netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-38j2-mm6q-835r
GHSA-3c83-x7hx-cgfx
GHSA-57jv-pfhx-pfm5
GHSA-89vx-x763-hhwj
GHSA-97rq-m5jx-vcxq
GHSA-cmvv-gwr2-36xm
GHSA-h9cp-5vvc-8wqc
GHSA-m4c2-8cgc-49gg
GHSA-p863-p79f-qm33
GHSA-q7q3-4cwr-583j
GHSA-qcjx-5p37-v6hf
This commit is contained in:
advisory-database[bot]
2024-09-24 21:32:48 +00:00
parent ebc7735d42
commit 5a9ceedcc9
11 changed files with 70 additions and 37 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/09/GHSA-38j2-mm6q-835r/GHSA-38j2-mm6q-835r.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-38j2-mm6q-835r",
"modified": "2024-09-17T00:31:06Z",
"modified": "2024-09-24T21:31:22Z",
"published": "2024-09-17T00:31:06Z",
"aliases": [
"CVE-2024-44184"
],
"details": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, iOS 18 and iPadOS 18, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to access user-sensitive data.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -43,7 +46,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-17T00:15:51Z"
advisories/unreviewed/2024/09/GHSA-3c83-x7hx-cgfx/GHSA-3c83-x7hx-cgfx.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3c83-x7hx-cgfx",
"modified": "2024-09-17T00:31:05Z",
"modified": "2024-09-24T21:31:22Z",
"published": "2024-09-17T00:31:05Z",
"aliases": [
"CVE-2024-44130"
],
"details": "This issue was addressed with improved data protection. This issue is fixed in macOS Sequoia 15. An app with root privileges may be able to access private information.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-17T00:15:50Z"
advisories/unreviewed/2024/09/GHSA-57jv-pfhx-pfm5/GHSA-57jv-pfhx-pfm5.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-57jv-pfhx-pfm5",
"modified": "2024-09-17T00:31:06Z",
"modified": "2024-09-24T21:31:22Z",
"published": "2024-09-17T00:31:06Z",
"aliases": [
"CVE-2024-44189"
],
"details": "The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15. A logic issue existed where a process may be able to capture screen contents without user consent.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-17T00:15:52Z"
advisories/unreviewed/2024/09/GHSA-89vx-x763-hhwj/GHSA-89vx-x763-hhwj.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-89vx-x763-hhwj",
"modified": "2024-09-19T21:33:29Z",
"modified": "2024-09-24T21:31:22Z",
"published": "2024-09-19T21:33:29Z",
"aliases": [
"CVE-2024-25673"
],
"details": "Couchbase Server 7.6.x before 7.6.2, 7.2.x before 7.2.6, and all earlier versions allows HTTP Host header injection.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-19T19:15:24Z"
advisories/unreviewed/2024/09/GHSA-97rq-m5jx-vcxq/GHSA-97rq-m5jx-vcxq.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-97rq-m5jx-vcxq",
"modified": "2024-09-17T00:31:06Z",
"modified": "2024-09-24T21:31:22Z",
"published": "2024-09-17T00:31:06Z",
"aliases": [
"CVE-2024-44180"
],
"details": "The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18. An attacker with physical access may be able to access contacts from the lock screen.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-17T00:15:51Z"
advisories/unreviewed/2024/09/GHSA-cmvv-gwr2-36xm/GHSA-cmvv-gwr2-36xm.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cmvv-gwr2-36xm",
"modified": "2024-09-17T00:31:05Z",
"modified": "2024-09-24T21:31:22Z",
"published": "2024-09-17T00:31:05Z",
"aliases": [
"CVE-2024-44131"
],
"details": "This issue was addressed with improved validation of symlinks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may be able to access sensitive user data.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-59"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-17T00:15:50Z"
advisories/unreviewed/2024/09/GHSA-h9cp-5vvc-8wqc/GHSA-h9cp-5vvc-8wqc.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h9cp-5vvc-8wqc",
"modified": "2024-09-17T00:31:04Z",
"modified": "2024-09-24T21:31:22Z",
"published": "2024-09-17T00:31:04Z",
"aliases": [
"CVE-2024-40866"
],
"details": "The issue was addressed with improved UI. This issue is fixed in Safari 18, macOS Sequoia 15. Visiting a malicious website may lead to address bar spoofing.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-17T00:15:49Z"
advisories/unreviewed/2024/09/GHSA-m4c2-8cgc-49gg/GHSA-m4c2-8cgc-49gg.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m4c2-8cgc-49gg",
"modified": "2024-09-17T00:31:06Z",
"modified": "2024-09-24T21:31:22Z",
"published": "2024-09-17T00:31:06Z",
"aliases": [
"CVE-2024-44183"
],
"details": "A logic error was addressed with improved error handling. This issue is fixed in macOS Ventura 13.7, iOS 17.7 and iPadOS 17.7, visionOS 2, watchOS 11, macOS Sequoia 15, iOS 18 and iPadOS 18, macOS Sonoma 14.7, tvOS 18. An app may be able to cause a denial-of-service.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -55,7 +58,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-17T00:15:51Z"
advisories/unreviewed/2024/09/GHSA-p863-p79f-qm33/GHSA-p863-p79f-qm33.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p863-p79f-qm33",
"modified": "2024-09-17T00:31:06Z",
"modified": "2024-09-24T21:31:22Z",
"published": "2024-09-17T00:31:06Z",
"aliases": [
"CVE-2024-44188"
],
"details": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access protected user data.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-281"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-17T00:15:52Z"
advisories/unreviewed/2024/09/GHSA-q7q3-4cwr-583j/GHSA-q7q3-4cwr-583j.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-q7q3-4cwr-583j",
"modified": "2024-09-17T00:31:04Z",
"modified": "2024-09-24T21:31:22Z",
"published": "2024-09-17T00:31:04Z",
"aliases": [
"CVE-2024-40859"
],
"details": "A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. An app may be able to access user-sensitive data.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-281"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-17T00:15:49Z"
advisories/unreviewed/2024/09/GHSA-qcjx-5p37-v6hf/GHSA-qcjx-5p37-v6hf.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qcjx-5p37-v6hf",
"modified": "2024-09-17T00:31:06Z",
"modified": "2024-09-24T21:31:22Z",
"published": "2024-09-17T00:31:06Z",
"aliases": [
"CVE-2024-44181"
],
"details": "An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to read sensitive location information.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -35,7 +38,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-17T00:15:51Z"