Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2025-02-13 18:32:48 +00:00
parent 0d45ff94a1
commit 7de0e3ec27
147 changed files with 319 additions and 273 deletions
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-8hr8-h5jx-w7gp",
-  "modified": "2022-04-22T00:24:21Z",
+  "modified": "2025-02-13T18:31:20Z",
  "published": "2022-04-22T00:24:21Z",
  "aliases": [
    "CVE-2011-4595"
  ],
  "details": "Pretty-Link WordPress plugin 1.5.2 has XSS",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -24,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-qgm5-3gxj-29mw",
-  "modified": "2022-12-28T21:30:22Z",
+  "modified": "2025-02-13T18:31:21Z",
  "published": "2022-12-19T09:30:22Z",
  "aliases": [
    "CVE-2022-4427"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-5j3v-r3rh-6vh7",
-  "modified": "2023-01-12T21:30:29Z",
+  "modified": "2025-02-13T18:31:21Z",
  "published": "2023-01-07T00:30:23Z",
  "aliases": [
    "CVE-2022-40201"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-mjxf-pxf8-wjmw",
-  "modified": "2023-02-07T18:30:19Z",
+  "modified": "2025-02-13T18:31:22Z",
  "published": "2023-01-31T03:30:26Z",
  "aliases": [
    "CVE-2022-40258"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-mqw8-q64p-6837",
-  "modified": "2023-01-12T21:30:29Z",
+  "modified": "2025-02-13T18:31:21Z",
  "published": "2023-01-07T00:30:23Z",
  "aliases": [
    "CVE-2022-41613"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-p5j8-2qpf-wxr5",
-  "modified": "2023-01-25T03:30:32Z",
+  "modified": "2025-02-13T18:31:21Z",
  "published": "2023-01-17T21:30:22Z",
  "aliases": [
    "CVE-2006-20001"
@@ -26,6 +26,10 @@
    {
      "type": "WEB",
      "url": "https://security.gentoo.org/glsa/202309-01"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.netapp.com/advisory/ntap-20230316-0005"
    }
  ],
  "database_specific": {
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-r6c5-m6xc-3746",
-  "modified": "2023-01-13T15:30:26Z",
+  "modified": "2025-02-13T18:31:21Z",
  "published": "2023-01-09T12:30:18Z",
  "aliases": [
    "CVE-2022-2196"
@@ -30,6 +30,10 @@
    {
      "type": "WEB",
      "url": "https://lists.debian.org/debian-lts-announce/2023/05/msg00005.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://security.netapp.com/advisory/ntap-20230223-0002"
    }
  ],
  "database_specific": {
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-6gqv-38q3-6c47",
-  "modified": "2023-02-24T18:30:26Z",
+  "modified": "2025-02-13T18:31:24Z",
  "published": "2023-02-16T09:30:29Z",
  "aliases": [
    "CVE-2023-0568"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-r66m-27p7-w8fm",
-  "modified": "2023-03-24T21:30:48Z",
+  "modified": "2025-02-13T18:31:26Z",
  "published": "2023-03-22T15:30:19Z",
  "aliases": [
    "CVE-2023-1281"
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-400"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -26,7 +26,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-426"
+      "CWE-426",
+      "CWE-94"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-4wg5-gmxh-4r2r",
-  "modified": "2023-04-10T21:30:23Z",
+  "modified": "2025-02-13T18:31:28Z",
  "published": "2023-04-04T15:30:27Z",
  "aliases": [
    "CVE-2023-26437"
@@ -33,7 +33,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-400"
+    ],
    "severity": "MODERATE",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-4x5j-gwp5-7hgh",
-  "modified": "2023-04-10T18:30:21Z",
+  "modified": "2025-02-13T18:31:32Z",
  "published": "2023-04-05T00:30:39Z",
  "aliases": [
    "CVE-2023-0486"
@@ -1,12 +1,12 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-c3h9-vpfv-3x4m",
-  "modified": "2024-04-04T03:41:38Z",
+  "modified": "2025-02-13T18:31:34Z",
  "published": "2023-04-26T15:30:21Z",
  "aliases": [
    "CVE-2023-1387"
  ],
-  "details": "Grafana is an open-source platform for monitoring and observability. \n\nStarting with the 9.1 branch, Grafana introduced the ability to search for a JWT in the URL query parameter auth_token and use it as the authentication token. \n\nBy enabling the \"url_login\" configuration option (disabled by default), a JWT might be sent to data sources. If an attacker has access to the data source, the leaked token could be used to authenticate to Grafana.\n\n",
+  "details": "Grafana is an open-source platform for monitoring and observability. \n\nStarting with the 9.1 branch, Grafana introduced the ability to search for a JWT in the URL query parameter auth_token and use it as the authentication token. \n\nBy enabling the \"url_login\" configuration option (disabled by default), a JWT might be sent to data sources. If an attacker has access to the data source, the leaked token could be used to authenticate to Grafana.",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-g23c-4prh-q9fg",
-  "modified": "2023-04-10T18:30:21Z",
+  "modified": "2025-02-13T18:31:30Z",
  "published": "2023-04-05T00:30:39Z",
  "aliases": [
    "CVE-2023-0357"
@@ -1,12 +1,12 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-jhw6-rjph-429f",
-  "modified": "2024-02-29T21:30:51Z",
+  "modified": "2025-02-13T18:31:33Z",
  "published": "2023-04-12T18:30:39Z",
  "aliases": [
    "CVE-2023-1872"
  ],
-  "details": "A use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege escalation.\n\nThe io_file_get_fixed function lacks the presence of ctx->uring_lock which can lead to a Use-After-Free vulnerability due a race condition with fixed files getting unregistered.\n\nWe recommend upgrading past commit da24142b1ef9fd5d36b76e36bab328a5b27523e8.\n\n",
+  "details": "A use-after-free vulnerability in the Linux Kernel io_uring system can be exploited to achieve local privilege escalation.\n\nThe io_file_get_fixed function lacks the presence of ctx->uring_lock which can lead to a Use-After-Free vulnerability due a race condition with fixed files getting unregistered.\n\nWe recommend upgrading past commit da24142b1ef9fd5d36b76e36bab328a5b27523e8.",
  "severity": [
    {
      "type": "CVSS_V3",
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-jv2f-j4fc-4c7g",
-  "modified": "2023-04-10T21:30:23Z",
+  "modified": "2025-02-13T18:31:28Z",
  "published": "2023-04-04T15:30:27Z",
  "aliases": [
    "CVE-2020-23257"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-r6wr-pw22-2qqc",
-  "modified": "2023-04-17T18:30:29Z",
+  "modified": "2025-02-13T18:31:33Z",
  "published": "2023-04-05T00:30:38Z",
  "aliases": [
    "CVE-2023-0738"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-v2w5-mxw3-ccwc",
-  "modified": "2023-04-11T15:30:28Z",
+  "modified": "2025-02-13T18:31:29Z",
  "published": "2023-04-04T18:30:21Z",
  "aliases": [
    "CVE-2023-28613"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-w4fp-2356-fr6f",
-  "modified": "2023-04-17T18:30:29Z",
+  "modified": "2025-02-13T18:31:33Z",
  "published": "2023-04-06T00:30:22Z",
  "aliases": [
    "CVE-2022-31888"
--- a/Show More
+++ b/Show More