Publish Advisories

GHSA-5fx6-86fq-8xxf
GHSA-j2rf-gr77-35c7
GHSA-8vq8-vjqp-8v4r
GHSA-c2mc-q4gg-xgm7
GHSA-q8p7-cg4r-8f76
GHSA-cjpg-8x68-w7r7
GHSA-gfjq-fhhf-pp45
GHSA-rrr4-rqcr-8jmq
GHSA-v7v5-mxj3-9qmp
GHSA-4m5c-7v8f-8p2q
GHSA-rpw7-c5cp-v8vp
GHSA-vgqv-q7r5-8p24
GHSA-9r7p-fqpx-jpcq
GHSA-fhf2-m449-jpqg
GHSA-xpqq-5557-v5jm
This commit is contained in:
advisory-database[bot]
2024-09-06 00:33:01 +00:00
parent bf92be796c
commit 4c67bccbf7
15 changed files with 109 additions and 15 deletions
@@ -28,7 +28,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-77"
"CWE-77",
"CWE-78"
],
"severity": "HIGH",
"github_reviewed": false,
@@ -28,7 +28,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-77"
"CWE-77",
"CWE-78"
],
"severity": "MODERATE",
"github_reviewed": false,
@@ -28,7 +28,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-330"
"CWE-330",
"CWE-331"
],
"severity": "CRITICAL",
"github_reviewed": false,
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-321"
],
"severity": "MODERATE",
"github_reviewed": false,
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-327"
],
"severity": "MODERATE",
"github_reviewed": false,
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cjpg-8x68-w7r7",
"modified": "2024-01-10T21:31:06Z",
"modified": "2024-09-06T00:31:19Z",
"published": "2024-01-03T21:30:31Z",
"aliases": [
"CVE-2023-5881"
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gfjq-fhhf-pp45",
"modified": "2024-01-22T21:31:07Z",
"modified": "2024-09-06T00:31:19Z",
"published": "2024-01-22T21:31:07Z",
"aliases": [
"CVE-2024-0430"
@@ -32,7 +32,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-400"
"CWE-400",
"CWE-476"
],
"severity": "MODERATE",
"github_reviewed": false,
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rrr4-rqcr-8jmq",
"modified": "2024-01-29T18:31:53Z",
"modified": "2024-09-06T00:31:19Z",
"published": "2024-01-29T18:31:53Z",
"aliases": [
"CVE-2024-0788"
@@ -32,7 +32,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-20"
"CWE-20",
"CWE-96"
],
"severity": "MODERATE",
"github_reviewed": false,
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v7v5-mxj3-9qmp",
"modified": "2024-01-29T18:31:49Z",
"modified": "2024-09-06T00:31:19Z",
"published": "2024-01-29T18:31:49Z",
"aliases": [
"CVE-2024-23441"
@@ -32,6 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-125",
"CWE-400",
"CWE-476"
],
@@ -28,7 +28,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-400"
"CWE-400",
"CWE-770"
],
"severity": "MODERATE",
"github_reviewed": false,
@@ -33,7 +33,8 @@
"database_specific": {
"cwe_ids": [
"CWE-20",
"CWE-22"
"CWE-22",
"CWE-73"
],
"severity": "MODERATE",
"github_reviewed": false,
@@ -32,7 +32,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-200"
"CWE-200",
"CWE-404"
],
"severity": "MODERATE",
"github_reviewed": false,
@@ -32,7 +32,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-200"
"CWE-200",
"CWE-404"
],
"severity": "MODERATE",
"github_reviewed": false,
@@ -0,0 +1,42 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fhf2-m449-jpqg",
"modified": "2024-09-06T00:31:21Z",
"published": "2024-09-06T00:31:21Z",
"aliases": [
"CVE-2024-39278"
],
"details": "Credentials to access device configuration information stored unencrypted in flash memory. These credentials would allow read-only access to network configuration information and terminal configuration data.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:P/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-39278"
},
{
"type": "WEB",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-249-01"
}
],
"database_specific": {
"cwe_ids": [
"CWE-522"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-05T23:15:12Z"
}
}
@@ -0,0 +1,42 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xpqq-5557-v5jm",
"modified": "2024-09-06T00:31:21Z",
"published": "2024-09-06T00:31:21Z",
"aliases": [
"CVE-2024-42495"
],
"details": "Credentials to access device configuration were transmitted using an unencrypted protocol. These credentials would allow read-only access to network configuration information and terminal configuration data.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42495"
},
{
"type": "WEB",
"url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-249-01"
}
],
"database_specific": {
"cwe_ids": [
"CWE-311"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-05T23:15:12Z"
}
}