diff --git a/advisories/unreviewed/2023/05/GHSA-cx3c-2jcw-jmfg/GHSA-cx3c-2jcw-jmfg.json b/advisories/unreviewed/2023/05/GHSA-cx3c-2jcw-jmfg/GHSA-cx3c-2jcw-jmfg.json new file mode 100644 index 00000000000..05d87b4a545 --- /dev/null +++ b/advisories/unreviewed/2023/05/GHSA-cx3c-2jcw-jmfg/GHSA-cx3c-2jcw-jmfg.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cx3c-2jcw-jmfg", + "modified": "2023-05-22T06:30:15Z", + "published": "2023-05-22T06:30:15Z", + "aliases": [ + "CVE-2023-33235" + ], + "details": "MXsecurity version 1.0 is vulnearble to command injection vulnerability. This vulnerability has been reported in the SSH CLI program, which can be exploited by attackers who have gained authorization privileges. The attackers can break out of the restricted shell and subsequently execute arbitrary code.\n\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33235" + }, + { + "type": "WEB", + "url": "https://www.moxa.com/en/support/product-support/security-advisory/mxsecurity-command-injection-and-hardcoded-credential-vulnerabilities" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-77" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": null + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2023/05/GHSA-m3p3-xhrf-jxm7/GHSA-m3p3-xhrf-jxm7.json b/advisories/unreviewed/2023/05/GHSA-m3p3-xhrf-jxm7/GHSA-m3p3-xhrf-jxm7.json index d405200c2cd..fdfa967e3fe 100644 --- a/advisories/unreviewed/2023/05/GHSA-m3p3-xhrf-jxm7/GHSA-m3p3-xhrf-jxm7.json +++ b/advisories/unreviewed/2023/05/GHSA-m3p3-xhrf-jxm7/GHSA-m3p3-xhrf-jxm7.json @@ -22,6 +22,10 @@ "type": "WEB", "url": "https://0xdf.gitlab.io/2020/09/05/htb-remote.html" }, + { + "type": "WEB", + "url": "https://github.com/Ickarah/CVE-2019-25137-Version-Research" + }, { "type": "WEB", "url": "https://github.com/noraj/Umbraco-RCE" diff --git a/advisories/unreviewed/2023/05/GHSA-mv5m-45gv-gh97/GHSA-mv5m-45gv-gh97.json b/advisories/unreviewed/2023/05/GHSA-mv5m-45gv-gh97/GHSA-mv5m-45gv-gh97.json index 767dbaaad49..e2b41e1a014 100644 --- a/advisories/unreviewed/2023/05/GHSA-mv5m-45gv-gh97/GHSA-mv5m-45gv-gh97.json +++ b/advisories/unreviewed/2023/05/GHSA-mv5m-45gv-gh97/GHSA-mv5m-45gv-gh97.json @@ -29,6 +29,10 @@ "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/" }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/" + }, { "type": "WEB", "url": "https://www.sqlite.org/cves.html" diff --git a/advisories/unreviewed/2023/05/GHSA-q9gq-6cqp-445j/GHSA-q9gq-6cqp-445j.json b/advisories/unreviewed/2023/05/GHSA-q9gq-6cqp-445j/GHSA-q9gq-6cqp-445j.json new file mode 100644 index 00000000000..58438f2d1c1 --- /dev/null +++ b/advisories/unreviewed/2023/05/GHSA-q9gq-6cqp-445j/GHSA-q9gq-6cqp-445j.json @@ -0,0 +1,51 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-q9gq-6cqp-445j", + "modified": "2023-05-22T06:30:15Z", + "published": "2023-05-22T06:30:15Z", + "aliases": [ + "CVE-2023-33297" + ], + "details": "Bitcoin Core before 24.1, when debug mode is not used, allows attackers to cause a denial of service (CPU consumption) because draining the inventory-to-send queue is inefficient, as exploited in the wild in May 2023.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33297" + }, + { + "type": "WEB", + "url": "https://github.com/bitcoin/bitcoin/issues/27586" + }, + { + "type": "WEB", + "url": "https://github.com/bitcoin/bitcoin/issues/27623" + }, + { + "type": "WEB", + "url": "https://github.com/bitcoin/bitcoin/pull/27610" + }, + { + "type": "WEB", + "url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures" + }, + { + "type": "WEB", + "url": "https://github.com/bitcoin/bitcoin/blob/master/doc/release-notes/release-notes-24.1.md" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": null + } +} \ No newline at end of file