netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-07-26 15:33:27 +00:00
parent 29d15f7ce4
commit 88893362d0
33 changed files with 290 additions and 70 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/04/GHSA-4mm4-33wm-56jr/GHSA-4mm4-33wm-56jr.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4mm4-33wm-56jr",
"modified": "2024-07-25T21:31:19Z",
"modified": "2024-07-26T15:31:48Z",
"published": "2024-04-02T00:30:47Z",
"aliases": [
"CVE-2024-3165"
@@ -36,6 +36,10 @@
{
"type": "WEB",
"url": "https://auth.dotcms.com/security/SI-70?token=563ec927-3190-4478-bd77-0d6f8c6fc676"
},
{
"type": "WEB",
"url": "https://www.dotcms.com/security/SI-70"
}
],
"database_specific": {
advisories/unreviewed/2024/04/GHSA-vhhq-fxg5-hvp8/GHSA-vhhq-fxg5-hvp8.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vhhq-fxg5-hvp8",
"modified": "2024-07-25T21:31:19Z",
"modified": "2024-07-26T15:31:48Z",
"published": "2024-04-02T00:30:46Z",
"aliases": [
"CVE-2024-3164"
@@ -36,6 +36,10 @@
{
"type": "WEB",
"url": "https://auth.dotcms.com/security/SI-69?token=dc1f0241-b697-41dd-8140-154658e90c54"
},
{
"type": "WEB",
"url": "https://www.dotcms.com/security/SI-69"
}
],
"database_specific": {
advisories/unreviewed/2024/06/GHSA-7c32-qxxc-879m/GHSA-7c32-qxxc-879m.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7c32-qxxc-879m",
"modified": "2024-07-16T21:30:49Z",
"modified": "2024-07-26T15:31:49Z",
"published": "2024-06-16T15:30:44Z",
"aliases": [
"CVE-2024-38458"
],
"details": "Xenforo before 2.2.16 allows code injection.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-16T15:15:51Z"
advisories/unreviewed/2024/06/GHSA-9cv8-f6m9-rm59/GHSA-9cv8-f6m9-rm59.json
+1 -1
View File
@@ -48,7 +48,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/06/GHSA-9wh8-7hw4-wc5g/GHSA-9wh8-7hw4-wc5g.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9wh8-7hw4-wc5g",
"modified": "2024-06-16T15:30:44Z",
"modified": "2024-07-26T15:31:49Z",
"published": "2024-06-16T15:30:44Z",
"aliases": [
"CVE-2024-38454"
],
"details": "ExpressionEngine before 7.4.11 allows XSS.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-16T15:15:51Z"
advisories/unreviewed/2024/06/GHSA-h362-fq3p-pqgm/GHSA-h362-fq3p-pqgm.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h362-fq3p-pqgm",
"modified": "2024-07-16T21:30:49Z",
"modified": "2024-07-26T15:31:49Z",
"published": "2024-06-16T15:30:44Z",
"aliases": [
"CVE-2024-38457"
],
"details": "Xenforo before 2.2.16 allows CSRF.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-352"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-16T15:15:51Z"
advisories/unreviewed/2024/06/GHSA-wc5f-w959-5pxw/GHSA-wc5f-w959-5pxw.json
+1 -1
View File
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/06/GHSA-xhhx-8x4v-2374/GHSA-xhhx-8x4v-2374.json
+1 -1
View File
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/07/GHSA-34x5-w6rv-c97v/GHSA-34x5-w6rv-c97v.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-34x5-w6rv-c97v",
"modified": "2024-07-24T21:31:31Z",
"modified": "2024-07-26T15:31:50Z",
"published": "2024-07-24T21:31:31Z",
"aliases": [
"CVE-2024-41551"
],
"details": "CampCodes Supplier Management System v1.0 is vulnerable to SQL injection via Supply_Management_System/admin/view_order_items.php?id= .",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-24T20:15:04Z"
advisories/unreviewed/2024/07/GHSA-4298-7v99-63c5/GHSA-4298-7v99-63c5.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4298-7v99-63c5",
"modified": "2024-07-22T12:30:35Z",
"modified": "2024-07-26T15:31:50Z",
"published": "2024-07-22T12:30:35Z",
"aliases": [
"CVE-2024-33933"
advisories/unreviewed/2024/07/GHSA-47mr-2899-hh6f/GHSA-47mr-2899-hh6f.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-78"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/07/GHSA-4r38-rqh5-3fvr/GHSA-4r38-rqh5-3fvr.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4r38-rqh5-3fvr",
"modified": "2024-07-24T15:31:28Z",
"modified": "2024-07-26T15:31:50Z",
"published": "2024-07-24T15:31:28Z",
"aliases": [
"CVE-2024-31977"
],
"details": "Adtran 834-5 11.1.0.101-202106231430, and fixed as of SmartOS Version 12.5.5.1, devices allow OS Command Injection via shell metacharacters to the Ping or Traceroute utility.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-78"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-24T15:15:11Z"
advisories/unreviewed/2024/07/GHSA-6572-8r92-7fjf/GHSA-6572-8r92-7fjf.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6572-8r92-7fjf",
"modified": "2024-07-26T15:31:51Z",
"published": "2024-07-26T15:31:51Z",
"aliases": [
"CVE-2024-41692"
],
"details": "This vulnerability exists in SyroTech SY-GPON-1110-WDONT Router due to presence of root terminal access on a serial interface without proper access control. An attacker with physical access could exploit this by accessing the root shell on the vulnerable system.\n\nSuccessful exploitation of this vulnerability could allow the attacker to execute arbitrary commands with root privileges on the targeted system.",
"severity": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-41692"
},
{
"type": "WEB",
"url": "https://cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0225"
}
],
"database_specific": {
"cwe_ids": [
"CWE-1191"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-26T13:15:09Z"
}
}
advisories/unreviewed/2024/07/GHSA-8wc4-v9cf-9rcc/GHSA-8wc4-v9cf-9rcc.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8wc4-v9cf-9rcc",
"modified": "2024-07-24T21:31:31Z",
"modified": "2024-07-26T15:31:50Z",
"published": "2024-07-24T21:31:31Z",
"aliases": [
"CVE-2024-41460"
],
"details": "Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/RouteStatic.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-24T21:15:12Z"
advisories/unreviewed/2024/07/GHSA-9354-p3xr-gqw5/GHSA-9354-p3xr-gqw5.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-1321"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/07/GHSA-cc7x-v8jj-qg95/GHSA-cc7x-v8jj-qg95.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cc7x-v8jj-qg95",
"modified": "2024-07-24T21:31:31Z",
"modified": "2024-07-26T15:31:50Z",
"published": "2024-07-24T21:31:31Z",
"aliases": [
"CVE-2024-41462"
],
"details": "Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the page parameter at ip/goform/DhcpListClient.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-24T21:15:12Z"
advisories/unreviewed/2024/07/GHSA-g2m5-6x74-9mv6/GHSA-g2m5-6x74-9mv6.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g2m5-6x74-9mv6",
"modified": "2024-07-24T15:31:27Z",
"modified": "2024-07-26T15:31:50Z",
"published": "2024-07-24T15:31:27Z",
"aliases": [
"CVE-2024-6096"
advisories/unreviewed/2024/07/GHSA-ggqv-qggh-5p8q/GHSA-ggqv-qggh-5p8q.json
+42
View File
@@ -0,0 +1,42 @@
{
"schema_version": "1.4.0",
"id": "GHSA-ggqv-qggh-5p8q",
"modified": "2024-07-26T15:31:51Z",
"published": "2024-07-26T15:31:51Z",
"aliases": [
"CVE-2024-40689"
],
"details": "IBM InfoSphere Information Server 11.7 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database. IBM X-Force ID: 297719.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40689"
},
{
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/297719"
},
{
"type": "WEB",
"url": "https://www.ibm.com/support/pages/node/7160579"
}
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-26T14:15:02Z"
}
}
advisories/unreviewed/2024/07/GHSA-gwr6-5fvh-8v7r/GHSA-gwr6-5fvh-8v7r.json
+42
View File
@@ -0,0 +1,42 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gwr6-5fvh-8v7r",
"modified": "2024-07-26T15:31:51Z",
"published": "2024-07-26T15:31:51Z",
"aliases": [
"CVE-2024-7128"
],
"details": "A flaw was found in the Openshift console. Several endpoints in the application use the authHandler() and authHandlerWithUser() middleware functions. When the default authentication provider (\"openShiftAuth\") is set, these functions do not perform any authentication checks, relying instead on the targeted service to handle authentication and authorization. This issue leads to various degrees of data exposure due to a lack of proper credential verification.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7128"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2024-7128"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2300037"
}
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-26T14:15:03Z"
}
}
advisories/unreviewed/2024/07/GHSA-hww2-2qgh-frpq/GHSA-hww2-2qgh-frpq.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hww2-2qgh-frpq",
"modified": "2024-07-24T21:31:31Z",
"modified": "2024-07-26T15:31:50Z",
"published": "2024-07-24T21:31:31Z",
"aliases": [
"CVE-2024-41463"
],
"details": "Tenda FH1201 v1.2.0.14 was discovered to contain a stack-based buffer overflow vulnerability via the entrys parameter at ip/goform/addressNat.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-24T21:15:12Z"

Some files were not shown because too many files have changed in this diff Show More