netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2025-03-05 21:33:44 +00:00
parent e525f16bd9
commit 920893a958
71 changed files with 785 additions and 181 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/03/GHSA-3wpp-5prr-27h8/GHSA-3wpp-5prr-27h8.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3wpp-5prr-27h8",
"modified": "2023-03-16T15:30:17Z",
"modified": "2025-03-05T21:32:02Z",
"published": "2023-03-10T21:30:19Z",
"aliases": [
"CVE-2023-25148"
advisories/unreviewed/2023/03/GHSA-63p5-chvq-vhq6/GHSA-63p5-chvq-vhq6.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-63p5-chvq-vhq6",
"modified": "2023-03-16T15:30:19Z",
"modified": "2025-03-05T21:32:01Z",
"published": "2023-03-10T21:30:20Z",
"aliases": [
"CVE-2023-25145"
advisories/unreviewed/2023/03/GHSA-974m-g68h-9gxx/GHSA-974m-g68h-9gxx.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-974m-g68h-9gxx",
"modified": "2023-03-13T06:30:25Z",
"modified": "2025-03-05T21:31:56Z",
"published": "2023-03-07T21:30:17Z",
"aliases": [
"CVE-2023-20632"
@@ -22,6 +22,10 @@
{
"type": "WEB",
"url": "https://corp.mediatek.com/product-security-bulletin/March-2023"
},
{
"type": "WEB",
"url": "https://www.cisa.gov/news-events/bulletins/sb23-072"
}
],
"database_specific": {
advisories/unreviewed/2023/03/GHSA-hhwq-8w3p-w65v/GHSA-hhwq-8w3p-w65v.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hhwq-8w3p-w65v",
"modified": "2023-03-13T06:30:25Z",
"modified": "2025-03-05T21:31:56Z",
"published": "2023-03-07T21:30:17Z",
"aliases": [
"CVE-2023-20630"
@@ -22,6 +22,10 @@
{
"type": "WEB",
"url": "https://corp.mediatek.com/product-security-bulletin/March-2023"
},
{
"type": "WEB",
"url": "https://www.cisa.gov/news-events/bulletins/sb23-072"
}
],
"database_specific": {
advisories/unreviewed/2023/03/GHSA-hr8p-qwmc-vxmp/GHSA-hr8p-qwmc-vxmp.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hr8p-qwmc-vxmp",
"modified": "2023-03-14T21:30:21Z",
"modified": "2025-03-05T21:31:59Z",
"published": "2023-03-08T21:30:23Z",
"aliases": [
"CVE-2023-22889"
advisories/unreviewed/2023/03/GHSA-qvqh-m74g-fqcf/GHSA-qvqh-m74g-fqcf.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qvqh-m74g-fqcf",
"modified": "2023-03-16T15:30:19Z",
"modified": "2025-03-05T21:32:01Z",
"published": "2023-03-10T21:30:19Z",
"aliases": [
"CVE-2023-25146"
advisories/unreviewed/2023/03/GHSA-rf23-mj2w-9g24/GHSA-rf23-mj2w-9g24.json
+3 -1
View File
@@ -45,7 +45,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-120"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2023/03/GHSA-v7xw-hr75-rm43/GHSA-v7xw-hr75-rm43.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v7xw-hr75-rm43",
"modified": "2023-03-16T18:30:28Z",
"modified": "2025-03-05T21:31:59Z",
"published": "2023-03-08T21:30:23Z",
"aliases": [
"CVE-2023-22891"
advisories/unreviewed/2023/03/GHSA-w922-qg6g-84wc/GHSA-w922-qg6g-84wc.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-284"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2023/04/GHSA-c89p-xpwc-c8c4/GHSA-c89p-xpwc-c8c4.json
+13 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c89p-xpwc-c8c4",
"modified": "2023-04-12T18:30:38Z",
"modified": "2025-03-05T21:32:02Z",
"published": "2023-04-06T06:30:19Z",
"aliases": [
"CVE-2023-29420"
@@ -31,6 +31,18 @@
"type": "WEB",
"url": "https://github.com/kspalaiologos/bzip3/compare/1.2.2...1.2.3"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY"
advisories/unreviewed/2023/04/GHSA-q597-3v27-cmvx/GHSA-q597-3v27-cmvx.json
+13 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-q597-3v27-cmvx",
"modified": "2023-04-12T18:30:38Z",
"modified": "2025-03-05T21:32:02Z",
"published": "2023-04-06T06:30:19Z",
"aliases": [
"CVE-2023-29418"
@@ -31,6 +31,18 @@
"type": "WEB",
"url": "https://github.com/kspalaiologos/bzip3/compare/1.2.2...1.2.3"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY"
advisories/unreviewed/2023/04/GHSA-qrqf-2crr-jvqf/GHSA-qrqf-2crr-jvqf.json
+13 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qrqf-2crr-jvqf",
"modified": "2023-04-12T18:30:38Z",
"modified": "2025-03-05T21:32:02Z",
"published": "2023-04-06T06:30:19Z",
"aliases": [
"CVE-2023-29419"
@@ -31,6 +31,18 @@
"type": "WEB",
"url": "https://github.com/kspalaiologos/bzip3/compare/1.2.2...1.2.3"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NA7S7HDUAINOTCSWQZ5LIW756DYY22V2"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NMLFV2FJK3CM7NJLVPZI5RUAFQZICPWW"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4JLSE25SV7K2NB6FTFT4UHJOJUHBHYHY"
advisories/unreviewed/2023/07/GHSA-jm67-cprv-v6wx/GHSA-jm67-cprv-v6wx.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jm67-cprv-v6wx",
"modified": "2024-04-04T05:34:00Z",
"modified": "2025-03-05T21:32:01Z",
"published": "2023-07-06T19:24:11Z",
"aliases": [
"CVE-2023-0030"
advisories/unreviewed/2024/03/GHSA-69q2-pwf5-cf5q/GHSA-69q2-pwf5-cf5q.json
+2 -2
View File
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-69q2-pwf5-cf5q",
"modified": "2024-03-27T12:30:41Z",
"modified": "2025-03-05T21:32:03Z",
"published": "2024-03-27T12:30:41Z",
"aliases": [
"CVE-2024-30177"
],
"details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Exclusive Addons Exclusive Addons Elementor allows Stored XSS.This issue affects Exclusive Addons Elementor: from n/a through 2.6.8.\n\n",
"details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Exclusive Addons Exclusive Addons Elementor allows Stored XSS.This issue affects Exclusive Addons Elementor: from n/a through 2.6.8.",
"severity": [
{
"type": "CVSS_V3",
advisories/unreviewed/2024/03/GHSA-ch5h-vgj6-vhx6/GHSA-ch5h-vgj6-vhx6.json
+2 -2
View File
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-ch5h-vgj6-vhx6",
"modified": "2024-03-28T06:30:46Z",
"modified": "2025-03-05T21:32:03Z",
"published": "2024-03-28T06:30:46Z",
"aliases": [
"CVE-2023-36679"
],
"details": "Server-Side Request Forgery (SSRF) vulnerability in Brainstorm Force Spectra.This issue affects Spectra: from n/a through 2.6.6.\n\n",
"details": "Server-Side Request Forgery (SSRF) vulnerability in Brainstorm Force Spectra.This issue affects Spectra: from n/a through 2.6.6.",
"severity": [
{
"type": "CVSS_V3",
advisories/unreviewed/2024/03/GHSA-m6hg-jwrh-92jj/GHSA-m6hg-jwrh-92jj.json
+2 -2
View File
@@ -1,12 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m6hg-jwrh-92jj",
"modified": "2024-03-26T12:31:29Z",
"modified": "2025-03-05T21:32:02Z",
"published": "2024-03-26T12:31:29Z",
"aliases": [
"CVE-2024-30232"
],
"details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Exclusive Addons Exclusive Addons Elementor allows Stored XSS.This issue affects Exclusive Addons Elementor: from n/a through 2.6.9.\n\n",
"details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Exclusive Addons Exclusive Addons Elementor allows Stored XSS.This issue affects Exclusive Addons Elementor: from n/a through 2.6.9.",
"severity": [
{
"type": "CVSS_V3",
advisories/unreviewed/2025/02/GHSA-4r7g-qqxf-m6v8/GHSA-4r7g-qqxf-m6v8.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4r7g-qqxf-m6v8",
"modified": "2025-02-27T03:34:06Z",
"modified": "2025-03-05T21:32:07Z",
"published": "2025-02-27T03:34:06Z",
"aliases": [
"CVE-2025-21776"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nUSB: hub: Ignore non-compliant devices with too many configs or interfaces\n\nRobert Morris created a test program which can cause\nusb_hub_to_struct_hub() to dereference a NULL or inappropriate\npointer:\n\nOops: general protection fault, probably for non-canonical address\n0xcccccccccccccccc: 0000 [#1] SMP DEBUG_PAGEALLOC PTI\nCPU: 7 UID: 0 PID: 117 Comm: kworker/7:1 Not tainted 6.13.0-rc3-00017-gf44d154d6e3d #14\nHardware name: FreeBSD BHYVE/BHYVE, BIOS 14.0 10/17/2021\nWorkqueue: usb_hub_wq hub_event\nRIP: 0010:usb_hub_adjust_deviceremovable+0x78/0x110\n...\nCall Trace:\n <TASK>\n ? die_addr+0x31/0x80\n ? exc_general_protection+0x1b4/0x3c0\n ? asm_exc_general_protection+0x26/0x30\n ? usb_hub_adjust_deviceremovable+0x78/0x110\n hub_probe+0x7c7/0xab0\n usb_probe_interface+0x14b/0x350\n really_probe+0xd0/0x2d0\n ? __pfx___device_attach_driver+0x10/0x10\n __driver_probe_device+0x6e/0x110\n driver_probe_device+0x1a/0x90\n __device_attach_driver+0x7e/0xc0\n bus_for_each_drv+0x7f/0xd0\n __device_attach+0xaa/0x1a0\n bus_probe_device+0x8b/0xa0\n device_add+0x62e/0x810\n usb_set_configuration+0x65d/0x990\n usb_generic_driver_probe+0x4b/0x70\n usb_probe_device+0x36/0xd0\n\nThe cause of this error is that the device has two interfaces, and the\nhub driver binds to interface 1 instead of interface 0, which is where\nusb_hub_to_struct_hub() looks.\n\nWe can prevent the problem from occurring by refusing to accept hub\ndevices that violate the USB spec by having more than one\nconfiguration or interface.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
@@ -36,8 +41,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-476"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-27T03:15:18Z"
advisories/unreviewed/2025/02/GHSA-5v6r-j86q-gwmh/GHSA-5v6r-j86q-gwmh.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5v6r-j86q-gwmh",
"modified": "2025-02-27T03:34:06Z",
"modified": "2025-03-05T21:32:07Z",
"published": "2025-02-27T03:34:05Z",
"aliases": [
"CVE-2025-21775"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncan: ctucanfd: handle skb allocation failure\n\nIf skb allocation fails, the pointer to struct can_frame is NULL. This\nis actually handled everywhere inside ctucan_err_interrupt() except for\nthe only place.\n\nAdd the missed NULL check.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE static\nanalysis tool.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
@@ -36,8 +41,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-476"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-27T03:15:18Z"
advisories/unreviewed/2025/02/GHSA-6hjx-r579-83fp/GHSA-6hjx-r579-83fp.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6hjx-r579-83fp",
"modified": "2025-02-27T03:34:04Z",
"modified": "2025-03-05T21:32:05Z",
"published": "2025-02-27T03:34:04Z",
"aliases": [
"CVE-2025-21748"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nksmbd: fix integer overflows on 32 bit systems\n\nOn 32bit systems the addition operations in ipc_msg_alloc() can\npotentially overflow leading to memory corruption.\nAdd bounds checking using KSMBD_IPC_MAX_PAYLOAD to avoid overflow.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [],
"references": [
{
@@ -36,8 +41,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-190"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-27T03:15:15Z"
advisories/unreviewed/2025/02/GHSA-6w55-mvg6-h5h5/GHSA-6w55-mvg6-h5h5.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6w55-mvg6-h5h5",
"modified": "2025-02-12T18:31:36Z",
"modified": "2025-03-05T21:32:04Z",
"published": "2025-02-12T18:31:36Z",
"aliases": [
"CVE-2025-25741"
],
"details": "D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the IPv6_PppoePassword parameter in the SetIPv6PppoeSettings module.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-121"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-02-12T18:15:28Z"

Some files were not shown because too many files have changed in this diff Show More