netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-11-18 21:31:56 +00:00
parent fc8c486cf1
commit 6164c53b53
40 changed files with 457 additions and 93 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/03/GHSA-prfm-p99w-7gm2/GHSA-prfm-p99w-7gm2.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-prfm-p99w-7gm2",
"modified": "2024-03-20T15:32:32Z",
"modified": "2024-11-18T21:30:43Z",
"published": "2024-03-20T15:32:32Z",
"aliases": [
"CVE-2024-22083"
],
"details": "An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. A hardcoded backdoor session ID exists that can be used for further access to the device, including reconfiguration tasks.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-20T05:15:45Z"
advisories/unreviewed/2024/04/GHSA-vfqq-mj6j-2rqq/GHSA-vfqq-mj6j-2rqq.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vfqq-mj6j-2rqq",
"modified": "2024-04-07T09:30:29Z",
"modified": "2024-11-18T21:30:43Z",
"published": "2024-04-07T09:30:29Z",
"aliases": [
"CVE-2023-52717"
],
"details": "Permission verification vulnerability in the lock screen module.\nImpact: Successful exploitation of this vulnerability will affect availability.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-276"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-07T09:15:08Z"
advisories/unreviewed/2024/05/GHSA-5pq7-gc86-75cp/GHSA-5pq7-gc86-75cp.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5pq7-gc86-75cp",
"modified": "2024-06-29T06:31:38Z",
"modified": "2024-11-18T21:30:43Z",
"published": "2024-05-05T21:30:31Z",
"aliases": [
"CVE-2024-34509"
],
"details": "dcmdata in DCMTK before 3.6.9 has a segmentation fault via an invalid DIMSE message.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [
@@ -35,7 +38,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-05T20:15:07Z"
advisories/unreviewed/2024/05/GHSA-9hf6-6h22-3j9h/GHSA-9hf6-6h22-3j9h.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9hf6-6h22-3j9h",
"modified": "2024-09-07T00:31:28Z",
"modified": "2024-11-18T21:30:43Z",
"published": "2024-05-14T15:32:54Z",
"aliases": [
"CVE-2024-30802"
@@ -21,6 +21,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30802"
},
{
"type": "WEB",
"url": "https://github.com/WarmBrew/web_vul/blob/main/CVES/CVE-2024-30802.md"
},
{
"type": "WEB",
"url": "https://github.com/WarmBrew/web_vul/blob/main/TTX.md"
advisories/unreviewed/2024/07/GHSA-h747-q33x-7xxp/GHSA-h747-q33x-7xxp.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h747-q33x-7xxp",
"modified": "2024-07-09T18:30:43Z",
"modified": "2024-11-18T21:30:43Z",
"published": "2024-07-05T18:34:18Z",
"aliases": [
"CVE-2024-39178"
@@ -21,6 +21,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-39178"
},
{
"type": "WEB",
"url": "https://github.com/WarmBrew/web_vul/blob/main/CVES/CVE-2024-39178.md"
},
{
"type": "WEB",
"url": "https://github.com/WarmBrew/web_vul/blob/main/Maipu/MyPower%20vc8100/MyPower_vc8100.md"
advisories/unreviewed/2024/08/GHSA-mxxm-vx4c-x8w7/GHSA-mxxm-vx4c-x8w7.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mxxm-vx4c-x8w7",
"modified": "2024-08-15T18:31:51Z",
"modified": "2024-11-18T21:30:43Z",
"published": "2024-08-15T15:30:58Z",
"aliases": [
"CVE-2024-42676"
@@ -21,6 +21,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42676"
},
{
"type": "WEB",
"url": "https://github.com/WarmBrew/web_vul/blob/main/CVES/CVE-2024-42676.md"
},
{
"type": "WEB",
"url": "https://github.com/WarmBrew/web_vul/blob/main/HZ-cve/HZupload.md"
advisories/unreviewed/2024/10/GHSA-hm3j-qgpw-pj98/GHSA-hm3j-qgpw-pj98.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hm3j-qgpw-pj98",
"modified": "2024-10-11T15:30:32Z",
"modified": "2024-11-18T21:30:43Z",
"published": "2024-10-09T15:32:18Z",
"aliases": [
"CVE-2024-9680"
@@ -25,6 +25,10 @@
"type": "WEB",
"url": "https://bugzilla.mozilla.org/show_bug.cgi?id=1923344"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2024-49039"
},
{
"type": "WEB",
"url": "https://www.mozilla.org/security/advisories/mfsa2024-51"
advisories/unreviewed/2024/10/GHSA-q285-mcqv-8j69/GHSA-q285-mcqv-8j69.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-q285-mcqv-8j69",
"modified": "2024-10-17T06:30:32Z",
"modified": "2024-11-18T21:30:43Z",
"published": "2024-10-17T06:30:32Z",
"aliases": [
"CVE-2024-49593"
],
"details": "In Advanced Custom Fields (ACF) before 6.3.9 and Secure Custom Fields before 6.3.6.3 (plugins for WordPress), using the Field Group editor to edit one of the plugin's fields can result in execution of a stored XSS payload. NOTE: if you wish to use the WP Engine alternative update mechanism for the free version of ACF, then you can follow the process shown at the advancedcustomfields.com blog URL within the References section below.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-10-17T04:15:03Z"
advisories/unreviewed/2024/11/GHSA-2g9x-g93g-hv56/GHSA-2g9x-g93g-hv56.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2g9x-g93g-hv56",
"modified": "2024-11-17T06:30:46Z",
"modified": "2024-11-18T21:30:46Z",
"published": "2024-11-17T06:30:46Z",
"aliases": [
"CVE-2024-52872"
],
"details": "In Flagsmith before 2.134.1, the get_document endpoint is not correctly protected by permissions.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-17T04:15:04Z"
advisories/unreviewed/2024/11/GHSA-2w8j-8xc6-4wcx/GHSA-2w8j-8xc6-4wcx.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2w8j-8xc6-4wcx",
"modified": "2024-11-13T21:30:34Z",
"modified": "2024-11-18T21:30:45Z",
"published": "2024-11-13T21:30:34Z",
"aliases": [
"CVE-2024-40443"
],
"details": "SQL Injection vulnerability in Simple Laboratory Management System using PHP and MySQL v.1.0 allows a remote attacker to cause a denial of service via the delete_users function in the Useres.php",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-13T20:15:17Z"
advisories/unreviewed/2024/11/GHSA-2x76-3pw6-mf42/GHSA-2x76-3pw6-mf42.json
+2 -1
View File
@@ -48,7 +48,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-74"
"CWE-74",
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/11/GHSA-3878-g84c-f27c/GHSA-3878-g84c-f27c.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3878-g84c-f27c",
"modified": "2024-11-17T06:30:46Z",
"modified": "2024-11-18T21:30:46Z",
"published": "2024-11-17T06:30:46Z",
"aliases": [
"CVE-2024-52871"
],
"details": "In Flagsmith before 2.134.1, it is possible to bypass the ALLOW_REGISTRATION_WITHOUT_INVITE setting.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-17T04:15:03Z"
advisories/unreviewed/2024/11/GHSA-3mjq-gr7r-h6x3/GHSA-3mjq-gr7r-h6x3.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3mjq-gr7r-h6x3",
"modified": "2024-11-18T21:30:47Z",
"published": "2024-11-18T21:30:47Z",
"aliases": [
"CVE-2024-50848"
],
"details": "An XML External Entity (XXE) vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 to access sensitive information and execute arbitrary commands via supplying a crafted .tmx file.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50848"
},
{
"type": "WEB",
"url": "https://github.com/Wh1teSnak3/CVE-2024-50848"
},
{
"type": "WEB",
"url": "https://www.trados.com/product/worldserver"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-18T21:15:06Z"
}
}
advisories/unreviewed/2024/11/GHSA-425w-xhjg-hfcm/GHSA-425w-xhjg-hfcm.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-425w-xhjg-hfcm",
"modified": "2024-11-18T06:30:36Z",
"modified": "2024-11-18T21:30:46Z",
"published": "2024-11-18T06:30:36Z",
"aliases": [
"CVE-2024-52947"
],
"details": "A cross-site scripting (XSS) vulnerability in LemonLDAP::NG before 2.20.1 allows remote attackers to inject arbitrary web script or HTML via the url parameter of the upgrade session confirmation page (upgradeSession / forceUpgrade) if the \"Upgrade session\" plugin has been enabled by an admin",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-18T06:15:06Z"
advisories/unreviewed/2024/11/GHSA-6pq4-p6m9-6r69/GHSA-6pq4-p6m9-6r69.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6pq4-p6m9-6r69",
"modified": "2024-11-18T21:30:47Z",
"published": "2024-11-18T21:30:47Z",
"aliases": [
"CVE-2024-50849"
],
"details": "Cross-Site Scripting (XSS) in the \"Rules\" functionality in WordServer 11.8.2 allows a remote authenticated attacker to execute arbitrary code.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50849"
},
{
"type": "WEB",
"url": "https://github.com/Wh1teSnak3/CVE-2024-50849"
},
{
"type": "WEB",
"url": "https://www.trados.com/product/worldserver"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-18T21:15:06Z"
}
}
advisories/unreviewed/2024/11/GHSA-74c9-85j4-4phg/GHSA-74c9-85j4-4phg.json
+2 -1
View File
@@ -44,7 +44,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
"CWE-284",
"CWE-434"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/11/GHSA-78mr-78x2-c4q9/GHSA-78mr-78x2-c4q9.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-78mr-78x2-c4q9",
"modified": "2024-11-13T00:30:48Z",
"modified": "2024-11-18T21:30:45Z",
"published": "2024-11-13T00:30:48Z",
"aliases": [
"CVE-2021-27701"
],
"details": "SOCIFI Socifi Guest wifi as SAAS is affected by Cross Site Request Forgery (CSRF) via the Socifi wifi portal. The application does not contain a CSRF token and request validation. An attacker can Add/Modify any random user data by sending a crafted CSRF request.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-352"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-12T23:15:03Z"
advisories/unreviewed/2024/11/GHSA-79xj-76v6-3wgv/GHSA-79xj-76v6-3wgv.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-79xj-76v6-3wgv",
"modified": "2024-11-08T18:30:50Z",
"modified": "2024-11-18T21:30:44Z",
"published": "2024-11-08T06:30:49Z",
"aliases": [
"CVE-2024-50209"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/bnxt_re: Add a check for memory allocation\n\n__alloc_pbl() can return error when memory allocation fails.\nDriver is not checking the status on one of the instances.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -47,7 +50,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-08T06:15:17Z"
advisories/unreviewed/2024/11/GHSA-87q3-4f3j-74q7/GHSA-87q3-4f3j-74q7.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-87q3-4f3j-74q7",
"modified": "2024-11-18T21:30:46Z",
"published": "2024-11-18T21:30:46Z",
"aliases": [
"CVE-2024-48294"
],
"details": "A NULL pointer dereference in the component libPdfCore.dll of Wondershare PDF Reader v1.0.9.2544 allows attackers to cause a Denial of Service (DoS) via a crafted PDF file.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48294"
},
{
"type": "WEB",
"url": "https://github.com/Nero22k/Disclosures/tree/main/Wondershare%20PDF%20Reader"
},
{
"type": "WEB",
"url": "https://pdf.wondershare.com/pdf-reader.html"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-18T19:15:05Z"
}
}
advisories/unreviewed/2024/11/GHSA-8vf7-6fh2-6qw4/GHSA-8vf7-6fh2-6qw4.json
+43
View File
@@ -0,0 +1,43 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8vf7-6fh2-6qw4",
"modified": "2024-11-18T21:30:46Z",
"published": "2024-11-18T21:30:46Z",
"aliases": [
"CVE-2024-50919"
],
"details": "Jpress until v5.1.1 has arbitrary file uploads on the windows platform, and the construction of non-standard file formats such as .jsp. can lead to arbitrary command execution",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50919"
},
{
"type": "WEB",
"url": "https://gist.github.com/microvorld/516552dcef65acc2d1ab0fb969cd34a3"
},
{
"type": "WEB",
"url": "https://github.com/JPressProjects/jpress"
},
{
"type": "WEB",
"url": "https://github.com/microvorld/CVE-2024/blob/main/jpress.md"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-18T20:15:05Z"
}
}

Some files were not shown because too many files have changed in this diff Show More