Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2023-06-30 21:31:32 +00:00
parent d95be99dff
commit 696cec7ef7
37 changed files with 310 additions and 51 deletions
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-f4vp-f6h9-8cx8",
-  "modified": "2022-02-25T00:01:24Z",
+  "modified": "2023-06-30T21:30:18Z",
  "published": "2022-02-17T00:00:33Z",
  "aliases": [
    "CVE-2021-26726"
  ],
  "details": "A remote code execution vulnerability affecting a Valmet DNA service listening on TCP port 1517, allows an attacker to execute commands with SYSTEM privileges This issue affects: Valmet DNA versions from Collection 2012 until Collection 2021.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
  ],
  "affected": [

@@ -29,7 +32,9 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-326"
+      "CWE-209",
+      "CWE-326",
+      "CWE-330"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -28,6 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-668",
      "CWE-732"
    ],
    "severity": "CRITICAL",
@@ -28,6 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-119",
      "CWE-20"
    ],
    "severity": "HIGH",
@@ -28,6 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-119",
      "CWE-20"
    ],
    "severity": "HIGH",
@@ -28,6 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-284",
      "CWE-668"
    ],
    "severity": "HIGH",
@@ -28,6 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-119",
      "CWE-20"
    ],
    "severity": "HIGH",
@@ -28,6 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-119",
      "CWE-20"
    ],
    "severity": "HIGH",
@@ -28,6 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-119",
      "CWE-20"
    ],
    "severity": "HIGH",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-5ffq-g4qh-w8q3",
-  "modified": "2022-05-20T00:00:36Z",
+  "modified": "2023-06-30T21:30:19Z",
  "published": "2022-05-11T00:01:39Z",
  "aliases": [
    "CVE-2022-24039"
@@ -28,7 +28,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-74"
+      "CWE-74",
+      "CWE-75"
    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-mxvv-v7w8-j88h",
-  "modified": "2022-05-25T00:00:23Z",
+  "modified": "2023-06-30T21:30:19Z",
  "published": "2022-05-13T00:00:21Z",
  "aliases": [
    "CVE-2021-27770"
@@ -28,6 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-472",
      "CWE-668"
    ],
    "severity": "HIGH",
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-rp5c-jhh9-9f2j",
-  "modified": "2022-05-24T19:14:02Z",
+  "modified": "2023-06-30T21:30:18Z",
  "published": "2022-05-24T19:14:02Z",
  "aliases": [
    "CVE-2021-28498"
  ],
  "details": "In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, user enable passwords set in clear text could result in unprivileged users getting complete access to the systems. This issue affects: Arista Metamako Operating System MOS-0.13 and post releases in the MOS-0.1x train MOS-0.26.6 and prior releases in the MOS-0.2x train MOS-0.31.1 and prior releases in the MOS-0.3x train",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
  ],
  "affected": [

@@ -25,7 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-522"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -28,7 +28,9 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-668"
+      "CWE-200",
+      "CWE-668",
+      "CWE-863"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -28,7 +28,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-400"
+      "CWE-400",
+      "CWE-770"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -28,7 +28,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-125"
+      "CWE-125",
+      "CWE-306"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -28,7 +28,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-200"
+      "CWE-200",
+      "CWE-532"
    ],
    "severity": "LOW",
    "github_reviewed": false,
@@ -28,6 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-1284",
      "CWE-400"
    ],
    "severity": "HIGH",
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-36c8-63rj-g7xv",
-  "modified": "2023-06-22T21:30:49Z",
+  "modified": "2023-06-30T21:30:24Z",
  "published": "2023-06-22T21:30:49Z",
  "aliases": [
    "CVE-2023-2991"
  ],
  "details": "Fortra Globalscape EFT's administration server suffers from an information disclosure vulnerability where the serial number of the harddrive that Globalscape is installed on can be remotely determined via a \"trial extension request\" message\n",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    }
  ],
  "affected": [

@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-58jm-pcr7-qmp6",
-  "modified": "2023-06-28T18:30:26Z",
+  "modified": "2023-06-30T21:30:26Z",
  "published": "2023-06-28T18:30:26Z",
  "aliases": [
    "CVE-2023-21178"
  ],
  "details": "In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-140762419",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N"
+    }
  ],
  "affected": [

@@ -25,7 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-362"
    ],
    "severity": null,
    "github_reviewed": false,
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-5cvj-vcv7-3q5c",
-  "modified": "2023-06-28T18:30:25Z",
+  "modified": "2023-06-30T21:30:26Z",
  "published": "2023-06-28T18:30:25Z",
  "aliases": [
    "CVE-2023-21173"
  ],
  "details": "In multiple methods of DataUsageList.java, there is a possible way to learn about admin user's network activities due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID: A-262741858",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
+    }
  ],
  "affected": [

@@ -25,7 +28,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
-
+      "CWE-862"
    ],
    "severity": null,
    "github_reviewed": false,
@@ -1,14 +1,17 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-822g-9c37-42c6",
-  "modified": "2023-06-14T21:30:40Z",
+  "modified": "2023-06-30T21:30:26Z",
  "published": "2023-06-14T21:30:40Z",
  "aliases": [
    "CVE-2023-1329"
  ],
  "details": "A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Buffer Overflow and/or Remote Code Execution when running HP Workpath solutions on potentially affected products.",
  "severity": [
-
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    }
  ],
  "affected": [

--- a/Show More
+++ b/Show More