netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2023-04-14 18:31:47 +00:00
parent 25a2be1ea5
commit 7cf37bfa0b
29 changed files with 195 additions and 107 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/04/GHSA-29vj-5h9f-8qr5/GHSA-29vj-5h9f-8qr5.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-29vj-5h9f-8qr5",
"modified": "2023-04-11T12:30:25Z",
"modified": "2023-04-14T18:30:20Z",
"published": "2023-04-11T12:30:25Z",
"aliases": [
"CVE-2022-47338"
],
"details": "In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-668"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-04-11T12:15:00Z"
advisories/unreviewed/2023/04/GHSA-2p4x-63mg-m275/GHSA-2p4x-63mg-m275.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2p4x-63mg-m275",
"modified": "2023-04-10T21:30:20Z",
"modified": "2023-04-14T18:30:18Z",
"published": "2023-04-10T21:30:20Z",
"aliases": [
"CVE-2023-27178"
],
"details": "An arbitrary file upload vulnerability in the upload function of GDidees CMS 3.9.1 allows attackers to execute arbitrary code via a crafted file.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-434"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-04-10T21:15:00Z"
advisories/unreviewed/2023/04/GHSA-34mm-8vxq-7m2j/GHSA-34mm-8vxq-7m2j.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-34mm-8vxq-7m2j",
"modified": "2023-04-11T03:31:19Z",
"modified": "2023-04-14T18:30:19Z",
"published": "2023-04-11T03:31:19Z",
"aliases": [
"CVE-2023-28341"
],
"details": "Stored Cross site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious javascript on the incorrect login details page.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-04-11T01:15:00Z"
advisories/unreviewed/2023/04/GHSA-367q-63cf-925j/GHSA-367q-63cf-925j.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-367q-63cf-925j",
"modified": "2023-04-10T15:30:24Z",
"modified": "2023-04-14T18:30:18Z",
"published": "2023-04-10T15:30:24Z",
"aliases": [
"CVE-2023-29375"
],
"details": "An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3.8025. There is potentially dangerous file upload through the SharePoint connector.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-434"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-04-10T15:15:00Z"
advisories/unreviewed/2023/04/GHSA-3gqh-xgpm-cfvx/GHSA-3gqh-xgpm-cfvx.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3gqh-xgpm-cfvx",
"modified": "2023-04-05T18:30:18Z",
"modified": "2023-04-14T18:30:20Z",
"published": "2023-04-05T18:30:18Z",
"aliases": [
"CVE-2023-29389"
],
"details": "Toyota RAV4 2021 vehicles automatically trust messages from other ECUs on a CAN bus, which allows physically proximate attackers to drive a vehicle by accessing the control CAN bus after pulling the bumper away and reaching the headlight connector, and then sending forged \"Key is validated\" messages via CAN Injection, as exploited in the wild in (for example) July 2022.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-74"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-04-05T16:15:00Z"
advisories/unreviewed/2023/04/GHSA-44xc-f95p-5vmh/GHSA-44xc-f95p-5vmh.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-44xc-f95p-5vmh",
"modified": "2023-04-07T21:30:15Z",
"modified": "2023-04-14T18:30:19Z",
"published": "2023-04-07T21:30:15Z",
"aliases": [
"CVE-2023-1801"
],
"details": "The SMB protocol decoder in tcpdump version 4.99.3 can perform an out-of-bounds write when decoding a crafted network packet.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-04-07T21:15:00Z"
advisories/unreviewed/2023/04/GHSA-459j-jhfx-fmj6/GHSA-459j-jhfx-fmj6.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-459j-jhfx-fmj6",
"modified": "2023-04-11T03:31:20Z",
"modified": "2023-04-14T18:30:18Z",
"published": "2023-04-11T03:31:20Z",
"aliases": [
"CVE-2022-38604"
],
"details": "Wacom Driver 6.3.46-1 for Windows and lower was discovered to contain an arbitrary file deletion vulnerability.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-59"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-04-11T01:15:00Z"
advisories/unreviewed/2023/04/GHSA-45pp-w4rj-fj8v/GHSA-45pp-w4rj-fj8v.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-45pp-w4rj-fj8v",
"modified": "2023-04-11T12:30:25Z",
"modified": "2023-04-14T18:30:19Z",
"published": "2023-04-11T12:30:25Z",
"aliases": [
"CVE-2022-47336"
],
"details": "In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-04-11T12:15:00Z"
advisories/unreviewed/2023/04/GHSA-4j2h-6232-f9wf/GHSA-4j2h-6232-f9wf.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4j2h-6232-f9wf",
"modified": "2023-04-11T03:31:19Z",
"modified": "2023-04-14T18:30:18Z",
"published": "2023-04-11T03:31:19Z",
"aliases": [
"CVE-2023-27191"
],
"details": "An issue found in DUALSPACE Super Secuirty v.2.3.7 allows an attacker to cause a denial of service via the SharedPreference files.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-400"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-04-11T01:15:00Z"
advisories/unreviewed/2023/04/GHSA-587p-pvvj-3ghc/GHSA-587p-pvvj-3ghc.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-587p-pvvj-3ghc",
"modified": "2023-04-10T18:30:21Z",
"modified": "2023-04-14T18:30:19Z",
"published": "2023-04-10T18:30:21Z",
"aliases": [
"CVE-2015-10100"
],
"details": "A vulnerability, which was classified as critical, has been found in Dynamic Widgets Plugin up to 1.5.10. This issue affects some unknown processing of the file classes/dynwid_class.php. The manipulation leads to sql injection. The attack may be initiated remotely. Upgrading to version 1.5.11 is able to address this issue. The name of the patch is d0a19c6efcdc86d7093b369bc9e29a0629e57795. It is recommended to upgrade the affected component. The identifier VDB-225353 was assigned to this vulnerability.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -39,7 +42,7 @@
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-04-10T18:15:00Z"
advisories/unreviewed/2023/04/GHSA-5rpj-29cm-cpqf/GHSA-5rpj-29cm-cpqf.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5rpj-29cm-cpqf",
"modified": "2023-04-11T12:30:25Z",
"modified": "2023-04-14T18:30:19Z",
"published": "2023-04-11T12:30:25Z",
"aliases": [
"CVE-2022-47466"
],
"details": "In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-04-11T12:15:00Z"
advisories/unreviewed/2023/04/GHSA-64jx-9wjf-vr92/GHSA-64jx-9wjf-vr92.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-64jx-9wjf-vr92",
"modified": "2023-04-10T18:30:22Z",
"modified": "2023-04-14T18:30:19Z",
"published": "2023-04-10T18:30:22Z",
"aliases": [
"CVE-2023-26986"
],
"details": "An issue in China Mobile OA Mailbox PC v2.9.23 allows remote attackers to execute arbitrary commands on a victim host via user interaction with a crafted EML file sent to their OA mailbox.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-04-10T16:15:00Z"
advisories/unreviewed/2023/04/GHSA-8j63-7567-qrrm/GHSA-8j63-7567-qrrm.json
+4
View File
@@ -24,6 +24,10 @@
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28311"
},
{
"type": "WEB",
"url": "http://packetstormsecurity.com/files/171882/Microsoft-Word-Remote-Code-Execution.html"
}
],
"database_specific": {
advisories/unreviewed/2023/04/GHSA-9cpg-q9f9-cq47/GHSA-9cpg-q9f9-cq47.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9cpg-q9f9-cq47",
"modified": "2023-04-06T21:30:18Z",
"modified": "2023-04-14T18:30:19Z",
"published": "2023-04-06T21:30:18Z",
"aliases": [
"CVE-2023-28500"
],
"details": "** UNSUPPORTED WHEN ASSIGNED ** A Java insecure deserialization vulnerability in Adobe LiveCycle ES4 version 11.0 and earlier allows unauthenticated remote attackers to gain operating system code execution by submitting specially crafted Java serialized objects to a specific URL. Adobe LiveCycle ES4 version 11.0.1 and later may be vulnerable if the application is installed with Java environment 7u21 and earlier. Exploitation of the vulnerability depends on two factors: insecure deserialization methods used in the Adobe LiveCycle application, and the use of Java environments 7u21 and earlier. The code execution is performed in the context of the account that is running the Adobe LiveCycle application. If the account is privileged, exploitation provides privileged access to the operating system. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-502"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-04-06T21:15:00Z"
advisories/unreviewed/2023/04/GHSA-c2xc-7cgf-x32h/GHSA-c2xc-7cgf-x32h.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c2xc-7cgf-x32h",
"modified": "2023-04-06T18:30:19Z",
"modified": "2023-04-14T18:30:20Z",
"published": "2023-04-06T18:30:19Z",
"aliases": [
"CVE-2023-0580"
],
"details": "Insecure Storage of Sensitive Information vulnerability in ABB My Control System (on-premise) allows an attacker who successfully exploited this vulnerability to gain access to the secure application data or take control of the application. Of the services that make up the My Control System (on-premise) application, the following ones are affected by this vulnerability: User Interface System Monitoring1 Asset Inventory This issue affects My Control System (on-premise): from 5.0;0 through 5.13.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-922"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-04-06T17:15:00Z"
advisories/unreviewed/2023/04/GHSA-cgw5-jvm7-6f73/GHSA-cgw5-jvm7-6f73.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cgw5-jvm7-6f73",
"modified": "2023-04-10T18:30:22Z",
"modified": "2023-04-14T18:30:19Z",
"published": "2023-04-10T18:30:22Z",
"aliases": [
"CVE-2023-1969"
],
"details": "A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file /admin/inventory/manage_stock.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-225406 is the identifier assigned to this vulnerability.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -35,7 +38,7 @@
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-04-10T16:15:00Z"
advisories/unreviewed/2023/04/GHSA-cprr-rh4x-6x3j/GHSA-cprr-rh4x-6x3j.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cprr-rh4x-6x3j",
"modified": "2023-04-11T12:30:25Z",
"modified": "2023-04-14T18:30:19Z",
"published": "2023-04-11T12:30:25Z",
"aliases": [
"CVE-2022-47463"
],
"details": "In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-04-11T12:15:00Z"
advisories/unreviewed/2023/04/GHSA-fffg-x79m-65gr/GHSA-fffg-x79m-65gr.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fffg-x79m-65gr",
"modified": "2023-04-11T12:30:25Z",
"modified": "2023-04-14T18:30:19Z",
"published": "2023-04-11T12:30:25Z",
"aliases": [
"CVE-2022-47467"
],
"details": "In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-04-11T12:15:00Z"
advisories/unreviewed/2023/04/GHSA-gj52-rqw6-xxqh/GHSA-gj52-rqw6-xxqh.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gj52-rqw6-xxqh",
"modified": "2023-04-11T03:31:20Z",
"modified": "2023-04-14T18:30:19Z",
"published": "2023-04-11T03:31:20Z",
"aliases": [
"CVE-2022-43293"
],
"details": "Wacom Driver 6.3.46-1 for Windows was discovered to contain an arbitrary file write vulnerability via the component \\Wacom\\Wacom_Tablet.exe.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-59"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-04-11T01:15:00Z"
advisories/unreviewed/2023/04/GHSA-gr5r-rfrm-7m5x/GHSA-gr5r-rfrm-7m5x.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gr5r-rfrm-7m5x",
"modified": "2023-04-11T12:30:25Z",
"modified": "2023-04-14T18:30:19Z",
"published": "2023-04-11T12:30:25Z",
"aliases": [
"CVE-2022-47464"
],
"details": "In telecom service, there is a missing permission check. This could lead to local denial of service in telecom service.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2023-04-11T12:15:00Z"

Some files were not shown because too many files have changed in this diff Show More