netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-08-15 18:32:51 +00:00
parent 0b444284b5
commit 6f67ba40de
106 changed files with 2027 additions and 152 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/03/GHSA-2x3m-8px8-74hr/GHSA-2x3m-8px8-74hr.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-75"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/03/GHSA-c6qx-hfcq-g673/GHSA-c6qx-hfcq-g673.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c6qx-hfcq-g673",
"modified": "2024-05-01T18:30:36Z",
"modified": "2024-08-15T18:31:43Z",
"published": "2024-03-20T15:32:47Z",
"aliases": [
"CVE-2024-28584"
],
"details": "Null Pointer Dereference vulnerability in open source FreeImage v.3.19.0 [r1909] allows a local attacker to cause a denial of service (DoS) via the J2KImageToFIBITMAP() function when reading images in J2K format.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": null,
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-20T06:15:12Z"
advisories/unreviewed/2024/03/GHSA-c739-p55r-6fq2/GHSA-c739-p55r-6fq2.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c739-p55r-6fq2",
"modified": "2024-03-18T15:30:50Z",
"modified": "2024-08-15T18:31:43Z",
"published": "2024-03-18T15:30:49Z",
"aliases": [
"CVE-2024-28547"
],
"details": "Tenda AC18 V15.03.05.05 has a stack overflow vulnerability in the firewallEn parameter of formSetFirewallCfg function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-18T14:15:10Z"
advisories/unreviewed/2024/03/GHSA-cfx4-q2wp-rc2c/GHSA-cfx4-q2wp-rc2c.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cfx4-q2wp-rc2c",
"modified": "2024-03-04T03:30:26Z",
"modified": "2024-08-15T18:31:43Z",
"published": "2024-03-04T03:30:26Z",
"aliases": [
"CVE-2024-20029"
],
"details": "In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08477406; Issue ID: MSV-1010.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-04T03:15:07Z"
advisories/unreviewed/2024/04/GHSA-2wv3-6pw9-m6hw/GHSA-2wv3-6pw9-m6hw.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/04/GHSA-33qx-4qqq-fc86/GHSA-33qx-4qqq-fc86.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/04/GHSA-64qx-rv33-fw3r/GHSA-64qx-rv33-fw3r.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-64qx-rv33-fw3r",
"modified": "2024-04-06T21:30:35Z",
"modified": "2024-08-15T18:31:43Z",
"published": "2024-04-06T21:30:35Z",
"aliases": [
"CVE-2024-28741"
],
"details": "Cross Site Scripting vulnerability in EginDemirbilek NorthStar C2 v1 allows a remote attacker to execute arbitrary code via the login.php component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-06T19:15:07Z"
advisories/unreviewed/2024/04/GHSA-69jm-3pf7-932c/GHSA-69jm-3pf7-932c.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/04/GHSA-cj2r-9qx3-cf53/GHSA-cj2r-9qx3-cf53.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/04/GHSA-h458-4c82-j96q/GHSA-h458-4c82-j96q.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h458-4c82-j96q",
"modified": "2024-04-08T09:31:13Z",
"modified": "2024-08-15T18:31:43Z",
"published": "2024-04-08T09:31:13Z",
"aliases": [
"CVE-2023-52539"
],
"details": "Permission verification vulnerability in the Settings module.\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-285"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-08T09:15:08Z"
advisories/unreviewed/2024/04/GHSA-m67v-rhjq-4r57/GHSA-m67v-rhjq-4r57.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m67v-rhjq-4r57",
"modified": "2024-05-05T18:30:33Z",
"modified": "2024-08-15T18:31:43Z",
"published": "2024-04-30T15:30:37Z",
"aliases": [
"CVE-2024-33308"
],
"details": "An issue in TVS Motor Company Limited TVS Connet Android v.4.5.1 and iOS v.5.0.0 allows a remote attacker to escalate privileges via the Emergency Contact Feature.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-269"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-30T15:15:53Z"
advisories/unreviewed/2024/04/GHSA-pxfw-cxx3-vxv8/GHSA-pxfw-cxx3-vxv8.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pxfw-cxx3-vxv8",
"modified": "2024-04-08T15:30:32Z",
"modified": "2024-08-15T18:31:43Z",
"published": "2024-04-08T15:30:32Z",
"aliases": [
"CVE-2024-28066"
],
"details": "In Unify CP IP Phone firmware 1.10.4.3, Weak Credentials are used (a hardcoded root password).",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-1391"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-08T13:15:08Z"
advisories/unreviewed/2024/04/GHSA-r8hh-gm8p-9j5x/GHSA-r8hh-gm8p-9j5x.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r8hh-gm8p-9j5x",
"modified": "2024-04-26T00:30:35Z",
"modified": "2024-08-15T18:31:43Z",
"published": "2024-04-26T00:30:35Z",
"aliases": [
"CVE-2024-31610"
],
"details": "File Upload vulnerability in the function for employees to upload avatars in Code-Projects Simple School Management System v1.0 allows attackers to run arbitrary code via upload of crafted file.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-434"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-25T22:15:08Z"
advisories/unreviewed/2024/05/GHSA-42xq-25q2-4fv9/GHSA-42xq-25q2-4fv9.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-42xq-25q2-4fv9",
"modified": "2024-05-22T18:30:40Z",
"modified": "2024-08-15T18:31:43Z",
"published": "2024-05-22T18:30:40Z",
"aliases": [
"CVE-2024-33228"
],
"details": "An issue in the component segwindrvx64.sys of Insyde Software Corp SEG Windows Driver v100.00.07.02 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-22T16:15:10Z"
advisories/unreviewed/2024/05/GHSA-4m89-pj37-27gm/GHSA-4m89-pj37-27gm.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4m89-pj37-27gm",
"modified": "2024-05-14T15:32:54Z",
"modified": "2024-08-15T18:31:43Z",
"published": "2024-05-14T15:32:54Z",
"aliases": [
"CVE-2024-30801"
],
"details": "SQL Injection vulnerability in Cloud based customer service management platform v.1.0.0 allows a local attacker to execute arbitrary code via a crafted payload to Login.asp component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-14T15:23:52Z"
advisories/unreviewed/2024/05/GHSA-4qq8-w3q5-56jf/GHSA-4qq8-w3q5-56jf.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4qq8-w3q5-56jf",
"modified": "2024-05-31T06:30:28Z",
"modified": "2024-08-15T18:31:43Z",
"published": "2024-05-31T06:30:28Z",
"aliases": [
"CVE-2024-36246"
],
"details": "Missing authorization vulnerability exists in Unifier and Unifier Cast Version.5.0 or later, and the patch \"20240527\" not applied. If this vulnerability is exploited, arbitrary code may be executed with LocalSystem privilege. As a result, a malicious program may be installed, data may be modified or deleted.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-862"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-31T06:15:12Z"
advisories/unreviewed/2024/05/GHSA-79f2-582m-m8p8/GHSA-79f2-582m-m8p8.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-79f2-582m-m8p8",
"modified": "2024-05-01T21:30:37Z",
"modified": "2024-08-15T18:31:43Z",
"published": "2024-05-01T21:30:37Z",
"aliases": [
"CVE-2024-25458"
],
"details": "An issue in CYCZCAM, SHIX ZHAO, SHIXCAM A9 Camera (circuit board identifier A9-48B-V1.0) firmware v.CYCAM_48B_BC01_v87_0903 allows a remote attacker to obtain sensitive information via a crafted request to a UDP port.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-01T19:15:22Z"
advisories/unreviewed/2024/05/GHSA-c39h-h953-m887/GHSA-c39h-h953-m887.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c39h-h953-m887",
"modified": "2024-05-20T18:31:22Z",
"modified": "2024-08-15T18:31:43Z",
"published": "2024-05-20T18:31:22Z",
"aliases": [
"CVE-2024-34948"
],
"details": "An issue in Quanxun Huiju Network Technology(Beijing) Co.,Ltd IK-Q3000 3.7.10 x64 Build202401261655 allows attackers to cause a Denial of Service (DoS) when attempting to make TCP connections.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-20T17:15:09Z"
advisories/unreviewed/2024/05/GHSA-cx9m-x7w8-76m2/GHSA-cx9m-x7w8-76m2.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cx9m-x7w8-76m2",
"modified": "2024-05-22T15:31:01Z",
"modified": "2024-08-15T18:31:43Z",
"published": "2024-05-22T15:31:01Z",
"aliases": [
"CVE-2024-33220"
],
"details": "An issue in the component AslO3_64.sys of ASUSTeK Computer Inc AISuite3 v3.03.36 3.03.36 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-782"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-22T15:15:28Z"
advisories/unreviewed/2024/05/GHSA-m82c-2r7m-qgcj/GHSA-m82c-2r7m-qgcj.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m82c-2r7m-qgcj",
"modified": "2024-05-18T00:30:40Z",
"modified": "2024-08-15T18:31:43Z",
"published": "2024-05-15T18:30:36Z",
"aliases": [
"CVE-2024-25743"
],
"details": "In the Linux kernel through 6.7.2, an untrusted hypervisor can inject virtual interrupts 0 and 14 at any point in time and can trigger the SIGFPE signal handler in userspace applications. This affects AMD SEV-SNP and AMD SEV-ES.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
@@ -43,7 +46,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-15T18:15:10Z"

Some files were not shown because too many files have changed in this diff Show More