netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-01-26 18:31:46 +00:00
parent b475d923c3
commit 82cc5e84a2
100 changed files with 1303 additions and 135 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/04/GHSA-4x77-wr7f-56wv/GHSA-4x77-wr7f-56wv.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4x77-wr7f-56wv",
"modified": "2022-04-29T02:57:21Z",
"modified": "2024-01-26T18:30:30Z",
"published": "2022-04-29T02:57:21Z",
"aliases": [
"CVE-2004-0217"
],
"details": "The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -33,7 +36,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-59"
],
"severity": "LOW",
"github_reviewed": false,
advisories/unreviewed/2022/04/GHSA-8cvx-3rg5-x9j3/GHSA-8cvx-3rg5-x9j3.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8cvx-3rg5-x9j3",
"modified": "2022-04-29T02:59:53Z",
"modified": "2024-01-26T18:30:30Z",
"published": "2022-04-29T02:59:53Z",
"aliases": [
"CVE-2004-1603"
],
"details": "cPanel 9.4.1-RELEASE-64 follows hard links, which allows local users to (1) read arbitrary files via the backup feature or (2) chown arbitrary files via the .htaccess file when Front Page extensions are enabled or disabled.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -49,7 +52,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-59"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2022/04/GHSA-8gpj-8888-5722/GHSA-8gpj-8888-5722.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8gpj-8888-5722",
"modified": "2022-04-30T18:18:08Z",
"modified": "2024-01-26T18:30:29Z",
"published": "2022-04-30T18:18:08Z",
"aliases": [
"CVE-2001-1494"
],
"details": "script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
}
],
"affected": [
@@ -57,7 +60,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-59"
],
"severity": "LOW",
"github_reviewed": false,
advisories/unreviewed/2022/04/GHSA-9cg4-m358-cc47/GHSA-9cg4-m358-cc47.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9cg4-m358-cc47",
"modified": "2022-04-30T18:13:45Z",
"modified": "2024-01-26T18:30:28Z",
"published": "2022-04-30T18:13:45Z",
"aliases": [
"CVE-2000-0498"
],
"details": "Unify eWave ServletExec allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -33,7 +36,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-178"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2022/04/GHSA-9fxf-pgc8-6fjq/GHSA-9fxf-pgc8-6fjq.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9fxf-pgc8-6fjq",
"modified": "2022-04-30T18:13:45Z",
"modified": "2024-01-26T18:30:28Z",
"published": "2022-04-30T18:13:45Z",
"aliases": [
"CVE-2000-0497"
],
"details": "IBM WebSphere server 3.0.2 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -33,7 +36,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-178"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2022/04/GHSA-cgm8-c3pr-78fr/GHSA-cgm8-c3pr-78fr.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cgm8-c3pr-78fr",
"modified": "2022-04-30T18:15:12Z",
"modified": "2024-01-26T18:30:29Z",
"published": "2022-04-30T18:15:12Z",
"aliases": [
"CVE-2001-0006"
],
"details": "The Winsock2ProtocolCatalogMutex mutex in Windows NT 4.0 has inappropriate Everyone/Full Control permissions, which allows local users to modify the permissions to \"No Access\" and disable Winsock network connectivity to cause a denial of service, aka the \"Winsock Mutex\" vulnerability.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"
}
],
"affected": [
@@ -33,7 +36,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-732"
],
"severity": "LOW",
"github_reviewed": false,
advisories/unreviewed/2022/04/GHSA-j97v-38wx-6pjj/GHSA-j97v-38wx-6pjj.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-j97v-38wx-6pjj",
"modified": "2022-04-30T18:19:56Z",
"modified": "2024-01-26T18:30:29Z",
"published": "2022-04-30T18:19:56Z",
"aliases": [
"CVE-2002-0793"
],
"details": "Hard link and possibly symbolic link following vulnerabilities in QNX RTOS 4.25 (aka QNX4) allow local users to overwrite arbitrary files via (1) the -f argument to the monitor utility, (2) the -d argument to dumper, (3) the -c argument to crttrap, or (4) using the Watcom sample utility.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
}
],
"affected": [
@@ -57,7 +60,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-59"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2022/04/GHSA-jx8m-xm6x-225q/GHSA-jx8m-xm6x-225q.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jx8m-xm6x-225q",
"modified": "2022-04-29T01:26:40Z",
"modified": "2024-01-26T18:30:30Z",
"published": "2022-04-29T01:26:40Z",
"aliases": [
"CVE-2003-0578"
],
"details": "cci_dir in IBM U2 UniVerse 10.0.0.9 and earlier creates hard links and unlinks files as root, which allows local users to gain privileges by deleting and overwriting arbitrary files.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-59"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2022/04/GHSA-m82x-j38m-84qv/GHSA-m82x-j38m-84qv.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m82x-j38m-84qv",
"modified": "2022-04-29T03:00:25Z",
"modified": "2024-01-26T18:30:30Z",
"published": "2022-04-29T03:00:25Z",
"aliases": [
"CVE-2004-1901"
],
"details": "Portage before 2.0.50-r3 allows local users to overwrite arbitrary files via a hard link attack on the lockfiles.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
}
],
"affected": [
@@ -37,7 +40,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-59"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2022/04/GHSA-mw4j-8wf7-4rfp/GHSA-mw4j-8wf7-4rfp.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mw4j-8wf7-4rfp",
"modified": "2022-04-30T18:11:12Z",
"modified": "2024-01-26T18:30:27Z",
"published": "2022-04-30T18:11:12Z",
"aliases": [
"CVE-1999-0783"
],
"details": "FreeBSD allows local users to conduct a denial of service by creating a hard link from a device special file to a file on an NFS file system.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -29,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-59"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2022/04/GHSA-p742-xf6g-v4h3/GHSA-p742-xf6g-v4h3.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p742-xf6g-v4h3",
"modified": "2022-04-30T18:20:17Z",
"modified": "2024-01-26T18:30:29Z",
"published": "2022-04-30T18:20:17Z",
"aliases": [
"CVE-2002-0969"
],
"details": "Buffer overflow in MySQL daemon (mysqld) before 3.23.50, and 4.0 beta before 4.02, on the Win32 platform, allows local users to execute arbitrary code via a long \"datadir\" parameter in the my.ini initialization file, whose permissions on Windows allow Full Control to the Everyone group.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -45,7 +48,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2022/04/GHSA-pqvf-h958-3qmw/GHSA-pqvf-h958-3qmw.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pqvf-h958-3qmw",
"modified": "2022-04-29T02:58:10Z",
"modified": "2024-01-26T18:30:30Z",
"published": "2022-04-29T02:58:10Z",
"aliases": [
"CVE-2004-0689"
],
"details": "KDE before 3.3.0 does not properly handle when certain symbolic links point to \"stale\" locations, which could allow local users to create or truncate arbitrary files.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"
}
],
"affected": [
@@ -53,7 +56,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-59"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2022/04/GHSA-qc48-8mcw-gxqv/GHSA-qc48-8mcw-gxqv.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qc48-8mcw-gxqv",
"modified": "2022-04-30T18:13:44Z",
"modified": "2024-01-26T18:30:28Z",
"published": "2022-04-30T18:13:44Z",
"aliases": [
"CVE-2000-0499"
],
"details": "The default configuration of BEA WebLogic 3.1.8 through 4.5.1 allows a remote attacker to view source code of a JSP program by requesting a URL which provides the JSP extension in upper case.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -37,7 +40,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-178"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2022/04/GHSA-r44p-pj93-6hhq/GHSA-r44p-pj93-6hhq.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r44p-pj93-6hhq",
"modified": "2022-04-30T18:15:03Z",
"modified": "2024-01-26T18:30:28Z",
"published": "2022-04-30T18:15:03Z",
"aliases": [
"CVE-2000-1178"
],
"details": "Joe text editor follows symbolic links when creating a rescue copy called DEADJOE during an abnormal exit, which allows local users to overwrite the files of other users whose joe session crashes.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
}
],
"affected": [
@@ -53,7 +56,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-59"
],
"severity": "LOW",
"github_reviewed": false,
advisories/unreviewed/2022/04/GHSA-rwp9-w3rx-vf92/GHSA-rwp9-w3rx-vf92.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rwp9-w3rx-vf92",
"modified": "2022-04-30T18:12:22Z",
"modified": "2024-01-26T18:30:27Z",
"published": "2022-04-30T18:12:22Z",
"aliases": [
"CVE-1999-1386"
],
"details": "Perl 5.004_04 and earlier follows symbolic links when running with the -e option, which allows local users to overwrite arbitrary files via a symlink attack on the /tmp/perl-eaXXXXX file.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
}
],
"affected": [
@@ -33,7 +36,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-59"
],
"severity": "LOW",
"github_reviewed": false,
advisories/unreviewed/2022/04/GHSA-wjpj-j5w8-2m2p/GHSA-wjpj-j5w8-2m2p.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wjpj-j5w8-2m2p",
"modified": "2022-04-29T03:00:04Z",
"modified": "2024-01-26T18:30:30Z",
"published": "2022-04-29T03:00:04Z",
"aliases": [
"CVE-2004-1714"
],
"details": "BlackICE PC Protection and Server Protection installs (1) firewall.ini, (2) blackice.ini, (3) sigs.ini and (4) protect.ini with Everyone Full Control permissions, which allows local users to cause a denial of service (crash) or modify configuration, as demonstrated by modifying firewall.ini to contain a large firewall rule.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"
}
],
"affected": [
@@ -37,7 +40,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-732"
],
"severity": "LOW",
"github_reviewed": false,
advisories/unreviewed/2022/04/GHSA-x2cg-9rfp-53mf/GHSA-x2cg-9rfp-53mf.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x2cg-9rfp-53mf",
"modified": "2022-04-30T18:14:40Z",
"modified": "2024-01-26T18:30:28Z",
"published": "2022-04-30T18:14:40Z",
"aliases": [
"CVE-2000-0972"
],
"details": "HP-UX 11.00 crontab allows local users to read arbitrary files via the -e option by creating a symlink to the target file during the crontab session, quitting the session, and reading the error messages that crontab generates.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -29,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-59"
],
"severity": "LOW",
"github_reviewed": false,
advisories/unreviewed/2022/05/GHSA-3m96-w3xc-w9j4/GHSA-3m96-w3xc-w9j4.json
+5 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3m96-w3xc-w9j4",
"modified": "2022-05-01T01:52:18Z",
"modified": "2024-01-26T18:30:30Z",
"published": "2022-05-01T01:52:18Z",
"aliases": [
"CVE-2005-0824"
],
"details": "The internal_dump function in Mathopd before 1.5p5, and 1.6x before 1.6b6 BETA, when Mathopd is running with the -n option, allows local users to overwrite arbitrary files via a symlink attack on dump files that are triggered by a SIGWINCH signal.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
}
],
"affected": [
advisories/unreviewed/2022/05/GHSA-492m-hh57-3gv9/GHSA-492m-hh57-3gv9.json
+7 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-492m-hh57-3gv9",
"modified": "2022-05-02T03:29:59Z",
"modified": "2024-01-26T18:30:30Z",
"published": "2022-05-02T03:29:59Z",
"aliases": [
"CVE-2009-1936"
],
"details": "_functions.php in cpCommerce 1.2.x, possibly including 1.2.9, sends a redirect but does not exit when it is called directly, which allows remote attackers to bypass a protection mechanism to conduct remote file inclusion and directory traversal attacks, execute arbitrary PHP code, or read arbitrary files via the GLOBALS[prefix] parameter, a different vector than CVE-2003-1500.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -33,7 +36,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-20"
"CWE-20",
"CWE-22"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2022/05/GHSA-6gmh-pw6w-cww4/GHSA-6gmh-pw6w-cww4.json
+5 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6gmh-pw6w-cww4",
"modified": "2022-05-02T03:13:48Z",
"modified": "2024-01-26T18:30:30Z",
"published": "2022-05-02T03:13:48Z",
"aliases": [
"CVE-2009-0244"
],
"details": "Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professional, and probably Windows Mobile 5.0 for Pocket PC and 5.0 for Pocket PC Phone Edition, allows remote authenticated users to list arbitrary directories, and create or read arbitrary files, via a .. (dot dot) in a pathname. NOTE: this can be leveraged for code execution by writing to a Startup folder.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [

Some files were not shown because too many files have changed in this diff Show More