diff --git a/advisories/github-reviewed/2022/08/GHSA-v725-c588-h936/GHSA-v725-c588-h936.json b/advisories/github-reviewed/2022/08/GHSA-v725-c588-h936/GHSA-v725-c588-h936.json index e20eec52235..8aae6273ef3 100644 --- a/advisories/github-reviewed/2022/08/GHSA-v725-c588-h936/GHSA-v725-c588-h936.json +++ b/advisories/github-reviewed/2022/08/GHSA-v725-c588-h936/GHSA-v725-c588-h936.json @@ -120,9 +120,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2024-05-14T21:27:20Z", diff --git a/advisories/github-reviewed/2024/05/GHSA-23j4-mw76-5v7h/GHSA-23j4-mw76-5v7h.json b/advisories/github-reviewed/2024/05/GHSA-23j4-mw76-5v7h/GHSA-23j4-mw76-5v7h.json index cc30d9d5b14..56beb7c268a 100644 --- a/advisories/github-reviewed/2024/05/GHSA-23j4-mw76-5v7h/GHSA-23j4-mw76-5v7h.json +++ b/advisories/github-reviewed/2024/05/GHSA-23j4-mw76-5v7h/GHSA-23j4-mw76-5v7h.json @@ -3,9 +3,7 @@ "id": "GHSA-23j4-mw76-5v7h", "modified": "2024-05-14T20:14:50Z", "published": "2024-05-14T20:14:49Z", - "aliases": [ - - ], + "aliases": [], "summary": "Scrapy allows redirect following in protocols other than HTTP", "details": "### Impact\n\nScrapy was following redirects regardless of the URL protocol, so redirects were working for `data://`, `file://`, `ftp://`, `s3://`, and any other scheme defined in the `DOWNLOAD_HANDLERS` setting.\n\nHowever, HTTP redirects should only work between URLs that use the `http://` or `https://` schemes.\n\nA malicious actor, given write access to the start requests (e.g. ability to define `start_urls`) of a spider and read access to the spider output, could exploit this vulnerability to:\n- Redirect to any local file using the `file://` scheme to read its contents.\n- Redirect to an `ftp://` URL of a malicious FTP server to obtain the FTP username and password configured in the spider or project.\n- Redirect to any `s3://` URL to read its content using the S3 credentials configured in the spider or project.\n\nFor `file://` and `s3://`, how the spider implements its parsing of input data into an output item determines what data would be vulnerable. A spider that always outputs the entire contents of a response would be completely vulnerable, while a spider that extracted only fragments from the response could significantly limit vulnerable data.\n\n### Patches\n\nUpgrade to Scrapy 2.11.2.\n\n### Workarounds\n\nReplace the built-in retry middlewares (`RedirectMiddleware` and `MetaRefreshMiddleware`) with custom ones that implement the fix from Scrapy 2.11.2, and verify that they work as intended.\n\n### References\n\nThis security issue was reported by @mvsantos at https://github.com/scrapy/scrapy/issues/457.\n", "severity": [ diff --git a/advisories/github-reviewed/2024/05/GHSA-jm3v-qxmh-hxwv/GHSA-jm3v-qxmh-hxwv.json b/advisories/github-reviewed/2024/05/GHSA-jm3v-qxmh-hxwv/GHSA-jm3v-qxmh-hxwv.json index 8183d8a9ca9..8a7f3fd8346 100644 --- a/advisories/github-reviewed/2024/05/GHSA-jm3v-qxmh-hxwv/GHSA-jm3v-qxmh-hxwv.json +++ b/advisories/github-reviewed/2024/05/GHSA-jm3v-qxmh-hxwv/GHSA-jm3v-qxmh-hxwv.json @@ -3,9 +3,7 @@ "id": "GHSA-jm3v-qxmh-hxwv", "modified": "2024-05-14T20:14:43Z", "published": "2024-05-14T20:14:43Z", - "aliases": [ - - ], + "aliases": [], "summary": "Scrapy's redirects ignoring scheme-specific proxy settings", "details": "### Impact\n\nWhen using system proxy settings, which are scheme-specific (i.e. specific to `http://` or `https://` URLs), Scrapy was not accounting for scheme changes during redirects.\n\nFor example, an HTTP request would use the proxy configured for HTTP and, when redirected to an HTTPS URL, the new HTTPS request would still use the proxy configured for HTTP instead of switching to the proxy configured for HTTPS. Same the other way around.\n\nIf you have different proxy configurations for HTTP and HTTPS in your system for security reasons (e.g., maybe you don’t want one of your proxy providers to be aware of the URLs that you visit with the other one), this would be a security issue.\n\n### Patches\n\nUpgrade to Scrapy 2.11.2.\n\n### Workarounds\n\nReplace the built-in retry middlewares (`RedirectMiddleware` and `MetaRefreshMiddleware`) and the `HttpProxyMiddleware` middleware with custom ones that implement the fix from Scrapy 2.11.2, and verify that they work as intended.\n\n### References\n\nThis security issue was reported by @redapple at https://github.com/scrapy/scrapy/issues/767.\n", "severity": [ @@ -54,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-05-14T20:14:43Z", diff --git a/advisories/unreviewed/2022/04/GHSA-22fg-6wp5-pc2m/GHSA-22fg-6wp5-pc2m.json b/advisories/unreviewed/2022/04/GHSA-22fg-6wp5-pc2m/GHSA-22fg-6wp5-pc2m.json index ebd8bac8336..388f83cbcca 100644 --- a/advisories/unreviewed/2022/04/GHSA-22fg-6wp5-pc2m/GHSA-22fg-6wp5-pc2m.json +++ b/advisories/unreviewed/2022/04/GHSA-22fg-6wp5-pc2m/GHSA-22fg-6wp5-pc2m.json @@ -7,12 +7,8 @@ "CVE-2003-1495" ], "details": "Unspecified vulnerability in the non-SSL web agent in various HP Management Agent products allows local users or remote attackers to gain privileges or cause a denial of service via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-22qh-55gx-68jh/GHSA-22qh-55gx-68jh.json b/advisories/unreviewed/2022/04/GHSA-22qh-55gx-68jh/GHSA-22qh-55gx-68jh.json index 0805143640e..809ca474a29 100644 --- a/advisories/unreviewed/2022/04/GHSA-22qh-55gx-68jh/GHSA-22qh-55gx-68jh.json +++ b/advisories/unreviewed/2022/04/GHSA-22qh-55gx-68jh/GHSA-22qh-55gx-68jh.json @@ -7,12 +7,8 @@ "CVE-2004-0054" ], "details": "Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS 11.3T through 12.2T allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-235v-wj7g-mwfc/GHSA-235v-wj7g-mwfc.json b/advisories/unreviewed/2022/04/GHSA-235v-wj7g-mwfc/GHSA-235v-wj7g-mwfc.json index 20d5d7ced9a..f0a277106e6 100644 --- a/advisories/unreviewed/2022/04/GHSA-235v-wj7g-mwfc/GHSA-235v-wj7g-mwfc.json +++ b/advisories/unreviewed/2022/04/GHSA-235v-wj7g-mwfc/GHSA-235v-wj7g-mwfc.json @@ -7,12 +7,8 @@ "CVE-2004-0049" ], "details": "Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-266c-jvwc-h898/GHSA-266c-jvwc-h898.json b/advisories/unreviewed/2022/04/GHSA-266c-jvwc-h898/GHSA-266c-jvwc-h898.json index 9fdd23b9d61..48d38aa8322 100644 --- a/advisories/unreviewed/2022/04/GHSA-266c-jvwc-h898/GHSA-266c-jvwc-h898.json +++ b/advisories/unreviewed/2022/04/GHSA-266c-jvwc-h898/GHSA-266c-jvwc-h898.json @@ -7,12 +7,8 @@ "CVE-2003-1484" ], "details": "Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service (crash) by creating a DHTML link that uses the AnchorClick \"A\" object with a blank href attribute.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-269x-55hg-8vqh/GHSA-269x-55hg-8vqh.json b/advisories/unreviewed/2022/04/GHSA-269x-55hg-8vqh/GHSA-269x-55hg-8vqh.json index 8f40a556d41..a1000cb6277 100644 --- a/advisories/unreviewed/2022/04/GHSA-269x-55hg-8vqh/GHSA-269x-55hg-8vqh.json +++ b/advisories/unreviewed/2022/04/GHSA-269x-55hg-8vqh/GHSA-269x-55hg-8vqh.json @@ -7,12 +7,8 @@ "CVE-2004-0104" ], "details": "Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-275v-77j5-j2rj/GHSA-275v-77j5-j2rj.json b/advisories/unreviewed/2022/04/GHSA-275v-77j5-j2rj/GHSA-275v-77j5-j2rj.json index 20b8647570c..2c97169e57e 100644 --- a/advisories/unreviewed/2022/04/GHSA-275v-77j5-j2rj/GHSA-275v-77j5-j2rj.json +++ b/advisories/unreviewed/2022/04/GHSA-275v-77j5-j2rj/GHSA-275v-77j5-j2rj.json @@ -7,12 +7,8 @@ "CVE-2004-0083" ], "details": "Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -104,9 +100,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-27qh-4m42-f89x/GHSA-27qh-4m42-f89x.json b/advisories/unreviewed/2022/04/GHSA-27qh-4m42-f89x/GHSA-27qh-4m42-f89x.json index 0dd378cef00..0d581f140d6 100644 --- a/advisories/unreviewed/2022/04/GHSA-27qh-4m42-f89x/GHSA-27qh-4m42-f89x.json +++ b/advisories/unreviewed/2022/04/GHSA-27qh-4m42-f89x/GHSA-27qh-4m42-f89x.json @@ -7,12 +7,8 @@ "CVE-2004-0001" ], "details": "Unknown vulnerability in the eflags checking in the 32-bit ptrace emulation for the Linux kernel on AMD64 systems allows local users to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-29xh-rgwm-2q75/GHSA-29xh-rgwm-2q75.json b/advisories/unreviewed/2022/04/GHSA-29xh-rgwm-2q75/GHSA-29xh-rgwm-2q75.json index b4b4e7ae951..e7ddd1294f1 100644 --- a/advisories/unreviewed/2022/04/GHSA-29xh-rgwm-2q75/GHSA-29xh-rgwm-2q75.json +++ b/advisories/unreviewed/2022/04/GHSA-29xh-rgwm-2q75/GHSA-29xh-rgwm-2q75.json @@ -7,12 +7,8 @@ "CVE-2004-0034" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.4.5 and earlier allow remote attackers to inject arbitrary HTML or web script via (1) the phorum_check_xss function in common.php, (2) the EditError variable in profile.php, and (3) the Error variable in login.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2cwh-mxjx-crhg/GHSA-2cwh-mxjx-crhg.json b/advisories/unreviewed/2022/04/GHSA-2cwh-mxjx-crhg/GHSA-2cwh-mxjx-crhg.json index 87932553dad..d91246f576a 100644 --- a/advisories/unreviewed/2022/04/GHSA-2cwh-mxjx-crhg/GHSA-2cwh-mxjx-crhg.json +++ b/advisories/unreviewed/2022/04/GHSA-2cwh-mxjx-crhg/GHSA-2cwh-mxjx-crhg.json @@ -7,12 +7,8 @@ "CVE-2003-1491" ], "details": "Kerio Personal Firewall (KPF) 2.1.4 has a default rule to accept incoming packets from DNS (UDP port 53), which allows remote attackers to bypass the firewall filters via packets with a source port of 53.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-2fv4-xh43-fr7c/GHSA-2fv4-xh43-fr7c.json b/advisories/unreviewed/2022/04/GHSA-2fv4-xh43-fr7c/GHSA-2fv4-xh43-fr7c.json index f0b71c3f222..756fb1dabaf 100644 --- a/advisories/unreviewed/2022/04/GHSA-2fv4-xh43-fr7c/GHSA-2fv4-xh43-fr7c.json +++ b/advisories/unreviewed/2022/04/GHSA-2fv4-xh43-fr7c/GHSA-2fv4-xh43-fr7c.json @@ -7,12 +7,8 @@ "CVE-2003-1463" ], "details": "Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to (1) determine the installation path by reading the contents of the Name parameter in a link, and (2) read arbitrary files via an absolute path in the Name parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-2fxf-8pw8-gh64/GHSA-2fxf-8pw8-gh64.json b/advisories/unreviewed/2022/04/GHSA-2fxf-8pw8-gh64/GHSA-2fxf-8pw8-gh64.json index 784f358a410..ce95b2a89aa 100644 --- a/advisories/unreviewed/2022/04/GHSA-2fxf-8pw8-gh64/GHSA-2fxf-8pw8-gh64.json +++ b/advisories/unreviewed/2022/04/GHSA-2fxf-8pw8-gh64/GHSA-2fxf-8pw8-gh64.json @@ -7,12 +7,8 @@ "CVE-2003-1590" ], "details": "Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 6.0 SP3 through SP5 on Windows allows remote attackers to cause a denial of service (daemon crash) via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2gm3-gg3v-jmmf/GHSA-2gm3-gg3v-jmmf.json b/advisories/unreviewed/2022/04/GHSA-2gm3-gg3v-jmmf/GHSA-2gm3-gg3v-jmmf.json index e506d2d3fc7..c68f59ba9d8 100644 --- a/advisories/unreviewed/2022/04/GHSA-2gm3-gg3v-jmmf/GHSA-2gm3-gg3v-jmmf.json +++ b/advisories/unreviewed/2022/04/GHSA-2gm3-gg3v-jmmf/GHSA-2gm3-gg3v-jmmf.json @@ -7,12 +7,8 @@ "CVE-2003-1583" ], "details": "Cross-site scripting (XSS) vulnerability in WebTrends allows remote attackers to inject arbitrary web script or HTML via a crafted client domain name, related to an \"Inverse Lookup Log Corruption (ILLC)\" issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-2jg3-c745-q45w/GHSA-2jg3-c745-q45w.json b/advisories/unreviewed/2022/04/GHSA-2jg3-c745-q45w/GHSA-2jg3-c745-q45w.json index 1371957cab9..0181896556f 100644 --- a/advisories/unreviewed/2022/04/GHSA-2jg3-c745-q45w/GHSA-2jg3-c745-q45w.json +++ b/advisories/unreviewed/2022/04/GHSA-2jg3-c745-q45w/GHSA-2jg3-c745-q45w.json @@ -7,12 +7,8 @@ "CVE-2003-1550" ], "details": "XOOPS 2.0, and possibly earlier versions, allows remote attackers to obtain sensitive information via an invalid xoopsOption parameter, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-2jrc-cvv2-h9r6/GHSA-2jrc-cvv2-h9r6.json b/advisories/unreviewed/2022/04/GHSA-2jrc-cvv2-h9r6/GHSA-2jrc-cvv2-h9r6.json index d0dccc28ad9..f97f519bc3f 100644 --- a/advisories/unreviewed/2022/04/GHSA-2jrc-cvv2-h9r6/GHSA-2jrc-cvv2-h9r6.json +++ b/advisories/unreviewed/2022/04/GHSA-2jrc-cvv2-h9r6/GHSA-2jrc-cvv2-h9r6.json @@ -7,12 +7,8 @@ "CVE-2003-1529" ], "details": "Directory traversal vulnerability in Seagull Software Systems J Walk application server 3.2C9, and other versions before 3.3c4, allows remote attackers to read arbitrary files via a \".%252e\" (encoded dot dot) in the URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-2mhq-qg26-p24h/GHSA-2mhq-qg26-p24h.json b/advisories/unreviewed/2022/04/GHSA-2mhq-qg26-p24h/GHSA-2mhq-qg26-p24h.json index fe31d0ea95c..f8d37cac772 100644 --- a/advisories/unreviewed/2022/04/GHSA-2mhq-qg26-p24h/GHSA-2mhq-qg26-p24h.json +++ b/advisories/unreviewed/2022/04/GHSA-2mhq-qg26-p24h/GHSA-2mhq-qg26-p24h.json @@ -7,12 +7,8 @@ "CVE-2004-0116" ], "details": "An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service (memory consumption) via an activation request with a large length field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2rqf-vpg2-x2pw/GHSA-2rqf-vpg2-x2pw.json b/advisories/unreviewed/2022/04/GHSA-2rqf-vpg2-x2pw/GHSA-2rqf-vpg2-x2pw.json index b7eaf9d51b8..a1992578b7b 100644 --- a/advisories/unreviewed/2022/04/GHSA-2rqf-vpg2-x2pw/GHSA-2rqf-vpg2-x2pw.json +++ b/advisories/unreviewed/2022/04/GHSA-2rqf-vpg2-x2pw/GHSA-2rqf-vpg2-x2pw.json @@ -7,12 +7,8 @@ "CVE-2003-1493" ], "details": "Memory leak in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service (memory exhaustion) via crafted TCP packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2w63-r3j2-6x9x/GHSA-2w63-r3j2-6x9x.json b/advisories/unreviewed/2022/04/GHSA-2w63-r3j2-6x9x/GHSA-2w63-r3j2-6x9x.json index 98cf5a4f977..cc84574cd78 100644 --- a/advisories/unreviewed/2022/04/GHSA-2w63-r3j2-6x9x/GHSA-2w63-r3j2-6x9x.json +++ b/advisories/unreviewed/2022/04/GHSA-2w63-r3j2-6x9x/GHSA-2w63-r3j2-6x9x.json @@ -7,12 +7,8 @@ "CVE-2003-1465" ], "details": "Directory traversal vulnerability in download.php in Phorum 3.4 through 3.4.2 allows remote attackers to read arbitrary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-2xrh-r8pp-65w4/GHSA-2xrh-r8pp-65w4.json b/advisories/unreviewed/2022/04/GHSA-2xrh-r8pp-65w4/GHSA-2xrh-r8pp-65w4.json index 3d7f194733a..bb6ca6a38c1 100644 --- a/advisories/unreviewed/2022/04/GHSA-2xrh-r8pp-65w4/GHSA-2xrh-r8pp-65w4.json +++ b/advisories/unreviewed/2022/04/GHSA-2xrh-r8pp-65w4/GHSA-2xrh-r8pp-65w4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2xwm-fqp4-pw7f/GHSA-2xwm-fqp4-pw7f.json b/advisories/unreviewed/2022/04/GHSA-2xwm-fqp4-pw7f/GHSA-2xwm-fqp4-pw7f.json index a3b0a7eb37a..ccb86dd9c23 100644 --- a/advisories/unreviewed/2022/04/GHSA-2xwm-fqp4-pw7f/GHSA-2xwm-fqp4-pw7f.json +++ b/advisories/unreviewed/2022/04/GHSA-2xwm-fqp4-pw7f/GHSA-2xwm-fqp4-pw7f.json @@ -7,12 +7,8 @@ "CVE-2004-0151" ], "details": "Unknown vulnerability in xitalk 1.1.11 and earlier allows local users to execute arbitrary commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-32fr-c24m-729q/GHSA-32fr-c24m-729q.json b/advisories/unreviewed/2022/04/GHSA-32fr-c24m-729q/GHSA-32fr-c24m-729q.json index 81c26d3b3df..f59bf37ffdd 100644 --- a/advisories/unreviewed/2022/04/GHSA-32fr-c24m-729q/GHSA-32fr-c24m-729q.json +++ b/advisories/unreviewed/2022/04/GHSA-32fr-c24m-729q/GHSA-32fr-c24m-729q.json @@ -7,12 +7,8 @@ "CVE-2003-1496" ], "details": "Unspecified vulnerability in CDE dtmailpr of HP Tru64 4.0F through 5.1B allows local users to gain privileges via unknown attack vectors. NOTE: due to lack of details in the vendor advisory, it is not clear whether this is the same issue as CVE-1999-0840.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-34cp-xmwv-8pxg/GHSA-34cp-xmwv-8pxg.json b/advisories/unreviewed/2022/04/GHSA-34cp-xmwv-8pxg/GHSA-34cp-xmwv-8pxg.json index 080b86ebbb1..3166748530b 100644 --- a/advisories/unreviewed/2022/04/GHSA-34cp-xmwv-8pxg/GHSA-34cp-xmwv-8pxg.json +++ b/advisories/unreviewed/2022/04/GHSA-34cp-xmwv-8pxg/GHSA-34cp-xmwv-8pxg.json @@ -7,12 +7,8 @@ "CVE-2003-1572" ], "details": "Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unauthorized memory locations via the ReadEnv class, as demonstrated by reading environment variables using modified .data and .size fields.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-34wm-6458-9xcj/GHSA-34wm-6458-9xcj.json b/advisories/unreviewed/2022/04/GHSA-34wm-6458-9xcj/GHSA-34wm-6458-9xcj.json index a4d1532b793..4215828c853 100644 --- a/advisories/unreviewed/2022/04/GHSA-34wm-6458-9xcj/GHSA-34wm-6458-9xcj.json +++ b/advisories/unreviewed/2022/04/GHSA-34wm-6458-9xcj/GHSA-34wm-6458-9xcj.json @@ -7,12 +7,8 @@ "CVE-2003-1490" ], "details": "SonicWall Pro running firmware 6.4.0.1 allows remote attackers to cause a denial of service (device reset) via a long HTTP POST to the internal interface, possibly due to a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-364g-x2w9-9jh7/GHSA-364g-x2w9-9jh7.json b/advisories/unreviewed/2022/04/GHSA-364g-x2w9-9jh7/GHSA-364g-x2w9-9jh7.json index 3d64dba3770..db872c327cc 100644 --- a/advisories/unreviewed/2022/04/GHSA-364g-x2w9-9jh7/GHSA-364g-x2w9-9jh7.json +++ b/advisories/unreviewed/2022/04/GHSA-364g-x2w9-9jh7/GHSA-364g-x2w9-9jh7.json @@ -7,12 +7,8 @@ "CVE-2004-0007" ], "details": "Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -100,9 +96,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-367v-52gr-ccrc/GHSA-367v-52gr-ccrc.json b/advisories/unreviewed/2022/04/GHSA-367v-52gr-ccrc/GHSA-367v-52gr-ccrc.json index 55f95a71173..34550979a58 100644 --- a/advisories/unreviewed/2022/04/GHSA-367v-52gr-ccrc/GHSA-367v-52gr-ccrc.json +++ b/advisories/unreviewed/2022/04/GHSA-367v-52gr-ccrc/GHSA-367v-52gr-ccrc.json @@ -7,12 +7,8 @@ "CVE-2004-0153" ], "details": "Multiple format string vulnerabilities in emil 2.1.0 and earlier may allow remote attackers to execute arbitrary code by triggering certain error messages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3855-3qhh-3pm8/GHSA-3855-3qhh-3pm8.json b/advisories/unreviewed/2022/04/GHSA-3855-3qhh-3pm8/GHSA-3855-3qhh-3pm8.json index f03a412cf8e..c41548c8ead 100644 --- a/advisories/unreviewed/2022/04/GHSA-3855-3qhh-3pm8/GHSA-3855-3qhh-3pm8.json +++ b/advisories/unreviewed/2022/04/GHSA-3855-3qhh-3pm8/GHSA-3855-3qhh-3pm8.json @@ -7,12 +7,8 @@ "CVE-2004-0044" ], "details": "Cisco Personal Assistant 1.4(1) and 1.4(2) disables password authentication when \"Allow Only Cisco CallManager Users\" is enabled and the Corporate Directory settings refer to the directory service being used by Cisco CallManager, which allows remote attackers to gain access with a valid username.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-395c-rvwq-3m9g/GHSA-395c-rvwq-3m9g.json b/advisories/unreviewed/2022/04/GHSA-395c-rvwq-3m9g/GHSA-395c-rvwq-3m9g.json index a0c2686cf55..57f79b6afc1 100644 --- a/advisories/unreviewed/2022/04/GHSA-395c-rvwq-3m9g/GHSA-395c-rvwq-3m9g.json +++ b/advisories/unreviewed/2022/04/GHSA-395c-rvwq-3m9g/GHSA-395c-rvwq-3m9g.json @@ -7,12 +7,8 @@ "CVE-2004-0064" ], "details": "The SuSEconfig.gnome-filesystem script for YaST in SuSE 9.0 allows local users to overwrite arbitrary files via a symlink attack on files within the tmp.SuSEconfig.gnome-filesystem.$RANDOM temporary directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3cq9-wp9j-2w5v/GHSA-3cq9-wp9j-2w5v.json b/advisories/unreviewed/2022/04/GHSA-3cq9-wp9j-2w5v/GHSA-3cq9-wp9j-2w5v.json index d1b834113ac..9810e959a66 100644 --- a/advisories/unreviewed/2022/04/GHSA-3cq9-wp9j-2w5v/GHSA-3cq9-wp9j-2w5v.json +++ b/advisories/unreviewed/2022/04/GHSA-3cq9-wp9j-2w5v/GHSA-3cq9-wp9j-2w5v.json @@ -7,12 +7,8 @@ "CVE-2003-1577" ], "details": "Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files, and conduct cross-site scripting (XSS) attacks involving the iPlanet Log Analyzer, via an HTTP request in conjunction with a crafted DNS response, related to an \"Inverse Lookup Log Corruption (ILLC)\" issue, a different vulnerability than CVE-2002-1315 and CVE-2002-1316.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-3g7g-v7fj-pq74/GHSA-3g7g-v7fj-pq74.json b/advisories/unreviewed/2022/04/GHSA-3g7g-v7fj-pq74/GHSA-3g7g-v7fj-pq74.json index 9736349acc9..83c578e51fa 100644 --- a/advisories/unreviewed/2022/04/GHSA-3g7g-v7fj-pq74/GHSA-3g7g-v7fj-pq74.json +++ b/advisories/unreviewed/2022/04/GHSA-3g7g-v7fj-pq74/GHSA-3g7g-v7fj-pq74.json @@ -7,12 +7,8 @@ "CVE-2003-1595" ], "details": "NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly perform \"intruder detection,\" which has unspecified impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3g7r-cgj9-56wc/GHSA-3g7r-cgj9-56wc.json b/advisories/unreviewed/2022/04/GHSA-3g7r-cgj9-56wc/GHSA-3g7r-cgj9-56wc.json index dfd0732a006..779570c83ea 100644 --- a/advisories/unreviewed/2022/04/GHSA-3g7r-cgj9-56wc/GHSA-3g7r-cgj9-56wc.json +++ b/advisories/unreviewed/2022/04/GHSA-3g7r-cgj9-56wc/GHSA-3g7r-cgj9-56wc.json @@ -7,12 +7,8 @@ "CVE-2004-0059" ], "details": "Directory traversal vulnerability in upload capability of WWW File Share Pro 2.42 and earlier allows remote attackers to overwrite arbitrary files via .. (dot dot) sequences in the filename parameter of a Content-Disposition: header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3jqm-hvwr-82mr/GHSA-3jqm-hvwr-82mr.json b/advisories/unreviewed/2022/04/GHSA-3jqm-hvwr-82mr/GHSA-3jqm-hvwr-82mr.json index 32b094e7d17..9a4c273bec3 100644 --- a/advisories/unreviewed/2022/04/GHSA-3jqm-hvwr-82mr/GHSA-3jqm-hvwr-82mr.json +++ b/advisories/unreviewed/2022/04/GHSA-3jqm-hvwr-82mr/GHSA-3jqm-hvwr-82mr.json @@ -7,12 +7,8 @@ "CVE-2003-1542" ], "details": "Directory traversal vulnerability in plugins/file.php in phpWebFileManager before 0.4.4 allows remote attackers to read arbitrary files via a .. (dot dot) in the fm_path parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-3mq7-3ggv-qpgc/GHSA-3mq7-3ggv-qpgc.json b/advisories/unreviewed/2022/04/GHSA-3mq7-3ggv-qpgc/GHSA-3mq7-3ggv-qpgc.json index 465b9b66739..367d2a2c695 100644 --- a/advisories/unreviewed/2022/04/GHSA-3mq7-3ggv-qpgc/GHSA-3mq7-3ggv-qpgc.json +++ b/advisories/unreviewed/2022/04/GHSA-3mq7-3ggv-qpgc/GHSA-3mq7-3ggv-qpgc.json @@ -7,12 +7,8 @@ "CVE-2003-1506" ], "details": "Cross-site scripting (XSS) vulnerability in dansguardian.pl in Adelix CensorNet 3.0 through 3.2 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into the DENIEDURL parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-3q32-c332-68rh/GHSA-3q32-c332-68rh.json b/advisories/unreviewed/2022/04/GHSA-3q32-c332-68rh/GHSA-3q32-c332-68rh.json index 261c486b0bd..087a16eef1c 100644 --- a/advisories/unreviewed/2022/04/GHSA-3q32-c332-68rh/GHSA-3q32-c332-68rh.json +++ b/advisories/unreviewed/2022/04/GHSA-3q32-c332-68rh/GHSA-3q32-c332-68rh.json @@ -7,12 +7,8 @@ "CVE-2004-0169" ], "details": "QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (crash) via DESCRIBE requests with long User-Agent fields, which causes an Assert error to be triggered in the BufferIsFull function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-42jh-4jqc-82pf/GHSA-42jh-4jqc-82pf.json b/advisories/unreviewed/2022/04/GHSA-42jh-4jqc-82pf/GHSA-42jh-4jqc-82pf.json index 77e4204b8dc..d2faba51003 100644 --- a/advisories/unreviewed/2022/04/GHSA-42jh-4jqc-82pf/GHSA-42jh-4jqc-82pf.json +++ b/advisories/unreviewed/2022/04/GHSA-42jh-4jqc-82pf/GHSA-42jh-4jqc-82pf.json @@ -7,12 +7,8 @@ "CVE-2004-0070" ], "details": "PHP remote file inclusion vulnerability in module.php for ezContents allows remote attackers to execute arbitrary PHP code by modifying the link parameter to reference a URL on a remote web server that contains the code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-43jf-2v7v-vx35/GHSA-43jf-2v7v-vx35.json b/advisories/unreviewed/2022/04/GHSA-43jf-2v7v-vx35/GHSA-43jf-2v7v-vx35.json index e1ebe8cc596..b7df72eef58 100644 --- a/advisories/unreviewed/2022/04/GHSA-43jf-2v7v-vx35/GHSA-43jf-2v7v-vx35.json +++ b/advisories/unreviewed/2022/04/GHSA-43jf-2v7v-vx35/GHSA-43jf-2v7v-vx35.json @@ -7,12 +7,8 @@ "CVE-2003-1520" ], "details": "SQL injection vulnerability in FuzzyMonkey My Classifieds 2.11 allows remote attackers to execute arbitrary SQL commands via the email parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-44v5-465m-gw48/GHSA-44v5-465m-gw48.json b/advisories/unreviewed/2022/04/GHSA-44v5-465m-gw48/GHSA-44v5-465m-gw48.json index d539bf9fa87..9c06e9f96cb 100644 --- a/advisories/unreviewed/2022/04/GHSA-44v5-465m-gw48/GHSA-44v5-465m-gw48.json +++ b/advisories/unreviewed/2022/04/GHSA-44v5-465m-gw48/GHSA-44v5-465m-gw48.json @@ -7,12 +7,8 @@ "CVE-2004-0166" ], "details": "Unknown vulnerability in Safari web browser for Mac OS X 10.2.8 related to \"the display of URLs in the status bar.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-45gv-7qfm-2g52/GHSA-45gv-7qfm-2g52.json b/advisories/unreviewed/2022/04/GHSA-45gv-7qfm-2g52/GHSA-45gv-7qfm-2g52.json index 9b4151dc725..e35e19ee15d 100644 --- a/advisories/unreviewed/2022/04/GHSA-45gv-7qfm-2g52/GHSA-45gv-7qfm-2g52.json +++ b/advisories/unreviewed/2022/04/GHSA-45gv-7qfm-2g52/GHSA-45gv-7qfm-2g52.json @@ -7,12 +7,8 @@ "CVE-2004-0095" ], "details": "McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory consumption and crash) and possibly execute arbitrary code via an HTTP POST request with an invalid Content-Length value, possibly triggering a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-45hx-52x3-7mvr/GHSA-45hx-52x3-7mvr.json b/advisories/unreviewed/2022/04/GHSA-45hx-52x3-7mvr/GHSA-45hx-52x3-7mvr.json index e64147864e8..d8cee911735 100644 --- a/advisories/unreviewed/2022/04/GHSA-45hx-52x3-7mvr/GHSA-45hx-52x3-7mvr.json +++ b/advisories/unreviewed/2022/04/GHSA-45hx-52x3-7mvr/GHSA-45hx-52x3-7mvr.json @@ -7,12 +7,8 @@ "CVE-2003-1531" ], "details": "Cross-site scripting (XSS) vulnerability in testcgi.exe in Lilikoi Software Ceilidh 2.70 and earlier allows remote attackers to inject arbitrary web script or HTML via the query string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-4642-rff9-864v/GHSA-4642-rff9-864v.json b/advisories/unreviewed/2022/04/GHSA-4642-rff9-864v/GHSA-4642-rff9-864v.json index 306bb168bd2..3a09ca3880d 100644 --- a/advisories/unreviewed/2022/04/GHSA-4642-rff9-864v/GHSA-4642-rff9-864v.json +++ b/advisories/unreviewed/2022/04/GHSA-4642-rff9-864v/GHSA-4642-rff9-864v.json @@ -7,12 +7,8 @@ "CVE-2004-0084" ], "details": "Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CVE-2004-0083 and CVE-2004-0106.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-46gf-22qm-927w/GHSA-46gf-22qm-927w.json b/advisories/unreviewed/2022/04/GHSA-46gf-22qm-927w/GHSA-46gf-22qm-927w.json index aac5a764ccb..af43108b038 100644 --- a/advisories/unreviewed/2022/04/GHSA-46gf-22qm-927w/GHSA-46gf-22qm-927w.json +++ b/advisories/unreviewed/2022/04/GHSA-46gf-22qm-927w/GHSA-46gf-22qm-927w.json @@ -7,12 +7,8 @@ "CVE-2003-1518" ], "details": "Adiscon WinSyslog 4.21 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a long syslog message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-4cwx-r6vp-5886/GHSA-4cwx-r6vp-5886.json b/advisories/unreviewed/2022/04/GHSA-4cwx-r6vp-5886/GHSA-4cwx-r6vp-5886.json index 2ee9068ca15..880044dcc60 100644 --- a/advisories/unreviewed/2022/04/GHSA-4cwx-r6vp-5886/GHSA-4cwx-r6vp-5886.json +++ b/advisories/unreviewed/2022/04/GHSA-4cwx-r6vp-5886/GHSA-4cwx-r6vp-5886.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-4f3f-289c-pj49/GHSA-4f3f-289c-pj49.json b/advisories/unreviewed/2022/04/GHSA-4f3f-289c-pj49/GHSA-4f3f-289c-pj49.json index 004d49e5f4c..3d432c8fa3c 100644 --- a/advisories/unreviewed/2022/04/GHSA-4f3f-289c-pj49/GHSA-4f3f-289c-pj49.json +++ b/advisories/unreviewed/2022/04/GHSA-4f3f-289c-pj49/GHSA-4f3f-289c-pj49.json @@ -7,12 +7,8 @@ "CVE-2003-1552" ], "details": "Unrestricted file upload vulnerability in uploader.php in Uploader 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in uploads/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4f8m-5f89-p953/GHSA-4f8m-5f89-p953.json b/advisories/unreviewed/2022/04/GHSA-4f8m-5f89-p953/GHSA-4f8m-5f89-p953.json index a9e841048f8..c319873c299 100644 --- a/advisories/unreviewed/2022/04/GHSA-4f8m-5f89-p953/GHSA-4f8m-5f89-p953.json +++ b/advisories/unreviewed/2022/04/GHSA-4f8m-5f89-p953/GHSA-4f8m-5f89-p953.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4fhm-3w62-3q2q/GHSA-4fhm-3w62-3q2q.json b/advisories/unreviewed/2022/04/GHSA-4fhm-3w62-3q2q/GHSA-4fhm-3w62-3q2q.json index c368c5bcc27..e8ff8f68ce7 100644 --- a/advisories/unreviewed/2022/04/GHSA-4fhm-3w62-3q2q/GHSA-4fhm-3w62-3q2q.json +++ b/advisories/unreviewed/2022/04/GHSA-4fhm-3w62-3q2q/GHSA-4fhm-3w62-3q2q.json @@ -7,12 +7,8 @@ "CVE-2003-1580" ], "details": "The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a logging format that does not identify whether a dotted quad represents an unresolved IP address, which allows remote attackers to spoof IP addresses via crafted DNS responses containing numerical top-level domains, as demonstrated by a forged 123.123.123.123 domain name, related to an \"Inverse Lookup Log Corruption (ILLC)\" issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4gxh-qwq2-5fp6/GHSA-4gxh-qwq2-5fp6.json b/advisories/unreviewed/2022/04/GHSA-4gxh-qwq2-5fp6/GHSA-4gxh-qwq2-5fp6.json index e98c633fa9b..7e2deece75d 100644 --- a/advisories/unreviewed/2022/04/GHSA-4gxh-qwq2-5fp6/GHSA-4gxh-qwq2-5fp6.json +++ b/advisories/unreviewed/2022/04/GHSA-4gxh-qwq2-5fp6/GHSA-4gxh-qwq2-5fp6.json @@ -7,12 +7,8 @@ "CVE-2004-0072" ], "details": "Directory traversal vulnerability in Accipiter Direct Server 6.0 allows remote attackers to read arbitrary files via encoded \\.. (backslash .., \"%5c%2e%2e\") sequences in an HTTP request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4j42-4xc7-mrvv/GHSA-4j42-4xc7-mrvv.json b/advisories/unreviewed/2022/04/GHSA-4j42-4xc7-mrvv/GHSA-4j42-4xc7-mrvv.json index 5d962279eb2..70da2271dfa 100644 --- a/advisories/unreviewed/2022/04/GHSA-4j42-4xc7-mrvv/GHSA-4j42-4xc7-mrvv.json +++ b/advisories/unreviewed/2022/04/GHSA-4j42-4xc7-mrvv/GHSA-4j42-4xc7-mrvv.json @@ -7,12 +7,8 @@ "CVE-2004-0219" ], "details": "isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a malformed IPSEC SA payload, as demonstrated by the Striker ISAKMP Protocol Test Suite.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4ph6-9589-22h5/GHSA-4ph6-9589-22h5.json b/advisories/unreviewed/2022/04/GHSA-4ph6-9589-22h5/GHSA-4ph6-9589-22h5.json index 5ab1b4b9119..898d73c9c74 100644 --- a/advisories/unreviewed/2022/04/GHSA-4ph6-9589-22h5/GHSA-4ph6-9589-22h5.json +++ b/advisories/unreviewed/2022/04/GHSA-4ph6-9589-22h5/GHSA-4ph6-9589-22h5.json @@ -7,12 +7,8 @@ "CVE-2003-1553" ], "details": "Haakon Nilsen Simple Internet Publishing System (SIPS) 0.2.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain password and other user information via a direct request to a user-specific configuration directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-4wgw-wrrp-2xvr/GHSA-4wgw-wrrp-2xvr.json b/advisories/unreviewed/2022/04/GHSA-4wgw-wrrp-2xvr/GHSA-4wgw-wrrp-2xvr.json index c157fc71373..44eb14203bd 100644 --- a/advisories/unreviewed/2022/04/GHSA-4wgw-wrrp-2xvr/GHSA-4wgw-wrrp-2xvr.json +++ b/advisories/unreviewed/2022/04/GHSA-4wgw-wrrp-2xvr/GHSA-4wgw-wrrp-2xvr.json @@ -7,12 +7,8 @@ "CVE-2003-1503" ], "details": "Buffer overflow in AOL Instant Messenger (AIM) 5.2.3292 allows remote attackers to execute arbitrary code via an aim:getfile URL with a long screen name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-4xgg-phxv-52xc/GHSA-4xgg-phxv-52xc.json b/advisories/unreviewed/2022/04/GHSA-4xgg-phxv-52xc/GHSA-4xgg-phxv-52xc.json index 5a6f40093eb..a8faccf6642 100644 --- a/advisories/unreviewed/2022/04/GHSA-4xgg-phxv-52xc/GHSA-4xgg-phxv-52xc.json +++ b/advisories/unreviewed/2022/04/GHSA-4xgg-phxv-52xc/GHSA-4xgg-phxv-52xc.json @@ -7,12 +7,8 @@ "CVE-2003-1483" ], "details": "FlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and gain access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4xj4-w396-8jxq/GHSA-4xj4-w396-8jxq.json b/advisories/unreviewed/2022/04/GHSA-4xj4-w396-8jxq/GHSA-4xj4-w396-8jxq.json index 6a31529695c..1fc88317a2e 100644 --- a/advisories/unreviewed/2022/04/GHSA-4xj4-w396-8jxq/GHSA-4xj4-w396-8jxq.json +++ b/advisories/unreviewed/2022/04/GHSA-4xj4-w396-8jxq/GHSA-4xj4-w396-8jxq.json @@ -7,12 +7,8 @@ "CVE-2004-0033" ], "details": "admin.php in PHPGEDVIEW 2.61 allows remote attackers to obtain sensitive information via an action parameter with a phpinfo command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-525w-wcmh-7q9w/GHSA-525w-wcmh-7q9w.json b/advisories/unreviewed/2022/04/GHSA-525w-wcmh-7q9w/GHSA-525w-wcmh-7q9w.json index 670dc0a9fb6..a507d04f6d9 100644 --- a/advisories/unreviewed/2022/04/GHSA-525w-wcmh-7q9w/GHSA-525w-wcmh-7q9w.json +++ b/advisories/unreviewed/2022/04/GHSA-525w-wcmh-7q9w/GHSA-525w-wcmh-7q9w.json @@ -7,12 +7,8 @@ "CVE-2003-1474" ], "details": "slashem-tty in the FreeBSD Ports Collection is installed with write permissions for the games group, which allows local users with group games privileges to modify slashem-tty and execute arbitrary code as other users, as demonstrated using a separate vulnerability in LTris.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-526h-5vpr-46jx/GHSA-526h-5vpr-46jx.json b/advisories/unreviewed/2022/04/GHSA-526h-5vpr-46jx/GHSA-526h-5vpr-46jx.json index cad8f74ee4c..63f5baf48bb 100644 --- a/advisories/unreviewed/2022/04/GHSA-526h-5vpr-46jx/GHSA-526h-5vpr-46jx.json +++ b/advisories/unreviewed/2022/04/GHSA-526h-5vpr-46jx/GHSA-526h-5vpr-46jx.json @@ -7,12 +7,8 @@ "CVE-2003-1476" ], "details": "Cerberus FTP Server 2.1 stores usernames and passwords in plaintext, which could allow local users to gain access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-526q-qjvf-mf88/GHSA-526q-qjvf-mf88.json b/advisories/unreviewed/2022/04/GHSA-526q-qjvf-mf88/GHSA-526q-qjvf-mf88.json index ef3db5ac3d3..31140f9b057 100644 --- a/advisories/unreviewed/2022/04/GHSA-526q-qjvf-mf88/GHSA-526q-qjvf-mf88.json +++ b/advisories/unreviewed/2022/04/GHSA-526q-qjvf-mf88/GHSA-526q-qjvf-mf88.json @@ -7,12 +7,8 @@ "CVE-2004-0130" ], "details": "login.php in phpGedView 2.65 and earlier allows remote attackers to obtain sensitive information via an HTTP request to login.php that does not contain the required username or password parameters, which causes the information to be leaked in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-52qc-m22c-v6mw/GHSA-52qc-m22c-v6mw.json b/advisories/unreviewed/2022/04/GHSA-52qc-m22c-v6mw/GHSA-52qc-m22c-v6mw.json index fc5c9e52410..aaba44c0e46 100644 --- a/advisories/unreviewed/2022/04/GHSA-52qc-m22c-v6mw/GHSA-52qc-m22c-v6mw.json +++ b/advisories/unreviewed/2022/04/GHSA-52qc-m22c-v6mw/GHSA-52qc-m22c-v6mw.json @@ -7,12 +7,8 @@ "CVE-2003-1499" ], "details": "Directory traversal vulnerability in index.php in Bytehoard 0.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the infolder parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-52vj-29px-76m7/GHSA-52vj-29px-76m7.json b/advisories/unreviewed/2022/04/GHSA-52vj-29px-76m7/GHSA-52vj-29px-76m7.json index 63fda57b113..772996e71b9 100644 --- a/advisories/unreviewed/2022/04/GHSA-52vj-29px-76m7/GHSA-52vj-29px-76m7.json +++ b/advisories/unreviewed/2022/04/GHSA-52vj-29px-76m7/GHSA-52vj-29px-76m7.json @@ -7,12 +7,8 @@ "CVE-2003-1567" ], "details": "The undocumented TRACK method in Microsoft Internet Information Services (IIS) 5.0 returns the content of the original request in the body of the response, which makes it easier for remote attackers to steal cookies and authentication credentials, or bypass the HttpOnly protection mechanism, by using TRACK to read the contents of the HTTP headers that are returned in the response, a technique that is similar to cross-site tracing (XST) using HTTP TRACE.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-53mq-phmq-8frp/GHSA-53mq-phmq-8frp.json b/advisories/unreviewed/2022/04/GHSA-53mq-phmq-8frp/GHSA-53mq-phmq-8frp.json index d3777a3ffe2..86e2ba9ad42 100644 --- a/advisories/unreviewed/2022/04/GHSA-53mq-phmq-8frp/GHSA-53mq-phmq-8frp.json +++ b/advisories/unreviewed/2022/04/GHSA-53mq-phmq-8frp/GHSA-53mq-phmq-8frp.json @@ -7,12 +7,8 @@ "CVE-2004-0043" ], "details": "Buffer overflow in Yahoo Instant Messenger 5.6.0.1351 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long filename in the download feature.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-54xc-mqg7-ffp6/GHSA-54xc-mqg7-ffp6.json b/advisories/unreviewed/2022/04/GHSA-54xc-mqg7-ffp6/GHSA-54xc-mqg7-ffp6.json index 36793a94048..e7d33d79bb6 100644 --- a/advisories/unreviewed/2022/04/GHSA-54xc-mqg7-ffp6/GHSA-54xc-mqg7-ffp6.json +++ b/advisories/unreviewed/2022/04/GHSA-54xc-mqg7-ffp6/GHSA-54xc-mqg7-ffp6.json @@ -7,12 +7,8 @@ "CVE-2003-1486" ], "details": "Phorum 3.4 through 3.4.2 allows remote attackers to obtain the full path of the web server via an incorrect HTTP request to (1) smileys.php, (2) quick_listrss.php, (3) purge.php, (4) news.php, (5) memberlist.php, (6) forum_listrss.php, (7) forum_list_rdf.php, (8) forum_list.php, or (9) move.php, which leaks the information in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-5579-vjr8-c2mq/GHSA-5579-vjr8-c2mq.json b/advisories/unreviewed/2022/04/GHSA-5579-vjr8-c2mq/GHSA-5579-vjr8-c2mq.json index d43d4c51fe9..61b46f0bd8f 100644 --- a/advisories/unreviewed/2022/04/GHSA-5579-vjr8-c2mq/GHSA-5579-vjr8-c2mq.json +++ b/advisories/unreviewed/2022/04/GHSA-5579-vjr8-c2mq/GHSA-5579-vjr8-c2mq.json @@ -7,12 +7,8 @@ "CVE-2003-1571" ], "details": "Web Wiz Guestbook 6.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database and obtain sensitive information via a direct request for database/WWGguestbook.mdb. NOTE: it was later reported that 8.21 is also affected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-55m4-qh5j-9w5g/GHSA-55m4-qh5j-9w5g.json b/advisories/unreviewed/2022/04/GHSA-55m4-qh5j-9w5g/GHSA-55m4-qh5j-9w5g.json index 4b1600cdb09..bea5f5cd6af 100644 --- a/advisories/unreviewed/2022/04/GHSA-55m4-qh5j-9w5g/GHSA-55m4-qh5j-9w5g.json +++ b/advisories/unreviewed/2022/04/GHSA-55m4-qh5j-9w5g/GHSA-55m4-qh5j-9w5g.json @@ -7,12 +7,8 @@ "CVE-2003-1510" ], "details": "TinyWeb 1.9 allows remote attackers to cause a denial of service (CPU consumption) via a \".%00.\" in an HTTP GET request to the cgi-bin directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-55mw-fq46-6wvv/GHSA-55mw-fq46-6wvv.json b/advisories/unreviewed/2022/04/GHSA-55mw-fq46-6wvv/GHSA-55mw-fq46-6wvv.json index b1eb96d2498..ba54f0671be 100644 --- a/advisories/unreviewed/2022/04/GHSA-55mw-fq46-6wvv/GHSA-55mw-fq46-6wvv.json +++ b/advisories/unreviewed/2022/04/GHSA-55mw-fq46-6wvv/GHSA-55mw-fq46-6wvv.json @@ -7,12 +7,8 @@ "CVE-2004-0014" ], "details": "Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-56v9-rwmw-jjw7/GHSA-56v9-rwmw-jjw7.json b/advisories/unreviewed/2022/04/GHSA-56v9-rwmw-jjw7/GHSA-56v9-rwmw-jjw7.json index 07610bca0a8..3c30b06a17e 100644 --- a/advisories/unreviewed/2022/04/GHSA-56v9-rwmw-jjw7/GHSA-56v9-rwmw-jjw7.json +++ b/advisories/unreviewed/2022/04/GHSA-56v9-rwmw-jjw7/GHSA-56v9-rwmw-jjw7.json @@ -7,12 +7,8 @@ "CVE-2003-1527" ], "details": "BlackICE Defender 2.9.cap and Server Protection 3.5.cdf, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-588f-j68x-prff/GHSA-588f-j68x-prff.json b/advisories/unreviewed/2022/04/GHSA-588f-j68x-prff/GHSA-588f-j68x-prff.json index 5f4a234e0c5..7f8ca5fd231 100644 --- a/advisories/unreviewed/2022/04/GHSA-588f-j68x-prff/GHSA-588f-j68x-prff.json +++ b/advisories/unreviewed/2022/04/GHSA-588f-j68x-prff/GHSA-588f-j68x-prff.json @@ -7,12 +7,8 @@ "CVE-2004-0047" ], "details": "Multiple programs in trr19 1.0 do not properly drop privileges before executing a system command, which could allow local users to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-596r-x9qj-4m68/GHSA-596r-x9qj-4m68.json b/advisories/unreviewed/2022/04/GHSA-596r-x9qj-4m68/GHSA-596r-x9qj-4m68.json index 3320ba51a20..ab27b8845c9 100644 --- a/advisories/unreviewed/2022/04/GHSA-596r-x9qj-4m68/GHSA-596r-x9qj-4m68.json +++ b/advisories/unreviewed/2022/04/GHSA-596r-x9qj-4m68/GHSA-596r-x9qj-4m68.json @@ -7,12 +7,8 @@ "CVE-2003-1534" ], "details": "Cross-site scripting (XSS) vulnerability in jgb.php3 in Justice Guestbook 1.3 allows remote attackers to inject arbitrary web script or HTML via the (1) name, (2) homepage, (3) aim, (4) yim, (5) location, and (6) comment variables.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-598h-cgm6-2m38/GHSA-598h-cgm6-2m38.json b/advisories/unreviewed/2022/04/GHSA-598h-cgm6-2m38/GHSA-598h-cgm6-2m38.json index b1d412723ee..da1c2a6a7b7 100644 --- a/advisories/unreviewed/2022/04/GHSA-598h-cgm6-2m38/GHSA-598h-cgm6-2m38.json +++ b/advisories/unreviewed/2022/04/GHSA-598h-cgm6-2m38/GHSA-598h-cgm6-2m38.json @@ -7,12 +7,8 @@ "CVE-2003-1575" ], "details": "VERITAS File System (VxFS) 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9 does not properly implement inheritance of default ACLs in certain circumstances related to the characteristics of a directory inode, which allows local users to bypass intended file permissions by accessing a file on a VxFS filesystem.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5c22-3h8f-xw4v/GHSA-5c22-3h8f-xw4v.json b/advisories/unreviewed/2022/04/GHSA-5c22-3h8f-xw4v/GHSA-5c22-3h8f-xw4v.json index ab5514f3da2..86a16bd8c2c 100644 --- a/advisories/unreviewed/2022/04/GHSA-5c22-3h8f-xw4v/GHSA-5c22-3h8f-xw4v.json +++ b/advisories/unreviewed/2022/04/GHSA-5c22-3h8f-xw4v/GHSA-5c22-3h8f-xw4v.json @@ -7,12 +7,8 @@ "CVE-2004-0032" ], "details": "Cross-site scripting (XSS) vulnerability in search.php in PHPGEDVIEW 2.61 allows remote attackers to inject arbitrary HTML and web script via the firstname parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5c3g-wxqf-8wrg/GHSA-5c3g-wxqf-8wrg.json b/advisories/unreviewed/2022/04/GHSA-5c3g-wxqf-8wrg/GHSA-5c3g-wxqf-8wrg.json index efc51dd8f5f..ec1c6a70bdf 100644 --- a/advisories/unreviewed/2022/04/GHSA-5c3g-wxqf-8wrg/GHSA-5c3g-wxqf-8wrg.json +++ b/advisories/unreviewed/2022/04/GHSA-5c3g-wxqf-8wrg/GHSA-5c3g-wxqf-8wrg.json @@ -7,12 +7,8 @@ "CVE-2003-1497" ], "details": "Buffer overflow in the system log viewer of Linksys BEFSX41 1.44.3 allows remote attackers to cause a denial of service via an HTTP request with a long Log_Page_Num variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-5f9p-654c-vw5v/GHSA-5f9p-654c-vw5v.json b/advisories/unreviewed/2022/04/GHSA-5f9p-654c-vw5v/GHSA-5f9p-654c-vw5v.json index 60c4a9a6d39..88c8c13a4fb 100644 --- a/advisories/unreviewed/2022/04/GHSA-5f9p-654c-vw5v/GHSA-5f9p-654c-vw5v.json +++ b/advisories/unreviewed/2022/04/GHSA-5f9p-654c-vw5v/GHSA-5f9p-654c-vw5v.json @@ -7,12 +7,8 @@ "CVE-2003-1481" ], "details": "CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-5g7r-cm4x-8j6q/GHSA-5g7r-cm4x-8j6q.json b/advisories/unreviewed/2022/04/GHSA-5g7r-cm4x-8j6q/GHSA-5g7r-cm4x-8j6q.json index 6a28875abdf..d9cf0908e51 100644 --- a/advisories/unreviewed/2022/04/GHSA-5g7r-cm4x-8j6q/GHSA-5g7r-cm4x-8j6q.json +++ b/advisories/unreviewed/2022/04/GHSA-5g7r-cm4x-8j6q/GHSA-5g7r-cm4x-8j6q.json @@ -7,12 +7,8 @@ "CVE-2004-0071" ], "details": "Directory traversal vulnerability in buildManPage in class.manpagelookup.php for PHP Man Page Lookup 1.2.0 allows remote attackers to read arbitrary files via the command parameter ($cmd variable) to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5g87-97pw-p9m9/GHSA-5g87-97pw-p9m9.json b/advisories/unreviewed/2022/04/GHSA-5g87-97pw-p9m9/GHSA-5g87-97pw-p9m9.json index bdebb868f7d..3514332bcd9 100644 --- a/advisories/unreviewed/2022/04/GHSA-5g87-97pw-p9m9/GHSA-5g87-97pw-p9m9.json +++ b/advisories/unreviewed/2022/04/GHSA-5g87-97pw-p9m9/GHSA-5g87-97pw-p9m9.json @@ -7,12 +7,8 @@ "CVE-2003-1559" ], "details": "Microsoft Internet Explorer 5.22, and other 5 through 6 SP1 versions, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-5gcj-j7v3-fr39/GHSA-5gcj-j7v3-fr39.json b/advisories/unreviewed/2022/04/GHSA-5gcj-j7v3-fr39/GHSA-5gcj-j7v3-fr39.json index 88164abeee9..f87220200cb 100644 --- a/advisories/unreviewed/2022/04/GHSA-5gcj-j7v3-fr39/GHSA-5gcj-j7v3-fr39.json +++ b/advisories/unreviewed/2022/04/GHSA-5gcj-j7v3-fr39/GHSA-5gcj-j7v3-fr39.json @@ -7,12 +7,8 @@ "CVE-2003-1523" ], "details": "SQL injection vulnerability in the IMAP daemon in dbmail 1.1 allows remote attackers to execute arbitrary SQL commands via the (1) login username, (2) mailbox name, and possibly other attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-5mp7-vvfx-f7qm/GHSA-5mp7-vvfx-f7qm.json b/advisories/unreviewed/2022/04/GHSA-5mp7-vvfx-f7qm/GHSA-5mp7-vvfx-f7qm.json index 563c95d7d89..163453b4c73 100644 --- a/advisories/unreviewed/2022/04/GHSA-5mp7-vvfx-f7qm/GHSA-5mp7-vvfx-f7qm.json +++ b/advisories/unreviewed/2022/04/GHSA-5mp7-vvfx-f7qm/GHSA-5mp7-vvfx-f7qm.json @@ -7,12 +7,8 @@ "CVE-2003-1578" ], "details": "Sun ONE (aka iPlanet) Web Server 4.1 through SP12 and 6.0 through SP5, when DNS resolution is enabled for client IP addresses, allows remote attackers to hide HTTP requests from the log-preview functionality by accompanying the requests with crafted DNS responses specifying a domain name beginning with a \"format=\" substring, related to an \"Inverse Lookup Log Corruption (ILLC)\" issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5qgc-c76m-gxvg/GHSA-5qgc-c76m-gxvg.json b/advisories/unreviewed/2022/04/GHSA-5qgc-c76m-gxvg/GHSA-5qgc-c76m-gxvg.json index 010a419ceea..83770ea3270 100644 --- a/advisories/unreviewed/2022/04/GHSA-5qgc-c76m-gxvg/GHSA-5qgc-c76m-gxvg.json +++ b/advisories/unreviewed/2022/04/GHSA-5qgc-c76m-gxvg/GHSA-5qgc-c76m-gxvg.json @@ -7,12 +7,8 @@ "CVE-2003-1500" ], "details": "PHP remote file inclusion vulnerability in _functions.php in cpCommerce 0.5f allows remote attackers to execute arbitrary code via the prefix parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-5w5w-72hw-4h3v/GHSA-5w5w-72hw-4h3v.json b/advisories/unreviewed/2022/04/GHSA-5w5w-72hw-4h3v/GHSA-5w5w-72hw-4h3v.json index f008621fbe4..e99117a7446 100644 --- a/advisories/unreviewed/2022/04/GHSA-5w5w-72hw-4h3v/GHSA-5w5w-72hw-4h3v.json +++ b/advisories/unreviewed/2022/04/GHSA-5w5w-72hw-4h3v/GHSA-5w5w-72hw-4h3v.json @@ -7,12 +7,8 @@ "CVE-2003-1532" ], "details": "SQL injection vulnerability in compte.php in PhpMyShop 1.00 allows remote attackers to execute arbitrary SQL commands via the (1) identifiant and (2) password parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-5wrj-fg88-pmg2/GHSA-5wrj-fg88-pmg2.json b/advisories/unreviewed/2022/04/GHSA-5wrj-fg88-pmg2/GHSA-5wrj-fg88-pmg2.json index 03461a2664d..e989359e3d3 100644 --- a/advisories/unreviewed/2022/04/GHSA-5wrj-fg88-pmg2/GHSA-5wrj-fg88-pmg2.json +++ b/advisories/unreviewed/2022/04/GHSA-5wrj-fg88-pmg2/GHSA-5wrj-fg88-pmg2.json @@ -7,12 +7,8 @@ "CVE-2003-1544" ], "details": "Unrestricted critical resource lock in Terminal Services for Windows 2000 before SP4 and Windows XP allows remote authenticated users to cause a denial of service (reboot) by obtaining a read lock on msgina.dll, which prevents msgina.dll from being loaded.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-633f-4wqf-793j/GHSA-633f-4wqf-793j.json b/advisories/unreviewed/2022/04/GHSA-633f-4wqf-793j/GHSA-633f-4wqf-793j.json index dcfd42eb76a..1213f2e37b0 100644 --- a/advisories/unreviewed/2022/04/GHSA-633f-4wqf-793j/GHSA-633f-4wqf-793j.json +++ b/advisories/unreviewed/2022/04/GHSA-633f-4wqf-793j/GHSA-633f-4wqf-793j.json @@ -7,12 +7,8 @@ "CVE-2004-0206" ], "details": "Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an \"unchecked buffer,\" possibly a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-64fp-99wr-qmj3/GHSA-64fp-99wr-qmj3.json b/advisories/unreviewed/2022/04/GHSA-64fp-99wr-qmj3/GHSA-64fp-99wr-qmj3.json index 6a3535abdac..483e700d3d8 100644 --- a/advisories/unreviewed/2022/04/GHSA-64fp-99wr-qmj3/GHSA-64fp-99wr-qmj3.json +++ b/advisories/unreviewed/2022/04/GHSA-64fp-99wr-qmj3/GHSA-64fp-99wr-qmj3.json @@ -7,12 +7,8 @@ "CVE-2003-1548" ], "details": "MyABraCaDaWeb 1.0.2 and earlier allows remote attackers to obtain sensitive information via an invalid IDAdmin or other parameter, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-662r-4hf6-m424/GHSA-662r-4hf6-m424.json b/advisories/unreviewed/2022/04/GHSA-662r-4hf6-m424/GHSA-662r-4hf6-m424.json index 14a5870de2a..9a131fdcde7 100644 --- a/advisories/unreviewed/2022/04/GHSA-662r-4hf6-m424/GHSA-662r-4hf6-m424.json +++ b/advisories/unreviewed/2022/04/GHSA-662r-4hf6-m424/GHSA-662r-4hf6-m424.json @@ -7,12 +7,8 @@ "CVE-2003-1519" ], "details": "Cross-site scripting (XSS) vulnerability in Vivisimo clustering engine allows remote attackers to inject arbitrary web script or HTML via the query parameter to the search program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-6f2v-whrw-9jm4/GHSA-6f2v-whrw-9jm4.json b/advisories/unreviewed/2022/04/GHSA-6f2v-whrw-9jm4/GHSA-6f2v-whrw-9jm4.json index 9143016a2bb..86ec0e2efa6 100644 --- a/advisories/unreviewed/2022/04/GHSA-6f2v-whrw-9jm4/GHSA-6f2v-whrw-9jm4.json +++ b/advisories/unreviewed/2022/04/GHSA-6f2v-whrw-9jm4/GHSA-6f2v-whrw-9jm4.json @@ -7,12 +7,8 @@ "CVE-2004-0041" ], "details": "The mod_auth_shadow module 1.4 and earlier does not properly enforce the expiration of a user account and password, which could allow remote authenticated users to bypass intended access restrictions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6ff4-c3cx-w2v5/GHSA-6ff4-c3cx-w2v5.json b/advisories/unreviewed/2022/04/GHSA-6ff4-c3cx-w2v5/GHSA-6ff4-c3cx-w2v5.json index 66538d2a29a..346e325d8bc 100644 --- a/advisories/unreviewed/2022/04/GHSA-6ff4-c3cx-w2v5/GHSA-6ff4-c3cx-w2v5.json +++ b/advisories/unreviewed/2022/04/GHSA-6ff4-c3cx-w2v5/GHSA-6ff4-c3cx-w2v5.json @@ -7,12 +7,8 @@ "CVE-2003-1593" ], "details": "NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 does not enforce domain-name login restrictions, which allows remote attackers to bypass intended access control via an FTP connection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6gxj-mcjr-q7gr/GHSA-6gxj-mcjr-q7gr.json b/advisories/unreviewed/2022/04/GHSA-6gxj-mcjr-q7gr/GHSA-6gxj-mcjr-q7gr.json index 6fc14ad4ab8..5c9441ceb88 100644 --- a/advisories/unreviewed/2022/04/GHSA-6gxj-mcjr-q7gr/GHSA-6gxj-mcjr-q7gr.json +++ b/advisories/unreviewed/2022/04/GHSA-6gxj-mcjr-q7gr/GHSA-6gxj-mcjr-q7gr.json @@ -7,12 +7,8 @@ "CVE-2004-0013" ], "details": "jabber 1.4.2, 1.4.2a, and possibly earlier versions, does not properly handle SSL connections, which allows remote attackers to cause a denial of service (crash).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6p87-7q57-75gg/GHSA-6p87-7q57-75gg.json b/advisories/unreviewed/2022/04/GHSA-6p87-7q57-75gg/GHSA-6p87-7q57-75gg.json index 0f0778c7cdc..66022d911a5 100644 --- a/advisories/unreviewed/2022/04/GHSA-6p87-7q57-75gg/GHSA-6p87-7q57-75gg.json +++ b/advisories/unreviewed/2022/04/GHSA-6p87-7q57-75gg/GHSA-6p87-7q57-75gg.json @@ -7,12 +7,8 @@ "CVE-2004-0193" ], "details": "Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Server Protection 3.6, allows remote attackers to execute arbitrary code via an SMB packet containing an authentication request with a long username.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6qhf-x255-q8qf/GHSA-6qhf-x255-q8qf.json b/advisories/unreviewed/2022/04/GHSA-6qhf-x255-q8qf/GHSA-6qhf-x255-q8qf.json index a1f91e584e4..d927ed22101 100644 --- a/advisories/unreviewed/2022/04/GHSA-6qhf-x255-q8qf/GHSA-6qhf-x255-q8qf.json +++ b/advisories/unreviewed/2022/04/GHSA-6qhf-x255-q8qf/GHSA-6qhf-x255-q8qf.json @@ -7,12 +7,8 @@ "CVE-2003-1468" ], "details": "The Web_Links module in PHP-Nuke 6.0 through 6.5 final allows remote attackers to obtain the full web server path via an invalid cid parameter that is non-numeric or null, which leaks the pathname in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-6vw6-5686-84v7/GHSA-6vw6-5686-84v7.json b/advisories/unreviewed/2022/04/GHSA-6vw6-5686-84v7/GHSA-6vw6-5686-84v7.json index 7a970a14bec..15d81351d03 100644 --- a/advisories/unreviewed/2022/04/GHSA-6vw6-5686-84v7/GHSA-6vw6-5686-84v7.json +++ b/advisories/unreviewed/2022/04/GHSA-6vw6-5686-84v7/GHSA-6vw6-5686-84v7.json @@ -7,12 +7,8 @@ "CVE-2004-0010" ], "details": "Stack-based buffer overflow in the ncp_lookup function for ncpfs in Linux kernel 2.4.x allows local users to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -104,9 +100,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6wr2-m56m-v6hg/GHSA-6wr2-m56m-v6hg.json b/advisories/unreviewed/2022/04/GHSA-6wr2-m56m-v6hg/GHSA-6wr2-m56m-v6hg.json index 23dd0bb4195..b6b27f903ed 100644 --- a/advisories/unreviewed/2022/04/GHSA-6wr2-m56m-v6hg/GHSA-6wr2-m56m-v6hg.json +++ b/advisories/unreviewed/2022/04/GHSA-6wr2-m56m-v6hg/GHSA-6wr2-m56m-v6hg.json @@ -7,12 +7,8 @@ "CVE-2004-0122" ], "details": "Microsoft MSN Messenger 6.0 and 6.1 does not properly handle certain requests, which allows remote attackers to read arbitrary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7459-9rcq-g3xj/GHSA-7459-9rcq-g3xj.json b/advisories/unreviewed/2022/04/GHSA-7459-9rcq-g3xj/GHSA-7459-9rcq-g3xj.json index d4872bb8c1f..74c13a2cfcd 100644 --- a/advisories/unreviewed/2022/04/GHSA-7459-9rcq-g3xj/GHSA-7459-9rcq-g3xj.json +++ b/advisories/unreviewed/2022/04/GHSA-7459-9rcq-g3xj/GHSA-7459-9rcq-g3xj.json @@ -7,12 +7,8 @@ "CVE-2004-0004" ], "details": "The libCheckSignature function in crypto-utils.lib for OpenCA 0.9.1.6 and earlier only compares the serial of the signer's certificate and the one in the database, which can cause OpenCA to incorrectly accept a signature if the certificate's chain is trusted by OpenCA's chain directory, allowing remote attackers to spoof requests from other users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-74p6-g25x-9mmj/GHSA-74p6-g25x-9mmj.json b/advisories/unreviewed/2022/04/GHSA-74p6-g25x-9mmj/GHSA-74p6-g25x-9mmj.json index 497d97c4de9..a8c3cd1a440 100644 --- a/advisories/unreviewed/2022/04/GHSA-74p6-g25x-9mmj/GHSA-74p6-g25x-9mmj.json +++ b/advisories/unreviewed/2022/04/GHSA-74p6-g25x-9mmj/GHSA-74p6-g25x-9mmj.json @@ -7,12 +7,8 @@ "CVE-2004-0003" ], "details": "Unknown vulnerability in Linux kernel before 2.4.22 allows local users to gain privileges, related to \"R128 DRI limits checking.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -168,9 +164,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-76rg-wcxr-453v/GHSA-76rg-wcxr-453v.json b/advisories/unreviewed/2022/04/GHSA-76rg-wcxr-453v/GHSA-76rg-wcxr-453v.json index a32641cfdbd..f41c9a19c30 100644 --- a/advisories/unreviewed/2022/04/GHSA-76rg-wcxr-453v/GHSA-76rg-wcxr-453v.json +++ b/advisories/unreviewed/2022/04/GHSA-76rg-wcxr-453v/GHSA-76rg-wcxr-453v.json @@ -7,12 +7,8 @@ "CVE-2004-0009" ], "details": "Apache-SSL 1.3.28+1.52 and earlier, with SSLVerifyClient set to 1 or 3 and SSLFakeBasicAuth enabled, allows remote attackers to forge a client certificate by using basic authentication with the \"one-line DN\" of the target user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7877-qxpp-qjh5/GHSA-7877-qxpp-qjh5.json b/advisories/unreviewed/2022/04/GHSA-7877-qxpp-qjh5/GHSA-7877-qxpp-qjh5.json index 86c48a61073..18d0bde70fe 100644 --- a/advisories/unreviewed/2022/04/GHSA-7877-qxpp-qjh5/GHSA-7877-qxpp-qjh5.json +++ b/advisories/unreviewed/2022/04/GHSA-7877-qxpp-qjh5/GHSA-7877-qxpp-qjh5.json @@ -7,12 +7,8 @@ "CVE-2004-0039" ], "details": "Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point Firewall-1 HTTP Security Server included with NG FP1, FP2, and FP3 allows remote attackers to execute arbitrary code via HTTP requests that cause format string specifiers to be used in an error message, as demonstrated using the scheme of a URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-78qh-r4jf-4h7r/GHSA-78qh-r4jf-4h7r.json b/advisories/unreviewed/2022/04/GHSA-78qh-r4jf-4h7r/GHSA-78qh-r4jf-4h7r.json index bc7293ce66e..f6a789dc78d 100644 --- a/advisories/unreviewed/2022/04/GHSA-78qh-r4jf-4h7r/GHSA-78qh-r4jf-4h7r.json +++ b/advisories/unreviewed/2022/04/GHSA-78qh-r4jf-4h7r/GHSA-78qh-r4jf-4h7r.json @@ -7,12 +7,8 @@ "CVE-2004-0073" ], "details": "PHP remote file inclusion vulnerability in (1) config.php and (2) config_page.php for EasyDynamicPages 2.0 allows remote attackers to execute arbitrary PHP code by modifying the edp_relative_path parameter to reference a URL on a remote web server that contains a malicious serverdata.php script.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-794w-3mfp-hppc/GHSA-794w-3mfp-hppc.json b/advisories/unreviewed/2022/04/GHSA-794w-3mfp-hppc/GHSA-794w-3mfp-hppc.json index 59683668a83..a4b07589628 100644 --- a/advisories/unreviewed/2022/04/GHSA-794w-3mfp-hppc/GHSA-794w-3mfp-hppc.json +++ b/advisories/unreviewed/2022/04/GHSA-794w-3mfp-hppc/GHSA-794w-3mfp-hppc.json @@ -7,12 +7,8 @@ "CVE-2003-1488" ], "details": "The (1) verif_admin.php and (2) check_admin.php scripts in Truegalerie 1.0 allow remote attackers to gain administrator access via a request to admin.php without the connect parameter and with the loggedin parameter set to any value, such as 1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-796p-jv3p-9cm6/GHSA-796p-jv3p-9cm6.json b/advisories/unreviewed/2022/04/GHSA-796p-jv3p-9cm6/GHSA-796p-jv3p-9cm6.json index b4ef4d5867e..c2d0a8ec7ff 100644 --- a/advisories/unreviewed/2022/04/GHSA-796p-jv3p-9cm6/GHSA-796p-jv3p-9cm6.json +++ b/advisories/unreviewed/2022/04/GHSA-796p-jv3p-9cm6/GHSA-796p-jv3p-9cm6.json @@ -7,12 +7,8 @@ "CVE-2003-1528" ], "details": "nsr_shutdown in Fujitsu Siemens NetWorker 6.0 allows local users to overwrite arbitrary files via a symlink attack on the nsrsh[PID] temporary file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-79jw-w2qh-f99v/GHSA-79jw-w2qh-f99v.json b/advisories/unreviewed/2022/04/GHSA-79jw-w2qh-f99v/GHSA-79jw-w2qh-f99v.json index 043d6b99929..a2a1a5b6a75 100644 --- a/advisories/unreviewed/2022/04/GHSA-79jw-w2qh-f99v/GHSA-79jw-w2qh-f99v.json +++ b/advisories/unreviewed/2022/04/GHSA-79jw-w2qh-f99v/GHSA-79jw-w2qh-f99v.json @@ -7,12 +7,8 @@ "CVE-2004-0046" ], "details": "Cross-site scripting (XSS) vulnerability in SnapStream PVS LITE allows remote attackers to inject arbitrary web script or HTML via a GET request containing a terminating '\"' (double quote) character.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7fvh-pvp6-2jmj/GHSA-7fvh-pvp6-2jmj.json b/advisories/unreviewed/2022/04/GHSA-7fvh-pvp6-2jmj/GHSA-7fvh-pvp6-2jmj.json index 780e85da52b..da7de20eea3 100644 --- a/advisories/unreviewed/2022/04/GHSA-7fvh-pvp6-2jmj/GHSA-7fvh-pvp6-2jmj.json +++ b/advisories/unreviewed/2022/04/GHSA-7fvh-pvp6-2jmj/GHSA-7fvh-pvp6-2jmj.json @@ -7,12 +7,8 @@ "CVE-2004-0160" ], "details": "Synaesthesia 2.2 and earlier allows local users to execute arbitrary code via a symlink attack on the configuration file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7g5x-j384-j6mv/GHSA-7g5x-j384-j6mv.json b/advisories/unreviewed/2022/04/GHSA-7g5x-j384-j6mv/GHSA-7g5x-j384-j6mv.json index 2535a24c15e..d6ea99e9b96 100644 --- a/advisories/unreviewed/2022/04/GHSA-7g5x-j384-j6mv/GHSA-7g5x-j384-j6mv.json +++ b/advisories/unreviewed/2022/04/GHSA-7g5x-j384-j6mv/GHSA-7g5x-j384-j6mv.json @@ -7,12 +7,8 @@ "CVE-2004-0088" ], "details": "The System Configuration subsystem in Mac OS 10.2.8 allows local users to modify network settings, a different vulnerability than CVE-2004-0087.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7hgh-vq2w-c3xf/GHSA-7hgh-vq2w-c3xf.json b/advisories/unreviewed/2022/04/GHSA-7hgh-vq2w-c3xf/GHSA-7hgh-vq2w-c3xf.json index 4eeecbf6b86..f6a42796930 100644 --- a/advisories/unreviewed/2022/04/GHSA-7hgh-vq2w-c3xf/GHSA-7hgh-vq2w-c3xf.json +++ b/advisories/unreviewed/2022/04/GHSA-7hgh-vq2w-c3xf/GHSA-7hgh-vq2w-c3xf.json @@ -7,12 +7,8 @@ "CVE-2004-0085" ], "details": "Unknown vulnerability in the Mail application for Mac OS X 10.1.5 and 10.2.8 with unknown impact, a different vulnerability than CVE-2004-0086.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7hh8-mhr2-vwh3/GHSA-7hh8-mhr2-vwh3.json b/advisories/unreviewed/2022/04/GHSA-7hh8-mhr2-vwh3/GHSA-7hh8-mhr2-vwh3.json index e7ca2969163..8a11bae3085 100644 --- a/advisories/unreviewed/2022/04/GHSA-7hh8-mhr2-vwh3/GHSA-7hh8-mhr2-vwh3.json +++ b/advisories/unreviewed/2022/04/GHSA-7hh8-mhr2-vwh3/GHSA-7hh8-mhr2-vwh3.json @@ -7,12 +7,8 @@ "CVE-2003-1470" ], "details": "Buffer overflow in IMAP service in MDaemon 6.7.5 and earlier allows remote authenticated users to cause a denial of service (crash) and execute arbitrary code via a CREATE command with a long mailbox name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-7mg8-f79x-23pf/GHSA-7mg8-f79x-23pf.json b/advisories/unreviewed/2022/04/GHSA-7mg8-f79x-23pf/GHSA-7mg8-f79x-23pf.json index 3b67d1d52db..144b4197df5 100644 --- a/advisories/unreviewed/2022/04/GHSA-7mg8-f79x-23pf/GHSA-7mg8-f79x-23pf.json +++ b/advisories/unreviewed/2022/04/GHSA-7mg8-f79x-23pf/GHSA-7mg8-f79x-23pf.json @@ -7,12 +7,8 @@ "CVE-2003-1573" ], "details": "The PointBase 4.6 database component in the J2EE 1.4 reference implementation (J2EE/RI) allows remote attackers to execute arbitrary programs, conduct a denial of service, and obtain sensitive information via a crafted SQL statement, related to \"inadequate security settings and library bugs in sun.* and org.apache.* packages.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-7mw5-528h-7m9c/GHSA-7mw5-528h-7m9c.json b/advisories/unreviewed/2022/04/GHSA-7mw5-528h-7m9c/GHSA-7mw5-528h-7m9c.json index ea303ad085e..32a90d6ab8f 100644 --- a/advisories/unreviewed/2022/04/GHSA-7mw5-528h-7m9c/GHSA-7mw5-528h-7m9c.json +++ b/advisories/unreviewed/2022/04/GHSA-7mw5-528h-7m9c/GHSA-7mw5-528h-7m9c.json @@ -7,12 +7,8 @@ "CVE-2004-0172" ], "details": "Heap-based buffer overflow in the search_for_command function of ltrace 0.3.10, if it is installed setuid, could allow local users to execute arbitrary code via a long filename. NOTE: It is unclear whether there are any packages that install ltrace as a setuid program, so this candidate might be REJECTed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7v4p-3v84-r8mc/GHSA-7v4p-3v84-r8mc.json b/advisories/unreviewed/2022/04/GHSA-7v4p-3v84-r8mc/GHSA-7v4p-3v84-r8mc.json index 79e69e01e92..dc6ecaa5c3c 100644 --- a/advisories/unreviewed/2022/04/GHSA-7v4p-3v84-r8mc/GHSA-7v4p-3v84-r8mc.json +++ b/advisories/unreviewed/2022/04/GHSA-7v4p-3v84-r8mc/GHSA-7v4p-3v84-r8mc.json @@ -7,12 +7,8 @@ "CVE-2004-0159" ], "details": "Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via file names containing format string characters that are not properly handled when executing an \"ls\" command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-84fg-2wf6-cxj7/GHSA-84fg-2wf6-cxj7.json b/advisories/unreviewed/2022/04/GHSA-84fg-2wf6-cxj7/GHSA-84fg-2wf6-cxj7.json index 3e8d33b1760..9e62063635f 100644 --- a/advisories/unreviewed/2022/04/GHSA-84fg-2wf6-cxj7/GHSA-84fg-2wf6-cxj7.json +++ b/advisories/unreviewed/2022/04/GHSA-84fg-2wf6-cxj7/GHSA-84fg-2wf6-cxj7.json @@ -7,12 +7,8 @@ "CVE-2003-1545" ], "details": "Absolute path traversal vulnerability in nukestyles.com viewpage.php addon for PHP-Nuke allows remote attackers to read arbitrary files via a full pathname in the file parameter. NOTE: This was originally reported as an issue in PHP-Nuke 6.5, but this is an independent addon.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-8557-3294-fr24/GHSA-8557-3294-fr24.json b/advisories/unreviewed/2022/04/GHSA-8557-3294-fr24/GHSA-8557-3294-fr24.json index 7a1ccfa0251..267461d90cd 100644 --- a/advisories/unreviewed/2022/04/GHSA-8557-3294-fr24/GHSA-8557-3294-fr24.json +++ b/advisories/unreviewed/2022/04/GHSA-8557-3294-fr24/GHSA-8557-3294-fr24.json @@ -7,12 +7,8 @@ "CVE-2003-1494" ], "details": "Unspecified vulnerability in HP OpenView Network Node Manager (NNM) 6.2 and 6.4 allows remote attackers to cause a denial of service (CPU consumption) via a crafted TCP packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-85w6-fmf9-6mx8/GHSA-85w6-fmf9-6mx8.json b/advisories/unreviewed/2022/04/GHSA-85w6-fmf9-6mx8/GHSA-85w6-fmf9-6mx8.json index 136f39cc82e..86eafae21b4 100644 --- a/advisories/unreviewed/2022/04/GHSA-85w6-fmf9-6mx8/GHSA-85w6-fmf9-6mx8.json +++ b/advisories/unreviewed/2022/04/GHSA-85w6-fmf9-6mx8/GHSA-85w6-fmf9-6mx8.json @@ -7,12 +7,8 @@ "CVE-2003-1485" ], "details": "Clearswift MAILsweeper 4.0 through 4.3.7 allows remote attackers to bypass filtering via a file attachment that contains \"multiple extensions combined with large blocks of white space.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-878w-8w5v-4v3j/GHSA-878w-8w5v-4v3j.json b/advisories/unreviewed/2022/04/GHSA-878w-8w5v-4v3j/GHSA-878w-8w5v-4v3j.json index 824cfc6fc79..843de052402 100644 --- a/advisories/unreviewed/2022/04/GHSA-878w-8w5v-4v3j/GHSA-878w-8w5v-4v3j.json +++ b/advisories/unreviewed/2022/04/GHSA-878w-8w5v-4v3j/GHSA-878w-8w5v-4v3j.json @@ -7,12 +7,8 @@ "CVE-2004-0148" ], "details": "wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-88ch-4jv9-46cm/GHSA-88ch-4jv9-46cm.json b/advisories/unreviewed/2022/04/GHSA-88ch-4jv9-46cm/GHSA-88ch-4jv9-46cm.json index eb43ac25c6f..b4f1d983053 100644 --- a/advisories/unreviewed/2022/04/GHSA-88ch-4jv9-46cm/GHSA-88ch-4jv9-46cm.json +++ b/advisories/unreviewed/2022/04/GHSA-88ch-4jv9-46cm/GHSA-88ch-4jv9-46cm.json @@ -7,12 +7,8 @@ "CVE-2003-1482" ], "details": "The backup configuration file for Microsoft MN-500 wireless base station stores administrative passwords in plaintext, which allows local users to gain access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-897g-vr3x-p6c9/GHSA-897g-vr3x-p6c9.json b/advisories/unreviewed/2022/04/GHSA-897g-vr3x-p6c9/GHSA-897g-vr3x-p6c9.json index 943f22ff49f..06865eb8a12 100644 --- a/advisories/unreviewed/2022/04/GHSA-897g-vr3x-p6c9/GHSA-897g-vr3x-p6c9.json +++ b/advisories/unreviewed/2022/04/GHSA-897g-vr3x-p6c9/GHSA-897g-vr3x-p6c9.json @@ -7,12 +7,8 @@ "CVE-2003-1569" ], "details": "GoAhead WebServer before 2.1.5 on Windows 95, 98, and ME allows remote attackers to cause a denial of service (daemon crash) via an HTTP request with a (1) con, (2) nul, (3) clock$, or (4) config$ device name in a path component, different vectors than CVE-2001-0385.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-8cqm-4v53-qhc4/GHSA-8cqm-4v53-qhc4.json b/advisories/unreviewed/2022/04/GHSA-8cqm-4v53-qhc4/GHSA-8cqm-4v53-qhc4.json index 3a5f1b6945b..9e6aa0c9a5b 100644 --- a/advisories/unreviewed/2022/04/GHSA-8cqm-4v53-qhc4/GHSA-8cqm-4v53-qhc4.json +++ b/advisories/unreviewed/2022/04/GHSA-8cqm-4v53-qhc4/GHSA-8cqm-4v53-qhc4.json @@ -7,12 +7,8 @@ "CVE-2003-1524" ], "details": "PGPi PGPDisk 6.0.2i does not unmount a PGP partition when the switch user function in Windows XP is used, which could allow local users to access data on another user's PGP partition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8fq9-r8h3-vqxp/GHSA-8fq9-r8h3-vqxp.json b/advisories/unreviewed/2022/04/GHSA-8fq9-r8h3-vqxp/GHSA-8fq9-r8h3-vqxp.json index 4ab29d59d78..c61a08f3deb 100644 --- a/advisories/unreviewed/2022/04/GHSA-8fq9-r8h3-vqxp/GHSA-8fq9-r8h3-vqxp.json +++ b/advisories/unreviewed/2022/04/GHSA-8fq9-r8h3-vqxp/GHSA-8fq9-r8h3-vqxp.json @@ -7,12 +7,8 @@ "CVE-2003-1512" ], "details": "Buffer overflow in mIRC 6.1 and 6.11 allows remote attackers to cause a denial of service (crash) via a long DCC SEND request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-8gfg-jjvj-524x/GHSA-8gfg-jjvj-524x.json b/advisories/unreviewed/2022/04/GHSA-8gfg-jjvj-524x/GHSA-8gfg-jjvj-524x.json index 787c25a256b..f5f7ecfbb96 100644 --- a/advisories/unreviewed/2022/04/GHSA-8gfg-jjvj-524x/GHSA-8gfg-jjvj-524x.json +++ b/advisories/unreviewed/2022/04/GHSA-8gfg-jjvj-524x/GHSA-8gfg-jjvj-524x.json @@ -7,12 +7,8 @@ "CVE-2004-0204" ], "details": "Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via \"..\" sequences in the dynamicimag argument to crystalimagehandler.aspx.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8ghp-mgj8-vqhc/GHSA-8ghp-mgj8-vqhc.json b/advisories/unreviewed/2022/04/GHSA-8ghp-mgj8-vqhc/GHSA-8ghp-mgj8-vqhc.json index 60b35e92f52..f5465b92d29 100644 --- a/advisories/unreviewed/2022/04/GHSA-8ghp-mgj8-vqhc/GHSA-8ghp-mgj8-vqhc.json +++ b/advisories/unreviewed/2022/04/GHSA-8ghp-mgj8-vqhc/GHSA-8ghp-mgj8-vqhc.json @@ -7,12 +7,8 @@ "CVE-2004-0203" ], "details": "Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-8jwf-qrhm-5w32/GHSA-8jwf-qrhm-5w32.json b/advisories/unreviewed/2022/04/GHSA-8jwf-qrhm-5w32/GHSA-8jwf-qrhm-5w32.json index 49c75b25f74..76b253b8fcb 100644 --- a/advisories/unreviewed/2022/04/GHSA-8jwf-qrhm-5w32/GHSA-8jwf-qrhm-5w32.json +++ b/advisories/unreviewed/2022/04/GHSA-8jwf-qrhm-5w32/GHSA-8jwf-qrhm-5w32.json @@ -7,12 +7,8 @@ "CVE-2003-1502" ], "details": "mod_throttle 3.0 allows local users with Apache privileges to access shared memory that points to a file that is writable by the apache user, which could allow local users to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8qrx-6m7g-9m6f/GHSA-8qrx-6m7g-9m6f.json b/advisories/unreviewed/2022/04/GHSA-8qrx-6m7g-9m6f/GHSA-8qrx-6m7g-9m6f.json index 398df0e4dab..f50c0588147 100644 --- a/advisories/unreviewed/2022/04/GHSA-8qrx-6m7g-9m6f/GHSA-8qrx-6m7g-9m6f.json +++ b/advisories/unreviewed/2022/04/GHSA-8qrx-6m7g-9m6f/GHSA-8qrx-6m7g-9m6f.json @@ -7,12 +7,8 @@ "CVE-2003-1555" ], "details": "ScozNet ScozBook 1.1 BETA allows remote attackers to obtain sensitive information via an invalid PG parameter in view.php, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-8v24-2h5p-j7gx/GHSA-8v24-2h5p-j7gx.json b/advisories/unreviewed/2022/04/GHSA-8v24-2h5p-j7gx/GHSA-8v24-2h5p-j7gx.json index e50d2fd3e57..e35f273190f 100644 --- a/advisories/unreviewed/2022/04/GHSA-8v24-2h5p-j7gx/GHSA-8v24-2h5p-j7gx.json +++ b/advisories/unreviewed/2022/04/GHSA-8v24-2h5p-j7gx/GHSA-8v24-2h5p-j7gx.json @@ -7,12 +7,8 @@ "CVE-2004-0199" ], "details": "Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability (dvdupgrd.htm).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8x87-hc58-vg99/GHSA-8x87-hc58-vg99.json b/advisories/unreviewed/2022/04/GHSA-8x87-hc58-vg99/GHSA-8x87-hc58-vg99.json index 1de7d5ab15d..dc3f2e95e0e 100644 --- a/advisories/unreviewed/2022/04/GHSA-8x87-hc58-vg99/GHSA-8x87-hc58-vg99.json +++ b/advisories/unreviewed/2022/04/GHSA-8x87-hc58-vg99/GHSA-8x87-hc58-vg99.json @@ -7,12 +7,8 @@ "CVE-2004-0111" ], "details": "gdk-pixbuf before 0.20 allows attackers to cause a denial of service (crash) via a malformed bitmap (BMP) file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8xxw-82jx-c77h/GHSA-8xxw-82jx-c77h.json b/advisories/unreviewed/2022/04/GHSA-8xxw-82jx-c77h/GHSA-8xxw-82jx-c77h.json index 01be65cd2ce..516ccbf0b69 100644 --- a/advisories/unreviewed/2022/04/GHSA-8xxw-82jx-c77h/GHSA-8xxw-82jx-c77h.json +++ b/advisories/unreviewed/2022/04/GHSA-8xxw-82jx-c77h/GHSA-8xxw-82jx-c77h.json @@ -7,12 +7,8 @@ "CVE-2004-0188" ], "details": "Heap-based buffer overflow in Calife 2.8.5 and earlier may allow local users to execute arbitrary code via a long password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-94fh-jw32-7fj9/GHSA-94fh-jw32-7fj9.json b/advisories/unreviewed/2022/04/GHSA-94fh-jw32-7fj9/GHSA-94fh-jw32-7fj9.json index d3159f86297..6adfe08a858 100644 --- a/advisories/unreviewed/2022/04/GHSA-94fh-jw32-7fj9/GHSA-94fh-jw32-7fj9.json +++ b/advisories/unreviewed/2022/04/GHSA-94fh-jw32-7fj9/GHSA-94fh-jw32-7fj9.json @@ -7,12 +7,8 @@ "CVE-2004-0154" ], "details": "rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-94p8-9vqv-x9hf/GHSA-94p8-9vqv-x9hf.json b/advisories/unreviewed/2022/04/GHSA-94p8-9vqv-x9hf/GHSA-94p8-9vqv-x9hf.json index f7e52ae43f2..5da4f4e969c 100644 --- a/advisories/unreviewed/2022/04/GHSA-94p8-9vqv-x9hf/GHSA-94p8-9vqv-x9hf.json +++ b/advisories/unreviewed/2022/04/GHSA-94p8-9vqv-x9hf/GHSA-94p8-9vqv-x9hf.json @@ -7,12 +7,8 @@ "CVE-2003-1471" ], "details": "MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service (crash) via a (1) DELE or (2) UIDL with a negative number.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-95f5-8329-4q6x/GHSA-95f5-8329-4q6x.json b/advisories/unreviewed/2022/04/GHSA-95f5-8329-4q6x/GHSA-95f5-8329-4q6x.json index 073831f8131..84e2a31bfd3 100644 --- a/advisories/unreviewed/2022/04/GHSA-95f5-8329-4q6x/GHSA-95f5-8329-4q6x.json +++ b/advisories/unreviewed/2022/04/GHSA-95f5-8329-4q6x/GHSA-95f5-8329-4q6x.json @@ -7,12 +7,8 @@ "CVE-2004-0205" ], "details": "Buffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local users to execute arbitrary code via the redirect function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9763-rjx4-p2cf/GHSA-9763-rjx4-p2cf.json b/advisories/unreviewed/2022/04/GHSA-9763-rjx4-p2cf/GHSA-9763-rjx4-p2cf.json index 14d1b05b9db..39955b82440 100644 --- a/advisories/unreviewed/2022/04/GHSA-9763-rjx4-p2cf/GHSA-9763-rjx4-p2cf.json +++ b/advisories/unreviewed/2022/04/GHSA-9763-rjx4-p2cf/GHSA-9763-rjx4-p2cf.json @@ -7,12 +7,8 @@ "CVE-2004-0066" ], "details": "phpGedView before 2.65 allows remote attackers to obtain the absolute path of the web server via malformed parameters to (1) indilist.php, (2) famlist.php, (3) placelist.php, (4) imageview.php, (5) timeline.php, (6) clippings.php, (7) login.php, and (8) gdbi.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-97gh-wvjc-f5cx/GHSA-97gh-wvjc-f5cx.json b/advisories/unreviewed/2022/04/GHSA-97gh-wvjc-f5cx/GHSA-97gh-wvjc-f5cx.json index f9f1b996b2d..248f543644b 100644 --- a/advisories/unreviewed/2022/04/GHSA-97gh-wvjc-f5cx/GHSA-97gh-wvjc-f5cx.json +++ b/advisories/unreviewed/2022/04/GHSA-97gh-wvjc-f5cx/GHSA-97gh-wvjc-f5cx.json @@ -7,12 +7,8 @@ "CVE-2004-0168" ], "details": "Unknown vulnerability in CoreFoundation for Mac OS X 10.3.2, related to \"notification logging.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-99hf-qw45-47f2/GHSA-99hf-qw45-47f2.json b/advisories/unreviewed/2022/04/GHSA-99hf-qw45-47f2/GHSA-99hf-qw45-47f2.json index a22130aa9d9..1145aef2374 100644 --- a/advisories/unreviewed/2022/04/GHSA-99hf-qw45-47f2/GHSA-99hf-qw45-47f2.json +++ b/advisories/unreviewed/2022/04/GHSA-99hf-qw45-47f2/GHSA-99hf-qw45-47f2.json @@ -7,12 +7,8 @@ "CVE-2004-0052" ], "details": "Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard separator characters, or use standard separators incorrectly, within MIME headers, fields, parameters, or values, which may be interpreted differently by mail clients.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-99qg-j7h7-rpcr/GHSA-99qg-j7h7-rpcr.json b/advisories/unreviewed/2022/04/GHSA-99qg-j7h7-rpcr/GHSA-99qg-j7h7-rpcr.json index b5ce6e5e58a..bee637b5af3 100644 --- a/advisories/unreviewed/2022/04/GHSA-99qg-j7h7-rpcr/GHSA-99qg-j7h7-rpcr.json +++ b/advisories/unreviewed/2022/04/GHSA-99qg-j7h7-rpcr/GHSA-99qg-j7h7-rpcr.json @@ -7,12 +7,8 @@ "CVE-2003-1540" ], "details": "WF-Chat 1.0 Beta stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain authentication information via a direct request to (1) !pwds.txt and (2) !nicks.txt.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-99qv-m5mw-g4v6/GHSA-99qv-m5mw-g4v6.json b/advisories/unreviewed/2022/04/GHSA-99qv-m5mw-g4v6/GHSA-99qv-m5mw-g4v6.json index b7abf58cdb0..95738429fc0 100644 --- a/advisories/unreviewed/2022/04/GHSA-99qv-m5mw-g4v6/GHSA-99qv-m5mw-g4v6.json +++ b/advisories/unreviewed/2022/04/GHSA-99qv-m5mw-g4v6/GHSA-99qv-m5mw-g4v6.json @@ -7,12 +7,8 @@ "CVE-2004-0186" ], "details": "smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid root program, whose setuid attributes are not cleared when the share is mounted.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9f88-5fx6-323h/GHSA-9f88-5fx6-323h.json b/advisories/unreviewed/2022/04/GHSA-9f88-5fx6-323h/GHSA-9f88-5fx6-323h.json index 683faf16700..7755d3ebf3c 100644 --- a/advisories/unreviewed/2022/04/GHSA-9f88-5fx6-323h/GHSA-9f88-5fx6-323h.json +++ b/advisories/unreviewed/2022/04/GHSA-9f88-5fx6-323h/GHSA-9f88-5fx6-323h.json @@ -7,12 +7,8 @@ "CVE-2003-1515" ], "details": "Origo ASR-8100 ADSL Router 3.21 has an administration service running on port 254 that does not require a password, which allows remote attackers to cause a denial of service by restoring the factory defaults.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9jhw-86rv-ccgf/GHSA-9jhw-86rv-ccgf.json b/advisories/unreviewed/2022/04/GHSA-9jhw-86rv-ccgf/GHSA-9jhw-86rv-ccgf.json index 6a981849723..2c54b8a3646 100644 --- a/advisories/unreviewed/2022/04/GHSA-9jhw-86rv-ccgf/GHSA-9jhw-86rv-ccgf.json +++ b/advisories/unreviewed/2022/04/GHSA-9jhw-86rv-ccgf/GHSA-9jhw-86rv-ccgf.json @@ -7,12 +7,8 @@ "CVE-2004-0037" ], "details": "FirstClass Desktop Client 7.1 allows remote attackers to execute arbitrary commands via hyperlinks in FirstClass RTF messages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9p3f-93qj-h8hp/GHSA-9p3f-93qj-h8hp.json b/advisories/unreviewed/2022/04/GHSA-9p3f-93qj-h8hp/GHSA-9p3f-93qj-h8hp.json index a3c90192489..d4783a1b8ca 100644 --- a/advisories/unreviewed/2022/04/GHSA-9p3f-93qj-h8hp/GHSA-9p3f-93qj-h8hp.json +++ b/advisories/unreviewed/2022/04/GHSA-9p3f-93qj-h8hp/GHSA-9p3f-93qj-h8hp.json @@ -7,12 +7,8 @@ "CVE-2003-1535" ], "details": "Justice Guestbook 1.3 allows remote attackers to obtain the full installation path via a direct request to cfooter.php3, which leaks the path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-9v2m-h53x-2f6v/GHSA-9v2m-h53x-2f6v.json b/advisories/unreviewed/2022/04/GHSA-9v2m-h53x-2f6v/GHSA-9v2m-h53x-2f6v.json index 82eb803ec2b..e22c23b732a 100644 --- a/advisories/unreviewed/2022/04/GHSA-9v2m-h53x-2f6v/GHSA-9v2m-h53x-2f6v.json +++ b/advisories/unreviewed/2022/04/GHSA-9v2m-h53x-2f6v/GHSA-9v2m-h53x-2f6v.json @@ -7,12 +7,8 @@ "CVE-2004-0161" ], "details": "Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RFC2231 encoding, which may be interpreted differently by mail clients.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9vh6-7j9m-vqpw/GHSA-9vh6-7j9m-vqpw.json b/advisories/unreviewed/2022/04/GHSA-9vh6-7j9m-vqpw/GHSA-9vh6-7j9m-vqpw.json index 26c485d227d..e1c01c579bf 100644 --- a/advisories/unreviewed/2022/04/GHSA-9vh6-7j9m-vqpw/GHSA-9vh6-7j9m-vqpw.json +++ b/advisories/unreviewed/2022/04/GHSA-9vh6-7j9m-vqpw/GHSA-9vh6-7j9m-vqpw.json @@ -7,12 +7,8 @@ "CVE-2003-1588" ], "details": "Sun Cluster 2.2, when HA-Oracle or HA-Sybase DBMS services are used, stores database credentials in cleartext in a cluster configuration file, which allows local users to obtain sensitive information by reading this file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9wm9-cf57-4q76/GHSA-9wm9-cf57-4q76.json b/advisories/unreviewed/2022/04/GHSA-9wm9-cf57-4q76/GHSA-9wm9-cf57-4q76.json index 78cc970608d..5202b37726f 100644 --- a/advisories/unreviewed/2022/04/GHSA-9wm9-cf57-4q76/GHSA-9wm9-cf57-4q76.json +++ b/advisories/unreviewed/2022/04/GHSA-9wm9-cf57-4q76/GHSA-9wm9-cf57-4q76.json @@ -7,12 +7,8 @@ "CVE-2003-1507" ], "details": "Planet Technology WGSD-1020 and WSW-2401 Ethernet switches use a default \"superuser\" account with the \"planet\" password, which allows remote attackers to gain administrative access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c262-32c6-2jfp/GHSA-c262-32c6-2jfp.json b/advisories/unreviewed/2022/04/GHSA-c262-32c6-2jfp/GHSA-c262-32c6-2jfp.json index 3af3b6d6a88..fadcb79a4d0 100644 --- a/advisories/unreviewed/2022/04/GHSA-c262-32c6-2jfp/GHSA-c262-32c6-2jfp.json +++ b/advisories/unreviewed/2022/04/GHSA-c262-32c6-2jfp/GHSA-c262-32c6-2jfp.json @@ -7,12 +7,8 @@ "CVE-2004-0053" ], "details": "Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use fields that use RFC2047 encoding, which may be interpreted differently by mail clients.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c26f-86m7-5qpw/GHSA-c26f-86m7-5qpw.json b/advisories/unreviewed/2022/04/GHSA-c26f-86m7-5qpw/GHSA-c26f-86m7-5qpw.json index 354aa5fa8d3..d9885669942 100644 --- a/advisories/unreviewed/2022/04/GHSA-c26f-86m7-5qpw/GHSA-c26f-86m7-5qpw.json +++ b/advisories/unreviewed/2022/04/GHSA-c26f-86m7-5qpw/GHSA-c26f-86m7-5qpw.json @@ -7,12 +7,8 @@ "CVE-2003-1541" ], "details": "PlanetMoon Guestbook tr3.a stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the admin script password, and other passwords, via a direct request to files/passwd.txt.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c2p9-h4wr-rxvg/GHSA-c2p9-h4wr-rxvg.json b/advisories/unreviewed/2022/04/GHSA-c2p9-h4wr-rxvg/GHSA-c2p9-h4wr-rxvg.json index b542b2bf2f4..8fce900cfcc 100644 --- a/advisories/unreviewed/2022/04/GHSA-c2p9-h4wr-rxvg/GHSA-c2p9-h4wr-rxvg.json +++ b/advisories/unreviewed/2022/04/GHSA-c2p9-h4wr-rxvg/GHSA-c2p9-h4wr-rxvg.json @@ -7,12 +7,8 @@ "CVE-2004-0162" ], "details": "Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME encapsulation that uses RFC822 comment fields, which may be interpreted as other fields by mail clients.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c7mq-437h-4468/GHSA-c7mq-437h-4468.json b/advisories/unreviewed/2022/04/GHSA-c7mq-437h-4468/GHSA-c7mq-437h-4468.json index 7cd04efcf91..3bd9a0779dc 100644 --- a/advisories/unreviewed/2022/04/GHSA-c7mq-437h-4468/GHSA-c7mq-437h-4468.json +++ b/advisories/unreviewed/2022/04/GHSA-c7mq-437h-4468/GHSA-c7mq-437h-4468.json @@ -7,12 +7,8 @@ "CVE-2004-0061" ], "details": "WWW File Share Pro 2.42 and earlier allows remote attackers to bypass directory access restrictions via (1) a URL with a trailing . (dot), or (2) a URI with a leading slash or backslash character.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c98c-vg9g-2g99/GHSA-c98c-vg9g-2g99.json b/advisories/unreviewed/2022/04/GHSA-c98c-vg9g-2g99/GHSA-c98c-vg9g-2g99.json index 1965be611f8..b14336d0cae 100644 --- a/advisories/unreviewed/2022/04/GHSA-c98c-vg9g-2g99/GHSA-c98c-vg9g-2g99.json +++ b/advisories/unreviewed/2022/04/GHSA-c98c-vg9g-2g99/GHSA-c98c-vg9g-2g99.json @@ -7,12 +7,8 @@ "CVE-2004-0157" ], "details": "x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute arbitrary code by modifying the path to point to a malicious rmail program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cf7w-6qj4-2c2p/GHSA-cf7w-6qj4-2c2p.json b/advisories/unreviewed/2022/04/GHSA-cf7w-6qj4-2c2p/GHSA-cf7w-6qj4-2c2p.json index 6b7a60ad759..e39f11cc082 100644 --- a/advisories/unreviewed/2022/04/GHSA-cf7w-6qj4-2c2p/GHSA-cf7w-6qj4-2c2p.json +++ b/advisories/unreviewed/2022/04/GHSA-cf7w-6qj4-2c2p/GHSA-cf7w-6qj4-2c2p.json @@ -7,12 +7,8 @@ "CVE-2003-1509" ], "details": "Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne Player 6.0.11.853 allows remote attackers to execute arbitrary script in the local security zone by embedding script in a temp file before the temp file is executed by the default web browser.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cfxp-5p4j-8p4w/GHSA-cfxp-5p4j-8p4w.json b/advisories/unreviewed/2022/04/GHSA-cfxp-5p4j-8p4w/GHSA-cfxp-5p4j-8p4w.json index 6e98f25386f..aeadb211ed5 100644 --- a/advisories/unreviewed/2022/04/GHSA-cfxp-5p4j-8p4w/GHSA-cfxp-5p4j-8p4w.json +++ b/advisories/unreviewed/2022/04/GHSA-cfxp-5p4j-8p4w/GHSA-cfxp-5p4j-8p4w.json @@ -7,12 +7,8 @@ "CVE-2003-1479" ], "details": "Cross-site scripting (XSS) vulnerability in webcamXP 1.02.432 and 1.02.535 allows remote attackers to inject arbitrary web script or HTML via the message field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-cg9x-p438-q24j/GHSA-cg9x-p438-q24j.json b/advisories/unreviewed/2022/04/GHSA-cg9x-p438-q24j/GHSA-cg9x-p438-q24j.json index 7c22949604a..168a7131088 100644 --- a/advisories/unreviewed/2022/04/GHSA-cg9x-p438-q24j/GHSA-cg9x-p438-q24j.json +++ b/advisories/unreviewed/2022/04/GHSA-cg9x-p438-q24j/GHSA-cg9x-p438-q24j.json @@ -7,12 +7,8 @@ "CVE-2004-0117" ], "details": "Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-ch67-3f6h-8cjm/GHSA-ch67-3f6h-8cjm.json b/advisories/unreviewed/2022/04/GHSA-ch67-3f6h-8cjm/GHSA-ch67-3f6h-8cjm.json index 558b041b935..2429ee45f66 100644 --- a/advisories/unreviewed/2022/04/GHSA-ch67-3f6h-8cjm/GHSA-ch67-3f6h-8cjm.json +++ b/advisories/unreviewed/2022/04/GHSA-ch67-3f6h-8cjm/GHSA-ch67-3f6h-8cjm.json @@ -7,12 +7,8 @@ "CVE-2003-1498" ], "details": "Cross-site scripting (XSS) vulnerability in search.php for WRENSOFT Zoom Search Engine 2.0 Build 1018 and earlier allows remote attackers to inject arbitrary web script or HTML via the zoom_query parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-chm7-w788-3xfh/GHSA-chm7-w788-3xfh.json b/advisories/unreviewed/2022/04/GHSA-chm7-w788-3xfh/GHSA-chm7-w788-3xfh.json index d42cc4fb559..e039c11b906 100644 --- a/advisories/unreviewed/2022/04/GHSA-chm7-w788-3xfh/GHSA-chm7-w788-3xfh.json +++ b/advisories/unreviewed/2022/04/GHSA-chm7-w788-3xfh/GHSA-chm7-w788-3xfh.json @@ -7,12 +7,8 @@ "CVE-2003-1538" ], "details": "susehelp in SuSE Linux 8.1, Enterprise Server 8, Office Server, and Openexchange Server 4 does not properly filter shell metacharacters, which allows remote attackers to execute arbitrary commands via CGI queries.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-cm23-hmwf-5vg9/GHSA-cm23-hmwf-5vg9.json b/advisories/unreviewed/2022/04/GHSA-cm23-hmwf-5vg9/GHSA-cm23-hmwf-5vg9.json index ca5ccf905ce..bfa56c96df8 100644 --- a/advisories/unreviewed/2022/04/GHSA-cm23-hmwf-5vg9/GHSA-cm23-hmwf-5vg9.json +++ b/advisories/unreviewed/2022/04/GHSA-cm23-hmwf-5vg9/GHSA-cm23-hmwf-5vg9.json @@ -7,12 +7,8 @@ "CVE-2003-1475" ], "details": "Netbus 1.5 through 1.7 allows more than one client to be connected at the same time, but only prompts the first connection for authentication, which allows remote attackers to gain access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-cmmx-rvgh-2vxw/GHSA-cmmx-rvgh-2vxw.json b/advisories/unreviewed/2022/04/GHSA-cmmx-rvgh-2vxw/GHSA-cmmx-rvgh-2vxw.json index 3008bf95d8f..98f5f52fb37 100644 --- a/advisories/unreviewed/2022/04/GHSA-cmmx-rvgh-2vxw/GHSA-cmmx-rvgh-2vxw.json +++ b/advisories/unreviewed/2022/04/GHSA-cmmx-rvgh-2vxw/GHSA-cmmx-rvgh-2vxw.json @@ -7,12 +7,8 @@ "CVE-2004-0224" ], "details": "Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote attackers to execute arbitrary code \"when Unicode character is out of BMP range.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cq3f-8v4v-hw4w/GHSA-cq3f-8v4v-hw4w.json b/advisories/unreviewed/2022/04/GHSA-cq3f-8v4v-hw4w/GHSA-cq3f-8v4v-hw4w.json index 3a811609062..4d77f1eeed0 100644 --- a/advisories/unreviewed/2022/04/GHSA-cq3f-8v4v-hw4w/GHSA-cq3f-8v4v-hw4w.json +++ b/advisories/unreviewed/2022/04/GHSA-cq3f-8v4v-hw4w/GHSA-cq3f-8v4v-hw4w.json @@ -7,12 +7,8 @@ "CVE-2003-1574" ], "details": "TikiWiki 1.6.1 allows remote attackers to bypass authentication by entering a valid username with an arbitrary password, possibly related to the Internet Explorer \"Remember Me\" feature. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-crmp-658v-vhrp/GHSA-crmp-658v-vhrp.json b/advisories/unreviewed/2022/04/GHSA-crmp-658v-vhrp/GHSA-crmp-658v-vhrp.json index 6a6c58ebf5b..69547e3dc4a 100644 --- a/advisories/unreviewed/2022/04/GHSA-crmp-658v-vhrp/GHSA-crmp-658v-vhrp.json +++ b/advisories/unreviewed/2022/04/GHSA-crmp-658v-vhrp/GHSA-crmp-658v-vhrp.json @@ -7,12 +7,8 @@ "CVE-2003-1599" ], "details": "PHP remote file inclusion vulnerability in wp-links/links.all.php in WordPress 0.70 allows remote attackers to execute arbitrary PHP code via a URL in the $abspath variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-cxq8-frpg-8q64/GHSA-cxq8-frpg-8q64.json b/advisories/unreviewed/2022/04/GHSA-cxq8-frpg-8q64/GHSA-cxq8-frpg-8q64.json index cfe4b8a25eb..65bd408646b 100644 --- a/advisories/unreviewed/2022/04/GHSA-cxq8-frpg-8q64/GHSA-cxq8-frpg-8q64.json +++ b/advisories/unreviewed/2022/04/GHSA-cxq8-frpg-8q64/GHSA-cxq8-frpg-8q64.json @@ -7,12 +7,8 @@ "CVE-2003-1603" ], "details": "GE Healthcare Discovery VH has a default password of (1) interfile for the ftpclient user of the Interfile server or (2) \"2\" for the LOCAL user of the FTP server for the Codonics printer, which has unspecified impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cxqv-7f9g-p3wr/GHSA-cxqv-7f9g-p3wr.json b/advisories/unreviewed/2022/04/GHSA-cxqv-7f9g-p3wr/GHSA-cxqv-7f9g-p3wr.json index 1f2d6f7eb9b..94edbe0e488 100644 --- a/advisories/unreviewed/2022/04/GHSA-cxqv-7f9g-p3wr/GHSA-cxqv-7f9g-p3wr.json +++ b/advisories/unreviewed/2022/04/GHSA-cxqv-7f9g-p3wr/GHSA-cxqv-7f9g-p3wr.json @@ -7,12 +7,8 @@ "CVE-2004-0209" ], "details": "Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats that involve \"an unchecked buffer.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-f6x9-xgw4-rvw9/GHSA-f6x9-xgw4-rvw9.json b/advisories/unreviewed/2022/04/GHSA-f6x9-xgw4-rvw9/GHSA-f6x9-xgw4-rvw9.json index e002dedbd6d..ed230e48d1b 100644 --- a/advisories/unreviewed/2022/04/GHSA-f6x9-xgw4-rvw9/GHSA-f6x9-xgw4-rvw9.json +++ b/advisories/unreviewed/2022/04/GHSA-f6x9-xgw4-rvw9/GHSA-f6x9-xgw4-rvw9.json @@ -7,12 +7,8 @@ "CVE-2004-0075" ], "details": "The Vicam USB driver in Linux before 2.4.25 does not use the copy_from_user function when copying data from userspace to kernel space, which crosses security boundaries and allows local users to cause a denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-f766-fjw3-vvfv/GHSA-f766-fjw3-vvfv.json b/advisories/unreviewed/2022/04/GHSA-f766-fjw3-vvfv/GHSA-f766-fjw3-vvfv.json index 0b06db7f565..37918cf7696 100644 --- a/advisories/unreviewed/2022/04/GHSA-f766-fjw3-vvfv/GHSA-f766-fjw3-vvfv.json +++ b/advisories/unreviewed/2022/04/GHSA-f766-fjw3-vvfv/GHSA-f766-fjw3-vvfv.json @@ -7,12 +7,8 @@ "CVE-2004-0129" ], "details": "Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in the what parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-f7gm-fj67-499w/GHSA-f7gm-fj67-499w.json b/advisories/unreviewed/2022/04/GHSA-f7gm-fj67-499w/GHSA-f7gm-fj67-499w.json index b0500ef80ca..fdf84746e48 100644 --- a/advisories/unreviewed/2022/04/GHSA-f7gm-fj67-499w/GHSA-f7gm-fj67-499w.json +++ b/advisories/unreviewed/2022/04/GHSA-f7gm-fj67-499w/GHSA-f7gm-fj67-499w.json @@ -7,12 +7,8 @@ "CVE-2004-0202" ], "details": "IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-ff2v-7g73-cm67/GHSA-ff2v-7g73-cm67.json b/advisories/unreviewed/2022/04/GHSA-ff2v-7g73-cm67/GHSA-ff2v-7g73-cm67.json index c79ab8d199b..91580423c27 100644 --- a/advisories/unreviewed/2022/04/GHSA-ff2v-7g73-cm67/GHSA-ff2v-7g73-cm67.json +++ b/advisories/unreviewed/2022/04/GHSA-ff2v-7g73-cm67/GHSA-ff2v-7g73-cm67.json @@ -7,12 +7,8 @@ "CVE-2004-0087" ], "details": "The System Configuration subsystem in Mac OS 10.2.8 and 10.3.2 allows local users to modify network settings, a different vulnerability than CVE-2004-0088.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-ff3x-wrw4-fq4c/GHSA-ff3x-wrw4-fq4c.json b/advisories/unreviewed/2022/04/GHSA-ff3x-wrw4-fq4c/GHSA-ff3x-wrw4-fq4c.json index 245aa3e97a7..51ef4bf6067 100644 --- a/advisories/unreviewed/2022/04/GHSA-ff3x-wrw4-fq4c/GHSA-ff3x-wrw4-fq4c.json +++ b/advisories/unreviewed/2022/04/GHSA-ff3x-wrw4-fq4c/GHSA-ff3x-wrw4-fq4c.json @@ -7,12 +7,8 @@ "CVE-2004-0220" ], "details": "isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service via an ISAKMP packet with a malformed Cert Request payload, which causes an integer underflow that is used in a malloc operation that is not properly handled, as demonstrated by the Striker ISAKMP Protocol Test Suite.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-fg9x-v7p8-v6mh/GHSA-fg9x-v7p8-v6mh.json b/advisories/unreviewed/2022/04/GHSA-fg9x-v7p8-v6mh/GHSA-fg9x-v7p8-v6mh.json index 2511ee653a6..140fffa0f56 100644 --- a/advisories/unreviewed/2022/04/GHSA-fg9x-v7p8-v6mh/GHSA-fg9x-v7p8-v6mh.json +++ b/advisories/unreviewed/2022/04/GHSA-fg9x-v7p8-v6mh/GHSA-fg9x-v7p8-v6mh.json @@ -7,12 +7,8 @@ "CVE-2003-1584" ], "details": "Cross-site scripting (XSS) vulnerability in SurfStats allows remote attackers to inject arbitrary web script or HTML via a crafted client domain name, related to an \"Inverse Lookup Log Corruption (ILLC)\" issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-fgf8-2p2f-v66c/GHSA-fgf8-2p2f-v66c.json b/advisories/unreviewed/2022/04/GHSA-fgf8-2p2f-v66c/GHSA-fgf8-2p2f-v66c.json index b8d8207c01b..9794bf3b219 100644 --- a/advisories/unreviewed/2022/04/GHSA-fgf8-2p2f-v66c/GHSA-fgf8-2p2f-v66c.json +++ b/advisories/unreviewed/2022/04/GHSA-fgf8-2p2f-v66c/GHSA-fgf8-2p2f-v66c.json @@ -7,12 +7,8 @@ "CVE-2004-0028" ], "details": "jitterbug 1.6.2 does not properly sanitize inputs, which allows remote authenticated users to execute arbitrary commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fgfq-r4qc-vfcx/GHSA-fgfq-r4qc-vfcx.json b/advisories/unreviewed/2022/04/GHSA-fgfq-r4qc-vfcx/GHSA-fgfq-r4qc-vfcx.json index 8e376eb286b..e18599df468 100644 --- a/advisories/unreviewed/2022/04/GHSA-fgfq-r4qc-vfcx/GHSA-fgfq-r4qc-vfcx.json +++ b/advisories/unreviewed/2022/04/GHSA-fgfq-r4qc-vfcx/GHSA-fgfq-r4qc-vfcx.json @@ -7,12 +7,8 @@ "CVE-2003-1536" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Codeworx Technologies DCP-Portal 5.3.1 allow remote attackers to inject arbitrary web script or HTML via (1) the q parameter to search.php and (2) the year parameter to calendar.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-fjfq-rq7w-v2wf/GHSA-fjfq-rq7w-v2wf.json b/advisories/unreviewed/2022/04/GHSA-fjfq-rq7w-v2wf/GHSA-fjfq-rq7w-v2wf.json index 285db5e5978..4d21faaeb16 100644 --- a/advisories/unreviewed/2022/04/GHSA-fjfq-rq7w-v2wf/GHSA-fjfq-rq7w-v2wf.json +++ b/advisories/unreviewed/2022/04/GHSA-fjfq-rq7w-v2wf/GHSA-fjfq-rq7w-v2wf.json @@ -7,12 +7,8 @@ "CVE-2004-0036" ], "details": "SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information via the eventid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fpmp-28qw-xm8r/GHSA-fpmp-28qw-xm8r.json b/advisories/unreviewed/2022/04/GHSA-fpmp-28qw-xm8r/GHSA-fpmp-28qw-xm8r.json index 114ce2a808f..f37dac2a3f3 100644 --- a/advisories/unreviewed/2022/04/GHSA-fpmp-28qw-xm8r/GHSA-fpmp-28qw-xm8r.json +++ b/advisories/unreviewed/2022/04/GHSA-fpmp-28qw-xm8r/GHSA-fpmp-28qw-xm8r.json @@ -7,12 +7,8 @@ "CVE-2003-1560" ], "details": "Netscape 4 sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-fqg3-r39m-9p3c/GHSA-fqg3-r39m-9p3c.json b/advisories/unreviewed/2022/04/GHSA-fqg3-r39m-9p3c/GHSA-fqg3-r39m-9p3c.json index 7bfc33c8305..f6668e580ca 100644 --- a/advisories/unreviewed/2022/04/GHSA-fqg3-r39m-9p3c/GHSA-fqg3-r39m-9p3c.json +++ b/advisories/unreviewed/2022/04/GHSA-fqg3-r39m-9p3c/GHSA-fqg3-r39m-9p3c.json @@ -7,12 +7,8 @@ "CVE-2004-0211" ], "details": "The kernel for Microsoft Windows Server 2003 does not reset certain values in CPU data structures, which allows local users to cause a denial of service (system crash) via a malicious program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fqq5-rq29-wc55/GHSA-fqq5-rq29-wc55.json b/advisories/unreviewed/2022/04/GHSA-fqq5-rq29-wc55/GHSA-fqq5-rq29-wc55.json index 8e87c627c3f..25bc147d364 100644 --- a/advisories/unreviewed/2022/04/GHSA-fqq5-rq29-wc55/GHSA-fqq5-rq29-wc55.json +++ b/advisories/unreviewed/2022/04/GHSA-fqq5-rq29-wc55/GHSA-fqq5-rq29-wc55.json @@ -7,12 +7,8 @@ "CVE-2003-1514" ], "details": "eMule 0.29c allows remote attackers to cause a denial of service (crash) via a long password, possibly due to a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-fr8v-g2gh-36rv/GHSA-fr8v-g2gh-36rv.json b/advisories/unreviewed/2022/04/GHSA-fr8v-g2gh-36rv/GHSA-fr8v-g2gh-36rv.json index f121f98fbc6..0ee5fbaf755 100644 --- a/advisories/unreviewed/2022/04/GHSA-fr8v-g2gh-36rv/GHSA-fr8v-g2gh-36rv.json +++ b/advisories/unreviewed/2022/04/GHSA-fr8v-g2gh-36rv/GHSA-fr8v-g2gh-36rv.json @@ -7,12 +7,8 @@ "CVE-2003-1563" ], "details": "Sun Cluster 2.2 through 3.2 for Oracle Parallel Server / Real Application Clusters (OPS/RAC) allows local users to cause a denial of service (cluster node panic or abort) by launching a daemon listening on a TCP port that would otherwise be used by the Distributed Lock Manager (DLM), possibly involving this daemon responding in a manner that spoofs a cluster reconfiguration.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fvx3-52x7-x6w4/GHSA-fvx3-52x7-x6w4.json b/advisories/unreviewed/2022/04/GHSA-fvx3-52x7-x6w4/GHSA-fvx3-52x7-x6w4.json index acb0d003008..5143a92dd47 100644 --- a/advisories/unreviewed/2022/04/GHSA-fvx3-52x7-x6w4/GHSA-fvx3-52x7-x6w4.json +++ b/advisories/unreviewed/2022/04/GHSA-fvx3-52x7-x6w4/GHSA-fvx3-52x7-x6w4.json @@ -7,12 +7,8 @@ "CVE-2004-0063" ], "details": "The SPP_VerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18 and 1.6.18 returns a Status_OK value even if the HSM returns a different status code, which could cause applications to make incorrect security-critical decisions, e.g. by accepting an invalid PIN number.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fwqj-284x-gfhj/GHSA-fwqj-284x-gfhj.json b/advisories/unreviewed/2022/04/GHSA-fwqj-284x-gfhj/GHSA-fwqj-284x-gfhj.json index df274c73e3c..4ca4c3d7d98 100644 --- a/advisories/unreviewed/2022/04/GHSA-fwqj-284x-gfhj/GHSA-fwqj-284x-gfhj.json +++ b/advisories/unreviewed/2022/04/GHSA-fwqj-284x-gfhj/GHSA-fwqj-284x-gfhj.json @@ -7,12 +7,8 @@ "CVE-2004-0016" ], "details": "The calendar module for phpgroupware 0.9.14 does not enforce the \"save extension\" feature for holiday files, which allows remote attackers to create and execute PHP files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fxjg-rprr-8x3h/GHSA-fxjg-rprr-8x3h.json b/advisories/unreviewed/2022/04/GHSA-fxjg-rprr-8x3h/GHSA-fxjg-rprr-8x3h.json index 70cdfd0600f..595a180e5c3 100644 --- a/advisories/unreviewed/2022/04/GHSA-fxjg-rprr-8x3h/GHSA-fxjg-rprr-8x3h.json +++ b/advisories/unreviewed/2022/04/GHSA-fxjg-rprr-8x3h/GHSA-fxjg-rprr-8x3h.json @@ -7,12 +7,8 @@ "CVE-2004-0165" ], "details": "Format string vulnerability in Point-to-Point Protocol (PPP) daemon (pppd) 2.4.0 for Mac OS X 10.3.2 and earlier allows remote attackers to read arbitrary pppd process data, including PAP or CHAP authentication credentials, to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-g3fr-x7rp-h3r6/GHSA-g3fr-x7rp-h3r6.json b/advisories/unreviewed/2022/04/GHSA-g3fr-x7rp-h3r6/GHSA-g3fr-x7rp-h3r6.json index 8b5608192a9..56cfae35c07 100644 --- a/advisories/unreviewed/2022/04/GHSA-g3fr-x7rp-h3r6/GHSA-g3fr-x7rp-h3r6.json +++ b/advisories/unreviewed/2022/04/GHSA-g3fr-x7rp-h3r6/GHSA-g3fr-x7rp-h3r6.json @@ -7,12 +7,8 @@ "CVE-2004-0069" ], "details": "Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wscanf function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-g594-8xgx-ww3j/GHSA-g594-8xgx-ww3j.json b/advisories/unreviewed/2022/04/GHSA-g594-8xgx-ww3j/GHSA-g594-8xgx-ww3j.json index 9e05994fd50..6e6862591fa 100644 --- a/advisories/unreviewed/2022/04/GHSA-g594-8xgx-ww3j/GHSA-g594-8xgx-ww3j.json +++ b/advisories/unreviewed/2022/04/GHSA-g594-8xgx-ww3j/GHSA-g594-8xgx-ww3j.json @@ -7,12 +7,8 @@ "CVE-2003-1582" ], "details": "Microsoft Internet Information Services (IIS) 6.0, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files via an HTTP request in conjunction with a crafted DNS response, as demonstrated by injecting XSS sequences, related to an \"Inverse Lookup Log Corruption (ILLC)\" issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-g6gr-9gwj-m25x/GHSA-g6gr-9gwj-m25x.json b/advisories/unreviewed/2022/04/GHSA-g6gr-9gwj-m25x/GHSA-g6gr-9gwj-m25x.json index dd3965b7dd5..4e15e005b13 100644 --- a/advisories/unreviewed/2022/04/GHSA-g6gr-9gwj-m25x/GHSA-g6gr-9gwj-m25x.json +++ b/advisories/unreviewed/2022/04/GHSA-g6gr-9gwj-m25x/GHSA-g6gr-9gwj-m25x.json @@ -7,12 +7,8 @@ "CVE-2004-0040" ], "details": "Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows remote attackers to execute arbitrary code via an ISAKMP packet with a large Certificate Request packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-g6jc-m4w6-hw6v/GHSA-g6jc-m4w6-hw6v.json b/advisories/unreviewed/2022/04/GHSA-g6jc-m4w6-hw6v/GHSA-g6jc-m4w6-hw6v.json index ac8e30d3fd3..1f0ed1374f6 100644 --- a/advisories/unreviewed/2022/04/GHSA-g6jc-m4w6-hw6v/GHSA-g6jc-m4w6-hw6v.json +++ b/advisories/unreviewed/2022/04/GHSA-g6jc-m4w6-hw6v/GHSA-g6jc-m4w6-hw6v.json @@ -7,12 +7,8 @@ "CVE-2003-1543" ], "details": "Cross-site scripting (XSS) vulnerability in Bajie Http Web Server 0.95zxe, 0.95zxc, and possibly others, allows remote attackers to inject arbitrary web script or HTML via the query string, which is reflected in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-g944-5597-5vcq/GHSA-g944-5597-5vcq.json b/advisories/unreviewed/2022/04/GHSA-g944-5597-5vcq/GHSA-g944-5597-5vcq.json index 391a561c83d..bd84bfe45bc 100644 --- a/advisories/unreviewed/2022/04/GHSA-g944-5597-5vcq/GHSA-g944-5597-5vcq.json +++ b/advisories/unreviewed/2022/04/GHSA-g944-5597-5vcq/GHSA-g944-5597-5vcq.json @@ -7,12 +7,8 @@ "CVE-2003-1522" ], "details": "Cross-site scripting (XSS) vulnerability in PSCS VPOP3 Web Mail server 2.0e and 2.0f allows remote attackers to inject arbitrary web script or HTML via the redirect parameter to the admin/index.html page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-g9gj-vq7j-hr76/GHSA-g9gj-vq7j-hr76.json b/advisories/unreviewed/2022/04/GHSA-g9gj-vq7j-hr76/GHSA-g9gj-vq7j-hr76.json index 0421268d00d..cdcd3704873 100644 --- a/advisories/unreviewed/2022/04/GHSA-g9gj-vq7j-hr76/GHSA-g9gj-vq7j-hr76.json +++ b/advisories/unreviewed/2022/04/GHSA-g9gj-vq7j-hr76/GHSA-g9gj-vq7j-hr76.json @@ -7,12 +7,8 @@ "CVE-2004-0045" ], "details": "Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-g9jc-q2p4-r6fj/GHSA-g9jc-q2p4-r6fj.json b/advisories/unreviewed/2022/04/GHSA-g9jc-q2p4-r6fj/GHSA-g9jc-q2p4-r6fj.json index a214b511cb6..1a125ac196c 100644 --- a/advisories/unreviewed/2022/04/GHSA-g9jc-q2p4-r6fj/GHSA-g9jc-q2p4-r6fj.json +++ b/advisories/unreviewed/2022/04/GHSA-g9jc-q2p4-r6fj/GHSA-g9jc-q2p4-r6fj.json @@ -7,12 +7,8 @@ "CVE-2004-0090" ], "details": "Unknown vulnerability in Windows File Sharing for Mac OS X 10.1.5 through 10.3.2 does not \"shutdown properly,\" which has unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gj77-h7vm-x2wc/GHSA-gj77-h7vm-x2wc.json b/advisories/unreviewed/2022/04/GHSA-gj77-h7vm-x2wc/GHSA-gj77-h7vm-x2wc.json index a67fad46ff7..6ceceadee7d 100644 --- a/advisories/unreviewed/2022/04/GHSA-gj77-h7vm-x2wc/GHSA-gj77-h7vm-x2wc.json +++ b/advisories/unreviewed/2022/04/GHSA-gj77-h7vm-x2wc/GHSA-gj77-h7vm-x2wc.json @@ -7,12 +7,8 @@ "CVE-2004-0060" ], "details": "WWW File Share Pro 2.42 and earlier allows remote attackers to cause a denial of service (crash) via a large POST request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gmf2-67q7-xh48/GHSA-gmf2-67q7-xh48.json b/advisories/unreviewed/2022/04/GHSA-gmf2-67q7-xh48/GHSA-gmf2-67q7-xh48.json index 197f42a5503..e8faaf375df 100644 --- a/advisories/unreviewed/2022/04/GHSA-gmf2-67q7-xh48/GHSA-gmf2-67q7-xh48.json +++ b/advisories/unreviewed/2022/04/GHSA-gmf2-67q7-xh48/GHSA-gmf2-67q7-xh48.json @@ -7,12 +7,8 @@ "CVE-2003-1508" ], "details": "Buffer overflow in mIRC 6.12, when the DCC get dialog window has been minimized and the user opens the minimized window, allows remote attackers to cause a denial of service (crash) via a long filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-gpjv-p254-pq8q/GHSA-gpjv-p254-pq8q.json b/advisories/unreviewed/2022/04/GHSA-gpjv-p254-pq8q/GHSA-gpjv-p254-pq8q.json index b7b374fa8ed..1baa27ec102 100644 --- a/advisories/unreviewed/2022/04/GHSA-gpjv-p254-pq8q/GHSA-gpjv-p254-pq8q.json +++ b/advisories/unreviewed/2022/04/GHSA-gpjv-p254-pq8q/GHSA-gpjv-p254-pq8q.json @@ -7,12 +7,8 @@ "CVE-2004-0197" ], "details": "Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-crafted database query.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gqr2-x8f5-qhj4/GHSA-gqr2-x8f5-qhj4.json b/advisories/unreviewed/2022/04/GHSA-gqr2-x8f5-qhj4/GHSA-gqr2-x8f5-qhj4.json index 35748319f42..17e6c943394 100644 --- a/advisories/unreviewed/2022/04/GHSA-gqr2-x8f5-qhj4/GHSA-gqr2-x8f5-qhj4.json +++ b/advisories/unreviewed/2022/04/GHSA-gqr2-x8f5-qhj4/GHSA-gqr2-x8f5-qhj4.json @@ -7,12 +7,8 @@ "CVE-2003-1598" ], "details": "SQL injection vulnerability in log.header.php in WordPress 0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the posts variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-grmq-w8gp-cm7w/GHSA-grmq-w8gp-cm7w.json b/advisories/unreviewed/2022/04/GHSA-grmq-w8gp-cm7w/GHSA-grmq-w8gp-cm7w.json index 8a4e770539e..0e8f096a1e8 100644 --- a/advisories/unreviewed/2022/04/GHSA-grmq-w8gp-cm7w/GHSA-grmq-w8gp-cm7w.json +++ b/advisories/unreviewed/2022/04/GHSA-grmq-w8gp-cm7w/GHSA-grmq-w8gp-cm7w.json @@ -7,12 +7,8 @@ "CVE-2004-0086" ], "details": "Unknown vulnerability in the Mail application for Mac OS X 10.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2004-0085.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gw8r-wq33-8jjw/GHSA-gw8r-wq33-8jjw.json b/advisories/unreviewed/2022/04/GHSA-gw8r-wq33-8jjw/GHSA-gw8r-wq33-8jjw.json index 947fa281de2..faa2504cb45 100644 --- a/advisories/unreviewed/2022/04/GHSA-gw8r-wq33-8jjw/GHSA-gw8r-wq33-8jjw.json +++ b/advisories/unreviewed/2022/04/GHSA-gw8r-wq33-8jjw/GHSA-gw8r-wq33-8jjw.json @@ -7,12 +7,8 @@ "CVE-2004-0131" ], "details": "The rad_print_request function in logger.c for GNU Radius daemon (radiusd) before 1.2 allows remote attackers to cause a denial of service (crash) via a UDP packet with an Acct-Status-Type attribute without a value and no Acct-Session-Id attribute, which causes a null dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gwp6-pcx3-xxcc/GHSA-gwp6-pcx3-xxcc.json b/advisories/unreviewed/2022/04/GHSA-gwp6-pcx3-xxcc/GHSA-gwp6-pcx3-xxcc.json index 796ddc48a0a..66670c10246 100644 --- a/advisories/unreviewed/2022/04/GHSA-gwp6-pcx3-xxcc/GHSA-gwp6-pcx3-xxcc.json +++ b/advisories/unreviewed/2022/04/GHSA-gwp6-pcx3-xxcc/GHSA-gwp6-pcx3-xxcc.json @@ -7,12 +7,8 @@ "CVE-2003-1592" ], "details": "Multiple buffer overflows in NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allow remote attackers to cause a denial of service (abend) via a long (1) username or (2) password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-gx46-5x86-xc22/GHSA-gx46-5x86-xc22.json b/advisories/unreviewed/2022/04/GHSA-gx46-5x86-xc22/GHSA-gx46-5x86-xc22.json index 6f0566e20fe..3734c4c0f5f 100644 --- a/advisories/unreviewed/2022/04/GHSA-gx46-5x86-xc22/GHSA-gx46-5x86-xc22.json +++ b/advisories/unreviewed/2022/04/GHSA-gx46-5x86-xc22/GHSA-gx46-5x86-xc22.json @@ -7,12 +7,8 @@ "CVE-2003-1521" ], "details": "Sun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, which violates the Java security model.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h35x-997h-gc53/GHSA-h35x-997h-gc53.json b/advisories/unreviewed/2022/04/GHSA-h35x-997h-gc53/GHSA-h35x-997h-gc53.json index 7282e9b1404..02288fbad83 100644 --- a/advisories/unreviewed/2022/04/GHSA-h35x-997h-gc53/GHSA-h35x-997h-gc53.json +++ b/advisories/unreviewed/2022/04/GHSA-h35x-997h-gc53/GHSA-h35x-997h-gc53.json @@ -7,12 +7,8 @@ "CVE-2003-1585" ], "details": "Cross-site scripting (XSS) vulnerability in WebLogExpert allows remote attackers to inject arbitrary web script or HTML via a crafted client domain name, related to an \"Inverse Lookup Log Corruption (ILLC)\" issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-h3hj-8cpp-cwgw/GHSA-h3hj-8cpp-cwgw.json b/advisories/unreviewed/2022/04/GHSA-h3hj-8cpp-cwgw/GHSA-h3hj-8cpp-cwgw.json index 1ca91b1847a..c98d9fd0f23 100644 --- a/advisories/unreviewed/2022/04/GHSA-h3hj-8cpp-cwgw/GHSA-h3hj-8cpp-cwgw.json +++ b/advisories/unreviewed/2022/04/GHSA-h3hj-8cpp-cwgw/GHSA-h3hj-8cpp-cwgw.json @@ -7,12 +7,8 @@ "CVE-2004-0017" ], "details": "Multiple SQL injection vulnerabilities in the (1) calendar and (2) infolog modules for phpgroupware 0.9.14 allow remote attackers to perform unauthorized database operations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h3j3-m5v6-7353/GHSA-h3j3-m5v6-7353.json b/advisories/unreviewed/2022/04/GHSA-h3j3-m5v6-7353/GHSA-h3j3-m5v6-7353.json index 22f12cf2981..003805e6bc6 100644 --- a/advisories/unreviewed/2022/04/GHSA-h3j3-m5v6-7353/GHSA-h3j3-m5v6-7353.json +++ b/advisories/unreviewed/2022/04/GHSA-h3j3-m5v6-7353/GHSA-h3j3-m5v6-7353.json @@ -7,12 +7,8 @@ "CVE-2004-0056" ], "details": "Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, and 802.11 Wireless IP Gateway allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h7hm-fm85-r375/GHSA-h7hm-fm85-r375.json b/advisories/unreviewed/2022/04/GHSA-h7hm-fm85-r375/GHSA-h7hm-fm85-r375.json index 6a40e24088f..553f8a206bb 100644 --- a/advisories/unreviewed/2022/04/GHSA-h7hm-fm85-r375/GHSA-h7hm-fm85-r375.json +++ b/advisories/unreviewed/2022/04/GHSA-h7hm-fm85-r375/GHSA-h7hm-fm85-r375.json @@ -7,12 +7,8 @@ "CVE-2003-1594" ], "details": "NWFTPD.nlm before 5.04.05 in the FTP server in Novell NetWare 6.5 does not properly enforce FTPREST.TXT settings, which allows remote attackers to bypass intended access restrictions via an FTP session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h8m2-gw8r-5752/GHSA-h8m2-gw8r-5752.json b/advisories/unreviewed/2022/04/GHSA-h8m2-gw8r-5752/GHSA-h8m2-gw8r-5752.json index 2fcb7b7c16b..4029199b7e7 100644 --- a/advisories/unreviewed/2022/04/GHSA-h8m2-gw8r-5752/GHSA-h8m2-gw8r-5752.json +++ b/advisories/unreviewed/2022/04/GHSA-h8m2-gw8r-5752/GHSA-h8m2-gw8r-5752.json @@ -7,12 +7,8 @@ "CVE-2003-1480" ], "details": "MySQL 3.20 through 4.1.0 uses a weak algorithm for hashed passwords, which makes it easier for attackers to decrypt the password via brute force methods.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h8w6-2w9h-h7rw/GHSA-h8w6-2w9h-h7rw.json b/advisories/unreviewed/2022/04/GHSA-h8w6-2w9h-h7rw/GHSA-h8w6-2w9h-h7rw.json index d5ce17b7239..ec33f5bd03d 100644 --- a/advisories/unreviewed/2022/04/GHSA-h8w6-2w9h-h7rw/GHSA-h8w6-2w9h-h7rw.json +++ b/advisories/unreviewed/2022/04/GHSA-h8w6-2w9h-h7rw/GHSA-h8w6-2w9h-h7rw.json @@ -7,12 +7,8 @@ "CVE-2004-0152" ], "details": "Multiple stack-based buffer overflows in (1) the encode_mime function, (2) the encode_uuencode function, (3) or the decode_uuencode function for emil 2.1.0 and earlier allow remote attackers to execute arbitrary code via e-mail messages containing attachments with filenames.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h93c-xg3w-5f5p/GHSA-h93c-xg3w-5f5p.json b/advisories/unreviewed/2022/04/GHSA-h93c-xg3w-5f5p/GHSA-h93c-xg3w-5f5p.json index 3e1b4099097..b6f2c618efb 100644 --- a/advisories/unreviewed/2022/04/GHSA-h93c-xg3w-5f5p/GHSA-h93c-xg3w-5f5p.json +++ b/advisories/unreviewed/2022/04/GHSA-h93c-xg3w-5f5p/GHSA-h93c-xg3w-5f5p.json @@ -7,12 +7,8 @@ "CVE-2003-1469" ], "details": "The default configuration of ColdFusion MX has the \"Enable Robust Exception Information\" option selected, which allows remote attackers to obtain the full path of the web server via a direct request to CFIDE/probe.cfm, which leaks the path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-h9pq-wmwj-wp3f/GHSA-h9pq-wmwj-wp3f.json b/advisories/unreviewed/2022/04/GHSA-h9pq-wmwj-wp3f/GHSA-h9pq-wmwj-wp3f.json index cbac5892eb0..bc8a77f02f6 100644 --- a/advisories/unreviewed/2022/04/GHSA-h9pq-wmwj-wp3f/GHSA-h9pq-wmwj-wp3f.json +++ b/advisories/unreviewed/2022/04/GHSA-h9pq-wmwj-wp3f/GHSA-h9pq-wmwj-wp3f.json @@ -7,12 +7,8 @@ "CVE-2004-0191" ], "details": "Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hg98-7xmf-f2f6/GHSA-hg98-7xmf-f2f6.json b/advisories/unreviewed/2022/04/GHSA-hg98-7xmf-f2f6/GHSA-hg98-7xmf-f2f6.json index 4afe5720fd1..11e94c26f00 100644 --- a/advisories/unreviewed/2022/04/GHSA-hg98-7xmf-f2f6/GHSA-hg98-7xmf-f2f6.json +++ b/advisories/unreviewed/2022/04/GHSA-hg98-7xmf-f2f6/GHSA-hg98-7xmf-f2f6.json @@ -7,12 +7,8 @@ "CVE-2003-1472" ], "details": "Buffer overflow in 3D-FTP client 4.0 allows remote FTP servers to cause a denial of service (crash) and possibly execute arbitrary code via a long banner.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-hgm3-7qf4-w3mx/GHSA-hgm3-7qf4-w3mx.json b/advisories/unreviewed/2022/04/GHSA-hgm3-7qf4-w3mx/GHSA-hgm3-7qf4-w3mx.json index 1e9a3dfe397..0b9eb0ee4e6 100644 --- a/advisories/unreviewed/2022/04/GHSA-hgm3-7qf4-w3mx/GHSA-hgm3-7qf4-w3mx.json +++ b/advisories/unreviewed/2022/04/GHSA-hgm3-7qf4-w3mx/GHSA-hgm3-7qf4-w3mx.json @@ -7,12 +7,8 @@ "CVE-2003-1554" ], "details": "Cross-site scripting (XSS) vulnerability in scozbook/add.php in ScozNet ScozBook 1.1 BETA allows remote attackers to inject arbitrary web script or HTML via the (1) username, (2) useremail, (3) aim, (4) msn, (5) sitename and (6) siteaddy variables.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-hhcx-wvvr-g534/GHSA-hhcx-wvvr-g534.json b/advisories/unreviewed/2022/04/GHSA-hhcx-wvvr-g534/GHSA-hhcx-wvvr-g534.json index 5ab0a4695be..4535c19f02a 100644 --- a/advisories/unreviewed/2022/04/GHSA-hhcx-wvvr-g534/GHSA-hhcx-wvvr-g534.json +++ b/advisories/unreviewed/2022/04/GHSA-hhcx-wvvr-g534/GHSA-hhcx-wvvr-g534.json @@ -7,12 +7,8 @@ "CVE-2004-0011" ], "details": "Buffer overflow in fsp before 2.81.b18 allows remote users to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hmcx-5pwh-9qrc/GHSA-hmcx-5pwh-9qrc.json b/advisories/unreviewed/2022/04/GHSA-hmcx-5pwh-9qrc/GHSA-hmcx-5pwh-9qrc.json index a944dd07cbe..7e95c7d8b0b 100644 --- a/advisories/unreviewed/2022/04/GHSA-hmcx-5pwh-9qrc/GHSA-hmcx-5pwh-9qrc.json +++ b/advisories/unreviewed/2022/04/GHSA-hmcx-5pwh-9qrc/GHSA-hmcx-5pwh-9qrc.json @@ -7,12 +7,8 @@ "CVE-2004-0181" ], "details": "The JFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the JFS file system, which allows local users to obtain sensitive information by reading the raw device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hp2w-v589-24pq/GHSA-hp2w-v589-24pq.json b/advisories/unreviewed/2022/04/GHSA-hp2w-v589-24pq/GHSA-hp2w-v589-24pq.json index 4bbd5707837..5132f4c2191 100644 --- a/advisories/unreviewed/2022/04/GHSA-hp2w-v589-24pq/GHSA-hp2w-v589-24pq.json +++ b/advisories/unreviewed/2022/04/GHSA-hp2w-v589-24pq/GHSA-hp2w-v589-24pq.json @@ -7,12 +7,8 @@ "CVE-2004-0089" ], "details": "Buffer overflow in TruBlueEnvironment in Mac OS X 10.3.x and 10.2.x allows local users to gain privileges via a long environment variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hq2q-rqpw-7wx5/GHSA-hq2q-rqpw-7wx5.json b/advisories/unreviewed/2022/04/GHSA-hq2q-rqpw-7wx5/GHSA-hq2q-rqpw-7wx5.json index b3bcc92cdfb..7de5c698dd6 100644 --- a/advisories/unreviewed/2022/04/GHSA-hq2q-rqpw-7wx5/GHSA-hq2q-rqpw-7wx5.json +++ b/advisories/unreviewed/2022/04/GHSA-hq2q-rqpw-7wx5/GHSA-hq2q-rqpw-7wx5.json @@ -7,12 +7,8 @@ "CVE-2004-0113" ], "details": "Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumption) via plain HTTP requests to the SSL port of an SSL-enabled server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -136,9 +132,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hv44-j4m2-m73j/GHSA-hv44-j4m2-m73j.json b/advisories/unreviewed/2022/04/GHSA-hv44-j4m2-m73j/GHSA-hv44-j4m2-m73j.json index 673af575a25..dc7a620289b 100644 --- a/advisories/unreviewed/2022/04/GHSA-hv44-j4m2-m73j/GHSA-hv44-j4m2-m73j.json +++ b/advisories/unreviewed/2022/04/GHSA-hv44-j4m2-m73j/GHSA-hv44-j4m2-m73j.json @@ -7,12 +7,8 @@ "CVE-2004-0015" ], "details": "vbox3 0.1.8 and earlier does not properly drop privileges before executing a user-provided TCL script, which allows local users to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hwfq-3hhr-352p/GHSA-hwfq-3hhr-352p.json b/advisories/unreviewed/2022/04/GHSA-hwfq-3hhr-352p/GHSA-hwfq-3hhr-352p.json index 415051b7a66..aa83f308356 100644 --- a/advisories/unreviewed/2022/04/GHSA-hwfq-3hhr-352p/GHSA-hwfq-3hhr-352p.json +++ b/advisories/unreviewed/2022/04/GHSA-hwfq-3hhr-352p/GHSA-hwfq-3hhr-352p.json @@ -7,12 +7,8 @@ "CVE-2004-0082" ], "details": "The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hxg9-qqr8-8wqc/GHSA-hxg9-qqr8-8wqc.json b/advisories/unreviewed/2022/04/GHSA-hxg9-qqr8-8wqc/GHSA-hxg9-qqr8-8wqc.json index d2453ac7814..3f4b09f3398 100644 --- a/advisories/unreviewed/2022/04/GHSA-hxg9-qqr8-8wqc/GHSA-hxg9-qqr8-8wqc.json +++ b/advisories/unreviewed/2022/04/GHSA-hxg9-qqr8-8wqc/GHSA-hxg9-qqr8-8wqc.json @@ -7,12 +7,8 @@ "CVE-2004-0062" ], "details": "Integer overflow in the rnd arithmetic rounding function for various versions of FishCart before 3.1 allows remote attackers to \"cause negative totals\" via an order with a large quantity.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-j44p-mx85-g9cg/GHSA-j44p-mx85-g9cg.json b/advisories/unreviewed/2022/04/GHSA-j44p-mx85-g9cg/GHSA-j44p-mx85-g9cg.json index 4fbc8e4ee07..33e3363f0fa 100644 --- a/advisories/unreviewed/2022/04/GHSA-j44p-mx85-g9cg/GHSA-j44p-mx85-g9cg.json +++ b/advisories/unreviewed/2022/04/GHSA-j44p-mx85-g9cg/GHSA-j44p-mx85-g9cg.json @@ -7,12 +7,8 @@ "CVE-2003-1558" ], "details": "Buffer overflow in httpd.c of fnord 1.6 allows remote attackers to create a denial of service (crash) and possibly execute arbitrary code via a long CGI request passed to the do_cgi function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-j69p-2c37-f494/GHSA-j69p-2c37-f494.json b/advisories/unreviewed/2022/04/GHSA-j69p-2c37-f494/GHSA-j69p-2c37-f494.json index e6f789a09e2..2d2bff5ed95 100644 --- a/advisories/unreviewed/2022/04/GHSA-j69p-2c37-f494/GHSA-j69p-2c37-f494.json +++ b/advisories/unreviewed/2022/04/GHSA-j69p-2c37-f494/GHSA-j69p-2c37-f494.json @@ -7,12 +7,8 @@ "CVE-2003-1478" ], "details": "Konqueror in KDE 3.0.3 allows remote attackers to cause a denial of service (core dump) via a web page that begins with a \"xFFxFE\" byte sequence and a large number of CRLF sequences, as demonstrated using freeze.htm.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-j76p-v4p4-h7mp/GHSA-j76p-v4p4-h7mp.json b/advisories/unreviewed/2022/04/GHSA-j76p-v4p4-h7mp/GHSA-j76p-v4p4-h7mp.json index cae4393107b..8c2a46b92a6 100644 --- a/advisories/unreviewed/2022/04/GHSA-j76p-v4p4-h7mp/GHSA-j76p-v4p4-h7mp.json +++ b/advisories/unreviewed/2022/04/GHSA-j76p-v4p4-h7mp/GHSA-j76p-v4p4-h7mp.json @@ -7,12 +7,8 @@ "CVE-2003-1505" ], "details": "Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) by creating a web page or HTML e-mail with a textarea in a div element whose scrollbar-base-color is modified by a CSS style, which is then moved.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-j9hf-r5pg-vwfx/GHSA-j9hf-r5pg-vwfx.json b/advisories/unreviewed/2022/04/GHSA-j9hf-r5pg-vwfx/GHSA-j9hf-r5pg-vwfx.json index 28d47512ead..f70fe2269ce 100644 --- a/advisories/unreviewed/2022/04/GHSA-j9hf-r5pg-vwfx/GHSA-j9hf-r5pg-vwfx.json +++ b/advisories/unreviewed/2022/04/GHSA-j9hf-r5pg-vwfx/GHSA-j9hf-r5pg-vwfx.json @@ -7,12 +7,8 @@ "CVE-2003-1525" ], "details": "Unspecified vulnerability in My Photo Gallery 3.5, and possibly earlier versions, has unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jff6-hgp5-xgj5/GHSA-jff6-hgp5-xgj5.json b/advisories/unreviewed/2022/04/GHSA-jff6-hgp5-xgj5/GHSA-jff6-hgp5-xgj5.json index 2ddc0c4af03..f2099505e44 100644 --- a/advisories/unreviewed/2022/04/GHSA-jff6-hgp5-xgj5/GHSA-jff6-hgp5-xgj5.json +++ b/advisories/unreviewed/2022/04/GHSA-jff6-hgp5-xgj5/GHSA-jff6-hgp5-xgj5.json @@ -7,12 +7,8 @@ "CVE-2003-1516" ], "details": "The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to share variables, which violates the Java security model and could allow remote attackers to read or write data belonging to a signed applet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jfxg-j4gh-qrgj/GHSA-jfxg-j4gh-qrgj.json b/advisories/unreviewed/2022/04/GHSA-jfxg-j4gh-qrgj/GHSA-jfxg-j4gh-qrgj.json index 836c2010526..423116aebe6 100644 --- a/advisories/unreviewed/2022/04/GHSA-jfxg-j4gh-qrgj/GHSA-jfxg-j4gh-qrgj.json +++ b/advisories/unreviewed/2022/04/GHSA-jfxg-j4gh-qrgj/GHSA-jfxg-j4gh-qrgj.json @@ -7,12 +7,8 @@ "CVE-2004-0029" ], "details": "Lotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable permissions, which allows local users to modify the Notes configuration and gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jggx-7jmp-p9ff/GHSA-jggx-7jmp-p9ff.json b/advisories/unreviewed/2022/04/GHSA-jggx-7jmp-p9ff/GHSA-jggx-7jmp-p9ff.json index 2059a6cd96a..4eb600fd401 100644 --- a/advisories/unreviewed/2022/04/GHSA-jggx-7jmp-p9ff/GHSA-jggx-7jmp-p9ff.json +++ b/advisories/unreviewed/2022/04/GHSA-jggx-7jmp-p9ff/GHSA-jggx-7jmp-p9ff.json @@ -7,12 +7,8 @@ "CVE-2004-0074" ], "details": "Multiple buffer overflows in xsok 1.02 allows local users to gain privileges via (1) a long LANG environment variable, or (2) a long -xsokdir command line argument, a different vulnerability than CVE-2003-0949.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jj37-9mh4-pcf6/GHSA-jj37-9mh4-pcf6.json b/advisories/unreviewed/2022/04/GHSA-jj37-9mh4-pcf6/GHSA-jj37-9mh4-pcf6.json index 8b4583a0324..98b59810d24 100644 --- a/advisories/unreviewed/2022/04/GHSA-jj37-9mh4-pcf6/GHSA-jj37-9mh4-pcf6.json +++ b/advisories/unreviewed/2022/04/GHSA-jj37-9mh4-pcf6/GHSA-jj37-9mh4-pcf6.json @@ -7,12 +7,8 @@ "CVE-2004-0128" ], "details": "PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server that contains a malicious theme.php script.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jq88-mx92-3rpv/GHSA-jq88-mx92-3rpv.json b/advisories/unreviewed/2022/04/GHSA-jq88-mx92-3rpv/GHSA-jq88-mx92-3rpv.json index 04997797c51..6d714f57094 100644 --- a/advisories/unreviewed/2022/04/GHSA-jq88-mx92-3rpv/GHSA-jq88-mx92-3rpv.json +++ b/advisories/unreviewed/2022/04/GHSA-jq88-mx92-3rpv/GHSA-jq88-mx92-3rpv.json @@ -7,12 +7,8 @@ "CVE-2003-1551" ], "details": "Unspecified vulnerability in Novell GroupWise 6 SP3 WebAccess before Revision F has unknown impact and attack vectors related to \"malicious script.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jrm9-wwr5-6jv2/GHSA-jrm9-wwr5-6jv2.json b/advisories/unreviewed/2022/04/GHSA-jrm9-wwr5-6jv2/GHSA-jrm9-wwr5-6jv2.json index 905fa80a027..f86be4a014b 100644 --- a/advisories/unreviewed/2022/04/GHSA-jrm9-wwr5-6jv2/GHSA-jrm9-wwr5-6jv2.json +++ b/advisories/unreviewed/2022/04/GHSA-jrm9-wwr5-6jv2/GHSA-jrm9-wwr5-6jv2.json @@ -7,12 +7,8 @@ "CVE-2003-1547" ], "details": "Cross-site scripting (XSS) vulnerability in block-Forums.php in the Splatt Forum module for PHP-Nuke 6.x allows remote attackers to inject arbitrary web script or HTML via the subject parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-jrr9-3wf4-24qw/GHSA-jrr9-3wf4-24qw.json b/advisories/unreviewed/2022/04/GHSA-jrr9-3wf4-24qw/GHSA-jrr9-3wf4-24qw.json index ae8d2e01bd9..5135db32047 100644 --- a/advisories/unreviewed/2022/04/GHSA-jrr9-3wf4-24qw/GHSA-jrr9-3wf4-24qw.json +++ b/advisories/unreviewed/2022/04/GHSA-jrr9-3wf4-24qw/GHSA-jrr9-3wf4-24qw.json @@ -7,12 +7,8 @@ "CVE-2004-0065" ], "details": "Multiple SQL injection vulnerabilities in phpGedView before 2.65 allow remote attackers to execute arbitrary SQL via (1) timeline.php and (2) placelist.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jvhx-j333-37r2/GHSA-jvhx-j333-37r2.json b/advisories/unreviewed/2022/04/GHSA-jvhx-j333-37r2/GHSA-jvhx-j333-37r2.json index 4dc40e18ec4..10d2e1895ae 100644 --- a/advisories/unreviewed/2022/04/GHSA-jvhx-j333-37r2/GHSA-jvhx-j333-37r2.json +++ b/advisories/unreviewed/2022/04/GHSA-jvhx-j333-37r2/GHSA-jvhx-j333-37r2.json @@ -7,12 +7,8 @@ "CVE-2003-1561" ], "details": "Opera, probably before 7.50, sends Referer headers containing https:// URLs in requests for http:// URLs, which allows remote attackers to obtain potentially sensitive information by reading Referer log data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-jvqp-w76h-93jf/GHSA-jvqp-w76h-93jf.json b/advisories/unreviewed/2022/04/GHSA-jvqp-w76h-93jf/GHSA-jvqp-w76h-93jf.json index a8690c3f170..2e3ee9a06f1 100644 --- a/advisories/unreviewed/2022/04/GHSA-jvqp-w76h-93jf/GHSA-jvqp-w76h-93jf.json +++ b/advisories/unreviewed/2022/04/GHSA-jvqp-w76h-93jf/GHSA-jvqp-w76h-93jf.json @@ -7,12 +7,8 @@ "CVE-2004-0158" ], "details": "Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to (1) editor.c, (2) theme.c, (3) manager.c, (4) config.c, (5) game.c, (6) levels.c, or (7) main.c.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jx24-phgv-935m/GHSA-jx24-phgv-935m.json b/advisories/unreviewed/2022/04/GHSA-jx24-phgv-935m/GHSA-jx24-phgv-935m.json index 350d1f2f383..ac6021e95c2 100644 --- a/advisories/unreviewed/2022/04/GHSA-jx24-phgv-935m/GHSA-jx24-phgv-935m.json +++ b/advisories/unreviewed/2022/04/GHSA-jx24-phgv-935m/GHSA-jx24-phgv-935m.json @@ -7,12 +7,8 @@ "CVE-2004-0218" ], "details": "isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (infinite loop) via an ISAKMP packet with a zero-length payload, as demonstrated by the Striker ISAKMP Protocol Test Suite.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jx9r-h4g2-r43w/GHSA-jx9r-h4g2-r43w.json b/advisories/unreviewed/2022/04/GHSA-jx9r-h4g2-r43w/GHSA-jx9r-h4g2-r43w.json index c46aa8d229a..336e1ab29ab 100644 --- a/advisories/unreviewed/2022/04/GHSA-jx9r-h4g2-r43w/GHSA-jx9r-h4g2-r43w.json +++ b/advisories/unreviewed/2022/04/GHSA-jx9r-h4g2-r43w/GHSA-jx9r-h4g2-r43w.json @@ -7,12 +7,8 @@ "CVE-2003-1464" ], "details": "Buffer overflow in Siemens 45 series mobile phones allows remote attackers to cause a denial of service (disconnect and unavailable inbox) via a Short Message Service (SMS) message with a long image name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-jxw3-88g9-fx95/GHSA-jxw3-88g9-fx95.json b/advisories/unreviewed/2022/04/GHSA-jxw3-88g9-fx95/GHSA-jxw3-88g9-fx95.json index d8333b6b868..e9e48af196f 100644 --- a/advisories/unreviewed/2022/04/GHSA-jxw3-88g9-fx95/GHSA-jxw3-88g9-fx95.json +++ b/advisories/unreviewed/2022/04/GHSA-jxw3-88g9-fx95/GHSA-jxw3-88g9-fx95.json @@ -7,12 +7,8 @@ "CVE-2003-1526" ], "details": "PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as (1) \", (2) ', or (3) > in the search field, which reveals the path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-m9hw-h65g-28p2/GHSA-m9hw-h65g-28p2.json b/advisories/unreviewed/2022/04/GHSA-m9hw-h65g-28p2/GHSA-m9hw-h65g-28p2.json index a38599e4310..9a6b5c10e69 100644 --- a/advisories/unreviewed/2022/04/GHSA-m9hw-h65g-28p2/GHSA-m9hw-h65g-28p2.json +++ b/advisories/unreviewed/2022/04/GHSA-m9hw-h65g-28p2/GHSA-m9hw-h65g-28p2.json @@ -7,12 +7,8 @@ "CVE-2003-1587" ], "details": "Cross-site scripting (XSS) vulnerability in LoganPro allows remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-mghh-jfj9-v2hx/GHSA-mghh-jfj9-v2hx.json b/advisories/unreviewed/2022/04/GHSA-mghh-jfj9-v2hx/GHSA-mghh-jfj9-v2hx.json index 325c24cb9d8..21393196bdd 100644 --- a/advisories/unreviewed/2022/04/GHSA-mghh-jfj9-v2hx/GHSA-mghh-jfj9-v2hx.json +++ b/advisories/unreviewed/2022/04/GHSA-mghh-jfj9-v2hx/GHSA-mghh-jfj9-v2hx.json @@ -7,12 +7,8 @@ "CVE-2003-1586" ], "details": "Cross-site scripting (XSS) vulnerability in WebExpert allows remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-mhm2-pp6r-fp32/GHSA-mhm2-pp6r-fp32.json b/advisories/unreviewed/2022/04/GHSA-mhm2-pp6r-fp32/GHSA-mhm2-pp6r-fp32.json index d96c57b2a88..63ced1eaf71 100644 --- a/advisories/unreviewed/2022/04/GHSA-mhm2-pp6r-fp32/GHSA-mhm2-pp6r-fp32.json +++ b/advisories/unreviewed/2022/04/GHSA-mhm2-pp6r-fp32/GHSA-mhm2-pp6r-fp32.json @@ -7,12 +7,8 @@ "CVE-2004-0067" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary HTML or web script via (1) descendancy.php, (2) index.php, (3) individual.php, (4) login.php, (5) relationship.php, (6) source.php, (7) imageview.php, (8) calendar.php, (9) gedrecord.php, (10) login.php, and (11) gdbi_interface.php. NOTE: some aspects of vector 10 were later reported to affect 4.1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-mm9j-qxx8-rv7x/GHSA-mm9j-qxx8-rv7x.json b/advisories/unreviewed/2022/04/GHSA-mm9j-qxx8-rv7x/GHSA-mm9j-qxx8-rv7x.json index d755e862ba4..121a8d72551 100644 --- a/advisories/unreviewed/2022/04/GHSA-mm9j-qxx8-rv7x/GHSA-mm9j-qxx8-rv7x.json +++ b/advisories/unreviewed/2022/04/GHSA-mm9j-qxx8-rv7x/GHSA-mm9j-qxx8-rv7x.json @@ -7,12 +7,8 @@ "CVE-2004-0058" ], "details": "Antivir / Linux 2.0.9-9, and possibly earlier versions, allows local users to overwrite arbitrary files via a symlink attack on the .pid_antivir_$$ temporary file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mp49-4xhv-78fw/GHSA-mp49-4xhv-78fw.json b/advisories/unreviewed/2022/04/GHSA-mp49-4xhv-78fw/GHSA-mp49-4xhv-78fw.json index 78c2fad02bb..3f171cf6087 100644 --- a/advisories/unreviewed/2022/04/GHSA-mp49-4xhv-78fw/GHSA-mp49-4xhv-78fw.json +++ b/advisories/unreviewed/2022/04/GHSA-mp49-4xhv-78fw/GHSA-mp49-4xhv-78fw.json @@ -7,12 +7,8 @@ "CVE-2004-0123" ], "details": "Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service and possibly execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-mq86-6vpq-5qff/GHSA-mq86-6vpq-5qff.json b/advisories/unreviewed/2022/04/GHSA-mq86-6vpq-5qff/GHSA-mq86-6vpq-5qff.json index 0d500344b7b..6b4aa623f93 100644 --- a/advisories/unreviewed/2022/04/GHSA-mq86-6vpq-5qff/GHSA-mq86-6vpq-5qff.json +++ b/advisories/unreviewed/2022/04/GHSA-mq86-6vpq-5qff/GHSA-mq86-6vpq-5qff.json @@ -7,12 +7,8 @@ "CVE-2004-0192" ], "details": "Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attackers to steal cookies and hijack a management session via a /sgmi URL that contains malicious script, which is not quoted in the resulting error page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mvh8-5g4p-c5ww/GHSA-mvh8-5g4p-c5ww.json b/advisories/unreviewed/2022/04/GHSA-mvh8-5g4p-c5ww/GHSA-mvh8-5g4p-c5ww.json index f622432ca75..8659e3463b9 100644 --- a/advisories/unreviewed/2022/04/GHSA-mvh8-5g4p-c5ww/GHSA-mvh8-5g4p-c5ww.json +++ b/advisories/unreviewed/2022/04/GHSA-mvh8-5g4p-c5ww/GHSA-mvh8-5g4p-c5ww.json @@ -7,12 +7,8 @@ "CVE-2003-1589" ], "details": "Unspecified vulnerability in Sun ONE (aka iPlanet) Web Server 4.1 before SP13 and 6.0 before SP6 on Windows allows attackers to cause a denial of service (daemon crash) via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p2pv-p9gr-65xh/GHSA-p2pv-p9gr-65xh.json b/advisories/unreviewed/2022/04/GHSA-p2pv-p9gr-65xh/GHSA-p2pv-p9gr-65xh.json index 77ddd211c6c..3fde16a27dd 100644 --- a/advisories/unreviewed/2022/04/GHSA-p2pv-p9gr-65xh/GHSA-p2pv-p9gr-65xh.json +++ b/advisories/unreviewed/2022/04/GHSA-p2pv-p9gr-65xh/GHSA-p2pv-p9gr-65xh.json @@ -7,12 +7,8 @@ "CVE-2004-0118" ], "details": "The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access protected kernel memory and execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p36x-7hrc-jp22/GHSA-p36x-7hrc-jp22.json b/advisories/unreviewed/2022/04/GHSA-p36x-7hrc-jp22/GHSA-p36x-7hrc-jp22.json index 799a110ca7d..b021e8d91fc 100644 --- a/advisories/unreviewed/2022/04/GHSA-p36x-7hrc-jp22/GHSA-p36x-7hrc-jp22.json +++ b/advisories/unreviewed/2022/04/GHSA-p36x-7hrc-jp22/GHSA-p36x-7hrc-jp22.json @@ -7,12 +7,8 @@ "CVE-2004-0097" ], "details": "Multiple vulnerabilities in PWLib before 1.6.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p3g3-mx33-cm6q/GHSA-p3g3-mx33-cm6q.json b/advisories/unreviewed/2022/04/GHSA-p3g3-mx33-cm6q/GHSA-p3g3-mx33-cm6q.json index f05bd7cc8d7..252380d77d9 100644 --- a/advisories/unreviewed/2022/04/GHSA-p3g3-mx33-cm6q/GHSA-p3g3-mx33-cm6q.json +++ b/advisories/unreviewed/2022/04/GHSA-p3g3-mx33-cm6q/GHSA-p3g3-mx33-cm6q.json @@ -7,12 +7,8 @@ "CVE-2003-1570" ], "details": "The server in IBM Tivoli Storage Manager (TSM) 5.1.x, 5.2.x before 5.2.1.2, and 6.x before 6.1 does not require credentials to observe the server console in some circumstances, which allows remote authenticated administrators to monitor server operations by establishing a console mode session, related to \"session exposure.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-p77j-p7j8-qhwp/GHSA-p77j-p7j8-qhwp.json b/advisories/unreviewed/2022/04/GHSA-p77j-p7j8-qhwp/GHSA-p77j-p7j8-qhwp.json index c8467179ae6..74323ff172a 100644 --- a/advisories/unreviewed/2022/04/GHSA-p77j-p7j8-qhwp/GHSA-p77j-p7j8-qhwp.json +++ b/advisories/unreviewed/2022/04/GHSA-p77j-p7j8-qhwp/GHSA-p77j-p7j8-qhwp.json @@ -7,12 +7,8 @@ "CVE-2003-1530" ], "details": "SQL injection vulnerability in privmsg.php in phpBB 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the mark[] parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-p93x-8676-4q6g/GHSA-p93x-8676-4q6g.json b/advisories/unreviewed/2022/04/GHSA-p93x-8676-4q6g/GHSA-p93x-8676-4q6g.json index 2fc0effc863..e4a981176e5 100644 --- a/advisories/unreviewed/2022/04/GHSA-p93x-8676-4q6g/GHSA-p93x-8676-4q6g.json +++ b/advisories/unreviewed/2022/04/GHSA-p93x-8676-4q6g/GHSA-p93x-8676-4q6g.json @@ -7,12 +7,8 @@ "CVE-2004-0051" ], "details": "Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported Content-Transfer-Encoding values such as (1) uuencode, (2) mac-binhex40, and (3) yenc, which may be interpreted differently by mail clients.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p97v-fpq8-vh9w/GHSA-p97v-fpq8-vh9w.json b/advisories/unreviewed/2022/04/GHSA-p97v-fpq8-vh9w/GHSA-p97v-fpq8-vh9w.json index 772e1ae4eef..42dfb161e15 100644 --- a/advisories/unreviewed/2022/04/GHSA-p97v-fpq8-vh9w/GHSA-p97v-fpq8-vh9w.json +++ b/advisories/unreviewed/2022/04/GHSA-p97v-fpq8-vh9w/GHSA-p97v-fpq8-vh9w.json @@ -7,12 +7,8 @@ "CVE-2004-0173" ], "details": "Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, allows remote attackers to read arbitrary files via a URL containing \"..%5C\" (dot dot encoded backslash) sequences.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p9vq-4r9p-r387/GHSA-p9vq-4r9p-r387.json b/advisories/unreviewed/2022/04/GHSA-p9vq-4r9p-r387/GHSA-p9vq-4r9p-r387.json index 4ebcda12b75..860d68b735d 100644 --- a/advisories/unreviewed/2022/04/GHSA-p9vq-4r9p-r387/GHSA-p9vq-4r9p-r387.json +++ b/advisories/unreviewed/2022/04/GHSA-p9vq-4r9p-r387/GHSA-p9vq-4r9p-r387.json @@ -7,12 +7,8 @@ "CVE-2003-1467" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in (1) login.php, (2) register.php, (3) post.php, and (4) common.php in Phorum before 3.4.3 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-pm7j-3492-hq9m/GHSA-pm7j-3492-hq9m.json b/advisories/unreviewed/2022/04/GHSA-pm7j-3492-hq9m/GHSA-pm7j-3492-hq9m.json index e698e9d6ede..c4d70e2f042 100644 --- a/advisories/unreviewed/2022/04/GHSA-pm7j-3492-hq9m/GHSA-pm7j-3492-hq9m.json +++ b/advisories/unreviewed/2022/04/GHSA-pm7j-3492-hq9m/GHSA-pm7j-3492-hq9m.json @@ -7,12 +7,8 @@ "CVE-2004-0077" ], "details": "The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -164,9 +160,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pmqh-r9rm-f532/GHSA-pmqh-r9rm-f532.json b/advisories/unreviewed/2022/04/GHSA-pmqh-r9rm-f532/GHSA-pmqh-r9rm-f532.json index 5af349fbe32..8e9b1100e8a 100644 --- a/advisories/unreviewed/2022/04/GHSA-pmqh-r9rm-f532/GHSA-pmqh-r9rm-f532.json +++ b/advisories/unreviewed/2022/04/GHSA-pmqh-r9rm-f532/GHSA-pmqh-r9rm-f532.json @@ -7,12 +7,8 @@ "CVE-2004-0042" ], "details": "vsftpd 1.1.3 generates different error messages depending on whether or not a valid username exists, which allows remote attackers to identify valid usernames.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pp95-7xxx-j2m4/GHSA-pp95-7xxx-j2m4.json b/advisories/unreviewed/2022/04/GHSA-pp95-7xxx-j2m4/GHSA-pp95-7xxx-j2m4.json index 51040df03c8..2c027fa4bb1 100644 --- a/advisories/unreviewed/2022/04/GHSA-pp95-7xxx-j2m4/GHSA-pp95-7xxx-j2m4.json +++ b/advisories/unreviewed/2022/04/GHSA-pp95-7xxx-j2m4/GHSA-pp95-7xxx-j2m4.json @@ -7,12 +7,8 @@ "CVE-2004-0143" ], "details": "Multiple vulnerabilities in Nokia 6310(i) Mobile phones allow remote attackers to cause a denial of service (reset) via malformed Bluetooth OBject EXchange (OBEX) messages, probably triggering buffer overflows.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pvmq-7gq3-5frj/GHSA-pvmq-7gq3-5frj.json b/advisories/unreviewed/2022/04/GHSA-pvmq-7gq3-5frj/GHSA-pvmq-7gq3-5frj.json index 2e56b229026..44075b23caf 100644 --- a/advisories/unreviewed/2022/04/GHSA-pvmq-7gq3-5frj/GHSA-pvmq-7gq3-5frj.json +++ b/advisories/unreviewed/2022/04/GHSA-pvmq-7gq3-5frj/GHSA-pvmq-7gq3-5frj.json @@ -7,12 +7,8 @@ "CVE-2004-0194" ], "details": "Stack-based buffer overflow in the OutputDebugString function for Adobe Acrobat Reader 5.1 allows remote attackers to execute arbitrary code via a PDF document with XML Forms Data Format (XFDF) data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-q2xg-ggm3-v7gm/GHSA-q2xg-ggm3-v7gm.json b/advisories/unreviewed/2022/04/GHSA-q2xg-ggm3-v7gm/GHSA-q2xg-ggm3-v7gm.json index 15a8d3d6484..3d5ae4e8622 100644 --- a/advisories/unreviewed/2022/04/GHSA-q2xg-ggm3-v7gm/GHSA-q2xg-ggm3-v7gm.json +++ b/advisories/unreviewed/2022/04/GHSA-q2xg-ggm3-v7gm/GHSA-q2xg-ggm3-v7gm.json @@ -7,12 +7,8 @@ "CVE-2003-1591" ], "details": "NWFTPD.nlm in the FTP server in Novell NetWare 6.0 before SP4 and 6.5 before SP1 allows user-assisted remote attackers to cause a denial of service (console hang) via a large number of FTP sessions, which are not properly handled during an NLM unload.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-q495-h2r3-cf69/GHSA-q495-h2r3-cf69.json b/advisories/unreviewed/2022/04/GHSA-q495-h2r3-cf69/GHSA-q495-h2r3-cf69.json index 6bbb0efb4fb..42d99092991 100644 --- a/advisories/unreviewed/2022/04/GHSA-q495-h2r3-cf69/GHSA-q495-h2r3-cf69.json +++ b/advisories/unreviewed/2022/04/GHSA-q495-h2r3-cf69/GHSA-q495-h2r3-cf69.json @@ -7,12 +7,8 @@ "CVE-2003-1557" ], "details": "Off-by-one buffer overflow in spamc of SpamAssassin 2.40 through 2.43, when using BSMTP mode (\"-B\"), allows remote attackers to execute arbitrary code via email containing headers with leading \".\" characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-q5x9-4p6f-q4m6/GHSA-q5x9-4p6f-q4m6.json b/advisories/unreviewed/2022/04/GHSA-q5x9-4p6f-q4m6/GHSA-q5x9-4p6f-q4m6.json index a4b02e30e03..a3137114144 100644 --- a/advisories/unreviewed/2022/04/GHSA-q5x9-4p6f-q4m6/GHSA-q5x9-4p6f-q4m6.json +++ b/advisories/unreviewed/2022/04/GHSA-q5x9-4p6f-q4m6/GHSA-q5x9-4p6f-q4m6.json @@ -7,12 +7,8 @@ "CVE-2004-0156" ], "details": "Format string vulnerabilities in the (1) die or (2) log_event functions for ssmtp before 2.50.6 allow remote mail relays to cause a denial of service and possibly execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-q785-jpc2-4w88/GHSA-q785-jpc2-4w88.json b/advisories/unreviewed/2022/04/GHSA-q785-jpc2-4w88/GHSA-q785-jpc2-4w88.json index 219db9055d1..175b8f0f520 100644 --- a/advisories/unreviewed/2022/04/GHSA-q785-jpc2-4w88/GHSA-q785-jpc2-4w88.json +++ b/advisories/unreviewed/2022/04/GHSA-q785-jpc2-4w88/GHSA-q785-jpc2-4w88.json @@ -7,12 +7,8 @@ "CVE-2003-1533" ], "details": "SQL injection vulnerability in accesscontrol.php in PhpPass 2 allows remote attackers to execute arbitrary SQL commands via the (1) uid and (2) pwd parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-qccq-vp6j-f2x6/GHSA-qccq-vp6j-f2x6.json b/advisories/unreviewed/2022/04/GHSA-qccq-vp6j-f2x6/GHSA-qccq-vp6j-f2x6.json index 1aebfefefe7..7b52f6d6dcd 100644 --- a/advisories/unreviewed/2022/04/GHSA-qccq-vp6j-f2x6/GHSA-qccq-vp6j-f2x6.json +++ b/advisories/unreviewed/2022/04/GHSA-qccq-vp6j-f2x6/GHSA-qccq-vp6j-f2x6.json @@ -7,12 +7,8 @@ "CVE-2003-1579" ], "details": "Sun ONE (aka iPlanet) Web Server 6 on Windows, when DNS resolution is enabled for client IP addresses, uses a logging format that does not identify whether a dotted quad represents an unresolved IP address, which allows remote attackers to spoof IP addresses via crafted DNS responses containing numerical top-level domains, as demonstrated by a forged 123.123.123.123 domain name, related to an \"Inverse Lookup Log Corruption (ILLC)\" issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qcgh-9mjq-vq4m/GHSA-qcgh-9mjq-vq4m.json b/advisories/unreviewed/2022/04/GHSA-qcgh-9mjq-vq4m/GHSA-qcgh-9mjq-vq4m.json index 2ad45147361..e8cb18090e8 100644 --- a/advisories/unreviewed/2022/04/GHSA-qcgh-9mjq-vq4m/GHSA-qcgh-9mjq-vq4m.json +++ b/advisories/unreviewed/2022/04/GHSA-qcgh-9mjq-vq4m/GHSA-qcgh-9mjq-vq4m.json @@ -7,12 +7,8 @@ "CVE-2004-0177" ], "details": "The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -116,9 +112,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qmq2-rfjr-gc2h/GHSA-qmq2-rfjr-gc2h.json b/advisories/unreviewed/2022/04/GHSA-qmq2-rfjr-gc2h/GHSA-qmq2-rfjr-gc2h.json index 13e2af1e895..5c3a45dd6e6 100644 --- a/advisories/unreviewed/2022/04/GHSA-qmq2-rfjr-gc2h/GHSA-qmq2-rfjr-gc2h.json +++ b/advisories/unreviewed/2022/04/GHSA-qmq2-rfjr-gc2h/GHSA-qmq2-rfjr-gc2h.json @@ -7,12 +7,8 @@ "CVE-2004-0226" ], "details": "Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qr4c-h294-m43m/GHSA-qr4c-h294-m43m.json b/advisories/unreviewed/2022/04/GHSA-qr4c-h294-m43m/GHSA-qr4c-h294-m43m.json index b6037ac15c7..69c98f8f1af 100644 --- a/advisories/unreviewed/2022/04/GHSA-qr4c-h294-m43m/GHSA-qr4c-h294-m43m.json +++ b/advisories/unreviewed/2022/04/GHSA-qr4c-h294-m43m/GHSA-qr4c-h294-m43m.json @@ -7,12 +7,8 @@ "CVE-2004-0035" ], "details": "SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the hide_email parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qrfc-2g95-v53w/GHSA-qrfc-2g95-v53w.json b/advisories/unreviewed/2022/04/GHSA-qrfc-2g95-v53w/GHSA-qrfc-2g95-v53w.json index ad7502a3288..681dbe7d84f 100644 --- a/advisories/unreviewed/2022/04/GHSA-qrfc-2g95-v53w/GHSA-qrfc-2g95-v53w.json +++ b/advisories/unreviewed/2022/04/GHSA-qrfc-2g95-v53w/GHSA-qrfc-2g95-v53w.json @@ -7,12 +7,8 @@ "CVE-2004-0138" ], "details": "The ELF loader in Linux kernel 2.4 before 2.4.25 allows local users to cause a denial of service (crash) via a crafted ELF file with an interpreter with an invalid arch (architecture), which triggers a BUG() when an invalid VMA is unmapped.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qwqp-mmm6-33xj/GHSA-qwqp-mmm6-33xj.json b/advisories/unreviewed/2022/04/GHSA-qwqp-mmm6-33xj/GHSA-qwqp-mmm6-33xj.json index be025cddcc7..d32421be135 100644 --- a/advisories/unreviewed/2022/04/GHSA-qwqp-mmm6-33xj/GHSA-qwqp-mmm6-33xj.json +++ b/advisories/unreviewed/2022/04/GHSA-qwqp-mmm6-33xj/GHSA-qwqp-mmm6-33xj.json @@ -7,12 +7,8 @@ "CVE-2003-1511" ], "details": "Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inject arbitrary web script or HTML via (1) the query string to test.txt, (2) the guestName parameter to the custMsg servlet, or (3) the cookiename parameter to the CookieExample servlet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-qx9x-wmwc-fcv2/GHSA-qx9x-wmwc-fcv2.json b/advisories/unreviewed/2022/04/GHSA-qx9x-wmwc-fcv2/GHSA-qx9x-wmwc-fcv2.json index ab767348c90..76c6c665db9 100644 --- a/advisories/unreviewed/2022/04/GHSA-qx9x-wmwc-fcv2/GHSA-qx9x-wmwc-fcv2.json +++ b/advisories/unreviewed/2022/04/GHSA-qx9x-wmwc-fcv2/GHSA-qx9x-wmwc-fcv2.json @@ -7,12 +7,8 @@ "CVE-2004-0103" ], "details": "crawl before 4.0.0 beta23 does not properly \"apply a size check\" when copying a certain environment variable, which may allow local users to gain privileges, possibly as a result of a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-r232-rpm5-4rvw/GHSA-r232-rpm5-4rvw.json b/advisories/unreviewed/2022/04/GHSA-r232-rpm5-4rvw/GHSA-r232-rpm5-4rvw.json index d786e0ba725..825e2fc8522 100644 --- a/advisories/unreviewed/2022/04/GHSA-r232-rpm5-4rvw/GHSA-r232-rpm5-4rvw.json +++ b/advisories/unreviewed/2022/04/GHSA-r232-rpm5-4rvw/GHSA-r232-rpm5-4rvw.json @@ -7,12 +7,8 @@ "CVE-2003-1466" ], "details": "Unspecified vulnerability in Phorum 3.4 through 3.4.2 allows remote attackers to use Phorum as a connection proxy to other sites via (1) register.php or (2) login.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-r27g-fqf5-pq2m/GHSA-r27g-fqf5-pq2m.json b/advisories/unreviewed/2022/04/GHSA-r27g-fqf5-pq2m/GHSA-r27g-fqf5-pq2m.json index af252df7c11..3cd03c2a9ae 100644 --- a/advisories/unreviewed/2022/04/GHSA-r27g-fqf5-pq2m/GHSA-r27g-fqf5-pq2m.json +++ b/advisories/unreviewed/2022/04/GHSA-r27g-fqf5-pq2m/GHSA-r27g-fqf5-pq2m.json @@ -7,12 +7,8 @@ "CVE-2004-0038" ], "details": "McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-r6cx-px2r-vrvr/GHSA-r6cx-px2r-vrvr.json b/advisories/unreviewed/2022/04/GHSA-r6cx-px2r-vrvr/GHSA-r6cx-px2r-vrvr.json index 660c36ee73c..2a4e2f39dbb 100644 --- a/advisories/unreviewed/2022/04/GHSA-r6cx-px2r-vrvr/GHSA-r6cx-px2r-vrvr.json +++ b/advisories/unreviewed/2022/04/GHSA-r6cx-px2r-vrvr/GHSA-r6cx-px2r-vrvr.json @@ -7,12 +7,8 @@ "CVE-2004-0132" ], "details": "Multiple PHP remote file inclusion vulnerabilities in ezContents 2.0.2 and earlier allow remote attackers to execute arbitrary PHP code from a remote web server, as demonstrated using (1) the GLOBALS[rootdp] parameter to db.php, or (2) the GLOBALS[language_home] parameter to archivednews.php, and a malicious version of lang_admin.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-r7gv-q6w2-pwmp/GHSA-r7gv-q6w2-pwmp.json b/advisories/unreviewed/2022/04/GHSA-r7gv-q6w2-pwmp/GHSA-r7gv-q6w2-pwmp.json index 9fd4e94dd38..6b56fff3cba 100644 --- a/advisories/unreviewed/2022/04/GHSA-r7gv-q6w2-pwmp/GHSA-r7gv-q6w2-pwmp.json +++ b/advisories/unreviewed/2022/04/GHSA-r7gv-q6w2-pwmp/GHSA-r7gv-q6w2-pwmp.json @@ -7,12 +7,8 @@ "CVE-2004-0092" ], "details": "Unknown vulnerability in Safari web browser in Mac OS X 10.2.8 and 10.3.2, with unknown impact.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-r86w-qh7f-w6w2/GHSA-r86w-qh7f-w6w2.json b/advisories/unreviewed/2022/04/GHSA-r86w-qh7f-w6w2/GHSA-r86w-qh7f-w6w2.json index 0365809c83c..0d757ea2db1 100644 --- a/advisories/unreviewed/2022/04/GHSA-r86w-qh7f-w6w2/GHSA-r86w-qh7f-w6w2.json +++ b/advisories/unreviewed/2022/04/GHSA-r86w-qh7f-w6w2/GHSA-r86w-qh7f-w6w2.json @@ -7,12 +7,8 @@ "CVE-2004-0124" ], "details": "The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an \"alter context\" call that contains additional data, aka the \"Object Identity Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rfqx-p859-5rqq/GHSA-rfqx-p859-5rqq.json b/advisories/unreviewed/2022/04/GHSA-rfqx-p859-5rqq/GHSA-rfqx-p859-5rqq.json index a70d0eb8997..288dfa8be60 100644 --- a/advisories/unreviewed/2022/04/GHSA-rfqx-p859-5rqq/GHSA-rfqx-p859-5rqq.json +++ b/advisories/unreviewed/2022/04/GHSA-rfqx-p859-5rqq/GHSA-rfqx-p859-5rqq.json @@ -7,12 +7,8 @@ "CVE-2004-0201" ], "details": "Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rfxc-wgf7-qphr/GHSA-rfxc-wgf7-qphr.json b/advisories/unreviewed/2022/04/GHSA-rfxc-wgf7-qphr/GHSA-rfxc-wgf7-qphr.json index ee252afe7b5..a5653d11416 100644 --- a/advisories/unreviewed/2022/04/GHSA-rfxc-wgf7-qphr/GHSA-rfxc-wgf7-qphr.json +++ b/advisories/unreviewed/2022/04/GHSA-rfxc-wgf7-qphr/GHSA-rfxc-wgf7-qphr.json @@ -7,12 +7,8 @@ "CVE-2004-0176" ], "details": "Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -124,9 +120,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rq8v-pvhp-2p6c/GHSA-rq8v-pvhp-2p6c.json b/advisories/unreviewed/2022/04/GHSA-rq8v-pvhp-2p6c/GHSA-rq8v-pvhp-2p6c.json index a55106fa5a4..512db123897 100644 --- a/advisories/unreviewed/2022/04/GHSA-rq8v-pvhp-2p6c/GHSA-rq8v-pvhp-2p6c.json +++ b/advisories/unreviewed/2022/04/GHSA-rq8v-pvhp-2p6c/GHSA-rq8v-pvhp-2p6c.json @@ -7,12 +7,8 @@ "CVE-2003-1546" ], "details": "Cross-site scripting (XSS) vulnerability in gbook.php in Filebased guestbook 1.1.3 allows remote attackers to inject arbitrary web script or HTML via the comment section.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-rv9r-j67v-rmjc/GHSA-rv9r-j67v-rmjc.json b/advisories/unreviewed/2022/04/GHSA-rv9r-j67v-rmjc/GHSA-rv9r-j67v-rmjc.json index 6af5fdc9e7f..61cd8161622 100644 --- a/advisories/unreviewed/2022/04/GHSA-rv9r-j67v-rmjc/GHSA-rv9r-j67v-rmjc.json +++ b/advisories/unreviewed/2022/04/GHSA-rv9r-j67v-rmjc/GHSA-rv9r-j67v-rmjc.json @@ -7,12 +7,8 @@ "CVE-2004-0167" ], "details": "DiskArbitration in Mac OS X 10.2.8 and 10.3.2 does not properly initialize writeable removable media.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rvch-8g97-9qch/GHSA-rvch-8g97-9qch.json b/advisories/unreviewed/2022/04/GHSA-rvch-8g97-9qch/GHSA-rvch-8g97-9qch.json index 456cd5cf482..902222a0cbc 100644 --- a/advisories/unreviewed/2022/04/GHSA-rvch-8g97-9qch/GHSA-rvch-8g97-9qch.json +++ b/advisories/unreviewed/2022/04/GHSA-rvch-8g97-9qch/GHSA-rvch-8g97-9qch.json @@ -7,12 +7,8 @@ "CVE-2004-0110" ], "details": "Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v63v-f6pm-gfxm/GHSA-v63v-f6pm-gfxm.json b/advisories/unreviewed/2022/04/GHSA-v63v-f6pm-gfxm/GHSA-v63v-f6pm-gfxm.json index e55bc32327f..3db2acb0b6f 100644 --- a/advisories/unreviewed/2022/04/GHSA-v63v-f6pm-gfxm/GHSA-v63v-f6pm-gfxm.json +++ b/advisories/unreviewed/2022/04/GHSA-v63v-f6pm-gfxm/GHSA-v63v-f6pm-gfxm.json @@ -7,12 +7,8 @@ "CVE-2004-0031" ], "details": "PHPGEDVIEW 2.61 allows remote attackers to reinstall the software and change the administrator password via a direct HTTP request to editconfig.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v7qx-rm4p-fxqj/GHSA-v7qx-rm4p-fxqj.json b/advisories/unreviewed/2022/04/GHSA-v7qx-rm4p-fxqj/GHSA-v7qx-rm4p-fxqj.json index ee851dee398..8497a5f3ce2 100644 --- a/advisories/unreviewed/2022/04/GHSA-v7qx-rm4p-fxqj/GHSA-v7qx-rm4p-fxqj.json +++ b/advisories/unreviewed/2022/04/GHSA-v7qx-rm4p-fxqj/GHSA-v7qx-rm4p-fxqj.json @@ -7,12 +7,8 @@ "CVE-2003-1549" ], "details": "Cross-site scripting (XSS) vulnerability in header.php in MyABraCaDaWeb 1.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the ma_kw parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-v9x2-jp3v-cvfx/GHSA-v9x2-jp3v-cvfx.json b/advisories/unreviewed/2022/04/GHSA-v9x2-jp3v-cvfx/GHSA-v9x2-jp3v-cvfx.json index 8da25b3bc9c..468138c6284 100644 --- a/advisories/unreviewed/2022/04/GHSA-v9x2-jp3v-cvfx/GHSA-v9x2-jp3v-cvfx.json +++ b/advisories/unreviewed/2022/04/GHSA-v9x2-jp3v-cvfx/GHSA-v9x2-jp3v-cvfx.json @@ -7,12 +7,8 @@ "CVE-2003-1576" ], "details": "Buffer overflow in pamverifier in Change Manager (CM) 1.0 for Sun Management Center (SunMC) 3.0 on Solaris 8 and 9 on the sparc platform allows remote attackers to execute arbitrary code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-vcf4-vc8p-226r/GHSA-vcf4-vc8p-226r.json b/advisories/unreviewed/2022/04/GHSA-vcf4-vc8p-226r/GHSA-vcf4-vc8p-226r.json index 8c91df1b273..7c3ae20a3a4 100644 --- a/advisories/unreviewed/2022/04/GHSA-vcf4-vc8p-226r/GHSA-vcf4-vc8p-226r.json +++ b/advisories/unreviewed/2022/04/GHSA-vcf4-vc8p-226r/GHSA-vcf4-vc8p-226r.json @@ -7,12 +7,8 @@ "CVE-2003-1566" ], "details": "Microsoft Internet Information Services (IIS) 5.0 does not log requests that use the TRACK method, which allows remote attackers to obtain sensitive information without detection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vcv8-85jr-j5m9/GHSA-vcv8-85jr-j5m9.json b/advisories/unreviewed/2022/04/GHSA-vcv8-85jr-j5m9/GHSA-vcv8-85jr-j5m9.json index b61f0069d1c..2d2b74ab66c 100644 --- a/advisories/unreviewed/2022/04/GHSA-vcv8-85jr-j5m9/GHSA-vcv8-85jr-j5m9.json +++ b/advisories/unreviewed/2022/04/GHSA-vcv8-85jr-j5m9/GHSA-vcv8-85jr-j5m9.json @@ -7,12 +7,8 @@ "CVE-2003-1517" ], "details": "cart.pl in Dansie shopping cart allows remote attackers to obtain the installation path via an invalid db parameter, which leaks the path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-w27h-rqjh-6c8p/GHSA-w27h-rqjh-6c8p.json b/advisories/unreviewed/2022/04/GHSA-w27h-rqjh-6c8p/GHSA-w27h-rqjh-6c8p.json index 335c5ae0398..715187028a0 100644 --- a/advisories/unreviewed/2022/04/GHSA-w27h-rqjh-6c8p/GHSA-w27h-rqjh-6c8p.json +++ b/advisories/unreviewed/2022/04/GHSA-w27h-rqjh-6c8p/GHSA-w27h-rqjh-6c8p.json @@ -7,12 +7,8 @@ "CVE-2003-1501" ], "details": "Directory traversal vulnerability in the file upload CGI of Gast Arbeiter 1.3 allows remote attackers to write arbitrary files via a .. (dot dot) in the req_file parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-w58r-2p42-8hcv/GHSA-w58r-2p42-8hcv.json b/advisories/unreviewed/2022/04/GHSA-w58r-2p42-8hcv/GHSA-w58r-2p42-8hcv.json index 04c8eda2458..7a0ba623eb8 100644 --- a/advisories/unreviewed/2022/04/GHSA-w58r-2p42-8hcv/GHSA-w58r-2p42-8hcv.json +++ b/advisories/unreviewed/2022/04/GHSA-w58r-2p42-8hcv/GHSA-w58r-2p42-8hcv.json @@ -7,12 +7,8 @@ "CVE-2004-0002" ], "details": "The TCP MSS (maximum segment size) functionality in netinet allows remote attackers to cause a denial of service (resource exhaustion) via (1) a low MTU, which causes a large number of small packets to be produced, or (2) via a large number of packets with a small TCP payload, which cause a large number of calls to the resource-intensive sowakeup function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-w79f-hjvc-f3mf/GHSA-w79f-hjvc-f3mf.json b/advisories/unreviewed/2022/04/GHSA-w79f-hjvc-f3mf/GHSA-w79f-hjvc-f3mf.json index 05f0fbe9769..3d18b5977e0 100644 --- a/advisories/unreviewed/2022/04/GHSA-w79f-hjvc-f3mf/GHSA-w79f-hjvc-f3mf.json +++ b/advisories/unreviewed/2022/04/GHSA-w79f-hjvc-f3mf/GHSA-w79f-hjvc-f3mf.json @@ -7,12 +7,8 @@ "CVE-2004-0207" ], "details": "\"Shatter\" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to gain privileges by using certain API functions to change properties of privileged programs using the SetWindowLong and SetWIndowLongPtr API functions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-w867-jhfm-5qxq/GHSA-w867-jhfm-5qxq.json b/advisories/unreviewed/2022/04/GHSA-w867-jhfm-5qxq/GHSA-w867-jhfm-5qxq.json index 41b6c78c7d1..a352c23d017 100644 --- a/advisories/unreviewed/2022/04/GHSA-w867-jhfm-5qxq/GHSA-w867-jhfm-5qxq.json +++ b/advisories/unreviewed/2022/04/GHSA-w867-jhfm-5qxq/GHSA-w867-jhfm-5qxq.json @@ -7,12 +7,8 @@ "CVE-2004-0115" ], "details": "VirtualPC_Services in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbitrary code, via a symlink attack on the VPCServices_Log temporary file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-w9r2-vp5h-4jf8/GHSA-w9r2-vp5h-4jf8.json b/advisories/unreviewed/2022/04/GHSA-w9r2-vp5h-4jf8/GHSA-w9r2-vp5h-4jf8.json index 591502aeaf5..1cb00a6e997 100644 --- a/advisories/unreviewed/2022/04/GHSA-w9r2-vp5h-4jf8/GHSA-w9r2-vp5h-4jf8.json +++ b/advisories/unreviewed/2022/04/GHSA-w9r2-vp5h-4jf8/GHSA-w9r2-vp5h-4jf8.json @@ -7,12 +7,8 @@ "CVE-2004-0212" ], "details": "Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a .job file on an anonymous share.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wc4m-x29r-8xcj/GHSA-wc4m-x29r-8xcj.json b/advisories/unreviewed/2022/04/GHSA-wc4m-x29r-8xcj/GHSA-wc4m-x29r-8xcj.json index f66df7ccb6b..af744bec69c 100644 --- a/advisories/unreviewed/2022/04/GHSA-wc4m-x29r-8xcj/GHSA-wc4m-x29r-8xcj.json +++ b/advisories/unreviewed/2022/04/GHSA-wc4m-x29r-8xcj/GHSA-wc4m-x29r-8xcj.json @@ -7,12 +7,8 @@ "CVE-2003-1556" ], "details": "Cross-site scripting (XSS) vulnerability in cc_guestbook.pl in CGI City CC GuestBook allows remote attackers to inject arbitrary web script or HTML via the (1) name and (2) homepage_title (webpage title) parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-wfcw-jwq5-3jj7/GHSA-wfcw-jwq5-3jj7.json b/advisories/unreviewed/2022/04/GHSA-wfcw-jwq5-3jj7/GHSA-wfcw-jwq5-3jj7.json index cfdf226f8a2..d6f845a923b 100644 --- a/advisories/unreviewed/2022/04/GHSA-wfcw-jwq5-3jj7/GHSA-wfcw-jwq5-3jj7.json +++ b/advisories/unreviewed/2022/04/GHSA-wfcw-jwq5-3jj7/GHSA-wfcw-jwq5-3jj7.json @@ -7,12 +7,8 @@ "CVE-2004-0096" ], "details": "Unknown vulnerability in mod_python 2.7.9 allows remote attackers to cause a denial of service (httpd crash) via a certain query string, a variant of CAN-2003-0973.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wgpp-vr3p-7534/GHSA-wgpp-vr3p-7534.json b/advisories/unreviewed/2022/04/GHSA-wgpp-vr3p-7534/GHSA-wgpp-vr3p-7534.json index 874a382f94a..2491b8f9c31 100644 --- a/advisories/unreviewed/2022/04/GHSA-wgpp-vr3p-7534/GHSA-wgpp-vr3p-7534.json +++ b/advisories/unreviewed/2022/04/GHSA-wgpp-vr3p-7534/GHSA-wgpp-vr3p-7534.json @@ -7,12 +7,8 @@ "CVE-2003-1596" ], "details": "NWFTPD.nlm before 5.03.12 in the FTP server in Novell NetWare does not properly restrict filesystem use by anonymous users with NFS Gateway home directories, which allows remote attackers to bypass intended access restrictions via an FTP session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-whg7-cqjh-3q4x/GHSA-whg7-cqjh-3q4x.json b/advisories/unreviewed/2022/04/GHSA-whg7-cqjh-3q4x/GHSA-whg7-cqjh-3q4x.json index fff368dd1dd..663fb5132da 100644 --- a/advisories/unreviewed/2022/04/GHSA-whg7-cqjh-3q4x/GHSA-whg7-cqjh-3q4x.json +++ b/advisories/unreviewed/2022/04/GHSA-whg7-cqjh-3q4x/GHSA-whg7-cqjh-3q4x.json @@ -7,12 +7,8 @@ "CVE-2003-1487" ], "details": "Multiple \"command injection\" vulnerabilities in Phorum 3.4 through 3.4.2 allow remote attackers to execute arbitrary commands and modify the Phorum configuration files via the (1) UserAdmin program, (2) Edit user profile, or (3) stats program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-wpgj-52pg-3797/GHSA-wpgj-52pg-3797.json b/advisories/unreviewed/2022/04/GHSA-wpgj-52pg-3797/GHSA-wpgj-52pg-3797.json index 4c87a60f296..3c792559f38 100644 --- a/advisories/unreviewed/2022/04/GHSA-wpgj-52pg-3797/GHSA-wpgj-52pg-3797.json +++ b/advisories/unreviewed/2022/04/GHSA-wpgj-52pg-3797/GHSA-wpgj-52pg-3797.json @@ -7,12 +7,8 @@ "CVE-2003-1568" ], "details": "GoAhead WebServer before 2.1.6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an invalid URL, related to the websSafeUrl function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-wq6q-8prg-h8xh/GHSA-wq6q-8prg-h8xh.json b/advisories/unreviewed/2022/04/GHSA-wq6q-8prg-h8xh/GHSA-wq6q-8prg-h8xh.json index bdf52ed9a83..b5a1ce5833b 100644 --- a/advisories/unreviewed/2022/04/GHSA-wq6q-8prg-h8xh/GHSA-wq6q-8prg-h8xh.json +++ b/advisories/unreviewed/2022/04/GHSA-wq6q-8prg-h8xh/GHSA-wq6q-8prg-h8xh.json @@ -7,12 +7,8 @@ "CVE-2003-1539" ], "details": "Cross-site scripting (XSS) vulnerability in ONEdotOH Simple File Manager (SFM) before 0.21 allows remote attackers to inject arbitrary web script or HTML via (1) file names and (2) directory names.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-wrgf-6m9j-q9hq/GHSA-wrgf-6m9j-q9hq.json b/advisories/unreviewed/2022/04/GHSA-wrgf-6m9j-q9hq/GHSA-wrgf-6m9j-q9hq.json index c3e2116d667..181b3bc7109 100644 --- a/advisories/unreviewed/2022/04/GHSA-wrgf-6m9j-q9hq/GHSA-wrgf-6m9j-q9hq.json +++ b/advisories/unreviewed/2022/04/GHSA-wrgf-6m9j-q9hq/GHSA-wrgf-6m9j-q9hq.json @@ -7,12 +7,8 @@ "CVE-2003-1537" ], "details": "Directory traversal vulnerability in PostNuke 0.723 and earlier allows remote attackers to include arbitrary files named theme.php via the theme parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-ww9q-7hpq-99j7/GHSA-ww9q-7hpq-99j7.json b/advisories/unreviewed/2022/04/GHSA-ww9q-7hpq-99j7/GHSA-ww9q-7hpq-99j7.json index 65fd49a9d99..15947859f9b 100644 --- a/advisories/unreviewed/2022/04/GHSA-ww9q-7hpq-99j7/GHSA-ww9q-7hpq-99j7.json +++ b/advisories/unreviewed/2022/04/GHSA-ww9q-7hpq-99j7/GHSA-ww9q-7hpq-99j7.json @@ -7,12 +7,8 @@ "CVE-2003-1504" ], "details": "SQL injection vulnerability in variables.php in Goldlink 3.0 allows remote attackers to execute arbitrary SQL commands via the (1) vadmin_login or (2) vadmin_pass cookie in a request to goldlink.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-wx8p-3934-6qp8/GHSA-wx8p-3934-6qp8.json b/advisories/unreviewed/2022/04/GHSA-wx8p-3934-6qp8/GHSA-wx8p-3934-6qp8.json index 888f513f004..1c11ddae6a2 100644 --- a/advisories/unreviewed/2022/04/GHSA-wx8p-3934-6qp8/GHSA-wx8p-3934-6qp8.json +++ b/advisories/unreviewed/2022/04/GHSA-wx8p-3934-6qp8/GHSA-wx8p-3934-6qp8.json @@ -7,12 +7,8 @@ "CVE-2003-1473" ], "details": "Buffer overflow in LTris 1.0.1 of FreeBSD Ports Collection 2003-02-25 and earlier allows local users to execute arbitrary code with gid \"games\" permission via a long HOME environment variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-wxvq-px52-9jqq/GHSA-wxvq-px52-9jqq.json b/advisories/unreviewed/2022/04/GHSA-wxvq-px52-9jqq/GHSA-wxvq-px52-9jqq.json index bb0cffe52fa..f03c4226489 100644 --- a/advisories/unreviewed/2022/04/GHSA-wxvq-px52-9jqq/GHSA-wxvq-px52-9jqq.json +++ b/advisories/unreviewed/2022/04/GHSA-wxvq-px52-9jqq/GHSA-wxvq-px52-9jqq.json @@ -7,12 +7,8 @@ "CVE-2003-1489" ], "details": "upload.php in Truegalerie 1.0 allows remote attackers to read arbitrary files by specifying the target filename in the file cookie in form.php, then downloading the file from the image gallery.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-x3c5-3r8r-gqj8/GHSA-x3c5-3r8r-gqj8.json b/advisories/unreviewed/2022/04/GHSA-x3c5-3r8r-gqj8/GHSA-x3c5-3r8r-gqj8.json index 4308dd94f1d..a1e4fd6d1ae 100644 --- a/advisories/unreviewed/2022/04/GHSA-x3c5-3r8r-gqj8/GHSA-x3c5-3r8r-gqj8.json +++ b/advisories/unreviewed/2022/04/GHSA-x3c5-3r8r-gqj8/GHSA-x3c5-3r8r-gqj8.json @@ -7,12 +7,8 @@ "CVE-2003-1513" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in example scripts in Caucho Technology Resin 2.0 through 2.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) env.jsp, (2) form.jsp, (3) session.jsp, (4) the move parameter to tictactoe.jsp, or the (5) name or (6) comment fields to guestbook.jsp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-x3r4-63h4-jwvq/GHSA-x3r4-63h4-jwvq.json b/advisories/unreviewed/2022/04/GHSA-x3r4-63h4-jwvq/GHSA-x3r4-63h4-jwvq.json index c7e9dcd0e88..4e41726b25f 100644 --- a/advisories/unreviewed/2022/04/GHSA-x3r4-63h4-jwvq/GHSA-x3r4-63h4-jwvq.json +++ b/advisories/unreviewed/2022/04/GHSA-x3r4-63h4-jwvq/GHSA-x3r4-63h4-jwvq.json @@ -7,12 +7,8 @@ "CVE-2004-0149" ], "details": "Multiple buffer overflows in xboing before 2.4 allow local users to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x6p8-m67w-rpfj/GHSA-x6p8-m67w-rpfj.json b/advisories/unreviewed/2022/04/GHSA-x6p8-m67w-rpfj/GHSA-x6p8-m67w-rpfj.json index dc99957b7d7..2e727746dd9 100644 --- a/advisories/unreviewed/2022/04/GHSA-x6p8-m67w-rpfj/GHSA-x6p8-m67w-rpfj.json +++ b/advisories/unreviewed/2022/04/GHSA-x6p8-m67w-rpfj/GHSA-x6p8-m67w-rpfj.json @@ -7,12 +7,8 @@ "CVE-2004-0163" ], "details": "Sygate Secure Enterprise (SSE) 3.5MR3 and earlier does not change the key used to encrypt data, which allows remote attackers to cause a denial of service (resource exhaustion) by capturing a session and repeatedly replaying the session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x89p-fjvx-wp8h/GHSA-x89p-fjvx-wp8h.json b/advisories/unreviewed/2022/04/GHSA-x89p-fjvx-wp8h/GHSA-x89p-fjvx-wp8h.json index 8a0d8588433..3063272688c 100644 --- a/advisories/unreviewed/2022/04/GHSA-x89p-fjvx-wp8h/GHSA-x89p-fjvx-wp8h.json +++ b/advisories/unreviewed/2022/04/GHSA-x89p-fjvx-wp8h/GHSA-x89p-fjvx-wp8h.json @@ -7,12 +7,8 @@ "CVE-2004-0200" ], "details": "Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x923-wg49-3cpx/GHSA-x923-wg49-3cpx.json b/advisories/unreviewed/2022/04/GHSA-x923-wg49-3cpx/GHSA-x923-wg49-3cpx.json index d2bceedb0bd..7247f2d6442 100644 --- a/advisories/unreviewed/2022/04/GHSA-x923-wg49-3cpx/GHSA-x923-wg49-3cpx.json +++ b/advisories/unreviewed/2022/04/GHSA-x923-wg49-3cpx/GHSA-x923-wg49-3cpx.json @@ -7,12 +7,8 @@ "CVE-2004-0106" ], "details": "Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set of vulnerabilities than CVE-2004-0083 and CVE-2004-0084.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xfrg-qvm9-q5xc/GHSA-xfrg-qvm9-q5xc.json b/advisories/unreviewed/2022/04/GHSA-xfrg-qvm9-q5xc/GHSA-xfrg-qvm9-q5xc.json index db237eb5b1a..91217470e8d 100644 --- a/advisories/unreviewed/2022/04/GHSA-xfrg-qvm9-q5xc/GHSA-xfrg-qvm9-q5xc.json +++ b/advisories/unreviewed/2022/04/GHSA-xfrg-qvm9-q5xc/GHSA-xfrg-qvm9-q5xc.json @@ -7,12 +7,8 @@ "CVE-2003-1581" ], "details": "The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, allows remote attackers to inject arbitrary text into log files via an HTTP request in conjunction with a crafted DNS response, as demonstrated by injecting XSS sequences, related to an \"Inverse Lookup Log Corruption (ILLC)\" issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-xgwg-wqmg-vwwp/GHSA-xgwg-wqmg-vwwp.json b/advisories/unreviewed/2022/04/GHSA-xgwg-wqmg-vwwp/GHSA-xgwg-wqmg-vwwp.json index a80879020f5..62e7d25e8fd 100644 --- a/advisories/unreviewed/2022/04/GHSA-xgwg-wqmg-vwwp/GHSA-xgwg-wqmg-vwwp.json +++ b/advisories/unreviewed/2022/04/GHSA-xgwg-wqmg-vwwp/GHSA-xgwg-wqmg-vwwp.json @@ -7,12 +7,8 @@ "CVE-2004-0050" ], "details": "Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as (1) NUL, (2) CON, (3) AUX, (4) COM1, (5) COM2, and others.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xhwv-vhh3-q8fm/GHSA-xhwv-vhh3-q8fm.json b/advisories/unreviewed/2022/04/GHSA-xhwv-vhh3-q8fm/GHSA-xhwv-vhh3-q8fm.json index 21961d2068a..d155957fce8 100644 --- a/advisories/unreviewed/2022/04/GHSA-xhwv-vhh3-q8fm/GHSA-xhwv-vhh3-q8fm.json +++ b/advisories/unreviewed/2022/04/GHSA-xhwv-vhh3-q8fm/GHSA-xhwv-vhh3-q8fm.json @@ -7,12 +7,8 @@ "CVE-2004-0120" ], "details": "The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xjr6-7qjw-pv8v/GHSA-xjr6-7qjw-pv8v.json b/advisories/unreviewed/2022/04/GHSA-xjr6-7qjw-pv8v/GHSA-xjr6-7qjw-pv8v.json index 5091b13833d..a53cce9025d 100644 --- a/advisories/unreviewed/2022/04/GHSA-xjr6-7qjw-pv8v/GHSA-xjr6-7qjw-pv8v.json +++ b/advisories/unreviewed/2022/04/GHSA-xjr6-7qjw-pv8v/GHSA-xjr6-7qjw-pv8v.json @@ -7,12 +7,8 @@ "CVE-2004-0068" ], "details": "PHP remote file inclusion vulnerability in config.php for PhpDig 1.6.5 and earlier allows remote attackers to execute arbitrary PHP code by modifying the $relative_script_path parameter to reference a URL on a remote web server that contains the code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xmm8-h598-mcmx/GHSA-xmm8-h598-mcmx.json b/advisories/unreviewed/2022/04/GHSA-xmm8-h598-mcmx/GHSA-xmm8-h598-mcmx.json index 772eab0a4ac..48ee134f138 100644 --- a/advisories/unreviewed/2022/04/GHSA-xmm8-h598-mcmx/GHSA-xmm8-h598-mcmx.json +++ b/advisories/unreviewed/2022/04/GHSA-xmm8-h598-mcmx/GHSA-xmm8-h598-mcmx.json @@ -7,12 +7,8 @@ "CVE-2003-1477" ], "details": "MAILsweeper for SMTP 4.3.6 and 4.3.7 allows remote attackers to cause a denial of service (CPU consumption) via a PowerPoint attachment that either (1) is corrupt or (2) contains \"embedded objects.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-xp3c-x693-rrgv/GHSA-xp3c-x693-rrgv.json b/advisories/unreviewed/2022/04/GHSA-xp3c-x693-rrgv/GHSA-xp3c-x693-rrgv.json index 3a0ba407a90..4328c005dfa 100644 --- a/advisories/unreviewed/2022/04/GHSA-xp3c-x693-rrgv/GHSA-xp3c-x693-rrgv.json +++ b/advisories/unreviewed/2022/04/GHSA-xp3c-x693-rrgv/GHSA-xp3c-x693-rrgv.json @@ -7,12 +7,8 @@ "CVE-2004-0105" ], "details": "Multiple buffer overflows in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xp6r-5ghh-6w2m/GHSA-xp6r-5ghh-6w2m.json b/advisories/unreviewed/2022/04/GHSA-xp6r-5ghh-6w2m/GHSA-xp6r-5ghh-6w2m.json index c59e2cf59ea..af700d2673c 100644 --- a/advisories/unreviewed/2022/04/GHSA-xp6r-5ghh-6w2m/GHSA-xp6r-5ghh-6w2m.json +++ b/advisories/unreviewed/2022/04/GHSA-xp6r-5ghh-6w2m/GHSA-xp6r-5ghh-6w2m.json @@ -7,12 +7,8 @@ "CVE-2004-0127" ], "details": "Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and earlier allows remote attackers to read arbitrary files or execute arbitrary PHP programs on the server via .. (dot dot) sequences in the gedcom_config parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xqh5-4ghf-6mcm/GHSA-xqh5-4ghf-6mcm.json b/advisories/unreviewed/2022/04/GHSA-xqh5-4ghf-6mcm/GHSA-xqh5-4ghf-6mcm.json index d7bfebd67f6..743ef0daade 100644 --- a/advisories/unreviewed/2022/04/GHSA-xqh5-4ghf-6mcm/GHSA-xqh5-4ghf-6mcm.json +++ b/advisories/unreviewed/2022/04/GHSA-xqh5-4ghf-6mcm/GHSA-xqh5-4ghf-6mcm.json @@ -7,12 +7,8 @@ "CVE-2004-0190" ], "details": "Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator's local system or in a proxy, which allows attackers to steal the password and gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xwxc-wc23-rvj5/GHSA-xwxc-wc23-rvj5.json b/advisories/unreviewed/2022/04/GHSA-xwxc-wc23-rvj5/GHSA-xwxc-wc23-rvj5.json index e848393052f..0ccb6f7fe15 100644 --- a/advisories/unreviewed/2022/04/GHSA-xwxc-wc23-rvj5/GHSA-xwxc-wc23-rvj5.json +++ b/advisories/unreviewed/2022/04/GHSA-xwxc-wc23-rvj5/GHSA-xwxc-wc23-rvj5.json @@ -7,12 +7,8 @@ "CVE-2003-1492" ], "details": "Netscape Navigator 7.0.2 and Mozilla allows remote attackers to access cookie information in a different domain via an HTTP request for a domain with an extra . (dot) at the end.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-xxrx-ph32-wwrp/GHSA-xxrx-ph32-wwrp.json b/advisories/unreviewed/2022/04/GHSA-xxrx-ph32-wwrp/GHSA-xxrx-ph32-wwrp.json index 4419203304f..eaf12e6ce34 100644 --- a/advisories/unreviewed/2022/04/GHSA-xxrx-ph32-wwrp/GHSA-xxrx-ph32-wwrp.json +++ b/advisories/unreviewed/2022/04/GHSA-xxrx-ph32-wwrp/GHSA-xxrx-ph32-wwrp.json @@ -7,12 +7,8 @@ "CVE-2004-0208" ], "details": "The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain privileges via a malicious program that modified some system structures in a way that is not properly validated by privileged operating system functions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-224v-7q6x-2x5f/GHSA-224v-7q6x-2x5f.json b/advisories/unreviewed/2022/05/GHSA-224v-7q6x-2x5f/GHSA-224v-7q6x-2x5f.json index 9f808e85eda..29466117d43 100644 --- a/advisories/unreviewed/2022/05/GHSA-224v-7q6x-2x5f/GHSA-224v-7q6x-2x5f.json +++ b/advisories/unreviewed/2022/05/GHSA-224v-7q6x-2x5f/GHSA-224v-7q6x-2x5f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-24vh-7f72-gr9q/GHSA-24vh-7f72-gr9q.json b/advisories/unreviewed/2022/05/GHSA-24vh-7f72-gr9q/GHSA-24vh-7f72-gr9q.json index a0020d0c31d..39b88555739 100644 --- a/advisories/unreviewed/2022/05/GHSA-24vh-7f72-gr9q/GHSA-24vh-7f72-gr9q.json +++ b/advisories/unreviewed/2022/05/GHSA-24vh-7f72-gr9q/GHSA-24vh-7f72-gr9q.json @@ -7,12 +7,8 @@ "CVE-2018-21106" ], "details": "NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-26mf-xfjm-v7rf/GHSA-26mf-xfjm-v7rf.json b/advisories/unreviewed/2022/05/GHSA-26mf-xfjm-v7rf/GHSA-26mf-xfjm-v7rf.json index fd421cc7e8f..4176a20ea66 100644 --- a/advisories/unreviewed/2022/05/GHSA-26mf-xfjm-v7rf/GHSA-26mf-xfjm-v7rf.json +++ b/advisories/unreviewed/2022/05/GHSA-26mf-xfjm-v7rf/GHSA-26mf-xfjm-v7rf.json @@ -7,12 +7,8 @@ "CVE-2017-18706" ], "details": "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6100 before 1.0.1.20, R7500 before 1.0.0.118, WNDR3700v4 before 1.0.2.88, WNDR4300 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-276m-rj9p-m5q8/GHSA-276m-rj9p-m5q8.json b/advisories/unreviewed/2022/05/GHSA-276m-rj9p-m5q8/GHSA-276m-rj9p-m5q8.json index ffd7264d0be..9ec9e31996f 100644 --- a/advisories/unreviewed/2022/05/GHSA-276m-rj9p-m5q8/GHSA-276m-rj9p-m5q8.json +++ b/advisories/unreviewed/2022/05/GHSA-276m-rj9p-m5q8/GHSA-276m-rj9p-m5q8.json @@ -7,12 +7,8 @@ "CVE-2017-18749" ], "details": "Certain NETGEAR devices are affected by CSRF. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.44, R6050 before 1.0.1.10, R6100 before 1.0.1.16, R6220 before 1.1.0.50, R7500 before 1.0.0.112, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, R9000 before 1.0.2.40, WNDR3700v4 before 1.0.2.88, WNDR3700v5 before 1.1.0.48, WNDR4300 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, WNR1000v4 before 1.1.0.44, WNR2000v5 before 1.0.0.58, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-28g2-8gcr-3vc7/GHSA-28g2-8gcr-3vc7.json b/advisories/unreviewed/2022/05/GHSA-28g2-8gcr-3vc7/GHSA-28g2-8gcr-3vc7.json index 66d26d83c7e..6d1f8c1d225 100644 --- a/advisories/unreviewed/2022/05/GHSA-28g2-8gcr-3vc7/GHSA-28g2-8gcr-3vc7.json +++ b/advisories/unreviewed/2022/05/GHSA-28g2-8gcr-3vc7/GHSA-28g2-8gcr-3vc7.json @@ -7,12 +7,8 @@ "CVE-2018-21199" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 before 1.0.1.30, R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, and WNDR4300 before 1.0.2.98.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-28pm-98wm-6937/GHSA-28pm-98wm-6937.json b/advisories/unreviewed/2022/05/GHSA-28pm-98wm-6937/GHSA-28pm-98wm-6937.json index ebb0506e086..88a8527977d 100644 --- a/advisories/unreviewed/2022/05/GHSA-28pm-98wm-6937/GHSA-28pm-98wm-6937.json +++ b/advisories/unreviewed/2022/05/GHSA-28pm-98wm-6937/GHSA-28pm-98wm-6937.json @@ -7,12 +7,8 @@ "CVE-2020-5866" ], "details": "In versions of NGINX Controller prior to 3.3.0, the helper.sh script, which is used optionally in NGINX Controller to change settings, uses sensitive items as command-line arguments.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2995-x6wq-mq67/GHSA-2995-x6wq-mq67.json b/advisories/unreviewed/2022/05/GHSA-2995-x6wq-mq67/GHSA-2995-x6wq-mq67.json index dc984447f66..dff382f4d0e 100644 --- a/advisories/unreviewed/2022/05/GHSA-2995-x6wq-mq67/GHSA-2995-x6wq-mq67.json +++ b/advisories/unreviewed/2022/05/GHSA-2995-x6wq-mq67/GHSA-2995-x6wq-mq67.json @@ -7,12 +7,8 @@ "CVE-2018-21104" ], "details": "NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-29hh-v8g6-v24p/GHSA-29hh-v8g6-v24p.json b/advisories/unreviewed/2022/05/GHSA-29hh-v8g6-v24p/GHSA-29hh-v8g6-v24p.json index c24b19f172d..88272ef50d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-29hh-v8g6-v24p/GHSA-29hh-v8g6-v24p.json +++ b/advisories/unreviewed/2022/05/GHSA-29hh-v8g6-v24p/GHSA-29hh-v8g6-v24p.json @@ -7,12 +7,8 @@ "CVE-2020-10895" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-10191.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2j4h-mgwq-9x58/GHSA-2j4h-mgwq-9x58.json b/advisories/unreviewed/2022/05/GHSA-2j4h-mgwq-9x58/GHSA-2j4h-mgwq-9x58.json index fd654043542..f469292de79 100644 --- a/advisories/unreviewed/2022/05/GHSA-2j4h-mgwq-9x58/GHSA-2j4h-mgwq-9x58.json +++ b/advisories/unreviewed/2022/05/GHSA-2j4h-mgwq-9x58/GHSA-2j4h-mgwq-9x58.json @@ -7,12 +7,8 @@ "CVE-2020-12133" ], "details": "The Apros Evolution, ConsciusMap, and Furukawa provisioning systems through 2.8.1 allow remote code execution because of javax.faces.ViewState Java deserialization.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2m97-wq46-x8xx/GHSA-2m97-wq46-x8xx.json b/advisories/unreviewed/2022/05/GHSA-2m97-wq46-x8xx/GHSA-2m97-wq46-x8xx.json index d85460fd96b..d122e016e45 100644 --- a/advisories/unreviewed/2022/05/GHSA-2m97-wq46-x8xx/GHSA-2m97-wq46-x8xx.json +++ b/advisories/unreviewed/2022/05/GHSA-2m97-wq46-x8xx/GHSA-2m97-wq46-x8xx.json @@ -7,12 +7,8 @@ "CVE-2020-12261" ], "details": "Open-AudIT 3.3.0 allows an XSS attack after login.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2qfw-w52x-q628/GHSA-2qfw-w52x-q628.json b/advisories/unreviewed/2022/05/GHSA-2qfw-w52x-q628/GHSA-2qfw-w52x-q628.json index b4523af58c0..d6ab9c5df99 100644 --- a/advisories/unreviewed/2022/05/GHSA-2qfw-w52x-q628/GHSA-2qfw-w52x-q628.json +++ b/advisories/unreviewed/2022/05/GHSA-2qfw-w52x-q628/GHSA-2qfw-w52x-q628.json @@ -7,12 +7,8 @@ "CVE-2019-19220" ], "details": "BMC Control-M/Agent 7.0.00.000 allows OS Command Injection (issue 2 of 2).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2vgf-299m-xvm7/GHSA-2vgf-299m-xvm7.json b/advisories/unreviewed/2022/05/GHSA-2vgf-299m-xvm7/GHSA-2vgf-299m-xvm7.json index 9bdd4e6c426..8013704df10 100644 --- a/advisories/unreviewed/2022/05/GHSA-2vgf-299m-xvm7/GHSA-2vgf-299m-xvm7.json +++ b/advisories/unreviewed/2022/05/GHSA-2vgf-299m-xvm7/GHSA-2vgf-299m-xvm7.json @@ -7,12 +7,8 @@ "CVE-2020-4085" ], "details": "\"HCL Connections is vulnerable to possible information leakage and could disclose sensitive information via stack trace to a local user.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2w7w-x22q-pmfp/GHSA-2w7w-x22q-pmfp.json b/advisories/unreviewed/2022/05/GHSA-2w7w-x22q-pmfp/GHSA-2w7w-x22q-pmfp.json index 2f5912a7c2b..398e1abddd9 100644 --- a/advisories/unreviewed/2022/05/GHSA-2w7w-x22q-pmfp/GHSA-2w7w-x22q-pmfp.json +++ b/advisories/unreviewed/2022/05/GHSA-2w7w-x22q-pmfp/GHSA-2w7w-x22q-pmfp.json @@ -7,12 +7,8 @@ "CVE-2020-11942" ], "details": "An issue was discovered in Open-AudIT 3.2.2. There are Multiple SQL Injections.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2wwh-76v6-gq35/GHSA-2wwh-76v6-gq35.json b/advisories/unreviewed/2022/05/GHSA-2wwh-76v6-gq35/GHSA-2wwh-76v6-gq35.json index 96d7886ff98..86ea0b1db70 100644 --- a/advisories/unreviewed/2022/05/GHSA-2wwh-76v6-gq35/GHSA-2wwh-76v6-gq35.json +++ b/advisories/unreviewed/2022/05/GHSA-2wwh-76v6-gq35/GHSA-2wwh-76v6-gq35.json @@ -7,12 +7,8 @@ "CVE-2017-18718" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2x2x-f8f2-vqmf/GHSA-2x2x-f8f2-vqmf.json b/advisories/unreviewed/2022/05/GHSA-2x2x-f8f2-vqmf/GHSA-2x2x-f8f2-vqmf.json index 98e2847e021..4d708f2605f 100644 --- a/advisories/unreviewed/2022/05/GHSA-2x2x-f8f2-vqmf/GHSA-2x2x-f8f2-vqmf.json +++ b/advisories/unreviewed/2022/05/GHSA-2x2x-f8f2-vqmf/GHSA-2x2x-f8f2-vqmf.json @@ -7,12 +7,8 @@ "CVE-2020-8484" ], "details": "Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-325f-8g4v-g98x/GHSA-325f-8g4v-g98x.json b/advisories/unreviewed/2022/05/GHSA-325f-8g4v-g98x/GHSA-325f-8g4v-g98x.json index 3bb3a688cc3..1895f567cc9 100644 --- a/advisories/unreviewed/2022/05/GHSA-325f-8g4v-g98x/GHSA-325f-8g4v-g98x.json +++ b/advisories/unreviewed/2022/05/GHSA-325f-8g4v-g98x/GHSA-325f-8g4v-g98x.json @@ -7,12 +7,8 @@ "CVE-2017-18744" ], "details": "Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6250 before 1.0.4.12, R6300v2 before 1.0.4.12, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7900 before 1.0.1.12, R8000 before 1.0.3.24, and R8500 before 1.0.2.74.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-329c-g8g4-89hm/GHSA-329c-g8g4-89hm.json b/advisories/unreviewed/2022/05/GHSA-329c-g8g4-89hm/GHSA-329c-g8g4-89hm.json index 34ed2f1c9d2..915ccb730fe 100644 --- a/advisories/unreviewed/2022/05/GHSA-329c-g8g4-89hm/GHSA-329c-g8g4-89hm.json +++ b/advisories/unreviewed/2022/05/GHSA-329c-g8g4-89hm/GHSA-329c-g8g4-89hm.json @@ -7,12 +7,8 @@ "CVE-2020-7453" ], "details": "In FreeBSD 12.1-STABLE before r359021, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r359020, and 11.3-RELEASE before 11.3-RELEASE-p7, a missing null termination check in the jail_set configuration option \"osrelease\" may return more bytes with a subsequent jail_get system call allowing a malicious jail superuser with permission to create nested jails to read kernel memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-33f2-r445-jvq6/GHSA-33f2-r445-jvq6.json b/advisories/unreviewed/2022/05/GHSA-33f2-r445-jvq6/GHSA-33f2-r445-jvq6.json index f29bdb47697..8b00975394a 100644 --- a/advisories/unreviewed/2022/05/GHSA-33f2-r445-jvq6/GHSA-33f2-r445-jvq6.json +++ b/advisories/unreviewed/2022/05/GHSA-33f2-r445-jvq6/GHSA-33f2-r445-jvq6.json @@ -7,12 +7,8 @@ "CVE-2019-15794" ], "details": "Overlayfs in the Linux kernel and shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, both replace vma->vm_file in their mmap handlers. On error the original value is not restored, and the reference is put for the file to which vm_file points. On upstream kernels this is not an issue, as no callers dereference vm_file following after call_mmap() returns an error. However, the aufs patchs change mmap_region() to replace the fput() using a local variable with vma_fput(), which will fput() vm_file, leading to a refcount underflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-33w2-prhc-2q89/GHSA-33w2-prhc-2q89.json b/advisories/unreviewed/2022/05/GHSA-33w2-prhc-2q89/GHSA-33w2-prhc-2q89.json index d380b56fa5c..c3ad26794ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-33w2-prhc-2q89/GHSA-33w2-prhc-2q89.json +++ b/advisories/unreviewed/2022/05/GHSA-33w2-prhc-2q89/GHSA-33w2-prhc-2q89.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-33xj-83vp-6r44/GHSA-33xj-83vp-6r44.json b/advisories/unreviewed/2022/05/GHSA-33xj-83vp-6r44/GHSA-33xj-83vp-6r44.json index 7841abf1329..01abe5ae9d2 100644 --- a/advisories/unreviewed/2022/05/GHSA-33xj-83vp-6r44/GHSA-33xj-83vp-6r44.json +++ b/advisories/unreviewed/2022/05/GHSA-33xj-83vp-6r44/GHSA-33xj-83vp-6r44.json @@ -7,12 +7,8 @@ "CVE-2019-12425" ], "details": "Apache OFBiz 17.12.01 is vulnerable to Host header injection by accepting arbitrary host", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-34gx-cprw-qgmf/GHSA-34gx-cprw-qgmf.json b/advisories/unreviewed/2022/05/GHSA-34gx-cprw-qgmf/GHSA-34gx-cprw-qgmf.json index e26382f99b2..75937bf865b 100644 --- a/advisories/unreviewed/2022/05/GHSA-34gx-cprw-qgmf/GHSA-34gx-cprw-qgmf.json +++ b/advisories/unreviewed/2022/05/GHSA-34gx-cprw-qgmf/GHSA-34gx-cprw-qgmf.json @@ -7,12 +7,8 @@ "CVE-2020-1880" ], "details": "Huawei smartphone Lion-AL00C with versions earlier than 10.0.0.205(C00E202R7P2) have a denial of service vulnerability. An attacker crafted specially file to the affected device. Due to insufficient input validation of the value when executing the file, successful exploit may cause device abnormal.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-395v-vr8h-m439/GHSA-395v-vr8h-m439.json b/advisories/unreviewed/2022/05/GHSA-395v-vr8h-m439/GHSA-395v-vr8h-m439.json index e911484c43d..63b6919afc8 100644 --- a/advisories/unreviewed/2022/05/GHSA-395v-vr8h-m439/GHSA-395v-vr8h-m439.json +++ b/advisories/unreviewed/2022/05/GHSA-395v-vr8h-m439/GHSA-395v-vr8h-m439.json @@ -7,12 +7,8 @@ "CVE-2016-11057" ], "details": "Certain NETGEAR devices are affected by mishandling of repeated URL calls. This affects JNR1010v2 before 2017-01-06, WNR614 before 2017-01-06, WNR618 before 2017-01-06, JWNR2000v5 before 2017-01-06, WNR2020 before 2017-01-06, JWNR2010v5 before 2017-01-06, WNR1000v4 before 2017-01-06, WNR2020v2 before 2017-01-06, R6220 before 2017-01-06, and WNDR3700v5 before 2017-01-06.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3c9c-mvvg-2vw7/GHSA-3c9c-mvvg-2vw7.json b/advisories/unreviewed/2022/05/GHSA-3c9c-mvvg-2vw7/GHSA-3c9c-mvvg-2vw7.json index 47aafdca93c..c2401c7059e 100644 --- a/advisories/unreviewed/2022/05/GHSA-3c9c-mvvg-2vw7/GHSA-3c9c-mvvg-2vw7.json +++ b/advisories/unreviewed/2022/05/GHSA-3c9c-mvvg-2vw7/GHSA-3c9c-mvvg-2vw7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3cpg-c2v9-mf28/GHSA-3cpg-c2v9-mf28.json b/advisories/unreviewed/2022/05/GHSA-3cpg-c2v9-mf28/GHSA-3cpg-c2v9-mf28.json index 8457ef6b18f..c884e0cd427 100644 --- a/advisories/unreviewed/2022/05/GHSA-3cpg-c2v9-mf28/GHSA-3cpg-c2v9-mf28.json +++ b/advisories/unreviewed/2022/05/GHSA-3cpg-c2v9-mf28/GHSA-3cpg-c2v9-mf28.json @@ -7,12 +7,8 @@ "CVE-2018-21227" ], "details": "Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, R6400v2 before 1.0.2.34, R6700 before 1.0.1.30, R6900 before 1.0.1.30, R6900P before 1.0.0.62, R7000 before 1.0.9.12, R7000P before 1.0.0.62, R7500v2 before 1.0.3.26, R7800 before 1.0.2.42, R9000 before 1.0.3.10, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3cxp-7r2h-jh9g/GHSA-3cxp-7r2h-jh9g.json b/advisories/unreviewed/2022/05/GHSA-3cxp-7r2h-jh9g/GHSA-3cxp-7r2h-jh9g.json index 44cb1266706..a7893b82b93 100644 --- a/advisories/unreviewed/2022/05/GHSA-3cxp-7r2h-jh9g/GHSA-3cxp-7r2h-jh9g.json +++ b/advisories/unreviewed/2022/05/GHSA-3cxp-7r2h-jh9g/GHSA-3cxp-7r2h-jh9g.json @@ -7,12 +7,8 @@ "CVE-2020-6213" ], "details": "SAP NetWeaver AS ABAP Business Server Pages Test Application SBSPEXT_PHTMLB, versions 700, 701, 702, 730, 731, 740, 750, 751, 752, 753, 754, is vulnerable to reflected Cross-Site Scripting (XSS) via different URL parameters as it does not sufficiently encode user controlled inputs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3fwx-h544-x56c/GHSA-3fwx-h544-x56c.json b/advisories/unreviewed/2022/05/GHSA-3fwx-h544-x56c/GHSA-3fwx-h544-x56c.json index c16e9120f96..11eb4e6042c 100644 --- a/advisories/unreviewed/2022/05/GHSA-3fwx-h544-x56c/GHSA-3fwx-h544-x56c.json +++ b/advisories/unreviewed/2022/05/GHSA-3fwx-h544-x56c/GHSA-3fwx-h544-x56c.json @@ -7,12 +7,8 @@ "CVE-2017-18721" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3gmp-5h5f-57v9/GHSA-3gmp-5h5f-57v9.json b/advisories/unreviewed/2022/05/GHSA-3gmp-5h5f-57v9/GHSA-3gmp-5h5f-57v9.json index a9ef859b5b5..8d4caae139a 100644 --- a/advisories/unreviewed/2022/05/GHSA-3gmp-5h5f-57v9/GHSA-3gmp-5h5f-57v9.json +++ b/advisories/unreviewed/2022/05/GHSA-3gmp-5h5f-57v9/GHSA-3gmp-5h5f-57v9.json @@ -7,12 +7,8 @@ "CVE-2020-11687" ], "details": "In JetBrains TeamCity before 2019.2.2, password values were shown in an unmasked format on several pages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3j85-fggf-7m9p/GHSA-3j85-fggf-7m9p.json b/advisories/unreviewed/2022/05/GHSA-3j85-fggf-7m9p/GHSA-3j85-fggf-7m9p.json index 60e7b1eb011..1f563908065 100644 --- a/advisories/unreviewed/2022/05/GHSA-3j85-fggf-7m9p/GHSA-3j85-fggf-7m9p.json +++ b/advisories/unreviewed/2022/05/GHSA-3j85-fggf-7m9p/GHSA-3j85-fggf-7m9p.json @@ -7,12 +7,8 @@ "CVE-2020-12134" ], "details": "Nanometrics Centaur through 4.3.23 and TitanSMA through 4.2.20 mishandle access control for the syslog log.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3jfh-77jm-9vg4/GHSA-3jfh-77jm-9vg4.json b/advisories/unreviewed/2022/05/GHSA-3jfh-77jm-9vg4/GHSA-3jfh-77jm-9vg4.json index 39ca251bbaf..7bd683f1305 100644 --- a/advisories/unreviewed/2022/05/GHSA-3jfh-77jm-9vg4/GHSA-3jfh-77jm-9vg4.json +++ b/advisories/unreviewed/2022/05/GHSA-3jfh-77jm-9vg4/GHSA-3jfh-77jm-9vg4.json @@ -7,12 +7,8 @@ "CVE-2020-9068" ], "details": "Huawei AR3200 products with versions of V200R007C00SPC900, V200R007C00SPCa00, V200R007C00SPCb00, V200R007C00SPCc00, V200R009C00SPC500 have an improper authentication vulnerability. Attackers need to perform some operations to exploit the vulnerability. Successful exploit may obtain certain permissions on the device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3m6h-hxj9-g93x/GHSA-3m6h-hxj9-g93x.json b/advisories/unreviewed/2022/05/GHSA-3m6h-hxj9-g93x/GHSA-3m6h-hxj9-g93x.json index acb73fc5ef5..edeb37f9e17 100644 --- a/advisories/unreviewed/2022/05/GHSA-3m6h-hxj9-g93x/GHSA-3m6h-hxj9-g93x.json +++ b/advisories/unreviewed/2022/05/GHSA-3m6h-hxj9-g93x/GHSA-3m6h-hxj9-g93x.json @@ -7,12 +7,8 @@ "CVE-2018-21223" ], "details": "Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D7800 before 1.0.1.30, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3q96-v5v2-gwhq/GHSA-3q96-v5v2-gwhq.json b/advisories/unreviewed/2022/05/GHSA-3q96-v5v2-gwhq/GHSA-3q96-v5v2-gwhq.json index afc7a9292ed..0b9e785bb56 100644 --- a/advisories/unreviewed/2022/05/GHSA-3q96-v5v2-gwhq/GHSA-3q96-v5v2-gwhq.json +++ b/advisories/unreviewed/2022/05/GHSA-3q96-v5v2-gwhq/GHSA-3q96-v5v2-gwhq.json @@ -7,12 +7,8 @@ "CVE-2020-11938" ], "details": "In JetBrains TeamCity 2018.2 through 2019.2.1, a project administrator was able to see scrambled password parameters used in a project. The issue was resolved in 2019.2.2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3qqp-2f2h-3jpr/GHSA-3qqp-2f2h-3jpr.json b/advisories/unreviewed/2022/05/GHSA-3qqp-2f2h-3jpr/GHSA-3qqp-2f2h-3jpr.json index 555cac0b387..0e4515e1ef5 100644 --- a/advisories/unreviewed/2022/05/GHSA-3qqp-2f2h-3jpr/GHSA-3qqp-2f2h-3jpr.json +++ b/advisories/unreviewed/2022/05/GHSA-3qqp-2f2h-3jpr/GHSA-3qqp-2f2h-3jpr.json @@ -7,12 +7,8 @@ "CVE-2018-21176" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.57, R6100 before 1.0.1.20, R7500 before 1.0.0.122, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3rjh-fcp5-cg7v/GHSA-3rjh-fcp5-cg7v.json b/advisories/unreviewed/2022/05/GHSA-3rjh-fcp5-cg7v/GHSA-3rjh-fcp5-cg7v.json index 0b76f7b70d8..737a1456148 100644 --- a/advisories/unreviewed/2022/05/GHSA-3rjh-fcp5-cg7v/GHSA-3rjh-fcp5-cg7v.json +++ b/advisories/unreviewed/2022/05/GHSA-3rjh-fcp5-cg7v/GHSA-3rjh-fcp5-cg7v.json @@ -7,12 +7,8 @@ "CVE-2020-5869" ], "details": "In BIG-IQ 5.2.0-7.0.0, high availability (HA) synchronization is not secure by TLS and may allow on-path attackers to read / modify confidential data in transit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3w7q-g3xj-qrcp/GHSA-3w7q-g3xj-qrcp.json b/advisories/unreviewed/2022/05/GHSA-3w7q-g3xj-qrcp/GHSA-3w7q-g3xj-qrcp.json index 540cae369d5..4811dfce7b2 100644 --- a/advisories/unreviewed/2022/05/GHSA-3w7q-g3xj-qrcp/GHSA-3w7q-g3xj-qrcp.json +++ b/advisories/unreviewed/2022/05/GHSA-3w7q-g3xj-qrcp/GHSA-3w7q-g3xj-qrcp.json @@ -7,12 +7,8 @@ "CVE-2019-4209" ], "details": "HCL Connections v5.5, v6.0, and v6.5 contains an open redirect vulnerability which could be exploited by an attacker to conduct phishing attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3wp8-5mq5-495j/GHSA-3wp8-5mq5-495j.json b/advisories/unreviewed/2022/05/GHSA-3wp8-5mq5-495j/GHSA-3wp8-5mq5-495j.json index 7e530862adb..3e2d6c95933 100644 --- a/advisories/unreviewed/2022/05/GHSA-3wp8-5mq5-495j/GHSA-3wp8-5mq5-495j.json +++ b/advisories/unreviewed/2022/05/GHSA-3wp8-5mq5-495j/GHSA-3wp8-5mq5-495j.json @@ -7,12 +7,8 @@ "CVE-2017-18734" ], "details": "Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.18, R6050 before 1.0.1.10, R6220 before 1.1.0.50, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, R6900v2 before 1.2.0.4, WNDR3700v5 before 1.1.0.48, WNR1000v4 before 1.1.0.44, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4288-822w-vf72/GHSA-4288-822w-vf72.json b/advisories/unreviewed/2022/05/GHSA-4288-822w-vf72/GHSA-4288-822w-vf72.json index c02e410d04c..338502ee0ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-4288-822w-vf72/GHSA-4288-822w-vf72.json +++ b/advisories/unreviewed/2022/05/GHSA-4288-822w-vf72/GHSA-4288-822w-vf72.json @@ -7,12 +7,8 @@ "CVE-2020-12078" ], "details": "An issue was discovered in Open-AudIT 3.3.1. There is shell metacharacter injection via attributes to an open-audit/configuration/ URI. An attacker can exploit this by adding an excluded IP address to the global discovery settings (internally called exclude_ip). This exclude_ip value is passed to the exec function in the discoveries_helper.php file (inside the all_ip_list function) without being filtered, which means that the attacker can provide a payload instead of a valid IP address.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-42hx-wjwc-3jx2/GHSA-42hx-wjwc-3jx2.json b/advisories/unreviewed/2022/05/GHSA-42hx-wjwc-3jx2/GHSA-42hx-wjwc-3jx2.json index 86124ac16b9..5190b94f2da 100644 --- a/advisories/unreviewed/2022/05/GHSA-42hx-wjwc-3jx2/GHSA-42hx-wjwc-3jx2.json +++ b/advisories/unreviewed/2022/05/GHSA-42hx-wjwc-3jx2/GHSA-42hx-wjwc-3jx2.json @@ -7,12 +7,8 @@ "CVE-2017-18859" ], "details": "Certain NETGEAR devices are affected by slowdown/stoppage. This affects C6300 before 2017-05-30, CM400 before 2017-05-30, CM700 before 2017-05-30, and CMD31T before 2017-05-30.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-42wh-xvwj-fm9p/GHSA-42wh-xvwj-fm9p.json b/advisories/unreviewed/2022/05/GHSA-42wh-xvwj-fm9p/GHSA-42wh-xvwj-fm9p.json index 68be37c5947..7bae8f58df0 100644 --- a/advisories/unreviewed/2022/05/GHSA-42wh-xvwj-fm9p/GHSA-42wh-xvwj-fm9p.json +++ b/advisories/unreviewed/2022/05/GHSA-42wh-xvwj-fm9p/GHSA-42wh-xvwj-fm9p.json @@ -7,12 +7,8 @@ "CVE-2018-21193" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.57, D7800 before 1.0.1.34, R6100 before 1.0.1.20, R7500 before 1.0.0.122, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-43hm-fwqj-757w/GHSA-43hm-fwqj-757w.json b/advisories/unreviewed/2022/05/GHSA-43hm-fwqj-757w/GHSA-43hm-fwqj-757w.json index dc043b638c4..63832d7cd06 100644 --- a/advisories/unreviewed/2022/05/GHSA-43hm-fwqj-757w/GHSA-43hm-fwqj-757w.json +++ b/advisories/unreviewed/2022/05/GHSA-43hm-fwqj-757w/GHSA-43hm-fwqj-757w.json @@ -7,12 +7,8 @@ "CVE-2020-12442" ], "details": "Ivanti Avalanche 6.3 allows a SQL injection that is vaguely associated with the Apache HTTP Server, aka Bug 683250.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-43p3-w85x-8jw6/GHSA-43p3-w85x-8jw6.json b/advisories/unreviewed/2022/05/GHSA-43p3-w85x-8jw6/GHSA-43p3-w85x-8jw6.json index 47c8a6a6262..2bfc06223ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-43p3-w85x-8jw6/GHSA-43p3-w85x-8jw6.json +++ b/advisories/unreviewed/2022/05/GHSA-43p3-w85x-8jw6/GHSA-43p3-w85x-8jw6.json @@ -7,12 +7,8 @@ "CVE-2020-12639" ], "details": "phpList before 3.5.3 allows XSS, with resultant privilege elevation, via lists/admin/template.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-453c-hx6c-v5gq/GHSA-453c-hx6c-v5gq.json b/advisories/unreviewed/2022/05/GHSA-453c-hx6c-v5gq/GHSA-453c-hx6c-v5gq.json index d3b032a0914..0beed38bd27 100644 --- a/advisories/unreviewed/2022/05/GHSA-453c-hx6c-v5gq/GHSA-453c-hx6c-v5gq.json +++ b/advisories/unreviewed/2022/05/GHSA-453c-hx6c-v5gq/GHSA-453c-hx6c-v5gq.json @@ -7,12 +7,8 @@ "CVE-2019-4751" ], "details": "IBM Cloud App Management 2019.3.0 and 2019.4.0 reveals a stack trace on certain API requests which can allow an attacker further information about the implementation of the offering. IBM X-Force ID: 173311.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-455h-mf6x-pwmj/GHSA-455h-mf6x-pwmj.json b/advisories/unreviewed/2022/05/GHSA-455h-mf6x-pwmj/GHSA-455h-mf6x-pwmj.json index 8a211ed4b7f..aae8a676b4d 100644 --- a/advisories/unreviewed/2022/05/GHSA-455h-mf6x-pwmj/GHSA-455h-mf6x-pwmj.json +++ b/advisories/unreviewed/2022/05/GHSA-455h-mf6x-pwmj/GHSA-455h-mf6x-pwmj.json @@ -7,12 +7,8 @@ "CVE-2020-2575" ], "details": "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 5.2.40, prior to 6.0.20 and prior to 6.1.6. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.0 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-463q-v52j-6vm4/GHSA-463q-v52j-6vm4.json b/advisories/unreviewed/2022/05/GHSA-463q-v52j-6vm4/GHSA-463q-v52j-6vm4.json index 6a7877624e4..5445d8a95f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-463q-v52j-6vm4/GHSA-463q-v52j-6vm4.json +++ b/advisories/unreviewed/2022/05/GHSA-463q-v52j-6vm4/GHSA-463q-v52j-6vm4.json @@ -7,12 +7,8 @@ "CVE-2019-7634" ], "details": "SUAP V2 allows XSS during the update of user information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-46x4-c48q-4248/GHSA-46x4-c48q-4248.json b/advisories/unreviewed/2022/05/GHSA-46x4-c48q-4248/GHSA-46x4-c48q-4248.json index 7598226a577..0533228db64 100644 --- a/advisories/unreviewed/2022/05/GHSA-46x4-c48q-4248/GHSA-46x4-c48q-4248.json +++ b/advisories/unreviewed/2022/05/GHSA-46x4-c48q-4248/GHSA-46x4-c48q-4248.json @@ -7,12 +7,8 @@ "CVE-2020-12052" ], "details": "Grafana version < 6.7.3 is vulnerable for annotation popup XSS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4839-crx3-rrgx/GHSA-4839-crx3-rrgx.json b/advisories/unreviewed/2022/05/GHSA-4839-crx3-rrgx/GHSA-4839-crx3-rrgx.json index a23d76de65b..92bfaf65f99 100644 --- a/advisories/unreviewed/2022/05/GHSA-4839-crx3-rrgx/GHSA-4839-crx3-rrgx.json +++ b/advisories/unreviewed/2022/05/GHSA-4839-crx3-rrgx/GHSA-4839-crx3-rrgx.json @@ -7,12 +7,8 @@ "CVE-2018-21185" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.57, D7800 before 1.0.1.34, R7500 before 1.0.0.122, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4892-82wr-4cv3/GHSA-4892-82wr-4cv3.json b/advisories/unreviewed/2022/05/GHSA-4892-82wr-4cv3/GHSA-4892-82wr-4cv3.json index 57344ce48ef..7add69b799e 100644 --- a/advisories/unreviewed/2022/05/GHSA-4892-82wr-4cv3/GHSA-4892-82wr-4cv3.json +++ b/advisories/unreviewed/2022/05/GHSA-4892-82wr-4cv3/GHSA-4892-82wr-4cv3.json @@ -7,12 +7,8 @@ "CVE-2020-12051" ], "details": "The CentralAuth extension through REL1_34 for MediaWiki allows remote attackers to obtain sensitive hidden account information via an api.php?action=query&meta=globaluserinfo&guiuser= request. In other words, the information can be retrieved via the action API even though access would be denied when simply visiting wiki/Special:CentralAuth in a web browser.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4f8g-q626-3w4p/GHSA-4f8g-q626-3w4p.json b/advisories/unreviewed/2022/05/GHSA-4f8g-q626-3w4p/GHSA-4f8g-q626-3w4p.json index ce1fb792df2..4d91e473f28 100644 --- a/advisories/unreviewed/2022/05/GHSA-4f8g-q626-3w4p/GHSA-4f8g-q626-3w4p.json +++ b/advisories/unreviewed/2022/05/GHSA-4f8g-q626-3w4p/GHSA-4f8g-q626-3w4p.json @@ -7,12 +7,8 @@ "CVE-2020-12473" ], "details": "MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the Converter Executable setting from ffmpeg.exe to a different program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4f8j-fccm-mr22/GHSA-4f8j-fccm-mr22.json b/advisories/unreviewed/2022/05/GHSA-4f8j-fccm-mr22/GHSA-4f8j-fccm-mr22.json index c13caa45e2d..3f989ca295b 100644 --- a/advisories/unreviewed/2022/05/GHSA-4f8j-fccm-mr22/GHSA-4f8j-fccm-mr22.json +++ b/advisories/unreviewed/2022/05/GHSA-4f8j-fccm-mr22/GHSA-4f8j-fccm-mr22.json @@ -7,12 +7,8 @@ "CVE-2019-19107" ], "details": "The Configuration pages in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway for user profiles and services transfer the password in plaintext (although hidden when displayed).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4fj3-rhxv-8jrf/GHSA-4fj3-rhxv-8jrf.json b/advisories/unreviewed/2022/05/GHSA-4fj3-rhxv-8jrf/GHSA-4fj3-rhxv-8jrf.json index 729a194c14a..682ff8f8d08 100644 --- a/advisories/unreviewed/2022/05/GHSA-4fj3-rhxv-8jrf/GHSA-4fj3-rhxv-8jrf.json +++ b/advisories/unreviewed/2022/05/GHSA-4fj3-rhxv-8jrf/GHSA-4fj3-rhxv-8jrf.json @@ -7,12 +7,8 @@ "CVE-2020-7055" ], "details": "An issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor Import Templates function, allowing an attacker to execute code via a crafted ZIP archive.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4g2r-wfrw-4x6f/GHSA-4g2r-wfrw-4x6f.json b/advisories/unreviewed/2022/05/GHSA-4g2r-wfrw-4x6f/GHSA-4g2r-wfrw-4x6f.json index 9ddf37eeb19..973a745b218 100644 --- a/advisories/unreviewed/2022/05/GHSA-4g2r-wfrw-4x6f/GHSA-4g2r-wfrw-4x6f.json +++ b/advisories/unreviewed/2022/05/GHSA-4g2r-wfrw-4x6f/GHSA-4g2r-wfrw-4x6f.json @@ -7,12 +7,8 @@ "CVE-2018-21201" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.57, R6100 before 1.0.1.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4h3x-gr3p-q99h/GHSA-4h3x-gr3p-q99h.json b/advisories/unreviewed/2022/05/GHSA-4h3x-gr3p-q99h/GHSA-4h3x-gr3p-q99h.json index b98da7fa652..ea256d29977 100644 --- a/advisories/unreviewed/2022/05/GHSA-4h3x-gr3p-q99h/GHSA-4h3x-gr3p-q99h.json +++ b/advisories/unreviewed/2022/05/GHSA-4h3x-gr3p-q99h/GHSA-4h3x-gr3p-q99h.json @@ -7,12 +7,8 @@ "CVE-2020-10892" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the communication API. The issue lies in the handling of the CombineFiles command, which allows an arbitrary file write with attacker controlled data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9830.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4h9q-5577-5432/GHSA-4h9q-5577-5432.json b/advisories/unreviewed/2022/05/GHSA-4h9q-5577-5432/GHSA-4h9q-5577-5432.json index b21373b58e4..36c5d564f4d 100644 --- a/advisories/unreviewed/2022/05/GHSA-4h9q-5577-5432/GHSA-4h9q-5577-5432.json +++ b/advisories/unreviewed/2022/05/GHSA-4h9q-5577-5432/GHSA-4h9q-5577-5432.json @@ -7,12 +7,8 @@ "CVE-2017-18733" ], "details": "Certain NETGEAR devices are affected by authentication bypass. This affects D6220 before 1.0.0.28, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.8, R6400 before 1.0.1.22, R6400v2 before 1.0.2.32, R7100LG before 1.0.0.32, R7300DST before 1.0.0.52, R8300 before 1.0.2.94, and R8500 before 1.0.2.100.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4r6g-prvv-3gp3/GHSA-4r6g-prvv-3gp3.json b/advisories/unreviewed/2022/05/GHSA-4r6g-prvv-3gp3/GHSA-4r6g-prvv-3gp3.json index 0c0596e0ac6..79a16f91925 100644 --- a/advisories/unreviewed/2022/05/GHSA-4r6g-prvv-3gp3/GHSA-4r6g-prvv-3gp3.json +++ b/advisories/unreviewed/2022/05/GHSA-4r6g-prvv-3gp3/GHSA-4r6g-prvv-3gp3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4rcp-9qg3-q6jp/GHSA-4rcp-9qg3-q6jp.json b/advisories/unreviewed/2022/05/GHSA-4rcp-9qg3-q6jp/GHSA-4rcp-9qg3-q6jp.json index 2ff61afade0..6760abf1395 100644 --- a/advisories/unreviewed/2022/05/GHSA-4rcp-9qg3-q6jp/GHSA-4rcp-9qg3-q6jp.json +++ b/advisories/unreviewed/2022/05/GHSA-4rcp-9qg3-q6jp/GHSA-4rcp-9qg3-q6jp.json @@ -7,12 +7,8 @@ "CVE-2020-5876" ], "details": "On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, a race condition exists where mcpd and other processes may make unencrypted connection attempts to a new configuration sync peer. The race condition can occur when changing the ConfigSync IP address of a peer, adding a new peer, or when the Traffic Management Microkernel (TMM) first starts up.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4vhq-fphc-qqcg/GHSA-4vhq-fphc-qqcg.json b/advisories/unreviewed/2022/05/GHSA-4vhq-fphc-qqcg/GHSA-4vhq-fphc-qqcg.json index d4e8e3fb6a8..8e787abb324 100644 --- a/advisories/unreviewed/2022/05/GHSA-4vhq-fphc-qqcg/GHSA-4vhq-fphc-qqcg.json +++ b/advisories/unreviewed/2022/05/GHSA-4vhq-fphc-qqcg/GHSA-4vhq-fphc-qqcg.json @@ -7,12 +7,8 @@ "CVE-2020-12073" ], "details": "The responsive-add-ons plugin before 2.2.7 for WordPress has incorrect access control for wp-admin/admin-ajax.php?action= requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4w29-23fj-v8v5/GHSA-4w29-23fj-v8v5.json b/advisories/unreviewed/2022/05/GHSA-4w29-23fj-v8v5/GHSA-4w29-23fj-v8v5.json index 37f1f6e3f34..6f41816118f 100644 --- a/advisories/unreviewed/2022/05/GHSA-4w29-23fj-v8v5/GHSA-4w29-23fj-v8v5.json +++ b/advisories/unreviewed/2022/05/GHSA-4w29-23fj-v8v5/GHSA-4w29-23fj-v8v5.json @@ -7,12 +7,8 @@ "CVE-2018-21229" ], "details": "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R7500v2 before 1.0.3.20, R7800 before 1.0.2.38, WN3000RPv3 before 1.0.2.50, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4w6f-mhpj-mxv7/GHSA-4w6f-mhpj-mxv7.json b/advisories/unreviewed/2022/05/GHSA-4w6f-mhpj-mxv7/GHSA-4w6f-mhpj-mxv7.json index fa9cfb852ae..9b5ed599f45 100644 --- a/advisories/unreviewed/2022/05/GHSA-4w6f-mhpj-mxv7/GHSA-4w6f-mhpj-mxv7.json +++ b/advisories/unreviewed/2022/05/GHSA-4w6f-mhpj-mxv7/GHSA-4w6f-mhpj-mxv7.json @@ -7,12 +7,8 @@ "CVE-2020-12462" ], "details": "The ninja-forms plugin before 3.4.24.2 for WordPress allows CSRF with resultant XSS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4x8j-w832-rw4c/GHSA-4x8j-w832-rw4c.json b/advisories/unreviewed/2022/05/GHSA-4x8j-w832-rw4c/GHSA-4x8j-w832-rw4c.json index d285b5a4a9f..cd6d8fbbfa8 100644 --- a/advisories/unreviewed/2022/05/GHSA-4x8j-w832-rw4c/GHSA-4x8j-w832-rw4c.json +++ b/advisories/unreviewed/2022/05/GHSA-4x8j-w832-rw4c/GHSA-4x8j-w832-rw4c.json @@ -7,12 +7,8 @@ "CVE-2018-21169" ], "details": "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7000 before 2018-03-01, D7800 before 1.0.1.31, D8500 before 1.0.3.36, JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.14, JWNR2010v5 before 1.1.0.46, PR2000 before 2018-03-01, R6050 before 1.0.1.14, R6220 before 1.1.0.60, R6400 before 1.1.0.26, R6400v2 before 1.0.2.46, R6700v2 before 1.2.0.2, R6800 before 1.2.0.2, R6900v2 before 1.2.0.2, R7300DST before 1.0.0.56, R7500 before 1.0.0.112, R7500v2 before 1.0.3.24, R7800 before 1.0.2.36, R7900P before 1.1.4.6, R8000P before 1.1.4.6, R8300 before 1.0.2.104, R8500 before 1.0.2.104, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.94, WNDR3700v5 before 1.1.0.50, WNDR4300 before 1.0.2.96, WNDR4300v2 before 1.0.0.52, WNDR4500v3 before 1.0.0.52, WNR1000v4 before 1.1.0.46, WNR2020 before 1.1.0.46, and WNR2050 before 1.1.0.46.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4xw5-59v2-jrrg/GHSA-4xw5-59v2-jrrg.json b/advisories/unreviewed/2022/05/GHSA-4xw5-59v2-jrrg/GHSA-4xw5-59v2-jrrg.json index 5307337e596..21c52f39047 100644 --- a/advisories/unreviewed/2022/05/GHSA-4xw5-59v2-jrrg/GHSA-4xw5-59v2-jrrg.json +++ b/advisories/unreviewed/2022/05/GHSA-4xw5-59v2-jrrg/GHSA-4xw5-59v2-jrrg.json @@ -7,12 +7,8 @@ "CVE-2020-11692" ], "details": "In JetBrains YouTrack before 2020.1.659, DB export was accessible to read-only administrators.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-52m5-wj8w-7278/GHSA-52m5-wj8w-7278.json b/advisories/unreviewed/2022/05/GHSA-52m5-wj8w-7278/GHSA-52m5-wj8w-7278.json index e65b8dd50fa..9027e544ebe 100644 --- a/advisories/unreviewed/2022/05/GHSA-52m5-wj8w-7278/GHSA-52m5-wj8w-7278.json +++ b/advisories/unreviewed/2022/05/GHSA-52m5-wj8w-7278/GHSA-52m5-wj8w-7278.json @@ -7,12 +7,8 @@ "CVE-2017-18697" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 before 1.0.2.40 and R9000 before 1.0.2.52.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-55v7-3xw8-jf37/GHSA-55v7-3xw8-jf37.json b/advisories/unreviewed/2022/05/GHSA-55v7-3xw8-jf37/GHSA-55v7-3xw8-jf37.json index ed67e8c1998..e89a607165c 100644 --- a/advisories/unreviewed/2022/05/GHSA-55v7-3xw8-jf37/GHSA-55v7-3xw8-jf37.json +++ b/advisories/unreviewed/2022/05/GHSA-55v7-3xw8-jf37/GHSA-55v7-3xw8-jf37.json @@ -7,12 +7,8 @@ "CVE-2018-21219" ], "details": "Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, D7800 before 1.0.1.30, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-56mf-pgq9-8ccj/GHSA-56mf-pgq9-8ccj.json b/advisories/unreviewed/2022/05/GHSA-56mf-pgq9-8ccj/GHSA-56mf-pgq9-8ccj.json index 9ee14e0d6f9..2f288a42227 100644 --- a/advisories/unreviewed/2022/05/GHSA-56mf-pgq9-8ccj/GHSA-56mf-pgq9-8ccj.json +++ b/advisories/unreviewed/2022/05/GHSA-56mf-pgq9-8ccj/GHSA-56mf-pgq9-8ccj.json @@ -7,12 +7,8 @@ "CVE-2020-5870" ], "details": "In BIG-IQ 5.2.0-7.0.0, high availability (HA) synchronization mechanisms do not use any form of authentication for connecting to the peer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5792-f7qg-cgcx/GHSA-5792-f7qg-cgcx.json b/advisories/unreviewed/2022/05/GHSA-5792-f7qg-cgcx/GHSA-5792-f7qg-cgcx.json index c2ab0cab5b0..5b5fe1878f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-5792-f7qg-cgcx/GHSA-5792-f7qg-cgcx.json +++ b/advisories/unreviewed/2022/05/GHSA-5792-f7qg-cgcx/GHSA-5792-f7qg-cgcx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-595v-7j6w-538p/GHSA-595v-7j6w-538p.json b/advisories/unreviewed/2022/05/GHSA-595v-7j6w-538p/GHSA-595v-7j6w-538p.json index 5f146cd0814..1ac1e61e202 100644 --- a/advisories/unreviewed/2022/05/GHSA-595v-7j6w-538p/GHSA-595v-7j6w-538p.json +++ b/advisories/unreviewed/2022/05/GHSA-595v-7j6w-538p/GHSA-595v-7j6w-538p.json @@ -7,12 +7,8 @@ "CVE-2020-7133" ], "details": "A unauthorized remote access vulnerability was discovered in HPE IOT + GCP version(s): 1.4.0, 1.4.1, 1.4.2, 1.2.4.2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5f6r-4wq3-8vp5/GHSA-5f6r-4wq3-8vp5.json b/advisories/unreviewed/2022/05/GHSA-5f6r-4wq3-8vp5/GHSA-5f6r-4wq3-8vp5.json index ae1dcf9f6ad..011c43bba49 100644 --- a/advisories/unreviewed/2022/05/GHSA-5f6r-4wq3-8vp5/GHSA-5f6r-4wq3-8vp5.json +++ b/advisories/unreviewed/2022/05/GHSA-5f6r-4wq3-8vp5/GHSA-5f6r-4wq3-8vp5.json @@ -7,12 +7,8 @@ "CVE-2020-5893" ], "details": "In versions 7.1.5-7.1.8, when a user connects to a VPN using BIG-IP Edge Client over an unsecure network, BIG-IP Edge Client responds to authentication requests over HTTP while sending probes for captive portal detection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5fvm-866q-fmw7/GHSA-5fvm-866q-fmw7.json b/advisories/unreviewed/2022/05/GHSA-5fvm-866q-fmw7/GHSA-5fvm-866q-fmw7.json index f92ca388bd7..4214e8ac0a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-5fvm-866q-fmw7/GHSA-5fvm-866q-fmw7.json +++ b/advisories/unreviewed/2022/05/GHSA-5fvm-866q-fmw7/GHSA-5fvm-866q-fmw7.json @@ -7,12 +7,8 @@ "CVE-2020-11685" ], "details": "In JetBrains GoLand before 2019.3.2, the plugin repository was accessed via HTTP instead of HTTPS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5fx5-7qgj-cmg7/GHSA-5fx5-7qgj-cmg7.json b/advisories/unreviewed/2022/05/GHSA-5fx5-7qgj-cmg7/GHSA-5fx5-7qgj-cmg7.json index 2c025109bb7..b1a5af6ae2c 100644 --- a/advisories/unreviewed/2022/05/GHSA-5fx5-7qgj-cmg7/GHSA-5fx5-7qgj-cmg7.json +++ b/advisories/unreviewed/2022/05/GHSA-5fx5-7qgj-cmg7/GHSA-5fx5-7qgj-cmg7.json @@ -7,12 +7,8 @@ "CVE-2019-15791" ], "details": "In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() installs an fd referencing a file from the lower filesystem without taking an additional reference to that file. After the btrfs ioctl completes this fd is closed, which then puts a reference to that file, leading to a refcount underflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5fxc-76h7-p499/GHSA-5fxc-76h7-p499.json b/advisories/unreviewed/2022/05/GHSA-5fxc-76h7-p499/GHSA-5fxc-76h7-p499.json index ad9b3505508..f5b11ffa02d 100644 --- a/advisories/unreviewed/2022/05/GHSA-5fxc-76h7-p499/GHSA-5fxc-76h7-p499.json +++ b/advisories/unreviewed/2022/05/GHSA-5fxc-76h7-p499/GHSA-5fxc-76h7-p499.json @@ -7,12 +7,8 @@ "CVE-2019-20787" ], "details": "Teeworlds before 0.7.4 has an integer overflow when computing a tilemap size.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5gwh-pgwq-xpvh/GHSA-5gwh-pgwq-xpvh.json b/advisories/unreviewed/2022/05/GHSA-5gwh-pgwq-xpvh/GHSA-5gwh-pgwq-xpvh.json index b80398e1551..0f00bf1de71 100644 --- a/advisories/unreviewed/2022/05/GHSA-5gwh-pgwq-xpvh/GHSA-5gwh-pgwq-xpvh.json +++ b/advisories/unreviewed/2022/05/GHSA-5gwh-pgwq-xpvh/GHSA-5gwh-pgwq-xpvh.json @@ -7,12 +7,8 @@ "CVE-2018-21222" ], "details": "Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D7800 before 1.0.1.30, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5j7p-83rg-vvj4/GHSA-5j7p-83rg-vvj4.json b/advisories/unreviewed/2022/05/GHSA-5j7p-83rg-vvj4/GHSA-5j7p-83rg-vvj4.json index 37d4208367b..06257be90f7 100644 --- a/advisories/unreviewed/2022/05/GHSA-5j7p-83rg-vvj4/GHSA-5j7p-83rg-vvj4.json +++ b/advisories/unreviewed/2022/05/GHSA-5j7p-83rg-vvj4/GHSA-5j7p-83rg-vvj4.json @@ -7,12 +7,8 @@ "CVE-2018-21217" ], "details": "Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, and R6100 before 1.0.1.20.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5jqv-387p-mq6h/GHSA-5jqv-387p-mq6h.json b/advisories/unreviewed/2022/05/GHSA-5jqv-387p-mq6h/GHSA-5jqv-387p-mq6h.json index 5a4187c57ee..dff3d52c7f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-5jqv-387p-mq6h/GHSA-5jqv-387p-mq6h.json +++ b/advisories/unreviewed/2022/05/GHSA-5jqv-387p-mq6h/GHSA-5jqv-387p-mq6h.json @@ -7,12 +7,8 @@ "CVE-2017-18746" ], "details": "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6000 before 1.0.0.24, EX6130 before 1.0.0.16, EX6400 before 1.0.1.60, EX7000 before 1.0.0.50, EX7300 before 1.0.1.60, and WN2500RPv2 before 1.0.1.46.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5m3q-9x9p-vvpw/GHSA-5m3q-9x9p-vvpw.json b/advisories/unreviewed/2022/05/GHSA-5m3q-9x9p-vvpw/GHSA-5m3q-9x9p-vvpw.json index addfaf2aa05..d0a99975f09 100644 --- a/advisories/unreviewed/2022/05/GHSA-5m3q-9x9p-vvpw/GHSA-5m3q-9x9p-vvpw.json +++ b/advisories/unreviewed/2022/05/GHSA-5m3q-9x9p-vvpw/GHSA-5m3q-9x9p-vvpw.json @@ -7,12 +7,8 @@ "CVE-2018-21195" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.57, D7800 before 1.0.1.34, R6100 before 1.0.1.20, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.3.6, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5m6g-mcf5-6jx2/GHSA-5m6g-mcf5-6jx2.json b/advisories/unreviewed/2022/05/GHSA-5m6g-mcf5-6jx2/GHSA-5m6g-mcf5-6jx2.json index af034b13614..24bfba297d9 100644 --- a/advisories/unreviewed/2022/05/GHSA-5m6g-mcf5-6jx2/GHSA-5m6g-mcf5-6jx2.json +++ b/advisories/unreviewed/2022/05/GHSA-5m6g-mcf5-6jx2/GHSA-5m6g-mcf5-6jx2.json @@ -7,12 +7,8 @@ "CVE-2020-11690" ], "details": "In JetBrains IntelliJ IDEA before 2020.1, the license server could be resolved to an untrusted host in some cases.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5mgh-v3q3-5v3f/GHSA-5mgh-v3q3-5v3f.json b/advisories/unreviewed/2022/05/GHSA-5mgh-v3q3-5v3f/GHSA-5mgh-v3q3-5v3f.json index b8dd5d707fb..5aebcdd0185 100644 --- a/advisories/unreviewed/2022/05/GHSA-5mgh-v3q3-5v3f/GHSA-5mgh-v3q3-5v3f.json +++ b/advisories/unreviewed/2022/05/GHSA-5mgh-v3q3-5v3f/GHSA-5mgh-v3q3-5v3f.json @@ -7,12 +7,8 @@ "CVE-2020-4353" ], "details": "IBM MaaS360 6.82 could allow a user with pysical access to the device to crash the application which may enable the user to access restricted applications and device settings. IBM X-Force ID: 178505.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5mqr-r6f4-crg6/GHSA-5mqr-r6f4-crg6.json b/advisories/unreviewed/2022/05/GHSA-5mqr-r6f4-crg6/GHSA-5mqr-r6f4-crg6.json index 77f99e8cf2c..90a396a67a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-5mqr-r6f4-crg6/GHSA-5mqr-r6f4-crg6.json +++ b/advisories/unreviewed/2022/05/GHSA-5mqr-r6f4-crg6/GHSA-5mqr-r6f4-crg6.json @@ -7,12 +7,8 @@ "CVE-2020-10905" ], "details": "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of vertices in U3D objects. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-10568.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5pg6-jg49-4vj7/GHSA-5pg6-jg49-4vj7.json b/advisories/unreviewed/2022/05/GHSA-5pg6-jg49-4vj7/GHSA-5pg6-jg49-4vj7.json index 4d417aa0798..ae703157c8f 100644 --- a/advisories/unreviewed/2022/05/GHSA-5pg6-jg49-4vj7/GHSA-5pg6-jg49-4vj7.json +++ b/advisories/unreviewed/2022/05/GHSA-5pg6-jg49-4vj7/GHSA-5pg6-jg49-4vj7.json @@ -7,12 +7,8 @@ "CVE-2020-12252" ], "details": "An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an arbitrary file upload for an authenticated user. If an executable file is uploaded into the www-root directory, then it could yield remote code execution via the filename parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5prq-w53g-g67h/GHSA-5prq-w53g-g67h.json b/advisories/unreviewed/2022/05/GHSA-5prq-w53g-g67h/GHSA-5prq-w53g-g67h.json index 741a1f6245e..5f2a587a8f3 100644 --- a/advisories/unreviewed/2022/05/GHSA-5prq-w53g-g67h/GHSA-5prq-w53g-g67h.json +++ b/advisories/unreviewed/2022/05/GHSA-5prq-w53g-g67h/GHSA-5prq-w53g-g67h.json @@ -7,12 +7,8 @@ "CVE-2020-10912" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the SetFieldValue command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9945.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5q76-4wqj-g7q5/GHSA-5q76-4wqj-g7q5.json b/advisories/unreviewed/2022/05/GHSA-5q76-4wqj-g7q5/GHSA-5q76-4wqj-g7q5.json index d2996716f74..526dbf1f168 100644 --- a/advisories/unreviewed/2022/05/GHSA-5q76-4wqj-g7q5/GHSA-5q76-4wqj-g7q5.json +++ b/advisories/unreviewed/2022/05/GHSA-5q76-4wqj-g7q5/GHSA-5q76-4wqj-g7q5.json @@ -7,12 +7,8 @@ "CVE-2020-5563" ], "details": "Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in the affected product via the API.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5rhv-5888-hp8c/GHSA-5rhv-5888-hp8c.json b/advisories/unreviewed/2022/05/GHSA-5rhv-5888-hp8c/GHSA-5rhv-5888-hp8c.json index 94847a46059..830afe9e3a1 100644 --- a/advisories/unreviewed/2022/05/GHSA-5rhv-5888-hp8c/GHSA-5rhv-5888-hp8c.json +++ b/advisories/unreviewed/2022/05/GHSA-5rhv-5888-hp8c/GHSA-5rhv-5888-hp8c.json @@ -7,12 +7,8 @@ "CVE-2017-18743" ], "details": "Certain NETGEAR devices are affected by authentication bypass. This affects R6300v2 before 1.0.4.8, R6400 before 1.0.1.20, R6700 before 1.0.1.20, R6900 before 1.0.1.20, R7000 before 1.0.7.10, R7100LG before V1.0.0.32, R7300DST before 1.0.0.52, R7900 before 1.0.1.16, R8000 before 1.0.3.36, R8300 before 1.0.2.94, R8500 before 1.0.2.94, WNDR3400v3 before 1.0.1.12, and WNR3500Lv2 before 1.2.0.40.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5rj6-cmvm-pw98/GHSA-5rj6-cmvm-pw98.json b/advisories/unreviewed/2022/05/GHSA-5rj6-cmvm-pw98/GHSA-5rj6-cmvm-pw98.json index 0ebbd126a84..2482daae17d 100644 --- a/advisories/unreviewed/2022/05/GHSA-5rj6-cmvm-pw98/GHSA-5rj6-cmvm-pw98.json +++ b/advisories/unreviewed/2022/05/GHSA-5rj6-cmvm-pw98/GHSA-5rj6-cmvm-pw98.json @@ -7,12 +7,8 @@ "CVE-2019-15877" ], "details": "In FreeBSD 12.1-STABLE before r356606 and 12.1-RELEASE before 12.1-RELEASE-p3, driver specific ioctl command handlers in the ixl network driver failed to check whether the caller has sufficient privileges allowing unprivileged users to trigger updates to the device's non-volatile memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5w49-v6w7-jmpv/GHSA-5w49-v6w7-jmpv.json b/advisories/unreviewed/2022/05/GHSA-5w49-v6w7-jmpv/GHSA-5w49-v6w7-jmpv.json index de3159066c7..ac83919df93 100644 --- a/advisories/unreviewed/2022/05/GHSA-5w49-v6w7-jmpv/GHSA-5w49-v6w7-jmpv.json +++ b/advisories/unreviewed/2022/05/GHSA-5w49-v6w7-jmpv/GHSA-5w49-v6w7-jmpv.json @@ -7,12 +7,8 @@ "CVE-2020-5868" ], "details": "In BIG-IQ 6.0.0-7.0.0, a remote access vulnerability has been discovered that may allow a remote user to execute shell commands on affected systems using HTTP requests to the BIG-IQ user interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5wc5-h2wj-6697/GHSA-5wc5-h2wj-6697.json b/advisories/unreviewed/2022/05/GHSA-5wc5-h2wj-6697/GHSA-5wc5-h2wj-6697.json index ae09012351a..15cd6e5dcb5 100644 --- a/advisories/unreviewed/2022/05/GHSA-5wc5-h2wj-6697/GHSA-5wc5-h2wj-6697.json +++ b/advisories/unreviewed/2022/05/GHSA-5wc5-h2wj-6697/GHSA-5wc5-h2wj-6697.json @@ -7,12 +7,8 @@ "CVE-2019-0235" ], "details": "Apache OFBiz 17.12.01 is vulnerable to some CSRF attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5wgm-9wqh-hv43/GHSA-5wgm-9wqh-hv43.json b/advisories/unreviewed/2022/05/GHSA-5wgm-9wqh-hv43/GHSA-5wgm-9wqh-hv43.json index 87b79f4de09..e8977f0ce29 100644 --- a/advisories/unreviewed/2022/05/GHSA-5wgm-9wqh-hv43/GHSA-5wgm-9wqh-hv43.json +++ b/advisories/unreviewed/2022/05/GHSA-5wgm-9wqh-hv43/GHSA-5wgm-9wqh-hv43.json @@ -7,12 +7,8 @@ "CVE-2018-21211" ], "details": "Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, D7800 before 1.0.1.30, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5wj2-9pm2-74vm/GHSA-5wj2-9pm2-74vm.json b/advisories/unreviewed/2022/05/GHSA-5wj2-9pm2-74vm/GHSA-5wj2-9pm2-74vm.json index ee5b497e267..7a5fbdae20a 100644 --- a/advisories/unreviewed/2022/05/GHSA-5wj2-9pm2-74vm/GHSA-5wj2-9pm2-74vm.json +++ b/advisories/unreviewed/2022/05/GHSA-5wj2-9pm2-74vm/GHSA-5wj2-9pm2-74vm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5x7j-64fm-ggfp/GHSA-5x7j-64fm-ggfp.json b/advisories/unreviewed/2022/05/GHSA-5x7j-64fm-ggfp/GHSA-5x7j-64fm-ggfp.json index 9c1dc8cade0..1eb07443127 100644 --- a/advisories/unreviewed/2022/05/GHSA-5x7j-64fm-ggfp/GHSA-5x7j-64fm-ggfp.json +++ b/advisories/unreviewed/2022/05/GHSA-5x7j-64fm-ggfp/GHSA-5x7j-64fm-ggfp.json @@ -7,12 +7,8 @@ "CVE-2019-19104" ], "details": "The web server in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows access to different endpoints of the application without authenticating by accessing a specific uniform resource locator (URL) , violating the access-control (ACL) rules. This issue allows obtaining sensitive information that may aid in further attacks and privilege escalation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-62wg-mmjj-4fmr/GHSA-62wg-mmjj-4fmr.json b/advisories/unreviewed/2022/05/GHSA-62wg-mmjj-4fmr/GHSA-62wg-mmjj-4fmr.json index 112556af3bf..f804b65e26a 100644 --- a/advisories/unreviewed/2022/05/GHSA-62wg-mmjj-4fmr/GHSA-62wg-mmjj-4fmr.json +++ b/advisories/unreviewed/2022/05/GHSA-62wg-mmjj-4fmr/GHSA-62wg-mmjj-4fmr.json @@ -7,12 +7,8 @@ "CVE-2018-21159" ], "details": "NETGEAR ReadyNAS devices before 6.9.3 are affected by incorrect configuration of security settings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6336-qrhq-h8c8/GHSA-6336-qrhq-h8c8.json b/advisories/unreviewed/2022/05/GHSA-6336-qrhq-h8c8/GHSA-6336-qrhq-h8c8.json index d8bb2c367f9..ae5e8a39f64 100644 --- a/advisories/unreviewed/2022/05/GHSA-6336-qrhq-h8c8/GHSA-6336-qrhq-h8c8.json +++ b/advisories/unreviewed/2022/05/GHSA-6336-qrhq-h8c8/GHSA-6336-qrhq-h8c8.json @@ -7,12 +7,8 @@ "CVE-2020-12076" ], "details": "The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions. One consequence of this is stored XSS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-63h7-pm69-6v2j/GHSA-63h7-pm69-6v2j.json b/advisories/unreviewed/2022/05/GHSA-63h7-pm69-6v2j/GHSA-63h7-pm69-6v2j.json index 608c3159030..9ffbd9baac3 100644 --- a/advisories/unreviewed/2022/05/GHSA-63h7-pm69-6v2j/GHSA-63h7-pm69-6v2j.json +++ b/advisories/unreviewed/2022/05/GHSA-63h7-pm69-6v2j/GHSA-63h7-pm69-6v2j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-646c-wq37-8qcr/GHSA-646c-wq37-8qcr.json b/advisories/unreviewed/2022/05/GHSA-646c-wq37-8qcr/GHSA-646c-wq37-8qcr.json index 1b1acc3447d..5a48b94cf8f 100644 --- a/advisories/unreviewed/2022/05/GHSA-646c-wq37-8qcr/GHSA-646c-wq37-8qcr.json +++ b/advisories/unreviewed/2022/05/GHSA-646c-wq37-8qcr/GHSA-646c-wq37-8qcr.json @@ -7,12 +7,8 @@ "CVE-2020-10896" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects in PDF files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-10192.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-65gh-pwxv-875j/GHSA-65gh-pwxv-875j.json b/advisories/unreviewed/2022/05/GHSA-65gh-pwxv-875j/GHSA-65gh-pwxv-875j.json index 701f71f3187..023ef554b24 100644 --- a/advisories/unreviewed/2022/05/GHSA-65gh-pwxv-875j/GHSA-65gh-pwxv-875j.json +++ b/advisories/unreviewed/2022/05/GHSA-65gh-pwxv-875j/GHSA-65gh-pwxv-875j.json @@ -7,12 +7,8 @@ "CVE-2019-20102" ], "details": "The attachment-uploading feature in Atlassian Confluence Server from version 6.14.0 through version 6.14.3, and version 6.15.0 before version 6.15.5 allows remote attackers to achieve stored cross-site- scripting (SXSS) via a malicious attachment with a modified `mimeType` parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-66xr-7v4j-5cxx/GHSA-66xr-7v4j-5cxx.json b/advisories/unreviewed/2022/05/GHSA-66xr-7v4j-5cxx/GHSA-66xr-7v4j-5cxx.json index a052396c46e..dfc1d2a3175 100644 --- a/advisories/unreviewed/2022/05/GHSA-66xr-7v4j-5cxx/GHSA-66xr-7v4j-5cxx.json +++ b/advisories/unreviewed/2022/05/GHSA-66xr-7v4j-5cxx/GHSA-66xr-7v4j-5cxx.json @@ -7,12 +7,8 @@ "CVE-2019-16652" ], "details": "The BPM component in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote authenticated users to execute arbitrary commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-67ph-m43p-rm6c/GHSA-67ph-m43p-rm6c.json b/advisories/unreviewed/2022/05/GHSA-67ph-m43p-rm6c/GHSA-67ph-m43p-rm6c.json index 7b7c6f28cba..d35870468f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-67ph-m43p-rm6c/GHSA-67ph-m43p-rm6c.json +++ b/advisories/unreviewed/2022/05/GHSA-67ph-m43p-rm6c/GHSA-67ph-m43p-rm6c.json @@ -7,12 +7,8 @@ "CVE-2019-4286" ], "details": "IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authenticated user with physical access to the device. IBM X-Force ID: 160514.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-67x3-jch4-2mj6/GHSA-67x3-jch4-2mj6.json b/advisories/unreviewed/2022/05/GHSA-67x3-jch4-2mj6/GHSA-67x3-jch4-2mj6.json index a8f530e9c0c..b0d9d1e9e12 100644 --- a/advisories/unreviewed/2022/05/GHSA-67x3-jch4-2mj6/GHSA-67x3-jch4-2mj6.json +++ b/advisories/unreviewed/2022/05/GHSA-67x3-jch4-2mj6/GHSA-67x3-jch4-2mj6.json @@ -7,12 +7,8 @@ "CVE-2020-10891" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the Save command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9831.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-68c8-f34g-7h7x/GHSA-68c8-f34g-7h7x.json b/advisories/unreviewed/2022/05/GHSA-68c8-f34g-7h7x/GHSA-68c8-f34g-7h7x.json index 3b2b4a865ac..4a3cac4c7d2 100644 --- a/advisories/unreviewed/2022/05/GHSA-68c8-f34g-7h7x/GHSA-68c8-f34g-7h7x.json +++ b/advisories/unreviewed/2022/05/GHSA-68c8-f34g-7h7x/GHSA-68c8-f34g-7h7x.json @@ -7,12 +7,8 @@ "CVE-2020-12129" ], "details": "The AirDisk Pro app 5.5.3 for iOS allows XSS via the createFolder parameter of the Create Folder function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-68wc-vrrp-wp22/GHSA-68wc-vrrp-wp22.json b/advisories/unreviewed/2022/05/GHSA-68wc-vrrp-wp22/GHSA-68wc-vrrp-wp22.json index 1942488fe1c..82443fb4ad1 100644 --- a/advisories/unreviewed/2022/05/GHSA-68wc-vrrp-wp22/GHSA-68wc-vrrp-wp22.json +++ b/advisories/unreviewed/2022/05/GHSA-68wc-vrrp-wp22/GHSA-68wc-vrrp-wp22.json @@ -7,12 +7,8 @@ "CVE-2017-18724" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6c5r-8f2r-w79f/GHSA-6c5r-8f2r-w79f.json b/advisories/unreviewed/2022/05/GHSA-6c5r-8f2r-w79f/GHSA-6c5r-8f2r-w79f.json index be9c0728ee2..9ba39f1d19e 100644 --- a/advisories/unreviewed/2022/05/GHSA-6c5r-8f2r-w79f/GHSA-6c5r-8f2r-w79f.json +++ b/advisories/unreviewed/2022/05/GHSA-6c5r-8f2r-w79f/GHSA-6c5r-8f2r-w79f.json @@ -7,12 +7,8 @@ "CVE-2020-5877" ], "details": "On BIG-IP 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, malformed input to the DATAGRAM::tcp iRules command within a FLOW_INIT event may lead to a denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6c7f-78gq-3732/GHSA-6c7f-78gq-3732.json b/advisories/unreviewed/2022/05/GHSA-6c7f-78gq-3732/GHSA-6c7f-78gq-3732.json index e2a3379fbbb..88de55a1966 100644 --- a/advisories/unreviewed/2022/05/GHSA-6c7f-78gq-3732/GHSA-6c7f-78gq-3732.json +++ b/advisories/unreviewed/2022/05/GHSA-6c7f-78gq-3732/GHSA-6c7f-78gq-3732.json @@ -7,12 +7,8 @@ "CVE-2017-18722" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6crj-vqv7-qq9r/GHSA-6crj-vqv7-qq9r.json b/advisories/unreviewed/2022/05/GHSA-6crj-vqv7-qq9r/GHSA-6crj-vqv7-qq9r.json index 95c88bc1bc5..9f73ddb8d4a 100644 --- a/advisories/unreviewed/2022/05/GHSA-6crj-vqv7-qq9r/GHSA-6crj-vqv7-qq9r.json +++ b/advisories/unreviewed/2022/05/GHSA-6crj-vqv7-qq9r/GHSA-6crj-vqv7-qq9r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6gff-w82c-xw8j/GHSA-6gff-w82c-xw8j.json b/advisories/unreviewed/2022/05/GHSA-6gff-w82c-xw8j/GHSA-6gff-w82c-xw8j.json index c5c98d09e13..44a0a68586d 100644 --- a/advisories/unreviewed/2022/05/GHSA-6gff-w82c-xw8j/GHSA-6gff-w82c-xw8j.json +++ b/advisories/unreviewed/2022/05/GHSA-6gff-w82c-xw8j/GHSA-6gff-w82c-xw8j.json @@ -7,12 +7,8 @@ "CVE-2018-21102" ], "details": "NETGEAR ReadyNAS devices before 6.9.3 are affected by CSRF.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6jfq-rx6r-mvh3/GHSA-6jfq-rx6r-mvh3.json b/advisories/unreviewed/2022/05/GHSA-6jfq-rx6r-mvh3/GHSA-6jfq-rx6r-mvh3.json index ac1ed18544a..4e2273529f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-6jfq-rx6r-mvh3/GHSA-6jfq-rx6r-mvh3.json +++ b/advisories/unreviewed/2022/05/GHSA-6jfq-rx6r-mvh3/GHSA-6jfq-rx6r-mvh3.json @@ -7,12 +7,8 @@ "CVE-2018-21216" ], "details": "Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, and R6100 before 1.0.1.20.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6q2w-mf9r-hrph/GHSA-6q2w-mf9r-hrph.json b/advisories/unreviewed/2022/05/GHSA-6q2w-mf9r-hrph/GHSA-6q2w-mf9r-hrph.json index 8c6fc03d453..7ac13a1ff00 100644 --- a/advisories/unreviewed/2022/05/GHSA-6q2w-mf9r-hrph/GHSA-6q2w-mf9r-hrph.json +++ b/advisories/unreviewed/2022/05/GHSA-6q2w-mf9r-hrph/GHSA-6q2w-mf9r-hrph.json @@ -7,12 +7,8 @@ "CVE-2018-21187" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 before 1.0.1.30, R7500 before 1.0.0.122, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6q7r-xj8w-7p6h/GHSA-6q7r-xj8w-7p6h.json b/advisories/unreviewed/2022/05/GHSA-6q7r-xj8w-7p6h/GHSA-6q7r-xj8w-7p6h.json index f2c31d56f2e..d411269a45d 100644 --- a/advisories/unreviewed/2022/05/GHSA-6q7r-xj8w-7p6h/GHSA-6q7r-xj8w-7p6h.json +++ b/advisories/unreviewed/2022/05/GHSA-6q7r-xj8w-7p6h/GHSA-6q7r-xj8w-7p6h.json @@ -7,12 +7,8 @@ "CVE-2020-12071" ], "details": "Anchor 0.12.7 allows admins to cause XSS via crafted post content.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6rg5-hf9j-26mf/GHSA-6rg5-hf9j-26mf.json b/advisories/unreviewed/2022/05/GHSA-6rg5-hf9j-26mf/GHSA-6rg5-hf9j-26mf.json index d4909f6af73..1e2cd0f3f7b 100644 --- a/advisories/unreviewed/2022/05/GHSA-6rg5-hf9j-26mf/GHSA-6rg5-hf9j-26mf.json +++ b/advisories/unreviewed/2022/05/GHSA-6rg5-hf9j-26mf/GHSA-6rg5-hf9j-26mf.json @@ -7,12 +7,8 @@ "CVE-2018-21135" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6700 before 1.0.1.48, R7500 before 1.0.0.124, R7800 before 1.0.2.58, R8900 before 1.0.4.2, R9000 before 1.0.4.2, WNDR3700v4 before 1.0.2.102, WNDR4300v1 before 1.0.2.104, WNDR4300v2 before 1.0.0.56, WNDR4500v3 before 1.0.0.56, and WNR2000v5-R2000 before 1.0.0.68.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6rw3-mqgm-394c/GHSA-6rw3-mqgm-394c.json b/advisories/unreviewed/2022/05/GHSA-6rw3-mqgm-394c/GHSA-6rw3-mqgm-394c.json index 241b88591b0..a093832bbf6 100644 --- a/advisories/unreviewed/2022/05/GHSA-6rw3-mqgm-394c/GHSA-6rw3-mqgm-394c.json +++ b/advisories/unreviewed/2022/05/GHSA-6rw3-mqgm-394c/GHSA-6rw3-mqgm-394c.json @@ -7,12 +7,8 @@ "CVE-2018-21197" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 before 1.0.1.34, R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7500v2 before 1.0.3.26, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6vcx-5chv-mvq3/GHSA-6vcx-5chv-mvq3.json b/advisories/unreviewed/2022/05/GHSA-6vcx-5chv-mvq3/GHSA-6vcx-5chv-mvq3.json index f3ebed456ff..57c62e601b0 100644 --- a/advisories/unreviewed/2022/05/GHSA-6vcx-5chv-mvq3/GHSA-6vcx-5chv-mvq3.json +++ b/advisories/unreviewed/2022/05/GHSA-6vcx-5chv-mvq3/GHSA-6vcx-5chv-mvq3.json @@ -7,12 +7,8 @@ "CVE-2020-7131" ], "details": "This document describes a security vulnerability in Blade Maintenance Entity, Integrated Maintenance Entity and Maintenance Entity products. All J/H-series NonStop systems have a security vulnerability associated with an open UDP port 17185 on the Maintenance LAN which could result in information disclosure, denial-of-service attacks or local memory corruption against the affected system and a complete control of the system may also be possible. This vulnerability exists only if one gains access to the Maintenance LAN to which Blade Maintenance Entity, Integrated Maintenance Entity or Maintenance Entity product is connected. **Workaround:** Block the UDP port 17185(In the Maintenance LAN Network Switch/Firewall). Fix: Install following SPRs, which are already available: * T1805A01^AAI (Integrated Maintenance Entity) * T4805A01^AAZ (Blade Maintenance Entity). These SPRs are also usable with the following RVUs: * J06.19.00 ? J06.23.01. No fix planned for the following RVUs: J06.04.00 ? J06.18.01. No fix planned for H-Series NonStop systems. No fix planned for the product T2805 (Maintenance Entity).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7375-x2f6-gp2r/GHSA-7375-x2f6-gp2r.json b/advisories/unreviewed/2022/05/GHSA-7375-x2f6-gp2r/GHSA-7375-x2f6-gp2r.json index 312331c26f8..9ec15418020 100644 --- a/advisories/unreviewed/2022/05/GHSA-7375-x2f6-gp2r/GHSA-7375-x2f6-gp2r.json +++ b/advisories/unreviewed/2022/05/GHSA-7375-x2f6-gp2r/GHSA-7375-x2f6-gp2r.json @@ -7,12 +7,8 @@ "CVE-2019-4288" ], "details": "IBM Maximo Anywhere 7.6.2.0, 7.6.2.1, 7.6.3.0, and 7.6.3.1 could disclose highly senstiive user information to an authenticated user with physical access to the device. IBM X-Force ID: 160631.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7397-jpw5-q274/GHSA-7397-jpw5-q274.json b/advisories/unreviewed/2022/05/GHSA-7397-jpw5-q274/GHSA-7397-jpw5-q274.json index f133f2a1f5c..3373de2060f 100644 --- a/advisories/unreviewed/2022/05/GHSA-7397-jpw5-q274/GHSA-7397-jpw5-q274.json +++ b/advisories/unreviewed/2022/05/GHSA-7397-jpw5-q274/GHSA-7397-jpw5-q274.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-74mh-xx7q-wqfq/GHSA-74mh-xx7q-wqfq.json b/advisories/unreviewed/2022/05/GHSA-74mh-xx7q-wqfq/GHSA-74mh-xx7q-wqfq.json index 84cea1f7f00..3319eb3688f 100644 --- a/advisories/unreviewed/2022/05/GHSA-74mh-xx7q-wqfq/GHSA-74mh-xx7q-wqfq.json +++ b/advisories/unreviewed/2022/05/GHSA-74mh-xx7q-wqfq/GHSA-74mh-xx7q-wqfq.json @@ -7,12 +7,8 @@ "CVE-2020-5567" ], "details": "Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in Application Menu.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-74wf-cr9v-5294/GHSA-74wf-cr9v-5294.json b/advisories/unreviewed/2022/05/GHSA-74wf-cr9v-5294/GHSA-74wf-cr9v-5294.json index 2bd110d4e38..b7072d6d2fd 100644 --- a/advisories/unreviewed/2022/05/GHSA-74wf-cr9v-5294/GHSA-74wf-cr9v-5294.json +++ b/advisories/unreviewed/2022/05/GHSA-74wf-cr9v-5294/GHSA-74wf-cr9v-5294.json @@ -7,12 +7,8 @@ "CVE-2020-7487" ], "details": "A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists which could allow the attacker to execute malicious code on the Modicon M218, M241, M251, and M258 controllers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-75jf-p7fv-p8r2/GHSA-75jf-p7fv-p8r2.json b/advisories/unreviewed/2022/05/GHSA-75jf-p7fv-p8r2/GHSA-75jf-p7fv-p8r2.json index d9ccc1d18ac..8e6724081e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-75jf-p7fv-p8r2/GHSA-75jf-p7fv-p8r2.json +++ b/advisories/unreviewed/2022/05/GHSA-75jf-p7fv-p8r2/GHSA-75jf-p7fv-p8r2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-75r2-4c5g-c72f/GHSA-75r2-4c5g-c72f.json b/advisories/unreviewed/2022/05/GHSA-75r2-4c5g-c72f/GHSA-75r2-4c5g-c72f.json index f6b84bc7aab..4a3fe74c299 100644 --- a/advisories/unreviewed/2022/05/GHSA-75r2-4c5g-c72f/GHSA-75r2-4c5g-c72f.json +++ b/advisories/unreviewed/2022/05/GHSA-75r2-4c5g-c72f/GHSA-75r2-4c5g-c72f.json @@ -7,12 +7,8 @@ "CVE-2017-18857" ], "details": "The NETGEAR Insight application before 2.42 for Android and iOS is affected by password mismanagement.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-768g-7rwq-8hw9/GHSA-768g-7rwq-8hw9.json b/advisories/unreviewed/2022/05/GHSA-768g-7rwq-8hw9/GHSA-768g-7rwq-8hw9.json index 8c31f6ec777..622dd2a140e 100644 --- a/advisories/unreviewed/2022/05/GHSA-768g-7rwq-8hw9/GHSA-768g-7rwq-8hw9.json +++ b/advisories/unreviewed/2022/05/GHSA-768g-7rwq-8hw9/GHSA-768g-7rwq-8hw9.json @@ -7,12 +7,8 @@ "CVE-2020-12120" ], "details": "The Correos Express addon for PrestaShop 1.6 through 1.7 allows remote attackers to obtain sensitive information, such as a service's owner password that can be used to modify orders via SOAP. Attackers can also retrieve information about orders or buyers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7984-49mg-7x37/GHSA-7984-49mg-7x37.json b/advisories/unreviewed/2022/05/GHSA-7984-49mg-7x37/GHSA-7984-49mg-7x37.json index 87fc76bb79b..ea644648b03 100644 --- a/advisories/unreviewed/2022/05/GHSA-7984-49mg-7x37/GHSA-7984-49mg-7x37.json +++ b/advisories/unreviewed/2022/05/GHSA-7984-49mg-7x37/GHSA-7984-49mg-7x37.json @@ -7,12 +7,8 @@ "CVE-2017-18858" ], "details": "Certain NETGEAR devices are affected by command execution. This affects M4200-10MG-POE+ 12.0.2.11 and earlier, M4300-28G 12.0.2.11 and earlier, M4300-52G 12.0.2.11 and earlier, M4300-28G-POE+ 12.0.2.11 and earlier, M4300-52G-POE+ 12.0.2.11 and earlier, M4300-8X8F 12.0.2.11 and earlier, M4300-12X12F 12.0.2.11 and earlier, M4300-24X24F 12.0.2.11 and earlier, M4300-24X 12.0.2.11 and earlier, and M4300-48X 12.0.2.11 and earlier.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7cv3-8r9m-fwcq/GHSA-7cv3-8r9m-fwcq.json b/advisories/unreviewed/2022/05/GHSA-7cv3-8r9m-fwcq/GHSA-7cv3-8r9m-fwcq.json index a549a9435a0..f425cad12e6 100644 --- a/advisories/unreviewed/2022/05/GHSA-7cv3-8r9m-fwcq/GHSA-7cv3-8r9m-fwcq.json +++ b/advisories/unreviewed/2022/05/GHSA-7cv3-8r9m-fwcq/GHSA-7cv3-8r9m-fwcq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -47,9 +45,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7h87-g2vc-3vfv/GHSA-7h87-g2vc-3vfv.json b/advisories/unreviewed/2022/05/GHSA-7h87-g2vc-3vfv/GHSA-7h87-g2vc-3vfv.json index cf6c76789d6..23f1d090fac 100644 --- a/advisories/unreviewed/2022/05/GHSA-7h87-g2vc-3vfv/GHSA-7h87-g2vc-3vfv.json +++ b/advisories/unreviewed/2022/05/GHSA-7h87-g2vc-3vfv/GHSA-7h87-g2vc-3vfv.json @@ -7,12 +7,8 @@ "CVE-2018-21183" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, and WNDR4300 before 1.0.2.94.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7hrr-hhcx-cw5q/GHSA-7hrr-hhcx-cw5q.json b/advisories/unreviewed/2022/05/GHSA-7hrr-hhcx-cw5q/GHSA-7hrr-hhcx-cw5q.json index d7a606d3651..a3e54b4327d 100644 --- a/advisories/unreviewed/2022/05/GHSA-7hrr-hhcx-cw5q/GHSA-7hrr-hhcx-cw5q.json +++ b/advisories/unreviewed/2022/05/GHSA-7hrr-hhcx-cw5q/GHSA-7hrr-hhcx-cw5q.json @@ -7,12 +7,8 @@ "CVE-2020-10876" ], "details": "The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) does not correctly implement its timeout on the four-digit verification code that is required for resetting passwords, nor does it properly restrict excessive verification attempts. This allows an attacker to brute force the four-digit verification code in order to bypass email verification and change the password of a victim account.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7j94-4wqv-jq54/GHSA-7j94-4wqv-jq54.json b/advisories/unreviewed/2022/05/GHSA-7j94-4wqv-jq54/GHSA-7j94-4wqv-jq54.json index eafe4d691f2..1fa2404f642 100644 --- a/advisories/unreviewed/2022/05/GHSA-7j94-4wqv-jq54/GHSA-7j94-4wqv-jq54.json +++ b/advisories/unreviewed/2022/05/GHSA-7j94-4wqv-jq54/GHSA-7j94-4wqv-jq54.json @@ -7,12 +7,8 @@ "CVE-2020-11943" ], "details": "An issue was discovered in Open-AudIT 3.2.2. There is Arbitrary file upload.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7mvq-97q9-r9gg/GHSA-7mvq-97q9-r9gg.json b/advisories/unreviewed/2022/05/GHSA-7mvq-97q9-r9gg/GHSA-7mvq-97q9-r9gg.json index e677ecaddab..8e9c78d5153 100644 --- a/advisories/unreviewed/2022/05/GHSA-7mvq-97q9-r9gg/GHSA-7mvq-97q9-r9gg.json +++ b/advisories/unreviewed/2022/05/GHSA-7mvq-97q9-r9gg/GHSA-7mvq-97q9-r9gg.json @@ -7,12 +7,8 @@ "CVE-2020-11821" ], "details": "In Rukovoditel 2.5.2, users' passwords and usernames are stored in a cookie with URL encoding, base64 encoding, and hashing. Thus, an attacker can easily apply brute force on them.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7p3q-2f2p-x732/GHSA-7p3q-2f2p-x732.json b/advisories/unreviewed/2022/05/GHSA-7p3q-2f2p-x732/GHSA-7p3q-2f2p-x732.json index 6fcce5be7ef..6ed278d9121 100644 --- a/advisories/unreviewed/2022/05/GHSA-7p3q-2f2p-x732/GHSA-7p3q-2f2p-x732.json +++ b/advisories/unreviewed/2022/05/GHSA-7p3q-2f2p-x732/GHSA-7p3q-2f2p-x732.json @@ -7,12 +7,8 @@ "CVE-2020-12429" ], "details": "Online Course Registration 2.0 has multiple SQL injections that would can lead to a complete database compromise and authentication bypass in the login pages: admin/change-password.php, admin/check_availability.php, admin/index.php, change-password.php, check_availability.php, includes/header.php, index.php, and pincode-verification.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7qq5-6rgx-mcp8/GHSA-7qq5-6rgx-mcp8.json b/advisories/unreviewed/2022/05/GHSA-7qq5-6rgx-mcp8/GHSA-7qq5-6rgx-mcp8.json index 885b81911d2..3e9bb298560 100644 --- a/advisories/unreviewed/2022/05/GHSA-7qq5-6rgx-mcp8/GHSA-7qq5-6rgx-mcp8.json +++ b/advisories/unreviewed/2022/05/GHSA-7qq5-6rgx-mcp8/GHSA-7qq5-6rgx-mcp8.json @@ -7,12 +7,8 @@ "CVE-2017-18740" ], "details": "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.61, D6000 before 1.0.0.61, D6100 before 1.0.0.55, D7800 before 1.0.1.28, R6100 before 1.0.1.16, R7500 before 1.0.0.112, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, R9000 before 1.0.2.40, WNDR3700v4 before 1.0.2.88, WNDR4300 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.58.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7vrg-mmxg-pgfj/GHSA-7vrg-mmxg-pgfj.json b/advisories/unreviewed/2022/05/GHSA-7vrg-mmxg-pgfj/GHSA-7vrg-mmxg-pgfj.json index 3feea7e3c21..c5796bcdec1 100644 --- a/advisories/unreviewed/2022/05/GHSA-7vrg-mmxg-pgfj/GHSA-7vrg-mmxg-pgfj.json +++ b/advisories/unreviewed/2022/05/GHSA-7vrg-mmxg-pgfj/GHSA-7vrg-mmxg-pgfj.json @@ -7,12 +7,8 @@ "CVE-2020-12277" ], "details": "GitLab 10.8 through 12.9 has a vulnerability that allows someone to mirror a repository even if the feature is not activated.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7wrc-pm26-9mgm/GHSA-7wrc-pm26-9mgm.json b/advisories/unreviewed/2022/05/GHSA-7wrc-pm26-9mgm/GHSA-7wrc-pm26-9mgm.json index 19fd9dca375..ed09fb428d2 100644 --- a/advisories/unreviewed/2022/05/GHSA-7wrc-pm26-9mgm/GHSA-7wrc-pm26-9mgm.json +++ b/advisories/unreviewed/2022/05/GHSA-7wrc-pm26-9mgm/GHSA-7wrc-pm26-9mgm.json @@ -7,12 +7,8 @@ "CVE-2020-11674" ], "details": "Cerner medico 26.00 allows variable reuse, possibly causing data corruption.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7wwj-3g4q-v7rm/GHSA-7wwj-3g4q-v7rm.json b/advisories/unreviewed/2022/05/GHSA-7wwj-3g4q-v7rm/GHSA-7wwj-3g4q-v7rm.json index a242f460056..c22b7f8dc67 100644 --- a/advisories/unreviewed/2022/05/GHSA-7wwj-3g4q-v7rm/GHSA-7wwj-3g4q-v7rm.json +++ b/advisories/unreviewed/2022/05/GHSA-7wwj-3g4q-v7rm/GHSA-7wwj-3g4q-v7rm.json @@ -7,12 +7,8 @@ "CVE-2017-18741" ], "details": "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6250 before 1.0.4.8, R6300v2 before 1.0.4.8, R6700 before 1.0.1.20, R7000 before 1.0.7.10, R7000P before 1.0.0.58, R6900P before 1.0.0.58, R7100LG before 1.0.0.32, R7900 before 1.0.1.14, R8000 before 1.0.3.22, and R8500 before 1.0.2.94.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-82gh-fr9f-867h/GHSA-82gh-fr9f-867h.json b/advisories/unreviewed/2022/05/GHSA-82gh-fr9f-867h/GHSA-82gh-fr9f-867h.json index a2b6f69f58e..e192df7b7de 100644 --- a/advisories/unreviewed/2022/05/GHSA-82gh-fr9f-867h/GHSA-82gh-fr9f-867h.json +++ b/advisories/unreviewed/2022/05/GHSA-82gh-fr9f-867h/GHSA-82gh-fr9f-867h.json @@ -7,12 +7,8 @@ "CVE-2020-11945" ], "details": "An issue was discovered in Squid before 5.0.2. A remote attacker can replay a sniffed Digest Authentication nonce to gain access to resources that are otherwise forbidden. This occurs because the attacker can overflow the nonce reference counter (a short integer). Remote code execution may occur if the pooled token credentials are freed (instead of replayed as valid credentials).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-836h-456r-hxj5/GHSA-836h-456r-hxj5.json b/advisories/unreviewed/2022/05/GHSA-836h-456r-hxj5/GHSA-836h-456r-hxj5.json index fff58915fa6..bcc4832dc7f 100644 --- a/advisories/unreviewed/2022/05/GHSA-836h-456r-hxj5/GHSA-836h-456r-hxj5.json +++ b/advisories/unreviewed/2022/05/GHSA-836h-456r-hxj5/GHSA-836h-456r-hxj5.json @@ -7,12 +7,8 @@ "CVE-2020-6865" ], "details": "ZTE SDN controller platform is impacted by an information leakage vulnerability. Due to the program's failure to optimize the response of failure to the request, the caller can directly view the internal error code location of the component. Attackers could exploit this vulnerability to obtain sensitive information. This affects: OSCP versions V16.19.10 and V16.19.20.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8395-cmcp-8vmc/GHSA-8395-cmcp-8vmc.json b/advisories/unreviewed/2022/05/GHSA-8395-cmcp-8vmc/GHSA-8395-cmcp-8vmc.json index b2e5a80db3a..4c73522375a 100644 --- a/advisories/unreviewed/2022/05/GHSA-8395-cmcp-8vmc/GHSA-8395-cmcp-8vmc.json +++ b/advisories/unreviewed/2022/05/GHSA-8395-cmcp-8vmc/GHSA-8395-cmcp-8vmc.json @@ -7,12 +7,8 @@ "CVE-2020-11505" ], "details": "An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 12.7.9, 12.8.x before 12.8.9, and 12.9.x before 12.9.3. A Workhorse bypass could lead to NuGet package and file disclosure (Exposure of Sensitive Information) via request smuggling.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-84fg-jgv9-jvfr/GHSA-84fg-jgv9-jvfr.json b/advisories/unreviewed/2022/05/GHSA-84fg-jgv9-jvfr/GHSA-84fg-jgv9-jvfr.json index c8659b8712d..4a1c34e444f 100644 --- a/advisories/unreviewed/2022/05/GHSA-84fg-jgv9-jvfr/GHSA-84fg-jgv9-jvfr.json +++ b/advisories/unreviewed/2022/05/GHSA-84fg-jgv9-jvfr/GHSA-84fg-jgv9-jvfr.json @@ -7,12 +7,8 @@ "CVE-2020-5874" ], "details": "On BIG-IP APM 15.0.0-15.0.1.2, 14.1.0-14.1.2.3, and 14.0.0-14.0.1, in certain circumstances, an attacker sending specifically crafted requests to a BIG-IP APM virtual server may cause a disruption of service provided by the Traffic Management Microkernel(TMM).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-84r5-244x-c9vp/GHSA-84r5-244x-c9vp.json b/advisories/unreviewed/2022/05/GHSA-84r5-244x-c9vp/GHSA-84r5-244x-c9vp.json index deaaa13b21b..1ce66e29157 100644 --- a/advisories/unreviewed/2022/05/GHSA-84r5-244x-c9vp/GHSA-84r5-244x-c9vp.json +++ b/advisories/unreviewed/2022/05/GHSA-84r5-244x-c9vp/GHSA-84r5-244x-c9vp.json @@ -7,12 +7,8 @@ "CVE-2020-10900" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of AcroForms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-10142.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-85qx-3cmc-hcq4/GHSA-85qx-3cmc-hcq4.json b/advisories/unreviewed/2022/05/GHSA-85qx-3cmc-hcq4/GHSA-85qx-3cmc-hcq4.json index edc3dd7719e..27972fd9576 100644 --- a/advisories/unreviewed/2022/05/GHSA-85qx-3cmc-hcq4/GHSA-85qx-3cmc-hcq4.json +++ b/advisories/unreviewed/2022/05/GHSA-85qx-3cmc-hcq4/GHSA-85qx-3cmc-hcq4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-86m2-v736-85f5/GHSA-86m2-v736-85f5.json b/advisories/unreviewed/2022/05/GHSA-86m2-v736-85f5/GHSA-86m2-v736-85f5.json index 117a1e4fb65..421bc35f32e 100644 --- a/advisories/unreviewed/2022/05/GHSA-86m2-v736-85f5/GHSA-86m2-v736-85f5.json +++ b/advisories/unreviewed/2022/05/GHSA-86m2-v736-85f5/GHSA-86m2-v736-85f5.json @@ -7,12 +7,8 @@ "CVE-2020-8485" ], "details": "Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-86x9-9m6v-vrvc/GHSA-86x9-9m6v-vrvc.json b/advisories/unreviewed/2022/05/GHSA-86x9-9m6v-vrvc/GHSA-86x9-9m6v-vrvc.json index 53b3da7ce97..34cda7540c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-86x9-9m6v-vrvc/GHSA-86x9-9m6v-vrvc.json +++ b/advisories/unreviewed/2022/05/GHSA-86x9-9m6v-vrvc/GHSA-86x9-9m6v-vrvc.json @@ -7,12 +7,8 @@ "CVE-2018-21158" ], "details": "NETGEAR R7800 devices before 1.0.2.46 are affected by incorrect configuration of security settings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-872h-q5p9-28x7/GHSA-872h-q5p9-28x7.json b/advisories/unreviewed/2022/05/GHSA-872h-q5p9-28x7/GHSA-872h-q5p9-28x7.json index 03db434999a..b54a6194c7a 100644 --- a/advisories/unreviewed/2022/05/GHSA-872h-q5p9-28x7/GHSA-872h-q5p9-28x7.json +++ b/advisories/unreviewed/2022/05/GHSA-872h-q5p9-28x7/GHSA-872h-q5p9-28x7.json @@ -7,12 +7,8 @@ "CVE-2020-12111" ], "details": "Certain TP-Link devices allow Command Injection. This affects NC260 1.5.2 build 200304 and NC450 1.5.3 build 200304.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-87jj-5mq8-98pw/GHSA-87jj-5mq8-98pw.json b/advisories/unreviewed/2022/05/GHSA-87jj-5mq8-98pw/GHSA-87jj-5mq8-98pw.json index adba815a6e0..473da626a73 100644 --- a/advisories/unreviewed/2022/05/GHSA-87jj-5mq8-98pw/GHSA-87jj-5mq8-98pw.json +++ b/advisories/unreviewed/2022/05/GHSA-87jj-5mq8-98pw/GHSA-87jj-5mq8-98pw.json @@ -7,12 +7,8 @@ "CVE-2018-21139" ], "details": "Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before 1.0.0.58, D6200 before 1.1.00.30, D6220 before 1.0.0.46, D6400 before 1.0.0.82, D7000 before 1.0.1.68, D7000v2 before 1.0.0.51, D7800 before 1.0.1.42, D8500 before 1.0.3.42, DC112A before 1.0.0.40, DGN2200Bv4 before 1.0.0.102, DGN2200v4 before 1.0.0.102, JNR1010v2 before 1.1.0.54, JR6150 before 1.0.1.18, JWNR2010v5 before 1.1.0.54, PR2000 before 1.0.0.24, R6020 before 1.0.0.34, R6050 before 1.0.1.18, R6080 before 1.0.0.34, R6100 before 1.0.1.22, R6120 before 1.0.0.42, R6220 before 1.1.0.68, R6250 before 1.0.4.30, R6300v2 before 1.0.4.32, R6400 before 1.0.1.44, R6400v2 before 1.0.2.60, R6700 before 1.0.1.48, R6700v2 before 1.2.0.24, R6800 before 1.2.0.24, R6900 before 1.0.1.48, R6900P before 1.3.1.44, R6900v2 before 1.2.0.24, R7000 before 1.0.9.34, R7000P before 1.3.1.44, R7100LG before 1.0.0.48, R7300 before 1.0.0.68, R7500 before 1.0.0.124, R7500v2 before 1.0.3.38, R7900 before 1.0.2.16, R7900P before 1.4.1.24, R8000 before 1.0.4.18, R8000P before 1.4.1.24, R8300 before 1.0.2.122, R8500 before 1.0.2.122, WN3000RP before 1.0.0.68, WN3000RPv2 before 1.0.0.68, WNDR3400v3 before 1.0.1.18, WNDR3700v4 before 1.0.2.102, WNDR3700v5 before 1.1.0.54, WNDR4300v1 before 1.0.2.104, WNDR4300v2 before 1.0.0.56, WNDR4500v3 before 1.0.0.56, WNR1000v4 before 1.1.0.54, WNR2020 before 1.1.0.54, WNR2050 before 1.1.0.54, and WNR3500Lv2 before 1.2.0.54.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8c76-p8h5-3vfv/GHSA-8c76-p8h5-3vfv.json b/advisories/unreviewed/2022/05/GHSA-8c76-p8h5-3vfv/GHSA-8c76-p8h5-3vfv.json index 1f4fa241719..3232c165cb1 100644 --- a/advisories/unreviewed/2022/05/GHSA-8c76-p8h5-3vfv/GHSA-8c76-p8h5-3vfv.json +++ b/advisories/unreviewed/2022/05/GHSA-8c76-p8h5-3vfv/GHSA-8c76-p8h5-3vfv.json @@ -7,12 +7,8 @@ "CVE-2020-10910" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the RotatePage command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9943.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8f85-f6pr-47r8/GHSA-8f85-f6pr-47r8.json b/advisories/unreviewed/2022/05/GHSA-8f85-f6pr-47r8/GHSA-8f85-f6pr-47r8.json index 11d1c46da10..8f84a6908f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-8f85-f6pr-47r8/GHSA-8f85-f6pr-47r8.json +++ b/advisories/unreviewed/2022/05/GHSA-8f85-f6pr-47r8/GHSA-8f85-f6pr-47r8.json @@ -7,12 +7,8 @@ "CVE-2020-11693" ], "details": "JetBrains YouTrack before 2020.1.659 was vulnerable to DoS that could be caused by attaching a malformed TIFF file to an issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8ff4-8wp5-75cm/GHSA-8ff4-8wp5-75cm.json b/advisories/unreviewed/2022/05/GHSA-8ff4-8wp5-75cm/GHSA-8ff4-8wp5-75cm.json index 7f6bda0eab3..4d8b1f1063d 100644 --- a/advisories/unreviewed/2022/05/GHSA-8ff4-8wp5-75cm/GHSA-8ff4-8wp5-75cm.json +++ b/advisories/unreviewed/2022/05/GHSA-8ff4-8wp5-75cm/GHSA-8ff4-8wp5-75cm.json @@ -7,12 +7,8 @@ "CVE-2017-18701" ], "details": "Certain NETGEAR devices are affected by reflected XSS. This affects R6700 before 1.0.1.36 and R6900 before 1.0.1.34.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8fr8-685h-48cr/GHSA-8fr8-685h-48cr.json b/advisories/unreviewed/2022/05/GHSA-8fr8-685h-48cr/GHSA-8fr8-685h-48cr.json index 37b1dc60e64..96cd3f4d0c2 100644 --- a/advisories/unreviewed/2022/05/GHSA-8fr8-685h-48cr/GHSA-8fr8-685h-48cr.json +++ b/advisories/unreviewed/2022/05/GHSA-8fr8-685h-48cr/GHSA-8fr8-685h-48cr.json @@ -7,12 +7,8 @@ "CVE-2020-10647" ], "details": "Wind River VxWorks tftp client library, as distributed in VxWorks 6.9 through 7 SR0630, has a double free", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8h5c-9h59-x8hw/GHSA-8h5c-9h59-x8hw.json b/advisories/unreviewed/2022/05/GHSA-8h5c-9h59-x8hw/GHSA-8h5c-9h59-x8hw.json index 2d60a36f4a3..f5b39770c5d 100644 --- a/advisories/unreviewed/2022/05/GHSA-8h5c-9h59-x8hw/GHSA-8h5c-9h59-x8hw.json +++ b/advisories/unreviewed/2022/05/GHSA-8h5c-9h59-x8hw/GHSA-8h5c-9h59-x8hw.json @@ -7,12 +7,8 @@ "CVE-2020-10915" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.4587. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HandshakeResult method. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-10401.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8hqg-3q4j-8px9/GHSA-8hqg-3q4j-8px9.json b/advisories/unreviewed/2022/05/GHSA-8hqg-3q4j-8px9/GHSA-8hqg-3q4j-8px9.json index 9529bb6e48e..e7281b80c3e 100644 --- a/advisories/unreviewed/2022/05/GHSA-8hqg-3q4j-8px9/GHSA-8hqg-3q4j-8px9.json +++ b/advisories/unreviewed/2022/05/GHSA-8hqg-3q4j-8px9/GHSA-8hqg-3q4j-8px9.json @@ -7,12 +7,8 @@ "CVE-2019-15876" ], "details": "In FreeBSD 12.1-STABLE before r356089, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r356090, and 11.3-RELEASE before 11.3-RELEASE-p7, driver specific ioctl command handlers in the oce network driver failed to check whether the caller has sufficient privileges allowing unprivileged users to send passthrough commands to the device firmware.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8hqm-3r2c-qg9c/GHSA-8hqm-3r2c-qg9c.json b/advisories/unreviewed/2022/05/GHSA-8hqm-3r2c-qg9c/GHSA-8hqm-3r2c-qg9c.json index c07461c0aee..c34fde707e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-8hqm-3r2c-qg9c/GHSA-8hqm-3r2c-qg9c.json +++ b/advisories/unreviewed/2022/05/GHSA-8hqm-3r2c-qg9c/GHSA-8hqm-3r2c-qg9c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8jrh-qv9m-cq2j/GHSA-8jrh-qv9m-cq2j.json b/advisories/unreviewed/2022/05/GHSA-8jrh-qv9m-cq2j/GHSA-8jrh-qv9m-cq2j.json index 96d70298b21..ae8a22e3163 100644 --- a/advisories/unreviewed/2022/05/GHSA-8jrh-qv9m-cq2j/GHSA-8jrh-qv9m-cq2j.json +++ b/advisories/unreviewed/2022/05/GHSA-8jrh-qv9m-cq2j/GHSA-8jrh-qv9m-cq2j.json @@ -7,12 +7,8 @@ "CVE-2018-21154" ], "details": "Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, DM200 before 1.0.0.50, R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7500v2 before 1.0.3.26, and R7800 before 1.0.2.42.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8mph-5rcv-88gw/GHSA-8mph-5rcv-88gw.json b/advisories/unreviewed/2022/05/GHSA-8mph-5rcv-88gw/GHSA-8mph-5rcv-88gw.json index adb8c7c4c36..66e51762282 100644 --- a/advisories/unreviewed/2022/05/GHSA-8mph-5rcv-88gw/GHSA-8mph-5rcv-88gw.json +++ b/advisories/unreviewed/2022/05/GHSA-8mph-5rcv-88gw/GHSA-8mph-5rcv-88gw.json @@ -7,12 +7,8 @@ "CVE-2020-10889" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the DuplicatePages command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9828.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8mqc-2jhr-7v56/GHSA-8mqc-2jhr-7v56.json b/advisories/unreviewed/2022/05/GHSA-8mqc-2jhr-7v56/GHSA-8mqc-2jhr-7v56.json index e4dfd4c98ea..a3047881919 100644 --- a/advisories/unreviewed/2022/05/GHSA-8mqc-2jhr-7v56/GHSA-8mqc-2jhr-7v56.json +++ b/advisories/unreviewed/2022/05/GHSA-8mqc-2jhr-7v56/GHSA-8mqc-2jhr-7v56.json @@ -7,12 +7,8 @@ "CVE-2020-8472" ], "details": "Insufficient folder permissions used by system functions in ABB System 800xA products OPCServer for AC800M (versions 6.0 and earlier) and Control Builder M Professional, MMSServer for AC800M, Base Software for SoftControl (version 6.1 and earlier) allow low privileged users to read, modify, add and delete system and application files. An authenticated attacker who successfully exploited the vulnerabilities could escalate his/her privileges, cause system functions to stop and to corrupt user applications.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8q4v-jg8h-7hjg/GHSA-8q4v-jg8h-7hjg.json b/advisories/unreviewed/2022/05/GHSA-8q4v-jg8h-7hjg/GHSA-8q4v-jg8h-7hjg.json index 16907b632f0..d4533d5ace8 100644 --- a/advisories/unreviewed/2022/05/GHSA-8q4v-jg8h-7hjg/GHSA-8q4v-jg8h-7hjg.json +++ b/advisories/unreviewed/2022/05/GHSA-8q4v-jg8h-7hjg/GHSA-8q4v-jg8h-7hjg.json @@ -7,12 +7,8 @@ "CVE-2020-12050" ], "details": "SQLiteODBC 0.9996, as packaged for certain Linux distributions as 0.9996-4, has a race condition leading to root privilege escalation because any user can replace a /tmp/sqliteodbc$$ file with new contents that cause loading of an arbitrary library.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8w7w-fq7p-rq7r/GHSA-8w7w-fq7p-rq7r.json b/advisories/unreviewed/2022/05/GHSA-8w7w-fq7p-rq7r/GHSA-8w7w-fq7p-rq7r.json index 26a87cdfe3d..e2ef6619868 100644 --- a/advisories/unreviewed/2022/05/GHSA-8w7w-fq7p-rq7r/GHSA-8w7w-fq7p-rq7r.json +++ b/advisories/unreviewed/2022/05/GHSA-8w7w-fq7p-rq7r/GHSA-8w7w-fq7p-rq7r.json @@ -7,12 +7,8 @@ "CVE-2019-19165" ], "details": "AxECM.cab(ActiveX Control) in Inogard Ebiz4u contains a vulnerability that could allow remote files to be downloaded and executed by setting arguments to the activeX method. Download of Code Without Integrity Check vulnerability in ActiveX control of Inogard Co,,LTD Ebiz4u ActiveX of Inogard Co,,LTD(AxECM.cab) allows ATTACKER to cause a file download to Windows user's folder and execute. This issue affects: Inogard Co,,LTD Ebiz4u ActiveX of Inogard Co,,LTD(AxECM.cab) version 1.0.5.0 and later versions on windows 7/8/10.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8wpx-98fc-5732/GHSA-8wpx-98fc-5732.json b/advisories/unreviewed/2022/05/GHSA-8wpx-98fc-5732/GHSA-8wpx-98fc-5732.json index 25ece8d4ff8..5b342c26a01 100644 --- a/advisories/unreviewed/2022/05/GHSA-8wpx-98fc-5732/GHSA-8wpx-98fc-5732.json +++ b/advisories/unreviewed/2022/05/GHSA-8wpx-98fc-5732/GHSA-8wpx-98fc-5732.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8x8c-53m7-7cx8/GHSA-8x8c-53m7-7cx8.json b/advisories/unreviewed/2022/05/GHSA-8x8c-53m7-7cx8/GHSA-8x8c-53m7-7cx8.json index c3065b5ce4a..c5bdb5d1709 100644 --- a/advisories/unreviewed/2022/05/GHSA-8x8c-53m7-7cx8/GHSA-8x8c-53m7-7cx8.json +++ b/advisories/unreviewed/2022/05/GHSA-8x8c-53m7-7cx8/GHSA-8x8c-53m7-7cx8.json @@ -7,12 +7,8 @@ "CVE-2020-11446" ], "details": "ESET Antivirus and Antispyware Module module 1553 through 1560 allows a user with limited access rights to create hard links in some ESET directories and then force the product to write through these links into files that would normally not be write-able by the user, thus achieving privilege escalation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8xr2-4c75-r39r/GHSA-8xr2-4c75-r39r.json b/advisories/unreviewed/2022/05/GHSA-8xr2-4c75-r39r/GHSA-8xr2-4c75-r39r.json index 2e96d7e2d69..debdcf1f69e 100644 --- a/advisories/unreviewed/2022/05/GHSA-8xr2-4c75-r39r/GHSA-8xr2-4c75-r39r.json +++ b/advisories/unreviewed/2022/05/GHSA-8xr2-4c75-r39r/GHSA-8xr2-4c75-r39r.json @@ -7,12 +7,8 @@ "CVE-2020-8775" ], "details": "Pega Platform before version 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the comment tags.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8xrh-xm7x-87v9/GHSA-8xrh-xm7x-87v9.json b/advisories/unreviewed/2022/05/GHSA-8xrh-xm7x-87v9/GHSA-8xrh-xm7x-87v9.json index c60698c48d2..ef991dcf17e 100644 --- a/advisories/unreviewed/2022/05/GHSA-8xrh-xm7x-87v9/GHSA-8xrh-xm7x-87v9.json +++ b/advisories/unreviewed/2022/05/GHSA-8xrh-xm7x-87v9/GHSA-8xrh-xm7x-87v9.json @@ -7,12 +7,8 @@ "CVE-2018-21184" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.57, D7800 before 1.0.1.28, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, and R9000 before 1.0.3.6.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9253-c6r3-526q/GHSA-9253-c6r3-526q.json b/advisories/unreviewed/2022/05/GHSA-9253-c6r3-526q/GHSA-9253-c6r3-526q.json index 379600394d3..6b0d303a165 100644 --- a/advisories/unreviewed/2022/05/GHSA-9253-c6r3-526q/GHSA-9253-c6r3-526q.json +++ b/advisories/unreviewed/2022/05/GHSA-9253-c6r3-526q/GHSA-9253-c6r3-526q.json @@ -7,12 +7,8 @@ "CVE-2019-20002" ], "details": "Formula Injection exists in the export feature in SolarWinds WebHelpDesk 12.7.1 via a value (provided by a low-privileged user in the Subject field of a help request form) that is mishandled in a TicketActions/view?tab=group TSV export by an admin user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-92qv-vvr2-8w3j/GHSA-92qv-vvr2-8w3j.json b/advisories/unreviewed/2022/05/GHSA-92qv-vvr2-8w3j/GHSA-92qv-vvr2-8w3j.json index 58476522722..9b79206a900 100644 --- a/advisories/unreviewed/2022/05/GHSA-92qv-vvr2-8w3j/GHSA-92qv-vvr2-8w3j.json +++ b/advisories/unreviewed/2022/05/GHSA-92qv-vvr2-8w3j/GHSA-92qv-vvr2-8w3j.json @@ -7,12 +7,8 @@ "CVE-2017-18861" ], "details": "Certain NETGEAR devices are affected by CSRF. This affects ReadyNAS Surveillance 1.4.3-15-x86 and earlier and ReadyNAS Surveillance 1.1.4-5-ARM and earlier.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-93h9-v8g8-jrg6/GHSA-93h9-v8g8-jrg6.json b/advisories/unreviewed/2022/05/GHSA-93h9-v8g8-jrg6/GHSA-93h9-v8g8-jrg6.json index 320b8dbf255..77a4a96d753 100644 --- a/advisories/unreviewed/2022/05/GHSA-93h9-v8g8-jrg6/GHSA-93h9-v8g8-jrg6.json +++ b/advisories/unreviewed/2022/05/GHSA-93h9-v8g8-jrg6/GHSA-93h9-v8g8-jrg6.json @@ -7,12 +7,8 @@ "CVE-2020-5872" ], "details": "On BIG-IP 14.1.0-14.1.2.3, 14.0.0-14.0.1, 13.1.0-13.1.3.1, and 12.1.0-12.1.4.1, when processing TLS traffic with hardware cryptographic acceleration enabled on platforms with Intel QAT hardware, the Traffic Management Microkernel (TMM) may stop responding and cause a failover event.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-944h-rj85-r36p/GHSA-944h-rj85-r36p.json b/advisories/unreviewed/2022/05/GHSA-944h-rj85-r36p/GHSA-944h-rj85-r36p.json index 90f51b740c6..0c1ac96754b 100644 --- a/advisories/unreviewed/2022/05/GHSA-944h-rj85-r36p/GHSA-944h-rj85-r36p.json +++ b/advisories/unreviewed/2022/05/GHSA-944h-rj85-r36p/GHSA-944h-rj85-r36p.json @@ -7,12 +7,8 @@ "CVE-2020-10899" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of XFA templates. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-10132.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-94vc-2hff-qr3q/GHSA-94vc-2hff-qr3q.json b/advisories/unreviewed/2022/05/GHSA-94vc-2hff-qr3q/GHSA-94vc-2hff-qr3q.json index cd1121fbea5..8725141bbdd 100644 --- a/advisories/unreviewed/2022/05/GHSA-94vc-2hff-qr3q/GHSA-94vc-2hff-qr3q.json +++ b/advisories/unreviewed/2022/05/GHSA-94vc-2hff-qr3q/GHSA-94vc-2hff-qr3q.json @@ -7,12 +7,8 @@ "CVE-2017-18704" ], "details": "Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D6220 before 1.0.0.32, D6400 before 1.0.0.60, D8500 before 1.0.3.29, R6250 before 1.0.4.16, R6300v2 before 1.0.4.18, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.36, R6900 before 1.0.1.34, R7000 before 1.0.9.14, R7000P before 1.3.0.8, R6900P before 1.3.0.8, R7100LG before 1.0.0.34, R7300DST before 1.0.0.56, R7900 before 1.0.1.26, R8000 before 1.0.4.4, R8500 before 1.0.2.106, R8300 before 1.0.2.106, and WNDR3400v3 before 1.0.1.16.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9584-r35w-wg7w/GHSA-9584-r35w-wg7w.json b/advisories/unreviewed/2022/05/GHSA-9584-r35w-wg7w/GHSA-9584-r35w-wg7w.json index 1ea4ceece76..801509f2624 100644 --- a/advisories/unreviewed/2022/05/GHSA-9584-r35w-wg7w/GHSA-9584-r35w-wg7w.json +++ b/advisories/unreviewed/2022/05/GHSA-9584-r35w-wg7w/GHSA-9584-r35w-wg7w.json @@ -7,12 +7,8 @@ "CVE-2020-10894" ], "details": "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in a PDF. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-10190.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-95hr-j7p7-26x4/GHSA-95hr-j7p7-26x4.json b/advisories/unreviewed/2022/05/GHSA-95hr-j7p7-26x4/GHSA-95hr-j7p7-26x4.json index 624a8c48c7e..b1c555f39c2 100644 --- a/advisories/unreviewed/2022/05/GHSA-95hr-j7p7-26x4/GHSA-95hr-j7p7-26x4.json +++ b/advisories/unreviewed/2022/05/GHSA-95hr-j7p7-26x4/GHSA-95hr-j7p7-26x4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-95hx-gchf-45jm/GHSA-95hx-gchf-45jm.json b/advisories/unreviewed/2022/05/GHSA-95hx-gchf-45jm/GHSA-95hx-gchf-45jm.json index 59ba606d913..fad768daadc 100644 --- a/advisories/unreviewed/2022/05/GHSA-95hx-gchf-45jm/GHSA-95hx-gchf-45jm.json +++ b/advisories/unreviewed/2022/05/GHSA-95hx-gchf-45jm/GHSA-95hx-gchf-45jm.json @@ -7,12 +7,8 @@ "CVE-2018-21202" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D7800 before 1.0.1.30, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.54, and WNDR4500v3 before 1.0.0.54.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9657-fg94-7m32/GHSA-9657-fg94-7m32.json b/advisories/unreviewed/2022/05/GHSA-9657-fg94-7m32/GHSA-9657-fg94-7m32.json index 0b8769e655d..ba14900026e 100644 --- a/advisories/unreviewed/2022/05/GHSA-9657-fg94-7m32/GHSA-9657-fg94-7m32.json +++ b/advisories/unreviewed/2022/05/GHSA-9657-fg94-7m32/GHSA-9657-fg94-7m32.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-96qr-vh8m-m23x/GHSA-96qr-vh8m-m23x.json b/advisories/unreviewed/2022/05/GHSA-96qr-vh8m-m23x/GHSA-96qr-vh8m-m23x.json index 4d59c023c17..2f9a0f8ae1d 100644 --- a/advisories/unreviewed/2022/05/GHSA-96qr-vh8m-m23x/GHSA-96qr-vh8m-m23x.json +++ b/advisories/unreviewed/2022/05/GHSA-96qr-vh8m-m23x/GHSA-96qr-vh8m-m23x.json @@ -7,12 +7,8 @@ "CVE-2020-5888" ], "details": "On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, BIG-IP Virtual Edition (VE) may expose a mechanism for adjacent network (layer 2) attackers to access local daemons and bypass port lockdown settings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-97p4-3737-c24r/GHSA-97p4-3737-c24r.json b/advisories/unreviewed/2022/05/GHSA-97p4-3737-c24r/GHSA-97p4-3737-c24r.json index 81fa2263be2..affecafce5c 100644 --- a/advisories/unreviewed/2022/05/GHSA-97p4-3737-c24r/GHSA-97p4-3737-c24r.json +++ b/advisories/unreviewed/2022/05/GHSA-97p4-3737-c24r/GHSA-97p4-3737-c24r.json @@ -7,12 +7,8 @@ "CVE-2020-12074" ], "details": "The users-customers-import-export-for-wp-woocommerce plugin before 1.3.9 for WordPress allows subscribers to import administrative accounts via CSV.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9868-qmp7-56c2/GHSA-9868-qmp7-56c2.json b/advisories/unreviewed/2022/05/GHSA-9868-qmp7-56c2/GHSA-9868-qmp7-56c2.json index 3fb158cfe6c..f324920a4ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-9868-qmp7-56c2/GHSA-9868-qmp7-56c2.json +++ b/advisories/unreviewed/2022/05/GHSA-9868-qmp7-56c2/GHSA-9868-qmp7-56c2.json @@ -7,12 +7,8 @@ "CVE-2017-18748" ], "details": "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX6200v2 before 1.0.1.44, R6100 before 1.0.1.12, R7500 before 1.0.0.108, R7500v2 before 1.0.3.10, R7800 before 1.0.2.28, R9000 before 1.0.2.30, WNDR4300v2 before 1.0.0.48, and WNDR4500v3 before 1.0.0.48.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-98h9-j45j-465x/GHSA-98h9-j45j-465x.json b/advisories/unreviewed/2022/05/GHSA-98h9-j45j-465x/GHSA-98h9-j45j-465x.json index ef699b02fe3..8a54dbf6885 100644 --- a/advisories/unreviewed/2022/05/GHSA-98h9-j45j-465x/GHSA-98h9-j45j-465x.json +++ b/advisories/unreviewed/2022/05/GHSA-98h9-j45j-465x/GHSA-98h9-j45j-465x.json @@ -7,12 +7,8 @@ "CVE-2018-21225" ], "details": "Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 before 1.0.3.39, R6700 before 1.0.1.30, R6700v2 before 1.2.0.16, R6800 before 1.2.0.16, R6900 before 1.0.1.30, R6900P before 1.2.0.22, R6900v2 before 1.2.0.16, R7000 before 1.0.9.12, R7000P before 1.2.0.22, R7500v2 before 1.0.3.20, R7800 before 1.0.2.44, R8300 before 1.0.2.106, R8500 before 1.0.2.106, and R9000 before 1.0.2.52.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9984-33rr-r65w/GHSA-9984-33rr-r65w.json b/advisories/unreviewed/2022/05/GHSA-9984-33rr-r65w/GHSA-9984-33rr-r65w.json index 4f419855b39..11bb3e0943d 100644 --- a/advisories/unreviewed/2022/05/GHSA-9984-33rr-r65w/GHSA-9984-33rr-r65w.json +++ b/advisories/unreviewed/2022/05/GHSA-9984-33rr-r65w/GHSA-9984-33rr-r65w.json @@ -7,12 +7,8 @@ "CVE-2018-21132" ], "details": "Certain NETGEAR devices are affected by authentication bypass. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-99v2-69vc-4ph6/GHSA-99v2-69vc-4ph6.json b/advisories/unreviewed/2022/05/GHSA-99v2-69vc-4ph6/GHSA-99v2-69vc-4ph6.json index 0789b7221b9..7d57e077efa 100644 --- a/advisories/unreviewed/2022/05/GHSA-99v2-69vc-4ph6/GHSA-99v2-69vc-4ph6.json +++ b/advisories/unreviewed/2022/05/GHSA-99v2-69vc-4ph6/GHSA-99v2-69vc-4ph6.json @@ -7,12 +7,8 @@ "CVE-2018-21107" ], "details": "NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9cjw-424w-5vjc/GHSA-9cjw-424w-5vjc.json b/advisories/unreviewed/2022/05/GHSA-9cjw-424w-5vjc/GHSA-9cjw-424w-5vjc.json index dae0b12a10a..23acbfb6472 100644 --- a/advisories/unreviewed/2022/05/GHSA-9cjw-424w-5vjc/GHSA-9cjw-424w-5vjc.json +++ b/advisories/unreviewed/2022/05/GHSA-9cjw-424w-5vjc/GHSA-9cjw-424w-5vjc.json @@ -7,12 +7,8 @@ "CVE-2020-5571" ], "details": "SHARP AQUOS series (AQUOS SH-M02 build number 01.00.05 and earlier, AQUOS SH-RM02 build number 01.00.04 and earlier, AQUOS mini SH-M03 build number 01.00.04 and earlier, AQUOS Keitai SH-N01 build number 01.00.01 and earlier, AQUOS L2 (UQ mobile/J:COM) build number 01.00.05 and earlier, AQUOS sense lite SH-M05 build number 03.00.04 and earlier, AQUOS sense (UQ mobile) build number 03.00.03 and earlier, AQUOS compact SH-M06 build number 02.00.02 and earlier, AQUOS sense plus SH-M07 build number 02.00.02 and earlier, AQUOS sense2 SH-M08 build number 02.00.05 and earlier, and AQUOS sense2 (UQ mobile) build number 02.00.06 and earlier) allow an attacker to obtain the sensitive information of the device via malicious applications installed on the device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9f7j-2669-24wh/GHSA-9f7j-2669-24wh.json b/advisories/unreviewed/2022/05/GHSA-9f7j-2669-24wh/GHSA-9f7j-2669-24wh.json index 9b124ef092e..285fca042d3 100644 --- a/advisories/unreviewed/2022/05/GHSA-9f7j-2669-24wh/GHSA-9f7j-2669-24wh.json +++ b/advisories/unreviewed/2022/05/GHSA-9f7j-2669-24wh/GHSA-9f7j-2669-24wh.json @@ -7,12 +7,8 @@ "CVE-2018-21156" ], "details": "Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects D6220 before 1.0.0.38, D6400 before 1.0.0.74, D7000v2 before 1.0.0.74, D8500 before 1.0.3.39, DGN2200v4 before 1.0.0.102, DGN2200Bv4 before 1.0.0.102, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70, EX6000 before 1.0.0.30, EX6100 before 1.0.2.22, EX6120 before 1.0.0.40, EX6130 before 1.0.0.22, EX6150 before 1.0.0.38, EX6200 before 1.0.3.86, EX7000 before 1.0.0.64, R6250 before 1.0.4.20, R6300v2 before 1.0.4.22, R6400 before 1.0.1.32, R6400v2 before 1.0.2.52, R6700 before 1.0.1.44, R6900 before 1.0.1.44, R6900P before 1.3.0.18, R7000 before 1.0.9.28, R7000P before 1.3.0.18, R7300DST before 1.0.0.62, R7900 before 1.0.2.10, R7900P before 1.3.0.10, R8000 before 1.0.4.12, R8000P before 1.3.0.10, R8300 before 1.0.2.116, R8500 before 1.0.2.116, WN2500RPv2 before 1.0.1.52, WNDR3400v3 before 1.0.1.18, and WNR3500Lv2 before 1.2.0.46.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9fgp-r4v4-wwg9/GHSA-9fgp-r4v4-wwg9.json b/advisories/unreviewed/2022/05/GHSA-9fgp-r4v4-wwg9/GHSA-9fgp-r4v4-wwg9.json index 52d8fe9a961..152f68f20cc 100644 --- a/advisories/unreviewed/2022/05/GHSA-9fgp-r4v4-wwg9/GHSA-9fgp-r4v4-wwg9.json +++ b/advisories/unreviewed/2022/05/GHSA-9fgp-r4v4-wwg9/GHSA-9fgp-r4v4-wwg9.json @@ -7,12 +7,8 @@ "CVE-2018-21221" ], "details": "Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, and R9000 before 1.0.2.52.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9fq5-w3c4-v27c/GHSA-9fq5-w3c4-v27c.json b/advisories/unreviewed/2022/05/GHSA-9fq5-w3c4-v27c/GHSA-9fq5-w3c4-v27c.json index 71758ac005b..8eff746f4c2 100644 --- a/advisories/unreviewed/2022/05/GHSA-9fq5-w3c4-v27c/GHSA-9fq5-w3c4-v27c.json +++ b/advisories/unreviewed/2022/05/GHSA-9fq5-w3c4-v27c/GHSA-9fq5-w3c4-v27c.json @@ -7,12 +7,8 @@ "CVE-2017-18716" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9g8p-cxgw-6934/GHSA-9g8p-cxgw-6934.json b/advisories/unreviewed/2022/05/GHSA-9g8p-cxgw-6934/GHSA-9g8p-cxgw-6934.json index d7d5f0ac9f2..19794ab9dea 100644 --- a/advisories/unreviewed/2022/05/GHSA-9g8p-cxgw-6934/GHSA-9g8p-cxgw-6934.json +++ b/advisories/unreviewed/2022/05/GHSA-9g8p-cxgw-6934/GHSA-9g8p-cxgw-6934.json @@ -7,12 +7,8 @@ "CVE-2020-3955" ], "details": "ESXi 6.5 without patch ESXi650-201912104-SG and ESXi 6.7 without patch ESXi670-202004103-SG do not properly neutralize script-related HTML when viewing virtual machines attributes. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 8.3.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9hgc-c9c3-hp96/GHSA-9hgc-c9c3-hp96.json b/advisories/unreviewed/2022/05/GHSA-9hgc-c9c3-hp96/GHSA-9hgc-c9c3-hp96.json index 0ba5fe470f8..a3076221cfa 100644 --- a/advisories/unreviewed/2022/05/GHSA-9hgc-c9c3-hp96/GHSA-9hgc-c9c3-hp96.json +++ b/advisories/unreviewed/2022/05/GHSA-9hgc-c9c3-hp96/GHSA-9hgc-c9c3-hp96.json @@ -7,12 +7,8 @@ "CVE-2020-10902" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-10462.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9j2c-5587-pff7/GHSA-9j2c-5587-pff7.json b/advisories/unreviewed/2022/05/GHSA-9j2c-5587-pff7/GHSA-9j2c-5587-pff7.json index e408be89af0..e2b78350ff8 100644 --- a/advisories/unreviewed/2022/05/GHSA-9j2c-5587-pff7/GHSA-9j2c-5587-pff7.json +++ b/advisories/unreviewed/2022/05/GHSA-9j2c-5587-pff7/GHSA-9j2c-5587-pff7.json @@ -7,12 +7,8 @@ "CVE-2020-8773" ], "details": "The Richtext Editor in Pega Platform before 8.2.6 is affected by a Stored Cross-Site Scripting (XSS) vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9m33-62jp-gj6h/GHSA-9m33-62jp-gj6h.json b/advisories/unreviewed/2022/05/GHSA-9m33-62jp-gj6h/GHSA-9m33-62jp-gj6h.json index b0a735bfa45..f62a495896c 100644 --- a/advisories/unreviewed/2022/05/GHSA-9m33-62jp-gj6h/GHSA-9m33-62jp-gj6h.json +++ b/advisories/unreviewed/2022/05/GHSA-9m33-62jp-gj6h/GHSA-9m33-62jp-gj6h.json @@ -7,12 +7,8 @@ "CVE-2018-21170" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects EX2700 before 1.0.1.28, R7800 before 1.0.2.40, WN2000RPTv3 before 1.0.1.20, WN3000RPv3 before 1.0.2.50, and WN3100RPv2 before 1.0.0.56.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9mgf-4p75-63g2/GHSA-9mgf-4p75-63g2.json b/advisories/unreviewed/2022/05/GHSA-9mgf-4p75-63g2/GHSA-9mgf-4p75-63g2.json index 107e36540ab..268d63940bf 100644 --- a/advisories/unreviewed/2022/05/GHSA-9mgf-4p75-63g2/GHSA-9mgf-4p75-63g2.json +++ b/advisories/unreviewed/2022/05/GHSA-9mgf-4p75-63g2/GHSA-9mgf-4p75-63g2.json @@ -7,12 +7,8 @@ "CVE-2018-21152" ], "details": "Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, R7500v2 before 1.0.3.26, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR4300v2 before 1.0.0.54, and WNDR4500v3 before 1.0.0.54.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9pj8-8hq8-5gvc/GHSA-9pj8-8hq8-5gvc.json b/advisories/unreviewed/2022/05/GHSA-9pj8-8hq8-5gvc/GHSA-9pj8-8hq8-5gvc.json index 65b1914010a..7b0264c08f3 100644 --- a/advisories/unreviewed/2022/05/GHSA-9pj8-8hq8-5gvc/GHSA-9pj8-8hq8-5gvc.json +++ b/advisories/unreviewed/2022/05/GHSA-9pj8-8hq8-5gvc/GHSA-9pj8-8hq8-5gvc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9qp8-gr86-ccr3/GHSA-9qp8-gr86-ccr3.json b/advisories/unreviewed/2022/05/GHSA-9qp8-gr86-ccr3/GHSA-9qp8-gr86-ccr3.json index 57bd20d44f3..6392544d636 100644 --- a/advisories/unreviewed/2022/05/GHSA-9qp8-gr86-ccr3/GHSA-9qp8-gr86-ccr3.json +++ b/advisories/unreviewed/2022/05/GHSA-9qp8-gr86-ccr3/GHSA-9qp8-gr86-ccr3.json @@ -7,12 +7,8 @@ "CVE-2017-18726" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6020 before 1.0.0.30, R6080 before 1.0.0.30, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9r2q-6jq7-9fj3/GHSA-9r2q-6jq7-9fj3.json b/advisories/unreviewed/2022/05/GHSA-9r2q-6jq7-9fj3/GHSA-9r2q-6jq7-9fj3.json index fa2b6c424f2..a38fd0607bf 100644 --- a/advisories/unreviewed/2022/05/GHSA-9r2q-6jq7-9fj3/GHSA-9r2q-6jq7-9fj3.json +++ b/advisories/unreviewed/2022/05/GHSA-9r2q-6jq7-9fj3/GHSA-9r2q-6jq7-9fj3.json @@ -7,12 +7,8 @@ "CVE-2020-5881" ], "details": "On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, and 13.1.0-13.1.3.3, when the BIG-IP Virtual Edition (VE) is configured with VLAN groups and there are devices configured with OSPF connected to it, the Network Device Abstraction Layer (NDAL) Interfaces can lock up and in turn disrupting the communication between the mcpd and tmm processes.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9rj5-qrrr-fwj9/GHSA-9rj5-qrrr-fwj9.json b/advisories/unreviewed/2022/05/GHSA-9rj5-qrrr-fwj9/GHSA-9rj5-qrrr-fwj9.json index e01988fd77e..d832cd50f31 100644 --- a/advisories/unreviewed/2022/05/GHSA-9rj5-qrrr-fwj9/GHSA-9rj5-qrrr-fwj9.json +++ b/advisories/unreviewed/2022/05/GHSA-9rj5-qrrr-fwj9/GHSA-9rj5-qrrr-fwj9.json @@ -7,12 +7,8 @@ "CVE-2018-21096" ], "details": "Certain NETGEAR devices are affected by CSRF. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9vwf-7qgv-hxxc/GHSA-9vwf-7qgv-hxxc.json b/advisories/unreviewed/2022/05/GHSA-9vwf-7qgv-hxxc/GHSA-9vwf-7qgv-hxxc.json index 36283b47102..b2d5c3e9b19 100644 --- a/advisories/unreviewed/2022/05/GHSA-9vwf-7qgv-hxxc/GHSA-9vwf-7qgv-hxxc.json +++ b/advisories/unreviewed/2022/05/GHSA-9vwf-7qgv-hxxc/GHSA-9vwf-7qgv-hxxc.json @@ -7,12 +7,8 @@ "CVE-2020-5880" ], "details": "Om BIG-IP 15.0.0-15.0.1.3 and 14.1.0-14.1.2.3, the restjavad process may expose a way for attackers to upload arbitrary files on the BIG-IP system, bypassing the authorization system. Resulting error messages may also reveal internal paths of the server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c23v-pccp-c7vh/GHSA-c23v-pccp-c7vh.json b/advisories/unreviewed/2022/05/GHSA-c23v-pccp-c7vh/GHSA-c23v-pccp-c7vh.json index a4b4b5f2eb7..441f31fefdf 100644 --- a/advisories/unreviewed/2022/05/GHSA-c23v-pccp-c7vh/GHSA-c23v-pccp-c7vh.json +++ b/advisories/unreviewed/2022/05/GHSA-c23v-pccp-c7vh/GHSA-c23v-pccp-c7vh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c3vp-6j3v-43r7/GHSA-c3vp-6j3v-43r7.json b/advisories/unreviewed/2022/05/GHSA-c3vp-6j3v-43r7/GHSA-c3vp-6j3v-43r7.json index 7f3f60fc97a..bdbb84e4804 100644 --- a/advisories/unreviewed/2022/05/GHSA-c3vp-6j3v-43r7/GHSA-c3vp-6j3v-43r7.json +++ b/advisories/unreviewed/2022/05/GHSA-c3vp-6j3v-43r7/GHSA-c3vp-6j3v-43r7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c4r7-rrmw-79f3/GHSA-c4r7-rrmw-79f3.json b/advisories/unreviewed/2022/05/GHSA-c4r7-rrmw-79f3/GHSA-c4r7-rrmw-79f3.json index 7bbd1cd215c..75c2e0c8063 100644 --- a/advisories/unreviewed/2022/05/GHSA-c4r7-rrmw-79f3/GHSA-c4r7-rrmw-79f3.json +++ b/advisories/unreviewed/2022/05/GHSA-c4r7-rrmw-79f3/GHSA-c4r7-rrmw-79f3.json @@ -7,12 +7,8 @@ "CVE-2018-21192" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.57, R6100 before 1.0.1.20, R7800 before 1.0.2.40, R9000 before 1.0.3.6, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c5r4-6p5c-6g46/GHSA-c5r4-6p5c-6g46.json b/advisories/unreviewed/2022/05/GHSA-c5r4-6p5c-6g46/GHSA-c5r4-6p5c-6g46.json index b42f22d69af..88616f10111 100644 --- a/advisories/unreviewed/2022/05/GHSA-c5r4-6p5c-6g46/GHSA-c5r4-6p5c-6g46.json +++ b/advisories/unreviewed/2022/05/GHSA-c5r4-6p5c-6g46/GHSA-c5r4-6p5c-6g46.json @@ -7,12 +7,8 @@ "CVE-2020-10906" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the resetForm method. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-10614.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c7q4-vm42-67vm/GHSA-c7q4-vm42-67vm.json b/advisories/unreviewed/2022/05/GHSA-c7q4-vm42-67vm/GHSA-c7q4-vm42-67vm.json index b306cf6064c..7c563ad862a 100644 --- a/advisories/unreviewed/2022/05/GHSA-c7q4-vm42-67vm/GHSA-c7q4-vm42-67vm.json +++ b/advisories/unreviewed/2022/05/GHSA-c7q4-vm42-67vm/GHSA-c7q4-vm42-67vm.json @@ -7,12 +7,8 @@ "CVE-2020-4202" ], "details": "IBM UrbanCode Deploy (UCD) 7.0.3.0 and 7.0.4.0 could allow an authenticated user to impersonate another user if the server is configured to enable Distributed Front End (DFE). IBM X-Force ID: 174955.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c86c-pc2p-fq87/GHSA-c86c-pc2p-fq87.json b/advisories/unreviewed/2022/05/GHSA-c86c-pc2p-fq87/GHSA-c86c-pc2p-fq87.json index 408c5e1568a..ecf4568bce1 100644 --- a/advisories/unreviewed/2022/05/GHSA-c86c-pc2p-fq87/GHSA-c86c-pc2p-fq87.json +++ b/advisories/unreviewed/2022/05/GHSA-c86c-pc2p-fq87/GHSA-c86c-pc2p-fq87.json @@ -7,12 +7,8 @@ "CVE-2020-8797" ], "details": "Juplink RX4-1500 v1.0.3 allows remote attackers to gain root access to the Linux subsystem via an unsanitized exec call (aka Command Line Injection), if the undocumented telnetd service is enabled and the attacker can authenticate as admin from the local network.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c8qv-9mr4-vg3p/GHSA-c8qv-9mr4-vg3p.json b/advisories/unreviewed/2022/05/GHSA-c8qv-9mr4-vg3p/GHSA-c8qv-9mr4-vg3p.json index 488e6de583f..d390fd0d455 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8qv-9mr4-vg3p/GHSA-c8qv-9mr4-vg3p.json +++ b/advisories/unreviewed/2022/05/GHSA-c8qv-9mr4-vg3p/GHSA-c8qv-9mr4-vg3p.json @@ -7,12 +7,8 @@ "CVE-2018-21190" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.57, D7800 before 1.0.1.34, R6100 before 1.0.1.20, R7500 before 1.0.0.122, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c9rv-f9qq-jjvf/GHSA-c9rv-f9qq-jjvf.json b/advisories/unreviewed/2022/05/GHSA-c9rv-f9qq-jjvf/GHSA-c9rv-f9qq-jjvf.json index 0d117d77b9e..747401d0a79 100644 --- a/advisories/unreviewed/2022/05/GHSA-c9rv-f9qq-jjvf/GHSA-c9rv-f9qq-jjvf.json +++ b/advisories/unreviewed/2022/05/GHSA-c9rv-f9qq-jjvf/GHSA-c9rv-f9qq-jjvf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cc4m-3fhg-62r3/GHSA-cc4m-3fhg-62r3.json b/advisories/unreviewed/2022/05/GHSA-cc4m-3fhg-62r3/GHSA-cc4m-3fhg-62r3.json index 3e9a115c019..b0230bd7cf5 100644 --- a/advisories/unreviewed/2022/05/GHSA-cc4m-3fhg-62r3/GHSA-cc4m-3fhg-62r3.json +++ b/advisories/unreviewed/2022/05/GHSA-cc4m-3fhg-62r3/GHSA-cc4m-3fhg-62r3.json @@ -7,12 +7,8 @@ "CVE-2020-10893" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in a PDF. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-10189.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cc6m-87j4-399f/GHSA-cc6m-87j4-399f.json b/advisories/unreviewed/2022/05/GHSA-cc6m-87j4-399f/GHSA-cc6m-87j4-399f.json index 868eaed9f6a..9b958c71501 100644 --- a/advisories/unreviewed/2022/05/GHSA-cc6m-87j4-399f/GHSA-cc6m-87j4-399f.json +++ b/advisories/unreviewed/2022/05/GHSA-cc6m-87j4-399f/GHSA-cc6m-87j4-399f.json @@ -7,12 +7,8 @@ "CVE-2020-5891" ], "details": "On BIG-IP 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, undisclosed HTTP/2 requests can lead to a denial of service when sent to a virtual server configured with the Fallback Host setting and a server-side HTTP/2 profile.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ccf5-cxqv-x84v/GHSA-ccf5-cxqv-x84v.json b/advisories/unreviewed/2022/05/GHSA-ccf5-cxqv-x84v/GHSA-ccf5-cxqv-x84v.json index 4acba9c5a7a..33f91e5eacb 100644 --- a/advisories/unreviewed/2022/05/GHSA-ccf5-cxqv-x84v/GHSA-ccf5-cxqv-x84v.json +++ b/advisories/unreviewed/2022/05/GHSA-ccf5-cxqv-x84v/GHSA-ccf5-cxqv-x84v.json @@ -7,12 +7,8 @@ "CVE-2020-8798" ], "details": "httpd in Juplink RX4-1500 v1.0.3-v1.0.5 allows remote attackers to change or access router settings by connecting to the unauthenticated setup3.htm endpoint from the local network.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cch6-gwh8-r87f/GHSA-cch6-gwh8-r87f.json b/advisories/unreviewed/2022/05/GHSA-cch6-gwh8-r87f/GHSA-cch6-gwh8-r87f.json index 2e4116d8932..d8bcf7f13e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-cch6-gwh8-r87f/GHSA-cch6-gwh8-r87f.json +++ b/advisories/unreviewed/2022/05/GHSA-cch6-gwh8-r87f/GHSA-cch6-gwh8-r87f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ccx8-28wr-3jgq/GHSA-ccx8-28wr-3jgq.json b/advisories/unreviewed/2022/05/GHSA-ccx8-28wr-3jgq/GHSA-ccx8-28wr-3jgq.json index a314430f0a7..99a2c52aa80 100644 --- a/advisories/unreviewed/2022/05/GHSA-ccx8-28wr-3jgq/GHSA-ccx8-28wr-3jgq.json +++ b/advisories/unreviewed/2022/05/GHSA-ccx8-28wr-3jgq/GHSA-ccx8-28wr-3jgq.json @@ -7,12 +7,8 @@ "CVE-2020-12268" ], "details": "jbig2_image_compose in jbig2_image.c in Artifex jbig2dec before 0.18 has a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cfrf-4mh2-g67f/GHSA-cfrf-4mh2-g67f.json b/advisories/unreviewed/2022/05/GHSA-cfrf-4mh2-g67f/GHSA-cfrf-4mh2-g67f.json index a756652b4bf..5217d585b0b 100644 --- a/advisories/unreviewed/2022/05/GHSA-cfrf-4mh2-g67f/GHSA-cfrf-4mh2-g67f.json +++ b/advisories/unreviewed/2022/05/GHSA-cfrf-4mh2-g67f/GHSA-cfrf-4mh2-g67f.json @@ -7,12 +7,8 @@ "CVE-2017-18714" ], "details": "NETGEAR WNDR4500v3 devices before 1.0.0.48 are affected by denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cg92-xv4w-rrj3/GHSA-cg92-xv4w-rrj3.json b/advisories/unreviewed/2022/05/GHSA-cg92-xv4w-rrj3/GHSA-cg92-xv4w-rrj3.json index ec197845054..c765d02af47 100644 --- a/advisories/unreviewed/2022/05/GHSA-cg92-xv4w-rrj3/GHSA-cg92-xv4w-rrj3.json +++ b/advisories/unreviewed/2022/05/GHSA-cg92-xv4w-rrj3/GHSA-cg92-xv4w-rrj3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cgqh-jmwj-vw24/GHSA-cgqh-jmwj-vw24.json b/advisories/unreviewed/2022/05/GHSA-cgqh-jmwj-vw24/GHSA-cgqh-jmwj-vw24.json index c7f26d5347b..c031a206db7 100644 --- a/advisories/unreviewed/2022/05/GHSA-cgqh-jmwj-vw24/GHSA-cgqh-jmwj-vw24.json +++ b/advisories/unreviewed/2022/05/GHSA-cgqh-jmwj-vw24/GHSA-cgqh-jmwj-vw24.json @@ -7,12 +7,8 @@ "CVE-2018-21224" ], "details": "Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D7800 before 1.0.1.30, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cgvg-mq87-qcx9/GHSA-cgvg-mq87-qcx9.json b/advisories/unreviewed/2022/05/GHSA-cgvg-mq87-qcx9/GHSA-cgvg-mq87-qcx9.json index b4b9a0df85a..56677039ea3 100644 --- a/advisories/unreviewed/2022/05/GHSA-cgvg-mq87-qcx9/GHSA-cgvg-mq87-qcx9.json +++ b/advisories/unreviewed/2022/05/GHSA-cgvg-mq87-qcx9/GHSA-cgvg-mq87-qcx9.json @@ -7,12 +7,8 @@ "CVE-2018-21098" ], "details": "NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ch39-559f-wp4m/GHSA-ch39-559f-wp4m.json b/advisories/unreviewed/2022/05/GHSA-ch39-559f-wp4m/GHSA-ch39-559f-wp4m.json index 14c327d6913..d8bef8de57b 100644 --- a/advisories/unreviewed/2022/05/GHSA-ch39-559f-wp4m/GHSA-ch39-559f-wp4m.json +++ b/advisories/unreviewed/2022/05/GHSA-ch39-559f-wp4m/GHSA-ch39-559f-wp4m.json @@ -7,12 +7,8 @@ "CVE-2019-5302" ], "details": "There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 1 out of 2 vulnerabilities. Different than CVE-2020-5303. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earlier than 9.1.0.300(C432E4R1P9T8) ALP-L29: earlier than 9.1.0.315(C636E5R1P13T8) BLA-L29C: earlier than 9.1.0.321(C636E4R1P14T8), earlier than 9.1.0.330(C432E6R1P12T8), earlier than 9.1.0.302(C635E4R1P13T8) Berkeley-AL20: earlier than 9.1.0.333(C00E333R2P1T8) Berkeley-L09: earlier than 9.1.0.350(C10E3R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8), earlier than 9.1.0.350(C636E4R1P13T8) Charlotte-L09C: earlier than 9.1.0.311(C185E4R1P11T8), earlier than 9.1.0.345(C432E8R1P11T8) Charlotte-L29C: earlier than 9.1.0.325(C185E4R1P11T8), earlier than 9.1.0.335(C636E3R1P13T8), earlier than 9.1.0.345(C432E8R1P11T8), earlier than 9.1.0.336(C605E3R1P12T8) Columbia-AL10B: earlier than 9.1.0.333(C00E333R1P1T8) Columbia-L29D: earlier than 9.1.0.350(C461E3R1P11T8), earlier than 9.1.0.350(C185E3R1P12T8), earlier than 9.1.0.350(C10E5R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8) Cornell-AL00A: earlier than 9.1.0.333(C00E333R1P1T8) Cornell-L29A: earlier than 9.1.0.328(C185E1R1P9T8), earlier than 9.1.0.328(C432E1R1P9T8), earlier than 9.1.0.330(C461E1R1P9T8), earlier than 9.1.0.328(C636E2R1P12T8) Emily-L09C: earlier than 9.1.0.336(C605E4R1P12T8), earlier than 9.1.0.311(C185E2R1P12T8), earlier than 9.1.0.345(C432E10R1P12T8) Emily-L29C: earlier than 9.1.0.311(C605E2R1P12T8), earlier than 9.1.0.311(C636E7R1P13T8), earlier than 9.1.0.311(C432E7R1P11T8) Ever-L29B: earlier than 9.1.0.311(C185E3R3P1), earlier than 9.1.0.310(C636E3R2P1), earlier than 9.1.0.310(C432E3R1P12) HUAWEI Mate 20: earlier than 9.1.0.131(C00E131R3P1) HUAWEI Mate 20 Pro: earlier than 9.1.0.310(C185E10R2P1) HUAWEI Mate 20 RS: earlier than 9.1.0.135(C786E133R3P1) HUAWEI Mate 20 X: earlier than 9.1.0.135(C00E133R2P1) HUAWEI P20: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P20 Pro: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P30: earlier than 9.1.0.193 HUAWEI P30 Pro: earlier than 9.1.0.186(C00E180R2P1) HUAWEI Y9 2019: earlier than 9.1.0.220(C605E3R1P1T8) HUAWEI nova lite 3: earlier than 9.1.0.305(C635E8R2P2) Honor 10 Lite: earlier than 9.1.0.283(C605E8R2P2) Honor 8X: earlier than 9.1.0.221(C461E2R1P1T8) Honor View 20: earlier than 9.1.0.238(C432E1R3P1) Jackman-L22: earlier than 9.1.0.247(C636E2R4P1T8) Paris-L21B: earlier than 9.1.0.331(C432E1R1P2T8) Paris-L21MEB: earlier than 9.1.0.331(C185E4R1P3T8) Paris-L29B: earlier than 9.1.0.331(C636E1R1P3T8) Sydney-AL00: earlier than 9.1.0.212(C00E62R1P7T8) Sydney-L21: earlier than 9.1.0.215(C432E1R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8) Sydney-L21BR: earlier than 9.1.0.213(C185E1R1P2T8) Sydney-L22: earlier than 9.1.0.258(C636E1R1P1T8) Sydney-L22BR: earlier than 9.1.0.258(C636E1R1P1T8) SydneyM-AL00: earlier than 9.1.0.228(C00E78R1P7T8) SydneyM-L01: earlier than 9.1.0.215(C782E2R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8), earlier than 9.1.0.270(C432E3R1P1T8) SydneyM-L03: earlier than 9.1.0.217(C605E1R1P1T8) SydneyM-L21: earlier than 9.1.0.221(C461E1R1P1T8), earlier than 9.1.0.215(C432E4R1P1T8) SydneyM-L22: earlier than 9.1.0.259(C185E1R1P2T8), earlier than 9.1.0.220(C635E1R1P2T8), earlier than 9.1.0.216(C569E1R1P1T8) SydneyM-L23: earlier than 9.1.0.226(C605E2R1P1T8) Yale-L21A: earlier than 9.1.0.154(C432E2R3P2), earlier than 9.1.0.154(C461E2R2P1), earlier than 9.1.0.154(C636E2R2P1) Honor 20: earlier than 9.1.0.152(C00E150R5P1) Honor Magic2: earlier than 10.0.0.187 Honor V20: earlier than 9.1.0.234(C00E234R4P3)", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-chgg-c582-67cw/GHSA-chgg-c582-67cw.json b/advisories/unreviewed/2022/05/GHSA-chgg-c582-67cw/GHSA-chgg-c582-67cw.json index fbb7aba22ea..c55f246c980 100644 --- a/advisories/unreviewed/2022/05/GHSA-chgg-c582-67cw/GHSA-chgg-c582-67cw.json +++ b/advisories/unreviewed/2022/05/GHSA-chgg-c582-67cw/GHSA-chgg-c582-67cw.json @@ -7,12 +7,8 @@ "CVE-2018-21171" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.57, R7800 before 1.0.2.40, R9000 before 1.0.3.6, WNDR3700v4 before 1.0.2.92, and WNDR4300 before 1.0.2.98.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-chj8-vpxq-7rvm/GHSA-chj8-vpxq-7rvm.json b/advisories/unreviewed/2022/05/GHSA-chj8-vpxq-7rvm/GHSA-chj8-vpxq-7rvm.json index 8b114b5f739..adb7effc7cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-chj8-vpxq-7rvm/GHSA-chj8-vpxq-7rvm.json +++ b/advisories/unreviewed/2022/05/GHSA-chj8-vpxq-7rvm/GHSA-chj8-vpxq-7rvm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-chxq-2w4g-w77p/GHSA-chxq-2w4g-w77p.json b/advisories/unreviewed/2022/05/GHSA-chxq-2w4g-w77p/GHSA-chxq-2w4g-w77p.json index fb6dcc3dbb7..d5b836c7e73 100644 --- a/advisories/unreviewed/2022/05/GHSA-chxq-2w4g-w77p/GHSA-chxq-2w4g-w77p.json +++ b/advisories/unreviewed/2022/05/GHSA-chxq-2w4g-w77p/GHSA-chxq-2w4g-w77p.json @@ -7,12 +7,8 @@ "CVE-2018-21214" ], "details": "Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, EX2700 before 1.0.1.28, R6100 before 1.0.1.20, R7500v2 before 1.0.3.24, R9000 before 1.0.2.52, WN2000RPTv3 before 1.0.1.20, WN3000RPv3 before 1.0.2.50, and WN3100RPv2 before 1.0.0.56.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cj2w-gr33-v35w/GHSA-cj2w-gr33-v35w.json b/advisories/unreviewed/2022/05/GHSA-cj2w-gr33-v35w/GHSA-cj2w-gr33-v35w.json index f6ad30d0642..d2b3a0c66eb 100644 --- a/advisories/unreviewed/2022/05/GHSA-cj2w-gr33-v35w/GHSA-cj2w-gr33-v35w.json +++ b/advisories/unreviewed/2022/05/GHSA-cj2w-gr33-v35w/GHSA-cj2w-gr33-v35w.json @@ -7,12 +7,8 @@ "CVE-2017-18723" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cj43-7274-vrw4/GHSA-cj43-7274-vrw4.json b/advisories/unreviewed/2022/05/GHSA-cj43-7274-vrw4/GHSA-cj43-7274-vrw4.json index f368a075683..fdf5550e7a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-cj43-7274-vrw4/GHSA-cj43-7274-vrw4.json +++ b/advisories/unreviewed/2022/05/GHSA-cj43-7274-vrw4/GHSA-cj43-7274-vrw4.json @@ -7,12 +7,8 @@ "CVE-2020-5889" ], "details": "On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, in BIG-IP APM portal access, a specially crafted HTTP request can lead to reflected XSS after the BIG-IP APM system rewrites the HTTP response from the untrusted backend server and sends it to the client.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cm5r-wgmx-pg96/GHSA-cm5r-wgmx-pg96.json b/advisories/unreviewed/2022/05/GHSA-cm5r-wgmx-pg96/GHSA-cm5r-wgmx-pg96.json index e0d863e4ca9..1cbe686c75b 100644 --- a/advisories/unreviewed/2022/05/GHSA-cm5r-wgmx-pg96/GHSA-cm5r-wgmx-pg96.json +++ b/advisories/unreviewed/2022/05/GHSA-cm5r-wgmx-pg96/GHSA-cm5r-wgmx-pg96.json @@ -7,12 +7,8 @@ "CVE-2019-17101" ], "details": "Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in firmware versions prior to x.xx of Netatmo Smart Indoor Camera allows an attacker to execute commands on the device. This issue affects: Netatmo Smart Indoor Camera version and prior versions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cm62-rf7g-38cc/GHSA-cm62-rf7g-38cc.json b/advisories/unreviewed/2022/05/GHSA-cm62-rf7g-38cc/GHSA-cm62-rf7g-38cc.json index 55d3dd5a47c..d93933eaf0a 100644 --- a/advisories/unreviewed/2022/05/GHSA-cm62-rf7g-38cc/GHSA-cm62-rf7g-38cc.json +++ b/advisories/unreviewed/2022/05/GHSA-cm62-rf7g-38cc/GHSA-cm62-rf7g-38cc.json @@ -7,12 +7,8 @@ "CVE-2020-10903" ], "details": "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in a PDF. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-10463.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cmg6-rw28-2jcx/GHSA-cmg6-rw28-2jcx.json b/advisories/unreviewed/2022/05/GHSA-cmg6-rw28-2jcx/GHSA-cmg6-rw28-2jcx.json index 1a47a2940c9..78007996d9e 100644 --- a/advisories/unreviewed/2022/05/GHSA-cmg6-rw28-2jcx/GHSA-cmg6-rw28-2jcx.json +++ b/advisories/unreviewed/2022/05/GHSA-cmg6-rw28-2jcx/GHSA-cmg6-rw28-2jcx.json @@ -7,12 +7,8 @@ "CVE-2020-5570" ], "details": "Cross-site scripting vulnerability in Sales Force Assistant version 11.2.48 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cmx5-q475-7cqr/GHSA-cmx5-q475-7cqr.json b/advisories/unreviewed/2022/05/GHSA-cmx5-q475-7cqr/GHSA-cmx5-q475-7cqr.json index 242f26f7498..0fb7f3ffebe 100644 --- a/advisories/unreviewed/2022/05/GHSA-cmx5-q475-7cqr/GHSA-cmx5-q475-7cqr.json +++ b/advisories/unreviewed/2022/05/GHSA-cmx5-q475-7cqr/GHSA-cmx5-q475-7cqr.json @@ -7,12 +7,8 @@ "CVE-2020-9387" ], "details": "In Mahara 19.04 before 19.04.5 and 19.10 before 19.10.3, account details are shared in the Elasticsearch results for accounts that are not accessible when the config setting 'Isolated institutions' is turned on.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cqrw-wrm7-9ccv/GHSA-cqrw-wrm7-9ccv.json b/advisories/unreviewed/2022/05/GHSA-cqrw-wrm7-9ccv/GHSA-cqrw-wrm7-9ccv.json index 9a1d67843ac..b114686fe10 100644 --- a/advisories/unreviewed/2022/05/GHSA-cqrw-wrm7-9ccv/GHSA-cqrw-wrm7-9ccv.json +++ b/advisories/unreviewed/2022/05/GHSA-cqrw-wrm7-9ccv/GHSA-cqrw-wrm7-9ccv.json @@ -7,12 +7,8 @@ "CVE-2018-21213" ], "details": "Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D7800 before 1.0.1.30, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-crg4-9cvh-c76f/GHSA-crg4-9cvh-c76f.json b/advisories/unreviewed/2022/05/GHSA-crg4-9cvh-c76f/GHSA-crg4-9cvh-c76f.json index bbec528d1c3..52ef95266cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-crg4-9cvh-c76f/GHSA-crg4-9cvh-c76f.json +++ b/advisories/unreviewed/2022/05/GHSA-crg4-9cvh-c76f/GHSA-crg4-9cvh-c76f.json @@ -7,12 +7,8 @@ "CVE-2020-12138" ], "details": "AMD ATI atillk64.sys 5.11.9.0 allows low-privileged users to interact directly with physical memory by calling one of several driver routines that map physical memory into the virtual address space of the calling process. This could enable low-privileged users to achieve NT AUTHORITY\\SYSTEM privileges via a DeviceIoControl call associated with MmMapIoSpace, IoAllocateMdl, MmBuildMdlForNonPagedPool, or MmMapLockedPages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cvfg-6mg6-247m/GHSA-cvfg-6mg6-247m.json b/advisories/unreviewed/2022/05/GHSA-cvfg-6mg6-247m/GHSA-cvfg-6mg6-247m.json index 15b8e9cc77d..9d9dce143be 100644 --- a/advisories/unreviewed/2022/05/GHSA-cvfg-6mg6-247m/GHSA-cvfg-6mg6-247m.json +++ b/advisories/unreviewed/2022/05/GHSA-cvfg-6mg6-247m/GHSA-cvfg-6mg6-247m.json @@ -7,12 +7,8 @@ "CVE-2020-7350" ], "details": "Rapid7 Metasploit Framework versions before 5.0.85 suffers from an instance of CWE-78: OS Command Injection, wherein the libnotify plugin accepts untrusted user-supplied data via a remote computer's hostname or service name. An attacker can create a specially-crafted hostname or service name to be imported by Metasploit from a variety of sources and trigger a command injection on the operator's terminal. Note, only the Metasploit Framework and products that expose the plugin system is susceptible to this issue -- notably, this does not include Rapid7 Metasploit Pro. Also note, this vulnerability cannot be triggered through a normal scan operation -- the attacker would have to supply a file that is processed with the db_import command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cwq8-9vv2-95hw/GHSA-cwq8-9vv2-95hw.json b/advisories/unreviewed/2022/05/GHSA-cwq8-9vv2-95hw/GHSA-cwq8-9vv2-95hw.json index 6ebb1ce7407..fcdb6fca918 100644 --- a/advisories/unreviewed/2022/05/GHSA-cwq8-9vv2-95hw/GHSA-cwq8-9vv2-95hw.json +++ b/advisories/unreviewed/2022/05/GHSA-cwq8-9vv2-95hw/GHSA-cwq8-9vv2-95hw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cwq9-2m7r-2h7g/GHSA-cwq9-2m7r-2h7g.json b/advisories/unreviewed/2022/05/GHSA-cwq9-2m7r-2h7g/GHSA-cwq9-2m7r-2h7g.json index bc103b0c960..faa30811de9 100644 --- a/advisories/unreviewed/2022/05/GHSA-cwq9-2m7r-2h7g/GHSA-cwq9-2m7r-2h7g.json +++ b/advisories/unreviewed/2022/05/GHSA-cwq9-2m7r-2h7g/GHSA-cwq9-2m7r-2h7g.json @@ -7,12 +7,8 @@ "CVE-2018-21186" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 before 1.0.1.30, R6100 before 1.0.1.20, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cxp9-fwx5-389x/GHSA-cxp9-fwx5-389x.json b/advisories/unreviewed/2022/05/GHSA-cxp9-fwx5-389x/GHSA-cxp9-fwx5-389x.json index 236e81f6c52..fbdaa9ce800 100644 --- a/advisories/unreviewed/2022/05/GHSA-cxp9-fwx5-389x/GHSA-cxp9-fwx5-389x.json +++ b/advisories/unreviewed/2022/05/GHSA-cxp9-fwx5-389x/GHSA-cxp9-fwx5-389x.json @@ -7,12 +7,8 @@ "CVE-2018-21149" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 before 1.0.1.34, DM200 before 1.0.0.50, R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.0.54, WNDR4300v2 before 1.0.0.54, WNDR4500v3 before 1.0.0.54, and WNR2000v5 before 1.0.0.64.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f2c7-c2h9-mxmq/GHSA-f2c7-c2h9-mxmq.json b/advisories/unreviewed/2022/05/GHSA-f2c7-c2h9-mxmq/GHSA-f2c7-c2h9-mxmq.json index 9e2256af3ab..2ec2424af22 100644 --- a/advisories/unreviewed/2022/05/GHSA-f2c7-c2h9-mxmq/GHSA-f2c7-c2h9-mxmq.json +++ b/advisories/unreviewed/2022/05/GHSA-f2c7-c2h9-mxmq/GHSA-f2c7-c2h9-mxmq.json @@ -7,12 +7,8 @@ "CVE-2020-12114" ], "details": "A pivot_root race condition in fs/namespace.c in the Linux kernel 4.4.x before 4.4.221, 4.9.x before 4.9.221, 4.14.x before 4.14.178, 4.19.x before 4.19.119, and 5.x before 5.3 allows local users to cause a denial of service (panic) by corrupting a mountpoint reference counter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f2cr-pggr-8v62/GHSA-f2cr-pggr-8v62.json b/advisories/unreviewed/2022/05/GHSA-f2cr-pggr-8v62/GHSA-f2cr-pggr-8v62.json index 69169d99adb..e95772a742f 100644 --- a/advisories/unreviewed/2022/05/GHSA-f2cr-pggr-8v62/GHSA-f2cr-pggr-8v62.json +++ b/advisories/unreviewed/2022/05/GHSA-f2cr-pggr-8v62/GHSA-f2cr-pggr-8v62.json @@ -7,12 +7,8 @@ "CVE-2018-21103" ], "details": "NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f38g-f5p2-2hqg/GHSA-f38g-f5p2-2hqg.json b/advisories/unreviewed/2022/05/GHSA-f38g-f5p2-2hqg/GHSA-f38g-f5p2-2hqg.json index 5334e3f73a5..a7f8eb0de63 100644 --- a/advisories/unreviewed/2022/05/GHSA-f38g-f5p2-2hqg/GHSA-f38g-f5p2-2hqg.json +++ b/advisories/unreviewed/2022/05/GHSA-f38g-f5p2-2hqg/GHSA-f38g-f5p2-2hqg.json @@ -7,12 +7,8 @@ "CVE-2018-21095" ], "details": "Certain NETGEAR devices are affected by stored XSS. This affects SRR60 before 2.2.1.210 and SRS60 before 2.2.1.210.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f474-36w6-3656/GHSA-f474-36w6-3656.json b/advisories/unreviewed/2022/05/GHSA-f474-36w6-3656/GHSA-f474-36w6-3656.json index 8516db40251..322a5ab29d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-f474-36w6-3656/GHSA-f474-36w6-3656.json +++ b/advisories/unreviewed/2022/05/GHSA-f474-36w6-3656/GHSA-f474-36w6-3656.json @@ -7,12 +7,8 @@ "CVE-2020-12470" ], "details": "MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f4mw-2jxp-w6m3/GHSA-f4mw-2jxp-w6m3.json b/advisories/unreviewed/2022/05/GHSA-f4mw-2jxp-w6m3/GHSA-f4mw-2jxp-w6m3.json index 31bb15ab06a..b66855dc0d3 100644 --- a/advisories/unreviewed/2022/05/GHSA-f4mw-2jxp-w6m3/GHSA-f4mw-2jxp-w6m3.json +++ b/advisories/unreviewed/2022/05/GHSA-f4mw-2jxp-w6m3/GHSA-f4mw-2jxp-w6m3.json @@ -7,12 +7,8 @@ "CVE-2020-10904" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-10464.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f54q-h8mw-5h8w/GHSA-f54q-h8mw-5h8w.json b/advisories/unreviewed/2022/05/GHSA-f54q-h8mw-5h8w/GHSA-f54q-h8mw-5h8w.json index 7be1d72c89e..9ab55c2a475 100644 --- a/advisories/unreviewed/2022/05/GHSA-f54q-h8mw-5h8w/GHSA-f54q-h8mw-5h8w.json +++ b/advisories/unreviewed/2022/05/GHSA-f54q-h8mw-5h8w/GHSA-f54q-h8mw-5h8w.json @@ -7,12 +7,8 @@ "CVE-2020-12135" ], "details": "bson before 0.8 incorrectly uses int rather than size_t for many variables, parameters, and return values. In particular, the bson_ensure_space() parameter bytesNeeded could have an integer overflow via properly constructed bson input.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f6mj-xf48-98pp/GHSA-f6mj-xf48-98pp.json b/advisories/unreviewed/2022/05/GHSA-f6mj-xf48-98pp/GHSA-f6mj-xf48-98pp.json index 82442a118f9..ea91b92129c 100644 --- a/advisories/unreviewed/2022/05/GHSA-f6mj-xf48-98pp/GHSA-f6mj-xf48-98pp.json +++ b/advisories/unreviewed/2022/05/GHSA-f6mj-xf48-98pp/GHSA-f6mj-xf48-98pp.json @@ -7,12 +7,8 @@ "CVE-2018-21134" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6700 before 1.0.1.48, R7900 before 1.0.2.16, R6900 before 1.0.1.48, R7000P before 1.3.1.44, R6900P before 1.3.1.44, R6250 before 1.0.4.30, R6300v2 before 1.0.4.32, R6400 before 1.0.1.44, R6400v2 before 1.0.2.60, R7000 before 1.0.9.34, R7100LG before 1.0.0.48, R7300 before 1.0.0.68, R8000 before 1.0.4.18, R8000P before 1.4.1.24, R7900P before 1.4.1.24, R8500 before 1.0.2.122, R8300 before 1.0.2.122, WN2500RPv2 before 1.0.1.54, EX3700 before 1.0.0.72, EX3800 before 1.0.0.72, EX6000 before 1.0.0.32, EX6100 before 1.0.2.24, EX6120 before 1.0.0.42, EX6130 before 1.0.0.24, EX6150v1 before 1.0.0.42, EX6200 before 1.0.3.88, EX7000 before 1.0.0.66, D7000v2 before 1.0.0.51, D6220 before 1.0.0.46, D6400 before 1.0.0.82, and D8500 before 1.0.3.42.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f842-vw35-9x42/GHSA-f842-vw35-9x42.json b/advisories/unreviewed/2022/05/GHSA-f842-vw35-9x42/GHSA-f842-vw35-9x42.json index 9d5e97c0be4..bc0b3c71777 100644 --- a/advisories/unreviewed/2022/05/GHSA-f842-vw35-9x42/GHSA-f842-vw35-9x42.json +++ b/advisories/unreviewed/2022/05/GHSA-f842-vw35-9x42/GHSA-f842-vw35-9x42.json @@ -7,12 +7,8 @@ "CVE-2020-12471" ], "details": "MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of deserialization in ModuleGallery.HTML5Upload, ModuleGallery.SilverLightUploadModule, HTML5Upload, and SilverLightUploadHandler.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f9xj-6ppw-6625/GHSA-f9xj-6ppw-6625.json b/advisories/unreviewed/2022/05/GHSA-f9xj-6ppw-6625/GHSA-f9xj-6ppw-6625.json index e3f7c4fc7fa..c30492225a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-f9xj-6ppw-6625/GHSA-f9xj-6ppw-6625.json +++ b/advisories/unreviewed/2022/05/GHSA-f9xj-6ppw-6625/GHSA-f9xj-6ppw-6625.json @@ -7,12 +7,8 @@ "CVE-2020-8774" ], "details": "Pega Platform before version 8.2.6 is affected by a Reflected Cross-Site Scripting vulnerability in the \"ActionStringID\" function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fcxq-9gwp-5w5v/GHSA-fcxq-9gwp-5w5v.json b/advisories/unreviewed/2022/05/GHSA-fcxq-9gwp-5w5v/GHSA-fcxq-9gwp-5w5v.json index a7ba6353ea8..b27d85830a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-fcxq-9gwp-5w5v/GHSA-fcxq-9gwp-5w5v.json +++ b/advisories/unreviewed/2022/05/GHSA-fcxq-9gwp-5w5v/GHSA-fcxq-9gwp-5w5v.json @@ -7,12 +7,8 @@ "CVE-2020-12472" ], "details": "MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ff3g-xwxx-9mv3/GHSA-ff3g-xwxx-9mv3.json b/advisories/unreviewed/2022/05/GHSA-ff3g-xwxx-9mv3/GHSA-ff3g-xwxx-9mv3.json index 14b66130bf8..b9383893dc6 100644 --- a/advisories/unreviewed/2022/05/GHSA-ff3g-xwxx-9mv3/GHSA-ff3g-xwxx-9mv3.json +++ b/advisories/unreviewed/2022/05/GHSA-ff3g-xwxx-9mv3/GHSA-ff3g-xwxx-9mv3.json @@ -7,12 +7,8 @@ "CVE-2020-5883" ], "details": "On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 14.0.0-14.0.1, and 13.1.0-13.1.3.1, when a virtual server is configured with HTTP explicit proxy and has an attached HTTP_PROXY_REQUEST iRule, POST requests sent to the virtual server cause an xdata memory leak.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fgf2-mc2g-p285/GHSA-fgf2-mc2g-p285.json b/advisories/unreviewed/2022/05/GHSA-fgf2-mc2g-p285/GHSA-fgf2-mc2g-p285.json index 200e96e4fda..ea52aca0c73 100644 --- a/advisories/unreviewed/2022/05/GHSA-fgf2-mc2g-p285/GHSA-fgf2-mc2g-p285.json +++ b/advisories/unreviewed/2022/05/GHSA-fgf2-mc2g-p285/GHSA-fgf2-mc2g-p285.json @@ -7,12 +7,8 @@ "CVE-2020-12447" ], "details": "A Local File Inclusion (LFI) issue on Onkyo TX-NR585 1000-0000-000-0008-0000 devices allows remote unauthenticated users on the network to read sensitive files via %2e%2e%2f directory traversal, as demonstrated by reading /etc/shadow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fgww-6rjh-8m32/GHSA-fgww-6rjh-8m32.json b/advisories/unreviewed/2022/05/GHSA-fgww-6rjh-8m32/GHSA-fgww-6rjh-8m32.json index 7b4e20452dd..5ee08ba6ec7 100644 --- a/advisories/unreviewed/2022/05/GHSA-fgww-6rjh-8m32/GHSA-fgww-6rjh-8m32.json +++ b/advisories/unreviewed/2022/05/GHSA-fgww-6rjh-8m32/GHSA-fgww-6rjh-8m32.json @@ -7,12 +7,8 @@ "CVE-2020-12132" ], "details": "Fifthplay S.A.M.I before 2019.3_HP2 allows unauthenticated stored XSS via a POST request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fj2m-3r7w-6fqh/GHSA-fj2m-3r7w-6fqh.json b/advisories/unreviewed/2022/05/GHSA-fj2m-3r7w-6fqh/GHSA-fj2m-3r7w-6fqh.json index f05b37bc656..271fc4a4a42 100644 --- a/advisories/unreviewed/2022/05/GHSA-fj2m-3r7w-6fqh/GHSA-fj2m-3r7w-6fqh.json +++ b/advisories/unreviewed/2022/05/GHSA-fj2m-3r7w-6fqh/GHSA-fj2m-3r7w-6fqh.json @@ -7,12 +7,8 @@ "CVE-2017-18719" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6020 before 1.1.00.26, R6080 before 1.1.00.26; R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fp74-7pjv-fqcj/GHSA-fp74-7pjv-fqcj.json b/advisories/unreviewed/2022/05/GHSA-fp74-7pjv-fqcj/GHSA-fp74-7pjv-fqcj.json index 51fe893b6b9..c91d489f467 100644 --- a/advisories/unreviewed/2022/05/GHSA-fp74-7pjv-fqcj/GHSA-fp74-7pjv-fqcj.json +++ b/advisories/unreviewed/2022/05/GHSA-fp74-7pjv-fqcj/GHSA-fp74-7pjv-fqcj.json @@ -7,12 +7,8 @@ "CVE-2020-11506" ], "details": "An issue was discovered in GitLab 10.7.0 and later through 12.9.2. A Workhorse bypass could lead to job artifact uploads and file disclosure (Exposure of Sensitive Information) via request smuggling.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fqqw-qmp7-4hh9/GHSA-fqqw-qmp7-4hh9.json b/advisories/unreviewed/2022/05/GHSA-fqqw-qmp7-4hh9/GHSA-fqqw-qmp7-4hh9.json index 0c60bd13334..df3d9f3dd88 100644 --- a/advisories/unreviewed/2022/05/GHSA-fqqw-qmp7-4hh9/GHSA-fqqw-qmp7-4hh9.json +++ b/advisories/unreviewed/2022/05/GHSA-fqqw-qmp7-4hh9/GHSA-fqqw-qmp7-4hh9.json @@ -7,12 +7,8 @@ "CVE-2017-18703" ], "details": "Certain NETGEAR devices are affected by CSRF. This affects D1500 before 1.0.0.25, D500 before 1.0.0.25, D6100 before 1.0.0.55, D7000 before 1.0.1.50, D7800 before 1.0.1.28, EX6100v2 before 1.0.1.60, EX6150v2 before 1.0.1.60, JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.16, JWNR2010v5 before 1.1.0.46, PR2000 before 1.0.0.18, R6020 before 1.0.0.26, R6050 before 1.0.1.16, R6080 before 1.0.0.26, R6100 before 1.0.1.20, R6220 before 1.1.0.60, R7500 before 1.0.0.118, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WN3000RPv3 before 1.0.2.50, WN3100RPv2 before 1.0.0.40, WNDR3700v5 before 1.1.0.48, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, WNR1000v4 before 1.1.0.46, WNR2000v5 before 1.0.0.62, WNR2020 before 1.1.0.46, and WNR2050 before 1.1.0.46.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-frc9-c5h9-xvfq/GHSA-frc9-c5h9-xvfq.json b/advisories/unreviewed/2022/05/GHSA-frc9-c5h9-xvfq/GHSA-frc9-c5h9-xvfq.json index 30d9b4450d5..f9d4cb82a00 100644 --- a/advisories/unreviewed/2022/05/GHSA-frc9-c5h9-xvfq/GHSA-frc9-c5h9-xvfq.json +++ b/advisories/unreviewed/2022/05/GHSA-frc9-c5h9-xvfq/GHSA-frc9-c5h9-xvfq.json @@ -7,12 +7,8 @@ "CVE-2020-12130" ], "details": "The AirDisk Pro app 5.5.3 for iOS allows XSS via the deleteFile parameter of the Delete function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fv5w-qgvv-978m/GHSA-fv5w-qgvv-978m.json b/advisories/unreviewed/2022/05/GHSA-fv5w-qgvv-978m/GHSA-fv5w-qgvv-978m.json index 47a9efca590..3ad46a6bcbb 100644 --- a/advisories/unreviewed/2022/05/GHSA-fv5w-qgvv-978m/GHSA-fv5w-qgvv-978m.json +++ b/advisories/unreviewed/2022/05/GHSA-fv5w-qgvv-978m/GHSA-fv5w-qgvv-978m.json @@ -7,12 +7,8 @@ "CVE-2019-19105" ], "details": "The backup function in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway saves the current settings and configuration of the application, including credentials of existing user accounts and other configuration's credentials in plaintext.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fvgx-w879-p88q/GHSA-fvgx-w879-p88q.json b/advisories/unreviewed/2022/05/GHSA-fvgx-w879-p88q/GHSA-fvgx-w879-p88q.json index a397de95a4c..61394435a29 100644 --- a/advisories/unreviewed/2022/05/GHSA-fvgx-w879-p88q/GHSA-fvgx-w879-p88q.json +++ b/advisories/unreviewed/2022/05/GHSA-fvgx-w879-p88q/GHSA-fvgx-w879-p88q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fw32-fpjh-3pcr/GHSA-fw32-fpjh-3pcr.json b/advisories/unreviewed/2022/05/GHSA-fw32-fpjh-3pcr/GHSA-fw32-fpjh-3pcr.json index 5d41a69b52d..61f0d7db497 100644 --- a/advisories/unreviewed/2022/05/GHSA-fw32-fpjh-3pcr/GHSA-fw32-fpjh-3pcr.json +++ b/advisories/unreviewed/2022/05/GHSA-fw32-fpjh-3pcr/GHSA-fw32-fpjh-3pcr.json @@ -7,12 +7,8 @@ "CVE-2020-11822" ], "details": "In Rukovoditel 2.5.2, there is a stored XSS vulnerability on the application structure --> user access groups page. Thus, an attacker can inject malicious script to steal all users' valuable data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fxh6-75xh-52mf/GHSA-fxh6-75xh-52mf.json b/advisories/unreviewed/2022/05/GHSA-fxh6-75xh-52mf/GHSA-fxh6-75xh-52mf.json index 9b84e60296f..e60a5c15455 100644 --- a/advisories/unreviewed/2022/05/GHSA-fxh6-75xh-52mf/GHSA-fxh6-75xh-52mf.json +++ b/advisories/unreviewed/2022/05/GHSA-fxh6-75xh-52mf/GHSA-fxh6-75xh-52mf.json @@ -7,12 +7,8 @@ "CVE-2020-10907" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of widgets in XFA forms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-10650.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fxpf-jghx-j26q/GHSA-fxpf-jghx-j26q.json b/advisories/unreviewed/2022/05/GHSA-fxpf-jghx-j26q/GHSA-fxpf-jghx-j26q.json index 8304cce5d44..90f598e5604 100644 --- a/advisories/unreviewed/2022/05/GHSA-fxpf-jghx-j26q/GHSA-fxpf-jghx-j26q.json +++ b/advisories/unreviewed/2022/05/GHSA-fxpf-jghx-j26q/GHSA-fxpf-jghx-j26q.json @@ -7,12 +7,8 @@ "CVE-2018-21166" ], "details": "Certain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.54, WNDR4500v3 before 1.0.0.54, and WNR2000v5 before 1.0.0.64.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g3p7-74rx-gxm8/GHSA-g3p7-74rx-gxm8.json b/advisories/unreviewed/2022/05/GHSA-g3p7-74rx-gxm8/GHSA-g3p7-74rx-gxm8.json index 2bd8d07f3f0..c2900cf9c31 100644 --- a/advisories/unreviewed/2022/05/GHSA-g3p7-74rx-gxm8/GHSA-g3p7-74rx-gxm8.json +++ b/advisories/unreviewed/2022/05/GHSA-g3p7-74rx-gxm8/GHSA-g3p7-74rx-gxm8.json @@ -7,12 +7,8 @@ "CVE-2017-18730" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6020 before 1.0.0.30, R6080 before 1.0.0.30, R6120 before 1.0.0.36, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g449-3r9g-f763/GHSA-g449-3r9g-f763.json b/advisories/unreviewed/2022/05/GHSA-g449-3r9g-f763/GHSA-g449-3r9g-f763.json index 7b53f9dad84..1ce49227160 100644 --- a/advisories/unreviewed/2022/05/GHSA-g449-3r9g-f763/GHSA-g449-3r9g-f763.json +++ b/advisories/unreviewed/2022/05/GHSA-g449-3r9g-f763/GHSA-g449-3r9g-f763.json @@ -7,12 +7,8 @@ "CVE-2020-11817" ], "details": "In Rukovoditel V2.5.2, attackers can upload an arbitrary file to the server just changing the the content-type value. As a result of that, an attacker can execute a command on the server. This specific attack only occurs with the Maintenance Mode setting.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g5c2-3wp7-9jw2/GHSA-g5c2-3wp7-9jw2.json b/advisories/unreviewed/2022/05/GHSA-g5c2-3wp7-9jw2/GHSA-g5c2-3wp7-9jw2.json index d39e63f2de1..927baae3ce4 100644 --- a/advisories/unreviewed/2022/05/GHSA-g5c2-3wp7-9jw2/GHSA-g5c2-3wp7-9jw2.json +++ b/advisories/unreviewed/2022/05/GHSA-g5c2-3wp7-9jw2/GHSA-g5c2-3wp7-9jw2.json @@ -7,12 +7,8 @@ "CVE-2018-21182" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, and WNDR4300 before 1.0.2.94.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g9gr-wpgx-7w72/GHSA-g9gr-wpgx-7w72.json b/advisories/unreviewed/2022/05/GHSA-g9gr-wpgx-7w72/GHSA-g9gr-wpgx-7w72.json index 3dc7c3fba8f..1f07452204e 100644 --- a/advisories/unreviewed/2022/05/GHSA-g9gr-wpgx-7w72/GHSA-g9gr-wpgx-7w72.json +++ b/advisories/unreviewed/2022/05/GHSA-g9gr-wpgx-7w72/GHSA-g9gr-wpgx-7w72.json @@ -7,12 +7,8 @@ "CVE-2020-12273" ], "details": "In TestLink 1.9.20, a crafted login.php viewer parameter exposes cleartext credentials.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gc4f-c94v-r57x/GHSA-gc4f-c94v-r57x.json b/advisories/unreviewed/2022/05/GHSA-gc4f-c94v-r57x/GHSA-gc4f-c94v-r57x.json index b06a9998bec..3b64b2272b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-gc4f-c94v-r57x/GHSA-gc4f-c94v-r57x.json +++ b/advisories/unreviewed/2022/05/GHSA-gc4f-c94v-r57x/GHSA-gc4f-c94v-r57x.json @@ -7,12 +7,8 @@ "CVE-2018-21108" ], "details": "NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gc7p-56pp-56qv/GHSA-gc7p-56pp-56qv.json b/advisories/unreviewed/2022/05/GHSA-gc7p-56pp-56qv/GHSA-gc7p-56pp-56qv.json index ff970089a0b..c72992e7f29 100644 --- a/advisories/unreviewed/2022/05/GHSA-gc7p-56pp-56qv/GHSA-gc7p-56pp-56qv.json +++ b/advisories/unreviewed/2022/05/GHSA-gc7p-56pp-56qv/GHSA-gc7p-56pp-56qv.json @@ -7,12 +7,8 @@ "CVE-2018-21205" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D7800 before 1.0.1.30, EX2700 before 1.0.1.28, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WN2000RPTv3 before 1.0.1.20, WN3000RPv3 before 1.0.2.50, WN3100RPv2 before 1.0.0.56, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gcgh-jch3-mpcp/GHSA-gcgh-jch3-mpcp.json b/advisories/unreviewed/2022/05/GHSA-gcgh-jch3-mpcp/GHSA-gcgh-jch3-mpcp.json index 96e619aa8a3..bfd93475963 100644 --- a/advisories/unreviewed/2022/05/GHSA-gcgh-jch3-mpcp/GHSA-gcgh-jch3-mpcp.json +++ b/advisories/unreviewed/2022/05/GHSA-gcgh-jch3-mpcp/GHSA-gcgh-jch3-mpcp.json @@ -7,12 +7,8 @@ "CVE-2016-11056" ], "details": "Certain NETGEAR devices are affected by anonymous root access. This affects ReadyNAS Surveillance 1.1.1-3-armel and earlier and ReadyNAS Surveillance 1.4.1-3-amd64 and earlier.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ggf6-gp83-vf32/GHSA-ggf6-gp83-vf32.json b/advisories/unreviewed/2022/05/GHSA-ggf6-gp83-vf32/GHSA-ggf6-gp83-vf32.json index d7695d0c1c4..818b4330e6a 100644 --- a/advisories/unreviewed/2022/05/GHSA-ggf6-gp83-vf32/GHSA-ggf6-gp83-vf32.json +++ b/advisories/unreviewed/2022/05/GHSA-ggf6-gp83-vf32/GHSA-ggf6-gp83-vf32.json @@ -7,12 +7,8 @@ "CVE-2018-21094" ], "details": "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects WAC120 before 2.1.7, WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, WND930 before 2.1.5, and WN604 before 3.3.10.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ggmc-w68r-85j5/GHSA-ggmc-w68r-85j5.json b/advisories/unreviewed/2022/05/GHSA-ggmc-w68r-85j5/GHSA-ggmc-w68r-85j5.json index 5f29a39ef04..15b3a2ac806 100644 --- a/advisories/unreviewed/2022/05/GHSA-ggmc-w68r-85j5/GHSA-ggmc-w68r-85j5.json +++ b/advisories/unreviewed/2022/05/GHSA-ggmc-w68r-85j5/GHSA-ggmc-w68r-85j5.json @@ -7,12 +7,8 @@ "CVE-2020-11688" ], "details": "In JetBrains TeamCity before 2019.2.1, the application state is kept alive after a user ends his session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ggvj-5g32-658q/GHSA-ggvj-5g32-658q.json b/advisories/unreviewed/2022/05/GHSA-ggvj-5g32-658q/GHSA-ggvj-5g32-658q.json index 282684c9e93..1cbcc01b06c 100644 --- a/advisories/unreviewed/2022/05/GHSA-ggvj-5g32-658q/GHSA-ggvj-5g32-658q.json +++ b/advisories/unreviewed/2022/05/GHSA-ggvj-5g32-658q/GHSA-ggvj-5g32-658q.json @@ -7,12 +7,8 @@ "CVE-2016-11061" ], "details": "Xerox WorkCentre 3655, 3655i, 58XX, 58XXi, 59XX, 59XXi, 6655, 6655i, 72XX, 72XXi, 78XX, 78XXi, 7970, and 7970i devices before 073.xxx.086.15410 do not properly escape parameters in the support/remoteUI/configrui.php script, which can allow an unauthenticated attacker to execute OS commands on the device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gjhj-x9gj-4h6r/GHSA-gjhj-x9gj-4h6r.json b/advisories/unreviewed/2022/05/GHSA-gjhj-x9gj-4h6r/GHSA-gjhj-x9gj-4h6r.json index 7732697b10c..2810d662274 100644 --- a/advisories/unreviewed/2022/05/GHSA-gjhj-x9gj-4h6r/GHSA-gjhj-x9gj-4h6r.json +++ b/advisories/unreviewed/2022/05/GHSA-gjhj-x9gj-4h6r/GHSA-gjhj-x9gj-4h6r.json @@ -7,12 +7,8 @@ "CVE-2020-12131" ], "details": "The AirDisk Pro app 5.5.3 for iOS allows XSS via the devicename parameter (shown next to the UI logo).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gjhm-rrgg-666g/GHSA-gjhm-rrgg-666g.json b/advisories/unreviewed/2022/05/GHSA-gjhm-rrgg-666g/GHSA-gjhm-rrgg-666g.json index bdd575db947..5db0a9dc571 100644 --- a/advisories/unreviewed/2022/05/GHSA-gjhm-rrgg-666g/GHSA-gjhm-rrgg-666g.json +++ b/advisories/unreviewed/2022/05/GHSA-gjhm-rrgg-666g/GHSA-gjhm-rrgg-666g.json @@ -7,12 +7,8 @@ "CVE-2020-5873" ], "details": "On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.6.1-11.6.5 and BIG-IQ 5.2.0-7.1.0, a user associated with the Resource Administrator role who has access to the secure copy (scp) utility but does not have access to Advanced Shell (bash) can execute arbitrary commands using a maliciously crafted scp request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gpj9-8hf3-rw52/GHSA-gpj9-8hf3-rw52.json b/advisories/unreviewed/2022/05/GHSA-gpj9-8hf3-rw52/GHSA-gpj9-8hf3-rw52.json index c7437868a8c..9f0eed66755 100644 --- a/advisories/unreviewed/2022/05/GHSA-gpj9-8hf3-rw52/GHSA-gpj9-8hf3-rw52.json +++ b/advisories/unreviewed/2022/05/GHSA-gpj9-8hf3-rw52/GHSA-gpj9-8hf3-rw52.json @@ -7,12 +7,8 @@ "CVE-2019-5618" ], "details": "A-PDF WAV to MP3 version 1.0.0 suffers from an instance of CWE-121: Stack-based Buffer Overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gpwm-c4mv-wgxh/GHSA-gpwm-c4mv-wgxh.json b/advisories/unreviewed/2022/05/GHSA-gpwm-c4mv-wgxh/GHSA-gpwm-c4mv-wgxh.json index 169313cfd4c..ba857227ca2 100644 --- a/advisories/unreviewed/2022/05/GHSA-gpwm-c4mv-wgxh/GHSA-gpwm-c4mv-wgxh.json +++ b/advisories/unreviewed/2022/05/GHSA-gpwm-c4mv-wgxh/GHSA-gpwm-c4mv-wgxh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gqf4-w7p4-pm73/GHSA-gqf4-w7p4-pm73.json b/advisories/unreviewed/2022/05/GHSA-gqf4-w7p4-pm73/GHSA-gqf4-w7p4-pm73.json index 3bbde9015b0..28f2d8b5645 100644 --- a/advisories/unreviewed/2022/05/GHSA-gqf4-w7p4-pm73/GHSA-gqf4-w7p4-pm73.json +++ b/advisories/unreviewed/2022/05/GHSA-gqf4-w7p4-pm73/GHSA-gqf4-w7p4-pm73.json @@ -7,12 +7,8 @@ "CVE-2019-12864" ], "details": "SolarWinds Orion Platform 2018.4 HF3 (NPM 12.4, NetPath 1.1.4) is vulnerable to Information Leakage, because of improper error handling with stack traces, as demonstrated by discovering a full pathname upon a 500 Internal Server Error via the api2/swis/query?lang=en-us&swAlertOnError=false query parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gqp3-mrf6-72gm/GHSA-gqp3-mrf6-72gm.json b/advisories/unreviewed/2022/05/GHSA-gqp3-mrf6-72gm/GHSA-gqp3-mrf6-72gm.json index dbf40730722..f7b49afa105 100644 --- a/advisories/unreviewed/2022/05/GHSA-gqp3-mrf6-72gm/GHSA-gqp3-mrf6-72gm.json +++ b/advisories/unreviewed/2022/05/GHSA-gqp3-mrf6-72gm/GHSA-gqp3-mrf6-72gm.json @@ -7,12 +7,8 @@ "CVE-2017-18705" ], "details": "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.28, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.88, WNDR4300 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gqqx-2pfx-73vq/GHSA-gqqx-2pfx-73vq.json b/advisories/unreviewed/2022/05/GHSA-gqqx-2pfx-73vq/GHSA-gqqx-2pfx-73vq.json index 57ac52dd0a5..60acb145175 100644 --- a/advisories/unreviewed/2022/05/GHSA-gqqx-2pfx-73vq/GHSA-gqqx-2pfx-73vq.json +++ b/advisories/unreviewed/2022/05/GHSA-gqqx-2pfx-73vq/GHSA-gqqx-2pfx-73vq.json @@ -7,12 +7,8 @@ "CVE-2018-21178" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gr6m-w52c-x634/GHSA-gr6m-w52c-x634.json b/advisories/unreviewed/2022/05/GHSA-gr6m-w52c-x634/GHSA-gr6m-w52c-x634.json index 72fc81930d2..c5c3c786f48 100644 --- a/advisories/unreviewed/2022/05/GHSA-gr6m-w52c-x634/GHSA-gr6m-w52c-x634.json +++ b/advisories/unreviewed/2022/05/GHSA-gr6m-w52c-x634/GHSA-gr6m-w52c-x634.json @@ -7,12 +7,8 @@ "CVE-2020-5864" ], "details": "In versions of NGINX Controller prior to 3.2.0, communication between NGINX Controller and NGINX Plus instances skip TLS verification by default.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gr95-74q9-27w4/GHSA-gr95-74q9-27w4.json b/advisories/unreviewed/2022/05/GHSA-gr95-74q9-27w4/GHSA-gr95-74q9-27w4.json index 9f6bd0d7846..07157bc11cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-gr95-74q9-27w4/GHSA-gr95-74q9-27w4.json +++ b/advisories/unreviewed/2022/05/GHSA-gr95-74q9-27w4/GHSA-gr95-74q9-27w4.json @@ -7,12 +7,8 @@ "CVE-2017-18709" ], "details": "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R8300 before 1.0.2.94 and R8500 before 1.0.2.94.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-grcc-xgjx-xwf8/GHSA-grcc-xgjx-xwf8.json b/advisories/unreviewed/2022/05/GHSA-grcc-xgjx-xwf8/GHSA-grcc-xgjx-xwf8.json index 47eafdfa618..75ef2aaaca9 100644 --- a/advisories/unreviewed/2022/05/GHSA-grcc-xgjx-xwf8/GHSA-grcc-xgjx-xwf8.json +++ b/advisories/unreviewed/2022/05/GHSA-grcc-xgjx-xwf8/GHSA-grcc-xgjx-xwf8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-grfx-46mw-p6mw/GHSA-grfx-46mw-p6mw.json b/advisories/unreviewed/2022/05/GHSA-grfx-46mw-p6mw/GHSA-grfx-46mw-p6mw.json index 5edbd17eb09..d560bd39695 100644 --- a/advisories/unreviewed/2022/05/GHSA-grfx-46mw-p6mw/GHSA-grfx-46mw-p6mw.json +++ b/advisories/unreviewed/2022/05/GHSA-grfx-46mw-p6mw/GHSA-grfx-46mw-p6mw.json @@ -7,12 +7,8 @@ "CVE-2020-11539" ], "details": "An issue was discovered on Tata Sonata Smart SF Rush 1.12 devices. It has been identified that the smart band has no pairing (mode 0 Bluetooth LE security level) The data being transmitted over the air is not encrypted. Adding to this, the data being sent to the smart band doesn't have any authentication or signature verification. Thus, any attacker can control a parameter of the device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gwvf-7jv8-5g47/GHSA-gwvf-7jv8-5g47.json b/advisories/unreviewed/2022/05/GHSA-gwvf-7jv8-5g47/GHSA-gwvf-7jv8-5g47.json index 32d1d2a8ee1..b7d5434aac7 100644 --- a/advisories/unreviewed/2022/05/GHSA-gwvf-7jv8-5g47/GHSA-gwvf-7jv8-5g47.json +++ b/advisories/unreviewed/2022/05/GHSA-gwvf-7jv8-5g47/GHSA-gwvf-7jv8-5g47.json @@ -7,12 +7,8 @@ "CVE-2019-5621" ], "details": "ABBS Software Audio Media Player version 3.1 suffers from an instance of CWE-121: Stack-based Buffer Overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gxjf-ghq5-m6mr/GHSA-gxjf-ghq5-m6mr.json b/advisories/unreviewed/2022/05/GHSA-gxjf-ghq5-m6mr/GHSA-gxjf-ghq5-m6mr.json index bcee76d25de..7f70f968659 100644 --- a/advisories/unreviewed/2022/05/GHSA-gxjf-ghq5-m6mr/GHSA-gxjf-ghq5-m6mr.json +++ b/advisories/unreviewed/2022/05/GHSA-gxjf-ghq5-m6mr/GHSA-gxjf-ghq5-m6mr.json @@ -7,12 +7,8 @@ "CVE-2020-10641" ], "details": "An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication. This results in consuming the entire available hard-disk space on the Ignition 8 Gateway (versions prior to 8.0.10), causing a denial-of-service condition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h2mm-g92w-3c7r/GHSA-h2mm-g92w-3c7r.json b/advisories/unreviewed/2022/05/GHSA-h2mm-g92w-3c7r/GHSA-h2mm-g92w-3c7r.json index 8984102e876..34484393779 100644 --- a/advisories/unreviewed/2022/05/GHSA-h2mm-g92w-3c7r/GHSA-h2mm-g92w-3c7r.json +++ b/advisories/unreviewed/2022/05/GHSA-h2mm-g92w-3c7r/GHSA-h2mm-g92w-3c7r.json @@ -7,12 +7,8 @@ "CVE-2020-5878" ], "details": "On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.1, and 14.1.0-14.1.2.3, Traffic Management Microkernel (TMM) may restart on BIG-IP Virtual Edition (VE) while processing unusual IP traffic.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h33p-ww5q-vgqq/GHSA-h33p-ww5q-vgqq.json b/advisories/unreviewed/2022/05/GHSA-h33p-ww5q-vgqq/GHSA-h33p-ww5q-vgqq.json index 233c936670c..4dc8adf8f38 100644 --- a/advisories/unreviewed/2022/05/GHSA-h33p-ww5q-vgqq/GHSA-h33p-ww5q-vgqq.json +++ b/advisories/unreviewed/2022/05/GHSA-h33p-ww5q-vgqq/GHSA-h33p-ww5q-vgqq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h3c2-96hp-53g3/GHSA-h3c2-96hp-53g3.json b/advisories/unreviewed/2022/05/GHSA-h3c2-96hp-53g3/GHSA-h3c2-96hp-53g3.json index 33a4dd974d0..7fc798911d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-h3c2-96hp-53g3/GHSA-h3c2-96hp-53g3.json +++ b/advisories/unreviewed/2022/05/GHSA-h3c2-96hp-53g3/GHSA-h3c2-96hp-53g3.json @@ -7,12 +7,8 @@ "CVE-2020-11940" ], "details": "In nDPI through 3.2 Stable, an out-of-bounds read in concat_hash_string in ssh.c can be exploited by a network-positioned attacker that can send malformed SSH protocol messages on a network segment monitored by nDPI's library.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h3v6-7pr7-g4cp/GHSA-h3v6-7pr7-g4cp.json b/advisories/unreviewed/2022/05/GHSA-h3v6-7pr7-g4cp/GHSA-h3v6-7pr7-g4cp.json index f9c4b2a2926..3c1a607225a 100644 --- a/advisories/unreviewed/2022/05/GHSA-h3v6-7pr7-g4cp/GHSA-h3v6-7pr7-g4cp.json +++ b/advisories/unreviewed/2022/05/GHSA-h3v6-7pr7-g4cp/GHSA-h3v6-7pr7-g4cp.json @@ -7,12 +7,8 @@ "CVE-2016-11058" ], "details": "The NETGEAR genie application before 2.4.34 for Android is affected by mishandling of hard-coded API keys and session IDs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h49q-c69p-4gqp/GHSA-h49q-c69p-4gqp.json b/advisories/unreviewed/2022/05/GHSA-h49q-c69p-4gqp/GHSA-h49q-c69p-4gqp.json index 46c62075c45..d2916ad8ffd 100644 --- a/advisories/unreviewed/2022/05/GHSA-h49q-c69p-4gqp/GHSA-h49q-c69p-4gqp.json +++ b/advisories/unreviewed/2022/05/GHSA-h49q-c69p-4gqp/GHSA-h49q-c69p-4gqp.json @@ -7,12 +7,8 @@ "CVE-2020-5882" ], "details": "On BIG-IP 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5, and 11.6.1-11.6.5.1, under certain conditions, the Intel QuickAssist Technology (QAT) cryptography driver may produce a Traffic Management Microkernel (TMM) core file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h5g7-x752-wjh8/GHSA-h5g7-x752-wjh8.json b/advisories/unreviewed/2022/05/GHSA-h5g7-x752-wjh8/GHSA-h5g7-x752-wjh8.json index d2f4eaf86c6..b8122610882 100644 --- a/advisories/unreviewed/2022/05/GHSA-h5g7-x752-wjh8/GHSA-h5g7-x752-wjh8.json +++ b/advisories/unreviewed/2022/05/GHSA-h5g7-x752-wjh8/GHSA-h5g7-x752-wjh8.json @@ -7,12 +7,8 @@ "CVE-2019-15793" ], "details": "In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, several locations which shift ids translate user/group ids before performing operations in the lower filesystem were translating them into init_user_ns, whereas they should have been translated into the s_user_ns for the lower filesystem. This resulted in using ids other than the intended ones in the lower fs, which likely did not map into the shifts s_user_ns. A local attacker could use this to possibly bypass discretionary access control permissions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h5rh-p5wr-2cfm/GHSA-h5rh-p5wr-2cfm.json b/advisories/unreviewed/2022/05/GHSA-h5rh-p5wr-2cfm/GHSA-h5rh-p5wr-2cfm.json index 291786c66b0..fa42302bd3a 100644 --- a/advisories/unreviewed/2022/05/GHSA-h5rh-p5wr-2cfm/GHSA-h5rh-p5wr-2cfm.json +++ b/advisories/unreviewed/2022/05/GHSA-h5rh-p5wr-2cfm/GHSA-h5rh-p5wr-2cfm.json @@ -7,12 +7,8 @@ "CVE-2017-18702" ], "details": "NETGEAR R6220 devices before 1.1.0.60 are affected by incorrect configuration of security settings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h63v-gfwm-6xjc/GHSA-h63v-gfwm-6xjc.json b/advisories/unreviewed/2022/05/GHSA-h63v-gfwm-6xjc/GHSA-h63v-gfwm-6xjc.json index dc447f1f028..b92f21eb98f 100644 --- a/advisories/unreviewed/2022/05/GHSA-h63v-gfwm-6xjc/GHSA-h63v-gfwm-6xjc.json +++ b/advisories/unreviewed/2022/05/GHSA-h63v-gfwm-6xjc/GHSA-h63v-gfwm-6xjc.json @@ -7,12 +7,8 @@ "CVE-2017-18750" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h6rc-vr2x-3g27/GHSA-h6rc-vr2x-3g27.json b/advisories/unreviewed/2022/05/GHSA-h6rc-vr2x-3g27/GHSA-h6rc-vr2x-3g27.json index f06a63f124d..9530980bad9 100644 --- a/advisories/unreviewed/2022/05/GHSA-h6rc-vr2x-3g27/GHSA-h6rc-vr2x-3g27.json +++ b/advisories/unreviewed/2022/05/GHSA-h6rc-vr2x-3g27/GHSA-h6rc-vr2x-3g27.json @@ -7,12 +7,8 @@ "CVE-2020-5892" ], "details": "In versions 7.1.5-7.1.8, the BIG-IP Edge Client components in BIG-IP APM, Edge Gateway, and FirePass legacy allow attackers to obtain the full session ID from process memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h92g-5h7r-qg2w/GHSA-h92g-5h7r-qg2w.json b/advisories/unreviewed/2022/05/GHSA-h92g-5h7r-qg2w/GHSA-h92g-5h7r-qg2w.json index 8f24dbff0b0..fd5ccbdf510 100644 --- a/advisories/unreviewed/2022/05/GHSA-h92g-5h7r-qg2w/GHSA-h92g-5h7r-qg2w.json +++ b/advisories/unreviewed/2022/05/GHSA-h92g-5h7r-qg2w/GHSA-h92g-5h7r-qg2w.json @@ -7,12 +7,8 @@ "CVE-2020-8477" ], "details": "The installations for ABB System 800xA Information Manager versions 5.1, 6.0 to 6.0.3.2 and 6.1 wrongly contain an auxiliary component. An attacker is able to use this for an XSS-like attack to an authenticated local user, which might lead to execution of arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h9jj-wqg8-3p2q/GHSA-h9jj-wqg8-3p2q.json b/advisories/unreviewed/2022/05/GHSA-h9jj-wqg8-3p2q/GHSA-h9jj-wqg8-3p2q.json index 6c9e14e1225..0fe1c53e35a 100644 --- a/advisories/unreviewed/2022/05/GHSA-h9jj-wqg8-3p2q/GHSA-h9jj-wqg8-3p2q.json +++ b/advisories/unreviewed/2022/05/GHSA-h9jj-wqg8-3p2q/GHSA-h9jj-wqg8-3p2q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hcfw-8p6f-qf35/GHSA-hcfw-8p6f-qf35.json b/advisories/unreviewed/2022/05/GHSA-hcfw-8p6f-qf35/GHSA-hcfw-8p6f-qf35.json index 9b467463c65..76b6fe7d061 100644 --- a/advisories/unreviewed/2022/05/GHSA-hcfw-8p6f-qf35/GHSA-hcfw-8p6f-qf35.json +++ b/advisories/unreviewed/2022/05/GHSA-hcfw-8p6f-qf35/GHSA-hcfw-8p6f-qf35.json @@ -7,12 +7,8 @@ "CVE-2019-19100" ], "details": "A privilege escalation vulnerability in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.4SP, <. 4.6.3SP, < 4.7.2 and < 4.8.1 allow authenticated users to delete arbitrary files via an exposed interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hfjg-h7gm-7j9g/GHSA-hfjg-h7gm-7j9g.json b/advisories/unreviewed/2022/05/GHSA-hfjg-h7gm-7j9g/GHSA-hfjg-h7gm-7j9g.json index e26b40da401..fb086d0e973 100644 --- a/advisories/unreviewed/2022/05/GHSA-hfjg-h7gm-7j9g/GHSA-hfjg-h7gm-7j9g.json +++ b/advisories/unreviewed/2022/05/GHSA-hfjg-h7gm-7j9g/GHSA-hfjg-h7gm-7j9g.json @@ -7,12 +7,8 @@ "CVE-2020-12246" ], "details": "Beeline Smart Box 2.0.38 routers allow \"Advanced settings > Other > Diagnostics\" OS command injection via the Ping ping_ipaddr parameter, the Nslookup nslookup_ipaddr parameter, or the Traceroute traceroute_ipaddr parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hhj9-744r-pjmr/GHSA-hhj9-744r-pjmr.json b/advisories/unreviewed/2022/05/GHSA-hhj9-744r-pjmr/GHSA-hhj9-744r-pjmr.json index a693e41b80c..7a66dea97cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-hhj9-744r-pjmr/GHSA-hhj9-744r-pjmr.json +++ b/advisories/unreviewed/2022/05/GHSA-hhj9-744r-pjmr/GHSA-hhj9-744r-pjmr.json @@ -7,12 +7,8 @@ "CVE-2017-18700" ], "details": "Certain NETGEAR devices are affected by stored XSS. This affects D6400 before 1.0.0.60, D7000 before 1.0.1.50, D8500 before 1.0.3.29, EX6200 before 1.0.3.84, EX7000 before 1.0.0.60, R6250 before 1.0.4.16, R6300v2 before 1.0.4.18, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.36, R6900 before 1.0.1.34, R6900P before 1.3.0.8, R7000 before 1.0.9.14, R7000P before 1.3.0.8, R7100LG before 1.0.0.34, R7300DST before 1.0.0.56, R7900 before 1.0.1.26, R8000 before 1.0.4.4, R8300 before 1.0.2.106, R8500 before 1.0.2.106, R9000 before 1.0.2.52, WNDR3400v3 before 1.0.1.16, WNR3500Lv2 before 1.2.0.46, and WNDR3700v5 before 1.1.0.48.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hjpp-qfqw-hpvq/GHSA-hjpp-qfqw-hpvq.json b/advisories/unreviewed/2022/05/GHSA-hjpp-qfqw-hpvq/GHSA-hjpp-qfqw-hpvq.json index f66a0203e46..ed94275a4d0 100644 --- a/advisories/unreviewed/2022/05/GHSA-hjpp-qfqw-hpvq/GHSA-hjpp-qfqw-hpvq.json +++ b/advisories/unreviewed/2022/05/GHSA-hjpp-qfqw-hpvq/GHSA-hjpp-qfqw-hpvq.json @@ -7,12 +7,8 @@ "CVE-2020-8478" ], "details": "Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl (all published versions) enables an attacker authenticated on the local system to inject data, affecting the online view of runtime data shown in Control Builder.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hp96-66jq-q83w/GHSA-hp96-66jq-q83w.json b/advisories/unreviewed/2022/05/GHSA-hp96-66jq-q83w/GHSA-hp96-66jq-q83w.json index 9ae8e863692..5259d5082a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-hp96-66jq-q83w/GHSA-hp96-66jq-q83w.json +++ b/advisories/unreviewed/2022/05/GHSA-hp96-66jq-q83w/GHSA-hp96-66jq-q83w.json @@ -7,12 +7,8 @@ "CVE-2020-12443" ], "details": "BigBlueButton before 2.2.6 allows remote attackers to read arbitrary files because the presfilename (lowercase) value can be a .pdf filename while the presFilename (mixed case) value has a ../ sequence. This can be leveraged for privilege escalation via a directory traversal to bigbluebutton.properties. NOTE: this issue exists because of an ineffective mitigation to CVE-2020-12112 in which there was an attempted fix within an NGINX configuration file, without considering that the relevant part of NGINX is case-insensitive.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hqfw-vf2f-82m6/GHSA-hqfw-vf2f-82m6.json b/advisories/unreviewed/2022/05/GHSA-hqfw-vf2f-82m6/GHSA-hqfw-vf2f-82m6.json index 30c15c4d32a..18068e77fa8 100644 --- a/advisories/unreviewed/2022/05/GHSA-hqfw-vf2f-82m6/GHSA-hqfw-vf2f-82m6.json +++ b/advisories/unreviewed/2022/05/GHSA-hqfw-vf2f-82m6/GHSA-hqfw-vf2f-82m6.json @@ -7,12 +7,8 @@ "CVE-2017-18747" ], "details": "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6000 before 1.0.0.24, EX6130 before 1.0.0.16, EX6400 before 1.0.1.60, EX7000 before 1.0.0.50, EX7300 before 1.0.1.60, and WN2500RPv2 before 1.0.1.46.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hrcg-cm8q-2p63/GHSA-hrcg-cm8q-2p63.json b/advisories/unreviewed/2022/05/GHSA-hrcg-cm8q-2p63/GHSA-hrcg-cm8q-2p63.json index da239a2b3f5..c320fd12cc9 100644 --- a/advisories/unreviewed/2022/05/GHSA-hrcg-cm8q-2p63/GHSA-hrcg-cm8q-2p63.json +++ b/advisories/unreviewed/2022/05/GHSA-hrcg-cm8q-2p63/GHSA-hrcg-cm8q-2p63.json @@ -7,12 +7,8 @@ "CVE-2017-18854" ], "details": "NETGEAR ReadyNAS 6.6.1 and earlier is affected by command injection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hrg7-wpcc-67w2/GHSA-hrg7-wpcc-67w2.json b/advisories/unreviewed/2022/05/GHSA-hrg7-wpcc-67w2/GHSA-hrg7-wpcc-67w2.json index 715f607888e..6393c06fb14 100644 --- a/advisories/unreviewed/2022/05/GHSA-hrg7-wpcc-67w2/GHSA-hrg7-wpcc-67w2.json +++ b/advisories/unreviewed/2022/05/GHSA-hrg7-wpcc-67w2/GHSA-hrg7-wpcc-67w2.json @@ -7,12 +7,8 @@ "CVE-2020-4329" ], "details": "IBM WebSphere Application Server 7.0, 8.0, 8.5, 9.0 and Liberty 17.0.0.3 through 20.0.0.4 could allow a remote, authenticated attacker to obtain sensitive information, caused by improper parameter checking. This could be exploited to conduct spoofing attacks. IBM X-Force ID: 177841.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hrmh-xxcw-xmxc/GHSA-hrmh-xxcw-xmxc.json b/advisories/unreviewed/2022/05/GHSA-hrmh-xxcw-xmxc/GHSA-hrmh-xxcw-xmxc.json index 851b7e32bd7..bcb01bbcd7a 100644 --- a/advisories/unreviewed/2022/05/GHSA-hrmh-xxcw-xmxc/GHSA-hrmh-xxcw-xmxc.json +++ b/advisories/unreviewed/2022/05/GHSA-hrmh-xxcw-xmxc/GHSA-hrmh-xxcw-xmxc.json @@ -7,12 +7,8 @@ "CVE-2018-21172" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hwhg-29mc-hmmj/GHSA-hwhg-29mc-hmmj.json b/advisories/unreviewed/2022/05/GHSA-hwhg-29mc-hmmj/GHSA-hwhg-29mc-hmmj.json index 33d51ff493a..ebac996acb7 100644 --- a/advisories/unreviewed/2022/05/GHSA-hwhg-29mc-hmmj/GHSA-hwhg-29mc-hmmj.json +++ b/advisories/unreviewed/2022/05/GHSA-hwhg-29mc-hmmj/GHSA-hwhg-29mc-hmmj.json @@ -7,12 +7,8 @@ "CVE-2017-18727" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j2xc-9j7j-f2wj/GHSA-j2xc-9j7j-f2wj.json b/advisories/unreviewed/2022/05/GHSA-j2xc-9j7j-f2wj/GHSA-j2xc-9j7j-f2wj.json index 75db81e2d08..9ea70dae017 100644 --- a/advisories/unreviewed/2022/05/GHSA-j2xc-9j7j-f2wj/GHSA-j2xc-9j7j-f2wj.json +++ b/advisories/unreviewed/2022/05/GHSA-j2xc-9j7j-f2wj/GHSA-j2xc-9j7j-f2wj.json @@ -7,12 +7,8 @@ "CVE-2018-21130" ], "details": "Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j3c8-2mg3-x49v/GHSA-j3c8-2mg3-x49v.json b/advisories/unreviewed/2022/05/GHSA-j3c8-2mg3-x49v/GHSA-j3c8-2mg3-x49v.json index 76bf2746727..4c303586ce3 100644 --- a/advisories/unreviewed/2022/05/GHSA-j3c8-2mg3-x49v/GHSA-j3c8-2mg3-x49v.json +++ b/advisories/unreviewed/2022/05/GHSA-j3c8-2mg3-x49v/GHSA-j3c8-2mg3-x49v.json @@ -7,12 +7,8 @@ "CVE-2020-5884" ], "details": "On versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.4, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the default deployment mode for BIG-IP high availability (HA) pair mirroring is insecure. This is a control plane issue that is exposed only on the network used for mirroring.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j43g-xjfm-r8v4/GHSA-j43g-xjfm-r8v4.json b/advisories/unreviewed/2022/05/GHSA-j43g-xjfm-r8v4/GHSA-j43g-xjfm-r8v4.json index 9922533ecec..8fca98d9d6d 100644 --- a/advisories/unreviewed/2022/05/GHSA-j43g-xjfm-r8v4/GHSA-j43g-xjfm-r8v4.json +++ b/advisories/unreviewed/2022/05/GHSA-j43g-xjfm-r8v4/GHSA-j43g-xjfm-r8v4.json @@ -7,12 +7,8 @@ "CVE-2020-1806" ], "details": "Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities. Certain driver program does not sufficiently validate certain parameters received, that would lead to several bytes out of bound read. Successful exploit may cause information disclosure or service abnormal. This is 3 out of 3 out of bounds vulnerabilities found. Different than CVE-2020-1804 and CVE-2020-1805.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j472-w4m9-xqxg/GHSA-j472-w4m9-xqxg.json b/advisories/unreviewed/2022/05/GHSA-j472-w4m9-xqxg/GHSA-j472-w4m9-xqxg.json index 6482d08981d..09c2d1dfbad 100644 --- a/advisories/unreviewed/2022/05/GHSA-j472-w4m9-xqxg/GHSA-j472-w4m9-xqxg.json +++ b/advisories/unreviewed/2022/05/GHSA-j472-w4m9-xqxg/GHSA-j472-w4m9-xqxg.json @@ -7,12 +7,8 @@ "CVE-2019-19218" ], "details": "BMC Control-M/Agent 7.0.00.000 has Insecure Password Storage.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j56x-wj9x-qhm9/GHSA-j56x-wj9x-qhm9.json b/advisories/unreviewed/2022/05/GHSA-j56x-wj9x-qhm9/GHSA-j56x-wj9x-qhm9.json index 3b766c0bb03..75ceb5f48ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-j56x-wj9x-qhm9/GHSA-j56x-wj9x-qhm9.json +++ b/advisories/unreviewed/2022/05/GHSA-j56x-wj9x-qhm9/GHSA-j56x-wj9x-qhm9.json @@ -7,12 +7,8 @@ "CVE-2018-21175" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.57, R6100 before 1.0.1.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j59j-93jf-69cc/GHSA-j59j-93jf-69cc.json b/advisories/unreviewed/2022/05/GHSA-j59j-93jf-69cc/GHSA-j59j-93jf-69cc.json index e50acc3357f..90b8be33eb4 100644 --- a/advisories/unreviewed/2022/05/GHSA-j59j-93jf-69cc/GHSA-j59j-93jf-69cc.json +++ b/advisories/unreviewed/2022/05/GHSA-j59j-93jf-69cc/GHSA-j59j-93jf-69cc.json @@ -7,12 +7,8 @@ "CVE-2018-21206" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D7800 before 1.0.1.30, EX2700 before 1.0.1.28, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WN2000RPTv3 before 1.0.1.20, WN3000RPv3 before 1.0.2.50, WN3100RPv2 before 1.0.0.56, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j5rp-qhhj-8vw3/GHSA-j5rp-qhhj-8vw3.json b/advisories/unreviewed/2022/05/GHSA-j5rp-qhhj-8vw3/GHSA-j5rp-qhhj-8vw3.json index a583d3d9135..05f4e2cd819 100644 --- a/advisories/unreviewed/2022/05/GHSA-j5rp-qhhj-8vw3/GHSA-j5rp-qhhj-8vw3.json +++ b/advisories/unreviewed/2022/05/GHSA-j5rp-qhhj-8vw3/GHSA-j5rp-qhhj-8vw3.json @@ -7,12 +7,8 @@ "CVE-2018-21163" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects DGN2200Bv4 before 1.0.0.102, DGN2200v4 before 1.0.0.102, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70, EX6000 before 1.0.0.30, EX6100 before 1.0.2.22, EX6120 before 1.0.0.40, EX6130 before 1.0.0.22, EX6150 before 1.0.0.38, EX6200 before 1.0.3.86, EX7000 before 1.0.0.64, R6300v2 before 1.0.4.22, R6900P before 1.3.0.18, R7000P before 1.3.0.18, R7300DST before 1.0.0.62, R7900P before 1.3.0.10, R8000 before 1.0.4.12, R8000P before 1.3.0.10, WN2500RPv2 before 1.0.1.52, and WNDR3400v3 before 1.0.1.18.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j6gc-m83f-2whq/GHSA-j6gc-m83f-2whq.json b/advisories/unreviewed/2022/05/GHSA-j6gc-m83f-2whq/GHSA-j6gc-m83f-2whq.json index 7ff393475e7..34ba7e22591 100644 --- a/advisories/unreviewed/2022/05/GHSA-j6gc-m83f-2whq/GHSA-j6gc-m83f-2whq.json +++ b/advisories/unreviewed/2022/05/GHSA-j6gc-m83f-2whq/GHSA-j6gc-m83f-2whq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j823-9vj8-r736/GHSA-j823-9vj8-r736.json b/advisories/unreviewed/2022/05/GHSA-j823-9vj8-r736/GHSA-j823-9vj8-r736.json index 19a173440e3..38254cda38c 100644 --- a/advisories/unreviewed/2022/05/GHSA-j823-9vj8-r736/GHSA-j823-9vj8-r736.json +++ b/advisories/unreviewed/2022/05/GHSA-j823-9vj8-r736/GHSA-j823-9vj8-r736.json @@ -7,12 +7,8 @@ "CVE-2018-21165" ], "details": "Certain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.54, WNDR4500v3 before 1.0.0.54, and WNR2000v5 before 1.0.0.64.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j8gc-rm52-xr3m/GHSA-j8gc-rm52-xr3m.json b/advisories/unreviewed/2022/05/GHSA-j8gc-rm52-xr3m/GHSA-j8gc-rm52-xr3m.json index f6ac7c16b8a..dc8efa406d9 100644 --- a/advisories/unreviewed/2022/05/GHSA-j8gc-rm52-xr3m/GHSA-j8gc-rm52-xr3m.json +++ b/advisories/unreviewed/2022/05/GHSA-j8gc-rm52-xr3m/GHSA-j8gc-rm52-xr3m.json @@ -7,12 +7,8 @@ "CVE-2018-21138" ], "details": "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D3600 before 1.0.0.76 and D6000 before 1.0.0.76.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j8gx-2792-8g3x/GHSA-j8gx-2792-8g3x.json b/advisories/unreviewed/2022/05/GHSA-j8gx-2792-8g3x/GHSA-j8gx-2792-8g3x.json index 45ee30e4246..c7512de16b7 100644 --- a/advisories/unreviewed/2022/05/GHSA-j8gx-2792-8g3x/GHSA-j8gx-2792-8g3x.json +++ b/advisories/unreviewed/2022/05/GHSA-j8gx-2792-8g3x/GHSA-j8gx-2792-8g3x.json @@ -7,12 +7,8 @@ "CVE-2020-4415" ], "details": "IBM Spectrum Protect 7.1 and 8.1 server is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. This could allow a remote attacker to execute arbitrary code on the system with the privileges of an administrator or user associated with the Spectrum Protect server or cause the Spectrum Protect server to crash. IBM X-Force ID: 179990.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j93v-59h8-hfjg/GHSA-j93v-59h8-hfjg.json b/advisories/unreviewed/2022/05/GHSA-j93v-59h8-hfjg/GHSA-j93v-59h8-hfjg.json index a437520d44e..e468f5b23d8 100644 --- a/advisories/unreviewed/2022/05/GHSA-j93v-59h8-hfjg/GHSA-j93v-59h8-hfjg.json +++ b/advisories/unreviewed/2022/05/GHSA-j93v-59h8-hfjg/GHSA-j93v-59h8-hfjg.json @@ -7,12 +7,8 @@ "CVE-2020-5887" ], "details": "On versions 15.1.0-15.1.0.1, 15.0.0-15.0.1.2, and 14.1.0-14.1.2.3, BIG-IP Virtual Edition (VE) may expose a mechanism for remote attackers to access local daemons and bypass port lockdown settings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j9v2-qj4f-9rh7/GHSA-j9v2-qj4f-9rh7.json b/advisories/unreviewed/2022/05/GHSA-j9v2-qj4f-9rh7/GHSA-j9v2-qj4f-9rh7.json index 856a7606886..3e67d59c22d 100644 --- a/advisories/unreviewed/2022/05/GHSA-j9v2-qj4f-9rh7/GHSA-j9v2-qj4f-9rh7.json +++ b/advisories/unreviewed/2022/05/GHSA-j9v2-qj4f-9rh7/GHSA-j9v2-qj4f-9rh7.json @@ -7,12 +7,8 @@ "CVE-2020-11686" ], "details": "In JetBrains TeamCity before 2019.1.4, a project administrator was able to retrieve some TeamCity server settings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jc5f-m375-x98q/GHSA-jc5f-m375-x98q.json b/advisories/unreviewed/2022/05/GHSA-jc5f-m375-x98q/GHSA-jc5f-m375-x98q.json index 8c5ab866f45..71c5b48637b 100644 --- a/advisories/unreviewed/2022/05/GHSA-jc5f-m375-x98q/GHSA-jc5f-m375-x98q.json +++ b/advisories/unreviewed/2022/05/GHSA-jc5f-m375-x98q/GHSA-jc5f-m375-x98q.json @@ -7,12 +7,8 @@ "CVE-2018-21131" ], "details": "Certain NETGEAR devices are affected by unauthenticated firmware downgrade. This affects WAC505 before 5.0.0.17 and WAC510 before 5.0.0.17.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jf4p-jr83-j8vp/GHSA-jf4p-jr83-j8vp.json b/advisories/unreviewed/2022/05/GHSA-jf4p-jr83-j8vp/GHSA-jf4p-jr83-j8vp.json index 8a1cc4b6937..986b3e2c1e4 100644 --- a/advisories/unreviewed/2022/05/GHSA-jf4p-jr83-j8vp/GHSA-jf4p-jr83-j8vp.json +++ b/advisories/unreviewed/2022/05/GHSA-jf4p-jr83-j8vp/GHSA-jf4p-jr83-j8vp.json @@ -7,12 +7,8 @@ "CVE-2018-21137" ], "details": "Certain NETGEAR devices are affected by a hardcoded password. This affects D3600 before 1.0.0.76 and D6000 before 1.0.0.76.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jg68-jfqm-6fv7/GHSA-jg68-jfqm-6fv7.json b/advisories/unreviewed/2022/05/GHSA-jg68-jfqm-6fv7/GHSA-jg68-jfqm-6fv7.json index 29e215ac958..8bc20ec6401 100644 --- a/advisories/unreviewed/2022/05/GHSA-jg68-jfqm-6fv7/GHSA-jg68-jfqm-6fv7.json +++ b/advisories/unreviewed/2022/05/GHSA-jg68-jfqm-6fv7/GHSA-jg68-jfqm-6fv7.json @@ -7,12 +7,8 @@ "CVE-2020-7134" ], "details": "A remote access to sensitive data vulnerability was discovered in HPE IOT + GCP version(s): 1.4.0, 1.4.1, 1.4.2, 1.2.4.2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jh32-659f-ffvm/GHSA-jh32-659f-ffvm.json b/advisories/unreviewed/2022/05/GHSA-jh32-659f-ffvm/GHSA-jh32-659f-ffvm.json index 37ed1e8afd5..c069c4814f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-jh32-659f-ffvm/GHSA-jh32-659f-ffvm.json +++ b/advisories/unreviewed/2022/05/GHSA-jh32-659f-ffvm/GHSA-jh32-659f-ffvm.json @@ -7,12 +7,8 @@ "CVE-2020-1805" ], "details": "Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities. Certain driver program does not sufficiently validate certain parameters received, that would lead to several bytes out of bound read. Successful exploit may cause information disclosure or service abnormal. This is 2 out of 3 out of bounds vulnerabilities found. Different than CVE-2020-1804 and CVE-2020-1806.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jh4q-jpjf-m9ch/GHSA-jh4q-jpjf-m9ch.json b/advisories/unreviewed/2022/05/GHSA-jh4q-jpjf-m9ch/GHSA-jh4q-jpjf-m9ch.json index 9d65bf79c08..49344f50c36 100644 --- a/advisories/unreviewed/2022/05/GHSA-jh4q-jpjf-m9ch/GHSA-jh4q-jpjf-m9ch.json +++ b/advisories/unreviewed/2022/05/GHSA-jh4q-jpjf-m9ch/GHSA-jh4q-jpjf-m9ch.json @@ -7,12 +7,8 @@ "CVE-2016-11054" ], "details": "NETGEAR DGN2200v4 devices before 2017-01-06 are affected by command execution and an FTP insecure root directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jj5p-vxx9-rvj7/GHSA-jj5p-vxx9-rvj7.json b/advisories/unreviewed/2022/05/GHSA-jj5p-vxx9-rvj7/GHSA-jj5p-vxx9-rvj7.json index 1bb488f6124..45fd4629f8e 100644 --- a/advisories/unreviewed/2022/05/GHSA-jj5p-vxx9-rvj7/GHSA-jj5p-vxx9-rvj7.json +++ b/advisories/unreviewed/2022/05/GHSA-jj5p-vxx9-rvj7/GHSA-jj5p-vxx9-rvj7.json @@ -7,12 +7,8 @@ "CVE-2020-6821" ], "details": "When reading from areas partially or fully outside the source resource with WebGL's copyTexSubImage method, the specification requires the returned values be zero. Previously, this memory was uninitialized, leading to potentially sensitive data disclosure. This vulnerability affects Thunderbird < 68.7.0, Firefox ESR < 68.7, and Firefox < 75.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jm6c-mxhj-6g6h/GHSA-jm6c-mxhj-6g6h.json b/advisories/unreviewed/2022/05/GHSA-jm6c-mxhj-6g6h/GHSA-jm6c-mxhj-6g6h.json index eab3e08ec16..0e2500668de 100644 --- a/advisories/unreviewed/2022/05/GHSA-jm6c-mxhj-6g6h/GHSA-jm6c-mxhj-6g6h.json +++ b/advisories/unreviewed/2022/05/GHSA-jm6c-mxhj-6g6h/GHSA-jm6c-mxhj-6g6h.json @@ -7,12 +7,8 @@ "CVE-2017-18731" ], "details": "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects R6100 before 1.0.1.16, R7500 before 1.0.0.112, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, and WNR2000v5 before 1.0.0.58.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jmp9-5v2w-rp67/GHSA-jmp9-5v2w-rp67.json b/advisories/unreviewed/2022/05/GHSA-jmp9-5v2w-rp67/GHSA-jmp9-5v2w-rp67.json index 9f97fe3aaec..e80406ee4fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmp9-5v2w-rp67/GHSA-jmp9-5v2w-rp67.json +++ b/advisories/unreviewed/2022/05/GHSA-jmp9-5v2w-rp67/GHSA-jmp9-5v2w-rp67.json @@ -7,12 +7,8 @@ "CVE-2018-21215" ], "details": "Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, EX2700 before 1.0.1.28, R7500v2 before 1.0.3.24, R9000 before 1.0.2.52, WN2000RPTv3 before 1.0.1.20, WN3000RPv3 before 1.0.2.50, and WN3100RPv2 before 1.0.0.56.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jmqg-3gvq-2g8g/GHSA-jmqg-3gvq-2g8g.json b/advisories/unreviewed/2022/05/GHSA-jmqg-3gvq-2g8g/GHSA-jmqg-3gvq-2g8g.json index 8abae566d43..52d8d0e9bce 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmqg-3gvq-2g8g/GHSA-jmqg-3gvq-2g8g.json +++ b/advisories/unreviewed/2022/05/GHSA-jmqg-3gvq-2g8g/GHSA-jmqg-3gvq-2g8g.json @@ -7,12 +7,8 @@ "CVE-2017-18725" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24. R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jmr5-3q88-mqrx/GHSA-jmr5-3q88-mqrx.json b/advisories/unreviewed/2022/05/GHSA-jmr5-3q88-mqrx/GHSA-jmr5-3q88-mqrx.json index 6ae4e8725fe..a82e45d51f8 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmr5-3q88-mqrx/GHSA-jmr5-3q88-mqrx.json +++ b/advisories/unreviewed/2022/05/GHSA-jmr5-3q88-mqrx/GHSA-jmr5-3q88-mqrx.json @@ -7,12 +7,8 @@ "CVE-2020-11676" ], "details": "Cerner medico 26.00 has a Local Buffer Overflow (issue 2 of 3).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jp2q-w73p-9cf9/GHSA-jp2q-w73p-9cf9.json b/advisories/unreviewed/2022/05/GHSA-jp2q-w73p-9cf9/GHSA-jp2q-w73p-9cf9.json index 1b5f68c40be..16fcf7eb3e7 100644 --- a/advisories/unreviewed/2022/05/GHSA-jp2q-w73p-9cf9/GHSA-jp2q-w73p-9cf9.json +++ b/advisories/unreviewed/2022/05/GHSA-jp2q-w73p-9cf9/GHSA-jp2q-w73p-9cf9.json @@ -7,12 +7,8 @@ "CVE-2020-7136" ], "details": "A security vulnerability in HPE Smart Update Manager (SUM) prior to version 8.5.6 could allow remote unauthorized access. Hewlett Packard Enterprise has provided a software update to resolve this vulnerability in HPE Smart Update Manager (SUM) prior to 8.5.6. Please visit the HPE Support Center at https://support.hpe.com/hpesc/public/home to download the latest version of HPE Smart Update Manager (SUM). Download the latest version of HPE Smart Update Manager (SUM) or download the latest Service Pack For ProLiant (SPP).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jqjc-5vjm-rwq5/GHSA-jqjc-5vjm-rwq5.json b/advisories/unreviewed/2022/05/GHSA-jqjc-5vjm-rwq5/GHSA-jqjc-5vjm-rwq5.json index 7a2c424ee24..14d20cf1e1a 100644 --- a/advisories/unreviewed/2022/05/GHSA-jqjc-5vjm-rwq5/GHSA-jqjc-5vjm-rwq5.json +++ b/advisories/unreviewed/2022/05/GHSA-jqjc-5vjm-rwq5/GHSA-jqjc-5vjm-rwq5.json @@ -7,12 +7,8 @@ "CVE-2020-10914" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of VEEAM One Agent 9.5.4.4587. Authentication is not required to exploit this vulnerability. The specific flaw exists within the PerformHandshake method. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-10400.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jqjg-937f-3m8h/GHSA-jqjg-937f-3m8h.json b/advisories/unreviewed/2022/05/GHSA-jqjg-937f-3m8h/GHSA-jqjg-937f-3m8h.json index a5cb7e5851f..254645ab92e 100644 --- a/advisories/unreviewed/2022/05/GHSA-jqjg-937f-3m8h/GHSA-jqjg-937f-3m8h.json +++ b/advisories/unreviewed/2022/05/GHSA-jqjg-937f-3m8h/GHSA-jqjg-937f-3m8h.json @@ -7,12 +7,8 @@ "CVE-2019-20781" ], "details": "An issue was discovered in LG Bridge before April 2019 on Windows. DLL Hijacking can occur.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jqww-6v8r-jg39/GHSA-jqww-6v8r-jg39.json b/advisories/unreviewed/2022/05/GHSA-jqww-6v8r-jg39/GHSA-jqww-6v8r-jg39.json index d94622715f9..e81e4492bf6 100644 --- a/advisories/unreviewed/2022/05/GHSA-jqww-6v8r-jg39/GHSA-jqww-6v8r-jg39.json +++ b/advisories/unreviewed/2022/05/GHSA-jqww-6v8r-jg39/GHSA-jqww-6v8r-jg39.json @@ -7,12 +7,8 @@ "CVE-2017-18711" ], "details": "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.28, R6400 before 1.01.32, R6400v2 before 1.0.2.44, R6700 before 1.0.1.36, R6900 before 1.0.1.34, R6900P before 1.3.0.8, R7000 before 1.0.9.14, R7000P before 1.3.0.8, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR4300v2 before 1.0.0.48, and WNDR4500v3 before 1.0.0.48.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jr3m-4g36-rv56/GHSA-jr3m-4g36-rv56.json b/advisories/unreviewed/2022/05/GHSA-jr3m-4g36-rv56/GHSA-jr3m-4g36-rv56.json index dbb8722a1c9..0d774c7b6ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-jr3m-4g36-rv56/GHSA-jr3m-4g36-rv56.json +++ b/advisories/unreviewed/2022/05/GHSA-jr3m-4g36-rv56/GHSA-jr3m-4g36-rv56.json @@ -7,12 +7,8 @@ "CVE-2018-21191" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.57, R6100 before 1.0.1.20, R7800 before 1.0.2.40, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jvg2-xj42-p2cm/GHSA-jvg2-xj42-p2cm.json b/advisories/unreviewed/2022/05/GHSA-jvg2-xj42-p2cm/GHSA-jvg2-xj42-p2cm.json index e94b4905965..c354df7f0e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-jvg2-xj42-p2cm/GHSA-jvg2-xj42-p2cm.json +++ b/advisories/unreviewed/2022/05/GHSA-jvg2-xj42-p2cm/GHSA-jvg2-xj42-p2cm.json @@ -7,12 +7,8 @@ "CVE-2017-18707" ], "details": "Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R8300 before 1.0.2.106 and R8500 before 1.0.2.106.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jw6v-h8fg-79xj/GHSA-jw6v-h8fg-79xj.json b/advisories/unreviewed/2022/05/GHSA-jw6v-h8fg-79xj/GHSA-jw6v-h8fg-79xj.json index 65ae6db19d3..509a5c106e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-jw6v-h8fg-79xj/GHSA-jw6v-h8fg-79xj.json +++ b/advisories/unreviewed/2022/05/GHSA-jw6v-h8fg-79xj/GHSA-jw6v-h8fg-79xj.json @@ -7,12 +7,8 @@ "CVE-2020-7490" ], "details": "A CWE-426: Untrusted Search Path vulnerability exists in Vijeo Designer Basic (V1.1 HotFix 15 and prior) and Vijeo Designer (V6.9 SP9 and prior), which could cause arbitrary code execution on the system running Vijeo Basic when a malicious DLL library is loaded by the Product.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jx3m-xmr8-wjqx/GHSA-jx3m-xmr8-wjqx.json b/advisories/unreviewed/2022/05/GHSA-jx3m-xmr8-wjqx/GHSA-jx3m-xmr8-wjqx.json index 5619e604d2d..e882cc00cb8 100644 --- a/advisories/unreviewed/2022/05/GHSA-jx3m-xmr8-wjqx/GHSA-jx3m-xmr8-wjqx.json +++ b/advisories/unreviewed/2022/05/GHSA-jx3m-xmr8-wjqx/GHSA-jx3m-xmr8-wjqx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jx7x-5r8p-6rpc/GHSA-jx7x-5r8p-6rpc.json b/advisories/unreviewed/2022/05/GHSA-jx7x-5r8p-6rpc/GHSA-jx7x-5r8p-6rpc.json index 91695faef4e..ec9f113af08 100644 --- a/advisories/unreviewed/2022/05/GHSA-jx7x-5r8p-6rpc/GHSA-jx7x-5r8p-6rpc.json +++ b/advisories/unreviewed/2022/05/GHSA-jx7x-5r8p-6rpc/GHSA-jx7x-5r8p-6rpc.json @@ -7,12 +7,8 @@ "CVE-2020-12054" ], "details": "The Catch Breadcrumb plugin before 1.5.4 for WordPress allows Reflected XSS via the s parameter (a search query). Also affected are 16 themes (if the plugin is enabled) by the same author: Alchemist and Alchemist PRO, Izabel and Izabel PRO, Chique and Chique PRO, Clean Enterprise and Clean Enterprise PRO, Bold Photography PRO, Intuitive PRO, Devotepress PRO, Clean Blocks PRO, Foodoholic PRO, Catch Mag PRO, Catch Wedding PRO, and Higher Education PRO.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m25v-6jm5-xmw4/GHSA-m25v-6jm5-xmw4.json b/advisories/unreviewed/2022/05/GHSA-m25v-6jm5-xmw4/GHSA-m25v-6jm5-xmw4.json index aac1d8ed82f..f2617051d1a 100644 --- a/advisories/unreviewed/2022/05/GHSA-m25v-6jm5-xmw4/GHSA-m25v-6jm5-xmw4.json +++ b/advisories/unreviewed/2022/05/GHSA-m25v-6jm5-xmw4/GHSA-m25v-6jm5-xmw4.json @@ -7,12 +7,8 @@ "CVE-2018-21162" ], "details": "Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6400 before 1.0.0.78, EX6200 before 1.0.3.86, EX7000 before 1.0.0.64, R6250 before 1.0.4.8, R6300v2 before 1.0.4.6, R6400 before 1.0.1.12, R6700 before 1.0.1.16, R7000 before 1.0.7.10, R7100LG before 1.0.0.42, R7300DST before 1.0.0.44, R7900 before 1.0.1.12, R8000 before 1.0.3.36, R8300 before 1.0.2.74, R8500 before 1.0.2.74, WNDR3400v3 before 1.0.1.14, and WNR3500Lv2 before 1.2.0.48.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m2w8-wqfw-qchx/GHSA-m2w8-wqfw-qchx.json b/advisories/unreviewed/2022/05/GHSA-m2w8-wqfw-qchx/GHSA-m2w8-wqfw-qchx.json index e27129ea45d..96636035362 100644 --- a/advisories/unreviewed/2022/05/GHSA-m2w8-wqfw-qchx/GHSA-m2w8-wqfw-qchx.json +++ b/advisories/unreviewed/2022/05/GHSA-m2w8-wqfw-qchx/GHSA-m2w8-wqfw-qchx.json @@ -7,12 +7,8 @@ "CVE-2019-20792" ], "details": "OpenSC before 0.20.0 has a double free in coolkey_free_private_data because coolkey_add_object in libopensc/card-coolkey.c lacks a uniqueness check.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m43v-j4x4-r7mp/GHSA-m43v-j4x4-r7mp.json b/advisories/unreviewed/2022/05/GHSA-m43v-j4x4-r7mp/GHSA-m43v-j4x4-r7mp.json index 05909f335ad..1426355943a 100644 --- a/advisories/unreviewed/2022/05/GHSA-m43v-j4x4-r7mp/GHSA-m43v-j4x4-r7mp.json +++ b/advisories/unreviewed/2022/05/GHSA-m43v-j4x4-r7mp/GHSA-m43v-j4x4-r7mp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m4hp-wghr-gcjc/GHSA-m4hp-wghr-gcjc.json b/advisories/unreviewed/2022/05/GHSA-m4hp-wghr-gcjc/GHSA-m4hp-wghr-gcjc.json index f6c51fa93a5..73e63738d08 100644 --- a/advisories/unreviewed/2022/05/GHSA-m4hp-wghr-gcjc/GHSA-m4hp-wghr-gcjc.json +++ b/advisories/unreviewed/2022/05/GHSA-m4hp-wghr-gcjc/GHSA-m4hp-wghr-gcjc.json @@ -7,12 +7,8 @@ "CVE-2020-10898" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-10195.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m4p7-gw2g-fjp4/GHSA-m4p7-gw2g-fjp4.json b/advisories/unreviewed/2022/05/GHSA-m4p7-gw2g-fjp4/GHSA-m4p7-gw2g-fjp4.json index d88bb1eb552..6c057a77e29 100644 --- a/advisories/unreviewed/2022/05/GHSA-m4p7-gw2g-fjp4/GHSA-m4p7-gw2g-fjp4.json +++ b/advisories/unreviewed/2022/05/GHSA-m4p7-gw2g-fjp4/GHSA-m4p7-gw2g-fjp4.json @@ -7,12 +7,8 @@ "CVE-2018-21105" ], "details": "NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m65j-gqp9-9x58/GHSA-m65j-gqp9-9x58.json b/advisories/unreviewed/2022/05/GHSA-m65j-gqp9-9x58/GHSA-m65j-gqp9-9x58.json index a9bd513f587..488d3a33368 100644 --- a/advisories/unreviewed/2022/05/GHSA-m65j-gqp9-9x58/GHSA-m65j-gqp9-9x58.json +++ b/advisories/unreviewed/2022/05/GHSA-m65j-gqp9-9x58/GHSA-m65j-gqp9-9x58.json @@ -7,12 +7,8 @@ "CVE-2018-21142" ], "details": "Certain NETGEAR devices are affected by denial of service. This affects R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.54, WNDR4500v3 before 1.0.0.54, and WNR2000v5 before 1.0.0.64.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m6j4-75pv-6pwv/GHSA-m6j4-75pv-6pwv.json b/advisories/unreviewed/2022/05/GHSA-m6j4-75pv-6pwv/GHSA-m6j4-75pv-6pwv.json index 738ad865bd0..781cdcc8dd6 100644 --- a/advisories/unreviewed/2022/05/GHSA-m6j4-75pv-6pwv/GHSA-m6j4-75pv-6pwv.json +++ b/advisories/unreviewed/2022/05/GHSA-m6j4-75pv-6pwv/GHSA-m6j4-75pv-6pwv.json @@ -7,12 +7,8 @@ "CVE-2020-10093" ], "details": "A cross-site scripting (XSS) vulnerability in Lexmark Pro910 series inkjet and other discontinued products.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m6m2-gm49-gp5r/GHSA-m6m2-gm49-gp5r.json b/advisories/unreviewed/2022/05/GHSA-m6m2-gm49-gp5r/GHSA-m6m2-gm49-gp5r.json index c6e2fffa07a..549953764a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-m6m2-gm49-gp5r/GHSA-m6m2-gm49-gp5r.json +++ b/advisories/unreviewed/2022/05/GHSA-m6m2-gm49-gp5r/GHSA-m6m2-gm49-gp5r.json @@ -7,12 +7,8 @@ "CVE-2020-12275" ], "details": "GitLab 12.6 through 12.9 is vulnerable to a privilege escalation that allows an external user to create a personal snippet through the API.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m77g-m5w2-j2f3/GHSA-m77g-m5w2-j2f3.json b/advisories/unreviewed/2022/05/GHSA-m77g-m5w2-j2f3/GHSA-m77g-m5w2-j2f3.json index 2460a02e813..d0e7d0ed0fe 100644 --- a/advisories/unreviewed/2022/05/GHSA-m77g-m5w2-j2f3/GHSA-m77g-m5w2-j2f3.json +++ b/advisories/unreviewed/2022/05/GHSA-m77g-m5w2-j2f3/GHSA-m77g-m5w2-j2f3.json @@ -7,12 +7,8 @@ "CVE-2020-12276" ], "details": "GitLab 9.5.9 through 12.9 is vulnerable to stored XSS in an admin notification feature.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m7pp-f75r-3759/GHSA-m7pp-f75r-3759.json b/advisories/unreviewed/2022/05/GHSA-m7pp-f75r-3759/GHSA-m7pp-f75r-3759.json index cabf4c4bc33..2c92e49cdda 100644 --- a/advisories/unreviewed/2022/05/GHSA-m7pp-f75r-3759/GHSA-m7pp-f75r-3759.json +++ b/advisories/unreviewed/2022/05/GHSA-m7pp-f75r-3759/GHSA-m7pp-f75r-3759.json @@ -7,12 +7,8 @@ "CVE-2020-10901" ], "details": "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of the current process. Was ZDI-CAN-10461.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m86r-rpf4-g7rv/GHSA-m86r-rpf4-g7rv.json b/advisories/unreviewed/2022/05/GHSA-m86r-rpf4-g7rv/GHSA-m86r-rpf4-g7rv.json index ef1f2950aed..7d118c2e76c 100644 --- a/advisories/unreviewed/2022/05/GHSA-m86r-rpf4-g7rv/GHSA-m86r-rpf4-g7rv.json +++ b/advisories/unreviewed/2022/05/GHSA-m86r-rpf4-g7rv/GHSA-m86r-rpf4-g7rv.json @@ -7,12 +7,8 @@ "CVE-2020-12251" ], "details": "An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an authenticated user to change the filename value (in the POST method) from the original filename to achieve directory traversal via a ../ sequence and, for example, obtain a complete directory listing of the machine.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m8qg-6p5g-xrwv/GHSA-m8qg-6p5g-xrwv.json b/advisories/unreviewed/2022/05/GHSA-m8qg-6p5g-xrwv/GHSA-m8qg-6p5g-xrwv.json index ec8ccea3070..68289c5793f 100644 --- a/advisories/unreviewed/2022/05/GHSA-m8qg-6p5g-xrwv/GHSA-m8qg-6p5g-xrwv.json +++ b/advisories/unreviewed/2022/05/GHSA-m8qg-6p5g-xrwv/GHSA-m8qg-6p5g-xrwv.json @@ -7,12 +7,8 @@ "CVE-2018-21204" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D7800 before 1.0.1.30, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m9qx-fj6p-9j3g/GHSA-m9qx-fj6p-9j3g.json b/advisories/unreviewed/2022/05/GHSA-m9qx-fj6p-9j3g/GHSA-m9qx-fj6p-9j3g.json index 4d3b80970ee..f3db1e3a9f3 100644 --- a/advisories/unreviewed/2022/05/GHSA-m9qx-fj6p-9j3g/GHSA-m9qx-fj6p-9j3g.json +++ b/advisories/unreviewed/2022/05/GHSA-m9qx-fj6p-9j3g/GHSA-m9qx-fj6p-9j3g.json @@ -7,12 +7,8 @@ "CVE-2018-21196" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.57, R6100 before 1.0.1.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mcfj-rg6h-5wcf/GHSA-mcfj-rg6h-5wcf.json b/advisories/unreviewed/2022/05/GHSA-mcfj-rg6h-5wcf/GHSA-mcfj-rg6h-5wcf.json index af0671ee31b..651c4736ca5 100644 --- a/advisories/unreviewed/2022/05/GHSA-mcfj-rg6h-5wcf/GHSA-mcfj-rg6h-5wcf.json +++ b/advisories/unreviewed/2022/05/GHSA-mcfj-rg6h-5wcf/GHSA-mcfj-rg6h-5wcf.json @@ -7,12 +7,8 @@ "CVE-2018-21099" ], "details": "NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mf6c-m6cw-6m7x/GHSA-mf6c-m6cw-6m7x.json b/advisories/unreviewed/2022/05/GHSA-mf6c-m6cw-6m7x/GHSA-mf6c-m6cw-6m7x.json index a9462d11837..ef366451a18 100644 --- a/advisories/unreviewed/2022/05/GHSA-mf6c-m6cw-6m7x/GHSA-mf6c-m6cw-6m7x.json +++ b/advisories/unreviewed/2022/05/GHSA-mf6c-m6cw-6m7x/GHSA-mf6c-m6cw-6m7x.json @@ -7,12 +7,8 @@ "CVE-2020-12474" ], "details": "Telegram Desktop through 2.0.1, Telegram through 6.0.1 for Android, and Telegram through 6.0.1 for iOS allow an IDN Homograph attack via Punycode in a public URL or a group chat invitation URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mf86-6cg8-pmjc/GHSA-mf86-6cg8-pmjc.json b/advisories/unreviewed/2022/05/GHSA-mf86-6cg8-pmjc/GHSA-mf86-6cg8-pmjc.json index df3ef721e8d..f2ff52c05ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-mf86-6cg8-pmjc/GHSA-mf86-6cg8-pmjc.json +++ b/advisories/unreviewed/2022/05/GHSA-mf86-6cg8-pmjc/GHSA-mf86-6cg8-pmjc.json @@ -7,12 +7,8 @@ "CVE-2019-18223" ], "details": "ZOOM International Call Recording 6.3.1 suffers from multiple authenticated stored XSS vulnerabilities via the phoneNumber field in the (1) User Edit or (2) User Add form, (3) name field in the Role Add form, (4) name or number field in the Edit Group form, (5) tagKey or tagValue field in the Recording Rules Configuration, or (6) txt_69735:/VemailAddress/value or txt_75767:/VemailFrom/value field in callrec/config.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mm2g-3w9w-jr6p/GHSA-mm2g-3w9w-jr6p.json b/advisories/unreviewed/2022/05/GHSA-mm2g-3w9w-jr6p/GHSA-mm2g-3w9w-jr6p.json index 2863da9f5d8..f8a12340a47 100644 --- a/advisories/unreviewed/2022/05/GHSA-mm2g-3w9w-jr6p/GHSA-mm2g-3w9w-jr6p.json +++ b/advisories/unreviewed/2022/05/GHSA-mm2g-3w9w-jr6p/GHSA-mm2g-3w9w-jr6p.json @@ -7,12 +7,8 @@ "CVE-2020-12438" ], "details": "An XSS vulnerability exists in the banners.php page of PHP-Fusion 9.03.50. This can be exploited because the only security measure used against XSS is the stripping of SCRIPT tags. A malicious actor can use HTML event handlers to run JavaScript instead of using SCRIPT tags.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mmpm-65qm-hqj5/GHSA-mmpm-65qm-hqj5.json b/advisories/unreviewed/2022/05/GHSA-mmpm-65qm-hqj5/GHSA-mmpm-65qm-hqj5.json index 84e873d33ee..92b0a78c287 100644 --- a/advisories/unreviewed/2022/05/GHSA-mmpm-65qm-hqj5/GHSA-mmpm-65qm-hqj5.json +++ b/advisories/unreviewed/2022/05/GHSA-mmpm-65qm-hqj5/GHSA-mmpm-65qm-hqj5.json @@ -7,12 +7,8 @@ "CVE-2017-18751" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D7800 before 1.0.1.28, R6100 before 1.0.1.16, R7500 before 1.0.0.112, R7500v2 before 1.0.3.20, R7800 before 1.0.2.36, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.88, WNDR4300 before 1.0.2.90, WNDR4300v2 before 1.0.0.48, and WNDR4500v3 before 1.0.0.48.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mp5g-mj9q-xwf4/GHSA-mp5g-mj9q-xwf4.json b/advisories/unreviewed/2022/05/GHSA-mp5g-mj9q-xwf4/GHSA-mp5g-mj9q-xwf4.json index a7e5f03dd17..f9e783e0254 100644 --- a/advisories/unreviewed/2022/05/GHSA-mp5g-mj9q-xwf4/GHSA-mp5g-mj9q-xwf4.json +++ b/advisories/unreviewed/2022/05/GHSA-mp5g-mj9q-xwf4/GHSA-mp5g-mj9q-xwf4.json @@ -7,12 +7,8 @@ "CVE-2017-18720" ], "details": "Certain NETGEAR devices are affected by authentication bypass. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mrgg-hv86-p2g9/GHSA-mrgg-hv86-p2g9.json b/advisories/unreviewed/2022/05/GHSA-mrgg-hv86-p2g9/GHSA-mrgg-hv86-p2g9.json index 52624708fba..4de7a5255c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-mrgg-hv86-p2g9/GHSA-mrgg-hv86-p2g9.json +++ b/advisories/unreviewed/2022/05/GHSA-mrgg-hv86-p2g9/GHSA-mrgg-hv86-p2g9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mv59-w8cf-g9q7/GHSA-mv59-w8cf-g9q7.json b/advisories/unreviewed/2022/05/GHSA-mv59-w8cf-g9q7/GHSA-mv59-w8cf-g9q7.json index 5fb093631ce..5e68a5e6ff4 100644 --- a/advisories/unreviewed/2022/05/GHSA-mv59-w8cf-g9q7/GHSA-mv59-w8cf-g9q7.json +++ b/advisories/unreviewed/2022/05/GHSA-mv59-w8cf-g9q7/GHSA-mv59-w8cf-g9q7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mvj3-pw74-8w47/GHSA-mvj3-pw74-8w47.json b/advisories/unreviewed/2022/05/GHSA-mvj3-pw74-8w47/GHSA-mvj3-pw74-8w47.json index a602cbbd1c6..525482b5ffc 100644 --- a/advisories/unreviewed/2022/05/GHSA-mvj3-pw74-8w47/GHSA-mvj3-pw74-8w47.json +++ b/advisories/unreviewed/2022/05/GHSA-mvj3-pw74-8w47/GHSA-mvj3-pw74-8w47.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mwvg-rm6p-8rhr/GHSA-mwvg-rm6p-8rhr.json b/advisories/unreviewed/2022/05/GHSA-mwvg-rm6p-8rhr/GHSA-mwvg-rm6p-8rhr.json index f3e0336c924..d60464aa6bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-mwvg-rm6p-8rhr/GHSA-mwvg-rm6p-8rhr.json +++ b/advisories/unreviewed/2022/05/GHSA-mwvg-rm6p-8rhr/GHSA-mwvg-rm6p-8rhr.json @@ -7,12 +7,8 @@ "CVE-2018-21209" ], "details": "Certain NETGEAR devices are affected by reflected XSS. This affects JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.46, PR2000 before 1.0.0.20, R6050 before 1.0.1.10, R6220 before 1.1.0.60, WNDR3700v5 before 1.1.0.50, WNR1000v4 before 1.1.0.46, WNR2020 before 1.1.0.46, and WNR2050 before 1.1.0.46.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mxgp-249m-rh92/GHSA-mxgp-249m-rh92.json b/advisories/unreviewed/2022/05/GHSA-mxgp-249m-rh92/GHSA-mxgp-249m-rh92.json index 0c22a709cc8..da11e190b52 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxgp-249m-rh92/GHSA-mxgp-249m-rh92.json +++ b/advisories/unreviewed/2022/05/GHSA-mxgp-249m-rh92/GHSA-mxgp-249m-rh92.json @@ -7,12 +7,8 @@ "CVE-2018-21208" ], "details": "Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects D6100 before 1.0.0.57, R6100 before 1.0.1.20, R7500v2 before 1.0.3.24, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mxmm-49jq-5jrw/GHSA-mxmm-49jq-5jrw.json b/advisories/unreviewed/2022/05/GHSA-mxmm-49jq-5jrw/GHSA-mxmm-49jq-5jrw.json index 881349e5ac3..f2a6095db24 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxmm-49jq-5jrw/GHSA-mxmm-49jq-5jrw.json +++ b/advisories/unreviewed/2022/05/GHSA-mxmm-49jq-5jrw/GHSA-mxmm-49jq-5jrw.json @@ -7,12 +7,8 @@ "CVE-2020-6212" ], "details": "Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (versions 618, 730, EAPPLGLO 607) and S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user, allowing reading or modification of some tax reports, due to Missing Authorization Check.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p39c-5r3h-6j6m/GHSA-p39c-5r3h-6j6m.json b/advisories/unreviewed/2022/05/GHSA-p39c-5r3h-6j6m/GHSA-p39c-5r3h-6j6m.json index e74882ddca9..c58974f6003 100644 --- a/advisories/unreviewed/2022/05/GHSA-p39c-5r3h-6j6m/GHSA-p39c-5r3h-6j6m.json +++ b/advisories/unreviewed/2022/05/GHSA-p39c-5r3h-6j6m/GHSA-p39c-5r3h-6j6m.json @@ -7,12 +7,8 @@ "CVE-2019-9183" ], "details": "An issue was discovered in Contiki-NG through 4.2 and Contiki through 3.0. A buffer overflow is present due to an integer underflow during 6LoWPAN fragment processing in the face of truncated fragments in os/net/ipv6/sicslowpan.c. This results in accesses of unmapped memory, crashing the application. An attacker can cause a denial-of-service via a crafted 6LoWPAN frame.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p466-mqmg-f6g5/GHSA-p466-mqmg-f6g5.json b/advisories/unreviewed/2022/05/GHSA-p466-mqmg-f6g5/GHSA-p466-mqmg-f6g5.json index 29f2cfdf133..c0cc37d8cea 100644 --- a/advisories/unreviewed/2022/05/GHSA-p466-mqmg-f6g5/GHSA-p466-mqmg-f6g5.json +++ b/advisories/unreviewed/2022/05/GHSA-p466-mqmg-f6g5/GHSA-p466-mqmg-f6g5.json @@ -7,12 +7,8 @@ "CVE-2018-21173" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7500 before 1.0.0.122, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p46v-v5qj-j2jh/GHSA-p46v-v5qj-j2jh.json b/advisories/unreviewed/2022/05/GHSA-p46v-v5qj-j2jh/GHSA-p46v-v5qj-j2jh.json index 60817721a0a..572b0d2ab12 100644 --- a/advisories/unreviewed/2022/05/GHSA-p46v-v5qj-j2jh/GHSA-p46v-v5qj-j2jh.json +++ b/advisories/unreviewed/2022/05/GHSA-p46v-v5qj-j2jh/GHSA-p46v-v5qj-j2jh.json @@ -7,12 +7,8 @@ "CVE-2020-11415" ], "details": "An issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.17 and 3.x before 3.22.1. Admin users can retrieve the LDAP server system username/password (as configured in nxrm) in cleartext.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p73f-98x4-6v7q/GHSA-p73f-98x4-6v7q.json b/advisories/unreviewed/2022/05/GHSA-p73f-98x4-6v7q/GHSA-p73f-98x4-6v7q.json index 4ba399ec3d5..a9f367eba3b 100644 --- a/advisories/unreviewed/2022/05/GHSA-p73f-98x4-6v7q/GHSA-p73f-98x4-6v7q.json +++ b/advisories/unreviewed/2022/05/GHSA-p73f-98x4-6v7q/GHSA-p73f-98x4-6v7q.json @@ -7,12 +7,8 @@ "CVE-2020-9481" ], "details": "Apache ATS 6.0.0 to 6.2.3, 7.0.0 to 7.1.9, and 8.0.0 to 8.0.6 is vulnerable to a HTTP/2 slow read attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p7x7-rwp6-7mfx/GHSA-p7x7-rwp6-7mfx.json b/advisories/unreviewed/2022/05/GHSA-p7x7-rwp6-7mfx/GHSA-p7x7-rwp6-7mfx.json index 70265e93b12..7138a1b502d 100644 --- a/advisories/unreviewed/2022/05/GHSA-p7x7-rwp6-7mfx/GHSA-p7x7-rwp6-7mfx.json +++ b/advisories/unreviewed/2022/05/GHSA-p7x7-rwp6-7mfx/GHSA-p7x7-rwp6-7mfx.json @@ -7,12 +7,8 @@ "CVE-2020-10997" ], "details": "Percona XtraBackup before 2.4.20 unintentionally writes the command line to any resulting backup file output. This may include sensitive arguments passed at run time. In addition, when --history is passed at run time, this command line is also written to the PERCONA_SCHEMA.xtrabackup_history table.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pcfw-8gwr-w989/GHSA-pcfw-8gwr-w989.json b/advisories/unreviewed/2022/05/GHSA-pcfw-8gwr-w989/GHSA-pcfw-8gwr-w989.json index 6d1c3c7c9a8..9ece50fbc32 100644 --- a/advisories/unreviewed/2022/05/GHSA-pcfw-8gwr-w989/GHSA-pcfw-8gwr-w989.json +++ b/advisories/unreviewed/2022/05/GHSA-pcfw-8gwr-w989/GHSA-pcfw-8gwr-w989.json @@ -7,12 +7,8 @@ "CVE-2020-5568" ], "details": "Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 5.0.0 allows remote attackers to inject arbitrary web script or HTML via the applications 'Messages' and 'Bulletin Board'.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pcw5-87gf-vhfh/GHSA-pcw5-87gf-vhfh.json b/advisories/unreviewed/2022/05/GHSA-pcw5-87gf-vhfh/GHSA-pcw5-87gf-vhfh.json index a67ed4714aa..ba95b24b987 100644 --- a/advisories/unreviewed/2022/05/GHSA-pcw5-87gf-vhfh/GHSA-pcw5-87gf-vhfh.json +++ b/advisories/unreviewed/2022/05/GHSA-pcw5-87gf-vhfh/GHSA-pcw5-87gf-vhfh.json @@ -7,12 +7,8 @@ "CVE-2019-8359" ], "details": "An issue was discovered in Contiki-NG through 4.2 and Contiki through 3.0. An out of bounds write is present in the data section during 6LoWPAN fragment re-assembly in the face of forged fragment offsets in os/net/ipv6/sicslowpan.c.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pfmx-9fq2-4rc6/GHSA-pfmx-9fq2-4rc6.json b/advisories/unreviewed/2022/05/GHSA-pfmx-9fq2-4rc6/GHSA-pfmx-9fq2-4rc6.json index ec67d8fdfe9..b2b7e311174 100644 --- a/advisories/unreviewed/2022/05/GHSA-pfmx-9fq2-4rc6/GHSA-pfmx-9fq2-4rc6.json +++ b/advisories/unreviewed/2022/05/GHSA-pfmx-9fq2-4rc6/GHSA-pfmx-9fq2-4rc6.json @@ -7,12 +7,8 @@ "CVE-2020-5879" ], "details": "On BIG-IP ASM 11.6.1-11.6.5.1, under certain configurations, the BIG-IP system sends data plane traffic to back-end servers unencrypted, even when a Server SSL profile is applied.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pgr8-gpgg-9j5m/GHSA-pgr8-gpgg-9j5m.json b/advisories/unreviewed/2022/05/GHSA-pgr8-gpgg-9j5m/GHSA-pgr8-gpgg-9j5m.json index 990961d7bff..b96639ee4ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-pgr8-gpgg-9j5m/GHSA-pgr8-gpgg-9j5m.json +++ b/advisories/unreviewed/2022/05/GHSA-pgr8-gpgg-9j5m/GHSA-pgr8-gpgg-9j5m.json @@ -7,12 +7,8 @@ "CVE-2018-21232" ], "details": "re2c before 2.0 has uncontrolled recursion that causes stack consumption in find_fixed_tags.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-php7-2pjh-r3rq/GHSA-php7-2pjh-r3rq.json b/advisories/unreviewed/2022/05/GHSA-php7-2pjh-r3rq/GHSA-php7-2pjh-r3rq.json index 916a943950c..9805c287878 100644 --- a/advisories/unreviewed/2022/05/GHSA-php7-2pjh-r3rq/GHSA-php7-2pjh-r3rq.json +++ b/advisories/unreviewed/2022/05/GHSA-php7-2pjh-r3rq/GHSA-php7-2pjh-r3rq.json @@ -7,12 +7,8 @@ "CVE-2018-21207" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D7800 before 1.0.1.30, EX2700 before 1.0.1.28, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WN2000RPTv3 before 1.0.1.20, WN3000RPv3 before 1.0.2.50, WN3100RPv2 before 1.0.0.56, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-phpw-g8jw-q5f7/GHSA-phpw-g8jw-q5f7.json b/advisories/unreviewed/2022/05/GHSA-phpw-g8jw-q5f7/GHSA-phpw-g8jw-q5f7.json index 9e232623d13..deea2516183 100644 --- a/advisories/unreviewed/2022/05/GHSA-phpw-g8jw-q5f7/GHSA-phpw-g8jw-q5f7.json +++ b/advisories/unreviewed/2022/05/GHSA-phpw-g8jw-q5f7/GHSA-phpw-g8jw-q5f7.json @@ -7,12 +7,8 @@ "CVE-2020-11691" ], "details": "In JetBrains Hub before 2020.1.12099, content spoofing in the Hub OAuth error message was possible.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-phvj-38w6-cv36/GHSA-phvj-38w6-cv36.json b/advisories/unreviewed/2022/05/GHSA-phvj-38w6-cv36/GHSA-phvj-38w6-cv36.json index 003ecb84f49..298c1e00788 100644 --- a/advisories/unreviewed/2022/05/GHSA-phvj-38w6-cv36/GHSA-phvj-38w6-cv36.json +++ b/advisories/unreviewed/2022/05/GHSA-phvj-38w6-cv36/GHSA-phvj-38w6-cv36.json @@ -7,12 +7,8 @@ "CVE-2017-18732" ], "details": "Certain NETGEAR devices are affected by authentication bypass. This affects R6300v2 before 1.0.4.8, PLW1000v2 before 1.0.0.14, and PLW1010v2 before 1.0.0.14.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pj8r-w3xr-j4w5/GHSA-pj8r-w3xr-j4w5.json b/advisories/unreviewed/2022/05/GHSA-pj8r-w3xr-j4w5/GHSA-pj8r-w3xr-j4w5.json index b5b2f24cedc..e8caf9adae1 100644 --- a/advisories/unreviewed/2022/05/GHSA-pj8r-w3xr-j4w5/GHSA-pj8r-w3xr-j4w5.json +++ b/advisories/unreviewed/2022/05/GHSA-pj8r-w3xr-j4w5/GHSA-pj8r-w3xr-j4w5.json @@ -7,12 +7,8 @@ "CVE-2020-6825" ], "details": "Mozilla developers and community members Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and Firefox ESR 68.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.7.0, Firefox ESR < 68.7, and Firefox < 75.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pjvf-pcx9-852h/GHSA-pjvf-pcx9-852h.json b/advisories/unreviewed/2022/05/GHSA-pjvf-pcx9-852h/GHSA-pjvf-pcx9-852h.json index 02b700c9092..7d12437c386 100644 --- a/advisories/unreviewed/2022/05/GHSA-pjvf-pcx9-852h/GHSA-pjvf-pcx9-852h.json +++ b/advisories/unreviewed/2022/05/GHSA-pjvf-pcx9-852h/GHSA-pjvf-pcx9-852h.json @@ -7,12 +7,8 @@ "CVE-2016-11059" ], "details": "Certain NETGEAR devices are affected by password exposure. This affects AC1450 before 2017-01-06, C6300 before 2017-01-06, D500 before 2017-01-06, D1500 before 2017-01-06, D3600 before 2017-01-06, D6000 before 2017-01-06, D6100 before 2017-01-06, D6200 before 2017-01-06, D6200B before 2017-01-06, D6300B before 2017-01-06, D6300 before 2017-01-06, DGN1000v3 before 2017-01-06, DGN2200v1 before 2017-01-06, DGN2200v3 before 2017-01-06, DGN2200V4 before 2017-01-06, DGN2200Bv3 before 2017-01-06, DGN2200Bv4 before 2017-01-06, DGND3700v1 before 2017-01-06, DGND3700v2 before 2017-01-06, DGND3700Bv2 before 2017-01-06, JNR1010v1 before 2017-01-06, JNR1010v2 before 2017-01-06, JNR3300 before 2017-01-06, JR6100 before 2017-01-06, JR6150 before 2017-01-06, JWNR2000v5 before 2017-01-06, R2000 before 2017-01-06, R6050 before 2017-01-06, R6100 before 2017-01-06, R6200 before 2017-01-06, R6200v2 before 2017-01-06, R6220 before 2017-01-06, R6250 before 2017-01-06, R6300 before 2017-01-06, R6300v2 before 2017-01-06, R6700 before 2017-01-06, R7000 before 2017-01-06, R7900 before 2017-01-06, R7500 before 2017-01-06, R8000 before 2017-01-06, WGR614v10 before 2017-01-06, WNR1000v2 before 2017-01-06, WNR1000v3 before 2017-01-06, WNR1000v4 before 2017-01-06, WNR2000v3 before 2017-01-06, WNR2000v4 before 2017-01-06, WNR2000v5 before 2017-01-06, WNR2200 before 2017-01-06, WNR2500 before 2017-01-06, WNR3500Lv2 before 2017-01-06, WNDR3400v2 before 2017-01-06, WNDR3400v3 before 2017-01-06, WNDR3700v3 before 2017-01-06, WNDR3700v4 before 2017-01-06, WNDR3700v5 before 2017-01-06, WNDR4300 before 2017-01-06, WNDR4300v2 before 2017-01-06, WNDR4500v1 before 2017-01-06, WNDR4500v2 before 2017-01-06, and WNDR4500v3 before 2017-01-06.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pm3r-3j94-66v7/GHSA-pm3r-3j94-66v7.json b/advisories/unreviewed/2022/05/GHSA-pm3r-3j94-66v7/GHSA-pm3r-3j94-66v7.json index 8bf04e85f98..5b51b52aecd 100644 --- a/advisories/unreviewed/2022/05/GHSA-pm3r-3j94-66v7/GHSA-pm3r-3j94-66v7.json +++ b/advisories/unreviewed/2022/05/GHSA-pm3r-3j94-66v7/GHSA-pm3r-3j94-66v7.json @@ -7,12 +7,8 @@ "CVE-2020-12075" ], "details": "The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks capability checks for AJAX actions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pp36-xw98-xmfx/GHSA-pp36-xw98-xmfx.json b/advisories/unreviewed/2022/05/GHSA-pp36-xw98-xmfx/GHSA-pp36-xw98-xmfx.json index d6de8d3c02c..de3e28531f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-pp36-xw98-xmfx/GHSA-pp36-xw98-xmfx.json +++ b/advisories/unreviewed/2022/05/GHSA-pp36-xw98-xmfx/GHSA-pp36-xw98-xmfx.json @@ -7,12 +7,8 @@ "CVE-2019-16653" ], "details": "An application plugin in Genius Bytes Genius Server (Genius CDDS) 3.2.2 allows remote authenticated users to gain admin privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ppwj-cv8x-vq3q/GHSA-ppwj-cv8x-vq3q.json b/advisories/unreviewed/2022/05/GHSA-ppwj-cv8x-vq3q/GHSA-ppwj-cv8x-vq3q.json index ebc7c24445d..847958decfb 100644 --- a/advisories/unreviewed/2022/05/GHSA-ppwj-cv8x-vq3q/GHSA-ppwj-cv8x-vq3q.json +++ b/advisories/unreviewed/2022/05/GHSA-ppwj-cv8x-vq3q/GHSA-ppwj-cv8x-vq3q.json @@ -7,12 +7,8 @@ "CVE-2019-5623" ], "details": "Accellion File Transfer Appliance version FTA_8_0_540 suffers from an instance of CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection').", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pq76-49rr-hg9x/GHSA-pq76-49rr-hg9x.json b/advisories/unreviewed/2022/05/GHSA-pq76-49rr-hg9x/GHSA-pq76-49rr-hg9x.json index 91db22fe7e7..d01ccd71323 100644 --- a/advisories/unreviewed/2022/05/GHSA-pq76-49rr-hg9x/GHSA-pq76-49rr-hg9x.json +++ b/advisories/unreviewed/2022/05/GHSA-pq76-49rr-hg9x/GHSA-pq76-49rr-hg9x.json @@ -7,12 +7,8 @@ "CVE-2020-12110" ], "details": "Certain TP-Link devices have a Hardcoded Encryption Key. This affects NC200 2.1.9 build 200225, N210 1.0.9 build 200304, NC220 1.3.0 build 200304, NC230 1.3.0 build 200304, NC250 1.3.0 build 200304, NC260 1.5.2 build 200304, and NC450 1.5.3 build 200304.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pqx6-3389-5m7r/GHSA-pqx6-3389-5m7r.json b/advisories/unreviewed/2022/05/GHSA-pqx6-3389-5m7r/GHSA-pqx6-3389-5m7r.json index 4c4cdda717e..71cb1517432 100644 --- a/advisories/unreviewed/2022/05/GHSA-pqx6-3389-5m7r/GHSA-pqx6-3389-5m7r.json +++ b/advisories/unreviewed/2022/05/GHSA-pqx6-3389-5m7r/GHSA-pqx6-3389-5m7r.json @@ -7,12 +7,8 @@ "CVE-2020-5886" ], "details": "On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1, BIG-IP systems setup for connection mirroring in a High Availability (HA) pair transfers sensitive cryptographic objects over an insecure communications channel. This is a control plane issue which is exposed only on the network used for connection mirroring.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pr58-fv3p-5rr2/GHSA-pr58-fv3p-5rr2.json b/advisories/unreviewed/2022/05/GHSA-pr58-fv3p-5rr2/GHSA-pr58-fv3p-5rr2.json index 30b9331303a..93fc5a9d679 100644 --- a/advisories/unreviewed/2022/05/GHSA-pr58-fv3p-5rr2/GHSA-pr58-fv3p-5rr2.json +++ b/advisories/unreviewed/2022/05/GHSA-pr58-fv3p-5rr2/GHSA-pr58-fv3p-5rr2.json @@ -7,12 +7,8 @@ "CVE-2020-5333" ], "details": "RSA Archer, versions prior to 6.7 P3 (6.7.0.3), contain an authorization bypass vulnerability in the REST API. A remote authenticated malicious Archer user could potentially exploit this vulnerability to view unauthorized information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-prg8-f8c5-v3hj/GHSA-prg8-f8c5-v3hj.json b/advisories/unreviewed/2022/05/GHSA-prg8-f8c5-v3hj/GHSA-prg8-f8c5-v3hj.json index 1a3d0cc41ed..1db32f70907 100644 --- a/advisories/unreviewed/2022/05/GHSA-prg8-f8c5-v3hj/GHSA-prg8-f8c5-v3hj.json +++ b/advisories/unreviewed/2022/05/GHSA-prg8-f8c5-v3hj/GHSA-prg8-f8c5-v3hj.json @@ -7,12 +7,8 @@ "CVE-2020-1817" ], "details": "Huawei PCManager with versions earlier than 10.0.1.36 has a privilege escalation vulnerability. Due to improper permission management of specific files, local attackers with low permissions can inject commands to exploit this vulnerability. Successful exploit may cause privilege escalation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-prmr-9r7g-hrvr/GHSA-prmr-9r7g-hrvr.json b/advisories/unreviewed/2022/05/GHSA-prmr-9r7g-hrvr/GHSA-prmr-9r7g-hrvr.json index 1effaa4ea36..e78372833db 100644 --- a/advisories/unreviewed/2022/05/GHSA-prmr-9r7g-hrvr/GHSA-prmr-9r7g-hrvr.json +++ b/advisories/unreviewed/2022/05/GHSA-prmr-9r7g-hrvr/GHSA-prmr-9r7g-hrvr.json @@ -7,12 +7,8 @@ "CVE-2018-21218" ], "details": "Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, D7800 before 1.0.1.30, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-prqf-9j9q-7689/GHSA-prqf-9j9q-7689.json b/advisories/unreviewed/2022/05/GHSA-prqf-9j9q-7689/GHSA-prqf-9j9q-7689.json index f40a59e378f..50082d43616 100644 --- a/advisories/unreviewed/2022/05/GHSA-prqf-9j9q-7689/GHSA-prqf-9j9q-7689.json +++ b/advisories/unreviewed/2022/05/GHSA-prqf-9j9q-7689/GHSA-prqf-9j9q-7689.json @@ -7,12 +7,8 @@ "CVE-2017-18738" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects EX6150v2 before 1.0.1.54, R6400 before 1.0.1.24, R6400v2 before 1.0.2.32, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.10, R7000P before 1.2.0.22, R6900P before 1.2.0.22, R7100LG before 1.0.0.32, R7300DST before 1.0.0.54, R7900 before 1.0.1.18, R8000 before 1.0.3.48, R8300 before 1.0.2.106, R8500 before 1.0.2.106, R6100 before 1.0.1.16, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, and WNR2000v5 before 1.0.0.58.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pvcg-m8c9-58wj/GHSA-pvcg-m8c9-58wj.json b/advisories/unreviewed/2022/05/GHSA-pvcg-m8c9-58wj/GHSA-pvcg-m8c9-58wj.json index ace4343a650..d22046495ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-pvcg-m8c9-58wj/GHSA-pvcg-m8c9-58wj.json +++ b/advisories/unreviewed/2022/05/GHSA-pvcg-m8c9-58wj/GHSA-pvcg-m8c9-58wj.json @@ -7,12 +7,8 @@ "CVE-2020-4267" ], "details": "IBM MQ and MQ Appliance 8.0, 9.1 LTS, and 9.1 CD could allow an authenticated user cause a denial of service due to a memory leak. IBM X-Force ID: 175840.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q258-2fm4-mcj5/GHSA-q258-2fm4-mcj5.json b/advisories/unreviewed/2022/05/GHSA-q258-2fm4-mcj5/GHSA-q258-2fm4-mcj5.json index 9396576c27c..24966eb057c 100644 --- a/advisories/unreviewed/2022/05/GHSA-q258-2fm4-mcj5/GHSA-q258-2fm4-mcj5.json +++ b/advisories/unreviewed/2022/05/GHSA-q258-2fm4-mcj5/GHSA-q258-2fm4-mcj5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q56q-qm7c-m966/GHSA-q56q-qm7c-m966.json b/advisories/unreviewed/2022/05/GHSA-q56q-qm7c-m966/GHSA-q56q-qm7c-m966.json index 230392a5ff7..10ca4f3b562 100644 --- a/advisories/unreviewed/2022/05/GHSA-q56q-qm7c-m966/GHSA-q56q-qm7c-m966.json +++ b/advisories/unreviewed/2022/05/GHSA-q56q-qm7c-m966/GHSA-q56q-qm7c-m966.json @@ -7,12 +7,8 @@ "CVE-2020-1807" ], "details": "HUAWEI Mate 20 smartphones with versions earlier than 10.0.0.188(C00E74R3P8) have an improper authorization vulnerability. The software does not properly restrict certain user's modification of certain configuration file, successful exploit could allow the attacker to bypass app lock after a series of operation in ADB mode.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q57f-qjgw-9732/GHSA-q57f-qjgw-9732.json b/advisories/unreviewed/2022/05/GHSA-q57f-qjgw-9732/GHSA-q57f-qjgw-9732.json index 0aa5a31ef67..899b82a035d 100644 --- a/advisories/unreviewed/2022/05/GHSA-q57f-qjgw-9732/GHSA-q57f-qjgw-9732.json +++ b/advisories/unreviewed/2022/05/GHSA-q57f-qjgw-9732/GHSA-q57f-qjgw-9732.json @@ -7,12 +7,8 @@ "CVE-2018-21133" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.0.17, WAC510 before 5.0.0.17, WAC720 before 5.0.0.17, WAC730 before 5.0.0.17, WAC740 before 5.0.0.17, and WND930 before 5.0.0.17.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q5v7-7h7v-cqv7/GHSA-q5v7-7h7v-cqv7.json b/advisories/unreviewed/2022/05/GHSA-q5v7-7h7v-cqv7/GHSA-q5v7-7h7v-cqv7.json index eca3cfeeab2..3f459612ba5 100644 --- a/advisories/unreviewed/2022/05/GHSA-q5v7-7h7v-cqv7/GHSA-q5v7-7h7v-cqv7.json +++ b/advisories/unreviewed/2022/05/GHSA-q5v7-7h7v-cqv7/GHSA-q5v7-7h7v-cqv7.json @@ -7,12 +7,8 @@ "CVE-2018-21177" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.57, R6100 before 1.0.1.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q6c7-8x78-93hx/GHSA-q6c7-8x78-93hx.json b/advisories/unreviewed/2022/05/GHSA-q6c7-8x78-93hx/GHSA-q6c7-8x78-93hx.json index 37b0f95bb21..e6d5bb0ad11 100644 --- a/advisories/unreviewed/2022/05/GHSA-q6c7-8x78-93hx/GHSA-q6c7-8x78-93hx.json +++ b/advisories/unreviewed/2022/05/GHSA-q6c7-8x78-93hx/GHSA-q6c7-8x78-93hx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q6xg-7pxg-rxj9/GHSA-q6xg-7pxg-rxj9.json b/advisories/unreviewed/2022/05/GHSA-q6xg-7pxg-rxj9/GHSA-q6xg-7pxg-rxj9.json index 750cfcfcaa1..e8f665ba222 100644 --- a/advisories/unreviewed/2022/05/GHSA-q6xg-7pxg-rxj9/GHSA-q6xg-7pxg-rxj9.json +++ b/advisories/unreviewed/2022/05/GHSA-q6xg-7pxg-rxj9/GHSA-q6xg-7pxg-rxj9.json @@ -7,12 +7,8 @@ "CVE-2019-19219" ], "details": "BMC Control-M/Agent 7.0.00.000 allows Arbitrary File Download.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q794-v4jv-vqvf/GHSA-q794-v4jv-vqvf.json b/advisories/unreviewed/2022/05/GHSA-q794-v4jv-vqvf/GHSA-q794-v4jv-vqvf.json index 9f266eb17c7..055c0d6db66 100644 --- a/advisories/unreviewed/2022/05/GHSA-q794-v4jv-vqvf/GHSA-q794-v4jv-vqvf.json +++ b/advisories/unreviewed/2022/05/GHSA-q794-v4jv-vqvf/GHSA-q794-v4jv-vqvf.json @@ -7,12 +7,8 @@ "CVE-2017-18853" ], "details": "Certain NETGEAR devices are affected by password recovery and file access. This affects D8500 1.0.3.27 and earlier, DGN2200v4 1.0.0.82 and earlier, R6300v2 1.0.4.06 and earlier, R6400 1.0.1.20 and earlier, R6400v2 1.0.2.18 and earlier, R6700 1.0.1.22 and earlier, R6900 1.0.1.20 and earlier, R7000 1.0.7.10 and earlier, R7000P 1.0.0.58 and earlier, R7100LG 1.0.0.28 and earlier, R7300DST 1.0.0.52 and earlier, R7900 1.0.1.12 and earlier, R8000 1.0.3.46 and earlier, R8300 1.0.2.86 and earlier, R8500 1.0.2.86 and earlier, WNDR3400v3 1.0.1.8 and earlier, and WNDR4500v2 1.0.0.62 and earlier.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q92c-ww48-wpfq/GHSA-q92c-ww48-wpfq.json b/advisories/unreviewed/2022/05/GHSA-q92c-ww48-wpfq/GHSA-q92c-ww48-wpfq.json index 3d82bceab02..88d4baa325d 100644 --- a/advisories/unreviewed/2022/05/GHSA-q92c-ww48-wpfq/GHSA-q92c-ww48-wpfq.json +++ b/advisories/unreviewed/2022/05/GHSA-q92c-ww48-wpfq/GHSA-q92c-ww48-wpfq.json @@ -7,12 +7,8 @@ "CVE-2020-6010" ], "details": "LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL Injection", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q94h-fx8x-hcpm/GHSA-q94h-fx8x-hcpm.json b/advisories/unreviewed/2022/05/GHSA-q94h-fx8x-hcpm/GHSA-q94h-fx8x-hcpm.json index 80c55b29dbf..41fd56a624b 100644 --- a/advisories/unreviewed/2022/05/GHSA-q94h-fx8x-hcpm/GHSA-q94h-fx8x-hcpm.json +++ b/advisories/unreviewed/2022/05/GHSA-q94h-fx8x-hcpm/GHSA-q94h-fx8x-hcpm.json @@ -7,12 +7,8 @@ "CVE-2018-21136" ], "details": "Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D3600 before 1.0.0.76 and D6000 before 1.0.0.76.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q9jx-pp2v-v8xh/GHSA-q9jx-pp2v-v8xh.json b/advisories/unreviewed/2022/05/GHSA-q9jx-pp2v-v8xh/GHSA-q9jx-pp2v-v8xh.json index 1619dd496de..b099445036d 100644 --- a/advisories/unreviewed/2022/05/GHSA-q9jx-pp2v-v8xh/GHSA-q9jx-pp2v-v8xh.json +++ b/advisories/unreviewed/2022/05/GHSA-q9jx-pp2v-v8xh/GHSA-q9jx-pp2v-v8xh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qc4q-2vxw-j8pc/GHSA-qc4q-2vxw-j8pc.json b/advisories/unreviewed/2022/05/GHSA-qc4q-2vxw-j8pc/GHSA-qc4q-2vxw-j8pc.json index 6ac290d2ff4..eb857a34d64 100644 --- a/advisories/unreviewed/2022/05/GHSA-qc4q-2vxw-j8pc/GHSA-qc4q-2vxw-j8pc.json +++ b/advisories/unreviewed/2022/05/GHSA-qc4q-2vxw-j8pc/GHSA-qc4q-2vxw-j8pc.json @@ -7,12 +7,8 @@ "CVE-2018-21174" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.57, R7500 before 1.0.0.122, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qc7r-vrf5-g6m3/GHSA-qc7r-vrf5-g6m3.json b/advisories/unreviewed/2022/05/GHSA-qc7r-vrf5-g6m3/GHSA-qc7r-vrf5-g6m3.json index 284ea79978e..85331c260fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-qc7r-vrf5-g6m3/GHSA-qc7r-vrf5-g6m3.json +++ b/advisories/unreviewed/2022/05/GHSA-qc7r-vrf5-g6m3/GHSA-qc7r-vrf5-g6m3.json @@ -7,12 +7,8 @@ "CVE-2019-19216" ], "details": "BMC Control-M/Agent 7.0.00.000 has an Insecure File Copy.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qchj-3w44-j257/GHSA-qchj-3w44-j257.json b/advisories/unreviewed/2022/05/GHSA-qchj-3w44-j257/GHSA-qchj-3w44-j257.json index 045e3a4cf79..111610a14e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-qchj-3w44-j257/GHSA-qchj-3w44-j257.json +++ b/advisories/unreviewed/2022/05/GHSA-qchj-3w44-j257/GHSA-qchj-3w44-j257.json @@ -7,12 +7,8 @@ "CVE-2020-11649" ], "details": "An issue was discovered in GitLab CE and EE 8.15 through 12.9.2. Members of a group could still have access after the group is deleted.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qcj8-6g4x-r4fq/GHSA-qcj8-6g4x-r4fq.json b/advisories/unreviewed/2022/05/GHSA-qcj8-6g4x-r4fq/GHSA-qcj8-6g4x-r4fq.json index aa1c298a346..b0e439a712a 100644 --- a/advisories/unreviewed/2022/05/GHSA-qcj8-6g4x-r4fq/GHSA-qcj8-6g4x-r4fq.json +++ b/advisories/unreviewed/2022/05/GHSA-qcj8-6g4x-r4fq/GHSA-qcj8-6g4x-r4fq.json @@ -7,12 +7,8 @@ "CVE-2019-4750" ], "details": "IBM Cloud App Management 2019.3.0 and 2019.4.0 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 173310.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qcmg-363r-qchp/GHSA-qcmg-363r-qchp.json b/advisories/unreviewed/2022/05/GHSA-qcmg-363r-qchp/GHSA-qcmg-363r-qchp.json index 3bca17ff6ea..e42fe0563cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-qcmg-363r-qchp/GHSA-qcmg-363r-qchp.json +++ b/advisories/unreviewed/2022/05/GHSA-qcmg-363r-qchp/GHSA-qcmg-363r-qchp.json @@ -7,12 +7,8 @@ "CVE-2019-5622" ], "details": "Accellion File Transfer Appliance version FTA_8_0_540 suffers from an instance of CWE-798: Use of Hard-coded Credentials.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qfxh-2xqq-84xw/GHSA-qfxh-2xqq-84xw.json b/advisories/unreviewed/2022/05/GHSA-qfxh-2xqq-84xw/GHSA-qfxh-2xqq-84xw.json index 2676ca4370a..547c11f9da1 100644 --- a/advisories/unreviewed/2022/05/GHSA-qfxh-2xqq-84xw/GHSA-qfxh-2xqq-84xw.json +++ b/advisories/unreviewed/2022/05/GHSA-qfxh-2xqq-84xw/GHSA-qfxh-2xqq-84xw.json @@ -7,12 +7,8 @@ "CVE-2020-5565" ], "details": "Improper input validation vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows a remote authenticated attacker to alter the application's data via the applications 'Workflow' and 'MultiReport'.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qg57-j6qf-9w26/GHSA-qg57-j6qf-9w26.json b/advisories/unreviewed/2022/05/GHSA-qg57-j6qf-9w26/GHSA-qg57-j6qf-9w26.json index 08dfd87d475..a248238afb1 100644 --- a/advisories/unreviewed/2022/05/GHSA-qg57-j6qf-9w26/GHSA-qg57-j6qf-9w26.json +++ b/advisories/unreviewed/2022/05/GHSA-qg57-j6qf-9w26/GHSA-qg57-j6qf-9w26.json @@ -7,12 +7,8 @@ "CVE-2018-21188" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 before 1.0.1.30, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qgh9-p249-ccvq/GHSA-qgh9-p249-ccvq.json b/advisories/unreviewed/2022/05/GHSA-qgh9-p249-ccvq/GHSA-qgh9-p249-ccvq.json index ba9eb35cf20..8357aa6786d 100644 --- a/advisories/unreviewed/2022/05/GHSA-qgh9-p249-ccvq/GHSA-qgh9-p249-ccvq.json +++ b/advisories/unreviewed/2022/05/GHSA-qgh9-p249-ccvq/GHSA-qgh9-p249-ccvq.json @@ -7,12 +7,8 @@ "CVE-2018-21167" ], "details": "Certain NETGEAR devices are affected by stored XSS. This affects D6100 before 1.0.0.57, DM200 before 1.0.0.50, EX2700 before 1.0.1.32, EX6100v2 before 1.0.1.70, EX6150v2 before 1.0.1.70, EX6200v2 before 1.0.1.62, EX6400 before 1.0.1.78, EX7300 before 1.0.1.78, EX8000 before 1.0.0.114, R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7800 before 1.0.2.42, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WN2000RPTv3 before 1.0.1.26, WN3000RPv3 before 1.0.2.66, WN3100RPv2 before 1.0.0.42, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.54, WNDR4500v3 before 1.0.0.54, and WNR2000v5 before 1.0.0.64.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qgxj-g5pp-7xv2/GHSA-qgxj-g5pp-7xv2.json b/advisories/unreviewed/2022/05/GHSA-qgxj-g5pp-7xv2/GHSA-qgxj-g5pp-7xv2.json index 0649a57e1c2..973c0534b5a 100644 --- a/advisories/unreviewed/2022/05/GHSA-qgxj-g5pp-7xv2/GHSA-qgxj-g5pp-7xv2.json +++ b/advisories/unreviewed/2022/05/GHSA-qgxj-g5pp-7xv2/GHSA-qgxj-g5pp-7xv2.json @@ -7,12 +7,8 @@ "CVE-2017-18729" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6020 before 1.0.0.30, R6080 before 1.0.0.30, R6120 before 1.0.0.36, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qmpf-pgrm-f9mc/GHSA-qmpf-pgrm-f9mc.json b/advisories/unreviewed/2022/05/GHSA-qmpf-pgrm-f9mc/GHSA-qmpf-pgrm-f9mc.json index 25fa90932fb..845ee69fa0d 100644 --- a/advisories/unreviewed/2022/05/GHSA-qmpf-pgrm-f9mc/GHSA-qmpf-pgrm-f9mc.json +++ b/advisories/unreviewed/2022/05/GHSA-qmpf-pgrm-f9mc/GHSA-qmpf-pgrm-f9mc.json @@ -7,12 +7,8 @@ "CVE-2017-18698" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R6100 before 1.0.1.20, R7800 before 1.0.2.40, and R9000 before 1.0.2.52.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qp6r-j328-v2w7/GHSA-qp6r-j328-v2w7.json b/advisories/unreviewed/2022/05/GHSA-qp6r-j328-v2w7/GHSA-qp6r-j328-v2w7.json index 9fc55993c70..d1a31a49330 100644 --- a/advisories/unreviewed/2022/05/GHSA-qp6r-j328-v2w7/GHSA-qp6r-j328-v2w7.json +++ b/advisories/unreviewed/2022/05/GHSA-qp6r-j328-v2w7/GHSA-qp6r-j328-v2w7.json @@ -7,12 +7,8 @@ "CVE-2020-6826" ], "details": "Mozilla developers Tyson Smith, Bob Clary, and Alexandru Michis reported memory safety bugs present in Firefox 74. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 75.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qq5m-rwh6-wr2c/GHSA-qq5m-rwh6-wr2c.json b/advisories/unreviewed/2022/05/GHSA-qq5m-rwh6-wr2c/GHSA-qq5m-rwh6-wr2c.json index b73f1fc185d..a216a7571f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-qq5m-rwh6-wr2c/GHSA-qq5m-rwh6-wr2c.json +++ b/advisories/unreviewed/2022/05/GHSA-qq5m-rwh6-wr2c/GHSA-qq5m-rwh6-wr2c.json @@ -7,12 +7,8 @@ "CVE-2018-21194" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.57, D7800 before 1.0.1.34, R6100 before 1.0.1.20, R7500 before 1.0.0.122, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.3.6, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qq7j-pc2q-fj2x/GHSA-qq7j-pc2q-fj2x.json b/advisories/unreviewed/2022/05/GHSA-qq7j-pc2q-fj2x/GHSA-qq7j-pc2q-fj2x.json index 7abac5497f8..111c4b95782 100644 --- a/advisories/unreviewed/2022/05/GHSA-qq7j-pc2q-fj2x/GHSA-qq7j-pc2q-fj2x.json +++ b/advisories/unreviewed/2022/05/GHSA-qq7j-pc2q-fj2x/GHSA-qq7j-pc2q-fj2x.json @@ -7,12 +7,8 @@ "CVE-2020-11689" ], "details": "In JetBrains TeamCity before 2019.2.1, a user without appropriate permissions was able to import settings from the settings.kts file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qqjh-hw9j-392p/GHSA-qqjh-hw9j-392p.json b/advisories/unreviewed/2022/05/GHSA-qqjh-hw9j-392p/GHSA-qqjh-hw9j-392p.json index 269b7abd6ec..0bb425ed215 100644 --- a/advisories/unreviewed/2022/05/GHSA-qqjh-hw9j-392p/GHSA-qqjh-hw9j-392p.json +++ b/advisories/unreviewed/2022/05/GHSA-qqjh-hw9j-392p/GHSA-qqjh-hw9j-392p.json @@ -7,12 +7,8 @@ "CVE-2019-20791" ], "details": "OpenThread before 2019-12-13 has a stack-based buffer overflow in MeshCoP::Commissioner::GeneratePskc.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qvc9-w558-wjwm/GHSA-qvc9-w558-wjwm.json b/advisories/unreviewed/2022/05/GHSA-qvc9-w558-wjwm/GHSA-qvc9-w558-wjwm.json index 0626911fb50..c92ee90388f 100644 --- a/advisories/unreviewed/2022/05/GHSA-qvc9-w558-wjwm/GHSA-qvc9-w558-wjwm.json +++ b/advisories/unreviewed/2022/05/GHSA-qvc9-w558-wjwm/GHSA-qvc9-w558-wjwm.json @@ -7,12 +7,8 @@ "CVE-2018-21100" ], "details": "NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qvcx-wpfr-c8wc/GHSA-qvcx-wpfr-c8wc.json b/advisories/unreviewed/2022/05/GHSA-qvcx-wpfr-c8wc/GHSA-qvcx-wpfr-c8wc.json index 067f372ea33..7a348bd6af4 100644 --- a/advisories/unreviewed/2022/05/GHSA-qvcx-wpfr-c8wc/GHSA-qvcx-wpfr-c8wc.json +++ b/advisories/unreviewed/2022/05/GHSA-qvcx-wpfr-c8wc/GHSA-qvcx-wpfr-c8wc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qvw5-8j7m-vjcv/GHSA-qvw5-8j7m-vjcv.json b/advisories/unreviewed/2022/05/GHSA-qvw5-8j7m-vjcv/GHSA-qvw5-8j7m-vjcv.json index 14a7ccbb296..796e84a5eaa 100644 --- a/advisories/unreviewed/2022/05/GHSA-qvw5-8j7m-vjcv/GHSA-qvw5-8j7m-vjcv.json +++ b/advisories/unreviewed/2022/05/GHSA-qvw5-8j7m-vjcv/GHSA-qvw5-8j7m-vjcv.json @@ -7,12 +7,8 @@ "CVE-2020-7488" ], "details": "A CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists which could leak sensitive information transmitted between the software and the Modicon M218, M241, M251, and M258 controllers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qwhj-jc4v-f5wg/GHSA-qwhj-jc4v-f5wg.json b/advisories/unreviewed/2022/05/GHSA-qwhj-jc4v-f5wg/GHSA-qwhj-jc4v-f5wg.json index 5c6d829d4df..5460fc5d839 100644 --- a/advisories/unreviewed/2022/05/GHSA-qwhj-jc4v-f5wg/GHSA-qwhj-jc4v-f5wg.json +++ b/advisories/unreviewed/2022/05/GHSA-qwhj-jc4v-f5wg/GHSA-qwhj-jc4v-f5wg.json @@ -7,12 +7,8 @@ "CVE-2017-18856" ], "details": "NETGEAR ReadyNAS devices before 6.6.1 are affected by command injection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qwrf-fwr9-p2mq/GHSA-qwrf-fwr9-p2mq.json b/advisories/unreviewed/2022/05/GHSA-qwrf-fwr9-p2mq/GHSA-qwrf-fwr9-p2mq.json index a8806638fdd..2383616f2e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-qwrf-fwr9-p2mq/GHSA-qwrf-fwr9-p2mq.json +++ b/advisories/unreviewed/2022/05/GHSA-qwrf-fwr9-p2mq/GHSA-qwrf-fwr9-p2mq.json @@ -7,12 +7,8 @@ "CVE-2017-18855" ], "details": "NETGEAR WNR854T devices before 1.5.2 are affected by command execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qx5w-j85r-8xgh/GHSA-qx5w-j85r-8xgh.json b/advisories/unreviewed/2022/05/GHSA-qx5w-j85r-8xgh/GHSA-qx5w-j85r-8xgh.json index ec736186a64..9d28fcac836 100644 --- a/advisories/unreviewed/2022/05/GHSA-qx5w-j85r-8xgh/GHSA-qx5w-j85r-8xgh.json +++ b/advisories/unreviewed/2022/05/GHSA-qx5w-j85r-8xgh/GHSA-qx5w-j85r-8xgh.json @@ -7,12 +7,8 @@ "CVE-2020-11796" ], "details": "In JetBrains Space through 2020-04-22, the password authentication implementation was insecure.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r3mc-836c-4x5x/GHSA-r3mc-836c-4x5x.json b/advisories/unreviewed/2022/05/GHSA-r3mc-836c-4x5x/GHSA-r3mc-836c-4x5x.json index 640cc2a0ea4..802cb0c9267 100644 --- a/advisories/unreviewed/2022/05/GHSA-r3mc-836c-4x5x/GHSA-r3mc-836c-4x5x.json +++ b/advisories/unreviewed/2022/05/GHSA-r3mc-836c-4x5x/GHSA-r3mc-836c-4x5x.json @@ -7,12 +7,8 @@ "CVE-2020-7135" ], "details": "A potential security vulnerability has been identified in the disk drive firmware installers named Supplemental Update / Online ROM Flash Component on HPE servers running Linux. The vulnerable software is included in the HPE Service Pack for ProLiant (SPP) releases 2018.06.0, 2018.09.0, and 2018.11.0. The vulnerable software is the Supplemental Update / Online ROM Flash Component for Linux (x64) software. The installer in this software component could be locally exploited to execute arbitrary code. Drive Models can be found in the Vulnerability Resolution field of the security bulletin. The 2019_03 SPP and Supplemental update / Online ROM Flash Component for Linux (x64) after 2019.03.0 has fixed this issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r3xm-q6rq-6mcp/GHSA-r3xm-q6rq-6mcp.json b/advisories/unreviewed/2022/05/GHSA-r3xm-q6rq-6mcp/GHSA-r3xm-q6rq-6mcp.json index 9c8e7ac1f00..ea15a8bb43a 100644 --- a/advisories/unreviewed/2022/05/GHSA-r3xm-q6rq-6mcp/GHSA-r3xm-q6rq-6mcp.json +++ b/advisories/unreviewed/2022/05/GHSA-r3xm-q6rq-6mcp/GHSA-r3xm-q6rq-6mcp.json @@ -7,12 +7,8 @@ "CVE-2017-18710" ], "details": "Certain NETGEAR devices are affected by disclosure of sensitive information. This affects R8300 before 1.0.2.106 and R8500 before 1.0.2.106.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r57v-98gg-r4g5/GHSA-r57v-98gg-r4g5.json b/advisories/unreviewed/2022/05/GHSA-r57v-98gg-r4g5/GHSA-r57v-98gg-r4g5.json index f6623e56c8b..fe936fe5828 100644 --- a/advisories/unreviewed/2022/05/GHSA-r57v-98gg-r4g5/GHSA-r57v-98gg-r4g5.json +++ b/advisories/unreviewed/2022/05/GHSA-r57v-98gg-r4g5/GHSA-r57v-98gg-r4g5.json @@ -7,12 +7,8 @@ "CVE-2017-18860" ], "details": "Certain NETGEAR devices are affected by debugging command execution. This affects FS752TP 5.4.2.19 and earlier, GS108Tv2 5.4.2.29 and earlier, GS110TP 5.4.2.29 and earlier, GS418TPP 6.6.2.6 and earlier, GS510TLP 6.6.2.6 and earlier, GS510TP 5.04.2.27 and earlier, GS510TPP 6.6.2.6 and earlier, GS716Tv2 5.4.2.27 and earlier, GS716Tv3 6.3.1.16 and earlier, GS724Tv3 5.4.2.27 and earlier, GS724Tv4 6.3.1.16 and earlier, GS728TPSB 5.3.0.29 and earlier, GS728TSB 5.3.0.29 and earlier, GS728TXS 6.1.0.35 and earlier, GS748Tv4 5.4.2.27 and earlier, GS748Tv5 6.3.1.16 and earlier, GS752TPSB 5.3.0.29 and earlier, GS752TSB 5.3.0.29 and earlier, GS752TXS 6.1.0.35 and earlier, M4200 12.0.2.10 and earlier, M4300 12.0.2.10 and earlier, M5300 11.0.0.28 and earlier, M6100 11.0.0.28 and earlier, M7100 11.0.0.28 and earlier, S3300 6.6.1.4 and earlier, XS708T 6.6.0.11 and earlier, XS712T 6.1.0.34 and earlier, and XS716T 6.6.0.11 and earlier.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r5pv-cm2h-vfmj/GHSA-r5pv-cm2h-vfmj.json b/advisories/unreviewed/2022/05/GHSA-r5pv-cm2h-vfmj/GHSA-r5pv-cm2h-vfmj.json index fe663640764..dacf31230c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-r5pv-cm2h-vfmj/GHSA-r5pv-cm2h-vfmj.json +++ b/advisories/unreviewed/2022/05/GHSA-r5pv-cm2h-vfmj/GHSA-r5pv-cm2h-vfmj.json @@ -7,12 +7,8 @@ "CVE-2020-1804" ], "details": "Huawei Honor V10 smartphones with versions earlier than 10.0.0.156(C00E156R2P4) has three out of bounds vulnerabilities. Certain driver program does not sufficiently validate certain parameters received, that would lead to several bytes out of bound read. Successful exploit may cause information disclosure or service abnormal. This is 1 out of 3 out of bounds vulnerabilities found. Different than CVE-2020-1805 and CVE-2020-1806.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r5q4-f6fm-933q/GHSA-r5q4-f6fm-933q.json b/advisories/unreviewed/2022/05/GHSA-r5q4-f6fm-933q/GHSA-r5q4-f6fm-933q.json index f73ff53c1d4..2088a25c7bb 100644 --- a/advisories/unreviewed/2022/05/GHSA-r5q4-f6fm-933q/GHSA-r5q4-f6fm-933q.json +++ b/advisories/unreviewed/2022/05/GHSA-r5q4-f6fm-933q/GHSA-r5q4-f6fm-933q.json @@ -7,12 +7,8 @@ "CVE-2019-5303" ], "details": "There are two denial of service vulnerabilities on some Huawei smartphones. An attacker may send specially crafted TD-SCDMA messages from a rogue base station to the affected devices. Due to insufficient input validation of two values when parsing the messages, successful exploit may cause device abnormal. This is 2 out of 2 vulnerabilities. Different than CVE-2020-5302. Affected products are: ALP-AL00B: earlier than 9.1.0.333(C00E333R2P1T8) ALP-L09: earlier than 9.1.0.300(C432E4R1P9T8) ALP-L29: earlier than 9.1.0.315(C636E5R1P13T8) BLA-L29C: earlier than 9.1.0.321(C636E4R1P14T8), earlier than 9.1.0.330(C432E6R1P12T8), earlier than 9.1.0.302(C635E4R1P13T8) Berkeley-AL20: earlier than 9.1.0.333(C00E333R2P1T8) Berkeley-L09: earlier than 9.1.0.350(C10E3R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8), earlier than 9.1.0.350(C636E4R1P13T8) Charlotte-L09C: earlier than 9.1.0.311(C185E4R1P11T8), earlier than 9.1.0.345(C432E8R1P11T8) Charlotte-L29C: earlier than 9.1.0.325(C185E4R1P11T8), earlier than 9.1.0.335(C636E3R1P13T8), earlier than 9.1.0.345(C432E8R1P11T8), earlier than 9.1.0.336(C605E3R1P12T8) Columbia-AL10B: earlier than 9.1.0.333(C00E333R1P1T8) Columbia-L29D: earlier than 9.1.0.350(C461E3R1P11T8), earlier than 9.1.0.350(C185E3R1P12T8), earlier than 9.1.0.350(C10E5R1P14T8), earlier than 9.1.0.351(C432E5R1P13T8) Cornell-AL00A: earlier than 9.1.0.333(C00E333R1P1T8) Cornell-L29A: earlier than 9.1.0.328(C185E1R1P9T8), earlier than 9.1.0.328(C432E1R1P9T8), earlier than 9.1.0.330(C461E1R1P9T8), earlier than 9.1.0.328(C636E2R1P12T8) Emily-L09C: earlier than 9.1.0.336(C605E4R1P12T8), earlier than 9.1.0.311(C185E2R1P12T8), earlier than 9.1.0.345(C432E10R1P12T8) Emily-L29C: earlier than 9.1.0.311(C605E2R1P12T8), earlier than 9.1.0.311(C636E7R1P13T8), earlier than 9.1.0.311(C432E7R1P11T8) Ever-L29B: earlier than 9.1.0.311(C185E3R3P1), earlier than 9.1.0.310(C636E3R2P1), earlier than 9.1.0.310(C432E3R1P12) HUAWEI Mate 20: earlier than 9.1.0.131(C00E131R3P1) HUAWEI Mate 20 Pro: earlier than 9.1.0.310(C185E10R2P1) HUAWEI Mate 20 RS: earlier than 9.1.0.135(C786E133R3P1) HUAWEI Mate 20 X: earlier than 9.1.0.135(C00E133R2P1) HUAWEI P20: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P20 Pro: earlier than 9.1.0.333(C00E333R1P1T8) HUAWEI P30: earlier than 9.1.0.193 HUAWEI P30 Pro: earlier than 9.1.0.186(C00E180R2P1) HUAWEI Y9 2019: earlier than 9.1.0.220(C605E3R1P1T8) HUAWEI nova lite 3: earlier than 9.1.0.305(C635E8R2P2) Honor 10 Lite: earlier than 9.1.0.283(C605E8R2P2) Honor 8X: earlier than 9.1.0.221(C461E2R1P1T8) Honor View 20: earlier than 9.1.0.238(C432E1R3P1) Jackman-L22: earlier than 9.1.0.247(C636E2R4P1T8) Paris-L21B: earlier than 9.1.0.331(C432E1R1P2T8) Paris-L21MEB: earlier than 9.1.0.331(C185E4R1P3T8) Paris-L29B: earlier than 9.1.0.331(C636E1R1P3T8) Sydney-AL00: earlier than 9.1.0.212(C00E62R1P7T8) Sydney-L21: earlier than 9.1.0.215(C432E1R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8) Sydney-L21BR: earlier than 9.1.0.213(C185E1R1P2T8) Sydney-L22: earlier than 9.1.0.258(C636E1R1P1T8) Sydney-L22BR: earlier than 9.1.0.258(C636E1R1P1T8) SydneyM-AL00: earlier than 9.1.0.228(C00E78R1P7T8) SydneyM-L01: earlier than 9.1.0.215(C782E2R1P1T8), earlier than 9.1.0.213(C185E1R1P1T8), earlier than 9.1.0.270(C432E3R1P1T8) SydneyM-L03: earlier than 9.1.0.217(C605E1R1P1T8) SydneyM-L21: earlier than 9.1.0.221(C461E1R1P1T8), earlier than 9.1.0.215(C432E4R1P1T8) SydneyM-L22: earlier than 9.1.0.259(C185E1R1P2T8), earlier than 9.1.0.220(C635E1R1P2T8), earlier than 9.1.0.216(C569E1R1P1T8) SydneyM-L23: earlier than 9.1.0.226(C605E2R1P1T8) Yale-L21A: earlier than 9.1.0.154(C432E2R3P2), earlier than 9.1.0.154(C461E2R2P1), earlier than 9.1.0.154(C636E2R2P1) Honor 20: earlier than 9.1.0.152(C00E150R5P1) Honor Magic2: earlier than 10.0.0.187 Honor V20: earlier than 9.1.0.234(C00E234R4P3)", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r5w9-rc55-vh5r/GHSA-r5w9-rc55-vh5r.json b/advisories/unreviewed/2022/05/GHSA-r5w9-rc55-vh5r/GHSA-r5w9-rc55-vh5r.json index 7228c8ccf7e..80978498ac1 100644 --- a/advisories/unreviewed/2022/05/GHSA-r5w9-rc55-vh5r/GHSA-r5w9-rc55-vh5r.json +++ b/advisories/unreviewed/2022/05/GHSA-r5w9-rc55-vh5r/GHSA-r5w9-rc55-vh5r.json @@ -7,12 +7,8 @@ "CVE-2018-21231" ], "details": "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before 1.0.0.57, D6220 before 1.0.0.40, D6400 before 1.0.0.74, D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 before 1.0.3.39, DGN2200v4 before 1.0.0.94, DGN2200Bv4 before 1.0.0.94, EX2700 before 1.0.1.42, EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6000 before 1.0.0.24, EX6100 before 1.0.2.18, EX6120 before 1.0.0.32, EX6130 before 1.0.0.22, EX6150 before 1.0.0.34_1.0.70, EX6200 before 1.0.3.82_1.1.117, EX6400 before 1.0.1.78, EX7000 before 1.0.0.56, EX7300 before 1.0.1.78, JNR1010v2 before 1.1.0.42, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.42, PR2000 before 1.0.0.22, R6050 before 1.0.1.10, R6100 before 1.0.1.16, R6220 before 1.1.0.50, R6250 before 1.0.4.14, R6300v2 before 1.0.4.12, R6400v2 before 1.0.2.34, R6700 before 1.0.1.26, R6900 before 1.0.1.26, R6900P before 1.2.0.22, R7000 before 1.0.9.6, R7000P before 1.2.0.22, R7100LG before 1.0.0.40, R7300DST before 1.0.0.54, R7500 before 1.0.0.110, R7500v2 before 1.0.3.26, R7800 before 1.0.2.44, R7900 before 1.0.1.26, R8000 before 1.0.3.48, R8300 before 1.0.2.104, R8500 before 1.0.2.104, R9000 before 1.0.3.10, WN2000RPTv3 before 1.0.1.26, WN2500RPv2 before 1.0.1.46, WN3000RPv3 before 1.0.2.66, WN3100RPv2 before 1.0.0.56, WNDR3400v3 before 1.0.1.14, WNDR3700v4 before 1.0.2.96, WNDR3700v5 before 1.1.0.54, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, WNR1000v4 before 1.1.0.42, WNR2000v5 before 1.0.0.64, WNR2020 before 1.1.0.42, and WNR2050 before 1.1.0.42.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r64x-jr44-wh33/GHSA-r64x-jr44-wh33.json b/advisories/unreviewed/2022/05/GHSA-r64x-jr44-wh33/GHSA-r64x-jr44-wh33.json index f3d29af638d..680f4b5e3a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-r64x-jr44-wh33/GHSA-r64x-jr44-wh33.json +++ b/advisories/unreviewed/2022/05/GHSA-r64x-jr44-wh33/GHSA-r64x-jr44-wh33.json @@ -7,12 +7,8 @@ "CVE-2018-21155" ], "details": "Certain NETGEAR devices are affected by stored XSS. This affects D7800 before 1.0.1.34, DM200 before 1.0.0.52, R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7500v2 before 1.0.3.26, R7800 before 1.0.2.42, R8900 before 1.0.4.2, R9000 before 1.0.3.16, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.54, WNDR4500v3 before 1.0.0.54, and WNR2000v5 before 1.0.0.64.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r96w-9924-q3fv/GHSA-r96w-9924-q3fv.json b/advisories/unreviewed/2022/05/GHSA-r96w-9924-q3fv/GHSA-r96w-9924-q3fv.json index db4e9fea612..a1908c0cf9e 100644 --- a/advisories/unreviewed/2022/05/GHSA-r96w-9924-q3fv/GHSA-r96w-9924-q3fv.json +++ b/advisories/unreviewed/2022/05/GHSA-r96w-9924-q3fv/GHSA-r96w-9924-q3fv.json @@ -7,12 +7,8 @@ "CVE-2018-21161" ], "details": "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D7800 before 1.0.1.34, R7800 before 1.0.2.46, and R9000 before 1.0.3.16.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rc37-f48c-29w9/GHSA-rc37-f48c-29w9.json b/advisories/unreviewed/2022/05/GHSA-rc37-f48c-29w9/GHSA-rc37-f48c-29w9.json index cae40763776..b3712dc8468 100644 --- a/advisories/unreviewed/2022/05/GHSA-rc37-f48c-29w9/GHSA-rc37-f48c-29w9.json +++ b/advisories/unreviewed/2022/05/GHSA-rc37-f48c-29w9/GHSA-rc37-f48c-29w9.json @@ -7,12 +7,8 @@ "CVE-2020-12286" ], "details": "In Octopus Deploy before 2019.12.9 and 2020 before 2020.1.12, the TaskView permission is not scoped to any dimension. For example, a scoped user who is scoped to only one tenant can view server tasks scoped to any other tenant.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rgc2-2ccm-xxc5/GHSA-rgc2-2ccm-xxc5.json b/advisories/unreviewed/2022/05/GHSA-rgc2-2ccm-xxc5/GHSA-rgc2-2ccm-xxc5.json index 840d63e80ff..081cc2a51b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-rgc2-2ccm-xxc5/GHSA-rgc2-2ccm-xxc5.json +++ b/advisories/unreviewed/2022/05/GHSA-rgc2-2ccm-xxc5/GHSA-rgc2-2ccm-xxc5.json @@ -7,12 +7,8 @@ "CVE-2017-18713" ], "details": "Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D7800 before 1.0.1.28, R6700 before 1.0.1.36, R6900 before 1.0.1.34, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR4300v2 before 1.0.0.48, and WNDR4500v3 before 1.0.0.48.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rghj-9jg6-pg5g/GHSA-rghj-9jg6-pg5g.json b/advisories/unreviewed/2022/05/GHSA-rghj-9jg6-pg5g/GHSA-rghj-9jg6-pg5g.json index 5f0bd056dae..5bc9b419cee 100644 --- a/advisories/unreviewed/2022/05/GHSA-rghj-9jg6-pg5g/GHSA-rghj-9jg6-pg5g.json +++ b/advisories/unreviewed/2022/05/GHSA-rghj-9jg6-pg5g/GHSA-rghj-9jg6-pg5g.json @@ -7,12 +7,8 @@ "CVE-2018-21228" ], "details": "Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.34, EX6100v2 before 1.0.1.50, EX6150v2 before 1.0.1.50, EX6200v2 before 1.0.1.44, EX6400 before 1.0.1.60, EX7300 before 1.0.1.60, R6100 before 1.0.1.16, R7500 before 1.0.0.110, R7800 before 1.0.2.32, R9000 before 1.0.2.30, WN3000RPv3 before 1.0.2.50, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rgwp-8v64-wmrq/GHSA-rgwp-8v64-wmrq.json b/advisories/unreviewed/2022/05/GHSA-rgwp-8v64-wmrq/GHSA-rgwp-8v64-wmrq.json index ecdac679189..c72587c1fa7 100644 --- a/advisories/unreviewed/2022/05/GHSA-rgwp-8v64-wmrq/GHSA-rgwp-8v64-wmrq.json +++ b/advisories/unreviewed/2022/05/GHSA-rgwp-8v64-wmrq/GHSA-rgwp-8v64-wmrq.json @@ -7,12 +7,8 @@ "CVE-2020-11795" ], "details": "In JetBrains Space through 2020-04-22, the session timeout period was configured improperly.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rh82-fhxg-rxx8/GHSA-rh82-fhxg-rxx8.json b/advisories/unreviewed/2022/05/GHSA-rh82-fhxg-rxx8/GHSA-rh82-fhxg-rxx8.json index 930a8562602..12f1a95da52 100644 --- a/advisories/unreviewed/2022/05/GHSA-rh82-fhxg-rxx8/GHSA-rh82-fhxg-rxx8.json +++ b/advisories/unreviewed/2022/05/GHSA-rh82-fhxg-rxx8/GHSA-rh82-fhxg-rxx8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rhjw-325p-xv9q/GHSA-rhjw-325p-xv9q.json b/advisories/unreviewed/2022/05/GHSA-rhjw-325p-xv9q/GHSA-rhjw-325p-xv9q.json index 919203a13e5..65a1938b302 100644 --- a/advisories/unreviewed/2022/05/GHSA-rhjw-325p-xv9q/GHSA-rhjw-325p-xv9q.json +++ b/advisories/unreviewed/2022/05/GHSA-rhjw-325p-xv9q/GHSA-rhjw-325p-xv9q.json @@ -7,12 +7,8 @@ "CVE-2020-1845" ], "details": "Huawei PCManager product with versions earlier than 10.0.5.53 have a local privilege escalation vulnerability. An authenticated, local attacker can perform specific operation to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rhvw-j7hf-3g3r/GHSA-rhvw-j7hf-3g3r.json b/advisories/unreviewed/2022/05/GHSA-rhvw-j7hf-3g3r/GHSA-rhvw-j7hf-3g3r.json index 70eb625b604..a9e6d134ca7 100644 --- a/advisories/unreviewed/2022/05/GHSA-rhvw-j7hf-3g3r/GHSA-rhvw-j7hf-3g3r.json +++ b/advisories/unreviewed/2022/05/GHSA-rhvw-j7hf-3g3r/GHSA-rhvw-j7hf-3g3r.json @@ -7,12 +7,8 @@ "CVE-2020-10797" ], "details": "An XSS vulnerability resides in the hostname field of the diag_ping.php page in pfsense before 2.4.5 version. After passing inputs to the command and executing this command, the $result variable is not sanitized before it is printed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rq46-9gcm-q848/GHSA-rq46-9gcm-q848.json b/advisories/unreviewed/2022/05/GHSA-rq46-9gcm-q848/GHSA-rq46-9gcm-q848.json index cc59e0c43ab..b6041576c23 100644 --- a/advisories/unreviewed/2022/05/GHSA-rq46-9gcm-q848/GHSA-rq46-9gcm-q848.json +++ b/advisories/unreviewed/2022/05/GHSA-rq46-9gcm-q848/GHSA-rq46-9gcm-q848.json @@ -7,12 +7,8 @@ "CVE-2020-5875" ], "details": "On BIG-IP 15.0.0-15.0.1 and 14.1.0-14.1.2.3, under certain conditions, the Traffic Management Microkernel (TMM) may generate a core file and restart while processing SSL traffic with an HTTP/2 full proxy.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rr44-wq26-hqw2/GHSA-rr44-wq26-hqw2.json b/advisories/unreviewed/2022/05/GHSA-rr44-wq26-hqw2/GHSA-rr44-wq26-hqw2.json index 8336269bf66..f0abbf75c0e 100644 --- a/advisories/unreviewed/2022/05/GHSA-rr44-wq26-hqw2/GHSA-rr44-wq26-hqw2.json +++ b/advisories/unreviewed/2022/05/GHSA-rr44-wq26-hqw2/GHSA-rr44-wq26-hqw2.json @@ -7,12 +7,8 @@ "CVE-2018-21097" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects WAC505 before 5.0.5.4, WAC510 before 5.0.5.4, WAC120 before 2.1.7, WN604 before 3.3.10, WNAP320 before 3.7.11.4, WNAP210v2 before 3.7.11.4, WNDAP350 before 3.7.11.4, WNDAP360 before 3.7.11.4, WNDAP660 before 3.7.11.4, WNDAP620 before 2.1.7, and WND930 before 2.1.5.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rr96-gr5c-g3qw/GHSA-rr96-gr5c-g3qw.json b/advisories/unreviewed/2022/05/GHSA-rr96-gr5c-g3qw/GHSA-rr96-gr5c-g3qw.json index 8b294db826d..2ec0284565d 100644 --- a/advisories/unreviewed/2022/05/GHSA-rr96-gr5c-g3qw/GHSA-rr96-gr5c-g3qw.json +++ b/advisories/unreviewed/2022/05/GHSA-rr96-gr5c-g3qw/GHSA-rr96-gr5c-g3qw.json @@ -7,12 +7,8 @@ "CVE-2017-18735" ], "details": "Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JR6150 before 1.0.1.10, PR2000 before 1.0.0.18, R6050 before 1.0.1.10, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, and R6900v2 before 1.2.0.4.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rv3f-x6rg-3mm8/GHSA-rv3f-x6rg-3mm8.json b/advisories/unreviewed/2022/05/GHSA-rv3f-x6rg-3mm8/GHSA-rv3f-x6rg-3mm8.json index 0374a98fb92..7f7a95f451e 100644 --- a/advisories/unreviewed/2022/05/GHSA-rv3f-x6rg-3mm8/GHSA-rv3f-x6rg-3mm8.json +++ b/advisories/unreviewed/2022/05/GHSA-rv3f-x6rg-3mm8/GHSA-rv3f-x6rg-3mm8.json @@ -7,12 +7,8 @@ "CVE-2020-4311" ], "details": "IBM Tivoli Monitoring 6.3.0 could allow a local attacker to execute arbitrary code on the system. By placing a specially crafted file, an attacker could exploit this vulnerability to load other DLL files located in the same directory and execute arbitrary code on the system. IBM X-Force ID: 177083.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rvc8-582x-4cgg/GHSA-rvc8-582x-4cgg.json b/advisories/unreviewed/2022/05/GHSA-rvc8-582x-4cgg/GHSA-rvc8-582x-4cgg.json index 3020a327221..f0744b0a4c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-rvc8-582x-4cgg/GHSA-rvc8-582x-4cgg.json +++ b/advisories/unreviewed/2022/05/GHSA-rvc8-582x-4cgg/GHSA-rvc8-582x-4cgg.json @@ -7,12 +7,8 @@ "CVE-2018-21101" ], "details": "NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rvm2-r552-v8p7/GHSA-rvm2-r552-v8p7.json b/advisories/unreviewed/2022/05/GHSA-rvm2-r552-v8p7/GHSA-rvm2-r552-v8p7.json index 5f990e1434a..35ab806b1e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-rvm2-r552-v8p7/GHSA-rvm2-r552-v8p7.json +++ b/advisories/unreviewed/2022/05/GHSA-rvm2-r552-v8p7/GHSA-rvm2-r552-v8p7.json @@ -7,12 +7,8 @@ "CVE-2020-5890" ], "details": "On BIG-IP 15.0.0-15.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1 and BIG-IQ 5.2.0-7.1.0, when creating a QKView, credentials for binding to LDAP servers used for remote authentication of the BIG-IP administrative interface will not fully obfuscate if they contain whitespace.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rx63-pxf9-gqg8/GHSA-rx63-pxf9-gqg8.json b/advisories/unreviewed/2022/05/GHSA-rx63-pxf9-gqg8/GHSA-rx63-pxf9-gqg8.json index d8485860170..4e26f5e5976 100644 --- a/advisories/unreviewed/2022/05/GHSA-rx63-pxf9-gqg8/GHSA-rx63-pxf9-gqg8.json +++ b/advisories/unreviewed/2022/05/GHSA-rx63-pxf9-gqg8/GHSA-rx63-pxf9-gqg8.json @@ -7,12 +7,8 @@ "CVE-2019-15792" ], "details": "In shiftfs, a non-upstream patch to the Linux kernel included in the Ubuntu 5.0 and 5.3 kernel series, shiftfs_btrfs_ioctl_fd_replace() calls fdget(oldfd), then without further checks passes the resulting file* into shiftfs_real_fdget(), which casts file->private_data, a void* that points to a filesystem-dependent type, to a \"struct shiftfs_file_info *\". As the private_data is not required to be a pointer, an attacker can use this to cause a denial of service or possibly execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rxh2-hx5f-x65g/GHSA-rxh2-hx5f-x65g.json b/advisories/unreviewed/2022/05/GHSA-rxh2-hx5f-x65g/GHSA-rxh2-hx5f-x65g.json index 56229128466..744a183c220 100644 --- a/advisories/unreviewed/2022/05/GHSA-rxh2-hx5f-x65g/GHSA-rxh2-hx5f-x65g.json +++ b/advisories/unreviewed/2022/05/GHSA-rxh2-hx5f-x65g/GHSA-rxh2-hx5f-x65g.json @@ -7,12 +7,8 @@ "CVE-2016-11055" ], "details": "Certain NETGEAR devices are affected by CSRF. This affects CM400 before 2017-01-11, CM600 before 2017-01-11, D1500 before 2017-01-11, D500 before 2017-01-11, DST6501 before 2017-01-11, JNR1010v1 before 2017-01-11, JWNR2000Tv3 before 2017-01-11, JWNR2010v3 before 2017-01-11, PLW1000 before 2017-01-11, PLW1010 before 2017-01-11, WNR500 before 2017-01-11, WNR612v3 before 2017-01-11, N450 before 2017-01-11, and CG3000Dv2 before 2017-01-11.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v27g-mqx8-f4g2/GHSA-v27g-mqx8-f4g2.json b/advisories/unreviewed/2022/05/GHSA-v27g-mqx8-f4g2/GHSA-v27g-mqx8-f4g2.json index 81510aeab3b..588dac45058 100644 --- a/advisories/unreviewed/2022/05/GHSA-v27g-mqx8-f4g2/GHSA-v27g-mqx8-f4g2.json +++ b/advisories/unreviewed/2022/05/GHSA-v27g-mqx8-f4g2/GHSA-v27g-mqx8-f4g2.json @@ -7,12 +7,8 @@ "CVE-2018-21210" ], "details": "Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D7800 before 1.0.1.30, EX2700 before 1.0.1.28, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WN2000RPTv3 before 1.0.1.20, WN3000RPv3 before 1.0.2.50, WN3100RPv2 before 1.0.0.56, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v28g-xr7w-fvp4/GHSA-v28g-xr7w-fvp4.json b/advisories/unreviewed/2022/05/GHSA-v28g-xr7w-fvp4/GHSA-v28g-xr7w-fvp4.json index 6f6d68729be..c8d6244f92c 100644 --- a/advisories/unreviewed/2022/05/GHSA-v28g-xr7w-fvp4/GHSA-v28g-xr7w-fvp4.json +++ b/advisories/unreviewed/2022/05/GHSA-v28g-xr7w-fvp4/GHSA-v28g-xr7w-fvp4.json @@ -7,12 +7,8 @@ "CVE-2020-11869" ], "details": "An integer overflow was found in QEMU 4.0.1 through 4.2.0 in the way it implemented ATI VGA emulation. This flaw occurs in the ati_2d_blt() routine in hw/display/ati-2d.c while handling MMIO write operations through the ati_mm_write() callback. A malicious guest could abuse this flaw to crash the QEMU process, resulting in a denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v2mh-4gcf-6ghr/GHSA-v2mh-4gcf-6ghr.json b/advisories/unreviewed/2022/05/GHSA-v2mh-4gcf-6ghr/GHSA-v2mh-4gcf-6ghr.json index a2a11020c99..18641e40a57 100644 --- a/advisories/unreviewed/2022/05/GHSA-v2mh-4gcf-6ghr/GHSA-v2mh-4gcf-6ghr.json +++ b/advisories/unreviewed/2022/05/GHSA-v2mh-4gcf-6ghr/GHSA-v2mh-4gcf-6ghr.json @@ -7,12 +7,8 @@ "CVE-2020-6822" ], "details": "On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in GMPDecodeData. It is possible that with enough effort this could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.7.0, Firefox ESR < 68.7, and Firefox < 75.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v356-mvg5-2vv2/GHSA-v356-mvg5-2vv2.json b/advisories/unreviewed/2022/05/GHSA-v356-mvg5-2vv2/GHSA-v356-mvg5-2vv2.json index d9a9ad07e65..8b7b435a7a1 100644 --- a/advisories/unreviewed/2022/05/GHSA-v356-mvg5-2vv2/GHSA-v356-mvg5-2vv2.json +++ b/advisories/unreviewed/2022/05/GHSA-v356-mvg5-2vv2/GHSA-v356-mvg5-2vv2.json @@ -7,12 +7,8 @@ "CVE-2020-5564" ], "details": "Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the application 'E-mail'.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v4h8-r639-2f33/GHSA-v4h8-r639-2f33.json b/advisories/unreviewed/2022/05/GHSA-v4h8-r639-2f33/GHSA-v4h8-r639-2f33.json index b8039964a5a..17d5d0b8764 100644 --- a/advisories/unreviewed/2022/05/GHSA-v4h8-r639-2f33/GHSA-v4h8-r639-2f33.json +++ b/advisories/unreviewed/2022/05/GHSA-v4h8-r639-2f33/GHSA-v4h8-r639-2f33.json @@ -7,12 +7,8 @@ "CVE-2020-5885" ], "details": "On versions 15.0.0-15.1.0.1, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, and 12.1.0-12.1.5.1, BIG-IP systems set up for connection mirroring in a high availability (HA) pair transfer sensitive cryptographic objects over an insecure communications channel. This is a control plane issue which is exposed only on the network used for connection mirroring.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v5f3-28pp-96gj/GHSA-v5f3-28pp-96gj.json b/advisories/unreviewed/2022/05/GHSA-v5f3-28pp-96gj/GHSA-v5f3-28pp-96gj.json index 19670c9b7b3..9d17ed58189 100644 --- a/advisories/unreviewed/2022/05/GHSA-v5f3-28pp-96gj/GHSA-v5f3-28pp-96gj.json +++ b/advisories/unreviewed/2022/05/GHSA-v5f3-28pp-96gj/GHSA-v5f3-28pp-96gj.json @@ -7,12 +7,8 @@ "CVE-2020-5871" ], "details": "On BIG-IP 14.1.0-14.1.2.3, undisclosed requests can lead to a denial of service (DoS) when sent to BIG-IP HTTP/2 virtual servers. The problem can occur when ciphers, which have been blacklisted by the HTTP/2 RFC, are used on backend servers. This is a data-plane issue. There is no control-plane exposure.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v5vw-fvmv-9vrj/GHSA-v5vw-fvmv-9vrj.json b/advisories/unreviewed/2022/05/GHSA-v5vw-fvmv-9vrj/GHSA-v5vw-fvmv-9vrj.json index abc8bdb1442..3dc2605386a 100644 --- a/advisories/unreviewed/2022/05/GHSA-v5vw-fvmv-9vrj/GHSA-v5vw-fvmv-9vrj.json +++ b/advisories/unreviewed/2022/05/GHSA-v5vw-fvmv-9vrj/GHSA-v5vw-fvmv-9vrj.json @@ -7,12 +7,8 @@ "CVE-2018-21153" ], "details": "Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D7800 before 1.0.1.34, DM200 before 1.0.0.50, EX2700 before 1.0.1.32, EX6100v2 before 1.0.1.70, EX6150v2 before 1.0.1.70, EX6200v2 before 1.0.1.62, EX6400 before 1.0.1.78, EX7300 before 1.0.1.62, EX8000 before 1.0.0.114, R6100 before 1.0.1.22, R7500 before 1.0.0.122, R7500v2 before 1.0.3.26, R7800 before 1.0.2.40, R8900 before 1.0.3.10, R9000 before 1.0.3.10, WN2000RPTv3 before 1.0.1.26, WN3000RPv2 before 1.0.0.56, WN3000RPv3 before 1.0.2.66, WN3100RPv2 before 1.0.0.56, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.54, WNDR4500v3 before 1.0.0.54, and WNR2000v5 before 1.0.0.64.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v6gr-jxgw-8hjh/GHSA-v6gr-jxgw-8hjh.json b/advisories/unreviewed/2022/05/GHSA-v6gr-jxgw-8hjh/GHSA-v6gr-jxgw-8hjh.json index 3bdacbaf4be..f044109dfb9 100644 --- a/advisories/unreviewed/2022/05/GHSA-v6gr-jxgw-8hjh/GHSA-v6gr-jxgw-8hjh.json +++ b/advisories/unreviewed/2022/05/GHSA-v6gr-jxgw-8hjh/GHSA-v6gr-jxgw-8hjh.json @@ -7,12 +7,8 @@ "CVE-2020-11416" ], "details": "JetBrains Space through 2020-04-22 allows stored XSS in Chats.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v6r2-q8r3-9w6g/GHSA-v6r2-q8r3-9w6g.json b/advisories/unreviewed/2022/05/GHSA-v6r2-q8r3-9w6g/GHSA-v6r2-q8r3-9w6g.json index 3b6eab5f136..8b6ca362dd3 100644 --- a/advisories/unreviewed/2022/05/GHSA-v6r2-q8r3-9w6g/GHSA-v6r2-q8r3-9w6g.json +++ b/advisories/unreviewed/2022/05/GHSA-v6r2-q8r3-9w6g/GHSA-v6r2-q8r3-9w6g.json @@ -7,12 +7,8 @@ "CVE-2020-11941" ], "details": "An issue was discovered in Open-AudIT 3.2.2. There is OS Command injection in Discovery.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v8p4-c6cg-38r7/GHSA-v8p4-c6cg-38r7.json b/advisories/unreviewed/2022/05/GHSA-v8p4-c6cg-38r7/GHSA-v8p4-c6cg-38r7.json index 09dc21b3d99..dd01c32bbe0 100644 --- a/advisories/unreviewed/2022/05/GHSA-v8p4-c6cg-38r7/GHSA-v8p4-c6cg-38r7.json +++ b/advisories/unreviewed/2022/05/GHSA-v8p4-c6cg-38r7/GHSA-v8p4-c6cg-38r7.json @@ -7,12 +7,8 @@ "CVE-2018-21226" ], "details": "Certain NETGEAR devices are affected by authentication bypass. This affects JNR1010v2 before 1.1.0.48, JWNR2010v5 before 1.1.0.48, WNR1000v4 before 1.1.0.48, WNR2020 before 1.1.0.48, and WNR2050 before 1.1.0.48.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v9gc-x54v-vrp3/GHSA-v9gc-x54v-vrp3.json b/advisories/unreviewed/2022/05/GHSA-v9gc-x54v-vrp3/GHSA-v9gc-x54v-vrp3.json index 54305dec22b..f132ceba01a 100644 --- a/advisories/unreviewed/2022/05/GHSA-v9gc-x54v-vrp3/GHSA-v9gc-x54v-vrp3.json +++ b/advisories/unreviewed/2022/05/GHSA-v9gc-x54v-vrp3/GHSA-v9gc-x54v-vrp3.json @@ -7,12 +7,8 @@ "CVE-2018-21212" ], "details": "Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, D7800 before 1.0.1.30, EX2700 before 1.0.1.28, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WN2000RPTv3 before 1.0.1.20, WN3000RPv3 before 1.0.2.50, WN3100RPv2 before 1.0.0.56, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vc27-f9h9-8pxg/GHSA-vc27-f9h9-8pxg.json b/advisories/unreviewed/2022/05/GHSA-vc27-f9h9-8pxg/GHSA-vc27-f9h9-8pxg.json index bbdef30e78f..0515dcdf69e 100644 --- a/advisories/unreviewed/2022/05/GHSA-vc27-f9h9-8pxg/GHSA-vc27-f9h9-8pxg.json +++ b/advisories/unreviewed/2022/05/GHSA-vc27-f9h9-8pxg/GHSA-vc27-f9h9-8pxg.json @@ -7,12 +7,8 @@ "CVE-2018-21181" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D7800 before 1.0.1.28, EX2700 before 1.0.1.32, EX6200v2 before 1.0.1.56, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.3.6, WN2000RPTv3 before 1.0.1.20, WN3000RPv3 before 1.0.2.52, WN3100RPv2 before 1.0.0.42, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vf36-4466-h44f/GHSA-vf36-4466-h44f.json b/advisories/unreviewed/2022/05/GHSA-vf36-4466-h44f/GHSA-vf36-4466-h44f.json index e346b5eb7bd..ef855ceec8a 100644 --- a/advisories/unreviewed/2022/05/GHSA-vf36-4466-h44f/GHSA-vf36-4466-h44f.json +++ b/advisories/unreviewed/2022/05/GHSA-vf36-4466-h44f/GHSA-vf36-4466-h44f.json @@ -7,12 +7,8 @@ "CVE-2017-18715" ], "details": "Certain NETGEAR devices are affected by reflected XSS. This affects EX3700 before 1.0.0.66, EX3800 before 1.0.0.66, EX6100 before 1.0.2.20, EX6120 before 1.0.0.34, EX6150 before 1.0.0.36, EX6200 before 1.0.3.84, and EX7000 before 1.0.0.60.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vhh4-48r8-q5fg/GHSA-vhh4-48r8-q5fg.json b/advisories/unreviewed/2022/05/GHSA-vhh4-48r8-q5fg/GHSA-vhh4-48r8-q5fg.json index 1db4980aa54..54ca355bf68 100644 --- a/advisories/unreviewed/2022/05/GHSA-vhh4-48r8-q5fg/GHSA-vhh4-48r8-q5fg.json +++ b/advisories/unreviewed/2022/05/GHSA-vhh4-48r8-q5fg/GHSA-vhh4-48r8-q5fg.json @@ -7,12 +7,8 @@ "CVE-2020-12629" ], "details": "include/class.sla.php in osTicket before 1.14.2 allows XSS via the SLA Name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vhvp-crrw-vcp3/GHSA-vhvp-crrw-vcp3.json b/advisories/unreviewed/2022/05/GHSA-vhvp-crrw-vcp3/GHSA-vhvp-crrw-vcp3.json index 4b7aeb0b0c1..1d8e98ce10f 100644 --- a/advisories/unreviewed/2022/05/GHSA-vhvp-crrw-vcp3/GHSA-vhvp-crrw-vcp3.json +++ b/advisories/unreviewed/2022/05/GHSA-vhvp-crrw-vcp3/GHSA-vhvp-crrw-vcp3.json @@ -7,12 +7,8 @@ "CVE-2017-18739" ], "details": "Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects R6220 before V1.1.0.50, R7800 before V1.0.2.36, WNDR3400v3 before 1.0.1.14, and WNDR3700v5 before V1.1.0.48.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vp54-8459-j943/GHSA-vp54-8459-j943.json b/advisories/unreviewed/2022/05/GHSA-vp54-8459-j943/GHSA-vp54-8459-j943.json index e6884ce438d..edbfa618d9a 100644 --- a/advisories/unreviewed/2022/05/GHSA-vp54-8459-j943/GHSA-vp54-8459-j943.json +++ b/advisories/unreviewed/2022/05/GHSA-vp54-8459-j943/GHSA-vp54-8459-j943.json @@ -7,12 +7,8 @@ "CVE-2019-5619" ], "details": "AASync.com AASync version 2.2.1.0 suffers from an instance of CWE-121: Stack-based Buffer Overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vpm4-9j9m-vhjv/GHSA-vpm4-9j9m-vhjv.json b/advisories/unreviewed/2022/05/GHSA-vpm4-9j9m-vhjv/GHSA-vpm4-9j9m-vhjv.json index 6d8faf6528e..3c563cad113 100644 --- a/advisories/unreviewed/2022/05/GHSA-vpm4-9j9m-vhjv/GHSA-vpm4-9j9m-vhjv.json +++ b/advisories/unreviewed/2022/05/GHSA-vpm4-9j9m-vhjv/GHSA-vpm4-9j9m-vhjv.json @@ -7,12 +7,8 @@ "CVE-2020-9072" ], "details": "Huawei OSD product with versions earlier than OSD_uwp_9.0.32.0 have a local privilege escalation vulnerability. An authenticated, local attacker can constructs a specific file path to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vpqx-6c92-58xv/GHSA-vpqx-6c92-58xv.json b/advisories/unreviewed/2022/05/GHSA-vpqx-6c92-58xv/GHSA-vpqx-6c92-58xv.json index 55ec4c11382..ea67d71b4df 100644 --- a/advisories/unreviewed/2022/05/GHSA-vpqx-6c92-58xv/GHSA-vpqx-6c92-58xv.json +++ b/advisories/unreviewed/2022/05/GHSA-vpqx-6c92-58xv/GHSA-vpqx-6c92-58xv.json @@ -7,12 +7,8 @@ "CVE-2018-21157" ], "details": "Certain NETGEAR devices are affected by command injection by an authenticated user. This affects D7800 before 1.0.1.28, R6700 before 1.0.1.44, R6900 before 1.0.1.44, R7000 before 1.0.9.28, R7500v2 before 1.0.3.24, R7800 before 1.0.2.38, R9000 before 1.0.2.52, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vqgx-qqm6-jpgh/GHSA-vqgx-qqm6-jpgh.json b/advisories/unreviewed/2022/05/GHSA-vqgx-qqm6-jpgh/GHSA-vqgx-qqm6-jpgh.json index 210a494545c..283f80a5bc5 100644 --- a/advisories/unreviewed/2022/05/GHSA-vqgx-qqm6-jpgh/GHSA-vqgx-qqm6-jpgh.json +++ b/advisories/unreviewed/2022/05/GHSA-vqgx-qqm6-jpgh/GHSA-vqgx-qqm6-jpgh.json @@ -7,12 +7,8 @@ "CVE-2020-12070" ], "details": "The Advanced Woo Search plugin version through 1.99 for Wordpress suffers from a sensitive information disclosure vulnerability in every ajax search request via the sql field to includes/class-aws-search.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vr77-r4vj-52hg/GHSA-vr77-r4vj-52hg.json b/advisories/unreviewed/2022/05/GHSA-vr77-r4vj-52hg/GHSA-vr77-r4vj-52hg.json index 416350d90dd..372ea9d6d01 100644 --- a/advisories/unreviewed/2022/05/GHSA-vr77-r4vj-52hg/GHSA-vr77-r4vj-52hg.json +++ b/advisories/unreviewed/2022/05/GHSA-vr77-r4vj-52hg/GHSA-vr77-r4vj-52hg.json @@ -7,12 +7,8 @@ "CVE-2017-18708" ], "details": "Certain NETGEAR devices are affected by CSRF. This affects R8300 before 1.0.2.94 and R8500 before 1.0.2.94.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vrcx-5x3x-m79f/GHSA-vrcx-5x3x-m79f.json b/advisories/unreviewed/2022/05/GHSA-vrcx-5x3x-m79f/GHSA-vrcx-5x3x-m79f.json index 0e0297d7b08..7f5e2c59d80 100644 --- a/advisories/unreviewed/2022/05/GHSA-vrcx-5x3x-m79f/GHSA-vrcx-5x3x-m79f.json +++ b/advisories/unreviewed/2022/05/GHSA-vrcx-5x3x-m79f/GHSA-vrcx-5x3x-m79f.json @@ -7,12 +7,8 @@ "CVE-2016-11060" ], "details": "Certain NETGEAR devices are affected by insecure renegotiation. This affects SRX5308 before 2017-02-10, FVS336Gv3 before 2017-02-10, FVS318N before 2017-02-10, and FVS318Gv2 before 2017-02-10.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vv76-2436-qvh9/GHSA-vv76-2436-qvh9.json b/advisories/unreviewed/2022/05/GHSA-vv76-2436-qvh9/GHSA-vv76-2436-qvh9.json index a1bf5d638f7..fa4da5e7a80 100644 --- a/advisories/unreviewed/2022/05/GHSA-vv76-2436-qvh9/GHSA-vv76-2436-qvh9.json +++ b/advisories/unreviewed/2022/05/GHSA-vv76-2436-qvh9/GHSA-vv76-2436-qvh9.json @@ -7,12 +7,8 @@ "CVE-2020-7451" ], "details": "In FreeBSD 12.1-STABLE before r358739, 12.1-RELEASE before 12.1-RELEASE-p3, 11.3-STABLE before r358740, and 11.3-RELEASE before 11.3-RELEASE-p7, a TCP SYN-ACK or challenge TCP-ACK segment over IPv6 that is transmitted or retransmitted does not properly initialize the Traffic Class field disclosing one byte of kernel memory over the network.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w2cq-62g9-8425/GHSA-w2cq-62g9-8425.json b/advisories/unreviewed/2022/05/GHSA-w2cq-62g9-8425/GHSA-w2cq-62g9-8425.json index f0a6d744a45..21c6c4a2ae4 100644 --- a/advisories/unreviewed/2022/05/GHSA-w2cq-62g9-8425/GHSA-w2cq-62g9-8425.json +++ b/advisories/unreviewed/2022/05/GHSA-w2cq-62g9-8425/GHSA-w2cq-62g9-8425.json @@ -7,12 +7,8 @@ "CVE-2019-4735" ], "details": "IBM MaaS360 3.96.62 for iOS could allow an attacker with physical access to the device to obtain sensitive information from the agent outside of the container. IBM X-Force ID: 172705.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w3hw-m3gc-94cr/GHSA-w3hw-m3gc-94cr.json b/advisories/unreviewed/2022/05/GHSA-w3hw-m3gc-94cr/GHSA-w3hw-m3gc-94cr.json index d97699db766..3957f9b748c 100644 --- a/advisories/unreviewed/2022/05/GHSA-w3hw-m3gc-94cr/GHSA-w3hw-m3gc-94cr.json +++ b/advisories/unreviewed/2022/05/GHSA-w3hw-m3gc-94cr/GHSA-w3hw-m3gc-94cr.json @@ -7,12 +7,8 @@ "CVE-2018-21189" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.57, R6100 before 1.0.1.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w48j-6w8v-86rc/GHSA-w48j-6w8v-86rc.json b/advisories/unreviewed/2022/05/GHSA-w48j-6w8v-86rc/GHSA-w48j-6w8v-86rc.json index 5b8b5fa7b4e..761568814aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-w48j-6w8v-86rc/GHSA-w48j-6w8v-86rc.json +++ b/advisories/unreviewed/2022/05/GHSA-w48j-6w8v-86rc/GHSA-w48j-6w8v-86rc.json @@ -7,12 +7,8 @@ "CVE-2018-21200" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 before 1.0.2.40 and R9000 before 1.0.3.6.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w4cm-rwww-pf4j/GHSA-w4cm-rwww-pf4j.json b/advisories/unreviewed/2022/05/GHSA-w4cm-rwww-pf4j/GHSA-w4cm-rwww-pf4j.json index 4d4c19ee362..0925eafbeb7 100644 --- a/advisories/unreviewed/2022/05/GHSA-w4cm-rwww-pf4j/GHSA-w4cm-rwww-pf4j.json +++ b/advisories/unreviewed/2022/05/GHSA-w4cm-rwww-pf4j/GHSA-w4cm-rwww-pf4j.json @@ -7,12 +7,8 @@ "CVE-2020-11677" ], "details": "Cerner medico 26.00 has a Local Buffer Overflow (issue 3 of 3).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w4jq-6fj6-wp24/GHSA-w4jq-6fj6-wp24.json b/advisories/unreviewed/2022/05/GHSA-w4jq-6fj6-wp24/GHSA-w4jq-6fj6-wp24.json index 5504e94d8d5..3f12d37a4f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-w4jq-6fj6-wp24/GHSA-w4jq-6fj6-wp24.json +++ b/advisories/unreviewed/2022/05/GHSA-w4jq-6fj6-wp24/GHSA-w4jq-6fj6-wp24.json @@ -7,12 +7,8 @@ "CVE-2018-21220" ], "details": "Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects D3600 before 1.0.0.67, D6000 before 1.0.0.67, D6100 before 1.0.0.56, D7800 before 1.0.1.30, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.24, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w4rf-7xv6-jmq8/GHSA-w4rf-7xv6-jmq8.json b/advisories/unreviewed/2022/05/GHSA-w4rf-7xv6-jmq8/GHSA-w4rf-7xv6-jmq8.json index ddd121532de..0292aa91ad6 100644 --- a/advisories/unreviewed/2022/05/GHSA-w4rf-7xv6-jmq8/GHSA-w4rf-7xv6-jmq8.json +++ b/advisories/unreviewed/2022/05/GHSA-w4rf-7xv6-jmq8/GHSA-w4rf-7xv6-jmq8.json @@ -7,12 +7,8 @@ "CVE-2017-18737" ], "details": "Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JNR1010v2 before 1.1.0.44, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.44, PR2000 before 1.0.0.18, R6050 before 1.0.1.10, R6220 before 1.1.0.50, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, R6900v2 before 1.2.0.4, WNDR3700v5 before 1.1.0.48, WNR1000v4 before 1.1.0.44, WNR2020 before 1.1.0.44, and WNR2050 before 1.1.0.44.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w4wg-rr38-rg8f/GHSA-w4wg-rr38-rg8f.json b/advisories/unreviewed/2022/05/GHSA-w4wg-rr38-rg8f/GHSA-w4wg-rr38-rg8f.json index bcbbd98b10d..3524b49e2b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-w4wg-rr38-rg8f/GHSA-w4wg-rr38-rg8f.json +++ b/advisories/unreviewed/2022/05/GHSA-w4wg-rr38-rg8f/GHSA-w4wg-rr38-rg8f.json @@ -7,12 +7,8 @@ "CVE-2017-18742" ], "details": "Certain NETGEAR devices are affected by CSRF. This affects JR6150 before 1.0.1.10, R6050 before 1.0.1.10, R6250 before 1.0.4.12, R6300v2 before 1.0.4.8, R6700 before 1.0.1.16, R6900 before 1.0.1.16, R7300DST before 1.0.0.54, R7900 before 1.0.1.12, R8000 before 1.0.3.32, and R8500 before 1.0.2.74.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w584-8fxc-44jr/GHSA-w584-8fxc-44jr.json b/advisories/unreviewed/2022/05/GHSA-w584-8fxc-44jr/GHSA-w584-8fxc-44jr.json index 3d4d8002556..fe4a6ecbb4f 100644 --- a/advisories/unreviewed/2022/05/GHSA-w584-8fxc-44jr/GHSA-w584-8fxc-44jr.json +++ b/advisories/unreviewed/2022/05/GHSA-w584-8fxc-44jr/GHSA-w584-8fxc-44jr.json @@ -7,12 +7,8 @@ "CVE-2020-11675" ], "details": "Cerner medico 26.00 has a Local Buffer Overflow (issue 1 of 3).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w64g-g6j6-ph4q/GHSA-w64g-g6j6-ph4q.json b/advisories/unreviewed/2022/05/GHSA-w64g-g6j6-ph4q/GHSA-w64g-g6j6-ph4q.json index 5a1e7bb5eac..6c218a464aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-w64g-g6j6-ph4q/GHSA-w64g-g6j6-ph4q.json +++ b/advisories/unreviewed/2022/05/GHSA-w64g-g6j6-ph4q/GHSA-w64g-g6j6-ph4q.json @@ -7,12 +7,8 @@ "CVE-2020-5566" ], "details": "Improper authorization vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to alter the application's data via the applications 'E-mail' and 'Messages'.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w694-47v5-xqgr/GHSA-w694-47v5-xqgr.json b/advisories/unreviewed/2022/05/GHSA-w694-47v5-xqgr/GHSA-w694-47v5-xqgr.json index c0799ae7138..c65a6af1d4f 100644 --- a/advisories/unreviewed/2022/05/GHSA-w694-47v5-xqgr/GHSA-w694-47v5-xqgr.json +++ b/advisories/unreviewed/2022/05/GHSA-w694-47v5-xqgr/GHSA-w694-47v5-xqgr.json @@ -7,12 +7,8 @@ "CVE-2020-10890" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the communication API. The issue lies in the handling of the ConvertToPDF command, which allows an arbitrary file write with attacker controlled data. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9829.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w7p3-q3wr-gpx3/GHSA-w7p3-q3wr-gpx3.json b/advisories/unreviewed/2022/05/GHSA-w7p3-q3wr-gpx3/GHSA-w7p3-q3wr-gpx3.json index 61296d822f1..2a8c4ec6dcf 100644 --- a/advisories/unreviewed/2022/05/GHSA-w7p3-q3wr-gpx3/GHSA-w7p3-q3wr-gpx3.json +++ b/advisories/unreviewed/2022/05/GHSA-w7p3-q3wr-gpx3/GHSA-w7p3-q3wr-gpx3.json @@ -7,12 +7,8 @@ "CVE-2018-21180" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.57, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w853-h397-7m3j/GHSA-w853-h397-7m3j.json b/advisories/unreviewed/2022/05/GHSA-w853-h397-7m3j/GHSA-w853-h397-7m3j.json index be09cb01f29..1819d36b711 100644 --- a/advisories/unreviewed/2022/05/GHSA-w853-h397-7m3j/GHSA-w853-h397-7m3j.json +++ b/advisories/unreviewed/2022/05/GHSA-w853-h397-7m3j/GHSA-w853-h397-7m3j.json @@ -7,12 +7,8 @@ "CVE-2019-19217" ], "details": "BMC Control-M/Agent 7.0.00.000 allows OS Command Injection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w868-rjm2-hq5f/GHSA-w868-rjm2-hq5f.json b/advisories/unreviewed/2022/05/GHSA-w868-rjm2-hq5f/GHSA-w868-rjm2-hq5f.json index d481c74a648..ef25687c748 100644 --- a/advisories/unreviewed/2022/05/GHSA-w868-rjm2-hq5f/GHSA-w868-rjm2-hq5f.json +++ b/advisories/unreviewed/2022/05/GHSA-w868-rjm2-hq5f/GHSA-w868-rjm2-hq5f.json @@ -7,12 +7,8 @@ "CVE-2020-10911" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the GetFieldValue command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9944.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w9g5-3qgc-xmgx/GHSA-w9g5-3qgc-xmgx.json b/advisories/unreviewed/2022/05/GHSA-w9g5-3qgc-xmgx/GHSA-w9g5-3qgc-xmgx.json index 9a765afedd0..cce1db4d4fb 100644 --- a/advisories/unreviewed/2022/05/GHSA-w9g5-3qgc-xmgx/GHSA-w9g5-3qgc-xmgx.json +++ b/advisories/unreviewed/2022/05/GHSA-w9g5-3qgc-xmgx/GHSA-w9g5-3qgc-xmgx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wc2r-52cw-fh76/GHSA-wc2r-52cw-fh76.json b/advisories/unreviewed/2022/05/GHSA-wc2r-52cw-fh76/GHSA-wc2r-52cw-fh76.json index c7cce66609a..55800e0957d 100644 --- a/advisories/unreviewed/2022/05/GHSA-wc2r-52cw-fh76/GHSA-wc2r-52cw-fh76.json +++ b/advisories/unreviewed/2022/05/GHSA-wc2r-52cw-fh76/GHSA-wc2r-52cw-fh76.json @@ -7,12 +7,8 @@ "CVE-2017-18699" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R7800 before 1.0.2.40 and R9000 before 1.0.2.52.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wccv-5c5g-j682/GHSA-wccv-5c5g-j682.json b/advisories/unreviewed/2022/05/GHSA-wccv-5c5g-j682/GHSA-wccv-5c5g-j682.json index 26bb0713bd2..de02a5e7be3 100644 --- a/advisories/unreviewed/2022/05/GHSA-wccv-5c5g-j682/GHSA-wccv-5c5g-j682.json +++ b/advisories/unreviewed/2022/05/GHSA-wccv-5c5g-j682/GHSA-wccv-5c5g-j682.json @@ -7,12 +7,8 @@ "CVE-2017-18862" ], "details": "Certain NETGEAR devices are affected by authentication bypass. This affects JGS516PE before 2017-05-11, JGS524Ev2 before 2017-05-11, JGS524PE before 2017-05-11, GS105Ev2 before 2017-05-11, GS105PE before 2017-05-11, GS108Ev3 before 2017-05-11, GS108PEv3 before 2017-05-11, GS116Ev2 before 2017-05-11, GSS108E before 2017-05-11, GSS116E before 2017-05-11, XS708Ev2 before 2017-05-11, and XS716E before 2017-05-11.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wfjr-fx5q-m6gw/GHSA-wfjr-fx5q-m6gw.json b/advisories/unreviewed/2022/05/GHSA-wfjr-fx5q-m6gw/GHSA-wfjr-fx5q-m6gw.json index 307a9d857f2..6ce50772f0c 100644 --- a/advisories/unreviewed/2022/05/GHSA-wfjr-fx5q-m6gw/GHSA-wfjr-fx5q-m6gw.json +++ b/advisories/unreviewed/2022/05/GHSA-wfjr-fx5q-m6gw/GHSA-wfjr-fx5q-m6gw.json @@ -7,12 +7,8 @@ "CVE-2019-19215" ], "details": "A buffer overflow vulnerability in BMC Control-M/Agent 7.0.00.000 when the On-Do action destination is Mail and the Control-M/Agent is configured to send the email, allows remote attackers to have unspecified impact via vectors related to the configured IP address or SMTP server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wfw6-8c6v-3wjv/GHSA-wfw6-8c6v-3wjv.json b/advisories/unreviewed/2022/05/GHSA-wfw6-8c6v-3wjv/GHSA-wfw6-8c6v-3wjv.json index ebfa1150006..f71965d3efd 100644 --- a/advisories/unreviewed/2022/05/GHSA-wfw6-8c6v-3wjv/GHSA-wfw6-8c6v-3wjv.json +++ b/advisories/unreviewed/2022/05/GHSA-wfw6-8c6v-3wjv/GHSA-wfw6-8c6v-3wjv.json @@ -7,12 +7,8 @@ "CVE-2018-21198" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.57, R7800 before 1.2.0.44, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.54, WNDR4500v3 before 1.0.0.54, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wgrg-fgrg-92cc/GHSA-wgrg-fgrg-92cc.json b/advisories/unreviewed/2022/05/GHSA-wgrg-fgrg-92cc/GHSA-wgrg-fgrg-92cc.json index 9501da08684..836f2de3ed9 100644 --- a/advisories/unreviewed/2022/05/GHSA-wgrg-fgrg-92cc/GHSA-wgrg-fgrg-92cc.json +++ b/advisories/unreviewed/2022/05/GHSA-wgrg-fgrg-92cc/GHSA-wgrg-fgrg-92cc.json @@ -7,12 +7,8 @@ "CVE-2018-21093" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D8500 before 1.0.3.42, EX3700 before 1.0.0.70, EX3800 before 1.0.0.70, EX6000 before 1.0.0.30, EX6100 before 1.0.2.24, EX6120 before 1.0.0.40, EX6130 before 1.0.0.22, EX6150 before 1.0.0.42, EX6200 before 1.0.3.88, EX7000 before 1.0.0.66, R6250 before 1.0.4.26, R6300-2CXNAS before 1.0.3.60, R6300v2 before 1.0.4.28, R6400 before 1.0.1.36, R6400v2 before 1.0.2.52, R6700 before 1.0.1.46, R6900 before 1.0.1.46, R7000 before 1.0.9.28, R7000P before 1.3.1.44, R6900P before 1.3.1.44, R7100LG before 1.0.0.46, R7300 before 1.0.0.68, R7900 before 1.0.2.10, R8000 before 1.0.4.18, R8000P before 1.3.0.10, R7900P before 1.3.0.10, R8500 before 1.0.2.122, R8300 before 1.0.2.122, RBW30 before 2.1.2.6, WN2500RPv2 before 1.0.0.54, and WNR3500Lv2 before 1.2.0.56.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-whf2-mq76-2fhv/GHSA-whf2-mq76-2fhv.json b/advisories/unreviewed/2022/05/GHSA-whf2-mq76-2fhv/GHSA-whf2-mq76-2fhv.json index 346d1782ac3..eb89bb08600 100644 --- a/advisories/unreviewed/2022/05/GHSA-whf2-mq76-2fhv/GHSA-whf2-mq76-2fhv.json +++ b/advisories/unreviewed/2022/05/GHSA-whf2-mq76-2fhv/GHSA-whf2-mq76-2fhv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wjfh-c8r5-cr32/GHSA-wjfh-c8r5-cr32.json b/advisories/unreviewed/2022/05/GHSA-wjfh-c8r5-cr32/GHSA-wjfh-c8r5-cr32.json index 6a214a85444..38abbc92203 100644 --- a/advisories/unreviewed/2022/05/GHSA-wjfh-c8r5-cr32/GHSA-wjfh-c8r5-cr32.json +++ b/advisories/unreviewed/2022/05/GHSA-wjfh-c8r5-cr32/GHSA-wjfh-c8r5-cr32.json @@ -7,12 +7,8 @@ "CVE-2019-4668" ], "details": "IBM UrbanCode Deploy (UCD) 7.0.4.0 stores user credentials in plain in clear text which can be read by a local user. IBM X-Force ID: 171250.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wjhm-c3w7-j8v7/GHSA-wjhm-c3w7-j8v7.json b/advisories/unreviewed/2022/05/GHSA-wjhm-c3w7-j8v7/GHSA-wjhm-c3w7-j8v7.json index d4a5249b1c4..2d23abd7b77 100644 --- a/advisories/unreviewed/2022/05/GHSA-wjhm-c3w7-j8v7/GHSA-wjhm-c3w7-j8v7.json +++ b/advisories/unreviewed/2022/05/GHSA-wjhm-c3w7-j8v7/GHSA-wjhm-c3w7-j8v7.json @@ -7,12 +7,8 @@ "CVE-2018-21110" ], "details": "NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wmcj-w5p4-34v2/GHSA-wmcj-w5p4-34v2.json b/advisories/unreviewed/2022/05/GHSA-wmcj-w5p4-34v2/GHSA-wmcj-w5p4-34v2.json index 9774d01d763..72cf447af47 100644 --- a/advisories/unreviewed/2022/05/GHSA-wmcj-w5p4-34v2/GHSA-wmcj-w5p4-34v2.json +++ b/advisories/unreviewed/2022/05/GHSA-wmcj-w5p4-34v2/GHSA-wmcj-w5p4-34v2.json @@ -7,12 +7,8 @@ "CVE-2020-8474" ], "details": "Weak Registry permissions in ABB System 800xA Base allow low privileged users to read and modify registry settings related to control system functionality, allowing an authenticated attacker to cause system functions to stop or malfunction.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wpc3-36g8-j6gf/GHSA-wpc3-36g8-j6gf.json b/advisories/unreviewed/2022/05/GHSA-wpc3-36g8-j6gf/GHSA-wpc3-36g8-j6gf.json index 5f0e815a0ee..a7064f1c9f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-wpc3-36g8-j6gf/GHSA-wpc3-36g8-j6gf.json +++ b/advisories/unreviewed/2022/05/GHSA-wpc3-36g8-j6gf/GHSA-wpc3-36g8-j6gf.json @@ -7,12 +7,8 @@ "CVE-2018-21160" ], "details": "NETGEAR ReadyNAS devices before 6.9.3 are affected by CSRF.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wqfw-39gh-42cj/GHSA-wqfw-39gh-42cj.json b/advisories/unreviewed/2022/05/GHSA-wqfw-39gh-42cj/GHSA-wqfw-39gh-42cj.json index d570d07df95..6cf988fdcda 100644 --- a/advisories/unreviewed/2022/05/GHSA-wqfw-39gh-42cj/GHSA-wqfw-39gh-42cj.json +++ b/advisories/unreviewed/2022/05/GHSA-wqfw-39gh-42cj/GHSA-wqfw-39gh-42cj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wr3h-rppv-6cm3/GHSA-wr3h-rppv-6cm3.json b/advisories/unreviewed/2022/05/GHSA-wr3h-rppv-6cm3/GHSA-wr3h-rppv-6cm3.json index 897e45d1fdd..8355dc646b1 100644 --- a/advisories/unreviewed/2022/05/GHSA-wr3h-rppv-6cm3/GHSA-wr3h-rppv-6cm3.json +++ b/advisories/unreviewed/2022/05/GHSA-wr3h-rppv-6cm3/GHSA-wr3h-rppv-6cm3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -75,9 +73,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wr43-jjw8-6v2v/GHSA-wr43-jjw8-6v2v.json b/advisories/unreviewed/2022/05/GHSA-wr43-jjw8-6v2v/GHSA-wr43-jjw8-6v2v.json index 8499cd77316..0c4e8d698cc 100644 --- a/advisories/unreviewed/2022/05/GHSA-wr43-jjw8-6v2v/GHSA-wr43-jjw8-6v2v.json +++ b/advisories/unreviewed/2022/05/GHSA-wr43-jjw8-6v2v/GHSA-wr43-jjw8-6v2v.json @@ -7,12 +7,8 @@ "CVE-2020-10094" ], "details": "A cross-site scripting (XSS) vulnerability in Lexmark CS31x before LW74.VYL.P273; CS41x before LW74.VY2.P273; CS51x before LW74.VY4.P273; CX310 before LW74.GM2.P273; CX410 & XC2130 before LW74.GM4.P273; CX510 & XC2132 before LW74.GM7.P273; MS310, MS312, MS317 before LW74.PRL.P273; MS410, M1140 before LW74.PRL.P273; MS315, MS415, MS417 before LW74.TL2.P273; MS51x, MS610dn, MS617 before LW74.PR2.P273; M1145, M3150dn before LW74.PR2.P273; MS610de, M3150 before LW74.PR4.P273; MS71x,M5163dn before LW74.DN2.P273; MS810, MS811, MS812, MS817, MS818 before LW74.DN2.P273; MS810de, M5155, M5163 before LW74.DN4.P273; MS812de, M5170 before LW74.DN7.P273; MS91x before LW74.SA.P273; MX31x, XM1135 before LW74.SB2.P273; MX410, MX510 & MX511 before LW74.SB4.P273; XM1140, XM1145 before LW74.SB4.P273; MX610 & MX611 before LW74.SB7.P273; XM3150 before LW74.SB7.P273; MX71x, MX81x before LW74.TU.P273; XM51xx & XM71xx before LW74.TU.P273; MX91x & XM91x before LW74.MG.P273; MX6500e before LW74.JD.P273; C746 before LHS60.CM2.P738; C748, CS748 before LHS60.CM4.P738; C792, CS796 before LHS60.HC.P738; C925 before LHS60.HV.P738; C950 before LHS60.TP.P738; X548 & XS548 before LHS60.VK.P738; X74x & XS748 before LHS60.NY.P738; X792 & XS79x before LHS60.MR.P738; X925 & XS925 before LHS60.HK.P738; X95x & XS95x before LHS60.TQ.P738; 6500e before LHS60.JR.P738;C734 LR.SK.P824 and earlier; C736 LR.SKE.P824 and earlier; E46x LR.LBH.P824 and earlier; T65x LR.JP.P824 and earlier; X46x LR.BS.P824 and earlier; X65x LR.MN.P824 and earlier; X73x LR.FL.P824 and earlier; W850 LP.JB.P823 and earlier; and X86x LP.SP.P823 and earlier.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wrf7-fmr7-fj5h/GHSA-wrf7-fmr7-fj5h.json b/advisories/unreviewed/2022/05/GHSA-wrf7-fmr7-fj5h/GHSA-wrf7-fmr7-fj5h.json index aef9f5f0bb3..1c237fbc0c6 100644 --- a/advisories/unreviewed/2022/05/GHSA-wrf7-fmr7-fj5h/GHSA-wrf7-fmr7-fj5h.json +++ b/advisories/unreviewed/2022/05/GHSA-wrf7-fmr7-fj5h/GHSA-wrf7-fmr7-fj5h.json @@ -7,12 +7,8 @@ "CVE-2017-18863" ], "details": "Certain NETGEAR devices are affected by command execution via a PHP form. This affects WN604 3.3.3 and earlier, WNAP210v2 3.5.20.0 and earlier, WNAP320 3.5.20.0 and earlier, WNDAP350 3.5.20.0 and earlier, WNDAP360 3.5.20.0 and earlier, WNDAP620 2.0.11 and earlier, WNDAP660 3.5.20.0 and earlier, WND930 2.0.11 and earlier, and WAC120 2.0.7 and earlier.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ww69-xxhg-pc55/GHSA-ww69-xxhg-pc55.json b/advisories/unreviewed/2022/05/GHSA-ww69-xxhg-pc55/GHSA-ww69-xxhg-pc55.json index 9177aa261c1..5d5f4aaaa63 100644 --- a/advisories/unreviewed/2022/05/GHSA-ww69-xxhg-pc55/GHSA-ww69-xxhg-pc55.json +++ b/advisories/unreviewed/2022/05/GHSA-ww69-xxhg-pc55/GHSA-ww69-xxhg-pc55.json @@ -7,12 +7,8 @@ "CVE-2020-7804" ], "details": "ActiveX Control(HShell.dll) in Handy Groupware 1.7.3.1 for Windows 7, 8, and 10 allows an attacker to execute arbitrary command via the ShellExec method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ww7q-w3g7-9cgc/GHSA-ww7q-w3g7-9cgc.json b/advisories/unreviewed/2022/05/GHSA-ww7q-w3g7-9cgc/GHSA-ww7q-w3g7-9cgc.json index 36645a32bca..c7110f3e468 100644 --- a/advisories/unreviewed/2022/05/GHSA-ww7q-w3g7-9cgc/GHSA-ww7q-w3g7-9cgc.json +++ b/advisories/unreviewed/2022/05/GHSA-ww7q-w3g7-9cgc/GHSA-ww7q-w3g7-9cgc.json @@ -7,12 +7,8 @@ "CVE-2019-19102" ], "details": "A directory traversal vulnerability in SharpZipLib used in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x and 4.2.x allow unauthenticated users to write to certain local directories. The vulnerability is also known as zip slip.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wwpp-2rgq-6wcx/GHSA-wwpp-2rgq-6wcx.json b/advisories/unreviewed/2022/05/GHSA-wwpp-2rgq-6wcx/GHSA-wwpp-2rgq-6wcx.json index 66c589c0bda..639404ff00f 100644 --- a/advisories/unreviewed/2022/05/GHSA-wwpp-2rgq-6wcx/GHSA-wwpp-2rgq-6wcx.json +++ b/advisories/unreviewed/2022/05/GHSA-wwpp-2rgq-6wcx/GHSA-wwpp-2rgq-6wcx.json @@ -7,12 +7,8 @@ "CVE-2018-21203" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects R6100 before 1.0.1.20, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.96, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.50, and WNDR4500v3 before 1.0.0.50.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wx58-3c3p-x3pm/GHSA-wx58-3c3p-x3pm.json b/advisories/unreviewed/2022/05/GHSA-wx58-3c3p-x3pm/GHSA-wx58-3c3p-x3pm.json index b8b933c4a52..e8bee13a9ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-wx58-3c3p-x3pm/GHSA-wx58-3c3p-x3pm.json +++ b/advisories/unreviewed/2022/05/GHSA-wx58-3c3p-x3pm/GHSA-wx58-3c3p-x3pm.json @@ -7,12 +7,8 @@ "CVE-2020-12461" ], "details": "PHP-Fusion 9.03.50 allows SQL Injection because maincore.php has an insufficient protection mechanism. An attacker can develop a crafted payload that can be inserted into the sort_order GET parameter on the members.php members search page. This parameter allows for control over anything after the ORDER BY clause in the SQL query.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wx72-ghfr-hc8q/GHSA-wx72-ghfr-hc8q.json b/advisories/unreviewed/2022/05/GHSA-wx72-ghfr-hc8q/GHSA-wx72-ghfr-hc8q.json index 77a7d875742..9da29def4f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-wx72-ghfr-hc8q/GHSA-wx72-ghfr-hc8q.json +++ b/advisories/unreviewed/2022/05/GHSA-wx72-ghfr-hc8q/GHSA-wx72-ghfr-hc8q.json @@ -7,12 +7,8 @@ "CVE-2020-7132" ], "details": "A potential security vulnerability has been identified in HPE Onboard Administrator. The vulnerability could be remotely exploited to allow Reflected Cross Site Scripting. HPE has made the following software updates and mitigation information to resolve the vulnerability in HPE Onboard Administrator. * OA 4.95 (Linux and Windows).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wx88-mgvp-v85p/GHSA-wx88-mgvp-v85p.json b/advisories/unreviewed/2022/05/GHSA-wx88-mgvp-v85p/GHSA-wx88-mgvp-v85p.json index 45cefaf21cf..a9c24fd0f0c 100644 --- a/advisories/unreviewed/2022/05/GHSA-wx88-mgvp-v85p/GHSA-wx88-mgvp-v85p.json +++ b/advisories/unreviewed/2022/05/GHSA-wx88-mgvp-v85p/GHSA-wx88-mgvp-v85p.json @@ -7,12 +7,8 @@ "CVE-2020-10664" ], "details": "The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wx9j-wrx5-q4xr/GHSA-wx9j-wrx5-q4xr.json b/advisories/unreviewed/2022/05/GHSA-wx9j-wrx5-q4xr/GHSA-wx9j-wrx5-q4xr.json index d6213691967..4310b479d3f 100644 --- a/advisories/unreviewed/2022/05/GHSA-wx9j-wrx5-q4xr/GHSA-wx9j-wrx5-q4xr.json +++ b/advisories/unreviewed/2022/05/GHSA-wx9j-wrx5-q4xr/GHSA-wx9j-wrx5-q4xr.json @@ -7,12 +7,8 @@ "CVE-2018-21230" ], "details": "Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects D1500 before 1.0.0.27, D500 before 1.0.0.27, D6100 before 1.0.0.57, D6220 before 1.0.0.40, D6400 before 1.0.0.74, D7000 before 1.0.1.60, D7800 before 1.0.1.34, D8500 before 1.0.3.39, DGN2200v4 before 1.0.0.94, DGN2200Bv4 before 1.0.0.94, EX2700 before 1.0.1.42, EX3700 before 1.0.0.64, EX3800 before 1.0.0.64, EX6000 before 1.0.0.24, EX6100 before 1.0.2.18, EX6120 before 1.0.0.32, EX6130 before 1.0.0.22, EX6150 before 1.0.0.34_1.0.70, EX6200 before 1.0.3.82_1.1.117, EX6400 before 1.0.1.78, EX7000 before 1.0.0.56, EX7300 before 1.0.1., JNR1010v2 before 1.1.0.42, JR6150 before 1.0.1.10, JWNR2010v5 before 1.1.0.42, PR2000 before 1.0.0.22, R6050 before 1.0.1.10, R6100 before 1.0.1.16, R6220 before 1.1.0.50, R6250 before 1.0.4.14, R6300v2 before 1.0.4.12, R6400v2 before 1.0.2.34, R6700 before 1.0.1.26, R6900 before 1.0.1.26, R6900P before 1.2.0.22, R7000 before 1.0.9.6, R7000P before 1.2.0.22, R7100LG before 1.0.0.40, R7300DST before 1.0.0.54, R7500 before 1.0.0.110, R7500v2 before 1.0.3.26, R7800 before 1.0.2.44, R7900 before 1.0.1.26, R8000 before 1.0.3.48, R8300 before 1.0.2.104, R8500 before 1.0.2.104, R9000 before 1.0.3.10, WN2000RPTv3 before 1.0.1.26, WN2500RPv2 before 1.0.1.46, WN3000RPv3 before 1.0.2.66, WN3100RPv2 before 1.0.0.56, WNDR3400v3 before 1.0.1.14, WNDR3700v4 before 1.0.2.96, WNDR3700v5 before 1.1.0.54, WNDR4300 before 1.0.2.98, WNDR4300v2 before 1.0.0.48, WNDR4500v3 before 1.0.0.48, WNR1000v4 before 1.1.0.42, WNR2000v5 before 1.0.0.64, WNR2020 before 1.1.0.42, and WNR2050 before 1.1.0.42.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x286-c2gq-hhf2/GHSA-x286-c2gq-hhf2.json b/advisories/unreviewed/2022/05/GHSA-x286-c2gq-hhf2/GHSA-x286-c2gq-hhf2.json index ff2d1eb72af..7ae8e49f5ac 100644 --- a/advisories/unreviewed/2022/05/GHSA-x286-c2gq-hhf2/GHSA-x286-c2gq-hhf2.json +++ b/advisories/unreviewed/2022/05/GHSA-x286-c2gq-hhf2/GHSA-x286-c2gq-hhf2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x2hv-7c8r-gxrh/GHSA-x2hv-7c8r-gxrh.json b/advisories/unreviewed/2022/05/GHSA-x2hv-7c8r-gxrh/GHSA-x2hv-7c8r-gxrh.json index 5ae54e67ef7..172b0dc5c8c 100644 --- a/advisories/unreviewed/2022/05/GHSA-x2hv-7c8r-gxrh/GHSA-x2hv-7c8r-gxrh.json +++ b/advisories/unreviewed/2022/05/GHSA-x2hv-7c8r-gxrh/GHSA-x2hv-7c8r-gxrh.json @@ -7,12 +7,8 @@ "CVE-2020-10909" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the AddWatermark command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9942.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x33f-59cm-w327/GHSA-x33f-59cm-w327.json b/advisories/unreviewed/2022/05/GHSA-x33f-59cm-w327/GHSA-x33f-59cm-w327.json index 25225345dbe..b6d54d2cf53 100644 --- a/advisories/unreviewed/2022/05/GHSA-x33f-59cm-w327/GHSA-x33f-59cm-w327.json +++ b/advisories/unreviewed/2022/05/GHSA-x33f-59cm-w327/GHSA-x33f-59cm-w327.json @@ -7,12 +7,8 @@ "CVE-2020-5562" ], "details": "Server-side request forgery (SSRF) vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows a remote attacker with an administrative privilege to issue arbitrary HTTP requests to other web servers via V-CUBE Meeting function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x3gm-grm6-9qm6/GHSA-x3gm-grm6-9qm6.json b/advisories/unreviewed/2022/05/GHSA-x3gm-grm6-9qm6/GHSA-x3gm-grm6-9qm6.json index 643604cb633..06a2f20063b 100644 --- a/advisories/unreviewed/2022/05/GHSA-x3gm-grm6-9qm6/GHSA-x3gm-grm6-9qm6.json +++ b/advisories/unreviewed/2022/05/GHSA-x3gm-grm6-9qm6/GHSA-x3gm-grm6-9qm6.json @@ -7,12 +7,8 @@ "CVE-2017-18712" ], "details": "Certain NETGEAR devices are affected by an attacker's ability to read arbitrary files. This affects D7800 before 1.0.1.28, R6100 before 1.0.1.20, R7500 before 1.0.0.118, R7500v2 before 1.0.3.20, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR4300v2 before 1.0.0.48, and WNDR4500v3 before 1.0.0.48.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x4r3-6m89-mjv9/GHSA-x4r3-6m89-mjv9.json b/advisories/unreviewed/2022/05/GHSA-x4r3-6m89-mjv9/GHSA-x4r3-6m89-mjv9.json index 735676ff979..4dd1ebc8c31 100644 --- a/advisories/unreviewed/2022/05/GHSA-x4r3-6m89-mjv9/GHSA-x4r3-6m89-mjv9.json +++ b/advisories/unreviewed/2022/05/GHSA-x4r3-6m89-mjv9/GHSA-x4r3-6m89-mjv9.json @@ -7,12 +7,8 @@ "CVE-2020-11420" ], "details": "UPS Adapter CS141 before 1.90 allows Directory Traversal. An attacker with Admin or Engineer login credentials could exploit the vulnerability by manipulating variables that reference files and by doing this achieve access to files and directories outside the web root folder. An attacker may access arbitrary files and directories stored in the file system, but integrity of the files are not jeopardized as attacker have read access rights only.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x6cj-pgq2-qvw6/GHSA-x6cj-pgq2-qvw6.json b/advisories/unreviewed/2022/05/GHSA-x6cj-pgq2-qvw6/GHSA-x6cj-pgq2-qvw6.json index 9fb6b395113..5b26c07eb0e 100644 --- a/advisories/unreviewed/2022/05/GHSA-x6cj-pgq2-qvw6/GHSA-x6cj-pgq2-qvw6.json +++ b/advisories/unreviewed/2022/05/GHSA-x6cj-pgq2-qvw6/GHSA-x6cj-pgq2-qvw6.json @@ -7,12 +7,8 @@ "CVE-2020-6579" ], "details": "Cross-site scripting (XSS) vulnerability in mailhive/cloudbeez/cloudloader.php and mailhive/cloudbeez/cloudloader_core.php in the MailBeez plugin for ZenCart before 3.9.22 allows remote attackers to inject arbitrary web script or HTML via the cloudloader_mode parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x6pg-pcfj-fjh2/GHSA-x6pg-pcfj-fjh2.json b/advisories/unreviewed/2022/05/GHSA-x6pg-pcfj-fjh2/GHSA-x6pg-pcfj-fjh2.json index abdec28ecf7..c6fd68a383c 100644 --- a/advisories/unreviewed/2022/05/GHSA-x6pg-pcfj-fjh2/GHSA-x6pg-pcfj-fjh2.json +++ b/advisories/unreviewed/2022/05/GHSA-x6pg-pcfj-fjh2/GHSA-x6pg-pcfj-fjh2.json @@ -7,12 +7,8 @@ "CVE-2020-10897" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.1.29511. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-10193.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x9hf-67xx-m36w/GHSA-x9hf-67xx-m36w.json b/advisories/unreviewed/2022/05/GHSA-x9hf-67xx-m36w/GHSA-x9hf-67xx-m36w.json index add9c1cb31e..5cd3fc77c0d 100644 --- a/advisories/unreviewed/2022/05/GHSA-x9hf-67xx-m36w/GHSA-x9hf-67xx-m36w.json +++ b/advisories/unreviewed/2022/05/GHSA-x9hf-67xx-m36w/GHSA-x9hf-67xx-m36w.json @@ -7,12 +7,8 @@ "CVE-2018-21164" ], "details": "Certain NETGEAR devices are affected by command injection by an authenticated user. This affects R6220 before 1.1.0.64 and WNDR3700v5 before 1.1.0.54.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xfjv-xrhq-gpr4/GHSA-xfjv-xrhq-gpr4.json b/advisories/unreviewed/2022/05/GHSA-xfjv-xrhq-gpr4/GHSA-xfjv-xrhq-gpr4.json index 790650e0c4e..3299c6b6b6a 100644 --- a/advisories/unreviewed/2022/05/GHSA-xfjv-xrhq-gpr4/GHSA-xfjv-xrhq-gpr4.json +++ b/advisories/unreviewed/2022/05/GHSA-xfjv-xrhq-gpr4/GHSA-xfjv-xrhq-gpr4.json @@ -7,12 +7,8 @@ "CVE-2018-21168" ], "details": "Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D7000 before 1.0.1.52, D7800 before 1.0.1.31, D8500 before 1.0.3.36, JNR1010v2 before 1.1.0.46, JR6150 before 1.0.1.14, JWNR2010v5 before 1.1.0.46, PR2000 before 1.0.0.20, R6050 before 1.0.1.14, R6220 before 1.1.0.60, R6400 before 1.1.0.26, R6400v2 before 1.0.2.46, R6700v2 before 1.2.0.2, R6800 before 1.2.0.2, R6900v2 before 1.2.0.2, R7300DST before 1.0.0.56, R7500 before 1.0.0.112, R7500v2 before 1.0.3.24, R7800 before 1.0.2.36, R7900P before 1.1.4.6, R8000P before 1.1.4.6, R8300 before 1.0.2.104, R8500 before 1.0.2.104, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.94, WNDR3700v5 before 1.1.0.50, WNDR4300 before 1.0.2.96, WNDR4300v2 before 1.0.0.52, WNDR4500v3 before 1.0.0.52, WNR1000v4 before 1.1.0.46, WNR2020 before 1.1.0.46, and WNR2050 before 1.1.0.46.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xfmw-jqx5-65gf/GHSA-xfmw-jqx5-65gf.json b/advisories/unreviewed/2022/05/GHSA-xfmw-jqx5-65gf/GHSA-xfmw-jqx5-65gf.json index ee008e3aa0b..3e7a50c816d 100644 --- a/advisories/unreviewed/2022/05/GHSA-xfmw-jqx5-65gf/GHSA-xfmw-jqx5-65gf.json +++ b/advisories/unreviewed/2022/05/GHSA-xfmw-jqx5-65gf/GHSA-xfmw-jqx5-65gf.json @@ -7,12 +7,8 @@ "CVE-2017-18736" ], "details": "Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects JR6150 before 1.0.1.10, R6050 before 1.0.1.10, R6220 before 1.1.0.50, R6700v2 before 1.2.0.4, R6800 before 1.2.0.4, R6900v2 before 1.2.0.4, and WNDR3700v5 before 1.1.0.48.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xfpr-4h28-2gvq/GHSA-xfpr-4h28-2gvq.json b/advisories/unreviewed/2022/05/GHSA-xfpr-4h28-2gvq/GHSA-xfpr-4h28-2gvq.json index 715660bd6b2..1123320f395 100644 --- a/advisories/unreviewed/2022/05/GHSA-xfpr-4h28-2gvq/GHSA-xfpr-4h28-2gvq.json +++ b/advisories/unreviewed/2022/05/GHSA-xfpr-4h28-2gvq/GHSA-xfpr-4h28-2gvq.json @@ -7,12 +7,8 @@ "CVE-2020-10913" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the OCRAndExportToExcel command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9946.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xg45-8xm3-hgrx/GHSA-xg45-8xm3-hgrx.json b/advisories/unreviewed/2022/05/GHSA-xg45-8xm3-hgrx/GHSA-xg45-8xm3-hgrx.json index c236ab3fc4f..2e9cd9137fa 100644 --- a/advisories/unreviewed/2022/05/GHSA-xg45-8xm3-hgrx/GHSA-xg45-8xm3-hgrx.json +++ b/advisories/unreviewed/2022/05/GHSA-xg45-8xm3-hgrx/GHSA-xg45-8xm3-hgrx.json @@ -7,12 +7,8 @@ "CVE-2017-18745" ], "details": "Certain NETGEAR devices are affected by stored XSS. This affects R6400 before 1.0.1.14, R6700 before 1.0.1.22, R6900 before 1.0.1.22, R7000 before 1.0.9.4, R7100LG before 1.0.0.32, R7300DST before 1.0.0.56, R7900 before 1.0.1.12, R8000 before 1.0.3.24, and R8500 before 1.0.2.74.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xgw5-rhxj-68w2/GHSA-xgw5-rhxj-68w2.json b/advisories/unreviewed/2022/05/GHSA-xgw5-rhxj-68w2/GHSA-xgw5-rhxj-68w2.json index 75d29eab82e..7c49a3373b3 100644 --- a/advisories/unreviewed/2022/05/GHSA-xgw5-rhxj-68w2/GHSA-xgw5-rhxj-68w2.json +++ b/advisories/unreviewed/2022/05/GHSA-xgw5-rhxj-68w2/GHSA-xgw5-rhxj-68w2.json @@ -7,12 +7,8 @@ "CVE-2017-18728" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xh23-mwfj-ffgr/GHSA-xh23-mwfj-ffgr.json b/advisories/unreviewed/2022/05/GHSA-xh23-mwfj-ffgr/GHSA-xh23-mwfj-ffgr.json index d531cfdb514..d52eea4e7e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-xh23-mwfj-ffgr/GHSA-xh23-mwfj-ffgr.json +++ b/advisories/unreviewed/2022/05/GHSA-xh23-mwfj-ffgr/GHSA-xh23-mwfj-ffgr.json @@ -7,12 +7,8 @@ "CVE-2018-21109" ], "details": "NETGEAR R7800 devices before 1.0.2.60 are affected by command injection by an authenticated user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xhhp-5vwx-9mmc/GHSA-xhhp-5vwx-9mmc.json b/advisories/unreviewed/2022/05/GHSA-xhhp-5vwx-9mmc/GHSA-xhhp-5vwx-9mmc.json index 588c2f51956..12839ecce2e 100644 --- a/advisories/unreviewed/2022/05/GHSA-xhhp-5vwx-9mmc/GHSA-xhhp-5vwx-9mmc.json +++ b/advisories/unreviewed/2022/05/GHSA-xhhp-5vwx-9mmc/GHSA-xhhp-5vwx-9mmc.json @@ -7,12 +7,8 @@ "CVE-2018-21179" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects D6100 before 1.0.0.57, D7800 before 1.0.1.30, R7500 before 1.0.0.122, R7500v2 before 1.0.3.24, R7800 before 1.0.2.40, R9000 before 1.0.2.52, WNDR3700v4 before 1.0.2.92, WNDR4300 before 1.0.2.94, WNDR4300v2 before 1.0.0.50, WNDR4500v3 before 1.0.0.50, and WNR2000v5 before 1.0.0.62.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xjgh-v29m-2r36/GHSA-xjgh-v29m-2r36.json b/advisories/unreviewed/2022/05/GHSA-xjgh-v29m-2r36/GHSA-xjgh-v29m-2r36.json index 3f6943ac73a..e3f26944240 100644 --- a/advisories/unreviewed/2022/05/GHSA-xjgh-v29m-2r36/GHSA-xjgh-v29m-2r36.json +++ b/advisories/unreviewed/2022/05/GHSA-xjgh-v29m-2r36/GHSA-xjgh-v29m-2r36.json @@ -7,12 +7,8 @@ "CVE-2020-10908" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 9.7.0.29478. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the Export command of the communication API. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-9865.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xjhp-97gh-h5mv/GHSA-xjhp-97gh-h5mv.json b/advisories/unreviewed/2022/05/GHSA-xjhp-97gh-h5mv/GHSA-xjhp-97gh-h5mv.json index 0593045bd2e..a29b46d685f 100644 --- a/advisories/unreviewed/2022/05/GHSA-xjhp-97gh-h5mv/GHSA-xjhp-97gh-h5mv.json +++ b/advisories/unreviewed/2022/05/GHSA-xjhp-97gh-h5mv/GHSA-xjhp-97gh-h5mv.json @@ -7,12 +7,8 @@ "CVE-2020-12446" ], "details": "The ene.sys driver in G.SKILL Trident Z Lighting Control through 1.00.08 exposes mapping and un-mapping of physical memory, reading and writing to Model Specific Register (MSR) registers, and input from and output to I/O ports to local non-privileged users. This leads to privilege escalation to NT AUTHORITY\\SYSTEM.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xphv-67vw-89c5/GHSA-xphv-67vw-89c5.json b/advisories/unreviewed/2022/05/GHSA-xphv-67vw-89c5/GHSA-xphv-67vw-89c5.json index 2a28946d4fb..52f8059de07 100644 --- a/advisories/unreviewed/2022/05/GHSA-xphv-67vw-89c5/GHSA-xphv-67vw-89c5.json +++ b/advisories/unreviewed/2022/05/GHSA-xphv-67vw-89c5/GHSA-xphv-67vw-89c5.json @@ -7,12 +7,8 @@ "CVE-2020-8473" ], "details": "Insufficient folder permissions used by system functions in ABB System 800xA Base (version 6.1 and earlier) allow low privileged users to read, modify, add and delete system and application files. An authenticated attacker who successfully exploit the vulnerabilities could escalate his/her privileges, cause system functions to stop and to corrupt user applications.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xvx2-w5pj-9472/GHSA-xvx2-w5pj-9472.json b/advisories/unreviewed/2022/05/GHSA-xvx2-w5pj-9472/GHSA-xvx2-w5pj-9472.json index ef377475268..6d042cedc8e 100644 --- a/advisories/unreviewed/2022/05/GHSA-xvx2-w5pj-9472/GHSA-xvx2-w5pj-9472.json +++ b/advisories/unreviewed/2022/05/GHSA-xvx2-w5pj-9472/GHSA-xvx2-w5pj-9472.json @@ -7,12 +7,8 @@ "CVE-2020-6827" ], "details": "When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for Android could be tricked into displaying the incorrect URI.
*Note: This issue only affects Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 68.7.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xww8-2w72-55w2/GHSA-xww8-2w72-55w2.json b/advisories/unreviewed/2022/05/GHSA-xww8-2w72-55w2/GHSA-xww8-2w72-55w2.json index 5b433aceaf3..49e8d7aa7e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-xww8-2w72-55w2/GHSA-xww8-2w72-55w2.json +++ b/advisories/unreviewed/2022/05/GHSA-xww8-2w72-55w2/GHSA-xww8-2w72-55w2.json @@ -7,12 +7,8 @@ "CVE-2017-18717" ], "details": "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects D6200 before 1.1.00.24, R6700v2 before 1.1.0.42, R6800 before 1.1.0.42, and R6900v2 before 1.1.0.42.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/11/GHSA-2m73-2hpg-2q56/GHSA-2m73-2hpg-2q56.json b/advisories/unreviewed/2022/11/GHSA-2m73-2hpg-2q56/GHSA-2m73-2hpg-2q56.json index 60dbfe5de00..a4fef9867a7 100644 --- a/advisories/unreviewed/2022/11/GHSA-2m73-2hpg-2q56/GHSA-2m73-2hpg-2q56.json +++ b/advisories/unreviewed/2022/11/GHSA-2m73-2hpg-2q56/GHSA-2m73-2hpg-2q56.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-3469-4crg-fcc8/GHSA-3469-4crg-fcc8.json b/advisories/unreviewed/2022/11/GHSA-3469-4crg-fcc8/GHSA-3469-4crg-fcc8.json index e0a4e176937..1d541e281c4 100644 --- a/advisories/unreviewed/2022/11/GHSA-3469-4crg-fcc8/GHSA-3469-4crg-fcc8.json +++ b/advisories/unreviewed/2022/11/GHSA-3469-4crg-fcc8/GHSA-3469-4crg-fcc8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-3gwx-2xm3-mrcj/GHSA-3gwx-2xm3-mrcj.json b/advisories/unreviewed/2022/11/GHSA-3gwx-2xm3-mrcj/GHSA-3gwx-2xm3-mrcj.json index c7b9bb56d33..ecd7e92226d 100644 --- a/advisories/unreviewed/2022/11/GHSA-3gwx-2xm3-mrcj/GHSA-3gwx-2xm3-mrcj.json +++ b/advisories/unreviewed/2022/11/GHSA-3gwx-2xm3-mrcj/GHSA-3gwx-2xm3-mrcj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-3h56-x5h4-66w9/GHSA-3h56-x5h4-66w9.json b/advisories/unreviewed/2022/11/GHSA-3h56-x5h4-66w9/GHSA-3h56-x5h4-66w9.json index a6d5b72d8ff..cccc9a8423e 100644 --- a/advisories/unreviewed/2022/11/GHSA-3h56-x5h4-66w9/GHSA-3h56-x5h4-66w9.json +++ b/advisories/unreviewed/2022/11/GHSA-3h56-x5h4-66w9/GHSA-3h56-x5h4-66w9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-3jhw-mc8h-c9h7/GHSA-3jhw-mc8h-c9h7.json b/advisories/unreviewed/2022/11/GHSA-3jhw-mc8h-c9h7/GHSA-3jhw-mc8h-c9h7.json index b9f7269741a..f3bbe7ac145 100644 --- a/advisories/unreviewed/2022/11/GHSA-3jhw-mc8h-c9h7/GHSA-3jhw-mc8h-c9h7.json +++ b/advisories/unreviewed/2022/11/GHSA-3jhw-mc8h-c9h7/GHSA-3jhw-mc8h-c9h7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-3qwc-gvhp-6f85/GHSA-3qwc-gvhp-6f85.json b/advisories/unreviewed/2022/11/GHSA-3qwc-gvhp-6f85/GHSA-3qwc-gvhp-6f85.json index 401551b713d..5b337e57b0f 100644 --- a/advisories/unreviewed/2022/11/GHSA-3qwc-gvhp-6f85/GHSA-3qwc-gvhp-6f85.json +++ b/advisories/unreviewed/2022/11/GHSA-3qwc-gvhp-6f85/GHSA-3qwc-gvhp-6f85.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-3vp5-85fp-rw6x/GHSA-3vp5-85fp-rw6x.json b/advisories/unreviewed/2022/11/GHSA-3vp5-85fp-rw6x/GHSA-3vp5-85fp-rw6x.json index c48b1a3b6d1..ad0fbaa2fcb 100644 --- a/advisories/unreviewed/2022/11/GHSA-3vp5-85fp-rw6x/GHSA-3vp5-85fp-rw6x.json +++ b/advisories/unreviewed/2022/11/GHSA-3vp5-85fp-rw6x/GHSA-3vp5-85fp-rw6x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-4g76-357g-vr49/GHSA-4g76-357g-vr49.json b/advisories/unreviewed/2022/11/GHSA-4g76-357g-vr49/GHSA-4g76-357g-vr49.json index 4a31f61494e..ff80a08c0b3 100644 --- a/advisories/unreviewed/2022/11/GHSA-4g76-357g-vr49/GHSA-4g76-357g-vr49.json +++ b/advisories/unreviewed/2022/11/GHSA-4g76-357g-vr49/GHSA-4g76-357g-vr49.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-575c-j9f6-j63w/GHSA-575c-j9f6-j63w.json b/advisories/unreviewed/2022/11/GHSA-575c-j9f6-j63w/GHSA-575c-j9f6-j63w.json index 0d5e2e553c9..6099bab9f51 100644 --- a/advisories/unreviewed/2022/11/GHSA-575c-j9f6-j63w/GHSA-575c-j9f6-j63w.json +++ b/advisories/unreviewed/2022/11/GHSA-575c-j9f6-j63w/GHSA-575c-j9f6-j63w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-5785-xpm4-v555/GHSA-5785-xpm4-v555.json b/advisories/unreviewed/2022/11/GHSA-5785-xpm4-v555/GHSA-5785-xpm4-v555.json index f28a68fb0b8..b536acd4964 100644 --- a/advisories/unreviewed/2022/11/GHSA-5785-xpm4-v555/GHSA-5785-xpm4-v555.json +++ b/advisories/unreviewed/2022/11/GHSA-5785-xpm4-v555/GHSA-5785-xpm4-v555.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-66rf-v799-cvj8/GHSA-66rf-v799-cvj8.json b/advisories/unreviewed/2022/11/GHSA-66rf-v799-cvj8/GHSA-66rf-v799-cvj8.json index e90269b8a90..ee355e47796 100644 --- a/advisories/unreviewed/2022/11/GHSA-66rf-v799-cvj8/GHSA-66rf-v799-cvj8.json +++ b/advisories/unreviewed/2022/11/GHSA-66rf-v799-cvj8/GHSA-66rf-v799-cvj8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-6cvr-vvr4-3rwc/GHSA-6cvr-vvr4-3rwc.json b/advisories/unreviewed/2022/11/GHSA-6cvr-vvr4-3rwc/GHSA-6cvr-vvr4-3rwc.json index 6b93b0662ec..6ff2791b057 100644 --- a/advisories/unreviewed/2022/11/GHSA-6cvr-vvr4-3rwc/GHSA-6cvr-vvr4-3rwc.json +++ b/advisories/unreviewed/2022/11/GHSA-6cvr-vvr4-3rwc/GHSA-6cvr-vvr4-3rwc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-6f56-38v3-2xvq/GHSA-6f56-38v3-2xvq.json b/advisories/unreviewed/2022/11/GHSA-6f56-38v3-2xvq/GHSA-6f56-38v3-2xvq.json index 3bc3533e281..d19b5c26a66 100644 --- a/advisories/unreviewed/2022/11/GHSA-6f56-38v3-2xvq/GHSA-6f56-38v3-2xvq.json +++ b/advisories/unreviewed/2022/11/GHSA-6f56-38v3-2xvq/GHSA-6f56-38v3-2xvq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-6rgm-phq5-f5ww/GHSA-6rgm-phq5-f5ww.json b/advisories/unreviewed/2022/11/GHSA-6rgm-phq5-f5ww/GHSA-6rgm-phq5-f5ww.json index 0a01ee11ec0..c92906fecbe 100644 --- a/advisories/unreviewed/2022/11/GHSA-6rgm-phq5-f5ww/GHSA-6rgm-phq5-f5ww.json +++ b/advisories/unreviewed/2022/11/GHSA-6rgm-phq5-f5ww/GHSA-6rgm-phq5-f5ww.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-6vj6-45jf-fr3w/GHSA-6vj6-45jf-fr3w.json b/advisories/unreviewed/2022/11/GHSA-6vj6-45jf-fr3w/GHSA-6vj6-45jf-fr3w.json index 7fc620ae6da..ed160fb09af 100644 --- a/advisories/unreviewed/2022/11/GHSA-6vj6-45jf-fr3w/GHSA-6vj6-45jf-fr3w.json +++ b/advisories/unreviewed/2022/11/GHSA-6vj6-45jf-fr3w/GHSA-6vj6-45jf-fr3w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-7jhg-5532-mghv/GHSA-7jhg-5532-mghv.json b/advisories/unreviewed/2022/11/GHSA-7jhg-5532-mghv/GHSA-7jhg-5532-mghv.json index 8d9b50fc2d9..2d8f350a4c2 100644 --- a/advisories/unreviewed/2022/11/GHSA-7jhg-5532-mghv/GHSA-7jhg-5532-mghv.json +++ b/advisories/unreviewed/2022/11/GHSA-7jhg-5532-mghv/GHSA-7jhg-5532-mghv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-7rvc-8p69-p5px/GHSA-7rvc-8p69-p5px.json b/advisories/unreviewed/2022/11/GHSA-7rvc-8p69-p5px/GHSA-7rvc-8p69-p5px.json index a8857989ddb..19fa8b4472c 100644 --- a/advisories/unreviewed/2022/11/GHSA-7rvc-8p69-p5px/GHSA-7rvc-8p69-p5px.json +++ b/advisories/unreviewed/2022/11/GHSA-7rvc-8p69-p5px/GHSA-7rvc-8p69-p5px.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-7vmr-w25q-ff25/GHSA-7vmr-w25q-ff25.json b/advisories/unreviewed/2022/11/GHSA-7vmr-w25q-ff25/GHSA-7vmr-w25q-ff25.json index bbe3f65ac7b..bd382531d7c 100644 --- a/advisories/unreviewed/2022/11/GHSA-7vmr-w25q-ff25/GHSA-7vmr-w25q-ff25.json +++ b/advisories/unreviewed/2022/11/GHSA-7vmr-w25q-ff25/GHSA-7vmr-w25q-ff25.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-8jjw-2j6j-mwc7/GHSA-8jjw-2j6j-mwc7.json b/advisories/unreviewed/2022/11/GHSA-8jjw-2j6j-mwc7/GHSA-8jjw-2j6j-mwc7.json index 4d836d42633..638021c9ea5 100644 --- a/advisories/unreviewed/2022/11/GHSA-8jjw-2j6j-mwc7/GHSA-8jjw-2j6j-mwc7.json +++ b/advisories/unreviewed/2022/11/GHSA-8jjw-2j6j-mwc7/GHSA-8jjw-2j6j-mwc7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-8q5p-qmpg-qjxv/GHSA-8q5p-qmpg-qjxv.json b/advisories/unreviewed/2022/11/GHSA-8q5p-qmpg-qjxv/GHSA-8q5p-qmpg-qjxv.json index 539e38451ab..089378d1830 100644 --- a/advisories/unreviewed/2022/11/GHSA-8q5p-qmpg-qjxv/GHSA-8q5p-qmpg-qjxv.json +++ b/advisories/unreviewed/2022/11/GHSA-8q5p-qmpg-qjxv/GHSA-8q5p-qmpg-qjxv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-94pj-p5f3-xwg3/GHSA-94pj-p5f3-xwg3.json b/advisories/unreviewed/2022/11/GHSA-94pj-p5f3-xwg3/GHSA-94pj-p5f3-xwg3.json index 6241c31a7c4..2099e69939c 100644 --- a/advisories/unreviewed/2022/11/GHSA-94pj-p5f3-xwg3/GHSA-94pj-p5f3-xwg3.json +++ b/advisories/unreviewed/2022/11/GHSA-94pj-p5f3-xwg3/GHSA-94pj-p5f3-xwg3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/11/GHSA-96h5-73vv-874h/GHSA-96h5-73vv-874h.json b/advisories/unreviewed/2022/11/GHSA-96h5-73vv-874h/GHSA-96h5-73vv-874h.json index 2229754c2c5..18ad03ac2f4 100644 --- a/advisories/unreviewed/2022/11/GHSA-96h5-73vv-874h/GHSA-96h5-73vv-874h.json +++ b/advisories/unreviewed/2022/11/GHSA-96h5-73vv-874h/GHSA-96h5-73vv-874h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-c2xw-mj3m-66cw/GHSA-c2xw-mj3m-66cw.json b/advisories/unreviewed/2022/11/GHSA-c2xw-mj3m-66cw/GHSA-c2xw-mj3m-66cw.json index 71ec64f63e8..17904cd4b4f 100644 --- a/advisories/unreviewed/2022/11/GHSA-c2xw-mj3m-66cw/GHSA-c2xw-mj3m-66cw.json +++ b/advisories/unreviewed/2022/11/GHSA-c2xw-mj3m-66cw/GHSA-c2xw-mj3m-66cw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-c65r-538m-2h3f/GHSA-c65r-538m-2h3f.json b/advisories/unreviewed/2022/11/GHSA-c65r-538m-2h3f/GHSA-c65r-538m-2h3f.json index a05096dc0b1..c64fb378e84 100644 --- a/advisories/unreviewed/2022/11/GHSA-c65r-538m-2h3f/GHSA-c65r-538m-2h3f.json +++ b/advisories/unreviewed/2022/11/GHSA-c65r-538m-2h3f/GHSA-c65r-538m-2h3f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-c8rr-vr4h-5x87/GHSA-c8rr-vr4h-5x87.json b/advisories/unreviewed/2022/11/GHSA-c8rr-vr4h-5x87/GHSA-c8rr-vr4h-5x87.json index 3c936924695..8b12814a20d 100644 --- a/advisories/unreviewed/2022/11/GHSA-c8rr-vr4h-5x87/GHSA-c8rr-vr4h-5x87.json +++ b/advisories/unreviewed/2022/11/GHSA-c8rr-vr4h-5x87/GHSA-c8rr-vr4h-5x87.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-c9vv-2c52-w74h/GHSA-c9vv-2c52-w74h.json b/advisories/unreviewed/2022/11/GHSA-c9vv-2c52-w74h/GHSA-c9vv-2c52-w74h.json index 1319a1cbb63..e9fa59d1df7 100644 --- a/advisories/unreviewed/2022/11/GHSA-c9vv-2c52-w74h/GHSA-c9vv-2c52-w74h.json +++ b/advisories/unreviewed/2022/11/GHSA-c9vv-2c52-w74h/GHSA-c9vv-2c52-w74h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-crgc-54cc-qp4g/GHSA-crgc-54cc-qp4g.json b/advisories/unreviewed/2022/11/GHSA-crgc-54cc-qp4g/GHSA-crgc-54cc-qp4g.json index 3095afeb2ed..97920bc784f 100644 --- a/advisories/unreviewed/2022/11/GHSA-crgc-54cc-qp4g/GHSA-crgc-54cc-qp4g.json +++ b/advisories/unreviewed/2022/11/GHSA-crgc-54cc-qp4g/GHSA-crgc-54cc-qp4g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-cw3q-4545-8g5x/GHSA-cw3q-4545-8g5x.json b/advisories/unreviewed/2022/11/GHSA-cw3q-4545-8g5x/GHSA-cw3q-4545-8g5x.json index 09a78915c38..c41e0cfce57 100644 --- a/advisories/unreviewed/2022/11/GHSA-cw3q-4545-8g5x/GHSA-cw3q-4545-8g5x.json +++ b/advisories/unreviewed/2022/11/GHSA-cw3q-4545-8g5x/GHSA-cw3q-4545-8g5x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-cxwj-7754-pq73/GHSA-cxwj-7754-pq73.json b/advisories/unreviewed/2022/11/GHSA-cxwj-7754-pq73/GHSA-cxwj-7754-pq73.json index c8d601b4b3f..e3719bbd800 100644 --- a/advisories/unreviewed/2022/11/GHSA-cxwj-7754-pq73/GHSA-cxwj-7754-pq73.json +++ b/advisories/unreviewed/2022/11/GHSA-cxwj-7754-pq73/GHSA-cxwj-7754-pq73.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-fq8v-gxm4-m5gv/GHSA-fq8v-gxm4-m5gv.json b/advisories/unreviewed/2022/11/GHSA-fq8v-gxm4-m5gv/GHSA-fq8v-gxm4-m5gv.json index 84e3d7d8a0e..174ae9538ed 100644 --- a/advisories/unreviewed/2022/11/GHSA-fq8v-gxm4-m5gv/GHSA-fq8v-gxm4-m5gv.json +++ b/advisories/unreviewed/2022/11/GHSA-fq8v-gxm4-m5gv/GHSA-fq8v-gxm4-m5gv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-frv7-33r5-fg4g/GHSA-frv7-33r5-fg4g.json b/advisories/unreviewed/2022/11/GHSA-frv7-33r5-fg4g/GHSA-frv7-33r5-fg4g.json index 6ea34d140a0..f0a0f7b8e3e 100644 --- a/advisories/unreviewed/2022/11/GHSA-frv7-33r5-fg4g/GHSA-frv7-33r5-fg4g.json +++ b/advisories/unreviewed/2022/11/GHSA-frv7-33r5-fg4g/GHSA-frv7-33r5-fg4g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-g6x8-jxpj-jmgj/GHSA-g6x8-jxpj-jmgj.json b/advisories/unreviewed/2022/11/GHSA-g6x8-jxpj-jmgj/GHSA-g6x8-jxpj-jmgj.json index fa5730e3929..fbb01d741e8 100644 --- a/advisories/unreviewed/2022/11/GHSA-g6x8-jxpj-jmgj/GHSA-g6x8-jxpj-jmgj.json +++ b/advisories/unreviewed/2022/11/GHSA-g6x8-jxpj-jmgj/GHSA-g6x8-jxpj-jmgj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-ghm2-qcf7-hv93/GHSA-ghm2-qcf7-hv93.json b/advisories/unreviewed/2022/11/GHSA-ghm2-qcf7-hv93/GHSA-ghm2-qcf7-hv93.json index 153e1dd60a3..e68880b8ad0 100644 --- a/advisories/unreviewed/2022/11/GHSA-ghm2-qcf7-hv93/GHSA-ghm2-qcf7-hv93.json +++ b/advisories/unreviewed/2022/11/GHSA-ghm2-qcf7-hv93/GHSA-ghm2-qcf7-hv93.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-gqmx-7hj9-m7jj/GHSA-gqmx-7hj9-m7jj.json b/advisories/unreviewed/2022/11/GHSA-gqmx-7hj9-m7jj/GHSA-gqmx-7hj9-m7jj.json index 696516099ec..b81721bda32 100644 --- a/advisories/unreviewed/2022/11/GHSA-gqmx-7hj9-m7jj/GHSA-gqmx-7hj9-m7jj.json +++ b/advisories/unreviewed/2022/11/GHSA-gqmx-7hj9-m7jj/GHSA-gqmx-7hj9-m7jj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-h6x8-4mx9-224h/GHSA-h6x8-4mx9-224h.json b/advisories/unreviewed/2022/11/GHSA-h6x8-4mx9-224h/GHSA-h6x8-4mx9-224h.json index 2d41ae1dd6f..eb8032efef0 100644 --- a/advisories/unreviewed/2022/11/GHSA-h6x8-4mx9-224h/GHSA-h6x8-4mx9-224h.json +++ b/advisories/unreviewed/2022/11/GHSA-h6x8-4mx9-224h/GHSA-h6x8-4mx9-224h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-h9m7-7fr7-xhf5/GHSA-h9m7-7fr7-xhf5.json b/advisories/unreviewed/2022/11/GHSA-h9m7-7fr7-xhf5/GHSA-h9m7-7fr7-xhf5.json index 84310f21b5c..bf749571800 100644 --- a/advisories/unreviewed/2022/11/GHSA-h9m7-7fr7-xhf5/GHSA-h9m7-7fr7-xhf5.json +++ b/advisories/unreviewed/2022/11/GHSA-h9m7-7fr7-xhf5/GHSA-h9m7-7fr7-xhf5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-hw93-9r88-26rp/GHSA-hw93-9r88-26rp.json b/advisories/unreviewed/2022/11/GHSA-hw93-9r88-26rp/GHSA-hw93-9r88-26rp.json index 63f8de8fdc0..0b68450a9c2 100644 --- a/advisories/unreviewed/2022/11/GHSA-hw93-9r88-26rp/GHSA-hw93-9r88-26rp.json +++ b/advisories/unreviewed/2022/11/GHSA-hw93-9r88-26rp/GHSA-hw93-9r88-26rp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-jp5m-rmjh-rg7r/GHSA-jp5m-rmjh-rg7r.json b/advisories/unreviewed/2022/11/GHSA-jp5m-rmjh-rg7r/GHSA-jp5m-rmjh-rg7r.json index 5d31f5e01d1..323ea09694b 100644 --- a/advisories/unreviewed/2022/11/GHSA-jp5m-rmjh-rg7r/GHSA-jp5m-rmjh-rg7r.json +++ b/advisories/unreviewed/2022/11/GHSA-jp5m-rmjh-rg7r/GHSA-jp5m-rmjh-rg7r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-jwrw-2fh5-fg85/GHSA-jwrw-2fh5-fg85.json b/advisories/unreviewed/2022/11/GHSA-jwrw-2fh5-fg85/GHSA-jwrw-2fh5-fg85.json index c1c70a7a1bc..c67e4a8e004 100644 --- a/advisories/unreviewed/2022/11/GHSA-jwrw-2fh5-fg85/GHSA-jwrw-2fh5-fg85.json +++ b/advisories/unreviewed/2022/11/GHSA-jwrw-2fh5-fg85/GHSA-jwrw-2fh5-fg85.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-m2wg-p64c-9g45/GHSA-m2wg-p64c-9g45.json b/advisories/unreviewed/2022/11/GHSA-m2wg-p64c-9g45/GHSA-m2wg-p64c-9g45.json index 163ab0d66fe..7dbb8273b81 100644 --- a/advisories/unreviewed/2022/11/GHSA-m2wg-p64c-9g45/GHSA-m2wg-p64c-9g45.json +++ b/advisories/unreviewed/2022/11/GHSA-m2wg-p64c-9g45/GHSA-m2wg-p64c-9g45.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-m88c-4j8m-97f3/GHSA-m88c-4j8m-97f3.json b/advisories/unreviewed/2022/11/GHSA-m88c-4j8m-97f3/GHSA-m88c-4j8m-97f3.json index ba55ec37509..69f35da19c1 100644 --- a/advisories/unreviewed/2022/11/GHSA-m88c-4j8m-97f3/GHSA-m88c-4j8m-97f3.json +++ b/advisories/unreviewed/2022/11/GHSA-m88c-4j8m-97f3/GHSA-m88c-4j8m-97f3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-mh3f-7jrf-xp34/GHSA-mh3f-7jrf-xp34.json b/advisories/unreviewed/2022/11/GHSA-mh3f-7jrf-xp34/GHSA-mh3f-7jrf-xp34.json index 45b774fe1ce..7c37f3f12f0 100644 --- a/advisories/unreviewed/2022/11/GHSA-mh3f-7jrf-xp34/GHSA-mh3f-7jrf-xp34.json +++ b/advisories/unreviewed/2022/11/GHSA-mh3f-7jrf-xp34/GHSA-mh3f-7jrf-xp34.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-pggj-5r99-rf46/GHSA-pggj-5r99-rf46.json b/advisories/unreviewed/2022/11/GHSA-pggj-5r99-rf46/GHSA-pggj-5r99-rf46.json index 4794daf8fcc..89c85bd8ac2 100644 --- a/advisories/unreviewed/2022/11/GHSA-pggj-5r99-rf46/GHSA-pggj-5r99-rf46.json +++ b/advisories/unreviewed/2022/11/GHSA-pggj-5r99-rf46/GHSA-pggj-5r99-rf46.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-pr8j-283m-jpf6/GHSA-pr8j-283m-jpf6.json b/advisories/unreviewed/2022/11/GHSA-pr8j-283m-jpf6/GHSA-pr8j-283m-jpf6.json index 062d0905b62..85c624144e0 100644 --- a/advisories/unreviewed/2022/11/GHSA-pr8j-283m-jpf6/GHSA-pr8j-283m-jpf6.json +++ b/advisories/unreviewed/2022/11/GHSA-pr8j-283m-jpf6/GHSA-pr8j-283m-jpf6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-q5qv-4wvf-4v9h/GHSA-q5qv-4wvf-4v9h.json b/advisories/unreviewed/2022/11/GHSA-q5qv-4wvf-4v9h/GHSA-q5qv-4wvf-4v9h.json index 285a0c74e94..a98d08ebf78 100644 --- a/advisories/unreviewed/2022/11/GHSA-q5qv-4wvf-4v9h/GHSA-q5qv-4wvf-4v9h.json +++ b/advisories/unreviewed/2022/11/GHSA-q5qv-4wvf-4v9h/GHSA-q5qv-4wvf-4v9h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-qqr3-6p45-f2xm/GHSA-qqr3-6p45-f2xm.json b/advisories/unreviewed/2022/11/GHSA-qqr3-6p45-f2xm/GHSA-qqr3-6p45-f2xm.json index 06cd017890f..2bbb19927d4 100644 --- a/advisories/unreviewed/2022/11/GHSA-qqr3-6p45-f2xm/GHSA-qqr3-6p45-f2xm.json +++ b/advisories/unreviewed/2022/11/GHSA-qqr3-6p45-f2xm/GHSA-qqr3-6p45-f2xm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-v6j7-598r-8pgg/GHSA-v6j7-598r-8pgg.json b/advisories/unreviewed/2022/11/GHSA-v6j7-598r-8pgg/GHSA-v6j7-598r-8pgg.json index cb86585c489..585ba357b07 100644 --- a/advisories/unreviewed/2022/11/GHSA-v6j7-598r-8pgg/GHSA-v6j7-598r-8pgg.json +++ b/advisories/unreviewed/2022/11/GHSA-v6j7-598r-8pgg/GHSA-v6j7-598r-8pgg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-v7fw-7w54-jqq4/GHSA-v7fw-7w54-jqq4.json b/advisories/unreviewed/2022/11/GHSA-v7fw-7w54-jqq4/GHSA-v7fw-7w54-jqq4.json index 6f6fa44ad23..853a70e5c11 100644 --- a/advisories/unreviewed/2022/11/GHSA-v7fw-7w54-jqq4/GHSA-v7fw-7w54-jqq4.json +++ b/advisories/unreviewed/2022/11/GHSA-v7fw-7w54-jqq4/GHSA-v7fw-7w54-jqq4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-vcpg-cpx3-43rf/GHSA-vcpg-cpx3-43rf.json b/advisories/unreviewed/2022/11/GHSA-vcpg-cpx3-43rf/GHSA-vcpg-cpx3-43rf.json index a67df25eab0..7c3c39697b3 100644 --- a/advisories/unreviewed/2022/11/GHSA-vcpg-cpx3-43rf/GHSA-vcpg-cpx3-43rf.json +++ b/advisories/unreviewed/2022/11/GHSA-vcpg-cpx3-43rf/GHSA-vcpg-cpx3-43rf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-wfgx-7r85-fvqv/GHSA-wfgx-7r85-fvqv.json b/advisories/unreviewed/2022/11/GHSA-wfgx-7r85-fvqv/GHSA-wfgx-7r85-fvqv.json index 2bf4139ff10..e0d961c0a68 100644 --- a/advisories/unreviewed/2022/11/GHSA-wfgx-7r85-fvqv/GHSA-wfgx-7r85-fvqv.json +++ b/advisories/unreviewed/2022/11/GHSA-wfgx-7r85-fvqv/GHSA-wfgx-7r85-fvqv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-wg25-2f78-v9wc/GHSA-wg25-2f78-v9wc.json b/advisories/unreviewed/2022/11/GHSA-wg25-2f78-v9wc/GHSA-wg25-2f78-v9wc.json index 888a5c0887b..caa52ba55a0 100644 --- a/advisories/unreviewed/2022/11/GHSA-wg25-2f78-v9wc/GHSA-wg25-2f78-v9wc.json +++ b/advisories/unreviewed/2022/11/GHSA-wg25-2f78-v9wc/GHSA-wg25-2f78-v9wc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-wpgg-rjgm-8232/GHSA-wpgg-rjgm-8232.json b/advisories/unreviewed/2022/11/GHSA-wpgg-rjgm-8232/GHSA-wpgg-rjgm-8232.json index c2f59e73d36..b4fed2f8af4 100644 --- a/advisories/unreviewed/2022/11/GHSA-wpgg-rjgm-8232/GHSA-wpgg-rjgm-8232.json +++ b/advisories/unreviewed/2022/11/GHSA-wpgg-rjgm-8232/GHSA-wpgg-rjgm-8232.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-wpmq-hr5x-r7wq/GHSA-wpmq-hr5x-r7wq.json b/advisories/unreviewed/2022/11/GHSA-wpmq-hr5x-r7wq/GHSA-wpmq-hr5x-r7wq.json index 1c45494b664..842d2bd46da 100644 --- a/advisories/unreviewed/2022/11/GHSA-wpmq-hr5x-r7wq/GHSA-wpmq-hr5x-r7wq.json +++ b/advisories/unreviewed/2022/11/GHSA-wpmq-hr5x-r7wq/GHSA-wpmq-hr5x-r7wq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-wpxc-gmf6-rj8h/GHSA-wpxc-gmf6-rj8h.json b/advisories/unreviewed/2022/11/GHSA-wpxc-gmf6-rj8h/GHSA-wpxc-gmf6-rj8h.json index 6bf48061f77..d36f4167ac8 100644 --- a/advisories/unreviewed/2022/11/GHSA-wpxc-gmf6-rj8h/GHSA-wpxc-gmf6-rj8h.json +++ b/advisories/unreviewed/2022/11/GHSA-wpxc-gmf6-rj8h/GHSA-wpxc-gmf6-rj8h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-xqwj-v278-6v7x/GHSA-xqwj-v278-6v7x.json b/advisories/unreviewed/2022/11/GHSA-xqwj-v278-6v7x/GHSA-xqwj-v278-6v7x.json index adf553ac548..2f2d42b8e2f 100644 --- a/advisories/unreviewed/2022/11/GHSA-xqwj-v278-6v7x/GHSA-xqwj-v278-6v7x.json +++ b/advisories/unreviewed/2022/11/GHSA-xqwj-v278-6v7x/GHSA-xqwj-v278-6v7x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-22q8-rwx9-62gg/GHSA-22q8-rwx9-62gg.json b/advisories/unreviewed/2024/05/GHSA-22q8-rwx9-62gg/GHSA-22q8-rwx9-62gg.json index 792801693b4..dbff63c1c74 100644 --- a/advisories/unreviewed/2024/05/GHSA-22q8-rwx9-62gg/GHSA-22q8-rwx9-62gg.json +++ b/advisories/unreviewed/2024/05/GHSA-22q8-rwx9-62gg/GHSA-22q8-rwx9-62gg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-2f4v-85x8-m662/GHSA-2f4v-85x8-m662.json b/advisories/unreviewed/2024/05/GHSA-2f4v-85x8-m662/GHSA-2f4v-85x8-m662.json index 6e3a5216de8..2ae949e4406 100644 --- a/advisories/unreviewed/2024/05/GHSA-2f4v-85x8-m662/GHSA-2f4v-85x8-m662.json +++ b/advisories/unreviewed/2024/05/GHSA-2f4v-85x8-m662/GHSA-2f4v-85x8-m662.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-2p6w-9hp8-fjmg/GHSA-2p6w-9hp8-fjmg.json b/advisories/unreviewed/2024/05/GHSA-2p6w-9hp8-fjmg/GHSA-2p6w-9hp8-fjmg.json index 95d2561cff3..f87e8727f8d 100644 --- a/advisories/unreviewed/2024/05/GHSA-2p6w-9hp8-fjmg/GHSA-2p6w-9hp8-fjmg.json +++ b/advisories/unreviewed/2024/05/GHSA-2p6w-9hp8-fjmg/GHSA-2p6w-9hp8-fjmg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-2r6r-f3xv-whcp/GHSA-2r6r-f3xv-whcp.json b/advisories/unreviewed/2024/05/GHSA-2r6r-f3xv-whcp/GHSA-2r6r-f3xv-whcp.json index 6c86fa6fda8..d84d85dc527 100644 --- a/advisories/unreviewed/2024/05/GHSA-2r6r-f3xv-whcp/GHSA-2r6r-f3xv-whcp.json +++ b/advisories/unreviewed/2024/05/GHSA-2r6r-f3xv-whcp/GHSA-2r6r-f3xv-whcp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-2rj3-2h3h-5h64/GHSA-2rj3-2h3h-5h64.json b/advisories/unreviewed/2024/05/GHSA-2rj3-2h3h-5h64/GHSA-2rj3-2h3h-5h64.json index e1397f11d31..1d8d62082e2 100644 --- a/advisories/unreviewed/2024/05/GHSA-2rj3-2h3h-5h64/GHSA-2rj3-2h3h-5h64.json +++ b/advisories/unreviewed/2024/05/GHSA-2rj3-2h3h-5h64/GHSA-2rj3-2h3h-5h64.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-366g-cg6r-xmp2/GHSA-366g-cg6r-xmp2.json b/advisories/unreviewed/2024/05/GHSA-366g-cg6r-xmp2/GHSA-366g-cg6r-xmp2.json index c8df44925e4..bbdc5a0ea4c 100644 --- a/advisories/unreviewed/2024/05/GHSA-366g-cg6r-xmp2/GHSA-366g-cg6r-xmp2.json +++ b/advisories/unreviewed/2024/05/GHSA-366g-cg6r-xmp2/GHSA-366g-cg6r-xmp2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-36cp-x9pq-r87w/GHSA-36cp-x9pq-r87w.json b/advisories/unreviewed/2024/05/GHSA-36cp-x9pq-r87w/GHSA-36cp-x9pq-r87w.json index 8863e35e579..014d5b3a684 100644 --- a/advisories/unreviewed/2024/05/GHSA-36cp-x9pq-r87w/GHSA-36cp-x9pq-r87w.json +++ b/advisories/unreviewed/2024/05/GHSA-36cp-x9pq-r87w/GHSA-36cp-x9pq-r87w.json @@ -7,12 +7,8 @@ "CVE-2024-4774" ], "details": "The `ShmemCharMapHashEntry()` code was susceptible to potentially undefined behavior by bypassing the move semantics for one of its data members. This vulnerability affects Firefox < 126.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-37xw-rpjg-xxfx/GHSA-37xw-rpjg-xxfx.json b/advisories/unreviewed/2024/05/GHSA-37xw-rpjg-xxfx/GHSA-37xw-rpjg-xxfx.json index 61092951171..63c1bf9b992 100644 --- a/advisories/unreviewed/2024/05/GHSA-37xw-rpjg-xxfx/GHSA-37xw-rpjg-xxfx.json +++ b/advisories/unreviewed/2024/05/GHSA-37xw-rpjg-xxfx/GHSA-37xw-rpjg-xxfx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-3f23-79pf-grrm/GHSA-3f23-79pf-grrm.json b/advisories/unreviewed/2024/05/GHSA-3f23-79pf-grrm/GHSA-3f23-79pf-grrm.json index 91f7e25ce3d..1b3b7630daa 100644 --- a/advisories/unreviewed/2024/05/GHSA-3f23-79pf-grrm/GHSA-3f23-79pf-grrm.json +++ b/advisories/unreviewed/2024/05/GHSA-3f23-79pf-grrm/GHSA-3f23-79pf-grrm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-3fwp-q3q8-q56g/GHSA-3fwp-q3q8-q56g.json b/advisories/unreviewed/2024/05/GHSA-3fwp-q3q8-q56g/GHSA-3fwp-q3q8-q56g.json index e34ddfe31b8..3f07597b789 100644 --- a/advisories/unreviewed/2024/05/GHSA-3fwp-q3q8-q56g/GHSA-3fwp-q3q8-q56g.json +++ b/advisories/unreviewed/2024/05/GHSA-3fwp-q3q8-q56g/GHSA-3fwp-q3q8-q56g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-3g3h-99q7-v8x2/GHSA-3g3h-99q7-v8x2.json b/advisories/unreviewed/2024/05/GHSA-3g3h-99q7-v8x2/GHSA-3g3h-99q7-v8x2.json index 76799e85c91..29487e5b34b 100644 --- a/advisories/unreviewed/2024/05/GHSA-3g3h-99q7-v8x2/GHSA-3g3h-99q7-v8x2.json +++ b/advisories/unreviewed/2024/05/GHSA-3g3h-99q7-v8x2/GHSA-3g3h-99q7-v8x2.json @@ -7,12 +7,8 @@ "CVE-2024-3940" ], "details": "The reCAPTCHA Jetpack WordPress plugin through 0.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-3hcc-55vp-6852/GHSA-3hcc-55vp-6852.json b/advisories/unreviewed/2024/05/GHSA-3hcc-55vp-6852/GHSA-3hcc-55vp-6852.json index 6b4fd11ee7a..42eff1dcb97 100644 --- a/advisories/unreviewed/2024/05/GHSA-3hcc-55vp-6852/GHSA-3hcc-55vp-6852.json +++ b/advisories/unreviewed/2024/05/GHSA-3hcc-55vp-6852/GHSA-3hcc-55vp-6852.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-3m87-c3q9-vxf8/GHSA-3m87-c3q9-vxf8.json b/advisories/unreviewed/2024/05/GHSA-3m87-c3q9-vxf8/GHSA-3m87-c3q9-vxf8.json index 135073db752..8807653db77 100644 --- a/advisories/unreviewed/2024/05/GHSA-3m87-c3q9-vxf8/GHSA-3m87-c3q9-vxf8.json +++ b/advisories/unreviewed/2024/05/GHSA-3m87-c3q9-vxf8/GHSA-3m87-c3q9-vxf8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-3pvf-92c7-q7p5/GHSA-3pvf-92c7-q7p5.json b/advisories/unreviewed/2024/05/GHSA-3pvf-92c7-q7p5/GHSA-3pvf-92c7-q7p5.json index 1cac84ccac8..10b000bab4c 100644 --- a/advisories/unreviewed/2024/05/GHSA-3pvf-92c7-q7p5/GHSA-3pvf-92c7-q7p5.json +++ b/advisories/unreviewed/2024/05/GHSA-3pvf-92c7-q7p5/GHSA-3pvf-92c7-q7p5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-3q49-cm6x-8v57/GHSA-3q49-cm6x-8v57.json b/advisories/unreviewed/2024/05/GHSA-3q49-cm6x-8v57/GHSA-3q49-cm6x-8v57.json index 88cbe613b5c..2ac84e250ac 100644 --- a/advisories/unreviewed/2024/05/GHSA-3q49-cm6x-8v57/GHSA-3q49-cm6x-8v57.json +++ b/advisories/unreviewed/2024/05/GHSA-3q49-cm6x-8v57/GHSA-3q49-cm6x-8v57.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -107,9 +105,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-3rfp-rjr4-9hh9/GHSA-3rfp-rjr4-9hh9.json b/advisories/unreviewed/2024/05/GHSA-3rfp-rjr4-9hh9/GHSA-3rfp-rjr4-9hh9.json index cc47eafe325..6d3b5ecfba2 100644 --- a/advisories/unreviewed/2024/05/GHSA-3rfp-rjr4-9hh9/GHSA-3rfp-rjr4-9hh9.json +++ b/advisories/unreviewed/2024/05/GHSA-3rfp-rjr4-9hh9/GHSA-3rfp-rjr4-9hh9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-43cq-wxv7-9c4w/GHSA-43cq-wxv7-9c4w.json b/advisories/unreviewed/2024/05/GHSA-43cq-wxv7-9c4w/GHSA-43cq-wxv7-9c4w.json index 0932cf38b16..dec48a06579 100644 --- a/advisories/unreviewed/2024/05/GHSA-43cq-wxv7-9c4w/GHSA-43cq-wxv7-9c4w.json +++ b/advisories/unreviewed/2024/05/GHSA-43cq-wxv7-9c4w/GHSA-43cq-wxv7-9c4w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-47fg-79mj-r66f/GHSA-47fg-79mj-r66f.json b/advisories/unreviewed/2024/05/GHSA-47fg-79mj-r66f/GHSA-47fg-79mj-r66f.json index bb487a35c41..649105697ea 100644 --- a/advisories/unreviewed/2024/05/GHSA-47fg-79mj-r66f/GHSA-47fg-79mj-r66f.json +++ b/advisories/unreviewed/2024/05/GHSA-47fg-79mj-r66f/GHSA-47fg-79mj-r66f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-47v8-4852-5wrf/GHSA-47v8-4852-5wrf.json b/advisories/unreviewed/2024/05/GHSA-47v8-4852-5wrf/GHSA-47v8-4852-5wrf.json index 2340a29d39a..2dc952670b7 100644 --- a/advisories/unreviewed/2024/05/GHSA-47v8-4852-5wrf/GHSA-47v8-4852-5wrf.json +++ b/advisories/unreviewed/2024/05/GHSA-47v8-4852-5wrf/GHSA-47v8-4852-5wrf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-48vc-ccr6-gffq/GHSA-48vc-ccr6-gffq.json b/advisories/unreviewed/2024/05/GHSA-48vc-ccr6-gffq/GHSA-48vc-ccr6-gffq.json index beb59a3f3fe..380d71c0f22 100644 --- a/advisories/unreviewed/2024/05/GHSA-48vc-ccr6-gffq/GHSA-48vc-ccr6-gffq.json +++ b/advisories/unreviewed/2024/05/GHSA-48vc-ccr6-gffq/GHSA-48vc-ccr6-gffq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-4hjw-gj2g-h3cx/GHSA-4hjw-gj2g-h3cx.json b/advisories/unreviewed/2024/05/GHSA-4hjw-gj2g-h3cx/GHSA-4hjw-gj2g-h3cx.json index e0739824b6a..5d5df61c753 100644 --- a/advisories/unreviewed/2024/05/GHSA-4hjw-gj2g-h3cx/GHSA-4hjw-gj2g-h3cx.json +++ b/advisories/unreviewed/2024/05/GHSA-4hjw-gj2g-h3cx/GHSA-4hjw-gj2g-h3cx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-4pjm-38fw-w4gm/GHSA-4pjm-38fw-w4gm.json b/advisories/unreviewed/2024/05/GHSA-4pjm-38fw-w4gm/GHSA-4pjm-38fw-w4gm.json index bc834915418..4e2b92a308f 100644 --- a/advisories/unreviewed/2024/05/GHSA-4pjm-38fw-w4gm/GHSA-4pjm-38fw-w4gm.json +++ b/advisories/unreviewed/2024/05/GHSA-4pjm-38fw-w4gm/GHSA-4pjm-38fw-w4gm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-4ppw-rq8q-qq9j/GHSA-4ppw-rq8q-qq9j.json b/advisories/unreviewed/2024/05/GHSA-4ppw-rq8q-qq9j/GHSA-4ppw-rq8q-qq9j.json index 4e921a542d1..54ef26aa0ca 100644 --- a/advisories/unreviewed/2024/05/GHSA-4ppw-rq8q-qq9j/GHSA-4ppw-rq8q-qq9j.json +++ b/advisories/unreviewed/2024/05/GHSA-4ppw-rq8q-qq9j/GHSA-4ppw-rq8q-qq9j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-4xvh-pjv4-w747/GHSA-4xvh-pjv4-w747.json b/advisories/unreviewed/2024/05/GHSA-4xvh-pjv4-w747/GHSA-4xvh-pjv4-w747.json index 933b75476d9..7cd13bb8d75 100644 --- a/advisories/unreviewed/2024/05/GHSA-4xvh-pjv4-w747/GHSA-4xvh-pjv4-w747.json +++ b/advisories/unreviewed/2024/05/GHSA-4xvh-pjv4-w747/GHSA-4xvh-pjv4-w747.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-55gp-7hw4-qj3q/GHSA-55gp-7hw4-qj3q.json b/advisories/unreviewed/2024/05/GHSA-55gp-7hw4-qj3q/GHSA-55gp-7hw4-qj3q.json index 98bf8c0df6e..61076fcda8b 100644 --- a/advisories/unreviewed/2024/05/GHSA-55gp-7hw4-qj3q/GHSA-55gp-7hw4-qj3q.json +++ b/advisories/unreviewed/2024/05/GHSA-55gp-7hw4-qj3q/GHSA-55gp-7hw4-qj3q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-57hv-hvrf-mc7w/GHSA-57hv-hvrf-mc7w.json b/advisories/unreviewed/2024/05/GHSA-57hv-hvrf-mc7w/GHSA-57hv-hvrf-mc7w.json index 40c101c83df..fdce498c07e 100644 --- a/advisories/unreviewed/2024/05/GHSA-57hv-hvrf-mc7w/GHSA-57hv-hvrf-mc7w.json +++ b/advisories/unreviewed/2024/05/GHSA-57hv-hvrf-mc7w/GHSA-57hv-hvrf-mc7w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-5jfv-82jr-68xh/GHSA-5jfv-82jr-68xh.json b/advisories/unreviewed/2024/05/GHSA-5jfv-82jr-68xh/GHSA-5jfv-82jr-68xh.json index 3725e0d99f4..de933dcfbd3 100644 --- a/advisories/unreviewed/2024/05/GHSA-5jfv-82jr-68xh/GHSA-5jfv-82jr-68xh.json +++ b/advisories/unreviewed/2024/05/GHSA-5jfv-82jr-68xh/GHSA-5jfv-82jr-68xh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-5m83-gvxh-qg6x/GHSA-5m83-gvxh-qg6x.json b/advisories/unreviewed/2024/05/GHSA-5m83-gvxh-qg6x/GHSA-5m83-gvxh-qg6x.json index dd0b52c0b5d..7d24f12e440 100644 --- a/advisories/unreviewed/2024/05/GHSA-5m83-gvxh-qg6x/GHSA-5m83-gvxh-qg6x.json +++ b/advisories/unreviewed/2024/05/GHSA-5m83-gvxh-qg6x/GHSA-5m83-gvxh-qg6x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-5qp4-g8f2-222m/GHSA-5qp4-g8f2-222m.json b/advisories/unreviewed/2024/05/GHSA-5qp4-g8f2-222m/GHSA-5qp4-g8f2-222m.json index ae4a9d912df..2ebf195ff67 100644 --- a/advisories/unreviewed/2024/05/GHSA-5qp4-g8f2-222m/GHSA-5qp4-g8f2-222m.json +++ b/advisories/unreviewed/2024/05/GHSA-5qp4-g8f2-222m/GHSA-5qp4-g8f2-222m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-5rw7-vr47-cwq3/GHSA-5rw7-vr47-cwq3.json b/advisories/unreviewed/2024/05/GHSA-5rw7-vr47-cwq3/GHSA-5rw7-vr47-cwq3.json index d13f2cab888..40a34d24222 100644 --- a/advisories/unreviewed/2024/05/GHSA-5rw7-vr47-cwq3/GHSA-5rw7-vr47-cwq3.json +++ b/advisories/unreviewed/2024/05/GHSA-5rw7-vr47-cwq3/GHSA-5rw7-vr47-cwq3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-5vvr-ppwh-x65j/GHSA-5vvr-ppwh-x65j.json b/advisories/unreviewed/2024/05/GHSA-5vvr-ppwh-x65j/GHSA-5vvr-ppwh-x65j.json index 4399126839e..65bb1de27d9 100644 --- a/advisories/unreviewed/2024/05/GHSA-5vvr-ppwh-x65j/GHSA-5vvr-ppwh-x65j.json +++ b/advisories/unreviewed/2024/05/GHSA-5vvr-ppwh-x65j/GHSA-5vvr-ppwh-x65j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-5wmm-cc98-6cv6/GHSA-5wmm-cc98-6cv6.json b/advisories/unreviewed/2024/05/GHSA-5wmm-cc98-6cv6/GHSA-5wmm-cc98-6cv6.json index 6d7ffd2a87e..7b694902611 100644 --- a/advisories/unreviewed/2024/05/GHSA-5wmm-cc98-6cv6/GHSA-5wmm-cc98-6cv6.json +++ b/advisories/unreviewed/2024/05/GHSA-5wmm-cc98-6cv6/GHSA-5wmm-cc98-6cv6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-6484-6mhx-vr77/GHSA-6484-6mhx-vr77.json b/advisories/unreviewed/2024/05/GHSA-6484-6mhx-vr77/GHSA-6484-6mhx-vr77.json index 3dd892e89eb..ceda676dfef 100644 --- a/advisories/unreviewed/2024/05/GHSA-6484-6mhx-vr77/GHSA-6484-6mhx-vr77.json +++ b/advisories/unreviewed/2024/05/GHSA-6484-6mhx-vr77/GHSA-6484-6mhx-vr77.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-6757-xxcc-3797/GHSA-6757-xxcc-3797.json b/advisories/unreviewed/2024/05/GHSA-6757-xxcc-3797/GHSA-6757-xxcc-3797.json index d6943b15965..0a10b4fd19d 100644 --- a/advisories/unreviewed/2024/05/GHSA-6757-xxcc-3797/GHSA-6757-xxcc-3797.json +++ b/advisories/unreviewed/2024/05/GHSA-6757-xxcc-3797/GHSA-6757-xxcc-3797.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-696v-679p-fg5q/GHSA-696v-679p-fg5q.json b/advisories/unreviewed/2024/05/GHSA-696v-679p-fg5q/GHSA-696v-679p-fg5q.json index b9fe77f051c..b88637ecdb6 100644 --- a/advisories/unreviewed/2024/05/GHSA-696v-679p-fg5q/GHSA-696v-679p-fg5q.json +++ b/advisories/unreviewed/2024/05/GHSA-696v-679p-fg5q/GHSA-696v-679p-fg5q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-6rxr-7hj4-6339/GHSA-6rxr-7hj4-6339.json b/advisories/unreviewed/2024/05/GHSA-6rxr-7hj4-6339/GHSA-6rxr-7hj4-6339.json index dd57a6fbff3..d1f9d3864ef 100644 --- a/advisories/unreviewed/2024/05/GHSA-6rxr-7hj4-6339/GHSA-6rxr-7hj4-6339.json +++ b/advisories/unreviewed/2024/05/GHSA-6rxr-7hj4-6339/GHSA-6rxr-7hj4-6339.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-6w44-6jp6-9hq9/GHSA-6w44-6jp6-9hq9.json b/advisories/unreviewed/2024/05/GHSA-6w44-6jp6-9hq9/GHSA-6w44-6jp6-9hq9.json index 2a48dbdcb15..c6a79d6ed45 100644 --- a/advisories/unreviewed/2024/05/GHSA-6w44-6jp6-9hq9/GHSA-6w44-6jp6-9hq9.json +++ b/advisories/unreviewed/2024/05/GHSA-6w44-6jp6-9hq9/GHSA-6w44-6jp6-9hq9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-6xcx-78g4-qrhj/GHSA-6xcx-78g4-qrhj.json b/advisories/unreviewed/2024/05/GHSA-6xcx-78g4-qrhj/GHSA-6xcx-78g4-qrhj.json index 8c221fdf0c7..7988490a87f 100644 --- a/advisories/unreviewed/2024/05/GHSA-6xcx-78g4-qrhj/GHSA-6xcx-78g4-qrhj.json +++ b/advisories/unreviewed/2024/05/GHSA-6xcx-78g4-qrhj/GHSA-6xcx-78g4-qrhj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-76qc-h8v6-2fj5/GHSA-76qc-h8v6-2fj5.json b/advisories/unreviewed/2024/05/GHSA-76qc-h8v6-2fj5/GHSA-76qc-h8v6-2fj5.json index 68a4c1f0866..1b3c6770bf0 100644 --- a/advisories/unreviewed/2024/05/GHSA-76qc-h8v6-2fj5/GHSA-76qc-h8v6-2fj5.json +++ b/advisories/unreviewed/2024/05/GHSA-76qc-h8v6-2fj5/GHSA-76qc-h8v6-2fj5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-789q-xfmh-gcrm/GHSA-789q-xfmh-gcrm.json b/advisories/unreviewed/2024/05/GHSA-789q-xfmh-gcrm/GHSA-789q-xfmh-gcrm.json index e32c2b093e9..5ee451a49c8 100644 --- a/advisories/unreviewed/2024/05/GHSA-789q-xfmh-gcrm/GHSA-789q-xfmh-gcrm.json +++ b/advisories/unreviewed/2024/05/GHSA-789q-xfmh-gcrm/GHSA-789q-xfmh-gcrm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-7h92-85hj-27vv/GHSA-7h92-85hj-27vv.json b/advisories/unreviewed/2024/05/GHSA-7h92-85hj-27vv/GHSA-7h92-85hj-27vv.json index 78431677f37..6d4792197de 100644 --- a/advisories/unreviewed/2024/05/GHSA-7h92-85hj-27vv/GHSA-7h92-85hj-27vv.json +++ b/advisories/unreviewed/2024/05/GHSA-7h92-85hj-27vv/GHSA-7h92-85hj-27vv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-7jp5-5rh9-4q92/GHSA-7jp5-5rh9-4q92.json b/advisories/unreviewed/2024/05/GHSA-7jp5-5rh9-4q92/GHSA-7jp5-5rh9-4q92.json index ecdb92691d7..31031479346 100644 --- a/advisories/unreviewed/2024/05/GHSA-7jp5-5rh9-4q92/GHSA-7jp5-5rh9-4q92.json +++ b/advisories/unreviewed/2024/05/GHSA-7jp5-5rh9-4q92/GHSA-7jp5-5rh9-4q92.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-7qgp-w8r9-jfr6/GHSA-7qgp-w8r9-jfr6.json b/advisories/unreviewed/2024/05/GHSA-7qgp-w8r9-jfr6/GHSA-7qgp-w8r9-jfr6.json index 47424edf506..d9a9822339d 100644 --- a/advisories/unreviewed/2024/05/GHSA-7qgp-w8r9-jfr6/GHSA-7qgp-w8r9-jfr6.json +++ b/advisories/unreviewed/2024/05/GHSA-7qgp-w8r9-jfr6/GHSA-7qgp-w8r9-jfr6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-7rvf-4cjx-jm5q/GHSA-7rvf-4cjx-jm5q.json b/advisories/unreviewed/2024/05/GHSA-7rvf-4cjx-jm5q/GHSA-7rvf-4cjx-jm5q.json index c3fd597a2d3..620bdd174e7 100644 --- a/advisories/unreviewed/2024/05/GHSA-7rvf-4cjx-jm5q/GHSA-7rvf-4cjx-jm5q.json +++ b/advisories/unreviewed/2024/05/GHSA-7rvf-4cjx-jm5q/GHSA-7rvf-4cjx-jm5q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-7xh6-q259-9vj8/GHSA-7xh6-q259-9vj8.json b/advisories/unreviewed/2024/05/GHSA-7xh6-q259-9vj8/GHSA-7xh6-q259-9vj8.json index d47c3f29357..10866df5327 100644 --- a/advisories/unreviewed/2024/05/GHSA-7xh6-q259-9vj8/GHSA-7xh6-q259-9vj8.json +++ b/advisories/unreviewed/2024/05/GHSA-7xh6-q259-9vj8/GHSA-7xh6-q259-9vj8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-7xp2-7fx4-46xp/GHSA-7xp2-7fx4-46xp.json b/advisories/unreviewed/2024/05/GHSA-7xp2-7fx4-46xp/GHSA-7xp2-7fx4-46xp.json index d18350fc6c4..a10c6c90ea4 100644 --- a/advisories/unreviewed/2024/05/GHSA-7xp2-7fx4-46xp/GHSA-7xp2-7fx4-46xp.json +++ b/advisories/unreviewed/2024/05/GHSA-7xp2-7fx4-46xp/GHSA-7xp2-7fx4-46xp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-827r-m5rc-f2wj/GHSA-827r-m5rc-f2wj.json b/advisories/unreviewed/2024/05/GHSA-827r-m5rc-f2wj/GHSA-827r-m5rc-f2wj.json index 934203f31a0..c18c0b0925c 100644 --- a/advisories/unreviewed/2024/05/GHSA-827r-m5rc-f2wj/GHSA-827r-m5rc-f2wj.json +++ b/advisories/unreviewed/2024/05/GHSA-827r-m5rc-f2wj/GHSA-827r-m5rc-f2wj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-8g76-cc7j-4rcm/GHSA-8g76-cc7j-4rcm.json b/advisories/unreviewed/2024/05/GHSA-8g76-cc7j-4rcm/GHSA-8g76-cc7j-4rcm.json index fd479140bbe..469fdac2437 100644 --- a/advisories/unreviewed/2024/05/GHSA-8g76-cc7j-4rcm/GHSA-8g76-cc7j-4rcm.json +++ b/advisories/unreviewed/2024/05/GHSA-8g76-cc7j-4rcm/GHSA-8g76-cc7j-4rcm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-8gqg-pg7w-9c36/GHSA-8gqg-pg7w-9c36.json b/advisories/unreviewed/2024/05/GHSA-8gqg-pg7w-9c36/GHSA-8gqg-pg7w-9c36.json index de99e9b2de0..1ef401c75ed 100644 --- a/advisories/unreviewed/2024/05/GHSA-8gqg-pg7w-9c36/GHSA-8gqg-pg7w-9c36.json +++ b/advisories/unreviewed/2024/05/GHSA-8gqg-pg7w-9c36/GHSA-8gqg-pg7w-9c36.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-8jjw-j8rj-43xm/GHSA-8jjw-j8rj-43xm.json b/advisories/unreviewed/2024/05/GHSA-8jjw-j8rj-43xm/GHSA-8jjw-j8rj-43xm.json index 8c1c60b7e44..26d19471267 100644 --- a/advisories/unreviewed/2024/05/GHSA-8jjw-j8rj-43xm/GHSA-8jjw-j8rj-43xm.json +++ b/advisories/unreviewed/2024/05/GHSA-8jjw-j8rj-43xm/GHSA-8jjw-j8rj-43xm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-8mj9-8gpj-8q8j/GHSA-8mj9-8gpj-8q8j.json b/advisories/unreviewed/2024/05/GHSA-8mj9-8gpj-8q8j/GHSA-8mj9-8gpj-8q8j.json index d10300dcbe7..6f8b0040d2f 100644 --- a/advisories/unreviewed/2024/05/GHSA-8mj9-8gpj-8q8j/GHSA-8mj9-8gpj-8q8j.json +++ b/advisories/unreviewed/2024/05/GHSA-8mj9-8gpj-8q8j/GHSA-8mj9-8gpj-8q8j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-929x-9pm6-c6cr/GHSA-929x-9pm6-c6cr.json b/advisories/unreviewed/2024/05/GHSA-929x-9pm6-c6cr/GHSA-929x-9pm6-c6cr.json index 207ec6b33dc..d86b4d82270 100644 --- a/advisories/unreviewed/2024/05/GHSA-929x-9pm6-c6cr/GHSA-929x-9pm6-c6cr.json +++ b/advisories/unreviewed/2024/05/GHSA-929x-9pm6-c6cr/GHSA-929x-9pm6-c6cr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-92g8-76j6-h38q/GHSA-92g8-76j6-h38q.json b/advisories/unreviewed/2024/05/GHSA-92g8-76j6-h38q/GHSA-92g8-76j6-h38q.json index 4de7edd2ab6..986a5fb608d 100644 --- a/advisories/unreviewed/2024/05/GHSA-92g8-76j6-h38q/GHSA-92g8-76j6-h38q.json +++ b/advisories/unreviewed/2024/05/GHSA-92g8-76j6-h38q/GHSA-92g8-76j6-h38q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-9j9j-j88x-9vc6/GHSA-9j9j-j88x-9vc6.json b/advisories/unreviewed/2024/05/GHSA-9j9j-j88x-9vc6/GHSA-9j9j-j88x-9vc6.json index 93f1d3ff2d7..3d65311f76a 100644 --- a/advisories/unreviewed/2024/05/GHSA-9j9j-j88x-9vc6/GHSA-9j9j-j88x-9vc6.json +++ b/advisories/unreviewed/2024/05/GHSA-9j9j-j88x-9vc6/GHSA-9j9j-j88x-9vc6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-9x3r-chwc-pxq6/GHSA-9x3r-chwc-pxq6.json b/advisories/unreviewed/2024/05/GHSA-9x3r-chwc-pxq6/GHSA-9x3r-chwc-pxq6.json index ad77c775692..2627b95b086 100644 --- a/advisories/unreviewed/2024/05/GHSA-9x3r-chwc-pxq6/GHSA-9x3r-chwc-pxq6.json +++ b/advisories/unreviewed/2024/05/GHSA-9x3r-chwc-pxq6/GHSA-9x3r-chwc-pxq6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-c5jg-79fj-f9xf/GHSA-c5jg-79fj-f9xf.json b/advisories/unreviewed/2024/05/GHSA-c5jg-79fj-f9xf/GHSA-c5jg-79fj-f9xf.json index edab92ab344..51433a4e557 100644 --- a/advisories/unreviewed/2024/05/GHSA-c5jg-79fj-f9xf/GHSA-c5jg-79fj-f9xf.json +++ b/advisories/unreviewed/2024/05/GHSA-c5jg-79fj-f9xf/GHSA-c5jg-79fj-f9xf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-c78m-wj3r-2c47/GHSA-c78m-wj3r-2c47.json b/advisories/unreviewed/2024/05/GHSA-c78m-wj3r-2c47/GHSA-c78m-wj3r-2c47.json index e7a59a3d51d..ae4a55cb973 100644 --- a/advisories/unreviewed/2024/05/GHSA-c78m-wj3r-2c47/GHSA-c78m-wj3r-2c47.json +++ b/advisories/unreviewed/2024/05/GHSA-c78m-wj3r-2c47/GHSA-c78m-wj3r-2c47.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-c7vh-4v2j-w7vm/GHSA-c7vh-4v2j-w7vm.json b/advisories/unreviewed/2024/05/GHSA-c7vh-4v2j-w7vm/GHSA-c7vh-4v2j-w7vm.json index f766c53f906..dddb198d1bd 100644 --- a/advisories/unreviewed/2024/05/GHSA-c7vh-4v2j-w7vm/GHSA-c7vh-4v2j-w7vm.json +++ b/advisories/unreviewed/2024/05/GHSA-c7vh-4v2j-w7vm/GHSA-c7vh-4v2j-w7vm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-c9v5-8cvh-f6v3/GHSA-c9v5-8cvh-f6v3.json b/advisories/unreviewed/2024/05/GHSA-c9v5-8cvh-f6v3/GHSA-c9v5-8cvh-f6v3.json index f495cd5b39a..dc0233488bf 100644 --- a/advisories/unreviewed/2024/05/GHSA-c9v5-8cvh-f6v3/GHSA-c9v5-8cvh-f6v3.json +++ b/advisories/unreviewed/2024/05/GHSA-c9v5-8cvh-f6v3/GHSA-c9v5-8cvh-f6v3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-cjx8-rrqg-m2xf/GHSA-cjx8-rrqg-m2xf.json b/advisories/unreviewed/2024/05/GHSA-cjx8-rrqg-m2xf/GHSA-cjx8-rrqg-m2xf.json index a5c02b28c7a..93bb0ac2f06 100644 --- a/advisories/unreviewed/2024/05/GHSA-cjx8-rrqg-m2xf/GHSA-cjx8-rrqg-m2xf.json +++ b/advisories/unreviewed/2024/05/GHSA-cjx8-rrqg-m2xf/GHSA-cjx8-rrqg-m2xf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-f2rm-5vrw-3cjp/GHSA-f2rm-5vrw-3cjp.json b/advisories/unreviewed/2024/05/GHSA-f2rm-5vrw-3cjp/GHSA-f2rm-5vrw-3cjp.json index 0c8ea916b51..1b25bebe99b 100644 --- a/advisories/unreviewed/2024/05/GHSA-f2rm-5vrw-3cjp/GHSA-f2rm-5vrw-3cjp.json +++ b/advisories/unreviewed/2024/05/GHSA-f2rm-5vrw-3cjp/GHSA-f2rm-5vrw-3cjp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-f8q3-43c9-8534/GHSA-f8q3-43c9-8534.json b/advisories/unreviewed/2024/05/GHSA-f8q3-43c9-8534/GHSA-f8q3-43c9-8534.json index 7135b03271e..3fb088675a6 100644 --- a/advisories/unreviewed/2024/05/GHSA-f8q3-43c9-8534/GHSA-f8q3-43c9-8534.json +++ b/advisories/unreviewed/2024/05/GHSA-f8q3-43c9-8534/GHSA-f8q3-43c9-8534.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-fghj-68h8-69xc/GHSA-fghj-68h8-69xc.json b/advisories/unreviewed/2024/05/GHSA-fghj-68h8-69xc/GHSA-fghj-68h8-69xc.json index 49b7900fa34..6140637f8cf 100644 --- a/advisories/unreviewed/2024/05/GHSA-fghj-68h8-69xc/GHSA-fghj-68h8-69xc.json +++ b/advisories/unreviewed/2024/05/GHSA-fghj-68h8-69xc/GHSA-fghj-68h8-69xc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-fjfj-c994-xhg8/GHSA-fjfj-c994-xhg8.json b/advisories/unreviewed/2024/05/GHSA-fjfj-c994-xhg8/GHSA-fjfj-c994-xhg8.json index e6e6bde2f36..1bcb4503164 100644 --- a/advisories/unreviewed/2024/05/GHSA-fjfj-c994-xhg8/GHSA-fjfj-c994-xhg8.json +++ b/advisories/unreviewed/2024/05/GHSA-fjfj-c994-xhg8/GHSA-fjfj-c994-xhg8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-fjgf-9q6v-44pv/GHSA-fjgf-9q6v-44pv.json b/advisories/unreviewed/2024/05/GHSA-fjgf-9q6v-44pv/GHSA-fjgf-9q6v-44pv.json index 891477d1f6c..a301b66bdf1 100644 --- a/advisories/unreviewed/2024/05/GHSA-fjgf-9q6v-44pv/GHSA-fjgf-9q6v-44pv.json +++ b/advisories/unreviewed/2024/05/GHSA-fjgf-9q6v-44pv/GHSA-fjgf-9q6v-44pv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-fqv6-crjx-gm34/GHSA-fqv6-crjx-gm34.json b/advisories/unreviewed/2024/05/GHSA-fqv6-crjx-gm34/GHSA-fqv6-crjx-gm34.json index 9f3e0cfcba8..3aad17bb9a8 100644 --- a/advisories/unreviewed/2024/05/GHSA-fqv6-crjx-gm34/GHSA-fqv6-crjx-gm34.json +++ b/advisories/unreviewed/2024/05/GHSA-fqv6-crjx-gm34/GHSA-fqv6-crjx-gm34.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-fwgc-8fqm-g5r7/GHSA-fwgc-8fqm-g5r7.json b/advisories/unreviewed/2024/05/GHSA-fwgc-8fqm-g5r7/GHSA-fwgc-8fqm-g5r7.json index 294b5df76d6..a53640a5965 100644 --- a/advisories/unreviewed/2024/05/GHSA-fwgc-8fqm-g5r7/GHSA-fwgc-8fqm-g5r7.json +++ b/advisories/unreviewed/2024/05/GHSA-fwgc-8fqm-g5r7/GHSA-fwgc-8fqm-g5r7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-fxpr-9fmx-9mgx/GHSA-fxpr-9fmx-9mgx.json b/advisories/unreviewed/2024/05/GHSA-fxpr-9fmx-9mgx/GHSA-fxpr-9fmx-9mgx.json index fd09317d0f8..6c242b72b9f 100644 --- a/advisories/unreviewed/2024/05/GHSA-fxpr-9fmx-9mgx/GHSA-fxpr-9fmx-9mgx.json +++ b/advisories/unreviewed/2024/05/GHSA-fxpr-9fmx-9mgx/GHSA-fxpr-9fmx-9mgx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-gfmq-99p2-3jwp/GHSA-gfmq-99p2-3jwp.json b/advisories/unreviewed/2024/05/GHSA-gfmq-99p2-3jwp/GHSA-gfmq-99p2-3jwp.json index 9c68904c6cd..45a9c209266 100644 --- a/advisories/unreviewed/2024/05/GHSA-gfmq-99p2-3jwp/GHSA-gfmq-99p2-3jwp.json +++ b/advisories/unreviewed/2024/05/GHSA-gfmq-99p2-3jwp/GHSA-gfmq-99p2-3jwp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-ghvh-frcw-j28q/GHSA-ghvh-frcw-j28q.json b/advisories/unreviewed/2024/05/GHSA-ghvh-frcw-j28q/GHSA-ghvh-frcw-j28q.json index 7b7c93d912c..093eb7906da 100644 --- a/advisories/unreviewed/2024/05/GHSA-ghvh-frcw-j28q/GHSA-ghvh-frcw-j28q.json +++ b/advisories/unreviewed/2024/05/GHSA-ghvh-frcw-j28q/GHSA-ghvh-frcw-j28q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-gj4r-395j-j3qx/GHSA-gj4r-395j-j3qx.json b/advisories/unreviewed/2024/05/GHSA-gj4r-395j-j3qx/GHSA-gj4r-395j-j3qx.json index ecaa6e1f68a..0e1956dac99 100644 --- a/advisories/unreviewed/2024/05/GHSA-gj4r-395j-j3qx/GHSA-gj4r-395j-j3qx.json +++ b/advisories/unreviewed/2024/05/GHSA-gj4r-395j-j3qx/GHSA-gj4r-395j-j3qx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-gxjf-5qf6-p29g/GHSA-gxjf-5qf6-p29g.json b/advisories/unreviewed/2024/05/GHSA-gxjf-5qf6-p29g/GHSA-gxjf-5qf6-p29g.json index ac7247af2f7..ccc10553f46 100644 --- a/advisories/unreviewed/2024/05/GHSA-gxjf-5qf6-p29g/GHSA-gxjf-5qf6-p29g.json +++ b/advisories/unreviewed/2024/05/GHSA-gxjf-5qf6-p29g/GHSA-gxjf-5qf6-p29g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-h4g8-q9cc-gpgj/GHSA-h4g8-q9cc-gpgj.json b/advisories/unreviewed/2024/05/GHSA-h4g8-q9cc-gpgj/GHSA-h4g8-q9cc-gpgj.json index eaf89262dc9..54f2656c2f6 100644 --- a/advisories/unreviewed/2024/05/GHSA-h4g8-q9cc-gpgj/GHSA-h4g8-q9cc-gpgj.json +++ b/advisories/unreviewed/2024/05/GHSA-h4g8-q9cc-gpgj/GHSA-h4g8-q9cc-gpgj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-h7pp-jw89-9v36/GHSA-h7pp-jw89-9v36.json b/advisories/unreviewed/2024/05/GHSA-h7pp-jw89-9v36/GHSA-h7pp-jw89-9v36.json index 30856c67578..c59c01e7fd3 100644 --- a/advisories/unreviewed/2024/05/GHSA-h7pp-jw89-9v36/GHSA-h7pp-jw89-9v36.json +++ b/advisories/unreviewed/2024/05/GHSA-h7pp-jw89-9v36/GHSA-h7pp-jw89-9v36.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-hmcv-8x8x-cv4h/GHSA-hmcv-8x8x-cv4h.json b/advisories/unreviewed/2024/05/GHSA-hmcv-8x8x-cv4h/GHSA-hmcv-8x8x-cv4h.json index 9a1d8a75b5b..8a9263fb793 100644 --- a/advisories/unreviewed/2024/05/GHSA-hmcv-8x8x-cv4h/GHSA-hmcv-8x8x-cv4h.json +++ b/advisories/unreviewed/2024/05/GHSA-hmcv-8x8x-cv4h/GHSA-hmcv-8x8x-cv4h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-hwg6-wq63-rfpf/GHSA-hwg6-wq63-rfpf.json b/advisories/unreviewed/2024/05/GHSA-hwg6-wq63-rfpf/GHSA-hwg6-wq63-rfpf.json index 5d573c746e9..124fb25a0f9 100644 --- a/advisories/unreviewed/2024/05/GHSA-hwg6-wq63-rfpf/GHSA-hwg6-wq63-rfpf.json +++ b/advisories/unreviewed/2024/05/GHSA-hwg6-wq63-rfpf/GHSA-hwg6-wq63-rfpf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-j424-2gw5-5mrv/GHSA-j424-2gw5-5mrv.json b/advisories/unreviewed/2024/05/GHSA-j424-2gw5-5mrv/GHSA-j424-2gw5-5mrv.json index a03a0077b18..3a00bfd9624 100644 --- a/advisories/unreviewed/2024/05/GHSA-j424-2gw5-5mrv/GHSA-j424-2gw5-5mrv.json +++ b/advisories/unreviewed/2024/05/GHSA-j424-2gw5-5mrv/GHSA-j424-2gw5-5mrv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-j4qc-xg6g-j9fh/GHSA-j4qc-xg6g-j9fh.json b/advisories/unreviewed/2024/05/GHSA-j4qc-xg6g-j9fh/GHSA-j4qc-xg6g-j9fh.json index 79e71d8353f..258cc0645ce 100644 --- a/advisories/unreviewed/2024/05/GHSA-j4qc-xg6g-j9fh/GHSA-j4qc-xg6g-j9fh.json +++ b/advisories/unreviewed/2024/05/GHSA-j4qc-xg6g-j9fh/GHSA-j4qc-xg6g-j9fh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-jfp3-jv85-rhfp/GHSA-jfp3-jv85-rhfp.json b/advisories/unreviewed/2024/05/GHSA-jfp3-jv85-rhfp/GHSA-jfp3-jv85-rhfp.json index 1dc06e4b502..3ec76235766 100644 --- a/advisories/unreviewed/2024/05/GHSA-jfp3-jv85-rhfp/GHSA-jfp3-jv85-rhfp.json +++ b/advisories/unreviewed/2024/05/GHSA-jfp3-jv85-rhfp/GHSA-jfp3-jv85-rhfp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-jg74-2mhw-68mr/GHSA-jg74-2mhw-68mr.json b/advisories/unreviewed/2024/05/GHSA-jg74-2mhw-68mr/GHSA-jg74-2mhw-68mr.json index d40ae9462bd..d296c13cff4 100644 --- a/advisories/unreviewed/2024/05/GHSA-jg74-2mhw-68mr/GHSA-jg74-2mhw-68mr.json +++ b/advisories/unreviewed/2024/05/GHSA-jg74-2mhw-68mr/GHSA-jg74-2mhw-68mr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-jjhw-vg96-cgfv/GHSA-jjhw-vg96-cgfv.json b/advisories/unreviewed/2024/05/GHSA-jjhw-vg96-cgfv/GHSA-jjhw-vg96-cgfv.json index 0e14c9d638b..1d74741c10a 100644 --- a/advisories/unreviewed/2024/05/GHSA-jjhw-vg96-cgfv/GHSA-jjhw-vg96-cgfv.json +++ b/advisories/unreviewed/2024/05/GHSA-jjhw-vg96-cgfv/GHSA-jjhw-vg96-cgfv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-jjpf-rjhc-fq98/GHSA-jjpf-rjhc-fq98.json b/advisories/unreviewed/2024/05/GHSA-jjpf-rjhc-fq98/GHSA-jjpf-rjhc-fq98.json index 6f47d2fcd5f..66015aacd66 100644 --- a/advisories/unreviewed/2024/05/GHSA-jjpf-rjhc-fq98/GHSA-jjpf-rjhc-fq98.json +++ b/advisories/unreviewed/2024/05/GHSA-jjpf-rjhc-fq98/GHSA-jjpf-rjhc-fq98.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-m247-hjjg-mvwc/GHSA-m247-hjjg-mvwc.json b/advisories/unreviewed/2024/05/GHSA-m247-hjjg-mvwc/GHSA-m247-hjjg-mvwc.json index e0281263813..71a6015dfa9 100644 --- a/advisories/unreviewed/2024/05/GHSA-m247-hjjg-mvwc/GHSA-m247-hjjg-mvwc.json +++ b/advisories/unreviewed/2024/05/GHSA-m247-hjjg-mvwc/GHSA-m247-hjjg-mvwc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-m2qx-r5jq-8pfw/GHSA-m2qx-r5jq-8pfw.json b/advisories/unreviewed/2024/05/GHSA-m2qx-r5jq-8pfw/GHSA-m2qx-r5jq-8pfw.json index 8de165572f6..b2d29d9e93e 100644 --- a/advisories/unreviewed/2024/05/GHSA-m2qx-r5jq-8pfw/GHSA-m2qx-r5jq-8pfw.json +++ b/advisories/unreviewed/2024/05/GHSA-m2qx-r5jq-8pfw/GHSA-m2qx-r5jq-8pfw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-mfm7-692q-j824/GHSA-mfm7-692q-j824.json b/advisories/unreviewed/2024/05/GHSA-mfm7-692q-j824/GHSA-mfm7-692q-j824.json index cc4e34b9cff..64985a21f59 100644 --- a/advisories/unreviewed/2024/05/GHSA-mfm7-692q-j824/GHSA-mfm7-692q-j824.json +++ b/advisories/unreviewed/2024/05/GHSA-mfm7-692q-j824/GHSA-mfm7-692q-j824.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-mmh4-cvwv-5vmm/GHSA-mmh4-cvwv-5vmm.json b/advisories/unreviewed/2024/05/GHSA-mmh4-cvwv-5vmm/GHSA-mmh4-cvwv-5vmm.json index c39edc40f4d..348749dea36 100644 --- a/advisories/unreviewed/2024/05/GHSA-mmh4-cvwv-5vmm/GHSA-mmh4-cvwv-5vmm.json +++ b/advisories/unreviewed/2024/05/GHSA-mmh4-cvwv-5vmm/GHSA-mmh4-cvwv-5vmm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-mqmg-rcjr-35hf/GHSA-mqmg-rcjr-35hf.json b/advisories/unreviewed/2024/05/GHSA-mqmg-rcjr-35hf/GHSA-mqmg-rcjr-35hf.json index bc219298acc..6e31f10e2fa 100644 --- a/advisories/unreviewed/2024/05/GHSA-mqmg-rcjr-35hf/GHSA-mqmg-rcjr-35hf.json +++ b/advisories/unreviewed/2024/05/GHSA-mqmg-rcjr-35hf/GHSA-mqmg-rcjr-35hf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-p3r7-jhgm-jwf8/GHSA-p3r7-jhgm-jwf8.json b/advisories/unreviewed/2024/05/GHSA-p3r7-jhgm-jwf8/GHSA-p3r7-jhgm-jwf8.json index 3af8bee1b10..11073b07385 100644 --- a/advisories/unreviewed/2024/05/GHSA-p3r7-jhgm-jwf8/GHSA-p3r7-jhgm-jwf8.json +++ b/advisories/unreviewed/2024/05/GHSA-p3r7-jhgm-jwf8/GHSA-p3r7-jhgm-jwf8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-p65c-2jgw-xxvw/GHSA-p65c-2jgw-xxvw.json b/advisories/unreviewed/2024/05/GHSA-p65c-2jgw-xxvw/GHSA-p65c-2jgw-xxvw.json index 1c47c590970..65455adbb1f 100644 --- a/advisories/unreviewed/2024/05/GHSA-p65c-2jgw-xxvw/GHSA-p65c-2jgw-xxvw.json +++ b/advisories/unreviewed/2024/05/GHSA-p65c-2jgw-xxvw/GHSA-p65c-2jgw-xxvw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -43,9 +41,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-pp63-29wg-gxf4/GHSA-pp63-29wg-gxf4.json b/advisories/unreviewed/2024/05/GHSA-pp63-29wg-gxf4/GHSA-pp63-29wg-gxf4.json index 0605891ddc1..efe2ee5f4d8 100644 --- a/advisories/unreviewed/2024/05/GHSA-pp63-29wg-gxf4/GHSA-pp63-29wg-gxf4.json +++ b/advisories/unreviewed/2024/05/GHSA-pp63-29wg-gxf4/GHSA-pp63-29wg-gxf4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-ppf4-9j93-82w7/GHSA-ppf4-9j93-82w7.json b/advisories/unreviewed/2024/05/GHSA-ppf4-9j93-82w7/GHSA-ppf4-9j93-82w7.json index 4850ef51b04..ed71b509af3 100644 --- a/advisories/unreviewed/2024/05/GHSA-ppf4-9j93-82w7/GHSA-ppf4-9j93-82w7.json +++ b/advisories/unreviewed/2024/05/GHSA-ppf4-9j93-82w7/GHSA-ppf4-9j93-82w7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-ppj2-pr6r-wqr2/GHSA-ppj2-pr6r-wqr2.json b/advisories/unreviewed/2024/05/GHSA-ppj2-pr6r-wqr2/GHSA-ppj2-pr6r-wqr2.json index ce84e891982..5d0780cafd9 100644 --- a/advisories/unreviewed/2024/05/GHSA-ppj2-pr6r-wqr2/GHSA-ppj2-pr6r-wqr2.json +++ b/advisories/unreviewed/2024/05/GHSA-ppj2-pr6r-wqr2/GHSA-ppj2-pr6r-wqr2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-pwjg-wj47-8fjf/GHSA-pwjg-wj47-8fjf.json b/advisories/unreviewed/2024/05/GHSA-pwjg-wj47-8fjf/GHSA-pwjg-wj47-8fjf.json index 2611390dbf6..7a378d0d46e 100644 --- a/advisories/unreviewed/2024/05/GHSA-pwjg-wj47-8fjf/GHSA-pwjg-wj47-8fjf.json +++ b/advisories/unreviewed/2024/05/GHSA-pwjg-wj47-8fjf/GHSA-pwjg-wj47-8fjf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-q686-mxxq-25r2/GHSA-q686-mxxq-25r2.json b/advisories/unreviewed/2024/05/GHSA-q686-mxxq-25r2/GHSA-q686-mxxq-25r2.json index 392c245e918..94b923a4fe2 100644 --- a/advisories/unreviewed/2024/05/GHSA-q686-mxxq-25r2/GHSA-q686-mxxq-25r2.json +++ b/advisories/unreviewed/2024/05/GHSA-q686-mxxq-25r2/GHSA-q686-mxxq-25r2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -43,9 +41,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-qf34-wg42-vw3p/GHSA-qf34-wg42-vw3p.json b/advisories/unreviewed/2024/05/GHSA-qf34-wg42-vw3p/GHSA-qf34-wg42-vw3p.json index 4e07d08fa2e..2ef6a35edfb 100644 --- a/advisories/unreviewed/2024/05/GHSA-qf34-wg42-vw3p/GHSA-qf34-wg42-vw3p.json +++ b/advisories/unreviewed/2024/05/GHSA-qf34-wg42-vw3p/GHSA-qf34-wg42-vw3p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -47,9 +45,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-qgcj-39gh-rqf4/GHSA-qgcj-39gh-rqf4.json b/advisories/unreviewed/2024/05/GHSA-qgcj-39gh-rqf4/GHSA-qgcj-39gh-rqf4.json index 9c854243b19..147b9bdc3f8 100644 --- a/advisories/unreviewed/2024/05/GHSA-qgcj-39gh-rqf4/GHSA-qgcj-39gh-rqf4.json +++ b/advisories/unreviewed/2024/05/GHSA-qgcj-39gh-rqf4/GHSA-qgcj-39gh-rqf4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-qgvf-5jhp-5rmx/GHSA-qgvf-5jhp-5rmx.json b/advisories/unreviewed/2024/05/GHSA-qgvf-5jhp-5rmx/GHSA-qgvf-5jhp-5rmx.json index fcaa6875ecb..0df5f3c0456 100644 --- a/advisories/unreviewed/2024/05/GHSA-qgvf-5jhp-5rmx/GHSA-qgvf-5jhp-5rmx.json +++ b/advisories/unreviewed/2024/05/GHSA-qgvf-5jhp-5rmx/GHSA-qgvf-5jhp-5rmx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-qj72-6765-vjx4/GHSA-qj72-6765-vjx4.json b/advisories/unreviewed/2024/05/GHSA-qj72-6765-vjx4/GHSA-qj72-6765-vjx4.json index 68175a1b886..3a0c0832618 100644 --- a/advisories/unreviewed/2024/05/GHSA-qj72-6765-vjx4/GHSA-qj72-6765-vjx4.json +++ b/advisories/unreviewed/2024/05/GHSA-qj72-6765-vjx4/GHSA-qj72-6765-vjx4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-qvqh-2867-5v26/GHSA-qvqh-2867-5v26.json b/advisories/unreviewed/2024/05/GHSA-qvqh-2867-5v26/GHSA-qvqh-2867-5v26.json index 94a856a9e8e..b49f04849ea 100644 --- a/advisories/unreviewed/2024/05/GHSA-qvqh-2867-5v26/GHSA-qvqh-2867-5v26.json +++ b/advisories/unreviewed/2024/05/GHSA-qvqh-2867-5v26/GHSA-qvqh-2867-5v26.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-r32p-mj73-6wq6/GHSA-r32p-mj73-6wq6.json b/advisories/unreviewed/2024/05/GHSA-r32p-mj73-6wq6/GHSA-r32p-mj73-6wq6.json index 2d566eb80c4..cba23dba898 100644 --- a/advisories/unreviewed/2024/05/GHSA-r32p-mj73-6wq6/GHSA-r32p-mj73-6wq6.json +++ b/advisories/unreviewed/2024/05/GHSA-r32p-mj73-6wq6/GHSA-r32p-mj73-6wq6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-r483-xv8g-vv5r/GHSA-r483-xv8g-vv5r.json b/advisories/unreviewed/2024/05/GHSA-r483-xv8g-vv5r/GHSA-r483-xv8g-vv5r.json index c94ca1b5d7e..8024d41db2e 100644 --- a/advisories/unreviewed/2024/05/GHSA-r483-xv8g-vv5r/GHSA-r483-xv8g-vv5r.json +++ b/advisories/unreviewed/2024/05/GHSA-r483-xv8g-vv5r/GHSA-r483-xv8g-vv5r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-rmfj-5m74-5rg4/GHSA-rmfj-5m74-5rg4.json b/advisories/unreviewed/2024/05/GHSA-rmfj-5m74-5rg4/GHSA-rmfj-5m74-5rg4.json index cb477be595a..a1ea4eec7ec 100644 --- a/advisories/unreviewed/2024/05/GHSA-rmfj-5m74-5rg4/GHSA-rmfj-5m74-5rg4.json +++ b/advisories/unreviewed/2024/05/GHSA-rmfj-5m74-5rg4/GHSA-rmfj-5m74-5rg4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-rw6c-wwr4-qgm6/GHSA-rw6c-wwr4-qgm6.json b/advisories/unreviewed/2024/05/GHSA-rw6c-wwr4-qgm6/GHSA-rw6c-wwr4-qgm6.json index 67b19a8766d..fa5ed9ed7e6 100644 --- a/advisories/unreviewed/2024/05/GHSA-rw6c-wwr4-qgm6/GHSA-rw6c-wwr4-qgm6.json +++ b/advisories/unreviewed/2024/05/GHSA-rw6c-wwr4-qgm6/GHSA-rw6c-wwr4-qgm6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-rwr4-vcmx-mq8w/GHSA-rwr4-vcmx-mq8w.json b/advisories/unreviewed/2024/05/GHSA-rwr4-vcmx-mq8w/GHSA-rwr4-vcmx-mq8w.json index 87aee6f51bd..310e93e88e5 100644 --- a/advisories/unreviewed/2024/05/GHSA-rwr4-vcmx-mq8w/GHSA-rwr4-vcmx-mq8w.json +++ b/advisories/unreviewed/2024/05/GHSA-rwr4-vcmx-mq8w/GHSA-rwr4-vcmx-mq8w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-v42x-qjv5-q9c2/GHSA-v42x-qjv5-q9c2.json b/advisories/unreviewed/2024/05/GHSA-v42x-qjv5-q9c2/GHSA-v42x-qjv5-q9c2.json index 8ab1aa509c7..121d58ef662 100644 --- a/advisories/unreviewed/2024/05/GHSA-v42x-qjv5-q9c2/GHSA-v42x-qjv5-q9c2.json +++ b/advisories/unreviewed/2024/05/GHSA-v42x-qjv5-q9c2/GHSA-v42x-qjv5-q9c2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-vcjw-v3vj-hcj2/GHSA-vcjw-v3vj-hcj2.json b/advisories/unreviewed/2024/05/GHSA-vcjw-v3vj-hcj2/GHSA-vcjw-v3vj-hcj2.json index 88661a53df0..65e250ca0ed 100644 --- a/advisories/unreviewed/2024/05/GHSA-vcjw-v3vj-hcj2/GHSA-vcjw-v3vj-hcj2.json +++ b/advisories/unreviewed/2024/05/GHSA-vcjw-v3vj-hcj2/GHSA-vcjw-v3vj-hcj2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-vjrc-72gw-5pf3/GHSA-vjrc-72gw-5pf3.json b/advisories/unreviewed/2024/05/GHSA-vjrc-72gw-5pf3/GHSA-vjrc-72gw-5pf3.json index b3973ff1951..e59d77f5fa9 100644 --- a/advisories/unreviewed/2024/05/GHSA-vjrc-72gw-5pf3/GHSA-vjrc-72gw-5pf3.json +++ b/advisories/unreviewed/2024/05/GHSA-vjrc-72gw-5pf3/GHSA-vjrc-72gw-5pf3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-vp3c-7mvg-xx4f/GHSA-vp3c-7mvg-xx4f.json b/advisories/unreviewed/2024/05/GHSA-vp3c-7mvg-xx4f/GHSA-vp3c-7mvg-xx4f.json index d83ea323b50..7fa7fffbe33 100644 --- a/advisories/unreviewed/2024/05/GHSA-vp3c-7mvg-xx4f/GHSA-vp3c-7mvg-xx4f.json +++ b/advisories/unreviewed/2024/05/GHSA-vp3c-7mvg-xx4f/GHSA-vp3c-7mvg-xx4f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-w364-mr34-496r/GHSA-w364-mr34-496r.json b/advisories/unreviewed/2024/05/GHSA-w364-mr34-496r/GHSA-w364-mr34-496r.json index 2c099d0c8b8..1cbba074ad3 100644 --- a/advisories/unreviewed/2024/05/GHSA-w364-mr34-496r/GHSA-w364-mr34-496r.json +++ b/advisories/unreviewed/2024/05/GHSA-w364-mr34-496r/GHSA-w364-mr34-496r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-w974-55hm-qp53/GHSA-w974-55hm-qp53.json b/advisories/unreviewed/2024/05/GHSA-w974-55hm-qp53/GHSA-w974-55hm-qp53.json index 16472a72983..cc431968574 100644 --- a/advisories/unreviewed/2024/05/GHSA-w974-55hm-qp53/GHSA-w974-55hm-qp53.json +++ b/advisories/unreviewed/2024/05/GHSA-w974-55hm-qp53/GHSA-w974-55hm-qp53.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-wj5v-6qjm-57pp/GHSA-wj5v-6qjm-57pp.json b/advisories/unreviewed/2024/05/GHSA-wj5v-6qjm-57pp/GHSA-wj5v-6qjm-57pp.json index e5b67243926..4b99740c5b2 100644 --- a/advisories/unreviewed/2024/05/GHSA-wj5v-6qjm-57pp/GHSA-wj5v-6qjm-57pp.json +++ b/advisories/unreviewed/2024/05/GHSA-wj5v-6qjm-57pp/GHSA-wj5v-6qjm-57pp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-wjpx-8jpr-39fm/GHSA-wjpx-8jpr-39fm.json b/advisories/unreviewed/2024/05/GHSA-wjpx-8jpr-39fm/GHSA-wjpx-8jpr-39fm.json index fab638d9d6c..b5d3a87e524 100644 --- a/advisories/unreviewed/2024/05/GHSA-wjpx-8jpr-39fm/GHSA-wjpx-8jpr-39fm.json +++ b/advisories/unreviewed/2024/05/GHSA-wjpx-8jpr-39fm/GHSA-wjpx-8jpr-39fm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-x5qf-78xm-mv45/GHSA-x5qf-78xm-mv45.json b/advisories/unreviewed/2024/05/GHSA-x5qf-78xm-mv45/GHSA-x5qf-78xm-mv45.json index e8b05c7a7ec..e9eac1ce68a 100644 --- a/advisories/unreviewed/2024/05/GHSA-x5qf-78xm-mv45/GHSA-x5qf-78xm-mv45.json +++ b/advisories/unreviewed/2024/05/GHSA-x5qf-78xm-mv45/GHSA-x5qf-78xm-mv45.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-x685-hmwx-rrvf/GHSA-x685-hmwx-rrvf.json b/advisories/unreviewed/2024/05/GHSA-x685-hmwx-rrvf/GHSA-x685-hmwx-rrvf.json index 6d71ef94ce4..303300801a8 100644 --- a/advisories/unreviewed/2024/05/GHSA-x685-hmwx-rrvf/GHSA-x685-hmwx-rrvf.json +++ b/advisories/unreviewed/2024/05/GHSA-x685-hmwx-rrvf/GHSA-x685-hmwx-rrvf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-x92j-58cf-374g/GHSA-x92j-58cf-374g.json b/advisories/unreviewed/2024/05/GHSA-x92j-58cf-374g/GHSA-x92j-58cf-374g.json index 798d4da0efa..88ae2e5ede5 100644 --- a/advisories/unreviewed/2024/05/GHSA-x92j-58cf-374g/GHSA-x92j-58cf-374g.json +++ b/advisories/unreviewed/2024/05/GHSA-x92j-58cf-374g/GHSA-x92j-58cf-374g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-xqh8-8m3p-c72r/GHSA-xqh8-8m3p-c72r.json b/advisories/unreviewed/2024/05/GHSA-xqh8-8m3p-c72r/GHSA-xqh8-8m3p-c72r.json index fb8b192e733..feb0e886f36 100644 --- a/advisories/unreviewed/2024/05/GHSA-xqh8-8m3p-c72r/GHSA-xqh8-8m3p-c72r.json +++ b/advisories/unreviewed/2024/05/GHSA-xqh8-8m3p-c72r/GHSA-xqh8-8m3p-c72r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-xw4v-gj23-v89c/GHSA-xw4v-gj23-v89c.json b/advisories/unreviewed/2024/05/GHSA-xw4v-gj23-v89c/GHSA-xw4v-gj23-v89c.json index 13b869b13b6..0b707e6f883 100644 --- a/advisories/unreviewed/2024/05/GHSA-xw4v-gj23-v89c/GHSA-xw4v-gj23-v89c.json +++ b/advisories/unreviewed/2024/05/GHSA-xw4v-gj23-v89c/GHSA-xw4v-gj23-v89c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-xw5m-hf8v-47cw/GHSA-xw5m-hf8v-47cw.json b/advisories/unreviewed/2024/05/GHSA-xw5m-hf8v-47cw/GHSA-xw5m-hf8v-47cw.json index f8430d43ac5..37780a0eb73 100644 --- a/advisories/unreviewed/2024/05/GHSA-xw5m-hf8v-47cw/GHSA-xw5m-hf8v-47cw.json +++ b/advisories/unreviewed/2024/05/GHSA-xw5m-hf8v-47cw/GHSA-xw5m-hf8v-47cw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-xwcj-m6m8-mr3g/GHSA-xwcj-m6m8-mr3g.json b/advisories/unreviewed/2024/05/GHSA-xwcj-m6m8-mr3g/GHSA-xwcj-m6m8-mr3g.json index 39e8cbe8262..2bc622ae271 100644 --- a/advisories/unreviewed/2024/05/GHSA-xwcj-m6m8-mr3g/GHSA-xwcj-m6m8-mr3g.json +++ b/advisories/unreviewed/2024/05/GHSA-xwcj-m6m8-mr3g/GHSA-xwcj-m6m8-mr3g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/08/GHSA-2439-66f5-gjjr/GHSA-2439-66f5-gjjr.json b/advisories/unreviewed/2024/08/GHSA-2439-66f5-gjjr/GHSA-2439-66f5-gjjr.json index e389678f9d1..bf404246541 100644 --- a/advisories/unreviewed/2024/08/GHSA-2439-66f5-gjjr/GHSA-2439-66f5-gjjr.json +++ b/advisories/unreviewed/2024/08/GHSA-2439-66f5-gjjr/GHSA-2439-66f5-gjjr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-282p-qvpm-4cp8/GHSA-282p-qvpm-4cp8.json b/advisories/unreviewed/2024/08/GHSA-282p-qvpm-4cp8/GHSA-282p-qvpm-4cp8.json index ba9dad942f8..7ad42f84ccf 100644 --- a/advisories/unreviewed/2024/08/GHSA-282p-qvpm-4cp8/GHSA-282p-qvpm-4cp8.json +++ b/advisories/unreviewed/2024/08/GHSA-282p-qvpm-4cp8/GHSA-282p-qvpm-4cp8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-28f7-mc45-4x8m/GHSA-28f7-mc45-4x8m.json b/advisories/unreviewed/2024/08/GHSA-28f7-mc45-4x8m/GHSA-28f7-mc45-4x8m.json index e8024976e7d..52b0e3a39df 100644 --- a/advisories/unreviewed/2024/08/GHSA-28f7-mc45-4x8m/GHSA-28f7-mc45-4x8m.json +++ b/advisories/unreviewed/2024/08/GHSA-28f7-mc45-4x8m/GHSA-28f7-mc45-4x8m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-3873-529g-4g7g/GHSA-3873-529g-4g7g.json b/advisories/unreviewed/2024/08/GHSA-3873-529g-4g7g/GHSA-3873-529g-4g7g.json index 9c43f695841..ef573722296 100644 --- a/advisories/unreviewed/2024/08/GHSA-3873-529g-4g7g/GHSA-3873-529g-4g7g.json +++ b/advisories/unreviewed/2024/08/GHSA-3873-529g-4g7g/GHSA-3873-529g-4g7g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-3gqh-c39x-hvhh/GHSA-3gqh-c39x-hvhh.json b/advisories/unreviewed/2024/08/GHSA-3gqh-c39x-hvhh/GHSA-3gqh-c39x-hvhh.json index 2800052835b..0e6c104aa25 100644 --- a/advisories/unreviewed/2024/08/GHSA-3gqh-c39x-hvhh/GHSA-3gqh-c39x-hvhh.json +++ b/advisories/unreviewed/2024/08/GHSA-3gqh-c39x-hvhh/GHSA-3gqh-c39x-hvhh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-3jp7-w958-xwmc/GHSA-3jp7-w958-xwmc.json b/advisories/unreviewed/2024/08/GHSA-3jp7-w958-xwmc/GHSA-3jp7-w958-xwmc.json index 814fd49828b..b0090d81fa8 100644 --- a/advisories/unreviewed/2024/08/GHSA-3jp7-w958-xwmc/GHSA-3jp7-w958-xwmc.json +++ b/advisories/unreviewed/2024/08/GHSA-3jp7-w958-xwmc/GHSA-3jp7-w958-xwmc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-3m59-fh79-m7m6/GHSA-3m59-fh79-m7m6.json b/advisories/unreviewed/2024/08/GHSA-3m59-fh79-m7m6/GHSA-3m59-fh79-m7m6.json index 7a798bd06e3..f89bdd73a02 100644 --- a/advisories/unreviewed/2024/08/GHSA-3m59-fh79-m7m6/GHSA-3m59-fh79-m7m6.json +++ b/advisories/unreviewed/2024/08/GHSA-3m59-fh79-m7m6/GHSA-3m59-fh79-m7m6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-43pr-f87m-4525/GHSA-43pr-f87m-4525.json b/advisories/unreviewed/2024/08/GHSA-43pr-f87m-4525/GHSA-43pr-f87m-4525.json index 78c46383a7d..b07310b90b1 100644 --- a/advisories/unreviewed/2024/08/GHSA-43pr-f87m-4525/GHSA-43pr-f87m-4525.json +++ b/advisories/unreviewed/2024/08/GHSA-43pr-f87m-4525/GHSA-43pr-f87m-4525.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-4q5x-jwj9-qgpw/GHSA-4q5x-jwj9-qgpw.json b/advisories/unreviewed/2024/08/GHSA-4q5x-jwj9-qgpw/GHSA-4q5x-jwj9-qgpw.json index d5859b8fb16..527e0c49d84 100644 --- a/advisories/unreviewed/2024/08/GHSA-4q5x-jwj9-qgpw/GHSA-4q5x-jwj9-qgpw.json +++ b/advisories/unreviewed/2024/08/GHSA-4q5x-jwj9-qgpw/GHSA-4q5x-jwj9-qgpw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-5582-pxg5-673c/GHSA-5582-pxg5-673c.json b/advisories/unreviewed/2024/08/GHSA-5582-pxg5-673c/GHSA-5582-pxg5-673c.json index 42b23372fce..79324dd9512 100644 --- a/advisories/unreviewed/2024/08/GHSA-5582-pxg5-673c/GHSA-5582-pxg5-673c.json +++ b/advisories/unreviewed/2024/08/GHSA-5582-pxg5-673c/GHSA-5582-pxg5-673c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-55vv-p253-vfw3/GHSA-55vv-p253-vfw3.json b/advisories/unreviewed/2024/08/GHSA-55vv-p253-vfw3/GHSA-55vv-p253-vfw3.json index e23d0ddbf1d..890bfe24d10 100644 --- a/advisories/unreviewed/2024/08/GHSA-55vv-p253-vfw3/GHSA-55vv-p253-vfw3.json +++ b/advisories/unreviewed/2024/08/GHSA-55vv-p253-vfw3/GHSA-55vv-p253-vfw3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-5g3f-7r68-hhpq/GHSA-5g3f-7r68-hhpq.json b/advisories/unreviewed/2024/08/GHSA-5g3f-7r68-hhpq/GHSA-5g3f-7r68-hhpq.json index 8cbbc4d3ef2..39cd47e58a4 100644 --- a/advisories/unreviewed/2024/08/GHSA-5g3f-7r68-hhpq/GHSA-5g3f-7r68-hhpq.json +++ b/advisories/unreviewed/2024/08/GHSA-5g3f-7r68-hhpq/GHSA-5g3f-7r68-hhpq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-5q5q-h57w-4vpg/GHSA-5q5q-h57w-4vpg.json b/advisories/unreviewed/2024/08/GHSA-5q5q-h57w-4vpg/GHSA-5q5q-h57w-4vpg.json index bf7ea51b5c7..50b10a43f69 100644 --- a/advisories/unreviewed/2024/08/GHSA-5q5q-h57w-4vpg/GHSA-5q5q-h57w-4vpg.json +++ b/advisories/unreviewed/2024/08/GHSA-5q5q-h57w-4vpg/GHSA-5q5q-h57w-4vpg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-5r2h-7rx4-jxmv/GHSA-5r2h-7rx4-jxmv.json b/advisories/unreviewed/2024/08/GHSA-5r2h-7rx4-jxmv/GHSA-5r2h-7rx4-jxmv.json index 6a439fc396d..01cdebdba9f 100644 --- a/advisories/unreviewed/2024/08/GHSA-5r2h-7rx4-jxmv/GHSA-5r2h-7rx4-jxmv.json +++ b/advisories/unreviewed/2024/08/GHSA-5r2h-7rx4-jxmv/GHSA-5r2h-7rx4-jxmv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-63v6-7xm2-3vhj/GHSA-63v6-7xm2-3vhj.json b/advisories/unreviewed/2024/08/GHSA-63v6-7xm2-3vhj/GHSA-63v6-7xm2-3vhj.json index 1fb08f2a035..6cf18471cd2 100644 --- a/advisories/unreviewed/2024/08/GHSA-63v6-7xm2-3vhj/GHSA-63v6-7xm2-3vhj.json +++ b/advisories/unreviewed/2024/08/GHSA-63v6-7xm2-3vhj/GHSA-63v6-7xm2-3vhj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-7gwf-65pq-33ww/GHSA-7gwf-65pq-33ww.json b/advisories/unreviewed/2024/08/GHSA-7gwf-65pq-33ww/GHSA-7gwf-65pq-33ww.json index 3acf73b600d..dd64de2db45 100644 --- a/advisories/unreviewed/2024/08/GHSA-7gwf-65pq-33ww/GHSA-7gwf-65pq-33ww.json +++ b/advisories/unreviewed/2024/08/GHSA-7gwf-65pq-33ww/GHSA-7gwf-65pq-33ww.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-82g8-5xqh-rc4v/GHSA-82g8-5xqh-rc4v.json b/advisories/unreviewed/2024/08/GHSA-82g8-5xqh-rc4v/GHSA-82g8-5xqh-rc4v.json index 0fa1f5893e5..3bb0fa9e829 100644 --- a/advisories/unreviewed/2024/08/GHSA-82g8-5xqh-rc4v/GHSA-82g8-5xqh-rc4v.json +++ b/advisories/unreviewed/2024/08/GHSA-82g8-5xqh-rc4v/GHSA-82g8-5xqh-rc4v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-8r2h-58x4-rmxg/GHSA-8r2h-58x4-rmxg.json b/advisories/unreviewed/2024/08/GHSA-8r2h-58x4-rmxg/GHSA-8r2h-58x4-rmxg.json index 5c857cd0c0a..3374eb9d656 100644 --- a/advisories/unreviewed/2024/08/GHSA-8r2h-58x4-rmxg/GHSA-8r2h-58x4-rmxg.json +++ b/advisories/unreviewed/2024/08/GHSA-8r2h-58x4-rmxg/GHSA-8r2h-58x4-rmxg.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-9m8g-pqxr-x264/GHSA-9m8g-pqxr-x264.json b/advisories/unreviewed/2024/08/GHSA-9m8g-pqxr-x264/GHSA-9m8g-pqxr-x264.json index e8a13d42b90..5e9831f0164 100644 --- a/advisories/unreviewed/2024/08/GHSA-9m8g-pqxr-x264/GHSA-9m8g-pqxr-x264.json +++ b/advisories/unreviewed/2024/08/GHSA-9m8g-pqxr-x264/GHSA-9m8g-pqxr-x264.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-9wvq-93vj-25vw/GHSA-9wvq-93vj-25vw.json b/advisories/unreviewed/2024/08/GHSA-9wvq-93vj-25vw/GHSA-9wvq-93vj-25vw.json index 58b09671695..9b5b7945e43 100644 --- a/advisories/unreviewed/2024/08/GHSA-9wvq-93vj-25vw/GHSA-9wvq-93vj-25vw.json +++ b/advisories/unreviewed/2024/08/GHSA-9wvq-93vj-25vw/GHSA-9wvq-93vj-25vw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-f8vm-8c24-whhh/GHSA-f8vm-8c24-whhh.json b/advisories/unreviewed/2024/08/GHSA-f8vm-8c24-whhh/GHSA-f8vm-8c24-whhh.json index 00633af7691..92c9d90afb0 100644 --- a/advisories/unreviewed/2024/08/GHSA-f8vm-8c24-whhh/GHSA-f8vm-8c24-whhh.json +++ b/advisories/unreviewed/2024/08/GHSA-f8vm-8c24-whhh/GHSA-f8vm-8c24-whhh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-fhjf-8266-gqfg/GHSA-fhjf-8266-gqfg.json b/advisories/unreviewed/2024/08/GHSA-fhjf-8266-gqfg/GHSA-fhjf-8266-gqfg.json index 801b86d2a3f..c366fa9b8a2 100644 --- a/advisories/unreviewed/2024/08/GHSA-fhjf-8266-gqfg/GHSA-fhjf-8266-gqfg.json +++ b/advisories/unreviewed/2024/08/GHSA-fhjf-8266-gqfg/GHSA-fhjf-8266-gqfg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-frr9-2625-pfhw/GHSA-frr9-2625-pfhw.json b/advisories/unreviewed/2024/08/GHSA-frr9-2625-pfhw/GHSA-frr9-2625-pfhw.json index cb95af89353..c5a5620c926 100644 --- a/advisories/unreviewed/2024/08/GHSA-frr9-2625-pfhw/GHSA-frr9-2625-pfhw.json +++ b/advisories/unreviewed/2024/08/GHSA-frr9-2625-pfhw/GHSA-frr9-2625-pfhw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-fxxv-hjf4-692m/GHSA-fxxv-hjf4-692m.json b/advisories/unreviewed/2024/08/GHSA-fxxv-hjf4-692m/GHSA-fxxv-hjf4-692m.json index 2ae0040f9a7..9eda76aa8f0 100644 --- a/advisories/unreviewed/2024/08/GHSA-fxxv-hjf4-692m/GHSA-fxxv-hjf4-692m.json +++ b/advisories/unreviewed/2024/08/GHSA-fxxv-hjf4-692m/GHSA-fxxv-hjf4-692m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-jfvh-g5v5-5p7c/GHSA-jfvh-g5v5-5p7c.json b/advisories/unreviewed/2024/08/GHSA-jfvh-g5v5-5p7c/GHSA-jfvh-g5v5-5p7c.json index 7df56d546e9..9e71bc4545e 100644 --- a/advisories/unreviewed/2024/08/GHSA-jfvh-g5v5-5p7c/GHSA-jfvh-g5v5-5p7c.json +++ b/advisories/unreviewed/2024/08/GHSA-jfvh-g5v5-5p7c/GHSA-jfvh-g5v5-5p7c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-p4q8-q2f6-5fcr/GHSA-p4q8-q2f6-5fcr.json b/advisories/unreviewed/2024/08/GHSA-p4q8-q2f6-5fcr/GHSA-p4q8-q2f6-5fcr.json index 46fd33aced3..045f824c19c 100644 --- a/advisories/unreviewed/2024/08/GHSA-p4q8-q2f6-5fcr/GHSA-p4q8-q2f6-5fcr.json +++ b/advisories/unreviewed/2024/08/GHSA-p4q8-q2f6-5fcr/GHSA-p4q8-q2f6-5fcr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-qgc2-f4hh-59pp/GHSA-qgc2-f4hh-59pp.json b/advisories/unreviewed/2024/08/GHSA-qgc2-f4hh-59pp/GHSA-qgc2-f4hh-59pp.json index b6f3fb44da8..4b4dd5b6a02 100644 --- a/advisories/unreviewed/2024/08/GHSA-qgc2-f4hh-59pp/GHSA-qgc2-f4hh-59pp.json +++ b/advisories/unreviewed/2024/08/GHSA-qgc2-f4hh-59pp/GHSA-qgc2-f4hh-59pp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-qh9v-58cc-xcxm/GHSA-qh9v-58cc-xcxm.json b/advisories/unreviewed/2024/08/GHSA-qh9v-58cc-xcxm/GHSA-qh9v-58cc-xcxm.json index a7bf6a6837f..1cf0225338e 100644 --- a/advisories/unreviewed/2024/08/GHSA-qh9v-58cc-xcxm/GHSA-qh9v-58cc-xcxm.json +++ b/advisories/unreviewed/2024/08/GHSA-qh9v-58cc-xcxm/GHSA-qh9v-58cc-xcxm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-qhhc-gwh8-gw56/GHSA-qhhc-gwh8-gw56.json b/advisories/unreviewed/2024/08/GHSA-qhhc-gwh8-gw56/GHSA-qhhc-gwh8-gw56.json index 1cd84976e89..b55564746c9 100644 --- a/advisories/unreviewed/2024/08/GHSA-qhhc-gwh8-gw56/GHSA-qhhc-gwh8-gw56.json +++ b/advisories/unreviewed/2024/08/GHSA-qhhc-gwh8-gw56/GHSA-qhhc-gwh8-gw56.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-qj9r-8797-wcv6/GHSA-qj9r-8797-wcv6.json b/advisories/unreviewed/2024/08/GHSA-qj9r-8797-wcv6/GHSA-qj9r-8797-wcv6.json index 9e9790c5a00..07b7a75d54b 100644 --- a/advisories/unreviewed/2024/08/GHSA-qj9r-8797-wcv6/GHSA-qj9r-8797-wcv6.json +++ b/advisories/unreviewed/2024/08/GHSA-qj9r-8797-wcv6/GHSA-qj9r-8797-wcv6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-qwwf-75hf-8cx4/GHSA-qwwf-75hf-8cx4.json b/advisories/unreviewed/2024/08/GHSA-qwwf-75hf-8cx4/GHSA-qwwf-75hf-8cx4.json index 42b8f4ef214..bf56a901dec 100644 --- a/advisories/unreviewed/2024/08/GHSA-qwwf-75hf-8cx4/GHSA-qwwf-75hf-8cx4.json +++ b/advisories/unreviewed/2024/08/GHSA-qwwf-75hf-8cx4/GHSA-qwwf-75hf-8cx4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-rf35-77r3-v7j8/GHSA-rf35-77r3-v7j8.json b/advisories/unreviewed/2024/08/GHSA-rf35-77r3-v7j8/GHSA-rf35-77r3-v7j8.json index e1d64ad56a7..47429daf757 100644 --- a/advisories/unreviewed/2024/08/GHSA-rf35-77r3-v7j8/GHSA-rf35-77r3-v7j8.json +++ b/advisories/unreviewed/2024/08/GHSA-rf35-77r3-v7j8/GHSA-rf35-77r3-v7j8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-rqrc-553g-fmrv/GHSA-rqrc-553g-fmrv.json b/advisories/unreviewed/2024/08/GHSA-rqrc-553g-fmrv/GHSA-rqrc-553g-fmrv.json index fc3d6c39385..478a4436479 100644 --- a/advisories/unreviewed/2024/08/GHSA-rqrc-553g-fmrv/GHSA-rqrc-553g-fmrv.json +++ b/advisories/unreviewed/2024/08/GHSA-rqrc-553g-fmrv/GHSA-rqrc-553g-fmrv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-vr9m-v4wh-hr6m/GHSA-vr9m-v4wh-hr6m.json b/advisories/unreviewed/2024/08/GHSA-vr9m-v4wh-hr6m/GHSA-vr9m-v4wh-hr6m.json index d0a591d279a..66072191a9b 100644 --- a/advisories/unreviewed/2024/08/GHSA-vr9m-v4wh-hr6m/GHSA-vr9m-v4wh-hr6m.json +++ b/advisories/unreviewed/2024/08/GHSA-vr9m-v4wh-hr6m/GHSA-vr9m-v4wh-hr6m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-vrfc-79g7-7m66/GHSA-vrfc-79g7-7m66.json b/advisories/unreviewed/2024/08/GHSA-vrfc-79g7-7m66/GHSA-vrfc-79g7-7m66.json index 61748f8fc85..c5b997e6708 100644 --- a/advisories/unreviewed/2024/08/GHSA-vrfc-79g7-7m66/GHSA-vrfc-79g7-7m66.json +++ b/advisories/unreviewed/2024/08/GHSA-vrfc-79g7-7m66/GHSA-vrfc-79g7-7m66.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-w7qw-jgg9-3f92/GHSA-w7qw-jgg9-3f92.json b/advisories/unreviewed/2024/08/GHSA-w7qw-jgg9-3f92/GHSA-w7qw-jgg9-3f92.json index d36636385d2..78fc067383b 100644 --- a/advisories/unreviewed/2024/08/GHSA-w7qw-jgg9-3f92/GHSA-w7qw-jgg9-3f92.json +++ b/advisories/unreviewed/2024/08/GHSA-w7qw-jgg9-3f92/GHSA-w7qw-jgg9-3f92.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-w863-jf54-x5r7/GHSA-w863-jf54-x5r7.json b/advisories/unreviewed/2024/08/GHSA-w863-jf54-x5r7/GHSA-w863-jf54-x5r7.json index 7e142bbe736..c3ff8780491 100644 --- a/advisories/unreviewed/2024/08/GHSA-w863-jf54-x5r7/GHSA-w863-jf54-x5r7.json +++ b/advisories/unreviewed/2024/08/GHSA-w863-jf54-x5r7/GHSA-w863-jf54-x5r7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-w8m3-qvxw-x4hh/GHSA-w8m3-qvxw-x4hh.json b/advisories/unreviewed/2024/08/GHSA-w8m3-qvxw-x4hh/GHSA-w8m3-qvxw-x4hh.json index 67ffde5197e..57a38b0d9a3 100644 --- a/advisories/unreviewed/2024/08/GHSA-w8m3-qvxw-x4hh/GHSA-w8m3-qvxw-x4hh.json +++ b/advisories/unreviewed/2024/08/GHSA-w8m3-qvxw-x4hh/GHSA-w8m3-qvxw-x4hh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-wp68-54c4-8qg2/GHSA-wp68-54c4-8qg2.json b/advisories/unreviewed/2024/08/GHSA-wp68-54c4-8qg2/GHSA-wp68-54c4-8qg2.json index 24b6debafa5..943fc255ab5 100644 --- a/advisories/unreviewed/2024/08/GHSA-wp68-54c4-8qg2/GHSA-wp68-54c4-8qg2.json +++ b/advisories/unreviewed/2024/08/GHSA-wp68-54c4-8qg2/GHSA-wp68-54c4-8qg2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-xrq7-65mq-gcgw/GHSA-xrq7-65mq-gcgw.json b/advisories/unreviewed/2024/08/GHSA-xrq7-65mq-gcgw/GHSA-xrq7-65mq-gcgw.json index f6f2e0ee112..d6a6961db72 100644 --- a/advisories/unreviewed/2024/08/GHSA-xrq7-65mq-gcgw/GHSA-xrq7-65mq-gcgw.json +++ b/advisories/unreviewed/2024/08/GHSA-xrq7-65mq-gcgw/GHSA-xrq7-65mq-gcgw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY",