Publish Advisories

GHSA-cx3c-2jcw-jmfg
GHSA-m3p3-xhrf-jxm7
GHSA-mv5m-45gv-gh97
GHSA-q9gq-6cqp-445j

advisories/unreviewed/2023/05/GHSA-cx3c-2jcw-jmfg/GHSA-cx3c-2jcw-jmfg.json

@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cx3c-2jcw-jmfg",
+  "modified": "2023-05-22T06:30:15Z",
+  "published": "2023-05-22T06:30:15Z",
+  "aliases": [
+    "CVE-2023-33235"
+  ],
+  "details": "MXsecurity version 1.0 is vulnearble to command injection vulnerability. This vulnerability has been reported in the SSH CLI program, which can be exploited by attackers who have gained authorization privileges. The attackers can break out of the restricted shell and subsequently execute arbitrary code.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33235"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.moxa.com/en/support/product-support/security-advisory/mxsecurity-command-injection-and-hardcoded-credential-vulnerabilities"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-77"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": null
+  }
+}

advisories/unreviewed/2023/05/GHSA-m3p3-xhrf-jxm7/GHSA-m3p3-xhrf-jxm7.json

@@ -22,6 +22,10 @@
       "type": "WEB",
       "url": "https://0xdf.gitlab.io/2020/09/05/htb-remote.html"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Ickarah/CVE-2019-25137-Version-Research"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/noraj/Umbraco-RCE"

advisories/unreviewed/2023/05/GHSA-mv5m-45gv-gh97/GHSA-mv5m-45gv-gh97.json

@@ -29,6 +29,10 @@
       "type": "WEB",
       "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/"
     },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/"
+    },
     {
       "type": "WEB",
       "url": "https://www.sqlite.org/cves.html"

advisories/unreviewed/2023/05/GHSA-q9gq-6cqp-445j/GHSA-q9gq-6cqp-445j.json

@@ -0,0 +1,51 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-q9gq-6cqp-445j",
+  "modified": "2023-05-22T06:30:15Z",
+  "published": "2023-05-22T06:30:15Z",
+  "aliases": [
+    "CVE-2023-33297"
+  ],
+  "details": "Bitcoin Core before 24.1, when debug mode is not used, allows attackers to cause a denial of service (CPU consumption) because draining the inventory-to-send queue is inefficient, as exploited in the wild in May 2023.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33297"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/bitcoin/bitcoin/issues/27586"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/bitcoin/bitcoin/issues/27623"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/bitcoin/bitcoin/pull/27610"
+    },
+    {
+      "type": "WEB",
+      "url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/bitcoin/bitcoin/blob/master/doc/release-notes/release-notes-24.1.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": null
+  }
+}