netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-09-18 21:32:07 +00:00
parent 430a0c6937
commit 616017f3f4
54 changed files with 735 additions and 89 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/08/GHSA-9m5j-4xx9-44j9/GHSA-9m5j-4xx9-44j9.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9m5j-4xx9-44j9",
"modified": "2024-08-07T19:45:30Z",
"modified": "2024-09-18T21:30:44Z",
"published": "2024-08-07T18:30:44Z",
"aliases": [
"CVE-2024-7143"
@@ -44,6 +44,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7143"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:6765"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2024-7143"
advisories/unreviewed/2022/03/GHSA-2hjg-246p-2f5p/GHSA-2hjg-246p-2f5p.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2hjg-246p-2f5p",
"modified": "2022-03-17T00:01:29Z",
"modified": "2024-09-18T21:30:37Z",
"published": "2022-03-11T00:02:18Z",
"aliases": [
"CVE-2022-22834"
@@ -32,6 +32,10 @@
{
"type": "WEB",
"url": "https://overit.us/products/geocall"
},
{
"type": "WEB",
"url": "https://www.overit.ai/product/nextgen-fsm"
}
],
"database_specific": {
advisories/unreviewed/2022/03/GHSA-mhhf-pcpv-xqqq/GHSA-mhhf-pcpv-xqqq.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mhhf-pcpv-xqqq",
"modified": "2022-03-17T00:01:28Z",
"modified": "2024-09-18T21:30:37Z",
"published": "2022-03-11T00:02:17Z",
"aliases": [
"CVE-2022-22835"
@@ -32,6 +32,10 @@
{
"type": "WEB",
"url": "https://overit.us/products/geocall"
},
{
"type": "WEB",
"url": "https://www.overit.ai/product/nextgen-fsm"
}
],
"database_specific": {
advisories/unreviewed/2022/05/GHSA-5m8p-88m5-5qqp/GHSA-5m8p-88m5-5qqp.json
+5 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5m8p-88m5-5qqp",
"modified": "2022-05-14T01:52:25Z",
"modified": "2024-09-18T21:30:36Z",
"published": "2022-05-14T01:52:25Z",
"aliases": [
"CVE-2013-0648"
],
"details": "Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
advisories/unreviewed/2022/05/GHSA-955p-xvq6-xggj/GHSA-955p-xvq6-xggj.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-955p-xvq6-xggj",
"modified": "2024-09-18T03:31:06Z",
"modified": "2024-09-18T21:30:37Z",
"published": "2022-05-14T01:49:29Z",
"aliases": [
"CVE-2014-0502"
],
"details": "Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -53,7 +56,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-415"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2022/05/GHSA-qx9j-q623-p5fh/GHSA-qx9j-q623-p5fh.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qx9j-q623-p5fh",
"modified": "2022-05-14T01:49:30Z",
"modified": "2024-09-18T21:30:37Z",
"published": "2022-05-14T01:49:30Z",
"aliases": [
"CVE-2014-0497"
],
"details": "Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -85,7 +88,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-191"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2022/05/GHSA-rv96-qgg3-4gv7/GHSA-rv96-qgg3-4gv7.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rv96-qgg3-4gv7",
"modified": "2022-05-14T01:52:32Z",
"modified": "2024-09-18T21:30:36Z",
"published": "2022-05-14T01:52:32Z",
"aliases": [
"CVE-2013-0643"
],
"details": "The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -41,7 +44,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-269"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2023/06/GHSA-9225-wwj6-c3w3/GHSA-9225-wwj6-c3w3.json
+1
View File
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-200",
"CWE-326"
],
"severity": "HIGH",
advisories/unreviewed/2023/10/GHSA-6wc2-f8mc-76rv/GHSA-6wc2-f8mc-76rv.json
+1 -1
View File
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-762"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2023/10/GHSA-f8h4-8cx8-j35m/GHSA-f8h4-8cx8-j35m.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f8h4-8cx8-j35m",
"modified": "2024-04-04T08:36:29Z",
"modified": "2024-09-18T21:30:38Z",
"published": "2023-10-13T00:30:18Z",
"aliases": [
"CVE-2023-36843"
advisories/unreviewed/2024/08/GHSA-rqmr-f8r9-69wq/GHSA-rqmr-f8r9-69wq.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rqmr-f8r9-69wq",
"modified": "2024-08-05T15:30:52Z",
"modified": "2024-09-18T21:30:44Z",
"published": "2024-08-05T15:30:52Z",
"aliases": [
"CVE-2024-7383"
@@ -21,6 +21,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7383"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:6757"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2024-7383"
advisories/unreviewed/2024/09/GHSA-25f3-qj7w-25fw/GHSA-25f3-qj7w-25fw.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-25f3-qj7w-25fw",
"modified": "2024-09-18T21:30:48Z",
"published": "2024-09-18T21:30:48Z",
"aliases": [
"CVE-2024-46374"
],
"details": "Best House Rental Management System 1.0 contains a SQL injection vulnerability in the delete_category() function of the file rental/admin_class.php.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46374"
},
{
"type": "WEB",
"url": "https://github.com/gaorenyusi/gaorenyusi/blob/main/CVE-2024-46374.md"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T21:15:13Z"
}
}
advisories/unreviewed/2024/09/GHSA-2wh6-wp88-phq8/GHSA-2wh6-wp88-phq8.json
+43
View File
@@ -0,0 +1,43 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2wh6-wp88-phq8",
"modified": "2024-09-18T21:30:48Z",
"published": "2024-09-18T21:30:48Z",
"aliases": [
"CVE-2024-43024"
],
"details": "Multiple stored cross-site scripting (XSS) vulnerabilities in RWS MultiTrans v7.0.23324.2 and earlier allow attackers to execute arbitrary web scripts or HTML via a crafted payload.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43024"
},
{
"type": "WEB",
"url": "https://community.rws.com/product-groups/translation_management/multitrans/w/releases/5112/multitrans-7-releases"
},
{
"type": "WEB",
"url": "https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2024-43024"
},
{
"type": "WEB",
"url": "https://github.com/tomdantuma/CVE/tree/main/2024-43024"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T20:15:03Z"
}
}
advisories/unreviewed/2024/09/GHSA-3jrq-ghjr-jwf2/GHSA-3jrq-ghjr-jwf2.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3jrq-ghjr-jwf2",
"modified": "2024-09-18T21:30:48Z",
"published": "2024-09-18T21:30:48Z",
"aliases": [
"CVE-2024-40568"
],
"details": "Buffer Overflow vulnerability in btstack mesh commit before v.864e2f2b6b7878c8fab3cf5ee84ae566e3380c58 allows a remote attacker to execute arbitrary code via the pb_adv_handle_tranaction_cont function in the src/mesh/pb_adv.c component",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40568"
},
{
"type": "WEB",
"url": "https://github.com/xiaobye-ctf/My-CVE/tree/main/BTstack/CVE-2024-40568"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T21:15:13Z"
}
}
advisories/unreviewed/2024/09/GHSA-3qv6-5f5f-f89j/GHSA-3qv6-5f5f-f89j.json
+1
View File
@@ -36,6 +36,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-203",
"CWE-204"
],
"severity": "MODERATE",
advisories/unreviewed/2024/09/GHSA-3v74-rm67-6782/GHSA-3v74-rm67-6782.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3v74-rm67-6782",
"modified": "2024-09-18T15:30:52Z",
"modified": "2024-09-18T21:30:48Z",
"published": "2024-09-18T15:30:52Z",
"aliases": [
"CVE-2023-28451"
],
"details": "An issue was discovered in Technitium 11.0.2. There is a vulnerability (called BadDNS) in DNS resolving software, which triggers a resolver to ignore valid responses, thus causing DoS (denial of service) for normal resolution. The effects of an exploit would be widespread and highly impactful, because the attacker could just forge a response targeting the source port of a vulnerable resolver without the need to guess the correct TXID.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-400"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:13Z"
advisories/unreviewed/2024/09/GHSA-5m5p-hvxj-grxr/GHSA-5m5p-hvxj-grxr.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5m5p-hvxj-grxr",
"modified": "2024-09-17T00:31:06Z",
"modified": "2024-09-18T21:30:48Z",
"published": "2024-09-17T00:31:06Z",
"aliases": [
"CVE-2024-44202"
],
"details": "An authentication issue was addressed with improved state management. This issue is fixed in iOS 18 and iPadOS 18. Private Browsing tabs may be accessed without authentication.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-287"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-17T00:15:52Z"
advisories/unreviewed/2024/09/GHSA-6fv7-9g8h-f3wm/GHSA-6fv7-9g8h-f3wm.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6fv7-9g8h-f3wm",
"modified": "2024-09-18T15:30:52Z",
"modified": "2024-09-18T21:30:48Z",
"published": "2024-09-18T15:30:52Z",
"aliases": [
"CVE-2024-44542"
],
"details": "SQL Injection vulnerability in todesk v.1.1 allows a remote attacker to execute arbitrary code via the /todesk.com/news.html parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:16Z"
advisories/unreviewed/2024/09/GHSA-6mgp-6qqc-4g38/GHSA-6mgp-6qqc-4g38.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6mgp-6qqc-4g38",
"modified": "2024-09-18T15:30:52Z",
"modified": "2024-09-18T21:30:48Z",
"published": "2024-09-18T15:30:52Z",
"aliases": [
"CVE-2023-28455"
],
"details": "An issue was discovered in Technitium through 11.0.2. The forwarding mode enables attackers to create a query loop using Technitium resolvers, launching amplification attacks and causing potential DoS.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-406"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-18T15:15:14Z"
advisories/unreviewed/2024/09/GHSA-6mh6-642h-83x7/GHSA-6mh6-642h-83x7.json
+9 -1
View File
@@ -1,13 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6mh6-642h-83x7",
"modified": "2024-09-11T12:30:52Z",
"modified": "2024-09-18T21:30:44Z",
"published": "2024-09-11T12:30:52Z",
"aliases": [
"CVE-2024-7609"
],
"details": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Vidco Software VOC TESTER allows Path Traversal.This issue affects VOC TESTER: before 12.34.8.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:L/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
@@ -21,6 +25,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7609"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-6mh6-642h-83x7"
},
{
"type": "WEB",
"url": "https://https://www.usom.gov.tr/bildirim/tr-24-1447"

Some files were not shown because too many files have changed in this diff Show More