Publish Advisories

GHSA-48f4-cx87-w7mh
GHSA-5hxp-xf5x-xjxf
GHSA-8p8h-w59q-xf45
GHSA-cwpg-8775-j56v
GHSA-mh9r-9pcx-rx55
GHSA-mwhf-6mjm-6w3h
GHSA-qxvg-pp92-xq57

advisories/unreviewed/2024/02/GHSA-48f4-cx87-w7mh/GHSA-48f4-cx87-w7mh.json

@@ -0,0 +1,43 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-48f4-cx87-w7mh",
+  "modified": "2024-02-21T00:31:31Z",
+  "published": "2024-02-21T00:31:31Z",
+  "aliases": [
+    "CVE-2023-50923"
+  ],
+  "details": "In QUIC in RFC 9000, the Latency Spin Bit specification (section 17.4) does not strictly constrain the bit value when the feature is disabled, which might allow remote attackers to construct a covert channel with data represented as changes to the bit value. NOTE: The \"Sheridan, S., Keane, A. (2015). In Proceedings of the 14th European Conference on Cyber Warfare and Security (ECCWS), University of Hertfordshire, Hatfield, UK.\" paper says \"Modern Internet communication protocols provide an almost infinite number of ways in which data can be hidden or embed whithin seemingly normal network traffic.\"",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-50923"
+    },
+    {
+      "type": "WEB",
+      "url": "https://arrow.tudublin.ie/nsdcon/2"
+    },
+    {
+      "type": "WEB",
+      "url": "https://ieeexplore.ieee.org/document/10427406"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.rfc-editor.org/rfc/rfc9000.html"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-21T00:15:07Z"
+  }
+}

advisories/unreviewed/2024/02/GHSA-5hxp-xf5x-xjxf/GHSA-5hxp-xf5x-xjxf.json

@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5hxp-xf5x-xjxf",
+  "modified": "2024-02-21T00:31:31Z",
+  "published": "2024-02-21T00:31:31Z",
+  "aliases": [
+    "CVE-2023-47422"
+  ],
+  "details": "An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46 allows attackers to bypass authentication on any endpoint via a crafted URL.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47422"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/xiaobye-ctf/My-CVE/tree/main/Tenda/CVE-2023-47422"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-20T22:15:08Z"
+  }
+}

advisories/unreviewed/2024/02/GHSA-8p8h-w59q-xf45/GHSA-8p8h-w59q-xf45.json

@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8p8h-w59q-xf45",
+  "modified": "2024-02-21T00:31:31Z",
+  "published": "2024-02-21T00:31:31Z",
+  "aliases": [
+    "CVE-2024-23758"
+  ],
+  "details": "An issue discovered in Unisys Stealth 5.3.062.0 allows attackers to view sensitive information via the Enterprise ManagementInstaller_msi.log file.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23758"
+    },
+    {
+      "type": "WEB",
+      "url": "https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=70"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-20T23:15:07Z"
+  }
+}

advisories/unreviewed/2024/02/GHSA-cwpg-8775-j56v/GHSA-cwpg-8775-j56v.json

@@ -0,0 +1,42 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cwpg-8775-j56v",
+  "modified": "2024-02-21T00:31:31Z",
+  "published": "2024-02-21T00:31:31Z",
+  "aliases": [
+    "CVE-2023-6936"
+  ],
+  "details": "In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attacker can trigger a buffer over-read on the heap of 5 bytes (WOLFSSL_CALLBACKS is only intended for debugging).\n",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6936"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/wolfSSL/wolfssl/pull/6949"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wolfssl.com/docs/security-vulnerabilities"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-20T22:15:08Z"
+  }
+}

advisories/unreviewed/2024/02/GHSA-mh9r-9pcx-rx55/GHSA-mh9r-9pcx-rx55.json

@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mh9r-9pcx-rx55",
+  "modified": "2024-02-21T00:31:31Z",
+  "published": "2024-02-21T00:31:31Z",
+  "aliases": [
+    "CVE-2021-29050"
+  ],
+  "details": "Cross-Site Request Forgery (CSRF) vulnerability in the terms of use page in Liferay Portal before 7.3.6, and Liferay DXP 7.3 before service pack 1, 7.2 before fix pack 11 allows remote attackers to accept the site's terms of use via social engineering and enticing the user to visit a malicious page.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-29050"
+    },
+    {
+      "type": "WEB",
+      "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2021-29050"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-20T22:15:08Z"
+  }
+}

advisories/unreviewed/2024/02/GHSA-mwhf-6mjm-6w3h/GHSA-mwhf-6mjm-6w3h.json

@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-mwhf-6mjm-6w3h",
+  "modified": "2024-02-21T00:31:31Z",
+  "published": "2024-02-21T00:31:31Z",
+  "aliases": [
+    "CVE-2021-29038"
+  ],
+  "details": "Liferay Portal 7.2.0 through 7.3.5, and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, 7.2 before fix pack 17, and older unsupported versions does not obfuscate password reminder answers on the page, which allows attackers to use man-in-the-middle or shoulder surfing attacks to steal user's password reminder answers.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-29038"
+    },
+    {
+      "type": "WEB",
+      "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2021-29038"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-20T22:15:08Z"
+  }
+}

advisories/unreviewed/2024/02/GHSA-qxvg-pp92-xq57/GHSA-qxvg-pp92-xq57.json

@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-qxvg-pp92-xq57",
+  "modified": "2024-02-21T00:31:31Z",
+  "published": "2024-02-21T00:31:31Z",
+  "aliases": [
+    "CVE-2024-25428"
+  ],
+  "details": "SQL Injection vulnerability in MRCMS v3.1.2 allows attackers to run arbitrary system commands via the status parameter.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25428"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/wuweiit/mushroom/issues/19"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-02-20T22:15:08Z"
+  }
+}