netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-11-20 15:32:03 +00:00
parent 8fc5c10915
commit 5781cd00cb
37 changed files with 545 additions and 28 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/05/GHSA-6887-rccf-7c23/GHSA-6887-rccf-7c23.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6887-rccf-7c23",
"modified": "2022-05-24T17:17:16Z",
"modified": "2024-11-20T15:30:48Z",
"published": "2022-05-24T17:17:16Z",
"aliases": [
"CVE-2020-11727"
],
"details": "A cross-site scripting (XSS) vulnerability in the AlgolPlus Advanced Order Export For WooCommerce plugin 3.1.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the view/settings-form.php woe_post_type parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -37,7 +40,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2022/05/GHSA-6qrc-68pp-rj6x/GHSA-6qrc-68pp-rj6x.json
+5 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6qrc-68pp-rj6x",
"modified": "2022-05-24T17:46:05Z",
"modified": "2024-11-20T15:30:48Z",
"published": "2022-05-24T17:46:05Z",
"aliases": [
"CVE-2021-27349"
],
"details": "Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
advisories/unreviewed/2022/05/GHSA-fgvj-4m6x-j67f/GHSA-fgvj-4m6x-j67f.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fgvj-4m6x-j67f",
"modified": "2022-05-25T00:00:24Z",
"modified": "2024-11-20T15:30:48Z",
"published": "2022-05-24T17:17:44Z",
"aliases": [
"CVE-2020-8156"
@@ -21,6 +21,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2020-8156"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KC6HLX5SG4PZO6Y54D2LFJ4ATG76BKOP"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KC6HLX5SG4PZO6Y54D2LFJ4ATG76BKOP"
advisories/unreviewed/2022/05/GHSA-p8xr-vj9g-9j25/GHSA-p8xr-vj9g-9j25.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p8xr-vj9g-9j25",
"modified": "2022-05-13T01:18:56Z",
"modified": "2024-11-20T15:30:48Z",
"published": "2022-05-13T01:18:56Z",
"aliases": [
"CVE-2018-11525"
advisories/unreviewed/2022/05/GHSA-w2gv-7447-6h8c/GHSA-w2gv-7447-6h8c.json
+5 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w2gv-7447-6h8c",
"modified": "2022-05-24T17:46:31Z",
"modified": "2024-11-20T15:30:48Z",
"published": "2022-05-24T17:46:31Z",
"aliases": [
"CVE-2021-24169"
],
"details": "This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab parameter in the Admin Panel is vulnerable to reflected XSS.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
advisories/unreviewed/2022/09/GHSA-3h2r-mh7w-gr5w/GHSA-3h2r-mh7w-gr5w.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3h2r-mh7w-gr5w",
"modified": "2022-09-11T00:00:29Z",
"modified": "2024-11-20T15:30:48Z",
"published": "2022-09-10T00:00:27Z",
"aliases": [
"CVE-2022-35275"
advisories/unreviewed/2022/11/GHSA-662h-7f84-69rv/GHSA-662h-7f84-69rv.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-662h-7f84-69rv",
"modified": "2022-11-09T19:02:24Z",
"modified": "2024-11-20T15:30:49Z",
"published": "2022-11-09T12:00:24Z",
"aliases": [
"CVE-2022-40128"
advisories/unreviewed/2024/09/GHSA-hm28-rwr4-j8f5/GHSA-hm28-rwr4-j8f5.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hm28-rwr4-j8f5",
"modified": "2024-09-27T15:30:33Z",
"modified": "2024-11-20T15:30:49Z",
"published": "2024-09-27T15:30:33Z",
"aliases": [
"CVE-2024-46823"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nkunit/overflow: Fix UB in overflow_allocation_test\n\nThe 'device_name' array doesn't exist out of the\n'overflow_allocation_test' function scope. However, it is being used as\na driver name when calling 'kunit_driver_create' from\n'kunit_device_register'. It produces the kernel panic with KASAN\nenabled.\n\nSince this variable is used in one place only, remove it and pass the\ndevice name into kunit_device_register directly as an ascii string.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-27T13:15:14Z"
advisories/unreviewed/2024/11/GHSA-3gr8-4rjx-crp8/GHSA-3gr8-4rjx-crp8.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3gr8-4rjx-crp8",
"modified": "2024-11-20T15:30:52Z",
"published": "2024-11-20T15:30:52Z",
"aliases": [
"CVE-2024-51208"
],
"details": "File Upload vulnerability in change-image.php in Anuj Kumar's Boat Booking System version 1.0 allows local attackers to upload a malicious PHP script via the Image Upload Mechanism parameter.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51208"
},
{
"type": "WEB",
"url": "https://gist.github.com/Esquirez/985db6c65219a3e5a6521e291524aaa0"
},
{
"type": "WEB",
"url": "https://phpgurukul.com/boat-booking-system-using-php-and-mysql"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-20T15:15:08Z"
}
}
advisories/unreviewed/2024/11/GHSA-42jm-px5r-4qxq/GHSA-42jm-px5r-4qxq.json
+1
View File
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-22",
"CWE-32"
],
"severity": "HIGH",
advisories/unreviewed/2024/11/GHSA-47rc-w5x7-93j8/GHSA-47rc-w5x7-93j8.json
+2 -1
View File
@@ -32,7 +32,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
"CWE-121",
"CWE-787"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/11/GHSA-48rr-fh2m-hhjh/GHSA-48rr-fh2m-hhjh.json
+1
View File
@@ -32,6 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-22",
"CWE-23"
],
"severity": "HIGH",
advisories/unreviewed/2024/11/GHSA-4pm3-3999-hj74/GHSA-4pm3-3999-hj74.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4pm3-3999-hj74",
"modified": "2024-11-20T15:30:52Z",
"published": "2024-11-20T15:30:52Z",
"aliases": [
"CVE-2024-9478"
],
"details": "Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.This issue affects upKeeper Instant Privilege Access: before 1.2.",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9478"
},
{
"type": "WEB",
"url": "https://support.upkeeper.se/hc/en-us/articles/17007638130716-CVE-2024-9478-Improper-Privilege-Management-Process"
}
],
"database_specific": {
"cwe_ids": [
"CWE-269"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-20T14:15:18Z"
}
}
advisories/unreviewed/2024/11/GHSA-535g-mv5c-jrh8/GHSA-535g-mv5c-jrh8.json
+50
View File
@@ -0,0 +1,50 @@
{
"schema_version": "1.4.0",
"id": "GHSA-535g-mv5c-jrh8",
"modified": "2024-11-20T15:30:52Z",
"published": "2024-11-20T15:30:52Z",
"aliases": [
"CVE-2024-11154"
],
"details": "The PublishPress Revisions: Duplicate Posts, Submit, Approve and Schedule Content Changes plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.15 via the 'actAjaxRevisionDiffs' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive data including revisions of posts and pages.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11154"
},
{
"type": "WEB",
"url": "https://github.com/publishpress/PublishPress-Revisions/blob/master/admin/history_rvy.php#L322"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/revisionary/trunk/admin/history_rvy.php#L322"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/changeset/3192492"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/c785b7a0-5091-4d89-87d3-cd7d9984553e?source=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-20T14:15:17Z"
}
}
advisories/unreviewed/2024/11/GHSA-5436-rp7w-v3hq/GHSA-5436-rp7w-v3hq.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5436-rp7w-v3hq",
"modified": "2024-11-20T15:30:52Z",
"published": "2024-11-20T15:30:52Z",
"aliases": [
"CVE-2024-52470"
],
"details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Brainvireinfo Dynamic URL SEO allows Reflected XSS.This issue affects Dynamic URL SEO: from n/a through 1.0.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52470"
},
{
"type": "WEB",
"url": "https://patchstack.com/database/vulnerability/dynamic-url-seo/wordpress-dynamic-url-seo-plugin-1-0-cross-site-scripting-xss-vulnerability?_s_id=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-20T15:15:10Z"
}
}
advisories/unreviewed/2024/11/GHSA-8ff3-4xrr-3mhr/GHSA-8ff3-4xrr-3mhr.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8ff3-4xrr-3mhr",
"modified": "2024-11-20T15:30:53Z",
"published": "2024-11-20T15:30:53Z",
"aliases": [
"CVE-2024-52473"
],
"details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Sandeep Verma HTML5 Lyrics Karaoke Player allows Reflected XSS.This issue affects HTML5 Lyrics Karaoke Player: from n/a through 2.4.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52473"
},
{
"type": "WEB",
"url": "https://patchstack.com/database/vulnerability/html5-lyrics-karaoke-player/wordpress-html5-lyrics-karaoke-player-plugin-2-4-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-20T15:15:11Z"
}
}
advisories/unreviewed/2024/11/GHSA-94rm-rq6h-h95x/GHSA-94rm-rq6h-h95x.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-94rm-rq6h-h95x",
"modified": "2024-11-20T15:30:52Z",
"published": "2024-11-20T15:30:52Z",
"aliases": [
"CVE-2024-9479"
],
"details": "Improper Privilege Management vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Privilege Escalation.This issue affects upKeeper Instant Privilege Access: before 1.2.",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9479"
},
{
"type": "WEB",
"url": "https://support.upkeeper.se/hc/en-us/articles/17007729905436-CVE-2024-9479-Improper-Privilege-Management-Subprocess"
}
],
"database_specific": {
"cwe_ids": [
"CWE-269"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-20T14:15:18Z"
}
}
advisories/unreviewed/2024/11/GHSA-9rq6-3xh4-jjch/GHSA-9rq6-3xh4-jjch.json
+2 -1
View File
@@ -48,7 +48,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-74"
"CWE-74",
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/11/GHSA-cgr4-9xhv-p6x6/GHSA-cgr4-9xhv-p6x6.json
+2 -1
View File
@@ -48,7 +48,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-74"
"CWE-74",
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/11/GHSA-crmh-vcgf-prwv/GHSA-crmh-vcgf-prwv.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-crmh-vcgf-prwv",
"modified": "2024-11-18T18:30:58Z",
"modified": "2024-11-20T15:30:51Z",
"published": "2024-11-18T18:30:58Z",
"aliases": [
"CVE-2024-52425"

Some files were not shown because too many files have changed in this diff Show More