Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2025-01-31 15:31:44 +00:00
parent a650bb6d2d
commit 67d4f7259e
51 changed files with 510 additions and 85 deletions
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-78wr-2p64-hpwj",
-  "modified": "2024-12-04T18:28:55Z",
+  "modified": "2025-01-31T15:30:42Z",
  "published": "2024-10-03T12:30:48Z",
  "aliases": [
    "CVE-2024-47554"
@@ -52,6 +52,10 @@
      "type": "WEB",
      "url": "https://lists.apache.org/thread/6ozr91rr9cj5lm0zyhv30bsp317hk5z1"
    },
+    {
+      "type": "WEB",
+      "url": "https://security.netapp.com/advisory/ntap-20250131-0010"
+    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2024/10/03/2"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-f9vj-2wh5-fj8j",
-  "modified": "2024-10-25T21:35:11Z",
+  "modified": "2025-01-31T15:30:42Z",
  "published": "2024-10-25T19:43:41Z",
  "aliases": [
    "CVE-2024-49766"
@@ -58,6 +58,10 @@
    {
      "type": "WEB",
      "url": "https://github.com/pallets/werkzeug/releases/tag/3.0.6"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.netapp.com/advisory/ntap-20250131-0005"
    }
  ],
  "database_specific": {
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-653p-vg55-5652",
-  "modified": "2024-12-18T19:33:02Z",
+  "modified": "2025-01-31T15:30:44Z",
  "published": "2024-12-17T15:31:43Z",
  "aliases": [
    "CVE-2024-54677"
@@ -182,6 +182,10 @@
      "type": "WEB",
      "url": "https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.98"
    },
+    {
+      "type": "WEB",
+      "url": "https://security.netapp.com/advisory/ntap-20250131-0006"
+    },
    {
      "type": "WEB",
      "url": "https://lists.apache.org/thread/tdtbbxpg5trdwc2wnopcth9ccvdftq2n"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-v778-237x-gjrc",
-  "modified": "2024-12-13T21:56:08Z",
+  "modified": "2025-01-31T15:30:43Z",
  "published": "2024-12-11T22:03:04Z",
  "aliases": [
    "CVE-2024-45337"
@@ -64,6 +64,10 @@
      "type": "WEB",
      "url": "https://pkg.go.dev/vuln/GO-2024-3321"
    },
+    {
+      "type": "WEB",
+      "url": "https://security.netapp.com/advisory/ntap-20250131-0007"
+    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2024/12/11/2"
@@ -25,7 +25,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-863"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -33,7 +33,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-863"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-94"
+    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-863"
+    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-g753-vxgm-rphm",
-  "modified": "2024-04-04T04:19:07Z",
+  "modified": "2025-01-31T15:30:40Z",
  "published": "2023-05-23T21:30:18Z",
  "aliases": [
    "CVE-2023-23305"
@@ -22,6 +22,10 @@
    {
      "type": "WEB",
      "url": "https://github.com/anvilsecure/garmin-ciq-app-research/blob/main/advisories/CVE-2023-23305.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/anvilsecure/garmin-ciq-app-research/blob/main/poc/GRMN-06.prg"
    }
  ],
  "database_specific": {
@@ -34,7 +34,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-287"
+      "CWE-287",
+      "CWE-863"
    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
@@ -26,6 +26,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-1284",
      "CWE-20"
    ],
    "severity": "MODERATE",
@@ -30,7 +30,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-287"
+      "CWE-287",
+      "CWE-863"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-mhwh-jf8r-xgh4",
-  "modified": "2024-04-04T05:43:42Z",
+  "modified": "2025-01-31T15:30:39Z",
  "published": "2023-07-06T21:14:58Z",
  "aliases": [
    "CVE-2023-30507"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-4223-r78w-6q8p",
-  "modified": "2024-03-13T18:31:33Z",
+  "modified": "2025-01-31T15:30:41Z",
  "published": "2024-03-13T18:31:33Z",
  "aliases": [
    "CVE-2024-1380"
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-862"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-8fvm-73q4-3j6f",
-  "modified": "2025-01-23T18:31:11Z",
+  "modified": "2025-01-31T15:30:41Z",
  "published": "2024-04-04T18:30:33Z",
  "aliases": [
    "CVE-2024-25709"
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-7grp-x8pq-wh35",
-  "modified": "2024-05-21T18:31:21Z",
+  "modified": "2025-01-31T15:30:42Z",
  "published": "2024-05-21T18:31:21Z",
  "aliases": [
    "CVE-2023-52788"
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ni915/perf: Fix NULL deref bugs with drm_dbg() calls\n\nWhen i915 perf interface is not available dereferencing it will lead to\nNULL dereferences.\n\nAs returning -ENOTSUPP is pretty clear return when perf interface is not\navailable.\n\n[tursulin: added stable tag]\n(cherry picked from commit 36f27350ff745bd228ab04d7845dfbffc177a889)",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -36,8 +41,10 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-05-21T16:15:17Z"
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-918"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-j44q-5mx6-236v",
-  "modified": "2024-05-19T12:30:39Z",
+  "modified": "2025-01-31T15:30:41Z",
  "published": "2024-05-19T12:30:39Z",
  "aliases": [
    "CVE-2024-35945"
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: phy: phy_device: Prevent nullptr exceptions on ISR\n\nIf phydev->irq is set unconditionally, check\nfor valid interrupt handler or fall back to polling mode to prevent\nnullptr exceptions in interrupt service routine.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -28,8 +33,10 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-05-19T11:15:50Z"
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-r596-gfj2-gc78",
-  "modified": "2024-05-19T12:30:39Z",
+  "modified": "2025-01-31T15:30:42Z",
  "published": "2024-05-19T12:30:39Z",
  "aliases": [
    "CVE-2024-35946"
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw89: fix null pointer access when abort scan\n\nDuring cancel scan we might use vif that weren't scanning.\nFix this by using the actual scanning vif.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -28,8 +33,10 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-05-19T11:15:50Z"
--- a/Show More
+++ b/Show More