Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2025-01-29 21:32:22 +00:00
parent 111b54e9fd
commit 8e077ab32b
45 changed files with 447 additions and 35 deletions
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-7p9f-6x8j-gxxp",
-  "modified": "2024-12-17T21:30:34Z",
+  "modified": "2025-01-29T21:31:23Z",
  "published": "2024-11-26T21:50:30Z",
  "aliases": [
    "CVE-2024-8676"
@@ -94,6 +94,10 @@
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHBA-2024:10826"
    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2025:0648"
+    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2024-8676"
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-824"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -30,7 +30,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-77"
+      "CWE-77",
+      "CWE-78"
    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-8x27-645q-g2rv",
-  "modified": "2022-03-24T00:01:01Z",
+  "modified": "2025-01-29T21:31:19Z",
  "published": "2022-02-25T00:01:06Z",
  "aliases": [
    "CVE-2022-23176"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-9wpj-h5jq-88p9",
-  "modified": "2022-03-17T00:05:29Z",
+  "modified": "2025-01-29T21:31:19Z",
  "published": "2022-02-19T00:01:03Z",
  "aliases": [
    "CVE-2022-0543"
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-5cwq-39c4-23v7",
-  "modified": "2022-05-24T19:04:42Z",
+  "modified": "2025-01-29T21:31:21Z",
  "published": "2022-05-24T19:04:42Z",
  "aliases": [
    "CVE-2020-11261"
  ],
  "details": "Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -26,6 +26,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-119",
      "CWE-120",
      "CWE-20"
    ],
@@ -33,7 +33,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-918"
+    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,23 +1,36 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-9gh4-cwcx-xqjg",
-  "modified": "2022-05-24T17:37:39Z",
+  "modified": "2025-01-29T21:31:14Z",
  "published": "2022-05-24T17:37:39Z",
  "aliases": [
    "CVE-2020-35241"
  ],
  "details": "FlatPress 1.0.3 is affected by cross-site scripting (XSS) in the Blog Content component. This vulnerability can allow an attacker to inject the XSS payload in Blog content via the admin panel. Each time any user will go to that blog page, the XSS triggers and the attacker can steal the cookie according to the crafted payload.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N"
+    }
+  ],
  "affected": [],
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-35241"
    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/alpernae/vulnerability-research/tree/main/CVE-2020-35241"
+    },
    {
      "type": "WEB",
      "url": "https://github.com/hemantsolo/CVE-Reference/blob/main/CVE-2020-35241.md"
    },
+    {
+      "type": "WEB",
+      "url": "https://www.exploit-db.com/exploits/48826"
+    },
    {
      "type": "WEB",
      "url": "https://www.flatpress.org/download"
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-jxmm-frjr-grqr",
-  "modified": "2022-05-24T19:01:48Z",
+  "modified": "2025-01-29T21:31:14Z",
  "published": "2022-05-24T19:01:48Z",
  "aliases": [
    "CVE-2021-1905"
  ],
  "details": "Possible use after free due to improper handling of memory mapping of multiple processes simultaneously. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -30,6 +30,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-22",
      "CWE-434",
      "CWE-78"
    ],
@@ -26,6 +26,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-1284",
      "CWE-20"
    ],
    "severity": "MODERATE",
@@ -25,7 +25,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-281"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -42,7 +42,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-20"
+      "CWE-20",
+      "CWE-203"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -37,7 +37,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-120"
+    ],
    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -26,7 +26,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-119"
+      "CWE-119",
+      "CWE-120"
    ],
    "severity": "MODERATE",
    "github_reviewed": false,
@@ -45,7 +45,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-362"
+    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -50,6 +50,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-1284",
      "CWE-20"
    ],
    "severity": "MODERATE",
@@ -29,7 +29,9 @@
    }
  ],
  "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-78"
+    ],
    "severity": "CRITICAL",
    "github_reviewed": false,
    "github_reviewed_at": null,
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-g8w2-r832-c3p7",
-  "modified": "2023-11-03T21:30:18Z",
+  "modified": "2025-01-29T21:31:20Z",
  "published": "2023-05-05T15:30:59Z",
  "aliases": [
    "CVE-2023-29941"
@@ -23,6 +23,10 @@
      "type": "WEB",
      "url": "https://github.com/llvm/llvm-project/issues/59988"
    },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWCCXDZP7H2JNFULSZZWXGAZHZUPN5DS"
+    },
    {
      "type": "WEB",
      "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZWCCXDZP7H2JNFULSZZWXGAZHZUPN5DS"
--- a/Show More
+++ b/Show More