netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-08-23 15:31:59 +00:00
parent 11ae96c3ef
commit 62b9cf5822
47 changed files with 920 additions and 70 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/06/GHSA-2qjw-rvh6-348q/GHSA-2qjw-rvh6-348q.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2qjw-rvh6-348q",
"modified": "2024-04-04T04:41:58Z",
"modified": "2024-08-23T15:30:32Z",
"published": "2023-06-09T06:30:32Z",
"aliases": [
"CVE-2023-2414"
@@ -29,6 +29,10 @@
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/meeting-scheduler-by-vcita/trunk/vcita-ajax-function.php#L88"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/changeset/2933915/meeting-scheduler-by-vcita/trunk/vcita-ajax-function.php?contextall=1&old=2924763&old_path=%2Fmeeting-scheduler-by-vcita%2Ftrunk%2Fvcita-ajax-function.php"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3c99aab5-a995-44ae-bc14-09f73e6b22c5?source=cve"
advisories/unreviewed/2024/06/GHSA-h973-v697-qfgm/GHSA-h973-v697-qfgm.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h973-v697-qfgm",
"modified": "2024-06-09T06:30:39Z",
"modified": "2024-08-23T15:30:32Z",
"published": "2024-06-09T06:30:39Z",
"aliases": [
"CVE-2024-5774"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2024/06/GHSA-qggq-c955-hh78/GHSA-qggq-c955-hh78.json
+1
View File
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120",
"CWE-121"
],
"severity": "HIGH",
advisories/unreviewed/2024/06/GHSA-rqwp-r837-269c/GHSA-rqwp-r837-269c.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rqwp-r837-269c",
"modified": "2024-06-09T09:30:34Z",
"modified": "2024-08-23T15:30:32Z",
"published": "2024-06-09T09:30:34Z",
"aliases": [
"CVE-2024-5775"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2024/07/GHSA-2j45-xr49-x8qc/GHSA-2j45-xr49-x8qc.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2j45-xr49-x8qc",
"modified": "2024-07-30T09:32:02Z",
"modified": "2024-08-23T15:30:33Z",
"published": "2024-07-30T09:32:02Z",
"aliases": [
"CVE-2024-42140"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv: kexec: Avoid deadlock in kexec crash path\n\nIf the kexec crash code is called in the interrupt context, the\nmachine_kexec_mask_interrupts() function will trigger a deadlock while\ntrying to acquire the irqdesc spinlock and then deactivate irqchip in\nirq_set_irqchip_state() function.\n\nUnlike arm64, riscv only requires irq_eoi handler to complete EOI and\nkeeping irq_set_irqchip_state() will only leave this possible deadlock\nwithout any use. So we simply remove it.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -41,9 +44,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-667"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-30T08:15:05Z"
advisories/unreviewed/2024/07/GHSA-39rr-hfc3-8pcc/GHSA-39rr-hfc3-8pcc.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-39rr-hfc3-8pcc",
"modified": "2024-07-30T03:30:53Z",
"modified": "2024-08-23T15:30:33Z",
"published": "2024-07-30T00:34:27Z",
"aliases": [
"CVE-2024-40832"
],
"details": "The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. An app may be able to view a contact's phone number in system logs.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-29T23:15:14Z"
advisories/unreviewed/2024/07/GHSA-5fvr-59fv-4jgf/GHSA-5fvr-59fv-4jgf.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5fvr-59fv-4jgf",
"modified": "2024-07-30T03:30:53Z",
"modified": "2024-08-23T15:30:33Z",
"published": "2024-07-30T00:34:27Z",
"aliases": [
"CVE-2024-40827"
],
"details": "The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. An app may be able to overwrite arbitrary files.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
}
],
"affected": [
@@ -47,7 +50,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-29T23:15:14Z"
advisories/unreviewed/2024/07/GHSA-5j3v-wvv7-9rvc/GHSA-5j3v-wvv7-9rvc.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5j3v-wvv7-9rvc",
"modified": "2024-07-30T09:31:53Z",
"modified": "2024-08-23T15:30:33Z",
"published": "2024-07-30T09:31:53Z",
"aliases": [
"CVE-2024-42123"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix double free err_addr pointer warnings\n\nIn amdgpu_umc_bad_page_polling_timeout, the amdgpu_umc_handle_bad_pages\nwill be run many times so that double free err_addr in some special case.\nSo set the err_addr to NULL to avoid the warnings.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-415"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-30T08:15:04Z"
advisories/unreviewed/2024/07/GHSA-9hrm-h2q9-qw2v/GHSA-9hrm-h2q9-qw2v.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9hrm-h2q9-qw2v",
"modified": "2024-07-30T03:30:52Z",
"modified": "2024-08-23T15:30:33Z",
"published": "2024-07-30T00:34:27Z",
"aliases": [
"CVE-2024-40796"
],
"details": "A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.6, iOS 16.7.9 and iPadOS 16.7.9, macOS Monterey 12.7.6, macOS Ventura 13.6.8. Private browsing may leak some browsing history.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
@@ -55,7 +58,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-29T23:15:12Z"
advisories/unreviewed/2024/07/GHSA-fmmj-2f3w-98j5/GHSA-fmmj-2f3w-98j5.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fmmj-2f3w-98j5",
"modified": "2024-07-30T03:30:52Z",
"modified": "2024-08-23T15:30:33Z",
"published": "2024-07-30T00:34:27Z",
"aliases": [
"CVE-2024-40803"
],
"details": "A type confusion issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. An attacker may be able to cause unexpected app termination.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -45,9 +48,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-843"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-29T23:15:12Z"
advisories/unreviewed/2024/07/GHSA-grg4-p2px-v4hg/GHSA-grg4-p2px-v4hg.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-grg4-p2px-v4hg",
"modified": "2024-07-30T15:31:28Z",
"modified": "2024-08-23T15:30:33Z",
"published": "2024-07-30T15:31:28Z",
"aliases": [
"CVE-2024-23091"
],
"details": "Weak password hashing using MD5 in funzioni.php in HotelDruid before 1.32 allows an attacker to obtain plaintext passwords from hash values.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-916"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-30T14:15:02Z"
advisories/unreviewed/2024/07/GHSA-mhm9-743p-jfxq/GHSA-mhm9-743p-jfxq.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mhm9-743p-jfxq",
"modified": "2024-07-30T03:30:52Z",
"modified": "2024-08-23T15:30:33Z",
"published": "2024-07-30T00:34:27Z",
"aliases": [
"CVE-2024-40799"
],
"details": "An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 16.7.9 and iPadOS 16.7.9, macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 17.6 and iPadOS 17.6, watchOS 10.6, tvOS 17.6, visionOS 1.3, macOS Sonoma 14.6. Processing a maliciously crafted file may lead to unexpected app termination.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H"
}
],
"affected": [
@@ -85,9 +88,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-29T23:15:12Z"
advisories/unreviewed/2024/07/GHSA-mrf5-g9rq-vqv9/GHSA-mrf5-g9rq-vqv9.json
+5 -1
View File
@@ -1,13 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mrf5-g9rq-vqv9",
"modified": "2024-07-30T12:31:18Z",
"modified": "2024-08-23T15:30:33Z",
"published": "2024-07-30T12:31:18Z",
"aliases": [
"CVE-2024-7127"
],
"details": "Improper Neutralization of Input During Web Page Generation vulnerability in Stackposts Social Marketing Tool allows Cross-site Scripting (XSS) attack. By submitting the payload in the username during registration, it can be executed later in the application panel. This could lead to the unauthorised acquisition of information (e.g. cookies from a logged-in user). After multiple attempts to contact the vendor we did not receive any answer. Our team has confirmed the existence of this vulnerability. We suppose this issue affects Social Marketing Tool in all versions.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:A/V:D/RE:L/U:Green"
advisories/unreviewed/2024/07/GHSA-p8wp-3m3g-qg4j/GHSA-p8wp-3m3g-qg4j.json
+5 -1
View File
@@ -1,13 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p8wp-3m3g-qg4j",
"modified": "2024-07-30T15:31:28Z",
"modified": "2024-08-23T15:30:33Z",
"published": "2024-07-30T15:31:28Z",
"aliases": [
"CVE-2024-6699"
],
"details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mikafon Electronic Inc. Mikafon MA7 allows SQL Injection.This issue affects Mikafon MA7: from v3.0 before v3.1.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:U/V:C/RE:L/U:X"
advisories/unreviewed/2024/07/GHSA-q25c-28ww-34p7/GHSA-q25c-28ww-34p7.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-q25c-28ww-34p7",
"modified": "2024-07-30T03:30:52Z",
"modified": "2024-08-23T15:30:33Z",
"published": "2024-07-30T00:34:27Z",
"aliases": [
"CVE-2024-40804"
],
"details": "The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. A malicious application may be able to access private information.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-29T23:15:12Z"
advisories/unreviewed/2024/07/GHSA-r79w-4gmj-3cfw/GHSA-r79w-4gmj-3cfw.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r79w-4gmj-3cfw",
"modified": "2024-07-30T03:30:53Z",
"modified": "2024-08-23T15:30:33Z",
"published": "2024-07-30T00:34:27Z",
"aliases": [
"CVE-2024-40833"
],
"details": "A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6, iOS 16.7.9 and iPadOS 16.7.9, macOS Monterey 12.7.6, macOS Ventura 13.6.8. A shortcut may be able to use sensitive data with certain actions without prompting the user.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -55,7 +58,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-29T23:15:14Z"
advisories/unreviewed/2024/07/GHSA-v79c-wmw8-rqjf/GHSA-v79c-wmw8-rqjf.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v79c-wmw8-rqjf",
"modified": "2024-07-30T03:30:52Z",
"modified": "2024-08-23T15:30:33Z",
"published": "2024-07-30T00:34:27Z",
"aliases": [
"CVE-2024-40795"
],
"details": "This issue was addressed with improved data protection. This issue is fixed in watchOS 10.6, macOS Sonoma 14.6, iOS 17.6 and iPadOS 17.6, tvOS 17.6. An app may be able to read sensitive location information.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
@@ -55,7 +58,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-29T23:15:12Z"
advisories/unreviewed/2024/07/GHSA-vcmx-3577-7jh3/GHSA-vcmx-3577-7jh3.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vcmx-3577-7jh3",
"modified": "2024-07-30T03:30:52Z",
"modified": "2024-08-23T15:30:33Z",
"published": "2024-07-30T00:34:27Z",
"aliases": [
"CVE-2024-40794"
],
"details": "This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.6, iOS 17.6 and iPadOS 17.6, Safari 17.6. Private Browsing tabs may be accessed without authentication.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
@@ -47,7 +50,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-29T23:15:12Z"
advisories/unreviewed/2024/07/GHSA-wx36-wgp2-fwpq/GHSA-wx36-wgp2-fwpq.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wx36-wgp2-fwpq",
"modified": "2024-07-30T03:30:53Z",
"modified": "2024-08-23T15:30:33Z",
"published": "2024-07-30T00:34:27Z",
"aliases": [
"CVE-2024-40834"
],
"details": "This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14.6, macOS Monterey 12.7.6, macOS Ventura 13.6.8. A shortcut may be able to bypass sensitive Shortcuts app settings.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"
}
],
"affected": [
@@ -47,7 +50,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-29T23:15:14Z"
advisories/unreviewed/2024/07/GHSA-x7rm-gp29-w8xw/GHSA-x7rm-gp29-w8xw.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x7rm-gp29-w8xw",
"modified": "2024-07-30T03:30:52Z",
"modified": "2024-08-23T15:30:33Z",
"published": "2024-07-30T00:34:27Z",
"aliases": [
"CVE-2024-40798"
],
"details": "This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Sonoma 14.6, iOS 16.7.9 and iPadOS 16.7.9, macOS Monterey 12.7.6, macOS Ventura 13.6.8. An app may be able to read Safari's browsing history.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
@@ -55,7 +58,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-29T23:15:12Z"

Some files were not shown because too many files have changed in this diff Show More