netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-08-01 18:34:22 +00:00
parent 694de744d0
commit 9bc253ac8f
37 changed files with 652 additions and 70 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/03/GHSA-3q4w-x69r-v77m/GHSA-3q4w-x69r-v77m.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3q4w-x69r-v77m",
"modified": "2024-03-29T15:30:32Z",
"modified": "2024-08-01T18:32:49Z",
"published": "2024-03-29T15:30:32Z",
"aliases": [
"CVE-2024-30638"
],
"details": "Tenda F1202 v1.2.0.20(408) has a stack overflow vulnerability via the entrys parameter in the fromAddressNat function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-29T14:15:14Z"
advisories/unreviewed/2024/03/GHSA-7hr8-mwm4-3323/GHSA-7hr8-mwm4-3323.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7hr8-mwm4-3323",
"modified": "2024-03-29T15:30:32Z",
"modified": "2024-08-01T18:32:49Z",
"published": "2024-03-29T15:30:32Z",
"aliases": [
"CVE-2024-28405"
],
"details": "SEMCMS 4.8 is vulnerable to Incorrect Access Control. The code installs SEMCMS_Funtion.php before checking if the admin is a valid user in the admin page because authentication function is called from there, users gain admin privileges.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-29T15:15:11Z"
advisories/unreviewed/2024/03/GHSA-7rfv-m2fm-w83c/GHSA-7rfv-m2fm-w83c.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7rfv-m2fm-w83c",
"modified": "2024-03-28T15:30:34Z",
"modified": "2024-08-01T18:32:49Z",
"published": "2024-03-28T15:30:34Z",
"aliases": [
"CVE-2024-30612"
],
"details": "Tenda AC10U v15.03.06.48 has a stack overflow vulnerability in the deviceId, limitSpeed, limitSpeedUp parameter from formSetClientState function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T15:15:46Z"
advisories/unreviewed/2024/03/GHSA-7w53-4qwf-wfw9/GHSA-7w53-4qwf-wfw9.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7w53-4qwf-wfw9",
"modified": "2024-03-28T15:30:33Z",
"modified": "2024-08-01T18:32:48Z",
"published": "2024-03-28T15:30:33Z",
"aliases": [
"CVE-2024-30588"
],
"details": "Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the schedStartTime parameter of the setSchedWifi function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T14:15:15Z"
advisories/unreviewed/2024/03/GHSA-8j8v-w647-795g/GHSA-8j8v-w647-795g.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8j8v-w647-795g",
"modified": "2024-03-29T15:30:28Z",
"modified": "2024-08-01T18:32:49Z",
"published": "2024-03-29T15:30:28Z",
"aliases": [
"CVE-2024-30613"
],
"details": "Tenda AC15 v15.03.05.18 has a stack overflow vulnerability in the time parameter from the setSmartPowerManagement function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-29T13:15:15Z"
advisories/unreviewed/2024/03/GHSA-fh7f-4794-fgr3/GHSA-fh7f-4794-fgr3.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-922"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/03/GHSA-vpm2-jf87-f6fp/GHSA-vpm2-jf87-f6fp.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vpm2-jf87-f6fp",
"modified": "2024-03-29T00:30:34Z",
"modified": "2024-08-01T18:32:49Z",
"published": "2024-03-29T00:30:34Z",
"aliases": [
"CVE-2024-24407"
],
"details": "SQL Injection vulnerability in Best Courier management system v.1.0 allows a remote attacker to obtain sensitive information via print_pdets.php component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T23:15:46Z"
advisories/unreviewed/2024/03/GHSA-wrf8-rqf2-f8rc/GHSA-wrf8-rqf2-f8rc.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wrf8-rqf2-f8rc",
"modified": "2024-03-28T03:30:59Z",
"modified": "2024-08-01T18:32:48Z",
"published": "2024-03-28T03:30:59Z",
"aliases": [
"CVE-2024-28011"
],
"details": "Hidden Functionality vulnerability in NEC Corporation Aterm WG1800HP4, WG1200HS3, WG1900HP2, WG1200HP3, WG1800HP3, WG1200HS2, WG1900HP, WG1200HP2, W1200EX(-MS), WG1200HS, WG1200HP, WF300HP2, W300P, WF800HP, WR8165N, WG2200HP, WF1200HP2, WG1800HP2, WF1200HP, WG600HP, WG300HP, WF300HP, WG1800HP, WG1400HP, WR8175N, WR9300N, WR8750N, WR8160N, WR9500N, WR8600N, WR8370N, WR8170N, WR8700N, WR8300N, WR8150N, WR4100N, WR4500N, WR8100N, WR8500N, CR2500P, WR8400N, WR8200N, WR1200H, WR7870S, WR6670S, WR7850S, WR6650S, WR6600H, WR7800H, WM3400RN, WM3450RN, WM3500R, WM3600R, WM3800R, WR8166N, MR01LN and MR02LN all versions allows a attacker to execute an arbitrary OS command with the root privilege via the internet",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
"CWE-912"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T01:15:47Z"
advisories/unreviewed/2024/03/GHSA-xrjx-pr69-2frv/GHSA-xrjx-pr69-2frv.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xrjx-pr69-2frv",
"modified": "2024-03-29T15:30:31Z",
"modified": "2024-08-01T18:32:49Z",
"published": "2024-03-29T15:30:31Z",
"aliases": [
"CVE-2024-30631"
],
"details": "Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the schedStartTime parameter from setSchedWifi function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-29T13:15:16Z"
advisories/unreviewed/2024/04/GHSA-jqcx-vw98-5q84/GHSA-jqcx-vw98-5q84.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jqcx-vw98-5q84",
"modified": "2024-04-03T03:30:30Z",
"modified": "2024-08-01T18:32:49Z",
"published": "2024-04-03T03:30:30Z",
"aliases": [
"CVE-2024-30166"
],
"details": "In Mbed TLS 3.3.0 through 3.5.2 before 3.6.0, a malicious client can cause information disclosure or a denial of service because of a stack buffer over-read (of less than 256 bytes) in a TLS 1.3 server via a TLS 3.1 ClientHello.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-03T03:15:10Z"
advisories/unreviewed/2024/04/GHSA-v67q-hfx9-pxhf/GHSA-v67q-hfx9-pxhf.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v67q-hfx9-pxhf",
"modified": "2024-04-01T03:30:39Z",
"modified": "2024-08-01T18:32:49Z",
"published": "2024-04-01T03:30:39Z",
"aliases": [
"CVE-2024-20039"
],
"details": "In modem protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01240012; Issue ID: MSV-1215.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-01T03:15:07Z"
advisories/unreviewed/2024/05/GHSA-8mqg-fwg4-6pjh/GHSA-8mqg-fwg4-6pjh.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-285"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/05/GHSA-hxv9-64g4-jhvj/GHSA-hxv9-64g4-jhvj.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hxv9-64g4-jhvj",
"modified": "2024-05-15T18:30:36Z",
"modified": "2024-08-01T18:32:49Z",
"published": "2024-05-15T18:30:36Z",
"aliases": [
"CVE-2024-3182"
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/06/GHSA-9x7p-g38x-wwhv/GHSA-9x7p-g38x-wwhv.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9x7p-g38x-wwhv",
"modified": "2024-06-29T06:31:41Z",
"modified": "2024-08-01T18:32:49Z",
"published": "2024-06-29T06:31:41Z",
"aliases": [
"CVE-2024-6265"
@@ -36,7 +36,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2024/06/GHSA-m59m-p56m-7mgm/GHSA-m59m-p56m-7mgm.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m59m-p56m-7mgm",
"modified": "2024-06-29T06:31:41Z",
"modified": "2024-08-01T18:32:50Z",
"published": "2024-06-29T06:31:41Z",
"aliases": [
"CVE-2024-5889"
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/06/GHSA-m8p4-qc4v-39j2/GHSA-m8p4-qc4v-39j2.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m8p4-qc4v-39j2",
"modified": "2024-06-29T06:31:41Z",
"modified": "2024-08-01T18:32:49Z",
"published": "2024-06-29T06:31:41Z",
"aliases": [
"CVE-2024-5192"
@@ -40,7 +40,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/06/GHSA-p6r8-m6x2-9c74/GHSA-p6r8-m6x2-9c74.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p6r8-m6x2-9c74",
"modified": "2024-06-29T09:30:56Z",
"modified": "2024-08-01T18:32:49Z",
"published": "2024-06-29T09:30:56Z",
"aliases": [
"CVE-2024-5666"
@@ -40,7 +40,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/06/GHSA-rp9c-j467-r9xv/GHSA-rp9c-j467-r9xv.json
+1 -1
View File
@@ -36,7 +36,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/06/GHSA-rv9m-cr53-rp67/GHSA-rv9m-cr53-rp67.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rv9m-cr53-rp67",
"modified": "2024-06-29T09:30:56Z",
"modified": "2024-08-01T18:32:50Z",
"published": "2024-06-29T09:30:56Z",
"aliases": [
"CVE-2024-5790"
@@ -40,7 +40,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/07/GHSA-2r3p-m9qp-p35m/GHSA-2r3p-m9qp-p35m.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2r3p-m9qp-p35m",
"modified": "2024-07-26T18:30:37Z",
"modified": "2024-08-01T18:32:50Z",
"published": "2024-07-26T18:30:37Z",
"aliases": [
"CVE-2024-26520"
],
"details": "An issue in Hangzhou Xiongwei Technology Development Co., Ltd. Restaurant Digital Comprehensive Management platform v1 allows an attacker to bypass authentication and perform arbitrary password resets.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-620"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-26T17:15:11Z"

Some files were not shown because too many files have changed in this diff Show More