netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-55vw-73x8-hh23
GHSA-cg96-p36q-cr63
GHSA-cpf3-42cm-v8x7
GHSA-hgw2-c4jg-qx4w
This commit is contained in:
advisory-database[bot]
2024-11-03 15:31:49 +00:00
parent fbc28263a8
commit 6fd29504b4
4 changed files with 216 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/11/GHSA-55vw-73x8-hh23/GHSA-55vw-73x8-hh23.json
+54
View File
@@ -0,0 +1,54 @@
{
"schema_version": "1.4.0",
"id": "GHSA-55vw-73x8-hh23",
"modified": "2024-11-03T15:30:29Z",
"published": "2024-11-03T15:30:29Z",
"aliases": [
"CVE-2024-10734"
],
"details": "A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been classified as critical. This affects an unknown part of the file /editPayment.php. The manipulation of the argument recipt_no leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10734"
},
{
"type": "WEB",
"url": "https://github.com/peteryang520/Cve-report/blob/main/SQLi-1.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.282903"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.282903"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.435410"
}
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-03T13:15:03Z"
}
}
advisories/unreviewed/2024/11/GHSA-cg96-p36q-cr63/GHSA-cg96-p36q-cr63.json
+54
View File
@@ -0,0 +1,54 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cg96-p36q-cr63",
"modified": "2024-11-03T15:30:30Z",
"published": "2024-11-03T15:30:30Z",
"aliases": [
"CVE-2024-10737"
],
"details": "A vulnerability classified as critical has been found in Codezips Free Exam Hall Seating Management System 1.0. Affected is an unknown function of the file /teacher.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10737"
},
{
"type": "WEB",
"url": "https://github.com/Scholar-XD/CVE/issues/1"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.282906"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.282906"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.435487"
}
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-03T15:15:03Z"
}
}
advisories/unreviewed/2024/11/GHSA-cpf3-42cm-v8x7/GHSA-cpf3-42cm-v8x7.json
+54
View File
@@ -0,0 +1,54 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cpf3-42cm-v8x7",
"modified": "2024-11-03T15:30:29Z",
"published": "2024-11-03T15:30:29Z",
"aliases": [
"CVE-2024-10736"
],
"details": "A vulnerability was found in Codezips Free Exam Hall Seating Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /student.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10736"
},
{
"type": "WEB",
"url": "https://github.com/EddieAy/cve/issues/3"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.282905"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.282905"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.435425"
}
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-03T15:15:03Z"
}
}
advisories/unreviewed/2024/11/GHSA-hgw2-c4jg-qx4w/GHSA-hgw2-c4jg-qx4w.json
+54
View File
@@ -0,0 +1,54 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hgw2-c4jg-qx4w",
"modified": "2024-11-03T15:30:29Z",
"published": "2024-11-03T15:30:29Z",
"aliases": [
"CVE-2024-10735"
],
"details": "A vulnerability was found in Project Worlds Life Insurance Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /editNominee.php. The manipulation of the argument nominee_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10735"
},
{
"type": "WEB",
"url": "https://github.com/GKb0y/Cve-report/blob/main/SQLi-life-insurance-management-system.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.282904"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.282904"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.435424"
}
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-03T14:15:13Z"
}
}