diff --git a/advisories/github-reviewed/2019/08/GHSA-xc6x-cq47-9chw/GHSA-xc6x-cq47-9chw.json b/advisories/github-reviewed/2019/08/GHSA-xc6x-cq47-9chw/GHSA-xc6x-cq47-9chw.json index 4a8a6bd4775..b9047449512 100644 --- a/advisories/github-reviewed/2019/08/GHSA-xc6x-cq47-9chw/GHSA-xc6x-cq47-9chw.json +++ b/advisories/github-reviewed/2019/08/GHSA-xc6x-cq47-9chw/GHSA-xc6x-cq47-9chw.json @@ -53,9 +53,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2019-08-15T15:29:27Z", diff --git a/advisories/github-reviewed/2024/02/GHSA-555p-m4v6-cqxv/GHSA-555p-m4v6-cqxv.json b/advisories/github-reviewed/2024/02/GHSA-555p-m4v6-cqxv/GHSA-555p-m4v6-cqxv.json index 0c9ce6f70f5..99489b3d4d0 100644 --- a/advisories/github-reviewed/2024/02/GHSA-555p-m4v6-cqxv/GHSA-555p-m4v6-cqxv.json +++ b/advisories/github-reviewed/2024/02/GHSA-555p-m4v6-cqxv/GHSA-555p-m4v6-cqxv.json @@ -3,14 +3,10 @@ "id": "GHSA-555p-m4v6-cqxv", "modified": "2024-02-28T18:06:24Z", "published": "2024-02-28T18:06:24Z", - "aliases": [ - - ], + "aliases": [], "summary": "ASA-2024-004: Default configuration param for Evidence may limit window of validity", "details": "## ASA-2024-004: Default configuration param for Evidence may limit window of validity\n\n**Component**: CometBFT\n**Criticality**: Low\n**Affected versions**: All\n**Affected users**: Validators, Chain Builders + Maintainers\n\n## Summary\n\nA default configuration in CometBFT has been found to be small for common use cases, and may prevent the slashing mechanism from working in specific cases. The default values for `EvidenceParams.MaxAgeNumBlocks` and `EvidenceParams.MaxAgeDuration` consensus parameters may not be sufficient for common use cases to provide coverage for the entire unbonding period for a chain (`Staking.UnbondingTime`). If the conditions of both of these parameters are exceeded, evidence may be prematurely expired and considered no longer valid, potentially allowing for unpunished Byzantine behavior if evidence is discovered outside of that window.\n\n## Next Steps for Chains and Validators\n\nIt is recommended that chain ecosystems and their maintainers set the consensus parameters `EvidenceParams.MaxAgeNumBlocks` and `EvidenceParams.MaxAgeDuration` to values appropriate for their use case: \n- `EvidenceParams.MaxAgeDuration` (set in nanoseconds) should exceed the duration of the chain’s unbonding period\n- `EvidenceParams.MaxAgeNumBlocks` should exceed the number of estimated blocks that will be produced by your chain throughout the unbonding period\n\nFor more information about evidence in CometBFT, please see: https://docs.cometbft.com/v0.37/spec/consensus/evidence.\n\nFor more information about the cosmos-sdk `x/staking` and `x/slashing` modules, and `UnbondingTime` parameter, please see: https://docs.cosmos.network/v0.50/build/modules/staking and https://docs.cosmos.network/v0.50/build/modules/slashing.\n\nCometBFT is designed to be configurable by chains, and implements many different configuration variables and parameters to allow chain developers, validators, node operators, and chain participants to customize it best to their use case. \n\nAs more chains adopt the Interchain Stack for new and cutting-edge use cases, the CometBFT team recommends that all chains regularly evaluate their consensus parameters and configurations to ensure they meet the needs of their ecosystem as their networks mature. \n\nA Github Security Advisory for this issue is available in the [CometBFT repository](https://github.com/cometbft/cometbft/security/advisories/GHSA-555p-m4v6-cqxv). For more information about CometBFT, see https://docs.cometbft.com/. \n\nThis issue was reported to the Cosmos Bug Bounty Program on HackerOne on February 15, 2024. If you believe you have found a bug in the Interchain Stack or would like to contribute to the program by reporting a bug, please see https://hackerone.com/cosmos.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2024/05/GHSA-6wqp-7g94-f69j/GHSA-6wqp-7g94-f69j.json b/advisories/github-reviewed/2024/05/GHSA-6wqp-7g94-f69j/GHSA-6wqp-7g94-f69j.json index 2bc75d303d2..f86f42387cd 100644 --- a/advisories/github-reviewed/2024/05/GHSA-6wqp-7g94-f69j/GHSA-6wqp-7g94-f69j.json +++ b/advisories/github-reviewed/2024/05/GHSA-6wqp-7g94-f69j/GHSA-6wqp-7g94-f69j.json @@ -3,9 +3,7 @@ "id": "GHSA-6wqp-7g94-f69j", "modified": "2024-05-21T18:26:46Z", "published": "2024-05-21T18:26:46Z", - "aliases": [ - - ], + "aliases": [], "summary": "sensiolabs/connect has a Cross-Site Request Forgery Vulnerability", "details": "Versions of sensiolabs/connect prior to 4.2.3 are affected by a Cross-Site Request Forgery (CSRF) vulnerability due to the absence of the state parameter in OAuth requests. The lack of proper state parameter handling exposes applications to CSRF attacks during the OAuth authentication flow.", "severity": [ diff --git a/advisories/github-reviewed/2024/09/GHSA-g5xx-c4hv-9ccc/GHSA-g5xx-c4hv-9ccc.json b/advisories/github-reviewed/2024/09/GHSA-g5xx-c4hv-9ccc/GHSA-g5xx-c4hv-9ccc.json index 94349ec5911..5a13abf6d68 100644 --- a/advisories/github-reviewed/2024/09/GHSA-g5xx-c4hv-9ccc/GHSA-g5xx-c4hv-9ccc.json +++ b/advisories/github-reviewed/2024/09/GHSA-g5xx-c4hv-9ccc/GHSA-g5xx-c4hv-9ccc.json @@ -3,9 +3,7 @@ "id": "GHSA-g5xx-c4hv-9ccc", "modified": "2024-11-18T16:27:09Z", "published": "2024-09-03T20:03:08Z", - "aliases": [ - - ], + "aliases": [], "summary": "CometBFT's state syncing validator from malicious node may lead to a chain split", "details": "**Name**: ASA-2024-009: State syncing validator from malicious node may lead to a chain split\n**Component**: CometBFT\n**Criticality**: Medium ([ACMv1.2](https://github.com/interchainio/security/blob/main/resources/CLASSIFICATION_MATRIX.md): I:Moderate; L: Possible)\n**Affected versions**: >= 0.34.0, <= 0.34.33, >=0.37.0, <= 0.37.10, >= 0.38.0, <= 0.38.11\n\n### Summary\n\nThe state sync protocol retrieves a snapshot of the application and installs it in a fresh node. In order for this node to be ready to run consensus and block sync from the installed snapshot height, we also need to install a valid `State` in the node, which is the starting state from which it is able to validate new blocks and append them to the blockchain.\n\nThe `State` object used by state sync is computed using the light client protocol, which retrieves information about committed blocks from at least two RPC endpoints. The light client protocol performs several state validations and, in particular, compares the state provided by different RPC endpoints, looking for inconsistencies.\n\nThe `State` object contains, among other fields, a `Validators` field which stores the current validator set. A validator set is a list of validator addresses, public keys and associated voting powers, one per validator. It also stores, for historical reasons, the state of the proposer selection algorithm, in the form of the `ProposerPriority` field associated with each `Validator`.\n\nWhile the light client is able to validate the `ValidatorSet` retrieved from RPC endpoints, this validation does not include the `ProposerPriority` field associated with each `Validator`. As a result, when state sync adopts RPC endpoints that, for unknown reasons, provide an invalid state of the proposer selection algorithm, the node will not be able to properly run the consensus protocol, as their local view of which validator is the proposer of a given round and height will disagree with the views of the correct validators. If an increasing number of validators state sync using RPC endpoints with invalid states, the network eventually halts.\n\n### Patches\n\nRelease versions 0.34.34, 0.37.11, and 0.38.12 include a patch to address this issue.\n\nIn the patched versions, the light client protocol compares the `ProposerPriority` fields of the `ValidatorSet` instances retrieved from the RPC endpoints configured for state sync. If they differ, the computed `State` object is considered invalid and state sync will fail with an error.\n\n### Workarounds\n\nThe issue is observed when validators run state sync using RPC nodes that are malicious or report invalid states for the proposer selection algorithm.\n\nIt is worth noting that non-malicious nodes running upstream software should never report an invalid state for the proposer selection algorithm. This situation may result from the adoption of nodes with customized code or which had their state, stored in local databases, manually updated.\n\nWhen the network public's RPC endpoints have an invalid state for the proposer election algorithm, there, new validators should refrain from using state sync for bootstrapping or be sure that they configure for state sync RPC endpoints with a valid state of the proposer election algorithm.\n\nA validator with an invalid state for the proposer selection algorithm will reject most of the proposed blocks and will have the network rejecting blocks it has proposed. It is also possible to manually compare the state of the proposer election algorithm of nodes by comparing the outputs of the `/validators?height=_` RPC endpoints. The outputs must fully match, including the ProposerPriority field associated with each validator. \n\n\n### References\n\n* [State Sync documentation](https://docs.cometbft.com/v0.38/core/state-sync)\n\nThis issue was reported to the Cosmos Bug Bounty Program on HackerOne on 12/08/24. If you believe you have found a bug in the Interchain Stack or would like to contribute to the program by reporting a bug, please see [https://hackerone.com/cosmos](https://hackerone.com/cosmos).\n\nIf you have questions about Interchain security efforts, please reach out to our official communication channel at [security@interchain.io](mailto:security@interchain.io).\n\nFor more information about CometBFT, please see [https://docs.cometbft.com/](https://docs.cometbft.com/).\n\nFor more information about the Interchain Foundation’s engagement with Amulet, please see [https://github.com/interchainio/security](https://github.com/interchainio/security).\n", "severity": [ @@ -138,9 +136,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2024-09-03T20:03:08Z", diff --git a/advisories/unreviewed/2021/11/GHSA-8mp4-2m2j-25xx/GHSA-8mp4-2m2j-25xx.json b/advisories/unreviewed/2021/11/GHSA-8mp4-2m2j-25xx/GHSA-8mp4-2m2j-25xx.json index 48247c60e7d..d6c6521f99d 100644 --- a/advisories/unreviewed/2021/11/GHSA-8mp4-2m2j-25xx/GHSA-8mp4-2m2j-25xx.json +++ b/advisories/unreviewed/2021/11/GHSA-8mp4-2m2j-25xx/GHSA-8mp4-2m2j-25xx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/11/GHSA-p3gq-xgj7-pfr7/GHSA-p3gq-xgj7-pfr7.json b/advisories/unreviewed/2021/11/GHSA-p3gq-xgj7-pfr7/GHSA-p3gq-xgj7-pfr7.json index 76b013deb1d..5c62774429f 100644 --- a/advisories/unreviewed/2021/11/GHSA-p3gq-xgj7-pfr7/GHSA-p3gq-xgj7-pfr7.json +++ b/advisories/unreviewed/2021/11/GHSA-p3gq-xgj7-pfr7/GHSA-p3gq-xgj7-pfr7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-7224-894f-v4pr/GHSA-7224-894f-v4pr.json b/advisories/unreviewed/2022/01/GHSA-7224-894f-v4pr/GHSA-7224-894f-v4pr.json index 901115e6103..7e7368a580d 100644 --- a/advisories/unreviewed/2022/01/GHSA-7224-894f-v4pr/GHSA-7224-894f-v4pr.json +++ b/advisories/unreviewed/2022/01/GHSA-7224-894f-v4pr/GHSA-7224-894f-v4pr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/02/GHSA-f9mp-88cg-ffch/GHSA-f9mp-88cg-ffch.json b/advisories/unreviewed/2022/02/GHSA-f9mp-88cg-ffch/GHSA-f9mp-88cg-ffch.json index 7f845787454..48d2f8a00a4 100644 --- a/advisories/unreviewed/2022/02/GHSA-f9mp-88cg-ffch/GHSA-f9mp-88cg-ffch.json +++ b/advisories/unreviewed/2022/02/GHSA-f9mp-88cg-ffch/GHSA-f9mp-88cg-ffch.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-v5vh-gq27-ch94/GHSA-v5vh-gq27-ch94.json b/advisories/unreviewed/2022/02/GHSA-v5vh-gq27-ch94/GHSA-v5vh-gq27-ch94.json index cdba81a324f..8c19cd2231b 100644 --- a/advisories/unreviewed/2022/02/GHSA-v5vh-gq27-ch94/GHSA-v5vh-gq27-ch94.json +++ b/advisories/unreviewed/2022/02/GHSA-v5vh-gq27-ch94/GHSA-v5vh-gq27-ch94.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2264-q7fx-w4x7/GHSA-2264-q7fx-w4x7.json b/advisories/unreviewed/2022/05/GHSA-2264-q7fx-w4x7/GHSA-2264-q7fx-w4x7.json index b864485b4f8..488dd14e5df 100644 --- a/advisories/unreviewed/2022/05/GHSA-2264-q7fx-w4x7/GHSA-2264-q7fx-w4x7.json +++ b/advisories/unreviewed/2022/05/GHSA-2264-q7fx-w4x7/GHSA-2264-q7fx-w4x7.json @@ -7,12 +7,8 @@ "CVE-2011-3976" ], "details": "Stack-based buffer overflow in AmmSoft ScriptFTP 3.3 allows remote FTP servers to execute arbitrary code via a long filename in a response to a LIST command, as demonstrated using (1) GETLIST or (2) GETFILE in a ScriptFTP script.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-22xj-68w7-6jjx/GHSA-22xj-68w7-6jjx.json b/advisories/unreviewed/2022/05/GHSA-22xj-68w7-6jjx/GHSA-22xj-68w7-6jjx.json index 620f6b3dfbd..4ccbc21d718 100644 --- a/advisories/unreviewed/2022/05/GHSA-22xj-68w7-6jjx/GHSA-22xj-68w7-6jjx.json +++ b/advisories/unreviewed/2022/05/GHSA-22xj-68w7-6jjx/GHSA-22xj-68w7-6jjx.json @@ -7,12 +7,8 @@ "CVE-2011-3830" ], "details": "Cross-site scripting (XSS) vulnerability in search.php in Support Incident Tracker (aka SiT!) 3.65 allows remote attackers to inject arbitrary web script or HTML via the search_string parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2435-5x6f-gxhq/GHSA-2435-5x6f-gxhq.json b/advisories/unreviewed/2022/05/GHSA-2435-5x6f-gxhq/GHSA-2435-5x6f-gxhq.json index 854cbbf4fba..313cd6e6873 100644 --- a/advisories/unreviewed/2022/05/GHSA-2435-5x6f-gxhq/GHSA-2435-5x6f-gxhq.json +++ b/advisories/unreviewed/2022/05/GHSA-2435-5x6f-gxhq/GHSA-2435-5x6f-gxhq.json @@ -7,12 +7,8 @@ "CVE-2011-4113" ], "details": "SQL injection vulnerability in the Views module before 6.x-2.13 for Drupal allows remote attackers to execute arbitrary SQL commands via vectors related to \"filters/arguments on certain types of views with specific configurations of arguments.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-272x-wj83-g7hx/GHSA-272x-wj83-g7hx.json b/advisories/unreviewed/2022/05/GHSA-272x-wj83-g7hx/GHSA-272x-wj83-g7hx.json index 2dbb2bd5aa5..238d2bf6db9 100644 --- a/advisories/unreviewed/2022/05/GHSA-272x-wj83-g7hx/GHSA-272x-wj83-g7hx.json +++ b/advisories/unreviewed/2022/05/GHSA-272x-wj83-g7hx/GHSA-272x-wj83-g7hx.json @@ -7,12 +7,8 @@ "CVE-2011-3008" ], "details": "The default configuration of Avaya Secure Access Link (SAL) Gateway 1.5, 1.8, and 2.0 contains certain domain names in the Secondary Core Server URL and Secondary Remote Server URL fields, which allows remote attackers to obtain sensitive information by leveraging administrative access to these domain names, as demonstrated by alarm and log information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-27wr-6xhx-m89g/GHSA-27wr-6xhx-m89g.json b/advisories/unreviewed/2022/05/GHSA-27wr-6xhx-m89g/GHSA-27wr-6xhx-m89g.json index 2738a8fc617..04f983354b3 100644 --- a/advisories/unreviewed/2022/05/GHSA-27wr-6xhx-m89g/GHSA-27wr-6xhx-m89g.json +++ b/advisories/unreviewed/2022/05/GHSA-27wr-6xhx-m89g/GHSA-27wr-6xhx-m89g.json @@ -7,12 +7,8 @@ "CVE-2010-5145" ], "details": "The Filtering Service in Websense Web Security and Web Filter before 6.3.1 Hotfix 136 and 7.x before 7.1.1 on Windows allows remote attackers to cause a denial of service (filtering outage) via a crafted sequence of characters in a URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-293p-8p8x-wx39/GHSA-293p-8p8x-wx39.json b/advisories/unreviewed/2022/05/GHSA-293p-8p8x-wx39/GHSA-293p-8p8x-wx39.json index bfc48ac77e1..fee8c5f224c 100644 --- a/advisories/unreviewed/2022/05/GHSA-293p-8p8x-wx39/GHSA-293p-8p8x-wx39.json +++ b/advisories/unreviewed/2022/05/GHSA-293p-8p8x-wx39/GHSA-293p-8p8x-wx39.json @@ -7,12 +7,8 @@ "CVE-2011-4751" ], "details": "SmarterTools SmarterStats 6.2.4100 generates web pages containing external links in response to GET requests with query strings for frmGettingStarted.aspx, which makes it easier for remote attackers to obtain sensitive information by reading (1) web-server access logs or (2) web-server Referer logs, related to a \"cross-domain Referer leakage\" issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-29mx-gmwr-vhpf/GHSA-29mx-gmwr-vhpf.json b/advisories/unreviewed/2022/05/GHSA-29mx-gmwr-vhpf/GHSA-29mx-gmwr-vhpf.json index 086aa5a59a0..ecc2cf4d78b 100644 --- a/advisories/unreviewed/2022/05/GHSA-29mx-gmwr-vhpf/GHSA-29mx-gmwr-vhpf.json +++ b/advisories/unreviewed/2022/05/GHSA-29mx-gmwr-vhpf/GHSA-29mx-gmwr-vhpf.json @@ -7,12 +7,8 @@ "CVE-2011-5132" ], "details": "Cross-site scripting (XSS) vulnerability in MyBB before 1.6.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to \"usernames via AJAX.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2cwm-8g9v-gmr9/GHSA-2cwm-8g9v-gmr9.json b/advisories/unreviewed/2022/05/GHSA-2cwm-8g9v-gmr9/GHSA-2cwm-8g9v-gmr9.json index 56edf670d88..67333d80f00 100644 --- a/advisories/unreviewed/2022/05/GHSA-2cwm-8g9v-gmr9/GHSA-2cwm-8g9v-gmr9.json +++ b/advisories/unreviewed/2022/05/GHSA-2cwm-8g9v-gmr9/GHSA-2cwm-8g9v-gmr9.json @@ -7,12 +7,8 @@ "CVE-2011-3298" ], "details": "Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.3), 8.0 before 8.0(5.24), 8.1 before 8.1(2.50), 8.2 before 8.2(5), 8.3 before 8.3(2.18), 8.4 before 8.4(1.10), and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7) allow remote attackers to bypass authentication via a crafted TACACS+ reply, aka Bug IDs CSCto40365 and CSCto74274.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2f53-hr63-f79f/GHSA-2f53-hr63-f79f.json b/advisories/unreviewed/2022/05/GHSA-2f53-hr63-f79f/GHSA-2f53-hr63-f79f.json index 846250f4a86..77cd76b2268 100644 --- a/advisories/unreviewed/2022/05/GHSA-2f53-hr63-f79f/GHSA-2f53-hr63-f79f.json +++ b/advisories/unreviewed/2022/05/GHSA-2f53-hr63-f79f/GHSA-2f53-hr63-f79f.json @@ -7,12 +7,8 @@ "CVE-2010-5088" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in SilverStripe 2.3.x before 2.3.9 and 2.4.x before 2.4.3 allow remote attackers to hijack the authentication of administrators via destructive controller actions, a different vulnerability than CVE-2010-5087.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2g22-24qq-rqw9/GHSA-2g22-24qq-rqw9.json b/advisories/unreviewed/2022/05/GHSA-2g22-24qq-rqw9/GHSA-2g22-24qq-rqw9.json index 4360b99b892..341d0ba83e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-2g22-24qq-rqw9/GHSA-2g22-24qq-rqw9.json +++ b/advisories/unreviewed/2022/05/GHSA-2g22-24qq-rqw9/GHSA-2g22-24qq-rqw9.json @@ -7,12 +7,8 @@ "CVE-2011-3259" ], "details": "The kernel in Apple iOS before 5 and Apple TV before 4.4 does not properly recover memory allocated for incomplete TCP connections, which allows remote attackers to cause a denial of service (resource consumption) by making many connection attempts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2g79-xp8w-xhhm/GHSA-2g79-xp8w-xhhm.json b/advisories/unreviewed/2022/05/GHSA-2g79-xp8w-xhhm/GHSA-2g79-xp8w-xhhm.json index cf6072f9cb6..6b62436b766 100644 --- a/advisories/unreviewed/2022/05/GHSA-2g79-xp8w-xhhm/GHSA-2g79-xp8w-xhhm.json +++ b/advisories/unreviewed/2022/05/GHSA-2g79-xp8w-xhhm/GHSA-2g79-xp8w-xhhm.json @@ -7,12 +7,8 @@ "CVE-2011-3498" ], "details": "Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2gph-8pg4-626q/GHSA-2gph-8pg4-626q.json b/advisories/unreviewed/2022/05/GHSA-2gph-8pg4-626q/GHSA-2gph-8pg4-626q.json index 45713938dc0..dd80db56c70 100644 --- a/advisories/unreviewed/2022/05/GHSA-2gph-8pg4-626q/GHSA-2gph-8pg4-626q.json +++ b/advisories/unreviewed/2022/05/GHSA-2gph-8pg4-626q/GHSA-2gph-8pg4-626q.json @@ -7,12 +7,8 @@ "CVE-2011-5082" ], "details": "Cross-site scripting (XSS) vulnerability in the s2Member Pro plugin before 111220 for WordPress allows remote attackers to inject arbitrary web script or HTML via the s2member_pro_authnet_checkout[coupon] parameter (aka Coupon Code field).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2h23-c973-x63q/GHSA-2h23-c973-x63q.json b/advisories/unreviewed/2022/05/GHSA-2h23-c973-x63q/GHSA-2h23-c973-x63q.json index 5fceb66f8b7..31afe0675e7 100644 --- a/advisories/unreviewed/2022/05/GHSA-2h23-c973-x63q/GHSA-2h23-c973-x63q.json +++ b/advisories/unreviewed/2022/05/GHSA-2h23-c973-x63q/GHSA-2h23-c973-x63q.json @@ -7,12 +7,8 @@ "CVE-2011-4782" ], "details": "Cross-site scripting (XSS) vulnerability in libraries/config/ConfigFile.class.php in the setup interface in phpMyAdmin 3.4.x before 3.4.9 allows remote attackers to inject arbitrary web script or HTML via the host parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2hx9-gcpq-rv3h/GHSA-2hx9-gcpq-rv3h.json b/advisories/unreviewed/2022/05/GHSA-2hx9-gcpq-rv3h/GHSA-2hx9-gcpq-rv3h.json index 7790975f1a6..6f4e4d1707a 100644 --- a/advisories/unreviewed/2022/05/GHSA-2hx9-gcpq-rv3h/GHSA-2hx9-gcpq-rv3h.json +++ b/advisories/unreviewed/2022/05/GHSA-2hx9-gcpq-rv3h/GHSA-2hx9-gcpq-rv3h.json @@ -7,12 +7,8 @@ "CVE-2011-3491" ], "details": "Heap-based buffer overflow in Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a negative Content-Length field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2j6r-9hxr-mp8g/GHSA-2j6r-9hxr-mp8g.json b/advisories/unreviewed/2022/05/GHSA-2j6r-9hxr-mp8g/GHSA-2j6r-9hxr-mp8g.json index 2ed690314fe..f09d7963672 100644 --- a/advisories/unreviewed/2022/05/GHSA-2j6r-9hxr-mp8g/GHSA-2j6r-9hxr-mp8g.json +++ b/advisories/unreviewed/2022/05/GHSA-2j6r-9hxr-mp8g/GHSA-2j6r-9hxr-mp8g.json @@ -7,12 +7,8 @@ "CVE-2011-4035" ], "details": "Cross-site scripting (XSS) vulnerability in Schneider Electric Vijeo Historian 4.30 and earlier, CitectHistorian 4.30 and earlier, and CitectSCADAReports 4.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2jg7-33q4-4847/GHSA-2jg7-33q4-4847.json b/advisories/unreviewed/2022/05/GHSA-2jg7-33q4-4847/GHSA-2jg7-33q4-4847.json index d459d5f6a83..82a8c28c4e4 100644 --- a/advisories/unreviewed/2022/05/GHSA-2jg7-33q4-4847/GHSA-2jg7-33q4-4847.json +++ b/advisories/unreviewed/2022/05/GHSA-2jg7-33q4-4847/GHSA-2jg7-33q4-4847.json @@ -7,12 +7,8 @@ "CVE-2010-4953" ], "details": "Unspecified vulnerability in the JW Calendar (jw_calendar) extension 1.3.20 and earlier for TYPO3 allows remote attackers to execute arbitrary code via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2m4g-v7v6-qq56/GHSA-2m4g-v7v6-qq56.json b/advisories/unreviewed/2022/05/GHSA-2m4g-v7v6-qq56/GHSA-2m4g-v7v6-qq56.json index bed8314a7d4..7aa4f647eb1 100644 --- a/advisories/unreviewed/2022/05/GHSA-2m4g-v7v6-qq56/GHSA-2m4g-v7v6-qq56.json +++ b/advisories/unreviewed/2022/05/GHSA-2m4g-v7v6-qq56/GHSA-2m4g-v7v6-qq56.json @@ -7,12 +7,8 @@ "CVE-2010-4994" ], "details": "SQL injection vulnerability in the Jobs Pro component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the detailed_results parameter to search_jobs.html.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2m76-xr87-v8p2/GHSA-2m76-xr87-v8p2.json b/advisories/unreviewed/2022/05/GHSA-2m76-xr87-v8p2/GHSA-2m76-xr87-v8p2.json index 0f44df1ba84..182ee7b415e 100644 --- a/advisories/unreviewed/2022/05/GHSA-2m76-xr87-v8p2/GHSA-2m76-xr87-v8p2.json +++ b/advisories/unreviewed/2022/05/GHSA-2m76-xr87-v8p2/GHSA-2m76-xr87-v8p2.json @@ -7,12 +7,8 @@ "CVE-2011-3434" ], "details": "The WiFi component in Apple iOS before 5 stores WiFi credentials in an unspecified file, which makes it easier for remote attackers to obtain sensitive information via a crafted application.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2pp8-pw5r-cpxh/GHSA-2pp8-pw5r-cpxh.json b/advisories/unreviewed/2022/05/GHSA-2pp8-pw5r-cpxh/GHSA-2pp8-pw5r-cpxh.json index 99bd87e951b..913b2d915d0 100644 --- a/advisories/unreviewed/2022/05/GHSA-2pp8-pw5r-cpxh/GHSA-2pp8-pw5r-cpxh.json +++ b/advisories/unreviewed/2022/05/GHSA-2pp8-pw5r-cpxh/GHSA-2pp8-pw5r-cpxh.json @@ -7,12 +7,8 @@ "CVE-2011-3245" ], "details": "The Keyboards component in Apple iOS before 5 displays the final character of an entered password during a subsequent use of a keyboard, which allows physically proximate attackers to obtain sensitive information by reading this character.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2q36-p4gw-j822/GHSA-2q36-p4gw-j822.json b/advisories/unreviewed/2022/05/GHSA-2q36-p4gw-j822/GHSA-2q36-p4gw-j822.json index 6735d1a0344..002179ed78e 100644 --- a/advisories/unreviewed/2022/05/GHSA-2q36-p4gw-j822/GHSA-2q36-p4gw-j822.json +++ b/advisories/unreviewed/2022/05/GHSA-2q36-p4gw-j822/GHSA-2q36-p4gw-j822.json @@ -7,12 +7,8 @@ "CVE-2011-3430" ], "details": "The Settings component in Apple iOS before 5, when a configuration profile is used for a locale other than English, does not properly implement localization, which makes it easier for attackers to have an unspecified impact by leveraging incorrect configuration display.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2qvh-xj45-rvjq/GHSA-2qvh-xj45-rvjq.json b/advisories/unreviewed/2022/05/GHSA-2qvh-xj45-rvjq/GHSA-2qvh-xj45-rvjq.json index f0484301903..2e6223903de 100644 --- a/advisories/unreviewed/2022/05/GHSA-2qvh-xj45-rvjq/GHSA-2qvh-xj45-rvjq.json +++ b/advisories/unreviewed/2022/05/GHSA-2qvh-xj45-rvjq/GHSA-2qvh-xj45-rvjq.json @@ -7,12 +7,8 @@ "CVE-2011-2977" ], "details": "Bugzilla 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 on Windows does not delete the temporary files associated with uploaded attachments, which allows local users to obtain sensitive information by reading these files. NOTE: this issue exists because of a regression in 3.6.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2r6w-9948-hmjf/GHSA-2r6w-9948-hmjf.json b/advisories/unreviewed/2022/05/GHSA-2r6w-9948-hmjf/GHSA-2r6w-9948-hmjf.json index 25517e42174..658e45455c0 100644 --- a/advisories/unreviewed/2022/05/GHSA-2r6w-9948-hmjf/GHSA-2r6w-9948-hmjf.json +++ b/advisories/unreviewed/2022/05/GHSA-2r6w-9948-hmjf/GHSA-2r6w-9948-hmjf.json @@ -7,12 +7,8 @@ "CVE-2011-3760" ], "details": "Nucleus 3.61 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xmlrpc/api_nucleus.inc.php and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2rh5-72v2-vp74/GHSA-2rh5-72v2-vp74.json b/advisories/unreviewed/2022/05/GHSA-2rh5-72v2-vp74/GHSA-2rh5-72v2-vp74.json index eee60d26547..b0796f581e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-2rh5-72v2-vp74/GHSA-2rh5-72v2-vp74.json +++ b/advisories/unreviewed/2022/05/GHSA-2rh5-72v2-vp74/GHSA-2rh5-72v2-vp74.json @@ -7,12 +7,8 @@ "CVE-2011-3503" ], "details": "Untrusted search path vulnerability in eSignal 10.6.2425.1208, and possibly other versions, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse JRS_UT.dll that is located in the same folder as a .quo (QUOTE) file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2rqj-66p3-64g9/GHSA-2rqj-66p3-64g9.json b/advisories/unreviewed/2022/05/GHSA-2rqj-66p3-64g9/GHSA-2rqj-66p3-64g9.json index abdfd5960dd..346ab76584b 100644 --- a/advisories/unreviewed/2022/05/GHSA-2rqj-66p3-64g9/GHSA-2rqj-66p3-64g9.json +++ b/advisories/unreviewed/2022/05/GHSA-2rqj-66p3-64g9/GHSA-2rqj-66p3-64g9.json @@ -7,12 +7,8 @@ "CVE-2010-4921" ], "details": "SQL injection vulnerability in inc_pollingboothmanager.asp in DMXReady Polling Booth Manager allows remote attackers to execute arbitrary SQL commands via the QuestionID parameter in a results action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2whx-965j-8c7g/GHSA-2whx-965j-8c7g.json b/advisories/unreviewed/2022/05/GHSA-2whx-965j-8c7g/GHSA-2whx-965j-8c7g.json index e9982a58a3e..618d5cf1be3 100644 --- a/advisories/unreviewed/2022/05/GHSA-2whx-965j-8c7g/GHSA-2whx-965j-8c7g.json +++ b/advisories/unreviewed/2022/05/GHSA-2whx-965j-8c7g/GHSA-2whx-965j-8c7g.json @@ -7,12 +7,8 @@ "CVE-2011-3987" ], "details": "dtsoftbus01.sys in DAEMON Tools Lite before 4.41.3, Pro Standard before 4.41.0315, and Pro Advanced before 4.41.0315 allows local users to cause a denial of service (system crash) via an invalid DeviceIoControl request to \\\\.\\dtsoftbusctl.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2wvp-q72m-cfq8/GHSA-2wvp-q72m-cfq8.json b/advisories/unreviewed/2022/05/GHSA-2wvp-q72m-cfq8/GHSA-2wvp-q72m-cfq8.json index 6fa42a8c9ff..c6ba8139ba7 100644 --- a/advisories/unreviewed/2022/05/GHSA-2wvp-q72m-cfq8/GHSA-2wvp-q72m-cfq8.json +++ b/advisories/unreviewed/2022/05/GHSA-2wvp-q72m-cfq8/GHSA-2wvp-q72m-cfq8.json @@ -7,12 +7,8 @@ "CVE-2011-5108" ], "details": "Cross-site scripting (XSS) vulnerability in config.php in AdaptCMS 2.0.0 and 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2xrf-7rp5-6c2j/GHSA-2xrf-7rp5-6c2j.json b/advisories/unreviewed/2022/05/GHSA-2xrf-7rp5-6c2j/GHSA-2xrf-7rp5-6c2j.json index 975d959cd82..3626e21c992 100644 --- a/advisories/unreviewed/2022/05/GHSA-2xrf-7rp5-6c2j/GHSA-2xrf-7rp5-6c2j.json +++ b/advisories/unreviewed/2022/05/GHSA-2xrf-7rp5-6c2j/GHSA-2xrf-7rp5-6c2j.json @@ -7,12 +7,8 @@ "CVE-2011-2143" ], "details": "IBM Datacap Taskmaster Capture 8.0.1 before FP1, when Windows Authentication is enabled, allows remote attackers to obtain login access by using an incorrect password in conjunction with an account name from a different domain.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2xxx-mh72-rq2w/GHSA-2xxx-mh72-rq2w.json b/advisories/unreviewed/2022/05/GHSA-2xxx-mh72-rq2w/GHSA-2xxx-mh72-rq2w.json index d4b1e764f90..f29347f642b 100644 --- a/advisories/unreviewed/2022/05/GHSA-2xxx-mh72-rq2w/GHSA-2xxx-mh72-rq2w.json +++ b/advisories/unreviewed/2022/05/GHSA-2xxx-mh72-rq2w/GHSA-2xxx-mh72-rq2w.json @@ -7,12 +7,8 @@ "CVE-2011-2510" ], "details": "Cross-site scripting (XSS) vulnerability in the RSS embedding feature in DokuWiki before 2011-05-25a Rincewind allows remote attackers to inject arbitrary web script or HTML via a link.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-32c6-pxw7-2477/GHSA-32c6-pxw7-2477.json b/advisories/unreviewed/2022/05/GHSA-32c6-pxw7-2477/GHSA-32c6-pxw7-2477.json index ad12a8d9434..1847b4ea932 100644 --- a/advisories/unreviewed/2022/05/GHSA-32c6-pxw7-2477/GHSA-32c6-pxw7-2477.json +++ b/advisories/unreviewed/2022/05/GHSA-32c6-pxw7-2477/GHSA-32c6-pxw7-2477.json @@ -7,12 +7,8 @@ "CVE-2010-4883" ], "details": "Cross-site scripting (XSS) vulnerability in manager/index.php in MODx Revolution 2.0.2-pl allows remote attackers to inject arbitrary web script or HTML via the modhash parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-32m3-95vg-gvx5/GHSA-32m3-95vg-gvx5.json b/advisories/unreviewed/2022/05/GHSA-32m3-95vg-gvx5/GHSA-32m3-95vg-gvx5.json index 4392de29677..b153029aa75 100644 --- a/advisories/unreviewed/2022/05/GHSA-32m3-95vg-gvx5/GHSA-32m3-95vg-gvx5.json +++ b/advisories/unreviewed/2022/05/GHSA-32m3-95vg-gvx5/GHSA-32m3-95vg-gvx5.json @@ -7,12 +7,8 @@ "CVE-2010-4809" ], "details": "SQL injection vulnerability in index.php in DBSite 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-342v-j2x2-9wrp/GHSA-342v-j2x2-9wrp.json b/advisories/unreviewed/2022/05/GHSA-342v-j2x2-9wrp/GHSA-342v-j2x2-9wrp.json index b86f4a9f6ee..780033c3231 100644 --- a/advisories/unreviewed/2022/05/GHSA-342v-j2x2-9wrp/GHSA-342v-j2x2-9wrp.json +++ b/advisories/unreviewed/2022/05/GHSA-342v-j2x2-9wrp/GHSA-342v-j2x2-9wrp.json @@ -7,12 +7,8 @@ "CVE-2010-4914" ], "details": "PHP remote file inclusion vulnerability in tools/phpmailer/class.phpmailer.php in PHP Classifieds 7.3 allows remote attackers to execute arbitrary PHP code via a URL in the lang_path parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-353j-8f6q-g2fq/GHSA-353j-8f6q-g2fq.json b/advisories/unreviewed/2022/05/GHSA-353j-8f6q-g2fq/GHSA-353j-8f6q-g2fq.json index e0c4774e9aa..df8c495c703 100644 --- a/advisories/unreviewed/2022/05/GHSA-353j-8f6q-g2fq/GHSA-353j-8f6q-g2fq.json +++ b/advisories/unreviewed/2022/05/GHSA-353j-8f6q-g2fq/GHSA-353j-8f6q-g2fq.json @@ -7,12 +7,8 @@ "CVE-2011-2903" ], "details": "Heap-based buffer overflow in tcptrack before 1.4.2 might allow attackers to execute arbitrary code via a long command line argument. NOTE: this is only a vulnerability in limited scenarios in which tcptrack is \"configured as a handler for other applications.\" This issue might not qualify for inclusion in CVE.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-354h-hfgh-65p8/GHSA-354h-hfgh-65p8.json b/advisories/unreviewed/2022/05/GHSA-354h-hfgh-65p8/GHSA-354h-hfgh-65p8.json index cc27e3f9c45..d29397c5af0 100644 --- a/advisories/unreviewed/2022/05/GHSA-354h-hfgh-65p8/GHSA-354h-hfgh-65p8.json +++ b/advisories/unreviewed/2022/05/GHSA-354h-hfgh-65p8/GHSA-354h-hfgh-65p8.json @@ -7,12 +7,8 @@ "CVE-2011-4465" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Lotus Mobile Connect (LMC) 6.1.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to a hidden redirect URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-357w-7wgc-xpmq/GHSA-357w-7wgc-xpmq.json b/advisories/unreviewed/2022/05/GHSA-357w-7wgc-xpmq/GHSA-357w-7wgc-xpmq.json index f0e4f690694..06e0e085faf 100644 --- a/advisories/unreviewed/2022/05/GHSA-357w-7wgc-xpmq/GHSA-357w-7wgc-xpmq.json +++ b/advisories/unreviewed/2022/05/GHSA-357w-7wgc-xpmq/GHSA-357w-7wgc-xpmq.json @@ -7,12 +7,8 @@ "CVE-2010-5017" ], "details": "SQL injection vulnerability in stats.php in Elite Gaming Ladders 3.0 allows remote attackers to execute arbitrary SQL commands via the account parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-35cm-vgq9-v4xx/GHSA-35cm-vgq9-v4xx.json b/advisories/unreviewed/2022/05/GHSA-35cm-vgq9-v4xx/GHSA-35cm-vgq9-v4xx.json index 99546eb352a..3bf8d49babf 100644 --- a/advisories/unreviewed/2022/05/GHSA-35cm-vgq9-v4xx/GHSA-35cm-vgq9-v4xx.json +++ b/advisories/unreviewed/2022/05/GHSA-35cm-vgq9-v4xx/GHSA-35cm-vgq9-v4xx.json @@ -7,12 +7,8 @@ "CVE-2011-4560" ], "details": "Cross-site scripting (XSS) vulnerability in the Petition Node module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors related to signing a petition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-36fg-2x3m-m49m/GHSA-36fg-2x3m-m49m.json b/advisories/unreviewed/2022/05/GHSA-36fg-2x3m-m49m/GHSA-36fg-2x3m-m49m.json index bf87405790e..d571d5b9cf7 100644 --- a/advisories/unreviewed/2022/05/GHSA-36fg-2x3m-m49m/GHSA-36fg-2x3m-m49m.json +++ b/advisories/unreviewed/2022/05/GHSA-36fg-2x3m-m49m/GHSA-36fg-2x3m-m49m.json @@ -7,12 +7,8 @@ "CVE-2011-2650" ], "details": "Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via a crafted pattern name that is included in an RPM info display.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-385c-m8p7-qvr3/GHSA-385c-m8p7-qvr3.json b/advisories/unreviewed/2022/05/GHSA-385c-m8p7-qvr3/GHSA-385c-m8p7-qvr3.json index 3b1cc647025..920319f31e4 100644 --- a/advisories/unreviewed/2022/05/GHSA-385c-m8p7-qvr3/GHSA-385c-m8p7-qvr3.json +++ b/advisories/unreviewed/2022/05/GHSA-385c-m8p7-qvr3/GHSA-385c-m8p7-qvr3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3938-v8r3-qpfh/GHSA-3938-v8r3-qpfh.json b/advisories/unreviewed/2022/05/GHSA-3938-v8r3-qpfh/GHSA-3938-v8r3-qpfh.json index d53848ae1a6..53bc1d63cf2 100644 --- a/advisories/unreviewed/2022/05/GHSA-3938-v8r3-qpfh/GHSA-3938-v8r3-qpfh.json +++ b/advisories/unreviewed/2022/05/GHSA-3938-v8r3-qpfh/GHSA-3938-v8r3-qpfh.json @@ -7,12 +7,8 @@ "CVE-2011-5099" ], "details": "SQL injection vulnerability in helper/popup.php in the ccNewsletter (mod_ccnewsletter) component 1.0.7 through 1.0.9 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-39vx-jv7h-w8ch/GHSA-39vx-jv7h-w8ch.json b/advisories/unreviewed/2022/05/GHSA-39vx-jv7h-w8ch/GHSA-39vx-jv7h-w8ch.json index 8520dd9192b..104d8be4064 100644 --- a/advisories/unreviewed/2022/05/GHSA-39vx-jv7h-w8ch/GHSA-39vx-jv7h-w8ch.json +++ b/advisories/unreviewed/2022/05/GHSA-39vx-jv7h-w8ch/GHSA-39vx-jv7h-w8ch.json @@ -7,12 +7,8 @@ "CVE-2011-3263" ], "details": "zabbix_agentd in Zabbix before 1.8.6 and 1.9.x before 1.9.4 allows context-dependent attackers to cause a denial of service (CPU consumption) by executing the vfs.file.cksum command for a special device, as demonstrated by the /dev/urandom device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3c69-vjm9-xgc7/GHSA-3c69-vjm9-xgc7.json b/advisories/unreviewed/2022/05/GHSA-3c69-vjm9-xgc7/GHSA-3c69-vjm9-xgc7.json index 030599c42f9..bae4ecdae78 100644 --- a/advisories/unreviewed/2022/05/GHSA-3c69-vjm9-xgc7/GHSA-3c69-vjm9-xgc7.json +++ b/advisories/unreviewed/2022/05/GHSA-3c69-vjm9-xgc7/GHSA-3c69-vjm9-xgc7.json @@ -7,12 +7,8 @@ "CVE-2011-5008" ], "details": "Integer overflow in the GatewayService component in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to execute arbitrary code via a large size value in the packet header, which triggers a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3cgh-6r3g-wxrg/GHSA-3cgh-6r3g-wxrg.json b/advisories/unreviewed/2022/05/GHSA-3cgh-6r3g-wxrg/GHSA-3cgh-6r3g-wxrg.json index 9f99685cc73..e03b5096ac1 100644 --- a/advisories/unreviewed/2022/05/GHSA-3cgh-6r3g-wxrg/GHSA-3cgh-6r3g-wxrg.json +++ b/advisories/unreviewed/2022/05/GHSA-3cgh-6r3g-wxrg/GHSA-3cgh-6r3g-wxrg.json @@ -7,12 +7,8 @@ "CVE-2011-3530" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 8.9 allows remote authenticated users to affect confidentiality via unknown vectors related to eDevelopment.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3cx2-p7rj-x3rq/GHSA-3cx2-p7rj-x3rq.json b/advisories/unreviewed/2022/05/GHSA-3cx2-p7rj-x3rq/GHSA-3cx2-p7rj-x3rq.json index 63ae491ecd1..bd66f396617 100644 --- a/advisories/unreviewed/2022/05/GHSA-3cx2-p7rj-x3rq/GHSA-3cx2-p7rj-x3rq.json +++ b/advisories/unreviewed/2022/05/GHSA-3cx2-p7rj-x3rq/GHSA-3cx2-p7rj-x3rq.json @@ -7,12 +7,8 @@ "CVE-2011-4923" ], "details": "Cross-site scripting (XSS) vulnerability in View.pm in BackupPC 3.0.0, 3.1.0, 3.2.0, 3.2.1, and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the num parameter in a view action to index.cgi, related to the log file viewer, a different vulnerability than CVE-2011-3361.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3fv3-fr8q-pg2p/GHSA-3fv3-fr8q-pg2p.json b/advisories/unreviewed/2022/05/GHSA-3fv3-fr8q-pg2p/GHSA-3fv3-fr8q-pg2p.json index 6996aef44bb..3bc4cec5b05 100644 --- a/advisories/unreviewed/2022/05/GHSA-3fv3-fr8q-pg2p/GHSA-3fv3-fr8q-pg2p.json +++ b/advisories/unreviewed/2022/05/GHSA-3fv3-fr8q-pg2p/GHSA-3fv3-fr8q-pg2p.json @@ -7,12 +7,8 @@ "CVE-2010-5033" ], "details": "SQL injection vulnerability in ProductList.cfm in Fusebox 5.5.1 allows remote attackers to execute arbitrary SQL commands via the CatDisplay parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3g8c-m49w-7992/GHSA-3g8c-m49w-7992.json b/advisories/unreviewed/2022/05/GHSA-3g8c-m49w-7992/GHSA-3g8c-m49w-7992.json index e78c7f23ecc..e8b2584e10b 100644 --- a/advisories/unreviewed/2022/05/GHSA-3g8c-m49w-7992/GHSA-3g8c-m49w-7992.json +++ b/advisories/unreviewed/2022/05/GHSA-3g8c-m49w-7992/GHSA-3g8c-m49w-7992.json @@ -7,12 +7,8 @@ "CVE-2010-5213" ], "details": "Untrusted search path vulnerability in Adobe LiveCycle Designer 8.2.1.3144.1.471865 allows local users to gain privileges via a Trojan horse .dll file in the current working directory, as demonstrated by a directory that contains a .tds file. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3ggx-jrrh-fgmw/GHSA-3ggx-jrrh-fgmw.json b/advisories/unreviewed/2022/05/GHSA-3ggx-jrrh-fgmw/GHSA-3ggx-jrrh-fgmw.json index f656fab824c..1810e5270ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-3ggx-jrrh-fgmw/GHSA-3ggx-jrrh-fgmw.json +++ b/advisories/unreviewed/2022/05/GHSA-3ggx-jrrh-fgmw/GHSA-3ggx-jrrh-fgmw.json @@ -7,12 +7,8 @@ "CVE-2010-4996" ], "details": "SQL injection vulnerability in ogp_show.php in esoftpro Online Guestbook Pro 5.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3gp6-fj2v-m5f7/GHSA-3gp6-fj2v-m5f7.json b/advisories/unreviewed/2022/05/GHSA-3gp6-fj2v-m5f7/GHSA-3gp6-fj2v-m5f7.json index a94af3de779..fa5e4ac6d30 100644 --- a/advisories/unreviewed/2022/05/GHSA-3gp6-fj2v-m5f7/GHSA-3gp6-fj2v-m5f7.json +++ b/advisories/unreviewed/2022/05/GHSA-3gp6-fj2v-m5f7/GHSA-3gp6-fj2v-m5f7.json @@ -7,12 +7,8 @@ "CVE-2011-3321" ], "details": "Heap-based buffer overflow in the Siemens WinCC Runtime Advanced Loader, as used in SIMATIC WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Runtime Advanced, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted packet to TCP port 2308.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3hpc-49f5-7pg8/GHSA-3hpc-49f5-7pg8.json b/advisories/unreviewed/2022/05/GHSA-3hpc-49f5-7pg8/GHSA-3hpc-49f5-7pg8.json index 2ce58c0993a..25d8383120a 100644 --- a/advisories/unreviewed/2022/05/GHSA-3hpc-49f5-7pg8/GHSA-3hpc-49f5-7pg8.json +++ b/advisories/unreviewed/2022/05/GHSA-3hpc-49f5-7pg8/GHSA-3hpc-49f5-7pg8.json @@ -7,12 +7,8 @@ "CVE-2010-4912" ], "details": "SQL injection vulnerability in shop.php in UCenter Home 2.0 allows remote attackers to execute arbitrary SQL commands via the shopid parameter in a view action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3jhp-7x6r-7792/GHSA-3jhp-7x6r-7792.json b/advisories/unreviewed/2022/05/GHSA-3jhp-7x6r-7792/GHSA-3jhp-7x6r-7792.json index 911471a0c33..4ed036522e4 100644 --- a/advisories/unreviewed/2022/05/GHSA-3jhp-7x6r-7792/GHSA-3jhp-7x6r-7792.json +++ b/advisories/unreviewed/2022/05/GHSA-3jhp-7x6r-7792/GHSA-3jhp-7x6r-7792.json @@ -7,12 +7,8 @@ "CVE-2011-2900" ], "details": "Stack-based buffer overflow in the (1) put_dir function in mongoose.c in Mongoose 3.0, (2) put_dir function in yasslEWS.c in yaSSL Embedded Web Server (yasslEWS) 0.2, and (3) _shttpd_put_dir function in io_dir.c in Simple HTTPD (shttpd) 1.42 allows remote attackers to execute arbitrary code via an HTTP PUT request, as exploited in the wild in 2011.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3jv5-9vrc-2r3r/GHSA-3jv5-9vrc-2r3r.json b/advisories/unreviewed/2022/05/GHSA-3jv5-9vrc-2r3r/GHSA-3jv5-9vrc-2r3r.json index 4310d0d60c5..338aa19b2c2 100644 --- a/advisories/unreviewed/2022/05/GHSA-3jv5-9vrc-2r3r/GHSA-3jv5-9vrc-2r3r.json +++ b/advisories/unreviewed/2022/05/GHSA-3jv5-9vrc-2r3r/GHSA-3jv5-9vrc-2r3r.json @@ -7,12 +7,8 @@ "CVE-2010-4857" ], "details": "SQL injection vulnerability in click.php in CAG CMS 0.2 Beta allows remote attackers to execute arbitrary SQL commands via the itemid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3m8p-67j9-4fjq/GHSA-3m8p-67j9-4fjq.json b/advisories/unreviewed/2022/05/GHSA-3m8p-67j9-4fjq/GHSA-3m8p-67j9-4fjq.json index f3f0c9409a2..8e18110de5b 100644 --- a/advisories/unreviewed/2022/05/GHSA-3m8p-67j9-4fjq/GHSA-3m8p-67j9-4fjq.json +++ b/advisories/unreviewed/2022/05/GHSA-3m8p-67j9-4fjq/GHSA-3m8p-67j9-4fjq.json @@ -7,12 +7,8 @@ "CVE-2011-4946" ], "details": "SQL injection vulnerability in e107_admin/users_extended.php in e107 before 0.7.26 allows remote attackers to execute arbitrary SQL commands via the user_field parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3mm5-fxrj-9334/GHSA-3mm5-fxrj-9334.json b/advisories/unreviewed/2022/05/GHSA-3mm5-fxrj-9334/GHSA-3mm5-fxrj-9334.json index d3e3933fdbf..73fc43cf2be 100644 --- a/advisories/unreviewed/2022/05/GHSA-3mm5-fxrj-9334/GHSA-3mm5-fxrj-9334.json +++ b/advisories/unreviewed/2022/05/GHSA-3mm5-fxrj-9334/GHSA-3mm5-fxrj-9334.json @@ -7,12 +7,8 @@ "CVE-2010-5014" ], "details": "SQL injection vulnerability in standings.php in Elite Gaming Ladders 3.5 allows remote attackers to execute arbitrary SQL commands via the ladder[id] parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3pfg-g9h5-h7px/GHSA-3pfg-g9h5-h7px.json b/advisories/unreviewed/2022/05/GHSA-3pfg-g9h5-h7px/GHSA-3pfg-g9h5-h7px.json index 49d4f9770fa..9a7fd9e4870 100644 --- a/advisories/unreviewed/2022/05/GHSA-3pfg-g9h5-h7px/GHSA-3pfg-g9h5-h7px.json +++ b/advisories/unreviewed/2022/05/GHSA-3pfg-g9h5-h7px/GHSA-3pfg-g9h5-h7px.json @@ -7,12 +7,8 @@ "CVE-2010-4847" ], "details": "SQL injection vulnerability in view_item.php in MH Products MHP Downloadshop allows remote attackers to execute arbitrary SQL commands via the ItemID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3ppq-p8g9-x6rg/GHSA-3ppq-p8g9-x6rg.json b/advisories/unreviewed/2022/05/GHSA-3ppq-p8g9-x6rg/GHSA-3ppq-p8g9-x6rg.json index e2efdce7bd1..f63a68f52c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-3ppq-p8g9-x6rg/GHSA-3ppq-p8g9-x6rg.json +++ b/advisories/unreviewed/2022/05/GHSA-3ppq-p8g9-x6rg/GHSA-3ppq-p8g9-x6rg.json @@ -7,12 +7,8 @@ "CVE-2011-4876" ], "details": "Directory traversal vulnerability in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to execute, read, create, modify, or delete arbitrary files via a .. (dot dot) in a string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3q75-2gg2-99h4/GHSA-3q75-2gg2-99h4.json b/advisories/unreviewed/2022/05/GHSA-3q75-2gg2-99h4/GHSA-3q75-2gg2-99h4.json index 846f8450e46..83aa460f196 100644 --- a/advisories/unreviewed/2022/05/GHSA-3q75-2gg2-99h4/GHSA-3q75-2gg2-99h4.json +++ b/advisories/unreviewed/2022/05/GHSA-3q75-2gg2-99h4/GHSA-3q75-2gg2-99h4.json @@ -7,12 +7,8 @@ "CVE-2011-3839" ], "details": "The administration functionality in Wuzly 2.0 allows remote attackers to bypass authentication by setting the dXNlcm5hbWU cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3qf2-m7p9-w73v/GHSA-3qf2-m7p9-w73v.json b/advisories/unreviewed/2022/05/GHSA-3qf2-m7p9-w73v/GHSA-3qf2-m7p9-w73v.json index a080aa17b3e..4099457d271 100644 --- a/advisories/unreviewed/2022/05/GHSA-3qf2-m7p9-w73v/GHSA-3qf2-m7p9-w73v.json +++ b/advisories/unreviewed/2022/05/GHSA-3qf2-m7p9-w73v/GHSA-3qf2-m7p9-w73v.json @@ -7,12 +7,8 @@ "CVE-2011-2760" ], "details": "Brocade BigIron RX switches allow remote attackers to bypass ACL rules by using 179 as the source port of a packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3r65-cwvq-rgv3/GHSA-3r65-cwvq-rgv3.json b/advisories/unreviewed/2022/05/GHSA-3r65-cwvq-rgv3/GHSA-3r65-cwvq-rgv3.json index ea04ea84e22..bacda2fa804 100644 --- a/advisories/unreviewed/2022/05/GHSA-3r65-cwvq-rgv3/GHSA-3r65-cwvq-rgv3.json +++ b/advisories/unreviewed/2022/05/GHSA-3r65-cwvq-rgv3/GHSA-3r65-cwvq-rgv3.json @@ -7,12 +7,8 @@ "CVE-2010-5036" ], "details": "SQL injection vulnerability in addsale.php in iScripts eSwap 2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3r89-7qf6-h2m8/GHSA-3r89-7qf6-h2m8.json b/advisories/unreviewed/2022/05/GHSA-3r89-7qf6-h2m8/GHSA-3r89-7qf6-h2m8.json index adca9735d0b..defaa095be8 100644 --- a/advisories/unreviewed/2022/05/GHSA-3r89-7qf6-h2m8/GHSA-3r89-7qf6-h2m8.json +++ b/advisories/unreviewed/2022/05/GHSA-3r89-7qf6-h2m8/GHSA-3r89-7qf6-h2m8.json @@ -7,12 +7,8 @@ "CVE-2010-5062" ], "details": "SQL injection vulnerability in search.php in MH Products kleinanzeigenmarkt allows remote attackers to execute arbitrary SQL commands via the c parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3r9x-6pcg-2762/GHSA-3r9x-6pcg-2762.json b/advisories/unreviewed/2022/05/GHSA-3r9x-6pcg-2762/GHSA-3r9x-6pcg-2762.json index d076743b5b0..771c88d373c 100644 --- a/advisories/unreviewed/2022/05/GHSA-3r9x-6pcg-2762/GHSA-3r9x-6pcg-2762.json +++ b/advisories/unreviewed/2022/05/GHSA-3r9x-6pcg-2762/GHSA-3r9x-6pcg-2762.json @@ -7,12 +7,8 @@ "CVE-2011-3138" ], "details": "The LTPA STS module support implementation in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.9 relies on a static instance of a Java Development Kit (JDK) class, which might allow attackers to bypass LTPA token signature verification by leveraging lack of thread safety.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3w84-x2pj-xq9r/GHSA-3w84-x2pj-xq9r.json b/advisories/unreviewed/2022/05/GHSA-3w84-x2pj-xq9r/GHSA-3w84-x2pj-xq9r.json index 367cc5d709b..62328559230 100644 --- a/advisories/unreviewed/2022/05/GHSA-3w84-x2pj-xq9r/GHSA-3w84-x2pj-xq9r.json +++ b/advisories/unreviewed/2022/05/GHSA-3w84-x2pj-xq9r/GHSA-3w84-x2pj-xq9r.json @@ -7,12 +7,8 @@ "CVE-2010-4978" ], "details": "Cross-site scripting (XSS) vulnerability in image/view.php in CANDID allows remote attackers to inject arbitrary web script or HTML via the image_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4399-hpjw-w4jp/GHSA-4399-hpjw-w4jp.json b/advisories/unreviewed/2022/05/GHSA-4399-hpjw-w4jp/GHSA-4399-hpjw-w4jp.json index 1670c63c201..93a2f1abf4c 100644 --- a/advisories/unreviewed/2022/05/GHSA-4399-hpjw-w4jp/GHSA-4399-hpjw-w4jp.json +++ b/advisories/unreviewed/2022/05/GHSA-4399-hpjw-w4jp/GHSA-4399-hpjw-w4jp.json @@ -7,12 +7,8 @@ "CVE-2010-5057" ], "details": "SQL injection vulnerability in detResolucion.php in CMS Ariadna 1.1 allows remote attackers to execute arbitrary SQL commands via the tipodoc_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-43fv-rqxp-47v5/GHSA-43fv-rqxp-47v5.json b/advisories/unreviewed/2022/05/GHSA-43fv-rqxp-47v5/GHSA-43fv-rqxp-47v5.json index f05893d3be8..5400d580f6d 100644 --- a/advisories/unreviewed/2022/05/GHSA-43fv-rqxp-47v5/GHSA-43fv-rqxp-47v5.json +++ b/advisories/unreviewed/2022/05/GHSA-43fv-rqxp-47v5/GHSA-43fv-rqxp-47v5.json @@ -7,12 +7,8 @@ "CVE-2010-4845" ], "details": "Multiple SQL injection vulnerabilities in MH Products Projekt Shop allow remote attackers to execute arbitrary SQL commands via the (1) ts parameter to details.php and possibly the (2) ilceler parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-43ww-5h9q-8jh6/GHSA-43ww-5h9q-8jh6.json b/advisories/unreviewed/2022/05/GHSA-43ww-5h9q-8jh6/GHSA-43ww-5h9q-8jh6.json index 7f476d93edb..e6983ced41f 100644 --- a/advisories/unreviewed/2022/05/GHSA-43ww-5h9q-8jh6/GHSA-43ww-5h9q-8jh6.json +++ b/advisories/unreviewed/2022/05/GHSA-43ww-5h9q-8jh6/GHSA-43ww-5h9q-8jh6.json @@ -7,12 +7,8 @@ "CVE-2011-3535" ], "details": "Unspecified vulnerability in the Solaris component in Oracle Sun Products Suite 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to Remote Quota Server (rquotad).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-44fg-qr23-qj5r/GHSA-44fg-qr23-qj5r.json b/advisories/unreviewed/2022/05/GHSA-44fg-qr23-qj5r/GHSA-44fg-qr23-qj5r.json index 54f51256694..177b16e54a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-44fg-qr23-qj5r/GHSA-44fg-qr23-qj5r.json +++ b/advisories/unreviewed/2022/05/GHSA-44fg-qr23-qj5r/GHSA-44fg-qr23-qj5r.json @@ -7,12 +7,8 @@ "CVE-2010-5281" ], "details": "Directory traversal vulnerability in ibrowser.php in the CMScout 2.09 IBrowser TinyMCE Plugin 1.4.1, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-489p-j5ww-8jr3/GHSA-489p-j5ww-8jr3.json b/advisories/unreviewed/2022/05/GHSA-489p-j5ww-8jr3/GHSA-489p-j5ww-8jr3.json index 099adb230de..3be68a0156a 100644 --- a/advisories/unreviewed/2022/05/GHSA-489p-j5ww-8jr3/GHSA-489p-j5ww-8jr3.json +++ b/advisories/unreviewed/2022/05/GHSA-489p-j5ww-8jr3/GHSA-489p-j5ww-8jr3.json @@ -7,12 +7,8 @@ "CVE-2011-3246" ], "details": "CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended web sites, and transmission of cookies to unintended web sites, via a crafted (1) http or (2) https URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4939-8wph-3342/GHSA-4939-8wph-3342.json b/advisories/unreviewed/2022/05/GHSA-4939-8wph-3342/GHSA-4939-8wph-3342.json index 8026e474b29..5c0e5a5bf4e 100644 --- a/advisories/unreviewed/2022/05/GHSA-4939-8wph-3342/GHSA-4939-8wph-3342.json +++ b/advisories/unreviewed/2022/05/GHSA-4939-8wph-3342/GHSA-4939-8wph-3342.json @@ -7,12 +7,8 @@ "CVE-2011-2679" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-49j7-mcqg-v52v/GHSA-49j7-mcqg-v52v.json b/advisories/unreviewed/2022/05/GHSA-49j7-mcqg-v52v/GHSA-49j7-mcqg-v52v.json index 5a93b4ea95e..8c59d54c6d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-49j7-mcqg-v52v/GHSA-49j7-mcqg-v52v.json +++ b/advisories/unreviewed/2022/05/GHSA-49j7-mcqg-v52v/GHSA-49j7-mcqg-v52v.json @@ -7,12 +7,8 @@ "CVE-2011-3513" ], "details": "Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.2, and 12.1.3 allows remote attackers to affect integrity, related to HTML Pages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4c69-x35c-cmxf/GHSA-4c69-x35c-cmxf.json b/advisories/unreviewed/2022/05/GHSA-4c69-x35c-cmxf/GHSA-4c69-x35c-cmxf.json index 2bc1c334557..a3d370c2d6b 100644 --- a/advisories/unreviewed/2022/05/GHSA-4c69-x35c-cmxf/GHSA-4c69-x35c-cmxf.json +++ b/advisories/unreviewed/2022/05/GHSA-4c69-x35c-cmxf/GHSA-4c69-x35c-cmxf.json @@ -7,12 +7,8 @@ "CVE-2010-4988" ], "details": "PHP remote file inclusion vulnerability in mod_chatting/themes/default/header.php in Family Connections Who is Chatting 2.2.3 allows remote attackers to execute arbitrary PHP code via a URL in the TMPL[path] parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4f8j-483g-w9w4/GHSA-4f8j-483g-w9w4.json b/advisories/unreviewed/2022/05/GHSA-4f8j-483g-w9w4/GHSA-4f8j-483g-w9w4.json index a3d2510b0e7..704b1c723d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-4f8j-483g-w9w4/GHSA-4f8j-483g-w9w4.json +++ b/advisories/unreviewed/2022/05/GHSA-4f8j-483g-w9w4/GHSA-4f8j-483g-w9w4.json @@ -7,12 +7,8 @@ "CVE-2010-4873" ], "details": "Cross-site scripting (XSS) vulnerability in confirm.php in WeBid 0.8.5 P1 allows remote attackers to inject arbitrary web script or HTML via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4fmx-xwhx-8fvg/GHSA-4fmx-xwhx-8fvg.json b/advisories/unreviewed/2022/05/GHSA-4fmx-xwhx-8fvg/GHSA-4fmx-xwhx-8fvg.json index 69c89684973..1983cb0bd9e 100644 --- a/advisories/unreviewed/2022/05/GHSA-4fmx-xwhx-8fvg/GHSA-4fmx-xwhx-8fvg.json +++ b/advisories/unreviewed/2022/05/GHSA-4fmx-xwhx-8fvg/GHSA-4fmx-xwhx-8fvg.json @@ -7,12 +7,8 @@ "CVE-2010-5047" ], "details": "SQL injection vulnerability in page.php in V-EVA Press Release Script allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4g6q-6335-5gfp/GHSA-4g6q-6335-5gfp.json b/advisories/unreviewed/2022/05/GHSA-4g6q-6335-5gfp/GHSA-4g6q-6335-5gfp.json index 70f8802fade..43ffca1cfb7 100644 --- a/advisories/unreviewed/2022/05/GHSA-4g6q-6335-5gfp/GHSA-4g6q-6335-5gfp.json +++ b/advisories/unreviewed/2022/05/GHSA-4g6q-6335-5gfp/GHSA-4g6q-6335-5gfp.json @@ -7,12 +7,8 @@ "CVE-2011-5138" ], "details": "Cross-site scripting (XSS) vulnerability in member.php in tForum b0.915 allows remote attackers to inject arbitrary web script or HTML via the username parameter in a viewprofile action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4ghg-87jg-84gj/GHSA-4ghg-87jg-84gj.json b/advisories/unreviewed/2022/05/GHSA-4ghg-87jg-84gj/GHSA-4ghg-87jg-84gj.json index a041c74c5c1..6d41cb3c680 100644 --- a/advisories/unreviewed/2022/05/GHSA-4ghg-87jg-84gj/GHSA-4ghg-87jg-84gj.json +++ b/advisories/unreviewed/2022/05/GHSA-4ghg-87jg-84gj/GHSA-4ghg-87jg-84gj.json @@ -7,12 +7,8 @@ "CVE-2011-3525" ], "details": "Unspecified vulnerability in the Application Express component in Oracle Database Server 3.2 and 4.0 allows remote authenticated users to affect confidentiality, integrity, and availability, related to APEX developer user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4ghq-f6gr-qp9c/GHSA-4ghq-f6gr-qp9c.json b/advisories/unreviewed/2022/05/GHSA-4ghq-f6gr-qp9c/GHSA-4ghq-f6gr-qp9c.json index 700afda03ef..d75bfce6d74 100644 --- a/advisories/unreviewed/2022/05/GHSA-4ghq-f6gr-qp9c/GHSA-4ghq-f6gr-qp9c.json +++ b/advisories/unreviewed/2022/05/GHSA-4ghq-f6gr-qp9c/GHSA-4ghq-f6gr-qp9c.json @@ -7,12 +7,8 @@ "CVE-2010-5016" ], "details": "SQL injection vulnerability in matchdb.php in Elite Gaming Ladders 3.5 and earlier allows remote attackers to execute arbitrary SQL commands via the match parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4jxv-pr74-4rwh/GHSA-4jxv-pr74-4rwh.json b/advisories/unreviewed/2022/05/GHSA-4jxv-pr74-4rwh/GHSA-4jxv-pr74-4rwh.json index 48669b3a1a0..17a1357f5bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-4jxv-pr74-4rwh/GHSA-4jxv-pr74-4rwh.json +++ b/advisories/unreviewed/2022/05/GHSA-4jxv-pr74-4rwh/GHSA-4jxv-pr74-4rwh.json @@ -7,12 +7,8 @@ "CVE-2010-4940" ], "details": "SQL injection vulnerability in index.php in WAnewsletter 2.1.2 allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4mr2-vrjg-c7xm/GHSA-4mr2-vrjg-c7xm.json b/advisories/unreviewed/2022/05/GHSA-4mr2-vrjg-c7xm/GHSA-4mr2-vrjg-c7xm.json index 165c77911c8..05253dd2bc5 100644 --- a/advisories/unreviewed/2022/05/GHSA-4mr2-vrjg-c7xm/GHSA-4mr2-vrjg-c7xm.json +++ b/advisories/unreviewed/2022/05/GHSA-4mr2-vrjg-c7xm/GHSA-4mr2-vrjg-c7xm.json @@ -7,12 +7,8 @@ "CVE-2011-2647" ], "details": "Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted archive name in the list of testdrive modified files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4mx8-6j9w-9rv5/GHSA-4mx8-6j9w-9rv5.json b/advisories/unreviewed/2022/05/GHSA-4mx8-6j9w-9rv5/GHSA-4mx8-6j9w-9rv5.json index 35dd5b0c7f1..89a20873439 100644 --- a/advisories/unreviewed/2022/05/GHSA-4mx8-6j9w-9rv5/GHSA-4mx8-6j9w-9rv5.json +++ b/advisories/unreviewed/2022/05/GHSA-4mx8-6j9w-9rv5/GHSA-4mx8-6j9w-9rv5.json @@ -7,12 +7,8 @@ "CVE-2011-3431" ], "details": "The Home screen component in Apple iOS before 5 does not properly support a certain application-switching gesture, which might allow physically proximate attackers to obtain sensitive state information by watching the device's screen.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4q4h-x5xj-c975/GHSA-4q4h-x5xj-c975.json b/advisories/unreviewed/2022/05/GHSA-4q4h-x5xj-c975/GHSA-4q4h-x5xj-c975.json index 8ccd0bc7070..853f40cdb02 100644 --- a/advisories/unreviewed/2022/05/GHSA-4q4h-x5xj-c975/GHSA-4q4h-x5xj-c975.json +++ b/advisories/unreviewed/2022/05/GHSA-4q4h-x5xj-c975/GHSA-4q4h-x5xj-c975.json @@ -7,12 +7,8 @@ "CVE-2010-4982" ], "details": "SQL injection vulnerability in address_book/contacts.php in My Kazaam Address & Contact Organizer allows remote attackers to execute arbitrary SQL commands via the var1 parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4q62-43v6-g996/GHSA-4q62-43v6-g996.json b/advisories/unreviewed/2022/05/GHSA-4q62-43v6-g996/GHSA-4q62-43v6-g996.json index e2a5fccc96c..d8dc7465df9 100644 --- a/advisories/unreviewed/2022/05/GHSA-4q62-43v6-g996/GHSA-4q62-43v6-g996.json +++ b/advisories/unreviewed/2022/05/GHSA-4q62-43v6-g996/GHSA-4q62-43v6-g996.json @@ -7,12 +7,8 @@ "CVE-2010-5015" ], "details": "SQL injection vulnerability in view_photo.php in 2daybiz Network Community Script allows remote attackers to execute arbitrary SQL commands via the alb parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4qhx-qrcw-q3px/GHSA-4qhx-qrcw-q3px.json b/advisories/unreviewed/2022/05/GHSA-4qhx-qrcw-q3px/GHSA-4qhx-qrcw-q3px.json index 70342998dca..b3b42594ac5 100644 --- a/advisories/unreviewed/2022/05/GHSA-4qhx-qrcw-q3px/GHSA-4qhx-qrcw-q3px.json +++ b/advisories/unreviewed/2022/05/GHSA-4qhx-qrcw-q3px/GHSA-4qhx-qrcw-q3px.json @@ -7,12 +7,8 @@ "CVE-2010-4967" ], "details": "SQL injection vulnerability in default.asp in ATCOM Netvolution 2.5.6 allows remote attackers to execute arbitrary SQL commands via the artID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4qx7-jmmw-f3gq/GHSA-4qx7-jmmw-f3gq.json b/advisories/unreviewed/2022/05/GHSA-4qx7-jmmw-f3gq/GHSA-4qx7-jmmw-f3gq.json index 4e06997fdb9..2fe46cbe12a 100644 --- a/advisories/unreviewed/2022/05/GHSA-4qx7-jmmw-f3gq/GHSA-4qx7-jmmw-f3gq.json +++ b/advisories/unreviewed/2022/05/GHSA-4qx7-jmmw-f3gq/GHSA-4qx7-jmmw-f3gq.json @@ -7,12 +7,8 @@ "CVE-2011-5048" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in IBM Web Experience Factory (aka WEF, formerly WebSphere Portlet Factory) 7.0 and 7.0.1 allow remote attackers to inject arbitrary web script or HTML via a (1) text INPUT element or (2) TEXTAREA element, related to an interaction between Smart Refresh and Dojo.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4w3v-j6fg-rqmc/GHSA-4w3v-j6fg-rqmc.json b/advisories/unreviewed/2022/05/GHSA-4w3v-j6fg-rqmc/GHSA-4w3v-j6fg-rqmc.json index 1f7c1b019e4..b1de41c4a34 100644 --- a/advisories/unreviewed/2022/05/GHSA-4w3v-j6fg-rqmc/GHSA-4w3v-j6fg-rqmc.json +++ b/advisories/unreviewed/2022/05/GHSA-4w3v-j6fg-rqmc/GHSA-4w3v-j6fg-rqmc.json @@ -7,12 +7,8 @@ "CVE-2010-5102" ], "details": "Directory traversal vulnerability in mod/tools/em/class.em_unzip.php in the unzip library in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote attackers to write arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4w4c-wx29-mmgh/GHSA-4w4c-wx29-mmgh.json b/advisories/unreviewed/2022/05/GHSA-4w4c-wx29-mmgh/GHSA-4w4c-wx29-mmgh.json index fd18cbb9000..09f3545b7ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-4w4c-wx29-mmgh/GHSA-4w4c-wx29-mmgh.json +++ b/advisories/unreviewed/2022/05/GHSA-4w4c-wx29-mmgh/GHSA-4w4c-wx29-mmgh.json @@ -7,12 +7,8 @@ "CVE-2010-5149" ], "details": "Websense Web Security and Web Filter before 6.3.3 Hotfix 27 and 7.x before 7.1.1 allow remote attackers to cause a denial of service (Blue Coat appliance integration outage) via a long URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4w67-799p-cjqf/GHSA-4w67-799p-cjqf.json b/advisories/unreviewed/2022/05/GHSA-4w67-799p-cjqf/GHSA-4w67-799p-cjqf.json index 0d9c582c819..8123bcf5750 100644 --- a/advisories/unreviewed/2022/05/GHSA-4w67-799p-cjqf/GHSA-4w67-799p-cjqf.json +++ b/advisories/unreviewed/2022/05/GHSA-4w67-799p-cjqf/GHSA-4w67-799p-cjqf.json @@ -7,12 +7,8 @@ "CVE-2010-5188" ], "details": "SilverStripe 2.3.x before 2.3.6 allows remote attackers to obtain sensitive information via the (1) debug_memory parameter to core/control/Director.php or (2) debug_profile parameter to main.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4w7v-xm25-x9q6/GHSA-4w7v-xm25-x9q6.json b/advisories/unreviewed/2022/05/GHSA-4w7v-xm25-x9q6/GHSA-4w7v-xm25-x9q6.json index 37cf6a9e075..060d7e7eaef 100644 --- a/advisories/unreviewed/2022/05/GHSA-4w7v-xm25-x9q6/GHSA-4w7v-xm25-x9q6.json +++ b/advisories/unreviewed/2022/05/GHSA-4w7v-xm25-x9q6/GHSA-4w7v-xm25-x9q6.json @@ -7,12 +7,8 @@ "CVE-2011-2331" ], "details": "Integer overflow in img.exe in HP Intelligent Management Center (IMC) allows remote attackers to execute arbitrary code via a crafted length value in an a packet that triggers a heap-based buffer overflow, possibly related to an \"recv\" field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-522g-8fxg-x6c3/GHSA-522g-8fxg-x6c3.json b/advisories/unreviewed/2022/05/GHSA-522g-8fxg-x6c3/GHSA-522g-8fxg-x6c3.json index b03f9dc2bae..2e2de943bd0 100644 --- a/advisories/unreviewed/2022/05/GHSA-522g-8fxg-x6c3/GHSA-522g-8fxg-x6c3.json +++ b/advisories/unreviewed/2022/05/GHSA-522g-8fxg-x6c3/GHSA-522g-8fxg-x6c3.json @@ -7,12 +7,8 @@ "CVE-2011-2146" ], "details": "mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1 allows guest OS users to determine the existence of host OS files and directories via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5335-3g63-r3wv/GHSA-5335-3g63-r3wv.json b/advisories/unreviewed/2022/05/GHSA-5335-3g63-r3wv/GHSA-5335-3g63-r3wv.json index 20b18b4eb16..1ed1877b62d 100644 --- a/advisories/unreviewed/2022/05/GHSA-5335-3g63-r3wv/GHSA-5335-3g63-r3wv.json +++ b/advisories/unreviewed/2022/05/GHSA-5335-3g63-r3wv/GHSA-5335-3g63-r3wv.json @@ -7,12 +7,8 @@ "CVE-2011-4218" ], "details": "Investintech.com SlimPDF Reader does not prevent faulting-instruction data from affecting write operations, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-53j9-987j-m4vw/GHSA-53j9-987j-m4vw.json b/advisories/unreviewed/2022/05/GHSA-53j9-987j-m4vw/GHSA-53j9-987j-m4vw.json index 69660750d61..ff4e4432991 100644 --- a/advisories/unreviewed/2022/05/GHSA-53j9-987j-m4vw/GHSA-53j9-987j-m4vw.json +++ b/advisories/unreviewed/2022/05/GHSA-53j9-987j-m4vw/GHSA-53j9-987j-m4vw.json @@ -7,12 +7,8 @@ "CVE-2010-4942" ], "details": "SQL injection vulnerability in location.php in the eCal module in E-Xoopport Samsara 3.1 and earlier allows remote attackers to execute arbitrary SQL commands via the lid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-53rv-m76f-83xc/GHSA-53rv-m76f-83xc.json b/advisories/unreviewed/2022/05/GHSA-53rv-m76f-83xc/GHSA-53rv-m76f-83xc.json index d1e7ecdabb8..4d08a38ab55 100644 --- a/advisories/unreviewed/2022/05/GHSA-53rv-m76f-83xc/GHSA-53rv-m76f-83xc.json +++ b/advisories/unreviewed/2022/05/GHSA-53rv-m76f-83xc/GHSA-53rv-m76f-83xc.json @@ -7,12 +7,8 @@ "CVE-2011-3265" ], "details": "popup.php in Zabbix before 1.8.7 allows remote attackers to read the contents of arbitrary database tables via a modified srctbl parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-53x4-m57v-6325/GHSA-53x4-m57v-6325.json b/advisories/unreviewed/2022/05/GHSA-53x4-m57v-6325/GHSA-53x4-m57v-6325.json index d2f68c0f11e..1107c459e84 100644 --- a/advisories/unreviewed/2022/05/GHSA-53x4-m57v-6325/GHSA-53x4-m57v-6325.json +++ b/advisories/unreviewed/2022/05/GHSA-53x4-m57v-6325/GHSA-53x4-m57v-6325.json @@ -7,12 +7,8 @@ "CVE-2010-4895" ], "details": "Cross-site scripting (XSS) vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the username field). NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-543p-gmpw-vvc3/GHSA-543p-gmpw-vvc3.json b/advisories/unreviewed/2022/05/GHSA-543p-gmpw-vvc3/GHSA-543p-gmpw-vvc3.json index b1e5ea5e3f6..8d23ae6fa0a 100644 --- a/advisories/unreviewed/2022/05/GHSA-543p-gmpw-vvc3/GHSA-543p-gmpw-vvc3.json +++ b/advisories/unreviewed/2022/05/GHSA-543p-gmpw-vvc3/GHSA-543p-gmpw-vvc3.json @@ -7,12 +7,8 @@ "CVE-2011-3130" ], "details": "wp-includes/taxonomy.php in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to \"Taxonomy query hardening,\" possibly involving SQL injection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-545w-p7xc-6h8j/GHSA-545w-p7xc-6h8j.json b/advisories/unreviewed/2022/05/GHSA-545w-p7xc-6h8j/GHSA-545w-p7xc-6h8j.json index 6ec4f71dc25..1bb51292564 100644 --- a/advisories/unreviewed/2022/05/GHSA-545w-p7xc-6h8j/GHSA-545w-p7xc-6h8j.json +++ b/advisories/unreviewed/2022/05/GHSA-545w-p7xc-6h8j/GHSA-545w-p7xc-6h8j.json @@ -7,12 +7,8 @@ "CVE-2010-4854" ], "details": "SQL injection vulnerability in ajax/coupon.php in Zuitu 1.6, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a consume action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-557g-pw95-22mj/GHSA-557g-pw95-22mj.json b/advisories/unreviewed/2022/05/GHSA-557g-pw95-22mj/GHSA-557g-pw95-22mj.json index a7a989b166f..fc346d2ef9c 100644 --- a/advisories/unreviewed/2022/05/GHSA-557g-pw95-22mj/GHSA-557g-pw95-22mj.json +++ b/advisories/unreviewed/2022/05/GHSA-557g-pw95-22mj/GHSA-557g-pw95-22mj.json @@ -7,12 +7,8 @@ "CVE-2011-3776" ], "details": "phpFormGenerator 2.09 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by forms/process.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5589-2667-wwgx/GHSA-5589-2667-wwgx.json b/advisories/unreviewed/2022/05/GHSA-5589-2667-wwgx/GHSA-5589-2667-wwgx.json index 6b00d714a6b..4213626149d 100644 --- a/advisories/unreviewed/2022/05/GHSA-5589-2667-wwgx/GHSA-5589-2667-wwgx.json +++ b/advisories/unreviewed/2022/05/GHSA-5589-2667-wwgx/GHSA-5589-2667-wwgx.json @@ -7,12 +7,8 @@ "CVE-2011-5054" ], "details": "kcheckpass passes a user-supplied argument to the pam_start function, often within a setuid environment, which allows local users to invoke any configured PAM stack, and possibly trigger unintended side effects, via an arbitrary valid PAM service name, a different vulnerability than CVE-2011-4122. NOTE: the vendor indicates that the possibility of resultant privilege escalation may be \"a bit far-fetched.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-563f-m7m3-jxph/GHSA-563f-m7m3-jxph.json b/advisories/unreviewed/2022/05/GHSA-563f-m7m3-jxph/GHSA-563f-m7m3-jxph.json index 58388e325cb..68454fabc13 100644 --- a/advisories/unreviewed/2022/05/GHSA-563f-m7m3-jxph/GHSA-563f-m7m3-jxph.json +++ b/advisories/unreviewed/2022/05/GHSA-563f-m7m3-jxph/GHSA-563f-m7m3-jxph.json @@ -7,12 +7,8 @@ "CVE-2011-4537" ], "details": "Multiple buffer overflows in 7-Technologies (7T) Interactive Graphical SCADA System (IGSS) 9.0.0.11355 and earlier allow remote attackers to execute arbitrary code or cause a denial of service via a crafted packet to TCP port (1) 12397 or (2) 12399.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5674-x693-xhmq/GHSA-5674-x693-xhmq.json b/advisories/unreviewed/2022/05/GHSA-5674-x693-xhmq/GHSA-5674-x693-xhmq.json index 950e603bd57..9815a978a68 100644 --- a/advisories/unreviewed/2022/05/GHSA-5674-x693-xhmq/GHSA-5674-x693-xhmq.json +++ b/advisories/unreviewed/2022/05/GHSA-5674-x693-xhmq/GHSA-5674-x693-xhmq.json @@ -7,12 +7,8 @@ "CVE-2008-7312" ], "details": "The Filtering Service in Websense Enterprise 5.2 through 6.3 does not consider the IP address during URL categorization, which makes it easier for remote attackers to bypass filtering via an HTTP request, as demonstrated by a request to a compromised server associated with a specific IP address.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-599m-qcrx-5wf3/GHSA-599m-qcrx-5wf3.json b/advisories/unreviewed/2022/05/GHSA-599m-qcrx-5wf3/GHSA-599m-qcrx-5wf3.json index ec8522d4eea..37b130e24bf 100644 --- a/advisories/unreviewed/2022/05/GHSA-599m-qcrx-5wf3/GHSA-599m-qcrx-5wf3.json +++ b/advisories/unreviewed/2022/05/GHSA-599m-qcrx-5wf3/GHSA-599m-qcrx-5wf3.json @@ -7,12 +7,8 @@ "CVE-2010-4860" ], "details": "SQL injection vulnerability in product_desc.php in MyPhpAuction 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5c5v-qc32-cgm2/GHSA-5c5v-qc32-cgm2.json b/advisories/unreviewed/2022/05/GHSA-5c5v-qc32-cgm2/GHSA-5c5v-qc32-cgm2.json index 43df1dafd82..71a7099d0f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-5c5v-qc32-cgm2/GHSA-5c5v-qc32-cgm2.json +++ b/advisories/unreviewed/2022/05/GHSA-5c5v-qc32-cgm2/GHSA-5c5v-qc32-cgm2.json @@ -7,12 +7,8 @@ "CVE-2010-4974" ], "details": "SQL injection vulnerability in info.php in BrotherScripts (BS) and ScriptsFeed Auto Dealer allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5cp7-gfgq-44x8/GHSA-5cp7-gfgq-44x8.json b/advisories/unreviewed/2022/05/GHSA-5cp7-gfgq-44x8/GHSA-5cp7-gfgq-44x8.json index 5af323c6456..2385a7402de 100644 --- a/advisories/unreviewed/2022/05/GHSA-5cp7-gfgq-44x8/GHSA-5cp7-gfgq-44x8.json +++ b/advisories/unreviewed/2022/05/GHSA-5cp7-gfgq-44x8/GHSA-5cp7-gfgq-44x8.json @@ -7,12 +7,8 @@ "CVE-2011-3322" ], "details": "Core Server HMI Service (Coreservice.exe) in Scadatec Limited Procyon SCADA 1.06, and other versions before 1.14, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long password to the Telnet (TCP/23) port, which triggers an out-of-bounds read or write, leading to a stack-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5cpx-pcr7-g2xj/GHSA-5cpx-pcr7-g2xj.json b/advisories/unreviewed/2022/05/GHSA-5cpx-pcr7-g2xj/GHSA-5cpx-pcr7-g2xj.json index c8fbf118549..0cded52794d 100644 --- a/advisories/unreviewed/2022/05/GHSA-5cpx-pcr7-g2xj/GHSA-5cpx-pcr7-g2xj.json +++ b/advisories/unreviewed/2022/05/GHSA-5cpx-pcr7-g2xj/GHSA-5cpx-pcr7-g2xj.json @@ -7,12 +7,8 @@ "CVE-2011-2904" ], "details": "Cross-site scripting (XSS) vulnerability in acknow.php in Zabbix before 1.8.6 allows remote attackers to inject arbitrary web script or HTML via the backurl parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5g4g-xv77-27h9/GHSA-5g4g-xv77-27h9.json b/advisories/unreviewed/2022/05/GHSA-5g4g-xv77-27h9/GHSA-5g4g-xv77-27h9.json index f0e036ee920..9853d29e6c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-5g4g-xv77-27h9/GHSA-5g4g-xv77-27h9.json +++ b/advisories/unreviewed/2022/05/GHSA-5g4g-xv77-27h9/GHSA-5g4g-xv77-27h9.json @@ -7,12 +7,8 @@ "CVE-2011-3518" ], "details": "Unspecified vulnerability in the Siebel Core - UIF Client component in Oracle Siebel CRM 8.0.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to User Interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5gf7-54mg-pxxr/GHSA-5gf7-54mg-pxxr.json b/advisories/unreviewed/2022/05/GHSA-5gf7-54mg-pxxr/GHSA-5gf7-54mg-pxxr.json index 9ba6273269d..f2d15d642dd 100644 --- a/advisories/unreviewed/2022/05/GHSA-5gf7-54mg-pxxr/GHSA-5gf7-54mg-pxxr.json +++ b/advisories/unreviewed/2022/05/GHSA-5gf7-54mg-pxxr/GHSA-5gf7-54mg-pxxr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5ggj-67rq-jmf8/GHSA-5ggj-67rq-jmf8.json b/advisories/unreviewed/2022/05/GHSA-5ggj-67rq-jmf8/GHSA-5ggj-67rq-jmf8.json index ae4a1136912..39164fae39d 100644 --- a/advisories/unreviewed/2022/05/GHSA-5ggj-67rq-jmf8/GHSA-5ggj-67rq-jmf8.json +++ b/advisories/unreviewed/2022/05/GHSA-5ggj-67rq-jmf8/GHSA-5ggj-67rq-jmf8.json @@ -7,12 +7,8 @@ "CVE-2011-2127" ], "details": "Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2114, CVE-2011-2117, CVE-2011-2124, and CVE-2011-2128.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5gpg-48j6-gp7r/GHSA-5gpg-48j6-gp7r.json b/advisories/unreviewed/2022/05/GHSA-5gpg-48j6-gp7r/GHSA-5gpg-48j6-gp7r.json index ce36b74add9..05830827cd2 100644 --- a/advisories/unreviewed/2022/05/GHSA-5gpg-48j6-gp7r/GHSA-5gpg-48j6-gp7r.json +++ b/advisories/unreviewed/2022/05/GHSA-5gpg-48j6-gp7r/GHSA-5gpg-48j6-gp7r.json @@ -7,12 +7,8 @@ "CVE-2010-5287" ], "details": "SQL injection vulnerability in default.php in Cornerstone Technologies webConductor allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5gvm-9848-xhgq/GHSA-5gvm-9848-xhgq.json b/advisories/unreviewed/2022/05/GHSA-5gvm-9848-xhgq/GHSA-5gvm-9848-xhgq.json index f2ed82c9602..415a76dd454 100644 --- a/advisories/unreviewed/2022/05/GHSA-5gvm-9848-xhgq/GHSA-5gvm-9848-xhgq.json +++ b/advisories/unreviewed/2022/05/GHSA-5gvm-9848-xhgq/GHSA-5gvm-9848-xhgq.json @@ -7,12 +7,8 @@ "CVE-2010-4910" ], "details": "SQL injection vulnerability in index.cfm in ColdGen ColdCalendar 2.06 allows remote attackers to execute arbitrary SQL commands via the EventID parameter in a ViewEventDetails action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5gvq-hx53-c65m/GHSA-5gvq-hx53-c65m.json b/advisories/unreviewed/2022/05/GHSA-5gvq-hx53-c65m/GHSA-5gvq-hx53-c65m.json index 5707ae74c9f..f3efe05c1a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-5gvq-hx53-c65m/GHSA-5gvq-hx53-c65m.json +++ b/advisories/unreviewed/2022/05/GHSA-5gvq-hx53-c65m/GHSA-5gvq-hx53-c65m.json @@ -7,12 +7,8 @@ "CVE-2011-3526" ], "details": "Unspecified vulnerability in the Siebel Core - UIF Server component in Oracle Siebel CRM 8.0.0 and 8.1.1 allows remote authenticated users to affect confidentiality via unknown vectors related to User Interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5h2f-r84g-44gr/GHSA-5h2f-r84g-44gr.json b/advisories/unreviewed/2022/05/GHSA-5h2f-r84g-44gr/GHSA-5h2f-r84g-44gr.json index 11e5f11c900..95a90f57538 100644 --- a/advisories/unreviewed/2022/05/GHSA-5h2f-r84g-44gr/GHSA-5h2f-r84g-44gr.json +++ b/advisories/unreviewed/2022/05/GHSA-5h2f-r84g-44gr/GHSA-5h2f-r84g-44gr.json @@ -7,12 +7,8 @@ "CVE-2011-2423" ], "details": "msvcr90.dll in Adobe Shockwave Player before 11.6.1.629 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5h6r-fm43-455f/GHSA-5h6r-fm43-455f.json b/advisories/unreviewed/2022/05/GHSA-5h6r-fm43-455f/GHSA-5h6r-fm43-455f.json index 5849b3cd7da..d8b5899b944 100644 --- a/advisories/unreviewed/2022/05/GHSA-5h6r-fm43-455f/GHSA-5h6r-fm43-455f.json +++ b/advisories/unreviewed/2022/05/GHSA-5h6r-fm43-455f/GHSA-5h6r-fm43-455f.json @@ -7,12 +7,8 @@ "CVE-2011-4669" ], "details": "SQL injection vulnerability in wp-users.php in WordPress Users plugin 1.3 and possibly earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the uid parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5j3j-rq5g-q8c8/GHSA-5j3j-rq5g-q8c8.json b/advisories/unreviewed/2022/05/GHSA-5j3j-rq5g-q8c8/GHSA-5j3j-rq5g-q8c8.json index dda5e9a0611..6b49e9de604 100644 --- a/advisories/unreviewed/2022/05/GHSA-5j3j-rq5g-q8c8/GHSA-5j3j-rq5g-q8c8.json +++ b/advisories/unreviewed/2022/05/GHSA-5j3j-rq5g-q8c8/GHSA-5j3j-rq5g-q8c8.json @@ -7,12 +7,8 @@ "CVE-2011-3150" ], "details": "Software Center in Ubuntu 11.10, 11.04 10.10 does not properly validate server certificates, which allows remote attackers to execute arbitrary code or obtain sensitive information via a man-in-the-middle (MITM) attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5j68-8q79-7r23/GHSA-5j68-8q79-7r23.json b/advisories/unreviewed/2022/05/GHSA-5j68-8q79-7r23/GHSA-5j68-8q79-7r23.json index f5376016000..78cd696ecad 100644 --- a/advisories/unreviewed/2022/05/GHSA-5j68-8q79-7r23/GHSA-5j68-8q79-7r23.json +++ b/advisories/unreviewed/2022/05/GHSA-5j68-8q79-7r23/GHSA-5j68-8q79-7r23.json @@ -7,12 +7,8 @@ "CVE-2011-4715" ], "details": "Directory traversal vulnerability in cgi-bin/koha/mainpage.pl in Koha 3.4 before 3.4.7 and 3.6 before 3.6.1, and LibLime Koha 4.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the KohaOpacLanguage cookie to cgi-bin/opac/opac-main.pl, related to Output.pm.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5mmp-v3w4-wjmj/GHSA-5mmp-v3w4-wjmj.json b/advisories/unreviewed/2022/05/GHSA-5mmp-v3w4-wjmj/GHSA-5mmp-v3w4-wjmj.json index 6404dd0f367..c9c85a16679 100644 --- a/advisories/unreviewed/2022/05/GHSA-5mmp-v3w4-wjmj/GHSA-5mmp-v3w4-wjmj.json +++ b/advisories/unreviewed/2022/05/GHSA-5mmp-v3w4-wjmj/GHSA-5mmp-v3w4-wjmj.json @@ -7,12 +7,8 @@ "CVE-2011-2064" ], "details": "Cisco IOS 12.4MDA before 12.4(24)MDA5 on the Cisco Content Services Gateway - Second Generation (CSG2) allows remote attackers to cause a denial of service (device reload) via crafted ICMP packets, aka Bug ID CSCtl79577.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5mwh-q3f6-58c7/GHSA-5mwh-q3f6-58c7.json b/advisories/unreviewed/2022/05/GHSA-5mwh-q3f6-58c7/GHSA-5mwh-q3f6-58c7.json index 4177226dc62..787aa2b38f1 100644 --- a/advisories/unreviewed/2022/05/GHSA-5mwh-q3f6-58c7/GHSA-5mwh-q3f6-58c7.json +++ b/advisories/unreviewed/2022/05/GHSA-5mwh-q3f6-58c7/GHSA-5mwh-q3f6-58c7.json @@ -7,12 +7,8 @@ "CVE-2011-4171" ], "details": "Cross-site scripting (XSS) vulnerability in content/error.jsp in IBM WebSphere ILOG Rule Team Server 7.1.1 allows remote attackers to inject arbitrary web script or HTML via the project parameter to teamserver/faces/home.jsp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5p86-qj67-4q39/GHSA-5p86-qj67-4q39.json b/advisories/unreviewed/2022/05/GHSA-5p86-qj67-4q39/GHSA-5p86-qj67-4q39.json index 6a9dbab0e80..e809c60388d 100644 --- a/advisories/unreviewed/2022/05/GHSA-5p86-qj67-4q39/GHSA-5p86-qj67-4q39.json +++ b/advisories/unreviewed/2022/05/GHSA-5p86-qj67-4q39/GHSA-5p86-qj67-4q39.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5qcf-gv7x-9v73/GHSA-5qcf-gv7x-9v73.json b/advisories/unreviewed/2022/05/GHSA-5qcf-gv7x-9v73/GHSA-5qcf-gv7x-9v73.json index 46cae13f2e4..61da2bbc563 100644 --- a/advisories/unreviewed/2022/05/GHSA-5qcf-gv7x-9v73/GHSA-5qcf-gv7x-9v73.json +++ b/advisories/unreviewed/2022/05/GHSA-5qcf-gv7x-9v73/GHSA-5qcf-gv7x-9v73.json @@ -7,12 +7,8 @@ "CVE-2011-3255" ], "details": "CFNetwork in Apple iOS before 5 stores AppleID credentials in an unspecified file, which makes it easier for remote attackers to obtain sensitive information via a crafted application.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5qpr-74jv-67h8/GHSA-5qpr-74jv-67h8.json b/advisories/unreviewed/2022/05/GHSA-5qpr-74jv-67h8/GHSA-5qpr-74jv-67h8.json index 26e6610eca4..6a07e20a03f 100644 --- a/advisories/unreviewed/2022/05/GHSA-5qpr-74jv-67h8/GHSA-5qpr-74jv-67h8.json +++ b/advisories/unreviewed/2022/05/GHSA-5qpr-74jv-67h8/GHSA-5qpr-74jv-67h8.json @@ -7,12 +7,8 @@ "CVE-2011-3432" ], "details": "The UIKit Alerts component in Apple iOS before 5 allows remote attackers to cause a denial of service (device hang) via a long tel: URL that triggers a large size for the acceptance dialog.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5r62-rxfj-5682/GHSA-5r62-rxfj-5682.json b/advisories/unreviewed/2022/05/GHSA-5r62-rxfj-5682/GHSA-5r62-rxfj-5682.json index 16e7f432dca..8eda5d08032 100644 --- a/advisories/unreviewed/2022/05/GHSA-5r62-rxfj-5682/GHSA-5r62-rxfj-5682.json +++ b/advisories/unreviewed/2022/05/GHSA-5r62-rxfj-5682/GHSA-5r62-rxfj-5682.json @@ -7,12 +7,8 @@ "CVE-2011-5058" ], "details": "The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using \\ (backslash) characters in an HTTP GET request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5rcr-29fc-jp2f/GHSA-5rcr-29fc-jp2f.json b/advisories/unreviewed/2022/05/GHSA-5rcr-29fc-jp2f/GHSA-5rcr-29fc-jp2f.json index b52fadcfeb4..32412d09223 100644 --- a/advisories/unreviewed/2022/05/GHSA-5rcr-29fc-jp2f/GHSA-5rcr-29fc-jp2f.json +++ b/advisories/unreviewed/2022/05/GHSA-5rcr-29fc-jp2f/GHSA-5rcr-29fc-jp2f.json @@ -7,12 +7,8 @@ "CVE-2011-4714" ], "details": "Directory traversal vulnerability in Virtual Vertex Muster before 6.20 allows remote attackers to read arbitrary files via a \\.. (backslash dot dot) in the URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5rgv-j3xf-4664/GHSA-5rgv-j3xf-4664.json b/advisories/unreviewed/2022/05/GHSA-5rgv-j3xf-4664/GHSA-5rgv-j3xf-4664.json index 0e4493e2026..4f8369b018b 100644 --- a/advisories/unreviewed/2022/05/GHSA-5rgv-j3xf-4664/GHSA-5rgv-j3xf-4664.json +++ b/advisories/unreviewed/2022/05/GHSA-5rgv-j3xf-4664/GHSA-5rgv-j3xf-4664.json @@ -7,12 +7,8 @@ "CVE-2011-2680" ], "details": "Unspecified vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 has unknown impact and remote attack vectors related to the \"server error response.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5v2f-4jqv-9gvj/GHSA-5v2f-4jqv-9gvj.json b/advisories/unreviewed/2022/05/GHSA-5v2f-4jqv-9gvj/GHSA-5v2f-4jqv-9gvj.json index e5ccb6b4630..f9d0ca79496 100644 --- a/advisories/unreviewed/2022/05/GHSA-5v2f-4jqv-9gvj/GHSA-5v2f-4jqv-9gvj.json +++ b/advisories/unreviewed/2022/05/GHSA-5v2f-4jqv-9gvj/GHSA-5v2f-4jqv-9gvj.json @@ -7,12 +7,8 @@ "CVE-2011-3765" ], "details": "Open-Realty 2.5.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by install/versions/upgrade_115.inc.php and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5w35-gp6v-p9wh/GHSA-5w35-gp6v-p9wh.json b/advisories/unreviewed/2022/05/GHSA-5w35-gp6v-p9wh/GHSA-5w35-gp6v-p9wh.json index 9004db41deb..5d0d7058b0b 100644 --- a/advisories/unreviewed/2022/05/GHSA-5w35-gp6v-p9wh/GHSA-5w35-gp6v-p9wh.json +++ b/advisories/unreviewed/2022/05/GHSA-5w35-gp6v-p9wh/GHSA-5w35-gp6v-p9wh.json @@ -7,12 +7,8 @@ "CVE-2011-2885" ], "details": "IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via the sample .doc document that incorporates a user-defined toolbar.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5whq-qxj5-vrcg/GHSA-5whq-qxj5-vrcg.json b/advisories/unreviewed/2022/05/GHSA-5whq-qxj5-vrcg/GHSA-5whq-qxj5-vrcg.json index 68ae1e8f046..e05c1a3440e 100644 --- a/advisories/unreviewed/2022/05/GHSA-5whq-qxj5-vrcg/GHSA-5whq-qxj5-vrcg.json +++ b/advisories/unreviewed/2022/05/GHSA-5whq-qxj5-vrcg/GHSA-5whq-qxj5-vrcg.json @@ -7,12 +7,8 @@ "CVE-2011-5131" ], "details": "Cross-site request forgery (CSRF) vulnerability in global.php in MyBB before 1.6.5 allows remote attackers to hijack the authentication of a user for requests that change the user's language via the language parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5wj8-82fg-f5qg/GHSA-5wj8-82fg-f5qg.json b/advisories/unreviewed/2022/05/GHSA-5wj8-82fg-f5qg/GHSA-5wj8-82fg-f5qg.json index 06ac1c4ff92..9136d6a2dd8 100644 --- a/advisories/unreviewed/2022/05/GHSA-5wj8-82fg-f5qg/GHSA-5wj8-82fg-f5qg.json +++ b/advisories/unreviewed/2022/05/GHSA-5wj8-82fg-f5qg/GHSA-5wj8-82fg-f5qg.json @@ -7,12 +7,8 @@ "CVE-2011-5104" ], "details": "Cross-site scripting (XSS) vulnerability in wpsc-admin/display-sales-logs.php in WP e-Commerce plugin 3.8.7.1 and possibly earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the custom_text parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5wvh-hf6v-367v/GHSA-5wvh-hf6v-367v.json b/advisories/unreviewed/2022/05/GHSA-5wvh-hf6v-367v/GHSA-5wvh-hf6v-367v.json index 1b8f1477255..c2b6e493d47 100644 --- a/advisories/unreviewed/2022/05/GHSA-5wvh-hf6v-367v/GHSA-5wvh-hf6v-367v.json +++ b/advisories/unreviewed/2022/05/GHSA-5wvh-hf6v-367v/GHSA-5wvh-hf6v-367v.json @@ -7,12 +7,8 @@ "CVE-2011-3536" ], "details": "Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability, related to DTrace Software Library (libdtrace).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5x3c-6xxp-q54m/GHSA-5x3c-6xxp-q54m.json b/advisories/unreviewed/2022/05/GHSA-5x3c-6xxp-q54m/GHSA-5x3c-6xxp-q54m.json index 6e1772da3d9..b50008f6d81 100644 --- a/advisories/unreviewed/2022/05/GHSA-5x3c-6xxp-q54m/GHSA-5x3c-6xxp-q54m.json +++ b/advisories/unreviewed/2022/05/GHSA-5x3c-6xxp-q54m/GHSA-5x3c-6xxp-q54m.json @@ -7,12 +7,8 @@ "CVE-2011-2215" ], "details": "Unspecified vulnerability in WalRack 1.x before 1.1.8 and 2.x before 2.0.6 has unknown impact and attack vectors, possibly related to file deletion and an encoded URL, a different vulnerability than CVE-2011-1329.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5x4w-6r2x-m2rf/GHSA-5x4w-6r2x-m2rf.json b/advisories/unreviewed/2022/05/GHSA-5x4w-6r2x-m2rf/GHSA-5x4w-6r2x-m2rf.json index 95b9bdc4689..c6f63a7ff55 100644 --- a/advisories/unreviewed/2022/05/GHSA-5x4w-6r2x-m2rf/GHSA-5x4w-6r2x-m2rf.json +++ b/advisories/unreviewed/2022/05/GHSA-5x4w-6r2x-m2rf/GHSA-5x4w-6r2x-m2rf.json @@ -7,12 +7,8 @@ "CVE-2011-3231" ], "details": "The SSL implementation in Apple Safari before 5.1.1 on Mac OS X before 10.7 accesses uninitialized memory during the processing of X.509 certificates, which allows remote web servers to execute arbitrary code via a crafted certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-62gw-p866-4mj6/GHSA-62gw-p866-4mj6.json b/advisories/unreviewed/2022/05/GHSA-62gw-p866-4mj6/GHSA-62gw-p866-4mj6.json index 2fc60b9be3a..5d465607b1e 100644 --- a/advisories/unreviewed/2022/05/GHSA-62gw-p866-4mj6/GHSA-62gw-p866-4mj6.json +++ b/advisories/unreviewed/2022/05/GHSA-62gw-p866-4mj6/GHSA-62gw-p866-4mj6.json @@ -7,12 +7,8 @@ "CVE-2010-4991" ], "details": "SQL injection vulnerability in the NinjaMonials (com_ninjamonials) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a display action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-632v-552r-cwqq/GHSA-632v-552r-cwqq.json b/advisories/unreviewed/2022/05/GHSA-632v-552r-cwqq/GHSA-632v-552r-cwqq.json index 3beab9d5b4f..54befd908f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-632v-552r-cwqq/GHSA-632v-552r-cwqq.json +++ b/advisories/unreviewed/2022/05/GHSA-632v-552r-cwqq/GHSA-632v-552r-cwqq.json @@ -7,12 +7,8 @@ "CVE-2011-4760" ], "details": "Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that are not intended for correspondence about the local application deployment, which allows remote attackers to obtain potentially sensitive information by reading a page, as demonstrated by smb/email-address/list and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-65qc-428h-wjmw/GHSA-65qc-428h-wjmw.json b/advisories/unreviewed/2022/05/GHSA-65qc-428h-wjmw/GHSA-65qc-428h-wjmw.json index 06ce0938b17..8cfab1550f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-65qc-428h-wjmw/GHSA-65qc-428h-wjmw.json +++ b/advisories/unreviewed/2022/05/GHSA-65qc-428h-wjmw/GHSA-65qc-428h-wjmw.json @@ -7,12 +7,8 @@ "CVE-2011-5032" ], "details": "WMDrive.sys 3.4.181.224 in WinMount 3.5.1018 allows local users to cause a denial of service (NULL pointer dereference and system crash) via a crafted 0x87342000 IOCTL request to the WMDriver device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-66cg-5r63-3qf4/GHSA-66cg-5r63-3qf4.json b/advisories/unreviewed/2022/05/GHSA-66cg-5r63-3qf4/GHSA-66cg-5r63-3qf4.json index c2d960405e6..a2fd03956ea 100644 --- a/advisories/unreviewed/2022/05/GHSA-66cg-5r63-3qf4/GHSA-66cg-5r63-3qf4.json +++ b/advisories/unreviewed/2022/05/GHSA-66cg-5r63-3qf4/GHSA-66cg-5r63-3qf4.json @@ -7,12 +7,8 @@ "CVE-2010-4990" ], "details": "SQL injection vulnerability in the Front-edit Address Book (com_addressbook) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a contact action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-66j3-66cp-6c2m/GHSA-66j3-66cp-6c2m.json b/advisories/unreviewed/2022/05/GHSA-66j3-66cp-6c2m/GHSA-66j3-66cp-6c2m.json index 4914b76b656..f9331cb852d 100644 --- a/advisories/unreviewed/2022/05/GHSA-66j3-66cp-6c2m/GHSA-66j3-66cp-6c2m.json +++ b/advisories/unreviewed/2022/05/GHSA-66j3-66cp-6c2m/GHSA-66j3-66cp-6c2m.json @@ -7,12 +7,8 @@ "CVE-2010-5099" ], "details": "The fileDenyPattern functionality in the PHP file inclusion protection API in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 does not properly filter file types, which allows remote attackers to bypass intended access restrictions and access arbitrary PHP files, as demonstrated using path traversal sequences with %00 null bytes and CVE-2010-3714 to read the TYPO3 encryption key from localconf.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-66rw-8rf9-j94c/GHSA-66rw-8rf9-j94c.json b/advisories/unreviewed/2022/05/GHSA-66rw-8rf9-j94c/GHSA-66rw-8rf9-j94c.json index b2fc5bc0716..a79d4db0b50 100644 --- a/advisories/unreviewed/2022/05/GHSA-66rw-8rf9-j94c/GHSA-66rw-8rf9-j94c.json +++ b/advisories/unreviewed/2022/05/GHSA-66rw-8rf9-j94c/GHSA-66rw-8rf9-j94c.json @@ -7,12 +7,8 @@ "CVE-2010-5283" ], "details": "Cross-site request forgery (CSRF) vulnerability in OpenText ECM (formerly Livelink ECM) 9.7.1 allows remote attackers to hijack the authentication of administrators for requests that change folder and resource permissions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-68j8-3925-2xgx/GHSA-68j8-3925-2xgx.json b/advisories/unreviewed/2022/05/GHSA-68j8-3925-2xgx/GHSA-68j8-3925-2xgx.json index c7dd8457f4f..c9e581ae416 100644 --- a/advisories/unreviewed/2022/05/GHSA-68j8-3925-2xgx/GHSA-68j8-3925-2xgx.json +++ b/advisories/unreviewed/2022/05/GHSA-68j8-3925-2xgx/GHSA-68j8-3925-2xgx.json @@ -7,12 +7,8 @@ "CVE-2011-2592" ], "details": "Heap-based buffer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x before 9.3-57.5 and 10.0 before 10.0-69.4 allows remote attackers to execute arbitrary code via a long CSEC HTTP response header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6frh-9qr3-hg6g/GHSA-6frh-9qr3-hg6g.json b/advisories/unreviewed/2022/05/GHSA-6frh-9qr3-hg6g/GHSA-6frh-9qr3-hg6g.json index 888b17d0747..9c8294ae381 100644 --- a/advisories/unreviewed/2022/05/GHSA-6frh-9qr3-hg6g/GHSA-6frh-9qr3-hg6g.json +++ b/advisories/unreviewed/2022/05/GHSA-6frh-9qr3-hg6g/GHSA-6frh-9qr3-hg6g.json @@ -7,12 +7,8 @@ "CVE-2011-5044" ], "details": "SopCast 3.4.7.45585 uses weak permissions (Everyone:Full Control) for Diagnose.exe, which allows local users to execute arbitrary code by replacing Diagnose.exe with a Trojan horse program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6g4x-pv62-q3c5/GHSA-6g4x-pv62-q3c5.json b/advisories/unreviewed/2022/05/GHSA-6g4x-pv62-q3c5/GHSA-6g4x-pv62-q3c5.json index ea9d3c56c86..71bcd51e013 100644 --- a/advisories/unreviewed/2022/05/GHSA-6g4x-pv62-q3c5/GHSA-6g4x-pv62-q3c5.json +++ b/advisories/unreviewed/2022/05/GHSA-6g4x-pv62-q3c5/GHSA-6g4x-pv62-q3c5.json @@ -7,12 +7,8 @@ "CVE-2010-4824" ], "details": "SQL injection vulnerability in the augmentSQL method in core/model/Translatable.php in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4, when the Translatable extension is enabled, allows remote attackers to execute arbitrary SQL commands via the locale parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6gqp-2hxf-rf3x/GHSA-6gqp-2hxf-rf3x.json b/advisories/unreviewed/2022/05/GHSA-6gqp-2hxf-rf3x/GHSA-6gqp-2hxf-rf3x.json index 976a34c70fc..1de45e6c4a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-6gqp-2hxf-rf3x/GHSA-6gqp-2hxf-rf3x.json +++ b/advisories/unreviewed/2022/05/GHSA-6gqp-2hxf-rf3x/GHSA-6gqp-2hxf-rf3x.json @@ -7,12 +7,8 @@ "CVE-2011-4223" ], "details": "Unspecified vulnerability in Investintech.com Absolute PDF Server allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6gv6-rg33-vqj8/GHSA-6gv6-rg33-vqj8.json b/advisories/unreviewed/2022/05/GHSA-6gv6-rg33-vqj8/GHSA-6gv6-rg33-vqj8.json index 8a632e49d01..300ebc160aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-6gv6-rg33-vqj8/GHSA-6gv6-rg33-vqj8.json +++ b/advisories/unreviewed/2022/05/GHSA-6gv6-rg33-vqj8/GHSA-6gv6-rg33-vqj8.json @@ -7,12 +7,8 @@ "CVE-2011-4570" ], "details": "SQL injection vulnerability in the Time Returns (com_timereturns) component 2.0 and possibly earlier versions for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a timereturns action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6jj8-63q6-89g6/GHSA-6jj8-63q6-89g6.json b/advisories/unreviewed/2022/05/GHSA-6jj8-63q6-89g6/GHSA-6jj8-63q6-89g6.json index fba5538b93a..ae3a4bc771f 100644 --- a/advisories/unreviewed/2022/05/GHSA-6jj8-63q6-89g6/GHSA-6jj8-63q6-89g6.json +++ b/advisories/unreviewed/2022/05/GHSA-6jj8-63q6-89g6/GHSA-6jj8-63q6-89g6.json @@ -7,12 +7,8 @@ "CVE-2011-4921" ], "details": "SQL injection vulnerability in usersettings.php in e107 0.7.26, and possibly other versions before 1.0.0, allows remote attackers to execute arbitrary SQL commands via the username parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6jp2-r6h3-8p6g/GHSA-6jp2-r6h3-8p6g.json b/advisories/unreviewed/2022/05/GHSA-6jp2-r6h3-8p6g/GHSA-6jp2-r6h3-8p6g.json index 06b585bd17c..3a0016935f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-6jp2-r6h3-8p6g/GHSA-6jp2-r6h3-8p6g.json +++ b/advisories/unreviewed/2022/05/GHSA-6jp2-r6h3-8p6g/GHSA-6jp2-r6h3-8p6g.json @@ -7,12 +7,8 @@ "CVE-2011-3242" ], "details": "The Private Browsing feature in Apple Safari before 5.1.1 on Mac OS X does not properly recognize the Always value of the Block Cookies setting, which makes it easier for remote web servers to track users via a cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6m36-mm5v-4w86/GHSA-6m36-mm5v-4w86.json b/advisories/unreviewed/2022/05/GHSA-6m36-mm5v-4w86/GHSA-6m36-mm5v-4w86.json index fc0f124f8af..2b2ccf17f70 100644 --- a/advisories/unreviewed/2022/05/GHSA-6m36-mm5v-4w86/GHSA-6m36-mm5v-4w86.json +++ b/advisories/unreviewed/2022/05/GHSA-6m36-mm5v-4w86/GHSA-6m36-mm5v-4w86.json @@ -7,12 +7,8 @@ "CVE-2011-2607" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165513.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6mx8-h5cj-9q2h/GHSA-6mx8-h5cj-9q2h.json b/advisories/unreviewed/2022/05/GHSA-6mx8-h5cj-9q2h/GHSA-6mx8-h5cj-9q2h.json index 03347379e4a..d8178de5090 100644 --- a/advisories/unreviewed/2022/05/GHSA-6mx8-h5cj-9q2h/GHSA-6mx8-h5cj-9q2h.json +++ b/advisories/unreviewed/2022/05/GHSA-6mx8-h5cj-9q2h/GHSA-6mx8-h5cj-9q2h.json @@ -7,12 +7,8 @@ "CVE-2010-4999" ], "details": "SQL injection vulnerability in index.php in esoftpro Online Photo Pro 2.0 allows remote attackers to execute arbitrary SQL commands via the section parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6p97-f23g-3q9r/GHSA-6p97-f23g-3q9r.json b/advisories/unreviewed/2022/05/GHSA-6p97-f23g-3q9r/GHSA-6p97-f23g-3q9r.json index 3ad38e05221..1557235d0fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-6p97-f23g-3q9r/GHSA-6p97-f23g-3q9r.json +++ b/advisories/unreviewed/2022/05/GHSA-6p97-f23g-3q9r/GHSA-6p97-f23g-3q9r.json @@ -7,12 +7,8 @@ "CVE-2011-3135" ], "details": "Unspecified vulnerability in the Runtime in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.9 has unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6pg7-8crq-hwmr/GHSA-6pg7-8crq-hwmr.json b/advisories/unreviewed/2022/05/GHSA-6pg7-8crq-hwmr/GHSA-6pg7-8crq-hwmr.json index 4b4ef6e2269..197e09fc8f8 100644 --- a/advisories/unreviewed/2022/05/GHSA-6pg7-8crq-hwmr/GHSA-6pg7-8crq-hwmr.json +++ b/advisories/unreviewed/2022/05/GHSA-6pg7-8crq-hwmr/GHSA-6pg7-8crq-hwmr.json @@ -7,12 +7,8 @@ "CVE-2011-3354" ], "details": "The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial of service (crash) via a crafted Client-To-Client Protocol (CTCP) request, as demonstrated in the wild in September 2011.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6qwj-3rxx-5p34/GHSA-6qwj-3rxx-5p34.json b/advisories/unreviewed/2022/05/GHSA-6qwj-3rxx-5p34/GHSA-6qwj-3rxx-5p34.json index 141c5338cec..434cfe4859a 100644 --- a/advisories/unreviewed/2022/05/GHSA-6qwj-3rxx-5p34/GHSA-6qwj-3rxx-5p34.json +++ b/advisories/unreviewed/2022/05/GHSA-6qwj-3rxx-5p34/GHSA-6qwj-3rxx-5p34.json @@ -7,12 +7,8 @@ "CVE-2011-2385" ], "details": "The iPhoneHandle package 0.9.x before 0.9.7 and 1.0.x before 1.0.3 in Open Ticket Request System (OTRS) does not properly restrict use of the iPhoneHandle interface, which allows remote authenticated users to gain privileges, and consequently read or modify OTRS core objects, via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6r4p-jq9h-32x2/GHSA-6r4p-jq9h-32x2.json b/advisories/unreviewed/2022/05/GHSA-6r4p-jq9h-32x2/GHSA-6r4p-jq9h-32x2.json index f05c6ae5006..f99b508ace9 100644 --- a/advisories/unreviewed/2022/05/GHSA-6r4p-jq9h-32x2/GHSA-6r4p-jq9h-32x2.json +++ b/advisories/unreviewed/2022/05/GHSA-6r4p-jq9h-32x2/GHSA-6r4p-jq9h-32x2.json @@ -7,12 +7,8 @@ "CVE-2010-4987" ], "details": "SQL injection vulnerability in default.asp in KMSoft Guestbook (aka GBook) allows remote attackers to execute arbitrary SQL commands via the p parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6r5j-4fjx-5598/GHSA-6r5j-4fjx-5598.json b/advisories/unreviewed/2022/05/GHSA-6r5j-4fjx-5598/GHSA-6r5j-4fjx-5598.json index 49c9444a91b..4d25ccda05d 100644 --- a/advisories/unreviewed/2022/05/GHSA-6r5j-4fjx-5598/GHSA-6r5j-4fjx-5598.json +++ b/advisories/unreviewed/2022/05/GHSA-6r5j-4fjx-5598/GHSA-6r5j-4fjx-5598.json @@ -7,12 +7,8 @@ "CVE-2011-5005" ], "details": "Unrestricted file upload vulnerability in QuiXplorer 2.3 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension using the upload action to index.php, then accessing it via a direct request to the file in an unspecified directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6r74-5g4q-9hq5/GHSA-6r74-5g4q-9hq5.json b/advisories/unreviewed/2022/05/GHSA-6r74-5g4q-9hq5/GHSA-6r74-5g4q-9hq5.json index dc27c3f0126..634bbd9e8b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-6r74-5g4q-9hq5/GHSA-6r74-5g4q-9hq5.json +++ b/advisories/unreviewed/2022/05/GHSA-6r74-5g4q-9hq5/GHSA-6r74-5g4q-9hq5.json @@ -7,12 +7,8 @@ "CVE-2011-3771" ], "details": "phpBook 2.1.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by doc/update_smilies_1.50-1.60.php and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6r7x-82r7-jm49/GHSA-6r7x-82r7-jm49.json b/advisories/unreviewed/2022/05/GHSA-6r7x-82r7-jm49/GHSA-6r7x-82r7-jm49.json index 2773329e421..54b3e3d0ad8 100644 --- a/advisories/unreviewed/2022/05/GHSA-6r7x-82r7-jm49/GHSA-6r7x-82r7-jm49.json +++ b/advisories/unreviewed/2022/05/GHSA-6r7x-82r7-jm49/GHSA-6r7x-82r7-jm49.json @@ -7,12 +7,8 @@ "CVE-2011-2400" ], "details": "Cross-site scripting (XSS) vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6v7g-4373-j423/GHSA-6v7g-4373-j423.json b/advisories/unreviewed/2022/05/GHSA-6v7g-4373-j423/GHSA-6v7g-4373-j423.json index 1c9dc9daf7d..df8534995df 100644 --- a/advisories/unreviewed/2022/05/GHSA-6v7g-4373-j423/GHSA-6v7g-4373-j423.json +++ b/advisories/unreviewed/2022/05/GHSA-6v7g-4373-j423/GHSA-6v7g-4373-j423.json @@ -7,12 +7,8 @@ "CVE-2011-4211" ], "details": "The FakeFile implementation in the sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly control the opening of files, which allows local users to bypass intended access restrictions and create arbitrary files via ALLOWED_MODES and ALLOWED_DIRS changes within the code parameter to _ah/admin/interactive/execute, a different vulnerability than CVE-2011-1364.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6vvx-44r8-m58w/GHSA-6vvx-44r8-m58w.json b/advisories/unreviewed/2022/05/GHSA-6vvx-44r8-m58w/GHSA-6vvx-44r8-m58w.json index 88a1cabf8ef..e44cc18b855 100644 --- a/advisories/unreviewed/2022/05/GHSA-6vvx-44r8-m58w/GHSA-6vvx-44r8-m58w.json +++ b/advisories/unreviewed/2022/05/GHSA-6vvx-44r8-m58w/GHSA-6vvx-44r8-m58w.json @@ -7,12 +7,8 @@ "CVE-2011-3991" ], "details": "Untrusted search path vulnerability in FFFTP 1.98a and earlier allows local users to execute arbitrary code via unspecified functions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6w9r-hx89-h863/GHSA-6w9r-hx89-h863.json b/advisories/unreviewed/2022/05/GHSA-6w9r-hx89-h863/GHSA-6w9r-hx89-h863.json index 6d9d4c4c8d5..29937ba26b2 100644 --- a/advisories/unreviewed/2022/05/GHSA-6w9r-hx89-h863/GHSA-6w9r-hx89-h863.json +++ b/advisories/unreviewed/2022/05/GHSA-6w9r-hx89-h863/GHSA-6w9r-hx89-h863.json @@ -7,12 +7,8 @@ "CVE-2011-2666" ], "details": "The default configuration of the SIP channel driver in Asterisk Open Source 1.4.x through 1.4.41.2 and 1.6.2.x through 1.6.2.18.2 does not enable the alwaysauthreject option, which allows remote attackers to enumerate account names by making a series of invalid SIP requests and observing the differences in the responses for different usernames, a different vulnerability than CVE-2011-2536.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6wqg-hrhc-g2f4/GHSA-6wqg-hrhc-g2f4.json b/advisories/unreviewed/2022/05/GHSA-6wqg-hrhc-g2f4/GHSA-6wqg-hrhc-g2f4.json index 4e8c6c8be76..6cd4c14d668 100644 --- a/advisories/unreviewed/2022/05/GHSA-6wqg-hrhc-g2f4/GHSA-6wqg-hrhc-g2f4.json +++ b/advisories/unreviewed/2022/05/GHSA-6wqg-hrhc-g2f4/GHSA-6wqg-hrhc-g2f4.json @@ -7,12 +7,8 @@ "CVE-2011-5030" ], "details": "Cross-site scripting (XSS) vulnerability in the Meta tags quick module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors, probably related to \"names of entity bundles.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6xqx-v8qv-h8xm/GHSA-6xqx-v8qv-h8xm.json b/advisories/unreviewed/2022/05/GHSA-6xqx-v8qv-h8xm/GHSA-6xqx-v8qv-h8xm.json index bfa257ed811..e7f8ca824ba 100644 --- a/advisories/unreviewed/2022/05/GHSA-6xqx-v8qv-h8xm/GHSA-6xqx-v8qv-h8xm.json +++ b/advisories/unreviewed/2022/05/GHSA-6xqx-v8qv-h8xm/GHSA-6xqx-v8qv-h8xm.json @@ -7,12 +7,8 @@ "CVE-2011-4869" ], "details": "validator/val_nsec3.c in Unbound before 1.4.13p2 does not properly perform proof processing for NSEC3-signed zones, which allows remote DNS servers to cause a denial of service (daemon crash) via a malformed response that lacks expected NSEC3 records, a different vulnerability than CVE-2011-4528.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-72p4-rwjm-2823/GHSA-72p4-rwjm-2823.json b/advisories/unreviewed/2022/05/GHSA-72p4-rwjm-2823/GHSA-72p4-rwjm-2823.json index 4286d133213..649272dbcf9 100644 --- a/advisories/unreviewed/2022/05/GHSA-72p4-rwjm-2823/GHSA-72p4-rwjm-2823.json +++ b/advisories/unreviewed/2022/05/GHSA-72p4-rwjm-2823/GHSA-72p4-rwjm-2823.json @@ -7,12 +7,8 @@ "CVE-2010-4979" ], "details": "SQL injection vulnerability in image/view.php in CANDID allows remote attackers to execute arbitrary SQL commands via the image_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-72p9-rxf3-x74w/GHSA-72p9-rxf3-x74w.json b/advisories/unreviewed/2022/05/GHSA-72p9-rxf3-x74w/GHSA-72p9-rxf3-x74w.json index 6c21883439b..6b1d3838af5 100644 --- a/advisories/unreviewed/2022/05/GHSA-72p9-rxf3-x74w/GHSA-72p9-rxf3-x74w.json +++ b/advisories/unreviewed/2022/05/GHSA-72p9-rxf3-x74w/GHSA-72p9-rxf3-x74w.json @@ -7,12 +7,8 @@ "CVE-2011-3257" ], "details": "The Data Access component in Apple iOS before 5 does not properly handle the existence of multiple user accounts on the same mail server, which allows local users to bypass intended access restrictions in opportunistic circumstances by leveraging a different account's cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7365-f7j8-fr6c/GHSA-7365-f7j8-fr6c.json b/advisories/unreviewed/2022/05/GHSA-7365-f7j8-fr6c/GHSA-7365-f7j8-fr6c.json index d2ed3cd344b..4295f18e678 100644 --- a/advisories/unreviewed/2022/05/GHSA-7365-f7j8-fr6c/GHSA-7365-f7j8-fr6c.json +++ b/advisories/unreviewed/2022/05/GHSA-7365-f7j8-fr6c/GHSA-7365-f7j8-fr6c.json @@ -7,12 +7,8 @@ "CVE-2011-3829" ], "details": "ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to obtain sensitive information via the file name, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7445-q6fm-5g46/GHSA-7445-q6fm-5g46.json b/advisories/unreviewed/2022/05/GHSA-7445-q6fm-5g46/GHSA-7445-q6fm-5g46.json index 90096f965a4..2ff60688700 100644 --- a/advisories/unreviewed/2022/05/GHSA-7445-q6fm-5g46/GHSA-7445-q6fm-5g46.json +++ b/advisories/unreviewed/2022/05/GHSA-7445-q6fm-5g46/GHSA-7445-q6fm-5g46.json @@ -7,12 +7,8 @@ "CVE-2011-2165" ], "details": "The STARTTLS implementation in WatchGuard XCS 9.0 and 9.1 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a \"plaintext command injection\" attack, a similar issue to CVE-2011-0411.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-74h6-2hgj-rvpx/GHSA-74h6-2hgj-rvpx.json b/advisories/unreviewed/2022/05/GHSA-74h6-2hgj-rvpx/GHSA-74h6-2hgj-rvpx.json index bc8e98d9bf9..f29b8b1d483 100644 --- a/advisories/unreviewed/2022/05/GHSA-74h6-2hgj-rvpx/GHSA-74h6-2hgj-rvpx.json +++ b/advisories/unreviewed/2022/05/GHSA-74h6-2hgj-rvpx/GHSA-74h6-2hgj-rvpx.json @@ -7,12 +7,8 @@ "CVE-2011-3486" ], "details": "Beckhoff TwinCAT 2.11.0.2004 and earlier allows remote attackers to cause a denial of service via a crafted request to UDP port 48899, which triggers an out-of-bounds read.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-74pr-q6xp-x6f3/GHSA-74pr-q6xp-x6f3.json b/advisories/unreviewed/2022/05/GHSA-74pr-q6xp-x6f3/GHSA-74pr-q6xp-x6f3.json index 1889f857bf5..59f4f033b25 100644 --- a/advisories/unreviewed/2022/05/GHSA-74pr-q6xp-x6f3/GHSA-74pr-q6xp-x6f3.json +++ b/advisories/unreviewed/2022/05/GHSA-74pr-q6xp-x6f3/GHSA-74pr-q6xp-x6f3.json @@ -7,12 +7,8 @@ "CVE-2011-2907" ], "details": "Terascale Open-Source Resource and Queue Manager (aka TORQUE Resource Manager) 3.0.1 and earlier allows remote attackers to bypass host-based authentication and submit arbitrary jobs via a modified PBS_O_HOST variable to the qsub program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-755h-qpqx-6774/GHSA-755h-qpqx-6774.json b/advisories/unreviewed/2022/05/GHSA-755h-qpqx-6774/GHSA-755h-qpqx-6774.json index 3ef563370ed..689e73c38b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-755h-qpqx-6774/GHSA-755h-qpqx-6774.json +++ b/advisories/unreviewed/2022/05/GHSA-755h-qpqx-6774/GHSA-755h-qpqx-6774.json @@ -7,12 +7,8 @@ "CVE-2010-5290" ], "details": "The authentication process in Adobe ColdFusion before 10 does not require knowledge of the cleartext password if the password hash is known, which makes it easier for context-dependent attackers to obtain administrative privileges by leveraging read access to the configuration file, a different vulnerability than CVE-2010-2861.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7734-ppwx-cfgh/GHSA-7734-ppwx-cfgh.json b/advisories/unreviewed/2022/05/GHSA-7734-ppwx-cfgh/GHSA-7734-ppwx-cfgh.json index 776e198cc62..f49abe41549 100644 --- a/advisories/unreviewed/2022/05/GHSA-7734-ppwx-cfgh/GHSA-7734-ppwx-cfgh.json +++ b/advisories/unreviewed/2022/05/GHSA-7734-ppwx-cfgh/GHSA-7734-ppwx-cfgh.json @@ -7,12 +7,8 @@ "CVE-2011-3264" ], "details": "Zabbix before 1.8.6 allows remote attackers to obtain sensitive information via an invalid srcfld2 parameter to popup.php, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-778p-3h84-7r8x/GHSA-778p-3h84-7r8x.json b/advisories/unreviewed/2022/05/GHSA-778p-3h84-7r8x/GHSA-778p-3h84-7r8x.json index 4a808e0abb8..0b71531ca2b 100644 --- a/advisories/unreviewed/2022/05/GHSA-778p-3h84-7r8x/GHSA-778p-3h84-7r8x.json +++ b/advisories/unreviewed/2022/05/GHSA-778p-3h84-7r8x/GHSA-778p-3h84-7r8x.json @@ -7,12 +7,8 @@ "CVE-2011-3182" ], "details": "PHP before 5.3.7 does not properly check the return values of the malloc, calloc, and realloc library functions, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) or trigger a buffer overflow by leveraging the ability to provide an arbitrary value for a function argument, related to (1) ext/curl/interface.c, (2) ext/date/lib/parse_date.c, (3) ext/date/lib/parse_iso_intervals.c, (4) ext/date/lib/parse_tz.c, (5) ext/date/lib/timelib.c, (6) ext/pdo_odbc/pdo_odbc.c, (7) ext/reflection/php_reflection.c, (8) ext/soap/php_sdl.c, (9) ext/xmlrpc/libxmlrpc/base64.c, (10) TSRM/tsrm_win32.c, and (11) the strtotime function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-77jf-38wv-64j5/GHSA-77jf-38wv-64j5.json b/advisories/unreviewed/2022/05/GHSA-77jf-38wv-64j5/GHSA-77jf-38wv-64j5.json index 94af81db2c6..ed309789d7c 100644 --- a/advisories/unreviewed/2022/05/GHSA-77jf-38wv-64j5/GHSA-77jf-38wv-64j5.json +++ b/advisories/unreviewed/2022/05/GHSA-77jf-38wv-64j5/GHSA-77jf-38wv-64j5.json @@ -7,12 +7,8 @@ "CVE-2011-5135" ], "details": "Multiple SQL injection vulnerabilities in the save_connection function in lib/lib.iotask.php in the iotask module in DoceboLMS 4.0.4 and earlier allow remote authenticated users with admin or teacher privileges to execute arbitrary SQL commands via the (1) coursereportuiconfig[name] or (2) coursereportuiconfig[description] parameters to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-78p6-gw7m-4w9j/GHSA-78p6-gw7m-4w9j.json b/advisories/unreviewed/2022/05/GHSA-78p6-gw7m-4w9j/GHSA-78p6-gw7m-4w9j.json index 42a7b5e94f7..27515dee1e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-78p6-gw7m-4w9j/GHSA-78p6-gw7m-4w9j.json +++ b/advisories/unreviewed/2022/05/GHSA-78p6-gw7m-4w9j/GHSA-78p6-gw7m-4w9j.json @@ -7,12 +7,8 @@ "CVE-2011-4785" ], "details": "Directory traversal vulnerability in the HP-ChaiSOE/1.0 web server on the HP LaserJet P3015 printer with firmware before 07.080.3, LaserJet 4650 printer with firmware 07.006.0, and LaserJet 2430 printer with firmware 08.113.0_I35128 allows remote attackers to read arbitrary files via unspecified vectors, a different vulnerability than CVE-2008-4419.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-793j-qhp7-32f5/GHSA-793j-qhp7-32f5.json b/advisories/unreviewed/2022/05/GHSA-793j-qhp7-32f5/GHSA-793j-qhp7-32f5.json index 74f6ddb4ef0..19c3c300a6f 100644 --- a/advisories/unreviewed/2022/05/GHSA-793j-qhp7-32f5/GHSA-793j-qhp7-32f5.json +++ b/advisories/unreviewed/2022/05/GHSA-793j-qhp7-32f5/GHSA-793j-qhp7-32f5.json @@ -7,12 +7,8 @@ "CVE-2011-2126" ], "details": "Buffer overflow in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-79pw-j974-3gj9/GHSA-79pw-j974-3gj9.json b/advisories/unreviewed/2022/05/GHSA-79pw-j974-3gj9/GHSA-79pw-j974-3gj9.json index 0ce1c09b184..74a1ad6ec39 100644 --- a/advisories/unreviewed/2022/05/GHSA-79pw-j974-3gj9/GHSA-79pw-j974-3gj9.json +++ b/advisories/unreviewed/2022/05/GHSA-79pw-j974-3gj9/GHSA-79pw-j974-3gj9.json @@ -7,12 +7,8 @@ "CVE-2011-3831" ], "details": "SQL injection vulnerability in incident_attachments.php in Support Incident Tracker (aka SiT!) 3.65 allows remote attackers to execute arbitrary SQL commands via an uploaded file with a crafted file name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7c3w-2xrv-p2m3/GHSA-7c3w-2xrv-p2m3.json b/advisories/unreviewed/2022/05/GHSA-7c3w-2xrv-p2m3/GHSA-7c3w-2xrv-p2m3.json index 09557bd9e0d..a99f7d52a15 100644 --- a/advisories/unreviewed/2022/05/GHSA-7c3w-2xrv-p2m3/GHSA-7c3w-2xrv-p2m3.json +++ b/advisories/unreviewed/2022/05/GHSA-7c3w-2xrv-p2m3/GHSA-7c3w-2xrv-p2m3.json @@ -7,12 +7,8 @@ "CVE-2010-5043" ], "details": "SQL injection vulnerability in the DJ-ArtGallery (com_djartgallery) component 0.9.1 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the cid[] parameter in an editItem action to administrator/index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7cfx-84cc-74rq/GHSA-7cfx-84cc-74rq.json b/advisories/unreviewed/2022/05/GHSA-7cfx-84cc-74rq/GHSA-7cfx-84cc-74rq.json index 2ce7347bd51..1a2f1c15106 100644 --- a/advisories/unreviewed/2022/05/GHSA-7cfx-84cc-74rq/GHSA-7cfx-84cc-74rq.json +++ b/advisories/unreviewed/2022/05/GHSA-7cfx-84cc-74rq/GHSA-7cfx-84cc-74rq.json @@ -7,12 +7,8 @@ "CVE-2011-2555" ], "details": "Cisco TelePresence Recording Server 1.7.2.x before 1.7.2.1 has a default password for the root administrator account, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtr76182.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7gr4-5g4h-q48g/GHSA-7gr4-5g4h-q48g.json b/advisories/unreviewed/2022/05/GHSA-7gr4-5g4h-q48g/GHSA-7gr4-5g4h-q48g.json index 56f8604db6f..5918638566a 100644 --- a/advisories/unreviewed/2022/05/GHSA-7gr4-5g4h-q48g/GHSA-7gr4-5g4h-q48g.json +++ b/advisories/unreviewed/2022/05/GHSA-7gr4-5g4h-q48g/GHSA-7gr4-5g4h-q48g.json @@ -7,12 +7,8 @@ "CVE-2011-2889" ], "details": "templates/system/error.php in Joomla! before 1.5.23 might allow remote attackers to obtain sensitive information via unspecified vectors that trigger an undefined value of a certain error field, leading to disclosure of the installation path. NOTE: this might overlap CVE-2011-2488.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7hg5-qmfc-g9mf/GHSA-7hg5-qmfc-g9mf.json b/advisories/unreviewed/2022/05/GHSA-7hg5-qmfc-g9mf/GHSA-7hg5-qmfc-g9mf.json index 244257f16b4..b6cfab4ba2b 100644 --- a/advisories/unreviewed/2022/05/GHSA-7hg5-qmfc-g9mf/GHSA-7hg5-qmfc-g9mf.json +++ b/advisories/unreviewed/2022/05/GHSA-7hg5-qmfc-g9mf/GHSA-7hg5-qmfc-g9mf.json @@ -7,12 +7,8 @@ "CVE-2011-4920" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in e107 0.7.26, and other versions before 1.0.0, allow remote attackers to inject arbitrary web script or HTML via the URL to (1) e107_images/thumb.php or (2) rate.php, (3) resend_name parameter to e107_admin/users.php, and (4) link BBCode in user signatures.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7hmq-jcvc-j3gv/GHSA-7hmq-jcvc-j3gv.json b/advisories/unreviewed/2022/05/GHSA-7hmq-jcvc-j3gv/GHSA-7hmq-jcvc-j3gv.json index 209a604f51d..64b0784fb95 100644 --- a/advisories/unreviewed/2022/05/GHSA-7hmq-jcvc-j3gv/GHSA-7hmq-jcvc-j3gv.json +++ b/advisories/unreviewed/2022/05/GHSA-7hmq-jcvc-j3gv/GHSA-7hmq-jcvc-j3gv.json @@ -7,12 +7,8 @@ "CVE-2011-4221" ], "details": "Unspecified vulnerability in Investintech.com Able2Doc and Able2Doc Professional allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted document.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7jpc-9q98-9w88/GHSA-7jpc-9q98-9w88.json b/advisories/unreviewed/2022/05/GHSA-7jpc-9q98-9w88/GHSA-7jpc-9q98-9w88.json index 4712ff0436b..823e21f2a33 100644 --- a/advisories/unreviewed/2022/05/GHSA-7jpc-9q98-9w88/GHSA-7jpc-9q98-9w88.json +++ b/advisories/unreviewed/2022/05/GHSA-7jpc-9q98-9w88/GHSA-7jpc-9q98-9w88.json @@ -7,12 +7,8 @@ "CVE-2011-3766" ], "details": "OrangeHRM 2.6.0.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/orange/menu/Menu.php and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7mmw-mfh4-g635/GHSA-7mmw-mfh4-g635.json b/advisories/unreviewed/2022/05/GHSA-7mmw-mfh4-g635/GHSA-7mmw-mfh4-g635.json index 9d735890086..4109cf84943 100644 --- a/advisories/unreviewed/2022/05/GHSA-7mmw-mfh4-g635/GHSA-7mmw-mfh4-g635.json +++ b/advisories/unreviewed/2022/05/GHSA-7mmw-mfh4-g635/GHSA-7mmw-mfh4-g635.json @@ -7,12 +7,8 @@ "CVE-2011-3296" ], "details": "Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when IPv6 is used, allows remote attackers to cause a denial of service (memory corruption and module crash or hang) via vectors that trigger syslog message 302015, aka Bug ID CSCti83875.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7mp8-g4mf-ww9g/GHSA-7mp8-g4mf-ww9g.json b/advisories/unreviewed/2022/05/GHSA-7mp8-g4mf-ww9g/GHSA-7mp8-g4mf-ww9g.json index cf82a74e651..51e59a127b2 100644 --- a/advisories/unreviewed/2022/05/GHSA-7mp8-g4mf-ww9g/GHSA-7mp8-g4mf-ww9g.json +++ b/advisories/unreviewed/2022/05/GHSA-7mp8-g4mf-ww9g/GHSA-7mp8-g4mf-ww9g.json @@ -7,12 +7,8 @@ "CVE-2011-2681" ], "details": "IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 does not properly handle exceptions, which has unspecified impact and remote attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7p3c-8vw3-3j6h/GHSA-7p3c-8vw3-3j6h.json b/advisories/unreviewed/2022/05/GHSA-7p3c-8vw3-3j6h/GHSA-7p3c-8vw3-3j6h.json index e362e3520a9..da60403f25c 100644 --- a/advisories/unreviewed/2022/05/GHSA-7p3c-8vw3-3j6h/GHSA-7p3c-8vw3-3j6h.json +++ b/advisories/unreviewed/2022/05/GHSA-7p3c-8vw3-3j6h/GHSA-7p3c-8vw3-3j6h.json @@ -7,12 +7,8 @@ "CVE-2011-4567" ], "details": "Cross-site scripting (XSS) vulnerability in includes/templates/template_default/templates/tpl_gv_send_default.php in Zen Cart before 1.5 allows remote attackers to inject arbitrary web script or HTML via the message parameter in a gv_send action to index.php, a different vulnerability than CVE-2011-4547.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7p42-q79x-fm9g/GHSA-7p42-q79x-fm9g.json b/advisories/unreviewed/2022/05/GHSA-7p42-q79x-fm9g/GHSA-7p42-q79x-fm9g.json index 84fe0aeb268..cdecf1ea681 100644 --- a/advisories/unreviewed/2022/05/GHSA-7p42-q79x-fm9g/GHSA-7p42-q79x-fm9g.json +++ b/advisories/unreviewed/2022/05/GHSA-7p42-q79x-fm9g/GHSA-7p42-q79x-fm9g.json @@ -7,12 +7,8 @@ "CVE-2010-4954" ], "details": "SQL injection vulnerability in product_reviews_info.php in xt:Commerce Gambio 2008 allows remote attackers to execute arbitrary SQL commands via the products_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7p8m-c4x2-3gjg/GHSA-7p8m-c4x2-3gjg.json b/advisories/unreviewed/2022/05/GHSA-7p8m-c4x2-3gjg/GHSA-7p8m-c4x2-3gjg.json index 813e984ed0e..5c1761f800b 100644 --- a/advisories/unreviewed/2022/05/GHSA-7p8m-c4x2-3gjg/GHSA-7p8m-c4x2-3gjg.json +++ b/advisories/unreviewed/2022/05/GHSA-7p8m-c4x2-3gjg/GHSA-7p8m-c4x2-3gjg.json @@ -7,12 +7,8 @@ "CVE-2010-5034" ], "details": "SQL injection vulnerability in viewhistorydetail.php in iScripts EasyBiller 1.1 allows remote attackers to execute arbitrary SQL commands via the planid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7pj8-23g8-8qmg/GHSA-7pj8-23g8-8qmg.json b/advisories/unreviewed/2022/05/GHSA-7pj8-23g8-8qmg/GHSA-7pj8-23g8-8qmg.json index 99fa8fcaedc..503a4f4d0eb 100644 --- a/advisories/unreviewed/2022/05/GHSA-7pj8-23g8-8qmg/GHSA-7pj8-23g8-8qmg.json +++ b/advisories/unreviewed/2022/05/GHSA-7pj8-23g8-8qmg/GHSA-7pj8-23g8-8qmg.json @@ -7,12 +7,8 @@ "CVE-2011-4764" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by Wizard/Edit/Modules/Image and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7pr7-2x33-78rj/GHSA-7pr7-2x33-78rj.json b/advisories/unreviewed/2022/05/GHSA-7pr7-2x33-78rj/GHSA-7pr7-2x33-78rj.json index 40c67ae610d..98be981cc7c 100644 --- a/advisories/unreviewed/2022/05/GHSA-7pr7-2x33-78rj/GHSA-7pr7-2x33-78rj.json +++ b/advisories/unreviewed/2022/05/GHSA-7pr7-2x33-78rj/GHSA-7pr7-2x33-78rj.json @@ -7,12 +7,8 @@ "CVE-2011-3579" ], "details": "server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to read arbitrary files, and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption), via an XML external entity declaration in conjunction with an entity reference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7q3x-3jfm-2xh2/GHSA-7q3x-3jfm-2xh2.json b/advisories/unreviewed/2022/05/GHSA-7q3x-3jfm-2xh2/GHSA-7q3x-3jfm-2xh2.json index 745b180ba51..542761e77e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-7q3x-3jfm-2xh2/GHSA-7q3x-3jfm-2xh2.json +++ b/advisories/unreviewed/2022/05/GHSA-7q3x-3jfm-2xh2/GHSA-7q3x-3jfm-2xh2.json @@ -7,12 +7,8 @@ "CVE-2011-2328" ], "details": "Buffer overflow in HP LoadRunner allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a .usr (aka Virtual User script) file with long directives.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7qw4-r8cm-xwc9/GHSA-7qw4-r8cm-xwc9.json b/advisories/unreviewed/2022/05/GHSA-7qw4-r8cm-xwc9/GHSA-7qw4-r8cm-xwc9.json index 437335655ff..1dbfc36d1b9 100644 --- a/advisories/unreviewed/2022/05/GHSA-7qw4-r8cm-xwc9/GHSA-7qw4-r8cm-xwc9.json +++ b/advisories/unreviewed/2022/05/GHSA-7qw4-r8cm-xwc9/GHSA-7qw4-r8cm-xwc9.json @@ -7,12 +7,8 @@ "CVE-2011-3775" ], "details": "PHPfileNavigator 2.3.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xestion/varios/logs.inc.php and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7v47-r6rh-cpfp/GHSA-7v47-r6rh-cpfp.json b/advisories/unreviewed/2022/05/GHSA-7v47-r6rh-cpfp/GHSA-7v47-r6rh-cpfp.json index fd913d03659..4a76ad68340 100644 --- a/advisories/unreviewed/2022/05/GHSA-7v47-r6rh-cpfp/GHSA-7v47-r6rh-cpfp.json +++ b/advisories/unreviewed/2022/05/GHSA-7v47-r6rh-cpfp/GHSA-7v47-r6rh-cpfp.json @@ -7,12 +7,8 @@ "CVE-2011-2172" ], "details": "Cross-site scripting (XSS) vulnerability in the search center in IBM WebSphere Portal 7.0.0.1 before CF004 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7v4f-45vh-vpff/GHSA-7v4f-45vh-vpff.json b/advisories/unreviewed/2022/05/GHSA-7v4f-45vh-vpff/GHSA-7v4f-45vh-vpff.json index 5ec32b1189f..ce51ac311aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-7v4f-45vh-vpff/GHSA-7v4f-45vh-vpff.json +++ b/advisories/unreviewed/2022/05/GHSA-7v4f-45vh-vpff/GHSA-7v4f-45vh-vpff.json @@ -7,12 +7,8 @@ "CVE-2011-2021" ], "details": "Session fixation vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to hijack web sessions via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7w34-327x-439v/GHSA-7w34-327x-439v.json b/advisories/unreviewed/2022/05/GHSA-7w34-327x-439v/GHSA-7w34-327x-439v.json index 328c6a66d0f..02b34fd31fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-7w34-327x-439v/GHSA-7w34-327x-439v.json +++ b/advisories/unreviewed/2022/05/GHSA-7w34-327x-439v/GHSA-7w34-327x-439v.json @@ -7,12 +7,8 @@ "CVE-2011-3980" ], "details": "Unspecified vulnerability in the Drag Drop Mass Upload (ameos_dragndropupload) extension 2.0.2 and earlier for TYPO3 allows remote attackers to upload arbitrary files via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7wcj-p3qp-jqq5/GHSA-7wcj-p3qp-jqq5.json b/advisories/unreviewed/2022/05/GHSA-7wcj-p3qp-jqq5/GHSA-7wcj-p3qp-jqq5.json index 1bd7247347e..ce83230274d 100644 --- a/advisories/unreviewed/2022/05/GHSA-7wcj-p3qp-jqq5/GHSA-7wcj-p3qp-jqq5.json +++ b/advisories/unreviewed/2022/05/GHSA-7wcj-p3qp-jqq5/GHSA-7wcj-p3qp-jqq5.json @@ -7,12 +7,8 @@ "CVE-2011-2156" ], "details": "The SmarterTools SmarterStats 6.0 web server allows remote attackers to obtain directory listings via a direct request for the (1) Admin/, (2) Admin/Defaults/, (3) Admin/GettingStarted/, (4) Admin/Popups/, (5) App_Themes/, (6) Client/, (7) Client/Popups/, (8) Services/, (9) Temp/, (10) UserControls/, (11) UserControls/PanelBarTemplates/, (12) UserControls/Popups/, (13) aspnet_client/, or (14) aspnet_client/system_web/ directory name, or (15) certain directory names under App_Themes/Default/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7x8q-xhpw-x33c/GHSA-7x8q-xhpw-x33c.json b/advisories/unreviewed/2022/05/GHSA-7x8q-xhpw-x33c/GHSA-7x8q-xhpw-x33c.json index 2b75cddbc8c..babc261d06f 100644 --- a/advisories/unreviewed/2022/05/GHSA-7x8q-xhpw-x33c/GHSA-7x8q-xhpw-x33c.json +++ b/advisories/unreviewed/2022/05/GHSA-7x8q-xhpw-x33c/GHSA-7x8q-xhpw-x33c.json @@ -7,12 +7,8 @@ "CVE-2010-5055" ], "details": "SQL injection vulnerability in index.php in Almnzm 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-827g-rqf3-jrp6/GHSA-827g-rqf3-jrp6.json b/advisories/unreviewed/2022/05/GHSA-827g-rqf3-jrp6/GHSA-827g-rqf3-jrp6.json index 68ad0410023..48c4efebbf2 100644 --- a/advisories/unreviewed/2022/05/GHSA-827g-rqf3-jrp6/GHSA-827g-rqf3-jrp6.json +++ b/advisories/unreviewed/2022/05/GHSA-827g-rqf3-jrp6/GHSA-827g-rqf3-jrp6.json @@ -7,12 +7,8 @@ "CVE-2011-2188" ], "details": "LuaExpat before 1.2.0 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-82v9-gcgx-xxxv/GHSA-82v9-gcgx-xxxv.json b/advisories/unreviewed/2022/05/GHSA-82v9-gcgx-xxxv/GHSA-82v9-gcgx-xxxv.json index 0548f83b208..e49046d4890 100644 --- a/advisories/unreviewed/2022/05/GHSA-82v9-gcgx-xxxv/GHSA-82v9-gcgx-xxxv.json +++ b/advisories/unreviewed/2022/05/GHSA-82v9-gcgx-xxxv/GHSA-82v9-gcgx-xxxv.json @@ -7,12 +7,8 @@ "CVE-2011-2752" ], "details": "CRLF injection vulnerability in SquirrelMail 1.4.21 and earlier allows remote attackers to modify or add preference values via a \\n (newline) character, a different vulnerability than CVE-2010-4555.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-83p4-m65r-gfjx/GHSA-83p4-m65r-gfjx.json b/advisories/unreviewed/2022/05/GHSA-83p4-m65r-gfjx/GHSA-83p4-m65r-gfjx.json index 906c5b742c3..d2e62672f02 100644 --- a/advisories/unreviewed/2022/05/GHSA-83p4-m65r-gfjx/GHSA-83p4-m65r-gfjx.json +++ b/advisories/unreviewed/2022/05/GHSA-83p4-m65r-gfjx/GHSA-83p4-m65r-gfjx.json @@ -7,12 +7,8 @@ "CVE-2011-2152" ], "details": "The SmarterTools SmarterStats 6.0 web server generates web pages containing external links in response to GET requests with query strings for (1) Client/frmViewReports.aspx or (2) UserControls/Popups/frmHelp.aspx, which makes it easier for remote attackers to obtain sensitive information by reading (a) web-server access logs or (b) web-server Referer logs, related to a \"cross-domain Referer leakage\" issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8549-4x2j-87jf/GHSA-8549-4x2j-87jf.json b/advisories/unreviewed/2022/05/GHSA-8549-4x2j-87jf/GHSA-8549-4x2j-87jf.json index 53583791ad7..6bd7d187c62 100644 --- a/advisories/unreviewed/2022/05/GHSA-8549-4x2j-87jf/GHSA-8549-4x2j-87jf.json +++ b/advisories/unreviewed/2022/05/GHSA-8549-4x2j-87jf/GHSA-8549-4x2j-87jf.json @@ -7,12 +7,8 @@ "CVE-2010-4911" ], "details": "SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQL commands via the sid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-85c6-hcmg-79f9/GHSA-85c6-hcmg-79f9.json b/advisories/unreviewed/2022/05/GHSA-85c6-hcmg-79f9/GHSA-85c6-hcmg-79f9.json index 59430771618..024c589f458 100644 --- a/advisories/unreviewed/2022/05/GHSA-85c6-hcmg-79f9/GHSA-85c6-hcmg-79f9.json +++ b/advisories/unreviewed/2022/05/GHSA-85c6-hcmg-79f9/GHSA-85c6-hcmg-79f9.json @@ -7,12 +7,8 @@ "CVE-2010-5003" ], "details": "SQL injection vulnerability in the AutarTimonial (com_autartimonial) component 1.0.8 for Joomla! allows remote attackers to execute arbitrary SQL commands via the limit parameter in an autartimonial action to index.php. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-85rj-7qf6-hcv7/GHSA-85rj-7qf6-hcv7.json b/advisories/unreviewed/2022/05/GHSA-85rj-7qf6-hcv7/GHSA-85rj-7qf6-hcv7.json index 6471d76db49..58b8cc0954e 100644 --- a/advisories/unreviewed/2022/05/GHSA-85rj-7qf6-hcv7/GHSA-85rj-7qf6-hcv7.json +++ b/advisories/unreviewed/2022/05/GHSA-85rj-7qf6-hcv7/GHSA-85rj-7qf6-hcv7.json @@ -7,12 +7,8 @@ "CVE-2011-5031" ], "details": "Multiple SQL injection vulnerabilities in servlet/capexweb.parentvalidatepassword in cApexWEB 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) dfuserid and (2) dfpassword parameters. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-862v-hwv2-mhqr/GHSA-862v-hwv2-mhqr.json b/advisories/unreviewed/2022/05/GHSA-862v-hwv2-mhqr/GHSA-862v-hwv2-mhqr.json index fcd416176e6..a9c811b274f 100644 --- a/advisories/unreviewed/2022/05/GHSA-862v-hwv2-mhqr/GHSA-862v-hwv2-mhqr.json +++ b/advisories/unreviewed/2022/05/GHSA-862v-hwv2-mhqr/GHSA-862v-hwv2-mhqr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-869x-8685-5wfj/GHSA-869x-8685-5wfj.json b/advisories/unreviewed/2022/05/GHSA-869x-8685-5wfj/GHSA-869x-8685-5wfj.json index d56cf2a8e57..39d008b278d 100644 --- a/advisories/unreviewed/2022/05/GHSA-869x-8685-5wfj/GHSA-869x-8685-5wfj.json +++ b/advisories/unreviewed/2022/05/GHSA-869x-8685-5wfj/GHSA-869x-8685-5wfj.json @@ -7,12 +7,8 @@ "CVE-2011-4756" ], "details": "Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by domains/sitebuilder_edit.php and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-889h-mr2g-968f/GHSA-889h-mr2g-968f.json b/advisories/unreviewed/2022/05/GHSA-889h-mr2g-968f/GHSA-889h-mr2g-968f.json index 10a0364c051..3fb61d4abd9 100644 --- a/advisories/unreviewed/2022/05/GHSA-889h-mr2g-968f/GHSA-889h-mr2g-968f.json +++ b/advisories/unreviewed/2022/05/GHSA-889h-mr2g-968f/GHSA-889h-mr2g-968f.json @@ -7,12 +7,8 @@ "CVE-2011-5070" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Support Incident Tracker (aka SiT!) 3.65 allow remote attackers to inject arbitrary web script or HTML via (1) the file name to incident_attachments.php; (2) unspecified vectors in link_add.php, possibly involving origref, linkref, linktype parameters, which are not properly handled in the clean_int function in lib/base.inc.php, or the redirect parameter, which is not properly handled in the html_redirect function in lib/html.inc.php; and (3) unspecified vectors in translate.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-88gh-6wmq-6vrx/GHSA-88gh-6wmq-6vrx.json b/advisories/unreviewed/2022/05/GHSA-88gh-6wmq-6vrx/GHSA-88gh-6wmq-6vrx.json index af5af5728be..387e4092f06 100644 --- a/advisories/unreviewed/2022/05/GHSA-88gh-6wmq-6vrx/GHSA-88gh-6wmq-6vrx.json +++ b/advisories/unreviewed/2022/05/GHSA-88gh-6wmq-6vrx/GHSA-88gh-6wmq-6vrx.json @@ -7,12 +7,8 @@ "CVE-2010-4955" ], "details": "SQL injection vulnerability in board/board.php in APBoard Developers APBoard 2.1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter, a different vector than CVE-2006-3078.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-898r-h2mf-8vrg/GHSA-898r-h2mf-8vrg.json b/advisories/unreviewed/2022/05/GHSA-898r-h2mf-8vrg/GHSA-898r-h2mf-8vrg.json index 152617c55bc..23b8a12bf88 100644 --- a/advisories/unreviewed/2022/05/GHSA-898r-h2mf-8vrg/GHSA-898r-h2mf-8vrg.json +++ b/advisories/unreviewed/2022/05/GHSA-898r-h2mf-8vrg/GHSA-898r-h2mf-8vrg.json @@ -7,12 +7,8 @@ "CVE-2010-5058" ], "details": "SQL injection vulnerability in detResolucion.php in CMS Ariadna 1.1 allows remote attackers to execute arbitrary SQL commands via the res_id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-89gg-4h57-569g/GHSA-89gg-4h57-569g.json b/advisories/unreviewed/2022/05/GHSA-89gg-4h57-569g/GHSA-89gg-4h57-569g.json index b072c7dd9fe..9e162d75841 100644 --- a/advisories/unreviewed/2022/05/GHSA-89gg-4h57-569g/GHSA-89gg-4h57-569g.json +++ b/advisories/unreviewed/2022/05/GHSA-89gg-4h57-569g/GHSA-89gg-4h57-569g.json @@ -7,12 +7,8 @@ "CVE-2011-3833" ], "details": "Unrestricted file upload vulnerability in ftp_upload_file.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to execute arbitrary PHP code by uploading a PHP file, then accessing it via a direct request to the file in an unspecified directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8cvj-p22x-4256/GHSA-8cvj-p22x-4256.json b/advisories/unreviewed/2022/05/GHSA-8cvj-p22x-4256/GHSA-8cvj-p22x-4256.json index 33e8511771a..65dffcce739 100644 --- a/advisories/unreviewed/2022/05/GHSA-8cvj-p22x-4256/GHSA-8cvj-p22x-4256.json +++ b/advisories/unreviewed/2022/05/GHSA-8cvj-p22x-4256/GHSA-8cvj-p22x-4256.json @@ -7,12 +7,8 @@ "CVE-2011-3520" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.49, 8.50, and 8.51 allows remote authenticated users to affect integrity via unknown vectors related to Personalization.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8cwc-4974-xcpq/GHSA-8cwc-4974-xcpq.json b/advisories/unreviewed/2022/05/GHSA-8cwc-4974-xcpq/GHSA-8cwc-4974-xcpq.json index c1460e6bf96..1e19b25b0d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-8cwc-4974-xcpq/GHSA-8cwc-4974-xcpq.json +++ b/advisories/unreviewed/2022/05/GHSA-8cwc-4974-xcpq/GHSA-8cwc-4974-xcpq.json @@ -7,12 +7,8 @@ "CVE-2011-3528" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 8.9 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to eProfile.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8h2m-5m3x-cvj9/GHSA-8h2m-5m3x-cvj9.json b/advisories/unreviewed/2022/05/GHSA-8h2m-5m3x-cvj9/GHSA-8h2m-5m3x-cvj9.json index 3b41eaaa936..ce6b4adb80e 100644 --- a/advisories/unreviewed/2022/05/GHSA-8h2m-5m3x-cvj9/GHSA-8h2m-5m3x-cvj9.json +++ b/advisories/unreviewed/2022/05/GHSA-8h2m-5m3x-cvj9/GHSA-8h2m-5m3x-cvj9.json @@ -7,12 +7,8 @@ "CVE-2010-4945" ], "details": "SQL injection vulnerability in the CamelcityDB (com_camelcitydb2) component 2.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8hvp-h85w-jwq9/GHSA-8hvp-h85w-jwq9.json b/advisories/unreviewed/2022/05/GHSA-8hvp-h85w-jwq9/GHSA-8hvp-h85w-jwq9.json index df2915e6ae3..ad1973bd740 100644 --- a/advisories/unreviewed/2022/05/GHSA-8hvp-h85w-jwq9/GHSA-8hvp-h85w-jwq9.json +++ b/advisories/unreviewed/2022/05/GHSA-8hvp-h85w-jwq9/GHSA-8hvp-h85w-jwq9.json @@ -7,12 +7,8 @@ "CVE-2011-2895" ], "details": "The LZW decompressor in (1) the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and (2) compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products, does not properly handle code words that are absent from the decompression table when encountered, which allows context-dependent attackers to trigger an infinite loop or a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted compressed stream, a related issue to CVE-2006-1168 and CVE-2011-2896.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8jjc-fr2v-rwfv/GHSA-8jjc-fr2v-rwfv.json b/advisories/unreviewed/2022/05/GHSA-8jjc-fr2v-rwfv/GHSA-8jjc-fr2v-rwfv.json index b601ac88c15..42ad1df43bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-8jjc-fr2v-rwfv/GHSA-8jjc-fr2v-rwfv.json +++ b/advisories/unreviewed/2022/05/GHSA-8jjc-fr2v-rwfv/GHSA-8jjc-fr2v-rwfv.json @@ -7,12 +7,8 @@ "CVE-2011-3006" ], "details": "The MyAsUtil ActiveX control in MyAsUtil5.2.0.603.dll in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to bypass the MyASUtil.SecureObjectFactory.CreateSecureObject domain execution policy using a cross-site scripting (XSS) attack, execute arbitrary code using the MyASUtil.InstallInfo.RunUserProgram function, and possibly conduct other unspecified attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8jmv-f4p4-24wg/GHSA-8jmv-f4p4-24wg.json b/advisories/unreviewed/2022/05/GHSA-8jmv-f4p4-24wg/GHSA-8jmv-f4p4-24wg.json index 938c59440f5..bf3e32009ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-8jmv-f4p4-24wg/GHSA-8jmv-f4p4-24wg.json +++ b/advisories/unreviewed/2022/05/GHSA-8jmv-f4p4-24wg/GHSA-8jmv-f4p4-24wg.json @@ -7,12 +7,8 @@ "CVE-2011-5009" ], "details": "The CmpWebServer.dll module in the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to cause a denial of service (NULL pointer dereference) via (1) a crafted Content-Length in an HTTP POST or (2) an invalid HTTP request method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8m4g-h664-74qj/GHSA-8m4g-h664-74qj.json b/advisories/unreviewed/2022/05/GHSA-8m4g-h664-74qj/GHSA-8m4g-h664-74qj.json index c0338e2d966..8b96ddf0d61 100644 --- a/advisories/unreviewed/2022/05/GHSA-8m4g-h664-74qj/GHSA-8m4g-h664-74qj.json +++ b/advisories/unreviewed/2022/05/GHSA-8m4g-h664-74qj/GHSA-8m4g-h664-74qj.json @@ -7,12 +7,8 @@ "CVE-2011-4409" ], "details": "The Ubuntu One Client for Ubuntu 10.04 LTS, 11.04, 11.10, and 12.04 LTS does not properly validate SSL certificates, which allows remote attackers to spoof a server and modify or read sensitive information via a man-in-the-middle (MITM) attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8qh5-rr38-7xjm/GHSA-8qh5-rr38-7xjm.json b/advisories/unreviewed/2022/05/GHSA-8qh5-rr38-7xjm/GHSA-8qh5-rr38-7xjm.json index 4bb325f7db0..8e7eb33b026 100644 --- a/advisories/unreviewed/2022/05/GHSA-8qh5-rr38-7xjm/GHSA-8qh5-rr38-7xjm.json +++ b/advisories/unreviewed/2022/05/GHSA-8qh5-rr38-7xjm/GHSA-8qh5-rr38-7xjm.json @@ -7,12 +7,8 @@ "CVE-2011-2200" ], "details": "The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28, 1.4.x before 1.4.12, and 1.5.x before 1.5.4 does not properly handle a non-native byte order, which allows local users to cause a denial of service (connection loss), obtain potentially sensitive information, or conduct unspecified state-modification attacks via crafted messages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8qvv-3gxm-x6r4/GHSA-8qvv-3gxm-x6r4.json b/advisories/unreviewed/2022/05/GHSA-8qvv-3gxm-x6r4/GHSA-8qvv-3gxm-x6r4.json index 805819ebbd7..0cecb75899e 100644 --- a/advisories/unreviewed/2022/05/GHSA-8qvv-3gxm-x6r4/GHSA-8qvv-3gxm-x6r4.json +++ b/advisories/unreviewed/2022/05/GHSA-8qvv-3gxm-x6r4/GHSA-8qvv-3gxm-x6r4.json @@ -7,12 +7,8 @@ "CVE-2010-5044" ], "details": "SQL injection vulnerability in models/log.php in the Search Log (com_searchlog) component 3.1.0 for Joomla! allows remote authenticated users, with Public Back-end privileges, to execute arbitrary SQL commands via the search parameter in a log action to administrator/index.php. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8rj4-622c-mhqx/GHSA-8rj4-622c-mhqx.json b/advisories/unreviewed/2022/05/GHSA-8rj4-622c-mhqx/GHSA-8rj4-622c-mhqx.json index c0d95f332c8..244482e1115 100644 --- a/advisories/unreviewed/2022/05/GHSA-8rj4-622c-mhqx/GHSA-8rj4-622c-mhqx.json +++ b/advisories/unreviewed/2022/05/GHSA-8rj4-622c-mhqx/GHSA-8rj4-622c-mhqx.json @@ -7,12 +7,8 @@ "CVE-2011-3836" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in Wuzly 2.0 allow remote attackers to hijack the authentication of administrators for requests that (1) add an administrator, (2) perform cross-site scripting (XSS), (3) perform SQL injection, or have other unspecified impact via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8vc8-g996-8jp6/GHSA-8vc8-g996-8jp6.json b/advisories/unreviewed/2022/05/GHSA-8vc8-g996-8jp6/GHSA-8vc8-g996-8jp6.json index 39c03704512..6436f627ab7 100644 --- a/advisories/unreviewed/2022/05/GHSA-8vc8-g996-8jp6/GHSA-8vc8-g996-8jp6.json +++ b/advisories/unreviewed/2022/05/GHSA-8vc8-g996-8jp6/GHSA-8vc8-g996-8jp6.json @@ -7,12 +7,8 @@ "CVE-2010-5050" ], "details": "Cross-site scripting (XSS) vulnerability in jsp/admin/tools/remote_share.jsp in ManageEngine ADManager Plus 4.4.0 allows remote attackers to inject arbitrary web script or HTML via the computerName parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8wq6-wppf-wxxh/GHSA-8wq6-wppf-wxxh.json b/advisories/unreviewed/2022/05/GHSA-8wq6-wppf-wxxh/GHSA-8wq6-wppf-wxxh.json index b0ec9820fee..8b46c7a6131 100644 --- a/advisories/unreviewed/2022/05/GHSA-8wq6-wppf-wxxh/GHSA-8wq6-wppf-wxxh.json +++ b/advisories/unreviewed/2022/05/GHSA-8wq6-wppf-wxxh/GHSA-8wq6-wppf-wxxh.json @@ -7,12 +7,8 @@ "CVE-2011-4877" ], "details": "HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to cause a denial of service (application crash) by sending crafted data over TCP.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-92pm-rc7q-ch3w/GHSA-92pm-rc7q-ch3w.json b/advisories/unreviewed/2022/05/GHSA-92pm-rc7q-ch3w/GHSA-92pm-rc7q-ch3w.json index c40f35f6a3f..24eb3343ef5 100644 --- a/advisories/unreviewed/2022/05/GHSA-92pm-rc7q-ch3w/GHSA-92pm-rc7q-ch3w.json +++ b/advisories/unreviewed/2022/05/GHSA-92pm-rc7q-ch3w/GHSA-92pm-rc7q-ch3w.json @@ -7,12 +7,8 @@ "CVE-2011-2205" ], "details": "Prosody before 0.8.1 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-937x-j2xw-8rfq/GHSA-937x-j2xw-8rfq.json b/advisories/unreviewed/2022/05/GHSA-937x-j2xw-8rfq/GHSA-937x-j2xw-8rfq.json index 9761b3f2f0d..ab4d556e2a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-937x-j2xw-8rfq/GHSA-937x-j2xw-8rfq.json +++ b/advisories/unreviewed/2022/05/GHSA-937x-j2xw-8rfq/GHSA-937x-j2xw-8rfq.json @@ -7,12 +7,8 @@ "CVE-2011-2159" ], "details": "The SmarterTools SmarterStats 6.0 web server omits the Content-Type header for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving (1) Admin/Defaults/frmDefaultSiteSettings.aspx, (2) Admin/Defaults/frmServerDefaults.aspx, (3) Admin/frmReportSettings.aspx, (4) Admin/frmSite.aspx, (5) App_Themes/Default/ButtonBarIcons.xml, (6) App_Themes/Default/Skin.xml, (7) Client/frmImportSettings.aspx, (8) Client/frmSeoSettings.aspx, (9) Services/Web.config, (10) aspnet_client/system_web/4_0_30319/, (11) clientaccesspolicy.xml, (12) cloudscan.exe, (13) crossdomain.xml, or (14) sitemap.xml. NOTE: it is possible that only clients, not the SmarterStats product, could be affected by this issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-93x7-9wp8-8w2c/GHSA-93x7-9wp8-8w2c.json b/advisories/unreviewed/2022/05/GHSA-93x7-9wp8-8w2c/GHSA-93x7-9wp8-8w2c.json index 2acb16f2082..d90f9acc6d0 100644 --- a/advisories/unreviewed/2022/05/GHSA-93x7-9wp8-8w2c/GHSA-93x7-9wp8-8w2c.json +++ b/advisories/unreviewed/2022/05/GHSA-93x7-9wp8-8w2c/GHSA-93x7-9wp8-8w2c.json @@ -7,12 +7,8 @@ "CVE-2011-3339" ], "details": "Cross-site scripting (XSS) vulnerability in the Admin Control Center in Sentinel HASP Run-time Environment 5.95 and earlier in SafeNet Sentinel HASP (formerly Aladdin HASP SRM) run-time installer before 6.x and SDK before 5.11, as used in 7 Technologies (7T) IGSS 7 and other products, when Firefox 2.0 is used, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger write access to a configuration file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9568-hcj9-rf7v/GHSA-9568-hcj9-rf7v.json b/advisories/unreviewed/2022/05/GHSA-9568-hcj9-rf7v/GHSA-9568-hcj9-rf7v.json index 25c5be8f249..11484934dc4 100644 --- a/advisories/unreviewed/2022/05/GHSA-9568-hcj9-rf7v/GHSA-9568-hcj9-rf7v.json +++ b/advisories/unreviewed/2022/05/GHSA-9568-hcj9-rf7v/GHSA-9568-hcj9-rf7v.json @@ -7,12 +7,8 @@ "CVE-2010-4961" ], "details": "SQL injection vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-957x-xhjw-cw8q/GHSA-957x-xhjw-cw8q.json b/advisories/unreviewed/2022/05/GHSA-957x-xhjw-cw8q/GHSA-957x-xhjw-cw8q.json index 6634c5576ef..6624c4feff0 100644 --- a/advisories/unreviewed/2022/05/GHSA-957x-xhjw-cw8q/GHSA-957x-xhjw-cw8q.json +++ b/advisories/unreviewed/2022/05/GHSA-957x-xhjw-cw8q/GHSA-957x-xhjw-cw8q.json @@ -7,12 +7,8 @@ "CVE-2011-4767" ], "details": "The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 has web pages containing e-mail addresses that are not intended for correspondence about the local application deployment, which allows remote attackers to obtain potentially sensitive information by reading a page, as demonstrated by js/Wizard/Status.js and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-958r-mfgf-8525/GHSA-958r-mfgf-8525.json b/advisories/unreviewed/2022/05/GHSA-958r-mfgf-8525/GHSA-958r-mfgf-8525.json index 54fa9719312..1b1d430d505 100644 --- a/advisories/unreviewed/2022/05/GHSA-958r-mfgf-8525/GHSA-958r-mfgf-8525.json +++ b/advisories/unreviewed/2022/05/GHSA-958r-mfgf-8525/GHSA-958r-mfgf-8525.json @@ -7,12 +7,8 @@ "CVE-2011-2151" ], "details": "The (1) Admin/frmEmailReportSettings.aspx, (2) Admin/frmGeneralSettings.aspx, (3) Admin/frmSite.aspx, (4) Client/frmUser.aspx, and (5) Login.aspx components in the SmarterTools SmarterStats 6.0 web server accept cleartext passwords, which makes it easier for remote attackers to obtain sensitive information by sniffing the network.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-96qf-7f8j-658w/GHSA-96qf-7f8j-658w.json b/advisories/unreviewed/2022/05/GHSA-96qf-7f8j-658w/GHSA-96qf-7f8j-658w.json index b0d26255a96..4cbf39aebd3 100644 --- a/advisories/unreviewed/2022/05/GHSA-96qf-7f8j-658w/GHSA-96qf-7f8j-658w.json +++ b/advisories/unreviewed/2022/05/GHSA-96qf-7f8j-658w/GHSA-96qf-7f8j-658w.json @@ -7,12 +7,8 @@ "CVE-2011-2671" ], "details": "Unspecified vulnerability in Megalith 12th edition through 27th edition allows remote attackers to gain administrative privileges via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-98rm-vwg5-5x6r/GHSA-98rm-vwg5-5x6r.json b/advisories/unreviewed/2022/05/GHSA-98rm-vwg5-5x6r/GHSA-98rm-vwg5-5x6r.json index 4cb7db3f767..431379200f4 100644 --- a/advisories/unreviewed/2022/05/GHSA-98rm-vwg5-5x6r/GHSA-98rm-vwg5-5x6r.json +++ b/advisories/unreviewed/2022/05/GHSA-98rm-vwg5-5x6r/GHSA-98rm-vwg5-5x6r.json @@ -7,12 +7,8 @@ "CVE-2011-3534" ], "details": "Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to Network Status Monitor (statd).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9947-j3mv-mffj/GHSA-9947-j3mv-mffj.json b/advisories/unreviewed/2022/05/GHSA-9947-j3mv-mffj/GHSA-9947-j3mv-mffj.json index 1a4c288b8d6..236870cc06c 100644 --- a/advisories/unreviewed/2022/05/GHSA-9947-j3mv-mffj/GHSA-9947-j3mv-mffj.json +++ b/advisories/unreviewed/2022/05/GHSA-9947-j3mv-mffj/GHSA-9947-j3mv-mffj.json @@ -7,12 +7,8 @@ "CVE-2011-4674" ], "details": "SQL injection vulnerability in popup.php in Zabbix 1.8.3 and 1.8.4, and possibly other versions before 1.8.9, allows remote attackers to execute arbitrary SQL commands via the only_hostid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9997-q4fw-gcgf/GHSA-9997-q4fw-gcgf.json b/advisories/unreviewed/2022/05/GHSA-9997-q4fw-gcgf/GHSA-9997-q4fw-gcgf.json index f75e630cc00..2732ac2f6e7 100644 --- a/advisories/unreviewed/2022/05/GHSA-9997-q4fw-gcgf/GHSA-9997-q4fw-gcgf.json +++ b/advisories/unreviewed/2022/05/GHSA-9997-q4fw-gcgf/GHSA-9997-q4fw-gcgf.json @@ -7,12 +7,8 @@ "CVE-2011-5040" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Infoproject Biznis Heroj allow remote attackers to inject arbitrary web script or HTML via the config parameter to (1) nalozi_naslov.php and (2) widget.dokumenti_lista.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9c9v-3gvm-26m7/GHSA-9c9v-3gvm-26m7.json b/advisories/unreviewed/2022/05/GHSA-9c9v-3gvm-26m7/GHSA-9c9v-3gvm-26m7.json index c0e396d7a5f..52f18ec6f7d 100644 --- a/advisories/unreviewed/2022/05/GHSA-9c9v-3gvm-26m7/GHSA-9c9v-3gvm-26m7.json +++ b/advisories/unreviewed/2022/05/GHSA-9c9v-3gvm-26m7/GHSA-9c9v-3gvm-26m7.json @@ -7,12 +7,8 @@ "CVE-2011-4851" ], "details": "The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation, as demonstrated by forms in server/google-tools/ and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9f7g-mcxq-q3vc/GHSA-9f7g-mcxq-q3vc.json b/advisories/unreviewed/2022/05/GHSA-9f7g-mcxq-q3vc/GHSA-9f7g-mcxq-q3vc.json index c5f3df36fb1..d9afc8e0d06 100644 --- a/advisories/unreviewed/2022/05/GHSA-9f7g-mcxq-q3vc/GHSA-9f7g-mcxq-q3vc.json +++ b/advisories/unreviewed/2022/05/GHSA-9f7g-mcxq-q3vc/GHSA-9f7g-mcxq-q3vc.json @@ -7,12 +7,8 @@ "CVE-2011-2397" ], "details": "The Agent service in Iron Mountain Connected Backup 8.4 allows remote attackers to execute arbitrary code via a crafted opcode 13 request that triggers use of the LaunchCompoundFileAnalyzer class to send request data to the System.getRunTime.exec method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9f7m-7mgg-5x9p/GHSA-9f7m-7mgg-5x9p.json b/advisories/unreviewed/2022/05/GHSA-9f7m-7mgg-5x9p/GHSA-9f7m-7mgg-5x9p.json index 977ffdfa31d..ede64d297fb 100644 --- a/advisories/unreviewed/2022/05/GHSA-9f7m-7mgg-5x9p/GHSA-9f7m-7mgg-5x9p.json +++ b/advisories/unreviewed/2022/05/GHSA-9f7m-7mgg-5x9p/GHSA-9f7m-7mgg-5x9p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9f7q-7gwp-f9j8/GHSA-9f7q-7gwp-f9j8.json b/advisories/unreviewed/2022/05/GHSA-9f7q-7gwp-f9j8/GHSA-9f7q-7gwp-f9j8.json index cf8a9e6835e..6fd21dabe41 100644 --- a/advisories/unreviewed/2022/05/GHSA-9f7q-7gwp-f9j8/GHSA-9f7q-7gwp-f9j8.json +++ b/advisories/unreviewed/2022/05/GHSA-9f7q-7gwp-f9j8/GHSA-9f7q-7gwp-f9j8.json @@ -7,12 +7,8 @@ "CVE-2010-4920" ], "details": "SQL injection vulnerability in detail.asp in Micronetsoft Rental Property Management Website 1.0 allows remote attackers to execute arbitrary SQL commands via the ad_ID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9g53-m8g7-vm8p/GHSA-9g53-m8g7-vm8p.json b/advisories/unreviewed/2022/05/GHSA-9g53-m8g7-vm8p/GHSA-9g53-m8g7-vm8p.json index 9a1094740fb..439468185d3 100644 --- a/advisories/unreviewed/2022/05/GHSA-9g53-m8g7-vm8p/GHSA-9g53-m8g7-vm8p.json +++ b/advisories/unreviewed/2022/05/GHSA-9g53-m8g7-vm8p/GHSA-9g53-m8g7-vm8p.json @@ -7,12 +7,8 @@ "CVE-2010-5085" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in admin/update_user in Hulihan Amethyst 0.1.5, and possibly earlier, allow remote attackers to hijack the authentication of administrators for requests that (1) change the administrative password or (2) change the site's configuration.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9gxf-3564-mmvj/GHSA-9gxf-3564-mmvj.json b/advisories/unreviewed/2022/05/GHSA-9gxf-3564-mmvj/GHSA-9gxf-3564-mmvj.json index 990848db8b1..6692b658ecf 100644 --- a/advisories/unreviewed/2022/05/GHSA-9gxf-3564-mmvj/GHSA-9gxf-3564-mmvj.json +++ b/advisories/unreviewed/2022/05/GHSA-9gxf-3564-mmvj/GHSA-9gxf-3564-mmvj.json @@ -7,12 +7,8 @@ "CVE-2011-3832" ], "details": "Eval injection vulnerability in config.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated administrators to execute arbitrary PHP code via the application_name parameter in a save action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9h3h-j7rm-p6pr/GHSA-9h3h-j7rm-p6pr.json b/advisories/unreviewed/2022/05/GHSA-9h3h-j7rm-p6pr/GHSA-9h3h-j7rm-p6pr.json index 4265054898c..05b878ae897 100644 --- a/advisories/unreviewed/2022/05/GHSA-9h3h-j7rm-p6pr/GHSA-9h3h-j7rm-p6pr.json +++ b/advisories/unreviewed/2022/05/GHSA-9h3h-j7rm-p6pr/GHSA-9h3h-j7rm-p6pr.json @@ -7,12 +7,8 @@ "CVE-2011-3769" ], "details": "PHPads 2.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by ads.inc.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9mh7-gj89-rw3m/GHSA-9mh7-gj89-rw3m.json b/advisories/unreviewed/2022/05/GHSA-9mh7-gj89-rw3m/GHSA-9mh7-gj89-rw3m.json index 16138e031f1..bff79e1558b 100644 --- a/advisories/unreviewed/2022/05/GHSA-9mh7-gj89-rw3m/GHSA-9mh7-gj89-rw3m.json +++ b/advisories/unreviewed/2022/05/GHSA-9mh7-gj89-rw3m/GHSA-9mh7-gj89-rw3m.json @@ -7,12 +7,8 @@ "CVE-2011-4571" ], "details": "SQL injection vulnerability in the Estate Agent (com_estateagent) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showEO action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9mmp-5j7c-w2r4/GHSA-9mmp-5j7c-w2r4.json b/advisories/unreviewed/2022/05/GHSA-9mmp-5j7c-w2r4/GHSA-9mmp-5j7c-w2r4.json index 87639436424..dc790fa2615 100644 --- a/advisories/unreviewed/2022/05/GHSA-9mmp-5j7c-w2r4/GHSA-9mmp-5j7c-w2r4.json +++ b/advisories/unreviewed/2022/05/GHSA-9mmp-5j7c-w2r4/GHSA-9mmp-5j7c-w2r4.json @@ -7,12 +7,8 @@ "CVE-2011-2594" ], "details": "Heap-based buffer overflow in KMPlayer 3.0.0.1441, and possibly other versions, allows remote attackers to execute arbitrary code via a playlist (.KPL) file with a long Title field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9qv7-7wpv-x88v/GHSA-9qv7-7wpv-x88v.json b/advisories/unreviewed/2022/05/GHSA-9qv7-7wpv-x88v/GHSA-9qv7-7wpv-x88v.json index 2b5eb0c487f..07371f441cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-9qv7-7wpv-x88v/GHSA-9qv7-7wpv-x88v.json +++ b/advisories/unreviewed/2022/05/GHSA-9qv7-7wpv-x88v/GHSA-9qv7-7wpv-x88v.json @@ -7,12 +7,8 @@ "CVE-2011-3517" ], "details": "Unspecified vulnerability in the Oracle OpenSSO component in Oracle Sun Products Suite 8.0 allows remote attackers to affect availability via unknown vectors related to Authentication.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9r7g-3f6r-pjwx/GHSA-9r7g-3f6r-pjwx.json b/advisories/unreviewed/2022/05/GHSA-9r7g-3f6r-pjwx/GHSA-9r7g-3f6r-pjwx.json index 63d7a5f362f..d37095cbca9 100644 --- a/advisories/unreviewed/2022/05/GHSA-9r7g-3f6r-pjwx/GHSA-9r7g-3f6r-pjwx.json +++ b/advisories/unreviewed/2022/05/GHSA-9r7g-3f6r-pjwx/GHSA-9r7g-3f6r-pjwx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9w6r-m8w5-8xw6/GHSA-9w6r-m8w5-8xw6.json b/advisories/unreviewed/2022/05/GHSA-9w6r-m8w5-8xw6/GHSA-9w6r-m8w5-8xw6.json index 972d452451e..560af70f3c1 100644 --- a/advisories/unreviewed/2022/05/GHSA-9w6r-m8w5-8xw6/GHSA-9w6r-m8w5-8xw6.json +++ b/advisories/unreviewed/2022/05/GHSA-9w6r-m8w5-8xw6/GHSA-9w6r-m8w5-8xw6.json @@ -7,12 +7,8 @@ "CVE-2011-3386" ], "details": "Unspecified vulnerability in Medtronic Paradigm wireless insulin pump 512, 522, 712, and 722 allows remote attackers to modify the delivery of an insulin bolus dose and cause a denial of service (adverse human health effects) via unspecified vectors involving wireless communications and knowledge of the device's serial number, as demonstrated by Jerome Radcliffe at the Black Hat USA conference in August 2011. NOTE: the vendor has disputed the severity of this issue, saying \"we believe the risk of deliberate, malicious, or unauthorized manipulation of medical devices is extremely low... we strongly believe it would be extremely difficult for a third-party to wirelessly tamper with your insulin pump... you would be able to detect tones on the insulin pump that weren't intentionally programmed and could intervene accordingly.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c29j-w6m4-j6g6/GHSA-c29j-w6m4-j6g6.json b/advisories/unreviewed/2022/05/GHSA-c29j-w6m4-j6g6/GHSA-c29j-w6m4-j6g6.json index df4fc5df264..37946ec2ab5 100644 --- a/advisories/unreviewed/2022/05/GHSA-c29j-w6m4-j6g6/GHSA-c29j-w6m4-j6g6.json +++ b/advisories/unreviewed/2022/05/GHSA-c29j-w6m4-j6g6/GHSA-c29j-w6m4-j6g6.json @@ -7,12 +7,8 @@ "CVE-2011-3543" ], "details": "Unspecified vulnerability in Oracle Solaris 11 Express allows remote attackers to affect availability, related to iSCSI DataMover (IDM).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c2qw-7x7v-hp58/GHSA-c2qw-7x7v-hp58.json b/advisories/unreviewed/2022/05/GHSA-c2qw-7x7v-hp58/GHSA-c2qw-7x7v-hp58.json index f38f0769812..be677467f89 100644 --- a/advisories/unreviewed/2022/05/GHSA-c2qw-7x7v-hp58/GHSA-c2qw-7x7v-hp58.json +++ b/advisories/unreviewed/2022/05/GHSA-c2qw-7x7v-hp58/GHSA-c2qw-7x7v-hp58.json @@ -7,12 +7,8 @@ "CVE-2011-4855" ], "details": "The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving admin/customer-service-plan/list/reset-search/true/ and certain other files. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c3gc-mv38-77g5/GHSA-c3gc-mv38-77g5.json b/advisories/unreviewed/2022/05/GHSA-c3gc-mv38-77g5/GHSA-c3gc-mv38-77g5.json index 070ca7141e3..57affc26983 100644 --- a/advisories/unreviewed/2022/05/GHSA-c3gc-mv38-77g5/GHSA-c3gc-mv38-77g5.json +++ b/advisories/unreviewed/2022/05/GHSA-c3gc-mv38-77g5/GHSA-c3gc-mv38-77g5.json @@ -7,12 +7,8 @@ "CVE-2010-4846" ], "details": "SQL injection vulnerability in view_item.php in MH Products Pay Pal Shop Digital allows remote attackers to execute arbitrary SQL commands via the ItemID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c425-6p5m-56mv/GHSA-c425-6p5m-56mv.json b/advisories/unreviewed/2022/05/GHSA-c425-6p5m-56mv/GHSA-c425-6p5m-56mv.json index a4930fe0579..e99604dc5de 100644 --- a/advisories/unreviewed/2022/05/GHSA-c425-6p5m-56mv/GHSA-c425-6p5m-56mv.json +++ b/advisories/unreviewed/2022/05/GHSA-c425-6p5m-56mv/GHSA-c425-6p5m-56mv.json @@ -7,12 +7,8 @@ "CVE-2011-2144" ], "details": "The eDocument Conversion Actions implementation in IBM Datacap Taskmaster Capture 8.0.1 FP1 and earlier allows remote attackers to cause a denial of service (batch abort) via a long subject line in an e-mail message that is represented in a .eml file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c4c4-7f3j-4v7x/GHSA-c4c4-7f3j-4v7x.json b/advisories/unreviewed/2022/05/GHSA-c4c4-7f3j-4v7x/GHSA-c4c4-7f3j-4v7x.json index 3c51d6f659e..bdb711bb3a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-c4c4-7f3j-4v7x/GHSA-c4c4-7f3j-4v7x.json +++ b/advisories/unreviewed/2022/05/GHSA-c4c4-7f3j-4v7x/GHSA-c4c4-7f3j-4v7x.json @@ -7,12 +7,8 @@ "CVE-2011-3424" ], "details": "Session fixation vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to hijack web sessions via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c4ch-35xg-vqch/GHSA-c4ch-35xg-vqch.json b/advisories/unreviewed/2022/05/GHSA-c4ch-35xg-vqch/GHSA-c4ch-35xg-vqch.json index 6568aeb13ae..65edca709af 100644 --- a/advisories/unreviewed/2022/05/GHSA-c4ch-35xg-vqch/GHSA-c4ch-35xg-vqch.json +++ b/advisories/unreviewed/2022/05/GHSA-c4ch-35xg-vqch/GHSA-c4ch-35xg-vqch.json @@ -7,12 +7,8 @@ "CVE-2011-4408" ], "details": "The Single Sign On Client (ubuntu-sso-client) for Ubuntu 11.04 and 11.10 does not properly validate SSL certificates when using HTTPS, which allows remote attackers to spoof a server and modify or read sensitive data via a man-in-the-middle (MITM) attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c55x-q2gq-23wj/GHSA-c55x-q2gq-23wj.json b/advisories/unreviewed/2022/05/GHSA-c55x-q2gq-23wj/GHSA-c55x-q2gq-23wj.json index 57a925f1806..1724735b3f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-c55x-q2gq-23wj/GHSA-c55x-q2gq-23wj.json +++ b/advisories/unreviewed/2022/05/GHSA-c55x-q2gq-23wj/GHSA-c55x-q2gq-23wj.json @@ -7,12 +7,8 @@ "CVE-2011-2884" ], "details": "Multiple unspecified vulnerabilities in IBM Lotus Symphony 3 before FP3 have unknown impact and attack vectors, related to \"critical security vulnerability issues.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c583-987f-5r26/GHSA-c583-987f-5r26.json b/advisories/unreviewed/2022/05/GHSA-c583-987f-5r26/GHSA-c583-987f-5r26.json index b371a1fc6b5..314f63ff797 100644 --- a/advisories/unreviewed/2022/05/GHSA-c583-987f-5r26/GHSA-c583-987f-5r26.json +++ b/advisories/unreviewed/2022/05/GHSA-c583-987f-5r26/GHSA-c583-987f-5r26.json @@ -7,12 +7,8 @@ "CVE-2011-2675" ], "details": "Cross-site scripting (XSS) vulnerability in Enkai-kun before 110916 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c6p2-v494-g23h/GHSA-c6p2-v494-g23h.json b/advisories/unreviewed/2022/05/GHSA-c6p2-v494-g23h/GHSA-c6p2-v494-g23h.json index 765644d0922..e0421a00a4f 100644 --- a/advisories/unreviewed/2022/05/GHSA-c6p2-v494-g23h/GHSA-c6p2-v494-g23h.json +++ b/advisories/unreviewed/2022/05/GHSA-c6p2-v494-g23h/GHSA-c6p2-v494-g23h.json @@ -7,12 +7,8 @@ "CVE-2011-3532" ], "details": "Unspecified vulnerability in the Oracle Agile Product Supplier Collaboration for Process component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0.2, 6.0.0.3, and 6.0.0.4 allows remote attackers to affect confidentiality via unknown vectors related to Supplier Portal.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c76f-h47x-j5r2/GHSA-c76f-h47x-j5r2.json b/advisories/unreviewed/2022/05/GHSA-c76f-h47x-j5r2/GHSA-c76f-h47x-j5r2.json index 182fd7d9f6b..46deb8717ef 100644 --- a/advisories/unreviewed/2022/05/GHSA-c76f-h47x-j5r2/GHSA-c76f-h47x-j5r2.json +++ b/advisories/unreviewed/2022/05/GHSA-c76f-h47x-j5r2/GHSA-c76f-h47x-j5r2.json @@ -7,12 +7,8 @@ "CVE-2011-3387" ], "details": "The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a denial of service (memory consumption or an infinite loop) via a crafted attribute length field in a class file, related to validation of a length field at the wrong time, a different vulnerability than CVE-2011-0311.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c888-w76p-vhx3/GHSA-c888-w76p-vhx3.json b/advisories/unreviewed/2022/05/GHSA-c888-w76p-vhx3/GHSA-c888-w76p-vhx3.json index f5f5a0fe10f..f0cbe32cfb6 100644 --- a/advisories/unreviewed/2022/05/GHSA-c888-w76p-vhx3/GHSA-c888-w76p-vhx3.json +++ b/advisories/unreviewed/2022/05/GHSA-c888-w76p-vhx3/GHSA-c888-w76p-vhx3.json @@ -7,12 +7,8 @@ "CVE-2011-4219" ], "details": "Investintech.com SlimPDF Reader does not prevent faulting-address data from affecting branch selection, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cfp8-45pv-xvgw/GHSA-cfp8-45pv-xvgw.json b/advisories/unreviewed/2022/05/GHSA-cfp8-45pv-xvgw/GHSA-cfp8-45pv-xvgw.json index 775a9474c89..aa7488d55d9 100644 --- a/advisories/unreviewed/2022/05/GHSA-cfp8-45pv-xvgw/GHSA-cfp8-45pv-xvgw.json +++ b/advisories/unreviewed/2022/05/GHSA-cfp8-45pv-xvgw/GHSA-cfp8-45pv-xvgw.json @@ -7,12 +7,8 @@ "CVE-2011-2108" ], "details": "Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to a \"design flaw.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cfx8-4jg2-j2fj/GHSA-cfx8-4jg2-j2fj.json b/advisories/unreviewed/2022/05/GHSA-cfx8-4jg2-j2fj/GHSA-cfx8-4jg2-j2fj.json index b16ace5d6f5..6bd902ee961 100644 --- a/advisories/unreviewed/2022/05/GHSA-cfx8-4jg2-j2fj/GHSA-cfx8-4jg2-j2fj.json +++ b/advisories/unreviewed/2022/05/GHSA-cfx8-4jg2-j2fj/GHSA-cfx8-4jg2-j2fj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cjvq-33mj-q4qj/GHSA-cjvq-33mj-q4qj.json b/advisories/unreviewed/2022/05/GHSA-cjvq-33mj-q4qj/GHSA-cjvq-33mj-q4qj.json index 181eec2029b..cb017e58895 100644 --- a/advisories/unreviewed/2022/05/GHSA-cjvq-33mj-q4qj/GHSA-cjvq-33mj-q4qj.json +++ b/advisories/unreviewed/2022/05/GHSA-cjvq-33mj-q4qj/GHSA-cjvq-33mj-q4qj.json @@ -7,12 +7,8 @@ "CVE-2011-2609" ], "details": "Opera before 11.50 does not properly restrict data: URIs, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cp6x-wm76-3j63/GHSA-cp6x-wm76-3j63.json b/advisories/unreviewed/2022/05/GHSA-cp6x-wm76-3j63/GHSA-cp6x-wm76-3j63.json index f76ae0796dc..5a660757d96 100644 --- a/advisories/unreviewed/2022/05/GHSA-cp6x-wm76-3j63/GHSA-cp6x-wm76-3j63.json +++ b/advisories/unreviewed/2022/05/GHSA-cp6x-wm76-3j63/GHSA-cp6x-wm76-3j63.json @@ -7,12 +7,8 @@ "CVE-2011-4212" ], "details": "The sandbox environment in the Google App Engine Python SDK before 1.5.4 does not properly prevent os.popen calls, which allows local users to bypass intended access restrictions and execute arbitrary commands via a dev_appserver.RestrictedPathFunction._original_os reference within the code parameter to _ah/admin/interactive/execute, a different vulnerability than CVE-2011-1364.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cpw5-86jp-rf5q/GHSA-cpw5-86jp-rf5q.json b/advisories/unreviewed/2022/05/GHSA-cpw5-86jp-rf5q/GHSA-cpw5-86jp-rf5q.json index ac5c0ee3496..b7e27df2916 100644 --- a/advisories/unreviewed/2022/05/GHSA-cpw5-86jp-rf5q/GHSA-cpw5-86jp-rf5q.json +++ b/advisories/unreviewed/2022/05/GHSA-cpw5-86jp-rf5q/GHSA-cpw5-86jp-rf5q.json @@ -7,12 +7,8 @@ "CVE-2011-3541" ], "details": "Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.3.5 and 8.3.7 allows local users to affect availability via unknown vectors related to Outside In Filters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cq88-mf6p-vjjm/GHSA-cq88-mf6p-vjjm.json b/advisories/unreviewed/2022/05/GHSA-cq88-mf6p-vjjm/GHSA-cq88-mf6p-vjjm.json index f71c9f0cda6..8faa7fdbb61 100644 --- a/advisories/unreviewed/2022/05/GHSA-cq88-mf6p-vjjm/GHSA-cq88-mf6p-vjjm.json +++ b/advisories/unreviewed/2022/05/GHSA-cq88-mf6p-vjjm/GHSA-cq88-mf6p-vjjm.json @@ -7,12 +7,8 @@ "CVE-2011-4216" ], "details": "Investintech.com SlimPDF Reader does not properly restrict write operations, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cxgc-rj9m-qm58/GHSA-cxgc-rj9m-qm58.json b/advisories/unreviewed/2022/05/GHSA-cxgc-rj9m-qm58/GHSA-cxgc-rj9m-qm58.json index 7f766833f7c..cea4dd2ffec 100644 --- a/advisories/unreviewed/2022/05/GHSA-cxgc-rj9m-qm58/GHSA-cxgc-rj9m-qm58.json +++ b/advisories/unreviewed/2022/05/GHSA-cxgc-rj9m-qm58/GHSA-cxgc-rj9m-qm58.json @@ -7,12 +7,8 @@ "CVE-2011-3492" ], "details": "Stack-based buffer overflow in Azeotech DAQFactory 5.85 build 1853 and earlier allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted NETB packet to UDP port 20034.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f24q-pqmc-37r2/GHSA-f24q-pqmc-37r2.json b/advisories/unreviewed/2022/05/GHSA-f24q-pqmc-37r2/GHSA-f24q-pqmc-37r2.json index a27ef6862e0..5c2778602a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-f24q-pqmc-37r2/GHSA-f24q-pqmc-37r2.json +++ b/advisories/unreviewed/2022/05/GHSA-f24q-pqmc-37r2/GHSA-f24q-pqmc-37r2.json @@ -7,12 +7,8 @@ "CVE-2011-3562" ], "details": "Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 11.1.1.5, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect integrity via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f3pr-496c-8q45/GHSA-f3pr-496c-8q45.json b/advisories/unreviewed/2022/05/GHSA-f3pr-496c-8q45/GHSA-f3pr-496c-8q45.json index f7b837ca385..ba18606e83e 100644 --- a/advisories/unreviewed/2022/05/GHSA-f3pr-496c-8q45/GHSA-f3pr-496c-8q45.json +++ b/advisories/unreviewed/2022/05/GHSA-f3pr-496c-8q45/GHSA-f3pr-496c-8q45.json @@ -7,12 +7,8 @@ "CVE-2011-2155" ], "details": "Login.aspx in the SmarterTools SmarterStats 6.0 web server generates a ctl00$MPH$txtPassword password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f452-4gc3-68q4/GHSA-f452-4gc3-68q4.json b/advisories/unreviewed/2022/05/GHSA-f452-4gc3-68q4/GHSA-f452-4gc3-68q4.json index fdff50d9b3f..2a144af7591 100644 --- a/advisories/unreviewed/2022/05/GHSA-f452-4gc3-68q4/GHSA-f452-4gc3-68q4.json +++ b/advisories/unreviewed/2022/05/GHSA-f452-4gc3-68q4/GHSA-f452-4gc3-68q4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f47r-v8p9-7rvh/GHSA-f47r-v8p9-7rvh.json b/advisories/unreviewed/2022/05/GHSA-f47r-v8p9-7rvh/GHSA-f47r-v8p9-7rvh.json index 768d58374c9..89ec9e51842 100644 --- a/advisories/unreviewed/2022/05/GHSA-f47r-v8p9-7rvh/GHSA-f47r-v8p9-7rvh.json +++ b/advisories/unreviewed/2022/05/GHSA-f47r-v8p9-7rvh/GHSA-f47r-v8p9-7rvh.json @@ -7,12 +7,8 @@ "CVE-2011-4709" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Hotaru.php in the Search plugin 1.3 for Hotaru CMS allow remote attackers to inject arbitrary web script or HTML via the (1) SITE_NAME parameter to admin_index.php, or the (2) return and (3) search parameters to index.php. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f4gm-fq43-w3m5/GHSA-f4gm-fq43-w3m5.json b/advisories/unreviewed/2022/05/GHSA-f4gm-fq43-w3m5/GHSA-f4gm-fq43-w3m5.json index 4bec28d8897..59a221f0fd6 100644 --- a/advisories/unreviewed/2022/05/GHSA-f4gm-fq43-w3m5/GHSA-f4gm-fq43-w3m5.json +++ b/advisories/unreviewed/2022/05/GHSA-f4gm-fq43-w3m5/GHSA-f4gm-fq43-w3m5.json @@ -7,12 +7,8 @@ "CVE-2010-4993" ], "details": "SQL injection vulnerability in the eventcal (com_eventcal) component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f4x5-7cjq-vgcr/GHSA-f4x5-7cjq-vgcr.json b/advisories/unreviewed/2022/05/GHSA-f4x5-7cjq-vgcr/GHSA-f4x5-7cjq-vgcr.json index e8b34ff1e70..5238f728e5a 100644 --- a/advisories/unreviewed/2022/05/GHSA-f4x5-7cjq-vgcr/GHSA-f4x5-7cjq-vgcr.json +++ b/advisories/unreviewed/2022/05/GHSA-f4x5-7cjq-vgcr/GHSA-f4x5-7cjq-vgcr.json @@ -7,12 +7,8 @@ "CVE-2011-2380" ], "details": "Bugzilla 2.23.3 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 allows remote attackers to determine the existence of private group names via a crafted parameter during (1) bug creation or (2) bug editing.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f5gx-hrrr-h7q3/GHSA-f5gx-hrrr-h7q3.json b/advisories/unreviewed/2022/05/GHSA-f5gx-hrrr-h7q3/GHSA-f5gx-hrrr-h7q3.json index e9300f846ec..fb62c2538ef 100644 --- a/advisories/unreviewed/2022/05/GHSA-f5gx-hrrr-h7q3/GHSA-f5gx-hrrr-h7q3.json +++ b/advisories/unreviewed/2022/05/GHSA-f5gx-hrrr-h7q3/GHSA-f5gx-hrrr-h7q3.json @@ -7,12 +7,8 @@ "CVE-2011-3128" ], "details": "WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 treats unattached attachments as published, which might allow remote attackers to obtain sensitive data via vectors related to wp-includes/post.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f7cm-4h2j-j6g2/GHSA-f7cm-4h2j-j6g2.json b/advisories/unreviewed/2022/05/GHSA-f7cm-4h2j-j6g2/GHSA-f7cm-4h2j-j6g2.json index 6e377d4175a..417e96ba9e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-f7cm-4h2j-j6g2/GHSA-f7cm-4h2j-j6g2.json +++ b/advisories/unreviewed/2022/05/GHSA-f7cm-4h2j-j6g2/GHSA-f7cm-4h2j-j6g2.json @@ -7,12 +7,8 @@ "CVE-2011-3542" ], "details": "Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability via unknown vectors related to Kernel/Performance Counter BackEnd Module (pcbe).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f7ww-4j58-r8c4/GHSA-f7ww-4j58-r8c4.json b/advisories/unreviewed/2022/05/GHSA-f7ww-4j58-r8c4/GHSA-f7ww-4j58-r8c4.json index 312b92b30c7..46fda00bac8 100644 --- a/advisories/unreviewed/2022/05/GHSA-f7ww-4j58-r8c4/GHSA-f7ww-4j58-r8c4.json +++ b/advisories/unreviewed/2022/05/GHSA-f7ww-4j58-r8c4/GHSA-f7ww-4j58-r8c4.json @@ -7,12 +7,8 @@ "CVE-2011-2648" ], "details": "Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a filter in a modified file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f832-gjrw-m8w5/GHSA-f832-gjrw-m8w5.json b/advisories/unreviewed/2022/05/GHSA-f832-gjrw-m8w5/GHSA-f832-gjrw-m8w5.json index d11f7e8a607..e0253de4a3d 100644 --- a/advisories/unreviewed/2022/05/GHSA-f832-gjrw-m8w5/GHSA-f832-gjrw-m8w5.json +++ b/advisories/unreviewed/2022/05/GHSA-f832-gjrw-m8w5/GHSA-f832-gjrw-m8w5.json @@ -7,12 +7,8 @@ "CVE-2011-4615" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Zabbix before 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the gname parameter (aka host groups name) to (1) hostgroups.php and (2) usergrps.php, the update action to (3) hosts.php and (4) scripts.php, and (5) maintenance.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f83p-664c-8vw5/GHSA-f83p-664c-8vw5.json b/advisories/unreviewed/2022/05/GHSA-f83p-664c-8vw5/GHSA-f83p-664c-8vw5.json index 6394542bc77..ef1e16b0f41 100644 --- a/advisories/unreviewed/2022/05/GHSA-f83p-664c-8vw5/GHSA-f83p-664c-8vw5.json +++ b/advisories/unreviewed/2022/05/GHSA-f83p-664c-8vw5/GHSA-f83p-664c-8vw5.json @@ -7,12 +7,8 @@ "CVE-2011-2535" ], "details": "chan_iax2.c in the IAX2 channel driver in Asterisk Open Source 1.4.x before 1.4.41.1, 1.6.2.x before 1.6.2.18.1, and 1.8.x before 1.8.4.3, and Asterisk Business Edition C.3 before C.3.7.3, accesses a memory address contained in an option control frame, which allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a crafted frame.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f9c3-3x89-v5jj/GHSA-f9c3-3x89-v5jj.json b/advisories/unreviewed/2022/05/GHSA-f9c3-3x89-v5jj/GHSA-f9c3-3x89-v5jj.json index 9b71ea94608..b43ce01f450 100644 --- a/advisories/unreviewed/2022/05/GHSA-f9c3-3x89-v5jj/GHSA-f9c3-3x89-v5jj.json +++ b/advisories/unreviewed/2022/05/GHSA-f9c3-3x89-v5jj/GHSA-f9c3-3x89-v5jj.json @@ -7,12 +7,8 @@ "CVE-2010-5192" ], "details": "Cross-site scripting (XSS) vulnerability in the Java Management Console in Blue Coat ProxySG before SGOS 4.3.4.1, 5.x before SGOS 5.4.5.1, 5.5 before SGOS 5.5.4.1, and 6.x before SGOS 6.1.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f9xc-fpfx-m2x4/GHSA-f9xc-fpfx-m2x4.json b/advisories/unreviewed/2022/05/GHSA-f9xc-fpfx-m2x4/GHSA-f9xc-fpfx-m2x4.json index 4af53adaf48..972f6ccab75 100644 --- a/advisories/unreviewed/2022/05/GHSA-f9xc-fpfx-m2x4/GHSA-f9xc-fpfx-m2x4.json +++ b/advisories/unreviewed/2022/05/GHSA-f9xc-fpfx-m2x4/GHSA-f9xc-fpfx-m2x4.json @@ -7,12 +7,8 @@ "CVE-2011-4887" ], "details": "Cross-site scripting (XSS) vulnerability in the Violations Table in the management GUI in the MX Management Server in Imperva SecureSphere Web Application Firewall (WAF) 9.0 allows remote attackers to inject arbitrary web script or HTML via the username field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fcjv-q2gv-p4wq/GHSA-fcjv-q2gv-p4wq.json b/advisories/unreviewed/2022/05/GHSA-fcjv-q2gv-p4wq/GHSA-fcjv-q2gv-p4wq.json index 7f1e769d60d..82ffc8c4aef 100644 --- a/advisories/unreviewed/2022/05/GHSA-fcjv-q2gv-p4wq/GHSA-fcjv-q2gv-p4wq.json +++ b/advisories/unreviewed/2022/05/GHSA-fcjv-q2gv-p4wq/GHSA-fcjv-q2gv-p4wq.json @@ -7,12 +7,8 @@ "CVE-2008-7301" ], "details": "SQL injection vulnerability in admin/login.php in jSite 1.0 OE allows remote attackers to execute arbitrary SQL commands via the username parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fcw4-qcmw-m499/GHSA-fcw4-qcmw-m499.json b/advisories/unreviewed/2022/05/GHSA-fcw4-qcmw-m499/GHSA-fcw4-qcmw-m499.json index e4807bc89dc..5164bc03484 100644 --- a/advisories/unreviewed/2022/05/GHSA-fcw4-qcmw-m499/GHSA-fcw4-qcmw-m499.json +++ b/advisories/unreviewed/2022/05/GHSA-fcw4-qcmw-m499/GHSA-fcw4-qcmw-m499.json @@ -7,12 +7,8 @@ "CVE-2011-5051" ], "details": "Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extension using (1) uploadify/upload_admin_avatar.php or (2) uploadify/upload_profile_avatar.php, then accessing it via a direct request to the file in an unspecified directory inside the webroot.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fg5w-cxx4-22vf/GHSA-fg5w-cxx4-22vf.json b/advisories/unreviewed/2022/05/GHSA-fg5w-cxx4-22vf/GHSA-fg5w-cxx4-22vf.json index a8f41eac8d7..e5b030b4628 100644 --- a/advisories/unreviewed/2022/05/GHSA-fg5w-cxx4-22vf/GHSA-fg5w-cxx4-22vf.json +++ b/advisories/unreviewed/2022/05/GHSA-fg5w-cxx4-22vf/GHSA-fg5w-cxx4-22vf.json @@ -7,12 +7,8 @@ "CVE-2011-2584" ], "details": "Cisco Show and Share 5(2), 5.2(1), and 5.2(2) before 5.2(2.1) allows remote attackers to access the (1) Encoders and Pull Configurations, (2) Push Configurations, (3) Video Encoding Formats, and (4) Transcoding administration pages, and cause a denial of service (live event outage) or obtain potentially sensitive information, via unspecified vectors, aka Bug ID CSCto73758.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fgf5-8fmx-w5cx/GHSA-fgf5-8fmx-w5cx.json b/advisories/unreviewed/2022/05/GHSA-fgf5-8fmx-w5cx/GHSA-fgf5-8fmx-w5cx.json index 2eaea08f6ba..36289b97bd9 100644 --- a/advisories/unreviewed/2022/05/GHSA-fgf5-8fmx-w5cx/GHSA-fgf5-8fmx-w5cx.json +++ b/advisories/unreviewed/2022/05/GHSA-fgf5-8fmx-w5cx/GHSA-fgf5-8fmx-w5cx.json @@ -7,12 +7,8 @@ "CVE-2010-5193" ], "details": "Stack-based buffer overflow in the TIFMergeMultiFiles function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0 and Gold 6.0 allows remote attackers to execute arbitrary code via a long strDelimit parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fm6w-46wm-fr8m/GHSA-fm6w-46wm-fr8m.json b/advisories/unreviewed/2022/05/GHSA-fm6w-46wm-fr8m/GHSA-fm6w-46wm-fr8m.json index d572d491108..59382f3a2ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-fm6w-46wm-fr8m/GHSA-fm6w-46wm-fr8m.json +++ b/advisories/unreviewed/2022/05/GHSA-fm6w-46wm-fr8m/GHSA-fm6w-46wm-fr8m.json @@ -7,12 +7,8 @@ "CVE-2011-3778" ], "details": "PhpGedView 4.2.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by serviceClientTest.php and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fmfv-rccp-w5q9/GHSA-fmfv-rccp-w5q9.json b/advisories/unreviewed/2022/05/GHSA-fmfv-rccp-w5q9/GHSA-fmfv-rccp-w5q9.json index 79a4ce37286..dd2f1f21a53 100644 --- a/advisories/unreviewed/2022/05/GHSA-fmfv-rccp-w5q9/GHSA-fmfv-rccp-w5q9.json +++ b/advisories/unreviewed/2022/05/GHSA-fmfv-rccp-w5q9/GHSA-fmfv-rccp-w5q9.json @@ -7,12 +7,8 @@ "CVE-2011-4759" ], "details": "Parallels Plesk Small Business Panel 10.2.0 generates web pages containing external links in response to GET requests with query strings for client@1/domain@1/hosting/file-manager/ and certain other files, which makes it easier for remote attackers to obtain sensitive information by reading (1) web-server access logs or (2) web-server Referer logs, related to a \"cross-domain Referer leakage\" issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fmqw-584g-35fg/GHSA-fmqw-584g-35fg.json b/advisories/unreviewed/2022/05/GHSA-fmqw-584g-35fg/GHSA-fmqw-584g-35fg.json index cdf90c7621d..1f2e1028487 100644 --- a/advisories/unreviewed/2022/05/GHSA-fmqw-584g-35fg/GHSA-fmqw-584g-35fg.json +++ b/advisories/unreviewed/2022/05/GHSA-fmqw-584g-35fg/GHSA-fmqw-584g-35fg.json @@ -7,12 +7,8 @@ "CVE-2011-3426" ], "details": "Cross-site scripting (XSS) vulnerability in Safari in Apple iOS before 5 allows remote web servers to inject arbitrary web script or HTML via a file accompanied by a \"Content-Disposition: attachment\" HTTP header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fq47-mp9r-q7w9/GHSA-fq47-mp9r-q7w9.json b/advisories/unreviewed/2022/05/GHSA-fq47-mp9r-q7w9/GHSA-fq47-mp9r-q7w9.json index 5a63a773858..5722e1d2fff 100644 --- a/advisories/unreviewed/2022/05/GHSA-fq47-mp9r-q7w9/GHSA-fq47-mp9r-q7w9.json +++ b/advisories/unreviewed/2022/05/GHSA-fq47-mp9r-q7w9/GHSA-fq47-mp9r-q7w9.json @@ -7,12 +7,8 @@ "CVE-2011-2477" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in Icinga before 1.4.1, when escape_html_tags is disabled, allow remote attackers to inject arbitrary web script or HTML via a JavaScript expression, as demonstrated by the onload attribute of a BODY element located after a check-host-alive! sequence, a different vulnerability than CVE-2011-2179.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fr6r-xw3f-g957/GHSA-fr6r-xw3f-g957.json b/advisories/unreviewed/2022/05/GHSA-fr6r-xw3f-g957/GHSA-fr6r-xw3f-g957.json index 1675b599d25..38d95a885e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-fr6r-xw3f-g957/GHSA-fr6r-xw3f-g957.json +++ b/advisories/unreviewed/2022/05/GHSA-fr6r-xw3f-g957/GHSA-fr6r-xw3f-g957.json @@ -7,12 +7,8 @@ "CVE-2011-4109" ], "details": "Double free vulnerability in OpenSSL 0.9.8 before 0.9.8s, when X509_V_FLAG_POLICY_CHECK is enabled, allows remote attackers to have an unspecified impact by triggering failure of a policy check.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-frgq-gm5r-q2fp/GHSA-frgq-gm5r-q2fp.json b/advisories/unreviewed/2022/05/GHSA-frgq-gm5r-q2fp/GHSA-frgq-gm5r-q2fp.json index 2cf0e737884..13a98743727 100644 --- a/advisories/unreviewed/2022/05/GHSA-frgq-gm5r-q2fp/GHSA-frgq-gm5r-q2fp.json +++ b/advisories/unreviewed/2022/05/GHSA-frgq-gm5r-q2fp/GHSA-frgq-gm5r-q2fp.json @@ -7,12 +7,8 @@ "CVE-2010-5148" ], "details": "Websense Web Security and Web Filter before 7.1 Hotfix 21 do not set the secure flag for the Encrypted Session (SSL) cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fwm5-c4jq-p4wv/GHSA-fwm5-c4jq-p4wv.json b/advisories/unreviewed/2022/05/GHSA-fwm5-c4jq-p4wv/GHSA-fwm5-c4jq-p4wv.json index 1d45cd46764..a3cbf577fc7 100644 --- a/advisories/unreviewed/2022/05/GHSA-fwm5-c4jq-p4wv/GHSA-fwm5-c4jq-p4wv.json +++ b/advisories/unreviewed/2022/05/GHSA-fwm5-c4jq-p4wv/GHSA-fwm5-c4jq-p4wv.json @@ -7,12 +7,8 @@ "CVE-2011-2697" ], "details": "foomatic-rip-hplip in HP Linux Imaging and Printing (HPLIP) 3.11.5 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fwmf-66pr-p33f/GHSA-fwmf-66pr-p33f.json b/advisories/unreviewed/2022/05/GHSA-fwmf-66pr-p33f/GHSA-fwmf-66pr-p33f.json index 06ca8b0d17f..008d2a5be3a 100644 --- a/advisories/unreviewed/2022/05/GHSA-fwmf-66pr-p33f/GHSA-fwmf-66pr-p33f.json +++ b/advisories/unreviewed/2022/05/GHSA-fwmf-66pr-p33f/GHSA-fwmf-66pr-p33f.json @@ -7,12 +7,8 @@ "CVE-2011-3243" ], "details": "Cross-site scripting (XSS) vulnerability in WebKit, as used in Apple iOS before 5 and Safari before 5.1.1, allows remote attackers to inject arbitrary web script or HTML via vectors involving inactive DOM windows.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fxvp-xvqp-rp6h/GHSA-fxvp-xvqp-rp6h.json b/advisories/unreviewed/2022/05/GHSA-fxvp-xvqp-rp6h/GHSA-fxvp-xvqp-rp6h.json index c9725640dc3..89b0726ac7b 100644 --- a/advisories/unreviewed/2022/05/GHSA-fxvp-xvqp-rp6h/GHSA-fxvp-xvqp-rp6h.json +++ b/advisories/unreviewed/2022/05/GHSA-fxvp-xvqp-rp6h/GHSA-fxvp-xvqp-rp6h.json @@ -7,12 +7,8 @@ "CVE-2011-5052" ], "details": "Stack-based buffer overflow in CoCSoft Stream Down 6.8.0 allows remote web servers to execute arbitrary code via a long response to a download request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fxx2-g3vh-j258/GHSA-fxx2-g3vh-j258.json b/advisories/unreviewed/2022/05/GHSA-fxx2-g3vh-j258/GHSA-fxx2-g3vh-j258.json index 8cbfc09cc5b..e1564c2be2e 100644 --- a/advisories/unreviewed/2022/05/GHSA-fxx2-g3vh-j258/GHSA-fxx2-g3vh-j258.json +++ b/advisories/unreviewed/2022/05/GHSA-fxx2-g3vh-j258/GHSA-fxx2-g3vh-j258.json @@ -7,12 +7,8 @@ "CVE-2011-4668" ], "details": "IBM Tivoli Netcool/Reporter 2.2 before 2.2.0.8 allows remote attackers to execute arbitrary code via vectors related to an unspecified CGI program used with the Apache HTTP Server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fxxh-pp9v-6qr6/GHSA-fxxh-pp9v-6qr6.json b/advisories/unreviewed/2022/05/GHSA-fxxh-pp9v-6qr6/GHSA-fxxh-pp9v-6qr6.json index d7d22f70df5..37222b7b97e 100644 --- a/advisories/unreviewed/2022/05/GHSA-fxxh-pp9v-6qr6/GHSA-fxxh-pp9v-6qr6.json +++ b/advisories/unreviewed/2022/05/GHSA-fxxh-pp9v-6qr6/GHSA-fxxh-pp9v-6qr6.json @@ -7,12 +7,8 @@ "CVE-2011-2593" ], "details": "Integer overflow in the StartEpa method in the nsepacom ActiveX control (nsepa.exe) in Citrix Access Gateway Enterprise Edition Plug-in for Windows 9.x before 9.3-57.5 and 10.0 before 10.0-69.4 allows remote attackers to execute arbitrary code via a crafted Content-Length HTTP header, which triggers a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g32m-592p-x976/GHSA-g32m-592p-x976.json b/advisories/unreviewed/2022/05/GHSA-g32m-592p-x976/GHSA-g32m-592p-x976.json index 53338466d3d..6e830847b41 100644 --- a/advisories/unreviewed/2022/05/GHSA-g32m-592p-x976/GHSA-g32m-592p-x976.json +++ b/advisories/unreviewed/2022/05/GHSA-g32m-592p-x976/GHSA-g32m-592p-x976.json @@ -7,12 +7,8 @@ "CVE-2011-5111" ], "details": "Multiple SQL injection vulnerabilities in Kajian Website CMS Balitbang 3.x allow remote attackers to execute arbitrary SQL commands via the hal parameter to (1) the data module in alumni.php; or the (2) lih_buku, (3) artikel, (4) album, or (5) berita module in index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g42m-grhr-jgj3/GHSA-g42m-grhr-jgj3.json b/advisories/unreviewed/2022/05/GHSA-g42m-grhr-jgj3/GHSA-g42m-grhr-jgj3.json index c8eb4ea2452..87cc47ca2aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-g42m-grhr-jgj3/GHSA-g42m-grhr-jgj3.json +++ b/advisories/unreviewed/2022/05/GHSA-g42m-grhr-jgj3/GHSA-g42m-grhr-jgj3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g5gc-p4g2-fgw7/GHSA-g5gc-p4g2-fgw7.json b/advisories/unreviewed/2022/05/GHSA-g5gc-p4g2-fgw7/GHSA-g5gc-p4g2-fgw7.json index 2c65b4cecb2..61659a514f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-g5gc-p4g2-fgw7/GHSA-g5gc-p4g2-fgw7.json +++ b/advisories/unreviewed/2022/05/GHSA-g5gc-p4g2-fgw7/GHSA-g5gc-p4g2-fgw7.json @@ -7,12 +7,8 @@ "CVE-2011-2157" ], "details": "The (1) Admin/frmEmailReportSettings.aspx and (2) Admin/frmGeneralSettings.aspx components in the SmarterTools SmarterStats 6.0 web server generate web pages containing e-mail addresses, which allows remote attackers to obtain potentially sensitive information by reading the default values of form fields.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g5m7-5m55-933w/GHSA-g5m7-5m55-933w.json b/advisories/unreviewed/2022/05/GHSA-g5m7-5m55-933w/GHSA-g5m7-5m55-933w.json index 50c57343f6d..926b0c9c7a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-g5m7-5m55-933w/GHSA-g5m7-5m55-933w.json +++ b/advisories/unreviewed/2022/05/GHSA-g5m7-5m55-933w/GHSA-g5m7-5m55-933w.json @@ -7,12 +7,8 @@ "CVE-2010-4908" ], "details": "SQL injection vulnerability in detail.php in Virtue Shopping Mall allows remote attackers to execute arbitrary SQL commands via the prodid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g6vr-pffw-fg7v/GHSA-g6vr-pffw-fg7v.json b/advisories/unreviewed/2022/05/GHSA-g6vr-pffw-fg7v/GHSA-g6vr-pffw-fg7v.json index bc125a84adf..ecf5085cb9a 100644 --- a/advisories/unreviewed/2022/05/GHSA-g6vr-pffw-fg7v/GHSA-g6vr-pffw-fg7v.json +++ b/advisories/unreviewed/2022/05/GHSA-g6vr-pffw-fg7v/GHSA-g6vr-pffw-fg7v.json @@ -7,12 +7,8 @@ "CVE-2010-5042" ], "details": "Cross-site scripting (XSS) vulnerability in the DJ-ArtGallery (com_djartgallery) component 0.9.1 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the cid[] parameter in an editItem action to administrator/index.php. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g75f-f7rw-h2h7/GHSA-g75f-f7rw-h2h7.json b/advisories/unreviewed/2022/05/GHSA-g75f-f7rw-h2h7/GHSA-g75f-f7rw-h2h7.json index f068f6f044c..a3f65922e40 100644 --- a/advisories/unreviewed/2022/05/GHSA-g75f-f7rw-h2h7/GHSA-g75f-f7rw-h2h7.json +++ b/advisories/unreviewed/2022/05/GHSA-g75f-f7rw-h2h7/GHSA-g75f-f7rw-h2h7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g7g5-m39g-mq22/GHSA-g7g5-m39g-mq22.json b/advisories/unreviewed/2022/05/GHSA-g7g5-m39g-mq22/GHSA-g7g5-m39g-mq22.json index 24869beeadc..537b7dffd20 100644 --- a/advisories/unreviewed/2022/05/GHSA-g7g5-m39g-mq22/GHSA-g7g5-m39g-mq22.json +++ b/advisories/unreviewed/2022/05/GHSA-g7g5-m39g-mq22/GHSA-g7g5-m39g-mq22.json @@ -7,12 +7,8 @@ "CVE-2010-4825" ], "details": "Cross-site scripting (XSS) vulnerability in magpie_debug.php in the Twitter Feed plugin (wp-twitter-feed) 0.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g7r9-hchc-63g2/GHSA-g7r9-hchc-63g2.json b/advisories/unreviewed/2022/05/GHSA-g7r9-hchc-63g2/GHSA-g7r9-hchc-63g2.json index 9f1b2e765a2..780983f1756 100644 --- a/advisories/unreviewed/2022/05/GHSA-g7r9-hchc-63g2/GHSA-g7r9-hchc-63g2.json +++ b/advisories/unreviewed/2022/05/GHSA-g7r9-hchc-63g2/GHSA-g7r9-hchc-63g2.json @@ -7,12 +7,8 @@ "CVE-2011-3437" ], "details": "Integer signedness error in Apple Type Services (ATS) in Apple Mac OS X 10.7 before 10.7.2 allows remote attackers to execute arbitrary code via a crafted embedded Type 1 font in a document.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g87j-53qv-pqjc/GHSA-g87j-53qv-pqjc.json b/advisories/unreviewed/2022/05/GHSA-g87j-53qv-pqjc/GHSA-g87j-53qv-pqjc.json index f2573cf1a36..3137d37b95f 100644 --- a/advisories/unreviewed/2022/05/GHSA-g87j-53qv-pqjc/GHSA-g87j-53qv-pqjc.json +++ b/advisories/unreviewed/2022/05/GHSA-g87j-53qv-pqjc/GHSA-g87j-53qv-pqjc.json @@ -7,12 +7,8 @@ "CVE-2011-2646" ], "details": "Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename in the list of testdrive modified files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g898-w585-5p4g/GHSA-g898-w585-5p4g.json b/advisories/unreviewed/2022/05/GHSA-g898-w585-5p4g/GHSA-g898-w585-5p4g.json index 2b8bb9e2dae..34ae918e7e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-g898-w585-5p4g/GHSA-g898-w585-5p4g.json +++ b/advisories/unreviewed/2022/05/GHSA-g898-w585-5p4g/GHSA-g898-w585-5p4g.json @@ -7,12 +7,8 @@ "CVE-2011-5039" ], "details": "Multiple SQL injection vulnerabilities in Infoproject Biznis Heroj allow remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters to login.php, (3) the filter parameter to widget.dokumenti_lista.php, and (4) the fin_nalog_id parameter to nalozi_naslov.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g8j2-r6q8-f4m9/GHSA-g8j2-r6q8-f4m9.json b/advisories/unreviewed/2022/05/GHSA-g8j2-r6q8-f4m9/GHSA-g8j2-r6q8-f4m9.json index 94688e99d1d..e933b79e75b 100644 --- a/advisories/unreviewed/2022/05/GHSA-g8j2-r6q8-f4m9/GHSA-g8j2-r6q8-f4m9.json +++ b/advisories/unreviewed/2022/05/GHSA-g8j2-r6q8-f4m9/GHSA-g8j2-r6q8-f4m9.json @@ -7,12 +7,8 @@ "CVE-2011-4565" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in XOOPS 2.5.1.a, and possibly earlier versions, allow remote attackers to inject arbitrary web script or HTML via the (1) text parameter to include/formdhtmltextarea_preview.php or (2) img BBCODE tag within the message parameter to pmlite.php (aka Private Message). NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g8xr-53m5-8gcv/GHSA-g8xr-53m5-8gcv.json b/advisories/unreviewed/2022/05/GHSA-g8xr-53m5-8gcv/GHSA-g8xr-53m5-8gcv.json index 3b130b34366..4a954ac7840 100644 --- a/advisories/unreviewed/2022/05/GHSA-g8xr-53m5-8gcv/GHSA-g8xr-53m5-8gcv.json +++ b/advisories/unreviewed/2022/05/GHSA-g8xr-53m5-8gcv/GHSA-g8xr-53m5-8gcv.json @@ -7,12 +7,8 @@ "CVE-2011-4763" ], "details": "Multiple SQL injection vulnerabilities in the Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to execute arbitrary SQL commands via crafted input to a PHP script, as demonstrated by Wizard/Edit/Html and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gcg7-cr8x-64fw/GHSA-gcg7-cr8x-64fw.json b/advisories/unreviewed/2022/05/GHSA-gcg7-cr8x-64fw/GHSA-gcg7-cr8x-64fw.json index 923886e79c6..a0cae75d5c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-gcg7-cr8x-64fw/GHSA-gcg7-cr8x-64fw.json +++ b/advisories/unreviewed/2022/05/GHSA-gcg7-cr8x-64fw/GHSA-gcg7-cr8x-64fw.json @@ -7,12 +7,8 @@ "CVE-2011-3189" ], "details": "The crypt function in PHP 5.3.7, when the MD5 hash type is used, returns the value of the salt argument instead of the hashed string, which might allow remote attackers to bypass authentication via an arbitrary password, a different vulnerability than CVE-2011-2483.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gchv-g8xq-wwr5/GHSA-gchv-g8xq-wwr5.json b/advisories/unreviewed/2022/05/GHSA-gchv-g8xq-wwr5/GHSA-gchv-g8xq-wwr5.json index 40a3f76c4c7..f3af62fb56a 100644 --- a/advisories/unreviewed/2022/05/GHSA-gchv-g8xq-wwr5/GHSA-gchv-g8xq-wwr5.json +++ b/advisories/unreviewed/2022/05/GHSA-gchv-g8xq-wwr5/GHSA-gchv-g8xq-wwr5.json @@ -7,12 +7,8 @@ "CVE-2011-3429" ], "details": "The Settings component in Apple iOS before 5 stores a cleartext parental-restrictions passcode in an unspecified file, which might allow physically proximate attackers to obtain sensitive information by reading this file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gfqf-mg2m-6mfr/GHSA-gfqf-mg2m-6mfr.json b/advisories/unreviewed/2022/05/GHSA-gfqf-mg2m-6mfr/GHSA-gfqf-mg2m-6mfr.json index 1088b4503a0..c93f676e4e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-gfqf-mg2m-6mfr/GHSA-gfqf-mg2m-6mfr.json +++ b/advisories/unreviewed/2022/05/GHSA-gfqf-mg2m-6mfr/GHSA-gfqf-mg2m-6mfr.json @@ -7,12 +7,8 @@ "CVE-2010-4872" ], "details": "SQL injection vulnerability in newsroom.asp in ASPilot Pilot Cart 7.3 allows remote attackers to execute arbitrary SQL commands via the specific parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gg9w-mq5m-p4x6/GHSA-gg9w-mq5m-p4x6.json b/advisories/unreviewed/2022/05/GHSA-gg9w-mq5m-p4x6/GHSA-gg9w-mq5m-p4x6.json index 4a04127ef45..aaf3640e46e 100644 --- a/advisories/unreviewed/2022/05/GHSA-gg9w-mq5m-p4x6/GHSA-gg9w-mq5m-p4x6.json +++ b/advisories/unreviewed/2022/05/GHSA-gg9w-mq5m-p4x6/GHSA-gg9w-mq5m-p4x6.json @@ -7,12 +7,8 @@ "CVE-2011-3533" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 8.9 allows remote authenticated users to affect confidentiality and integrity, related to Job Profile Manager (JPM).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gghq-9c8v-j5pc/GHSA-gghq-9c8v-j5pc.json b/advisories/unreviewed/2022/05/GHSA-gghq-9c8v-j5pc/GHSA-gghq-9c8v-j5pc.json index 48a7992eb7e..182d9390b3c 100644 --- a/advisories/unreviewed/2022/05/GHSA-gghq-9c8v-j5pc/GHSA-gghq-9c8v-j5pc.json +++ b/advisories/unreviewed/2022/05/GHSA-gghq-9c8v-j5pc/GHSA-gghq-9c8v-j5pc.json @@ -7,12 +7,8 @@ "CVE-2011-3229" ], "details": "Directory traversal vulnerability in Apple Safari before 5.1.1 allows remote attackers to execute arbitrary JavaScript code, in a Safari Extensions context, via a crafted safari-extension: URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ggqg-f856-4m46/GHSA-ggqg-f856-4m46.json b/advisories/unreviewed/2022/05/GHSA-ggqg-f856-4m46/GHSA-ggqg-f856-4m46.json index d975ffa0dd0..59024956b9a 100644 --- a/advisories/unreviewed/2022/05/GHSA-ggqg-f856-4m46/GHSA-ggqg-f856-4m46.json +++ b/advisories/unreviewed/2022/05/GHSA-ggqg-f856-4m46/GHSA-ggqg-f856-4m46.json @@ -7,12 +7,8 @@ "CVE-2011-4765" ], "details": "The Site Editor (aka SiteBuilder) feature in Parallels Plesk Small Business Panel 10.2.0 does not include the HTTPOnly flag in a Set-Cookie header for a cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie, as demonstrated by cookies used by Wizard/Edit/Modules/ImageGallery/MultiImagesUpload and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gh65-c85m-3mv4/GHSA-gh65-c85m-3mv4.json b/advisories/unreviewed/2022/05/GHSA-gh65-c85m-3mv4/GHSA-gh65-c85m-3mv4.json index 0194292db2a..94a6e601c05 100644 --- a/advisories/unreviewed/2022/05/GHSA-gh65-c85m-3mv4/GHSA-gh65-c85m-3mv4.json +++ b/advisories/unreviewed/2022/05/GHSA-gh65-c85m-3mv4/GHSA-gh65-c85m-3mv4.json @@ -7,12 +7,8 @@ "CVE-2011-2533" ], "details": "The configure script in D-Bus (aka DBus) 1.2.x before 1.2.28 allows local users to overwrite arbitrary files via a symlink attack on an unspecified file in /tmp/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gh76-hrw5-7xwp/GHSA-gh76-hrw5-7xwp.json b/advisories/unreviewed/2022/05/GHSA-gh76-hrw5-7xwp/GHSA-gh76-hrw5-7xwp.json index 046621455b7..a5dad9cf8e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-gh76-hrw5-7xwp/GHSA-gh76-hrw5-7xwp.json +++ b/advisories/unreviewed/2022/05/GHSA-gh76-hrw5-7xwp/GHSA-gh76-hrw5-7xwp.json @@ -7,12 +7,8 @@ "CVE-2011-3764" ], "details": "OpenDocMan 1.2.6-svn-2011-01-21 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by User_Perms_class.php and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gm56-mmwh-c4q9/GHSA-gm56-mmwh-c4q9.json b/advisories/unreviewed/2022/05/GHSA-gm56-mmwh-c4q9/GHSA-gm56-mmwh-c4q9.json index a2061128a55..9fed26b2016 100644 --- a/advisories/unreviewed/2022/05/GHSA-gm56-mmwh-c4q9/GHSA-gm56-mmwh-c4q9.json +++ b/advisories/unreviewed/2022/05/GHSA-gm56-mmwh-c4q9/GHSA-gm56-mmwh-c4q9.json @@ -7,12 +7,8 @@ "CVE-2011-2173" ], "details": "The implementation of OutputMediator objects in IBM WebSphere Portal 6.0.1.7, and 7.0.0.1 before CF002, allows remote authenticated users to cause a denial of service (memory consumption) via requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gpjv-p5j5-85v8/GHSA-gpjv-p5j5-85v8.json b/advisories/unreviewed/2022/05/GHSA-gpjv-p5j5-85v8/GHSA-gpjv-p5j5-85v8.json index f2354ce631e..713363d3a6e 100644 --- a/advisories/unreviewed/2022/05/GHSA-gpjv-p5j5-85v8/GHSA-gpjv-p5j5-85v8.json +++ b/advisories/unreviewed/2022/05/GHSA-gpjv-p5j5-85v8/GHSA-gpjv-p5j5-85v8.json @@ -7,12 +7,8 @@ "CVE-2011-5045" ], "details": "Cross-site scripting (XSS) vulnerability in details_view.php in PHP Booking Calendar 10e allows remote attackers to inject arbitrary web script or HTML via the page_info_message parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gpq3-9rfv-875f/GHSA-gpq3-9rfv-875f.json b/advisories/unreviewed/2022/05/GHSA-gpq3-9rfv-875f/GHSA-gpq3-9rfv-875f.json index eab48847ffa..5346cfbea91 100644 --- a/advisories/unreviewed/2022/05/GHSA-gpq3-9rfv-875f/GHSA-gpq3-9rfv-875f.json +++ b/advisories/unreviewed/2022/05/GHSA-gpq3-9rfv-875f/GHSA-gpq3-9rfv-875f.json @@ -7,12 +7,8 @@ "CVE-2011-2776" ], "details": "Buffer overflow in the Error function in super.c in Super 3.30.0 might allow local users to execute arbitrary code via vectors related to syslog logging. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gq38-xj7p-vcm8/GHSA-gq38-xj7p-vcm8.json b/advisories/unreviewed/2022/05/GHSA-gq38-xj7p-vcm8/GHSA-gq38-xj7p-vcm8.json index efecc58cbe5..ae2af842f92 100644 --- a/advisories/unreviewed/2022/05/GHSA-gq38-xj7p-vcm8/GHSA-gq38-xj7p-vcm8.json +++ b/advisories/unreviewed/2022/05/GHSA-gq38-xj7p-vcm8/GHSA-gq38-xj7p-vcm8.json @@ -7,12 +7,8 @@ "CVE-2011-3170" ], "details": "The gif_read_lzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, which allows remote attackers to trigger a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted stream, a different vulnerability than CVE-2011-2896.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gw57-jqq2-qw5f/GHSA-gw57-jqq2-qw5f.json b/advisories/unreviewed/2022/05/GHSA-gw57-jqq2-qw5f/GHSA-gw57-jqq2-qw5f.json index de5d9598d06..2abd819f3fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-gw57-jqq2-qw5f/GHSA-gw57-jqq2-qw5f.json +++ b/advisories/unreviewed/2022/05/GHSA-gw57-jqq2-qw5f/GHSA-gw57-jqq2-qw5f.json @@ -7,12 +7,8 @@ "CVE-2011-3580" ], "details": "IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to obtain configuration information via a direct request to the /server URI, which triggers a call to the phpinfo function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gwgr-fj8p-9w55/GHSA-gwgr-fj8p-9w55.json b/advisories/unreviewed/2022/05/GHSA-gwgr-fj8p-9w55/GHSA-gwgr-fj8p-9w55.json index a8037cf1f35..2ee9aaebf0d 100644 --- a/advisories/unreviewed/2022/05/GHSA-gwgr-fj8p-9w55/GHSA-gwgr-fj8p-9w55.json +++ b/advisories/unreviewed/2022/05/GHSA-gwgr-fj8p-9w55/GHSA-gwgr-fj8p-9w55.json @@ -7,12 +7,8 @@ "CVE-2010-5010" ], "details": "Cross-site scripting (XSS) vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to inject arbitrary web script or HTML via the session parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gx3r-43vv-vxfh/GHSA-gx3r-43vv-vxfh.json b/advisories/unreviewed/2022/05/GHSA-gx3r-43vv-vxfh/GHSA-gx3r-43vv-vxfh.json index 93793808267..aaef3825467 100644 --- a/advisories/unreviewed/2022/05/GHSA-gx3r-43vv-vxfh/GHSA-gx3r-43vv-vxfh.json +++ b/advisories/unreviewed/2022/05/GHSA-gx3r-43vv-vxfh/GHSA-gx3r-43vv-vxfh.json @@ -7,12 +7,8 @@ "CVE-2011-4752" ], "details": "SmarterTools SmarterStats 6.2.4100 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving frmCustomReport.aspx and certain other files. NOTE: it is possible that only clients, not the SmarterStats product, could be affected by this issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h2wc-cvm7-46rm/GHSA-h2wc-cvm7-46rm.json b/advisories/unreviewed/2022/05/GHSA-h2wc-cvm7-46rm/GHSA-h2wc-cvm7-46rm.json index 275b154391d..d2f412a788f 100644 --- a/advisories/unreviewed/2022/05/GHSA-h2wc-cvm7-46rm/GHSA-h2wc-cvm7-46rm.json +++ b/advisories/unreviewed/2022/05/GHSA-h2wc-cvm7-46rm/GHSA-h2wc-cvm7-46rm.json @@ -7,12 +7,8 @@ "CVE-2010-4916" ], "details": "Multiple SQL injection vulnerabilities in index.cfm in ColdGen ColdUserGroup 1.06 allow remote attackers to execute arbitrary SQL commands via the (1) ArticleID or (2) LibraryID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h3q2-c8qw-f4hc/GHSA-h3q2-c8qw-f4hc.json b/advisories/unreviewed/2022/05/GHSA-h3q2-c8qw-f4hc/GHSA-h3q2-c8qw-f4hc.json index a9314629ced..747045603f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-h3q2-c8qw-f4hc/GHSA-h3q2-c8qw-f4hc.json +++ b/advisories/unreviewed/2022/05/GHSA-h3q2-c8qw-f4hc/GHSA-h3q2-c8qw-f4hc.json @@ -7,12 +7,8 @@ "CVE-2011-3262" ], "details": "tools/libxc/xc_dom_bzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allows local users to cause a denial of service (management software infinite loop and management domain resource consumption) via unspecified vectors related to \"Lack of error checking in the decompression loop.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h4g9-w7xj-25fp/GHSA-h4g9-w7xj-25fp.json b/advisories/unreviewed/2022/05/GHSA-h4g9-w7xj-25fp/GHSA-h4g9-w7xj-25fp.json index c93a509ec10..4f77ac66988 100644 --- a/advisories/unreviewed/2022/05/GHSA-h4g9-w7xj-25fp/GHSA-h4g9-w7xj-25fp.json +++ b/advisories/unreviewed/2022/05/GHSA-h4g9-w7xj-25fp/GHSA-h4g9-w7xj-25fp.json @@ -7,12 +7,8 @@ "CVE-2011-2467" ], "details": "SQL injection vulnerability in lsassd in Lsass in the Likewise Security Authority in Likewise Open 5.4 through 6.1, and Likewise Enterprise 6.0, allows local users to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h4qp-6hw3-7qfv/GHSA-h4qp-6hw3-7qfv.json b/advisories/unreviewed/2022/05/GHSA-h4qp-6hw3-7qfv/GHSA-h4qp-6hw3-7qfv.json index ec3e02a9560..18e1ecf17b9 100644 --- a/advisories/unreviewed/2022/05/GHSA-h4qp-6hw3-7qfv/GHSA-h4qp-6hw3-7qfv.json +++ b/advisories/unreviewed/2022/05/GHSA-h4qp-6hw3-7qfv/GHSA-h4qp-6hw3-7qfv.json @@ -7,12 +7,8 @@ "CVE-2011-5089" ], "details": "Buffer overflow in the Security Login ActiveX controls in ICONICS GENESIS32 8.05, 9.0, 9.1, and 9.2 and BizViz 8.05, 9.0, 9.1, and 9.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h523-6rxq-c4r3/GHSA-h523-6rxq-c4r3.json b/advisories/unreviewed/2022/05/GHSA-h523-6rxq-c4r3/GHSA-h523-6rxq-c4r3.json index b7557b77729..bf3bcdca1fb 100644 --- a/advisories/unreviewed/2022/05/GHSA-h523-6rxq-c4r3/GHSA-h523-6rxq-c4r3.json +++ b/advisories/unreviewed/2022/05/GHSA-h523-6rxq-c4r3/GHSA-h523-6rxq-c4r3.json @@ -7,12 +7,8 @@ "CVE-2011-5090" ], "details": "GR Board (aka grboard) 1.8.6.5 Community Edition does not require authentication for certain database actions, which allows remote attackers to modify or delete data via a request to (1) mod_rewrite.php, (2) comment_write_ok.php, (3) poll/index.php, (4) update/index.php, (5) trackback.php, or (6) an arbitrary poll.php script under theme/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h52x-wxf4-c2h7/GHSA-h52x-wxf4-c2h7.json b/advisories/unreviewed/2022/05/GHSA-h52x-wxf4-c2h7/GHSA-h52x-wxf4-c2h7.json index 685c9eb15c0..aad51fcd75c 100644 --- a/advisories/unreviewed/2022/05/GHSA-h52x-wxf4-c2h7/GHSA-h52x-wxf4-c2h7.json +++ b/advisories/unreviewed/2022/05/GHSA-h52x-wxf4-c2h7/GHSA-h52x-wxf4-c2h7.json @@ -7,12 +7,8 @@ "CVE-2011-2080" ], "details": "Multiple SQL injection vulnerabilities in MediaCAST 8 and earlier allow remote attackers to execute arbitrary SQL commands via (1) a CP_ENLARGESTYLE cookie to the default URI under inventivex/managetraining/ or (2) unspecified input to authenticate_ad_setup_finished.cfm.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h58q-w36p-97xh/GHSA-h58q-w36p-97xh.json b/advisories/unreviewed/2022/05/GHSA-h58q-w36p-97xh/GHSA-h58q-w36p-97xh.json index 8da5cbb1129..c03ebb7a3d3 100644 --- a/advisories/unreviewed/2022/05/GHSA-h58q-w36p-97xh/GHSA-h58q-w36p-97xh.json +++ b/advisories/unreviewed/2022/05/GHSA-h58q-w36p-97xh/GHSA-h58q-w36p-97xh.json @@ -7,12 +7,8 @@ "CVE-2011-2888" ], "details": "IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application hang) via complex graphics in a presentation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h5fc-mxhf-5f7p/GHSA-h5fc-mxhf-5f7p.json b/advisories/unreviewed/2022/05/GHSA-h5fc-mxhf-5f7p/GHSA-h5fc-mxhf-5f7p.json index 90864dae0e5..cd874a22e8c 100644 --- a/advisories/unreviewed/2022/05/GHSA-h5fc-mxhf-5f7p/GHSA-h5fc-mxhf-5f7p.json +++ b/advisories/unreviewed/2022/05/GHSA-h5fc-mxhf-5f7p/GHSA-h5fc-mxhf-5f7p.json @@ -7,12 +7,8 @@ "CVE-2011-2660" ], "details": "The modify_resolvconf_suse script in the vpnc package before 0.5.1-55.10.1 in SUSE Linux Enterprise Desktop 11 SP1 might allow remote attackers to execute arbitrary commands via a crafted DNS domain name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h5rr-pcmx-r5vv/GHSA-h5rr-pcmx-r5vv.json b/advisories/unreviewed/2022/05/GHSA-h5rr-pcmx-r5vv/GHSA-h5rr-pcmx-r5vv.json index 4d93eb9f39f..10432f43d26 100644 --- a/advisories/unreviewed/2022/05/GHSA-h5rr-pcmx-r5vv/GHSA-h5rr-pcmx-r5vv.json +++ b/advisories/unreviewed/2022/05/GHSA-h5rr-pcmx-r5vv/GHSA-h5rr-pcmx-r5vv.json @@ -7,12 +7,8 @@ "CVE-2010-4917" ], "details": "SQL injection vulnerability in sources/search.php in A-Blog 2.0 allows remote attackers to execute arbitrary SQL commands via the words parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h67c-8mc7-vvqr/GHSA-h67c-8mc7-vvqr.json b/advisories/unreviewed/2022/05/GHSA-h67c-8mc7-vvqr/GHSA-h67c-8mc7-vvqr.json index 9da8cb4a19d..1611d69eee1 100644 --- a/advisories/unreviewed/2022/05/GHSA-h67c-8mc7-vvqr/GHSA-h67c-8mc7-vvqr.json +++ b/advisories/unreviewed/2022/05/GHSA-h67c-8mc7-vvqr/GHSA-h67c-8mc7-vvqr.json @@ -7,12 +7,8 @@ "CVE-2011-2747" ], "details": "Google Picasa before 3.6 Build 105.67 does not properly handle invalid properties in JPEG images, which allows remote attackers to execute arbitrary code via a crafted image file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h7qp-fq3x-p47w/GHSA-h7qp-fq3x-p47w.json b/advisories/unreviewed/2022/05/GHSA-h7qp-fq3x-p47w/GHSA-h7qp-fq3x-p47w.json index db68851ec97..69237d2e8e7 100644 --- a/advisories/unreviewed/2022/05/GHSA-h7qp-fq3x-p47w/GHSA-h7qp-fq3x-p47w.json +++ b/advisories/unreviewed/2022/05/GHSA-h7qp-fq3x-p47w/GHSA-h7qp-fq3x-p47w.json @@ -7,12 +7,8 @@ "CVE-2011-4874" ], "details": "Use-after-free vulnerability in MICROSYS PROMOTIC before 8.1.7 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (data corruption and application crash) via a crafted project (aka .pra) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h837-v94j-pr47/GHSA-h837-v94j-pr47.json b/advisories/unreviewed/2022/05/GHSA-h837-v94j-pr47/GHSA-h837-v94j-pr47.json index 359d8165f67..a17b5be3d31 100644 --- a/advisories/unreviewed/2022/05/GHSA-h837-v94j-pr47/GHSA-h837-v94j-pr47.json +++ b/advisories/unreviewed/2022/05/GHSA-h837-v94j-pr47/GHSA-h837-v94j-pr47.json @@ -7,12 +7,8 @@ "CVE-2011-3515" ], "details": "Unspecified vulnerability in the Oracle Solaris 10 and 11 Express allows local users to affect integrity and availability via unknown vectors related to Process File System (procfs).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h89v-3j3f-gx8h/GHSA-h89v-3j3f-gx8h.json b/advisories/unreviewed/2022/05/GHSA-h89v-3j3f-gx8h/GHSA-h89v-3j3f-gx8h.json index 371c311d62d..6bd27d9da89 100644 --- a/advisories/unreviewed/2022/05/GHSA-h89v-3j3f-gx8h/GHSA-h89v-3j3f-gx8h.json +++ b/advisories/unreviewed/2022/05/GHSA-h89v-3j3f-gx8h/GHSA-h89v-3j3f-gx8h.json @@ -7,12 +7,8 @@ "CVE-2011-5068" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in Support Incident Tracker (aka SiT!) 3.65 allow remote attackers to hijack the authentication of user for requests that delete a user via user_delete.php and other unspecified programs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h93v-gjvw-2j65/GHSA-h93v-gjvw-2j65.json b/advisories/unreviewed/2022/05/GHSA-h93v-gjvw-2j65/GHSA-h93v-gjvw-2j65.json index 8fba9f4adb0..1e0554570df 100644 --- a/advisories/unreviewed/2022/05/GHSA-h93v-gjvw-2j65/GHSA-h93v-gjvw-2j65.json +++ b/advisories/unreviewed/2022/05/GHSA-h93v-gjvw-2j65/GHSA-h93v-gjvw-2j65.json @@ -7,12 +7,8 @@ "CVE-2011-3435" ], "details": "Open Directory in Apple Mac OS X 10.7 before 10.7.2 allows local users to read the password data of arbitrary users via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h9cm-vvrp-mf5x/GHSA-h9cm-vvrp-mf5x.json b/advisories/unreviewed/2022/05/GHSA-h9cm-vvrp-mf5x/GHSA-h9cm-vvrp-mf5x.json index 62acff8ba15..8806b4a4a86 100644 --- a/advisories/unreviewed/2022/05/GHSA-h9cm-vvrp-mf5x/GHSA-h9cm-vvrp-mf5x.json +++ b/advisories/unreviewed/2022/05/GHSA-h9cm-vvrp-mf5x/GHSA-h9cm-vvrp-mf5x.json @@ -7,12 +7,8 @@ "CVE-2011-2976" ], "details": "Cross-site scripting (XSS) vulnerability in Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, and 3.4.x before 3.4.12 allows remote attackers to inject arbitrary web script or HTML via vectors involving a BUGLIST cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hc8g-chpw-24wx/GHSA-hc8g-chpw-24wx.json b/advisories/unreviewed/2022/05/GHSA-hc8g-chpw-24wx/GHSA-hc8g-chpw-24wx.json index 753c90f0484..02478bb3fe9 100644 --- a/advisories/unreviewed/2022/05/GHSA-hc8g-chpw-24wx/GHSA-hc8g-chpw-24wx.json +++ b/advisories/unreviewed/2022/05/GHSA-hc8g-chpw-24wx/GHSA-hc8g-chpw-24wx.json @@ -7,12 +7,8 @@ "CVE-2011-2964" ], "details": "foomaticrip.c in foomatic-rip in foomatic-filters in Foomatic 4.0.6 allows remote attackers to execute arbitrary code via a crafted *FoomaticRIPCommandLine field in a .ppd file, a different vulnerability than CVE-2011-2697.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hcgx-xc4m-9h7x/GHSA-hcgx-xc4m-9h7x.json b/advisories/unreviewed/2022/05/GHSA-hcgx-xc4m-9h7x/GHSA-hcgx-xc4m-9h7x.json index 0a722abe734..15566d2d561 100644 --- a/advisories/unreviewed/2022/05/GHSA-hcgx-xc4m-9h7x/GHSA-hcgx-xc4m-9h7x.json +++ b/advisories/unreviewed/2022/05/GHSA-hcgx-xc4m-9h7x/GHSA-hcgx-xc4m-9h7x.json @@ -7,12 +7,8 @@ "CVE-2011-4878" ], "details": "Directory traversal vulnerability in miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote attackers to read arbitrary files via a ..%5c (dot dot backslash) in a URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hgw4-7mc3-h74g/GHSA-hgw4-7mc3-h74g.json b/advisories/unreviewed/2022/05/GHSA-hgw4-7mc3-h74g/GHSA-hgw4-7mc3-h74g.json index 7abb41f7f28..9a1d05095f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-hgw4-7mc3-h74g/GHSA-hgw4-7mc3-h74g.json +++ b/advisories/unreviewed/2022/05/GHSA-hgw4-7mc3-h74g/GHSA-hgw4-7mc3-h74g.json @@ -7,12 +7,8 @@ "CVE-2011-3510" ], "details": "Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 11.1.1.3.0 and 11.1.1.5.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to BI Platform Security.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hgx9-75c7-chpv/GHSA-hgx9-75c7-chpv.json b/advisories/unreviewed/2022/05/GHSA-hgx9-75c7-chpv/GHSA-hgx9-75c7-chpv.json index 5afab026676..e9aed9af56e 100644 --- a/advisories/unreviewed/2022/05/GHSA-hgx9-75c7-chpv/GHSA-hgx9-75c7-chpv.json +++ b/advisories/unreviewed/2022/05/GHSA-hgx9-75c7-chpv/GHSA-hgx9-75c7-chpv.json @@ -7,12 +7,8 @@ "CVE-2011-5050" ], "details": "SQL injection vulnerability in corporate/Controller in Elitecore Technologies Cyberoam UTM before 10.01.2 build 059 allows remote authenticated administrators to execute arbitrary SQL commands via the tableid parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hj8q-w89q-qrx9/GHSA-hj8q-w89q-qrx9.json b/advisories/unreviewed/2022/05/GHSA-hj8q-w89q-qrx9/GHSA-hj8q-w89q-qrx9.json index d5999f6e2c8..beec5abb77c 100644 --- a/advisories/unreviewed/2022/05/GHSA-hj8q-w89q-qrx9/GHSA-hj8q-w89q-qrx9.json +++ b/advisories/unreviewed/2022/05/GHSA-hj8q-w89q-qrx9/GHSA-hj8q-w89q-qrx9.json @@ -7,12 +7,8 @@ "CVE-2011-2226" ], "details": "Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a pattern listing.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hjc8-mc2g-pvm8/GHSA-hjc8-mc2g-pvm8.json b/advisories/unreviewed/2022/05/GHSA-hjc8-mc2g-pvm8/GHSA-hjc8-mc2g-pvm8.json index 797924f2896..0a5deaee3cc 100644 --- a/advisories/unreviewed/2022/05/GHSA-hjc8-mc2g-pvm8/GHSA-hjc8-mc2g-pvm8.json +++ b/advisories/unreviewed/2022/05/GHSA-hjc8-mc2g-pvm8/GHSA-hjc8-mc2g-pvm8.json @@ -7,12 +7,8 @@ "CVE-2011-4405" ], "details": "The cupshelpers scripts in system-config-printer in Ubuntu 11.04 and 11.10, as used by the automatic printer driver download service, uses an \"insecure connection\" for queries to the OpenPrinting database, which allows remote attackers to execute arbitrary code via a man-in-the-middle (MITM) attack that modifies packages or repositories.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hm63-8hpc-wc5j/GHSA-hm63-8hpc-wc5j.json b/advisories/unreviewed/2022/05/GHSA-hm63-8hpc-wc5j/GHSA-hm63-8hpc-wc5j.json index ae5d762d44f..458dd602385 100644 --- a/advisories/unreviewed/2022/05/GHSA-hm63-8hpc-wc5j/GHSA-hm63-8hpc-wc5j.json +++ b/advisories/unreviewed/2022/05/GHSA-hm63-8hpc-wc5j/GHSA-hm63-8hpc-wc5j.json @@ -7,12 +7,8 @@ "CVE-2011-3981" ], "details": "PHP remote file inclusion vulnerability in actions.php in the Allwebmenus plugin 1.1.3 for WordPress allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hmhv-64cw-2g3m/GHSA-hmhv-64cw-2g3m.json b/advisories/unreviewed/2022/05/GHSA-hmhv-64cw-2g3m/GHSA-hmhv-64cw-2g3m.json index 9d23a778f43..0cdc3a93fc1 100644 --- a/advisories/unreviewed/2022/05/GHSA-hmhv-64cw-2g3m/GHSA-hmhv-64cw-2g3m.json +++ b/advisories/unreviewed/2022/05/GHSA-hmhv-64cw-2g3m/GHSA-hmhv-64cw-2g3m.json @@ -7,12 +7,8 @@ "CVE-2011-5060" ], "details": "The par_mktmpdir function in the PAR module before 1.003 for Perl creates temporary files in a directory with a predictable name without verifying ownership and permissions of this directory, which allows local users to overwrite files when another user extracts a PAR packed program, a different vulnerability in a different package than CVE-2011-4114.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hmq9-wmx8-f973/GHSA-hmq9-wmx8-f973.json b/advisories/unreviewed/2022/05/GHSA-hmq9-wmx8-f973/GHSA-hmq9-wmx8-f973.json index 84c502348ba..035fe353ea1 100644 --- a/advisories/unreviewed/2022/05/GHSA-hmq9-wmx8-f973/GHSA-hmq9-wmx8-f973.json +++ b/advisories/unreviewed/2022/05/GHSA-hmq9-wmx8-f973/GHSA-hmq9-wmx8-f973.json @@ -7,12 +7,8 @@ "CVE-2011-5081" ], "details": "Cross-site scripting (XSS) vulnerability in RestoreFile.pm in BackupPC 3.1.0, 3.2.1, and possibly other earlier versions allows remote attackers to inject arbitrary web script or HTML via the share parameter in a RestoreFile action to index.cgi.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hp65-4pq5-qqw7/GHSA-hp65-4pq5-qqw7.json b/advisories/unreviewed/2022/05/GHSA-hp65-4pq5-qqw7/GHSA-hp65-4pq5-qqw7.json index dfd6701dcab..e83b42c2522 100644 --- a/advisories/unreviewed/2022/05/GHSA-hp65-4pq5-qqw7/GHSA-hp65-4pq5-qqw7.json +++ b/advisories/unreviewed/2022/05/GHSA-hp65-4pq5-qqw7/GHSA-hp65-4pq5-qqw7.json @@ -7,12 +7,8 @@ "CVE-2011-4566" ], "details": "Integer overflow in the exif_process_IFD_TAG function in exif.c in the exif extension in PHP 5.4.0beta2 on 32-bit platforms allows remote attackers to read the contents of arbitrary memory locations or cause a denial of service via a crafted offset_val value in an EXIF header in a JPEG file, a different vulnerability than CVE-2011-0708.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hpw2-4w33-vq5v/GHSA-hpw2-4w33-vq5v.json b/advisories/unreviewed/2022/05/GHSA-hpw2-4w33-vq5v/GHSA-hpw2-4w33-vq5v.json index 24a77e59082..5e25598aaf5 100644 --- a/advisories/unreviewed/2022/05/GHSA-hpw2-4w33-vq5v/GHSA-hpw2-4w33-vq5v.json +++ b/advisories/unreviewed/2022/05/GHSA-hpw2-4w33-vq5v/GHSA-hpw2-4w33-vq5v.json @@ -7,12 +7,8 @@ "CVE-2010-4957" ], "details": "SQL injection vulnerability in the Questionnaire (ke_questionnaire) extension before 2.2.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hq5w-xh8r-j586/GHSA-hq5w-xh8r-j586.json b/advisories/unreviewed/2022/05/GHSA-hq5w-xh8r-j586/GHSA-hq5w-xh8r-j586.json index e4b2d1ecc1c..60f54f76971 100644 --- a/advisories/unreviewed/2022/05/GHSA-hq5w-xh8r-j586/GHSA-hq5w-xh8r-j586.json +++ b/advisories/unreviewed/2022/05/GHSA-hq5w-xh8r-j586/GHSA-hq5w-xh8r-j586.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hr33-mrq4-qq9h/GHSA-hr33-mrq4-qq9h.json b/advisories/unreviewed/2022/05/GHSA-hr33-mrq4-qq9h/GHSA-hr33-mrq4-qq9h.json index 16208b1ffd6..8fa8e3a6d3c 100644 --- a/advisories/unreviewed/2022/05/GHSA-hr33-mrq4-qq9h/GHSA-hr33-mrq4-qq9h.json +++ b/advisories/unreviewed/2022/05/GHSA-hr33-mrq4-qq9h/GHSA-hr33-mrq4-qq9h.json @@ -7,12 +7,8 @@ "CVE-2011-2225" ], "details": "Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to have an unknown impact via a crafted directory pathname that is inserted into config.sh.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hr7h-rppp-w8x4/GHSA-hr7h-rppp-w8x4.json b/advisories/unreviewed/2022/05/GHSA-hr7h-rppp-w8x4/GHSA-hr7h-rppp-w8x4.json index 992bbdf1661..9acd4b9c4ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-hr7h-rppp-w8x4/GHSA-hr7h-rppp-w8x4.json +++ b/advisories/unreviewed/2022/05/GHSA-hr7h-rppp-w8x4/GHSA-hr7h-rppp-w8x4.json @@ -7,12 +7,8 @@ "CVE-2011-4357" ], "details": "Format string vulnerability in the p_cgi_error function in python/neo_cgi.c in the Python CGI Kit (neo_cgi) module for Clearsilver 0.10.5 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers that are not properly handled when creating CGI error messages using the cgi_error API function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hrmj-v5cr-c93q/GHSA-hrmj-v5cr-c93q.json b/advisories/unreviewed/2022/05/GHSA-hrmj-v5cr-c93q/GHSA-hrmj-v5cr-c93q.json index f642f9c91e3..9b72656a24e 100644 --- a/advisories/unreviewed/2022/05/GHSA-hrmj-v5cr-c93q/GHSA-hrmj-v5cr-c93q.json +++ b/advisories/unreviewed/2022/05/GHSA-hrmj-v5cr-c93q/GHSA-hrmj-v5cr-c93q.json @@ -7,12 +7,8 @@ "CVE-2010-5061" ], "details": "SQL injection vulnerability in index.php in RSStatic allows remote attackers to execute arbitrary SQL commands via the maxarticles parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hv97-c4vf-f878/GHSA-hv97-c4vf-f878.json b/advisories/unreviewed/2022/05/GHSA-hv97-c4vf-f878/GHSA-hv97-c4vf-f878.json index d261d3d2127..7e2d01eb9a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-hv97-c4vf-f878/GHSA-hv97-c4vf-f878.json +++ b/advisories/unreviewed/2022/05/GHSA-hv97-c4vf-f878/GHSA-hv97-c4vf-f878.json @@ -7,12 +7,8 @@ "CVE-2010-4952" ], "details": "SQL injection vulnerability in the FE user statistic (festat) extension before 0.2.4 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hvvp-q39h-2h56/GHSA-hvvp-q39h-2h56.json b/advisories/unreviewed/2022/05/GHSA-hvvp-q39h-2h56/GHSA-hvvp-q39h-2h56.json index 5bfb7fbce70..36a73ea46ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-hvvp-q39h-2h56/GHSA-hvvp-q39h-2h56.json +++ b/advisories/unreviewed/2022/05/GHSA-hvvp-q39h-2h56/GHSA-hvvp-q39h-2h56.json @@ -7,12 +7,8 @@ "CVE-2011-3122" ], "details": "Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to \"Media security.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hw43-vchf-c8qg/GHSA-hw43-vchf-c8qg.json b/advisories/unreviewed/2022/05/GHSA-hw43-vchf-c8qg/GHSA-hw43-vchf-c8qg.json index 35060f191ab..9da473ad4df 100644 --- a/advisories/unreviewed/2022/05/GHSA-hw43-vchf-c8qg/GHSA-hw43-vchf-c8qg.json +++ b/advisories/unreviewed/2022/05/GHSA-hw43-vchf-c8qg/GHSA-hw43-vchf-c8qg.json @@ -7,12 +7,8 @@ "CVE-2011-2549" ], "details": "Unspecified vulnerability in Cisco IOS XR 4.1.x before 4.1.1 on Cisco Aggregation Services Routers (ASR) 9000 series devices allows remote attackers to cause a denial of service (line-card reload) via an IPv4 packet, aka Bug ID CSCtr26695.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hwcm-xf66-v6mm/GHSA-hwcm-xf66-v6mm.json b/advisories/unreviewed/2022/05/GHSA-hwcm-xf66-v6mm/GHSA-hwcm-xf66-v6mm.json index 3a136af4510..d7bdd224f99 100644 --- a/advisories/unreviewed/2022/05/GHSA-hwcm-xf66-v6mm/GHSA-hwcm-xf66-v6mm.json +++ b/advisories/unreviewed/2022/05/GHSA-hwcm-xf66-v6mm/GHSA-hwcm-xf66-v6mm.json @@ -7,12 +7,8 @@ "CVE-2011-3615" ], "details": "Multiple SQL injection vulnerabilities in Simple Machines Forum (SMF) before 1.1.15 and 2.x before 2.0.1 allow remote attackers to execute arbitrary SQL commands via vectors involving a (1) HTML entity or (2) display name. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hwvw-6p8w-r2wh/GHSA-hwvw-6p8w-r2wh.json b/advisories/unreviewed/2022/05/GHSA-hwvw-6p8w-r2wh/GHSA-hwvw-6p8w-r2wh.json index 6c21a86367c..643aeeb1d0a 100644 --- a/advisories/unreviewed/2022/05/GHSA-hwvw-6p8w-r2wh/GHSA-hwvw-6p8w-r2wh.json +++ b/advisories/unreviewed/2022/05/GHSA-hwvw-6p8w-r2wh/GHSA-hwvw-6p8w-r2wh.json @@ -7,12 +7,8 @@ "CVE-2010-5028" ], "details": "SQL injection vulnerability in the JExtensions JE Job (com_jejob) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j234-73mf-fxmv/GHSA-j234-73mf-fxmv.json b/advisories/unreviewed/2022/05/GHSA-j234-73mf-fxmv/GHSA-j234-73mf-fxmv.json index 762b0c61c7e..a5f6b83414d 100644 --- a/advisories/unreviewed/2022/05/GHSA-j234-73mf-fxmv/GHSA-j234-73mf-fxmv.json +++ b/advisories/unreviewed/2022/05/GHSA-j234-73mf-fxmv/GHSA-j234-73mf-fxmv.json @@ -7,12 +7,8 @@ "CVE-2011-3667" ], "details": "The User.offer_account_by_email WebService method in Bugzilla 2.x and 3.x before 3.4.13, 3.5.x and 3.6.x before 3.6.7, 3.7.x and 4.0.x before 4.0.3, and 4.1.x through 4.1.3, when createemailregexp is not empty, does not properly handle user_can_create_account settings, which allows remote attackers to create user accounts by leveraging a token contained in an e-mail message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j3c9-4x56-w89w/GHSA-j3c9-4x56-w89w.json b/advisories/unreviewed/2022/05/GHSA-j3c9-4x56-w89w/GHSA-j3c9-4x56-w89w.json index e3d837636d5..4c56c729ef4 100644 --- a/advisories/unreviewed/2022/05/GHSA-j3c9-4x56-w89w/GHSA-j3c9-4x56-w89w.json +++ b/advisories/unreviewed/2022/05/GHSA-j3c9-4x56-w89w/GHSA-j3c9-4x56-w89w.json @@ -7,12 +7,8 @@ "CVE-2010-5012" ], "details": "SQL injection vulnerability in new.php in DaLogin 2.2 and 2.2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j3h7-pmwf-rp9w/GHSA-j3h7-pmwf-rp9w.json b/advisories/unreviewed/2022/05/GHSA-j3h7-pmwf-rp9w/GHSA-j3h7-pmwf-rp9w.json index 46716c7837f..cf548b22dca 100644 --- a/advisories/unreviewed/2022/05/GHSA-j3h7-pmwf-rp9w/GHSA-j3h7-pmwf-rp9w.json +++ b/advisories/unreviewed/2022/05/GHSA-j3h7-pmwf-rp9w/GHSA-j3h7-pmwf-rp9w.json @@ -7,12 +7,8 @@ "CVE-2011-2403" ], "details": "SQL injection vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j4r8-g8cx-ccpx/GHSA-j4r8-g8cx-ccpx.json b/advisories/unreviewed/2022/05/GHSA-j4r8-g8cx-ccpx/GHSA-j4r8-g8cx-ccpx.json index 24d7b901a33..ef6270fc3f3 100644 --- a/advisories/unreviewed/2022/05/GHSA-j4r8-g8cx-ccpx/GHSA-j4r8-g8cx-ccpx.json +++ b/advisories/unreviewed/2022/05/GHSA-j4r8-g8cx-ccpx/GHSA-j4r8-g8cx-ccpx.json @@ -7,12 +7,8 @@ "CVE-2010-4866" ], "details": "SQL injection vulnerability in index.php in Chipmunk Board 1.3 allows remote attackers to execute arbitrary SQL commands via the forumID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j5gx-c56p-h6vv/GHSA-j5gx-c56p-h6vv.json b/advisories/unreviewed/2022/05/GHSA-j5gx-c56p-h6vv/GHSA-j5gx-c56p-h6vv.json index 2ac2544e498..ada5e592a85 100644 --- a/advisories/unreviewed/2022/05/GHSA-j5gx-c56p-h6vv/GHSA-j5gx-c56p-h6vv.json +++ b/advisories/unreviewed/2022/05/GHSA-j5gx-c56p-h6vv/GHSA-j5gx-c56p-h6vv.json @@ -7,12 +7,8 @@ "CVE-2011-2476" ], "details": "Cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.5.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2010-4667.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j68c-36rf-74mv/GHSA-j68c-36rf-74mv.json b/advisories/unreviewed/2022/05/GHSA-j68c-36rf-74mv/GHSA-j68c-36rf-74mv.json index 59e2c09b136..5ee723ef7c1 100644 --- a/advisories/unreviewed/2022/05/GHSA-j68c-36rf-74mv/GHSA-j68c-36rf-74mv.json +++ b/advisories/unreviewed/2022/05/GHSA-j68c-36rf-74mv/GHSA-j68c-36rf-74mv.json @@ -7,12 +7,8 @@ "CVE-2011-3539" ], "details": "Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability via unknown vectors related to Zones.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j765-7vcf-8h99/GHSA-j765-7vcf-8h99.json b/advisories/unreviewed/2022/05/GHSA-j765-7vcf-8h99/GHSA-j765-7vcf-8h99.json index 702bdbb9908..545c67d47ea 100644 --- a/advisories/unreviewed/2022/05/GHSA-j765-7vcf-8h99/GHSA-j765-7vcf-8h99.json +++ b/advisories/unreviewed/2022/05/GHSA-j765-7vcf-8h99/GHSA-j765-7vcf-8h99.json @@ -7,12 +7,8 @@ "CVE-2011-4783" ], "details": "The IDAPython plugin before 1.5.2.3 in IDA Pro allows user-assisted remote attackers to execute arbitrary code via a crafted IDB file, related to improper handling of certain swig_runtime_data files in the current working directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j766-66hv-6p2p/GHSA-j766-66hv-6p2p.json b/advisories/unreviewed/2022/05/GHSA-j766-66hv-6p2p/GHSA-j766-66hv-6p2p.json index b4f3ce3e14c..725b8d0dc63 100644 --- a/advisories/unreviewed/2022/05/GHSA-j766-66hv-6p2p/GHSA-j766-66hv-6p2p.json +++ b/advisories/unreviewed/2022/05/GHSA-j766-66hv-6p2p/GHSA-j766-66hv-6p2p.json @@ -7,12 +7,8 @@ "CVE-2011-2153" ], "details": "Login.aspx in the SmarterTools SmarterStats 6.0 web server supports URLs containing txtUser and txtPass parameters in the query string, which makes it easier for context-dependent attackers to discover credentials by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, related to a \"cross-domain Referer leakage\" issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j76m-4qgg-283p/GHSA-j76m-4qgg-283p.json b/advisories/unreviewed/2022/05/GHSA-j76m-4qgg-283p/GHSA-j76m-4qgg-283p.json index 5ce4cf87902..c2ea8da9659 100644 --- a/advisories/unreviewed/2022/05/GHSA-j76m-4qgg-283p/GHSA-j76m-4qgg-283p.json +++ b/advisories/unreviewed/2022/05/GHSA-j76m-4qgg-283p/GHSA-j76m-4qgg-283p.json @@ -7,12 +7,8 @@ "CVE-2011-4890" ], "details": "The server in IBM solidDB 6.5 before FP9 and 7.0 before FP1 allows remote authenticated users to cause a denial of service (daemon crash) via a SELECT statement with a ROWNUM condition involving a subquery.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j7qf-p484-q2q5/GHSA-j7qf-p484-q2q5.json b/advisories/unreviewed/2022/05/GHSA-j7qf-p484-q2q5/GHSA-j7qf-p484-q2q5.json index d46c5827a4f..ae7fd0249a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-j7qf-p484-q2q5/GHSA-j7qf-p484-q2q5.json +++ b/advisories/unreviewed/2022/05/GHSA-j7qf-p484-q2q5/GHSA-j7qf-p484-q2q5.json @@ -7,12 +7,8 @@ "CVE-2011-3773" ], "details": "PHPDevShell 3.0.0-Beta-4b allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by gzip.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j835-2v53-qqj2/GHSA-j835-2v53-qqj2.json b/advisories/unreviewed/2022/05/GHSA-j835-2v53-qqj2/GHSA-j835-2v53-qqj2.json index 5d547a593e5..887b76522bb 100644 --- a/advisories/unreviewed/2022/05/GHSA-j835-2v53-qqj2/GHSA-j835-2v53-qqj2.json +++ b/advisories/unreviewed/2022/05/GHSA-j835-2v53-qqj2/GHSA-j835-2v53-qqj2.json @@ -7,12 +7,8 @@ "CVE-2010-4984" ], "details": "SQL injection vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to execute arbitrary SQL commands via vectors involving the \"Enter Reference Number Below\" text box.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j9rr-f82w-2hc8/GHSA-j9rr-f82w-2hc8.json b/advisories/unreviewed/2022/05/GHSA-j9rr-f82w-2hc8/GHSA-j9rr-f82w-2hc8.json index c4630483994..cce3bee7317 100644 --- a/advisories/unreviewed/2022/05/GHSA-j9rr-f82w-2hc8/GHSA-j9rr-f82w-2hc8.json +++ b/advisories/unreviewed/2022/05/GHSA-j9rr-f82w-2hc8/GHSA-j9rr-f82w-2hc8.json @@ -7,12 +7,8 @@ "CVE-2011-3014" ], "details": "The Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 does not properly restrict caching of HTTPS responses, which makes it easier for remote attackers to obtain sensitive information by leveraging an unattended workstation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jcjh-5f4j-hpqj/GHSA-jcjh-5f4j-hpqj.json b/advisories/unreviewed/2022/05/GHSA-jcjh-5f4j-hpqj/GHSA-jcjh-5f4j-hpqj.json index 3181cb6a3b9..ba5f101c7f8 100644 --- a/advisories/unreviewed/2022/05/GHSA-jcjh-5f4j-hpqj/GHSA-jcjh-5f4j-hpqj.json +++ b/advisories/unreviewed/2022/05/GHSA-jcjh-5f4j-hpqj/GHSA-jcjh-5f4j-hpqj.json @@ -7,12 +7,8 @@ "CVE-2011-5091" ], "details": "Multiple SQL injection vulnerabilities in GR Board (aka grboard) 1.8.6.5 Community Edition allow remote attackers to execute arbitrary SQL commands via the (1) tableType or (2) blindTarget parameter to view.php, (3) the delTargets[0] parameter to view_memo.php, or (4) the isReported parameter to write_ok.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jf47-vrx5-85qc/GHSA-jf47-vrx5-85qc.json b/advisories/unreviewed/2022/05/GHSA-jf47-vrx5-85qc/GHSA-jf47-vrx5-85qc.json index 279100c3524..7cdeeae7257 100644 --- a/advisories/unreviewed/2022/05/GHSA-jf47-vrx5-85qc/GHSA-jf47-vrx5-85qc.json +++ b/advisories/unreviewed/2022/05/GHSA-jf47-vrx5-85qc/GHSA-jf47-vrx5-85qc.json @@ -7,12 +7,8 @@ "CVE-2011-3422" ], "details": "The Keychain implementation in Apple Mac OS X 10.6.8 and earlier does not properly handle an untrusted attribute of a Certification Authority certificate, which makes it easier for man-in-the-middle attackers to spoof arbitrary SSL servers via an Extended Validation certificate, as demonstrated by https access with Safari.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jf83-vxqj-h3p2/GHSA-jf83-vxqj-h3p2.json b/advisories/unreviewed/2022/05/GHSA-jf83-vxqj-h3p2/GHSA-jf83-vxqj-h3p2.json index 2ec0ae72c5f..b154723c7b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-jf83-vxqj-h3p2/GHSA-jf83-vxqj-h3p2.json +++ b/advisories/unreviewed/2022/05/GHSA-jf83-vxqj-h3p2/GHSA-jf83-vxqj-h3p2.json @@ -7,12 +7,8 @@ "CVE-2010-4821" ], "details": "Cross-site scripting (XSS) vulnerability in phpMyFAQ before 2.6.9 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jf9v-x358-cxmx/GHSA-jf9v-x358-cxmx.json b/advisories/unreviewed/2022/05/GHSA-jf9v-x358-cxmx/GHSA-jf9v-x358-cxmx.json index 16c9c605891..53d6d43cc10 100644 --- a/advisories/unreviewed/2022/05/GHSA-jf9v-x358-cxmx/GHSA-jf9v-x358-cxmx.json +++ b/advisories/unreviewed/2022/05/GHSA-jf9v-x358-cxmx/GHSA-jf9v-x358-cxmx.json @@ -7,12 +7,8 @@ "CVE-2011-2962" ], "details": "Multiple stack-based buffer overflows in Invensys Wonderware Information Server 3.1, 4.0, and 4.0 SP1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via two unspecified ActiveX controls.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jhv6-4348-qhjg/GHSA-jhv6-4348-qhjg.json b/advisories/unreviewed/2022/05/GHSA-jhv6-4348-qhjg/GHSA-jhv6-4348-qhjg.json index e035577d4e4..949fd9011e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-jhv6-4348-qhjg/GHSA-jhv6-4348-qhjg.json +++ b/advisories/unreviewed/2022/05/GHSA-jhv6-4348-qhjg/GHSA-jhv6-4348-qhjg.json @@ -7,12 +7,8 @@ "CVE-2011-3512" ], "details": "Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.1.0.5, 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jmhf-pc34-9xh7/GHSA-jmhf-pc34-9xh7.json b/advisories/unreviewed/2022/05/GHSA-jmhf-pc34-9xh7/GHSA-jmhf-pc34-9xh7.json index e501eea7d90..3ca431d20cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmhf-pc34-9xh7/GHSA-jmhf-pc34-9xh7.json +++ b/advisories/unreviewed/2022/05/GHSA-jmhf-pc34-9xh7/GHSA-jmhf-pc34-9xh7.json @@ -7,12 +7,8 @@ "CVE-2010-5045" ], "details": "Cross-site scripting (XSS) vulnerability in poll/default.asp in Smart ASP Survey allows remote attackers to inject arbitrary web script or HTML via the catid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jp3v-q9r4-cpq5/GHSA-jp3v-q9r4-cpq5.json b/advisories/unreviewed/2022/05/GHSA-jp3v-q9r4-cpq5/GHSA-jp3v-q9r4-cpq5.json index 90e4c5889cf..1a74af1e82a 100644 --- a/advisories/unreviewed/2022/05/GHSA-jp3v-q9r4-cpq5/GHSA-jp3v-q9r4-cpq5.json +++ b/advisories/unreviewed/2022/05/GHSA-jp3v-q9r4-cpq5/GHSA-jp3v-q9r4-cpq5.json @@ -7,12 +7,8 @@ "CVE-2011-2608" ], "details": "ovbbccb.exe 6.20.50.0 and other versions in HP OpenView Performance Agent 4.70 and 5.0; and Operations Agent 11.0, 8.60.005, 8.60.006, 8.60.007, 8.60.008, 8.60.501, and 8.53; allows remote attackers to delete arbitrary files via a full pathname in the File field in a Register command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jq89-m7mr-7xm2/GHSA-jq89-m7mr-7xm2.json b/advisories/unreviewed/2022/05/GHSA-jq89-m7mr-7xm2/GHSA-jq89-m7mr-7xm2.json index e753b76b215..3da7536727a 100644 --- a/advisories/unreviewed/2022/05/GHSA-jq89-m7mr-7xm2/GHSA-jq89-m7mr-7xm2.json +++ b/advisories/unreviewed/2022/05/GHSA-jq89-m7mr-7xm2/GHSA-jq89-m7mr-7xm2.json @@ -7,12 +7,8 @@ "CVE-2011-2547" ], "details": "The web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote authenticated users to execute arbitrary commands via crafted parameters to web forms, aka Bug ID CSCtq65681.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jqc7-jcm9-pmcf/GHSA-jqc7-jcm9-pmcf.json b/advisories/unreviewed/2022/05/GHSA-jqc7-jcm9-pmcf/GHSA-jqc7-jcm9-pmcf.json index c57c5dcbef1..9cf36849495 100644 --- a/advisories/unreviewed/2022/05/GHSA-jqc7-jcm9-pmcf/GHSA-jqc7-jcm9-pmcf.json +++ b/advisories/unreviewed/2022/05/GHSA-jqc7-jcm9-pmcf/GHSA-jqc7-jcm9-pmcf.json @@ -7,12 +7,8 @@ "CVE-2010-5041" ], "details": "SQL injection vulnerability in index.php in the NP_Gallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary SQL commands via the id parameter in a plugin action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jrf4-678x-vmh7/GHSA-jrf4-678x-vmh7.json b/advisories/unreviewed/2022/05/GHSA-jrf4-678x-vmh7/GHSA-jrf4-678x-vmh7.json index 00e56abd8b0..a12ddcaaa35 100644 --- a/advisories/unreviewed/2022/05/GHSA-jrf4-678x-vmh7/GHSA-jrf4-678x-vmh7.json +++ b/advisories/unreviewed/2022/05/GHSA-jrf4-678x-vmh7/GHSA-jrf4-678x-vmh7.json @@ -7,12 +7,8 @@ "CVE-2011-2677" ], "details": "Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information (time card and attendance) via unspecified vectors related to manipulation of a URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jrjx-qcx7-3rxj/GHSA-jrjx-qcx7-3rxj.json b/advisories/unreviewed/2022/05/GHSA-jrjx-qcx7-3rxj/GHSA-jrjx-qcx7-3rxj.json index bfc67d341b8..7a1554edeb7 100644 --- a/advisories/unreviewed/2022/05/GHSA-jrjx-qcx7-3rxj/GHSA-jrjx-qcx7-3rxj.json +++ b/advisories/unreviewed/2022/05/GHSA-jrjx-qcx7-3rxj/GHSA-jrjx-qcx7-3rxj.json @@ -7,12 +7,8 @@ "CVE-2010-4811" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in ajaxmember.php in 6kbbs 8.0 build 20100901 allow remote attackers to inject arbitrary web script or HTML via the (1) user[msn], (2) user[email], and (3) user[phone] parameters in a modifyDetails action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jvj8-j2xp-3994/GHSA-jvj8-j2xp-3994.json b/advisories/unreviewed/2022/05/GHSA-jvj8-j2xp-3994/GHSA-jvj8-j2xp-3994.json index 8044cdf0b5d..7c4d87b175c 100644 --- a/advisories/unreviewed/2022/05/GHSA-jvj8-j2xp-3994/GHSA-jvj8-j2xp-3994.json +++ b/advisories/unreviewed/2022/05/GHSA-jvj8-j2xp-3994/GHSA-jvj8-j2xp-3994.json @@ -7,12 +7,8 @@ "CVE-2011-3988" ], "details": "SQL injection vulnerability in data/class/SC_Query.php in EC-CUBE 2.11.0 through 2.11.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jvp9-2x6w-jpq3/GHSA-jvp9-2x6w-jpq3.json b/advisories/unreviewed/2022/05/GHSA-jvp9-2x6w-jpq3/GHSA-jvp9-2x6w-jpq3.json index 7e52f703bfa..67767c1e656 100644 --- a/advisories/unreviewed/2022/05/GHSA-jvp9-2x6w-jpq3/GHSA-jvp9-2x6w-jpq3.json +++ b/advisories/unreviewed/2022/05/GHSA-jvp9-2x6w-jpq3/GHSA-jvp9-2x6w-jpq3.json @@ -7,12 +7,8 @@ "CVE-2011-2471" ], "details": "utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to gain privileges via shell metacharacters in the (1) --vmlinux, (2) --session-dir, or (3) --xen argument, related to the daemonrc file and the do_save_setup and do_load_setup functions, a different vulnerability than CVE-2011-1760.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jwgg-c32x-8m3w/GHSA-jwgg-c32x-8m3w.json b/advisories/unreviewed/2022/05/GHSA-jwgg-c32x-8m3w/GHSA-jwgg-c32x-8m3w.json index 464d5ef4fbd..58dd2083459 100644 --- a/advisories/unreviewed/2022/05/GHSA-jwgg-c32x-8m3w/GHSA-jwgg-c32x-8m3w.json +++ b/advisories/unreviewed/2022/05/GHSA-jwgg-c32x-8m3w/GHSA-jwgg-c32x-8m3w.json @@ -7,12 +7,8 @@ "CVE-2010-5021" ], "details": "SQL injection vulnerability in view_group.asp in Digital Interchange Document Library 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intGroupID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jwpc-g4rj-79q4/GHSA-jwpc-g4rj-79q4.json b/advisories/unreviewed/2022/05/GHSA-jwpc-g4rj-79q4/GHSA-jwpc-g4rj-79q4.json index ec41e5a5ecc..a94431c7566 100644 --- a/advisories/unreviewed/2022/05/GHSA-jwpc-g4rj-79q4/GHSA-jwpc-g4rj-79q4.json +++ b/advisories/unreviewed/2022/05/GHSA-jwpc-g4rj-79q4/GHSA-jwpc-g4rj-79q4.json @@ -7,12 +7,8 @@ "CVE-2010-5013" ], "details": "SQL injection vulnerability in listing_detail.asp in Mckenzie Creations Virtual Real Estate Manager (VRM) 3.5 allows remote attackers to execute arbitrary SQL commands via the Lid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jwph-gm7j-wqp4/GHSA-jwph-gm7j-wqp4.json b/advisories/unreviewed/2022/05/GHSA-jwph-gm7j-wqp4/GHSA-jwph-gm7j-wqp4.json index d6197139237..f473d22ff46 100644 --- a/advisories/unreviewed/2022/05/GHSA-jwph-gm7j-wqp4/GHSA-jwph-gm7j-wqp4.json +++ b/advisories/unreviewed/2022/05/GHSA-jwph-gm7j-wqp4/GHSA-jwph-gm7j-wqp4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jwqc-q9g4-pm4w/GHSA-jwqc-q9g4-pm4w.json b/advisories/unreviewed/2022/05/GHSA-jwqc-q9g4-pm4w/GHSA-jwqc-q9g4-pm4w.json index 7aa8fc1693a..38d1bb7567e 100644 --- a/advisories/unreviewed/2022/05/GHSA-jwqc-q9g4-pm4w/GHSA-jwqc-q9g4-pm4w.json +++ b/advisories/unreviewed/2022/05/GHSA-jwqc-q9g4-pm4w/GHSA-jwqc-q9g4-pm4w.json @@ -7,12 +7,8 @@ "CVE-2011-4761" ], "details": "Parallels Plesk Small Business Panel 10.2.0 omits the Content-Type header's charset parameter for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving domains/sitebuilder_edit.php and certain other files. NOTE: it is possible that only clients, not the SmarterStats product, could be affected by this issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jxp6-mf7j-ffh8/GHSA-jxp6-mf7j-ffh8.json b/advisories/unreviewed/2022/05/GHSA-jxp6-mf7j-ffh8/GHSA-jxp6-mf7j-ffh8.json index 78f95a46559..9dd24438c90 100644 --- a/advisories/unreviewed/2022/05/GHSA-jxp6-mf7j-ffh8/GHSA-jxp6-mf7j-ffh8.json +++ b/advisories/unreviewed/2022/05/GHSA-jxp6-mf7j-ffh8/GHSA-jxp6-mf7j-ffh8.json @@ -7,12 +7,8 @@ "CVE-2011-4755" ], "details": "Parallels Plesk Small Business Panel 10.2.0 does not properly validate string data that is intended for storage in an XML document, which allows remote attackers to cause a denial of service (parsing error) or possibly have unspecified other impact via a crafted cookie, as demonstrated by cookies to client@1/domain@1/hosting/file-manager/ and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m28h-wwg8-644c/GHSA-m28h-wwg8-644c.json b/advisories/unreviewed/2022/05/GHSA-m28h-wwg8-644c/GHSA-m28h-wwg8-644c.json index e1908fe7fd8..d7d1fd3f881 100644 --- a/advisories/unreviewed/2022/05/GHSA-m28h-wwg8-644c/GHSA-m28h-wwg8-644c.json +++ b/advisories/unreviewed/2022/05/GHSA-m28h-wwg8-644c/GHSA-m28h-wwg8-644c.json @@ -7,12 +7,8 @@ "CVE-2011-4879" ], "details": "miniweb.exe in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime does not properly handle URIs beginning with a 0xfa character, which allows remote attackers to read data from arbitrary memory locations or cause a denial of service (application crash) via a crafted POST request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m4m4-22fc-qh4q/GHSA-m4m4-22fc-qh4q.json b/advisories/unreviewed/2022/05/GHSA-m4m4-22fc-qh4q/GHSA-m4m4-22fc-qh4q.json index 4eebae511a9..84656c03c20 100644 --- a/advisories/unreviewed/2022/05/GHSA-m4m4-22fc-qh4q/GHSA-m4m4-22fc-qh4q.json +++ b/advisories/unreviewed/2022/05/GHSA-m4m4-22fc-qh4q/GHSA-m4m4-22fc-qh4q.json @@ -7,12 +7,8 @@ "CVE-2011-3837" ], "details": "Directory traversal vulnerability in blog_system/data_functions.php in Wuzly 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the preview parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m545-63mf-qh6w/GHSA-m545-63mf-qh6w.json b/advisories/unreviewed/2022/05/GHSA-m545-63mf-qh6w/GHSA-m545-63mf-qh6w.json index 927d7fcd330..65edd0cf28c 100644 --- a/advisories/unreviewed/2022/05/GHSA-m545-63mf-qh6w/GHSA-m545-63mf-qh6w.json +++ b/advisories/unreviewed/2022/05/GHSA-m545-63mf-qh6w/GHSA-m545-63mf-qh6w.json @@ -7,12 +7,8 @@ "CVE-2011-2473" ], "details": "The do_dump_data function in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to create or overwrite arbitrary files via a crafted --session-dir argument in conjunction with a symlink attack on the opd_pipe file, a different vulnerability than CVE-2011-1760.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m54f-967g-f9qc/GHSA-m54f-967g-f9qc.json b/advisories/unreviewed/2022/05/GHSA-m54f-967g-f9qc/GHSA-m54f-967g-f9qc.json index f33b6b4697f..1c4a7fe0b1b 100644 --- a/advisories/unreviewed/2022/05/GHSA-m54f-967g-f9qc/GHSA-m54f-967g-f9qc.json +++ b/advisories/unreviewed/2022/05/GHSA-m54f-967g-f9qc/GHSA-m54f-967g-f9qc.json @@ -7,12 +7,8 @@ "CVE-2011-3527" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Candidate Gateway.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m5hx-xvhh-69rp/GHSA-m5hx-xvhh-69rp.json b/advisories/unreviewed/2022/05/GHSA-m5hx-xvhh-69rp/GHSA-m5hx-xvhh-69rp.json index 62a94c19222..3dae82eaf49 100644 --- a/advisories/unreviewed/2022/05/GHSA-m5hx-xvhh-69rp/GHSA-m5hx-xvhh-69rp.json +++ b/advisories/unreviewed/2022/05/GHSA-m5hx-xvhh-69rp/GHSA-m5hx-xvhh-69rp.json @@ -7,12 +7,8 @@ "CVE-2011-4005" ], "details": "Cross-site request forgery (CSRF) vulnerability in the Services Ready Platform Configuration Utility web interface on the Cisco Small Business SRP521W, SRP526W, and SRP527W with firmware before 1.1.24 and the Small Business SRP541W, SRP546W, and SRP547W with firmware before 1.2.1 allows remote attackers to hijack the authentication of administrators for requests that execute arbitrary commands, aka Bug ID CSCtr45124.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m5v9-gfqv-w29m/GHSA-m5v9-gfqv-w29m.json b/advisories/unreviewed/2022/05/GHSA-m5v9-gfqv-w29m/GHSA-m5v9-gfqv-w29m.json index 225052a148f..5c72daccda3 100644 --- a/advisories/unreviewed/2022/05/GHSA-m5v9-gfqv-w29m/GHSA-m5v9-gfqv-w29m.json +++ b/advisories/unreviewed/2022/05/GHSA-m5v9-gfqv-w29m/GHSA-m5v9-gfqv-w29m.json @@ -7,12 +7,8 @@ "CVE-2011-2141" ], "details": "SQL injection vulnerability in TMWeb in IBM Datacap Taskmaster Capture 8.0.1 before FP1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m68r-w6q7-9x79/GHSA-m68r-w6q7-9x79.json b/advisories/unreviewed/2022/05/GHSA-m68r-w6q7-9x79/GHSA-m68r-w6q7-9x79.json index 53161e3f54b..b8d4baab536 100644 --- a/advisories/unreviewed/2022/05/GHSA-m68r-w6q7-9x79/GHSA-m68r-w6q7-9x79.json +++ b/advisories/unreviewed/2022/05/GHSA-m68r-w6q7-9x79/GHSA-m68r-w6q7-9x79.json @@ -7,12 +7,8 @@ "CVE-2011-2150" ], "details": "The SmarterTools SmarterStats 6.0 web server does not properly validate string data that is intended for storage in an XML document, which allows remote attackers to cause a denial of service (parsing error and daemon pause) via vectors involving (1) certain cookies in a SiteInfoLookup action to Admin/frmSites.aspx, or certain (2) cookies or (3) parameters to (a) Client/frmViewOverviewReport.aspx, (b) Client/frmViewReports.aspx, or (c) Services/SiteAdmin.asmx, as demonstrated by a ]]>> string, related to an \"XML injection\" issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m6q7-f68c-gp5x/GHSA-m6q7-f68c-gp5x.json b/advisories/unreviewed/2022/05/GHSA-m6q7-f68c-gp5x/GHSA-m6q7-f68c-gp5x.json index fad36d198af..25db34343c0 100644 --- a/advisories/unreviewed/2022/05/GHSA-m6q7-f68c-gp5x/GHSA-m6q7-f68c-gp5x.json +++ b/advisories/unreviewed/2022/05/GHSA-m6q7-f68c-gp5x/GHSA-m6q7-f68c-gp5x.json @@ -7,12 +7,8 @@ "CVE-2010-4981" ], "details": "SQL injection vulnerability in trackads.php in YourFreeWorld Banner Management allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m6v4-fjxp-x5g4/GHSA-m6v4-fjxp-x5g4.json b/advisories/unreviewed/2022/05/GHSA-m6v4-fjxp-x5g4/GHSA-m6v4-fjxp-x5g4.json index 1ff2d9cd123..f1c13f6fe88 100644 --- a/advisories/unreviewed/2022/05/GHSA-m6v4-fjxp-x5g4/GHSA-m6v4-fjxp-x5g4.json +++ b/advisories/unreviewed/2022/05/GHSA-m6v4-fjxp-x5g4/GHSA-m6v4-fjxp-x5g4.json @@ -7,12 +7,8 @@ "CVE-2011-2886" ], "details": "IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via a .docx document with empty bullet styles for parent bullets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m7h5-crh5-vmfc/GHSA-m7h5-crh5-vmfc.json b/advisories/unreviewed/2022/05/GHSA-m7h5-crh5-vmfc/GHSA-m7h5-crh5-vmfc.json index 9384e60245d..e303f115afa 100644 --- a/advisories/unreviewed/2022/05/GHSA-m7h5-crh5-vmfc/GHSA-m7h5-crh5-vmfc.json +++ b/advisories/unreviewed/2022/05/GHSA-m7h5-crh5-vmfc/GHSA-m7h5-crh5-vmfc.json @@ -7,12 +7,8 @@ "CVE-2011-4460" ], "details": "SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to execute arbitrary SQL commands by leveraging access to a privileged account.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m9gj-6rfv-3qrm/GHSA-m9gj-6rfv-3qrm.json b/advisories/unreviewed/2022/05/GHSA-m9gj-6rfv-3qrm/GHSA-m9gj-6rfv-3qrm.json index 757178d2d6a..a759b56dc81 100644 --- a/advisories/unreviewed/2022/05/GHSA-m9gj-6rfv-3qrm/GHSA-m9gj-6rfv-3qrm.json +++ b/advisories/unreviewed/2022/05/GHSA-m9gj-6rfv-3qrm/GHSA-m9gj-6rfv-3qrm.json @@ -7,12 +7,8 @@ "CVE-2011-4157" ], "details": "Stack-based buffer overflow in hydra.exe in HP SAN/iQ before 9.5 on the HP StorageWorks P4000 Virtual SAN Appliance allows remote attackers to execute arbitrary code via a crafted login request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mf6c-w35x-g3cv/GHSA-mf6c-w35x-g3cv.json b/advisories/unreviewed/2022/05/GHSA-mf6c-w35x-g3cv/GHSA-mf6c-w35x-g3cv.json index f3385a31b5c..ba3bc817cdd 100644 --- a/advisories/unreviewed/2022/05/GHSA-mf6c-w35x-g3cv/GHSA-mf6c-w35x-g3cv.json +++ b/advisories/unreviewed/2022/05/GHSA-mf6c-w35x-g3cv/GHSA-mf6c-w35x-g3cv.json @@ -7,12 +7,8 @@ "CVE-2010-5194" ], "details": "Stack-based buffer overflow in the Image2PDF function in the SCRIBBLE.ScribbleCtrl.1 ActiveX control (ImageViewer2.ocx) in Viscom Image Viewer CP Pro 8.0, Gold 5.5, Gold 6.0, and earlier allows remote attackers to execute arbitrary code via a long strPDFFile parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mff2-83j6-4xq7/GHSA-mff2-83j6-4xq7.json b/advisories/unreviewed/2022/05/GHSA-mff2-83j6-4xq7/GHSA-mff2-83j6-4xq7.json index f9efac08fda..d197005bb2e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mff2-83j6-4xq7/GHSA-mff2-83j6-4xq7.json +++ b/advisories/unreviewed/2022/05/GHSA-mff2-83j6-4xq7/GHSA-mff2-83j6-4xq7.json @@ -7,12 +7,8 @@ "CVE-2011-2672" ], "details": "Cross-site scripting (XSS) vulnerability in SemanticScuttle before 0.98 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mg3g-9wrp-3q2x/GHSA-mg3g-9wrp-3q2x.json b/advisories/unreviewed/2022/05/GHSA-mg3g-9wrp-3q2x/GHSA-mg3g-9wrp-3q2x.json index b293e138475..c53aa707377 100644 --- a/advisories/unreviewed/2022/05/GHSA-mg3g-9wrp-3q2x/GHSA-mg3g-9wrp-3q2x.json +++ b/advisories/unreviewed/2022/05/GHSA-mg3g-9wrp-3q2x/GHSA-mg3g-9wrp-3q2x.json @@ -7,12 +7,8 @@ "CVE-2011-4050" ], "details": "Buffer overflow in 7-Technologies (7T) Interactive Graphical SCADA System (IGSS) 9.0.0.11200 allows remote attackers to cause a denial of service via a crafted packet to TCP port 12401.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mg43-h359-362h/GHSA-mg43-h359-362h.json b/advisories/unreviewed/2022/05/GHSA-mg43-h359-362h/GHSA-mg43-h359-362h.json index a4d3808f561..78ae64c1479 100644 --- a/advisories/unreviewed/2022/05/GHSA-mg43-h359-362h/GHSA-mg43-h359-362h.json +++ b/advisories/unreviewed/2022/05/GHSA-mg43-h359-362h/GHSA-mg43-h359-362h.json @@ -7,12 +7,8 @@ "CVE-2011-2682" ], "details": "The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service (license consumption) by trying to login to DOORS Web Access with a new user account that has never been used for a DOORS login.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mg4g-9536-v7mv/GHSA-mg4g-9536-v7mv.json b/advisories/unreviewed/2022/05/GHSA-mg4g-9536-v7mv/GHSA-mg4g-9536-v7mv.json index 484917c4aa5..dc5cb58276f 100644 --- a/advisories/unreviewed/2022/05/GHSA-mg4g-9536-v7mv/GHSA-mg4g-9536-v7mv.json +++ b/advisories/unreviewed/2022/05/GHSA-mg4g-9536-v7mv/GHSA-mg4g-9536-v7mv.json @@ -7,12 +7,8 @@ "CVE-2011-2395" ], "details": "The Neighbor Discovery (ND) protocol implementation in Cisco IOS on unspecified switches allows remote attackers to bypass the Router Advertisement Guarding functionality via a fragmented IPv6 packet in which the Router Advertisement (RA) message is contained in the second fragment, as demonstrated by (1) a packet in which the first fragment contains a long Destination Options extension header or (2) a packet in which the first fragment contains an ICMPv6 Echo Request message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mg6g-jwh6-pwjf/GHSA-mg6g-jwh6-pwjf.json b/advisories/unreviewed/2022/05/GHSA-mg6g-jwh6-pwjf/GHSA-mg6g-jwh6-pwjf.json index 32c8baf9095..ebf181d8dc1 100644 --- a/advisories/unreviewed/2022/05/GHSA-mg6g-jwh6-pwjf/GHSA-mg6g-jwh6-pwjf.json +++ b/advisories/unreviewed/2022/05/GHSA-mg6g-jwh6-pwjf/GHSA-mg6g-jwh6-pwjf.json @@ -7,12 +7,8 @@ "CVE-2011-3009" ], "details": "Ruby before 1.8.6-p114 does not reset the random seed upon forking, which makes it easier for context-dependent attackers to predict the values of random numbers by leveraging knowledge of the number sequence obtained in a different child process, a related issue to CVE-2003-0900.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mg83-w986-pfr5/GHSA-mg83-w986-pfr5.json b/advisories/unreviewed/2022/05/GHSA-mg83-w986-pfr5/GHSA-mg83-w986-pfr5.json index b6c399ed5d8..c6337840ee2 100644 --- a/advisories/unreviewed/2022/05/GHSA-mg83-w986-pfr5/GHSA-mg83-w986-pfr5.json +++ b/advisories/unreviewed/2022/05/GHSA-mg83-w986-pfr5/GHSA-mg83-w986-pfr5.json @@ -7,12 +7,8 @@ "CVE-2010-4959" ], "details": "SQL injection vulnerability in the login feature in Pre Projects Pre Podcast Portal allows remote attackers to execute arbitrary SQL commands via the password parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mgrh-wv2m-g4w2/GHSA-mgrh-wv2m-g4w2.json b/advisories/unreviewed/2022/05/GHSA-mgrh-wv2m-g4w2/GHSA-mgrh-wv2m-g4w2.json index 303c91f56e7..910dc5cc97c 100644 --- a/advisories/unreviewed/2022/05/GHSA-mgrh-wv2m-g4w2/GHSA-mgrh-wv2m-g4w2.json +++ b/advisories/unreviewed/2022/05/GHSA-mgrh-wv2m-g4w2/GHSA-mgrh-wv2m-g4w2.json @@ -7,12 +7,8 @@ "CVE-2010-5026" ], "details": "SQL injection vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the type parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mhpc-vhpw-2g5c/GHSA-mhpc-vhpw-2g5c.json b/advisories/unreviewed/2022/05/GHSA-mhpc-vhpw-2g5c/GHSA-mhpc-vhpw-2g5c.json index 2c3ca5705c1..83821b8eb9e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mhpc-vhpw-2g5c/GHSA-mhpc-vhpw-2g5c.json +++ b/advisories/unreviewed/2022/05/GHSA-mhpc-vhpw-2g5c/GHSA-mhpc-vhpw-2g5c.json @@ -7,12 +7,8 @@ "CVE-2011-2645" ], "details": "Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename for a custom RPM.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mjq4-j36x-7h6p/GHSA-mjq4-j36x-7h6p.json b/advisories/unreviewed/2022/05/GHSA-mjq4-j36x-7h6p/GHSA-mjq4-j36x-7h6p.json index ab559fb03c6..333bf035ffb 100644 --- a/advisories/unreviewed/2022/05/GHSA-mjq4-j36x-7h6p/GHSA-mjq4-j36x-7h6p.json +++ b/advisories/unreviewed/2022/05/GHSA-mjq4-j36x-7h6p/GHSA-mjq4-j36x-7h6p.json @@ -7,12 +7,8 @@ "CVE-2011-3256" ], "details": "FreeType 2 before 2.4.7, as used in CoreGraphics in Apple iOS before 5, Mandriva Enterprise Server 5, and possibly other products, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted font, a different vulnerability than CVE-2011-0226.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mm42-r25h-g74g/GHSA-mm42-r25h-g74g.json b/advisories/unreviewed/2022/05/GHSA-mm42-r25h-g74g/GHSA-mm42-r25h-g74g.json index 9a5f2509cb4..96aafd3b549 100644 --- a/advisories/unreviewed/2022/05/GHSA-mm42-r25h-g74g/GHSA-mm42-r25h-g74g.json +++ b/advisories/unreviewed/2022/05/GHSA-mm42-r25h-g74g/GHSA-mm42-r25h-g74g.json @@ -7,12 +7,8 @@ "CVE-2011-2664" ], "details": "Unspecified vulnerability in Check Point Multi-Domain Management / Provider-1 NGX R65, R70, R71, and R75, and SmartCenter during installation on non-Windows machines, allows local users on the MDS system to overwrite arbitrary files via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mm88-gfr5-7vjp/GHSA-mm88-gfr5-7vjp.json b/advisories/unreviewed/2022/05/GHSA-mm88-gfr5-7vjp/GHSA-mm88-gfr5-7vjp.json index 2f6031bd60a..d640d866bda 100644 --- a/advisories/unreviewed/2022/05/GHSA-mm88-gfr5-7vjp/GHSA-mm88-gfr5-7vjp.json +++ b/advisories/unreviewed/2022/05/GHSA-mm88-gfr5-7vjp/GHSA-mm88-gfr5-7vjp.json @@ -7,12 +7,8 @@ "CVE-2011-4141" ], "details": "Untrusted search path vulnerability in EMC RSA SecurID Software Token 4.1 before 4.1.1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a Software Token file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mmqq-w654-xx8h/GHSA-mmqq-w654-xx8h.json b/advisories/unreviewed/2022/05/GHSA-mmqq-w654-xx8h/GHSA-mmqq-w654-xx8h.json index 3557beace54..7a76923f48a 100644 --- a/advisories/unreviewed/2022/05/GHSA-mmqq-w654-xx8h/GHSA-mmqq-w654-xx8h.json +++ b/advisories/unreviewed/2022/05/GHSA-mmqq-w654-xx8h/GHSA-mmqq-w654-xx8h.json @@ -7,12 +7,8 @@ "CVE-2010-5023" ], "details": "SQL injection vulnerability in index.asp in Digital Interchange Calendar 5.8.5 allows remote attackers to execute arbitrary SQL commands via the intDivisionID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mpfq-vr67-x4v4/GHSA-mpfq-vr67-x4v4.json b/advisories/unreviewed/2022/05/GHSA-mpfq-vr67-x4v4/GHSA-mpfq-vr67-x4v4.json index 18f4a57e4b4..ac63e8e27b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-mpfq-vr67-x4v4/GHSA-mpfq-vr67-x4v4.json +++ b/advisories/unreviewed/2022/05/GHSA-mpfq-vr67-x4v4/GHSA-mpfq-vr67-x4v4.json @@ -7,12 +7,8 @@ "CVE-2011-3260" ], "details": "Buffer overflow in OfficeImport in Apple iOS before 5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Microsoft Word document.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mqq6-8gq3-5gjq/GHSA-mqq6-8gq3-5gjq.json b/advisories/unreviewed/2022/05/GHSA-mqq6-8gq3-5gjq/GHSA-mqq6-8gq3-5gjq.json index 84921c11783..68def87f289 100644 --- a/advisories/unreviewed/2022/05/GHSA-mqq6-8gq3-5gjq/GHSA-mqq6-8gq3-5gjq.json +++ b/advisories/unreviewed/2022/05/GHSA-mqq6-8gq3-5gjq/GHSA-mqq6-8gq3-5gjq.json @@ -7,12 +7,8 @@ "CVE-2011-3767" ], "details": "osCommerce 3.0a5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by redirect.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mqv5-xgm5-g729/GHSA-mqv5-xgm5-g729.json b/advisories/unreviewed/2022/05/GHSA-mqv5-xgm5-g729/GHSA-mqv5-xgm5-g729.json index 12056f5be37..9191b8b3257 100644 --- a/advisories/unreviewed/2022/05/GHSA-mqv5-xgm5-g729/GHSA-mqv5-xgm5-g729.json +++ b/advisories/unreviewed/2022/05/GHSA-mqv5-xgm5-g729/GHSA-mqv5-xgm5-g729.json @@ -7,12 +7,8 @@ "CVE-2011-4274" ], "details": "Cross-site scripting (XSS) vulnerability in the A-Form PC and PC/Mobile before 3.1 plug-ins for Movable Type allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-2676.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mqv6-xxj9-p7wp/GHSA-mqv6-xxj9-p7wp.json b/advisories/unreviewed/2022/05/GHSA-mqv6-xxj9-p7wp/GHSA-mqv6-xxj9-p7wp.json index 9199334d3cc..8ba21801ba7 100644 --- a/advisories/unreviewed/2022/05/GHSA-mqv6-xxj9-p7wp/GHSA-mqv6-xxj9-p7wp.json +++ b/advisories/unreviewed/2022/05/GHSA-mqv6-xxj9-p7wp/GHSA-mqv6-xxj9-p7wp.json @@ -7,12 +7,8 @@ "CVE-2011-3391" ], "details": "IBM Rational Build Forge 7.1.2 relies on client-side JavaScript code to enforce the EditSecurity permission requirement for the Export Key File function, which allows remote authenticated users to read a key file by removing a disable attribute in the Security sub-menu.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mr3g-73g7-j9pm/GHSA-mr3g-73g7-j9pm.json b/advisories/unreviewed/2022/05/GHSA-mr3g-73g7-j9pm/GHSA-mr3g-73g7-j9pm.json index aa6e8d21817..c5ccea948dc 100644 --- a/advisories/unreviewed/2022/05/GHSA-mr3g-73g7-j9pm/GHSA-mr3g-73g7-j9pm.json +++ b/advisories/unreviewed/2022/05/GHSA-mr3g-73g7-j9pm/GHSA-mr3g-73g7-j9pm.json @@ -7,12 +7,8 @@ "CVE-2010-4960" ], "details": "Cross-site scripting (XSS) vulnerability in the Branchenbuch (aka Yellow Pages or mh_branchenbuch) extension before 0.9.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mrm4-w3x4-3rhq/GHSA-mrm4-w3x4-3rhq.json b/advisories/unreviewed/2022/05/GHSA-mrm4-w3x4-3rhq/GHSA-mrm4-w3x4-3rhq.json index efd906255bd..7e330865704 100644 --- a/advisories/unreviewed/2022/05/GHSA-mrm4-w3x4-3rhq/GHSA-mrm4-w3x4-3rhq.json +++ b/advisories/unreviewed/2022/05/GHSA-mrm4-w3x4-3rhq/GHSA-mrm4-w3x4-3rhq.json @@ -7,12 +7,8 @@ "CVE-2010-5095" ], "details": "Cross-site scripting (XSS) vulnerability in SilverStripe 2.3.x before 2.3.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to DataObjectSet pagination.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mrp7-xwff-9phj/GHSA-mrp7-xwff-9phj.json b/advisories/unreviewed/2022/05/GHSA-mrp7-xwff-9phj/GHSA-mrp7-xwff-9phj.json index 3b13ce1fae2..baa0f31e597 100644 --- a/advisories/unreviewed/2022/05/GHSA-mrp7-xwff-9phj/GHSA-mrp7-xwff-9phj.json +++ b/advisories/unreviewed/2022/05/GHSA-mrp7-xwff-9phj/GHSA-mrp7-xwff-9phj.json @@ -7,12 +7,8 @@ "CVE-2011-2893" ], "details": "The DataPilot feature in IBM Lotus Symphony 3 before FP3 allows user-assisted remote attackers to cause a denial of service (application crash) via a large .xls spreadsheet with an invalid Value reference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mrw2-j59p-7p9h/GHSA-mrw2-j59p-7p9h.json b/advisories/unreviewed/2022/05/GHSA-mrw2-j59p-7p9h/GHSA-mrw2-j59p-7p9h.json index 445da89c272..10f482a320e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mrw2-j59p-7p9h/GHSA-mrw2-j59p-7p9h.json +++ b/advisories/unreviewed/2022/05/GHSA-mrw2-j59p-7p9h/GHSA-mrw2-j59p-7p9h.json @@ -7,12 +7,8 @@ "CVE-2011-4696" ], "details": "Directory traversal vulnerability in Eye-Fi Helper before 3.4.23 allows man-in-the-middle attackers to create arbitrary files via a .. (dot dot) in the filesignature in a GetPhotoStatus request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mw98-cjvm-vp82/GHSA-mw98-cjvm-vp82.json b/advisories/unreviewed/2022/05/GHSA-mw98-cjvm-vp82/GHSA-mw98-cjvm-vp82.json index 5fc0d0f45da..d75c086ac6f 100644 --- a/advisories/unreviewed/2022/05/GHSA-mw98-cjvm-vp82/GHSA-mw98-cjvm-vp82.json +++ b/advisories/unreviewed/2022/05/GHSA-mw98-cjvm-vp82/GHSA-mw98-cjvm-vp82.json @@ -7,12 +7,8 @@ "CVE-2011-2649" ], "details": "Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to execute arbitrary commands via shell metacharacters in an unspecified FileUtils function call.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mxcq-585m-9x85/GHSA-mxcq-585m-9x85.json b/advisories/unreviewed/2022/05/GHSA-mxcq-585m-9x85/GHSA-mxcq-585m-9x85.json index b8f70acb76b..d1772216a80 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxcq-585m-9x85/GHSA-mxcq-585m-9x85.json +++ b/advisories/unreviewed/2022/05/GHSA-mxcq-585m-9x85/GHSA-mxcq-585m-9x85.json @@ -7,12 +7,8 @@ "CVE-2010-4971" ], "details": "Cross-site scripting (XSS) vulnerability in VideoWhisper PHP 2 Way Video Chat component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the r parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mxcv-w3x2-ccgv/GHSA-mxcv-w3x2-ccgv.json b/advisories/unreviewed/2022/05/GHSA-mxcv-w3x2-ccgv/GHSA-mxcv-w3x2-ccgv.json index dde04b50f3a..81f9bfb2548 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxcv-w3x2-ccgv/GHSA-mxcv-w3x2-ccgv.json +++ b/advisories/unreviewed/2022/05/GHSA-mxcv-w3x2-ccgv/GHSA-mxcv-w3x2-ccgv.json @@ -7,12 +7,8 @@ "CVE-2011-2676" ], "details": "The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not require administrative authentication, which allows remote authenticated users to modify data via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mxfx-g487-m97q/GHSA-mxfx-g487-m97q.json b/advisories/unreviewed/2022/05/GHSA-mxfx-g487-m97q/GHSA-mxfx-g487-m97q.json index 547c9a7ed22..8c78b82e221 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxfx-g487-m97q/GHSA-mxfx-g487-m97q.json +++ b/advisories/unreviewed/2022/05/GHSA-mxfx-g487-m97q/GHSA-mxfx-g487-m97q.json @@ -7,12 +7,8 @@ "CVE-2011-2381" ], "details": "CRLF injection vulnerability in Bugzilla 2.17.1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 allows remote attackers to inject arbitrary e-mail headers via an attachment description in a flagmail notification.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mxg3-5hmw-28wr/GHSA-mxg3-5hmw-28wr.json b/advisories/unreviewed/2022/05/GHSA-mxg3-5hmw-28wr/GHSA-mxg3-5hmw-28wr.json index e6fcae76e0c..c248c6534da 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxg3-5hmw-28wr/GHSA-mxg3-5hmw-28wr.json +++ b/advisories/unreviewed/2022/05/GHSA-mxg3-5hmw-28wr/GHSA-mxg3-5hmw-28wr.json @@ -7,12 +7,8 @@ "CVE-2011-5003" ], "details": "Stack-based buffer overflow in the Phonetic Indexer (AvidPhoneticIndexer.exe) in Avid Media Composer 5.5.3 and earlier allows remote attackers to execute arbitrary code via a long request to TCP port 4659.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p3hf-j3h8-8mqv/GHSA-p3hf-j3h8-8mqv.json b/advisories/unreviewed/2022/05/GHSA-p3hf-j3h8-8mqv/GHSA-p3hf-j3h8-8mqv.json index aa7742cd2bc..88dc343ebb3 100644 --- a/advisories/unreviewed/2022/05/GHSA-p3hf-j3h8-8mqv/GHSA-p3hf-j3h8-8mqv.json +++ b/advisories/unreviewed/2022/05/GHSA-p3hf-j3h8-8mqv/GHSA-p3hf-j3h8-8mqv.json @@ -7,12 +7,8 @@ "CVE-2011-2179" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in config.c in config.cgi in (1) Nagios 3.2.3 and (2) Icinga before 1.4.1 allow remote attackers to inject arbitrary web script or HTML via the expand parameter, as demonstrated by an (a) command action or a (b) hosts action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p3w6-3w9m-m2w3/GHSA-p3w6-3w9m-m2w3.json b/advisories/unreviewed/2022/05/GHSA-p3w6-3w9m-m2w3/GHSA-p3w6-3w9m-m2w3.json index 6b11d7af82c..f5f65bcf4cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-p3w6-3w9m-m2w3/GHSA-p3w6-3w9m-m2w3.json +++ b/advisories/unreviewed/2022/05/GHSA-p3w6-3w9m-m2w3/GHSA-p3w6-3w9m-m2w3.json @@ -7,12 +7,8 @@ "CVE-2011-2958" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Ecava IntegraXor before 3.60 (Build 4080) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p427-mqx7-2fch/GHSA-p427-mqx7-2fch.json b/advisories/unreviewed/2022/05/GHSA-p427-mqx7-2fch/GHSA-p427-mqx7-2fch.json index 22e9b9ef162..b7c374a8e64 100644 --- a/advisories/unreviewed/2022/05/GHSA-p427-mqx7-2fch/GHSA-p427-mqx7-2fch.json +++ b/advisories/unreviewed/2022/05/GHSA-p427-mqx7-2fch/GHSA-p427-mqx7-2fch.json @@ -7,12 +7,8 @@ "CVE-2010-5277" ], "details": "Unspecified vulnerability in the Views Bulk Operations module 6 before 6.x-1.10 for Drupal allows remote authenticated users with user management permissions to bypass intended access restrictions and delete anonymous users (user 0) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p4m2-wh9f-8j9x/GHSA-p4m2-wh9f-8j9x.json b/advisories/unreviewed/2022/05/GHSA-p4m2-wh9f-8j9x/GHSA-p4m2-wh9f-8j9x.json index af241f1141f..8fd84de79da 100644 --- a/advisories/unreviewed/2022/05/GHSA-p4m2-wh9f-8j9x/GHSA-p4m2-wh9f-8j9x.json +++ b/advisories/unreviewed/2022/05/GHSA-p4m2-wh9f-8j9x/GHSA-p4m2-wh9f-8j9x.json @@ -7,12 +7,8 @@ "CVE-2010-4869" ], "details": "SQL injection vulnerability in index.php in DBHcms 1.1.4 allows remote attackers to execute arbitrary SQL commands via the editmenu parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p5qq-87j3-wxwp/GHSA-p5qq-87j3-wxwp.json b/advisories/unreviewed/2022/05/GHSA-p5qq-87j3-wxwp/GHSA-p5qq-87j3-wxwp.json index e894bfd4532..466ccb817dc 100644 --- a/advisories/unreviewed/2022/05/GHSA-p5qq-87j3-wxwp/GHSA-p5qq-87j3-wxwp.json +++ b/advisories/unreviewed/2022/05/GHSA-p5qq-87j3-wxwp/GHSA-p5qq-87j3-wxwp.json @@ -7,12 +7,8 @@ "CVE-2011-2779" ], "details": "Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p68x-rvf5-mfv6/GHSA-p68x-rvf5-mfv6.json b/advisories/unreviewed/2022/05/GHSA-p68x-rvf5-mfv6/GHSA-p68x-rvf5-mfv6.json index 0c4cf9c4e51..6491389ac4e 100644 --- a/advisories/unreviewed/2022/05/GHSA-p68x-rvf5-mfv6/GHSA-p68x-rvf5-mfv6.json +++ b/advisories/unreviewed/2022/05/GHSA-p68x-rvf5-mfv6/GHSA-p68x-rvf5-mfv6.json @@ -7,12 +7,8 @@ "CVE-2011-4754" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to inject arbitrary web script or HTML via crafted input to a PHP script, as demonstrated by smb/app/available/id/apscatalog/ and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p6cg-c78j-hqmv/GHSA-p6cg-c78j-hqmv.json b/advisories/unreviewed/2022/05/GHSA-p6cg-c78j-hqmv/GHSA-p6cg-c78j-hqmv.json index 5d0f5db748a..7827484af06 100644 --- a/advisories/unreviewed/2022/05/GHSA-p6cg-c78j-hqmv/GHSA-p6cg-c78j-hqmv.json +++ b/advisories/unreviewed/2022/05/GHSA-p6cg-c78j-hqmv/GHSA-p6cg-c78j-hqmv.json @@ -7,12 +7,8 @@ "CVE-2011-5026" ], "details": "Cross-site scripting (XSS) vulnerability in the addPost function in data/functions.php in Winn GuestBook before 2.4.8d allows remote attackers to inject arbitrary web script or HTML via the name parameter to index.php. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p7vx-368h-q3qh/GHSA-p7vx-368h-q3qh.json b/advisories/unreviewed/2022/05/GHSA-p7vx-368h-q3qh/GHSA-p7vx-368h-q3qh.json index 6816f9da68f..7d340024c68 100644 --- a/advisories/unreviewed/2022/05/GHSA-p7vx-368h-q3qh/GHSA-p7vx-368h-q3qh.json +++ b/advisories/unreviewed/2022/05/GHSA-p7vx-368h-q3qh/GHSA-p7vx-368h-q3qh.json @@ -7,12 +7,8 @@ "CVE-2010-4871" ], "details": "Unspecified vulnerability in SmartFTP before 4.0 Build 1142 allows attackers to have an unknown impact via a long filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p8q7-f8xw-95mp/GHSA-p8q7-f8xw-95mp.json b/advisories/unreviewed/2022/05/GHSA-p8q7-f8xw-95mp/GHSA-p8q7-f8xw-95mp.json index dd20fe657d7..f0cc5532501 100644 --- a/advisories/unreviewed/2022/05/GHSA-p8q7-f8xw-95mp/GHSA-p8q7-f8xw-95mp.json +++ b/advisories/unreviewed/2022/05/GHSA-p8q7-f8xw-95mp/GHSA-p8q7-f8xw-95mp.json @@ -7,12 +7,8 @@ "CVE-2011-4757" ], "details": "Parallels Plesk Small Business Panel 10.2.0 generates a password form field without disabling the autocomplete feature, which makes it easier for remote attackers to bypass authentication by leveraging an unattended workstation, as demonstrated by forms in smb/auth and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p988-hvw7-6fpj/GHSA-p988-hvw7-6fpj.json b/advisories/unreviewed/2022/05/GHSA-p988-hvw7-6fpj/GHSA-p988-hvw7-6fpj.json index 05e8c12dcab..65840d94f99 100644 --- a/advisories/unreviewed/2022/05/GHSA-p988-hvw7-6fpj/GHSA-p988-hvw7-6fpj.json +++ b/advisories/unreviewed/2022/05/GHSA-p988-hvw7-6fpj/GHSA-p988-hvw7-6fpj.json @@ -7,12 +7,8 @@ "CVE-2011-2163" ], "details": "Unspecified vulnerability in Virtualization Manager 1.2.2 in IBM Systems Director 1.2.2 has unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p9hf-p67w-xg98/GHSA-p9hf-p67w-xg98.json b/advisories/unreviewed/2022/05/GHSA-p9hf-p67w-xg98/GHSA-p9hf-p67w-xg98.json index bf4ae79d89e..eab155afb1e 100644 --- a/advisories/unreviewed/2022/05/GHSA-p9hf-p67w-xg98/GHSA-p9hf-p67w-xg98.json +++ b/advisories/unreviewed/2022/05/GHSA-p9hf-p67w-xg98/GHSA-p9hf-p67w-xg98.json @@ -7,12 +7,8 @@ "CVE-2011-2020" ], "details": "Cross-site scripting (XSS) vulnerability in TIBCO iProcess Engine before 11.1.3 and iProcess Workspace before 11.3.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p9p6-vjx9-7v9f/GHSA-p9p6-vjx9-7v9f.json b/advisories/unreviewed/2022/05/GHSA-p9p6-vjx9-7v9f/GHSA-p9p6-vjx9-7v9f.json index 2f90b7f7b77..369c8207d6d 100644 --- a/advisories/unreviewed/2022/05/GHSA-p9p6-vjx9-7v9f/GHSA-p9p6-vjx9-7v9f.json +++ b/advisories/unreviewed/2022/05/GHSA-p9p6-vjx9-7v9f/GHSA-p9p6-vjx9-7v9f.json @@ -7,12 +7,8 @@ "CVE-2011-5130" ], "details": "dev/less.php in Family Connections CMS (FCMS) 2.5.0 - 2.7.1, when register_globals is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the argv[1] parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pcq3-p7w4-33xg/GHSA-pcq3-p7w4-33xg.json b/advisories/unreviewed/2022/05/GHSA-pcq3-p7w4-33xg/GHSA-pcq3-p7w4-33xg.json index 7223f4a6eb6..46f2b871589 100644 --- a/advisories/unreviewed/2022/05/GHSA-pcq3-p7w4-33xg/GHSA-pcq3-p7w4-33xg.json +++ b/advisories/unreviewed/2022/05/GHSA-pcq3-p7w4-33xg/GHSA-pcq3-p7w4-33xg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pfh3-qfx5-mqgv/GHSA-pfh3-qfx5-mqgv.json b/advisories/unreviewed/2022/05/GHSA-pfh3-qfx5-mqgv/GHSA-pfh3-qfx5-mqgv.json index d449b07b0a3..a045f429c01 100644 --- a/advisories/unreviewed/2022/05/GHSA-pfh3-qfx5-mqgv/GHSA-pfh3-qfx5-mqgv.json +++ b/advisories/unreviewed/2022/05/GHSA-pfh3-qfx5-mqgv/GHSA-pfh3-qfx5-mqgv.json @@ -7,12 +7,8 @@ "CVE-2011-5029" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog 0.7.0 and possibly earlier allow remote attackers to inject arbitrary web script or HTML via the (1) entry parameter to delete.php or (2) category parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pfj5-6pw9-7xw4/GHSA-pfj5-6pw9-7xw4.json b/advisories/unreviewed/2022/05/GHSA-pfj5-6pw9-7xw4/GHSA-pfj5-6pw9-7xw4.json index e2b94188d4d..1dd7107f7f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-pfj5-6pw9-7xw4/GHSA-pfj5-6pw9-7xw4.json +++ b/advisories/unreviewed/2022/05/GHSA-pfj5-6pw9-7xw4/GHSA-pfj5-6pw9-7xw4.json @@ -7,12 +7,8 @@ "CVE-2011-4753" ], "details": "Multiple SQL injection vulnerabilities in Parallels Plesk Small Business Panel 10.2.0 allow remote attackers to execute arbitrary SQL commands via crafted input to a PHP script, as demonstrated by domains/sitebuilder_edit.php and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pg35-2558-wrpv/GHSA-pg35-2558-wrpv.json b/advisories/unreviewed/2022/05/GHSA-pg35-2558-wrpv/GHSA-pg35-2558-wrpv.json index 95a6d6d587b..6edff8e07f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-pg35-2558-wrpv/GHSA-pg35-2558-wrpv.json +++ b/advisories/unreviewed/2022/05/GHSA-pg35-2558-wrpv/GHSA-pg35-2558-wrpv.json @@ -7,12 +7,8 @@ "CVE-2011-2147" ], "details": "Openswan 2.2.x does not properly restrict permissions for (1) /var/run/starter.pid, related to starter.c in the IPsec starter, and (2) /var/lock/subsys/ipsec, which allows local users to kill arbitrary processes by writing a PID to a file, or possibly bypass disk quotas by writing arbitrary data to a file, as demonstrated by files with 0666 permissions, a different vulnerability than CVE-2011-1784.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pg4v-8j65-gr3m/GHSA-pg4v-8j65-gr3m.json b/advisories/unreviewed/2022/05/GHSA-pg4v-8j65-gr3m/GHSA-pg4v-8j65-gr3m.json index 44d38946ffa..36228bbc68e 100644 --- a/advisories/unreviewed/2022/05/GHSA-pg4v-8j65-gr3m/GHSA-pg4v-8j65-gr3m.json +++ b/advisories/unreviewed/2022/05/GHSA-pg4v-8j65-gr3m/GHSA-pg4v-8j65-gr3m.json @@ -7,12 +7,8 @@ "CVE-2011-2656" ], "details": "Unspecified vulnerability in ZfHSrvr.exe in Novell ZENworks Handheld Management (ZHM) 7 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2655.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pgx9-6822-rwxw/GHSA-pgx9-6822-rwxw.json b/advisories/unreviewed/2022/05/GHSA-pgx9-6822-rwxw/GHSA-pgx9-6822-rwxw.json index 934e806e1f4..46134bd89ee 100644 --- a/advisories/unreviewed/2022/05/GHSA-pgx9-6822-rwxw/GHSA-pgx9-6822-rwxw.json +++ b/advisories/unreviewed/2022/05/GHSA-pgx9-6822-rwxw/GHSA-pgx9-6822-rwxw.json @@ -7,12 +7,8 @@ "CVE-2011-3261" ], "details": "Double free vulnerability in OfficeImport in Apple iOS before 5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Excel spreadsheet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-phf2-gp8g-gv9p/GHSA-phf2-gp8g-gv9p.json b/advisories/unreviewed/2022/05/GHSA-phf2-gp8g-gv9p/GHSA-phf2-gp8g-gv9p.json index fd78372dec7..3a588fafbcf 100644 --- a/advisories/unreviewed/2022/05/GHSA-phf2-gp8g-gv9p/GHSA-phf2-gp8g-gv9p.json +++ b/advisories/unreviewed/2022/05/GHSA-phf2-gp8g-gv9p/GHSA-phf2-gp8g-gv9p.json @@ -7,12 +7,8 @@ "CVE-2011-3838" ], "details": "Multiple SQL injection vulnerabilities in Wuzly 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) u parameter to fp.php, (2) epage parameter to newpage.php, (3) epost parameter to newpost.php, and (4) username parameter to login.php in admin/; or the (5) username parameter to mobile/login.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-phg6-j5pg-w4c8/GHSA-phg6-j5pg-w4c8.json b/advisories/unreviewed/2022/05/GHSA-phg6-j5pg-w4c8/GHSA-phg6-j5pg-w4c8.json index 042cf5e3938..e0f61843816 100644 --- a/advisories/unreviewed/2022/05/GHSA-phg6-j5pg-w4c8/GHSA-phg6-j5pg-w4c8.json +++ b/advisories/unreviewed/2022/05/GHSA-phg6-j5pg-w4c8/GHSA-phg6-j5pg-w4c8.json @@ -7,12 +7,8 @@ "CVE-2011-3330" ], "details": "Buffer overflow in the UnitelWay Windows Device Driver, as used in Schneider Electric Unity Pro 6 and earlier, OPC Factory Server 3.34, Vijeo Citect 7.20 and earlier, Telemecanique Driver Pack 2.6 and earlier, Monitor Pro 7.6 and earlier, and PL7 Pro 4.5 and earlier, allows local users, and possibly remote attackers, to execute arbitrary code via an unspecified system parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pj9r-53xx-v7j6/GHSA-pj9r-53xx-v7j6.json b/advisories/unreviewed/2022/05/GHSA-pj9r-53xx-v7j6/GHSA-pj9r-53xx-v7j6.json index 6fa180913b3..36dc9ecbc5c 100644 --- a/advisories/unreviewed/2022/05/GHSA-pj9r-53xx-v7j6/GHSA-pj9r-53xx-v7j6.json +++ b/advisories/unreviewed/2022/05/GHSA-pj9r-53xx-v7j6/GHSA-pj9r-53xx-v7j6.json @@ -7,12 +7,8 @@ "CVE-2010-4995" ], "details": "SQL injection vulnerability in the NeoRecruit (com_neorecruit) component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in an offer_view action to index.php, a different vector than CVE-2007-4506.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pmh8-qf2w-qvjq/GHSA-pmh8-qf2w-qvjq.json b/advisories/unreviewed/2022/05/GHSA-pmh8-qf2w-qvjq/GHSA-pmh8-qf2w-qvjq.json index 06fe2677195..5e86784a6a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-pmh8-qf2w-qvjq/GHSA-pmh8-qf2w-qvjq.json +++ b/advisories/unreviewed/2022/05/GHSA-pmh8-qf2w-qvjq/GHSA-pmh8-qf2w-qvjq.json @@ -7,12 +7,8 @@ "CVE-2011-2217" ], "details": "Certain ActiveX controls in (1) tsgetxu71ex552.dll and (2) tsgetx71ex552.dll in Tom Sawyer GET Extension Factory 5.5.2.237, as used in VI Client (aka VMware Infrastructure Client) 2.0.2 before Build 230598 and 2.5 before Build 204931 in VMware Infrastructure 3, do not properly handle attempted initialization within Internet Explorer, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted HTML document.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pp8x-xmmj-hg66/GHSA-pp8x-xmmj-hg66.json b/advisories/unreviewed/2022/05/GHSA-pp8x-xmmj-hg66/GHSA-pp8x-xmmj-hg66.json index 0f0954d7859..2a1c8628552 100644 --- a/advisories/unreviewed/2022/05/GHSA-pp8x-xmmj-hg66/GHSA-pp8x-xmmj-hg66.json +++ b/advisories/unreviewed/2022/05/GHSA-pp8x-xmmj-hg66/GHSA-pp8x-xmmj-hg66.json @@ -7,12 +7,8 @@ "CVE-2011-3975" ], "details": "A certain HTC update for Android 2.3.4 build GRJ22, when the Sense interface is used on the HTC EVO 3D, EVO 4G, ThunderBolt, and unspecified other devices, provides the HtcLoggers.apk application, which allows user-assisted remote attackers to obtain a list of telephone numbers from a log, and other sensitive information, by leveraging the android.permission.INTERNET application permission and establishing TCP sessions to 127.0.0.1 on port 65511 and a second port.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ppc2-xqjm-q5fp/GHSA-ppc2-xqjm-q5fp.json b/advisories/unreviewed/2022/05/GHSA-ppc2-xqjm-q5fp/GHSA-ppc2-xqjm-q5fp.json index cc59332581c..badb1f9024e 100644 --- a/advisories/unreviewed/2022/05/GHSA-ppc2-xqjm-q5fp/GHSA-ppc2-xqjm-q5fp.json +++ b/advisories/unreviewed/2022/05/GHSA-ppc2-xqjm-q5fp/GHSA-ppc2-xqjm-q5fp.json @@ -7,12 +7,8 @@ "CVE-2011-3489" ], "details": "RnaUtility.dll in RsvcHost.exe 2.30.0.23 in Rockwell RSLogix 19 and earlier allows remote attackers to cause a denial of service (crash) via a crafted rna packet with a long string to TCP port 4446 that triggers (1) \"a memset zero overflow\" or (2) an out-of-bounds read, related to improper handling of a 32-bit size field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ppcr-4hqj-9vmf/GHSA-ppcr-4hqj-9vmf.json b/advisories/unreviewed/2022/05/GHSA-ppcr-4hqj-9vmf/GHSA-ppcr-4hqj-9vmf.json index 5113e2ec0a6..8d4c99f5dc6 100644 --- a/advisories/unreviewed/2022/05/GHSA-ppcr-4hqj-9vmf/GHSA-ppcr-4hqj-9vmf.json +++ b/advisories/unreviewed/2022/05/GHSA-ppcr-4hqj-9vmf/GHSA-ppcr-4hqj-9vmf.json @@ -7,12 +7,8 @@ "CVE-2011-2589" ], "details": "Heap-based buffer overflow in the SendLogAction method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 might allow remote attackers to execute arbitrary code via a long argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ppq4-4q5c-rxv7/GHSA-ppq4-4q5c-rxv7.json b/advisories/unreviewed/2022/05/GHSA-ppq4-4q5c-rxv7/GHSA-ppq4-4q5c-rxv7.json index f4d7b444d8e..b8e2ec1aa97 100644 --- a/advisories/unreviewed/2022/05/GHSA-ppq4-4q5c-rxv7/GHSA-ppq4-4q5c-rxv7.json +++ b/advisories/unreviewed/2022/05/GHSA-ppq4-4q5c-rxv7/GHSA-ppq4-4q5c-rxv7.json @@ -7,12 +7,8 @@ "CVE-2010-4896" ], "details": "Cross-site scripting (XSS) vulnerability in admin/index.asp in Member Management System 4.0 allows remote attackers to inject arbitrary web script or HTML via the REF_URL parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pqmv-9q77-mrhp/GHSA-pqmv-9q77-mrhp.json b/advisories/unreviewed/2022/05/GHSA-pqmv-9q77-mrhp/GHSA-pqmv-9q77-mrhp.json index 6234922fe78..5d4be5a3c3d 100644 --- a/advisories/unreviewed/2022/05/GHSA-pqmv-9q77-mrhp/GHSA-pqmv-9q77-mrhp.json +++ b/advisories/unreviewed/2022/05/GHSA-pqmv-9q77-mrhp/GHSA-pqmv-9q77-mrhp.json @@ -7,12 +7,8 @@ "CVE-2011-3538" ], "details": "Unspecified vulnerability in the Sun Ray component in Oracle Virtualization 4.0 allows remote attackers to affect integrity, related to Authentication. NOTE: this identifier was inadvertently used for an Oracle Industry Applications issue involving TMS Help, but that issue has been assigned CVE-2011-2323.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pqx4-r8hx-2588/GHSA-pqx4-r8hx-2588.json b/advisories/unreviewed/2022/05/GHSA-pqx4-r8hx-2588/GHSA-pqx4-r8hx-2588.json index b8a1de8fc44..21a3689a2aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-pqx4-r8hx-2588/GHSA-pqx4-r8hx-2588.json +++ b/advisories/unreviewed/2022/05/GHSA-pqx4-r8hx-2588/GHSA-pqx4-r8hx-2588.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pr67-38j4-x79q/GHSA-pr67-38j4-x79q.json b/advisories/unreviewed/2022/05/GHSA-pr67-38j4-x79q/GHSA-pr67-38j4-x79q.json index 6a47ab4cbf2..a6041f4a294 100644 --- a/advisories/unreviewed/2022/05/GHSA-pr67-38j4-x79q/GHSA-pr67-38j4-x79q.json +++ b/advisories/unreviewed/2022/05/GHSA-pr67-38j4-x79q/GHSA-pr67-38j4-x79q.json @@ -7,12 +7,8 @@ "CVE-2011-2644" ], "details": "Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to an RPM info display.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pr8h-pjww-wj94/GHSA-pr8h-pjww-wj94.json b/advisories/unreviewed/2022/05/GHSA-pr8h-pjww-wj94/GHSA-pr8h-pjww-wj94.json index c06b1c74d90..18e9f757075 100644 --- a/advisories/unreviewed/2022/05/GHSA-pr8h-pjww-wj94/GHSA-pr8h-pjww-wj94.json +++ b/advisories/unreviewed/2022/05/GHSA-pr8h-pjww-wj94/GHSA-pr8h-pjww-wj94.json @@ -7,12 +7,8 @@ "CVE-2011-5038" ], "details": "SQL injection vulnerability in hitCode hitAppoint 4.5.17 and possibly earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-prff-qxm9-cp9f/GHSA-prff-qxm9-cp9f.json b/advisories/unreviewed/2022/05/GHSA-prff-qxm9-cp9f/GHSA-prff-qxm9-cp9f.json index dddaa7dcffd..2c0a7001ef9 100644 --- a/advisories/unreviewed/2022/05/GHSA-prff-qxm9-cp9f/GHSA-prff-qxm9-cp9f.json +++ b/advisories/unreviewed/2022/05/GHSA-prff-qxm9-cp9f/GHSA-prff-qxm9-cp9f.json @@ -7,12 +7,8 @@ "CVE-2010-4843" ], "details": "SQL injection vulnerability in website-page.php in PHP Web Scripts Ad Manager Pro 3.0 allows remote attackers to execute arbitrary SQL commands via the pageId parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-prh3-xfqc-rc2x/GHSA-prh3-xfqc-rc2x.json b/advisories/unreviewed/2022/05/GHSA-prh3-xfqc-rc2x/GHSA-prh3-xfqc-rc2x.json index af1133b4a96..793c2a042f8 100644 --- a/advisories/unreviewed/2022/05/GHSA-prh3-xfqc-rc2x/GHSA-prh3-xfqc-rc2x.json +++ b/advisories/unreviewed/2022/05/GHSA-prh3-xfqc-rc2x/GHSA-prh3-xfqc-rc2x.json @@ -7,12 +7,8 @@ "CVE-2011-3152" ], "details": "DistUpgrade/DistUpgradeFetcherCore.py in Update Manager before 1:0.87.31.1, 1:0.134.x before 1:0.134.11.1, 1:0.142.x before 1:0.142.23.1, 1:0.150.x before 1:0.150.5.1, and 1:0.152.x before 1:0.152.25.5 on Ubuntu 8.04 through 11.10 does not verify the GPG signature before extracting an upgrade tarball, which allows man-in-the-middle attackers to (1) create or overwrite arbitrary files via a directory traversal attack using a crafted tar file, or (2) bypass authentication via a crafted meta-release file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pwv8-p7qg-23hg/GHSA-pwv8-p7qg-23hg.json b/advisories/unreviewed/2022/05/GHSA-pwv8-p7qg-23hg/GHSA-pwv8-p7qg-23hg.json index 7ace0f1d2d7..bd8b58ad10a 100644 --- a/advisories/unreviewed/2022/05/GHSA-pwv8-p7qg-23hg/GHSA-pwv8-p7qg-23hg.json +++ b/advisories/unreviewed/2022/05/GHSA-pwv8-p7qg-23hg/GHSA-pwv8-p7qg-23hg.json @@ -7,12 +7,8 @@ "CVE-2011-3762" ], "details": "OpenBlog 1.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/scaffolding/views/view.php and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-px4g-f3wj-99x9/GHSA-px4g-f3wj-99x9.json b/advisories/unreviewed/2022/05/GHSA-px4g-f3wj-99x9/GHSA-px4g-f3wj-99x9.json index 40328670aea..a2470a53edf 100644 --- a/advisories/unreviewed/2022/05/GHSA-px4g-f3wj-99x9/GHSA-px4g-f3wj-99x9.json +++ b/advisories/unreviewed/2022/05/GHSA-px4g-f3wj-99x9/GHSA-px4g-f3wj-99x9.json @@ -7,12 +7,8 @@ "CVE-2010-4925" ], "details": "SQL injection vulnerability in clic.php in the Partenaires module 1.5 for Nuked-Klan allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q23r-7gwj-52ch/GHSA-q23r-7gwj-52ch.json b/advisories/unreviewed/2022/05/GHSA-q23r-7gwj-52ch/GHSA-q23r-7gwj-52ch.json index 42f24c637b2..7e1a2f5fe66 100644 --- a/advisories/unreviewed/2022/05/GHSA-q23r-7gwj-52ch/GHSA-q23r-7gwj-52ch.json +++ b/advisories/unreviewed/2022/05/GHSA-q23r-7gwj-52ch/GHSA-q23r-7gwj-52ch.json @@ -7,12 +7,8 @@ "CVE-2011-3297" ], "details": "Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when certain authentication configurations are used, allows remote attackers to cause a denial of service (module crash) by making many authentication requests for network access, aka Bug ID CSCtn15697.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q2mx-f429-3qr6/GHSA-q2mx-f429-3qr6.json b/advisories/unreviewed/2022/05/GHSA-q2mx-f429-3qr6/GHSA-q2mx-f429-3qr6.json index 91eb51422ff..8e8ad7f536f 100644 --- a/advisories/unreviewed/2022/05/GHSA-q2mx-f429-3qr6/GHSA-q2mx-f429-3qr6.json +++ b/advisories/unreviewed/2022/05/GHSA-q2mx-f429-3qr6/GHSA-q2mx-f429-3qr6.json @@ -7,12 +7,8 @@ "CVE-2011-3774" ], "details": "php Easy Survey Package (phpESP) 2.1.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by public/landing.php and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q487-6fjf-jx4g/GHSA-q487-6fjf-jx4g.json b/advisories/unreviewed/2022/05/GHSA-q487-6fjf-jx4g/GHSA-q487-6fjf-jx4g.json index f27972b859b..806e482c10b 100644 --- a/advisories/unreviewed/2022/05/GHSA-q487-6fjf-jx4g/GHSA-q487-6fjf-jx4g.json +++ b/advisories/unreviewed/2022/05/GHSA-q487-6fjf-jx4g/GHSA-q487-6fjf-jx4g.json @@ -7,12 +7,8 @@ "CVE-2011-2093" ], "details": "Adobe LiveCycle Data Services 3.1 and earlier, LiveCycle 9.0.0.2 and earlier, and BlazeDS 4.0.1 and earlier do not properly handle object graphs, which allows attackers to cause a denial of service via unspecified vectors, related to a \"complex object graph vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q5jq-vm24-cm2f/GHSA-q5jq-vm24-cm2f.json b/advisories/unreviewed/2022/05/GHSA-q5jq-vm24-cm2f/GHSA-q5jq-vm24-cm2f.json index 0437bf1544e..f5ca27a2aa0 100644 --- a/advisories/unreviewed/2022/05/GHSA-q5jq-vm24-cm2f/GHSA-q5jq-vm24-cm2f.json +++ b/advisories/unreviewed/2022/05/GHSA-q5jq-vm24-cm2f/GHSA-q5jq-vm24-cm2f.json @@ -7,12 +7,8 @@ "CVE-2011-3125" ], "details": "Unspecified vulnerability in WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 has unknown impact and attack vectors related to \"Various security hardening.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q64w-j52m-r9m5/GHSA-q64w-j52m-r9m5.json b/advisories/unreviewed/2022/05/GHSA-q64w-j52m-r9m5/GHSA-q64w-j52m-r9m5.json index cecd67334aa..4e2d1ace057 100644 --- a/advisories/unreviewed/2022/05/GHSA-q64w-j52m-r9m5/GHSA-q64w-j52m-r9m5.json +++ b/advisories/unreviewed/2022/05/GHSA-q64w-j52m-r9m5/GHSA-q64w-j52m-r9m5.json @@ -7,12 +7,8 @@ "CVE-2011-3427" ], "details": "The Data Security component in Apple iOS before 5 and Apple TV before 4.4 does not properly restrict use of the MD5 hash algorithm within X.509 certificates, which makes it easier for man-in-the-middle attackers to spoof servers or obtain sensitive information via a crafted certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q65p-xgfh-7vhh/GHSA-q65p-xgfh-7vhh.json b/advisories/unreviewed/2022/05/GHSA-q65p-xgfh-7vhh/GHSA-q65p-xgfh-7vhh.json index 066ea8d741b..756b16add00 100644 --- a/advisories/unreviewed/2022/05/GHSA-q65p-xgfh-7vhh/GHSA-q65p-xgfh-7vhh.json +++ b/advisories/unreviewed/2022/05/GHSA-q65p-xgfh-7vhh/GHSA-q65p-xgfh-7vhh.json @@ -7,12 +7,8 @@ "CVE-2010-5001" ], "details": "SQL injection vulnerability in view.php in esoftpro Online Contact Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q6m6-4hf5-r4m3/GHSA-q6m6-4hf5-r4m3.json b/advisories/unreviewed/2022/05/GHSA-q6m6-4hf5-r4m3/GHSA-q6m6-4hf5-r4m3.json index dc06a137ccd..a850f003ace 100644 --- a/advisories/unreviewed/2022/05/GHSA-q6m6-4hf5-r4m3/GHSA-q6m6-4hf5-r4m3.json +++ b/advisories/unreviewed/2022/05/GHSA-q6m6-4hf5-r4m3/GHSA-q6m6-4hf5-r4m3.json @@ -7,12 +7,8 @@ "CVE-2010-4875" ], "details": "Cross-site scripting (XSS) vulnerability in vodpod-video-gallery/vodpod_gallery_thumbs.php in the Vodpod Video Gallery Plugin 3.1.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the gid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q728-cmx3-fxvv/GHSA-q728-cmx3-fxvv.json b/advisories/unreviewed/2022/05/GHSA-q728-cmx3-fxvv/GHSA-q728-cmx3-fxvv.json index cde9e023a70..26c259ce509 100644 --- a/advisories/unreviewed/2022/05/GHSA-q728-cmx3-fxvv/GHSA-q728-cmx3-fxvv.json +++ b/advisories/unreviewed/2022/05/GHSA-q728-cmx3-fxvv/GHSA-q728-cmx3-fxvv.json @@ -7,12 +7,8 @@ "CVE-2011-4673" ], "details": "SQL injection vulnerability in modules/sharedaddy.php in the Jetpack plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q8qg-44mp-x3f8/GHSA-q8qg-44mp-x3f8.json b/advisories/unreviewed/2022/05/GHSA-q8qg-44mp-x3f8/GHSA-q8qg-44mp-x3f8.json index ea296248119..8569003b3cc 100644 --- a/advisories/unreviewed/2022/05/GHSA-q8qg-44mp-x3f8/GHSA-q8qg-44mp-x3f8.json +++ b/advisories/unreviewed/2022/05/GHSA-q8qg-44mp-x3f8/GHSA-q8qg-44mp-x3f8.json @@ -7,12 +7,8 @@ "CVE-2011-5069" ], "details": "Unrestricted file upload vulnerability in incident_attachments.php in Support Incident Tracker (aka SiT!) 3.65 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in unspecified directory, a different program than CVE-2011-3833.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q9pp-rfw6-mqp6/GHSA-q9pp-rfw6-mqp6.json b/advisories/unreviewed/2022/05/GHSA-q9pp-rfw6-mqp6/GHSA-q9pp-rfw6-mqp6.json index cc73f244e2b..70b58b4ed1d 100644 --- a/advisories/unreviewed/2022/05/GHSA-q9pp-rfw6-mqp6/GHSA-q9pp-rfw6-mqp6.json +++ b/advisories/unreviewed/2022/05/GHSA-q9pp-rfw6-mqp6/GHSA-q9pp-rfw6-mqp6.json @@ -7,12 +7,8 @@ "CVE-2011-2024" ], "details": "Cisco Network Registrar before 7.2 has a default administrative password, which makes it easier for remote attackers to obtain access via a TCP session, aka Bug ID CSCsm50627.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qc24-xr5h-cxhf/GHSA-qc24-xr5h-cxhf.json b/advisories/unreviewed/2022/05/GHSA-qc24-xr5h-cxhf/GHSA-qc24-xr5h-cxhf.json index d44e3f89293..910a81cc110 100644 --- a/advisories/unreviewed/2022/05/GHSA-qc24-xr5h-cxhf/GHSA-qc24-xr5h-cxhf.json +++ b/advisories/unreviewed/2022/05/GHSA-qc24-xr5h-cxhf/GHSA-qc24-xr5h-cxhf.json @@ -7,12 +7,8 @@ "CVE-2010-5282" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in OpenText ECM (formerly Livelink ECM) 9.7.1 allow remote attackers to inject arbitrary web script or HTML via the (1) viewType and (2) sort parameters in a browse action to livelink/livelink; and the (3) nodeid, (4) setctx, and (5) support parameters to livelinkdav/nodes/OOB_DAVWindow.html.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qcmm-8cqj-4q22/GHSA-qcmm-8cqj-4q22.json b/advisories/unreviewed/2022/05/GHSA-qcmm-8cqj-4q22/GHSA-qcmm-8cqj-4q22.json index 6c156d779bd..e24a54647a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-qcmm-8cqj-4q22/GHSA-qcmm-8cqj-4q22.json +++ b/advisories/unreviewed/2022/05/GHSA-qcmm-8cqj-4q22/GHSA-qcmm-8cqj-4q22.json @@ -7,12 +7,8 @@ "CVE-2011-2158" ], "details": "The SmarterTools SmarterStats 6.0 web server sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving (1) Admin/frmSite.aspx, (2) Admin/frmSites.aspx, (3) Admin/frmViewReports.aspx, (4) App_Themes/AboutThisFolder.txt, (5) Client/frmViewReports.aspx, (6) Temp/AboutThisFolder.txt, (7) default.aspx, (8) login.aspx, or (9) certain .jpg URIs under Temp/. NOTE: it is possible that only clients, not the SmarterStats product, could be affected by this issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qg9f-ph29-82pg/GHSA-qg9f-ph29-82pg.json b/advisories/unreviewed/2022/05/GHSA-qg9f-ph29-82pg/GHSA-qg9f-ph29-82pg.json index 95f6cd66f3b..199d1c0769e 100644 --- a/advisories/unreviewed/2022/05/GHSA-qg9f-ph29-82pg/GHSA-qg9f-ph29-82pg.json +++ b/advisories/unreviewed/2022/05/GHSA-qg9f-ph29-82pg/GHSA-qg9f-ph29-82pg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qgm3-v276-65qv/GHSA-qgm3-v276-65qv.json b/advisories/unreviewed/2022/05/GHSA-qgm3-v276-65qv/GHSA-qgm3-v276-65qv.json index f5026b294bd..44a281c3d60 100644 --- a/advisories/unreviewed/2022/05/GHSA-qgm3-v276-65qv/GHSA-qgm3-v276-65qv.json +++ b/advisories/unreviewed/2022/05/GHSA-qgm3-v276-65qv/GHSA-qgm3-v276-65qv.json @@ -7,12 +7,8 @@ "CVE-2011-5101" ], "details": "The Rumor technology in McAfee SaaS Endpoint Protection before 5.2.4 allows remote attackers to relay e-mail messages via unspecified vectors, as demonstrated by relaying spam.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qh85-rfph-r6p5/GHSA-qh85-rfph-r6p5.json b/advisories/unreviewed/2022/05/GHSA-qh85-rfph-r6p5/GHSA-qh85-rfph-r6p5.json index f15e9285dbf..150ae5ffb14 100644 --- a/advisories/unreviewed/2022/05/GHSA-qh85-rfph-r6p5/GHSA-qh85-rfph-r6p5.json +++ b/advisories/unreviewed/2022/05/GHSA-qh85-rfph-r6p5/GHSA-qh85-rfph-r6p5.json @@ -7,12 +7,8 @@ "CVE-2011-2040" ], "details": "The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.5.3041, and 3.0.x before 3.0.629, on Linux and Mac OS X downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote attackers to execute arbitrary code via the url property to a Java applet, aka Bug ID CSCsy05934.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qj5f-m5rp-v884/GHSA-qj5f-m5rp-v884.json b/advisories/unreviewed/2022/05/GHSA-qj5f-m5rp-v884/GHSA-qj5f-m5rp-v884.json index ca80294065d..c8ab2dd04c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-qj5f-m5rp-v884/GHSA-qj5f-m5rp-v884.json +++ b/advisories/unreviewed/2022/05/GHSA-qj5f-m5rp-v884/GHSA-qj5f-m5rp-v884.json @@ -7,12 +7,8 @@ "CVE-2011-4055" ], "details": "Buffer overflow in the WebClient ActiveX control in Siemens Tecnomatix FactoryLink 6.6.1 (aka 6.6 SP1), 7.5.217 (aka 7.5 SP2), and 8.0.2.54 allows remote attackers to execute arbitrary code via a long string in a parameter associated with the location URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qjf8-cx54-8r7c/GHSA-qjf8-cx54-8r7c.json b/advisories/unreviewed/2022/05/GHSA-qjf8-cx54-8r7c/GHSA-qjf8-cx54-8r7c.json index 8d84be7bdbb..1d13966dff2 100644 --- a/advisories/unreviewed/2022/05/GHSA-qjf8-cx54-8r7c/GHSA-qjf8-cx54-8r7c.json +++ b/advisories/unreviewed/2022/05/GHSA-qjf8-cx54-8r7c/GHSA-qjf8-cx54-8r7c.json @@ -7,12 +7,8 @@ "CVE-2011-2399" ], "details": "Unspecified vulnerability in the Media Management Daemon (mmd) in HP Data Protector 6.11 and earlier allows remote attackers to cause a denial of service via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qm8f-5cf9-f84f/GHSA-qm8f-5cf9-f84f.json b/advisories/unreviewed/2022/05/GHSA-qm8f-5cf9-f84f/GHSA-qm8f-5cf9-f84f.json index 255450c197c..0810bfd6909 100644 --- a/advisories/unreviewed/2022/05/GHSA-qm8f-5cf9-f84f/GHSA-qm8f-5cf9-f84f.json +++ b/advisories/unreviewed/2022/05/GHSA-qm8f-5cf9-f84f/GHSA-qm8f-5cf9-f84f.json @@ -7,12 +7,8 @@ "CVE-2011-3499" ], "details": "Progea Movicon / PowerHMI 11.2.1085 and earlier allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via an EIDP packet with a large size field, which writes a zero byte to an arbitrary memory location.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qr2h-w42m-wrfm/GHSA-qr2h-w42m-wrfm.json b/advisories/unreviewed/2022/05/GHSA-qr2h-w42m-wrfm/GHSA-qr2h-w42m-wrfm.json index 7be1d0a3e9d..bff68fa6143 100644 --- a/advisories/unreviewed/2022/05/GHSA-qr2h-w42m-wrfm/GHSA-qr2h-w42m-wrfm.json +++ b/advisories/unreviewed/2022/05/GHSA-qr2h-w42m-wrfm/GHSA-qr2h-w42m-wrfm.json @@ -7,12 +7,8 @@ "CVE-2011-3310" ], "details": "The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management Solution, Cisco Security Manager, Cisco Unified Service Monitor, Cisco Unified Operations Manager, CiscoWorks QoS Policy Manager, and CiscoWorks Voice Manager, allows remote authenticated users to execute arbitrary commands via a crafted URL, aka Bug IDs CSCtq48990, CSCtq63992, CSCtq64011, CSCtq64019, CSCtr23090, and CSCtt25535.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qr99-333m-86wc/GHSA-qr99-333m-86wc.json b/advisories/unreviewed/2022/05/GHSA-qr99-333m-86wc/GHSA-qr99-333m-86wc.json index ace3c235a03..4ffdf7babb6 100644 --- a/advisories/unreviewed/2022/05/GHSA-qr99-333m-86wc/GHSA-qr99-333m-86wc.json +++ b/advisories/unreviewed/2022/05/GHSA-qr99-333m-86wc/GHSA-qr99-333m-86wc.json @@ -7,12 +7,8 @@ "CVE-2011-2590" ], "details": "The Play method in the UUPlayer ActiveX control 6.0.0.1 in UUSee 2010 6.11.0609.2 allows remote attackers to execute arbitrary programs via a UNC share pathname in the MPlayerPath parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qrwm-9qq7-42rh/GHSA-qrwm-9qq7-42rh.json b/advisories/unreviewed/2022/05/GHSA-qrwm-9qq7-42rh/GHSA-qrwm-9qq7-42rh.json index 7b4628783a5..37884cd8d7c 100644 --- a/advisories/unreviewed/2022/05/GHSA-qrwm-9qq7-42rh/GHSA-qrwm-9qq7-42rh.json +++ b/advisories/unreviewed/2022/05/GHSA-qrwm-9qq7-42rh/GHSA-qrwm-9qq7-42rh.json @@ -7,12 +7,8 @@ "CVE-2011-2142" ], "details": "The Web Client Service in IBM Datacap Taskmaster Capture 8.0.1 before FP1 requires a cleartext password, which has unspecified impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qvff-2f5c-wmh7/GHSA-qvff-2f5c-wmh7.json b/advisories/unreviewed/2022/05/GHSA-qvff-2f5c-wmh7/GHSA-qvff-2f5c-wmh7.json index 4df2a0035c1..dc0199ab3ac 100644 --- a/advisories/unreviewed/2022/05/GHSA-qvff-2f5c-wmh7/GHSA-qvff-2f5c-wmh7.json +++ b/advisories/unreviewed/2022/05/GHSA-qvff-2f5c-wmh7/GHSA-qvff-2f5c-wmh7.json @@ -7,12 +7,8 @@ "CVE-2011-4572" ], "details": "Cross-site scripting (XSS) vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this was originally reported as a file disclosure vulnerability, but this is likely inaccurate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qw96-rp4q-cvh5/GHSA-qw96-rp4q-cvh5.json b/advisories/unreviewed/2022/05/GHSA-qw96-rp4q-cvh5/GHSA-qw96-rp4q-cvh5.json index 2188d624921..0ed065ddaec 100644 --- a/advisories/unreviewed/2022/05/GHSA-qw96-rp4q-cvh5/GHSA-qw96-rp4q-cvh5.json +++ b/advisories/unreviewed/2022/05/GHSA-qw96-rp4q-cvh5/GHSA-qw96-rp4q-cvh5.json @@ -7,12 +7,8 @@ "CVE-2010-4853" ], "details": "SQL injection vulnerability in the ccInvoices (com_ccinvoices) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a viewInv action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qwqm-44hx-62vr/GHSA-qwqm-44hx-62vr.json b/advisories/unreviewed/2022/05/GHSA-qwqm-44hx-62vr/GHSA-qwqm-44hx-62vr.json index b9dae4a3cd4..5df7e3adb05 100644 --- a/advisories/unreviewed/2022/05/GHSA-qwqm-44hx-62vr/GHSA-qwqm-44hx-62vr.json +++ b/advisories/unreviewed/2022/05/GHSA-qwqm-44hx-62vr/GHSA-qwqm-44hx-62vr.json @@ -7,12 +7,8 @@ "CVE-2011-5043" ], "details": "TomatoSoft Free Mp3 Player 1.0 allows remote attackers to cause a denial of service (application crash) via a long string in an MP3 file, possibly a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qx4f-24fj-j3x8/GHSA-qx4f-24fj-j3x8.json b/advisories/unreviewed/2022/05/GHSA-qx4f-24fj-j3x8/GHSA-qx4f-24fj-j3x8.json index 14b6adf79c5..7c9052bef40 100644 --- a/advisories/unreviewed/2022/05/GHSA-qx4f-24fj-j3x8/GHSA-qx4f-24fj-j3x8.json +++ b/advisories/unreviewed/2022/05/GHSA-qx4f-24fj-j3x8/GHSA-qx4f-24fj-j3x8.json @@ -7,12 +7,8 @@ "CVE-2011-4618" ], "details": "Cross-site scripting (XSS) vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qxmr-p3w7-v3hj/GHSA-qxmr-p3w7-v3hj.json b/advisories/unreviewed/2022/05/GHSA-qxmr-p3w7-v3hj/GHSA-qxmr-p3w7-v3hj.json index 553e080a5ed..3dc6cc84470 100644 --- a/advisories/unreviewed/2022/05/GHSA-qxmr-p3w7-v3hj/GHSA-qxmr-p3w7-v3hj.json +++ b/advisories/unreviewed/2022/05/GHSA-qxmr-p3w7-v3hj/GHSA-qxmr-p3w7-v3hj.json @@ -7,12 +7,8 @@ "CVE-2011-5028" ], "details": "Directory traversal vulnerability in novelllogmanager/FileDownload in Novell Sentinel Log Manager 1.2.0.1_938 and earlier, as used in Novell Sentinel before 7.0.1.0, allows remote authenticated users to read arbitrary files via a .. (dot dot) in the filename parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r23v-w9j8-93w7/GHSA-r23v-w9j8-93w7.json b/advisories/unreviewed/2022/05/GHSA-r23v-w9j8-93w7/GHSA-r23v-w9j8-93w7.json index c07532da046..5c2f562b846 100644 --- a/advisories/unreviewed/2022/05/GHSA-r23v-w9j8-93w7/GHSA-r23v-w9j8-93w7.json +++ b/advisories/unreviewed/2022/05/GHSA-r23v-w9j8-93w7/GHSA-r23v-w9j8-93w7.json @@ -7,12 +7,8 @@ "CVE-2010-5032" ], "details": "SQL injection vulnerability in the BF Quiz (com_bfquiztrial) component before 1.3.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a bfquiztrial action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r282-wvr4-f4q9/GHSA-r282-wvr4-f4q9.json b/advisories/unreviewed/2022/05/GHSA-r282-wvr4-f4q9/GHSA-r282-wvr4-f4q9.json index 1339ec9f9b2..bedb8926871 100644 --- a/advisories/unreviewed/2022/05/GHSA-r282-wvr4-f4q9/GHSA-r282-wvr4-f4q9.json +++ b/advisories/unreviewed/2022/05/GHSA-r282-wvr4-f4q9/GHSA-r282-wvr4-f4q9.json @@ -7,12 +7,8 @@ "CVE-2011-3511" ], "details": "Unspecified vulnerability in the Database Vault component in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, and 11.2.0.2 allows remote authenticated users to affect integrity and availability via unknown vectors related to Privileged Account.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r2j9-7pxg-f2jf/GHSA-r2j9-7pxg-f2jf.json b/advisories/unreviewed/2022/05/GHSA-r2j9-7pxg-f2jf/GHSA-r2j9-7pxg-f2jf.json index 60bb1d48301..c15f343d1bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-r2j9-7pxg-f2jf/GHSA-r2j9-7pxg-f2jf.json +++ b/advisories/unreviewed/2022/05/GHSA-r2j9-7pxg-f2jf/GHSA-r2j9-7pxg-f2jf.json @@ -7,12 +7,8 @@ "CVE-2011-4758" ], "details": "Parallels Plesk Small Business Panel 10.2.0 receives cleartext password input over HTTP, which allows remote attackers to obtain sensitive information by sniffing the network, as demonstrated by forms in smb/auth and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r2w2-2r2x-fpcx/GHSA-r2w2-2r2x-fpcx.json b/advisories/unreviewed/2022/05/GHSA-r2w2-2r2x-fpcx/GHSA-r2w2-2r2x-fpcx.json index 0cfe10c23f2..86d9f6cc30a 100644 --- a/advisories/unreviewed/2022/05/GHSA-r2w2-2r2x-fpcx/GHSA-r2w2-2r2x-fpcx.json +++ b/advisories/unreviewed/2022/05/GHSA-r2w2-2r2x-fpcx/GHSA-r2w2-2r2x-fpcx.json @@ -7,12 +7,8 @@ "CVE-2010-5103" ], "details": "SQL injection vulnerability in the list module in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated users with certain permissions to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r34w-4wfm-896r/GHSA-r34w-4wfm-896r.json b/advisories/unreviewed/2022/05/GHSA-r34w-4wfm-896r/GHSA-r34w-4wfm-896r.json index 96f8dc1f032..acb32589c66 100644 --- a/advisories/unreviewed/2022/05/GHSA-r34w-4wfm-896r/GHSA-r34w-4wfm-896r.json +++ b/advisories/unreviewed/2022/05/GHSA-r34w-4wfm-896r/GHSA-r34w-4wfm-896r.json @@ -7,12 +7,8 @@ "CVE-2011-3268" ], "details": "Buffer overflow in the crypt function in PHP before 5.3.7 allows context-dependent attackers to have an unspecified impact via a long salt argument, a different vulnerability than CVE-2011-2483.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r655-qf5q-vw86/GHSA-r655-qf5q-vw86.json b/advisories/unreviewed/2022/05/GHSA-r655-qf5q-vw86/GHSA-r655-qf5q-vw86.json index 20ccfad189f..27ff29dd846 100644 --- a/advisories/unreviewed/2022/05/GHSA-r655-qf5q-vw86/GHSA-r655-qf5q-vw86.json +++ b/advisories/unreviewed/2022/05/GHSA-r655-qf5q-vw86/GHSA-r655-qf5q-vw86.json @@ -7,12 +7,8 @@ "CVE-2010-4862" ], "details": "SQL injection vulnerability in the JExtensions JE Directory (com_jedirectory) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r6cx-xm47-5v7p/GHSA-r6cx-xm47-5v7p.json b/advisories/unreviewed/2022/05/GHSA-r6cx-xm47-5v7p/GHSA-r6cx-xm47-5v7p.json index 9e36f73cf47..ccfffaa0e99 100644 --- a/advisories/unreviewed/2022/05/GHSA-r6cx-xm47-5v7p/GHSA-r6cx-xm47-5v7p.json +++ b/advisories/unreviewed/2022/05/GHSA-r6cx-xm47-5v7p/GHSA-r6cx-xm47-5v7p.json @@ -7,12 +7,8 @@ "CVE-2011-2148" ], "details": "Admin/frmSite.aspx in the SmarterTools SmarterStats 6.0 web server allows remote attackers to execute arbitrary commands via vectors involving a leading and trailing & (ampersand) character, and (1) an STTTState cookie, (2) the ctl00%24MPH%24txtAdminNewPassword_SettingText parameter, (3) the ctl00%24MPH%24txtSmarterLogDirectory parameter, (4) the ctl00%24MPH%24ucSiteSeoSearchEngineSettings%24chklistEngines_SettingCheckBox%2414 parameter, (5) the ctl00%24MPH%24ucSiteSeoSettings%24txtSeoMaxKeywords_SettingText parameter, or (6) the ctl00_MPH_grdLogLocations_HiddenLSR parameter, related to an \"OS command injection\" issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r77j-j9wh-j3g7/GHSA-r77j-j9wh-j3g7.json b/advisories/unreviewed/2022/05/GHSA-r77j-j9wh-j3g7/GHSA-r77j-j9wh-j3g7.json index 309552c18f2..4708d5ce5ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-r77j-j9wh-j3g7/GHSA-r77j-j9wh-j3g7.json +++ b/advisories/unreviewed/2022/05/GHSA-r77j-j9wh-j3g7/GHSA-r77j-j9wh-j3g7.json @@ -7,12 +7,8 @@ "CVE-2010-4976" ], "details": "Cross-site scripting (XSS) vulnerability in search/search.php in MetInfo 3.0 allows remote attackers to inject arbitrary web script or HTML via the searchword parameter (aka Search Box field). NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r7jq-728g-6qg5/GHSA-r7jq-728g-6qg5.json b/advisories/unreviewed/2022/05/GHSA-r7jq-728g-6qg5/GHSA-r7jq-728g-6qg5.json index b92db0eb88d..2aba584bf69 100644 --- a/advisories/unreviewed/2022/05/GHSA-r7jq-728g-6qg5/GHSA-r7jq-728g-6qg5.json +++ b/advisories/unreviewed/2022/05/GHSA-r7jq-728g-6qg5/GHSA-r7jq-728g-6qg5.json @@ -7,12 +7,8 @@ "CVE-2011-2753" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in SquirrelMail 1.4.21 and earlier allow remote attackers to hijack the authentication of unspecified victims via vectors involving (1) the empty trash implementation and (2) the Index Order (aka options_order) page, a different issue than CVE-2010-4555.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r957-hf3q-v382/GHSA-r957-hf3q-v382.json b/advisories/unreviewed/2022/05/GHSA-r957-hf3q-v382/GHSA-r957-hf3q-v382.json index bb85d39e907..f3067eaa44d 100644 --- a/advisories/unreviewed/2022/05/GHSA-r957-hf3q-v382/GHSA-r957-hf3q-v382.json +++ b/advisories/unreviewed/2022/05/GHSA-r957-hf3q-v382/GHSA-r957-hf3q-v382.json @@ -7,12 +7,8 @@ "CVE-2011-3388" ], "details": "Opera before 11.51 allows remote attackers to cause an insecure site to appear secure or trusted via unspecified actions related to Extended Validation and loading content from trusted sources in an unspecified sequence that causes the address field and page information dialog to contain security information based on the trusted site, instead of the insecure site.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r9j9-35ch-fr58/GHSA-r9j9-35ch-fr58.json b/advisories/unreviewed/2022/05/GHSA-r9j9-35ch-fr58/GHSA-r9j9-35ch-fr58.json index 3673b750d7b..25f098477de 100644 --- a/advisories/unreviewed/2022/05/GHSA-r9j9-35ch-fr58/GHSA-r9j9-35ch-fr58.json +++ b/advisories/unreviewed/2022/05/GHSA-r9j9-35ch-fr58/GHSA-r9j9-35ch-fr58.json @@ -7,12 +7,8 @@ "CVE-2011-2887" ], "details": "IBM Lotus Symphony 3 before FP3 on Linux allows remote attackers to cause a denial of service (application crash) via a certain sample document.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r9x3-69v2-2pq2/GHSA-r9x3-69v2-2pq2.json b/advisories/unreviewed/2022/05/GHSA-r9x3-69v2-2pq2/GHSA-r9x3-69v2-2pq2.json index 67e43837ced..199fd752f07 100644 --- a/advisories/unreviewed/2022/05/GHSA-r9x3-69v2-2pq2/GHSA-r9x3-69v2-2pq2.json +++ b/advisories/unreviewed/2022/05/GHSA-r9x3-69v2-2pq2/GHSA-r9x3-69v2-2pq2.json @@ -7,12 +7,8 @@ "CVE-2011-3171" ], "details": "Directory traversal vulnerability in pure-FTPd 1.0.22 and possibly other versions, when running on SUSE Linux Enterprise Server and possibly other operating systems, when the Netware OES remote server feature is enabled, allows local users to overwrite arbitrary files via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rccw-f2p8-cj94/GHSA-rccw-f2p8-cj94.json b/advisories/unreviewed/2022/05/GHSA-rccw-f2p8-cj94/GHSA-rccw-f2p8-cj94.json index dfe86876a13..1d3cbd3ac1e 100644 --- a/advisories/unreviewed/2022/05/GHSA-rccw-f2p8-cj94/GHSA-rccw-f2p8-cj94.json +++ b/advisories/unreviewed/2022/05/GHSA-rccw-f2p8-cj94/GHSA-rccw-f2p8-cj94.json @@ -7,12 +7,8 @@ "CVE-2011-3290" ], "details": "Cisco Identity Services Engine (ISE) before 1.0.4.MR2 has default Oracle database credentials, which allows remote attackers to modify settings or perform unspecified other administrative actions via unknown vectors, aka Bug ID CSCts59135.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rcjr-w794-6fgv/GHSA-rcjr-w794-6fgv.json b/advisories/unreviewed/2022/05/GHSA-rcjr-w794-6fgv/GHSA-rcjr-w794-6fgv.json index aebafe543ff..4148ccf4300 100644 --- a/advisories/unreviewed/2022/05/GHSA-rcjr-w794-6fgv/GHSA-rcjr-w794-6fgv.json +++ b/advisories/unreviewed/2022/05/GHSA-rcjr-w794-6fgv/GHSA-rcjr-w794-6fgv.json @@ -7,12 +7,8 @@ "CVE-2011-4562" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in (1) view/admin/log_item.php and (2) view/admin/log_item_details.php in the Redirection plugin 2.2.9 for WordPress allow remote attackers to inject arbitrary web script or HTML via the Referer HTTP header in a request to a post that does not exist.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rcmf-8662-8659/GHSA-rcmf-8662-8659.json b/advisories/unreviewed/2022/05/GHSA-rcmf-8662-8659/GHSA-rcmf-8662-8659.json index ca8039debb3..4ec0bf3f817 100644 --- a/advisories/unreviewed/2022/05/GHSA-rcmf-8662-8659/GHSA-rcmf-8662-8659.json +++ b/advisories/unreviewed/2022/05/GHSA-rcmf-8662-8659/GHSA-rcmf-8662-8659.json @@ -7,12 +7,8 @@ "CVE-2010-5056" ], "details": "SQL injection vulnerability in the GBU Facebook (com_gbufacebook) component 1.0.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the face_id parameter in a show_face action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rf2x-23jg-qfw8/GHSA-rf2x-23jg-qfw8.json b/advisories/unreviewed/2022/05/GHSA-rf2x-23jg-qfw8/GHSA-rf2x-23jg-qfw8.json index bf2f94cbd96..5b6b9e65fea 100644 --- a/advisories/unreviewed/2022/05/GHSA-rf2x-23jg-qfw8/GHSA-rf2x-23jg-qfw8.json +++ b/advisories/unreviewed/2022/05/GHSA-rf2x-23jg-qfw8/GHSA-rf2x-23jg-qfw8.json @@ -7,12 +7,8 @@ "CVE-2011-5033" ], "details": "Stack-based buffer overflow in CFS.c in ConfigServer Security & Firewall (CSF) before 5.43, when running on a DirectAdmin server, allows local users to cause a denial of service (crash) via a long string in an admin.list file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rf5x-mjpc-j2v3/GHSA-rf5x-mjpc-j2v3.json b/advisories/unreviewed/2022/05/GHSA-rf5x-mjpc-j2v3/GHSA-rf5x-mjpc-j2v3.json index 1499197b67c..7f68d64031b 100644 --- a/advisories/unreviewed/2022/05/GHSA-rf5x-mjpc-j2v3/GHSA-rf5x-mjpc-j2v3.json +++ b/advisories/unreviewed/2022/05/GHSA-rf5x-mjpc-j2v3/GHSA-rf5x-mjpc-j2v3.json @@ -7,12 +7,8 @@ "CVE-2011-2652" ], "details": "Cross-site scripting (XSS) vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to inject arbitrary web script or HTML via a crafted archive file list that is used in an overlay file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rf63-m5wx-6gp4/GHSA-rf63-m5wx-6gp4.json b/advisories/unreviewed/2022/05/GHSA-rf63-m5wx-6gp4/GHSA-rf63-m5wx-6gp4.json index 58eb82e1a2c..d69016e949c 100644 --- a/advisories/unreviewed/2022/05/GHSA-rf63-m5wx-6gp4/GHSA-rf63-m5wx-6gp4.json +++ b/advisories/unreviewed/2022/05/GHSA-rf63-m5wx-6gp4/GHSA-rf63-m5wx-6gp4.json @@ -7,12 +7,8 @@ "CVE-2010-5007" ], "details": "Cross-site scripting (XSS) vulnerability in pages/match_report.php in UTStats Beta 4 and earlier allows remote attackers to inject arbitrary web script or HTML via the mid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rf76-665v-7cww/GHSA-rf76-665v-7cww.json b/advisories/unreviewed/2022/05/GHSA-rf76-665v-7cww/GHSA-rf76-665v-7cww.json index 60c2464e106..dddb34bdcaf 100644 --- a/advisories/unreviewed/2022/05/GHSA-rf76-665v-7cww/GHSA-rf76-665v-7cww.json +++ b/advisories/unreviewed/2022/05/GHSA-rf76-665v-7cww/GHSA-rf76-665v-7cww.json @@ -7,12 +7,8 @@ "CVE-2011-3996" ], "details": "The LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of service (service crash) via crafted TCP packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rfcr-9c2p-h4c8/GHSA-rfcr-9c2p-h4c8.json b/advisories/unreviewed/2022/05/GHSA-rfcr-9c2p-h4c8/GHSA-rfcr-9c2p-h4c8.json index d798451f0f5..7b6247fd4b9 100644 --- a/advisories/unreviewed/2022/05/GHSA-rfcr-9c2p-h4c8/GHSA-rfcr-9c2p-h4c8.json +++ b/advisories/unreviewed/2022/05/GHSA-rfcr-9c2p-h4c8/GHSA-rfcr-9c2p-h4c8.json @@ -7,12 +7,8 @@ "CVE-2010-4813" ], "details": "Cross-site scripting (XSS) vulnerability in the Category Tokens module 6.x before 6.x-1.1 for Drupal allows remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML by editing or creating vocabulary names, which are not properly handled in token help.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rghm-q8pm-jc87/GHSA-rghm-q8pm-jc87.json b/advisories/unreviewed/2022/05/GHSA-rghm-q8pm-jc87/GHSA-rghm-q8pm-jc87.json index cd358ea3829..630734d8019 100644 --- a/advisories/unreviewed/2022/05/GHSA-rghm-q8pm-jc87/GHSA-rghm-q8pm-jc87.json +++ b/advisories/unreviewed/2022/05/GHSA-rghm-q8pm-jc87/GHSA-rghm-q8pm-jc87.json @@ -7,12 +7,8 @@ "CVE-2011-3013" ], "details": "WebAdmin in the Mobility Pack before 1.2 in Novell Data Synchronizer 1.x through 1.1.2 build 428 supports weak SSL ciphers, which makes it easier for remote attackers to obtain access via a brute-force attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rgmc-976m-f6cm/GHSA-rgmc-976m-f6cm.json b/advisories/unreviewed/2022/05/GHSA-rgmc-976m-f6cm/GHSA-rgmc-976m-f6cm.json index c35c98bcffb..57bcd2c0130 100644 --- a/advisories/unreviewed/2022/05/GHSA-rgmc-976m-f6cm/GHSA-rgmc-976m-f6cm.json +++ b/advisories/unreviewed/2022/05/GHSA-rgmc-976m-f6cm/GHSA-rgmc-976m-f6cm.json @@ -7,12 +7,8 @@ "CVE-2011-5103" ], "details": "SQL injection vulnerability in Alurian Prismotube PHP Video Script allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rgmc-q3r4-jxvv/GHSA-rgmc-q3r4-jxvv.json b/advisories/unreviewed/2022/05/GHSA-rgmc-q3r4-jxvv/GHSA-rgmc-q3r4-jxvv.json index e899729f07f..ac918a43d60 100644 --- a/advisories/unreviewed/2022/05/GHSA-rgmc-q3r4-jxvv/GHSA-rgmc-q3r4-jxvv.json +++ b/advisories/unreviewed/2022/05/GHSA-rgmc-q3r4-jxvv/GHSA-rgmc-q3r4-jxvv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rj59-cf5w-pg45/GHSA-rj59-cf5w-pg45.json b/advisories/unreviewed/2022/05/GHSA-rj59-cf5w-pg45/GHSA-rj59-cf5w-pg45.json index 2b342ff4a13..4a3d2abfdcc 100644 --- a/advisories/unreviewed/2022/05/GHSA-rj59-cf5w-pg45/GHSA-rj59-cf5w-pg45.json +++ b/advisories/unreviewed/2022/05/GHSA-rj59-cf5w-pg45/GHSA-rj59-cf5w-pg45.json @@ -7,12 +7,8 @@ "CVE-2011-2595" ], "details": "Multiple stack-based buffer overflows in ACDSee FotoSlate 4.0 Build 146 allow remote attackers to execute arbitrary code via a long id parameter in a (1) String or (2) Int tag in a FotoSlate Project (aka PLP) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rj6g-x922-phvr/GHSA-rj6g-x922-phvr.json b/advisories/unreviewed/2022/05/GHSA-rj6g-x922-phvr/GHSA-rj6g-x922-phvr.json index 8c3e587b29d..de510bffeee 100644 --- a/advisories/unreviewed/2022/05/GHSA-rj6g-x922-phvr/GHSA-rj6g-x922-phvr.json +++ b/advisories/unreviewed/2022/05/GHSA-rj6g-x922-phvr/GHSA-rj6g-x922-phvr.json @@ -7,12 +7,8 @@ "CVE-2011-3770" ], "details": "phpAlbum 0.4.1.14 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Flowing_Dark/parameters.tpl.php and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rj92-74hp-v94j/GHSA-rj92-74hp-v94j.json b/advisories/unreviewed/2022/05/GHSA-rj92-74hp-v94j/GHSA-rj92-74hp-v94j.json index d6455fdf12b..e0e1136ea4a 100644 --- a/advisories/unreviewed/2022/05/GHSA-rj92-74hp-v94j/GHSA-rj92-74hp-v94j.json +++ b/advisories/unreviewed/2022/05/GHSA-rj92-74hp-v94j/GHSA-rj92-74hp-v94j.json @@ -7,12 +7,8 @@ "CVE-2011-5012" ], "details": "Heap-based buffer overflow in the Reflection FTP Client (rftpcom.dll 7.2.0.106 and possibly other versions), as used in Attachmate Reflection 2008, Reflection 2011 R1 before 15.3.2.569 and R1 SP1 before, Reflection 2011 R2 before 15.4.1.327, Reflection Windows Client 7.2 SP1 before hotfix 7.2.1186, and Reflection 14.1 SP1 before 14.1.1.206, allows remote FTP servers to execute arbitrary code via a long directory name in a response to a LIST command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rjc8-5j75-hc4m/GHSA-rjc8-5j75-hc4m.json b/advisories/unreviewed/2022/05/GHSA-rjc8-5j75-hc4m/GHSA-rjc8-5j75-hc4m.json index ec77160f9f4..1d32db8c70f 100644 --- a/advisories/unreviewed/2022/05/GHSA-rjc8-5j75-hc4m/GHSA-rjc8-5j75-hc4m.json +++ b/advisories/unreviewed/2022/05/GHSA-rjc8-5j75-hc4m/GHSA-rjc8-5j75-hc4m.json @@ -7,12 +7,8 @@ "CVE-2011-2402" ], "details": "Cross-site scripting (XSS) vulnerability in HP Network Automation 7.2x, 7.5x, 7.6x, 9.0, and 9.10 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rmjj-h2v7-rx4f/GHSA-rmjj-h2v7-rx4f.json b/advisories/unreviewed/2022/05/GHSA-rmjj-h2v7-rx4f/GHSA-rmjj-h2v7-rx4f.json index bb44e4ffa12..b0eca5c0cd6 100644 --- a/advisories/unreviewed/2022/05/GHSA-rmjj-h2v7-rx4f/GHSA-rmjj-h2v7-rx4f.json +++ b/advisories/unreviewed/2022/05/GHSA-rmjj-h2v7-rx4f/GHSA-rmjj-h2v7-rx4f.json @@ -7,12 +7,8 @@ "CVE-2011-3763" ], "details": "OpenCart 1.4.9.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by system/startup.php and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rmqc-wfjm-3f66/GHSA-rmqc-wfjm-3f66.json b/advisories/unreviewed/2022/05/GHSA-rmqc-wfjm-3f66/GHSA-rmqc-wfjm-3f66.json index ec05c548740..0156bf961d0 100644 --- a/advisories/unreviewed/2022/05/GHSA-rmqc-wfjm-3f66/GHSA-rmqc-wfjm-3f66.json +++ b/advisories/unreviewed/2022/05/GHSA-rmqc-wfjm-3f66/GHSA-rmqc-wfjm-3f66.json @@ -7,12 +7,8 @@ "CVE-2010-5101" ], "details": "Directory traversal vulnerability in the TypoScript setup in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote authenticated administrators to read arbitrary files via unspecified vectors related to the \"file inclusion functionality.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rp88-j665-jvwh/GHSA-rp88-j665-jvwh.json b/advisories/unreviewed/2022/05/GHSA-rp88-j665-jvwh/GHSA-rp88-j665-jvwh.json index 3b48d3b89cd..dcfa38a8be7 100644 --- a/advisories/unreviewed/2022/05/GHSA-rp88-j665-jvwh/GHSA-rp88-j665-jvwh.json +++ b/advisories/unreviewed/2022/05/GHSA-rp88-j665-jvwh/GHSA-rp88-j665-jvwh.json @@ -7,12 +7,8 @@ "CVE-2011-2401" ], "details": "Session fixation vulnerability in HP SiteScope 9.x, 10.x, and 11.x allows remote attackers to hijack web sessions via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rpq3-2qq4-r4qg/GHSA-rpq3-2qq4-r4qg.json b/advisories/unreviewed/2022/05/GHSA-rpq3-2qq4-r4qg/GHSA-rpq3-2qq4-r4qg.json index d381a39b2ee..835847e8fe1 100644 --- a/advisories/unreviewed/2022/05/GHSA-rpq3-2qq4-r4qg/GHSA-rpq3-2qq4-r4qg.json +++ b/advisories/unreviewed/2022/05/GHSA-rpq3-2qq4-r4qg/GHSA-rpq3-2qq4-r4qg.json @@ -7,12 +7,8 @@ "CVE-2011-2944" ], "details": "SQL injection vulnerability in login.php in MegaLab The Uploader before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the username parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rprv-6v5q-v335/GHSA-rprv-6v5q-v335.json b/advisories/unreviewed/2022/05/GHSA-rprv-6v5q-v335/GHSA-rprv-6v5q-v335.json index e12b8eb4fd3..6b038b4c8f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-rprv-6v5q-v335/GHSA-rprv-6v5q-v335.json +++ b/advisories/unreviewed/2022/05/GHSA-rprv-6v5q-v335/GHSA-rprv-6v5q-v335.json @@ -7,12 +7,8 @@ "CVE-2010-5009" ], "details": "SQL injection vulnerability in index.php in UTStats Beta 4 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter in a matchp action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rqg4-4rwm-g829/GHSA-rqg4-4rwm-g829.json b/advisories/unreviewed/2022/05/GHSA-rqg4-4rwm-g829/GHSA-rqg4-4rwm-g829.json index 39354605da5..23987f163b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-rqg4-4rwm-g829/GHSA-rqg4-4rwm-g829.json +++ b/advisories/unreviewed/2022/05/GHSA-rqg4-4rwm-g829/GHSA-rqg4-4rwm-g829.json @@ -7,12 +7,8 @@ "CVE-2011-4026" ], "details": "SQL injection vulnerability in thanks.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rqrq-h4pg-97gf/GHSA-rqrq-h4pg-97gf.json b/advisories/unreviewed/2022/05/GHSA-rqrq-h4pg-97gf/GHSA-rqrq-h4pg-97gf.json index b9ffb107a19..f7b2dacd835 100644 --- a/advisories/unreviewed/2022/05/GHSA-rqrq-h4pg-97gf/GHSA-rqrq-h4pg-97gf.json +++ b/advisories/unreviewed/2022/05/GHSA-rqrq-h4pg-97gf/GHSA-rqrq-h4pg-97gf.json @@ -7,12 +7,8 @@ "CVE-2010-4810" ], "details": "Multiple PHP remote file inclusion vulnerabilities in AR Web Content Manager (AWCM) 2.1 final allow remote attackers to execute arbitrary PHP code via a URL in the theme_file parameter to (1) includes/window_top.php and (2) header.php, and the (3) lang_file parameter to control/common.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rrm5-5c6m-75m4/GHSA-rrm5-5c6m-75m4.json b/advisories/unreviewed/2022/05/GHSA-rrm5-5c6m-75m4/GHSA-rrm5-5c6m-75m4.json index 8905e50ef40..d6d664dd7af 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrm5-5c6m-75m4/GHSA-rrm5-5c6m-75m4.json +++ b/advisories/unreviewed/2022/05/GHSA-rrm5-5c6m-75m4/GHSA-rrm5-5c6m-75m4.json @@ -7,12 +7,8 @@ "CVE-2011-2978" ], "details": "Bugzilla 2.16rc1 through 2.22.7, 3.0.x through 3.3.x, 3.4.x before 3.4.12, 3.5.x, 3.6.x before 3.6.6, 3.7.x, 4.0.x before 4.0.2, and 4.1.x before 4.1.3 does not prevent changes to the confirmation e-mail address (aka old_email field) for e-mail change notifications, which makes it easier for remote attackers to perform arbitrary address changes by leveraging an unattended workstation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rrqm-hcmh-g838/GHSA-rrqm-hcmh-g838.json b/advisories/unreviewed/2022/05/GHSA-rrqm-hcmh-g838/GHSA-rrqm-hcmh-g838.json index 4760a9d4776..d0d961522cc 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrqm-hcmh-g838/GHSA-rrqm-hcmh-g838.json +++ b/advisories/unreviewed/2022/05/GHSA-rrqm-hcmh-g838/GHSA-rrqm-hcmh-g838.json @@ -7,12 +7,8 @@ "CVE-2011-2154" ], "details": "login.aspx in the SmarterTools SmarterStats 6.0 web server does not include the HTTPOnly flag in a Set-Cookie header for the loginsettings cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rv3f-2486-2ghr/GHSA-rv3f-2486-2ghr.json b/advisories/unreviewed/2022/05/GHSA-rv3f-2486-2ghr/GHSA-rv3f-2486-2ghr.json index 9308d99390f..943e0a5f61d 100644 --- a/advisories/unreviewed/2022/05/GHSA-rv3f-2486-2ghr/GHSA-rv3f-2486-2ghr.json +++ b/advisories/unreviewed/2022/05/GHSA-rv3f-2486-2ghr/GHSA-rv3f-2486-2ghr.json @@ -7,12 +7,8 @@ "CVE-2010-4944" ], "details": "SQL injection vulnerability in the Elite Experts (com_elite_experts) component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showExpertProfileDetailed action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rv8m-qq6g-85f6/GHSA-rv8m-qq6g-85f6.json b/advisories/unreviewed/2022/05/GHSA-rv8m-qq6g-85f6/GHSA-rv8m-qq6g-85f6.json index d4608c15fbf..9b36d51cbc8 100644 --- a/advisories/unreviewed/2022/05/GHSA-rv8m-qq6g-85f6/GHSA-rv8m-qq6g-85f6.json +++ b/advisories/unreviewed/2022/05/GHSA-rv8m-qq6g-85f6/GHSA-rv8m-qq6g-85f6.json @@ -7,12 +7,8 @@ "CVE-2011-3230" ], "details": "Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitrary code via a crafted web site.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rvj7-385c-6579/GHSA-rvj7-385c-6579.json b/advisories/unreviewed/2022/05/GHSA-rvj7-385c-6579/GHSA-rvj7-385c-6579.json index 98e78c85c46..7b6e4e7caa1 100644 --- a/advisories/unreviewed/2022/05/GHSA-rvj7-385c-6579/GHSA-rvj7-385c-6579.json +++ b/advisories/unreviewed/2022/05/GHSA-rvj7-385c-6579/GHSA-rvj7-385c-6579.json @@ -7,12 +7,8 @@ "CVE-2011-3294" ], "details": "Cross-site scripting (XSS) vulnerability in the login page in the administrative interface on Cisco TelePresence Video Communication Servers (VCS) with software before X7.0 allows remote attackers to inject arbitrary web script or HTML via the User-Agent HTTP header, aka Bug ID CSCts80342.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rwpg-63qw-hjwj/GHSA-rwpg-63qw-hjwj.json b/advisories/unreviewed/2022/05/GHSA-rwpg-63qw-hjwj/GHSA-rwpg-63qw-hjwj.json index 635db2ebda4..4b3693fa1c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-rwpg-63qw-hjwj/GHSA-rwpg-63qw-hjwj.json +++ b/advisories/unreviewed/2022/05/GHSA-rwpg-63qw-hjwj/GHSA-rwpg-63qw-hjwj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rwvf-hg32-j97c/GHSA-rwvf-hg32-j97c.json b/advisories/unreviewed/2022/05/GHSA-rwvf-hg32-j97c/GHSA-rwvf-hg32-j97c.json index 03bbf4007ed..ca497da1352 100644 --- a/advisories/unreviewed/2022/05/GHSA-rwvf-hg32-j97c/GHSA-rwvf-hg32-j97c.json +++ b/advisories/unreviewed/2022/05/GHSA-rwvf-hg32-j97c/GHSA-rwvf-hg32-j97c.json @@ -7,12 +7,8 @@ "CVE-2010-4812" ], "details": "Multiple SQL injection vulnerabilities in 6kbbs 8.0 build 20100901 allow remote attackers to execute arbitrary SQL commands via the (1) tids[] parameter to ajaxadmin.php and the (2) msgids[] parameter to ajaxmember.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rww2-jw3v-q88c/GHSA-rww2-jw3v-q88c.json b/advisories/unreviewed/2022/05/GHSA-rww2-jw3v-q88c/GHSA-rww2-jw3v-q88c.json index 263dfdc3f32..e87424a2356 100644 --- a/advisories/unreviewed/2022/05/GHSA-rww2-jw3v-q88c/GHSA-rww2-jw3v-q88c.json +++ b/advisories/unreviewed/2022/05/GHSA-rww2-jw3v-q88c/GHSA-rww2-jw3v-q88c.json @@ -7,12 +7,8 @@ "CVE-2011-2940" ], "details": "stunnel 4.40 and 4.41 might allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v2h4-whw2-pm3g/GHSA-v2h4-whw2-pm3g.json b/advisories/unreviewed/2022/05/GHSA-v2h4-whw2-pm3g/GHSA-v2h4-whw2-pm3g.json index 5a90bb7ea93..2648dbe195b 100644 --- a/advisories/unreviewed/2022/05/GHSA-v2h4-whw2-pm3g/GHSA-v2h4-whw2-pm3g.json +++ b/advisories/unreviewed/2022/05/GHSA-v2h4-whw2-pm3g/GHSA-v2h4-whw2-pm3g.json @@ -7,12 +7,8 @@ "CVE-2011-2606" ], "details": "Cross-site scripting (XSS) vulnerability in the Web UI in IBM Rational Team Concert (RTC) 3.0 allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Work Item 165511.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v2qv-37fh-hjmr/GHSA-v2qv-37fh-hjmr.json b/advisories/unreviewed/2022/05/GHSA-v2qv-37fh-hjmr/GHSA-v2qv-37fh-hjmr.json index d39f3611476..9e4b862b016 100644 --- a/advisories/unreviewed/2022/05/GHSA-v2qv-37fh-hjmr/GHSA-v2qv-37fh-hjmr.json +++ b/advisories/unreviewed/2022/05/GHSA-v2qv-37fh-hjmr/GHSA-v2qv-37fh-hjmr.json @@ -7,12 +7,8 @@ "CVE-2011-4875" ], "details": "Stack-based buffer overflow in HmiLoad in the runtime loader in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime, when Transfer Mode is enabled, allows remote attackers to execute arbitrary code via vectors related to Unicode strings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v2w7-x4pf-f76q/GHSA-v2w7-x4pf-f76q.json b/advisories/unreviewed/2022/05/GHSA-v2w7-x4pf-f76q/GHSA-v2w7-x4pf-f76q.json index 0ea7bf59b8e..d9a98fb1d47 100644 --- a/advisories/unreviewed/2022/05/GHSA-v2w7-x4pf-f76q/GHSA-v2w7-x4pf-f76q.json +++ b/advisories/unreviewed/2022/05/GHSA-v2w7-x4pf-f76q/GHSA-v2w7-x4pf-f76q.json @@ -7,12 +7,8 @@ "CVE-2010-5078" ], "details": "SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain version information via a direct request to (1) apphire/silverstripe_version or (2) cms/silverstripe_version.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v3pg-5gjp-xvr4/GHSA-v3pg-5gjp-xvr4.json b/advisories/unreviewed/2022/05/GHSA-v3pg-5gjp-xvr4/GHSA-v3pg-5gjp-xvr4.json index 79bd439f4bf..657b6e326cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-v3pg-5gjp-xvr4/GHSA-v3pg-5gjp-xvr4.json +++ b/advisories/unreviewed/2022/05/GHSA-v3pg-5gjp-xvr4/GHSA-v3pg-5gjp-xvr4.json @@ -7,12 +7,8 @@ "CVE-2011-2128" ], "details": "Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2114, CVE-2011-2117, CVE-2011-2124, and CVE-2011-2127.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v47w-64g8-ggfh/GHSA-v47w-64g8-ggfh.json b/advisories/unreviewed/2022/05/GHSA-v47w-64g8-ggfh/GHSA-v47w-64g8-ggfh.json index 738ddb24f48..2c5fb68d61b 100644 --- a/advisories/unreviewed/2022/05/GHSA-v47w-64g8-ggfh/GHSA-v47w-64g8-ggfh.json +++ b/advisories/unreviewed/2022/05/GHSA-v47w-64g8-ggfh/GHSA-v47w-64g8-ggfh.json @@ -7,12 +7,8 @@ "CVE-2011-2089" ], "details": "Stack-based buffer overflow in the SetActiveXGUID method in the VersionInfo ActiveX control in GenVersion.dll 8.0.138.0 in the WebHMI subsystem in ICONICS BizViz 9.x before 9.22 and GENESIS32 9.x before 9.22 allows remote attackers to execute arbitrary code via a long string in the argument. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v6gv-j226-r8h6/GHSA-v6gv-j226-r8h6.json b/advisories/unreviewed/2022/05/GHSA-v6gv-j226-r8h6/GHSA-v6gv-j226-r8h6.json index e7fe6150afc..219e539edf5 100644 --- a/advisories/unreviewed/2022/05/GHSA-v6gv-j226-r8h6/GHSA-v6gv-j226-r8h6.json +++ b/advisories/unreviewed/2022/05/GHSA-v6gv-j226-r8h6/GHSA-v6gv-j226-r8h6.json @@ -7,12 +7,8 @@ "CVE-2010-4808" ], "details": "SQL injection vulnerability in index.php in Webmatic allows remote attackers to execute arbitrary SQL commands via the p parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v6hj-x5j8-fw7q/GHSA-v6hj-x5j8-fw7q.json b/advisories/unreviewed/2022/05/GHSA-v6hj-x5j8-fw7q/GHSA-v6hj-x5j8-fw7q.json index f23a974109f..a91aa8adf6d 100644 --- a/advisories/unreviewed/2022/05/GHSA-v6hj-x5j8-fw7q/GHSA-v6hj-x5j8-fw7q.json +++ b/advisories/unreviewed/2022/05/GHSA-v6hj-x5j8-fw7q/GHSA-v6hj-x5j8-fw7q.json @@ -7,12 +7,8 @@ "CVE-2011-4762" ], "details": "Parallels Plesk Small Business Panel 10.2.0 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving smb/app/top-categories-data/ and certain other files. NOTE: it is possible that only clients, not the SmarterStats product, could be affected by this issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v7gj-734h-hv4r/GHSA-v7gj-734h-hv4r.json b/advisories/unreviewed/2022/05/GHSA-v7gj-734h-hv4r/GHSA-v7gj-734h-hv4r.json index 39bfc26173b..3d564c860e6 100644 --- a/advisories/unreviewed/2022/05/GHSA-v7gj-734h-hv4r/GHSA-v7gj-734h-hv4r.json +++ b/advisories/unreviewed/2022/05/GHSA-v7gj-734h-hv4r/GHSA-v7gj-734h-hv4r.json @@ -7,12 +7,8 @@ "CVE-2011-3529" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.0 and 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Talent Acquisition Manager.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v84m-2gvh-22v5/GHSA-v84m-2gvh-22v5.json b/advisories/unreviewed/2022/05/GHSA-v84m-2gvh-22v5/GHSA-v84m-2gvh-22v5.json index d1818d881c2..02d2ed722c2 100644 --- a/advisories/unreviewed/2022/05/GHSA-v84m-2gvh-22v5/GHSA-v84m-2gvh-22v5.json +++ b/advisories/unreviewed/2022/05/GHSA-v84m-2gvh-22v5/GHSA-v84m-2gvh-22v5.json @@ -7,12 +7,8 @@ "CVE-2011-3982" ], "details": "The Fibre Channel driver for QLogic adapters in IBM AIX 6.1 and 7.1 does not properly handle DMA resource limitations, which allows local users to cause a denial of service (system hang) via vectors that generate a large amount of DMA I/O, related to a deadlock in timer processing across CPUs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v84q-7wpx-xmg8/GHSA-v84q-7wpx-xmg8.json b/advisories/unreviewed/2022/05/GHSA-v84q-7wpx-xmg8/GHSA-v84q-7wpx-xmg8.json index 73f7c02e734..52a084a61e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-v84q-7wpx-xmg8/GHSA-v84q-7wpx-xmg8.json +++ b/advisories/unreviewed/2022/05/GHSA-v84q-7wpx-xmg8/GHSA-v84q-7wpx-xmg8.json @@ -7,12 +7,8 @@ "CVE-2011-5011" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in xt:Commerce 3.0.4 SP2.1 and possibly earlier allow remote attackers to hijack the authentication of Admins for requests that (1) set a New user to Admin via the cID parameter to a statusconfirm action in admin/customers.php and (2) grant permissions to users via the cID parameter to a save action in admin/accounting.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v8xr-94gx-8pcp/GHSA-v8xr-94gx-8pcp.json b/advisories/unreviewed/2022/05/GHSA-v8xr-94gx-8pcp/GHSA-v8xr-94gx-8pcp.json index 2a8256e9032..6b78b304312 100644 --- a/advisories/unreviewed/2022/05/GHSA-v8xr-94gx-8pcp/GHSA-v8xr-94gx-8pcp.json +++ b/advisories/unreviewed/2022/05/GHSA-v8xr-94gx-8pcp/GHSA-v8xr-94gx-8pcp.json @@ -7,12 +7,8 @@ "CVE-2011-4947" ], "details": "Cross-site request forgery (CSRF) vulnerability in e107_admin/users_extended.php in e107 before 0.7.26 allows remote attackers to hijack the authentication of administrators for requests that insert cross-site scripting (XSS) sequences via the user_include parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v9cm-xcfc-8942/GHSA-v9cm-xcfc-8942.json b/advisories/unreviewed/2022/05/GHSA-v9cm-xcfc-8942/GHSA-v9cm-xcfc-8942.json index 484adac5281..6b6e048e31a 100644 --- a/advisories/unreviewed/2022/05/GHSA-v9cm-xcfc-8942/GHSA-v9cm-xcfc-8942.json +++ b/advisories/unreviewed/2022/05/GHSA-v9cm-xcfc-8942/GHSA-v9cm-xcfc-8942.json @@ -7,12 +7,8 @@ "CVE-2011-2166" ], "details": "script-login in Dovecot 2.0.x before 2.0.13 does not follow the user and group configuration settings, which might allow remote authenticated users to bypass intended access restrictions by leveraging a script.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vc3m-m55j-xc82/GHSA-vc3m-m55j-xc82.json b/advisories/unreviewed/2022/05/GHSA-vc3m-m55j-xc82/GHSA-vc3m-m55j-xc82.json index 55803340272..7400f9ed314 100644 --- a/advisories/unreviewed/2022/05/GHSA-vc3m-m55j-xc82/GHSA-vc3m-m55j-xc82.json +++ b/advisories/unreviewed/2022/05/GHSA-vc3m-m55j-xc82/GHSA-vc3m-m55j-xc82.json @@ -7,12 +7,8 @@ "CVE-2010-5035" ], "details": "Cross-site scripting (XSS) vulnerability in search.php in iScripts eSwap 2.0 allows remote attackers to inject arbitrary web script or HTML via the txtHomeSearch parameter (aka the search field). NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vc63-3jgp-qx5q/GHSA-vc63-3jgp-qx5q.json b/advisories/unreviewed/2022/05/GHSA-vc63-3jgp-qx5q/GHSA-vc63-3jgp-qx5q.json index 9767f0f3e9c..98dca11f794 100644 --- a/advisories/unreviewed/2022/05/GHSA-vc63-3jgp-qx5q/GHSA-vc63-3jgp-qx5q.json +++ b/advisories/unreviewed/2022/05/GHSA-vc63-3jgp-qx5q/GHSA-vc63-3jgp-qx5q.json @@ -7,12 +7,8 @@ "CVE-2011-3126" ], "details": "WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 allows remote attackers to determine usernames of non-authors via canonical redirects.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vc8p-pj3m-8xpw/GHSA-vc8p-pj3m-8xpw.json b/advisories/unreviewed/2022/05/GHSA-vc8p-pj3m-8xpw/GHSA-vc8p-pj3m-8xpw.json index 33d427c0d01..67b4a36a5bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-vc8p-pj3m-8xpw/GHSA-vc8p-pj3m-8xpw.json +++ b/advisories/unreviewed/2022/05/GHSA-vc8p-pj3m-8xpw/GHSA-vc8p-pj3m-8xpw.json @@ -7,12 +7,8 @@ "CVE-2011-3267" ], "details": "PHP before 5.3.7 does not properly implement the error_log function, which allows context-dependent attackers to cause a denial of service (application crash) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vccv-jvww-6xgw/GHSA-vccv-jvww-6xgw.json b/advisories/unreviewed/2022/05/GHSA-vccv-jvww-6xgw/GHSA-vccv-jvww-6xgw.json index d67f70805ed..0024106adab 100644 --- a/advisories/unreviewed/2022/05/GHSA-vccv-jvww-6xgw/GHSA-vccv-jvww-6xgw.json +++ b/advisories/unreviewed/2022/05/GHSA-vccv-jvww-6xgw/GHSA-vccv-jvww-6xgw.json @@ -7,12 +7,8 @@ "CVE-2011-4066" ], "details": "SQL injection vulnerability in bbs/tb.php in Gnuboard 4.33.02 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vf9p-cxhq-wvrh/GHSA-vf9p-cxhq-wvrh.json b/advisories/unreviewed/2022/05/GHSA-vf9p-cxhq-wvrh/GHSA-vf9p-cxhq-wvrh.json index 7d42fb29183..a74dd818d41 100644 --- a/advisories/unreviewed/2022/05/GHSA-vf9p-cxhq-wvrh/GHSA-vf9p-cxhq-wvrh.json +++ b/advisories/unreviewed/2022/05/GHSA-vf9p-cxhq-wvrh/GHSA-vf9p-cxhq-wvrh.json @@ -7,12 +7,8 @@ "CVE-2010-4919" ], "details": "SQL injection vulnerability in detail.asp in Micronetsoft RV Dealer Website 1.0 allows remote attackers to execute arbitrary SQL commands via the vehicletypeID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vfm4-3xm4-c9rr/GHSA-vfm4-3xm4-c9rr.json b/advisories/unreviewed/2022/05/GHSA-vfm4-3xm4-c9rr/GHSA-vfm4-3xm4-c9rr.json index 37b31dbbf16..e8969b22ebf 100644 --- a/advisories/unreviewed/2022/05/GHSA-vfm4-3xm4-c9rr/GHSA-vfm4-3xm4-c9rr.json +++ b/advisories/unreviewed/2022/05/GHSA-vfm4-3xm4-c9rr/GHSA-vfm4-3xm4-c9rr.json @@ -7,12 +7,8 @@ "CVE-2011-3127" ], "details": "WordPress 3.1 before 3.1.3 and 3.2 before Beta 2 does not prevent rendering for (1) admin or (2) login pages inside a frame in a third-party HTML document, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vg8p-24vc-4rfh/GHSA-vg8p-24vc-4rfh.json b/advisories/unreviewed/2022/05/GHSA-vg8p-24vc-4rfh/GHSA-vg8p-24vc-4rfh.json index d7f406bf957..9611f0bf08f 100644 --- a/advisories/unreviewed/2022/05/GHSA-vg8p-24vc-4rfh/GHSA-vg8p-24vc-4rfh.json +++ b/advisories/unreviewed/2022/05/GHSA-vg8p-24vc-4rfh/GHSA-vg8p-24vc-4rfh.json @@ -7,12 +7,8 @@ "CVE-2011-4784" ], "details": "The NVIDIA Stereoscopic 3D driver before 7.17.12.7565 does not properly handle commands sent to a named pipe, which allows local users to gain privileges via a crafted application.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vhm3-8794-xp2q/GHSA-vhm3-8794-xp2q.json b/advisories/unreviewed/2022/05/GHSA-vhm3-8794-xp2q/GHSA-vhm3-8794-xp2q.json index f6843095c4b..f8f0019f2f1 100644 --- a/advisories/unreviewed/2022/05/GHSA-vhm3-8794-xp2q/GHSA-vhm3-8794-xp2q.json +++ b/advisories/unreviewed/2022/05/GHSA-vhm3-8794-xp2q/GHSA-vhm3-8794-xp2q.json @@ -7,12 +7,8 @@ "CVE-2011-2651" ], "details": "Unspecified vulnerability in the file browser in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows remote attackers to execute arbitrary code via a crafted filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vj2w-v7gw-3jfp/GHSA-vj2w-v7gw-3jfp.json b/advisories/unreviewed/2022/05/GHSA-vj2w-v7gw-3jfp/GHSA-vj2w-v7gw-3jfp.json index 7b4d87d61b8..f9c6648737c 100644 --- a/advisories/unreviewed/2022/05/GHSA-vj2w-v7gw-3jfp/GHSA-vj2w-v7gw-3jfp.json +++ b/advisories/unreviewed/2022/05/GHSA-vj2w-v7gw-3jfp/GHSA-vj2w-v7gw-3jfp.json @@ -7,12 +7,8 @@ "CVE-2011-4162" ], "details": "The (1) AddUser, (2) AddUserEx, (3) RemoveUser, (4) RemoveUserByGuide, (5) RemoveUserEx, and (6) RemoveUserRegardless methods in HP Protect Tools Device Access Manager (PTDAM) before 6.1.0.1 allow remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via a long SidString argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vjg9-jfmj-x6jf/GHSA-vjg9-jfmj-x6jf.json b/advisories/unreviewed/2022/05/GHSA-vjg9-jfmj-x6jf/GHSA-vjg9-jfmj-x6jf.json index 8aa962bb2f3..c8234af789a 100644 --- a/advisories/unreviewed/2022/05/GHSA-vjg9-jfmj-x6jf/GHSA-vjg9-jfmj-x6jf.json +++ b/advisories/unreviewed/2022/05/GHSA-vjg9-jfmj-x6jf/GHSA-vjg9-jfmj-x6jf.json @@ -7,12 +7,8 @@ "CVE-2011-2039" ], "details": "The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file (vpndownloader.exe) without verifying its authenticity, which allows remote attackers to execute arbitrary code via the url property to a certain ActiveX control in vpnweb.ocx, aka Bug ID CSCsy00904.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vmrm-cw5v-326v/GHSA-vmrm-cw5v-326v.json b/advisories/unreviewed/2022/05/GHSA-vmrm-cw5v-326v/GHSA-vmrm-cw5v-326v.json index 9558cb3d171..8a206d7bb5e 100644 --- a/advisories/unreviewed/2022/05/GHSA-vmrm-cw5v-326v/GHSA-vmrm-cw5v-326v.json +++ b/advisories/unreviewed/2022/05/GHSA-vmrm-cw5v-326v/GHSA-vmrm-cw5v-326v.json @@ -7,12 +7,8 @@ "CVE-2011-4854" ], "details": "The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 does not ensure that Content-Type HTTP headers match the corresponding Content-Type data in HTML META elements, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving the get_enabled_product_icon program. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vp7c-vvmh-6vwq/GHSA-vp7c-vvmh-6vwq.json b/advisories/unreviewed/2022/05/GHSA-vp7c-vvmh-6vwq/GHSA-vp7c-vvmh-6vwq.json index 5f5532e00a1..409747f10b0 100644 --- a/advisories/unreviewed/2022/05/GHSA-vp7c-vvmh-6vwq/GHSA-vp7c-vvmh-6vwq.json +++ b/advisories/unreviewed/2022/05/GHSA-vp7c-vvmh-6vwq/GHSA-vp7c-vvmh-6vwq.json @@ -7,12 +7,8 @@ "CVE-2010-4992" ], "details": "SQL injection vulnerability in the Payments Plus component 2.1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the type parameter to add.html.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vphg-5gw5-pp95/GHSA-vphg-5gw5-pp95.json b/advisories/unreviewed/2022/05/GHSA-vphg-5gw5-pp95/GHSA-vphg-5gw5-pp95.json index 08fd88e3217..9f0a6c9cf79 100644 --- a/advisories/unreviewed/2022/05/GHSA-vphg-5gw5-pp95/GHSA-vphg-5gw5-pp95.json +++ b/advisories/unreviewed/2022/05/GHSA-vphg-5gw5-pp95/GHSA-vphg-5gw5-pp95.json @@ -7,12 +7,8 @@ "CVE-2011-3761" ], "details": "NuSOAP 0.9.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by nuSOAP/classes/class.wsdl.php and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vpj8-4chw-6r65/GHSA-vpj8-4chw-6r65.json b/advisories/unreviewed/2022/05/GHSA-vpj8-4chw-6r65/GHSA-vpj8-4chw-6r65.json index d84bcbd7c26..73cb05bb684 100644 --- a/advisories/unreviewed/2022/05/GHSA-vpj8-4chw-6r65/GHSA-vpj8-4chw-6r65.json +++ b/advisories/unreviewed/2022/05/GHSA-vpj8-4chw-6r65/GHSA-vpj8-4chw-6r65.json @@ -7,12 +7,8 @@ "CVE-2011-2145" ], "details": "mount.vmhgfs in the VMware Host Guest File System (HGFS) in VMware Workstation 7.1.x before 7.1.4, VMware Player 3.1.x before 3.1.4, VMware Fusion 3.1.x before 3.1.3, VMware ESXi 3.5 through 4.1, and VMware ESX 3.0.3 through 4.1, when a Solaris or FreeBSD guest OS is used, allows guest OS users to modify arbitrary guest OS files via unspecified vectors, related to a \"procedural error.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vpmc-fhc9-r7gr/GHSA-vpmc-fhc9-r7gr.json b/advisories/unreviewed/2022/05/GHSA-vpmc-fhc9-r7gr/GHSA-vpmc-fhc9-r7gr.json index a461320f828..34c224556b8 100644 --- a/advisories/unreviewed/2022/05/GHSA-vpmc-fhc9-r7gr/GHSA-vpmc-fhc9-r7gr.json +++ b/advisories/unreviewed/2022/05/GHSA-vpmc-fhc9-r7gr/GHSA-vpmc-fhc9-r7gr.json @@ -7,12 +7,8 @@ "CVE-2011-3523" ], "details": "Unspecified vulnerability in the Oracle Web Services Manager component in Oracle Fusion Middleware 10.1.3.5.0 and 10.1.3.5.1 allows remote authenticated users to affect integrity, related to WSM Console, a different vulnerability than CVE-2011-2237.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vppx-x848-7vg6/GHSA-vppx-x848-7vg6.json b/advisories/unreviewed/2022/05/GHSA-vppx-x848-7vg6/GHSA-vppx-x848-7vg6.json index ab1894a7b56..599addf5591 100644 --- a/advisories/unreviewed/2022/05/GHSA-vppx-x848-7vg6/GHSA-vppx-x848-7vg6.json +++ b/advisories/unreviewed/2022/05/GHSA-vppx-x848-7vg6/GHSA-vppx-x848-7vg6.json @@ -7,12 +7,8 @@ "CVE-2010-5146" ], "details": "The Remote Filtering component in Websense Web Security and Web Filter before 7.1 Hotfix 66 allows local users to bypass filtering by (1) renaming the WDC.exe file or (2) deleting driver files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vqx2-g8xp-v37c/GHSA-vqx2-g8xp-v37c.json b/advisories/unreviewed/2022/05/GHSA-vqx2-g8xp-v37c/GHSA-vqx2-g8xp-v37c.json index 75c3e952f46..d4a351a1bc0 100644 --- a/advisories/unreviewed/2022/05/GHSA-vqx2-g8xp-v37c/GHSA-vqx2-g8xp-v37c.json +++ b/advisories/unreviewed/2022/05/GHSA-vqx2-g8xp-v37c/GHSA-vqx2-g8xp-v37c.json @@ -7,12 +7,8 @@ "CVE-2011-3575" ], "details": "Stack-based buffer overflow in the NSFComputeEvaluateExt function in Nnotes.dll in IBM Lotus Domino 8.5.2 allows remote authenticated users to execute arbitrary code via a long tHPRAgentName parameter in an fmHttpPostRequest OpenForm action to WebAdmin.nsf.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vv97-hhpr-9696/GHSA-vv97-hhpr-9696.json b/advisories/unreviewed/2022/05/GHSA-vv97-hhpr-9696/GHSA-vv97-hhpr-9696.json index a3aa671289f..21cde44a6c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-vv97-hhpr-9696/GHSA-vv97-hhpr-9696.json +++ b/advisories/unreviewed/2022/05/GHSA-vv97-hhpr-9696/GHSA-vv97-hhpr-9696.json @@ -7,12 +7,8 @@ "CVE-2011-2640" ], "details": "Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via an HTML document that has an empty parameter value for an embedded Java applet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vvf4-mr9m-ghq5/GHSA-vvf4-mr9m-ghq5.json b/advisories/unreviewed/2022/05/GHSA-vvf4-mr9m-ghq5/GHSA-vvf4-mr9m-ghq5.json index 29c73ab2d7b..9fdc0087058 100644 --- a/advisories/unreviewed/2022/05/GHSA-vvf4-mr9m-ghq5/GHSA-vvf4-mr9m-ghq5.json +++ b/advisories/unreviewed/2022/05/GHSA-vvf4-mr9m-ghq5/GHSA-vvf4-mr9m-ghq5.json @@ -7,12 +7,8 @@ "CVE-2010-5060" ], "details": "SQL injection vulnerability in Nus.php in NUs Newssystem 1.02 allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vvwv-hcqf-p6jp/GHSA-vvwv-hcqf-p6jp.json b/advisories/unreviewed/2022/05/GHSA-vvwv-hcqf-p6jp/GHSA-vvwv-hcqf-p6jp.json index 991176c3b90..7ce118ed36a 100644 --- a/advisories/unreviewed/2022/05/GHSA-vvwv-hcqf-p6jp/GHSA-vvwv-hcqf-p6jp.json +++ b/advisories/unreviewed/2022/05/GHSA-vvwv-hcqf-p6jp/GHSA-vvwv-hcqf-p6jp.json @@ -7,12 +7,8 @@ "CVE-2011-3559" ], "details": "Unspecified vulnerability in Oracle Communications Server 2.0; GlassFish Enterprise Server 2.1.1, 3.0.1, and 3.1.1; and Sun Java System App Server 8.1 and 8.2 allows remote attackers to affect availability via unknown vectors related to Web Container.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vwf4-4fc5-33f6/GHSA-vwf4-4fc5-33f6.json b/advisories/unreviewed/2022/05/GHSA-vwf4-4fc5-33f6/GHSA-vwf4-4fc5-33f6.json index a8f7d8df6eb..dbaf7e67212 100644 --- a/advisories/unreviewed/2022/05/GHSA-vwf4-4fc5-33f6/GHSA-vwf4-4fc5-33f6.json +++ b/advisories/unreviewed/2022/05/GHSA-vwf4-4fc5-33f6/GHSA-vwf4-4fc5-33f6.json @@ -7,12 +7,8 @@ "CVE-2011-4711" ], "details": "Multiple directory traversal vulnerabilities in namazu.cgi in Namazu before 2.0.16 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) lang or (2) result parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vwvc-6cmx-p29r/GHSA-vwvc-6cmx-p29r.json b/advisories/unreviewed/2022/05/GHSA-vwvc-6cmx-p29r/GHSA-vwvc-6cmx-p29r.json index 5ad839cfaaf..e3297ccf62d 100644 --- a/advisories/unreviewed/2022/05/GHSA-vwvc-6cmx-p29r/GHSA-vwvc-6cmx-p29r.json +++ b/advisories/unreviewed/2022/05/GHSA-vwvc-6cmx-p29r/GHSA-vwvc-6cmx-p29r.json @@ -7,12 +7,8 @@ "CVE-2011-4722" ], "details": "Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. (dot dot) in the Filename field of an RRQ operation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w278-mxj8-7r9j/GHSA-w278-mxj8-7r9j.json b/advisories/unreviewed/2022/05/GHSA-w278-mxj8-7r9j/GHSA-w278-mxj8-7r9j.json index 6892218105e..afb0c4a69df 100644 --- a/advisories/unreviewed/2022/05/GHSA-w278-mxj8-7r9j/GHSA-w278-mxj8-7r9j.json +++ b/advisories/unreviewed/2022/05/GHSA-w278-mxj8-7r9j/GHSA-w278-mxj8-7r9j.json @@ -7,12 +7,8 @@ "CVE-2011-2167" ], "details": "script-login in Dovecot 2.0.x before 2.0.13 does not follow the chroot configuration setting, which might allow remote authenticated users to conduct directory traversal attacks by leveraging a script.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w368-rv36-85jg/GHSA-w368-rv36-85jg.json b/advisories/unreviewed/2022/05/GHSA-w368-rv36-85jg/GHSA-w368-rv36-85jg.json index 5fb055971fb..5b036b9f9bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-w368-rv36-85jg/GHSA-w368-rv36-85jg.json +++ b/advisories/unreviewed/2022/05/GHSA-w368-rv36-85jg/GHSA-w368-rv36-85jg.json @@ -7,12 +7,8 @@ "CVE-2011-5042" ], "details": "Cross-site scripting (XSS) vulnerability in inc/lib/lib.base.php in SASHA 0.2.0 allows remote attackers to inject arbitrary web script or HTML via the instructors parameter. NOTE: the original disclosure also mentions the section_title parameter, but this was disputed by the vendor and retracted by the original researcher.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w3fh-pxv3-4cx4/GHSA-w3fh-pxv3-4cx4.json b/advisories/unreviewed/2022/05/GHSA-w3fh-pxv3-4cx4/GHSA-w3fh-pxv3-4cx4.json index 99b2bd6e5b1..61c1b3e21a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-w3fh-pxv3-4cx4/GHSA-w3fh-pxv3-4cx4.json +++ b/advisories/unreviewed/2022/05/GHSA-w3fh-pxv3-4cx4/GHSA-w3fh-pxv3-4cx4.json @@ -7,12 +7,8 @@ "CVE-2011-4078" ], "details": "include/iniset.php in Roundcube Webmail 0.5.4 and earlier, when PHP 5.3.7 or 5.3.8 is used, allows remote attackers to trigger a GET request for an arbitrary URL, and cause a denial of service (resource consumption and inbox outage), via a Subject header containing only a URL, a related issue to CVE-2011-3379.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w3g4-x5f2-w6qh/GHSA-w3g4-x5f2-w6qh.json b/advisories/unreviewed/2022/05/GHSA-w3g4-x5f2-w6qh/GHSA-w3g4-x5f2-w6qh.json index 4b2e7ac4468..727a7d51a7f 100644 --- a/advisories/unreviewed/2022/05/GHSA-w3g4-x5f2-w6qh/GHSA-w3g4-x5f2-w6qh.json +++ b/advisories/unreviewed/2022/05/GHSA-w3g4-x5f2-w6qh/GHSA-w3g4-x5f2-w6qh.json @@ -7,12 +7,8 @@ "CVE-2011-3989" ], "details": "SQL injection vulnerability in DBD::mysqlPP 0.04 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w496-m2v7-59g2/GHSA-w496-m2v7-59g2.json b/advisories/unreviewed/2022/05/GHSA-w496-m2v7-59g2/GHSA-w496-m2v7-59g2.json index cfcca353e81..3dca465b380 100644 --- a/advisories/unreviewed/2022/05/GHSA-w496-m2v7-59g2/GHSA-w496-m2v7-59g2.json +++ b/advisories/unreviewed/2022/05/GHSA-w496-m2v7-59g2/GHSA-w496-m2v7-59g2.json @@ -7,12 +7,8 @@ "CVE-2010-4861" ], "details": "SQL injection vulnerability in asearch.php in webSPELL 4.2.1 allows remote attackers to execute arbitrary SQL commands via the search parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w5gp-rchf-32vh/GHSA-w5gp-rchf-32vh.json b/advisories/unreviewed/2022/05/GHSA-w5gp-rchf-32vh/GHSA-w5gp-rchf-32vh.json index c9816efad89..2c14b4a6c87 100644 --- a/advisories/unreviewed/2022/05/GHSA-w5gp-rchf-32vh/GHSA-w5gp-rchf-32vh.json +++ b/advisories/unreviewed/2022/05/GHSA-w5gp-rchf-32vh/GHSA-w5gp-rchf-32vh.json @@ -7,12 +7,8 @@ "CVE-2011-3392" ], "details": "Cross-site scripting (XSS) vulnerability in control.php in the controlcenter in Phorum before 5.2.17 allows remote attackers to inject arbitrary web script or HTML via the real_name parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w74q-4m8r-xv4f/GHSA-w74q-4m8r-xv4f.json b/advisories/unreviewed/2022/05/GHSA-w74q-4m8r-xv4f/GHSA-w74q-4m8r-xv4f.json index 058209cb465..c49b9bfbd97 100644 --- a/advisories/unreviewed/2022/05/GHSA-w74q-4m8r-xv4f/GHSA-w74q-4m8r-xv4f.json +++ b/advisories/unreviewed/2022/05/GHSA-w74q-4m8r-xv4f/GHSA-w74q-4m8r-xv4f.json @@ -7,12 +7,8 @@ "CVE-2010-5039" ], "details": "SQL injection vulnerability in control/admin_login.php in ScriptsFeed Recipes Listing Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter (aka the UserName field). NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w843-352m-75pp/GHSA-w843-352m-75pp.json b/advisories/unreviewed/2022/05/GHSA-w843-352m-75pp/GHSA-w843-352m-75pp.json index 4863774e5f1..7b44024efa7 100644 --- a/advisories/unreviewed/2022/05/GHSA-w843-352m-75pp/GHSA-w843-352m-75pp.json +++ b/advisories/unreviewed/2022/05/GHSA-w843-352m-75pp/GHSA-w843-352m-75pp.json @@ -7,12 +7,8 @@ "CVE-2010-4949" ], "details": "Cross-site scripting (XSS) vulnerability in the (1) FreiChat component before 2.1.2 for Joomla! and the (2) FreiChatPure component before 1.2.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML by entering it in an unspecified window.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w8cv-9wfw-379f/GHSA-w8cv-9wfw-379f.json b/advisories/unreviewed/2022/05/GHSA-w8cv-9wfw-379f/GHSA-w8cv-9wfw-379f.json index 719a6f15f9d..af28bc0c84c 100644 --- a/advisories/unreviewed/2022/05/GHSA-w8cv-9wfw-379f/GHSA-w8cv-9wfw-379f.json +++ b/advisories/unreviewed/2022/05/GHSA-w8cv-9wfw-379f/GHSA-w8cv-9wfw-379f.json @@ -7,12 +7,8 @@ "CVE-2011-3537" ], "details": "Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability via unknown vectors related to Kernel/Filesystem.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w96x-gmxw-6c69/GHSA-w96x-gmxw-6c69.json b/advisories/unreviewed/2022/05/GHSA-w96x-gmxw-6c69/GHSA-w96x-gmxw-6c69.json index 314e00ac255..309187311f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-w96x-gmxw-6c69/GHSA-w96x-gmxw-6c69.json +++ b/advisories/unreviewed/2022/05/GHSA-w96x-gmxw-6c69/GHSA-w96x-gmxw-6c69.json @@ -7,12 +7,8 @@ "CVE-2011-3713" ], "details": "cFTP r80 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by templates/session_check.php and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w9jg-j2w7-8h3g/GHSA-w9jg-j2w7-8h3g.json b/advisories/unreviewed/2022/05/GHSA-w9jg-j2w7-8h3g/GHSA-w9jg-j2w7-8h3g.json index 21213480daf..330312c0782 100644 --- a/advisories/unreviewed/2022/05/GHSA-w9jg-j2w7-8h3g/GHSA-w9jg-j2w7-8h3g.json +++ b/advisories/unreviewed/2022/05/GHSA-w9jg-j2w7-8h3g/GHSA-w9jg-j2w7-8h3g.json @@ -7,12 +7,8 @@ "CVE-2010-4894" ], "details": "SQL injection vulnerability in core/showsite.php in chillyCMS 1.1.3 allows remote attackers to execute arbitrary SQL commands via the name parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wc45-7552-hh9r/GHSA-wc45-7552-hh9r.json b/advisories/unreviewed/2022/05/GHSA-wc45-7552-hh9r/GHSA-wc45-7552-hh9r.json index ac95ed31fa3..d28726eb760 100644 --- a/advisories/unreviewed/2022/05/GHSA-wc45-7552-hh9r/GHSA-wc45-7552-hh9r.json +++ b/advisories/unreviewed/2022/05/GHSA-wc45-7552-hh9r/GHSA-wc45-7552-hh9r.json @@ -7,12 +7,8 @@ "CVE-2011-2711" ], "details": "Cross-site scripting (XSS) vulnerability in the print_fileinfo function in ui-diff.c in cgit 0.9.0.2 and earlier allows remote authenticated users to inject arbitrary web script or HTML via the filename associated with the rename hint.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wchc-67vr-45p7/GHSA-wchc-67vr-45p7.json b/advisories/unreviewed/2022/05/GHSA-wchc-67vr-45p7/GHSA-wchc-67vr-45p7.json index f0a1af62742..379dfcb6b1c 100644 --- a/advisories/unreviewed/2022/05/GHSA-wchc-67vr-45p7/GHSA-wchc-67vr-45p7.json +++ b/advisories/unreviewed/2022/05/GHSA-wchc-67vr-45p7/GHSA-wchc-67vr-45p7.json @@ -7,12 +7,8 @@ "CVE-2011-2979" ], "details": "Bugzilla 4.1.x before 4.1.3 generates different responses for certain assignee queries depending on whether the group name is valid, which allows remote attackers to determine the existence of private group names via a custom search. NOTE: this vulnerability exists because of a CVE-2010-2756 regression.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wcjw-xjfg-7pww/GHSA-wcjw-xjfg-7pww.json b/advisories/unreviewed/2022/05/GHSA-wcjw-xjfg-7pww/GHSA-wcjw-xjfg-7pww.json index f160e068380..da3f4d669c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-wcjw-xjfg-7pww/GHSA-wcjw-xjfg-7pww.json +++ b/advisories/unreviewed/2022/05/GHSA-wcjw-xjfg-7pww/GHSA-wcjw-xjfg-7pww.json @@ -7,12 +7,8 @@ "CVE-2011-2391" ], "details": "The IPv6 implementation in the kernel in Apple iOS before 7 allows remote attackers to cause a denial of service (CPU consumption) via crafted ICMPv6 packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wfr5-2p6q-6cpc/GHSA-wfr5-2p6q-6cpc.json b/advisories/unreviewed/2022/05/GHSA-wfr5-2p6q-6cpc/GHSA-wfr5-2p6q-6cpc.json index d9d6a3446f9..538eb1dbadf 100644 --- a/advisories/unreviewed/2022/05/GHSA-wfr5-2p6q-6cpc/GHSA-wfr5-2p6q-6cpc.json +++ b/advisories/unreviewed/2022/05/GHSA-wfr5-2p6q-6cpc/GHSA-wfr5-2p6q-6cpc.json @@ -7,12 +7,8 @@ "CVE-2010-4956" ], "details": "Cross-site scripting (XSS) vulnerability in the Questionnaire (ke_questionnaire) extension before 2.2.3 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wfvm-36j4-hjcm/GHSA-wfvm-36j4-hjcm.json b/advisories/unreviewed/2022/05/GHSA-wfvm-36j4-hjcm/GHSA-wfvm-36j4-hjcm.json index 947e5f33027..759d70d89a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-wfvm-36j4-hjcm/GHSA-wfvm-36j4-hjcm.json +++ b/advisories/unreviewed/2022/05/GHSA-wfvm-36j4-hjcm/GHSA-wfvm-36j4-hjcm.json @@ -7,12 +7,8 @@ "CVE-2011-4547" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in includes/templates/template_default/common/tpl_header_test_info.php in Zen Cart 1.3.9h, when debugging is enabled, might allow remote attackers to inject arbitrary web script or HTML via the (1) main_page parameter or (2) PATH_INFO, a different vulnerability than CVE-2011-4567.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wg34-hr85-f688/GHSA-wg34-hr85-f688.json b/advisories/unreviewed/2022/05/GHSA-wg34-hr85-f688/GHSA-wg34-hr85-f688.json index e9d6d7bcf67..3e64513a41e 100644 --- a/advisories/unreviewed/2022/05/GHSA-wg34-hr85-f688/GHSA-wg34-hr85-f688.json +++ b/advisories/unreviewed/2022/05/GHSA-wg34-hr85-f688/GHSA-wg34-hr85-f688.json @@ -7,12 +7,8 @@ "CVE-2011-3305" ], "details": "Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wg6r-xpg6-f6jv/GHSA-wg6r-xpg6-f6jv.json b/advisories/unreviewed/2022/05/GHSA-wg6r-xpg6-f6jv/GHSA-wg6r-xpg6-f6jv.json index 1b9aec0be8f..82506a8a139 100644 --- a/advisories/unreviewed/2022/05/GHSA-wg6r-xpg6-f6jv/GHSA-wg6r-xpg6-f6jv.json +++ b/advisories/unreviewed/2022/05/GHSA-wg6r-xpg6-f6jv/GHSA-wg6r-xpg6-f6jv.json @@ -7,12 +7,8 @@ "CVE-2010-4989" ], "details": "SQL injection vulnerability in main.asp in Ziggurat Farsi CMS allows remote attackers to execute arbitrary SQL commands via the grp parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wgmf-qh83-2587/GHSA-wgmf-qh83-2587.json b/advisories/unreviewed/2022/05/GHSA-wgmf-qh83-2587/GHSA-wgmf-qh83-2587.json index 536c11cd9c8..2b23b975b72 100644 --- a/advisories/unreviewed/2022/05/GHSA-wgmf-qh83-2587/GHSA-wgmf-qh83-2587.json +++ b/advisories/unreviewed/2022/05/GHSA-wgmf-qh83-2587/GHSA-wgmf-qh83-2587.json @@ -7,12 +7,8 @@ "CVE-2011-2642" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the table Print view implementation in tbl_printview.php in phpMyAdmin before 3.3.10.3 and 3.4.x before 3.4.3.2 allow remote authenticated users to inject arbitrary web script or HTML via a crafted table name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wgv2-5mf7-qgw9/GHSA-wgv2-5mf7-qgw9.json b/advisories/unreviewed/2022/05/GHSA-wgv2-5mf7-qgw9/GHSA-wgv2-5mf7-qgw9.json index 35238b8448b..4db8f8028ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-wgv2-5mf7-qgw9/GHSA-wgv2-5mf7-qgw9.json +++ b/advisories/unreviewed/2022/05/GHSA-wgv2-5mf7-qgw9/GHSA-wgv2-5mf7-qgw9.json @@ -7,12 +7,8 @@ "CVE-2010-4823" ], "details": "Cross-site scripting (XSS) vulnerability in the httpError method in sapphire/core/control/RequestHandler.php in SilverStripe 2.3.x before 2.3.10 and 2.4.x before 2.4.4, when custom error handling is not used, allows remote attackers to inject arbitrary web script or HTML via \"missing URL actions.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-whff-mwfj-4g3f/GHSA-whff-mwfj-4g3f.json b/advisories/unreviewed/2022/05/GHSA-whff-mwfj-4g3f/GHSA-whff-mwfj-4g3f.json index 59fb7c0c2b4..e00481a24d9 100644 --- a/advisories/unreviewed/2022/05/GHSA-whff-mwfj-4g3f/GHSA-whff-mwfj-4g3f.json +++ b/advisories/unreviewed/2022/05/GHSA-whff-mwfj-4g3f/GHSA-whff-mwfj-4g3f.json @@ -7,12 +7,8 @@ "CVE-2010-4915" ], "details": "SQL injection vulnerability in index.cfm in ColdGen ColdBookmarks 1.22 allows remote attackers to execute arbitrary SQL commands via the BookmarkID parameter in an EditBookmark action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wjqp-6v92-rwg3/GHSA-wjqp-6v92-rwg3.json b/advisories/unreviewed/2022/05/GHSA-wjqp-6v92-rwg3/GHSA-wjqp-6v92-rwg3.json index 8a786e039d3..70554675d91 100644 --- a/advisories/unreviewed/2022/05/GHSA-wjqp-6v92-rwg3/GHSA-wjqp-6v92-rwg3.json +++ b/advisories/unreviewed/2022/05/GHSA-wjqp-6v92-rwg3/GHSA-wjqp-6v92-rwg3.json @@ -7,12 +7,8 @@ "CVE-2011-3007" ], "details": "The myCIOScn ActiveX control (myCIOScn.dll) in McAfee SaaS Endpoint Protection 5.2.1 and earlier allows remote attackers to write to arbitrary files by specifying an arbitrary filename in the MyCioScan.Scan.ReportFile parameter, as demonstrated by injecting script into a log file and executing arbitrary code using the MyCioScan.Scan.Start method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wjvh-f9f6-jjjv/GHSA-wjvh-f9f6-jjjv.json b/advisories/unreviewed/2022/05/GHSA-wjvh-f9f6-jjjv/GHSA-wjvh-f9f6-jjjv.json index 476bad3dd88..0e1d4257ea2 100644 --- a/advisories/unreviewed/2022/05/GHSA-wjvh-f9f6-jjjv/GHSA-wjvh-f9f6-jjjv.json +++ b/advisories/unreviewed/2022/05/GHSA-wjvh-f9f6-jjjv/GHSA-wjvh-f9f6-jjjv.json @@ -7,12 +7,8 @@ "CVE-2010-4893" ], "details": "Cross-site scripting (XSS) vulnerability in foodvendors.php in FestOS 2.3b allows remote attackers to inject arbitrary web script or HTML via the category parameter in a details action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wm84-qxv7-5m3r/GHSA-wm84-qxv7-5m3r.json b/advisories/unreviewed/2022/05/GHSA-wm84-qxv7-5m3r/GHSA-wm84-qxv7-5m3r.json index 7c1bb64e0e0..18e50ed34a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-wm84-qxv7-5m3r/GHSA-wm84-qxv7-5m3r.json +++ b/advisories/unreviewed/2022/05/GHSA-wm84-qxv7-5m3r/GHSA-wm84-qxv7-5m3r.json @@ -7,12 +7,8 @@ "CVE-2011-2124" ], "details": "Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2114, CVE-2011-2117, CVE-2011-2127, and CVE-2011-2128.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wmj5-4p98-v8rw/GHSA-wmj5-4p98-v8rw.json b/advisories/unreviewed/2022/05/GHSA-wmj5-4p98-v8rw/GHSA-wmj5-4p98-v8rw.json index ed3262bde96..97e5f1934fd 100644 --- a/advisories/unreviewed/2022/05/GHSA-wmj5-4p98-v8rw/GHSA-wmj5-4p98-v8rw.json +++ b/advisories/unreviewed/2022/05/GHSA-wmj5-4p98-v8rw/GHSA-wmj5-4p98-v8rw.json @@ -7,12 +7,8 @@ "CVE-2011-3423" ], "details": "Cross-site scripting (XSS) vulnerability in the Managed File Transfer server in TIBCO Managed File Transfer Internet Server before 7.1.1 and Managed File Transfer Command Center before 7.1.1, and the server in TIBCO Slingshot before 1.8.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wpqp-r9c7-r6xx/GHSA-wpqp-r9c7-r6xx.json b/advisories/unreviewed/2022/05/GHSA-wpqp-r9c7-r6xx/GHSA-wpqp-r9c7-r6xx.json index 3ea30401361..cd1348e07dd 100644 --- a/advisories/unreviewed/2022/05/GHSA-wpqp-r9c7-r6xx/GHSA-wpqp-r9c7-r6xx.json +++ b/advisories/unreviewed/2022/05/GHSA-wpqp-r9c7-r6xx/GHSA-wpqp-r9c7-r6xx.json @@ -7,12 +7,8 @@ "CVE-2011-3522" ], "details": "Unspecified vulnerability in SysFW 8.0 on certain SPARC T3, Netra SPARC T3, Sun Fire, and Sun Blade based servers allows local users to affect confidentiality, related to Integrated Lights Out Manager CLI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wqjm-gjhr-8f6f/GHSA-wqjm-gjhr-8f6f.json b/advisories/unreviewed/2022/05/GHSA-wqjm-gjhr-8f6f/GHSA-wqjm-gjhr-8f6f.json index 6f8294fe664..3b50f119212 100644 --- a/advisories/unreviewed/2022/05/GHSA-wqjm-gjhr-8f6f/GHSA-wqjm-gjhr-8f6f.json +++ b/advisories/unreviewed/2022/05/GHSA-wqjm-gjhr-8f6f/GHSA-wqjm-gjhr-8f6f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wqm3-xvpx-4868/GHSA-wqm3-xvpx-4868.json b/advisories/unreviewed/2022/05/GHSA-wqm3-xvpx-4868/GHSA-wqm3-xvpx-4868.json index aa97229aedb..56e7a7cf671 100644 --- a/advisories/unreviewed/2022/05/GHSA-wqm3-xvpx-4868/GHSA-wqm3-xvpx-4868.json +++ b/advisories/unreviewed/2022/05/GHSA-wqm3-xvpx-4868/GHSA-wqm3-xvpx-4868.json @@ -7,12 +7,8 @@ "CVE-2011-4273" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in GoAhead Webserver 2.18 allow remote attackers to inject arbitrary web script or HTML via (1) the group parameter to goform/AddGroup, related to addgroup.asp; (2) the url parameter to goform/AddAccessLimit, related to addlimit.asp; or the (3) user (aka User ID) or (4) group parameter to goform/AddUser, related to adduser.asp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wqr8-7vq7-h7vh/GHSA-wqr8-7vq7-h7vh.json b/advisories/unreviewed/2022/05/GHSA-wqr8-7vq7-h7vh/GHSA-wqr8-7vq7-h7vh.json index 77703c12ee0..c2d3bfb38e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-wqr8-7vq7-h7vh/GHSA-wqr8-7vq7-h7vh.json +++ b/advisories/unreviewed/2022/05/GHSA-wqr8-7vq7-h7vh/GHSA-wqr8-7vq7-h7vh.json @@ -7,12 +7,8 @@ "CVE-2011-3768" ], "details": "Phorum 5.2.15a allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by css.php and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wrm2-xcg5-7pj9/GHSA-wrm2-xcg5-7pj9.json b/advisories/unreviewed/2022/05/GHSA-wrm2-xcg5-7pj9/GHSA-wrm2-xcg5-7pj9.json index cc3f45b7d1a..41cc35cfdcc 100644 --- a/advisories/unreviewed/2022/05/GHSA-wrm2-xcg5-7pj9/GHSA-wrm2-xcg5-7pj9.json +++ b/advisories/unreviewed/2022/05/GHSA-wrm2-xcg5-7pj9/GHSA-wrm2-xcg5-7pj9.json @@ -7,12 +7,8 @@ "CVE-2010-5027" ], "details": "Cross-site scripting (XSS) vulnerability in winners.php in Science Fair In A Box (SFIAB) 2.0.6 and 2.2.0 allows remote attackers to inject arbitrary web script or HTML via the type parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wrpc-6j6r-gh72/GHSA-wrpc-6j6r-gh72.json b/advisories/unreviewed/2022/05/GHSA-wrpc-6j6r-gh72/GHSA-wrpc-6j6r-gh72.json index bf893e1f5fb..c094ac8d211 100644 --- a/advisories/unreviewed/2022/05/GHSA-wrpc-6j6r-gh72/GHSA-wrpc-6j6r-gh72.json +++ b/advisories/unreviewed/2022/05/GHSA-wrpc-6j6r-gh72/GHSA-wrpc-6j6r-gh72.json @@ -7,12 +7,8 @@ "CVE-2011-4859" ], "details": "The Schneider Electric Quantum Ethernet Module, as used in the Quantum 140NOE771* and 140CPU65* modules, the Premium TSXETY* and TSXP57* modules, the M340 BMXNOE01* and BMXP3420* modules, and the STB DIO STBNIC2212 and STBNIP2* modules, uses hardcoded passwords for the (1) AUTCSE, (2) AUT_CSE, (3) fdrusers, (4) ftpuser, (5) loader, (6) nic2212, (7) nimrohs2212, (8) nip2212, (9) noe77111_v500, (10) ntpupdate, (11) pcfactory, (12) sysdiag, (13) target, (14) test, (15) USER, and (16) webserver accounts, which makes it easier for remote attackers to obtain access via the (a) TELNET, (b) Windriver Debug, or (c) FTP port.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wrpj-3873-r65p/GHSA-wrpj-3873-r65p.json b/advisories/unreviewed/2022/05/GHSA-wrpj-3873-r65p/GHSA-wrpj-3873-r65p.json index 2a4c1a474fc..47e6539abf7 100644 --- a/advisories/unreviewed/2022/05/GHSA-wrpj-3873-r65p/GHSA-wrpj-3873-r65p.json +++ b/advisories/unreviewed/2022/05/GHSA-wrpj-3873-r65p/GHSA-wrpj-3873-r65p.json @@ -7,12 +7,8 @@ "CVE-2011-2546" ], "details": "SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtq65669.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wvcf-xch4-6v8r/GHSA-wvcf-xch4-6v8r.json b/advisories/unreviewed/2022/05/GHSA-wvcf-xch4-6v8r/GHSA-wvcf-xch4-6v8r.json index 5a5e137c553..ad7607fa39e 100644 --- a/advisories/unreviewed/2022/05/GHSA-wvcf-xch4-6v8r/GHSA-wvcf-xch4-6v8r.json +++ b/advisories/unreviewed/2022/05/GHSA-wvcf-xch4-6v8r/GHSA-wvcf-xch4-6v8r.json @@ -7,12 +7,8 @@ "CVE-2011-5019" ], "details": "Cross-site scripting (XSS) vulnerability in setup/index.php in Textpattern CMS 4.4.1, when the product is incompletely installed, allows remote attackers to inject arbitrary web script or HTML via the ddb parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wvq5-72qp-grjw/GHSA-wvq5-72qp-grjw.json b/advisories/unreviewed/2022/05/GHSA-wvq5-72qp-grjw/GHSA-wvq5-72qp-grjw.json index 6262c567080..d143c3113c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-wvq5-72qp-grjw/GHSA-wvq5-72qp-grjw.json +++ b/advisories/unreviewed/2022/05/GHSA-wvq5-72qp-grjw/GHSA-wvq5-72qp-grjw.json @@ -7,12 +7,8 @@ "CVE-2011-4340" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author privileges to inject arbitrary web script or HTML via (1) the profile parameter to extensions/profiledevkit/content/content.profile.php, as demonstrated via requests to (a) the default URI, (b) about/, or (c) drafts/; or (2) the filter parameter in symphony/lib/core/class.symphony.php, as demonstrated via requests to (d) symphony/publish/comments or (e) symphony/publish/images. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ww37-j578-6c2h/GHSA-ww37-j578-6c2h.json b/advisories/unreviewed/2022/05/GHSA-ww37-j578-6c2h/GHSA-ww37-j578-6c2h.json index 55db69dbdc6..9a6788a161e 100644 --- a/advisories/unreviewed/2022/05/GHSA-ww37-j578-6c2h/GHSA-ww37-j578-6c2h.json +++ b/advisories/unreviewed/2022/05/GHSA-ww37-j578-6c2h/GHSA-ww37-j578-6c2h.json @@ -7,12 +7,8 @@ "CVE-2011-3332" ], "details": "Stack-based buffer overflow in Iceni Argus 6.20 and earlier and Infix 5.04 allows remote attackers to execute arbitrary code via a crafted PDF document that uses flate compression.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ww8g-4hm5-m22g/GHSA-ww8g-4hm5-m22g.json b/advisories/unreviewed/2022/05/GHSA-ww8g-4hm5-m22g/GHSA-ww8g-4hm5-m22g.json index cbdf657f34f..fed1e26c3cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-ww8g-4hm5-m22g/GHSA-ww8g-4hm5-m22g.json +++ b/advisories/unreviewed/2022/05/GHSA-ww8g-4hm5-m22g/GHSA-ww8g-4hm5-m22g.json @@ -7,12 +7,8 @@ "CVE-2011-3777" ], "details": "phpFreeChat 1.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/zilveer/style.css.php and certain other files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wx9q-r4w8-rqw9/GHSA-wx9q-r4w8-rqw9.json b/advisories/unreviewed/2022/05/GHSA-wx9q-r4w8-rqw9/GHSA-wx9q-r4w8-rqw9.json index 686aaebc03f..14489230159 100644 --- a/advisories/unreviewed/2022/05/GHSA-wx9q-r4w8-rqw9/GHSA-wx9q-r4w8-rqw9.json +++ b/advisories/unreviewed/2022/05/GHSA-wx9q-r4w8-rqw9/GHSA-wx9q-r4w8-rqw9.json @@ -7,12 +7,8 @@ "CVE-2010-4985" ], "details": "Cross-site scripting (XSS) vulnerability in notes.php in My Kazaam Notes Management System allows remote attackers to inject arbitrary web script or HTML via vectors involving the \"Enter Reference Number Below\" text box.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x283-c45f-qr8x/GHSA-x283-c45f-qr8x.json b/advisories/unreviewed/2022/05/GHSA-x283-c45f-qr8x/GHSA-x283-c45f-qr8x.json index 30010e15e10..568476d353e 100644 --- a/advisories/unreviewed/2022/05/GHSA-x283-c45f-qr8x/GHSA-x283-c45f-qr8x.json +++ b/advisories/unreviewed/2022/05/GHSA-x283-c45f-qr8x/GHSA-x283-c45f-qr8x.json @@ -7,12 +7,8 @@ "CVE-2010-4975" ], "details": "SQL injection vulnerability in the Techjoomla SocialAds For JomSocial (com_socialads) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the ads description field in a showad action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x444-585r-8jf5/GHSA-x444-585r-8jf5.json b/advisories/unreviewed/2022/05/GHSA-x444-585r-8jf5/GHSA-x444-585r-8jf5.json index adb9847195b..425a1895210 100644 --- a/advisories/unreviewed/2022/05/GHSA-x444-585r-8jf5/GHSA-x444-585r-8jf5.json +++ b/advisories/unreviewed/2022/05/GHSA-x444-585r-8jf5/GHSA-x444-585r-8jf5.json @@ -7,12 +7,8 @@ "CVE-2011-2655" ], "details": "Unspecified vulnerability in ZfHSrvr.exe in Novell ZENworks Handheld Management (ZHM) 7 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-2656.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x555-pm2v-q3p2/GHSA-x555-pm2v-q3p2.json b/advisories/unreviewed/2022/05/GHSA-x555-pm2v-q3p2/GHSA-x555-pm2v-q3p2.json index 44c4367c95f..ab676b10939 100644 --- a/advisories/unreviewed/2022/05/GHSA-x555-pm2v-q3p2/GHSA-x555-pm2v-q3p2.json +++ b/advisories/unreviewed/2022/05/GHSA-x555-pm2v-q3p2/GHSA-x555-pm2v-q3p2.json @@ -7,12 +7,8 @@ "CVE-2011-3361" ], "details": "Cross-site scripting (XSS) vulnerability in CGI/Browse.pm in BackupPC 3.2.0 and possibly other versions before 3.2.1 allows remote attackers to inject arbitrary web script or HTML via the num parameter in a browse action to index.cgi.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x5g3-v6r9-gfqm/GHSA-x5g3-v6r9-gfqm.json b/advisories/unreviewed/2022/05/GHSA-x5g3-v6r9-gfqm/GHSA-x5g3-v6r9-gfqm.json index cb11812fed4..56221bba9d0 100644 --- a/advisories/unreviewed/2022/05/GHSA-x5g3-v6r9-gfqm/GHSA-x5g3-v6r9-gfqm.json +++ b/advisories/unreviewed/2022/05/GHSA-x5g3-v6r9-gfqm/GHSA-x5g3-v6r9-gfqm.json @@ -7,12 +7,8 @@ "CVE-2011-2472" ], "details": "Directory traversal vulnerability in utils/opcontrol in OProfile 0.9.6 and earlier might allow local users to overwrite arbitrary files via a .. (dot dot) in the --save argument, related to the --session-dir argument, a different vulnerability than CVE-2011-1760.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x6mj-9j48-8844/GHSA-x6mj-9j48-8844.json b/advisories/unreviewed/2022/05/GHSA-x6mj-9j48-8844/GHSA-x6mj-9j48-8844.json index aecdd0543e3..b96885a559f 100644 --- a/advisories/unreviewed/2022/05/GHSA-x6mj-9j48-8844/GHSA-x6mj-9j48-8844.json +++ b/advisories/unreviewed/2022/05/GHSA-x6mj-9j48-8844/GHSA-x6mj-9j48-8844.json @@ -7,12 +7,8 @@ "CVE-2011-5041" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Pulse Pro CMS 1.7.2 allow remote attackers to inject arbitrary web script or HTML via the (1) d parameter in a blocks action and (2) post_id parameter in an edit-post action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x793-7475-76m3/GHSA-x793-7475-76m3.json b/advisories/unreviewed/2022/05/GHSA-x793-7475-76m3/GHSA-x793-7475-76m3.json index 5cdcf4aad9d..56729c8c557 100644 --- a/advisories/unreviewed/2022/05/GHSA-x793-7475-76m3/GHSA-x793-7475-76m3.json +++ b/advisories/unreviewed/2022/05/GHSA-x793-7475-76m3/GHSA-x793-7475-76m3.json @@ -7,12 +7,8 @@ "CVE-2011-2091" ], "details": "Unspecified vulnerability in Adobe ColdFusion 8.0, 8.0.1, 9.0, and 9.0.1 allows remote attackers to cause a denial of service via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x84m-8p33-qpjh/GHSA-x84m-8p33-qpjh.json b/advisories/unreviewed/2022/05/GHSA-x84m-8p33-qpjh/GHSA-x84m-8p33-qpjh.json index e53fdbb37eb..69d9d404375 100644 --- a/advisories/unreviewed/2022/05/GHSA-x84m-8p33-qpjh/GHSA-x84m-8p33-qpjh.json +++ b/advisories/unreviewed/2022/05/GHSA-x84m-8p33-qpjh/GHSA-x84m-8p33-qpjh.json @@ -7,12 +7,8 @@ "CVE-2011-3508" ], "details": "Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect confidentiality, integrity, and availability, related to LDAP library.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x95h-82jw-cjx7/GHSA-x95h-82jw-cjx7.json b/advisories/unreviewed/2022/05/GHSA-x95h-82jw-cjx7/GHSA-x95h-82jw-cjx7.json index 1679d21d29d..661e427c676 100644 --- a/advisories/unreviewed/2022/05/GHSA-x95h-82jw-cjx7/GHSA-x95h-82jw-cjx7.json +++ b/advisories/unreviewed/2022/05/GHSA-x95h-82jw-cjx7/GHSA-x95h-82jw-cjx7.json @@ -7,12 +7,8 @@ "CVE-2010-5011" ], "details": "SQL injection vulnerability in schoolmv2/html/studentmain.php in SchoolMation 2.3 allows remote attackers to execute arbitrary SQL commands via the session parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x95j-5m75-mq26/GHSA-x95j-5m75-mq26.json b/advisories/unreviewed/2022/05/GHSA-x95j-5m75-mq26/GHSA-x95j-5m75-mq26.json index 376b8787505..e7c9df4d9df 100644 --- a/advisories/unreviewed/2022/05/GHSA-x95j-5m75-mq26/GHSA-x95j-5m75-mq26.json +++ b/advisories/unreviewed/2022/05/GHSA-x95j-5m75-mq26/GHSA-x95j-5m75-mq26.json @@ -7,12 +7,8 @@ "CVE-2011-2643" ], "details": "Directory traversal vulnerability in sql.php in phpMyAdmin 3.4.x before 3.4.3.2, when configuration storage is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in a MIME-type transformation parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xff6-2gvp-jr5v/GHSA-xff6-2gvp-jr5v.json b/advisories/unreviewed/2022/05/GHSA-xff6-2gvp-jr5v/GHSA-xff6-2gvp-jr5v.json index af121b0b54e..da3e7046c8f 100644 --- a/advisories/unreviewed/2022/05/GHSA-xff6-2gvp-jr5v/GHSA-xff6-2gvp-jr5v.json +++ b/advisories/unreviewed/2022/05/GHSA-xff6-2gvp-jr5v/GHSA-xff6-2gvp-jr5v.json @@ -7,12 +7,8 @@ "CVE-2011-3436" ], "details": "Open Directory in Apple Mac OS X 10.7 before 10.7.2 does not require a user to provide the current password before changing this password, which allows remote attackers to bypass intended password-change restrictions by leveraging an unattended workstation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xg5g-x87g-4w37/GHSA-xg5g-x87g-4w37.json b/advisories/unreviewed/2022/05/GHSA-xg5g-x87g-4w37/GHSA-xg5g-x87g-4w37.json index a80e5f59c07..42b8ac1317a 100644 --- a/advisories/unreviewed/2022/05/GHSA-xg5g-x87g-4w37/GHSA-xg5g-x87g-4w37.json +++ b/advisories/unreviewed/2022/05/GHSA-xg5g-x87g-4w37/GHSA-xg5g-x87g-4w37.json @@ -7,12 +7,8 @@ "CVE-2011-3137" ], "details": "Unspecified vulnerability in the Management Console in IBM Tivoli Federated Identity Manager (TFIM) 6.2.0 before 6.2.0.9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.0 before 6.2.0.9 has unknown impact and attack vectors, aka APAR IV03050.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xg5x-h46c-q4f9/GHSA-xg5x-h46c-q4f9.json b/advisories/unreviewed/2022/05/GHSA-xg5x-h46c-q4f9/GHSA-xg5x-h46c-q4f9.json index d64614b61a3..04b6d991ba4 100644 --- a/advisories/unreviewed/2022/05/GHSA-xg5x-h46c-q4f9/GHSA-xg5x-h46c-q4f9.json +++ b/advisories/unreviewed/2022/05/GHSA-xg5x-h46c-q4f9/GHSA-xg5x-h46c-q4f9.json @@ -7,12 +7,8 @@ "CVE-2010-4972" ], "details": "SQL injection vulnerability in index.php in YPNinc JokeScript allows remote attackers to execute arbitrary SQL commands via the ypncat_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xg6j-xg44-rp8p/GHSA-xg6j-xg44-rp8p.json b/advisories/unreviewed/2022/05/GHSA-xg6j-xg44-rp8p/GHSA-xg6j-xg44-rp8p.json index eac93ec48a6..f91b0832a26 100644 --- a/advisories/unreviewed/2022/05/GHSA-xg6j-xg44-rp8p/GHSA-xg6j-xg44-rp8p.json +++ b/advisories/unreviewed/2022/05/GHSA-xg6j-xg44-rp8p/GHSA-xg6j-xg44-rp8p.json @@ -7,12 +7,8 @@ "CVE-2011-4569" ], "details": "SQL injection vulnerability in userbarsettings.php in the Userbar plugin 2.2 for MyBB Forum allows remote attackers to execute arbitrary SQL commands via the image2 parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xghm-345m-3fvj/GHSA-xghm-345m-3fvj.json b/advisories/unreviewed/2022/05/GHSA-xghm-345m-3fvj/GHSA-xghm-345m-3fvj.json index 51345dca0fc..0fa89e03806 100644 --- a/advisories/unreviewed/2022/05/GHSA-xghm-345m-3fvj/GHSA-xghm-345m-3fvj.json +++ b/advisories/unreviewed/2022/05/GHSA-xghm-345m-3fvj/GHSA-xghm-345m-3fvj.json @@ -7,12 +7,8 @@ "CVE-2011-2149" ], "details": "Multiple SQL injection vulnerabilities in the SmarterTools SmarterStats 6.0 web server allow remote attackers to execute arbitrary SQL commands via certain parameters to (1) Admin/frmSite.aspx, (2) Default.aspx, (3) Services/SiteAdmin.asmx, or (4) Client/frmViewReports.aspx; certain cookies to (5) Services/SiteAdmin.asmx or (6) login.aspx; the Referer HTTP header to (7) Services/SiteAdmin.asmx or (8) login.aspx; or (9) the User-Agent HTTP header to Services/SiteAdmin.asmx.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xghr-r2p4-w9qp/GHSA-xghr-r2p4-w9qp.json b/advisories/unreviewed/2022/05/GHSA-xghr-r2p4-w9qp/GHSA-xghr-r2p4-w9qp.json index 5a5ce571c7a..fbd12b459b3 100644 --- a/advisories/unreviewed/2022/05/GHSA-xghr-r2p4-w9qp/GHSA-xghr-r2p4-w9qp.json +++ b/advisories/unreviewed/2022/05/GHSA-xghr-r2p4-w9qp/GHSA-xghr-r2p4-w9qp.json @@ -7,12 +7,8 @@ "CVE-2011-2125" ], "details": "Buffer overflow in Dirapix.dll in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xghw-4j4f-7p37/GHSA-xghw-4j4f-7p37.json b/advisories/unreviewed/2022/05/GHSA-xghw-4j4f-7p37/GHSA-xghw-4j4f-7p37.json index d4f740ff11f..fffa300416e 100644 --- a/advisories/unreviewed/2022/05/GHSA-xghw-4j4f-7p37/GHSA-xghw-4j4f-7p37.json +++ b/advisories/unreviewed/2022/05/GHSA-xghw-4j4f-7p37/GHSA-xghw-4j4f-7p37.json @@ -7,12 +7,8 @@ "CVE-2011-4856" ], "details": "The Control Panel in Parallels Plesk Panel 10.4.4_build20111103.18 sends incorrect Content-Type headers for certain resources, which might allow remote attackers to have an unspecified impact by leveraging an interpretation conflict involving admin/health/parameters and certain other files. NOTE: it is possible that only clients, not the Plesk product, could be affected by this issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xh8r-pw4r-9vx4/GHSA-xh8r-pw4r-9vx4.json b/advisories/unreviewed/2022/05/GHSA-xh8r-pw4r-9vx4/GHSA-xh8r-pw4r-9vx4.json index 645f233381f..6bbbe04224d 100644 --- a/advisories/unreviewed/2022/05/GHSA-xh8r-pw4r-9vx4/GHSA-xh8r-pw4r-9vx4.json +++ b/advisories/unreviewed/2022/05/GHSA-xh8r-pw4r-9vx4/GHSA-xh8r-pw4r-9vx4.json @@ -7,12 +7,8 @@ "CVE-2011-4122" ], "details": "Directory traversal vulnerability in openpam_configure.c in OpenPAM before r478 on FreeBSD 8.1 allows local users to load arbitrary DSOs and gain privileges via a .. (dot dot) in the service_name argument to the pam_start function, as demonstrated by a .. in the -c option to kcheckpass.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xhrx-7gxr-xjcp/GHSA-xhrx-7gxr-xjcp.json b/advisories/unreviewed/2022/05/GHSA-xhrx-7gxr-xjcp/GHSA-xhrx-7gxr-xjcp.json index 6608a484865..2b38a1b1708 100644 --- a/advisories/unreviewed/2022/05/GHSA-xhrx-7gxr-xjcp/GHSA-xhrx-7gxr-xjcp.json +++ b/advisories/unreviewed/2022/05/GHSA-xhrx-7gxr-xjcp/GHSA-xhrx-7gxr-xjcp.json @@ -7,12 +7,8 @@ "CVE-2011-2329" ], "details": "The rampart_timestamp_token_validate function in util/rampart_timestamp_token.c in Apache Rampart/C 1.3.0 does not properly calculate the expiration of timestamp tokens, which allows remote attackers to bypass intended access restrictions by leveraging an expired token, a different vulnerability than CVE-2011-0730.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xj39-xgv2-5mf8/GHSA-xj39-xgv2-5mf8.json b/advisories/unreviewed/2022/05/GHSA-xj39-xgv2-5mf8/GHSA-xj39-xgv2-5mf8.json index 1ad32e46fec..24ef462efb5 100644 --- a/advisories/unreviewed/2022/05/GHSA-xj39-xgv2-5mf8/GHSA-xj39-xgv2-5mf8.json +++ b/advisories/unreviewed/2022/05/GHSA-xj39-xgv2-5mf8/GHSA-xj39-xgv2-5mf8.json @@ -7,12 +7,8 @@ "CVE-2010-4844" ], "details": "SQL injection vulnerability in content.php in MH Products Easy Online Shop allows remote attackers to execute arbitrary SQL commands via the kat parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xj3f-76hf-wv75/GHSA-xj3f-76hf-wv75.json b/advisories/unreviewed/2022/05/GHSA-xj3f-76hf-wv75/GHSA-xj3f-76hf-wv75.json index 1520e4d1f44..a7bebcd7332 100644 --- a/advisories/unreviewed/2022/05/GHSA-xj3f-76hf-wv75/GHSA-xj3f-76hf-wv75.json +++ b/advisories/unreviewed/2022/05/GHSA-xj3f-76hf-wv75/GHSA-xj3f-76hf-wv75.json @@ -7,12 +7,8 @@ "CVE-2010-4918" ], "details": "PHP remote file inclusion vulnerability in iJoomla Magazine (com_magazine) component 3.0.1 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the config parameter to magazine.functions.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xjpj-vg2h-c82v/GHSA-xjpj-vg2h-c82v.json b/advisories/unreviewed/2022/05/GHSA-xjpj-vg2h-c82v/GHSA-xjpj-vg2h-c82v.json index 1e4c2c696b3..8970cc71f6c 100644 --- a/advisories/unreviewed/2022/05/GHSA-xjpj-vg2h-c82v/GHSA-xjpj-vg2h-c82v.json +++ b/advisories/unreviewed/2022/05/GHSA-xjpj-vg2h-c82v/GHSA-xjpj-vg2h-c82v.json @@ -7,12 +7,8 @@ "CVE-2010-4814" ], "details": "SQL injection vulnerability in index1.php in Best Soft Inc. (BSI) Advance Hotel Booking System 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xpr8-vpc7-7vfc/GHSA-xpr8-vpc7-7vfc.json b/advisories/unreviewed/2022/05/GHSA-xpr8-vpc7-7vfc/GHSA-xpr8-vpc7-7vfc.json index dc8f274fa0b..9ad9d23cb0a 100644 --- a/advisories/unreviewed/2022/05/GHSA-xpr8-vpc7-7vfc/GHSA-xpr8-vpc7-7vfc.json +++ b/advisories/unreviewed/2022/05/GHSA-xpr8-vpc7-7vfc/GHSA-xpr8-vpc7-7vfc.json @@ -7,12 +7,8 @@ "CVE-2011-4815" ], "details": "Ruby (aka CRuby) before 1.8.7-p357 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xq25-2qrx-43c4/GHSA-xq25-2qrx-43c4.json b/advisories/unreviewed/2022/05/GHSA-xq25-2qrx-43c4/GHSA-xq25-2qrx-43c4.json index 0bfe33c595f..0e5ae33f2b2 100644 --- a/advisories/unreviewed/2022/05/GHSA-xq25-2qrx-43c4/GHSA-xq25-2qrx-43c4.json +++ b/advisories/unreviewed/2022/05/GHSA-xq25-2qrx-43c4/GHSA-xq25-2qrx-43c4.json @@ -7,12 +7,8 @@ "CVE-2011-5065" ], "details": "Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.41 allows remote attackers to inject arbitrary web script or HTML via vectors related to web messaging.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xq29-jcj7-xg86/GHSA-xq29-jcj7-xg86.json b/advisories/unreviewed/2022/05/GHSA-xq29-jcj7-xg86/GHSA-xq29-jcj7-xg86.json index 994f57ea139..692bf0e4b48 100644 --- a/advisories/unreviewed/2022/05/GHSA-xq29-jcj7-xg86/GHSA-xq29-jcj7-xg86.json +++ b/advisories/unreviewed/2022/05/GHSA-xq29-jcj7-xg86/GHSA-xq29-jcj7-xg86.json @@ -7,12 +7,8 @@ "CVE-2010-4962" ], "details": "Unspecified vulnerability in the Webkit PDFs (webkitpdf) extension before 1.1.4 for TYPO3 allows remote attackers to execute arbitrary commands via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xqf9-v7ff-rf4x/GHSA-xqf9-v7ff-rf4x.json b/advisories/unreviewed/2022/05/GHSA-xqf9-v7ff-rf4x/GHSA-xqf9-v7ff-rf4x.json index 4df00f3b6bc..fb0ed134928 100644 --- a/advisories/unreviewed/2022/05/GHSA-xqf9-v7ff-rf4x/GHSA-xqf9-v7ff-rf4x.json +++ b/advisories/unreviewed/2022/05/GHSA-xqf9-v7ff-rf4x/GHSA-xqf9-v7ff-rf4x.json @@ -7,12 +7,8 @@ "CVE-2011-5047" ], "details": "Cross-site scripting (XSS) vulnerability in status_rrd_graph.php in pfSense before 2.0.1 allows remote attackers to inject arbitrary web script or HTML via the style parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xrm7-6c5j-p27r/GHSA-xrm7-6c5j-p27r.json b/advisories/unreviewed/2022/05/GHSA-xrm7-6c5j-p27r/GHSA-xrm7-6c5j-p27r.json index b6f8a44df4c..e9f8b71c7ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-xrm7-6c5j-p27r/GHSA-xrm7-6c5j-p27r.json +++ b/advisories/unreviewed/2022/05/GHSA-xrm7-6c5j-p27r/GHSA-xrm7-6c5j-p27r.json @@ -7,12 +7,8 @@ "CVE-2011-2529" ], "details": "chan_sip.c in the SIP channel driver in Asterisk Open Source 1.6.x before 1.6.2.18.1 and 1.8.x before 1.8.4.3 does not properly handle '\\0' characters in SIP packets, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a crafted packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xwcc-7hmc-296q/GHSA-xwcc-7hmc-296q.json b/advisories/unreviewed/2022/05/GHSA-xwcc-7hmc-296q/GHSA-xwcc-7hmc-296q.json index cde7778afb5..c8149e385e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-xwcc-7hmc-296q/GHSA-xwcc-7hmc-296q.json +++ b/advisories/unreviewed/2022/05/GHSA-xwcc-7hmc-296q/GHSA-xwcc-7hmc-296q.json @@ -7,12 +7,8 @@ "CVE-2011-2890" ], "details": "The MediaViewMedia class in administrator/components/com_media/views/media/view.html.php in Joomla! 1.5.23 and earlier allows remote attackers to obtain sensitive information via vectors involving the base variable, leading to disclosure of the installation path, a different vulnerability than CVE-2011-2488.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xx4v-fp2m-hmpv/GHSA-xx4v-fp2m-hmpv.json b/advisories/unreviewed/2022/05/GHSA-xx4v-fp2m-hmpv/GHSA-xx4v-fp2m-hmpv.json index 0665a9dfcb9..b468c4a26cc 100644 --- a/advisories/unreviewed/2022/05/GHSA-xx4v-fp2m-hmpv/GHSA-xx4v-fp2m-hmpv.json +++ b/advisories/unreviewed/2022/05/GHSA-xx4v-fp2m-hmpv/GHSA-xx4v-fp2m-hmpv.json @@ -7,12 +7,8 @@ "CVE-2011-2891" ], "details": "Joomla! 1.6.x before 1.6.2 allows remote attackers to obtain sensitive information via an empty Itemid array parameter to index.php, which reveals the installation path in an error message, a different vulnerability than CVE-2011-2488.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xxx3-q2f4-59h7/GHSA-xxx3-q2f4-59h7.json b/advisories/unreviewed/2022/05/GHSA-xxx3-q2f4-59h7/GHSA-xxx3-q2f4-59h7.json index c746f838b6a..fc6e69fe305 100644 --- a/advisories/unreviewed/2022/05/GHSA-xxx3-q2f4-59h7/GHSA-xxx3-q2f4-59h7.json +++ b/advisories/unreviewed/2022/05/GHSA-xxx3-q2f4-59h7/GHSA-xxx3-q2f4-59h7.json @@ -7,12 +7,8 @@ "CVE-2011-2759" ], "details": "The login page of IDSWebApp in the Web Administration Tool in IBM Tivoli Directory Server (TDS) 6.2 before 6.2.0.3-TIV-ITDS-IF0004 does not have an off autocomplete attribute for authentication fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-w7x5-g6gj-cxw9/GHSA-w7x5-g6gj-cxw9.json b/advisories/unreviewed/2023/01/GHSA-w7x5-g6gj-cxw9/GHSA-w7x5-g6gj-cxw9.json index e663d10e1b1..00277c387cd 100644 --- a/advisories/unreviewed/2023/01/GHSA-w7x5-g6gj-cxw9/GHSA-w7x5-g6gj-cxw9.json +++ b/advisories/unreviewed/2023/01/GHSA-w7x5-g6gj-cxw9/GHSA-w7x5-g6gj-cxw9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/04/GHSA-w8v6-gxpj-3qp5/GHSA-w8v6-gxpj-3qp5.json b/advisories/unreviewed/2023/04/GHSA-w8v6-gxpj-3qp5/GHSA-w8v6-gxpj-3qp5.json index cadf66f13bc..6d4ba80b033 100644 --- a/advisories/unreviewed/2023/04/GHSA-w8v6-gxpj-3qp5/GHSA-w8v6-gxpj-3qp5.json +++ b/advisories/unreviewed/2023/04/GHSA-w8v6-gxpj-3qp5/GHSA-w8v6-gxpj-3qp5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/07/GHSA-95rc-wm7j-rpf8/GHSA-95rc-wm7j-rpf8.json b/advisories/unreviewed/2023/07/GHSA-95rc-wm7j-rpf8/GHSA-95rc-wm7j-rpf8.json index c851d2a28e3..d7c3cb8d59a 100644 --- a/advisories/unreviewed/2023/07/GHSA-95rc-wm7j-rpf8/GHSA-95rc-wm7j-rpf8.json +++ b/advisories/unreviewed/2023/07/GHSA-95rc-wm7j-rpf8/GHSA-95rc-wm7j-rpf8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/07/GHSA-jwfw-gf3r-5v35/GHSA-jwfw-gf3r-5v35.json b/advisories/unreviewed/2023/07/GHSA-jwfw-gf3r-5v35/GHSA-jwfw-gf3r-5v35.json index 98657c3976a..5eccd774b9d 100644 --- a/advisories/unreviewed/2023/07/GHSA-jwfw-gf3r-5v35/GHSA-jwfw-gf3r-5v35.json +++ b/advisories/unreviewed/2023/07/GHSA-jwfw-gf3r-5v35/GHSA-jwfw-gf3r-5v35.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/07/GHSA-p86m-wwc3-qw9v/GHSA-p86m-wwc3-qw9v.json b/advisories/unreviewed/2023/07/GHSA-p86m-wwc3-qw9v/GHSA-p86m-wwc3-qw9v.json index 57ca69cf391..90e03cdd7dc 100644 --- a/advisories/unreviewed/2023/07/GHSA-p86m-wwc3-qw9v/GHSA-p86m-wwc3-qw9v.json +++ b/advisories/unreviewed/2023/07/GHSA-p86m-wwc3-qw9v/GHSA-p86m-wwc3-qw9v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/08/GHSA-4cgx-34q8-6h3x/GHSA-4cgx-34q8-6h3x.json b/advisories/unreviewed/2023/08/GHSA-4cgx-34q8-6h3x/GHSA-4cgx-34q8-6h3x.json index 121d5b0a64c..4484054f6c7 100644 --- a/advisories/unreviewed/2023/08/GHSA-4cgx-34q8-6h3x/GHSA-4cgx-34q8-6h3x.json +++ b/advisories/unreviewed/2023/08/GHSA-4cgx-34q8-6h3x/GHSA-4cgx-34q8-6h3x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/09/GHSA-2cwv-7h96-mp7x/GHSA-2cwv-7h96-mp7x.json b/advisories/unreviewed/2023/09/GHSA-2cwv-7h96-mp7x/GHSA-2cwv-7h96-mp7x.json index 78a6ed34422..544674e5346 100644 --- a/advisories/unreviewed/2023/09/GHSA-2cwv-7h96-mp7x/GHSA-2cwv-7h96-mp7x.json +++ b/advisories/unreviewed/2023/09/GHSA-2cwv-7h96-mp7x/GHSA-2cwv-7h96-mp7x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/09/GHSA-5chm-8p4r-vxjr/GHSA-5chm-8p4r-vxjr.json b/advisories/unreviewed/2023/09/GHSA-5chm-8p4r-vxjr/GHSA-5chm-8p4r-vxjr.json index f638048089a..30d352133d6 100644 --- a/advisories/unreviewed/2023/09/GHSA-5chm-8p4r-vxjr/GHSA-5chm-8p4r-vxjr.json +++ b/advisories/unreviewed/2023/09/GHSA-5chm-8p4r-vxjr/GHSA-5chm-8p4r-vxjr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/09/GHSA-cm34-7g79-wv3w/GHSA-cm34-7g79-wv3w.json b/advisories/unreviewed/2023/09/GHSA-cm34-7g79-wv3w/GHSA-cm34-7g79-wv3w.json index 1fec47a8bea..f3129024017 100644 --- a/advisories/unreviewed/2023/09/GHSA-cm34-7g79-wv3w/GHSA-cm34-7g79-wv3w.json +++ b/advisories/unreviewed/2023/09/GHSA-cm34-7g79-wv3w/GHSA-cm34-7g79-wv3w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/09/GHSA-cq4c-4r36-mfc9/GHSA-cq4c-4r36-mfc9.json b/advisories/unreviewed/2023/09/GHSA-cq4c-4r36-mfc9/GHSA-cq4c-4r36-mfc9.json index a2306153e3d..7baabba5735 100644 --- a/advisories/unreviewed/2023/09/GHSA-cq4c-4r36-mfc9/GHSA-cq4c-4r36-mfc9.json +++ b/advisories/unreviewed/2023/09/GHSA-cq4c-4r36-mfc9/GHSA-cq4c-4r36-mfc9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-29hx-4x6h-2q4x/GHSA-29hx-4x6h-2q4x.json b/advisories/unreviewed/2023/12/GHSA-29hx-4x6h-2q4x/GHSA-29hx-4x6h-2q4x.json index 092b6247bdb..d880b0a5a72 100644 --- a/advisories/unreviewed/2023/12/GHSA-29hx-4x6h-2q4x/GHSA-29hx-4x6h-2q4x.json +++ b/advisories/unreviewed/2023/12/GHSA-29hx-4x6h-2q4x/GHSA-29hx-4x6h-2q4x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-c7vp-x3hm-mmrp/GHSA-c7vp-x3hm-mmrp.json b/advisories/unreviewed/2023/12/GHSA-c7vp-x3hm-mmrp/GHSA-c7vp-x3hm-mmrp.json index 9e3262cb5b4..08a0d16f7a3 100644 --- a/advisories/unreviewed/2023/12/GHSA-c7vp-x3hm-mmrp/GHSA-c7vp-x3hm-mmrp.json +++ b/advisories/unreviewed/2023/12/GHSA-c7vp-x3hm-mmrp/GHSA-c7vp-x3hm-mmrp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-6j62-7qgg-9gww/GHSA-6j62-7qgg-9gww.json b/advisories/unreviewed/2024/01/GHSA-6j62-7qgg-9gww/GHSA-6j62-7qgg-9gww.json index 1bd94b5fb0e..814140c6f81 100644 --- a/advisories/unreviewed/2024/01/GHSA-6j62-7qgg-9gww/GHSA-6j62-7qgg-9gww.json +++ b/advisories/unreviewed/2024/01/GHSA-6j62-7qgg-9gww/GHSA-6j62-7qgg-9gww.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-86pm-fpxw-jjjc/GHSA-86pm-fpxw-jjjc.json b/advisories/unreviewed/2024/01/GHSA-86pm-fpxw-jjjc/GHSA-86pm-fpxw-jjjc.json index 5f532c42d9b..47ff40a8a56 100644 --- a/advisories/unreviewed/2024/01/GHSA-86pm-fpxw-jjjc/GHSA-86pm-fpxw-jjjc.json +++ b/advisories/unreviewed/2024/01/GHSA-86pm-fpxw-jjjc/GHSA-86pm-fpxw-jjjc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-9fh5-955w-9jfh/GHSA-9fh5-955w-9jfh.json b/advisories/unreviewed/2024/01/GHSA-9fh5-955w-9jfh/GHSA-9fh5-955w-9jfh.json index 15db15f188b..2b589b2e96a 100644 --- a/advisories/unreviewed/2024/01/GHSA-9fh5-955w-9jfh/GHSA-9fh5-955w-9jfh.json +++ b/advisories/unreviewed/2024/01/GHSA-9fh5-955w-9jfh/GHSA-9fh5-955w-9jfh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-grx2-83w4-8647/GHSA-grx2-83w4-8647.json b/advisories/unreviewed/2024/01/GHSA-grx2-83w4-8647/GHSA-grx2-83w4-8647.json index 3e4b78547ed..c2e46e465e7 100644 --- a/advisories/unreviewed/2024/01/GHSA-grx2-83w4-8647/GHSA-grx2-83w4-8647.json +++ b/advisories/unreviewed/2024/01/GHSA-grx2-83w4-8647/GHSA-grx2-83w4-8647.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-qjqj-4cq6-6f2f/GHSA-qjqj-4cq6-6f2f.json b/advisories/unreviewed/2024/01/GHSA-qjqj-4cq6-6f2f/GHSA-qjqj-4cq6-6f2f.json index 8a9b83dc6b6..9e776048508 100644 --- a/advisories/unreviewed/2024/01/GHSA-qjqj-4cq6-6f2f/GHSA-qjqj-4cq6-6f2f.json +++ b/advisories/unreviewed/2024/01/GHSA-qjqj-4cq6-6f2f/GHSA-qjqj-4cq6-6f2f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-2q38-w8jv-6jxm/GHSA-2q38-w8jv-6jxm.json b/advisories/unreviewed/2024/02/GHSA-2q38-w8jv-6jxm/GHSA-2q38-w8jv-6jxm.json index 2abda3e6dd1..40940b91517 100644 --- a/advisories/unreviewed/2024/02/GHSA-2q38-w8jv-6jxm/GHSA-2q38-w8jv-6jxm.json +++ b/advisories/unreviewed/2024/02/GHSA-2q38-w8jv-6jxm/GHSA-2q38-w8jv-6jxm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-2q6p-h6rg-vx7w/GHSA-2q6p-h6rg-vx7w.json b/advisories/unreviewed/2024/02/GHSA-2q6p-h6rg-vx7w/GHSA-2q6p-h6rg-vx7w.json index 9211a04f417..4375cfc1cfb 100644 --- a/advisories/unreviewed/2024/02/GHSA-2q6p-h6rg-vx7w/GHSA-2q6p-h6rg-vx7w.json +++ b/advisories/unreviewed/2024/02/GHSA-2q6p-h6rg-vx7w/GHSA-2q6p-h6rg-vx7w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-2vp2-4cqw-xhcc/GHSA-2vp2-4cqw-xhcc.json b/advisories/unreviewed/2024/02/GHSA-2vp2-4cqw-xhcc/GHSA-2vp2-4cqw-xhcc.json index e8698083c75..fcd2207e83d 100644 --- a/advisories/unreviewed/2024/02/GHSA-2vp2-4cqw-xhcc/GHSA-2vp2-4cqw-xhcc.json +++ b/advisories/unreviewed/2024/02/GHSA-2vp2-4cqw-xhcc/GHSA-2vp2-4cqw-xhcc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-3r9p-rc57-36hr/GHSA-3r9p-rc57-36hr.json b/advisories/unreviewed/2024/02/GHSA-3r9p-rc57-36hr/GHSA-3r9p-rc57-36hr.json index 9f236e61976..733bb65a008 100644 --- a/advisories/unreviewed/2024/02/GHSA-3r9p-rc57-36hr/GHSA-3r9p-rc57-36hr.json +++ b/advisories/unreviewed/2024/02/GHSA-3r9p-rc57-36hr/GHSA-3r9p-rc57-36hr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-4p49-v2x9-3g3j/GHSA-4p49-v2x9-3g3j.json b/advisories/unreviewed/2024/02/GHSA-4p49-v2x9-3g3j/GHSA-4p49-v2x9-3g3j.json index 66989e0666e..01aa8f81ccb 100644 --- a/advisories/unreviewed/2024/02/GHSA-4p49-v2x9-3g3j/GHSA-4p49-v2x9-3g3j.json +++ b/advisories/unreviewed/2024/02/GHSA-4p49-v2x9-3g3j/GHSA-4p49-v2x9-3g3j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-4w5q-x8gv-qmwx/GHSA-4w5q-x8gv-qmwx.json b/advisories/unreviewed/2024/02/GHSA-4w5q-x8gv-qmwx/GHSA-4w5q-x8gv-qmwx.json index 9adc1a8b6e4..913952304a2 100644 --- a/advisories/unreviewed/2024/02/GHSA-4w5q-x8gv-qmwx/GHSA-4w5q-x8gv-qmwx.json +++ b/advisories/unreviewed/2024/02/GHSA-4w5q-x8gv-qmwx/GHSA-4w5q-x8gv-qmwx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-64q6-q79x-3pf7/GHSA-64q6-q79x-3pf7.json b/advisories/unreviewed/2024/02/GHSA-64q6-q79x-3pf7/GHSA-64q6-q79x-3pf7.json index ca59c52c416..ca3f5220d16 100644 --- a/advisories/unreviewed/2024/02/GHSA-64q6-q79x-3pf7/GHSA-64q6-q79x-3pf7.json +++ b/advisories/unreviewed/2024/02/GHSA-64q6-q79x-3pf7/GHSA-64q6-q79x-3pf7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-676c-p5xh-7hfr/GHSA-676c-p5xh-7hfr.json b/advisories/unreviewed/2024/02/GHSA-676c-p5xh-7hfr/GHSA-676c-p5xh-7hfr.json index 2298338bb7d..831d5810005 100644 --- a/advisories/unreviewed/2024/02/GHSA-676c-p5xh-7hfr/GHSA-676c-p5xh-7hfr.json +++ b/advisories/unreviewed/2024/02/GHSA-676c-p5xh-7hfr/GHSA-676c-p5xh-7hfr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-6h9m-f43m-w4qj/GHSA-6h9m-f43m-w4qj.json b/advisories/unreviewed/2024/02/GHSA-6h9m-f43m-w4qj/GHSA-6h9m-f43m-w4qj.json index 0737df55ddd..f841734bad5 100644 --- a/advisories/unreviewed/2024/02/GHSA-6h9m-f43m-w4qj/GHSA-6h9m-f43m-w4qj.json +++ b/advisories/unreviewed/2024/02/GHSA-6h9m-f43m-w4qj/GHSA-6h9m-f43m-w4qj.json @@ -7,12 +7,8 @@ "CVE-2024-26464" ], "details": "net-snmp 5.9.4 contains a memory leak vulnerability in /net-snmp/apps/snmpvacm.c.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-6rg4-5cvm-2w3m/GHSA-6rg4-5cvm-2w3m.json b/advisories/unreviewed/2024/02/GHSA-6rg4-5cvm-2w3m/GHSA-6rg4-5cvm-2w3m.json index fb48718a10b..29ac5a4600b 100644 --- a/advisories/unreviewed/2024/02/GHSA-6rg4-5cvm-2w3m/GHSA-6rg4-5cvm-2w3m.json +++ b/advisories/unreviewed/2024/02/GHSA-6rg4-5cvm-2w3m/GHSA-6rg4-5cvm-2w3m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-f6gc-85gg-m766/GHSA-f6gc-85gg-m766.json b/advisories/unreviewed/2024/02/GHSA-f6gc-85gg-m766/GHSA-f6gc-85gg-m766.json index 00f66b5216d..2f36ae6c62d 100644 --- a/advisories/unreviewed/2024/02/GHSA-f6gc-85gg-m766/GHSA-f6gc-85gg-m766.json +++ b/advisories/unreviewed/2024/02/GHSA-f6gc-85gg-m766/GHSA-f6gc-85gg-m766.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-g3gr-pmrc-h9x8/GHSA-g3gr-pmrc-h9x8.json b/advisories/unreviewed/2024/02/GHSA-g3gr-pmrc-h9x8/GHSA-g3gr-pmrc-h9x8.json index 9d8696de60d..7a2fc7a2219 100644 --- a/advisories/unreviewed/2024/02/GHSA-g3gr-pmrc-h9x8/GHSA-g3gr-pmrc-h9x8.json +++ b/advisories/unreviewed/2024/02/GHSA-g3gr-pmrc-h9x8/GHSA-g3gr-pmrc-h9x8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-h9v6-x8w6-frrm/GHSA-h9v6-x8w6-frrm.json b/advisories/unreviewed/2024/02/GHSA-h9v6-x8w6-frrm/GHSA-h9v6-x8w6-frrm.json index 819a551efd6..2bca04a987e 100644 --- a/advisories/unreviewed/2024/02/GHSA-h9v6-x8w6-frrm/GHSA-h9v6-x8w6-frrm.json +++ b/advisories/unreviewed/2024/02/GHSA-h9v6-x8w6-frrm/GHSA-h9v6-x8w6-frrm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-j6qq-7xp7-c5p5/GHSA-j6qq-7xp7-c5p5.json b/advisories/unreviewed/2024/02/GHSA-j6qq-7xp7-c5p5/GHSA-j6qq-7xp7-c5p5.json index 87c651cd81e..cdd89346244 100644 --- a/advisories/unreviewed/2024/02/GHSA-j6qq-7xp7-c5p5/GHSA-j6qq-7xp7-c5p5.json +++ b/advisories/unreviewed/2024/02/GHSA-j6qq-7xp7-c5p5/GHSA-j6qq-7xp7-c5p5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-mwhf-6mjm-6w3h/GHSA-mwhf-6mjm-6w3h.json b/advisories/unreviewed/2024/02/GHSA-mwhf-6mjm-6w3h/GHSA-mwhf-6mjm-6w3h.json index 519ac43bfa9..b8e0cc9747e 100644 --- a/advisories/unreviewed/2024/02/GHSA-mwhf-6mjm-6w3h/GHSA-mwhf-6mjm-6w3h.json +++ b/advisories/unreviewed/2024/02/GHSA-mwhf-6mjm-6w3h/GHSA-mwhf-6mjm-6w3h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-wwm6-cf6h-7h22/GHSA-wwm6-cf6h-7h22.json b/advisories/unreviewed/2024/02/GHSA-wwm6-cf6h-7h22/GHSA-wwm6-cf6h-7h22.json index 3bae5211920..5396a086e74 100644 --- a/advisories/unreviewed/2024/02/GHSA-wwm6-cf6h-7h22/GHSA-wwm6-cf6h-7h22.json +++ b/advisories/unreviewed/2024/02/GHSA-wwm6-cf6h-7h22/GHSA-wwm6-cf6h-7h22.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-x7m4-p3pg-xrfm/GHSA-x7m4-p3pg-xrfm.json b/advisories/unreviewed/2024/02/GHSA-x7m4-p3pg-xrfm/GHSA-x7m4-p3pg-xrfm.json index 4d8e36af8b4..42f65e3a0d0 100644 --- a/advisories/unreviewed/2024/02/GHSA-x7m4-p3pg-xrfm/GHSA-x7m4-p3pg-xrfm.json +++ b/advisories/unreviewed/2024/02/GHSA-x7m4-p3pg-xrfm/GHSA-x7m4-p3pg-xrfm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-gpvh-42rv-p6wg/GHSA-gpvh-42rv-p6wg.json b/advisories/unreviewed/2024/03/GHSA-gpvh-42rv-p6wg/GHSA-gpvh-42rv-p6wg.json index f0614992f29..47a47c10abb 100644 --- a/advisories/unreviewed/2024/03/GHSA-gpvh-42rv-p6wg/GHSA-gpvh-42rv-p6wg.json +++ b/advisories/unreviewed/2024/03/GHSA-gpvh-42rv-p6wg/GHSA-gpvh-42rv-p6wg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -43,9 +41,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-h86r-ff52-49qg/GHSA-h86r-ff52-49qg.json b/advisories/unreviewed/2024/03/GHSA-h86r-ff52-49qg/GHSA-h86r-ff52-49qg.json index ac4b1e895e0..4f3e03c718d 100644 --- a/advisories/unreviewed/2024/03/GHSA-h86r-ff52-49qg/GHSA-h86r-ff52-49qg.json +++ b/advisories/unreviewed/2024/03/GHSA-h86r-ff52-49qg/GHSA-h86r-ff52-49qg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-mfgg-7fpx-cp7p/GHSA-mfgg-7fpx-cp7p.json b/advisories/unreviewed/2024/03/GHSA-mfgg-7fpx-cp7p/GHSA-mfgg-7fpx-cp7p.json index de8b71d77c4..f65c0122642 100644 --- a/advisories/unreviewed/2024/03/GHSA-mfgg-7fpx-cp7p/GHSA-mfgg-7fpx-cp7p.json +++ b/advisories/unreviewed/2024/03/GHSA-mfgg-7fpx-cp7p/GHSA-mfgg-7fpx-cp7p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-3vx2-j5pv-6cq7/GHSA-3vx2-j5pv-6cq7.json b/advisories/unreviewed/2024/04/GHSA-3vx2-j5pv-6cq7/GHSA-3vx2-j5pv-6cq7.json index 1504acc58bd..d1c4826d338 100644 --- a/advisories/unreviewed/2024/04/GHSA-3vx2-j5pv-6cq7/GHSA-3vx2-j5pv-6cq7.json +++ b/advisories/unreviewed/2024/04/GHSA-3vx2-j5pv-6cq7/GHSA-3vx2-j5pv-6cq7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-7wqm-436q-gxcm/GHSA-7wqm-436q-gxcm.json b/advisories/unreviewed/2024/04/GHSA-7wqm-436q-gxcm/GHSA-7wqm-436q-gxcm.json index 778616a331f..dc8dc2348f5 100644 --- a/advisories/unreviewed/2024/04/GHSA-7wqm-436q-gxcm/GHSA-7wqm-436q-gxcm.json +++ b/advisories/unreviewed/2024/04/GHSA-7wqm-436q-gxcm/GHSA-7wqm-436q-gxcm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-2hq2-46wf-3mhv/GHSA-2hq2-46wf-3mhv.json b/advisories/unreviewed/2024/05/GHSA-2hq2-46wf-3mhv/GHSA-2hq2-46wf-3mhv.json index cf6e6ec54c4..eeffe143485 100644 --- a/advisories/unreviewed/2024/05/GHSA-2hq2-46wf-3mhv/GHSA-2hq2-46wf-3mhv.json +++ b/advisories/unreviewed/2024/05/GHSA-2hq2-46wf-3mhv/GHSA-2hq2-46wf-3mhv.json @@ -7,12 +7,8 @@ "CVE-2021-47311" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: qcom/emac: fix UAF in emac_remove\n\nadpt is netdev private data and it cannot be\nused after free_netdev() call. Using adpt after free_netdev()\ncan cause UAF bug. Fix it by moving free_netdev() at the end of the\nfunction.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-2jpv-mgvf-9659/GHSA-2jpv-mgvf-9659.json b/advisories/unreviewed/2024/05/GHSA-2jpv-mgvf-9659/GHSA-2jpv-mgvf-9659.json index 695784b33fd..312761adefa 100644 --- a/advisories/unreviewed/2024/05/GHSA-2jpv-mgvf-9659/GHSA-2jpv-mgvf-9659.json +++ b/advisories/unreviewed/2024/05/GHSA-2jpv-mgvf-9659/GHSA-2jpv-mgvf-9659.json @@ -7,12 +7,8 @@ "CVE-2021-47351" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nubifs: Fix races between xattr_{set|get} and listxattr operations\n\nUBIFS may occur some problems with concurrent xattr_{set|get} and\nlistxattr operations, such as assertion failure, memory corruption,\nstale xattr value[1].\n\nFix it by importing a new rw-lock in @ubifs_inode to serilize write\noperations on xattr, concurrent read operations are still effective,\njust like ext4.\n\n[1] https://lore.kernel.org/linux-mtd/20200630130438.141649-1-houtao1@huawei.com", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-2p2c-qgqr-9ghc/GHSA-2p2c-qgqr-9ghc.json b/advisories/unreviewed/2024/05/GHSA-2p2c-qgqr-9ghc/GHSA-2p2c-qgqr-9ghc.json index c7703981f62..f7b3a96819b 100644 --- a/advisories/unreviewed/2024/05/GHSA-2p2c-qgqr-9ghc/GHSA-2p2c-qgqr-9ghc.json +++ b/advisories/unreviewed/2024/05/GHSA-2p2c-qgqr-9ghc/GHSA-2p2c-qgqr-9ghc.json @@ -7,12 +7,8 @@ "CVE-2021-47317" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/bpf: Fix detecting BPF atomic instructions\n\nCommit 91c960b0056672 (\"bpf: Rename BPF_XADD and prepare to encode other\natomics in .imm\") converted BPF_XADD to BPF_ATOMIC and added a way to\ndistinguish instructions based on the immediate field. Existing JIT\nimplementations were updated to check for the immediate field and to\nreject programs utilizing anything more than BPF_ADD (such as BPF_FETCH)\nin the immediate field.\n\nHowever, the check added to powerpc64 JIT did not look at the correct\nBPF instruction. Due to this, such programs would be accepted and\nincorrectly JIT'ed resulting in soft lockups, as seen with the atomic\nbounds test. Fix this by looking at the correct immediate value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-3hw4-pvhh-9qcq/GHSA-3hw4-pvhh-9qcq.json b/advisories/unreviewed/2024/05/GHSA-3hw4-pvhh-9qcq/GHSA-3hw4-pvhh-9qcq.json index c2b2246f377..01738548f4a 100644 --- a/advisories/unreviewed/2024/05/GHSA-3hw4-pvhh-9qcq/GHSA-3hw4-pvhh-9qcq.json +++ b/advisories/unreviewed/2024/05/GHSA-3hw4-pvhh-9qcq/GHSA-3hw4-pvhh-9qcq.json @@ -7,12 +7,8 @@ "CVE-2021-47346" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncoresight: tmc-etf: Fix global-out-of-bounds in tmc_update_etf_buffer()\n\ncommit 6f755e85c332 (\"coresight: Add helper for inserting synchronization\npackets\") removed trailing '\\0' from barrier_pkt array and updated the\ncall sites like etb_update_buffer() to have proper checks for barrier_pkt\nsize before read but missed updating tmc_update_etf_buffer() which still\nreads barrier_pkt past the array size resulting in KASAN out-of-bounds\nbug. Fix this by adding a check for barrier_pkt size before accessing\nlike it is done in etb_update_buffer().\n\n BUG: KASAN: global-out-of-bounds in tmc_update_etf_buffer+0x4b8/0x698\n Read of size 4 at addr ffffffd05b7d1030 by task perf/2629\n\n Call trace:\n dump_backtrace+0x0/0x27c\n show_stack+0x20/0x2c\n dump_stack+0x11c/0x188\n print_address_description+0x3c/0x4a4\n __kasan_report+0x140/0x164\n kasan_report+0x10/0x18\n __asan_report_load4_noabort+0x1c/0x24\n tmc_update_etf_buffer+0x4b8/0x698\n etm_event_stop+0x248/0x2d8\n etm_event_del+0x20/0x2c\n event_sched_out+0x214/0x6f0\n group_sched_out+0xd0/0x270\n ctx_sched_out+0x2ec/0x518\n __perf_event_task_sched_out+0x4fc/0xe6c\n __schedule+0x1094/0x16a0\n preempt_schedule_irq+0x88/0x170\n arm64_preempt_schedule_irq+0xf0/0x18c\n el1_irq+0xe8/0x180\n perf_event_exec+0x4d8/0x56c\n setup_new_exec+0x204/0x400\n load_elf_binary+0x72c/0x18c0\n search_binary_handler+0x13c/0x420\n load_script+0x500/0x6c4\n search_binary_handler+0x13c/0x420\n exec_binprm+0x118/0x654\n __do_execve_file+0x77c/0xba4\n __arm64_compat_sys_execve+0x98/0xac\n el0_svc_common+0x1f8/0x5e0\n el0_svc_compat_handler+0x84/0xb0\n el0_svc_compat+0x10/0x50\n\n The buggy address belongs to the variable:\n barrier_pkt+0x10/0x40\n\n Memory state around the buggy address:\n ffffffd05b7d0f00: fa fa fa fa 04 fa fa fa fa fa fa fa 00 00 00 00\n ffffffd05b7d0f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00\n >ffffffd05b7d1000: 00 00 00 00 00 00 fa fa fa fa fa fa 00 00 00 03\n ^\n ffffffd05b7d1080: fa fa fa fa 00 02 fa fa fa fa fa fa 03 fa fa fa\n ffffffd05b7d1100: fa fa fa fa 00 00 00 00 05 fa fa fa fa fa fa fa\n ==================================================================", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-3p2v-4qj8-6w5f/GHSA-3p2v-4qj8-6w5f.json b/advisories/unreviewed/2024/05/GHSA-3p2v-4qj8-6w5f/GHSA-3p2v-4qj8-6w5f.json index aaa109ac5d4..5168c5bfddb 100644 --- a/advisories/unreviewed/2024/05/GHSA-3p2v-4qj8-6w5f/GHSA-3p2v-4qj8-6w5f.json +++ b/advisories/unreviewed/2024/05/GHSA-3p2v-4qj8-6w5f/GHSA-3p2v-4qj8-6w5f.json @@ -7,12 +7,8 @@ "CVE-2021-47339" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: v4l2-core: explicitly clear ioctl input data\n\nAs seen from a recent syzbot bug report, mistakes in the compat ioctl\nimplementation can lead to uninitialized kernel stack data getting used\nas input for driver ioctl handlers.\n\nThe reported bug is now fixed, but it's possible that other related\nbugs are still present or get added in the future. As the drivers need\nto check user input already, the possible impact is fairly low, but it\nmight still cause an information leak.\n\nTo be on the safe side, always clear the entire ioctl buffer before\ncalling the conversion handler functions that are meant to initialize\nthem.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-3qvj-8qwq-5jxj/GHSA-3qvj-8qwq-5jxj.json b/advisories/unreviewed/2024/05/GHSA-3qvj-8qwq-5jxj/GHSA-3qvj-8qwq-5jxj.json index fefd38aaafb..873d5f3fafc 100644 --- a/advisories/unreviewed/2024/05/GHSA-3qvj-8qwq-5jxj/GHSA-3qvj-8qwq-5jxj.json +++ b/advisories/unreviewed/2024/05/GHSA-3qvj-8qwq-5jxj/GHSA-3qvj-8qwq-5jxj.json @@ -7,12 +7,8 @@ "CVE-2021-47330" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ntty: serial: 8250: serial_cs: Fix a memory leak in error handling path\n\nIn the probe function, if the final 'serial_config()' fails, 'info' is\nleaking.\n\nAdd a resource handling path to free this memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-3whv-3wrh-jjqq/GHSA-3whv-3wrh-jjqq.json b/advisories/unreviewed/2024/05/GHSA-3whv-3wrh-jjqq/GHSA-3whv-3wrh-jjqq.json index c0048ee8132..9adf24f5a6b 100644 --- a/advisories/unreviewed/2024/05/GHSA-3whv-3wrh-jjqq/GHSA-3whv-3wrh-jjqq.json +++ b/advisories/unreviewed/2024/05/GHSA-3whv-3wrh-jjqq/GHSA-3whv-3wrh-jjqq.json @@ -7,12 +7,8 @@ "CVE-2021-47328" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: iscsi: Fix conn use after free during resets\n\nIf we haven't done a unbind target call we can race where\niscsi_conn_teardown wakes up the EH thread and then frees the conn while\nthose threads are still accessing the conn ehwait.\n\nWe can only do one TMF per session so this just moves the TMF fields from\nthe conn to the session. We can then rely on the\niscsi_session_teardown->iscsi_remove_session->__iscsi_unbind_session call\nto remove the target and it's devices, and know after that point there is\nno device or scsi-ml callout trying to access the session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-4jxh-jrgp-4422/GHSA-4jxh-jrgp-4422.json b/advisories/unreviewed/2024/05/GHSA-4jxh-jrgp-4422/GHSA-4jxh-jrgp-4422.json index bf57607b9ae..f190b55505c 100644 --- a/advisories/unreviewed/2024/05/GHSA-4jxh-jrgp-4422/GHSA-4jxh-jrgp-4422.json +++ b/advisories/unreviewed/2024/05/GHSA-4jxh-jrgp-4422/GHSA-4jxh-jrgp-4422.json @@ -7,12 +7,8 @@ "CVE-2021-47226" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/fpu: Invalidate FPU state after a failed XRSTOR from a user buffer\n\nBoth Intel and AMD consider it to be architecturally valid for XRSTOR to\nfail with #PF but nonetheless change the register state. The actual\nconditions under which this might occur are unclear [1], but it seems\nplausible that this might be triggered if one sibling thread unmaps a page\nand invalidates the shared TLB while another sibling thread is executing\nXRSTOR on the page in question.\n\n__fpu__restore_sig() can execute XRSTOR while the hardware registers\nare preserved on behalf of a different victim task (using the\nfpu_fpregs_owner_ctx mechanism), and, in theory, XRSTOR could fail but\nmodify the registers.\n\nIf this happens, then there is a window in which __fpu__restore_sig()\ncould schedule out and the victim task could schedule back in without\nreloading its own FPU registers. This would result in part of the FPU\nstate that __fpu__restore_sig() was attempting to load leaking into the\nvictim task's user-visible state.\n\nInvalidate preserved FPU registers on XRSTOR failure to prevent this\nsituation from corrupting any state.\n\n[1] Frequent readers of the errata lists might imagine \"complex\n microarchitectural conditions\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-589w-2j5c-px7j/GHSA-589w-2j5c-px7j.json b/advisories/unreviewed/2024/05/GHSA-589w-2j5c-px7j/GHSA-589w-2j5c-px7j.json index 0020820040c..dcf09f592c8 100644 --- a/advisories/unreviewed/2024/05/GHSA-589w-2j5c-px7j/GHSA-589w-2j5c-px7j.json +++ b/advisories/unreviewed/2024/05/GHSA-589w-2j5c-px7j/GHSA-589w-2j5c-px7j.json @@ -7,12 +7,8 @@ "CVE-2021-47310" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ti: fix UAF in tlan_remove_one\n\npriv is netdev private data and it cannot be\nused after free_netdev() call. Using priv after free_netdev()\ncan cause UAF bug. Fix it by moving free_netdev() at the end of the\nfunction.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-5w2f-hr95-2h6j/GHSA-5w2f-hr95-2h6j.json b/advisories/unreviewed/2024/05/GHSA-5w2f-hr95-2h6j/GHSA-5w2f-hr95-2h6j.json index fe07e012568..b170cab249b 100644 --- a/advisories/unreviewed/2024/05/GHSA-5w2f-hr95-2h6j/GHSA-5w2f-hr95-2h6j.json +++ b/advisories/unreviewed/2024/05/GHSA-5w2f-hr95-2h6j/GHSA-5w2f-hr95-2h6j.json @@ -7,12 +7,8 @@ "CVE-2021-47363" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnexthop: Fix division by zero while replacing a resilient group\n\nThe resilient nexthop group torture tests in fib_nexthop.sh exposed a\npossible division by zero while replacing a resilient group [1]. The\ndivision by zero occurs when the data path sees a resilient nexthop\ngroup with zero buckets.\n\nThe tests replace a resilient nexthop group in a loop while traffic is\nforwarded through it. The tests do not specify the number of buckets\nwhile performing the replacement, resulting in the kernel allocating a\nstub resilient table (i.e, 'struct nh_res_table') with zero buckets.\n\nThis table should never be visible to the data path, but the old nexthop\ngroup (i.e., 'oldg') might still be used by the data path when the stub\ntable is assigned to it.\n\nFix this by only assigning the stub table to the old nexthop group after\nmaking sure the group is no longer used by the data path.\n\nTested with fib_nexthops.sh:\n\nTests passed: 222\nTests failed: 0\n\n[1]\n divide error: 0000 [#1] PREEMPT SMP KASAN\n CPU: 0 PID: 1850 Comm: ping Not tainted 5.14.0-custom-10271-ga86eb53057fe #1107\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.14.0-4.fc34 04/01/2014\n RIP: 0010:nexthop_select_path+0x2d2/0x1a80\n[...]\n Call Trace:\n fib_select_multipath+0x79b/0x1530\n fib_select_path+0x8fb/0x1c10\n ip_route_output_key_hash_rcu+0x1198/0x2da0\n ip_route_output_key_hash+0x190/0x340\n ip_route_output_flow+0x21/0x120\n raw_sendmsg+0x91d/0x2e10\n inet_sendmsg+0x9e/0xe0\n __sys_sendto+0x23d/0x360\n __x64_sys_sendto+0xe1/0x1b0\n do_syscall_64+0x35/0x80\n entry_SYSCALL_64_after_hwframe+0x44/0xae", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-5xfg-8mp6-pr5f/GHSA-5xfg-8mp6-pr5f.json b/advisories/unreviewed/2024/05/GHSA-5xfg-8mp6-pr5f/GHSA-5xfg-8mp6-pr5f.json index 19d6ac39e2b..714696b0c92 100644 --- a/advisories/unreviewed/2024/05/GHSA-5xfg-8mp6-pr5f/GHSA-5xfg-8mp6-pr5f.json +++ b/advisories/unreviewed/2024/05/GHSA-5xfg-8mp6-pr5f/GHSA-5xfg-8mp6-pr5f.json @@ -7,12 +7,8 @@ "CVE-2022-48707" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncxl/region: Fix null pointer dereference for resetting decoder\n\nNot all decoders have a reset callback.\n\nThe CXL specification allows a host bridge with a single root port to\nhave no explicit HDM decoders. Currently the region driver assumes there\nare none. As such the CXL core creates a special pass through decoder\ninstance without a commit/reset callback.\n\nPrior to this patch, the ->reset() callback was called unconditionally when\ncalling cxl_region_decode_reset. Thus a configuration with 1 Host Bridge,\n1 Root Port, and one directly attached CXL type 3 device or multiple CXL\ntype 3 devices attached to downstream ports of a switch can cause a null\npointer dereference.\n\nBefore the fix, a kernel crash was observed when we destroy the region, and\na pass through decoder is reset.\n\nThe issue can be reproduced as below,\n 1) create a region with a CXL setup which includes a HB with a\n single root port under which a memdev is attached directly.\n 2) destroy the region with cxl destroy-region regionX -f.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-6xc5-7hvv-v7jc/GHSA-6xc5-7hvv-v7jc.json b/advisories/unreviewed/2024/05/GHSA-6xc5-7hvv-v7jc/GHSA-6xc5-7hvv-v7jc.json index cbd09174983..2dcc1f311eb 100644 --- a/advisories/unreviewed/2024/05/GHSA-6xc5-7hvv-v7jc/GHSA-6xc5-7hvv-v7jc.json +++ b/advisories/unreviewed/2024/05/GHSA-6xc5-7hvv-v7jc/GHSA-6xc5-7hvv-v7jc.json @@ -7,12 +7,8 @@ "CVE-2021-47370" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmptcp: ensure tx skbs always have the MPTCP ext\n\nDue to signed/unsigned comparison, the expression:\n\n\tinfo->size_goal - skb->len > 0\n\nevaluates to true when the size goal is smaller than the\nskb size. That results in lack of tx cache refill, so that\nthe skb allocated by the core TCP code lacks the required\nMPTCP skb extensions.\n\nDue to the above, syzbot is able to trigger the following WARN_ON():\n\nWARNING: CPU: 1 PID: 810 at net/mptcp/protocol.c:1366 mptcp_sendmsg_frag+0x1362/0x1bc0 net/mptcp/protocol.c:1366\nModules linked in:\nCPU: 1 PID: 810 Comm: syz-executor.4 Not tainted 5.14.0-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nRIP: 0010:mptcp_sendmsg_frag+0x1362/0x1bc0 net/mptcp/protocol.c:1366\nCode: ff 4c 8b 74 24 50 48 8b 5c 24 58 e9 0f fb ff ff e8 13 44 8b f8 4c 89 e7 45 31 ed e8 98 57 2e fe e9 81 f4 ff ff e8 fe 43 8b f8 <0f> 0b 41 bd ea ff ff ff e9 6f f4 ff ff 4c 89 e7 e8 b9 8e d2 f8 e9\nRSP: 0018:ffffc9000531f6a0 EFLAGS: 00010216\nRAX: 000000000000697f RBX: 0000000000000000 RCX: ffffc90012107000\nRDX: 0000000000040000 RSI: ffffffff88eac9e2 RDI: 0000000000000003\nRBP: ffff888078b15780 R08: 0000000000000000 R09: 0000000000000000\nR10: ffffffff88eac017 R11: 0000000000000000 R12: ffff88801de0a280\nR13: 0000000000006b58 R14: ffff888066278280 R15: ffff88803c2fe9c0\nFS: 00007fd9f866e700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007faebcb2f718 CR3: 00000000267cb000 CR4: 00000000001506e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n __mptcp_push_pending+0x1fb/0x6b0 net/mptcp/protocol.c:1547\n mptcp_release_cb+0xfe/0x210 net/mptcp/protocol.c:3003\n release_sock+0xb4/0x1b0 net/core/sock.c:3206\n sk_stream_wait_memory+0x604/0xed0 net/core/stream.c:145\n mptcp_sendmsg+0xc39/0x1bc0 net/mptcp/protocol.c:1749\n inet6_sendmsg+0x99/0xe0 net/ipv6/af_inet6.c:643\n sock_sendmsg_nosec net/socket.c:704 [inline]\n sock_sendmsg+0xcf/0x120 net/socket.c:724\n sock_write_iter+0x2a0/0x3e0 net/socket.c:1057\n call_write_iter include/linux/fs.h:2163 [inline]\n new_sync_write+0x40b/0x640 fs/read_write.c:507\n vfs_write+0x7cf/0xae0 fs/read_write.c:594\n ksys_write+0x1ee/0x250 fs/read_write.c:647\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x44/0xae\nRIP: 0033:0x4665f9\nCode: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48\nRSP: 002b:00007fd9f866e188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001\nRAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665f9\nRDX: 00000000000e7b78 RSI: 0000000020000000 RDI: 0000000000000003\nRBP: 00000000004bfcc4 R08: 0000000000000000 R09: 0000000000000000\nR10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038\nR13: 0000000000a9fb1f R14: 00007fd9f866e300 R15: 0000000000022000\n\nFix the issue rewriting the relevant expression to avoid\nsign-related problems - note: size_goal is always >= 0.\n\nAdditionally, ensure that the skb in the tx cache always carries\nthe relevant extension.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-7457-jp56-wxrq/GHSA-7457-jp56-wxrq.json b/advisories/unreviewed/2024/05/GHSA-7457-jp56-wxrq/GHSA-7457-jp56-wxrq.json index 68e8dd3f307..ce502077b78 100644 --- a/advisories/unreviewed/2024/05/GHSA-7457-jp56-wxrq/GHSA-7457-jp56-wxrq.json +++ b/advisories/unreviewed/2024/05/GHSA-7457-jp56-wxrq/GHSA-7457-jp56-wxrq.json @@ -7,12 +7,8 @@ "CVE-2021-47428" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/64s: fix program check interrupt emergency stack path\n\nEmergency stack path was jumping into a 3: label inside the\n__GEN_COMMON_BODY macro for the normal path after it had finished,\nrather than jumping over it. By a small miracle this is the correct\nplace to build up a new interrupt frame with the existing stack\npointer, so things basically worked okay with an added weird looking\n700 trap frame on top (which had the wrong ->nip so it didn't decode\nbug messages either).\n\nFix this by avoiding using numeric labels when jumping over non-trivial\nmacros.\n\nBefore:\n\n LE PAGE_SIZE=64K MMU=Radix SMP NR_CPUS=2048 NUMA PowerNV\n Modules linked in:\n CPU: 0 PID: 88 Comm: sh Not tainted 5.15.0-rc2-00034-ge057cdade6e5 #2637\n NIP: 7265677368657265 LR: c00000000006c0c8 CTR: c0000000000097f0\n REGS: c0000000fffb3a50 TRAP: 0700 Not tainted\n MSR: 9000000000021031 CR: 00000700 XER: 20040000\n CFAR: c0000000000098b0 IRQMASK: 0\n GPR00: c00000000006c964 c0000000fffb3cf0 c000000001513800 0000000000000000\n GPR04: 0000000048ab0778 0000000042000000 0000000000000000 0000000000001299\n GPR08: 000001e447c718ec 0000000022424282 0000000000002710 c00000000006bee8\n GPR12: 9000000000009033 c0000000016b0000 00000000000000b0 0000000000000001\n GPR16: 0000000000000000 0000000000000002 0000000000000000 0000000000000ff8\n GPR20: 0000000000001fff 0000000000000007 0000000000000080 00007fff89d90158\n GPR24: 0000000002000000 0000000002000000 0000000000000255 0000000000000300\n GPR28: c000000001270000 0000000042000000 0000000048ab0778 c000000080647e80\n NIP [7265677368657265] 0x7265677368657265\n LR [c00000000006c0c8] ___do_page_fault+0x3f8/0xb10\n Call Trace:\n [c0000000fffb3cf0] [c00000000000bdac] soft_nmi_common+0x13c/0x1d0 (unreliable)\n --- interrupt: 700 at decrementer_common_virt+0xb8/0x230\n NIP: c0000000000098b8 LR: c00000000006c0c8 CTR: c0000000000097f0\n REGS: c0000000fffb3d60 TRAP: 0700 Not tainted\n MSR: 9000000000021031 CR: 22424282 XER: 20040000\n CFAR: c0000000000098b0 IRQMASK: 0\n GPR00: c00000000006c964 0000000000002400 c000000001513800 0000000000000000\n GPR04: 0000000048ab0778 0000000042000000 0000000000000000 0000000000001299\n GPR08: 000001e447c718ec 0000000022424282 0000000000002710 c00000000006bee8\n GPR12: 9000000000009033 c0000000016b0000 00000000000000b0 0000000000000001\n GPR16: 0000000000000000 0000000000000002 0000000000000000 0000000000000ff8\n GPR20: 0000000000001fff 0000000000000007 0000000000000080 00007fff89d90158\n GPR24: 0000000002000000 0000000002000000 0000000000000255 0000000000000300\n GPR28: c000000001270000 0000000042000000 0000000048ab0778 c000000080647e80\n NIP [c0000000000098b8] decrementer_common_virt+0xb8/0x230\n LR [c00000000006c0c8] ___do_page_fault+0x3f8/0xb10\n --- interrupt: 700\n Instruction dump:\n XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX\n XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX XXXXXXXX\n ---[ end trace 6d28218e0cc3c949 ]---\n\nAfter:\n\n ------------[ cut here ]------------\n kernel BUG at arch/powerpc/kernel/exceptions-64s.S:491!\n Oops: Exception in kernel mode, sig: 5 [#1]\n LE PAGE_SIZE=64K MMU=Radix SMP NR_CPUS=2048 NUMA PowerNV\n Modules linked in:\n CPU: 0 PID: 88 Comm: login Not tainted 5.15.0-rc2-00034-ge057cdade6e5-dirty #2638\n NIP: c0000000000098b8 LR: c00000000006bf04 CTR: c0000000000097f0\n REGS: c0000000fffb3d60 TRAP: 0700 Not tainted\n MSR: 9000000000021031 CR: 24482227 XER: 00040000\n CFAR: c0000000000098b0 IRQMASK: 0\n GPR00: c00000000006bf04 0000000000002400 c000000001513800 c000000001271868\n GPR04: 00000000100f0d29 0000000042000000 0000000000000007 0000000000000009\n GPR08: 00000000100f0d29 0000000024482227 0000000000002710 c000000000181b3c\n GPR12: 9000000000009033 c0000000016b0000 00000000100f0d29 c000000005b22f00\n GPR16: 00000000ffff0000 0000000000000001 0000000000000009 00000000100eed90\n GPR20: 00000000100eed90 00000\n---truncated---", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-76pr-h99m-q4fj/GHSA-76pr-h99m-q4fj.json b/advisories/unreviewed/2024/05/GHSA-76pr-h99m-q4fj/GHSA-76pr-h99m-q4fj.json index 5884442c328..917d57b1386 100644 --- a/advisories/unreviewed/2024/05/GHSA-76pr-h99m-q4fj/GHSA-76pr-h99m-q4fj.json +++ b/advisories/unreviewed/2024/05/GHSA-76pr-h99m-q4fj/GHSA-76pr-h99m-q4fj.json @@ -7,12 +7,8 @@ "CVE-2021-47360" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbinder: make sure fd closes complete\n\nDuring BC_FREE_BUFFER processing, the BINDER_TYPE_FDA object\ncleanup may close 1 or more fds. The close operations are\ncompleted using the task work mechanism -- which means the thread\nneeds to return to userspace or the file object may never be\ndereferenced -- which can lead to hung processes.\n\nForce the binder thread back to userspace if an fd is closed during\nBC_FREE_BUFFER handling.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-77hq-crr3-x6hc/GHSA-77hq-crr3-x6hc.json b/advisories/unreviewed/2024/05/GHSA-77hq-crr3-x6hc/GHSA-77hq-crr3-x6hc.json index 128d69fe7ee..a0e962a8c11 100644 --- a/advisories/unreviewed/2024/05/GHSA-77hq-crr3-x6hc/GHSA-77hq-crr3-x6hc.json +++ b/advisories/unreviewed/2024/05/GHSA-77hq-crr3-x6hc/GHSA-77hq-crr3-x6hc.json @@ -7,12 +7,8 @@ "CVE-2021-47381" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nASoC: SOF: Fix DSP oops stack dump output contents\n\nFix @buf arg given to hex_dump_to_buffer() and stack address used\nin dump error output.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-7qhc-3php-2c6m/GHSA-7qhc-3php-2c6m.json b/advisories/unreviewed/2024/05/GHSA-7qhc-3php-2c6m/GHSA-7qhc-3php-2c6m.json index a6ecdfc1d94..7c8910b24bc 100644 --- a/advisories/unreviewed/2024/05/GHSA-7qhc-3php-2c6m/GHSA-7qhc-3php-2c6m.json +++ b/advisories/unreviewed/2024/05/GHSA-7qhc-3php-2c6m/GHSA-7qhc-3php-2c6m.json @@ -7,12 +7,8 @@ "CVE-2021-47415" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\niwlwifi: mvm: Fix possible NULL dereference\n\nIn __iwl_mvm_remove_time_event() check that 'te_data->vif' is NULL\nbefore dereferencing it.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-836m-cmjj-qv5g/GHSA-836m-cmjj-qv5g.json b/advisories/unreviewed/2024/05/GHSA-836m-cmjj-qv5g/GHSA-836m-cmjj-qv5g.json index eb745a2e7b9..6344fd015fe 100644 --- a/advisories/unreviewed/2024/05/GHSA-836m-cmjj-qv5g/GHSA-836m-cmjj-qv5g.json +++ b/advisories/unreviewed/2024/05/GHSA-836m-cmjj-qv5g/GHSA-836m-cmjj-qv5g.json @@ -7,12 +7,8 @@ "CVE-2021-47331" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: common: usb-conn-gpio: fix NULL pointer dereference of charger\n\nWhen power on system with OTG cable, IDDIG's interrupt arises before\nthe charger registration, it will cause a NULL pointer dereference,\nfix the issue by registering the power supply before requesting\nIDDIG/VBUS irq.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-8p4f-x4p9-vv9j/GHSA-8p4f-x4p9-vv9j.json b/advisories/unreviewed/2024/05/GHSA-8p4f-x4p9-vv9j/GHSA-8p4f-x4p9-vv9j.json index 89cc70e0b3d..33cee776a54 100644 --- a/advisories/unreviewed/2024/05/GHSA-8p4f-x4p9-vv9j/GHSA-8p4f-x4p9-vv9j.json +++ b/advisories/unreviewed/2024/05/GHSA-8p4f-x4p9-vv9j/GHSA-8p4f-x4p9-vv9j.json @@ -7,12 +7,8 @@ "CVE-2021-47418" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet_sched: fix NULL deref in fifo_set_limit()\n\nsyzbot reported another NULL deref in fifo_set_limit() [1]\n\nI could repro the issue with :\n\nunshare -n\ntc qd add dev lo root handle 1:0 tbf limit 200000 burst 70000 rate 100Mbit\ntc qd replace dev lo parent 1:0 pfifo_fast\ntc qd change dev lo root handle 1:0 tbf limit 300000 burst 70000 rate 100Mbit\n\npfifo_fast does not have a change() operation.\nMake fifo_set_limit() more robust about this.\n\n[1]\nBUG: kernel NULL pointer dereference, address: 0000000000000000\nPGD 1cf99067 P4D 1cf99067 PUD 7ca49067 PMD 0\nOops: 0010 [#1] PREEMPT SMP KASAN\nCPU: 1 PID: 14443 Comm: syz-executor959 Not tainted 5.15.0-rc3-syzkaller #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011\nRIP: 0010:0x0\nCode: Unable to access opcode bytes at RIP 0xffffffffffffffd6.\nRSP: 0018:ffffc9000e2f7310 EFLAGS: 00010246\nRAX: dffffc0000000000 RBX: ffffffff8d6ecc00 RCX: 0000000000000000\nRDX: 0000000000000000 RSI: ffff888024c27910 RDI: ffff888071e34000\nRBP: ffff888071e34000 R08: 0000000000000001 R09: ffffffff8fcfb947\nR10: 0000000000000001 R11: 0000000000000000 R12: ffff888024c27910\nR13: ffff888071e34018 R14: 0000000000000000 R15: ffff88801ef74800\nFS: 00007f321d897700(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: ffffffffffffffd6 CR3: 00000000722c3000 CR4: 00000000003506e0\nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\nCall Trace:\n fifo_set_limit net/sched/sch_fifo.c:242 [inline]\n fifo_set_limit+0x198/0x210 net/sched/sch_fifo.c:227\n tbf_change+0x6ec/0x16d0 net/sched/sch_tbf.c:418\n qdisc_change net/sched/sch_api.c:1332 [inline]\n tc_modify_qdisc+0xd9a/0x1a60 net/sched/sch_api.c:1634\n rtnetlink_rcv_msg+0x413/0xb80 net/core/rtnetlink.c:5572\n netlink_rcv_skb+0x153/0x420 net/netlink/af_netlink.c:2504\n netlink_unicast_kernel net/netlink/af_netlink.c:1314 [inline]\n netlink_unicast+0x533/0x7d0 net/netlink/af_netlink.c:1340\n netlink_sendmsg+0x86d/0xdb0 net/netlink/af_netlink.c:1929\n sock_sendmsg_nosec net/socket.c:704 [inline]\n sock_sendmsg+0xcf/0x120 net/socket.c:724\n ____sys_sendmsg+0x6e8/0x810 net/socket.c:2409\n ___sys_sendmsg+0xf3/0x170 net/socket.c:2463\n __sys_sendmsg+0xe5/0x1b0 net/socket.c:2492\n do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80\n entry_SYSCALL_64_after_hwframe+0x44/0xae", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-95jq-x6q9-c9cq/GHSA-95jq-x6q9-c9cq.json b/advisories/unreviewed/2024/05/GHSA-95jq-x6q9-c9cq/GHSA-95jq-x6q9-c9cq.json index c7ea1659f30..1756b5b6e5c 100644 --- a/advisories/unreviewed/2024/05/GHSA-95jq-x6q9-c9cq/GHSA-95jq-x6q9-c9cq.json +++ b/advisories/unreviewed/2024/05/GHSA-95jq-x6q9-c9cq/GHSA-95jq-x6q9-c9cq.json @@ -7,12 +7,8 @@ "CVE-2021-47365" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nafs: Fix page leak\n\nThere's a loop in afs_extend_writeback() that adds extra pages to a write\nwe want to make to improve the efficiency of the writeback by making it\nlarger. This loop stops, however, if we hit a page we can't write back\nfrom immediately, but it doesn't get rid of the page ref we speculatively\nacquired.\n\nThis was caused by the removal of the cleanup loop when the code switched\nfrom using find_get_pages_contig() to xarray scanning as the latter only\ngets a single page at a time, not a batch.\n\nFix this by putting the page on a ref on an early break from the loop.\nUnfortunately, we can't just add that page to the pagevec we're employing\nas we'll go through that and add those pages to the RPC call.\n\nThis was found by the generic/074 test. It leaks ~4GiB of RAM each time it\nis run - which can be observed with \"top\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-9gxf-r468-r4c5/GHSA-9gxf-r468-r4c5.json b/advisories/unreviewed/2024/05/GHSA-9gxf-r468-r4c5/GHSA-9gxf-r468-r4c5.json index ceeb460c7a0..5d0e81431ef 100644 --- a/advisories/unreviewed/2024/05/GHSA-9gxf-r468-r4c5/GHSA-9gxf-r468-r4c5.json +++ b/advisories/unreviewed/2024/05/GHSA-9gxf-r468-r4c5/GHSA-9gxf-r468-r4c5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-c5qq-qcr6-82vp/GHSA-c5qq-qcr6-82vp.json b/advisories/unreviewed/2024/05/GHSA-c5qq-qcr6-82vp/GHSA-c5qq-qcr6-82vp.json index bd4b3d56d39..9c4232db811 100644 --- a/advisories/unreviewed/2024/05/GHSA-c5qq-qcr6-82vp/GHSA-c5qq-qcr6-82vp.json +++ b/advisories/unreviewed/2024/05/GHSA-c5qq-qcr6-82vp/GHSA-c5qq-qcr6-82vp.json @@ -7,12 +7,8 @@ "CVE-2021-47342" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix possible UAF when remounting r/o a mmp-protected file system\n\nAfter commit 618f003199c6 (\"ext4: fix memory leak in\next4_fill_super\"), after the file system is remounted read-only, there\nis a race where the kmmpd thread can exit, causing sbi->s_mmp_tsk to\npoint at freed memory, which the call to ext4_stop_mmpd() can trip\nover.\n\nFix this by only allowing kmmpd() to exit when it is stopped via\next4_stop_mmpd().\n\nBug-Report-Link: <20210629143603.2166962-1-yebin10@huawei.com>", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-c9p5-rxmf-r4m6/GHSA-c9p5-rxmf-r4m6.json b/advisories/unreviewed/2024/05/GHSA-c9p5-rxmf-r4m6/GHSA-c9p5-rxmf-r4m6.json index ad2b03e77a1..7163deadf18 100644 --- a/advisories/unreviewed/2024/05/GHSA-c9p5-rxmf-r4m6/GHSA-c9p5-rxmf-r4m6.json +++ b/advisories/unreviewed/2024/05/GHSA-c9p5-rxmf-r4m6/GHSA-c9p5-rxmf-r4m6.json @@ -7,12 +7,8 @@ "CVE-2021-47307" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: prevent NULL deref in cifs_compose_mount_options()\n\nThe optional @ref parameter might contain an NULL node_name, so\nprevent dereferencing it in cifs_compose_mount_options().\n\nAddresses-Coverity: 1476408 (\"Explicit null dereferenced\")", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-cc8f-64j2-hxm7/GHSA-cc8f-64j2-hxm7.json b/advisories/unreviewed/2024/05/GHSA-cc8f-64j2-hxm7/GHSA-cc8f-64j2-hxm7.json index 1c9bebb47e3..869c37510e8 100644 --- a/advisories/unreviewed/2024/05/GHSA-cc8f-64j2-hxm7/GHSA-cc8f-64j2-hxm7.json +++ b/advisories/unreviewed/2024/05/GHSA-cc8f-64j2-hxm7/GHSA-cc8f-64j2-hxm7.json @@ -7,12 +7,8 @@ "CVE-2021-47364" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncomedi: Fix memory leak in compat_insnlist()\n\n`compat_insnlist()` handles the 32-bit version of the `COMEDI_INSNLIST`\nioctl (whenwhen `CONFIG_COMPAT` is enabled). It allocates memory to\ntemporarily hold an array of `struct comedi_insn` converted from the\n32-bit version in user space. This memory is only being freed if there\nis a fault while filling the array, otherwise it is leaked.\n\nAdd a call to `kfree()` to fix the leak.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-chv3-xxv6-8hvr/GHSA-chv3-xxv6-8hvr.json b/advisories/unreviewed/2024/05/GHSA-chv3-xxv6-8hvr/GHSA-chv3-xxv6-8hvr.json index 55f25c4dbe8..fffb44d0584 100644 --- a/advisories/unreviewed/2024/05/GHSA-chv3-xxv6-8hvr/GHSA-chv3-xxv6-8hvr.json +++ b/advisories/unreviewed/2024/05/GHSA-chv3-xxv6-8hvr/GHSA-chv3-xxv6-8hvr.json @@ -7,12 +7,8 @@ "CVE-2021-47334" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc/libmasm/module: Fix two use after free in ibmasm_init_one\n\nIn ibmasm_init_one, it calls ibmasm_init_remote_input_dev().\nInside ibmasm_init_remote_input_dev, mouse_dev and keybd_dev are\nallocated by input_allocate_device(), and assigned to\nsp->remote.mouse_dev and sp->remote.keybd_dev respectively.\n\nIn the err_free_devices error branch of ibmasm_init_one,\nmouse_dev and keybd_dev are freed by input_free_device(), and return\nerror. Then the execution runs into error_send_message error branch\nof ibmasm_init_one, where ibmasm_free_remote_input_dev(sp) is called\nto unregister the freed sp->remote.mouse_dev and sp->remote.keybd_dev.\n\nMy patch add a \"error_init_remote\" label to handle the error of\nibmasm_init_remote_input_dev(), to avoid the uaf bugs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-f632-c3rh-r2v2/GHSA-f632-c3rh-r2v2.json b/advisories/unreviewed/2024/05/GHSA-f632-c3rh-r2v2/GHSA-f632-c3rh-r2v2.json index caa7b19eddc..41487d30e76 100644 --- a/advisories/unreviewed/2024/05/GHSA-f632-c3rh-r2v2/GHSA-f632-c3rh-r2v2.json +++ b/advisories/unreviewed/2024/05/GHSA-f632-c3rh-r2v2/GHSA-f632-c3rh-r2v2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-f7qf-xjhc-mhcj/GHSA-f7qf-xjhc-mhcj.json b/advisories/unreviewed/2024/05/GHSA-f7qf-xjhc-mhcj/GHSA-f7qf-xjhc-mhcj.json index 3c41e4a3876..0482b211dce 100644 --- a/advisories/unreviewed/2024/05/GHSA-f7qf-xjhc-mhcj/GHSA-f7qf-xjhc-mhcj.json +++ b/advisories/unreviewed/2024/05/GHSA-f7qf-xjhc-mhcj/GHSA-f7qf-xjhc-mhcj.json @@ -7,12 +7,8 @@ "CVE-2021-47410" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdkfd: fix svm_migrate_fini warning\n\nDevice manager releases device-specific resources when a driver\ndisconnects from a device, devm_memunmap_pages and\ndevm_release_mem_region calls in svm_migrate_fini are redundant.\n\nIt causes below warning trace after patch \"drm/amdgpu: Split\namdgpu_device_fini into early and late\", so remove function\nsvm_migrate_fini.\n\nBUG: https://gitlab.freedesktop.org/drm/amd/-/issues/1718\n\nWARNING: CPU: 1 PID: 3646 at drivers/base/devres.c:795\ndevm_release_action+0x51/0x60\nCall Trace:\n ? memunmap_pages+0x360/0x360\n svm_migrate_fini+0x2d/0x60 [amdgpu]\n kgd2kfd_device_exit+0x23/0xa0 [amdgpu]\n amdgpu_amdkfd_device_fini_sw+0x1d/0x30 [amdgpu]\n amdgpu_device_fini_sw+0x45/0x290 [amdgpu]\n amdgpu_driver_release_kms+0x12/0x30 [amdgpu]\n drm_dev_release+0x20/0x40 [drm]\n release_nodes+0x196/0x1e0\n device_release_driver_internal+0x104/0x1d0\n driver_detach+0x47/0x90\n bus_remove_driver+0x7a/0xd0\n pci_unregister_driver+0x3d/0x90\n amdgpu_exit+0x11/0x20 [amdgpu]", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-f8fr-xvcp-37m8/GHSA-f8fr-xvcp-37m8.json b/advisories/unreviewed/2024/05/GHSA-f8fr-xvcp-37m8/GHSA-f8fr-xvcp-37m8.json index 345755cb136..6dfee665676 100644 --- a/advisories/unreviewed/2024/05/GHSA-f8fr-xvcp-37m8/GHSA-f8fr-xvcp-37m8.json +++ b/advisories/unreviewed/2024/05/GHSA-f8fr-xvcp-37m8/GHSA-f8fr-xvcp-37m8.json @@ -7,12 +7,8 @@ "CVE-2021-47318" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\narch_topology: Avoid use-after-free for scale_freq_data\n\nCurrently topology_scale_freq_tick() (which gets called from\nscheduler_tick()) may end up using a pointer to \"struct\nscale_freq_data\", which was previously cleared by\ntopology_clear_scale_freq_source(), as there is no protection in place\nhere. The users of topology_clear_scale_freq_source() though needs a\nguarantee that the previously cleared scale_freq_data isn't used\nanymore, so they can free the related resources.\n\nSince topology_scale_freq_tick() is called from scheduler tick, we don't\nwant to add locking in there. Use the RCU update mechanism instead\n(which is already used by the scheduler's utilization update path) to\nguarantee race free updates here.\n\nsynchronize_rcu() makes sure that all RCU critical sections that started\nbefore it is called, will finish before it returns. And so the callers\nof topology_clear_scale_freq_source() don't need to worry about their\ncallback getting called anymore.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-fhjr-hghh-2jv9/GHSA-fhjr-hghh-2jv9.json b/advisories/unreviewed/2024/05/GHSA-fhjr-hghh-2jv9/GHSA-fhjr-hghh-2jv9.json index 94b441d7e33..8bae8081d15 100644 --- a/advisories/unreviewed/2024/05/GHSA-fhjr-hghh-2jv9/GHSA-fhjr-hghh-2jv9.json +++ b/advisories/unreviewed/2024/05/GHSA-fhjr-hghh-2jv9/GHSA-fhjr-hghh-2jv9.json @@ -7,12 +7,8 @@ "CVE-2021-47321" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nwatchdog: Fix possible use-after-free by calling del_timer_sync()\n\nThis driver's remove path calls del_timer(). However, that function\ndoes not wait until the timer handler finishes. This means that the\ntimer handler may still be running after the driver's remove function\nhas finished, which would result in a use-after-free.\n\nFix by calling del_timer_sync(), which makes sure the timer handler\nhas finished, and unable to re-schedule itself.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-gh9h-qjxh-2mh7/GHSA-gh9h-qjxh-2mh7.json b/advisories/unreviewed/2024/05/GHSA-gh9h-qjxh-2mh7/GHSA-gh9h-qjxh-2mh7.json index 07273de7884..2b67ccb1054 100644 --- a/advisories/unreviewed/2024/05/GHSA-gh9h-qjxh-2mh7/GHSA-gh9h-qjxh-2mh7.json +++ b/advisories/unreviewed/2024/05/GHSA-gh9h-qjxh-2mh7/GHSA-gh9h-qjxh-2mh7.json @@ -7,12 +7,8 @@ "CVE-2021-47322" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSv4: Fix an Oops in pnfs_mark_request_commit() when doing O_DIRECT\n\nFix an Oopsable condition in pnfs_mark_request_commit() when we're\nputting a set of writes on the commit list to reschedule them after a\nfailed pNFS attempt.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-ghv4-3pw7-86rj/GHSA-ghv4-3pw7-86rj.json b/advisories/unreviewed/2024/05/GHSA-ghv4-3pw7-86rj/GHSA-ghv4-3pw7-86rj.json index 367101ff642..b8240c9ae2d 100644 --- a/advisories/unreviewed/2024/05/GHSA-ghv4-3pw7-86rj/GHSA-ghv4-3pw7-86rj.json +++ b/advisories/unreviewed/2024/05/GHSA-ghv4-3pw7-86rj/GHSA-ghv4-3pw7-86rj.json @@ -7,12 +7,8 @@ "CVE-2021-47340" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: fix GPF in diFree\n\nAvoid passing inode with\nJFS_SBI(inode->i_sb)->ipimap == NULL to\ndiFree()[1]. GFP will appear:\n\n\tstruct inode *ipimap = JFS_SBI(ip->i_sb)->ipimap;\n\tstruct inomap *imap = JFS_IP(ipimap)->i_imap;\n\nJFS_IP() will return invalid pointer when ipimap == NULL\n\nCall Trace:\n diFree+0x13d/0x2dc0 fs/jfs/jfs_imap.c:853 [1]\n jfs_evict_inode+0x2c9/0x370 fs/jfs/inode.c:154\n evict+0x2ed/0x750 fs/inode.c:578\n iput_final fs/inode.c:1654 [inline]\n iput.part.0+0x3fe/0x820 fs/inode.c:1680\n iput+0x58/0x70 fs/inode.c:1670", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-h3hv-fpf3-c5jm/GHSA-h3hv-fpf3-c5jm.json b/advisories/unreviewed/2024/05/GHSA-h3hv-fpf3-c5jm/GHSA-h3hv-fpf3-c5jm.json index c82b2d43569..eedd62e9acb 100644 --- a/advisories/unreviewed/2024/05/GHSA-h3hv-fpf3-c5jm/GHSA-h3hv-fpf3-c5jm.json +++ b/advisories/unreviewed/2024/05/GHSA-h3hv-fpf3-c5jm/GHSA-h3hv-fpf3-c5jm.json @@ -7,12 +7,8 @@ "CVE-2021-47336" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nsmackfs: restrict bytes count in smk_set_cipso()\n\nOops, I failed to update subject line.\n\nFrom 07571157c91b98ce1a4aa70967531e64b78e8346 Mon Sep 17 00:00:00 2001\nDate: Mon, 12 Apr 2021 22:25:06 +0900\nSubject: [PATCH] smackfs: restrict bytes count in smk_set_cipso()\n\nCommit 7ef4c19d245f3dc2 (\"smackfs: restrict bytes count in smackfs write\nfunctions\") missed that count > SMK_CIPSOMAX check applies to only\nformat == SMK_FIXED24_FMT case.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-hjv5-8xv5-vmfp/GHSA-hjv5-8xv5-vmfp.json b/advisories/unreviewed/2024/05/GHSA-hjv5-8xv5-vmfp/GHSA-hjv5-8xv5-vmfp.json index bbac22b6d65..f41d8d3b508 100644 --- a/advisories/unreviewed/2024/05/GHSA-hjv5-8xv5-vmfp/GHSA-hjv5-8xv5-vmfp.json +++ b/advisories/unreviewed/2024/05/GHSA-hjv5-8xv5-vmfp/GHSA-hjv5-8xv5-vmfp.json @@ -7,12 +7,8 @@ "CVE-2021-47315" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmemory: fsl_ifc: fix leak of IO mapping on probe failure\n\nOn probe error the driver should unmap the IO memory. Smatch reports:\n\n drivers/memory/fsl_ifc.c:298 fsl_ifc_ctrl_probe() warn: 'fsl_ifc_ctrl_dev->gregs' not released on lines: 298.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-hm5p-668j-x4q6/GHSA-hm5p-668j-x4q6.json b/advisories/unreviewed/2024/05/GHSA-hm5p-668j-x4q6/GHSA-hm5p-668j-x4q6.json index c63f63278e6..9a1fa2381be 100644 --- a/advisories/unreviewed/2024/05/GHSA-hm5p-668j-x4q6/GHSA-hm5p-668j-x4q6.json +++ b/advisories/unreviewed/2024/05/GHSA-hm5p-668j-x4q6/GHSA-hm5p-668j-x4q6.json @@ -7,12 +7,8 @@ "CVE-2021-47344" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: zr364xx: fix memory leak in zr364xx_start_readpipe\n\nsyzbot reported memory leak in zr364xx driver.\nThe problem was in non-freed urb in case of\nusb_submit_urb() fail.\n\nbacktrace:\n [] kmalloc include/linux/slab.h:561 [inline]\n [] usb_alloc_urb+0x66/0xe0 drivers/usb/core/urb.c:74\n [] zr364xx_start_readpipe+0x78/0x130 drivers/media/usb/zr364xx/zr364xx.c:1022\n [] zr364xx_board_init drivers/media/usb/zr364xx/zr364xx.c:1383 [inline]\n [] zr364xx_probe+0x6a3/0x851 drivers/media/usb/zr364xx/zr364xx.c:1516\n [] usb_probe_interface+0x177/0x370 drivers/usb/core/driver.c:396\n [] really_probe+0x159/0x500 drivers/base/dd.c:576", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-hxcf-7gwm-65p8/GHSA-hxcf-7gwm-65p8.json b/advisories/unreviewed/2024/05/GHSA-hxcf-7gwm-65p8/GHSA-hxcf-7gwm-65p8.json index 30594a50036..b6140af5023 100644 --- a/advisories/unreviewed/2024/05/GHSA-hxcf-7gwm-65p8/GHSA-hxcf-7gwm-65p8.json +++ b/advisories/unreviewed/2024/05/GHSA-hxcf-7gwm-65p8/GHSA-hxcf-7gwm-65p8.json @@ -7,12 +7,8 @@ "CVE-2021-47352" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio-net: Add validation for used length\n\nThis adds validation for used length (might come\nfrom an untrusted device) to avoid data corruption\nor loss.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-jq6v-72pf-8j24/GHSA-jq6v-72pf-8j24.json b/advisories/unreviewed/2024/05/GHSA-jq6v-72pf-8j24/GHSA-jq6v-72pf-8j24.json index 124b1871701..08dca941607 100644 --- a/advisories/unreviewed/2024/05/GHSA-jq6v-72pf-8j24/GHSA-jq6v-72pf-8j24.json +++ b/advisories/unreviewed/2024/05/GHSA-jq6v-72pf-8j24/GHSA-jq6v-72pf-8j24.json @@ -7,12 +7,8 @@ "CVE-2021-47361" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmcb: fix error handling in mcb_alloc_bus()\n\nThere are two bugs:\n1) If ida_simple_get() fails then this code calls put_device(carrier)\n but we haven't yet called get_device(carrier) and probably that\n leads to a use after free.\n2) After device_initialize() then we need to use put_device() to\n release the bus. This will free the internal resources tied to the\n device and call mcb_free_bus() which will free the rest.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-jqwg-pjjq-gqv5/GHSA-jqwg-pjjq-gqv5.json b/advisories/unreviewed/2024/05/GHSA-jqwg-pjjq-gqv5/GHSA-jqwg-pjjq-gqv5.json index b3cab6cd876..7c049542acc 100644 --- a/advisories/unreviewed/2024/05/GHSA-jqwg-pjjq-gqv5/GHSA-jqwg-pjjq-gqv5.json +++ b/advisories/unreviewed/2024/05/GHSA-jqwg-pjjq-gqv5/GHSA-jqwg-pjjq-gqv5.json @@ -7,12 +7,8 @@ "CVE-2021-47423" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/nouveau/debugfs: fix file release memory leak\n\nWhen using single_open() for opening, single_release() should be\ncalled, otherwise the 'op' allocated in single_open() will be leaked.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-m2r9-3c4r-qv68/GHSA-m2r9-3c4r-qv68.json b/advisories/unreviewed/2024/05/GHSA-m2r9-3c4r-qv68/GHSA-m2r9-3c4r-qv68.json index 72f664abe92..37829aa23d0 100644 --- a/advisories/unreviewed/2024/05/GHSA-m2r9-3c4r-qv68/GHSA-m2r9-3c4r-qv68.json +++ b/advisories/unreviewed/2024/05/GHSA-m2r9-3c4r-qv68/GHSA-m2r9-3c4r-qv68.json @@ -7,12 +7,8 @@ "CVE-2021-47338" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nfbmem: Do not delete the mode that is still in use\n\nThe execution of fb_delete_videomode() is not based on the result of the\nprevious fbcon_mode_deleted(). As a result, the mode is directly deleted,\nregardless of whether it is still in use, which may cause UAF.\n\n==================================================================\nBUG: KASAN: use-after-free in fb_mode_is_equal+0x36e/0x5e0 \\\ndrivers/video/fbdev/core/modedb.c:924\nRead of size 4 at addr ffff88807e0ddb1c by task syz-executor.0/18962\n\nCPU: 2 PID: 18962 Comm: syz-executor.0 Not tainted 5.10.45-rc1+ #3\nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS ...\nCall Trace:\n __dump_stack lib/dump_stack.c:77 [inline]\n dump_stack+0x137/0x1be lib/dump_stack.c:118\n print_address_description+0x6c/0x640 mm/kasan/report.c:385\n __kasan_report mm/kasan/report.c:545 [inline]\n kasan_report+0x13d/0x1e0 mm/kasan/report.c:562\n fb_mode_is_equal+0x36e/0x5e0 drivers/video/fbdev/core/modedb.c:924\n fbcon_mode_deleted+0x16a/0x220 drivers/video/fbdev/core/fbcon.c:2746\n fb_set_var+0x1e1/0xdb0 drivers/video/fbdev/core/fbmem.c:975\n do_fb_ioctl+0x4d9/0x6e0 drivers/video/fbdev/core/fbmem.c:1108\n vfs_ioctl fs/ioctl.c:48 [inline]\n __do_sys_ioctl fs/ioctl.c:753 [inline]\n __se_sys_ioctl+0xfb/0x170 fs/ioctl.c:739\n do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46\n entry_SYSCALL_64_after_hwframe+0x44/0xa9\n\nFreed by task 18960:\n kasan_save_stack mm/kasan/common.c:48 [inline]\n kasan_set_track+0x3d/0x70 mm/kasan/common.c:56\n kasan_set_free_info+0x17/0x30 mm/kasan/generic.c:355\n __kasan_slab_free+0x108/0x140 mm/kasan/common.c:422\n slab_free_hook mm/slub.c:1541 [inline]\n slab_free_freelist_hook+0xd6/0x1a0 mm/slub.c:1574\n slab_free mm/slub.c:3139 [inline]\n kfree+0xca/0x3d0 mm/slub.c:4121\n fb_delete_videomode+0x56a/0x820 drivers/video/fbdev/core/modedb.c:1104\n fb_set_var+0x1f3/0xdb0 drivers/video/fbdev/core/fbmem.c:978\n do_fb_ioctl+0x4d9/0x6e0 drivers/video/fbdev/core/fbmem.c:1108\n vfs_ioctl fs/ioctl.c:48 [inline]\n __do_sys_ioctl fs/ioctl.c:753 [inline]\n __se_sys_ioctl+0xfb/0x170 fs/ioctl.c:739\n do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46\n entry_SYSCALL_64_after_hwframe+0x44/0xa9", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-m2xg-x7vq-c628/GHSA-m2xg-x7vq-c628.json b/advisories/unreviewed/2024/05/GHSA-m2xg-x7vq-c628/GHSA-m2xg-x7vq-c628.json index 9243d714c02..03da42efa7a 100644 --- a/advisories/unreviewed/2024/05/GHSA-m2xg-x7vq-c628/GHSA-m2xg-x7vq-c628.json +++ b/advisories/unreviewed/2024/05/GHSA-m2xg-x7vq-c628/GHSA-m2xg-x7vq-c628.json @@ -7,12 +7,8 @@ "CVE-2021-47309" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: validate lwtstate->data before returning from skb_tunnel_info()\n\nskb_tunnel_info() returns pointer of lwtstate->data as ip_tunnel_info\ntype without validation. lwtstate->data can have various types such as\nmpls_iptunnel_encap, etc and these are not compatible.\nSo skb_tunnel_info() should validate before returning that pointer.\n\nSplat looks like:\nBUG: KASAN: slab-out-of-bounds in vxlan_get_route+0x418/0x4b0 [vxlan]\nRead of size 2 at addr ffff888106ec2698 by task ping/811\n\nCPU: 1 PID: 811 Comm: ping Not tainted 5.13.0+ #1195\nCall Trace:\n dump_stack_lvl+0x56/0x7b\n print_address_description.constprop.8.cold.13+0x13/0x2ee\n ? vxlan_get_route+0x418/0x4b0 [vxlan]\n ? vxlan_get_route+0x418/0x4b0 [vxlan]\n kasan_report.cold.14+0x83/0xdf\n ? vxlan_get_route+0x418/0x4b0 [vxlan]\n vxlan_get_route+0x418/0x4b0 [vxlan]\n [ ... ]\n vxlan_xmit_one+0x148b/0x32b0 [vxlan]\n [ ... ]\n vxlan_xmit+0x25c5/0x4780 [vxlan]\n [ ... ]\n dev_hard_start_xmit+0x1ae/0x6e0\n __dev_queue_xmit+0x1f39/0x31a0\n [ ... ]\n neigh_xmit+0x2f9/0x940\n mpls_xmit+0x911/0x1600 [mpls_iptunnel]\n lwtunnel_xmit+0x18f/0x450\n ip_finish_output2+0x867/0x2040\n [ ... ]", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-m9r6-94f7-4j6m/GHSA-m9r6-94f7-4j6m.json b/advisories/unreviewed/2024/05/GHSA-m9r6-94f7-4j6m/GHSA-m9r6-94f7-4j6m.json index 903d3d67dd4..a59b3e19d82 100644 --- a/advisories/unreviewed/2024/05/GHSA-m9r6-94f7-4j6m/GHSA-m9r6-94f7-4j6m.json +++ b/advisories/unreviewed/2024/05/GHSA-m9r6-94f7-4j6m/GHSA-m9r6-94f7-4j6m.json @@ -7,12 +7,8 @@ "CVE-2021-47373" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nirqchip/gic-v3-its: Fix potential VPE leak on error\n\nIn its_vpe_irq_domain_alloc, when its_vpe_init() returns an error,\nthere is an off-by-one in the number of VPEs to be freed.\n\nFix it by simply passing the number of VPEs allocated, which is the\nindex of the loop iterating over the VPEs.\n\n[maz: fixed commit message]", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-mc36-8c37-gc5w/GHSA-mc36-8c37-gc5w.json b/advisories/unreviewed/2024/05/GHSA-mc36-8c37-gc5w/GHSA-mc36-8c37-gc5w.json index e4ef7eb9eaf..8432fcd44ae 100644 --- a/advisories/unreviewed/2024/05/GHSA-mc36-8c37-gc5w/GHSA-mc36-8c37-gc5w.json +++ b/advisories/unreviewed/2024/05/GHSA-mc36-8c37-gc5w/GHSA-mc36-8c37-gc5w.json @@ -7,12 +7,8 @@ "CVE-2022-48710" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/radeon: fix a possible null pointer dereference\n\nIn radeon_fp_native_mode(), the return value of drm_mode_duplicate()\nis assigned to mode, which will lead to a NULL pointer dereference\non failure of drm_mode_duplicate(). Add a check to avoid npd.\n\nThe failure status of drm_cvt_mode() on the other path is checked too.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-mgmg-f25r-3gfh/GHSA-mgmg-f25r-3gfh.json b/advisories/unreviewed/2024/05/GHSA-mgmg-f25r-3gfh/GHSA-mgmg-f25r-3gfh.json index ddbe2dd152d..9d82a60ae3a 100644 --- a/advisories/unreviewed/2024/05/GHSA-mgmg-f25r-3gfh/GHSA-mgmg-f25r-3gfh.json +++ b/advisories/unreviewed/2024/05/GHSA-mgmg-f25r-3gfh/GHSA-mgmg-f25r-3gfh.json @@ -7,12 +7,8 @@ "CVE-2021-47431" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix gart.bo pin_count leak\n\ngmc_v{9,10}_0_gart_disable() isn't called matched with\ncorrespoding gart_enbale function in SRIOV case. This will\nlead to gart.bo pin_count leak on driver unload.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-p9h5-83v6-32fq/GHSA-p9h5-83v6-32fq.json b/advisories/unreviewed/2024/05/GHSA-p9h5-83v6-32fq/GHSA-p9h5-83v6-32fq.json index 437c2620ef2..59d9042bcb2 100644 --- a/advisories/unreviewed/2024/05/GHSA-p9h5-83v6-32fq/GHSA-p9h5-83v6-32fq.json +++ b/advisories/unreviewed/2024/05/GHSA-p9h5-83v6-32fq/GHSA-p9h5-83v6-32fq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-pv65-xqrg-hc85/GHSA-pv65-xqrg-hc85.json b/advisories/unreviewed/2024/05/GHSA-pv65-xqrg-hc85/GHSA-pv65-xqrg-hc85.json index 7dbe32d8c73..94b9b90dc5c 100644 --- a/advisories/unreviewed/2024/05/GHSA-pv65-xqrg-hc85/GHSA-pv65-xqrg-hc85.json +++ b/advisories/unreviewed/2024/05/GHSA-pv65-xqrg-hc85/GHSA-pv65-xqrg-hc85.json @@ -7,12 +7,8 @@ "CVE-2021-47345" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nRDMA/cma: Fix rdma_resolve_route() memory leak\n\nFix a memory leak when \"mda_resolve_route() is called more than once on\nthe same \"rdma_cm_id\".\n\nThis is possible if cma_query_handler() triggers the\nRDMA_CM_EVENT_ROUTE_ERROR flow which puts the state machine back and\nallows rdma_resolve_route() to be called again.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-pwqm-5jrg-2v3g/GHSA-pwqm-5jrg-2v3g.json b/advisories/unreviewed/2024/05/GHSA-pwqm-5jrg-2v3g/GHSA-pwqm-5jrg-2v3g.json index 70a37489611..c92273b888a 100644 --- a/advisories/unreviewed/2024/05/GHSA-pwqm-5jrg-2v3g/GHSA-pwqm-5jrg-2v3g.json +++ b/advisories/unreviewed/2024/05/GHSA-pwqm-5jrg-2v3g/GHSA-pwqm-5jrg-2v3g.json @@ -7,12 +7,8 @@ "CVE-2021-47320" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfs: fix acl memory leak of posix_acl_create()\n\nWhen looking into another nfs xfstests report, I found acl and\ndefault_acl in nfs3_proc_create() and nfs3_proc_mknod() error\npaths are possibly leaked. Fix them in advance.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-qr6c-mgw3-xxq8/GHSA-qr6c-mgw3-xxq8.json b/advisories/unreviewed/2024/05/GHSA-qr6c-mgw3-xxq8/GHSA-qr6c-mgw3-xxq8.json index 8dd37a6418d..28c4e8b999d 100644 --- a/advisories/unreviewed/2024/05/GHSA-qr6c-mgw3-xxq8/GHSA-qr6c-mgw3-xxq8.json +++ b/advisories/unreviewed/2024/05/GHSA-qr6c-mgw3-xxq8/GHSA-qr6c-mgw3-xxq8.json @@ -7,12 +7,8 @@ "CVE-2021-47357" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\natm: iphase: fix possible use-after-free in ia_module_exit()\n\nThis module's remove path calls del_timer(). However, that function\ndoes not wait until the timer handler finishes. This means that the\ntimer handler may still be running after the driver's remove function\nhas finished, which would result in a use-after-free.\n\nFix by calling del_timer_sync(), which makes sure the timer handler\nhas finished, and unable to re-schedule itself.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-qvgm-cw57-rm8q/GHSA-qvgm-cw57-rm8q.json b/advisories/unreviewed/2024/05/GHSA-qvgm-cw57-rm8q/GHSA-qvgm-cw57-rm8q.json index 85bfe57f93c..1e32021eb9e 100644 --- a/advisories/unreviewed/2024/05/GHSA-qvgm-cw57-rm8q/GHSA-qvgm-cw57-rm8q.json +++ b/advisories/unreviewed/2024/05/GHSA-qvgm-cw57-rm8q/GHSA-qvgm-cw57-rm8q.json @@ -7,12 +7,8 @@ "CVE-2021-47343" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndm btree remove: assign new_root only when removal succeeds\n\nremove_raw() in dm_btree_remove() may fail due to IO read error\n(e.g. read the content of origin block fails during shadowing),\nand the value of shadow_spine::root is uninitialized, but\nthe uninitialized value is still assign to new_root in the\nend of dm_btree_remove().\n\nFor dm-thin, the value of pmd->details_root or pmd->root will become\nan uninitialized value, so if trying to read details_info tree again\nout-of-bound memory may occur as showed below:\n\n general protection fault, probably for non-canonical address 0x3fdcb14c8d7520\n CPU: 4 PID: 515 Comm: dmsetup Not tainted 5.13.0-rc6\n Hardware name: QEMU Standard PC\n RIP: 0010:metadata_ll_load_ie+0x14/0x30\n Call Trace:\n sm_metadata_count_is_more_than_one+0xb9/0xe0\n dm_tm_shadow_block+0x52/0x1c0\n shadow_step+0x59/0xf0\n remove_raw+0xb2/0x170\n dm_btree_remove+0xf4/0x1c0\n dm_pool_delete_thin_device+0xc3/0x140\n pool_message+0x218/0x2b0\n target_message+0x251/0x290\n ctl_ioctl+0x1c4/0x4d0\n dm_ctl_ioctl+0xe/0x20\n __x64_sys_ioctl+0x7b/0xb0\n do_syscall_64+0x40/0xb0\n entry_SYSCALL_64_after_hwframe+0x44/0xae\n\nFixing it by only assign new_root when removal succeeds", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-v5r4-g8jp-rvxf/GHSA-v5r4-g8jp-rvxf.json b/advisories/unreviewed/2024/05/GHSA-v5r4-g8jp-rvxf/GHSA-v5r4-g8jp-rvxf.json index 6eadbef7509..206972bd8a8 100644 --- a/advisories/unreviewed/2024/05/GHSA-v5r4-g8jp-rvxf/GHSA-v5r4-g8jp-rvxf.json +++ b/advisories/unreviewed/2024/05/GHSA-v5r4-g8jp-rvxf/GHSA-v5r4-g8jp-rvxf.json @@ -7,12 +7,8 @@ "CVE-2021-47353" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nudf: Fix NULL pointer dereference in udf_symlink function\n\nIn function udf_symlink, epos.bh is assigned with the value returned\nby udf_tgetblk. The function udf_tgetblk is defined in udf/misc.c\nand returns the value of sb_getblk function that could be NULL.\nThen, epos.bh is used without any check, causing a possible\nNULL pointer dereference when sb_getblk fails.\n\nThis fix adds a check to validate the value of epos.bh.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-vp78-5x9p-m27h/GHSA-vp78-5x9p-m27h.json b/advisories/unreviewed/2024/05/GHSA-vp78-5x9p-m27h/GHSA-vp78-5x9p-m27h.json index b97446fe1b5..dc07d430f75 100644 --- a/advisories/unreviewed/2024/05/GHSA-vp78-5x9p-m27h/GHSA-vp78-5x9p-m27h.json +++ b/advisories/unreviewed/2024/05/GHSA-vp78-5x9p-m27h/GHSA-vp78-5x9p-m27h.json @@ -7,12 +7,8 @@ "CVE-2021-47341" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: mmio: Fix use-after-free Read in kvm_vm_ioctl_unregister_coalesced_mmio\n\nBUG: KASAN: use-after-free in kvm_vm_ioctl_unregister_coalesced_mmio+0x7c/0x1ec arch/arm64/kvm/../../../virt/kvm/coalesced_mmio.c:183\nRead of size 8 at addr ffff0000c03a2500 by task syz-executor083/4269\n\nCPU: 5 PID: 4269 Comm: syz-executor083 Not tainted 5.10.0 #7\nHardware name: linux,dummy-virt (DT)\nCall trace:\n dump_backtrace+0x0/0x2d0 arch/arm64/kernel/stacktrace.c:132\n show_stack+0x28/0x34 arch/arm64/kernel/stacktrace.c:196\n __dump_stack lib/dump_stack.c:77 [inline]\n dump_stack+0x110/0x164 lib/dump_stack.c:118\n print_address_description+0x78/0x5c8 mm/kasan/report.c:385\n __kasan_report mm/kasan/report.c:545 [inline]\n kasan_report+0x148/0x1e4 mm/kasan/report.c:562\n check_memory_region_inline mm/kasan/generic.c:183 [inline]\n __asan_load8+0xb4/0xbc mm/kasan/generic.c:252\n kvm_vm_ioctl_unregister_coalesced_mmio+0x7c/0x1ec arch/arm64/kvm/../../../virt/kvm/coalesced_mmio.c:183\n kvm_vm_ioctl+0xe30/0x14c4 arch/arm64/kvm/../../../virt/kvm/kvm_main.c:3755\n vfs_ioctl fs/ioctl.c:48 [inline]\n __do_sys_ioctl fs/ioctl.c:753 [inline]\n __se_sys_ioctl fs/ioctl.c:739 [inline]\n __arm64_sys_ioctl+0xf88/0x131c fs/ioctl.c:739\n __invoke_syscall arch/arm64/kernel/syscall.c:36 [inline]\n invoke_syscall arch/arm64/kernel/syscall.c:48 [inline]\n el0_svc_common arch/arm64/kernel/syscall.c:158 [inline]\n do_el0_svc+0x120/0x290 arch/arm64/kernel/syscall.c:220\n el0_svc+0x1c/0x28 arch/arm64/kernel/entry-common.c:367\n el0_sync_handler+0x98/0x170 arch/arm64/kernel/entry-common.c:383\n el0_sync+0x140/0x180 arch/arm64/kernel/entry.S:670\n\nAllocated by task 4269:\n stack_trace_save+0x80/0xb8 kernel/stacktrace.c:121\n kasan_save_stack mm/kasan/common.c:48 [inline]\n kasan_set_track mm/kasan/common.c:56 [inline]\n __kasan_kmalloc+0xdc/0x120 mm/kasan/common.c:461\n kasan_kmalloc+0xc/0x14 mm/kasan/common.c:475\n kmem_cache_alloc_trace include/linux/slab.h:450 [inline]\n kmalloc include/linux/slab.h:552 [inline]\n kzalloc include/linux/slab.h:664 [inline]\n kvm_vm_ioctl_register_coalesced_mmio+0x78/0x1cc arch/arm64/kvm/../../../virt/kvm/coalesced_mmio.c:146\n kvm_vm_ioctl+0x7e8/0x14c4 arch/arm64/kvm/../../../virt/kvm/kvm_main.c:3746\n vfs_ioctl fs/ioctl.c:48 [inline]\n __do_sys_ioctl fs/ioctl.c:753 [inline]\n __se_sys_ioctl fs/ioctl.c:739 [inline]\n __arm64_sys_ioctl+0xf88/0x131c fs/ioctl.c:739\n __invoke_syscall arch/arm64/kernel/syscall.c:36 [inline]\n invoke_syscall arch/arm64/kernel/syscall.c:48 [inline]\n el0_svc_common arch/arm64/kernel/syscall.c:158 [inline]\n do_el0_svc+0x120/0x290 arch/arm64/kernel/syscall.c:220\n el0_svc+0x1c/0x28 arch/arm64/kernel/entry-common.c:367\n el0_sync_handler+0x98/0x170 arch/arm64/kernel/entry-common.c:383\n el0_sync+0x140/0x180 arch/arm64/kernel/entry.S:670\n\nFreed by task 4269:\n stack_trace_save+0x80/0xb8 kernel/stacktrace.c:121\n kasan_save_stack mm/kasan/common.c:48 [inline]\n kasan_set_track+0x38/0x6c mm/kasan/common.c:56\n kasan_set_free_info+0x20/0x40 mm/kasan/generic.c:355\n __kasan_slab_free+0x124/0x150 mm/kasan/common.c:422\n kasan_slab_free+0x10/0x1c mm/kasan/common.c:431\n slab_free_hook mm/slub.c:1544 [inline]\n slab_free_freelist_hook mm/slub.c:1577 [inline]\n slab_free mm/slub.c:3142 [inline]\n kfree+0x104/0x38c mm/slub.c:4124\n coalesced_mmio_destructor+0x94/0xa4 arch/arm64/kvm/../../../virt/kvm/coalesced_mmio.c:102\n kvm_iodevice_destructor include/kvm/iodev.h:61 [inline]\n kvm_io_bus_unregister_dev+0x248/0x280 arch/arm64/kvm/../../../virt/kvm/kvm_main.c:4374\n kvm_vm_ioctl_unregister_coalesced_mmio+0x158/0x1ec arch/arm64/kvm/../../../virt/kvm/coalesced_mmio.c:186\n kvm_vm_ioctl+0xe30/0x14c4 arch/arm64/kvm/../../../virt/kvm/kvm_main.c:3755\n vfs_ioctl fs/ioctl.c:48 [inline]\n __do_sys_ioctl fs/ioctl.c:753 [inline]\n __se_sys_ioctl fs/ioctl.c:739 [inline]\n __arm64_sys_ioctl+0xf88/0x131c fs/ioctl.c:739\n __invoke_syscall arch/arm64/kernel/syscall.c:36 [inline]\n invoke_syscall arch/arm64/kernel/sys\n---truncated---", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-wvfx-f2w6-5jrg/GHSA-wvfx-f2w6-5jrg.json b/advisories/unreviewed/2024/05/GHSA-wvfx-f2w6-5jrg/GHSA-wvfx-f2w6-5jrg.json index add8c461ac9..9b44a3de295 100644 --- a/advisories/unreviewed/2024/05/GHSA-wvfx-f2w6-5jrg/GHSA-wvfx-f2w6-5jrg.json +++ b/advisories/unreviewed/2024/05/GHSA-wvfx-f2w6-5jrg/GHSA-wvfx-f2w6-5jrg.json @@ -7,12 +7,8 @@ "CVE-2021-47314" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmemory: fsl_ifc: fix leak of private memory on probe failure\n\nOn probe error the driver should free the memory allocated for private\nstructure. Fix this by using resource-managed allocation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-x5fc-mwch-j73r/GHSA-x5fc-mwch-j73r.json b/advisories/unreviewed/2024/05/GHSA-x5fc-mwch-j73r/GHSA-x5fc-mwch-j73r.json index 209d4369afc..7678ce83012 100644 --- a/advisories/unreviewed/2024/05/GHSA-x5fc-mwch-j73r/GHSA-x5fc-mwch-j73r.json +++ b/advisories/unreviewed/2024/05/GHSA-x5fc-mwch-j73r/GHSA-x5fc-mwch-j73r.json @@ -7,12 +7,8 @@ "CVE-2021-47349" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmwifiex: bring down link before deleting interface\n\nWe can deadlock when rmmod'ing the driver or going through firmware\nreset, because the cfg80211_unregister_wdev() has to bring down the link\nfor us, ... which then grab the same wiphy lock.\n\nnl80211_del_interface() already handles a very similar case, with a nice\ndescription:\n\n /*\n * We hold RTNL, so this is safe, without RTNL opencount cannot\n * reach 0, and thus the rdev cannot be deleted.\n *\n * We need to do it for the dev_close(), since that will call\n * the netdev notifiers, and we need to acquire the mutex there\n * but don't know if we get there from here or from some other\n * place (e.g. \"ip link set ... down\").\n */\n mutex_unlock(&rdev->wiphy.mtx);\n...\n\nDo similarly for mwifiex teardown, by ensuring we bring the link down\nfirst.\n\nSample deadlock trace:\n\n[ 247.103516] INFO: task rmmod:2119 blocked for more than 123 seconds.\n[ 247.110630] Not tainted 5.12.4 #5\n[ 247.115796] \"echo 0 > /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n[ 247.124557] task:rmmod state:D stack: 0 pid: 2119 ppid: 2114 flags:0x00400208\n[ 247.133905] Call trace:\n[ 247.136644] __switch_to+0x130/0x170\n[ 247.140643] __schedule+0x714/0xa0c\n[ 247.144548] schedule_preempt_disabled+0x88/0xf4\n[ 247.149714] __mutex_lock_common+0x43c/0x750\n[ 247.154496] mutex_lock_nested+0x5c/0x68\n[ 247.158884] cfg80211_netdev_notifier_call+0x280/0x4e0 [cfg80211]\n[ 247.165769] raw_notifier_call_chain+0x4c/0x78\n[ 247.170742] call_netdevice_notifiers_info+0x68/0xa4\n[ 247.176305] __dev_close_many+0x7c/0x138\n[ 247.180693] dev_close_many+0x7c/0x10c\n[ 247.184893] unregister_netdevice_many+0xfc/0x654\n[ 247.190158] unregister_netdevice_queue+0xb4/0xe0\n[ 247.195424] _cfg80211_unregister_wdev+0xa4/0x204 [cfg80211]\n[ 247.201816] cfg80211_unregister_wdev+0x20/0x2c [cfg80211]\n[ 247.208016] mwifiex_del_virtual_intf+0xc8/0x188 [mwifiex]\n[ 247.214174] mwifiex_uninit_sw+0x158/0x1b0 [mwifiex]\n[ 247.219747] mwifiex_remove_card+0x38/0xa0 [mwifiex]\n[ 247.225316] mwifiex_pcie_remove+0xd0/0xe0 [mwifiex_pcie]\n[ 247.231451] pci_device_remove+0x50/0xe0\n[ 247.235849] device_release_driver_internal+0x110/0x1b0\n[ 247.241701] driver_detach+0x5c/0x9c\n[ 247.245704] bus_remove_driver+0x84/0xb8\n[ 247.250095] driver_unregister+0x3c/0x60\n[ 247.254486] pci_unregister_driver+0x2c/0x90\n[ 247.259267] cleanup_module+0x18/0xcdc [mwifiex_pcie]", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-xhph-75hg-j96m/GHSA-xhph-75hg-j96m.json b/advisories/unreviewed/2024/05/GHSA-xhph-75hg-j96m/GHSA-xhph-75hg-j96m.json index 636225498b3..f8e3a7b8d30 100644 --- a/advisories/unreviewed/2024/05/GHSA-xhph-75hg-j96m/GHSA-xhph-75hg-j96m.json +++ b/advisories/unreviewed/2024/05/GHSA-xhph-75hg-j96m/GHSA-xhph-75hg-j96m.json @@ -7,12 +7,8 @@ "CVE-2024-4420" ], "details": "There exists a Denial of service vulnerability in Tink-cc in versions prior to 2.1.3.  * An adversary can crash binaries using the crypto::tink::JsonKeysetReader in tink-cc by providing an input that is not an encoded JSON object, but still a valid encoded JSON element, for example a number or an array. This will crash as Tink just assumes any valid JSON input will contain an object.\n\n\n * An adversary can crash binaries using the crypto::tink::JsonKeysetReader in tink-cc by providing an input containing many nested JSON objects. This may result in a stack overflow.\n\n\nWe recommend upgrading to version 2.1.3 or above", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-xmfc-6x2r-fqv5/GHSA-xmfc-6x2r-fqv5.json b/advisories/unreviewed/2024/05/GHSA-xmfc-6x2r-fqv5/GHSA-xmfc-6x2r-fqv5.json index fb091d48f59..b3440b5d05b 100644 --- a/advisories/unreviewed/2024/05/GHSA-xmfc-6x2r-fqv5/GHSA-xmfc-6x2r-fqv5.json +++ b/advisories/unreviewed/2024/05/GHSA-xmfc-6x2r-fqv5/GHSA-xmfc-6x2r-fqv5.json @@ -7,12 +7,8 @@ "CVE-2021-47319" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nvirtio-blk: Fix memory leak among suspend/resume procedure\n\nThe vblk->vqs should be freed before we call init_vqs()\nin virtblk_restore().", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-xp4x-rp64-962g/GHSA-xp4x-rp64-962g.json b/advisories/unreviewed/2024/05/GHSA-xp4x-rp64-962g/GHSA-xp4x-rp64-962g.json index ed7e0cd97a1..21ce174d939 100644 --- a/advisories/unreviewed/2024/05/GHSA-xp4x-rp64-962g/GHSA-xp4x-rp64-962g.json +++ b/advisories/unreviewed/2024/05/GHSA-xp4x-rp64-962g/GHSA-xp4x-rp64-962g.json @@ -7,12 +7,8 @@ "CVE-2021-47358" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nstaging: greybus: uart: fix tty use after free\n\nUser space can hold a tty open indefinitely and tty drivers must not\nrelease the underlying structures until the last user is gone.\n\nSwitch to using the tty-port reference counter to manage the life time\nof the greybus tty state to avoid use after free after a disconnect.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/06/GHSA-247v-cg43-r8xg/GHSA-247v-cg43-r8xg.json b/advisories/unreviewed/2024/06/GHSA-247v-cg43-r8xg/GHSA-247v-cg43-r8xg.json index 813951781c0..f58c8ff891e 100644 --- a/advisories/unreviewed/2024/06/GHSA-247v-cg43-r8xg/GHSA-247v-cg43-r8xg.json +++ b/advisories/unreviewed/2024/06/GHSA-247v-cg43-r8xg/GHSA-247v-cg43-r8xg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-2774-v47p-f5v6/GHSA-2774-v47p-f5v6.json b/advisories/unreviewed/2024/06/GHSA-2774-v47p-f5v6/GHSA-2774-v47p-f5v6.json index c4d82251423..a4eef6647fd 100644 --- a/advisories/unreviewed/2024/06/GHSA-2774-v47p-f5v6/GHSA-2774-v47p-f5v6.json +++ b/advisories/unreviewed/2024/06/GHSA-2774-v47p-f5v6/GHSA-2774-v47p-f5v6.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-c8f7-vvrw-73c7/GHSA-c8f7-vvrw-73c7.json b/advisories/unreviewed/2024/06/GHSA-c8f7-vvrw-73c7/GHSA-c8f7-vvrw-73c7.json index 254d8e77483..542b6873d6a 100644 --- a/advisories/unreviewed/2024/06/GHSA-c8f7-vvrw-73c7/GHSA-c8f7-vvrw-73c7.json +++ b/advisories/unreviewed/2024/06/GHSA-c8f7-vvrw-73c7/GHSA-c8f7-vvrw-73c7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-g5g4-3wq4-6784/GHSA-g5g4-3wq4-6784.json b/advisories/unreviewed/2024/06/GHSA-g5g4-3wq4-6784/GHSA-g5g4-3wq4-6784.json index 99c8aabf0d1..69ef3382a00 100644 --- a/advisories/unreviewed/2024/06/GHSA-g5g4-3wq4-6784/GHSA-g5g4-3wq4-6784.json +++ b/advisories/unreviewed/2024/06/GHSA-g5g4-3wq4-6784/GHSA-g5g4-3wq4-6784.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-gqh6-f673-ccgc/GHSA-gqh6-f673-ccgc.json b/advisories/unreviewed/2024/06/GHSA-gqh6-f673-ccgc/GHSA-gqh6-f673-ccgc.json index 86707a5352f..d06a58fc7e3 100644 --- a/advisories/unreviewed/2024/06/GHSA-gqh6-f673-ccgc/GHSA-gqh6-f673-ccgc.json +++ b/advisories/unreviewed/2024/06/GHSA-gqh6-f673-ccgc/GHSA-gqh6-f673-ccgc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-gxqj-2fg2-r9jh/GHSA-gxqj-2fg2-r9jh.json b/advisories/unreviewed/2024/06/GHSA-gxqj-2fg2-r9jh/GHSA-gxqj-2fg2-r9jh.json index 3cfbd84fe3b..ceca74fd34b 100644 --- a/advisories/unreviewed/2024/06/GHSA-gxqj-2fg2-r9jh/GHSA-gxqj-2fg2-r9jh.json +++ b/advisories/unreviewed/2024/06/GHSA-gxqj-2fg2-r9jh/GHSA-gxqj-2fg2-r9jh.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-hfr5-33pv-p28w/GHSA-hfr5-33pv-p28w.json b/advisories/unreviewed/2024/06/GHSA-hfr5-33pv-p28w/GHSA-hfr5-33pv-p28w.json index 49cc6e01b16..5a66934802d 100644 --- a/advisories/unreviewed/2024/06/GHSA-hfr5-33pv-p28w/GHSA-hfr5-33pv-p28w.json +++ b/advisories/unreviewed/2024/06/GHSA-hfr5-33pv-p28w/GHSA-hfr5-33pv-p28w.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-j9cw-mqxj-rmxf/GHSA-j9cw-mqxj-rmxf.json b/advisories/unreviewed/2024/06/GHSA-j9cw-mqxj-rmxf/GHSA-j9cw-mqxj-rmxf.json index dcd11860e98..ed35a696f3f 100644 --- a/advisories/unreviewed/2024/06/GHSA-j9cw-mqxj-rmxf/GHSA-j9cw-mqxj-rmxf.json +++ b/advisories/unreviewed/2024/06/GHSA-j9cw-mqxj-rmxf/GHSA-j9cw-mqxj-rmxf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-mg3w-329f-wm8c/GHSA-mg3w-329f-wm8c.json b/advisories/unreviewed/2024/06/GHSA-mg3w-329f-wm8c/GHSA-mg3w-329f-wm8c.json index 3b737cc2461..19a18091199 100644 --- a/advisories/unreviewed/2024/06/GHSA-mg3w-329f-wm8c/GHSA-mg3w-329f-wm8c.json +++ b/advisories/unreviewed/2024/06/GHSA-mg3w-329f-wm8c/GHSA-mg3w-329f-wm8c.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-prj9-gvpq-vj8x/GHSA-prj9-gvpq-vj8x.json b/advisories/unreviewed/2024/06/GHSA-prj9-gvpq-vj8x/GHSA-prj9-gvpq-vj8x.json index 882245d7ffd..a9e2847f4d6 100644 --- a/advisories/unreviewed/2024/06/GHSA-prj9-gvpq-vj8x/GHSA-prj9-gvpq-vj8x.json +++ b/advisories/unreviewed/2024/06/GHSA-prj9-gvpq-vj8x/GHSA-prj9-gvpq-vj8x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/06/GHSA-r24r-m7ff-ghq2/GHSA-r24r-m7ff-ghq2.json b/advisories/unreviewed/2024/06/GHSA-r24r-m7ff-ghq2/GHSA-r24r-m7ff-ghq2.json index 46a7a2246fe..b961a7ee1a9 100644 --- a/advisories/unreviewed/2024/06/GHSA-r24r-m7ff-ghq2/GHSA-r24r-m7ff-ghq2.json +++ b/advisories/unreviewed/2024/06/GHSA-r24r-m7ff-ghq2/GHSA-r24r-m7ff-ghq2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-w64q-m54g-vjw3/GHSA-w64q-m54g-vjw3.json b/advisories/unreviewed/2024/06/GHSA-w64q-m54g-vjw3/GHSA-w64q-m54g-vjw3.json index 9cc28522a41..e0d540c1b7b 100644 --- a/advisories/unreviewed/2024/06/GHSA-w64q-m54g-vjw3/GHSA-w64q-m54g-vjw3.json +++ b/advisories/unreviewed/2024/06/GHSA-w64q-m54g-vjw3/GHSA-w64q-m54g-vjw3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-2x8c-95vh-gfv4/GHSA-2x8c-95vh-gfv4.json b/advisories/unreviewed/2024/07/GHSA-2x8c-95vh-gfv4/GHSA-2x8c-95vh-gfv4.json index 066c0ed46b8..ff343e564e0 100644 --- a/advisories/unreviewed/2024/07/GHSA-2x8c-95vh-gfv4/GHSA-2x8c-95vh-gfv4.json +++ b/advisories/unreviewed/2024/07/GHSA-2x8c-95vh-gfv4/GHSA-2x8c-95vh-gfv4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-36qp-g3hr-p7r4/GHSA-36qp-g3hr-p7r4.json b/advisories/unreviewed/2024/07/GHSA-36qp-g3hr-p7r4/GHSA-36qp-g3hr-p7r4.json index b58911533b6..7d04ad7b993 100644 --- a/advisories/unreviewed/2024/07/GHSA-36qp-g3hr-p7r4/GHSA-36qp-g3hr-p7r4.json +++ b/advisories/unreviewed/2024/07/GHSA-36qp-g3hr-p7r4/GHSA-36qp-g3hr-p7r4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-3ww7-h83j-f3rc/GHSA-3ww7-h83j-f3rc.json b/advisories/unreviewed/2024/07/GHSA-3ww7-h83j-f3rc/GHSA-3ww7-h83j-f3rc.json index 5823e37aed1..ff3020e6b25 100644 --- a/advisories/unreviewed/2024/07/GHSA-3ww7-h83j-f3rc/GHSA-3ww7-h83j-f3rc.json +++ b/advisories/unreviewed/2024/07/GHSA-3ww7-h83j-f3rc/GHSA-3ww7-h83j-f3rc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-596r-xq28-523m/GHSA-596r-xq28-523m.json b/advisories/unreviewed/2024/07/GHSA-596r-xq28-523m/GHSA-596r-xq28-523m.json index 9f41bb3c751..9ba7499771f 100644 --- a/advisories/unreviewed/2024/07/GHSA-596r-xq28-523m/GHSA-596r-xq28-523m.json +++ b/advisories/unreviewed/2024/07/GHSA-596r-xq28-523m/GHSA-596r-xq28-523m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-5cwv-6xqx-92m5/GHSA-5cwv-6xqx-92m5.json b/advisories/unreviewed/2024/07/GHSA-5cwv-6xqx-92m5/GHSA-5cwv-6xqx-92m5.json index b366aeb7288..068230a47c6 100644 --- a/advisories/unreviewed/2024/07/GHSA-5cwv-6xqx-92m5/GHSA-5cwv-6xqx-92m5.json +++ b/advisories/unreviewed/2024/07/GHSA-5cwv-6xqx-92m5/GHSA-5cwv-6xqx-92m5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-8g3v-wwhq-2r48/GHSA-8g3v-wwhq-2r48.json b/advisories/unreviewed/2024/07/GHSA-8g3v-wwhq-2r48/GHSA-8g3v-wwhq-2r48.json index a24c03c963c..62eb497fd6a 100644 --- a/advisories/unreviewed/2024/07/GHSA-8g3v-wwhq-2r48/GHSA-8g3v-wwhq-2r48.json +++ b/advisories/unreviewed/2024/07/GHSA-8g3v-wwhq-2r48/GHSA-8g3v-wwhq-2r48.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-9whg-7gjr-rfxr/GHSA-9whg-7gjr-rfxr.json b/advisories/unreviewed/2024/07/GHSA-9whg-7gjr-rfxr/GHSA-9whg-7gjr-rfxr.json index f67da14d644..a2138e335ee 100644 --- a/advisories/unreviewed/2024/07/GHSA-9whg-7gjr-rfxr/GHSA-9whg-7gjr-rfxr.json +++ b/advisories/unreviewed/2024/07/GHSA-9whg-7gjr-rfxr/GHSA-9whg-7gjr-rfxr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-ffrr-6f6g-mc3r/GHSA-ffrr-6f6g-mc3r.json b/advisories/unreviewed/2024/07/GHSA-ffrr-6f6g-mc3r/GHSA-ffrr-6f6g-mc3r.json index cfec3cffef3..e6d9255b5b5 100644 --- a/advisories/unreviewed/2024/07/GHSA-ffrr-6f6g-mc3r/GHSA-ffrr-6f6g-mc3r.json +++ b/advisories/unreviewed/2024/07/GHSA-ffrr-6f6g-mc3r/GHSA-ffrr-6f6g-mc3r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-hcp4-6c7v-w8f2/GHSA-hcp4-6c7v-w8f2.json b/advisories/unreviewed/2024/07/GHSA-hcp4-6c7v-w8f2/GHSA-hcp4-6c7v-w8f2.json index 38f20ca4749..7492040dca7 100644 --- a/advisories/unreviewed/2024/07/GHSA-hcp4-6c7v-w8f2/GHSA-hcp4-6c7v-w8f2.json +++ b/advisories/unreviewed/2024/07/GHSA-hcp4-6c7v-w8f2/GHSA-hcp4-6c7v-w8f2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-hq79-5p4q-xv2w/GHSA-hq79-5p4q-xv2w.json b/advisories/unreviewed/2024/07/GHSA-hq79-5p4q-xv2w/GHSA-hq79-5p4q-xv2w.json index e4020a6787e..90aa0101b74 100644 --- a/advisories/unreviewed/2024/07/GHSA-hq79-5p4q-xv2w/GHSA-hq79-5p4q-xv2w.json +++ b/advisories/unreviewed/2024/07/GHSA-hq79-5p4q-xv2w/GHSA-hq79-5p4q-xv2w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-m95v-fcv5-9387/GHSA-m95v-fcv5-9387.json b/advisories/unreviewed/2024/07/GHSA-m95v-fcv5-9387/GHSA-m95v-fcv5-9387.json index e55cda9a628..9d298840deb 100644 --- a/advisories/unreviewed/2024/07/GHSA-m95v-fcv5-9387/GHSA-m95v-fcv5-9387.json +++ b/advisories/unreviewed/2024/07/GHSA-m95v-fcv5-9387/GHSA-m95v-fcv5-9387.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-p6xr-r6hh-2w8f/GHSA-p6xr-r6hh-2w8f.json b/advisories/unreviewed/2024/07/GHSA-p6xr-r6hh-2w8f/GHSA-p6xr-r6hh-2w8f.json index ea339caeb9f..845a91c679d 100644 --- a/advisories/unreviewed/2024/07/GHSA-p6xr-r6hh-2w8f/GHSA-p6xr-r6hh-2w8f.json +++ b/advisories/unreviewed/2024/07/GHSA-p6xr-r6hh-2w8f/GHSA-p6xr-r6hh-2w8f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-vmr8-6pr2-r534/GHSA-vmr8-6pr2-r534.json b/advisories/unreviewed/2024/07/GHSA-vmr8-6pr2-r534/GHSA-vmr8-6pr2-r534.json index 5cd7e0acab3..90221b0fc88 100644 --- a/advisories/unreviewed/2024/07/GHSA-vmr8-6pr2-r534/GHSA-vmr8-6pr2-r534.json +++ b/advisories/unreviewed/2024/07/GHSA-vmr8-6pr2-r534/GHSA-vmr8-6pr2-r534.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -47,9 +45,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-x4cv-g6r2-3w7r/GHSA-x4cv-g6r2-3w7r.json b/advisories/unreviewed/2024/07/GHSA-x4cv-g6r2-3w7r/GHSA-x4cv-g6r2-3w7r.json index e7eeaa9dcfd..3956800edf9 100644 --- a/advisories/unreviewed/2024/07/GHSA-x4cv-g6r2-3w7r/GHSA-x4cv-g6r2-3w7r.json +++ b/advisories/unreviewed/2024/07/GHSA-x4cv-g6r2-3w7r/GHSA-x4cv-g6r2-3w7r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-7m3q-23p4-mw4v/GHSA-7m3q-23p4-mw4v.json b/advisories/unreviewed/2024/08/GHSA-7m3q-23p4-mw4v/GHSA-7m3q-23p4-mw4v.json index 6bebe239406..e77936e7958 100644 --- a/advisories/unreviewed/2024/08/GHSA-7m3q-23p4-mw4v/GHSA-7m3q-23p4-mw4v.json +++ b/advisories/unreviewed/2024/08/GHSA-7m3q-23p4-mw4v/GHSA-7m3q-23p4-mw4v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-c3hg-qcg2-fhv2/GHSA-c3hg-qcg2-fhv2.json b/advisories/unreviewed/2024/08/GHSA-c3hg-qcg2-fhv2/GHSA-c3hg-qcg2-fhv2.json index 1a599d7f27f..c1679c59fc5 100644 --- a/advisories/unreviewed/2024/08/GHSA-c3hg-qcg2-fhv2/GHSA-c3hg-qcg2-fhv2.json +++ b/advisories/unreviewed/2024/08/GHSA-c3hg-qcg2-fhv2/GHSA-c3hg-qcg2-fhv2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-gp9j-wjxg-4r78/GHSA-gp9j-wjxg-4r78.json b/advisories/unreviewed/2024/08/GHSA-gp9j-wjxg-4r78/GHSA-gp9j-wjxg-4r78.json index 0a7ae9ee733..432930b8870 100644 --- a/advisories/unreviewed/2024/08/GHSA-gp9j-wjxg-4r78/GHSA-gp9j-wjxg-4r78.json +++ b/advisories/unreviewed/2024/08/GHSA-gp9j-wjxg-4r78/GHSA-gp9j-wjxg-4r78.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-jg65-m2mw-qhx7/GHSA-jg65-m2mw-qhx7.json b/advisories/unreviewed/2024/08/GHSA-jg65-m2mw-qhx7/GHSA-jg65-m2mw-qhx7.json index e351ec5f6cd..bc52ae3d504 100644 --- a/advisories/unreviewed/2024/08/GHSA-jg65-m2mw-qhx7/GHSA-jg65-m2mw-qhx7.json +++ b/advisories/unreviewed/2024/08/GHSA-jg65-m2mw-qhx7/GHSA-jg65-m2mw-qhx7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-wj37-798j-hmqr/GHSA-wj37-798j-hmqr.json b/advisories/unreviewed/2024/08/GHSA-wj37-798j-hmqr/GHSA-wj37-798j-hmqr.json index 6a36890ed1a..aae8d1b8278 100644 --- a/advisories/unreviewed/2024/08/GHSA-wj37-798j-hmqr/GHSA-wj37-798j-hmqr.json +++ b/advisories/unreviewed/2024/08/GHSA-wj37-798j-hmqr/GHSA-wj37-798j-hmqr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-xmf4-vfcf-qcjg/GHSA-xmf4-vfcf-qcjg.json b/advisories/unreviewed/2024/08/GHSA-xmf4-vfcf-qcjg/GHSA-xmf4-vfcf-qcjg.json index 4da2e9e3b36..5a387127eda 100644 --- a/advisories/unreviewed/2024/08/GHSA-xmf4-vfcf-qcjg/GHSA-xmf4-vfcf-qcjg.json +++ b/advisories/unreviewed/2024/08/GHSA-xmf4-vfcf-qcjg/GHSA-xmf4-vfcf-qcjg.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-254h-gvgq-x2xg/GHSA-254h-gvgq-x2xg.json b/advisories/unreviewed/2024/09/GHSA-254h-gvgq-x2xg/GHSA-254h-gvgq-x2xg.json index 94254b9a735..56f9e18b0bf 100644 --- a/advisories/unreviewed/2024/09/GHSA-254h-gvgq-x2xg/GHSA-254h-gvgq-x2xg.json +++ b/advisories/unreviewed/2024/09/GHSA-254h-gvgq-x2xg/GHSA-254h-gvgq-x2xg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-263w-f6fg-v2x5/GHSA-263w-f6fg-v2x5.json b/advisories/unreviewed/2024/09/GHSA-263w-f6fg-v2x5/GHSA-263w-f6fg-v2x5.json index df876238373..4c2314edcac 100644 --- a/advisories/unreviewed/2024/09/GHSA-263w-f6fg-v2x5/GHSA-263w-f6fg-v2x5.json +++ b/advisories/unreviewed/2024/09/GHSA-263w-f6fg-v2x5/GHSA-263w-f6fg-v2x5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-2c6m-54c4-x2fg/GHSA-2c6m-54c4-x2fg.json b/advisories/unreviewed/2024/09/GHSA-2c6m-54c4-x2fg/GHSA-2c6m-54c4-x2fg.json index 5a51a6ff8e5..763baae66df 100644 --- a/advisories/unreviewed/2024/09/GHSA-2c6m-54c4-x2fg/GHSA-2c6m-54c4-x2fg.json +++ b/advisories/unreviewed/2024/09/GHSA-2c6m-54c4-x2fg/GHSA-2c6m-54c4-x2fg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-36p3-3fj3-g9p5/GHSA-36p3-3fj3-g9p5.json b/advisories/unreviewed/2024/09/GHSA-36p3-3fj3-g9p5/GHSA-36p3-3fj3-g9p5.json index 16873d5b34d..7441d661c46 100644 --- a/advisories/unreviewed/2024/09/GHSA-36p3-3fj3-g9p5/GHSA-36p3-3fj3-g9p5.json +++ b/advisories/unreviewed/2024/09/GHSA-36p3-3fj3-g9p5/GHSA-36p3-3fj3-g9p5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-3f92-cwf9-rgvq/GHSA-3f92-cwf9-rgvq.json b/advisories/unreviewed/2024/09/GHSA-3f92-cwf9-rgvq/GHSA-3f92-cwf9-rgvq.json index b84607090b7..09c7a8f89b5 100644 --- a/advisories/unreviewed/2024/09/GHSA-3f92-cwf9-rgvq/GHSA-3f92-cwf9-rgvq.json +++ b/advisories/unreviewed/2024/09/GHSA-3f92-cwf9-rgvq/GHSA-3f92-cwf9-rgvq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-44hv-4ccm-5m38/GHSA-44hv-4ccm-5m38.json b/advisories/unreviewed/2024/09/GHSA-44hv-4ccm-5m38/GHSA-44hv-4ccm-5m38.json index 7c89d01323e..13e01174fc0 100644 --- a/advisories/unreviewed/2024/09/GHSA-44hv-4ccm-5m38/GHSA-44hv-4ccm-5m38.json +++ b/advisories/unreviewed/2024/09/GHSA-44hv-4ccm-5m38/GHSA-44hv-4ccm-5m38.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-499r-h8wp-rfvm/GHSA-499r-h8wp-rfvm.json b/advisories/unreviewed/2024/09/GHSA-499r-h8wp-rfvm/GHSA-499r-h8wp-rfvm.json index a6077edd8af..625b88ccde4 100644 --- a/advisories/unreviewed/2024/09/GHSA-499r-h8wp-rfvm/GHSA-499r-h8wp-rfvm.json +++ b/advisories/unreviewed/2024/09/GHSA-499r-h8wp-rfvm/GHSA-499r-h8wp-rfvm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/09/GHSA-4v6w-vxg7-j28q/GHSA-4v6w-vxg7-j28q.json b/advisories/unreviewed/2024/09/GHSA-4v6w-vxg7-j28q/GHSA-4v6w-vxg7-j28q.json index cce260c9bc9..3e80d7ef12a 100644 --- a/advisories/unreviewed/2024/09/GHSA-4v6w-vxg7-j28q/GHSA-4v6w-vxg7-j28q.json +++ b/advisories/unreviewed/2024/09/GHSA-4v6w-vxg7-j28q/GHSA-4v6w-vxg7-j28q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-4xpj-prjw-rc6p/GHSA-4xpj-prjw-rc6p.json b/advisories/unreviewed/2024/09/GHSA-4xpj-prjw-rc6p/GHSA-4xpj-prjw-rc6p.json index 5813877ebc9..3184969eb6a 100644 --- a/advisories/unreviewed/2024/09/GHSA-4xpj-prjw-rc6p/GHSA-4xpj-prjw-rc6p.json +++ b/advisories/unreviewed/2024/09/GHSA-4xpj-prjw-rc6p/GHSA-4xpj-prjw-rc6p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-58rh-53vh-8w68/GHSA-58rh-53vh-8w68.json b/advisories/unreviewed/2024/09/GHSA-58rh-53vh-8w68/GHSA-58rh-53vh-8w68.json index 85a651c35f9..44578470f7e 100644 --- a/advisories/unreviewed/2024/09/GHSA-58rh-53vh-8w68/GHSA-58rh-53vh-8w68.json +++ b/advisories/unreviewed/2024/09/GHSA-58rh-53vh-8w68/GHSA-58rh-53vh-8w68.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-6hmq-m3mm-wvrh/GHSA-6hmq-m3mm-wvrh.json b/advisories/unreviewed/2024/09/GHSA-6hmq-m3mm-wvrh/GHSA-6hmq-m3mm-wvrh.json index d2a7096e542..342021ca137 100644 --- a/advisories/unreviewed/2024/09/GHSA-6hmq-m3mm-wvrh/GHSA-6hmq-m3mm-wvrh.json +++ b/advisories/unreviewed/2024/09/GHSA-6hmq-m3mm-wvrh/GHSA-6hmq-m3mm-wvrh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-7294-67g5-cc6w/GHSA-7294-67g5-cc6w.json b/advisories/unreviewed/2024/09/GHSA-7294-67g5-cc6w/GHSA-7294-67g5-cc6w.json index e81f603230b..e9bab9dff33 100644 --- a/advisories/unreviewed/2024/09/GHSA-7294-67g5-cc6w/GHSA-7294-67g5-cc6w.json +++ b/advisories/unreviewed/2024/09/GHSA-7294-67g5-cc6w/GHSA-7294-67g5-cc6w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-754w-8w8c-rvmg/GHSA-754w-8w8c-rvmg.json b/advisories/unreviewed/2024/09/GHSA-754w-8w8c-rvmg/GHSA-754w-8w8c-rvmg.json index a00338334d2..526cb83eb6c 100644 --- a/advisories/unreviewed/2024/09/GHSA-754w-8w8c-rvmg/GHSA-754w-8w8c-rvmg.json +++ b/advisories/unreviewed/2024/09/GHSA-754w-8w8c-rvmg/GHSA-754w-8w8c-rvmg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-78c9-5p24-9jcg/GHSA-78c9-5p24-9jcg.json b/advisories/unreviewed/2024/09/GHSA-78c9-5p24-9jcg/GHSA-78c9-5p24-9jcg.json index 0a301ec8ac5..8b34162de76 100644 --- a/advisories/unreviewed/2024/09/GHSA-78c9-5p24-9jcg/GHSA-78c9-5p24-9jcg.json +++ b/advisories/unreviewed/2024/09/GHSA-78c9-5p24-9jcg/GHSA-78c9-5p24-9jcg.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:P/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-83f6-495c-ff9q/GHSA-83f6-495c-ff9q.json b/advisories/unreviewed/2024/09/GHSA-83f6-495c-ff9q/GHSA-83f6-495c-ff9q.json index fc23373eed7..85c8c6f8718 100644 --- a/advisories/unreviewed/2024/09/GHSA-83f6-495c-ff9q/GHSA-83f6-495c-ff9q.json +++ b/advisories/unreviewed/2024/09/GHSA-83f6-495c-ff9q/GHSA-83f6-495c-ff9q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-859x-xr5x-c9x2/GHSA-859x-xr5x-c9x2.json b/advisories/unreviewed/2024/09/GHSA-859x-xr5x-c9x2/GHSA-859x-xr5x-c9x2.json index 0a288a2576e..bedacc05ea9 100644 --- a/advisories/unreviewed/2024/09/GHSA-859x-xr5x-c9x2/GHSA-859x-xr5x-c9x2.json +++ b/advisories/unreviewed/2024/09/GHSA-859x-xr5x-c9x2/GHSA-859x-xr5x-c9x2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-962h-g945-9r98/GHSA-962h-g945-9r98.json b/advisories/unreviewed/2024/09/GHSA-962h-g945-9r98/GHSA-962h-g945-9r98.json index f6028b02bf7..a9960c25d53 100644 --- a/advisories/unreviewed/2024/09/GHSA-962h-g945-9r98/GHSA-962h-g945-9r98.json +++ b/advisories/unreviewed/2024/09/GHSA-962h-g945-9r98/GHSA-962h-g945-9r98.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-9r4q-j9g4-gj24/GHSA-9r4q-j9g4-gj24.json b/advisories/unreviewed/2024/09/GHSA-9r4q-j9g4-gj24/GHSA-9r4q-j9g4-gj24.json index 31cc0080485..68e5179c4d7 100644 --- a/advisories/unreviewed/2024/09/GHSA-9r4q-j9g4-gj24/GHSA-9r4q-j9g4-gj24.json +++ b/advisories/unreviewed/2024/09/GHSA-9r4q-j9g4-gj24/GHSA-9r4q-j9g4-gj24.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-c476-5cw2-72fp/GHSA-c476-5cw2-72fp.json b/advisories/unreviewed/2024/09/GHSA-c476-5cw2-72fp/GHSA-c476-5cw2-72fp.json index 02164b07448..1886f01efa4 100644 --- a/advisories/unreviewed/2024/09/GHSA-c476-5cw2-72fp/GHSA-c476-5cw2-72fp.json +++ b/advisories/unreviewed/2024/09/GHSA-c476-5cw2-72fp/GHSA-c476-5cw2-72fp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-chwm-h2rg-vxxf/GHSA-chwm-h2rg-vxxf.json b/advisories/unreviewed/2024/09/GHSA-chwm-h2rg-vxxf/GHSA-chwm-h2rg-vxxf.json index 42aac92d667..31b3700d991 100644 --- a/advisories/unreviewed/2024/09/GHSA-chwm-h2rg-vxxf/GHSA-chwm-h2rg-vxxf.json +++ b/advisories/unreviewed/2024/09/GHSA-chwm-h2rg-vxxf/GHSA-chwm-h2rg-vxxf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-crwj-f9hc-c6g4/GHSA-crwj-f9hc-c6g4.json b/advisories/unreviewed/2024/09/GHSA-crwj-f9hc-c6g4/GHSA-crwj-f9hc-c6g4.json index e3a60571acb..e1e4ed94c96 100644 --- a/advisories/unreviewed/2024/09/GHSA-crwj-f9hc-c6g4/GHSA-crwj-f9hc-c6g4.json +++ b/advisories/unreviewed/2024/09/GHSA-crwj-f9hc-c6g4/GHSA-crwj-f9hc-c6g4.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:P/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-f5vv-pq9r-8p2f/GHSA-f5vv-pq9r-8p2f.json b/advisories/unreviewed/2024/09/GHSA-f5vv-pq9r-8p2f/GHSA-f5vv-pq9r-8p2f.json index 527c3660e55..dd7cbc50bf7 100644 --- a/advisories/unreviewed/2024/09/GHSA-f5vv-pq9r-8p2f/GHSA-f5vv-pq9r-8p2f.json +++ b/advisories/unreviewed/2024/09/GHSA-f5vv-pq9r-8p2f/GHSA-f5vv-pq9r-8p2f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-fp3g-r7j4-vr8g/GHSA-fp3g-r7j4-vr8g.json b/advisories/unreviewed/2024/09/GHSA-fp3g-r7j4-vr8g/GHSA-fp3g-r7j4-vr8g.json index 20612dc88ff..0030d6cddaa 100644 --- a/advisories/unreviewed/2024/09/GHSA-fp3g-r7j4-vr8g/GHSA-fp3g-r7j4-vr8g.json +++ b/advisories/unreviewed/2024/09/GHSA-fp3g-r7j4-vr8g/GHSA-fp3g-r7j4-vr8g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-g5x5-v9cp-7w65/GHSA-g5x5-v9cp-7w65.json b/advisories/unreviewed/2024/09/GHSA-g5x5-v9cp-7w65/GHSA-g5x5-v9cp-7w65.json index 67c698c89da..0aae0016368 100644 --- a/advisories/unreviewed/2024/09/GHSA-g5x5-v9cp-7w65/GHSA-g5x5-v9cp-7w65.json +++ b/advisories/unreviewed/2024/09/GHSA-g5x5-v9cp-7w65/GHSA-g5x5-v9cp-7w65.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-ggr8-prr7-mw8f/GHSA-ggr8-prr7-mw8f.json b/advisories/unreviewed/2024/09/GHSA-ggr8-prr7-mw8f/GHSA-ggr8-prr7-mw8f.json index ea81f8dac95..e35c48fb5a7 100644 --- a/advisories/unreviewed/2024/09/GHSA-ggr8-prr7-mw8f/GHSA-ggr8-prr7-mw8f.json +++ b/advisories/unreviewed/2024/09/GHSA-ggr8-prr7-mw8f/GHSA-ggr8-prr7-mw8f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-grj2-x9v7-7qqx/GHSA-grj2-x9v7-7qqx.json b/advisories/unreviewed/2024/09/GHSA-grj2-x9v7-7qqx/GHSA-grj2-x9v7-7qqx.json index ed171346089..d529ae49de1 100644 --- a/advisories/unreviewed/2024/09/GHSA-grj2-x9v7-7qqx/GHSA-grj2-x9v7-7qqx.json +++ b/advisories/unreviewed/2024/09/GHSA-grj2-x9v7-7qqx/GHSA-grj2-x9v7-7qqx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-gx7g-q2xr-xm5f/GHSA-gx7g-q2xr-xm5f.json b/advisories/unreviewed/2024/09/GHSA-gx7g-q2xr-xm5f/GHSA-gx7g-q2xr-xm5f.json index 6558f18fdf5..aaf02877c5b 100644 --- a/advisories/unreviewed/2024/09/GHSA-gx7g-q2xr-xm5f/GHSA-gx7g-q2xr-xm5f.json +++ b/advisories/unreviewed/2024/09/GHSA-gx7g-q2xr-xm5f/GHSA-gx7g-q2xr-xm5f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-h9rg-jfq5-wf8g/GHSA-h9rg-jfq5-wf8g.json b/advisories/unreviewed/2024/09/GHSA-h9rg-jfq5-wf8g/GHSA-h9rg-jfq5-wf8g.json index 69334fba1e8..ce0b83ec6c6 100644 --- a/advisories/unreviewed/2024/09/GHSA-h9rg-jfq5-wf8g/GHSA-h9rg-jfq5-wf8g.json +++ b/advisories/unreviewed/2024/09/GHSA-h9rg-jfq5-wf8g/GHSA-h9rg-jfq5-wf8g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-j4w6-9wmj-vfmv/GHSA-j4w6-9wmj-vfmv.json b/advisories/unreviewed/2024/09/GHSA-j4w6-9wmj-vfmv/GHSA-j4w6-9wmj-vfmv.json index 5b6f8e59604..778fcffc611 100644 --- a/advisories/unreviewed/2024/09/GHSA-j4w6-9wmj-vfmv/GHSA-j4w6-9wmj-vfmv.json +++ b/advisories/unreviewed/2024/09/GHSA-j4w6-9wmj-vfmv/GHSA-j4w6-9wmj-vfmv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-j7q4-4r7g-3jf4/GHSA-j7q4-4r7g-3jf4.json b/advisories/unreviewed/2024/09/GHSA-j7q4-4r7g-3jf4/GHSA-j7q4-4r7g-3jf4.json index 8343fa61d7b..2328001a5f3 100644 --- a/advisories/unreviewed/2024/09/GHSA-j7q4-4r7g-3jf4/GHSA-j7q4-4r7g-3jf4.json +++ b/advisories/unreviewed/2024/09/GHSA-j7q4-4r7g-3jf4/GHSA-j7q4-4r7g-3jf4.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:P/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-jh49-frp2-9886/GHSA-jh49-frp2-9886.json b/advisories/unreviewed/2024/09/GHSA-jh49-frp2-9886/GHSA-jh49-frp2-9886.json index 18a05e03afd..857d1858ec3 100644 --- a/advisories/unreviewed/2024/09/GHSA-jh49-frp2-9886/GHSA-jh49-frp2-9886.json +++ b/advisories/unreviewed/2024/09/GHSA-jh49-frp2-9886/GHSA-jh49-frp2-9886.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-jm4p-4c99-gp7x/GHSA-jm4p-4c99-gp7x.json b/advisories/unreviewed/2024/09/GHSA-jm4p-4c99-gp7x/GHSA-jm4p-4c99-gp7x.json index 2bdbbda25b8..d635bc67755 100644 --- a/advisories/unreviewed/2024/09/GHSA-jm4p-4c99-gp7x/GHSA-jm4p-4c99-gp7x.json +++ b/advisories/unreviewed/2024/09/GHSA-jm4p-4c99-gp7x/GHSA-jm4p-4c99-gp7x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-jx9q-9xj3-cp3g/GHSA-jx9q-9xj3-cp3g.json b/advisories/unreviewed/2024/09/GHSA-jx9q-9xj3-cp3g/GHSA-jx9q-9xj3-cp3g.json index 13b207c0827..43a7794fef8 100644 --- a/advisories/unreviewed/2024/09/GHSA-jx9q-9xj3-cp3g/GHSA-jx9q-9xj3-cp3g.json +++ b/advisories/unreviewed/2024/09/GHSA-jx9q-9xj3-cp3g/GHSA-jx9q-9xj3-cp3g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-mc42-9p8q-pxff/GHSA-mc42-9p8q-pxff.json b/advisories/unreviewed/2024/09/GHSA-mc42-9p8q-pxff/GHSA-mc42-9p8q-pxff.json index 478b951bb12..0d63310e011 100644 --- a/advisories/unreviewed/2024/09/GHSA-mc42-9p8q-pxff/GHSA-mc42-9p8q-pxff.json +++ b/advisories/unreviewed/2024/09/GHSA-mc42-9p8q-pxff/GHSA-mc42-9p8q-pxff.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-ph9f-2c4w-rghv/GHSA-ph9f-2c4w-rghv.json b/advisories/unreviewed/2024/09/GHSA-ph9f-2c4w-rghv/GHSA-ph9f-2c4w-rghv.json index 80b45b0facc..ee9e1943248 100644 --- a/advisories/unreviewed/2024/09/GHSA-ph9f-2c4w-rghv/GHSA-ph9f-2c4w-rghv.json +++ b/advisories/unreviewed/2024/09/GHSA-ph9f-2c4w-rghv/GHSA-ph9f-2c4w-rghv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-pvq4-gmpq-27p3/GHSA-pvq4-gmpq-27p3.json b/advisories/unreviewed/2024/09/GHSA-pvq4-gmpq-27p3/GHSA-pvq4-gmpq-27p3.json index 114a6fa49e4..143b65773d9 100644 --- a/advisories/unreviewed/2024/09/GHSA-pvq4-gmpq-27p3/GHSA-pvq4-gmpq-27p3.json +++ b/advisories/unreviewed/2024/09/GHSA-pvq4-gmpq-27p3/GHSA-pvq4-gmpq-27p3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-rhpc-qcxc-cfwf/GHSA-rhpc-qcxc-cfwf.json b/advisories/unreviewed/2024/09/GHSA-rhpc-qcxc-cfwf/GHSA-rhpc-qcxc-cfwf.json index 284591a0e1b..850cb958c82 100644 --- a/advisories/unreviewed/2024/09/GHSA-rhpc-qcxc-cfwf/GHSA-rhpc-qcxc-cfwf.json +++ b/advisories/unreviewed/2024/09/GHSA-rhpc-qcxc-cfwf/GHSA-rhpc-qcxc-cfwf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-rpwv-q4ch-7pvm/GHSA-rpwv-q4ch-7pvm.json b/advisories/unreviewed/2024/09/GHSA-rpwv-q4ch-7pvm/GHSA-rpwv-q4ch-7pvm.json index 264fb3199b5..9465aa1fe1a 100644 --- a/advisories/unreviewed/2024/09/GHSA-rpwv-q4ch-7pvm/GHSA-rpwv-q4ch-7pvm.json +++ b/advisories/unreviewed/2024/09/GHSA-rpwv-q4ch-7pvm/GHSA-rpwv-q4ch-7pvm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-rvg9-cwv8-3543/GHSA-rvg9-cwv8-3543.json b/advisories/unreviewed/2024/09/GHSA-rvg9-cwv8-3543/GHSA-rvg9-cwv8-3543.json index 99ad93e44ff..cf00d65ef9f 100644 --- a/advisories/unreviewed/2024/09/GHSA-rvg9-cwv8-3543/GHSA-rvg9-cwv8-3543.json +++ b/advisories/unreviewed/2024/09/GHSA-rvg9-cwv8-3543/GHSA-rvg9-cwv8-3543.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-wxf3-97x6-x82w/GHSA-wxf3-97x6-x82w.json b/advisories/unreviewed/2024/09/GHSA-wxf3-97x6-x82w/GHSA-wxf3-97x6-x82w.json index ee7061b71ed..0be41940522 100644 --- a/advisories/unreviewed/2024/09/GHSA-wxf3-97x6-x82w/GHSA-wxf3-97x6-x82w.json +++ b/advisories/unreviewed/2024/09/GHSA-wxf3-97x6-x82w/GHSA-wxf3-97x6-x82w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-wxh2-rq3c-2j2g/GHSA-wxh2-rq3c-2j2g.json b/advisories/unreviewed/2024/09/GHSA-wxh2-rq3c-2j2g/GHSA-wxh2-rq3c-2j2g.json index ee473c434a6..309ae44d048 100644 --- a/advisories/unreviewed/2024/09/GHSA-wxh2-rq3c-2j2g/GHSA-wxh2-rq3c-2j2g.json +++ b/advisories/unreviewed/2024/09/GHSA-wxh2-rq3c-2j2g/GHSA-wxh2-rq3c-2j2g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/10/GHSA-3768-v944-h92f/GHSA-3768-v944-h92f.json b/advisories/unreviewed/2024/10/GHSA-3768-v944-h92f/GHSA-3768-v944-h92f.json index 51ea27d6f32..57a7e006af7 100644 --- a/advisories/unreviewed/2024/10/GHSA-3768-v944-h92f/GHSA-3768-v944-h92f.json +++ b/advisories/unreviewed/2024/10/GHSA-3768-v944-h92f/GHSA-3768-v944-h92f.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:A/VC:H/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/10/GHSA-72qw-2vp3-gvg9/GHSA-72qw-2vp3-gvg9.json b/advisories/unreviewed/2024/10/GHSA-72qw-2vp3-gvg9/GHSA-72qw-2vp3-gvg9.json index bbd9821270d..9c5b439fcaa 100644 --- a/advisories/unreviewed/2024/10/GHSA-72qw-2vp3-gvg9/GHSA-72qw-2vp3-gvg9.json +++ b/advisories/unreviewed/2024/10/GHSA-72qw-2vp3-gvg9/GHSA-72qw-2vp3-gvg9.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/10/GHSA-8j74-v9cr-x39h/GHSA-8j74-v9cr-x39h.json b/advisories/unreviewed/2024/10/GHSA-8j74-v9cr-x39h/GHSA-8j74-v9cr-x39h.json index a109661d0da..834284e7f6b 100644 --- a/advisories/unreviewed/2024/10/GHSA-8j74-v9cr-x39h/GHSA-8j74-v9cr-x39h.json +++ b/advisories/unreviewed/2024/10/GHSA-8j74-v9cr-x39h/GHSA-8j74-v9cr-x39h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/10/GHSA-f7h9-hrg7-94fg/GHSA-f7h9-hrg7-94fg.json b/advisories/unreviewed/2024/10/GHSA-f7h9-hrg7-94fg/GHSA-f7h9-hrg7-94fg.json index 2cc73a13aad..550dfb0a6f3 100644 --- a/advisories/unreviewed/2024/10/GHSA-f7h9-hrg7-94fg/GHSA-f7h9-hrg7-94fg.json +++ b/advisories/unreviewed/2024/10/GHSA-f7h9-hrg7-94fg/GHSA-f7h9-hrg7-94fg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/10/GHSA-g83h-4727-5rpv/GHSA-g83h-4727-5rpv.json b/advisories/unreviewed/2024/10/GHSA-g83h-4727-5rpv/GHSA-g83h-4727-5rpv.json index d99a62b0a09..947b641722d 100644 --- a/advisories/unreviewed/2024/10/GHSA-g83h-4727-5rpv/GHSA-g83h-4727-5rpv.json +++ b/advisories/unreviewed/2024/10/GHSA-g83h-4727-5rpv/GHSA-g83h-4727-5rpv.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:U/V:C/RE:M/U:Red" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/10/GHSA-w2qx-fgr7-jpvq/GHSA-w2qx-fgr7-jpvq.json b/advisories/unreviewed/2024/10/GHSA-w2qx-fgr7-jpvq/GHSA-w2qx-fgr7-jpvq.json index 562735659b4..9142c911ea5 100644 --- a/advisories/unreviewed/2024/10/GHSA-w2qx-fgr7-jpvq/GHSA-w2qx-fgr7-jpvq.json +++ b/advisories/unreviewed/2024/10/GHSA-w2qx-fgr7-jpvq/GHSA-w2qx-fgr7-jpvq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/10/GHSA-x7fh-7rf3-6w4f/GHSA-x7fh-7rf3-6w4f.json b/advisories/unreviewed/2024/10/GHSA-x7fh-7rf3-6w4f/GHSA-x7fh-7rf3-6w4f.json index 1d766c92788..ab9bfc6f061 100644 --- a/advisories/unreviewed/2024/10/GHSA-x7fh-7rf3-6w4f/GHSA-x7fh-7rf3-6w4f.json +++ b/advisories/unreviewed/2024/10/GHSA-x7fh-7rf3-6w4f/GHSA-x7fh-7rf3-6w4f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/11/GHSA-2237-2j5h-553w/GHSA-2237-2j5h-553w.json b/advisories/unreviewed/2024/11/GHSA-2237-2j5h-553w/GHSA-2237-2j5h-553w.json index 50622fb2f9e..d4f68882a24 100644 --- a/advisories/unreviewed/2024/11/GHSA-2237-2j5h-553w/GHSA-2237-2j5h-553w.json +++ b/advisories/unreviewed/2024/11/GHSA-2237-2j5h-553w/GHSA-2237-2j5h-553w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-265x-3mxm-gj2j/GHSA-265x-3mxm-gj2j.json b/advisories/unreviewed/2024/11/GHSA-265x-3mxm-gj2j/GHSA-265x-3mxm-gj2j.json index a1ebc7debeb..22ec0ec368b 100644 --- a/advisories/unreviewed/2024/11/GHSA-265x-3mxm-gj2j/GHSA-265x-3mxm-gj2j.json +++ b/advisories/unreviewed/2024/11/GHSA-265x-3mxm-gj2j/GHSA-265x-3mxm-gj2j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-2hr2-cc65-w687/GHSA-2hr2-cc65-w687.json b/advisories/unreviewed/2024/11/GHSA-2hr2-cc65-w687/GHSA-2hr2-cc65-w687.json index 08291ce13f0..c24dcb19b6b 100644 --- a/advisories/unreviewed/2024/11/GHSA-2hr2-cc65-w687/GHSA-2hr2-cc65-w687.json +++ b/advisories/unreviewed/2024/11/GHSA-2hr2-cc65-w687/GHSA-2hr2-cc65-w687.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-2wh9-xh8x-vvv4/GHSA-2wh9-xh8x-vvv4.json b/advisories/unreviewed/2024/11/GHSA-2wh9-xh8x-vvv4/GHSA-2wh9-xh8x-vvv4.json index 3c1f0bf55b9..2de1873a176 100644 --- a/advisories/unreviewed/2024/11/GHSA-2wh9-xh8x-vvv4/GHSA-2wh9-xh8x-vvv4.json +++ b/advisories/unreviewed/2024/11/GHSA-2wh9-xh8x-vvv4/GHSA-2wh9-xh8x-vvv4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-33j7-h653-5rrc/GHSA-33j7-h653-5rrc.json b/advisories/unreviewed/2024/11/GHSA-33j7-h653-5rrc/GHSA-33j7-h653-5rrc.json index fe594209617..72afd18db7f 100644 --- a/advisories/unreviewed/2024/11/GHSA-33j7-h653-5rrc/GHSA-33j7-h653-5rrc.json +++ b/advisories/unreviewed/2024/11/GHSA-33j7-h653-5rrc/GHSA-33j7-h653-5rrc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-362g-36hp-r4hp/GHSA-362g-36hp-r4hp.json b/advisories/unreviewed/2024/11/GHSA-362g-36hp-r4hp/GHSA-362g-36hp-r4hp.json index 4b6b1f0b14d..365efe9c519 100644 --- a/advisories/unreviewed/2024/11/GHSA-362g-36hp-r4hp/GHSA-362g-36hp-r4hp.json +++ b/advisories/unreviewed/2024/11/GHSA-362g-36hp-r4hp/GHSA-362g-36hp-r4hp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-39j2-2qp4-6rgc/GHSA-39j2-2qp4-6rgc.json b/advisories/unreviewed/2024/11/GHSA-39j2-2qp4-6rgc/GHSA-39j2-2qp4-6rgc.json index 65639af273b..0ab38229c0f 100644 --- a/advisories/unreviewed/2024/11/GHSA-39j2-2qp4-6rgc/GHSA-39j2-2qp4-6rgc.json +++ b/advisories/unreviewed/2024/11/GHSA-39j2-2qp4-6rgc/GHSA-39j2-2qp4-6rgc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-3jv8-hvr8-2qwh/GHSA-3jv8-hvr8-2qwh.json b/advisories/unreviewed/2024/11/GHSA-3jv8-hvr8-2qwh/GHSA-3jv8-hvr8-2qwh.json index 294a1513c02..33f09d8a970 100644 --- a/advisories/unreviewed/2024/11/GHSA-3jv8-hvr8-2qwh/GHSA-3jv8-hvr8-2qwh.json +++ b/advisories/unreviewed/2024/11/GHSA-3jv8-hvr8-2qwh/GHSA-3jv8-hvr8-2qwh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-3qf8-q2rg-6p4p/GHSA-3qf8-q2rg-6p4p.json b/advisories/unreviewed/2024/11/GHSA-3qf8-q2rg-6p4p/GHSA-3qf8-q2rg-6p4p.json index 981b92999d5..dfdbc45d226 100644 --- a/advisories/unreviewed/2024/11/GHSA-3qf8-q2rg-6p4p/GHSA-3qf8-q2rg-6p4p.json +++ b/advisories/unreviewed/2024/11/GHSA-3qf8-q2rg-6p4p/GHSA-3qf8-q2rg-6p4p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-3rrh-hp3f-9r6p/GHSA-3rrh-hp3f-9r6p.json b/advisories/unreviewed/2024/11/GHSA-3rrh-hp3f-9r6p/GHSA-3rrh-hp3f-9r6p.json index 147c0740a9b..c85f2169e94 100644 --- a/advisories/unreviewed/2024/11/GHSA-3rrh-hp3f-9r6p/GHSA-3rrh-hp3f-9r6p.json +++ b/advisories/unreviewed/2024/11/GHSA-3rrh-hp3f-9r6p/GHSA-3rrh-hp3f-9r6p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-3xmf-m2fg-h94r/GHSA-3xmf-m2fg-h94r.json b/advisories/unreviewed/2024/11/GHSA-3xmf-m2fg-h94r/GHSA-3xmf-m2fg-h94r.json index a4df7d927da..68a5c0961db 100644 --- a/advisories/unreviewed/2024/11/GHSA-3xmf-m2fg-h94r/GHSA-3xmf-m2fg-h94r.json +++ b/advisories/unreviewed/2024/11/GHSA-3xmf-m2fg-h94r/GHSA-3xmf-m2fg-h94r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-4383-m935-j5wh/GHSA-4383-m935-j5wh.json b/advisories/unreviewed/2024/11/GHSA-4383-m935-j5wh/GHSA-4383-m935-j5wh.json index 334633f98e1..b03d6dbf1f1 100644 --- a/advisories/unreviewed/2024/11/GHSA-4383-m935-j5wh/GHSA-4383-m935-j5wh.json +++ b/advisories/unreviewed/2024/11/GHSA-4383-m935-j5wh/GHSA-4383-m935-j5wh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-4789-39gm-mc98/GHSA-4789-39gm-mc98.json b/advisories/unreviewed/2024/11/GHSA-4789-39gm-mc98/GHSA-4789-39gm-mc98.json index 5cf66ba56c8..ebb41201a9d 100644 --- a/advisories/unreviewed/2024/11/GHSA-4789-39gm-mc98/GHSA-4789-39gm-mc98.json +++ b/advisories/unreviewed/2024/11/GHSA-4789-39gm-mc98/GHSA-4789-39gm-mc98.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-497w-6wcv-pw45/GHSA-497w-6wcv-pw45.json b/advisories/unreviewed/2024/11/GHSA-497w-6wcv-pw45/GHSA-497w-6wcv-pw45.json index 24019dea82c..0de56983b1e 100644 --- a/advisories/unreviewed/2024/11/GHSA-497w-6wcv-pw45/GHSA-497w-6wcv-pw45.json +++ b/advisories/unreviewed/2024/11/GHSA-497w-6wcv-pw45/GHSA-497w-6wcv-pw45.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-4c63-9j96-375q/GHSA-4c63-9j96-375q.json b/advisories/unreviewed/2024/11/GHSA-4c63-9j96-375q/GHSA-4c63-9j96-375q.json index 3646cc40149..7a657b1601b 100644 --- a/advisories/unreviewed/2024/11/GHSA-4c63-9j96-375q/GHSA-4c63-9j96-375q.json +++ b/advisories/unreviewed/2024/11/GHSA-4c63-9j96-375q/GHSA-4c63-9j96-375q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-4fc6-x85v-hj7r/GHSA-4fc6-x85v-hj7r.json b/advisories/unreviewed/2024/11/GHSA-4fc6-x85v-hj7r/GHSA-4fc6-x85v-hj7r.json index c5b3e365cf3..a2b8512a706 100644 --- a/advisories/unreviewed/2024/11/GHSA-4fc6-x85v-hj7r/GHSA-4fc6-x85v-hj7r.json +++ b/advisories/unreviewed/2024/11/GHSA-4fc6-x85v-hj7r/GHSA-4fc6-x85v-hj7r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-4fp3-wrmc-3g2x/GHSA-4fp3-wrmc-3g2x.json b/advisories/unreviewed/2024/11/GHSA-4fp3-wrmc-3g2x/GHSA-4fp3-wrmc-3g2x.json index 48fea641a8c..06b485dc065 100644 --- a/advisories/unreviewed/2024/11/GHSA-4fp3-wrmc-3g2x/GHSA-4fp3-wrmc-3g2x.json +++ b/advisories/unreviewed/2024/11/GHSA-4fp3-wrmc-3g2x/GHSA-4fp3-wrmc-3g2x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-4g32-4h7x-954w/GHSA-4g32-4h7x-954w.json b/advisories/unreviewed/2024/11/GHSA-4g32-4h7x-954w/GHSA-4g32-4h7x-954w.json index 490c40b2967..266ba9f65e2 100644 --- a/advisories/unreviewed/2024/11/GHSA-4g32-4h7x-954w/GHSA-4g32-4h7x-954w.json +++ b/advisories/unreviewed/2024/11/GHSA-4g32-4h7x-954w/GHSA-4g32-4h7x-954w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-4h52-w575-4cjq/GHSA-4h52-w575-4cjq.json b/advisories/unreviewed/2024/11/GHSA-4h52-w575-4cjq/GHSA-4h52-w575-4cjq.json index cbdda031b43..26b8699cb30 100644 --- a/advisories/unreviewed/2024/11/GHSA-4h52-w575-4cjq/GHSA-4h52-w575-4cjq.json +++ b/advisories/unreviewed/2024/11/GHSA-4h52-w575-4cjq/GHSA-4h52-w575-4cjq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-4hrq-p7j8-6hjp/GHSA-4hrq-p7j8-6hjp.json b/advisories/unreviewed/2024/11/GHSA-4hrq-p7j8-6hjp/GHSA-4hrq-p7j8-6hjp.json index b811d825252..34219a57f61 100644 --- a/advisories/unreviewed/2024/11/GHSA-4hrq-p7j8-6hjp/GHSA-4hrq-p7j8-6hjp.json +++ b/advisories/unreviewed/2024/11/GHSA-4hrq-p7j8-6hjp/GHSA-4hrq-p7j8-6hjp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-4rr7-4fw4-qcwc/GHSA-4rr7-4fw4-qcwc.json b/advisories/unreviewed/2024/11/GHSA-4rr7-4fw4-qcwc/GHSA-4rr7-4fw4-qcwc.json index 937bd286f62..3386685ad6a 100644 --- a/advisories/unreviewed/2024/11/GHSA-4rr7-4fw4-qcwc/GHSA-4rr7-4fw4-qcwc.json +++ b/advisories/unreviewed/2024/11/GHSA-4rr7-4fw4-qcwc/GHSA-4rr7-4fw4-qcwc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-5fjh-75hm-33xj/GHSA-5fjh-75hm-33xj.json b/advisories/unreviewed/2024/11/GHSA-5fjh-75hm-33xj/GHSA-5fjh-75hm-33xj.json index 75c79e66841..ec11a9ce2fa 100644 --- a/advisories/unreviewed/2024/11/GHSA-5fjh-75hm-33xj/GHSA-5fjh-75hm-33xj.json +++ b/advisories/unreviewed/2024/11/GHSA-5fjh-75hm-33xj/GHSA-5fjh-75hm-33xj.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-5g3c-2wf5-mp5m/GHSA-5g3c-2wf5-mp5m.json b/advisories/unreviewed/2024/11/GHSA-5g3c-2wf5-mp5m/GHSA-5g3c-2wf5-mp5m.json index f6e868d78f0..806255df8fc 100644 --- a/advisories/unreviewed/2024/11/GHSA-5g3c-2wf5-mp5m/GHSA-5g3c-2wf5-mp5m.json +++ b/advisories/unreviewed/2024/11/GHSA-5g3c-2wf5-mp5m/GHSA-5g3c-2wf5-mp5m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-5hjf-mp3w-5847/GHSA-5hjf-mp3w-5847.json b/advisories/unreviewed/2024/11/GHSA-5hjf-mp3w-5847/GHSA-5hjf-mp3w-5847.json index 899be313d4c..f78d45bfcfa 100644 --- a/advisories/unreviewed/2024/11/GHSA-5hjf-mp3w-5847/GHSA-5hjf-mp3w-5847.json +++ b/advisories/unreviewed/2024/11/GHSA-5hjf-mp3w-5847/GHSA-5hjf-mp3w-5847.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-5j52-m6jh-ch5g/GHSA-5j52-m6jh-ch5g.json b/advisories/unreviewed/2024/11/GHSA-5j52-m6jh-ch5g/GHSA-5j52-m6jh-ch5g.json index b53cf85e30e..d7a6af4627e 100644 --- a/advisories/unreviewed/2024/11/GHSA-5j52-m6jh-ch5g/GHSA-5j52-m6jh-ch5g.json +++ b/advisories/unreviewed/2024/11/GHSA-5j52-m6jh-ch5g/GHSA-5j52-m6jh-ch5g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-5p29-g497-44v2/GHSA-5p29-g497-44v2.json b/advisories/unreviewed/2024/11/GHSA-5p29-g497-44v2/GHSA-5p29-g497-44v2.json index 6c6962398df..682a73170dc 100644 --- a/advisories/unreviewed/2024/11/GHSA-5p29-g497-44v2/GHSA-5p29-g497-44v2.json +++ b/advisories/unreviewed/2024/11/GHSA-5p29-g497-44v2/GHSA-5p29-g497-44v2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-5pj6-3hcq-wv78/GHSA-5pj6-3hcq-wv78.json b/advisories/unreviewed/2024/11/GHSA-5pj6-3hcq-wv78/GHSA-5pj6-3hcq-wv78.json index 40415861649..8aaeb175e96 100644 --- a/advisories/unreviewed/2024/11/GHSA-5pj6-3hcq-wv78/GHSA-5pj6-3hcq-wv78.json +++ b/advisories/unreviewed/2024/11/GHSA-5pj6-3hcq-wv78/GHSA-5pj6-3hcq-wv78.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-62mp-w633-xcfv/GHSA-62mp-w633-xcfv.json b/advisories/unreviewed/2024/11/GHSA-62mp-w633-xcfv/GHSA-62mp-w633-xcfv.json index e0d4562e406..d319bf67ead 100644 --- a/advisories/unreviewed/2024/11/GHSA-62mp-w633-xcfv/GHSA-62mp-w633-xcfv.json +++ b/advisories/unreviewed/2024/11/GHSA-62mp-w633-xcfv/GHSA-62mp-w633-xcfv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-67mq-mrh8-wj53/GHSA-67mq-mrh8-wj53.json b/advisories/unreviewed/2024/11/GHSA-67mq-mrh8-wj53/GHSA-67mq-mrh8-wj53.json index e7a8e825eb4..3273e75732c 100644 --- a/advisories/unreviewed/2024/11/GHSA-67mq-mrh8-wj53/GHSA-67mq-mrh8-wj53.json +++ b/advisories/unreviewed/2024/11/GHSA-67mq-mrh8-wj53/GHSA-67mq-mrh8-wj53.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-685h-j3h8-frc6/GHSA-685h-j3h8-frc6.json b/advisories/unreviewed/2024/11/GHSA-685h-j3h8-frc6/GHSA-685h-j3h8-frc6.json index 51c46a86d15..7e33ea8b454 100644 --- a/advisories/unreviewed/2024/11/GHSA-685h-j3h8-frc6/GHSA-685h-j3h8-frc6.json +++ b/advisories/unreviewed/2024/11/GHSA-685h-j3h8-frc6/GHSA-685h-j3h8-frc6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-6fj3-23hj-67pw/GHSA-6fj3-23hj-67pw.json b/advisories/unreviewed/2024/11/GHSA-6fj3-23hj-67pw/GHSA-6fj3-23hj-67pw.json index dc156d02716..30e99eec5bd 100644 --- a/advisories/unreviewed/2024/11/GHSA-6fj3-23hj-67pw/GHSA-6fj3-23hj-67pw.json +++ b/advisories/unreviewed/2024/11/GHSA-6fj3-23hj-67pw/GHSA-6fj3-23hj-67pw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-6h8g-jqvh-r5cv/GHSA-6h8g-jqvh-r5cv.json b/advisories/unreviewed/2024/11/GHSA-6h8g-jqvh-r5cv/GHSA-6h8g-jqvh-r5cv.json index 289c1abb325..a990767dde8 100644 --- a/advisories/unreviewed/2024/11/GHSA-6h8g-jqvh-r5cv/GHSA-6h8g-jqvh-r5cv.json +++ b/advisories/unreviewed/2024/11/GHSA-6h8g-jqvh-r5cv/GHSA-6h8g-jqvh-r5cv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-6q9j-hhwq-wv7q/GHSA-6q9j-hhwq-wv7q.json b/advisories/unreviewed/2024/11/GHSA-6q9j-hhwq-wv7q/GHSA-6q9j-hhwq-wv7q.json index 5a3e48a9238..01780fbc033 100644 --- a/advisories/unreviewed/2024/11/GHSA-6q9j-hhwq-wv7q/GHSA-6q9j-hhwq-wv7q.json +++ b/advisories/unreviewed/2024/11/GHSA-6q9j-hhwq-wv7q/GHSA-6q9j-hhwq-wv7q.json @@ -7,12 +7,8 @@ "CVE-2024-24426" ], "details": "Reachable assertions in the NGAP_FIND_PROTOCOLIE_BY_ID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service (DoS) via a crafted NGAP packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/11/GHSA-6v73-jj37-xggm/GHSA-6v73-jj37-xggm.json b/advisories/unreviewed/2024/11/GHSA-6v73-jj37-xggm/GHSA-6v73-jj37-xggm.json index aa1e32f4588..1eca5bd81ca 100644 --- a/advisories/unreviewed/2024/11/GHSA-6v73-jj37-xggm/GHSA-6v73-jj37-xggm.json +++ b/advisories/unreviewed/2024/11/GHSA-6v73-jj37-xggm/GHSA-6v73-jj37-xggm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-6w87-fwmq-3h7f/GHSA-6w87-fwmq-3h7f.json b/advisories/unreviewed/2024/11/GHSA-6w87-fwmq-3h7f/GHSA-6w87-fwmq-3h7f.json index 0927f8c628a..050904269fd 100644 --- a/advisories/unreviewed/2024/11/GHSA-6w87-fwmq-3h7f/GHSA-6w87-fwmq-3h7f.json +++ b/advisories/unreviewed/2024/11/GHSA-6w87-fwmq-3h7f/GHSA-6w87-fwmq-3h7f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-72v3-rgjm-mj6f/GHSA-72v3-rgjm-mj6f.json b/advisories/unreviewed/2024/11/GHSA-72v3-rgjm-mj6f/GHSA-72v3-rgjm-mj6f.json index 3ef130fb900..38e95c83bd3 100644 --- a/advisories/unreviewed/2024/11/GHSA-72v3-rgjm-mj6f/GHSA-72v3-rgjm-mj6f.json +++ b/advisories/unreviewed/2024/11/GHSA-72v3-rgjm-mj6f/GHSA-72v3-rgjm-mj6f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-759w-h925-rg2v/GHSA-759w-h925-rg2v.json b/advisories/unreviewed/2024/11/GHSA-759w-h925-rg2v/GHSA-759w-h925-rg2v.json index b874dcabb36..4ced7c42e06 100644 --- a/advisories/unreviewed/2024/11/GHSA-759w-h925-rg2v/GHSA-759w-h925-rg2v.json +++ b/advisories/unreviewed/2024/11/GHSA-759w-h925-rg2v/GHSA-759w-h925-rg2v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-75r8-6x58-82p6/GHSA-75r8-6x58-82p6.json b/advisories/unreviewed/2024/11/GHSA-75r8-6x58-82p6/GHSA-75r8-6x58-82p6.json index 83af34d6700..3fc2c84f119 100644 --- a/advisories/unreviewed/2024/11/GHSA-75r8-6x58-82p6/GHSA-75r8-6x58-82p6.json +++ b/advisories/unreviewed/2024/11/GHSA-75r8-6x58-82p6/GHSA-75r8-6x58-82p6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-7c75-4mxr-f248/GHSA-7c75-4mxr-f248.json b/advisories/unreviewed/2024/11/GHSA-7c75-4mxr-f248/GHSA-7c75-4mxr-f248.json index 47110adccb3..026401d8daf 100644 --- a/advisories/unreviewed/2024/11/GHSA-7c75-4mxr-f248/GHSA-7c75-4mxr-f248.json +++ b/advisories/unreviewed/2024/11/GHSA-7c75-4mxr-f248/GHSA-7c75-4mxr-f248.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-7hx2-pgg7-f6rg/GHSA-7hx2-pgg7-f6rg.json b/advisories/unreviewed/2024/11/GHSA-7hx2-pgg7-f6rg/GHSA-7hx2-pgg7-f6rg.json index 0fe4518c5ca..c4223381cc8 100644 --- a/advisories/unreviewed/2024/11/GHSA-7hx2-pgg7-f6rg/GHSA-7hx2-pgg7-f6rg.json +++ b/advisories/unreviewed/2024/11/GHSA-7hx2-pgg7-f6rg/GHSA-7hx2-pgg7-f6rg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-7pj9-85vv-hh5r/GHSA-7pj9-85vv-hh5r.json b/advisories/unreviewed/2024/11/GHSA-7pj9-85vv-hh5r/GHSA-7pj9-85vv-hh5r.json index 27ab3c5106e..0689238efc1 100644 --- a/advisories/unreviewed/2024/11/GHSA-7pj9-85vv-hh5r/GHSA-7pj9-85vv-hh5r.json +++ b/advisories/unreviewed/2024/11/GHSA-7pj9-85vv-hh5r/GHSA-7pj9-85vv-hh5r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-7q63-79xq-2jj4/GHSA-7q63-79xq-2jj4.json b/advisories/unreviewed/2024/11/GHSA-7q63-79xq-2jj4/GHSA-7q63-79xq-2jj4.json index f204e9a5eae..86959adae6c 100644 --- a/advisories/unreviewed/2024/11/GHSA-7q63-79xq-2jj4/GHSA-7q63-79xq-2jj4.json +++ b/advisories/unreviewed/2024/11/GHSA-7q63-79xq-2jj4/GHSA-7q63-79xq-2jj4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-825p-34rq-g4h6/GHSA-825p-34rq-g4h6.json b/advisories/unreviewed/2024/11/GHSA-825p-34rq-g4h6/GHSA-825p-34rq-g4h6.json index 9b61251e61c..9050b60cf68 100644 --- a/advisories/unreviewed/2024/11/GHSA-825p-34rq-g4h6/GHSA-825p-34rq-g4h6.json +++ b/advisories/unreviewed/2024/11/GHSA-825p-34rq-g4h6/GHSA-825p-34rq-g4h6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-8386-783g-q974/GHSA-8386-783g-q974.json b/advisories/unreviewed/2024/11/GHSA-8386-783g-q974/GHSA-8386-783g-q974.json index 9fe7ea3031d..42e6d32920e 100644 --- a/advisories/unreviewed/2024/11/GHSA-8386-783g-q974/GHSA-8386-783g-q974.json +++ b/advisories/unreviewed/2024/11/GHSA-8386-783g-q974/GHSA-8386-783g-q974.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-87wv-cch6-jjh9/GHSA-87wv-cch6-jjh9.json b/advisories/unreviewed/2024/11/GHSA-87wv-cch6-jjh9/GHSA-87wv-cch6-jjh9.json index bf04425eda7..834c16a449c 100644 --- a/advisories/unreviewed/2024/11/GHSA-87wv-cch6-jjh9/GHSA-87wv-cch6-jjh9.json +++ b/advisories/unreviewed/2024/11/GHSA-87wv-cch6-jjh9/GHSA-87wv-cch6-jjh9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-88h4-j5jq-jm3p/GHSA-88h4-j5jq-jm3p.json b/advisories/unreviewed/2024/11/GHSA-88h4-j5jq-jm3p/GHSA-88h4-j5jq-jm3p.json index c2914cb8210..05bd0db3f5a 100644 --- a/advisories/unreviewed/2024/11/GHSA-88h4-j5jq-jm3p/GHSA-88h4-j5jq-jm3p.json +++ b/advisories/unreviewed/2024/11/GHSA-88h4-j5jq-jm3p/GHSA-88h4-j5jq-jm3p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-8p2m-96j6-h5p5/GHSA-8p2m-96j6-h5p5.json b/advisories/unreviewed/2024/11/GHSA-8p2m-96j6-h5p5/GHSA-8p2m-96j6-h5p5.json index 01c20d04c61..31cd6e43b9d 100644 --- a/advisories/unreviewed/2024/11/GHSA-8p2m-96j6-h5p5/GHSA-8p2m-96j6-h5p5.json +++ b/advisories/unreviewed/2024/11/GHSA-8p2m-96j6-h5p5/GHSA-8p2m-96j6-h5p5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-8vv5-qvx6-mqw7/GHSA-8vv5-qvx6-mqw7.json b/advisories/unreviewed/2024/11/GHSA-8vv5-qvx6-mqw7/GHSA-8vv5-qvx6-mqw7.json index 132214c8546..d3e38680396 100644 --- a/advisories/unreviewed/2024/11/GHSA-8vv5-qvx6-mqw7/GHSA-8vv5-qvx6-mqw7.json +++ b/advisories/unreviewed/2024/11/GHSA-8vv5-qvx6-mqw7/GHSA-8vv5-qvx6-mqw7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-922x-h9px-jp85/GHSA-922x-h9px-jp85.json b/advisories/unreviewed/2024/11/GHSA-922x-h9px-jp85/GHSA-922x-h9px-jp85.json index 76c29cbc504..ddbf787343b 100644 --- a/advisories/unreviewed/2024/11/GHSA-922x-h9px-jp85/GHSA-922x-h9px-jp85.json +++ b/advisories/unreviewed/2024/11/GHSA-922x-h9px-jp85/GHSA-922x-h9px-jp85.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-92gj-2wf7-h87v/GHSA-92gj-2wf7-h87v.json b/advisories/unreviewed/2024/11/GHSA-92gj-2wf7-h87v/GHSA-92gj-2wf7-h87v.json index d4a7aeec161..8dde2f110e6 100644 --- a/advisories/unreviewed/2024/11/GHSA-92gj-2wf7-h87v/GHSA-92gj-2wf7-h87v.json +++ b/advisories/unreviewed/2024/11/GHSA-92gj-2wf7-h87v/GHSA-92gj-2wf7-h87v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-92xp-27w2-87mx/GHSA-92xp-27w2-87mx.json b/advisories/unreviewed/2024/11/GHSA-92xp-27w2-87mx/GHSA-92xp-27w2-87mx.json index 372b1c6ee7e..6404a65bc8d 100644 --- a/advisories/unreviewed/2024/11/GHSA-92xp-27w2-87mx/GHSA-92xp-27w2-87mx.json +++ b/advisories/unreviewed/2024/11/GHSA-92xp-27w2-87mx/GHSA-92xp-27w2-87mx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-93r2-p5rq-7xr3/GHSA-93r2-p5rq-7xr3.json b/advisories/unreviewed/2024/11/GHSA-93r2-p5rq-7xr3/GHSA-93r2-p5rq-7xr3.json index fa95f0442b4..2bd360b9437 100644 --- a/advisories/unreviewed/2024/11/GHSA-93r2-p5rq-7xr3/GHSA-93r2-p5rq-7xr3.json +++ b/advisories/unreviewed/2024/11/GHSA-93r2-p5rq-7xr3/GHSA-93r2-p5rq-7xr3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/11/GHSA-946r-gmq4-6h84/GHSA-946r-gmq4-6h84.json b/advisories/unreviewed/2024/11/GHSA-946r-gmq4-6h84/GHSA-946r-gmq4-6h84.json index 17929f130c3..74e446ee3da 100644 --- a/advisories/unreviewed/2024/11/GHSA-946r-gmq4-6h84/GHSA-946r-gmq4-6h84.json +++ b/advisories/unreviewed/2024/11/GHSA-946r-gmq4-6h84/GHSA-946r-gmq4-6h84.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-95xp-3pj7-m5fh/GHSA-95xp-3pj7-m5fh.json b/advisories/unreviewed/2024/11/GHSA-95xp-3pj7-m5fh/GHSA-95xp-3pj7-m5fh.json index 6054c8dab00..cd7ea75c3c6 100644 --- a/advisories/unreviewed/2024/11/GHSA-95xp-3pj7-m5fh/GHSA-95xp-3pj7-m5fh.json +++ b/advisories/unreviewed/2024/11/GHSA-95xp-3pj7-m5fh/GHSA-95xp-3pj7-m5fh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-99v6-vxrf-4xxv/GHSA-99v6-vxrf-4xxv.json b/advisories/unreviewed/2024/11/GHSA-99v6-vxrf-4xxv/GHSA-99v6-vxrf-4xxv.json index f09656d491b..4bb82311edc 100644 --- a/advisories/unreviewed/2024/11/GHSA-99v6-vxrf-4xxv/GHSA-99v6-vxrf-4xxv.json +++ b/advisories/unreviewed/2024/11/GHSA-99v6-vxrf-4xxv/GHSA-99v6-vxrf-4xxv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-9c7g-8m6v-j7h8/GHSA-9c7g-8m6v-j7h8.json b/advisories/unreviewed/2024/11/GHSA-9c7g-8m6v-j7h8/GHSA-9c7g-8m6v-j7h8.json index 4aafa7ac478..b08684c76f7 100644 --- a/advisories/unreviewed/2024/11/GHSA-9c7g-8m6v-j7h8/GHSA-9c7g-8m6v-j7h8.json +++ b/advisories/unreviewed/2024/11/GHSA-9c7g-8m6v-j7h8/GHSA-9c7g-8m6v-j7h8.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-9g24-qqwh-54ww/GHSA-9g24-qqwh-54ww.json b/advisories/unreviewed/2024/11/GHSA-9g24-qqwh-54ww/GHSA-9g24-qqwh-54ww.json index 17f4d21b413..a6ca9231cac 100644 --- a/advisories/unreviewed/2024/11/GHSA-9g24-qqwh-54ww/GHSA-9g24-qqwh-54ww.json +++ b/advisories/unreviewed/2024/11/GHSA-9g24-qqwh-54ww/GHSA-9g24-qqwh-54ww.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-9ghq-5974-8295/GHSA-9ghq-5974-8295.json b/advisories/unreviewed/2024/11/GHSA-9ghq-5974-8295/GHSA-9ghq-5974-8295.json index 25ced0ef36e..2f9939e34d6 100644 --- a/advisories/unreviewed/2024/11/GHSA-9ghq-5974-8295/GHSA-9ghq-5974-8295.json +++ b/advisories/unreviewed/2024/11/GHSA-9ghq-5974-8295/GHSA-9ghq-5974-8295.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-9hgf-jcfq-gvxc/GHSA-9hgf-jcfq-gvxc.json b/advisories/unreviewed/2024/11/GHSA-9hgf-jcfq-gvxc/GHSA-9hgf-jcfq-gvxc.json index 7135774d034..fd322ace36d 100644 --- a/advisories/unreviewed/2024/11/GHSA-9hgf-jcfq-gvxc/GHSA-9hgf-jcfq-gvxc.json +++ b/advisories/unreviewed/2024/11/GHSA-9hgf-jcfq-gvxc/GHSA-9hgf-jcfq-gvxc.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-9jxw-jh8c-h7vm/GHSA-9jxw-jh8c-h7vm.json b/advisories/unreviewed/2024/11/GHSA-9jxw-jh8c-h7vm/GHSA-9jxw-jh8c-h7vm.json index 72207c153d2..f0caf5c83bf 100644 --- a/advisories/unreviewed/2024/11/GHSA-9jxw-jh8c-h7vm/GHSA-9jxw-jh8c-h7vm.json +++ b/advisories/unreviewed/2024/11/GHSA-9jxw-jh8c-h7vm/GHSA-9jxw-jh8c-h7vm.json @@ -7,12 +7,8 @@ "CVE-2024-24425" ], "details": "Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amf_as_establish_req function at /tasks/amf/amf_as.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/11/GHSA-9qmw-4j8r-7jvx/GHSA-9qmw-4j8r-7jvx.json b/advisories/unreviewed/2024/11/GHSA-9qmw-4j8r-7jvx/GHSA-9qmw-4j8r-7jvx.json index e978f3bfc52..13c709833a4 100644 --- a/advisories/unreviewed/2024/11/GHSA-9qmw-4j8r-7jvx/GHSA-9qmw-4j8r-7jvx.json +++ b/advisories/unreviewed/2024/11/GHSA-9qmw-4j8r-7jvx/GHSA-9qmw-4j8r-7jvx.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-9rr6-vq6q-pwwr/GHSA-9rr6-vq6q-pwwr.json b/advisories/unreviewed/2024/11/GHSA-9rr6-vq6q-pwwr/GHSA-9rr6-vq6q-pwwr.json index deb191194f7..bac91e63369 100644 --- a/advisories/unreviewed/2024/11/GHSA-9rr6-vq6q-pwwr/GHSA-9rr6-vq6q-pwwr.json +++ b/advisories/unreviewed/2024/11/GHSA-9rr6-vq6q-pwwr/GHSA-9rr6-vq6q-pwwr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-9vx3-4968-cg3x/GHSA-9vx3-4968-cg3x.json b/advisories/unreviewed/2024/11/GHSA-9vx3-4968-cg3x/GHSA-9vx3-4968-cg3x.json index 7e917c0eaa0..18b87530373 100644 --- a/advisories/unreviewed/2024/11/GHSA-9vx3-4968-cg3x/GHSA-9vx3-4968-cg3x.json +++ b/advisories/unreviewed/2024/11/GHSA-9vx3-4968-cg3x/GHSA-9vx3-4968-cg3x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-c363-2f5p-c4cv/GHSA-c363-2f5p-c4cv.json b/advisories/unreviewed/2024/11/GHSA-c363-2f5p-c4cv/GHSA-c363-2f5p-c4cv.json index 8f0d27d5cfc..f098c011f87 100644 --- a/advisories/unreviewed/2024/11/GHSA-c363-2f5p-c4cv/GHSA-c363-2f5p-c4cv.json +++ b/advisories/unreviewed/2024/11/GHSA-c363-2f5p-c4cv/GHSA-c363-2f5p-c4cv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-c6cm-r234-phmq/GHSA-c6cm-r234-phmq.json b/advisories/unreviewed/2024/11/GHSA-c6cm-r234-phmq/GHSA-c6cm-r234-phmq.json index c53de34f9d9..a2330fa50a7 100644 --- a/advisories/unreviewed/2024/11/GHSA-c6cm-r234-phmq/GHSA-c6cm-r234-phmq.json +++ b/advisories/unreviewed/2024/11/GHSA-c6cm-r234-phmq/GHSA-c6cm-r234-phmq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-c8m9-v643-xmww/GHSA-c8m9-v643-xmww.json b/advisories/unreviewed/2024/11/GHSA-c8m9-v643-xmww/GHSA-c8m9-v643-xmww.json index 745c1da134b..33c8c9d33ba 100644 --- a/advisories/unreviewed/2024/11/GHSA-c8m9-v643-xmww/GHSA-c8m9-v643-xmww.json +++ b/advisories/unreviewed/2024/11/GHSA-c8m9-v643-xmww/GHSA-c8m9-v643-xmww.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-cp82-336p-fjw5/GHSA-cp82-336p-fjw5.json b/advisories/unreviewed/2024/11/GHSA-cp82-336p-fjw5/GHSA-cp82-336p-fjw5.json index f3a911aeca8..f201357b127 100644 --- a/advisories/unreviewed/2024/11/GHSA-cp82-336p-fjw5/GHSA-cp82-336p-fjw5.json +++ b/advisories/unreviewed/2024/11/GHSA-cp82-336p-fjw5/GHSA-cp82-336p-fjw5.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-crhm-9fh5-299j/GHSA-crhm-9fh5-299j.json b/advisories/unreviewed/2024/11/GHSA-crhm-9fh5-299j/GHSA-crhm-9fh5-299j.json index 9bf7df10861..347887954ac 100644 --- a/advisories/unreviewed/2024/11/GHSA-crhm-9fh5-299j/GHSA-crhm-9fh5-299j.json +++ b/advisories/unreviewed/2024/11/GHSA-crhm-9fh5-299j/GHSA-crhm-9fh5-299j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-cvm8-v9rf-89jw/GHSA-cvm8-v9rf-89jw.json b/advisories/unreviewed/2024/11/GHSA-cvm8-v9rf-89jw/GHSA-cvm8-v9rf-89jw.json index 9cbcc2aa549..68037f7f280 100644 --- a/advisories/unreviewed/2024/11/GHSA-cvm8-v9rf-89jw/GHSA-cvm8-v9rf-89jw.json +++ b/advisories/unreviewed/2024/11/GHSA-cvm8-v9rf-89jw/GHSA-cvm8-v9rf-89jw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-cwwg-j94x-j72r/GHSA-cwwg-j94x-j72r.json b/advisories/unreviewed/2024/11/GHSA-cwwg-j94x-j72r/GHSA-cwwg-j94x-j72r.json index d292eea9549..96eb17322fa 100644 --- a/advisories/unreviewed/2024/11/GHSA-cwwg-j94x-j72r/GHSA-cwwg-j94x-j72r.json +++ b/advisories/unreviewed/2024/11/GHSA-cwwg-j94x-j72r/GHSA-cwwg-j94x-j72r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-cx22-p4ff-962q/GHSA-cx22-p4ff-962q.json b/advisories/unreviewed/2024/11/GHSA-cx22-p4ff-962q/GHSA-cx22-p4ff-962q.json index 64523d7bfe0..bdced75b632 100644 --- a/advisories/unreviewed/2024/11/GHSA-cx22-p4ff-962q/GHSA-cx22-p4ff-962q.json +++ b/advisories/unreviewed/2024/11/GHSA-cx22-p4ff-962q/GHSA-cx22-p4ff-962q.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-f2mp-jf9g-wxgx/GHSA-f2mp-jf9g-wxgx.json b/advisories/unreviewed/2024/11/GHSA-f2mp-jf9g-wxgx/GHSA-f2mp-jf9g-wxgx.json index 479133f919f..81725304dcd 100644 --- a/advisories/unreviewed/2024/11/GHSA-f2mp-jf9g-wxgx/GHSA-f2mp-jf9g-wxgx.json +++ b/advisories/unreviewed/2024/11/GHSA-f2mp-jf9g-wxgx/GHSA-f2mp-jf9g-wxgx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-f3mv-cjr3-hr9j/GHSA-f3mv-cjr3-hr9j.json b/advisories/unreviewed/2024/11/GHSA-f3mv-cjr3-hr9j/GHSA-f3mv-cjr3-hr9j.json index a5682ea06da..ad6571d5aed 100644 --- a/advisories/unreviewed/2024/11/GHSA-f3mv-cjr3-hr9j/GHSA-f3mv-cjr3-hr9j.json +++ b/advisories/unreviewed/2024/11/GHSA-f3mv-cjr3-hr9j/GHSA-f3mv-cjr3-hr9j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/11/GHSA-f575-f7mf-jmpq/GHSA-f575-f7mf-jmpq.json b/advisories/unreviewed/2024/11/GHSA-f575-f7mf-jmpq/GHSA-f575-f7mf-jmpq.json index 65081d058e0..20ad7c6bfa8 100644 --- a/advisories/unreviewed/2024/11/GHSA-f575-f7mf-jmpq/GHSA-f575-f7mf-jmpq.json +++ b/advisories/unreviewed/2024/11/GHSA-f575-f7mf-jmpq/GHSA-f575-f7mf-jmpq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-fh6c-pmq3-8xp2/GHSA-fh6c-pmq3-8xp2.json b/advisories/unreviewed/2024/11/GHSA-fh6c-pmq3-8xp2/GHSA-fh6c-pmq3-8xp2.json index 8af88213bbd..5da9c587351 100644 --- a/advisories/unreviewed/2024/11/GHSA-fh6c-pmq3-8xp2/GHSA-fh6c-pmq3-8xp2.json +++ b/advisories/unreviewed/2024/11/GHSA-fh6c-pmq3-8xp2/GHSA-fh6c-pmq3-8xp2.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-fvq9-6j72-7gcv/GHSA-fvq9-6j72-7gcv.json b/advisories/unreviewed/2024/11/GHSA-fvq9-6j72-7gcv/GHSA-fvq9-6j72-7gcv.json index 92dc26091d2..40e3539fcc8 100644 --- a/advisories/unreviewed/2024/11/GHSA-fvq9-6j72-7gcv/GHSA-fvq9-6j72-7gcv.json +++ b/advisories/unreviewed/2024/11/GHSA-fvq9-6j72-7gcv/GHSA-fvq9-6j72-7gcv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-fw7g-x8q3-h9pr/GHSA-fw7g-x8q3-h9pr.json b/advisories/unreviewed/2024/11/GHSA-fw7g-x8q3-h9pr/GHSA-fw7g-x8q3-h9pr.json index 1e9c97c4ef3..db993a18082 100644 --- a/advisories/unreviewed/2024/11/GHSA-fw7g-x8q3-h9pr/GHSA-fw7g-x8q3-h9pr.json +++ b/advisories/unreviewed/2024/11/GHSA-fw7g-x8q3-h9pr/GHSA-fw7g-x8q3-h9pr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-g3v8-p89r-mf62/GHSA-g3v8-p89r-mf62.json b/advisories/unreviewed/2024/11/GHSA-g3v8-p89r-mf62/GHSA-g3v8-p89r-mf62.json index 5c9d1286744..3ff3a43aa63 100644 --- a/advisories/unreviewed/2024/11/GHSA-g3v8-p89r-mf62/GHSA-g3v8-p89r-mf62.json +++ b/advisories/unreviewed/2024/11/GHSA-g3v8-p89r-mf62/GHSA-g3v8-p89r-mf62.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-g7xw-3x5x-249w/GHSA-g7xw-3x5x-249w.json b/advisories/unreviewed/2024/11/GHSA-g7xw-3x5x-249w/GHSA-g7xw-3x5x-249w.json index f182bc68183..a802826d9e2 100644 --- a/advisories/unreviewed/2024/11/GHSA-g7xw-3x5x-249w/GHSA-g7xw-3x5x-249w.json +++ b/advisories/unreviewed/2024/11/GHSA-g7xw-3x5x-249w/GHSA-g7xw-3x5x-249w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-g9gm-jgpx-56qm/GHSA-g9gm-jgpx-56qm.json b/advisories/unreviewed/2024/11/GHSA-g9gm-jgpx-56qm/GHSA-g9gm-jgpx-56qm.json index e0e2686c063..65cd44aed56 100644 --- a/advisories/unreviewed/2024/11/GHSA-g9gm-jgpx-56qm/GHSA-g9gm-jgpx-56qm.json +++ b/advisories/unreviewed/2024/11/GHSA-g9gm-jgpx-56qm/GHSA-g9gm-jgpx-56qm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-gg8c-67xr-mxhv/GHSA-gg8c-67xr-mxhv.json b/advisories/unreviewed/2024/11/GHSA-gg8c-67xr-mxhv/GHSA-gg8c-67xr-mxhv.json index 0cb96cb04aa..cd7d4ab5bf9 100644 --- a/advisories/unreviewed/2024/11/GHSA-gg8c-67xr-mxhv/GHSA-gg8c-67xr-mxhv.json +++ b/advisories/unreviewed/2024/11/GHSA-gg8c-67xr-mxhv/GHSA-gg8c-67xr-mxhv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-gghm-v5rx-vf3g/GHSA-gghm-v5rx-vf3g.json b/advisories/unreviewed/2024/11/GHSA-gghm-v5rx-vf3g/GHSA-gghm-v5rx-vf3g.json index 75869dd7ec6..2f21225158f 100644 --- a/advisories/unreviewed/2024/11/GHSA-gghm-v5rx-vf3g/GHSA-gghm-v5rx-vf3g.json +++ b/advisories/unreviewed/2024/11/GHSA-gghm-v5rx-vf3g/GHSA-gghm-v5rx-vf3g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-gr79-qrm5-4ph8/GHSA-gr79-qrm5-4ph8.json b/advisories/unreviewed/2024/11/GHSA-gr79-qrm5-4ph8/GHSA-gr79-qrm5-4ph8.json index 1328c90eb51..950bf2a0b59 100644 --- a/advisories/unreviewed/2024/11/GHSA-gr79-qrm5-4ph8/GHSA-gr79-qrm5-4ph8.json +++ b/advisories/unreviewed/2024/11/GHSA-gr79-qrm5-4ph8/GHSA-gr79-qrm5-4ph8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-gw7p-96wm-f9qw/GHSA-gw7p-96wm-f9qw.json b/advisories/unreviewed/2024/11/GHSA-gw7p-96wm-f9qw/GHSA-gw7p-96wm-f9qw.json index 8394eb41ac7..64157298bcf 100644 --- a/advisories/unreviewed/2024/11/GHSA-gw7p-96wm-f9qw/GHSA-gw7p-96wm-f9qw.json +++ b/advisories/unreviewed/2024/11/GHSA-gw7p-96wm-f9qw/GHSA-gw7p-96wm-f9qw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-h5pp-286r-62gf/GHSA-h5pp-286r-62gf.json b/advisories/unreviewed/2024/11/GHSA-h5pp-286r-62gf/GHSA-h5pp-286r-62gf.json index b2a03fa1fa5..d6f6aef122c 100644 --- a/advisories/unreviewed/2024/11/GHSA-h5pp-286r-62gf/GHSA-h5pp-286r-62gf.json +++ b/advisories/unreviewed/2024/11/GHSA-h5pp-286r-62gf/GHSA-h5pp-286r-62gf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-h9rr-c3mp-g793/GHSA-h9rr-c3mp-g793.json b/advisories/unreviewed/2024/11/GHSA-h9rr-c3mp-g793/GHSA-h9rr-c3mp-g793.json index 5f13017ddbe..69d07fe045b 100644 --- a/advisories/unreviewed/2024/11/GHSA-h9rr-c3mp-g793/GHSA-h9rr-c3mp-g793.json +++ b/advisories/unreviewed/2024/11/GHSA-h9rr-c3mp-g793/GHSA-h9rr-c3mp-g793.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-hm47-g5j3-8f32/GHSA-hm47-g5j3-8f32.json b/advisories/unreviewed/2024/11/GHSA-hm47-g5j3-8f32/GHSA-hm47-g5j3-8f32.json index 4cd12496b06..cc97437ec2e 100644 --- a/advisories/unreviewed/2024/11/GHSA-hm47-g5j3-8f32/GHSA-hm47-g5j3-8f32.json +++ b/advisories/unreviewed/2024/11/GHSA-hm47-g5j3-8f32/GHSA-hm47-g5j3-8f32.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-hmc5-79qw-62gj/GHSA-hmc5-79qw-62gj.json b/advisories/unreviewed/2024/11/GHSA-hmc5-79qw-62gj/GHSA-hmc5-79qw-62gj.json index bcd612cef97..ad3e811a9ac 100644 --- a/advisories/unreviewed/2024/11/GHSA-hmc5-79qw-62gj/GHSA-hmc5-79qw-62gj.json +++ b/advisories/unreviewed/2024/11/GHSA-hmc5-79qw-62gj/GHSA-hmc5-79qw-62gj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-hwx8-x488-7jww/GHSA-hwx8-x488-7jww.json b/advisories/unreviewed/2024/11/GHSA-hwx8-x488-7jww/GHSA-hwx8-x488-7jww.json index c39814ca41e..164be266bf0 100644 --- a/advisories/unreviewed/2024/11/GHSA-hwx8-x488-7jww/GHSA-hwx8-x488-7jww.json +++ b/advisories/unreviewed/2024/11/GHSA-hwx8-x488-7jww/GHSA-hwx8-x488-7jww.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-j2vr-78j4-f882/GHSA-j2vr-78j4-f882.json b/advisories/unreviewed/2024/11/GHSA-j2vr-78j4-f882/GHSA-j2vr-78j4-f882.json index a6b207092d0..9c49b6ce51c 100644 --- a/advisories/unreviewed/2024/11/GHSA-j2vr-78j4-f882/GHSA-j2vr-78j4-f882.json +++ b/advisories/unreviewed/2024/11/GHSA-j2vr-78j4-f882/GHSA-j2vr-78j4-f882.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-j74h-4p4v-6fp3/GHSA-j74h-4p4v-6fp3.json b/advisories/unreviewed/2024/11/GHSA-j74h-4p4v-6fp3/GHSA-j74h-4p4v-6fp3.json index 4c55567cf4a..b85209950c3 100644 --- a/advisories/unreviewed/2024/11/GHSA-j74h-4p4v-6fp3/GHSA-j74h-4p4v-6fp3.json +++ b/advisories/unreviewed/2024/11/GHSA-j74h-4p4v-6fp3/GHSA-j74h-4p4v-6fp3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-j8r5-x9c2-84q9/GHSA-j8r5-x9c2-84q9.json b/advisories/unreviewed/2024/11/GHSA-j8r5-x9c2-84q9/GHSA-j8r5-x9c2-84q9.json index 1450b13b8e5..4cdaf16f9b6 100644 --- a/advisories/unreviewed/2024/11/GHSA-j8r5-x9c2-84q9/GHSA-j8r5-x9c2-84q9.json +++ b/advisories/unreviewed/2024/11/GHSA-j8r5-x9c2-84q9/GHSA-j8r5-x9c2-84q9.json @@ -7,12 +7,8 @@ "CVE-2023-4348" ], "details": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/11/GHSA-jmff-vhcc-w887/GHSA-jmff-vhcc-w887.json b/advisories/unreviewed/2024/11/GHSA-jmff-vhcc-w887/GHSA-jmff-vhcc-w887.json index 35c270545fc..bc2229f019a 100644 --- a/advisories/unreviewed/2024/11/GHSA-jmff-vhcc-w887/GHSA-jmff-vhcc-w887.json +++ b/advisories/unreviewed/2024/11/GHSA-jmff-vhcc-w887/GHSA-jmff-vhcc-w887.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-jqqp-p39x-w5h9/GHSA-jqqp-p39x-w5h9.json b/advisories/unreviewed/2024/11/GHSA-jqqp-p39x-w5h9/GHSA-jqqp-p39x-w5h9.json index 1d919da7563..bad8c13e4d8 100644 --- a/advisories/unreviewed/2024/11/GHSA-jqqp-p39x-w5h9/GHSA-jqqp-p39x-w5h9.json +++ b/advisories/unreviewed/2024/11/GHSA-jqqp-p39x-w5h9/GHSA-jqqp-p39x-w5h9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-jrf6-24wc-4wx7/GHSA-jrf6-24wc-4wx7.json b/advisories/unreviewed/2024/11/GHSA-jrf6-24wc-4wx7/GHSA-jrf6-24wc-4wx7.json index 58c5a75af0d..6e430108edd 100644 --- a/advisories/unreviewed/2024/11/GHSA-jrf6-24wc-4wx7/GHSA-jrf6-24wc-4wx7.json +++ b/advisories/unreviewed/2024/11/GHSA-jrf6-24wc-4wx7/GHSA-jrf6-24wc-4wx7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-jrhg-66xp-fmhv/GHSA-jrhg-66xp-fmhv.json b/advisories/unreviewed/2024/11/GHSA-jrhg-66xp-fmhv/GHSA-jrhg-66xp-fmhv.json index 0045075ae24..19cc0bfa93f 100644 --- a/advisories/unreviewed/2024/11/GHSA-jrhg-66xp-fmhv/GHSA-jrhg-66xp-fmhv.json +++ b/advisories/unreviewed/2024/11/GHSA-jrhg-66xp-fmhv/GHSA-jrhg-66xp-fmhv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-jvfw-53c8-p9qg/GHSA-jvfw-53c8-p9qg.json b/advisories/unreviewed/2024/11/GHSA-jvfw-53c8-p9qg/GHSA-jvfw-53c8-p9qg.json index 3379d979524..03e5768ba42 100644 --- a/advisories/unreviewed/2024/11/GHSA-jvfw-53c8-p9qg/GHSA-jvfw-53c8-p9qg.json +++ b/advisories/unreviewed/2024/11/GHSA-jvfw-53c8-p9qg/GHSA-jvfw-53c8-p9qg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-mcxg-gq2f-3x39/GHSA-mcxg-gq2f-3x39.json b/advisories/unreviewed/2024/11/GHSA-mcxg-gq2f-3x39/GHSA-mcxg-gq2f-3x39.json index 90d5d33e4a9..b5883ef3f00 100644 --- a/advisories/unreviewed/2024/11/GHSA-mcxg-gq2f-3x39/GHSA-mcxg-gq2f-3x39.json +++ b/advisories/unreviewed/2024/11/GHSA-mcxg-gq2f-3x39/GHSA-mcxg-gq2f-3x39.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-mm25-jv7r-42qf/GHSA-mm25-jv7r-42qf.json b/advisories/unreviewed/2024/11/GHSA-mm25-jv7r-42qf/GHSA-mm25-jv7r-42qf.json index ad852f7d700..8b3aadc1a05 100644 --- a/advisories/unreviewed/2024/11/GHSA-mm25-jv7r-42qf/GHSA-mm25-jv7r-42qf.json +++ b/advisories/unreviewed/2024/11/GHSA-mm25-jv7r-42qf/GHSA-mm25-jv7r-42qf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-mpp6-vvqp-c35f/GHSA-mpp6-vvqp-c35f.json b/advisories/unreviewed/2024/11/GHSA-mpp6-vvqp-c35f/GHSA-mpp6-vvqp-c35f.json index 66a4b5c6d10..8f549dbaded 100644 --- a/advisories/unreviewed/2024/11/GHSA-mpp6-vvqp-c35f/GHSA-mpp6-vvqp-c35f.json +++ b/advisories/unreviewed/2024/11/GHSA-mpp6-vvqp-c35f/GHSA-mpp6-vvqp-c35f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-p3h6-vvrg-6cp2/GHSA-p3h6-vvrg-6cp2.json b/advisories/unreviewed/2024/11/GHSA-p3h6-vvrg-6cp2/GHSA-p3h6-vvrg-6cp2.json index 876634a18f9..ecf0b0ac13a 100644 --- a/advisories/unreviewed/2024/11/GHSA-p3h6-vvrg-6cp2/GHSA-p3h6-vvrg-6cp2.json +++ b/advisories/unreviewed/2024/11/GHSA-p3h6-vvrg-6cp2/GHSA-p3h6-vvrg-6cp2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-p8w2-9cmv-c9gc/GHSA-p8w2-9cmv-c9gc.json b/advisories/unreviewed/2024/11/GHSA-p8w2-9cmv-c9gc/GHSA-p8w2-9cmv-c9gc.json index 009e748ebdc..70e93743fef 100644 --- a/advisories/unreviewed/2024/11/GHSA-p8w2-9cmv-c9gc/GHSA-p8w2-9cmv-c9gc.json +++ b/advisories/unreviewed/2024/11/GHSA-p8w2-9cmv-c9gc/GHSA-p8w2-9cmv-c9gc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-pg6h-m56f-q74p/GHSA-pg6h-m56f-q74p.json b/advisories/unreviewed/2024/11/GHSA-pg6h-m56f-q74p/GHSA-pg6h-m56f-q74p.json index 8e0c678275d..4eb886d4bef 100644 --- a/advisories/unreviewed/2024/11/GHSA-pg6h-m56f-q74p/GHSA-pg6h-m56f-q74p.json +++ b/advisories/unreviewed/2024/11/GHSA-pg6h-m56f-q74p/GHSA-pg6h-m56f-q74p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-pmjm-xcrx-w83w/GHSA-pmjm-xcrx-w83w.json b/advisories/unreviewed/2024/11/GHSA-pmjm-xcrx-w83w/GHSA-pmjm-xcrx-w83w.json index 0c81c5a82f1..d37b6d9a468 100644 --- a/advisories/unreviewed/2024/11/GHSA-pmjm-xcrx-w83w/GHSA-pmjm-xcrx-w83w.json +++ b/advisories/unreviewed/2024/11/GHSA-pmjm-xcrx-w83w/GHSA-pmjm-xcrx-w83w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-pqqw-6g5g-6pqj/GHSA-pqqw-6g5g-6pqj.json b/advisories/unreviewed/2024/11/GHSA-pqqw-6g5g-6pqj/GHSA-pqqw-6g5g-6pqj.json index 21064262654..592117edfc4 100644 --- a/advisories/unreviewed/2024/11/GHSA-pqqw-6g5g-6pqj/GHSA-pqqw-6g5g-6pqj.json +++ b/advisories/unreviewed/2024/11/GHSA-pqqw-6g5g-6pqj/GHSA-pqqw-6g5g-6pqj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-pqwp-f7pg-vffc/GHSA-pqwp-f7pg-vffc.json b/advisories/unreviewed/2024/11/GHSA-pqwp-f7pg-vffc/GHSA-pqwp-f7pg-vffc.json index f8893d0bf1b..73680912f0a 100644 --- a/advisories/unreviewed/2024/11/GHSA-pqwp-f7pg-vffc/GHSA-pqwp-f7pg-vffc.json +++ b/advisories/unreviewed/2024/11/GHSA-pqwp-f7pg-vffc/GHSA-pqwp-f7pg-vffc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-pvg7-86fr-gvjh/GHSA-pvg7-86fr-gvjh.json b/advisories/unreviewed/2024/11/GHSA-pvg7-86fr-gvjh/GHSA-pvg7-86fr-gvjh.json index c3471fbb1b2..53f6211447e 100644 --- a/advisories/unreviewed/2024/11/GHSA-pvg7-86fr-gvjh/GHSA-pvg7-86fr-gvjh.json +++ b/advisories/unreviewed/2024/11/GHSA-pvg7-86fr-gvjh/GHSA-pvg7-86fr-gvjh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-q3wq-j7qf-v6g7/GHSA-q3wq-j7qf-v6g7.json b/advisories/unreviewed/2024/11/GHSA-q3wq-j7qf-v6g7/GHSA-q3wq-j7qf-v6g7.json index 05241876fca..06afaa7998e 100644 --- a/advisories/unreviewed/2024/11/GHSA-q3wq-j7qf-v6g7/GHSA-q3wq-j7qf-v6g7.json +++ b/advisories/unreviewed/2024/11/GHSA-q3wq-j7qf-v6g7/GHSA-q3wq-j7qf-v6g7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/11/GHSA-q48v-mggj-3532/GHSA-q48v-mggj-3532.json b/advisories/unreviewed/2024/11/GHSA-q48v-mggj-3532/GHSA-q48v-mggj-3532.json index e7c4fcbece7..ab41e97902d 100644 --- a/advisories/unreviewed/2024/11/GHSA-q48v-mggj-3532/GHSA-q48v-mggj-3532.json +++ b/advisories/unreviewed/2024/11/GHSA-q48v-mggj-3532/GHSA-q48v-mggj-3532.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-q4pp-3f9p-qrgh/GHSA-q4pp-3f9p-qrgh.json b/advisories/unreviewed/2024/11/GHSA-q4pp-3f9p-qrgh/GHSA-q4pp-3f9p-qrgh.json index 2af2154e9a0..13cc07147a9 100644 --- a/advisories/unreviewed/2024/11/GHSA-q4pp-3f9p-qrgh/GHSA-q4pp-3f9p-qrgh.json +++ b/advisories/unreviewed/2024/11/GHSA-q4pp-3f9p-qrgh/GHSA-q4pp-3f9p-qrgh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-q68x-36v8-h7jv/GHSA-q68x-36v8-h7jv.json b/advisories/unreviewed/2024/11/GHSA-q68x-36v8-h7jv/GHSA-q68x-36v8-h7jv.json index 5f97cbdbca8..aba6d79d09d 100644 --- a/advisories/unreviewed/2024/11/GHSA-q68x-36v8-h7jv/GHSA-q68x-36v8-h7jv.json +++ b/advisories/unreviewed/2024/11/GHSA-q68x-36v8-h7jv/GHSA-q68x-36v8-h7jv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-q79q-mvw6-5crr/GHSA-q79q-mvw6-5crr.json b/advisories/unreviewed/2024/11/GHSA-q79q-mvw6-5crr/GHSA-q79q-mvw6-5crr.json index 895ff561e7b..af8f3ce45f6 100644 --- a/advisories/unreviewed/2024/11/GHSA-q79q-mvw6-5crr/GHSA-q79q-mvw6-5crr.json +++ b/advisories/unreviewed/2024/11/GHSA-q79q-mvw6-5crr/GHSA-q79q-mvw6-5crr.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-qf7p-2hmj-48mq/GHSA-qf7p-2hmj-48mq.json b/advisories/unreviewed/2024/11/GHSA-qf7p-2hmj-48mq/GHSA-qf7p-2hmj-48mq.json index ae60f44b559..23f9063bdad 100644 --- a/advisories/unreviewed/2024/11/GHSA-qf7p-2hmj-48mq/GHSA-qf7p-2hmj-48mq.json +++ b/advisories/unreviewed/2024/11/GHSA-qf7p-2hmj-48mq/GHSA-qf7p-2hmj-48mq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-qhj8-c52j-6fgq/GHSA-qhj8-c52j-6fgq.json b/advisories/unreviewed/2024/11/GHSA-qhj8-c52j-6fgq/GHSA-qhj8-c52j-6fgq.json index d3987fe040c..0f9a9d825fd 100644 --- a/advisories/unreviewed/2024/11/GHSA-qhj8-c52j-6fgq/GHSA-qhj8-c52j-6fgq.json +++ b/advisories/unreviewed/2024/11/GHSA-qhj8-c52j-6fgq/GHSA-qhj8-c52j-6fgq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-qq4c-hq2p-5rpf/GHSA-qq4c-hq2p-5rpf.json b/advisories/unreviewed/2024/11/GHSA-qq4c-hq2p-5rpf/GHSA-qq4c-hq2p-5rpf.json index 808b134ec82..87868b0e30a 100644 --- a/advisories/unreviewed/2024/11/GHSA-qq4c-hq2p-5rpf/GHSA-qq4c-hq2p-5rpf.json +++ b/advisories/unreviewed/2024/11/GHSA-qq4c-hq2p-5rpf/GHSA-qq4c-hq2p-5rpf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-qw62-27cx-6cqg/GHSA-qw62-27cx-6cqg.json b/advisories/unreviewed/2024/11/GHSA-qw62-27cx-6cqg/GHSA-qw62-27cx-6cqg.json index 56bd2713aff..973bf924dba 100644 --- a/advisories/unreviewed/2024/11/GHSA-qw62-27cx-6cqg/GHSA-qw62-27cx-6cqg.json +++ b/advisories/unreviewed/2024/11/GHSA-qw62-27cx-6cqg/GHSA-qw62-27cx-6cqg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-r29r-jxx6-7ff5/GHSA-r29r-jxx6-7ff5.json b/advisories/unreviewed/2024/11/GHSA-r29r-jxx6-7ff5/GHSA-r29r-jxx6-7ff5.json index 896eed2a916..66180bdde27 100644 --- a/advisories/unreviewed/2024/11/GHSA-r29r-jxx6-7ff5/GHSA-r29r-jxx6-7ff5.json +++ b/advisories/unreviewed/2024/11/GHSA-r29r-jxx6-7ff5/GHSA-r29r-jxx6-7ff5.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:L/SC:N/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-r2p4-pwjj-hqr4/GHSA-r2p4-pwjj-hqr4.json b/advisories/unreviewed/2024/11/GHSA-r2p4-pwjj-hqr4/GHSA-r2p4-pwjj-hqr4.json index 005d34007db..70a3ee4f116 100644 --- a/advisories/unreviewed/2024/11/GHSA-r2p4-pwjj-hqr4/GHSA-r2p4-pwjj-hqr4.json +++ b/advisories/unreviewed/2024/11/GHSA-r2p4-pwjj-hqr4/GHSA-r2p4-pwjj-hqr4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-r764-fgc6-fqw3/GHSA-r764-fgc6-fqw3.json b/advisories/unreviewed/2024/11/GHSA-r764-fgc6-fqw3/GHSA-r764-fgc6-fqw3.json index 428202027da..f0b0a1de2da 100644 --- a/advisories/unreviewed/2024/11/GHSA-r764-fgc6-fqw3/GHSA-r764-fgc6-fqw3.json +++ b/advisories/unreviewed/2024/11/GHSA-r764-fgc6-fqw3/GHSA-r764-fgc6-fqw3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/11/GHSA-r8vx-grx7-h7xj/GHSA-r8vx-grx7-h7xj.json b/advisories/unreviewed/2024/11/GHSA-r8vx-grx7-h7xj/GHSA-r8vx-grx7-h7xj.json index 6b34a57397f..436dc77fbca 100644 --- a/advisories/unreviewed/2024/11/GHSA-r8vx-grx7-h7xj/GHSA-r8vx-grx7-h7xj.json +++ b/advisories/unreviewed/2024/11/GHSA-r8vx-grx7-h7xj/GHSA-r8vx-grx7-h7xj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/11/GHSA-r8wm-m82j-j2jj/GHSA-r8wm-m82j-j2jj.json b/advisories/unreviewed/2024/11/GHSA-r8wm-m82j-j2jj/GHSA-r8wm-m82j-j2jj.json index 7882abeea8f..7548018ef5a 100644 --- a/advisories/unreviewed/2024/11/GHSA-r8wm-m82j-j2jj/GHSA-r8wm-m82j-j2jj.json +++ b/advisories/unreviewed/2024/11/GHSA-r8wm-m82j-j2jj/GHSA-r8wm-m82j-j2jj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-rg5m-fc62-h68h/GHSA-rg5m-fc62-h68h.json b/advisories/unreviewed/2024/11/GHSA-rg5m-fc62-h68h/GHSA-rg5m-fc62-h68h.json index 107b73d62ce..91e738e9946 100644 --- a/advisories/unreviewed/2024/11/GHSA-rg5m-fc62-h68h/GHSA-rg5m-fc62-h68h.json +++ b/advisories/unreviewed/2024/11/GHSA-rg5m-fc62-h68h/GHSA-rg5m-fc62-h68h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-rg7m-23r6-4m52/GHSA-rg7m-23r6-4m52.json b/advisories/unreviewed/2024/11/GHSA-rg7m-23r6-4m52/GHSA-rg7m-23r6-4m52.json index bd58900d940..3d7198ef27d 100644 --- a/advisories/unreviewed/2024/11/GHSA-rg7m-23r6-4m52/GHSA-rg7m-23r6-4m52.json +++ b/advisories/unreviewed/2024/11/GHSA-rg7m-23r6-4m52/GHSA-rg7m-23r6-4m52.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-rhfh-m68w-rv9h/GHSA-rhfh-m68w-rv9h.json b/advisories/unreviewed/2024/11/GHSA-rhfh-m68w-rv9h/GHSA-rhfh-m68w-rv9h.json index 26be1702fdc..228355a924a 100644 --- a/advisories/unreviewed/2024/11/GHSA-rhfh-m68w-rv9h/GHSA-rhfh-m68w-rv9h.json +++ b/advisories/unreviewed/2024/11/GHSA-rhfh-m68w-rv9h/GHSA-rhfh-m68w-rv9h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-rw66-6rgj-mwjh/GHSA-rw66-6rgj-mwjh.json b/advisories/unreviewed/2024/11/GHSA-rw66-6rgj-mwjh/GHSA-rw66-6rgj-mwjh.json index 2eefc7d38e4..fc936132861 100644 --- a/advisories/unreviewed/2024/11/GHSA-rw66-6rgj-mwjh/GHSA-rw66-6rgj-mwjh.json +++ b/advisories/unreviewed/2024/11/GHSA-rw66-6rgj-mwjh/GHSA-rw66-6rgj-mwjh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-rx94-q7ch-5ww2/GHSA-rx94-q7ch-5ww2.json b/advisories/unreviewed/2024/11/GHSA-rx94-q7ch-5ww2/GHSA-rx94-q7ch-5ww2.json index 461b3c95551..99360c7ae09 100644 --- a/advisories/unreviewed/2024/11/GHSA-rx94-q7ch-5ww2/GHSA-rx94-q7ch-5ww2.json +++ b/advisories/unreviewed/2024/11/GHSA-rx94-q7ch-5ww2/GHSA-rx94-q7ch-5ww2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-v5jm-c265-3fv8/GHSA-v5jm-c265-3fv8.json b/advisories/unreviewed/2024/11/GHSA-v5jm-c265-3fv8/GHSA-v5jm-c265-3fv8.json index 45af2430adf..c8db6852fc8 100644 --- a/advisories/unreviewed/2024/11/GHSA-v5jm-c265-3fv8/GHSA-v5jm-c265-3fv8.json +++ b/advisories/unreviewed/2024/11/GHSA-v5jm-c265-3fv8/GHSA-v5jm-c265-3fv8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-v5rm-528g-7mvp/GHSA-v5rm-528g-7mvp.json b/advisories/unreviewed/2024/11/GHSA-v5rm-528g-7mvp/GHSA-v5rm-528g-7mvp.json index 1e79b928df1..7383b050a8c 100644 --- a/advisories/unreviewed/2024/11/GHSA-v5rm-528g-7mvp/GHSA-v5rm-528g-7mvp.json +++ b/advisories/unreviewed/2024/11/GHSA-v5rm-528g-7mvp/GHSA-v5rm-528g-7mvp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/11/GHSA-v8hj-h8mw-m6g6/GHSA-v8hj-h8mw-m6g6.json b/advisories/unreviewed/2024/11/GHSA-v8hj-h8mw-m6g6/GHSA-v8hj-h8mw-m6g6.json index 67505b64667..b68d20f8e4c 100644 --- a/advisories/unreviewed/2024/11/GHSA-v8hj-h8mw-m6g6/GHSA-v8hj-h8mw-m6g6.json +++ b/advisories/unreviewed/2024/11/GHSA-v8hj-h8mw-m6g6/GHSA-v8hj-h8mw-m6g6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-v999-55fc-w9ww/GHSA-v999-55fc-w9ww.json b/advisories/unreviewed/2024/11/GHSA-v999-55fc-w9ww/GHSA-v999-55fc-w9ww.json index 33ab9509956..4c5c5846351 100644 --- a/advisories/unreviewed/2024/11/GHSA-v999-55fc-w9ww/GHSA-v999-55fc-w9ww.json +++ b/advisories/unreviewed/2024/11/GHSA-v999-55fc-w9ww/GHSA-v999-55fc-w9ww.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-vc8r-hj67-4hv6/GHSA-vc8r-hj67-4hv6.json b/advisories/unreviewed/2024/11/GHSA-vc8r-hj67-4hv6/GHSA-vc8r-hj67-4hv6.json index 43e265f4ca0..7f51085a6e8 100644 --- a/advisories/unreviewed/2024/11/GHSA-vc8r-hj67-4hv6/GHSA-vc8r-hj67-4hv6.json +++ b/advisories/unreviewed/2024/11/GHSA-vc8r-hj67-4hv6/GHSA-vc8r-hj67-4hv6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-vhf9-hm85-mmc7/GHSA-vhf9-hm85-mmc7.json b/advisories/unreviewed/2024/11/GHSA-vhf9-hm85-mmc7/GHSA-vhf9-hm85-mmc7.json index b0baadb116c..5e3762240c9 100644 --- a/advisories/unreviewed/2024/11/GHSA-vhf9-hm85-mmc7/GHSA-vhf9-hm85-mmc7.json +++ b/advisories/unreviewed/2024/11/GHSA-vhf9-hm85-mmc7/GHSA-vhf9-hm85-mmc7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-vv57-3j5w-fc23/GHSA-vv57-3j5w-fc23.json b/advisories/unreviewed/2024/11/GHSA-vv57-3j5w-fc23/GHSA-vv57-3j5w-fc23.json index aeab5ed4eff..f58d789be30 100644 --- a/advisories/unreviewed/2024/11/GHSA-vv57-3j5w-fc23/GHSA-vv57-3j5w-fc23.json +++ b/advisories/unreviewed/2024/11/GHSA-vv57-3j5w-fc23/GHSA-vv57-3j5w-fc23.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-vx6f-r8cp-5qf8/GHSA-vx6f-r8cp-5qf8.json b/advisories/unreviewed/2024/11/GHSA-vx6f-r8cp-5qf8/GHSA-vx6f-r8cp-5qf8.json index 7344f9043e5..5ff0293ed1d 100644 --- a/advisories/unreviewed/2024/11/GHSA-vx6f-r8cp-5qf8/GHSA-vx6f-r8cp-5qf8.json +++ b/advisories/unreviewed/2024/11/GHSA-vx6f-r8cp-5qf8/GHSA-vx6f-r8cp-5qf8.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-w4hw-7cwf-37x9/GHSA-w4hw-7cwf-37x9.json b/advisories/unreviewed/2024/11/GHSA-w4hw-7cwf-37x9/GHSA-w4hw-7cwf-37x9.json index 44ec00756fc..4a2cb3d6b0e 100644 --- a/advisories/unreviewed/2024/11/GHSA-w4hw-7cwf-37x9/GHSA-w4hw-7cwf-37x9.json +++ b/advisories/unreviewed/2024/11/GHSA-w4hw-7cwf-37x9/GHSA-w4hw-7cwf-37x9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-w4wv-5x8m-w2cf/GHSA-w4wv-5x8m-w2cf.json b/advisories/unreviewed/2024/11/GHSA-w4wv-5x8m-w2cf/GHSA-w4wv-5x8m-w2cf.json index 7f9a876f862..3048c358d96 100644 --- a/advisories/unreviewed/2024/11/GHSA-w4wv-5x8m-w2cf/GHSA-w4wv-5x8m-w2cf.json +++ b/advisories/unreviewed/2024/11/GHSA-w4wv-5x8m-w2cf/GHSA-w4wv-5x8m-w2cf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-w66h-6w3q-9v7x/GHSA-w66h-6w3q-9v7x.json b/advisories/unreviewed/2024/11/GHSA-w66h-6w3q-9v7x/GHSA-w66h-6w3q-9v7x.json index 8e82916c113..bd3ae0a63d0 100644 --- a/advisories/unreviewed/2024/11/GHSA-w66h-6w3q-9v7x/GHSA-w66h-6w3q-9v7x.json +++ b/advisories/unreviewed/2024/11/GHSA-w66h-6w3q-9v7x/GHSA-w66h-6w3q-9v7x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-w85r-9h7p-rv3f/GHSA-w85r-9h7p-rv3f.json b/advisories/unreviewed/2024/11/GHSA-w85r-9h7p-rv3f/GHSA-w85r-9h7p-rv3f.json index 843412cd902..080397287b6 100644 --- a/advisories/unreviewed/2024/11/GHSA-w85r-9h7p-rv3f/GHSA-w85r-9h7p-rv3f.json +++ b/advisories/unreviewed/2024/11/GHSA-w85r-9h7p-rv3f/GHSA-w85r-9h7p-rv3f.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-w95c-2q6h-h5mp/GHSA-w95c-2q6h-h5mp.json b/advisories/unreviewed/2024/11/GHSA-w95c-2q6h-h5mp/GHSA-w95c-2q6h-h5mp.json index b312bfb3a91..7ed8ee91d6f 100644 --- a/advisories/unreviewed/2024/11/GHSA-w95c-2q6h-h5mp/GHSA-w95c-2q6h-h5mp.json +++ b/advisories/unreviewed/2024/11/GHSA-w95c-2q6h-h5mp/GHSA-w95c-2q6h-h5mp.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-w9hg-9q36-xm67/GHSA-w9hg-9q36-xm67.json b/advisories/unreviewed/2024/11/GHSA-w9hg-9q36-xm67/GHSA-w9hg-9q36-xm67.json index 0b0483838e9..9192d901f41 100644 --- a/advisories/unreviewed/2024/11/GHSA-w9hg-9q36-xm67/GHSA-w9hg-9q36-xm67.json +++ b/advisories/unreviewed/2024/11/GHSA-w9hg-9q36-xm67/GHSA-w9hg-9q36-xm67.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/11/GHSA-wh72-9gx8-gwhv/GHSA-wh72-9gx8-gwhv.json b/advisories/unreviewed/2024/11/GHSA-wh72-9gx8-gwhv/GHSA-wh72-9gx8-gwhv.json index 07060295c1d..2d4cf860631 100644 --- a/advisories/unreviewed/2024/11/GHSA-wh72-9gx8-gwhv/GHSA-wh72-9gx8-gwhv.json +++ b/advisories/unreviewed/2024/11/GHSA-wh72-9gx8-gwhv/GHSA-wh72-9gx8-gwhv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-whfc-q27m-6qfm/GHSA-whfc-q27m-6qfm.json b/advisories/unreviewed/2024/11/GHSA-whfc-q27m-6qfm/GHSA-whfc-q27m-6qfm.json index 09833bdfd59..b008167efd0 100644 --- a/advisories/unreviewed/2024/11/GHSA-whfc-q27m-6qfm/GHSA-whfc-q27m-6qfm.json +++ b/advisories/unreviewed/2024/11/GHSA-whfc-q27m-6qfm/GHSA-whfc-q27m-6qfm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-wp86-vvx6-h6hq/GHSA-wp86-vvx6-h6hq.json b/advisories/unreviewed/2024/11/GHSA-wp86-vvx6-h6hq/GHSA-wp86-vvx6-h6hq.json index 123cad8d69a..1c9de89a5dd 100644 --- a/advisories/unreviewed/2024/11/GHSA-wp86-vvx6-h6hq/GHSA-wp86-vvx6-h6hq.json +++ b/advisories/unreviewed/2024/11/GHSA-wp86-vvx6-h6hq/GHSA-wp86-vvx6-h6hq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-x27j-76x4-w32j/GHSA-x27j-76x4-w32j.json b/advisories/unreviewed/2024/11/GHSA-x27j-76x4-w32j/GHSA-x27j-76x4-w32j.json index 029df96bed1..df7907beddd 100644 --- a/advisories/unreviewed/2024/11/GHSA-x27j-76x4-w32j/GHSA-x27j-76x4-w32j.json +++ b/advisories/unreviewed/2024/11/GHSA-x27j-76x4-w32j/GHSA-x27j-76x4-w32j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-xh37-q5jv-v72j/GHSA-xh37-q5jv-v72j.json b/advisories/unreviewed/2024/11/GHSA-xh37-q5jv-v72j/GHSA-xh37-q5jv-v72j.json index 74790a28305..6138bdbc828 100644 --- a/advisories/unreviewed/2024/11/GHSA-xh37-q5jv-v72j/GHSA-xh37-q5jv-v72j.json +++ b/advisories/unreviewed/2024/11/GHSA-xh37-q5jv-v72j/GHSA-xh37-q5jv-v72j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-xmrx-pprf-648j/GHSA-xmrx-pprf-648j.json b/advisories/unreviewed/2024/11/GHSA-xmrx-pprf-648j/GHSA-xmrx-pprf-648j.json index a3a8cc4380a..000ca2818d1 100644 --- a/advisories/unreviewed/2024/11/GHSA-xmrx-pprf-648j/GHSA-xmrx-pprf-648j.json +++ b/advisories/unreviewed/2024/11/GHSA-xmrx-pprf-648j/GHSA-xmrx-pprf-648j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-xpc7-5596-67rq/GHSA-xpc7-5596-67rq.json b/advisories/unreviewed/2024/11/GHSA-xpc7-5596-67rq/GHSA-xpc7-5596-67rq.json index 74a3041236d..f9572f6d326 100644 --- a/advisories/unreviewed/2024/11/GHSA-xpc7-5596-67rq/GHSA-xpc7-5596-67rq.json +++ b/advisories/unreviewed/2024/11/GHSA-xpc7-5596-67rq/GHSA-xpc7-5596-67rq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-xqfj-6ppw-2qw5/GHSA-xqfj-6ppw-2qw5.json b/advisories/unreviewed/2024/11/GHSA-xqfj-6ppw-2qw5/GHSA-xqfj-6ppw-2qw5.json index f2cdc04ea1a..0f233ce4cbf 100644 --- a/advisories/unreviewed/2024/11/GHSA-xqfj-6ppw-2qw5/GHSA-xqfj-6ppw-2qw5.json +++ b/advisories/unreviewed/2024/11/GHSA-xqfj-6ppw-2qw5/GHSA-xqfj-6ppw-2qw5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/11/GHSA-xwv4-chgp-x89p/GHSA-xwv4-chgp-x89p.json b/advisories/unreviewed/2024/11/GHSA-xwv4-chgp-x89p/GHSA-xwv4-chgp-x89p.json index b8351b5e22c..42c5c997b87 100644 --- a/advisories/unreviewed/2024/11/GHSA-xwv4-chgp-x89p/GHSA-xwv4-chgp-x89p.json +++ b/advisories/unreviewed/2024/11/GHSA-xwv4-chgp-x89p/GHSA-xwv4-chgp-x89p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY",