netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-08-30 15:32:49 +00:00
parent 5431bd28a5
commit 529004781e
34 changed files with 591 additions and 52 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/05/GHSA-gc9m-33cp-rmpj/GHSA-gc9m-33cp-rmpj.json
+1
View File
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-22",
"CWE-668"
],
"severity": "HIGH",
advisories/unreviewed/2024/01/GHSA-2w7q-mj4w-9cm2/GHSA-2w7q-mj4w-9cm2.json
+2 -1
View File
@@ -29,7 +29,8 @@
"database_specific": {
"cwe_ids": [
"CWE-284",
"CWE-668"
"CWE-668",
"CWE-863"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/06/GHSA-3492-v7j6-2xgv/GHSA-3492-v7j6-2xgv.json
+2 -1
View File
@@ -32,7 +32,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
"CWE-284",
"CWE-863"
],
"severity": "LOW",
"github_reviewed": false,
advisories/unreviewed/2024/06/GHSA-73p8-f56m-692w/GHSA-73p8-f56m-692w.json
+2 -1
View File
@@ -32,7 +32,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-200"
"CWE-200",
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/06/GHSA-9m27-xfxh-7vgv/GHSA-9m27-xfxh-7vgv.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9m27-xfxh-7vgv",
"modified": "2024-06-19T15:30:53Z",
"modified": "2024-08-30T15:31:25Z",
"published": "2024-06-19T15:30:53Z",
"aliases": [
"CVE-2024-38561"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nkunit: Fix kthread reference\n\nThere is a race condition when a kthread finishes after the deadline and\nbefore the call to kthread_stop(), which may lead to use after free.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -41,9 +44,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-19T14:15:16Z"
advisories/unreviewed/2024/06/GHSA-c3ph-4hj5-r598/GHSA-c3ph-4hj5-r598.json
+1
View File
@@ -32,6 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-1333",
"CWE-400"
],
"severity": "MODERATE",
advisories/unreviewed/2024/06/GHSA-chjh-944f-687f/GHSA-chjh-944f-687f.json
+2 -1
View File
@@ -28,7 +28,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-653"
"CWE-653",
"CWE-863"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/06/GHSA-wcf6-w83f-hp3h/GHSA-wcf6-w83f-hp3h.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wcf6-w83f-hp3h",
"modified": "2024-06-19T15:30:53Z",
"modified": "2024-08-30T15:31:25Z",
"published": "2024-06-19T15:30:53Z",
"aliases": [
"CVE-2024-38562"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: nl80211: Avoid address calculations via out of bounds array indexing\n\nBefore request->channels[] can be used, request->n_channels must be set.\nAdditionally, address calculations for memory after the \"channels\" array\nneed to be calculated from the allocation base (\"request\") rather than\nvia the first \"out of bounds\" index of \"channels\", otherwise run-time\nbounds checking will throw a warning.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-129"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-19T14:15:16Z"
advisories/unreviewed/2024/07/GHSA-5qwh-g35c-5mmm/GHSA-5qwh-g35c-5mmm.json
+2 -1
View File
@@ -33,7 +33,8 @@
"database_specific": {
"cwe_ids": [
"CWE-427",
"CWE-434"
"CWE-434",
"CWE-451"
],
"severity": "LOW",
"github_reviewed": false,
advisories/unreviewed/2024/08/GHSA-2gjq-7pvc-8hj3/GHSA-2gjq-7pvc-8hj3.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2gjq-7pvc-8hj3",
"modified": "2024-08-27T18:31:37Z",
"modified": "2024-08-30T15:31:26Z",
"published": "2024-08-27T18:31:37Z",
"aliases": [
"CVE-2024-8200"
advisories/unreviewed/2024/08/GHSA-36fq-3276-7898/GHSA-36fq-3276-7898.json
+54
View File
@@ -0,0 +1,54 @@
{
"schema_version": "1.4.0",
"id": "GHSA-36fq-3276-7898",
"modified": "2024-08-30T15:31:31Z",
"published": "2024-08-30T15:31:31Z",
"aliases": [
"CVE-2024-8335"
],
"details": "A vulnerability classified as critical has been found in OpenRapid RapidCMS up to 1.3.1. Affected is an unknown function of the file /resource/runlogon.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8335"
},
{
"type": "WEB",
"url": "https://gitee.com/A0kooo/cve_article/blob/master/RapidCMS/SQL%20injection2/rapidcms%20runlogon.php%20SQL%20injection.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.276210"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.276210"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.399005"
}
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-30T13:15:13Z"
}
}
advisories/unreviewed/2024/08/GHSA-3xcx-qx62-cpcx/GHSA-3xcx-qx62-cpcx.json
+58
View File
@@ -0,0 +1,58 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3xcx-qx62-cpcx",
"modified": "2024-08-30T15:31:31Z",
"published": "2024-08-30T15:31:31Z",
"aliases": [
"CVE-2024-8340"
],
"details": "A vulnerability classified as critical has been found in SourceCodester Electric Billing Management System 1.0. This affects an unknown part of the file /Actions.php?a=login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8340"
},
{
"type": "WEB",
"url": "https://github.com/enjoyworld/webray.com.cn/blob/main/cves/Electric%20Billing%20Management%20System/Electric%20Billing%20Managemen%20SQL-inject%20System%20Action.php%20SQL-inject.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.276219"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.276219"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.399548"
},
{
"type": "WEB",
"url": "https://www.sourcecodester.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-30T15:15:20Z"
}
}
advisories/unreviewed/2024/08/GHSA-52jj-6w68-3m25/GHSA-52jj-6w68-3m25.json
+2 -1
View File
@@ -28,7 +28,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-114"
"CWE-114",
"CWE-610"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/08/GHSA-5qxm-qvmj-8v79/GHSA-5qxm-qvmj-8v79.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5qxm-qvmj-8v79",
"modified": "2024-08-30T03:30:44Z",
"modified": "2024-08-30T15:31:30Z",
"published": "2024-08-30T03:30:44Z",
"aliases": [
"CVE-2024-45492"
],
"details": "An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c can have an integer overflow for m_groupSize on 32-bit platforms (where UINT_MAX equals SIZE_MAX).",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-190"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-30T03:15:03Z"
advisories/unreviewed/2024/08/GHSA-76qm-c9j2-wm6v/GHSA-76qm-c9j2-wm6v.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-76qm-c9j2-wm6v",
"modified": "2024-08-19T18:32:05Z",
"modified": "2024-08-30T15:31:26Z",
"published": "2024-08-12T15:30:51Z",
"aliases": [
"CVE-2024-5651"
advisories/unreviewed/2024/08/GHSA-784x-7qm2-gp97/GHSA-784x-7qm2-gp97.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-784x-7qm2-gp97",
"modified": "2024-08-30T03:30:44Z",
"modified": "2024-08-30T15:31:30Z",
"published": "2024-08-30T03:30:44Z",
"aliases": [
"CVE-2024-45491"
],
"details": "An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have an integer overflow for nDefaultAtts on 32-bit platforms (where UINT_MAX equals SIZE_MAX).",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-190"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-30T03:15:03Z"
advisories/unreviewed/2024/08/GHSA-7rfp-vjgq-5q3f/GHSA-7rfp-vjgq-5q3f.json
+58
View File
@@ -0,0 +1,58 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7rfp-vjgq-5q3f",
"modified": "2024-08-30T15:31:31Z",
"published": "2024-08-30T15:31:31Z",
"aliases": [
"CVE-2024-8336"
],
"details": "A vulnerability classified as critical was found in SourceCodester Music Gallery Site 1.0. Affected by this vulnerability is an unknown functionality of the file /php-music/classes/Master.php?f=delete_music. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8336"
},
{
"type": "WEB",
"url": "https://github.com/LiuHaoBin6/cve/blob/main/sql5.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.276211"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.276211"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.399039"
},
{
"type": "WEB",
"url": "https://www.sourcecodester.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-30T14:15:17Z"
}
}
advisories/unreviewed/2024/08/GHSA-9759-w49c-9j8f/GHSA-9759-w49c-9j8f.json
+58
View File
@@ -0,0 +1,58 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9759-w49c-9j8f",
"modified": "2024-08-30T15:31:31Z",
"published": "2024-08-30T15:31:31Z",
"aliases": [
"CVE-2024-8341"
],
"details": "A vulnerability classified as critical was found in SourceCodester Petshop Management System 1.0. This vulnerability affects unknown code of the file /controllers/add_user.php. The manipulation of the argument avatar leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8341"
},
{
"type": "WEB",
"url": "https://github.com/enjoyworld/webray.com.cn/blob/main/cves/Petshop_Management_System/Petshop_Management_System%20add_user.php%20any%20file%20upload.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.276220"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.276220"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.399661"
},
{
"type": "WEB",
"url": "https://www.sourcecodester.com"
}
],
"database_specific": {
"cwe_ids": [
"CWE-434"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-30T15:15:21Z"
}
}
advisories/unreviewed/2024/08/GHSA-c77r-fh37-x2px/GHSA-c77r-fh37-x2px.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c77r-fh37-x2px",
"modified": "2024-08-30T15:31:30Z",
"published": "2024-08-30T15:31:30Z",
"aliases": [
"CVE-2024-8260"
],
"details": "A SMB force-authentication vulnerability exists in all versions of OPA for Windows prior to v0.68.0. The vulnerability exists because of improper input validation, allowing a user to pass an arbitrary SMB share instead of a Rego file as an argument to OPA CLI or to one of the OPA Go library’s functions.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8260"
},
{
"type": "WEB",
"url": "https://www.tenable.com/security/research/tra-2024-36"
}
],
"database_specific": {
"cwe_ids": [
"CWE-294"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-30T13:15:12Z"
}
}
advisories/unreviewed/2024/08/GHSA-cmm9-5j5g-mhq5/GHSA-cmm9-5j5g-mhq5.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cmm9-5j5g-mhq5",
"modified": "2024-08-29T21:31:03Z",
"modified": "2024-08-30T15:31:29Z",
"published": "2024-08-29T21:31:03Z",
"aliases": [
"CVE-2024-41348"
],
"details": "openflights commit 5234b5b is vulnerable to Cross-Site Scripting (XSS) via php/alsearch.php",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-29T20:15:08Z"

Some files were not shown because too many files have changed in this diff Show More