diff --git a/advisories/github-reviewed/2024/05/GHSA-9328-gcfq-p269/GHSA-9328-gcfq-p269.json b/advisories/github-reviewed/2024/05/GHSA-9328-gcfq-p269/GHSA-9328-gcfq-p269.json index 0735c9b1bb6..ffdcd08a733 100644 --- a/advisories/github-reviewed/2024/05/GHSA-9328-gcfq-p269/GHSA-9328-gcfq-p269.json +++ b/advisories/github-reviewed/2024/05/GHSA-9328-gcfq-p269/GHSA-9328-gcfq-p269.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-9328-gcfq-p269", - "modified": "2024-05-21T12:25:59Z", + "modified": "2024-11-04T21:30:45Z", "published": "2024-05-18T00:30:42Z", "aliases": [ "CVE-2024-35312" @@ -104,6 +104,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-670", "CWE-754" ], "severity": "HIGH", diff --git a/advisories/unreviewed/2024/02/GHSA-2j3h-j2q3-wxp3/GHSA-2j3h-j2q3-wxp3.json b/advisories/unreviewed/2024/02/GHSA-2j3h-j2q3-wxp3/GHSA-2j3h-j2q3-wxp3.json index 18d6872e870..0f20326c779 100644 --- a/advisories/unreviewed/2024/02/GHSA-2j3h-j2q3-wxp3/GHSA-2j3h-j2q3-wxp3.json +++ b/advisories/unreviewed/2024/02/GHSA-2j3h-j2q3-wxp3/GHSA-2j3h-j2q3-wxp3.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-2j3h-j2q3-wxp3", - "modified": "2024-05-01T21:30:30Z", + "modified": "2024-11-04T21:30:25Z", "published": "2024-02-26T18:30:31Z", "aliases": [ "CVE-2024-25082" ], "details": "Splinefont in FontForge through 20230101 allows command injection via crafted archives or compressed files.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" + } ], "affected": [ @@ -41,9 +44,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-77" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-26T16:27:58Z" diff --git a/advisories/unreviewed/2024/02/GHSA-3qpr-v3fc-q5q5/GHSA-3qpr-v3fc-q5q5.json b/advisories/unreviewed/2024/02/GHSA-3qpr-v3fc-q5q5/GHSA-3qpr-v3fc-q5q5.json index b842344f357..48b9093ea85 100644 --- a/advisories/unreviewed/2024/02/GHSA-3qpr-v3fc-q5q5/GHSA-3qpr-v3fc-q5q5.json +++ b/advisories/unreviewed/2024/02/GHSA-3qpr-v3fc-q5q5/GHSA-3qpr-v3fc-q5q5.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-3qpr-v3fc-q5q5", - "modified": "2024-02-29T06:30:32Z", + "modified": "2024-11-04T21:30:25Z", "published": "2024-02-29T06:30:32Z", "aliases": [ "CVE-2023-52481" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: errata: Add Cortex-A520 speculative unprivileged load workaround\n\nImplement the workaround for ARM Cortex-A520 erratum 2966298. On an\naffected Cortex-A520 core, a speculatively executed unprivileged load\nmight leak data from a privileged load via a cache side channel. The\nissue only exists for loads within a translation regime with the same\ntranslation (e.g. same ASID and VMID). Therefore, the issue only affects\nthe return to EL0.\n\nThe workaround is to execute a TLBI before returning to EL0 after all\nloads of privileged data. A non-shareable TLBI to any address is\nsufficient.\n\nThe workaround isn't necessary if page table isolation (KPTI) is\nenabled, but for simplicity it will be. Page table isolation should\nnormally be disabled for Cortex-A520 as it supports the CSV3 feature\nand the E0PD feature (used when KASLR is enabled).", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" + } ], "affected": [ @@ -35,7 +38,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-29T06:15:46Z" diff --git a/advisories/unreviewed/2024/02/GHSA-frh6-wfp2-xc99/GHSA-frh6-wfp2-xc99.json b/advisories/unreviewed/2024/02/GHSA-frh6-wfp2-xc99/GHSA-frh6-wfp2-xc99.json index 90670a7c4bc..b2a17bd5eb2 100644 --- a/advisories/unreviewed/2024/02/GHSA-frh6-wfp2-xc99/GHSA-frh6-wfp2-xc99.json +++ b/advisories/unreviewed/2024/02/GHSA-frh6-wfp2-xc99/GHSA-frh6-wfp2-xc99.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-frh6-wfp2-xc99", - "modified": "2024-02-28T09:30:36Z", + "modified": "2024-11-04T21:30:25Z", "published": "2024-02-28T09:30:36Z", "aliases": [ "CVE-2021-46978" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: nVMX: Always make an attempt to map eVMCS after migration\n\nWhen enlightened VMCS is in use and nested state is migrated with\nvmx_get_nested_state()/vmx_set_nested_state() KVM can't map evmcs\npage right away: evmcs gpa is not 'struct kvm_vmx_nested_state_hdr'\nand we can't read it from VP assist page because userspace may decide\nto restore HV_X64_MSR_VP_ASSIST_PAGE after restoring nested state\n(and QEMU, for example, does exactly that). To make sure eVMCS is\nmapped /vmx_set_nested_state() raises KVM_REQ_GET_NESTED_STATE_PAGES\nrequest.\n\nCommit f2c7ef3ba955 (\"KVM: nSVM: cancel KVM_REQ_GET_NESTED_STATE_PAGES\non nested vmexit\") added KVM_REQ_GET_NESTED_STATE_PAGES clearing to\nnested_vmx_vmexit() to make sure MSR permission bitmap is not switched\nwhen an immediate exit from L2 to L1 happens right after migration (caused\nby a pending event, for example). Unfortunately, in the exact same\nsituation we still need to have eVMCS mapped so\nnested_sync_vmcs12_to_shadow() reflects changes in VMCS12 to eVMCS.\n\nAs a band-aid, restore nested_get_evmcs_page() when clearing\nKVM_REQ_GET_NESTED_STATE_PAGES in nested_vmx_vmexit(). The 'fix' is far\nfrom being ideal as we can't easily propagate possible failures and even if\nwe could, this is most likely already too late to do so. The whole\n'KVM_REQ_GET_NESTED_STATE_PAGES' idea for mapping eVMCS after migration\nseems to be fragile as we diverge too much from the 'native' path when\nvmptr loading happens on vmx_set_nested_state().", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -39,7 +42,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-28T09:15:37Z" diff --git a/advisories/unreviewed/2024/02/GHSA-j6mw-3p6q-wxcc/GHSA-j6mw-3p6q-wxcc.json b/advisories/unreviewed/2024/02/GHSA-j6mw-3p6q-wxcc/GHSA-j6mw-3p6q-wxcc.json index 9206029a231..75f75c6f615 100644 --- a/advisories/unreviewed/2024/02/GHSA-j6mw-3p6q-wxcc/GHSA-j6mw-3p6q-wxcc.json +++ b/advisories/unreviewed/2024/02/GHSA-j6mw-3p6q-wxcc/GHSA-j6mw-3p6q-wxcc.json @@ -28,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/02/GHSA-qq53-28v3-c4vm/GHSA-qq53-28v3-c4vm.json b/advisories/unreviewed/2024/02/GHSA-qq53-28v3-c4vm/GHSA-qq53-28v3-c4vm.json index ba10855cc04..3682bf5a952 100644 --- a/advisories/unreviewed/2024/02/GHSA-qq53-28v3-c4vm/GHSA-qq53-28v3-c4vm.json +++ b/advisories/unreviewed/2024/02/GHSA-qq53-28v3-c4vm/GHSA-qq53-28v3-c4vm.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-qq53-28v3-c4vm", - "modified": "2024-02-16T21:31:31Z", + "modified": "2024-11-04T21:30:25Z", "published": "2024-02-16T21:31:31Z", "aliases": [ "CVE-2024-0017" ], "details": "In shouldUseNoOpLocation of CameraActivity.java, there is a possible confused deputy due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-863" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-16T20:15:47Z" diff --git a/advisories/unreviewed/2024/03/GHSA-32ch-6x54-q4h9/GHSA-32ch-6x54-q4h9.json b/advisories/unreviewed/2024/03/GHSA-32ch-6x54-q4h9/GHSA-32ch-6x54-q4h9.json index 12d0264cda1..6a3fb2b2600 100644 --- a/advisories/unreviewed/2024/03/GHSA-32ch-6x54-q4h9/GHSA-32ch-6x54-q4h9.json +++ b/advisories/unreviewed/2024/03/GHSA-32ch-6x54-q4h9/GHSA-32ch-6x54-q4h9.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-32ch-6x54-q4h9", - "modified": "2024-05-01T18:30:35Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-03-06T00:31:26Z", "aliases": [ "CVE-2023-45289" ], "details": "When following an HTTP redirect to a domain which is not a subdomain match or exact match of the initial domain, an http.Client does not forward sensitive headers such as \"Authorization\" or \"Cookie\". For example, a redirect from foo.com to www.foo.com will forward the Authorization header, but a redirect to bar.com will not. A maliciously crafted HTTP redirect could cause sensitive headers to be unexpectedly forwarded.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" + } ], "affected": [ @@ -47,7 +50,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-05T23:15:07Z" diff --git a/advisories/unreviewed/2024/03/GHSA-3hfr-246f-6fxv/GHSA-3hfr-246f-6fxv.json b/advisories/unreviewed/2024/03/GHSA-3hfr-246f-6fxv/GHSA-3hfr-246f-6fxv.json index 9e9974ad693..731d5932a9d 100644 --- a/advisories/unreviewed/2024/03/GHSA-3hfr-246f-6fxv/GHSA-3hfr-246f-6fxv.json +++ b/advisories/unreviewed/2024/03/GHSA-3hfr-246f-6fxv/GHSA-3hfr-246f-6fxv.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-3hfr-246f-6fxv", - "modified": "2024-03-05T18:31:14Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-03-05T18:31:14Z", "aliases": [ "CVE-2024-22255" @@ -28,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-770" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/03/GHSA-46rq-q996-rxc2/GHSA-46rq-q996-rxc2.json b/advisories/unreviewed/2024/03/GHSA-46rq-q996-rxc2/GHSA-46rq-q996-rxc2.json index 8eb2220a0ef..90926773325 100644 --- a/advisories/unreviewed/2024/03/GHSA-46rq-q996-rxc2/GHSA-46rq-q996-rxc2.json +++ b/advisories/unreviewed/2024/03/GHSA-46rq-q996-rxc2/GHSA-46rq-q996-rxc2.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-46rq-q996-rxc2", - "modified": "2024-03-01T12:30:53Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-03-01T12:30:53Z", "aliases": [ "CVE-2024-25972" ], "details": "Initialization of a resource with an insecure default vulnerability in OET-213H-BTS1 sold in Japan by Atsumi Electric Co., Ltd. allows a network-adjacent unauthenticated attacker to configure and control the affected product.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" + } ], "affected": [ @@ -33,9 +36,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-1188" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-01T10:15:07Z" diff --git a/advisories/unreviewed/2024/03/GHSA-7f7v-jf43-h9pw/GHSA-7f7v-jf43-h9pw.json b/advisories/unreviewed/2024/03/GHSA-7f7v-jf43-h9pw/GHSA-7f7v-jf43-h9pw.json index 6b2e4023ce1..6d7c2946b48 100644 --- a/advisories/unreviewed/2024/03/GHSA-7f7v-jf43-h9pw/GHSA-7f7v-jf43-h9pw.json +++ b/advisories/unreviewed/2024/03/GHSA-7f7v-jf43-h9pw/GHSA-7f7v-jf43-h9pw.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-7f7v-jf43-h9pw", - "modified": "2024-03-02T00:31:30Z", + "modified": "2024-11-04T21:30:25Z", "published": "2024-03-02T00:31:30Z", "aliases": [ "CVE-2021-47070" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nuio_hv_generic: Fix another memory leak in error handling paths\n\nMemory allocated by 'vmbus_alloc_ring()' at the beginning of the probe\nfunction is never freed in the error handling path.\n\nAdd the missing 'vmbus_free_ring()' call.\n\nNote that it is already freed in the .remove function.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-01T22:15:46Z" diff --git a/advisories/unreviewed/2024/03/GHSA-hg53-xx34-25ww/GHSA-hg53-xx34-25ww.json b/advisories/unreviewed/2024/03/GHSA-hg53-xx34-25ww/GHSA-hg53-xx34-25ww.json index c28a3a15d9e..5388d227441 100644 --- a/advisories/unreviewed/2024/03/GHSA-hg53-xx34-25ww/GHSA-hg53-xx34-25ww.json +++ b/advisories/unreviewed/2024/03/GHSA-hg53-xx34-25ww/GHSA-hg53-xx34-25ww.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-hg53-xx34-25ww", - "modified": "2024-03-03T00:30:32Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-03-03T00:30:32Z", "aliases": [ "CVE-2023-52561" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved\n\nAdding a reserved memory region for the framebuffer memory\n(the splash memory region set up by the bootloader).\n\nIt fixes a kernel panic (arm-smmu: Unhandled context fault\nat this particular memory region) reported on DB845c running\nv5.10.y.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -35,7 +38,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-02T22:15:48Z" diff --git a/advisories/unreviewed/2024/03/GHSA-q6fw-pgc6-r84c/GHSA-q6fw-pgc6-r84c.json b/advisories/unreviewed/2024/03/GHSA-q6fw-pgc6-r84c/GHSA-q6fw-pgc6-r84c.json index 7b1fad5d923..356e02bd160 100644 --- a/advisories/unreviewed/2024/03/GHSA-q6fw-pgc6-r84c/GHSA-q6fw-pgc6-r84c.json +++ b/advisories/unreviewed/2024/03/GHSA-q6fw-pgc6-r84c/GHSA-q6fw-pgc6-r84c.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-q6fw-pgc6-r84c", - "modified": "2024-03-27T15:30:37Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-03-27T15:30:37Z", "aliases": [ "CVE-2024-26652" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: pds_core: Fix possible double free in error handling path\n\nWhen auxiliary_device_add() returns error and then calls\nauxiliary_device_uninit(), Callback function pdsc_auxbus_dev_release\ncalls kfree(padev) to free memory. We shouldn't call kfree(padev)\nagain in the error handling path.\n\nFix this by cleaning up the redundant kfree() and putting\nthe error handling back to where the errors happened.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" + } ], "affected": [ @@ -35,7 +38,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-27T14:15:10Z" diff --git a/advisories/unreviewed/2024/04/GHSA-5h96-gccv-m233/GHSA-5h96-gccv-m233.json b/advisories/unreviewed/2024/04/GHSA-5h96-gccv-m233/GHSA-5h96-gccv-m233.json index e4cc9aa17f6..839848c3b9e 100644 --- a/advisories/unreviewed/2024/04/GHSA-5h96-gccv-m233/GHSA-5h96-gccv-m233.json +++ b/advisories/unreviewed/2024/04/GHSA-5h96-gccv-m233/GHSA-5h96-gccv-m233.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-5h96-gccv-m233", - "modified": "2024-04-30T21:30:31Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-04-30T21:30:31Z", "aliases": [ "CVE-2023-50059" ], "details": "An issue ingalxe.com Galxe platform 1.0 allows a remote attacker to obtain sensitive information via the Web3 authentication process of Galxe, the signed message lacks a nonce (random number)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-338" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-04-30T19:15:23Z" diff --git a/advisories/unreviewed/2024/04/GHSA-8x8h-8p2w-8g4f/GHSA-8x8h-8p2w-8g4f.json b/advisories/unreviewed/2024/04/GHSA-8x8h-8p2w-8g4f/GHSA-8x8h-8p2w-8g4f.json index b6bbdd39157..6e263f7e128 100644 --- a/advisories/unreviewed/2024/04/GHSA-8x8h-8p2w-8g4f/GHSA-8x8h-8p2w-8g4f.json +++ b/advisories/unreviewed/2024/04/GHSA-8x8h-8p2w-8g4f/GHSA-8x8h-8p2w-8g4f.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-8x8h-8p2w-8g4f", - "modified": "2024-04-03T18:30:42Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-04-03T18:30:42Z", "aliases": [ "CVE-2024-26737" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel\n\nThe following race is possible between bpf_timer_cancel_and_free\nand bpf_timer_cancel. It will lead a UAF on the timer->timer.\n\nbpf_timer_cancel();\n\tspin_lock();\n\tt = timer->time;\n\tspin_unlock();\n\n\t\t\t\t\tbpf_timer_cancel_and_free();\n\t\t\t\t\t\tspin_lock();\n\t\t\t\t\t\tt = timer->timer;\n\t\t\t\t\t\ttimer->timer = NULL;\n\t\t\t\t\t\tspin_unlock();\n\t\t\t\t\t\thrtimer_cancel(&t->timer);\n\t\t\t\t\t\tkfree(t);\n\n\t/* UAF on t */\n\thrtimer_cancel(&t->timer);\n\nIn bpf_timer_cancel_and_free, this patch frees the timer->timer\nafter a rcu grace period. This requires a rcu_head addition\nto the \"struct bpf_hrtimer\". Another kfree(t) happens in bpf_timer_init,\nthis does not need a kfree_rcu because it is still under the\nspin_lock and timer->timer has not been visible by others yet.\n\nIn bpf_timer_cancel, rcu_read_lock() is added because this helper\ncan be used in a non rcu critical section context (e.g. from\na sleepable bpf prog). Other timer->timer usages in helpers.c\nhave been audited, bpf_timer_cancel() is the only place where\ntimer->timer is used outside of the spin_lock.\n\nAnother solution considered is to mark a t->flag in bpf_timer_cancel\nand clear it after hrtimer_cancel() is done. In bpf_timer_cancel_and_free,\nit busy waits for the flag to be cleared before kfree(t). This patch\ngoes with a straight forward solution and frees timer->timer after\na rcu grace period.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -43,7 +46,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-04-03T17:15:51Z" diff --git a/advisories/unreviewed/2024/04/GHSA-jgjj-vmw4-3g37/GHSA-jgjj-vmw4-3g37.json b/advisories/unreviewed/2024/04/GHSA-jgjj-vmw4-3g37/GHSA-jgjj-vmw4-3g37.json index 5c8f66f48f5..351b197a4fc 100644 --- a/advisories/unreviewed/2024/04/GHSA-jgjj-vmw4-3g37/GHSA-jgjj-vmw4-3g37.json +++ b/advisories/unreviewed/2024/04/GHSA-jgjj-vmw4-3g37/GHSA-jgjj-vmw4-3g37.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-jgjj-vmw4-3g37", - "modified": "2024-04-03T18:30:42Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-04-03T18:30:42Z", "aliases": [ "CVE-2024-26758" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd: Don't ignore suspended array in md_check_recovery()\n\nmddev_suspend() never stop sync_thread, hence it doesn't make sense to\nignore suspended array in md_check_recovery(), which might cause\nsync_thread can't be unregistered.\n\nAfter commit f52f5c71f3d4 (\"md: fix stopping sync thread\"), following\nhang can be triggered by test shell/integrity-caching.sh:\n\n1) suspend the array:\nraid_postsuspend\n mddev_suspend\n\n2) stop the array:\nraid_dtr\n md_stop\n __md_stop_writes\n stop_sync_thread\n set_bit(MD_RECOVERY_INTR, &mddev->recovery);\n md_wakeup_thread_directly(mddev->sync_thread);\n wait_event(..., !test_bit(MD_RECOVERY_RUNNING, &mddev->recovery))\n\n3) sync thread done:\nmd_do_sync\n set_bit(MD_RECOVERY_DONE, &mddev->recovery);\n md_wakeup_thread(mddev->thread);\n\n4) daemon thread can't unregister sync thread:\nmd_check_recovery\n if (mddev->suspended)\n return; -> return directly\n md_read_sync_thread\n clear_bit(MD_RECOVERY_RUNNING, &mddev->recovery);\n -> MD_RECOVERY_RUNNING can't be cleared, hence step 2 hang;\n\nThis problem is not just related to dm-raid, fix it by ignoring\nsuspended array in md_check_recovery(). And follow up patches will\nimprove dm-raid better to frozen sync thread during suspend.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-129" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-04-03T17:15:52Z" diff --git a/advisories/unreviewed/2024/04/GHSA-q43w-g673-m6f4/GHSA-q43w-g673-m6f4.json b/advisories/unreviewed/2024/04/GHSA-q43w-g673-m6f4/GHSA-q43w-g673-m6f4.json index da5a21f0726..febf1fc5969 100644 --- a/advisories/unreviewed/2024/04/GHSA-q43w-g673-m6f4/GHSA-q43w-g673-m6f4.json +++ b/advisories/unreviewed/2024/04/GHSA-q43w-g673-m6f4/GHSA-q43w-g673-m6f4.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-q43w-g673-m6f4", - "modified": "2024-04-17T12:32:03Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-04-17T12:32:03Z", "aliases": [ "CVE-2024-26828" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: fix underflow in parse_server_interfaces()\n\nIn this loop, we step through the buffer and after each item we check\nif the size_left is greater than the minimum size we need. However,\nthe problem is that \"bytes_left\" is type ssize_t while sizeof() is type\nsize_t. That means that because of type promotion, the comparison is\ndone as an unsigned and if we have negative bytes left the loop\ncontinues instead of ending.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H" + } ], "affected": [ @@ -39,7 +42,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-04-17T10:15:09Z" diff --git a/advisories/unreviewed/2024/04/GHSA-qcrv-2gf7-9hrp/GHSA-qcrv-2gf7-9hrp.json b/advisories/unreviewed/2024/04/GHSA-qcrv-2gf7-9hrp/GHSA-qcrv-2gf7-9hrp.json index ef0c07481c0..61afe4c0876 100644 --- a/advisories/unreviewed/2024/04/GHSA-qcrv-2gf7-9hrp/GHSA-qcrv-2gf7-9hrp.json +++ b/advisories/unreviewed/2024/04/GHSA-qcrv-2gf7-9hrp/GHSA-qcrv-2gf7-9hrp.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-qcrv-2gf7-9hrp", - "modified": "2024-04-17T18:31:32Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-04-17T18:31:32Z", "aliases": [ "CVE-2024-26918" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI: Fix active state requirement in PME polling\n\nThe commit noted in fixes added a bogus requirement that runtime PM managed\ndevices need to be in the RPM_ACTIVE state for PME polling. In fact, only\ndevices in low power states should be polled.\n\nHowever there's still a requirement that the device config space must be\naccessible, which has implications for both the current state of the polled\ndevice and the parent bridge, when present. It's not sufficient to assume\nthe bridge remains in D0 and cases have been observed where the bridge\npasses the D0 test, but the PM state indicates RPM_SUSPENDING and config\nspace of the polled device becomes inaccessible during pci_pme_wakeup().\n\nTherefore, since the bridge is already effectively required to be in the\nRPM_ACTIVE state, formalize this in the code and elevate the PM usage count\nto maintain the state while polling the subordinate device.\n\nThis resolves a regression reported in the bugzilla below where a\nThunderbolt/USB4 hierarchy fails to scan for an attached NVMe endpoint\ndownstream of a bridge in a D3hot power state.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -35,7 +38,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-04-17T16:15:08Z" diff --git a/advisories/unreviewed/2024/04/GHSA-vqhg-mqww-h64x/GHSA-vqhg-mqww-h64x.json b/advisories/unreviewed/2024/04/GHSA-vqhg-mqww-h64x/GHSA-vqhg-mqww-h64x.json index 843d5bbc995..3ea9cda8136 100644 --- a/advisories/unreviewed/2024/04/GHSA-vqhg-mqww-h64x/GHSA-vqhg-mqww-h64x.json +++ b/advisories/unreviewed/2024/04/GHSA-vqhg-mqww-h64x/GHSA-vqhg-mqww-h64x.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-vqhg-mqww-h64x", - "modified": "2024-04-04T09:30:34Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-04-04T09:30:34Z", "aliases": [ "CVE-2020-25730" ], "details": "Cross Site Scripting (XSS) vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate privileges, and obtain sensitive information via PHP_SELF component in classic/views/download.php.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-04-04T08:15:06Z" diff --git a/advisories/unreviewed/2024/04/GHSA-x82q-r52r-c4wr/GHSA-x82q-r52r-c4wr.json b/advisories/unreviewed/2024/04/GHSA-x82q-r52r-c4wr/GHSA-x82q-r52r-c4wr.json index a775586e33e..b63d1deccb9 100644 --- a/advisories/unreviewed/2024/04/GHSA-x82q-r52r-c4wr/GHSA-x82q-r52r-c4wr.json +++ b/advisories/unreviewed/2024/04/GHSA-x82q-r52r-c4wr/GHSA-x82q-r52r-c4wr.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-x82q-r52r-c4wr", - "modified": "2024-04-30T18:30:33Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-04-30T18:30:33Z", "aliases": [ "CVE-2020-5200" ], "details": "Minerbabe through V4.16 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-04-30T18:15:19Z" diff --git a/advisories/unreviewed/2024/04/GHSA-xjj5-mp7v-39hq/GHSA-xjj5-mp7v-39hq.json b/advisories/unreviewed/2024/04/GHSA-xjj5-mp7v-39hq/GHSA-xjj5-mp7v-39hq.json index a31707b7b29..0224ed2ab9d 100644 --- a/advisories/unreviewed/2024/04/GHSA-xjj5-mp7v-39hq/GHSA-xjj5-mp7v-39hq.json +++ b/advisories/unreviewed/2024/04/GHSA-xjj5-mp7v-39hq/GHSA-xjj5-mp7v-39hq.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-xjj5-mp7v-39hq", - "modified": "2024-04-08T03:30:52Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-04-08T03:30:52Z", "aliases": [ "CVE-2023-52346" ], "details": "In modem driver, there is a possible system crash due to improper input validation. This could lead to local information disclosure with System execution privileges needed", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-120" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-04-08T03:15:08Z" diff --git a/advisories/unreviewed/2024/05/GHSA-7qvv-hm32-963p/GHSA-7qvv-hm32-963p.json b/advisories/unreviewed/2024/05/GHSA-7qvv-hm32-963p/GHSA-7qvv-hm32-963p.json index 9a97a51d5eb..f4cd5a5c9e8 100644 --- a/advisories/unreviewed/2024/05/GHSA-7qvv-hm32-963p/GHSA-7qvv-hm32-963p.json +++ b/advisories/unreviewed/2024/05/GHSA-7qvv-hm32-963p/GHSA-7qvv-hm32-963p.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-7qvv-hm32-963p", - "modified": "2024-05-21T15:31:41Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-05-21T15:31:41Z", "aliases": [ "CVE-2021-47271" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: cdnsp: Fix deadlock issue in cdnsp_thread_irq_handler\n\nPatch fixes the following critical issue caused by deadlock which has been\ndetected during testing NCM class:\n\nsmp: csd: Detected non-responsive CSD lock (#1) on CPU#0\nsmp: csd: CSD lock (#1) unresponsive.\n....\nRIP: 0010:native_queued_spin_lock_slowpath+0x61/0x1d0\nRSP: 0018:ffffbc494011cde0 EFLAGS: 00000002\nRAX: 0000000000000101 RBX: ffff9ee8116b4a68 RCX: 0000000000000000\nRDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff9ee8116b4658\nRBP: ffffbc494011cde0 R08: 0000000000000001 R09: 0000000000000000\nR10: ffff9ee8116b4670 R11: 0000000000000000 R12: ffff9ee8116b4658\nR13: ffff9ee8116b4670 R14: 0000000000000246 R15: ffff9ee8116b4658\nCS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\nCR2: 00007f7bcc41a830 CR3: 000000007a612003 CR4: 00000000001706e0\nCall Trace:\n \n do_raw_spin_lock+0xc0/0xd0\n _raw_spin_lock_irqsave+0x95/0xa0\n cdnsp_gadget_ep_queue.cold+0x88/0x107 [cdnsp_udc_pci]\n usb_ep_queue+0x35/0x110\n eth_start_xmit+0x220/0x3d0 [u_ether]\n ncm_tx_timeout+0x34/0x40 [usb_f_ncm]\n ? ncm_free_inst+0x50/0x50 [usb_f_ncm]\n __hrtimer_run_queues+0xac/0x440\n hrtimer_run_softirq+0x8c/0xb0\n __do_softirq+0xcf/0x428\n asm_call_irq_on_stack+0x12/0x20\n \n do_softirq_own_stack+0x61/0x70\n irq_exit_rcu+0xc1/0xd0\n sysvec_apic_timer_interrupt+0x52/0xb0\n asm_sysvec_apic_timer_interrupt+0x12/0x20\nRIP: 0010:do_raw_spin_trylock+0x18/0x40\nRSP: 0018:ffffbc494138bda8 EFLAGS: 00000246\nRAX: 0000000000000000 RBX: ffff9ee8116b4658 RCX: 0000000000000000\nRDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff9ee8116b4658\nRBP: ffffbc494138bda8 R08: 0000000000000001 R09: 0000000000000000\nR10: ffff9ee8116b4670 R11: 0000000000000000 R12: ffff9ee8116b4658\nR13: ffff9ee8116b4670 R14: ffff9ee7b5c73d80 R15: ffff9ee8116b4000\n _raw_spin_lock+0x3d/0x70\n ? cdnsp_thread_irq_handler.cold+0x32/0x112c [cdnsp_udc_pci]\n cdnsp_thread_irq_handler.cold+0x32/0x112c [cdnsp_udc_pci]\n ? cdnsp_remove_request+0x1f0/0x1f0 [cdnsp_udc_pci]\n ? cdnsp_thread_irq_handler+0x5/0xa0 [cdnsp_udc_pci]\n ? irq_thread+0xa0/0x1c0\n irq_thread_fn+0x28/0x60\n irq_thread+0x105/0x1c0\n ? __kthread_parkme+0x42/0x90\n ? irq_forced_thread_fn+0x90/0x90\n ? wake_threads_waitq+0x30/0x30\n ? irq_thread_check_affinity+0xe0/0xe0\n kthread+0x12a/0x160\n ? kthread_park+0x90/0x90\n ret_from_fork+0x22/0x30\n\nThe root cause of issue is spin_lock/spin_unlock instruction instead\nspin_lock_irqsave/spin_lock_irqrestore in cdnsp_thread_irq_handler\nfunction.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-05-21T15:15:15Z" diff --git a/advisories/unreviewed/2024/05/GHSA-8r78-c2f2-82qm/GHSA-8r78-c2f2-82qm.json b/advisories/unreviewed/2024/05/GHSA-8r78-c2f2-82qm/GHSA-8r78-c2f2-82qm.json index d8db5c9511f..54b57870ad4 100644 --- a/advisories/unreviewed/2024/05/GHSA-8r78-c2f2-82qm/GHSA-8r78-c2f2-82qm.json +++ b/advisories/unreviewed/2024/05/GHSA-8r78-c2f2-82qm/GHSA-8r78-c2f2-82qm.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-8r78-c2f2-82qm", - "modified": "2024-06-10T18:30:58Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-05-14T15:32:53Z", "aliases": [ "CVE-2024-27393" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nxen-netfront: Add missing skb_mark_for_recycle\n\nNotice that skb_mark_for_recycle() is introduced later than fixes tag in\ncommit 6a5bcd84e886 (\"page_pool: Allow drivers to hint on SKB recycling\").\n\nIt is believed that fixes tag were missing a call to page_pool_release_page()\nbetween v5.9 to v5.14, after which is should have used skb_mark_for_recycle().\nSince v6.6 the call page_pool_release_page() were removed (in\ncommit 535b9c61bdef (\"net: page_pool: hide page_pool_release_page()\")\nand remaining callers converted (in commit 6bfef2ec0172 (\"Merge branch\n'net-page_pool-remove-page_pool_release_page'\")).\n\nThis leak became visible in v6.8 via commit dba1b8a7ab68 (\"mm/page_pool: catch\npage_pool memory leaks\").", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -51,7 +54,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-05-14T15:12:26Z" diff --git a/advisories/unreviewed/2024/05/GHSA-9fqj-w3wf-p8vf/GHSA-9fqj-w3wf-p8vf.json b/advisories/unreviewed/2024/05/GHSA-9fqj-w3wf-p8vf/GHSA-9fqj-w3wf-p8vf.json index f7db2ceef04..751841912e4 100644 --- a/advisories/unreviewed/2024/05/GHSA-9fqj-w3wf-p8vf/GHSA-9fqj-w3wf-p8vf.json +++ b/advisories/unreviewed/2024/05/GHSA-9fqj-w3wf-p8vf/GHSA-9fqj-w3wf-p8vf.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-9fqj-w3wf-p8vf", - "modified": "2024-05-21T15:31:41Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-05-21T15:31:41Z", "aliases": [ "CVE-2021-47262" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Ensure liveliness of nested VM-Enter fail tracepoint message\n\nUse the __string() machinery provided by the tracing subystem to make a\ncopy of the string literals consumed by the \"nested VM-Enter failed\"\ntracepoint. A complete copy is necessary to ensure that the tracepoint\ncan't outlive the data/memory it consumes and deference stale memory.\n\nBecause the tracepoint itself is defined by kvm, if kvm-intel and/or\nkvm-amd are built as modules, the memory holding the string literals\ndefined by the vendor modules will be freed when the module is unloaded,\nwhereas the tracepoint and its data in the ring buffer will live until\nkvm is unloaded (or \"indefinitely\" if kvm is built-in).\n\nThis bug has existed since the tracepoint was added, but was recently\nexposed by a new check in tracing to detect exactly this type of bug.\n\n fmt: '%s%s\n ' current_buffer: ' vmx_dirty_log_t-140127 [003] .... kvm_nested_vmenter_failed: '\n WARNING: CPU: 3 PID: 140134 at kernel/trace/trace.c:3759 trace_check_vprintf+0x3be/0x3e0\n CPU: 3 PID: 140134 Comm: less Not tainted 5.13.0-rc1-ce2e73ce600a-req #184\n Hardware name: ASUS Q87M-E/Q87M-E, BIOS 1102 03/03/2014\n RIP: 0010:trace_check_vprintf+0x3be/0x3e0\n Code: <0f> 0b 44 8b 4c 24 1c e9 a9 fe ff ff c6 44 02 ff 00 49 8b 97 b0 20\n RSP: 0018:ffffa895cc37bcb0 EFLAGS: 00010282\n RAX: 0000000000000000 RBX: ffffa895cc37bd08 RCX: 0000000000000027\n RDX: 0000000000000027 RSI: 00000000ffffdfff RDI: ffff9766cfad74f8\n RBP: ffffffffc0a041d4 R08: ffff9766cfad74f0 R09: ffffa895cc37bad8\n R10: 0000000000000001 R11: 0000000000000001 R12: ffffffffc0a041d4\n R13: ffffffffc0f4dba8 R14: 0000000000000000 R15: ffff976409f2c000\n FS: 00007f92fa200740(0000) GS:ffff9766cfac0000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 0000559bd11b0000 CR3: 000000019fbaa002 CR4: 00000000001726e0\n Call Trace:\n trace_event_printf+0x5e/0x80\n trace_raw_output_kvm_nested_vmenter_failed+0x3a/0x60 [kvm]\n print_trace_line+0x1dd/0x4e0\n s_show+0x45/0x150\n seq_read_iter+0x2d5/0x4c0\n seq_read+0x106/0x150\n vfs_read+0x98/0x180\n ksys_read+0x5f/0xe0\n do_syscall_64+0x40/0xb0\n entry_SYSCALL_64_after_hwframe+0x44/0xae", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" + } ], "affected": [ @@ -39,7 +42,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-05-21T15:15:14Z" diff --git a/advisories/unreviewed/2024/05/GHSA-cfg9-pfwm-v8pc/GHSA-cfg9-pfwm-v8pc.json b/advisories/unreviewed/2024/05/GHSA-cfg9-pfwm-v8pc/GHSA-cfg9-pfwm-v8pc.json index bcb66b495eb..a1f91457123 100644 --- a/advisories/unreviewed/2024/05/GHSA-cfg9-pfwm-v8pc/GHSA-cfg9-pfwm-v8pc.json +++ b/advisories/unreviewed/2024/05/GHSA-cfg9-pfwm-v8pc/GHSA-cfg9-pfwm-v8pc.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-cfg9-pfwm-v8pc", - "modified": "2024-05-01T06:31:41Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-05-01T06:31:41Z", "aliases": [ "CVE-2024-26940" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/vmwgfx: Create debugfs ttm_resource_manager entry only if needed\n\nThe driver creates /sys/kernel/debug/dri/0/mob_ttm even when the\ncorresponding ttm_resource_manager is not allocated.\nThis leads to a crash when trying to read from this file.\n\nAdd a check to create mob_ttm, system_mob_ttm, and gmr_ttm debug file\nonly when the corresponding ttm_resource_manager is allocated.\n\ncrash> bt\nPID: 3133409 TASK: ffff8fe4834a5000 CPU: 3 COMMAND: \"grep\"\n #0 [ffffb954506b3b20] machine_kexec at ffffffffb2a6bec3\n #1 [ffffb954506b3b78] __crash_kexec at ffffffffb2bb598a\n #2 [ffffb954506b3c38] crash_kexec at ffffffffb2bb68c1\n #3 [ffffb954506b3c50] oops_end at ffffffffb2a2a9b1\n #4 [ffffb954506b3c70] no_context at ffffffffb2a7e913\n #5 [ffffb954506b3cc8] __bad_area_nosemaphore at ffffffffb2a7ec8c\n #6 [ffffb954506b3d10] do_page_fault at ffffffffb2a7f887\n #7 [ffffb954506b3d40] page_fault at ffffffffb360116e\n [exception RIP: ttm_resource_manager_debug+0x11]\n RIP: ffffffffc04afd11 RSP: ffffb954506b3df0 RFLAGS: 00010246\n RAX: ffff8fe41a6d1200 RBX: 0000000000000000 RCX: 0000000000000940\n RDX: 0000000000000000 RSI: ffffffffc04b4338 RDI: 0000000000000000\n RBP: ffffb954506b3e08 R8: ffff8fee3ffad000 R9: 0000000000000000\n R10: ffff8fe41a76a000 R11: 0000000000000001 R12: 00000000ffffffff\n R13: 0000000000000001 R14: ffff8fe5bb6f3900 R15: ffff8fe41a6d1200\n ORIG_RAX: ffffffffffffffff CS: 0010 SS: 0018\n #8 [ffffb954506b3e00] ttm_resource_manager_show at ffffffffc04afde7 [ttm]\n #9 [ffffb954506b3e30] seq_read at ffffffffb2d8f9f3\n RIP: 00007f4c4eda8985 RSP: 00007ffdbba9e9f8 RFLAGS: 00000246\n RAX: ffffffffffffffda RBX: 000000000037e000 RCX: 00007f4c4eda8985\n RDX: 000000000037e000 RSI: 00007f4c41573000 RDI: 0000000000000003\n RBP: 000000000037e000 R8: 0000000000000000 R9: 000000000037fe30\n R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c41573000\n R13: 0000000000000003 R14: 00007f4c41572010 R15: 0000000000000003\n ORIG_RAX: 0000000000000000 CS: 0033 SS: 002b", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -43,7 +46,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-05-01T06:15:09Z" diff --git a/advisories/unreviewed/2024/05/GHSA-p27m-65px-rm92/GHSA-p27m-65px-rm92.json b/advisories/unreviewed/2024/05/GHSA-p27m-65px-rm92/GHSA-p27m-65px-rm92.json index e8c58afc650..504ddec8b77 100644 --- a/advisories/unreviewed/2024/05/GHSA-p27m-65px-rm92/GHSA-p27m-65px-rm92.json +++ b/advisories/unreviewed/2024/05/GHSA-p27m-65px-rm92/GHSA-p27m-65px-rm92.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-p27m-65px-rm92", - "modified": "2024-05-23T18:30:55Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-05-23T18:30:55Z", "aliases": [ "CVE-2024-35083" ], "details": "J2EEFAST v2.7.0 was discovered to contain a SQL injection vulnerability via the findPage function in SysLoginInfoMapper.xml.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-05-23T17:15:30Z" diff --git a/advisories/unreviewed/2024/05/GHSA-v7fc-pjq5-78hj/GHSA-v7fc-pjq5-78hj.json b/advisories/unreviewed/2024/05/GHSA-v7fc-pjq5-78hj/GHSA-v7fc-pjq5-78hj.json index d3ebc5378ac..d3bb742de17 100644 --- a/advisories/unreviewed/2024/05/GHSA-v7fc-pjq5-78hj/GHSA-v7fc-pjq5-78hj.json +++ b/advisories/unreviewed/2024/05/GHSA-v7fc-pjq5-78hj/GHSA-v7fc-pjq5-78hj.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-v7fc-pjq5-78hj", - "modified": "2024-05-14T18:30:49Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-05-14T18:30:49Z", "aliases": [ "CVE-2024-34223" ], "details": "Insecure permission vulnerability in /hrm/leaverequest.php in SourceCodester Human Resource Management System 1.0 allow attackers to approve or reject leave ticket.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-276" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-05-14T15:38:36Z" diff --git a/advisories/unreviewed/2024/06/GHSA-9gwm-vjc7-848h/GHSA-9gwm-vjc7-848h.json b/advisories/unreviewed/2024/06/GHSA-9gwm-vjc7-848h/GHSA-9gwm-vjc7-848h.json index e16ee02e7c4..cfb8f2ae047 100644 --- a/advisories/unreviewed/2024/06/GHSA-9gwm-vjc7-848h/GHSA-9gwm-vjc7-848h.json +++ b/advisories/unreviewed/2024/06/GHSA-9gwm-vjc7-848h/GHSA-9gwm-vjc7-848h.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-9gwm-vjc7-848h", - "modified": "2024-06-13T21:30:55Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-06-13T21:30:55Z", "aliases": [ "CVE-2024-32915" ], "details": "In CellInfoListParserV2::FillCellInfo() of protocolnetadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-125" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-06-13T21:15:55Z" diff --git a/advisories/unreviewed/2024/06/GHSA-f537-rhm6-gc65/GHSA-f537-rhm6-gc65.json b/advisories/unreviewed/2024/06/GHSA-f537-rhm6-gc65/GHSA-f537-rhm6-gc65.json index 0320a0f0a58..27e96ff3122 100644 --- a/advisories/unreviewed/2024/06/GHSA-f537-rhm6-gc65/GHSA-f537-rhm6-gc65.json +++ b/advisories/unreviewed/2024/06/GHSA-f537-rhm6-gc65/GHSA-f537-rhm6-gc65.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-f537-rhm6-gc65", - "modified": "2024-08-06T09:31:38Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-06-18T00:31:25Z", "aliases": [ "CVE-2024-6080" @@ -25,6 +25,14 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6080" }, + { + "type": "WEB", + "url": "https://backend.intelbras.com/sites/default/files/2024-10/Aviso%20de%20Seguran%C3%A7a%20-%20Incontrol%202.21.56%20e%202.21.57.pdf" + }, + { + "type": "WEB", + "url": "https://download.cronos.intelbras.com.br/download/INCONTROL/INCONTROL-WEB/prod/INCONTROL-WEB-2.21.58-233dfd1ac1e2ca3eabb71c854005c78b.exe" + }, { "type": "WEB", "url": "https://vuldb.com/?ctiid.268822" @@ -40,6 +48,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-426", "CWE-428" ], "severity": "HIGH", diff --git a/advisories/unreviewed/2024/06/GHSA-wv29-6vvq-vc4h/GHSA-wv29-6vvq-vc4h.json b/advisories/unreviewed/2024/06/GHSA-wv29-6vvq-vc4h/GHSA-wv29-6vvq-vc4h.json index 856f095f937..72bd0101df5 100644 --- a/advisories/unreviewed/2024/06/GHSA-wv29-6vvq-vc4h/GHSA-wv29-6vvq-vc4h.json +++ b/advisories/unreviewed/2024/06/GHSA-wv29-6vvq-vc4h/GHSA-wv29-6vvq-vc4h.json @@ -32,7 +32,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-121" + "CWE-121", + "CWE-125" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/08/GHSA-3763-pmwr-w4qp/GHSA-3763-pmwr-w4qp.json b/advisories/unreviewed/2024/08/GHSA-3763-pmwr-w4qp/GHSA-3763-pmwr-w4qp.json index 7f31dde2f70..636c7595225 100644 --- a/advisories/unreviewed/2024/08/GHSA-3763-pmwr-w4qp/GHSA-3763-pmwr-w4qp.json +++ b/advisories/unreviewed/2024/08/GHSA-3763-pmwr-w4qp/GHSA-3763-pmwr-w4qp.json @@ -28,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-125" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/09/GHSA-794x-9rqm-24vx/GHSA-794x-9rqm-24vx.json b/advisories/unreviewed/2024/09/GHSA-794x-9rqm-24vx/GHSA-794x-9rqm-24vx.json index fb85d51c687..4d7d6685ee5 100644 --- a/advisories/unreviewed/2024/09/GHSA-794x-9rqm-24vx/GHSA-794x-9rqm-24vx.json +++ b/advisories/unreviewed/2024/09/GHSA-794x-9rqm-24vx/GHSA-794x-9rqm-24vx.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-794x-9rqm-24vx", - "modified": "2024-09-29T09:30:46Z", + "modified": "2024-11-04T21:30:27Z", "published": "2024-09-29T09:30:46Z", "aliases": [ "CVE-2024-9325" @@ -25,6 +25,14 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9325" }, + { + "type": "WEB", + "url": "https://backend.intelbras.com/sites/default/files/2024-10/Aviso%20de%20Seguran%C3%A7a%20-%20Incontrol%202.21.56%20e%202.21.57.pdf" + }, + { + "type": "WEB", + "url": "https://download.cronos.intelbras.com.br/download/INCONTROL/INCONTROL-WEB/prod/INCONTROL-WEB-2.21.58-233dfd1ac1e2ca3eabb71c854005c78b.exe" + }, { "type": "WEB", "url": "https://vuldb.com/?ctiid.278829" @@ -40,6 +48,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-426", "CWE-428" ], "severity": "HIGH", diff --git a/advisories/unreviewed/2024/09/GHSA-g3p7-6jrm-6c7q/GHSA-g3p7-6jrm-6c7q.json b/advisories/unreviewed/2024/09/GHSA-g3p7-6jrm-6c7q/GHSA-g3p7-6jrm-6c7q.json index 8dce5be2d62..3d9cb482463 100644 --- a/advisories/unreviewed/2024/09/GHSA-g3p7-6jrm-6c7q/GHSA-g3p7-6jrm-6c7q.json +++ b/advisories/unreviewed/2024/09/GHSA-g3p7-6jrm-6c7q/GHSA-g3p7-6jrm-6c7q.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-g3p7-6jrm-6c7q", - "modified": "2024-09-11T00:30:51Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-09-11T00:30:51Z", "aliases": [ "CVE-2024-40659" ], "details": "In getRegistration of RemoteProvisioningService.java, there is a possible way to permanently disable the AndroidKeyStore key generation feature by updating the attestation keys of all installed apps due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-120" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-09-11T00:15:11Z" diff --git a/advisories/unreviewed/2024/09/GHSA-rpjq-433p-ppw9/GHSA-rpjq-433p-ppw9.json b/advisories/unreviewed/2024/09/GHSA-rpjq-433p-ppw9/GHSA-rpjq-433p-ppw9.json index 324ae802b41..5b2bfd4905d 100644 --- a/advisories/unreviewed/2024/09/GHSA-rpjq-433p-ppw9/GHSA-rpjq-433p-ppw9.json +++ b/advisories/unreviewed/2024/09/GHSA-rpjq-433p-ppw9/GHSA-rpjq-433p-ppw9.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-rpjq-433p-ppw9", - "modified": "2024-10-07T18:31:02Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-09-29T09:30:46Z", "aliases": [ "CVE-2024-9324" @@ -25,6 +25,14 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9324" }, + { + "type": "WEB", + "url": "https://backend.intelbras.com/sites/default/files/2024-10/Aviso%20de%20Seguran%C3%A7a%20-%20Incontrol%202.21.56%20e%202.21.57.pdf" + }, + { + "type": "WEB", + "url": "https://download.cronos.intelbras.com.br/download/INCONTROL/INCONTROL-WEB/prod/INCONTROL-WEB-2.21.58-233dfd1ac1e2ca3eabb71c854005c78b.exe" + }, { "type": "WEB", "url": "https://vuldb.com/?ctiid.278828" @@ -44,6 +52,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-707", "CWE-94" ], "severity": "MODERATE", diff --git a/advisories/unreviewed/2024/10/GHSA-2929-7j9v-q6g6/GHSA-2929-7j9v-q6g6.json b/advisories/unreviewed/2024/10/GHSA-2929-7j9v-q6g6/GHSA-2929-7j9v-q6g6.json index ccb2acc61d2..48981f813c8 100644 --- a/advisories/unreviewed/2024/10/GHSA-2929-7j9v-q6g6/GHSA-2929-7j9v-q6g6.json +++ b/advisories/unreviewed/2024/10/GHSA-2929-7j9v-q6g6/GHSA-2929-7j9v-q6g6.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-2929-7j9v-q6g6", - "modified": "2024-10-30T21:30:40Z", + "modified": "2024-11-04T21:30:27Z", "published": "2024-10-30T21:30:40Z", "aliases": [ "CVE-2024-48734" ], "details": "*Unrestricted file upload in /SASStudio/SASStudio/sasexec/{sessionID}/{InternalPath} in SAS Studio 9.4 allows remote attacker to upload malicious files.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-434" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-30T21:15:14Z" diff --git a/advisories/unreviewed/2024/10/GHSA-2f43-7r2f-7785/GHSA-2f43-7r2f-7785.json b/advisories/unreviewed/2024/10/GHSA-2f43-7r2f-7785/GHSA-2f43-7r2f-7785.json index ed908718a08..19b0c57036b 100644 --- a/advisories/unreviewed/2024/10/GHSA-2f43-7r2f-7785/GHSA-2f43-7r2f-7785.json +++ b/advisories/unreviewed/2024/10/GHSA-2f43-7r2f-7785/GHSA-2f43-7r2f-7785.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-2f43-7r2f-7785", - "modified": "2024-10-31T21:31:45Z", + "modified": "2024-11-04T21:30:27Z", "published": "2024-10-31T21:31:45Z", "aliases": [ "CVE-2024-50801" ], "details": "A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin/controller/responses/listing_grid/collections.php. The vulnerability is exploitable via the id parameter.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-31T19:15:13Z" diff --git a/advisories/unreviewed/2024/10/GHSA-72r5-8cg4-8h5f/GHSA-72r5-8cg4-8h5f.json b/advisories/unreviewed/2024/10/GHSA-72r5-8cg4-8h5f/GHSA-72r5-8cg4-8h5f.json index a045f629193..15a21c7c1a7 100644 --- a/advisories/unreviewed/2024/10/GHSA-72r5-8cg4-8h5f/GHSA-72r5-8cg4-8h5f.json +++ b/advisories/unreviewed/2024/10/GHSA-72r5-8cg4-8h5f/GHSA-72r5-8cg4-8h5f.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-72r5-8cg4-8h5f", - "modified": "2024-10-30T21:30:40Z", + "modified": "2024-11-04T21:30:27Z", "published": "2024-10-30T21:30:40Z", "aliases": [ "CVE-2024-48733" ], "details": "SQL injection vulnerability in /SASStudio/sasexec/sessions/{sessionID}/sql in SAS Studio 9.4 allows remote attacker to execute arbitrary SQL commands via the POST body request.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-30T21:15:14Z" diff --git a/advisories/unreviewed/2024/10/GHSA-cc33-c78g-m59p/GHSA-cc33-c78g-m59p.json b/advisories/unreviewed/2024/10/GHSA-cc33-c78g-m59p/GHSA-cc33-c78g-m59p.json index 6d4743b150b..6dbbfcf7a76 100644 --- a/advisories/unreviewed/2024/10/GHSA-cc33-c78g-m59p/GHSA-cc33-c78g-m59p.json +++ b/advisories/unreviewed/2024/10/GHSA-cc33-c78g-m59p/GHSA-cc33-c78g-m59p.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-cc33-c78g-m59p", - "modified": "2024-10-31T21:31:45Z", + "modified": "2024-11-04T21:30:27Z", "published": "2024-10-31T21:31:45Z", "aliases": [ "CVE-2024-50802" ], "details": "A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin/controller/responses/listing_grid/email_templates.php. The vulnerability is exploitable via the id parameter.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-31T19:15:13Z" diff --git a/advisories/unreviewed/2024/10/GHSA-pwmj-q2x7-r6p4/GHSA-pwmj-q2x7-r6p4.json b/advisories/unreviewed/2024/10/GHSA-pwmj-q2x7-r6p4/GHSA-pwmj-q2x7-r6p4.json index 9766862f8f0..8ddabfab93e 100644 --- a/advisories/unreviewed/2024/10/GHSA-pwmj-q2x7-r6p4/GHSA-pwmj-q2x7-r6p4.json +++ b/advisories/unreviewed/2024/10/GHSA-pwmj-q2x7-r6p4/GHSA-pwmj-q2x7-r6p4.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-pwmj-q2x7-r6p4", - "modified": "2024-10-11T18:32:50Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-10-11T18:32:50Z", "aliases": [ "CVE-2024-44731" ], "details": "Mirotalk before commit 9de226 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary code via sending crafted payloads in messages to other users over RTC connections.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" + } ], "affected": [ @@ -37,9 +40,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-11T17:15:04Z" diff --git a/advisories/unreviewed/2024/10/GHSA-r23x-v492-c286/GHSA-r23x-v492-c286.json b/advisories/unreviewed/2024/10/GHSA-r23x-v492-c286/GHSA-r23x-v492-c286.json index 6d56e7c313b..067bbf14101 100644 --- a/advisories/unreviewed/2024/10/GHSA-r23x-v492-c286/GHSA-r23x-v492-c286.json +++ b/advisories/unreviewed/2024/10/GHSA-r23x-v492-c286/GHSA-r23x-v492-c286.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-r23x-v492-c286", - "modified": "2024-10-30T21:30:40Z", + "modified": "2024-11-04T21:30:26Z", "published": "2024-10-30T21:30:40Z", "aliases": [ "CVE-2023-52066" ], "details": "http.zig commit 76cf5 was discovered to contain a CRLF injection vulnerability via the url parameter.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N" + } ], "affected": [ @@ -27,7 +30,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-30T21:15:14Z" diff --git a/advisories/unreviewed/2024/11/GHSA-22h9-mj69-54jf/GHSA-22h9-mj69-54jf.json b/advisories/unreviewed/2024/11/GHSA-22h9-mj69-54jf/GHSA-22h9-mj69-54jf.json new file mode 100644 index 00000000000..4aea448bb39 --- /dev/null +++ b/advisories/unreviewed/2024/11/GHSA-22h9-mj69-54jf/GHSA-22h9-mj69-54jf.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-22h9-mj69-54jf", + "modified": "2024-11-04T21:30:32Z", + "published": "2024-11-04T21:30:32Z", + "aliases": [ + "CVE-2024-30617" + ], + "details": "A Cross-Site Request Forgery (CSRF) vulnerability in Chamilo LMS 1.11.26 \"/main/social/home.php,\" allows attackers to initiate a request that posts a fake post onto the user's social wall without their consent or knowledge.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30617" + }, + { + "type": "WEB", + "url": "https://github.com/chamilo/chamilo-lms/commit/7a0e10cccc92eadae9403925f995b0a8d2d1305e" + }, + { + "type": "WEB", + "url": "https://github.com/bahadoumi/Vulnerability-Research/tree/main/CVE-2024-30617" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-11-04T19:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/11/GHSA-23gq-5hj3-m433/GHSA-23gq-5hj3-m433.json b/advisories/unreviewed/2024/11/GHSA-23gq-5hj3-m433/GHSA-23gq-5hj3-m433.json new file mode 100644 index 00000000000..8623776eb87 --- /dev/null +++ b/advisories/unreviewed/2024/11/GHSA-23gq-5hj3-m433/GHSA-23gq-5hj3-m433.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-23gq-5hj3-m433", + "modified": "2024-11-04T21:30:32Z", + "published": "2024-11-04T21:30:32Z", + "aliases": [ + "CVE-2024-30619" + ], + "details": "Chamilo LMS Version 1.11.26 is vulnerable to Incorrect Access Control. A non-authenticated attacker can request the number of messages and the number of online users via \"/main/inc/ajax/message.ajax.php?a=get_count_message\" AND \"/main/inc/ajax/online.ajax.php?a=get_users_online.\"", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30619" + }, + { + "type": "WEB", + "url": "https://github.com/chamilo/chamilo-lms/commit/bef68ffe0552cd25b0ef760e582e1188f0f6bf4b" + }, + { + "type": "WEB", + "url": "https://github.com/bahadoumi/Vulnerability-Research/tree/main/CVE-2024-30619" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-11-04T19:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/11/GHSA-2jc3-r6g9-7j93/GHSA-2jc3-r6g9-7j93.json b/advisories/unreviewed/2024/11/GHSA-2jc3-r6g9-7j93/GHSA-2jc3-r6g9-7j93.json new file mode 100644 index 00000000000..3e8066b09f0 --- /dev/null +++ b/advisories/unreviewed/2024/11/GHSA-2jc3-r6g9-7j93/GHSA-2jc3-r6g9-7j93.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2jc3-r6g9-7j93", + "modified": "2024-11-04T21:30:32Z", + "published": "2024-11-04T21:30:32Z", + "aliases": [ + "CVE-2024-45185" + ], + "details": "An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 9820, 9825, 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 9110, W920, W930, Modem 5123, Modem 5300. There is an out-of-bounds write due to a heap overflow in the GPRS protocol.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45185" + }, + { + "type": "WEB", + "url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates" + }, + { + "type": "WEB", + "url": "https://semiconductor.samsung.com/support/quality-support/product-security-updates/cve-2024-45185" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-11-04T20:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/11/GHSA-2m6f-fj9h-6vmp/GHSA-2m6f-fj9h-6vmp.json b/advisories/unreviewed/2024/11/GHSA-2m6f-fj9h-6vmp/GHSA-2m6f-fj9h-6vmp.json new file mode 100644 index 00000000000..cc9cea12a50 --- /dev/null +++ b/advisories/unreviewed/2024/11/GHSA-2m6f-fj9h-6vmp/GHSA-2m6f-fj9h-6vmp.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2m6f-fj9h-6vmp", + "modified": "2024-11-04T21:30:32Z", + "published": "2024-11-04T21:30:32Z", + "aliases": [ + "CVE-2024-30618" + ], + "details": "A Stored Cross-Site Scripting (XSS) Vulnerability in Chamilo LMS 1.11.26 allows a remote attacker to execute arbitrary JavaScript in a web browser by including a malicious payload in the 'content' parameter of 'group_topics.php'.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30618" + }, + { + "type": "WEB", + "url": "https://github.com/chamilo/chamilo-lms/commit/3b98682199049ebfb170ace16ada9a7c8e9a6622" + }, + { + "type": "WEB", + "url": "https://github.com/bahadoumi/Vulnerability-Research/tree/main/CVE-2024-30618" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-11-04T19:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/11/GHSA-38w9-w6h5-wfxm/GHSA-38w9-w6h5-wfxm.json b/advisories/unreviewed/2024/11/GHSA-38w9-w6h5-wfxm/GHSA-38w9-w6h5-wfxm.json index 1ff0ca6225e..1f83102eb57 100644 --- a/advisories/unreviewed/2024/11/GHSA-38w9-w6h5-wfxm/GHSA-38w9-w6h5-wfxm.json +++ b/advisories/unreviewed/2024/11/GHSA-38w9-w6h5-wfxm/GHSA-38w9-w6h5-wfxm.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-38w9-w6h5-wfxm", - "modified": "2024-11-04T18:31:24Z", + "modified": "2024-11-04T21:30:31Z", "published": "2024-11-04T18:31:23Z", "aliases": [ "CVE-2024-51328" ], "details": "Cross Site Scripting vulnerability in addcategory.php in projectworld's Travel Management System v1.0 allows remote attacker to inject arbitrary code via the t2 parameter.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-11-04T18:15:05Z" diff --git a/advisories/unreviewed/2024/11/GHSA-3qxr-2r44-6w45/GHSA-3qxr-2r44-6w45.json b/advisories/unreviewed/2024/11/GHSA-3qxr-2r44-6w45/GHSA-3qxr-2r44-6w45.json index d0ea4c7b58e..00c8e1b8fe1 100644 --- a/advisories/unreviewed/2024/11/GHSA-3qxr-2r44-6w45/GHSA-3qxr-2r44-6w45.json +++ b/advisories/unreviewed/2024/11/GHSA-3qxr-2r44-6w45/GHSA-3qxr-2r44-6w45.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-3qxr-2r44-6w45", - "modified": "2024-11-01T15:31:53Z", + "modified": "2024-11-04T21:30:27Z", "published": "2024-11-01T15:31:53Z", "aliases": [ "CVE-2024-48270" ], "details": "An issue in the component /logins of oasys v1.1 allows attackers to access sensitive information via a burst attack.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-11-01T14:15:06Z" diff --git a/advisories/unreviewed/2024/11/GHSA-492j-3fv4-2qx4/GHSA-492j-3fv4-2qx4.json b/advisories/unreviewed/2024/11/GHSA-492j-3fv4-2qx4/GHSA-492j-3fv4-2qx4.json index e96e30fdcec..419b098b549 100644 --- a/advisories/unreviewed/2024/11/GHSA-492j-3fv4-2qx4/GHSA-492j-3fv4-2qx4.json +++ b/advisories/unreviewed/2024/11/GHSA-492j-3fv4-2qx4/GHSA-492j-3fv4-2qx4.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-492j-3fv4-2qx4", - "modified": "2024-11-01T15:32:00Z", + "modified": "2024-11-04T21:30:27Z", "published": "2024-11-01T15:32:00Z", "aliases": [ "CVE-2024-48289" ], "details": "An issue in the Bluetooth Low Energy implementation of Cypress Bluetooth SDK v3.66 allows attackers to cause a Denial of Service (DoS) via supplying a crafted LL_PAUSE_ENC_REQ packet.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-120" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-11-01T15:15:56Z" diff --git a/advisories/unreviewed/2024/11/GHSA-4c48-48vf-pffv/GHSA-4c48-48vf-pffv.json b/advisories/unreviewed/2024/11/GHSA-4c48-48vf-pffv/GHSA-4c48-48vf-pffv.json index 4f9c7b8ef1d..5cd44c71f44 100644 --- a/advisories/unreviewed/2024/11/GHSA-4c48-48vf-pffv/GHSA-4c48-48vf-pffv.json +++ b/advisories/unreviewed/2024/11/GHSA-4c48-48vf-pffv/GHSA-4c48-48vf-pffv.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-4c48-48vf-pffv", - "modified": "2024-11-01T18:31:33Z", + "modified": "2024-11-04T21:30:27Z", "published": "2024-11-01T18:31:33Z", "aliases": [ "CVE-2024-22733" ], "details": "TP Link MR200 V4 Firmware version 210201 was discovered to contain a null-pointer-dereference in the web administration panel on /cgi/login via the sign, Action or LoginStatus query parameters which could lead to a denial of service by a local or remote unauthenticated attacker.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-476" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-11-01T16:15:08Z" diff --git a/advisories/unreviewed/2024/11/GHSA-5ch8-q94v-8r99/GHSA-5ch8-q94v-8r99.json b/advisories/unreviewed/2024/11/GHSA-5ch8-q94v-8r99/GHSA-5ch8-q94v-8r99.json index 5956e7f620e..1f1ea104985 100644 --- a/advisories/unreviewed/2024/11/GHSA-5ch8-q94v-8r99/GHSA-5ch8-q94v-8r99.json +++ b/advisories/unreviewed/2024/11/GHSA-5ch8-q94v-8r99/GHSA-5ch8-q94v-8r99.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-5ch8-q94v-8r99", - "modified": "2024-11-01T15:31:54Z", + "modified": "2024-11-04T21:30:27Z", "published": "2024-11-01T15:31:54Z", "aliases": [ "CVE-2024-51406" ], "details": "Floodlight SDN Open Flow Controller v.1.2 has an issue that allows local hosts to build fake LLDP packets that allow specific clusters to be missed by Floodlight, which in turn leads to missed hosts inside and outside the cluster.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -35,7 +38,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-11-01T14:15:07Z" diff --git a/advisories/unreviewed/2024/11/GHSA-7hpj-6m83-46cj/GHSA-7hpj-6m83-46cj.json b/advisories/unreviewed/2024/11/GHSA-7hpj-6m83-46cj/GHSA-7hpj-6m83-46cj.json new file mode 100644 index 00000000000..46693e7e08c --- /dev/null +++ b/advisories/unreviewed/2024/11/GHSA-7hpj-6m83-46cj/GHSA-7hpj-6m83-46cj.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7hpj-6m83-46cj", + "modified": "2024-11-04T21:30:32Z", + "published": "2024-11-04T21:30:32Z", + "aliases": [ + "CVE-2024-30616" + ], + "details": "Chamilo LMS 1.11.26 is vulnerable to Incorrect Access Control via main/auth/profile. Non-admin users can manipulate sensitive profiles information, posing a significant risk to data integrity.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30616" + }, + { + "type": "WEB", + "url": "https://github.com/chamilo/chamilo-lms/commit/a1a1e4df70dc65ae4fc7857135f4d3ee185548e7" + }, + { + "type": "WEB", + "url": "https://github.com/bahadoumi/Vulnerability-Research/tree/main/CVE-2024-30616" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-11-04T19:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/11/GHSA-87qj-78xh-hx94/GHSA-87qj-78xh-hx94.json b/advisories/unreviewed/2024/11/GHSA-87qj-78xh-hx94/GHSA-87qj-78xh-hx94.json new file mode 100644 index 00000000000..7877b7fa762 --- /dev/null +++ b/advisories/unreviewed/2024/11/GHSA-87qj-78xh-hx94/GHSA-87qj-78xh-hx94.json @@ -0,0 +1,58 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-87qj-78xh-hx94", + "modified": "2024-11-04T21:30:31Z", + "published": "2024-11-04T21:30:31Z", + "aliases": [ + "CVE-2024-10768" + ], + "details": "A vulnerability classified as problematic was found in PHPGurukul Online Shopping Portal 2.0. This vulnerability affects unknown code of the file /admin/assets/plugins/DataTables/media/unit_testing/templates/two_tables.php. The manipulation of the argument scripts leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10768" + }, + { + "type": "WEB", + "url": "https://github.com/secuserx/CVE/blob/main/%5BXSS%20vulnerability%5D%20found%20in%20Online%20Shopping%20Portal%202.0%20-%20(two_tables.php).md" + }, + { + "type": "WEB", + "url": "https://phpgurukul.com" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.282988" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.282988" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.436531" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-707" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-11-04T19:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/11/GHSA-8x99-24cg-9h7m/GHSA-8x99-24cg-9h7m.json b/advisories/unreviewed/2024/11/GHSA-8x99-24cg-9h7m/GHSA-8x99-24cg-9h7m.json index 42e15b6bbb4..ad1eac31f42 100644 --- a/advisories/unreviewed/2024/11/GHSA-8x99-24cg-9h7m/GHSA-8x99-24cg-9h7m.json +++ b/advisories/unreviewed/2024/11/GHSA-8x99-24cg-9h7m/GHSA-8x99-24cg-9h7m.json @@ -44,7 +44,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-400" + "CWE-400", + "CWE-770" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/11/GHSA-9394-rw2q-x5m7/GHSA-9394-rw2q-x5m7.json b/advisories/unreviewed/2024/11/GHSA-9394-rw2q-x5m7/GHSA-9394-rw2q-x5m7.json new file mode 100644 index 00000000000..38dc4c64469 --- /dev/null +++ b/advisories/unreviewed/2024/11/GHSA-9394-rw2q-x5m7/GHSA-9394-rw2q-x5m7.json @@ -0,0 +1,47 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9394-rw2q-x5m7", + "modified": "2024-11-04T21:30:33Z", + "published": "2024-11-04T21:30:32Z", + "aliases": [ + "CVE-2024-48463" + ], + "details": "Bruno before 1.29.1 uses Electron shell.openExternal without validation (of http or https) for opening windows within the Markdown docs viewer.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48463" + }, + { + "type": "WEB", + "url": "https://github.com/usebruno/bruno/pull/3122" + }, + { + "type": "WEB", + "url": "https://gist.github.com/opcod3r/ab69f36d52367df7ffac32a597dff31c" + }, + { + "type": "WEB", + "url": "https://github.com/usebruno/bruno/releases/tag/v1.29.1" + }, + { + "type": "WEB", + "url": "https://www.usebruno.com/changelog" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-11-04T21:15:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/11/GHSA-9qjp-g446-qv5p/GHSA-9qjp-g446-qv5p.json b/advisories/unreviewed/2024/11/GHSA-9qjp-g446-qv5p/GHSA-9qjp-g446-qv5p.json new file mode 100644 index 00000000000..4f51e0d746b --- /dev/null +++ b/advisories/unreviewed/2024/11/GHSA-9qjp-g446-qv5p/GHSA-9qjp-g446-qv5p.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9qjp-g446-qv5p", + "modified": "2024-11-04T21:30:32Z", + "published": "2024-11-04T21:30:32Z", + "aliases": [ + "CVE-2024-34885" + ], + "details": "Insufficiently protected credentials in SMTP server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read SMTP accounts passwords via HTTP GET request.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34885" + }, + { + "type": "WEB", + "url": "https://github.com/DrieVlad/BitrixVulns" + }, + { + "type": "WEB", + "url": "http://bitrix24.com" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-11-04T19:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/11/GHSA-9xg5-55cm-9gxr/GHSA-9xg5-55cm-9gxr.json b/advisories/unreviewed/2024/11/GHSA-9xg5-55cm-9gxr/GHSA-9xg5-55cm-9gxr.json index 6c719ad319c..faf54d4d0e9 100644 --- a/advisories/unreviewed/2024/11/GHSA-9xg5-55cm-9gxr/GHSA-9xg5-55cm-9gxr.json +++ b/advisories/unreviewed/2024/11/GHSA-9xg5-55cm-9gxr/GHSA-9xg5-55cm-9gxr.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-9xg5-55cm-9gxr", - "modified": "2024-11-04T18:31:23Z", + "modified": "2024-11-04T21:30:31Z", "published": "2024-11-04T18:31:23Z", "aliases": [ "CVE-2024-48336" ], "details": "The install() function of ProviderInstaller.java in Magisk App before canary version 27007 does not verify the GMS app before loading it, which allows a local untrusted app with no additional privileges to silently execute arbitrary code in the Magisk app and escalate privileges to root via a crafted package, aka Bug #8279. User interaction is not needed for exploitation.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-829" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-11-04T18:15:05Z" diff --git a/advisories/unreviewed/2024/11/GHSA-fvfg-2f3w-8gmc/GHSA-fvfg-2f3w-8gmc.json b/advisories/unreviewed/2024/11/GHSA-fvfg-2f3w-8gmc/GHSA-fvfg-2f3w-8gmc.json index c9438a4ebfb..b5232f9e729 100644 --- a/advisories/unreviewed/2024/11/GHSA-fvfg-2f3w-8gmc/GHSA-fvfg-2f3w-8gmc.json +++ b/advisories/unreviewed/2024/11/GHSA-fvfg-2f3w-8gmc/GHSA-fvfg-2f3w-8gmc.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-fvfg-2f3w-8gmc", - "modified": "2024-11-01T15:31:56Z", + "modified": "2024-11-04T21:30:27Z", "published": "2024-11-01T15:31:56Z", "aliases": [ "CVE-2024-27525" ], "details": "Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate privileges via a crafted script to the filename parameter of the home.php component.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-11-01T15:15:18Z" diff --git a/advisories/unreviewed/2024/11/GHSA-g66q-8cf5-g99m/GHSA-g66q-8cf5-g99m.json b/advisories/unreviewed/2024/11/GHSA-g66q-8cf5-g99m/GHSA-g66q-8cf5-g99m.json new file mode 100644 index 00000000000..67a462094b2 --- /dev/null +++ b/advisories/unreviewed/2024/11/GHSA-g66q-8cf5-g99m/GHSA-g66q-8cf5-g99m.json @@ -0,0 +1,54 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-g66q-8cf5-g99m", + "modified": "2024-11-04T21:30:33Z", + "published": "2024-11-04T21:30:32Z", + "aliases": [ + "CVE-2024-10791" + ], + "details": "A vulnerability, which was classified as critical, has been found in Codezips Hospital Appointment System 1.0. This issue affects some unknown processing of the file /doctorAction.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory mentions contradicting file and parameter names to be affected.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10791" + }, + { + "type": "WEB", + "url": "https://github.com/3127434/CVE/issues/2" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.282989" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.282989" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.436538" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-707" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-11-04T20:15:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/11/GHSA-hgcm-4hjv-p97p/GHSA-hgcm-4hjv-p97p.json b/advisories/unreviewed/2024/11/GHSA-hgcm-4hjv-p97p/GHSA-hgcm-4hjv-p97p.json index 6332a752ffc..9fe9fbf7764 100644 --- a/advisories/unreviewed/2024/11/GHSA-hgcm-4hjv-p97p/GHSA-hgcm-4hjv-p97p.json +++ b/advisories/unreviewed/2024/11/GHSA-hgcm-4hjv-p97p/GHSA-hgcm-4hjv-p97p.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-hgcm-4hjv-p97p", - "modified": "2024-11-01T15:31:56Z", + "modified": "2024-11-04T21:30:27Z", "published": "2024-11-01T15:31:56Z", "aliases": [ "CVE-2024-27524" ], "details": "Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate privileges via a crafted script to the filename parameter of the new_ticket.php component.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-11-01T15:15:17Z" diff --git a/advisories/unreviewed/2024/11/GHSA-qwww-r8v3-26cg/GHSA-qwww-r8v3-26cg.json b/advisories/unreviewed/2024/11/GHSA-qwww-r8v3-26cg/GHSA-qwww-r8v3-26cg.json new file mode 100644 index 00000000000..168bdfd4193 --- /dev/null +++ b/advisories/unreviewed/2024/11/GHSA-qwww-r8v3-26cg/GHSA-qwww-r8v3-26cg.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qwww-r8v3-26cg", + "modified": "2024-11-04T21:30:32Z", + "published": "2024-11-04T21:30:32Z", + "aliases": [ + "CVE-2024-45086" + ], + "details": "IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45086" + }, + { + "type": "WEB", + "url": "https://www.ibm.com/support/pages/node/7174745" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-611" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-11-04T20:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/11/GHSA-v29w-7hpp-g74c/GHSA-v29w-7hpp-g74c.json b/advisories/unreviewed/2024/11/GHSA-v29w-7hpp-g74c/GHSA-v29w-7hpp-g74c.json index bdd788a1843..ab2e27c12c6 100644 --- a/advisories/unreviewed/2024/11/GHSA-v29w-7hpp-g74c/GHSA-v29w-7hpp-g74c.json +++ b/advisories/unreviewed/2024/11/GHSA-v29w-7hpp-g74c/GHSA-v29w-7hpp-g74c.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-v29w-7hpp-g74c", - "modified": "2024-11-01T15:31:55Z", + "modified": "2024-11-04T21:30:27Z", "published": "2024-11-01T15:31:55Z", "aliases": [ "CVE-2024-51407" ], "details": "Floodlight SDN OpenFlow Controller v.1.2 has an issue that allows local hosts to construct false broadcast ports causing inter-host communication anomalies.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -35,7 +38,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-11-01T14:15:07Z" diff --git a/advisories/unreviewed/2024/11/GHSA-w6g3-r938-vj7f/GHSA-w6g3-r938-vj7f.json b/advisories/unreviewed/2024/11/GHSA-w6g3-r938-vj7f/GHSA-w6g3-r938-vj7f.json new file mode 100644 index 00000000000..d2058e314f7 --- /dev/null +++ b/advisories/unreviewed/2024/11/GHSA-w6g3-r938-vj7f/GHSA-w6g3-r938-vj7f.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w6g3-r938-vj7f", + "modified": "2024-11-04T21:30:32Z", + "published": "2024-11-04T21:30:32Z", + "aliases": [ + "CVE-2024-34891" + ], + "details": "Insufficiently protected credentials in DAV server settings in 1C-Bitrix Bitrix24 23.300.100 allows remote administrators to read Exchange account passwords via HTTP GET request.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34891" + }, + { + "type": "WEB", + "url": "https://github.com/DrieVlad/BitrixVulns" + }, + { + "type": "WEB", + "url": "http://bitrix24.com" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-11-04T19:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/11/GHSA-x5m5-p6c8-m3mx/GHSA-x5m5-p6c8-m3mx.json b/advisories/unreviewed/2024/11/GHSA-x5m5-p6c8-m3mx/GHSA-x5m5-p6c8-m3mx.json index ed0e96f3e59..689f85ef8d7 100644 --- a/advisories/unreviewed/2024/11/GHSA-x5m5-p6c8-m3mx/GHSA-x5m5-p6c8-m3mx.json +++ b/advisories/unreviewed/2024/11/GHSA-x5m5-p6c8-m3mx/GHSA-x5m5-p6c8-m3mx.json @@ -44,7 +44,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-285" + "CWE-285", + "CWE-862" ], "severity": "MODERATE", "github_reviewed": false,