netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-x847-vxvj-g6rj
GHSA-4m72-473m-w7q8
GHSA-cwf3-fx63-9w5f
GHSA-3m98-m7jj-v78v
GHSA-54w6-f3f8-54q2
GHSA-6vmf-4hpw-fgcm
GHSA-7wvc-54wp-pv8x
GHSA-873c-cc79-4g4q
GHSA-887q-rm9x-7wg9
GHSA-97qm-2h4w-qghq
GHSA-gg96-2qm6-wg5x
GHSA-grq3-9m83-rgpr
GHSA-hwmm-rqf4-5hqh
GHSA-jf72-28rf-27vg
GHSA-m5q6-hm4m-4vv5
GHSA-mf5g-58v5-r995
GHSA-rmh8-223g-x64m
GHSA-v2gg-jq7f-8425
GHSA-v87c-pw6c-99w6
GHSA-w7rc-39gw-qjww
GHSA-wwr9-w57c-2f9m
This commit is contained in:
advisory-database[bot]
2024-12-13 21:31:54 +00:00
parent 437d86afd8
commit 89e7bbf2a9
21 changed files with 176 additions and 44 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/06/GHSA-x847-vxvj-g6rj/GHSA-x847-vxvj-g6rj.json
+1
View File
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-639",
"CWE-863"
],
"severity": "HIGH",
advisories/unreviewed/2024/02/GHSA-4m72-473m-w7q8/GHSA-4m72-473m-w7q8.json
+3 -1
View File
@@ -29,7 +29,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/02/GHSA-cwf3-fx63-9w5f/GHSA-cwf3-fx63-9w5f.json
+3 -1
View File
@@ -29,7 +29,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-787"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/12/GHSA-3m98-m7jj-v78v/GHSA-3m98-m7jj-v78v.json
+3 -1
View File
@@ -33,7 +33,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-22"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/12/GHSA-54w6-f3f8-54q2/GHSA-54w6-f3f8-54q2.json
+8 -3
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-54w6-f3f8-54q2",
"modified": "2024-12-12T03:33:06Z",
"modified": "2024-12-13T21:30:36Z",
"published": "2024-12-12T03:33:06Z",
"aliases": [
"CVE-2024-54498"
],
"details": "A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An app may be able to break out of its sandbox.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -29,7 +34,7 @@
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-12T02:15:30Z"
advisories/unreviewed/2024/12/GHSA-6vmf-4hpw-fgcm/GHSA-6vmf-4hpw-fgcm.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6vmf-4hpw-fgcm",
"modified": "2024-12-12T03:33:06Z",
"modified": "2024-12-13T21:30:35Z",
"published": "2024-12-12T03:33:06Z",
"aliases": [
"CVE-2024-44201"
],
"details": "The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.3, macOS Ventura 13.7.2, iOS 18.1 and iPadOS 18.1, macOS Sonoma 14.7.2. Processing a malicious crafted file may lead to a denial-of-service.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
@@ -32,8 +37,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-404"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-12T02:15:23Z"
advisories/unreviewed/2024/12/GHSA-7wvc-54wp-pv8x/GHSA-7wvc-54wp-pv8x.json
+3 -1
View File
@@ -33,7 +33,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-922"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/12/GHSA-873c-cc79-4g4q/GHSA-873c-cc79-4g4q.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-873c-cc79-4g4q",
"modified": "2024-12-12T03:33:06Z",
"modified": "2024-12-13T21:30:35Z",
"published": "2024-12-12T03:33:06Z",
"aliases": [
"CVE-2024-44212"
],
"details": "A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1, visionOS 2.1, tvOS 18.1, iOS 18.1 and iPadOS 18.1, watchOS 11.1. Cookies belonging to one origin may be sent to another origin.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [],
"references": [
{
@@ -36,8 +41,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-346"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-12T02:15:23Z"
advisories/unreviewed/2024/12/GHSA-887q-rm9x-7wg9/GHSA-887q-rm9x-7wg9.json
+8 -3
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-887q-rm9x-7wg9",
"modified": "2024-12-12T03:33:06Z",
"modified": "2024-12-13T21:30:36Z",
"published": "2024-12-12T03:33:06Z",
"aliases": [
"CVE-2024-54465"
],
"details": "A logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2. An app may be able to elevate privileges.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -21,7 +26,7 @@
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-12T02:15:29Z"
advisories/unreviewed/2024/12/GHSA-97qm-2h4w-qghq/GHSA-97qm-2h4w-qghq.json
+1
View File
@@ -26,6 +26,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-281",
"CWE-532"
],
"severity": "MODERATE",
advisories/unreviewed/2024/12/GHSA-gg96-2qm6-wg5x/GHSA-gg96-2qm6-wg5x.json
+8 -3
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gg96-2qm6-wg5x",
"modified": "2024-12-12T03:33:06Z",
"modified": "2024-12-13T21:30:36Z",
"published": "2024-12-12T03:33:06Z",
"aliases": [
"CVE-2024-54503"
],
"details": "An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.2 and iPadOS 18.2. Muting a call while ringing may not result in mute being enabled.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
@@ -21,7 +26,7 @@
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-12T02:15:31Z"
advisories/unreviewed/2024/12/GHSA-grq3-9m83-rgpr/GHSA-grq3-9m83-rgpr.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-grq3-9m83-rgpr",
"modified": "2024-12-12T03:33:06Z",
"modified": "2024-12-13T21:30:35Z",
"published": "2024-12-12T03:33:06Z",
"aliases": [
"CVE-2024-44200"
],
"details": "This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1. An app may be able to read sensitive location information.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-922"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-12T02:15:23Z"
advisories/unreviewed/2024/12/GHSA-hwmm-rqf4-5hqh/GHSA-hwmm-rqf4-5hqh.json
+8 -3
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hwmm-rqf4-5hqh",
"modified": "2024-12-12T03:33:06Z",
"modified": "2024-12-13T21:30:36Z",
"published": "2024-12-12T03:33:06Z",
"aliases": [
"CVE-2024-44248"
],
"details": "This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.2, macOS Sonoma 14.7.2. A user with screen sharing access may be able to view another user's screen.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [],
"references": [
{
@@ -25,7 +30,7 @@
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-12T02:15:24Z"
advisories/unreviewed/2024/12/GHSA-jf72-28rf-27vg/GHSA-jf72-28rf-27vg.json
+8 -3
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jf72-28rf-27vg",
"modified": "2024-12-12T03:33:06Z",
"modified": "2024-12-13T21:30:36Z",
"published": "2024-12-12T03:33:06Z",
"aliases": [
"CVE-2024-54504"
],
"details": "A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.2. An app may be able to access user-sensitive data.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [],
"references": [
{
@@ -21,7 +26,7 @@
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-12T02:15:31Z"
advisories/unreviewed/2024/12/GHSA-m5q6-hm4m-4vv5/GHSA-m5q6-hm4m-4vv5.json
+25
View File
@@ -0,0 +1,25 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m5q6-hm4m-4vv5",
"modified": "2024-12-13T21:30:36Z",
"published": "2024-12-13T21:30:36Z",
"aliases": [
"CVE-2024-12632"
],
"details": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-55956. Reason: This candidate is a duplicate of CVE-2024-55956. Notes: All CVE users should reference CVE-2024-55956 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12632"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-13T21:15:09Z"
}
}
advisories/unreviewed/2024/12/GHSA-mf5g-58v5-r995/GHSA-mf5g-58v5-r995.json
+8 -3
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mf5g-58v5-r995",
"modified": "2024-12-12T03:33:06Z",
"modified": "2024-12-13T21:30:36Z",
"published": "2024-12-12T03:33:06Z",
"aliases": [
"CVE-2024-44290"
],
"details": "This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1, watchOS 11.1. An app may be able to determine a user’s current location.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"
}
],
"affected": [],
"references": [
{
@@ -25,7 +30,7 @@
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-12T02:15:24Z"
advisories/unreviewed/2024/12/GHSA-rmh8-223g-x64m/GHSA-rmh8-223g-x64m.json
+8 -3
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rmh8-223g-x64m",
"modified": "2024-12-12T03:33:06Z",
"modified": "2024-12-13T21:30:36Z",
"published": "2024-12-12T03:33:06Z",
"aliases": [
"CVE-2024-54500"
],
"details": "The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.3, watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. Processing a maliciously crafted image may result in disclosure of process memory.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [],
"references": [
{
@@ -49,7 +54,7 @@
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-12T02:15:30Z"
advisories/unreviewed/2024/12/GHSA-v2gg-jq7f-8425/GHSA-v2gg-jq7f-8425.json
+8 -3
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v2gg-jq7f-8425",
"modified": "2024-12-12T03:33:06Z",
"modified": "2024-12-13T21:30:36Z",
"published": "2024-12-12T03:33:06Z",
"aliases": [
"CVE-2024-44300"
],
"details": "A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An app may be able to access protected user data.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
}
],
"affected": [],
"references": [
{
@@ -29,7 +34,7 @@
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-12T02:15:24Z"
advisories/unreviewed/2024/12/GHSA-v87c-pw6c-99w6/GHSA-v87c-pw6c-99w6.json
+29
View File
@@ -0,0 +1,29 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v87c-pw6c-99w6",
"modified": "2024-12-13T21:30:36Z",
"published": "2024-12-13T21:30:36Z",
"aliases": [
"CVE-2024-55956"
],
"details": "In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbitrary Bash or PowerShell commands on the host system by leveraging the default settings of the Autorun directory.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55956"
},
{
"type": "WEB",
"url": "https://support.cleo.com/hc/en-us/articles/28408134019735-Cleo-Product-Security-Advisory-CVE-Pending"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-13T21:15:13Z"
}
}
advisories/unreviewed/2024/12/GHSA-w7rc-39gw-qjww/GHSA-w7rc-39gw-qjww.json
+3 -1
View File
@@ -29,7 +29,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-922"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,

Some files were not shown because too many files have changed in this diff Show More