netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-08-15 21:33:00 +00:00
parent d374ebcd80
commit 7a2e86c910
64 changed files with 818 additions and 185 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/02/GHSA-5c29-m8gg-59qv/GHSA-5c29-m8gg-59qv.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5c29-m8gg-59qv",
"modified": "2024-02-21T18:31:02Z",
"modified": "2024-08-15T21:31:18Z",
"published": "2024-02-21T18:31:02Z",
"aliases": [
"CVE-2024-25895"
],
"details": "A reflected cross-site scripting (XSS) vulnerability in ChurchCRM 5.5.0 allows remote attackers to inject arbitrary web script or HTML via the type parameter of /EventAttendance.php",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-21T18:15:51Z"
advisories/unreviewed/2024/02/GHSA-8w7v-3vv4-c289/GHSA-8w7v-3vv4-c289.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8w7v-3vv4-c289",
"modified": "2024-02-21T21:30:25Z",
"modified": "2024-08-15T21:31:18Z",
"published": "2024-02-21T21:30:25Z",
"aliases": [
"CVE-2023-37177"
],
"details": "SQL Injection vulnerability in PMB Services PMB v.7.4.7 and before allows a remote unauthenticated attacker to execute arbitrary code via the query parameter in the /admin/convert/export_z3950.php endpoint.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-21T21:15:08Z"
advisories/unreviewed/2024/02/GHSA-jmv9-2j4f-m6fq/GHSA-jmv9-2j4f-m6fq.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jmv9-2j4f-m6fq",
"modified": "2024-02-21T21:30:25Z",
"modified": "2024-08-15T21:31:18Z",
"published": "2024-02-21T21:30:25Z",
"aliases": [
"CVE-2024-25461"
],
"details": "Directory Traversal vulnerability in Terrasoft, Creatio Terrasoft CRM v.7.18.4.1532 allows a remote attacker to obtain sensitive information via a crafted request to the terrasoft.axd component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-22"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-21T20:15:46Z"
advisories/unreviewed/2024/02/GHSA-mwr4-m2r6-rmh7/GHSA-mwr4-m2r6-rmh7.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mwr4-m2r6-rmh7",
"modified": "2024-02-16T21:31:31Z",
"modified": "2024-08-15T21:31:18Z",
"published": "2024-02-16T21:31:31Z",
"aliases": [
"CVE-2024-0018"
],
"details": "In convertYUV420Planar16ToY410 of ColorConverter.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-122"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-16T20:15:47Z"
advisories/unreviewed/2024/02/GHSA-qrf5-gh6v-gv6g/GHSA-qrf5-gh6v-gv6g.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qrf5-gh6v-gv6g",
"modified": "2024-02-16T00:30:28Z",
"modified": "2024-08-15T21:31:17Z",
"published": "2024-02-16T00:30:28Z",
"aliases": [
"CVE-2023-40114"
],
"details": "In multiple functions of MtpFfsHandle.cpp , there is a possible out of bounds write due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-416"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-15T23:15:08Z"
advisories/unreviewed/2024/03/GHSA-2m33-2vvh-2jjh/GHSA-2m33-2vvh-2jjh.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2m33-2vvh-2jjh",
"modified": "2024-03-29T15:30:32Z",
"modified": "2024-08-15T21:31:18Z",
"published": "2024-03-29T15:30:32Z",
"aliases": [
"CVE-2024-30639"
],
"details": "Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability in the page parameter of fromAddressNat function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-29T14:15:14Z"
advisories/unreviewed/2024/03/GHSA-3qw5-v9cc-v262/GHSA-3qw5-v9cc-v262.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3qw5-v9cc-v262",
"modified": "2024-03-21T21:31:15Z",
"modified": "2024-08-15T21:31:18Z",
"published": "2024-03-21T21:31:15Z",
"aliases": [
"CVE-2024-29374"
],
"details": "A Cross-Site Scripting (XSS) vulnerability exists in the way MOODLE 3.10.9 handles user input within the \"GET /?lang=\" URL parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-21T19:15:09Z"
advisories/unreviewed/2024/03/GHSA-52mm-25mr-346r/GHSA-52mm-25mr-346r.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-52mm-25mr-346r",
"modified": "2024-03-29T15:30:31Z",
"modified": "2024-08-15T21:31:18Z",
"published": "2024-03-29T15:30:31Z",
"aliases": [
"CVE-2024-30632"
],
"details": "Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the security_5g parameter from formWifiBasicSet function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-29T13:15:16Z"
advisories/unreviewed/2024/03/GHSA-576j-rcf9-73mm/GHSA-576j-rcf9-73mm.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-576j-rcf9-73mm",
"modified": "2024-03-13T18:31:34Z",
"modified": "2024-08-15T21:31:18Z",
"published": "2024-03-13T18:31:34Z",
"aliases": [
"CVE-2024-28670"
],
"details": "DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_main.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-352"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-13T16:15:30Z"
advisories/unreviewed/2024/03/GHSA-62qx-2wp9-mxh3/GHSA-62qx-2wp9-mxh3.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-62qx-2wp9-mxh3",
"modified": "2024-03-11T21:31:26Z",
"modified": "2024-08-15T21:31:18Z",
"published": "2024-03-11T21:31:26Z",
"aliases": [
"CVE-2024-27219"
],
"details": "In tmu_set_pi of tmu.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-11T19:15:48Z"
advisories/unreviewed/2024/03/GHSA-987g-v7r7-rp9w/GHSA-987g-v7r7-rp9w.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-987g-v7r7-rp9w",
"modified": "2024-03-11T21:31:26Z",
"modified": "2024-08-15T21:31:18Z",
"published": "2024-03-11T21:31:26Z",
"aliases": [
"CVE-2024-25993"
],
"details": "In tmu_reset_tmu_trip_counter of TBD, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-11T19:15:47Z"
advisories/unreviewed/2024/03/GHSA-h97h-gh5w-hqv2/GHSA-h97h-gh5w-hqv2.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h97h-gh5w-hqv2",
"modified": "2024-03-13T18:31:34Z",
"modified": "2024-08-15T21:31:18Z",
"published": "2024-03-13T18:31:34Z",
"aliases": [
"CVE-2024-28680"
],
"details": "DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/diy_add.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-13T16:15:30Z"
advisories/unreviewed/2024/03/GHSA-v8vw-8cg3-cx4p/GHSA-v8vw-8cg3-cx4p.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v8vw-8cg3-cx4p",
"modified": "2024-03-13T18:31:34Z",
"modified": "2024-08-15T21:31:18Z",
"published": "2024-03-13T18:31:34Z",
"aliases": [
"CVE-2024-28683"
],
"details": "DedeCMS v5.7 was discovered to contain a cross-site scripting (XSS) vulnerability via create file.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-13T16:15:30Z"
advisories/unreviewed/2024/03/GHSA-vr4q-vx84-9g5x/GHSA-vr4q-vx84-9g5x.json
+1 -1
View File
@@ -36,7 +36,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-250"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/04/GHSA-597x-4hfr-67c4/GHSA-597x-4hfr-67c4.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-597x-4hfr-67c4",
"modified": "2024-04-03T09:30:32Z",
"modified": "2024-08-15T21:31:18Z",
"published": "2024-04-03T09:30:32Z",
"aliases": [
"CVE-2024-24506"
],
"details": "Cross Site Scripting (XSS) vulnerability in Lime Survey Community Edition Version v.5.3.32+220817, allows remote attackers to execute arbitrary code via the Administrator email address parameter in the General Setting function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-03T07:15:42Z"
advisories/unreviewed/2024/04/GHSA-j9hf-h25p-vw62/GHSA-j9hf-h25p-vw62.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-j9hf-h25p-vw62",
"modified": "2024-04-15T21:30:46Z",
"modified": "2024-08-15T21:31:19Z",
"published": "2024-04-15T21:30:46Z",
"aliases": [
"CVE-2024-30840"
],
"details": "A Stack Overflow vulnerability in Tenda AC15 v15.03.05.18 allows attackers to cause a denial of service via the LISTEN parameter in the fromDhcpListClient function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-15T20:15:11Z"
advisories/unreviewed/2024/04/GHSA-m98g-cw9w-r9qw/GHSA-m98g-cw9w-r9qw.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m98g-cw9w-r9qw",
"modified": "2024-04-25T18:30:39Z",
"modified": "2024-08-15T21:31:19Z",
"published": "2024-04-25T18:30:39Z",
"aliases": [
"CVE-2024-32358"
],
"details": "An issue in Jpress v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the custom plug-in module function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-25T17:15:50Z"
advisories/unreviewed/2024/04/GHSA-ww3h-6rx6-947h/GHSA-ww3h-6rx6-947h.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-ww3h-6rx6-947h",
"modified": "2024-04-30T18:30:33Z",
"modified": "2024-08-15T21:31:19Z",
"published": "2024-04-30T18:30:33Z",
"aliases": [
"CVE-2019-19755"
],
"details": "ethOS through 1.3.3 ships with SSH host keys baked into the installation image, which allows man-in-the-middle attacks and makes identification of all public IPv4 nodes trivial with Shodan.io. NOTE: as of 2019-12-01, the vendor indicated that they plan to fix this.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-300"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-30T18:15:19Z"
advisories/unreviewed/2024/05/GHSA-387f-ggqp-ccr9/GHSA-387f-ggqp-ccr9.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-387f-ggqp-ccr9",
"modified": "2024-05-14T18:30:49Z",
"modified": "2024-08-15T21:31:19Z",
"published": "2024-05-14T18:30:49Z",
"aliases": [
"CVE-2024-34211"
],
"details": "TOTOLINK CP450 v4.1.0cu.747_B20191224 was discovered to contain a hardcoded password vulnerability in /etc/shadow.sample, which allows attackers to log in as root.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-259"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-14T15:38:34Z"
advisories/unreviewed/2024/05/GHSA-455v-w5mm-7hf6/GHSA-455v-w5mm-7hf6.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-455v-w5mm-7hf6",
"modified": "2024-05-14T18:30:59Z",
"modified": "2024-08-15T21:31:19Z",
"published": "2024-05-14T18:30:59Z",
"aliases": [
"CVE-2024-22270"
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": "HIGH",
"github_reviewed": false,

Some files were not shown because too many files have changed in this diff Show More