From 52534756e82c6122de405d7b2b6ff0d61b902fb5 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Mon, 22 May 2023 06:31:28 +0000
Subject: [PATCH] Publish Advisories

GHSA-cx3c-2jcw-jmfg
GHSA-m3p3-xhrf-jxm7
GHSA-mv5m-45gv-gh97
GHSA-q9gq-6cqp-445j
---
 .../GHSA-cx3c-2jcw-jmfg.json                  | 38 ++++++++++++++
 .../GHSA-m3p3-xhrf-jxm7.json                  |  4 ++
 .../GHSA-mv5m-45gv-gh97.json                  |  4 ++
 .../GHSA-q9gq-6cqp-445j.json                  | 51 +++++++++++++++++++
 4 files changed, 97 insertions(+)
 create mode 100644 advisories/unreviewed/2023/05/GHSA-cx3c-2jcw-jmfg/GHSA-cx3c-2jcw-jmfg.json
 create mode 100644 advisories/unreviewed/2023/05/GHSA-q9gq-6cqp-445j/GHSA-q9gq-6cqp-445j.json

diff --git a/advisories/unreviewed/2023/05/GHSA-cx3c-2jcw-jmfg/GHSA-cx3c-2jcw-jmfg.json b/advisories/unreviewed/2023/05/GHSA-cx3c-2jcw-jmfg/GHSA-cx3c-2jcw-jmfg.json
new file mode 100644
index 00000000000..05d87b4a545
--- /dev/null
+++ b/advisories/unreviewed/2023/05/GHSA-cx3c-2jcw-jmfg/GHSA-cx3c-2jcw-jmfg.json
@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cx3c-2jcw-jmfg",
+  "modified": "2023-05-22T06:30:15Z",
+  "published": "2023-05-22T06:30:15Z",
+  "aliases": [
+    "CVE-2023-33235"
+  ],
+  "details": "MXsecurity version 1.0 is vulnearble to command injection vulnerability. This vulnerability has been reported in the SSH CLI program, which can be exploited by attackers who have gained authorization privileges. The attackers can break out of the restricted shell and subsequently execute arbitrary code.\n\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33235"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.moxa.com/en/support/product-support/security-advisory/mxsecurity-command-injection-and-hardcoded-credential-vulnerabilities"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-77"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": null
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2023/05/GHSA-m3p3-xhrf-jxm7/GHSA-m3p3-xhrf-jxm7.json b/advisories/unreviewed/2023/05/GHSA-m3p3-xhrf-jxm7/GHSA-m3p3-xhrf-jxm7.json
index d405200c2cd..fdfa967e3fe 100644
--- a/advisories/unreviewed/2023/05/GHSA-m3p3-xhrf-jxm7/GHSA-m3p3-xhrf-jxm7.json
+++ b/advisories/unreviewed/2023/05/GHSA-m3p3-xhrf-jxm7/GHSA-m3p3-xhrf-jxm7.json
@@ -22,6 +22,10 @@
       "type": "WEB",
       "url": "https://0xdf.gitlab.io/2020/09/05/htb-remote.html"
     },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Ickarah/CVE-2019-25137-Version-Research"
+    },
     {
       "type": "WEB",
       "url": "https://github.com/noraj/Umbraco-RCE"
diff --git a/advisories/unreviewed/2023/05/GHSA-mv5m-45gv-gh97/GHSA-mv5m-45gv-gh97.json b/advisories/unreviewed/2023/05/GHSA-mv5m-45gv-gh97/GHSA-mv5m-45gv-gh97.json
index 767dbaaad49..e2b41e1a014 100644
--- a/advisories/unreviewed/2023/05/GHSA-mv5m-45gv-gh97/GHSA-mv5m-45gv-gh97.json
+++ b/advisories/unreviewed/2023/05/GHSA-mv5m-45gv-gh97/GHSA-mv5m-45gv-gh97.json
@@ -29,6 +29,10 @@
       "type": "WEB",
       "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/73XUIHJ6UT75VFPDPLJOXJON7MVIKVZI/"
     },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FXFL4TDAH72PRCPD5UPZMJMKIMVOPLTI/"
+    },
     {
       "type": "WEB",
       "url": "https://www.sqlite.org/cves.html"
diff --git a/advisories/unreviewed/2023/05/GHSA-q9gq-6cqp-445j/GHSA-q9gq-6cqp-445j.json b/advisories/unreviewed/2023/05/GHSA-q9gq-6cqp-445j/GHSA-q9gq-6cqp-445j.json
new file mode 100644
index 00000000000..58438f2d1c1
--- /dev/null
+++ b/advisories/unreviewed/2023/05/GHSA-q9gq-6cqp-445j/GHSA-q9gq-6cqp-445j.json
@@ -0,0 +1,51 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-q9gq-6cqp-445j",
+  "modified": "2023-05-22T06:30:15Z",
+  "published": "2023-05-22T06:30:15Z",
+  "aliases": [
+    "CVE-2023-33297"
+  ],
+  "details": "Bitcoin Core before 24.1, when debug mode is not used, allows attackers to cause a denial of service (CPU consumption) because draining the inventory-to-send queue is inefficient, as exploited in the wild in May 2023.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-33297"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/bitcoin/bitcoin/issues/27586"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/bitcoin/bitcoin/issues/27623"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/bitcoin/bitcoin/pull/27610"
+    },
+    {
+      "type": "WEB",
+      "url": "https://en.bitcoin.it/wiki/Common_Vulnerabilities_and_Exposures"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/bitcoin/bitcoin/blob/master/doc/release-notes/release-notes-24.1.md"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": null
+  }
+}
\ No newline at end of file