From 76001bddbb892dc1252aae243cce5322104a2d16 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Mon, 6 Nov 2023 03:31:42 +0000 Subject: [PATCH] Publish Advisories GHSA-2fq4-2pvp-hvr5 GHSA-jcg7-j3jq-wp4r GHSA-3vrx-27jg-h7pf GHSA-6mfg-xxpr-pmxw GHSA-7498-h3m9-7wv2 GHSA-c5wv-vc39-89q6 GHSA-crff-82gh-9235 GHSA-fr7h-j3xj-fvvv GHSA-mp59-54g3-r5r4 GHSA-q38f-wwqq-rr3v GHSA-f8v5-2g96-j9mq GHSA-mvwp-f7w8-54v5 --- .../GHSA-2fq4-2pvp-hvr5.json | 8 ++- .../GHSA-jcg7-j3jq-wp4r.json | 8 ++- .../GHSA-3vrx-27jg-h7pf.json | 4 ++ .../GHSA-6mfg-xxpr-pmxw.json | 2 +- .../GHSA-7498-h3m9-7wv2.json | 12 ++++- .../GHSA-c5wv-vc39-89q6.json | 2 +- .../GHSA-crff-82gh-9235.json | 2 +- .../GHSA-fr7h-j3xj-fvvv.json | 4 ++ .../GHSA-mp59-54g3-r5r4.json | 20 +++++++- .../GHSA-q38f-wwqq-rr3v.json | 4 ++ .../GHSA-f8v5-2g96-j9mq.json | 39 +++++++++++++++ .../GHSA-mvwp-f7w8-54v5.json | 50 +++++++++++++++++++ 12 files changed, 144 insertions(+), 11 deletions(-) create mode 100644 advisories/unreviewed/2023/11/GHSA-f8v5-2g96-j9mq/GHSA-f8v5-2g96-j9mq.json create mode 100644 advisories/unreviewed/2023/11/GHSA-mvwp-f7w8-54v5/GHSA-mvwp-f7w8-54v5.json diff --git a/advisories/unreviewed/2023/08/GHSA-2fq4-2pvp-hvr5/GHSA-2fq4-2pvp-hvr5.json b/advisories/unreviewed/2023/08/GHSA-2fq4-2pvp-hvr5/GHSA-2fq4-2pvp-hvr5.json index 73b6973e058..baf70ef85fe 100644 --- a/advisories/unreviewed/2023/08/GHSA-2fq4-2pvp-hvr5/GHSA-2fq4-2pvp-hvr5.json +++ b/advisories/unreviewed/2023/08/GHSA-2fq4-2pvp-hvr5/GHSA-2fq4-2pvp-hvr5.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-2fq4-2pvp-hvr5", - "modified": "2023-08-14T15:33:41Z", + "modified": "2023-11-06T03:30:28Z", "published": "2023-08-09T09:30:32Z", "aliases": [ "CVE-2022-47185" @@ -32,13 +32,17 @@ { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BOTOM2MFKOLK46Q3BQHO662HTPZFRQUC/" + }, + { + "type": "WEB", + "url": "https://www.debian.org/security/2023/dsa-5549" } ], "database_specific": { "cwe_ids": [ "CWE-20" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-08-09T07:15:09Z" diff --git a/advisories/unreviewed/2023/08/GHSA-jcg7-j3jq-wp4r/GHSA-jcg7-j3jq-wp4r.json b/advisories/unreviewed/2023/08/GHSA-jcg7-j3jq-wp4r/GHSA-jcg7-j3jq-wp4r.json index c5dce7863ce..153b806b6e3 100644 --- a/advisories/unreviewed/2023/08/GHSA-jcg7-j3jq-wp4r/GHSA-jcg7-j3jq-wp4r.json +++ b/advisories/unreviewed/2023/08/GHSA-jcg7-j3jq-wp4r/GHSA-jcg7-j3jq-wp4r.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-jcg7-j3jq-wp4r", - "modified": "2023-08-15T18:31:29Z", + "modified": "2023-11-06T03:30:28Z", "published": "2023-08-09T09:30:32Z", "aliases": [ "CVE-2023-33934" @@ -32,6 +32,10 @@ { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BOTOM2MFKOLK46Q3BQHO662HTPZFRQUC/" + }, + { + "type": "WEB", + "url": "https://www.debian.org/security/2023/dsa-5549" } ], "database_specific": { @@ -39,7 +43,7 @@ "CWE-20", "CWE-444" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-08-09T07:15:10Z" diff --git a/advisories/unreviewed/2023/10/GHSA-3vrx-27jg-h7pf/GHSA-3vrx-27jg-h7pf.json b/advisories/unreviewed/2023/10/GHSA-3vrx-27jg-h7pf/GHSA-3vrx-27jg-h7pf.json index ab1acd6cbeb..8ca59c7e8ce 100644 --- a/advisories/unreviewed/2023/10/GHSA-3vrx-27jg-h7pf/GHSA-3vrx-27jg-h7pf.json +++ b/advisories/unreviewed/2023/10/GHSA-3vrx-27jg-h7pf/GHSA-3vrx-27jg-h7pf.json @@ -40,6 +40,10 @@ { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/" + }, + { + "type": "WEB", + "url": "https://www.debian.org/security/2023/dsa-5549" } ], "database_specific": { diff --git a/advisories/unreviewed/2023/10/GHSA-6mfg-xxpr-pmxw/GHSA-6mfg-xxpr-pmxw.json b/advisories/unreviewed/2023/10/GHSA-6mfg-xxpr-pmxw/GHSA-6mfg-xxpr-pmxw.json index e0f9d99caf3..bb9dec9a66a 100644 --- a/advisories/unreviewed/2023/10/GHSA-6mfg-xxpr-pmxw/GHSA-6mfg-xxpr-pmxw.json +++ b/advisories/unreviewed/2023/10/GHSA-6mfg-xxpr-pmxw/GHSA-6mfg-xxpr-pmxw.json @@ -41,6 +41,6 @@ "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, - "nvd_published_at": null + "nvd_published_at": "2023-10-15T22:15:15Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2023/10/GHSA-7498-h3m9-7wv2/GHSA-7498-h3m9-7wv2.json b/advisories/unreviewed/2023/10/GHSA-7498-h3m9-7wv2/GHSA-7498-h3m9-7wv2.json index b202f586dab..3d6492fde50 100644 --- a/advisories/unreviewed/2023/10/GHSA-7498-h3m9-7wv2/GHSA-7498-h3m9-7wv2.json +++ b/advisories/unreviewed/2023/10/GHSA-7498-h3m9-7wv2/GHSA-7498-h3m9-7wv2.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-7498-h3m9-7wv2", - "modified": "2023-10-18T00:31:40Z", + "modified": "2023-11-06T03:30:28Z", "published": "2023-10-18T00:31:40Z", "aliases": [ "CVE-2023-22025" @@ -21,6 +21,14 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22025" }, + { + "type": "WEB", + "url": "https://security.netapp.com/advisory/ntap-20231027-0006/" + }, + { + "type": "WEB", + "url": "https://www.debian.org/security/2023/dsa-5548" + }, { "type": "WEB", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" @@ -30,7 +38,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-10-17T22:15:11Z" diff --git a/advisories/unreviewed/2023/10/GHSA-c5wv-vc39-89q6/GHSA-c5wv-vc39-89q6.json b/advisories/unreviewed/2023/10/GHSA-c5wv-vc39-89q6/GHSA-c5wv-vc39-89q6.json index 53eb17d0d04..96fa673e70c 100644 --- a/advisories/unreviewed/2023/10/GHSA-c5wv-vc39-89q6/GHSA-c5wv-vc39-89q6.json +++ b/advisories/unreviewed/2023/10/GHSA-c5wv-vc39-89q6/GHSA-c5wv-vc39-89q6.json @@ -37,6 +37,6 @@ "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, - "nvd_published_at": null + "nvd_published_at": "2023-10-05T18:15:13Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2023/10/GHSA-crff-82gh-9235/GHSA-crff-82gh-9235.json b/advisories/unreviewed/2023/10/GHSA-crff-82gh-9235/GHSA-crff-82gh-9235.json index 910bd09dac6..5c8ff05ddde 100644 --- a/advisories/unreviewed/2023/10/GHSA-crff-82gh-9235/GHSA-crff-82gh-9235.json +++ b/advisories/unreviewed/2023/10/GHSA-crff-82gh-9235/GHSA-crff-82gh-9235.json @@ -41,6 +41,6 @@ "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, - "nvd_published_at": null + "nvd_published_at": "2023-10-15T23:15:44Z" } } \ No newline at end of file diff --git a/advisories/unreviewed/2023/10/GHSA-fr7h-j3xj-fvvv/GHSA-fr7h-j3xj-fvvv.json b/advisories/unreviewed/2023/10/GHSA-fr7h-j3xj-fvvv/GHSA-fr7h-j3xj-fvvv.json index f77ad992d6e..ccb5e6ac907 100644 --- a/advisories/unreviewed/2023/10/GHSA-fr7h-j3xj-fvvv/GHSA-fr7h-j3xj-fvvv.json +++ b/advisories/unreviewed/2023/10/GHSA-fr7h-j3xj-fvvv/GHSA-fr7h-j3xj-fvvv.json @@ -36,6 +36,10 @@ { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3/" + }, + { + "type": "WEB", + "url": "https://www.debian.org/security/2023/dsa-5549" } ], "database_specific": { diff --git a/advisories/unreviewed/2023/10/GHSA-mp59-54g3-r5r4/GHSA-mp59-54g3-r5r4.json b/advisories/unreviewed/2023/10/GHSA-mp59-54g3-r5r4/GHSA-mp59-54g3-r5r4.json index 383e4021cbc..4132fadeb84 100644 --- a/advisories/unreviewed/2023/10/GHSA-mp59-54g3-r5r4/GHSA-mp59-54g3-r5r4.json +++ b/advisories/unreviewed/2023/10/GHSA-mp59-54g3-r5r4/GHSA-mp59-54g3-r5r4.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-mp59-54g3-r5r4", - "modified": "2023-10-18T00:31:41Z", + "modified": "2023-11-06T03:30:28Z", "published": "2023-10-18T00:31:41Z", "aliases": [ "CVE-2023-22081" @@ -21,6 +21,22 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-22081" }, + { + "type": "WEB", + "url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00041.html" + }, + { + "type": "WEB", + "url": "https://security.netapp.com/advisory/ntap-20231027-0006/" + }, + { + "type": "WEB", + "url": "https://www.debian.org/security/2023/dsa-5537" + }, + { + "type": "WEB", + "url": "https://www.debian.org/security/2023/dsa-5548" + }, { "type": "WEB", "url": "https://www.oracle.com/security-alerts/cpuoct2023.html" @@ -30,7 +46,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-10-17T22:15:13Z" diff --git a/advisories/unreviewed/2023/10/GHSA-q38f-wwqq-rr3v/GHSA-q38f-wwqq-rr3v.json b/advisories/unreviewed/2023/10/GHSA-q38f-wwqq-rr3v/GHSA-q38f-wwqq-rr3v.json index 4301c28e3b6..899dd114297 100644 --- a/advisories/unreviewed/2023/10/GHSA-q38f-wwqq-rr3v/GHSA-q38f-wwqq-rr3v.json +++ b/advisories/unreviewed/2023/10/GHSA-q38f-wwqq-rr3v/GHSA-q38f-wwqq-rr3v.json @@ -33,6 +33,10 @@ "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3RK66CXMXO3PCPDU3GDY5FK4UYHUXQJT/" }, + { + "type": "WEB", + "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4YBK3I6SETHETBHDETFWM3VSZUQICIDV/" + }, { "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SEDJN4VFN57K5POOC7BNVD6L6WUUCSG6/" diff --git a/advisories/unreviewed/2023/11/GHSA-f8v5-2g96-j9mq/GHSA-f8v5-2g96-j9mq.json b/advisories/unreviewed/2023/11/GHSA-f8v5-2g96-j9mq/GHSA-f8v5-2g96-j9mq.json new file mode 100644 index 00000000000..bebfb768c73 --- /dev/null +++ b/advisories/unreviewed/2023/11/GHSA-f8v5-2g96-j9mq/GHSA-f8v5-2g96-j9mq.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f8v5-2g96-j9mq", + "modified": "2023-11-06T03:30:29Z", + "published": "2023-11-06T03:30:29Z", + "aliases": [ + "CVE-2023-46802" + ], + "details": "e-Tax software Version3.0.10 and earlier improperly restricts XML external entity references (XXE) due to the configuration of the embedded XML parser. By processing a specially crafted XML file, arbitrary files on the system may be read by an attacker.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46802" + }, + { + "type": "WEB", + "url": "https://jvn.jp/en/jp/JVN14762986/" + }, + { + "type": "WEB", + "url": "https://www.e-tax.nta.go.jp/topics/topics_20231102.htm" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2023-11-06T02:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2023/11/GHSA-mvwp-f7w8-54v5/GHSA-mvwp-f7w8-54v5.json b/advisories/unreviewed/2023/11/GHSA-mvwp-f7w8-54v5/GHSA-mvwp-f7w8-54v5.json new file mode 100644 index 00000000000..ccd9ac2e7c3 --- /dev/null +++ b/advisories/unreviewed/2023/11/GHSA-mvwp-f7w8-54v5/GHSA-mvwp-f7w8-54v5.json @@ -0,0 +1,50 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mvwp-f7w8-54v5", + "modified": "2023-11-06T03:30:29Z", + "published": "2023-11-06T03:30:29Z", + "aliases": [ + "CVE-2018-25093" + ], + "details": "A vulnerability was found in Vaerys-Dawn DiscordSailv2 up to 2.10.2. It has been rated as critical. Affected by this issue is some unknown functionality of the component Tag Handler. The manipulation leads to improper access controls. Upgrading to version 2.10.3 is able to address this issue. The name of the patch is cc12e0be82a5d05d9f359ed8e56088f4f8b8eb69. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-244484.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-25093" + }, + { + "type": "WEB", + "url": "https://github.com/Vaerys-Dawn/DiscordSailv2/commit/cc12e0be82a5d05d9f359ed8e56088f4f8b8eb69" + }, + { + "type": "WEB", + "url": "https://github.com/Vaerys-Dawn/DiscordSailv2/releases/tag/2.10.3" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.244484" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.244484" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-284" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2023-11-06T01:15:08Z" + } +} \ No newline at end of file