netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-07-08 15:33:21 +00:00
parent 731e77532f
commit 767fa36d3f
56 changed files with 470 additions and 152 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/06/GHSA-qhm9-gg74-g6m6/GHSA-qhm9-gg74-g6m6.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/03/GHSA-fjh2-g557-4jxp/GHSA-fjh2-g557-4jxp.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fjh2-g557-4jxp",
"modified": "2024-03-28T12:33:20Z",
"modified": "2024-07-08T15:31:54Z",
"published": "2024-03-28T12:33:20Z",
"aliases": [
"CVE-2024-30595"
],
"details": "Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceId parameter of the addWifiMacFilter function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T12:15:53Z"
advisories/unreviewed/2024/04/GHSA-27hf-w6wm-652c/GHSA-27hf-w6wm-652c.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-27hf-w6wm-652c",
"modified": "2024-04-26T06:30:35Z",
"modified": "2024-07-08T15:31:54Z",
"published": "2024-04-26T06:30:35Z",
"aliases": [
"CVE-2024-3188"
],
"details": "The WP Shortcodes Plugin — Shortcodes Ultimate WordPress plugin before 7.1.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-26T05:15:50Z"
advisories/unreviewed/2024/04/GHSA-2w4r-8725-xcxv/GHSA-2w4r-8725-xcxv.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2w4r-8725-xcxv",
"modified": "2024-04-12T06:33:24Z",
"modified": "2024-07-08T15:31:54Z",
"published": "2024-04-12T06:33:24Z",
"aliases": [
"CVE-2024-22734"
],
"details": "An issue was discovered in AMCS Group Trux Waste Management Software before version 7.19.0018.26912, allows local attackers to obtain sensitive information via a static, hard-coded AES Key-IV pair in the TxUtilities.dll and TruxUser.cfg components.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-12T06:15:06Z"
advisories/unreviewed/2024/04/GHSA-3wqg-6hfx-9w42/GHSA-3wqg-6hfx-9w42.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3wqg-6hfx-9w42",
"modified": "2024-04-26T21:31:11Z",
"modified": "2024-07-08T15:31:54Z",
"published": "2024-04-26T21:31:11Z",
"aliases": [
"CVE-2024-25343"
],
"details": "Tenda N300 F3 router vulnerability allows users to bypass intended security policy and create weak passwords.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-269"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-26T20:15:07Z"
advisories/unreviewed/2024/04/GHSA-42g9-27rx-76cj/GHSA-42g9-27rx-76cj.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-42g9-27rx-76cj",
"modified": "2024-04-11T21:30:52Z",
"modified": "2024-07-08T15:31:54Z",
"published": "2024-04-11T21:30:52Z",
"aliases": [
"CVE-2024-25376"
],
"details": "An issue discovered in Thesycon Software Solutions Gmbh & Co. KG TUSBAudio MSI-based installers before 5.68.0 allows a local attacker to execute arbitrary code via the msiexec.exe repair mode.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-11T21:15:07Z"
advisories/unreviewed/2024/04/GHSA-4cvp-jw4q-vr74/GHSA-4cvp-jw4q-vr74.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/04/GHSA-4fv8-fm6j-xc9r/GHSA-4fv8-fm6j-xc9r.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4fv8-fm6j-xc9r",
"modified": "2024-04-10T21:30:33Z",
"modified": "2024-07-08T15:31:54Z",
"published": "2024-04-10T21:30:33Z",
"aliases": [
"CVE-2024-29500"
],
"details": "An issue in the kiosk mode of Secure Lockdown Multi Application Edition v2.00.219 allows attackers to execute arbitrary code via running a ClickOnce application instance.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-10T20:15:07Z"
advisories/unreviewed/2024/04/GHSA-5m68-rc9v-rxh2/GHSA-5m68-rc9v-rxh2.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/04/GHSA-5v78-8gv6-c945/GHSA-5v78-8gv6-c945.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5v78-8gv6-c945",
"modified": "2024-04-15T12:30:34Z",
"modified": "2024-07-08T15:31:54Z",
"published": "2024-04-15T12:30:34Z",
"aliases": [
"CVE-2024-23486"
],
"details": "Plaintext storage of a password issue exists in BUFFALO wireless LAN routers, which may allow a network-adjacent unauthenticated attacker with access to the product's login page may obtain configured credentials.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-15T11:15:07Z"
advisories/unreviewed/2024/04/GHSA-8wm5-mx8v-3jpf/GHSA-8wm5-mx8v-3jpf.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8wm5-mx8v-3jpf",
"modified": "2024-04-24T06:30:31Z",
"modified": "2024-07-08T15:31:54Z",
"published": "2024-04-24T06:30:31Z",
"aliases": [
"CVE-2024-31406"
],
"details": "Active debug code vulnerability exists in RoamWiFi R10 prior to 4.8.45. If this vulnerability is exploited, a network-adjacent unauthenticated attacker with access to the device may perform unauthorized operations.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-489"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-24T06:15:13Z"
advisories/unreviewed/2024/04/GHSA-9gm2-28fm-hw6c/GHSA-9gm2-28fm-hw6c.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9gm2-28fm-hw6c",
"modified": "2024-04-15T21:30:45Z",
"modified": "2024-07-08T15:31:54Z",
"published": "2024-04-15T21:30:45Z",
"aliases": [
"CVE-2024-24486"
],
"details": "An issue discovered in silex technology DS-600 Firmware v.1.4.1 allows a remote attacker to edit device settings via the SAVE EEP_DATA command.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-15T19:15:09Z"
advisories/unreviewed/2024/04/GHSA-f53j-pgm5-c4r3/GHSA-f53j-pgm5-c4r3.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f53j-pgm5-c4r3",
"modified": "2024-06-10T18:30:55Z",
"modified": "2024-07-08T15:31:54Z",
"published": "2024-04-13T15:34:58Z",
"aliases": [
"CVE-2024-32487"
],
"details": "less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandled in filename.c. Exploitation typically requires use with attacker-controlled file names, such as the files extracted from an untrusted archive. Exploitation also requires the LESSOPEN environment variable, but this is set by default in many common cases.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H"
}
],
"affected": [
@@ -45,9 +48,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-96"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-13T15:15:52Z"
advisories/unreviewed/2024/04/GHSA-fm53-2cx3-crw3/GHSA-fm53-2cx3-crw3.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fm53-2cx3-crw3",
"modified": "2024-04-11T03:34:59Z",
"modified": "2024-07-08T15:31:54Z",
"published": "2024-04-11T03:34:59Z",
"aliases": [
"CVE-2023-51142"
],
"details": "An issue in ZKTeco BioTime v.8.5.4 and before allows a remote attacker to obtain sensitive information.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-11T01:22:43Z"
advisories/unreviewed/2024/04/GHSA-qj2m-h9cr-4gv7/GHSA-qj2m-h9cr-4gv7.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qj2m-h9cr-4gv7",
"modified": "2024-04-16T18:31:34Z",
"modified": "2024-07-08T15:31:54Z",
"published": "2024-04-16T18:31:34Z",
"aliases": [
"CVE-2023-50872"
],
"details": "The API in Accredible Credential.net December 6th, 2023 allows an Insecure Direct Object Reference attack that discloses partial information about certificates and their respective holder. NOTE: the excellium-services.com web page about this issue mentions \"Vendor says that it's not a security issue.\"",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-16T16:15:08Z"
advisories/unreviewed/2024/04/GHSA-v859-v234-c2mg/GHSA-v859-v234-c2mg.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v859-v234-c2mg",
"modified": "2024-04-26T06:30:34Z",
"modified": "2024-07-08T15:31:54Z",
"published": "2024-04-26T06:30:34Z",
"aliases": [
"CVE-2024-0905"
],
"details": "The Fancy Product Designer WordPress plugin before 6.1.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against unauthenticated and admin-level users",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-26T05:15:49Z"
advisories/unreviewed/2024/04/GHSA-vfmv-3fmr-wr8p/GHSA-vfmv-3fmr-wr8p.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vfmv-3fmr-wr8p",
"modified": "2024-04-10T21:30:30Z",
"modified": "2024-07-08T15:31:54Z",
"published": "2024-04-10T21:30:30Z",
"aliases": [
"CVE-2021-47186"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ntipc: check for null after calling kmemdup\n\nkmemdup can return a null pointer so need to check for it, otherwise\nthe null key will be dereferenced later in tipc_crypto_key_xmit as\ncan be seen in the trace [1].\n\n\n[1] https://syzkaller.appspot.com/bug?id=bca180abb29567b189efdbdb34cbf7ba851c2a58",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-690"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-10T19:15:47Z"
advisories/unreviewed/2024/04/GHSA-w5hw-wf94-wxwj/GHSA-w5hw-wf94-wxwj.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w5hw-wf94-wxwj",
"modified": "2024-04-15T06:30:34Z",
"modified": "2024-07-08T15:31:54Z",
"published": "2024-04-15T06:30:34Z",
"aliases": [
"CVE-2024-1755"
],
"details": "The NPS computy WordPress plugin through 2.7.5 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-15T05:15:15Z"
advisories/unreviewed/2024/05/GHSA-59j5-r3pj-3q9p/GHSA-59j5-r3pj-3q9p.json
+1
View File
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-295",
"CWE-843"
],
"severity": "MODERATE",
advisories/unreviewed/2024/05/GHSA-gc8r-vh42-27g4/GHSA-gc8r-vh42-27g4.json
+2 -1
View File
@@ -32,7 +32,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-1281"
"CWE-1281",
"CWE-667"
],
"severity": "HIGH",
"github_reviewed": false,

Some files were not shown because too many files have changed in this diff Show More