netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-09-24 18:33:02 +00:00
parent 1109f804b5
commit 566ab53619
66 changed files with 435 additions and 239 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/06/GHSA-ffhx-2rrf-9c23/GHSA-ffhx-2rrf-9c23.json
+2 -1
View File
@@ -36,7 +36,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-377"
"CWE-377",
"CWE-59"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/09/GHSA-27j9-vfp3-773q/GHSA-27j9-vfp3-773q.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-27j9-vfp3-773q",
"modified": "2024-09-18T15:30:53Z",
"modified": "2024-09-24T18:31:26Z",
"published": "2024-09-18T15:30:53Z",
"aliases": [
"CVE-2024-46581"
],
"details": "Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:17Z"
advisories/unreviewed/2024/09/GHSA-27vc-rww5-64v8/GHSA-27vc-rww5-64v8.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-27vc-rww5-64v8",
"modified": "2024-09-18T15:30:52Z",
"modified": "2024-09-24T18:31:26Z",
"published": "2024-09-18T15:30:52Z",
"aliases": [
"CVE-2024-46557"
],
"details": "Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sProfileName parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:16Z"
advisories/unreviewed/2024/09/GHSA-2mj4-2m9q-g49h/GHSA-2mj4-2m9q-g49h.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2mj4-2m9q-g49h",
"modified": "2024-09-18T15:30:53Z",
"modified": "2024-09-24T18:31:26Z",
"published": "2024-09-18T15:30:53Z",
"aliases": [
"CVE-2024-46582"
],
"details": "Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvAddr parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:17Z"
advisories/unreviewed/2024/09/GHSA-2qj2-rq28-64cc/GHSA-2qj2-rq28-64cc.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2qj2-rq28-64cc",
"modified": "2024-09-18T15:30:53Z",
"modified": "2024-09-24T18:31:27Z",
"published": "2024-09-18T15:30:53Z",
"aliases": [
"CVE-2024-46596"
],
"details": "Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sAct parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:18Z"
advisories/unreviewed/2024/09/GHSA-39hm-m9hv-pfcr/GHSA-39hm-m9hv-pfcr.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-39hm-m9hv-pfcr",
"modified": "2024-09-18T15:30:52Z",
"modified": "2024-09-24T18:31:25Z",
"published": "2024-09-18T15:30:52Z",
"aliases": [
"CVE-2024-46554"
],
"details": "Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the profname parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:16Z"
advisories/unreviewed/2024/09/GHSA-3w22-q3jv-89jw/GHSA-3w22-q3jv-89jw.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3w22-q3jv-89jw",
"modified": "2024-09-17T00:31:04Z",
"modified": "2024-09-24T18:31:24Z",
"published": "2024-09-17T00:31:04Z",
"aliases": [
"CVE-2024-40850"
],
"details": "A file access issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS Sonoma 14.7, tvOS 18. An app may be able to access user-sensitive data.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -55,7 +58,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-17T00:15:49Z"
advisories/unreviewed/2024/09/GHSA-3w5w-2v95-54r9/GHSA-3w5w-2v95-54r9.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3w5w-2v95-54r9",
"modified": "2024-09-18T15:30:52Z",
"modified": "2024-09-24T18:31:25Z",
"published": "2024-09-18T15:30:52Z",
"aliases": [
"CVE-2024-46553"
],
"details": "Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the ipaddrmsk%d parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:16Z"
advisories/unreviewed/2024/09/GHSA-45fw-7wjh-qgj9/GHSA-45fw-7wjh-qgj9.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-45fw-7wjh-qgj9",
"modified": "2024-09-18T15:30:52Z",
"modified": "2024-09-24T18:31:26Z",
"published": "2024-09-18T15:30:52Z",
"aliases": [
"CVE-2024-46558"
],
"details": "Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the newProname parameter at v2x00.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:17Z"
advisories/unreviewed/2024/09/GHSA-45r4-jrvf-27wr/GHSA-45r4-jrvf-27wr.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-45r4-jrvf-27wr",
"modified": "2024-09-18T15:30:53Z",
"modified": "2024-09-24T18:31:26Z",
"published": "2024-09-18T15:30:53Z",
"aliases": [
"CVE-2024-46571"
],
"details": "Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sPPPSrvNm parameter at fwuser.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:17Z"
advisories/unreviewed/2024/09/GHSA-47fg-g734-5wff/GHSA-47fg-g734-5wff.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-47fg-g734-5wff",
"modified": "2024-09-18T09:30:37Z",
"modified": "2024-09-24T18:31:25Z",
"published": "2024-09-18T09:30:37Z",
"aliases": [
"CVE-2024-46793"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: Intel: Boards: Fix NULL pointer deref in BYT/CHT boards harder\n\nSince commit 13f58267cda3 (\"ASoC: soc.h: don't create dummy Component\nvia COMP_DUMMY()\") dummy codecs declared like this:\n\nSND_SOC_DAILINK_DEF(dummy,\n DAILINK_COMP_ARRAY(COMP_DUMMY()));\n\nexpand to:\n\nstatic struct snd_soc_dai_link_component dummy[] = {\n};\n\nWhich means that dummy is a zero sized array and thus dais[i].codecs should\nnot be dereferenced *at all* since it points to the address of the next\nvariable stored in the data section as the \"dummy\" variable has an address\nbut no size, so even dereferencing dais[0] is already an out of bounds\narray reference.\n\nWhich means that the if (dais[i].codecs->name) check added in\ncommit 7d99a70b6595 (\"ASoC: Intel: Boards: Fix NULL pointer deref\nin BYT/CHT boards\") relies on that the part of the next variable which\nthe name member maps to just happens to be NULL.\n\nWhich apparently so far it usually is, except when it isn't\nand then it results in crashes like this one:\n\n[ 28.795659] BUG: unable to handle page fault for address: 0000000000030011\n...\n[ 28.795780] Call Trace:\n[ 28.795787] <TASK>\n...\n[ 28.795862] ? strcmp+0x18/0x40\n[ 28.795872] 0xffffffffc150c605\n[ 28.795887] platform_probe+0x40/0xa0\n...\n[ 28.795979] ? __pfx_init_module+0x10/0x10 [snd_soc_sst_bytcr_wm5102]\n\nReally fix things this time around by checking dais.num_codecs != 0.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T08:15:06Z"
advisories/unreviewed/2024/09/GHSA-4hx8-86wp-g993/GHSA-4hx8-86wp-g993.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4hx8-86wp-g993",
"modified": "2024-09-17T00:31:05Z",
"modified": "2024-09-24T18:31:24Z",
"published": "2024-09-17T00:31:05Z",
"aliases": [
"CVE-2024-44148"
],
"details": "This issue was addressed with improved validation of file attributes. This issue is fixed in macOS Sequoia 15. An app may be able to break out of its sandbox.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-17T00:15:50Z"
advisories/unreviewed/2024/09/GHSA-4m5g-9h9q-7x5h/GHSA-4m5g-9h9q-7x5h.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4m5g-9h9q-7x5h",
"modified": "2024-09-17T00:31:05Z",
"modified": "2024-09-24T18:31:24Z",
"published": "2024-09-17T00:31:05Z",
"aliases": [
"CVE-2024-44149"
],
"details": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-281"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-17T00:15:50Z"
advisories/unreviewed/2024/09/GHSA-55hv-grg7-hf97/GHSA-55hv-grg7-hf97.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-55hv-grg7-hf97",
"modified": "2024-09-18T15:30:53Z",
"modified": "2024-09-24T18:31:26Z",
"published": "2024-09-18T15:30:53Z",
"aliases": [
"CVE-2024-46565"
],
"details": "Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sSrvName parameter at service.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:17Z"
advisories/unreviewed/2024/09/GHSA-5rxq-m67m-h24r/GHSA-5rxq-m67m-h24r.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5rxq-m67m-h24r",
"modified": "2024-09-17T00:31:05Z",
"modified": "2024-09-24T18:31:24Z",
"published": "2024-09-17T00:31:05Z",
"aliases": [
"CVE-2024-44153"
],
"details": "The issue was addressed with improved permissions logic. This issue is fixed in macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to access user-sensitive data.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-17T00:15:50Z"
advisories/unreviewed/2024/09/GHSA-65q7-86f4-pxh5/GHSA-65q7-86f4-pxh5.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-65q7-86f4-pxh5",
"modified": "2024-09-18T15:30:53Z",
"modified": "2024-09-24T18:31:26Z",
"published": "2024-09-18T15:30:53Z",
"aliases": [
"CVE-2024-46593"
],
"details": "Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the trapcomm parameter at cgiswm.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:18Z"
advisories/unreviewed/2024/09/GHSA-67cr-pq3q-pqwx/GHSA-67cr-pq3q-pqwx.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-67cr-pq3q-pqwx",
"modified": "2024-09-18T15:30:52Z",
"modified": "2024-09-24T18:31:25Z",
"published": "2024-09-18T15:30:52Z",
"aliases": [
"CVE-2024-46552"
],
"details": "Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sStRtMskShow parameter at ipstrt.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:16Z"
advisories/unreviewed/2024/09/GHSA-6p22-8x2w-g3r3/GHSA-6p22-8x2w-g3r3.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6p22-8x2w-g3r3",
"modified": "2024-09-18T15:30:53Z",
"modified": "2024-09-24T18:31:26Z",
"published": "2024-09-18T15:30:53Z",
"aliases": [
"CVE-2024-46583"
],
"details": "Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the extRadSrv2 parameter at cgiapp.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:17Z"
advisories/unreviewed/2024/09/GHSA-735f-p4wh-56vp/GHSA-735f-p4wh-56vp.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-735f-p4wh-56vp",
"modified": "2024-09-18T15:30:52Z",
"modified": "2024-09-24T18:31:25Z",
"published": "2024-09-18T15:30:52Z",
"aliases": [
"CVE-2024-46550"
],
"details": "Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the CGIbyFieldName parameter at chglog.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:16Z"
advisories/unreviewed/2024/09/GHSA-735p-552j-x6p3/GHSA-735p-552j-x6p3.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-735p-552j-x6p3",
"modified": "2024-09-18T15:30:52Z",
"modified": "2024-09-24T18:31:26Z",
"published": "2024-09-18T15:30:52Z",
"aliases": [
"CVE-2024-46559"
],
"details": "Draytek Vigor 3910 v4.3.2.6 was discovered to contain a buffer overflow in the sBPA_UsrNme parameter at inet15.cgi. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:17Z"

Some files were not shown because too many files have changed in this diff Show More