netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-10-30 21:32:03 +00:00
parent 74f8a15fbc
commit 6e70085549
108 changed files with 1155 additions and 226 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2021/05/GHSA-8h46-5m9h-7553/GHSA-8h46-5m9h-7553.json
+21 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8h46-5m9h-7553",
"modified": "2021-05-18T23:40:54Z",
"modified": "2024-10-30T21:30:51Z",
"published": "2021-05-21T14:20:51Z",
"aliases": [
"CVE-2021-29514"
@@ -12,6 +12,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N"
}
],
"affected": [
@@ -142,6 +146,22 @@
{
"type": "WEB",
"url": "https://github.com/tensorflow/tensorflow/commit/eebb96c2830d48597d055d247c0e9aebaea94cd5"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-cpu/PYSEC-2021-442.yaml"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow-gpu/PYSEC-2021-640.yaml"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/tensorflow/PYSEC-2021-151.yaml"
},
{
"type": "PACKAGE",
"url": "https://github.com/tensorflow/tensorflow"
}
],
"database_specific": {
advisories/unreviewed/2023/07/GHSA-mjjj-6p6j-chqm/GHSA-mjjj-6p6j-chqm.json
+1 -1
View File
@@ -36,7 +36,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-522"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2023/07/GHSA-p4w7-mqq9-4jc7/GHSA-p4w7-mqq9-4jc7.json
+1 -1
View File
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-306"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2023/07/GHSA-p882-2j97-m4hp/GHSA-p882-2j97-m4hp.json
+1 -1
View File
@@ -52,7 +52,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2024/02/GHSA-6347-pxpp-244g/GHSA-6347-pxpp-244g.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6347-pxpp-244g",
"modified": "2024-02-26T18:30:31Z",
"modified": "2024-10-30T21:30:36Z",
"published": "2024-02-26T18:30:31Z",
"aliases": [
"CVE-2024-26466"
],
"details": "A DOM based cross-site scripting (XSS) vulnerability in the component /dom/ranges/Range-test-iframe.html of web-platform-tests/wpt before commit 938e843 allows attackers to execute arbitrary Javascript via sending a crafted URL.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-26T16:27:59Z"
advisories/unreviewed/2024/02/GHSA-92f7-c7hw-58cr/GHSA-92f7-c7hw-58cr.json
+1 -1
View File
@@ -76,7 +76,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/02/GHSA-h4pg-prwh-f695/GHSA-h4pg-prwh-f695.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h4pg-prwh-f695",
"modified": "2024-02-29T03:33:17Z",
"modified": "2024-10-30T21:30:37Z",
"published": "2024-02-29T03:33:17Z",
"aliases": [
"CVE-2024-21722"
],
"details": "The MFA management features did not properly terminate existing user sessions when a user's MFA methods have been modified.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
"CWE-613"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-29T01:44:03Z"
advisories/unreviewed/2024/02/GHSA-r6xh-2p9x-84pq/GHSA-r6xh-2p9x-84pq.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-922"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/02/GHSA-vpg2-32g8-56wf/GHSA-vpg2-32g8-56wf.json
+1 -1
View File
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-922"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/02/GHSA-x6p5-7c22-qrq6/GHSA-x6p5-7c22-qrq6.json
+2 -1
View File
@@ -40,7 +40,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-119"
"CWE-119",
"CWE-125"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/03/GHSA-4pmx-grr5-rmvm/GHSA-4pmx-grr5-rmvm.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4pmx-grr5-rmvm",
"modified": "2024-03-07T15:30:38Z",
"modified": "2024-10-30T21:30:37Z",
"published": "2024-03-07T15:30:38Z",
"aliases": [
"CVE-2024-2241"
],
"details": "Improper access control in the user interface in Devolutions Workspace 2024.1.0 and earlier allows an authenticated user to perform unintended actions via specific permissions\n\n\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-07T13:15:07Z"
advisories/unreviewed/2024/03/GHSA-63p7-87m3-8c9v/GHSA-63p7-87m3-8c9v.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-63p7-87m3-8c9v",
"modified": "2024-03-25T18:30:57Z",
"modified": "2024-10-30T21:30:37Z",
"published": "2024-03-19T12:30:41Z",
"aliases": [
"CVE-2024-2611"
],
"details": "A missing delay on when pointer lock was used could have allowed a malicious page to trick a user into granting permissions. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -47,7 +50,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-19T12:15:09Z"
advisories/unreviewed/2024/03/GHSA-8x54-9cjv-7vch/GHSA-8x54-9cjv-7vch.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8x54-9cjv-7vch",
"modified": "2024-03-21T15:31:55Z",
"modified": "2024-10-30T21:30:37Z",
"published": "2024-03-21T15:31:55Z",
"aliases": [
"CVE-2024-2464"
],
"details": "This issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid users.This issue affects CDeX application versions through 5.7.1.\n\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -35,7 +38,7 @@
"cwe_ids": [
"CWE-203"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-21T15:16:54Z"
advisories/unreviewed/2024/03/GHSA-m9jj-4rp8-mm96/GHSA-m9jj-4rp8-mm96.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m9jj-4rp8-mm96",
"modified": "2024-03-13T21:31:02Z",
"modified": "2024-10-30T21:30:37Z",
"published": "2024-03-08T03:31:24Z",
"aliases": [
"CVE-2024-23248"
],
"details": "The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.4. Processing a file may lead to a denial-of-service or potentially disclose memory contents.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-404"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-08T02:15:48Z"
advisories/unreviewed/2024/03/GHSA-qg9g-p9q2-wjvw/GHSA-qg9g-p9q2-wjvw.json
+1 -1
View File
@@ -44,7 +44,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-295"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/04/GHSA-5x2g-c9gv-xwq2/GHSA-5x2g-c9gv-xwq2.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5x2g-c9gv-xwq2",
"modified": "2024-05-01T18:30:37Z",
"modified": "2024-10-30T21:30:37Z",
"published": "2024-04-03T18:30:44Z",
"aliases": [
"CVE-2024-2758"
],
"details": "Tempesta FW rate limits are not enabled by default. They are either set too large to capture empty CONTINUATION frames attacks or too small to handle normal HTTP requests appropriately.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -35,7 +38,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-03T18:15:07Z"
advisories/unreviewed/2024/04/GHSA-8p54-55f6-pg9j/GHSA-8p54-55f6-pg9j.json
+2 -1
View File
@@ -68,7 +68,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-119"
"CWE-119",
"CWE-190"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/04/GHSA-9qrm-8x3f-j2vq/GHSA-9qrm-8x3f-j2vq.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9qrm-8x3f-j2vq",
"modified": "2024-04-01T18:30:56Z",
"modified": "2024-10-30T21:30:37Z",
"published": "2024-04-01T18:30:56Z",
"aliases": [
"CVE-2024-30863"
],
"details": "netentsec NS-ASG 6.3 is vulnerable to SQL Injection via /WebPages/history.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-01T16:15:48Z"
advisories/unreviewed/2024/04/GHSA-9vgp-pjm3-97c6/GHSA-9vgp-pjm3-97c6.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9vgp-pjm3-97c6",
"modified": "2024-04-02T18:31:19Z",
"modified": "2024-10-30T21:30:37Z",
"published": "2024-04-02T18:31:19Z",
"aliases": [
"CVE-2024-30807"
],
"details": "An issue was discovered in Bento4 v1.6.0-641-2-g1529b83. There is a heap-use-after-free in AP4_UnknownAtom::~AP4_UnknownAtom at Ap4Atom.cpp, leading to a Denial of Service (DoS), as demonstrated by mp42ts.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-02T18:15:12Z"
advisories/unreviewed/2024/04/GHSA-r3qr-6c5q-pr77/GHSA-r3qr-6c5q-pr77.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r3qr-6c5q-pr77",
"modified": "2024-04-11T06:30:35Z",
"modified": "2024-10-30T21:30:37Z",
"published": "2024-04-11T06:30:35Z",
"aliases": [
"CVE-2024-30885"
],
"details": "Reflected Cross-Site Scripting (XSS) vulnerability in HadSky v7.6.3, allows remote attackers to execute arbitrary code and obtain sensitive information via the chklogin.php component .",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-11T05:15:47Z"

Some files were not shown because too many files have changed in this diff Show More