netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2025-02-20 18:32:45 +00:00
parent 68652a4300
commit 6954e467b0
69 changed files with 1336 additions and 69 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/03/GHSA-cw6j-2v5x-f5m2/GHSA-cw6j-2v5x-f5m2.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-400"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2023/03/GHSA-cxcv-gvhj-5xxg/GHSA-cxcv-gvhj-5xxg.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-200"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2023/03/GHSA-q5xp-jm46-h2x4/GHSA-q5xp-jm46-h2x4.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-269"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/05/GHSA-366g-cg6r-xmp2/GHSA-366g-cg6r-xmp2.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-366g-cg6r-xmp2",
"modified": "2024-05-14T18:30:57Z",
"modified": "2025-02-20T18:31:14Z",
"published": "2024-05-14T18:30:57Z",
"aliases": [
"CVE-2024-4793"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
advisories/unreviewed/2024/05/GHSA-3jvh-pgp8-6866/GHSA-3jvh-pgp8-6866.json
+6 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3jvh-pgp8-6866",
"modified": "2024-05-14T18:30:57Z",
"modified": "2025-02-20T18:31:15Z",
"published": "2024-05-14T18:30:57Z",
"aliases": [
"CVE-2024-4817"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
@@ -38,6 +42,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-639",
"CWE-99"
],
"severity": "MODERATE",
advisories/unreviewed/2024/05/GHSA-6484-6mhx-vr77/GHSA-6484-6mhx-vr77.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6484-6mhx-vr77",
"modified": "2024-05-14T18:30:57Z",
"modified": "2025-02-20T18:31:15Z",
"published": "2024-05-14T18:30:57Z",
"aliases": [
"CVE-2024-4797"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
advisories/unreviewed/2024/05/GHSA-6ff3-gqc7-rp56/GHSA-6ff3-gqc7-rp56.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6ff3-gqc7-rp56",
"modified": "2024-05-14T18:30:57Z",
"modified": "2025-02-20T18:31:15Z",
"published": "2024-05-14T18:30:57Z",
"aliases": [
"CVE-2024-4818"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
advisories/unreviewed/2024/05/GHSA-7jp5-5rh9-4q92/GHSA-7jp5-5rh9-4q92.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7jp5-5rh9-4q92",
"modified": "2024-05-14T18:30:57Z",
"modified": "2025-02-20T18:31:14Z",
"published": "2024-05-14T18:30:57Z",
"aliases": [
"CVE-2024-4792"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
advisories/unreviewed/2024/05/GHSA-f9qv-x24h-c8g8/GHSA-f9qv-x24h-c8g8.json
+7 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f9qv-x24h-c8g8",
"modified": "2024-05-14T18:30:57Z",
"modified": "2025-02-20T18:31:15Z",
"published": "2024-05-14T18:30:57Z",
"aliases": [
"CVE-2024-4819"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
@@ -38,7 +42,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-285"
"CWE-285",
"CWE-639"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/05/GHSA-jvcm-pc6m-g646/GHSA-jvcm-pc6m-g646.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jvcm-pc6m-g646",
"modified": "2024-05-14T18:30:57Z",
"modified": "2025-02-20T18:31:14Z",
"published": "2024-05-14T18:30:57Z",
"aliases": [
"CVE-2024-4795"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
advisories/unreviewed/2024/05/GHSA-rx2j-whx7-3jv5/GHSA-rx2j-whx7-3jv5.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rx2j-whx7-3jv5",
"modified": "2024-05-14T18:30:57Z",
"modified": "2025-02-20T18:31:14Z",
"published": "2024-05-14T18:30:57Z",
"aliases": [
"CVE-2024-4794"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
advisories/unreviewed/2024/05/GHSA-x348-5vv2-6fqv/GHSA-x348-5vv2-6fqv.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x348-5vv2-6fqv",
"modified": "2024-05-14T18:30:57Z",
"modified": "2025-02-20T18:31:15Z",
"published": "2024-05-14T18:30:57Z",
"aliases": [
"CVE-2024-4796"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
advisories/unreviewed/2024/10/GHSA-jwc3-mm8j-j745/GHSA-jwc3-mm8j-j745.json
+2 -1
View File
@@ -30,7 +30,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-288"
"CWE-288",
"CWE-306"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2024/11/GHSA-62q4-hc79-94qj/GHSA-62q4-hc79-94qj.json
+1
View File
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-345",
"CWE-348"
],
"severity": "LOW",
advisories/unreviewed/2025/02/GHSA-222j-rx46-g89g/GHSA-222j-rx46-g89g.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-222j-rx46-g89g",
"modified": "2025-02-19T21:31:38Z",
"modified": "2025-02-20T18:31:22Z",
"published": "2025-02-19T21:31:37Z",
"aliases": [
"CVE-2023-46271"
],
"details": "Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has a buffer overflow. This issue arises from the ah_webui service, which listens on TCP port 3009 by default.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -28,8 +33,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-120"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-19T19:15:13Z"
advisories/unreviewed/2025/02/GHSA-22ww-35pw-64c4/GHSA-22ww-35pw-64c4.json
+29
View File
@@ -0,0 +1,29 @@
{
"schema_version": "1.4.0",
"id": "GHSA-22ww-35pw-64c4",
"modified": "2025-02-20T18:31:24Z",
"published": "2025-02-20T18:31:24Z",
"aliases": [
"CVE-2024-54959"
],
"details": "Nagios XI 2024R1.2.2 is vulnerable to a Cross-Site Request Forgery (CSRF) attack through the Favorites component, enabling POST-based Cross-Site Scripting (XSS).",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54959"
},
{
"type": "WEB",
"url": "https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2024-54959"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-20T18:15:25Z"
}
}
advisories/unreviewed/2025/02/GHSA-2fvw-qmcc-8m37/GHSA-2fvw-qmcc-8m37.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2fvw-qmcc-8m37",
"modified": "2025-02-20T18:31:24Z",
"published": "2025-02-20T18:31:24Z",
"aliases": [
"CVE-2024-46933"
],
"details": "An issue was discovered in Atos Eviden BullSequana XH2140 BMC before C4EM-125: OMF_C4E 101.05.0014. Some BullSequana XH products were shipped without proper hardware programming, leading to a potential denial-of-service with privileged access.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46933"
},
{
"type": "WEB",
"url": "https://eviden.com"
},
{
"type": "WEB",
"url": "https://support.bull.com/ols/product/security/psirt/security-bulletins/ast2600-left-unconfigured-in-bullsequana-xh2140-psirt-270-tlp-clear-version-2-7-cve-2024-46933/view"
}
],
"database_specific": {
"cwe_ids": [],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-20T18:15:25Z"
}
}
advisories/unreviewed/2025/02/GHSA-2v3m-p433-pwh8/GHSA-2v3m-p433-pwh8.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2v3m-p433-pwh8",
"modified": "2025-02-20T15:31:09Z",
"modified": "2025-02-20T18:31:22Z",
"published": "2025-02-20T15:31:09Z",
"aliases": [
"CVE-2023-51309"
],
"details": "A lack of rate limiting in the 'Email Settings' feature of PHPJabbers Car Park Booking System v3.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [],
"references": [
{
@@ -24,8 +29,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-770"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-20T15:15:11Z"
advisories/unreviewed/2025/02/GHSA-39j3-r3vp-hgfh/GHSA-39j3-r3vp-hgfh.json
+29
View File
@@ -0,0 +1,29 @@
{
"schema_version": "1.4.0",
"id": "GHSA-39j3-r3vp-hgfh",
"modified": "2025-02-20T18:31:25Z",
"published": "2025-02-20T18:31:25Z",
"aliases": [
"CVE-2024-54961"
],
"details": "Nagios XI 2024R1.2.2 has an Information Disclosure vulnerability, which allows unauthenticated users to access multiple pages displaying the usernames and email addresses of all current users.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54961"
},
{
"type": "WEB",
"url": "https://github.com/Sharpe-nl/CVEs/tree/main/CVE-2024-54961"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-20T18:15:25Z"
}
}
advisories/unreviewed/2025/02/GHSA-3mjx-h33f-j53j/GHSA-3mjx-h33f-j53j.json
+40
View File
@@ -0,0 +1,40 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3mjx-h33f-j53j",
"modified": "2025-02-20T18:31:23Z",
"published": "2025-02-20T18:31:23Z",
"aliases": [
"CVE-2023-51332"
],
"details": "A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Meeting Room Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-51332"
},
{
"type": "WEB",
"url": "https://packetstorm.news/files/id/176510"
},
{
"type": "WEB",
"url": "https://www.phpjabbers.com/meeting-room-booking-system/#sectionDemo"
}
],
"database_specific": {
"cwe_ids": [
"CWE-404"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-20T16:15:35Z"
}
}

Some files were not shown because too many files have changed in this diff Show More