Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2025-02-27 18:32:23 +00:00
parent be16c1f43e
commit 55f42f5d85
84 changed files with 1948 additions and 105 deletions
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-phg3-gv66-q38x",
-  "modified": "2025-02-27T15:31:50Z",
+  "modified": "2025-02-27T18:31:07Z",
  "published": "2025-02-13T15:31:25Z",
  "aliases": [
    "CVE-2025-1247"
@@ -67,6 +67,10 @@
      "type": "WEB",
      "url": "https://github.com/quarkusio/quarkus/commit/02ff9ed45c3928edf2a0f8b906543606fed7cd53"
    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:1884"
+    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2025:1885"
@@ -25,7 +25,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-306"
+    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -25,7 +25,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-266"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -25,7 +25,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-427"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-rqpf-mw6m-jx7p",
-  "modified": "2023-03-24T15:30:21Z",
+  "modified": "2025-02-27T18:30:52Z",
  "published": "2023-03-19T03:30:25Z",
  "aliases": [
    "CVE-2022-48424"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-v3fg-qxxf-34w3",
-  "modified": "2023-03-24T15:30:21Z",
+  "modified": "2025-02-27T18:30:52Z",
  "published": "2023-03-19T03:30:25Z",
  "aliases": [
    "CVE-2022-48423"
@@ -33,7 +33,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-787"
+    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,12 +1,12 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-3rqr-p9xj-863f",
-  "modified": "2024-03-11T18:31:07Z",
+  "modified": "2025-02-27T18:30:53Z",
  "published": "2024-03-11T18:31:07Z",
  "aliases": [
    "CVE-2024-23610"
  ],
-  "details": "An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.\n\n\n",
+  "details": "An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -1,12 +1,12 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-567q-hq5r-pw43",
-  "modified": "2024-03-11T18:31:07Z",
+  "modified": "2025-02-27T18:30:53Z",
  "published": "2024-03-11T18:31:07Z",
  "aliases": [
    "CVE-2024-23611"
  ],
-  "details": "An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.\n\n",
+  "details": "An out of bounds write due to a missing bounds check in LabVIEW may result in remote code execution. Successful exploitation requires an attacker to provide a user with a specially crafted VI. This vulnerability affects LabVIEW 2024 Q1 and prior versions.",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -25,7 +25,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-94"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-48jr-p93f-pwq8",
-  "modified": "2024-04-02T21:30:28Z",
+  "modified": "2025-02-27T18:30:53Z",
  "published": "2024-04-02T21:30:28Z",
  "aliases": [
    "CVE-2024-27604"
  ],
  "details": "Alldata V0.4.6 is vulnerable to Command execution vulnerability. System commands can be deserialized.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -20,8 +25,10 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-502"
+    ],
+    "severity": "CRITICAL",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-04-02T21:15:46Z"
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-m9px-xr79-8fvc",
-  "modified": "2024-04-02T21:30:29Z",
+  "modified": "2025-02-27T18:30:54Z",
  "published": "2024-04-02T21:30:29Z",
  "aliases": [
    "CVE-2024-27605"
  ],
  "details": "Alldata V0.4.6 is vulnerable to Insecure Permissions. Using users (test) can query information about the users in the system.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -21,7 +26,7 @@
  ],
  "database_specific": {
    "cwe_ids": [],
-    "severity": null,
+    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-04-02T21:15:46Z"
@@ -37,7 +37,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-862"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-g5vh-4wvj-vgc9",
-  "modified": "2024-05-02T18:30:53Z",
+  "modified": "2025-02-27T18:30:56Z",
  "published": "2024-05-02T18:30:53Z",
  "aliases": [
    "CVE-2024-2765"
@@ -41,7 +41,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -25,7 +25,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-94"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-26m5-cv5f-4mwg",
-  "modified": "2024-12-05T15:31:02Z",
+  "modified": "2025-02-27T18:31:06Z",
  "published": "2024-12-05T15:31:02Z",
  "aliases": [
    "CVE-2024-6516"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-4xvm-58x2-m87c",
-  "modified": "2024-12-05T15:31:02Z",
+  "modified": "2025-02-27T18:31:05Z",
  "published": "2024-12-05T15:31:02Z",
  "aliases": [
    "CVE-2024-51551"
@@ -30,7 +30,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-1287"
+      "CWE-1287",
+      "CWE-798"
    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-78pr-m5p7-52qj",
-  "modified": "2024-12-05T15:31:02Z",
+  "modified": "2025-02-27T18:31:05Z",
  "published": "2024-12-05T15:31:02Z",
  "aliases": [
    "CVE-2024-51550"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-7jf8-hmr2-f4xc",
-  "modified": "2024-12-05T15:31:02Z",
+  "modified": "2025-02-27T18:31:02Z",
  "published": "2024-12-05T15:31:02Z",
  "aliases": [
    "CVE-2024-51541"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-8297-wvjg-5vxg",
-  "modified": "2024-12-05T15:31:01Z",
+  "modified": "2025-02-27T18:31:00Z",
  "published": "2024-12-05T15:31:01Z",
  "aliases": [
    "CVE-2024-48845"
--- a/Show More
+++ b/Show More