netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2023-08-08 18:31:50 +00:00
parent ba1944fc8a
commit 52e8a2f23c
118 changed files with 4080 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/08/GHSA-255q-f9p7-jxj6/GHSA-255q-f9p7-jxj6.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-255q-f9p7-jxj6",
"modified": "2023-08-08T18:30:36Z",
"published": "2023-08-08T18:30:36Z",
"aliases": [
"CVE-2023-36891"
],
"details": "Microsoft SharePoint Server Spoofing Vulnerability",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36891"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36891"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/08/GHSA-2644-f36h-q8x8/GHSA-2644-f36h-q8x8.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2644-f36h-q8x8",
"modified": "2023-08-03T18:30:35Z",
"modified": "2023-08-08T18:30:35Z",
"published": "2023-08-03T18:30:35Z",
"aliases": [
"CVE-2023-36217"
],
"details": "Cross Site Scripting vulnerability in Xoops CMS v.2.5.10 allows a remote attacker to execute arbitrary code via the category name field of the image manager function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/08/GHSA-2hvw-r4rp-mjpp/GHSA-2hvw-r4rp-mjpp.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2hvw-r4rp-mjpp",
"modified": "2023-08-08T18:30:36Z",
"published": "2023-08-08T18:30:36Z",
"aliases": [
"CVE-2023-36532"
],
"details": "Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36532"
},
{
"type": "WEB",
"url": "https://explore.zoom.us/en/trust/security/security-bulletin/"
}
],
"database_specific": {
"cwe_ids": [
"CWE-122"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/08/GHSA-2x4q-vchp-x653/GHSA-2x4q-vchp-x653.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2x4q-vchp-x653",
"modified": "2023-08-03T06:30:23Z",
"modified": "2023-08-08T18:30:34Z",
"published": "2023-08-03T06:30:23Z",
"aliases": [
"CVE-2023-38747"
],
"details": "Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/08/GHSA-32hv-227c-chpv/GHSA-32hv-227c-chpv.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-32hv-227c-chpv",
"modified": "2023-08-08T18:30:37Z",
"published": "2023-08-08T18:30:37Z",
"aliases": [
"CVE-2023-36905"
],
"details": "Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36905"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36905"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/08/GHSA-333g-8frm-xc2h/GHSA-333g-8frm-xc2h.json
+47
View File
@@ -0,0 +1,47 @@
{
"schema_version": "1.4.0",
"id": "GHSA-333g-8frm-xc2h",
"modified": "2023-08-08T18:30:35Z",
"published": "2023-08-08T18:30:35Z",
"aliases": [
"CVE-2023-38762"
],
"details": "SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the friendmonths parameter within the /QueryView.php.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38762"
},
{
"type": "WEB",
"url": "https://churchcrm.io/"
},
{
"type": "WEB",
"url": "https://demo.churchcrm.io/master"
},
{
"type": "WEB",
"url": "https://github.com/0x72303074/CVE-Disclosures"
},
{
"type": "WEB",
"url": "https://github.com/ChurchCRM/CRM/wiki"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/08/GHSA-3457-9p37-3w4q/GHSA-3457-9p37-3w4q.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3457-9p37-3w4q",
"modified": "2023-08-08T18:30:36Z",
"published": "2023-08-08T18:30:36Z",
"aliases": [
"CVE-2023-36866"
],
"details": "Microsoft Office Visio Remote Code Execution Vulnerability",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36866"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36866"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/08/GHSA-35wh-q52w-78vq/GHSA-35wh-q52w-78vq.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-35wh-q52w-78vq",
"modified": "2023-08-08T18:30:37Z",
"published": "2023-08-08T18:30:37Z",
"aliases": [
"CVE-2023-38172"
],
"details": "Microsoft Message Queuing Denial of Service Vulnerability",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38172"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38172"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/08/GHSA-3cqw-w427-m45x/GHSA-3cqw-w427-m45x.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3cqw-w427-m45x",
"modified": "2023-08-03T06:30:23Z",
"modified": "2023-08-08T18:30:35Z",
"published": "2023-08-03T06:30:23Z",
"aliases": [
"CVE-2023-38748"
],
"details": "Use after free vulnerability exists in CX-Programmer Included in CX-One CXONE-AL[][]D-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2023/08/GHSA-3hhc-gfj2-qgg7/GHSA-3hhc-gfj2-qgg7.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3hhc-gfj2-qgg7",
"modified": "2023-08-08T18:30:36Z",
"published": "2023-08-08T18:30:36Z",
"aliases": [
"CVE-2023-36898"
],
"details": "Tablet Windows User Interface Application Core Remote Code Execution Vulnerability",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36898"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36898"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/08/GHSA-3jf9-p4gc-9h68/GHSA-3jf9-p4gc-9h68.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3jf9-p4gc-9h68",
"modified": "2023-08-08T18:30:36Z",
"published": "2023-08-08T18:30:36Z",
"aliases": [
"CVE-2023-36540"
],
"details": "Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36540"
},
{
"type": "WEB",
"url": "https://explore.zoom.us/en/trust/security/security-bulletin/"
}
],
"database_specific": {
"cwe_ids": [
"CWE-426"
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/08/GHSA-3vj2-7455-cq23/GHSA-3vj2-7455-cq23.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3vj2-7455-cq23",
"modified": "2023-08-08T18:30:36Z",
"published": "2023-08-08T18:30:36Z",
"aliases": [
"CVE-2023-35380"
],
"details": "Windows Kernel Elevation of Privilege Vulnerability",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35380"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35380"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/08/GHSA-4m6r-h473-x99p/GHSA-4m6r-h473-x99p.json
+47
View File
@@ -0,0 +1,47 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4m6r-h473-x99p",
"modified": "2023-08-08T18:30:35Z",
"published": "2023-08-08T18:30:35Z",
"aliases": [
"CVE-2023-38770"
],
"details": "SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the group parameter within the /QueryView.php.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38770"
},
{
"type": "WEB",
"url": "https://churchcrm.io/"
},
{
"type": "WEB",
"url": "https://demo.churchcrm.io/master"
},
{
"type": "WEB",
"url": "https://github.com/0x72303074/CVE-Disclosures"
},
{
"type": "WEB",
"url": "https://github.com/ChurchCRM/CRM/wiki"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/08/GHSA-4mp8-95wg-7xm4/GHSA-4mp8-95wg-7xm4.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4mp8-95wg-7xm4",
"modified": "2023-08-08T18:30:36Z",
"published": "2023-08-08T18:30:36Z",
"aliases": [
"CVE-2023-20561"
],
"details": "\n\n\n\n\n\n\nInsufficient validation of the IOCTL (Input Output Control) input buffer in AMD ?Prof may allow an authenticated user to send an arbitrary address potentially resulting in a Windows crash leading to denial of service.\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-20561"
},
{
"type": "WEB",
"url": "https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-7003"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/08/GHSA-4wv3-22h6-h824/GHSA-4wv3-22h6-h824.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4wv3-22h6-h824",
"modified": "2023-08-08T18:30:37Z",
"published": "2023-08-08T18:30:37Z",
"aliases": [
"CVE-2023-38182"
],
"details": "Microsoft Exchange Server Remote Code Execution Vulnerability",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38182"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38182"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/08/GHSA-56r2-62gh-h7qr/GHSA-56r2-62gh-h7qr.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-56r2-62gh-h7qr",
"modified": "2023-08-08T18:30:37Z",
"published": "2023-08-08T18:30:37Z",
"aliases": [
"CVE-2023-38175"
],
"details": "Microsoft Windows Defender Elevation of Privilege Vulnerability",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38175"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38175"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/08/GHSA-5qfj-773w-84hp/GHSA-5qfj-773w-84hp.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5qfj-773w-84hp",
"modified": "2023-08-08T18:30:36Z",
"published": "2023-08-08T18:30:36Z",
"aliases": [
"CVE-2023-35383"
],
"details": "Microsoft Message Queuing Information Disclosure Vulnerability",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35383"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-35383"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/08/GHSA-5vgj-hqrc-gx52/GHSA-5vgj-hqrc-gx52.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5vgj-hqrc-gx52",
"modified": "2023-08-08T18:30:37Z",
"published": "2023-08-08T18:30:37Z",
"aliases": [
"CVE-2023-36910"
],
"details": "Microsoft Message Queuing Remote Code Execution Vulnerability",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36910"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36910"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}
advisories/unreviewed/2023/08/GHSA-6672-m2hq-hwm4/GHSA-6672-m2hq-hwm4.json
+5 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6672-m2hq-hwm4",
"modified": "2023-08-02T00:30:39Z",
"modified": "2023-08-08T18:30:33Z",
"published": "2023-08-02T00:30:39Z",
"aliases": [
"CVE-2023-3494"
],
"details": "The fwctl driver implements a state machine which is executed when a bhyve guest accesses certain x86 I/O ports. The interface lets the guest copy a string into a buffer resident in the bhyve process' memory. A bug in the state machine implementation can result in a buffer overflowing when copying this string. Malicious, privileged software running in a guest VM can exploit the buffer overflow to achieve code execution on the host in the bhyve userspace process, which typically runs as root, mitigated by the capabilities assigned through the Capsicum sandbox available to the bhyve process.\n\n\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"
}
],
"affected": [
advisories/unreviewed/2023/08/GHSA-68pc-r3j9-h8x2/GHSA-68pc-r3j9-h8x2.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-68pc-r3j9-h8x2",
"modified": "2023-08-08T18:30:37Z",
"published": "2023-08-08T18:30:37Z",
"aliases": [
"CVE-2023-38184"
],
"details": "Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38184"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-38184"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": null
}
}

Some files were not shown because too many files have changed in this diff Show More