netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-c2fx-8r76-gh36
GHSA-9vg3-cf92-h2h7
GHSA-5m69-3chg-6f8m
GHSA-v57h-6hmh-g2p4
This commit is contained in:
advisory-database[bot]
2024-10-24 21:58:03 +00:00
parent 7eec63e7d2
commit 86a124c3d5
4 changed files with 50 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2018/11/GHSA-c2fx-8r76-gh36/GHSA-c2fx-8r76-gh36.json
+17 -10
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c2fx-8r76-gh36",
"modified": "2020-06-16T21:29:59Z",
"modified": "2024-10-24T21:56:33Z",
"published": "2018-11-06T23:14:22Z",
"aliases": [
"CVE-2013-7323"
@@ -9,7 +9,14 @@
"summary": "High severity vulnerability that affects python-gnupg",
"details": "python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U"
}
],
"affected": [
{
@@ -48,6 +55,14 @@
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-c2fx-8r76-gh36"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/python-gnupg/PYSEC-2014-89.yaml"
},
{
"type": "PACKAGE",
"url": "https://github.com/vsajip/python-gnupg"
},
{
"type": "WEB",
"url": "http://seclists.org/oss-sec/2014/q1/243"
@@ -60,14 +75,6 @@
"type": "WEB",
"url": "http://seclists.org/oss-sec/2014/q1/294"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/56616"
},
{
"type": "WEB",
"url": "http://secunia.com/advisories/59031"
},
{
"type": "WEB",
"url": "http://www.debian.org/security/2014/dsa-2946"
advisories/github-reviewed/2020/03/GHSA-9vg3-cf92-h2h7/GHSA-9vg3-cf92-h2h7.json
+17 -22
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9vg3-cf92-h2h7",
"modified": "2023-02-13T20:45:22Z",
"modified": "2024-10-24T21:57:33Z",
"published": "2020-03-10T20:39:05Z",
"aliases": [
"CVE-2013-2167"
@@ -12,6 +12,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
}
],
"affected": [
@@ -20,23 +24,6 @@
"ecosystem": "PyPI",
"name": "python-keystoneclient"
},
"ecosystem_specific": {
"affected_functions": [
"keystoneclient.middleware.auth_token.AuthProtocol._protect_cache_value",
"keystoneclient.middleware.auth_token.AuthProtocol._unprotect_cache_value",
"keystoneclient.middleware.auth_token.AuthProtocol._get_cache_key",
"keystoneclient.middleware.auth_token.AuthProtocol._cache_get",
"keystoneclient.middleware.auth_token.AuthProtocol._cache_store",
"keystoneclient.middleware.auth_token.AuthProtocol._cache_put",
"keystoneclient.middleware.memcache_crypt.generate_aes_key",
"keystoneclient.middleware.memcache_crypt.compute_mac",
"keystoneclient.middleware.memcache_crypt.hash_data",
"keystoneclient.middleware.memcache_crypt.sign_data",
"keystoneclient.middleware.memcache_crypt.verify_signed_data",
"keystoneclient.middleware.memcache_crypt.encrypt_data",
"keystoneclient.middleware.memcache_crypt.decrypt_data"
]
},
"ranges": [
{
"type": "ECOSYSTEM",
@@ -80,10 +67,22 @@
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/85492"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-9vg3-cf92-h2h7"
},
{
"type": "PACKAGE",
"url": "https://github.com/openstack/python-keystoneclient"
},
{
"type": "WEB",
"url": "https://github.com/openstack/python-keystoneclient/commits/0.3.0"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/python-keystoneclient/PYSEC-2019-161.yaml"
},
{
"type": "WEB",
"url": "https://security-tracker.debian.org/tracker/CVE-2013-2167"
@@ -99,10 +98,6 @@
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2013/06/19/5"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/60680"
}
],
"database_specific": {
advisories/github-reviewed/2021/08/GHSA-5m69-3chg-6f8m/GHSA-5m69-3chg-6f8m.json
+13 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5m69-3chg-6f8m",
"modified": "2021-08-26T19:21:15Z",
"modified": "2024-10-24T21:55:10Z",
"published": "2021-08-30T16:23:26Z",
"aliases": [
"CVE-2020-18702"
@@ -12,6 +12,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"
}
],
"affected": [
@@ -44,6 +48,14 @@
"type": "WEB",
"url": "https://github.com/rochacbruno/quokka/issues/675"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-5m69-3chg-6f8m"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/quokka/PYSEC-2021-143.yaml"
},
{
"type": "PACKAGE",
"url": "https://github.com/rochacbruno/quokka"
advisories/github-reviewed/2022/09/GHSA-v57h-6hmh-g2p4/GHSA-v57h-6hmh-g2p4.json
+3 -3
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v57h-6hmh-g2p4",
"modified": "2022-09-23T23:39:17Z",
"modified": "2024-10-24T21:55:59Z",
"published": "2022-09-23T22:07:10Z",
"aliases": [
"CVE-2022-39242"
@@ -18,7 +18,7 @@
{
"package": {
"ecosystem": "crates.io",
"name": "frontier"
"name": "pallet-ethereum"
},
"ranges": [
{
@@ -28,7 +28,7 @@
"introduced": "0"
},
{
"last_affected": "0.1.0"
"last_affected": "3.0.0"
}
]
}