diff --git a/advisories/unreviewed/2022/05/GHSA-259r-5hvg-4f6x/GHSA-259r-5hvg-4f6x.json b/advisories/unreviewed/2022/05/GHSA-259r-5hvg-4f6x/GHSA-259r-5hvg-4f6x.json index 590d7862c16..7e5c5bc309c 100644 --- a/advisories/unreviewed/2022/05/GHSA-259r-5hvg-4f6x/GHSA-259r-5hvg-4f6x.json +++ b/advisories/unreviewed/2022/05/GHSA-259r-5hvg-4f6x/GHSA-259r-5hvg-4f6x.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-259r-5hvg-4f6x", - "modified": "2022-05-14T01:02:46Z", + "modified": "2025-02-10T21:31:16Z", "published": "2022-05-14T01:02:46Z", "aliases": [ "CVE-2015-2360" ], "details": "win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka \"Win32k Elevation of Privilege Vulnerability.\"", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -29,7 +34,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-119" + "CWE-119", + "CWE-416" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2022/05/GHSA-25jq-3vh4-pgv4/GHSA-25jq-3vh4-pgv4.json b/advisories/unreviewed/2022/05/GHSA-25jq-3vh4-pgv4/GHSA-25jq-3vh4-pgv4.json index 2c169b5d7c8..0cf5819fe05 100644 --- a/advisories/unreviewed/2022/05/GHSA-25jq-3vh4-pgv4/GHSA-25jq-3vh4-pgv4.json +++ b/advisories/unreviewed/2022/05/GHSA-25jq-3vh4-pgv4/GHSA-25jq-3vh4-pgv4.json @@ -81,7 +81,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-284" + ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3qq4-w757-rjqm/GHSA-3qq4-w757-rjqm.json b/advisories/unreviewed/2022/05/GHSA-3qq4-w757-rjqm/GHSA-3qq4-w757-rjqm.json index af764372b51..b6241dd207d 100644 --- a/advisories/unreviewed/2022/05/GHSA-3qq4-w757-rjqm/GHSA-3qq4-w757-rjqm.json +++ b/advisories/unreviewed/2022/05/GHSA-3qq4-w757-rjqm/GHSA-3qq4-w757-rjqm.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-3qq4-w757-rjqm", - "modified": "2022-05-17T04:02:13Z", + "modified": "2025-02-10T21:31:16Z", "published": "2022-05-17T04:02:13Z", "aliases": [ "CVE-2015-0310" ], "details": "Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism on Windows, and have an unspecified impact on other platforms, via unknown vectors, as exploited in the wild in January 2015.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -48,7 +53,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-200" + ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-43xj-964v-hcjf/GHSA-43xj-964v-hcjf.json b/advisories/unreviewed/2022/05/GHSA-43xj-964v-hcjf/GHSA-43xj-964v-hcjf.json index 1d840dcd6e4..7b6402295ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-43xj-964v-hcjf/GHSA-43xj-964v-hcjf.json +++ b/advisories/unreviewed/2022/05/GHSA-43xj-964v-hcjf/GHSA-43xj-964v-hcjf.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-43xj-964v-hcjf", - "modified": "2024-04-26T18:33:40Z", + "modified": "2025-02-10T21:31:09Z", "published": "2022-05-04T00:30:54Z", "aliases": [ "CVE-2012-0507" ], "details": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions. NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a different issue.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -104,7 +109,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-843" + ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-498p-qg8p-wgxg/GHSA-498p-qg8p-wgxg.json b/advisories/unreviewed/2022/05/GHSA-498p-qg8p-wgxg/GHSA-498p-qg8p-wgxg.json index 1aa02ecaca8..afa72928080 100644 --- a/advisories/unreviewed/2022/05/GHSA-498p-qg8p-wgxg/GHSA-498p-qg8p-wgxg.json +++ b/advisories/unreviewed/2022/05/GHSA-498p-qg8p-wgxg/GHSA-498p-qg8p-wgxg.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-498p-qg8p-wgxg", - "modified": "2022-05-14T00:03:06Z", + "modified": "2025-02-10T21:31:15Z", "published": "2022-05-14T00:03:06Z", "aliases": [ "CVE-2013-2465" ], "details": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to \"Incorrect image channel verification\" in 2D.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -140,7 +145,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-693" + ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5c8h-c2cj-96mm/GHSA-5c8h-c2cj-96mm.json b/advisories/unreviewed/2022/05/GHSA-5c8h-c2cj-96mm/GHSA-5c8h-c2cj-96mm.json index 9d2aa990433..1fd64b3e30a 100644 --- a/advisories/unreviewed/2022/05/GHSA-5c8h-c2cj-96mm/GHSA-5c8h-c2cj-96mm.json +++ b/advisories/unreviewed/2022/05/GHSA-5c8h-c2cj-96mm/GHSA-5c8h-c2cj-96mm.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-5c8h-c2cj-96mm", - "modified": "2022-05-14T01:02:47Z", + "modified": "2025-02-10T21:31:01Z", "published": "2022-05-14T01:02:47Z", "aliases": [ "CVE-2015-2546" ], "details": "The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 allows local users to gain privileges via a crafted application, aka \"Win32k Memory Corruption Elevation of Privilege Vulnerability,\" a different vulnerability than CVE-2015-2511, CVE-2015-2517, and CVE-2015-2518.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { diff --git a/advisories/unreviewed/2022/05/GHSA-5ppv-vhvv-pxhh/GHSA-5ppv-vhvv-pxhh.json b/advisories/unreviewed/2022/05/GHSA-5ppv-vhvv-pxhh/GHSA-5ppv-vhvv-pxhh.json index 9dbbac59ff2..1bc65d39479 100644 --- a/advisories/unreviewed/2022/05/GHSA-5ppv-vhvv-pxhh/GHSA-5ppv-vhvv-pxhh.json +++ b/advisories/unreviewed/2022/05/GHSA-5ppv-vhvv-pxhh/GHSA-5ppv-vhvv-pxhh.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-5ppv-vhvv-pxhh", - "modified": "2022-05-14T01:46:43Z", + "modified": "2025-02-10T21:31:17Z", "published": "2022-05-14T01:46:43Z", "aliases": [ "CVE-2014-9163" ], "details": "Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in December 2014.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -20,7 +25,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-121" + ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-69xw-2hhx-gvfg/GHSA-69xw-2hhx-gvfg.json b/advisories/unreviewed/2022/05/GHSA-69xw-2hhx-gvfg/GHSA-69xw-2hhx-gvfg.json index 8b72aa7478f..0d485a21c17 100644 --- a/advisories/unreviewed/2022/05/GHSA-69xw-2hhx-gvfg/GHSA-69xw-2hhx-gvfg.json +++ b/advisories/unreviewed/2022/05/GHSA-69xw-2hhx-gvfg/GHSA-69xw-2hhx-gvfg.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-69xw-2hhx-gvfg", - "modified": "2022-05-13T01:17:14Z", + "modified": "2025-02-10T21:31:18Z", "published": "2022-05-13T01:17:14Z", "aliases": [ "CVE-2015-4902" ], "details": "Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" + } + ], "affected": [], "references": [ { @@ -104,7 +109,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-284" + ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7w6v-23gr-722w/GHSA-7w6v-23gr-722w.json b/advisories/unreviewed/2022/05/GHSA-7w6v-23gr-722w/GHSA-7w6v-23gr-722w.json index 293b86711a0..3ffceeff526 100644 --- a/advisories/unreviewed/2022/05/GHSA-7w6v-23gr-722w/GHSA-7w6v-23gr-722w.json +++ b/advisories/unreviewed/2022/05/GHSA-7w6v-23gr-722w/GHSA-7w6v-23gr-722w.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-7w6v-23gr-722w", - "modified": "2025-01-17T21:31:35Z", + "modified": "2025-02-10T21:30:58Z", "published": "2022-05-14T01:02:19Z", "aliases": [ "CVE-2015-2426" ], "details": "Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted OpenType font, aka \"OpenType Font Driver Vulnerability.\"", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -41,7 +46,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-119" + "CWE-119", + "CWE-124" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2022/05/GHSA-ch9c-pq9h-jrr9/GHSA-ch9c-pq9h-jrr9.json b/advisories/unreviewed/2022/05/GHSA-ch9c-pq9h-jrr9/GHSA-ch9c-pq9h-jrr9.json index 70ee8d49b71..88e4b976d02 100644 --- a/advisories/unreviewed/2022/05/GHSA-ch9c-pq9h-jrr9/GHSA-ch9c-pq9h-jrr9.json +++ b/advisories/unreviewed/2022/05/GHSA-ch9c-pq9h-jrr9/GHSA-ch9c-pq9h-jrr9.json @@ -61,7 +61,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-284" + ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cm2m-vv5g-hpc2/GHSA-cm2m-vv5g-hpc2.json b/advisories/unreviewed/2022/05/GHSA-cm2m-vv5g-hpc2/GHSA-cm2m-vv5g-hpc2.json index cd4a215af7c..827b6d70b09 100644 --- a/advisories/unreviewed/2022/05/GHSA-cm2m-vv5g-hpc2/GHSA-cm2m-vv5g-hpc2.json +++ b/advisories/unreviewed/2022/05/GHSA-cm2m-vv5g-hpc2/GHSA-cm2m-vv5g-hpc2.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-cm2m-vv5g-hpc2", - "modified": "2022-05-14T01:03:39Z", + "modified": "2025-02-10T21:31:14Z", "published": "2022-05-14T01:03:39Z", "aliases": [ "CVE-2014-1812" ], "details": "The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly handle distribution of passwords, which allows remote authenticated users to obtain sensitive credential information and consequently gain privileges by leveraging access to the SYSVOL share, as exploited in the wild in May 2014, aka \"Group Policy Preferences Password Elevation of Privilege Vulnerability.\"", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -24,7 +29,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-522" + ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cqpf-hj5r-9893/GHSA-cqpf-hj5r-9893.json b/advisories/unreviewed/2022/05/GHSA-cqpf-hj5r-9893/GHSA-cqpf-hj5r-9893.json index b223bf0bc46..b5de319c373 100644 --- a/advisories/unreviewed/2022/05/GHSA-cqpf-hj5r-9893/GHSA-cqpf-hj5r-9893.json +++ b/advisories/unreviewed/2022/05/GHSA-cqpf-hj5r-9893/GHSA-cqpf-hj5r-9893.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-cqpf-hj5r-9893", - "modified": "2022-05-17T05:36:15Z", + "modified": "2025-02-10T21:31:16Z", "published": "2022-05-17T05:36:15Z", "aliases": [ "CVE-2011-4723" ], "details": "The D-Link DIR-300 router stores cleartext passwords, which allows context-dependent attackers to obtain sensitive information via unspecified vectors.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } + ], "affected": [], "references": [ { @@ -20,7 +25,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-312" + ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fj6j-88c7-c8gx/GHSA-fj6j-88c7-c8gx.json b/advisories/unreviewed/2022/05/GHSA-fj6j-88c7-c8gx/GHSA-fj6j-88c7-c8gx.json index 1cda100cd26..87af549a956 100644 --- a/advisories/unreviewed/2022/05/GHSA-fj6j-88c7-c8gx/GHSA-fj6j-88c7-c8gx.json +++ b/advisories/unreviewed/2022/05/GHSA-fj6j-88c7-c8gx/GHSA-fj6j-88c7-c8gx.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-fj6j-88c7-c8gx", - "modified": "2022-05-14T01:03:06Z", + "modified": "2025-02-10T21:30:58Z", "published": "2022-05-14T01:03:06Z", "aliases": [ "CVE-2015-1769" ], "details": "Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 mishandles symlinks, which allows physically proximate attackers to execute arbitrary code by connecting a crafted USB device, aka \"Mount Manager Elevation of Privilege Vulnerability.\"", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { diff --git a/advisories/unreviewed/2022/05/GHSA-fprc-fr29-2qmp/GHSA-fprc-fr29-2qmp.json b/advisories/unreviewed/2022/05/GHSA-fprc-fr29-2qmp/GHSA-fprc-fr29-2qmp.json index a212d5fd597..efc5b150280 100644 --- a/advisories/unreviewed/2022/05/GHSA-fprc-fr29-2qmp/GHSA-fprc-fr29-2qmp.json +++ b/advisories/unreviewed/2022/05/GHSA-fprc-fr29-2qmp/GHSA-fprc-fr29-2qmp.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-fprc-fr29-2qmp", - "modified": "2024-12-20T06:30:44Z", + "modified": "2025-02-10T21:31:01Z", "published": "2022-05-14T01:03:39Z", "aliases": [ "CVE-2013-7331" ], "details": "The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild in February 2014.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" + } + ], "affected": [], "references": [ { @@ -37,7 +42,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-200" + "CWE-200", + "CWE-209" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2022/05/GHSA-fw99-8m5g-58p8/GHSA-fw99-8m5g-58p8.json b/advisories/unreviewed/2022/05/GHSA-fw99-8m5g-58p8/GHSA-fw99-8m5g-58p8.json index 6935b15290f..b3f7abc999b 100644 --- a/advisories/unreviewed/2022/05/GHSA-fw99-8m5g-58p8/GHSA-fw99-8m5g-58p8.json +++ b/advisories/unreviewed/2022/05/GHSA-fw99-8m5g-58p8/GHSA-fw99-8m5g-58p8.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-fw99-8m5g-58p8", - "modified": "2025-01-06T21:30:48Z", + "modified": "2025-02-10T21:31:09Z", "published": "2022-05-14T00:03:19Z", "aliases": [ "CVE-2012-4681" ], "details": "Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using \"reflection with a trusted immediate caller\" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -68,7 +73,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-284" + ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h3cw-j9j9-5pc4/GHSA-h3cw-j9j9-5pc4.json b/advisories/unreviewed/2022/05/GHSA-h3cw-j9j9-5pc4/GHSA-h3cw-j9j9-5pc4.json index 491660f60e0..16aaad13521 100644 --- a/advisories/unreviewed/2022/05/GHSA-h3cw-j9j9-5pc4/GHSA-h3cw-j9j9-5pc4.json +++ b/advisories/unreviewed/2022/05/GHSA-h3cw-j9j9-5pc4/GHSA-h3cw-j9j9-5pc4.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-h3cw-j9j9-5pc4", - "modified": "2024-04-26T18:33:40Z", + "modified": "2025-02-10T21:31:10Z", "published": "2022-05-05T02:49:02Z", "aliases": [ "CVE-2013-0431" ], "details": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka \"Issue 52,\" a different vulnerability than CVE-2013-1490.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } + ], "affected": [], "references": [ { @@ -92,7 +97,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-693" + ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h9rj-88q7-9jg3/GHSA-h9rj-88q7-9jg3.json b/advisories/unreviewed/2022/05/GHSA-h9rj-88q7-9jg3/GHSA-h9rj-88q7-9jg3.json index 062820f023f..7567bd5ec88 100644 --- a/advisories/unreviewed/2022/05/GHSA-h9rj-88q7-9jg3/GHSA-h9rj-88q7-9jg3.json +++ b/advisories/unreviewed/2022/05/GHSA-h9rj-88q7-9jg3/GHSA-h9rj-88q7-9jg3.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-h9rj-88q7-9jg3", - "modified": "2022-05-14T01:49:39Z", + "modified": "2025-02-10T21:30:58Z", "published": "2022-05-14T01:49:39Z", "aliases": [ "CVE-2014-0496" ], "details": "Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.9 and 11.x before 11.0.06 on Windows and Mac OS X allows attackers to execute arbitrary code via unspecified vectors.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -24,7 +29,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-416" + ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r293-6mhc-29xx/GHSA-r293-6mhc-29xx.json b/advisories/unreviewed/2022/05/GHSA-r293-6mhc-29xx/GHSA-r293-6mhc-29xx.json index ec35ec7e0c6..47145994f84 100644 --- a/advisories/unreviewed/2022/05/GHSA-r293-6mhc-29xx/GHSA-r293-6mhc-29xx.json +++ b/advisories/unreviewed/2022/05/GHSA-r293-6mhc-29xx/GHSA-r293-6mhc-29xx.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-r293-6mhc-29xx", - "modified": "2024-04-26T18:33:40Z", + "modified": "2025-02-10T21:31:10Z", "published": "2022-05-05T02:48:59Z", "aliases": [ "CVE-2013-0422" ], "details": "Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitrary code by (1) using the public getMBeanInstantiator method in the JmxMBeanServer class to obtain a reference to a private MBeanInstantiator object, then retrieving arbitrary Class references using the findClass method, and (2) using the Reflection API with recursion in a way that bypasses a security check by the java.lang.invoke.MethodHandles.Lookup.checkSecurityManager method due to the inability of the sun.reflect.Reflection.getCallerClass method to skip frames related to the new reflection API, as exploited in the wild in January 2013, as demonstrated by Blackhole and Nuclear Pack, and a different vulnerability than CVE-2012-4681 and CVE-2012-3174. NOTE: some parties have mapped the recursive Reflection API issue to CVE-2012-3174, but CVE-2012-3174 is for a different vulnerability whose details are not public as of 20130114. CVE-2013-0422 covers both the JMX/MBean and Reflection API issues. NOTE: it was originally reported that Java 6 was also vulnerable, but the reporter has retracted this claim, stating that Java 6 is not exploitable because the relevant code is called in a way that does not bypass security checks. NOTE: as of 20130114, a reliable third party has claimed that the findClass/MBeanInstantiator vector was not fixed in Oracle Java 7 Update 11. If there is still a vulnerable condition, then a separate CVE identifier might be created for the unfixed issue.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -92,7 +97,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-284" + ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v5x6-r6hp-xgpc/GHSA-v5x6-r6hp-xgpc.json b/advisories/unreviewed/2022/05/GHSA-v5x6-r6hp-xgpc/GHSA-v5x6-r6hp-xgpc.json index 3007d58be3c..729c0c5b1d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-v5x6-r6hp-xgpc/GHSA-v5x6-r6hp-xgpc.json +++ b/advisories/unreviewed/2022/05/GHSA-v5x6-r6hp-xgpc/GHSA-v5x6-r6hp-xgpc.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-v5x6-r6hp-xgpc", - "modified": "2022-05-13T01:47:33Z", + "modified": "2025-02-10T21:31:18Z", "published": "2022-05-13T01:47:33Z", "aliases": [ "CVE-2017-8464" diff --git a/advisories/unreviewed/2022/05/GHSA-v7gg-cccr-jpfx/GHSA-v7gg-cccr-jpfx.json b/advisories/unreviewed/2022/05/GHSA-v7gg-cccr-jpfx/GHSA-v7gg-cccr-jpfx.json index 8a3dde50759..e5033f8d006 100644 --- a/advisories/unreviewed/2022/05/GHSA-v7gg-cccr-jpfx/GHSA-v7gg-cccr-jpfx.json +++ b/advisories/unreviewed/2022/05/GHSA-v7gg-cccr-jpfx/GHSA-v7gg-cccr-jpfx.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-v7gg-cccr-jpfx", - "modified": "2022-05-17T00:57:51Z", + "modified": "2025-02-10T21:31:09Z", "published": "2022-05-17T00:57:51Z", "aliases": [ "CVE-2012-5076" ], "details": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -56,7 +61,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-284" + ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vjph-m3mp-rqj5/GHSA-vjph-m3mp-rqj5.json b/advisories/unreviewed/2022/05/GHSA-vjph-m3mp-rqj5/GHSA-vjph-m3mp-rqj5.json index 851930fe031..e44229dc94d 100644 --- a/advisories/unreviewed/2022/05/GHSA-vjph-m3mp-rqj5/GHSA-vjph-m3mp-rqj5.json +++ b/advisories/unreviewed/2022/05/GHSA-vjph-m3mp-rqj5/GHSA-vjph-m3mp-rqj5.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-vjph-m3mp-rqj5", - "modified": "2022-05-13T01:11:24Z", + "modified": "2025-02-10T21:31:19Z", "published": "2022-05-13T01:11:24Z", "aliases": [ "CVE-2017-11882" diff --git a/advisories/unreviewed/2022/05/GHSA-w62w-9g5v-w3p4/GHSA-w62w-9g5v-w3p4.json b/advisories/unreviewed/2022/05/GHSA-w62w-9g5v-w3p4/GHSA-w62w-9g5v-w3p4.json index e9b3ada349a..e66b517ec8c 100644 --- a/advisories/unreviewed/2022/05/GHSA-w62w-9g5v-w3p4/GHSA-w62w-9g5v-w3p4.json +++ b/advisories/unreviewed/2022/05/GHSA-w62w-9g5v-w3p4/GHSA-w62w-9g5v-w3p4.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-w62w-9g5v-w3p4", - "modified": "2022-05-13T01:05:54Z", + "modified": "2025-02-10T21:31:14Z", "published": "2022-05-13T01:05:54Z", "aliases": [ "CVE-2014-8439" ], "details": "Adobe Flash Player before 13.0.0.258 and 14.x and 15.x before 15.0.0.239 on Windows and OS X and before 11.2.202.424 on Linux, Adobe AIR before 15.0.0.293, Adobe AIR SDK before 15.0.0.302, and Adobe AIR SDK & Compiler before 15.0.0.302 allow attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -61,7 +66,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-119" + "CWE-119", + "CWE-416" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2022/05/GHSA-w64p-pvrc-c5w3/GHSA-w64p-pvrc-c5w3.json b/advisories/unreviewed/2022/05/GHSA-w64p-pvrc-c5w3/GHSA-w64p-pvrc-c5w3.json index c7da4950297..f7f2af930ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-w64p-pvrc-c5w3/GHSA-w64p-pvrc-c5w3.json +++ b/advisories/unreviewed/2022/05/GHSA-w64p-pvrc-c5w3/GHSA-w64p-pvrc-c5w3.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-w64p-pvrc-c5w3", - "modified": "2024-12-20T06:30:45Z", + "modified": "2025-02-10T21:31:14Z", "published": "2022-05-14T01:02:27Z", "aliases": [ "CVE-2014-6332" ], "details": "OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to execute arbitrary code via a crafted web site, as demonstrated by an array-redimensioning attempt that triggers improper handling of a size value in the SafeArrayDimen function, aka \"Windows OLE Automation Array Remote Code Execution Vulnerability.\"", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { diff --git a/advisories/unreviewed/2022/05/GHSA-wq4h-35pf-mp23/GHSA-wq4h-35pf-mp23.json b/advisories/unreviewed/2022/05/GHSA-wq4h-35pf-mp23/GHSA-wq4h-35pf-mp23.json index 006728aaf58..b36c63f2911 100644 --- a/advisories/unreviewed/2022/05/GHSA-wq4h-35pf-mp23/GHSA-wq4h-35pf-mp23.json +++ b/advisories/unreviewed/2022/05/GHSA-wq4h-35pf-mp23/GHSA-wq4h-35pf-mp23.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-wq4h-35pf-mp23", - "modified": "2024-04-26T18:33:41Z", + "modified": "2025-02-10T21:31:11Z", "published": "2022-05-17T00:55:30Z", "aliases": [ "CVE-2013-2423" ], "details": "Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from the original researcher that this vulnerability allows remote attackers to bypass permission checks by the MethodHandles method and modify arbitrary public final fields using reflection and type confusion, as demonstrated using integer and double fields to disable the security manager.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" + } + ], "affected": [], "references": [ { @@ -80,7 +85,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-284" + ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wr9v-3qgm-q33g/GHSA-wr9v-3qgm-q33g.json b/advisories/unreviewed/2022/05/GHSA-wr9v-3qgm-q33g/GHSA-wr9v-3qgm-q33g.json index ce1deaf97e7..eacb2e13a7a 100644 --- a/advisories/unreviewed/2022/05/GHSA-wr9v-3qgm-q33g/GHSA-wr9v-3qgm-q33g.json +++ b/advisories/unreviewed/2022/05/GHSA-wr9v-3qgm-q33g/GHSA-wr9v-3qgm-q33g.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-wr9v-3qgm-q33g", - "modified": "2022-05-02T03:19:52Z", + "modified": "2025-02-10T21:31:03Z", "published": "2022-05-02T03:19:52Z", "aliases": [ "CVE-2009-0927" ], "details": "Stack-based buffer overflow in Adobe Reader and Adobe Acrobat 9 before 9.1, 8 before 8.1.3 , and 7 before 7.1.1 allows remote attackers to execute arbitrary code via a crafted argument to the getIcon method of a Collab object, a different vulnerability than CVE-2009-0658.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -81,6 +86,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-121", "CWE-20" ], "severity": "HIGH", diff --git a/advisories/unreviewed/2022/05/GHSA-xv7f-hrp6-5mhh/GHSA-xv7f-hrp6-5mhh.json b/advisories/unreviewed/2022/05/GHSA-xv7f-hrp6-5mhh/GHSA-xv7f-hrp6-5mhh.json index b7b37d0ae3c..aef93f81aee 100644 --- a/advisories/unreviewed/2022/05/GHSA-xv7f-hrp6-5mhh/GHSA-xv7f-hrp6-5mhh.json +++ b/advisories/unreviewed/2022/05/GHSA-xv7f-hrp6-5mhh/GHSA-xv7f-hrp6-5mhh.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-xv7f-hrp6-5mhh", - "modified": "2022-05-17T04:38:00Z", + "modified": "2025-02-10T21:30:57Z", "published": "2022-05-17T04:38:00Z", "aliases": [ "CVE-2013-2597" ], "details": "Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.6.x and 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allows attackers to gain privileges via an application that leverages /dev/msm_acdb access and provides a large size value in an ioctl argument.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -21,7 +26,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-119" + "CWE-119", + "CWE-121" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2023/04/GHSA-34fg-2j3p-288g/GHSA-34fg-2j3p-288g.json b/advisories/unreviewed/2023/04/GHSA-34fg-2j3p-288g/GHSA-34fg-2j3p-288g.json index 3ee9f839f5f..9469f808802 100644 --- a/advisories/unreviewed/2023/04/GHSA-34fg-2j3p-288g/GHSA-34fg-2j3p-288g.json +++ b/advisories/unreviewed/2023/04/GHSA-34fg-2j3p-288g/GHSA-34fg-2j3p-288g.json @@ -33,7 +33,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-535" + ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/04/GHSA-5775-m3qf-xc33/GHSA-5775-m3qf-xc33.json b/advisories/unreviewed/2023/04/GHSA-5775-m3qf-xc33/GHSA-5775-m3qf-xc33.json index 984ae5dc339..c1033d4e735 100644 --- a/advisories/unreviewed/2023/04/GHSA-5775-m3qf-xc33/GHSA-5775-m3qf-xc33.json +++ b/advisories/unreviewed/2023/04/GHSA-5775-m3qf-xc33/GHSA-5775-m3qf-xc33.json @@ -25,7 +25,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-287" + ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/04/GHSA-7g53-7whp-2hm3/GHSA-7g53-7whp-2hm3.json b/advisories/unreviewed/2023/04/GHSA-7g53-7whp-2hm3/GHSA-7g53-7whp-2hm3.json index 35b49bde6da..21e468d3ad4 100644 --- a/advisories/unreviewed/2023/04/GHSA-7g53-7whp-2hm3/GHSA-7g53-7whp-2hm3.json +++ b/advisories/unreviewed/2023/04/GHSA-7g53-7whp-2hm3/GHSA-7g53-7whp-2hm3.json @@ -30,6 +30,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-285", "CWE-862" ], "severity": "MODERATE", diff --git a/advisories/unreviewed/2023/04/GHSA-jc5r-hf66-vmm4/GHSA-jc5r-hf66-vmm4.json b/advisories/unreviewed/2023/04/GHSA-jc5r-hf66-vmm4/GHSA-jc5r-hf66-vmm4.json index c33d242f7bc..0b811ae0535 100644 --- a/advisories/unreviewed/2023/04/GHSA-jc5r-hf66-vmm4/GHSA-jc5r-hf66-vmm4.json +++ b/advisories/unreviewed/2023/04/GHSA-jc5r-hf66-vmm4/GHSA-jc5r-hf66-vmm4.json @@ -33,7 +33,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-400" + ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/04/GHSA-phjw-j3fx-vxpj/GHSA-phjw-j3fx-vxpj.json b/advisories/unreviewed/2023/04/GHSA-phjw-j3fx-vxpj/GHSA-phjw-j3fx-vxpj.json index b8b4506fa62..56c29dad7b8 100644 --- a/advisories/unreviewed/2023/04/GHSA-phjw-j3fx-vxpj/GHSA-phjw-j3fx-vxpj.json +++ b/advisories/unreviewed/2023/04/GHSA-phjw-j3fx-vxpj/GHSA-phjw-j3fx-vxpj.json @@ -34,7 +34,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-77" + "CWE-77", + "CWE-94" ], "severity": "CRITICAL", "github_reviewed": false, diff --git a/advisories/unreviewed/2023/04/GHSA-pvv5-5wph-88cq/GHSA-pvv5-5wph-88cq.json b/advisories/unreviewed/2023/04/GHSA-pvv5-5wph-88cq/GHSA-pvv5-5wph-88cq.json index a20b57f6c79..bd503f1197e 100644 --- a/advisories/unreviewed/2023/04/GHSA-pvv5-5wph-88cq/GHSA-pvv5-5wph-88cq.json +++ b/advisories/unreviewed/2023/04/GHSA-pvv5-5wph-88cq/GHSA-pvv5-5wph-88cq.json @@ -29,7 +29,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-1391" + ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/04/GHSA-qwxw-v6wx-qh2q/GHSA-qwxw-v6wx-qh2q.json b/advisories/unreviewed/2023/04/GHSA-qwxw-v6wx-qh2q/GHSA-qwxw-v6wx-qh2q.json index c748916965e..ef32171bdbc 100644 --- a/advisories/unreviewed/2023/04/GHSA-qwxw-v6wx-qh2q/GHSA-qwxw-v6wx-qh2q.json +++ b/advisories/unreviewed/2023/04/GHSA-qwxw-v6wx-qh2q/GHSA-qwxw-v6wx-qh2q.json @@ -33,7 +33,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-200" + ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/04/GHSA-rrjx-38j3-wx7p/GHSA-rrjx-38j3-wx7p.json b/advisories/unreviewed/2023/04/GHSA-rrjx-38j3-wx7p/GHSA-rrjx-38j3-wx7p.json index 51871611ecd..1da5df2ef35 100644 --- a/advisories/unreviewed/2023/04/GHSA-rrjx-38j3-wx7p/GHSA-rrjx-38j3-wx7p.json +++ b/advisories/unreviewed/2023/04/GHSA-rrjx-38j3-wx7p/GHSA-rrjx-38j3-wx7p.json @@ -30,6 +30,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-400", "CWE-863" ], "severity": "MODERATE", diff --git a/advisories/unreviewed/2023/04/GHSA-xg8m-4qxg-vm4m/GHSA-xg8m-4qxg-vm4m.json b/advisories/unreviewed/2023/04/GHSA-xg8m-4qxg-vm4m/GHSA-xg8m-4qxg-vm4m.json index fefb9df2ff2..2086f9fd8a9 100644 --- a/advisories/unreviewed/2023/04/GHSA-xg8m-4qxg-vm4m/GHSA-xg8m-4qxg-vm4m.json +++ b/advisories/unreviewed/2023/04/GHSA-xg8m-4qxg-vm4m/GHSA-xg8m-4qxg-vm4m.json @@ -33,7 +33,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-200" + ], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/04/GHSA-xjw7-jpqw-3q4x/GHSA-xjw7-jpqw-3q4x.json b/advisories/unreviewed/2023/04/GHSA-xjw7-jpqw-3q4x/GHSA-xjw7-jpqw-3q4x.json index 96a61830893..56ecd581c4b 100644 --- a/advisories/unreviewed/2023/04/GHSA-xjw7-jpqw-3q4x/GHSA-xjw7-jpqw-3q4x.json +++ b/advisories/unreviewed/2023/04/GHSA-xjw7-jpqw-3q4x/GHSA-xjw7-jpqw-3q4x.json @@ -29,7 +29,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-400" + ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/07/GHSA-qgvh-g2mh-jwfc/GHSA-qgvh-g2mh-jwfc.json b/advisories/unreviewed/2023/07/GHSA-qgvh-g2mh-jwfc/GHSA-qgvh-g2mh-jwfc.json index 0a5cba2c945..d8a4f2ba1ef 100644 --- a/advisories/unreviewed/2023/07/GHSA-qgvh-g2mh-jwfc/GHSA-qgvh-g2mh-jwfc.json +++ b/advisories/unreviewed/2023/07/GHSA-qgvh-g2mh-jwfc/GHSA-qgvh-g2mh-jwfc.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-qgvh-g2mh-jwfc", - "modified": "2024-04-04T05:35:52Z", + "modified": "2025-02-10T21:31:25Z", "published": "2023-07-06T19:24:14Z", "aliases": [ "CVE-2023-1939" diff --git a/advisories/unreviewed/2024/03/GHSA-6237-xhjp-qj5r/GHSA-6237-xhjp-qj5r.json b/advisories/unreviewed/2024/03/GHSA-6237-xhjp-qj5r/GHSA-6237-xhjp-qj5r.json index 533251d5014..4a8b5b7b9c0 100644 --- a/advisories/unreviewed/2024/03/GHSA-6237-xhjp-qj5r/GHSA-6237-xhjp-qj5r.json +++ b/advisories/unreviewed/2024/03/GHSA-6237-xhjp-qj5r/GHSA-6237-xhjp-qj5r.json @@ -1,12 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-6237-xhjp-qj5r", - "modified": "2024-03-27T06:30:32Z", + "modified": "2025-02-10T21:31:27Z", "published": "2024-03-27T06:30:32Z", "aliases": [ "CVE-2024-22288" ], - "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels allows Reflected XSS.This issue affects WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels: from n/a through 4.4.0.\n\n", + "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels allows Reflected XSS.This issue affects WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels: from n/a through 4.4.0.", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/unreviewed/2024/03/GHSA-6xvx-6cwv-53hw/GHSA-6xvx-6cwv-53hw.json b/advisories/unreviewed/2024/03/GHSA-6xvx-6cwv-53hw/GHSA-6xvx-6cwv-53hw.json index d3f4a2956e8..ce5fffa6523 100644 --- a/advisories/unreviewed/2024/03/GHSA-6xvx-6cwv-53hw/GHSA-6xvx-6cwv-53hw.json +++ b/advisories/unreviewed/2024/03/GHSA-6xvx-6cwv-53hw/GHSA-6xvx-6cwv-53hw.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-6xvx-6cwv-53hw", - "modified": "2024-03-22T15:31:06Z", + "modified": "2025-02-10T21:31:27Z", "published": "2024-03-22T15:31:06Z", "aliases": [ "CVE-2024-2449" diff --git a/advisories/unreviewed/2024/03/GHSA-mfrg-mc7h-8xrw/GHSA-mfrg-mc7h-8xrw.json b/advisories/unreviewed/2024/03/GHSA-mfrg-mc7h-8xrw/GHSA-mfrg-mc7h-8xrw.json index c034afd88b7..02eb4113365 100644 --- a/advisories/unreviewed/2024/03/GHSA-mfrg-mc7h-8xrw/GHSA-mfrg-mc7h-8xrw.json +++ b/advisories/unreviewed/2024/03/GHSA-mfrg-mc7h-8xrw/GHSA-mfrg-mc7h-8xrw.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-mfrg-mc7h-8xrw", - "modified": "2025-01-28T21:30:59Z", + "modified": "2025-02-10T21:31:27Z", "published": "2024-03-18T00:30:44Z", "aliases": [ "CVE-2024-23139" diff --git a/advisories/unreviewed/2024/03/GHSA-p6cr-4f2h-m98v/GHSA-p6cr-4f2h-m98v.json b/advisories/unreviewed/2024/03/GHSA-p6cr-4f2h-m98v/GHSA-p6cr-4f2h-m98v.json index a620893fd59..9ac24242e1f 100644 --- a/advisories/unreviewed/2024/03/GHSA-p6cr-4f2h-m98v/GHSA-p6cr-4f2h-m98v.json +++ b/advisories/unreviewed/2024/03/GHSA-p6cr-4f2h-m98v/GHSA-p6cr-4f2h-m98v.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-p6cr-4f2h-m98v", - "modified": "2024-03-04T15:31:06Z", + "modified": "2025-02-10T21:31:26Z", "published": "2024-03-04T15:31:06Z", "aliases": [ "CVE-2023-6241" ], - "details": "Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to exploit a software race condition to perform improper memory processing operations. If the system’s memory is carefully prepared by the user, then this in turn cause a use-after-free.This issue affects Midgard GPU Kernel Driver: from r13p0 through r32p0; Bifrost GPU Kernel Driver: from r11p0 through r25p0; Valhall GPU Kernel Driver: from r19p0 through r25p0, from r29p0 through r46p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r46p0.\n\n", - "severity": [], + "details": "Use After Free vulnerability in Arm Ltd Midgard GPU Kernel Driver, Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to exploit a software race condition to perform improper memory processing operations. If the system’s memory is carefully prepared by the user, then this in turn cause a use-after-free.This issue affects Midgard GPU Kernel Driver: from r13p0 through r32p0; Bifrost GPU Kernel Driver: from r11p0 through r25p0; Valhall GPU Kernel Driver: from r19p0 through r25p0, from r29p0 through r46p0; Arm 5th Gen GPU Architecture Kernel Driver: from r41p0 through r46p0.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -23,7 +28,7 @@ "cwe_ids": [ "CWE-416" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-04T13:15:43Z" diff --git a/advisories/unreviewed/2024/04/GHSA-f792-xp3g-685x/GHSA-f792-xp3g-685x.json b/advisories/unreviewed/2024/04/GHSA-f792-xp3g-685x/GHSA-f792-xp3g-685x.json index fda1913efc2..7d1d2109fe2 100644 --- a/advisories/unreviewed/2024/04/GHSA-f792-xp3g-685x/GHSA-f792-xp3g-685x.json +++ b/advisories/unreviewed/2024/04/GHSA-f792-xp3g-685x/GHSA-f792-xp3g-685x.json @@ -1,12 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-f792-xp3g-685x", - "modified": "2024-04-17T21:30:49Z", + "modified": "2025-02-10T21:31:29Z", "published": "2024-04-17T21:30:49Z", "aliases": [ "CVE-2024-21990" ], - "details": "ONTAP Select Deploy administration utility versions 9.12.1.x, \n9.13.1.x and 9.14.1.x contain hard-coded credentials that could allow an\n attacker to view Deploy configuration information and modify the \naccount credentials.\n\n\n\n\n", + "details": "ONTAP Select Deploy administration utility versions 9.12.1.x, \n9.13.1.x and 9.14.1.x contain hard-coded credentials that could allow an\n attacker to view Deploy configuration information and modify the \naccount credentials.", "severity": [ { "type": "CVSS_V3", @@ -26,7 +26,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-259" + "CWE-259", + "CWE-798" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/04/GHSA-frm8-8v27-f6qx/GHSA-frm8-8v27-f6qx.json b/advisories/unreviewed/2024/04/GHSA-frm8-8v27-f6qx/GHSA-frm8-8v27-f6qx.json index 87805993978..08e2c2689b0 100644 --- a/advisories/unreviewed/2024/04/GHSA-frm8-8v27-f6qx/GHSA-frm8-8v27-f6qx.json +++ b/advisories/unreviewed/2024/04/GHSA-frm8-8v27-f6qx/GHSA-frm8-8v27-f6qx.json @@ -1,12 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-frm8-8v27-f6qx", - "modified": "2024-04-12T15:37:19Z", + "modified": "2025-02-10T21:31:28Z", "published": "2024-04-12T15:37:19Z", "aliases": [ "CVE-2024-31238" ], - "details": "Cross-Site Request Forgery (CSRF) vulnerability in Zaytech Smart Online Order for Clover.This issue affects Smart Online Order for Clover: from n/a through 1.5.5.\n\n", + "details": "Cross-Site Request Forgery (CSRF) vulnerability in Zaytech Smart Online Order for Clover.This issue affects Smart Online Order for Clover: from n/a through 1.5.5.", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/unreviewed/2024/04/GHSA-hpq6-rxm7-x3v4/GHSA-hpq6-rxm7-x3v4.json b/advisories/unreviewed/2024/04/GHSA-hpq6-rxm7-x3v4/GHSA-hpq6-rxm7-x3v4.json index d52e4a0cc14..9c1dc9a5957 100644 --- a/advisories/unreviewed/2024/04/GHSA-hpq6-rxm7-x3v4/GHSA-hpq6-rxm7-x3v4.json +++ b/advisories/unreviewed/2024/04/GHSA-hpq6-rxm7-x3v4/GHSA-hpq6-rxm7-x3v4.json @@ -1,12 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-hpq6-rxm7-x3v4", - "modified": "2024-04-17T21:30:49Z", + "modified": "2025-02-10T21:31:29Z", "published": "2024-04-17T21:30:49Z", "aliases": [ "CVE-2024-21989" ], - "details": "ONTAP Select Deploy administration utility versions 9.12.1.x, \n9.13.1.x and 9.14.1.x are susceptible to a vulnerability which when \nsuccessfully exploited could allow a read-only user to escalate their \nprivileges.\n\n", + "details": "ONTAP Select Deploy administration utility versions 9.12.1.x, \n9.13.1.x and 9.14.1.x are susceptible to a vulnerability which when \nsuccessfully exploited could allow a read-only user to escalate their \nprivileges.", "severity": [ { "type": "CVSS_V3", diff --git a/advisories/unreviewed/2024/10/GHSA-grqq-hcc7-crmr/GHSA-grqq-hcc7-crmr.json b/advisories/unreviewed/2024/10/GHSA-grqq-hcc7-crmr/GHSA-grqq-hcc7-crmr.json index a5ca625f3e2..f6029e785df 100644 --- a/advisories/unreviewed/2024/10/GHSA-grqq-hcc7-crmr/GHSA-grqq-hcc7-crmr.json +++ b/advisories/unreviewed/2024/10/GHSA-grqq-hcc7-crmr/GHSA-grqq-hcc7-crmr.json @@ -1,13 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-grqq-hcc7-crmr", - "modified": "2025-01-31T21:32:44Z", + "modified": "2025-02-10T21:31:33Z", "published": "2024-10-22T18:32:12Z", "aliases": [ "CVE-2024-9287" ], "details": "A vulnerability has been found in the CPython `venv` module and CLI where path names provided when creating a virtual environment were not quoted properly, allowing the creator to inject commands into virtual environment \"activation\" scripts (ie \"source venv/bin/activate\"). This means that attacker-controlled virtual environments are able to run commands when the virtual environment is activated. Virtual environments which are not created by an attacker or which aren't activated before being used (ie \"./venv/bin/python\") are not affected.", "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + }, { "type": "CVSS_V4", "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:H/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Green" @@ -58,7 +62,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-428" + "CWE-428", + "CWE-77" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2025/02/GHSA-3frg-24qp-xxv2/GHSA-3frg-24qp-xxv2.json b/advisories/unreviewed/2025/02/GHSA-3frg-24qp-xxv2/GHSA-3frg-24qp-xxv2.json new file mode 100644 index 00000000000..476e3c33a54 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-3frg-24qp-xxv2/GHSA-3frg-24qp-xxv2.json @@ -0,0 +1,60 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3frg-24qp-xxv2", + "modified": "2025-02-10T21:31:39Z", + "published": "2025-02-10T21:31:39Z", + "aliases": [ + "CVE-2025-1153" + ], + "details": "A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability is the function bfd_set_format of the file format.c. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 2.45 is able to address this issue. The identifier of the patch is 8d97c1a53f3dc9fd8e1ccdb039b8a33d50133150. It is recommended to upgrade the affected component.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1153" + }, + { + "type": "WEB", + "url": "https://sourceware.org/bugzilla/show_bug.cgi?id=32603" + }, + { + "type": "WEB", + "url": "https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=8d97c1a53f3dc9fd8e1ccdb039b8a33d50133150" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.295057" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.295057" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.489991" + }, + { + "type": "WEB", + "url": "https://www.gnu.org" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "LOW", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T19:15:39Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-3px5-66w8-x4q8/GHSA-3px5-66w8-x4q8.json b/advisories/unreviewed/2025/02/GHSA-3px5-66w8-x4q8/GHSA-3px5-66w8-x4q8.json new file mode 100644 index 00000000000..a46eb4be0fc --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-3px5-66w8-x4q8/GHSA-3px5-66w8-x4q8.json @@ -0,0 +1,45 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3px5-66w8-x4q8", + "modified": "2025-02-10T21:31:37Z", + "published": "2025-02-10T21:31:37Z", + "aliases": [ + "CVE-2024-27859" + ], + "details": "The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, tvOS 17.4, watchOS 10.4, visionOS 1.1, macOS Sonoma 14.4. Processing web content may lead to arbitrary code execution.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27859" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120881" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120882" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120883" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120893" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120895" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T19:15:37Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-3whm-j4xm-rv8x/GHSA-3whm-j4xm-rv8x.json b/advisories/unreviewed/2025/02/GHSA-3whm-j4xm-rv8x/GHSA-3whm-j4xm-rv8x.json index 48bc1700091..e921f703ad0 100644 --- a/advisories/unreviewed/2025/02/GHSA-3whm-j4xm-rv8x/GHSA-3whm-j4xm-rv8x.json +++ b/advisories/unreviewed/2025/02/GHSA-3whm-j4xm-rv8x/GHSA-3whm-j4xm-rv8x.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-3whm-j4xm-rv8x", - "modified": "2025-02-06T18:31:05Z", + "modified": "2025-02-10T21:31:35Z", "published": "2025-02-06T18:31:05Z", "aliases": [ "CVE-2025-22866" ], "details": "Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -33,7 +38,7 @@ ], "database_specific": { "cwe_ids": [], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-06T17:15:21Z" diff --git a/advisories/unreviewed/2025/02/GHSA-4gr2-9449-vfcf/GHSA-4gr2-9449-vfcf.json b/advisories/unreviewed/2025/02/GHSA-4gr2-9449-vfcf/GHSA-4gr2-9449-vfcf.json new file mode 100644 index 00000000000..45f1ec006c1 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-4gr2-9449-vfcf/GHSA-4gr2-9449-vfcf.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4gr2-9449-vfcf", + "modified": "2025-02-10T21:31:38Z", + "published": "2025-02-10T21:31:38Z", + "aliases": [ + "CVE-2024-46431" + ], + "details": "Tenda W18E V16.01.0.8(1625) is vulnerable to Buffer Overflow. An attacker with access to the web management portal can exploit this vulnerability by sending specially crafted data to the delWewifiPic function.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46431" + }, + { + "type": "WEB", + "url": "https://reddassolutions.com/blog/tenda_w18e_security_research" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-120" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T19:15:38Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-6h66-x2h7-rxmw/GHSA-6h66-x2h7-rxmw.json b/advisories/unreviewed/2025/02/GHSA-6h66-x2h7-rxmw/GHSA-6h66-x2h7-rxmw.json new file mode 100644 index 00000000000..b5c341c9254 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-6h66-x2h7-rxmw/GHSA-6h66-x2h7-rxmw.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6h66-x2h7-rxmw", + "modified": "2025-02-10T21:31:39Z", + "published": "2025-02-10T21:31:39Z", + "aliases": [ + "CVE-2025-1154" + ], + "details": "A vulnerability, which was classified as critical, has been found in xxyopen Novel up to 3.4.1. Affected by this issue is some unknown functionality of the file /api/front/search/books. The manipulation of the argument sort leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1154" + }, + { + "type": "WEB", + "url": "https://gist.github.com/GSBP0/9d26bf092647018e39eb515fb6c1eb0a" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.295058" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.295058" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.492531" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T20:15:42Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-6v8g-q77p-ghph/GHSA-6v8g-q77p-ghph.json b/advisories/unreviewed/2025/02/GHSA-6v8g-q77p-ghph/GHSA-6v8g-q77p-ghph.json new file mode 100644 index 00000000000..1c6ce4f3f89 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-6v8g-q77p-ghph/GHSA-6v8g-q77p-ghph.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6v8g-q77p-ghph", + "modified": "2025-02-10T21:31:39Z", + "published": "2025-02-10T21:31:39Z", + "aliases": [ + "CVE-2024-57178" + ], + "details": "An SQL injection vulnerability exists in Stock-Forecaster <=01-04-2020. By sending a specially crafted 'stock-symbol' parameter to the portofolio() endpoint, it is possible to trigger an SQL injection in the application. As a result, the attacker will be able the user data or manipulate the software behavior.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57178" + }, + { + "type": "WEB", + "url": "https://github.com/nihal223/Stock-Forecaster" + }, + { + "type": "WEB", + "url": "https://github.com/waristea/cve-research/tree/main/CVE-2024-57178" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T20:15:42Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-7wwr-h8cm-9jf7/GHSA-7wwr-h8cm-9jf7.json b/advisories/unreviewed/2025/02/GHSA-7wwr-h8cm-9jf7/GHSA-7wwr-h8cm-9jf7.json new file mode 100644 index 00000000000..c1f47806015 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-7wwr-h8cm-9jf7/GHSA-7wwr-h8cm-9jf7.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7wwr-h8cm-9jf7", + "modified": "2025-02-10T21:31:38Z", + "published": "2025-02-10T21:31:37Z", + "aliases": [ + "CVE-2024-42513" + ], + "details": "Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when using HTTPS endpoints.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42513" + }, + { + "type": "WEB", + "url": "https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2024-42513.pdf" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-290" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T19:15:38Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-866h-pm2w-j493/GHSA-866h-pm2w-j493.json b/advisories/unreviewed/2025/02/GHSA-866h-pm2w-j493/GHSA-866h-pm2w-j493.json new file mode 100644 index 00000000000..9d99c1b0bcd --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-866h-pm2w-j493/GHSA-866h-pm2w-j493.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-866h-pm2w-j493", + "modified": "2025-02-10T21:31:38Z", + "published": "2025-02-10T21:31:37Z", + "aliases": [ + "CVE-2024-13059" + ], + "details": "A vulnerability in mintplex-labs/anything-llm prior to version 1.3.1 allows for path traversal due to improper handling of non-ASCII filenames in the multer library. This vulnerability can lead to arbitrary file write, which can subsequently result in remote code execution. The issue arises when the filename transformation introduces '../' sequences, which are not sanitized by multer, allowing attackers with manager or admin roles to write files to arbitrary locations on the server.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13059" + }, + { + "type": "WEB", + "url": "https://github.com/mintplex-labs/anything-llm/commit/0b7bf68f2c02ca68075970fbf85d5a70ca5e94ca" + }, + { + "type": "WEB", + "url": "https://huntr.com/bounties/92a875fe-c5b3-485c-b03f-d3185189e0b1" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-29" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T19:15:37Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-96jm-2888-9qjr/GHSA-96jm-2888-9qjr.json b/advisories/unreviewed/2025/02/GHSA-96jm-2888-9qjr/GHSA-96jm-2888-9qjr.json new file mode 100644 index 00000000000..f7665c80352 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-96jm-2888-9qjr/GHSA-96jm-2888-9qjr.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-96jm-2888-9qjr", + "modified": "2025-02-10T21:31:38Z", + "published": "2025-02-10T21:31:38Z", + "aliases": [ + "CVE-2024-46435" + ], + "details": "A stack overflow vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an authenticated remote attacker to cause a denial of service or potentially execute arbitrary code. This vulnerability occurs due to improper input validation when handling user-supplied data in the delFacebookPic function.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46435" + }, + { + "type": "WEB", + "url": "https://reddassolutions.com/blog/tenda_w18e_security_research" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-121" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T19:15:38Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-ccw5-hpm4-mg3c/GHSA-ccw5-hpm4-mg3c.json b/advisories/unreviewed/2025/02/GHSA-ccw5-hpm4-mg3c/GHSA-ccw5-hpm4-mg3c.json new file mode 100644 index 00000000000..aa4c59e25bb --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-ccw5-hpm4-mg3c/GHSA-ccw5-hpm4-mg3c.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-ccw5-hpm4-mg3c", + "modified": "2025-02-10T21:31:38Z", + "published": "2025-02-10T21:31:38Z", + "aliases": [ + "CVE-2024-46430" + ], + "details": "Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control. Unauthorized password change via the web management portal allows an unauthenticated remote attacker to change the administrator password by sending a specially crafted HTTP POST request to the setLoginPassword function, bypassing the authentication mechanism.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46430" + }, + { + "type": "WEB", + "url": "https://reddassolutions.com/blog/tenda_w18e_security_research" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-284" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T19:15:38Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-gr7g-jpwx-6xrq/GHSA-gr7g-jpwx-6xrq.json b/advisories/unreviewed/2025/02/GHSA-gr7g-jpwx-6xrq/GHSA-gr7g-jpwx-6xrq.json new file mode 100644 index 00000000000..b58ab0574f0 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-gr7g-jpwx-6xrq/GHSA-gr7g-jpwx-6xrq.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gr7g-jpwx-6xrq", + "modified": "2025-02-10T21:31:39Z", + "published": "2025-02-10T21:31:39Z", + "aliases": [ + "CVE-2024-46437" + ], + "details": "A sensitive information disclosure vulnerability in the Tenda W18E V16.01.0.8(1625) web management portal allows an unauthenticated remote attacker to retrieve sensitive configuration information, including WiFi SSID, WiFi password, and base64-encoded administrator credentials, by sending a specially crafted HTTP POST request to the getQuickCfgWifiAndLogin function, bypassing authentication checks.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46437" + }, + { + "type": "WEB", + "url": "https://reddassolutions.com/blog/tenda_w18e_security_research" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-200" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T19:15:39Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-grmj-qggf-g5g3/GHSA-grmj-qggf-g5g3.json b/advisories/unreviewed/2025/02/GHSA-grmj-qggf-g5g3/GHSA-grmj-qggf-g5g3.json new file mode 100644 index 00000000000..f0b5c6d2b7d --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-grmj-qggf-g5g3/GHSA-grmj-qggf-g5g3.json @@ -0,0 +1,48 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-grmj-qggf-g5g3", + "modified": "2025-02-10T21:31:40Z", + "published": "2025-02-10T21:31:40Z", + "aliases": [ + "CVE-2025-1157" + ], + "details": "A vulnerability was found in Allims lab.online up to 20250201 and classified as critical. This issue affects some unknown processing of the file /model/model_recuperar_senha.php. The manipulation of the argument recuperacao leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1157" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.295061" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.295061" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.493492" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T21:15:22Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-hm2f-r463-q8wq/GHSA-hm2f-r463-q8wq.json b/advisories/unreviewed/2025/02/GHSA-hm2f-r463-q8wq/GHSA-hm2f-r463-q8wq.json new file mode 100644 index 00000000000..34678f005cc --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-hm2f-r463-q8wq/GHSA-hm2f-r463-q8wq.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hm2f-r463-q8wq", + "modified": "2025-02-10T21:31:38Z", + "published": "2025-02-10T21:31:38Z", + "aliases": [ + "CVE-2024-46432" + ], + "details": "Tenda W18E V16.01.0.8(1625) is vulnerable to Incorrect Access Control. An attacker can send a specially crafted HTTP POST request to the setQuickCfgWifiAndLogin function, which allows unauthorized changes to WiFi configuration settings and administrative credentials.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46432" + }, + { + "type": "WEB", + "url": "https://reddassolutions.com/blog/tenda_w18e_security_research" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-284" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T19:15:38Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-hvw5-4g4q-2h8p/GHSA-hvw5-4g4q-2h8p.json b/advisories/unreviewed/2025/02/GHSA-hvw5-4g4q-2h8p/GHSA-hvw5-4g4q-2h8p.json new file mode 100644 index 00000000000..184f2cb11a0 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-hvw5-4g4q-2h8p/GHSA-hvw5-4g4q-2h8p.json @@ -0,0 +1,33 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hvw5-4g4q-2h8p", + "modified": "2025-02-10T21:31:39Z", + "published": "2025-02-10T21:31:39Z", + "aliases": [ + "CVE-2025-24200" + ], + "details": "An authorization issue was addressed with improved state management. This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-24200" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/122173" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/122174" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T19:15:40Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-jfwj-7vx3-vx6m/GHSA-jfwj-7vx3-vx6m.json b/advisories/unreviewed/2025/02/GHSA-jfwj-7vx3-vx6m/GHSA-jfwj-7vx3-vx6m.json new file mode 100644 index 00000000000..dc85a88f0c8 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-jfwj-7vx3-vx6m/GHSA-jfwj-7vx3-vx6m.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-jfwj-7vx3-vx6m", + "modified": "2025-02-10T21:31:37Z", + "published": "2025-02-10T21:31:37Z", + "aliases": [ + "CVE-2024-13010" + ], + "details": "The WP Foodbakery plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 4.7 due to insufficient input sanitization and output escaping on the 'search_type' parameter. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13010" + }, + { + "type": "WEB", + "url": "https://themeforest.net/item/food-bakery-restaurant-bakery-responsive-wordpress-theme/18970331" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/f267527d-5fb5-4fc2-bb35-bc60854f1a68?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T19:15:37Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-jrm5-c52r-qhm8/GHSA-jrm5-c52r-qhm8.json b/advisories/unreviewed/2025/02/GHSA-jrm5-c52r-qhm8/GHSA-jrm5-c52r-qhm8.json new file mode 100644 index 00000000000..d8e1b537e6e --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-jrm5-c52r-qhm8/GHSA-jrm5-c52r-qhm8.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-jrm5-c52r-qhm8", + "modified": "2025-02-10T21:31:37Z", + "published": "2025-02-10T21:31:37Z", + "aliases": [ + "CVE-2024-13011" + ], + "details": "The WP Foodbakery plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'upload_publisher_profile_image' function in versions up to, and including, 4.7. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-13011" + }, + { + "type": "WEB", + "url": "https://themeforest.net/item/food-bakery-restaurant-bakery-responsive-wordpress-theme/18970331" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/850fc4db-6e02-44c7-836a-02c433a0bae7?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-434" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T19:15:37Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-m45x-q48m-942f/GHSA-m45x-q48m-942f.json b/advisories/unreviewed/2025/02/GHSA-m45x-q48m-942f/GHSA-m45x-q48m-942f.json new file mode 100644 index 00000000000..d27cd29f4d5 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-m45x-q48m-942f/GHSA-m45x-q48m-942f.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-m45x-q48m-942f", + "modified": "2025-02-10T21:31:38Z", + "published": "2025-02-10T21:31:38Z", + "aliases": [ + "CVE-2024-46433" + ], + "details": "A default credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the web management portal using the default rzadmin account with administrative privileges.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46433" + }, + { + "type": "WEB", + "url": "https://reddassolutions.com/blog/tenda_w18e_security_research" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-798" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T19:15:38Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-mrm5-rxf8-grcc/GHSA-mrm5-rxf8-grcc.json b/advisories/unreviewed/2025/02/GHSA-mrm5-rxf8-grcc/GHSA-mrm5-rxf8-grcc.json new file mode 100644 index 00000000000..11282cba90c --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-mrm5-rxf8-grcc/GHSA-mrm5-rxf8-grcc.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mrm5-rxf8-grcc", + "modified": "2025-02-10T21:31:39Z", + "published": "2025-02-10T21:31:39Z", + "aliases": [ + "CVE-2024-8550" + ], + "details": "A Local File Inclusion (LFI) vulnerability exists in the /load-workflow endpoint of modelscope/agentscope version v0.0.4. This vulnerability allows an attacker to read arbitrary files from the server, including sensitive files such as API keys, by manipulating the filename parameter. The issue arises due to improper sanitization of user input passed to the os.path.join function, which can be exploited to access files outside the intended directory.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8550" + }, + { + "type": "WEB", + "url": "https://huntr.com/bounties/7cd8f519-7c75-4936-889d-a17ea1bcb3ea" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-497" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T19:15:39Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-mrrq-63xh-fccm/GHSA-mrrq-63xh-fccm.json b/advisories/unreviewed/2025/02/GHSA-mrrq-63xh-fccm/GHSA-mrrq-63xh-fccm.json new file mode 100644 index 00000000000..14efa6de16b --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-mrrq-63xh-fccm/GHSA-mrrq-63xh-fccm.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mrrq-63xh-fccm", + "modified": "2025-02-10T21:31:39Z", + "published": "2025-02-10T21:31:39Z", + "aliases": [ + "CVE-2025-1002" + ], + "details": "MicroDicom DICOM Viewer version 2024.03\n\nfails to adequately verify the update server's certificate, which could make it possible for attackers in a privileged network position to alter network traffic and carry out a machine-in-the-middle (MITM) attack. This allows the attackers to modify the server's response and deliver a malicious update to the user.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1002" + }, + { + "type": "WEB", + "url": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-037-01" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-295" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T21:15:21Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-q5ph-qwr3-x59h/GHSA-q5ph-qwr3-x59h.json b/advisories/unreviewed/2025/02/GHSA-q5ph-qwr3-x59h/GHSA-q5ph-qwr3-x59h.json new file mode 100644 index 00000000000..f79b79f7a57 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-q5ph-qwr3-x59h/GHSA-q5ph-qwr3-x59h.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-q5ph-qwr3-x59h", + "modified": "2025-02-10T21:31:38Z", + "published": "2025-02-10T21:31:38Z", + "aliases": [ + "CVE-2024-46429" + ], + "details": "A hardcoded credentials vulnerability in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to access the web management portal using a default guest account with administrative privileges.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46429" + }, + { + "type": "WEB", + "url": "https://reddassolutions.com/blog/tenda_w18e_security_research" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-798" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T19:15:38Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-qv5f-57gw-vx3h/GHSA-qv5f-57gw-vx3h.json b/advisories/unreviewed/2025/02/GHSA-qv5f-57gw-vx3h/GHSA-qv5f-57gw-vx3h.json new file mode 100644 index 00000000000..51ce71a8bc2 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-qv5f-57gw-vx3h/GHSA-qv5f-57gw-vx3h.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qv5f-57gw-vx3h", + "modified": "2025-02-10T21:31:37Z", + "published": "2025-02-10T21:31:37Z", + "aliases": [ + "CVE-2024-42512" + ], + "details": "Vulnerability in the OPC UA .NET Standard Stack before 1.5.374.158 allows an unauthorized attacker to bypass application authentication when the deprecated Basic128Rsa15 security policy is enabled.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42512" + }, + { + "type": "WEB", + "url": "https://files.opcfoundation.org/SecurityBulletins/OPC%20Foundation%20Security%20Bulletin%20CVE-2024-42512.pdf" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-639" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T19:15:37Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-qw22-v3jj-h7x3/GHSA-qw22-v3jj-h7x3.json b/advisories/unreviewed/2025/02/GHSA-qw22-v3jj-h7x3/GHSA-qw22-v3jj-h7x3.json new file mode 100644 index 00000000000..0f4f852e9ac --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-qw22-v3jj-h7x3/GHSA-qw22-v3jj-h7x3.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qw22-v3jj-h7x3", + "modified": "2025-02-10T21:31:36Z", + "published": "2025-02-10T21:31:36Z", + "aliases": [ + "CVE-2024-10649" + ], + "details": "wandb/openui latest commit c945bb859979659add5f490a874140ad17c56a5d contains a vulnerability where unauthenticated endpoints allow file uploads and downloads from an AWS S3 bucket. This can lead to multiple security issues including denial of service, stored XSS, and information disclosure. The affected endpoints are '/v1/share/{id:str}' for uploading and '/v1/share/{id:str}' for downloading JSON files. The lack of authentication allows any user to upload and overwrite files, potentially causing the S3 bucket to run out of space, injecting malicious scripts, and accessing sensitive information.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10649" + }, + { + "type": "WEB", + "url": "https://huntr.com/bounties/1025793a-3c19-4148-a26e-80cd84d4822d" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-306" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T19:15:37Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-qw9r-2pfw-hj58/GHSA-qw9r-2pfw-hj58.json b/advisories/unreviewed/2025/02/GHSA-qw9r-2pfw-hj58/GHSA-qw9r-2pfw-hj58.json new file mode 100644 index 00000000000..0705678d371 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-qw9r-2pfw-hj58/GHSA-qw9r-2pfw-hj58.json @@ -0,0 +1,48 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qw9r-2pfw-hj58", + "modified": "2025-02-10T21:31:40Z", + "published": "2025-02-10T21:31:39Z", + "aliases": [ + "CVE-2025-1156" + ], + "details": "A vulnerability has been found in Pix Software Vivaz 6.0.10 and classified as critical. This vulnerability affects unknown code of the file /servlet?act=login. The manipulation of the argument usuario leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1156" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.295060" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.295060" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.493482" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T21:15:22Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-r385-c5fc-x56c/GHSA-r385-c5fc-x56c.json b/advisories/unreviewed/2025/02/GHSA-r385-c5fc-x56c/GHSA-r385-c5fc-x56c.json new file mode 100644 index 00000000000..919386aa5c8 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-r385-c5fc-x56c/GHSA-r385-c5fc-x56c.json @@ -0,0 +1,40 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-r385-c5fc-x56c", + "modified": "2025-02-10T21:31:39Z", + "published": "2025-02-10T21:31:39Z", + "aliases": [ + "CVE-2024-57177" + ], + "details": "A host header injection vulnerability exists in the NPM package of perfood/couch-auth <= 0.21.2. By sending a specially crafted host header in the email change confirmation request, it is possible to trigger a SSTI which can be leveraged to run limited commands or leak server-side information", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-57177" + }, + { + "type": "WEB", + "url": "https://github.com/perfood/couch-auth" + }, + { + "type": "WEB", + "url": "https://github.com/waristea/cve-research/tree/main/CVE-2024-57177" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T20:15:41Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-r8gc-5j82-mxgm/GHSA-r8gc-5j82-mxgm.json b/advisories/unreviewed/2025/02/GHSA-r8gc-5j82-mxgm/GHSA-r8gc-5j82-mxgm.json new file mode 100644 index 00000000000..db4fc4477f6 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-r8gc-5j82-mxgm/GHSA-r8gc-5j82-mxgm.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-r8gc-5j82-mxgm", + "modified": "2025-02-10T21:31:39Z", + "published": "2025-02-10T21:31:39Z", + "aliases": [ + "CVE-2025-1155" + ], + "details": "A vulnerability, which was classified as problematic, was found in Webkul QloApps 1.6.1. This affects an unknown part of the file /stores of the component Your Location Search. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. It is planned to remove this page in the long term.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1155" + }, + { + "type": "WEB", + "url": "https://github.com/mano257200/Qloapp-XSS-Vulnerability/tree/main" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.295059" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.295059" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.492777" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T20:15:42Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-rf6c-m595-cvc8/GHSA-rf6c-m595-cvc8.json b/advisories/unreviewed/2025/02/GHSA-rf6c-m595-cvc8/GHSA-rf6c-m595-cvc8.json new file mode 100644 index 00000000000..7db8a8af855 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-rf6c-m595-cvc8/GHSA-rf6c-m595-cvc8.json @@ -0,0 +1,49 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rf6c-m595-cvc8", + "modified": "2025-02-10T21:31:39Z", + "published": "2025-02-10T21:31:39Z", + "aliases": [ + "CVE-2024-54658" + ], + "details": "The issue was addressed with improved memory handling. This issue is fixed in iOS 17.4 and iPadOS 17.4, Safari 17.4, tvOS 17.4, watchOS 10.4, visionOS 1.1, macOS Sonoma 14.4. Processing web content may lead to a denial-of-service.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54658" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120881" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120882" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120883" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120893" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120894" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120895" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T19:15:39Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-rrqx-xr4w-7wpj/GHSA-rrqx-xr4w-7wpj.json b/advisories/unreviewed/2025/02/GHSA-rrqx-xr4w-7wpj/GHSA-rrqx-xr4w-7wpj.json index 347e2ce0484..34892d4aca2 100644 --- a/advisories/unreviewed/2025/02/GHSA-rrqx-xr4w-7wpj/GHSA-rrqx-xr4w-7wpj.json +++ b/advisories/unreviewed/2025/02/GHSA-rrqx-xr4w-7wpj/GHSA-rrqx-xr4w-7wpj.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-rrqx-xr4w-7wpj", - "modified": "2025-02-07T03:32:02Z", + "modified": "2025-02-10T21:31:36Z", "published": "2025-02-07T03:32:02Z", "aliases": [ "CVE-2024-53586" ], "details": "An issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform directory traversal via a crafted HTTP request. By injecting traversal payloads into the parameter, attackers can manipulate file paths and gain unauthorized access to sensitive files, potentially exposing data outside the intended directory.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + } + ], "affected": [], "references": [ { @@ -20,8 +25,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-22" + ], + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2025-02-06T22:15:38Z" diff --git a/advisories/unreviewed/2025/02/GHSA-v52w-cjm4-xvwf/GHSA-v52w-cjm4-xvwf.json b/advisories/unreviewed/2025/02/GHSA-v52w-cjm4-xvwf/GHSA-v52w-cjm4-xvwf.json new file mode 100644 index 00000000000..e03f77f1f78 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-v52w-cjm4-xvwf/GHSA-v52w-cjm4-xvwf.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v52w-cjm4-xvwf", + "modified": "2025-02-10T21:31:39Z", + "published": "2025-02-10T21:31:39Z", + "aliases": [ + "CVE-2024-46436" + ], + "details": "Hardcoded credentials in Tenda W18E V16.01.0.8(1625) allows unauthenticated remote attackers to gain root access to the device over the telnet service.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46436" + }, + { + "type": "WEB", + "url": "https://reddassolutions.com/blog/tenda_w18e_security_research" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-798" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T19:15:39Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2025/02/GHSA-xqhw-3pq7-q944/GHSA-xqhw-3pq7-q944.json b/advisories/unreviewed/2025/02/GHSA-xqhw-3pq7-q944/GHSA-xqhw-3pq7-q944.json new file mode 100644 index 00000000000..4d49c12dd40 --- /dev/null +++ b/advisories/unreviewed/2025/02/GHSA-xqhw-3pq7-q944/GHSA-xqhw-3pq7-q944.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-xqhw-3pq7-q944", + "modified": "2025-02-10T21:31:38Z", + "published": "2025-02-10T21:31:38Z", + "aliases": [ + "CVE-2024-46434" + ], + "details": "Tenda W18E V16.01.0.8(1625) suffers from authentication bypass in the web management portal allowing an unauthorized remote attacker to gain administrative access by sending a specially crafted HTTP request.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46434" + }, + { + "type": "WEB", + "url": "https://reddassolutions.com/blog/tenda_w18e_security_research" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-287" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2025-02-10T19:15:38Z" + } +} \ No newline at end of file