netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-11-20 00:33:47 +00:00
parent 2384d580ee
commit 8fd614ce12
41 changed files with 953 additions and 54 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/02/GHSA-23c2-hg9m-2pw8/GHSA-23c2-hg9m-2pw8.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-23c2-hg9m-2pw8",
"modified": "2024-02-29T21:30:52Z",
"modified": "2024-11-20T00:32:08Z",
"published": "2024-02-29T21:30:52Z",
"aliases": [
"CVE-2024-27660"
],
"details": "D-Link DIR-823G A1V1.0.2B05 was discovered to contain a Null-pointer dereferences in sub_41C488(). This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-29T20:15:41Z"
advisories/unreviewed/2024/02/GHSA-4vg6-rmxw-vq23/GHSA-4vg6-rmxw-vq23.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4vg6-rmxw-vq23",
"modified": "2024-06-10T21:30:34Z",
"modified": "2024-11-20T00:32:08Z",
"published": "2024-02-15T06:31:36Z",
"aliases": [
"CVE-2024-25941"
],
"details": "The jail(2) system call has not limited a visiblity of allocated TTYs (the kern.ttys sysctl). This gives rise to an information leak about processes outside the current jail.\n\nAttacker can get information about TTYs allocated on the host or in other jails. Effectively, the information printed by \"pstat -t\" may be leaked.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-15T05:15:11Z"
advisories/unreviewed/2024/02/GHSA-cq85-4f5h-qqc4/GHSA-cq85-4f5h-qqc4.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cq85-4f5h-qqc4",
"modified": "2024-03-04T09:30:29Z",
"modified": "2024-11-20T00:32:08Z",
"published": "2024-02-20T15:31:05Z",
"aliases": [
"CVE-2024-1551"
],
"details": "Set-Cookie response headers were being incorrectly honored in multipart HTTP responses. If an attacker could control the Content-Type response header, as well as control part of the response body, they could inject Set-Cookie response headers that would have been honored by the browser. This vulnerability affects Firefox < 123 and Firefox ESR < 115.8.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -45,9 +48,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-565"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-20T14:15:08Z"
advisories/unreviewed/2024/02/GHSA-qmxh-c3qm-vmrf/GHSA-qmxh-c3qm-vmrf.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qmxh-c3qm-vmrf",
"modified": "2024-02-18T06:30:32Z",
"modified": "2024-11-20T00:32:08Z",
"published": "2024-02-18T06:30:32Z",
"aliases": [
"CVE-2023-52374"
],
"details": "Permission control vulnerability in the package management module.Successful exploitation of this vulnerability may affect service confidentiality.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-863"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-18T04:15:08Z"
advisories/unreviewed/2024/03/GHSA-4cg8-w873-pfqx/GHSA-4cg8-w873-pfqx.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4cg8-w873-pfqx",
"modified": "2024-03-01T18:30:25Z",
"modified": "2024-11-20T00:32:08Z",
"published": "2024-03-01T18:30:25Z",
"aliases": [
"CVE-2023-52558"
],
"details": "In OpenBSD 7.4 before errata 002 and OpenBSD 7.3 before errata 019, a network buffer that had to be split at certain length that could crash the kernel after receiving specially crafted escape sequences.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -35,7 +38,7 @@
"cwe_ids": [
"CWE-131"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-01T17:15:07Z"
advisories/unreviewed/2024/04/GHSA-mggj-wcpg-x6cm/GHSA-mggj-wcpg-x6cm.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mggj-wcpg-x6cm",
"modified": "2024-04-08T03:30:52Z",
"modified": "2024-11-20T00:32:08Z",
"published": "2024-04-08T03:30:52Z",
"aliases": [
"CVE-2023-52348"
],
"details": "In ril service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-08T03:15:08Z"
advisories/unreviewed/2024/04/GHSA-pjvr-qvh4-frwq/GHSA-pjvr-qvh4-frwq.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pjvr-qvh4-frwq",
"modified": "2024-04-30T00:30:35Z",
"modified": "2024-11-20T00:32:09Z",
"published": "2024-04-30T00:30:35Z",
"aliases": [
"CVE-2023-52728"
],
"details": "Open Networking Foundation SD-RAN ONOS onos-lib-go 0.10.25 allows an index out-of-range condition in putBitString.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-129"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-30T00:15:07Z"
advisories/unreviewed/2024/05/GHSA-63j7-4362-2cgm/GHSA-63j7-4362-2cgm.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-63j7-4362-2cgm",
"modified": "2024-05-17T18:30:42Z",
"modified": "2024-11-20T00:32:09Z",
"published": "2024-05-17T18:30:42Z",
"aliases": [
"CVE-2024-5072"
],
"details": "Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.11.0 and earlier allows an authenticated user with access to the PAM JIT elevation feature to manipulate the LDAP filter query via a specially crafted request.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-17T16:15:08Z"
advisories/unreviewed/2024/05/GHSA-8fpw-hmv9-f7c4/GHSA-8fpw-hmv9-f7c4.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8fpw-hmv9-f7c4",
"modified": "2024-05-07T18:30:34Z",
"modified": "2024-11-20T00:32:09Z",
"published": "2024-05-07T18:30:34Z",
"aliases": [
"CVE-2024-33859"
],
"details": "An issue was discovered in Logpoint before 7.4.0. HTML code sent through logs wasn't being escaped in the \"Interesting Field\" Web UI, leading to XSS.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-07T17:15:09Z"
advisories/unreviewed/2024/05/GHSA-rvfh-h6c7-fc3c/GHSA-rvfh-h6c7-fc3c.json
+1 -1
View File
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-116"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/07/GHSA-5r34-776f-3434/GHSA-5r34-776f-3434.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5r34-776f-3434",
"modified": "2024-07-17T21:31:37Z",
"modified": "2024-11-20T00:32:09Z",
"published": "2024-07-04T09:32:49Z",
"aliases": [
"CVE-2024-39884"
],
"details": "A regression in the core of Apache HTTP Server 2.4.60 ignores some use of the legacy content-type based configuration of handlers.   \"AddType\" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted.\n\nUsers are recommended to upgrade to version 2.4.61, which fixes this issue.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -35,7 +38,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-04T09:15:04Z"
advisories/unreviewed/2024/07/GHSA-fj5c-r5jw-5wp8/GHSA-fj5c-r5jw-5wp8.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fj5c-r5jw-5wp8",
"modified": "2024-07-16T18:31:42Z",
"modified": "2024-11-20T00:32:09Z",
"published": "2024-07-09T15:30:54Z",
"aliases": [
"CVE-2024-6613"
],
"details": "The frame iterator could get stuck in a loop when encountering certain wasm frames leading to incorrect stack traces. This vulnerability affects Firefox < 128.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -35,7 +38,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-09T15:15:13Z"
advisories/unreviewed/2024/11/GHSA-233g-c3hw-rh55/GHSA-233g-c3hw-rh55.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-233g-c3hw-rh55",
"modified": "2024-11-20T00:32:15Z",
"published": "2024-11-20T00:32:15Z",
"aliases": [
"CVE-2018-9466"
],
"details": "In the xmlSnprintfElementContent function of valid.c, there is a possible out of bounds write. This could lead to remote escalation of privilege in an unprivileged app with no additional execution privileges needed. User interaction is needed for exploitation.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9466"
},
{
"type": "WEB",
"url": "https://source.android.com/security/bulletin/2018-09-01"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-19T23:15:04Z"
}
}
advisories/unreviewed/2024/11/GHSA-27gp-h89j-594r/GHSA-27gp-h89j-594r.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-27gp-h89j-594r",
"modified": "2024-11-20T00:32:14Z",
"published": "2024-11-20T00:32:14Z",
"aliases": [
"CVE-2018-9419"
],
"details": "In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9419"
},
{
"type": "WEB",
"url": "https://source.android.com/security/bulletin/2018-07-01"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-19T22:15:18Z"
}
}
advisories/unreviewed/2024/11/GHSA-27r4-945x-jq67/GHSA-27r4-945x-jq67.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-27r4-945x-jq67",
"modified": "2024-11-20T00:32:14Z",
"published": "2024-11-20T00:32:14Z",
"aliases": [
"CVE-2018-9412"
],
"details": "In removeUnsynchronization of ID3.cpp there is a possible resource exhaustion due to improper input validation. This could lead to denial of service with no additional execution privileges needed. User interaction is needed for exploitation.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9412"
},
{
"type": "WEB",
"url": "https://source.android.com/security/bulletin/2018-07-01"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-19T22:15:18Z"
}
}
advisories/unreviewed/2024/11/GHSA-284g-pxp5-92cp/GHSA-284g-pxp5-92cp.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-284g-pxp5-92cp",
"modified": "2024-11-20T00:32:14Z",
"published": "2024-11-20T00:32:14Z",
"aliases": [
"CVE-2018-9433"
],
"details": "In ArrayConcatVisitor of builtins-array.cc, there is a possible type confusion due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9433"
},
{
"type": "WEB",
"url": "https://source.android.com/security/bulletin/2018-07-01"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-19T22:15:19Z"
}
}
advisories/unreviewed/2024/11/GHSA-3h9f-v388-6w84/GHSA-3h9f-v388-6w84.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3h9f-v388-6w84",
"modified": "2024-11-19T21:31:33Z",
"modified": "2024-11-20T00:32:14Z",
"published": "2024-11-19T21:31:33Z",
"aliases": [
"CVE-2024-11395"
],
"details": "Type Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
"CWE-843"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-19T20:15:29Z"
advisories/unreviewed/2024/11/GHSA-3p2r-95j5-h86j/GHSA-3p2r-95j5-h86j.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3p2r-95j5-h86j",
"modified": "2024-11-20T00:32:14Z",
"published": "2024-11-20T00:32:14Z",
"aliases": [
"CVE-2024-30424"
],
"details": "Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPZOOM Beaver Builder Addons by WPZOOM allows Stored XSS.This issue affects Beaver Builder Addons by WPZOOM: from n/a through 1.3.4.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30424"
},
{
"type": "WEB",
"url": "https://patchstack.com/database/vulnerability/wpzoom-addons-for-beaver-builder/wordpress-beaver-builder-addons-by-wpzoom-plugin-1-3-4-cross-site-scripting-xss-vulnerability?_s_id=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-19T22:15:20Z"
}
}
advisories/unreviewed/2024/11/GHSA-6cpp-mpjx-cx8v/GHSA-6cpp-mpjx-cx8v.json
+51
View File
@@ -0,0 +1,51 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6cpp-mpjx-cx8v",
"modified": "2024-11-20T00:32:15Z",
"published": "2024-11-20T00:32:15Z",
"aliases": [
"CVE-2024-44309"
],
"details": "A cookie management issue was addressed with improved state management. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, macOS Sequoia 15.1.1, iOS 18.1.1 and iPadOS 18.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to a cross site scripting attack. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-44309"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/121752"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/121753"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/121754"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/121755"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/121756"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-20T00:15:17Z"
}
}
advisories/unreviewed/2024/11/GHSA-6wpw-4vr3-6744/GHSA-6wpw-4vr3-6744.json
+51
View File
@@ -0,0 +1,51 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6wpw-4vr3-6744",
"modified": "2024-11-20T00:32:15Z",
"published": "2024-11-20T00:32:15Z",
"aliases": [
"CVE-2024-44308"
],
"details": "The issue was addressed with improved checks. This issue is fixed in Safari 18.1.1, iOS 17.7.2 and iPadOS 17.7.2, macOS Sequoia 15.1.1, iOS 18.1.1 and iPadOS 18.1.1, visionOS 2.1.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-44308"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/121752"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/121753"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/121754"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/121755"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/121756"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-11-20T00:15:17Z"
}
}

Some files were not shown because too many files have changed in this diff Show More