diff --git a/advisories/unreviewed/2024/02/GHSA-pfv6-3f5p-j5c6/GHSA-pfv6-3f5p-j5c6.json b/advisories/unreviewed/2024/02/GHSA-pfv6-3f5p-j5c6/GHSA-pfv6-3f5p-j5c6.json index eaa76eae074..d15046b6322 100644 --- a/advisories/unreviewed/2024/02/GHSA-pfv6-3f5p-j5c6/GHSA-pfv6-3f5p-j5c6.json +++ b/advisories/unreviewed/2024/02/GHSA-pfv6-3f5p-j5c6/GHSA-pfv6-3f5p-j5c6.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-pfv6-3f5p-j5c6", - "modified": "2024-10-28T21:30:33Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-02-17T00:31:38Z", "aliases": [ "CVE-2023-45918" ], "details": "ncurses 6.4-20230610 has a NULL pointer dereference in tgetstr in tinfo/lib_termcap.c.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -33,9 +36,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-476" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-16T22:15:07Z" diff --git a/advisories/unreviewed/2024/02/GHSA-rmvf-wrpj-7c43/GHSA-rmvf-wrpj-7c43.json b/advisories/unreviewed/2024/02/GHSA-rmvf-wrpj-7c43/GHSA-rmvf-wrpj-7c43.json index 841b7f09aa7..2beb14acdfc 100644 --- a/advisories/unreviewed/2024/02/GHSA-rmvf-wrpj-7c43/GHSA-rmvf-wrpj-7c43.json +++ b/advisories/unreviewed/2024/02/GHSA-rmvf-wrpj-7c43/GHSA-rmvf-wrpj-7c43.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-rmvf-wrpj-7c43", - "modified": "2024-02-21T18:31:00Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-02-21T18:31:00Z", "aliases": [ "CVE-2023-49100" ], "details": "Trusted Firmware-A (TF-A) before 2.10 has a potential read out-of-bounds in the SDEI service. The input parameter passed in register x1 is not validated well enough in the function sdei_interrupt_bind. The parameter is passed to a call to plat_ic_get_interrupt_type. It can be any arbitrary value passing checks in the function plat_ic_is_sgi. A compromised Normal World (Linux kernel) can enable a root-privileged attacker to issue arbitrary SMC calls. Using this primitive, he can control the content of registers x0 through x6, which are used to send parameters to TF-A. Out-of-bounds addresses can be read in the context of TF-A (EL3). Because the read value is never returned to non-secure memory or in registers, no leak is possible. An attacker can still crash TF-A, however.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -33,9 +36,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-125" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-21T16:15:49Z" diff --git a/advisories/unreviewed/2024/03/GHSA-75r2-hvcc-gw3v/GHSA-75r2-hvcc-gw3v.json b/advisories/unreviewed/2024/03/GHSA-75r2-hvcc-gw3v/GHSA-75r2-hvcc-gw3v.json index 7563f009768..6138ffe2e83 100644 --- a/advisories/unreviewed/2024/03/GHSA-75r2-hvcc-gw3v/GHSA-75r2-hvcc-gw3v.json +++ b/advisories/unreviewed/2024/03/GHSA-75r2-hvcc-gw3v/GHSA-75r2-hvcc-gw3v.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-75r2-hvcc-gw3v", - "modified": "2024-03-12T09:30:42Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-03-12T09:30:42Z", "aliases": [ "CVE-2024-27279" ], "details": "Directory traversal vulnerability exists in a-blog cms Ver.3.1.x series Ver.3.1.9 and earlier, Ver.3.0.x series Ver.3.0.30 and earlier, Ver.2.11.x series Ver.2.11.59 and earlier, Ver.2.10.x series Ver.2.10.51 and earlier, and Ver.2.9 and earlier versions. If this vulnerability is exploited, a user with editor or higher privilege who can login to the product may obtain arbitrary files on the server including password files.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-22" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-12T09:15:10Z" diff --git a/advisories/unreviewed/2024/03/GHSA-8qmp-rpj6-v84x/GHSA-8qmp-rpj6-v84x.json b/advisories/unreviewed/2024/03/GHSA-8qmp-rpj6-v84x/GHSA-8qmp-rpj6-v84x.json index 9875f4a5f24..ca0861fbf8e 100644 --- a/advisories/unreviewed/2024/03/GHSA-8qmp-rpj6-v84x/GHSA-8qmp-rpj6-v84x.json +++ b/advisories/unreviewed/2024/03/GHSA-8qmp-rpj6-v84x/GHSA-8qmp-rpj6-v84x.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-8qmp-rpj6-v84x", - "modified": "2024-03-18T09:30:30Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-03-18T09:30:30Z", "aliases": [ "CVE-2024-27974" ], "details": "Cross-site request forgery vulnerability in FUJIFILM printers which implement CentreWare Internet Services or Internet Services allows a remote unauthenticated attacker to alter user information. In the case the user is an administrator, the settings such as the administrator's ID, password, etc. may be altered. As for the details of affected product names, model numbers, and versions, refer to the information provided by the vendor listed under [References].", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-352" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-18T08:15:06Z" diff --git a/advisories/unreviewed/2024/03/GHSA-mh4q-7w56-2jfp/GHSA-mh4q-7w56-2jfp.json b/advisories/unreviewed/2024/03/GHSA-mh4q-7w56-2jfp/GHSA-mh4q-7w56-2jfp.json index f1ef783eaae..c636c14d64d 100644 --- a/advisories/unreviewed/2024/03/GHSA-mh4q-7w56-2jfp/GHSA-mh4q-7w56-2jfp.json +++ b/advisories/unreviewed/2024/03/GHSA-mh4q-7w56-2jfp/GHSA-mh4q-7w56-2jfp.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-mh4q-7w56-2jfp", - "modified": "2024-03-12T21:31:00Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-03-12T21:31:00Z", "aliases": [ "CVE-2024-24093" ], "details": "SQL Injection vulnerability in Code-projects Scholars Tracking System 1.0 allows attackers to run arbitrary code via Personal Information Update information.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-12T21:15:58Z" diff --git a/advisories/unreviewed/2024/03/GHSA-mhvg-867q-v735/GHSA-mhvg-867q-v735.json b/advisories/unreviewed/2024/03/GHSA-mhvg-867q-v735/GHSA-mhvg-867q-v735.json index 2046d7c4df9..7477d542b6e 100644 --- a/advisories/unreviewed/2024/03/GHSA-mhvg-867q-v735/GHSA-mhvg-867q-v735.json +++ b/advisories/unreviewed/2024/03/GHSA-mhvg-867q-v735/GHSA-mhvg-867q-v735.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-mhvg-867q-v735", - "modified": "2024-03-14T00:31:05Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-03-08T03:31:24Z", "aliases": [ "CVE-2024-23231" ], "details": "A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.6.5, macOS Sonoma 14.4, iOS 17.4 and iPadOS 17.4, watchOS 10.4, iOS 16.7.6 and iPadOS 16.7.6. An app may be able to access user-sensitive data.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" + } ], "affected": [ @@ -59,7 +62,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-08T02:15:47Z" diff --git a/advisories/unreviewed/2024/03/GHSA-prhv-qr49-g94v/GHSA-prhv-qr49-g94v.json b/advisories/unreviewed/2024/03/GHSA-prhv-qr49-g94v/GHSA-prhv-qr49-g94v.json index 8c2ac0ba3af..c5333ca7a98 100644 --- a/advisories/unreviewed/2024/03/GHSA-prhv-qr49-g94v/GHSA-prhv-qr49-g94v.json +++ b/advisories/unreviewed/2024/03/GHSA-prhv-qr49-g94v/GHSA-prhv-qr49-g94v.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-prhv-qr49-g94v", - "modified": "2024-03-12T09:30:41Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-03-12T09:30:41Z", "aliases": [ "CVE-2024-25325" ], "details": "SQL injection vulnerability in Employee Management System v.1.0 allows a local attacker to obtain sensitive information via a crafted payload to the txtemail parameter in the login.php.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-12T08:15:45Z" diff --git a/advisories/unreviewed/2024/03/GHSA-r2h5-w9vh-xvx2/GHSA-r2h5-w9vh-xvx2.json b/advisories/unreviewed/2024/03/GHSA-r2h5-w9vh-xvx2/GHSA-r2h5-w9vh-xvx2.json index 643376cf3e2..66888167a57 100644 --- a/advisories/unreviewed/2024/03/GHSA-r2h5-w9vh-xvx2/GHSA-r2h5-w9vh-xvx2.json +++ b/advisories/unreviewed/2024/03/GHSA-r2h5-w9vh-xvx2/GHSA-r2h5-w9vh-xvx2.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-r2h5-w9vh-xvx2", - "modified": "2024-03-26T12:31:27Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-03-26T12:31:27Z", "aliases": [ "CVE-2024-26018" ], "details": "Cross-site scripting vulnerability exists in TvRock 0.9t8a. An arbitrary script may be executed on the web browser of the user accessing the website that uses the product. Note that the developer was unreachable, therefore, users should consider stop using TvRock 0.9t8a.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-26T10:15:08Z" diff --git a/advisories/unreviewed/2024/03/GHSA-rq8w-523x-4r76/GHSA-rq8w-523x-4r76.json b/advisories/unreviewed/2024/03/GHSA-rq8w-523x-4r76/GHSA-rq8w-523x-4r76.json index 22f202abd32..b6f17acf76f 100644 --- a/advisories/unreviewed/2024/03/GHSA-rq8w-523x-4r76/GHSA-rq8w-523x-4r76.json +++ b/advisories/unreviewed/2024/03/GHSA-rq8w-523x-4r76/GHSA-rq8w-523x-4r76.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-rq8w-523x-4r76", - "modified": "2024-03-19T21:30:29Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-03-19T21:30:29Z", "aliases": [ "CVE-2024-28303" ], "details": "Open Source Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the date parameter at /admin/reports/index.php.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-19T19:15:06Z" diff --git a/advisories/unreviewed/2024/03/GHSA-rw5h-h7xq-wc78/GHSA-rw5h-h7xq-wc78.json b/advisories/unreviewed/2024/03/GHSA-rw5h-h7xq-wc78/GHSA-rw5h-h7xq-wc78.json index 6dc1ce2060d..5b13abaff8d 100644 --- a/advisories/unreviewed/2024/03/GHSA-rw5h-h7xq-wc78/GHSA-rw5h-h7xq-wc78.json +++ b/advisories/unreviewed/2024/03/GHSA-rw5h-h7xq-wc78/GHSA-rw5h-h7xq-wc78.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-rw5h-h7xq-wc78", - "modified": "2024-03-18T12:30:34Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-03-18T12:30:34Z", "aliases": [ "CVE-2023-52613" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrivers/thermal/loongson2_thermal: Fix incorrect PTR_ERR() judgment\n\nPTR_ERR() returns -ENODEV when thermal-zones are undefined, and we need\n-ENODEV as the right value for comparison.\n\nOtherwise, tz->type is NULL when thermal-zones is undefined, resulting\nin the following error:\n\n[ 12.290030] CPU 1 Unable to handle kernel paging request at virtual address fffffffffffffff1, era == 900000000355f410, ra == 90000000031579b8\n[ 12.302877] Oops[#1]:\n[ 12.305190] CPU: 1 PID: 181 Comm: systemd-udevd Not tainted 6.6.0-rc7+ #5385\n[ 12.312304] pc 900000000355f410 ra 90000000031579b8 tp 90000001069e8000 sp 90000001069eba10\n[ 12.320739] a0 0000000000000000 a1 fffffffffffffff1 a2 0000000000000014 a3 0000000000000001\n[ 12.329173] a4 90000001069eb990 a5 0000000000000001 a6 0000000000001001 a7 900000010003431c\n[ 12.337606] t0 fffffffffffffff1 t1 54567fd5da9b4fd4 t2 900000010614ec40 t3 00000000000dc901\n[ 12.346041] t4 0000000000000000 t5 0000000000000004 t6 900000010614ee20 t7 900000000d00b790\n[ 12.354472] t8 00000000000dc901 u0 54567fd5da9b4fd4 s9 900000000402ae10 s0 900000010614ec40\n[ 12.362916] s1 90000000039fced0 s2 ffffffffffffffed s3 ffffffffffffffed s4 9000000003acc000\n[ 12.362931] s5 0000000000000004 s6 fffffffffffff000 s7 0000000000000490 s8 90000001028b2ec8\n[ 12.362938] ra: 90000000031579b8 thermal_add_hwmon_sysfs+0x258/0x300\n[ 12.386411] ERA: 900000000355f410 strscpy+0xf0/0x160\n[ 12.391626] CRMD: 000000b0 (PLV0 -IE -DA +PG DACF=CC DACM=CC -WE)\n[ 12.397898] PRMD: 00000004 (PPLV0 +PIE -PWE)\n[ 12.403678] EUEN: 00000000 (-FPE -SXE -ASXE -BTE)\n[ 12.409859] ECFG: 00071c1c (LIE=2-4,10-12 VS=7)\n[ 12.415882] ESTAT: 00010000 [PIL] (IS= ECode=1 EsubCode=0)\n[ 12.415907] BADV: fffffffffffffff1\n[ 12.415911] PRID: 0014a000 (Loongson-64bit, Loongson-2K1000)\n[ 12.415917] Modules linked in: loongson2_thermal(+) vfat fat uio_pdrv_genirq uio fuse zram zsmalloc\n[ 12.415950] Process systemd-udevd (pid: 181, threadinfo=00000000358b9718, task=00000000ace72fe3)\n[ 12.415961] Stack : 0000000000000dc0 54567fd5da9b4fd4 900000000402ae10 9000000002df9358\n[ 12.415982] ffffffffffffffed 0000000000000004 9000000107a10aa8 90000001002a3410\n[ 12.415999] ffffffffffffffed ffffffffffffffed 9000000107a11268 9000000003157ab0\n[ 12.416016] 9000000107a10aa8 ffffff80020fc0c8 90000001002a3410 ffffffffffffffed\n[ 12.416032] 0000000000000024 ffffff80020cc1e8 900000000402b2a0 9000000003acc000\n[ 12.416048] 90000001002a3410 0000000000000000 ffffff80020f4030 90000001002a3410\n[ 12.416065] 0000000000000000 9000000002df6808 90000001002a3410 0000000000000000\n[ 12.416081] ffffff80020f4030 0000000000000000 90000001002a3410 9000000002df2ba8\n[ 12.416097] 00000000000000b4 90000001002a34f4 90000001002a3410 0000000000000002\n[ 12.416114] ffffff80020f4030 fffffffffffffff0 90000001002a3410 9000000002df2f30\n[ 12.416131] ...\n[ 12.416138] Call Trace:\n[ 12.416142] [<900000000355f410>] strscpy+0xf0/0x160\n[ 12.416167] [<90000000031579b8>] thermal_add_hwmon_sysfs+0x258/0x300\n[ 12.416183] [<9000000003157ab0>] devm_thermal_add_hwmon_sysfs+0x50/0xe0\n[ 12.416200] [] loongson2_thermal_probe+0x128/0x200 [loongson2_thermal]\n[ 12.416232] [<9000000002df6808>] platform_probe+0x68/0x140\n[ 12.416249] [<9000000002df2ba8>] really_probe+0xc8/0x3c0\n[ 12.416269] [<9000000002df2f30>] __driver_probe_device+0x90/0x180\n[ 12.416286] [<9000000002df3058>] driver_probe_device+0x38/0x160\n[ 12.416302] [<9000000002df33a8>] __driver_attach+0xa8/0x200\n[ 12.416314] [<9000000002deffec>] bus_for_each_dev+0x8c/0x120\n[ 12.416330] [<9000000002df198c>] bus_add_driver+0x10c/0x2a0\n[ 12.416346] [<9000000002df46b4>] driver_register+0x74/0x160\n[ 12.416358] [<90000000022201a4>] do_one_initcall+0x84/0x220\n[ 12.416372] [<90000000022f3ab8>] do_init_module+0x58/0x2c0\n[\n---truncated---", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -35,7 +38,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-18T11:15:08Z" diff --git a/advisories/unreviewed/2024/04/GHSA-4262-7rxm-xfp7/GHSA-4262-7rxm-xfp7.json b/advisories/unreviewed/2024/04/GHSA-4262-7rxm-xfp7/GHSA-4262-7rxm-xfp7.json index dbd6e2523ef..8d00ea821e8 100644 --- a/advisories/unreviewed/2024/04/GHSA-4262-7rxm-xfp7/GHSA-4262-7rxm-xfp7.json +++ b/advisories/unreviewed/2024/04/GHSA-4262-7rxm-xfp7/GHSA-4262-7rxm-xfp7.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-4262-7rxm-xfp7", - "modified": "2024-04-03T09:30:32Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-04-03T09:30:32Z", "aliases": [ "CVE-2024-28515" ], "details": "Buffer Overflow vulnerability in CSAPP_Lab CSAPP Lab3 15-213 Fall 20xx allows a remote attacker to execute arbitrary code via the lab3 of csapp,lab3/buflab-update.pl component.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-125" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-04-03T07:15:44Z" diff --git a/advisories/unreviewed/2024/04/GHSA-44wr-9xpq-76v2/GHSA-44wr-9xpq-76v2.json b/advisories/unreviewed/2024/04/GHSA-44wr-9xpq-76v2/GHSA-44wr-9xpq-76v2.json index 8bbdd9c4825..922745ebf09 100644 --- a/advisories/unreviewed/2024/04/GHSA-44wr-9xpq-76v2/GHSA-44wr-9xpq-76v2.json +++ b/advisories/unreviewed/2024/04/GHSA-44wr-9xpq-76v2/GHSA-44wr-9xpq-76v2.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-44wr-9xpq-76v2", - "modified": "2024-04-04T09:30:35Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-04-04T09:30:35Z", "aliases": [ "CVE-2024-26745" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/pseries/iommu: IOMMU table is not initialized for kdump over SR-IOV\n\nWhen kdump kernel tries to copy dump data over SR-IOV, LPAR panics due\nto NULL pointer exception:\n\n Kernel attempted to read user page (0) - exploit attempt? (uid: 0)\n BUG: Kernel NULL pointer dereference on read at 0x00000000\n Faulting instruction address: 0xc000000020847ad4\n Oops: Kernel access of bad area, sig: 11 [#1]\n LE PAGE_SIZE=64K MMU=Radix SMP NR_CPUS=2048 NUMA pSeries\n Modules linked in: mlx5_core(+) vmx_crypto pseries_wdt papr_scm libnvdimm mlxfw tls psample sunrpc fuse overlay squashfs loop\n CPU: 12 PID: 315 Comm: systemd-udevd Not tainted 6.4.0-Test102+ #12\n Hardware name: IBM,9080-HEX POWER10 (raw) 0x800200 0xf000006 of:IBM,FW1060.00 (NH1060_008) hv:phyp pSeries\n NIP: c000000020847ad4 LR: c00000002083b2dc CTR: 00000000006cd18c\n REGS: c000000029162ca0 TRAP: 0300 Not tainted (6.4.0-Test102+)\n MSR: 800000000280b033 CR: 48288244 XER: 00000008\n CFAR: c00000002083b2d8 DAR: 0000000000000000 DSISR: 40000000 IRQMASK: 1\n ...\n NIP _find_next_zero_bit+0x24/0x110\n LR bitmap_find_next_zero_area_off+0x5c/0xe0\n Call Trace:\n dev_printk_emit+0x38/0x48 (unreliable)\n iommu_area_alloc+0xc4/0x180\n iommu_range_alloc+0x1e8/0x580\n iommu_alloc+0x60/0x130\n iommu_alloc_coherent+0x158/0x2b0\n dma_iommu_alloc_coherent+0x3c/0x50\n dma_alloc_attrs+0x170/0x1f0\n mlx5_cmd_init+0xc0/0x760 [mlx5_core]\n mlx5_function_setup+0xf0/0x510 [mlx5_core]\n mlx5_init_one+0x84/0x210 [mlx5_core]\n probe_one+0x118/0x2c0 [mlx5_core]\n local_pci_probe+0x68/0x110\n pci_call_probe+0x68/0x200\n pci_device_probe+0xbc/0x1a0\n really_probe+0x104/0x540\n __driver_probe_device+0xb4/0x230\n driver_probe_device+0x54/0x130\n __driver_attach+0x158/0x2b0\n bus_for_each_dev+0xa8/0x130\n driver_attach+0x34/0x50\n bus_add_driver+0x16c/0x300\n driver_register+0xa4/0x1b0\n __pci_register_driver+0x68/0x80\n mlx5_init+0xb8/0x100 [mlx5_core]\n do_one_initcall+0x60/0x300\n do_init_module+0x7c/0x2b0\n\nAt the time of LPAR dump, before kexec hands over control to kdump\nkernel, DDWs (Dynamic DMA Windows) are scanned and added to the FDT.\nFor the SR-IOV case, default DMA window \"ibm,dma-window\" is removed from\nthe FDT and DDW added, for the device.\n\nNow, kexec hands over control to the kdump kernel.\n\nWhen the kdump kernel initializes, PCI busses are scanned and IOMMU\ngroup/tables created, in pci_dma_bus_setup_pSeriesLP(). For the SR-IOV\ncase, there is no \"ibm,dma-window\". The original commit: b1fc44eaa9ba,\nfixes the path where memory is pre-mapped (direct mapped) to the DDW.\nWhen TCEs are direct mapped, there is no need to initialize IOMMU\ntables.\n\niommu_table_setparms_lpar() only considers \"ibm,dma-window\" property\nwhen initiallizing IOMMU table. In the scenario where TCEs are\ndynamically allocated for SR-IOV, newly created IOMMU table is not\ninitialized. Later, when the device driver tries to enter TCEs for the\nSR-IOV device, NULL pointer execption is thrown from iommu_area_alloc().\n\nThe fix is to initialize the IOMMU table with DDW property stored in the\nFDT. There are 2 points to remember:\n\n\t1. For the dedicated adapter, kdump kernel would encounter both\n\t default and DDW in FDT. In this case, DDW property is used to\n\t initialize the IOMMU table.\n\n\t2. A DDW could be direct or dynamic mapped. kdump kernel would\n\t initialize IOMMU table and mark the existing DDW as\n\t \"dynamic\". This works fine since, at the time of table\n\t initialization, iommu_table_clear() makes some space in the\n\t DDW, for some predefined number of TCEs which are needed for\n\t kdump to succeed.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -39,7 +42,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-04-04T09:15:07Z" diff --git a/advisories/unreviewed/2024/04/GHSA-6r8g-4hxg-92rf/GHSA-6r8g-4hxg-92rf.json b/advisories/unreviewed/2024/04/GHSA-6r8g-4hxg-92rf/GHSA-6r8g-4hxg-92rf.json index 76f1049b3b6..b01db7d06dc 100644 --- a/advisories/unreviewed/2024/04/GHSA-6r8g-4hxg-92rf/GHSA-6r8g-4hxg-92rf.json +++ b/advisories/unreviewed/2024/04/GHSA-6r8g-4hxg-92rf/GHSA-6r8g-4hxg-92rf.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-6r8g-4hxg-92rf", - "modified": "2024-04-08T09:31:13Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-04-08T09:31:13Z", "aliases": [ "CVE-2023-52542" ], "details": "Permission verification vulnerability in the system module.\nImpact: Successful exploitation of this vulnerability will affect availability.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-04-08T09:15:08Z" diff --git a/advisories/unreviewed/2024/04/GHSA-7fq4-6h7w-vrrr/GHSA-7fq4-6h7w-vrrr.json b/advisories/unreviewed/2024/04/GHSA-7fq4-6h7w-vrrr/GHSA-7fq4-6h7w-vrrr.json index d01bffea752..75f2f69e790 100644 --- a/advisories/unreviewed/2024/04/GHSA-7fq4-6h7w-vrrr/GHSA-7fq4-6h7w-vrrr.json +++ b/advisories/unreviewed/2024/04/GHSA-7fq4-6h7w-vrrr/GHSA-7fq4-6h7w-vrrr.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-7fq4-6h7w-vrrr", - "modified": "2024-04-16T00:30:32Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-04-16T00:30:32Z", "aliases": [ "CVE-2020-22540" ], "details": "Stored Cross-Site Scripting (XSS) vulnerability in Codoforum v4.9, allows attackers to execute arbitrary code and obtain sensitive information via crafted payload to Category name component.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-04-15T23:15:06Z" diff --git a/advisories/unreviewed/2024/04/GHSA-7jww-g2f4-24pc/GHSA-7jww-g2f4-24pc.json b/advisories/unreviewed/2024/04/GHSA-7jww-g2f4-24pc/GHSA-7jww-g2f4-24pc.json index 9570c1c379e..2442d73c78e 100644 --- a/advisories/unreviewed/2024/04/GHSA-7jww-g2f4-24pc/GHSA-7jww-g2f4-24pc.json +++ b/advisories/unreviewed/2024/04/GHSA-7jww-g2f4-24pc/GHSA-7jww-g2f4-24pc.json @@ -28,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-125" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/05/GHSA-35q9-qwff-qmh4/GHSA-35q9-qwff-qmh4.json b/advisories/unreviewed/2024/05/GHSA-35q9-qwff-qmh4/GHSA-35q9-qwff-qmh4.json index 888114255e7..57fc08b818c 100644 --- a/advisories/unreviewed/2024/05/GHSA-35q9-qwff-qmh4/GHSA-35q9-qwff-qmh4.json +++ b/advisories/unreviewed/2024/05/GHSA-35q9-qwff-qmh4/GHSA-35q9-qwff-qmh4.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-35q9-qwff-qmh4", - "modified": "2024-05-22T09:31:44Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-05-22T09:31:44Z", "aliases": [ "CVE-2021-47439" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: dsa: microchip: Added the condition for scheduling ksz_mib_read_work\n\nWhen the ksz module is installed and removed using rmmod, kernel crashes\nwith null pointer dereferrence error. During rmmod, ksz_switch_remove\nfunction tries to cancel the mib_read_workqueue using\ncancel_delayed_work_sync routine and unregister switch from dsa.\n\nDuring dsa_unregister_switch it calls ksz_mac_link_down, which in turn\nreschedules the workqueue since mib_interval is non-zero.\nDue to which queue executed after mib_interval and it tries to access\ndp->slave. But the slave is unregistered in the ksz_switch_remove\nfunction. Hence kernel crashes.\n\nTo avoid this crash, before canceling the workqueue, resetted the\nmib_interval to 0.\n\nv1 -> v2:\n-Removed the if condition in ksz_mib_read_work", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -35,7 +38,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-05-22T07:15:09Z" diff --git a/advisories/unreviewed/2024/05/GHSA-6qj4-5856-5f22/GHSA-6qj4-5856-5f22.json b/advisories/unreviewed/2024/05/GHSA-6qj4-5856-5f22/GHSA-6qj4-5856-5f22.json index e453447a2ef..da9f4fcbfef 100644 --- a/advisories/unreviewed/2024/05/GHSA-6qj4-5856-5f22/GHSA-6qj4-5856-5f22.json +++ b/advisories/unreviewed/2024/05/GHSA-6qj4-5856-5f22/GHSA-6qj4-5856-5f22.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-6qj4-5856-5f22", - "modified": "2024-05-21T18:31:18Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-05-21T18:31:18Z", "aliases": [ "CVE-2023-52704" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nfreezer,umh: Fix call_usermode_helper_exec() vs SIGKILL\n\nTetsuo-San noted that commit f5d39b020809 (\"freezer,sched: Rewrite\ncore freezer logic\") broke call_usermodehelper_exec() for the KILLABLE\ncase.\n\nSpecifically it was missed that the second, unconditional,\nwait_for_completion() was not optional and ensures the on-stack\ncompletion is unused before going out-of-scope.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-05-21T16:15:12Z" diff --git a/advisories/unreviewed/2024/05/GHSA-95c2-w7x8-c93w/GHSA-95c2-w7x8-c93w.json b/advisories/unreviewed/2024/05/GHSA-95c2-w7x8-c93w/GHSA-95c2-w7x8-c93w.json index 417058daac1..b1a3157020f 100644 --- a/advisories/unreviewed/2024/05/GHSA-95c2-w7x8-c93w/GHSA-95c2-w7x8-c93w.json +++ b/advisories/unreviewed/2024/05/GHSA-95c2-w7x8-c93w/GHSA-95c2-w7x8-c93w.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-95c2-w7x8-c93w", - "modified": "2024-05-20T12:30:29Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-05-20T12:30:29Z", "aliases": [ "CVE-2024-35989" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndmaengine: idxd: Fix oops during rmmod on single-CPU platforms\n\nDuring the removal of the idxd driver, registered offline callback is\ninvoked as part of the clean up process. However, on systems with only\none CPU online, no valid target is available to migrate the\nperf context, resulting in a kernel oops:\n\n BUG: unable to handle page fault for address: 000000000002a2b8\n #PF: supervisor write access in kernel mode\n #PF: error_code(0x0002) - not-present page\n PGD 1470e1067 P4D 0\n Oops: 0002 [#1] PREEMPT SMP NOPTI\n CPU: 0 PID: 20 Comm: cpuhp/0 Not tainted 6.8.0-rc6-dsa+ #57\n Hardware name: Intel Corporation AvenueCity/AvenueCity, BIOS BHSDCRB1.86B.2492.D03.2307181620 07/18/2023\n RIP: 0010:mutex_lock+0x2e/0x50\n ...\n Call Trace:\n \n __die+0x24/0x70\n page_fault_oops+0x82/0x160\n do_user_addr_fault+0x65/0x6b0\n __pfx___rdmsr_safe_on_cpu+0x10/0x10\n exc_page_fault+0x7d/0x170\n asm_exc_page_fault+0x26/0x30\n mutex_lock+0x2e/0x50\n mutex_lock+0x1e/0x50\n perf_pmu_migrate_context+0x87/0x1f0\n perf_event_cpu_offline+0x76/0x90 [idxd]\n cpuhp_invoke_callback+0xa2/0x4f0\n __pfx_perf_event_cpu_offline+0x10/0x10 [idxd]\n cpuhp_thread_fun+0x98/0x150\n smpboot_thread_fn+0x27/0x260\n smpboot_thread_fn+0x1af/0x260\n __pfx_smpboot_thread_fn+0x10/0x10\n kthread+0x103/0x140\n __pfx_kthread+0x10/0x10\n ret_from_fork+0x31/0x50\n __pfx_kthread+0x10/0x10\n ret_from_fork_asm+0x1b/0x30\n \n\nFix the issue by preventing the migration of the perf context to an\ninvalid target.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -43,7 +46,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-05-20T10:15:13Z" diff --git a/advisories/unreviewed/2024/06/GHSA-4x3m-rqxv-975r/GHSA-4x3m-rqxv-975r.json b/advisories/unreviewed/2024/06/GHSA-4x3m-rqxv-975r/GHSA-4x3m-rqxv-975r.json index 13f022166fe..1526db67eb3 100644 --- a/advisories/unreviewed/2024/06/GHSA-4x3m-rqxv-975r/GHSA-4x3m-rqxv-975r.json +++ b/advisories/unreviewed/2024/06/GHSA-4x3m-rqxv-975r/GHSA-4x3m-rqxv-975r.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-4x3m-rqxv-975r", - "modified": "2024-06-08T06:30:37Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-06-08T06:30:37Z", "aliases": [ "CVE-2024-5638" @@ -36,7 +36,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/06/GHSA-6225-mwq7-3vjc/GHSA-6225-mwq7-3vjc.json b/advisories/unreviewed/2024/06/GHSA-6225-mwq7-3vjc/GHSA-6225-mwq7-3vjc.json index 07b1acf3561..480353f6b78 100644 --- a/advisories/unreviewed/2024/06/GHSA-6225-mwq7-3vjc/GHSA-6225-mwq7-3vjc.json +++ b/advisories/unreviewed/2024/06/GHSA-6225-mwq7-3vjc/GHSA-6225-mwq7-3vjc.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-6225-mwq7-3vjc", - "modified": "2024-06-08T06:30:37Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-06-08T06:30:37Z", "aliases": [ "CVE-2024-5613" @@ -36,7 +36,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/06/GHSA-g5hp-gqmx-38hj/GHSA-g5hp-gqmx-38hj.json b/advisories/unreviewed/2024/06/GHSA-g5hp-gqmx-38hj/GHSA-g5hp-gqmx-38hj.json index b2eb53bf9a0..0b4c6b0a70e 100644 --- a/advisories/unreviewed/2024/06/GHSA-g5hp-gqmx-38hj/GHSA-g5hp-gqmx-38hj.json +++ b/advisories/unreviewed/2024/06/GHSA-g5hp-gqmx-38hj/GHSA-g5hp-gqmx-38hj.json @@ -60,7 +60,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-862" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/06/GHSA-h2qv-f8w8-72wh/GHSA-h2qv-f8w8-72wh.json b/advisories/unreviewed/2024/06/GHSA-h2qv-f8w8-72wh/GHSA-h2qv-f8w8-72wh.json index 5de0288c456..9d6a3ea16a0 100644 --- a/advisories/unreviewed/2024/06/GHSA-h2qv-f8w8-72wh/GHSA-h2qv-f8w8-72wh.json +++ b/advisories/unreviewed/2024/06/GHSA-h2qv-f8w8-72wh/GHSA-h2qv-f8w8-72wh.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-h2qv-f8w8-72wh", - "modified": "2024-06-07T06:30:30Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-06-07T06:30:30Z", "aliases": [ "CVE-2024-3592" @@ -32,7 +32,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], "severity": "CRITICAL", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/07/GHSA-3fxm-wcm7-47r2/GHSA-3fxm-wcm7-47r2.json b/advisories/unreviewed/2024/07/GHSA-3fxm-wcm7-47r2/GHSA-3fxm-wcm7-47r2.json index f6c28a1b76f..e79a76e2b39 100644 --- a/advisories/unreviewed/2024/07/GHSA-3fxm-wcm7-47r2/GHSA-3fxm-wcm7-47r2.json +++ b/advisories/unreviewed/2024/07/GHSA-3fxm-wcm7-47r2/GHSA-3fxm-wcm7-47r2.json @@ -28,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/07/GHSA-pp72-6x86-58pw/GHSA-pp72-6x86-58pw.json b/advisories/unreviewed/2024/07/GHSA-pp72-6x86-58pw/GHSA-pp72-6x86-58pw.json index 2161ab80bcc..9de8278245c 100644 --- a/advisories/unreviewed/2024/07/GHSA-pp72-6x86-58pw/GHSA-pp72-6x86-58pw.json +++ b/advisories/unreviewed/2024/07/GHSA-pp72-6x86-58pw/GHSA-pp72-6x86-58pw.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-pp72-6x86-58pw", - "modified": "2024-07-02T00:31:47Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-07-02T00:31:46Z", "aliases": [ "CVE-2024-37763" ], "details": "MachForm up to version 19 is affected by an unauthenticated stored cross-site scripting which affects users with valid sessions whom can view compiled forms results.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-07-01T22:15:03Z" diff --git a/advisories/unreviewed/2024/07/GHSA-v6hc-9c6c-f599/GHSA-v6hc-9c6c-f599.json b/advisories/unreviewed/2024/07/GHSA-v6hc-9c6c-f599/GHSA-v6hc-9c6c-f599.json index 3bc216eadbd..b631714c704 100644 --- a/advisories/unreviewed/2024/07/GHSA-v6hc-9c6c-f599/GHSA-v6hc-9c6c-f599.json +++ b/advisories/unreviewed/2024/07/GHSA-v6hc-9c6c-f599/GHSA-v6hc-9c6c-f599.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-v6hc-9c6c-f599", - "modified": "2024-07-03T21:39:43Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-07-03T21:39:43Z", "aliases": [ "CVE-2024-33869" ], "details": "An issue was discovered in Artifex Ghostscript before 10.03.1. Path traversal and command execution can occur (via a crafted PostScript document) because of path reduction in base/gpmisc.c. For example, restrictions on use of %pipe% can be bypassed via the aa/../%pipe%command# output filename.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-22" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-07-03T19:15:03Z" diff --git a/advisories/unreviewed/2024/08/GHSA-qr7p-mcrr-3xxp/GHSA-qr7p-mcrr-3xxp.json b/advisories/unreviewed/2024/08/GHSA-qr7p-mcrr-3xxp/GHSA-qr7p-mcrr-3xxp.json index 3d6e962b375..cafc8ffac8b 100644 --- a/advisories/unreviewed/2024/08/GHSA-qr7p-mcrr-3xxp/GHSA-qr7p-mcrr-3xxp.json +++ b/advisories/unreviewed/2024/08/GHSA-qr7p-mcrr-3xxp/GHSA-qr7p-mcrr-3xxp.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-qr7p-mcrr-3xxp", - "modified": "2024-08-22T06:30:29Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-08-22T06:30:29Z", "aliases": [ "CVE-2024-45165" ], "details": "An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Data is sent between client and server with encryption. However, the key is derived from the string \"(c)2007 UCI Software GmbH B.Boll\" (without quotes). The key is both static and hardcoded. With access to messages, this results in message decryption and encryption by an attacker. Thus, it enables passive and active man-in-the-middle attacks.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" + } ], "affected": [ @@ -41,9 +44,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-798" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-22T04:15:22Z" diff --git a/advisories/unreviewed/2024/09/GHSA-2582-53pq-96cq/GHSA-2582-53pq-96cq.json b/advisories/unreviewed/2024/09/GHSA-2582-53pq-96cq/GHSA-2582-53pq-96cq.json index 87be0f8d54a..d168420e73e 100644 --- a/advisories/unreviewed/2024/09/GHSA-2582-53pq-96cq/GHSA-2582-53pq-96cq.json +++ b/advisories/unreviewed/2024/09/GHSA-2582-53pq-96cq/GHSA-2582-53pq-96cq.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-2582-53pq-96cq", - "modified": "2024-09-23T12:31:09Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-09-23T12:31:09Z", "aliases": [ "CVE-2024-46544" ], "details": "Incorrect Default Permissions vulnerability in Apache Tomcat Connectors allows local users to view and modify shared memory containing mod_jk configuration which may lead to information disclosure and/or denial of service.\n\nThis issue affects Apache Tomcat Connectors: from 1.2.9-beta through 1.2.49. Only mod_jk on Unix like systems is affected. Neither the ISAPI redirector nor mod_jk on Windows is affected.\n\nUsers are recommended to upgrade to version 1.2.50, which fixes the issue.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + } ], "affected": [ @@ -27,7 +30,7 @@ "cwe_ids": [ "CWE-276" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-09-23T11:15:10Z" diff --git a/advisories/unreviewed/2024/09/GHSA-6v48-p2g5-g5g2/GHSA-6v48-p2g5-g5g2.json b/advisories/unreviewed/2024/09/GHSA-6v48-p2g5-g5g2/GHSA-6v48-p2g5-g5g2.json index 147e11be916..c4ab8d2a002 100644 --- a/advisories/unreviewed/2024/09/GHSA-6v48-p2g5-g5g2/GHSA-6v48-p2g5-g5g2.json +++ b/advisories/unreviewed/2024/09/GHSA-6v48-p2g5-g5g2/GHSA-6v48-p2g5-g5g2.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-6v48-p2g5-g5g2", - "modified": "2024-09-12T18:31:41Z", + "modified": "2024-10-31T21:31:44Z", "published": "2024-09-12T15:33:01Z", "aliases": [ "CVE-2024-40457" @@ -21,6 +21,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40457" }, + { + "type": "WEB", + "url": "https://github.com/jeppojeps/CVE-2024-40457-PoC" + }, { "type": "WEB", "url": "https://www.noip.com/support/knowledgebase/install-linux-3-x-dynamic-update-client-duc" diff --git a/advisories/unreviewed/2024/10/GHSA-2443-9w48-793g/GHSA-2443-9w48-793g.json b/advisories/unreviewed/2024/10/GHSA-2443-9w48-793g/GHSA-2443-9w48-793g.json index 4a53bdd674a..ec512788b27 100644 --- a/advisories/unreviewed/2024/10/GHSA-2443-9w48-793g/GHSA-2443-9w48-793g.json +++ b/advisories/unreviewed/2024/10/GHSA-2443-9w48-793g/GHSA-2443-9w48-793g.json @@ -32,6 +32,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-74", "CWE-75" ], "severity": "MODERATE", diff --git a/advisories/unreviewed/2024/10/GHSA-2f43-7r2f-7785/GHSA-2f43-7r2f-7785.json b/advisories/unreviewed/2024/10/GHSA-2f43-7r2f-7785/GHSA-2f43-7r2f-7785.json new file mode 100644 index 00000000000..ed908718a08 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-2f43-7r2f-7785/GHSA-2f43-7r2f-7785.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2f43-7r2f-7785", + "modified": "2024-10-31T21:31:45Z", + "published": "2024-10-31T21:31:45Z", + "aliases": [ + "CVE-2024-50801" + ], + "details": "A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin/controller/responses/listing_grid/collections.php. The vulnerability is exploitable via the id parameter.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50801" + }, + { + "type": "WEB", + "url": "https://chiggerlor.substack.com/p/cve-2024-50801-and-and-cve-2024-50802" + }, + { + "type": "WEB", + "url": "https://github.com/abantecart/abantecart-src" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T19:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-3f7c-8v7j-hgxr/GHSA-3f7c-8v7j-hgxr.json b/advisories/unreviewed/2024/10/GHSA-3f7c-8v7j-hgxr/GHSA-3f7c-8v7j-hgxr.json new file mode 100644 index 00000000000..6266c79159a --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-3f7c-8v7j-hgxr/GHSA-3f7c-8v7j-hgxr.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3f7c-8v7j-hgxr", + "modified": "2024-10-31T21:31:45Z", + "published": "2024-10-31T21:31:45Z", + "aliases": [ + "CVE-2024-51065" + ], + "details": "Phpgurukul Beauty Parlour Management System v1.1 is vulnerable to SQL Injection in admin/index.php via the the username parameter.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51065" + }, + { + "type": "WEB", + "url": "https://github.com/0x1c1ph3r/CVEs/tree/main/CVE-2024-51065" + }, + { + "type": "WEB", + "url": "http://phpgurukul.com" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T19:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-56m6-4mhw-h3g5/GHSA-56m6-4mhw-h3g5.json b/advisories/unreviewed/2024/10/GHSA-56m6-4mhw-h3g5/GHSA-56m6-4mhw-h3g5.json index 552345687e6..667675943af 100644 --- a/advisories/unreviewed/2024/10/GHSA-56m6-4mhw-h3g5/GHSA-56m6-4mhw-h3g5.json +++ b/advisories/unreviewed/2024/10/GHSA-56m6-4mhw-h3g5/GHSA-56m6-4mhw-h3g5.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-56m6-4mhw-h3g5", - "modified": "2024-10-31T15:30:59Z", + "modified": "2024-10-31T21:31:45Z", "published": "2024-10-31T15:30:59Z", "aliases": [ "CVE-2024-42835" ], "details": "langflow v1.0.12 was discovered to contain a remote code execution (RCE) vulnerability via the PythonCodeTool component.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -27,7 +30,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-31T14:15:05Z" diff --git a/advisories/unreviewed/2024/10/GHSA-5m98-v5jj-6cv6/GHSA-5m98-v5jj-6cv6.json b/advisories/unreviewed/2024/10/GHSA-5m98-v5jj-6cv6/GHSA-5m98-v5jj-6cv6.json index 7759de57c63..ad846b01182 100644 --- a/advisories/unreviewed/2024/10/GHSA-5m98-v5jj-6cv6/GHSA-5m98-v5jj-6cv6.json +++ b/advisories/unreviewed/2024/10/GHSA-5m98-v5jj-6cv6/GHSA-5m98-v5jj-6cv6.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-5m98-v5jj-6cv6", - "modified": "2024-10-30T21:30:40Z", + "modified": "2024-10-31T21:31:45Z", "published": "2024-10-30T21:30:40Z", "aliases": [ "CVE-2024-48346" ], "details": "xtreme1 <= v0.9.1 contains a Server-Side Request Forgery (SSRF) vulnerability in the /api/data/upload path. The vulnerability is triggered through the fileUrl parameter, which allows an attacker to make arbitrary requests to internal or external systems.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-918" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-30T21:15:14Z" diff --git a/advisories/unreviewed/2024/10/GHSA-635w-qqhj-gvhx/GHSA-635w-qqhj-gvhx.json b/advisories/unreviewed/2024/10/GHSA-635w-qqhj-gvhx/GHSA-635w-qqhj-gvhx.json new file mode 100644 index 00000000000..fd4cf031e62 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-635w-qqhj-gvhx/GHSA-635w-qqhj-gvhx.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-635w-qqhj-gvhx", + "modified": "2024-10-31T21:31:45Z", + "published": "2024-10-31T21:31:45Z", + "aliases": [ + "CVE-2024-39332" + ], + "details": "Webswing 23.2.2 allows remote attackers to modify client-side JavaScript code to achieve path traversal, likely leading to remote code execution via modification of shell scripts on the server.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-39332" + }, + { + "type": "WEB", + "url": "https://herolab.usd.de/security-advisories/usd-2024-0008" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T19:15:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-7368-g948-r7pg/GHSA-7368-g948-r7pg.json b/advisories/unreviewed/2024/10/GHSA-7368-g948-r7pg/GHSA-7368-g948-r7pg.json new file mode 100644 index 00000000000..248e65ac89e --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-7368-g948-r7pg/GHSA-7368-g948-r7pg.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7368-g948-r7pg", + "modified": "2024-10-31T21:31:45Z", + "published": "2024-10-31T21:31:45Z", + "aliases": [ + "CVE-2024-51060" + ], + "details": "Projectworlds Online Admission System v1 is vulnerable to SQL Injection in index.php via the 'a_id' parameter.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51060" + }, + { + "type": "WEB", + "url": "https://github.com/0x1c1ph3r/CVEs/tree/main/CVE-2024-51060" + }, + { + "type": "WEB", + "url": "http://projectworld.com" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T19:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-7m7j-pgpw-9g75/GHSA-7m7j-pgpw-9g75.json b/advisories/unreviewed/2024/10/GHSA-7m7j-pgpw-9g75/GHSA-7m7j-pgpw-9g75.json new file mode 100644 index 00000000000..545b472a225 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-7m7j-pgpw-9g75/GHSA-7m7j-pgpw-9g75.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7m7j-pgpw-9g75", + "modified": "2024-10-31T21:31:45Z", + "published": "2024-10-31T21:31:45Z", + "aliases": [ + "CVE-2024-10573" + ], + "details": "An out-of-bounds write flaw was found in mpg123 when handling crafted streams. When decoding PCM, the libmpg123 may write past the end of a heap-located buffer. Consequently, heap corruption may happen, and arbitrary code execution is not discarded. The complexity required to exploit this flaw is considered high as the payload must be validated by the MPEG decoder and the PCM synth before execution. Additionally, to successfully execute the attack, the user must scan through the stream, making web live stream content (such as web radios) a very unlikely attack vector.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10573" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/security/cve/CVE-2024-10573" + }, + { + "type": "WEB", + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2322980" + }, + { + "type": "WEB", + "url": "https://mpg123.org/cgi-bin/news.cgi#2024-10-26" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-787" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T19:15:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-87x3-r6f2-m885/GHSA-87x3-r6f2-m885.json b/advisories/unreviewed/2024/10/GHSA-87x3-r6f2-m885/GHSA-87x3-r6f2-m885.json index dfe416e8197..043b3a3c49b 100644 --- a/advisories/unreviewed/2024/10/GHSA-87x3-r6f2-m885/GHSA-87x3-r6f2-m885.json +++ b/advisories/unreviewed/2024/10/GHSA-87x3-r6f2-m885/GHSA-87x3-r6f2-m885.json @@ -48,7 +48,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-281" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/10/GHSA-8pxm-8fqw-jp9p/GHSA-8pxm-8fqw-jp9p.json b/advisories/unreviewed/2024/10/GHSA-8pxm-8fqw-jp9p/GHSA-8pxm-8fqw-jp9p.json new file mode 100644 index 00000000000..eda0d22babf --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-8pxm-8fqw-jp9p/GHSA-8pxm-8fqw-jp9p.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8pxm-8fqw-jp9p", + "modified": "2024-10-31T21:31:45Z", + "published": "2024-10-31T21:31:45Z", + "aliases": [ + "CVE-2024-51063" + ], + "details": "Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection in add-teacher.php via the mobile number or email parameter.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51063" + }, + { + "type": "WEB", + "url": "https://github.com/0x1c1ph3r/CVEs/tree/main/CVE-2024-51063" + }, + { + "type": "WEB", + "url": "http://phpgurukul.com" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T19:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-95j2-w8x7-hm88/GHSA-95j2-w8x7-hm88.json b/advisories/unreviewed/2024/10/GHSA-95j2-w8x7-hm88/GHSA-95j2-w8x7-hm88.json new file mode 100644 index 00000000000..a15f43b6f1e --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-95j2-w8x7-hm88/GHSA-95j2-w8x7-hm88.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-95j2-w8x7-hm88", + "modified": "2024-10-31T21:31:45Z", + "published": "2024-10-31T21:31:45Z", + "aliases": [ + "CVE-2024-39720" + ], + "details": "An issue was discovered in Ollama before 0.1.46. An attacker can use two HTTP requests to upload a malformed GGUF file containing just 4 bytes starting with the GGUF custom magic header. By leveraging a custom Modelfile that includes a FROM statement pointing to the attacker-controlled blob file, the attacker can crash the application through the CreateModel route, leading to a segmentation fault (signal SIGSEGV: segmentation violation).", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-39720" + }, + { + "type": "WEB", + "url": "https://github.com/ollama/ollama/compare/v0.1.45...v0.1.46#diff-782c2737eecfa83b7cb46a77c8bdaf40023e7067baccd4f806ac5517b4563131L417" + }, + { + "type": "WEB", + "url": "https://oligosecurity.webflow.io/blog/more-models-more-probllms" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T20:15:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-95v3-2xxf-g2hg/GHSA-95v3-2xxf-g2hg.json b/advisories/unreviewed/2024/10/GHSA-95v3-2xxf-g2hg/GHSA-95v3-2xxf-g2hg.json index 25783e0b068..543dec78fbd 100644 --- a/advisories/unreviewed/2024/10/GHSA-95v3-2xxf-g2hg/GHSA-95v3-2xxf-g2hg.json +++ b/advisories/unreviewed/2024/10/GHSA-95v3-2xxf-g2hg/GHSA-95v3-2xxf-g2hg.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-95v3-2xxf-g2hg", - "modified": "2024-10-30T18:30:49Z", + "modified": "2024-10-31T21:31:45Z", "published": "2024-10-30T18:30:49Z", "aliases": [ "CVE-2024-48646" ], "details": "An Unrestricted File Upload vulnerability exists in Sage 1000 v7.0.0, which allows authorized users to upload files without proper validation. An attacker could exploit this vulnerability by uploading malicious files, such as HTML, scripts, or other executable content, that may be executed on the server, leading to further system compromise.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-434" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-30T18:15:07Z" diff --git a/advisories/unreviewed/2024/10/GHSA-c7h6-6p8q-x76p/GHSA-c7h6-6p8q-x76p.json b/advisories/unreviewed/2024/10/GHSA-c7h6-6p8q-x76p/GHSA-c7h6-6p8q-x76p.json new file mode 100644 index 00000000000..c4033fd5ddb --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-c7h6-6p8q-x76p/GHSA-c7h6-6p8q-x76p.json @@ -0,0 +1,54 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-c7h6-6p8q-x76p", + "modified": "2024-10-31T21:31:45Z", + "published": "2024-10-31T21:31:45Z", + "aliases": [ + "CVE-2024-10595" + ], + "details": "A vulnerability was found in ESAFENET CDG 5. It has been declared as critical. Affected by this vulnerability is the function delFile/delDifferCourseList of the file /com/esafenet/servlet/ajax/PublicDocInfoAjax.java. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10595" + }, + { + "type": "WEB", + "url": "https://flowus.cn/share/651b6010-4701-4cec-a5a3-6e01e22636b9?code=G8A6P3" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.282607" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.282607" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.430051" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T21:15:15Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-cc33-c78g-m59p/GHSA-cc33-c78g-m59p.json b/advisories/unreviewed/2024/10/GHSA-cc33-c78g-m59p/GHSA-cc33-c78g-m59p.json new file mode 100644 index 00000000000..6d4743b150b --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-cc33-c78g-m59p/GHSA-cc33-c78g-m59p.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cc33-c78g-m59p", + "modified": "2024-10-31T21:31:45Z", + "published": "2024-10-31T21:31:45Z", + "aliases": [ + "CVE-2024-50802" + ], + "details": "A SQL Injection vulnerability was discovered in AbanteCart 1.4.0 in the update() function in public_html/admin/controller/responses/listing_grid/email_templates.php. The vulnerability is exploitable via the id parameter.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-50802" + }, + { + "type": "WEB", + "url": "https://chiggerlor.substack.com/p/cve-2024-50801-and-and-cve-2024-50802" + }, + { + "type": "WEB", + "url": "https://github.com/abantecart/abantecart-src" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T19:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-cfxq-8762-vx3v/GHSA-cfxq-8762-vx3v.json b/advisories/unreviewed/2024/10/GHSA-cfxq-8762-vx3v/GHSA-cfxq-8762-vx3v.json new file mode 100644 index 00000000000..8746065169a --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-cfxq-8762-vx3v/GHSA-cfxq-8762-vx3v.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cfxq-8762-vx3v", + "modified": "2024-10-31T21:31:45Z", + "published": "2024-10-31T21:31:45Z", + "aliases": [ + "CVE-2024-39722" + ], + "details": "An issue was discovered in Ollama before 0.1.46. It exposes which files exist on the server on which it is deployed via path traversal in the api/push route.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-39722" + }, + { + "type": "WEB", + "url": "https://oligosecurity.webflow.io/blog/more-models-more-probllms" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T20:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-cgh2-v9gr-9477/GHSA-cgh2-v9gr-9477.json b/advisories/unreviewed/2024/10/GHSA-cgh2-v9gr-9477/GHSA-cgh2-v9gr-9477.json new file mode 100644 index 00000000000..7655e39328b --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-cgh2-v9gr-9477/GHSA-cgh2-v9gr-9477.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cgh2-v9gr-9477", + "modified": "2024-10-31T21:31:45Z", + "published": "2024-10-31T21:31:45Z", + "aliases": [ + "CVE-2024-51066" + ], + "details": "An Insecure Direct Object Reference (IDOR) vulnerability in appointment-detail.php in Phpgurukul's Beauty Parlour Management System v1.1 allows unauthorized access to the Personally Identifiable Information (PII) of other customers.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51066" + }, + { + "type": "WEB", + "url": "https://github.com/0x1c1ph3r/CVEs/tree/main/CVE-2024-51066" + }, + { + "type": "WEB", + "url": "http://phpgurukul.com" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T19:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-cp2q-22r9-4fg9/GHSA-cp2q-22r9-4fg9.json b/advisories/unreviewed/2024/10/GHSA-cp2q-22r9-4fg9/GHSA-cp2q-22r9-4fg9.json new file mode 100644 index 00000000000..983d98acb78 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-cp2q-22r9-4fg9/GHSA-cp2q-22r9-4fg9.json @@ -0,0 +1,54 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cp2q-22r9-4fg9", + "modified": "2024-10-31T21:31:45Z", + "published": "2024-10-31T21:31:45Z", + "aliases": [ + "CVE-2024-10594" + ], + "details": "A vulnerability was found in ESAFENET CDG 5. It has been classified as critical. Affected is the function docHistory of the file /com/esafenet/servlet/fileManagement/FileDirectoryService.java. The manipulation of the argument fileId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10594" + }, + { + "type": "WEB", + "url": "https://flowus.cn/share/b95a0695-de84-4459-aa7b-87a1400d5509?code=G8A6P3" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.282606" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.282606" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.430050" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T21:15:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-cpxh-jwhh-m496/GHSA-cpxh-jwhh-m496.json b/advisories/unreviewed/2024/10/GHSA-cpxh-jwhh-m496/GHSA-cpxh-jwhh-m496.json new file mode 100644 index 00000000000..d3449c6d2f6 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-cpxh-jwhh-m496/GHSA-cpxh-jwhh-m496.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cpxh-jwhh-m496", + "modified": "2024-10-31T21:31:45Z", + "published": "2024-10-31T21:31:45Z", + "aliases": [ + "CVE-2024-39719" + ], + "details": "An issue was discovered in Ollama through 0.3.14. File existence disclosure can occur via api/create. When calling the CreateModel route with a path parameter that does not exist, it reflects the \"File does not exist\" error message to the attacker, providing a primitive for file existence on the server.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-39719" + }, + { + "type": "WEB", + "url": "https://oligosecurity.webflow.io/blog/more-models-more-probllms" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T20:15:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-frcg-5998-rxxh/GHSA-frcg-5998-rxxh.json b/advisories/unreviewed/2024/10/GHSA-frcg-5998-rxxh/GHSA-frcg-5998-rxxh.json new file mode 100644 index 00000000000..51100a693b0 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-frcg-5998-rxxh/GHSA-frcg-5998-rxxh.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-frcg-5998-rxxh", + "modified": "2024-10-31T21:31:45Z", + "published": "2024-10-31T21:31:45Z", + "aliases": [ + "CVE-2024-51064" + ], + "details": "Phpgurukul Teachers Record Management System v2.1 is vulnerable to SQL Injection via the tid parameter to admin/queries.php.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-51064" + }, + { + "type": "WEB", + "url": "https://github.com/0x1c1ph3r/CVEs/tree/main/CVE-2024-51064" + }, + { + "type": "WEB", + "url": "http://phpgurukul.com" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T19:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-hhhv-ggjx-q9j2/GHSA-hhhv-ggjx-q9j2.json b/advisories/unreviewed/2024/10/GHSA-hhhv-ggjx-q9j2/GHSA-hhhv-ggjx-q9j2.json new file mode 100644 index 00000000000..6f1bf3d9459 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-hhhv-ggjx-q9j2/GHSA-hhhv-ggjx-q9j2.json @@ -0,0 +1,43 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hhhv-ggjx-q9j2", + "modified": "2024-10-31T21:31:45Z", + "published": "2024-10-31T21:31:45Z", + "aliases": [ + "CVE-2024-42515" + ], + "details": "Glossarizer through 1.5.2 improperly tries to convert text into HTML. Even though the application itself escapes special characters (e.g., <>), the underlying library converts these encoded characters into legitimate HTML, thereby possibly causing stored XSS. Attackers can append a XSS payload to a word that has a corresponding glossary entry.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42515" + }, + { + "type": "WEB", + "url": "https://github.com/PebbleRoad/glossarizer" + }, + { + "type": "WEB", + "url": "https://herolab.usd.de/security-advisories/usd-2024-0011" + }, + { + "type": "WEB", + "url": "https://www.npmjs.com/package/glossarizer" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T19:15:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-hmwx-rcq4-8mf2/GHSA-hmwx-rcq4-8mf2.json b/advisories/unreviewed/2024/10/GHSA-hmwx-rcq4-8mf2/GHSA-hmwx-rcq4-8mf2.json new file mode 100644 index 00000000000..665a1a32d20 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-hmwx-rcq4-8mf2/GHSA-hmwx-rcq4-8mf2.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hmwx-rcq4-8mf2", + "modified": "2024-10-31T21:31:45Z", + "published": "2024-10-31T21:31:45Z", + "aliases": [ + "CVE-2024-48359" + ], + "details": "Qualitor v8.24 was discovered to contain a remote code execution (RCE) vulnerability via the gridValoresPopHidden parameter.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48359" + }, + { + "type": "WEB", + "url": "https://github.com/OpenXP-Research/CVE-2024-48359" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T20:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-jh2f-6jmr-qxf8/GHSA-jh2f-6jmr-qxf8.json b/advisories/unreviewed/2024/10/GHSA-jh2f-6jmr-qxf8/GHSA-jh2f-6jmr-qxf8.json new file mode 100644 index 00000000000..6cd11182c53 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-jh2f-6jmr-qxf8/GHSA-jh2f-6jmr-qxf8.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-jh2f-6jmr-qxf8", + "modified": "2024-10-31T21:31:45Z", + "published": "2024-10-31T21:31:45Z", + "aliases": [ + "CVE-2023-52044" + ], + "details": "Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction for uploading files with the .php8 extension.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52044" + }, + { + "type": "WEB", + "url": "https://github.com/Studio-42/elFinder/issues/3615" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T19:15:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-jv24-5j5x-m8w6/GHSA-jv24-5j5x-m8w6.json b/advisories/unreviewed/2024/10/GHSA-jv24-5j5x-m8w6/GHSA-jv24-5j5x-m8w6.json index 1dd7c42a9e4..6969ed00935 100644 --- a/advisories/unreviewed/2024/10/GHSA-jv24-5j5x-m8w6/GHSA-jv24-5j5x-m8w6.json +++ b/advisories/unreviewed/2024/10/GHSA-jv24-5j5x-m8w6/GHSA-jv24-5j5x-m8w6.json @@ -44,7 +44,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-346" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/10/GHSA-m72x-w5r4-mxj9/GHSA-m72x-w5r4-mxj9.json b/advisories/unreviewed/2024/10/GHSA-m72x-w5r4-mxj9/GHSA-m72x-w5r4-mxj9.json new file mode 100644 index 00000000000..1382e1d53cd --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-m72x-w5r4-mxj9/GHSA-m72x-w5r4-mxj9.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-m72x-w5r4-mxj9", + "modified": "2024-10-31T21:31:45Z", + "published": "2024-10-31T21:31:45Z", + "aliases": [ + "CVE-2024-48200" + ], + "details": "An issue in MobaXterm v24.2 allows a local attacker to escalate privileges and execute arbitrary code via the remove function of the MobaXterm MSI is spawning one Administrative cmd (conhost.exe)", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48200" + }, + { + "type": "WEB", + "url": "https://gist.github.com/ahmedsherif/ad56cd3a9ef86cdc05175fb591804c64" + }, + { + "type": "WEB", + "url": "https://mobaxterm.mobatek.net/download-home-edition.html" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T19:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-mcw3-h5xg-r95m/GHSA-mcw3-h5xg-r95m.json b/advisories/unreviewed/2024/10/GHSA-mcw3-h5xg-r95m/GHSA-mcw3-h5xg-r95m.json index b93e94e4990..8dcfaf7e3b4 100644 --- a/advisories/unreviewed/2024/10/GHSA-mcw3-h5xg-r95m/GHSA-mcw3-h5xg-r95m.json +++ b/advisories/unreviewed/2024/10/GHSA-mcw3-h5xg-r95m/GHSA-mcw3-h5xg-r95m.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-mcw3-h5xg-r95m", - "modified": "2024-10-31T03:30:45Z", + "modified": "2024-10-31T21:31:45Z", "published": "2024-10-31T03:30:45Z", "aliases": [ "CVE-2024-48307" ], "details": "JeecgBoot v3.7.1 was discovered to contain a SQL injection vulnerability via the component /onlDragDatasetHead/getTotalData.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -33,9 +36,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-31T01:15:14Z" diff --git a/advisories/unreviewed/2024/10/GHSA-mpp2-2v83-ccjm/GHSA-mpp2-2v83-ccjm.json b/advisories/unreviewed/2024/10/GHSA-mpp2-2v83-ccjm/GHSA-mpp2-2v83-ccjm.json index 3b0ddd9ae3e..eb79a5c29b6 100644 --- a/advisories/unreviewed/2024/10/GHSA-mpp2-2v83-ccjm/GHSA-mpp2-2v83-ccjm.json +++ b/advisories/unreviewed/2024/10/GHSA-mpp2-2v83-ccjm/GHSA-mpp2-2v83-ccjm.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-mpp2-2v83-ccjm", - "modified": "2024-10-30T21:30:40Z", + "modified": "2024-10-31T21:31:45Z", "published": "2024-10-30T21:30:40Z", "aliases": [ "CVE-2024-48735" ], "details": "Directory Traversal in /SASStudio/sasexec/sessions/{sessionID}/workspace/{InternalPath} in SAS Studio 9.4 allows remote attacker to access internal files by manipulating default path during file download.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-22" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-30T21:15:14Z" diff --git a/advisories/unreviewed/2024/10/GHSA-mq5w-h63c-48mj/GHSA-mq5w-h63c-48mj.json b/advisories/unreviewed/2024/10/GHSA-mq5w-h63c-48mj/GHSA-mq5w-h63c-48mj.json new file mode 100644 index 00000000000..20922e501ba --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-mq5w-h63c-48mj/GHSA-mq5w-h63c-48mj.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mq5w-h63c-48mj", + "modified": "2024-10-31T21:31:45Z", + "published": "2024-10-31T21:31:45Z", + "aliases": [ + "CVE-2023-52045" + ], + "details": "Studio-42 eLfinder 2.1.62 contains a filename restriction bypass leading to a persistent Cross-site Scripting (XSS) vulnerability.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-52045" + }, + { + "type": "WEB", + "url": "https://github.com/Studio-42/elFinder/issues/3617" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T19:15:12Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-mvx2-276h-w78v/GHSA-mvx2-276h-w78v.json b/advisories/unreviewed/2024/10/GHSA-mvx2-276h-w78v/GHSA-mvx2-276h-w78v.json new file mode 100644 index 00000000000..0da1c67ea4b --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-mvx2-276h-w78v/GHSA-mvx2-276h-w78v.json @@ -0,0 +1,43 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mvx2-276h-w78v", + "modified": "2024-10-31T21:31:45Z", + "published": "2024-10-31T21:31:45Z", + "aliases": [ + "CVE-2024-39721" + ], + "details": "An issue was discovered in Ollama before 0.1.34. The CreateModelHandler function uses os.Open to read a file until completion. The req.Path parameter is user-controlled and can be set to /dev/random, which is blocking, causing the goroutine to run infinitely (even after the HTTP request is aborted by the client).", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-39721" + }, + { + "type": "WEB", + "url": "https://github.com/ollama/ollama/blob/9164b0161bcb24e543cba835a8863b80af2c0c21/server/routes.go#L557" + }, + { + "type": "WEB", + "url": "https://github.com/ollama/ollama/blob/adeb40eaf29039b8964425f69a9315f9f1694ba8/server/routes.go#L536" + }, + { + "type": "WEB", + "url": "https://oligosecurity.webflow.io/blog/more-models-more-probllms" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T20:15:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-q84v-q853-g3vh/GHSA-q84v-q853-g3vh.json b/advisories/unreviewed/2024/10/GHSA-q84v-q853-g3vh/GHSA-q84v-q853-g3vh.json index ce500d8c8d1..233b3af3af5 100644 --- a/advisories/unreviewed/2024/10/GHSA-q84v-q853-g3vh/GHSA-q84v-q853-g3vh.json +++ b/advisories/unreviewed/2024/10/GHSA-q84v-q853-g3vh/GHSA-q84v-q853-g3vh.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-q84v-q853-g3vh", - "modified": "2024-10-09T06:30:22Z", + "modified": "2024-10-31T21:31:45Z", "published": "2024-10-09T06:30:22Z", "aliases": [ "CVE-2024-42934" ], "details": "OpenIPMI before 2.0.36 has an out-of-bounds array access (for authentication type) in the ipmi_sim simulator, resulting in denial of service or (with very low probability) authentication bypass or code execution.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L" + } ], "affected": [ @@ -33,9 +36,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-862" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-09T05:15:13Z" diff --git a/advisories/unreviewed/2024/10/GHSA-q9m9-pcc5-v5hf/GHSA-q9m9-pcc5-v5hf.json b/advisories/unreviewed/2024/10/GHSA-q9m9-pcc5-v5hf/GHSA-q9m9-pcc5-v5hf.json new file mode 100644 index 00000000000..3f711d8ca39 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-q9m9-pcc5-v5hf/GHSA-q9m9-pcc5-v5hf.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-q9m9-pcc5-v5hf", + "modified": "2024-10-31T21:31:45Z", + "published": "2024-10-31T21:31:45Z", + "aliases": [ + "CVE-2024-48360" + ], + "details": "Qualitor v8.24 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /request/viewValidacao.php.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48360" + }, + { + "type": "WEB", + "url": "https://github.com/OpenXP-Research/CVE-2024-48360" + }, + { + "type": "WEB", + "url": "https://www.qualitor.com.br/qualitor-8-20" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T20:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-qf6h-766m-v7v7/GHSA-qf6h-766m-v7v7.json b/advisories/unreviewed/2024/10/GHSA-qf6h-766m-v7v7/GHSA-qf6h-766m-v7v7.json index 769a3933e1c..64c370a0ca4 100644 --- a/advisories/unreviewed/2024/10/GHSA-qf6h-766m-v7v7/GHSA-qf6h-766m-v7v7.json +++ b/advisories/unreviewed/2024/10/GHSA-qf6h-766m-v7v7/GHSA-qf6h-766m-v7v7.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-qf6h-766m-v7v7", - "modified": "2024-10-31T18:31:19Z", + "modified": "2024-10-31T21:31:45Z", "published": "2024-10-31T18:31:19Z", "aliases": [ "CVE-2024-51260" ], "details": "DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the acme_process function.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-77" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-31T16:15:06Z" diff --git a/advisories/unreviewed/2024/10/GHSA-qq59-g9rc-v6vx/GHSA-qq59-g9rc-v6vx.json b/advisories/unreviewed/2024/10/GHSA-qq59-g9rc-v6vx/GHSA-qq59-g9rc-v6vx.json index e48eee4c882..5972ee5da94 100644 --- a/advisories/unreviewed/2024/10/GHSA-qq59-g9rc-v6vx/GHSA-qq59-g9rc-v6vx.json +++ b/advisories/unreviewed/2024/10/GHSA-qq59-g9rc-v6vx/GHSA-qq59-g9rc-v6vx.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-qq59-g9rc-v6vx", - "modified": "2024-10-31T18:31:19Z", + "modified": "2024-10-31T21:31:45Z", "published": "2024-10-31T18:31:19Z", "aliases": [ "CVE-2024-51255" ], "details": "DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the ruequest_certificate function.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-77" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-31T16:15:06Z" diff --git a/advisories/unreviewed/2024/10/GHSA-v4pp-cm3w-w8gh/GHSA-v4pp-cm3w-w8gh.json b/advisories/unreviewed/2024/10/GHSA-v4pp-cm3w-w8gh/GHSA-v4pp-cm3w-w8gh.json index a688af78450..884555fecab 100644 --- a/advisories/unreviewed/2024/10/GHSA-v4pp-cm3w-w8gh/GHSA-v4pp-cm3w-w8gh.json +++ b/advisories/unreviewed/2024/10/GHSA-v4pp-cm3w-w8gh/GHSA-v4pp-cm3w-w8gh.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-v4pp-cm3w-w8gh", - "modified": "2024-10-30T18:30:49Z", + "modified": "2024-10-31T21:31:45Z", "published": "2024-10-30T18:30:49Z", "aliases": [ "CVE-2024-48569" ], "details": "Proactive Risk Manager version 9.1.1.0 is affected by multiple Cross-Site Scripting (XSS) vulnerabilities in the add/edit form fields, at the urls starting with the subpaths: /ar/config/configuation/ and /ar/config/risk-strategy-control/", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-30T18:15:07Z" diff --git a/advisories/unreviewed/2024/10/GHSA-v4vg-xp9f-3jx2/GHSA-v4vg-xp9f-3jx2.json b/advisories/unreviewed/2024/10/GHSA-v4vg-xp9f-3jx2/GHSA-v4vg-xp9f-3jx2.json index 099d908da9d..26edab9c252 100644 --- a/advisories/unreviewed/2024/10/GHSA-v4vg-xp9f-3jx2/GHSA-v4vg-xp9f-3jx2.json +++ b/advisories/unreviewed/2024/10/GHSA-v4vg-xp9f-3jx2/GHSA-v4vg-xp9f-3jx2.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-v4vg-xp9f-3jx2", - "modified": "2024-10-31T15:30:59Z", + "modified": "2024-10-31T21:31:45Z", "published": "2024-10-31T15:30:59Z", "aliases": [ "CVE-2024-51259" ], "details": "DrayTek Vigor3900 1.5.1.3 allows attackers to inject malicious commands into mainfunction.cgi and execute arbitrary commands by calling the setup_cacertificate function.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-77" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-31T14:15:06Z" diff --git a/advisories/unreviewed/2024/10/GHSA-w7wc-7mpm-jjf4/GHSA-w7wc-7mpm-jjf4.json b/advisories/unreviewed/2024/10/GHSA-w7wc-7mpm-jjf4/GHSA-w7wc-7mpm-jjf4.json new file mode 100644 index 00000000000..4a11807f38b --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-w7wc-7mpm-jjf4/GHSA-w7wc-7mpm-jjf4.json @@ -0,0 +1,54 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w7wc-7mpm-jjf4", + "modified": "2024-10-31T21:31:46Z", + "published": "2024-10-31T21:31:46Z", + "aliases": [ + "CVE-2024-10597" + ], + "details": "A vulnerability classified as critical has been found in ESAFENET CDG 5. This affects the function delPolicyAction of the file /com/esafenet/servlet/system/PolicyActionService.java. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10597" + }, + { + "type": "WEB", + "url": "https://flowus.cn/share/380bcc9d-95ae-4576-b3df-bf3b06f1c5cd?code=G8A6P3" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.282609" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.282609" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.431325" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T21:15:15Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-wrjh-x85j-vvg8/GHSA-wrjh-x85j-vvg8.json b/advisories/unreviewed/2024/10/GHSA-wrjh-x85j-vvg8/GHSA-wrjh-x85j-vvg8.json index 70072f27f5e..bb1647a5707 100644 --- a/advisories/unreviewed/2024/10/GHSA-wrjh-x85j-vvg8/GHSA-wrjh-x85j-vvg8.json +++ b/advisories/unreviewed/2024/10/GHSA-wrjh-x85j-vvg8/GHSA-wrjh-x85j-vvg8.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-wrjh-x85j-vvg8", - "modified": "2024-10-30T18:30:49Z", + "modified": "2024-10-31T21:31:45Z", "published": "2024-10-30T18:30:49Z", "aliases": [ "CVE-2024-48647" ], "details": "A file disclosure vulnerability exists in Sage 1000 v7.0.0. This vulnerability allows remote attackers to retrieve arbitrary files from the server's file system by manipulating the URL parameter in HTTP requests. The attacker can exploit this flaw to access sensitive information, including configuration files that may contain credentials and system settings, which could lead to further compromise of the server.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-552" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-30T18:15:07Z" diff --git a/advisories/unreviewed/2024/10/GHSA-xr7h-qxr4-vfvf/GHSA-xr7h-qxr4-vfvf.json b/advisories/unreviewed/2024/10/GHSA-xr7h-qxr4-vfvf/GHSA-xr7h-qxr4-vfvf.json new file mode 100644 index 00000000000..fa571635e50 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-xr7h-qxr4-vfvf/GHSA-xr7h-qxr4-vfvf.json @@ -0,0 +1,54 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-xr7h-qxr4-vfvf", + "modified": "2024-10-31T21:31:45Z", + "published": "2024-10-31T21:31:45Z", + "aliases": [ + "CVE-2024-10596" + ], + "details": "A vulnerability was found in ESAFENET CDG 5. It has been rated as critical. Affected by this issue is the function delEntryptPolicySort of the file /com/esafenet/servlet/system/EncryptPolicyTypeService.java. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10596" + }, + { + "type": "WEB", + "url": "https://flowus.cn/share/0c59c0ea-9624-42b5-9e06-66fab39b773c?code=G8A6P3" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.282608" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.282608" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.431307" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-31T21:15:15Z" + } +} \ No newline at end of file