Advisory Database Sync

advisories/unreviewed/2022/05/GHSA-9vwj-hj2h-whjq/GHSA-9vwj-hj2h-whjq.json

@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-9vwj-hj2h-whjq",
-  "modified": "2022-05-24T19:14:53Z",
+  "modified": "2024-08-22T03:31:32Z",
   "published": "2022-05-24T19:14:53Z",
   "aliases": [
     "CVE-2021-33045"
   ],
   "details": "The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 

advisories/unreviewed/2022/05/GHSA-h2j4-m7qg-8m4g/GHSA-h2j4-m7qg-8m4g.json

@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-h2j4-m7qg-8m4g",
-  "modified": "2022-05-24T19:14:53Z",
+  "modified": "2024-08-22T03:31:32Z",
   "published": "2022-05-24T19:14:53Z",
   "aliases": [
     "CVE-2021-33044"
   ],
   "details": "The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 

advisories/unreviewed/2024/03/GHSA-f2v5-p4rx-6wc2/GHSA-f2v5-p4rx-6wc2.json

@@ -1,14 +1,17 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-f2v5-p4rx-6wc2",
-  "modified": "2024-03-15T18:30:37Z",
+  "modified": "2024-08-22T03:31:32Z",
   "published": "2024-03-15T18:30:36Z",
   "aliases": [
     "CVE-2023-7003"
   ],
   "details": "The AES key utilized in the pairing process between a lock using Sciener firmware and a wireless keypad is not unique, and can be reused to compromise other locks using the Sciener firmware.",
   "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
   ],
   "affected": [
 
@@ -27,7 +30,7 @@
     "cwe_ids": [
 
     ],
-    "severity": null,
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-15T17:15:07Z"

advisories/unreviewed/2024/08/GHSA-4j43-r7jh-q4jj/GHSA-4j43-r7jh-q4jj.json

@@ -0,0 +1,38 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4j43-r7jh-q4jj",
+  "modified": "2024-08-22T03:31:34Z",
+  "published": "2024-08-22T03:31:34Z",
+  "aliases": [
+    "CVE-2024-39576"
+  ],
+  "details": "Dell Power Manager (DPM), versions 3.15.0 and prior, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of privileges.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-39576"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.dell.com/support/kbdoc/en-us/000227010/dsa-2024-323"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-266"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T03:15:03Z"
+  }
+}

advisories/unreviewed/2024/08/GHSA-6j9q-v6p5-9p93/GHSA-6j9q-v6p5-9p93.json

@@ -0,0 +1,47 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-6j9q-v6p5-9p93",
+  "modified": "2024-08-22T03:31:34Z",
+  "published": "2024-08-22T03:31:34Z",
+  "aliases": [
+    "CVE-2022-48915"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal: core: Fix TZ_GET_TRIP NULL pointer dereference\n\nDo not call get_trip_hyst() from thermal_genl_cmd_tz_get_trip() if\nthe thermal zone does not define one.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48915"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/1c0b51e62a50e9291764d022ed44549e65d6ab9c"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/3dafbf915c05f83469e791949b5590da2aca2afb"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/4c294285cec3964b3291772ac0642c2bf440bd1b"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/5838a14832d447990827d85e90afe17e6fb9c175"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T02:15:05Z"
+  }
+}

advisories/unreviewed/2024/08/GHSA-7vcc-f42v-gv2x/GHSA-7vcc-f42v-gv2x.json

@@ -0,0 +1,63 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7vcc-f42v-gv2x",
+  "modified": "2024-08-22T03:31:34Z",
+  "published": "2024-08-22T03:31:34Z",
+  "aliases": [
+    "CVE-2022-48911"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfilter: nf_queue: fix possible use-after-free\n\nEric Dumazet says:\n  The sock_hold() side seems suspect, because there is no guarantee\n  that sk_refcnt is not already 0.\n\nOn failure, we cannot queue the packet and need to indicate an\nerror.  The packet will be dropped by the caller.\n\nv2: split skb prefetch hunk into separate change",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48911"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/21b27b2baa27423286e9b8d3f0b194d587083d95"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/34dc4a6a7f261736ef7183868a5bddad31c7f9e3"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/43c25da41e3091b31a906651a43e80a2719aa1ff"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/4d05239203fa38ea8a6f31e228460da4cb17a71a"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/c3873070247d9e3c7a6b0cf9bf9b45e8018427b1"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/dcc3cb920bf7ba66ac5e9272293a9ba5f80917ee"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/dd648bd1b33a828f62befa696b206c688da0ec43"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/ef97921ccdc243170fcef857ba2a17cf697aece5"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T02:15:05Z"
+  }
+}

advisories/unreviewed/2024/08/GHSA-7xq9-rvv2-9fv6/GHSA-7xq9-rvv2-9fv6.json

@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7xq9-rvv2-9fv6",
+  "modified": "2024-08-22T03:31:34Z",
+  "published": "2024-08-22T03:31:34Z",
+  "aliases": [
+    "CVE-2024-5583"
+  ],
+  "details": "The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the carousel_direction parameter of testimonials widget in all versions up to, and including, 5.6.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5583"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/the-plus-addons-for-elementor-page-builder/tags/5.5.6/modules/widgets/tp_testimonial_listout.php#L2284"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/55981e72-8d1a-4075-a372-6bddc95e99d8?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T03:15:03Z"
+  }
+}

advisories/unreviewed/2024/08/GHSA-9h55-298f-39qv/GHSA-9h55-298f-39qv.json

@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9h55-298f-39qv",
+  "modified": "2024-08-22T03:31:34Z",
+  "published": "2024-08-22T03:31:34Z",
+  "aliases": [
+    "CVE-2024-7836"
+  ],
+  "details": "The Themify Builder plugin for WordPress is vulnerable to unauthorized post duplication due to missing checks on the duplicate_page_ajaxify function in all versions up to, and including, 7.6.1. This makes it possible for authenticated attackers, with Contributor-level access and above, to duplicate and view private or draft posts created by other users that otherwise shouldn't be accessible to them.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7836"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/themify-builder/tags/7.6.1/classes/class-builder-duplicate-page.php#L41"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/31dfc46c-a673-41f1-b701-aa832f004ebc?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-863"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T03:15:04Z"
+  }
+}

advisories/unreviewed/2024/08/GHSA-c299-229x-w5c5/GHSA-c299-229x-w5c5.json

@@ -0,0 +1,51 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-c299-229x-w5c5",
+  "modified": "2024-08-22T03:31:33Z",
+  "published": "2024-08-22T03:31:33Z",
+  "aliases": [
+    "CVE-2021-4441"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nspi: spi-zynq-qspi: Fix a NULL pointer dereference in zynq_qspi_exec_mem_op()\n\nIn zynq_qspi_exec_mem_op(), kzalloc() is directly used in memset(),\nwhich could lead to a NULL pointer dereference on failure of\nkzalloc().\n\nFix this bug by adding a check of tmpbuf.\n\nThis bug was found by a static analyzer. The analysis employs\ndifferential checking to identify inconsistent security operations\n(e.g., checks or kfrees) between two code paths and confirms that the\ninconsistent operations are not recovered in the current function or\nthe callers, so they constitute bugs.\n\nNote that, as a bug found by static analysis, it can be a false\npositive or hard to trigger. Multiple researchers have cross-reviewed\nthe bug.\n\nBuilds with CONFIG_SPI_ZYNQ_QSPI=m show no new warnings,\nand our static analyzer no longer warns about this code.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-4441"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/2efece1368aeee2d2552c7ec36aeb676c4d4c95f"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/3c32405d6474a21f7d742828e73c13e326dcae82"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/ab3824427b848da10e9fe2727f035bbeecae6ff4"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/b9dd08cbebe0c593c49bf86d2012a431494e54cb"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/df14d2bed8e2455878e046e67123d9ecb2e79056"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T02:15:04Z"
+  }
+}

advisories/unreviewed/2024/08/GHSA-cp24-c7w4-6gh4/GHSA-cp24-c7w4-6gh4.json

@@ -0,0 +1,63 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cp24-c7w4-6gh4",
+  "modified": "2024-08-22T03:31:34Z",
+  "published": "2024-08-22T03:31:34Z",
+  "aliases": [
+    "CVE-2022-48908"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()\n\nDuring driver initialization, the pointer of card info, i.e. the\nvariable 'ci' is required. However, the definition of\n'com20020pci_id_table' reveals that this field is empty for some\ndevices, which will cause null pointer dereference when initializing\nthese devices.\n\nThe following log reveals it:\n\n[    3.973806] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]\n[    3.973819] RIP: 0010:com20020pci_probe+0x18d/0x13e0 [com20020_pci]\n[    3.975181] Call Trace:\n[    3.976208]  local_pci_probe+0x13f/0x210\n[    3.977248]  pci_device_probe+0x34c/0x6d0\n[    3.977255]  ? pci_uevent+0x470/0x470\n[    3.978265]  really_probe+0x24c/0x8d0\n[    3.978273]  __driver_probe_device+0x1b3/0x280\n[    3.979288]  driver_probe_device+0x50/0x370\n\nFix this by checking whether the 'ci' is a null pointer first.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48908"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/5f394102ee27dbf051a4e283390cd8d1759dacea"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/8e3bc7c5bbf87e86e9cd652ca2a9166942d86206"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/b1ee6b9340a38bdb9e5c90f0eac5b22b122c3049"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/b838add93e1dd98210482dc433768daaf752bdef"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/bd6f1fd5d33dfe5d1b4f2502d3694a7cc13f166d"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/ca0bdff4249a644f2ca7a49d410d95b8dacf1f72"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/e50c589678e50f8d574612e473ca60ef45190896"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/ea372aab54903310756217d81610901a8e66cb7d"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T02:15:05Z"
+  }
+}

advisories/unreviewed/2024/08/GHSA-cvq3-56r9-hh2h/GHSA-cvq3-56r9-hh2h.json

@@ -0,0 +1,43 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cvq3-56r9-hh2h",
+  "modified": "2024-08-22T03:31:34Z",
+  "published": "2024-08-22T03:31:33Z",
+  "aliases": [
+    "CVE-2022-48907"
+  ],
+  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nauxdisplay: lcd2s: Fix memory leak in ->remove()\n\nOnce allocated the struct lcd2s_data is never freed.\nFix the memory leak by switching to devm_kzalloc().",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-48907"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/3585ed5f9b11a6094dd991d76a1541e5d03b986a"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/5d53cd33f4253aa4cf02bf7e670b3c6a99674351"
+    },
+    {
+      "type": "WEB",
+      "url": "https://git.kernel.org/stable/c/898c0a15425a5bcaa8d44bd436eae5afd2483796"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T02:15:05Z"
+  }
+}

advisories/unreviewed/2024/08/GHSA-f3c7-2m22-wr7x/GHSA-f3c7-2m22-wr7x.json

@@ -0,0 +1,39 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-f3c7-2m22-wr7x",
+  "modified": "2024-08-22T03:31:33Z",
+  "published": "2024-08-22T03:31:32Z",
+  "aliases": [
+    "CVE-2024-42056"
+  ],
+  "details": "Retool (self-hosted enterprise) through 3.40.0 inserts resource authentication credentials into sent data. Credentials for users with \"Use\" permissions can be discovered (by an authenticated attacker) via the /api/resources endpoint. The earliest affected version is 3.18.1.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42056"
+    },
+    {
+      "type": "WEB",
+      "url": "https://docs.retool.com/disclosures/cve-2024-42056"
+    },
+    {
+      "type": "WEB",
+      "url": "https://docs.retool.com/releases"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T01:15:03Z"
+  }
+}

advisories/unreviewed/2024/08/GHSA-hpf9-cfgc-pw67/GHSA-hpf9-cfgc-pw67.json

@@ -0,0 +1,43 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hpf9-cfgc-pw67",
+  "modified": "2024-08-22T03:31:33Z",
+  "published": "2024-08-22T03:31:33Z",
+  "aliases": [
+    "CVE-2024-43033"
+  ],
+  "details": "JPress through 5.1.1 on Windows has an arbitrary file upload vulnerability that could cause arbitrary code execution via ::$DATA to AttachmentController, such as a .jsp::$DATA file to io.jpress.web.commons.controller.AttachmentController#upload. NOTE: this is unrelated to the attack vector for CVE-2024-32358.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43033"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/JPressProjects/jpress/issues/188"
+    },
+    {
+      "type": "WEB",
+      "url": "https://cwe.mitre.org/data/definitions/69.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/lazy-forever/CVE-Reference/tree/main/2024/43033"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-08-22T01:15:03Z"
+  }
+}