netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-08-28 21:32:57 +00:00
parent be1a964009
commit 6c9681aec9
64 changed files with 548 additions and 211 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/12/GHSA-vpxw-7pqq-96gv/GHSA-vpxw-7pqq-96gv.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/02/GHSA-5476-44cw-r459/GHSA-5476-44cw-r459.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5476-44cw-r459",
"modified": "2024-02-21T09:31:01Z",
"modified": "2024-08-28T21:31:26Z",
"published": "2024-02-21T09:31:01Z",
"aliases": [
"CVE-2023-42873"
],
"details": "The issue was addressed with improved bounds checks. This issue is fixed in macOS Sonoma 14.1, tvOS 17.1, macOS Monterey 12.7.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.1. An app may be able to execute arbitrary code with kernel privileges.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -47,7 +50,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-21T07:15:49Z"
advisories/unreviewed/2024/02/GHSA-8xxh-r5gq-2wxg/GHSA-8xxh-r5gq-2wxg.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8xxh-r5gq-2wxg",
"modified": "2024-04-19T09:30:46Z",
"modified": "2024-08-28T21:31:25Z",
"published": "2024-02-15T06:31:35Z",
"aliases": [
"CVE-2022-23086"
],
"details": "Handlers for *_CFG_PAGE read / write ioctls in the mpr, mps, and mpt drivers allocated a buffer of a caller-specified size, but copied to it a fixed size header. Other heap content would be overwritten if the specified size was too small.\n\nUsers with access to the mpr, mps or mpt device node may overwrite heap data, potentially resulting in privilege escalation. Note that the device node is only accessible to root and members of the operator group.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-122"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-15T05:15:09Z"
advisories/unreviewed/2024/02/GHSA-94v8-mxjr-cfmp/GHSA-94v8-mxjr-cfmp.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-94v8-mxjr-cfmp",
"modified": "2024-02-21T21:30:25Z",
"modified": "2024-08-28T21:31:26Z",
"published": "2024-02-21T21:30:25Z",
"aliases": [
"CVE-2023-24333"
],
"details": "A stack overflow vulnerability in Tenda AC21 with firmware version US_AC21V1.0re_V16.03.08.15_cn_TDC01 allows attackers to run arbitrary commands via crafted POST request to /goform/openSchedWifi.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-21T21:15:08Z"
advisories/unreviewed/2024/02/GHSA-9vjq-fm4j-4r87/GHSA-9vjq-fm4j-4r87.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9vjq-fm4j-4r87",
"modified": "2024-02-16T00:30:28Z",
"modified": "2024-08-28T21:31:25Z",
"published": "2024-02-16T00:30:28Z",
"aliases": [
"CVE-2023-40100"
],
"details": "In discovery_thread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-15T23:15:07Z"
advisories/unreviewed/2024/02/GHSA-cj4v-q99x-3m3c/GHSA-cj4v-q99x-3m3c.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cj4v-q99x-3m3c",
"modified": "2024-02-29T03:33:14Z",
"modified": "2024-08-28T21:31:26Z",
"published": "2024-02-29T03:33:14Z",
"aliases": [
"CVE-2023-51835"
],
"details": "An issue in TRENDnet TEW-822DRE v.1.03B02 allows a local attacker to execute arbitrary code via the parameters ipv4_ping in the /boafrm/formSystemCheck.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-77"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-29T01:42:05Z"
advisories/unreviewed/2024/02/GHSA-jfjj-5533-jmgq/GHSA-jfjj-5533-jmgq.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jfjj-5533-jmgq",
"modified": "2024-02-23T00:30:33Z",
"modified": "2024-08-28T21:31:26Z",
"published": "2024-02-23T00:30:33Z",
"aliases": [
"CVE-2024-25748"
],
"details": "A Stack Based Buffer Overflow vulnerability in tenda AC9 AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the fromSetIpMacBind function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-22T23:15:07Z"
advisories/unreviewed/2024/02/GHSA-jhq7-655w-xc9f/GHSA-jhq7-655w-xc9f.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jhq7-655w-xc9f",
"modified": "2024-02-23T00:30:33Z",
"modified": "2024-08-28T21:31:26Z",
"published": "2024-02-23T00:30:33Z",
"aliases": [
"CVE-2024-25746"
],
"details": "Stack Based Buffer Overflow vulnerability in Tenda AC9 v.3.0 with firmware version v.15.03.06.42_multi allows a remote attacker to execute arbitrary code via the add_white_node function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-22T22:15:47Z"
advisories/unreviewed/2024/02/GHSA-mgcv-254m-jq3v/GHSA-mgcv-254m-jq3v.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mgcv-254m-jq3v",
"modified": "2024-02-22T06:30:35Z",
"modified": "2024-08-28T21:31:26Z",
"published": "2024-02-22T06:30:35Z",
"aliases": [
"CVE-2024-26491"
],
"details": "A cross-site scripting (XSS) vulnerability in the Addon JD Flusity 'Media Gallery with description' module of flusity-CMS v2.33 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Gallery name text field.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-22T06:15:57Z"
advisories/unreviewed/2024/02/GHSA-pq2x-v8q9-52vx/GHSA-pq2x-v8q9-52vx.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pq2x-v8q9-52vx",
"modified": "2024-06-07T15:30:34Z",
"modified": "2024-08-28T21:31:25Z",
"published": "2024-02-16T03:30:51Z",
"aliases": [
"CVE-2024-25415"
],
"details": "A remote code execution (RCE) vulnerability in /admin/define_language.php of CE Phoenix v1.0.8.20 allows attackers to execute arbitrary PHP code via injecting a crafted payload into the file english.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-16T02:15:51Z"
advisories/unreviewed/2024/03/GHSA-2hcw-h762-x48r/GHSA-2hcw-h762-x48r.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2hcw-h762-x48r",
"modified": "2024-03-11T21:31:26Z",
"modified": "2024-08-28T21:31:26Z",
"published": "2024-03-11T21:31:26Z",
"aliases": [
"CVE-2024-27212"
],
"details": "In init_data of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-11T19:15:48Z"
advisories/unreviewed/2024/03/GHSA-2v99-xjqr-gvw3/GHSA-2v99-xjqr-gvw3.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2v99-xjqr-gvw3",
"modified": "2024-03-11T21:31:26Z",
"modified": "2024-08-28T21:31:26Z",
"published": "2024-03-11T21:31:26Z",
"aliases": [
"CVE-2024-27228"
],
"details": "In TBD of TBD, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-11T19:15:48Z"
advisories/unreviewed/2024/03/GHSA-3v5f-9v4j-m9m3/GHSA-3v5f-9v4j-m9m3.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3v5f-9v4j-m9m3",
"modified": "2024-03-29T15:30:29Z",
"modified": "2024-08-28T21:31:27Z",
"published": "2024-03-29T15:30:29Z",
"aliases": [
"CVE-2024-30624"
],
"details": "Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the urls parameter from saveParentControlInfo function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-29T13:15:15Z"
advisories/unreviewed/2024/03/GHSA-4rp7-pgv4-j9jj/GHSA-4rp7-pgv4-j9jj.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4rp7-pgv4-j9jj",
"modified": "2024-03-02T00:31:31Z",
"modified": "2024-08-28T21:31:26Z",
"published": "2024-03-02T00:31:31Z",
"aliases": [
"CVE-2023-49543"
],
"details": "Incorrect access control in Book Store Management System v1 allows attackers to access unauthorized pages and execute administrative functions without authenticating.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-01T22:15:47Z"
advisories/unreviewed/2024/03/GHSA-57gw-fhj2-2v8c/GHSA-57gw-fhj2-2v8c.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-57gw-fhj2-2v8c",
"modified": "2024-03-11T18:31:08Z",
"modified": "2024-08-28T21:31:26Z",
"published": "2024-03-11T18:31:08Z",
"aliases": [
"CVE-2024-0048"
],
"details": "In Session of AccountManagerService.java, there is a possible method to retain foreground service privileges due to incorrect handling of null responses. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-230"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-11T17:15:45Z"
advisories/unreviewed/2024/03/GHSA-5w9r-vppc-4v26/GHSA-5w9r-vppc-4v26.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5w9r-vppc-4v26",
"modified": "2024-03-11T18:31:08Z",
"modified": "2024-08-28T21:31:26Z",
"published": "2024-03-11T18:31:08Z",
"aliases": [
"CVE-2024-0051"
],
"details": "In onQueueFilled of SoftMPEG4.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-11T17:15:45Z"
advisories/unreviewed/2024/03/GHSA-6m6j-6mf3-699f/GHSA-6m6j-6mf3-699f.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6m6j-6mf3-699f",
"modified": "2024-03-13T09:31:21Z",
"modified": "2024-08-28T21:31:26Z",
"published": "2024-03-13T09:31:21Z",
"aliases": [
"CVE-2024-26529"
],
"details": "An issue in mz-automation libiec61850 v.1.5.3 and before, allows a remote attacker to cause a denial of service (DoS) via the mmsServer_handleDeleteNamedVariableListRequest function of src/mms/iso_mms/server/mms_named_variable_list_service.c.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-13T08:15:43Z"
advisories/unreviewed/2024/03/GHSA-796v-6v2x-jgjw/GHSA-796v-6v2x-jgjw.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-796v-6v2x-jgjw",
"modified": "2024-03-11T21:31:26Z",
"modified": "2024-08-28T21:31:26Z",
"published": "2024-03-11T21:31:26Z",
"aliases": [
"CVE-2024-25992"
],
"details": "In tmu_tz_control of tmu.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-125"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-11T19:15:47Z"
advisories/unreviewed/2024/03/GHSA-8qf9-7xmg-5frx/GHSA-8qf9-7xmg-5frx.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8qf9-7xmg-5frx",
"modified": "2024-03-28T15:30:33Z",
"modified": "2024-08-28T21:31:27Z",
"published": "2024-03-28T15:30:33Z",
"aliases": [
"CVE-2024-30598"
],
"details": "Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability in the security_5g parameter of the formWifiBasicSet function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T15:15:46Z"
advisories/unreviewed/2024/03/GHSA-f23h-7mrr-jj25/GHSA-f23h-7mrr-jj25.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f23h-7mrr-jj25",
"modified": "2024-03-01T15:31:38Z",
"modified": "2024-08-28T21:31:26Z",
"published": "2024-03-01T15:31:38Z",
"aliases": [
"CVE-2024-27568"
],
"details": "LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the apn_name_3g parameter in the setupEC20Apn function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-01T14:15:54Z"

Some files were not shown because too many files have changed in this diff Show More