c0080000029b5378] __ibmvnic_open+0xf0/0x430 [ibmvnic]\n\tCall Trace:\n\t[c0000000548e3a80] [0000000000000006] 0x6 (unreliable)\n\t[c0000000548e3ab0] [c0080000029b55d0] __ibmvnic_open+0x348/0x430 [ibmvnic]\n\t[c0000000548e3b40] [c0080000029bcc28] __ibmvnic_reset+0x500/0xdf0 [ibmvnic]\n\t[c0000000548e3c60] [c000000000176228] process_one_work+0x288/0x570\n\t[c0000000548e3d00] [c000000000176588] worker_thread+0x78/0x660\n\t[c0000000548e3da0] [c0000000001822f0] kthread+0x1c0/0x1d0\n\t[c0000000548e3e10] [c00000000000cf64] ret_from_kernel_thread+0x5c/0x64\n\tInstruction dump:\n\t7d2948f8 792307e0 4e800020 60000000 3c4c01eb 384239e0 f821ffd1 39430010\n\t38a0fff6 e92d1100 f9210028 39200000 f9010020 60420000 e9210020\n\t---[ end trace 5f8033b08fd27706 ]---", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-rxjf-75rj-r875/GHSA-rxjf-75rj-r875.json b/advisories/unreviewed/2024/07/GHSA-rxjf-75rj-r875/GHSA-rxjf-75rj-r875.json index 9bfdda718eb..28ec16d7752 100644 --- a/advisories/unreviewed/2024/07/GHSA-rxjf-75rj-r875/GHSA-rxjf-75rj-r875.json +++ b/advisories/unreviewed/2024/07/GHSA-rxjf-75rj-r875/GHSA-rxjf-75rj-r875.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-vp69-366h-2hqh/GHSA-vp69-366h-2hqh.json b/advisories/unreviewed/2024/07/GHSA-vp69-366h-2hqh/GHSA-vp69-366h-2hqh.json index 26efca32d35..bae1c52bbb2 100644 --- a/advisories/unreviewed/2024/07/GHSA-vp69-366h-2hqh/GHSA-vp69-366h-2hqh.json +++ b/advisories/unreviewed/2024/07/GHSA-vp69-366h-2hqh/GHSA-vp69-366h-2hqh.json @@ -7,12 +7,8 @@ "CVE-2022-48833" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: skip reserved bytes warning on unmount after log cleanup failure\n\nAfter the recent changes made by commit c2e39305299f01 (\"btrfs: clear\nextent buffer uptodate when we fail to write it\") and its followup fix,\ncommit 651740a5024117 (\"btrfs: check WRITE_ERR when trying to read an\nextent buffer\"), we can now end up not cleaning up space reservations of\nlog tree extent buffers after a transaction abort happens, as well as not\ncleaning up still dirty extent buffers.\n\nThis happens because if writeback for a log tree extent buffer failed,\nthen we have cleared the bit EXTENT_BUFFER_UPTODATE from the extent buffer\nand we have also set the bit EXTENT_BUFFER_WRITE_ERR on it. Later on,\nwhen trying to free the log tree with free_log_tree(), which iterates\nover the tree, we can end up getting an -EIO error when trying to read\na node or a leaf, since read_extent_buffer_pages() returns -EIO if an\nextent buffer does not have EXTENT_BUFFER_UPTODATE set and has the\nEXTENT_BUFFER_WRITE_ERR bit set. Getting that -EIO means that we return\nimmediately as we can not iterate over the entire tree.\n\nIn that case we never update the reserved space for an extent buffer in\nthe respective block group and space_info object.\n\nWhen this happens we get the following traces when unmounting the fs:\n\n[174957.284509] BTRFS: error (device dm-0) in cleanup_transaction:1913: errno=-5 IO failure\n[174957.286497] BTRFS: error (device dm-0) in free_log_tree:3420: errno=-5 IO failure\n[174957.399379] ------------[ cut here ]------------\n[174957.402497] WARNING: CPU: 2 PID: 3206883 at fs/btrfs/block-group.c:127 btrfs_put_block_group+0x77/0xb0 [btrfs]\n[174957.407523] Modules linked in: btrfs overlay dm_zero (...)\n[174957.424917] CPU: 2 PID: 3206883 Comm: umount Tainted: G W 5.16.0-rc5-btrfs-next-109 #1\n[174957.426689] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014\n[174957.428716] RIP: 0010:btrfs_put_block_group+0x77/0xb0 [btrfs]\n[174957.429717] Code: 21 48 8b bd (...)\n[174957.432867] RSP: 0018:ffffb70d41cffdd0 EFLAGS: 00010206\n[174957.433632] RAX: 0000000000000001 RBX: ffff8b09c3848000 RCX: ffff8b0758edd1c8\n[174957.434689] RDX: 0000000000000001 RSI: ffffffffc0b467e7 RDI: ffff8b0758edd000\n[174957.436068] RBP: ffff8b0758edd000 R08: 0000000000000000 R09: 0000000000000000\n[174957.437114] R10: 0000000000000246 R11: 0000000000000000 R12: ffff8b09c3848148\n[174957.438140] R13: ffff8b09c3848198 R14: ffff8b0758edd188 R15: dead000000000100\n[174957.439317] FS: 00007f328fb82800(0000) GS:ffff8b0a2d200000(0000) knlGS:0000000000000000\n[174957.440402] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n[174957.441164] CR2: 00007fff13563e98 CR3: 0000000404f4e005 CR4: 0000000000370ee0\n[174957.442117] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n[174957.443076] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n[174957.443948] Call Trace:\n[174957.444264] \n[174957.444538] btrfs_free_block_groups+0x255/0x3c0 [btrfs]\n[174957.445238] close_ctree+0x301/0x357 [btrfs]\n[174957.445803] ? call_rcu+0x16c/0x290\n[174957.446250] generic_shutdown_super+0x74/0x120\n[174957.446832] kill_anon_super+0x14/0x30\n[174957.447305] btrfs_kill_super+0x12/0x20 [btrfs]\n[174957.447890] deactivate_locked_super+0x31/0xa0\n[174957.448440] cleanup_mnt+0x147/0x1c0\n[174957.448888] task_work_run+0x5c/0xa0\n[174957.449336] exit_to_user_mode_prepare+0x1e5/0x1f0\n[174957.449934] syscall_exit_to_user_mode+0x16/0x40\n[174957.450512] do_syscall_64+0x48/0xc0\n[174957.450980] entry_SYSCALL_64_after_hwframe+0x44/0xae\n[174957.451605] RIP: 0033:0x7f328fdc4a97\n[174957.452059] Code: 03 0c 00 f7 (...)\n[174957.454320] RSP: 002b:00007fff13564ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6\n[174957.455262] RAX: 0000000000000000 RBX: 00007f328feea264 RCX: 00007f328fdc4a97\n[174957.456131] RDX: 0000000000000000 RSI: 00000000000000\n---truncated---", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-vvjf-wxwg-9pcv/GHSA-vvjf-wxwg-9pcv.json b/advisories/unreviewed/2024/07/GHSA-vvjf-wxwg-9pcv/GHSA-vvjf-wxwg-9pcv.json index 1c2f67e3bf0..ea09aeac1a6 100644 --- a/advisories/unreviewed/2024/07/GHSA-vvjf-wxwg-9pcv/GHSA-vvjf-wxwg-9pcv.json +++ b/advisories/unreviewed/2024/07/GHSA-vvjf-wxwg-9pcv/GHSA-vvjf-wxwg-9pcv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-wvr7-hg8r-3q2q/GHSA-wvr7-hg8r-3q2q.json b/advisories/unreviewed/2024/07/GHSA-wvr7-hg8r-3q2q/GHSA-wvr7-hg8r-3q2q.json index 78aa0ebd4a3..7eab498fd05 100644 --- a/advisories/unreviewed/2024/07/GHSA-wvr7-hg8r-3q2q/GHSA-wvr7-hg8r-3q2q.json +++ b/advisories/unreviewed/2024/07/GHSA-wvr7-hg8r-3q2q/GHSA-wvr7-hg8r-3q2q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-wwf4-95qp-r9vg/GHSA-wwf4-95qp-r9vg.json b/advisories/unreviewed/2024/07/GHSA-wwf4-95qp-r9vg/GHSA-wwf4-95qp-r9vg.json index 96a55fc2f82..15ea7434b20 100644 --- a/advisories/unreviewed/2024/07/GHSA-wwf4-95qp-r9vg/GHSA-wwf4-95qp-r9vg.json +++ b/advisories/unreviewed/2024/07/GHSA-wwf4-95qp-r9vg/GHSA-wwf4-95qp-r9vg.json @@ -7,12 +7,8 @@ "CVE-2022-48801" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: buffer: Fix file related error handling in IIO_BUFFER_GET_FD_IOCTL\n\nIf we fail to copy the just created file descriptor to userland, we\ntry to clean up by putting back 'fd' and freeing 'ib'. The code uses\nput_unused_fd() for the former which is wrong, as the file descriptor\nwas already published by fd_install() which gets called internally by\nanon_inode_getfd().\n\nThis makes the error handling code leaving a half cleaned up file\ndescriptor table around and a partially destructed 'file' object,\nallowing userland to play use-after-free tricks on us, by abusing\nthe still usable fd and making the code operate on a dangling\n'file->private_data' pointer.\n\nInstead of leaving the kernel in a partially corrupted state, don't\nattempt to explicitly clean up and leave this to the process exit\npath that'll release any still valid fds, including the one created\nby the previous call to anon_inode_getfd(). Simply return -EFAULT to\nindicate the error.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-xrhw-whc6-6mj7/GHSA-xrhw-whc6-6mj7.json b/advisories/unreviewed/2024/07/GHSA-xrhw-whc6-6mj7/GHSA-xrhw-whc6-6mj7.json index 17229f68a91..b99a1472c78 100644 --- a/advisories/unreviewed/2024/07/GHSA-xrhw-whc6-6mj7/GHSA-xrhw-whc6-6mj7.json +++ b/advisories/unreviewed/2024/07/GHSA-xrhw-whc6-6mj7/GHSA-xrhw-whc6-6mj7.json @@ -7,12 +7,8 @@ "CVE-2022-48780" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/smc: Avoid overwriting the copies of clcsock callback functions\n\nThe callback functions of clcsock will be saved and replaced during\nthe fallback. But if the fallback happens more than once, then the\ncopies of these callback functions will be overwritten incorrectly,\nresulting in a loop call issue:\n\nclcsk->sk_error_report\n |- smc_fback_error_report() <------------------------------|\n |- smc_fback_forward_wakeup() | (loop)\n |- clcsock_callback() (incorrectly overwritten) |\n |- smc->clcsk_error_report() ------------------|\n\nSo this patch fixes the issue by saving these function pointers only\nonce in the fallback and avoiding overwriting.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null,