mirror of
https://github.com/netbirdio/advisory-database.git
synced 2026-05-22 18:04:22 -07:00
Publish Advisories
GHSA-2x74-jrhg-mr4p GHSA-3253-93gv-fv6c GHSA-45pw-h44c-jmqc GHSA-7246-m99m-q4pq GHSA-7vjq-m92p-42wp GHSA-84m5-wq3j-47c4 GHSA-868h-653q-w2q2 GHSA-8cxx-7fx3-j6xj GHSA-9cxj-f8g7-43v7 GHSA-9rg4-33x9-wfrh GHSA-9w73-mrh2-35pj GHSA-ch6f-2w93-3p64 GHSA-g4qh-pgmq-g946 GHSA-j3jw-c3vp-jg36 GHSA-pc38-vvqw-jq9r GHSA-pc49-g522-pmh5 GHSA-q2rp-9vp9-fg3q GHSA-q565-26vc-vpx8 GHSA-qp42-5pj7-4ccm
This commit is contained in:
advisory-database[bot]
@@ -0,0 +1,35 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-2x74-jrhg-mr4p",
|
||||
"modified": "2023-12-25T09:30:21Z",
|
||||
"published": "2023-12-25T09:30:21Z",
|
||||
"aliases": [
|
||||
"CVE-2023-49954"
|
||||
],
|
||||
"details": "The CRM Integration in 3CX before 18.0.9.23 and 20 before 20.0.0.1494 allows SQL Injection via a first name, search string, or email address.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49954"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://cve-2023-49954.github.io/"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2023-12-25T08:15:07Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,43 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-3253-93gv-fv6c",
|
||||
"modified": "2023-12-25T09:30:21Z",
|
||||
"published": "2023-12-25T09:30:21Z",
|
||||
"aliases": [
|
||||
"CVE-2023-36485"
|
||||
],
|
||||
"details": "The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user via a malicious BPMN2 workflow definition file.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36485"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/ILIAS-eLearning/ILIAS/pull/5987"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/ILIAS-eLearning/ILIAS/pull/5988"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://docu.ilias.de/ilias.php?baseClass=ilrepositorygui&cmdNode=xd:kx:54&cmdClass=ilBlogPostingGUI&cmd=previewFullscreen&ref_id=3439&prvm=fsc&bmn=2023-12&blpg=786"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2023-12-25T08:15:07Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,43 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-45pw-h44c-jmqc",
|
||||
"modified": "2023-12-25T09:30:20Z",
|
||||
"published": "2023-12-25T09:30:20Z",
|
||||
"aliases": [
|
||||
"CVE-2023-37188"
|
||||
],
|
||||
"details": "C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_rate_decompress at zfp/blosc2-zfp.c.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37188"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/Blosc/c-blosc2/issues/521"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/Blosc/c-blosc2/commit/425e8a9a59d49378d57e2116b6c9b0190a5986f5"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/Blosc/c-blosc2/compare/v2.9.2...v2.9.3"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2023-12-25T07:15:09Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,43 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-7246-m99m-q4pq",
|
||||
"modified": "2023-12-25T09:30:21Z",
|
||||
"published": "2023-12-25T09:30:21Z",
|
||||
"aliases": [
|
||||
"CVE-2023-38321"
|
||||
],
|
||||
"details": "OpenNDS, as used in Sierra Wireless ALEOS before 4.17.0.12 and other products, allows remote attackers to cause a denial of service (NULL pointer dereference, daemon crash, and Captive Portal outage) via a GET request to /opennds_auth/ that lacks a custom query string parameter and client-token.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38321"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/openNDS/openNDS/blob/master/ChangeLog"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://openwrt.org/docs/guide-user/services/captive-portal/opennds"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://source.sierrawireless.com/-/media/support_downloads/security-bulletins/pdf/swi-psa-2023-006-r3.ashx"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2023-12-25T09:15:07Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,43 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-7vjq-m92p-42wp",
|
||||
"modified": "2023-12-25T09:30:20Z",
|
||||
"published": "2023-12-25T09:30:20Z",
|
||||
"aliases": [
|
||||
"CVE-2023-37186"
|
||||
],
|
||||
"details": "C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to memset.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37186"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/Blosc/c-blosc2/issues/522"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/Blosc/c-blosc2/commit/d55bfcd6804699e1435dc3e233fd76c8a5d3f9e3"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/Blosc/c-blosc2/compare/v2.9.2...v2.9.3"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2023-12-25T07:15:08Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,39 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-84m5-wq3j-47c4",
|
||||
"modified": "2023-12-25T09:30:21Z",
|
||||
"published": "2023-12-25T09:30:21Z",
|
||||
"aliases": [
|
||||
"CVE-2022-34267"
|
||||
],
|
||||
"details": "An issue was discovered in RWS WorldServer before 11.7.3. Adding a token parameter with the value of 02 bypasses all authentication requirements. Arbitrary Java code can be uploaded and executed via a .jar archive to the ws-api/v2/customizations/api endpoint.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-34267"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.rws.com/localization/products/trados-enterprise/worldserver/"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.triskelelabs.com/vulnerabilities-in-rws-worldserver"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2023-12-25T08:15:07Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,35 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-868h-653q-w2q2",
|
||||
"modified": "2023-12-25T09:30:19Z",
|
||||
"published": "2023-12-25T09:30:19Z",
|
||||
"aliases": [
|
||||
"CVE-2023-28872"
|
||||
],
|
||||
"details": "Support Assistant in NCP Secure Enterprise Client before 13.10 allows attackers to execute DLL files with SYSTEM privileges by creating a symbolic link from a %LOCALAPPDATA%\\Temp\\NcpSupport* location.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-28872"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://herolab.usd.de/en/security-advisories/usd-2022-0006/"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2023-12-25T07:15:07Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,43 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-8cxx-7fx3-j6xj",
|
||||
"modified": "2023-12-25T09:30:19Z",
|
||||
"published": "2023-12-25T09:30:19Z",
|
||||
"aliases": [
|
||||
"CVE-2023-37185"
|
||||
],
|
||||
"details": "C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_prec_decompress at zfp/blosc2-zfp.c.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37185"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/Blosc/c-blosc2/issues/519"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/Blosc/c-blosc2/commit/425e8a9a59d49378d57e2116b6c9b0190a5986f5"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/Blosc/c-blosc2/compare/v2.9.2...v2.9.3"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2023-12-25T07:15:08Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,35 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-9cxj-f8g7-43v7",
|
||||
"modified": "2023-12-25T09:30:21Z",
|
||||
"published": "2023-12-25T09:30:21Z",
|
||||
"aliases": [
|
||||
"CVE-2023-31224"
|
||||
],
|
||||
"details": "There is broken access control during authentication in Jamf Pro Server before 10.46.1.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-31224"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://learn.jamf.com/bundle/jamf-pro-release-notes-10.47.0/page/Resolved_Issues.html"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2023-12-25T08:15:07Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,39 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-9rg4-33x9-wfrh",
|
||||
"modified": "2023-12-25T09:30:21Z",
|
||||
"published": "2023-12-25T09:30:21Z",
|
||||
"aliases": [
|
||||
"CVE-2023-49944"
|
||||
],
|
||||
"details": "The Challenge Response feature of BeyondTrust Privilege Management for Windows (PMfW) before 2023-07-14 allows local administrators to bypass this feature by decrypting the shared key, or by locating the decrypted shared key in process memory. The threat is mitigated by the Agent Protection feature.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49944"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.beyondtrust.com/security"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.beyondtrust.com/trust-center/security-advisories/bt23-08"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2023-12-25T08:15:07Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,43 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-9w73-mrh2-35pj",
|
||||
"modified": "2023-12-25T09:30:21Z",
|
||||
"published": "2023-12-25T09:30:21Z",
|
||||
"aliases": [
|
||||
"CVE-2023-36486"
|
||||
],
|
||||
"details": "The workflow-engine of ILIAS before 7.23 and 8 before 8.3 allows remote authenticated users to run arbitrary system commands on the application server as the application user by uploading a workflow definition file with a malicious filename.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36486"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/ILIAS-eLearning/ILIAS/pull/5987"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/ILIAS-eLearning/ILIAS/pull/5988"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://docu.ilias.de/ilias.php?baseClass=ilrepositorygui&cmdNode=xd:kx:54&cmdClass=ilBlogPostingGUI&cmd=previewFullscreen&ref_id=3439&prvm=fsc&bmn=2023-12&blpg=786"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2023-12-25T08:15:07Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,39 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-ch6f-2w93-3p64",
|
||||
"modified": "2023-12-25T09:30:20Z",
|
||||
"published": "2023-12-25T09:30:20Z",
|
||||
"aliases": [
|
||||
"CVE-2023-47091"
|
||||
],
|
||||
"details": "An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 through 4.6.9 before 4.6.10, and SNS 4.7.0 through 4.7.1 before 4.7.2. An attacker can overflow the cookie threshold, making an IPsec connection impossible.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47091"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://advisories.stormshield.eu"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://advisories.stormshield.eu/2023-024/"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2023-12-25T07:15:09Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,43 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-g4qh-pgmq-g946",
|
||||
"modified": "2023-12-25T09:30:20Z",
|
||||
"published": "2023-12-25T09:30:20Z",
|
||||
"aliases": [
|
||||
"CVE-2023-37187"
|
||||
],
|
||||
"details": "C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfp_acc_decompress. function.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37187"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/Blosc/c-blosc2/issues/520"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/Blosc/c-blosc2/commit/425e8a9a59d49378d57e2116b6c9b0190a5986f5"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/Blosc/c-blosc2/compare/v2.9.2...v2.9.3"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2023-12-25T07:15:09Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,39 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-j3jw-c3vp-jg36",
|
||||
"modified": "2023-12-25T09:30:21Z",
|
||||
"published": "2023-12-25T09:30:21Z",
|
||||
"aliases": [
|
||||
"CVE-2023-49226"
|
||||
],
|
||||
"details": "An issue was discovered in Peplink Balance Two before 8.4.0. Command injection in the traceroute feature of the administration console allows users with admin privileges to execute arbitrary commands as root.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-49226"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.synacktiv.com/publications%253Ffield_tags_target_id%253D4"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.synacktiv.com/sites/default/files/2023-12/synacktiv-peplink-multiple-vulnerabilities.pdf"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2023-12-25T08:15:07Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,39 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-pc38-vvqw-jq9r",
|
||||
"modified": "2023-12-25T09:30:21Z",
|
||||
"published": "2023-12-25T09:30:21Z",
|
||||
"aliases": [
|
||||
"CVE-2023-38826"
|
||||
],
|
||||
"details": "A Cross Site Scripting (XSS) vulnerability exists in Follet Learning Solutions Destiny through 20.0_1U. via the handlewpesearchform.do. searchString.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38826"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://github.com/Oracle-Security/CVEs/tree/main/Follett%20Learning%20Solutions/Destiny/CVE-2023-38826"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.follettlearning.com/"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2023-12-25T08:15:07Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,39 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-pc49-g522-pmh5",
|
||||
"modified": "2023-12-25T09:30:19Z",
|
||||
"published": "2023-12-25T09:30:19Z",
|
||||
"aliases": [
|
||||
"CVE-2023-31297"
|
||||
],
|
||||
"details": "An issue was discovered in SESAMI planfocus CPTO (Cash Point & Transport Optimizer) 6.3.8.6 718. There is XSS via the Name field when modifying a client.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-31297"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://herolab.usd.de/en/security-advisories/usd-2022-0058/"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://herolab.usd.de/security-advisories/"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2023-12-25T07:15:08Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,35 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-q2rp-9vp9-fg3q",
|
||||
"modified": "2023-12-25T09:30:20Z",
|
||||
"published": "2023-12-25T09:30:20Z",
|
||||
"aliases": [
|
||||
"CVE-2023-47247"
|
||||
],
|
||||
"details": "In SysAid On-Premise before 23.3.34, there is an edge case in which an end user is able to delete a Knowledge Base article, aka bug 15102.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47247"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://documentation.sysaid.com/docs/23334"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2023-12-25T07:15:09Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,39 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-q565-26vc-vpx8",
|
||||
"modified": "2023-12-25T09:30:21Z",
|
||||
"published": "2023-12-25T09:30:21Z",
|
||||
"aliases": [
|
||||
"CVE-2022-34268"
|
||||
],
|
||||
"details": "An issue was discovered in RWS WorldServer before 11.7.3. /clientLogin deserializes Java objects without authentication, leading to command execution on the host.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-34268"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.rws.com/localization/products/trados-enterprise/worldserver/"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.triskelelabs.com/vulnerabilities-in-rws-worldserver"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2023-12-25T08:15:07Z"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,39 @@
|
||||
{
|
||||
"schema_version": "1.4.0",
|
||||
"id": "GHSA-qp42-5pj7-4ccm",
|
||||
"modified": "2023-12-25T09:30:21Z",
|
||||
"published": "2023-12-25T09:30:21Z",
|
||||
"aliases": [
|
||||
"CVE-2023-48652"
|
||||
],
|
||||
"details": "Concrete CMS 9 before 9.2.3 is vulnerable to Cross Site Request Forgery (CSRF) via /ccm/system/dialogs/logs/delete_all/submit. An attacker can force an admin user to delete server report logs on a web application to which they are currently authenticated.",
|
||||
"severity": [
|
||||
|
||||
],
|
||||
"affected": [
|
||||
|
||||
],
|
||||
"references": [
|
||||
{
|
||||
"type": "ADVISORY",
|
||||
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-48652"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://documentation.concretecms.org/developers/introduction/version-history/923-release-notes"
|
||||
},
|
||||
{
|
||||
"type": "WEB",
|
||||
"url": "https://www.concretecms.org/about/project-news/security/2023-12-05-concrete-cms-new-cves-and-cve-updates"
|
||||
}
|
||||
],
|
||||
"database_specific": {
|
||||
"cwe_ids": [
|
||||
|
||||
],
|
||||
"severity": null,
|
||||
"github_reviewed": false,
|
||||
"github_reviewed_at": null,
|
||||
"nvd_published_at": "2023-12-25T08:15:07Z"
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user