diff --git a/advisories/unreviewed/2024/06/GHSA-chpq-g3q7-fq3j/GHSA-chpq-g3q7-fq3j.json b/advisories/unreviewed/2024/06/GHSA-chpq-g3q7-fq3j/GHSA-chpq-g3q7-fq3j.json new file mode 100644 index 00000000000..e16e3bb0e14 --- /dev/null +++ b/advisories/unreviewed/2024/06/GHSA-chpq-g3q7-fq3j/GHSA-chpq-g3q7-fq3j.json @@ -0,0 +1,50 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-chpq-g3q7-fq3j", + "modified": "2024-06-17T03:31:06Z", + "published": "2024-06-17T03:31:06Z", + "aliases": [ + "CVE-2024-6043" + ], + "details": "A vulnerability classified as critical has been found in SourceCodester Best House Rental Management System 1.0. This affects the function login of the file admin_class.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-268767.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6043" + }, + { + "type": "WEB", + "url": "https://github.com/yezzzo/y3/blob/main/SourceCodester%20Best%20house%20rental%20management%20system%20project%20in%20php%201.0%20SQL%20Injection.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.268767" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.268767" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.358176" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-06-17T01:15:49Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/06/GHSA-gp2x-43x3-838x/GHSA-gp2x-43x3-838x.json b/advisories/unreviewed/2024/06/GHSA-gp2x-43x3-838x/GHSA-gp2x-43x3-838x.json new file mode 100644 index 00000000000..cb98eff296e --- /dev/null +++ b/advisories/unreviewed/2024/06/GHSA-gp2x-43x3-838x/GHSA-gp2x-43x3-838x.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gp2x-43x3-838x", + "modified": "2024-06-17T03:31:07Z", + "published": "2024-06-17T03:31:07Z", + "aliases": [ + "CVE-2024-5163" + ], + "details": "Improper permission settings for mobile applications (com.transsion.carlcare) may lead to user password and account security risks.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-5163" + }, + { + "type": "WEB", + "url": "https://security.tecno.com/SRC/blogdetail/267?lang=en_US" + }, + { + "type": "WEB", + "url": "https://security.tecno.com/SRC/securityUpdates" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-06-17T03:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/06/GHSA-rr4p-qrv5-g999/GHSA-rr4p-qrv5-g999.json b/advisories/unreviewed/2024/06/GHSA-rr4p-qrv5-g999/GHSA-rr4p-qrv5-g999.json new file mode 100644 index 00000000000..3e4aeec00c0 --- /dev/null +++ b/advisories/unreviewed/2024/06/GHSA-rr4p-qrv5-g999/GHSA-rr4p-qrv5-g999.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rr4p-qrv5-g999", + "modified": "2024-06-17T03:31:07Z", + "published": "2024-06-17T03:31:07Z", + "aliases": [ + "CVE-2024-6044" + ], + "details": "Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attackers on the same local area network can read arbitrary system files by manipulating the URL.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6044" + }, + { + "type": "WEB", + "url": "https://supportannouncement.us.dlink.com/security/publication.aspx?name=SAP10398" + }, + { + "type": "WEB", + "url": "https://www.twcert.org.tw/en/cp-139-7878-7c3d9-2.html" + }, + { + "type": "WEB", + "url": "https://www.twcert.org.tw/tw/cp-132-7877-b4674-1.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-22" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-06-17T03:15:09Z" + } +} \ No newline at end of file