Advisory Database Sync

advisories/github-reviewed/2024/12/GHSA-h63v-hw6g-x8hp/GHSA-h63v-hw6g-x8hp.json

@@ -63,7 +63,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-325"
+      "CWE-325",
+      "CWE-327"
     ],
     "severity": "HIGH",
     "github_reviewed": true,

advisories/unreviewed/2023/12/GHSA-qjcj-xg77-6c32/GHSA-qjcj-xg77-6c32.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qjcj-xg77-6c32",
-  "modified": "2023-12-14T15:30:20Z",
+  "modified": "2024-12-12T15:31:05Z",
   "published": "2023-12-08T06:30:38Z",
   "aliases": [
     "CVE-2023-45866"

advisories/unreviewed/2024/03/GHSA-3h2v-h2q9-f9r6/GHSA-3h2v-h2q9-f9r6.json

@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3h2v-h2q9-f9r6",
-  "modified": "2024-03-06T09:30:27Z",
+  "modified": "2024-12-12T15:31:05Z",
   "published": "2024-03-06T09:30:27Z",
   "aliases": [
     "CVE-2023-52593"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: wfx: fix possible NULL pointer dereference in wfx_set_mfp_ap()\n\nSince 'ieee80211_beacon_get()' can return NULL, 'wfx_set_mfp_ap()'\nshould check the return value before examining skb data. So convert\nthe latter to return an appropriate error code and propagate it to\nreturn from 'wfx_start_ap()' as well. Compile tested only.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -32,8 +37,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-476"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-06T07:15:08Z"

advisories/unreviewed/2024/03/GHSA-3wwr-wv4x-4gxg/GHSA-3wwr-wv4x-4gxg.json

@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3wwr-wv4x-4gxg",
-  "modified": "2024-06-27T12:30:44Z",
+  "modified": "2024-12-12T15:31:06Z",
   "published": "2024-03-18T12:30:35Z",
   "aliases": [
     "CVE-2023-52615"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwrng: core - Fix page fault dead lock on mmap-ed hwrng\n\nThere is a dead-lock in the hwrng device read path.  This triggers\nwhen the user reads from /dev/hwrng into memory also mmap-ed from\n/dev/hwrng.  The resulting page fault triggers a recursive read\nwhich then dead-locks.\n\nFix this by using a stack buffer when calling copy_to_user.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -56,8 +61,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-667"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-18T11:15:08Z"

advisories/unreviewed/2024/03/GHSA-6ccp-3692-j6fr/GHSA-6ccp-3692-j6fr.json

@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6ccp-3692-j6fr",
-  "modified": "2024-03-02T00:31:31Z",
+  "modified": "2024-12-12T15:31:05Z",
   "published": "2024-03-02T00:31:31Z",
   "aliases": [
     "CVE-2021-47074"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvme-loop: fix memory leak in nvme_loop_create_ctrl()\n\nWhen creating loop ctrl in nvme_loop_create_ctrl(), if nvme_init_ctrl()\nfails, the loop ctrl should be freed before jumping to the \"out\" label.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -28,8 +33,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-401"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-01T22:15:47Z"

advisories/unreviewed/2024/03/GHSA-6x4q-xmhw-jmpw/GHSA-6x4q-xmhw-jmpw.json

@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-6x4q-xmhw-jmpw",
-  "modified": "2024-03-25T09:32:35Z",
+  "modified": "2024-12-12T15:31:06Z",
   "published": "2024-03-25T09:32:35Z",
   "aliases": [
     "CVE-2021-47148"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nocteontx2-pf: fix a buffer overflow in otx2_set_rxfh_context()\n\nThis function is called from ethtool_set_rxfh() and \"*rss_context\"\ncomes from the user.  Add some bounds checking to prevent memory\ncorruption.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-787"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-25T09:15:09Z"

advisories/unreviewed/2024/03/GHSA-79hf-9rwh-4gv8/GHSA-79hf-9rwh-4gv8.json

@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-79hf-9rwh-4gv8",
-  "modified": "2024-06-26T00:31:35Z",
+  "modified": "2024-12-12T15:31:05Z",
   "published": "2024-03-06T09:30:28Z",
   "aliases": [
     "CVE-2023-52595"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rt2x00: restart beacon queue when hardware reset\n\nWhen a hardware reset is triggered, all registers are reset, so all\nqueues are forced to stop in hardware interface. However, mac80211\nwill not automatically stop the queue. If we don't manually stop the\nbeacon queue, the queue will be deadlocked and unable to start again.\nThis patch fixes the issue where Apple devices cannot connect to the\nAP after calling ieee80211_restart_hw().",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -48,8 +53,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-667"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-06T07:15:09Z"

advisories/unreviewed/2024/03/GHSA-cgjr-9g5g-88j4/GHSA-cgjr-9g5g-88j4.json

@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-cgjr-9g5g-88j4",
-  "modified": "2024-06-27T12:30:44Z",
+  "modified": "2024-12-12T15:31:05Z",
   "published": "2024-03-06T09:30:28Z",
   "aliases": [
     "CVE-2023-52594"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: ath9k: Fix potential array-index-out-of-bounds read in ath9k_htc_txstatus()\n\nFix an array-index-out-of-bounds read in ath9k_htc_txstatus(). The bug\noccurs when txs->cnt, data from a URB provided by a USB device, is\nbigger than the size of the array txs->txstatus, which is\nHTC_MAX_TX_STATUS. WARN_ON() already checks it, but there is no bug\nhandling code after the check. Make the function return if that is the\ncase.\n\nFound by a modified version of syzkaller.\n\nUBSAN: array-index-out-of-bounds in htc_drv_txrx.c\nindex 13 is out of range for type '__wmi_event_txstatus [12]'\nCall Trace:\n ath9k_htc_txstatus\n ath9k_wmi_event_tasklet\n tasklet_action_common\n __do_softirq\n irq_exit_rxu\n sysvec_apic_timer_interrupt",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -56,8 +61,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-129"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-06T07:15:09Z"

advisories/unreviewed/2024/03/GHSA-f8g6-27f9-3r98/GHSA-f8g6-27f9-3r98.json

@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-f8g6-27f9-3r98",
-  "modified": "2024-03-02T00:31:30Z",
+  "modified": "2024-12-12T15:31:05Z",
   "published": "2024-03-02T00:31:30Z",
   "aliases": [
     "CVE-2021-47071"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nuio_hv_generic: Fix a memory leak in error handling paths\n\nIf 'vmbus_establish_gpadl()' fails, the (recv|send)_gpadl will not be\nupdated and 'hv_uio_cleanup()' in the error handling path will not be\nable to free the corresponding buffer.\n\nIn such a case, we need to free the buffer explicitly.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -32,8 +37,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-401"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-01T22:15:46Z"

advisories/unreviewed/2024/03/GHSA-pvf7-pgpm-3q43/GHSA-pvf7-pgpm-3q43.json

@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-pvf7-pgpm-3q43",
-  "modified": "2024-06-26T00:31:35Z",
+  "modified": "2024-12-12T15:31:05Z",
   "published": "2024-03-18T12:30:35Z",
   "aliases": [
     "CVE-2023-52614"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nPM / devfreq: Fix buffer overflow in trans_stat_show\n\nFix buffer overflow in trans_stat_show().\n\nConvert simple snprintf to the more secure scnprintf with size of\nPAGE_SIZE.\n\nAdd condition checking if we are exceeding PAGE_SIZE and exit early from\nloop. Also add at the end a warning that we exceeded PAGE_SIZE and that\nstats is disabled.\n\nReturn -EFBIG in the case where we don't have enough space to write the\nfull transition table.\n\nAlso document in the ABI that this function can return -EFBIG error.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -44,8 +49,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-18T11:15:08Z"

advisories/unreviewed/2024/03/GHSA-q2qw-486m-j3c6/GHSA-q2qw-486m-j3c6.json

@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-q2qw-486m-j3c6",
-  "modified": "2024-03-11T18:31:09Z",
+  "modified": "2024-12-12T15:31:05Z",
   "published": "2024-03-11T18:31:09Z",
   "aliases": [
     "CVE-2024-26619"
   ],
   "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nriscv: Fix module loading free order\n\nReverse order of kfree calls to resolve use-after-free error.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2024-03-11T18:15:19Z"

advisories/unreviewed/2024/09/GHSA-56gf-j26c-43xh/GHSA-56gf-j26c-43xh.json

@@ -26,6 +26,7 @@
   ],
   "database_specific": {
     "cwe_ids": [
+      "CWE-59",
       "CWE-61"
     ],
     "severity": "HIGH",

advisories/unreviewed/2024/12/GHSA-224h-vf26-wvfw/GHSA-224h-vf26-wvfw.json

@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-224h-vf26-wvfw",
+  "modified": "2024-12-12T15:31:08Z",
+  "published": "2024-12-12T15:31:08Z",
+  "aliases": [
+    "CVE-2024-28143"
+  ],
+  "details": "The password change function at /cgi/admin.cgi does not require the current/old password, which makes the application vulnerable to account takeover. An attacker can use this to forcefully set a new password within the -rsetpass+-aaction+- parameter for a user without knowing the old password, e.g. by exploiting a CSRF issue.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-28143"
+    },
+    {
+      "type": "WEB",
+      "url": "https://r.sec-consult.com/imageaccess"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.imageaccess.de/?page=SupportPortal&lang=en"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-620"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-12T14:15:22Z"
+  }
+}

advisories/unreviewed/2024/12/GHSA-2gf6-qx54-c8vp/GHSA-2gf6-qx54-c8vp.json

@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2gf6-qx54-c8vp",
+  "modified": "2024-12-12T15:31:08Z",
+  "published": "2024-12-12T15:31:08Z",
+  "aliases": [
+    "CVE-2024-54119"
+  ],
+  "details": "Cross-process screen stack vulnerability in the UIExtension module\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54119"
+    },
+    {
+      "type": "WEB",
+      "url": "https://consumer.huawei.com/en/support/bulletin/2024/12"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-200"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-12T13:15:11Z"
+  }
+}

advisories/unreviewed/2024/12/GHSA-33rg-9hjg-3559/GHSA-33rg-9hjg-3559.json

@@ -0,0 +1,35 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-33rg-9hjg-3559",
+  "modified": "2024-12-12T15:31:07Z",
+  "published": "2024-12-12T15:31:07Z",
+  "aliases": [
+    "CVE-2024-36498"
+  ],
+  "details": "Due to missing input sanitization, an attacker can perform cross-site-scripting attacks and run arbitrary Javascript in the browser of other users. The \"Edit Disclaimer Text\" function of the configuration menu is vulnerable to stored XSS. Only the users Poweruser and Admin can use this function which is available at the URL\n\n\n\n\n\n\n\n\n\nhttps://$SCANNER/cgi/admin.cgi?-rdisclaimer+-apre\n\nThe stored Javascript payload will be executed every time the ScanWizard is loaded, even in the Kiosk-mode browser. Version 7.40 implemented a fix, but it could be bypassed via URL-encoding the Javascript payload again.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-36498"
+    },
+    {
+      "type": "WEB",
+      "url": "https://r.sec-consult.com/imageaccess"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.imageaccess.de/?page=SupportPortal&lang=en"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-12T13:15:10Z"
+  }
+}

advisories/unreviewed/2024/12/GHSA-355f-hgvp-6hq8/GHSA-355f-hgvp-6hq8.json

@@ -30,7 +30,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-200"
+      "CWE-200",
+      "CWE-732"
     ],
     "severity": "MODERATE",
     "github_reviewed": false,

advisories/unreviewed/2024/12/GHSA-3cfg-p79p-hp56/GHSA-3cfg-p79p-hp56.json

@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3cfg-p79p-hp56",
+  "modified": "2024-12-12T15:31:09Z",
+  "published": "2024-12-12T15:31:09Z",
+  "aliases": [
+    "CVE-2024-54842"
+  ],
+  "details": "A SQL injection vulnerability was found in phpgurukul Online Nurse Hiring System v1.0 in /admin/password-recovery.php via the mobileno parameter.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54842"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/achchhelalchauhan/phpgurukul/blob/main/SQL%20injection%20ONHP-forgetpass-mobileno.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-12T15:15:17Z"
+  }
+}

advisories/unreviewed/2024/12/GHSA-3hpg-wc2r-h2qx/GHSA-3hpg-wc2r-h2qx.json

@@ -25,7 +25,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-787"
+    ],
     "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,

advisories/unreviewed/2024/12/GHSA-4g5g-f23m-c94v/GHSA-4g5g-f23m-c94v.json

@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4g5g-f23m-c94v",
+  "modified": "2024-12-12T15:31:08Z",
+  "published": "2024-12-12T15:31:08Z",
+  "aliases": [
+    "CVE-2024-54122"
+  ],
+  "details": "Concurrent variable access vulnerability in the ability module\nImpact: Successful exploitation of this vulnerability may affect availability.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54122"
+    },
+    {
+      "type": "WEB",
+      "url": "https://consumer.huawei.com/en/support/bulletin/2024/12"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-362"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-12T13:15:11Z"
+  }
+}