From 89e7bbf2a9a6483ac046c3f7ce6aad81c2a6c8ff Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Fri, 13 Dec 2024 21:31:54 +0000 Subject: [PATCH] Publish Advisories GHSA-x847-vxvj-g6rj GHSA-4m72-473m-w7q8 GHSA-cwf3-fx63-9w5f GHSA-3m98-m7jj-v78v GHSA-54w6-f3f8-54q2 GHSA-6vmf-4hpw-fgcm GHSA-7wvc-54wp-pv8x GHSA-873c-cc79-4g4q GHSA-887q-rm9x-7wg9 GHSA-97qm-2h4w-qghq GHSA-gg96-2qm6-wg5x GHSA-grq3-9m83-rgpr GHSA-hwmm-rqf4-5hqh GHSA-jf72-28rf-27vg GHSA-m5q6-hm4m-4vv5 GHSA-mf5g-58v5-r995 GHSA-rmh8-223g-x64m GHSA-v2gg-jq7f-8425 GHSA-v87c-pw6c-99w6 GHSA-w7rc-39gw-qjww GHSA-wwr9-w57c-2f9m --- .../GHSA-x847-vxvj-g6rj.json | 1 + .../GHSA-4m72-473m-w7q8.json | 4 ++- .../GHSA-cwf3-fx63-9w5f.json | 4 ++- .../GHSA-3m98-m7jj-v78v.json | 4 ++- .../GHSA-54w6-f3f8-54q2.json | 11 +++++-- .../GHSA-6vmf-4hpw-fgcm.json | 15 +++++++--- .../GHSA-7wvc-54wp-pv8x.json | 4 ++- .../GHSA-873c-cc79-4g4q.json | 15 +++++++--- .../GHSA-887q-rm9x-7wg9.json | 11 +++++-- .../GHSA-97qm-2h4w-qghq.json | 1 + .../GHSA-gg96-2qm6-wg5x.json | 11 +++++-- .../GHSA-grq3-9m83-rgpr.json | 15 +++++++--- .../GHSA-hwmm-rqf4-5hqh.json | 11 +++++-- .../GHSA-jf72-28rf-27vg.json | 11 +++++-- .../GHSA-m5q6-hm4m-4vv5.json | 25 ++++++++++++++++ .../GHSA-mf5g-58v5-r995.json | 11 +++++-- .../GHSA-rmh8-223g-x64m.json | 11 +++++-- .../GHSA-v2gg-jq7f-8425.json | 11 +++++-- .../GHSA-v87c-pw6c-99w6.json | 29 +++++++++++++++++++ .../GHSA-w7rc-39gw-qjww.json | 4 ++- .../GHSA-wwr9-w57c-2f9m.json | 11 +++++-- 21 files changed, 176 insertions(+), 44 deletions(-) create mode 100644 advisories/unreviewed/2024/12/GHSA-m5q6-hm4m-4vv5/GHSA-m5q6-hm4m-4vv5.json create mode 100644 advisories/unreviewed/2024/12/GHSA-v87c-pw6c-99w6/GHSA-v87c-pw6c-99w6.json diff --git a/advisories/unreviewed/2022/06/GHSA-x847-vxvj-g6rj/GHSA-x847-vxvj-g6rj.json b/advisories/unreviewed/2022/06/GHSA-x847-vxvj-g6rj/GHSA-x847-vxvj-g6rj.json index 48d3521ea35..271571d0164 100644 --- a/advisories/unreviewed/2022/06/GHSA-x847-vxvj-g6rj/GHSA-x847-vxvj-g6rj.json +++ b/advisories/unreviewed/2022/06/GHSA-x847-vxvj-g6rj/GHSA-x847-vxvj-g6rj.json @@ -26,6 +26,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-639", "CWE-863" ], "severity": "HIGH", diff --git a/advisories/unreviewed/2024/02/GHSA-4m72-473m-w7q8/GHSA-4m72-473m-w7q8.json b/advisories/unreviewed/2024/02/GHSA-4m72-473m-w7q8/GHSA-4m72-473m-w7q8.json index be70bde9bae..693746e35ca 100644 --- a/advisories/unreviewed/2024/02/GHSA-4m72-473m-w7q8/GHSA-4m72-473m-w7q8.json +++ b/advisories/unreviewed/2024/02/GHSA-4m72-473m-w7q8/GHSA-4m72-473m-w7q8.json @@ -29,7 +29,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-862" + ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-cwf3-fx63-9w5f/GHSA-cwf3-fx63-9w5f.json b/advisories/unreviewed/2024/02/GHSA-cwf3-fx63-9w5f/GHSA-cwf3-fx63-9w5f.json index a9cd69841cc..c7e8a0bccd2 100644 --- a/advisories/unreviewed/2024/02/GHSA-cwf3-fx63-9w5f/GHSA-cwf3-fx63-9w5f.json +++ b/advisories/unreviewed/2024/02/GHSA-cwf3-fx63-9w5f/GHSA-cwf3-fx63-9w5f.json @@ -29,7 +29,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-787" + ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/12/GHSA-3m98-m7jj-v78v/GHSA-3m98-m7jj-v78v.json b/advisories/unreviewed/2024/12/GHSA-3m98-m7jj-v78v/GHSA-3m98-m7jj-v78v.json index 1fe5742fe93..59f1f278533 100644 --- a/advisories/unreviewed/2024/12/GHSA-3m98-m7jj-v78v/GHSA-3m98-m7jj-v78v.json +++ b/advisories/unreviewed/2024/12/GHSA-3m98-m7jj-v78v/GHSA-3m98-m7jj-v78v.json @@ -33,7 +33,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-22" + ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/12/GHSA-54w6-f3f8-54q2/GHSA-54w6-f3f8-54q2.json b/advisories/unreviewed/2024/12/GHSA-54w6-f3f8-54q2/GHSA-54w6-f3f8-54q2.json index 1e9d9d10c6c..cd816c33cac 100644 --- a/advisories/unreviewed/2024/12/GHSA-54w6-f3f8-54q2/GHSA-54w6-f3f8-54q2.json +++ b/advisories/unreviewed/2024/12/GHSA-54w6-f3f8-54q2/GHSA-54w6-f3f8-54q2.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-54w6-f3f8-54q2", - "modified": "2024-12-12T03:33:06Z", + "modified": "2024-12-13T21:30:36Z", "published": "2024-12-12T03:33:06Z", "aliases": [ "CVE-2024-54498" ], "details": "A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An app may be able to break out of its sandbox.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -29,7 +34,7 @@ ], "database_specific": { "cwe_ids": [], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-12-12T02:15:30Z" diff --git a/advisories/unreviewed/2024/12/GHSA-6vmf-4hpw-fgcm/GHSA-6vmf-4hpw-fgcm.json b/advisories/unreviewed/2024/12/GHSA-6vmf-4hpw-fgcm/GHSA-6vmf-4hpw-fgcm.json index c6d62e11df4..8370dcdb3e8 100644 --- a/advisories/unreviewed/2024/12/GHSA-6vmf-4hpw-fgcm/GHSA-6vmf-4hpw-fgcm.json +++ b/advisories/unreviewed/2024/12/GHSA-6vmf-4hpw-fgcm/GHSA-6vmf-4hpw-fgcm.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-6vmf-4hpw-fgcm", - "modified": "2024-12-12T03:33:06Z", + "modified": "2024-12-13T21:30:35Z", "published": "2024-12-12T03:33:06Z", "aliases": [ "CVE-2024-44201" ], "details": "The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.3, macOS Ventura 13.7.2, iOS 18.1 and iPadOS 18.1, macOS Sonoma 14.7.2. Processing a malicious crafted file may lead to a denial-of-service.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" + } + ], "affected": [], "references": [ { @@ -32,8 +37,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-404" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-12-12T02:15:23Z" diff --git a/advisories/unreviewed/2024/12/GHSA-7wvc-54wp-pv8x/GHSA-7wvc-54wp-pv8x.json b/advisories/unreviewed/2024/12/GHSA-7wvc-54wp-pv8x/GHSA-7wvc-54wp-pv8x.json index 8c8c6d6d044..7b747facb70 100644 --- a/advisories/unreviewed/2024/12/GHSA-7wvc-54wp-pv8x/GHSA-7wvc-54wp-pv8x.json +++ b/advisories/unreviewed/2024/12/GHSA-7wvc-54wp-pv8x/GHSA-7wvc-54wp-pv8x.json @@ -33,7 +33,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-922" + ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/12/GHSA-873c-cc79-4g4q/GHSA-873c-cc79-4g4q.json b/advisories/unreviewed/2024/12/GHSA-873c-cc79-4g4q/GHSA-873c-cc79-4g4q.json index 7a5e42e7008..b3847f889ca 100644 --- a/advisories/unreviewed/2024/12/GHSA-873c-cc79-4g4q/GHSA-873c-cc79-4g4q.json +++ b/advisories/unreviewed/2024/12/GHSA-873c-cc79-4g4q/GHSA-873c-cc79-4g4q.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-873c-cc79-4g4q", - "modified": "2024-12-12T03:33:06Z", + "modified": "2024-12-13T21:30:35Z", "published": "2024-12-12T03:33:06Z", "aliases": [ "CVE-2024-44212" ], "details": "A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1, visionOS 2.1, tvOS 18.1, iOS 18.1 and iPadOS 18.1, watchOS 11.1. Cookies belonging to one origin may be sent to another origin.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" + } + ], "affected": [], "references": [ { @@ -36,8 +41,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-346" + ], + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-12-12T02:15:23Z" diff --git a/advisories/unreviewed/2024/12/GHSA-887q-rm9x-7wg9/GHSA-887q-rm9x-7wg9.json b/advisories/unreviewed/2024/12/GHSA-887q-rm9x-7wg9/GHSA-887q-rm9x-7wg9.json index 09a17f26e4c..4fc20bf0aa4 100644 --- a/advisories/unreviewed/2024/12/GHSA-887q-rm9x-7wg9/GHSA-887q-rm9x-7wg9.json +++ b/advisories/unreviewed/2024/12/GHSA-887q-rm9x-7wg9/GHSA-887q-rm9x-7wg9.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-887q-rm9x-7wg9", - "modified": "2024-12-12T03:33:06Z", + "modified": "2024-12-13T21:30:36Z", "published": "2024-12-12T03:33:06Z", "aliases": [ "CVE-2024-54465" ], "details": "A logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2. An app may be able to elevate privileges.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -21,7 +26,7 @@ ], "database_specific": { "cwe_ids": [], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-12-12T02:15:29Z" diff --git a/advisories/unreviewed/2024/12/GHSA-97qm-2h4w-qghq/GHSA-97qm-2h4w-qghq.json b/advisories/unreviewed/2024/12/GHSA-97qm-2h4w-qghq/GHSA-97qm-2h4w-qghq.json index feee048f3f9..7bfe199739e 100644 --- a/advisories/unreviewed/2024/12/GHSA-97qm-2h4w-qghq/GHSA-97qm-2h4w-qghq.json +++ b/advisories/unreviewed/2024/12/GHSA-97qm-2h4w-qghq/GHSA-97qm-2h4w-qghq.json @@ -26,6 +26,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-281", "CWE-532" ], "severity": "MODERATE", diff --git a/advisories/unreviewed/2024/12/GHSA-gg96-2qm6-wg5x/GHSA-gg96-2qm6-wg5x.json b/advisories/unreviewed/2024/12/GHSA-gg96-2qm6-wg5x/GHSA-gg96-2qm6-wg5x.json index 7fc890c851a..b8b246a355a 100644 --- a/advisories/unreviewed/2024/12/GHSA-gg96-2qm6-wg5x/GHSA-gg96-2qm6-wg5x.json +++ b/advisories/unreviewed/2024/12/GHSA-gg96-2qm6-wg5x/GHSA-gg96-2qm6-wg5x.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-gg96-2qm6-wg5x", - "modified": "2024-12-12T03:33:06Z", + "modified": "2024-12-13T21:30:36Z", "published": "2024-12-12T03:33:06Z", "aliases": [ "CVE-2024-54503" ], "details": "An inconsistent user interface issue was addressed with improved state management. This issue is fixed in iOS 18.2 and iPadOS 18.2. Muting a call while ringing may not result in mute being enabled.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N" + } + ], "affected": [], "references": [ { @@ -21,7 +26,7 @@ ], "database_specific": { "cwe_ids": [], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-12-12T02:15:31Z" diff --git a/advisories/unreviewed/2024/12/GHSA-grq3-9m83-rgpr/GHSA-grq3-9m83-rgpr.json b/advisories/unreviewed/2024/12/GHSA-grq3-9m83-rgpr/GHSA-grq3-9m83-rgpr.json index d41518f435e..696a98a2388 100644 --- a/advisories/unreviewed/2024/12/GHSA-grq3-9m83-rgpr/GHSA-grq3-9m83-rgpr.json +++ b/advisories/unreviewed/2024/12/GHSA-grq3-9m83-rgpr/GHSA-grq3-9m83-rgpr.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-grq3-9m83-rgpr", - "modified": "2024-12-12T03:33:06Z", + "modified": "2024-12-13T21:30:35Z", "published": "2024-12-12T03:33:06Z", "aliases": [ "CVE-2024-44200" ], "details": "This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1. An app may be able to read sensitive location information.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" + } + ], "affected": [], "references": [ { @@ -20,8 +25,10 @@ } ], "database_specific": { - "cwe_ids": [], - "severity": null, + "cwe_ids": [ + "CWE-922" + ], + "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-12-12T02:15:23Z" diff --git a/advisories/unreviewed/2024/12/GHSA-hwmm-rqf4-5hqh/GHSA-hwmm-rqf4-5hqh.json b/advisories/unreviewed/2024/12/GHSA-hwmm-rqf4-5hqh/GHSA-hwmm-rqf4-5hqh.json index f15908e951b..d1ca7be945d 100644 --- a/advisories/unreviewed/2024/12/GHSA-hwmm-rqf4-5hqh/GHSA-hwmm-rqf4-5hqh.json +++ b/advisories/unreviewed/2024/12/GHSA-hwmm-rqf4-5hqh/GHSA-hwmm-rqf4-5hqh.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-hwmm-rqf4-5hqh", - "modified": "2024-12-12T03:33:06Z", + "modified": "2024-12-13T21:30:36Z", "published": "2024-12-12T03:33:06Z", "aliases": [ "CVE-2024-44248" ], "details": "This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.7.2, macOS Sonoma 14.7.2. A user with screen sharing access may be able to view another user's screen.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } + ], "affected": [], "references": [ { @@ -25,7 +30,7 @@ ], "database_specific": { "cwe_ids": [], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-12-12T02:15:24Z" diff --git a/advisories/unreviewed/2024/12/GHSA-jf72-28rf-27vg/GHSA-jf72-28rf-27vg.json b/advisories/unreviewed/2024/12/GHSA-jf72-28rf-27vg/GHSA-jf72-28rf-27vg.json index 1d4ab4add82..ecd84cb036a 100644 --- a/advisories/unreviewed/2024/12/GHSA-jf72-28rf-27vg/GHSA-jf72-28rf-27vg.json +++ b/advisories/unreviewed/2024/12/GHSA-jf72-28rf-27vg/GHSA-jf72-28rf-27vg.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-jf72-28rf-27vg", - "modified": "2024-12-12T03:33:06Z", + "modified": "2024-12-13T21:30:36Z", "published": "2024-12-12T03:33:06Z", "aliases": [ "CVE-2024-54504" ], "details": "A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.2. An app may be able to access user-sensitive data.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } + ], "affected": [], "references": [ { @@ -21,7 +26,7 @@ ], "database_specific": { "cwe_ids": [], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-12-12T02:15:31Z" diff --git a/advisories/unreviewed/2024/12/GHSA-m5q6-hm4m-4vv5/GHSA-m5q6-hm4m-4vv5.json b/advisories/unreviewed/2024/12/GHSA-m5q6-hm4m-4vv5/GHSA-m5q6-hm4m-4vv5.json new file mode 100644 index 00000000000..d7d9eb50f31 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-m5q6-hm4m-4vv5/GHSA-m5q6-hm4m-4vv5.json @@ -0,0 +1,25 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-m5q6-hm4m-4vv5", + "modified": "2024-12-13T21:30:36Z", + "published": "2024-12-13T21:30:36Z", + "aliases": [ + "CVE-2024-12632" + ], + "details": "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-55956. Reason: This candidate is a duplicate of CVE-2024-55956. Notes: All CVE users should reference CVE-2024-55956 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12632" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-13T21:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-mf5g-58v5-r995/GHSA-mf5g-58v5-r995.json b/advisories/unreviewed/2024/12/GHSA-mf5g-58v5-r995/GHSA-mf5g-58v5-r995.json index 4df21da05ce..646e3306042 100644 --- a/advisories/unreviewed/2024/12/GHSA-mf5g-58v5-r995/GHSA-mf5g-58v5-r995.json +++ b/advisories/unreviewed/2024/12/GHSA-mf5g-58v5-r995/GHSA-mf5g-58v5-r995.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-mf5g-58v5-r995", - "modified": "2024-12-12T03:33:06Z", + "modified": "2024-12-13T21:30:36Z", "published": "2024-12-12T03:33:06Z", "aliases": [ "CVE-2024-44290" ], "details": "This issue was addressed with improved redaction of sensitive information. This issue is fixed in iOS 18.1 and iPadOS 18.1, watchOS 11.1. An app may be able to determine a user’s current location.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" + } + ], "affected": [], "references": [ { @@ -25,7 +30,7 @@ ], "database_specific": { "cwe_ids": [], - "severity": null, + "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-12-12T02:15:24Z" diff --git a/advisories/unreviewed/2024/12/GHSA-rmh8-223g-x64m/GHSA-rmh8-223g-x64m.json b/advisories/unreviewed/2024/12/GHSA-rmh8-223g-x64m/GHSA-rmh8-223g-x64m.json index 056bb394c29..846a920f074 100644 --- a/advisories/unreviewed/2024/12/GHSA-rmh8-223g-x64m/GHSA-rmh8-223g-x64m.json +++ b/advisories/unreviewed/2024/12/GHSA-rmh8-223g-x64m/GHSA-rmh8-223g-x64m.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-rmh8-223g-x64m", - "modified": "2024-12-12T03:33:06Z", + "modified": "2024-12-13T21:30:36Z", "published": "2024-12-12T03:33:06Z", "aliases": [ "CVE-2024-54500" ], "details": "The issue was addressed with improved checks. This issue is fixed in iPadOS 17.7.3, watchOS 11.2, visionOS 2.2, tvOS 18.2, macOS Sequoia 15.2, iOS 18.2 and iPadOS 18.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. Processing a maliciously crafted image may result in disclosure of process memory.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" + } + ], "affected": [], "references": [ { @@ -49,7 +54,7 @@ ], "database_specific": { "cwe_ids": [], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-12-12T02:15:30Z" diff --git a/advisories/unreviewed/2024/12/GHSA-v2gg-jq7f-8425/GHSA-v2gg-jq7f-8425.json b/advisories/unreviewed/2024/12/GHSA-v2gg-jq7f-8425/GHSA-v2gg-jq7f-8425.json index 36af96c007d..08f1836fb79 100644 --- a/advisories/unreviewed/2024/12/GHSA-v2gg-jq7f-8425/GHSA-v2gg-jq7f-8425.json +++ b/advisories/unreviewed/2024/12/GHSA-v2gg-jq7f-8425/GHSA-v2gg-jq7f-8425.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-v2gg-jq7f-8425", - "modified": "2024-12-12T03:33:06Z", + "modified": "2024-12-13T21:30:36Z", "published": "2024-12-12T03:33:06Z", "aliases": [ "CVE-2024-44300" ], "details": "A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. An app may be able to access protected user data.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" + } + ], "affected": [], "references": [ { @@ -29,7 +34,7 @@ ], "database_specific": { "cwe_ids": [], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-12-12T02:15:24Z" diff --git a/advisories/unreviewed/2024/12/GHSA-v87c-pw6c-99w6/GHSA-v87c-pw6c-99w6.json b/advisories/unreviewed/2024/12/GHSA-v87c-pw6c-99w6/GHSA-v87c-pw6c-99w6.json new file mode 100644 index 00000000000..21392cd121f --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-v87c-pw6c-99w6/GHSA-v87c-pw6c-99w6.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-v87c-pw6c-99w6", + "modified": "2024-12-13T21:30:36Z", + "published": "2024-12-13T21:30:36Z", + "aliases": [ + "CVE-2024-55956" + ], + "details": "In Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an unauthenticated user can import and execute arbitrary Bash or PowerShell commands on the host system by leveraging the default settings of the Autorun directory.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-55956" + }, + { + "type": "WEB", + "url": "https://support.cleo.com/hc/en-us/articles/28408134019735-Cleo-Product-Security-Advisory-CVE-Pending" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-13T21:15:13Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-w7rc-39gw-qjww/GHSA-w7rc-39gw-qjww.json b/advisories/unreviewed/2024/12/GHSA-w7rc-39gw-qjww/GHSA-w7rc-39gw-qjww.json index e0909f99945..3458e47a6c6 100644 --- a/advisories/unreviewed/2024/12/GHSA-w7rc-39gw-qjww/GHSA-w7rc-39gw-qjww.json +++ b/advisories/unreviewed/2024/12/GHSA-w7rc-39gw-qjww/GHSA-w7rc-39gw-qjww.json @@ -29,7 +29,9 @@ } ], "database_specific": { - "cwe_ids": [], + "cwe_ids": [ + "CWE-922" + ], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/12/GHSA-wwr9-w57c-2f9m/GHSA-wwr9-w57c-2f9m.json b/advisories/unreviewed/2024/12/GHSA-wwr9-w57c-2f9m/GHSA-wwr9-w57c-2f9m.json index 642f28513d1..a9050833721 100644 --- a/advisories/unreviewed/2024/12/GHSA-wwr9-w57c-2f9m/GHSA-wwr9-w57c-2f9m.json +++ b/advisories/unreviewed/2024/12/GHSA-wwr9-w57c-2f9m/GHSA-wwr9-w57c-2f9m.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-wwr9-w57c-2f9m", - "modified": "2024-12-12T03:33:06Z", + "modified": "2024-12-13T21:30:36Z", "published": "2024-12-12T03:33:06Z", "aliases": [ "CVE-2024-44291" ], "details": "A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.2, macOS Ventura 13.7.2, macOS Sonoma 14.7.2. A malicious app may be able to gain root privileges.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } + ], "affected": [], "references": [ { @@ -29,7 +34,7 @@ ], "database_specific": { "cwe_ids": [], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-12-12T02:15:24Z"