diff --git a/advisories/github-reviewed/2022/01/GHSA-7v3x-h7r2-34jv/GHSA-7v3x-h7r2-34jv.json b/advisories/github-reviewed/2022/01/GHSA-7v3x-h7r2-34jv/GHSA-7v3x-h7r2-34jv.json index 3628796f6bf..b0bfac8570f 100644 --- a/advisories/github-reviewed/2022/01/GHSA-7v3x-h7r2-34jv/GHSA-7v3x-h7r2-34jv.json +++ b/advisories/github-reviewed/2022/01/GHSA-7v3x-h7r2-34jv/GHSA-7v3x-h7r2-34jv.json @@ -3,9 +3,7 @@ "id": "GHSA-7v3x-h7r2-34jv", "modified": "2022-01-20T16:18:28Z", "published": "2022-01-21T18:43:05Z", - "aliases": [ - - ], + "aliases": [], "summary": "Insufficient Session Expiration in Pterodactyl API", "details": "### Impact\nA vulnerability exists in Pterodactyl Panel `<= 1.6.6` that could allow a malicious attacker that compromises an API key to generate an authenticated user session that is not revoked when the API key is deleted, thus allowing the malicious user to remain logged in as the user the key belonged to.\n\nIt is important to note that **a malicious user must first compromise an existing API key for a user to exploit this issue**. It cannot be exploited by chance, and requires a coordinated attack against an individual account using a known API key.\n\n### Patches\nThis issue has been addressed in the `v1.7.0` release of Pterodactyl Panel.\n\n### Workarounds\nThose not wishing to upgrade may apply the change below:\n\n```diff\ndiff --git a/app/Http/Middleware/Api/AuthenticateKey.php b/app/Http/Middleware/Api/AuthenticateKey.php\nindex eb25dac6..857bfab2 100644\n--- a/app/Http/Middleware/Api/AuthenticateKey.php\n+++ b/app/Http/Middleware/Api/AuthenticateKey.php\n@@ -70,7 +70,7 @@ class AuthenticateKey\n } else {\n $model = $this->authenticateApiKey($request->bearerToken(), $keyType);\n\n- $this->auth->guard()->loginUsingId($model->user_id);\n+ $this->auth->guard()->onceUsingId($model->user_id);\n }\n```\n\n### For more information\nIf you have any questions or comments about this advisory please reach out to `Tactical Fish#8008` on [Discord](https://discord.gg/pterodactyl) or email `dane@pterodactyl.io`.\n", "severity": [ diff --git a/advisories/github-reviewed/2022/01/GHSA-rcrv-228c-gprj/GHSA-rcrv-228c-gprj.json b/advisories/github-reviewed/2022/01/GHSA-rcrv-228c-gprj/GHSA-rcrv-228c-gprj.json index 5018792d268..ecc04b8b693 100644 --- a/advisories/github-reviewed/2022/01/GHSA-rcrv-228c-gprj/GHSA-rcrv-228c-gprj.json +++ b/advisories/github-reviewed/2022/01/GHSA-rcrv-228c-gprj/GHSA-rcrv-228c-gprj.json @@ -3,14 +3,10 @@ "id": "GHSA-rcrv-228c-gprj", "modified": "2022-01-20T18:36:49Z", "published": "2022-01-21T18:39:40Z", - "aliases": [ - - ], + "aliases": [], "summary": "Invalid URL generation in bitlyshortener", "details": "### Impact\nDue to a sudden upstream breaking change by Bitly, versions of `bitlyshortener` <0.6.0 generate invalid short URLs. All users are affected and must update immediately.\n\n### Patches\nUpgrading `bitlyshortener` to 0.6.0 or newer will prevent the generation such invalid short URLs.\n\n### Workarounds\nA workaround is to replace \"https://j.mp/\" in each generated short URL with \"https://bit.ly/\".\n\n### References\n* [Release notes](https://github.com/impredicative/bitlyshortener/releases)", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -51,9 +47,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2022-01-20T18:36:49Z", diff --git a/advisories/unreviewed/2022/01/GHSA-226r-cf9r-2r9j/GHSA-226r-cf9r-2r9j.json b/advisories/unreviewed/2022/01/GHSA-226r-cf9r-2r9j/GHSA-226r-cf9r-2r9j.json index 57709f6a51b..a1df201a2c6 100644 --- a/advisories/unreviewed/2022/01/GHSA-226r-cf9r-2r9j/GHSA-226r-cf9r-2r9j.json +++ b/advisories/unreviewed/2022/01/GHSA-226r-cf9r-2r9j/GHSA-226r-cf9r-2r9j.json @@ -7,12 +7,8 @@ "CVE-2022-21390" ], "details": "Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Webservices Manager). Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Billing and Revenue Management. While the vulnerability is in Oracle Communications Billing and Revenue Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Communications Billing and Revenue Management. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-228r-jxv7-v353/GHSA-228r-jxv7-v353.json b/advisories/unreviewed/2022/01/GHSA-228r-jxv7-v353/GHSA-228r-jxv7-v353.json index 77e3cf1d259..12887bc210c 100644 --- a/advisories/unreviewed/2022/01/GHSA-228r-jxv7-v353/GHSA-228r-jxv7-v353.json +++ b/advisories/unreviewed/2022/01/GHSA-228r-jxv7-v353/GHSA-228r-jxv7-v353.json @@ -7,12 +7,8 @@ "CVE-2022-21278" ], "details": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-28gq-hp3j-rpwx/GHSA-28gq-hp3j-rpwx.json b/advisories/unreviewed/2022/01/GHSA-28gq-hp3j-rpwx/GHSA-28gq-hp3j-rpwx.json index 168ab1673eb..b951c29a5cb 100644 --- a/advisories/unreviewed/2022/01/GHSA-28gq-hp3j-rpwx/GHSA-28gq-hp3j-rpwx.json +++ b/advisories/unreviewed/2022/01/GHSA-28gq-hp3j-rpwx/GHSA-28gq-hp3j-rpwx.json @@ -7,12 +7,8 @@ "CVE-2022-21331" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-2j47-26hx-p54j/GHSA-2j47-26hx-p54j.json b/advisories/unreviewed/2022/01/GHSA-2j47-26hx-p54j/GHSA-2j47-26hx-p54j.json index c33a831973c..1e6bd3bac27 100644 --- a/advisories/unreviewed/2022/01/GHSA-2j47-26hx-p54j/GHSA-2j47-26hx-p54j.json +++ b/advisories/unreviewed/2022/01/GHSA-2j47-26hx-p54j/GHSA-2j47-26hx-p54j.json @@ -7,12 +7,8 @@ "CVE-2022-21338" ], "details": "Vulnerability in the Oracle Communications Convergence product of Oracle Communications Applications (component: General Framework). The supported version that is affected is 3.0.2.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Convergence. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Convergence accessible data as well as unauthorized read access to a subset of Oracle Communications Convergence accessible data. CVSS 3.1 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-2v88-56v7-rphj/GHSA-2v88-56v7-rphj.json b/advisories/unreviewed/2022/01/GHSA-2v88-56v7-rphj/GHSA-2v88-56v7-rphj.json index d25b8672c47..f9875739280 100644 --- a/advisories/unreviewed/2022/01/GHSA-2v88-56v7-rphj/GHSA-2v88-56v7-rphj.json +++ b/advisories/unreviewed/2022/01/GHSA-2v88-56v7-rphj/GHSA-2v88-56v7-rphj.json @@ -7,12 +7,8 @@ "CVE-2022-21285" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-2vgx-9h8g-j98m/GHSA-2vgx-9h8g-j98m.json b/advisories/unreviewed/2022/01/GHSA-2vgx-9h8g-j98m/GHSA-2vgx-9h8g-j98m.json index ef80eaedcd5..36bb69d0372 100644 --- a/advisories/unreviewed/2022/01/GHSA-2vgx-9h8g-j98m/GHSA-2vgx-9h8g-j98m.json +++ b/advisories/unreviewed/2022/01/GHSA-2vgx-9h8g-j98m/GHSA-2vgx-9h8g-j98m.json @@ -7,12 +7,8 @@ "CVE-2022-21357" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-3625-3v8q-96pc/GHSA-3625-3v8q-96pc.json b/advisories/unreviewed/2022/01/GHSA-3625-3v8q-96pc/GHSA-3625-3v8q-96pc.json index 3035e238a9a..afac42c206f 100644 --- a/advisories/unreviewed/2022/01/GHSA-3625-3v8q-96pc/GHSA-3625-3v8q-96pc.json +++ b/advisories/unreviewed/2022/01/GHSA-3625-3v8q-96pc/GHSA-3625-3v8q-96pc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-3c62-2g9v-gfg6/GHSA-3c62-2g9v-gfg6.json b/advisories/unreviewed/2022/01/GHSA-3c62-2g9v-gfg6/GHSA-3c62-2g9v-gfg6.json index a15198032a0..d19874cee6a 100644 --- a/advisories/unreviewed/2022/01/GHSA-3c62-2g9v-gfg6/GHSA-3c62-2g9v-gfg6.json +++ b/advisories/unreviewed/2022/01/GHSA-3c62-2g9v-gfg6/GHSA-3c62-2g9v-gfg6.json @@ -7,12 +7,8 @@ "CVE-2022-21397" ], "details": "Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Operations Monitor. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Communications Operations Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Operations Monitor accessible data as well as unauthorized read access to a subset of Oracle Communications Operations Monitor accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-3cq6-4846-47jh/GHSA-3cq6-4846-47jh.json b/advisories/unreviewed/2022/01/GHSA-3cq6-4846-47jh/GHSA-3cq6-4846-47jh.json index 6bd43e288f4..b20e966af31 100644 --- a/advisories/unreviewed/2022/01/GHSA-3cq6-4846-47jh/GHSA-3cq6-4846-47jh.json +++ b/advisories/unreviewed/2022/01/GHSA-3cq6-4846-47jh/GHSA-3cq6-4846-47jh.json @@ -7,12 +7,8 @@ "CVE-2022-21321" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-3gg4-6p9p-6fgc/GHSA-3gg4-6p9p-6fgc.json b/advisories/unreviewed/2022/01/GHSA-3gg4-6p9p-6fgc/GHSA-3gg4-6p9p-6fgc.json index e01577485c5..ee436115f94 100644 --- a/advisories/unreviewed/2022/01/GHSA-3gg4-6p9p-6fgc/GHSA-3gg4-6p9p-6fgc.json +++ b/advisories/unreviewed/2022/01/GHSA-3gg4-6p9p-6fgc/GHSA-3gg4-6p9p-6fgc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-3gxf-gcm8-jmp8/GHSA-3gxf-gcm8-jmp8.json b/advisories/unreviewed/2022/01/GHSA-3gxf-gcm8-jmp8/GHSA-3gxf-gcm8-jmp8.json index ae29fe3ce12..1a1604399da 100644 --- a/advisories/unreviewed/2022/01/GHSA-3gxf-gcm8-jmp8/GHSA-3gxf-gcm8-jmp8.json +++ b/advisories/unreviewed/2022/01/GHSA-3gxf-gcm8-jmp8/GHSA-3gxf-gcm8-jmp8.json @@ -7,12 +7,8 @@ "CVE-2022-21289" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-3m36-cwxf-r2rc/GHSA-3m36-cwxf-r2rc.json b/advisories/unreviewed/2022/01/GHSA-3m36-cwxf-r2rc/GHSA-3m36-cwxf-r2rc.json index a2d63651d79..c95e1b1eca3 100644 --- a/advisories/unreviewed/2022/01/GHSA-3m36-cwxf-r2rc/GHSA-3m36-cwxf-r2rc.json +++ b/advisories/unreviewed/2022/01/GHSA-3m36-cwxf-r2rc/GHSA-3m36-cwxf-r2rc.json @@ -7,12 +7,8 @@ "CVE-2022-21312" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-3p64-r56c-8fcp/GHSA-3p64-r56c-8fcp.json b/advisories/unreviewed/2022/01/GHSA-3p64-r56c-8fcp/GHSA-3p64-r56c-8fcp.json index ab73d4453c9..52ef0593603 100644 --- a/advisories/unreviewed/2022/01/GHSA-3p64-r56c-8fcp/GHSA-3p64-r56c-8fcp.json +++ b/advisories/unreviewed/2022/01/GHSA-3p64-r56c-8fcp/GHSA-3p64-r56c-8fcp.json @@ -7,12 +7,8 @@ "CVE-2022-21346" ], "details": "Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security). Supported versions that are affected are 5.5.0.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-3rfh-9f52-4ppx/GHSA-3rfh-9f52-4ppx.json b/advisories/unreviewed/2022/01/GHSA-3rfh-9f52-4ppx/GHSA-3rfh-9f52-4ppx.json index 5d18be44920..6fa4b1e9b8e 100644 --- a/advisories/unreviewed/2022/01/GHSA-3rfh-9f52-4ppx/GHSA-3rfh-9f52-4ppx.json +++ b/advisories/unreviewed/2022/01/GHSA-3rfh-9f52-4ppx/GHSA-3rfh-9f52-4ppx.json @@ -7,12 +7,8 @@ "CVE-2022-0243" ], "details": "Cross-site Scripting (XSS) - Stored in GitHub repository orchardcms/orchardcore prior to 1.2.2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-42ch-5f46-47c6/GHSA-42ch-5f46-47c6.json b/advisories/unreviewed/2022/01/GHSA-42ch-5f46-47c6/GHSA-42ch-5f46-47c6.json index 8f1cfa0c7df..dc9077c13aa 100644 --- a/advisories/unreviewed/2022/01/GHSA-42ch-5f46-47c6/GHSA-42ch-5f46-47c6.json +++ b/advisories/unreviewed/2022/01/GHSA-42ch-5f46-47c6/GHSA-42ch-5f46-47c6.json @@ -7,12 +7,8 @@ "CVE-2022-21311" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-42rq-7wx4-5vff/GHSA-42rq-7wx4-5vff.json b/advisories/unreviewed/2022/01/GHSA-42rq-7wx4-5vff/GHSA-42rq-7wx4-5vff.json index 2ba78f4af78..95fc2566702 100644 --- a/advisories/unreviewed/2022/01/GHSA-42rq-7wx4-5vff/GHSA-42rq-7wx4-5vff.json +++ b/advisories/unreviewed/2022/01/GHSA-42rq-7wx4-5vff/GHSA-42rq-7wx4-5vff.json @@ -7,12 +7,8 @@ "CVE-2022-21352" ], "details": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 5.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-42v8-4h63-pf87/GHSA-42v8-4h63-pf87.json b/advisories/unreviewed/2022/01/GHSA-42v8-4h63-pf87/GHSA-42v8-4h63-pf87.json index 3e4772e8244..130121413fc 100644 --- a/advisories/unreviewed/2022/01/GHSA-42v8-4h63-pf87/GHSA-42v8-4h63-pf87.json +++ b/advisories/unreviewed/2022/01/GHSA-42v8-4h63-pf87/GHSA-42v8-4h63-pf87.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-43m7-cr4f-cpcc/GHSA-43m7-cr4f-cpcc.json b/advisories/unreviewed/2022/01/GHSA-43m7-cr4f-cpcc/GHSA-43m7-cr4f-cpcc.json index 8807d7c59e8..dbf076a461d 100644 --- a/advisories/unreviewed/2022/01/GHSA-43m7-cr4f-cpcc/GHSA-43m7-cr4f-cpcc.json +++ b/advisories/unreviewed/2022/01/GHSA-43m7-cr4f-cpcc/GHSA-43m7-cr4f-cpcc.json @@ -7,12 +7,8 @@ "CVE-2022-21300" ], "details": "Vulnerability in the PeopleSoft Enterprise CS SA Integration Pack product of Oracle PeopleSoft (component: Snapshot Integration). Supported versions that are affected are 9.0 and 9.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise CS SA Integration Pack. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise CS SA Integration Pack accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-43q6-3r5v-55cg/GHSA-43q6-3r5v-55cg.json b/advisories/unreviewed/2022/01/GHSA-43q6-3r5v-55cg/GHSA-43q6-3r5v-55cg.json index 6f4ca92fa5e..4cc95ab9fcd 100644 --- a/advisories/unreviewed/2022/01/GHSA-43q6-3r5v-55cg/GHSA-43q6-3r5v-55cg.json +++ b/advisories/unreviewed/2022/01/GHSA-43q6-3r5v-55cg/GHSA-43q6-3r5v-55cg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-44fm-3x7x-368h/GHSA-44fm-3x7x-368h.json b/advisories/unreviewed/2022/01/GHSA-44fm-3x7x-368h/GHSA-44fm-3x7x-368h.json index d086cd229a0..6a8094b53a7 100644 --- a/advisories/unreviewed/2022/01/GHSA-44fm-3x7x-368h/GHSA-44fm-3x7x-368h.json +++ b/advisories/unreviewed/2022/01/GHSA-44fm-3x7x-368h/GHSA-44fm-3x7x-368h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-4556-grwq-3p9h/GHSA-4556-grwq-3p9h.json b/advisories/unreviewed/2022/01/GHSA-4556-grwq-3p9h/GHSA-4556-grwq-3p9h.json index 1c2e76eb7bf..69b8005b56a 100644 --- a/advisories/unreviewed/2022/01/GHSA-4556-grwq-3p9h/GHSA-4556-grwq-3p9h.json +++ b/advisories/unreviewed/2022/01/GHSA-4556-grwq-3p9h/GHSA-4556-grwq-3p9h.json @@ -7,12 +7,8 @@ "CVE-2021-29872" ], "details": "IBM Cloud Pak for Automation 21.0.1 and 21.0.2 - Business Automation Studio Component is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP HOST header, which will allow the attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 206228.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-468c-w344-jh68/GHSA-468c-w344-jh68.json b/advisories/unreviewed/2022/01/GHSA-468c-w344-jh68/GHSA-468c-w344-jh68.json index b38a5a63e57..abea442a004 100644 --- a/advisories/unreviewed/2022/01/GHSA-468c-w344-jh68/GHSA-468c-w344-jh68.json +++ b/advisories/unreviewed/2022/01/GHSA-468c-w344-jh68/GHSA-468c-w344-jh68.json @@ -7,12 +7,8 @@ "CVE-2022-21380" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-4g6m-3qqp-x9m2/GHSA-4g6m-3qqp-x9m2.json b/advisories/unreviewed/2022/01/GHSA-4g6m-3qqp-x9m2/GHSA-4g6m-3qqp-x9m2.json index 230455d34f6..d6c2f19758a 100644 --- a/advisories/unreviewed/2022/01/GHSA-4g6m-3qqp-x9m2/GHSA-4g6m-3qqp-x9m2.json +++ b/advisories/unreviewed/2022/01/GHSA-4g6m-3qqp-x9m2/GHSA-4g6m-3qqp-x9m2.json @@ -7,12 +7,8 @@ "CVE-2022-21373" ], "details": "Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Reseller Locator). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Partner Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Partner Management accessible data as well as unauthorized read access to a subset of Oracle Partner Management accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-4p56-cj9x-3w65/GHSA-4p56-cj9x-3w65.json b/advisories/unreviewed/2022/01/GHSA-4p56-cj9x-3w65/GHSA-4p56-cj9x-3w65.json index 14b05715721..0d1f661d846 100644 --- a/advisories/unreviewed/2022/01/GHSA-4p56-cj9x-3w65/GHSA-4p56-cj9x-3w65.json +++ b/advisories/unreviewed/2022/01/GHSA-4p56-cj9x-3w65/GHSA-4p56-cj9x-3w65.json @@ -7,12 +7,8 @@ "CVE-2022-21392" ], "details": "Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework). Supported versions that are affected are 13.4.0.0 and 13.5.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Enterprise Manager Base Platform accessible data as well as unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-4qg3-xg8j-mrqv/GHSA-4qg3-xg8j-mrqv.json b/advisories/unreviewed/2022/01/GHSA-4qg3-xg8j-mrqv/GHSA-4qg3-xg8j-mrqv.json index 51333de3f9a..821652ae5a4 100644 --- a/advisories/unreviewed/2022/01/GHSA-4qg3-xg8j-mrqv/GHSA-4qg3-xg8j-mrqv.json +++ b/advisories/unreviewed/2022/01/GHSA-4qg3-xg8j-mrqv/GHSA-4qg3-xg8j-mrqv.json @@ -7,12 +7,8 @@ "CVE-2022-21358" ], "details": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-4qv9-67wq-cv7g/GHSA-4qv9-67wq-cv7g.json b/advisories/unreviewed/2022/01/GHSA-4qv9-67wq-cv7g/GHSA-4qv9-67wq-cv7g.json index 4b4f405ad5e..97c24321f81 100644 --- a/advisories/unreviewed/2022/01/GHSA-4qv9-67wq-cv7g/GHSA-4qv9-67wq-cv7g.json +++ b/advisories/unreviewed/2022/01/GHSA-4qv9-67wq-cv7g/GHSA-4qv9-67wq-cv7g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-4wgc-p634-c7f6/GHSA-4wgc-p634-c7f6.json b/advisories/unreviewed/2022/01/GHSA-4wgc-p634-c7f6/GHSA-4wgc-p634-c7f6.json index 06dff6b73d8..1f545a96c8e 100644 --- a/advisories/unreviewed/2022/01/GHSA-4wgc-p634-c7f6/GHSA-4wgc-p634-c7f6.json +++ b/advisories/unreviewed/2022/01/GHSA-4wgc-p634-c7f6/GHSA-4wgc-p634-c7f6.json @@ -7,12 +7,8 @@ "CVE-2022-21314" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-4wph-4j34-ww7c/GHSA-4wph-4j34-ww7c.json b/advisories/unreviewed/2022/01/GHSA-4wph-4j34-ww7c/GHSA-4wph-4j34-ww7c.json index 0f22517de2a..4be7a51910b 100644 --- a/advisories/unreviewed/2022/01/GHSA-4wph-4j34-ww7c/GHSA-4wph-4j34-ww7c.json +++ b/advisories/unreviewed/2022/01/GHSA-4wph-4j34-ww7c/GHSA-4wph-4j34-ww7c.json @@ -7,12 +7,8 @@ "CVE-2022-21259" ], "details": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-5264-xrw5-hp4m/GHSA-5264-xrw5-hp4m.json b/advisories/unreviewed/2022/01/GHSA-5264-xrw5-hp4m/GHSA-5264-xrw5-hp4m.json index 09c4f2c7011..aea605696cc 100644 --- a/advisories/unreviewed/2022/01/GHSA-5264-xrw5-hp4m/GHSA-5264-xrw5-hp4m.json +++ b/advisories/unreviewed/2022/01/GHSA-5264-xrw5-hp4m/GHSA-5264-xrw5-hp4m.json @@ -7,12 +7,8 @@ "CVE-2022-21396" ], "details": "Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Operations Monitor. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Communications Operations Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Operations Monitor accessible data as well as unauthorized read access to a subset of Oracle Communications Operations Monitor accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-53m2-8j58-chqq/GHSA-53m2-8j58-chqq.json b/advisories/unreviewed/2022/01/GHSA-53m2-8j58-chqq/GHSA-53m2-8j58-chqq.json index bb2a8478ecb..dc6533c78db 100644 --- a/advisories/unreviewed/2022/01/GHSA-53m2-8j58-chqq/GHSA-53m2-8j58-chqq.json +++ b/advisories/unreviewed/2022/01/GHSA-53m2-8j58-chqq/GHSA-53m2-8j58-chqq.json @@ -7,12 +7,8 @@ "CVE-2022-23046" ], "details": "PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the \"subnet\" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-5c8j-7c6c-838x/GHSA-5c8j-7c6c-838x.json b/advisories/unreviewed/2022/01/GHSA-5c8j-7c6c-838x/GHSA-5c8j-7c6c-838x.json index 61d3298a07a..c3c569aea53 100644 --- a/advisories/unreviewed/2022/01/GHSA-5c8j-7c6c-838x/GHSA-5c8j-7c6c-838x.json +++ b/advisories/unreviewed/2022/01/GHSA-5c8j-7c6c-838x/GHSA-5c8j-7c6c-838x.json @@ -7,12 +7,8 @@ "CVE-2021-41807" ], "details": "Lack of rate limiting in M-Files Server and M-Files Web products with versions before 21.12.10873.0 in certain type of user accounts allows unlimited amount of attempts and therefore makes brute-forcing login accounts easier.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-5g4v-hp8m-8x25/GHSA-5g4v-hp8m-8x25.json b/advisories/unreviewed/2022/01/GHSA-5g4v-hp8m-8x25/GHSA-5g4v-hp8m-8x25.json index aadff454aa6..4a3fb1ecdf4 100644 --- a/advisories/unreviewed/2022/01/GHSA-5g4v-hp8m-8x25/GHSA-5g4v-hp8m-8x25.json +++ b/advisories/unreviewed/2022/01/GHSA-5g4v-hp8m-8x25/GHSA-5g4v-hp8m-8x25.json @@ -7,12 +7,8 @@ "CVE-2022-21368" ], "details": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 4.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-639w-8pf2-w6qf/GHSA-639w-8pf2-w6qf.json b/advisories/unreviewed/2022/01/GHSA-639w-8pf2-w6qf/GHSA-639w-8pf2-w6qf.json index 351247539a1..f337123a376 100644 --- a/advisories/unreviewed/2022/01/GHSA-639w-8pf2-w6qf/GHSA-639w-8pf2-w6qf.json +++ b/advisories/unreviewed/2022/01/GHSA-639w-8pf2-w6qf/GHSA-639w-8pf2-w6qf.json @@ -7,12 +7,8 @@ "CVE-2022-21287" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-65jc-pvp3-rxq3/GHSA-65jc-pvp3-rxq3.json b/advisories/unreviewed/2022/01/GHSA-65jc-pvp3-rxq3/GHSA-65jc-pvp3-rxq3.json index d0eadeae604..f2bf095855c 100644 --- a/advisories/unreviewed/2022/01/GHSA-65jc-pvp3-rxq3/GHSA-65jc-pvp3-rxq3.json +++ b/advisories/unreviewed/2022/01/GHSA-65jc-pvp3-rxq3/GHSA-65jc-pvp3-rxq3.json @@ -7,12 +7,8 @@ "CVE-2021-39942" ], "details": "A denial of service vulnerability in GitLab CE/EE affecting all versions starting from 12.0 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allows low-privileged users to bypass file size limits in the NPM package repository to potentially cause denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-664h-vfpx-f6f2/GHSA-664h-vfpx-f6f2.json b/advisories/unreviewed/2022/01/GHSA-664h-vfpx-f6f2/GHSA-664h-vfpx-f6f2.json index bc3cff0b957..22d820c3d15 100644 --- a/advisories/unreviewed/2022/01/GHSA-664h-vfpx-f6f2/GHSA-664h-vfpx-f6f2.json +++ b/advisories/unreviewed/2022/01/GHSA-664h-vfpx-f6f2/GHSA-664h-vfpx-f6f2.json @@ -7,12 +7,8 @@ "CVE-2021-41550" ], "details": "Leostream Connection Broker 9.0.40.17 allows administrator to upload and execute Perl code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-684f-3rhj-vmxv/GHSA-684f-3rhj-vmxv.json b/advisories/unreviewed/2022/01/GHSA-684f-3rhj-vmxv/GHSA-684f-3rhj-vmxv.json index 980614e24b7..19d4062f0e2 100644 --- a/advisories/unreviewed/2022/01/GHSA-684f-3rhj-vmxv/GHSA-684f-3rhj-vmxv.json +++ b/advisories/unreviewed/2022/01/GHSA-684f-3rhj-vmxv/GHSA-684f-3rhj-vmxv.json @@ -7,12 +7,8 @@ "CVE-2022-21337" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-6c73-5xh3-xq69/GHSA-6c73-5xh3-xq69.json b/advisories/unreviewed/2022/01/GHSA-6c73-5xh3-xq69/GHSA-6c73-5xh3-xq69.json index 7ff4ae99b81..69c81af53cc 100644 --- a/advisories/unreviewed/2022/01/GHSA-6c73-5xh3-xq69/GHSA-6c73-5xh3-xq69.json +++ b/advisories/unreviewed/2022/01/GHSA-6c73-5xh3-xq69/GHSA-6c73-5xh3-xq69.json @@ -7,12 +7,8 @@ "CVE-2022-21369" ], "details": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Rich Text Editor). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-6gq5-766m-4c86/GHSA-6gq5-766m-4c86.json b/advisories/unreviewed/2022/01/GHSA-6gq5-766m-4c86/GHSA-6gq5-766m-4c86.json index 96350bf6e99..d6a60ee2e4e 100644 --- a/advisories/unreviewed/2022/01/GHSA-6gq5-766m-4c86/GHSA-6gq5-766m-4c86.json +++ b/advisories/unreviewed/2022/01/GHSA-6gq5-766m-4c86/GHSA-6gq5-766m-4c86.json @@ -7,12 +7,8 @@ "CVE-2021-3816" ], "details": "Cacti 1.1.38 allows authenticated users with User Management permissions to inject arbitrary HTML in the group_prefix field during the creation of a new group via \"Copy\" method at user_group_admin.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-6jj6-qggg-3hx3/GHSA-6jj6-qggg-3hx3.json b/advisories/unreviewed/2022/01/GHSA-6jj6-qggg-3hx3/GHSA-6jj6-qggg-3hx3.json index 4cfd304effb..3d1a68e4f33 100644 --- a/advisories/unreviewed/2022/01/GHSA-6jj6-qggg-3hx3/GHSA-6jj6-qggg-3hx3.json +++ b/advisories/unreviewed/2022/01/GHSA-6jj6-qggg-3hx3/GHSA-6jj6-qggg-3hx3.json @@ -7,12 +7,8 @@ "CVE-2022-21382" ], "details": "Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: WebUI). Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Session Border Controller. While the vulnerability is in Oracle Enterprise Session Border Controller, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Enterprise Session Border Controller accessible data. CVSS 3.1 Base Score 7.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-6mq4-3rch-23gx/GHSA-6mq4-3rch-23gx.json b/advisories/unreviewed/2022/01/GHSA-6mq4-3rch-23gx/GHSA-6mq4-3rch-23gx.json index bf65426306c..77dc3b35f7d 100644 --- a/advisories/unreviewed/2022/01/GHSA-6mq4-3rch-23gx/GHSA-6mq4-3rch-23gx.json +++ b/advisories/unreviewed/2022/01/GHSA-6mq4-3rch-23gx/GHSA-6mq4-3rch-23gx.json @@ -7,12 +7,8 @@ "CVE-2021-45808" ], "details": "jpress v4.2.0 allows users to register an account by default. With the account, user can upload arbitrary files to the server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-6p5m-4qm2-x723/GHSA-6p5m-4qm2-x723.json b/advisories/unreviewed/2022/01/GHSA-6p5m-4qm2-x723/GHSA-6p5m-4qm2-x723.json index 5617912c7fd..c7724fb8af5 100644 --- a/advisories/unreviewed/2022/01/GHSA-6p5m-4qm2-x723/GHSA-6p5m-4qm2-x723.json +++ b/advisories/unreviewed/2022/01/GHSA-6p5m-4qm2-x723/GHSA-6p5m-4qm2-x723.json @@ -7,12 +7,8 @@ "CVE-2022-21334" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-6vr4-gxc3-8q35/GHSA-6vr4-gxc3-8q35.json b/advisories/unreviewed/2022/01/GHSA-6vr4-gxc3-8q35/GHSA-6vr4-gxc3-8q35.json index 15358c64317..4ad1efff12a 100644 --- a/advisories/unreviewed/2022/01/GHSA-6vr4-gxc3-8q35/GHSA-6vr4-gxc3-8q35.json +++ b/advisories/unreviewed/2022/01/GHSA-6vr4-gxc3-8q35/GHSA-6vr4-gxc3-8q35.json @@ -7,12 +7,8 @@ "CVE-2022-21377" ], "details": "Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web API). Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2 and 20.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Portfolio Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera Portfolio Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-72m3-3p32-pw2q/GHSA-72m3-3p32-pw2q.json b/advisories/unreviewed/2022/01/GHSA-72m3-3p32-pw2q/GHSA-72m3-3p32-pw2q.json index b0939671b22..21d00d53892 100644 --- a/advisories/unreviewed/2022/01/GHSA-72m3-3p32-pw2q/GHSA-72m3-3p32-pw2q.json +++ b/advisories/unreviewed/2022/01/GHSA-72m3-3p32-pw2q/GHSA-72m3-3p32-pw2q.json @@ -7,12 +7,8 @@ "CVE-2021-33964" ], "details": "China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRRuleFilter/set_firewall_level which receives parameters by POST request, and the parameter firewall_level has a command injection vulnerability. An attacker can use the vulnerability to execute remote commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-7345-v64m-725w/GHSA-7345-v64m-725w.json b/advisories/unreviewed/2022/01/GHSA-7345-v64m-725w/GHSA-7345-v64m-725w.json index 7e243fd1b3c..cbf09b5b9f9 100644 --- a/advisories/unreviewed/2022/01/GHSA-7345-v64m-725w/GHSA-7345-v64m-725w.json +++ b/advisories/unreviewed/2022/01/GHSA-7345-v64m-725w/GHSA-7345-v64m-725w.json @@ -7,12 +7,8 @@ "CVE-2022-21330" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-76g9-63cr-m776/GHSA-76g9-63cr-m776.json b/advisories/unreviewed/2022/01/GHSA-76g9-63cr-m776/GHSA-76g9-63cr-m776.json index e3d2a859eb5..b19391bd4cc 100644 --- a/advisories/unreviewed/2022/01/GHSA-76g9-63cr-m776/GHSA-76g9-63cr-m776.json +++ b/advisories/unreviewed/2022/01/GHSA-76g9-63cr-m776/GHSA-76g9-63cr-m776.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-7869-wcxg-3m7w/GHSA-7869-wcxg-3m7w.json b/advisories/unreviewed/2022/01/GHSA-7869-wcxg-3m7w/GHSA-7869-wcxg-3m7w.json index 97ca7c78a02..18f6e3de690 100644 --- a/advisories/unreviewed/2022/01/GHSA-7869-wcxg-3m7w/GHSA-7869-wcxg-3m7w.json +++ b/advisories/unreviewed/2022/01/GHSA-7869-wcxg-3m7w/GHSA-7869-wcxg-3m7w.json @@ -7,12 +7,8 @@ "CVE-2022-21355" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-7g67-578g-fmh3/GHSA-7g67-578g-fmh3.json b/advisories/unreviewed/2022/01/GHSA-7g67-578g-fmh3/GHSA-7g67-578g-fmh3.json index 67452a0ef89..47f80f2c57f 100644 --- a/advisories/unreviewed/2022/01/GHSA-7g67-578g-fmh3/GHSA-7g67-578g-fmh3.json +++ b/advisories/unreviewed/2022/01/GHSA-7g67-578g-fmh3/GHSA-7g67-578g-fmh3.json @@ -7,12 +7,8 @@ "CVE-2022-21297" ], "details": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-7xjc-vrm4-r82f/GHSA-7xjc-vrm4-r82f.json b/advisories/unreviewed/2022/01/GHSA-7xjc-vrm4-r82f/GHSA-7xjc-vrm4-r82f.json index 449dd4774dd..fa9b6b031e1 100644 --- a/advisories/unreviewed/2022/01/GHSA-7xjc-vrm4-r82f/GHSA-7xjc-vrm4-r82f.json +++ b/advisories/unreviewed/2022/01/GHSA-7xjc-vrm4-r82f/GHSA-7xjc-vrm4-r82f.json @@ -7,12 +7,8 @@ "CVE-2022-21325" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-88pw-4rw2-v435/GHSA-88pw-4rw2-v435.json b/advisories/unreviewed/2022/01/GHSA-88pw-4rw2-v435/GHSA-88pw-4rw2-v435.json index a93183033d0..047c56a5d10 100644 --- a/advisories/unreviewed/2022/01/GHSA-88pw-4rw2-v435/GHSA-88pw-4rw2-v435.json +++ b/advisories/unreviewed/2022/01/GHSA-88pw-4rw2-v435/GHSA-88pw-4rw2-v435.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-89pp-7jpj-hxxf/GHSA-89pp-7jpj-hxxf.json b/advisories/unreviewed/2022/01/GHSA-89pp-7jpj-hxxf/GHSA-89pp-7jpj-hxxf.json index 9736ed594c9..ab7110d96f9 100644 --- a/advisories/unreviewed/2022/01/GHSA-89pp-7jpj-hxxf/GHSA-89pp-7jpj-hxxf.json +++ b/advisories/unreviewed/2022/01/GHSA-89pp-7jpj-hxxf/GHSA-89pp-7jpj-hxxf.json @@ -7,12 +7,8 @@ "CVE-2022-21280" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-8gq7-wx9r-qgf6/GHSA-8gq7-wx9r-qgf6.json b/advisories/unreviewed/2022/01/GHSA-8gq7-wx9r-qgf6/GHSA-8gq7-wx9r-qgf6.json index 6488fcb5168..02ffac0ba5d 100644 --- a/advisories/unreviewed/2022/01/GHSA-8gq7-wx9r-qgf6/GHSA-8gq7-wx9r-qgf6.json +++ b/advisories/unreviewed/2022/01/GHSA-8gq7-wx9r-qgf6/GHSA-8gq7-wx9r-qgf6.json @@ -7,12 +7,8 @@ "CVE-2022-21401" ], "details": "Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Communications Operations Monitor. While the vulnerability is in Oracle Communications Operations Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Operations Monitor accessible data as well as unauthorized read access to a subset of Oracle Communications Operations Monitor accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Communications Operations Monitor. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-8hc3-223h-5c5w/GHSA-8hc3-223h-5c5w.json b/advisories/unreviewed/2022/01/GHSA-8hc3-223h-5c5w/GHSA-8hc3-223h-5c5w.json index 428fa8bc055..12bbfd01aa4 100644 --- a/advisories/unreviewed/2022/01/GHSA-8hc3-223h-5c5w/GHSA-8hc3-223h-5c5w.json +++ b/advisories/unreviewed/2022/01/GHSA-8hc3-223h-5c5w/GHSA-8hc3-223h-5c5w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-8hfc-62h9-4pj9/GHSA-8hfc-62h9-4pj9.json b/advisories/unreviewed/2022/01/GHSA-8hfc-62h9-4pj9/GHSA-8hfc-62h9-4pj9.json index a72b4ae5ff6..00f78db0915 100644 --- a/advisories/unreviewed/2022/01/GHSA-8hfc-62h9-4pj9/GHSA-8hfc-62h9-4pj9.json +++ b/advisories/unreviewed/2022/01/GHSA-8hfc-62h9-4pj9/GHSA-8hfc-62h9-4pj9.json @@ -7,12 +7,8 @@ "CVE-2022-21309" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-8jmq-3rwg-m9xj/GHSA-8jmq-3rwg-m9xj.json b/advisories/unreviewed/2022/01/GHSA-8jmq-3rwg-m9xj/GHSA-8jmq-3rwg-m9xj.json index 2145be41d0c..cc2e13909f1 100644 --- a/advisories/unreviewed/2022/01/GHSA-8jmq-3rwg-m9xj/GHSA-8jmq-3rwg-m9xj.json +++ b/advisories/unreviewed/2022/01/GHSA-8jmq-3rwg-m9xj/GHSA-8jmq-3rwg-m9xj.json @@ -7,12 +7,8 @@ "CVE-2022-21257" ], "details": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-8mxp-gr5w-58v7/GHSA-8mxp-gr5w-58v7.json b/advisories/unreviewed/2022/01/GHSA-8mxp-gr5w-58v7/GHSA-8mxp-gr5w-58v7.json index 99cdf2999cd..57ebd4a2c4c 100644 --- a/advisories/unreviewed/2022/01/GHSA-8mxp-gr5w-58v7/GHSA-8mxp-gr5w-58v7.json +++ b/advisories/unreviewed/2022/01/GHSA-8mxp-gr5w-58v7/GHSA-8mxp-gr5w-58v7.json @@ -7,12 +7,8 @@ "CVE-2022-21272" ], "details": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-92jq-382g-93x2/GHSA-92jq-382g-93x2.json b/advisories/unreviewed/2022/01/GHSA-92jq-382g-93x2/GHSA-92jq-382g-93x2.json index 495501be67e..5b7055f4147 100644 --- a/advisories/unreviewed/2022/01/GHSA-92jq-382g-93x2/GHSA-92jq-382g-93x2.json +++ b/advisories/unreviewed/2022/01/GHSA-92jq-382g-93x2/GHSA-92jq-382g-93x2.json @@ -7,12 +7,8 @@ "CVE-2022-21308" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-995f-c44p-x3jp/GHSA-995f-c44p-x3jp.json b/advisories/unreviewed/2022/01/GHSA-995f-c44p-x3jp/GHSA-995f-c44p-x3jp.json index 164d4a0a5d6..98c4ab69965 100644 --- a/advisories/unreviewed/2022/01/GHSA-995f-c44p-x3jp/GHSA-995f-c44p-x3jp.json +++ b/advisories/unreviewed/2022/01/GHSA-995f-c44p-x3jp/GHSA-995f-c44p-x3jp.json @@ -7,12 +7,8 @@ "CVE-2022-21281" ], "details": "Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2, 20.0.0.0 and 20.0.0.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Primavera Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera Portfolio Management accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-99mf-r6xr-jf28/GHSA-99mf-r6xr-jf28.json b/advisories/unreviewed/2022/01/GHSA-99mf-r6xr-jf28/GHSA-99mf-r6xr-jf28.json index 6a3efa12d90..e3f2bbc3c13 100644 --- a/advisories/unreviewed/2022/01/GHSA-99mf-r6xr-jf28/GHSA-99mf-r6xr-jf28.json +++ b/advisories/unreviewed/2022/01/GHSA-99mf-r6xr-jf28/GHSA-99mf-r6xr-jf28.json @@ -7,12 +7,8 @@ "CVE-2021-29215" ], "details": "A potential security vulnerability in HPE Ezmeral Data Fabric that may allow a remote access restriction bypass in the TEZ MapR ecosystem component was discovered in version(s): Prior to Tez-0.8: mapr-tez-0.8.201907081100-1.noarch; prior to Tez-0.9: mapr-tez-0.9.201907090334-1.noarch; prior to Tez-0.9.2: mapr-tez-0.9.2.0.201907081043-1.noarch. HPE has provided software updates to resolve the vulnerability in the TEZ MapR ecosystem component in HPE Ezmeral Data Fabric.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-9xpm-8wrg-vfhf/GHSA-9xpm-8wrg-vfhf.json b/advisories/unreviewed/2022/01/GHSA-9xpm-8wrg-vfhf/GHSA-9xpm-8wrg-vfhf.json index 7f05b06fc0c..11a5d93304c 100644 --- a/advisories/unreviewed/2022/01/GHSA-9xpm-8wrg-vfhf/GHSA-9xpm-8wrg-vfhf.json +++ b/advisories/unreviewed/2022/01/GHSA-9xpm-8wrg-vfhf/GHSA-9xpm-8wrg-vfhf.json @@ -7,12 +7,8 @@ "CVE-2021-42810" ], "details": "A flaw in the previous versions of the product may allow an authenticated attacker the ability to execute code as a privileged user on a system where the agent is installed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-9xw3-mg5r-25p7/GHSA-9xw3-mg5r-25p7.json b/advisories/unreviewed/2022/01/GHSA-9xw3-mg5r-25p7/GHSA-9xw3-mg5r-25p7.json index 8ce5e927acb..0bd044a0851 100644 --- a/advisories/unreviewed/2022/01/GHSA-9xw3-mg5r-25p7/GHSA-9xw3-mg5r-25p7.json +++ b/advisories/unreviewed/2022/01/GHSA-9xw3-mg5r-25p7/GHSA-9xw3-mg5r-25p7.json @@ -7,12 +7,8 @@ "CVE-2020-14107" ], "details": "A stack overflow in the HTTP server of Cast can be exploited to make the app crash in LAN.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-c3g7-x55h-8734/GHSA-c3g7-x55h-8734.json b/advisories/unreviewed/2022/01/GHSA-c3g7-x55h-8734/GHSA-c3g7-x55h-8734.json index 5bf4d35fb0c..02474f30f16 100644 --- a/advisories/unreviewed/2022/01/GHSA-c3g7-x55h-8734/GHSA-c3g7-x55h-8734.json +++ b/advisories/unreviewed/2022/01/GHSA-c3g7-x55h-8734/GHSA-c3g7-x55h-8734.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-c4cq-j7xg-p8rc/GHSA-c4cq-j7xg-p8rc.json b/advisories/unreviewed/2022/01/GHSA-c4cq-j7xg-p8rc/GHSA-c4cq-j7xg-p8rc.json index ae27d6bdd7c..43c620709a6 100644 --- a/advisories/unreviewed/2022/01/GHSA-c4cq-j7xg-p8rc/GHSA-c4cq-j7xg-p8rc.json +++ b/advisories/unreviewed/2022/01/GHSA-c4cq-j7xg-p8rc/GHSA-c4cq-j7xg-p8rc.json @@ -7,12 +7,8 @@ "CVE-2022-21286" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-c5vr-4286-qrcf/GHSA-c5vr-4286-qrcf.json b/advisories/unreviewed/2022/01/GHSA-c5vr-4286-qrcf/GHSA-c5vr-4286-qrcf.json index f5aa8da73d6..8b57b8f2719 100644 --- a/advisories/unreviewed/2022/01/GHSA-c5vr-4286-qrcf/GHSA-c5vr-4286-qrcf.json +++ b/advisories/unreviewed/2022/01/GHSA-c5vr-4286-qrcf/GHSA-c5vr-4286-qrcf.json @@ -7,12 +7,8 @@ "CVE-2022-21402" ], "details": "Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Communications Operations Monitor. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Communications Operations Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Operations Monitor accessible data as well as unauthorized read access to a subset of Oracle Communications Operations Monitor accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-c68g-vqg6-x8r4/GHSA-c68g-vqg6-x8r4.json b/advisories/unreviewed/2022/01/GHSA-c68g-vqg6-x8r4/GHSA-c68g-vqg6-x8r4.json index 8f4cc1c8ab4..091e5df3adf 100644 --- a/advisories/unreviewed/2022/01/GHSA-c68g-vqg6-x8r4/GHSA-c68g-vqg6-x8r4.json +++ b/advisories/unreviewed/2022/01/GHSA-c68g-vqg6-x8r4/GHSA-c68g-vqg6-x8r4.json @@ -7,12 +7,8 @@ "CVE-2022-21326" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-c758-49c5-9hwq/GHSA-c758-49c5-9hwq.json b/advisories/unreviewed/2022/01/GHSA-c758-49c5-9hwq/GHSA-c758-49c5-9hwq.json index e9f5e81d490..9754364fff4 100644 --- a/advisories/unreviewed/2022/01/GHSA-c758-49c5-9hwq/GHSA-c758-49c5-9hwq.json +++ b/advisories/unreviewed/2022/01/GHSA-c758-49c5-9hwq/GHSA-c758-49c5-9hwq.json @@ -7,12 +7,8 @@ "CVE-2022-21279" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-c75h-f8wp-phmx/GHSA-c75h-f8wp-phmx.json b/advisories/unreviewed/2022/01/GHSA-c75h-f8wp-phmx/GHSA-c75h-f8wp-phmx.json index 8df1eed287d..b6a455dd17c 100644 --- a/advisories/unreviewed/2022/01/GHSA-c75h-f8wp-phmx/GHSA-c75h-f8wp-phmx.json +++ b/advisories/unreviewed/2022/01/GHSA-c75h-f8wp-phmx/GHSA-c75h-f8wp-phmx.json @@ -7,12 +7,8 @@ "CVE-2022-21351" ], "details": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 7.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-c9vc-xgh4-qh78/GHSA-c9vc-xgh4-qh78.json b/advisories/unreviewed/2022/01/GHSA-c9vc-xgh4-qh78/GHSA-c9vc-xgh4-qh78.json index 2119926d3b8..808030f83d9 100644 --- a/advisories/unreviewed/2022/01/GHSA-c9vc-xgh4-qh78/GHSA-c9vc-xgh4-qh78.json +++ b/advisories/unreviewed/2022/01/GHSA-c9vc-xgh4-qh78/GHSA-c9vc-xgh4-qh78.json @@ -7,12 +7,8 @@ "CVE-2022-21342" ], "details": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-ch2r-j8mq-6h59/GHSA-ch2r-j8mq-6h59.json b/advisories/unreviewed/2022/01/GHSA-ch2r-j8mq-6h59/GHSA-ch2r-j8mq-6h59.json index b3894d5cb07..a5d929cb352 100644 --- a/advisories/unreviewed/2022/01/GHSA-ch2r-j8mq-6h59/GHSA-ch2r-j8mq-6h59.json +++ b/advisories/unreviewed/2022/01/GHSA-ch2r-j8mq-6h59/GHSA-ch2r-j8mq-6h59.json @@ -7,12 +7,8 @@ "CVE-2022-21381" ], "details": "Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: WebUI). Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Session Border Controller. While the vulnerability is in Oracle Enterprise Session Border Controller, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Enterprise Session Border Controller accessible data as well as unauthorized read access to a subset of Oracle Enterprise Session Border Controller accessible data. CVSS 3.1 Base Score 6.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-ch37-wgm7-x46g/GHSA-ch37-wgm7-x46g.json b/advisories/unreviewed/2022/01/GHSA-ch37-wgm7-x46g/GHSA-ch37-wgm7-x46g.json index 71aa45f513b..996121e7ff0 100644 --- a/advisories/unreviewed/2022/01/GHSA-ch37-wgm7-x46g/GHSA-ch37-wgm7-x46g.json +++ b/advisories/unreviewed/2022/01/GHSA-ch37-wgm7-x46g/GHSA-ch37-wgm7-x46g.json @@ -7,12 +7,8 @@ "CVE-2021-33965" ], "details": "China Mobile An Lianbao WF-1 V1.0.1 router provides a web interface /api/ZRMesh/set_ZRMesh which receives parameters by POST request, and the parameter mesh_enable and mesh_device have a command injection vulnerability. An attacker can use the vulnerability to execute remote commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-chg9-6qf8-84f8/GHSA-chg9-6qf8-84f8.json b/advisories/unreviewed/2022/01/GHSA-chg9-6qf8-84f8/GHSA-chg9-6qf8-84f8.json index bb1441f24aa..8bfe3227b81 100644 --- a/advisories/unreviewed/2022/01/GHSA-chg9-6qf8-84f8/GHSA-chg9-6qf8-84f8.json +++ b/advisories/unreviewed/2022/01/GHSA-chg9-6qf8-84f8/GHSA-chg9-6qf8-84f8.json @@ -7,12 +7,8 @@ "CVE-2022-21306" ], "details": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-chgw-p6qg-r67f/GHSA-chgw-p6qg-r67f.json b/advisories/unreviewed/2022/01/GHSA-chgw-p6qg-r67f/GHSA-chgw-p6qg-r67f.json index 6c25ce5f697..42dc1fcbdb3 100644 --- a/advisories/unreviewed/2022/01/GHSA-chgw-p6qg-r67f/GHSA-chgw-p6qg-r67f.json +++ b/advisories/unreviewed/2022/01/GHSA-chgw-p6qg-r67f/GHSA-chgw-p6qg-r67f.json @@ -7,12 +7,8 @@ "CVE-2022-21354" ], "details": "Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle iStore accessible data as well as unauthorized read access to a subset of Oracle iStore accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-cvpj-w72w-rchg/GHSA-cvpj-w72w-rchg.json b/advisories/unreviewed/2022/01/GHSA-cvpj-w72w-rchg/GHSA-cvpj-w72w-rchg.json index 59e7f9cd113..7dd4fac537a 100644 --- a/advisories/unreviewed/2022/01/GHSA-cvpj-w72w-rchg/GHSA-cvpj-w72w-rchg.json +++ b/advisories/unreviewed/2022/01/GHSA-cvpj-w72w-rchg/GHSA-cvpj-w72w-rchg.json @@ -7,12 +7,8 @@ "CVE-2021-26247" ], "details": "As an unauthenticated remote user, visit \"http:///auth_changepassword.php?ref=\" to successfully execute the JavaScript payload present in the \"ref\" URL parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-cw95-gwc8-vp9f/GHSA-cw95-gwc8-vp9f.json b/advisories/unreviewed/2022/01/GHSA-cw95-gwc8-vp9f/GHSA-cw95-gwc8-vp9f.json index 8e997740487..916ddb7af66 100644 --- a/advisories/unreviewed/2022/01/GHSA-cw95-gwc8-vp9f/GHSA-cw95-gwc8-vp9f.json +++ b/advisories/unreviewed/2022/01/GHSA-cw95-gwc8-vp9f/GHSA-cw95-gwc8-vp9f.json @@ -7,12 +7,8 @@ "CVE-2021-46204" ], "details": "Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter. SQL injection vulnerability via taocms\\include\\Model\\Article.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-f39x-97xh-67f5/GHSA-f39x-97xh-67f5.json b/advisories/unreviewed/2022/01/GHSA-f39x-97xh-67f5/GHSA-f39x-97xh-67f5.json index 9b7e2d195b3..dd927224494 100644 --- a/advisories/unreviewed/2022/01/GHSA-f39x-97xh-67f5/GHSA-f39x-97xh-67f5.json +++ b/advisories/unreviewed/2022/01/GHSA-f39x-97xh-67f5/GHSA-f39x-97xh-67f5.json @@ -7,12 +7,8 @@ "CVE-2022-21395" ], "details": "Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Communications Operations Monitor. Successful attacks of this vulnerability can result in takeover of Oracle Communications Operations Monitor. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-f7gp-9q48-wj84/GHSA-f7gp-9q48-wj84.json b/advisories/unreviewed/2022/01/GHSA-f7gp-9q48-wj84/GHSA-f7gp-9q48-wj84.json index 776756fa34a..834ba22aa10 100644 --- a/advisories/unreviewed/2022/01/GHSA-f7gp-9q48-wj84/GHSA-f7gp-9q48-wj84.json +++ b/advisories/unreviewed/2022/01/GHSA-f7gp-9q48-wj84/GHSA-f7gp-9q48-wj84.json @@ -7,12 +7,8 @@ "CVE-2022-21322" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-f8mj-7qvg-88g9/GHSA-f8mj-7qvg-88g9.json b/advisories/unreviewed/2022/01/GHSA-f8mj-7qvg-88g9/GHSA-f8mj-7qvg-88g9.json index 133e044171e..00fc38bb471 100644 --- a/advisories/unreviewed/2022/01/GHSA-f8mj-7qvg-88g9/GHSA-f8mj-7qvg-88g9.json +++ b/advisories/unreviewed/2022/01/GHSA-f8mj-7qvg-88g9/GHSA-f8mj-7qvg-88g9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-f953-255w-7jvv/GHSA-f953-255w-7jvv.json b/advisories/unreviewed/2022/01/GHSA-f953-255w-7jvv/GHSA-f953-255w-7jvv.json index fc119057787..7c0893823d6 100644 --- a/advisories/unreviewed/2022/01/GHSA-f953-255w-7jvv/GHSA-f953-255w-7jvv.json +++ b/advisories/unreviewed/2022/01/GHSA-f953-255w-7jvv/GHSA-f953-255w-7jvv.json @@ -7,12 +7,8 @@ "CVE-2022-21362" ], "details": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-fp9m-wggx-7p4v/GHSA-fp9m-wggx-7p4v.json b/advisories/unreviewed/2022/01/GHSA-fp9m-wggx-7p4v/GHSA-fp9m-wggx-7p4v.json index c61161c90b0..4f2d1df9780 100644 --- a/advisories/unreviewed/2022/01/GHSA-fp9m-wggx-7p4v/GHSA-fp9m-wggx-7p4v.json +++ b/advisories/unreviewed/2022/01/GHSA-fp9m-wggx-7p4v/GHSA-fp9m-wggx-7p4v.json @@ -7,12 +7,8 @@ "CVE-2022-21258" ], "details": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). The supported version that is affected is 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-fvfh-cg4f-mhxm/GHSA-fvfh-cg4f-mhxm.json b/advisories/unreviewed/2022/01/GHSA-fvfh-cg4f-mhxm/GHSA-fvfh-cg4f-mhxm.json index d9de92bd4e7..81c18980746 100644 --- a/advisories/unreviewed/2022/01/GHSA-fvfh-cg4f-mhxm/GHSA-fvfh-cg4f-mhxm.json +++ b/advisories/unreviewed/2022/01/GHSA-fvfh-cg4f-mhxm/GHSA-fvfh-cg4f-mhxm.json @@ -7,12 +7,8 @@ "CVE-2022-21378" ], "details": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-fwh6-m5hv-6crx/GHSA-fwh6-m5hv-6crx.json b/advisories/unreviewed/2022/01/GHSA-fwh6-m5hv-6crx/GHSA-fwh6-m5hv-6crx.json index 61224c18318..4051da69583 100644 --- a/advisories/unreviewed/2022/01/GHSA-fwh6-m5hv-6crx/GHSA-fwh6-m5hv-6crx.json +++ b/advisories/unreviewed/2022/01/GHSA-fwh6-m5hv-6crx/GHSA-fwh6-m5hv-6crx.json @@ -7,12 +7,8 @@ "CVE-2022-21298" ], "details": "Vulnerability in the Oracle Solaris product of Oracle Systems (component: Install). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Solaris accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Solaris. CVSS 3.1 Base Score 3.9 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-g259-cf2c-q73h/GHSA-g259-cf2c-q73h.json b/advisories/unreviewed/2022/01/GHSA-g259-cf2c-q73h/GHSA-g259-cf2c-q73h.json index a2eb64b1a18..8fe34c2c992 100644 --- a/advisories/unreviewed/2022/01/GHSA-g259-cf2c-q73h/GHSA-g259-cf2c-q73h.json +++ b/advisories/unreviewed/2022/01/GHSA-g259-cf2c-q73h/GHSA-g259-cf2c-q73h.json @@ -7,12 +7,8 @@ "CVE-2022-21361" ], "details": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-g287-7g7m-crm8/GHSA-g287-7g7m-crm8.json b/advisories/unreviewed/2022/01/GHSA-g287-7g7m-crm8/GHSA-g287-7g7m-crm8.json index 69e1e7be269..a7dd0e01d8d 100644 --- a/advisories/unreviewed/2022/01/GHSA-g287-7g7m-crm8/GHSA-g287-7g7m-crm8.json +++ b/advisories/unreviewed/2022/01/GHSA-g287-7g7m-crm8/GHSA-g287-7g7m-crm8.json @@ -7,12 +7,8 @@ "CVE-2022-21273" ], "details": "Vulnerability in the Oracle Project Costing product of Oracle E-Business Suite (component: Expenses, Currency Override). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project Costing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Project Costing accessible data as well as unauthorized access to critical data or complete access to all Oracle Project Costing accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-g28x-633f-r8qf/GHSA-g28x-633f-r8qf.json b/advisories/unreviewed/2022/01/GHSA-g28x-633f-r8qf/GHSA-g28x-633f-r8qf.json index 91976eb35cb..db62c1c23ec 100644 --- a/advisories/unreviewed/2022/01/GHSA-g28x-633f-r8qf/GHSA-g28x-633f-r8qf.json +++ b/advisories/unreviewed/2022/01/GHSA-g28x-633f-r8qf/GHSA-g28x-633f-r8qf.json @@ -7,12 +7,8 @@ "CVE-2021-37866" ], "details": "Mattermost Boards plugin v0.10.0 and earlier fails to invalidate a session on the server-side when a user logged out of Boards, which allows an attacker to reuse old session token for authorization.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-g78x-p68x-vx34/GHSA-g78x-p68x-vx34.json b/advisories/unreviewed/2022/01/GHSA-g78x-p68x-vx34/GHSA-g78x-p68x-vx34.json index a67b5a508c3..32902d60533 100644 --- a/advisories/unreviewed/2022/01/GHSA-g78x-p68x-vx34/GHSA-g78x-p68x-vx34.json +++ b/advisories/unreviewed/2022/01/GHSA-g78x-p68x-vx34/GHSA-g78x-p68x-vx34.json @@ -7,12 +7,8 @@ "CVE-2020-14110" ], "details": "AX3600 router sensitive information leaked.There is an unauthorized interface through luci to obtain sensitive information and log in to the web background.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-g95j-qpmf-f2fq/GHSA-g95j-qpmf-f2fq.json b/advisories/unreviewed/2022/01/GHSA-g95j-qpmf-f2fq/GHSA-g95j-qpmf-f2fq.json index d2c29aabbdf..d8bd4709684 100644 --- a/advisories/unreviewed/2022/01/GHSA-g95j-qpmf-f2fq/GHSA-g95j-qpmf-f2fq.json +++ b/advisories/unreviewed/2022/01/GHSA-g95j-qpmf-f2fq/GHSA-g95j-qpmf-f2fq.json @@ -7,12 +7,8 @@ "CVE-2022-21290" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-ggqj-3529-g8x3/GHSA-ggqj-3529-g8x3.json b/advisories/unreviewed/2022/01/GHSA-ggqj-3529-g8x3/GHSA-ggqj-3529-g8x3.json index 32c446f5ba3..1affb9419b8 100644 --- a/advisories/unreviewed/2022/01/GHSA-ggqj-3529-g8x3/GHSA-ggqj-3529-g8x3.json +++ b/advisories/unreviewed/2022/01/GHSA-ggqj-3529-g8x3/GHSA-ggqj-3529-g8x3.json @@ -7,12 +7,8 @@ "CVE-2022-21332" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-ghc3-6vp5-653g/GHSA-ghc3-6vp5-653g.json b/advisories/unreviewed/2022/01/GHSA-ghc3-6vp5-653g/GHSA-ghc3-6vp5-653g.json index 891e05ebaf8..75854875515 100644 --- a/advisories/unreviewed/2022/01/GHSA-ghc3-6vp5-653g/GHSA-ghc3-6vp5-653g.json +++ b/advisories/unreviewed/2022/01/GHSA-ghc3-6vp5-653g/GHSA-ghc3-6vp5-653g.json @@ -7,12 +7,8 @@ "CVE-2022-21386" ], "details": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-gmhg-cx65-wg6j/GHSA-gmhg-cx65-wg6j.json b/advisories/unreviewed/2022/01/GHSA-gmhg-cx65-wg6j/GHSA-gmhg-cx65-wg6j.json index 689aac443e3..3d663253bdb 100644 --- a/advisories/unreviewed/2022/01/GHSA-gmhg-cx65-wg6j/GHSA-gmhg-cx65-wg6j.json +++ b/advisories/unreviewed/2022/01/GHSA-gmhg-cx65-wg6j/GHSA-gmhg-cx65-wg6j.json @@ -7,12 +7,8 @@ "CVE-2022-21276" ], "details": "Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Billing and Revenue Management. While the vulnerability is in Oracle Communications Billing and Revenue Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Communications Billing and Revenue Management. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-gwpj-7fq2-hfw2/GHSA-gwpj-7fq2-hfw2.json b/advisories/unreviewed/2022/01/GHSA-gwpj-7fq2-hfw2/GHSA-gwpj-7fq2-hfw2.json index 9ae7db359dd..f43393be617 100644 --- a/advisories/unreviewed/2022/01/GHSA-gwpj-7fq2-hfw2/GHSA-gwpj-7fq2-hfw2.json +++ b/advisories/unreviewed/2022/01/GHSA-gwpj-7fq2-hfw2/GHSA-gwpj-7fq2-hfw2.json @@ -7,12 +7,8 @@ "CVE-2021-37867" ], "details": "Mattermost Boards plugin v0.10.0 and earlier fails to protect email addresses of all users via one of the Boards APIs, which allows authenticated and unauthorized users to access this information resulting in sensitive & private information disclosure.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-h32w-5r22-g475/GHSA-h32w-5r22-g475.json b/advisories/unreviewed/2022/01/GHSA-h32w-5r22-g475/GHSA-h32w-5r22-g475.json index 5a46f7a2203..40725a484fc 100644 --- a/advisories/unreviewed/2022/01/GHSA-h32w-5r22-g475/GHSA-h32w-5r22-g475.json +++ b/advisories/unreviewed/2022/01/GHSA-h32w-5r22-g475/GHSA-h32w-5r22-g475.json @@ -7,12 +7,8 @@ "CVE-2022-21359" ], "details": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Optimization Framework). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-h462-mfp7-x3xp/GHSA-h462-mfp7-x3xp.json b/advisories/unreviewed/2022/01/GHSA-h462-mfp7-x3xp/GHSA-h462-mfp7-x3xp.json index 1d1310a1e56..8976b0397af 100644 --- a/advisories/unreviewed/2022/01/GHSA-h462-mfp7-x3xp/GHSA-h462-mfp7-x3xp.json +++ b/advisories/unreviewed/2022/01/GHSA-h462-mfp7-x3xp/GHSA-h462-mfp7-x3xp.json @@ -7,12 +7,8 @@ "CVE-2022-21318" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-h62q-wxxr-4qqj/GHSA-h62q-wxxr-4qqj.json b/advisories/unreviewed/2022/01/GHSA-h62q-wxxr-4qqj/GHSA-h62q-wxxr-4qqj.json index f9056c30631..c066733e89b 100644 --- a/advisories/unreviewed/2022/01/GHSA-h62q-wxxr-4qqj/GHSA-h62q-wxxr-4qqj.json +++ b/advisories/unreviewed/2022/01/GHSA-h62q-wxxr-4qqj/GHSA-h62q-wxxr-4qqj.json @@ -7,12 +7,8 @@ "CVE-2021-41808" ], "details": "In M-Files Server product with versions before 21.11.10775.0, enabling logging of Federated authentication to event log wrote sensitive information to log. Mitigating factors are logging is disabled by default.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-h6gg-5gq2-7fgc/GHSA-h6gg-5gq2-7fgc.json b/advisories/unreviewed/2022/01/GHSA-h6gg-5gq2-7fgc/GHSA-h6gg-5gq2-7fgc.json index 90be8cc4f15..d98aee8e66f 100644 --- a/advisories/unreviewed/2022/01/GHSA-h6gg-5gq2-7fgc/GHSA-h6gg-5gq2-7fgc.json +++ b/advisories/unreviewed/2022/01/GHSA-h6gg-5gq2-7fgc/GHSA-h6gg-5gq2-7fgc.json @@ -7,12 +7,8 @@ "CVE-2021-38787" ], "details": "There is an integer overflow in the ION driver \"/dev/ion\" of Allwinner R818 SoC Android Q SDK V1.0 that could use the ioctl cmd \"COMPAT_ION_IOC_SUNXI_FLUSH_RANGE\" to cause a system crash (denial of service).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-h95v-7jfp-9578/GHSA-h95v-7jfp-9578.json b/advisories/unreviewed/2022/01/GHSA-h95v-7jfp-9578/GHSA-h95v-7jfp-9578.json index 07d79cf85f4..6dc63924ace 100644 --- a/advisories/unreviewed/2022/01/GHSA-h95v-7jfp-9578/GHSA-h95v-7jfp-9578.json +++ b/advisories/unreviewed/2022/01/GHSA-h95v-7jfp-9578/GHSA-h95v-7jfp-9578.json @@ -7,12 +7,8 @@ "CVE-2022-21266" ], "details": "Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Pipeline Manager). Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Communications Billing and Revenue Management accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-hfgf-47w8-rh5m/GHSA-hfgf-47w8-rh5m.json b/advisories/unreviewed/2022/01/GHSA-hfgf-47w8-rh5m/GHSA-hfgf-47w8-rh5m.json index 68724c417c8..d02e5158893 100644 --- a/advisories/unreviewed/2022/01/GHSA-hfgf-47w8-rh5m/GHSA-hfgf-47w8-rh5m.json +++ b/advisories/unreviewed/2022/01/GHSA-hfgf-47w8-rh5m/GHSA-hfgf-47w8-rh5m.json @@ -7,12 +7,8 @@ "CVE-2022-21269" ], "details": "Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2, 20.0.0.0 and 20.0.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Portfolio Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Primavera Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera Portfolio Management accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-hfw8-38fv-5px3/GHSA-hfw8-38fv-5px3.json b/advisories/unreviewed/2022/01/GHSA-hfw8-38fv-5px3/GHSA-hfw8-38fv-5px3.json index aa80ef5b2f6..69e3b1db65e 100644 --- a/advisories/unreviewed/2022/01/GHSA-hfw8-38fv-5px3/GHSA-hfw8-38fv-5px3.json +++ b/advisories/unreviewed/2022/01/GHSA-hfw8-38fv-5px3/GHSA-hfw8-38fv-5px3.json @@ -7,12 +7,8 @@ "CVE-2022-21320" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-hgjf-5c84-76wg/GHSA-hgjf-5c84-76wg.json b/advisories/unreviewed/2022/01/GHSA-hgjf-5c84-76wg/GHSA-hgjf-5c84-76wg.json index 62f37059c82..d8065f38ca4 100644 --- a/advisories/unreviewed/2022/01/GHSA-hgjf-5c84-76wg/GHSA-hgjf-5c84-76wg.json +++ b/advisories/unreviewed/2022/01/GHSA-hgjf-5c84-76wg/GHSA-hgjf-5c84-76wg.json @@ -7,12 +7,8 @@ "CVE-2022-21387" ], "details": "Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that are affected are 11.3.0, 11.3.1 and 11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Commerce Platform accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-hh3h-f9m4-2347/GHSA-hh3h-f9m4-2347.json b/advisories/unreviewed/2022/01/GHSA-hh3h-f9m4-2347/GHSA-hh3h-f9m4-2347.json index 2a53acd60ce..375f18bb569 100644 --- a/advisories/unreviewed/2022/01/GHSA-hh3h-f9m4-2347/GHSA-hh3h-f9m4-2347.json +++ b/advisories/unreviewed/2022/01/GHSA-hh3h-f9m4-2347/GHSA-hh3h-f9m4-2347.json @@ -7,12 +7,8 @@ "CVE-2022-21356" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-hjx8-pw44-p37w/GHSA-hjx8-pw44-p37w.json b/advisories/unreviewed/2022/01/GHSA-hjx8-pw44-p37w/GHSA-hjx8-pw44-p37w.json index 2c34b36f939..4e07f5fb57c 100644 --- a/advisories/unreviewed/2022/01/GHSA-hjx8-pw44-p37w/GHSA-hjx8-pw44-p37w.json +++ b/advisories/unreviewed/2022/01/GHSA-hjx8-pw44-p37w/GHSA-hjx8-pw44-p37w.json @@ -7,12 +7,8 @@ "CVE-2022-21319" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-hp9w-qmx7-5m9m/GHSA-hp9w-qmx7-5m9m.json b/advisories/unreviewed/2022/01/GHSA-hp9w-qmx7-5m9m/GHSA-hp9w-qmx7-5m9m.json index 7ee539ea84e..256ef4eb93d 100644 --- a/advisories/unreviewed/2022/01/GHSA-hp9w-qmx7-5m9m/GHSA-hp9w-qmx7-5m9m.json +++ b/advisories/unreviewed/2022/01/GHSA-hp9w-qmx7-5m9m/GHSA-hp9w-qmx7-5m9m.json @@ -7,12 +7,8 @@ "CVE-2022-21372" ], "details": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-hvhc-gqfx-h3hx/GHSA-hvhc-gqfx-h3hx.json b/advisories/unreviewed/2022/01/GHSA-hvhc-gqfx-h3hx/GHSA-hvhc-gqfx-h3hx.json index b2cec2b59b7..b47d96752ea 100644 --- a/advisories/unreviewed/2022/01/GHSA-hvhc-gqfx-h3hx/GHSA-hvhc-gqfx-h3hx.json +++ b/advisories/unreviewed/2022/01/GHSA-hvhc-gqfx-h3hx/GHSA-hvhc-gqfx-h3hx.json @@ -7,12 +7,8 @@ "CVE-2021-29632" ], "details": "In FreeBSD 13.0-STABLE before n247428-9352de39c3dc, 12.2-STABLE before r370674, 13.0-RELEASE before p6, and 12.2-RELEASE before p12, certain conditions involving use of the highlight buffer while text is scrolling on the console, console data may overwrite data structures associated with the system console or other kernel memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-j68f-72hx-632q/GHSA-j68f-72hx-632q.json b/advisories/unreviewed/2022/01/GHSA-j68f-72hx-632q/GHSA-j68f-72hx-632q.json index 7e2fbf40f68..5499414f62b 100644 --- a/advisories/unreviewed/2022/01/GHSA-j68f-72hx-632q/GHSA-j68f-72hx-632q.json +++ b/advisories/unreviewed/2022/01/GHSA-j68f-72hx-632q/GHSA-j68f-72hx-632q.json @@ -7,12 +7,8 @@ "CVE-2022-21317" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-j6hr-vmm6-m6c2/GHSA-j6hr-vmm6-m6c2.json b/advisories/unreviewed/2022/01/GHSA-j6hr-vmm6-m6c2/GHSA-j6hr-vmm6-m6c2.json index 9cb5ba2016b..bf373a04e28 100644 --- a/advisories/unreviewed/2022/01/GHSA-j6hr-vmm6-m6c2/GHSA-j6hr-vmm6-m6c2.json +++ b/advisories/unreviewed/2022/01/GHSA-j6hr-vmm6-m6c2/GHSA-j6hr-vmm6-m6c2.json @@ -7,12 +7,8 @@ "CVE-2021-23842" ], "details": "Communication to the AMC2 uses a state-of-the-art cryptographic algorithm for symmetric encryption called Blowfish. An attacker could retrieve the key from the firmware to decrypt network traffic between the AMC2 and the host system. Thus, an attacker can exploit this vulnerability to decrypt and modify network traffic, decrypt and further investigate the device\\'s firmware file, and change the device configuration. The attacker needs to have access to the local network, typically even the same subnet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-j6qx-gj8m-6pp6/GHSA-j6qx-gj8m-6pp6.json b/advisories/unreviewed/2022/01/GHSA-j6qx-gj8m-6pp6/GHSA-j6qx-gj8m-6pp6.json index f862378879e..24b7a290f20 100644 --- a/advisories/unreviewed/2022/01/GHSA-j6qx-gj8m-6pp6/GHSA-j6qx-gj8m-6pp6.json +++ b/advisories/unreviewed/2022/01/GHSA-j6qx-gj8m-6pp6/GHSA-j6qx-gj8m-6pp6.json @@ -7,12 +7,8 @@ "CVE-2022-21400" ], "details": "Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Operations Monitor. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Communications Operations Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Operations Monitor accessible data as well as unauthorized read access to a subset of Oracle Communications Operations Monitor accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-j7jr-7qv3-phgf/GHSA-j7jr-7qv3-phgf.json b/advisories/unreviewed/2022/01/GHSA-j7jr-7qv3-phgf/GHSA-j7jr-7qv3-phgf.json index 1494be71d6e..708eb03778b 100644 --- a/advisories/unreviewed/2022/01/GHSA-j7jr-7qv3-phgf/GHSA-j7jr-7qv3-phgf.json +++ b/advisories/unreviewed/2022/01/GHSA-j7jr-7qv3-phgf/GHSA-j7jr-7qv3-phgf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-jf48-9c8q-4q5v/GHSA-jf48-9c8q-4q5v.json b/advisories/unreviewed/2022/01/GHSA-jf48-9c8q-4q5v/GHSA-jf48-9c8q-4q5v.json index 96644218bab..84c56056a02 100644 --- a/advisories/unreviewed/2022/01/GHSA-jf48-9c8q-4q5v/GHSA-jf48-9c8q-4q5v.json +++ b/advisories/unreviewed/2022/01/GHSA-jf48-9c8q-4q5v/GHSA-jf48-9c8q-4q5v.json @@ -7,12 +7,8 @@ "CVE-2022-21391" ], "details": "Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Billing and Revenue Management. While the vulnerability is in Oracle Communications Billing and Revenue Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Communications Billing and Revenue Management. CVSS 3.1 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-jh95-qvfh-rjjw/GHSA-jh95-qvfh-rjjw.json b/advisories/unreviewed/2022/01/GHSA-jh95-qvfh-rjjw/GHSA-jh95-qvfh-rjjw.json index 6d2937b3fd3..9c740a17d7b 100644 --- a/advisories/unreviewed/2022/01/GHSA-jh95-qvfh-rjjw/GHSA-jh95-qvfh-rjjw.json +++ b/advisories/unreviewed/2022/01/GHSA-jh95-qvfh-rjjw/GHSA-jh95-qvfh-rjjw.json @@ -7,12 +7,8 @@ "CVE-2021-46203" ], "details": "Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-jhr2-2f55-c4fq/GHSA-jhr2-2f55-c4fq.json b/advisories/unreviewed/2022/01/GHSA-jhr2-2f55-c4fq/GHSA-jhr2-2f55-c4fq.json index 247b1870824..5fa9ba55481 100644 --- a/advisories/unreviewed/2022/01/GHSA-jhr2-2f55-c4fq/GHSA-jhr2-2f55-c4fq.json +++ b/advisories/unreviewed/2022/01/GHSA-jhr2-2f55-c4fq/GHSA-jhr2-2f55-c4fq.json @@ -7,12 +7,8 @@ "CVE-2021-44777" ], "details": "Cross-Site Request Forgery (CSRF) vulnerabilities leading to single or bulk e-mail entries deletion discovered in Email Tracker WordPress plugin (versions <= 5.2.6).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-jqq9-5hrp-9jg8/GHSA-jqq9-5hrp-9jg8.json b/advisories/unreviewed/2022/01/GHSA-jqq9-5hrp-9jg8/GHSA-jqq9-5hrp-9jg8.json index b473772b44e..94e96d1e292 100644 --- a/advisories/unreviewed/2022/01/GHSA-jqq9-5hrp-9jg8/GHSA-jqq9-5hrp-9jg8.json +++ b/advisories/unreviewed/2022/01/GHSA-jqq9-5hrp-9jg8/GHSA-jqq9-5hrp-9jg8.json @@ -7,12 +7,8 @@ "CVE-2021-37865" ], "details": "Mattermost 6.2 and earlier fails to sufficiently process a specifically crafted GIF file when it is uploaded while drafting a post, which allows authenticated users to cause resource exhaustion while processing the file, resulting in server-side Denial of Service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-m3p7-98jw-rhh2/GHSA-m3p7-98jw-rhh2.json b/advisories/unreviewed/2022/01/GHSA-m3p7-98jw-rhh2/GHSA-m3p7-98jw-rhh2.json index 50c5906daa0..e0fadadbab1 100644 --- a/advisories/unreviewed/2022/01/GHSA-m3p7-98jw-rhh2/GHSA-m3p7-98jw-rhh2.json +++ b/advisories/unreviewed/2022/01/GHSA-m3p7-98jw-rhh2/GHSA-m3p7-98jw-rhh2.json @@ -7,12 +7,8 @@ "CVE-2022-21393" ], "details": "Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 19c and 21c. Easily exploitable vulnerability allows low privileged attacker having Create Procedure privilege with network access via Oracle Net to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java VM. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-m3vv-p6rr-pp92/GHSA-m3vv-p6rr-pp92.json b/advisories/unreviewed/2022/01/GHSA-m3vv-p6rr-pp92/GHSA-m3vv-p6rr-pp92.json index 68782961bf8..2f5ddf9200c 100644 --- a/advisories/unreviewed/2022/01/GHSA-m3vv-p6rr-pp92/GHSA-m3vv-p6rr-pp92.json +++ b/advisories/unreviewed/2022/01/GHSA-m3vv-p6rr-pp92/GHSA-m3vv-p6rr-pp92.json @@ -7,12 +7,8 @@ "CVE-2022-21335" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-m54w-jgp2-mf5q/GHSA-m54w-jgp2-mf5q.json b/advisories/unreviewed/2022/01/GHSA-m54w-jgp2-mf5q/GHSA-m54w-jgp2-mf5q.json index 2ed1f3a9255..51c04879dd6 100644 --- a/advisories/unreviewed/2022/01/GHSA-m54w-jgp2-mf5q/GHSA-m54w-jgp2-mf5q.json +++ b/advisories/unreviewed/2022/01/GHSA-m54w-jgp2-mf5q/GHSA-m54w-jgp2-mf5q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-mh9m-78f3-35jx/GHSA-mh9m-78f3-35jx.json b/advisories/unreviewed/2022/01/GHSA-mh9m-78f3-35jx/GHSA-mh9m-78f3-35jx.json index afa37eee4c6..e95738e2ae6 100644 --- a/advisories/unreviewed/2022/01/GHSA-mh9m-78f3-35jx/GHSA-mh9m-78f3-35jx.json +++ b/advisories/unreviewed/2022/01/GHSA-mh9m-78f3-35jx/GHSA-mh9m-78f3-35jx.json @@ -7,12 +7,8 @@ "CVE-2021-46030" ], "details": "There is a Cross Site Scripting attack (XSS) vulnerability in JavaQuarkBBS <= v2. By entering specific statements into the background tag management module, the attack statement will be stored in the database, and the next victim will be attacked when he accesses the tag module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-mhwj-x5ww-w2wj/GHSA-mhwj-x5ww-w2wj.json b/advisories/unreviewed/2022/01/GHSA-mhwj-x5ww-w2wj/GHSA-mhwj-x5ww-w2wj.json index bfc739e6d1b..0280f8d4fbc 100644 --- a/advisories/unreviewed/2022/01/GHSA-mhwj-x5ww-w2wj/GHSA-mhwj-x5ww-w2wj.json +++ b/advisories/unreviewed/2022/01/GHSA-mhwj-x5ww-w2wj/GHSA-mhwj-x5ww-w2wj.json @@ -7,12 +7,8 @@ "CVE-2022-21327" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-mm9f-mcc2-2gpj/GHSA-mm9f-mcc2-2gpj.json b/advisories/unreviewed/2022/01/GHSA-mm9f-mcc2-2gpj/GHSA-mm9f-mcc2-2gpj.json index 65774d275a8..edd4323c795 100644 --- a/advisories/unreviewed/2022/01/GHSA-mm9f-mcc2-2gpj/GHSA-mm9f-mcc2-2gpj.json +++ b/advisories/unreviewed/2022/01/GHSA-mm9f-mcc2-2gpj/GHSA-mm9f-mcc2-2gpj.json @@ -7,12 +7,8 @@ "CVE-2022-21267" ], "details": "Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Pipeline Manager). Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications Billing and Revenue Management executes to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications Billing and Revenue Management accessible data. CVSS 3.1 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-mmm7-f462-6hxf/GHSA-mmm7-f462-6hxf.json b/advisories/unreviewed/2022/01/GHSA-mmm7-f462-6hxf/GHSA-mmm7-f462-6hxf.json index 0c7d5724498..82fd2ef3e15 100644 --- a/advisories/unreviewed/2022/01/GHSA-mmm7-f462-6hxf/GHSA-mmm7-f462-6hxf.json +++ b/advisories/unreviewed/2022/01/GHSA-mmm7-f462-6hxf/GHSA-mmm7-f462-6hxf.json @@ -7,12 +7,8 @@ "CVE-2022-21399" ], "details": "Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Communications Operations Monitor. While the vulnerability is in Oracle Communications Operations Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Operations Monitor accessible data as well as unauthorized read access to a subset of Oracle Communications Operations Monitor accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Communications Operations Monitor. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-mpff-m4fx-pg6c/GHSA-mpff-m4fx-pg6c.json b/advisories/unreviewed/2022/01/GHSA-mpff-m4fx-pg6c/GHSA-mpff-m4fx-pg6c.json index 995fa4c70f2..5d4e08eadc2 100644 --- a/advisories/unreviewed/2022/01/GHSA-mpff-m4fx-pg6c/GHSA-mpff-m4fx-pg6c.json +++ b/advisories/unreviewed/2022/01/GHSA-mpff-m4fx-pg6c/GHSA-mpff-m4fx-pg6c.json @@ -7,12 +7,8 @@ "CVE-2022-21328" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-mrvg-5v36-cwpm/GHSA-mrvg-5v36-cwpm.json b/advisories/unreviewed/2022/01/GHSA-mrvg-5v36-cwpm/GHSA-mrvg-5v36-cwpm.json index 212c2ae54bd..fd9d1e52a47 100644 --- a/advisories/unreviewed/2022/01/GHSA-mrvg-5v36-cwpm/GHSA-mrvg-5v36-cwpm.json +++ b/advisories/unreviewed/2022/01/GHSA-mrvg-5v36-cwpm/GHSA-mrvg-5v36-cwpm.json @@ -7,12 +7,8 @@ "CVE-2022-21262" ], "details": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-mw72-7m3m-vvm2/GHSA-mw72-7m3m-vvm2.json b/advisories/unreviewed/2022/01/GHSA-mw72-7m3m-vvm2/GHSA-mw72-7m3m-vvm2.json index 4a6781d9e8a..335838b10b8 100644 --- a/advisories/unreviewed/2022/01/GHSA-mw72-7m3m-vvm2/GHSA-mw72-7m3m-vvm2.json +++ b/advisories/unreviewed/2022/01/GHSA-mw72-7m3m-vvm2/GHSA-mw72-7m3m-vvm2.json @@ -7,12 +7,8 @@ "CVE-2021-23843" ], "details": "The Bosch software tools AccessIPConfig.exe and AmcIpConfig.exe are used to configure certains settings in AMC2 devices. The tool allows putting a password protection on configured devices to restrict access to the configuration of an AMC2. An attacker can circumvent this protection and make unauthorized changes to configuration data on the device. An attacker can exploit this vulnerability to manipulate the device\\'s configuration or make it unresponsive in the local network. The attacker needs to have access to the local network, typically even the same subnet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-p2rh-c8v9-q44p/GHSA-p2rh-c8v9-q44p.json b/advisories/unreviewed/2022/01/GHSA-p2rh-c8v9-q44p/GHSA-p2rh-c8v9-q44p.json index 4a213daed20..a7fa92d20e4 100644 --- a/advisories/unreviewed/2022/01/GHSA-p2rh-c8v9-q44p/GHSA-p2rh-c8v9-q44p.json +++ b/advisories/unreviewed/2022/01/GHSA-p2rh-c8v9-q44p/GHSA-p2rh-c8v9-q44p.json @@ -7,12 +7,8 @@ "CVE-2022-21274" ], "details": "Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Intelligence, RFx Creation). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sourcing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Sourcing accessible data as well as unauthorized access to critical data or complete access to all Oracle Sourcing accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-p5c5-2gwh-8485/GHSA-p5c5-2gwh-8485.json b/advisories/unreviewed/2022/01/GHSA-p5c5-2gwh-8485/GHSA-p5c5-2gwh-8485.json index 29f477dd81c..630c1f4e793 100644 --- a/advisories/unreviewed/2022/01/GHSA-p5c5-2gwh-8485/GHSA-p5c5-2gwh-8485.json +++ b/advisories/unreviewed/2022/01/GHSA-p5c5-2gwh-8485/GHSA-p5c5-2gwh-8485.json @@ -7,12 +7,8 @@ "CVE-2022-21353" ], "details": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-p6p4-97gp-9hqv/GHSA-p6p4-97gp-9hqv.json b/advisories/unreviewed/2022/01/GHSA-p6p4-97gp-9hqv/GHSA-p6p4-97gp-9hqv.json index 1f5606eb35e..f820458d88b 100644 --- a/advisories/unreviewed/2022/01/GHSA-p6p4-97gp-9hqv/GHSA-p6p4-97gp-9hqv.json +++ b/advisories/unreviewed/2022/01/GHSA-p6p4-97gp-9hqv/GHSA-p6p4-97gp-9hqv.json @@ -7,12 +7,8 @@ "CVE-2022-21268" ], "details": "Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Pipeline Manager). Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications Billing and Revenue Management executes to compromise Oracle Communications Billing and Revenue Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications Billing and Revenue Management accessible data. CVSS 3.1 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-p6px-9m2q-3cjx/GHSA-p6px-9m2q-3cjx.json b/advisories/unreviewed/2022/01/GHSA-p6px-9m2q-3cjx/GHSA-p6px-9m2q-3cjx.json index f731ba3fced..bd32746e84b 100644 --- a/advisories/unreviewed/2022/01/GHSA-p6px-9m2q-3cjx/GHSA-p6px-9m2q-3cjx.json +++ b/advisories/unreviewed/2022/01/GHSA-p6px-9m2q-3cjx/GHSA-p6px-9m2q-3cjx.json @@ -7,12 +7,8 @@ "CVE-2022-21333" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-p9j5-85v2-2hhf/GHSA-p9j5-85v2-2hhf.json b/advisories/unreviewed/2022/01/GHSA-p9j5-85v2-2hhf/GHSA-p9j5-85v2-2hhf.json index 6675e412542..3c398581372 100644 --- a/advisories/unreviewed/2022/01/GHSA-p9j5-85v2-2hhf/GHSA-p9j5-85v2-2hhf.json +++ b/advisories/unreviewed/2022/01/GHSA-p9j5-85v2-2hhf/GHSA-p9j5-85v2-2hhf.json @@ -7,12 +7,8 @@ "CVE-2022-21389" ], "details": "Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Billing and Revenue Management. While the vulnerability is in Oracle Communications Billing and Revenue Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Communications Billing and Revenue Management. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-pw3j-7fmh-8vpr/GHSA-pw3j-7fmh-8vpr.json b/advisories/unreviewed/2022/01/GHSA-pw3j-7fmh-8vpr/GHSA-pw3j-7fmh-8vpr.json index 51c56e4f43e..82888847dfb 100644 --- a/advisories/unreviewed/2022/01/GHSA-pw3j-7fmh-8vpr/GHSA-pw3j-7fmh-8vpr.json +++ b/advisories/unreviewed/2022/01/GHSA-pw3j-7fmh-8vpr/GHSA-pw3j-7fmh-8vpr.json @@ -7,12 +7,8 @@ "CVE-2021-38783" ], "details": "There is a Out-of-Bound Write in the Allwinner R818 SoC Android Q SDK V1.0 camera driver \"/dev/cedar_dev\" through iotcl cmd IOCTL_SET_PROC_INFO and IOCTL_COPY_PROC_INFO, which could cause a system crash or EoP.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-q2f4-rpm5-3gxp/GHSA-q2f4-rpm5-3gxp.json b/advisories/unreviewed/2022/01/GHSA-q2f4-rpm5-3gxp/GHSA-q2f4-rpm5-3gxp.json index 3bdca24b3db..67fdb444231 100644 --- a/advisories/unreviewed/2022/01/GHSA-q2f4-rpm5-3gxp/GHSA-q2f4-rpm5-3gxp.json +++ b/advisories/unreviewed/2022/01/GHSA-q2f4-rpm5-3gxp/GHSA-q2f4-rpm5-3gxp.json @@ -7,12 +7,8 @@ "CVE-2022-21323" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-q2jh-g2x6-r32c/GHSA-q2jh-g2x6-r32c.json b/advisories/unreviewed/2022/01/GHSA-q2jh-g2x6-r32c/GHSA-q2jh-g2x6-r32c.json index 40ac2b86554..db8f70b70aa 100644 --- a/advisories/unreviewed/2022/01/GHSA-q2jh-g2x6-r32c/GHSA-q2jh-g2x6-r32c.json +++ b/advisories/unreviewed/2022/01/GHSA-q2jh-g2x6-r32c/GHSA-q2jh-g2x6-r32c.json @@ -7,12 +7,8 @@ "CVE-2021-38784" ], "details": "There is a NULL pointer dereference in the syscall open_exec function of Allwinner R818 SoC Android Q SDK V1.0 that could executable a malicious file to cause a system crash.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-q3fv-hvg5-9m79/GHSA-q3fv-hvg5-9m79.json b/advisories/unreviewed/2022/01/GHSA-q3fv-hvg5-9m79/GHSA-q3fv-hvg5-9m79.json index a72ed07fdbb..699e48d2b28 100644 --- a/advisories/unreviewed/2022/01/GHSA-q3fv-hvg5-9m79/GHSA-q3fv-hvg5-9m79.json +++ b/advisories/unreviewed/2022/01/GHSA-q3fv-hvg5-9m79/GHSA-q3fv-hvg5-9m79.json @@ -7,12 +7,8 @@ "CVE-2022-21275" ], "details": "Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager). Supported versions that are affected are 12.0.0.3 and 12.0.0.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Communications Billing and Revenue Management. While the vulnerability is in Oracle Communications Billing and Revenue Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Communications Billing and Revenue Management. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-q64g-vw52-hq3m/GHSA-q64g-vw52-hq3m.json b/advisories/unreviewed/2022/01/GHSA-q64g-vw52-hq3m/GHSA-q64g-vw52-hq3m.json index 44eb9494c22..b19f3eaa4ae 100644 --- a/advisories/unreviewed/2022/01/GHSA-q64g-vw52-hq3m/GHSA-q64g-vw52-hq3m.json +++ b/advisories/unreviewed/2022/01/GHSA-q64g-vw52-hq3m/GHSA-q64g-vw52-hq3m.json @@ -7,12 +7,8 @@ "CVE-2022-21383" ], "details": "Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: Log). Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Session Border Controller. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Enterprise Session Border Controller. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-q6p2-w2vg-fffg/GHSA-q6p2-w2vg-fffg.json b/advisories/unreviewed/2022/01/GHSA-q6p2-w2vg-fffg/GHSA-q6p2-w2vg-fffg.json index 64f4749059a..b35e0bc97f3 100644 --- a/advisories/unreviewed/2022/01/GHSA-q6p2-w2vg-fffg/GHSA-q6p2-w2vg-fffg.json +++ b/advisories/unreviewed/2022/01/GHSA-q6p2-w2vg-fffg/GHSA-q6p2-w2vg-fffg.json @@ -7,12 +7,8 @@ "CVE-2022-21261" ], "details": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-qfg9-844v-vfhw/GHSA-qfg9-844v-vfhw.json b/advisories/unreviewed/2022/01/GHSA-qfg9-844v-vfhw/GHSA-qfg9-844v-vfhw.json index ff429d62346..bc40916e5f1 100644 --- a/advisories/unreviewed/2022/01/GHSA-qfg9-844v-vfhw/GHSA-qfg9-844v-vfhw.json +++ b/advisories/unreviewed/2022/01/GHSA-qfg9-844v-vfhw/GHSA-qfg9-844v-vfhw.json @@ -7,12 +7,8 @@ "CVE-2022-21284" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-qj27-c86p-rvm3/GHSA-qj27-c86p-rvm3.json b/advisories/unreviewed/2022/01/GHSA-qj27-c86p-rvm3/GHSA-qj27-c86p-rvm3.json index 9cfb5b6916f..ddddb1ee575 100644 --- a/advisories/unreviewed/2022/01/GHSA-qj27-c86p-rvm3/GHSA-qj27-c86p-rvm3.json +++ b/advisories/unreviewed/2022/01/GHSA-qj27-c86p-rvm3/GHSA-qj27-c86p-rvm3.json @@ -7,12 +7,8 @@ "CVE-2022-21388" ], "details": "Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications Applications (component: On Premise Install). Supported versions that are affected are 12.0.0.3.0 and 12.0.0.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Communications Pricing Design Center executes to compromise Oracle Communications Pricing Design Center. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Communications Pricing Design Center accessible data. CVSS 3.1 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-qmqf-cwh8-932m/GHSA-qmqf-cwh8-932m.json b/advisories/unreviewed/2022/01/GHSA-qmqf-cwh8-932m/GHSA-qmqf-cwh8-932m.json index d4f107220ef..934837ff166 100644 --- a/advisories/unreviewed/2022/01/GHSA-qmqf-cwh8-932m/GHSA-qmqf-cwh8-932m.json +++ b/advisories/unreviewed/2022/01/GHSA-qmqf-cwh8-932m/GHSA-qmqf-cwh8-932m.json @@ -7,12 +7,8 @@ "CVE-2022-21292" ], "details": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-qmvm-6g77-jj45/GHSA-qmvm-6g77-jj45.json b/advisories/unreviewed/2022/01/GHSA-qmvm-6g77-jj45/GHSA-qmvm-6g77-jj45.json index 532c8551be7..3f9e50cba14 100644 --- a/advisories/unreviewed/2022/01/GHSA-qmvm-6g77-jj45/GHSA-qmvm-6g77-jj45.json +++ b/advisories/unreviewed/2022/01/GHSA-qmvm-6g77-jj45/GHSA-qmvm-6g77-jj45.json @@ -7,12 +7,8 @@ "CVE-2022-21367" ], "details": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling). Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-qrmf-4jrr-67qm/GHSA-qrmf-4jrr-67qm.json b/advisories/unreviewed/2022/01/GHSA-qrmf-4jrr-67qm/GHSA-qrmf-4jrr-67qm.json index d304f266d94..b3e9839acc5 100644 --- a/advisories/unreviewed/2022/01/GHSA-qrmf-4jrr-67qm/GHSA-qrmf-4jrr-67qm.json +++ b/advisories/unreviewed/2022/01/GHSA-qrmf-4jrr-67qm/GHSA-qrmf-4jrr-67qm.json @@ -7,12 +7,8 @@ "CVE-2022-21260" ], "details": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-qrw2-26cv-cw2p/GHSA-qrw2-26cv-cw2p.json b/advisories/unreviewed/2022/01/GHSA-qrw2-26cv-cw2p/GHSA-qrw2-26cv-cw2p.json index f54c7b4d9b7..b359fcbf74d 100644 --- a/advisories/unreviewed/2022/01/GHSA-qrw2-26cv-cw2p/GHSA-qrw2-26cv-cw2p.json +++ b/advisories/unreviewed/2022/01/GHSA-qrw2-26cv-cw2p/GHSA-qrw2-26cv-cw2p.json @@ -7,12 +7,8 @@ "CVE-2022-21374" ], "details": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-qvc8-c4vp-272q/GHSA-qvc8-c4vp-272q.json b/advisories/unreviewed/2022/01/GHSA-qvc8-c4vp-272q/GHSA-qvc8-c4vp-272q.json index 47378008cd2..2fc2adec75b 100644 --- a/advisories/unreviewed/2022/01/GHSA-qvc8-c4vp-272q/GHSA-qvc8-c4vp-272q.json +++ b/advisories/unreviewed/2022/01/GHSA-qvc8-c4vp-272q/GHSA-qvc8-c4vp-272q.json @@ -7,12 +7,8 @@ "CVE-2022-21376" ], "details": "Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2 and 20.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Portfolio Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Primavera Portfolio Management accessible data as well as unauthorized read access to a subset of Primavera Portfolio Management accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-r23c-7gfg-x33f/GHSA-r23c-7gfg-x33f.json b/advisories/unreviewed/2022/01/GHSA-r23c-7gfg-x33f/GHSA-r23c-7gfg-x33f.json index f5cf7cb68b6..412b651cf62 100644 --- a/advisories/unreviewed/2022/01/GHSA-r23c-7gfg-x33f/GHSA-r23c-7gfg-x33f.json +++ b/advisories/unreviewed/2022/01/GHSA-r23c-7gfg-x33f/GHSA-r23c-7gfg-x33f.json @@ -7,12 +7,8 @@ "CVE-2022-21345" ], "details": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.58 and 8.59. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-rf89-8vgw-h4hh/GHSA-rf89-8vgw-h4hh.json b/advisories/unreviewed/2022/01/GHSA-rf89-8vgw-h4hh/GHSA-rf89-8vgw-h4hh.json index 573cfeec692..d6311b40339 100644 --- a/advisories/unreviewed/2022/01/GHSA-rf89-8vgw-h4hh/GHSA-rf89-8vgw-h4hh.json +++ b/advisories/unreviewed/2022/01/GHSA-rf89-8vgw-h4hh/GHSA-rf89-8vgw-h4hh.json @@ -7,12 +7,8 @@ "CVE-2022-21288" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-rhrw-cf9w-fwg8/GHSA-rhrw-cf9w-fwg8.json b/advisories/unreviewed/2022/01/GHSA-rhrw-cf9w-fwg8/GHSA-rhrw-cf9w-fwg8.json index e2b86fd5b43..f3882cab476 100644 --- a/advisories/unreviewed/2022/01/GHSA-rhrw-cf9w-fwg8/GHSA-rhrw-cf9w-fwg8.json +++ b/advisories/unreviewed/2022/01/GHSA-rhrw-cf9w-fwg8/GHSA-rhrw-cf9w-fwg8.json @@ -7,12 +7,8 @@ "CVE-2022-21307" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-rrqg-5qjj-6p6p/GHSA-rrqg-5qjj-6p6p.json b/advisories/unreviewed/2022/01/GHSA-rrqg-5qjj-6p6p/GHSA-rrqg-5qjj-6p6p.json index a543cb54348..18b249953d4 100644 --- a/advisories/unreviewed/2022/01/GHSA-rrqg-5qjj-6p6p/GHSA-rrqg-5qjj-6p6p.json +++ b/advisories/unreviewed/2022/01/GHSA-rrqg-5qjj-6p6p/GHSA-rrqg-5qjj-6p6p.json @@ -7,12 +7,8 @@ "CVE-2022-21295" ], "details": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.32. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. Note: This vulnerability applies to Windows systems only. CVSS 3.1 Base Score 3.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-rv7v-2hvh-4x84/GHSA-rv7v-2hvh-4x84.json b/advisories/unreviewed/2022/01/GHSA-rv7v-2hvh-4x84/GHSA-rv7v-2hvh-4x84.json index 8ff9f414879..8d90c162b67 100644 --- a/advisories/unreviewed/2022/01/GHSA-rv7v-2hvh-4x84/GHSA-rv7v-2hvh-4x84.json +++ b/advisories/unreviewed/2022/01/GHSA-rv7v-2hvh-4x84/GHSA-rv7v-2hvh-4x84.json @@ -7,12 +7,8 @@ "CVE-2022-21370" ], "details": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-rvcw-fpwr-r263/GHSA-rvcw-fpwr-r263.json b/advisories/unreviewed/2022/01/GHSA-rvcw-fpwr-r263/GHSA-rvcw-fpwr-r263.json index e0e7dba639c..6835fb7dab2 100644 --- a/advisories/unreviewed/2022/01/GHSA-rvcw-fpwr-r263/GHSA-rvcw-fpwr-r263.json +++ b/advisories/unreviewed/2022/01/GHSA-rvcw-fpwr-r263/GHSA-rvcw-fpwr-r263.json @@ -7,12 +7,8 @@ "CVE-2021-39946" ], "details": "Improper neutralization of user input in GitLab CE/EE versions 14.3 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowed an attacker to exploit XSS by abusing the generation of the HTML code related to emojis", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-v32q-7ccf-r3m7/GHSA-v32q-7ccf-r3m7.json b/advisories/unreviewed/2022/01/GHSA-v32q-7ccf-r3m7/GHSA-v32q-7ccf-r3m7.json index eac20aeb0fb..4e8e64e4726 100644 --- a/advisories/unreviewed/2022/01/GHSA-v32q-7ccf-r3m7/GHSA-v32q-7ccf-r3m7.json +++ b/advisories/unreviewed/2022/01/GHSA-v32q-7ccf-r3m7/GHSA-v32q-7ccf-r3m7.json @@ -7,12 +7,8 @@ "CVE-2022-21398" ], "details": "Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Communications Operations Monitor. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Communications Operations Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Operations Monitor accessible data as well as unauthorized read access to a subset of Oracle Communications Operations Monitor accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-v69x-m536-gjm5/GHSA-v69x-m536-gjm5.json b/advisories/unreviewed/2022/01/GHSA-v69x-m536-gjm5/GHSA-v69x-m536-gjm5.json index 2477856c129..69804c4b95d 100644 --- a/advisories/unreviewed/2022/01/GHSA-v69x-m536-gjm5/GHSA-v69x-m536-gjm5.json +++ b/advisories/unreviewed/2022/01/GHSA-v69x-m536-gjm5/GHSA-v69x-m536-gjm5.json @@ -7,12 +7,8 @@ "CVE-2022-23045" ], "details": "PhpIPAM v1.4.4 allows an authenticated admin user to inject persistent JavaScript code inside the \"Site title\" parameter while updating the site settings. The \"Site title\" setting is injected in several locations which triggers the XSS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-v96x-wv3j-wfh5/GHSA-v96x-wv3j-wfh5.json b/advisories/unreviewed/2022/01/GHSA-v96x-wv3j-wfh5/GHSA-v96x-wv3j-wfh5.json index 33df6a70b2c..65a13e1be2d 100644 --- a/advisories/unreviewed/2022/01/GHSA-v96x-wv3j-wfh5/GHSA-v96x-wv3j-wfh5.json +++ b/advisories/unreviewed/2022/01/GHSA-v96x-wv3j-wfh5/GHSA-v96x-wv3j-wfh5.json @@ -7,12 +7,8 @@ "CVE-2022-21379" ], "details": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-v9xg-xqj3-g2w8/GHSA-v9xg-xqj3-g2w8.json b/advisories/unreviewed/2022/01/GHSA-v9xg-xqj3-g2w8/GHSA-v9xg-xqj3-g2w8.json index 99ea8367db5..957f7568ca9 100644 --- a/advisories/unreviewed/2022/01/GHSA-v9xg-xqj3-g2w8/GHSA-v9xg-xqj3-g2w8.json +++ b/advisories/unreviewed/2022/01/GHSA-v9xg-xqj3-g2w8/GHSA-v9xg-xqj3-g2w8.json @@ -7,12 +7,8 @@ "CVE-2022-22769" ], "details": "The Web server component of TIBCO Software Inc.'s TIBCO EBX, TIBCO EBX, TIBCO EBX, TIBCO EBX Add-ons, TIBCO EBX Add-ons, TIBCO EBX Add-ons, and TIBCO Product and Service Catalog powered by TIBCO EBX contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute Stored Cross Site Scripting (XSS) on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.8.124 and below, TIBCO EBX: versions 5.9.3, 5.9.4, 5.9.5, 5.9.6, 5.9.7, 5.9.8, 5.9.9, 5.9.10, 5.9.11, 5.9.12, 5.9.13, 5.9.14, and 5.9.15, TIBCO EBX: versions 6.0.0, 6.0.1, 6.0.2, and 6.0.3, TIBCO EBX Add-ons: versions 3.20.18 and below, TIBCO EBX Add-ons: versions 4.1.0, 4.2.0, 4.2.1, 4.2.2, 4.3.0, 4.3.1, 4.3.2, 4.3.3, 4.3.4, 4.4.0, 4.4.1, 4.4.2, 4.4.3, 4.5.0, 4.5.1, 4.5.2, 4.5.3, 4.5.4, 4.5.5, and 4.5.6, TIBCO EBX Add-ons: versions 5.0.0, 5.0.1, 5.1.0, 5.1.1, and 5.2.0, and TIBCO Product and Service Catalog powered by TIBCO EBX: versions 1.1.0 and below.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-vc6g-q6vr-f9m9/GHSA-vc6g-q6vr-f9m9.json b/advisories/unreviewed/2022/01/GHSA-vc6g-q6vr-f9m9/GHSA-vc6g-q6vr-f9m9.json index 55dd504438d..3d6f08df78f 100644 --- a/advisories/unreviewed/2022/01/GHSA-vc6g-q6vr-f9m9/GHSA-vc6g-q6vr-f9m9.json +++ b/advisories/unreviewed/2022/01/GHSA-vc6g-q6vr-f9m9/GHSA-vc6g-q6vr-f9m9.json @@ -7,12 +7,8 @@ "CVE-2022-21350" ], "details": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-vcw5-w86r-94fr/GHSA-vcw5-w86r-94fr.json b/advisories/unreviewed/2022/01/GHSA-vcw5-w86r-94fr/GHSA-vcw5-w86r-94fr.json index 03832c4fd4d..59f89656c5d 100644 --- a/advisories/unreviewed/2022/01/GHSA-vcw5-w86r-94fr/GHSA-vcw5-w86r-94fr.json +++ b/advisories/unreviewed/2022/01/GHSA-vcw5-w86r-94fr/GHSA-vcw5-w86r-94fr.json @@ -7,12 +7,8 @@ "CVE-2022-21344" ], "details": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.36 and prior and 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-vgcv-w26j-vmjc/GHSA-vgcv-w26j-vmjc.json b/advisories/unreviewed/2022/01/GHSA-vgcv-w26j-vmjc/GHSA-vgcv-w26j-vmjc.json index ac1ad41b5d7..7ecc2f76af4 100644 --- a/advisories/unreviewed/2022/01/GHSA-vgcv-w26j-vmjc/GHSA-vgcv-w26j-vmjc.json +++ b/advisories/unreviewed/2022/01/GHSA-vgcv-w26j-vmjc/GHSA-vgcv-w26j-vmjc.json @@ -7,12 +7,8 @@ "CVE-2022-21313" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-vgm4-j3hm-j4vp/GHSA-vgm4-j3hm-j4vp.json b/advisories/unreviewed/2022/01/GHSA-vgm4-j3hm-j4vp/GHSA-vgm4-j3hm-j4vp.json index 06018d6174d..161840c909c 100644 --- a/advisories/unreviewed/2022/01/GHSA-vgm4-j3hm-j4vp/GHSA-vgm4-j3hm-j4vp.json +++ b/advisories/unreviewed/2022/01/GHSA-vgm4-j3hm-j4vp/GHSA-vgm4-j3hm-j4vp.json @@ -7,12 +7,8 @@ "CVE-2022-21364" ], "details": "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Weblogic). Supported versions that are affected are 8.57, 8.58 and 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-vh4w-rxcq-jxpw/GHSA-vh4w-rxcq-jxpw.json b/advisories/unreviewed/2022/01/GHSA-vh4w-rxcq-jxpw/GHSA-vh4w-rxcq-jxpw.json index 66a15d60ec8..efae8e4ba2e 100644 --- a/advisories/unreviewed/2022/01/GHSA-vh4w-rxcq-jxpw/GHSA-vh4w-rxcq-jxpw.json +++ b/advisories/unreviewed/2022/01/GHSA-vh4w-rxcq-jxpw/GHSA-vh4w-rxcq-jxpw.json @@ -7,12 +7,8 @@ "CVE-2022-21315" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-vj22-hm5r-hfp9/GHSA-vj22-hm5r-hfp9.json b/advisories/unreviewed/2022/01/GHSA-vj22-hm5r-hfp9/GHSA-vj22-hm5r-hfp9.json index 9c33b64ef5e..429d4e2df51 100644 --- a/advisories/unreviewed/2022/01/GHSA-vj22-hm5r-hfp9/GHSA-vj22-hm5r-hfp9.json +++ b/advisories/unreviewed/2022/01/GHSA-vj22-hm5r-hfp9/GHSA-vj22-hm5r-hfp9.json @@ -7,12 +7,8 @@ "CVE-2022-21324" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Cluster accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Cluster. CVSS 3.1 Base Score 2.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-vv48-7fmc-wjww/GHSA-vv48-7fmc-wjww.json b/advisories/unreviewed/2022/01/GHSA-vv48-7fmc-wjww/GHSA-vv48-7fmc-wjww.json index 8fb8816f241..689d067ee38 100644 --- a/advisories/unreviewed/2022/01/GHSA-vv48-7fmc-wjww/GHSA-vv48-7fmc-wjww.json +++ b/advisories/unreviewed/2022/01/GHSA-vv48-7fmc-wjww/GHSA-vv48-7fmc-wjww.json @@ -7,12 +7,8 @@ "CVE-2022-21336" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-w2gf-8f8h-g7h5/GHSA-w2gf-8f8h-g7h5.json b/advisories/unreviewed/2022/01/GHSA-w2gf-8f8h-g7h5/GHSA-w2gf-8f8h-g7h5.json index f4fdc60dbfa..b68b466dac9 100644 --- a/advisories/unreviewed/2022/01/GHSA-w2gf-8f8h-g7h5/GHSA-w2gf-8f8h-g7h5.json +++ b/advisories/unreviewed/2022/01/GHSA-w2gf-8f8h-g7h5/GHSA-w2gf-8f8h-g7h5.json @@ -7,12 +7,8 @@ "CVE-2022-21348" ], "details": "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-wqjf-vxjr-vfq9/GHSA-wqjf-vxjr-vfq9.json b/advisories/unreviewed/2022/01/GHSA-wqjf-vxjr-vfq9/GHSA-wqjf-vxjr-vfq9.json index d3d8e805d70..c748a3a1082 100644 --- a/advisories/unreviewed/2022/01/GHSA-wqjf-vxjr-vfq9/GHSA-wqjf-vxjr-vfq9.json +++ b/advisories/unreviewed/2022/01/GHSA-wqjf-vxjr-vfq9/GHSA-wqjf-vxjr-vfq9.json @@ -7,12 +7,8 @@ "CVE-2022-21316" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-wvvr-pwf3-q292/GHSA-wvvr-pwf3-q292.json b/advisories/unreviewed/2022/01/GHSA-wvvr-pwf3-q292/GHSA-wvvr-pwf3-q292.json index 415aa536594..8fb76ed1996 100644 --- a/advisories/unreviewed/2022/01/GHSA-wvvr-pwf3-q292/GHSA-wvvr-pwf3-q292.json +++ b/advisories/unreviewed/2022/01/GHSA-wvvr-pwf3-q292/GHSA-wvvr-pwf3-q292.json @@ -7,12 +7,8 @@ "CVE-2021-44299" ], "details": "A reflected cross-site scripting (XSS) vulnerability in \\lib\\packages\\themes\\themes.php of Navigate CMS v2.9.4 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-x3q3-x2cr-g497/GHSA-x3q3-x2cr-g497.json b/advisories/unreviewed/2022/01/GHSA-x3q3-x2cr-g497/GHSA-x3q3-x2cr-g497.json index 3b7c148328a..76d0af80004 100644 --- a/advisories/unreviewed/2022/01/GHSA-x3q3-x2cr-g497/GHSA-x3q3-x2cr-g497.json +++ b/advisories/unreviewed/2022/01/GHSA-x3q3-x2cr-g497/GHSA-x3q3-x2cr-g497.json @@ -7,12 +7,8 @@ "CVE-2022-21347" ], "details": "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-x554-xr7w-2cqr/GHSA-x554-xr7w-2cqr.json b/advisories/unreviewed/2022/01/GHSA-x554-xr7w-2cqr/GHSA-x554-xr7w-2cqr.json index 9f4e8cdf3b5..7b930c04db7 100644 --- a/advisories/unreviewed/2022/01/GHSA-x554-xr7w-2cqr/GHSA-x554-xr7w-2cqr.json +++ b/advisories/unreviewed/2022/01/GHSA-x554-xr7w-2cqr/GHSA-x554-xr7w-2cqr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-x63x-qrg6-ggcj/GHSA-x63x-qrg6-ggcj.json b/advisories/unreviewed/2022/01/GHSA-x63x-qrg6-ggcj/GHSA-x63x-qrg6-ggcj.json index 5282f66e365..421061b6f35 100644 --- a/advisories/unreviewed/2022/01/GHSA-x63x-qrg6-ggcj/GHSA-x63x-qrg6-ggcj.json +++ b/advisories/unreviewed/2022/01/GHSA-x63x-qrg6-ggcj/GHSA-x63x-qrg6-ggcj.json @@ -7,12 +7,8 @@ "CVE-2021-38785" ], "details": "There is a NULL pointer deference in the Allwinner R818 SoC Android Q SDK V1.0 camera driver /dev/cedar_dev that could use the ioctl cmd IOCTL_GET_IOMMU_ADDR to cause a system crash.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-x866-8hmj-26jc/GHSA-x866-8hmj-26jc.json b/advisories/unreviewed/2022/01/GHSA-x866-8hmj-26jc/GHSA-x866-8hmj-26jc.json index 135b65f1640..307df44b7bf 100644 --- a/advisories/unreviewed/2022/01/GHSA-x866-8hmj-26jc/GHSA-x866-8hmj-26jc.json +++ b/advisories/unreviewed/2022/01/GHSA-x866-8hmj-26jc/GHSA-x866-8hmj-26jc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-xcj7-g4qj-qpph/GHSA-xcj7-g4qj-qpph.json b/advisories/unreviewed/2022/01/GHSA-xcj7-g4qj-qpph/GHSA-xcj7-g4qj-qpph.json index 4e66964ac32..9f3eb58f89a 100644 --- a/advisories/unreviewed/2022/01/GHSA-xcj7-g4qj-qpph/GHSA-xcj7-g4qj-qpph.json +++ b/advisories/unreviewed/2022/01/GHSA-xcj7-g4qj-qpph/GHSA-xcj7-g4qj-qpph.json @@ -7,12 +7,8 @@ "CVE-2022-21329" ], "details": "Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-xj5g-f6fv-2jrq/GHSA-xj5g-f6fv-2jrq.json b/advisories/unreviewed/2022/01/GHSA-xj5g-f6fv-2jrq/GHSA-xj5g-f6fv-2jrq.json index 544a8db0778..bc0b4d1ffa0 100644 --- a/advisories/unreviewed/2022/01/GHSA-xj5g-f6fv-2jrq/GHSA-xj5g-f6fv-2jrq.json +++ b/advisories/unreviewed/2022/01/GHSA-xj5g-f6fv-2jrq/GHSA-xj5g-f6fv-2jrq.json @@ -7,12 +7,8 @@ "CVE-2021-46104" ], "details": "An issue was discovered in webp_server_go 0.4.0. There is a directory traversal vulnerability that can read arbitrary file information on the server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-xqfp-hvwj-h2xc/GHSA-xqfp-hvwj-h2xc.json b/advisories/unreviewed/2022/01/GHSA-xqfp-hvwj-h2xc/GHSA-xqfp-hvwj-h2xc.json index 5acf7d4b6ac..ef0e7661122 100644 --- a/advisories/unreviewed/2022/01/GHSA-xqfp-hvwj-h2xc/GHSA-xqfp-hvwj-h2xc.json +++ b/advisories/unreviewed/2022/01/GHSA-xqfp-hvwj-h2xc/GHSA-xqfp-hvwj-h2xc.json @@ -7,12 +7,8 @@ "CVE-2022-21263" ], "details": "Vulnerability in the Oracle Solaris product of Oracle Systems (component: Fault Management Architecture). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Solaris accessible data as well as unauthorized read access to a subset of Oracle Solaris accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Solaris. CVSS 3.1 Base Score 4.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/01/GHSA-xrq4-mrfw-wv2w/GHSA-xrq4-mrfw-wv2w.json b/advisories/unreviewed/2022/01/GHSA-xrq4-mrfw-wv2w/GHSA-xrq4-mrfw-wv2w.json index f9a723d7ee5..bbfc58ea7ac 100644 --- a/advisories/unreviewed/2022/01/GHSA-xrq4-mrfw-wv2w/GHSA-xrq4-mrfw-wv2w.json +++ b/advisories/unreviewed/2022/01/GHSA-xrq4-mrfw-wv2w/GHSA-xrq4-mrfw-wv2w.json @@ -7,12 +7,8 @@ "CVE-2022-21403" ], "details": "Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine). Supported versions that are affected are 3.4, 4.2, 4.3, 4.4 and 5.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Communications Operations Monitor. While the vulnerability is in Oracle Communications Operations Monitor, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Communications Operations Monitor accessible data as well as unauthorized read access to a subset of Oracle Communications Operations Monitor accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Communications Operations Monitor. CVSS 3.1 Base Score 6.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/02/GHSA-gf53-pwvp-9h97/GHSA-gf53-pwvp-9h97.json b/advisories/unreviewed/2022/02/GHSA-gf53-pwvp-9h97/GHSA-gf53-pwvp-9h97.json index 5dbd8c8193d..ccf6c825089 100644 --- a/advisories/unreviewed/2022/02/GHSA-gf53-pwvp-9h97/GHSA-gf53-pwvp-9h97.json +++ b/advisories/unreviewed/2022/02/GHSA-gf53-pwvp-9h97/GHSA-gf53-pwvp-9h97.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2284-83c7-w3qm/GHSA-2284-83c7-w3qm.json b/advisories/unreviewed/2022/05/GHSA-2284-83c7-w3qm/GHSA-2284-83c7-w3qm.json index 536be8a1139..9f6800e825e 100644 --- a/advisories/unreviewed/2022/05/GHSA-2284-83c7-w3qm/GHSA-2284-83c7-w3qm.json +++ b/advisories/unreviewed/2022/05/GHSA-2284-83c7-w3qm/GHSA-2284-83c7-w3qm.json @@ -7,12 +7,8 @@ "CVE-2014-4127" ], "details": "Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2322-wmrw-5cf3/GHSA-2322-wmrw-5cf3.json b/advisories/unreviewed/2022/05/GHSA-2322-wmrw-5cf3/GHSA-2322-wmrw-5cf3.json index e86785c78fa..eea494e858e 100644 --- a/advisories/unreviewed/2022/05/GHSA-2322-wmrw-5cf3/GHSA-2322-wmrw-5cf3.json +++ b/advisories/unreviewed/2022/05/GHSA-2322-wmrw-5cf3/GHSA-2322-wmrw-5cf3.json @@ -7,12 +7,8 @@ "CVE-2013-3150" ], "details": "Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3145.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-25q4-2c75-g7c9/GHSA-25q4-2c75-g7c9.json b/advisories/unreviewed/2022/05/GHSA-25q4-2c75-g7c9/GHSA-25q4-2c75-g7c9.json index e10400e9b81..0d787fae664 100644 --- a/advisories/unreviewed/2022/05/GHSA-25q4-2c75-g7c9/GHSA-25q4-2c75-g7c9.json +++ b/advisories/unreviewed/2022/05/GHSA-25q4-2c75-g7c9/GHSA-25q4-2c75-g7c9.json @@ -7,12 +7,8 @@ "CVE-2014-2798" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2789, CVE-2014-2795, and CVE-2014-2804.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-25q7-qx3r-cw46/GHSA-25q7-qx3r-cw46.json b/advisories/unreviewed/2022/05/GHSA-25q7-qx3r-cw46/GHSA-25q7-qx3r-cw46.json index ff9c0d0fa33..98a9de421ac 100644 --- a/advisories/unreviewed/2022/05/GHSA-25q7-qx3r-cw46/GHSA-25q7-qx3r-cw46.json +++ b/advisories/unreviewed/2022/05/GHSA-25q7-qx3r-cw46/GHSA-25q7-qx3r-cw46.json @@ -7,12 +7,8 @@ "CVE-2014-4079" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-27g2-9rj4-4jm7/GHSA-27g2-9rj4-4jm7.json b/advisories/unreviewed/2022/05/GHSA-27g2-9rj4-4jm7/GHSA-27g2-9rj4-4jm7.json index 1136b792d63..965225942f8 100644 --- a/advisories/unreviewed/2022/05/GHSA-27g2-9rj4-4jm7/GHSA-27g2-9rj4-4jm7.json +++ b/advisories/unreviewed/2022/05/GHSA-27g2-9rj4-4jm7/GHSA-27g2-9rj4-4jm7.json @@ -7,12 +7,8 @@ "CVE-2012-3107" ], "details": "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1766, CVE-2012-1767, CVE-2012-1769, CVE-2012-1770, CVE-2012-1771, CVE-2012-1772, CVE-2012-1773, CVE-2012-3106, CVE-2012-3108, and CVE-2012-3110.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-28jh-gp7h-pj6v/GHSA-28jh-gp7h-pj6v.json b/advisories/unreviewed/2022/05/GHSA-28jh-gp7h-pj6v/GHSA-28jh-gp7h-pj6v.json index 1619c1b45e6..e2b50072cba 100644 --- a/advisories/unreviewed/2022/05/GHSA-28jh-gp7h-pj6v/GHSA-28jh-gp7h-pj6v.json +++ b/advisories/unreviewed/2022/05/GHSA-28jh-gp7h-pj6v/GHSA-28jh-gp7h-pj6v.json @@ -7,12 +7,8 @@ "CVE-2014-0277" ], "details": "Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0278 and CVE-2014-0279.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-28qc-xv4f-hpq9/GHSA-28qc-xv4f-hpq9.json b/advisories/unreviewed/2022/05/GHSA-28qc-xv4f-hpq9/GHSA-28qc-xv4f-hpq9.json index 3fa1a68b91b..7dbeb2c010b 100644 --- a/advisories/unreviewed/2022/05/GHSA-28qc-xv4f-hpq9/GHSA-28qc-xv4f-hpq9.json +++ b/advisories/unreviewed/2022/05/GHSA-28qc-xv4f-hpq9/GHSA-28qc-xv4f-hpq9.json @@ -7,12 +7,8 @@ "CVE-2015-0026" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-0017, CVE-2015-0020, CVE-2015-0022, CVE-2015-0030, CVE-2015-0031, CVE-2015-0036, and CVE-2015-0041.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-29wg-wxfh-x4cx/GHSA-29wg-wxfh-x4cx.json b/advisories/unreviewed/2022/05/GHSA-29wg-wxfh-x4cx/GHSA-29wg-wxfh-x4cx.json index 687aedac9d8..0449a9aa921 100644 --- a/advisories/unreviewed/2022/05/GHSA-29wg-wxfh-x4cx/GHSA-29wg-wxfh-x4cx.json +++ b/advisories/unreviewed/2022/05/GHSA-29wg-wxfh-x4cx/GHSA-29wg-wxfh-x4cx.json @@ -7,12 +7,8 @@ "CVE-2014-1805" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1773, CVE-2014-1783, CVE-2014-1784, CVE-2014-1786, CVE-2014-1795, CVE-2014-2758, CVE-2014-2759, CVE-2014-2765, CVE-2014-2766, and CVE-2014-2775.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2ccx-fj86-xfj9/GHSA-2ccx-fj86-xfj9.json b/advisories/unreviewed/2022/05/GHSA-2ccx-fj86-xfj9/GHSA-2ccx-fj86-xfj9.json index 1402e083165..90faf139ceb 100644 --- a/advisories/unreviewed/2022/05/GHSA-2ccx-fj86-xfj9/GHSA-2ccx-fj86-xfj9.json +++ b/advisories/unreviewed/2022/05/GHSA-2ccx-fj86-xfj9/GHSA-2ccx-fj86-xfj9.json @@ -7,12 +7,8 @@ "CVE-2014-0268" ], "details": "Microsoft Internet Explorer 8 through 11 does not properly restrict file installation and registry-key creation, which allows remote attackers to bypass the Mandatory Integrity Control protection mechanism via a crafted web site, aka \"Internet Explorer Elevation of Privilege Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2cmm-c784-724v/GHSA-2cmm-c784-724v.json b/advisories/unreviewed/2022/05/GHSA-2cmm-c784-724v/GHSA-2cmm-c784-724v.json index 817c0dc968a..1f17a96bfe5 100644 --- a/advisories/unreviewed/2022/05/GHSA-2cmm-c784-724v/GHSA-2cmm-c784-724v.json +++ b/advisories/unreviewed/2022/05/GHSA-2cmm-c784-724v/GHSA-2cmm-c784-724v.json @@ -7,12 +7,8 @@ "CVE-2015-0050" ], "details": "Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-8967 and CVE-2015-0044.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2fv6-mw2r-27q6/GHSA-2fv6-mw2r-27q6.json b/advisories/unreviewed/2022/05/GHSA-2fv6-mw2r-27q6/GHSA-2fv6-mw2r-27q6.json index 7361a1aab11..bf5793fcc9b 100644 --- a/advisories/unreviewed/2022/05/GHSA-2fv6-mw2r-27q6/GHSA-2fv6-mw2r-27q6.json +++ b/advisories/unreviewed/2022/05/GHSA-2fv6-mw2r-27q6/GHSA-2fv6-mw2r-27q6.json @@ -7,12 +7,8 @@ "CVE-2014-4110" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, and CVE-2014-4111.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2gc6-9pfx-xpg3/GHSA-2gc6-9pfx-xpg3.json b/advisories/unreviewed/2022/05/GHSA-2gc6-9pfx-xpg3/GHSA-2gc6-9pfx-xpg3.json index 732e0fbd013..b2697674a25 100644 --- a/advisories/unreviewed/2022/05/GHSA-2gc6-9pfx-xpg3/GHSA-2gc6-9pfx-xpg3.json +++ b/advisories/unreviewed/2022/05/GHSA-2gc6-9pfx-xpg3/GHSA-2gc6-9pfx-xpg3.json @@ -7,12 +7,8 @@ "CVE-2015-0027" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-0035, CVE-2015-0039, CVE-2015-0052, and CVE-2015-0068.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2grr-frxh-j4fg/GHSA-2grr-frxh-j4fg.json b/advisories/unreviewed/2022/05/GHSA-2grr-frxh-j4fg/GHSA-2grr-frxh-j4fg.json index 0d36d3e5472..20e711063a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-2grr-frxh-j4fg/GHSA-2grr-frxh-j4fg.json +++ b/advisories/unreviewed/2022/05/GHSA-2grr-frxh-j4fg/GHSA-2grr-frxh-j4fg.json @@ -7,12 +7,8 @@ "CVE-2014-2782" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1773, CVE-2014-1783, CVE-2014-1784, CVE-2014-1786, CVE-2014-1795, CVE-2014-1805, CVE-2014-2758, CVE-2014-2759, CVE-2014-2765, CVE-2014-2766, and CVE-2014-2775.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2gvr-pmm6-8pmw/GHSA-2gvr-pmm6-8pmw.json b/advisories/unreviewed/2022/05/GHSA-2gvr-pmm6-8pmw/GHSA-2gvr-pmm6-8pmw.json index e6ea21cc29f..dae781f9a2f 100644 --- a/advisories/unreviewed/2022/05/GHSA-2gvr-pmm6-8pmw/GHSA-2gvr-pmm6-8pmw.json +++ b/advisories/unreviewed/2022/05/GHSA-2gvr-pmm6-8pmw/GHSA-2gvr-pmm6-8pmw.json @@ -7,12 +7,8 @@ "CVE-2014-2784" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-4051.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2hw3-28v7-q78p/GHSA-2hw3-28v7-q78p.json b/advisories/unreviewed/2022/05/GHSA-2hw3-28v7-q78p/GHSA-2hw3-28v7-q78p.json index fd5363964bc..9f296c57c71 100644 --- a/advisories/unreviewed/2022/05/GHSA-2hw3-28v7-q78p/GHSA-2hw3-28v7-q78p.json +++ b/advisories/unreviewed/2022/05/GHSA-2hw3-28v7-q78p/GHSA-2hw3-28v7-q78p.json @@ -7,12 +7,8 @@ "CVE-2011-1891" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters in a request to a script, aka \"Contact Details Reflected XSS Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2jqf-jwg5-2mm3/GHSA-2jqf-jwg5-2mm3.json b/advisories/unreviewed/2022/05/GHSA-2jqf-jwg5-2mm3/GHSA-2jqf-jwg5-2mm3.json index 174df71fbc6..05e9ed6d92c 100644 --- a/advisories/unreviewed/2022/05/GHSA-2jqf-jwg5-2mm3/GHSA-2jqf-jwg5-2mm3.json +++ b/advisories/unreviewed/2022/05/GHSA-2jqf-jwg5-2mm3/GHSA-2jqf-jwg5-2mm3.json @@ -7,12 +7,8 @@ "CVE-2013-1335" ], "details": "Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code via crafted shape data in a Word document, aka \"Word Shape Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2jxr-423m-cx4g/GHSA-2jxr-423m-cx4g.json b/advisories/unreviewed/2022/05/GHSA-2jxr-423m-cx4g/GHSA-2jxr-423m-cx4g.json index 07b89932ae6..8fe29d44e6a 100644 --- a/advisories/unreviewed/2022/05/GHSA-2jxr-423m-cx4g/GHSA-2jxr-423m-cx4g.json +++ b/advisories/unreviewed/2022/05/GHSA-2jxr-423m-cx4g/GHSA-2jxr-423m-cx4g.json @@ -7,12 +7,8 @@ "CVE-2013-3114" ], "details": "Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3119.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2m9g-77jc-r67p/GHSA-2m9g-77jc-r67p.json b/advisories/unreviewed/2022/05/GHSA-2m9g-77jc-r67p/GHSA-2m9g-77jc-r67p.json index b6a7857baf6..8028f952f98 100644 --- a/advisories/unreviewed/2022/05/GHSA-2m9g-77jc-r67p/GHSA-2m9g-77jc-r67p.json +++ b/advisories/unreviewed/2022/05/GHSA-2m9g-77jc-r67p/GHSA-2m9g-77jc-r67p.json @@ -7,12 +7,8 @@ "CVE-2014-1797" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1772, CVE-2014-1780, CVE-2014-1794, CVE-2014-1802, CVE-2014-2756, CVE-2014-2763, CVE-2014-2764, CVE-2014-2769, and CVE-2014-2771.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2q68-fvv9-4v8c/GHSA-2q68-fvv9-4v8c.json b/advisories/unreviewed/2022/05/GHSA-2q68-fvv9-4v8c/GHSA-2q68-fvv9-4v8c.json index d9993fabd1c..03706cd65df 100644 --- a/advisories/unreviewed/2022/05/GHSA-2q68-fvv9-4v8c/GHSA-2q68-fvv9-4v8c.json +++ b/advisories/unreviewed/2022/05/GHSA-2q68-fvv9-4v8c/GHSA-2q68-fvv9-4v8c.json @@ -7,12 +7,8 @@ "CVE-2013-3122" ], "details": "Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3117 and CVE-2013-3124.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2q92-rcwj-8vgh/GHSA-2q92-rcwj-8vgh.json b/advisories/unreviewed/2022/05/GHSA-2q92-rcwj-8vgh/GHSA-2q92-rcwj-8vgh.json index 8d2d83642e7..f9a0cabf132 100644 --- a/advisories/unreviewed/2022/05/GHSA-2q92-rcwj-8vgh/GHSA-2q92-rcwj-8vgh.json +++ b/advisories/unreviewed/2022/05/GHSA-2q92-rcwj-8vgh/GHSA-2q92-rcwj-8vgh.json @@ -7,12 +7,8 @@ "CVE-2014-6330" ], "details": "Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2r2c-prqv-cxp3/GHSA-2r2c-prqv-cxp3.json b/advisories/unreviewed/2022/05/GHSA-2r2c-prqv-cxp3/GHSA-2r2c-prqv-cxp3.json index 938b475bbc6..158731a171b 100644 --- a/advisories/unreviewed/2022/05/GHSA-2r2c-prqv-cxp3/GHSA-2r2c-prqv-cxp3.json +++ b/advisories/unreviewed/2022/05/GHSA-2r2c-prqv-cxp3/GHSA-2r2c-prqv-cxp3.json @@ -7,12 +7,8 @@ "CVE-2010-3973" ], "details": "The WMITools ActiveX control in WBEMSingleView.ocx 1.50.1131.0 in Microsoft WMI Administrative Tools 1.1 and earlier in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted argument to the AddContextRef method, possibly an untrusted pointer dereference, aka \"Microsoft WMITools ActiveX Control Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2v3m-7w5q-rg4r/GHSA-2v3m-7w5q-rg4r.json b/advisories/unreviewed/2022/05/GHSA-2v3m-7w5q-rg4r/GHSA-2v3m-7w5q-rg4r.json index 9079986cc15..6bab8ad7553 100644 --- a/advisories/unreviewed/2022/05/GHSA-2v3m-7w5q-rg4r/GHSA-2v3m-7w5q-rg4r.json +++ b/advisories/unreviewed/2022/05/GHSA-2v3m-7w5q-rg4r/GHSA-2v3m-7w5q-rg4r.json @@ -7,12 +7,8 @@ "CVE-2014-2811" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2810, CVE-2014-2822, CVE-2014-2823, and CVE-2014-4057.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2v5g-x2wc-4ggc/GHSA-2v5g-x2wc-4ggc.json b/advisories/unreviewed/2022/05/GHSA-2v5g-x2wc-4ggc/GHSA-2v5g-x2wc-4ggc.json index a265dc09583..4f85bb9e9f4 100644 --- a/advisories/unreviewed/2022/05/GHSA-2v5g-x2wc-4ggc/GHSA-2v5g-x2wc-4ggc.json +++ b/advisories/unreviewed/2022/05/GHSA-2v5g-x2wc-4ggc/GHSA-2v5g-x2wc-4ggc.json @@ -7,12 +7,8 @@ "CVE-2013-3121" ], "details": "Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3112, CVE-2013-3113, CVE-2013-3139, and CVE-2013-3142.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2w3g-246v-q74q/GHSA-2w3g-246v-q74q.json b/advisories/unreviewed/2022/05/GHSA-2w3g-246v-q74q/GHSA-2w3g-246v-q74q.json index f549c0c9a1e..fe6b92fc184 100644 --- a/advisories/unreviewed/2022/05/GHSA-2w3g-246v-q74q/GHSA-2w3g-246v-q74q.json +++ b/advisories/unreviewed/2022/05/GHSA-2w3g-246v-q74q/GHSA-2w3g-246v-q74q.json @@ -7,12 +7,8 @@ "CVE-2014-6323" ], "details": "Microsoft Internet Explorer 7 through 11 allows remote attackers to obtain sensitive clipboard information via a crafted web site, aka \"Internet Explorer Clipboard Information Disclosure Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2w68-r2x2-89fw/GHSA-2w68-r2x2-89fw.json b/advisories/unreviewed/2022/05/GHSA-2w68-r2x2-89fw/GHSA-2w68-r2x2-89fw.json index 5027947bc9f..3c025fb6b49 100644 --- a/advisories/unreviewed/2022/05/GHSA-2w68-r2x2-89fw/GHSA-2w68-r2x2-89fw.json +++ b/advisories/unreviewed/2022/05/GHSA-2w68-r2x2-89fw/GHSA-2w68-r2x2-89fw.json @@ -7,12 +7,8 @@ "CVE-2014-1790" ], "details": "Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1789.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2w9p-3jw9-6hcv/GHSA-2w9p-3jw9-6hcv.json b/advisories/unreviewed/2022/05/GHSA-2w9p-3jw9-6hcv/GHSA-2w9p-3jw9-6hcv.json index fe3f2262e49..2e680bb4b23 100644 --- a/advisories/unreviewed/2022/05/GHSA-2w9p-3jw9-6hcv/GHSA-2w9p-3jw9-6hcv.json +++ b/advisories/unreviewed/2022/05/GHSA-2w9p-3jw9-6hcv/GHSA-2w9p-3jw9-6hcv.json @@ -7,12 +7,8 @@ "CVE-2014-4063" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2774, CVE-2014-2820, CVE-2014-2826, and CVE-2014-2827.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2wrq-8v99-jmf7/GHSA-2wrq-8v99-jmf7.json b/advisories/unreviewed/2022/05/GHSA-2wrq-8v99-jmf7/GHSA-2wrq-8v99-jmf7.json index c9f180f1dad..1369f3638bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-2wrq-8v99-jmf7/GHSA-2wrq-8v99-jmf7.json +++ b/advisories/unreviewed/2022/05/GHSA-2wrq-8v99-jmf7/GHSA-2wrq-8v99-jmf7.json @@ -7,12 +7,8 @@ "CVE-2014-4102" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-4080, CVE-2014-4089, and CVE-2014-4091.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2x7q-2hq7-j42j/GHSA-2x7q-2hq7-j42j.json b/advisories/unreviewed/2022/05/GHSA-2x7q-2hq7-j42j/GHSA-2x7q-2hq7-j42j.json index 56c98c03a98..169489e4bf9 100644 --- a/advisories/unreviewed/2022/05/GHSA-2x7q-2hq7-j42j/GHSA-2x7q-2hq7-j42j.json +++ b/advisories/unreviewed/2022/05/GHSA-2x7q-2hq7-j42j/GHSA-2x7q-2hq7-j42j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2xxq-g4wg-w8hr/GHSA-2xxq-g4wg-w8hr.json b/advisories/unreviewed/2022/05/GHSA-2xxq-g4wg-w8hr/GHSA-2xxq-g4wg-w8hr.json index 13f55885bc1..f36b84be088 100644 --- a/advisories/unreviewed/2022/05/GHSA-2xxq-g4wg-w8hr/GHSA-2xxq-g4wg-w8hr.json +++ b/advisories/unreviewed/2022/05/GHSA-2xxq-g4wg-w8hr/GHSA-2xxq-g4wg-w8hr.json @@ -7,12 +7,8 @@ "CVE-2014-0303" ], "details": "Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0302.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-32pv-j8mv-f3hg/GHSA-32pv-j8mv-f3hg.json b/advisories/unreviewed/2022/05/GHSA-32pv-j8mv-f3hg/GHSA-32pv-j8mv-f3hg.json index bff63285baa..848c05db6a6 100644 --- a/advisories/unreviewed/2022/05/GHSA-32pv-j8mv-f3hg/GHSA-32pv-j8mv-f3hg.json +++ b/advisories/unreviewed/2022/05/GHSA-32pv-j8mv-f3hg/GHSA-32pv-j8mv-f3hg.json @@ -7,12 +7,8 @@ "CVE-2011-0976" ], "details": "Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and PowerPoint Viewer 2007 SP2 do not properly handle Office Art containers that have invalid records, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a PowerPoint document with a container that triggers certain access to an uninitialized object, aka \"OfficeArt Atom RCE Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-33mm-j3x7-xq2g/GHSA-33mm-j3x7-xq2g.json b/advisories/unreviewed/2022/05/GHSA-33mm-j3x7-xq2g/GHSA-33mm-j3x7-xq2g.json index 9520c4f8e1f..6902e48bcaf 100644 --- a/advisories/unreviewed/2022/05/GHSA-33mm-j3x7-xq2g/GHSA-33mm-j3x7-xq2g.json +++ b/advisories/unreviewed/2022/05/GHSA-33mm-j3x7-xq2g/GHSA-33mm-j3x7-xq2g.json @@ -7,12 +7,8 @@ "CVE-2013-3203" ], "details": "Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3201, CVE-2013-3206, CVE-2013-3207, and CVE-2013-3209.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3446-3939-396p/GHSA-3446-3939-396p.json b/advisories/unreviewed/2022/05/GHSA-3446-3939-396p/GHSA-3446-3939-396p.json index d90f9b10928..d89da3593de 100644 --- a/advisories/unreviewed/2022/05/GHSA-3446-3939-396p/GHSA-3446-3939-396p.json +++ b/advisories/unreviewed/2022/05/GHSA-3446-3939-396p/GHSA-3446-3939-396p.json @@ -7,12 +7,8 @@ "CVE-2013-3855" ], "details": "Microsoft Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"Word Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-34mj-v24w-6jvv/GHSA-34mj-v24w-6jvv.json b/advisories/unreviewed/2022/05/GHSA-34mj-v24w-6jvv/GHSA-34mj-v24w-6jvv.json index fa3593db288..21bd4a24c99 100644 --- a/advisories/unreviewed/2022/05/GHSA-34mj-v24w-6jvv/GHSA-34mj-v24w-6jvv.json +++ b/advisories/unreviewed/2022/05/GHSA-34mj-v24w-6jvv/GHSA-34mj-v24w-6jvv.json @@ -7,12 +7,8 @@ "CVE-2011-1276" ], "details": "Buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Excel spreadsheet, related to improper validation of record information, aka \"Excel Buffer Overrun Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-34qg-g4p5-rjqq/GHSA-34qg-g4p5-rjqq.json b/advisories/unreviewed/2022/05/GHSA-34qg-g4p5-rjqq/GHSA-34qg-g4p5-rjqq.json index 2e56b08ad12..281599e78cd 100644 --- a/advisories/unreviewed/2022/05/GHSA-34qg-g4p5-rjqq/GHSA-34qg-g4p5-rjqq.json +++ b/advisories/unreviewed/2022/05/GHSA-34qg-g4p5-rjqq/GHSA-34qg-g4p5-rjqq.json @@ -7,12 +7,8 @@ "CVE-2014-1800" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-34v8-wrj4-cpvq/GHSA-34v8-wrj4-cpvq.json b/advisories/unreviewed/2022/05/GHSA-34v8-wrj4-cpvq/GHSA-34v8-wrj4-cpvq.json index 81d7669aa76..729584c1bc5 100644 --- a/advisories/unreviewed/2022/05/GHSA-34v8-wrj4-cpvq/GHSA-34v8-wrj4-cpvq.json +++ b/advisories/unreviewed/2022/05/GHSA-34v8-wrj4-cpvq/GHSA-34v8-wrj4-cpvq.json @@ -7,12 +7,8 @@ "CVE-2013-3146" ], "details": "Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3152.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-366m-7h4q-23vx/GHSA-366m-7h4q-23vx.json b/advisories/unreviewed/2022/05/GHSA-366m-7h4q-23vx/GHSA-366m-7h4q-23vx.json index b8b1909a4bd..18156ef90c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-366m-7h4q-23vx/GHSA-366m-7h4q-23vx.json +++ b/advisories/unreviewed/2022/05/GHSA-366m-7h4q-23vx/GHSA-366m-7h4q-23vx.json @@ -7,12 +7,8 @@ "CVE-2014-2816" ], "details": "Microsoft SharePoint Server 2013 Gold and SP1 and SharePoint Foundation 2013 Gold and SP1 allow remote authenticated users to gain privileges via a Trojan horse app that executes a custom action in the context of the SharePoint extensibility model, aka \"SharePoint Page Content Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-369p-wm82-rf8h/GHSA-369p-wm82-rf8h.json b/advisories/unreviewed/2022/05/GHSA-369p-wm82-rf8h/GHSA-369p-wm82-rf8h.json index ff1fa3974d2..00eb6df7077 100644 --- a/advisories/unreviewed/2022/05/GHSA-369p-wm82-rf8h/GHSA-369p-wm82-rf8h.json +++ b/advisories/unreviewed/2022/05/GHSA-369p-wm82-rf8h/GHSA-369p-wm82-rf8h.json @@ -7,12 +7,8 @@ "CVE-2014-1773" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1783, CVE-2014-1784, CVE-2014-1786, CVE-2014-1795, CVE-2014-1805, CVE-2014-2758, CVE-2014-2759, CVE-2014-2765, CVE-2014-2766, and CVE-2014-2775.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-36pj-p9j3-7rr9/GHSA-36pj-p9j3-7rr9.json b/advisories/unreviewed/2022/05/GHSA-36pj-p9j3-7rr9/GHSA-36pj-p9j3-7rr9.json index 4a3cc4df382..806d6b12b22 100644 --- a/advisories/unreviewed/2022/05/GHSA-36pj-p9j3-7rr9/GHSA-36pj-p9j3-7rr9.json +++ b/advisories/unreviewed/2022/05/GHSA-36pj-p9j3-7rr9/GHSA-36pj-p9j3-7rr9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-36vv-8mxf-q4m6/GHSA-36vv-8mxf-q4m6.json b/advisories/unreviewed/2022/05/GHSA-36vv-8mxf-q4m6/GHSA-36vv-8mxf-q4m6.json index 6164ac4685b..5553ac0a0fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-36vv-8mxf-q4m6/GHSA-36vv-8mxf-q4m6.json +++ b/advisories/unreviewed/2022/05/GHSA-36vv-8mxf-q4m6/GHSA-36vv-8mxf-q4m6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-36xv-45pm-m623/GHSA-36xv-45pm-m623.json b/advisories/unreviewed/2022/05/GHSA-36xv-45pm-m623/GHSA-36xv-45pm-m623.json index f957b2c7805..a06587ba0ac 100644 --- a/advisories/unreviewed/2022/05/GHSA-36xv-45pm-m623/GHSA-36xv-45pm-m623.json +++ b/advisories/unreviewed/2022/05/GHSA-36xv-45pm-m623/GHSA-36xv-45pm-m623.json @@ -7,12 +7,8 @@ "CVE-2011-1508" ], "details": "Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, does not properly manage memory allocations for function pointers, which allows user-assisted remote attackers to execute arbitrary code via a crafted Publisher file, aka \"Publisher Function Pointer Overwrite Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3792-ff84-674w/GHSA-3792-ff84-674w.json b/advisories/unreviewed/2022/05/GHSA-3792-ff84-674w/GHSA-3792-ff84-674w.json index 413a67ad9d8..91e46046c05 100644 --- a/advisories/unreviewed/2022/05/GHSA-3792-ff84-674w/GHSA-3792-ff84-674w.json +++ b/advisories/unreviewed/2022/05/GHSA-3792-ff84-674w/GHSA-3792-ff84-674w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-37v2-vjvh-4xjq/GHSA-37v2-vjvh-4xjq.json b/advisories/unreviewed/2022/05/GHSA-37v2-vjvh-4xjq/GHSA-37v2-vjvh-4xjq.json index 9e87df23fc2..a20c1ea4ba0 100644 --- a/advisories/unreviewed/2022/05/GHSA-37v2-vjvh-4xjq/GHSA-37v2-vjvh-4xjq.json +++ b/advisories/unreviewed/2022/05/GHSA-37v2-vjvh-4xjq/GHSA-37v2-vjvh-4xjq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-389g-v72q-8rrr/GHSA-389g-v72q-8rrr.json b/advisories/unreviewed/2022/05/GHSA-389g-v72q-8rrr/GHSA-389g-v72q-8rrr.json index 9e88a5dc193..bb9e567ba37 100644 --- a/advisories/unreviewed/2022/05/GHSA-389g-v72q-8rrr/GHSA-389g-v72q-8rrr.json +++ b/advisories/unreviewed/2022/05/GHSA-389g-v72q-8rrr/GHSA-389g-v72q-8rrr.json @@ -7,12 +7,8 @@ "CVE-2012-1767" ], "details": "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1766, CVE-2012-1769, CVE-2012-1770, CVE-2012-1771, CVE-2012-1772, CVE-2012-1773, CVE-2012-3106, CVE-2012-3107, CVE-2012-3108, and CVE-2012-3110.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-38pp-gx3m-25h5/GHSA-38pp-gx3m-25h5.json b/advisories/unreviewed/2022/05/GHSA-38pp-gx3m-25h5/GHSA-38pp-gx3m-25h5.json index 656cef7d50e..b965022ec7e 100644 --- a/advisories/unreviewed/2022/05/GHSA-38pp-gx3m-25h5/GHSA-38pp-gx3m-25h5.json +++ b/advisories/unreviewed/2022/05/GHSA-38pp-gx3m-25h5/GHSA-38pp-gx3m-25h5.json @@ -7,12 +7,8 @@ "CVE-2012-2543" ], "details": "Stack-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 SP1; Office 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka \"Excel Stack Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-39h5-f398-f6f8/GHSA-39h5-f398-f6f8.json b/advisories/unreviewed/2022/05/GHSA-39h5-f398-f6f8/GHSA-39h5-f398-f6f8.json index 253dab73a78..988c52c6f2f 100644 --- a/advisories/unreviewed/2022/05/GHSA-39h5-f398-f6f8/GHSA-39h5-f398-f6f8.json +++ b/advisories/unreviewed/2022/05/GHSA-39h5-f398-f6f8/GHSA-39h5-f398-f6f8.json @@ -7,12 +7,8 @@ "CVE-2013-3201" ], "details": "Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3203, CVE-2013-3206, CVE-2013-3207, and CVE-2013-3209.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3c3r-82gp-wc94/GHSA-3c3r-82gp-wc94.json b/advisories/unreviewed/2022/05/GHSA-3c3r-82gp-wc94/GHSA-3c3r-82gp-wc94.json index 3688aae5874..6d828e4009f 100644 --- a/advisories/unreviewed/2022/05/GHSA-3c3r-82gp-wc94/GHSA-3c3r-82gp-wc94.json +++ b/advisories/unreviewed/2022/05/GHSA-3c3r-82gp-wc94/GHSA-3c3r-82gp-wc94.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3f7f-224x-j75x/GHSA-3f7f-224x-j75x.json b/advisories/unreviewed/2022/05/GHSA-3f7f-224x-j75x/GHSA-3f7f-224x-j75x.json index bde4c7e2e3f..5d9fd7d7cd2 100644 --- a/advisories/unreviewed/2022/05/GHSA-3f7f-224x-j75x/GHSA-3f7f-224x-j75x.json +++ b/advisories/unreviewed/2022/05/GHSA-3f7f-224x-j75x/GHSA-3f7f-224x-j75x.json @@ -7,12 +7,8 @@ "CVE-2010-3234" ], "details": "Microsoft Excel 2002 SP3 does not properly validate formula information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka \"Formula Substream Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3f9f-pqq3-h5q9/GHSA-3f9f-pqq3-h5q9.json b/advisories/unreviewed/2022/05/GHSA-3f9f-pqq3-h5q9/GHSA-3f9f-pqq3-h5q9.json index 22f72ae6015..5bfdcf65106 100644 --- a/advisories/unreviewed/2022/05/GHSA-3f9f-pqq3-h5q9/GHSA-3f9f-pqq3-h5q9.json +++ b/advisories/unreviewed/2022/05/GHSA-3f9f-pqq3-h5q9/GHSA-3f9f-pqq3-h5q9.json @@ -7,12 +7,8 @@ "CVE-2014-4097" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3gh7-q58j-c4hg/GHSA-3gh7-q58j-c4hg.json b/advisories/unreviewed/2022/05/GHSA-3gh7-q58j-c4hg/GHSA-3gh7-q58j-c4hg.json index df154873000..7604ff5a745 100644 --- a/advisories/unreviewed/2022/05/GHSA-3gh7-q58j-c4hg/GHSA-3gh7-q58j-c4hg.json +++ b/advisories/unreviewed/2022/05/GHSA-3gh7-q58j-c4hg/GHSA-3gh7-q58j-c4hg.json @@ -7,12 +7,8 @@ "CVE-2012-1768" ], "details": "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-3109.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3gm9-hwp2-84jv/GHSA-3gm9-hwp2-84jv.json b/advisories/unreviewed/2022/05/GHSA-3gm9-hwp2-84jv/GHSA-3gm9-hwp2-84jv.json index 48f390c3efd..0fa7f8ef135 100644 --- a/advisories/unreviewed/2022/05/GHSA-3gm9-hwp2-84jv/GHSA-3gm9-hwp2-84jv.json +++ b/advisories/unreviewed/2022/05/GHSA-3gm9-hwp2-84jv/GHSA-3gm9-hwp2-84jv.json @@ -7,12 +7,8 @@ "CVE-2013-3188" ], "details": "Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3189.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3gq8-c4x9-x9rh/GHSA-3gq8-c4x9-x9rh.json b/advisories/unreviewed/2022/05/GHSA-3gq8-c4x9-x9rh/GHSA-3gq8-c4x9-x9rh.json index 293e65c8137..4a7a43c6ccb 100644 --- a/advisories/unreviewed/2022/05/GHSA-3gq8-c4x9-x9rh/GHSA-3gq8-c4x9-x9rh.json +++ b/advisories/unreviewed/2022/05/GHSA-3gq8-c4x9-x9rh/GHSA-3gq8-c4x9-x9rh.json @@ -7,12 +7,8 @@ "CVE-2014-4101" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-4087, CVE-2014-4095, and CVE-2014-4096.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3gr3-h64r-fqg7/GHSA-3gr3-h64r-fqg7.json b/advisories/unreviewed/2022/05/GHSA-3gr3-h64r-fqg7/GHSA-3gr3-h64r-fqg7.json index 3aab1fb596a..bb9985ff05a 100644 --- a/advisories/unreviewed/2022/05/GHSA-3gr3-h64r-fqg7/GHSA-3gr3-h64r-fqg7.json +++ b/advisories/unreviewed/2022/05/GHSA-3gr3-h64r-fqg7/GHSA-3gr3-h64r-fqg7.json @@ -7,12 +7,8 @@ "CVE-2014-0254" ], "details": "The IPv6 implementation in Microsoft Windows 8, Windows Server 2012, and Windows RT does not properly validate packets, which allows remote attackers to cause a denial of service (system hang) via crafted ICMPv6 Router Advertisement packets, aka \"TCP/IP Version 6 (IPv6) Denial of Service Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3hcq-837c-jf68/GHSA-3hcq-837c-jf68.json b/advisories/unreviewed/2022/05/GHSA-3hcq-837c-jf68/GHSA-3hcq-837c-jf68.json index ef2dd79b929..56c401c9d4c 100644 --- a/advisories/unreviewed/2022/05/GHSA-3hcq-837c-jf68/GHSA-3hcq-837c-jf68.json +++ b/advisories/unreviewed/2022/05/GHSA-3hcq-837c-jf68/GHSA-3hcq-837c-jf68.json @@ -7,12 +7,8 @@ "CVE-2013-3882" ], "details": "Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3872, CVE-2013-3873, and CVE-2013-3885.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3hff-6c4j-j2w5/GHSA-3hff-6c4j-j2w5.json b/advisories/unreviewed/2022/05/GHSA-3hff-6c4j-j2w5/GHSA-3hff-6c4j-j2w5.json index 09098da25b6..902b96a02ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-3hff-6c4j-j2w5/GHSA-3hff-6c4j-j2w5.json +++ b/advisories/unreviewed/2022/05/GHSA-3hff-6c4j-j2w5/GHSA-3hff-6c4j-j2w5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3j5w-2wjq-63hj/GHSA-3j5w-2wjq-63hj.json b/advisories/unreviewed/2022/05/GHSA-3j5w-2wjq-63hj/GHSA-3j5w-2wjq-63hj.json index b673d291e43..87db492d51b 100644 --- a/advisories/unreviewed/2022/05/GHSA-3j5w-2wjq-63hj/GHSA-3j5w-2wjq-63hj.json +++ b/advisories/unreviewed/2022/05/GHSA-3j5w-2wjq-63hj/GHSA-3j5w-2wjq-63hj.json @@ -7,12 +7,8 @@ "CVE-2010-3936" ], "details": "Cross-site scripting (XSS) vulnerability in Signurl.asp in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, 2010 Update 1, and 2010 Update 2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka \"XSS in Signurl.asp Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3jqv-qv35-ch59/GHSA-3jqv-qv35-ch59.json b/advisories/unreviewed/2022/05/GHSA-3jqv-qv35-ch59/GHSA-3jqv-qv35-ch59.json index a966ba3368f..cc827a8c3fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-3jqv-qv35-ch59/GHSA-3jqv-qv35-ch59.json +++ b/advisories/unreviewed/2022/05/GHSA-3jqv-qv35-ch59/GHSA-3jqv-qv35-ch59.json @@ -7,12 +7,8 @@ "CVE-2013-3179" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka \"SharePoint XSS Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3mcf-jx37-9qjf/GHSA-3mcf-jx37-9qjf.json b/advisories/unreviewed/2022/05/GHSA-3mcf-jx37-9qjf/GHSA-3mcf-jx37-9qjf.json index 0dbb7e7450e..13dd74ce16a 100644 --- a/advisories/unreviewed/2022/05/GHSA-3mcf-jx37-9qjf/GHSA-3mcf-jx37-9qjf.json +++ b/advisories/unreviewed/2022/05/GHSA-3mcf-jx37-9qjf/GHSA-3mcf-jx37-9qjf.json @@ -7,12 +7,8 @@ "CVE-2013-3156" ], "details": "Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka \"Access File Format Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3p9x-fj5f-w25c/GHSA-3p9x-fj5f-w25c.json b/advisories/unreviewed/2022/05/GHSA-3p9x-fj5f-w25c/GHSA-3p9x-fj5f-w25c.json index 447570c1e53..0e48ded7d72 100644 --- a/advisories/unreviewed/2022/05/GHSA-3p9x-fj5f-w25c/GHSA-3p9x-fj5f-w25c.json +++ b/advisories/unreviewed/2022/05/GHSA-3p9x-fj5f-w25c/GHSA-3p9x-fj5f-w25c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3pf3-r2j9-j4h7/GHSA-3pf3-r2j9-j4h7.json b/advisories/unreviewed/2022/05/GHSA-3pf3-r2j9-j4h7/GHSA-3pf3-r2j9-j4h7.json index 80818a7a09c..1eb8c28dd86 100644 --- a/advisories/unreviewed/2022/05/GHSA-3pf3-r2j9-j4h7/GHSA-3pf3-r2j9-j4h7.json +++ b/advisories/unreviewed/2022/05/GHSA-3pf3-r2j9-j4h7/GHSA-3pf3-r2j9-j4h7.json @@ -7,12 +7,8 @@ "CVE-2014-4111" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, and CVE-2014-4110.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3pj4-6qw8-r7x8/GHSA-3pj4-6qw8-r7x8.json b/advisories/unreviewed/2022/05/GHSA-3pj4-6qw8-r7x8/GHSA-3pj4-6qw8-r7x8.json index 16910b7e2e9..c607d1ad443 100644 --- a/advisories/unreviewed/2022/05/GHSA-3pj4-6qw8-r7x8/GHSA-3pj4-6qw8-r7x8.json +++ b/advisories/unreviewed/2022/05/GHSA-3pj4-6qw8-r7x8/GHSA-3pj4-6qw8-r7x8.json @@ -7,12 +7,8 @@ "CVE-2011-1969" ], "details": "Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 provides the MicrosoftClient.jar file containing a signed Java applet, which allows remote attackers to execute arbitrary code on client machines via unspecified vectors, aka \"Poisoned Cup of Code Execution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3pqp-px69-7mm4/GHSA-3pqp-px69-7mm4.json b/advisories/unreviewed/2022/05/GHSA-3pqp-px69-7mm4/GHSA-3pqp-px69-7mm4.json index af2074b99da..57551c93f45 100644 --- a/advisories/unreviewed/2022/05/GHSA-3pqp-px69-7mm4/GHSA-3pqp-px69-7mm4.json +++ b/advisories/unreviewed/2022/05/GHSA-3pqp-px69-7mm4/GHSA-3pqp-px69-7mm4.json @@ -7,12 +7,8 @@ "CVE-2014-2768" ], "details": "Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2773.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3qqc-w95p-x54w/GHSA-3qqc-w95p-x54w.json b/advisories/unreviewed/2022/05/GHSA-3qqc-w95p-x54w/GHSA-3qqc-w95p-x54w.json index f1be452990c..6a2cf28d82c 100644 --- a/advisories/unreviewed/2022/05/GHSA-3qqc-w95p-x54w/GHSA-3qqc-w95p-x54w.json +++ b/advisories/unreviewed/2022/05/GHSA-3qqc-w95p-x54w/GHSA-3qqc-w95p-x54w.json @@ -7,12 +7,8 @@ "CVE-2012-2523" ], "details": "Integer overflow in Microsoft Internet Explorer 8 and 9, JScript 5.8, and VBScript 5.8 on 64-bit platforms allows remote attackers to execute arbitrary code by leveraging an incorrect size calculation during object copying, aka \"JavaScript Integer Overflow Remote Code Execution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3r8p-67qh-3wx6/GHSA-3r8p-67qh-3wx6.json b/advisories/unreviewed/2022/05/GHSA-3r8p-67qh-3wx6/GHSA-3r8p-67qh-3wx6.json index aa7621151d3..63290c48fdc 100644 --- a/advisories/unreviewed/2022/05/GHSA-3r8p-67qh-3wx6/GHSA-3r8p-67qh-3wx6.json +++ b/advisories/unreviewed/2022/05/GHSA-3r8p-67qh-3wx6/GHSA-3r8p-67qh-3wx6.json @@ -7,12 +7,8 @@ "CVE-2014-1785" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1769, CVE-2014-1782, CVE-2014-2753, CVE-2014-2755, CVE-2014-2760, CVE-2014-2761, CVE-2014-2772, and CVE-2014-2776.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3v6x-g643-6gw7/GHSA-3v6x-g643-6gw7.json b/advisories/unreviewed/2022/05/GHSA-3v6x-g643-6gw7/GHSA-3v6x-g643-6gw7.json index a74e86b8bd8..83d23b74647 100644 --- a/advisories/unreviewed/2022/05/GHSA-3v6x-g643-6gw7/GHSA-3v6x-g643-6gw7.json +++ b/advisories/unreviewed/2022/05/GHSA-3v6x-g643-6gw7/GHSA-3v6x-g643-6gw7.json @@ -7,12 +7,8 @@ "CVE-2014-2801" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3vpq-f54j-x6hq/GHSA-3vpq-f54j-x6hq.json b/advisories/unreviewed/2022/05/GHSA-3vpq-f54j-x6hq/GHSA-3vpq-f54j-x6hq.json index 14b401fad16..725b156699d 100644 --- a/advisories/unreviewed/2022/05/GHSA-3vpq-f54j-x6hq/GHSA-3vpq-f54j-x6hq.json +++ b/advisories/unreviewed/2022/05/GHSA-3vpq-f54j-x6hq/GHSA-3vpq-f54j-x6hq.json @@ -7,12 +7,8 @@ "CVE-2014-2823" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2810, CVE-2014-2811, CVE-2014-2822, and CVE-2014-4057.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3w6q-cgc3-v6vv/GHSA-3w6q-cgc3-v6vv.json b/advisories/unreviewed/2022/05/GHSA-3w6q-cgc3-v6vv/GHSA-3w6q-cgc3-v6vv.json index 1fb340153db..6d4aaf5e0d9 100644 --- a/advisories/unreviewed/2022/05/GHSA-3w6q-cgc3-v6vv/GHSA-3w6q-cgc3-v6vv.json +++ b/advisories/unreviewed/2022/05/GHSA-3w6q-cgc3-v6vv/GHSA-3w6q-cgc3-v6vv.json @@ -7,12 +7,8 @@ "CVE-2013-3192" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to inject arbitrary web script or HTML via crafted character sequences with EUC-JP encoding, aka \"EUC-JP Character Encoding Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3x46-2jq5-628v/GHSA-3x46-2jq5-628v.json b/advisories/unreviewed/2022/05/GHSA-3x46-2jq5-628v/GHSA-3x46-2jq5-628v.json index 0be969384e9..5cc3bf9cb67 100644 --- a/advisories/unreviewed/2022/05/GHSA-3x46-2jq5-628v/GHSA-3x46-2jq5-628v.json +++ b/advisories/unreviewed/2022/05/GHSA-3x46-2jq5-628v/GHSA-3x46-2jq5-628v.json @@ -7,12 +7,8 @@ "CVE-2014-2761" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1769, CVE-2014-1782, CVE-2014-1785, CVE-2014-2753, CVE-2014-2755, CVE-2014-2760, CVE-2014-2772, and CVE-2014-2776.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3xcf-gjfw-jr4p/GHSA-3xcf-gjfw-jr4p.json b/advisories/unreviewed/2022/05/GHSA-3xcf-gjfw-jr4p/GHSA-3xcf-gjfw-jr4p.json index 6b14d1db4c7..a5de92afbc6 100644 --- a/advisories/unreviewed/2022/05/GHSA-3xcf-gjfw-jr4p/GHSA-3xcf-gjfw-jr4p.json +++ b/advisories/unreviewed/2022/05/GHSA-3xcf-gjfw-jr4p/GHSA-3xcf-gjfw-jr4p.json @@ -7,12 +7,8 @@ "CVE-2013-3856" ], "details": "Microsoft Word 2003 SP3 and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"Word Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3xgg-69w3-vvww/GHSA-3xgg-69w3-vvww.json b/advisories/unreviewed/2022/05/GHSA-3xgg-69w3-vvww/GHSA-3xgg-69w3-vvww.json index b751ac5e980..e344e32099b 100644 --- a/advisories/unreviewed/2022/05/GHSA-3xgg-69w3-vvww/GHSA-3xgg-69w3-vvww.json +++ b/advisories/unreviewed/2022/05/GHSA-3xgg-69w3-vvww/GHSA-3xgg-69w3-vvww.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3xj3-r3vm-m6mp/GHSA-3xj3-r3vm-m6mp.json b/advisories/unreviewed/2022/05/GHSA-3xj3-r3vm-m6mp/GHSA-3xj3-r3vm-m6mp.json index cc39271bbd6..3020e0ec4c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-3xj3-r3vm-m6mp/GHSA-3xj3-r3vm-m6mp.json +++ b/advisories/unreviewed/2022/05/GHSA-3xj3-r3vm-m6mp/GHSA-3xj3-r3vm-m6mp.json @@ -7,12 +7,8 @@ "CVE-2013-3153" ], "details": "Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3148.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-42w6-362j-2wq4/GHSA-42w6-362j-2wq4.json b/advisories/unreviewed/2022/05/GHSA-42w6-362j-2wq4/GHSA-42w6-362j-2wq4.json index dd6b060ca46..a81769f5127 100644 --- a/advisories/unreviewed/2022/05/GHSA-42w6-362j-2wq4/GHSA-42w6-362j-2wq4.json +++ b/advisories/unreviewed/2022/05/GHSA-42w6-362j-2wq4/GHSA-42w6-362j-2wq4.json @@ -7,12 +7,8 @@ "CVE-2014-0274" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0270, CVE-2014-0273, and CVE-2014-0288.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-44c7-2233-xwr4/GHSA-44c7-2233-xwr4.json b/advisories/unreviewed/2022/05/GHSA-44c7-2233-xwr4/GHSA-44c7-2233-xwr4.json index 8ab6583f1fd..2a699d0b95b 100644 --- a/advisories/unreviewed/2022/05/GHSA-44c7-2233-xwr4/GHSA-44c7-2233-xwr4.json +++ b/advisories/unreviewed/2022/05/GHSA-44c7-2233-xwr4/GHSA-44c7-2233-xwr4.json @@ -7,12 +7,8 @@ "CVE-2012-1859" ], "details": "Cross-site scripting (XSS) vulnerability in scriptresx.ashx in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka \"XSS scriptresx.ashx Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-44fr-qf9f-74pj/GHSA-44fr-qf9f-74pj.json b/advisories/unreviewed/2022/05/GHSA-44fr-qf9f-74pj/GHSA-44fr-qf9f-74pj.json index 70a65d8ce65..01f8e749409 100644 --- a/advisories/unreviewed/2022/05/GHSA-44fr-qf9f-74pj/GHSA-44fr-qf9f-74pj.json +++ b/advisories/unreviewed/2022/05/GHSA-44fr-qf9f-74pj/GHSA-44fr-qf9f-74pj.json @@ -7,12 +7,8 @@ "CVE-2013-3111" ], "details": "Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3123.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-44h5-7p9r-q2m9/GHSA-44h5-7p9r-q2m9.json b/advisories/unreviewed/2022/05/GHSA-44h5-7p9r-q2m9/GHSA-44h5-7p9r-q2m9.json index 6637e4adff2..16fced044ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-44h5-7p9r-q2m9/GHSA-44h5-7p9r-q2m9.json +++ b/advisories/unreviewed/2022/05/GHSA-44h5-7p9r-q2m9/GHSA-44h5-7p9r-q2m9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-47mx-6c68-86jm/GHSA-47mx-6c68-86jm.json b/advisories/unreviewed/2022/05/GHSA-47mx-6c68-86jm/GHSA-47mx-6c68-86jm.json index f8af1795144..a6b86dd40fe 100644 --- a/advisories/unreviewed/2022/05/GHSA-47mx-6c68-86jm/GHSA-47mx-6c68-86jm.json +++ b/advisories/unreviewed/2022/05/GHSA-47mx-6c68-86jm/GHSA-47mx-6c68-86jm.json @@ -7,12 +7,8 @@ "CVE-2013-3853" ], "details": "Microsoft Office 2007 SP3 and Word 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"Word Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3854.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-487h-59g6-g66h/GHSA-487h-59g6-g66h.json b/advisories/unreviewed/2022/05/GHSA-487h-59g6-g66h/GHSA-487h-59g6-g66h.json index 57e02f465d4..8347ba96443 100644 --- a/advisories/unreviewed/2022/05/GHSA-487h-59g6-g66h/GHSA-487h-59g6-g66h.json +++ b/advisories/unreviewed/2022/05/GHSA-487h-59g6-g66h/GHSA-487h-59g6-g66h.json @@ -7,12 +7,8 @@ "CVE-2014-2802" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2787, CVE-2014-2790, and CVE-2014-2806.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-49hr-9mq4-ccxr/GHSA-49hr-9mq4-ccxr.json b/advisories/unreviewed/2022/05/GHSA-49hr-9mq4-ccxr/GHSA-49hr-9mq4-ccxr.json index 4052e55a1ad..38f1b11dd9f 100644 --- a/advisories/unreviewed/2022/05/GHSA-49hr-9mq4-ccxr/GHSA-49hr-9mq4-ccxr.json +++ b/advisories/unreviewed/2022/05/GHSA-49hr-9mq4-ccxr/GHSA-49hr-9mq4-ccxr.json @@ -7,12 +7,8 @@ "CVE-2013-3846" ], "details": "Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted CSpliceTreeEngine::InsertSplice object in an HTML document, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3143 and CVE-2013-3161.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4cr4-j8fx-567m/GHSA-4cr4-j8fx-567m.json b/advisories/unreviewed/2022/05/GHSA-4cr4-j8fx-567m/GHSA-4cr4-j8fx-567m.json index c47b86c1f8b..3f1c9ac70cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-4cr4-j8fx-567m/GHSA-4cr4-j8fx-567m.json +++ b/advisories/unreviewed/2022/05/GHSA-4cr4-j8fx-567m/GHSA-4cr4-j8fx-567m.json @@ -7,12 +7,8 @@ "CVE-2014-4130" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-4132 and CVE-2014-4138.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4f43-jqjq-8vx2/GHSA-4f43-jqjq-8vx2.json b/advisories/unreviewed/2022/05/GHSA-4f43-jqjq-8vx2/GHSA-4f43-jqjq-8vx2.json index a3e2a55bd58..a328cad9621 100644 --- a/advisories/unreviewed/2022/05/GHSA-4f43-jqjq-8vx2/GHSA-4f43-jqjq-8vx2.json +++ b/advisories/unreviewed/2022/05/GHSA-4f43-jqjq-8vx2/GHSA-4f43-jqjq-8vx2.json @@ -7,12 +7,8 @@ "CVE-2014-4107" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4fp7-cq73-829r/GHSA-4fp7-cq73-829r.json b/advisories/unreviewed/2022/05/GHSA-4fp7-cq73-829r/GHSA-4fp7-cq73-829r.json index 4d9ae0ffacb..f6e594ba6b7 100644 --- a/advisories/unreviewed/2022/05/GHSA-4fp7-cq73-829r/GHSA-4fp7-cq73-829r.json +++ b/advisories/unreviewed/2022/05/GHSA-4fp7-cq73-829r/GHSA-4fp7-cq73-829r.json @@ -7,12 +7,8 @@ "CVE-2014-0297" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0308, CVE-2014-0312, and CVE-2014-0324.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4fx3-xpx3-hv6q/GHSA-4fx3-xpx3-hv6q.json b/advisories/unreviewed/2022/05/GHSA-4fx3-xpx3-hv6q/GHSA-4fx3-xpx3-hv6q.json index 1ffff45697e..ee598e56b22 100644 --- a/advisories/unreviewed/2022/05/GHSA-4fx3-xpx3-hv6q/GHSA-4fx3-xpx3-hv6q.json +++ b/advisories/unreviewed/2022/05/GHSA-4fx3-xpx3-hv6q/GHSA-4fx3-xpx3-hv6q.json @@ -7,12 +7,8 @@ "CVE-2013-3850" ], "details": "Microsoft Word 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Office Compatibility Pack SP3; and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"Word Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4fx7-x95p-4m74/GHSA-4fx7-x95p-4m74.json b/advisories/unreviewed/2022/05/GHSA-4fx7-x95p-4m74/GHSA-4fx7-x95p-4m74.json index 32b788aec45..df9f50ea67f 100644 --- a/advisories/unreviewed/2022/05/GHSA-4fx7-x95p-4m74/GHSA-4fx7-x95p-4m74.json +++ b/advisories/unreviewed/2022/05/GHSA-4fx7-x95p-4m74/GHSA-4fx7-x95p-4m74.json @@ -7,12 +7,8 @@ "CVE-2014-4143" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-6341.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4gp7-vm73-w2x3/GHSA-4gp7-vm73-w2x3.json b/advisories/unreviewed/2022/05/GHSA-4gp7-vm73-w2x3/GHSA-4gp7-vm73-w2x3.json index 886b351f1ee..d4a56b34c96 100644 --- a/advisories/unreviewed/2022/05/GHSA-4gp7-vm73-w2x3/GHSA-4gp7-vm73-w2x3.json +++ b/advisories/unreviewed/2022/05/GHSA-4gp7-vm73-w2x3/GHSA-4gp7-vm73-w2x3.json @@ -7,12 +7,8 @@ "CVE-2011-1897" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka \"Default Reflected XSS Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4h74-gfxr-p5q7/GHSA-4h74-gfxr-p5q7.json b/advisories/unreviewed/2022/05/GHSA-4h74-gfxr-p5q7/GHSA-4h74-gfxr-p5q7.json index fad56bbd316..16cf3ad7e55 100644 --- a/advisories/unreviewed/2022/05/GHSA-4h74-gfxr-p5q7/GHSA-4h74-gfxr-p5q7.json +++ b/advisories/unreviewed/2022/05/GHSA-4h74-gfxr-p5q7/GHSA-4h74-gfxr-p5q7.json @@ -7,12 +7,8 @@ "CVE-2011-1987" ], "details": "Array index error in Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka \"Excel Out of Bounds Array Indexing Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4h8m-v678-p6jw/GHSA-4h8m-v678-p6jw.json b/advisories/unreviewed/2022/05/GHSA-4h8m-v678-p6jw/GHSA-4h8m-v678-p6jw.json index 31a7aedc356..dab55ed5477 100644 --- a/advisories/unreviewed/2022/05/GHSA-4h8m-v678-p6jw/GHSA-4h8m-v678-p6jw.json +++ b/advisories/unreviewed/2022/05/GHSA-4h8m-v678-p6jw/GHSA-4h8m-v678-p6jw.json @@ -7,12 +7,8 @@ "CVE-2011-1972" ], "details": "Microsoft Visio 2003 SP3, 2007 SP2, and 2010 Gold and SP1 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka \"pStream Release RCE Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4hjv-xqcv-4fp4/GHSA-4hjv-xqcv-4fp4.json b/advisories/unreviewed/2022/05/GHSA-4hjv-xqcv-4fp4/GHSA-4hjv-xqcv-4fp4.json index 7592ba62f79..202329b15e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-4hjv-xqcv-4fp4/GHSA-4hjv-xqcv-4fp4.json +++ b/advisories/unreviewed/2022/05/GHSA-4hjv-xqcv-4fp4/GHSA-4hjv-xqcv-4fp4.json @@ -7,12 +7,8 @@ "CVE-2014-2789" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2795, CVE-2014-2798, and CVE-2014-2804.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4jff-mgjj-jxr8/GHSA-4jff-mgjj-jxr8.json b/advisories/unreviewed/2022/05/GHSA-4jff-mgjj-jxr8/GHSA-4jff-mgjj-jxr8.json index 3971fb73e3d..83bcb3751c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-4jff-mgjj-jxr8/GHSA-4jff-mgjj-jxr8.json +++ b/advisories/unreviewed/2022/05/GHSA-4jff-mgjj-jxr8/GHSA-4jff-mgjj-jxr8.json @@ -7,12 +7,8 @@ "CVE-2014-6357" ], "details": "Use-after-free vulnerability in Microsoft Office 2010 SP2, Office 2013 Gold and SP1, Office 2013 RT Gold and SP1, Office for Mac 2011, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 Gold and SP1, and Office Web Apps 2010 SP2 and 2013 Gold and SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka \"Use After Free Word Remote Code Execution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4mgq-r54g-35jg/GHSA-4mgq-r54g-35jg.json b/advisories/unreviewed/2022/05/GHSA-4mgq-r54g-35jg/GHSA-4mgq-r54g-35jg.json index e55dee90e8d..d1c57ca16f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-4mgq-r54g-35jg/GHSA-4mgq-r54g-35jg.json +++ b/advisories/unreviewed/2022/05/GHSA-4mgq-r54g-35jg/GHSA-4mgq-r54g-35jg.json @@ -7,12 +7,8 @@ "CVE-2013-3890" ], "details": "Microsoft Excel 2007 SP3, Excel Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka \"Microsoft Excel Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4pf8-c4v6-2grg/GHSA-4pf8-c4v6-2grg.json b/advisories/unreviewed/2022/05/GHSA-4pf8-c4v6-2grg/GHSA-4pf8-c4v6-2grg.json index 9deee796cc6..03292a00a0f 100644 --- a/advisories/unreviewed/2022/05/GHSA-4pf8-c4v6-2grg/GHSA-4pf8-c4v6-2grg.json +++ b/advisories/unreviewed/2022/05/GHSA-4pf8-c4v6-2grg/GHSA-4pf8-c4v6-2grg.json @@ -7,12 +7,8 @@ "CVE-2013-3908" ], "details": "Microsoft Internet Explorer 6 through 10 allows user-assisted remote attackers to bypass the Same Origin Policy and obtain sensitive information from any visited document via a crafted web page that is not properly handled during a print-preview action, aka \"Internet Explorer Information Disclosure Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4qc7-rj5q-mg48/GHSA-4qc7-rj5q-mg48.json b/advisories/unreviewed/2022/05/GHSA-4qc7-rj5q-mg48/GHSA-4qc7-rj5q-mg48.json index 45684dbf884..1982b7c959c 100644 --- a/advisories/unreviewed/2022/05/GHSA-4qc7-rj5q-mg48/GHSA-4qc7-rj5q-mg48.json +++ b/advisories/unreviewed/2022/05/GHSA-4qc7-rj5q-mg48/GHSA-4qc7-rj5q-mg48.json @@ -7,12 +7,8 @@ "CVE-2014-6331" ], "details": "Microsoft Active Directory Federation Services (AD FS) 2.0, 2.1, and 3.0, when a configured SAML Relying Party lacks a sign-out endpoint, does not properly process logoff actions, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation, aka \"Active Directory Federation Services Information Disclosure Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4qcg-gx82-4h36/GHSA-4qcg-gx82-4h36.json b/advisories/unreviewed/2022/05/GHSA-4qcg-gx82-4h36/GHSA-4qcg-gx82-4h36.json index 4a7df1c0d7e..0e85343ccdc 100644 --- a/advisories/unreviewed/2022/05/GHSA-4qcg-gx82-4h36/GHSA-4qcg-gx82-4h36.json +++ b/advisories/unreviewed/2022/05/GHSA-4qcg-gx82-4h36/GHSA-4qcg-gx82-4h36.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4qq7-wjm7-pqjr/GHSA-4qq7-wjm7-pqjr.json b/advisories/unreviewed/2022/05/GHSA-4qq7-wjm7-pqjr/GHSA-4qq7-wjm7-pqjr.json index b4c04deb2f1..22409ab7fdb 100644 --- a/advisories/unreviewed/2022/05/GHSA-4qq7-wjm7-pqjr/GHSA-4qq7-wjm7-pqjr.json +++ b/advisories/unreviewed/2022/05/GHSA-4qq7-wjm7-pqjr/GHSA-4qq7-wjm7-pqjr.json @@ -7,12 +7,8 @@ "CVE-2013-3852" ], "details": "Microsoft Word 2003 SP3, 2007 SP3, and 2010 SP1; Office Compatibility Pack SP3; and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"Word Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4qv6-46qm-w9fg/GHSA-4qv6-46qm-w9fg.json b/advisories/unreviewed/2022/05/GHSA-4qv6-46qm-w9fg/GHSA-4qv6-46qm-w9fg.json index 71853e5589e..c4c27a4ece4 100644 --- a/advisories/unreviewed/2022/05/GHSA-4qv6-46qm-w9fg/GHSA-4qv6-46qm-w9fg.json +++ b/advisories/unreviewed/2022/05/GHSA-4qv6-46qm-w9fg/GHSA-4qv6-46qm-w9fg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4r4h-w86r-vj96/GHSA-4r4h-w86r-vj96.json b/advisories/unreviewed/2022/05/GHSA-4r4h-w86r-vj96/GHSA-4r4h-w86r-vj96.json index eb039f25d74..5f344cf4f2f 100644 --- a/advisories/unreviewed/2022/05/GHSA-4r4h-w86r-vj96/GHSA-4r4h-w86r-vj96.json +++ b/advisories/unreviewed/2022/05/GHSA-4r4h-w86r-vj96/GHSA-4r4h-w86r-vj96.json @@ -7,12 +7,8 @@ "CVE-2014-2808" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2796, CVE-2014-2825, CVE-2014-4050, CVE-2014-4055, and CVE-2014-4067.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4r7v-h9fw-3r37/GHSA-4r7v-h9fw-3r37.json b/advisories/unreviewed/2022/05/GHSA-4r7v-h9fw-3r37/GHSA-4r7v-h9fw-3r37.json index 0d4e1e7ab40..4e86a0dc485 100644 --- a/advisories/unreviewed/2022/05/GHSA-4r7v-h9fw-3r37/GHSA-4r7v-h9fw-3r37.json +++ b/advisories/unreviewed/2022/05/GHSA-4r7v-h9fw-3r37/GHSA-4r7v-h9fw-3r37.json @@ -7,12 +7,8 @@ "CVE-2014-0261" ], "details": "Microsoft Dynamics AX 4.0 SP2, 2009 SP1, 2012, and 2012 R2 allows remote authenticated users to cause a denial of service (instance outage) via crafted data to an Application Object Server (AOS) instance, aka \"Query Filter DoS Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4vq7-844p-76r2/GHSA-4vq7-844p-76r2.json b/advisories/unreviewed/2022/05/GHSA-4vq7-844p-76r2/GHSA-4vq7-844p-76r2.json index 9b0cc8dca87..fd009a19881 100644 --- a/advisories/unreviewed/2022/05/GHSA-4vq7-844p-76r2/GHSA-4vq7-844p-76r2.json +++ b/advisories/unreviewed/2022/05/GHSA-4vq7-844p-76r2/GHSA-4vq7-844p-76r2.json @@ -7,12 +7,8 @@ "CVE-2013-3159" ], "details": "Microsoft Excel 2003 SP3, 2007 SP3, and 2010 SP1 and SP2; Excel Viewer; and Microsoft Office Compatibility Pack SP3 allow remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka \"XML External Entities Resolution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4wf9-r2pm-7q4r/GHSA-4wf9-r2pm-7q4r.json b/advisories/unreviewed/2022/05/GHSA-4wf9-r2pm-7q4r/GHSA-4wf9-r2pm-7q4r.json index 2aeb60d5368..d0bac0ebea5 100644 --- a/advisories/unreviewed/2022/05/GHSA-4wf9-r2pm-7q4r/GHSA-4wf9-r2pm-7q4r.json +++ b/advisories/unreviewed/2022/05/GHSA-4wf9-r2pm-7q4r/GHSA-4wf9-r2pm-7q4r.json @@ -7,12 +7,8 @@ "CVE-2014-6326" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka \"OWA XSS Vulnerability,\" a different vulnerability than CVE-2014-6325.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4wfx-mqhj-w8wf/GHSA-4wfx-mqhj-w8wf.json b/advisories/unreviewed/2022/05/GHSA-4wfx-mqhj-w8wf/GHSA-4wfx-mqhj-w8wf.json index 71c5fc68ec8..822fd73f550 100644 --- a/advisories/unreviewed/2022/05/GHSA-4wfx-mqhj-w8wf/GHSA-4wfx-mqhj-w8wf.json +++ b/advisories/unreviewed/2022/05/GHSA-4wfx-mqhj-w8wf/GHSA-4wfx-mqhj-w8wf.json @@ -7,12 +7,8 @@ "CVE-2013-3912" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3916.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4wgv-p49g-987m/GHSA-4wgv-p49g-987m.json b/advisories/unreviewed/2022/05/GHSA-4wgv-p49g-987m/GHSA-4wgv-p49g-987m.json index 5e674126997..822a5107abf 100644 --- a/advisories/unreviewed/2022/05/GHSA-4wgv-p49g-987m/GHSA-4wgv-p49g-987m.json +++ b/advisories/unreviewed/2022/05/GHSA-4wgv-p49g-987m/GHSA-4wgv-p49g-987m.json @@ -7,12 +7,8 @@ "CVE-2012-1849" ], "details": "Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .ocsmeet file, aka \"Lync Insecure Library Loading Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-525w-x42w-vp45/GHSA-525w-x42w-vp45.json b/advisories/unreviewed/2022/05/GHSA-525w-x42w-vp45/GHSA-525w-x42w-vp45.json index 770a2c647e0..73673b16614 100644 --- a/advisories/unreviewed/2022/05/GHSA-525w-x42w-vp45/GHSA-525w-x42w-vp45.json +++ b/advisories/unreviewed/2022/05/GHSA-525w-x42w-vp45/GHSA-525w-x42w-vp45.json @@ -7,12 +7,8 @@ "CVE-2011-1890" ], "details": "Cross-site scripting (XSS) vulnerability in EditForm.aspx in Microsoft Office SharePoint Server 2010 and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via a post, aka \"Editform Script Injection Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-544j-wcxr-56fv/GHSA-544j-wcxr-56fv.json b/advisories/unreviewed/2022/05/GHSA-544j-wcxr-56fv/GHSA-544j-wcxr-56fv.json index da34cc66921..2a22c541526 100644 --- a/advisories/unreviewed/2022/05/GHSA-544j-wcxr-56fv/GHSA-544j-wcxr-56fv.json +++ b/advisories/unreviewed/2022/05/GHSA-544j-wcxr-56fv/GHSA-544j-wcxr-56fv.json @@ -7,12 +7,8 @@ "CVE-2014-0267" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0289 and CVE-2014-0290.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-54hq-7j4c-rqmf/GHSA-54hq-7j4c-rqmf.json b/advisories/unreviewed/2022/05/GHSA-54hq-7j4c-rqmf/GHSA-54hq-7j4c-rqmf.json index 4893fd31a3b..72f77fba2c1 100644 --- a/advisories/unreviewed/2022/05/GHSA-54hq-7j4c-rqmf/GHSA-54hq-7j4c-rqmf.json +++ b/advisories/unreviewed/2022/05/GHSA-54hq-7j4c-rqmf/GHSA-54hq-7j4c-rqmf.json @@ -7,12 +7,8 @@ "CVE-2014-2764" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1772, CVE-2014-1780, CVE-2014-1794, CVE-2014-1797, CVE-2014-1802, CVE-2014-2756, CVE-2014-2763, CVE-2014-2769, and CVE-2014-2771.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-54v9-j4gg-25j8/GHSA-54v9-j4gg-25j8.json b/advisories/unreviewed/2022/05/GHSA-54v9-j4gg-25j8/GHSA-54v9-j4gg-25j8.json index cab414df2a3..5b71a6ce5cd 100644 --- a/advisories/unreviewed/2022/05/GHSA-54v9-j4gg-25j8/GHSA-54v9-j4gg-25j8.json +++ b/advisories/unreviewed/2022/05/GHSA-54v9-j4gg-25j8/GHSA-54v9-j4gg-25j8.json @@ -7,12 +7,8 @@ "CVE-2014-4088" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-55vg-hhxm-5v8g/GHSA-55vg-hhxm-5v8g.json b/advisories/unreviewed/2022/05/GHSA-55vg-hhxm-5v8g/GHSA-55vg-hhxm-5v8g.json index b0a784d8998..6c0d9e952ea 100644 --- a/advisories/unreviewed/2022/05/GHSA-55vg-hhxm-5v8g/GHSA-55vg-hhxm-5v8g.json +++ b/advisories/unreviewed/2022/05/GHSA-55vg-hhxm-5v8g/GHSA-55vg-hhxm-5v8g.json @@ -7,12 +7,8 @@ "CVE-2012-1861" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 Gold and SP1, SharePoint Foundation 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka \"SharePoint Script in Username Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-566j-m5m7-25wm/GHSA-566j-m5m7-25wm.json b/advisories/unreviewed/2022/05/GHSA-566j-m5m7-25wm/GHSA-566j-m5m7-25wm.json index 348e9ff7951..81ef7372233 100644 --- a/advisories/unreviewed/2022/05/GHSA-566j-m5m7-25wm/GHSA-566j-m5m7-25wm.json +++ b/advisories/unreviewed/2022/05/GHSA-566j-m5m7-25wm/GHSA-566j-m5m7-25wm.json @@ -7,12 +7,8 @@ "CVE-2014-6341" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-4143.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-569v-5vq7-8w92/GHSA-569v-5vq7-8w92.json b/advisories/unreviewed/2022/05/GHSA-569v-5vq7-8w92/GHSA-569v-5vq7-8w92.json index 0e69a8adc81..e99e04389ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-569v-5vq7-8w92/GHSA-569v-5vq7-8w92.json +++ b/advisories/unreviewed/2022/05/GHSA-569v-5vq7-8w92/GHSA-569v-5vq7-8w92.json @@ -7,12 +7,8 @@ "CVE-2012-2522" ], "details": "Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a malformed virtual function table after this table's deletion, aka \"Virtual Function Table Corruption Remote Code Execution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-56gm-6fw9-rcr3/GHSA-56gm-6fw9-rcr3.json b/advisories/unreviewed/2022/05/GHSA-56gm-6fw9-rcr3/GHSA-56gm-6fw9-rcr3.json index e930b9e9121..43da8c1dcd6 100644 --- a/advisories/unreviewed/2022/05/GHSA-56gm-6fw9-rcr3/GHSA-56gm-6fw9-rcr3.json +++ b/advisories/unreviewed/2022/05/GHSA-56gm-6fw9-rcr3/GHSA-56gm-6fw9-rcr3.json @@ -7,12 +7,8 @@ "CVE-2014-1755" ], "details": "Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0235 and CVE-2014-1751.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-578f-jg72-98r2/GHSA-578f-jg72-98r2.json b/advisories/unreviewed/2022/05/GHSA-578f-jg72-98r2/GHSA-578f-jg72-98r2.json index 0dd47b70435..ad3a442ec30 100644 --- a/advisories/unreviewed/2022/05/GHSA-578f-jg72-98r2/GHSA-578f-jg72-98r2.json +++ b/advisories/unreviewed/2022/05/GHSA-578f-jg72-98r2/GHSA-578f-jg72-98r2.json @@ -7,12 +7,8 @@ "CVE-2013-3141" ], "details": "Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3110.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5cj3-4rxh-xm4j/GHSA-5cj3-4rxh-xm4j.json b/advisories/unreviewed/2022/05/GHSA-5cj3-4rxh-xm4j/GHSA-5cj3-4rxh-xm4j.json index a491946b035..7b693674f9c 100644 --- a/advisories/unreviewed/2022/05/GHSA-5cj3-4rxh-xm4j/GHSA-5cj3-4rxh-xm4j.json +++ b/advisories/unreviewed/2022/05/GHSA-5cj3-4rxh-xm4j/GHSA-5cj3-4rxh-xm4j.json @@ -7,12 +7,8 @@ "CVE-2013-3158" ], "details": "Microsoft Excel 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"Microsoft Office Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5cqp-j54f-r2jc/GHSA-5cqp-j54f-r2jc.json b/advisories/unreviewed/2022/05/GHSA-5cqp-j54f-r2jc/GHSA-5cqp-j54f-r2jc.json index ff95428e71e..07af122241f 100644 --- a/advisories/unreviewed/2022/05/GHSA-5cqp-j54f-r2jc/GHSA-5cqp-j54f-r2jc.json +++ b/advisories/unreviewed/2022/05/GHSA-5cqp-j54f-r2jc/GHSA-5cqp-j54f-r2jc.json @@ -7,12 +7,8 @@ "CVE-2014-1782" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1769, CVE-2014-1785, CVE-2014-2753, CVE-2014-2755, CVE-2014-2760, CVE-2014-2761, CVE-2014-2772, and CVE-2014-2776.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5cv5-x27q-h8hq/GHSA-5cv5-x27q-h8hq.json b/advisories/unreviewed/2022/05/GHSA-5cv5-x27q-h8hq/GHSA-5cv5-x27q-h8hq.json index b23b3ac14e0..92dca559646 100644 --- a/advisories/unreviewed/2022/05/GHSA-5cv5-x27q-h8hq/GHSA-5cv5-x27q-h8hq.json +++ b/advisories/unreviewed/2022/05/GHSA-5cv5-x27q-h8hq/GHSA-5cv5-x27q-h8hq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5g4f-3rp6-c6gv/GHSA-5g4f-3rp6-c6gv.json b/advisories/unreviewed/2022/05/GHSA-5g4f-3rp6-c6gv/GHSA-5g4f-3rp6-c6gv.json index ab26b2ba12f..ad614a48002 100644 --- a/advisories/unreviewed/2022/05/GHSA-5g4f-3rp6-c6gv/GHSA-5g4f-3rp6-c6gv.json +++ b/advisories/unreviewed/2022/05/GHSA-5g4f-3rp6-c6gv/GHSA-5g4f-3rp6-c6gv.json @@ -7,12 +7,8 @@ "CVE-2013-3911" ], "details": "Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5g88-92c3-56qf/GHSA-5g88-92c3-56qf.json b/advisories/unreviewed/2022/05/GHSA-5g88-92c3-56qf/GHSA-5g88-92c3-56qf.json index 4b7d4c32ece..5e261e0cf39 100644 --- a/advisories/unreviewed/2022/05/GHSA-5g88-92c3-56qf/GHSA-5g88-92c3-56qf.json +++ b/advisories/unreviewed/2022/05/GHSA-5g88-92c3-56qf/GHSA-5g88-92c3-56qf.json @@ -7,12 +7,8 @@ "CVE-2014-2827" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2774, CVE-2014-2820, CVE-2014-2826, and CVE-2014-4063.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5gx9-92w5-j9f6/GHSA-5gx9-92w5-j9f6.json b/advisories/unreviewed/2022/05/GHSA-5gx9-92w5-j9f6/GHSA-5gx9-92w5-j9f6.json index bed5dd1bfb3..1e9ced13742 100644 --- a/advisories/unreviewed/2022/05/GHSA-5gx9-92w5-j9f6/GHSA-5gx9-92w5-j9f6.json +++ b/advisories/unreviewed/2022/05/GHSA-5gx9-92w5-j9f6/GHSA-5gx9-92w5-j9f6.json @@ -7,12 +7,8 @@ "CVE-2013-1333" ], "details": "Buffer overflow in win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1 allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka \"Win32k Buffer Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5hc5-89mc-x5xf/GHSA-5hc5-89mc-x5xf.json b/advisories/unreviewed/2022/05/GHSA-5hc5-89mc-x5xf/GHSA-5hc5-89mc-x5xf.json index c703c0a979c..de53c0e4b25 100644 --- a/advisories/unreviewed/2022/05/GHSA-5hc5-89mc-x5xf/GHSA-5hc5-89mc-x5xf.json +++ b/advisories/unreviewed/2022/05/GHSA-5hc5-89mc-x5xf/GHSA-5hc5-89mc-x5xf.json @@ -7,12 +7,8 @@ "CVE-2014-4093" ], "details": "Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-4084.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5hq3-g6f4-988x/GHSA-5hq3-g6f4-988x.json b/advisories/unreviewed/2022/05/GHSA-5hq3-g6f4-988x/GHSA-5hq3-g6f4-988x.json index 07ab149ba4b..4f23fd28e55 100644 --- a/advisories/unreviewed/2022/05/GHSA-5hq3-g6f4-988x/GHSA-5hq3-g6f4-988x.json +++ b/advisories/unreviewed/2022/05/GHSA-5hq3-g6f4-988x/GHSA-5hq3-g6f4-988x.json @@ -7,12 +7,8 @@ "CVE-2014-2824" ], "details": "Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5hx3-c92r-4qgc/GHSA-5hx3-c92r-4qgc.json b/advisories/unreviewed/2022/05/GHSA-5hx3-c92r-4qgc/GHSA-5hx3-c92r-4qgc.json index 2cc40c9971b..11c21a3beb1 100644 --- a/advisories/unreviewed/2022/05/GHSA-5hx3-c92r-4qgc/GHSA-5hx3-c92r-4qgc.json +++ b/advisories/unreviewed/2022/05/GHSA-5hx3-c92r-4qgc/GHSA-5hx3-c92r-4qgc.json @@ -7,12 +7,8 @@ "CVE-2012-1770" ], "details": "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1766, CVE-2012-1767, CVE-2012-1769, CVE-2012-1771, CVE-2012-1772, CVE-2012-1773, CVE-2012-3106, CVE-2012-3107, CVE-2012-3108, and CVE-2012-3110.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5j65-8f2f-cgxm/GHSA-5j65-8f2f-cgxm.json b/advisories/unreviewed/2022/05/GHSA-5j65-8f2f-cgxm/GHSA-5j65-8f2f-cgxm.json index a61b256b0b3..4e7fb13b25f 100644 --- a/advisories/unreviewed/2022/05/GHSA-5j65-8f2f-cgxm/GHSA-5j65-8f2f-cgxm.json +++ b/advisories/unreviewed/2022/05/GHSA-5j65-8f2f-cgxm/GHSA-5j65-8f2f-cgxm.json @@ -7,12 +7,8 @@ "CVE-2014-0256" ], "details": "Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold allow remote attackers to cause a denial of service (iSCSI service outage) by sending many crafted packets, aka \"iSCSI Target Remote Denial of Service Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5j8p-44r4-q3m2/GHSA-5j8p-44r4-q3m2.json b/advisories/unreviewed/2022/05/GHSA-5j8p-44r4-q3m2/GHSA-5j8p-44r4-q3m2.json index 18a3f616719..8d885111b5c 100644 --- a/advisories/unreviewed/2022/05/GHSA-5j8p-44r4-q3m2/GHSA-5j8p-44r4-q3m2.json +++ b/advisories/unreviewed/2022/05/GHSA-5j8p-44r4-q3m2/GHSA-5j8p-44r4-q3m2.json @@ -7,12 +7,8 @@ "CVE-2015-0049" ], "details": "Microsoft Internet Explorer 8 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5jfj-83xp-h7rv/GHSA-5jfj-83xp-h7rv.json b/advisories/unreviewed/2022/05/GHSA-5jfj-83xp-h7rv/GHSA-5jfj-83xp-h7rv.json index a757a30b72a..dd70701238c 100644 --- a/advisories/unreviewed/2022/05/GHSA-5jfj-83xp-h7rv/GHSA-5jfj-83xp-h7rv.json +++ b/advisories/unreviewed/2022/05/GHSA-5jfj-83xp-h7rv/GHSA-5jfj-83xp-h7rv.json @@ -7,12 +7,8 @@ "CVE-2013-2393" ], "details": "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 and 8.4.0 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5jhj-gm5g-9w95/GHSA-5jhj-gm5g-9w95.json b/advisories/unreviewed/2022/05/GHSA-5jhj-gm5g-9w95/GHSA-5jhj-gm5g-9w95.json index 20e757290b0..58eb593db51 100644 --- a/advisories/unreviewed/2022/05/GHSA-5jhj-gm5g-9w95/GHSA-5jhj-gm5g-9w95.json +++ b/advisories/unreviewed/2022/05/GHSA-5jhj-gm5g-9w95/GHSA-5jhj-gm5g-9w95.json @@ -7,12 +7,8 @@ "CVE-2014-2758" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1773, CVE-2014-1783, CVE-2014-1784, CVE-2014-1786, CVE-2014-1795, CVE-2014-1805, CVE-2014-2759, CVE-2014-2765, CVE-2014-2766, and CVE-2014-2775.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5p2h-cfr3-8w37/GHSA-5p2h-cfr3-8w37.json b/advisories/unreviewed/2022/05/GHSA-5p2h-cfr3-8w37/GHSA-5p2h-cfr3-8w37.json index 8dbceb2d1bb..396a54e7d2c 100644 --- a/advisories/unreviewed/2022/05/GHSA-5p2h-cfr3-8w37/GHSA-5p2h-cfr3-8w37.json +++ b/advisories/unreviewed/2022/05/GHSA-5p2h-cfr3-8w37/GHSA-5p2h-cfr3-8w37.json @@ -7,12 +7,8 @@ "CVE-2012-1857" ], "details": "Cross-site scripting (XSS) vulnerability in the Enterprise Portal component in Microsoft Dynamics AX 2012 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka \"Dynamics AX Enterprise Portal XSS Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5pgx-xqv6-94cf/GHSA-5pgx-xqv6-94cf.json b/advisories/unreviewed/2022/05/GHSA-5pgx-xqv6-94cf/GHSA-5pgx-xqv6-94cf.json index f98010564ad..ab624c1b65e 100644 --- a/advisories/unreviewed/2022/05/GHSA-5pgx-xqv6-94cf/GHSA-5pgx-xqv6-94cf.json +++ b/advisories/unreviewed/2022/05/GHSA-5pgx-xqv6-94cf/GHSA-5pgx-xqv6-94cf.json @@ -7,12 +7,8 @@ "CVE-2013-3199" ], "details": "Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5q76-mqhx-jj3x/GHSA-5q76-mqhx-jj3x.json b/advisories/unreviewed/2022/05/GHSA-5q76-mqhx-jj3x/GHSA-5q76-mqhx-jj3x.json index a5897e0e050..415ce5cf3c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-5q76-mqhx-jj3x/GHSA-5q76-mqhx-jj3x.json +++ b/advisories/unreviewed/2022/05/GHSA-5q76-mqhx-jj3x/GHSA-5q76-mqhx-jj3x.json @@ -7,12 +7,8 @@ "CVE-2013-3847" ], "details": "Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"Word Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3848, CVE-2013-3849, and CVE-2013-3858.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5qm3-vx4p-pj88/GHSA-5qm3-vx4p-pj88.json b/advisories/unreviewed/2022/05/GHSA-5qm3-vx4p-pj88/GHSA-5qm3-vx4p-pj88.json index e7efc9ba56b..82b465a064c 100644 --- a/advisories/unreviewed/2022/05/GHSA-5qm3-vx4p-pj88/GHSA-5qm3-vx4p-pj88.json +++ b/advisories/unreviewed/2022/05/GHSA-5qm3-vx4p-pj88/GHSA-5qm3-vx4p-pj88.json @@ -7,12 +7,8 @@ "CVE-2011-1270" ], "details": "Buffer overflow in Microsoft PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka \"Presentation Buffer Overrun RCE Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5r9h-7vh8-5qgc/GHSA-5r9h-7vh8-5qgc.json b/advisories/unreviewed/2022/05/GHSA-5r9h-7vh8-5qgc/GHSA-5r9h-7vh8-5qgc.json index bc9d9f7b465..7429be54100 100644 --- a/advisories/unreviewed/2022/05/GHSA-5r9h-7vh8-5qgc/GHSA-5r9h-7vh8-5qgc.json +++ b/advisories/unreviewed/2022/05/GHSA-5r9h-7vh8-5qgc/GHSA-5r9h-7vh8-5qgc.json @@ -7,12 +7,8 @@ "CVE-2012-2546" ], "details": "Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Event Listener Use After Free Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5v4r-mh28-4gj7/GHSA-5v4r-mh28-4gj7.json b/advisories/unreviewed/2022/05/GHSA-5v4r-mh28-4gj7/GHSA-5v4r-mh28-4gj7.json index 5a69017b354..e90025e5d3e 100644 --- a/advisories/unreviewed/2022/05/GHSA-5v4r-mh28-4gj7/GHSA-5v4r-mh28-4gj7.json +++ b/advisories/unreviewed/2022/05/GHSA-5v4r-mh28-4gj7/GHSA-5v4r-mh28-4gj7.json @@ -7,12 +7,8 @@ "CVE-2015-0055" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, aka \"Internet Explorer Elevation of Privilege Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5v69-gj48-rhfm/GHSA-5v69-gj48-rhfm.json b/advisories/unreviewed/2022/05/GHSA-5v69-gj48-rhfm/GHSA-5v69-gj48-rhfm.json index f5ee7507536..98bb1b83681 100644 --- a/advisories/unreviewed/2022/05/GHSA-5v69-gj48-rhfm/GHSA-5v69-gj48-rhfm.json +++ b/advisories/unreviewed/2022/05/GHSA-5v69-gj48-rhfm/GHSA-5v69-gj48-rhfm.json @@ -7,12 +7,8 @@ "CVE-2014-2807" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2800 and CVE-2014-2809.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5vcj-p7q3-w74j/GHSA-5vcj-p7q3-w74j.json b/advisories/unreviewed/2022/05/GHSA-5vcj-p7q3-w74j/GHSA-5vcj-p7q3-w74j.json index 706c5ada151..b80e23c167b 100644 --- a/advisories/unreviewed/2022/05/GHSA-5vcj-p7q3-w74j/GHSA-5vcj-p7q3-w74j.json +++ b/advisories/unreviewed/2022/05/GHSA-5vcj-p7q3-w74j/GHSA-5vcj-p7q3-w74j.json @@ -7,12 +7,8 @@ "CVE-2011-1986" ], "details": "Use-after-free vulnerability in Microsoft Excel 2003 SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka \"Excel Use after Free WriteAV Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5wpx-2446-794j/GHSA-5wpx-2446-794j.json b/advisories/unreviewed/2022/05/GHSA-5wpx-2446-794j/GHSA-5wpx-2446-794j.json index 28faf46e953..ec2eef6b2c0 100644 --- a/advisories/unreviewed/2022/05/GHSA-5wpx-2446-794j/GHSA-5wpx-2446-794j.json +++ b/advisories/unreviewed/2022/05/GHSA-5wpx-2446-794j/GHSA-5wpx-2446-794j.json @@ -7,12 +7,8 @@ "CVE-2014-4055" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2796, CVE-2014-2808, CVE-2014-2825, CVE-2014-4050, and CVE-2014-4067.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5xw6-6hxf-q9pf/GHSA-5xw6-6hxf-q9pf.json b/advisories/unreviewed/2022/05/GHSA-5xw6-6hxf-q9pf/GHSA-5xw6-6hxf-q9pf.json index 14aca624a87..1e2fd38a50d 100644 --- a/advisories/unreviewed/2022/05/GHSA-5xw6-6hxf-q9pf/GHSA-5xw6-6hxf-q9pf.json +++ b/advisories/unreviewed/2022/05/GHSA-5xw6-6hxf-q9pf/GHSA-5xw6-6hxf-q9pf.json @@ -7,12 +7,8 @@ "CVE-2014-1778" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary web script with increased privileges via unspecified vectors, aka \"Internet Explorer Elevation of Privilege Vulnerability,\" a different vulnerability than CVE-2014-2777.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6254-gqqc-63pf/GHSA-6254-gqqc-63pf.json b/advisories/unreviewed/2022/05/GHSA-6254-gqqc-63pf/GHSA-6254-gqqc-63pf.json index c3dab4259a7..aaea3ad593d 100644 --- a/advisories/unreviewed/2022/05/GHSA-6254-gqqc-63pf/GHSA-6254-gqqc-63pf.json +++ b/advisories/unreviewed/2022/05/GHSA-6254-gqqc-63pf/GHSA-6254-gqqc-63pf.json @@ -7,12 +7,8 @@ "CVE-2014-2821" ], "details": "Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-63hc-84f3-m4hg/GHSA-63hc-84f3-m4hg.json b/advisories/unreviewed/2022/05/GHSA-63hc-84f3-m4hg/GHSA-63hc-84f3-m4hg.json index b64d6257cc5..c0d63fefb27 100644 --- a/advisories/unreviewed/2022/05/GHSA-63hc-84f3-m4hg/GHSA-63hc-84f3-m4hg.json +++ b/advisories/unreviewed/2022/05/GHSA-63hc-84f3-m4hg/GHSA-63hc-84f3-m4hg.json @@ -7,12 +7,8 @@ "CVE-2014-2799" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-63vf-8cxj-r6hq/GHSA-63vf-8cxj-r6hq.json b/advisories/unreviewed/2022/05/GHSA-63vf-8cxj-r6hq/GHSA-63vf-8cxj-r6hq.json index ec7cbe3e265..9a7036690f4 100644 --- a/advisories/unreviewed/2022/05/GHSA-63vf-8cxj-r6hq/GHSA-63vf-8cxj-r6hq.json +++ b/advisories/unreviewed/2022/05/GHSA-63vf-8cxj-r6hq/GHSA-63vf-8cxj-r6hq.json @@ -7,12 +7,8 @@ "CVE-2014-0253" ], "details": "Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine TCP connection states, which allows remote attackers to cause a denial of service (ASP.NET daemon hang) via crafted HTTP requests that trigger persistent resource consumption for a (1) stale or (2) closed connection, as exploited in the wild in February 2014, aka \"POST Request DoS Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-63w6-2q84-7hfw/GHSA-63w6-2q84-7hfw.json b/advisories/unreviewed/2022/05/GHSA-63w6-2q84-7hfw/GHSA-63w6-2q84-7hfw.json index e2280e2a83b..57466473071 100644 --- a/advisories/unreviewed/2022/05/GHSA-63w6-2q84-7hfw/GHSA-63w6-2q84-7hfw.json +++ b/advisories/unreviewed/2022/05/GHSA-63w6-2q84-7hfw/GHSA-63w6-2q84-7hfw.json @@ -7,12 +7,8 @@ "CVE-2012-1862" ], "details": "Open redirect vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL, aka \"SharePoint URL Redirection Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-63ww-m73c-p395/GHSA-63ww-m73c-p395.json b/advisories/unreviewed/2022/05/GHSA-63ww-m73c-p395/GHSA-63ww-m73c-p395.json index 019dbcb7d3b..290a57f2220 100644 --- a/advisories/unreviewed/2022/05/GHSA-63ww-m73c-p395/GHSA-63ww-m73c-p395.json +++ b/advisories/unreviewed/2022/05/GHSA-63ww-m73c-p395/GHSA-63ww-m73c-p395.json @@ -7,12 +7,8 @@ "CVE-2013-1321" ], "details": "Microsoft Publisher 2003 SP3 does not properly check the data type of an unspecified return value, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka \"Publisher Return Value Validation Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-64xj-5v78-wvjg/GHSA-64xj-5v78-wvjg.json b/advisories/unreviewed/2022/05/GHSA-64xj-5v78-wvjg/GHSA-64xj-5v78-wvjg.json index 28b23948703..adf96f05c6c 100644 --- a/advisories/unreviewed/2022/05/GHSA-64xj-5v78-wvjg/GHSA-64xj-5v78-wvjg.json +++ b/advisories/unreviewed/2022/05/GHSA-64xj-5v78-wvjg/GHSA-64xj-5v78-wvjg.json @@ -7,12 +7,8 @@ "CVE-2015-0068" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-0027, CVE-2015-0035, CVE-2015-0039, and CVE-2015-0052.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6522-8mv7-2gcc/GHSA-6522-8mv7-2gcc.json b/advisories/unreviewed/2022/05/GHSA-6522-8mv7-2gcc/GHSA-6522-8mv7-2gcc.json index 4a4330f8817..593c57eca33 100644 --- a/advisories/unreviewed/2022/05/GHSA-6522-8mv7-2gcc/GHSA-6522-8mv7-2gcc.json +++ b/advisories/unreviewed/2022/05/GHSA-6522-8mv7-2gcc/GHSA-6522-8mv7-2gcc.json @@ -7,12 +7,8 @@ "CVE-2014-4106" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-67j3-p5pq-jgr7/GHSA-67j3-p5pq-jgr7.json b/advisories/unreviewed/2022/05/GHSA-67j3-p5pq-jgr7/GHSA-67j3-p5pq-jgr7.json index b2582a485c4..b049b1b64fe 100644 --- a/advisories/unreviewed/2022/05/GHSA-67j3-p5pq-jgr7/GHSA-67j3-p5pq-jgr7.json +++ b/advisories/unreviewed/2022/05/GHSA-67j3-p5pq-jgr7/GHSA-67j3-p5pq-jgr7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -79,9 +77,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-683j-m88c-27m5/GHSA-683j-m88c-27m5.json b/advisories/unreviewed/2022/05/GHSA-683j-m88c-27m5/GHSA-683j-m88c-27m5.json index a7925982b2d..465ff4dff9a 100644 --- a/advisories/unreviewed/2022/05/GHSA-683j-m88c-27m5/GHSA-683j-m88c-27m5.json +++ b/advisories/unreviewed/2022/05/GHSA-683j-m88c-27m5/GHSA-683j-m88c-27m5.json @@ -7,12 +7,8 @@ "CVE-2014-6342" ], "details": "Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-6348.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6846-7gg2-hwpv/GHSA-6846-7gg2-hwpv.json b/advisories/unreviewed/2022/05/GHSA-6846-7gg2-hwpv/GHSA-6846-7gg2-hwpv.json index ef1bf873c55..9e572415f33 100644 --- a/advisories/unreviewed/2022/05/GHSA-6846-7gg2-hwpv/GHSA-6846-7gg2-hwpv.json +++ b/advisories/unreviewed/2022/05/GHSA-6846-7gg2-hwpv/GHSA-6846-7gg2-hwpv.json @@ -7,12 +7,8 @@ "CVE-2014-2792" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2786 and CVE-2014-2813.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-685c-84g9-3pxv/GHSA-685c-84g9-3pxv.json b/advisories/unreviewed/2022/05/GHSA-685c-84g9-3pxv/GHSA-685c-84g9-3pxv.json index b245b15bf92..e21c5acb718 100644 --- a/advisories/unreviewed/2022/05/GHSA-685c-84g9-3pxv/GHSA-685c-84g9-3pxv.json +++ b/advisories/unreviewed/2022/05/GHSA-685c-84g9-3pxv/GHSA-685c-84g9-3pxv.json @@ -7,12 +7,8 @@ "CVE-2013-3860" ], "details": "Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 does not properly parse a DTD during XML digital-signature validation, which allows remote attackers to cause a denial of service (application crash or hang) via a crafted signed XML document, aka \"Entity Expansion Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-693v-vh3p-cg3g/GHSA-693v-vh3p-cg3g.json b/advisories/unreviewed/2022/05/GHSA-693v-vh3p-cg3g/GHSA-693v-vh3p-cg3g.json index 772909849ac..7a44cf5f197 100644 --- a/advisories/unreviewed/2022/05/GHSA-693v-vh3p-cg3g/GHSA-693v-vh3p-cg3g.json +++ b/advisories/unreviewed/2022/05/GHSA-693v-vh3p-cg3g/GHSA-693v-vh3p-cg3g.json @@ -7,12 +7,8 @@ "CVE-2011-0978" ], "details": "Stack-based buffer overflow in Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via vectors related to an axis properties record, and improper incrementing of an array index, aka \"Excel Array Indexing Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-696m-9rqp-m3c6/GHSA-696m-9rqp-m3c6.json b/advisories/unreviewed/2022/05/GHSA-696m-9rqp-m3c6/GHSA-696m-9rqp-m3c6.json index f824921795a..9eb0ab63a68 100644 --- a/advisories/unreviewed/2022/05/GHSA-696m-9rqp-m3c6/GHSA-696m-9rqp-m3c6.json +++ b/advisories/unreviewed/2022/05/GHSA-696m-9rqp-m3c6/GHSA-696m-9rqp-m3c6.json @@ -7,12 +7,8 @@ "CVE-2014-0287" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0281.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-699x-32cj-fh68/GHSA-699x-32cj-fh68.json b/advisories/unreviewed/2022/05/GHSA-699x-32cj-fh68/GHSA-699x-32cj-fh68.json index bbb1ea451c5..9979553a945 100644 --- a/advisories/unreviewed/2022/05/GHSA-699x-32cj-fh68/GHSA-699x-32cj-fh68.json +++ b/advisories/unreviewed/2022/05/GHSA-699x-32cj-fh68/GHSA-699x-32cj-fh68.json @@ -7,12 +7,8 @@ "CVE-2012-1887" ], "details": "Use-after-free vulnerability in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1, and Office 2008 and 2011 for Mac, allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka \"Excel SST Invalid Length Use After Free Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-69j8-667p-r38f/GHSA-69j8-667p-r38f.json b/advisories/unreviewed/2022/05/GHSA-69j8-667p-r38f/GHSA-69j8-667p-r38f.json index 113030cb214..f0a2e2562a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-69j8-667p-r38f/GHSA-69j8-667p-r38f.json +++ b/advisories/unreviewed/2022/05/GHSA-69j8-667p-r38f/GHSA-69j8-667p-r38f.json @@ -7,12 +7,8 @@ "CVE-2014-6340" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka \"Internet Explorer Cross-domain Information Disclosure Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-69pj-x2jm-jg6q/GHSA-69pj-x2jm-jg6q.json b/advisories/unreviewed/2022/05/GHSA-69pj-x2jm-jg6q/GHSA-69pj-x2jm-jg6q.json index 136698239bd..5ad0e906451 100644 --- a/advisories/unreviewed/2022/05/GHSA-69pj-x2jm-jg6q/GHSA-69pj-x2jm-jg6q.json +++ b/advisories/unreviewed/2022/05/GHSA-69pj-x2jm-jg6q/GHSA-69pj-x2jm-jg6q.json @@ -7,12 +7,8 @@ "CVE-2014-2822" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2810, CVE-2014-2811, CVE-2014-2823, and CVE-2014-4057.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6c9r-6cxc-xp3c/GHSA-6c9r-6cxc-xp3c.json b/advisories/unreviewed/2022/05/GHSA-6c9r-6cxc-xp3c/GHSA-6c9r-6cxc-xp3c.json index 15a0667c43c..e8c7097aba8 100644 --- a/advisories/unreviewed/2022/05/GHSA-6c9r-6cxc-xp3c/GHSA-6c9r-6cxc-xp3c.json +++ b/advisories/unreviewed/2022/05/GHSA-6c9r-6cxc-xp3c/GHSA-6c9r-6cxc-xp3c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6cqw-7p6x-fvp3/GHSA-6cqw-7p6x-fvp3.json b/advisories/unreviewed/2022/05/GHSA-6cqw-7p6x-fvp3/GHSA-6cqw-7p6x-fvp3.json index 9a16d1b869b..ce157a01234 100644 --- a/advisories/unreviewed/2022/05/GHSA-6cqw-7p6x-fvp3/GHSA-6cqw-7p6x-fvp3.json +++ b/advisories/unreviewed/2022/05/GHSA-6cqw-7p6x-fvp3/GHSA-6cqw-7p6x-fvp3.json @@ -7,12 +7,8 @@ "CVE-2013-3118" ], "details": "Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3120 and CVE-2013-3125.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6cvp-fp94-mvg9/GHSA-6cvp-fp94-mvg9.json b/advisories/unreviewed/2022/05/GHSA-6cvp-fp94-mvg9/GHSA-6cvp-fp94-mvg9.json index 09264700892..980dddcf097 100644 --- a/advisories/unreviewed/2022/05/GHSA-6cvp-fp94-mvg9/GHSA-6cvp-fp94-mvg9.json +++ b/advisories/unreviewed/2022/05/GHSA-6cvp-fp94-mvg9/GHSA-6cvp-fp94-mvg9.json @@ -7,12 +7,8 @@ "CVE-2011-0979" ], "details": "Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; and Excel Viewer SP2 do not properly handle errors during the parsing of Office Art records in Excel spreadsheets, which allows remote attackers to execute arbitrary code via a malformed object record, related to a \"stray reference,\" aka \"Excel Linked List Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6fpg-25vc-vc92/GHSA-6fpg-25vc-vc92.json b/advisories/unreviewed/2022/05/GHSA-6fpg-25vc-vc92/GHSA-6fpg-25vc-vc92.json index 85b48990729..43d0c16329d 100644 --- a/advisories/unreviewed/2022/05/GHSA-6fpg-25vc-vc92/GHSA-6fpg-25vc-vc92.json +++ b/advisories/unreviewed/2022/05/GHSA-6fpg-25vc-vc92/GHSA-6fpg-25vc-vc92.json @@ -7,12 +7,8 @@ "CVE-2011-1280" ], "details": "The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express (SSMSE) 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrary files via a crafted .disco (Web Service Discovery) file, aka \"XML External Entities Resolution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6fph-gvq5-7653/GHSA-6fph-gvq5-7653.json b/advisories/unreviewed/2022/05/GHSA-6fph-gvq5-7653/GHSA-6fph-gvq5-7653.json index b257c5acb4b..3d99526e6d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-6fph-gvq5-7653/GHSA-6fph-gvq5-7653.json +++ b/advisories/unreviewed/2022/05/GHSA-6fph-gvq5-7653/GHSA-6fph-gvq5-7653.json @@ -7,12 +7,8 @@ "CVE-2014-2773" ], "details": "Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2768.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6frg-7rq4-rfc6/GHSA-6frg-7rq4-rfc6.json b/advisories/unreviewed/2022/05/GHSA-6frg-7rq4-rfc6/GHSA-6frg-7rq4-rfc6.json index 9445673f6d5..641b02a1838 100644 --- a/advisories/unreviewed/2022/05/GHSA-6frg-7rq4-rfc6/GHSA-6frg-7rq4-rfc6.json +++ b/advisories/unreviewed/2022/05/GHSA-6frg-7rq4-rfc6/GHSA-6frg-7rq4-rfc6.json @@ -7,12 +7,8 @@ "CVE-2014-0309" ], "details": "Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6h2j-4c97-r8xc/GHSA-6h2j-4c97-r8xc.json b/advisories/unreviewed/2022/05/GHSA-6h2j-4c97-r8xc/GHSA-6h2j-4c97-r8xc.json index 8bd4126a5ad..2f04fa47785 100644 --- a/advisories/unreviewed/2022/05/GHSA-6h2j-4c97-r8xc/GHSA-6h2j-4c97-r8xc.json +++ b/advisories/unreviewed/2022/05/GHSA-6h2j-4c97-r8xc/GHSA-6h2j-4c97-r8xc.json @@ -7,12 +7,8 @@ "CVE-2014-1781" ], "details": "Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1792, CVE-2014-1804, and CVE-2014-2770.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6h39-967c-7grq/GHSA-6h39-967c-7grq.json b/advisories/unreviewed/2022/05/GHSA-6h39-967c-7grq/GHSA-6h39-967c-7grq.json index ff0ee59ad9d..e1e6a71a372 100644 --- a/advisories/unreviewed/2022/05/GHSA-6h39-967c-7grq/GHSA-6h39-967c-7grq.json +++ b/advisories/unreviewed/2022/05/GHSA-6h39-967c-7grq/GHSA-6h39-967c-7grq.json @@ -7,12 +7,8 @@ "CVE-2014-4099" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6hh8-2qv7-j8f8/GHSA-6hh8-2qv7-j8f8.json b/advisories/unreviewed/2022/05/GHSA-6hh8-2qv7-j8f8/GHSA-6hh8-2qv7-j8f8.json index f422fb99c86..aff0b71c4c1 100644 --- a/advisories/unreviewed/2022/05/GHSA-6hh8-2qv7-j8f8/GHSA-6hh8-2qv7-j8f8.json +++ b/advisories/unreviewed/2022/05/GHSA-6hh8-2qv7-j8f8/GHSA-6hh8-2qv7-j8f8.json @@ -7,12 +7,8 @@ "CVE-2014-1786" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1773, CVE-2014-1783, CVE-2014-1784, CVE-2014-1795, CVE-2014-1805, CVE-2014-2758, CVE-2014-2759, CVE-2014-2765, CVE-2014-2766, and CVE-2014-2775.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6jp9-xqcp-2qgr/GHSA-6jp9-xqcp-2qgr.json b/advisories/unreviewed/2022/05/GHSA-6jp9-xqcp-2qgr/GHSA-6jp9-xqcp-2qgr.json index b04c6aa29a0..5a855e13dce 100644 --- a/advisories/unreviewed/2022/05/GHSA-6jp9-xqcp-2qgr/GHSA-6jp9-xqcp-2qgr.json +++ b/advisories/unreviewed/2022/05/GHSA-6jp9-xqcp-2qgr/GHSA-6jp9-xqcp-2qgr.json @@ -7,12 +7,8 @@ "CVE-2014-0286" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0275 and CVE-2014-0285.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6jw4-77j4-vh6j/GHSA-6jw4-77j4-vh6j.json b/advisories/unreviewed/2022/05/GHSA-6jw4-77j4-vh6j/GHSA-6jw4-77j4-vh6j.json index 4573085bc63..4cf6350b8aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-6jw4-77j4-vh6j/GHSA-6jw4-77j4-vh6j.json +++ b/advisories/unreviewed/2022/05/GHSA-6jw4-77j4-vh6j/GHSA-6jw4-77j4-vh6j.json @@ -7,12 +7,8 @@ "CVE-2014-2783" ], "details": "Microsoft Internet Explorer 7 through 11 does not prevent use of wildcard EV SSL certificates, which might allow remote attackers to spoof a trust level by leveraging improper issuance of a wildcard certificate by a recognized Certification Authority, aka \"Extended Validation (EV) Certificate Security Feature Bypass Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6m5w-q2gj-4f48/GHSA-6m5w-q2gj-4f48.json b/advisories/unreviewed/2022/05/GHSA-6m5w-q2gj-4f48/GHSA-6m5w-q2gj-4f48.json index 5ed00a95f72..ec7c4e56fe1 100644 --- a/advisories/unreviewed/2022/05/GHSA-6m5w-q2gj-4f48/GHSA-6m5w-q2gj-4f48.json +++ b/advisories/unreviewed/2022/05/GHSA-6m5w-q2gj-4f48/GHSA-6m5w-q2gj-4f48.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6p53-695h-cp22/GHSA-6p53-695h-cp22.json b/advisories/unreviewed/2022/05/GHSA-6p53-695h-cp22/GHSA-6p53-695h-cp22.json index cb6270f86ca..55a348a36a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-6p53-695h-cp22/GHSA-6p53-695h-cp22.json +++ b/advisories/unreviewed/2022/05/GHSA-6p53-695h-cp22/GHSA-6p53-695h-cp22.json @@ -7,12 +7,8 @@ "CVE-2012-1853" ], "details": "Stack-based buffer overflow in the Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP3 allows remote attackers to execute arbitrary code via crafted RAP response packets, aka \"Remote Administration Protocol Stack Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6p6p-x5xq-vc4v/GHSA-6p6p-x5xq-vc4v.json b/advisories/unreviewed/2022/05/GHSA-6p6p-x5xq-vc4v/GHSA-6p6p-x5xq-vc4v.json index a4e8be5a5f8..42e07c82ebb 100644 --- a/advisories/unreviewed/2022/05/GHSA-6p6p-x5xq-vc4v/GHSA-6p6p-x5xq-vc4v.json +++ b/advisories/unreviewed/2022/05/GHSA-6p6p-x5xq-vc4v/GHSA-6p6p-x5xq-vc4v.json @@ -7,12 +7,8 @@ "CVE-2011-0103" ], "details": "Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted record information in an Excel file, aka \"Excel Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6qjm-m8fp-j2mm/GHSA-6qjm-m8fp-j2mm.json b/advisories/unreviewed/2022/05/GHSA-6qjm-m8fp-j2mm/GHSA-6qjm-m8fp-j2mm.json index 59649d42054..b73d9da7c8a 100644 --- a/advisories/unreviewed/2022/05/GHSA-6qjm-m8fp-j2mm/GHSA-6qjm-m8fp-j2mm.json +++ b/advisories/unreviewed/2022/05/GHSA-6qjm-m8fp-j2mm/GHSA-6qjm-m8fp-j2mm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6v6r-j7gc-grxj/GHSA-6v6r-j7gc-grxj.json b/advisories/unreviewed/2022/05/GHSA-6v6r-j7gc-grxj/GHSA-6v6r-j7gc-grxj.json index 877077b02ee..e7c9523b466 100644 --- a/advisories/unreviewed/2022/05/GHSA-6v6r-j7gc-grxj/GHSA-6v6r-j7gc-grxj.json +++ b/advisories/unreviewed/2022/05/GHSA-6v6r-j7gc-grxj/GHSA-6v6r-j7gc-grxj.json @@ -7,12 +7,8 @@ "CVE-2014-4108" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6w2m-wmw9-8p95/GHSA-6w2m-wmw9-8p95.json b/advisories/unreviewed/2022/05/GHSA-6w2m-wmw9-8p95/GHSA-6w2m-wmw9-8p95.json index 9cb60999d19..240331f6a57 100644 --- a/advisories/unreviewed/2022/05/GHSA-6w2m-wmw9-8p95/GHSA-6w2m-wmw9-8p95.json +++ b/advisories/unreviewed/2022/05/GHSA-6w2m-wmw9-8p95/GHSA-6w2m-wmw9-8p95.json @@ -7,12 +7,8 @@ "CVE-2014-1751" ], "details": "Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0235 and CVE-2014-1755.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-736j-5hf9-qc6m/GHSA-736j-5hf9-qc6m.json b/advisories/unreviewed/2022/05/GHSA-736j-5hf9-qc6m/GHSA-736j-5hf9-qc6m.json index c7ce6817460..9c7f2c8d4ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-736j-5hf9-qc6m/GHSA-736j-5hf9-qc6m.json +++ b/advisories/unreviewed/2022/05/GHSA-736j-5hf9-qc6m/GHSA-736j-5hf9-qc6m.json @@ -7,12 +7,8 @@ "CVE-2014-0279" ], "details": "Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0277 and CVE-2014-0278.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-73h3-6f2v-rvhm/GHSA-73h3-6f2v-rvhm.json b/advisories/unreviewed/2022/05/GHSA-73h3-6f2v-rvhm/GHSA-73h3-6f2v-rvhm.json index 4494dc3353e..9d16dcce556 100644 --- a/advisories/unreviewed/2022/05/GHSA-73h3-6f2v-rvhm/GHSA-73h3-6f2v-rvhm.json +++ b/advisories/unreviewed/2022/05/GHSA-73h3-6f2v-rvhm/GHSA-73h3-6f2v-rvhm.json @@ -7,12 +7,8 @@ "CVE-2014-2774" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2820, CVE-2014-2826, CVE-2014-2827, and CVE-2014-4063.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-73px-54m5-qm94/GHSA-73px-54m5-qm94.json b/advisories/unreviewed/2022/05/GHSA-73px-54m5-qm94/GHSA-73px-54m5-qm94.json index 458b1d896e3..911e9ebcd84 100644 --- a/advisories/unreviewed/2022/05/GHSA-73px-54m5-qm94/GHSA-73px-54m5-qm94.json +++ b/advisories/unreviewed/2022/05/GHSA-73px-54m5-qm94/GHSA-73px-54m5-qm94.json @@ -7,12 +7,8 @@ "CVE-2014-2826" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2774, CVE-2014-2820, CVE-2014-2827, and CVE-2014-4063.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-73vm-jqp4-fcg6/GHSA-73vm-jqp4-fcg6.json b/advisories/unreviewed/2022/05/GHSA-73vm-jqp4-fcg6/GHSA-73vm-jqp4-fcg6.json index 9836cd766d0..a69efe87f6d 100644 --- a/advisories/unreviewed/2022/05/GHSA-73vm-jqp4-fcg6/GHSA-73vm-jqp4-fcg6.json +++ b/advisories/unreviewed/2022/05/GHSA-73vm-jqp4-fcg6/GHSA-73vm-jqp4-fcg6.json @@ -7,12 +7,8 @@ "CVE-2013-1337" ], "details": "Microsoft .NET Framework 4.5 does not properly create policy requirements for custom Windows Communication Foundation (WCF) endpoint authentication in certain situations involving passwords over HTTPS, which allows remote attackers to bypass authentication by sending queries to an endpoint, aka \"Authentication Bypass Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-743p-q3h9-c4vx/GHSA-743p-q3h9-c4vx.json b/advisories/unreviewed/2022/05/GHSA-743p-q3h9-c4vx/GHSA-743p-q3h9-c4vx.json index 30217bd16c1..698a1fd05cd 100644 --- a/advisories/unreviewed/2022/05/GHSA-743p-q3h9-c4vx/GHSA-743p-q3h9-c4vx.json +++ b/advisories/unreviewed/2022/05/GHSA-743p-q3h9-c4vx/GHSA-743p-q3h9-c4vx.json @@ -7,12 +7,8 @@ "CVE-2013-1324" ], "details": "Stack-based buffer overflow in Microsoft Office 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT allows remote attackers to execute arbitrary code via a crafted WordPerfect document (.wpd) file, aka \"Word Stack Buffer Overwrite Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-74m3-8jcv-5xvr/GHSA-74m3-8jcv-5xvr.json b/advisories/unreviewed/2022/05/GHSA-74m3-8jcv-5xvr/GHSA-74m3-8jcv-5xvr.json index a4b1415bbd1..bafab0c73d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-74m3-8jcv-5xvr/GHSA-74m3-8jcv-5xvr.json +++ b/advisories/unreviewed/2022/05/GHSA-74m3-8jcv-5xvr/GHSA-74m3-8jcv-5xvr.json @@ -7,12 +7,8 @@ "CVE-2014-1759" ], "details": "pubconv.dll in Microsoft Publisher 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference and application crash) via a crafted .pub file, aka \"Arbitrary Pointer Dereference Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7579-729j-m9g7/GHSA-7579-729j-m9g7.json b/advisories/unreviewed/2022/05/GHSA-7579-729j-m9g7/GHSA-7579-729j-m9g7.json index 88d30895113..f65b01a9188 100644 --- a/advisories/unreviewed/2022/05/GHSA-7579-729j-m9g7/GHSA-7579-729j-m9g7.json +++ b/advisories/unreviewed/2022/05/GHSA-7579-729j-m9g7/GHSA-7579-729j-m9g7.json @@ -7,12 +7,8 @@ "CVE-2014-0271" ], "details": "The VBScript engine in Microsoft Internet Explorer 6 through 11, and VBScript 5.6 through 5.8, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"VBScript Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-764w-g8wq-qgg3/GHSA-764w-g8wq-qgg3.json b/advisories/unreviewed/2022/05/GHSA-764w-g8wq-qgg3/GHSA-764w-g8wq-qgg3.json index 11b78f986cc..64b99526c88 100644 --- a/advisories/unreviewed/2022/05/GHSA-764w-g8wq-qgg3/GHSA-764w-g8wq-qgg3.json +++ b/advisories/unreviewed/2022/05/GHSA-764w-g8wq-qgg3/GHSA-764w-g8wq-qgg3.json @@ -7,12 +7,8 @@ "CVE-2013-1306" ], "details": "Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer Use After Free Vulnerability,\" a different vulnerability than CVE-2013-1313.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-766r-8jj9-m4wx/GHSA-766r-8jj9-m4wx.json b/advisories/unreviewed/2022/05/GHSA-766r-8jj9-m4wx/GHSA-766r-8jj9-m4wx.json index d5c2832924b..bdacee8c509 100644 --- a/advisories/unreviewed/2022/05/GHSA-766r-8jj9-m4wx/GHSA-766r-8jj9-m4wx.json +++ b/advisories/unreviewed/2022/05/GHSA-766r-8jj9-m4wx/GHSA-766r-8jj9-m4wx.json @@ -7,12 +7,8 @@ "CVE-2013-3854" ], "details": "Microsoft Office 2007 SP3 and Word 2007 SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"Word Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3853.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-76f4-x788-5m8h/GHSA-76f4-x788-5m8h.json b/advisories/unreviewed/2022/05/GHSA-76f4-x788-5m8h/GHSA-76f4-x788-5m8h.json index f5b044cc8eb..153f909f288 100644 --- a/advisories/unreviewed/2022/05/GHSA-76f4-x788-5m8h/GHSA-76f4-x788-5m8h.json +++ b/advisories/unreviewed/2022/05/GHSA-76f4-x788-5m8h/GHSA-76f4-x788-5m8h.json @@ -7,12 +7,8 @@ "CVE-2014-4086" ], "details": "Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-76q9-xgqp-v9rq/GHSA-76q9-xgqp-v9rq.json b/advisories/unreviewed/2022/05/GHSA-76q9-xgqp-v9rq/GHSA-76q9-xgqp-v9rq.json index afabfc8feb4..9ad0a40b84a 100644 --- a/advisories/unreviewed/2022/05/GHSA-76q9-xgqp-v9rq/GHSA-76q9-xgqp-v9rq.json +++ b/advisories/unreviewed/2022/05/GHSA-76q9-xgqp-v9rq/GHSA-76q9-xgqp-v9rq.json @@ -7,12 +7,8 @@ "CVE-2014-0313" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0321.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-777p-5mff-5cpm/GHSA-777p-5mff-5cpm.json b/advisories/unreviewed/2022/05/GHSA-777p-5mff-5cpm/GHSA-777p-5mff-5cpm.json index 5f0a1d2ad87..2991279c4a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-777p-5mff-5cpm/GHSA-777p-5mff-5cpm.json +++ b/advisories/unreviewed/2022/05/GHSA-777p-5mff-5cpm/GHSA-777p-5mff-5cpm.json @@ -7,12 +7,8 @@ "CVE-2014-4068" ], "details": "The Response Group Service in Microsoft Lync Server 2010 and 2013 and the Core Components in Lync Server 2013 do not properly handle exceptions, which allows remote attackers to cause a denial of service (daemon hang) via a crafted call, aka \"Lync Denial of Service Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-77c3-2c6h-6mxw/GHSA-77c3-2c6h-6mxw.json b/advisories/unreviewed/2022/05/GHSA-77c3-2c6h-6mxw/GHSA-77c3-2c6h-6mxw.json index c126dab2798..694ba0d4103 100644 --- a/advisories/unreviewed/2022/05/GHSA-77c3-2c6h-6mxw/GHSA-77c3-2c6h-6mxw.json +++ b/advisories/unreviewed/2022/05/GHSA-77c3-2c6h-6mxw/GHSA-77c3-2c6h-6mxw.json @@ -7,12 +7,8 @@ "CVE-2014-0273" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0270, CVE-2014-0274, and CVE-2014-0288.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-77fm-4w36-vpp3/GHSA-77fm-4w36-vpp3.json b/advisories/unreviewed/2022/05/GHSA-77fm-4w36-vpp3/GHSA-77fm-4w36-vpp3.json index af6d5fe1281..e7a48250501 100644 --- a/advisories/unreviewed/2022/05/GHSA-77fm-4w36-vpp3/GHSA-77fm-4w36-vpp3.json +++ b/advisories/unreviewed/2022/05/GHSA-77fm-4w36-vpp3/GHSA-77fm-4w36-vpp3.json @@ -7,12 +7,8 @@ "CVE-2012-1854" ], "details": "Untrusted search path vulnerability in VBE6.dll in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Microsoft Visual Basic for Applications (VBA); and Summit Microsoft Visual Basic for Applications SDK allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka \"Visual Basic for Applications Insecure Library Loading Vulnerability,\" as exploited in the wild in July 2012.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-797p-785q-36j6/GHSA-797p-785q-36j6.json b/advisories/unreviewed/2022/05/GHSA-797p-785q-36j6/GHSA-797p-785q-36j6.json index f63d969f4a3..23ba04ce752 100644 --- a/advisories/unreviewed/2022/05/GHSA-797p-785q-36j6/GHSA-797p-785q-36j6.json +++ b/advisories/unreviewed/2022/05/GHSA-797p-785q-36j6/GHSA-797p-785q-36j6.json @@ -7,12 +7,8 @@ "CVE-2013-3208" ], "details": "Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-79rx-73jf-mqqc/GHSA-79rx-73jf-mqqc.json b/advisories/unreviewed/2022/05/GHSA-79rx-73jf-mqqc/GHSA-79rx-73jf-mqqc.json index 7397c1a888c..255a85c1892 100644 --- a/advisories/unreviewed/2022/05/GHSA-79rx-73jf-mqqc/GHSA-79rx-73jf-mqqc.json +++ b/advisories/unreviewed/2022/05/GHSA-79rx-73jf-mqqc/GHSA-79rx-73jf-mqqc.json @@ -7,12 +7,8 @@ "CVE-2012-2548" ], "details": "Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Layout Use After Free Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7c5r-86cm-xrrp/GHSA-7c5r-86cm-xrrp.json b/advisories/unreviewed/2022/05/GHSA-7c5r-86cm-xrrp/GHSA-7c5r-86cm-xrrp.json index 00fc7b0067a..c4095abea70 100644 --- a/advisories/unreviewed/2022/05/GHSA-7c5r-86cm-xrrp/GHSA-7c5r-86cm-xrrp.json +++ b/advisories/unreviewed/2022/05/GHSA-7c5r-86cm-xrrp/GHSA-7c5r-86cm-xrrp.json @@ -7,12 +7,8 @@ "CVE-2014-6319" ], "details": "Outlook Web App (OWA) in Microsoft Exchange Server 2007 SP3, 2010 SP3, and 2013 SP1 and Cumulative Update 6 does not properly validate tokens in requests, which allows remote attackers to spoof the origin of e-mail messages via unspecified vectors, aka \"Outlook Web App Token Spoofing Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7cv2-f4f9-vw96/GHSA-7cv2-f4f9-vw96.json b/advisories/unreviewed/2022/05/GHSA-7cv2-f4f9-vw96/GHSA-7cv2-f4f9-vw96.json index 580155664ae..bc7f0ba34b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-7cv2-f4f9-vw96/GHSA-7cv2-f4f9-vw96.json +++ b/advisories/unreviewed/2022/05/GHSA-7cv2-f4f9-vw96/GHSA-7cv2-f4f9-vw96.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7cxp-g59x-w3cv/GHSA-7cxp-g59x-w3cv.json b/advisories/unreviewed/2022/05/GHSA-7cxp-g59x-w3cv/GHSA-7cxp-g59x-w3cv.json index 44b3273ec01..eb1a85ec1dc 100644 --- a/advisories/unreviewed/2022/05/GHSA-7cxp-g59x-w3cv/GHSA-7cxp-g59x-w3cv.json +++ b/advisories/unreviewed/2022/05/GHSA-7cxp-g59x-w3cv/GHSA-7cxp-g59x-w3cv.json @@ -7,12 +7,8 @@ "CVE-2014-2825" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2796, CVE-2014-2808, CVE-2014-4050, CVE-2014-4055, and CVE-2014-4067.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7f3p-8cp9-3xf6/GHSA-7f3p-8cp9-3xf6.json b/advisories/unreviewed/2022/05/GHSA-7f3p-8cp9-3xf6/GHSA-7f3p-8cp9-3xf6.json index 90fe61ea58b..8741cd26414 100644 --- a/advisories/unreviewed/2022/05/GHSA-7f3p-8cp9-3xf6/GHSA-7f3p-8cp9-3xf6.json +++ b/advisories/unreviewed/2022/05/GHSA-7f3p-8cp9-3xf6/GHSA-7f3p-8cp9-3xf6.json @@ -7,12 +7,8 @@ "CVE-2013-3113" ], "details": "Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3112, CVE-2013-3121, CVE-2013-3139, and CVE-2013-3142.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7fmc-w3rx-wfq5/GHSA-7fmc-w3rx-wfq5.json b/advisories/unreviewed/2022/05/GHSA-7fmc-w3rx-wfq5/GHSA-7fmc-w3rx-wfq5.json index acfa7fe538a..e54de335a10 100644 --- a/advisories/unreviewed/2022/05/GHSA-7fmc-w3rx-wfq5/GHSA-7fmc-w3rx-wfq5.json +++ b/advisories/unreviewed/2022/05/GHSA-7fmc-w3rx-wfq5/GHSA-7fmc-w3rx-wfq5.json @@ -7,12 +7,8 @@ "CVE-2014-2795" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2789, CVE-2014-2798, and CVE-2014-2804.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7ghq-3vv3-3m32/GHSA-7ghq-3vv3-3m32.json b/advisories/unreviewed/2022/05/GHSA-7ghq-3vv3-3m32/GHSA-7ghq-3vv3-3m32.json index e2c4b7694ac..c91b7537b01 100644 --- a/advisories/unreviewed/2022/05/GHSA-7ghq-3vv3-3m32/GHSA-7ghq-3vv3-3m32.json +++ b/advisories/unreviewed/2022/05/GHSA-7ghq-3vv3-3m32/GHSA-7ghq-3vv3-3m32.json @@ -7,12 +7,8 @@ "CVE-2014-2794" ], "details": "Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2788.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7gmj-vwpf-4ch9/GHSA-7gmj-vwpf-4ch9.json b/advisories/unreviewed/2022/05/GHSA-7gmj-vwpf-4ch9/GHSA-7gmj-vwpf-4ch9.json index 9a3389eaa53..eb27c11db39 100644 --- a/advisories/unreviewed/2022/05/GHSA-7gmj-vwpf-4ch9/GHSA-7gmj-vwpf-4ch9.json +++ b/advisories/unreviewed/2022/05/GHSA-7gmj-vwpf-4ch9/GHSA-7gmj-vwpf-4ch9.json @@ -7,12 +7,8 @@ "CVE-2013-1296" ], "details": "The Remote Desktop ActiveX control in mstscax.dll in Microsoft Remote Desktop Connection Client 6.1 and 7.0 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a web page that triggers access to a deleted object, and allows remote RDP servers to execute arbitrary code via unspecified vectors that trigger access to a deleted object, aka \"RDP ActiveX Control Remote Code Execution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7h35-p88f-394x/GHSA-7h35-p88f-394x.json b/advisories/unreviewed/2022/05/GHSA-7h35-p88f-394x/GHSA-7h35-p88f-394x.json index b19281a6f53..38b1f1a6c10 100644 --- a/advisories/unreviewed/2022/05/GHSA-7h35-p88f-394x/GHSA-7h35-p88f-394x.json +++ b/advisories/unreviewed/2022/05/GHSA-7h35-p88f-394x/GHSA-7h35-p88f-394x.json @@ -7,12 +7,8 @@ "CVE-2010-3232" ], "details": "Microsoft Excel 2003 SP3 and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka \"Excel File Format Parsing Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7hh6-mp8v-mm82/GHSA-7hh6-mp8v-mm82.json b/advisories/unreviewed/2022/05/GHSA-7hh6-mp8v-mm82/GHSA-7hh6-mp8v-mm82.json index 63640e0eef4..4b28590f4c0 100644 --- a/advisories/unreviewed/2022/05/GHSA-7hh6-mp8v-mm82/GHSA-7hh6-mp8v-mm82.json +++ b/advisories/unreviewed/2022/05/GHSA-7hh6-mp8v-mm82/GHSA-7hh6-mp8v-mm82.json @@ -7,12 +7,8 @@ "CVE-2014-4121" ], "details": "Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly parse internationalized resource identifiers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted request to a .NET web application, aka \".NET Framework Remote Code Execution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7hj7-cjjc-fh86/GHSA-7hj7-cjjc-fh86.json b/advisories/unreviewed/2022/05/GHSA-7hj7-cjjc-fh86/GHSA-7hj7-cjjc-fh86.json index 019d812e411..901f182390b 100644 --- a/advisories/unreviewed/2022/05/GHSA-7hj7-cjjc-fh86/GHSA-7hj7-cjjc-fh86.json +++ b/advisories/unreviewed/2022/05/GHSA-7hj7-cjjc-fh86/GHSA-7hj7-cjjc-fh86.json @@ -7,12 +7,8 @@ "CVE-2011-3412" ], "details": "Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect memory handling, aka \"Publisher Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7pg7-wcqg-2p3r/GHSA-7pg7-wcqg-2p3r.json b/advisories/unreviewed/2022/05/GHSA-7pg7-wcqg-2p3r/GHSA-7pg7-wcqg-2p3r.json index 0546df0f985..674dbeac872 100644 --- a/advisories/unreviewed/2022/05/GHSA-7pg7-wcqg-2p3r/GHSA-7pg7-wcqg-2p3r.json +++ b/advisories/unreviewed/2022/05/GHSA-7pg7-wcqg-2p3r/GHSA-7pg7-wcqg-2p3r.json @@ -7,12 +7,8 @@ "CVE-2011-1269" ], "details": "Microsoft PowerPoint 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 make unspecified function calls during file parsing without proper handling of memory, which allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka \"Presentation Memory Corruption RCE Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7pvm-4h6q-838w/GHSA-7pvm-4h6q-838w.json b/advisories/unreviewed/2022/05/GHSA-7pvm-4h6q-838w/GHSA-7pvm-4h6q-838w.json index 726a3a56d39..50ab5452a1c 100644 --- a/advisories/unreviewed/2022/05/GHSA-7pvm-4h6q-838w/GHSA-7pvm-4h6q-838w.json +++ b/advisories/unreviewed/2022/05/GHSA-7pvm-4h6q-838w/GHSA-7pvm-4h6q-838w.json @@ -7,12 +7,8 @@ "CVE-2013-3880" ], "details": "The App Container feature in the kernel-mode drivers in Microsoft Windows 8, Windows Server 2012, and Windows RT allows remote attackers to bypass intended access restrictions and obtain sensitive information from a different container via a Trojan horse application, aka \"App Container Elevation of Privilege Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7q5p-6568-pm3p/GHSA-7q5p-6568-pm3p.json b/advisories/unreviewed/2022/05/GHSA-7q5p-6568-pm3p/GHSA-7q5p-6568-pm3p.json index 228b5fd67e4..a1f99011e0c 100644 --- a/advisories/unreviewed/2022/05/GHSA-7q5p-6568-pm3p/GHSA-7q5p-6568-pm3p.json +++ b/advisories/unreviewed/2022/05/GHSA-7q5p-6568-pm3p/GHSA-7q5p-6568-pm3p.json @@ -7,12 +7,8 @@ "CVE-2012-1892" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft Visual Studio Team Foundation Server 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka \"XSS Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7qg6-22cq-32p9/GHSA-7qg6-22cq-32p9.json b/advisories/unreviewed/2022/05/GHSA-7qg6-22cq-32p9/GHSA-7qg6-22cq-32p9.json index 62a52d06c34..8f6bda62980 100644 --- a/advisories/unreviewed/2022/05/GHSA-7qg6-22cq-32p9/GHSA-7qg6-22cq-32p9.json +++ b/advisories/unreviewed/2022/05/GHSA-7qg6-22cq-32p9/GHSA-7qg6-22cq-32p9.json @@ -7,12 +7,8 @@ "CVE-2014-4062" ], "details": "Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, and 3.5.1 does not properly implement the ASLR protection mechanism, which allows remote attackers to obtain sensitive address information via a crafted web site, aka \".NET ASLR Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7qhg-62h8-j958/GHSA-7qhg-62h8-j958.json b/advisories/unreviewed/2022/05/GHSA-7qhg-62h8-j958/GHSA-7qhg-62h8-j958.json index f741345ec62..f219f029177 100644 --- a/advisories/unreviewed/2022/05/GHSA-7qhg-62h8-j958/GHSA-7qhg-62h8-j958.json +++ b/advisories/unreviewed/2022/05/GHSA-7qhg-62h8-j958/GHSA-7qhg-62h8-j958.json @@ -7,12 +7,8 @@ "CVE-2013-1327" ], "details": "Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper memory allocation, aka \"Publisher Signed Integer Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7v5r-ph2v-5fq4/GHSA-7v5r-ph2v-5fq4.json b/advisories/unreviewed/2022/05/GHSA-7v5r-ph2v-5fq4/GHSA-7v5r-ph2v-5fq4.json index e1e4638d254..6ce019d5569 100644 --- a/advisories/unreviewed/2022/05/GHSA-7v5r-ph2v-5fq4/GHSA-7v5r-ph2v-5fq4.json +++ b/advisories/unreviewed/2022/05/GHSA-7v5r-ph2v-5fq4/GHSA-7v5r-ph2v-5fq4.json @@ -7,12 +7,8 @@ "CVE-2014-2818" ], "details": "Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7vph-chc5-9x2h/GHSA-7vph-chc5-9x2h.json b/advisories/unreviewed/2022/05/GHSA-7vph-chc5-9x2h/GHSA-7vph-chc5-9x2h.json index b3bb780a37e..ee4fd8fcbc3 100644 --- a/advisories/unreviewed/2022/05/GHSA-7vph-chc5-9x2h/GHSA-7vph-chc5-9x2h.json +++ b/advisories/unreviewed/2022/05/GHSA-7vph-chc5-9x2h/GHSA-7vph-chc5-9x2h.json @@ -7,12 +7,8 @@ "CVE-2013-1328" ], "details": "Microsoft Publisher 2003 SP3, 2007 SP3, and 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers incorrect pointer handling, aka \"Publisher Pointer Handling Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7w3c-9w39-2h3q/GHSA-7w3c-9w39-2h3q.json b/advisories/unreviewed/2022/05/GHSA-7w3c-9w39-2h3q/GHSA-7w3c-9w39-2h3q.json index 0bd36c69686..86f3d032e20 100644 --- a/advisories/unreviewed/2022/05/GHSA-7w3c-9w39-2h3q/GHSA-7w3c-9w39-2h3q.json +++ b/advisories/unreviewed/2022/05/GHSA-7w3c-9w39-2h3q/GHSA-7w3c-9w39-2h3q.json @@ -7,12 +7,8 @@ "CVE-2010-3949" ], "details": "Buffer overflow in the TIFF image converter in the graphics filters in Microsoft Office XP SP3 and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted TIFF image in an Office document, aka \"TIFF Image Converter Buffer Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7wv9-7865-836v/GHSA-7wv9-7865-836v.json b/advisories/unreviewed/2022/05/GHSA-7wv9-7865-836v/GHSA-7wv9-7865-836v.json index a57b41d31d1..78c36324465 100644 --- a/advisories/unreviewed/2022/05/GHSA-7wv9-7865-836v/GHSA-7wv9-7865-836v.json +++ b/advisories/unreviewed/2022/05/GHSA-7wv9-7865-836v/GHSA-7wv9-7865-836v.json @@ -7,12 +7,8 @@ "CVE-2013-3917" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3915.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7xvw-xv6m-39w3/GHSA-7xvw-xv6m-39w3.json b/advisories/unreviewed/2022/05/GHSA-7xvw-xv6m-39w3/GHSA-7xvw-xv6m-39w3.json index e7cd3ab1ce8..43990962040 100644 --- a/advisories/unreviewed/2022/05/GHSA-7xvw-xv6m-39w3/GHSA-7xvw-xv6m-39w3.json +++ b/advisories/unreviewed/2022/05/GHSA-7xvw-xv6m-39w3/GHSA-7xvw-xv6m-39w3.json @@ -7,12 +7,8 @@ "CVE-2014-0272" ], "details": "Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-822m-2x32-4j3f/GHSA-822m-2x32-4j3f.json b/advisories/unreviewed/2022/05/GHSA-822m-2x32-4j3f/GHSA-822m-2x32-4j3f.json index e8bc1d17077..9f3add74108 100644 --- a/advisories/unreviewed/2022/05/GHSA-822m-2x32-4j3f/GHSA-822m-2x32-4j3f.json +++ b/advisories/unreviewed/2022/05/GHSA-822m-2x32-4j3f/GHSA-822m-2x32-4j3f.json @@ -7,12 +7,8 @@ "CVE-2013-3873" ], "details": "Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3872, CVE-2013-3882, and CVE-2013-3885.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-823q-m39x-m5m2/GHSA-823q-m39x-m5m2.json b/advisories/unreviewed/2022/05/GHSA-823q-m39x-m5m2/GHSA-823q-m39x-m5m2.json index 69eb84bea25..a262a86534b 100644 --- a/advisories/unreviewed/2022/05/GHSA-823q-m39x-m5m2/GHSA-823q-m39x-m5m2.json +++ b/advisories/unreviewed/2022/05/GHSA-823q-m39x-m5m2/GHSA-823q-m39x-m5m2.json @@ -7,12 +7,8 @@ "CVE-2013-3207" ], "details": "Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3201, CVE-2013-3203, CVE-2013-3206, and CVE-2013-3209.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8254-5gxr-m45r/GHSA-8254-5gxr-m45r.json b/advisories/unreviewed/2022/05/GHSA-8254-5gxr-m45r/GHSA-8254-5gxr-m45r.json index 5170455d4c3..af7ad9b4620 100644 --- a/advisories/unreviewed/2022/05/GHSA-8254-5gxr-m45r/GHSA-8254-5gxr-m45r.json +++ b/advisories/unreviewed/2022/05/GHSA-8254-5gxr-m45r/GHSA-8254-5gxr-m45r.json @@ -7,12 +7,8 @@ "CVE-2014-2800" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2807 and CVE-2014-2809.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-82f5-vqp2-gvjm/GHSA-82f5-vqp2-gvjm.json b/advisories/unreviewed/2022/05/GHSA-82f5-vqp2-gvjm/GHSA-82f5-vqp2-gvjm.json index e21e29d76de..1d9cca1ad60 100644 --- a/advisories/unreviewed/2022/05/GHSA-82f5-vqp2-gvjm/GHSA-82f5-vqp2-gvjm.json +++ b/advisories/unreviewed/2022/05/GHSA-82f5-vqp2-gvjm/GHSA-82f5-vqp2-gvjm.json @@ -7,12 +7,8 @@ "CVE-2014-4100" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-83gr-868h-q6h9/GHSA-83gr-868h-q6h9.json b/advisories/unreviewed/2022/05/GHSA-83gr-868h-q6h9/GHSA-83gr-868h-q6h9.json index b402d0f64c9..127536b88dd 100644 --- a/advisories/unreviewed/2022/05/GHSA-83gr-868h-q6h9/GHSA-83gr-868h-q6h9.json +++ b/advisories/unreviewed/2022/05/GHSA-83gr-868h-q6h9/GHSA-83gr-868h-q6h9.json @@ -7,12 +7,8 @@ "CVE-2014-6337" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-849j-5584-2f3q/GHSA-849j-5584-2f3q.json b/advisories/unreviewed/2022/05/GHSA-849j-5584-2f3q/GHSA-849j-5584-2f3q.json index 72cf656cd5b..abcbea23740 100644 --- a/advisories/unreviewed/2022/05/GHSA-849j-5584-2f3q/GHSA-849j-5584-2f3q.json +++ b/advisories/unreviewed/2022/05/GHSA-849j-5584-2f3q/GHSA-849j-5584-2f3q.json @@ -7,12 +7,8 @@ "CVE-2013-3910" ], "details": "Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-84vh-g9ff-r3m4/GHSA-84vh-g9ff-r3m4.json b/advisories/unreviewed/2022/05/GHSA-84vh-g9ff-r3m4/GHSA-84vh-g9ff-r3m4.json index c8e7a9adf56..2a1249868a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-84vh-g9ff-r3m4/GHSA-84vh-g9ff-r3m4.json +++ b/advisories/unreviewed/2022/05/GHSA-84vh-g9ff-r3m4/GHSA-84vh-g9ff-r3m4.json @@ -7,12 +7,8 @@ "CVE-2013-3193" ], "details": "Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3187 and CVE-2013-3191.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-84vv-ff89-8p4r/GHSA-84vv-ff89-8p4r.json b/advisories/unreviewed/2022/05/GHSA-84vv-ff89-8p4r/GHSA-84vv-ff89-8p4r.json index abeea780c13..68faf55fc42 100644 --- a/advisories/unreviewed/2022/05/GHSA-84vv-ff89-8p4r/GHSA-84vv-ff89-8p4r.json +++ b/advisories/unreviewed/2022/05/GHSA-84vv-ff89-8p4r/GHSA-84vv-ff89-8p4r.json @@ -7,12 +7,8 @@ "CVE-2013-3182" ], "details": "The Windows NAT Driver (aka winnat) service in Microsoft Windows Server 2012 does not properly validate memory addresses during the processing of ICMP packets, which allows remote attackers to cause a denial of service (memory corruption and system hang) via crafted packets, aka \"Windows NAT Denial of Service Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8758-2jw5-f6gw/GHSA-8758-2jw5-f6gw.json b/advisories/unreviewed/2022/05/GHSA-8758-2jw5-f6gw/GHSA-8758-2jw5-f6gw.json index 375452c2cb9..7fa79670d92 100644 --- a/advisories/unreviewed/2022/05/GHSA-8758-2jw5-f6gw/GHSA-8758-2jw5-f6gw.json +++ b/advisories/unreviewed/2022/05/GHSA-8758-2jw5-f6gw/GHSA-8758-2jw5-f6gw.json @@ -7,12 +7,8 @@ "CVE-2012-1515" ], "details": "VMware ESXi 3.5, 4.0, and 4.1 and ESX 3.5, 4.0, and 4.1 do not properly implement port-based I/O operations, which allows guest OS users to gain guest OS privileges by overwriting memory locations in a read-only memory block associated with the Virtual DOS Machine.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-88r2-5mqh-87fw/GHSA-88r2-5mqh-87fw.json b/advisories/unreviewed/2022/05/GHSA-88r2-5mqh-87fw/GHSA-88r2-5mqh-87fw.json index e882b300a9c..433de26f634 100644 --- a/advisories/unreviewed/2022/05/GHSA-88r2-5mqh-87fw/GHSA-88r2-5mqh-87fw.json +++ b/advisories/unreviewed/2022/05/GHSA-88r2-5mqh-87fw/GHSA-88r2-5mqh-87fw.json @@ -7,12 +7,8 @@ "CVE-2015-0056" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-1623 and CVE-2015-1626.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8c9x-49f2-wg8g/GHSA-8c9x-49f2-wg8g.json b/advisories/unreviewed/2022/05/GHSA-8c9x-49f2-wg8g/GHSA-8c9x-49f2-wg8g.json index ac6536ccd9b..674be08c977 100644 --- a/advisories/unreviewed/2022/05/GHSA-8c9x-49f2-wg8g/GHSA-8c9x-49f2-wg8g.json +++ b/advisories/unreviewed/2022/05/GHSA-8c9x-49f2-wg8g/GHSA-8c9x-49f2-wg8g.json @@ -7,12 +7,8 @@ "CVE-2013-3180" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1 and SP2 and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted POST request, aka \"POST XSS Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8cm8-wxvc-jh59/GHSA-8cm8-wxvc-jh59.json b/advisories/unreviewed/2022/05/GHSA-8cm8-wxvc-jh59/GHSA-8cm8-wxvc-jh59.json index ffb437b52b9..23c59594b12 100644 --- a/advisories/unreviewed/2022/05/GHSA-8cm8-wxvc-jh59/GHSA-8cm8-wxvc-jh59.json +++ b/advisories/unreviewed/2022/05/GHSA-8cm8-wxvc-jh59/GHSA-8cm8-wxvc-jh59.json @@ -7,12 +7,8 @@ "CVE-2014-4080" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-4089, CVE-2014-4091, and CVE-2014-4102.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8grw-rc3h-c4w2/GHSA-8grw-rc3h-c4w2.json b/advisories/unreviewed/2022/05/GHSA-8grw-rc3h-c4w2/GHSA-8grw-rc3h-c4w2.json index 5c28eebd968..9db324764f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-8grw-rc3h-c4w2/GHSA-8grw-rc3h-c4w2.json +++ b/advisories/unreviewed/2022/05/GHSA-8grw-rc3h-c4w2/GHSA-8grw-rc3h-c4w2.json @@ -7,12 +7,8 @@ "CVE-2011-1976" ], "details": "Cross-site scripting (XSS) vulnerability in the Report Viewer Control in Microsoft Visual Studio 2005 SP1 and Report Viewer 2005 SP1 allows remote attackers to inject arbitrary web script or HTML via a parameter in a data source, aka \"Report Viewer Controls XSS Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8hjw-ccx7-gjh7/GHSA-8hjw-ccx7-gjh7.json b/advisories/unreviewed/2022/05/GHSA-8hjw-ccx7-gjh7/GHSA-8hjw-ccx7-gjh7.json index a202ee2aa9b..164f42dd9b8 100644 --- a/advisories/unreviewed/2022/05/GHSA-8hjw-ccx7-gjh7/GHSA-8hjw-ccx7-gjh7.json +++ b/advisories/unreviewed/2022/05/GHSA-8hjw-ccx7-gjh7/GHSA-8hjw-ccx7-gjh7.json @@ -7,12 +7,8 @@ "CVE-2010-3236" ], "details": "Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka \"Out Of Bounds Array Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8hvj-5vvv-f7cf/GHSA-8hvj-5vvv-f7cf.json b/advisories/unreviewed/2022/05/GHSA-8hvj-5vvv-f7cf/GHSA-8hvj-5vvv-f7cf.json index bd77669e007..c69fa6777d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-8hvj-5vvv-f7cf/GHSA-8hvj-5vvv-f7cf.json +++ b/advisories/unreviewed/2022/05/GHSA-8hvj-5vvv-f7cf/GHSA-8hvj-5vvv-f7cf.json @@ -7,12 +7,8 @@ "CVE-2014-6335" ], "details": "Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"Microsoft Office Invalid Pointer Remote Code Execution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8mc7-rqj3-66wm/GHSA-8mc7-rqj3-66wm.json b/advisories/unreviewed/2022/05/GHSA-8mc7-rqj3-66wm/GHSA-8mc7-rqj3-66wm.json index 4bb276ef965..73e5eb429fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-8mc7-rqj3-66wm/GHSA-8mc7-rqj3-66wm.json +++ b/advisories/unreviewed/2022/05/GHSA-8mc7-rqj3-66wm/GHSA-8mc7-rqj3-66wm.json @@ -7,12 +7,8 @@ "CVE-2013-3160" ], "details": "Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, and Word Viewer allow remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka \"XML External Entities Resolution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8mrr-vm6v-4xwq/GHSA-8mrr-vm6v-4xwq.json b/advisories/unreviewed/2022/05/GHSA-8mrr-vm6v-4xwq/GHSA-8mrr-vm6v-4xwq.json index 7141bdbf55d..4fdbb2603b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-8mrr-vm6v-4xwq/GHSA-8mrr-vm6v-4xwq.json +++ b/advisories/unreviewed/2022/05/GHSA-8mrr-vm6v-4xwq/GHSA-8mrr-vm6v-4xwq.json @@ -7,12 +7,8 @@ "CVE-2013-3885" ], "details": "Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3872, CVE-2013-3873, and CVE-2013-3882.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8p36-54g9-43pf/GHSA-8p36-54g9-43pf.json b/advisories/unreviewed/2022/05/GHSA-8p36-54g9-43pf/GHSA-8p36-54g9-43pf.json index d144dd97046..44c0066aa0b 100644 --- a/advisories/unreviewed/2022/05/GHSA-8p36-54g9-43pf/GHSA-8p36-54g9-43pf.json +++ b/advisories/unreviewed/2022/05/GHSA-8p36-54g9-43pf/GHSA-8p36-54g9-43pf.json @@ -7,12 +7,8 @@ "CVE-2014-6348" ], "details": "Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-6342.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8p85-qq9c-72j9/GHSA-8p85-qq9c-72j9.json b/advisories/unreviewed/2022/05/GHSA-8p85-qq9c-72j9/GHSA-8p85-qq9c-72j9.json index 3ae3abdb779..d217364348f 100644 --- a/advisories/unreviewed/2022/05/GHSA-8p85-qq9c-72j9/GHSA-8p85-qq9c-72j9.json +++ b/advisories/unreviewed/2022/05/GHSA-8p85-qq9c-72j9/GHSA-8p85-qq9c-72j9.json @@ -7,12 +7,8 @@ "CVE-2014-4075" ], "details": "Cross-site scripting (XSS) vulnerability in System.Web.Mvc.dll in Microsoft ASP.NET Model View Controller (MVC) 2.0 through 5.1 allows remote attackers to inject arbitrary web script or HTML via a crafted web page, aka \"MVC XSS Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8pjh-p96w-p5f6/GHSA-8pjh-p96w-p5f6.json b/advisories/unreviewed/2022/05/GHSA-8pjh-p96w-p5f6/GHSA-8pjh-p96w-p5f6.json index ccafb6924b5..010f8db4421 100644 --- a/advisories/unreviewed/2022/05/GHSA-8pjh-p96w-p5f6/GHSA-8pjh-p96w-p5f6.json +++ b/advisories/unreviewed/2022/05/GHSA-8pjh-p96w-p5f6/GHSA-8pjh-p96w-p5f6.json @@ -7,12 +7,8 @@ "CVE-2013-3149" ], "details": "Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8r6q-9244-c25v/GHSA-8r6q-9244-c25v.json b/advisories/unreviewed/2022/05/GHSA-8r6q-9244-c25v/GHSA-8r6q-9244-c25v.json index 7bf6c4c1d8b..58d96ff3bb1 100644 --- a/advisories/unreviewed/2022/05/GHSA-8r6q-9244-c25v/GHSA-8r6q-9244-c25v.json +++ b/advisories/unreviewed/2022/05/GHSA-8r6q-9244-c25v/GHSA-8r6q-9244-c25v.json @@ -7,12 +7,8 @@ "CVE-2013-3190" ], "details": "Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8v2c-6fw4-69f3/GHSA-8v2c-6fw4-69f3.json b/advisories/unreviewed/2022/05/GHSA-8v2c-6fw4-69f3/GHSA-8v2c-6fw4-69f3.json index 410ceba0150..97874c13fa0 100644 --- a/advisories/unreviewed/2022/05/GHSA-8v2c-6fw4-69f3/GHSA-8v2c-6fw4-69f3.json +++ b/advisories/unreviewed/2022/05/GHSA-8v2c-6fw4-69f3/GHSA-8v2c-6fw4-69f3.json @@ -7,12 +7,8 @@ "CVE-2012-1885" ], "details": "Heap-based buffer overflow in Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Office 2008 and 2011 for Mac; and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka \"Excel SerAuxErrBar Heap Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8v3w-645c-c24f/GHSA-8v3w-645c-c24f.json b/advisories/unreviewed/2022/05/GHSA-8v3w-645c-c24f/GHSA-8v3w-645c-c24f.json index 44da4d2b289..3397d0e7cf6 100644 --- a/advisories/unreviewed/2022/05/GHSA-8v3w-645c-c24f/GHSA-8v3w-645c-c24f.json +++ b/advisories/unreviewed/2022/05/GHSA-8v3w-645c-c24f/GHSA-8v3w-645c-c24f.json @@ -7,12 +7,8 @@ "CVE-2014-2806" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2787, CVE-2014-2790, and CVE-2014-2802.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8w74-4cv4-x46v/GHSA-8w74-4cv4-x46v.json b/advisories/unreviewed/2022/05/GHSA-8w74-4cv4-x46v/GHSA-8w74-4cv4-x46v.json index 09c8883fe8a..23dd7a7317a 100644 --- a/advisories/unreviewed/2022/05/GHSA-8w74-4cv4-x46v/GHSA-8w74-4cv4-x46v.json +++ b/advisories/unreviewed/2022/05/GHSA-8w74-4cv4-x46v/GHSA-8w74-4cv4-x46v.json @@ -7,12 +7,8 @@ "CVE-2012-3110" ], "details": "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1766, CVE-2012-1767, CVE-2012-1769, CVE-2012-1770, CVE-2012-1771, CVE-2012-1772, CVE-2012-1773, CVE-2012-3106, CVE-2012-3107, and CVE-2012-3108.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8x8q-fxh8-9q62/GHSA-8x8q-fxh8-9q62.json b/advisories/unreviewed/2022/05/GHSA-8x8q-fxh8-9q62/GHSA-8x8q-fxh8-9q62.json index 85e7850520f..8bd715011d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-8x8q-fxh8-9q62/GHSA-8x8q-fxh8-9q62.json +++ b/advisories/unreviewed/2022/05/GHSA-8x8q-fxh8-9q62/GHSA-8x8q-fxh8-9q62.json @@ -7,12 +7,8 @@ "CVE-2013-3851" ], "details": "Microsoft Office 2003 SP3 and 2007 SP3, Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"Word Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8xf7-v5jv-237f/GHSA-8xf7-v5jv-237f.json b/advisories/unreviewed/2022/05/GHSA-8xf7-v5jv-237f/GHSA-8xf7-v5jv-237f.json index d81057a8f4f..2bd4be52f8c 100644 --- a/advisories/unreviewed/2022/05/GHSA-8xf7-v5jv-237f/GHSA-8xf7-v5jv-237f.json +++ b/advisories/unreviewed/2022/05/GHSA-8xf7-v5jv-237f/GHSA-8xf7-v5jv-237f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8xfc-jc35-hm4j/GHSA-8xfc-jc35-hm4j.json b/advisories/unreviewed/2022/05/GHSA-8xfc-jc35-hm4j/GHSA-8xfc-jc35-hm4j.json index e4d47b61ef4..eed25fa3f0c 100644 --- a/advisories/unreviewed/2022/05/GHSA-8xfc-jc35-hm4j/GHSA-8xfc-jc35-hm4j.json +++ b/advisories/unreviewed/2022/05/GHSA-8xfc-jc35-hm4j/GHSA-8xfc-jc35-hm4j.json @@ -7,12 +7,8 @@ "CVE-2014-0259" ], "details": "Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"Word Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8xg9-6pv8-gp58/GHSA-8xg9-6pv8-gp58.json b/advisories/unreviewed/2022/05/GHSA-8xg9-6pv8-gp58/GHSA-8xg9-6pv8-gp58.json index 0e41d447b92..6c82c7f9161 100644 --- a/advisories/unreviewed/2022/05/GHSA-8xg9-6pv8-gp58/GHSA-8xg9-6pv8-gp58.json +++ b/advisories/unreviewed/2022/05/GHSA-8xg9-6pv8-gp58/GHSA-8xg9-6pv8-gp58.json @@ -7,12 +7,8 @@ "CVE-2011-3403" ], "details": "Microsoft Excel 2003 SP3 and Office 2004 for Mac do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via a crafted Excel spreadsheet, aka \"Record Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8xr3-v8m4-mq8p/GHSA-8xr3-v8m4-mq8p.json b/advisories/unreviewed/2022/05/GHSA-8xr3-v8m4-mq8p/GHSA-8xr3-v8m4-mq8p.json index 5b181516a70..e272f9e0945 100644 --- a/advisories/unreviewed/2022/05/GHSA-8xr3-v8m4-mq8p/GHSA-8xr3-v8m4-mq8p.json +++ b/advisories/unreviewed/2022/05/GHSA-8xr3-v8m4-mq8p/GHSA-8xr3-v8m4-mq8p.json @@ -7,12 +7,8 @@ "CVE-2013-3859" ], "details": "Microsoft Pinyin IME 2010, when used in conjunction with Microsoft Office 2010 SP1, does not properly restrict configuration options, which allows local users to gain privileges by starting Internet Explorer from the IME toolbar, aka \"Chinese IME Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-92qm-q23m-wx86/GHSA-92qm-q23m-wx86.json b/advisories/unreviewed/2022/05/GHSA-92qm-q23m-wx86/GHSA-92qm-q23m-wx86.json index 9c137525a5c..d4ae2e9100a 100644 --- a/advisories/unreviewed/2022/05/GHSA-92qm-q23m-wx86/GHSA-92qm-q23m-wx86.json +++ b/advisories/unreviewed/2022/05/GHSA-92qm-q23m-wx86/GHSA-92qm-q23m-wx86.json @@ -7,12 +7,8 @@ "CVE-2014-4137" ], "details": "Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-4133.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-92xj-ghrw-3h5v/GHSA-92xj-ghrw-3h5v.json b/advisories/unreviewed/2022/05/GHSA-92xj-ghrw-3h5v/GHSA-92xj-ghrw-3h5v.json index af04fc20bff..528de701601 100644 --- a/advisories/unreviewed/2022/05/GHSA-92xj-ghrw-3h5v/GHSA-92xj-ghrw-3h5v.json +++ b/advisories/unreviewed/2022/05/GHSA-92xj-ghrw-3h5v/GHSA-92xj-ghrw-3h5v.json @@ -7,12 +7,8 @@ "CVE-2011-1272" ], "details": "Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record structures during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka \"Excel Insufficient Record Validation Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9364-q353-h7v3/GHSA-9364-q353-h7v3.json b/advisories/unreviewed/2022/05/GHSA-9364-q353-h7v3/GHSA-9364-q353-h7v3.json index 0bcb23159c9..510a6417f7f 100644 --- a/advisories/unreviewed/2022/05/GHSA-9364-q353-h7v3/GHSA-9364-q353-h7v3.json +++ b/advisories/unreviewed/2022/05/GHSA-9364-q353-h7v3/GHSA-9364-q353-h7v3.json @@ -7,12 +7,8 @@ "CVE-2014-1777" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to read local files on the client via a crafted web site, aka \"Internet Explorer Information Disclosure Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-93x2-gx5j-v5g5/GHSA-93x2-gx5j-v5g5.json b/advisories/unreviewed/2022/05/GHSA-93x2-gx5j-v5g5/GHSA-93x2-gx5j-v5g5.json index ce08e67b8c9..50463cd4fa5 100644 --- a/advisories/unreviewed/2022/05/GHSA-93x2-gx5j-v5g5/GHSA-93x2-gx5j-v5g5.json +++ b/advisories/unreviewed/2022/05/GHSA-93x2-gx5j-v5g5/GHSA-93x2-gx5j-v5g5.json @@ -7,12 +7,8 @@ "CVE-2014-1764" ], "details": "Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism by leveraging \"object confusion\" in a broker process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-947f-h5gc-f7f5/GHSA-947f-h5gc-f7f5.json b/advisories/unreviewed/2022/05/GHSA-947f-h5gc-f7f5/GHSA-947f-h5gc-f7f5.json index 7b29f44ab02..af6d44d1e40 100644 --- a/advisories/unreviewed/2022/05/GHSA-947f-h5gc-f7f5/GHSA-947f-h5gc-f7f5.json +++ b/advisories/unreviewed/2022/05/GHSA-947f-h5gc-f7f5/GHSA-947f-h5gc-f7f5.json @@ -7,12 +7,8 @@ "CVE-2014-6328" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the XSS filter via a crafted attribute of an element in an HTML document, aka \"Internet Explorer XSS Filter Bypass Vulnerability,\" a different vulnerability than CVE-2014-6365.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-94hg-8p96-3mf6/GHSA-94hg-8p96-3mf6.json b/advisories/unreviewed/2022/05/GHSA-94hg-8p96-3mf6/GHSA-94hg-8p96-3mf6.json index a907fb56ba9..99ec7569ce8 100644 --- a/advisories/unreviewed/2022/05/GHSA-94hg-8p96-3mf6/GHSA-94hg-8p96-3mf6.json +++ b/advisories/unreviewed/2022/05/GHSA-94hg-8p96-3mf6/GHSA-94hg-8p96-3mf6.json @@ -7,12 +7,8 @@ "CVE-2013-1304" ], "details": "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer Use After Free Vulnerability,\" a different vulnerability than CVE-2013-1303 and CVE-2013-1338.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-963j-gwjj-c3hp/GHSA-963j-gwjj-c3hp.json b/advisories/unreviewed/2022/05/GHSA-963j-gwjj-c3hp/GHSA-963j-gwjj-c3hp.json index ec334cb185c..cba54579a5d 100644 --- a/advisories/unreviewed/2022/05/GHSA-963j-gwjj-c3hp/GHSA-963j-gwjj-c3hp.json +++ b/advisories/unreviewed/2022/05/GHSA-963j-gwjj-c3hp/GHSA-963j-gwjj-c3hp.json @@ -7,12 +7,8 @@ "CVE-2014-4129" ], "details": "Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-977v-7xv2-5pfp/GHSA-977v-7xv2-5pfp.json b/advisories/unreviewed/2022/05/GHSA-977v-7xv2-5pfp/GHSA-977v-7xv2-5pfp.json index c5243c616ae..5e2044cabdb 100644 --- a/advisories/unreviewed/2022/05/GHSA-977v-7xv2-5pfp/GHSA-977v-7xv2-5pfp.json +++ b/advisories/unreviewed/2022/05/GHSA-977v-7xv2-5pfp/GHSA-977v-7xv2-5pfp.json @@ -7,12 +7,8 @@ "CVE-2010-5082" ], "details": "Untrusted search path vulnerability in colorcpl.exe 6.0.6000.16386 in the Color Control Panel in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 allows local users to gain privileges via a Trojan horse sti.dll file in the current working directory, as demonstrated by a directory that contains a .camp, .cdmp, .gmmp, .icc, or .icm file, aka \"Color Control Panel Insecure Library Loading Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-97qc-chmq-2h4c/GHSA-97qc-chmq-2h4c.json b/advisories/unreviewed/2022/05/GHSA-97qc-chmq-2h4c/GHSA-97qc-chmq-2h4c.json index 0ef66cffceb..553cfe735d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-97qc-chmq-2h4c/GHSA-97qc-chmq-2h4c.json +++ b/advisories/unreviewed/2022/05/GHSA-97qc-chmq-2h4c/GHSA-97qc-chmq-2h4c.json @@ -7,12 +7,8 @@ "CVE-2013-1319" ], "details": "Microsoft Publisher 2003 SP3 does not properly check the return value of an unspecified method, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka \"Publisher Return Value Handling Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-984q-75mj-5qmf/GHSA-984q-75mj-5qmf.json b/advisories/unreviewed/2022/05/GHSA-984q-75mj-5qmf/GHSA-984q-75mj-5qmf.json index 8d693574b66..9ee55b8b92f 100644 --- a/advisories/unreviewed/2022/05/GHSA-984q-75mj-5qmf/GHSA-984q-75mj-5qmf.json +++ b/advisories/unreviewed/2022/05/GHSA-984q-75mj-5qmf/GHSA-984q-75mj-5qmf.json @@ -7,12 +7,8 @@ "CVE-2014-2813" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2786 and CVE-2014-2792.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-98m8-w36h-w9w7/GHSA-98m8-w36h-w9w7.json b/advisories/unreviewed/2022/05/GHSA-98m8-w36h-w9w7/GHSA-98m8-w36h-w9w7.json index 0ce83a4c650..e4b06aa410c 100644 --- a/advisories/unreviewed/2022/05/GHSA-98m8-w36h-w9w7/GHSA-98m8-w36h-w9w7.json +++ b/advisories/unreviewed/2022/05/GHSA-98m8-w36h-w9w7/GHSA-98m8-w36h-w9w7.json @@ -7,12 +7,8 @@ "CVE-2012-1847" ], "details": "Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office 2008 and 2011 for Mac; Excel Viewer; and Office Compatibility Pack SP2 and SP3 do not properly handle memory during the opening of files, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka \"Excel Series Record Parsing Type Mismatch Could Result in Remote Code Execution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-98x7-vvr4-r84j/GHSA-98x7-vvr4-r84j.json b/advisories/unreviewed/2022/05/GHSA-98x7-vvr4-r84j/GHSA-98x7-vvr4-r84j.json index 09101774025..ad4bd51b6b3 100644 --- a/advisories/unreviewed/2022/05/GHSA-98x7-vvr4-r84j/GHSA-98x7-vvr4-r84j.json +++ b/advisories/unreviewed/2022/05/GHSA-98x7-vvr4-r84j/GHSA-98x7-vvr4-r84j.json @@ -7,12 +7,8 @@ "CVE-2012-2536" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft Systems Management Server 2003 SP3 and System Center Configuration Manager 2007 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka \"Reflected XSS Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-99f9-5wx7-q4fv/GHSA-99f9-5wx7-q4fv.json b/advisories/unreviewed/2022/05/GHSA-99f9-5wx7-q4fv/GHSA-99f9-5wx7-q4fv.json index 385dac098b2..a0ae90d0e7d 100644 --- a/advisories/unreviewed/2022/05/GHSA-99f9-5wx7-q4fv/GHSA-99f9-5wx7-q4fv.json +++ b/advisories/unreviewed/2022/05/GHSA-99f9-5wx7-q4fv/GHSA-99f9-5wx7-q4fv.json @@ -7,12 +7,8 @@ "CVE-2014-0314" ], "details": "Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-99q6-hqhj-qwhr/GHSA-99q6-hqhj-qwhr.json b/advisories/unreviewed/2022/05/GHSA-99q6-hqhj-qwhr/GHSA-99q6-hqhj-qwhr.json index c2cc74b517f..2a20da374f7 100644 --- a/advisories/unreviewed/2022/05/GHSA-99q6-hqhj-qwhr/GHSA-99q6-hqhj-qwhr.json +++ b/advisories/unreviewed/2022/05/GHSA-99q6-hqhj-qwhr/GHSA-99q6-hqhj-qwhr.json @@ -7,12 +7,8 @@ "CVE-2011-0653" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010 Gold and SP1, and SharePoint Foundation 2010, allows remote attackers to inject arbitrary web script or HTML via the URI, aka \"XSS in SharePoint Calendar Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9c4m-mcm2-9ghx/GHSA-9c4m-mcm2-9ghx.json b/advisories/unreviewed/2022/05/GHSA-9c4m-mcm2-9ghx/GHSA-9c4m-mcm2-9ghx.json index 58689135dce..69303c69982 100644 --- a/advisories/unreviewed/2022/05/GHSA-9c4m-mcm2-9ghx/GHSA-9c4m-mcm2-9ghx.json +++ b/advisories/unreviewed/2022/05/GHSA-9c4m-mcm2-9ghx/GHSA-9c4m-mcm2-9ghx.json @@ -7,12 +7,8 @@ "CVE-2014-1815" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, as exploited in the wild in May 2014, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0310.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9c9g-7w7x-vr22/GHSA-9c9g-7w7x-vr22.json b/advisories/unreviewed/2022/05/GHSA-9c9g-7w7x-vr22/GHSA-9c9g-7w7x-vr22.json index 8250227a18d..45ed7559a0a 100644 --- a/advisories/unreviewed/2022/05/GHSA-9c9g-7w7x-vr22/GHSA-9c9g-7w7x-vr22.json +++ b/advisories/unreviewed/2022/05/GHSA-9c9g-7w7x-vr22/GHSA-9c9g-7w7x-vr22.json @@ -7,12 +7,8 @@ "CVE-2014-0321" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0313.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9f8x-323m-6vw4/GHSA-9f8x-323m-6vw4.json b/advisories/unreviewed/2022/05/GHSA-9f8x-323m-6vw4/GHSA-9f8x-323m-6vw4.json index 510580cc001..b68107fb200 100644 --- a/advisories/unreviewed/2022/05/GHSA-9f8x-323m-6vw4/GHSA-9f8x-323m-6vw4.json +++ b/advisories/unreviewed/2022/05/GHSA-9f8x-323m-6vw4/GHSA-9f8x-323m-6vw4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9gc3-vv9j-rfwm/GHSA-9gc3-vv9j-rfwm.json b/advisories/unreviewed/2022/05/GHSA-9gc3-vv9j-rfwm/GHSA-9gc3-vv9j-rfwm.json index 4dc4d898cb5..97613e1b924 100644 --- a/advisories/unreviewed/2022/05/GHSA-9gc3-vv9j-rfwm/GHSA-9gc3-vv9j-rfwm.json +++ b/advisories/unreviewed/2022/05/GHSA-9gc3-vv9j-rfwm/GHSA-9gc3-vv9j-rfwm.json @@ -7,12 +7,8 @@ "CVE-2014-4071" ], "details": "The Server in Microsoft Lync Server 2013 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon hang) via a crafted request, aka \"Lync Denial of Service Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9h95-rv82-cwrc/GHSA-9h95-rv82-cwrc.json b/advisories/unreviewed/2022/05/GHSA-9h95-rv82-cwrc/GHSA-9h95-rv82-cwrc.json index 32496fca1cc..746f340bea0 100644 --- a/advisories/unreviewed/2022/05/GHSA-9h95-rv82-cwrc/GHSA-9h95-rv82-cwrc.json +++ b/advisories/unreviewed/2022/05/GHSA-9h95-rv82-cwrc/GHSA-9h95-rv82-cwrc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9jq6-gwfj-8q6f/GHSA-9jq6-gwfj-8q6f.json b/advisories/unreviewed/2022/05/GHSA-9jq6-gwfj-8q6f/GHSA-9jq6-gwfj-8q6f.json index 970c728bc49..927668e89d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-9jq6-gwfj-8q6f/GHSA-9jq6-gwfj-8q6f.json +++ b/advisories/unreviewed/2022/05/GHSA-9jq6-gwfj-8q6f/GHSA-9jq6-gwfj-8q6f.json @@ -7,12 +7,8 @@ "CVE-2013-1322" ], "details": "Microsoft Publisher 2003 SP3 does not properly check table range data, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka \"Publisher Invalid Range Check Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9mmm-585q-x89j/GHSA-9mmm-585q-x89j.json b/advisories/unreviewed/2022/05/GHSA-9mmm-585q-x89j/GHSA-9mmm-585q-x89j.json index e51efce1bac..b1d651e4e37 100644 --- a/advisories/unreviewed/2022/05/GHSA-9mmm-585q-x89j/GHSA-9mmm-585q-x89j.json +++ b/advisories/unreviewed/2022/05/GHSA-9mmm-585q-x89j/GHSA-9mmm-585q-x89j.json @@ -7,12 +7,8 @@ "CVE-2011-0673" ], "details": "win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3 allows local users to gain privileges via a crafted application that triggers a NULL pointer dereference, aka \"Win32k Null Pointer De-reference Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9p29-48xx-9pmw/GHSA-9p29-48xx-9pmw.json b/advisories/unreviewed/2022/05/GHSA-9p29-48xx-9pmw/GHSA-9p29-48xx-9pmw.json index dcfebaa0ce9..c17b8bd9cb5 100644 --- a/advisories/unreviewed/2022/05/GHSA-9p29-48xx-9pmw/GHSA-9p29-48xx-9pmw.json +++ b/advisories/unreviewed/2022/05/GHSA-9p29-48xx-9pmw/GHSA-9p29-48xx-9pmw.json @@ -7,12 +7,8 @@ "CVE-2014-0307" ], "details": "Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a certain sequence of manipulations of a TextRange element, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9pjg-mxvx-m7mf/GHSA-9pjg-mxvx-m7mf.json b/advisories/unreviewed/2022/05/GHSA-9pjg-mxvx-m7mf/GHSA-9pjg-mxvx-m7mf.json index f3ff56e899e..58ddc70643c 100644 --- a/advisories/unreviewed/2022/05/GHSA-9pjg-mxvx-m7mf/GHSA-9pjg-mxvx-m7mf.json +++ b/advisories/unreviewed/2022/05/GHSA-9pjg-mxvx-m7mf/GHSA-9pjg-mxvx-m7mf.json @@ -7,12 +7,8 @@ "CVE-2014-1760" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9pp6-7chj-q7jg/GHSA-9pp6-7chj-q7jg.json b/advisories/unreviewed/2022/05/GHSA-9pp6-7chj-q7jg/GHSA-9pp6-7chj-q7jg.json index 462b7d5ea83..b1bf7887bb4 100644 --- a/advisories/unreviewed/2022/05/GHSA-9pp6-7chj-q7jg/GHSA-9pp6-7chj-q7jg.json +++ b/advisories/unreviewed/2022/05/GHSA-9pp6-7chj-q7jg/GHSA-9pp6-7chj-q7jg.json @@ -7,12 +7,8 @@ "CVE-2013-1316" ], "details": "Microsoft Publisher 2003 SP3 does not properly validate the size of an unspecified array, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka \"Publisher Negative Value Allocation Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9pqv-9r37-hxh7/GHSA-9pqv-9r37-hxh7.json b/advisories/unreviewed/2022/05/GHSA-9pqv-9r37-hxh7/GHSA-9pqv-9r37-hxh7.json index f4126a022d6..85a3dcd835e 100644 --- a/advisories/unreviewed/2022/05/GHSA-9pqv-9r37-hxh7/GHSA-9pqv-9r37-hxh7.json +++ b/advisories/unreviewed/2022/05/GHSA-9pqv-9r37-hxh7/GHSA-9pqv-9r37-hxh7.json @@ -7,12 +7,8 @@ "CVE-2013-3163" ], "details": "Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3144 and CVE-2013-3151.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9q6c-gh3r-qpjr/GHSA-9q6c-gh3r-qpjr.json b/advisories/unreviewed/2022/05/GHSA-9q6c-gh3r-qpjr/GHSA-9q6c-gh3r-qpjr.json index 63fb725d557..ebe49d93929 100644 --- a/advisories/unreviewed/2022/05/GHSA-9q6c-gh3r-qpjr/GHSA-9q6c-gh3r-qpjr.json +++ b/advisories/unreviewed/2022/05/GHSA-9q6c-gh3r-qpjr/GHSA-9q6c-gh3r-qpjr.json @@ -7,12 +7,8 @@ "CVE-2013-3861" ], "details": "Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 allows remote attackers to cause a denial of service (application crash or hang) via crafted character sequences in JSON data, aka \"JSON Parsing Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9q92-w4h6-42xf/GHSA-9q92-w4h6-42xf.json b/advisories/unreviewed/2022/05/GHSA-9q92-w4h6-42xf/GHSA-9q92-w4h6-42xf.json index 2ff1444ea1a..ebe3c8f04f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-9q92-w4h6-42xf/GHSA-9q92-w4h6-42xf.json +++ b/advisories/unreviewed/2022/05/GHSA-9q92-w4h6-42xf/GHSA-9q92-w4h6-42xf.json @@ -7,12 +7,8 @@ "CVE-2011-2012" ], "details": "Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which allows remote attackers to cause a denial of service (IIS outage) via unspecified network traffic, aka \"Null Session Cookie Crash.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9qc7-r7p9-f8jp/GHSA-9qc7-r7p9-f8jp.json b/advisories/unreviewed/2022/05/GHSA-9qc7-r7p9-f8jp/GHSA-9qc7-r7p9-f8jp.json index 6f4fc14ed56..7e886079f58 100644 --- a/advisories/unreviewed/2022/05/GHSA-9qc7-r7p9-f8jp/GHSA-9qc7-r7p9-f8jp.json +++ b/advisories/unreviewed/2022/05/GHSA-9qc7-r7p9-f8jp/GHSA-9qc7-r7p9-f8jp.json @@ -7,12 +7,8 @@ "CVE-2013-3126" ], "details": "Microsoft Internet Explorer 9 and 10, when script debugging is enabled, does not properly handle objects in memory during the processing of script, which allows remote attackers to execute arbitrary code via a crafted web site, aka \"Internet Explorer Script Debug Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9qhp-6j26-895q/GHSA-9qhp-6j26-895q.json b/advisories/unreviewed/2022/05/GHSA-9qhp-6j26-895q/GHSA-9qhp-6j26-895q.json index efa67f3ba35..07ea4932b7f 100644 --- a/advisories/unreviewed/2022/05/GHSA-9qhp-6j26-895q/GHSA-9qhp-6j26-895q.json +++ b/advisories/unreviewed/2022/05/GHSA-9qhp-6j26-895q/GHSA-9qhp-6j26-895q.json @@ -7,12 +7,8 @@ "CVE-2012-1772" ], "details": "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1766, CVE-2012-1767, CVE-2012-1769, CVE-2012-1770, CVE-2012-1771, CVE-2012-1773, CVE-2012-3106, CVE-2012-3107, CVE-2012-3108, and CVE-2012-3110.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9rcg-x87g-6x9x/GHSA-9rcg-x87g-6x9x.json b/advisories/unreviewed/2022/05/GHSA-9rcg-x87g-6x9x/GHSA-9rcg-x87g-6x9x.json index fbb4fe57ed2..d66a50954cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-9rcg-x87g-6x9x/GHSA-9rcg-x87g-6x9x.json +++ b/advisories/unreviewed/2022/05/GHSA-9rcg-x87g-6x9x/GHSA-9rcg-x87g-6x9x.json @@ -7,12 +7,8 @@ "CVE-2014-0325" ], "details": "Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site that triggers improper processing of CElement objects, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1751 and CVE-2014-1755. NOTE: MS14-018 originally had a typo of CVE-2014-0235 for this.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9rmq-xfx6-rc56/GHSA-9rmq-xfx6-rc56.json b/advisories/unreviewed/2022/05/GHSA-9rmq-xfx6-rc56/GHSA-9rmq-xfx6-rc56.json index 2f58f182693..5137a1c6cb5 100644 --- a/advisories/unreviewed/2022/05/GHSA-9rmq-xfx6-rc56/GHSA-9rmq-xfx6-rc56.json +++ b/advisories/unreviewed/2022/05/GHSA-9rmq-xfx6-rc56/GHSA-9rmq-xfx6-rc56.json @@ -7,12 +7,8 @@ "CVE-2014-2775" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1773, CVE-2014-1783, CVE-2014-1784, CVE-2014-1786, CVE-2014-1795, CVE-2014-1805, CVE-2014-2758, CVE-2014-2759, CVE-2014-2765, and CVE-2014-2766.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9vmh-mm6w-4792/GHSA-9vmh-mm6w-4792.json b/advisories/unreviewed/2022/05/GHSA-9vmh-mm6w-4792/GHSA-9vmh-mm6w-4792.json index e438afe60dc..e876998e0a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-9vmh-mm6w-4792/GHSA-9vmh-mm6w-4792.json +++ b/advisories/unreviewed/2022/05/GHSA-9vmh-mm6w-4792/GHSA-9vmh-mm6w-4792.json @@ -7,12 +7,8 @@ "CVE-2010-3219" ], "details": "Array index vulnerability in Microsoft Word 2002 SP3 allows remote attackers to execute arbitrary code via a crafted Word document that triggers memory corruption, aka \"Word Index Parsing Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9wqq-pr8f-x2ch/GHSA-9wqq-pr8f-x2ch.json b/advisories/unreviewed/2022/05/GHSA-9wqq-pr8f-x2ch/GHSA-9wqq-pr8f-x2ch.json index 7f411bbb6aa..8968b822dc2 100644 --- a/advisories/unreviewed/2022/05/GHSA-9wqq-pr8f-x2ch/GHSA-9wqq-pr8f-x2ch.json +++ b/advisories/unreviewed/2022/05/GHSA-9wqq-pr8f-x2ch/GHSA-9wqq-pr8f-x2ch.json @@ -7,12 +7,8 @@ "CVE-2013-5051" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9xm9-p5v4-94q8/GHSA-9xm9-p5v4-94q8.json b/advisories/unreviewed/2022/05/GHSA-9xm9-p5v4-94q8/GHSA-9xm9-p5v4-94q8.json index 7908e4f4152..706715772f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-9xm9-p5v4-94q8/GHSA-9xm9-p5v4-94q8.json +++ b/advisories/unreviewed/2022/05/GHSA-9xm9-p5v4-94q8/GHSA-9xm9-p5v4-94q8.json @@ -7,12 +7,8 @@ "CVE-2014-1806" ], "details": "The .NET Remoting implementation in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly restrict memory access, which allows remote attackers to execute arbitrary code via vectors involving malformed objects, aka \"TypeFilterLevel Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c268-hg36-6qfc/GHSA-c268-hg36-6qfc.json b/advisories/unreviewed/2022/05/GHSA-c268-hg36-6qfc/GHSA-c268-hg36-6qfc.json index 63d8edb4587..2fe8eb95a28 100644 --- a/advisories/unreviewed/2022/05/GHSA-c268-hg36-6qfc/GHSA-c268-hg36-6qfc.json +++ b/advisories/unreviewed/2022/05/GHSA-c268-hg36-6qfc/GHSA-c268-hg36-6qfc.json @@ -7,12 +7,8 @@ "CVE-2014-0304" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c2v6-v2g7-64m2/GHSA-c2v6-v2g7-64m2.json b/advisories/unreviewed/2022/05/GHSA-c2v6-v2g7-64m2/GHSA-c2v6-v2g7-64m2.json index 1a46d2a67b1..1c53a15bf84 100644 --- a/advisories/unreviewed/2022/05/GHSA-c2v6-v2g7-64m2/GHSA-c2v6-v2g7-64m2.json +++ b/advisories/unreviewed/2022/05/GHSA-c2v6-v2g7-64m2/GHSA-c2v6-v2g7-64m2.json @@ -7,12 +7,8 @@ "CVE-2014-2785" ], "details": "Microsoft Internet Explorer 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c3cq-67vh-cg27/GHSA-c3cq-67vh-cg27.json b/advisories/unreviewed/2022/05/GHSA-c3cq-67vh-cg27/GHSA-c3cq-67vh-cg27.json index 5195ab3bd02..08189af00ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-c3cq-67vh-cg27/GHSA-c3cq-67vh-cg27.json +++ b/advisories/unreviewed/2022/05/GHSA-c3cq-67vh-cg27/GHSA-c3cq-67vh-cg27.json @@ -7,12 +7,8 @@ "CVE-2012-1771" ], "details": "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1766, CVE-2012-1767, CVE-2012-1769, CVE-2012-1770, CVE-2012-1772, CVE-2012-1773, CVE-2012-3106, CVE-2012-3107, CVE-2012-3108, and CVE-2012-3110.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c432-wcvr-52mf/GHSA-c432-wcvr-52mf.json b/advisories/unreviewed/2022/05/GHSA-c432-wcvr-52mf/GHSA-c432-wcvr-52mf.json index 7606223ab50..51d09ab370b 100644 --- a/advisories/unreviewed/2022/05/GHSA-c432-wcvr-52mf/GHSA-c432-wcvr-52mf.json +++ b/advisories/unreviewed/2022/05/GHSA-c432-wcvr-52mf/GHSA-c432-wcvr-52mf.json @@ -7,12 +7,8 @@ "CVE-2013-5042" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft ASP.NET SignalR 1.1.x before 1.1.4 and 2.0.x before 2.0.1, and Visual Studio Team Foundation Server 2013, allows remote attackers to inject arbitrary web script or HTML via crafted Forever Frame transport protocol data, aka \"SignalR XSS Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c463-cvjq-g9m9/GHSA-c463-cvjq-g9m9.json b/advisories/unreviewed/2022/05/GHSA-c463-cvjq-g9m9/GHSA-c463-cvjq-g9m9.json index fb903c558e8..ffbd2849262 100644 --- a/advisories/unreviewed/2022/05/GHSA-c463-cvjq-g9m9/GHSA-c463-cvjq-g9m9.json +++ b/advisories/unreviewed/2022/05/GHSA-c463-cvjq-g9m9/GHSA-c463-cvjq-g9m9.json @@ -7,12 +7,8 @@ "CVE-2015-0069" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka \"Internet Explorer ASLR Bypass Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c5mx-wjfq-4fg6/GHSA-c5mx-wjfq-4fg6.json b/advisories/unreviewed/2022/05/GHSA-c5mx-wjfq-4fg6/GHSA-c5mx-wjfq-4fg6.json index 256a2befd22..743fb8a10c1 100644 --- a/advisories/unreviewed/2022/05/GHSA-c5mx-wjfq-4fg6/GHSA-c5mx-wjfq-4fg6.json +++ b/advisories/unreviewed/2022/05/GHSA-c5mx-wjfq-4fg6/GHSA-c5mx-wjfq-4fg6.json @@ -7,12 +7,8 @@ "CVE-2015-0044" ], "details": "Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-8967 and CVE-2015-0050.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c5pg-mh3q-xf9w/GHSA-c5pg-mh3q-xf9w.json b/advisories/unreviewed/2022/05/GHSA-c5pg-mh3q-xf9w/GHSA-c5pg-mh3q-xf9w.json index 73c92808daf..45c2e73a77e 100644 --- a/advisories/unreviewed/2022/05/GHSA-c5pg-mh3q-xf9w/GHSA-c5pg-mh3q-xf9w.json +++ b/advisories/unreviewed/2022/05/GHSA-c5pg-mh3q-xf9w/GHSA-c5pg-mh3q-xf9w.json @@ -7,12 +7,8 @@ "CVE-2012-1852" ], "details": "Heap-based buffer overflow in the Remote Administration Protocol (RAP) implementation in the LanmanWorkstation service in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted RAP response packets, aka \"Remote Administration Protocol Heap Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c5wh-gw3c-mrf3/GHSA-c5wh-gw3c-mrf3.json b/advisories/unreviewed/2022/05/GHSA-c5wh-gw3c-mrf3/GHSA-c5wh-gw3c-mrf3.json index 046863bb859..a74b47c8769 100644 --- a/advisories/unreviewed/2022/05/GHSA-c5wh-gw3c-mrf3/GHSA-c5wh-gw3c-mrf3.json +++ b/advisories/unreviewed/2022/05/GHSA-c5wh-gw3c-mrf3/GHSA-c5wh-gw3c-mrf3.json @@ -7,12 +7,8 @@ "CVE-2015-0040" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-0018, CVE-2015-0037, and CVE-2015-0066.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c68p-jrvj-jm38/GHSA-c68p-jrvj-jm38.json b/advisories/unreviewed/2022/05/GHSA-c68p-jrvj-jm38/GHSA-c68p-jrvj-jm38.json index 616a4788e26..f9fd781030b 100644 --- a/advisories/unreviewed/2022/05/GHSA-c68p-jrvj-jm38/GHSA-c68p-jrvj-jm38.json +++ b/advisories/unreviewed/2022/05/GHSA-c68p-jrvj-jm38/GHSA-c68p-jrvj-jm38.json @@ -7,12 +7,8 @@ "CVE-2012-3214" ], "details": "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7.0 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c6wm-c324-qcqq/GHSA-c6wm-c324-qcqq.json b/advisories/unreviewed/2022/05/GHSA-c6wm-c324-qcqq/GHSA-c6wm-c324-qcqq.json index c9444d3a923..35531951ffe 100644 --- a/advisories/unreviewed/2022/05/GHSA-c6wm-c324-qcqq/GHSA-c6wm-c324-qcqq.json +++ b/advisories/unreviewed/2022/05/GHSA-c6wm-c324-qcqq/GHSA-c6wm-c324-qcqq.json @@ -7,12 +7,8 @@ "CVE-2013-3112" ], "details": "Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3113, CVE-2013-3121, CVE-2013-3139, and CVE-2013-3142.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c6x6-fg7f-p4g8/GHSA-c6x6-fg7f-p4g8.json b/advisories/unreviewed/2022/05/GHSA-c6x6-fg7f-p4g8/GHSA-c6x6-fg7f-p4g8.json index 214d7fb8dd4..a57286fc86b 100644 --- a/advisories/unreviewed/2022/05/GHSA-c6x6-fg7f-p4g8/GHSA-c6x6-fg7f-p4g8.json +++ b/advisories/unreviewed/2022/05/GHSA-c6x6-fg7f-p4g8/GHSA-c6x6-fg7f-p4g8.json @@ -7,12 +7,8 @@ "CVE-2014-0306" ], "details": "Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c737-m6vw-r2j8/GHSA-c737-m6vw-r2j8.json b/advisories/unreviewed/2022/05/GHSA-c737-m6vw-r2j8/GHSA-c737-m6vw-r2j8.json index 777c6d6ed0e..e265c46e76d 100644 --- a/advisories/unreviewed/2022/05/GHSA-c737-m6vw-r2j8/GHSA-c737-m6vw-r2j8.json +++ b/advisories/unreviewed/2022/05/GHSA-c737-m6vw-r2j8/GHSA-c737-m6vw-r2j8.json @@ -7,12 +7,8 @@ "CVE-2014-0284" ], "details": "Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c885-48w7-388m/GHSA-c885-48w7-388m.json b/advisories/unreviewed/2022/05/GHSA-c885-48w7-388m/GHSA-c885-48w7-388m.json index 932fb2c97a5..05769e43fd6 100644 --- a/advisories/unreviewed/2022/05/GHSA-c885-48w7-388m/GHSA-c885-48w7-388m.json +++ b/advisories/unreviewed/2022/05/GHSA-c885-48w7-388m/GHSA-c885-48w7-388m.json @@ -7,12 +7,8 @@ "CVE-2015-0067" ], "details": "Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c89h-q3c8-hjrr/GHSA-c89h-q3c8-hjrr.json b/advisories/unreviewed/2022/05/GHSA-c89h-q3c8-hjrr/GHSA-c89h-q3c8-hjrr.json index 22400b5aa8a..5952b34c87f 100644 --- a/advisories/unreviewed/2022/05/GHSA-c89h-q3c8-hjrr/GHSA-c89h-q3c8-hjrr.json +++ b/advisories/unreviewed/2022/05/GHSA-c89h-q3c8-hjrr/GHSA-c89h-q3c8-hjrr.json @@ -7,12 +7,8 @@ "CVE-2014-0293" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka \"Internet Explorer Cross-domain Information Disclosure Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c8p7-v77g-7hx4/GHSA-c8p7-v77g-7hx4.json b/advisories/unreviewed/2022/05/GHSA-c8p7-v77g-7hx4/GHSA-c8p7-v77g-7hx4.json index 6ea01d102ed..e631c0109a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8p7-v77g-7hx4/GHSA-c8p7-v77g-7hx4.json +++ b/advisories/unreviewed/2022/05/GHSA-c8p7-v77g-7hx4/GHSA-c8p7-v77g-7hx4.json @@ -7,12 +7,8 @@ "CVE-2013-1320" ], "details": "Buffer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka \"Publisher Buffer Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c8qc-c83f-7w46/GHSA-c8qc-c83f-7w46.json b/advisories/unreviewed/2022/05/GHSA-c8qc-c83f-7w46/GHSA-c8qc-c83f-7w46.json index e508a7ba61f..cd06140ac7b 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8qc-c83f-7w46/GHSA-c8qc-c83f-7w46.json +++ b/advisories/unreviewed/2022/05/GHSA-c8qc-c83f-7w46/GHSA-c8qc-c83f-7w46.json @@ -7,12 +7,8 @@ "CVE-2013-3144" ], "details": "Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3151 and CVE-2013-3163.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cc56-gjcm-v966/GHSA-cc56-gjcm-v966.json b/advisories/unreviewed/2022/05/GHSA-cc56-gjcm-v966/GHSA-cc56-gjcm-v966.json index b15a8f092d8..5e6a8594494 100644 --- a/advisories/unreviewed/2022/05/GHSA-cc56-gjcm-v966/GHSA-cc56-gjcm-v966.json +++ b/advisories/unreviewed/2022/05/GHSA-cc56-gjcm-v966/GHSA-cc56-gjcm-v966.json @@ -7,12 +7,8 @@ "CVE-2013-3120" ], "details": "Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3118 and CVE-2013-3125.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ccr3-73xp-v8c7/GHSA-ccr3-73xp-v8c7.json b/advisories/unreviewed/2022/05/GHSA-ccr3-73xp-v8c7/GHSA-ccr3-73xp-v8c7.json index 0d464bd5776..b7ef446ad65 100644 --- a/advisories/unreviewed/2022/05/GHSA-ccr3-73xp-v8c7/GHSA-ccr3-73xp-v8c7.json +++ b/advisories/unreviewed/2022/05/GHSA-ccr3-73xp-v8c7/GHSA-ccr3-73xp-v8c7.json @@ -7,12 +7,8 @@ "CVE-2014-4061" ], "details": "Microsoft SQL Server 2008 SP3, 2008 R2 SP2, and 2012 SP1 does not properly control use of stack memory for processing of T-SQL batch commands, which allows remote authenticated users to cause a denial of service (daemon hang) via a crafted T-SQL statement, aka \"Microsoft SQL Server Stack Overrun Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cfwp-fcr3-wc7c/GHSA-cfwp-fcr3-wc7c.json b/advisories/unreviewed/2022/05/GHSA-cfwp-fcr3-wc7c/GHSA-cfwp-fcr3-wc7c.json index 72a24af1934..3eecaffa15c 100644 --- a/advisories/unreviewed/2022/05/GHSA-cfwp-fcr3-wc7c/GHSA-cfwp-fcr3-wc7c.json +++ b/advisories/unreviewed/2022/05/GHSA-cfwp-fcr3-wc7c/GHSA-cfwp-fcr3-wc7c.json @@ -7,12 +7,8 @@ "CVE-2014-1783" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1773, CVE-2014-1784, CVE-2014-1786, CVE-2014-1795, CVE-2014-1805, CVE-2014-2758, CVE-2014-2759, CVE-2014-2765, CVE-2014-2766, and CVE-2014-2775.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cgq3-v9x3-fcv6/GHSA-cgq3-v9x3-fcv6.json b/advisories/unreviewed/2022/05/GHSA-cgq3-v9x3-fcv6/GHSA-cgq3-v9x3-fcv6.json index 1afa242311c..287e5aa8893 100644 --- a/advisories/unreviewed/2022/05/GHSA-cgq3-v9x3-fcv6/GHSA-cgq3-v9x3-fcv6.json +++ b/advisories/unreviewed/2022/05/GHSA-cgq3-v9x3-fcv6/GHSA-cgq3-v9x3-fcv6.json @@ -7,12 +7,8 @@ "CVE-2013-1338" ], "details": "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer Use After Free Vulnerability,\" a different vulnerability than CVE-2013-1303 and CVE-2013-1304.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ch9h-fhjr-r74w/GHSA-ch9h-fhjr-r74w.json b/advisories/unreviewed/2022/05/GHSA-ch9h-fhjr-r74w/GHSA-ch9h-fhjr-r74w.json index 493f848c6a8..7fc53e813cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-ch9h-fhjr-r74w/GHSA-ch9h-fhjr-r74w.json +++ b/advisories/unreviewed/2022/05/GHSA-ch9h-fhjr-r74w/GHSA-ch9h-fhjr-r74w.json @@ -7,12 +7,8 @@ "CVE-2014-0283" ], "details": "Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-chx4-j4qm-7gqw/GHSA-chx4-j4qm-7gqw.json b/advisories/unreviewed/2022/05/GHSA-chx4-j4qm-7gqw/GHSA-chx4-j4qm-7gqw.json index fe7448f9931..52c9b3c0fa3 100644 --- a/advisories/unreviewed/2022/05/GHSA-chx4-j4qm-7gqw/GHSA-chx4-j4qm-7gqw.json +++ b/advisories/unreviewed/2022/05/GHSA-chx4-j4qm-7gqw/GHSA-chx4-j4qm-7gqw.json @@ -7,12 +7,8 @@ "CVE-2014-4124" ], "details": "Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka \"Internet Explorer Elevation of Privilege Vulnerability,\" a different vulnerability than CVE-2014-4123.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cj62-w5w3-jr3r/GHSA-cj62-w5w3-jr3r.json b/advisories/unreviewed/2022/05/GHSA-cj62-w5w3-jr3r/GHSA-cj62-w5w3-jr3r.json index b4be6002095..97549830364 100644 --- a/advisories/unreviewed/2022/05/GHSA-cj62-w5w3-jr3r/GHSA-cj62-w5w3-jr3r.json +++ b/advisories/unreviewed/2022/05/GHSA-cj62-w5w3-jr3r/GHSA-cj62-w5w3-jr3r.json @@ -7,12 +7,8 @@ "CVE-2014-2763" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1772, CVE-2014-1780, CVE-2014-1794, CVE-2014-1797, CVE-2014-1802, CVE-2014-2756, CVE-2014-2764, CVE-2014-2769, and CVE-2014-2771.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cjgj-38vj-vcrr/GHSA-cjgj-38vj-vcrr.json b/advisories/unreviewed/2022/05/GHSA-cjgj-38vj-vcrr/GHSA-cjgj-38vj-vcrr.json index 8ad8e59c32d..3fd4bf62a0a 100644 --- a/advisories/unreviewed/2022/05/GHSA-cjgj-38vj-vcrr/GHSA-cjgj-38vj-vcrr.json +++ b/advisories/unreviewed/2022/05/GHSA-cjgj-38vj-vcrr/GHSA-cjgj-38vj-vcrr.json @@ -7,12 +7,8 @@ "CVE-2013-1309" ], "details": "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer Use After Free Vulnerability,\" a different vulnerability than CVE-2013-1308 and CVE-2013-2551.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cm8h-rhxh-h795/GHSA-cm8h-rhxh-h795.json b/advisories/unreviewed/2022/05/GHSA-cm8h-rhxh-h795/GHSA-cm8h-rhxh-h795.json index af05e7c646c..b2e71995f12 100644 --- a/advisories/unreviewed/2022/05/GHSA-cm8h-rhxh-h795/GHSA-cm8h-rhxh-h795.json +++ b/advisories/unreviewed/2022/05/GHSA-cm8h-rhxh-h795/GHSA-cm8h-rhxh-h795.json @@ -7,12 +7,8 @@ "CVE-2014-0324" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0297, CVE-2014-0308, and CVE-2014-0312.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cprv-57mr-pj3m/GHSA-cprv-57mr-pj3m.json b/advisories/unreviewed/2022/05/GHSA-cprv-57mr-pj3m/GHSA-cprv-57mr-pj3m.json index 31b1991157b..8889f14a0a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-cprv-57mr-pj3m/GHSA-cprv-57mr-pj3m.json +++ b/advisories/unreviewed/2022/05/GHSA-cprv-57mr-pj3m/GHSA-cprv-57mr-pj3m.json @@ -7,12 +7,8 @@ "CVE-2014-4051" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2784.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cpw3-947f-46cc/GHSA-cpw3-947f-46cc.json b/advisories/unreviewed/2022/05/GHSA-cpw3-947f-46cc/GHSA-cpw3-947f-46cc.json index 8577e84507f..931dcadc154 100644 --- a/advisories/unreviewed/2022/05/GHSA-cpw3-947f-46cc/GHSA-cpw3-947f-46cc.json +++ b/advisories/unreviewed/2022/05/GHSA-cpw3-947f-46cc/GHSA-cpw3-947f-46cc.json @@ -7,12 +7,8 @@ "CVE-2013-5059" ], "details": "Microsoft SharePoint Server 2010 SP1 and SP2 and 2013, and Office Web Apps 2013, allows remote attackers to execute arbitrary code via crafted page content, aka \"SharePoint Page Content Vulnerabilities.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cq38-wf9c-29h3/GHSA-cq38-wf9c-29h3.json b/advisories/unreviewed/2022/05/GHSA-cq38-wf9c-29h3/GHSA-cq38-wf9c-29h3.json index 41356735516..7320ae8928c 100644 --- a/advisories/unreviewed/2022/05/GHSA-cq38-wf9c-29h3/GHSA-cq38-wf9c-29h3.json +++ b/advisories/unreviewed/2022/05/GHSA-cq38-wf9c-29h3/GHSA-cq38-wf9c-29h3.json @@ -7,12 +7,8 @@ "CVE-2012-1526" ], "details": "Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not initialized or (2) is deleted, aka \"Layout Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cq4f-84mv-f5xv/GHSA-cq4f-84mv-f5xv.json b/advisories/unreviewed/2022/05/GHSA-cq4f-84mv-f5xv/GHSA-cq4f-84mv-f5xv.json index 3fdd0af5268..1984551cfb1 100644 --- a/advisories/unreviewed/2022/05/GHSA-cq4f-84mv-f5xv/GHSA-cq4f-84mv-f5xv.json +++ b/advisories/unreviewed/2022/05/GHSA-cq4f-84mv-f5xv/GHSA-cq4f-84mv-f5xv.json @@ -7,12 +7,8 @@ "CVE-2014-1803" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0282, CVE-2014-1775, CVE-2014-1779, CVE-2014-1799, and CVE-2014-2757.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-crjq-c67c-9x7h/GHSA-crjq-c67c-9x7h.json b/advisories/unreviewed/2022/05/GHSA-crjq-c67c-9x7h/GHSA-crjq-c67c-9x7h.json index b010142caae..18677fef102 100644 --- a/advisories/unreviewed/2022/05/GHSA-crjq-c67c-9x7h/GHSA-crjq-c67c-9x7h.json +++ b/advisories/unreviewed/2022/05/GHSA-crjq-c67c-9x7h/GHSA-crjq-c67c-9x7h.json @@ -7,12 +7,8 @@ "CVE-2014-4058" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-crvf-rp2v-7jq8/GHSA-crvf-rp2v-7jq8.json b/advisories/unreviewed/2022/05/GHSA-crvf-rp2v-7jq8/GHSA-crvf-rp2v-7jq8.json index e901237fa0c..9c2a0d74869 100644 --- a/advisories/unreviewed/2022/05/GHSA-crvf-rp2v-7jq8/GHSA-crvf-rp2v-7jq8.json +++ b/advisories/unreviewed/2022/05/GHSA-crvf-rp2v-7jq8/GHSA-crvf-rp2v-7jq8.json @@ -7,12 +7,8 @@ "CVE-2013-3914" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-crx8-vrm3-2fhw/GHSA-crx8-vrm3-2fhw.json b/advisories/unreviewed/2022/05/GHSA-crx8-vrm3-2fhw/GHSA-crx8-vrm3-2fhw.json index 9f0390c15b3..3c191e26052 100644 --- a/advisories/unreviewed/2022/05/GHSA-crx8-vrm3-2fhw/GHSA-crx8-vrm3-2fhw.json +++ b/advisories/unreviewed/2022/05/GHSA-crx8-vrm3-2fhw/GHSA-crx8-vrm3-2fhw.json @@ -7,12 +7,8 @@ "CVE-2015-0031" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-0017, CVE-2015-0020, CVE-2015-0022, CVE-2015-0026, CVE-2015-0030, CVE-2015-0036, and CVE-2015-0041.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cwq5-xqfq-xgp2/GHSA-cwq5-xqfq-xgp2.json b/advisories/unreviewed/2022/05/GHSA-cwq5-xqfq-xgp2/GHSA-cwq5-xqfq-xgp2.json index 4e8f5a12341..f48bb049c00 100644 --- a/advisories/unreviewed/2022/05/GHSA-cwq5-xqfq-xgp2/GHSA-cwq5-xqfq-xgp2.json +++ b/advisories/unreviewed/2022/05/GHSA-cwq5-xqfq-xgp2/GHSA-cwq5-xqfq-xgp2.json @@ -7,12 +7,8 @@ "CVE-2013-3115" ], "details": "Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3162.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cxf2-pqc3-7qh3/GHSA-cxf2-pqc3-7qh3.json b/advisories/unreviewed/2022/05/GHSA-cxf2-pqc3-7qh3/GHSA-cxf2-pqc3-7qh3.json index 314a9a69be9..0476d9c3272 100644 --- a/advisories/unreviewed/2022/05/GHSA-cxf2-pqc3-7qh3/GHSA-cxf2-pqc3-7qh3.json +++ b/advisories/unreviewed/2022/05/GHSA-cxf2-pqc3-7qh3/GHSA-cxf2-pqc3-7qh3.json @@ -7,12 +7,8 @@ "CVE-2013-3152" ], "details": "Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3146.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cxfx-7xj7-qwjw/GHSA-cxfx-7xj7-qwjw.json b/advisories/unreviewed/2022/05/GHSA-cxfx-7xj7-qwjw/GHSA-cxfx-7xj7-qwjw.json index 5d81d668ebe..2966df41b2a 100644 --- a/advisories/unreviewed/2022/05/GHSA-cxfx-7xj7-qwjw/GHSA-cxfx-7xj7-qwjw.json +++ b/advisories/unreviewed/2022/05/GHSA-cxfx-7xj7-qwjw/GHSA-cxfx-7xj7-qwjw.json @@ -7,12 +7,8 @@ "CVE-2011-1895" ], "details": "CRLF injection vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary HTTP headers, and conduct HTTP response splitting attacks and cross-site scripting (XSS) attacks, via unspecified vectors, aka \"ExcelTable Response Splitting XSS Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cxgx-c7c4-5mq4/GHSA-cxgx-c7c4-5mq4.json b/advisories/unreviewed/2022/05/GHSA-cxgx-c7c4-5mq4/GHSA-cxgx-c7c4-5mq4.json index 93f6573f827..f2f8e498863 100644 --- a/advisories/unreviewed/2022/05/GHSA-cxgx-c7c4-5mq4/GHSA-cxgx-c7c4-5mq4.json +++ b/advisories/unreviewed/2022/05/GHSA-cxgx-c7c4-5mq4/GHSA-cxgx-c7c4-5mq4.json @@ -7,12 +7,8 @@ "CVE-2013-1308" ], "details": "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer Use After Free Vulnerability,\" a different vulnerability than CVE-2013-1309 and CVE-2013-2551.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f2fg-m8gw-qpw4/GHSA-f2fg-m8gw-qpw4.json b/advisories/unreviewed/2022/05/GHSA-f2fg-m8gw-qpw4/GHSA-f2fg-m8gw-qpw4.json index ccd31969734..a278312fd6f 100644 --- a/advisories/unreviewed/2022/05/GHSA-f2fg-m8gw-qpw4/GHSA-f2fg-m8gw-qpw4.json +++ b/advisories/unreviewed/2022/05/GHSA-f2fg-m8gw-qpw4/GHSA-f2fg-m8gw-qpw4.json @@ -7,12 +7,8 @@ "CVE-2015-0035" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-0027, CVE-2015-0039, CVE-2015-0052, and CVE-2015-0068.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f2hw-fh3p-h6gp/GHSA-f2hw-fh3p-h6gp.json b/advisories/unreviewed/2022/05/GHSA-f2hw-fh3p-h6gp/GHSA-f2hw-fh3p-h6gp.json index 709d46e3b3e..38b294884f8 100644 --- a/advisories/unreviewed/2022/05/GHSA-f2hw-fh3p-h6gp/GHSA-f2hw-fh3p-h6gp.json +++ b/advisories/unreviewed/2022/05/GHSA-f2hw-fh3p-h6gp/GHSA-f2hw-fh3p-h6gp.json @@ -7,12 +7,8 @@ "CVE-2015-0053" ], "details": "Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-0045.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f2vg-c829-mp26/GHSA-f2vg-c829-mp26.json b/advisories/unreviewed/2022/05/GHSA-f2vg-c829-mp26/GHSA-f2vg-c829-mp26.json index 281cae9b883..5aa801b475f 100644 --- a/advisories/unreviewed/2022/05/GHSA-f2vg-c829-mp26/GHSA-f2vg-c829-mp26.json +++ b/advisories/unreviewed/2022/05/GHSA-f2vg-c829-mp26/GHSA-f2vg-c829-mp26.json @@ -7,12 +7,8 @@ "CVE-2014-4134" ], "details": "Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f2vv-jj3f-xp93/GHSA-f2vv-jj3f-xp93.json b/advisories/unreviewed/2022/05/GHSA-f2vv-jj3f-xp93/GHSA-f2vv-jj3f-xp93.json index 24dfa182d5c..2d9372965aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-f2vv-jj3f-xp93/GHSA-f2vv-jj3f-xp93.json +++ b/advisories/unreviewed/2022/05/GHSA-f2vv-jj3f-xp93/GHSA-f2vv-jj3f-xp93.json @@ -7,12 +7,8 @@ "CVE-2014-6353" ], "details": "Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f3w2-m49v-mvf9/GHSA-f3w2-m49v-mvf9.json b/advisories/unreviewed/2022/05/GHSA-f3w2-m49v-mvf9/GHSA-f3w2-m49v-mvf9.json index 2a87e538268..7a5a13c666d 100644 --- a/advisories/unreviewed/2022/05/GHSA-f3w2-m49v-mvf9/GHSA-f3w2-m49v-mvf9.json +++ b/advisories/unreviewed/2022/05/GHSA-f3w2-m49v-mvf9/GHSA-f3w2-m49v-mvf9.json @@ -7,12 +7,8 @@ "CVE-2014-2778" ], "details": "Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted embedded font in a (1) .doc or (2) .docx document, aka \"Embedded Font Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f56f-gjmp-ccg6/GHSA-f56f-gjmp-ccg6.json b/advisories/unreviewed/2022/05/GHSA-f56f-gjmp-ccg6/GHSA-f56f-gjmp-ccg6.json index 2bf10607764..68b29703678 100644 --- a/advisories/unreviewed/2022/05/GHSA-f56f-gjmp-ccg6/GHSA-f56f-gjmp-ccg6.json +++ b/advisories/unreviewed/2022/05/GHSA-f56f-gjmp-ccg6/GHSA-f56f-gjmp-ccg6.json @@ -7,12 +7,8 @@ "CVE-2014-4070" ], "details": "Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka \"Lync XSS Information Disclosure Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f5gg-8xfg-pqm7/GHSA-f5gg-8xfg-pqm7.json b/advisories/unreviewed/2022/05/GHSA-f5gg-8xfg-pqm7/GHSA-f5gg-8xfg-pqm7.json index d1b785d3642..296f025bea5 100644 --- a/advisories/unreviewed/2022/05/GHSA-f5gg-8xfg-pqm7/GHSA-f5gg-8xfg-pqm7.json +++ b/advisories/unreviewed/2022/05/GHSA-f5gg-8xfg-pqm7/GHSA-f5gg-8xfg-pqm7.json @@ -7,12 +7,8 @@ "CVE-2011-1279" ], "details": "Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka \"Excel Out of Bounds WriteAV Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f749-7f34-9fpm/GHSA-f749-7f34-9fpm.json b/advisories/unreviewed/2022/05/GHSA-f749-7f34-9fpm/GHSA-f749-7f34-9fpm.json index a8efb537f96..5e4085bba14 100644 --- a/advisories/unreviewed/2022/05/GHSA-f749-7f34-9fpm/GHSA-f749-7f34-9fpm.json +++ b/advisories/unreviewed/2022/05/GHSA-f749-7f34-9fpm/GHSA-f749-7f34-9fpm.json @@ -7,12 +7,8 @@ "CVE-2014-4095" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-4087, CVE-2014-4096, and CVE-2014-4101.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f76r-m7g3-x93v/GHSA-f76r-m7g3-x93v.json b/advisories/unreviewed/2022/05/GHSA-f76r-m7g3-x93v/GHSA-f76r-m7g3-x93v.json index 4913863594e..0f2e2718ab5 100644 --- a/advisories/unreviewed/2022/05/GHSA-f76r-m7g3-x93v/GHSA-f76r-m7g3-x93v.json +++ b/advisories/unreviewed/2022/05/GHSA-f76r-m7g3-x93v/GHSA-f76r-m7g3-x93v.json @@ -7,12 +7,8 @@ "CVE-2013-3123" ], "details": "Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3111.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f77x-8486-m8vx/GHSA-f77x-8486-m8vx.json b/advisories/unreviewed/2022/05/GHSA-f77x-8486-m8vx/GHSA-f77x-8486-m8vx.json index 5d3a9933a69..41c4d54a86d 100644 --- a/advisories/unreviewed/2022/05/GHSA-f77x-8486-m8vx/GHSA-f77x-8486-m8vx.json +++ b/advisories/unreviewed/2022/05/GHSA-f77x-8486-m8vx/GHSA-f77x-8486-m8vx.json @@ -7,12 +7,8 @@ "CVE-2015-0066" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-0018, CVE-2015-0037, and CVE-2015-0040.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f78m-864p-mm89/GHSA-f78m-864p-mm89.json b/advisories/unreviewed/2022/05/GHSA-f78m-864p-mm89/GHSA-f78m-864p-mm89.json index 794352dad4d..090d21244fd 100644 --- a/advisories/unreviewed/2022/05/GHSA-f78m-864p-mm89/GHSA-f78m-864p-mm89.json +++ b/advisories/unreviewed/2022/05/GHSA-f78m-864p-mm89/GHSA-f78m-864p-mm89.json @@ -7,12 +7,8 @@ "CVE-2012-1894" ], "details": "Microsoft Office for Mac 2011 uses world-writable permissions for the \"Applications/Microsoft Office 2011/\" directory and certain other directories, which allows local users to gain privileges by placing a Trojan horse executable file in one of these directories, aka \"Office for Mac Improper Folder Permissions Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f7mp-9g7c-xvf8/GHSA-f7mp-9g7c-xvf8.json b/advisories/unreviewed/2022/05/GHSA-f7mp-9g7c-xvf8/GHSA-f7mp-9g7c-xvf8.json index 51e73b1893d..256b45c9a3d 100644 --- a/advisories/unreviewed/2022/05/GHSA-f7mp-9g7c-xvf8/GHSA-f7mp-9g7c-xvf8.json +++ b/advisories/unreviewed/2022/05/GHSA-f7mp-9g7c-xvf8/GHSA-f7mp-9g7c-xvf8.json @@ -7,12 +7,8 @@ "CVE-2013-3892" ], "details": "Microsoft Word 2007 SP3 and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka \"Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f7rw-4wx7-r7g2/GHSA-f7rw-4wx7-r7g2.json b/advisories/unreviewed/2022/05/GHSA-f7rw-4wx7-r7g2/GHSA-f7rw-4wx7-r7g2.json index d4401bb8f70..08299ee15ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-f7rw-4wx7-r7g2/GHSA-f7rw-4wx7-r7g2.json +++ b/advisories/unreviewed/2022/05/GHSA-f7rw-4wx7-r7g2/GHSA-f7rw-4wx7-r7g2.json @@ -7,12 +7,8 @@ "CVE-2012-2524" ], "details": "Microsoft Office 2007 SP2 and SP3 and 2010 SP1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Computer Graphics Metafile (CGM) file, aka \"CGM File Format Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f8f8-9jv7-q24v/GHSA-f8f8-9jv7-q24v.json b/advisories/unreviewed/2022/05/GHSA-f8f8-9jv7-q24v/GHSA-f8f8-9jv7-q24v.json index a470dc525e7..8a94ed5b708 100644 --- a/advisories/unreviewed/2022/05/GHSA-f8f8-9jv7-q24v/GHSA-f8f8-9jv7-q24v.json +++ b/advisories/unreviewed/2022/05/GHSA-f8f8-9jv7-q24v/GHSA-f8f8-9jv7-q24v.json @@ -7,12 +7,8 @@ "CVE-2014-1813" ], "details": "Microsoft Web Applications 2010 SP1 and SP2 allows remote authenticated users to execute arbitrary code via crafted page content, aka \"Web Applications Page Content Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f8fq-fr63-cf87/GHSA-f8fq-fr63-cf87.json b/advisories/unreviewed/2022/05/GHSA-f8fq-fr63-cf87/GHSA-f8fq-fr63-cf87.json index f6f75cad0f7..09ea1d17e66 100644 --- a/advisories/unreviewed/2022/05/GHSA-f8fq-fr63-cf87/GHSA-f8fq-fr63-cf87.json +++ b/advisories/unreviewed/2022/05/GHSA-f8fq-fr63-cf87/GHSA-f8fq-fr63-cf87.json @@ -7,12 +7,8 @@ "CVE-2013-1307" ], "details": "Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer Use After Free Vulnerability,\" a different vulnerability than CVE-2013-0811.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f985-25vc-342h/GHSA-f985-25vc-342h.json b/advisories/unreviewed/2022/05/GHSA-f985-25vc-342h/GHSA-f985-25vc-342h.json index 0f35f1f2912..e969ba6efa7 100644 --- a/advisories/unreviewed/2022/05/GHSA-f985-25vc-342h/GHSA-f985-25vc-342h.json +++ b/advisories/unreviewed/2022/05/GHSA-f985-25vc-342h/GHSA-f985-25vc-342h.json @@ -7,12 +7,8 @@ "CVE-2012-3108" ], "details": "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1766, CVE-2012-1767, CVE-2012-1769, CVE-2012-1770, CVE-2012-1771, CVE-2012-1772, CVE-2012-1773, CVE-2012-3106, CVE-2012-3107, and CVE-2012-3110.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f9f3-g4p4-q8f6/GHSA-f9f3-g4p4-q8f6.json b/advisories/unreviewed/2022/05/GHSA-f9f3-g4p4-q8f6/GHSA-f9f3-g4p4-q8f6.json index e06b98f44eb..a0ab2b5d028 100644 --- a/advisories/unreviewed/2022/05/GHSA-f9f3-g4p4-q8f6/GHSA-f9f3-g4p4-q8f6.json +++ b/advisories/unreviewed/2022/05/GHSA-f9f3-g4p4-q8f6/GHSA-f9f3-g4p4-q8f6.json @@ -7,12 +7,8 @@ "CVE-2011-1990" ], "details": "Microsoft Excel 2007 SP2; Excel in Office 2007 SP2; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and Excel Services on Office SharePoint Server 2007 SP2 do not properly validate the sign of an unspecified array index, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka \"Excel Out of Bounds Array Indexing Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fcqq-32xg-374w/GHSA-fcqq-32xg-374w.json b/advisories/unreviewed/2022/05/GHSA-fcqq-32xg-374w/GHSA-fcqq-32xg-374w.json index 3ec6e4af9c6..333c59185b1 100644 --- a/advisories/unreviewed/2022/05/GHSA-fcqq-32xg-374w/GHSA-fcqq-32xg-374w.json +++ b/advisories/unreviewed/2022/05/GHSA-fcqq-32xg-374w/GHSA-fcqq-32xg-374w.json @@ -7,12 +7,8 @@ "CVE-2014-4090" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ffq2-4mg4-w7qf/GHSA-ffq2-4mg4-w7qf.json b/advisories/unreviewed/2022/05/GHSA-ffq2-4mg4-w7qf/GHSA-ffq2-4mg4-w7qf.json index 0cf91f75722..adb7f8327aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-ffq2-4mg4-w7qf/GHSA-ffq2-4mg4-w7qf.json +++ b/advisories/unreviewed/2022/05/GHSA-ffq2-4mg4-w7qf/GHSA-ffq2-4mg4-w7qf.json @@ -7,12 +7,8 @@ "CVE-2010-3946" ], "details": "Integer overflow in the PICT image converter in the graphics filters in Microsoft Office XP SP3, Office 2003 SP3, and Office Converter Pack allows remote attackers to execute arbitrary code via a crafted PICT image in an Office document, aka \"PICT Image Converter Integer Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ffww-78wq-5cf2/GHSA-ffww-78wq-5cf2.json b/advisories/unreviewed/2022/05/GHSA-ffww-78wq-5cf2/GHSA-ffww-78wq-5cf2.json index c331ae561e6..60be8953599 100644 --- a/advisories/unreviewed/2022/05/GHSA-ffww-78wq-5cf2/GHSA-ffww-78wq-5cf2.json +++ b/advisories/unreviewed/2022/05/GHSA-ffww-78wq-5cf2/GHSA-ffww-78wq-5cf2.json @@ -7,12 +7,8 @@ "CVE-2015-0075" ], "details": "The kernel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 does not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka \"Impersonation Level Check Elevation of Privilege Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fg4h-qrpg-vp9g/GHSA-fg4h-qrpg-vp9g.json b/advisories/unreviewed/2022/05/GHSA-fg4h-qrpg-vp9g/GHSA-fg4h-qrpg-vp9g.json index f940b84acef..b9671ed44df 100644 --- a/advisories/unreviewed/2022/05/GHSA-fg4h-qrpg-vp9g/GHSA-fg4h-qrpg-vp9g.json +++ b/advisories/unreviewed/2022/05/GHSA-fg4h-qrpg-vp9g/GHSA-fg4h-qrpg-vp9g.json @@ -7,12 +7,8 @@ "CVE-2014-4082" ], "details": "Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fhcg-f8fc-6v9f/GHSA-fhcg-f8fc-6v9f.json b/advisories/unreviewed/2022/05/GHSA-fhcg-f8fc-6v9f/GHSA-fhcg-f8fc-6v9f.json index fb62c4ea3ca..feffccf9b1f 100644 --- a/advisories/unreviewed/2022/05/GHSA-fhcg-f8fc-6v9f/GHSA-fhcg-f8fc-6v9f.json +++ b/advisories/unreviewed/2022/05/GHSA-fhcg-f8fc-6v9f/GHSA-fhcg-f8fc-6v9f.json @@ -7,12 +7,8 @@ "CVE-2014-4103" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fjqq-2pgg-5jc3/GHSA-fjqq-2pgg-5jc3.json b/advisories/unreviewed/2022/05/GHSA-fjqq-2pgg-5jc3/GHSA-fjqq-2pgg-5jc3.json index af336f044cb..dd18cd60de4 100644 --- a/advisories/unreviewed/2022/05/GHSA-fjqq-2pgg-5jc3/GHSA-fjqq-2pgg-5jc3.json +++ b/advisories/unreviewed/2022/05/GHSA-fjqq-2pgg-5jc3/GHSA-fjqq-2pgg-5jc3.json @@ -7,12 +7,8 @@ "CVE-2013-3148" ], "details": "Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3153.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fp9v-vv69-fqp7/GHSA-fp9v-vv69-fqp7.json b/advisories/unreviewed/2022/05/GHSA-fp9v-vv69-fqp7/GHSA-fp9v-vv69-fqp7.json index 514b6045280..f49af39a0f8 100644 --- a/advisories/unreviewed/2022/05/GHSA-fp9v-vv69-fqp7/GHSA-fp9v-vv69-fqp7.json +++ b/advisories/unreviewed/2022/05/GHSA-fp9v-vv69-fqp7/GHSA-fp9v-vv69-fqp7.json @@ -7,12 +7,8 @@ "CVE-2014-1753" ], "details": "Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fpfp-68qc-r9hr/GHSA-fpfp-68qc-r9hr.json b/advisories/unreviewed/2022/05/GHSA-fpfp-68qc-r9hr/GHSA-fpfp-68qc-r9hr.json index 3b95656e9d0..1ee6138298a 100644 --- a/advisories/unreviewed/2022/05/GHSA-fpfp-68qc-r9hr/GHSA-fpfp-68qc-r9hr.json +++ b/advisories/unreviewed/2022/05/GHSA-fpfp-68qc-r9hr/GHSA-fpfp-68qc-r9hr.json @@ -7,12 +7,8 @@ "CVE-2014-1794" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1772, CVE-2014-1780, CVE-2014-1797, CVE-2014-1802, CVE-2014-2756, CVE-2014-2763, CVE-2014-2764, CVE-2014-2769, and CVE-2014-2771.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fpjx-hwrg-f2qh/GHSA-fpjx-hwrg-f2qh.json b/advisories/unreviewed/2022/05/GHSA-fpjx-hwrg-f2qh/GHSA-fpjx-hwrg-f2qh.json index 3fa0fe1067f..c77473c5772 100644 --- a/advisories/unreviewed/2022/05/GHSA-fpjx-hwrg-f2qh/GHSA-fpjx-hwrg-f2qh.json +++ b/advisories/unreviewed/2022/05/GHSA-fpjx-hwrg-f2qh/GHSA-fpjx-hwrg-f2qh.json @@ -7,12 +7,8 @@ "CVE-2013-3915" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3917.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fpx4-j29r-3688/GHSA-fpx4-j29r-3688.json b/advisories/unreviewed/2022/05/GHSA-fpx4-j29r-3688/GHSA-fpx4-j29r-3688.json index 27836483818..74941ba33d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-fpx4-j29r-3688/GHSA-fpx4-j29r-3688.json +++ b/advisories/unreviewed/2022/05/GHSA-fpx4-j29r-3688/GHSA-fpx4-j29r-3688.json @@ -7,12 +7,8 @@ "CVE-2014-2787" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2790, CVE-2014-2802, and CVE-2014-2806.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fq35-2hm7-6r52/GHSA-fq35-2hm7-6r52.json b/advisories/unreviewed/2022/05/GHSA-fq35-2hm7-6r52/GHSA-fq35-2hm7-6r52.json index e88716d0f33..0597c5d318c 100644 --- a/advisories/unreviewed/2022/05/GHSA-fq35-2hm7-6r52/GHSA-fq35-2hm7-6r52.json +++ b/advisories/unreviewed/2022/05/GHSA-fq35-2hm7-6r52/GHSA-fq35-2hm7-6r52.json @@ -7,12 +7,8 @@ "CVE-2014-2796" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2808, CVE-2014-2825, CVE-2014-4050, CVE-2014-4055, and CVE-2014-4067.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fq96-cmp6-cvxq/GHSA-fq96-cmp6-cvxq.json b/advisories/unreviewed/2022/05/GHSA-fq96-cmp6-cvxq/GHSA-fq96-cmp6-cvxq.json index b6f1fbaa378..0546664ab4a 100644 --- a/advisories/unreviewed/2022/05/GHSA-fq96-cmp6-cvxq/GHSA-fq96-cmp6-cvxq.json +++ b/advisories/unreviewed/2022/05/GHSA-fq96-cmp6-cvxq/GHSA-fq96-cmp6-cvxq.json @@ -7,12 +7,8 @@ "CVE-2011-1893" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2010, Windows SharePoint Services 2.0 and 3.0 SP2, and SharePoint Foundation 2010 allows remote attackers to inject arbitrary web script or HTML via the URI, aka \"SharePoint XSS Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fqjw-c53g-2jq8/GHSA-fqjw-c53g-2jq8.json b/advisories/unreviewed/2022/05/GHSA-fqjw-c53g-2jq8/GHSA-fqjw-c53g-2jq8.json index dc414045eb6..b2fd275436e 100644 --- a/advisories/unreviewed/2022/05/GHSA-fqjw-c53g-2jq8/GHSA-fqjw-c53g-2jq8.json +++ b/advisories/unreviewed/2022/05/GHSA-fqjw-c53g-2jq8/GHSA-fqjw-c53g-2jq8.json @@ -7,12 +7,8 @@ "CVE-2013-1313" ], "details": "Object Linking and Embedding (OLE) Automation in Microsoft Windows XP SP3 does not properly allocate memory, which allows remote attackers to execute arbitrary code via a crafted RTF document, aka \"OLE Automation Remote Code Execution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fv59-fp6c-g2j4/GHSA-fv59-fp6c-g2j4.json b/advisories/unreviewed/2022/05/GHSA-fv59-fp6c-g2j4/GHSA-fv59-fp6c-g2j4.json index d9876e7f8e7..626f7374d94 100644 --- a/advisories/unreviewed/2022/05/GHSA-fv59-fp6c-g2j4/GHSA-fv59-fp6c-g2j4.json +++ b/advisories/unreviewed/2022/05/GHSA-fv59-fp6c-g2j4/GHSA-fv59-fp6c-g2j4.json @@ -7,12 +7,8 @@ "CVE-2013-1282" ], "details": "The LDAP service in Microsoft Active Directory, Active Directory Application Mode (ADAM), Active Directory Lightweight Directory Service (AD LDS), and Active Directory Services allows remote attackers to cause a denial of service (memory consumption and service outage) via a crafted query, aka \"Memory Consumption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fw9f-x7gq-r4jp/GHSA-fw9f-x7gq-r4jp.json b/advisories/unreviewed/2022/05/GHSA-fw9f-x7gq-r4jp/GHSA-fw9f-x7gq-r4jp.json index 80328326509..76ee34dbd9d 100644 --- a/advisories/unreviewed/2022/05/GHSA-fw9f-x7gq-r4jp/GHSA-fw9f-x7gq-r4jp.json +++ b/advisories/unreviewed/2022/05/GHSA-fw9f-x7gq-r4jp/GHSA-fw9f-x7gq-r4jp.json @@ -7,12 +7,8 @@ "CVE-2014-1816" ], "details": "Microsoft XML Core Services (aka MSXML) 3.0 and 6.0 does not properly restrict the information transmitted by Internet Explorer during a download action, which allows remote attackers to discover (1) full pathnames on the client system and (2) local usernames embedded in these pathnames via a crafted web site, aka \"MSXML Entity URI Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fx34-3cr4-g3w7/GHSA-fx34-3cr4-g3w7.json b/advisories/unreviewed/2022/05/GHSA-fx34-3cr4-g3w7/GHSA-fx34-3cr4-g3w7.json index c573a1fdf82..6199c979be3 100644 --- a/advisories/unreviewed/2022/05/GHSA-fx34-3cr4-g3w7/GHSA-fx34-3cr4-g3w7.json +++ b/advisories/unreviewed/2022/05/GHSA-fx34-3cr4-g3w7/GHSA-fx34-3cr4-g3w7.json @@ -7,12 +7,8 @@ "CVE-2014-0299" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0305 and CVE-2014-0311.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g2g6-94w5-qg2f/GHSA-g2g6-94w5-qg2f.json b/advisories/unreviewed/2022/05/GHSA-g2g6-94w5-qg2f/GHSA-g2g6-94w5-qg2f.json index 4a46ab6eb15..d98c7f44340 100644 --- a/advisories/unreviewed/2022/05/GHSA-g2g6-94w5-qg2f/GHSA-g2g6-94w5-qg2f.json +++ b/advisories/unreviewed/2022/05/GHSA-g2g6-94w5-qg2f/GHSA-g2g6-94w5-qg2f.json @@ -7,12 +7,8 @@ "CVE-2014-1791" ], "details": "Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g47q-7h58-pqpc/GHSA-g47q-7h58-pqpc.json b/advisories/unreviewed/2022/05/GHSA-g47q-7h58-pqpc/GHSA-g47q-7h58-pqpc.json index f847ae3271b..7bd252f2be3 100644 --- a/advisories/unreviewed/2022/05/GHSA-g47q-7h58-pqpc/GHSA-g47q-7h58-pqpc.json +++ b/advisories/unreviewed/2022/05/GHSA-g47q-7h58-pqpc/GHSA-g47q-7h58-pqpc.json @@ -7,12 +7,8 @@ "CVE-2010-3964" ], "details": "Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when the Document Conversions Load Balancer Service is enabled, allows remote attackers to execute arbitrary code via a crafted SOAP request to TCP port 8082, aka \"Malformed Request Code Execution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g47v-r4wh-wjrq/GHSA-g47v-r4wh-wjrq.json b/advisories/unreviewed/2022/05/GHSA-g47v-r4wh-wjrq/GHSA-g47v-r4wh-wjrq.json index 8643d3ec995..6b5d92bb182 100644 --- a/advisories/unreviewed/2022/05/GHSA-g47v-r4wh-wjrq/GHSA-g47v-r4wh-wjrq.json +++ b/advisories/unreviewed/2022/05/GHSA-g47v-r4wh-wjrq/GHSA-g47v-r4wh-wjrq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g4hh-gpv8-3468/GHSA-g4hh-gpv8-3468.json b/advisories/unreviewed/2022/05/GHSA-g4hh-gpv8-3468/GHSA-g4hh-gpv8-3468.json index 847498709f6..c1ea493f512 100644 --- a/advisories/unreviewed/2022/05/GHSA-g4hh-gpv8-3468/GHSA-g4hh-gpv8-3468.json +++ b/advisories/unreviewed/2022/05/GHSA-g4hh-gpv8-3468/GHSA-g4hh-gpv8-3468.json @@ -7,12 +7,8 @@ "CVE-2012-1529" ], "details": "Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly initialized or (2) is deleted, aka \"OnMove Use After Free Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g5wx-22f5-85j8/GHSA-g5wx-22f5-85j8.json b/advisories/unreviewed/2022/05/GHSA-g5wx-22f5-85j8/GHSA-g5wx-22f5-85j8.json index c250461ab1c..b32456f5bdc 100644 --- a/advisories/unreviewed/2022/05/GHSA-g5wx-22f5-85j8/GHSA-g5wx-22f5-85j8.json +++ b/advisories/unreviewed/2022/05/GHSA-g5wx-22f5-85j8/GHSA-g5wx-22f5-85j8.json @@ -7,12 +7,8 @@ "CVE-2014-0275" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0285 and CVE-2014-0286.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g6qr-5c4j-jqmc/GHSA-g6qr-5c4j-jqmc.json b/advisories/unreviewed/2022/05/GHSA-g6qr-5c4j-jqmc/GHSA-g6qr-5c4j-jqmc.json index 816351ca534..b07e0689fef 100644 --- a/advisories/unreviewed/2022/05/GHSA-g6qr-5c4j-jqmc/GHSA-g6qr-5c4j-jqmc.json +++ b/advisories/unreviewed/2022/05/GHSA-g6qr-5c4j-jqmc/GHSA-g6qr-5c4j-jqmc.json @@ -7,12 +7,8 @@ "CVE-2014-0319" ], "details": "Microsoft Silverlight 5 before 5.1.30214.0 and Silverlight 5 Developer Runtime before 5.1.30214.0 allow attackers to bypass the DEP and ASLR protection mechanisms via unspecified vectors, aka \"Silverlight DEP/ASLR Bypass Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g78p-rvg2-q9mh/GHSA-g78p-rvg2-q9mh.json b/advisories/unreviewed/2022/05/GHSA-g78p-rvg2-q9mh/GHSA-g78p-rvg2-q9mh.json index 23c5af6af21..33c602d6bdc 100644 --- a/advisories/unreviewed/2022/05/GHSA-g78p-rvg2-q9mh/GHSA-g78p-rvg2-q9mh.json +++ b/advisories/unreviewed/2022/05/GHSA-g78p-rvg2-q9mh/GHSA-g78p-rvg2-q9mh.json @@ -7,12 +7,8 @@ "CVE-2014-1784" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1773, CVE-2014-1783, CVE-2014-1786, CVE-2014-1795, CVE-2014-1805, CVE-2014-2758, CVE-2014-2759, CVE-2014-2765, CVE-2014-2766, and CVE-2014-2775.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g7mr-f4gj-f8j8/GHSA-g7mr-f4gj-f8j8.json b/advisories/unreviewed/2022/05/GHSA-g7mr-f4gj-f8j8/GHSA-g7mr-f4gj-f8j8.json index c9d9acc303f..512e9fb0955 100644 --- a/advisories/unreviewed/2022/05/GHSA-g7mr-f4gj-f8j8/GHSA-g7mr-f4gj-f8j8.json +++ b/advisories/unreviewed/2022/05/GHSA-g7mr-f4gj-f8j8/GHSA-g7mr-f4gj-f8j8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g8v7-2hc8-72qm/GHSA-g8v7-2hc8-72qm.json b/advisories/unreviewed/2022/05/GHSA-g8v7-2hc8-72qm/GHSA-g8v7-2hc8-72qm.json index 4588839006b..cffbf39a41f 100644 --- a/advisories/unreviewed/2022/05/GHSA-g8v7-2hc8-72qm/GHSA-g8v7-2hc8-72qm.json +++ b/advisories/unreviewed/2022/05/GHSA-g8v7-2hc8-72qm/GHSA-g8v7-2hc8-72qm.json @@ -7,12 +7,8 @@ "CVE-2013-1336" ], "details": "The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check signatures, which allows remote attackers to make undetected changes to signed XML documents via unspecified vectors that preserve signature validity, aka \"XML Digital Signature Spoofing Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gcfv-6375-x366/GHSA-gcfv-6375-x366.json b/advisories/unreviewed/2022/05/GHSA-gcfv-6375-x366/GHSA-gcfv-6375-x366.json index c059ba11945..f44c6462f56 100644 --- a/advisories/unreviewed/2022/05/GHSA-gcfv-6375-x366/GHSA-gcfv-6375-x366.json +++ b/advisories/unreviewed/2022/05/GHSA-gcfv-6375-x366/GHSA-gcfv-6375-x366.json @@ -7,12 +7,8 @@ "CVE-2014-1758" ], "details": "Stack-based buffer overflow in Microsoft Word 2003 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka \"Microsoft Word Stack Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gch3-hjmq-hqcq/GHSA-gch3-hjmq-hqcq.json b/advisories/unreviewed/2022/05/GHSA-gch3-hjmq-hqcq/GHSA-gch3-hjmq-hqcq.json index ed754b612f7..bc22a9a8955 100644 --- a/advisories/unreviewed/2022/05/GHSA-gch3-hjmq-hqcq/GHSA-gch3-hjmq-hqcq.json +++ b/advisories/unreviewed/2022/05/GHSA-gch3-hjmq-hqcq/GHSA-gch3-hjmq-hqcq.json @@ -7,12 +7,8 @@ "CVE-2011-1980" ], "details": "Untrusted search path vulnerability in Microsoft Office 2003 SP3 and 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .doc, .ppt, or .xls file, aka \"Office Component Insecure Library Loading Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gcqh-vqcq-q7w2/GHSA-gcqh-vqcq-q7w2.json b/advisories/unreviewed/2022/05/GHSA-gcqh-vqcq-q7w2/GHSA-gcqh-vqcq-q7w2.json index 5d610e430e8..84076f14f94 100644 --- a/advisories/unreviewed/2022/05/GHSA-gcqh-vqcq-q7w2/GHSA-gcqh-vqcq-q7w2.json +++ b/advisories/unreviewed/2022/05/GHSA-gcqh-vqcq-q7w2/GHSA-gcqh-vqcq-q7w2.json @@ -7,12 +7,8 @@ "CVE-2014-0298" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gcrh-w8vq-mc6j/GHSA-gcrh-w8vq-mc6j.json b/advisories/unreviewed/2022/05/GHSA-gcrh-w8vq-mc6j/GHSA-gcrh-w8vq-mc6j.json index b9378edd45b..e44f1b28f63 100644 --- a/advisories/unreviewed/2022/05/GHSA-gcrh-w8vq-mc6j/GHSA-gcrh-w8vq-mc6j.json +++ b/advisories/unreviewed/2022/05/GHSA-gcrh-w8vq-mc6j/GHSA-gcrh-w8vq-mc6j.json @@ -7,12 +7,8 @@ "CVE-2014-4052" ], "details": "Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gcx2-xqvg-96fr/GHSA-gcx2-xqvg-96fr.json b/advisories/unreviewed/2022/05/GHSA-gcx2-xqvg-96fr/GHSA-gcx2-xqvg-96fr.json index 041ae16727d..2e7e1de73b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-gcx2-xqvg-96fr/GHSA-gcx2-xqvg-96fr.json +++ b/advisories/unreviewed/2022/05/GHSA-gcx2-xqvg-96fr/GHSA-gcx2-xqvg-96fr.json @@ -7,12 +7,8 @@ "CVE-2013-1312" ], "details": "Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer Use After Free Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gfxh-gx4p-j75g/GHSA-gfxh-gx4p-j75g.json b/advisories/unreviewed/2022/05/GHSA-gfxh-gx4p-j75g/GHSA-gfxh-gx4p-j75g.json index cce29f8e85e..ee7c87fce33 100644 --- a/advisories/unreviewed/2022/05/GHSA-gfxh-gx4p-j75g/GHSA-gfxh-gx4p-j75g.json +++ b/advisories/unreviewed/2022/05/GHSA-gfxh-gx4p-j75g/GHSA-gfxh-gx4p-j75g.json @@ -7,12 +7,8 @@ "CVE-2013-3781" ], "details": "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7, 8.4.0, and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-3776.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gg24-jvxr-982q/GHSA-gg24-jvxr-982q.json b/advisories/unreviewed/2022/05/GHSA-gg24-jvxr-982q/GHSA-gg24-jvxr-982q.json index 4c5577f01a2..39ce53aa5a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-gg24-jvxr-982q/GHSA-gg24-jvxr-982q.json +++ b/advisories/unreviewed/2022/05/GHSA-gg24-jvxr-982q/GHSA-gg24-jvxr-982q.json @@ -7,12 +7,8 @@ "CVE-2014-2820" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2774, CVE-2014-2826, CVE-2014-2827, and CVE-2014-4063.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ggx2-877f-x836/GHSA-ggx2-877f-x836.json b/advisories/unreviewed/2022/05/GHSA-ggx2-877f-x836/GHSA-ggx2-877f-x836.json index fda5a1555cb..cee6b7295f3 100644 --- a/advisories/unreviewed/2022/05/GHSA-ggx2-877f-x836/GHSA-ggx2-877f-x836.json +++ b/advisories/unreviewed/2022/05/GHSA-ggx2-877f-x836/GHSA-ggx2-877f-x836.json @@ -7,12 +7,8 @@ "CVE-2011-3413" ], "details": "Microsoft PowerPoint 2007 SP2; Office 2008 for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; and PowerPoint Viewer 2007 SP2 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an invalid OfficeArt record in a PowerPoint document, aka \"OfficeArt Shape RCE Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gh9p-wvxj-wc5x/GHSA-gh9p-wvxj-wc5x.json b/advisories/unreviewed/2022/05/GHSA-gh9p-wvxj-wc5x/GHSA-gh9p-wvxj-wc5x.json index 1bf974f7344..29227f031e4 100644 --- a/advisories/unreviewed/2022/05/GHSA-gh9p-wvxj-wc5x/GHSA-gh9p-wvxj-wc5x.json +++ b/advisories/unreviewed/2022/05/GHSA-gh9p-wvxj-wc5x/GHSA-gh9p-wvxj-wc5x.json @@ -7,12 +7,8 @@ "CVE-2012-2528" ], "details": "Use-after-free vulnerability in Microsoft Word 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Word Viewer; Office Compatibility Pack SP2 and SP3; Word Automation Services on Microsoft SharePoint Server 2010; and Office Web Apps 2010 SP1 allows remote attackers to execute arbitrary code via a crafted RTF document, aka \"RTF File listid Use-After-Free Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ghfm-2jj8-hppg/GHSA-ghfm-2jj8-hppg.json b/advisories/unreviewed/2022/05/GHSA-ghfm-2jj8-hppg/GHSA-ghfm-2jj8-hppg.json index 00f51895048..a48801deede 100644 --- a/advisories/unreviewed/2022/05/GHSA-ghfm-2jj8-hppg/GHSA-ghfm-2jj8-hppg.json +++ b/advisories/unreviewed/2022/05/GHSA-ghfm-2jj8-hppg/GHSA-ghfm-2jj8-hppg.json @@ -7,12 +7,8 @@ "CVE-2013-3134" ], "details": "The Common Language Runtime (CLR) in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 on 64-bit platforms does not properly allocate arrays of structures, which allows remote attackers to execute arbitrary code via a crafted .NET Framework application that changes array data, aka \"Array Allocation Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ghqp-4wrg-9v4p/GHSA-ghqp-4wrg-9v4p.json b/advisories/unreviewed/2022/05/GHSA-ghqp-4wrg-9v4p/GHSA-ghqp-4wrg-9v4p.json index bb405aa2149..20b500a913b 100644 --- a/advisories/unreviewed/2022/05/GHSA-ghqp-4wrg-9v4p/GHSA-ghqp-4wrg-9v4p.json +++ b/advisories/unreviewed/2022/05/GHSA-ghqp-4wrg-9v4p/GHSA-ghqp-4wrg-9v4p.json @@ -7,12 +7,8 @@ "CVE-2011-3396" ], "details": "Untrusted search path vulnerability in Microsoft PowerPoint 2007 SP2 and 2010 allows local users to gain privileges via a Trojan horse DLL in the current working directory, aka \"PowerPoint Insecure Library Loading Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gj2h-6554-x6h8/GHSA-gj2h-6554-x6h8.json b/advisories/unreviewed/2022/05/GHSA-gj2h-6554-x6h8/GHSA-gj2h-6554-x6h8.json index 6af66c561d9..f58490ebc60 100644 --- a/advisories/unreviewed/2022/05/GHSA-gj2h-6554-x6h8/GHSA-gj2h-6554-x6h8.json +++ b/advisories/unreviewed/2022/05/GHSA-gj2h-6554-x6h8/GHSA-gj2h-6554-x6h8.json @@ -7,12 +7,8 @@ "CVE-2014-2819" ], "details": "Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka \"Internet Explorer Elevation of Privilege Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gj3r-2mp4-2mcr/GHSA-gj3r-2mp4-2mcr.json b/advisories/unreviewed/2022/05/GHSA-gj3r-2mp4-2mcr/GHSA-gj3r-2mp4-2mcr.json index 7eb6ab82f59..1a6a35a9e4b 100644 --- a/advisories/unreviewed/2022/05/GHSA-gj3r-2mp4-2mcr/GHSA-gj3r-2mp4-2mcr.json +++ b/advisories/unreviewed/2022/05/GHSA-gj3r-2mp4-2mcr/GHSA-gj3r-2mp4-2mcr.json @@ -7,12 +7,8 @@ "CVE-2014-4133" ], "details": "Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-4137.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gmqm-m77f-5pf9/GHSA-gmqm-m77f-5pf9.json b/advisories/unreviewed/2022/05/GHSA-gmqm-m77f-5pf9/GHSA-gmqm-m77f-5pf9.json index 361833f74e9..81c159a6da5 100644 --- a/advisories/unreviewed/2022/05/GHSA-gmqm-m77f-5pf9/GHSA-gmqm-m77f-5pf9.json +++ b/advisories/unreviewed/2022/05/GHSA-gmqm-m77f-5pf9/GHSA-gmqm-m77f-5pf9.json @@ -7,12 +7,8 @@ "CVE-2014-2790" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2787, CVE-2014-2802, and CVE-2014-2806.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gmrg-vvgm-3rp4/GHSA-gmrg-vvgm-3rp4.json b/advisories/unreviewed/2022/05/GHSA-gmrg-vvgm-3rp4/GHSA-gmrg-vvgm-3rp4.json index d2abf912937..152b0437414 100644 --- a/advisories/unreviewed/2022/05/GHSA-gmrg-vvgm-3rp4/GHSA-gmrg-vvgm-3rp4.json +++ b/advisories/unreviewed/2022/05/GHSA-gmrg-vvgm-3rp4/GHSA-gmrg-vvgm-3rp4.json @@ -7,12 +7,8 @@ "CVE-2013-1317" ], "details": "Integer overflow in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers an improper allocation-size calculation, aka \"Publisher Integer Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gq3j-r743-mx26/GHSA-gq3j-r743-mx26.json b/advisories/unreviewed/2022/05/GHSA-gq3j-r743-mx26/GHSA-gq3j-r743-mx26.json index a656fe3c421..b5f7499741b 100644 --- a/advisories/unreviewed/2022/05/GHSA-gq3j-r743-mx26/GHSA-gq3j-r743-mx26.json +++ b/advisories/unreviewed/2022/05/GHSA-gq3j-r743-mx26/GHSA-gq3j-r743-mx26.json @@ -7,12 +7,8 @@ "CVE-2012-1868" ], "details": "Race condition in the thread-creation implementation in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3 allows local users to gain privileges via a crafted application, aka \"Win32k.sys Race Condition Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gq7v-xgjp-g8fh/GHSA-gq7v-xgjp-g8fh.json b/advisories/unreviewed/2022/05/GHSA-gq7v-xgjp-g8fh/GHSA-gq7v-xgjp-g8fh.json index 87d648ce5b3..30aa16d6da9 100644 --- a/advisories/unreviewed/2022/05/GHSA-gq7v-xgjp-g8fh/GHSA-gq7v-xgjp-g8fh.json +++ b/advisories/unreviewed/2022/05/GHSA-gq7v-xgjp-g8fh/GHSA-gq7v-xgjp-g8fh.json @@ -7,12 +7,8 @@ "CVE-2013-3140" ], "details": "Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted CMarkup object, aka \"Internet Explorer Use After Free Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gqhw-w43v-r239/GHSA-gqhw-w43v-r239.json b/advisories/unreviewed/2022/05/GHSA-gqhw-w43v-r239/GHSA-gqhw-w43v-r239.json index ff14545694d..835715e67a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-gqhw-w43v-r239/GHSA-gqhw-w43v-r239.json +++ b/advisories/unreviewed/2022/05/GHSA-gqhw-w43v-r239/GHSA-gqhw-w43v-r239.json @@ -7,12 +7,8 @@ "CVE-2013-3189" ], "details": "Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3188.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gqrg-cv49-5pc6/GHSA-gqrg-cv49-5pc6.json b/advisories/unreviewed/2022/05/GHSA-gqrg-cv49-5pc6/GHSA-gqrg-cv49-5pc6.json index e719c7fa970..a5f0514ec22 100644 --- a/advisories/unreviewed/2022/05/GHSA-gqrg-cv49-5pc6/GHSA-gqrg-cv49-5pc6.json +++ b/advisories/unreviewed/2022/05/GHSA-gqrg-cv49-5pc6/GHSA-gqrg-cv49-5pc6.json @@ -7,12 +7,8 @@ "CVE-2011-3411" ], "details": "Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in memory, aka \"Publisher Invalid Pointer Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gvpc-5r69-q6gq/GHSA-gvpc-5r69-q6gq.json b/advisories/unreviewed/2022/05/GHSA-gvpc-5r69-q6gq/GHSA-gvpc-5r69-q6gq.json index 8d2bec4037f..f4818d22a90 100644 --- a/advisories/unreviewed/2022/05/GHSA-gvpc-5r69-q6gq/GHSA-gvpc-5r69-q6gq.json +++ b/advisories/unreviewed/2022/05/GHSA-gvpc-5r69-q6gq/GHSA-gvpc-5r69-q6gq.json @@ -7,12 +7,8 @@ "CVE-2015-0042" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-0038 and CVE-2015-0046.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gw44-4w5f-x44r/GHSA-gw44-4w5f-x44r.json b/advisories/unreviewed/2022/05/GHSA-gw44-4w5f-x44r/GHSA-gw44-4w5f-x44r.json index 45949c5f7b1..35772964e46 100644 --- a/advisories/unreviewed/2022/05/GHSA-gw44-4w5f-x44r/GHSA-gw44-4w5f-x44r.json +++ b/advisories/unreviewed/2022/05/GHSA-gw44-4w5f-x44r/GHSA-gw44-4w5f-x44r.json @@ -7,12 +7,8 @@ "CVE-2013-3776" ], "details": "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7, 8.4.0, and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2013-3781.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gwj8-3vq5-9vcw/GHSA-gwj8-3vq5-9vcw.json b/advisories/unreviewed/2022/05/GHSA-gwj8-3vq5-9vcw/GHSA-gwj8-3vq5-9vcw.json index 0837ddc4fd3..8d3d76d10dc 100644 --- a/advisories/unreviewed/2022/05/GHSA-gwj8-3vq5-9vcw/GHSA-gwj8-3vq5-9vcw.json +++ b/advisories/unreviewed/2022/05/GHSA-gwj8-3vq5-9vcw/GHSA-gwj8-3vq5-9vcw.json @@ -7,12 +7,8 @@ "CVE-2014-2791" ], "details": "Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gx8v-mr42-564p/GHSA-gx8v-mr42-564p.json b/advisories/unreviewed/2022/05/GHSA-gx8v-mr42-564p/GHSA-gx8v-mr42-564p.json index d077fd56e81..f380f114f0c 100644 --- a/advisories/unreviewed/2022/05/GHSA-gx8v-mr42-564p/GHSA-gx8v-mr42-564p.json +++ b/advisories/unreviewed/2022/05/GHSA-gx8v-mr42-564p/GHSA-gx8v-mr42-564p.json @@ -7,12 +7,8 @@ "CVE-2014-2804" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2789, CVE-2014-2795, and CVE-2014-2798.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gxh2-8x29-mq5r/GHSA-gxh2-8x29-mq5r.json b/advisories/unreviewed/2022/05/GHSA-gxh2-8x29-mq5r/GHSA-gxh2-8x29-mq5r.json index 87f718390b7..041f918fc0c 100644 --- a/advisories/unreviewed/2022/05/GHSA-gxh2-8x29-mq5r/GHSA-gxh2-8x29-mq5r.json +++ b/advisories/unreviewed/2022/05/GHSA-gxh2-8x29-mq5r/GHSA-gxh2-8x29-mq5r.json @@ -7,12 +7,8 @@ "CVE-2010-3221" ], "details": "Microsoft Word 2002 SP3 and 2003 SP3, Office 2004 for Mac, and Word Viewer do not properly handle a malformed record during parsing of a Word document, which allows remote attackers to execute arbitrary code via a crafted document that triggers memory corruption, aka \"Word Parsing Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h24x-967h-gmgx/GHSA-h24x-967h-gmgx.json b/advisories/unreviewed/2022/05/GHSA-h24x-967h-gmgx/GHSA-h24x-967h-gmgx.json index 1b4256047df..fc0865c33d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-h24x-967h-gmgx/GHSA-h24x-967h-gmgx.json +++ b/advisories/unreviewed/2022/05/GHSA-h24x-967h-gmgx/GHSA-h24x-967h-gmgx.json @@ -7,12 +7,8 @@ "CVE-2013-3916" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3912.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h36v-5375-j4x4/GHSA-h36v-5375-j4x4.json b/advisories/unreviewed/2022/05/GHSA-h36v-5375-j4x4/GHSA-h36v-5375-j4x4.json index 77517ce418d..644a8f2ab1c 100644 --- a/advisories/unreviewed/2022/05/GHSA-h36v-5375-j4x4/GHSA-h36v-5375-j4x4.json +++ b/advisories/unreviewed/2022/05/GHSA-h36v-5375-j4x4/GHSA-h36v-5375-j4x4.json @@ -7,12 +7,8 @@ "CVE-2013-3142" ], "details": "Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3112, CVE-2013-3113, CVE-2013-3121, and CVE-2013-3139.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h3wx-j597-qcm8/GHSA-h3wx-j597-qcm8.json b/advisories/unreviewed/2022/05/GHSA-h3wx-j597-qcm8/GHSA-h3wx-j597-qcm8.json index 32f40eb50d5..bb8d866368c 100644 --- a/advisories/unreviewed/2022/05/GHSA-h3wx-j597-qcm8/GHSA-h3wx-j597-qcm8.json +++ b/advisories/unreviewed/2022/05/GHSA-h3wx-j597-qcm8/GHSA-h3wx-j597-qcm8.json @@ -7,12 +7,8 @@ "CVE-2015-0048" ], "details": "Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-0028.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h6h5-h2pp-h9f3/GHSA-h6h5-h2pp-h9f3.json b/advisories/unreviewed/2022/05/GHSA-h6h5-h2pp-h9f3/GHSA-h6h5-h2pp-h9f3.json index 19bbfefe175..eb647768857 100644 --- a/advisories/unreviewed/2022/05/GHSA-h6h5-h2pp-h9f3/GHSA-h6h5-h2pp-h9f3.json +++ b/advisories/unreviewed/2022/05/GHSA-h6h5-h2pp-h9f3/GHSA-h6h5-h2pp-h9f3.json @@ -7,12 +7,8 @@ "CVE-2014-4073" ], "details": "Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 processes unverified data during interaction with the ClickOnce installer, which allows remote attackers to gain privileges via vectors involving Internet Explorer, aka \".NET ClickOnce Elevation of Privilege Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h6w2-69jr-g2g8/GHSA-h6w2-69jr-g2g8.json b/advisories/unreviewed/2022/05/GHSA-h6w2-69jr-g2g8/GHSA-h6w2-69jr-g2g8.json index 52898a3fd5c..65f2b5e8e75 100644 --- a/advisories/unreviewed/2022/05/GHSA-h6w2-69jr-g2g8/GHSA-h6w2-69jr-g2g8.json +++ b/advisories/unreviewed/2022/05/GHSA-h6w2-69jr-g2g8/GHSA-h6w2-69jr-g2g8.json @@ -7,12 +7,8 @@ "CVE-2014-4141" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h74r-9643-mqcm/GHSA-h74r-9643-mqcm.json b/advisories/unreviewed/2022/05/GHSA-h74r-9643-mqcm/GHSA-h74r-9643-mqcm.json index 3128802ebc8..8623259a578 100644 --- a/advisories/unreviewed/2022/05/GHSA-h74r-9643-mqcm/GHSA-h74r-9643-mqcm.json +++ b/advisories/unreviewed/2022/05/GHSA-h74r-9643-mqcm/GHSA-h74r-9643-mqcm.json @@ -7,12 +7,8 @@ "CVE-2013-3204" ], "details": "Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h774-7fcx-w9r7/GHSA-h774-7fcx-w9r7.json b/advisories/unreviewed/2022/05/GHSA-h774-7fcx-w9r7/GHSA-h774-7fcx-w9r7.json index 0d7ed222b0d..52d8663b4ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-h774-7fcx-w9r7/GHSA-h774-7fcx-w9r7.json +++ b/advisories/unreviewed/2022/05/GHSA-h774-7fcx-w9r7/GHSA-h774-7fcx-w9r7.json @@ -7,12 +7,8 @@ "CVE-2014-1763" ], "details": "Use-after-free vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code and bypass a sandbox protection mechanism via unspecified vectors, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2014.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h7qh-xjxg-vww9/GHSA-h7qh-xjxg-vww9.json b/advisories/unreviewed/2022/05/GHSA-h7qh-xjxg-vww9/GHSA-h7qh-xjxg-vww9.json index b1e38180eb5..e222eb67c90 100644 --- a/advisories/unreviewed/2022/05/GHSA-h7qh-xjxg-vww9/GHSA-h7qh-xjxg-vww9.json +++ b/advisories/unreviewed/2022/05/GHSA-h7qh-xjxg-vww9/GHSA-h7qh-xjxg-vww9.json @@ -7,12 +7,8 @@ "CVE-2014-1824" ], "details": "Windows Journal in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted Journal (aka .JNT) file, aka \"Windows Journal Remote Code Execution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h825-c8pq-pjwj/GHSA-h825-c8pq-pjwj.json b/advisories/unreviewed/2022/05/GHSA-h825-c8pq-pjwj/GHSA-h825-c8pq-pjwj.json index c753a4e8ffe..c70b657db2f 100644 --- a/advisories/unreviewed/2022/05/GHSA-h825-c8pq-pjwj/GHSA-h825-c8pq-pjwj.json +++ b/advisories/unreviewed/2022/05/GHSA-h825-c8pq-pjwj/GHSA-h825-c8pq-pjwj.json @@ -7,12 +7,8 @@ "CVE-2012-1886" ], "details": "Microsoft Excel 2003 SP3, 2007 SP2 and SP3, and 2010 SP1; Excel Viewer; and Office Compatibility Pack SP2 and SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka \"Excel Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h8cx-253v-qxq7/GHSA-h8cx-253v-qxq7.json b/advisories/unreviewed/2022/05/GHSA-h8cx-253v-qxq7/GHSA-h8cx-253v-qxq7.json index c4c99706890..56100956150 100644 --- a/advisories/unreviewed/2022/05/GHSA-h8cx-253v-qxq7/GHSA-h8cx-253v-qxq7.json +++ b/advisories/unreviewed/2022/05/GHSA-h8cx-253v-qxq7/GHSA-h8cx-253v-qxq7.json @@ -7,12 +7,8 @@ "CVE-2013-5048" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-5047.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h8gm-f3pp-ppg9/GHSA-h8gm-f3pp-ppg9.json b/advisories/unreviewed/2022/05/GHSA-h8gm-f3pp-ppg9/GHSA-h8gm-f3pp-ppg9.json index 81dccb01212..83c5087313c 100644 --- a/advisories/unreviewed/2022/05/GHSA-h8gm-f3pp-ppg9/GHSA-h8gm-f3pp-ppg9.json +++ b/advisories/unreviewed/2022/05/GHSA-h8gm-f3pp-ppg9/GHSA-h8gm-f3pp-ppg9.json @@ -7,12 +7,8 @@ "CVE-2013-1331" ], "details": "Buffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data in an Office document, leading to improper memory allocation, aka \"Office Buffer Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hc2f-652f-vmf2/GHSA-hc2f-652f-vmf2.json b/advisories/unreviewed/2022/05/GHSA-hc2f-652f-vmf2/GHSA-hc2f-652f-vmf2.json index 4b0c33e6a98..35c6407c40b 100644 --- a/advisories/unreviewed/2022/05/GHSA-hc2f-652f-vmf2/GHSA-hc2f-652f-vmf2.json +++ b/advisories/unreviewed/2022/05/GHSA-hc2f-652f-vmf2/GHSA-hc2f-652f-vmf2.json @@ -7,12 +7,8 @@ "CVE-2012-1766" ], "details": "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1767, CVE-2012-1769, CVE-2012-1770, CVE-2012-1771, CVE-2012-1772, CVE-2012-1773, CVE-2012-3106, CVE-2012-3107, CVE-2012-3108, and CVE-2012-3110.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hcc7-7rjj-r32g/GHSA-hcc7-7rjj-r32g.json b/advisories/unreviewed/2022/05/GHSA-hcc7-7rjj-r32g/GHSA-hcc7-7rjj-r32g.json index 79d3e6ee170..a3f340c0379 100644 --- a/advisories/unreviewed/2022/05/GHSA-hcc7-7rjj-r32g/GHSA-hcc7-7rjj-r32g.json +++ b/advisories/unreviewed/2022/05/GHSA-hcc7-7rjj-r32g/GHSA-hcc7-7rjj-r32g.json @@ -7,12 +7,8 @@ "CVE-2013-1330" ], "details": "The default configuration of Microsoft SharePoint Portal Server 2003 SP3, SharePoint Server 2007 SP3 and 2010 SP1 and SP2, and Office Web Apps 2010 does not set the EnableViewStateMac attribute, which allows remote attackers to execute arbitrary code by leveraging an unassigned workflow, aka \"MAC Disabled Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hcv9-wjjr-cqq7/GHSA-hcv9-wjjr-cqq7.json b/advisories/unreviewed/2022/05/GHSA-hcv9-wjjr-cqq7/GHSA-hcv9-wjjr-cqq7.json index 4644321775f..ed2277f57fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-hcv9-wjjr-cqq7/GHSA-hcv9-wjjr-cqq7.json +++ b/advisories/unreviewed/2022/05/GHSA-hcv9-wjjr-cqq7/GHSA-hcv9-wjjr-cqq7.json @@ -7,12 +7,8 @@ "CVE-2010-3239" ], "details": "Microsoft Excel 2002 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka \"Extra Out of Boundary Record Parsing Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hcw7-j5pr-h3vx/GHSA-hcw7-j5pr-h3vx.json b/advisories/unreviewed/2022/05/GHSA-hcw7-j5pr-h3vx/GHSA-hcw7-j5pr-h3vx.json index 0610541831a..314927a7922 100644 --- a/advisories/unreviewed/2022/05/GHSA-hcw7-j5pr-h3vx/GHSA-hcw7-j5pr-h3vx.json +++ b/advisories/unreviewed/2022/05/GHSA-hcw7-j5pr-h3vx/GHSA-hcw7-j5pr-h3vx.json @@ -7,12 +7,8 @@ "CVE-2014-0251" ], "details": "Microsoft Windows SharePoint Services 3.0 SP3; SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1; SharePoint Foundation 2010 SP1 and SP2 and 2013 Gold and SP1; Project Server 2010 SP1 and SP2 and 2013 Gold and SP1; Web Applications 2010 SP1 and SP2; Office Web Apps Server 2013 Gold and SP1; SharePoint Server 2013 Client Components SDK; and SharePoint Designer 2007 SP3, 2010 SP1 and SP2, and 2013 Gold and SP1 allow remote authenticated users to execute arbitrary code via crafted page content, aka \"SharePoint Page Content Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hfrw-j79g-j786/GHSA-hfrw-j79g-j786.json b/advisories/unreviewed/2022/05/GHSA-hfrw-j79g-j786/GHSA-hfrw-j79g-j786.json index e08b08a048f..820365c2a29 100644 --- a/advisories/unreviewed/2022/05/GHSA-hfrw-j79g-j786/GHSA-hfrw-j79g-j786.json +++ b/advisories/unreviewed/2022/05/GHSA-hfrw-j79g-j786/GHSA-hfrw-j79g-j786.json @@ -7,12 +7,8 @@ "CVE-2012-2557" ], "details": "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"cloneNode Use After Free Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hg4q-xf5c-5jvv/GHSA-hg4q-xf5c-5jvv.json b/advisories/unreviewed/2022/05/GHSA-hg4q-xf5c-5jvv/GHSA-hg4q-xf5c-5jvv.json index 728179876a0..f5399e2c7e7 100644 --- a/advisories/unreviewed/2022/05/GHSA-hg4q-xf5c-5jvv/GHSA-hg4q-xf5c-5jvv.json +++ b/advisories/unreviewed/2022/05/GHSA-hg4q-xf5c-5jvv/GHSA-hg4q-xf5c-5jvv.json @@ -7,12 +7,8 @@ "CVE-2013-3145" ], "details": "Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3150.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hj87-75g2-729c/GHSA-hj87-75g2-729c.json b/advisories/unreviewed/2022/05/GHSA-hj87-75g2-729c/GHSA-hj87-75g2-729c.json index 9fb52ed6ccf..5d455c9e610 100644 --- a/advisories/unreviewed/2022/05/GHSA-hj87-75g2-729c/GHSA-hj87-75g2-729c.json +++ b/advisories/unreviewed/2022/05/GHSA-hj87-75g2-729c/GHSA-hj87-75g2-729c.json @@ -7,12 +7,8 @@ "CVE-2014-1823" ], "details": "Cross-site scripting (XSS) vulnerability in the Web Components Server in Microsoft Lync Server 2010 and 2013 allows remote attackers to inject arbitrary web script or HTML via a crafted URL containing a valid meeting ID, aka \"Lync Server Content Sanitization Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hj8m-5x3g-w83f/GHSA-hj8m-5x3g-w83f.json b/advisories/unreviewed/2022/05/GHSA-hj8m-5x3g-w83f/GHSA-hj8m-5x3g-w83f.json index 599491fcf9f..ae8a496370a 100644 --- a/advisories/unreviewed/2022/05/GHSA-hj8m-5x3g-w83f/GHSA-hj8m-5x3g-w83f.json +++ b/advisories/unreviewed/2022/05/GHSA-hj8m-5x3g-w83f/GHSA-hj8m-5x3g-w83f.json @@ -7,12 +7,8 @@ "CVE-2011-0656" ], "details": "Microsoft PowerPoint 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; PowerPoint Viewer; PowerPoint Viewer 2007 SP2; and PowerPoint Web App do not properly validate PersistDirectoryEntry records in PowerPoint documents, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a Slide with a malformed record, which triggers an exception and later use of an unspecified method, aka \"Persist Directory RCE Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hjrc-qggq-2w49/GHSA-hjrc-qggq-2w49.json b/advisories/unreviewed/2022/05/GHSA-hjrc-qggq-2w49/GHSA-hjrc-qggq-2w49.json index 854c86b7ad8..7c150e153bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-hjrc-qggq-2w49/GHSA-hjrc-qggq-2w49.json +++ b/advisories/unreviewed/2022/05/GHSA-hjrc-qggq-2w49/GHSA-hjrc-qggq-2w49.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hm5m-v845-3q3h/GHSA-hm5m-v845-3q3h.json b/advisories/unreviewed/2022/05/GHSA-hm5m-v845-3q3h/GHSA-hm5m-v845-3q3h.json index e32a3c7a652..7d26c0572b9 100644 --- a/advisories/unreviewed/2022/05/GHSA-hm5m-v845-3q3h/GHSA-hm5m-v845-3q3h.json +++ b/advisories/unreviewed/2022/05/GHSA-hm5m-v845-3q3h/GHSA-hm5m-v845-3q3h.json @@ -7,12 +7,8 @@ "CVE-2014-2776" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1769, CVE-2014-1782, CVE-2014-1785, CVE-2014-2753, CVE-2014-2755, CVE-2014-2760, CVE-2014-2761, and CVE-2014-2772.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hwq5-qgrj-v3f6/GHSA-hwq5-qgrj-v3f6.json b/advisories/unreviewed/2022/05/GHSA-hwq5-qgrj-v3f6/GHSA-hwq5-qgrj-v3f6.json index efa46f9e51b..409cd8823f4 100644 --- a/advisories/unreviewed/2022/05/GHSA-hwq5-qgrj-v3f6/GHSA-hwq5-qgrj-v3f6.json +++ b/advisories/unreviewed/2022/05/GHSA-hwq5-qgrj-v3f6/GHSA-hwq5-qgrj-v3f6.json @@ -7,12 +7,8 @@ "CVE-2015-0020" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-0017, CVE-2015-0022, CVE-2015-0026, CVE-2015-0030, CVE-2015-0031, CVE-2015-0036, and CVE-2015-0041.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hx79-c9x3-chx5/GHSA-hx79-c9x3-chx5.json b/advisories/unreviewed/2022/05/GHSA-hx79-c9x3-chx5/GHSA-hx79-c9x3-chx5.json index a3ebae6d358..9d3b5c9909e 100644 --- a/advisories/unreviewed/2022/05/GHSA-hx79-c9x3-chx5/GHSA-hx79-c9x3-chx5.json +++ b/advisories/unreviewed/2022/05/GHSA-hx79-c9x3-chx5/GHSA-hx79-c9x3-chx5.json @@ -7,12 +7,8 @@ "CVE-2014-2765" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1773, CVE-2014-1783, CVE-2014-1784, CVE-2014-1786, CVE-2014-1795, CVE-2014-1805, CVE-2014-2758, CVE-2014-2759, CVE-2014-2766, and CVE-2014-2775.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hxfq-vvxv-8fc5/GHSA-hxfq-vvxv-8fc5.json b/advisories/unreviewed/2022/05/GHSA-hxfq-vvxv-8fc5/GHSA-hxfq-vvxv-8fc5.json index 2807710742f..7614fcef254 100644 --- a/advisories/unreviewed/2022/05/GHSA-hxfq-vvxv-8fc5/GHSA-hxfq-vvxv-8fc5.json +++ b/advisories/unreviewed/2022/05/GHSA-hxfq-vvxv-8fc5/GHSA-hxfq-vvxv-8fc5.json @@ -7,12 +7,8 @@ "CVE-2013-3206" ], "details": "Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3201, CVE-2013-3203, CVE-2013-3207, and CVE-2013-3209.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j3mp-2pvg-r8rg/GHSA-j3mp-2pvg-r8rg.json b/advisories/unreviewed/2022/05/GHSA-j3mp-2pvg-r8rg/GHSA-j3mp-2pvg-r8rg.json index e9862075e33..9099ef0eb6b 100644 --- a/advisories/unreviewed/2022/05/GHSA-j3mp-2pvg-r8rg/GHSA-j3mp-2pvg-r8rg.json +++ b/advisories/unreviewed/2022/05/GHSA-j3mp-2pvg-r8rg/GHSA-j3mp-2pvg-r8rg.json @@ -7,12 +7,8 @@ "CVE-2013-3858" ], "details": "Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"Word Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3847, CVE-2013-3848, and CVE-2013-3849.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j4ch-cmrf-qx97/GHSA-j4ch-cmrf-qx97.json b/advisories/unreviewed/2022/05/GHSA-j4ch-cmrf-qx97/GHSA-j4ch-cmrf-qx97.json index ef4f57083d8..e2de968fec5 100644 --- a/advisories/unreviewed/2022/05/GHSA-j4ch-cmrf-qx97/GHSA-j4ch-cmrf-qx97.json +++ b/advisories/unreviewed/2022/05/GHSA-j4ch-cmrf-qx97/GHSA-j4ch-cmrf-qx97.json @@ -7,12 +7,8 @@ "CVE-2013-5046" ], "details": "Microsoft Internet Explorer 7 through 11 allows local users to bypass the Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code, aka \"Internet Explorer Elevation of Privilege Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j4f5-rr8m-cv2r/GHSA-j4f5-rr8m-cv2r.json b/advisories/unreviewed/2022/05/GHSA-j4f5-rr8m-cv2r/GHSA-j4f5-rr8m-cv2r.json index d6ea35726d1..f190192f264 100644 --- a/advisories/unreviewed/2022/05/GHSA-j4f5-rr8m-cv2r/GHSA-j4f5-rr8m-cv2r.json +++ b/advisories/unreviewed/2022/05/GHSA-j4f5-rr8m-cv2r/GHSA-j4f5-rr8m-cv2r.json @@ -7,12 +7,8 @@ "CVE-2014-4092" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-4098.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j4mh-p8f2-3c4h/GHSA-j4mh-p8f2-3c4h.json b/advisories/unreviewed/2022/05/GHSA-j4mh-p8f2-3c4h/GHSA-j4mh-p8f2-3c4h.json index d78ee373f17..c4fce8a9016 100644 --- a/advisories/unreviewed/2022/05/GHSA-j4mh-p8f2-3c4h/GHSA-j4mh-p8f2-3c4h.json +++ b/advisories/unreviewed/2022/05/GHSA-j4mh-p8f2-3c4h/GHSA-j4mh-p8f2-3c4h.json @@ -7,12 +7,8 @@ "CVE-2013-3139" ], "details": "Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3112, CVE-2013-3113, CVE-2013-3121, and CVE-2013-3142.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j539-gcx3-52gm/GHSA-j539-gcx3-52gm.json b/advisories/unreviewed/2022/05/GHSA-j539-gcx3-52gm/GHSA-j539-gcx3-52gm.json index 7f133d8e48f..2d6c9974942 100644 --- a/advisories/unreviewed/2022/05/GHSA-j539-gcx3-52gm/GHSA-j539-gcx3-52gm.json +++ b/advisories/unreviewed/2022/05/GHSA-j539-gcx3-52gm/GHSA-j539-gcx3-52gm.json @@ -7,12 +7,8 @@ "CVE-2014-2754" ], "details": "Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1774 and CVE-2014-1788.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j5r5-9h6q-9w3j/GHSA-j5r5-9h6q-9w3j.json b/advisories/unreviewed/2022/05/GHSA-j5r5-9h6q-9w3j/GHSA-j5r5-9h6q-9w3j.json index 9a3f5e803df..d9ba8b339dd 100644 --- a/advisories/unreviewed/2022/05/GHSA-j5r5-9h6q-9w3j/GHSA-j5r5-9h6q-9w3j.json +++ b/advisories/unreviewed/2022/05/GHSA-j5r5-9h6q-9w3j/GHSA-j5r5-9h6q-9w3j.json @@ -7,12 +7,8 @@ "CVE-2011-3410" ], "details": "Array index error in Microsoft Publisher 2003 SP3, and 2007 SP2 and SP3, allows remote attackers to execute arbitrary code via a crafted Publisher file that leverages incorrect handling of values in memory, aka \"Publisher Out-of-bounds Array Index Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j75x-x795-cvh9/GHSA-j75x-x795-cvh9.json b/advisories/unreviewed/2022/05/GHSA-j75x-x795-cvh9/GHSA-j75x-x795-cvh9.json index 3c7c1a35bb7..2d1265fdbb7 100644 --- a/advisories/unreviewed/2022/05/GHSA-j75x-x795-cvh9/GHSA-j75x-x795-cvh9.json +++ b/advisories/unreviewed/2022/05/GHSA-j75x-x795-cvh9/GHSA-j75x-x795-cvh9.json @@ -7,12 +7,8 @@ "CVE-2014-4140" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka \"Internet Explorer ASLR Bypass Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j787-93mr-q3jc/GHSA-j787-93mr-q3jc.json b/advisories/unreviewed/2022/05/GHSA-j787-93mr-q3jc/GHSA-j787-93mr-q3jc.json index 8588431a6ad..9d8f03bc472 100644 --- a/advisories/unreviewed/2022/05/GHSA-j787-93mr-q3jc/GHSA-j787-93mr-q3jc.json +++ b/advisories/unreviewed/2022/05/GHSA-j787-93mr-q3jc/GHSA-j787-93mr-q3jc.json @@ -7,12 +7,8 @@ "CVE-2011-0101" ], "details": "Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted RealTimeData record, related to a stTopic field, double-byte characters, and an incorrect pointer calculation, aka \"Excel Record Parsing WriteAV Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j999-vpr6-2xfj/GHSA-j999-vpr6-2xfj.json b/advisories/unreviewed/2022/05/GHSA-j999-vpr6-2xfj/GHSA-j999-vpr6-2xfj.json index 576c23e928e..149e03d0fe8 100644 --- a/advisories/unreviewed/2022/05/GHSA-j999-vpr6-2xfj/GHSA-j999-vpr6-2xfj.json +++ b/advisories/unreviewed/2022/05/GHSA-j999-vpr6-2xfj/GHSA-j999-vpr6-2xfj.json @@ -7,12 +7,8 @@ "CVE-2013-3147" ], "details": "Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j9qx-mvpc-phm9/GHSA-j9qx-mvpc-phm9.json b/advisories/unreviewed/2022/05/GHSA-j9qx-mvpc-phm9/GHSA-j9qx-mvpc-phm9.json index 8c960b47b3f..ce7ec4b024c 100644 --- a/advisories/unreviewed/2022/05/GHSA-j9qx-mvpc-phm9/GHSA-j9qx-mvpc-phm9.json +++ b/advisories/unreviewed/2022/05/GHSA-j9qx-mvpc-phm9/GHSA-j9qx-mvpc-phm9.json @@ -7,12 +7,8 @@ "CVE-2014-2767" ], "details": "Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jfv6-qp78-p63r/GHSA-jfv6-qp78-p63r.json b/advisories/unreviewed/2022/05/GHSA-jfv6-qp78-p63r/GHSA-jfv6-qp78-p63r.json index 2628931daba..b15e0b292a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-jfv6-qp78-p63r/GHSA-jfv6-qp78-p63r.json +++ b/advisories/unreviewed/2022/05/GHSA-jfv6-qp78-p63r/GHSA-jfv6-qp78-p63r.json @@ -7,12 +7,8 @@ "CVE-2013-3909" ], "details": "Microsoft Internet Explorer 6 through 8 allows remote attackers to read content from a different (1) domain or (2) zone via crafted characters in Cascading Style Sheets (CSS) token sequences, aka \"Internet Explorer Information Disclosure Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jg75-whqv-jmf9/GHSA-jg75-whqv-jmf9.json b/advisories/unreviewed/2022/05/GHSA-jg75-whqv-jmf9/GHSA-jg75-whqv-jmf9.json index bf8ee648e19..4d3815ce773 100644 --- a/advisories/unreviewed/2022/05/GHSA-jg75-whqv-jmf9/GHSA-jg75-whqv-jmf9.json +++ b/advisories/unreviewed/2022/05/GHSA-jg75-whqv-jmf9/GHSA-jg75-whqv-jmf9.json @@ -7,12 +7,8 @@ "CVE-2014-4089" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-4080, CVE-2014-4091, and CVE-2014-4102.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jgr5-wvwf-q7gg/GHSA-jgr5-wvwf-q7gg.json b/advisories/unreviewed/2022/05/GHSA-jgr5-wvwf-q7gg/GHSA-jgr5-wvwf-q7gg.json index a48cfa5b039..ac2c7a898e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-jgr5-wvwf-q7gg/GHSA-jgr5-wvwf-q7gg.json +++ b/advisories/unreviewed/2022/05/GHSA-jgr5-wvwf-q7gg/GHSA-jgr5-wvwf-q7gg.json @@ -7,12 +7,8 @@ "CVE-2014-1799" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0282, CVE-2014-1775, CVE-2014-1779, CVE-2014-1803, and CVE-2014-2757.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jhrj-54c2-6vx7/GHSA-jhrj-54c2-6vx7.json b/advisories/unreviewed/2022/05/GHSA-jhrj-54c2-6vx7/GHSA-jhrj-54c2-6vx7.json index e3050ff47ab..80a532481f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-jhrj-54c2-6vx7/GHSA-jhrj-54c2-6vx7.json +++ b/advisories/unreviewed/2022/05/GHSA-jhrj-54c2-6vx7/GHSA-jhrj-54c2-6vx7.json @@ -7,12 +7,8 @@ "CVE-2010-3233" ], "details": "Microsoft Excel 2002 SP3 and 2003 SP3 does not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted .wk3 (aka Lotus 1-2-3 workbook) file, aka \"Lotus 1-2-3 Workbook Parsing Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jj7w-f4w9-4fw7/GHSA-jj7w-f4w9-4fw7.json b/advisories/unreviewed/2022/05/GHSA-jj7w-f4w9-4fw7/GHSA-jj7w-f4w9-4fw7.json index 50fd0c0ecfd..0415f130f54 100644 --- a/advisories/unreviewed/2022/05/GHSA-jj7w-f4w9-4fw7/GHSA-jj7w-f4w9-4fw7.json +++ b/advisories/unreviewed/2022/05/GHSA-jj7w-f4w9-4fw7/GHSA-jj7w-f4w9-4fw7.json @@ -7,12 +7,8 @@ "CVE-2014-4091" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-4080, CVE-2014-4089, and CVE-2014-4102.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jmpf-m87h-m24r/GHSA-jmpf-m87h-m24r.json b/advisories/unreviewed/2022/05/GHSA-jmpf-m87h-m24r/GHSA-jmpf-m87h-m24r.json index 6249ef1d8f3..bf91d956716 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmpf-m87h-m24r/GHSA-jmpf-m87h-m24r.json +++ b/advisories/unreviewed/2022/05/GHSA-jmpf-m87h-m24r/GHSA-jmpf-m87h-m24r.json @@ -7,12 +7,8 @@ "CVE-2014-1752" ], "details": "Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jp99-r232-g242/GHSA-jp99-r232-g242.json b/advisories/unreviewed/2022/05/GHSA-jp99-r232-g242/GHSA-jp99-r232-g242.json index 81d619de59f..437b27dddc9 100644 --- a/advisories/unreviewed/2022/05/GHSA-jp99-r232-g242/GHSA-jp99-r232-g242.json +++ b/advisories/unreviewed/2022/05/GHSA-jp99-r232-g242/GHSA-jp99-r232-g242.json @@ -7,12 +7,8 @@ "CVE-2013-1297" ], "details": "Microsoft Internet Explorer 6 through 8 does not properly restrict data access by VBScript, which allows remote attackers to perform cross-domain reading of JSON files via a crafted web site, aka \"JSON Array Information Disclosure Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jr54-2c44-3rq2/GHSA-jr54-2c44-3rq2.json b/advisories/unreviewed/2022/05/GHSA-jr54-2c44-3rq2/GHSA-jr54-2c44-3rq2.json index fff8e38812b..2541b62345f 100644 --- a/advisories/unreviewed/2022/05/GHSA-jr54-2c44-3rq2/GHSA-jr54-2c44-3rq2.json +++ b/advisories/unreviewed/2022/05/GHSA-jr54-2c44-3rq2/GHSA-jr54-2c44-3rq2.json @@ -7,12 +7,8 @@ "CVE-2011-1979" ], "details": "Microsoft Visio 2003 SP3 and 2007 SP2 does not properly validate objects in memory during Visio file parsing, which allows remote attackers to execute arbitrary code via a crafted file, aka \"Move Around the Block RCE Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jrf9-mm8v-9gp9/GHSA-jrf9-mm8v-9gp9.json b/advisories/unreviewed/2022/05/GHSA-jrf9-mm8v-9gp9/GHSA-jrf9-mm8v-9gp9.json index 22bc10f30d8..be052ae7c78 100644 --- a/advisories/unreviewed/2022/05/GHSA-jrf9-mm8v-9gp9/GHSA-jrf9-mm8v-9gp9.json +++ b/advisories/unreviewed/2022/05/GHSA-jrf9-mm8v-9gp9/GHSA-jrf9-mm8v-9gp9.json @@ -7,12 +7,8 @@ "CVE-2014-4138" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-4130 and CVE-2014-4132.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jrp3-w9ff-9x5x/GHSA-jrp3-w9ff-9x5x.json b/advisories/unreviewed/2022/05/GHSA-jrp3-w9ff-9x5x/GHSA-jrp3-w9ff-9x5x.json index 789bf6b82e7..997a66a3855 100644 --- a/advisories/unreviewed/2022/05/GHSA-jrp3-w9ff-9x5x/GHSA-jrp3-w9ff-9x5x.json +++ b/advisories/unreviewed/2022/05/GHSA-jrp3-w9ff-9x5x/GHSA-jrp3-w9ff-9x5x.json @@ -7,12 +7,8 @@ "CVE-2013-1284" ], "details": "Race condition in the kernel in Microsoft Windows 8, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application that leverages improper handling of objects in memory, aka \"Kernel Race Condition Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jwj2-wcq9-q3qh/GHSA-jwj2-wcq9-q3qh.json b/advisories/unreviewed/2022/05/GHSA-jwj2-wcq9-q3qh/GHSA-jwj2-wcq9-q3qh.json index 5e3e204aa36..e1486271417 100644 --- a/advisories/unreviewed/2022/05/GHSA-jwj2-wcq9-q3qh/GHSA-jwj2-wcq9-q3qh.json +++ b/advisories/unreviewed/2022/05/GHSA-jwj2-wcq9-q3qh/GHSA-jwj2-wcq9-q3qh.json @@ -7,12 +7,8 @@ "CVE-2014-0270" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0273, CVE-2014-0274, and CVE-2014-0288.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m27w-7r2q-78hj/GHSA-m27w-7r2q-78hj.json b/advisories/unreviewed/2022/05/GHSA-m27w-7r2q-78hj/GHSA-m27w-7r2q-78hj.json index 8352c50a93e..319383de9ac 100644 --- a/advisories/unreviewed/2022/05/GHSA-m27w-7r2q-78hj/GHSA-m27w-7r2q-78hj.json +++ b/advisories/unreviewed/2022/05/GHSA-m27w-7r2q-78hj/GHSA-m27w-7r2q-78hj.json @@ -7,12 +7,8 @@ "CVE-2014-0285" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0275 and CVE-2014-0286.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m2xp-vh4m-f9gh/GHSA-m2xp-vh4m-f9gh.json b/advisories/unreviewed/2022/05/GHSA-m2xp-vh4m-f9gh/GHSA-m2xp-vh4m-f9gh.json index 634c4cc9d1f..dce8db0db94 100644 --- a/advisories/unreviewed/2022/05/GHSA-m2xp-vh4m-f9gh/GHSA-m2xp-vh4m-f9gh.json +++ b/advisories/unreviewed/2022/05/GHSA-m2xp-vh4m-f9gh/GHSA-m2xp-vh4m-f9gh.json @@ -7,12 +7,8 @@ "CVE-2013-1318" ], "details": "Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers access to an invalid pointer, aka \"Publisher Corrupt Interface Pointer Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m3vf-g64w-7wxq/GHSA-m3vf-g64w-7wxq.json b/advisories/unreviewed/2022/05/GHSA-m3vf-g64w-7wxq/GHSA-m3vf-g64w-7wxq.json index 26f3d5ac7a7..03e84853ccd 100644 --- a/advisories/unreviewed/2022/05/GHSA-m3vf-g64w-7wxq/GHSA-m3vf-g64w-7wxq.json +++ b/advisories/unreviewed/2022/05/GHSA-m3vf-g64w-7wxq/GHSA-m3vf-g64w-7wxq.json @@ -7,12 +7,8 @@ "CVE-2014-0310" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1815.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m4gr-fj9h-9vrx/GHSA-m4gr-fj9h-9vrx.json b/advisories/unreviewed/2022/05/GHSA-m4gr-fj9h-9vrx/GHSA-m4gr-fj9h-9vrx.json index 11f47d0a91f..859ee918765 100644 --- a/advisories/unreviewed/2022/05/GHSA-m4gr-fj9h-9vrx/GHSA-m4gr-fj9h-9vrx.json +++ b/advisories/unreviewed/2022/05/GHSA-m4gr-fj9h-9vrx/GHSA-m4gr-fj9h-9vrx.json @@ -7,12 +7,8 @@ "CVE-2013-3870" ], "details": "Double free vulnerability in Microsoft Outlook 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to execute arbitrary code by including many nested S/MIME certificates in an e-mail message, aka \"Message Certificate Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m5xf-p6rj-x7vv/GHSA-m5xf-p6rj-x7vv.json b/advisories/unreviewed/2022/05/GHSA-m5xf-p6rj-x7vv/GHSA-m5xf-p6rj-x7vv.json index 539a582495f..f439c588cf9 100644 --- a/advisories/unreviewed/2022/05/GHSA-m5xf-p6rj-x7vv/GHSA-m5xf-p6rj-x7vv.json +++ b/advisories/unreviewed/2022/05/GHSA-m5xf-p6rj-x7vv/GHSA-m5xf-p6rj-x7vv.json @@ -7,12 +7,8 @@ "CVE-2013-5047" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-5048.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m79f-wx75-8h2j/GHSA-m79f-wx75-8h2j.json b/advisories/unreviewed/2022/05/GHSA-m79f-wx75-8h2j/GHSA-m79f-wx75-8h2j.json index 8e94fc3a76e..72f7bbfa4ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-m79f-wx75-8h2j/GHSA-m79f-wx75-8h2j.json +++ b/advisories/unreviewed/2022/05/GHSA-m79f-wx75-8h2j/GHSA-m79f-wx75-8h2j.json @@ -7,12 +7,8 @@ "CVE-2013-3125" ], "details": "Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3118 and CVE-2013-3120.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m7qg-pc76-p2jm/GHSA-m7qg-pc76-p2jm.json b/advisories/unreviewed/2022/05/GHSA-m7qg-pc76-p2jm/GHSA-m7qg-pc76-p2jm.json index d83de5d2e86..5c1e6acd2ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-m7qg-pc76-p2jm/GHSA-m7qg-pc76-p2jm.json +++ b/advisories/unreviewed/2022/05/GHSA-m7qg-pc76-p2jm/GHSA-m7qg-pc76-p2jm.json @@ -7,12 +7,8 @@ "CVE-2015-0046" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-0038 and CVE-2015-0042.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m7xh-4p65-4574/GHSA-m7xh-4p65-4574.json b/advisories/unreviewed/2022/05/GHSA-m7xh-4p65-4574/GHSA-m7xh-4p65-4574.json index ebdd4cb7437..be631768b3c 100644 --- a/advisories/unreviewed/2022/05/GHSA-m7xh-4p65-4574/GHSA-m7xh-4p65-4574.json +++ b/advisories/unreviewed/2022/05/GHSA-m7xh-4p65-4574/GHSA-m7xh-4p65-4574.json @@ -7,12 +7,8 @@ "CVE-2013-3845" ], "details": "Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m89c-c8g5-fgpg/GHSA-m89c-c8g5-fgpg.json b/advisories/unreviewed/2022/05/GHSA-m89c-c8g5-fgpg/GHSA-m89c-c8g5-fgpg.json index 6285c773b85..460242f4681 100644 --- a/advisories/unreviewed/2022/05/GHSA-m89c-c8g5-fgpg/GHSA-m89c-c8g5-fgpg.json +++ b/advisories/unreviewed/2022/05/GHSA-m89c-c8g5-fgpg/GHSA-m89c-c8g5-fgpg.json @@ -7,12 +7,8 @@ "CVE-2013-0811" ], "details": "Use-after-free vulnerability in Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer Use After Free Vulnerability,\" a different vulnerability than CVE-2013-1307.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m8jh-74h2-vw3h/GHSA-m8jh-74h2-vw3h.json b/advisories/unreviewed/2022/05/GHSA-m8jh-74h2-vw3h/GHSA-m8jh-74h2-vw3h.json index 7eea666c7ab..55d1e734fdb 100644 --- a/advisories/unreviewed/2022/05/GHSA-m8jh-74h2-vw3h/GHSA-m8jh-74h2-vw3h.json +++ b/advisories/unreviewed/2022/05/GHSA-m8jh-74h2-vw3h/GHSA-m8jh-74h2-vw3h.json @@ -7,12 +7,8 @@ "CVE-2015-0030" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-0017, CVE-2015-0020, CVE-2015-0022, CVE-2015-0026, CVE-2015-0031, CVE-2015-0036, and CVE-2015-0041.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mc32-gp86-2hfh/GHSA-mc32-gp86-2hfh.json b/advisories/unreviewed/2022/05/GHSA-mc32-gp86-2hfh/GHSA-mc32-gp86-2hfh.json index 6c585f84444..07e5ef0fae0 100644 --- a/advisories/unreviewed/2022/05/GHSA-mc32-gp86-2hfh/GHSA-mc32-gp86-2hfh.json +++ b/advisories/unreviewed/2022/05/GHSA-mc32-gp86-2hfh/GHSA-mc32-gp86-2hfh.json @@ -7,12 +7,8 @@ "CVE-2015-0070" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka \"Internet Explorer Cross-domain Information Disclosure Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mcvg-7cc2-jr3f/GHSA-mcvg-7cc2-jr3f.json b/advisories/unreviewed/2022/05/GHSA-mcvg-7cc2-jr3f/GHSA-mcvg-7cc2-jr3f.json index edd5d15e5de..ad112bf4792 100644 --- a/advisories/unreviewed/2022/05/GHSA-mcvg-7cc2-jr3f/GHSA-mcvg-7cc2-jr3f.json +++ b/advisories/unreviewed/2022/05/GHSA-mcvg-7cc2-jr3f/GHSA-mcvg-7cc2-jr3f.json @@ -7,12 +7,8 @@ "CVE-2012-1860" ], "details": "Microsoft Office SharePoint Server 2007 SP2 and SP3, SharePoint Server 2010 Gold and SP1, and Office Web Apps 2010 Gold and SP1 do not properly check permissions for search scopes, which allows remote authenticated users to obtain sensitive information or cause a denial of service (data modification) by changing a parameter in a search-scope URL, aka \"SharePoint Search Scope Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mf5r-75x7-f326/GHSA-mf5r-75x7-f326.json b/advisories/unreviewed/2022/05/GHSA-mf5r-75x7-f326/GHSA-mf5r-75x7-f326.json index 4c271e1771b..48e57b52191 100644 --- a/advisories/unreviewed/2022/05/GHSA-mf5r-75x7-f326/GHSA-mf5r-75x7-f326.json +++ b/advisories/unreviewed/2022/05/GHSA-mf5r-75x7-f326/GHSA-mf5r-75x7-f326.json @@ -7,12 +7,8 @@ "CVE-2014-4072" ], "details": "Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly use a hash table for request data, which allows remote attackers to cause a denial of service (resource consumption and ASP.NET performance degradation) via crafted requests, aka \".NET Framework Denial of Service Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mfvp-7ffm-g4r6/GHSA-mfvp-7ffm-g4r6.json b/advisories/unreviewed/2022/05/GHSA-mfvp-7ffm-g4r6/GHSA-mfvp-7ffm-g4r6.json index 837d46faf76..53d2782c08b 100644 --- a/advisories/unreviewed/2022/05/GHSA-mfvp-7ffm-g4r6/GHSA-mfvp-7ffm-g4r6.json +++ b/advisories/unreviewed/2022/05/GHSA-mfvp-7ffm-g4r6/GHSA-mfvp-7ffm-g4r6.json @@ -7,12 +7,8 @@ "CVE-2014-4081" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mg59-925j-jq9g/GHSA-mg59-925j-jq9g.json b/advisories/unreviewed/2022/05/GHSA-mg59-925j-jq9g/GHSA-mg59-925j-jq9g.json index d4e1397604f..24eedf39a91 100644 --- a/advisories/unreviewed/2022/05/GHSA-mg59-925j-jq9g/GHSA-mg59-925j-jq9g.json +++ b/advisories/unreviewed/2022/05/GHSA-mg59-925j-jq9g/GHSA-mg59-925j-jq9g.json @@ -7,12 +7,8 @@ "CVE-2013-5052" ], "details": "Microsoft Internet Explorer 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mh5r-j3qx-g2vw/GHSA-mh5r-j3qx-g2vw.json b/advisories/unreviewed/2022/05/GHSA-mh5r-j3qx-g2vw/GHSA-mh5r-j3qx-g2vw.json index 7c137dd3527..d3444d86eb3 100644 --- a/advisories/unreviewed/2022/05/GHSA-mh5r-j3qx-g2vw/GHSA-mh5r-j3qx-g2vw.json +++ b/advisories/unreviewed/2022/05/GHSA-mh5r-j3qx-g2vw/GHSA-mh5r-j3qx-g2vw.json @@ -7,12 +7,8 @@ "CVE-2014-4116" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2010 SP2 allows remote authenticated users to inject arbitrary web script or HTML via a modified list, aka \"SharePoint Elevation of Privilege Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mhfm-wr84-w85g/GHSA-mhfm-wr84-w85g.json b/advisories/unreviewed/2022/05/GHSA-mhfm-wr84-w85g/GHSA-mhfm-wr84-w85g.json index 689e2d9fbd4..da7c0178ad5 100644 --- a/advisories/unreviewed/2022/05/GHSA-mhfm-wr84-w85g/GHSA-mhfm-wr84-w85g.json +++ b/advisories/unreviewed/2022/05/GHSA-mhfm-wr84-w85g/GHSA-mhfm-wr84-w85g.json @@ -7,12 +7,8 @@ "CVE-2015-0064" ], "details": "Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"Office Remote Code Execution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mhww-rmfc-8prf/GHSA-mhww-rmfc-8prf.json b/advisories/unreviewed/2022/05/GHSA-mhww-rmfc-8prf/GHSA-mhww-rmfc-8prf.json index 4ec9c4c1c97..e64afad6443 100644 --- a/advisories/unreviewed/2022/05/GHSA-mhww-rmfc-8prf/GHSA-mhww-rmfc-8prf.json +++ b/advisories/unreviewed/2022/05/GHSA-mhww-rmfc-8prf/GHSA-mhww-rmfc-8prf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mm9g-wfxq-fxg2/GHSA-mm9g-wfxq-fxg2.json b/advisories/unreviewed/2022/05/GHSA-mm9g-wfxq-fxg2/GHSA-mm9g-wfxq-fxg2.json index db140139fe0..1c38c76a03e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mm9g-wfxq-fxg2/GHSA-mm9g-wfxq-fxg2.json +++ b/advisories/unreviewed/2022/05/GHSA-mm9g-wfxq-fxg2/GHSA-mm9g-wfxq-fxg2.json @@ -7,12 +7,8 @@ "CVE-2013-3151" ], "details": "Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3144 and CVE-2013-3163.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mmfx-p324-m9qv/GHSA-mmfx-p324-m9qv.json b/advisories/unreviewed/2022/05/GHSA-mmfx-p324-m9qv/GHSA-mmfx-p324-m9qv.json index 0a4e0539476..e6b91d9c5c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-mmfx-p324-m9qv/GHSA-mmfx-p324-m9qv.json +++ b/advisories/unreviewed/2022/05/GHSA-mmfx-p324-m9qv/GHSA-mmfx-p324-m9qv.json @@ -7,12 +7,8 @@ "CVE-2013-3857" ], "details": "Microsoft Word Automation Services in SharePoint Server 2010 SP1 and SP2, Word Web App 2010 SP1 and SP2 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1 and SP2, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"Word Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mmww-m5hv-hfqx/GHSA-mmww-m5hv-hfqx.json b/advisories/unreviewed/2022/05/GHSA-mmww-m5hv-hfqx/GHSA-mmww-m5hv-hfqx.json index 3f1f5f9dc0c..1557134ddbd 100644 --- a/advisories/unreviewed/2022/05/GHSA-mmww-m5hv-hfqx/GHSA-mmww-m5hv-hfqx.json +++ b/advisories/unreviewed/2022/05/GHSA-mmww-m5hv-hfqx/GHSA-mmww-m5hv-hfqx.json @@ -7,12 +7,8 @@ "CVE-2014-1804" ], "details": "Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1781, CVE-2014-1792, and CVE-2014-2770.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mpc7-7p74-8wv7/GHSA-mpc7-7p74-8wv7.json b/advisories/unreviewed/2022/05/GHSA-mpc7-7p74-8wv7/GHSA-mpc7-7p74-8wv7.json index 6c1920077f9..9bf972bf651 100644 --- a/advisories/unreviewed/2022/05/GHSA-mpc7-7p74-8wv7/GHSA-mpc7-7p74-8wv7.json +++ b/advisories/unreviewed/2022/05/GHSA-mpc7-7p74-8wv7/GHSA-mpc7-7p74-8wv7.json @@ -7,12 +7,8 @@ "CVE-2011-1886" ], "details": "win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP3 does not properly validate the arguments to functions, which allows local users to read arbitrary data from kernel memory via a crafted application that triggers a NULL pointer dereference, aka \"Win32k Incorrect Parameter Validation Allows Information Disclosure Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mpg5-jw69-6376/GHSA-mpg5-jw69-6376.json b/advisories/unreviewed/2022/05/GHSA-mpg5-jw69-6376/GHSA-mpg5-jw69-6376.json index 3de60dc0616..2f9e43b1b6d 100644 --- a/advisories/unreviewed/2022/05/GHSA-mpg5-jw69-6376/GHSA-mpg5-jw69-6376.json +++ b/advisories/unreviewed/2022/05/GHSA-mpg5-jw69-6376/GHSA-mpg5-jw69-6376.json @@ -7,12 +7,8 @@ "CVE-2014-1792" ], "details": "Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1781, CVE-2014-1804, and CVE-2014-2770.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mq3j-w6fr-73x2/GHSA-mq3j-w6fr-73x2.json b/advisories/unreviewed/2022/05/GHSA-mq3j-w6fr-73x2/GHSA-mq3j-w6fr-73x2.json index 856e2b802e3..c6ce1ca3115 100644 --- a/advisories/unreviewed/2022/05/GHSA-mq3j-w6fr-73x2/GHSA-mq3j-w6fr-73x2.json +++ b/advisories/unreviewed/2022/05/GHSA-mq3j-w6fr-73x2/GHSA-mq3j-w6fr-73x2.json @@ -7,12 +7,8 @@ "CVE-2014-4104" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mw5v-p34p-cj57/GHSA-mw5v-p34p-cj57.json b/advisories/unreviewed/2022/05/GHSA-mw5v-p34p-cj57/GHSA-mw5v-p34p-cj57.json index 82802f1b030..85b00bc5e00 100644 --- a/advisories/unreviewed/2022/05/GHSA-mw5v-p34p-cj57/GHSA-mw5v-p34p-cj57.json +++ b/advisories/unreviewed/2022/05/GHSA-mw5v-p34p-cj57/GHSA-mw5v-p34p-cj57.json @@ -7,12 +7,8 @@ "CVE-2015-0039" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-0027, CVE-2015-0035, CVE-2015-0052, and CVE-2015-0068.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mx5g-x43m-9h3q/GHSA-mx5g-x43m-9h3q.json b/advisories/unreviewed/2022/05/GHSA-mx5g-x43m-9h3q/GHSA-mx5g-x43m-9h3q.json index dbc7bc82d32..9a8bf7c64a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-mx5g-x43m-9h3q/GHSA-mx5g-x43m-9h3q.json +++ b/advisories/unreviewed/2022/05/GHSA-mx5g-x43m-9h3q/GHSA-mx5g-x43m-9h3q.json @@ -7,12 +7,8 @@ "CVE-2012-1888" ], "details": "Buffer overflow in Microsoft Visio 2010 SP1 and Visio Viewer 2010 SP1 allows remote attackers to execute arbitrary code via a crafted Visio file, aka \"Visio DXF File Format Buffer Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mxfm-hg3q-8qf4/GHSA-mxfm-hg3q-8qf4.json b/advisories/unreviewed/2022/05/GHSA-mxfm-hg3q-8qf4/GHSA-mxfm-hg3q-8qf4.json index 0b1997e5ab9..ff693311caf 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxfm-hg3q-8qf4/GHSA-mxfm-hg3q-8qf4.json +++ b/advisories/unreviewed/2022/05/GHSA-mxfm-hg3q-8qf4/GHSA-mxfm-hg3q-8qf4.json @@ -7,12 +7,8 @@ "CVE-2014-0276" ], "details": "Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p234-pw68-f22f/GHSA-p234-pw68-f22f.json b/advisories/unreviewed/2022/05/GHSA-p234-pw68-f22f/GHSA-p234-pw68-f22f.json index 0db17563671..e549614b4ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-p234-pw68-f22f/GHSA-p234-pw68-f22f.json +++ b/advisories/unreviewed/2022/05/GHSA-p234-pw68-f22f/GHSA-p234-pw68-f22f.json @@ -7,12 +7,8 @@ "CVE-2013-3143" ], "details": "Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3161.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p26f-q6qg-9grx/GHSA-p26f-q6qg-9grx.json b/advisories/unreviewed/2022/05/GHSA-p26f-q6qg-9grx/GHSA-p26f-q6qg-9grx.json index 1b1ad68242b..b8fed2c19af 100644 --- a/advisories/unreviewed/2022/05/GHSA-p26f-q6qg-9grx/GHSA-p26f-q6qg-9grx.json +++ b/advisories/unreviewed/2022/05/GHSA-p26f-q6qg-9grx/GHSA-p26f-q6qg-9grx.json @@ -7,12 +7,8 @@ "CVE-2014-4065" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p2jr-rvqv-mrgw/GHSA-p2jr-rvqv-mrgw.json b/advisories/unreviewed/2022/05/GHSA-p2jr-rvqv-mrgw/GHSA-p2jr-rvqv-mrgw.json index d5784adc938..3602f216649 100644 --- a/advisories/unreviewed/2022/05/GHSA-p2jr-rvqv-mrgw/GHSA-p2jr-rvqv-mrgw.json +++ b/advisories/unreviewed/2022/05/GHSA-p2jr-rvqv-mrgw/GHSA-p2jr-rvqv-mrgw.json @@ -7,12 +7,8 @@ "CVE-2014-2753" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1769, CVE-2014-1782, CVE-2014-1785, CVE-2014-2755, CVE-2014-2760, CVE-2014-2761, CVE-2014-2772, and CVE-2014-2776.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p4h2-5pp9-2hh2/GHSA-p4h2-5pp9-2hh2.json b/advisories/unreviewed/2022/05/GHSA-p4h2-5pp9-2hh2/GHSA-p4h2-5pp9-2hh2.json index 402cf26fad6..9f137f4b1a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-p4h2-5pp9-2hh2/GHSA-p4h2-5pp9-2hh2.json +++ b/advisories/unreviewed/2022/05/GHSA-p4h2-5pp9-2hh2/GHSA-p4h2-5pp9-2hh2.json @@ -7,12 +7,8 @@ "CVE-2014-2772" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1769, CVE-2014-1782, CVE-2014-1785, CVE-2014-2753, CVE-2014-2755, CVE-2014-2760, CVE-2014-2761, and CVE-2014-2776.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p5cg-9ppf-9gvh/GHSA-p5cg-9ppf-9gvh.json b/advisories/unreviewed/2022/05/GHSA-p5cg-9ppf-9gvh/GHSA-p5cg-9ppf-9gvh.json index ecccc05277e..802d7c2fdcd 100644 --- a/advisories/unreviewed/2022/05/GHSA-p5cg-9ppf-9gvh/GHSA-p5cg-9ppf-9gvh.json +++ b/advisories/unreviewed/2022/05/GHSA-p5cg-9ppf-9gvh/GHSA-p5cg-9ppf-9gvh.json @@ -7,12 +7,8 @@ "CVE-2014-1796" ], "details": "Microsoft Internet Explorer 6 and 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p6gx-43v8-h7h5/GHSA-p6gx-43v8-h7h5.json b/advisories/unreviewed/2022/05/GHSA-p6gx-43v8-h7h5/GHSA-p6gx-43v8-h7h5.json index 3b8deeceebd..1d6147f54c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-p6gx-43v8-h7h5/GHSA-p6gx-43v8-h7h5.json +++ b/advisories/unreviewed/2022/05/GHSA-p6gx-43v8-h7h5/GHSA-p6gx-43v8-h7h5.json @@ -7,12 +7,8 @@ "CVE-2013-3209" ], "details": "Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3201, CVE-2013-3203, CVE-2013-3206, and CVE-2013-3207.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p6mg-588g-4h9j/GHSA-p6mg-588g-4h9j.json b/advisories/unreviewed/2022/05/GHSA-p6mg-588g-4h9j/GHSA-p6mg-588g-4h9j.json index eea3e02a9c9..a377abfd4f4 100644 --- a/advisories/unreviewed/2022/05/GHSA-p6mg-588g-4h9j/GHSA-p6mg-588g-4h9j.json +++ b/advisories/unreviewed/2022/05/GHSA-p6mg-588g-4h9j/GHSA-p6mg-588g-4h9j.json @@ -7,12 +7,8 @@ "CVE-2013-3124" ], "details": "Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3117 and CVE-2013-3122.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p8jh-8r88-35rc/GHSA-p8jh-8r88-35rc.json b/advisories/unreviewed/2022/05/GHSA-p8jh-8r88-35rc/GHSA-p8jh-8r88-35rc.json index 9f88561c3dc..3b70dcdcc10 100644 --- a/advisories/unreviewed/2022/05/GHSA-p8jh-8r88-35rc/GHSA-p8jh-8r88-35rc.json +++ b/advisories/unreviewed/2022/05/GHSA-p8jh-8r88-35rc/GHSA-p8jh-8r88-35rc.json @@ -7,12 +7,8 @@ "CVE-2011-0093" ], "details": "ELEMENTS.DLL in Microsoft Visio 2002 SP2, 2003 SP3, and 2007 SP2 does not properly parse structures during the opening of a Visio file, which allows remote attackers to execute arbitrary code via a file containing a malformed structure, aka \"Visio Data Type Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p93r-68pq-483j/GHSA-p93r-68pq-483j.json b/advisories/unreviewed/2022/05/GHSA-p93r-68pq-483j/GHSA-p93r-68pq-483j.json index 9555edf11a9..05a44d2914a 100644 --- a/advisories/unreviewed/2022/05/GHSA-p93r-68pq-483j/GHSA-p93r-68pq-483j.json +++ b/advisories/unreviewed/2022/05/GHSA-p93r-68pq-483j/GHSA-p93r-68pq-483j.json @@ -7,12 +7,8 @@ "CVE-2013-5791" ], "details": "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 and 8.4.1 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters. NOTE: the previous information is from the October 2013 CPU. Oracle has not commented on claims from a third party that the issue is a stack-based buffer overflow in the Microsoft Access 1.x parser in vsacs.dll before 8.4.0.108 and before 8.4.1.52, which allows attackers to execute arbitrary code via a long field (aka column) name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p973-rq82-cpv6/GHSA-p973-rq82-cpv6.json b/advisories/unreviewed/2022/05/GHSA-p973-rq82-cpv6/GHSA-p973-rq82-cpv6.json index 322d3284eaf..b918b1928cd 100644 --- a/advisories/unreviewed/2022/05/GHSA-p973-rq82-cpv6/GHSA-p973-rq82-cpv6.json +++ b/advisories/unreviewed/2022/05/GHSA-p973-rq82-cpv6/GHSA-p973-rq82-cpv6.json @@ -7,12 +7,8 @@ "CVE-2010-3230" ], "details": "Integer overflow in Microsoft Excel 2002 SP3 allows remote attackers to execute arbitrary code via an Excel document with crafted record information, aka \"Excel Record Parsing Integer Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p987-5rq9-mc44/GHSA-p987-5rq9-mc44.json b/advisories/unreviewed/2022/05/GHSA-p987-5rq9-mc44/GHSA-p987-5rq9-mc44.json index bb6c47df878..2622c803e07 100644 --- a/advisories/unreviewed/2022/05/GHSA-p987-5rq9-mc44/GHSA-p987-5rq9-mc44.json +++ b/advisories/unreviewed/2022/05/GHSA-p987-5rq9-mc44/GHSA-p987-5rq9-mc44.json @@ -7,12 +7,8 @@ "CVE-2012-1863" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft Office SharePoint Server 2007 SP2 and SP3 Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via crafted JavaScript elements in a URL, aka \"SharePoint Reflected List Parameter Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pcf2-992j-qgv9/GHSA-pcf2-992j-qgv9.json b/advisories/unreviewed/2022/05/GHSA-pcf2-992j-qgv9/GHSA-pcf2-992j-qgv9.json index d815cfa266e..a24c12f8a27 100644 --- a/advisories/unreviewed/2022/05/GHSA-pcf2-992j-qgv9/GHSA-pcf2-992j-qgv9.json +++ b/advisories/unreviewed/2022/05/GHSA-pcf2-992j-qgv9/GHSA-pcf2-992j-qgv9.json @@ -7,12 +7,8 @@ "CVE-2012-2550" ], "details": "Microsoft Works 9 allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a crafted Word .doc file, aka \"Works Heap Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pf56-rvvq-xffv/GHSA-pf56-rvvq-xffv.json b/advisories/unreviewed/2022/05/GHSA-pf56-rvvq-xffv/GHSA-pf56-rvvq-xffv.json index f907374f14f..d689f2f54ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-pf56-rvvq-xffv/GHSA-pf56-rvvq-xffv.json +++ b/advisories/unreviewed/2022/05/GHSA-pf56-rvvq-xffv/GHSA-pf56-rvvq-xffv.json @@ -7,12 +7,8 @@ "CVE-2013-3110" ], "details": "Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3141.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pfm3-3g3h-xq59/GHSA-pfm3-3g3h-xq59.json b/advisories/unreviewed/2022/05/GHSA-pfm3-3g3h-xq59/GHSA-pfm3-3g3h-xq59.json index 1e4b5f140e0..b6a9b266f4d 100644 --- a/advisories/unreviewed/2022/05/GHSA-pfm3-3g3h-xq59/GHSA-pfm3-3g3h-xq59.json +++ b/advisories/unreviewed/2022/05/GHSA-pfm3-3g3h-xq59/GHSA-pfm3-3g3h-xq59.json @@ -7,12 +7,8 @@ "CVE-2013-3155" ], "details": "Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka \"Access Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3157.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pfmx-v4xw-gw27/GHSA-pfmx-v4xw-gw27.json b/advisories/unreviewed/2022/05/GHSA-pfmx-v4xw-gw27/GHSA-pfmx-v4xw-gw27.json index d31e569dbe7..a3cefcf7e17 100644 --- a/advisories/unreviewed/2022/05/GHSA-pfmx-v4xw-gw27/GHSA-pfmx-v4xw-gw27.json +++ b/advisories/unreviewed/2022/05/GHSA-pfmx-v4xw-gw27/GHSA-pfmx-v4xw-gw27.json @@ -7,12 +7,8 @@ "CVE-2011-1274" ], "details": "Microsoft Excel 2002 SP3, 2003 SP3, and 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka \"Excel Out of Bounds Array Access Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pfr6-mq26-rj55/GHSA-pfr6-mq26-rj55.json b/advisories/unreviewed/2022/05/GHSA-pfr6-mq26-rj55/GHSA-pfr6-mq26-rj55.json index 6a34cb2d5fa..14d24c765da 100644 --- a/advisories/unreviewed/2022/05/GHSA-pfr6-mq26-rj55/GHSA-pfr6-mq26-rj55.json +++ b/advisories/unreviewed/2022/05/GHSA-pfr6-mq26-rj55/GHSA-pfr6-mq26-rj55.json @@ -7,12 +7,8 @@ "CVE-2014-2786" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2792 and CVE-2014-2813.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pgj9-vw6w-2mwc/GHSA-pgj9-vw6w-2mwc.json b/advisories/unreviewed/2022/05/GHSA-pgj9-vw6w-2mwc/GHSA-pgj9-vw6w-2mwc.json index 0937a6cd3f3..559b173c841 100644 --- a/advisories/unreviewed/2022/05/GHSA-pgj9-vw6w-2mwc/GHSA-pgj9-vw6w-2mwc.json +++ b/advisories/unreviewed/2022/05/GHSA-pgj9-vw6w-2mwc/GHSA-pgj9-vw6w-2mwc.json @@ -7,12 +7,8 @@ "CVE-2013-3127" ], "details": "The Microsoft WMV video codec in wmv9vcm.dll, wmvdmod.dll in Windows Media Format Runtime 9 and 9.5, and wmvdecod.dll in Windows Media Format Runtime 11 and Windows Media Player 11 and 12 allows remote attackers to execute arbitrary code via a crafted media file, aka \"WMV Video Decoder Remote Code Execution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-phqv-84wv-vvmr/GHSA-phqv-84wv-vvmr.json b/advisories/unreviewed/2022/05/GHSA-phqv-84wv-vvmr/GHSA-phqv-84wv-vvmr.json index dcc62c7c166..aabba89a4c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-phqv-84wv-vvmr/GHSA-phqv-84wv-vvmr.json +++ b/advisories/unreviewed/2022/05/GHSA-phqv-84wv-vvmr/GHSA-phqv-84wv-vvmr.json @@ -7,12 +7,8 @@ "CVE-2013-3848" ], "details": "Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"Word Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3847, CVE-2013-3849, and CVE-2013-3858.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-phqw-cxwg-55mq/GHSA-phqw-cxwg-55mq.json b/advisories/unreviewed/2022/05/GHSA-phqw-cxwg-55mq/GHSA-phqw-cxwg-55mq.json index 933f42f3a0c..8b769b527e7 100644 --- a/advisories/unreviewed/2022/05/GHSA-phqw-cxwg-55mq/GHSA-phqw-cxwg-55mq.json +++ b/advisories/unreviewed/2022/05/GHSA-phqw-cxwg-55mq/GHSA-phqw-cxwg-55mq.json @@ -7,12 +7,8 @@ "CVE-2014-2797" ], "details": "Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pj2r-jq64-j78p/GHSA-pj2r-jq64-j78p.json b/advisories/unreviewed/2022/05/GHSA-pj2r-jq64-j78p/GHSA-pj2r-jq64-j78p.json index e1a021fa657..dd51fb903f3 100644 --- a/advisories/unreviewed/2022/05/GHSA-pj2r-jq64-j78p/GHSA-pj2r-jq64-j78p.json +++ b/advisories/unreviewed/2022/05/GHSA-pj2r-jq64-j78p/GHSA-pj2r-jq64-j78p.json @@ -7,12 +7,8 @@ "CVE-2011-0655" ], "details": "Microsoft PowerPoint 2007 SP2 and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; PowerPoint Viewer; PowerPoint Viewer 2007 SP2; and PowerPoint Web App do not properly validate TimeColorBehaviorContainer Floating Point records in PowerPoint documents, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted document containing an invalid record, aka \"Floating Point Techno-color Time Bandit RCE Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pj4q-wcrw-wmgf/GHSA-pj4q-wcrw-wmgf.json b/advisories/unreviewed/2022/05/GHSA-pj4q-wcrw-wmgf/GHSA-pj4q-wcrw-wmgf.json index edf7e3a136d..fc2118a6ded 100644 --- a/advisories/unreviewed/2022/05/GHSA-pj4q-wcrw-wmgf/GHSA-pj4q-wcrw-wmgf.json +++ b/advisories/unreviewed/2022/05/GHSA-pj4q-wcrw-wmgf/GHSA-pj4q-wcrw-wmgf.json @@ -7,12 +7,8 @@ "CVE-2011-0977" ], "details": "Use-after-free vulnerability in Microsoft Office XP SP3, Office 2003 SP3, Office 2007 SP2, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allows remote attackers to execute arbitrary code via malformed shape data in the Office drawing file format, aka \"Microsoft Office Graphic Object Dereferencing Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pjhh-36v6-xqg5/GHSA-pjhh-36v6-xqg5.json b/advisories/unreviewed/2022/05/GHSA-pjhh-36v6-xqg5/GHSA-pjhh-36v6-xqg5.json index 6720dcaa737..8ba71ea10c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-pjhh-36v6-xqg5/GHSA-pjhh-36v6-xqg5.json +++ b/advisories/unreviewed/2022/05/GHSA-pjhh-36v6-xqg5/GHSA-pjhh-36v6-xqg5.json @@ -7,12 +7,8 @@ "CVE-2014-0305" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0299 and CVE-2014-0311.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pmpx-378r-8j42/GHSA-pmpx-378r-8j42.json b/advisories/unreviewed/2022/05/GHSA-pmpx-378r-8j42/GHSA-pmpx-378r-8j42.json index f2e07676aa0..007ef377491 100644 --- a/advisories/unreviewed/2022/05/GHSA-pmpx-378r-8j42/GHSA-pmpx-378r-8j42.json +++ b/advisories/unreviewed/2022/05/GHSA-pmpx-378r-8j42/GHSA-pmpx-378r-8j42.json @@ -7,12 +7,8 @@ "CVE-2014-1757" ], "details": "Microsoft Word 2007 SP3 and 2010 SP1 and SP2, and Office Compatibility Pack SP3, allocates memory incorrectly for file conversions from a binary (aka .doc) format to a newer format, which allows remote attackers to execute arbitrary code via a crafted document, aka \"Microsoft Office File Format Converter Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pmxm-pgpj-c8jf/GHSA-pmxm-pgpj-c8jf.json b/advisories/unreviewed/2022/05/GHSA-pmxm-pgpj-c8jf/GHSA-pmxm-pgpj-c8jf.json index 929207d8762..ee7010c297f 100644 --- a/advisories/unreviewed/2022/05/GHSA-pmxm-pgpj-c8jf/GHSA-pmxm-pgpj-c8jf.json +++ b/advisories/unreviewed/2022/05/GHSA-pmxm-pgpj-c8jf/GHSA-pmxm-pgpj-c8jf.json @@ -7,12 +7,8 @@ "CVE-2014-1788" ], "details": "Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1774 and CVE-2014-2754.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ppch-fxg9-92q2/GHSA-ppch-fxg9-92q2.json b/advisories/unreviewed/2022/05/GHSA-ppch-fxg9-92q2/GHSA-ppch-fxg9-92q2.json index 529d93e90e0..b871cbe3d6e 100644 --- a/advisories/unreviewed/2022/05/GHSA-ppch-fxg9-92q2/GHSA-ppch-fxg9-92q2.json +++ b/advisories/unreviewed/2022/05/GHSA-ppch-fxg9-92q2/GHSA-ppch-fxg9-92q2.json @@ -7,12 +7,8 @@ "CVE-2014-4094" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-prwx-pv5g-49qx/GHSA-prwx-pv5g-49qx.json b/advisories/unreviewed/2022/05/GHSA-prwx-pv5g-49qx/GHSA-prwx-pv5g-49qx.json index c50c2a120ca..84f24046a26 100644 --- a/advisories/unreviewed/2022/05/GHSA-prwx-pv5g-49qx/GHSA-prwx-pv5g-49qx.json +++ b/advisories/unreviewed/2022/05/GHSA-prwx-pv5g-49qx/GHSA-prwx-pv5g-49qx.json @@ -7,12 +7,8 @@ "CVE-2013-5057" ], "details": "hxds.dll in Microsoft Office 2007 SP3 and 2010 SP1 and SP2 does not implement the ASLR protection mechanism, which makes it easier for remote attackers to execute arbitrary code via a crafted COM component on a web site that is visited with Internet Explorer, as exploited in the wild in December 2013, aka \"HXDS ASLR Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pv6v-q9mw-36pw/GHSA-pv6v-q9mw-36pw.json b/advisories/unreviewed/2022/05/GHSA-pv6v-q9mw-36pw/GHSA-pv6v-q9mw-36pw.json index a242a7c56df..662a02d4092 100644 --- a/advisories/unreviewed/2022/05/GHSA-pv6v-q9mw-36pw/GHSA-pv6v-q9mw-36pw.json +++ b/advisories/unreviewed/2022/05/GHSA-pv6v-q9mw-36pw/GHSA-pv6v-q9mw-36pw.json @@ -7,12 +7,8 @@ "CVE-2015-0019" ], "details": "Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pwxx-2hrw-72w5/GHSA-pwxx-2hrw-72w5.json b/advisories/unreviewed/2022/05/GHSA-pwxx-2hrw-72w5/GHSA-pwxx-2hrw-72w5.json index b013273b937..4e2ee84be15 100644 --- a/advisories/unreviewed/2022/05/GHSA-pwxx-2hrw-72w5/GHSA-pwxx-2hrw-72w5.json +++ b/advisories/unreviewed/2022/05/GHSA-pwxx-2hrw-72w5/GHSA-pwxx-2hrw-72w5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pxpc-qfm6-wwp4/GHSA-pxpc-qfm6-wwp4.json b/advisories/unreviewed/2022/05/GHSA-pxpc-qfm6-wwp4/GHSA-pxpc-qfm6-wwp4.json index 3523e88c98e..d8dc144ca15 100644 --- a/advisories/unreviewed/2022/05/GHSA-pxpc-qfm6-wwp4/GHSA-pxpc-qfm6-wwp4.json +++ b/advisories/unreviewed/2022/05/GHSA-pxpc-qfm6-wwp4/GHSA-pxpc-qfm6-wwp4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q2vh-mj5j-gf95/GHSA-q2vh-mj5j-gf95.json b/advisories/unreviewed/2022/05/GHSA-q2vh-mj5j-gf95/GHSA-q2vh-mj5j-gf95.json index a8c4a088947..5fefcfabfa8 100644 --- a/advisories/unreviewed/2022/05/GHSA-q2vh-mj5j-gf95/GHSA-q2vh-mj5j-gf95.json +++ b/advisories/unreviewed/2022/05/GHSA-q2vh-mj5j-gf95/GHSA-q2vh-mj5j-gf95.json @@ -7,12 +7,8 @@ "CVE-2015-0037" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-0018, CVE-2015-0040, and CVE-2015-0066.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q433-fx96-3j76/GHSA-q433-fx96-3j76.json b/advisories/unreviewed/2022/05/GHSA-q433-fx96-3j76/GHSA-q433-fx96-3j76.json index b4314952fbc..9b054264a35 100644 --- a/advisories/unreviewed/2022/05/GHSA-q433-fx96-3j76/GHSA-q433-fx96-3j76.json +++ b/advisories/unreviewed/2022/05/GHSA-q433-fx96-3j76/GHSA-q433-fx96-3j76.json @@ -7,12 +7,8 @@ "CVE-2013-1302" ], "details": "Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an invitation that triggers access to a deleted object, aka \"Lync RCE Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q43p-9vmp-7v72/GHSA-q43p-9vmp-7v72.json b/advisories/unreviewed/2022/05/GHSA-q43p-9vmp-7v72/GHSA-q43p-9vmp-7v72.json index bf549e3cae3..e2786f5de79 100644 --- a/advisories/unreviewed/2022/05/GHSA-q43p-9vmp-7v72/GHSA-q43p-9vmp-7v72.json +++ b/advisories/unreviewed/2022/05/GHSA-q43p-9vmp-7v72/GHSA-q43p-9vmp-7v72.json @@ -7,12 +7,8 @@ "CVE-2014-2770" ], "details": "Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1781, CVE-2014-1792, and CVE-2014-1804.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q4qj-c7gq-hq5w/GHSA-q4qj-c7gq-hq5w.json b/advisories/unreviewed/2022/05/GHSA-q4qj-c7gq-hq5w/GHSA-q4qj-c7gq-hq5w.json index dc1e9e536c4..7ffe0365860 100644 --- a/advisories/unreviewed/2022/05/GHSA-q4qj-c7gq-hq5w/GHSA-q4qj-c7gq-hq5w.json +++ b/advisories/unreviewed/2022/05/GHSA-q4qj-c7gq-hq5w/GHSA-q4qj-c7gq-hq5w.json @@ -7,12 +7,8 @@ "CVE-2014-2777" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary web script with increased privileges via unspecified vectors, aka \"Internet Explorer Elevation of Privilege Vulnerability,\" a different vulnerability than CVE-2014-1778.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q526-c3ch-x422/GHSA-q526-c3ch-x422.json b/advisories/unreviewed/2022/05/GHSA-q526-c3ch-x422/GHSA-q526-c3ch-x422.json index 4ddffd5de95..a8a2b3f3282 100644 --- a/advisories/unreviewed/2022/05/GHSA-q526-c3ch-x422/GHSA-q526-c3ch-x422.json +++ b/advisories/unreviewed/2022/05/GHSA-q526-c3ch-x422/GHSA-q526-c3ch-x422.json @@ -7,12 +7,8 @@ "CVE-2013-1323" ], "details": "Microsoft Publisher 2003 SP3 does not properly handle NULL values for unspecified data items, which allows remote attackers to execute arbitrary code via a crafted Publisher file, aka \"Publisher Incorrect NULL Value Handling Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q5hv-hj5g-jwrh/GHSA-q5hv-hj5g-jwrh.json b/advisories/unreviewed/2022/05/GHSA-q5hv-hj5g-jwrh/GHSA-q5hv-hj5g-jwrh.json index 0da1d398b60..57bed1361af 100644 --- a/advisories/unreviewed/2022/05/GHSA-q5hv-hj5g-jwrh/GHSA-q5hv-hj5g-jwrh.json +++ b/advisories/unreviewed/2022/05/GHSA-q5hv-hj5g-jwrh/GHSA-q5hv-hj5g-jwrh.json @@ -7,12 +7,8 @@ "CVE-2014-2766" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1773, CVE-2014-1783, CVE-2014-1784, CVE-2014-1786, CVE-2014-1795, CVE-2014-1805, CVE-2014-2758, CVE-2014-2759, CVE-2014-2765, and CVE-2014-2775.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q5hw-rc8m-cf9j/GHSA-q5hw-rc8m-cf9j.json b/advisories/unreviewed/2022/05/GHSA-q5hw-rc8m-cf9j/GHSA-q5hw-rc8m-cf9j.json index f1b358b150e..3d57ba8f69b 100644 --- a/advisories/unreviewed/2022/05/GHSA-q5hw-rc8m-cf9j/GHSA-q5hw-rc8m-cf9j.json +++ b/advisories/unreviewed/2022/05/GHSA-q5hw-rc8m-cf9j/GHSA-q5hw-rc8m-cf9j.json @@ -7,12 +7,8 @@ "CVE-2014-4050" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2796, CVE-2014-2808, CVE-2014-2825, CVE-2014-4055, and CVE-2014-4067.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q5x5-pf74-vqx9/GHSA-q5x5-pf74-vqx9.json b/advisories/unreviewed/2022/05/GHSA-q5x5-pf74-vqx9/GHSA-q5x5-pf74-vqx9.json index b667f45baa7..dd9e0a168cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-q5x5-pf74-vqx9/GHSA-q5x5-pf74-vqx9.json +++ b/advisories/unreviewed/2022/05/GHSA-q5x5-pf74-vqx9/GHSA-q5x5-pf74-vqx9.json @@ -7,12 +7,8 @@ "CVE-2012-2526" ], "details": "The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP3 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to a deleted object, aka \"Remote Desktop Protocol Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q6hw-jw9v-7j54/GHSA-q6hw-jw9v-7j54.json b/advisories/unreviewed/2022/05/GHSA-q6hw-jw9v-7j54/GHSA-q6hw-jw9v-7j54.json index e43f31d4005..9517ed4287b 100644 --- a/advisories/unreviewed/2022/05/GHSA-q6hw-jw9v-7j54/GHSA-q6hw-jw9v-7j54.json +++ b/advisories/unreviewed/2022/05/GHSA-q6hw-jw9v-7j54/GHSA-q6hw-jw9v-7j54.json @@ -7,12 +7,8 @@ "CVE-2014-2757" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0282, CVE-2014-1775, CVE-2014-1779, CVE-2014-1799, and CVE-2014-1803.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q6vc-g4j4-ccm3/GHSA-q6vc-g4j4-ccm3.json b/advisories/unreviewed/2022/05/GHSA-q6vc-g4j4-ccm3/GHSA-q6vc-g4j4-ccm3.json index f3abf8ba9a2..0a984fbceaf 100644 --- a/advisories/unreviewed/2022/05/GHSA-q6vc-g4j4-ccm3/GHSA-q6vc-g4j4-ccm3.json +++ b/advisories/unreviewed/2022/05/GHSA-q6vc-g4j4-ccm3/GHSA-q6vc-g4j4-ccm3.json @@ -7,12 +7,8 @@ "CVE-2015-0032" ], "details": "vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 8 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"VBScript Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q749-fvmf-r8fc/GHSA-q749-fvmf-r8fc.json b/advisories/unreviewed/2022/05/GHSA-q749-fvmf-r8fc/GHSA-q749-fvmf-r8fc.json index 8d09c67c0f0..4da36747d5c 100644 --- a/advisories/unreviewed/2022/05/GHSA-q749-fvmf-r8fc/GHSA-q749-fvmf-r8fc.json +++ b/advisories/unreviewed/2022/05/GHSA-q749-fvmf-r8fc/GHSA-q749-fvmf-r8fc.json @@ -7,12 +7,8 @@ "CVE-2013-1329" ], "details": "Integer signedness error in Microsoft Publisher 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Publisher file that triggers a buffer underflow, aka \"Publisher Buffer Underflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q8qv-rc35-q94x/GHSA-q8qv-rc35-q94x.json b/advisories/unreviewed/2022/05/GHSA-q8qv-rc35-q94x/GHSA-q8qv-rc35-q94x.json index e9e389699b7..c71776b5f0f 100644 --- a/advisories/unreviewed/2022/05/GHSA-q8qv-rc35-q94x/GHSA-q8qv-rc35-q94x.json +++ b/advisories/unreviewed/2022/05/GHSA-q8qv-rc35-q94x/GHSA-q8qv-rc35-q94x.json @@ -7,12 +7,8 @@ "CVE-2014-4122" ], "details": "Microsoft .NET Framework 2.0 SP2, 3.5, and 3.5.1 omits the ASLR protection mechanism, which allows remote attackers to obtain potentially sensitive information about memory addresses by leveraging the predictability of an executable image's location, aka \".NET ASLR Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q8vc-r4q2-6qjp/GHSA-q8vc-r4q2-6qjp.json b/advisories/unreviewed/2022/05/GHSA-q8vc-r4q2-6qjp/GHSA-q8vc-r4q2-6qjp.json index b0f4950ecc9..78cc6d0eb1c 100644 --- a/advisories/unreviewed/2022/05/GHSA-q8vc-r4q2-6qjp/GHSA-q8vc-r4q2-6qjp.json +++ b/advisories/unreviewed/2022/05/GHSA-q8vc-r4q2-6qjp/GHSA-q8vc-r4q2-6qjp.json @@ -7,12 +7,8 @@ "CVE-2011-1273" ], "details": "Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka \"Excel Improper Record Parsing Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q8vv-hw2c-cgjj/GHSA-q8vv-hw2c-cgjj.json b/advisories/unreviewed/2022/05/GHSA-q8vv-hw2c-cgjj/GHSA-q8vv-hw2c-cgjj.json index 63e7dd06420..5667a8da447 100644 --- a/advisories/unreviewed/2022/05/GHSA-q8vv-hw2c-cgjj/GHSA-q8vv-hw2c-cgjj.json +++ b/advisories/unreviewed/2022/05/GHSA-q8vv-hw2c-cgjj/GHSA-q8vv-hw2c-cgjj.json @@ -7,12 +7,8 @@ "CVE-2014-2771" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1772, CVE-2014-1780, CVE-2014-1794, CVE-2014-1797, CVE-2014-1802, CVE-2014-2756, CVE-2014-2763, CVE-2014-2764, and CVE-2014-2769.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qcf5-2m23-wppx/GHSA-qcf5-2m23-wppx.json b/advisories/unreviewed/2022/05/GHSA-qcf5-2m23-wppx/GHSA-qcf5-2m23-wppx.json index 1662f27c11e..f6fe638c635 100644 --- a/advisories/unreviewed/2022/05/GHSA-qcf5-2m23-wppx/GHSA-qcf5-2m23-wppx.json +++ b/advisories/unreviewed/2022/05/GHSA-qcf5-2m23-wppx/GHSA-qcf5-2m23-wppx.json @@ -7,12 +7,8 @@ "CVE-2013-3886" ], "details": "Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qcj8-8vc8-xfwm/GHSA-qcj8-8vc8-xfwm.json b/advisories/unreviewed/2022/05/GHSA-qcj8-8vc8-xfwm/GHSA-qcj8-8vc8-xfwm.json index ca3fb8abf2d..1ff96c50adf 100644 --- a/advisories/unreviewed/2022/05/GHSA-qcj8-8vc8-xfwm/GHSA-qcj8-8vc8-xfwm.json +++ b/advisories/unreviewed/2022/05/GHSA-qcj8-8vc8-xfwm/GHSA-qcj8-8vc8-xfwm.json @@ -7,12 +7,8 @@ "CVE-2014-2759" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1773, CVE-2014-1783, CVE-2014-1784, CVE-2014-1786, CVE-2014-1795, CVE-2014-1805, CVE-2014-2758, CVE-2014-2765, CVE-2014-2766, and CVE-2014-2775.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qf7r-rxmh-rxjm/GHSA-qf7r-rxmh-rxjm.json b/advisories/unreviewed/2022/05/GHSA-qf7r-rxmh-rxjm/GHSA-qf7r-rxmh-rxjm.json index c60ccaa05ad..b859f5fa6be 100644 --- a/advisories/unreviewed/2022/05/GHSA-qf7r-rxmh-rxjm/GHSA-qf7r-rxmh-rxjm.json +++ b/advisories/unreviewed/2022/05/GHSA-qf7r-rxmh-rxjm/GHSA-qf7r-rxmh-rxjm.json @@ -7,12 +7,8 @@ "CVE-2014-6349" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, aka \"Internet Explorer Elevation of Privilege Vulnerability,\" a different vulnerability than CVE-2014-6350.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qf89-ghj8-fvxx/GHSA-qf89-ghj8-fvxx.json b/advisories/unreviewed/2022/05/GHSA-qf89-ghj8-fvxx/GHSA-qf89-ghj8-fvxx.json index dd8c5111afa..9775607445c 100644 --- a/advisories/unreviewed/2022/05/GHSA-qf89-ghj8-fvxx/GHSA-qf89-ghj8-fvxx.json +++ b/advisories/unreviewed/2022/05/GHSA-qf89-ghj8-fvxx/GHSA-qf89-ghj8-fvxx.json @@ -7,12 +7,8 @@ "CVE-2013-3849" ], "details": "Microsoft Word Automation Services in SharePoint Server 2010 SP1, Word Web App 2010 SP1 in Office Web Apps 2010, Word 2003 SP3, Word 2007 SP3, Word 2010 SP1, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"Word Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3847, CVE-2013-3848, and CVE-2013-3858.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qfg6-4gxh-j3wv/GHSA-qfg6-4gxh-j3wv.json b/advisories/unreviewed/2022/05/GHSA-qfg6-4gxh-j3wv/GHSA-qfg6-4gxh-j3wv.json index 47d5b5cce85..84d050d9257 100644 --- a/advisories/unreviewed/2022/05/GHSA-qfg6-4gxh-j3wv/GHSA-qfg6-4gxh-j3wv.json +++ b/advisories/unreviewed/2022/05/GHSA-qfg6-4gxh-j3wv/GHSA-qfg6-4gxh-j3wv.json @@ -7,12 +7,8 @@ "CVE-2013-3889" ], "details": "Microsoft Excel 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; Office Compatibility Pack SP3; and Excel Services and Word Automation Services in SharePoint Server 2013 allow remote attackers to execute arbitrary code via a crafted Office document, aka \"Microsoft Excel Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qgp4-cv63-pvx3/GHSA-qgp4-cv63-pvx3.json b/advisories/unreviewed/2022/05/GHSA-qgp4-cv63-pvx3/GHSA-qgp4-cv63-pvx3.json index 3cd7bf82381..3b4c7c46f24 100644 --- a/advisories/unreviewed/2022/05/GHSA-qgp4-cv63-pvx3/GHSA-qgp4-cv63-pvx3.json +++ b/advisories/unreviewed/2022/05/GHSA-qgp4-cv63-pvx3/GHSA-qgp4-cv63-pvx3.json @@ -7,12 +7,8 @@ "CVE-2013-3132" ], "details": "Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check the permissions of objects that use reflection, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka \"Delegate Reflection Bypass Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qgp9-9qqj-4m43/GHSA-qgp9-9qqj-4m43.json b/advisories/unreviewed/2022/05/GHSA-qgp9-9qqj-4m43/GHSA-qgp9-9qqj-4m43.json index aa9ccfc3885..def16fa41c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-qgp9-9qqj-4m43/GHSA-qgp9-9qqj-4m43.json +++ b/advisories/unreviewed/2022/05/GHSA-qgp9-9qqj-4m43/GHSA-qgp9-9qqj-4m43.json @@ -7,12 +7,8 @@ "CVE-2014-0311" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0299 and CVE-2014-0305.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qhmr-px2q-55x8/GHSA-qhmr-px2q-55x8.json b/advisories/unreviewed/2022/05/GHSA-qhmr-px2q-55x8/GHSA-qhmr-px2q-55x8.json index 07acf190a8e..d88587bbb56 100644 --- a/advisories/unreviewed/2022/05/GHSA-qhmr-px2q-55x8/GHSA-qhmr-px2q-55x8.json +++ b/advisories/unreviewed/2022/05/GHSA-qhmr-px2q-55x8/GHSA-qhmr-px2q-55x8.json @@ -7,12 +7,8 @@ "CVE-2014-4057" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2810, CVE-2014-2811, CVE-2014-2822, and CVE-2014-2823.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qj5w-qghv-rh24/GHSA-qj5w-qghv-rh24.json b/advisories/unreviewed/2022/05/GHSA-qj5w-qghv-rh24/GHSA-qj5w-qghv-rh24.json index 470a05f963c..abb656babcf 100644 --- a/advisories/unreviewed/2022/05/GHSA-qj5w-qghv-rh24/GHSA-qj5w-qghv-rh24.json +++ b/advisories/unreviewed/2022/05/GHSA-qj5w-qghv-rh24/GHSA-qj5w-qghv-rh24.json @@ -7,12 +7,8 @@ "CVE-2014-1775" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0282, CVE-2014-1779, CVE-2014-1799, CVE-2014-1803, and CVE-2014-2757.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qj84-6p43-2fhw/GHSA-qj84-6p43-2fhw.json b/advisories/unreviewed/2022/05/GHSA-qj84-6p43-2fhw/GHSA-qj84-6p43-2fhw.json index 8d74a911df7..e18674ce6d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-qj84-6p43-2fhw/GHSA-qj84-6p43-2fhw.json +++ b/advisories/unreviewed/2022/05/GHSA-qj84-6p43-2fhw/GHSA-qj84-6p43-2fhw.json @@ -7,12 +7,8 @@ "CVE-2013-5049" ], "details": "Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qm69-4872-3p94/GHSA-qm69-4872-3p94.json b/advisories/unreviewed/2022/05/GHSA-qm69-4872-3p94/GHSA-qm69-4872-3p94.json index 197e5d479c0..09196458d59 100644 --- a/advisories/unreviewed/2022/05/GHSA-qm69-4872-3p94/GHSA-qm69-4872-3p94.json +++ b/advisories/unreviewed/2022/05/GHSA-qm69-4872-3p94/GHSA-qm69-4872-3p94.json @@ -7,12 +7,8 @@ "CVE-2014-4128" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qpfr-mc5h-6r6v/GHSA-qpfr-mc5h-6r6v.json b/advisories/unreviewed/2022/05/GHSA-qpfr-mc5h-6r6v/GHSA-qpfr-mc5h-6r6v.json index 3a83320921b..e22a455c5b1 100644 --- a/advisories/unreviewed/2022/05/GHSA-qpfr-mc5h-6r6v/GHSA-qpfr-mc5h-6r6v.json +++ b/advisories/unreviewed/2022/05/GHSA-qpfr-mc5h-6r6v/GHSA-qpfr-mc5h-6r6v.json @@ -7,12 +7,8 @@ "CVE-2014-1754" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 Gold and SP1, SharePoint Foundation 2013 Gold and SP1, Office Web Apps Server 2013 Gold and SP1, and SharePoint Server 2013 Client Components SDK allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka \"SharePoint XSS Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qq7r-6w38-wp9c/GHSA-qq7r-6w38-wp9c.json b/advisories/unreviewed/2022/05/GHSA-qq7r-6w38-wp9c/GHSA-qq7r-6w38-wp9c.json index 7c08ca9f140..fe30f03f3a1 100644 --- a/advisories/unreviewed/2022/05/GHSA-qq7r-6w38-wp9c/GHSA-qq7r-6w38-wp9c.json +++ b/advisories/unreviewed/2022/05/GHSA-qq7r-6w38-wp9c/GHSA-qq7r-6w38-wp9c.json @@ -7,12 +7,8 @@ "CVE-2013-3162" ], "details": "Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3115.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qq9h-28hp-42wc/GHSA-qq9h-28hp-42wc.json b/advisories/unreviewed/2022/05/GHSA-qq9h-28hp-42wc/GHSA-qq9h-28hp-42wc.json index a599c525531..b84b6f7b0a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-qq9h-28hp-42wc/GHSA-qq9h-28hp-42wc.json +++ b/advisories/unreviewed/2022/05/GHSA-qq9h-28hp-42wc/GHSA-qq9h-28hp-42wc.json @@ -7,12 +7,8 @@ "CVE-2013-1305" ], "details": "HTTP.sys in Microsoft Windows 8, Windows Server 2012, and Windows RT allows remote attackers to cause a denial of service (infinite loop) via a crafted HTTP header, aka \"HTTP.sys Denial of Service Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qqfp-x3x9-m2hh/GHSA-qqfp-x3x9-m2hh.json b/advisories/unreviewed/2022/05/GHSA-qqfp-x3x9-m2hh/GHSA-qqfp-x3x9-m2hh.json index 755c5f63bc0..fb03ef8b565 100644 --- a/advisories/unreviewed/2022/05/GHSA-qqfp-x3x9-m2hh/GHSA-qqfp-x3x9-m2hh.json +++ b/advisories/unreviewed/2022/05/GHSA-qqfp-x3x9-m2hh/GHSA-qqfp-x3x9-m2hh.json @@ -7,12 +7,8 @@ "CVE-2014-1772" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1780, CVE-2014-1794, CVE-2014-1797, CVE-2014-1802, CVE-2014-2756, CVE-2014-2763, CVE-2014-2764, CVE-2014-2769, and CVE-2014-2771.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qv2j-prc2-xfqc/GHSA-qv2j-prc2-xfqc.json b/advisories/unreviewed/2022/05/GHSA-qv2j-prc2-xfqc/GHSA-qv2j-prc2-xfqc.json index 44d8a24731e..172a50a8dc3 100644 --- a/advisories/unreviewed/2022/05/GHSA-qv2j-prc2-xfqc/GHSA-qv2j-prc2-xfqc.json +++ b/advisories/unreviewed/2022/05/GHSA-qv2j-prc2-xfqc/GHSA-qv2j-prc2-xfqc.json @@ -7,12 +7,8 @@ "CVE-2012-3106" ], "details": "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1766, CVE-2012-1767, CVE-2012-1769, CVE-2012-1770, CVE-2012-1771, CVE-2012-1772, CVE-2012-1773, CVE-2012-3107, CVE-2012-3108, and CVE-2012-3110.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qvfg-7p26-g8wx/GHSA-qvfg-7p26-g8wx.json b/advisories/unreviewed/2022/05/GHSA-qvfg-7p26-g8wx/GHSA-qvfg-7p26-g8wx.json index 87c01da5ae8..28134f71101 100644 --- a/advisories/unreviewed/2022/05/GHSA-qvfg-7p26-g8wx/GHSA-qvfg-7p26-g8wx.json +++ b/advisories/unreviewed/2022/05/GHSA-qvfg-7p26-g8wx/GHSA-qvfg-7p26-g8wx.json @@ -7,12 +7,8 @@ "CVE-2014-2755" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1769, CVE-2014-1782, CVE-2014-1785, CVE-2014-2753, CVE-2014-2760, CVE-2014-2761, CVE-2014-2772, and CVE-2014-2776.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qvjc-7j75-rrpc/GHSA-qvjc-7j75-rrpc.json b/advisories/unreviewed/2022/05/GHSA-qvjc-7j75-rrpc/GHSA-qvjc-7j75-rrpc.json index 4a8770dd31f..0da6d7558d3 100644 --- a/advisories/unreviewed/2022/05/GHSA-qvjc-7j75-rrpc/GHSA-qvjc-7j75-rrpc.json +++ b/advisories/unreviewed/2022/05/GHSA-qvjc-7j75-rrpc/GHSA-qvjc-7j75-rrpc.json @@ -7,12 +7,8 @@ "CVE-2013-3872" ], "details": "Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3873, CVE-2013-3882, and CVE-2013-3885.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qvwj-75x3-gv4r/GHSA-qvwj-75x3-gv4r.json b/advisories/unreviewed/2022/05/GHSA-qvwj-75x3-gv4r/GHSA-qvwj-75x3-gv4r.json index 851c7311a83..89d5a726d6c 100644 --- a/advisories/unreviewed/2022/05/GHSA-qvwj-75x3-gv4r/GHSA-qvwj-75x3-gv4r.json +++ b/advisories/unreviewed/2022/05/GHSA-qvwj-75x3-gv4r/GHSA-qvwj-75x3-gv4r.json @@ -7,12 +7,8 @@ "CVE-2014-0269" ], "details": "Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qw2x-2hfv-2vhf/GHSA-qw2x-2hfv-2vhf.json b/advisories/unreviewed/2022/05/GHSA-qw2x-2hfv-2vhf/GHSA-qw2x-2hfv-2vhf.json index fdbec3e408f..88cc8910820 100644 --- a/advisories/unreviewed/2022/05/GHSA-qw2x-2hfv-2vhf/GHSA-qw2x-2hfv-2vhf.json +++ b/advisories/unreviewed/2022/05/GHSA-qw2x-2hfv-2vhf/GHSA-qw2x-2hfv-2vhf.json @@ -7,12 +7,8 @@ "CVE-2012-3109" ], "details": "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1768.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qw4p-23q9-w349/GHSA-qw4p-23q9-w349.json b/advisories/unreviewed/2022/05/GHSA-qw4p-23q9-w349/GHSA-qw4p-23q9-w349.json index fd44ffb944b..cfb63ecf7cc 100644 --- a/advisories/unreviewed/2022/05/GHSA-qw4p-23q9-w349/GHSA-qw4p-23q9-w349.json +++ b/advisories/unreviewed/2022/05/GHSA-qw4p-23q9-w349/GHSA-qw4p-23q9-w349.json @@ -7,12 +7,8 @@ "CVE-2013-3184" ], "details": "Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qw9x-vgm9-f658/GHSA-qw9x-vgm9-f658.json b/advisories/unreviewed/2022/05/GHSA-qw9x-vgm9-f658/GHSA-qw9x-vgm9-f658.json index a3f7c02f4a1..7c493932e40 100644 --- a/advisories/unreviewed/2022/05/GHSA-qw9x-vgm9-f658/GHSA-qw9x-vgm9-f658.json +++ b/advisories/unreviewed/2022/05/GHSA-qw9x-vgm9-f658/GHSA-qw9x-vgm9-f658.json @@ -7,12 +7,8 @@ "CVE-2013-3161" ], "details": "Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3143.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qww7-7246-4v79/GHSA-qww7-7246-4v79.json b/advisories/unreviewed/2022/05/GHSA-qww7-7246-4v79/GHSA-qww7-7246-4v79.json index 39b0e4430a0..cb71f33de30 100644 --- a/advisories/unreviewed/2022/05/GHSA-qww7-7246-4v79/GHSA-qww7-7246-4v79.json +++ b/advisories/unreviewed/2022/05/GHSA-qww7-7246-4v79/GHSA-qww7-7246-4v79.json @@ -7,12 +7,8 @@ "CVE-2014-1762" ], "details": "Unspecified vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code with medium-integrity privileges and bypass a sandbox protection mechanism via unknown vectors, as demonstrated by ZDI during a Pwn4Fun competition at CanSecWest 2014.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r296-q66c-4wrr/GHSA-r296-q66c-4wrr.json b/advisories/unreviewed/2022/05/GHSA-r296-q66c-4wrr/GHSA-r296-q66c-4wrr.json index 34f9f85a228..71def37b69c 100644 --- a/advisories/unreviewed/2022/05/GHSA-r296-q66c-4wrr/GHSA-r296-q66c-4wrr.json +++ b/advisories/unreviewed/2022/05/GHSA-r296-q66c-4wrr/GHSA-r296-q66c-4wrr.json @@ -7,12 +7,8 @@ "CVE-2014-0290" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0267 and CVE-2014-0289.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r2hj-3857-22x9/GHSA-r2hj-3857-22x9.json b/advisories/unreviewed/2022/05/GHSA-r2hj-3857-22x9/GHSA-r2hj-3857-22x9.json index 79e9f2f79f3..13221a6563f 100644 --- a/advisories/unreviewed/2022/05/GHSA-r2hj-3857-22x9/GHSA-r2hj-3857-22x9.json +++ b/advisories/unreviewed/2022/05/GHSA-r2hj-3857-22x9/GHSA-r2hj-3857-22x9.json @@ -7,12 +7,8 @@ "CVE-2015-0045" ], "details": "Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-0053.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r3m5-jrj2-w6pj/GHSA-r3m5-jrj2-w6pj.json b/advisories/unreviewed/2022/05/GHSA-r3m5-jrj2-w6pj/GHSA-r3m5-jrj2-w6pj.json index 6d170047810..dfcaf379308 100644 --- a/advisories/unreviewed/2022/05/GHSA-r3m5-jrj2-w6pj/GHSA-r3m5-jrj2-w6pj.json +++ b/advisories/unreviewed/2022/05/GHSA-r3m5-jrj2-w6pj/GHSA-r3m5-jrj2-w6pj.json @@ -7,12 +7,8 @@ "CVE-2014-4084" ], "details": "Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-4093.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r4vm-fm77-v7hh/GHSA-r4vm-fm77-v7hh.json b/advisories/unreviewed/2022/05/GHSA-r4vm-fm77-v7hh/GHSA-r4vm-fm77-v7hh.json index 05fe9d56fcc..8eb8c615d1d 100644 --- a/advisories/unreviewed/2022/05/GHSA-r4vm-fm77-v7hh/GHSA-r4vm-fm77-v7hh.json +++ b/advisories/unreviewed/2022/05/GHSA-r4vm-fm77-v7hh/GHSA-r4vm-fm77-v7hh.json @@ -7,12 +7,8 @@ "CVE-2014-1795" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1773, CVE-2014-1783, CVE-2014-1784, CVE-2014-1786, CVE-2014-1805, CVE-2014-2758, CVE-2014-2759, CVE-2014-2765, CVE-2014-2766, and CVE-2014-2775.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r53f-q2x3-jp6c/GHSA-r53f-q2x3-jp6c.json b/advisories/unreviewed/2022/05/GHSA-r53f-q2x3-jp6c/GHSA-r53f-q2x3-jp6c.json index 49bf8dbe870..988c664aa14 100644 --- a/advisories/unreviewed/2022/05/GHSA-r53f-q2x3-jp6c/GHSA-r53f-q2x3-jp6c.json +++ b/advisories/unreviewed/2022/05/GHSA-r53f-q2x3-jp6c/GHSA-r53f-q2x3-jp6c.json @@ -7,12 +7,8 @@ "CVE-2014-1779" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0282, CVE-2014-1775, CVE-2014-1799, CVE-2014-1803, and CVE-2014-2757.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r53m-pvh9-4rx8/GHSA-r53m-pvh9-4rx8.json b/advisories/unreviewed/2022/05/GHSA-r53m-pvh9-4rx8/GHSA-r53m-pvh9-4rx8.json index 2b81a49c8ce..226679e3dd1 100644 --- a/advisories/unreviewed/2022/05/GHSA-r53m-pvh9-4rx8/GHSA-r53m-pvh9-4rx8.json +++ b/advisories/unreviewed/2022/05/GHSA-r53m-pvh9-4rx8/GHSA-r53m-pvh9-4rx8.json @@ -7,12 +7,8 @@ "CVE-2011-1983" ], "details": "Use-after-free vulnerability in Microsoft Office 2007 SP2 and SP3, Office 2010 Gold and SP1, and Office for Mac 2011 allows remote attackers to execute arbitrary code via a crafted Word document, aka \"Word Use After Free Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r5g4-c3vm-vwhj/GHSA-r5g4-c3vm-vwhj.json b/advisories/unreviewed/2022/05/GHSA-r5g4-c3vm-vwhj/GHSA-r5g4-c3vm-vwhj.json index cafed7a326c..21eb45c21a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-r5g4-c3vm-vwhj/GHSA-r5g4-c3vm-vwhj.json +++ b/advisories/unreviewed/2022/05/GHSA-r5g4-c3vm-vwhj/GHSA-r5g4-c3vm-vwhj.json @@ -7,12 +7,8 @@ "CVE-2011-1243" ], "details": "The Windows Messenger ActiveX control in msgsc.dll in Microsoft Windows XP SP2 and SP3 allows remote attackers to execute arbitrary code via unspecified vectors that \"corrupt the system state,\" aka \"Microsoft Windows Messenger ActiveX Control Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r699-wgcm-v7qp/GHSA-r699-wgcm-v7qp.json b/advisories/unreviewed/2022/05/GHSA-r699-wgcm-v7qp/GHSA-r699-wgcm-v7qp.json index 263a44b61e9..fb11bcc64ef 100644 --- a/advisories/unreviewed/2022/05/GHSA-r699-wgcm-v7qp/GHSA-r699-wgcm-v7qp.json +++ b/advisories/unreviewed/2022/05/GHSA-r699-wgcm-v7qp/GHSA-r699-wgcm-v7qp.json @@ -7,12 +7,8 @@ "CVE-2014-0294" ], "details": "Microsoft Forefront Protection 2010 for Exchange Server does not properly parse e-mail content, which might allow remote attackers to execute arbitrary code via a crafted message, aka \"RCE Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r6xm-v62q-jv5w/GHSA-r6xm-v62q-jv5w.json b/advisories/unreviewed/2022/05/GHSA-r6xm-v62q-jv5w/GHSA-r6xm-v62q-jv5w.json index 2ded7cce5c9..2eea3ee2d88 100644 --- a/advisories/unreviewed/2022/05/GHSA-r6xm-v62q-jv5w/GHSA-r6xm-v62q-jv5w.json +++ b/advisories/unreviewed/2022/05/GHSA-r6xm-v62q-jv5w/GHSA-r6xm-v62q-jv5w.json @@ -7,12 +7,8 @@ "CVE-2011-1982" ], "details": "Microsoft Office 2007 SP2, and 2010 Gold and SP1, does not initialize an unspecified object pointer during the opening of Word documents, which allows remote attackers to execute arbitrary code via a crafted document, aka \"Office Uninitialized Object Pointer Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r7ff-g3gq-6px6/GHSA-r7ff-g3gq-6px6.json b/advisories/unreviewed/2022/05/GHSA-r7ff-g3gq-6px6/GHSA-r7ff-g3gq-6px6.json index 5241d629d59..47020b8b26d 100644 --- a/advisories/unreviewed/2022/05/GHSA-r7ff-g3gq-6px6/GHSA-r7ff-g3gq-6px6.json +++ b/advisories/unreviewed/2022/05/GHSA-r7ff-g3gq-6px6/GHSA-r7ff-g3gq-6px6.json @@ -7,12 +7,8 @@ "CVE-2010-3240" ], "details": "Microsoft Excel 2002 SP3 and 2007 SP2; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka \"Real Time Data Array Record Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r838-75c6-gjj4/GHSA-r838-75c6-gjj4.json b/advisories/unreviewed/2022/05/GHSA-r838-75c6-gjj4/GHSA-r838-75c6-gjj4.json index 82d3bcf88a9..0c8aa9bf4f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-r838-75c6-gjj4/GHSA-r838-75c6-gjj4.json +++ b/advisories/unreviewed/2022/05/GHSA-r838-75c6-gjj4/GHSA-r838-75c6-gjj4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r97w-68rj-55vf/GHSA-r97w-68rj-55vf.json b/advisories/unreviewed/2022/05/GHSA-r97w-68rj-55vf/GHSA-r97w-68rj-55vf.json index f1a8b6d9719..976bf310049 100644 --- a/advisories/unreviewed/2022/05/GHSA-r97w-68rj-55vf/GHSA-r97w-68rj-55vf.json +++ b/advisories/unreviewed/2022/05/GHSA-r97w-68rj-55vf/GHSA-r97w-68rj-55vf.json @@ -7,12 +7,8 @@ "CVE-2014-4971" ], "details": "Microsoft Windows XP SP3 does not validate addresses in certain IRP handler routines, which allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted address in an IOCTL call, related to (1) the MQAC.sys driver in the MQ Access Control subsystem and (2) the BthPan.sys driver in the Bluetooth Personal Area Networking subsystem.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r9jv-2mm6-4c79/GHSA-r9jv-2mm6-4c79.json b/advisories/unreviewed/2022/05/GHSA-r9jv-2mm6-4c79/GHSA-r9jv-2mm6-4c79.json index 21b70f7cef6..749ec11c596 100644 --- a/advisories/unreviewed/2022/05/GHSA-r9jv-2mm6-4c79/GHSA-r9jv-2mm6-4c79.json +++ b/advisories/unreviewed/2022/05/GHSA-r9jv-2mm6-4c79/GHSA-r9jv-2mm6-4c79.json @@ -7,12 +7,8 @@ "CVE-2014-4117" ], "details": "Microsoft Office 2007 SP3, Word 2007 SP3, Office 2010 SP1 and SP2, Word 2010 SP1 and SP2, Office for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP1 and SP2, and Word Web Apps 2010 Gold, SP1, and SP2 allow remote attackers to execute arbitrary code via crafted properties in a Word document, aka \"Microsoft Word File Format Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r9qh-g767-699r/GHSA-r9qh-g767-699r.json b/advisories/unreviewed/2022/05/GHSA-r9qh-g767-699r/GHSA-r9qh-g767-699r.json index 117ca4b0b26..5c31bfe8cb0 100644 --- a/advisories/unreviewed/2022/05/GHSA-r9qh-g767-699r/GHSA-r9qh-g767-699r.json +++ b/advisories/unreviewed/2022/05/GHSA-r9qh-g767-699r/GHSA-r9qh-g767-699r.json @@ -7,12 +7,8 @@ "CVE-2015-0051" ], "details": "Microsoft Internet Explorer 8 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka \"Internet Explorer ASLR Bypass Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rcg3-4524-mq7j/GHSA-rcg3-4524-mq7j.json b/advisories/unreviewed/2022/05/GHSA-rcg3-4524-mq7j/GHSA-rcg3-4524-mq7j.json index 9289a5425eb..3c801f7dbdb 100644 --- a/advisories/unreviewed/2022/05/GHSA-rcg3-4524-mq7j/GHSA-rcg3-4524-mq7j.json +++ b/advisories/unreviewed/2022/05/GHSA-rcg3-4524-mq7j/GHSA-rcg3-4524-mq7j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rcw6-69h3-89fh/GHSA-rcw6-69h3-89fh.json b/advisories/unreviewed/2022/05/GHSA-rcw6-69h3-89fh/GHSA-rcw6-69h3-89fh.json index ab7e9f1e432..e4f032ba95b 100644 --- a/advisories/unreviewed/2022/05/GHSA-rcw6-69h3-89fh/GHSA-rcw6-69h3-89fh.json +++ b/advisories/unreviewed/2022/05/GHSA-rcw6-69h3-89fh/GHSA-rcw6-69h3-89fh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rg5x-2rm4-gx5f/GHSA-rg5x-2rm4-gx5f.json b/advisories/unreviewed/2022/05/GHSA-rg5x-2rm4-gx5f/GHSA-rg5x-2rm4-gx5f.json index 12bd665756a..a67fae8598f 100644 --- a/advisories/unreviewed/2022/05/GHSA-rg5x-2rm4-gx5f/GHSA-rg5x-2rm4-gx5f.json +++ b/advisories/unreviewed/2022/05/GHSA-rg5x-2rm4-gx5f/GHSA-rg5x-2rm4-gx5f.json @@ -7,12 +7,8 @@ "CVE-2012-2521" ], "details": "Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka \"Asynchronous NULL Object Access Remote Code Execution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rgmj-9q73-5phf/GHSA-rgmj-9q73-5phf.json b/advisories/unreviewed/2022/05/GHSA-rgmj-9q73-5phf/GHSA-rgmj-9q73-5phf.json index 76bcd96575c..e7db2dbf1c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-rgmj-9q73-5phf/GHSA-rgmj-9q73-5phf.json +++ b/advisories/unreviewed/2022/05/GHSA-rgmj-9q73-5phf/GHSA-rgmj-9q73-5phf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rgqv-rf3c-v65h/GHSA-rgqv-rf3c-v65h.json b/advisories/unreviewed/2022/05/GHSA-rgqv-rf3c-v65h/GHSA-rgqv-rf3c-v65h.json index 7f65a8f8e3d..9fce9bf7981 100644 --- a/advisories/unreviewed/2022/05/GHSA-rgqv-rf3c-v65h/GHSA-rgqv-rf3c-v65h.json +++ b/advisories/unreviewed/2022/05/GHSA-rgqv-rf3c-v65h/GHSA-rgqv-rf3c-v65h.json @@ -7,12 +7,8 @@ "CVE-2015-0065" ], "details": "Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"OneTableDocumentStream Remote Code Execution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rh8q-w8j8-vhjf/GHSA-rh8q-w8j8-vhjf.json b/advisories/unreviewed/2022/05/GHSA-rh8q-w8j8-vhjf/GHSA-rh8q-w8j8-vhjf.json index 30d22cf269b..19131cfc611 100644 --- a/advisories/unreviewed/2022/05/GHSA-rh8q-w8j8-vhjf/GHSA-rh8q-w8j8-vhjf.json +++ b/advisories/unreviewed/2022/05/GHSA-rh8q-w8j8-vhjf/GHSA-rh8q-w8j8-vhjf.json @@ -7,12 +7,8 @@ "CVE-2013-3194" ], "details": "Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rh98-97x9-gvfj/GHSA-rh98-97x9-gvfj.json b/advisories/unreviewed/2022/05/GHSA-rh98-97x9-gvfj/GHSA-rh98-97x9-gvfj.json index bb7f582806a..2f551a33133 100644 --- a/advisories/unreviewed/2022/05/GHSA-rh98-97x9-gvfj/GHSA-rh98-97x9-gvfj.json +++ b/advisories/unreviewed/2022/05/GHSA-rh98-97x9-gvfj/GHSA-rh98-97x9-gvfj.json @@ -7,12 +7,8 @@ "CVE-2014-0289" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0267 and CVE-2014-0290.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rj52-g9vr-v82h/GHSA-rj52-g9vr-v82h.json b/advisories/unreviewed/2022/05/GHSA-rj52-g9vr-v82h/GHSA-rj52-g9vr-v82h.json index cb6933ad05f..9d71d5c360d 100644 --- a/advisories/unreviewed/2022/05/GHSA-rj52-g9vr-v82h/GHSA-rj52-g9vr-v82h.json +++ b/advisories/unreviewed/2022/05/GHSA-rj52-g9vr-v82h/GHSA-rj52-g9vr-v82h.json @@ -7,12 +7,8 @@ "CVE-2013-3205" ], "details": "Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rmc5-3xmc-2w3h/GHSA-rmc5-3xmc-2w3h.json b/advisories/unreviewed/2022/05/GHSA-rmc5-3xmc-2w3h/GHSA-rmc5-3xmc-2w3h.json index 6324879e05e..3329100ed4b 100644 --- a/advisories/unreviewed/2022/05/GHSA-rmc5-3xmc-2w3h/GHSA-rmc5-3xmc-2w3h.json +++ b/advisories/unreviewed/2022/05/GHSA-rmc5-3xmc-2w3h/GHSA-rmc5-3xmc-2w3h.json @@ -7,12 +7,8 @@ "CVE-2013-1301" ], "details": "Microsoft Visio 2003 SP3 2007 SP3, and 2010 SP1 allows remote attackers to read arbitrary files via an XML document containing an external entity declaration in conjunction with an entity reference, aka \"XML External Entities Resolution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rmq3-q37p-qpj6/GHSA-rmq3-q37p-qpj6.json b/advisories/unreviewed/2022/05/GHSA-rmq3-q37p-qpj6/GHSA-rmq3-q37p-qpj6.json index 4163c39c4f4..f8353082c4a 100644 --- a/advisories/unreviewed/2022/05/GHSA-rmq3-q37p-qpj6/GHSA-rmq3-q37p-qpj6.json +++ b/advisories/unreviewed/2022/05/GHSA-rmq3-q37p-qpj6/GHSA-rmq3-q37p-qpj6.json @@ -7,12 +7,8 @@ "CVE-2013-3191" ], "details": "Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3187 and CVE-2013-3193.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rmrw-ph7q-q4r2/GHSA-rmrw-ph7q-q4r2.json b/advisories/unreviewed/2022/05/GHSA-rmrw-ph7q-q4r2/GHSA-rmrw-ph7q-q4r2.json index a2b700bdb2a..30e2255c1e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-rmrw-ph7q-q4r2/GHSA-rmrw-ph7q-q4r2.json +++ b/advisories/unreviewed/2022/05/GHSA-rmrw-ph7q-q4r2/GHSA-rmrw-ph7q-q4r2.json @@ -7,12 +7,8 @@ "CVE-2015-0028" ], "details": "Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-0048.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rpg9-x63j-3644/GHSA-rpg9-x63j-3644.json b/advisories/unreviewed/2022/05/GHSA-rpg9-x63j-3644/GHSA-rpg9-x63j-3644.json index 1342e41d135..66fd0963bd2 100644 --- a/advisories/unreviewed/2022/05/GHSA-rpg9-x63j-3644/GHSA-rpg9-x63j-3644.json +++ b/advisories/unreviewed/2022/05/GHSA-rpg9-x63j-3644/GHSA-rpg9-x63j-3644.json @@ -7,12 +7,8 @@ "CVE-2011-0105" ], "details": "Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac obtain a certain length value from an uninitialized memory location, which allows remote attackers to trigger a buffer overflow and execute arbitrary code via a crafted Excel file, aka \"Excel Data Initialization Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rq65-297x-r8v7/GHSA-rq65-297x-r8v7.json b/advisories/unreviewed/2022/05/GHSA-rq65-297x-r8v7/GHSA-rq65-297x-r8v7.json index 08de7f0701a..c3967c0a2aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-rq65-297x-r8v7/GHSA-rq65-297x-r8v7.json +++ b/advisories/unreviewed/2022/05/GHSA-rq65-297x-r8v7/GHSA-rq65-297x-r8v7.json @@ -7,12 +7,8 @@ "CVE-2014-1770" ], "details": "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code via crafted JavaScript code that interacts improperly with a CollectGarbage function call on a CMarkup object allocated by the CMarkup::CreateInitialMarkup function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rq67-v6m5-89h4/GHSA-rq67-v6m5-89h4.json b/advisories/unreviewed/2022/05/GHSA-rq67-v6m5-89h4/GHSA-rq67-v6m5-89h4.json index 6fae67f8b44..926049a0588 100644 --- a/advisories/unreviewed/2022/05/GHSA-rq67-v6m5-89h4/GHSA-rq67-v6m5-89h4.json +++ b/advisories/unreviewed/2022/05/GHSA-rq67-v6m5-89h4/GHSA-rq67-v6m5-89h4.json @@ -7,12 +7,8 @@ "CVE-2011-1277" ], "details": "Microsoft Excel 2002 SP3, Office 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka \"Excel Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rr8g-528h-948x/GHSA-rr8g-528h-948x.json b/advisories/unreviewed/2022/05/GHSA-rr8g-528h-948x/GHSA-rr8g-528h-948x.json index 37ddb5d0b35..248d8727c1f 100644 --- a/advisories/unreviewed/2022/05/GHSA-rr8g-528h-948x/GHSA-rr8g-528h-948x.json +++ b/advisories/unreviewed/2022/05/GHSA-rr8g-528h-948x/GHSA-rr8g-528h-948x.json @@ -7,12 +7,8 @@ "CVE-2014-1765" ], "details": "Multiple use-after-free vulnerabilities in Microsoft Internet Explorer 6 through 11 allow remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by Sebastian Apelt and Andreas Schmidt during a Pwn2Own competition at CanSecWest 2014.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rrc4-8xgr-jpcc/GHSA-rrc4-8xgr-jpcc.json b/advisories/unreviewed/2022/05/GHSA-rrc4-8xgr-jpcc/GHSA-rrc4-8xgr-jpcc.json index c100e69635d..0045d52cacb 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrc4-8xgr-jpcc/GHSA-rrc4-8xgr-jpcc.json +++ b/advisories/unreviewed/2022/05/GHSA-rrc4-8xgr-jpcc/GHSA-rrc4-8xgr-jpcc.json @@ -7,12 +7,8 @@ "CVE-2014-4149" ], "details": "Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly perform TypeFilterLevel checks, which allows remote attackers to execute arbitrary code via crafted data to a .NET Remoting endpoint, aka \"TypeFilterLevel Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rrjg-xx76-7w45/GHSA-rrjg-xx76-7w45.json b/advisories/unreviewed/2022/05/GHSA-rrjg-xx76-7w45/GHSA-rrjg-xx76-7w45.json index a2fd965a07f..786cd1da937 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrjg-xx76-7w45/GHSA-rrjg-xx76-7w45.json +++ b/advisories/unreviewed/2022/05/GHSA-rrjg-xx76-7w45/GHSA-rrjg-xx76-7w45.json @@ -7,12 +7,8 @@ "CVE-2014-1774" ], "details": "Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1788 and CVE-2014-2754.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rvhx-65wp-wvjf/GHSA-rvhx-65wp-wvjf.json b/advisories/unreviewed/2022/05/GHSA-rvhx-65wp-wvjf/GHSA-rvhx-65wp-wvjf.json index 6717e962402..75996323532 100644 --- a/advisories/unreviewed/2022/05/GHSA-rvhx-65wp-wvjf/GHSA-rvhx-65wp-wvjf.json +++ b/advisories/unreviewed/2022/05/GHSA-rvhx-65wp-wvjf/GHSA-rvhx-65wp-wvjf.json @@ -7,12 +7,8 @@ "CVE-2012-1773" ], "details": "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1766, CVE-2012-1767, CVE-2012-1769, CVE-2012-1770, CVE-2012-1771, CVE-2012-1772, CVE-2012-3106, CVE-2012-3107, CVE-2012-3108, and CVE-2012-3110.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rvqq-gvgx-253h/GHSA-rvqq-gvgx-253h.json b/advisories/unreviewed/2022/05/GHSA-rvqq-gvgx-253h/GHSA-rvqq-gvgx-253h.json index b45fc6f16d2..572278ac462 100644 --- a/advisories/unreviewed/2022/05/GHSA-rvqq-gvgx-253h/GHSA-rvqq-gvgx-253h.json +++ b/advisories/unreviewed/2022/05/GHSA-rvqq-gvgx-253h/GHSA-rvqq-gvgx-253h.json @@ -7,12 +7,8 @@ "CVE-2014-6363" ], "details": "vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"VBScript Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rw87-27pw-2g9g/GHSA-rw87-27pw-2g9g.json b/advisories/unreviewed/2022/05/GHSA-rw87-27pw-2g9g/GHSA-rw87-27pw-2g9g.json index b4ea7d228e3..b0aba576d61 100644 --- a/advisories/unreviewed/2022/05/GHSA-rw87-27pw-2g9g/GHSA-rw87-27pw-2g9g.json +++ b/advisories/unreviewed/2022/05/GHSA-rw87-27pw-2g9g/GHSA-rw87-27pw-2g9g.json @@ -7,12 +7,8 @@ "CVE-2014-4098" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-4092.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rwhw-8cjm-hq34/GHSA-rwhw-8cjm-hq34.json b/advisories/unreviewed/2022/05/GHSA-rwhw-8cjm-hq34/GHSA-rwhw-8cjm-hq34.json index 3512b4b4db8..eeb832202de 100644 --- a/advisories/unreviewed/2022/05/GHSA-rwhw-8cjm-hq34/GHSA-rwhw-8cjm-hq34.json +++ b/advisories/unreviewed/2022/05/GHSA-rwhw-8cjm-hq34/GHSA-rwhw-8cjm-hq34.json @@ -7,12 +7,8 @@ "CVE-2011-0097" ], "details": "Integer underflow in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via a crafted 400h substream in an Excel file, which triggers a stack-based buffer overflow, aka \"Excel Integer Overrun Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v3wg-w43v-g525/GHSA-v3wg-w43v-g525.json b/advisories/unreviewed/2022/05/GHSA-v3wg-w43v-g525/GHSA-v3wg-w43v-g525.json index d296330d557..935477c6e1b 100644 --- a/advisories/unreviewed/2022/05/GHSA-v3wg-w43v-g525/GHSA-v3wg-w43v-g525.json +++ b/advisories/unreviewed/2022/05/GHSA-v3wg-w43v-g525/GHSA-v3wg-w43v-g525.json @@ -7,12 +7,8 @@ "CVE-2015-0036" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-0017, CVE-2015-0020, CVE-2015-0022, CVE-2015-0026, CVE-2015-0030, CVE-2015-0031, and CVE-2015-0041.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v44j-jhwx-v5hm/GHSA-v44j-jhwx-v5hm.json b/advisories/unreviewed/2022/05/GHSA-v44j-jhwx-v5hm/GHSA-v44j-jhwx-v5hm.json index c18eff6ba13..e1cd4318e0b 100644 --- a/advisories/unreviewed/2022/05/GHSA-v44j-jhwx-v5hm/GHSA-v44j-jhwx-v5hm.json +++ b/advisories/unreviewed/2022/05/GHSA-v44j-jhwx-v5hm/GHSA-v44j-jhwx-v5hm.json @@ -7,12 +7,8 @@ "CVE-2011-1896" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka \"ExcelTable Reflected XSS Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v4hw-jf92-3326/GHSA-v4hw-jf92-3326.json b/advisories/unreviewed/2022/05/GHSA-v4hw-jf92-3326/GHSA-v4hw-jf92-3326.json index d6bf3b409e6..4d4d928c6d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-v4hw-jf92-3326/GHSA-v4hw-jf92-3326.json +++ b/advisories/unreviewed/2022/05/GHSA-v4hw-jf92-3326/GHSA-v4hw-jf92-3326.json @@ -7,12 +7,8 @@ "CVE-2013-1325" ], "details": "Heap-based buffer overflow in Microsoft Office 2003 SP3 and 2007 SP3 allows remote attackers to execute arbitrary code via a crafted WordPerfect document (.wpd) file, aka \"Word Heap Overwrite Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v53v-93hv-wcjv/GHSA-v53v-93hv-wcjv.json b/advisories/unreviewed/2022/05/GHSA-v53v-93hv-wcjv/GHSA-v53v-93hv-wcjv.json index 46c38c49522..70b08bba93d 100644 --- a/advisories/unreviewed/2022/05/GHSA-v53v-93hv-wcjv/GHSA-v53v-93hv-wcjv.json +++ b/advisories/unreviewed/2022/05/GHSA-v53v-93hv-wcjv/GHSA-v53v-93hv-wcjv.json @@ -7,12 +7,8 @@ "CVE-2014-4096" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-4087, CVE-2014-4095, and CVE-2014-4101.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v574-82cf-h53m/GHSA-v574-82cf-h53m.json b/advisories/unreviewed/2022/05/GHSA-v574-82cf-h53m/GHSA-v574-82cf-h53m.json index ced0389d312..976436b27af 100644 --- a/advisories/unreviewed/2022/05/GHSA-v574-82cf-h53m/GHSA-v574-82cf-h53m.json +++ b/advisories/unreviewed/2022/05/GHSA-v574-82cf-h53m/GHSA-v574-82cf-h53m.json @@ -7,12 +7,8 @@ "CVE-2014-6333" ], "details": "Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code via a crafted Office document, aka \"Microsoft Office Double Delete Remote Code Execution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v5m9-xqf7-7mf4/GHSA-v5m9-xqf7-7mf4.json b/advisories/unreviewed/2022/05/GHSA-v5m9-xqf7-7mf4/GHSA-v5m9-xqf7-7mf4.json index 68a62ba57f3..bf18056cbba 100644 --- a/advisories/unreviewed/2022/05/GHSA-v5m9-xqf7-7mf4/GHSA-v5m9-xqf7-7mf4.json +++ b/advisories/unreviewed/2022/05/GHSA-v5m9-xqf7-7mf4/GHSA-v5m9-xqf7-7mf4.json @@ -7,12 +7,8 @@ "CVE-2013-3862" ], "details": "Double free vulnerability in Microsoft Windows 7 and Server 2008 R2 SP1 allows local users to gain privileges via a crafted service description that is not properly handled by services.exe in the Service Control Manager (SCM), aka \"Service Control Manager Double Free Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v5x4-gw5v-9fw4/GHSA-v5x4-gw5v-9fw4.json b/advisories/unreviewed/2022/05/GHSA-v5x4-gw5v-9fw4/GHSA-v5x4-gw5v-9fw4.json index a8bc651707d..077fa2a8e7e 100644 --- a/advisories/unreviewed/2022/05/GHSA-v5x4-gw5v-9fw4/GHSA-v5x4-gw5v-9fw4.json +++ b/advisories/unreviewed/2022/05/GHSA-v5x4-gw5v-9fw4/GHSA-v5x4-gw5v-9fw4.json @@ -7,12 +7,8 @@ "CVE-2014-4056" ], "details": "Microsoft Internet Explorer 7 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v6cr-6fw4-2736/GHSA-v6cr-6fw4-2736.json b/advisories/unreviewed/2022/05/GHSA-v6cr-6fw4-2736/GHSA-v6cr-6fw4-2736.json index 8edbd8f5a5d..c163e8631ea 100644 --- a/advisories/unreviewed/2022/05/GHSA-v6cr-6fw4-2736/GHSA-v6cr-6fw4-2736.json +++ b/advisories/unreviewed/2022/05/GHSA-v6cr-6fw4-2736/GHSA-v6cr-6fw4-2736.json @@ -7,12 +7,8 @@ "CVE-2013-3202" ], "details": "Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v7m4-g62x-8mgg/GHSA-v7m4-g62x-8mgg.json b/advisories/unreviewed/2022/05/GHSA-v7m4-g62x-8mgg/GHSA-v7m4-g62x-8mgg.json index 911a505012d..e1a144ab634 100644 --- a/advisories/unreviewed/2022/05/GHSA-v7m4-g62x-8mgg/GHSA-v7m4-g62x-8mgg.json +++ b/advisories/unreviewed/2022/05/GHSA-v7m4-g62x-8mgg/GHSA-v7m4-g62x-8mgg.json @@ -7,12 +7,8 @@ "CVE-2014-0258" ], "details": "Microsoft Word 2003 SP3 and 2007 SP3, Office Compatibility Pack SP3, and Word Viewer allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka \"Word Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v7rc-wwx8-7hh9/GHSA-v7rc-wwx8-7hh9.json b/advisories/unreviewed/2022/05/GHSA-v7rc-wwx8-7hh9/GHSA-v7rc-wwx8-7hh9.json index 22b0a46ea97..2a93297d83d 100644 --- a/advisories/unreviewed/2022/05/GHSA-v7rc-wwx8-7hh9/GHSA-v7rc-wwx8-7hh9.json +++ b/advisories/unreviewed/2022/05/GHSA-v7rc-wwx8-7hh9/GHSA-v7rc-wwx8-7hh9.json @@ -7,12 +7,8 @@ "CVE-2013-1290" ], "details": "Microsoft SharePoint Server 2013, in certain configurations involving legacy My Sites, does not properly establish default access controls for a SharePoint list, which allows remote authenticated users to bypass intended restrictions on reading list items via a direct request for a list's location, aka \"Incorrect Access Rights Information Disclosure Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v82g-pvcm-jjx6/GHSA-v82g-pvcm-jjx6.json b/advisories/unreviewed/2022/05/GHSA-v82g-pvcm-jjx6/GHSA-v82g-pvcm-jjx6.json index c47564d2de8..01123056bf9 100644 --- a/advisories/unreviewed/2022/05/GHSA-v82g-pvcm-jjx6/GHSA-v82g-pvcm-jjx6.json +++ b/advisories/unreviewed/2022/05/GHSA-v82g-pvcm-jjx6/GHSA-v82g-pvcm-jjx6.json @@ -7,12 +7,8 @@ "CVE-2013-1303" ], "details": "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer Use After Free Vulnerability,\" a different vulnerability than CVE-2013-1304 and CVE-2013-1338.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v8fw-jv5h-4r46/GHSA-v8fw-jv5h-4r46.json b/advisories/unreviewed/2022/05/GHSA-v8fw-jv5h-4r46/GHSA-v8fw-jv5h-4r46.json index 0e1dfefed37..b11244497d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-v8fw-jv5h-4r46/GHSA-v8fw-jv5h-4r46.json +++ b/advisories/unreviewed/2022/05/GHSA-v8fw-jv5h-4r46/GHSA-v8fw-jv5h-4r46.json @@ -7,12 +7,8 @@ "CVE-2014-4105" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v93c-j87p-pp29/GHSA-v93c-j87p-pp29.json b/advisories/unreviewed/2022/05/GHSA-v93c-j87p-pp29/GHSA-v93c-j87p-pp29.json index 388edc41d94..18ae9fc6140 100644 --- a/advisories/unreviewed/2022/05/GHSA-v93c-j87p-pp29/GHSA-v93c-j87p-pp29.json +++ b/advisories/unreviewed/2022/05/GHSA-v93c-j87p-pp29/GHSA-v93c-j87p-pp29.json @@ -7,12 +7,8 @@ "CVE-2011-2008" ], "details": "Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka \"Access of Unallocated Memory DoS Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v96v-qm6p-m23w/GHSA-v96v-qm6p-m23w.json b/advisories/unreviewed/2022/05/GHSA-v96v-qm6p-m23w/GHSA-v96v-qm6p-m23w.json index 1958c0e22ed..5c31b60af37 100644 --- a/advisories/unreviewed/2022/05/GHSA-v96v-qm6p-m23w/GHSA-v96v-qm6p-m23w.json +++ b/advisories/unreviewed/2022/05/GHSA-v96v-qm6p-m23w/GHSA-v96v-qm6p-m23w.json @@ -7,12 +7,8 @@ "CVE-2014-2756" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1772, CVE-2014-1780, CVE-2014-1794, CVE-2014-1797, CVE-2014-1802, CVE-2014-2763, CVE-2014-2764, CVE-2014-2769, and CVE-2014-2771.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v9hv-xmm8-5vcw/GHSA-v9hv-xmm8-5vcw.json b/advisories/unreviewed/2022/05/GHSA-v9hv-xmm8-5vcw/GHSA-v9hv-xmm8-5vcw.json index c4de789f413..44d9f5a3e38 100644 --- a/advisories/unreviewed/2022/05/GHSA-v9hv-xmm8-5vcw/GHSA-v9hv-xmm8-5vcw.json +++ b/advisories/unreviewed/2022/05/GHSA-v9hv-xmm8-5vcw/GHSA-v9hv-xmm8-5vcw.json @@ -7,12 +7,8 @@ "CVE-2011-2010" ], "details": "The Microsoft Office Input Method Editor (IME) for Simplified Chinese in Microsoft Pinyin IME 2010, Office Pinyin SimpleFast Style 2010, and Office Pinyin New Experience Style 2010 does not properly restrict access to configuration options, which allows local users to gain privileges via the Microsoft Pinyin (aka MSPY) IME toolbar, aka \"Pinyin IME Elevation Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vc7q-73x4-cqqg/GHSA-vc7q-73x4-cqqg.json b/advisories/unreviewed/2022/05/GHSA-vc7q-73x4-cqqg/GHSA-vc7q-73x4-cqqg.json index 4cf77c39254..80f707fde0e 100644 --- a/advisories/unreviewed/2022/05/GHSA-vc7q-73x4-cqqg/GHSA-vc7q-73x4-cqqg.json +++ b/advisories/unreviewed/2022/05/GHSA-vc7q-73x4-cqqg/GHSA-vc7q-73x4-cqqg.json @@ -7,12 +7,8 @@ "CVE-2011-1989" ], "details": "Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Excel 2010 Gold and SP1; Excel in Office 2010 Gold and SP1; Office 2004, 2008, and 2011 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2; Excel Services on Office SharePoint Server 2007 SP2; Excel Services on Office SharePoint Server 2010 Gold and SP1; and Excel Web App 2010 Gold and SP1 do not properly parse conditional expressions associated with formatting requirements, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka \"Excel Conditional Expression Parsing Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vcm4-j9p7-jrqg/GHSA-vcm4-j9p7-jrqg.json b/advisories/unreviewed/2022/05/GHSA-vcm4-j9p7-jrqg/GHSA-vcm4-j9p7-jrqg.json index c6570a9210d..a6b783e8559 100644 --- a/advisories/unreviewed/2022/05/GHSA-vcm4-j9p7-jrqg/GHSA-vcm4-j9p7-jrqg.json +++ b/advisories/unreviewed/2022/05/GHSA-vcm4-j9p7-jrqg/GHSA-vcm4-j9p7-jrqg.json @@ -7,12 +7,8 @@ "CVE-2011-1988" ], "details": "Microsoft Excel 2003 SP3 and 2007 SP2; Excel in Office 2007 SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 do not properly parse records in Excel spreadsheets, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka \"Excel Heap Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vcrm-xj24-h4qp/GHSA-vcrm-xj24-h4qp.json b/advisories/unreviewed/2022/05/GHSA-vcrm-xj24-h4qp/GHSA-vcrm-xj24-h4qp.json index 9e275646e13..c9a857b7028 100644 --- a/advisories/unreviewed/2022/05/GHSA-vcrm-xj24-h4qp/GHSA-vcrm-xj24-h4qp.json +++ b/advisories/unreviewed/2022/05/GHSA-vcrm-xj24-h4qp/GHSA-vcrm-xj24-h4qp.json @@ -7,12 +7,8 @@ "CVE-2013-3166" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to inject arbitrary web script or HTML via vectors involving incorrect auto-selection of the Shift JIS encoding, leading to cross-domain scrolling events, aka \"Shift JIS Character Encoding Vulnerability,\" a different vulnerability than CVE-2013-0015.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vf94-hmfp-f8r7/GHSA-vf94-hmfp-f8r7.json b/advisories/unreviewed/2022/05/GHSA-vf94-hmfp-f8r7/GHSA-vf94-hmfp-f8r7.json index 803d13faa0b..b47a1c98ff9 100644 --- a/advisories/unreviewed/2022/05/GHSA-vf94-hmfp-f8r7/GHSA-vf94-hmfp-f8r7.json +++ b/advisories/unreviewed/2022/05/GHSA-vf94-hmfp-f8r7/GHSA-vf94-hmfp-f8r7.json @@ -7,12 +7,8 @@ "CVE-2011-0107" ], "details": "Untrusted search path vulnerability in Microsoft Office XP SP3, Office 2003 SP3, and Office 2007 SP2 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .docx file, aka \"Office Component Insecure Library Loading Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vfmq-x353-h38g/GHSA-vfmq-x353-h38g.json b/advisories/unreviewed/2022/05/GHSA-vfmq-x353-h38g/GHSA-vfmq-x353-h38g.json index 2f5f751a9c9..4d3bb2b2a64 100644 --- a/advisories/unreviewed/2022/05/GHSA-vfmq-x353-h38g/GHSA-vfmq-x353-h38g.json +++ b/advisories/unreviewed/2022/05/GHSA-vfmq-x353-h38g/GHSA-vfmq-x353-h38g.json @@ -7,12 +7,8 @@ "CVE-2013-3178" ], "details": "Microsoft Silverlight 5 before 5.1.20513.0 does not properly initialize arrays, which allows remote attackers to execute arbitrary code or cause a denial of service (NULL pointer dereference) via a crafted Silverlight application, aka \"Null Pointer Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vfr2-32g8-v9jf/GHSA-vfr2-32g8-v9jf.json b/advisories/unreviewed/2022/05/GHSA-vfr2-32g8-v9jf/GHSA-vfr2-32g8-v9jf.json index cfc653939ab..6ee2c294942 100644 --- a/advisories/unreviewed/2022/05/GHSA-vfr2-32g8-v9jf/GHSA-vfr2-32g8-v9jf.json +++ b/advisories/unreviewed/2022/05/GHSA-vfr2-32g8-v9jf/GHSA-vfr2-32g8-v9jf.json @@ -7,12 +7,8 @@ "CVE-2013-3891" ], "details": "Microsoft Word 2003 SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka \"Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vg99-qxp7-cv5m/GHSA-vg99-qxp7-cv5m.json b/advisories/unreviewed/2022/05/GHSA-vg99-qxp7-cv5m/GHSA-vg99-qxp7-cv5m.json index 4fd0a367376..8f7e68f448d 100644 --- a/advisories/unreviewed/2022/05/GHSA-vg99-qxp7-cv5m/GHSA-vg99-qxp7-cv5m.json +++ b/advisories/unreviewed/2022/05/GHSA-vg99-qxp7-cv5m/GHSA-vg99-qxp7-cv5m.json @@ -7,12 +7,8 @@ "CVE-2013-3131" ], "details": "Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5, and Silverlight 5 before 5.1.20513.0, does not properly prevent changes to data in multidimensional arrays of structures, which allows remote attackers to execute arbitrary code via (1) a crafted .NET Framework application or (2) a crafted Silverlight application, aka \"Array Access Violation Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vgc4-8wxm-xhh4/GHSA-vgc4-8wxm-xhh4.json b/advisories/unreviewed/2022/05/GHSA-vgc4-8wxm-xhh4/GHSA-vgc4-8wxm-xhh4.json index 067f82c0a7c..bcde706d0ac 100644 --- a/advisories/unreviewed/2022/05/GHSA-vgc4-8wxm-xhh4/GHSA-vgc4-8wxm-xhh4.json +++ b/advisories/unreviewed/2022/05/GHSA-vgc4-8wxm-xhh4/GHSA-vgc4-8wxm-xhh4.json @@ -7,12 +7,8 @@ "CVE-2015-0038" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-0042 and CVE-2015-0046.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vhw2-8j2g-43v8/GHSA-vhw2-8j2g-43v8.json b/advisories/unreviewed/2022/05/GHSA-vhw2-8j2g-43v8/GHSA-vhw2-8j2g-43v8.json index 99caf808acd..534d36b6dfc 100644 --- a/advisories/unreviewed/2022/05/GHSA-vhw2-8j2g-43v8/GHSA-vhw2-8j2g-43v8.json +++ b/advisories/unreviewed/2022/05/GHSA-vhw2-8j2g-43v8/GHSA-vhw2-8j2g-43v8.json @@ -7,12 +7,8 @@ "CVE-2014-2760" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1769, CVE-2014-1782, CVE-2014-1785, CVE-2014-2753, CVE-2014-2755, CVE-2014-2761, CVE-2014-2772, and CVE-2014-2776.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vj9r-5x9p-j6m6/GHSA-vj9r-5x9p-j6m6.json b/advisories/unreviewed/2022/05/GHSA-vj9r-5x9p-j6m6/GHSA-vj9r-5x9p-j6m6.json index 4ae2ed5fd1c..9ecb1eac08d 100644 --- a/advisories/unreviewed/2022/05/GHSA-vj9r-5x9p-j6m6/GHSA-vj9r-5x9p-j6m6.json +++ b/advisories/unreviewed/2022/05/GHSA-vj9r-5x9p-j6m6/GHSA-vj9r-5x9p-j6m6.json @@ -7,12 +7,8 @@ "CVE-2013-3868" ], "details": "Microsoft Active Directory Lightweight Directory Service (AD LDS) on Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, and Windows 8 and Active Directory Services on Windows Server 2008 SP2 and R2 SP1 and Server 2012 allow remote attackers to cause a denial of service (LDAP directory-service outage) via a crafted LDAP query, aka \"Remote Anonymous DoS Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vmx5-mgp7-hc9h/GHSA-vmx5-mgp7-hc9h.json b/advisories/unreviewed/2022/05/GHSA-vmx5-mgp7-hc9h/GHSA-vmx5-mgp7-hc9h.json index e7e088643ec..d1e8c7cb58f 100644 --- a/advisories/unreviewed/2022/05/GHSA-vmx5-mgp7-hc9h/GHSA-vmx5-mgp7-hc9h.json +++ b/advisories/unreviewed/2022/05/GHSA-vmx5-mgp7-hc9h/GHSA-vmx5-mgp7-hc9h.json @@ -7,12 +7,8 @@ "CVE-2014-4067" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2796, CVE-2014-2808, CVE-2014-2825, CVE-2014-4050, and CVE-2014-4055.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vpm6-vgv8-43m6/GHSA-vpm6-vgv8-43m6.json b/advisories/unreviewed/2022/05/GHSA-vpm6-vgv8-43m6/GHSA-vpm6-vgv8-43m6.json index 33c3c552e36..69d9f703672 100644 --- a/advisories/unreviewed/2022/05/GHSA-vpm6-vgv8-43m6/GHSA-vpm6-vgv8-43m6.json +++ b/advisories/unreviewed/2022/05/GHSA-vpm6-vgv8-43m6/GHSA-vpm6-vgv8-43m6.json @@ -7,12 +7,8 @@ "CVE-2013-3871" ], "details": "Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vprv-729v-6368/GHSA-vprv-729v-6368.json b/advisories/unreviewed/2022/05/GHSA-vprv-729v-6368/GHSA-vprv-729v-6368.json index 43f23763d52..63a43be68e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-vprv-729v-6368/GHSA-vprv-729v-6368.json +++ b/advisories/unreviewed/2022/05/GHSA-vprv-729v-6368/GHSA-vprv-729v-6368.json @@ -7,12 +7,8 @@ "CVE-2014-0302" ], "details": "Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0303.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vq6p-j2rf-w8qx/GHSA-vq6p-j2rf-w8qx.json b/advisories/unreviewed/2022/05/GHSA-vq6p-j2rf-w8qx/GHSA-vq6p-j2rf-w8qx.json index 5aaf0065ce7..13ab8fd6e26 100644 --- a/advisories/unreviewed/2022/05/GHSA-vq6p-j2rf-w8qx/GHSA-vq6p-j2rf-w8qx.json +++ b/advisories/unreviewed/2022/05/GHSA-vq6p-j2rf-w8qx/GHSA-vq6p-j2rf-w8qx.json @@ -7,12 +7,8 @@ "CVE-2010-3231" ], "details": "Microsoft Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly validate record information, which allows remote attackers to execute arbitrary code via a crafted Excel document, aka \"Excel Record Parsing Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vq8v-vf65-r4f9/GHSA-vq8v-vf65-r4f9.json b/advisories/unreviewed/2022/05/GHSA-vq8v-vf65-r4f9/GHSA-vq8v-vf65-r4f9.json index 2113dc44e77..096d957db48 100644 --- a/advisories/unreviewed/2022/05/GHSA-vq8v-vf65-r4f9/GHSA-vq8v-vf65-r4f9.json +++ b/advisories/unreviewed/2022/05/GHSA-vq8v-vf65-r4f9/GHSA-vq8v-vf65-r4f9.json @@ -7,12 +7,8 @@ "CVE-2014-4126" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vqw8-5976-4q25/GHSA-vqw8-5976-4q25.json b/advisories/unreviewed/2022/05/GHSA-vqw8-5976-4q25/GHSA-vqw8-5976-4q25.json index b284202527d..eb4b584e563 100644 --- a/advisories/unreviewed/2022/05/GHSA-vqw8-5976-4q25/GHSA-vqw8-5976-4q25.json +++ b/advisories/unreviewed/2022/05/GHSA-vqw8-5976-4q25/GHSA-vqw8-5976-4q25.json @@ -7,12 +7,8 @@ "CVE-2013-3116" ], "details": "Microsoft Internet Explorer 7 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vrfx-g635-5jf3/GHSA-vrfx-g635-5jf3.json b/advisories/unreviewed/2022/05/GHSA-vrfx-g635-5jf3/GHSA-vrfx-g635-5jf3.json index a6ecd57f531..4198b23c491 100644 --- a/advisories/unreviewed/2022/05/GHSA-vrfx-g635-5jf3/GHSA-vrfx-g635-5jf3.json +++ b/advisories/unreviewed/2022/05/GHSA-vrfx-g635-5jf3/GHSA-vrfx-g635-5jf3.json @@ -7,12 +7,8 @@ "CVE-2013-3187" ], "details": "Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3191 and CVE-2013-3193.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vv9j-7mff-rxhr/GHSA-vv9j-7mff-rxhr.json b/advisories/unreviewed/2022/05/GHSA-vv9j-7mff-rxhr/GHSA-vv9j-7mff-rxhr.json index 0232f784464..f71bdb9b05a 100644 --- a/advisories/unreviewed/2022/05/GHSA-vv9j-7mff-rxhr/GHSA-vv9j-7mff-rxhr.json +++ b/advisories/unreviewed/2022/05/GHSA-vv9j-7mff-rxhr/GHSA-vv9j-7mff-rxhr.json @@ -7,12 +7,8 @@ "CVE-2012-3217" ], "details": "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.7.0 allows context-dependent attackers to affect availability, related to Outside In HTML Export SDK.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vvh9-8f9f-xrhx/GHSA-vvh9-8f9f-xrhx.json b/advisories/unreviewed/2022/05/GHSA-vvh9-8f9f-xrhx/GHSA-vvh9-8f9f-xrhx.json index c598610940e..8a9c5e1e409 100644 --- a/advisories/unreviewed/2022/05/GHSA-vvh9-8f9f-xrhx/GHSA-vvh9-8f9f-xrhx.json +++ b/advisories/unreviewed/2022/05/GHSA-vvh9-8f9f-xrhx/GHSA-vvh9-8f9f-xrhx.json @@ -7,12 +7,8 @@ "CVE-2013-1311" ], "details": "Use-after-free vulnerability in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer Use After Free Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vw5c-6ffv-p9gx/GHSA-vw5c-6ffv-p9gx.json b/advisories/unreviewed/2022/05/GHSA-vw5c-6ffv-p9gx/GHSA-vw5c-6ffv-p9gx.json index 4249a16cba0..61f0127e3ea 100644 --- a/advisories/unreviewed/2022/05/GHSA-vw5c-6ffv-p9gx/GHSA-vw5c-6ffv-p9gx.json +++ b/advisories/unreviewed/2022/05/GHSA-vw5c-6ffv-p9gx/GHSA-vw5c-6ffv-p9gx.json @@ -7,12 +7,8 @@ "CVE-2011-1278" ], "details": "Microsoft Excel 2002 SP3 and Office 2004 for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka \"Excel WriteAV Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vx7f-8j73-4jc3/GHSA-vx7f-8j73-4jc3.json b/advisories/unreviewed/2022/05/GHSA-vx7f-8j73-4jc3/GHSA-vx7f-8j73-4jc3.json index 47221f4c8f5..511069fc209 100644 --- a/advisories/unreviewed/2022/05/GHSA-vx7f-8j73-4jc3/GHSA-vx7f-8j73-4jc3.json +++ b/advisories/unreviewed/2022/05/GHSA-vx7f-8j73-4jc3/GHSA-vx7f-8j73-4jc3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w3h7-fwqx-3q6r/GHSA-w3h7-fwqx-3q6r.json b/advisories/unreviewed/2022/05/GHSA-w3h7-fwqx-3q6r/GHSA-w3h7-fwqx-3q6r.json index adb39ac7631..89555a35db6 100644 --- a/advisories/unreviewed/2022/05/GHSA-w3h7-fwqx-3q6r/GHSA-w3h7-fwqx-3q6r.json +++ b/advisories/unreviewed/2022/05/GHSA-w3h7-fwqx-3q6r/GHSA-w3h7-fwqx-3q6r.json @@ -7,12 +7,8 @@ "CVE-2013-3119" ], "details": "Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3114.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w44g-jhwj-2xp5/GHSA-w44g-jhwj-2xp5.json b/advisories/unreviewed/2022/05/GHSA-w44g-jhwj-2xp5/GHSA-w44g-jhwj-2xp5.json index 67f8e6e0a49..6b152c51832 100644 --- a/advisories/unreviewed/2022/05/GHSA-w44g-jhwj-2xp5/GHSA-w44g-jhwj-2xp5.json +++ b/advisories/unreviewed/2022/05/GHSA-w44g-jhwj-2xp5/GHSA-w44g-jhwj-2xp5.json @@ -7,12 +7,8 @@ "CVE-2014-1780" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1772, CVE-2014-1794, CVE-2014-1797, CVE-2014-1802, CVE-2014-2756, CVE-2014-2763, CVE-2014-2764, CVE-2014-2769, and CVE-2014-2771.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w4qj-wrcj-6hfm/GHSA-w4qj-wrcj-6hfm.json b/advisories/unreviewed/2022/05/GHSA-w4qj-wrcj-6hfm/GHSA-w4qj-wrcj-6hfm.json index 19a28e07cbe..9a5cd30e101 100644 --- a/advisories/unreviewed/2022/05/GHSA-w4qj-wrcj-6hfm/GHSA-w4qj-wrcj-6hfm.json +++ b/advisories/unreviewed/2022/05/GHSA-w4qj-wrcj-6hfm/GHSA-w4qj-wrcj-6hfm.json @@ -7,12 +7,8 @@ "CVE-2014-6343" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w596-84p7-5qvg/GHSA-w596-84p7-5qvg.json b/advisories/unreviewed/2022/05/GHSA-w596-84p7-5qvg/GHSA-w596-84p7-5qvg.json index 3cf205e3df3..4013d135eaa 100644 --- a/advisories/unreviewed/2022/05/GHSA-w596-84p7-5qvg/GHSA-w596-84p7-5qvg.json +++ b/advisories/unreviewed/2022/05/GHSA-w596-84p7-5qvg/GHSA-w596-84p7-5qvg.json @@ -7,12 +7,8 @@ "CVE-2015-0052" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-0027, CVE-2015-0035, CVE-2015-0039, and CVE-2015-0068.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w5cv-hg9g-38h9/GHSA-w5cv-hg9g-38h9.json b/advisories/unreviewed/2022/05/GHSA-w5cv-hg9g-38h9/GHSA-w5cv-hg9g-38h9.json index 513e62eeb75..d79ab4fc228 100644 --- a/advisories/unreviewed/2022/05/GHSA-w5cv-hg9g-38h9/GHSA-w5cv-hg9g-38h9.json +++ b/advisories/unreviewed/2022/05/GHSA-w5cv-hg9g-38h9/GHSA-w5cv-hg9g-38h9.json @@ -7,12 +7,8 @@ "CVE-2014-2788" ], "details": "Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2794.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w5f7-x6mf-vc7q/GHSA-w5f7-x6mf-vc7q.json b/advisories/unreviewed/2022/05/GHSA-w5f7-x6mf-vc7q/GHSA-w5f7-x6mf-vc7q.json index 332e0dcf9a6..551b91c58ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-w5f7-x6mf-vc7q/GHSA-w5f7-x6mf-vc7q.json +++ b/advisories/unreviewed/2022/05/GHSA-w5f7-x6mf-vc7q/GHSA-w5f7-x6mf-vc7q.json @@ -7,12 +7,8 @@ "CVE-2015-0072" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy and inject arbitrary web script or HTML via vectors involving an IFRAME element that triggers a redirect, a second IFRAME element that does not trigger a redirect, and an eval of a WindowProxy object, aka \"Universal XSS (UXSS).\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w5x2-fgv5-g2x7/GHSA-w5x2-fgv5-g2x7.json b/advisories/unreviewed/2022/05/GHSA-w5x2-fgv5-g2x7/GHSA-w5x2-fgv5-g2x7.json index edbf401fc51..1b9950a42b2 100644 --- a/advisories/unreviewed/2022/05/GHSA-w5x2-fgv5-g2x7/GHSA-w5x2-fgv5-g2x7.json +++ b/advisories/unreviewed/2022/05/GHSA-w5x2-fgv5-g2x7/GHSA-w5x2-fgv5-g2x7.json @@ -7,12 +7,8 @@ "CVE-2012-2552" ], "details": "Cross-site scripting (XSS) vulnerability in the SQL Server Report Manager in Microsoft SQL Server 2000 Reporting Services SP2 and SQL Server 2005 SP4, 2008 SP2 and SP3, 2008 R2 SP1, and 2012 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka \"Reflected XSS Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w6j3-38wv-jp2v/GHSA-w6j3-38wv-jp2v.json b/advisories/unreviewed/2022/05/GHSA-w6j3-38wv-jp2v/GHSA-w6j3-38wv-jp2v.json index 65c47402474..6bc52db7ee8 100644 --- a/advisories/unreviewed/2022/05/GHSA-w6j3-38wv-jp2v/GHSA-w6j3-38wv-jp2v.json +++ b/advisories/unreviewed/2022/05/GHSA-w6j3-38wv-jp2v/GHSA-w6j3-38wv-jp2v.json @@ -7,12 +7,8 @@ "CVE-2013-1289" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2010 SP1, Groove Server 2010 SP1, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka \"HTML Sanitization Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w6mm-w2fx-6942/GHSA-w6mm-w2fx-6942.json b/advisories/unreviewed/2022/05/GHSA-w6mm-w2fx-6942/GHSA-w6mm-w2fx-6942.json index 29cb9a1f80c..c791cfe78db 100644 --- a/advisories/unreviewed/2022/05/GHSA-w6mm-w2fx-6942/GHSA-w6mm-w2fx-6942.json +++ b/advisories/unreviewed/2022/05/GHSA-w6mm-w2fx-6942/GHSA-w6mm-w2fx-6942.json @@ -7,12 +7,8 @@ "CVE-2011-1892" ], "details": "Microsoft Office Groove 2007 SP2, SharePoint Workspace 2010 Gold and SP1, Office Forms Server 2007 SP2, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Office Groove Data Bridge Server 2007 SP2, Office Groove Management Server 2007 SP2, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010, and Office Web Apps 2010 Gold and SP1 do not properly handle Web Parts containing XML classes referencing external entities, which allows remote authenticated users to read arbitrary files via a crafted XML and XSL file, aka \"SharePoint Remote File Disclosure Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w762-923q-54xp/GHSA-w762-923q-54xp.json b/advisories/unreviewed/2022/05/GHSA-w762-923q-54xp/GHSA-w762-923q-54xp.json index dd914756ec3..569d0f334ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-w762-923q-54xp/GHSA-w762-923q-54xp.json +++ b/advisories/unreviewed/2022/05/GHSA-w762-923q-54xp/GHSA-w762-923q-54xp.json @@ -7,12 +7,8 @@ "CVE-2014-2769" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1772, CVE-2014-1780, CVE-2014-1794, CVE-2014-1797, CVE-2014-1802, CVE-2014-2756, CVE-2014-2763, CVE-2014-2764, and CVE-2014-2771.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w8rw-vmw9-xgv5/GHSA-w8rw-vmw9-xgv5.json b/advisories/unreviewed/2022/05/GHSA-w8rw-vmw9-xgv5/GHSA-w8rw-vmw9-xgv5.json index 285c0d647c4..afaf8c8ed87 100644 --- a/advisories/unreviewed/2022/05/GHSA-w8rw-vmw9-xgv5/GHSA-w8rw-vmw9-xgv5.json +++ b/advisories/unreviewed/2022/05/GHSA-w8rw-vmw9-xgv5/GHSA-w8rw-vmw9-xgv5.json @@ -7,12 +7,8 @@ "CVE-2014-2809" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2800 and CVE-2014-2807.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w943-vcxv-3q76/GHSA-w943-vcxv-3q76.json b/advisories/unreviewed/2022/05/GHSA-w943-vcxv-3q76/GHSA-w943-vcxv-3q76.json index 49c08649ef8..770fcfe5a01 100644 --- a/advisories/unreviewed/2022/05/GHSA-w943-vcxv-3q76/GHSA-w943-vcxv-3q76.json +++ b/advisories/unreviewed/2022/05/GHSA-w943-vcxv-3q76/GHSA-w943-vcxv-3q76.json @@ -7,12 +7,8 @@ "CVE-2013-3117" ], "details": "Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3122 and CVE-2013-3124.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w9f7-4222-fm66/GHSA-w9f7-4222-fm66.json b/advisories/unreviewed/2022/05/GHSA-w9f7-4222-fm66/GHSA-w9f7-4222-fm66.json index 6d9544ffcbe..b8a36722859 100644 --- a/advisories/unreviewed/2022/05/GHSA-w9f7-4222-fm66/GHSA-w9f7-4222-fm66.json +++ b/advisories/unreviewed/2022/05/GHSA-w9f7-4222-fm66/GHSA-w9f7-4222-fm66.json @@ -7,12 +7,8 @@ "CVE-2014-1820" ], "details": "Cross-site scripting (XSS) vulnerability in Master Data Services (MDS) in Microsoft SQL Server 2012 SP1 and 2014 on 64-bit platforms allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka \"SQL Master Data Services XSS Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w9xp-m698-j48g/GHSA-w9xp-m698-j48g.json b/advisories/unreviewed/2022/05/GHSA-w9xp-m698-j48g/GHSA-w9xp-m698-j48g.json index ee98cfe650e..90aa0a859c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-w9xp-m698-j48g/GHSA-w9xp-m698-j48g.json +++ b/advisories/unreviewed/2022/05/GHSA-w9xp-m698-j48g/GHSA-w9xp-m698-j48g.json @@ -7,12 +7,8 @@ "CVE-2013-3137" ], "details": "Microsoft FrontPage 2003 SP3 does not properly parse DTDs, which allows remote attackers to obtain sensitive information via crafted XML data in a FrontPage document, aka \"XML Disclosure Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wc85-vmm5-82j2/GHSA-wc85-vmm5-82j2.json b/advisories/unreviewed/2022/05/GHSA-wc85-vmm5-82j2/GHSA-wc85-vmm5-82j2.json index 26a31365422..04c1308fb86 100644 --- a/advisories/unreviewed/2022/05/GHSA-wc85-vmm5-82j2/GHSA-wc85-vmm5-82j2.json +++ b/advisories/unreviewed/2022/05/GHSA-wc85-vmm5-82j2/GHSA-wc85-vmm5-82j2.json @@ -7,12 +7,8 @@ "CVE-2014-0280" ], "details": "Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wcgc-p58p-xr65/GHSA-wcgc-p58p-xr65.json b/advisories/unreviewed/2022/05/GHSA-wcgc-p58p-xr65/GHSA-wcgc-p58p-xr65.json index 74c091fbff9..95df6dd4d01 100644 --- a/advisories/unreviewed/2022/05/GHSA-wcgc-p58p-xr65/GHSA-wcgc-p58p-xr65.json +++ b/advisories/unreviewed/2022/05/GHSA-wcgc-p58p-xr65/GHSA-wcgc-p58p-xr65.json @@ -7,12 +7,8 @@ "CVE-2014-4059" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2799, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wcj9-qvpq-7gwq/GHSA-wcj9-qvpq-7gwq.json b/advisories/unreviewed/2022/05/GHSA-wcj9-qvpq-7gwq/GHSA-wcj9-qvpq-7gwq.json index ac264133290..bc68d340f73 100644 --- a/advisories/unreviewed/2022/05/GHSA-wcj9-qvpq-7gwq/GHSA-wcj9-qvpq-7gwq.json +++ b/advisories/unreviewed/2022/05/GHSA-wcj9-qvpq-7gwq/GHSA-wcj9-qvpq-7gwq.json @@ -7,12 +7,8 @@ "CVE-2014-4076" ], "details": "Microsoft Windows Server 2003 SP2 allows local users to gain privileges via a crafted IOCTL call to (1) tcpip.sys or (2) tcpip6.sys, aka \"TCP/IP Elevation of Privilege Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wcw7-2xp7-h88h/GHSA-wcw7-2xp7-h88h.json b/advisories/unreviewed/2022/05/GHSA-wcw7-2xp7-h88h/GHSA-wcw7-2xp7-h88h.json index 5c6a091322c..087caa4d1fe 100644 --- a/advisories/unreviewed/2022/05/GHSA-wcw7-2xp7-h88h/GHSA-wcw7-2xp7-h88h.json +++ b/advisories/unreviewed/2022/05/GHSA-wcw7-2xp7-h88h/GHSA-wcw7-2xp7-h88h.json @@ -7,12 +7,8 @@ "CVE-2013-3895" ], "details": "Microsoft SharePoint Server 2007 SP3 and 2010 SP1 and SP2 allows remote attackers to conduct clickjacking attacks via a crafted web page, aka \"Parameter Injection Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wf9w-grc4-5pff/GHSA-wf9w-grc4-5pff.json b/advisories/unreviewed/2022/05/GHSA-wf9w-grc4-5pff/GHSA-wf9w-grc4-5pff.json index 97d3e1391a1..0a230957db6 100644 --- a/advisories/unreviewed/2022/05/GHSA-wf9w-grc4-5pff/GHSA-wf9w-grc4-5pff.json +++ b/advisories/unreviewed/2022/05/GHSA-wf9w-grc4-5pff/GHSA-wf9w-grc4-5pff.json @@ -7,12 +7,8 @@ "CVE-2010-3223" ], "details": "The user interface in Microsoft Cluster Service (MSCS) in Microsoft Windows Server 2008 R2 does not properly set administrative-share permissions for new cluster disks that are shared as part of a failover cluster, which allows remote attackers to read or modify data on these disks via requests to the associated share, aka \"Permissions on New Cluster Disks Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wh27-j22v-qpxj/GHSA-wh27-j22v-qpxj.json b/advisories/unreviewed/2022/05/GHSA-wh27-j22v-qpxj/GHSA-wh27-j22v-qpxj.json index 11c423043db..8ffc8256055 100644 --- a/advisories/unreviewed/2022/05/GHSA-wh27-j22v-qpxj/GHSA-wh27-j22v-qpxj.json +++ b/advisories/unreviewed/2022/05/GHSA-wh27-j22v-qpxj/GHSA-wh27-j22v-qpxj.json @@ -7,12 +7,8 @@ "CVE-2014-0312" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0297, CVE-2014-0308, and CVE-2014-0324.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wh5r-m2hg-jcv2/GHSA-wh5r-m2hg-jcv2.json b/advisories/unreviewed/2022/05/GHSA-wh5r-m2hg-jcv2/GHSA-wh5r-m2hg-jcv2.json index 24c2a459cd6..d046d761c56 100644 --- a/advisories/unreviewed/2022/05/GHSA-wh5r-m2hg-jcv2/GHSA-wh5r-m2hg-jcv2.json +++ b/advisories/unreviewed/2022/05/GHSA-wh5r-m2hg-jcv2/GHSA-wh5r-m2hg-jcv2.json @@ -7,12 +7,8 @@ "CVE-2014-4132" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-4130 and CVE-2014-4138.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wh9j-x3x7-8vvf/GHSA-wh9j-x3x7-8vvf.json b/advisories/unreviewed/2022/05/GHSA-wh9j-x3x7-8vvf/GHSA-wh9j-x3x7-8vvf.json index 35d3e209a43..b9afc21437d 100644 --- a/advisories/unreviewed/2022/05/GHSA-wh9j-x3x7-8vvf/GHSA-wh9j-x3x7-8vvf.json +++ b/advisories/unreviewed/2022/05/GHSA-wh9j-x3x7-8vvf/GHSA-wh9j-x3x7-8vvf.json @@ -7,12 +7,8 @@ "CVE-2014-1802" ], "details": "Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1772, CVE-2014-1780, CVE-2014-1794, CVE-2014-1797, CVE-2014-2756, CVE-2014-2763, CVE-2014-2764, CVE-2014-2769, and CVE-2014-2771.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-whxp-g4qm-8ppv/GHSA-whxp-g4qm-8ppv.json b/advisories/unreviewed/2022/05/GHSA-whxp-g4qm-8ppv/GHSA-whxp-g4qm-8ppv.json index 9f5118935f0..7bebeea2328 100644 --- a/advisories/unreviewed/2022/05/GHSA-whxp-g4qm-8ppv/GHSA-whxp-g4qm-8ppv.json +++ b/advisories/unreviewed/2022/05/GHSA-whxp-g4qm-8ppv/GHSA-whxp-g4qm-8ppv.json @@ -7,12 +7,8 @@ "CVE-2014-4087" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-4095, CVE-2014-4096, and CVE-2014-4101.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wmj3-6f92-4j8h/GHSA-wmj3-6f92-4j8h.json b/advisories/unreviewed/2022/05/GHSA-wmj3-6f92-4j8h/GHSA-wmj3-6f92-4j8h.json index adbdd60799f..d8fa3f09d10 100644 --- a/advisories/unreviewed/2022/05/GHSA-wmj3-6f92-4j8h/GHSA-wmj3-6f92-4j8h.json +++ b/advisories/unreviewed/2022/05/GHSA-wmj3-6f92-4j8h/GHSA-wmj3-6f92-4j8h.json @@ -7,12 +7,8 @@ "CVE-2015-0043" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wq8c-wq2j-4f84/GHSA-wq8c-wq2j-4f84.json b/advisories/unreviewed/2022/05/GHSA-wq8c-wq2j-4f84/GHSA-wq8c-wq2j-4f84.json index e3e0bc09ef3..570e1379b85 100644 --- a/advisories/unreviewed/2022/05/GHSA-wq8c-wq2j-4f84/GHSA-wq8c-wq2j-4f84.json +++ b/advisories/unreviewed/2022/05/GHSA-wq8c-wq2j-4f84/GHSA-wq8c-wq2j-4f84.json @@ -7,12 +7,8 @@ "CVE-2014-4085" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wr74-rxv7-fpwq/GHSA-wr74-rxv7-fpwq.json b/advisories/unreviewed/2022/05/GHSA-wr74-rxv7-fpwq/GHSA-wr74-rxv7-fpwq.json index 8d4b7448888..70541751ce7 100644 --- a/advisories/unreviewed/2022/05/GHSA-wr74-rxv7-fpwq/GHSA-wr74-rxv7-fpwq.json +++ b/advisories/unreviewed/2022/05/GHSA-wr74-rxv7-fpwq/GHSA-wr74-rxv7-fpwq.json @@ -7,12 +7,8 @@ "CVE-2014-1769" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1782, CVE-2014-1785, CVE-2014-2753, CVE-2014-2755, CVE-2014-2760, CVE-2014-2761, CVE-2014-2772, and CVE-2014-2776.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wrh2-7cr8-4g68/GHSA-wrh2-7cr8-4g68.json b/advisories/unreviewed/2022/05/GHSA-wrh2-7cr8-4g68/GHSA-wrh2-7cr8-4g68.json index 94fdace59d3..52c493783f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-wrh2-7cr8-4g68/GHSA-wrh2-7cr8-4g68.json +++ b/advisories/unreviewed/2022/05/GHSA-wrh2-7cr8-4g68/GHSA-wrh2-7cr8-4g68.json @@ -7,12 +7,8 @@ "CVE-2014-4109" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4083, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4110, and CVE-2014-4111.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wrmv-c556-947x/GHSA-wrmv-c556-947x.json b/advisories/unreviewed/2022/05/GHSA-wrmv-c556-947x/GHSA-wrmv-c556-947x.json index 11ec038c316..c0e3c7b4d79 100644 --- a/advisories/unreviewed/2022/05/GHSA-wrmv-c556-947x/GHSA-wrmv-c556-947x.json +++ b/advisories/unreviewed/2022/05/GHSA-wrmv-c556-947x/GHSA-wrmv-c556-947x.json @@ -7,12 +7,8 @@ "CVE-2014-0295" ], "details": "VsaVb7rt.dll in Microsoft .NET Framework 2.0 SP2 and 3.5.1 does not implement the ASLR protection mechanism, which makes it easier for remote attackers to execute arbitrary code via a crafted web site, as exploited in the wild in February 2014, aka \"VSAVB7RT ASLR Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wvqj-77gq-2677/GHSA-wvqj-77gq-2677.json b/advisories/unreviewed/2022/05/GHSA-wvqj-77gq-2677/GHSA-wvqj-77gq-2677.json index 07d1180c1ae..e42da8231fa 100644 --- a/advisories/unreviewed/2022/05/GHSA-wvqj-77gq-2677/GHSA-wvqj-77gq-2677.json +++ b/advisories/unreviewed/2022/05/GHSA-wvqj-77gq-2677/GHSA-wvqj-77gq-2677.json @@ -7,12 +7,8 @@ "CVE-2014-6325" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft Exchange Server 2013 SP1 and Cumulative Update 6 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka \"OWA XSS Vulnerability,\" a different vulnerability than CVE-2014-6326.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wwqq-9p8j-6w8g/GHSA-wwqq-9p8j-6w8g.json b/advisories/unreviewed/2022/05/GHSA-wwqq-9p8j-6w8g/GHSA-wwqq-9p8j-6w8g.json index 271089415bf..9f57b19785c 100644 --- a/advisories/unreviewed/2022/05/GHSA-wwqq-9p8j-6w8g/GHSA-wwqq-9p8j-6w8g.json +++ b/advisories/unreviewed/2022/05/GHSA-wwqq-9p8j-6w8g/GHSA-wwqq-9p8j-6w8g.json @@ -7,12 +7,8 @@ "CVE-2014-6362" ], "details": "Use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, and 2013 Gold and SP1 allows remote attackers to bypass the ASLR protection mechanism via a crafted document, aka \"Microsoft Office Component Use After Free Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wx27-qc7w-cv7c/GHSA-wx27-qc7w-cv7c.json b/advisories/unreviewed/2022/05/GHSA-wx27-qc7w-cv7c/GHSA-wx27-qc7w-cv7c.json index dd0954e8f20..dde2a819eb5 100644 --- a/advisories/unreviewed/2022/05/GHSA-wx27-qc7w-cv7c/GHSA-wx27-qc7w-cv7c.json +++ b/advisories/unreviewed/2022/05/GHSA-wx27-qc7w-cv7c/GHSA-wx27-qc7w-cv7c.json @@ -7,12 +7,8 @@ "CVE-2013-4015" ], "details": "Microsoft Internet Explorer 6 through 10 allows local users to bypass the elevation policy check in the (1) Protected Mode or (2) Enhanced Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wx94-688q-j9x8/GHSA-wx94-688q-j9x8.json b/advisories/unreviewed/2022/05/GHSA-wx94-688q-j9x8/GHSA-wx94-688q-j9x8.json index d711fa40bf0..0f60e17084e 100644 --- a/advisories/unreviewed/2022/05/GHSA-wx94-688q-j9x8/GHSA-wx94-688q-j9x8.json +++ b/advisories/unreviewed/2022/05/GHSA-wx94-688q-j9x8/GHSA-wx94-688q-j9x8.json @@ -7,12 +7,8 @@ "CVE-2011-0980" ], "details": "Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse Office Art objects, which allows remote attackers to execute arbitrary code via vectors related to a function pointer, aka \"Excel Dangling Pointer Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wxrw-ch3w-xwpr/GHSA-wxrw-ch3w-xwpr.json b/advisories/unreviewed/2022/05/GHSA-wxrw-ch3w-xwpr/GHSA-wxrw-ch3w-xwpr.json index d5370d02993..059133d5e51 100644 --- a/advisories/unreviewed/2022/05/GHSA-wxrw-ch3w-xwpr/GHSA-wxrw-ch3w-xwpr.json +++ b/advisories/unreviewed/2022/05/GHSA-wxrw-ch3w-xwpr/GHSA-wxrw-ch3w-xwpr.json @@ -7,12 +7,8 @@ "CVE-2014-4078" ], "details": "The IP Security feature in Microsoft Internet Information Services (IIS) 8.0 and 8.5 does not properly process wildcard allow and deny rules for domains within the \"IP Address and Domain Restrictions\" list, which makes it easier for remote attackers to bypass an intended rule set via an HTTP request, aka \"IIS Security Feature Bypass Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x245-48fg-cvjq/GHSA-x245-48fg-cvjq.json b/advisories/unreviewed/2022/05/GHSA-x245-48fg-cvjq/GHSA-x245-48fg-cvjq.json index a838ca406ff..04ca0a9e79e 100644 --- a/advisories/unreviewed/2022/05/GHSA-x245-48fg-cvjq/GHSA-x245-48fg-cvjq.json +++ b/advisories/unreviewed/2022/05/GHSA-x245-48fg-cvjq/GHSA-x245-48fg-cvjq.json @@ -7,12 +7,8 @@ "CVE-2015-0041" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-0017, CVE-2015-0020, CVE-2015-0022, CVE-2015-0026, CVE-2015-0030, CVE-2015-0031, and CVE-2015-0036.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x2mx-36p7-34r5/GHSA-x2mx-36p7-34r5.json b/advisories/unreviewed/2022/05/GHSA-x2mx-36p7-34r5/GHSA-x2mx-36p7-34r5.json index 4bcc8aa4950..ed18535bf92 100644 --- a/advisories/unreviewed/2022/05/GHSA-x2mx-36p7-34r5/GHSA-x2mx-36p7-34r5.json +++ b/advisories/unreviewed/2022/05/GHSA-x2mx-36p7-34r5/GHSA-x2mx-36p7-34r5.json @@ -7,12 +7,8 @@ "CVE-2013-3875" ], "details": "Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x36h-vw8q-xggm/GHSA-x36h-vw8q-xggm.json b/advisories/unreviewed/2022/05/GHSA-x36h-vw8q-xggm/GHSA-x36h-vw8q-xggm.json index 6e3f4f94412..a1ce91a9fb1 100644 --- a/advisories/unreviewed/2022/05/GHSA-x36h-vw8q-xggm/GHSA-x36h-vw8q-xggm.json +++ b/advisories/unreviewed/2022/05/GHSA-x36h-vw8q-xggm/GHSA-x36h-vw8q-xggm.json @@ -7,12 +7,8 @@ "CVE-2014-2810" ], "details": "Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2811, CVE-2014-2822, CVE-2014-2823, and CVE-2014-4057.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x384-p6fm-q24w/GHSA-x384-p6fm-q24w.json b/advisories/unreviewed/2022/05/GHSA-x384-p6fm-q24w/GHSA-x384-p6fm-q24w.json index e29fb042184..316af986b36 100644 --- a/advisories/unreviewed/2022/05/GHSA-x384-p6fm-q24w/GHSA-x384-p6fm-q24w.json +++ b/advisories/unreviewed/2022/05/GHSA-x384-p6fm-q24w/GHSA-x384-p6fm-q24w.json @@ -7,12 +7,8 @@ "CVE-2014-1771" ], "details": "SChannel in Microsoft Internet Explorer 6 through 11 does not ensure that a server's X.509 certificate is the same during renegotiation as it was before renegotiation, which allows man-in-the-middle attackers to obtain sensitive information or modify TLS session data via a \"triple handshake attack,\" aka \"TLS Server Certificate Renegotiation Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x38c-xq6c-937h/GHSA-x38c-xq6c-937h.json b/advisories/unreviewed/2022/05/GHSA-x38c-xq6c-937h/GHSA-x38c-xq6c-937h.json index c825571ed5d..276983c9633 100644 --- a/advisories/unreviewed/2022/05/GHSA-x38c-xq6c-937h/GHSA-x38c-xq6c-937h.json +++ b/advisories/unreviewed/2022/05/GHSA-x38c-xq6c-937h/GHSA-x38c-xq6c-937h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x4qf-4j36-qp5x/GHSA-x4qf-4j36-qp5x.json b/advisories/unreviewed/2022/05/GHSA-x4qf-4j36-qp5x/GHSA-x4qf-4j36-qp5x.json index f6d043b5152..fbc825c4a51 100644 --- a/advisories/unreviewed/2022/05/GHSA-x4qf-4j36-qp5x/GHSA-x4qf-4j36-qp5x.json +++ b/advisories/unreviewed/2022/05/GHSA-x4qf-4j36-qp5x/GHSA-x4qf-4j36-qp5x.json @@ -7,12 +7,8 @@ "CVE-2014-0257" ], "details": "Microsoft .NET Framework 1.0 SP3, 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, and 4.5.1 does not properly determine whether it is safe to execute a method, which allows remote attackers to execute arbitrary code via (1) a crafted web site or (2) a crafted .NET Framework application that exposes a COM server endpoint, aka \"Type Traversal Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x69g-4xxh-vgmc/GHSA-x69g-4xxh-vgmc.json b/advisories/unreviewed/2022/05/GHSA-x69g-4xxh-vgmc/GHSA-x69g-4xxh-vgmc.json index 0b2bf46f048..f1341dc1fbb 100644 --- a/advisories/unreviewed/2022/05/GHSA-x69g-4xxh-vgmc/GHSA-x69g-4xxh-vgmc.json +++ b/advisories/unreviewed/2022/05/GHSA-x69g-4xxh-vgmc/GHSA-x69g-4xxh-vgmc.json @@ -7,12 +7,8 @@ "CVE-2013-3133" ], "details": "Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, and 4.5 does not properly check the permissions of objects that use reflection, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application, aka \"Anonymous Method Injection Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x6g8-r436-7qmg/GHSA-x6g8-r436-7qmg.json b/advisories/unreviewed/2022/05/GHSA-x6g8-r436-7qmg/GHSA-x6g8-r436-7qmg.json index 21e0fa6de5a..5af226d3077 100644 --- a/advisories/unreviewed/2022/05/GHSA-x6g8-r436-7qmg/GHSA-x6g8-r436-7qmg.json +++ b/advisories/unreviewed/2022/05/GHSA-x6g8-r436-7qmg/GHSA-x6g8-r436-7qmg.json @@ -7,12 +7,8 @@ "CVE-2013-3171" ], "details": "The serialization functionality in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 does not properly check the permissions of delegate objects, which allows remote attackers to execute arbitrary code via (1) a crafted XAML browser application (XBAP) or (2) a crafted .NET Framework application that leverages a partial-trust relationship, aka \"Delegate Serialization Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x6pw-cr36-fr76/GHSA-x6pw-cr36-fr76.json b/advisories/unreviewed/2022/05/GHSA-x6pw-cr36-fr76/GHSA-x6pw-cr36-fr76.json index 5140cf0fefc..579ea230cf2 100644 --- a/advisories/unreviewed/2022/05/GHSA-x6pw-cr36-fr76/GHSA-x6pw-cr36-fr76.json +++ b/advisories/unreviewed/2022/05/GHSA-x6pw-cr36-fr76/GHSA-x6pw-cr36-fr76.json @@ -7,12 +7,8 @@ "CVE-2012-2520" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and 2010 Attendee, SharePoint Server 2007 SP2 and SP3 and 2010 SP1, Groove Server 2010 SP1, Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka \"HTML Sanitization Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x6r4-v6w5-36cr/GHSA-x6r4-v6w5-36cr.json b/advisories/unreviewed/2022/05/GHSA-x6r4-v6w5-36cr/GHSA-x6r4-v6w5-36cr.json index 09c1b5f79be..4c7a8677a9e 100644 --- a/advisories/unreviewed/2022/05/GHSA-x6r4-v6w5-36cr/GHSA-x6r4-v6w5-36cr.json +++ b/advisories/unreviewed/2022/05/GHSA-x6r4-v6w5-36cr/GHSA-x6r4-v6w5-36cr.json @@ -7,12 +7,8 @@ "CVE-2014-0282" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1775, CVE-2014-1779, CVE-2014-1799, CVE-2014-1803, and CVE-2014-2757.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x6xc-h4vp-m33r/GHSA-x6xc-h4vp-m33r.json b/advisories/unreviewed/2022/05/GHSA-x6xc-h4vp-m33r/GHSA-x6xc-h4vp-m33r.json index db6aeea65b1..735b594684c 100644 --- a/advisories/unreviewed/2022/05/GHSA-x6xc-h4vp-m33r/GHSA-x6xc-h4vp-m33r.json +++ b/advisories/unreviewed/2022/05/GHSA-x6xc-h4vp-m33r/GHSA-x6xc-h4vp-m33r.json @@ -7,12 +7,8 @@ "CVE-2014-0288" ], "details": "Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0270, CVE-2014-0273, and CVE-2014-0274.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x72v-qfmw-qxf3/GHSA-x72v-qfmw-qxf3.json b/advisories/unreviewed/2022/05/GHSA-x72v-qfmw-qxf3/GHSA-x72v-qfmw-qxf3.json index 9f0c5e4f324..b3f09516074 100644 --- a/advisories/unreviewed/2022/05/GHSA-x72v-qfmw-qxf3/GHSA-x72v-qfmw-qxf3.json +++ b/advisories/unreviewed/2022/05/GHSA-x72v-qfmw-qxf3/GHSA-x72v-qfmw-qxf3.json @@ -7,12 +7,8 @@ "CVE-2015-0023" ], "details": "Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2015-0025.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x8jq-rqf8-3j6h/GHSA-x8jq-rqf8-3j6h.json b/advisories/unreviewed/2022/05/GHSA-x8jq-rqf8-3j6h/GHSA-x8jq-rqf8-3j6h.json index b4f60c51ca1..be8f17a61bf 100644 --- a/advisories/unreviewed/2022/05/GHSA-x8jq-rqf8-3j6h/GHSA-x8jq-rqf8-3j6h.json +++ b/advisories/unreviewed/2022/05/GHSA-x8jq-rqf8-3j6h/GHSA-x8jq-rqf8-3j6h.json @@ -7,12 +7,8 @@ "CVE-2014-4083" ], "details": "Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-2799, CVE-2014-4059, CVE-2014-4065, CVE-2014-4079, CVE-2014-4081, CVE-2014-4085, CVE-2014-4088, CVE-2014-4090, CVE-2014-4094, CVE-2014-4097, CVE-2014-4100, CVE-2014-4103, CVE-2014-4104, CVE-2014-4105, CVE-2014-4106, CVE-2014-4107, CVE-2014-4108, CVE-2014-4109, CVE-2014-4110, and CVE-2014-4111.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x96g-8jx5-576q/GHSA-x96g-8jx5-576q.json b/advisories/unreviewed/2022/05/GHSA-x96g-8jx5-576q/GHSA-x96g-8jx5-576q.json index 0dea39e0a5e..57a3f32f239 100644 --- a/advisories/unreviewed/2022/05/GHSA-x96g-8jx5-576q/GHSA-x96g-8jx5-576q.json +++ b/advisories/unreviewed/2022/05/GHSA-x96g-8jx5-576q/GHSA-x96g-8jx5-576q.json @@ -7,12 +7,8 @@ "CVE-2014-0278" ], "details": "Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0277 and CVE-2014-0279.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x9gw-pc8p-gmgg/GHSA-x9gw-pc8p-gmgg.json b/advisories/unreviewed/2022/05/GHSA-x9gw-pc8p-gmgg/GHSA-x9gw-pc8p-gmgg.json index 8a653ba8168..e748205435b 100644 --- a/advisories/unreviewed/2022/05/GHSA-x9gw-pc8p-gmgg/GHSA-x9gw-pc8p-gmgg.json +++ b/advisories/unreviewed/2022/05/GHSA-x9gw-pc8p-gmgg/GHSA-x9gw-pc8p-gmgg.json @@ -7,12 +7,8 @@ "CVE-2013-1310" ], "details": "Use-after-free vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"Internet Explorer Use After Free Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x9jq-vvh6-6mr6/GHSA-x9jq-vvh6-6mr6.json b/advisories/unreviewed/2022/05/GHSA-x9jq-vvh6-6mr6/GHSA-x9jq-vvh6-6mr6.json index 4f9c57c175d..34987f3290c 100644 --- a/advisories/unreviewed/2022/05/GHSA-x9jq-vvh6-6mr6/GHSA-x9jq-vvh6-6mr6.json +++ b/advisories/unreviewed/2022/05/GHSA-x9jq-vvh6-6mr6/GHSA-x9jq-vvh6-6mr6.json @@ -7,12 +7,8 @@ "CVE-2013-3164" ], "details": "Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x9pf-29qm-7xf4/GHSA-x9pf-29qm-7xf4.json b/advisories/unreviewed/2022/05/GHSA-x9pf-29qm-7xf4/GHSA-x9pf-29qm-7xf4.json index 60f70762c77..376a54dad3b 100644 --- a/advisories/unreviewed/2022/05/GHSA-x9pf-29qm-7xf4/GHSA-x9pf-29qm-7xf4.json +++ b/advisories/unreviewed/2022/05/GHSA-x9pf-29qm-7xf4/GHSA-x9pf-29qm-7xf4.json @@ -7,12 +7,8 @@ "CVE-2014-0281" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0287.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x9rc-5q22-7m3g/GHSA-x9rc-5q22-7m3g.json b/advisories/unreviewed/2022/05/GHSA-x9rc-5q22-7m3g/GHSA-x9rc-5q22-7m3g.json index 674c1fbbddf..7217fb08c9e 100644 --- a/advisories/unreviewed/2022/05/GHSA-x9rc-5q22-7m3g/GHSA-x9rc-5q22-7m3g.json +++ b/advisories/unreviewed/2022/05/GHSA-x9rc-5q22-7m3g/GHSA-x9rc-5q22-7m3g.json @@ -7,12 +7,8 @@ "CVE-2013-3157" ], "details": "Microsoft Access 2007 SP3, 2010 SP1 and SP2, and 2013 in Microsoft Office allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Access file, aka \"Access Memory Corruption Vulnerability,\" a different vulnerability than CVE-2013-3155.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x9xf-h4qw-8mrh/GHSA-x9xf-h4qw-8mrh.json b/advisories/unreviewed/2022/05/GHSA-x9xf-h4qw-8mrh/GHSA-x9xf-h4qw-8mrh.json index 9a3e6c43ad3..05ce8710588 100644 --- a/advisories/unreviewed/2022/05/GHSA-x9xf-h4qw-8mrh/GHSA-x9xf-h4qw-8mrh.json +++ b/advisories/unreviewed/2022/05/GHSA-x9xf-h4qw-8mrh/GHSA-x9xf-h4qw-8mrh.json @@ -7,12 +7,8 @@ "CVE-2013-3874" ], "details": "Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xfjm-p2hj-x3rp/GHSA-xfjm-p2hj-x3rp.json b/advisories/unreviewed/2022/05/GHSA-xfjm-p2hj-x3rp/GHSA-xfjm-p2hj-x3rp.json index 0af6fcfb58a..fc1d04d6e41 100644 --- a/advisories/unreviewed/2022/05/GHSA-xfjm-p2hj-x3rp/GHSA-xfjm-p2hj-x3rp.json +++ b/advisories/unreviewed/2022/05/GHSA-xfjm-p2hj-x3rp/GHSA-xfjm-p2hj-x3rp.json @@ -7,12 +7,8 @@ "CVE-2011-0104" ], "details": "Microsoft Excel 2002 SP3 and 2003 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HLink record in an Excel file, aka \"Excel Buffer Overwrite Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xgcg-j829-ppxg/GHSA-xgcg-j829-ppxg.json b/advisories/unreviewed/2022/05/GHSA-xgcg-j829-ppxg/GHSA-xgcg-j829-ppxg.json index d097812bbfe..27aa88a1217 100644 --- a/advisories/unreviewed/2022/05/GHSA-xgcg-j829-ppxg/GHSA-xgcg-j829-ppxg.json +++ b/advisories/unreviewed/2022/05/GHSA-xgcg-j829-ppxg/GHSA-xgcg-j829-ppxg.json @@ -7,12 +7,8 @@ "CVE-2014-6373" ], "details": "Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xh59-j4jj-m2qp/GHSA-xh59-j4jj-m2qp.json b/advisories/unreviewed/2022/05/GHSA-xh59-j4jj-m2qp/GHSA-xh59-j4jj-m2qp.json index 37fa8534bcd..3ffcfedf727 100644 --- a/advisories/unreviewed/2022/05/GHSA-xh59-j4jj-m2qp/GHSA-xh59-j4jj-m2qp.json +++ b/advisories/unreviewed/2022/05/GHSA-xh59-j4jj-m2qp/GHSA-xh59-j4jj-m2qp.json @@ -7,12 +7,8 @@ "CVE-2012-4781" ], "details": "Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka \"InjectHTMLStream Use After Free Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xhc3-g335-68h3/GHSA-xhc3-g335-68h3.json b/advisories/unreviewed/2022/05/GHSA-xhc3-g335-68h3/GHSA-xhc3-g335-68h3.json index 1379f914a7a..3aab2cc198d 100644 --- a/advisories/unreviewed/2022/05/GHSA-xhc3-g335-68h3/GHSA-xhc3-g335-68h3.json +++ b/advisories/unreviewed/2022/05/GHSA-xhc3-g335-68h3/GHSA-xhc3-g335-68h3.json @@ -7,12 +7,8 @@ "CVE-2014-6356" ], "details": "Array index error in Microsoft Word 2007 SP3, Word 2010 SP2, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka \"Invalid Index Remote Code Execution Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xj4g-c5mp-4x9c/GHSA-xj4g-c5mp-4x9c.json b/advisories/unreviewed/2022/05/GHSA-xj4g-c5mp-4x9c/GHSA-xj4g-c5mp-4x9c.json index 0bc35ee18d5..47e34a34f53 100644 --- a/advisories/unreviewed/2022/05/GHSA-xj4g-c5mp-4x9c/GHSA-xj4g-c5mp-4x9c.json +++ b/advisories/unreviewed/2022/05/GHSA-xj4g-c5mp-4x9c/GHSA-xj4g-c5mp-4x9c.json @@ -7,12 +7,8 @@ "CVE-2011-2007" ], "details": "Microsoft Host Integration Server (HIS) 2004 SP1, 2006 SP1, 2009, and 2010 allows remote attackers to cause a denial of service (SNA Server service outage) via crafted TCP or UDP traffic, aka \"Endless Loop DoS in snabase.exe Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xmj5-h86j-78vg/GHSA-xmj5-h86j-78vg.json b/advisories/unreviewed/2022/05/GHSA-xmj5-h86j-78vg/GHSA-xmj5-h86j-78vg.json index 537bab471cd..a8e5819d32f 100644 --- a/advisories/unreviewed/2022/05/GHSA-xmj5-h86j-78vg/GHSA-xmj5-h86j-78vg.json +++ b/advisories/unreviewed/2022/05/GHSA-xmj5-h86j-78vg/GHSA-xmj5-h86j-78vg.json @@ -7,12 +7,8 @@ "CVE-2011-0098" ], "details": "Integer signedness error in Microsoft Excel 2002 SP3, 2003 SP3, 2007 SP2, and 2010; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Excel Viewer SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP2 allows remote attackers to execute arbitrary code via an XLS file with a large record size, aka \"Excel Heap Overflow Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xpg5-jv85-754h/GHSA-xpg5-jv85-754h.json b/advisories/unreviewed/2022/05/GHSA-xpg5-jv85-754h/GHSA-xpg5-jv85-754h.json index bd329f20982..01390d8cf1f 100644 --- a/advisories/unreviewed/2022/05/GHSA-xpg5-jv85-754h/GHSA-xpg5-jv85-754h.json +++ b/advisories/unreviewed/2022/05/GHSA-xpg5-jv85-754h/GHSA-xpg5-jv85-754h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xppf-v74q-p4r3/GHSA-xppf-v74q-p4r3.json b/advisories/unreviewed/2022/05/GHSA-xppf-v74q-p4r3/GHSA-xppf-v74q-p4r3.json index 55fcb0f8b10..bccefaae1f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-xppf-v74q-p4r3/GHSA-xppf-v74q-p4r3.json +++ b/advisories/unreviewed/2022/05/GHSA-xppf-v74q-p4r3/GHSA-xppf-v74q-p4r3.json @@ -7,12 +7,8 @@ "CVE-2014-2803" ], "details": "Microsoft Internet Explorer 8 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xq3p-jw3h-qr29/GHSA-xq3p-jw3h-qr29.json b/advisories/unreviewed/2022/05/GHSA-xq3p-jw3h-qr29/GHSA-xq3p-jw3h-qr29.json index 014e5fbe54a..d9be9e3669d 100644 --- a/advisories/unreviewed/2022/05/GHSA-xq3p-jw3h-qr29/GHSA-xq3p-jw3h-qr29.json +++ b/advisories/unreviewed/2022/05/GHSA-xq3p-jw3h-qr29/GHSA-xq3p-jw3h-qr29.json @@ -7,12 +7,8 @@ "CVE-2013-3898" ], "details": "Microsoft Windows 8 and Windows Server 2012, when Hyper-V is used, does not ensure memory-address validity, which allows guest OS users to execute arbitrary code in all guest OS instances, and allows guest OS users to cause a denial of service (host OS crash), via a guest-to-host hypercall with a crafted function parameter, aka \"Address Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xq4v-f5xw-jqg4/GHSA-xq4v-f5xw-jqg4.json b/advisories/unreviewed/2022/05/GHSA-xq4v-f5xw-jqg4/GHSA-xq4v-f5xw-jqg4.json index 8bbca8132df..b295a5f042c 100644 --- a/advisories/unreviewed/2022/05/GHSA-xq4v-f5xw-jqg4/GHSA-xq4v-f5xw-jqg4.json +++ b/advisories/unreviewed/2022/05/GHSA-xq4v-f5xw-jqg4/GHSA-xq4v-f5xw-jqg4.json @@ -7,12 +7,8 @@ "CVE-2011-1275" ], "details": "Microsoft Excel 2002 SP3; Office 2004, 2008, and 2011 for Mac; and Open XML File Format Converter for Mac do not properly validate record information during parsing of Excel spreadsheets, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted spreadsheet, aka \"Excel Memory Heap Overwrite Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xqg9-hvp9-6pqp/GHSA-xqg9-hvp9-6pqp.json b/advisories/unreviewed/2022/05/GHSA-xqg9-hvp9-6pqp/GHSA-xqg9-hvp9-6pqp.json index 5aa58455660..c880c1cc16c 100644 --- a/advisories/unreviewed/2022/05/GHSA-xqg9-hvp9-6pqp/GHSA-xqg9-hvp9-6pqp.json +++ b/advisories/unreviewed/2022/05/GHSA-xqg9-hvp9-6pqp/GHSA-xqg9-hvp9-6pqp.json @@ -7,12 +7,8 @@ "CVE-2012-1769" ], "details": "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Filters, a different vulnerability than CVE-2012-1766, CVE-2012-1767, CVE-2012-1770, CVE-2012-1771, CVE-2012-1772, CVE-2012-1773, CVE-2012-3106, CVE-2012-3107, CVE-2012-3108, and CVE-2012-3110.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xqrv-vpmx-2rm7/GHSA-xqrv-vpmx-2rm7.json b/advisories/unreviewed/2022/05/GHSA-xqrv-vpmx-2rm7/GHSA-xqrv-vpmx-2rm7.json index aa66758e535..5173e02ce4c 100644 --- a/advisories/unreviewed/2022/05/GHSA-xqrv-vpmx-2rm7/GHSA-xqrv-vpmx-2rm7.json +++ b/advisories/unreviewed/2022/05/GHSA-xqrv-vpmx-2rm7/GHSA-xqrv-vpmx-2rm7.json @@ -7,12 +7,8 @@ "CVE-2013-5763" ], "details": "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.0 allows context-dependent attackers to affect availability via unknown vectors related to Outside In Maintenance. NOTE: the original disclosure of this issue erroneously mapped it to CVE-2013-3624.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xqxm-4hh8-rxv8/GHSA-xqxm-4hh8-rxv8.json b/advisories/unreviewed/2022/05/GHSA-xqxm-4hh8-rxv8/GHSA-xqxm-4hh8-rxv8.json index b708478bb02..0dd29b3bf14 100644 --- a/advisories/unreviewed/2022/05/GHSA-xqxm-4hh8-rxv8/GHSA-xqxm-4hh8-rxv8.json +++ b/advisories/unreviewed/2022/05/GHSA-xqxm-4hh8-rxv8/GHSA-xqxm-4hh8-rxv8.json @@ -7,12 +7,8 @@ "CVE-2014-0308" ], "details": "Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-0297, CVE-2014-0312, and CVE-2014-0324.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xv56-4f6g-pxh9/GHSA-xv56-4f6g-pxh9.json b/advisories/unreviewed/2022/05/GHSA-xv56-4f6g-pxh9/GHSA-xv56-4f6g-pxh9.json index b4717135baf..97be1bc6120 100644 --- a/advisories/unreviewed/2022/05/GHSA-xv56-4f6g-pxh9/GHSA-xv56-4f6g-pxh9.json +++ b/advisories/unreviewed/2022/05/GHSA-xv56-4f6g-pxh9/GHSA-xv56-4f6g-pxh9.json @@ -7,12 +7,8 @@ "CVE-2013-5045" ], "details": "Microsoft Internet Explorer 10 and 11 allows local users to bypass the Protected Mode protection mechanism, and consequently gain privileges, by leveraging the ability to execute sandboxed code, aka \"Internet Explorer Elevation of Privilege Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xwx4-4rqq-p4f5/GHSA-xwx4-4rqq-p4f5.json b/advisories/unreviewed/2022/05/GHSA-xwx4-4rqq-p4f5/GHSA-xwx4-4rqq-p4f5.json index 8ff108aec55..6a688dce8a6 100644 --- a/advisories/unreviewed/2022/05/GHSA-xwx4-4rqq-p4f5/GHSA-xwx4-4rqq-p4f5.json +++ b/advisories/unreviewed/2022/05/GHSA-xwx4-4rqq-p4f5/GHSA-xwx4-4rqq-p4f5.json @@ -7,12 +7,8 @@ "CVE-2014-1789" ], "details": "Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"Internet Explorer Memory Corruption Vulnerability,\" a different vulnerability than CVE-2014-1790.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xx2r-34w4-h84r/GHSA-xx2r-34w4-h84r.json b/advisories/unreviewed/2022/05/GHSA-xx2r-34w4-h84r/GHSA-xx2r-34w4-h84r.json index 582a50e2b38..b3f8a3b01d8 100644 --- a/advisories/unreviewed/2022/05/GHSA-xx2r-34w4-h84r/GHSA-xx2r-34w4-h84r.json +++ b/advisories/unreviewed/2022/05/GHSA-xx2r-34w4-h84r/GHSA-xx2r-34w4-h84r.json @@ -7,12 +7,8 @@ "CVE-2013-5054" ], "details": "Microsoft Office 2013 and 2013 RT allows remote attackers to discover authentication tokens via a crafted response to a file-open request for an Office file on a web site, as exploited in the wild in 2013, aka \"Token Hijacking Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-xxp6-vwcq-7x73/GHSA-xxp6-vwcq-7x73.json b/advisories/unreviewed/2022/11/GHSA-xxp6-vwcq-7x73/GHSA-xxp6-vwcq-7x73.json index cfc306d8864..e26c992de39 100644 --- a/advisories/unreviewed/2022/11/GHSA-xxp6-vwcq-7x73/GHSA-xxp6-vwcq-7x73.json +++ b/advisories/unreviewed/2022/11/GHSA-xxp6-vwcq-7x73/GHSA-xxp6-vwcq-7x73.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-245j-8gjp-c4v5/GHSA-245j-8gjp-c4v5.json b/advisories/unreviewed/2022/12/GHSA-245j-8gjp-c4v5/GHSA-245j-8gjp-c4v5.json index 78cc0a3156e..3fd4216cb35 100644 --- a/advisories/unreviewed/2022/12/GHSA-245j-8gjp-c4v5/GHSA-245j-8gjp-c4v5.json +++ b/advisories/unreviewed/2022/12/GHSA-245j-8gjp-c4v5/GHSA-245j-8gjp-c4v5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-3f67-9787-pwrh/GHSA-3f67-9787-pwrh.json b/advisories/unreviewed/2022/12/GHSA-3f67-9787-pwrh/GHSA-3f67-9787-pwrh.json index 1b37e8b1366..2c8c36c7770 100644 --- a/advisories/unreviewed/2022/12/GHSA-3f67-9787-pwrh/GHSA-3f67-9787-pwrh.json +++ b/advisories/unreviewed/2022/12/GHSA-3f67-9787-pwrh/GHSA-3f67-9787-pwrh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-3g62-vr55-m6hc/GHSA-3g62-vr55-m6hc.json b/advisories/unreviewed/2022/12/GHSA-3g62-vr55-m6hc/GHSA-3g62-vr55-m6hc.json index c1eb90a69ae..ac59f7d6f01 100644 --- a/advisories/unreviewed/2022/12/GHSA-3g62-vr55-m6hc/GHSA-3g62-vr55-m6hc.json +++ b/advisories/unreviewed/2022/12/GHSA-3g62-vr55-m6hc/GHSA-3g62-vr55-m6hc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-3p26-6f92-v9vg/GHSA-3p26-6f92-v9vg.json b/advisories/unreviewed/2022/12/GHSA-3p26-6f92-v9vg/GHSA-3p26-6f92-v9vg.json index 27448c66e96..f6fe5529c13 100644 --- a/advisories/unreviewed/2022/12/GHSA-3p26-6f92-v9vg/GHSA-3p26-6f92-v9vg.json +++ b/advisories/unreviewed/2022/12/GHSA-3p26-6f92-v9vg/GHSA-3p26-6f92-v9vg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-3wm6-5f35-v4rp/GHSA-3wm6-5f35-v4rp.json b/advisories/unreviewed/2022/12/GHSA-3wm6-5f35-v4rp/GHSA-3wm6-5f35-v4rp.json index 095ba6ed949..f731d5cbbb3 100644 --- a/advisories/unreviewed/2022/12/GHSA-3wm6-5f35-v4rp/GHSA-3wm6-5f35-v4rp.json +++ b/advisories/unreviewed/2022/12/GHSA-3wm6-5f35-v4rp/GHSA-3wm6-5f35-v4rp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-46qx-xf9f-62gx/GHSA-46qx-xf9f-62gx.json b/advisories/unreviewed/2022/12/GHSA-46qx-xf9f-62gx/GHSA-46qx-xf9f-62gx.json index 089fcedce35..6d0906c7667 100644 --- a/advisories/unreviewed/2022/12/GHSA-46qx-xf9f-62gx/GHSA-46qx-xf9f-62gx.json +++ b/advisories/unreviewed/2022/12/GHSA-46qx-xf9f-62gx/GHSA-46qx-xf9f-62gx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-4gwx-h6rx-fcw3/GHSA-4gwx-h6rx-fcw3.json b/advisories/unreviewed/2022/12/GHSA-4gwx-h6rx-fcw3/GHSA-4gwx-h6rx-fcw3.json index ac8ae91baa2..1a49affb24d 100644 --- a/advisories/unreviewed/2022/12/GHSA-4gwx-h6rx-fcw3/GHSA-4gwx-h6rx-fcw3.json +++ b/advisories/unreviewed/2022/12/GHSA-4gwx-h6rx-fcw3/GHSA-4gwx-h6rx-fcw3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-4rc3-56q2-qpp2/GHSA-4rc3-56q2-qpp2.json b/advisories/unreviewed/2022/12/GHSA-4rc3-56q2-qpp2/GHSA-4rc3-56q2-qpp2.json index 171355f0835..f1d74f92f8d 100644 --- a/advisories/unreviewed/2022/12/GHSA-4rc3-56q2-qpp2/GHSA-4rc3-56q2-qpp2.json +++ b/advisories/unreviewed/2022/12/GHSA-4rc3-56q2-qpp2/GHSA-4rc3-56q2-qpp2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-5hp7-2mv5-p69r/GHSA-5hp7-2mv5-p69r.json b/advisories/unreviewed/2022/12/GHSA-5hp7-2mv5-p69r/GHSA-5hp7-2mv5-p69r.json index f1450c38cee..deea149c1ec 100644 --- a/advisories/unreviewed/2022/12/GHSA-5hp7-2mv5-p69r/GHSA-5hp7-2mv5-p69r.json +++ b/advisories/unreviewed/2022/12/GHSA-5hp7-2mv5-p69r/GHSA-5hp7-2mv5-p69r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-5q5h-874v-f63h/GHSA-5q5h-874v-f63h.json b/advisories/unreviewed/2022/12/GHSA-5q5h-874v-f63h/GHSA-5q5h-874v-f63h.json index b7e1345245e..3dc72dfe17e 100644 --- a/advisories/unreviewed/2022/12/GHSA-5q5h-874v-f63h/GHSA-5q5h-874v-f63h.json +++ b/advisories/unreviewed/2022/12/GHSA-5q5h-874v-f63h/GHSA-5q5h-874v-f63h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-6543-hmm7-9cv7/GHSA-6543-hmm7-9cv7.json b/advisories/unreviewed/2022/12/GHSA-6543-hmm7-9cv7/GHSA-6543-hmm7-9cv7.json index 927ea464ba6..1c2b08d4727 100644 --- a/advisories/unreviewed/2022/12/GHSA-6543-hmm7-9cv7/GHSA-6543-hmm7-9cv7.json +++ b/advisories/unreviewed/2022/12/GHSA-6543-hmm7-9cv7/GHSA-6543-hmm7-9cv7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-6gh7-m562-f83w/GHSA-6gh7-m562-f83w.json b/advisories/unreviewed/2022/12/GHSA-6gh7-m562-f83w/GHSA-6gh7-m562-f83w.json index daea9ab0c52..7d8942ad2e7 100644 --- a/advisories/unreviewed/2022/12/GHSA-6gh7-m562-f83w/GHSA-6gh7-m562-f83w.json +++ b/advisories/unreviewed/2022/12/GHSA-6gh7-m562-f83w/GHSA-6gh7-m562-f83w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-6qwc-rqw2-f772/GHSA-6qwc-rqw2-f772.json b/advisories/unreviewed/2022/12/GHSA-6qwc-rqw2-f772/GHSA-6qwc-rqw2-f772.json index c4c5c044fbc..3bf1f0f632f 100644 --- a/advisories/unreviewed/2022/12/GHSA-6qwc-rqw2-f772/GHSA-6qwc-rqw2-f772.json +++ b/advisories/unreviewed/2022/12/GHSA-6qwc-rqw2-f772/GHSA-6qwc-rqw2-f772.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-74rq-j853-45qx/GHSA-74rq-j853-45qx.json b/advisories/unreviewed/2022/12/GHSA-74rq-j853-45qx/GHSA-74rq-j853-45qx.json index dff762afc7f..3f2d34acf92 100644 --- a/advisories/unreviewed/2022/12/GHSA-74rq-j853-45qx/GHSA-74rq-j853-45qx.json +++ b/advisories/unreviewed/2022/12/GHSA-74rq-j853-45qx/GHSA-74rq-j853-45qx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-7g4x-mgr6-m9g9/GHSA-7g4x-mgr6-m9g9.json b/advisories/unreviewed/2022/12/GHSA-7g4x-mgr6-m9g9/GHSA-7g4x-mgr6-m9g9.json index 8554096520a..31094993336 100644 --- a/advisories/unreviewed/2022/12/GHSA-7g4x-mgr6-m9g9/GHSA-7g4x-mgr6-m9g9.json +++ b/advisories/unreviewed/2022/12/GHSA-7g4x-mgr6-m9g9/GHSA-7g4x-mgr6-m9g9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-847h-627c-4g75/GHSA-847h-627c-4g75.json b/advisories/unreviewed/2022/12/GHSA-847h-627c-4g75/GHSA-847h-627c-4g75.json index 88c3b9a024a..8abb51603a2 100644 --- a/advisories/unreviewed/2022/12/GHSA-847h-627c-4g75/GHSA-847h-627c-4g75.json +++ b/advisories/unreviewed/2022/12/GHSA-847h-627c-4g75/GHSA-847h-627c-4g75.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-99vr-7hvg-69wf/GHSA-99vr-7hvg-69wf.json b/advisories/unreviewed/2022/12/GHSA-99vr-7hvg-69wf/GHSA-99vr-7hvg-69wf.json index 22b2791f22a..ca2f556cc90 100644 --- a/advisories/unreviewed/2022/12/GHSA-99vr-7hvg-69wf/GHSA-99vr-7hvg-69wf.json +++ b/advisories/unreviewed/2022/12/GHSA-99vr-7hvg-69wf/GHSA-99vr-7hvg-69wf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-cfjv-73gp-92j6/GHSA-cfjv-73gp-92j6.json b/advisories/unreviewed/2022/12/GHSA-cfjv-73gp-92j6/GHSA-cfjv-73gp-92j6.json index b02f9e3c566..37fb91ca031 100644 --- a/advisories/unreviewed/2022/12/GHSA-cfjv-73gp-92j6/GHSA-cfjv-73gp-92j6.json +++ b/advisories/unreviewed/2022/12/GHSA-cfjv-73gp-92j6/GHSA-cfjv-73gp-92j6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-cj4x-645f-6pwx/GHSA-cj4x-645f-6pwx.json b/advisories/unreviewed/2022/12/GHSA-cj4x-645f-6pwx/GHSA-cj4x-645f-6pwx.json index 3e06cbf685c..85090578772 100644 --- a/advisories/unreviewed/2022/12/GHSA-cj4x-645f-6pwx/GHSA-cj4x-645f-6pwx.json +++ b/advisories/unreviewed/2022/12/GHSA-cj4x-645f-6pwx/GHSA-cj4x-645f-6pwx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-fqff-vm4v-fp7q/GHSA-fqff-vm4v-fp7q.json b/advisories/unreviewed/2022/12/GHSA-fqff-vm4v-fp7q/GHSA-fqff-vm4v-fp7q.json index 79981c0dc61..1ce0a2949ab 100644 --- a/advisories/unreviewed/2022/12/GHSA-fqff-vm4v-fp7q/GHSA-fqff-vm4v-fp7q.json +++ b/advisories/unreviewed/2022/12/GHSA-fqff-vm4v-fp7q/GHSA-fqff-vm4v-fp7q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-fxj5-vfj6-53hw/GHSA-fxj5-vfj6-53hw.json b/advisories/unreviewed/2022/12/GHSA-fxj5-vfj6-53hw/GHSA-fxj5-vfj6-53hw.json index d1e7886d4ab..1202bc2972b 100644 --- a/advisories/unreviewed/2022/12/GHSA-fxj5-vfj6-53hw/GHSA-fxj5-vfj6-53hw.json +++ b/advisories/unreviewed/2022/12/GHSA-fxj5-vfj6-53hw/GHSA-fxj5-vfj6-53hw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-g3fg-j524-wfh2/GHSA-g3fg-j524-wfh2.json b/advisories/unreviewed/2022/12/GHSA-g3fg-j524-wfh2/GHSA-g3fg-j524-wfh2.json index 3fdb8bd76a7..eebe7f23bbc 100644 --- a/advisories/unreviewed/2022/12/GHSA-g3fg-j524-wfh2/GHSA-g3fg-j524-wfh2.json +++ b/advisories/unreviewed/2022/12/GHSA-g3fg-j524-wfh2/GHSA-g3fg-j524-wfh2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-g4vx-757m-g7rm/GHSA-g4vx-757m-g7rm.json b/advisories/unreviewed/2022/12/GHSA-g4vx-757m-g7rm/GHSA-g4vx-757m-g7rm.json index 6ec986f87a2..59eb9700323 100644 --- a/advisories/unreviewed/2022/12/GHSA-g4vx-757m-g7rm/GHSA-g4vx-757m-g7rm.json +++ b/advisories/unreviewed/2022/12/GHSA-g4vx-757m-g7rm/GHSA-g4vx-757m-g7rm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-hrhr-9jrh-mr32/GHSA-hrhr-9jrh-mr32.json b/advisories/unreviewed/2022/12/GHSA-hrhr-9jrh-mr32/GHSA-hrhr-9jrh-mr32.json index b62dd6ad03e..00536cbc65b 100644 --- a/advisories/unreviewed/2022/12/GHSA-hrhr-9jrh-mr32/GHSA-hrhr-9jrh-mr32.json +++ b/advisories/unreviewed/2022/12/GHSA-hrhr-9jrh-mr32/GHSA-hrhr-9jrh-mr32.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-hvwj-m4ph-92v4/GHSA-hvwj-m4ph-92v4.json b/advisories/unreviewed/2022/12/GHSA-hvwj-m4ph-92v4/GHSA-hvwj-m4ph-92v4.json index 72a5b598176..601864610e4 100644 --- a/advisories/unreviewed/2022/12/GHSA-hvwj-m4ph-92v4/GHSA-hvwj-m4ph-92v4.json +++ b/advisories/unreviewed/2022/12/GHSA-hvwj-m4ph-92v4/GHSA-hvwj-m4ph-92v4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-j3ff-r323-h59r/GHSA-j3ff-r323-h59r.json b/advisories/unreviewed/2022/12/GHSA-j3ff-r323-h59r/GHSA-j3ff-r323-h59r.json index 6e5e938cb8c..a80e570bb69 100644 --- a/advisories/unreviewed/2022/12/GHSA-j3ff-r323-h59r/GHSA-j3ff-r323-h59r.json +++ b/advisories/unreviewed/2022/12/GHSA-j3ff-r323-h59r/GHSA-j3ff-r323-h59r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-j5rg-4wj9-7v6m/GHSA-j5rg-4wj9-7v6m.json b/advisories/unreviewed/2022/12/GHSA-j5rg-4wj9-7v6m/GHSA-j5rg-4wj9-7v6m.json index 06897ca8db0..b7e6f01f9cf 100644 --- a/advisories/unreviewed/2022/12/GHSA-j5rg-4wj9-7v6m/GHSA-j5rg-4wj9-7v6m.json +++ b/advisories/unreviewed/2022/12/GHSA-j5rg-4wj9-7v6m/GHSA-j5rg-4wj9-7v6m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-mrvv-fwrw-5pgv/GHSA-mrvv-fwrw-5pgv.json b/advisories/unreviewed/2022/12/GHSA-mrvv-fwrw-5pgv/GHSA-mrvv-fwrw-5pgv.json index 6675dba57f0..6873b1dc622 100644 --- a/advisories/unreviewed/2022/12/GHSA-mrvv-fwrw-5pgv/GHSA-mrvv-fwrw-5pgv.json +++ b/advisories/unreviewed/2022/12/GHSA-mrvv-fwrw-5pgv/GHSA-mrvv-fwrw-5pgv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-p3w8-hj2c-x6cm/GHSA-p3w8-hj2c-x6cm.json b/advisories/unreviewed/2022/12/GHSA-p3w8-hj2c-x6cm/GHSA-p3w8-hj2c-x6cm.json index 51aec449e0e..407841f1983 100644 --- a/advisories/unreviewed/2022/12/GHSA-p3w8-hj2c-x6cm/GHSA-p3w8-hj2c-x6cm.json +++ b/advisories/unreviewed/2022/12/GHSA-p3w8-hj2c-x6cm/GHSA-p3w8-hj2c-x6cm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-p5w8-5f33-gggw/GHSA-p5w8-5f33-gggw.json b/advisories/unreviewed/2022/12/GHSA-p5w8-5f33-gggw/GHSA-p5w8-5f33-gggw.json index 13a2bb8f242..b7a04e64094 100644 --- a/advisories/unreviewed/2022/12/GHSA-p5w8-5f33-gggw/GHSA-p5w8-5f33-gggw.json +++ b/advisories/unreviewed/2022/12/GHSA-p5w8-5f33-gggw/GHSA-p5w8-5f33-gggw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-pchh-rhx4-655j/GHSA-pchh-rhx4-655j.json b/advisories/unreviewed/2022/12/GHSA-pchh-rhx4-655j/GHSA-pchh-rhx4-655j.json index 1c959baeda4..31b0c953aaa 100644 --- a/advisories/unreviewed/2022/12/GHSA-pchh-rhx4-655j/GHSA-pchh-rhx4-655j.json +++ b/advisories/unreviewed/2022/12/GHSA-pchh-rhx4-655j/GHSA-pchh-rhx4-655j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-ppxj-vprv-272m/GHSA-ppxj-vprv-272m.json b/advisories/unreviewed/2022/12/GHSA-ppxj-vprv-272m/GHSA-ppxj-vprv-272m.json index 54a92d979aa..d832b1212c0 100644 --- a/advisories/unreviewed/2022/12/GHSA-ppxj-vprv-272m/GHSA-ppxj-vprv-272m.json +++ b/advisories/unreviewed/2022/12/GHSA-ppxj-vprv-272m/GHSA-ppxj-vprv-272m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-q5hc-gpjw-fpvp/GHSA-q5hc-gpjw-fpvp.json b/advisories/unreviewed/2022/12/GHSA-q5hc-gpjw-fpvp/GHSA-q5hc-gpjw-fpvp.json index e2d44f8d60a..833057eeb05 100644 --- a/advisories/unreviewed/2022/12/GHSA-q5hc-gpjw-fpvp/GHSA-q5hc-gpjw-fpvp.json +++ b/advisories/unreviewed/2022/12/GHSA-q5hc-gpjw-fpvp/GHSA-q5hc-gpjw-fpvp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-qcqq-65g4-h9xj/GHSA-qcqq-65g4-h9xj.json b/advisories/unreviewed/2022/12/GHSA-qcqq-65g4-h9xj/GHSA-qcqq-65g4-h9xj.json index be42b106e2e..9f2a1c45eba 100644 --- a/advisories/unreviewed/2022/12/GHSA-qcqq-65g4-h9xj/GHSA-qcqq-65g4-h9xj.json +++ b/advisories/unreviewed/2022/12/GHSA-qcqq-65g4-h9xj/GHSA-qcqq-65g4-h9xj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-r839-rgcg-37rj/GHSA-r839-rgcg-37rj.json b/advisories/unreviewed/2022/12/GHSA-r839-rgcg-37rj/GHSA-r839-rgcg-37rj.json index 3965dbfef16..0a9f510d769 100644 --- a/advisories/unreviewed/2022/12/GHSA-r839-rgcg-37rj/GHSA-r839-rgcg-37rj.json +++ b/advisories/unreviewed/2022/12/GHSA-r839-rgcg-37rj/GHSA-r839-rgcg-37rj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-rxvq-gr74-jvpj/GHSA-rxvq-gr74-jvpj.json b/advisories/unreviewed/2022/12/GHSA-rxvq-gr74-jvpj/GHSA-rxvq-gr74-jvpj.json index e1207f92e01..877e18f76c6 100644 --- a/advisories/unreviewed/2022/12/GHSA-rxvq-gr74-jvpj/GHSA-rxvq-gr74-jvpj.json +++ b/advisories/unreviewed/2022/12/GHSA-rxvq-gr74-jvpj/GHSA-rxvq-gr74-jvpj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-vpx9-p4q4-3hhh/GHSA-vpx9-p4q4-3hhh.json b/advisories/unreviewed/2022/12/GHSA-vpx9-p4q4-3hhh/GHSA-vpx9-p4q4-3hhh.json index 0da0f616d82..c4884b36d19 100644 --- a/advisories/unreviewed/2022/12/GHSA-vpx9-p4q4-3hhh/GHSA-vpx9-p4q4-3hhh.json +++ b/advisories/unreviewed/2022/12/GHSA-vpx9-p4q4-3hhh/GHSA-vpx9-p4q4-3hhh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-wgp6-2g3r-9p4m/GHSA-wgp6-2g3r-9p4m.json b/advisories/unreviewed/2022/12/GHSA-wgp6-2g3r-9p4m/GHSA-wgp6-2g3r-9p4m.json index b63c2188e3e..f58d684079a 100644 --- a/advisories/unreviewed/2022/12/GHSA-wgp6-2g3r-9p4m/GHSA-wgp6-2g3r-9p4m.json +++ b/advisories/unreviewed/2022/12/GHSA-wgp6-2g3r-9p4m/GHSA-wgp6-2g3r-9p4m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-x3f7-g9wc-xxpj/GHSA-x3f7-g9wc-xxpj.json b/advisories/unreviewed/2022/12/GHSA-x3f7-g9wc-xxpj/GHSA-x3f7-g9wc-xxpj.json index ebb3a1535aa..dab1df9b548 100644 --- a/advisories/unreviewed/2022/12/GHSA-x3f7-g9wc-xxpj/GHSA-x3f7-g9wc-xxpj.json +++ b/advisories/unreviewed/2022/12/GHSA-x3f7-g9wc-xxpj/GHSA-x3f7-g9wc-xxpj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-xfjq-qrvp-mv7m/GHSA-xfjq-qrvp-mv7m.json b/advisories/unreviewed/2022/12/GHSA-xfjq-qrvp-mv7m/GHSA-xfjq-qrvp-mv7m.json index ea77301210d..33b25a54abc 100644 --- a/advisories/unreviewed/2022/12/GHSA-xfjq-qrvp-mv7m/GHSA-xfjq-qrvp-mv7m.json +++ b/advisories/unreviewed/2022/12/GHSA-xfjq-qrvp-mv7m/GHSA-xfjq-qrvp-mv7m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-xpp2-rw22-gf34/GHSA-xpp2-rw22-gf34.json b/advisories/unreviewed/2022/12/GHSA-xpp2-rw22-gf34/GHSA-xpp2-rw22-gf34.json index 8cde567105e..07eb7e30d68 100644 --- a/advisories/unreviewed/2022/12/GHSA-xpp2-rw22-gf34/GHSA-xpp2-rw22-gf34.json +++ b/advisories/unreviewed/2022/12/GHSA-xpp2-rw22-gf34/GHSA-xpp2-rw22-gf34.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-xv2q-j99p-j42f/GHSA-xv2q-j99p-j42f.json b/advisories/unreviewed/2022/12/GHSA-xv2q-j99p-j42f/GHSA-xv2q-j99p-j42f.json index b2dc3eb88a5..a7ba85e23ae 100644 --- a/advisories/unreviewed/2022/12/GHSA-xv2q-j99p-j42f/GHSA-xv2q-j99p-j42f.json +++ b/advisories/unreviewed/2022/12/GHSA-xv2q-j99p-j42f/GHSA-xv2q-j99p-j42f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-xwhj-x2g6-527m/GHSA-xwhj-x2g6-527m.json b/advisories/unreviewed/2022/12/GHSA-xwhj-x2g6-527m/GHSA-xwhj-x2g6-527m.json index 11158eef271..ec615f696cd 100644 --- a/advisories/unreviewed/2022/12/GHSA-xwhj-x2g6-527m/GHSA-xwhj-x2g6-527m.json +++ b/advisories/unreviewed/2022/12/GHSA-xwhj-x2g6-527m/GHSA-xwhj-x2g6-527m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-445m-q5mj-2gj6/GHSA-445m-q5mj-2gj6.json b/advisories/unreviewed/2023/01/GHSA-445m-q5mj-2gj6/GHSA-445m-q5mj-2gj6.json index 7abf2dccf43..b042d80a106 100644 --- a/advisories/unreviewed/2023/01/GHSA-445m-q5mj-2gj6/GHSA-445m-q5mj-2gj6.json +++ b/advisories/unreviewed/2023/01/GHSA-445m-q5mj-2gj6/GHSA-445m-q5mj-2gj6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -47,9 +45,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/01/GHSA-m3pf-3vpc-6m5j/GHSA-m3pf-3vpc-6m5j.json b/advisories/unreviewed/2023/01/GHSA-m3pf-3vpc-6m5j/GHSA-m3pf-3vpc-6m5j.json index 9e2493988d6..768ec5f8c21 100644 --- a/advisories/unreviewed/2023/01/GHSA-m3pf-3vpc-6m5j/GHSA-m3pf-3vpc-6m5j.json +++ b/advisories/unreviewed/2023/01/GHSA-m3pf-3vpc-6m5j/GHSA-m3pf-3vpc-6m5j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-5cxj-h7vw-5448/GHSA-5cxj-h7vw-5448.json b/advisories/unreviewed/2023/02/GHSA-5cxj-h7vw-5448/GHSA-5cxj-h7vw-5448.json index 94518c929f8..46f4b98c5a6 100644 --- a/advisories/unreviewed/2023/02/GHSA-5cxj-h7vw-5448/GHSA-5cxj-h7vw-5448.json +++ b/advisories/unreviewed/2023/02/GHSA-5cxj-h7vw-5448/GHSA-5cxj-h7vw-5448.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-6f2j-w8wg-p875/GHSA-6f2j-w8wg-p875.json b/advisories/unreviewed/2023/02/GHSA-6f2j-w8wg-p875/GHSA-6f2j-w8wg-p875.json index 163581d1fd1..559e9a94ac4 100644 --- a/advisories/unreviewed/2023/02/GHSA-6f2j-w8wg-p875/GHSA-6f2j-w8wg-p875.json +++ b/advisories/unreviewed/2023/02/GHSA-6f2j-w8wg-p875/GHSA-6f2j-w8wg-p875.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-89r8-m4xj-w97p/GHSA-89r8-m4xj-w97p.json b/advisories/unreviewed/2023/02/GHSA-89r8-m4xj-w97p/GHSA-89r8-m4xj-w97p.json index bd4334bf8c9..09c70efdfdf 100644 --- a/advisories/unreviewed/2023/02/GHSA-89r8-m4xj-w97p/GHSA-89r8-m4xj-w97p.json +++ b/advisories/unreviewed/2023/02/GHSA-89r8-m4xj-w97p/GHSA-89r8-m4xj-w97p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-c3qc-xqj2-mqfj/GHSA-c3qc-xqj2-mqfj.json b/advisories/unreviewed/2023/02/GHSA-c3qc-xqj2-mqfj/GHSA-c3qc-xqj2-mqfj.json index 41f20517bc8..7118a3696f2 100644 --- a/advisories/unreviewed/2023/02/GHSA-c3qc-xqj2-mqfj/GHSA-c3qc-xqj2-mqfj.json +++ b/advisories/unreviewed/2023/02/GHSA-c3qc-xqj2-mqfj/GHSA-c3qc-xqj2-mqfj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-g4r8-m469-x6vf/GHSA-g4r8-m469-x6vf.json b/advisories/unreviewed/2023/02/GHSA-g4r8-m469-x6vf/GHSA-g4r8-m469-x6vf.json index 3004b56b52d..e96a67c18a5 100644 --- a/advisories/unreviewed/2023/02/GHSA-g4r8-m469-x6vf/GHSA-g4r8-m469-x6vf.json +++ b/advisories/unreviewed/2023/02/GHSA-g4r8-m469-x6vf/GHSA-g4r8-m469-x6vf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-h98q-9vm9-92vw/GHSA-h98q-9vm9-92vw.json b/advisories/unreviewed/2023/02/GHSA-h98q-9vm9-92vw/GHSA-h98q-9vm9-92vw.json index cd2f162f8db..e9e0c6d0134 100644 --- a/advisories/unreviewed/2023/02/GHSA-h98q-9vm9-92vw/GHSA-h98q-9vm9-92vw.json +++ b/advisories/unreviewed/2023/02/GHSA-h98q-9vm9-92vw/GHSA-h98q-9vm9-92vw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-j8gx-6hj2-q784/GHSA-j8gx-6hj2-q784.json b/advisories/unreviewed/2023/02/GHSA-j8gx-6hj2-q784/GHSA-j8gx-6hj2-q784.json index fa7f29d94b9..1c2a490b726 100644 --- a/advisories/unreviewed/2023/02/GHSA-j8gx-6hj2-q784/GHSA-j8gx-6hj2-q784.json +++ b/advisories/unreviewed/2023/02/GHSA-j8gx-6hj2-q784/GHSA-j8gx-6hj2-q784.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-jh27-8mvh-57qm/GHSA-jh27-8mvh-57qm.json b/advisories/unreviewed/2023/02/GHSA-jh27-8mvh-57qm/GHSA-jh27-8mvh-57qm.json index 3a568ea6726..8a965d2eb07 100644 --- a/advisories/unreviewed/2023/02/GHSA-jh27-8mvh-57qm/GHSA-jh27-8mvh-57qm.json +++ b/advisories/unreviewed/2023/02/GHSA-jh27-8mvh-57qm/GHSA-jh27-8mvh-57qm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-m48w-94wx-3fq6/GHSA-m48w-94wx-3fq6.json b/advisories/unreviewed/2023/02/GHSA-m48w-94wx-3fq6/GHSA-m48w-94wx-3fq6.json index e171692c087..02a66cf30e0 100644 --- a/advisories/unreviewed/2023/02/GHSA-m48w-94wx-3fq6/GHSA-m48w-94wx-3fq6.json +++ b/advisories/unreviewed/2023/02/GHSA-m48w-94wx-3fq6/GHSA-m48w-94wx-3fq6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-mg4p-rw57-c4hp/GHSA-mg4p-rw57-c4hp.json b/advisories/unreviewed/2023/02/GHSA-mg4p-rw57-c4hp/GHSA-mg4p-rw57-c4hp.json index 53d4ac9cf77..f08bcc1cf79 100644 --- a/advisories/unreviewed/2023/02/GHSA-mg4p-rw57-c4hp/GHSA-mg4p-rw57-c4hp.json +++ b/advisories/unreviewed/2023/02/GHSA-mg4p-rw57-c4hp/GHSA-mg4p-rw57-c4hp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-mw5v-q85w-g5pq/GHSA-mw5v-q85w-g5pq.json b/advisories/unreviewed/2023/02/GHSA-mw5v-q85w-g5pq/GHSA-mw5v-q85w-g5pq.json index c6011b64a4a..2ad324f0e29 100644 --- a/advisories/unreviewed/2023/02/GHSA-mw5v-q85w-g5pq/GHSA-mw5v-q85w-g5pq.json +++ b/advisories/unreviewed/2023/02/GHSA-mw5v-q85w-g5pq/GHSA-mw5v-q85w-g5pq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-mw9x-56vq-m9qf/GHSA-mw9x-56vq-m9qf.json b/advisories/unreviewed/2023/02/GHSA-mw9x-56vq-m9qf/GHSA-mw9x-56vq-m9qf.json index 32938f4d0d9..ca5fe09b6b3 100644 --- a/advisories/unreviewed/2023/02/GHSA-mw9x-56vq-m9qf/GHSA-mw9x-56vq-m9qf.json +++ b/advisories/unreviewed/2023/02/GHSA-mw9x-56vq-m9qf/GHSA-mw9x-56vq-m9qf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-pmjf-pf92-c43q/GHSA-pmjf-pf92-c43q.json b/advisories/unreviewed/2023/02/GHSA-pmjf-pf92-c43q/GHSA-pmjf-pf92-c43q.json index 0abc687cd3e..7c58395b21b 100644 --- a/advisories/unreviewed/2023/02/GHSA-pmjf-pf92-c43q/GHSA-pmjf-pf92-c43q.json +++ b/advisories/unreviewed/2023/02/GHSA-pmjf-pf92-c43q/GHSA-pmjf-pf92-c43q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-v6f5-j8rp-3frr/GHSA-v6f5-j8rp-3frr.json b/advisories/unreviewed/2023/02/GHSA-v6f5-j8rp-3frr/GHSA-v6f5-j8rp-3frr.json index de4cf606692..871f577c3a9 100644 --- a/advisories/unreviewed/2023/02/GHSA-v6f5-j8rp-3frr/GHSA-v6f5-j8rp-3frr.json +++ b/advisories/unreviewed/2023/02/GHSA-v6f5-j8rp-3frr/GHSA-v6f5-j8rp-3frr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-v9q5-7mjm-c2v2/GHSA-v9q5-7mjm-c2v2.json b/advisories/unreviewed/2023/02/GHSA-v9q5-7mjm-c2v2/GHSA-v9q5-7mjm-c2v2.json index c5d6d2910a1..adb010db220 100644 --- a/advisories/unreviewed/2023/02/GHSA-v9q5-7mjm-c2v2/GHSA-v9q5-7mjm-c2v2.json +++ b/advisories/unreviewed/2023/02/GHSA-v9q5-7mjm-c2v2/GHSA-v9q5-7mjm-c2v2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-w58h-9w4c-p7rf/GHSA-w58h-9w4c-p7rf.json b/advisories/unreviewed/2023/02/GHSA-w58h-9w4c-p7rf/GHSA-w58h-9w4c-p7rf.json index ab17baa693e..ee3acf7ddf8 100644 --- a/advisories/unreviewed/2023/02/GHSA-w58h-9w4c-p7rf/GHSA-w58h-9w4c-p7rf.json +++ b/advisories/unreviewed/2023/02/GHSA-w58h-9w4c-p7rf/GHSA-w58h-9w4c-p7rf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-xrxr-6vrf-4m23/GHSA-xrxr-6vrf-4m23.json b/advisories/unreviewed/2023/02/GHSA-xrxr-6vrf-4m23/GHSA-xrxr-6vrf-4m23.json index 481564a2b92..08de62bcff7 100644 --- a/advisories/unreviewed/2023/02/GHSA-xrxr-6vrf-4m23/GHSA-xrxr-6vrf-4m23.json +++ b/advisories/unreviewed/2023/02/GHSA-xrxr-6vrf-4m23/GHSA-xrxr-6vrf-4m23.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-xvpp-hhff-gp7v/GHSA-xvpp-hhff-gp7v.json b/advisories/unreviewed/2023/02/GHSA-xvpp-hhff-gp7v/GHSA-xvpp-hhff-gp7v.json index 9124d8cf578..187fa536028 100644 --- a/advisories/unreviewed/2023/02/GHSA-xvpp-hhff-gp7v/GHSA-xvpp-hhff-gp7v.json +++ b/advisories/unreviewed/2023/02/GHSA-xvpp-hhff-gp7v/GHSA-xvpp-hhff-gp7v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/06/GHSA-mmvq-3rp7-6cw4/GHSA-mmvq-3rp7-6cw4.json b/advisories/unreviewed/2023/06/GHSA-mmvq-3rp7-6cw4/GHSA-mmvq-3rp7-6cw4.json index df35f37e513..fa664c3e402 100644 --- a/advisories/unreviewed/2023/06/GHSA-mmvq-3rp7-6cw4/GHSA-mmvq-3rp7-6cw4.json +++ b/advisories/unreviewed/2023/06/GHSA-mmvq-3rp7-6cw4/GHSA-mmvq-3rp7-6cw4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/06/GHSA-pmh5-h2qr-3h74/GHSA-pmh5-h2qr-3h74.json b/advisories/unreviewed/2023/06/GHSA-pmh5-h2qr-3h74/GHSA-pmh5-h2qr-3h74.json index 5c0b44e88ac..69fb421addf 100644 --- a/advisories/unreviewed/2023/06/GHSA-pmh5-h2qr-3h74/GHSA-pmh5-h2qr-3h74.json +++ b/advisories/unreviewed/2023/06/GHSA-pmh5-h2qr-3h74/GHSA-pmh5-h2qr-3h74.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/08/GHSA-cwfg-vhjr-jvv6/GHSA-cwfg-vhjr-jvv6.json b/advisories/unreviewed/2023/08/GHSA-cwfg-vhjr-jvv6/GHSA-cwfg-vhjr-jvv6.json index a720722dc59..b6af4f0936c 100644 --- a/advisories/unreviewed/2023/08/GHSA-cwfg-vhjr-jvv6/GHSA-cwfg-vhjr-jvv6.json +++ b/advisories/unreviewed/2023/08/GHSA-cwfg-vhjr-jvv6/GHSA-cwfg-vhjr-jvv6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/08/GHSA-j6x9-fqfr-79q4/GHSA-j6x9-fqfr-79q4.json b/advisories/unreviewed/2023/08/GHSA-j6x9-fqfr-79q4/GHSA-j6x9-fqfr-79q4.json index 84ed8920cc4..3ba75789f39 100644 --- a/advisories/unreviewed/2023/08/GHSA-j6x9-fqfr-79q4/GHSA-j6x9-fqfr-79q4.json +++ b/advisories/unreviewed/2023/08/GHSA-j6x9-fqfr-79q4/GHSA-j6x9-fqfr-79q4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/10/GHSA-hhcv-5r95-mwmc/GHSA-hhcv-5r95-mwmc.json b/advisories/unreviewed/2023/10/GHSA-hhcv-5r95-mwmc/GHSA-hhcv-5r95-mwmc.json index 7b07cb5f177..c6b5936c859 100644 --- a/advisories/unreviewed/2023/10/GHSA-hhcv-5r95-mwmc/GHSA-hhcv-5r95-mwmc.json +++ b/advisories/unreviewed/2023/10/GHSA-hhcv-5r95-mwmc/GHSA-hhcv-5r95-mwmc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -43,9 +41,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/11/GHSA-3934-h563-3c5f/GHSA-3934-h563-3c5f.json b/advisories/unreviewed/2023/11/GHSA-3934-h563-3c5f/GHSA-3934-h563-3c5f.json index cb2a1a1d122..772b20f586d 100644 --- a/advisories/unreviewed/2023/11/GHSA-3934-h563-3c5f/GHSA-3934-h563-3c5f.json +++ b/advisories/unreviewed/2023/11/GHSA-3934-h563-3c5f/GHSA-3934-h563-3c5f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-hhw6-675p-j8x7/GHSA-hhw6-675p-j8x7.json b/advisories/unreviewed/2023/11/GHSA-hhw6-675p-j8x7/GHSA-hhw6-675p-j8x7.json index ad7126f5141..d3faf8b4d83 100644 --- a/advisories/unreviewed/2023/11/GHSA-hhw6-675p-j8x7/GHSA-hhw6-675p-j8x7.json +++ b/advisories/unreviewed/2023/11/GHSA-hhw6-675p-j8x7/GHSA-hhw6-675p-j8x7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-rv48-qr4w-frqj/GHSA-rv48-qr4w-frqj.json b/advisories/unreviewed/2023/11/GHSA-rv48-qr4w-frqj/GHSA-rv48-qr4w-frqj.json index 02c2f9d533d..cdb0bc59656 100644 --- a/advisories/unreviewed/2023/11/GHSA-rv48-qr4w-frqj/GHSA-rv48-qr4w-frqj.json +++ b/advisories/unreviewed/2023/11/GHSA-rv48-qr4w-frqj/GHSA-rv48-qr4w-frqj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-4g5c-5cvj-g3xc/GHSA-4g5c-5cvj-g3xc.json b/advisories/unreviewed/2023/12/GHSA-4g5c-5cvj-g3xc/GHSA-4g5c-5cvj-g3xc.json index b6c25425582..c5c4e3a4d24 100644 --- a/advisories/unreviewed/2023/12/GHSA-4g5c-5cvj-g3xc/GHSA-4g5c-5cvj-g3xc.json +++ b/advisories/unreviewed/2023/12/GHSA-4g5c-5cvj-g3xc/GHSA-4g5c-5cvj-g3xc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/12/GHSA-655p-cxf7-qpch/GHSA-655p-cxf7-qpch.json b/advisories/unreviewed/2023/12/GHSA-655p-cxf7-qpch/GHSA-655p-cxf7-qpch.json index 2306277af0a..e52ad42317d 100644 --- a/advisories/unreviewed/2023/12/GHSA-655p-cxf7-qpch/GHSA-655p-cxf7-qpch.json +++ b/advisories/unreviewed/2023/12/GHSA-655p-cxf7-qpch/GHSA-655p-cxf7-qpch.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-69f7-q653-5cmc/GHSA-69f7-q653-5cmc.json b/advisories/unreviewed/2023/12/GHSA-69f7-q653-5cmc/GHSA-69f7-q653-5cmc.json index f428edd90e3..751716a33ae 100644 --- a/advisories/unreviewed/2023/12/GHSA-69f7-q653-5cmc/GHSA-69f7-q653-5cmc.json +++ b/advisories/unreviewed/2023/12/GHSA-69f7-q653-5cmc/GHSA-69f7-q653-5cmc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-6m3w-p627-cjx2/GHSA-6m3w-p627-cjx2.json b/advisories/unreviewed/2023/12/GHSA-6m3w-p627-cjx2/GHSA-6m3w-p627-cjx2.json index 7289db62c97..cc4b493bbcc 100644 --- a/advisories/unreviewed/2023/12/GHSA-6m3w-p627-cjx2/GHSA-6m3w-p627-cjx2.json +++ b/advisories/unreviewed/2023/12/GHSA-6m3w-p627-cjx2/GHSA-6m3w-p627-cjx2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-6rjv-jwj3-pw69/GHSA-6rjv-jwj3-pw69.json b/advisories/unreviewed/2023/12/GHSA-6rjv-jwj3-pw69/GHSA-6rjv-jwj3-pw69.json index ef56166e7b4..b036844b653 100644 --- a/advisories/unreviewed/2023/12/GHSA-6rjv-jwj3-pw69/GHSA-6rjv-jwj3-pw69.json +++ b/advisories/unreviewed/2023/12/GHSA-6rjv-jwj3-pw69/GHSA-6rjv-jwj3-pw69.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-756m-w8pf-p6fw/GHSA-756m-w8pf-p6fw.json b/advisories/unreviewed/2023/12/GHSA-756m-w8pf-p6fw/GHSA-756m-w8pf-p6fw.json index 92a8d82743b..0b9e6226fb8 100644 --- a/advisories/unreviewed/2023/12/GHSA-756m-w8pf-p6fw/GHSA-756m-w8pf-p6fw.json +++ b/advisories/unreviewed/2023/12/GHSA-756m-w8pf-p6fw/GHSA-756m-w8pf-p6fw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/12/GHSA-89wh-8rrv-869c/GHSA-89wh-8rrv-869c.json b/advisories/unreviewed/2023/12/GHSA-89wh-8rrv-869c/GHSA-89wh-8rrv-869c.json index 7cfc36c5edf..102758f71dc 100644 --- a/advisories/unreviewed/2023/12/GHSA-89wh-8rrv-869c/GHSA-89wh-8rrv-869c.json +++ b/advisories/unreviewed/2023/12/GHSA-89wh-8rrv-869c/GHSA-89wh-8rrv-869c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/12/GHSA-crv3-9x4g-wvqx/GHSA-crv3-9x4g-wvqx.json b/advisories/unreviewed/2023/12/GHSA-crv3-9x4g-wvqx/GHSA-crv3-9x4g-wvqx.json index 52701e0dc4c..fd40e6764a1 100644 --- a/advisories/unreviewed/2023/12/GHSA-crv3-9x4g-wvqx/GHSA-crv3-9x4g-wvqx.json +++ b/advisories/unreviewed/2023/12/GHSA-crv3-9x4g-wvqx/GHSA-crv3-9x4g-wvqx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/12/GHSA-pffw-x78w-whm6/GHSA-pffw-x78w-whm6.json b/advisories/unreviewed/2023/12/GHSA-pffw-x78w-whm6/GHSA-pffw-x78w-whm6.json index 341b0f10c64..1282ca7783b 100644 --- a/advisories/unreviewed/2023/12/GHSA-pffw-x78w-whm6/GHSA-pffw-x78w-whm6.json +++ b/advisories/unreviewed/2023/12/GHSA-pffw-x78w-whm6/GHSA-pffw-x78w-whm6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-q888-3545-hc74/GHSA-q888-3545-hc74.json b/advisories/unreviewed/2023/12/GHSA-q888-3545-hc74/GHSA-q888-3545-hc74.json index 0abb0ace450..1f7534599bd 100644 --- a/advisories/unreviewed/2023/12/GHSA-q888-3545-hc74/GHSA-q888-3545-hc74.json +++ b/advisories/unreviewed/2023/12/GHSA-q888-3545-hc74/GHSA-q888-3545-hc74.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-vc54-vp3p-v68c/GHSA-vc54-vp3p-v68c.json b/advisories/unreviewed/2023/12/GHSA-vc54-vp3p-v68c/GHSA-vc54-vp3p-v68c.json index c85de8e83de..76bbc5e2b20 100644 --- a/advisories/unreviewed/2023/12/GHSA-vc54-vp3p-v68c/GHSA-vc54-vp3p-v68c.json +++ b/advisories/unreviewed/2023/12/GHSA-vc54-vp3p-v68c/GHSA-vc54-vp3p-v68c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-w3fm-fc4w-pjgq/GHSA-w3fm-fc4w-pjgq.json b/advisories/unreviewed/2023/12/GHSA-w3fm-fc4w-pjgq/GHSA-w3fm-fc4w-pjgq.json index 01445665d38..8968898b0ef 100644 --- a/advisories/unreviewed/2023/12/GHSA-w3fm-fc4w-pjgq/GHSA-w3fm-fc4w-pjgq.json +++ b/advisories/unreviewed/2023/12/GHSA-w3fm-fc4w-pjgq/GHSA-w3fm-fc4w-pjgq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-wf8v-9h5c-4rcm/GHSA-wf8v-9h5c-4rcm.json b/advisories/unreviewed/2023/12/GHSA-wf8v-9h5c-4rcm/GHSA-wf8v-9h5c-4rcm.json index 6f9d70dd8ba..86e2c4608f8 100644 --- a/advisories/unreviewed/2023/12/GHSA-wf8v-9h5c-4rcm/GHSA-wf8v-9h5c-4rcm.json +++ b/advisories/unreviewed/2023/12/GHSA-wf8v-9h5c-4rcm/GHSA-wf8v-9h5c-4rcm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-f27j-4f6g-jp27/GHSA-f27j-4f6g-jp27.json b/advisories/unreviewed/2024/02/GHSA-f27j-4f6g-jp27/GHSA-f27j-4f6g-jp27.json index ec2aee48dd5..44e9e55d0d5 100644 --- a/advisories/unreviewed/2024/02/GHSA-f27j-4f6g-jp27/GHSA-f27j-4f6g-jp27.json +++ b/advisories/unreviewed/2024/02/GHSA-f27j-4f6g-jp27/GHSA-f27j-4f6g-jp27.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-m27w-wvc9-v4mq/GHSA-m27w-wvc9-v4mq.json b/advisories/unreviewed/2024/02/GHSA-m27w-wvc9-v4mq/GHSA-m27w-wvc9-v4mq.json index 2851170ac22..d90c96f450d 100644 --- a/advisories/unreviewed/2024/02/GHSA-m27w-wvc9-v4mq/GHSA-m27w-wvc9-v4mq.json +++ b/advisories/unreviewed/2024/02/GHSA-m27w-wvc9-v4mq/GHSA-m27w-wvc9-v4mq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-p2vw-f9rr-2m2r/GHSA-p2vw-f9rr-2m2r.json b/advisories/unreviewed/2024/03/GHSA-p2vw-f9rr-2m2r/GHSA-p2vw-f9rr-2m2r.json index e8645ff8a00..c85864d1897 100644 --- a/advisories/unreviewed/2024/03/GHSA-p2vw-f9rr-2m2r/GHSA-p2vw-f9rr-2m2r.json +++ b/advisories/unreviewed/2024/03/GHSA-p2vw-f9rr-2m2r/GHSA-p2vw-f9rr-2m2r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-3rw8-47pg-9h95/GHSA-3rw8-47pg-9h95.json b/advisories/unreviewed/2024/05/GHSA-3rw8-47pg-9h95/GHSA-3rw8-47pg-9h95.json index 24a218f8e3e..38f724b258c 100644 --- a/advisories/unreviewed/2024/05/GHSA-3rw8-47pg-9h95/GHSA-3rw8-47pg-9h95.json +++ b/advisories/unreviewed/2024/05/GHSA-3rw8-47pg-9h95/GHSA-3rw8-47pg-9h95.json @@ -7,12 +7,8 @@ "CVE-2024-26953" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: esp: fix bad handling of pages from page_pool\n\nWhen the skb is reorganized during esp_output (!esp->inline), the pages\ncoming from the original skb fragments are supposed to be released back\nto the system through put_page. But if the skb fragment pages are\noriginating from a page_pool, calling put_page on them will trigger a\npage_pool leak which will eventually result in a crash.\n\nThis leak can be easily observed when using CONFIG_DEBUG_VM and doing\nipsec + gre (non offloaded) forwarding:\n\n BUG: Bad page state in process ksoftirqd/16 pfn:1451b6\n page:00000000de2b8d32 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1451b6000 pfn:0x1451b6\n flags: 0x200000000000000(node=0|zone=2)\n page_type: 0xffffffff()\n raw: 0200000000000000 dead000000000040 ffff88810d23c000 0000000000000000\n raw: 00000001451b6000 0000000000000001 00000000ffffffff 0000000000000000\n page dumped because: page_pool leak\n Modules linked in: ip_gre gre mlx5_ib mlx5_core xt_conntrack xt_MASQUERADE nf_conntrack_netlink nfnetlink iptable_nat nf_nat xt_addrtype br_netfilter rpcrdma rdma_ucm ib_iser libiscsi scsi_transport_iscsi ib_umad rdma_cm ib_ipoib iw_cm ib_cm ib_uverbs ib_core overlay zram zsmalloc fuse [last unloaded: mlx5_core]\n CPU: 16 PID: 96 Comm: ksoftirqd/16 Not tainted 6.8.0-rc4+ #22\n Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.13.0-0-gf21b5a4aeb02-prebuilt.qemu.org 04/01/2014\n Call Trace:\n \n dump_stack_lvl+0x36/0x50\n bad_page+0x70/0xf0\n free_unref_page_prepare+0x27a/0x460\n free_unref_page+0x38/0x120\n esp_ssg_unref.isra.0+0x15f/0x200\n esp_output_tail+0x66d/0x780\n esp_xmit+0x2c5/0x360\n validate_xmit_xfrm+0x313/0x370\n ? validate_xmit_skb+0x1d/0x330\n validate_xmit_skb_list+0x4c/0x70\n sch_direct_xmit+0x23e/0x350\n __dev_queue_xmit+0x337/0xba0\n ? nf_hook_slow+0x3f/0xd0\n ip_finish_output2+0x25e/0x580\n iptunnel_xmit+0x19b/0x240\n ip_tunnel_xmit+0x5fb/0xb60\n ipgre_xmit+0x14d/0x280 [ip_gre]\n dev_hard_start_xmit+0xc3/0x1c0\n __dev_queue_xmit+0x208/0xba0\n ? nf_hook_slow+0x3f/0xd0\n ip_finish_output2+0x1ca/0x580\n ip_sublist_rcv_finish+0x32/0x40\n ip_sublist_rcv+0x1b2/0x1f0\n ? ip_rcv_finish_core.constprop.0+0x460/0x460\n ip_list_rcv+0x103/0x130\n __netif_receive_skb_list_core+0x181/0x1e0\n netif_receive_skb_list_internal+0x1b3/0x2c0\n napi_gro_receive+0xc8/0x200\n gro_cell_poll+0x52/0x90\n __napi_poll+0x25/0x1a0\n net_rx_action+0x28e/0x300\n __do_softirq+0xc3/0x276\n ? sort_range+0x20/0x20\n run_ksoftirqd+0x1e/0x30\n smpboot_thread_fn+0xa6/0x130\n kthread+0xcd/0x100\n ? kthread_complete_and_exit+0x20/0x20\n ret_from_fork+0x31/0x50\n ? kthread_complete_and_exit+0x20/0x20\n ret_from_fork_asm+0x11/0x20\n \n\nThe suggested fix is to introduce a new wrapper (skb_page_unref) that\ncovers page refcounting for page_pool pages as well.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/06/GHSA-8c4j-c9q8-whxc/GHSA-8c4j-c9q8-whxc.json b/advisories/unreviewed/2024/06/GHSA-8c4j-c9q8-whxc/GHSA-8c4j-c9q8-whxc.json index 82e31513fb0..abde1f7eb8e 100644 --- a/advisories/unreviewed/2024/06/GHSA-8c4j-c9q8-whxc/GHSA-8c4j-c9q8-whxc.json +++ b/advisories/unreviewed/2024/06/GHSA-8c4j-c9q8-whxc/GHSA-8c4j-c9q8-whxc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-mhww-7h5r-9h8q/GHSA-mhww-7h5r-9h8q.json b/advisories/unreviewed/2024/06/GHSA-mhww-7h5r-9h8q/GHSA-mhww-7h5r-9h8q.json index 6613c97f8a5..3c2efdc337a 100644 --- a/advisories/unreviewed/2024/06/GHSA-mhww-7h5r-9h8q/GHSA-mhww-7h5r-9h8q.json +++ b/advisories/unreviewed/2024/06/GHSA-mhww-7h5r-9h8q/GHSA-mhww-7h5r-9h8q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-288r-8c88-j3w5/GHSA-288r-8c88-j3w5.json b/advisories/unreviewed/2024/07/GHSA-288r-8c88-j3w5/GHSA-288r-8c88-j3w5.json index 9bb8ec8911a..6b4fdd8ea50 100644 --- a/advisories/unreviewed/2024/07/GHSA-288r-8c88-j3w5/GHSA-288r-8c88-j3w5.json +++ b/advisories/unreviewed/2024/07/GHSA-288r-8c88-j3w5/GHSA-288r-8c88-j3w5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-2qjp-mp57-2fp8/GHSA-2qjp-mp57-2fp8.json b/advisories/unreviewed/2024/07/GHSA-2qjp-mp57-2fp8/GHSA-2qjp-mp57-2fp8.json index 94cc1397e8c..8852a0e30f4 100644 --- a/advisories/unreviewed/2024/07/GHSA-2qjp-mp57-2fp8/GHSA-2qjp-mp57-2fp8.json +++ b/advisories/unreviewed/2024/07/GHSA-2qjp-mp57-2fp8/GHSA-2qjp-mp57-2fp8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-567v-8hw8-qphr/GHSA-567v-8hw8-qphr.json b/advisories/unreviewed/2024/07/GHSA-567v-8hw8-qphr/GHSA-567v-8hw8-qphr.json index dd461161c67..2e3de7e8fd6 100644 --- a/advisories/unreviewed/2024/07/GHSA-567v-8hw8-qphr/GHSA-567v-8hw8-qphr.json +++ b/advisories/unreviewed/2024/07/GHSA-567v-8hw8-qphr/GHSA-567v-8hw8-qphr.json @@ -7,12 +7,8 @@ "CVE-2022-48831" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nima: fix reference leak in asymmetric_verify()\n\nDon't leak a reference to the key if its algorithm is unknown.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-7x4x-g7pr-2356/GHSA-7x4x-g7pr-2356.json b/advisories/unreviewed/2024/07/GHSA-7x4x-g7pr-2356/GHSA-7x4x-g7pr-2356.json index 78798433ac7..25daa9416ce 100644 --- a/advisories/unreviewed/2024/07/GHSA-7x4x-g7pr-2356/GHSA-7x4x-g7pr-2356.json +++ b/advisories/unreviewed/2024/07/GHSA-7x4x-g7pr-2356/GHSA-7x4x-g7pr-2356.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-9wm5-v97c-mv82/GHSA-9wm5-v97c-mv82.json b/advisories/unreviewed/2024/07/GHSA-9wm5-v97c-mv82/GHSA-9wm5-v97c-mv82.json index bb8f824bce6..7ed59c86f94 100644 --- a/advisories/unreviewed/2024/07/GHSA-9wm5-v97c-mv82/GHSA-9wm5-v97c-mv82.json +++ b/advisories/unreviewed/2024/07/GHSA-9wm5-v97c-mv82/GHSA-9wm5-v97c-mv82.json @@ -7,12 +7,8 @@ "CVE-2022-48816" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: lock against ->sock changing during sysfs read\n\n->sock can be set to NULL asynchronously unless ->recv_mutex is held.\nSo it is important to hold that mutex. Otherwise a sysfs read can\ntrigger an oops.\nCommit 17f09d3f619a (\"SUNRPC: Check if the xprt is connected before\nhandling sysfs reads\") appears to attempt to fix this problem, but it\nonly narrows the race window.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-cmrj-7qg8-pwx8/GHSA-cmrj-7qg8-pwx8.json b/advisories/unreviewed/2024/07/GHSA-cmrj-7qg8-pwx8/GHSA-cmrj-7qg8-pwx8.json index da2aef1e145..60868aabd00 100644 --- a/advisories/unreviewed/2024/07/GHSA-cmrj-7qg8-pwx8/GHSA-cmrj-7qg8-pwx8.json +++ b/advisories/unreviewed/2024/07/GHSA-cmrj-7qg8-pwx8/GHSA-cmrj-7qg8-pwx8.json @@ -7,12 +7,8 @@ "CVE-2022-48832" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\naudit: don't deref the syscall args when checking the openat2 open_how::flags\n\nAs reported by Jeff, dereferencing the openat2 syscall argument in\naudit_match_perm() to obtain the open_how::flags can result in an\noops/page-fault. This patch fixes this by using the open_how struct\nthat we store in the audit_context with audit_openat2_how().\n\nIndependent of this patch, Richard Guy Briggs posted a similar patch\nto the audit mailing list roughly 40 minutes after this patch was\nposted.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-g43c-r7c6-fhrv/GHSA-g43c-r7c6-fhrv.json b/advisories/unreviewed/2024/07/GHSA-g43c-r7c6-fhrv/GHSA-g43c-r7c6-fhrv.json index f3dfc7b5b9c..d2f09ebf9f0 100644 --- a/advisories/unreviewed/2024/07/GHSA-g43c-r7c6-fhrv/GHSA-g43c-r7c6-fhrv.json +++ b/advisories/unreviewed/2024/07/GHSA-g43c-r7c6-fhrv/GHSA-g43c-r7c6-fhrv.json @@ -7,12 +7,8 @@ "CVE-2022-48827" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Fix the behavior of READ near OFFSET_MAX\n\nDan Aloni reports:\n> Due to commit 8cfb9015280d (\"NFS: Always provide aligned buffers to\n> the RPC read layers\") on the client, a read of 0xfff is aligned up\n> to server rsize of 0x1000.\n>\n> As a result, in a test where the server has a file of size\n> 0x7fffffffffffffff, and the client tries to read from the offset\n> 0x7ffffffffffff000, the read causes loff_t overflow in the server\n> and it returns an NFS code of EINVAL to the client. The client as\n> a result indefinitely retries the request.\n\nThe Linux NFS client does not handle NFS?ERR_INVAL, even though all\nNFS specifications permit servers to return that status code for a\nREAD.\n\nInstead of NFS?ERR_INVAL, have out-of-range READ requests succeed\nand return a short result. Set the EOF flag in the result to prevent\nthe client from retrying the READ request. This behavior appears to\nbe consistent with Solaris NFS servers.\n\nNote that NFSv3 and NFSv4 use u64 offset values on the wire. These\nmust be converted to loff_t internally before use -- an implicit\ntype cast is not adequate for this purpose. Otherwise VFS checks\nagainst sb->s_maxbytes do not work properly.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-h4q9-9fhm-542g/GHSA-h4q9-9fhm-542g.json b/advisories/unreviewed/2024/07/GHSA-h4q9-9fhm-542g/GHSA-h4q9-9fhm-542g.json index b3721d1b78e..2898d5f6123 100644 --- a/advisories/unreviewed/2024/07/GHSA-h4q9-9fhm-542g/GHSA-h4q9-9fhm-542g.json +++ b/advisories/unreviewed/2024/07/GHSA-h4q9-9fhm-542g/GHSA-h4q9-9fhm-542g.json @@ -7,12 +7,8 @@ "CVE-2022-48821" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: fastrpc: avoid double fput() on failed usercopy\n\nIf the copy back to userland fails for the FASTRPC_IOCTL_ALLOC_DMA_BUFF\nioctl(), we shouldn't assume that 'buf->dmabuf' is still valid. In fact,\ndma_buf_fd() called fd_install() before, i.e. \"consumed\" one reference,\nleaving us with none.\n\nCalling dma_buf_put() will therefore put a reference we no longer own,\nleading to a valid file descritor table entry for an already released\n'file' object which is a straight use-after-free.\n\nSimply avoid calling dma_buf_put() and rely on the process exit code to\ndo the necessary cleanup, if needed, i.e. if the file descriptor is\nstill valid.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-h976-8v6c-8j56/GHSA-h976-8v6c-8j56.json b/advisories/unreviewed/2024/07/GHSA-h976-8v6c-8j56/GHSA-h976-8v6c-8j56.json index f08de09ca3b..5ca85030b09 100644 --- a/advisories/unreviewed/2024/07/GHSA-h976-8v6c-8j56/GHSA-h976-8v6c-8j56.json +++ b/advisories/unreviewed/2024/07/GHSA-h976-8v6c-8j56/GHSA-h976-8v6c-8j56.json @@ -7,12 +7,8 @@ "CVE-2022-48815" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: bcm_sf2: don't use devres for mdiobus\n\nAs explained in commits:\n74b6d7d13307 (\"net: dsa: realtek: register the MDIO bus under devres\")\n5135e96a3dd2 (\"net: dsa: don't allocate the slave_mii_bus using devres\")\n\nmdiobus_free() will panic when called from devm_mdiobus_free() <-\ndevres_release_all() <- __device_release_driver(), and that mdiobus was\nnot previously unregistered.\n\nThe Starfighter 2 is a platform device, so the initial set of\nconstraints that I thought would cause this (I2C or SPI buses which call\n->remove on ->shutdown) do not apply. But there is one more which\napplies here.\n\nIf the DSA master itself is on a bus that calls ->remove from ->shutdown\n(like dpaa2-eth, which is on the fsl-mc bus), there is a device link\nbetween the switch and the DSA master, and device_links_unbind_consumers()\nwill unbind the bcm_sf2 switch driver on shutdown.\n\nSo the same treatment must be applied to all DSA switch drivers, which\nis: either use devres for both the mdiobus allocation and registration,\nor don't use devres at all.\n\nThe bcm_sf2 driver has the code structure in place for orderly mdiobus\nremoval, so just replace devm_mdiobus_alloc() with the non-devres\nvariant, and add manual free where necessary, to ensure that we don't\nlet devres free a still-registered bus.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-j7gw-xcvp-f76q/GHSA-j7gw-xcvp-f76q.json b/advisories/unreviewed/2024/07/GHSA-j7gw-xcvp-f76q/GHSA-j7gw-xcvp-f76q.json index 369b639015d..9699227d11b 100644 --- a/advisories/unreviewed/2024/07/GHSA-j7gw-xcvp-f76q/GHSA-j7gw-xcvp-f76q.json +++ b/advisories/unreviewed/2024/07/GHSA-j7gw-xcvp-f76q/GHSA-j7gw-xcvp-f76q.json @@ -7,12 +7,8 @@ "CVE-2022-48828" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Fix ia_size underflow\n\niattr::ia_size is a loff_t, which is a signed 64-bit type. NFSv3 and\nNFSv4 both define file size as an unsigned 64-bit type. Thus there\nis a range of valid file size values an NFS client can send that is\nalready larger than Linux can handle.\n\nCurrently decode_fattr4() dumps a full u64 value into ia_size. If\nthat value happens to be larger than S64_MAX, then ia_size\nunderflows. I'm about to fix up the NFSv3 behavior as well, so let's\ncatch the underflow in the common code path: nfsd_setattr().", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-pm8c-jgcw-6vj7/GHSA-pm8c-jgcw-6vj7.json b/advisories/unreviewed/2024/07/GHSA-pm8c-jgcw-6vj7/GHSA-pm8c-jgcw-6vj7.json index c742c509aa2..f1d05c723b4 100644 --- a/advisories/unreviewed/2024/07/GHSA-pm8c-jgcw-6vj7/GHSA-pm8c-jgcw-6vj7.json +++ b/advisories/unreviewed/2024/07/GHSA-pm8c-jgcw-6vj7/GHSA-pm8c-jgcw-6vj7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-pmvp-cjhm-664w/GHSA-pmvp-cjhm-664w.json b/advisories/unreviewed/2024/07/GHSA-pmvp-cjhm-664w/GHSA-pmvp-cjhm-664w.json index 2b615afcdef..da562169eab 100644 --- a/advisories/unreviewed/2024/07/GHSA-pmvp-cjhm-664w/GHSA-pmvp-cjhm-664w.json +++ b/advisories/unreviewed/2024/07/GHSA-pmvp-cjhm-664w/GHSA-pmvp-cjhm-664w.json @@ -7,12 +7,8 @@ "CVE-2022-48823" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: qedf: Fix refcount issue when LOGO is received during TMF\n\nHung task call trace was seen during LOGO processing.\n\n[ 974.309060] [0000:00:00.0]:[qedf_eh_device_reset:868]: 1:0:2:0: LUN RESET Issued...\n[ 974.309065] [0000:00:00.0]:[qedf_initiate_tmf:2422]: tm_flags 0x10 sc_cmd 00000000c16b930f op = 0x2a target_id = 0x2 lun=0\n[ 974.309178] [0000:00:00.0]:[qedf_initiate_tmf:2431]: portid=016900 tm_flags =LUN RESET\n[ 974.309222] [0000:00:00.0]:[qedf_initiate_tmf:2438]: orig io_req = 00000000ec78df8f xid = 0x180 ref_cnt = 1.\n[ 974.309625] host1: rport 016900: Received LOGO request while in state Ready\n[ 974.309627] host1: rport 016900: Delete port\n[ 974.309642] host1: rport 016900: work event 3\n[ 974.309644] host1: rport 016900: lld callback ev 3\n[ 974.313243] [0000:61:00.2]:[qedf_execute_tmf:2383]:1: fcport is uploading, not executing flush.\n[ 974.313295] [0000:61:00.2]:[qedf_execute_tmf:2400]:1: task mgmt command success...\n[ 984.031088] INFO: task jbd2/dm-15-8:7645 blocked for more than 120 seconds.\n[ 984.031136] Not tainted 4.18.0-305.el8.x86_64 #1\n\n[ 984.031166] \"echo 0 > /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n[ 984.031209] jbd2/dm-15-8 D 0 7645 2 0x80004080\n[ 984.031212] Call Trace:\n[ 984.031222] __schedule+0x2c4/0x700\n[ 984.031230] ? unfreeze_partials.isra.83+0x16e/0x1a0\n[ 984.031233] ? bit_wait_timeout+0x90/0x90\n[ 984.031235] schedule+0x38/0xa0\n[ 984.031238] io_schedule+0x12/0x40\n[ 984.031240] bit_wait_io+0xd/0x50\n[ 984.031243] __wait_on_bit+0x6c/0x80\n[ 984.031248] ? free_buffer_head+0x21/0x50\n[ 984.031251] out_of_line_wait_on_bit+0x91/0xb0\n[ 984.031257] ? init_wait_var_entry+0x50/0x50\n[ 984.031268] jbd2_journal_commit_transaction+0x112e/0x19f0 [jbd2]\n[ 984.031280] kjournald2+0xbd/0x270 [jbd2]\n[ 984.031284] ? finish_wait+0x80/0x80\n[ 984.031291] ? commit_timeout+0x10/0x10 [jbd2]\n[ 984.031294] kthread+0x116/0x130\n[ 984.031300] ? kthread_flush_work_fn+0x10/0x10\n[ 984.031305] ret_from_fork+0x1f/0x40\n\nThere was a ref count issue when LOGO is received during TMF. This leads to\none of the I/Os hanging with the driver. Fix the ref count.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-px8r-2q8w-48v9/GHSA-px8r-2q8w-48v9.json b/advisories/unreviewed/2024/07/GHSA-px8r-2q8w-48v9/GHSA-px8r-2q8w-48v9.json index c1845b31728..5b95202f919 100644 --- a/advisories/unreviewed/2024/07/GHSA-px8r-2q8w-48v9/GHSA-px8r-2q8w-48v9.json +++ b/advisories/unreviewed/2024/07/GHSA-px8r-2q8w-48v9/GHSA-px8r-2q8w-48v9.json @@ -7,12 +7,8 @@ "CVE-2022-48814" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: seville: register the mdiobus under devres\n\nAs explained in commits:\n74b6d7d13307 (\"net: dsa: realtek: register the MDIO bus under devres\")\n5135e96a3dd2 (\"net: dsa: don't allocate the slave_mii_bus using devres\")\n\nmdiobus_free() will panic when called from devm_mdiobus_free() <-\ndevres_release_all() <- __device_release_driver(), and that mdiobus was\nnot previously unregistered.\n\nThe Seville VSC9959 switch is a platform device, so the initial set of\nconstraints that I thought would cause this (I2C or SPI buses which call\n->remove on ->shutdown) do not apply. But there is one more which\napplies here.\n\nIf the DSA master itself is on a bus that calls ->remove from ->shutdown\n(like dpaa2-eth, which is on the fsl-mc bus), there is a device link\nbetween the switch and the DSA master, and device_links_unbind_consumers()\nwill unbind the seville switch driver on shutdown.\n\nSo the same treatment must be applied to all DSA switch drivers, which\nis: either use devres for both the mdiobus allocation and registration,\nor don't use devres at all.\n\nThe seville driver has a code structure that could accommodate both the\nmdiobus_unregister and mdiobus_free calls, but it has an external\ndependency upon mscc_miim_setup() from mdio-mscc-miim.c, which calls\ndevm_mdiobus_alloc_size() on its behalf. So rather than restructuring\nthat, and exporting yet one more symbol mscc_miim_teardown(), let's work\nwith devres and replace of_mdiobus_register with the devres variant.\nWhen we use all-devres, we can ensure that devres doesn't free a\nstill-registered bus (it either runs both callbacks, or none).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-qj89-gqxq-9f84/GHSA-qj89-gqxq-9f84.json b/advisories/unreviewed/2024/07/GHSA-qj89-gqxq-9f84/GHSA-qj89-gqxq-9f84.json index 35ccaef004e..2168f9261e1 100644 --- a/advisories/unreviewed/2024/07/GHSA-qj89-gqxq-9f84/GHSA-qj89-gqxq-9f84.json +++ b/advisories/unreviewed/2024/07/GHSA-qj89-gqxq-9f84/GHSA-qj89-gqxq-9f84.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-rrm5-vq26-9v4c/GHSA-rrm5-vq26-9v4c.json b/advisories/unreviewed/2024/07/GHSA-rrm5-vq26-9v4c/GHSA-rrm5-vq26-9v4c.json index 6f7d222b639..76b603204e6 100644 --- a/advisories/unreviewed/2024/07/GHSA-rrm5-vq26-9v4c/GHSA-rrm5-vq26-9v4c.json +++ b/advisories/unreviewed/2024/07/GHSA-rrm5-vq26-9v4c/GHSA-rrm5-vq26-9v4c.json @@ -7,12 +7,8 @@ "CVE-2022-48830" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: isotp: fix potential CAN frame reception race in isotp_rcv()\n\nWhen receiving a CAN frame the current code logic does not consider\nconcurrently receiving processes which do not show up in real world\nusage.\n\nZiyang Xuan writes:\n\nThe following syz problem is one of the scenarios. so->rx.len is\nchanged by isotp_rcv_ff() during isotp_rcv_cf(), so->rx.len equals\n0 before alloc_skb() and equals 4096 after alloc_skb(). That will\ntrigger skb_over_panic() in skb_put().\n\n=======================================================\nCPU: 1 PID: 19 Comm: ksoftirqd/1 Not tainted 5.16.0-rc8-syzkaller #0\nRIP: 0010:skb_panic+0x16c/0x16e net/core/skbuff.c:113\nCall Trace:\n \n skb_over_panic net/core/skbuff.c:118 [inline]\n skb_put.cold+0x24/0x24 net/core/skbuff.c:1990\n isotp_rcv_cf net/can/isotp.c:570 [inline]\n isotp_rcv+0xa38/0x1e30 net/can/isotp.c:668\n deliver net/can/af_can.c:574 [inline]\n can_rcv_filter+0x445/0x8d0 net/can/af_can.c:635\n can_receive+0x31d/0x580 net/can/af_can.c:665\n can_rcv+0x120/0x1c0 net/can/af_can.c:696\n __netif_receive_skb_one_core+0x114/0x180 net/core/dev.c:5465\n __netif_receive_skb+0x24/0x1b0 net/core/dev.c:5579\n\nTherefore we make sure the state changes and data structures stay\nconsistent at CAN frame reception time by adding a spin_lock in\nisotp_rcv(). This fixes the issue reported by syzkaller but does not\naffect real world operation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-v5c5-m6wp-9rf7/GHSA-v5c5-m6wp-9rf7.json b/advisories/unreviewed/2024/07/GHSA-v5c5-m6wp-9rf7/GHSA-v5c5-m6wp-9rf7.json index 795c0a046ce..7b521252635 100644 --- a/advisories/unreviewed/2024/07/GHSA-v5c5-m6wp-9rf7/GHSA-v5c5-m6wp-9rf7.json +++ b/advisories/unreviewed/2024/07/GHSA-v5c5-m6wp-9rf7/GHSA-v5c5-m6wp-9rf7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null,