netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-11-05 21:32:07 +00:00
parent 4c32ae390e
commit 84ee08844f
57 changed files with 529 additions and 155 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/07/GHSA-mgcr-5hwm-m58m/GHSA-mgcr-5hwm-m58m.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/02/GHSA-327h-468p-mffv/GHSA-327h-468p-mffv.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-327h-468p-mffv",
"modified": "2024-02-27T03:31:02Z",
"modified": "2024-11-05T21:30:31Z",
"published": "2024-02-27T03:31:02Z",
"aliases": [
"CVE-2024-24096"
],
"details": "Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via BookSBIN.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-27T02:15:06Z"
advisories/unreviewed/2024/02/GHSA-528v-fv7h-v892/GHSA-528v-fv7h-v892.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-528v-fv7h-v892",
"modified": "2024-02-29T03:33:12Z",
"modified": "2024-11-05T21:30:31Z",
"published": "2024-02-29T03:33:12Z",
"aliases": [
"CVE-2023-37495"
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-306"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/02/GHSA-9m3j-vpcw-4f37/GHSA-9m3j-vpcw-4f37.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9m3j-vpcw-4f37",
"modified": "2024-03-04T09:30:29Z",
"modified": "2024-11-05T21:30:30Z",
"published": "2024-02-20T15:31:04Z",
"aliases": [
"CVE-2024-1548"
],
"details": "A website could have obscured the fullscreen notification by using a dropdown select input element. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 123 and Firefox ESR < 115.8.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
}
],
"affected": [
@@ -47,7 +50,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-20T14:15:08Z"
advisories/unreviewed/2024/02/GHSA-gp6j-7c6x-xpmx/GHSA-gp6j-7c6x-xpmx.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gp6j-7c6x-xpmx",
"modified": "2024-02-27T03:31:02Z",
"modified": "2024-11-05T21:30:31Z",
"published": "2024-02-27T03:31:02Z",
"aliases": [
"CVE-2024-24095"
],
"details": "Code-projects Simple Stock System 1.0 is vulnerable to SQL Injection.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-27T02:15:06Z"
advisories/unreviewed/2024/02/GHSA-h3cg-9jm8-7468/GHSA-h3cg-9jm8-7468.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h3cg-9jm8-7468",
"modified": "2024-02-21T09:31:01Z",
"modified": "2024-11-05T21:30:31Z",
"published": "2024-02-21T09:31:01Z",
"aliases": [
"CVE-2023-42858"
],
"details": "The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to access user-sensitive data.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -35,7 +38,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-21T07:15:49Z"
advisories/unreviewed/2024/02/GHSA-p9j3-jrc9-jv9h/GHSA-p9j3-jrc9-jv9h.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p9j3-jrc9-jv9h",
"modified": "2024-02-29T03:33:14Z",
"modified": "2024-11-05T21:30:31Z",
"published": "2024-02-29T03:33:14Z",
"aliases": [
"CVE-2023-49932"
],
"details": "An issue was discovered in Couchbase Server before 7.2.4. An attacker can bypass SQL++ N1QL cURL host restrictions.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-281"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-29T01:41:40Z"
advisories/unreviewed/2024/03/GHSA-35c8-rp3m-p5v6/GHSA-35c8-rp3m-p5v6.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-35c8-rp3m-p5v6",
"modified": "2024-03-21T06:33:04Z",
"modified": "2024-11-05T21:30:31Z",
"published": "2024-03-21T06:33:04Z",
"aliases": [
"CVE-2024-29862"
],
"details": "The Kerlink firewall in ChirpStack chirpstack-mqtt-forwarder before 4.2.1 and chirpstack-gateway-bridge before 4.0.11 wrongly accepts certain TCP packets when a connection is not in the ESTABLISHED state.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-21T04:15:09Z"
advisories/unreviewed/2024/03/GHSA-52jg-m3rm-ch68/GHSA-52jg-m3rm-ch68.json
+1
View File
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-22",
"CWE-26"
],
"severity": "MODERATE",
advisories/unreviewed/2024/03/GHSA-5gr3-55rj-mm4c/GHSA-5gr3-55rj-mm4c.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5gr3-55rj-mm4c",
"modified": "2024-03-04T18:30:38Z",
"modified": "2024-11-05T21:30:31Z",
"published": "2024-03-04T18:30:38Z",
"aliases": [
"CVE-2021-47096"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: rawmidi - fix the uninitalized user_pversion\n\nThe user_pversion was uninitialized for the user space file structure\nin the open function, because the file private structure use\nkmalloc for the allocation.\n\nThe kernel ALSA sequencer code clears the file structure, so no additional\nfixes are required.\n\nBugLink: https://github.com/alsa-project/alsa-lib/issues/178",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-04T18:15:07Z"
advisories/unreviewed/2024/03/GHSA-9475-r4q8-rfwm/GHSA-9475-r4q8-rfwm.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9475-r4q8-rfwm",
"modified": "2024-03-13T21:31:01Z",
"modified": "2024-11-05T21:30:31Z",
"published": "2024-03-05T21:30:25Z",
"aliases": [
"CVE-2024-23256"
],
"details": "A logic issue was addressed with improved state management. This issue is fixed in iOS 17.4 and iPadOS 17.4. A user's locked tabs may be briefly visible while switching tab groups when Locked Private Browsing is enabled.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-05T20:16:01Z"
advisories/unreviewed/2024/03/GHSA-mxh6-2xpg-m77w/GHSA-mxh6-2xpg-m77w.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mxh6-2xpg-m77w",
"modified": "2024-03-23T03:30:25Z",
"modified": "2024-11-05T21:30:31Z",
"published": "2024-03-20T15:32:57Z",
"aliases": [
"CVE-2023-46841"
],
"details": "Recent x86 CPUs offer functionality named Control-flow Enforcement\nTechnology (CET). A sub-feature of this are Shadow Stacks (CET-SS).\nCET-SS is a hardware feature designed to protect against Return Oriented\nProgramming attacks. When enabled, traditional stacks holding both data\nand return addresses are accompanied by so called \"shadow stacks\",\nholding little more than return addresses. Shadow stacks aren't\nwritable by normal instructions, and upon function returns their\ncontents are used to check for possible manipulation of a return address\ncoming from the traditional stack.\n\nIn particular certain memory accesses need intercepting by Xen. In\nvarious cases the necessary emulation involves kind of replaying of\nthe instruction. Such replaying typically involves filling and then\ninvoking of a stub. Such a replayed instruction may raise an\nexceptions, which is expected and dealt with accordingly.\n\nUnfortunately the interaction of both of the above wasn't right:\nRecovery involves removal of a call frame from the (traditional) stack.\nThe counterpart of this operation for the shadow stack was missing.\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-20T11:15:08Z"
advisories/unreviewed/2024/03/GHSA-pp36-2qc2-w4hw/GHSA-pp36-2qc2-w4hw.json
+6 -3
View File
File diff suppressed because one or more lines are too long
advisories/unreviewed/2024/04/GHSA-9fvf-9v35-97qv/GHSA-9fvf-9v35-97qv.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9fvf-9v35-97qv",
"modified": "2024-07-30T03:30:51Z",
"modified": "2024-11-05T21:30:31Z",
"published": "2024-04-04T21:30:30Z",
"aliases": [
"CVE-2023-38709"
],
"details": "Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses.\n\nThis issue affects Apache HTTP Server: through 2.4.58.\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -57,9 +60,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-1284"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-04T20:15:08Z"
advisories/unreviewed/2024/04/GHSA-c8hq-5hxw-3w26/GHSA-c8hq-5hxw-3w26.json
+6 -3
View File
File diff suppressed because one or more lines are too long
advisories/unreviewed/2024/04/GHSA-h63r-7v46-7432/GHSA-h63r-7v46-7432.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h63r-7v46-7432",
"modified": "2024-04-08T09:31:13Z",
"modified": "2024-11-05T21:30:31Z",
"published": "2024-04-08T09:31:13Z",
"aliases": [
"CVE-2023-52554"
],
"details": "Permission control vulnerability in the Bluetooth module.\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-732"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-08T09:15:09Z"
advisories/unreviewed/2024/04/GHSA-hjw5-rhfw-qhhq/GHSA-hjw5-rhfw-qhhq.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hjw5-rhfw-qhhq",
"modified": "2024-04-22T18:30:47Z",
"modified": "2024-11-05T21:30:31Z",
"published": "2024-04-22T18:30:47Z",
"aliases": [
"CVE-2024-28436"
],
"details": "Cross Site Scripting vulnerability in D-Link DAP products DAP-2230, DAP-2310, DAP-2330, DAP-2360, DAP-2553, DAP-2590, DAP-2690, DAP-2695, DAP-3520, DAP-3662 allows a remote attacker to execute arbitrary code via the reload parameter in the session_login.php component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-22T17:15:39Z"
advisories/unreviewed/2024/04/GHSA-qp44-g28j-qgqp/GHSA-qp44-g28j-qgqp.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qp44-g28j-qgqp",
"modified": "2024-04-17T15:30:43Z",
"modified": "2024-11-05T21:30:31Z",
"published": "2024-04-17T15:30:43Z",
"aliases": [
"CVE-2024-32299"
],
"details": "Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability via the PPW parameter in the fromWizardHandle function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-17T14:15:09Z"
advisories/unreviewed/2024/04/GHSA-x246-w3fc-9p6h/GHSA-x246-w3fc-9p6h.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x246-w3fc-9p6h",
"modified": "2024-04-07T09:30:28Z",
"modified": "2024-11-05T21:30:31Z",
"published": "2024-04-07T09:30:28Z",
"aliases": [
"CVE-2024-30415"
],
"details": "Vulnerability of improper permission control in the window management module.\nImpact: Successful exploitation of this vulnerability will affect availability.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-276"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-07T08:15:07Z"
advisories/unreviewed/2024/04/GHSA-x8m6-m5rq-285x/GHSA-x8m6-m5rq-285x.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x8m6-m5rq-285x",
"modified": "2024-04-08T03:30:52Z",
"modified": "2024-11-05T21:30:31Z",
"published": "2024-04-08T03:30:52Z",
"aliases": [
"CVE-2023-52534"
],
"details": "In ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote denial of service with no additional execution privileges needed",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-754"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-08T03:15:08Z"

Some files were not shown because too many files have changed in this diff Show More