From 87d5f7ed90b24b376f4a5b255e947d73bd73e2bb Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Wed, 21 Feb 2024 00:32:47 +0000 Subject: [PATCH] Publish Advisories GHSA-48f4-cx87-w7mh GHSA-5hxp-xf5x-xjxf GHSA-8p8h-w59q-xf45 GHSA-cwpg-8775-j56v GHSA-mh9r-9pcx-rx55 GHSA-mwhf-6mjm-6w3h GHSA-qxvg-pp92-xq57 --- .../GHSA-48f4-cx87-w7mh.json | 43 +++++++++++++++++++ .../GHSA-5hxp-xf5x-xjxf.json | 35 +++++++++++++++ .../GHSA-8p8h-w59q-xf45.json | 35 +++++++++++++++ .../GHSA-cwpg-8775-j56v.json | 42 ++++++++++++++++++ .../GHSA-mh9r-9pcx-rx55.json | 35 +++++++++++++++ .../GHSA-mwhf-6mjm-6w3h.json | 35 +++++++++++++++ .../GHSA-qxvg-pp92-xq57.json | 35 +++++++++++++++ 7 files changed, 260 insertions(+) create mode 100644 advisories/unreviewed/2024/02/GHSA-48f4-cx87-w7mh/GHSA-48f4-cx87-w7mh.json create mode 100644 advisories/unreviewed/2024/02/GHSA-5hxp-xf5x-xjxf/GHSA-5hxp-xf5x-xjxf.json create mode 100644 advisories/unreviewed/2024/02/GHSA-8p8h-w59q-xf45/GHSA-8p8h-w59q-xf45.json create mode 100644 advisories/unreviewed/2024/02/GHSA-cwpg-8775-j56v/GHSA-cwpg-8775-j56v.json create mode 100644 advisories/unreviewed/2024/02/GHSA-mh9r-9pcx-rx55/GHSA-mh9r-9pcx-rx55.json create mode 100644 advisories/unreviewed/2024/02/GHSA-mwhf-6mjm-6w3h/GHSA-mwhf-6mjm-6w3h.json create mode 100644 advisories/unreviewed/2024/02/GHSA-qxvg-pp92-xq57/GHSA-qxvg-pp92-xq57.json diff --git a/advisories/unreviewed/2024/02/GHSA-48f4-cx87-w7mh/GHSA-48f4-cx87-w7mh.json b/advisories/unreviewed/2024/02/GHSA-48f4-cx87-w7mh/GHSA-48f4-cx87-w7mh.json new file mode 100644 index 00000000000..099073947d1 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-48f4-cx87-w7mh/GHSA-48f4-cx87-w7mh.json @@ -0,0 +1,43 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-48f4-cx87-w7mh", + "modified": "2024-02-21T00:31:31Z", + "published": "2024-02-21T00:31:31Z", + "aliases": [ + "CVE-2023-50923" + ], + "details": "In QUIC in RFC 9000, the Latency Spin Bit specification (section 17.4) does not strictly constrain the bit value when the feature is disabled, which might allow remote attackers to construct a covert channel with data represented as changes to the bit value. NOTE: The \"Sheridan, S., Keane, A. (2015). In Proceedings of the 14th European Conference on Cyber Warfare and Security (ECCWS), University of Hertfordshire, Hatfield, UK.\" paper says \"Modern Internet communication protocols provide an almost infinite number of ways in which data can be hidden or embed whithin seemingly normal network traffic.\"", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-50923" + }, + { + "type": "WEB", + "url": "https://arrow.tudublin.ie/nsdcon/2" + }, + { + "type": "WEB", + "url": "https://ieeexplore.ieee.org/document/10427406" + }, + { + "type": "WEB", + "url": "https://www.rfc-editor.org/rfc/rfc9000.html" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-21T00:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-5hxp-xf5x-xjxf/GHSA-5hxp-xf5x-xjxf.json b/advisories/unreviewed/2024/02/GHSA-5hxp-xf5x-xjxf/GHSA-5hxp-xf5x-xjxf.json new file mode 100644 index 00000000000..fde866ba4be --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-5hxp-xf5x-xjxf/GHSA-5hxp-xf5x-xjxf.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5hxp-xf5x-xjxf", + "modified": "2024-02-21T00:31:31Z", + "published": "2024-02-21T00:31:31Z", + "aliases": [ + "CVE-2023-47422" + ], + "details": "An access control issue in /usr/sbin/httpd in Tenda TX9 V1 V22.03.02.54, Tenda AX3 V3 V16.03.12.11, Tenda AX9 V1 V22.03.01.46, and Tenda AX12 V1 V22.03.01.46 allows attackers to bypass authentication on any endpoint via a crafted URL.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47422" + }, + { + "type": "WEB", + "url": "https://github.com/xiaobye-ctf/My-CVE/tree/main/Tenda/CVE-2023-47422" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-20T22:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-8p8h-w59q-xf45/GHSA-8p8h-w59q-xf45.json b/advisories/unreviewed/2024/02/GHSA-8p8h-w59q-xf45/GHSA-8p8h-w59q-xf45.json new file mode 100644 index 00000000000..0ad147a3fab --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-8p8h-w59q-xf45/GHSA-8p8h-w59q-xf45.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8p8h-w59q-xf45", + "modified": "2024-02-21T00:31:31Z", + "published": "2024-02-21T00:31:31Z", + "aliases": [ + "CVE-2024-23758" + ], + "details": "An issue discovered in Unisys Stealth 5.3.062.0 allows attackers to view sensitive information via the Enterprise ManagementInstaller_msi.log file.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-23758" + }, + { + "type": "WEB", + "url": "https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=70" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-20T23:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-cwpg-8775-j56v/GHSA-cwpg-8775-j56v.json b/advisories/unreviewed/2024/02/GHSA-cwpg-8775-j56v/GHSA-cwpg-8775-j56v.json new file mode 100644 index 00000000000..4a39869ef03 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-cwpg-8775-j56v/GHSA-cwpg-8775-j56v.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cwpg-8775-j56v", + "modified": "2024-02-21T00:31:31Z", + "published": "2024-02-21T00:31:31Z", + "aliases": [ + "CVE-2023-6936" + ], + "details": "In wolfSSL prior to 5.6.6, if callback functions are enabled (via the WOLFSSL_CALLBACKS flag), then a malicious TLS client or network attacker can trigger a buffer over-read on the heap of 5 bytes (WOLFSSL_CALLBACKS is only intended for debugging).\n", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6936" + }, + { + "type": "WEB", + "url": "https://github.com/wolfSSL/wolfssl/pull/6949" + }, + { + "type": "WEB", + "url": "https://www.wolfssl.com/docs/security-vulnerabilities" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-20T22:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-mh9r-9pcx-rx55/GHSA-mh9r-9pcx-rx55.json b/advisories/unreviewed/2024/02/GHSA-mh9r-9pcx-rx55/GHSA-mh9r-9pcx-rx55.json new file mode 100644 index 00000000000..6e7955d73cd --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-mh9r-9pcx-rx55/GHSA-mh9r-9pcx-rx55.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mh9r-9pcx-rx55", + "modified": "2024-02-21T00:31:31Z", + "published": "2024-02-21T00:31:31Z", + "aliases": [ + "CVE-2021-29050" + ], + "details": "Cross-Site Request Forgery (CSRF) vulnerability in the terms of use page in Liferay Portal before 7.3.6, and Liferay DXP 7.3 before service pack 1, 7.2 before fix pack 11 allows remote attackers to accept the site's terms of use via social engineering and enticing the user to visit a malicious page.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-29050" + }, + { + "type": "WEB", + "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2021-29050" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-20T22:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-mwhf-6mjm-6w3h/GHSA-mwhf-6mjm-6w3h.json b/advisories/unreviewed/2024/02/GHSA-mwhf-6mjm-6w3h/GHSA-mwhf-6mjm-6w3h.json new file mode 100644 index 00000000000..89c87093835 --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-mwhf-6mjm-6w3h/GHSA-mwhf-6mjm-6w3h.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mwhf-6mjm-6w3h", + "modified": "2024-02-21T00:31:31Z", + "published": "2024-02-21T00:31:31Z", + "aliases": [ + "CVE-2021-29038" + ], + "details": "Liferay Portal 7.2.0 through 7.3.5, and older unsupported versions, and Liferay DXP 7.3 before fix pack 1, 7.2 before fix pack 17, and older unsupported versions does not obfuscate password reminder answers on the page, which allows attackers to use man-in-the-middle or shoulder surfing attacks to steal user's password reminder answers.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-29038" + }, + { + "type": "WEB", + "url": "https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/cve-2021-29038" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-20T22:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/02/GHSA-qxvg-pp92-xq57/GHSA-qxvg-pp92-xq57.json b/advisories/unreviewed/2024/02/GHSA-qxvg-pp92-xq57/GHSA-qxvg-pp92-xq57.json new file mode 100644 index 00000000000..04884a3a66e --- /dev/null +++ b/advisories/unreviewed/2024/02/GHSA-qxvg-pp92-xq57/GHSA-qxvg-pp92-xq57.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qxvg-pp92-xq57", + "modified": "2024-02-21T00:31:31Z", + "published": "2024-02-21T00:31:31Z", + "aliases": [ + "CVE-2024-25428" + ], + "details": "SQL Injection vulnerability in MRCMS v3.1.2 allows attackers to run arbitrary system commands via the status parameter.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-25428" + }, + { + "type": "WEB", + "url": "https://github.com/wuweiit/mushroom/issues/19" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-02-20T22:15:08Z" + } +} \ No newline at end of file