netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-12-05 21:33:16 +00:00
parent 1190ce61ad
commit 8b4b614543
33 changed files with 481 additions and 78 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/05/GHSA-rc36-f2pm-xcjg/GHSA-rc36-f2pm-xcjg.json
+7 -2
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rc36-f2pm-xcjg",
"modified": "2022-05-01T02:15:18Z",
"modified": "2024-12-05T21:31:50Z",
"published": "2022-05-01T02:15:18Z",
"aliases": [
"CVE-2005-3170"
],
"details": "The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets Layer (LDAPS) even when the Certificate Authority (CA) is not trusted, which could allow attackers to trick users into believing that they are accessing a trusted site.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L"
}
],
"affected": [],
"references": [
{
advisories/unreviewed/2024/02/GHSA-3v2h-jhg6-jj7v/GHSA-3v2h-jhg6-jj7v.json
+8 -3
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3v2h-jhg6-jj7v",
"modified": "2024-02-21T09:31:01Z",
"modified": "2024-12-05T21:31:51Z",
"published": "2024-02-21T09:31:01Z",
"aliases": [
"CVE-2023-42952"
],
"details": "The issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.3, macOS Sonoma 14.1, macOS Monterey 12.7.1. An app with root privileges may be able to access private information.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [],
"references": [
{
@@ -33,7 +38,7 @@
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-21T07:15:51Z"
advisories/unreviewed/2024/02/GHSA-9rfw-9cwj-2c6f/GHSA-9rfw-9cwj-2c6f.json
+3 -1
View File
@@ -37,7 +37,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-276"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/02/GHSA-g7c7-4h8w-p4x9/GHSA-g7c7-4h8w-p4x9.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g7c7-4h8w-p4x9",
"modified": "2024-02-18T03:30:24Z",
"modified": "2024-12-05T21:31:51Z",
"published": "2024-02-18T03:30:24Z",
"aliases": [
"CVE-2023-52357"
],
"details": "Vulnerability of serialization/deserialization mismatch in the vibration framework.Successful exploitation of this vulnerability may affect availability.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
@@ -24,8 +29,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-502"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-18T03:15:08Z"
advisories/unreviewed/2024/03/GHSA-76jf-phxv-6m5c/GHSA-76jf-phxv-6m5c.json
+7 -6
View File
@@ -1,18 +1,19 @@
{
"schema_version": "1.4.0",
"id": "GHSA-76jf-phxv-6m5c",
"modified": "2024-03-20T15:32:32Z",
"modified": "2024-12-05T21:31:51Z",
"published": "2024-03-20T15:32:32Z",
"aliases": [
"CVE-2024-22085"
],
"details": "An issue was discovered in Elspec G5 digital fault recorder versions 1.1.4.15 and before. The shadow file is world readable.",
"severity": [
],
"affected": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
@@ -27,7 +28,7 @@
"cwe_ids": [
"CWE-276"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-20T05:15:45Z"
advisories/unreviewed/2024/03/GHSA-jv2q-4725-898c/GHSA-jv2q-4725-898c.json
+8 -3
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jv2q-4725-898c",
"modified": "2024-03-13T21:31:01Z",
"modified": "2024-12-05T21:31:51Z",
"published": "2024-03-08T03:31:24Z",
"aliases": [
"CVE-2024-23232"
],
"details": "A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14.4. An app may be able to capture a user's screen.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"
}
],
"affected": [],
"references": [
{
@@ -25,7 +30,7 @@
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-08T02:15:47Z"
advisories/unreviewed/2024/03/GHSA-v72q-pr3v-f552/GHSA-v72q-pr3v-f552.json
+8 -3
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v72q-pr3v-f552",
"modified": "2024-03-13T21:31:01Z",
"modified": "2024-12-05T21:31:51Z",
"published": "2024-03-08T03:31:24Z",
"aliases": [
"CVE-2024-23233"
],
"details": "This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4. Entitlements and privacy permissions granted to this app may be used by a malicious app.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -25,7 +30,7 @@
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-08T02:15:47Z"
advisories/unreviewed/2024/03/GHSA-w893-jhmx-r3gr/GHSA-w893-jhmx-r3gr.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w893-jhmx-r3gr",
"modified": "2024-03-07T03:30:40Z",
"modified": "2024-12-05T21:31:51Z",
"published": "2024-03-07T03:30:40Z",
"aliases": [
"CVE-2023-49987"
],
"details": "A cross-site scripting (XSS) vulnerability in the component /management/term of School Fees Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tname parameter.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
@@ -24,8 +29,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-07T01:15:51Z"
advisories/unreviewed/2024/04/GHSA-xc4j-5g39-hrv5/GHSA-xc4j-5g39-hrv5.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xc4j-5g39-hrv5",
"modified": "2024-04-11T21:30:50Z",
"modified": "2024-12-05T21:31:51Z",
"published": "2024-04-11T21:30:50Z",
"aliases": [
"CVE-2024-22717"
],
"details": "Cross Site Scripting (XSS) vulnerability in Form Tools 3.1.1 allows attackers to run arbitrary code via the First Name field in the application.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-11T20:15:33Z"
advisories/unreviewed/2024/05/GHSA-wvrv-rpq3-gjq6/GHSA-wvrv-rpq3-gjq6.json
+2 -4
View File
@@ -13,9 +13,7 @@
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"
}
],
"affected": [
],
"affected": [],
"references": [
{
"type": "ADVISORY",
@@ -32,7 +30,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-565"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/07/GHSA-g95v-qwj3-qrc2/GHSA-g95v-qwj3-qrc2.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g95v-qwj3-qrc2",
"modified": "2024-07-29T18:30:39Z",
"modified": "2024-12-05T21:31:51Z",
"published": "2024-07-29T18:30:38Z",
"aliases": [
"CVE-2024-41624"
],
"details": "Incorrect access control in Himalaya Xiaoya nano smart speaker rom_version 1.6.96 allows a remote attacker to have an unspecified impact.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [],
"references": [
{
@@ -24,8 +29,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-29T16:15:04Z"
advisories/unreviewed/2024/11/GHSA-27r4-945x-jq67/GHSA-27r4-945x-jq67.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-770"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/11/GHSA-4w2f-m236-fggc/GHSA-4w2f-m236-fggc.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/11/GHSA-h9fh-gm4r-6cxh/GHSA-h9fh-gm4r-6cxh.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h9fh-gm4r-6cxh",
"modified": "2024-11-28T06:32:41Z",
"modified": "2024-12-05T21:31:51Z",
"published": "2024-11-27T12:31:53Z",
"aliases": [
"CVE-2024-11667"
advisories/unreviewed/2024/12/GHSA-35r4-377q-pc5v/GHSA-35r4-377q-pc5v.json
+3 -1
View File
@@ -29,7 +29,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-862"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/12/GHSA-4x6p-mgm4-pgfq/GHSA-4x6p-mgm4-pgfq.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4x6p-mgm4-pgfq",
"modified": "2024-12-04T21:30:52Z",
"modified": "2024-12-05T21:31:52Z",
"published": "2024-12-04T21:30:52Z",
"aliases": [
"CVE-2024-54674"
],
"details": "app/View/GalaxyClusters/cluster_export_misp_galaxy.ctp in MISP through 2.5.2 has stored XSS when exporting custom clusters into the misp-galaxy format.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-04T21:15:25Z"
advisories/unreviewed/2024/12/GHSA-63g3-m4j7-2vpw/GHSA-63g3-m4j7-2vpw.json
+8 -3
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-63g3-m4j7-2vpw",
"modified": "2024-12-04T21:30:52Z",
"modified": "2024-12-05T21:31:52Z",
"published": "2024-12-04T21:30:52Z",
"aliases": [
"CVE-2024-50947"
],
"details": "An issue in kmqtt v0.2.7 allows attackers to cause a Denial of Service (DoS) via a crafted request.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
@@ -25,7 +30,7 @@
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-04T21:15:24Z"
advisories/unreviewed/2024/12/GHSA-6hcg-vqw2-35jw/GHSA-6hcg-vqw2-35jw.json
+33
View File
@@ -0,0 +1,33 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6hcg-vqw2-35jw",
"modified": "2024-12-05T21:31:52Z",
"published": "2024-12-05T21:31:52Z",
"aliases": [
"CVE-2024-53589"
],
"details": "GNU objdump 2.43 is vulnerable to Buffer Overflow in the BFD (Binary File Descriptor) library's handling of tekhex format files.",
"severity": [],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53589"
},
{
"type": "WEB",
"url": "https://bushido-sec.com/index.php/2024/12/05/binutils-objdump-tekhex-buffer-overflow"
},
{
"type": "WEB",
"url": "https://www.gnu.org/software/binutils"
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-05T20:15:22Z"
}
}
advisories/unreviewed/2024/12/GHSA-6pwm-f65f-3g86/GHSA-6pwm-f65f-3g86.json
+44
View File
@@ -0,0 +1,44 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6pwm-f65f-3g86",
"modified": "2024-12-05T21:31:52Z",
"published": "2024-12-05T21:31:52Z",
"aliases": [
"CVE-2024-10933"
],
"details": "In OpenBSD 7.5 before errata 009 and OpenBSD 7.4 before errata 022, exclude any '/' in readdir name validation to avoid unexpected directory traversal on untrusted file systems.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10933"
},
{
"type": "WEB",
"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/022_readdir.patch.sig"
},
{
"type": "WEB",
"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.5/common/009_readdir.patch.sig"
}
],
"database_specific": {
"cwe_ids": [
"CWE-22"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-05T20:15:21Z"
}
}
advisories/unreviewed/2024/12/GHSA-6xw3-v997-r9fc/GHSA-6xw3-v997-r9fc.json
+44
View File
@@ -0,0 +1,44 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6xw3-v997-r9fc",
"modified": "2024-12-05T21:31:52Z",
"published": "2024-12-05T21:31:52Z",
"aliases": [
"CVE-2024-11148"
],
"details": "In OpenBSD 7.4 before errata 006 and OpenBSD 7.3 before errata 020, httpd(8) is vulnerable to a NULL dereference when handling a malformed fastcgi request.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:X"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-11148"
},
{
"type": "WEB",
"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.3/common/020_httpd.patch.sig"
},
{
"type": "WEB",
"url": "https://ftp.openbsd.org/pub/OpenBSD/patches/7.4/common/006_httpd.patch.sig"
}
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-12-05T20:15:21Z"
}
}

Some files were not shown because too many files have changed in this diff Show More