netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-06-10 21:31:59 +00:00
parent 3c89740d88
commit 713d56f031
52 changed files with 2177 additions and 13 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/05/GHSA-wq96-w9cg-v635/GHSA-wq96-w9cg-v635.json
+17 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wq96-w9cg-v635",
"modified": "2022-05-24T19:18:13Z",
"modified": "2024-06-10T21:30:34Z",
"published": "2022-05-24T19:18:13Z",
"aliases": [
"CVE-2021-35591"
],
"details": "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -18,6 +21,18 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-35591"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5MLAXYFLUDC636S46X34USCLDZAOFBM2"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PRCU3RTIPVKPC3GMC76YW7DJEXUEY6FG"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XF3ZFPL3JJ26YRUGXLXQZYJBLZV3WC2C"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5MLAXYFLUDC636S46X34USCLDZAOFBM2"
advisories/unreviewed/2024/02/GHSA-4vg6-rmxw-vq23/GHSA-4vg6-rmxw-vq23.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4vg6-rmxw-vq23",
"modified": "2024-02-15T06:31:36Z",
"modified": "2024-06-10T21:30:34Z",
"published": "2024-02-15T06:31:36Z",
"aliases": [
"CVE-2024-25941"
@@ -21,6 +21,10 @@
{
"type": "WEB",
"url": "https://security.freebsd.org/advisories/FreeBSD-SA-24:02.tty.asc"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240510-0003"
}
],
"database_specific": {
advisories/unreviewed/2024/05/GHSA-2w5m-pqcc-26xx/GHSA-2w5m-pqcc-26xx.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2w5m-pqcc-26xx",
"modified": "2024-05-01T03:30:31Z",
"modified": "2024-06-10T21:30:34Z",
"published": "2024-05-01T03:30:31Z",
"aliases": [
"CVE-2024-33764"
],
"details": "lunasvg v2.3.9 was discovered to contain a stack-overflow at lunasvg/source/element.h.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-01T03:15:07Z"
advisories/unreviewed/2024/05/GHSA-9cr4-w78w-p2qr/GHSA-9cr4-w78w-p2qr.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9cr4-w78w-p2qr",
"modified": "2024-06-10T18:30:58Z",
"modified": "2024-06-10T21:30:35Z",
"published": "2024-05-14T15:32:52Z",
"aliases": [
"CVE-2024-23229"
@@ -38,6 +38,10 @@
"type": "WEB",
"url": "https://support.apple.com/kb/HT214085"
},
{
"type": "WEB",
"url": "https://support.apple.com/kb/HT214105"
},
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2024/May/14"
advisories/unreviewed/2024/05/GHSA-9gxf-r468-r4c5/GHSA-9gxf-r468-r4c5.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9gxf-r468-r4c5",
"modified": "2024-06-10T18:30:58Z",
"modified": "2024-06-10T21:30:35Z",
"published": "2024-05-14T15:32:53Z",
"aliases": [
"CVE-2024-27789"
@@ -42,6 +42,10 @@
"type": "WEB",
"url": "https://support.apple.com/kb/HT214100"
},
{
"type": "WEB",
"url": "https://support.apple.com/kb/HT214105"
},
{
"type": "WEB",
"url": "https://support.apple.com/kb/HT214107"
advisories/unreviewed/2024/05/GHSA-fxqv-fm95-w2rw/GHSA-fxqv-fm95-w2rw.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fxqv-fm95-w2rw",
"modified": "2024-05-03T21:30:29Z",
"modified": "2024-06-10T21:30:34Z",
"published": "2024-05-03T15:30:55Z",
"aliases": [
"CVE-2024-33844"
],
"details": "The 'control' in Parrot ANAFI USA firmware 1.10.4 does not check the MAV_MISSION_TYPE(0, 1, 2, 255), which allows attacker to cut off the connection between a controller and the drone by sending MAVLink MISSION_COUNT command with a wrong MAV_MISSION_TYPE.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -39,7 +42,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-03T15:15:08Z"
advisories/unreviewed/2024/06/GHSA-26hp-vwv6-p4qg/GHSA-26hp-vwv6-p4qg.json
+47
View File
@@ -0,0 +1,47 @@
{
"schema_version": "1.4.0",
"id": "GHSA-26hp-vwv6-p4qg",
"modified": "2024-06-10T21:30:40Z",
"published": "2024-06-10T21:30:40Z",
"aliases": [
"CVE-2024-27855"
],
"details": "The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.5, macOS Ventura 13.6.7, iOS 17.5 and iPadOS 17.5, iOS 16.7.8 and iPadOS 16.7.8. A shortcut may be able to use sensitive data with certain actions without prompting the user.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27855"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214100"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214101"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214106"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214107"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-10T21:15:51Z"
}
}
advisories/unreviewed/2024/06/GHSA-39m6-6wm4-cm5w/GHSA-39m6-6wm4-cm5w.json
+63
View File
@@ -0,0 +1,63 @@
{
"schema_version": "1.4.0",
"id": "GHSA-39m6-6wm4-cm5w",
"modified": "2024-06-10T21:30:40Z",
"published": "2024-06-10T21:30:40Z",
"aliases": [
"CVE-2024-27840"
],
"details": "The issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5. An attacker that has already achieved kernel code execution may be able to bypass kernel memory protections.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27840"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214100"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214101"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214102"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214104"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214105"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214107"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214108"
},
{
"type": "WEB",
"url": "https://support.apple.com/kb/HT214108"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-10T21:15:51Z"
}
}
advisories/unreviewed/2024/06/GHSA-3cff-hppc-4g4r/GHSA-3cff-hppc-4g4r.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3cff-hppc-4g4r",
"modified": "2024-06-10T21:30:38Z",
"published": "2024-06-10T21:30:38Z",
"aliases": [
"CVE-2024-22279"
],
"details": "Improper handling of requests in Routing Release > v0.273.0 and <= v0.297.0 allows an unauthenticated attacker to degrade\n the service availability of the Cloud Foundry deployment if performed at scale.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-22279"
},
{
"type": "WEB",
"url": "https://www.cloudfoundry.org/blog/cve-2024-22279-gorouter-denial-of-service-attack"
}
],
"database_specific": {
"cwe_ids": [
"CWE-444"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-10T20:15:12Z"
}
}
advisories/unreviewed/2024/06/GHSA-49gg-c8j8-3j2c/GHSA-49gg-c8j8-3j2c.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-49gg-c8j8-3j2c",
"modified": "2024-06-10T21:30:40Z",
"published": "2024-06-10T21:30:40Z",
"aliases": [
"CVE-2024-33850"
],
"details": "Pexip Infinity before 34.1 has Improper Access Control for persons in a waiting room. They can see the conference roster list, and perform certain actions that should not be allowed before they are admitted to the meeting.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-33850"
},
{
"type": "WEB",
"url": "https://docs.pexip.com/admin/security_bulletins.htm"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-10T21:15:51Z"
}
}
advisories/unreviewed/2024/06/GHSA-596p-4hx4-frm9/GHSA-596p-4hx4-frm9.json
+55
View File
@@ -0,0 +1,55 @@
{
"schema_version": "1.4.0",
"id": "GHSA-596p-4hx4-frm9",
"modified": "2024-06-10T21:30:39Z",
"published": "2024-06-10T21:30:39Z",
"aliases": [
"CVE-2024-27811"
],
"details": "The issue was addressed with improved checks. This issue is fixed in tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to elevate privileges.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27811"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214101"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214102"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214104"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214106"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214108"
},
{
"type": "WEB",
"url": "https://support.apple.com/kb/HT214108"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-10T21:15:50Z"
}
}
advisories/unreviewed/2024/06/GHSA-6jq2-3f4f-qgw5/GHSA-6jq2-3f4f-qgw5.json
+59
View File
@@ -0,0 +1,59 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6jq2-3f4f-qgw5",
"modified": "2024-06-10T21:30:39Z",
"published": "2024-06-10T21:30:39Z",
"aliases": [
"CVE-2024-27805"
],
"details": "An issue was addressed with improved validation of environment variables. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to access sensitive user data.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27805"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214100"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214101"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214102"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214104"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214105"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214106"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214107"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-10T21:15:49Z"
}
}
advisories/unreviewed/2024/06/GHSA-7x84-wx2f-425f/GHSA-7x84-wx2f-425f.json
+55
View File
@@ -0,0 +1,55 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7x84-wx2f-425f",
"modified": "2024-06-10T21:30:40Z",
"published": "2024-06-10T21:30:40Z",
"aliases": [
"CVE-2024-27851"
],
"details": "The issue was addressed with improved bounds checks. This issue is fixed in tvOS 17.5, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. Processing maliciously crafted web content may lead to arbitrary code execution.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27851"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214101"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214102"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214103"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214104"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214106"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214108"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-10T21:15:51Z"
}
}
advisories/unreviewed/2024/06/GHSA-8pqc-r2rx-5hhc/GHSA-8pqc-r2rx-5hhc.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8pqc-r2rx-5hhc",
"modified": "2024-06-10T21:30:38Z",
"published": "2024-06-10T21:30:38Z",
"aliases": [
"CVE-2024-27792"
],
"details": "This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Sonoma 14.4. An app may be able to access user-sensitive data.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27792"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214084"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-10T20:15:13Z"
}
}
advisories/unreviewed/2024/06/GHSA-8vmh-j4m8-xhc4/GHSA-8vmh-j4m8-xhc4.json
+2 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8vmh-j4m8-xhc4",
"modified": "2024-06-04T15:30:58Z",
"modified": "2024-06-10T21:30:37Z",
"published": "2024-06-04T15:30:58Z",
"aliases": [
"CVE-2024-35629"
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-829",
"CWE-98"
],
"severity": "CRITICAL",
advisories/unreviewed/2024/06/GHSA-984g-34ww-rvq9/GHSA-984g-34ww-rvq9.json
+51
View File
@@ -0,0 +1,51 @@
{
"schema_version": "1.4.0",
"id": "GHSA-984g-34ww-rvq9",
"modified": "2024-06-10T21:30:40Z",
"published": "2024-06-10T21:30:40Z",
"aliases": [
"CVE-2024-27833"
],
"details": "An integer overflow was addressed with improved input validation. This issue is fixed in tvOS 17.5, iOS 16.7.8 and iPadOS 16.7.8, visionOS 1.2, Safari 17.5, iOS 17.5 and iPadOS 17.5. Processing maliciously crafted web content may lead to arbitrary code execution.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27833"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214100"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214101"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214102"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214103"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214108"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-10T21:15:51Z"
}
}
advisories/unreviewed/2024/06/GHSA-9p2j-9mm4-8r6m/GHSA-9p2j-9mm4-8r6m.json
+63
View File
@@ -0,0 +1,63 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9p2j-9mm4-8r6m",
"modified": "2024-06-10T21:30:40Z",
"published": "2024-06-10T21:30:40Z",
"aliases": [
"CVE-2024-27831"
],
"details": "An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Ventura 13.6.7, macOS Monterey 12.7.5, iOS 16.7.8 and iPadOS 16.7.8, tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5. Processing a file may lead to unexpected app termination or arbitrary code execution.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27831"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214100"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214101"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214102"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214105"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214106"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214107"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214108"
},
{
"type": "WEB",
"url": "https://support.apple.com/kb/HT214108"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-10T21:15:50Z"
}
}
advisories/unreviewed/2024/06/GHSA-c5vq-9hf6-g7cw/GHSA-c5vq-9hf6-g7cw.json
+55
View File
@@ -0,0 +1,55 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c5vq-9hf6-g7cw",
"modified": "2024-06-10T21:30:40Z",
"published": "2024-06-10T21:30:40Z",
"aliases": [
"CVE-2024-27832"
],
"details": "The issue was addressed with improved checks. This issue is fixed in tvOS 17.5, visionOS 1.2, iOS 17.5 and iPadOS 17.5, watchOS 10.5, macOS Sonoma 14.5. An app may be able to elevate privileges.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27832"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214101"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214102"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214104"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214106"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214108"
},
{
"type": "WEB",
"url": "https://support.apple.com/kb/HT214108"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-10T21:15:51Z"
}
}
advisories/unreviewed/2024/06/GHSA-cvp2-j7mv-gx79/GHSA-cvp2-j7mv-gx79.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cvp2-j7mv-gx79",
"modified": "2024-06-10T21:30:40Z",
"published": "2024-06-10T21:30:40Z",
"aliases": [
"CVE-2024-27845"
],
"details": "A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.5 and iPadOS 17.5. An app may be able to access Notes attachments.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27845"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214101"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-10T21:15:51Z"
}
}
advisories/unreviewed/2024/06/GHSA-fvqw-wg8v-hmcw/GHSA-fvqw-wg8v-hmcw.json
+39
View File
@@ -0,0 +1,39 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fvqw-wg8v-hmcw",
"modified": "2024-06-10T21:30:40Z",
"published": "2024-06-10T21:30:40Z",
"aliases": [
"CVE-2024-27848"
],
"details": "This issue was addressed with improved permissions checking. This issue is fixed in macOS Sonoma 14.5, iOS 17.5 and iPadOS 17.5. A malicious app may be able to gain root privileges.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27848"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214101"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214106"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-10T21:15:51Z"
}
}

Some files were not shown because too many files have changed in this diff Show More