diff --git a/advisories/github-reviewed/2024/01/GHSA-ghmw-rwh8-6qmr/GHSA-ghmw-rwh8-6qmr.json b/advisories/github-reviewed/2024/01/GHSA-ghmw-rwh8-6qmr/GHSA-ghmw-rwh8-6qmr.json new file mode 100644 index 00000000000..0404df8bb44 --- /dev/null +++ b/advisories/github-reviewed/2024/01/GHSA-ghmw-rwh8-6qmr/GHSA-ghmw-rwh8-6qmr.json @@ -0,0 +1,61 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-ghmw-rwh8-6qmr", + "modified": "2024-01-08T15:29:55Z", + "published": "2024-01-08T15:29:55Z", + "aliases": [ + "CVE-2024-21645" + ], + "summary": "pyload Log Injection vulnerability", + "details": "### Summary\nA log injection vulnerability was identified in `pyload`. This vulnerability allows any unauthenticated actor to inject arbitrary messages into the logs gathered by `pyload`.\n\n### Details\n`pyload` will generate a log entry when attempting to sign in with faulty credentials. This entry will be in the form of `Login failed for user 'USERNAME'`. However, when supplied with a username containing a newline, this newline is not properly escaped. Newlines are also the delimiter between log entries. This allows the attacker to inject new log entries into the log file.\n\n### PoC\nRun `pyload` in the default configuration by running the following command\n```\npyload\n```\n\nWe can now sign in as the pyload user and view the logs at `http://localhost:8000/logs`.\n![Viewing the logs](https://user-images.githubusercontent.com/44903767/294433796-f2c96e39-8000-4649-99bb-9c50e786243d.png)\n\nAny unauthenticated attacker can now make the following request to inject arbitrary logs.\n\n```\ncurl 'http://localhost:8000/login?next=http://localhost:8000/' -X POST -H 'Content-Type: application/x-www-form-urlencoded' --data-raw $'do=login&username=wrong\\'%0a[2024-01-05 02:49:19] HACKER PinkDraconian THIS ENTRY HAS BEEN INJECTED&password=wrong&submit=Login'\n```\n\nIf we now were to look at the logs again, we see that the entry has successfully been injected.\n![PoC2](https://user-images.githubusercontent.com/44903767/294434785-2fc6dce4-3e2c-4da0-8e80-a6bba882f756.png)\n\n### Impact\nForged or otherwise, corrupted log files can be used to cover an attacker’s tracks or even to implicate another party in the commission of a malicious act.\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + { + "package": { + "ecosystem": "PyPI", + "name": "pyload-ng" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "0.5.0b3.dev77" + } + ] + } + ] + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/pyload/pyload/security/advisories/GHSA-ghmw-rwh8-6qmr" + }, + { + "type": "WEB", + "url": "https://github.com/pyload/pyload/commit/4159a1191ec4fe6d927e57a9c4bb8f54e16c381d" + }, + { + "type": "PACKAGE", + "url": "https://github.com/pyload/pyload" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-74" + ], + "severity": "MODERATE", + "github_reviewed": true, + "github_reviewed_at": "2024-01-08T15:29:55Z", + "nvd_published_at": null + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2023/12/GHSA-5p89-3w9x-m7cr/GHSA-5p89-3w9x-m7cr.json b/advisories/unreviewed/2023/12/GHSA-5p89-3w9x-m7cr/GHSA-5p89-3w9x-m7cr.json index e266fe17d44..66bb70b5d66 100644 --- a/advisories/unreviewed/2023/12/GHSA-5p89-3w9x-m7cr/GHSA-5p89-3w9x-m7cr.json +++ b/advisories/unreviewed/2023/12/GHSA-5p89-3w9x-m7cr/GHSA-5p89-3w9x-m7cr.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-5p89-3w9x-m7cr", - "modified": "2023-12-29T06:30:30Z", + "modified": "2024-01-08T15:30:26Z", "published": "2023-12-29T06:30:30Z", "aliases": [ "CVE-2023-31302" ], "details": "Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows remote attackers to execute arbitrary code via the Teller field.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-12-29T06:15:43Z" diff --git a/advisories/unreviewed/2023/12/GHSA-652f-58jv-j9fp/GHSA-652f-58jv-j9fp.json b/advisories/unreviewed/2023/12/GHSA-652f-58jv-j9fp/GHSA-652f-58jv-j9fp.json index 6a9ca649ab6..ab6de32a0cb 100644 --- a/advisories/unreviewed/2023/12/GHSA-652f-58jv-j9fp/GHSA-652f-58jv-j9fp.json +++ b/advisories/unreviewed/2023/12/GHSA-652f-58jv-j9fp/GHSA-652f-58jv-j9fp.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-652f-58jv-j9fp", - "modified": "2023-12-29T06:30:30Z", + "modified": "2024-01-08T15:30:26Z", "published": "2023-12-29T06:30:30Z", "aliases": [ "CVE-2023-31300" ], "details": "An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitive information via transmission of unencrypted, cleartext credentials during Password Reset feature.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-319" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-12-29T06:15:43Z" diff --git a/advisories/unreviewed/2023/12/GHSA-92pp-5g9w-8mgr/GHSA-92pp-5g9w-8mgr.json b/advisories/unreviewed/2023/12/GHSA-92pp-5g9w-8mgr/GHSA-92pp-5g9w-8mgr.json index 4f345b28f22..d34ce34cff6 100644 --- a/advisories/unreviewed/2023/12/GHSA-92pp-5g9w-8mgr/GHSA-92pp-5g9w-8mgr.json +++ b/advisories/unreviewed/2023/12/GHSA-92pp-5g9w-8mgr/GHSA-92pp-5g9w-8mgr.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-92pp-5g9w-8mgr", - "modified": "2023-12-29T03:30:29Z", + "modified": "2024-01-08T15:30:25Z", "published": "2023-12-29T03:30:29Z", "aliases": [ "CVE-2023-31294" ], "details": "CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitive information via the Delivery Name field.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-1236" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-12-29T03:15:10Z" diff --git a/advisories/unreviewed/2023/12/GHSA-988m-998x-3cxx/GHSA-988m-998x-3cxx.json b/advisories/unreviewed/2023/12/GHSA-988m-998x-3cxx/GHSA-988m-998x-3cxx.json index 7cccfc619cf..89a870d2fbb 100644 --- a/advisories/unreviewed/2023/12/GHSA-988m-998x-3cxx/GHSA-988m-998x-3cxx.json +++ b/advisories/unreviewed/2023/12/GHSA-988m-998x-3cxx/GHSA-988m-998x-3cxx.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-988m-998x-3cxx", - "modified": "2023-12-30T00:30:23Z", + "modified": "2024-01-08T15:30:26Z", "published": "2023-12-30T00:30:23Z", "aliases": [ "CVE-2023-52240" ], "details": "The Kantega SAML SSO OIDC Kerberos Single Sign-on apps before 6.20.0 for Atlassian products allow XSS if SAML POST Binding is enabled. This affects 4.4.2 through 4.14.8 before 4.14.9, 5.0.0 through 5.11.4 before 5.11.5, and 6.0.0 through 6.19.0 before 6.20.0. The full product names are Kantega SAML SSO OIDC Kerberos Single Sign-on for Jira Data Center & Server (Kantega SSO Enterprise), Kantega SAML SSO OIDC Kerberos Single Sign-on for Confluence Data Center & Server (Kantega SSO Enterprise), Kantega SAML SSO OIDC Kerberos Single Sign-on for Bitbucket Data Center & Server (Kantega SSO Enterprise), Kantega SAML SSO OIDC Kerberos Single Sign-on for Bamboo Data Center & Server (Kantega SSO Enterprise), and Kantega SAML SSO OIDC Kerberos Single Sign-on for FeCru Server (Kantega SSO Enterprise). (Here, FeCru refers to the Atlassian Fisheye and Crucible products running together.)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ @@ -45,9 +48,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-12-29T22:15:37Z" diff --git a/advisories/unreviewed/2023/12/GHSA-hmpw-7rwx-q968/GHSA-hmpw-7rwx-q968.json b/advisories/unreviewed/2023/12/GHSA-hmpw-7rwx-q968/GHSA-hmpw-7rwx-q968.json index cd47910c408..c90212278ae 100644 --- a/advisories/unreviewed/2023/12/GHSA-hmpw-7rwx-q968/GHSA-hmpw-7rwx-q968.json +++ b/advisories/unreviewed/2023/12/GHSA-hmpw-7rwx-q968/GHSA-hmpw-7rwx-q968.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-hmpw-7rwx-q968", - "modified": "2023-12-30T03:30:19Z", + "modified": "2024-01-08T15:30:26Z", "published": "2023-12-30T03:30:19Z", "aliases": [ "CVE-2022-46486" ], "details": "A lack of pointer-validation logic in the __scone_dispatch component of SCONE before v5.8.0 for Intel SGX allows attackers to access sensitive information.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } ], "affected": [ @@ -33,9 +36,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-763" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-12-30T03:15:08Z" diff --git a/advisories/unreviewed/2023/12/GHSA-jcjf-6r3f-3cjg/GHSA-jcjf-6r3f-3cjg.json b/advisories/unreviewed/2023/12/GHSA-jcjf-6r3f-3cjg/GHSA-jcjf-6r3f-3cjg.json index c2f6cb1ad0c..cf424daab3c 100644 --- a/advisories/unreviewed/2023/12/GHSA-jcjf-6r3f-3cjg/GHSA-jcjf-6r3f-3cjg.json +++ b/advisories/unreviewed/2023/12/GHSA-jcjf-6r3f-3cjg/GHSA-jcjf-6r3f-3cjg.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-jcjf-6r3f-3cjg", - "modified": "2023-12-29T03:30:29Z", + "modified": "2024-01-08T15:30:25Z", "published": "2023-12-29T03:30:29Z", "aliases": [ "CVE-2023-31293" ], "details": "An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows remote attackers to obtain sensitive information and bypass profile restriction via improper access control in the Reader system user's web browser, allowing the journal to be displayed, despite the option being disabled.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" + } ], "affected": [ @@ -27,7 +30,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-12-29T03:15:10Z" diff --git a/advisories/unreviewed/2023/12/GHSA-v6v8-vp6w-87v3/GHSA-v6v8-vp6w-87v3.json b/advisories/unreviewed/2023/12/GHSA-v6v8-vp6w-87v3/GHSA-v6v8-vp6w-87v3.json index 76039e5ec7e..ea517a00554 100644 --- a/advisories/unreviewed/2023/12/GHSA-v6v8-vp6w-87v3/GHSA-v6v8-vp6w-87v3.json +++ b/advisories/unreviewed/2023/12/GHSA-v6v8-vp6w-87v3/GHSA-v6v8-vp6w-87v3.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-v6v8-vp6w-87v3", - "modified": "2023-12-29T06:30:30Z", + "modified": "2024-01-08T15:30:26Z", "published": "2023-12-29T06:30:30Z", "aliases": [ "CVE-2023-31295" ], "details": "CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitive information via the User Profile field.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-1236" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-12-29T06:15:43Z" diff --git a/advisories/unreviewed/2023/12/GHSA-w8rw-hj58-7665/GHSA-w8rw-hj58-7665.json b/advisories/unreviewed/2023/12/GHSA-w8rw-hj58-7665/GHSA-w8rw-hj58-7665.json index 9458c416d8f..22faa4cc01e 100644 --- a/advisories/unreviewed/2023/12/GHSA-w8rw-hj58-7665/GHSA-w8rw-hj58-7665.json +++ b/advisories/unreviewed/2023/12/GHSA-w8rw-hj58-7665/GHSA-w8rw-hj58-7665.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-w8rw-hj58-7665", - "modified": "2023-12-29T06:30:30Z", + "modified": "2024-01-08T15:30:26Z", "published": "2023-12-29T06:30:30Z", "aliases": [ "CVE-2023-31299" ], "details": "Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary code via the Barcode field of a container.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2023-12-29T05:15:08Z" diff --git a/advisories/unreviewed/2024/01/GHSA-2548-xwx6-3r34/GHSA-2548-xwx6-3r34.json b/advisories/unreviewed/2024/01/GHSA-2548-xwx6-3r34/GHSA-2548-xwx6-3r34.json new file mode 100644 index 00000000000..5f95db0436e --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-2548-xwx6-3r34/GHSA-2548-xwx6-3r34.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2548-xwx6-3r34", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-38583" + ], + "details": "A stack-based buffer overflow vulnerability exists in the LXT2 lxt2_rd_expand_integer_to_bits function of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38583" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1827" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-120" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:19Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-27gj-wf7m-cw9x/GHSA-27gj-wf7m-cw9x.json b/advisories/unreviewed/2024/01/GHSA-27gj-wf7m-cw9x/GHSA-27gj-wf7m-cw9x.json new file mode 100644 index 00000000000..2a531573e04 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-27gj-wf7m-cw9x/GHSA-27gj-wf7m-cw9x.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-27gj-wf7m-cw9x", + "modified": "2024-01-08T15:30:27Z", + "published": "2024-01-08T15:30:27Z", + "aliases": [ + "CVE-2024-0322" + ], + "details": "Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0322" + }, + { + "type": "WEB", + "url": "https://github.com/gpac/gpac/commit/092904b80edbc4dce315684a59cc3184c45c1b70" + }, + { + "type": "WEB", + "url": "https://huntr.com/bounties/87611fc9-ed7c-43e9-8e52-d83cd270bbec" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-125" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T13:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-2c8h-6hfp-gpv6/GHSA-2c8h-6hfp-gpv6.json b/advisories/unreviewed/2024/01/GHSA-2c8h-6hfp-gpv6/GHSA-2c8h-6hfp-gpv6.json new file mode 100644 index 00000000000..ad7fd68fcf7 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-2c8h-6hfp-gpv6/GHSA-2c8h-6hfp-gpv6.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2c8h-6hfp-gpv6", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-35997" + ], + "details": "Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the tdelta indexing when signal_lens is 2 or more.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35997" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1791" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1791" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-129" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-2gjq-ggr9-9f3w/GHSA-2gjq-ggr9-9f3w.json b/advisories/unreviewed/2024/01/GHSA-2gjq-ggr9-9f3w/GHSA-2gjq-ggr9-9f3w.json new file mode 100644 index 00000000000..03d737c7410 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-2gjq-ggr9-9f3w/GHSA-2gjq-ggr9-9f3w.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2gjq-ggr9-9f3w", + "modified": "2024-01-08T15:30:30Z", + "published": "2024-01-08T15:30:30Z", + "aliases": [ + "CVE-2023-39414" + ], + "details": "Multiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer underflow when performing the right shift operation.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39414" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1824" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1824" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-191" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-2jrw-2xf6-7qh4/GHSA-2jrw-2xf6-7qh4.json b/advisories/unreviewed/2024/01/GHSA-2jrw-2xf6-7qh4/GHSA-2jrw-2xf6-7qh4.json new file mode 100644 index 00000000000..fac2f6abef2 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-2jrw-2xf6-7qh4/GHSA-2jrw-2xf6-7qh4.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2jrw-2xf6-7qh4", + "modified": "2024-01-08T15:30:27Z", + "published": "2024-01-08T15:30:27Z", + "aliases": [ + "CVE-2023-35956" + ], + "details": "Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the decompression function `fastlz_decompress`.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35956" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1785" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1785" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-342m-47g4-wcgj/GHSA-342m-47g4-wcgj.json b/advisories/unreviewed/2024/01/GHSA-342m-47g4-wcgj/GHSA-342m-47g4-wcgj.json new file mode 100644 index 00000000000..cd579912784 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-342m-47g4-wcgj/GHSA-342m-47g4-wcgj.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-342m-47g4-wcgj", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-37921" + ], + "details": "Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the arbitrary write when triggered via the vcd2vzt conversion utility.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37921" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1807" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1807" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-118" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:18Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-34p4-vjw3-68hq/GHSA-34p4-vjw3-68hq.json b/advisories/unreviewed/2024/01/GHSA-34p4-vjw3-68hq/GHSA-34p4-vjw3-68hq.json new file mode 100644 index 00000000000..29976557221 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-34p4-vjw3-68hq/GHSA-34p4-vjw3-68hq.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-34p4-vjw3-68hq", + "modified": "2024-01-08T15:30:27Z", + "published": "2024-01-08T15:30:27Z", + "aliases": [ + "CVE-2023-34087" + ], + "details": "An improper array index validation vulnerability exists in the EVCD var len parsing functionality of GTKWave 3.3.115. A specially crafted .evcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-34087" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1803" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-3g32-r9h6-fv6m/GHSA-3g32-r9h6-fv6m.json b/advisories/unreviewed/2024/01/GHSA-3g32-r9h6-fv6m/GHSA-3g32-r9h6-fv6m.json new file mode 100644 index 00000000000..94e182807e9 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-3g32-r9h6-fv6m/GHSA-3g32-r9h6-fv6m.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3g32-r9h6-fv6m", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-37573" + ], + "details": "Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the use-after-free when triggered via the GUI's recoder (default) VCD parsing code.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37573" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1806" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-3m75-6h9w-8hp6/GHSA-3m75-6h9w-8hp6.json b/advisories/unreviewed/2024/01/GHSA-3m75-6h9w-8hp6/GHSA-3m75-6h9w-8hp6.json new file mode 100644 index 00000000000..42de03f71d5 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-3m75-6h9w-8hp6/GHSA-3m75-6h9w-8hp6.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3m75-6h9w-8hp6", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-36861" + ], + "details": "An out-of-bounds write vulnerability exists in the VZT LZMA_read_varint functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36861" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1811" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1811" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-3mqx-ggcf-qxwg/GHSA-3mqx-ggcf-qxwg.json b/advisories/unreviewed/2024/01/GHSA-3mqx-ggcf-qxwg/GHSA-3mqx-ggcf-qxwg.json new file mode 100644 index 00000000000..d67c998aa02 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-3mqx-ggcf-qxwg/GHSA-3mqx-ggcf-qxwg.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3mqx-ggcf-qxwg", + "modified": "2024-01-08T15:30:27Z", + "published": "2024-01-08T15:30:27Z", + "aliases": [ + "CVE-2023-35057" + ], + "details": "An integer overflow vulnerability exists in the LXT2 lxt2_rd_trace value elements allocation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to memory corruption. A victim would need to open a malicious file to trigger this vulnerability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35057" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1821" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1821" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-4rj9-gmxf-4rcf/GHSA-4rj9-gmxf-4rcf.json b/advisories/unreviewed/2024/01/GHSA-4rj9-gmxf-4rcf/GHSA-4rj9-gmxf-4rcf.json new file mode 100644 index 00000000000..4d9b0538e17 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-4rj9-gmxf-4rcf/GHSA-4rj9-gmxf-4rcf.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4rj9-gmxf-4rcf", + "modified": "2024-01-08T15:30:27Z", + "published": "2024-01-08T15:30:27Z", + "aliases": [ + "CVE-2023-35004" + ], + "details": "An integer overflow vulnerability exists in the VZT longest_len value allocation functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35004" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1816" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1816" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-4v9c-j8h8-rg86/GHSA-4v9c-j8h8-rg86.json b/advisories/unreviewed/2024/01/GHSA-4v9c-j8h8-rg86/GHSA-4v9c-j8h8-rg86.json new file mode 100644 index 00000000000..e2d99dae22d --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-4v9c-j8h8-rg86/GHSA-4v9c-j8h8-rg86.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4v9c-j8h8-rg86", + "modified": "2024-01-08T15:30:27Z", + "published": "2024-01-08T15:30:27Z", + "aliases": [ + "CVE-2023-32650" + ], + "details": "An integer overflow vulnerability exists in the FST_BL_GEOM parsing maxhandle functionality of GTKWave 3.3.115, when compiled as a 32-bit binary. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger this vulnerability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-32650" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1777" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-5g3m-p64v-8cm3/GHSA-5g3m-p64v-8cm3.json b/advisories/unreviewed/2024/01/GHSA-5g3m-p64v-8cm3/GHSA-5g3m-p64v-8cm3.json new file mode 100644 index 00000000000..a2d29113594 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-5g3m-p64v-8cm3/GHSA-5g3m-p64v-8cm3.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5g3m-p64v-8cm3", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-37418" + ], + "details": "Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the vcd2vzt conversion utility.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37418" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1804" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1804" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-787" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:15Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-5j2r-c4r4-2f9c/GHSA-5j2r-c4r4-2f9c.json b/advisories/unreviewed/2024/01/GHSA-5j2r-c4r4-2f9c/GHSA-5j2r-c4r4-2f9c.json new file mode 100644 index 00000000000..875ec6a8f4d --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-5j2r-c4r4-2f9c/GHSA-5j2r-c4r4-2f9c.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5j2r-c4r4-2f9c", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-37444" + ], + "details": "Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds read when triggered via the GUI's interactive VCD parsing code.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37444" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1805" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:16Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-5x66-w85v-593v/GHSA-5x66-w85v-593v.json b/advisories/unreviewed/2024/01/GHSA-5x66-w85v-593v/GHSA-5x66-w85v-593v.json new file mode 100644 index 00000000000..6b8b366e3df --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-5x66-w85v-593v/GHSA-5x66-w85v-593v.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5x66-w85v-593v", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-39235" + ], + "details": "Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_process_block autosort functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when looping over `lt->num_time_ticks`.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39235" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1817" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1817" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-129" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:22Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-5xjp-7w7g-522j/GHSA-5xjp-7w7g-522j.json b/advisories/unreviewed/2024/01/GHSA-5xjp-7w7g-522j/GHSA-5xjp-7w7g-522j.json new file mode 100644 index 00000000000..e59aaae25e0 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-5xjp-7w7g-522j/GHSA-5xjp-7w7g-522j.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5xjp-7w7g-522j", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-39234" + ], + "details": "Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_process_block autosort functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when looping over `lt->numrealfacs`.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39234" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1817" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1817" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-129" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:22Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-64mj-745w-r3p7/GHSA-64mj-745w-r3p7.json b/advisories/unreviewed/2024/01/GHSA-64mj-745w-r3p7/GHSA-64mj-745w-r3p7.json new file mode 100644 index 00000000000..23b4f130147 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-64mj-745w-r3p7/GHSA-64mj-745w-r3p7.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-64mj-745w-r3p7", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-38657" + ], + "details": "An out-of-bounds write vulnerability exists in the LXT2 zlib block decompression functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38657" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1823" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:22Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-655f-j2cx-ww9q/GHSA-655f-j2cx-ww9q.json b/advisories/unreviewed/2024/01/GHSA-655f-j2cx-ww9q/GHSA-655f-j2cx-ww9q.json new file mode 100644 index 00000000000..37487a36733 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-655f-j2cx-ww9q/GHSA-655f-j2cx-ww9q.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-655f-j2cx-ww9q", + "modified": "2024-01-08T15:30:30Z", + "published": "2024-01-08T15:30:30Z", + "aliases": [ + "CVE-2023-39443" + ], + "details": "Multiple out-of-bounds write vulnerabilities exist in the LXT2 parsing functionality of GTKWave 3.3.115. A specially-crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write perfomed by the prefix copy loop.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39443" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1826" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-66fm-27xg-wrx7/GHSA-66fm-27xg-wrx7.json b/advisories/unreviewed/2024/01/GHSA-66fm-27xg-wrx7/GHSA-66fm-27xg-wrx7.json new file mode 100644 index 00000000000..35374c3522d --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-66fm-27xg-wrx7/GHSA-66fm-27xg-wrx7.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-66fm-27xg-wrx7", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-35964" + ], + "details": "Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file can lead to arbitrary command execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns decompression in the `vcd2lxt` utility.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35964" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1786" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-78" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-6m28-3r86-ccr3/GHSA-6m28-3r86-ccr3.json b/advisories/unreviewed/2024/01/GHSA-6m28-3r86-ccr3/GHSA-6m28-3r86-ccr3.json new file mode 100644 index 00000000000..e9f8019b583 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-6m28-3r86-ccr3/GHSA-6m28-3r86-ccr3.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6m28-3r86-ccr3", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-37578" + ], + "details": "Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the use-after-free when triggered via the vcd2lxt conversion utility.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37578" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1806" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:18Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-6r73-mrfj-4ww6/GHSA-6r73-mrfj-4ww6.json b/advisories/unreviewed/2024/01/GHSA-6r73-mrfj-4ww6/GHSA-6r73-mrfj-4ww6.json new file mode 100644 index 00000000000..74610995948 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-6r73-mrfj-4ww6/GHSA-6r73-mrfj-4ww6.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-6r73-mrfj-4ww6", + "modified": "2024-01-08T15:30:27Z", + "published": "2024-01-08T15:30:27Z", + "aliases": [ + "CVE-2023-35957" + ], + "details": "Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the decompression function `uncompress`.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35957" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1785" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1785" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-7fr5-x4fw-q767/GHSA-7fr5-x4fw-q767.json b/advisories/unreviewed/2024/01/GHSA-7fr5-x4fw-q767/GHSA-7fr5-x4fw-q767.json new file mode 100644 index 00000000000..484b297d5d0 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-7fr5-x4fw-q767/GHSA-7fr5-x4fw-q767.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7fr5-x4fw-q767", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-36916" + ], + "details": "Multiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chain_table allocation functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the allocation of the `chain_table_lengths` array.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36916" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1798" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1798" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-7xcw-qxc4-v8f9/GHSA-7xcw-qxc4-v8f9.json b/advisories/unreviewed/2024/01/GHSA-7xcw-qxc4-v8f9/GHSA-7xcw-qxc4-v8f9.json new file mode 100644 index 00000000000..27f0e1d2cf1 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-7xcw-qxc4-v8f9/GHSA-7xcw-qxc4-v8f9.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7xcw-qxc4-v8f9", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-35960" + ], + "details": "Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file can lead to arbitrary command execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns legacy decompression in `vcd_main`.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35960" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1786" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-78" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:11Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-85h3-wq5q-6x6j/GHSA-85h3-wq5q-6x6j.json b/advisories/unreviewed/2024/01/GHSA-85h3-wq5q-6x6j/GHSA-85h3-wq5q-6x6j.json new file mode 100644 index 00000000000..b381090535f --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-85h3-wq5q-6x6j/GHSA-85h3-wq5q-6x6j.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-85h3-wq5q-6x6j", + "modified": "2024-01-08T15:30:30Z", + "published": "2024-01-08T15:30:30Z", + "aliases": [ + "CVE-2023-47211" + ], + "details": "A directory traversal vulnerability exists in the uploadMib functionality of ManageEngine OpManager 12.7.258. A specially crafted HTTP request can lead to arbitrary file creation. An attacker can send a malicious MiB file to trigger this vulnerability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47211" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1851" + }, + { + "type": "WEB", + "url": "https://www.manageengine.com/itom/advisory/cve-2023-47211.html" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-22" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:25Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-89gm-h4q5-gp3r/GHSA-89gm-h4q5-gp3r.json b/advisories/unreviewed/2024/01/GHSA-89gm-h4q5-gp3r/GHSA-89gm-h4q5-gp3r.json new file mode 100644 index 00000000000..eaf29b417c9 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-89gm-h4q5-gp3r/GHSA-89gm-h4q5-gp3r.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-89gm-h4q5-gp3r", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-37416" + ], + "details": "Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the GUI's legacy VCD parsing code.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37416" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1804" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1804" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-787" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:15Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-8g39-682j-5v37/GHSA-8g39-682j-5v37.json b/advisories/unreviewed/2024/01/GHSA-8g39-682j-5v37/GHSA-8g39-682j-5v37.json new file mode 100644 index 00000000000..33f563c7a30 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-8g39-682j-5v37/GHSA-8g39-682j-5v37.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8g39-682j-5v37", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-35963" + ], + "details": "Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file can lead to arbitrary command execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns decompression in the `vcd2lxt2` utility.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35963" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1786" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-78" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-8gw5-cvgr-jgv5/GHSA-8gw5-cvgr-jgv5.json b/advisories/unreviewed/2024/01/GHSA-8gw5-cvgr-jgv5/GHSA-8gw5-cvgr-jgv5.json new file mode 100644 index 00000000000..269c30d1ada --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-8gw5-cvgr-jgv5/GHSA-8gw5-cvgr-jgv5.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8gw5-cvgr-jgv5", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-39316" + ], + "details": "Multiple integer overflow vulnerabilities exist in the LXT2 num_dict_entries functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `string_pointers` array.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39316" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1820" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-8vjg-qcpg-mp3p/GHSA-8vjg-qcpg-mp3p.json b/advisories/unreviewed/2024/01/GHSA-8vjg-qcpg-mp3p/GHSA-8vjg-qcpg-mp3p.json new file mode 100644 index 00000000000..d9238a400fc --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-8vjg-qcpg-mp3p/GHSA-8vjg-qcpg-mp3p.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8vjg-qcpg-mp3p", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-36864" + ], + "details": "An integer overflow vulnerability exists in the fstReaderIterBlocks2 temp_signal_value_buf allocation functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36864" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1797" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-97xh-jvgw-7w42/GHSA-97xh-jvgw-7w42.json b/advisories/unreviewed/2024/01/GHSA-97xh-jvgw-7w42/GHSA-97xh-jvgw-7w42.json new file mode 100644 index 00000000000..ccba0a23c8a --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-97xh-jvgw-7w42/GHSA-97xh-jvgw-7w42.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-97xh-jvgw-7w42", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-39273" + ], + "details": "Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `flags` array.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39273" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1818" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1818" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:23Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-c5ph-w6xf-q6r8/GHSA-c5ph-w6xf-q6r8.json b/advisories/unreviewed/2024/01/GHSA-c5ph-w6xf-q6r8/GHSA-c5ph-w6xf-q6r8.json new file mode 100644 index 00000000000..1d69f01565c --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-c5ph-w6xf-q6r8/GHSA-c5ph-w6xf-q6r8.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-c5ph-w6xf-q6r8", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-38648" + ], + "details": "Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_get_facname decompression functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write perfomed by the prefix copy loop.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38648" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1813" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1813" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:20Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-c93f-7m77-g46f/GHSA-c93f-7m77-g46f.json b/advisories/unreviewed/2024/01/GHSA-c93f-7m77-g46f/GHSA-c93f-7m77-g46f.json new file mode 100644 index 00000000000..97ec541817b --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-c93f-7m77-g46f/GHSA-c93f-7m77-g46f.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-c93f-7m77-g46f", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-35996" + ], + "details": "Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the tdelta indexing when signal_lens is 0.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35996" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1791" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1791" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-129" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-cc4r-723q-4m79/GHSA-cc4r-723q-4m79.json b/advisories/unreviewed/2024/01/GHSA-cc4r-723q-4m79/GHSA-cc4r-723q-4m79.json new file mode 100644 index 00000000000..ee853ee6dfa --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-cc4r-723q-4m79/GHSA-cc4r-723q-4m79.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cc4r-723q-4m79", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-39274" + ], + "details": "Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `len` array.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39274" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1818" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1818" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:23Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-cc62-wjgc-635w/GHSA-cc62-wjgc-635w.json b/advisories/unreviewed/2024/01/GHSA-cc62-wjgc-635w/GHSA-cc62-wjgc-635w.json new file mode 100644 index 00000000000..66413b40814 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-cc62-wjgc-635w/GHSA-cc62-wjgc-635w.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cc62-wjgc-635w", + "modified": "2024-01-08T15:30:27Z", + "published": "2024-01-08T15:30:27Z", + "aliases": [ + "CVE-2023-35955" + ], + "details": "Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the decompression function `LZ4_decompress_safe_partial`.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35955" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1785" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1785" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-cf7q-84pj-gw7g/GHSA-cf7q-84pj-gw7g.json b/advisories/unreviewed/2024/01/GHSA-cf7q-84pj-gw7g/GHSA-cf7q-84pj-gw7g.json new file mode 100644 index 00000000000..194b918d720 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-cf7q-84pj-gw7g/GHSA-cf7q-84pj-gw7g.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cf7q-84pj-gw7g", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-36747" + ], + "details": "Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 fstWritex len functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the handling of `len` in `fstWritex` when `beg_time` does not match the start of the time table.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36747" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1793" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1793" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-cggv-xvc5-x9mm/GHSA-cggv-xvc5-x9mm.json b/advisories/unreviewed/2024/01/GHSA-cggv-xvc5-x9mm/GHSA-cggv-xvc5-x9mm.json new file mode 100644 index 00000000000..a9afbd4a344 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-cggv-xvc5-x9mm/GHSA-cggv-xvc5-x9mm.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cggv-xvc5-x9mm", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-37577" + ], + "details": "Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the use-after-free when triggered via the vcd2lxt2 conversion utility.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37577" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1806" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:18Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-cjwc-h345-hghp/GHSA-cjwc-h345-hghp.json b/advisories/unreviewed/2024/01/GHSA-cjwc-h345-hghp/GHSA-cjwc-h345-hghp.json new file mode 100644 index 00000000000..4a77f587fd5 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-cjwc-h345-hghp/GHSA-cjwc-h345-hghp.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cjwc-h345-hghp", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-36915" + ], + "details": "Multiple integer overflow vulnerabilities exist in the FST fstReaderIterBlocks2 chain_table allocation functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the allocation of the `chain_table` array.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36915" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1798" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1798" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-f5c7-4jcc-2vq6/GHSA-f5c7-4jcc-2vq6.json b/advisories/unreviewed/2024/01/GHSA-f5c7-4jcc-2vq6/GHSA-f5c7-4jcc-2vq6.json new file mode 100644 index 00000000000..066f233f2cc --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-f5c7-4jcc-2vq6/GHSA-f5c7-4jcc-2vq6.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f5c7-4jcc-2vq6", + "modified": "2024-01-08T15:30:27Z", + "published": "2024-01-08T15:30:27Z", + "aliases": [ + "CVE-2023-35128" + ], + "details": "An integer overflow vulnerability exists in the fstReaderIterBlocks2 time_table tsec_nitems functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger this vulnerability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35128" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1792" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-f5jr-v79w-8298/GHSA-f5jr-v79w-8298.json b/advisories/unreviewed/2024/01/GHSA-f5jr-v79w-8298/GHSA-f5jr-v79w-8298.json new file mode 100644 index 00000000000..cb0ee792c53 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-f5jr-v79w-8298/GHSA-f5jr-v79w-8298.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f5jr-v79w-8298", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-36746" + ], + "details": "Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 fstWritex len functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the handling of `len` in `fstWritex` when parsing the time table.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-36746" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1793" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1793" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-f634-fjh7-4pvv/GHSA-f634-fjh7-4pvv.json b/advisories/unreviewed/2024/01/GHSA-f634-fjh7-4pvv/GHSA-f634-fjh7-4pvv.json new file mode 100644 index 00000000000..2ebd5c037cf --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-f634-fjh7-4pvv/GHSA-f634-fjh7-4pvv.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f634-fjh7-4pvv", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-39271" + ], + "details": "Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `msb` array.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39271" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1818" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1818" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:23Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-ffxf-wxjm-c2gq/GHSA-ffxf-wxjm-c2gq.json b/advisories/unreviewed/2024/01/GHSA-ffxf-wxjm-c2gq/GHSA-ffxf-wxjm-c2gq.json new file mode 100644 index 00000000000..07e8808b6cc --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-ffxf-wxjm-c2gq/GHSA-ffxf-wxjm-c2gq.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-ffxf-wxjm-c2gq", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-35989" + ], + "details": "An integer overflow vulnerability exists in the LXT2 zlib block allocation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35989" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1822" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1822" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-fhw3-qv5f-7vrw/GHSA-fhw3-qv5f-7vrw.json b/advisories/unreviewed/2024/01/GHSA-fhw3-qv5f-7vrw/GHSA-fhw3-qv5f-7vrw.json index f1c50afcc5c..7fa89fc764f 100644 --- a/advisories/unreviewed/2024/01/GHSA-fhw3-qv5f-7vrw/GHSA-fhw3-qv5f-7vrw.json +++ b/advisories/unreviewed/2024/01/GHSA-fhw3-qv5f-7vrw/GHSA-fhw3-qv5f-7vrw.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-fhw3-qv5f-7vrw", - "modified": "2024-01-01T15:30:33Z", + "modified": "2024-01-08T15:30:26Z", "published": "2024-01-01T15:30:33Z", "aliases": [ "CVE-2023-6000" ], "details": "The Popup Builder WordPress plugin before 4.2.3 does not prevent simple visitors from updating existing popups, and injecting raw JavaScript in them, which could lead to Stored XSS attacks.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-01-01T15:15:43Z" diff --git a/advisories/unreviewed/2024/01/GHSA-fjfp-5xx8-cgr2/GHSA-fjfp-5xx8-cgr2.json b/advisories/unreviewed/2024/01/GHSA-fjfp-5xx8-cgr2/GHSA-fjfp-5xx8-cgr2.json new file mode 100644 index 00000000000..5360a6f896d --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-fjfp-5xx8-cgr2/GHSA-fjfp-5xx8-cgr2.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-fjfp-5xx8-cgr2", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-37445" + ], + "details": "Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the vcd2vzt conversion utility.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37445" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1805" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:16Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-g454-m7r7-f68q/GHSA-g454-m7r7-f68q.json b/advisories/unreviewed/2024/01/GHSA-g454-m7r7-f68q/GHSA-g454-m7r7-f68q.json new file mode 100644 index 00000000000..24d3e19d7ca --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-g454-m7r7-f68q/GHSA-g454-m7r7-f68q.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-g454-m7r7-f68q", + "modified": "2024-01-08T15:30:30Z", + "published": "2024-01-08T15:30:30Z", + "aliases": [ + "CVE-2023-39413" + ], + "details": "Multiple integer underflow vulnerabilities exist in the LXT2 lxt2_rd_iter_radix shift operation functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer underflow when performing the left shift operation.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39413" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1824" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1824" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-191" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-g698-8w35-cq5r/GHSA-g698-8w35-cq5r.json b/advisories/unreviewed/2024/01/GHSA-g698-8w35-cq5r/GHSA-g698-8w35-cq5r.json new file mode 100644 index 00000000000..c76882fbda6 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-g698-8w35-cq5r/GHSA-g698-8w35-cq5r.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-g698-8w35-cq5r", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-35995" + ], + "details": "Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the tdelta indexing when signal_lens is 1.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35995" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1791" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1791" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-129" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-g9rv-78v8-8hq5/GHSA-g9rv-78v8-8hq5.json b/advisories/unreviewed/2024/01/GHSA-g9rv-78v8-8hq5/GHSA-g9rv-78v8-8hq5.json new file mode 100644 index 00000000000..1f2e591b0da --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-g9rv-78v8-8hq5/GHSA-g9rv-78v8-8hq5.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-g9rv-78v8-8hq5", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-37446" + ], + "details": "Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the vcd2lxt2 conversion utility.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37446" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1805" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-gc44-mvvx-cvhm/GHSA-gc44-mvvx-cvhm.json b/advisories/unreviewed/2024/01/GHSA-gc44-mvvx-cvhm/GHSA-gc44-mvvx-cvhm.json new file mode 100644 index 00000000000..21167e86341 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-gc44-mvvx-cvhm/GHSA-gc44-mvvx-cvhm.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gc44-mvvx-cvhm", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-39270" + ], + "details": "Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `rows` array.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39270" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1818" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1818" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:22Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-gcqr-v3j7-qf2p/GHSA-gcqr-v3j7-qf2p.json b/advisories/unreviewed/2024/01/GHSA-gcqr-v3j7-qf2p/GHSA-gcqr-v3j7-qf2p.json new file mode 100644 index 00000000000..c3e65b8237a --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-gcqr-v3j7-qf2p/GHSA-gcqr-v3j7-qf2p.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gcqr-v3j7-qf2p", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-35970" + ], + "details": "Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 chain_table parsing functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the chain_table of the `FST_BL_VCDATA_DYN_ALIAS2` section type.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35970" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1789" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1789" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-gqwq-w99c-9rc2/GHSA-gqwq-w99c-9rc2.json b/advisories/unreviewed/2024/01/GHSA-gqwq-w99c-9rc2/GHSA-gqwq-w99c-9rc2.json new file mode 100644 index 00000000000..d1763cfd5e3 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-gqwq-w99c-9rc2/GHSA-gqwq-w99c-9rc2.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gqwq-w99c-9rc2", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-37442" + ], + "details": "Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds read when triggered via the GUI's default VCD parsing code.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37442" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1805" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:16Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-gv7v-cr3p-w5q7/GHSA-gv7v-cr3p-w5q7.json b/advisories/unreviewed/2024/01/GHSA-gv7v-cr3p-w5q7/GHSA-gv7v-cr3p-w5q7.json new file mode 100644 index 00000000000..c855504e93c --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-gv7v-cr3p-w5q7/GHSA-gv7v-cr3p-w5q7.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gv7v-cr3p-w5q7", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-37447" + ], + "details": "Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the vcd2lxt conversion utility.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37447" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1805" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-gx5r-5h4q-3h4f/GHSA-gx5r-5h4q-3h4f.json b/advisories/unreviewed/2024/01/GHSA-gx5r-5h4q-3h4f/GHSA-gx5r-5h4q-3h4f.json new file mode 100644 index 00000000000..f9f3087c0ed --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-gx5r-5h4q-3h4f/GHSA-gx5r-5h4q-3h4f.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gx5r-5h4q-3h4f", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-38623" + ], + "details": "Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `vindex_offset` array.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38623" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1812" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:20Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-h25w-qh4w-j2hf/GHSA-h25w-qh4w-j2hf.json b/advisories/unreviewed/2024/01/GHSA-h25w-qh4w-j2hf/GHSA-h25w-qh4w-j2hf.json new file mode 100644 index 00000000000..495a84bf150 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-h25w-qh4w-j2hf/GHSA-h25w-qh4w-j2hf.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-h25w-qh4w-j2hf", + "modified": "2024-01-08T15:30:27Z", + "published": "2024-01-08T15:30:27Z", + "aliases": [ + "CVE-2023-7224" + ], + "details": "OpenVPN Connect version 3.0 through 3.4.6 on macOS allows local users to execute code in external third party libraries using the DYLD_INSERT_LIBRARIES environment variable", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-7224" + }, + { + "type": "WEB", + "url": "https://openvpn.net/vpn-server-resources/openvpn-connect-for-macos-change-log/" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-95" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T14:15:47Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-h2f9-xfxp-2rvx/GHSA-h2f9-xfxp-2rvx.json b/advisories/unreviewed/2024/01/GHSA-h2f9-xfxp-2rvx/GHSA-h2f9-xfxp-2rvx.json new file mode 100644 index 00000000000..9e4eec2af70 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-h2f9-xfxp-2rvx/GHSA-h2f9-xfxp-2rvx.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-h2f9-xfxp-2rvx", + "modified": "2024-01-08T15:30:27Z", + "published": "2024-01-08T15:30:27Z", + "aliases": [ + "CVE-2023-35702" + ], + "details": "Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the fstReaderVarint32 function.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35702" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1783" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1783" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-121" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-h2jx-f8c9-6v68/GHSA-h2jx-f8c9-6v68.json b/advisories/unreviewed/2024/01/GHSA-h2jx-f8c9-6v68/GHSA-h2jx-f8c9-6v68.json new file mode 100644 index 00000000000..9e749a727cb --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-h2jx-f8c9-6v68/GHSA-h2jx-f8c9-6v68.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-h2jx-f8c9-6v68", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-37575" + ], + "details": "Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the use-after-free when triggered via the GUI's interactive VCD parsing code.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37575" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1806" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-hj28-g29j-qvp6/GHSA-hj28-g29j-qvp6.json b/advisories/unreviewed/2024/01/GHSA-hj28-g29j-qvp6/GHSA-hj28-g29j-qvp6.json new file mode 100644 index 00000000000..e36f43501b8 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-hj28-g29j-qvp6/GHSA-hj28-g29j-qvp6.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hj28-g29j-qvp6", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-37922" + ], + "details": "Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the arbitrary write when triggered via the vcd2lxt2 conversion utility.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37922" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1807" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1807" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-118" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:18Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-hp86-fc6r-wg46/GHSA-hp86-fc6r-wg46.json b/advisories/unreviewed/2024/01/GHSA-hp86-fc6r-wg46/GHSA-hp86-fc6r-wg46.json new file mode 100644 index 00000000000..dbb345e699a --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-hp86-fc6r-wg46/GHSA-hp86-fc6r-wg46.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hp86-fc6r-wg46", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-35969" + ], + "details": "Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 chain_table parsing functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the chain_table of `FST_BL_VCDATA` and `FST_BL_VCDATA_DYN_ALIAS` section types.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35969" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1789" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1789" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-hrc8-fc9f-gh45/GHSA-hrc8-fc9f-gh45.json b/advisories/unreviewed/2024/01/GHSA-hrc8-fc9f-gh45/GHSA-hrc8-fc9f-gh45.json new file mode 100644 index 00000000000..4f4e2d44433 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-hrc8-fc9f-gh45/GHSA-hrc8-fc9f-gh45.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hrc8-fc9f-gh45", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-37282" + ], + "details": "An out-of-bounds write vulnerability exists in the VZT LZMA_Read dmem extraction functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37282" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1810" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:15Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-j44v-ghf8-cf8j/GHSA-j44v-ghf8-cf8j.json b/advisories/unreviewed/2024/01/GHSA-j44v-ghf8-cf8j/GHSA-j44v-ghf8-cf8j.json new file mode 100644 index 00000000000..cade1eff94d --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-j44v-ghf8-cf8j/GHSA-j44v-ghf8-cf8j.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-j44v-ghf8-cf8j", + "modified": "2024-01-08T15:30:30Z", + "published": "2024-01-08T15:30:30Z", + "aliases": [ + "CVE-2023-39444" + ], + "details": "Multiple out-of-bounds write vulnerabilities exist in the LXT2 parsing functionality of GTKWave 3.3.115. A specially-crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write perfomed by the string copy loop.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39444" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1826" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:25Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-j68r-vcw2-6wm6/GHSA-j68r-vcw2-6wm6.json b/advisories/unreviewed/2024/01/GHSA-j68r-vcw2-6wm6/GHSA-j68r-vcw2-6wm6.json new file mode 100644 index 00000000000..f9d52887fb5 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-j68r-vcw2-6wm6/GHSA-j68r-vcw2-6wm6.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-j68r-vcw2-6wm6", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-37420" + ], + "details": "Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the vcd2lxt conversion utility.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37420" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1804" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1804" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-787" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:16Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-jh6m-g253-f37c/GHSA-jh6m-g253-f37c.json b/advisories/unreviewed/2024/01/GHSA-jh6m-g253-f37c/GHSA-jh6m-g253-f37c.json new file mode 100644 index 00000000000..1892dc0caa8 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-jh6m-g253-f37c/GHSA-jh6m-g253-f37c.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-jh6m-g253-f37c", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-38622" + ], + "details": "Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `len` array.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38622" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1812" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:20Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-m93g-v4mv-3ggr/GHSA-m93g-v4mv-3ggr.json b/advisories/unreviewed/2024/01/GHSA-m93g-v4mv-3ggr/GHSA-m93g-v4mv-3ggr.json new file mode 100644 index 00000000000..916bb1ed543 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-m93g-v4mv-3ggr/GHSA-m93g-v4mv-3ggr.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-m93g-v4mv-3ggr", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-38619" + ], + "details": "Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `msb` array.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38619" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1812" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:19Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-mcwj-fc2v-3xc2/GHSA-mcwj-fc2v-3xc2.json b/advisories/unreviewed/2024/01/GHSA-mcwj-fc2v-3xc2/GHSA-mcwj-fc2v-3xc2.json new file mode 100644 index 00000000000..847793fc27c --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-mcwj-fc2v-3xc2/GHSA-mcwj-fc2v-3xc2.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mcwj-fc2v-3xc2", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-35992" + ], + "details": "An integer overflow vulnerability exists in the FST fstReaderIterBlocks2 vesc allocation functionality of GTKWave 3.3.115, when compiled as a 32-bit binary. A specially crafted .fst file can lead to memory corruption. A victim would need to open a malicious file to trigger this vulnerability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35992" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1790" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1790" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-mf6c-8r47-23j5/GHSA-mf6c-8r47-23j5.json b/advisories/unreviewed/2024/01/GHSA-mf6c-8r47-23j5/GHSA-mf6c-8r47-23j5.json new file mode 100644 index 00000000000..8b17930d51f --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-mf6c-8r47-23j5/GHSA-mf6c-8r47-23j5.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mf6c-8r47-23j5", + "modified": "2024-01-08T15:30:27Z", + "published": "2024-01-08T15:30:27Z", + "aliases": [ + "CVE-2024-0321" + ], + "details": "Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0321" + }, + { + "type": "WEB", + "url": "https://github.com/gpac/gpac/commit/d0ced41651b279bb054eb6390751e2d4eb84819a" + }, + { + "type": "WEB", + "url": "https://huntr.com/bounties/4c027b94-8e9c-4c31-a169-893b25047769" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-121" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T13:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-mf7c-gj3r-c59v/GHSA-mf7c-gj3r-c59v.json b/advisories/unreviewed/2024/01/GHSA-mf7c-gj3r-c59v/GHSA-mf7c-gj3r-c59v.json new file mode 100644 index 00000000000..888456ea6e5 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-mf7c-gj3r-c59v/GHSA-mf7c-gj3r-c59v.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mf7c-gj3r-c59v", + "modified": "2024-01-08T15:30:27Z", + "published": "2024-01-08T15:30:27Z", + "aliases": [ + "CVE-2023-35958" + ], + "details": "Multiple heap-based buffer overflow vulnerabilities exist in the fstReaderIterBlocks2 VCDATA parsing functionality of GTKWave 3.3.115. A specially-crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the copy function `fstFread`.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35958" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1785" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1785" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:11Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-mhrq-7p7f-w264/GHSA-mhrq-7p7f-w264.json b/advisories/unreviewed/2024/01/GHSA-mhrq-7p7f-w264/GHSA-mhrq-7p7f-w264.json new file mode 100644 index 00000000000..505bb7a0a9c --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-mhrq-7p7f-w264/GHSA-mhrq-7p7f-w264.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mhrq-7p7f-w264", + "modified": "2024-01-08T15:30:30Z", + "published": "2024-01-08T15:30:30Z", + "aliases": [ + "CVE-2023-39317" + ], + "details": "Multiple integer overflow vulnerabilities exist in the LXT2 num_dict_entries functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `string_lens` array.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39317" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1820" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:24Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-mpwp-23xv-7j3h/GHSA-mpwp-23xv-7j3h.json b/advisories/unreviewed/2024/01/GHSA-mpwp-23xv-7j3h/GHSA-mpwp-23xv-7j3h.json new file mode 100644 index 00000000000..252f69b8634 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-mpwp-23xv-7j3h/GHSA-mpwp-23xv-7j3h.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mpwp-23xv-7j3h", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-37443" + ], + "details": "Multiple out-of-bounds read vulnerabilities exist in the VCD var definition section functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds read when triggered via the GUI's legacy VCD parsing code.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37443" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1805" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:16Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-mxjm-rf6p-f3mh/GHSA-mxjm-rf6p-f3mh.json b/advisories/unreviewed/2024/01/GHSA-mxjm-rf6p-f3mh/GHSA-mxjm-rf6p-f3mh.json new file mode 100644 index 00000000000..25b419e2b3d --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-mxjm-rf6p-f3mh/GHSA-mxjm-rf6p-f3mh.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mxjm-rf6p-f3mh", + "modified": "2024-01-08T15:30:27Z", + "published": "2024-01-08T15:30:27Z", + "aliases": [ + "CVE-2023-35704" + ], + "details": "Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the fstReaderVarint32WithSkip function.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35704" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1783" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1783" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-121" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-p58m-jmcr-h3gh/GHSA-p58m-jmcr-h3gh.json b/advisories/unreviewed/2024/01/GHSA-p58m-jmcr-h3gh/GHSA-p58m-jmcr-h3gh.json new file mode 100644 index 00000000000..8aee1ac201d --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-p58m-jmcr-h3gh/GHSA-p58m-jmcr-h3gh.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-p58m-jmcr-h3gh", + "modified": "2024-01-08T15:30:27Z", + "published": "2024-01-08T15:30:27Z", + "aliases": [ + "CVE-2023-35959" + ], + "details": "Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file can lead to arbitrary command execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns `.ghw` decompression.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35959" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1786" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-78" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:11Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-ph8w-v57g-j3g7/GHSA-ph8w-v57g-j3g7.json b/advisories/unreviewed/2024/01/GHSA-ph8w-v57g-j3g7/GHSA-ph8w-v57g-j3g7.json new file mode 100644 index 00000000000..9aa89e2072d --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-ph8w-v57g-j3g7/GHSA-ph8w-v57g-j3g7.json @@ -0,0 +1,43 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-ph8w-v57g-j3g7", + "modified": "2024-01-08T15:30:27Z", + "published": "2024-01-08T15:30:27Z", + "aliases": [ + "CVE-2023-6552" + ], + "details": "Lack of \"current\" GET parameter validation during the action of changing a language leads to an open redirect vulnerability.\n", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6552" + }, + { + "type": "WEB", + "url": "https://github.com/TasmoAdmin/TasmoAdmin/pull/1039" + }, + { + "type": "WEB", + "url": "https://cert.pl/en/posts/2024/01/CVE-2023-6552/" + }, + { + "type": "WEB", + "url": "https://cert.pl/posts/2024/01/CVE-2023-6552/" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-601" + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T13:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-pjpq-gg4j-5jg3/GHSA-pjpq-gg4j-5jg3.json b/advisories/unreviewed/2024/01/GHSA-pjpq-gg4j-5jg3/GHSA-pjpq-gg4j-5jg3.json new file mode 100644 index 00000000000..d068dca51cb --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-pjpq-gg4j-5jg3/GHSA-pjpq-gg4j-5jg3.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-pjpq-gg4j-5jg3", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-38653" + ], + "details": "Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode dict parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when num_time_ticks is zero.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38653" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1815" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1815" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:22Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-q4gv-76qv-qh34/GHSA-q4gv-76qv-qh34.json b/advisories/unreviewed/2024/01/GHSA-q4gv-76qv-qh34/GHSA-q4gv-76qv-qh34.json new file mode 100644 index 00000000000..838eee15a1a --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-q4gv-76qv-qh34/GHSA-q4gv-76qv-qh34.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-q4gv-76qv-qh34", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-37574" + ], + "details": "Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the use-after-free when triggered via the GUI's legacy VCD parsing code.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37574" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1806" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-q8wr-886h-q847/GHSA-q8wr-886h-q847.json b/advisories/unreviewed/2024/01/GHSA-q8wr-886h-q847/GHSA-q8wr-886h-q847.json new file mode 100644 index 00000000000..c91f19ac80b --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-q8wr-886h-q847/GHSA-q8wr-886h-q847.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-q8wr-886h-q847", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-38621" + ], + "details": "Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `flags` array.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38621" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1812" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:20Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-qf87-w7v3-9256/GHSA-qf87-w7v3-9256.json b/advisories/unreviewed/2024/01/GHSA-qf87-w7v3-9256/GHSA-qf87-w7v3-9256.json new file mode 100644 index 00000000000..c50585b6667 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-qf87-w7v3-9256/GHSA-qf87-w7v3-9256.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qf87-w7v3-9256", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-35994" + ], + "details": "Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the tdelta initialization part.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35994" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1791" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1791" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-129" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-r287-6vw5-j92p/GHSA-r287-6vw5-j92p.json b/advisories/unreviewed/2024/01/GHSA-r287-6vw5-j92p/GHSA-r287-6vw5-j92p.json new file mode 100644 index 00000000000..3628da8d8a0 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-r287-6vw5-j92p/GHSA-r287-6vw5-j92p.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-r287-6vw5-j92p", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-37419" + ], + "details": "Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the vcd2lxt2 conversion utility.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37419" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1804" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1804" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-787" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:15Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-r9wf-mqxc-cfhw/GHSA-r9wf-mqxc-cfhw.json b/advisories/unreviewed/2024/01/GHSA-r9wf-mqxc-cfhw/GHSA-r9wf-mqxc-cfhw.json new file mode 100644 index 00000000000..fa04976b3f3 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-r9wf-mqxc-cfhw/GHSA-r9wf-mqxc-cfhw.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-r9wf-mqxc-cfhw", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-39272" + ], + "details": "Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `lsb` array.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39272" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1818" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1818" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:23Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-rjfr-rgjj-mvh5/GHSA-rjfr-rgjj-mvh5.json b/advisories/unreviewed/2024/01/GHSA-rjfr-rgjj-mvh5/GHSA-rjfr-rgjj-mvh5.json new file mode 100644 index 00000000000..7a1bee5b6e7 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-rjfr-rgjj-mvh5/GHSA-rjfr-rgjj-mvh5.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rjfr-rgjj-mvh5", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-38618" + ], + "details": "Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `rows` array.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38618" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1812" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:19Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-rvrj-4wjw-6h5r/GHSA-rvrj-4wjw-6h5r.json b/advisories/unreviewed/2024/01/GHSA-rvrj-4wjw-6h5r/GHSA-rvrj-4wjw-6h5r.json index 77614912cf0..51fc66ceb15 100644 --- a/advisories/unreviewed/2024/01/GHSA-rvrj-4wjw-6h5r/GHSA-rvrj-4wjw-6h5r.json +++ b/advisories/unreviewed/2024/01/GHSA-rvrj-4wjw-6h5r/GHSA-rvrj-4wjw-6h5r.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-rvrj-4wjw-6h5r", - "modified": "2024-01-01T15:30:33Z", + "modified": "2024-01-08T15:30:26Z", "published": "2024-01-01T15:30:33Z", "aliases": [ "CVE-2023-6037" ], "details": "The WP TripAdvisor Review Slider WordPress plugin before 11.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-01-01T15:15:43Z" diff --git a/advisories/unreviewed/2024/01/GHSA-v3r4-2w85-9v4h/GHSA-v3r4-2w85-9v4h.json b/advisories/unreviewed/2024/01/GHSA-v3r4-2w85-9v4h/GHSA-v3r4-2w85-9v4h.json new file mode 100644 index 00000000000..5bbc9c7f600 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-v3r4-2w85-9v4h/GHSA-v3r4-2w85-9v4h.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v3r4-2w85-9v4h", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-38652" + ], + "details": "Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode dict parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when num_time_ticks is not zero.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38652" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1815" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1815" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:21Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-v74j-582j-7x9r/GHSA-v74j-582j-7x9r.json b/advisories/unreviewed/2024/01/GHSA-v74j-582j-7x9r/GHSA-v74j-582j-7x9r.json new file mode 100644 index 00000000000..6d62386b8bc --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-v74j-582j-7x9r/GHSA-v74j-582j-7x9r.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v74j-582j-7x9r", + "modified": "2024-01-08T15:30:27Z", + "published": "2024-01-08T15:30:27Z", + "aliases": [ + "CVE-2023-34436" + ], + "details": "An out-of-bounds write vulnerability exists in the LXT2 num_time_table_entries functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger this vulnerability.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-34436" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1819" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-vcr2-xx88-49q8/GHSA-vcr2-xx88-49q8.json b/advisories/unreviewed/2024/01/GHSA-vcr2-xx88-49q8/GHSA-vcr2-xx88-49q8.json new file mode 100644 index 00000000000..b6d261099b2 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-vcr2-xx88-49q8/GHSA-vcr2-xx88-49q8.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vcr2-xx88-49q8", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-35962" + ], + "details": "Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file can lead to arbitrary command execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns decompression in the `vcd2vzt` utility.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35962" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1786" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-78" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:11Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-vfvj-chxf-p8qg/GHSA-vfvj-chxf-p8qg.json b/advisories/unreviewed/2024/01/GHSA-vfvj-chxf-p8qg/GHSA-vfvj-chxf-p8qg.json new file mode 100644 index 00000000000..0fabafc1eb8 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-vfvj-chxf-p8qg/GHSA-vfvj-chxf-p8qg.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vfvj-chxf-p8qg", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-37417" + ], + "details": "Multiple out-of-bounds write vulnerabilities exist in the VCD parse_valuechange portdump functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write when triggered via the GUI's interactive VCD parsing code.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37417" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1804" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1804" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-787" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:15Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-w3h6-hxc2-v9v7/GHSA-w3h6-hxc2-v9v7.json b/advisories/unreviewed/2024/01/GHSA-w3h6-hxc2-v9v7/GHSA-w3h6-hxc2-v9v7.json new file mode 100644 index 00000000000..abc88c543e8 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-w3h6-hxc2-v9v7/GHSA-w3h6-hxc2-v9v7.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w3h6-hxc2-v9v7", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-38620" + ], + "details": "Multiple integer overflow vulnerabilities exist in the VZT facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `lsb` array.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38620" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1812" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:19Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-w634-c25w-x24v/GHSA-w634-c25w-x24v.json b/advisories/unreviewed/2024/01/GHSA-w634-c25w-x24v/GHSA-w634-c25w-x24v.json new file mode 100644 index 00000000000..b4ba241d2eb --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-w634-c25w-x24v/GHSA-w634-c25w-x24v.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w634-c25w-x24v", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-38651" + ], + "details": "Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode times parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when num_time_ticks is zero.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38651" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1814" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:21Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-wvgv-79m5-4g2m/GHSA-wvgv-79m5-4g2m.json b/advisories/unreviewed/2024/01/GHSA-wvgv-79m5-4g2m/GHSA-wvgv-79m5-4g2m.json new file mode 100644 index 00000000000..f039120a54f --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-wvgv-79m5-4g2m/GHSA-wvgv-79m5-4g2m.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wvgv-79m5-4g2m", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-37923" + ], + "details": "Multiple arbitrary write vulnerabilities exist in the VCD sorted bsearch functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the arbitrary write when triggered via the vcd2lxt conversion utility.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37923" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1807" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1807" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-118" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:18Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-wx5h-wrh7-xg39/GHSA-wx5h-wrh7-xg39.json b/advisories/unreviewed/2024/01/GHSA-wx5h-wrh7-xg39/GHSA-wx5h-wrh7-xg39.json new file mode 100644 index 00000000000..fa3cd00c215 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-wx5h-wrh7-xg39/GHSA-wx5h-wrh7-xg39.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wx5h-wrh7-xg39", + "modified": "2024-01-08T15:30:27Z", + "published": "2024-01-08T15:30:27Z", + "aliases": [ + "CVE-2023-35703" + ], + "details": "Multiple stack-based buffer overflow vulnerabilities exist in the FST LEB128 varint functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the fstReaderVarint64 function.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35703" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1783" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1783" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-121" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-x9j3-j6j9-8j5g/GHSA-x9j3-j6j9-8j5g.json b/advisories/unreviewed/2024/01/GHSA-x9j3-j6j9-8j5g/GHSA-x9j3-j6j9-8j5g.json new file mode 100644 index 00000000000..c02070b9eb1 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-x9j3-j6j9-8j5g/GHSA-x9j3-j6j9-8j5g.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-x9j3-j6j9-8j5g", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-38649" + ], + "details": "Multiple out-of-bounds write vulnerabilities exist in the VZT vzt_rd_get_facname decompression functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the out-of-bounds write perfomed by the string copy loop.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38649" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1813" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1813" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:21Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-xg93-r7c4-27gc/GHSA-xg93-r7c4-27gc.json b/advisories/unreviewed/2024/01/GHSA-xg93-r7c4-27gc/GHSA-xg93-r7c4-27gc.json new file mode 100644 index 00000000000..a8deaf972b2 --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-xg93-r7c4-27gc/GHSA-xg93-r7c4-27gc.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-xg93-r7c4-27gc", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-38650" + ], + "details": "Multiple integer overflow vulnerabilities exist in the VZT vzt_rd_block_vch_decode times parsing functionality of GTKWave 3.3.115. A specially crafted .vzt file can lead to memory corruption. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when num_time_ticks is not zero.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-38650" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1814" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:21Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-xh7j-grp8-cc5p/GHSA-xh7j-grp8-cc5p.json b/advisories/unreviewed/2024/01/GHSA-xh7j-grp8-cc5p/GHSA-xh7j-grp8-cc5p.json new file mode 100644 index 00000000000..5c39921107d --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-xh7j-grp8-cc5p/GHSA-xh7j-grp8-cc5p.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-xh7j-grp8-cc5p", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-39275" + ], + "details": "Multiple integer overflow vulnerabilities exist in the LXT2 facgeometry parsing functionality of GTKWave 3.3.115. A specially crafted .lxt2 file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the integer overflow when allocating the `value` array.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-39275" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1818" + }, + { + "type": "WEB", + "url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1818" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-190" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:23Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-xq8j-75w7-8q64/GHSA-xq8j-75w7-8q64.json b/advisories/unreviewed/2024/01/GHSA-xq8j-75w7-8q64/GHSA-xq8j-75w7-8q64.json new file mode 100644 index 00000000000..85e5efb04be --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-xq8j-75w7-8q64/GHSA-xq8j-75w7-8q64.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-xq8j-75w7-8q64", + "modified": "2024-01-08T15:30:28Z", + "published": "2024-01-08T15:30:28Z", + "aliases": [ + "CVE-2023-35961" + ], + "details": "Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file can lead to arbitrary command execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns decompression in `vcd_recorder_main`.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-35961" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1786" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-78" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:11Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/01/GHSA-xxcm-q624-6hcv/GHSA-xxcm-q624-6hcv.json b/advisories/unreviewed/2024/01/GHSA-xxcm-q624-6hcv/GHSA-xxcm-q624-6hcv.json new file mode 100644 index 00000000000..d990a3dbfea --- /dev/null +++ b/advisories/unreviewed/2024/01/GHSA-xxcm-q624-6hcv/GHSA-xxcm-q624-6hcv.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-xxcm-q624-6hcv", + "modified": "2024-01-08T15:30:29Z", + "published": "2024-01-08T15:30:29Z", + "aliases": [ + "CVE-2023-37576" + ], + "details": "Multiple use-after-free vulnerabilities exist in the VCD get_vartoken realloc functionality of GTKWave 3.3.115. A specially crafted .vcd file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability concerns the use-after-free when triggered via the vcd2vzt conversion utility.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-37576" + }, + { + "type": "WEB", + "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1806" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-416" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-01-08T15:15:18Z" + } +} \ No newline at end of file