netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-04-26 09:32:15 +00:00
parent 919afe6666
commit 9099526b4e
69 changed files with 1185 additions and 178 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2023/10/GHSA-qppj-fm5r-hxr3/GHSA-qppj-fm5r-hxr3.json
+132 -128
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qppj-fm5r-hxr3",
"modified": "2024-04-01T16:13:51Z",
"modified": "2024-04-26T09:30:36Z",
"published": "2023-10-10T21:28:24Z",
"aliases": [
"CVE-2023-44487"
@@ -508,34 +508,6 @@
"type": "WEB",
"url": "https://github.com/Azure/AKS/issues/3947"
},
{
"type": "WEB",
"url": "https://github.com/akka/akka-http/issues/4323"
},
{
"type": "WEB",
"url": "https://github.com/alibaba/tengine/issues/1872"
},
{
"type": "WEB",
"url": "https://github.com/apache/apisix/issues/10320"
},
{
"type": "WEB",
"url": "https://github.com/varnishcache/varnish-cache/issues/3996"
},
{
"type": "WEB",
"url": "https://github.com/caddyserver/caddy/issues/5877"
},
{
"type": "WEB",
"url": "https://github.com/tempesta-tech/tempesta/issues/1986"
},
{
"type": "WEB",
"url": "https://github.com/dotnet/announcements/issues/277"
},
{
"type": "WEB",
"url": "https://github.com/eclipse/jetty.project/issues/10679"
@@ -544,10 +516,26 @@
"type": "WEB",
"url": "https://github.com/etcd-io/etcd/issues/16740"
},
{
"type": "WEB",
"url": "https://github.com/tempesta-tech/tempesta/issues/1986"
},
{
"type": "WEB",
"url": "https://github.com/golang/go/issues/63417"
},
{
"type": "WEB",
"url": "https://github.com/dotnet/announcements/issues/277"
},
{
"type": "WEB",
"url": "https://github.com/varnishcache/varnish-cache/issues/3996"
},
{
"type": "WEB",
"url": "https://github.com/akka/akka-http/issues/4323"
},
{
"type": "WEB",
"url": "https://github.com/haproxy/haproxy/issues/2312"
@@ -556,10 +544,6 @@
"type": "WEB",
"url": "https://github.com/hyperium/hyper/issues/3337"
},
{
"type": "WEB",
"url": "https://github.com/opensearch-project/data-prepper/issues/3474"
},
{
"type": "WEB",
"url": "https://github.com/junkurihara/rust-rpxy/issues/97"
@@ -568,6 +552,22 @@
"type": "WEB",
"url": "https://github.com/kazu-yamamoto/http2/issues/93"
},
{
"type": "WEB",
"url": "https://github.com/caddyserver/caddy/issues/5877"
},
{
"type": "WEB",
"url": "https://github.com/alibaba/tengine/issues/1872"
},
{
"type": "WEB",
"url": "https://github.com/opensearch-project/data-prepper/issues/3474"
},
{
"type": "WEB",
"url": "https://github.com/apache/apisix/issues/10320"
},
{
"type": "WEB",
"url": "https://github.com/openresty/openresty/issues/930"
@@ -576,6 +576,22 @@
"type": "WEB",
"url": "https://github.com/ninenines/cowboy/issues/1615"
},
{
"type": "WEB",
"url": "https://github.com/apache/trafficserver/pull/10564"
},
{
"type": "WEB",
"url": "https://github.com/envoyproxy/envoy/pull/30055"
},
{
"type": "WEB",
"url": "https://github.com/facebook/proxygen/pull/466"
},
{
"type": "WEB",
"url": "https://github.com/grpc/grpc-go/pull/6703"
},
{
"type": "WEB",
"url": "https://github.com/projectcontour/contour/pull/5826"
@@ -584,26 +600,10 @@
"type": "WEB",
"url": "https://github.com/h2o/h2o/pull/3291"
},
{
"type": "WEB",
"url": "https://github.com/envoyproxy/envoy/pull/30055"
},
{
"type": "WEB",
"url": "https://github.com/apache/trafficserver/pull/10564"
},
{
"type": "WEB",
"url": "https://github.com/grpc/grpc-go/pull/6703"
},
{
"type": "WEB",
"url": "https://github.com/kubernetes/kubernetes/pull/121120"
},
{
"type": "WEB",
"url": "https://github.com/apache/httpd-site/pull/10"
},
{
"type": "WEB",
"url": "https://github.com/line/armeria/pull/5232"
@@ -612,18 +612,6 @@
"type": "WEB",
"url": "https://github.com/linkerd/website/pull/1695/commits/4b9c6836471bc8270ab48aae6fd2181bc73fd632"
},
{
"type": "WEB",
"url": "https://github.com/akka/akka-http/pull/4325"
},
{
"type": "WEB",
"url": "https://github.com/akka/akka-http/pull/4324"
},
{
"type": "WEB",
"url": "https://github.com/facebook/proxygen/pull/466"
},
{
"type": "WEB",
"url": "https://github.com/microsoft/CBL-Mariner/pull/6381"
@@ -636,6 +624,18 @@
"type": "WEB",
"url": "https://github.com/nodejs/node/pull/50121"
},
{
"type": "WEB",
"url": "https://github.com/apache/httpd-site/pull/10"
},
{
"type": "WEB",
"url": "https://github.com/akka/akka-http/pull/4325"
},
{
"type": "WEB",
"url": "https://github.com/akka/akka-http/pull/4324"
},
{
"type": "WEB",
"url": "https://github.com/netty/netty/commit/58f75f665aa81a8cbcf6ffa74820042a285c5e61"
@@ -644,18 +644,34 @@
"type": "WEB",
"url": "https://github.com/kazu-yamamoto/http2/commit/f61d41a502bd0f60eb24e1ce14edc7b6df6722a1"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5"
},
{
"type": "WEB",
"url": "https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4"
},
{
"type": "WEB",
"url": "https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3"
@@ -682,7 +698,39 @@
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK"
"url": "https://access.redhat.com/security/cve/cve-2023-44487"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK"
},
{
"type": "WEB",
@@ -702,31 +750,7 @@
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VHUHTSXLXGXS7JYKBXTA3VINUPHTNGVU"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LNMZJCDHGLJJLXO4OXWJMTVQRNWOC7UL"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KSEGD2IWKNUO3DWY4KQGUQM5BISRWHQE"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JMEXY22BFG5Q64HQCM5CK2Q7KDKVV4TY"
"url": "https://mailman.nginx.org/pipermail/nginx-devel/2023-October/S36Q5HBXR7CAIMPLLPRSSSYR4PCMWILK.html"
},
{
"type": "WEB",
@@ -734,35 +758,15 @@
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/JIZSEFC3YKCGABA2BZW6ZJRMDZJMB7PJ"
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZKQSIKIAT5TJ3WSLU3RDBQ35YX4GY4V3"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ"
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZLU6U2R2IC2K64NDPNMV55AUAO65MAF4"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CLB4TW7KALB3EEQWNWCN7OUIWWVWWCG2"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BFQD3KUEMFBHPAPBGLWQC34L4OWL5HAZ"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A"
},
{
"type": "WEB",
"url": "https://martinthomson.github.io/h2-stream-limits/draft-thomson-httpbis-h2-stream-limits.html"
"url": "https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2"
},
{
"type": "WEB",
@@ -832,10 +836,6 @@
"type": "WEB",
"url": "https://www.theregister.com/2023/10/10/http2_rapid_reset_zeroday"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/blog/2023/10/microsoft-response-to-distributed-denial-of-service-ddos-attacks-against-http/2"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-44487"
@@ -880,6 +880,10 @@
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20231016-0001"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240426-0007"
},
{
"type": "WEB",
"url": "https://security.paloaltonetworks.com/CVE-2023-44487"
@@ -900,10 +904,6 @@
"type": "WEB",
"url": "https://tomcat.apache.org/security-9.html#Fixed_in_Apache_Tomcat_9.0.81"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/cve-2023-44487"
},
{
"type": "WEB",
"url": "https://discuss.hashicorp.com/t/hcsec-2023-32-vault-consul-and-boundary-affected-by-http-2-rapid-reset-denial-of-service-vulnerability-cve-2023-44487/59715"
@@ -1034,7 +1034,7 @@
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html"
"url": "https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244"
},
{
"type": "WEB",
@@ -1098,7 +1098,7 @@
},
{
"type": "WEB",
"url": "https://github.com/icing/mod_h2/blob/0a864782af0a942aa2ad4ed960a6b32cd35bcf0a/mod_http2/README.md?plain=1#L239-L244"
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VSRDIV77HNKUSM7SJC5BKE5JSHLHU2NK"
},
{
"type": "WEB",
@@ -1160,6 +1160,10 @@
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00045.html"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2023/10/msg00047.html"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2023/10/13/4"
advisories/github-reviewed/2024/03/GHSA-874v-pj72-92f3/GHSA-874v-pj72-92f3.json
+13 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-874v-pj72-92f3",
"modified": "2024-04-03T03:30:29Z",
"modified": "2024-04-26T09:30:33Z",
"published": "2024-03-28T17:53:52Z",
"aliases": [
"CVE-2024-1753"
@@ -67,6 +67,18 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-1753"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:2055"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:2064"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:2066"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2024-1753"
advisories/github-reviewed/2024/04/GHSA-x5m7-63c6-fx79/GHSA-x5m7-63c6-fx79.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x5m7-63c6-fx79",
"modified": "2024-04-25T19:57:06Z",
"modified": "2024-04-26T09:30:34Z",
"published": "2024-04-25T18:30:39Z",
"aliases": [
"CVE-2024-1139"
@@ -48,6 +48,10 @@
"type": "WEB",
"url": "https://github.com/openshift/cluster-monitoring-operator/commit/1cfbe9ffafe1e43f8f87a451b72fddf5d76fa4e3"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:1887"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2024-1139"
advisories/unreviewed/2022/05/GHSA-2gpj-6wgq-8636/GHSA-2gpj-6wgq-8636.json
+14 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2gpj-6wgq-8636",
"modified": "2022-05-24T17:18:08Z",
"modified": "2024-04-26T09:30:33Z",
"published": "2022-05-24T17:18:08Z",
"aliases": [
"CVE-2020-12667"
],
"details": "Knot Resolver before 5.1.1 allows traffic amplification via a crafted DNS answer from an attacker-controlled server, aka an \"NXNSAttack\" issue. This is triggered by random subdomains in the NSDNAME in NS records.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -22,6 +25,14 @@
"type": "WEB",
"url": "https://en.blog.nic.cz/2020/05/19/nxnsattack-upgrade-resolvers-to-stop-new-kind-of-random-subdomain-attack"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00017.html"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/76Y4FITMOH6RVPWAANGV7NB2ZHPJJGDQ"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/76Y4FITMOH6RVPWAANGV7NB2ZHPJJGDQ"
@@ -45,7 +56,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-400"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2022/05/GHSA-5pqr-9wpj-5m82/GHSA-5pqr-9wpj-5m82.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5pqr-9wpj-5m82",
"modified": "2023-02-13T00:30:59Z",
"modified": "2024-04-26T09:30:33Z",
"published": "2022-05-24T16:50:26Z",
"aliases": [
"CVE-2019-10190"
@@ -25,6 +25,10 @@
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10190"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00017.html"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMSSWBHINIX4WE6UDXWM66L7JYEK6XS6"
advisories/unreviewed/2022/05/GHSA-5w8c-g2pj-65rx/GHSA-5w8c-g2pj-65rx.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5w8c-g2pj-65rx",
"modified": "2023-02-13T00:30:59Z",
"modified": "2024-04-26T09:30:33Z",
"published": "2022-05-24T16:50:27Z",
"aliases": [
"CVE-2019-10191"
@@ -25,6 +25,10 @@
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10191"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00017.html"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMSSWBHINIX4WE6UDXWM66L7JYEK6XS6"
advisories/unreviewed/2022/05/GHSA-9f7v-8m4p-pv76/GHSA-9f7v-8m4p-pv76.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9f7v-8m4p-pv76",
"modified": "2024-04-04T02:43:50Z",
"modified": "2024-04-26T09:30:33Z",
"published": "2022-05-24T17:03:44Z",
"aliases": [
"CVE-2019-19331"
@@ -25,6 +25,10 @@
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-19331"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00017.html"
},
{
"type": "WEB",
"url": "https://www.knot-resolver.cz/2019-12-04-knot-resolver-4.3.0.html"
advisories/unreviewed/2023/09/GHSA-2hcr-79rm-r8rp/GHSA-2hcr-79rm-r8rp.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2hcr-79rm-r8rp",
"modified": "2023-11-16T03:30:19Z",
"modified": "2024-04-26T09:30:33Z",
"published": "2023-09-21T21:31:00Z",
"aliases": [
"CVE-2023-41993"
@@ -37,6 +37,10 @@
"type": "WEB",
"url": "https://security.gentoo.org/glsa/202401-33"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240426-0004"
},
{
"type": "WEB",
"url": "https://support.apple.com/en-us/HT213926"
advisories/unreviewed/2023/09/GHSA-8jhw-fpw9-r227/GHSA-8jhw-fpw9-r227.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8jhw-fpw9-r227",
"modified": "2024-04-04T07:41:03Z",
"modified": "2024-04-26T09:30:33Z",
"published": "2023-09-14T21:30:26Z",
"aliases": [
"CVE-2023-32643"
@@ -28,6 +28,10 @@
{
"type": "WEB",
"url": "https://https://discourse.gnome.org/t/multiple-fixes-for-gvariant-normalisation-issues-in-glib/12835"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240426-0005"
}
],
"database_specific": {
advisories/unreviewed/2023/09/GHSA-c9xj-rf55-c64g/GHSA-c9xj-rf55-c64g.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c9xj-rf55-c64g",
"modified": "2023-11-27T15:30:55Z",
"modified": "2024-04-26T09:30:33Z",
"published": "2023-09-14T21:30:26Z",
"aliases": [
"CVE-2023-32665"
@@ -40,6 +40,10 @@
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/202311-18"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240426-0006"
}
],
"database_specific": {
advisories/unreviewed/2024/01/GHSA-rj8q-prqp-jwfg/GHSA-rj8q-prqp-jwfg.json
+9 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rj8q-prqp-jwfg",
"modified": "2024-02-16T15:30:26Z",
"modified": "2024-04-26T09:30:33Z",
"published": "2024-01-09T18:30:27Z",
"aliases": [
"CVE-2023-6129"
@@ -37,6 +37,14 @@
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240216-0009"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240426-0008"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240426-0013"
},
{
"type": "WEB",
"url": "https://www.openssl.org/news/secadv/20240109.txt"
advisories/unreviewed/2024/02/GHSA-697h-9h25-w4fm/GHSA-697h-9h25-w4fm.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-697h-9h25-w4fm",
"modified": "2024-03-07T18:30:27Z",
"modified": "2024-04-26T09:30:33Z",
"published": "2024-02-03T15:30:28Z",
"aliases": [
"CVE-2024-0853"
@@ -36,6 +36,10 @@
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240307-0004"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240426-0009"
}
],
"database_specific": {
advisories/unreviewed/2024/02/GHSA-v5qp-mx94-j49v/GHSA-v5qp-mx94-j49v.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v5qp-mx94-j49v",
"modified": "2024-03-04T03:30:25Z",
"modified": "2024-04-26T09:30:33Z",
"published": "2024-02-13T15:31:12Z",
"aliases": [
"CVE-2023-5679"
@@ -41,6 +41,10 @@
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240426-0002"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2024/02/13/1"
advisories/unreviewed/2024/02/GHSA-x57x-3c65-5f3j/GHSA-x57x-3c65-5f3j.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x57x-3c65-5f3j",
"modified": "2024-03-04T03:30:25Z",
"modified": "2024-04-26T09:30:33Z",
"published": "2024-02-13T15:31:12Z",
"aliases": [
"CVE-2023-4408"
@@ -41,6 +41,10 @@
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZDZFMEKQTZ4L7RY46FCENWFB5MDT263R"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240426-0001"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2024/02/13/1"
advisories/unreviewed/2024/04/GHSA-26mf-52p6-23pq/GHSA-26mf-52p6-23pq.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-26mf-52p6-23pq",
"modified": "2024-04-17T00:30:53Z",
"modified": "2024-04-26T09:30:33Z",
"published": "2024-04-17T00:30:53Z",
"aliases": [
"CVE-2024-20994"
@@ -21,6 +21,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-20994"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240426-0013"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpuapr2024.html"
advisories/unreviewed/2024/04/GHSA-273j-fjrx-gf2f/GHSA-273j-fjrx-gf2f.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-273j-fjrx-gf2f",
"modified": "2024-04-22T15:30:40Z",
"modified": "2024-04-26T09:30:34Z",
"published": "2024-04-17T00:30:56Z",
"aliases": [
"CVE-2024-21085"
@@ -25,6 +25,10 @@
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2024/04/msg00014.html"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240426-0004"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpuapr2024.html"
advisories/unreviewed/2024/04/GHSA-2mpf-fq5j-4hgp/GHSA-2mpf-fq5j-4hgp.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2mpf-fq5j-4hgp",
"modified": "2024-04-17T00:30:56Z",
"modified": "2024-04-26T09:30:34Z",
"published": "2024-04-17T00:30:56Z",
"aliases": [
"CVE-2024-21087"
@@ -21,6 +21,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21087"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240426-0013"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpuapr2024.html"
advisories/unreviewed/2024/04/GHSA-3jpw-p5mr-c3q9/GHSA-3jpw-p5mr-c3q9.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3jpw-p5mr-c3q9",
"modified": "2024-04-17T00:30:55Z",
"modified": "2024-04-26T09:30:34Z",
"published": "2024-04-17T00:30:55Z",
"aliases": [
"CVE-2024-21052"
@@ -21,6 +21,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21052"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240426-0012"
},
{
"type": "WEB",
"url": "https://www.oracle.com/security-alerts/cpuapr2024.html"
advisories/unreviewed/2024/04/GHSA-3q47-w545-wgfv/GHSA-3q47-w545-wgfv.json
+46
View File
@@ -0,0 +1,46 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3q47-w545-wgfv",
"modified": "2024-04-26T09:30:34Z",
"published": "2024-04-26T09:30:34Z",
"aliases": [
"CVE-2024-3962"
],
"details": "The Product Addons & Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ppom_upload_file function in all versions up to, and including, 32.0.18. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Successful exploitation requires the PPOM Pro plugin to be installed along with a WooCommerce product that contains a file upload field to retrieve the correct nonce.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3962"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/changeset/3075669/woocommerce-product-addon"
},
{
"type": "WEB",
"url": "https://themeisle.com/plugins/ppom-pro"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/4f95bcc3-354e-4016-9a17-945569b076b6?source=cve"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-26T09:15:12Z"
}
}
advisories/unreviewed/2024/04/GHSA-3v95-qw2c-cq5p/GHSA-3v95-qw2c-cq5p.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3v95-qw2c-cq5p",
"modified": "2024-04-26T09:30:34Z",
"published": "2024-04-26T09:30:34Z",
"aliases": [
"CVE-2024-33642"
],
"details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in EkoJR Advanced Post List allows Stored XSS.This issue affects Advanced Post List: from n/a through 0.5.6.1.\n\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-33642"
},
{
"type": "WEB",
"url": "https://patchstack.com/database/vulnerability/advanced-post-list/wordpress-advanced-post-list-plugin-0-5-6-1-cross-site-scripting-xss-vulnerability?_s_id=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-26T08:15:12Z"
}
}

Some files were not shown because too many files have changed in this diff Show More