netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-7jjr-3r8r-9pcf
GHSA-rcmj-xp8f-f6q4
GHSA-w7x2-57f7-3p3x
This commit is contained in:
advisory-database[bot]
2024-11-18 20:57:37 +00:00
parent 2784091464
commit 96cf175f97
3 changed files with 36 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2022/05/GHSA-7jjr-3r8r-9pcf/GHSA-7jjr-3r8r-9pcf.json
+14 -3
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7jjr-3r8r-9pcf",
"modified": "2024-04-29T14:34:20Z",
"modified": "2024-11-18T20:55:12Z",
"published": "2022-05-01T17:53:20Z",
"aliases": [
"CVE-2007-1406"
@@ -9,7 +9,14 @@
"summary": "Trac missing Content-Disposition HTTP header",
"details": "Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain \"unsafe\" situations, which has unknown impact and remote attack vectors.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N"
}
],
"affected": [
{
@@ -37,6 +44,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2007-1406"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/trac/PYSEC-2007-3.yaml"
},
{
"type": "WEB",
"url": "http://trac.edgewall.org/wiki/ChangeLog"
@@ -46,7 +57,7 @@
"cwe_ids": [
],
"severity": "HIGH",
"severity": "MODERATE",
"github_reviewed": true,
"github_reviewed_at": "2024-04-29T14:34:20Z",
"nvd_published_at": "2007-03-10T22:19:00Z"
advisories/github-reviewed/2022/05/GHSA-rcmj-xp8f-f6q4/GHSA-rcmj-xp8f-f6q4.json
+9 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rcmj-xp8f-f6q4",
"modified": "2024-04-22T18:59:28Z",
"modified": "2024-11-18T20:57:04Z",
"published": "2022-05-01T23:55:06Z",
"aliases": [
"CVE-2008-2951"
@@ -12,6 +12,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N"
}
],
"affected": [
@@ -44,6 +48,10 @@
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44043"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/trac/PYSEC-2008-4.yaml"
},
{
"type": "WEB",
"url": "https://www.redhat.com/archives/fedora-package-announce/2008-July/msg01261.html"
advisories/github-reviewed/2022/05/GHSA-w7x2-57f7-3p3x/GHSA-w7x2-57f7-3p3x.json
+13 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w7x2-57f7-3p3x",
"modified": "2024-04-29T14:35:18Z",
"modified": "2024-11-18T20:56:03Z",
"published": "2022-05-01T17:53:21Z",
"aliases": [
"CVE-2007-1405"
@@ -9,7 +9,14 @@
"summary": "Trac Cross-site Scripting (XSS) vulnerability",
"details": "Cross-site scripting (XSS) vulnerability in the \"download wiki page as text\" feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N"
}
],
"affected": [
{
@@ -41,6 +48,10 @@
"type": "WEB",
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32897"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/trac/PYSEC-2007-2.yaml"
},
{
"type": "WEB",
"url": "https://web.archive.org/web/20080801205940/http://secunia.com/advisories/24470"