netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-hhx9-4vw2-x54r
GHSA-hvr9-wr9p-grgr
GHSA-jm3m-wr3p-hjrq
This commit is contained in:
advisory-database[bot]
2024-09-24 20:48:13 +00:00
parent 9c497db951
commit 8be3589771
3 changed files with 42 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2022/05/GHSA-hhx9-4vw2-x54r/GHSA-hhx9-4vw2-x54r.json
+23 -4
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hhx9-4vw2-x54r",
"modified": "2024-04-29T16:06:47Z",
"modified": "2024-09-24T20:47:20Z",
"published": "2022-05-13T01:26:14Z",
"aliases": [
"CVE-2015-0260"
@@ -9,7 +9,14 @@
"summary": "RhodeCode and Kallithea are vulnerable to sensitive information disclosure",
"details": "RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the get_repo API method.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
}
],
"affected": [
{
@@ -44,7 +51,7 @@
"introduced": "0"
},
{
"fixed": "0.1"
"fixed": "0.2"
}
]
}
@@ -60,6 +67,18 @@
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/100888"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/kallithea/PYSEC-2015-29.yaml"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/rhodecode/PYSEC-2015-32.yaml"
},
{
"type": "WEB",
"url": "https://kallithea-scm.org/repos/kallithea/changeset/5923d74742879b812965568475e21c3496d722a9"
},
{
"type": "WEB",
"url": "https://kallithea-scm.org/security/cve-2015-0260.html"
@@ -81,7 +100,7 @@
"cwe_ids": [
"CWE-200"
],
"severity": "MODERATE",
"severity": "HIGH",
"github_reviewed": true,
"github_reviewed_at": "2024-04-29T16:06:47Z",
"nvd_published_at": "2015-02-16T15:59:00Z"
advisories/github-reviewed/2022/05/GHSA-hvr9-wr9p-grgr/GHSA-hvr9-wr9p-grgr.json
+9 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hvr9-wr9p-grgr",
"modified": "2024-05-01T17:00:31Z",
"modified": "2024-09-24T20:47:20Z",
"published": "2022-05-14T01:04:30Z",
"aliases": [
"CVE-2017-1000115"
@@ -12,6 +12,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"
}
],
"affected": [
@@ -44,6 +48,10 @@
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2017:2489"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/mercurial/PYSEC-2017-88.yaml"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201709-18"
advisories/github-reviewed/2023/01/GHSA-jm3m-wr3p-hjrq/GHSA-jm3m-wr3p-hjrq.json
+10 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jm3m-wr3p-hjrq",
"modified": "2023-02-02T17:16:19Z",
"modified": "2024-09-24T20:46:31Z",
"published": "2023-01-27T00:30:18Z",
"aliases": [
"CVE-2023-0519"
@@ -12,6 +12,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"
}
],
"affected": [
@@ -48,6 +52,10 @@
"type": "PACKAGE",
"url": "https://github.com/modoboa/modoboa"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/modoboa/PYSEC-2023-31.yaml"
},
{
"type": "WEB",
"url": "https://huntr.dev/bounties/891ad0cb-d12f-4c5e-aac8-d7326caf2129"
@@ -57,7 +65,7 @@
"cwe_ids": [
"CWE-79"
],
"severity": "HIGH",
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2023-01-27T01:05:12Z",
"nvd_published_at": "2023-01-26T23:15:00Z"