netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-8rv9-5fv4-653w
GHSA-r8jv-c3jp-366j
GHSA-5cwq-4hm6-gp6g
GHSA-84pw-hw22-9v6h
GHSA-fp89-4294-45q3
GHSA-q578-hqmw-59mf
GHSA-xfcp-h9vc-f632
GHSA-86j7-6frw-pfwj
GHSA-jwqg-83qr-7fph
GHSA-frjw-g5j9-99p6
GHSA-f874-8386-mf62
GHSA-3j7w-h2jh-289j
GHSA-jwfg-733h-8pc5
GHSA-3j9f-4r3c-964g
GHSA-94g3-94ff-rvhf
GHSA-gwmp-w6mx-r484
GHSA-qmm7-r8jx-cj5h
This commit is contained in:
advisory-database[bot]
2024-09-20 12:33:15 +00:00
parent c3bd32558d
commit 676c7bf0ef
17 changed files with 214 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/03/GHSA-8rv9-5fv4-653w/GHSA-8rv9-5fv4-653w.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8rv9-5fv4-653w",
"modified": "2022-03-31T00:00:36Z",
"modified": "2024-09-20T12:31:45Z",
"published": "2022-03-25T00:00:33Z",
"aliases": [
"CVE-2022-0550"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2022/03/GHSA-r8jv-c3jp-366j/GHSA-r8jv-c3jp-366j.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r8jv-c3jp-366j",
"modified": "2022-03-31T00:00:36Z",
"modified": "2024-09-20T12:31:45Z",
"published": "2022-03-25T00:00:33Z",
"aliases": [
"CVE-2022-0551"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2023/08/GHSA-5cwq-4hm6-gp6g/GHSA-5cwq-4hm6-gp6g.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5cwq-4hm6-gp6g",
"modified": "2024-04-04T06:43:46Z",
"modified": "2024-09-20T12:31:45Z",
"published": "2023-08-09T09:30:33Z",
"aliases": [
"CVE-2023-22843"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2023/08/GHSA-84pw-hw22-9v6h/GHSA-84pw-hw22-9v6h.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-84pw-hw22-9v6h",
"modified": "2024-04-04T06:43:43Z",
"modified": "2024-09-20T12:31:45Z",
"published": "2023-08-09T09:30:33Z",
"aliases": [
"CVE-2023-22378"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2023/08/GHSA-fp89-4294-45q3/GHSA-fp89-4294-45q3.json
+6 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fp89-4294-45q3",
"modified": "2024-04-04T06:44:02Z",
"modified": "2024-09-20T12:31:45Z",
"published": "2023-08-09T12:30:26Z",
"aliases": [
"CVE-2023-23903"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
@@ -28,6 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-1286",
"CWE-20"
],
"severity": "MODERATE",
advisories/unreviewed/2023/08/GHSA-q578-hqmw-59mf/GHSA-q578-hqmw-59mf.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-q578-hqmw-59mf",
"modified": "2024-04-04T06:43:47Z",
"modified": "2024-09-20T12:31:45Z",
"published": "2023-08-09T09:30:34Z",
"aliases": [
"CVE-2023-23574"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2023/08/GHSA-xfcp-h9vc-f632/GHSA-xfcp-h9vc-f632.json
+6 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xfcp-h9vc-f632",
"modified": "2024-04-04T06:44:08Z",
"modified": "2024-09-20T12:31:45Z",
"published": "2023-08-09T12:30:26Z",
"aliases": [
"CVE-2023-24015"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
@@ -28,6 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-1286",
"CWE-20"
],
"severity": "MODERATE",
advisories/unreviewed/2023/09/GHSA-86j7-6frw-pfwj/GHSA-86j7-6frw-pfwj.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-86j7-6frw-pfwj",
"modified": "2024-04-04T07:43:51Z",
"modified": "2024-09-20T12:31:45Z",
"published": "2023-09-19T12:30:30Z",
"aliases": [
"CVE-2023-29245"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2023/09/GHSA-jwqg-83qr-7fph/GHSA-jwqg-83qr-7fph.json
+6 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jwqg-83qr-7fph",
"modified": "2024-04-04T07:43:49Z",
"modified": "2024-09-20T12:31:45Z",
"published": "2023-09-19T12:30:30Z",
"aliases": [
"CVE-2023-32649"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
@@ -28,6 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-1286",
"CWE-20"
],
"severity": "HIGH",
advisories/unreviewed/2024/01/GHSA-frjw-g5j9-99p6/GHSA-frjw-g5j9-99p6.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-frjw-g5j9-99p6",
"modified": "2024-01-15T12:30:20Z",
"modified": "2024-09-20T12:31:45Z",
"published": "2024-01-15T12:30:20Z",
"aliases": [
"CVE-2023-5253"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2024/04/GHSA-f874-8386-mf62/GHSA-f874-8386-mf62.json
+6 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f874-8386-mf62",
"modified": "2024-04-10T18:30:47Z",
"modified": "2024-09-20T12:31:45Z",
"published": "2024-04-10T18:30:47Z",
"aliases": [
"CVE-2023-6916"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
@@ -28,6 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-201",
"CWE-522"
],
"severity": "HIGH",
advisories/unreviewed/2024/05/GHSA-3j7w-h2jh-289j/GHSA-3j7w-h2jh-289j.json
+2 -1
View File
@@ -33,7 +33,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-20"
"CWE-20",
"CWE-356"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2024/05/GHSA-jwfg-733h-8pc5/GHSA-jwfg-733h-8pc5.json
+6 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jwfg-733h-8pc5",
"modified": "2024-05-15T18:30:33Z",
"modified": "2024-09-20T12:31:46Z",
"published": "2024-05-15T18:30:33Z",
"aliases": [
"CVE-2023-5937"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
@@ -28,6 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-538",
"CWE-732"
],
"severity": "LOW",
advisories/unreviewed/2024/09/GHSA-3j9f-4r3c-964g/GHSA-3j9f-4r3c-964g.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3j9f-4r3c-964g",
"modified": "2024-09-18T09:30:38Z",
"modified": "2024-09-20T12:31:51Z",
"published": "2024-09-18T09:30:38Z",
"aliases": [
"CVE-2024-46797"
advisories/unreviewed/2024/09/GHSA-94g3-94ff-rvhf/GHSA-94g3-94ff-rvhf.json
+54
View File
@@ -0,0 +1,54 @@
{
"schema_version": "1.4.0",
"id": "GHSA-94g3-94ff-rvhf",
"modified": "2024-09-20T12:31:55Z",
"published": "2024-09-20T12:31:55Z",
"aliases": [
"CVE-2024-9031"
],
"details": "A vulnerability, which was classified as problematic, has been found in CodeCanyon CRMGo SaaS up to 7.2. This issue affects some unknown processing of the file /project/task/{task_id}/show. The manipulation of the argument comment leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9031"
},
{
"type": "WEB",
"url": "https://bytium.com/stored-xss-vulnerabilities-in-crmgo-sass-version-7-2"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.278201"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.278201"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.410565"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-20T12:15:06Z"
}
}
advisories/unreviewed/2024/09/GHSA-gwmp-w6mx-r484/GHSA-gwmp-w6mx-r484.json
+50
View File
@@ -0,0 +1,50 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gwmp-w6mx-r484",
"modified": "2024-09-20T12:31:54Z",
"published": "2024-09-20T12:31:54Z",
"aliases": [
"CVE-2024-9030"
],
"details": "A vulnerability classified as problematic was found in CodeCanyon CRMGo SaaS 7.2. This vulnerability affects unknown code of the file /deal/{note_id}/note. The manipulation of the argument notes leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9030"
},
{
"type": "WEB",
"url": "https://bytium.com/stored-xss-vulnerabilities-in-crmgo-sass-version-7-2"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.278200"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.278200"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-20T12:15:05Z"
}
}
advisories/unreviewed/2024/09/GHSA-qmm7-r8jx-cj5h/GHSA-qmm7-r8jx-cj5h.json
+42
View File
@@ -0,0 +1,42 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qmm7-r8jx-cj5h",
"modified": "2024-09-20T12:31:54Z",
"published": "2024-09-20T12:31:54Z",
"aliases": [
"CVE-2024-9043"
],
"details": "Secure Email Gateway from Cellopoint has Buffer Overflow Vulnerability in authentication process. Remote unauthenticated attackers can send crafted packets to crash the process, thereby bypassing authentication and obtaining system administrator privileges.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9043"
},
{
"type": "WEB",
"url": "https://www.twcert.org.tw/en/cp-139-8103-b0568-2.html"
},
{
"type": "WEB",
"url": "https://www.twcert.org.tw/tw/cp-132-8102-b94a9-1.html"
}
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-09-20T11:15:13Z"
}
}