netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-12-16 21:32:40 +00:00
parent 3045438bcc
commit 5c9053ed5d
29 changed files with 611 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/02/GHSA-3rxx-8f33-7p6p/GHSA-3rxx-8f33-7p6p.json
+4 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3rxx-8f33-7p6p",
"modified": "2024-02-29T20:10:03Z",
"modified": "2024-12-16T21:31:40Z",
"published": "2024-02-29T03:33:14Z",
"aliases": [
"CVE-2023-48653"
@@ -81,7 +81,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-352"
],
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2024-02-29T20:10:02Z",
advisories/github-reviewed/2024/02/GHSA-45m2-8q7f-93wv/GHSA-45m2-8q7f-93wv.json
+4 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-45m2-8q7f-93wv",
"modified": "2024-02-29T20:10:18Z",
"modified": "2024-12-16T21:31:49Z",
"published": "2024-02-29T03:33:14Z",
"aliases": [
"CVE-2023-48651"
@@ -58,7 +58,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-352"
],
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2024-02-29T20:10:18Z",
advisories/github-reviewed/2024/02/GHSA-9xxv-q6pp-96wq/GHSA-9xxv-q6pp-96wq.json
+4 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9xxv-q6pp-96wq",
"modified": "2024-02-29T20:10:31Z",
"modified": "2024-12-16T21:31:54Z",
"published": "2024-02-29T03:33:14Z",
"aliases": [
"CVE-2023-49337"
@@ -62,7 +62,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-79"
],
"severity": "LOW",
"github_reviewed": true,
"github_reviewed_at": "2024-02-29T20:10:31Z",
advisories/unreviewed/2023/12/GHSA-9f9g-fjv5-h5g7/GHSA-9f9g-fjv5-h5g7.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9f9g-fjv5-h5g7",
"modified": "2023-12-21T21:30:32Z",
"modified": "2024-12-16T21:30:54Z",
"published": "2023-12-21T21:30:32Z",
"aliases": [
"CVE-2023-51379"
advisories/unreviewed/2024/02/GHSA-3cmq-9cqr-3jc4/GHSA-3cmq-9cqr-3jc4.json
+2 -1
View File
@@ -30,7 +30,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-122"
"CWE-122",
"CWE-787"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/02/GHSA-7pg4-9277-v46w/GHSA-7pg4-9277-v46w.json
+2 -1
View File
@@ -34,7 +34,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-122"
"CWE-122",
"CWE-787"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/02/GHSA-h32h-58mq-6fgc/GHSA-h32h-58mq-6fgc.json
+2 -1
View File
@@ -30,7 +30,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-20"
"CWE-20",
"CWE-787"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2024/02/GHSA-mwr4-m2r6-rmh7/GHSA-mwr4-m2r6-rmh7.json
+2 -1
View File
@@ -30,7 +30,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-122"
"CWE-122",
"CWE-787"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/03/GHSA-c5x4-rjx4-c2hr/GHSA-c5x4-rjx4-c2hr.json
+2 -1
View File
@@ -26,7 +26,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-125"
"CWE-125",
"CWE-843"
],
"severity": "LOW",
"github_reviewed": false,
advisories/unreviewed/2024/03/GHSA-gwq7-2mvv-mhcq/GHSA-gwq7-2mvv-mhcq.json
+2 -1
View File
@@ -30,7 +30,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-269"
"CWE-269",
"CWE-787"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/05/GHSA-4rp4-77f3-px46/GHSA-4rp4-77f3-px46.json
+2 -1
View File
@@ -30,7 +30,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
"CWE-121",
"CWE-787"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/05/GHSA-6f7w-hx2c-cxpj/GHSA-6f7w-hx2c-cxpj.json
+2 -1
View File
@@ -30,7 +30,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-122"
"CWE-122",
"CWE-787"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/05/GHSA-88jw-43wf-p3wr/GHSA-88jw-43wf-p3wr.json
+13 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-88jw-43wf-p3wr",
"modified": "2024-08-05T18:31:43Z",
"modified": "2024-12-16T21:30:55Z",
"published": "2024-05-31T03:30:31Z",
"aliases": [
"CVE-2024-37018"
@@ -19,6 +19,18 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37018"
},
{
"type": "WEB",
"url": "https://dl.acm.org/doi/10.1145/3658644.3690345"
},
{
"type": "WEB",
"url": "https://github.com/mzc796/marionette_odl"
},
{
"type": "WEB",
"url": "https://github.com/mzc796/marionette_onos"
},
{
"type": "WEB",
"url": "https://jira.opendaylight.org/browse/DISCOVERY-2"
advisories/unreviewed/2024/12/GHSA-3p9v-2c3q-cf4v/GHSA-3p9v-2c3q-cf4v.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3p9v-2c3q-cf4v",
"modified": "2024-12-12T18:30:55Z",
"modified": "2024-12-16T21:30:55Z",
"published": "2024-12-12T18:30:55Z",
"aliases": [
"CVE-2024-55099"
@@ -22,6 +22,10 @@
{
"type": "WEB",
"url": "https://github.com/achchhelalchauhan/phpgurukul/blob/main/SQL%20injection%20ONHP-username.pdf"
},
{
"type": "WEB",
"url": "https://github.com/kuzgunaka/CVE-2024-55099-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability-"
}
],
"database_specific": {
advisories/unreviewed/2024/12/GHSA-4fm6-v3v9-jp3f/GHSA-4fm6-v3v9-jp3f.json
+36
View File
@@ -0,0 +1,36 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4fm6-v3v9-jp3f",
"modified": "2024-12-16T21:30:56Z",
"published": "2024-12-16T21:30:56Z",
"aliases": [
"CVE-2024-12687"
],
"details": "Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes.\n\nThis issue affects PlexTrac: from 1.61.3 before 2.8.1.",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Red"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12687"
},
{
"type": "WEB",
"url": "https://docs.plextrac.com/plextrac-documentation/master/security-advisories#release-2.11.0"
}
],
"database_specific": {
"cwe_ids": [
"CWE-502"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-16T20:15:09Z"
}
}
advisories/unreviewed/2024/12/GHSA-58x6-9vjj-69q7/GHSA-58x6-9vjj-69q7.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-58x6-9vjj-69q7",
"modified": "2024-12-16T21:30:56Z",
"published": "2024-12-16T21:30:56Z",
"aliases": [
"CVE-2024-55104"
],
"details": "Online Nurse Hiring System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the component /admin/add-nurse.php via the gender and emailid parameters.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55104"
},
{
"type": "WEB",
"url": "https://github.com/kuzgunaka/test1/blob/main/CVE-2024-55104-Online-Nurse-Hiring-System-v1.0-SQL-Injection-Vulnerability.md"
},
{
"type": "WEB",
"url": "https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-16T21:15:08Z"
}
}
advisories/unreviewed/2024/12/GHSA-5h2c-fvjp-2wmx/GHSA-5h2c-fvjp-2wmx.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5h2c-fvjp-2wmx",
"modified": "2024-12-16T21:30:56Z",
"published": "2024-12-16T21:30:56Z",
"aliases": [
"CVE-2024-12662"
],
"details": "A vulnerability classified as problematic has been found in IObit Advanced SystemCare Utimate up to 17.0.0. This affects the function 0x8001E040 in the library AscRegistryFilter.sys of the component IOCTL Handler. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12662"
},
{
"type": "WEB",
"url": "https://shareforall.notion.site/IOBit-Advanced-SystemCare-Utimate-AscRegistryFilter-0x8001E040-NPD-DOS-15260437bb1e804e86b4e1de92ff0d09"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.288531"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.288531"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.457163"
}
],
"database_specific": {
"cwe_ids": [
"CWE-404"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-16T19:15:07Z"
}
}
advisories/unreviewed/2024/12/GHSA-65c3-x7x6-jmfm/GHSA-65c3-x7x6-jmfm.json
+41
View File
@@ -0,0 +1,41 @@
{
"schema_version": "1.4.0",
"id": "GHSA-65c3-x7x6-jmfm",
"modified": "2024-12-16T21:30:57Z",
"published": "2024-12-16T21:30:57Z",
"aliases": [
"CVE-2024-55557"
],
"details": "ui/pref/ProxyPrefView.java in weasis-core in Weasis 4.5.1 has a hardcoded key for symmetric encryption of proxy credentials.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55557"
},
{
"type": "WEB",
"url": "https://apps.microsoft.com/detail/9nhtv46lg4nh?hl=en-us&gl=US"
},
{
"type": "WEB",
"url": "https://github.com/nroduit/Weasis/releases/tag/v4.5.1"
},
{
"type": "WEB",
"url": "https://github.com/partywavesec/CVE-2024-55557"
},
{
"type": "WEB",
"url": "https://www.partywave.site/show/research/CVE-2024-55557%20-%20Weasis%204.5.1"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-16T21:15:08Z"
}
}
advisories/unreviewed/2024/12/GHSA-9cg3-fgfh-g8ww/GHSA-9cg3-fgfh-g8ww.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9cg3-fgfh-g8ww",
"modified": "2024-12-16T21:30:56Z",
"published": "2024-12-16T21:30:56Z",
"aliases": [
"CVE-2024-55100"
],
"details": "A stored cross-site scripting (XSS) vulnerability in the component /admin/profile.php of Online Nurse Hiring System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the fullname parameter.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55100"
},
{
"type": "WEB",
"url": "https://github.com/kuzgunaka/test1/blob/main/CVE-2024-55100-Online-Nurse-Hiring-System-v1.0-Stored-Cross-Site-Scripting-Vulnerability.md"
},
{
"type": "WEB",
"url": "https://phpgurukul.com/online-nurse-hiring-system-using-php-and-mysql"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-16T21:15:08Z"
}
}
advisories/unreviewed/2024/12/GHSA-f8pm-c5r8-xr94/GHSA-f8pm-c5r8-xr94.json
+52
View File
@@ -0,0 +1,52 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f8pm-c5r8-xr94",
"modified": "2024-12-16T21:30:56Z",
"published": "2024-12-16T21:30:56Z",
"aliases": [
"CVE-2024-12664"
],
"details": "A vulnerability, which was classified as problematic, has been found in ruifang-tech Rebuild 3.8.5. This issue affects some unknown processing of the component Project Task Comment Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12664"
},
{
"type": "WEB",
"url": "https://github.com/cydtseng/Vulnerability-Research/blob/main/rebuild/StoredXSS-TaskComments.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.288533"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.288533"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.458622"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-16T20:15:09Z"
}
}

Some files were not shown because too many files have changed in this diff Show More