Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2025-01-29 18:32:09 +00:00
parent be07de1a18
commit 5a53f6f40c
103 changed files with 647 additions and 146 deletions
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-vjvx-2q28-pjv2",
-  "modified": "2022-02-16T00:02:00Z",
+  "modified": "2025-01-29T18:31:02Z",
  "published": "2022-02-13T00:00:25Z",
  "aliases": [
    "CVE-2021-4102"
  ],
  "details": "Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-119"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -42,6 +42,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-345",
      "CWE-434"
    ],
    "severity": "CRITICAL",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-qf97-3r3x-x56v",
-  "modified": "2022-04-05T00:00:58Z",
+  "modified": "2025-01-29T18:31:03Z",
  "published": "2022-03-29T00:01:17Z",
  "aliases": [
    "CVE-2022-26258"
@@ -41,7 +41,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-78"
+    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-xh7f-2c8g-37p4",
-  "modified": "2022-03-19T00:01:29Z",
+  "modified": "2025-01-29T18:31:03Z",
  "published": "2022-03-11T00:02:03Z",
  "aliases": [
    "CVE-2022-26143"
@@ -50,6 +50,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-306",
      "CWE-863"
    ],
    "severity": "CRITICAL",
@@ -38,6 +38,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-22",
      "CWE-434"
    ],
    "severity": "HIGH",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-q392-qg7v-xvc4",
-  "modified": "2022-04-27T00:00:28Z",
+  "modified": "2025-01-29T18:31:04Z",
  "published": "2022-04-19T00:00:57Z",
  "aliases": [
    "CVE-2022-28810"
@@ -38,7 +38,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-78"
+      "CWE-78",
+      "CWE-798"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-vxc9-8m8h-9cp6",
-  "modified": "2022-05-07T00:01:15Z",
+  "modified": "2025-01-29T18:31:05Z",
  "published": "2022-04-27T00:00:21Z",
  "aliases": [
    "CVE-2022-24706"
@@ -27,6 +27,10 @@
      "type": "WEB",
      "url": "https://lists.apache.org/thread/w24wo0h8nlctfps65txvk0oc5hdcnv00"
    },
+    {
+      "type": "WEB",
+      "url": "https://medium.com/%40_sadshade/couchdb-erlang-and-cookies-rce-on-default-settings-b1e9173a4bcd"
+    },
    {
      "type": "WEB",
      "url": "https://medium.com/@_sadshade/couchdb-erlang-and-cookies-rce-on-default-settings-b1e9173a4bcd"
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-2697-3jf6-rpjg",
-  "modified": "2024-12-19T21:31:07Z",
+  "modified": "2025-01-29T18:30:52Z",
  "published": "2022-05-17T04:07:23Z",
  "aliases": [
    "CVE-2015-1130"
  ],
  "details": "The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -40,7 +45,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-59"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -30,7 +30,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-494"
+      "CWE-494",
+      "CWE-862"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-58ff-49fr-3jwf",
-  "modified": "2022-06-16T00:00:30Z",
+  "modified": "2025-01-29T18:30:57Z",
  "published": "2022-05-24T17:31:50Z",
  "aliases": [
    "CVE-2020-3992"
@@ -33,7 +33,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-787"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-76v6-7m6g-p6v4",
-  "modified": "2022-05-24T17:35:43Z",
+  "modified": "2025-01-29T18:30:57Z",
  "published": "2022-05-24T17:35:43Z",
  "aliases": [
    "CVE-2020-27950"
  ],
  "details": "A memory initialization issue was addressed. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to disclose kernel memory.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-7c5f-gfr7-vw4v",
-  "modified": "2022-05-24T17:04:07Z",
+  "modified": "2025-01-29T18:30:53Z",
  "published": "2022-05-24T17:04:07Z",
  "aliases": [
    "CVE-2019-7286"
  ],
  "details": "A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. An application may be able to gain elevated privileges.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -32,7 +37,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-787"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -30,7 +30,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-77"
+      "CWE-77",
+      "CWE-78"
    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
@@ -30,6 +30,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-22",
      "CWE-434"
    ],
    "severity": "CRITICAL",
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-c857-frv5-v87x",
-  "modified": "2022-05-24T17:04:07Z",
+  "modified": "2025-01-29T18:30:54Z",
  "published": "2022-05-24T17:04:07Z",
  "aliases": [
    "CVE-2019-7287"
  ],
  "details": "A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.1.4. An application may be able to execute arbitrary code with kernel privileges.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -20,7 +25,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-787"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -42,7 +42,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-125"
+      "CWE-125",
+      "CWE-787"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-f3wv-rx3x-v6fh",
-  "modified": "2022-05-24T17:35:44Z",
+  "modified": "2025-01-29T18:30:57Z",
  "published": "2022-05-24T17:35:44Z",
  "aliases": [
    "CVE-2020-27932"
  ],
  "details": "A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7 Supplemental Update, macOS Catalina 10.15.7 Update. A malicious application may be able to execute arbitrary code with kernel privileges.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-fg7h-q67h-82rg",
-  "modified": "2022-05-24T17:04:09Z",
+  "modified": "2025-01-29T18:30:54Z",
  "published": "2022-05-24T17:04:09Z",
  "aliases": [
    "CVE-2019-8506"
  ],
  "details": "A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
--- a/Show More
+++ b/Show More