diff --git a/advisories/unreviewed/2024/09/GHSA-pmjc-mxf4-8qwx/GHSA-pmjc-mxf4-8qwx.json b/advisories/unreviewed/2024/09/GHSA-pmjc-mxf4-8qwx/GHSA-pmjc-mxf4-8qwx.json index e7c88bfeec2..7e027146d2c 100644 --- a/advisories/unreviewed/2024/09/GHSA-pmjc-mxf4-8qwx/GHSA-pmjc-mxf4-8qwx.json +++ b/advisories/unreviewed/2024/09/GHSA-pmjc-mxf4-8qwx/GHSA-pmjc-mxf4-8qwx.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-pmjc-mxf4-8qwx", - "modified": "2024-09-04T18:30:57Z", + "modified": "2024-11-24T21:30:46Z", "published": "2024-09-04T15:30:35Z", "aliases": [ "CVE-2024-7923" @@ -33,6 +33,10 @@ "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2024:6337" }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:8906" + }, { "type": "WEB", "url": "https://access.redhat.com/security/cve/CVE-2024-7923" diff --git a/advisories/unreviewed/2024/10/GHSA-wq2p-5pc6-wpgf/GHSA-wq2p-5pc6-wpgf.json b/advisories/unreviewed/2024/10/GHSA-wq2p-5pc6-wpgf/GHSA-wq2p-5pc6-wpgf.json index 17f28cbed20..17175722e55 100644 --- a/advisories/unreviewed/2024/10/GHSA-wq2p-5pc6-wpgf/GHSA-wq2p-5pc6-wpgf.json +++ b/advisories/unreviewed/2024/10/GHSA-wq2p-5pc6-wpgf/GHSA-wq2p-5pc6-wpgf.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-wq2p-5pc6-wpgf", - "modified": "2024-11-13T09:30:56Z", + "modified": "2024-11-24T21:30:46Z", "published": "2024-10-15T18:30:50Z", "aliases": [ "CVE-2024-9676" @@ -65,6 +65,10 @@ "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2024:9459" }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:9926" + }, { "type": "WEB", "url": "https://access.redhat.com/security/cve/CVE-2024-9676" diff --git a/advisories/unreviewed/2024/11/GHSA-34jr-r2pr-95hh/GHSA-34jr-r2pr-95hh.json b/advisories/unreviewed/2024/11/GHSA-34jr-r2pr-95hh/GHSA-34jr-r2pr-95hh.json new file mode 100644 index 00000000000..a677215baa6 --- /dev/null +++ b/advisories/unreviewed/2024/11/GHSA-34jr-r2pr-95hh/GHSA-34jr-r2pr-95hh.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-34jr-r2pr-95hh", + "modified": "2024-11-24T21:30:46Z", + "published": "2024-11-24T21:30:46Z", + "aliases": [ + "CVE-2024-53912" + ], + "details": "An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24341. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53912" + }, + { + "type": "WEB", + "url": "https://www.veritas.com/content/support/en_US/security/VTS24-014" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-11-24T21:15:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/11/GHSA-5m9p-9w9f-5c87/GHSA-5m9p-9w9f-5c87.json b/advisories/unreviewed/2024/11/GHSA-5m9p-9w9f-5c87/GHSA-5m9p-9w9f-5c87.json new file mode 100644 index 00000000000..d7c7cd7a98b --- /dev/null +++ b/advisories/unreviewed/2024/11/GHSA-5m9p-9w9f-5c87/GHSA-5m9p-9w9f-5c87.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5m9p-9w9f-5c87", + "modified": "2024-11-24T21:30:46Z", + "published": "2024-11-24T21:30:46Z", + "aliases": [ + "CVE-2024-53911" + ], + "details": "An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24339. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53911" + }, + { + "type": "WEB", + "url": "https://www.veritas.com/content/support/en_US/security/VTS24-014" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-11-24T21:15:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/11/GHSA-cwgj-pq49-6x66/GHSA-cwgj-pq49-6x66.json b/advisories/unreviewed/2024/11/GHSA-cwgj-pq49-6x66/GHSA-cwgj-pq49-6x66.json index 873e121a7e7..c77d2ed9904 100644 --- a/advisories/unreviewed/2024/11/GHSA-cwgj-pq49-6x66/GHSA-cwgj-pq49-6x66.json +++ b/advisories/unreviewed/2024/11/GHSA-cwgj-pq49-6x66/GHSA-cwgj-pq49-6x66.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-cwgj-pq49-6x66", - "modified": "2024-11-24T18:31:39Z", + "modified": "2024-11-24T21:30:46Z", "published": "2024-11-24T18:31:39Z", "aliases": [ "CVE-2024-53901" ], "details": "The Imager package before 1.025 for Perl has a heap-based buffer overflow leading to denial of service, or possibly unspecified other impact, when the trim() method is called on a crafted input image.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -37,9 +40,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-120" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-11-24T17:15:04Z" diff --git a/advisories/unreviewed/2024/11/GHSA-fqhc-grp9-76ch/GHSA-fqhc-grp9-76ch.json b/advisories/unreviewed/2024/11/GHSA-fqhc-grp9-76ch/GHSA-fqhc-grp9-76ch.json new file mode 100644 index 00000000000..eb6dccfd061 --- /dev/null +++ b/advisories/unreviewed/2024/11/GHSA-fqhc-grp9-76ch/GHSA-fqhc-grp9-76ch.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-fqhc-grp9-76ch", + "modified": "2024-11-24T21:30:46Z", + "published": "2024-11-24T21:30:46Z", + "aliases": [ + "CVE-2024-53913" + ], + "details": "An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24343. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53913" + }, + { + "type": "WEB", + "url": "https://www.veritas.com/content/support/en_US/security/VTS24-014" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-11-24T21:15:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/11/GHSA-r2xg-c3rj-xj8r/GHSA-r2xg-c3rj-xj8r.json b/advisories/unreviewed/2024/11/GHSA-r2xg-c3rj-xj8r/GHSA-r2xg-c3rj-xj8r.json new file mode 100644 index 00000000000..839ad89ab1f --- /dev/null +++ b/advisories/unreviewed/2024/11/GHSA-r2xg-c3rj-xj8r/GHSA-r2xg-c3rj-xj8r.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-r2xg-c3rj-xj8r", + "modified": "2024-11-24T21:30:46Z", + "published": "2024-11-24T21:30:46Z", + "aliases": [ + "CVE-2024-53914" + ], + "details": "An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24344. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53914" + }, + { + "type": "WEB", + "url": "https://www.veritas.com/content/support/en_US/security/VTS24-014" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-11-24T21:15:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/11/GHSA-rj48-23jv-5ph5/GHSA-rj48-23jv-5ph5.json b/advisories/unreviewed/2024/11/GHSA-rj48-23jv-5ph5/GHSA-rj48-23jv-5ph5.json new file mode 100644 index 00000000000..29644e11e3b --- /dev/null +++ b/advisories/unreviewed/2024/11/GHSA-rj48-23jv-5ph5/GHSA-rj48-23jv-5ph5.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-rj48-23jv-5ph5", + "modified": "2024-11-24T21:30:46Z", + "published": "2024-11-24T21:30:46Z", + "aliases": [ + "CVE-2024-53910" + ], + "details": "An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24336. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53910" + }, + { + "type": "WEB", + "url": "https://www.veritas.com/content/support/en_US/security/VTS24-014" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-11-24T21:15:03Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/11/GHSA-rqc4-2hc7-8c8v/GHSA-rqc4-2hc7-8c8v.json b/advisories/unreviewed/2024/11/GHSA-rqc4-2hc7-8c8v/GHSA-rqc4-2hc7-8c8v.json index 9353dc2297d..7fe48b5339f 100644 --- a/advisories/unreviewed/2024/11/GHSA-rqc4-2hc7-8c8v/GHSA-rqc4-2hc7-8c8v.json +++ b/advisories/unreviewed/2024/11/GHSA-rqc4-2hc7-8c8v/GHSA-rqc4-2hc7-8c8v.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-rqc4-2hc7-8c8v", - "modified": "2024-11-24T18:31:39Z", + "modified": "2024-11-24T21:30:46Z", "published": "2024-11-24T18:31:39Z", "aliases": [ "CVE-2024-53899" ], "details": "virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment. Magic template strings are not quoted correctly when replacing. NOTE: this is not the same as CVE-2024-9287.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -33,9 +36,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-78" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-11-24T16:15:06Z" diff --git a/advisories/unreviewed/2024/11/GHSA-vcg2-wj7m-5j2m/GHSA-vcg2-wj7m-5j2m.json b/advisories/unreviewed/2024/11/GHSA-vcg2-wj7m-5j2m/GHSA-vcg2-wj7m-5j2m.json new file mode 100644 index 00000000000..ff77531d0f6 --- /dev/null +++ b/advisories/unreviewed/2024/11/GHSA-vcg2-wj7m-5j2m/GHSA-vcg2-wj7m-5j2m.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vcg2-wj7m-5j2m", + "modified": "2024-11-24T21:30:46Z", + "published": "2024-11-24T21:30:46Z", + "aliases": [ + "CVE-2024-53915" + ], + "details": "An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24405. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53915" + }, + { + "type": "WEB", + "url": "https://www.veritas.com/content/support/en_US/security/VTS24-014" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-11-24T21:15:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/11/GHSA-vq3g-vjx5-h9p5/GHSA-vq3g-vjx5-h9p5.json b/advisories/unreviewed/2024/11/GHSA-vq3g-vjx5-h9p5/GHSA-vq3g-vjx5-h9p5.json new file mode 100644 index 00000000000..55de9599d5c --- /dev/null +++ b/advisories/unreviewed/2024/11/GHSA-vq3g-vjx5-h9p5/GHSA-vq3g-vjx5-h9p5.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vq3g-vjx5-h9p5", + "modified": "2024-11-24T21:30:46Z", + "published": "2024-11-24T21:30:46Z", + "aliases": [ + "CVE-2024-53909" + ], + "details": "An issue was discovered in the server in Veritas Enterprise Vault before 15.2, ZDI-CAN-24334. It allows remote attackers to execute arbitrary code because untrusted data, received on a .NET Remoting TCP port, is deserialized.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-53909" + }, + { + "type": "WEB", + "url": "https://www.veritas.com/content/support/en_US/security/VTS24-014" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-11-24T21:15:03Z" + } +} \ No newline at end of file