diff --git a/advisories/github-reviewed/2021/03/GHSA-mrvj-7q4f-5p42/GHSA-mrvj-7q4f-5p42.json b/advisories/github-reviewed/2021/03/GHSA-mrvj-7q4f-5p42/GHSA-mrvj-7q4f-5p42.json index 73125b3414c..0bfd959c8df 100644 --- a/advisories/github-reviewed/2021/03/GHSA-mrvj-7q4f-5p42/GHSA-mrvj-7q4f-5p42.json +++ b/advisories/github-reviewed/2021/03/GHSA-mrvj-7q4f-5p42/GHSA-mrvj-7q4f-5p42.json @@ -3,14 +3,10 @@ "id": "GHSA-mrvj-7q4f-5p42", "modified": "2021-03-19T19:56:16Z", "published": "2021-03-19T19:56:42Z", - "aliases": [ - - ], + "aliases": [], "summary": "Cross-site scripting in eZ Platform Kernel", "details": "### Impact\nIn file upload it is possible by certain means to upload files like .html and .js. These may contain XSS exploits which will be run when links to them are accessed by victims.\n\n### Patches\nThe fix consists simply of adding common types of scriptable file types to the configuration of the already existing filetype blacklist feature. See \"Patched versions\". As such, this can also be done manually, without installing the patched versions. This may be relevant if you are currently running a considerably older version of the kernel package and don't want to upgrade it at this time. Please see the settting \"ezsettings.default.io.file_storage.file_type_blacklist\" at:\nhttps://github.com/ezsystems/ezplatform-kernel/blob/master/eZ/Bundle/EzPublishCoreBundle/Resources/config/default_settings.yml#L109\n\n### Important note\nYou should adapt this setting to your needs. Do not add file types to the blacklist that you actually need to be able to upload. For instance, if you need your editors to be able to upload SVG files, then don't blacklist that. Instead, you could e.g. use an approval workflow for such content.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2021/03/GHSA-v662-xpcc-9xf6/GHSA-v662-xpcc-9xf6.json b/advisories/github-reviewed/2021/03/GHSA-v662-xpcc-9xf6/GHSA-v662-xpcc-9xf6.json index cc25f5742a7..a4d39d278f3 100644 --- a/advisories/github-reviewed/2021/03/GHSA-v662-xpcc-9xf6/GHSA-v662-xpcc-9xf6.json +++ b/advisories/github-reviewed/2021/03/GHSA-v662-xpcc-9xf6/GHSA-v662-xpcc-9xf6.json @@ -8,9 +8,7 @@ ], "summary": "It's possible to execute anything with the rights of the author of a macro which uses the {{wikimacrocontent}} macro", "details": "### Impact\n\nThe `{{wikimacrocontent}}` executes the content with the rights of the wiki macro author instead of the caller of that wiki macro. This makes possible to inject scripts through it and they will be executed with the rights of the wiki macro (very often a user which has Programming rights).\n\nFortunately, no such macro exists by default in XWiki Standard but one could have been created or installed with an extension.\n\n### Patches\n\nIt has been patched in versions XWiki 12.6.3, 11.10.11 and 12.8-rc-1.\n\n### Workarounds\n\nThere is no easy workaround other than disabling the affected macros.\nInserting content in a safe way or knowing what is the user who called the wiki macro is not easy.\n\n### References\n\nhttps://jira.xwiki.org/browse/XWIKI-17759\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n* Open an issue in [Jira XWiki](https://jira.xwiki.org)\n* Email us at [our security mailing list](mailto:security@xwiki.org)", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2021/03/GHSA-vgwr-773q-7j3c/GHSA-vgwr-773q-7j3c.json b/advisories/github-reviewed/2021/03/GHSA-vgwr-773q-7j3c/GHSA-vgwr-773q-7j3c.json index 6305a556f48..bef5a5c75a6 100644 --- a/advisories/github-reviewed/2021/03/GHSA-vgwr-773q-7j3c/GHSA-vgwr-773q-7j3c.json +++ b/advisories/github-reviewed/2021/03/GHSA-vgwr-773q-7j3c/GHSA-vgwr-773q-7j3c.json @@ -8,9 +8,7 @@ ], "summary": "Path Traversal within joomla/archive zip class", "details": "An issue was discovered in Joomla! 3.0.0 through 3.9.24. Extracting an specifilcy crafted zip package could write files outside of the intended path.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2021/03/GHSA-xgpf-p52j-pf7m/GHSA-xgpf-p52j-pf7m.json b/advisories/github-reviewed/2021/03/GHSA-xgpf-p52j-pf7m/GHSA-xgpf-p52j-pf7m.json index 119ee90aa6c..72ab09a03ad 100644 --- a/advisories/github-reviewed/2021/03/GHSA-xgpf-p52j-pf7m/GHSA-xgpf-p52j-pf7m.json +++ b/advisories/github-reviewed/2021/03/GHSA-xgpf-p52j-pf7m/GHSA-xgpf-p52j-pf7m.json @@ -8,9 +8,7 @@ ], "summary": "XSS in CreateQueuedJobTask", "details": "A vulnerability has been identified in the Silverstripe CMS 3 and 4 version of the symbiote/silverstripe-queuedjobs module. A Cross Site Scripting vulnerability allows an attacker to inject an arbitrary payload in the CreateQueuedJobTask dev task via a specially crafted URL.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2021/04/GHSA-fxq4-r6mr-9x64/GHSA-fxq4-r6mr-9x64.json b/advisories/github-reviewed/2021/04/GHSA-fxq4-r6mr-9x64/GHSA-fxq4-r6mr-9x64.json index 3d5d6e360bf..2f4ee5cbeaf 100644 --- a/advisories/github-reviewed/2021/04/GHSA-fxq4-r6mr-9x64/GHSA-fxq4-r6mr-9x64.json +++ b/advisories/github-reviewed/2021/04/GHSA-fxq4-r6mr-9x64/GHSA-fxq4-r6mr-9x64.json @@ -3,14 +3,10 @@ "id": "GHSA-fxq4-r6mr-9x64", "modified": "2021-04-08T16:45:47Z", "published": "2021-04-08T16:46:00Z", - "aliases": [ - - ], + "aliases": [], "summary": "CSRF Vuln can expose user's QRcode", "details": "### Impact\nWhen a user is setting up two-factor authentication using an authenticator app, a QRcode is generated and made available via a GET request to /tf-qrcode. Since GETs do not have any CSRF protection, it is possible a malicious 3rd party could access the QRcode and therefore gain access to two-factor authentication codes. Note that the /tf-qrcode endpoint is ONLY accessible while the user is initially setting up their device. Once setup is complete, there is no vulnerability.\n\n### Patches\nThis is fixed in the upcoming 4.0.0 release.\n\n### Workarounds\nYou can provide your own URL for fetching the QRcode by defining SECURITY_TWO_FACTOR_QRCODE_URL and providing your own implementation (that presumably required a POST with CSRF protection). This would require changing the two-factor setup template as well.\n\n### References\nNone.\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Read this pull request: #423", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2021/04/GHSA-prmc-5v5w-c465/GHSA-prmc-5v5w-c465.json b/advisories/github-reviewed/2021/04/GHSA-prmc-5v5w-c465/GHSA-prmc-5v5w-c465.json index bb7b35be093..bac85b50ae9 100644 --- a/advisories/github-reviewed/2021/04/GHSA-prmc-5v5w-c465/GHSA-prmc-5v5w-c465.json +++ b/advisories/github-reviewed/2021/04/GHSA-prmc-5v5w-c465/GHSA-prmc-5v5w-c465.json @@ -3,14 +3,10 @@ "id": "GHSA-prmc-5v5w-c465", "modified": "2021-03-31T18:09:39Z", "published": "2021-04-06T17:32:38Z", - "aliases": [ - - ], + "aliases": [], "summary": "Client TLS credentials sent raw to server in npm package nats", "details": "Nats is a Node.js client for the NATS messaging system.\n\n## Problem Description\n\n_Preview versions_ of two NPM packages and one Deno package from the NATS project contain an information disclosure flaw, leaking options to the NATS server; for one package, this includes TLS private credentials.\n\nThe _connection_ configuration options in these JavaScript-based implementations were fully serialized and sent to the server in the client's `CONNECT` message, immediately after TLS establishment.\n\nThe nats.js client supports Mutual TLS and the credentials for the TLS client key are included in the connection configuration options; disclosure of the client's TLS private key to the server has been observed.\n\nMost authentication mechanisms are handled after connection, instead of as part of connection, so other authentication mechanisms are unaffected.\nFor clarity: NATS account NKey authentication **is NOT affected**.\n\nNeither the nats.ws nor the nats.deno clients support Mutual TLS: the affected versions listed below are those where the logic flaw is\npresent. We are including the nats.ws and nats.deno versions out of an abundance of caution, as library maintainers, but rate as minimal the likelihood of applications leaking sensitive data.\n\n\n## Affected versions\n\n### Security impact\n\n* NPM package nats.js:\n + **mainline is unaffected**\n + beta branch is vulnerable from 2.0.0-201, fixed in 2.0.0-209\n\n### Logic flaw\n\n* NPM package nats.ws:\n + status: preview\n + flawed from 1.0.0-85, fixed in 1.0.0-111\n\n* Deno repository https://github.com/nats-io/nats.deno\n + status: preview\n + flawed in all git tags prior to fix\n + fixed with git tag v1.0.0-9\n\n\n## Impact\n\nFor deployments using TLS client certificates (for mutual TLS), private key material for TLS is leaked from the client application to the\nserver. If the server is untrusted (run by a third party), or if the client application also disables TLS verification (and so the true identity of the server is unverifiable) then authentication credentials are leaked.\n\n## Workaround\n\n*None*\n\n## Solution\n\nUpgrade your package dependencies to fixed versions, and then reissue any TLS client credentials (with new keys, not just new certificates) and revoke the old ones.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2021/04/GHSA-w3hj-wr2q-x83g/GHSA-w3hj-wr2q-x83g.json b/advisories/github-reviewed/2021/04/GHSA-w3hj-wr2q-x83g/GHSA-w3hj-wr2q-x83g.json index ed2fc902c3e..de31100ca75 100644 --- a/advisories/github-reviewed/2021/04/GHSA-w3hj-wr2q-x83g/GHSA-w3hj-wr2q-x83g.json +++ b/advisories/github-reviewed/2021/04/GHSA-w3hj-wr2q-x83g/GHSA-w3hj-wr2q-x83g.json @@ -3,14 +3,10 @@ "id": "GHSA-w3hj-wr2q-x83g", "modified": "2021-03-30T17:04:34Z", "published": "2021-04-06T17:22:17Z", - "aliases": [ - - ], + "aliases": [], "summary": "Discovery uses the same AES/GCM Nonce throughout the session", "details": "Discovery uses the same AES/GCM Nonce throughout the session though it should be generated on per message basis which can lead to the leaking of the session key. As the actual ENR record is signed with a different key it is not possible for an attacker to alter the ENR record. Note that the node private key is not compromised, only the session key generated to communicate with an individual peer.\n\nFrom [discovery spec](https://github.com/ethereum/devp2p/blob/f97b8a5b8e9589d3355ebbd9d4a58d5d1644bdf7/discv5/discv5-theory.md#session-cache):\n> The number of messages which can be encrypted with a certain session key is limited because encryption of each message requires a unique nonce for AES-GCM. In addition to the keys, the session cache must also keep track of the count of outgoing messages to ensure the uniqueness of nonce values. Since the wire protocol uses 96 bit AES-GCM nonces, it is strongly recommended to generate them by encoding the current outgoing message count into the first 32 bits of the nonce and filling the remaining 64 bits with random data generated by a cryptographically secure random number generator.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/01/GHSA-cwfw-4gq5-mrqx/GHSA-cwfw-4gq5-mrqx.json b/advisories/github-reviewed/2022/01/GHSA-cwfw-4gq5-mrqx/GHSA-cwfw-4gq5-mrqx.json index 9192d075857..50ea06574a0 100644 --- a/advisories/github-reviewed/2022/01/GHSA-cwfw-4gq5-mrqx/GHSA-cwfw-4gq5-mrqx.json +++ b/advisories/github-reviewed/2022/01/GHSA-cwfw-4gq5-mrqx/GHSA-cwfw-4gq5-mrqx.json @@ -8,9 +8,7 @@ ], "summary": "Regular Expression Denial of Service (ReDoS) in braces", "details": "A vulnerability was found in Braces versions prior to 2.3.1. Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) attacks.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/01/GHSA-qpw2-xchm-655q/GHSA-qpw2-xchm-655q.json b/advisories/github-reviewed/2022/01/GHSA-qpw2-xchm-655q/GHSA-qpw2-xchm-655q.json index 64bfeb8871b..34ce6d58f21 100644 --- a/advisories/github-reviewed/2022/01/GHSA-qpw2-xchm-655q/GHSA-qpw2-xchm-655q.json +++ b/advisories/github-reviewed/2022/01/GHSA-qpw2-xchm-655q/GHSA-qpw2-xchm-655q.json @@ -4,9 +4,7 @@ "modified": "2021-05-04T20:42:24Z", "published": "2022-01-06T20:31:01Z", "withdrawn": "2021-03-19T20:58:21Z", - "aliases": [ - - ], + "aliases": [], "summary": "Out-of-Bounds read in stringstream", "details": "Versions less than 0.0.6 of the Node.js stringstream module are vulnerable to an out-of-bounds read because of allocation of uninitialized buffers when a number is passed in the input stream (when using Node.js 4.x).\n\n# WITHDRAWN\n\nThis is a duplicate of GHSA-mf6x-7mm4-x2g7", "severity": [ diff --git a/advisories/github-reviewed/2022/02/GHSA-h87q-g2wp-47pj/GHSA-h87q-g2wp-47pj.json b/advisories/github-reviewed/2022/02/GHSA-h87q-g2wp-47pj/GHSA-h87q-g2wp-47pj.json index 74240688b51..3317febedff 100644 --- a/advisories/github-reviewed/2022/02/GHSA-h87q-g2wp-47pj/GHSA-h87q-g2wp-47pj.json +++ b/advisories/github-reviewed/2022/02/GHSA-h87q-g2wp-47pj/GHSA-h87q-g2wp-47pj.json @@ -3,14 +3,10 @@ "id": "GHSA-h87q-g2wp-47pj", "modified": "2022-02-15T01:51:57Z", "published": "2022-02-09T22:41:19Z", - "aliases": [ - - ], + "aliases": [], "summary": "Signatures are mistakenly recognized to be valid in jsrsasign", "details": "In the jsrsasign package through 10.1.13 for Node.js, some invalid RSA PKCS#1 v1.5 signatures are mistakenly recognized to be valid. NOTE: there is no known practical attack.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/05/GHSA-5mgj-mvv8-46mw/GHSA-5mgj-mvv8-46mw.json b/advisories/github-reviewed/2022/05/GHSA-5mgj-mvv8-46mw/GHSA-5mgj-mvv8-46mw.json index 225b2980660..cb60a442d4a 100644 --- a/advisories/github-reviewed/2022/05/GHSA-5mgj-mvv8-46mw/GHSA-5mgj-mvv8-46mw.json +++ b/advisories/github-reviewed/2022/05/GHSA-5mgj-mvv8-46mw/GHSA-5mgj-mvv8-46mw.json @@ -8,9 +8,7 @@ ], "summary": "RubyGems does not verify SSL certificate", "details": "RubyGems before 1.8.23 does not verify an SSL certificate, which allows remote attackers to modify a gem during installation via a man-in-the-middle attack.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -79,9 +77,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2023-05-04T21:15:08Z", diff --git a/advisories/github-reviewed/2022/05/GHSA-8c56-v25w-f89c/GHSA-8c56-v25w-f89c.json b/advisories/github-reviewed/2022/05/GHSA-8c56-v25w-f89c/GHSA-8c56-v25w-f89c.json index 54a4729967a..3a44e5dbb36 100644 --- a/advisories/github-reviewed/2022/05/GHSA-8c56-v25w-f89c/GHSA-8c56-v25w-f89c.json +++ b/advisories/github-reviewed/2022/05/GHSA-8c56-v25w-f89c/GHSA-8c56-v25w-f89c.json @@ -8,9 +8,7 @@ ], "summary": "Puppet arbitrary file overwrite", "details": "Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to overwrite arbitrary files via a symlink attack on the .k5login file.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/05/GHSA-8r7x-qq55-74v2/GHSA-8r7x-qq55-74v2.json b/advisories/github-reviewed/2022/05/GHSA-8r7x-qq55-74v2/GHSA-8r7x-qq55-74v2.json index 5eec77f2b39..f0b0fc2045d 100644 --- a/advisories/github-reviewed/2022/05/GHSA-8r7x-qq55-74v2/GHSA-8r7x-qq55-74v2.json +++ b/advisories/github-reviewed/2022/05/GHSA-8r7x-qq55-74v2/GHSA-8r7x-qq55-74v2.json @@ -8,9 +8,7 @@ ], "summary": "Moodle does not enforce the forceloginforprofiles setting", "details": "`user/view.php` in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not enforce the `forceloginforprofiles` setting, which allows remote attackers to obtain sensitive course-profile information by leveraging the guest role, as demonstrated by a Google search.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/05/GHSA-f98p-9pp6-7q6c/GHSA-f98p-9pp6-7q6c.json b/advisories/github-reviewed/2022/05/GHSA-f98p-9pp6-7q6c/GHSA-f98p-9pp6-7q6c.json index e36eb673ebe..2cadf2f39fb 100644 --- a/advisories/github-reviewed/2022/05/GHSA-f98p-9pp6-7q6c/GHSA-f98p-9pp6-7q6c.json +++ b/advisories/github-reviewed/2022/05/GHSA-f98p-9pp6-7q6c/GHSA-f98p-9pp6-7q6c.json @@ -8,9 +8,7 @@ ], "summary": "Apache Tomcat Cross-site scripting (XSS) vulnerability", "details": "Cross-site scripting (XSS) vulnerability in Apache Tomcat 5.5.9 through 5.5.26 and 6.0.0 through 6.0.16 allows remote attackers to inject arbitrary web script or HTML via the name parameter (aka the hostname attribute) to `host-manager/html/add`.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/05/GHSA-g5c6-w479-93xm/GHSA-g5c6-w479-93xm.json b/advisories/github-reviewed/2022/05/GHSA-g5c6-w479-93xm/GHSA-g5c6-w479-93xm.json index 99698a9ca46..888766b17ac 100644 --- a/advisories/github-reviewed/2022/05/GHSA-g5c6-w479-93xm/GHSA-g5c6-w479-93xm.json +++ b/advisories/github-reviewed/2022/05/GHSA-g5c6-w479-93xm/GHSA-g5c6-w479-93xm.json @@ -8,9 +8,7 @@ ], "summary": "Mono ASP.NET View State Cross-Site Scripting (XSS) vulnerability", "details": "The default configuration of ASP.NET in Mono before 2.6.4 has a value of FALSE for the EnableViewStateMac property, which allows remote attackers to conduct cross-site scripting (XSS) attacks, as demonstrated by the __VIEWSTATE parameter to 2.0/menu/menu1.aspx in the XSP sample project.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/05/GHSA-mpmx-gm5v-q789/GHSA-mpmx-gm5v-q789.json b/advisories/github-reviewed/2022/05/GHSA-mpmx-gm5v-q789/GHSA-mpmx-gm5v-q789.json index 7eb2427c5ea..74486249b15 100644 --- a/advisories/github-reviewed/2022/05/GHSA-mpmx-gm5v-q789/GHSA-mpmx-gm5v-q789.json +++ b/advisories/github-reviewed/2022/05/GHSA-mpmx-gm5v-q789/GHSA-mpmx-gm5v-q789.json @@ -8,9 +8,7 @@ ], "summary": "Puppet uses predictable filenames, allowing arbitrary file overwrite", "details": "Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x, when running in `--edit` mode, uses a predictable file name, which allows local users to run arbitrary Puppet code or trick a user into editing arbitrary files.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/05/GHSA-pchf-755w-jj6v/GHSA-pchf-755w-jj6v.json b/advisories/github-reviewed/2022/05/GHSA-pchf-755w-jj6v/GHSA-pchf-755w-jj6v.json index 1523a3ac72a..9d970a4e6a1 100644 --- a/advisories/github-reviewed/2022/05/GHSA-pchf-755w-jj6v/GHSA-pchf-755w-jj6v.json +++ b/advisories/github-reviewed/2022/05/GHSA-pchf-755w-jj6v/GHSA-pchf-755w-jj6v.json @@ -8,9 +8,7 @@ ], "summary": "QooxDoo XSS in Callback Parameter", "details": "Cross-site scripting (XSS) vulnerability in `framework/source/resource/qx/test/jsonp_primitive.php` in QooxDoo 1.3 and possibly other versions, as used in eyeOS 2.2 and 2.3, and possibly other products allows remote attackers to inject arbitrary web script or HTML via the callback parameter.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/05/GHSA-qh3g-27jf-3j54/GHSA-qh3g-27jf-3j54.json b/advisories/github-reviewed/2022/05/GHSA-qh3g-27jf-3j54/GHSA-qh3g-27jf-3j54.json index 3da9ed87e4e..38e674b02a1 100644 --- a/advisories/github-reviewed/2022/05/GHSA-qh3g-27jf-3j54/GHSA-qh3g-27jf-3j54.json +++ b/advisories/github-reviewed/2022/05/GHSA-qh3g-27jf-3j54/GHSA-qh3g-27jf-3j54.json @@ -8,9 +8,7 @@ ], "summary": "Puppet allows local users to modify the permissions of arbitrary files", "details": "Puppet 2.7.x before 2.7.5, 2.6.x before 2.6.11, and 0.25.x allows local users to modify the permissions of arbitrary files via a symlink attack on the SSH authorized_keys file.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/05/GHSA-rp8h-vr48-4j8p/GHSA-rp8h-vr48-4j8p.json b/advisories/github-reviewed/2022/05/GHSA-rp8h-vr48-4j8p/GHSA-rp8h-vr48-4j8p.json index 9ba8b9010d7..e7482ca109d 100644 --- a/advisories/github-reviewed/2022/05/GHSA-rp8h-vr48-4j8p/GHSA-rp8h-vr48-4j8p.json +++ b/advisories/github-reviewed/2022/05/GHSA-rp8h-vr48-4j8p/GHSA-rp8h-vr48-4j8p.json @@ -8,9 +8,7 @@ ], "summary": "Apache Tomcat Exposes IP Addresses and HTTP Headers of Requests", "details": "Apache Tomcat 6.0.30 through 6.0.33 and 7.x before 7.0.22 does not properly perform certain caching and recycling operations involving request objects, which allows remote attackers to obtain unintended read access to IP address and HTTP header information in opportunistic circumstances by reading TCP data.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/05/GHSA-x337-43mr-gg3h/GHSA-x337-43mr-gg3h.json b/advisories/github-reviewed/2022/05/GHSA-x337-43mr-gg3h/GHSA-x337-43mr-gg3h.json index ff9e3e4cebe..b04f5a38d5e 100644 --- a/advisories/github-reviewed/2022/05/GHSA-x337-43mr-gg3h/GHSA-x337-43mr-gg3h.json +++ b/advisories/github-reviewed/2022/05/GHSA-x337-43mr-gg3h/GHSA-x337-43mr-gg3h.json @@ -8,9 +8,7 @@ ], "summary": "Ignite Realtime Openfire allows remote authenticated users to cause a denial of service", "details": "ConnectionManagerImpl.java in Ignite Realtime Openfire 3.4.5 allows remote authenticated users to cause a denial of service (daemon outage) by triggering large outgoing queues without reading messages.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -102,9 +100,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-02-16T17:36:27Z", diff --git a/advisories/github-reviewed/2022/05/GHSA-xmwv-mqh8-4xgw/GHSA-xmwv-mqh8-4xgw.json b/advisories/github-reviewed/2022/05/GHSA-xmwv-mqh8-4xgw/GHSA-xmwv-mqh8-4xgw.json index df3905e4e42..f1b976e60c0 100644 --- a/advisories/github-reviewed/2022/05/GHSA-xmwv-mqh8-4xgw/GHSA-xmwv-mqh8-4xgw.json +++ b/advisories/github-reviewed/2022/05/GHSA-xmwv-mqh8-4xgw/GHSA-xmwv-mqh8-4xgw.json @@ -8,9 +8,7 @@ ], "summary": "Moodle allows remote attackers to read arbitrary files", "details": "mod/lti/service.php in Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/06/GHSA-28p5-7rg4-8v99/GHSA-28p5-7rg4-8v99.json b/advisories/github-reviewed/2022/06/GHSA-28p5-7rg4-8v99/GHSA-28p5-7rg4-8v99.json index d89aa713764..2ce98efd484 100644 --- a/advisories/github-reviewed/2022/06/GHSA-28p5-7rg4-8v99/GHSA-28p5-7rg4-8v99.json +++ b/advisories/github-reviewed/2022/06/GHSA-28p5-7rg4-8v99/GHSA-28p5-7rg4-8v99.json @@ -3,14 +3,10 @@ "id": "GHSA-28p5-7rg4-8v99", "modified": "2023-06-13T17:33:19Z", "published": "2022-06-16T23:59:12Z", - "aliases": [ - - ], + "aliases": [], "summary": "Reading on uninitialized buffer may cause UB ( `gfx_auxil::read_spirv()` )", "details": "Affected versions of this crate passes an uninitialized buffer to a user-provided `Read` implementation.\nArbitrary `Read` implementations can read from the uninitialized buffer (memory exposure) and also can return incorrect number of bytes written to the buffer.\nReading from uninitialized memory produces undefined values that can quickly invoke undefined behavior.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-16T23:59:12Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-3hxh-7jxm-59x4/GHSA-3hxh-7jxm-59x4.json b/advisories/github-reviewed/2022/06/GHSA-3hxh-7jxm-59x4/GHSA-3hxh-7jxm-59x4.json index ec235d4bc7f..000b3b74ffd 100644 --- a/advisories/github-reviewed/2022/06/GHSA-3hxh-7jxm-59x4/GHSA-3hxh-7jxm-59x4.json +++ b/advisories/github-reviewed/2022/06/GHSA-3hxh-7jxm-59x4/GHSA-3hxh-7jxm-59x4.json @@ -3,14 +3,10 @@ "id": "GHSA-3hxh-7jxm-59x4", "modified": "2022-06-17T00:13:03Z", "published": "2022-06-17T00:13:03Z", - "aliases": [ - - ], + "aliases": [], "summary": "AtomicBucket unconditionally implements Send/Sync", "details": "In the affected versions of the crate, `AtomicBucket` unconditionally implements `Send`/`Sync` traits. Therefore, users can create a data race to the inner\n`T: !Sync` by using the `AtomicBucket::data_with()` API.\nSuch data races can potentially cause memory corruption or other undefined behavior.\n\nThe flaw was fixed in commit 8e6daab by adding appropriate Send/Sync bounds to the Send/Sync impl of struct `Block` (which is a data type contained inside `AtomicBucket`).\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2022-06-17T00:13:03Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-3m6f-3gfg-4x56/GHSA-3m6f-3gfg-4x56.json b/advisories/github-reviewed/2022/06/GHSA-3m6f-3gfg-4x56/GHSA-3m6f-3gfg-4x56.json index e14f3126bc1..6a81979d83c 100644 --- a/advisories/github-reviewed/2022/06/GHSA-3m6f-3gfg-4x56/GHSA-3m6f-3gfg-4x56.json +++ b/advisories/github-reviewed/2022/06/GHSA-3m6f-3gfg-4x56/GHSA-3m6f-3gfg-4x56.json @@ -3,14 +3,10 @@ "id": "GHSA-3m6f-3gfg-4x56", "modified": "2022-06-17T00:19:49Z", "published": "2022-06-17T00:19:49Z", - "aliases": [ - - ], + "aliases": [], "summary": "Panic on incorrect date input to `simple_asn1`", "details": "Version 0.6.0 of the `simple_asn1` crate panics on certain malformed\ninputs to its parsing functions, including `from_der` and `der_decode`.\nBecause this crate is frequently used with inputs from the network, this\nshould be considered a security vulnerability.\n\nThe issue occurs when parsing the old ASN.1 \"UTCTime\" time format. If an\nattacker provides a UTCTime where the first character is ASCII but the\nsecond character is above 0x7f, a string slice operation in the\n`from_der_` function will try to slice into the middle of a UTF-8\ncharacter, and cause a panic.\n\nThis error was introduced in commit\n[`d7d39d709577710e9dc8`](https://github.com/acw/simple_asn1/commit/d7d39d709577710e9dc8833ee57d200eef366db8),\nwhich updated `simple_asn1` to use `time` instead of `chrono` because of\n[`RUSTSEC-2020-159`](https://rustsec.org/advisories/RUSTSEC-2020-0159).\nVersions of `simple_asn1` before 0.6.0 are not affected by this issue.\n\nThe [patch](https://github.com/acw/simple_asn1/pull/28) was applied in\n`simple_asn1` version 0.6.1.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -54,9 +50,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2022-06-17T00:19:49Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-3pp4-64mp-9cg9/GHSA-3pp4-64mp-9cg9.json b/advisories/github-reviewed/2022/06/GHSA-3pp4-64mp-9cg9/GHSA-3pp4-64mp-9cg9.json index c96f828a042..d56d8fadf2b 100644 --- a/advisories/github-reviewed/2022/06/GHSA-3pp4-64mp-9cg9/GHSA-3pp4-64mp-9cg9.json +++ b/advisories/github-reviewed/2022/06/GHSA-3pp4-64mp-9cg9/GHSA-3pp4-64mp-9cg9.json @@ -3,14 +3,10 @@ "id": "GHSA-3pp4-64mp-9cg9", "modified": "2022-06-17T00:27:30Z", "published": "2022-06-17T00:27:30Z", - "aliases": [ - - ], + "aliases": [], "summary": "Memory Safety Issue when using `patch` or `merge` on `state` and assign the result back to `state`", "details": "Affected versions of this crate maintains references to memory that might have been freed already.\nIf affects the following two `tremor-script` language constructs:\n\n* A [Merge](https://www.tremor.rs/docs/tremor-script/index#merge) where we assign the result back to the target expression\n and the expression to be merged needs to reference the `event`:\n\n```\nlet state = merge state of event end;\n```\n\n* A [Patch](https://www.tremor.rs/docs/tremor-script/index#patch) where we assign the result back to the target expression\n and the patch operations used need to reference the `event`:\n\n```\nlet state = patch state of insert event.key => event.value end;\n```\n\nFor constructs like this (it doesnt matter what is references in the expression to be merged or the patch operations) an optimization\nwas applied to manipulate the target value in-place, instead of cloning it.\n\nOur `Value` struct which underpins all event data in `tremor-script`, is representing as borrowed strings `beef::Cow<'lifetime, str>` \nthat reference the actual `Vec` the event is based upon. We keep the raw byte-array next to the event structure inside our `Event` struct as a self-referential struct,\nso we make sure that the structured `Value` and its references are valid across its whole lifetime.\n\nThe optimization was considered safe as long as it was only possible to merge or patche `event` data or static data.\nWhen `state` was introduced to `tremor-script` a new possibility existed, to keep `Value` data around for longer than the lifetime of an event.\nIf `event` data is merged or patched into `state` without cloning `state` first, it can still reference keys or values from\nthe previous event, which will now be invalid. This allows access to those already freed regions of memory and to get their content out over the wire.\n\n\n## Workaround\n\nIf an upgrade is not possible, a possible workaround is to avoid the optimization\nby introducing a temporary variable and not immediately reassigning to `state`:\n\n```\nlet tmp = merge state of event end;\nlet state = tmp\n```\n\n## Fix\n\nThe flaw was corrected in `tremor-script` version 0.11.6 via commit [1a2efcd](https://github.com/tremor-rs/tremor-runtime/commit/1a2efcdbe68e5e7fd0a05836ac32d2cde78a0b2e) by removing the optimization\nand always clone the target expression of a [Merge](https://www.tremor.rs/docs/tremor-script/index#merge) or [Patch](https://www.tremor.rs/docs/tremor-script/index#patch.\n\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-17T00:27:30Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-5j8w-r7g8-5472/GHSA-5j8w-r7g8-5472.json b/advisories/github-reviewed/2022/06/GHSA-5j8w-r7g8-5472/GHSA-5j8w-r7g8-5472.json index c4efdad86d8..12350bec994 100644 --- a/advisories/github-reviewed/2022/06/GHSA-5j8w-r7g8-5472/GHSA-5j8w-r7g8-5472.json +++ b/advisories/github-reviewed/2022/06/GHSA-5j8w-r7g8-5472/GHSA-5j8w-r7g8-5472.json @@ -3,14 +3,10 @@ "id": "GHSA-5j8w-r7g8-5472", "modified": "2022-06-16T23:42:08Z", "published": "2022-06-16T23:42:08Z", - "aliases": [ - - ], + "aliases": [], "summary": "Arrow2 allows double free in `safe` code", "details": "The struct `Ffi_ArrowArray` implements `#derive(Clone)` that is inconsistent with\nits custom implementation of `Drop`, resulting in a double free when cloned.\n\nCloning this struct in `safe` results in a segmentation fault, which is unsound.\n\nThis derive was removed from this struct. All users are advised to either:\n* bump the patch version of this crate (for versions `v0.7,v0.8,v0.9`), or\n* migrate to a more recent version of the crate (when using `<0.7`).\n\nDoing so elimitates this vulnerability (code no longer compiles).\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/06/GHSA-5phc-849h-vcxg/GHSA-5phc-849h-vcxg.json b/advisories/github-reviewed/2022/06/GHSA-5phc-849h-vcxg/GHSA-5phc-849h-vcxg.json index 040348345fa..3a9a72e080a 100644 --- a/advisories/github-reviewed/2022/06/GHSA-5phc-849h-vcxg/GHSA-5phc-849h-vcxg.json +++ b/advisories/github-reviewed/2022/06/GHSA-5phc-849h-vcxg/GHSA-5phc-849h-vcxg.json @@ -3,14 +3,10 @@ "id": "GHSA-5phc-849h-vcxg", "modified": "2023-06-13T17:07:59Z", "published": "2022-06-16T23:45:49Z", - "aliases": [ - - ], + "aliases": [], "summary": "`Read` on uninitialized buffer can cause UB (impl of `ReadKVExt`)", "details": "Affected versions of this crate passes an uninitialized buffer to a user-provided `Read` implementation.\nArbitrary `Read` implementations can read from the uninitialized buffer (memory exposure) and also can return incorrect number of bytes written to the buffer.\nReading from uninitialized memory produces undefined values that can quickly invoke undefined behavior.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-16T23:45:49Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-6888-wf7j-34jq/GHSA-6888-wf7j-34jq.json b/advisories/github-reviewed/2022/06/GHSA-6888-wf7j-34jq/GHSA-6888-wf7j-34jq.json index dbe21f4d71a..ff344442f9a 100644 --- a/advisories/github-reviewed/2022/06/GHSA-6888-wf7j-34jq/GHSA-6888-wf7j-34jq.json +++ b/advisories/github-reviewed/2022/06/GHSA-6888-wf7j-34jq/GHSA-6888-wf7j-34jq.json @@ -3,14 +3,10 @@ "id": "GHSA-6888-wf7j-34jq", "modified": "2022-06-16T23:50:05Z", "published": "2022-06-16T23:50:05Z", - "aliases": [ - - ], + "aliases": [], "summary": "`SegQueue` creates zero value of any type", "details": "Affected versions of this crate called `mem::zeroed()` to create values of a user-supplied type `T`.\nThis is unsound e.g. if `T` is a reference type (which must be non-null).\n \nThe flaw was corrected by avoiding the use of `mem::zeroed()`, using `MaybeUninit` instead.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2022-06-16T23:50:05Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-72r2-rg28-47v9/GHSA-72r2-rg28-47v9.json b/advisories/github-reviewed/2022/06/GHSA-72r2-rg28-47v9/GHSA-72r2-rg28-47v9.json index e470b78f1d8..b7838045686 100644 --- a/advisories/github-reviewed/2022/06/GHSA-72r2-rg28-47v9/GHSA-72r2-rg28-47v9.json +++ b/advisories/github-reviewed/2022/06/GHSA-72r2-rg28-47v9/GHSA-72r2-rg28-47v9.json @@ -3,14 +3,10 @@ "id": "GHSA-72r2-rg28-47v9", "modified": "2023-06-13T16:28:21Z", "published": "2022-06-16T23:44:51Z", - "aliases": [ - - ], + "aliases": [], "summary": "`read` on uninitialized buffer may cause UB (bite::read::BiteReadExpandedExt::read_framed_max)", "details": "Affected versions of this crate calls a user provided `Read` implementation on an uninitialized buffer. `Read` on uninitialized buffer is defined as undefined behavior in Rust.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-16T23:44:51Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-8gj8-hv75-gp94/GHSA-8gj8-hv75-gp94.json b/advisories/github-reviewed/2022/06/GHSA-8gj8-hv75-gp94/GHSA-8gj8-hv75-gp94.json index 50c6a4f43d8..eb82d958a9a 100644 --- a/advisories/github-reviewed/2022/06/GHSA-8gj8-hv75-gp94/GHSA-8gj8-hv75-gp94.json +++ b/advisories/github-reviewed/2022/06/GHSA-8gj8-hv75-gp94/GHSA-8gj8-hv75-gp94.json @@ -3,14 +3,10 @@ "id": "GHSA-8gj8-hv75-gp94", "modified": "2022-06-16T23:51:13Z", "published": "2022-06-16T23:51:13Z", - "aliases": [ - - ], + "aliases": [], "summary": "`SegQueue` creates zero value of any type", "details": "Affected versions of this crate called `mem::zeroed()` to create values of a user-supplied type `T`.\nThis is unsound e.g. if `T` is a reference type (which must be non-null).\n \nThe flaw was corrected by avoiding the use of `mem::zeroed()`, using `MaybeUninit` instead.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2022-06-16T23:51:13Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-8mv5-7x95-7wcf/GHSA-8mv5-7x95-7wcf.json b/advisories/github-reviewed/2022/06/GHSA-8mv5-7x95-7wcf/GHSA-8mv5-7x95-7wcf.json index 42abb8ceafb..8652d8519bf 100644 --- a/advisories/github-reviewed/2022/06/GHSA-8mv5-7x95-7wcf/GHSA-8mv5-7x95-7wcf.json +++ b/advisories/github-reviewed/2022/06/GHSA-8mv5-7x95-7wcf/GHSA-8mv5-7x95-7wcf.json @@ -3,14 +3,10 @@ "id": "GHSA-8mv5-7x95-7wcf", "modified": "2023-06-13T18:35:51Z", "published": "2022-06-17T00:12:33Z", - "aliases": [ - - ], + "aliases": [], "summary": "`mopa` is technically unsound", "details": "The `mopa` crate redefines the deprecated `TraitObject` struct from `core::raw` like so:\n```rust\n#[repr(C)]\n#[derive(Copy, Clone)]\n#[doc(hidden)]\npub struct TraitObject {\n pub data: *mut (),\n pub vtable: *mut (),\n}\n```\nThis is done to then transmute a reference to a trait object (`&dyn Trait` for any trait `Trait`) into this struct and retrieve the `data` field for the purpose of downcasting. This is used to implement `downcast_ref_unchecked()`, in terms of which `downcast_ref()` is also implemented. Same goes for mutable reference downcasting and `Box` downcasting.\n\nThe Rust compiler explicitly reserves the right to change the memory layout of `&dyn Trait` for any trait `Trait`. The worst case scenario is that it swaps `data` and `vtable`, making an executable location breach and compromisation of ASLR possible, since reads from `data` would read `vtable` instead. Likewise, arbitrary code execution is also theoretically possible if reads of `vtable` generated by the compiler read `data` instead.\n\nWhile, as of Rust 1.52, this unsound assumption still holds true, updating the compiler may silently create UB in a crate which previously compiled and run without issues, compromising the security of builds which are believed to be reproducible.\n\nA potential strategy to resolve this has already been suggested in an issue on the GitHub repository of the crate.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-17T00:12:33Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-9c9f-7x9p-4wqp/GHSA-9c9f-7x9p-4wqp.json b/advisories/github-reviewed/2022/06/GHSA-9c9f-7x9p-4wqp/GHSA-9c9f-7x9p-4wqp.json index 94f2b2d46fe..b6dbf231a23 100644 --- a/advisories/github-reviewed/2022/06/GHSA-9c9f-7x9p-4wqp/GHSA-9c9f-7x9p-4wqp.json +++ b/advisories/github-reviewed/2022/06/GHSA-9c9f-7x9p-4wqp/GHSA-9c9f-7x9p-4wqp.json @@ -3,14 +3,10 @@ "id": "GHSA-9c9f-7x9p-4wqp", "modified": "2022-06-17T00:16:11Z", "published": "2022-06-17T00:16:11Z", - "aliases": [ - - ], + "aliases": [], "summary": "A malicious coder can get unsound access to TCell or TLCell memory", "details": "This is impossible to do by accident, but by carefully constructing\nmarker types to be covariant, a malicious coder can cheat the\nsingleton check in `TCellOwner` and `TLCellOwner`, giving unsound\naccess to cell memory. This could take the form of getting two\nmutable references to the same memory, or a mutable reference and an\nimmutable reference.\n\nThe fix is for the crate to internally force the marker type to be\ninvariant. This blocks the conversion between covariant types which\nRust normally allows.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-17T00:16:11Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-9g55-pg62-m8hh/GHSA-9g55-pg62-m8hh.json b/advisories/github-reviewed/2022/06/GHSA-9g55-pg62-m8hh/GHSA-9g55-pg62-m8hh.json index fcff0360772..a54b53a2400 100644 --- a/advisories/github-reviewed/2022/06/GHSA-9g55-pg62-m8hh/GHSA-9g55-pg62-m8hh.json +++ b/advisories/github-reviewed/2022/06/GHSA-9g55-pg62-m8hh/GHSA-9g55-pg62-m8hh.json @@ -3,14 +3,10 @@ "id": "GHSA-9g55-pg62-m8hh", "modified": "2022-06-16T23:49:25Z", "published": "2022-06-16T23:49:25Z", - "aliases": [ - - ], + "aliases": [], "summary": "Channel creates zero value of any type", "details": "Affected versions of this crate called `mem::zeroed()` to create values of a user-supplied type `T`.\nThis is unsound e.g. if `T` is a reference type (which must be non-null).\n \nThe flaw was corrected by avoiding the use of `mem::zeroed()`, using `MaybeUninit` instead.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-16T23:49:25Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-9rg7-3j4f-cf4x/GHSA-9rg7-3j4f-cf4x.json b/advisories/github-reviewed/2022/06/GHSA-9rg7-3j4f-cf4x/GHSA-9rg7-3j4f-cf4x.json index 329e1856f0a..9c0b2f09b67 100644 --- a/advisories/github-reviewed/2022/06/GHSA-9rg7-3j4f-cf4x/GHSA-9rg7-3j4f-cf4x.json +++ b/advisories/github-reviewed/2022/06/GHSA-9rg7-3j4f-cf4x/GHSA-9rg7-3j4f-cf4x.json @@ -3,14 +3,10 @@ "id": "GHSA-9rg7-3j4f-cf4x", "modified": "2022-06-16T23:52:51Z", "published": "2022-06-16T23:52:51Z", - "aliases": [ - - ], + "aliases": [], "summary": "QueryInterface should call AddRef before returning pointer", "details": "Affected version of this crate, which is a required dependency in com-impl, \nprovides a faulty implementation of the `IUnknown::QueryInterface` method.\n\n`QueryInterface` implementation must call `IUnknown::AddRef` before returning the pointer,\nas describe in this documentation:\n\n\nAs it is not incrementing the refcount as expected, the following calls to `IUnknown::Release` method \nwill cause WMI to drop reference to the interface, and can lead to invalid reference.\n\nThis is documented in \n\nThere is no simple workaround, as you can't know how many time QueryInterface will be called.\nThe only way to quick fix this is to use the macro expanded version of the code and modify \nthe QueryInterface method to add the AddRef call yourself.\n\nThe issue was corrected in commit `9803f31fbd1717d482d848f041044d061fca6da7`.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2022-06-16T23:52:51Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-c6px-4grw-hrjr/GHSA-c6px-4grw-hrjr.json b/advisories/github-reviewed/2022/06/GHSA-c6px-4grw-hrjr/GHSA-c6px-4grw-hrjr.json index 34558a79e5d..e3af4d515b1 100644 --- a/advisories/github-reviewed/2022/06/GHSA-c6px-4grw-hrjr/GHSA-c6px-4grw-hrjr.json +++ b/advisories/github-reviewed/2022/06/GHSA-c6px-4grw-hrjr/GHSA-c6px-4grw-hrjr.json @@ -3,14 +3,10 @@ "id": "GHSA-c6px-4grw-hrjr", "modified": "2023-06-13T16:28:06Z", "published": "2022-06-16T23:42:49Z", - "aliases": [ - - ], + "aliases": [], "summary": "'Read' on uninitialized memory may cause UB", "details": "Affected versions of this crate passes an uninitialized buffer to a user-provided `Read` implementation. The crate currently contains 4 occurrences of such cases. Arbitrary `Read` implementations can read from the uninitialized buffer (memory exposure) and also can return incorrect number of bytes written to the buffer.\nReading from uninitialized memory produces undefined values that can quickly invoke undefined behavior.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-16T23:42:49Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-cxcc-q839-2cw9/GHSA-cxcc-q839-2cw9.json b/advisories/github-reviewed/2022/06/GHSA-cxcc-q839-2cw9/GHSA-cxcc-q839-2cw9.json index 54983806926..bd23fe62c51 100644 --- a/advisories/github-reviewed/2022/06/GHSA-cxcc-q839-2cw9/GHSA-cxcc-q839-2cw9.json +++ b/advisories/github-reviewed/2022/06/GHSA-cxcc-q839-2cw9/GHSA-cxcc-q839-2cw9.json @@ -3,14 +3,10 @@ "id": "GHSA-cxcc-q839-2cw9", "modified": "2023-06-13T17:06:58Z", "published": "2022-06-16T23:48:53Z", - "aliases": [ - - ], + "aliases": [], "summary": "columnar: `Read` on uninitialized buffer may cause UB (ColumnarReadExt::read_typed_vec())", "details": "Affected versions of this crate passes an uninitialized buffer to a user-provided `Read` implementation (`ColumnarReadExt::read_typed_vec()`).\nArbitrary `Read` implementations can read from the uninitialized buffer (memory exposure) and also can return incorrect number of bytes written to the buffer.\nReading from uninitialized memory produces undefined values that can quickly invoke undefined behavior.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-16T23:48:53Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-f67m-9j94-qv9j/GHSA-f67m-9j94-qv9j.json b/advisories/github-reviewed/2022/06/GHSA-f67m-9j94-qv9j/GHSA-f67m-9j94-qv9j.json index 7facd7d6719..eed72b07648 100644 --- a/advisories/github-reviewed/2022/06/GHSA-f67m-9j94-qv9j/GHSA-f67m-9j94-qv9j.json +++ b/advisories/github-reviewed/2022/06/GHSA-f67m-9j94-qv9j/GHSA-f67m-9j94-qv9j.json @@ -3,14 +3,10 @@ "id": "GHSA-f67m-9j94-qv9j", "modified": "2022-06-16T23:59:29Z", "published": "2022-06-16T23:59:29Z", - "aliases": [ - - ], + "aliases": [], "summary": "Parser creates invalid uninitialized value", "details": "Affected versions of this crate called `mem::uninitialized()` in the HTTP1 parser to create values of type `httparse::Header` (from the `httparse` crate).\nThis is unsound, since `Header` contains references and thus must be non-null.\n \nThe flaw was corrected by avoiding the use of `mem::uninitialized()`, using `MaybeUninit` instead.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-16T23:59:29Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-hmx9-jm3v-33hv/GHSA-hmx9-jm3v-33hv.json b/advisories/github-reviewed/2022/06/GHSA-hmx9-jm3v-33hv/GHSA-hmx9-jm3v-33hv.json index 5ebf8d73f4f..b7ee6329c1e 100644 --- a/advisories/github-reviewed/2022/06/GHSA-hmx9-jm3v-33hv/GHSA-hmx9-jm3v-33hv.json +++ b/advisories/github-reviewed/2022/06/GHSA-hmx9-jm3v-33hv/GHSA-hmx9-jm3v-33hv.json @@ -3,14 +3,10 @@ "id": "GHSA-hmx9-jm3v-33hv", "modified": "2023-06-13T17:07:52Z", "published": "2022-06-16T23:46:08Z", - "aliases": [ - - ], + "aliases": [], "summary": "InputStream::read_exact : `Read` on uninitialized buffer causes UB", "details": "Affected versions of this crate passes an uninitialized buffer to a user-provided `Read` implementation.\nArbitrary `Read` implementations can read from the uninitialized buffer (memory exposure) and also can return incorrect number of bytes written to the buffer.\nReading from uninitialized memory produces undefined values that can quickly invoke undefined behavior.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-16T23:46:08Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-jmwx-r3gq-qq3p/GHSA-jmwx-r3gq-qq3p.json b/advisories/github-reviewed/2022/06/GHSA-jmwx-r3gq-qq3p/GHSA-jmwx-r3gq-qq3p.json index bbc74fee4f8..35c35e528b8 100644 --- a/advisories/github-reviewed/2022/06/GHSA-jmwx-r3gq-qq3p/GHSA-jmwx-r3gq-qq3p.json +++ b/advisories/github-reviewed/2022/06/GHSA-jmwx-r3gq-qq3p/GHSA-jmwx-r3gq-qq3p.json @@ -3,14 +3,10 @@ "id": "GHSA-jmwx-r3gq-qq3p", "modified": "2022-06-17T00:27:57Z", "published": "2022-06-17T00:27:57Z", - "aliases": [ - - ], + "aliases": [], "summary": "vec-const attempts to construct a Vec from a pointer to a const slice", "details": "Affected versions of this crate claimed to construct a const `Vec` with nonzero length and capacity, but that cannot be done because such a `Vec` requires a pointer from an allocator.\n\nThe implementation was later changed to just construct a `std::borrow::Cow`.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2022-06-17T00:27:57Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-m325-rxjv-pwph/GHSA-m325-rxjv-pwph.json b/advisories/github-reviewed/2022/06/GHSA-m325-rxjv-pwph/GHSA-m325-rxjv-pwph.json index c734a2a0f19..5b21984ceff 100644 --- a/advisories/github-reviewed/2022/06/GHSA-m325-rxjv-pwph/GHSA-m325-rxjv-pwph.json +++ b/advisories/github-reviewed/2022/06/GHSA-m325-rxjv-pwph/GHSA-m325-rxjv-pwph.json @@ -3,14 +3,10 @@ "id": "GHSA-m325-rxjv-pwph", "modified": "2023-06-13T18:41:50Z", "published": "2022-06-17T00:11:41Z", - "aliases": [ - - ], + "aliases": [], "summary": "Deserialization functions pass uninitialized memory to user-provided Read", "details": "Affected versions of this crate passed an uninitialized buffer to a\nuser-provided `Read` instance in:\n\n* `deserialize_binary`\n* `deserialize_string`\n* `deserialize_extension_others`\n* `deserialize_string_primitive`\n\nThis can result in safe `Read` implementations reading from the uninitialized\nbuffer leading to undefined behavior.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-17T00:11:41Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-mpg5-fvwp-42m2/GHSA-mpg5-fvwp-42m2.json b/advisories/github-reviewed/2022/06/GHSA-mpg5-fvwp-42m2/GHSA-mpg5-fvwp-42m2.json index 38ede0328bb..08d55eae1f0 100644 --- a/advisories/github-reviewed/2022/06/GHSA-mpg5-fvwp-42m2/GHSA-mpg5-fvwp-42m2.json +++ b/advisories/github-reviewed/2022/06/GHSA-mpg5-fvwp-42m2/GHSA-mpg5-fvwp-42m2.json @@ -3,14 +3,10 @@ "id": "GHSA-mpg5-fvwp-42m2", "modified": "2022-06-16T23:52:24Z", "published": "2022-06-16T23:52:24Z", - "aliases": [ - - ], + "aliases": [], "summary": "Unsoundness in `dashmap` references", "details": "Reference returned by some methods of `Ref` (and similar types) may outlive the `Ref` and escape the lock.\nThis causes undefined behavior and may result in a segfault.\n\nMore information in [`dashmap#167`](https://github.com/xacrimon/dashmap/issues/167) issue.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-16T23:52:24Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-p56p-gq3f-whg8/GHSA-p56p-gq3f-whg8.json b/advisories/github-reviewed/2022/06/GHSA-p56p-gq3f-whg8/GHSA-p56p-gq3f-whg8.json index 8ea58f37190..00d0849dc80 100644 --- a/advisories/github-reviewed/2022/06/GHSA-p56p-gq3f-whg8/GHSA-p56p-gq3f-whg8.json +++ b/advisories/github-reviewed/2022/06/GHSA-p56p-gq3f-whg8/GHSA-p56p-gq3f-whg8.json @@ -3,14 +3,10 @@ "id": "GHSA-p56p-gq3f-whg8", "modified": "2022-06-16T23:54:46Z", "published": "2022-06-16T23:54:46Z", - "aliases": [ - - ], + "aliases": [], "summary": "`Read` on uninitialized buffer may cause UB ( `read_entry()` )", "details": "Affected versions of this crate passes an uninitialized buffer to a user-provided `Read` implementation.\nThere are two of such cases (`go_offset_log::read_entry()` & `offset_log::read_entry()`).\n\nArbitrary `Read` implementations can read from the uninitialized buffer (memory exposure) and also can return incorrect number of bytes written to the buffer.\nReading from uninitialized memory produces undefined values that can quickly invoke undefined behavior.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -51,9 +47,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-16T23:54:46Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-p6gj-gpc8-f8xw/GHSA-p6gj-gpc8-f8xw.json b/advisories/github-reviewed/2022/06/GHSA-p6gj-gpc8-f8xw/GHSA-p6gj-gpc8-f8xw.json index 8fe59e8c004..d2ef74eb14b 100644 --- a/advisories/github-reviewed/2022/06/GHSA-p6gj-gpc8-f8xw/GHSA-p6gj-gpc8-f8xw.json +++ b/advisories/github-reviewed/2022/06/GHSA-p6gj-gpc8-f8xw/GHSA-p6gj-gpc8-f8xw.json @@ -3,14 +3,10 @@ "id": "GHSA-p6gj-gpc8-f8xw", "modified": "2022-06-17T00:13:24Z", "published": "2022-06-17T00:13:24Z", - "aliases": [ - - ], + "aliases": [], "summary": "Aliased mutable references from `tls_rand` & `TlsWyRand`", "details": "`TlsWyRand`'s implementation of `Deref` unconditionally dereferences a raw pointer, and returns \nmultiple mutable references to the same object, which is undefined behavior.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2022-06-17T00:13:24Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-pmcv-mgcf-rvxg/GHSA-pmcv-mgcf-rvxg.json b/advisories/github-reviewed/2022/06/GHSA-pmcv-mgcf-rvxg/GHSA-pmcv-mgcf-rvxg.json index 50e6f4e4b5e..db65b677637 100644 --- a/advisories/github-reviewed/2022/06/GHSA-pmcv-mgcf-rvxg/GHSA-pmcv-mgcf-rvxg.json +++ b/advisories/github-reviewed/2022/06/GHSA-pmcv-mgcf-rvxg/GHSA-pmcv-mgcf-rvxg.json @@ -3,14 +3,10 @@ "id": "GHSA-pmcv-mgcf-rvxg", "modified": "2022-06-16T23:51:32Z", "published": "2022-06-16T23:51:32Z", - "aliases": [ - - ], + "aliases": [], "summary": "Non-aligned u32 read in Chacha20 encryption and decryption", "details": "The implementation does not enforce alignment requirements on input slices while incorrectly assuming 4-byte alignment through an unsafe call to `std::slice::from_raw_parts_mut`, which breaks the contract and introduces undefined behavior.\n\nThis affects Chacha20 encryption and decryption in crypto2.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -54,9 +50,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-16T23:51:32Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-qgrp-8f3v-q85p/GHSA-qgrp-8f3v-q85p.json b/advisories/github-reviewed/2022/06/GHSA-qgrp-8f3v-q85p/GHSA-qgrp-8f3v-q85p.json index d1a926be3bc..8cbc25b665b 100644 --- a/advisories/github-reviewed/2022/06/GHSA-qgrp-8f3v-q85p/GHSA-qgrp-8f3v-q85p.json +++ b/advisories/github-reviewed/2022/06/GHSA-qgrp-8f3v-q85p/GHSA-qgrp-8f3v-q85p.json @@ -3,14 +3,10 @@ "id": "GHSA-qgrp-8f3v-q85p", "modified": "2022-06-16T23:41:45Z", "published": "2022-06-16T23:41:45Z", - "aliases": [ - - ], + "aliases": [], "summary": "`FixedSizeBinaryArray` does not perform bound checks on accessing values and offsets", "details": "`FixedSizeBinaryArray` performs insufficient bounds checks, which allows out-of-bounds reads in safe code.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-16T23:41:45Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-qj69-c89v-jwq2/GHSA-qj69-c89v-jwq2.json b/advisories/github-reviewed/2022/06/GHSA-qj69-c89v-jwq2/GHSA-qj69-c89v-jwq2.json index 8d84be13181..d47733e6924 100644 --- a/advisories/github-reviewed/2022/06/GHSA-qj69-c89v-jwq2/GHSA-qj69-c89v-jwq2.json +++ b/advisories/github-reviewed/2022/06/GHSA-qj69-c89v-jwq2/GHSA-qj69-c89v-jwq2.json @@ -3,14 +3,10 @@ "id": "GHSA-qj69-c89v-jwq2", "modified": "2022-06-16T23:41:05Z", "published": "2022-06-16T23:41:05Z", - "aliases": [ - - ], + "aliases": [], "summary": "Reading on uninitialized memory may cause UB ( `util::read_spv()` )", "details": "Affected versions of this crate passes an uninitialized buffer to a user-provided `Read` implementation.\n\nArbitrary `Read` implementations can read from the uninitialized buffer (memory exposure) and also can return incorrect number of bytes written to the buffer.\nReading from uninitialized memory produces undefined values that can quickly invoke undefined behavior.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-16T23:41:05Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-qqmc-hwqp-8g2w/GHSA-qqmc-hwqp-8g2w.json b/advisories/github-reviewed/2022/06/GHSA-qqmc-hwqp-8g2w/GHSA-qqmc-hwqp-8g2w.json index 543eeeebba1..b99f9802130 100644 --- a/advisories/github-reviewed/2022/06/GHSA-qqmc-hwqp-8g2w/GHSA-qqmc-hwqp-8g2w.json +++ b/advisories/github-reviewed/2022/06/GHSA-qqmc-hwqp-8g2w/GHSA-qqmc-hwqp-8g2w.json @@ -3,14 +3,10 @@ "id": "GHSA-qqmc-hwqp-8g2w", "modified": "2022-06-17T00:11:13Z", "published": "2022-06-17T00:11:13Z", - "aliases": [ - - ], + "aliases": [], "summary": "Use after free in lru crate", "details": "Lru crate has use after free vulnerability.\n\nLru crate has two functions for getting an iterator. Both iterators give\nreferences to key and value. Calling specific functions, like pop(), will remove\nand free the value, and but it's still possible to access the reference of value\nwhich is already dropped causing use after free.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -53,9 +49,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-17T00:11:13Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-r45x-ghr2-qjxc/GHSA-r45x-ghr2-qjxc.json b/advisories/github-reviewed/2022/06/GHSA-r45x-ghr2-qjxc/GHSA-r45x-ghr2-qjxc.json index 5dddec2c26e..ac94a44f55c 100644 --- a/advisories/github-reviewed/2022/06/GHSA-r45x-ghr2-qjxc/GHSA-r45x-ghr2-qjxc.json +++ b/advisories/github-reviewed/2022/06/GHSA-r45x-ghr2-qjxc/GHSA-r45x-ghr2-qjxc.json @@ -4,9 +4,7 @@ "modified": "2022-06-23T17:29:03Z", "published": "2022-06-17T00:30:52Z", "withdrawn": "2022-06-23T17:29:03Z", - "aliases": [ - - ], + "aliases": [], "summary": "Duplicate Advisory: `#[zeroize(drop)]` doesn't implement `Drop` for `enum`s", "details": "## Duplicate Advisory\nThis advisory is a duplicate of [GHSA-c5hx-w945-j4pq](https://github.com/advisories/GHSA-c5hx-w945-j4pq). This link is preserved to maintain external references.\n\n## Original Description\nAffected versions of this crate did not implement `Drop` when `#[zeroize(drop)]` was used on an `enum`.\n\nThis can result in memory not being zeroed out after dropping it, which is exactly what is intended when adding this attribute.\n\nThe flaw was corrected in version 1.2 and `#[zeroize(drop)]` on `enum`s now properly implements `Drop`.\n", "severity": [ diff --git a/advisories/github-reviewed/2022/06/GHSA-r67p-m7g9-gxw6/GHSA-r67p-m7g9-gxw6.json b/advisories/github-reviewed/2022/06/GHSA-r67p-m7g9-gxw6/GHSA-r67p-m7g9-gxw6.json index 0a6fa0ccc30..569b5f8f984 100644 --- a/advisories/github-reviewed/2022/06/GHSA-r67p-m7g9-gxw6/GHSA-r67p-m7g9-gxw6.json +++ b/advisories/github-reviewed/2022/06/GHSA-r67p-m7g9-gxw6/GHSA-r67p-m7g9-gxw6.json @@ -3,14 +3,10 @@ "id": "GHSA-r67p-m7g9-gxw6", "modified": "2022-06-16T23:51:58Z", "published": "2022-06-16T23:51:58Z", - "aliases": [ - - ], + "aliases": [], "summary": "`Read` on uninitialized memory may cause UB (fn preamble_skipcount())", "details": "Affected versions of this crate passes an uninitialized buffer to a user-provided `Read` implementation (within `fn preamble_skipcount()`).\n\nArbitrary `Read` implementations can read from the uninitialized buffer (memory exposure) and also can return incorrect number of bytes written to the buffer.\nReading from uninitialized memory produces undefined values that can quickly invoke undefined behavior.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-16T23:51:58Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-r7cj-wmwv-hfw5/GHSA-r7cj-wmwv-hfw5.json b/advisories/github-reviewed/2022/06/GHSA-r7cj-wmwv-hfw5/GHSA-r7cj-wmwv-hfw5.json index e93eb760771..10e20ea80e4 100644 --- a/advisories/github-reviewed/2022/06/GHSA-r7cj-wmwv-hfw5/GHSA-r7cj-wmwv-hfw5.json +++ b/advisories/github-reviewed/2022/06/GHSA-r7cj-wmwv-hfw5/GHSA-r7cj-wmwv-hfw5.json @@ -3,14 +3,10 @@ "id": "GHSA-r7cj-wmwv-hfw5", "modified": "2022-06-16T23:40:50Z", "published": "2022-06-16T23:40:50Z", - "aliases": [ - - ], + "aliases": [], "summary": "`BinaryArray` does not perform bound checks on reading values and offsets", "details": "`BinaryArray` performs insufficient validation on creation, which allows out-of-bounds reads in safe code.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -47,9 +43,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-16T23:40:50Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-rwf4-gx62-rqfw/GHSA-rwf4-gx62-rqfw.json b/advisories/github-reviewed/2022/06/GHSA-rwf4-gx62-rqfw/GHSA-rwf4-gx62-rqfw.json index cbb4f6db791..625a8ec4afb 100644 --- a/advisories/github-reviewed/2022/06/GHSA-rwf4-gx62-rqfw/GHSA-rwf4-gx62-rqfw.json +++ b/advisories/github-reviewed/2022/06/GHSA-rwf4-gx62-rqfw/GHSA-rwf4-gx62-rqfw.json @@ -3,14 +3,10 @@ "id": "GHSA-rwf4-gx62-rqfw", "modified": "2022-06-08T22:28:27Z", "published": "2022-06-08T22:28:27Z", - "aliases": [ - - ], + "aliases": [], "summary": "`MsQueue` `push`/`pop` use the wrong orderings", "details": "Affected versions of this crate use orderings which are too weak to support this data structure.\nIt is likely this has caused memory corruption in the wild: .\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -51,9 +47,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2022-06-08T22:28:27Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-rxhx-9fj6-6h2m/GHSA-rxhx-9fj6-6h2m.json b/advisories/github-reviewed/2022/06/GHSA-rxhx-9fj6-6h2m/GHSA-rxhx-9fj6-6h2m.json index e752df9f16f..7204336988a 100644 --- a/advisories/github-reviewed/2022/06/GHSA-rxhx-9fj6-6h2m/GHSA-rxhx-9fj6-6h2m.json +++ b/advisories/github-reviewed/2022/06/GHSA-rxhx-9fj6-6h2m/GHSA-rxhx-9fj6-6h2m.json @@ -3,14 +3,10 @@ "id": "GHSA-rxhx-9fj6-6h2m", "modified": "2022-06-20T18:15:47Z", "published": "2022-06-16T23:53:32Z", - "aliases": [ - - ], + "aliases": [], "summary": "enum_map macro can cause UB when `Enum` trait is incorrectly implemented", "details": "Affected versions of this crate did not properly check the length of an enum when using `enum_map!` macro, trusting user-provided length.\n\nWhen the `LENGTH` in the `Enum` trait does not match the array length in the `EnumArray` trait, this can result in the initialization of the enum map with uninitialized types, which in turn can allow an attacker to execute arbitrary code.\n\nThis problem can only occur with a manual implementation of the Enum trait, it will never occur for enums that use `#[derive(Enum)]`.\n\nExample code that triggers this vulnerability looks like this:\n\n```rust\nenum E {\n A,\n B,\n C,\n}\n\nimpl Enum for E {\n const LENGTH: usize = 2;\n\n fn from_usize(value: usize) -> E {\n match value {\n 0 => E::A,\n 1 => E::B,\n 2 => E::C,\n _ => unimplemented!(),\n }\n }\n\n fn into_usize(self) -> usize {\n self as usize\n }\n}\n\nimpl EnumArray for E {\n type Array = [V; 3];\n}\n\nlet _map: EnumMap = enum_map! { _ => \"Hello, world!\".into() };\n```\n\nThe flaw was corrected in commit [b824e23](https://github.com/xfix/enum-map/commit/b824e232f2fb47837740070096ac253df8e80dfc) by putting `LENGTH` property on sealed trait for macro to read.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -59,9 +55,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-16T23:53:32Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-wc36-xgcc-jwpr/GHSA-wc36-xgcc-jwpr.json b/advisories/github-reviewed/2022/06/GHSA-wc36-xgcc-jwpr/GHSA-wc36-xgcc-jwpr.json index 3cfbd2ee9ba..4cd9e75d1c7 100644 --- a/advisories/github-reviewed/2022/06/GHSA-wc36-xgcc-jwpr/GHSA-wc36-xgcc-jwpr.json +++ b/advisories/github-reviewed/2022/06/GHSA-wc36-xgcc-jwpr/GHSA-wc36-xgcc-jwpr.json @@ -3,14 +3,10 @@ "id": "GHSA-wc36-xgcc-jwpr", "modified": "2022-06-17T00:01:02Z", "published": "2022-06-17T00:01:02Z", - "aliases": [ - - ], + "aliases": [], "summary": "Failure to verify the public key of a `SignedEnvelope` against the `PeerId` in a `PeerRecord`", "details": "Affected versions of this crate did not check that the public key the signature was created with matches the peer ID of the peer record. \nAny combination was considered valid.\n\nThis allows an attacker to republish an existing `PeerRecord` with a different `PeerId`.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-17T00:01:02Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-wgrg-5h56-jg27/GHSA-wgrg-5h56-jg27.json b/advisories/github-reviewed/2022/06/GHSA-wgrg-5h56-jg27/GHSA-wgrg-5h56-jg27.json index 2b90d3deb4e..af5175b23c8 100644 --- a/advisories/github-reviewed/2022/06/GHSA-wgrg-5h56-jg27/GHSA-wgrg-5h56-jg27.json +++ b/advisories/github-reviewed/2022/06/GHSA-wgrg-5h56-jg27/GHSA-wgrg-5h56-jg27.json @@ -3,14 +3,10 @@ "id": "GHSA-wgrg-5h56-jg27", "modified": "2022-06-17T00:13:59Z", "published": "2022-06-17T00:13:59Z", - "aliases": [ - - ], + "aliases": [], "summary": "Out-of-bounds write in nix::unistd::getgrouplist", "details": "On certain platforms, if a user has more than 16 groups, the\n`nix::unistd::getgrouplist` function will call the libc `getgrouplist`\nfunction with a length parameter greater than the size of the buffer it\nprovides, resulting in an out-of-bounds write and memory corruption.\n\nThe libc `getgrouplist` function takes an in/out parameter `ngroups`\nspecifying the size of the group buffer. When the buffer is too small to\nhold all of the reqested user's group memberships, some libc\nimplementations, including glibc and Solaris libc, will modify `ngroups`\nto indicate the actual number of groups for the user, in addition to\nreturning an error. The version of `nix::unistd::getgrouplist` in nix\n0.16.0 and up will resize the buffer to twice its size, but will not\nread or modify the `ngroups` variable. Thus, if the user has more than\ntwice as many groups as the initial buffer size of 8, the next call to\n`getgrouplist` will then write past the end of the buffer.\n\nThe issue would require editing /etc/groups to exploit, which is usually\nonly editable by the root user.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -100,9 +96,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-06-17T00:13:59Z", diff --git a/advisories/github-reviewed/2022/06/GHSA-wwh2-r387-g5rm/GHSA-wwh2-r387-g5rm.json b/advisories/github-reviewed/2022/06/GHSA-wwh2-r387-g5rm/GHSA-wwh2-r387-g5rm.json index f19df4bd032..db6212724cf 100644 --- a/advisories/github-reviewed/2022/06/GHSA-wwh2-r387-g5rm/GHSA-wwh2-r387-g5rm.json +++ b/advisories/github-reviewed/2022/06/GHSA-wwh2-r387-g5rm/GHSA-wwh2-r387-g5rm.json @@ -3,14 +3,10 @@ "id": "GHSA-wwh2-r387-g5rm", "modified": "2023-06-13T22:06:25Z", "published": "2022-06-17T00:26:05Z", - "aliases": [ - - ], + "aliases": [], "summary": "tower-http's improper validation of Windows paths could lead to directory traversal attack", "details": "`tower_http::services::fs::ServeDir` didn't correctly validate Windows paths meaning paths like `/foo/bar/c:/windows/web/screen/img101.png` would be allowed and respond with the contents of `c:/windows/web/screen/img101.png`. Thus users could potentially read files anywhere on the filesystem. This only impacts Windows. Linux and other unix likes are not impacted by this.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/06/GHSA-x4mq-m75f-mx8m/GHSA-x4mq-m75f-mx8m.json b/advisories/github-reviewed/2022/06/GHSA-x4mq-m75f-mx8m/GHSA-x4mq-m75f-mx8m.json index 8b1e8fe82b9..7b0286223d4 100644 --- a/advisories/github-reviewed/2022/06/GHSA-x4mq-m75f-mx8m/GHSA-x4mq-m75f-mx8m.json +++ b/advisories/github-reviewed/2022/06/GHSA-x4mq-m75f-mx8m/GHSA-x4mq-m75f-mx8m.json @@ -3,9 +3,7 @@ "id": "GHSA-x4mq-m75f-mx8m", "modified": "2022-07-05T21:26:36Z", "published": "2022-06-17T00:30:33Z", - "aliases": [ - - ], + "aliases": [], "summary": "Delegate functions are missing `Send` bound", "details": "Affected versions of this crate did not require event handlers to have `Send` bound despite there being no guarantee of them being called on any particular thread, which can potentially lead to data races and undefined behavior.\n\nThe flaw was corrected in commit [afe3252](https://github.com/microsoft/windows-rs/commit/afe32525c22209aa8f632a0f4ad607863b51796a) by adding `Send` bounds.", "severity": [ diff --git a/advisories/github-reviewed/2022/07/GHSA-9x4h-8wgm-8xfg/GHSA-9x4h-8wgm-8xfg.json b/advisories/github-reviewed/2022/07/GHSA-9x4h-8wgm-8xfg/GHSA-9x4h-8wgm-8xfg.json index 8ca59e63b0c..1cfd8868de6 100644 --- a/advisories/github-reviewed/2022/07/GHSA-9x4h-8wgm-8xfg/GHSA-9x4h-8wgm-8xfg.json +++ b/advisories/github-reviewed/2022/07/GHSA-9x4h-8wgm-8xfg/GHSA-9x4h-8wgm-8xfg.json @@ -3,14 +3,10 @@ "id": "GHSA-9x4h-8wgm-8xfg", "modified": "2022-07-06T19:26:17Z", "published": "2022-07-06T19:26:17Z", - "aliases": [ - - ], + "aliases": [], "summary": "Malformed CAR panics and excessive memory usage", "details": "### Impact\n\n**Versions impacted**\n * `<=` go-car@v0.3.3\n * `<=` go-car@v2.3.0\n\n**Description**\n\nDecoding CAR data from untrusted user input can cause:\n\n- Panics:\n - Out of bound memory access\n - Out of memory\n - Divide by zero\n- Excessive memory usage\n\nSuch panics can be triggered by intentionally malformed CARv1 data, including CARv1 data within a CARv2 container; and also CARv2 data with excessively large indexes.\n\nThese vulnerabilities are not known to be exploited in the wild and were discovered primarily with the use of code fuzzing tooling.\n\n**Details**\n\n**Out of bound memory access** (OOB), **out of memory** (OOM) panics or **excessive memory usage** can be triggered by decode of malformed CARv1 headers, malformed CARv1 sections, and malformed CIDv0 data used in CARv1 sections. This also applies to CARv1 data within a CARv2 container.\n\nAdditionally, we wish to use this security advisory to make clear to consumers of CARv2 format data that **loading CARv2 indexes from untrusted sources is dangerous and should be avoided**. Where CAR data indexes are required, they should be regenerated locally. Out of memory (OOM) panics or excessive memory usage can be triggered by decode of intentionally malformed CARv2 indexes, or CARv2 indexes which are larger than available system memory (i.e. parallelization of CARv2 decodes may increase such a vulnerability).\n\n### Patches\n\n**Fixed versions**\n\n* `>=` go-car@v0.4.0\n* `>=` go-car@v2.4.0\n\n**Description of user-facing changes**\n\n***go-car@v0.4.0*** imposes a fixed maximum header length and section length of 32 MiB during decode. Headers exceeding this length will cause the decoder to return an error as the initial CAR decode occurs. Sections (the combination of CID and block data) exceeding this length will cause the decoder to return an error as that section is read.\n\nThe default maximum of 32 MiB may be changed _globally_ in an application instance by directly changing the `MaxAllowedSectionSize` variable in the `github.com/ipld/go-car/util` package.\n\nWe recommend that users of go-car@v0 upgrade to go-car@v2, where these maximums may be applied per-decode rather than globally.\n\n***go-car@v2.4.0*** imposes a default maximum header length of 32 MiB and a default maximum section length of 8 MiB. Headers exceeding this length will cause the decoder to return an error as the initial CAR decode occurs. Sections (the combination of CID and block data) exceeding this length will cause the decoder to return an error as that section is read.\n\nThe default values may be adjusted by supplying a `MaxAllowedHeaderSize(x)` or `MaxAllowedSectionSize(y)` option to any decode function that accepts options. These include:\n\n* `OpenReader()`\n* `NewReader()`\n* `NewBlockReader()`\n* `ReadVersion()`\n* `LoadIndex()`\n* `GenerateIndex()`\n* `ReadOrGenerateIndex()`\n* `WrapV1()`\n* `ExtractV1File()`\n* `ReplaceRootsInFile()`\n* `blockstore/NewBlockReader()`\n* `blockstore/NewReadOnly()`\n* `blockstore/OpenReadOnly()`\n* `blockstore/OpenReadWrite()`\n\nPlease be aware that the default values are **very generous** and may be lowered where a user wants to impose restrictions closer to typical sizes.\n\n* Typical header lengths should be in the order of 60 bytes, but the CAR format does not specify a maximum number of roots a header may contain. The default maximum of 32 MiB makes room for novel uses of the CAR format.\n* Typical IPLD block sizes are under 2 MiB, and it is generally recommended that they not be above 1 MiB for maximum interoperability (e.g. there are hard limitations when sharing IPLD data with IPFS). CARv1 sections are the concatenation of CID and block bytes. The default maximum section length of 8 MiB makes room for novel IPLD data.\n\n***go-car@v2.4.0*** introduces a new API that can be used to inspect a CAR and check for various errors, including those detailed in this advisory. The `Reader#Inspect(bool)` API returns a `Stats` object with various details about the CAR, such as its version, number of blocks, and details about codecs and multihashers used. When its argument is `true`, it will also perform a full hash consistency check of blocks contained within the CAR to ensure they match the CIDs. When `false`, block data is skipped over so a scan will likely be more efficient than reading blocks through a `BlockReader` if statistics and/or validity checking is all that's required. Note that `Inspect()` does minimal checking of index data; the strong recommendation is that if index data is untrusted then it should be regenerated.\n\n***go-car@v2.4.0*** also includes additional documentation regarding the dangers of consuming CARv2 index data from untrusted sources and a recommendation to regenerate indexes of CAR data from such sources where an index is required.\n\n### Workarounds\n\nThere are no workarounds for vulnerabilities in impacted versions decoding CARv1 data. Users of impacted versions should avoid accepting CAR data from untrusted sources.\n\nOOM or excessive memory usage vulnerabilities resulting from CARv2 index parsing in impacted versions can be avoided by not reading indexes from CARv2 data from untrusted sources.\n\n### References\n\nDetails on the CARv1 and CARv2 formats, including the composition of CARv1 headers and sections, and CARv2 indexes can be found in the CAR format specifications: https://ipld.io/specs/transport/car/\n\n### For more information\n\nIf you have any questions or comments about this advisory please open an issue in [go-car](https://github.com/ipld/go-car).", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/09/GHSA-4qw4-jpp4-8gvp/GHSA-4qw4-jpp4-8gvp.json b/advisories/github-reviewed/2022/09/GHSA-4qw4-jpp4-8gvp/GHSA-4qw4-jpp4-8gvp.json index 278e1a41640..7da6dc426d5 100644 --- a/advisories/github-reviewed/2022/09/GHSA-4qw4-jpp4-8gvp/GHSA-4qw4-jpp4-8gvp.json +++ b/advisories/github-reviewed/2022/09/GHSA-4qw4-jpp4-8gvp/GHSA-4qw4-jpp4-8gvp.json @@ -3,14 +3,10 @@ "id": "GHSA-4qw4-jpp4-8gvp", "modified": "2022-09-21T18:18:05Z", "published": "2022-09-21T18:18:05Z", - "aliases": [ - - ], + "aliases": [], "summary": "Unbounded resource exhaustion in cmark-gfm autolink extension may lead to denial of service", "details": "### Impact\n\nCommonMarker uses `cmark-gfm` for rendering [Github Flavored Markdown](https://github.github.com/gfm/). A polynomial time complexity issue in cmark-gfm's autolink extension may lead to unbounded resource exhaustion and subsequent denial of service.\n\n### Patches\n\nThis vulnerability has been patched in the following CommonMarker release:\n\n- v0.23.6\n\n### Workarounds\n\nDisable use of the autolink extension.\n\n### References\n\nhttps://github.com/gjtorikian/commonmarker/pull/190\nhttps://github.com/github/cmark-gfm/security/advisories/GHSA-cgh3-p57x-9q7q\nhttps://en.wikipedia.org/wiki/Time_complexity\n\n### For more information\nIf you have any questions or comments about this advisory:\n* Open an issue in [github/cmark-gfm](https://github.com/github/cmark-gfm)\n\n### Acknowledgements\n\nWe would like to thank [Legit Security](https://www.legitsecurity.com) for reporting this vulnerability.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/09/GHSA-6h2x-4gjf-jc5w/GHSA-6h2x-4gjf-jc5w.json b/advisories/github-reviewed/2022/09/GHSA-6h2x-4gjf-jc5w/GHSA-6h2x-4gjf-jc5w.json index 041ecd32a17..ebfb56aedaf 100644 --- a/advisories/github-reviewed/2022/09/GHSA-6h2x-4gjf-jc5w/GHSA-6h2x-4gjf-jc5w.json +++ b/advisories/github-reviewed/2022/09/GHSA-6h2x-4gjf-jc5w/GHSA-6h2x-4gjf-jc5w.json @@ -3,14 +3,10 @@ "id": "GHSA-6h2x-4gjf-jc5w", "modified": "2022-09-21T21:42:05Z", "published": "2022-09-21T21:42:05Z", - "aliases": [ - - ], + "aliases": [], "summary": "autogluon.multimodal vulnerable to unsafe YAML deserialization", "details": "### Impact\n\nA potential unsafe deserialization issue exists within the `autogluon.multimodal` module, where YAML files are loaded via `yaml.load()` instead of `yaml.safe_load()`. The deserialization of untrusted data may allow an unprivileged third party to cause remote code execution, denial of service, and impact to both confidentiality and integrity.\n\nImpacted versions: `>=0.4.0;<0.4.3`, `>=0.5.0;<0.5.2`.\n\n### Patches\nThe patches are included in `autogluon.multimodal==0.4.3`, `autogluon.multimodal==0.5.2` and Deep Learning Containers `0.4.3` and `0.5.2`.\n\n### Workarounds\nDo not load data which originated from an untrusted source, or that could have been tampered with. **Only load data you trust.**\n\n### References\n* https://cwe.mitre.org/data/definitions/502.html\n* https://www.cvedetails.com/cve/CVE-2017-18342/\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/09/GHSA-gwp4-mcv4-w95j/GHSA-gwp4-mcv4-w95j.json b/advisories/github-reviewed/2022/09/GHSA-gwp4-mcv4-w95j/GHSA-gwp4-mcv4-w95j.json index ac783aace69..c3140e15cdb 100644 --- a/advisories/github-reviewed/2022/09/GHSA-gwp4-mcv4-w95j/GHSA-gwp4-mcv4-w95j.json +++ b/advisories/github-reviewed/2022/09/GHSA-gwp4-mcv4-w95j/GHSA-gwp4-mcv4-w95j.json @@ -8,9 +8,7 @@ ], "summary": "jwcrypto token substitution can lead to authentication bypass", "details": "The JWT code can auto-detect the type of token being provided, and this can lead the application to incorrect conclusions about the trustworthiness of the token.\nQuoting the private disclosure we received : \"Under certain circumstances, it is possible to substitute a [..] signed JWS with a JWE that is encrypted with the public key that is normally used for signature validation.\"\nThis substitution attack can occur only if the validating application also have access to the private key, normally used to sign the tokens, available during validation of the received JWT.\nThe significance of this attacks depends on the use of the token, it may lead to authentication bypass or authorization bypass (respectively if claims are used to authenticate or authorize certain actions), because the attacker has full control of the data placed in the JWE and can inject any desired claim value.\n\nSeveral mitigating factors exist that can protect applications from this issue:\n- If the private key corresponding to the public key used to encrypt the JWE is not available to the application an exception will be raised.\n- If the JWK is specified with the 'use' parameter set to 'sig' (as expected for keys used only for signing/verification) an exception will be raised.\n- If the JWK is specified with the 'key_ops' parameter set and it does not include the 'decrypt' operation an exception will be raised.\n- Applications may check the token type before validation, in this case they would fail to detect an expected JWS\n\nNormally, signing and validation are done by different applications, so this scenario should be unlikely. However it is possible to have applications that both sign and validate tokens and do not separate JWKs in use, or do not set a JWK 'use' type.\n\nDue to the mitigating factors, and the fact that specific operational constraints and conditions need to be in place to successfully exploit this issue to generate an authentication bypass, we rate this security issue as moderate. Other avenues may decide on a different rating based on use case, always verify what conditions apply to your use of the library to assess risk.\n\nMany thanks to Tom Tervoort of Secura for finding and reporting this issue.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -51,9 +49,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2022-09-21T16:58:31Z", diff --git a/advisories/github-reviewed/2023/06/GHSA-5wrg-8fxp-cx9r/GHSA-5wrg-8fxp-cx9r.json b/advisories/github-reviewed/2023/06/GHSA-5wrg-8fxp-cx9r/GHSA-5wrg-8fxp-cx9r.json index 23470d12d0a..692fe5efcba 100644 --- a/advisories/github-reviewed/2023/06/GHSA-5wrg-8fxp-cx9r/GHSA-5wrg-8fxp-cx9r.json +++ b/advisories/github-reviewed/2023/06/GHSA-5wrg-8fxp-cx9r/GHSA-5wrg-8fxp-cx9r.json @@ -3,14 +3,10 @@ "id": "GHSA-5wrg-8fxp-cx9r", "modified": "2023-06-21T22:06:22Z", "published": "2023-06-21T22:06:22Z", - "aliases": [ - - ], + "aliases": [], "summary": "passport-wsfed-saml2 Signature Bypass vulnerability", "details": "## Information\nPlease note that this is not a new disclosure, and is previously reported in our [SECURITY-NOTICE.md](https://github.com/auth0/passport-wsfed-saml2/commit/520b9fc0bb4249ce83bec47e30153419f086ab70\n) which we removed in favor of github advisory. \n\n# Overview\n\nA vulnerability was found in the validation of a SAML signature. The validation doesn't ensure that the \"Signature\" tag is at the proper location inside an \"Assertion\" tag. This leads to a signature relocation attack where the attacker can corrupt one field of data while maintaining the signature valid. This could allow an authenticated attacker to \"remove\" one group from the assertion or corrupt another field of an assertion.\n\n# Am I affected?\n\nYou are affected if you are using the passport-wsfed-saml2 library to version < 3.0.10\n\n# How do I fix it?\n\nYou may fix this issue by upgrading passport-wsfed-saml2 library to version 3.0.10 or above. \n\n# Will the fix impact my users?\n\nThis fix patches the library that your application runs, but will not impact your users, their current state, or any existing sessions.\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -51,9 +47,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2023-06-21T22:06:22Z", diff --git a/advisories/github-reviewed/2023/11/GHSA-hfxh-rjv7-2369/GHSA-hfxh-rjv7-2369.json b/advisories/github-reviewed/2023/11/GHSA-hfxh-rjv7-2369/GHSA-hfxh-rjv7-2369.json index d83764f900d..47f3103f065 100644 --- a/advisories/github-reviewed/2023/11/GHSA-hfxh-rjv7-2369/GHSA-hfxh-rjv7-2369.json +++ b/advisories/github-reviewed/2023/11/GHSA-hfxh-rjv7-2369/GHSA-hfxh-rjv7-2369.json @@ -3,14 +3,10 @@ "id": "GHSA-hfxh-rjv7-2369", "modified": "2023-11-27T17:25:11Z", "published": "2023-11-27T17:25:11Z", - "aliases": [ - - ], + "aliases": [], "summary": "Uptime Kuma Authenticated remote code execution via TailscalePing", "details": "### Summary\n\nThe `runTailscalePing` method of the `TailscalePing` class injects the `hostname` parameter inside a shell command, leading to a command injection and the possibility to run arbitrary commands on the server.\n\n### Details\n\nWhen adding a new monitor on Uptime Kuma, we can select the \"Tailscale Ping\" type. Then we can add a hostname and insert a command injection payload into it. The front-end application requires that the field follow a specific pattern, this validation only happens on the front-end and can be removed by removing the attribute `pattern` on the `input` element.\n\nhttps://github.com/louislam/uptime-kuma/blob/dc4242019331e65a79ac16deef97510144e01b12/server/monitor-types/tailscale-ping.js#L40-L46\n\nWe can finally add the new monitor and observe that our command is being executed.\n\n**NOTE:** When using Uptime Kuma inside a container, the \"TailScale Ping\" type is not visible. We can fake this information by intercepting WebSocket messages and set the `isContainer` option to `false`.\n\n### PoC\n\n* Authenticate.\n* Create a new monitor.\n* Select the TailScale Ping type (if not visible, see the note in the details section).\n* Insert the command injection payload inside the `hostname` field. (for example `$(id >&2)`)\n* Remove the `pattern` requirement on the field.\n* Save and start the monitor.\n\n### Impact\n\nAn authenticated user can execute arbitrary command on the server running Uptime Kuma.\n\n### Remediation\n\nThere are other command execution in the codebase, they use a method `spawn` from the `child_process` module which does not interpret the command as a shell command, the same thing should be done here.\n\n**NOTE:** The Tailscale CLI seems to support the `--` sequence. It should be used between the `ping` subcommand and the `hostname` argument to avoid argument injection.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -46,9 +42,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2023-11-27T17:25:11Z", diff --git a/advisories/unreviewed/2022/02/GHSA-f299-j7j4-m9w9/GHSA-f299-j7j4-m9w9.json b/advisories/unreviewed/2022/02/GHSA-f299-j7j4-m9w9/GHSA-f299-j7j4-m9w9.json index 62d7c0275d2..cd4d38e71f3 100644 --- a/advisories/unreviewed/2022/02/GHSA-f299-j7j4-m9w9/GHSA-f299-j7j4-m9w9.json +++ b/advisories/unreviewed/2022/02/GHSA-f299-j7j4-m9w9/GHSA-f299-j7j4-m9w9.json @@ -14,9 +14,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-fghm-67rm-fvph/GHSA-fghm-67rm-fvph.json b/advisories/unreviewed/2022/02/GHSA-fghm-67rm-fvph/GHSA-fghm-67rm-fvph.json index c6a589a9716..afa0ca65ef8 100644 --- a/advisories/unreviewed/2022/02/GHSA-fghm-67rm-fvph/GHSA-fghm-67rm-fvph.json +++ b/advisories/unreviewed/2022/02/GHSA-fghm-67rm-fvph/GHSA-fghm-67rm-fvph.json @@ -14,9 +14,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-r6j6-xp6q-c876/GHSA-r6j6-xp6q-c876.json b/advisories/unreviewed/2022/02/GHSA-r6j6-xp6q-c876/GHSA-r6j6-xp6q-c876.json index e2b94d80e98..0ca8d8a718e 100644 --- a/advisories/unreviewed/2022/02/GHSA-r6j6-xp6q-c876/GHSA-r6j6-xp6q-c876.json +++ b/advisories/unreviewed/2022/02/GHSA-r6j6-xp6q-c876/GHSA-r6j6-xp6q-c876.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-224j-3632-5gqr/GHSA-224j-3632-5gqr.json b/advisories/unreviewed/2022/05/GHSA-224j-3632-5gqr/GHSA-224j-3632-5gqr.json index fded3aeeed4..5cd8cc4ecf5 100644 --- a/advisories/unreviewed/2022/05/GHSA-224j-3632-5gqr/GHSA-224j-3632-5gqr.json +++ b/advisories/unreviewed/2022/05/GHSA-224j-3632-5gqr/GHSA-224j-3632-5gqr.json @@ -7,12 +7,8 @@ "CVE-2021-24229" ], "details": "The Jetpack Scan team identified a Reflected Cross-Site Scripting via the patreon_save_attachment_patreon_level AJAX action of the Patreon WordPress plugin before 1.7.2. This AJAX hook is used to update the pledge level required by Patreon subscribers to access a given attachment. This action is accessible for user accounts with the ‘manage_options’ privilege (i.e.., only administrators). Unfortunately, one of the parameters used in this AJAX endpoint is not sanitized before being printed back to the user, so the risk it represents is the same as the previous XSS vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-227w-82c7-87qx/GHSA-227w-82c7-87qx.json b/advisories/unreviewed/2022/05/GHSA-227w-82c7-87qx/GHSA-227w-82c7-87qx.json index 5cffb871b75..ae4e0d58907 100644 --- a/advisories/unreviewed/2022/05/GHSA-227w-82c7-87qx/GHSA-227w-82c7-87qx.json +++ b/advisories/unreviewed/2022/05/GHSA-227w-82c7-87qx/GHSA-227w-82c7-87qx.json @@ -7,12 +7,8 @@ "CVE-2021-28200" ], "details": "The CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-22c4-4rv3-jj9h/GHSA-22c4-4rv3-jj9h.json b/advisories/unreviewed/2022/05/GHSA-22c4-4rv3-jj9h/GHSA-22c4-4rv3-jj9h.json index 87479741503..e49ab2a193b 100644 --- a/advisories/unreviewed/2022/05/GHSA-22c4-4rv3-jj9h/GHSA-22c4-4rv3-jj9h.json +++ b/advisories/unreviewed/2022/05/GHSA-22c4-4rv3-jj9h/GHSA-22c4-4rv3-jj9h.json @@ -7,12 +7,8 @@ "CVE-2008-1878" ], "details": "Stack-based buffer overflow in the demux_nsf_send_chunk function in src/demuxers/demux_nsf.c in xine-lib 1.1.12 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long NSF title.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-22p7-7xrf-xxhr/GHSA-22p7-7xrf-xxhr.json b/advisories/unreviewed/2022/05/GHSA-22p7-7xrf-xxhr/GHSA-22p7-7xrf-xxhr.json index a65c30015c8..cf2ff40940f 100644 --- a/advisories/unreviewed/2022/05/GHSA-22p7-7xrf-xxhr/GHSA-22p7-7xrf-xxhr.json +++ b/advisories/unreviewed/2022/05/GHSA-22p7-7xrf-xxhr/GHSA-22p7-7xrf-xxhr.json @@ -7,12 +7,8 @@ "CVE-2008-1597" ], "details": "The WPAR system call implementation in the kernel in IBM AIX 6.1 allows local users to cause a denial of service via unknown calls that trigger \"undefined behavior.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-22r7-2v6v-5qmw/GHSA-22r7-2v6v-5qmw.json b/advisories/unreviewed/2022/05/GHSA-22r7-2v6v-5qmw/GHSA-22r7-2v6v-5qmw.json index 26242bf09b3..08455bae05b 100644 --- a/advisories/unreviewed/2022/05/GHSA-22r7-2v6v-5qmw/GHSA-22r7-2v6v-5qmw.json +++ b/advisories/unreviewed/2022/05/GHSA-22r7-2v6v-5qmw/GHSA-22r7-2v6v-5qmw.json @@ -7,12 +7,8 @@ "CVE-2021-24181" ], "details": "The tutor_mark_answer_as_correct AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 was vulnerable to blind and time based SQL injections that could be exploited by students.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2377-297w-hggm/GHSA-2377-297w-hggm.json b/advisories/unreviewed/2022/05/GHSA-2377-297w-hggm/GHSA-2377-297w-hggm.json index 54d92cd42e2..206c78c81a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-2377-297w-hggm/GHSA-2377-297w-hggm.json +++ b/advisories/unreviewed/2022/05/GHSA-2377-297w-hggm/GHSA-2377-297w-hggm.json @@ -7,12 +7,8 @@ "CVE-2008-1539" ], "details": "SQL injection vulnerability in includes/dynamic_titles.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to execute arbitrary SQL commands via the p parameter to modules.php for the Forums module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-239r-933r-8pjv/GHSA-239r-933r-8pjv.json b/advisories/unreviewed/2022/05/GHSA-239r-933r-8pjv/GHSA-239r-933r-8pjv.json index d72ab89c6c7..4d10f0717be 100644 --- a/advisories/unreviewed/2022/05/GHSA-239r-933r-8pjv/GHSA-239r-933r-8pjv.json +++ b/advisories/unreviewed/2022/05/GHSA-239r-933r-8pjv/GHSA-239r-933r-8pjv.json @@ -7,12 +7,8 @@ "CVE-2008-1807" ], "details": "FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid \"number of axes\" field in a Printer Font Binary (PFB) file, which triggers a free of arbitrary memory locations, leading to memory corruption.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -244,9 +240,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-23cv-53vv-c2x5/GHSA-23cv-53vv-c2x5.json b/advisories/unreviewed/2022/05/GHSA-23cv-53vv-c2x5/GHSA-23cv-53vv-c2x5.json index 549e0d71cbd..e87623e9077 100644 --- a/advisories/unreviewed/2022/05/GHSA-23cv-53vv-c2x5/GHSA-23cv-53vv-c2x5.json +++ b/advisories/unreviewed/2022/05/GHSA-23cv-53vv-c2x5/GHSA-23cv-53vv-c2x5.json @@ -7,12 +7,8 @@ "CVE-2020-25444" ], "details": "Cross Site Scripting (XSS) vulnerability in Booking Core - Ultimate Booking System Booking Core 1.7.0 via the (1) \"About Yourself” section under the “My Profile” page, \" (2) “Hotel Policy” field under the “Hotel Details” page, (3) “Pricing code” and “name” fields under the “Manage Tour” page, and (4) all the labels under the “Menu” section.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-249v-v545-hw42/GHSA-249v-v545-hw42.json b/advisories/unreviewed/2022/05/GHSA-249v-v545-hw42/GHSA-249v-v545-hw42.json index e75df43cba7..4577ed8efe4 100644 --- a/advisories/unreviewed/2022/05/GHSA-249v-v545-hw42/GHSA-249v-v545-hw42.json +++ b/advisories/unreviewed/2022/05/GHSA-249v-v545-hw42/GHSA-249v-v545-hw42.json @@ -7,12 +7,8 @@ "CVE-2008-1974" ], "details": "Cross-site scripting (XSS) vulnerability in addevent.php in Horde Kronolith 2.1.7, Groupware Webmail Edition 1.0.6, and Groupware 1.0.5 allows remote attackers to inject arbitrary web script or HTML via the url parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-24wh-gwj5-gmw5/GHSA-24wh-gwj5-gmw5.json b/advisories/unreviewed/2022/05/GHSA-24wh-gwj5-gmw5/GHSA-24wh-gwj5-gmw5.json index e96c288a768..95322087da7 100644 --- a/advisories/unreviewed/2022/05/GHSA-24wh-gwj5-gmw5/GHSA-24wh-gwj5-gmw5.json +++ b/advisories/unreviewed/2022/05/GHSA-24wh-gwj5-gmw5/GHSA-24wh-gwj5-gmw5.json @@ -7,12 +7,8 @@ "CVE-2008-2008" ], "details": "Buffer overflow in the Display Names message feature in Cerulean Studios Trillian Basic and Pro 3.1.9.0 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long nickname in an MSN protocol message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-25q5-cv5r-qpp9/GHSA-25q5-cv5r-qpp9.json b/advisories/unreviewed/2022/05/GHSA-25q5-cv5r-qpp9/GHSA-25q5-cv5r-qpp9.json index 3eedb34b045..a8b74c04baa 100644 --- a/advisories/unreviewed/2022/05/GHSA-25q5-cv5r-qpp9/GHSA-25q5-cv5r-qpp9.json +++ b/advisories/unreviewed/2022/05/GHSA-25q5-cv5r-qpp9/GHSA-25q5-cv5r-qpp9.json @@ -7,12 +7,8 @@ "CVE-2020-15382" ], "details": "Brocade SANnav before version 2.1.1 uses a hard-coded administrator account with the weak password ‘passw0rd’ if a password is not provided for PostgreSQL at install-time.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-263w-3fx9-r885/GHSA-263w-3fx9-r885.json b/advisories/unreviewed/2022/05/GHSA-263w-3fx9-r885/GHSA-263w-3fx9-r885.json index 9aba9216075..4fa1a350dbc 100644 --- a/advisories/unreviewed/2022/05/GHSA-263w-3fx9-r885/GHSA-263w-3fx9-r885.json +++ b/advisories/unreviewed/2022/05/GHSA-263w-3fx9-r885/GHSA-263w-3fx9-r885.json @@ -7,12 +7,8 @@ "CVE-2020-0017" ], "details": "In multiple places, it was possible for the primary user’s dictionary to be visible to and modifiable by secondary users. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-123232892", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-266p-f47g-vvp3/GHSA-266p-f47g-vvp3.json b/advisories/unreviewed/2022/05/GHSA-266p-f47g-vvp3/GHSA-266p-f47g-vvp3.json index 9c9cd50f016..24a507097af 100644 --- a/advisories/unreviewed/2022/05/GHSA-266p-f47g-vvp3/GHSA-266p-f47g-vvp3.json +++ b/advisories/unreviewed/2022/05/GHSA-266p-f47g-vvp3/GHSA-266p-f47g-vvp3.json @@ -7,12 +7,8 @@ "CVE-2008-1750" ], "details": "SQL injection vulnerability in Integry Systems LiveCart 1.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to the /category URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-27p3-v3ff-v3x4/GHSA-27p3-v3ff-v3x4.json b/advisories/unreviewed/2022/05/GHSA-27p3-v3ff-v3x4/GHSA-27p3-v3ff-v3x4.json index 3eead8870ae..30e8c5a5fd4 100644 --- a/advisories/unreviewed/2022/05/GHSA-27p3-v3ff-v3x4/GHSA-27p3-v3ff-v3x4.json +++ b/advisories/unreviewed/2022/05/GHSA-27p3-v3ff-v3x4/GHSA-27p3-v3ff-v3x4.json @@ -7,12 +7,8 @@ "CVE-2008-1928" ], "details": "Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service (crash) via an image based fill in which the number of input channels is different from the number of output channels.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-27qm-xvmj-53q7/GHSA-27qm-xvmj-53q7.json b/advisories/unreviewed/2022/05/GHSA-27qm-xvmj-53q7/GHSA-27qm-xvmj-53q7.json index c3a8c17d159..55f66e9f9c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-27qm-xvmj-53q7/GHSA-27qm-xvmj-53q7.json +++ b/advisories/unreviewed/2022/05/GHSA-27qm-xvmj-53q7/GHSA-27qm-xvmj-53q7.json @@ -7,12 +7,8 @@ "CVE-2008-1908" ], "details": "Multiple directory traversal vulnerabilities in cpCommerce 1.1.0 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the language parameter in a language action to the default URI, which is not properly handled in actions/language.act.php, or (2) the action parameter to category.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-27x9-7vgq-h9f7/GHSA-27x9-7vgq-h9f7.json b/advisories/unreviewed/2022/05/GHSA-27x9-7vgq-h9f7/GHSA-27x9-7vgq-h9f7.json index 9e1cc33abb3..57975ff857e 100644 --- a/advisories/unreviewed/2022/05/GHSA-27x9-7vgq-h9f7/GHSA-27x9-7vgq-h9f7.json +++ b/advisories/unreviewed/2022/05/GHSA-27x9-7vgq-h9f7/GHSA-27x9-7vgq-h9f7.json @@ -7,12 +7,8 @@ "CVE-2020-27823" ], "details": "A flaw was found in OpenJPEG’s encoder. This flaw allows an attacker to pass specially crafted x,y offset input to OpenJPEG to use during encoding. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-28c6-6wvh-6235/GHSA-28c6-6wvh-6235.json b/advisories/unreviewed/2022/05/GHSA-28c6-6wvh-6235/GHSA-28c6-6wvh-6235.json index ffc75035ee8..d9f57955e66 100644 --- a/advisories/unreviewed/2022/05/GHSA-28c6-6wvh-6235/GHSA-28c6-6wvh-6235.json +++ b/advisories/unreviewed/2022/05/GHSA-28c6-6wvh-6235/GHSA-28c6-6wvh-6235.json @@ -7,12 +7,8 @@ "CVE-2020-1896" ], "details": "A stack overflow vulnerability in Facebook Hermes ‘builtin apply’ prior to commit 86543ac47e59c522976b5632b8bf9a2a4583c7d2 (https://github.com/facebook/hermes/commit/86543ac47e59c522976b5632b8bf9a2a4583c7d2) allows attackers to potentially execute arbitrary code via crafted JavaScript. Note that this is only exploitable if the application using Hermes permits evaluation of untrusted JavaScript. Hence, most React Native applications are not affected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-28fq-p2c7-42px/GHSA-28fq-p2c7-42px.json b/advisories/unreviewed/2022/05/GHSA-28fq-p2c7-42px/GHSA-28fq-p2c7-42px.json index 9ced9668efe..ee4e36621b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-28fq-p2c7-42px/GHSA-28fq-p2c7-42px.json +++ b/advisories/unreviewed/2022/05/GHSA-28fq-p2c7-42px/GHSA-28fq-p2c7-42px.json @@ -7,12 +7,8 @@ "CVE-2020-3935" ], "details": "Secom Co. Dr.ID, a Door Access Control and Personnel Attendance Management system, stores users’ information by cleartext in the cookie, which divulges password to attackers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-28qq-773c-49rf/GHSA-28qq-773c-49rf.json b/advisories/unreviewed/2022/05/GHSA-28qq-773c-49rf/GHSA-28qq-773c-49rf.json index f0b1ec5a797..b5bd9f8936f 100644 --- a/advisories/unreviewed/2022/05/GHSA-28qq-773c-49rf/GHSA-28qq-773c-49rf.json +++ b/advisories/unreviewed/2022/05/GHSA-28qq-773c-49rf/GHSA-28qq-773c-49rf.json @@ -7,12 +7,8 @@ "CVE-2008-1863" ], "details": "SQL injection vulnerability in view_reviews.php in Prozilla Cheat Script (aka Cheats) 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-28rp-9f44-h4v6/GHSA-28rp-9f44-h4v6.json b/advisories/unreviewed/2022/05/GHSA-28rp-9f44-h4v6/GHSA-28rp-9f44-h4v6.json index afbcf05a614..9cd6c4f441c 100644 --- a/advisories/unreviewed/2022/05/GHSA-28rp-9f44-h4v6/GHSA-28rp-9f44-h4v6.json +++ b/advisories/unreviewed/2022/05/GHSA-28rp-9f44-h4v6/GHSA-28rp-9f44-h4v6.json @@ -7,12 +7,8 @@ "CVE-2020-7559" ], "details": "A CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause a crash of the PLC simulator present in EcoStruxureª Control Expert software when receiving a specially crafted request over Modbus.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-28vp-8q88-wrvc/GHSA-28vp-8q88-wrvc.json b/advisories/unreviewed/2022/05/GHSA-28vp-8q88-wrvc/GHSA-28vp-8q88-wrvc.json index e299fa6a7bb..3f5123932c0 100644 --- a/advisories/unreviewed/2022/05/GHSA-28vp-8q88-wrvc/GHSA-28vp-8q88-wrvc.json +++ b/advisories/unreviewed/2022/05/GHSA-28vp-8q88-wrvc/GHSA-28vp-8q88-wrvc.json @@ -7,12 +7,8 @@ "CVE-2008-1782" ], "details": "phpdemo/viewsource.php in Advanced Software Engineering ChartDirector 4.1 allows remote attackers to read sensitive files via the file parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-29jr-72j5-7p98/GHSA-29jr-72j5-7p98.json b/advisories/unreviewed/2022/05/GHSA-29jr-72j5-7p98/GHSA-29jr-72j5-7p98.json index 1a7a838d24f..ebd1299f23a 100644 --- a/advisories/unreviewed/2022/05/GHSA-29jr-72j5-7p98/GHSA-29jr-72j5-7p98.json +++ b/advisories/unreviewed/2022/05/GHSA-29jr-72j5-7p98/GHSA-29jr-72j5-7p98.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-29rx-6x28-gmg7/GHSA-29rx-6x28-gmg7.json b/advisories/unreviewed/2022/05/GHSA-29rx-6x28-gmg7/GHSA-29rx-6x28-gmg7.json index 947ebcef51d..cd908df5da8 100644 --- a/advisories/unreviewed/2022/05/GHSA-29rx-6x28-gmg7/GHSA-29rx-6x28-gmg7.json +++ b/advisories/unreviewed/2022/05/GHSA-29rx-6x28-gmg7/GHSA-29rx-6x28-gmg7.json @@ -7,12 +7,8 @@ "CVE-2008-1497" ], "details": "Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-29xj-64r9-4j75/GHSA-29xj-64r9-4j75.json b/advisories/unreviewed/2022/05/GHSA-29xj-64r9-4j75/GHSA-29xj-64r9-4j75.json index f27dabda456..f5380d793a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-29xj-64r9-4j75/GHSA-29xj-64r9-4j75.json +++ b/advisories/unreviewed/2022/05/GHSA-29xj-64r9-4j75/GHSA-29xj-64r9-4j75.json @@ -7,12 +7,8 @@ "CVE-2008-1632" ], "details": "Multiple SQL injection vulnerabilities in CuteFlow 2.10.0 allow remote authenticated users to execute arbitrary SQL commands via the (1) listid parameter to pages/editmailinglist_step1.php, the (2) userid parameter to pages/edituser.php, the (3) fieldid parameter to pages/editfield.php, and the (4) templateid to pages/edittemplate_step1.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2c7j-2jp5-mx56/GHSA-2c7j-2jp5-mx56.json b/advisories/unreviewed/2022/05/GHSA-2c7j-2jp5-mx56/GHSA-2c7j-2jp5-mx56.json index c01eef3b951..4b880ca8dbb 100644 --- a/advisories/unreviewed/2022/05/GHSA-2c7j-2jp5-mx56/GHSA-2c7j-2jp5-mx56.json +++ b/advisories/unreviewed/2022/05/GHSA-2c7j-2jp5-mx56/GHSA-2c7j-2jp5-mx56.json @@ -7,12 +7,8 @@ "CVE-2019-6859" ], "details": "A CWE-798: Use of Hardcoded Credentials vulnerability exists in Modicon Controllers (All versions of the following CPUs and Communication Module product references listed in the Security Notifications), which could cause the disclosure of FTP hardcoded credentials when using the Web server of the controller on an unsecure network.Ê", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2c8x-3ppx-9gj3/GHSA-2c8x-3ppx-9gj3.json b/advisories/unreviewed/2022/05/GHSA-2c8x-3ppx-9gj3/GHSA-2c8x-3ppx-9gj3.json index 4bfbf571239..1e1e68b28ba 100644 --- a/advisories/unreviewed/2022/05/GHSA-2c8x-3ppx-9gj3/GHSA-2c8x-3ppx-9gj3.json +++ b/advisories/unreviewed/2022/05/GHSA-2c8x-3ppx-9gj3/GHSA-2c8x-3ppx-9gj3.json @@ -7,12 +7,8 @@ "CVE-2020-27839" ], "details": "A flaw was found in ceph-dashboard. The JSON Web Token (JWT) used for user authentication is stored by the frontend application in the browser’s localStorage which is potentially vulnerable to attackers via XSS attacks. The highest threat from this vulnerability is to data confidentiality and integrity.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2fgj-xr9x-3qq6/GHSA-2fgj-xr9x-3qq6.json b/advisories/unreviewed/2022/05/GHSA-2fgj-xr9x-3qq6/GHSA-2fgj-xr9x-3qq6.json index 57b982b0551..cd8e1015b92 100644 --- a/advisories/unreviewed/2022/05/GHSA-2fgj-xr9x-3qq6/GHSA-2fgj-xr9x-3qq6.json +++ b/advisories/unreviewed/2022/05/GHSA-2fgj-xr9x-3qq6/GHSA-2fgj-xr9x-3qq6.json @@ -7,12 +7,8 @@ "CVE-2008-1648" ], "details": "Sympa before 5.4 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message with a malformed value of the Content-Type header and unspecified other headers. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2fw3-wc2h-wv2q/GHSA-2fw3-wc2h-wv2q.json b/advisories/unreviewed/2022/05/GHSA-2fw3-wc2h-wv2q/GHSA-2fw3-wc2h-wv2q.json index 7a16fe29cf2..c7f4524004e 100644 --- a/advisories/unreviewed/2022/05/GHSA-2fw3-wc2h-wv2q/GHSA-2fw3-wc2h-wv2q.json +++ b/advisories/unreviewed/2022/05/GHSA-2fw3-wc2h-wv2q/GHSA-2fw3-wc2h-wv2q.json @@ -7,12 +7,8 @@ "CVE-2008-1903" ], "details": "PHP remote file inclusion vulnerability in news_show.php in Newanz NewsOffice 1.0 and 1.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the newsoffice_directory parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2g4m-frjw-86jj/GHSA-2g4m-frjw-86jj.json b/advisories/unreviewed/2022/05/GHSA-2g4m-frjw-86jj/GHSA-2g4m-frjw-86jj.json index f21b166bf07..f5d71a897e6 100644 --- a/advisories/unreviewed/2022/05/GHSA-2g4m-frjw-86jj/GHSA-2g4m-frjw-86jj.json +++ b/advisories/unreviewed/2022/05/GHSA-2g4m-frjw-86jj/GHSA-2g4m-frjw-86jj.json @@ -7,12 +7,8 @@ "CVE-2008-1836" ], "details": "The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a crafted message that produces a string that is not null terminated, which triggers a buffer over-read.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2g54-42rw-p43x/GHSA-2g54-42rw-p43x.json b/advisories/unreviewed/2022/05/GHSA-2g54-42rw-p43x/GHSA-2g54-42rw-p43x.json index 9ab4534010e..80f835f6b95 100644 --- a/advisories/unreviewed/2022/05/GHSA-2g54-42rw-p43x/GHSA-2g54-42rw-p43x.json +++ b/advisories/unreviewed/2022/05/GHSA-2g54-42rw-p43x/GHSA-2g54-42rw-p43x.json @@ -7,12 +7,8 @@ "CVE-2021-28199" ], "details": "The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2gvj-wc75-xpj8/GHSA-2gvj-wc75-xpj8.json b/advisories/unreviewed/2022/05/GHSA-2gvj-wc75-xpj8/GHSA-2gvj-wc75-xpj8.json index 3b4afcb6d99..ccfdae09d5b 100644 --- a/advisories/unreviewed/2022/05/GHSA-2gvj-wc75-xpj8/GHSA-2gvj-wc75-xpj8.json +++ b/advisories/unreviewed/2022/05/GHSA-2gvj-wc75-xpj8/GHSA-2gvj-wc75-xpj8.json @@ -7,12 +7,8 @@ "CVE-2020-15369" ], "details": "Supportlink CLI in Brocade Fabric OS Versions v8.2.1 through v8.2.1d, and 8.2.2 versions before v8.2.2c does not obfuscate the password field, which could expose users’ credentials of the remote server. An authenticated user could obtain the exposed password credentials to gain access to the remote host.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2h35-rff7-6q25/GHSA-2h35-rff7-6q25.json b/advisories/unreviewed/2022/05/GHSA-2h35-rff7-6q25/GHSA-2h35-rff7-6q25.json index 63e6e242d33..260ea9a8572 100644 --- a/advisories/unreviewed/2022/05/GHSA-2h35-rff7-6q25/GHSA-2h35-rff7-6q25.json +++ b/advisories/unreviewed/2022/05/GHSA-2h35-rff7-6q25/GHSA-2h35-rff7-6q25.json @@ -7,12 +7,8 @@ "CVE-2008-1472" ], "details": "Stack-based buffer overflow in the ListCtrl ActiveX Control (ListCtrl.ocx), as used in multiple CA products including BrightStor ARCserve Backup R11.5, Desktop Management Suite r11.1 through r11.2, and Unicenter products r11.1 through r11.2, allows remote attackers to execute arbitrary code or cause a denial of service (crash) via a long argument to the AddColumn method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2h92-3vq6-5h3x/GHSA-2h92-3vq6-5h3x.json b/advisories/unreviewed/2022/05/GHSA-2h92-3vq6-5h3x/GHSA-2h92-3vq6-5h3x.json index be14551eed1..b913dd76639 100644 --- a/advisories/unreviewed/2022/05/GHSA-2h92-3vq6-5h3x/GHSA-2h92-3vq6-5h3x.json +++ b/advisories/unreviewed/2022/05/GHSA-2h92-3vq6-5h3x/GHSA-2h92-3vq6-5h3x.json @@ -7,12 +7,8 @@ "CVE-2008-1813" ], "details": "Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote unauthenticated or authenticated attack vectors related to (1) SYS.DBMS_AQ in the Advanced Queuing component, aka DB01; (2) Core RDBMS, aka DB03; (3) SDO_GEOM in Oracle Spatial, aka DB06; (4) Export, aka DB12; and (5) DBMS_STATS in Query Optimizer, aka DB13. NOTE: the previous information was obtained from the Oracle CPU. Oracle has not commented on reliable researcher claims that DB06 is SQL injection, and DB13 occurs when the OUTLN account is reset to use a hard-coded password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2hf9-4h2w-jqc5/GHSA-2hf9-4h2w-jqc5.json b/advisories/unreviewed/2022/05/GHSA-2hf9-4h2w-jqc5/GHSA-2hf9-4h2w-jqc5.json index c79bfabe1ff..b55968bd3ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-2hf9-4h2w-jqc5/GHSA-2hf9-4h2w-jqc5.json +++ b/advisories/unreviewed/2022/05/GHSA-2hf9-4h2w-jqc5/GHSA-2hf9-4h2w-jqc5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2jhr-3qvp-vx32/GHSA-2jhr-3qvp-vx32.json b/advisories/unreviewed/2022/05/GHSA-2jhr-3qvp-vx32/GHSA-2jhr-3qvp-vx32.json index 3f3402373d7..166c8eb3b8e 100644 --- a/advisories/unreviewed/2022/05/GHSA-2jhr-3qvp-vx32/GHSA-2jhr-3qvp-vx32.json +++ b/advisories/unreviewed/2022/05/GHSA-2jhr-3qvp-vx32/GHSA-2jhr-3qvp-vx32.json @@ -7,12 +7,8 @@ "CVE-2021-24372" ], "details": "The WP Hardening – Fix Your WordPress Security WordPress plugin before 1.2.2 did not sanitise or escape the $_SERVER['REQUEST_URI'] before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2mcf-6v63-37m2/GHSA-2mcf-6v63-37m2.json b/advisories/unreviewed/2022/05/GHSA-2mcf-6v63-37m2/GHSA-2mcf-6v63-37m2.json index fe00df4c132..699013460e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-2mcf-6v63-37m2/GHSA-2mcf-6v63-37m2.json +++ b/advisories/unreviewed/2022/05/GHSA-2mcf-6v63-37m2/GHSA-2mcf-6v63-37m2.json @@ -7,12 +7,8 @@ "CVE-2008-1890" ], "details": "SQL injection vulnerability in the Jom Comment 2.0 build 345 component for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2mgp-xj4h-v78w/GHSA-2mgp-xj4h-v78w.json b/advisories/unreviewed/2022/05/GHSA-2mgp-xj4h-v78w/GHSA-2mgp-xj4h-v78w.json index 42bbbc06e33..9276fb8102e 100644 --- a/advisories/unreviewed/2022/05/GHSA-2mgp-xj4h-v78w/GHSA-2mgp-xj4h-v78w.json +++ b/advisories/unreviewed/2022/05/GHSA-2mgp-xj4h-v78w/GHSA-2mgp-xj4h-v78w.json @@ -7,12 +7,8 @@ "CVE-2008-1826" ], "details": "Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 have unknown impact and attack vectors related to (a) Advanced Pricing, aka (1) APP01 and (2) APP10; and (b) Applications Framework, aka (3) APP05.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2mr6-xpjw-3h35/GHSA-2mr6-xpjw-3h35.json b/advisories/unreviewed/2022/05/GHSA-2mr6-xpjw-3h35/GHSA-2mr6-xpjw-3h35.json index a90eebf7a9b..2e8486b9614 100644 --- a/advisories/unreviewed/2022/05/GHSA-2mr6-xpjw-3h35/GHSA-2mr6-xpjw-3h35.json +++ b/advisories/unreviewed/2022/05/GHSA-2mr6-xpjw-3h35/GHSA-2mr6-xpjw-3h35.json @@ -7,12 +7,8 @@ "CVE-2008-1896" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) Redirect parameter to login.asp and the (2) OrderBy parameter to member_send.asp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2p24-r54g-2p7g/GHSA-2p24-r54g-2p7g.json b/advisories/unreviewed/2022/05/GHSA-2p24-r54g-2p7g/GHSA-2p24-r54g-2p7g.json index 7f9c7471fd3..96121b1a04f 100644 --- a/advisories/unreviewed/2022/05/GHSA-2p24-r54g-2p7g/GHSA-2p24-r54g-2p7g.json +++ b/advisories/unreviewed/2022/05/GHSA-2p24-r54g-2p7g/GHSA-2p24-r54g-2p7g.json @@ -7,12 +7,8 @@ "CVE-2008-1909" ], "details": "SQL injection vulnerability in comment.php in PHP Knowledge Base (PHPKB) 1.5 and 2.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2p48-prhc-qmgx/GHSA-2p48-prhc-qmgx.json b/advisories/unreviewed/2022/05/GHSA-2p48-prhc-qmgx/GHSA-2p48-prhc-qmgx.json index b348109cb2a..78ab49a42c1 100644 --- a/advisories/unreviewed/2022/05/GHSA-2p48-prhc-qmgx/GHSA-2p48-prhc-qmgx.json +++ b/advisories/unreviewed/2022/05/GHSA-2p48-prhc-qmgx/GHSA-2p48-prhc-qmgx.json @@ -7,12 +7,8 @@ "CVE-2008-1531" ], "details": "The connection_state_machine function (connections.c) in lighttpd 1.4.19 and earlier, and 1.5.x before 1.5.0, allows remote attackers to cause a denial of service (active SSL connection loss) by triggering an SSL error, such as disconnecting before a download has finished, which causes all active SSL connections to be lost.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -112,9 +108,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2p7f-q43h-jg7w/GHSA-2p7f-q43h-jg7w.json b/advisories/unreviewed/2022/05/GHSA-2p7f-q43h-jg7w/GHSA-2p7f-q43h-jg7w.json index 64fb64f9240..4d1bb500c83 100644 --- a/advisories/unreviewed/2022/05/GHSA-2p7f-q43h-jg7w/GHSA-2p7f-q43h-jg7w.json +++ b/advisories/unreviewed/2022/05/GHSA-2p7f-q43h-jg7w/GHSA-2p7f-q43h-jg7w.json @@ -7,12 +7,8 @@ "CVE-2021-28181" ], "details": "The specific function in ASUS BMC’s firmware Web management page (Remote video configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2q53-8gh4-rm3f/GHSA-2q53-8gh4-rm3f.json b/advisories/unreviewed/2022/05/GHSA-2q53-8gh4-rm3f/GHSA-2q53-8gh4-rm3f.json index 9d56ba27f42..6d9049eeef3 100644 --- a/advisories/unreviewed/2022/05/GHSA-2q53-8gh4-rm3f/GHSA-2q53-8gh4-rm3f.json +++ b/advisories/unreviewed/2022/05/GHSA-2q53-8gh4-rm3f/GHSA-2q53-8gh4-rm3f.json @@ -7,12 +7,8 @@ "CVE-2008-1935" ], "details": "SQL injection vulnerability in the Filiale 1.0.4 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the idFiliale parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2q53-9g7q-p5mg/GHSA-2q53-9g7q-p5mg.json b/advisories/unreviewed/2022/05/GHSA-2q53-9g7q-p5mg/GHSA-2q53-9g7q-p5mg.json index bbf738ee458..47e25e232af 100644 --- a/advisories/unreviewed/2022/05/GHSA-2q53-9g7q-p5mg/GHSA-2q53-9g7q-p5mg.json +++ b/advisories/unreviewed/2022/05/GHSA-2q53-9g7q-p5mg/GHSA-2q53-9g7q-p5mg.json @@ -7,12 +7,8 @@ "CVE-2021-30170" ], "details": "Special characters of ERP POS customer profile page are not filtered in users’ input, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks, additionally access and manipulate customer’s information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2q7g-6q23-mgp7/GHSA-2q7g-6q23-mgp7.json b/advisories/unreviewed/2022/05/GHSA-2q7g-6q23-mgp7/GHSA-2q7g-6q23-mgp7.json index 9c088a072da..2838ee75b62 100644 --- a/advisories/unreviewed/2022/05/GHSA-2q7g-6q23-mgp7/GHSA-2q7g-6q23-mgp7.json +++ b/advisories/unreviewed/2022/05/GHSA-2q7g-6q23-mgp7/GHSA-2q7g-6q23-mgp7.json @@ -7,12 +7,8 @@ "CVE-2021-24357" ], "details": "In the Best Image Gallery & Responsive Photo Gallery – FooGallery WordPress plugin before 2.0.35, the Custom CSS field of each gallery is not properly sanitised or validated before being being output in the page where the gallery is embed, leading to a stored Cross-Site Scripting issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2qvp-9rrc-ph29/GHSA-2qvp-9rrc-ph29.json b/advisories/unreviewed/2022/05/GHSA-2qvp-9rrc-ph29/GHSA-2qvp-9rrc-ph29.json index 212dd4eeafc..e9ee7c5ee1f 100644 --- a/advisories/unreviewed/2022/05/GHSA-2qvp-9rrc-ph29/GHSA-2qvp-9rrc-ph29.json +++ b/advisories/unreviewed/2022/05/GHSA-2qvp-9rrc-ph29/GHSA-2qvp-9rrc-ph29.json @@ -7,12 +7,8 @@ "CVE-2008-1992" ], "details": "Acidcat CMS 3.4.1 does not properly restrict access to (1) default_mail_aspemail.asp, (2) default_mail_cdosys.asp or (3) default_mail_jmail.asp, which allows remote attackers to bypass restrictions and relay email messages with modified From, FromName, and To fields.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2r36-xf69-7v47/GHSA-2r36-xf69-7v47.json b/advisories/unreviewed/2022/05/GHSA-2r36-xf69-7v47/GHSA-2r36-xf69-7v47.json index 9ce3acc79fe..61cf9b9ad9c 100644 --- a/advisories/unreviewed/2022/05/GHSA-2r36-xf69-7v47/GHSA-2r36-xf69-7v47.json +++ b/advisories/unreviewed/2022/05/GHSA-2r36-xf69-7v47/GHSA-2r36-xf69-7v47.json @@ -7,12 +7,8 @@ "CVE-2008-1611" ], "details": "Stack-based buffer overflow in TFTP Server SP 1.4 for Windows allows remote attackers to cause a denial of service or execute arbitrary code via a long filename in a read or write request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2r53-mrx4-q6h9/GHSA-2r53-mrx4-q6h9.json b/advisories/unreviewed/2022/05/GHSA-2r53-mrx4-q6h9/GHSA-2r53-mrx4-q6h9.json index 7bbb4469f8e..fde32fce0b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-2r53-mrx4-q6h9/GHSA-2r53-mrx4-q6h9.json +++ b/advisories/unreviewed/2022/05/GHSA-2r53-mrx4-q6h9/GHSA-2r53-mrx4-q6h9.json @@ -7,12 +7,8 @@ "CVE-2020-1618" ], "details": "On Juniper Networks EX and QFX Series, an authentication bypass vulnerability may allow a user connected to the console port to login as root without any password. This issue might only occur in certain scenarios: • At the first reboot after performing device factory reset using the command “request system zeroize”; or • A temporary moment during the first reboot after the software upgrade when the device configured in Virtual Chassis mode. This issue affects Juniper Networks Junos OS on EX and QFX Series: 14.1X53 versions prior to 14.1X53-D53; 15.1 versions prior to 15.1R7-S4; 15.1X53 versions prior to 15.1X53-D593; 16.1 versions prior to 16.1R7-S4; 17.1 versions prior to 17.1R2-S11, 17.1R3-S1; 17.2 versions prior to 17.2R3-S3; 17.3 versions prior to 17.3R2-S5, 17.3R3-S6; 17.4 versions prior to 17.4R2-S9, 17.4R3; 18.1 versions prior to 18.1R3-S8; 18.2 versions prior to 18.2R2; 18.3 versions prior to 18.3R1-S7, 18.3R2. This issue does not affect Juniper Networks Junos OS 12.3.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2rjm-ghp4-p47r/GHSA-2rjm-ghp4-p47r.json b/advisories/unreviewed/2022/05/GHSA-2rjm-ghp4-p47r/GHSA-2rjm-ghp4-p47r.json index 3a931a2985e..9557f1324e7 100644 --- a/advisories/unreviewed/2022/05/GHSA-2rjm-ghp4-p47r/GHSA-2rjm-ghp4-p47r.json +++ b/advisories/unreviewed/2022/05/GHSA-2rjm-ghp4-p47r/GHSA-2rjm-ghp4-p47r.json @@ -7,12 +7,8 @@ "CVE-2008-1971" ], "details": "phShoutBox Final 1.5 and earlier only checks passwords when specified in $_POST, which allows remote attackers to gain privileges by setting the (1) phadmin cookie to admin.php, or (2) in 1.4 and earlier, the ssbadmin cookie to shoutadmin.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2rmr-23wf-5jvq/GHSA-2rmr-23wf-5jvq.json b/advisories/unreviewed/2022/05/GHSA-2rmr-23wf-5jvq/GHSA-2rmr-23wf-5jvq.json index b63bc475269..1990326a440 100644 --- a/advisories/unreviewed/2022/05/GHSA-2rmr-23wf-5jvq/GHSA-2rmr-23wf-5jvq.json +++ b/advisories/unreviewed/2022/05/GHSA-2rmr-23wf-5jvq/GHSA-2rmr-23wf-5jvq.json @@ -7,12 +7,8 @@ "CVE-2008-1328" ], "details": "Buffer overflow in the LGServer service in CA ARCserve Backup for Laptops and Desktops r11.0 through r11.5, and Suite 11.1 and 11.2, allows remote attackers to execute arbitrary code via unspecified \"command arguments.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2w3c-4838-666w/GHSA-2w3c-4838-666w.json b/advisories/unreviewed/2022/05/GHSA-2w3c-4838-666w/GHSA-2w3c-4838-666w.json index 0cd259801ab..6380fc7d1ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-2w3c-4838-666w/GHSA-2w3c-4838-666w.json +++ b/advisories/unreviewed/2022/05/GHSA-2w3c-4838-666w/GHSA-2w3c-4838-666w.json @@ -7,12 +7,8 @@ "CVE-2020-5785" ], "details": "Insufficient output sanitization in Teltonika firmware TRB2_R_00.02.04.3 allows an unauthenticated attacker to conduct reflected cross-site scripting via a crafted ‘action’ or ‘pkg_name’ parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2w6h-7cgj-qw4q/GHSA-2w6h-7cgj-qw4q.json b/advisories/unreviewed/2022/05/GHSA-2w6h-7cgj-qw4q/GHSA-2w6h-7cgj-qw4q.json index 801b58d5c31..91bbdf7c7b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-2w6h-7cgj-qw4q/GHSA-2w6h-7cgj-qw4q.json +++ b/advisories/unreviewed/2022/05/GHSA-2w6h-7cgj-qw4q/GHSA-2w6h-7cgj-qw4q.json @@ -14,9 +14,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2w82-h9hh-7q9j/GHSA-2w82-h9hh-7q9j.json b/advisories/unreviewed/2022/05/GHSA-2w82-h9hh-7q9j/GHSA-2w82-h9hh-7q9j.json index 1db3662c0fe..6d195ef96ba 100644 --- a/advisories/unreviewed/2022/05/GHSA-2w82-h9hh-7q9j/GHSA-2w82-h9hh-7q9j.json +++ b/advisories/unreviewed/2022/05/GHSA-2w82-h9hh-7q9j/GHSA-2w82-h9hh-7q9j.json @@ -7,12 +7,8 @@ "CVE-2020-2075" ], "details": "Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2wj4-5wq5-7h63/GHSA-2wj4-5wq5-7h63.json b/advisories/unreviewed/2022/05/GHSA-2wj4-5wq5-7h63/GHSA-2wj4-5wq5-7h63.json index cb0bef34058..19122ad9ba8 100644 --- a/advisories/unreviewed/2022/05/GHSA-2wj4-5wq5-7h63/GHSA-2wj4-5wq5-7h63.json +++ b/advisories/unreviewed/2022/05/GHSA-2wj4-5wq5-7h63/GHSA-2wj4-5wq5-7h63.json @@ -7,12 +7,8 @@ "CVE-2008-1789" ], "details": "SQL injection vulnerability in forum.php in Prozilla Forum allows remote attackers to execute arbitrary SQL commands via the forum parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2wj4-9c89-gmgp/GHSA-2wj4-9c89-gmgp.json b/advisories/unreviewed/2022/05/GHSA-2wj4-9c89-gmgp/GHSA-2wj4-9c89-gmgp.json index 766fb4f67cc..3ea259ac0b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-2wj4-9c89-gmgp/GHSA-2wj4-9c89-gmgp.json +++ b/advisories/unreviewed/2022/05/GHSA-2wj4-9c89-gmgp/GHSA-2wj4-9c89-gmgp.json @@ -7,12 +7,8 @@ "CVE-2008-1513" ], "details": "SQL injection vulnerability in index.php in Danneo CMS 0.5.1 and earlier, when the Referers statistics option is enabled, allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2x75-266m-9w92/GHSA-2x75-266m-9w92.json b/advisories/unreviewed/2022/05/GHSA-2x75-266m-9w92/GHSA-2x75-266m-9w92.json index f236c4431c4..d813d665040 100644 --- a/advisories/unreviewed/2022/05/GHSA-2x75-266m-9w92/GHSA-2x75-266m-9w92.json +++ b/advisories/unreviewed/2022/05/GHSA-2x75-266m-9w92/GHSA-2x75-266m-9w92.json @@ -7,12 +7,8 @@ "CVE-2008-1980" ], "details": "Cross-site scripting (XSS) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta1, a Drupal module, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2x9m-ghpm-wjh6/GHSA-2x9m-ghpm-wjh6.json b/advisories/unreviewed/2022/05/GHSA-2x9m-ghpm-wjh6/GHSA-2x9m-ghpm-wjh6.json index bde66156d71..7737e0a2cd9 100644 --- a/advisories/unreviewed/2022/05/GHSA-2x9m-ghpm-wjh6/GHSA-2x9m-ghpm-wjh6.json +++ b/advisories/unreviewed/2022/05/GHSA-2x9m-ghpm-wjh6/GHSA-2x9m-ghpm-wjh6.json @@ -7,12 +7,8 @@ "CVE-2020-28211" ], "details": "A CWE-863: Incorrect Authorization vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause bypass of authentication when overwriting memory using a debugger.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2x9p-553v-3rgx/GHSA-2x9p-553v-3rgx.json b/advisories/unreviewed/2022/05/GHSA-2x9p-553v-3rgx/GHSA-2x9p-553v-3rgx.json index 202dff3bbf2..71b50aa2912 100644 --- a/advisories/unreviewed/2022/05/GHSA-2x9p-553v-3rgx/GHSA-2x9p-553v-3rgx.json +++ b/advisories/unreviewed/2022/05/GHSA-2x9p-553v-3rgx/GHSA-2x9p-553v-3rgx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2xm9-jvff-c46x/GHSA-2xm9-jvff-c46x.json b/advisories/unreviewed/2022/05/GHSA-2xm9-jvff-c46x/GHSA-2xm9-jvff-c46x.json index ae23ec16af2..06b0e132101 100644 --- a/advisories/unreviewed/2022/05/GHSA-2xm9-jvff-c46x/GHSA-2xm9-jvff-c46x.json +++ b/advisories/unreviewed/2022/05/GHSA-2xm9-jvff-c46x/GHSA-2xm9-jvff-c46x.json @@ -7,12 +7,8 @@ "CVE-2008-1547" ], "details": "Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access (OWA) for Exchange Server 2003 SP2 (aka build 6.5.7638) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-322g-pxmj-97cc/GHSA-322g-pxmj-97cc.json b/advisories/unreviewed/2022/05/GHSA-322g-pxmj-97cc/GHSA-322g-pxmj-97cc.json index 75603025486..cc9162be123 100644 --- a/advisories/unreviewed/2022/05/GHSA-322g-pxmj-97cc/GHSA-322g-pxmj-97cc.json +++ b/advisories/unreviewed/2022/05/GHSA-322g-pxmj-97cc/GHSA-322g-pxmj-97cc.json @@ -7,12 +7,8 @@ "CVE-2008-1672" ], "details": "OpenSSL 0.9.8f and 0.9.8g allows remote attackers to cause a denial of service (crash) via a TLS handshake that omits the Server Key Exchange message and uses \"particular cipher suites,\" which triggers a NULL pointer dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-32j6-838m-7hxw/GHSA-32j6-838m-7hxw.json b/advisories/unreviewed/2022/05/GHSA-32j6-838m-7hxw/GHSA-32j6-838m-7hxw.json index bcc624b59aa..a6e2b34fb34 100644 --- a/advisories/unreviewed/2022/05/GHSA-32j6-838m-7hxw/GHSA-32j6-838m-7hxw.json +++ b/advisories/unreviewed/2022/05/GHSA-32j6-838m-7hxw/GHSA-32j6-838m-7hxw.json @@ -7,12 +7,8 @@ "CVE-2020-9935" ], "details": "A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.6. A user may be unexpectedly logged in to another user’s account.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-33cc-g8rq-488v/GHSA-33cc-g8rq-488v.json b/advisories/unreviewed/2022/05/GHSA-33cc-g8rq-488v/GHSA-33cc-g8rq-488v.json index d722b256abd..792459c1044 100644 --- a/advisories/unreviewed/2022/05/GHSA-33cc-g8rq-488v/GHSA-33cc-g8rq-488v.json +++ b/advisories/unreviewed/2022/05/GHSA-33cc-g8rq-488v/GHSA-33cc-g8rq-488v.json @@ -7,12 +7,8 @@ "CVE-2008-1711" ], "details": "Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-33h8-vgj5-957w/GHSA-33h8-vgj5-957w.json b/advisories/unreviewed/2022/05/GHSA-33h8-vgj5-957w/GHSA-33h8-vgj5-957w.json index 476c3fc2e82..9879571fd0a 100644 --- a/advisories/unreviewed/2022/05/GHSA-33h8-vgj5-957w/GHSA-33h8-vgj5-957w.json +++ b/advisories/unreviewed/2022/05/GHSA-33h8-vgj5-957w/GHSA-33h8-vgj5-957w.json @@ -7,12 +7,8 @@ "CVE-2008-1653" ], "details": "Directory traversal vulnerability in index.php in Sava's Link Manager 2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the q parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-33j3-x3m6-jp5m/GHSA-33j3-x3m6-jp5m.json b/advisories/unreviewed/2022/05/GHSA-33j3-x3m6-jp5m/GHSA-33j3-x3m6-jp5m.json index c0af8f7a545..67a7d794fdd 100644 --- a/advisories/unreviewed/2022/05/GHSA-33j3-x3m6-jp5m/GHSA-33j3-x3m6-jp5m.json +++ b/advisories/unreviewed/2022/05/GHSA-33j3-x3m6-jp5m/GHSA-33j3-x3m6-jp5m.json @@ -7,12 +7,8 @@ "CVE-2008-1802" ], "details": "Buffer overflow in the process_redirect_pdu (rdp.c) function in rdesktop 1.5.0 allows remote attackers to execute arbitrary code via a Remote Desktop Protocol (RDP) redirect request with modified length fields.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-347x-wrxw-wp8p/GHSA-347x-wrxw-wp8p.json b/advisories/unreviewed/2022/05/GHSA-347x-wrxw-wp8p/GHSA-347x-wrxw-wp8p.json index 9fa2e5435b0..6daf4dd901e 100644 --- a/advisories/unreviewed/2022/05/GHSA-347x-wrxw-wp8p/GHSA-347x-wrxw-wp8p.json +++ b/advisories/unreviewed/2022/05/GHSA-347x-wrxw-wp8p/GHSA-347x-wrxw-wp8p.json @@ -7,12 +7,8 @@ "CVE-2008-1470" ], "details": "Incomplete blacklist vulnerability in IISWebAgentIF.dll in the WebID RSA Authentication Agent 5.3, and possibly earlier, allows remote attackers to conduct cross-site scripting (XSS) attacks via the postdata parameter, due to an incomplete fix for CVE-2005-1118.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-34cx-gvqg-3jwv/GHSA-34cx-gvqg-3jwv.json b/advisories/unreviewed/2022/05/GHSA-34cx-gvqg-3jwv/GHSA-34cx-gvqg-3jwv.json index 008775eb06e..e0a57e8b512 100644 --- a/advisories/unreviewed/2022/05/GHSA-34cx-gvqg-3jwv/GHSA-34cx-gvqg-3jwv.json +++ b/advisories/unreviewed/2022/05/GHSA-34cx-gvqg-3jwv/GHSA-34cx-gvqg-3jwv.json @@ -7,12 +7,8 @@ "CVE-2008-1615" ], "details": "Linux kernel 2.6.18, and possibly other versions, when running on AMD64 architectures, allows local users to cause a denial of service (crash) via certain ptrace calls.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -132,9 +128,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3545-vxgq-p67f/GHSA-3545-vxgq-p67f.json b/advisories/unreviewed/2022/05/GHSA-3545-vxgq-p67f/GHSA-3545-vxgq-p67f.json index 5e337cf9424..a4a3abee59d 100644 --- a/advisories/unreviewed/2022/05/GHSA-3545-vxgq-p67f/GHSA-3545-vxgq-p67f.json +++ b/advisories/unreviewed/2022/05/GHSA-3545-vxgq-p67f/GHSA-3545-vxgq-p67f.json @@ -7,12 +7,8 @@ "CVE-2021-24348" ], "details": "The menu delete functionality of the Side Menu – add fixed side buttons WordPress plugin before 3.1.5, available to Administrator users takes the did GET parameter and uses it into an SQL statement without proper sanitisation, validation or escaping, therefore leading to a SQL Injection issue", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-36g2-h6pw-2fpg/GHSA-36g2-h6pw-2fpg.json b/advisories/unreviewed/2022/05/GHSA-36g2-h6pw-2fpg/GHSA-36g2-h6pw-2fpg.json index 19821a2ca6d..94def95f76a 100644 --- a/advisories/unreviewed/2022/05/GHSA-36g2-h6pw-2fpg/GHSA-36g2-h6pw-2fpg.json +++ b/advisories/unreviewed/2022/05/GHSA-36g2-h6pw-2fpg/GHSA-36g2-h6pw-2fpg.json @@ -7,12 +7,8 @@ "CVE-2021-24273" ], "details": "The “Clever Addons for Elementorâ€? WordPress Plugin before 2.1.0 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-36m2-mxfm-7fx8/GHSA-36m2-mxfm-7fx8.json b/advisories/unreviewed/2022/05/GHSA-36m2-mxfm-7fx8/GHSA-36m2-mxfm-7fx8.json index 1d5e3f6fa08..af65bfe428f 100644 --- a/advisories/unreviewed/2022/05/GHSA-36m2-mxfm-7fx8/GHSA-36m2-mxfm-7fx8.json +++ b/advisories/unreviewed/2022/05/GHSA-36m2-mxfm-7fx8/GHSA-36m2-mxfm-7fx8.json @@ -7,12 +7,8 @@ "CVE-2008-1999" ], "details": "Apple Safari 3.1.1 allows remote attackers to spoof the address bar by placing many \"invisible\" characters in the userinfo subcomponent of the authority component of the URL (aka the user field), as demonstrated by %E3%80%80 sequences.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-36rj-8pwq-j6gm/GHSA-36rj-8pwq-j6gm.json b/advisories/unreviewed/2022/05/GHSA-36rj-8pwq-j6gm/GHSA-36rj-8pwq-j6gm.json index f070afb0bc4..4a46b077c6e 100644 --- a/advisories/unreviewed/2022/05/GHSA-36rj-8pwq-j6gm/GHSA-36rj-8pwq-j6gm.json +++ b/advisories/unreviewed/2022/05/GHSA-36rj-8pwq-j6gm/GHSA-36rj-8pwq-j6gm.json @@ -7,12 +7,8 @@ "CVE-2008-1724" ], "details": "Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX control in vcst_en.dll 1.0.0.5 in Tumbleweed SecureTransport Server before 4.6.1 Hotfix 20 allows remote attackers to execute arbitrary code via a long remoteFile parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3728-546x-w527/GHSA-3728-546x-w527.json b/advisories/unreviewed/2022/05/GHSA-3728-546x-w527/GHSA-3728-546x-w527.json index 3d09a4366da..5c206e144c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-3728-546x-w527/GHSA-3728-546x-w527.json +++ b/advisories/unreviewed/2022/05/GHSA-3728-546x-w527/GHSA-3728-546x-w527.json @@ -7,12 +7,8 @@ "CVE-2020-27015" ], "details": "Trend Micro Antivirus for Mac 2020 (Consumer) contains an Error Message Information Disclosure vulnerability that if exploited, could allow kernel pointers and debug messages to leak to userland.\n\n\n\nAn attacker must first obtain the ability to execute high-privileged code on the target system in order to exploit this vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-37fx-4x77-f4qp/GHSA-37fx-4x77-f4qp.json b/advisories/unreviewed/2022/05/GHSA-37fx-4x77-f4qp/GHSA-37fx-4x77-f4qp.json index f11af7d117e..60e84e8d615 100644 --- a/advisories/unreviewed/2022/05/GHSA-37fx-4x77-f4qp/GHSA-37fx-4x77-f4qp.json +++ b/advisories/unreviewed/2022/05/GHSA-37fx-4x77-f4qp/GHSA-37fx-4x77-f4qp.json @@ -7,12 +7,8 @@ "CVE-2008-1667" ], "details": "The Probe Builder Service (aka PBOVISServer.exe) in European Performance Systems (EPS) Probe Builder 2.2 before A.02.20.901, as used in HP OpenView Internet Services (OVIS) on Windows, allows remote attackers to kill arbitrary processes via a process ID number in an unspecified opcode.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-37qc-9cjf-ffmp/GHSA-37qc-9cjf-ffmp.json b/advisories/unreviewed/2022/05/GHSA-37qc-9cjf-ffmp/GHSA-37qc-9cjf-ffmp.json index b73bcc86612..3db482461ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-37qc-9cjf-ffmp/GHSA-37qc-9cjf-ffmp.json +++ b/advisories/unreviewed/2022/05/GHSA-37qc-9cjf-ffmp/GHSA-37qc-9cjf-ffmp.json @@ -7,12 +7,8 @@ "CVE-2008-1602" ], "details": "Stack-based buffer overflow in Orbit downloader 2.6.3 and 2.6.4 allows remote attackers to execute arbitrary code via a long download URL, which is not properly handled during Unicode conversion for a balloon notification after a download has failed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-38mc-jpfh-xh7r/GHSA-38mc-jpfh-xh7r.json b/advisories/unreviewed/2022/05/GHSA-38mc-jpfh-xh7r/GHSA-38mc-jpfh-xh7r.json index 67921ee900e..37b4fb7993e 100644 --- a/advisories/unreviewed/2022/05/GHSA-38mc-jpfh-xh7r/GHSA-38mc-jpfh-xh7r.json +++ b/advisories/unreviewed/2022/05/GHSA-38mc-jpfh-xh7r/GHSA-38mc-jpfh-xh7r.json @@ -7,12 +7,8 @@ "CVE-2008-1471" ], "details": "The cpoint.sys driver in Panda Internet Security 2008 and Antivirus+ Firewall 2008 allows local users to cause a denial of service (system crash or kernel panic), overwrite memory, or execute arbitrary code via a crafted IOCTL request that triggers an out-of-bounds write of kernel memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-38mm-h2h2-77mm/GHSA-38mm-h2h2-77mm.json b/advisories/unreviewed/2022/05/GHSA-38mm-h2h2-77mm/GHSA-38mm-h2h2-77mm.json index 38c0fd537f9..2baeac2fd12 100644 --- a/advisories/unreviewed/2022/05/GHSA-38mm-h2h2-77mm/GHSA-38mm-h2h2-77mm.json +++ b/advisories/unreviewed/2022/05/GHSA-38mm-h2h2-77mm/GHSA-38mm-h2h2-77mm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-38pr-3m4v-749g/GHSA-38pr-3m4v-749g.json b/advisories/unreviewed/2022/05/GHSA-38pr-3m4v-749g/GHSA-38pr-3m4v-749g.json index 4c170b06c92..97866c4b3f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-38pr-3m4v-749g/GHSA-38pr-3m4v-749g.json +++ b/advisories/unreviewed/2022/05/GHSA-38pr-3m4v-749g/GHSA-38pr-3m4v-749g.json @@ -7,12 +7,8 @@ "CVE-2008-1981" ], "details": "Cross-site request forgery (CSRF) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta1, a Drupal module, allows remote attackers to perform unauthorized actions as other users via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-38r5-v3qg-5qvg/GHSA-38r5-v3qg-5qvg.json b/advisories/unreviewed/2022/05/GHSA-38r5-v3qg-5qvg/GHSA-38r5-v3qg-5qvg.json index 810cf6af52b..c27033c210f 100644 --- a/advisories/unreviewed/2022/05/GHSA-38r5-v3qg-5qvg/GHSA-38r5-v3qg-5qvg.json +++ b/advisories/unreviewed/2022/05/GHSA-38r5-v3qg-5qvg/GHSA-38r5-v3qg-5qvg.json @@ -7,12 +7,8 @@ "CVE-2008-1832" ], "details": "lib/prefs.tcl in Cecilia 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the csvers temporary file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-39cr-fcrw-jv5q/GHSA-39cr-fcrw-jv5q.json b/advisories/unreviewed/2022/05/GHSA-39cr-fcrw-jv5q/GHSA-39cr-fcrw-jv5q.json index a9dde657c42..4097590b292 100644 --- a/advisories/unreviewed/2022/05/GHSA-39cr-fcrw-jv5q/GHSA-39cr-fcrw-jv5q.json +++ b/advisories/unreviewed/2022/05/GHSA-39cr-fcrw-jv5q/GHSA-39cr-fcrw-jv5q.json @@ -7,12 +7,8 @@ "CVE-2008-1936" ], "details": "SQL injection vulnerability in index.php in Classifieds Caffe allows remote attackers to execute arbitrary SQL commands via the cat_id parameter in an add action. NOTE: this issue might be site-specific.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-39fp-4vw2-5x9f/GHSA-39fp-4vw2-5x9f.json b/advisories/unreviewed/2022/05/GHSA-39fp-4vw2-5x9f/GHSA-39fp-4vw2-5x9f.json index 60955f06902..51ebfceedc9 100644 --- a/advisories/unreviewed/2022/05/GHSA-39fp-4vw2-5x9f/GHSA-39fp-4vw2-5x9f.json +++ b/advisories/unreviewed/2022/05/GHSA-39fp-4vw2-5x9f/GHSA-39fp-4vw2-5x9f.json @@ -7,12 +7,8 @@ "CVE-2008-1727" ], "details": "KnowledgeQuest 2.5 and 2.6 does not require authentication for access to admincheck.php, which allows remote attackers to create arbitrary admin accounts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-39rw-v9vh-37g8/GHSA-39rw-v9vh-37g8.json b/advisories/unreviewed/2022/05/GHSA-39rw-v9vh-37g8/GHSA-39rw-v9vh-37g8.json index c0da06f51d7..c5b3d177d66 100644 --- a/advisories/unreviewed/2022/05/GHSA-39rw-v9vh-37g8/GHSA-39rw-v9vh-37g8.json +++ b/advisories/unreviewed/2022/05/GHSA-39rw-v9vh-37g8/GHSA-39rw-v9vh-37g8.json @@ -7,12 +7,8 @@ "CVE-2008-1921" ], "details": "SQL injection vulnerability in store_pages/category_list.php in 5th Avenue Shopping Cart 1.2 trial edition allows remote attackers to execute arbitrary SQL commands via the category_ID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3c5f-pfff-9cjf/GHSA-3c5f-pfff-9cjf.json b/advisories/unreviewed/2022/05/GHSA-3c5f-pfff-9cjf/GHSA-3c5f-pfff-9cjf.json index 46eea03fced..1035bd89eee 100644 --- a/advisories/unreviewed/2022/05/GHSA-3c5f-pfff-9cjf/GHSA-3c5f-pfff-9cjf.json +++ b/advisories/unreviewed/2022/05/GHSA-3c5f-pfff-9cjf/GHSA-3c5f-pfff-9cjf.json @@ -7,12 +7,8 @@ "CVE-2021-27408" ], "details": "The affected product is vulnerable to an out-of-bounds read, which can cause information leakage leading to arbitrary code execution if chained to the out-of-bounds write vulnerability on the Welch Allyn medical device management tools (Welch Allyn Service Tool: versions prior to v1.10, Welch Allyn Connex Device Integration Suite – Network Connectivity Engine (NCE): versions prior to v5.3, Welch Allyn Software Development Kit (SDK): versions prior to v3.2, Welch Allyn Connex Central Station (CS): versions prior to v1.8.6, Welch Allyn Service Monitor: versions prior to v1.7.0.0, Welch Allyn Connex Vital Signs Monitor (CVSM): versions prior to v2.43.02, Welch Allyn Connex Integrated Wall System (CIWS): versions prior to v2.43.02, Welch Allyn Connex Spot Monitor (CSM): versions prior to v1.52, Welch Allyn Spot Vital Signs 4400 Device (Spot 4400) / Welch Allyn Spot 4400 Vital Signs Extended Care Device: versions prior to v1.11.00).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3cc3-x3hg-mxrx/GHSA-3cc3-x3hg-mxrx.json b/advisories/unreviewed/2022/05/GHSA-3cc3-x3hg-mxrx/GHSA-3cc3-x3hg-mxrx.json index c45d035b6bb..b7041645582 100644 --- a/advisories/unreviewed/2022/05/GHSA-3cc3-x3hg-mxrx/GHSA-3cc3-x3hg-mxrx.json +++ b/advisories/unreviewed/2022/05/GHSA-3cc3-x3hg-mxrx/GHSA-3cc3-x3hg-mxrx.json @@ -7,12 +7,8 @@ "CVE-2021-28191" ], "details": "The Firmware update function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3cg8-9wqp-7hg9/GHSA-3cg8-9wqp-7hg9.json b/advisories/unreviewed/2022/05/GHSA-3cg8-9wqp-7hg9/GHSA-3cg8-9wqp-7hg9.json index e25da2fec2e..92447c6eb2f 100644 --- a/advisories/unreviewed/2022/05/GHSA-3cg8-9wqp-7hg9/GHSA-3cg8-9wqp-7hg9.json +++ b/advisories/unreviewed/2022/05/GHSA-3cg8-9wqp-7hg9/GHSA-3cg8-9wqp-7hg9.json @@ -7,12 +7,8 @@ "CVE-2019-18581" ], "details": "Dell EMC Data Protection Advisor versions 6.3, 6.4, 6.5, 18.2 versions prior to patch 83, and 19.1 versions prior to patch 71 contain a server missing authorization vulnerability in the REST API. A remote authenticated malicious user with administrative privileges may potentially exploit this vulnerability to alter the application’s allowable list of OS commands. This may lead to arbitrary OS command execution as the regular user runs the DPA service on the affected system.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3crq-c4rc-qm8q/GHSA-3crq-c4rc-qm8q.json b/advisories/unreviewed/2022/05/GHSA-3crq-c4rc-qm8q/GHSA-3crq-c4rc-qm8q.json index 9ad30c61812..c5db13a94fb 100644 --- a/advisories/unreviewed/2022/05/GHSA-3crq-c4rc-qm8q/GHSA-3crq-c4rc-qm8q.json +++ b/advisories/unreviewed/2022/05/GHSA-3crq-c4rc-qm8q/GHSA-3crq-c4rc-qm8q.json @@ -7,12 +7,8 @@ "CVE-2008-1729" ], "details": "The menu system in Drupal 6 before 6.2 has incorrect menu settings, which allows remote attackers to (1) edit the profile pages of arbitrary users, and obtain sensitive information from (2) tracker and (3) blog pages, related to a missing check for the \"access content\" permission; and (4) allows remote authenticated users, with administration page view access, to edit content types.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3cv4-wq55-4fr6/GHSA-3cv4-wq55-4fr6.json b/advisories/unreviewed/2022/05/GHSA-3cv4-wq55-4fr6/GHSA-3cv4-wq55-4fr6.json index 882a4eefba1..7c26bcf2bca 100644 --- a/advisories/unreviewed/2022/05/GHSA-3cv4-wq55-4fr6/GHSA-3cv4-wq55-4fr6.json +++ b/advisories/unreviewed/2022/05/GHSA-3cv4-wq55-4fr6/GHSA-3cv4-wq55-4fr6.json @@ -7,12 +7,8 @@ "CVE-2021-24415" ], "details": "The Polo Video Gallery – Best wordpress video gallery plugin WordPress plugin through 1.2 does not sanitise or validate the parameters from its shortcode, allowing users with a role as low as contributor to set Cross-Site Scripting payload in them which will be triggered in the page/s with the embed malicious shortcode", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3cx8-7h7w-3q66/GHSA-3cx8-7h7w-3q66.json b/advisories/unreviewed/2022/05/GHSA-3cx8-7h7w-3q66/GHSA-3cx8-7h7w-3q66.json index 1fecd912bdf..337b0a207e4 100644 --- a/advisories/unreviewed/2022/05/GHSA-3cx8-7h7w-3q66/GHSA-3cx8-7h7w-3q66.json +++ b/advisories/unreviewed/2022/05/GHSA-3cx8-7h7w-3q66/GHSA-3cx8-7h7w-3q66.json @@ -7,12 +7,8 @@ "CVE-2008-1828" ], "details": "Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.19, 8.48.16, and 8.49.09 has unknown impact and remote authenticated attack vectors, aka PSE01.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3cx9-v24x-52mr/GHSA-3cx9-v24x-52mr.json b/advisories/unreviewed/2022/05/GHSA-3cx9-v24x-52mr/GHSA-3cx9-v24x-52mr.json index 2d76327b0a9..57f363bcdb4 100644 --- a/advisories/unreviewed/2022/05/GHSA-3cx9-v24x-52mr/GHSA-3cx9-v24x-52mr.json +++ b/advisories/unreviewed/2022/05/GHSA-3cx9-v24x-52mr/GHSA-3cx9-v24x-52mr.json @@ -7,12 +7,8 @@ "CVE-2021-24737" ], "details": "The Comments – wpDiscuz WordPress plugin through 7.3.0 does not properly sanitise or escape the Follow and Unfollow messages before outputting them in the page, which could allow high privilege users to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3f98-v8mx-8cr7/GHSA-3f98-v8mx-8cr7.json b/advisories/unreviewed/2022/05/GHSA-3f98-v8mx-8cr7/GHSA-3f98-v8mx-8cr7.json index 06f0ee054e4..8975f877a99 100644 --- a/advisories/unreviewed/2022/05/GHSA-3f98-v8mx-8cr7/GHSA-3f98-v8mx-8cr7.json +++ b/advisories/unreviewed/2022/05/GHSA-3f98-v8mx-8cr7/GHSA-3f98-v8mx-8cr7.json @@ -7,12 +7,8 @@ "CVE-2008-1693" ], "details": "The CairoFont::create function in CairoFontEngine.cc in Poppler, possibly before 0.8.0, as used in Xpdf, Evince, ePDFview, KWord, and other applications, does not properly handle embedded fonts in PDF files, which allows remote attackers to execute arbitrary code via a crafted font object, related to dereferencing a function pointer associated with the type of this font object.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3fgg-46cv-wx73/GHSA-3fgg-46cv-wx73.json b/advisories/unreviewed/2022/05/GHSA-3fgg-46cv-wx73/GHSA-3fgg-46cv-wx73.json index 03fb7da4d04..e8964d9461d 100644 --- a/advisories/unreviewed/2022/05/GHSA-3fgg-46cv-wx73/GHSA-3fgg-46cv-wx73.json +++ b/advisories/unreviewed/2022/05/GHSA-3fgg-46cv-wx73/GHSA-3fgg-46cv-wx73.json @@ -7,12 +7,8 @@ "CVE-2008-1473" ], "details": "The Altiris Client Service (AClient.exe) in Symantec Altiris Deployment Solution 6.8.x before 6.9.164 allows local users to gain privileges via a \"Shatter\" style attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3g8p-r34g-j4gx/GHSA-3g8p-r34g-j4gx.json b/advisories/unreviewed/2022/05/GHSA-3g8p-r34g-j4gx/GHSA-3g8p-r34g-j4gx.json index 1dee96b912e..0cef7d03ceb 100644 --- a/advisories/unreviewed/2022/05/GHSA-3g8p-r34g-j4gx/GHSA-3g8p-r34g-j4gx.json +++ b/advisories/unreviewed/2022/05/GHSA-3g8p-r34g-j4gx/GHSA-3g8p-r34g-j4gx.json @@ -7,12 +7,8 @@ "CVE-2008-1821" ], "details": "Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.0.1.5 FIPS+, and 10.1.0.5 has unknown impact and remote attack vectors related to SYS.DBMS_AQJMS_INTERNAL, aka DB15. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not commented on reliable researcher claims that DB15 is for multiple buffer overflows in the (1) AQ$_REGISTER and (2) AQ$_UNREGISTER procedures.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3h6m-3jhx-cfg9/GHSA-3h6m-3jhx-cfg9.json b/advisories/unreviewed/2022/05/GHSA-3h6m-3jhx-cfg9/GHSA-3h6m-3jhx-cfg9.json index 511f2602086..4d7ae3a0cf7 100644 --- a/advisories/unreviewed/2022/05/GHSA-3h6m-3jhx-cfg9/GHSA-3h6m-3jhx-cfg9.json +++ b/advisories/unreviewed/2022/05/GHSA-3h6m-3jhx-cfg9/GHSA-3h6m-3jhx-cfg9.json @@ -7,12 +7,8 @@ "CVE-2021-32535" ], "details": "The vulnerability of hard-coded default credentials in QSAN SANOS allows unauthenticated remote attackers to obtain administrator’s permission and execute arbitrary functions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3hfj-wm5c-qv7r/GHSA-3hfj-wm5c-qv7r.json b/advisories/unreviewed/2022/05/GHSA-3hfj-wm5c-qv7r/GHSA-3hfj-wm5c-qv7r.json index 987c5934a40..24cb728d510 100644 --- a/advisories/unreviewed/2022/05/GHSA-3hfj-wm5c-qv7r/GHSA-3hfj-wm5c-qv7r.json +++ b/advisories/unreviewed/2022/05/GHSA-3hfj-wm5c-qv7r/GHSA-3hfj-wm5c-qv7r.json @@ -7,12 +7,8 @@ "CVE-2020-7579" ], "details": "A vulnerability has been identified in Spectrum Power™ 5 (All versions < v5.50 HF02). The web server could allow Cross-Site Scripting (XSS) attacks if unsuspecting users are tricked into accessing a malicious link. User interaction is required for a successful exploitation. If deployed according to recommended system configuration, Siemens consideres the environmental vector as CR:L/IR:M/AR:H/MAV:A (4.1).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3jmx-m4x4-rgq8/GHSA-3jmx-m4x4-rgq8.json b/advisories/unreviewed/2022/05/GHSA-3jmx-m4x4-rgq8/GHSA-3jmx-m4x4-rgq8.json index 2c342de158c..295464544ea 100644 --- a/advisories/unreviewed/2022/05/GHSA-3jmx-m4x4-rgq8/GHSA-3jmx-m4x4-rgq8.json +++ b/advisories/unreviewed/2022/05/GHSA-3jmx-m4x4-rgq8/GHSA-3jmx-m4x4-rgq8.json @@ -7,12 +7,8 @@ "CVE-2008-1501" ], "details": "The send_user_mode function in s_user.c in (1) Undernet ircu 2.10.12.12 and earlier, (2) snircd 1.3.4 and earlier, and unspecified other ircu derivatives allows remote attackers to cause a denial of service (daemon crash) via a malformed MODE command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3m4q-qm3m-pcv6/GHSA-3m4q-qm3m-pcv6.json b/advisories/unreviewed/2022/05/GHSA-3m4q-qm3m-pcv6/GHSA-3m4q-qm3m-pcv6.json index 2abbd60d9e9..e0e00eb364a 100644 --- a/advisories/unreviewed/2022/05/GHSA-3m4q-qm3m-pcv6/GHSA-3m4q-qm3m-pcv6.json +++ b/advisories/unreviewed/2022/05/GHSA-3m4q-qm3m-pcv6/GHSA-3m4q-qm3m-pcv6.json @@ -7,12 +7,8 @@ "CVE-2021-24206" ], "details": "In the Elementor Website Builder WordPress plugin before 3.1.4, the image box widget (includes/widgets/image-box.php) accepts a ‘title_size’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a modified ‘save_builder’ request containing JavaScript in the ‘title_size’ parameter, which is not filtered and is output without escaping. This JavaScript will then be executed when the saved page is viewed or previewed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3m69-5fv4-gmmr/GHSA-3m69-5fv4-gmmr.json b/advisories/unreviewed/2022/05/GHSA-3m69-5fv4-gmmr/GHSA-3m69-5fv4-gmmr.json index 2deef1ffe9f..3c1e70ed33b 100644 --- a/advisories/unreviewed/2022/05/GHSA-3m69-5fv4-gmmr/GHSA-3m69-5fv4-gmmr.json +++ b/advisories/unreviewed/2022/05/GHSA-3m69-5fv4-gmmr/GHSA-3m69-5fv4-gmmr.json @@ -7,12 +7,8 @@ "CVE-2021-24202" ], "details": "In the Elementor Website Builder WordPress plugin before 3.1.4, the heading widget (includes/widgets/heading.php) accepts a ‘header_size’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a modified ‘save_builder’ request with this parameter set to ‘script’ and combined with a ‘title’ parameter containing JavaScript, which will then be executed when the saved page is viewed or previewed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3m93-8pm8-gqxj/GHSA-3m93-8pm8-gqxj.json b/advisories/unreviewed/2022/05/GHSA-3m93-8pm8-gqxj/GHSA-3m93-8pm8-gqxj.json index 931892c4643..24286c941ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-3m93-8pm8-gqxj/GHSA-3m93-8pm8-gqxj.json +++ b/advisories/unreviewed/2022/05/GHSA-3m93-8pm8-gqxj/GHSA-3m93-8pm8-gqxj.json @@ -7,12 +7,8 @@ "CVE-2021-24731" ], "details": "The Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.7.1.6 does not properly escape user data before using it in a SQL statement in the wp-json/pie/v1/login REST API endpoint, leading to an SQL injection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3mhw-mxm8-w9rh/GHSA-3mhw-mxm8-w9rh.json b/advisories/unreviewed/2022/05/GHSA-3mhw-mxm8-w9rh/GHSA-3mhw-mxm8-w9rh.json index 09e88c69c7b..f9c190065a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-3mhw-mxm8-w9rh/GHSA-3mhw-mxm8-w9rh.json +++ b/advisories/unreviewed/2022/05/GHSA-3mhw-mxm8-w9rh/GHSA-3mhw-mxm8-w9rh.json @@ -7,12 +7,8 @@ "CVE-2020-8590" ], "details": "Clustered Data ONTAP versions prior to 9.1P18 and 9.3P12 are susceptible to a vulnerability which could allow an attacker to discover node names via AutoSupport bundles even when the –remove-private-data parameter is set to true.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3mmh-h28h-wgxq/GHSA-3mmh-h28h-wgxq.json b/advisories/unreviewed/2022/05/GHSA-3mmh-h28h-wgxq/GHSA-3mmh-h28h-wgxq.json index c0b7bf4d853..6fd1495017e 100644 --- a/advisories/unreviewed/2022/05/GHSA-3mmh-h28h-wgxq/GHSA-3mmh-h28h-wgxq.json +++ b/advisories/unreviewed/2022/05/GHSA-3mmh-h28h-wgxq/GHSA-3mmh-h28h-wgxq.json @@ -7,12 +7,8 @@ "CVE-2021-24262" ], "details": "The “WooLentor – WooCommerce Elementor Addons + Builderâ€? WordPress Plugin before 1.8.6 has a widget that is vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3mxr-2h37-xpjx/GHSA-3mxr-2h37-xpjx.json b/advisories/unreviewed/2022/05/GHSA-3mxr-2h37-xpjx/GHSA-3mxr-2h37-xpjx.json index cde6e51cfe4..b29eb870adb 100644 --- a/advisories/unreviewed/2022/05/GHSA-3mxr-2h37-xpjx/GHSA-3mxr-2h37-xpjx.json +++ b/advisories/unreviewed/2022/05/GHSA-3mxr-2h37-xpjx/GHSA-3mxr-2h37-xpjx.json @@ -7,12 +7,8 @@ "CVE-2021-24308" ], "details": "The 'State' field of the Edit profile page of the LMS by LifterLMS – Online Course, Membership & Learning Management System Plugin for WordPress plugin before 4.21.1 is not properly sanitised when output in the About section of the profile page, leading to a stored Cross-Site Scripting issue. This could allow low privilege users (such as students) to elevate their privilege via an XSS attack when an admin will view their profile.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3p5r-wcf3-c745/GHSA-3p5r-wcf3-c745.json b/advisories/unreviewed/2022/05/GHSA-3p5r-wcf3-c745/GHSA-3p5r-wcf3-c745.json index 88f4c8d60f1..07ac3659815 100644 --- a/advisories/unreviewed/2022/05/GHSA-3p5r-wcf3-c745/GHSA-3p5r-wcf3-c745.json +++ b/advisories/unreviewed/2022/05/GHSA-3p5r-wcf3-c745/GHSA-3p5r-wcf3-c745.json @@ -7,12 +7,8 @@ "CVE-2021-24659" ], "details": "The PostX – Gutenberg Blocks for Post Grid WordPress plugin before 2.4.10 allows users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks via the plugin's block.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3p74-pwfx-pcgr/GHSA-3p74-pwfx-pcgr.json b/advisories/unreviewed/2022/05/GHSA-3p74-pwfx-pcgr/GHSA-3p74-pwfx-pcgr.json index 97346ea90d0..da806758512 100644 --- a/advisories/unreviewed/2022/05/GHSA-3p74-pwfx-pcgr/GHSA-3p74-pwfx-pcgr.json +++ b/advisories/unreviewed/2022/05/GHSA-3p74-pwfx-pcgr/GHSA-3p74-pwfx-pcgr.json @@ -7,12 +7,8 @@ "CVE-2008-1923" ], "details": "The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679, when configured to allow unauthenticated calls, sends \"early audio\" to an unverified source IP address of a NEW message, which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed NEW message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3p7w-fr8h-8fxc/GHSA-3p7w-fr8h-8fxc.json b/advisories/unreviewed/2022/05/GHSA-3p7w-fr8h-8fxc/GHSA-3p7w-fr8h-8fxc.json index c087ec71fe9..ed40481f1d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-3p7w-fr8h-8fxc/GHSA-3p7w-fr8h-8fxc.json +++ b/advisories/unreviewed/2022/05/GHSA-3p7w-fr8h-8fxc/GHSA-3p7w-fr8h-8fxc.json @@ -7,12 +7,8 @@ "CVE-2021-32525" ], "details": "The same hard-coded password in QSAN Storage Manager's in the firmware allows remote attackers to access the control interface with the administrator’s credential, entering the hard-coded password of the debug mode to execute the restricted system instructions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3pgg-7mmh-564c/GHSA-3pgg-7mmh-564c.json b/advisories/unreviewed/2022/05/GHSA-3pgg-7mmh-564c/GHSA-3pgg-7mmh-564c.json index e2f983f6006..1af4ac2aa11 100644 --- a/advisories/unreviewed/2022/05/GHSA-3pgg-7mmh-564c/GHSA-3pgg-7mmh-564c.json +++ b/advisories/unreviewed/2022/05/GHSA-3pgg-7mmh-564c/GHSA-3pgg-7mmh-564c.json @@ -7,12 +7,8 @@ "CVE-2020-8143" ], "details": "An Open Redirect vulnerability was discovered in Revive Adserver version < 5.0.5 and reported by HackerOne user hoangn144. A remote attacker could trick logged-in users to open a specifically crafted link and have them redirected to any destination.The CSRF protection of the “/www/admin/*-modify.php” could be skipped if no meaningful parameter was sent. No action was performed, but the user was still redirected to the target page, specified via the “returnurl” GET parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3phg-989p-pmq6/GHSA-3phg-989p-pmq6.json b/advisories/unreviewed/2022/05/GHSA-3phg-989p-pmq6/GHSA-3phg-989p-pmq6.json index 9ceb4263152..09a658ace57 100644 --- a/advisories/unreviewed/2022/05/GHSA-3phg-989p-pmq6/GHSA-3phg-989p-pmq6.json +++ b/advisories/unreviewed/2022/05/GHSA-3phg-989p-pmq6/GHSA-3phg-989p-pmq6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3pjp-qf45-hph3/GHSA-3pjp-qf45-hph3.json b/advisories/unreviewed/2022/05/GHSA-3pjp-qf45-hph3/GHSA-3pjp-qf45-hph3.json index 7a2eae826b3..86a5eb07767 100644 --- a/advisories/unreviewed/2022/05/GHSA-3pjp-qf45-hph3/GHSA-3pjp-qf45-hph3.json +++ b/advisories/unreviewed/2022/05/GHSA-3pjp-qf45-hph3/GHSA-3pjp-qf45-hph3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3pw2-j2vj-ghmp/GHSA-3pw2-j2vj-ghmp.json b/advisories/unreviewed/2022/05/GHSA-3pw2-j2vj-ghmp/GHSA-3pw2-j2vj-ghmp.json index 25328b24746..05d8563b850 100644 --- a/advisories/unreviewed/2022/05/GHSA-3pw2-j2vj-ghmp/GHSA-3pw2-j2vj-ghmp.json +++ b/advisories/unreviewed/2022/05/GHSA-3pw2-j2vj-ghmp/GHSA-3pw2-j2vj-ghmp.json @@ -7,12 +7,8 @@ "CVE-2021-25251" ], "details": "The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program’s password protection and disable protection.\n\nAn attacker must already have administrator privileges on the machine to exploit this vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3pw9-xq5q-xv5f/GHSA-3pw9-xq5q-xv5f.json b/advisories/unreviewed/2022/05/GHSA-3pw9-xq5q-xv5f/GHSA-3pw9-xq5q-xv5f.json index 718145deb99..aa2d7463c3b 100644 --- a/advisories/unreviewed/2022/05/GHSA-3pw9-xq5q-xv5f/GHSA-3pw9-xq5q-xv5f.json +++ b/advisories/unreviewed/2022/05/GHSA-3pw9-xq5q-xv5f/GHSA-3pw9-xq5q-xv5f.json @@ -7,12 +7,8 @@ "CVE-2008-1748" ], "details": "Cisco Unified Communications Manager 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) does not properly validate SIP URLs, which allows remote attackers to cause a denial of service (service interruption) via a SIP INVITE message, aka Bug ID CSCsl22355.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3q35-r527-69h9/GHSA-3q35-r527-69h9.json b/advisories/unreviewed/2022/05/GHSA-3q35-r527-69h9/GHSA-3q35-r527-69h9.json index e5763799907..a8a8c995cc4 100644 --- a/advisories/unreviewed/2022/05/GHSA-3q35-r527-69h9/GHSA-3q35-r527-69h9.json +++ b/advisories/unreviewed/2022/05/GHSA-3q35-r527-69h9/GHSA-3q35-r527-69h9.json @@ -7,12 +7,8 @@ "CVE-2019-5168" ], "details": "An exploitable command injection vulnerability exists in the iocheckd service ‘I/O-Check’ function of the WAGO PFC 200 version 03.02.02(14). An attacker can send a specially crafted XML cache file At 0x1e8a8 the extracted domainname value from the xml file is used as an argument to /etc/config-tools/edit_dns_server domain-name=<contents of domainname node> using sprintf().This command is later executed via a call to system().", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3qjx-hh6f-4fvq/GHSA-3qjx-hh6f-4fvq.json b/advisories/unreviewed/2022/05/GHSA-3qjx-hh6f-4fvq/GHSA-3qjx-hh6f-4fvq.json index 694a475c004..06b4ea8ef7d 100644 --- a/advisories/unreviewed/2022/05/GHSA-3qjx-hh6f-4fvq/GHSA-3qjx-hh6f-4fvq.json +++ b/advisories/unreviewed/2022/05/GHSA-3qjx-hh6f-4fvq/GHSA-3qjx-hh6f-4fvq.json @@ -7,12 +7,8 @@ "CVE-2020-27254" ], "details": "Emerson Rosemount X-STREAM Gas AnalyzerX-STREAM enhanced XEGP, XEGK, XEFD, XEXF – all revisions, The affected products are vulnerable to improper authentication for accessing log and backup data, which could allow an attacker with a specially crafted URL to obtain access to sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3qrx-x6rv-w2m2/GHSA-3qrx-x6rv-w2m2.json b/advisories/unreviewed/2022/05/GHSA-3qrx-x6rv-w2m2/GHSA-3qrx-x6rv-w2m2.json index ce1c419b4ee..761bdcb1e47 100644 --- a/advisories/unreviewed/2022/05/GHSA-3qrx-x6rv-w2m2/GHSA-3qrx-x6rv-w2m2.json +++ b/advisories/unreviewed/2022/05/GHSA-3qrx-x6rv-w2m2/GHSA-3qrx-x6rv-w2m2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3rc5-9269-w9hr/GHSA-3rc5-9269-w9hr.json b/advisories/unreviewed/2022/05/GHSA-3rc5-9269-w9hr/GHSA-3rc5-9269-w9hr.json index d540e45fed3..8a2ad35541b 100644 --- a/advisories/unreviewed/2022/05/GHSA-3rc5-9269-w9hr/GHSA-3rc5-9269-w9hr.json +++ b/advisories/unreviewed/2022/05/GHSA-3rc5-9269-w9hr/GHSA-3rc5-9269-w9hr.json @@ -7,12 +7,8 @@ "CVE-2008-1785" ], "details": "delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3rfh-cr92-3h5r/GHSA-3rfh-cr92-3h5r.json b/advisories/unreviewed/2022/05/GHSA-3rfh-cr92-3h5r/GHSA-3rfh-cr92-3h5r.json index 9ea3d2e2134..fcee7abbcd8 100644 --- a/advisories/unreviewed/2022/05/GHSA-3rfh-cr92-3h5r/GHSA-3rfh-cr92-3h5r.json +++ b/advisories/unreviewed/2022/05/GHSA-3rfh-cr92-3h5r/GHSA-3rfh-cr92-3h5r.json @@ -7,12 +7,8 @@ "CVE-2019-1441" ], "details": "A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts, aka 'Win32k Graphics Remote Code Execution Vulnerability'.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3rhp-fxgx-2hgj/GHSA-3rhp-fxgx-2hgj.json b/advisories/unreviewed/2022/05/GHSA-3rhp-fxgx-2hgj/GHSA-3rhp-fxgx-2hgj.json index ac8048f9e17..9e851207cc6 100644 --- a/advisories/unreviewed/2022/05/GHSA-3rhp-fxgx-2hgj/GHSA-3rhp-fxgx-2hgj.json +++ b/advisories/unreviewed/2022/05/GHSA-3rhp-fxgx-2hgj/GHSA-3rhp-fxgx-2hgj.json @@ -7,12 +7,8 @@ "CVE-2008-1601" ], "details": "Stack-based buffer overflow in the reboot program on IBM AIX 5.2 and 5.3 allows local users in the shutdown group to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3v2r-wq2f-vmr9/GHSA-3v2r-wq2f-vmr9.json b/advisories/unreviewed/2022/05/GHSA-3v2r-wq2f-vmr9/GHSA-3v2r-wq2f-vmr9.json index 3ad615eeeb8..9d7cfefa41e 100644 --- a/advisories/unreviewed/2022/05/GHSA-3v2r-wq2f-vmr9/GHSA-3v2r-wq2f-vmr9.json +++ b/advisories/unreviewed/2022/05/GHSA-3v2r-wq2f-vmr9/GHSA-3v2r-wq2f-vmr9.json @@ -7,12 +7,8 @@ "CVE-2021-26678" ], "details": "A remote unauthenticated stored cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface of ClearPass could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim’s browser in the context of the affected interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3v37-99mq-jmgr/GHSA-3v37-99mq-jmgr.json b/advisories/unreviewed/2022/05/GHSA-3v37-99mq-jmgr/GHSA-3v37-99mq-jmgr.json index 7ab0e019cf5..267a1adbd2e 100644 --- a/advisories/unreviewed/2022/05/GHSA-3v37-99mq-jmgr/GHSA-3v37-99mq-jmgr.json +++ b/advisories/unreviewed/2022/05/GHSA-3v37-99mq-jmgr/GHSA-3v37-99mq-jmgr.json @@ -7,12 +7,8 @@ "CVE-2008-1805" ], "details": "Incomplete blacklist vulnerability in Skype 3.6.0.248, and other versions before 3.8.0.139, allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI that ends in an executable extension that is not covered by the blacklist.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3w4f-q7vp-pgj5/GHSA-3w4f-q7vp-pgj5.json b/advisories/unreviewed/2022/05/GHSA-3w4f-q7vp-pgj5/GHSA-3w4f-q7vp-pgj5.json index 6a4bc842a4c..278f1bc20c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-3w4f-q7vp-pgj5/GHSA-3w4f-q7vp-pgj5.json +++ b/advisories/unreviewed/2022/05/GHSA-3w4f-q7vp-pgj5/GHSA-3w4f-q7vp-pgj5.json @@ -7,12 +7,8 @@ "CVE-2008-1933" ], "details": "Absolute path traversal vulnerability in a certain ActiveX control in Zune allows user-assisted remote attackers to overwrite arbitrary files via the SaveToFile method. NOTE: the victim must explicitly allow the code to run.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3w7g-86jq-5rmj/GHSA-3w7g-86jq-5rmj.json b/advisories/unreviewed/2022/05/GHSA-3w7g-86jq-5rmj/GHSA-3w7g-86jq-5rmj.json index e3e8af36d81..9e2a8c05aa8 100644 --- a/advisories/unreviewed/2022/05/GHSA-3w7g-86jq-5rmj/GHSA-3w7g-86jq-5rmj.json +++ b/advisories/unreviewed/2022/05/GHSA-3w7g-86jq-5rmj/GHSA-3w7g-86jq-5rmj.json @@ -7,12 +7,8 @@ "CVE-2008-1714" ], "details": "SQL injection vulnerability in show.php in FaScript FaPhoto 1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3wp9-9gg6-rwqx/GHSA-3wp9-9gg6-rwqx.json b/advisories/unreviewed/2022/05/GHSA-3wp9-9gg6-rwqx/GHSA-3wp9-9gg6-rwqx.json index 0142962d029..ac23cb56016 100644 --- a/advisories/unreviewed/2022/05/GHSA-3wp9-9gg6-rwqx/GHSA-3wp9-9gg6-rwqx.json +++ b/advisories/unreviewed/2022/05/GHSA-3wp9-9gg6-rwqx/GHSA-3wp9-9gg6-rwqx.json @@ -7,12 +7,8 @@ "CVE-2020-10773" ], "details": "A stack information leak flaw was found in s390/s390x in the Linux kernel’s memory manager functionality, where it incorrectly writes to the /proc/sys/vm/cmm_timeout file. This flaw allows a local user to see the kernel data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3x69-95v2-m4qp/GHSA-3x69-95v2-m4qp.json b/advisories/unreviewed/2022/05/GHSA-3x69-95v2-m4qp/GHSA-3x69-95v2-m4qp.json index 3a20dcf22ec..061c18a8d3b 100644 --- a/advisories/unreviewed/2022/05/GHSA-3x69-95v2-m4qp/GHSA-3x69-95v2-m4qp.json +++ b/advisories/unreviewed/2022/05/GHSA-3x69-95v2-m4qp/GHSA-3x69-95v2-m4qp.json @@ -7,12 +7,8 @@ "CVE-2008-1716" ], "details": "Cross-site scripting (XSS) vulnerability in WoltLab Community Framework (WCF) 1.0.6 in WoltLab Burning Board 3.0.5 allows remote attackers to inject arbitrary web script or HTML via the (1) page and (2) form parameters, which are not properly handled when they are reflected back in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3xwr-fvj3-vh37/GHSA-3xwr-fvj3-vh37.json b/advisories/unreviewed/2022/05/GHSA-3xwr-fvj3-vh37/GHSA-3xwr-fvj3-vh37.json index c2bc7bd203d..d1a0ab2b177 100644 --- a/advisories/unreviewed/2022/05/GHSA-3xwr-fvj3-vh37/GHSA-3xwr-fvj3-vh37.json +++ b/advisories/unreviewed/2022/05/GHSA-3xwr-fvj3-vh37/GHSA-3xwr-fvj3-vh37.json @@ -7,12 +7,8 @@ "CVE-2008-1538" ], "details": "Cross-site scripting (XSS) vulnerability in searchAction.do in ManageEngine EventLog Analyzer 5 allows remote attackers to inject arbitrary web script or HTML via the searchText parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Fixed in EventLog Analyzer 10.0 Build 10000.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-424f-mqpf-66f3/GHSA-424f-mqpf-66f3.json b/advisories/unreviewed/2022/05/GHSA-424f-mqpf-66f3/GHSA-424f-mqpf-66f3.json index 6290863c3b4..4b1c58fee62 100644 --- a/advisories/unreviewed/2022/05/GHSA-424f-mqpf-66f3/GHSA-424f-mqpf-66f3.json +++ b/advisories/unreviewed/2022/05/GHSA-424f-mqpf-66f3/GHSA-424f-mqpf-66f3.json @@ -7,12 +7,8 @@ "CVE-2020-5645" ], "details": "Session fixation vulnerability in TCP/IP function included in the firmware of GT14 Model of GOT 1000 series (GT1455-QTBDE CoreOS version ’05.65.00.BD’ and earlier, GT1450-QMBDE CoreOS version ’05.65.00.BD’ and earlier, GT1450-QLBDE CoreOS version ’05.65.00.BD’ and earlier, GT1455HS-QTBDE CoreOS version ’05.65.00.BD’ and earlier, and GT1450HS-QMBDE CoreOS version ’05.65.00.BD’ and earlier) allows a remote unauthenticated attacker to stop the network functions of the products via a specially crafted packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-428q-fvjp-mhxg/GHSA-428q-fvjp-mhxg.json b/advisories/unreviewed/2022/05/GHSA-428q-fvjp-mhxg/GHSA-428q-fvjp-mhxg.json index f21f7649d5d..e85eaf8edb0 100644 --- a/advisories/unreviewed/2022/05/GHSA-428q-fvjp-mhxg/GHSA-428q-fvjp-mhxg.json +++ b/advisories/unreviewed/2022/05/GHSA-428q-fvjp-mhxg/GHSA-428q-fvjp-mhxg.json @@ -7,12 +7,8 @@ "CVE-2014-5086" ], "details": "A Command Execution vulnerability exists in Sphider Pro, and Sphider Plus 3.2 due to insufficient sanitization of fwrite to conf.php, which could let a remote malicious user execute arbitrary code. CVE-2014-5086 pertains to instances of fwrite in Sphider Pro and Sphider Plus only, but don’t exist in Sphider.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-42w7-p64v-gxj9/GHSA-42w7-p64v-gxj9.json b/advisories/unreviewed/2022/05/GHSA-42w7-p64v-gxj9/GHSA-42w7-p64v-gxj9.json index b1800bc0a47..2b21c67a24a 100644 --- a/advisories/unreviewed/2022/05/GHSA-42w7-p64v-gxj9/GHSA-42w7-p64v-gxj9.json +++ b/advisories/unreviewed/2022/05/GHSA-42w7-p64v-gxj9/GHSA-42w7-p64v-gxj9.json @@ -7,12 +7,8 @@ "CVE-2008-1940" ], "details": "The RBAC functionality in grsecurity before 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2 does not enforce user_transition_deny and user_transition_allow rules for the (1) sys_setfsuid and (2) sys_setfsgid calls, which allows local users to bypass restrictions for those calls.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-43mj-v3cx-q3x2/GHSA-43mj-v3cx-q3x2.json b/advisories/unreviewed/2022/05/GHSA-43mj-v3cx-q3x2/GHSA-43mj-v3cx-q3x2.json index a65b9b896b0..791bc902f01 100644 --- a/advisories/unreviewed/2022/05/GHSA-43mj-v3cx-q3x2/GHSA-43mj-v3cx-q3x2.json +++ b/advisories/unreviewed/2022/05/GHSA-43mj-v3cx-q3x2/GHSA-43mj-v3cx-q3x2.json @@ -7,12 +7,8 @@ "CVE-2021-24199" ], "details": "The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=get_wdtable&table_id=1, on the 'start' HTTP POST parameter. This allows an attacker to access all the data in the database and obtain access to the WordPress application.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-446c-vwpf-ww86/GHSA-446c-vwpf-ww86.json b/advisories/unreviewed/2022/05/GHSA-446c-vwpf-ww86/GHSA-446c-vwpf-ww86.json index dcdbe503a4a..674d65c7f9e 100644 --- a/advisories/unreviewed/2022/05/GHSA-446c-vwpf-ww86/GHSA-446c-vwpf-ww86.json +++ b/advisories/unreviewed/2022/05/GHSA-446c-vwpf-ww86/GHSA-446c-vwpf-ww86.json @@ -7,12 +7,8 @@ "CVE-2008-1917" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in AMFPHP 1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) class parameter to (a) methodTable.php, (b) code.php, and (c) details.php in browser/; and the (2) location parameter to browser/code.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4483-j8pv-wv4j/GHSA-4483-j8pv-wv4j.json b/advisories/unreviewed/2022/05/GHSA-4483-j8pv-wv4j/GHSA-4483-j8pv-wv4j.json index ef1212671ce..3d0bc5d58c6 100644 --- a/advisories/unreviewed/2022/05/GHSA-4483-j8pv-wv4j/GHSA-4483-j8pv-wv4j.json +++ b/advisories/unreviewed/2022/05/GHSA-4483-j8pv-wv4j/GHSA-4483-j8pv-wv4j.json @@ -7,12 +7,8 @@ "CVE-2021-28628" ], "details": "Adobe Experience Manager Cloud Service offering, as well as versions 6.5.8.0 (and below) is affected by a Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-44r2-g9hq-xqp6/GHSA-44r2-g9hq-xqp6.json b/advisories/unreviewed/2022/05/GHSA-44r2-g9hq-xqp6/GHSA-44r2-g9hq-xqp6.json index d845e776645..c9d5a9448be 100644 --- a/advisories/unreviewed/2022/05/GHSA-44r2-g9hq-xqp6/GHSA-44r2-g9hq-xqp6.json +++ b/advisories/unreviewed/2022/05/GHSA-44r2-g9hq-xqp6/GHSA-44r2-g9hq-xqp6.json @@ -7,12 +7,8 @@ "CVE-2008-1324" ], "details": "Multiple directory traversal vulnerabilities in index.php in Travelsized CMS 0.4.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page_id and (2) language parameters. NOTE: this might be the same issue as CVE-2008-1325.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-44v7-mg8v-q8r8/GHSA-44v7-mg8v-q8r8.json b/advisories/unreviewed/2022/05/GHSA-44v7-mg8v-q8r8/GHSA-44v7-mg8v-q8r8.json index 3bf0c13d4bd..8d0a34f538c 100644 --- a/advisories/unreviewed/2022/05/GHSA-44v7-mg8v-q8r8/GHSA-44v7-mg8v-q8r8.json +++ b/advisories/unreviewed/2022/05/GHSA-44v7-mg8v-q8r8/GHSA-44v7-mg8v-q8r8.json @@ -7,12 +7,8 @@ "CVE-2021-28194" ], "details": "The specific function in ASUS BMC’s firmware Web management page (Remote image configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-454v-7vh4-hcxm/GHSA-454v-7vh4-hcxm.json b/advisories/unreviewed/2022/05/GHSA-454v-7vh4-hcxm/GHSA-454v-7vh4-hcxm.json index 72a123cd26a..db557776edc 100644 --- a/advisories/unreviewed/2022/05/GHSA-454v-7vh4-hcxm/GHSA-454v-7vh4-hcxm.json +++ b/advisories/unreviewed/2022/05/GHSA-454v-7vh4-hcxm/GHSA-454v-7vh4-hcxm.json @@ -7,12 +7,8 @@ "CVE-2020-12851" ], "details": "Pydio Cells 2.0.4 allows an authenticated user to write or overwrite existing files in another user’s personal and cells folders (repositories) by uploading a custom generated ZIP file and leveraging the file extraction feature present in the web application. The extracted files will be placed in the targeted user folders.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-45p7-9xjf-9687/GHSA-45p7-9xjf-9687.json b/advisories/unreviewed/2022/05/GHSA-45p7-9xjf-9687/GHSA-45p7-9xjf-9687.json index d23bd667cc7..4c0592b0919 100644 --- a/advisories/unreviewed/2022/05/GHSA-45p7-9xjf-9687/GHSA-45p7-9xjf-9687.json +++ b/advisories/unreviewed/2022/05/GHSA-45p7-9xjf-9687/GHSA-45p7-9xjf-9687.json @@ -7,12 +7,8 @@ "CVE-2020-28213" ], "details": "A CWE-494: Download of Code Without Integrity Check vulnerability exists in PLC Simulator on EcoStruxureª Control Expert (now Unity Pro) (all versions) that could cause unauthorized command execution when sending specially crafted requests over Modbus.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-46j7-rwp3-929v/GHSA-46j7-rwp3-929v.json b/advisories/unreviewed/2022/05/GHSA-46j7-rwp3-929v/GHSA-46j7-rwp3-929v.json index 7ad0cb9bc58..4f0ee7e16c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-46j7-rwp3-929v/GHSA-46j7-rwp3-929v.json +++ b/advisories/unreviewed/2022/05/GHSA-46j7-rwp3-929v/GHSA-46j7-rwp3-929v.json @@ -7,12 +7,8 @@ "CVE-2008-1489" ], "details": "Integer overflow in the MP4_ReadBox_rdrf function in libmp4.c for VLC 0.8.6e allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted MP4 RDRF box that triggers a heap-based buffer overflow, a different vulnerability than CVE-2008-0984.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-483x-39x7-4vr4/GHSA-483x-39x7-4vr4.json b/advisories/unreviewed/2022/05/GHSA-483x-39x7-4vr4/GHSA-483x-39x7-4vr4.json index fb242fb8a3a..08d6471d98f 100644 --- a/advisories/unreviewed/2022/05/GHSA-483x-39x7-4vr4/GHSA-483x-39x7-4vr4.json +++ b/advisories/unreviewed/2022/05/GHSA-483x-39x7-4vr4/GHSA-483x-39x7-4vr4.json @@ -7,12 +7,8 @@ "CVE-2008-1608" ], "details": "SQL injection vulnerability in postview.php in Clever Copy 3.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter, a different vector than CVE-2008-0363 and CVE-2006-0583.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-48c6-58v7-72hf/GHSA-48c6-58v7-72hf.json b/advisories/unreviewed/2022/05/GHSA-48c6-58v7-72hf/GHSA-48c6-58v7-72hf.json index 852eb6100e5..79f450a56e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-48c6-58v7-72hf/GHSA-48c6-58v7-72hf.json +++ b/advisories/unreviewed/2022/05/GHSA-48c6-58v7-72hf/GHSA-48c6-58v7-72hf.json @@ -7,12 +7,8 @@ "CVE-2008-1919" ], "details": "SQL injection vulnerability in listtest.php in YourFreeWorld Apartment Search Script allows remote attackers to execute arbitrary SQL commands via the r parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4975-r5xj-5w3j/GHSA-4975-r5xj-5w3j.json b/advisories/unreviewed/2022/05/GHSA-4975-r5xj-5w3j/GHSA-4975-r5xj-5w3j.json index 23f7e2f3a80..7a5d26816ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-4975-r5xj-5w3j/GHSA-4975-r5xj-5w3j.json +++ b/advisories/unreviewed/2022/05/GHSA-4975-r5xj-5w3j/GHSA-4975-r5xj-5w3j.json @@ -7,12 +7,8 @@ "CVE-2008-1737" ], "details": "Sophos Anti-Virus 7.0.5, and other 7.x versions, when Runtime Behavioural Analysis is enabled, allows local users to cause a denial of service (reboot with the product disabled) and possibly gain privileges via a zero value in a certain length field in the ObjectAttributes argument to the NtCreateKey hooked System Service Descriptor Table (SSDT) function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4987-c898-3w5h/GHSA-4987-c898-3w5h.json b/advisories/unreviewed/2022/05/GHSA-4987-c898-3w5h/GHSA-4987-c898-3w5h.json index 0b41ca837ab..305b4bdd98a 100644 --- a/advisories/unreviewed/2022/05/GHSA-4987-c898-3w5h/GHSA-4987-c898-3w5h.json +++ b/advisories/unreviewed/2022/05/GHSA-4987-c898-3w5h/GHSA-4987-c898-3w5h.json @@ -7,12 +7,8 @@ "CVE-2008-1664" ], "details": "Unspecified vulnerability in libc on HP HP-UX B.11.23 and B.11.31 allows remote attackers to cause a denial of service via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-49r2-2cm3-c4fj/GHSA-49r2-2cm3-c4fj.json b/advisories/unreviewed/2022/05/GHSA-49r2-2cm3-c4fj/GHSA-49r2-2cm3-c4fj.json index 898573ffe96..98eabcf2c4a 100644 --- a/advisories/unreviewed/2022/05/GHSA-49r2-2cm3-c4fj/GHSA-49r2-2cm3-c4fj.json +++ b/advisories/unreviewed/2022/05/GHSA-49r2-2cm3-c4fj/GHSA-49r2-2cm3-c4fj.json @@ -7,12 +7,8 @@ "CVE-2008-1986" ], "details": "Cross-site scripting (XSS) vulnerability in liste_article.php in Blog Pixel Motion (aka PixelMotion) allows remote attackers to inject arbitrary web script or HTML via the jours parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-49rj-8gmm-9hrq/GHSA-49rj-8gmm-9hrq.json b/advisories/unreviewed/2022/05/GHSA-49rj-8gmm-9hrq/GHSA-49rj-8gmm-9hrq.json index 9702b0968f0..8e39bd1ce7e 100644 --- a/advisories/unreviewed/2022/05/GHSA-49rj-8gmm-9hrq/GHSA-49rj-8gmm-9hrq.json +++ b/advisories/unreviewed/2022/05/GHSA-49rj-8gmm-9hrq/GHSA-49rj-8gmm-9hrq.json @@ -7,12 +7,8 @@ "CVE-2008-1582" ], "details": "Unspecified vulnerability in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted AAC-encoded file that triggers memory corruption.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4fg8-5hwc-wg5v/GHSA-4fg8-5hwc-wg5v.json b/advisories/unreviewed/2022/05/GHSA-4fg8-5hwc-wg5v/GHSA-4fg8-5hwc-wg5v.json index 5998d3be11d..e92da4a9fce 100644 --- a/advisories/unreviewed/2022/05/GHSA-4fg8-5hwc-wg5v/GHSA-4fg8-5hwc-wg5v.json +++ b/advisories/unreviewed/2022/05/GHSA-4fg8-5hwc-wg5v/GHSA-4fg8-5hwc-wg5v.json @@ -7,12 +7,8 @@ "CVE-2008-1510" ], "details": "Cross-site scripting (XSS) vulnerability in system/workplace/admin/accounts/users_list.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the (1) searchfilter or (2) listSearchFilter parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4gc3-hqxg-hgp9/GHSA-4gc3-hqxg-hgp9.json b/advisories/unreviewed/2022/05/GHSA-4gc3-hqxg-hgp9/GHSA-4gc3-hqxg-hgp9.json index e7796aeaed4..035f7a7a29b 100644 --- a/advisories/unreviewed/2022/05/GHSA-4gc3-hqxg-hgp9/GHSA-4gc3-hqxg-hgp9.json +++ b/advisories/unreviewed/2022/05/GHSA-4gc3-hqxg-hgp9/GHSA-4gc3-hqxg-hgp9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -107,9 +105,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4gg2-gx5w-mvfg/GHSA-4gg2-gx5w-mvfg.json b/advisories/unreviewed/2022/05/GHSA-4gg2-gx5w-mvfg/GHSA-4gg2-gx5w-mvfg.json index 19b97718a53..86f130a1c72 100644 --- a/advisories/unreviewed/2022/05/GHSA-4gg2-gx5w-mvfg/GHSA-4gg2-gx5w-mvfg.json +++ b/advisories/unreviewed/2022/05/GHSA-4gg2-gx5w-mvfg/GHSA-4gg2-gx5w-mvfg.json @@ -7,12 +7,8 @@ "CVE-2021-21576" ], "details": "Dell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by tricking a victim in to following a specially crafted link.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4jhp-q4xq-hjrq/GHSA-4jhp-q4xq-hjrq.json b/advisories/unreviewed/2022/05/GHSA-4jhp-q4xq-hjrq/GHSA-4jhp-q4xq-hjrq.json index 57da9439304..a95ce399e43 100644 --- a/advisories/unreviewed/2022/05/GHSA-4jhp-q4xq-hjrq/GHSA-4jhp-q4xq-hjrq.json +++ b/advisories/unreviewed/2022/05/GHSA-4jhp-q4xq-hjrq/GHSA-4jhp-q4xq-hjrq.json @@ -7,12 +7,8 @@ "CVE-2008-1595" ], "details": "The proc filesystem in the kernel in IBM AIX 5.2 and 5.3 does not properly enforce directory permissions when a file executing from a directory has weaker permissions than the directory itself, which allows local users to obtain sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4jj5-f426-fhfh/GHSA-4jj5-f426-fhfh.json b/advisories/unreviewed/2022/05/GHSA-4jj5-f426-fhfh/GHSA-4jj5-f426-fhfh.json index c16d5b3a457..b8dcf794101 100644 --- a/advisories/unreviewed/2022/05/GHSA-4jj5-f426-fhfh/GHSA-4jj5-f426-fhfh.json +++ b/advisories/unreviewed/2022/05/GHSA-4jj5-f426-fhfh/GHSA-4jj5-f426-fhfh.json @@ -7,12 +7,8 @@ "CVE-2008-1804" ], "details": "preprocessors/spp_frag3.c in Sourcefire Snort before 2.8.1 does not properly identify packet fragments that have dissimilar TTL values, which allows remote attackers to bypass detection rules by using a different TTL for each fragment.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4mcm-8fr8-677g/GHSA-4mcm-8fr8-677g.json b/advisories/unreviewed/2022/05/GHSA-4mcm-8fr8-677g/GHSA-4mcm-8fr8-677g.json index 37b4b797cae..330c50f2167 100644 --- a/advisories/unreviewed/2022/05/GHSA-4mcm-8fr8-677g/GHSA-4mcm-8fr8-677g.json +++ b/advisories/unreviewed/2022/05/GHSA-4mcm-8fr8-677g/GHSA-4mcm-8fr8-677g.json @@ -7,12 +7,8 @@ "CVE-2008-1568" ], "details": "comix 3.6.4 allows attackers to execute arbitrary commands via a filename containing shell metacharacters that are not properly sanitized when executing the rar, unrar, or jpegtran programs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4pmx-r8q4-w4vq/GHSA-4pmx-r8q4-w4vq.json b/advisories/unreviewed/2022/05/GHSA-4pmx-r8q4-w4vq/GHSA-4pmx-r8q4-w4vq.json index b1508bf674e..4b2e0339efa 100644 --- a/advisories/unreviewed/2022/05/GHSA-4pmx-r8q4-w4vq/GHSA-4pmx-r8q4-w4vq.json +++ b/advisories/unreviewed/2022/05/GHSA-4pmx-r8q4-w4vq/GHSA-4pmx-r8q4-w4vq.json @@ -7,12 +7,8 @@ "CVE-2008-1661" ], "details": "Stack-based buffer overflow in DoubleTake.exe in HP StorageWorks Storage Mirroring (SWSM) before 4.5 SP2 allows remote attackers to execute arbitrary code via a crafted encoded authentication request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4q9c-mwqm-w5g3/GHSA-4q9c-mwqm-w5g3.json b/advisories/unreviewed/2022/05/GHSA-4q9c-mwqm-w5g3/GHSA-4q9c-mwqm-w5g3.json index 6be5d5a6498..0d8fe2ca59e 100644 --- a/advisories/unreviewed/2022/05/GHSA-4q9c-mwqm-w5g3/GHSA-4q9c-mwqm-w5g3.json +++ b/advisories/unreviewed/2022/05/GHSA-4q9c-mwqm-w5g3/GHSA-4q9c-mwqm-w5g3.json @@ -7,12 +7,8 @@ "CVE-2008-1532" ], "details": "Perlbal before 1.70, when buffered upload is enabled, allows remote attackers to cause a denial of service (crash) via a zero-byte chunked upload.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4qhm-v7jj-gh6g/GHSA-4qhm-v7jj-gh6g.json b/advisories/unreviewed/2022/05/GHSA-4qhm-v7jj-gh6g/GHSA-4qhm-v7jj-gh6g.json index 6a9b1fe2f9d..419d38c7219 100644 --- a/advisories/unreviewed/2022/05/GHSA-4qhm-v7jj-gh6g/GHSA-4qhm-v7jj-gh6g.json +++ b/advisories/unreviewed/2022/05/GHSA-4qhm-v7jj-gh6g/GHSA-4qhm-v7jj-gh6g.json @@ -7,12 +7,8 @@ "CVE-2008-1585" ], "details": "Apple QuickTime before 7.5 uses the url.dll!FileProtocolHandler handler for unrecognized URIs in qt:next attributes within SMIL text in video files, which sends these URIs to explorer.exe and thereby allows remote attackers to execute arbitrary programs, as originally demonstrated by crafted file: URLs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4qv6-g5fw-f876/GHSA-4qv6-g5fw-f876.json b/advisories/unreviewed/2022/05/GHSA-4qv6-g5fw-f876/GHSA-4qv6-g5fw-f876.json index 479c610e04a..cd870fa5ad7 100644 --- a/advisories/unreviewed/2022/05/GHSA-4qv6-g5fw-f876/GHSA-4qv6-g5fw-f876.json +++ b/advisories/unreviewed/2022/05/GHSA-4qv6-g5fw-f876/GHSA-4qv6-g5fw-f876.json @@ -7,12 +7,8 @@ "CVE-2008-1950" ], "details": "Integer signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in libgnutls in GnuTLS before 2.2.4 allows remote attackers to cause a denial of service (buffer over-read and crash) via a certain integer value in the Random field in an encrypted Client Hello message within a TLS record with an invalid Record Length, which leads to an invalid cipher padding length, aka GNUTLS-SA-2008-1-3.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -180,9 +176,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4r3g-w24c-gpr6/GHSA-4r3g-w24c-gpr6.json b/advisories/unreviewed/2022/05/GHSA-4r3g-w24c-gpr6/GHSA-4r3g-w24c-gpr6.json index 93eeb395f2c..feeb985491d 100644 --- a/advisories/unreviewed/2022/05/GHSA-4r3g-w24c-gpr6/GHSA-4r3g-w24c-gpr6.json +++ b/advisories/unreviewed/2022/05/GHSA-4r3g-w24c-gpr6/GHSA-4r3g-w24c-gpr6.json @@ -7,12 +7,8 @@ "CVE-2008-1753" ], "details": "Cross-site scripting (XSS) vulnerability in system/workplace/admin/workplace/sessions.jsp in Alkacon OpenCMS 7.0.3 allows remote attackers to inject arbitrary web script or HTML via the searchfilter parameter, a different vector than CVE-2008-1510.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4r7g-h9xg-7p27/GHSA-4r7g-h9xg-7p27.json b/advisories/unreviewed/2022/05/GHSA-4r7g-h9xg-7p27/GHSA-4r7g-h9xg-7p27.json index 73e2102256d..585548ed6c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-4r7g-h9xg-7p27/GHSA-4r7g-h9xg-7p27.json +++ b/advisories/unreviewed/2022/05/GHSA-4r7g-h9xg-7p27/GHSA-4r7g-h9xg-7p27.json @@ -7,12 +7,8 @@ "CVE-2008-1670" ], "details": "Heap-based buffer overflow in the progressive PNG Image loader (decoders/pngloader.cpp) in KHTML in KDE 4.0.x up to 4.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4r7v-8p9v-gphx/GHSA-4r7v-8p9v-gphx.json b/advisories/unreviewed/2022/05/GHSA-4r7v-8p9v-gphx/GHSA-4r7v-8p9v-gphx.json index c075baff5b5..47a6bca04d8 100644 --- a/advisories/unreviewed/2022/05/GHSA-4r7v-8p9v-gphx/GHSA-4r7v-8p9v-gphx.json +++ b/advisories/unreviewed/2022/05/GHSA-4r7v-8p9v-gphx/GHSA-4r7v-8p9v-gphx.json @@ -7,12 +7,8 @@ "CVE-2021-24178" ], "details": "The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 suffered from Cross-Site Request Forgery issues, allowing an attacker to make a logged in administrator add, edit or delete form fields, which could also lead to Stored Cross-Site Scripting issues.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4x34-22jv-cj7q/GHSA-4x34-22jv-cj7q.json b/advisories/unreviewed/2022/05/GHSA-4x34-22jv-cj7q/GHSA-4x34-22jv-cj7q.json index a293ef14c8c..571f3d5f474 100644 --- a/advisories/unreviewed/2022/05/GHSA-4x34-22jv-cj7q/GHSA-4x34-22jv-cj7q.json +++ b/advisories/unreviewed/2022/05/GHSA-4x34-22jv-cj7q/GHSA-4x34-22jv-cj7q.json @@ -7,12 +7,8 @@ "CVE-2008-1989" ], "details": "PHP remote file inclusion vulnerability in 123flashchat.php in the 123 Flash Chat 6.8.0 module for e107, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the e107path parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-528j-fmv6-v2mq/GHSA-528j-fmv6-v2mq.json b/advisories/unreviewed/2022/05/GHSA-528j-fmv6-v2mq/GHSA-528j-fmv6-v2mq.json index 415bb8c7f51..ee4047e376b 100644 --- a/advisories/unreviewed/2022/05/GHSA-528j-fmv6-v2mq/GHSA-528j-fmv6-v2mq.json +++ b/advisories/unreviewed/2022/05/GHSA-528j-fmv6-v2mq/GHSA-528j-fmv6-v2mq.json @@ -7,12 +7,8 @@ "CVE-2008-1822" ], "details": "Unspecified vulnerability in the Oracle Application Express component in Oracle Application Express 3.0.1 has unknown impact and remote attack vectors, aka APEX02.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-52h3-356x-rv36/GHSA-52h3-356x-rv36.json b/advisories/unreviewed/2022/05/GHSA-52h3-356x-rv36/GHSA-52h3-356x-rv36.json index 3a22cd47b80..cf387fc65ef 100644 --- a/advisories/unreviewed/2022/05/GHSA-52h3-356x-rv36/GHSA-52h3-356x-rv36.json +++ b/advisories/unreviewed/2022/05/GHSA-52h3-356x-rv36/GHSA-52h3-356x-rv36.json @@ -7,12 +7,8 @@ "CVE-2008-1548" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Aeries Browser Interface (ABI) 3.8.3.14 in Eagle Software Aries Student Information System allow remote attackers to inject arbitrary web script or HTML via the (1) UserName parameter to loginproc.asp and the (2) usr parameter to Login.asp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-553h-hp7x-hmwm/GHSA-553h-hp7x-hmwm.json b/advisories/unreviewed/2022/05/GHSA-553h-hp7x-hmwm/GHSA-553h-hp7x-hmwm.json index b2e7fcf6841..8301acf0c3d 100644 --- a/advisories/unreviewed/2022/05/GHSA-553h-hp7x-hmwm/GHSA-553h-hp7x-hmwm.json +++ b/advisories/unreviewed/2022/05/GHSA-553h-hp7x-hmwm/GHSA-553h-hp7x-hmwm.json @@ -7,12 +7,8 @@ "CVE-2008-1969" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Cezanne 6.5.1 and 7 allow remote attackers to inject arbitrary web script or HTML via the (1) LookUPId and (2) CbFun parameters to (a) CFLookUP.asp; (3) TitleParms, (4) WidgetsHeights, (5) WidgetsLinks, and (6) WidgetsTitles parameters to (b) CznCommon/CznCustomContainer.asp, (7) CFTARGET parameter to (c) home.asp, (8) PersonOid parameter to (d) PeopleWeb/Cards/CVCard.asp, (9) DESTLINKOID and PersonOID parameters to (e) PeopleWeb/Cards/PayrollCard.asp, and the (10) FolderTemplateId and (11) FolderTemplateName parameters to (f) PeopleWeb/CznDocFolder/CznDFStartProcess.asp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-559h-jfjm-rrc7/GHSA-559h-jfjm-rrc7.json b/advisories/unreviewed/2022/05/GHSA-559h-jfjm-rrc7/GHSA-559h-jfjm-rrc7.json index be5612a043e..c57c670e2bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-559h-jfjm-rrc7/GHSA-559h-jfjm-rrc7.json +++ b/advisories/unreviewed/2022/05/GHSA-559h-jfjm-rrc7/GHSA-559h-jfjm-rrc7.json @@ -7,12 +7,8 @@ "CVE-2008-1830" ], "details": "Unspecified vulnerability in the PeopleSoft HCM ePerformance component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9 and 9.0 has unknown impact and remote attack vectors, aka PSE03.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-55qq-jmpr-33w8/GHSA-55qq-jmpr-33w8.json b/advisories/unreviewed/2022/05/GHSA-55qq-jmpr-33w8/GHSA-55qq-jmpr-33w8.json index 5dbe04b153c..9d2a97508fe 100644 --- a/advisories/unreviewed/2022/05/GHSA-55qq-jmpr-33w8/GHSA-55qq-jmpr-33w8.json +++ b/advisories/unreviewed/2022/05/GHSA-55qq-jmpr-33w8/GHSA-55qq-jmpr-33w8.json @@ -7,12 +7,8 @@ "CVE-2008-1668" ], "details": "ftpd.c in (1) wu-ftpd 2.4.2 and (2) ftpd in HP HP-UX B.11.11 assigns uid 0 to the FTP client in certain operating-system misconfigurations in which PAM authentication can succeed even though no passwd entry is available for a user, which allows remote attackers to gain privileges, as demonstrated by a login attempt for an LDAP account when nsswitch.conf does not specify LDAP for passwd information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-56gp-xhgg-r674/GHSA-56gp-xhgg-r674.json b/advisories/unreviewed/2022/05/GHSA-56gp-xhgg-r674/GHSA-56gp-xhgg-r674.json index 092af464a3a..5ff0f36db3d 100644 --- a/advisories/unreviewed/2022/05/GHSA-56gp-xhgg-r674/GHSA-56gp-xhgg-r674.json +++ b/advisories/unreviewed/2022/05/GHSA-56gp-xhgg-r674/GHSA-56gp-xhgg-r674.json @@ -7,12 +7,8 @@ "CVE-2008-1864" ], "details": "SQL injection vulnerability in project.php in Prozilla Freelancers allows remote attackers to execute arbitrary SQL commands via the project parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-56j4-x43g-j8hc/GHSA-56j4-x43g-j8hc.json b/advisories/unreviewed/2022/05/GHSA-56j4-x43g-j8hc/GHSA-56j4-x43g-j8hc.json index ef6ec4ff15a..35d8cfd4e0c 100644 --- a/advisories/unreviewed/2022/05/GHSA-56j4-x43g-j8hc/GHSA-56j4-x43g-j8hc.json +++ b/advisories/unreviewed/2022/05/GHSA-56j4-x43g-j8hc/GHSA-56j4-x43g-j8hc.json @@ -7,12 +7,8 @@ "CVE-2008-1916" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the Ubercart 5.x before 5.x-1.0-rc1 module for Drupal allow remote attackers to inject arbitrary web script or HTML via text fields intended for the (1) address and (2) order information, which are later displayed on the order view page and unspecified other administrative pages, a different vulnerability than CVE-2008-1428.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-58rh-xrx9-j32v/GHSA-58rh-xrx9-j32v.json b/advisories/unreviewed/2022/05/GHSA-58rh-xrx9-j32v/GHSA-58rh-xrx9-j32v.json index 9d701377a5b..3f6b2f6f56c 100644 --- a/advisories/unreviewed/2022/05/GHSA-58rh-xrx9-j32v/GHSA-58rh-xrx9-j32v.json +++ b/advisories/unreviewed/2022/05/GHSA-58rh-xrx9-j32v/GHSA-58rh-xrx9-j32v.json @@ -7,12 +7,8 @@ "CVE-2008-1860" ], "details": "Static code injection vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to inject arbitrary PHP code into includes/Config.php via the default parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-594q-pjq8-44g9/GHSA-594q-pjq8-44g9.json b/advisories/unreviewed/2022/05/GHSA-594q-pjq8-44g9/GHSA-594q-pjq8-44g9.json index f13fc6e66d2..9ed7dab16b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-594q-pjq8-44g9/GHSA-594q-pjq8-44g9.json +++ b/advisories/unreviewed/2022/05/GHSA-594q-pjq8-44g9/GHSA-594q-pjq8-44g9.json @@ -7,12 +7,8 @@ "CVE-2008-1762" ], "details": "Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted scaled image pattern in an HTML CANVAS element, which triggers memory corruption.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5gp8-cj7x-g2vr/GHSA-5gp8-cj7x-g2vr.json b/advisories/unreviewed/2022/05/GHSA-5gp8-cj7x-g2vr/GHSA-5gp8-cj7x-g2vr.json index 6959a58d1b9..d45567ffeb8 100644 --- a/advisories/unreviewed/2022/05/GHSA-5gp8-cj7x-g2vr/GHSA-5gp8-cj7x-g2vr.json +++ b/advisories/unreviewed/2022/05/GHSA-5gp8-cj7x-g2vr/GHSA-5gp8-cj7x-g2vr.json @@ -7,12 +7,8 @@ "CVE-2008-1649" ], "details": "Cross-site scripting (XSS) vulnerability in staticpages/easypublish/index.php in EasyNews 4.0 allows remote attackers to inject arbitrary web script or HTML via the read parameter in an edp_pupublish action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5jcx-hp3j-qqqm/GHSA-5jcx-hp3j-qqqm.json b/advisories/unreviewed/2022/05/GHSA-5jcx-hp3j-qqqm/GHSA-5jcx-hp3j-qqqm.json index 906357ae601..97d7b85c67b 100644 --- a/advisories/unreviewed/2022/05/GHSA-5jcx-hp3j-qqqm/GHSA-5jcx-hp3j-qqqm.json +++ b/advisories/unreviewed/2022/05/GHSA-5jcx-hp3j-qqqm/GHSA-5jcx-hp3j-qqqm.json @@ -7,12 +7,8 @@ "CVE-2008-1815" ], "details": "Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote authenticated attack vectors related to DBMS_CDC_UTILITY, aka DB02. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not commented on reliable researcher claims that DB02 is for SQL injection in LOCK_CHANGE_SET.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5jhw-22jm-xp33/GHSA-5jhw-22jm-xp33.json b/advisories/unreviewed/2022/05/GHSA-5jhw-22jm-xp33/GHSA-5jhw-22jm-xp33.json index d17d5d6b5c7..dc7c8d4ef2f 100644 --- a/advisories/unreviewed/2022/05/GHSA-5jhw-22jm-xp33/GHSA-5jhw-22jm-xp33.json +++ b/advisories/unreviewed/2022/05/GHSA-5jhw-22jm-xp33/GHSA-5jhw-22jm-xp33.json @@ -7,12 +7,8 @@ "CVE-2008-1784" ], "details": "Prozilla Topsites 1.0 allows remote attackers to perform administrative actions via a direct request to (1) addu.php, (2) editu.php, and (3) uidx.php in siteadmin/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5mrf-xh4h-r8wx/GHSA-5mrf-xh4h-r8wx.json b/advisories/unreviewed/2022/05/GHSA-5mrf-xh4h-r8wx/GHSA-5mrf-xh4h-r8wx.json index 68abbfb9ba5..708b1e085c6 100644 --- a/advisories/unreviewed/2022/05/GHSA-5mrf-xh4h-r8wx/GHSA-5mrf-xh4h-r8wx.json +++ b/advisories/unreviewed/2022/05/GHSA-5mrf-xh4h-r8wx/GHSA-5mrf-xh4h-r8wx.json @@ -7,12 +7,8 @@ "CVE-2008-1949" ], "details": "The _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages within a TLS message after one has already been processed, which allows remote attackers to cause a denial of service (NULL dereference and crash) via a TLS message containing multiple Client Hello messages, aka GNUTLS-SA-2008-1-2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5q66-333v-xwqg/GHSA-5q66-333v-xwqg.json b/advisories/unreviewed/2022/05/GHSA-5q66-333v-xwqg/GHSA-5q66-333v-xwqg.json index 3299337dd5a..45d73819a4e 100644 --- a/advisories/unreviewed/2022/05/GHSA-5q66-333v-xwqg/GHSA-5q66-333v-xwqg.json +++ b/advisories/unreviewed/2022/05/GHSA-5q66-333v-xwqg/GHSA-5q66-333v-xwqg.json @@ -7,12 +7,8 @@ "CVE-2008-1983" ], "details": "Cross-site scripting (XSS) vulnerability in Advanced Electron Forum (AEF) 1.0.6 allows remote attackers to inject arbitrary web script or HTML via the beg parameter in a members action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5qfj-vf8q-qc9r/GHSA-5qfj-vf8q-qc9r.json b/advisories/unreviewed/2022/05/GHSA-5qfj-vf8q-qc9r/GHSA-5qfj-vf8q-qc9r.json index cb7e3955be7..6cebd76a812 100644 --- a/advisories/unreviewed/2022/05/GHSA-5qfj-vf8q-qc9r/GHSA-5qfj-vf8q-qc9r.json +++ b/advisories/unreviewed/2022/05/GHSA-5qfj-vf8q-qc9r/GHSA-5qfj-vf8q-qc9r.json @@ -7,12 +7,8 @@ "CVE-2008-1979" ], "details": "The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large integer value used in an increment to TCP port 41523, which triggers a buffer over-read.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5qv5-vqj3-hh8c/GHSA-5qv5-vqj3-hh8c.json b/advisories/unreviewed/2022/05/GHSA-5qv5-vqj3-hh8c/GHSA-5qv5-vqj3-hh8c.json index 6758ce4a154..00e113188db 100644 --- a/advisories/unreviewed/2022/05/GHSA-5qv5-vqj3-hh8c/GHSA-5qv5-vqj3-hh8c.json +++ b/advisories/unreviewed/2022/05/GHSA-5qv5-vqj3-hh8c/GHSA-5qv5-vqj3-hh8c.json @@ -7,12 +7,8 @@ "CVE-2008-1820" ], "details": "Unspecified vulnerability in the Data Pump component in Oracle Database 9.2.0.8, 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and remote attack vectors related to KUPF$FILE_INT, aka DB11. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not commented on reliable researcher claims that DB11 is for a buffer overflow in the SYS.KUPF$FILE_INT.GET_FULL_FILENAME procedure.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5r28-wf7x-cq3h/GHSA-5r28-wf7x-cq3h.json b/advisories/unreviewed/2022/05/GHSA-5r28-wf7x-cq3h/GHSA-5r28-wf7x-cq3h.json index 1047e957795..f29b5e83729 100644 --- a/advisories/unreviewed/2022/05/GHSA-5r28-wf7x-cq3h/GHSA-5r28-wf7x-cq3h.json +++ b/advisories/unreviewed/2022/05/GHSA-5r28-wf7x-cq3h/GHSA-5r28-wf7x-cq3h.json @@ -7,12 +7,8 @@ "CVE-2008-1580" ], "details": "CFNetwork in Safari in Apple Mac OS X before 10.5.3 automatically sends an SSL client certificate in response to a web server's certificate request, which allows remote web sites to obtain sensitive information (Subject data) from personally identifiable certificates, and use arbitrary certificates to track user activities across domains, a related issue to CVE-2007-4879.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5r3q-wwcx-pg5h/GHSA-5r3q-wwcx-pg5h.json b/advisories/unreviewed/2022/05/GHSA-5r3q-wwcx-pg5h/GHSA-5r3q-wwcx-pg5h.json index 0d17ae02bc4..c855f74b796 100644 --- a/advisories/unreviewed/2022/05/GHSA-5r3q-wwcx-pg5h/GHSA-5r3q-wwcx-pg5h.json +++ b/advisories/unreviewed/2022/05/GHSA-5r3q-wwcx-pg5h/GHSA-5r3q-wwcx-pg5h.json @@ -7,12 +7,8 @@ "CVE-2008-1982" ], "details": "SQL injection vulnerability in ss_load.php in the Spreadsheet (wpSS) 0.6 and earlier plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the ss_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5rxj-33r7-7r32/GHSA-5rxj-33r7-7r32.json b/advisories/unreviewed/2022/05/GHSA-5rxj-33r7-7r32/GHSA-5rxj-33r7-7r32.json index f2b32e9ed64..20cf1afa0d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-5rxj-33r7-7r32/GHSA-5rxj-33r7-7r32.json +++ b/advisories/unreviewed/2022/05/GHSA-5rxj-33r7-7r32/GHSA-5rxj-33r7-7r32.json @@ -7,12 +7,8 @@ "CVE-2008-1713" ], "details": "MailServer.exe in NoticeWare Email Server 4.6.1.0 allows remote attackers to cause a denial of service (application crash) via a long string to IMAP port (143/tcp).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5v43-7w6q-mpph/GHSA-5v43-7w6q-mpph.json b/advisories/unreviewed/2022/05/GHSA-5v43-7w6q-mpph/GHSA-5v43-7w6q-mpph.json index 98a940e57b2..4877582683c 100644 --- a/advisories/unreviewed/2022/05/GHSA-5v43-7w6q-mpph/GHSA-5v43-7w6q-mpph.json +++ b/advisories/unreviewed/2022/05/GHSA-5v43-7w6q-mpph/GHSA-5v43-7w6q-mpph.json @@ -7,12 +7,8 @@ "CVE-2008-1634" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in JV2 Folder Gallery 3.1 allows remote attackers to inject arbitrary web script or HTML via the image parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5w4q-jq5q-4w8j/GHSA-5w4q-jq5q-4w8j.json b/advisories/unreviewed/2022/05/GHSA-5w4q-jq5q-4w8j/GHSA-5w4q-jq5q-4w8j.json index d9523dc89d6..fe3db2c5229 100644 --- a/advisories/unreviewed/2022/05/GHSA-5w4q-jq5q-4w8j/GHSA-5w4q-jq5q-4w8j.json +++ b/advisories/unreviewed/2022/05/GHSA-5w4q-jq5q-4w8j/GHSA-5w4q-jq5q-4w8j.json @@ -7,12 +7,8 @@ "CVE-2008-1970" ], "details": "muCommander before 0.8.2 stores credentials.xml with insecure permissions, which allows local users to obtain credentials.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5wcj-vgf5-7gqg/GHSA-5wcj-vgf5-7gqg.json b/advisories/unreviewed/2022/05/GHSA-5wcj-vgf5-7gqg/GHSA-5wcj-vgf5-7gqg.json index 3b33ea15509..4ebd51e6d58 100644 --- a/advisories/unreviewed/2022/05/GHSA-5wcj-vgf5-7gqg/GHSA-5wcj-vgf5-7gqg.json +++ b/advisories/unreviewed/2022/05/GHSA-5wcj-vgf5-7gqg/GHSA-5wcj-vgf5-7gqg.json @@ -7,12 +7,8 @@ "CVE-2008-1915" ], "details": "SQL injection vulnerability in view.asp in DevWorx BlogWorx 1.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5xgx-6r7c-fw9m/GHSA-5xgx-6r7c-fw9m.json b/advisories/unreviewed/2022/05/GHSA-5xgx-6r7c-fw9m/GHSA-5xgx-6r7c-fw9m.json index 0cb30ab4701..f43da90b543 100644 --- a/advisories/unreviewed/2022/05/GHSA-5xgx-6r7c-fw9m/GHSA-5xgx-6r7c-fw9m.json +++ b/advisories/unreviewed/2022/05/GHSA-5xgx-6r7c-fw9m/GHSA-5xgx-6r7c-fw9m.json @@ -7,12 +7,8 @@ "CVE-2008-1848" ], "details": "Cross-site scripting (XSS) vulnerability in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the error parameter in a show_error action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5xpx-999q-pjr3/GHSA-5xpx-999q-pjr3.json b/advisories/unreviewed/2022/05/GHSA-5xpx-999q-pjr3/GHSA-5xpx-999q-pjr3.json index d044b4f9822..a082622fe87 100644 --- a/advisories/unreviewed/2022/05/GHSA-5xpx-999q-pjr3/GHSA-5xpx-999q-pjr3.json +++ b/advisories/unreviewed/2022/05/GHSA-5xpx-999q-pjr3/GHSA-5xpx-999q-pjr3.json @@ -7,12 +7,8 @@ "CVE-2008-1565" ], "details": "Directory traversal vulnerability in forum/irc/irc.php in the PJIRC 0.5 module for phpBB allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the phpEx parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-62fq-q4f8-f9hj/GHSA-62fq-q4f8-f9hj.json b/advisories/unreviewed/2022/05/GHSA-62fq-q4f8-f9hj/GHSA-62fq-q4f8-f9hj.json index 6da5c63dcfc..1c98aff39b8 100644 --- a/advisories/unreviewed/2022/05/GHSA-62fq-q4f8-f9hj/GHSA-62fq-q4f8-f9hj.json +++ b/advisories/unreviewed/2022/05/GHSA-62fq-q4f8-f9hj/GHSA-62fq-q4f8-f9hj.json @@ -7,12 +7,8 @@ "CVE-2008-2001" ], "details": "Apple Safari 3.1.1 allows remote attackers to cause a denial of service (application crash) via a file:///%E2 link that triggers an out-of-bounds access, possibly due to a NULL pointer dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-62r2-c7rp-f6pf/GHSA-62r2-c7rp-f6pf.json b/advisories/unreviewed/2022/05/GHSA-62r2-c7rp-f6pf/GHSA-62r2-c7rp-f6pf.json index 9f18cd7fdcd..ff94f4eb040 100644 --- a/advisories/unreviewed/2022/05/GHSA-62r2-c7rp-f6pf/GHSA-62r2-c7rp-f6pf.json +++ b/advisories/unreviewed/2022/05/GHSA-62r2-c7rp-f6pf/GHSA-62r2-c7rp-f6pf.json @@ -7,12 +7,8 @@ "CVE-2008-1772" ], "details": "iScripts SocialWare stores passwords in cleartext in a database, which allows context-dependent attackers to obtain sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6398-wx75-gg5p/GHSA-6398-wx75-gg5p.json b/advisories/unreviewed/2022/05/GHSA-6398-wx75-gg5p/GHSA-6398-wx75-gg5p.json index d1cec42b797..b55658ff286 100644 --- a/advisories/unreviewed/2022/05/GHSA-6398-wx75-gg5p/GHSA-6398-wx75-gg5p.json +++ b/advisories/unreviewed/2022/05/GHSA-6398-wx75-gg5p/GHSA-6398-wx75-gg5p.json @@ -7,12 +7,8 @@ "CVE-2008-1752" ], "details": "ezRADIUS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials via a direct request for (1) config.ini or (2) database.ini. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6434-wmmx-62x9/GHSA-6434-wmmx-62x9.json b/advisories/unreviewed/2022/05/GHSA-6434-wmmx-62x9/GHSA-6434-wmmx-62x9.json index 233416db241..27e62005fb4 100644 --- a/advisories/unreviewed/2022/05/GHSA-6434-wmmx-62x9/GHSA-6434-wmmx-62x9.json +++ b/advisories/unreviewed/2022/05/GHSA-6434-wmmx-62x9/GHSA-6434-wmmx-62x9.json @@ -7,12 +7,8 @@ "CVE-2008-1954" ], "details": "SQL injection vulnerability in one_day.php in Web Calendar Pro 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the user_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6443-g69m-2px6/GHSA-6443-g69m-2px6.json b/advisories/unreviewed/2022/05/GHSA-6443-g69m-2px6/GHSA-6443-g69m-2px6.json index 9c535512fa9..ef6d430510e 100644 --- a/advisories/unreviewed/2022/05/GHSA-6443-g69m-2px6/GHSA-6443-g69m-2px6.json +++ b/advisories/unreviewed/2022/05/GHSA-6443-g69m-2px6/GHSA-6443-g69m-2px6.json @@ -7,12 +7,8 @@ "CVE-2008-1655" ], "details": "Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to conduct DNS rebinding attacks via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6469-gwvg-3hgj/GHSA-6469-gwvg-3hgj.json b/advisories/unreviewed/2022/05/GHSA-6469-gwvg-3hgj/GHSA-6469-gwvg-3hgj.json index 1d270186f23..78e1e9e071f 100644 --- a/advisories/unreviewed/2022/05/GHSA-6469-gwvg-3hgj/GHSA-6469-gwvg-3hgj.json +++ b/advisories/unreviewed/2022/05/GHSA-6469-gwvg-3hgj/GHSA-6469-gwvg-3hgj.json @@ -7,12 +7,8 @@ "CVE-2008-1701" ], "details": "Novell NetWare 6.5 allows attackers to cause a denial of service (ABEND) via a crafted Macintosh iPrint client request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-648p-mq4j-j46q/GHSA-648p-mq4j-j46q.json b/advisories/unreviewed/2022/05/GHSA-648p-mq4j-j46q/GHSA-648p-mq4j-j46q.json index a23555a3556..be1e58ffcd2 100644 --- a/advisories/unreviewed/2022/05/GHSA-648p-mq4j-j46q/GHSA-648p-mq4j-j46q.json +++ b/advisories/unreviewed/2022/05/GHSA-648p-mq4j-j46q/GHSA-648p-mq4j-j46q.json @@ -7,12 +7,8 @@ "CVE-2008-1708" ], "details": "IBM solidDB 06.00.1018 and earlier does not validate a certain field that specifies an amount of memory to allocate, which allows remote attackers to cause a denial of service (daemon exit) via a packet with a large value in this field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-65rx-r9qv-9gpq/GHSA-65rx-r9qv-9gpq.json b/advisories/unreviewed/2022/05/GHSA-65rx-r9qv-9gpq/GHSA-65rx-r9qv-9gpq.json index b13e02098e0..a8f63b93872 100644 --- a/advisories/unreviewed/2022/05/GHSA-65rx-r9qv-9gpq/GHSA-65rx-r9qv-9gpq.json +++ b/advisories/unreviewed/2022/05/GHSA-65rx-r9qv-9gpq/GHSA-65rx-r9qv-9gpq.json @@ -7,12 +7,8 @@ "CVE-2008-1984" ], "details": "The eTrust Common Services (Transport) Daemon (eCSqdmn) in CA Secure Content Manager 8.0.28000.511 and earlier allows remote attackers to cause a denial of service (crash or CPU consumption) via a malformed packet to TCP port 1882.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-693w-9mm2-8px6/GHSA-693w-9mm2-8px6.json b/advisories/unreviewed/2022/05/GHSA-693w-9mm2-8px6/GHSA-693w-9mm2-8px6.json index a1b52989308..26eee257802 100644 --- a/advisories/unreviewed/2022/05/GHSA-693w-9mm2-8px6/GHSA-693w-9mm2-8px6.json +++ b/advisories/unreviewed/2022/05/GHSA-693w-9mm2-8px6/GHSA-693w-9mm2-8px6.json @@ -7,12 +7,8 @@ "CVE-2008-2006" ], "details": "Apple iCal 3.0.1 on Mac OS X allows remote CalDAV servers, and user-assisted remote attackers, to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via a .ics file containing (1) a large 16-bit integer on a TRIGGER line, or (2) a large integer in a COUNT field on an RRULE line.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6f4x-qpcm-fjhq/GHSA-6f4x-qpcm-fjhq.json b/advisories/unreviewed/2022/05/GHSA-6f4x-qpcm-fjhq/GHSA-6f4x-qpcm-fjhq.json index 1e8f40b5519..054c1add818 100644 --- a/advisories/unreviewed/2022/05/GHSA-6f4x-qpcm-fjhq/GHSA-6f4x-qpcm-fjhq.json +++ b/advisories/unreviewed/2022/05/GHSA-6f4x-qpcm-fjhq/GHSA-6f4x-qpcm-fjhq.json @@ -7,12 +7,8 @@ "CVE-2008-1691" ], "details": "Unspecified vulnerability in SLMail.exe in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (UDP service outage) via a large packet to UDP port 54. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6ggg-h6w8-3p8f/GHSA-6ggg-h6w8-3p8f.json b/advisories/unreviewed/2022/05/GHSA-6ggg-h6w8-3p8f/GHSA-6ggg-h6w8-3p8f.json index 2ffcc42fed8..525ad3f6393 100644 --- a/advisories/unreviewed/2022/05/GHSA-6ggg-h6w8-3p8f/GHSA-6ggg-h6w8-3p8f.json +++ b/advisories/unreviewed/2022/05/GHSA-6ggg-h6w8-3p8f/GHSA-6ggg-h6w8-3p8f.json @@ -7,12 +7,8 @@ "CVE-2008-1861" ], "details": "Directory traversal vulnerability in modules/threadstop/threadstop.php in ExBB Italia 0.22 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the exbb[default_lang] parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6gjh-h486-gr33/GHSA-6gjh-h486-gr33.json b/advisories/unreviewed/2022/05/GHSA-6gjh-h486-gr33/GHSA-6gjh-h486-gr33.json index 9ce34d4a75f..bdfbd878cc4 100644 --- a/advisories/unreviewed/2022/05/GHSA-6gjh-h486-gr33/GHSA-6gjh-h486-gr33.json +++ b/advisories/unreviewed/2022/05/GHSA-6gjh-h486-gr33/GHSA-6gjh-h486-gr33.json @@ -7,12 +7,8 @@ "CVE-2008-1617" ], "details": "Double free vulnerability in Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to execute arbitrary code via JavaScript that sets the Server property to a string, then sets the string to null.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6gmj-5hf7-3xr4/GHSA-6gmj-5hf7-3xr4.json b/advisories/unreviewed/2022/05/GHSA-6gmj-5hf7-3xr4/GHSA-6gmj-5hf7-3xr4.json index 351052bb340..e43cec206ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-6gmj-5hf7-3xr4/GHSA-6gmj-5hf7-3xr4.json +++ b/advisories/unreviewed/2022/05/GHSA-6gmj-5hf7-3xr4/GHSA-6gmj-5hf7-3xr4.json @@ -7,12 +7,8 @@ "CVE-2020-8340" ], "details": "A cross-site scripting (XSS) vulnerability was discovered in the legacy IBM and Lenovo System x IMM2 (Integrated Management Module 2), prior to version 5.60, embedded Baseboard Management Controller (BMC) web interface during an internal security review. This vulnerability could allow JavaScript code to be executed in the user's web browser if the user is convinced to visit a crafted URL, possibly through phishing. Successful exploitation requires specific knowledge about the user’s network to be included in the crafted URL. Impact is limited to the normal access restrictions and permissions of the user clicking the crafted URL, and subject to the user being able to connect to and already being authenticated to IMM2 or other systems. The JavaScript code is not executed on IMM2 itself.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6gph-f755-prg4/GHSA-6gph-f755-prg4.json b/advisories/unreviewed/2022/05/GHSA-6gph-f755-prg4/GHSA-6gph-f755-prg4.json index d4d8ce1538d..c0c0d54e0a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-6gph-f755-prg4/GHSA-6gph-f755-prg4.json +++ b/advisories/unreviewed/2022/05/GHSA-6gph-f755-prg4/GHSA-6gph-f755-prg4.json @@ -7,12 +7,8 @@ "CVE-2008-1600" ], "details": "The lsmcode program on IBM AIX 5.2, 5.3, and 6.1 does not properly handle environment variables, which allows local users to gain privileges, a different vulnerability than CVE-2004-1329.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6h3g-g32r-8ff5/GHSA-6h3g-g32r-8ff5.json b/advisories/unreviewed/2022/05/GHSA-6h3g-g32r-8ff5/GHSA-6h3g-g32r-8ff5.json index b01d6f2de33..4a5b99b0a92 100644 --- a/advisories/unreviewed/2022/05/GHSA-6h3g-g32r-8ff5/GHSA-6h3g-g32r-8ff5.json +++ b/advisories/unreviewed/2022/05/GHSA-6h3g-g32r-8ff5/GHSA-6h3g-g32r-8ff5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6j6h-j76r-j3cr/GHSA-6j6h-j76r-j3cr.json b/advisories/unreviewed/2022/05/GHSA-6j6h-j76r-j3cr/GHSA-6j6h-j76r-j3cr.json index c6f030a1c67..a7c22440345 100644 --- a/advisories/unreviewed/2022/05/GHSA-6j6h-j76r-j3cr/GHSA-6j6h-j76r-j3cr.json +++ b/advisories/unreviewed/2022/05/GHSA-6j6h-j76r-j3cr/GHSA-6j6h-j76r-j3cr.json @@ -7,12 +7,8 @@ "CVE-2020-9740" ], "details": "AEM versions 6.5.5.0 (and below), 6.4.8.1 (and below), 6.3.3.8 (and below) and 6.2 SP1-CFP20 (and below) are affected by a stored XSS vulnerability that allows users with 'Author' privileges to store malicious scripts in fields associated with the Design Importer. These scripts may be executed in a victim’s browser when they open the page containing the vulnerable field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6jwx-qcgg-f7xj/GHSA-6jwx-qcgg-f7xj.json b/advisories/unreviewed/2022/05/GHSA-6jwx-qcgg-f7xj/GHSA-6jwx-qcgg-f7xj.json index e7ad4df0cc5..3a956372476 100644 --- a/advisories/unreviewed/2022/05/GHSA-6jwx-qcgg-f7xj/GHSA-6jwx-qcgg-f7xj.json +++ b/advisories/unreviewed/2022/05/GHSA-6jwx-qcgg-f7xj/GHSA-6jwx-qcgg-f7xj.json @@ -7,12 +7,8 @@ "CVE-2008-1702" ], "details": "Absolute path traversal vulnerability in dload.php in the my_gallery 2.3 plugin for e107 allows remote attackers to obtain sensitive information via a full pathname in the file parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6mv6-6g96-82f9/GHSA-6mv6-6g96-82f9.json b/advisories/unreviewed/2022/05/GHSA-6mv6-6g96-82f9/GHSA-6mv6-6g96-82f9.json index c46fada0d90..a4d187e3611 100644 --- a/advisories/unreviewed/2022/05/GHSA-6mv6-6g96-82f9/GHSA-6mv6-6g96-82f9.json +++ b/advisories/unreviewed/2022/05/GHSA-6mv6-6g96-82f9/GHSA-6mv6-6g96-82f9.json @@ -7,12 +7,8 @@ "CVE-2008-1888" ], "details": "Cross-site scripting (XSS) vulnerability in Microsoft Windows SharePoint Services 2.0 allows remote attackers to inject arbitrary web script or HTML via the Picture Source (aka picture object source) field in the Rich Text Editor.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6q6r-35w2-rr9m/GHSA-6q6r-35w2-rr9m.json b/advisories/unreviewed/2022/05/GHSA-6q6r-35w2-rr9m/GHSA-6q6r-35w2-rr9m.json index 5ee4e5d65c1..b2a3fb8606a 100644 --- a/advisories/unreviewed/2022/05/GHSA-6q6r-35w2-rr9m/GHSA-6q6r-35w2-rr9m.json +++ b/advisories/unreviewed/2022/05/GHSA-6q6r-35w2-rr9m/GHSA-6q6r-35w2-rr9m.json @@ -14,9 +14,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6rhq-jp74-wpph/GHSA-6rhq-jp74-wpph.json b/advisories/unreviewed/2022/05/GHSA-6rhq-jp74-wpph/GHSA-6rhq-jp74-wpph.json index 70ec9079688..1b352bce410 100644 --- a/advisories/unreviewed/2022/05/GHSA-6rhq-jp74-wpph/GHSA-6rhq-jp74-wpph.json +++ b/advisories/unreviewed/2022/05/GHSA-6rhq-jp74-wpph/GHSA-6rhq-jp74-wpph.json @@ -7,12 +7,8 @@ "CVE-2008-1995" ], "details": "Sun Java System Directory Proxy Server 6.0, 6.1, and 6.2 classifies a connection using the \"bind-dn\" criteria, which can cause an incorrect application of policy and allows remote attackers to bypass intended access restrictions for the server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6vc9-82jx-wwx7/GHSA-6vc9-82jx-wwx7.json b/advisories/unreviewed/2022/05/GHSA-6vc9-82jx-wwx7/GHSA-6vc9-82jx-wwx7.json index ad64ebe66e8..db7ac1ee9da 100644 --- a/advisories/unreviewed/2022/05/GHSA-6vc9-82jx-wwx7/GHSA-6vc9-82jx-wwx7.json +++ b/advisories/unreviewed/2022/05/GHSA-6vc9-82jx-wwx7/GHSA-6vc9-82jx-wwx7.json @@ -7,12 +7,8 @@ "CVE-2008-1646" ], "details": "SQL injection vulnerability in wp-download.php in the WP-Download 1.2 plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the dl_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6x78-v2jf-4v8h/GHSA-6x78-v2jf-4v8h.json b/advisories/unreviewed/2022/05/GHSA-6x78-v2jf-4v8h/GHSA-6x78-v2jf-4v8h.json index 29152134e23..eeb428cefca 100644 --- a/advisories/unreviewed/2022/05/GHSA-6x78-v2jf-4v8h/GHSA-6x78-v2jf-4v8h.json +++ b/advisories/unreviewed/2022/05/GHSA-6x78-v2jf-4v8h/GHSA-6x78-v2jf-4v8h.json @@ -7,12 +7,8 @@ "CVE-2008-1689" ], "details": "Stack consumption vulnerability in WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (daemon crash) via a long request header in an HTTP request to TCP port 801. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6xrc-w97f-j5jp/GHSA-6xrc-w97f-j5jp.json b/advisories/unreviewed/2022/05/GHSA-6xrc-w97f-j5jp/GHSA-6xrc-w97f-j5jp.json index 53e55bf59a2..8642ae2211e 100644 --- a/advisories/unreviewed/2022/05/GHSA-6xrc-w97f-j5jp/GHSA-6xrc-w97f-j5jp.json +++ b/advisories/unreviewed/2022/05/GHSA-6xrc-w97f-j5jp/GHSA-6xrc-w97f-j5jp.json @@ -7,12 +7,8 @@ "CVE-2020-6650" ], "details": "UPS companion software v1.05 & Prior is affected by ‘Eval Injection’ vulnerability. The software does not neutralize or incorrectly neutralizes code syntax before using the input in a dynamic evaluation call e.g.”eval” in “Update Manager” class when software attempts to see if there are updates available. This results in arbitrary code execution on the machine where software is installed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-72f5-v57j-wg28/GHSA-72f5-v57j-wg28.json b/advisories/unreviewed/2022/05/GHSA-72f5-v57j-wg28/GHSA-72f5-v57j-wg28.json index e04d16a146e..ae72cf95374 100644 --- a/advisories/unreviewed/2022/05/GHSA-72f5-v57j-wg28/GHSA-72f5-v57j-wg28.json +++ b/advisories/unreviewed/2022/05/GHSA-72f5-v57j-wg28/GHSA-72f5-v57j-wg28.json @@ -7,12 +7,8 @@ "CVE-2008-1905" ], "details": "NMMediaServer.exe in Nero MediaHome 3.3.3.0 and earlier, as used in Nero 8.3.2.1 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a long HTTP request to TCP port 54444, a different vector than CVE-2007-2322.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-72h5-35jc-jq88/GHSA-72h5-35jc-jq88.json b/advisories/unreviewed/2022/05/GHSA-72h5-35jc-jq88/GHSA-72h5-35jc-jq88.json index 9cc28910b63..8acc05733e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-72h5-35jc-jq88/GHSA-72h5-35jc-jq88.json +++ b/advisories/unreviewed/2022/05/GHSA-72h5-35jc-jq88/GHSA-72h5-35jc-jq88.json @@ -7,12 +7,8 @@ "CVE-2008-1570" ], "details": "Race condition in the create_lockpath function in policyd-weight 0.1.14 beta-16 allows local users to modify or delete arbitrary files by creating the LOCKPATH directory, then modifying it after the symbolic link check occurs. NOTE: this is due to an incomplete fix for CVE-2008-1569.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-73qh-672x-j68x/GHSA-73qh-672x-j68x.json b/advisories/unreviewed/2022/05/GHSA-73qh-672x-j68x/GHSA-73qh-672x-j68x.json index be27e13e954..a64f42eb769 100644 --- a/advisories/unreviewed/2022/05/GHSA-73qh-672x-j68x/GHSA-73qh-672x-j68x.json +++ b/advisories/unreviewed/2022/05/GHSA-73qh-672x-j68x/GHSA-73qh-672x-j68x.json @@ -7,12 +7,8 @@ "CVE-2008-1987" ], "details": "Cross-site scripting (XSS) vulnerability in search.php in EncapsGallery 2.0.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-743p-w623-2f8j/GHSA-743p-w623-2f8j.json b/advisories/unreviewed/2022/05/GHSA-743p-w623-2f8j/GHSA-743p-w623-2f8j.json index 7c228709dd3..260919a8c7b 100644 --- a/advisories/unreviewed/2022/05/GHSA-743p-w623-2f8j/GHSA-743p-w623-2f8j.json +++ b/advisories/unreviewed/2022/05/GHSA-743p-w623-2f8j/GHSA-743p-w623-2f8j.json @@ -7,12 +7,8 @@ "CVE-2008-1710" ], "details": "Untrusted search path vulnerability in chnfsmnt in IBM AIX 6.1 allows local users to gain privileges via a modified PATH environment variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-79rm-vj4g-8558/GHSA-79rm-vj4g-8558.json b/advisories/unreviewed/2022/05/GHSA-79rm-vj4g-8558/GHSA-79rm-vj4g-8558.json index 17ca6b5f664..434e178856e 100644 --- a/advisories/unreviewed/2022/05/GHSA-79rm-vj4g-8558/GHSA-79rm-vj4g-8558.json +++ b/advisories/unreviewed/2022/05/GHSA-79rm-vj4g-8558/GHSA-79rm-vj4g-8558.json @@ -7,12 +7,8 @@ "CVE-2008-1542" ], "details": "Airspan Base Station Distribution Unit (BSDU) has \"topsecret\" as its password for the root account, which allows remote attackers to obtain administrative access via a telnet login, a different vulnerability than CVE-2008-1262.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-79x7-wpq4-76rr/GHSA-79x7-wpq4-76rr.json b/advisories/unreviewed/2022/05/GHSA-79x7-wpq4-76rr/GHSA-79x7-wpq4-76rr.json index 75aaba9d24c..b1a97ffde27 100644 --- a/advisories/unreviewed/2022/05/GHSA-79x7-wpq4-76rr/GHSA-79x7-wpq4-76rr.json +++ b/advisories/unreviewed/2022/05/GHSA-79x7-wpq4-76rr/GHSA-79x7-wpq4-76rr.json @@ -7,12 +7,8 @@ "CVE-2008-1726" ], "details": "Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) kqid parameter to (a) articletext.php and (b) articletextonly.php and the (2) username parameter to (c) logincheck.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-79xw-qr84-hjp2/GHSA-79xw-qr84-hjp2.json b/advisories/unreviewed/2022/05/GHSA-79xw-qr84-hjp2/GHSA-79xw-qr84-hjp2.json index f35ebce79a6..39acc5bcfe2 100644 --- a/advisories/unreviewed/2022/05/GHSA-79xw-qr84-hjp2/GHSA-79xw-qr84-hjp2.json +++ b/advisories/unreviewed/2022/05/GHSA-79xw-qr84-hjp2/GHSA-79xw-qr84-hjp2.json @@ -7,12 +7,8 @@ "CVE-2008-1461" ], "details": "Buffer overflow in XnView 1.92.1 allows user-assisted remote attackers to execute arbitrary code via a long filename argument on the command line. NOTE: it is unclear whether there are common handler configurations in which this argument is controlled by an attacker.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7chf-fr3c-mjmm/GHSA-7chf-fr3c-mjmm.json b/advisories/unreviewed/2022/05/GHSA-7chf-fr3c-mjmm/GHSA-7chf-fr3c-mjmm.json index a4bce5b45e5..d88d22bf1cd 100644 --- a/advisories/unreviewed/2022/05/GHSA-7chf-fr3c-mjmm/GHSA-7chf-fr3c-mjmm.json +++ b/advisories/unreviewed/2022/05/GHSA-7chf-fr3c-mjmm/GHSA-7chf-fr3c-mjmm.json @@ -7,12 +7,8 @@ "CVE-2008-1725" ], "details": "The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx in IBiz E-Banking Integrator (formerly IBiz OFX Integrator) 2.0.2932 exposes the unsafe WriteOFXDataFile method, which allows remote attackers to overwrite arbitrary files via a full pathname in the argument. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7cjq-58c8-p638/GHSA-7cjq-58c8-p638.json b/advisories/unreviewed/2022/05/GHSA-7cjq-58c8-p638/GHSA-7cjq-58c8-p638.json index 35042d51347..e36922b80e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-7cjq-58c8-p638/GHSA-7cjq-58c8-p638.json +++ b/advisories/unreviewed/2022/05/GHSA-7cjq-58c8-p638/GHSA-7cjq-58c8-p638.json @@ -7,12 +7,8 @@ "CVE-2008-1477" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in busca.php in eForum 0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) busca and (2) link parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7cqh-9wjj-hhf9/GHSA-7cqh-9wjj-hhf9.json b/advisories/unreviewed/2022/05/GHSA-7cqh-9wjj-hhf9/GHSA-7cqh-9wjj-hhf9.json index 88923499fba..861125dabbd 100644 --- a/advisories/unreviewed/2022/05/GHSA-7cqh-9wjj-hhf9/GHSA-7cqh-9wjj-hhf9.json +++ b/advisories/unreviewed/2022/05/GHSA-7cqh-9wjj-hhf9/GHSA-7cqh-9wjj-hhf9.json @@ -7,12 +7,8 @@ "CVE-2008-1694" ], "details": "vcdiff in Emacs 20.7 to 22.1.50, when used with SCCS, allows local users to overwrite arbitrary files via a symlink attack on temporary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7fmv-j8g9-pp43/GHSA-7fmv-j8g9-pp43.json b/advisories/unreviewed/2022/05/GHSA-7fmv-j8g9-pp43/GHSA-7fmv-j8g9-pp43.json index c6417c1589c..2a06fe90125 100644 --- a/advisories/unreviewed/2022/05/GHSA-7fmv-j8g9-pp43/GHSA-7fmv-j8g9-pp43.json +++ b/advisories/unreviewed/2022/05/GHSA-7fmv-j8g9-pp43/GHSA-7fmv-j8g9-pp43.json @@ -7,12 +7,8 @@ "CVE-2008-1684" ], "details": "inetd on Sun Solaris 10, when debug logging is enabled, allows local users to write to arbitrary files via a symlink attack on the /var/tmp/inetd.log temporary file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7fv8-w6f9-58c6/GHSA-7fv8-w6f9-58c6.json b/advisories/unreviewed/2022/05/GHSA-7fv8-w6f9-58c6/GHSA-7fv8-w6f9-58c6.json index 2778ad0880a..27cbce26eb7 100644 --- a/advisories/unreviewed/2022/05/GHSA-7fv8-w6f9-58c6/GHSA-7fv8-w6f9-58c6.json +++ b/advisories/unreviewed/2022/05/GHSA-7fv8-w6f9-58c6/GHSA-7fv8-w6f9-58c6.json @@ -7,12 +7,8 @@ "CVE-2008-1991" ], "details": "Cross-site scripting (XSS) vulnerability in admin_colors_swatch.asp in Acidcat CMS 3.4.1 allows remote attackers to inject arbitrary web script or HTML via the field parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7fxm-mjcc-cj9m/GHSA-7fxm-mjcc-cj9m.json b/advisories/unreviewed/2022/05/GHSA-7fxm-mjcc-cj9m/GHSA-7fxm-mjcc-cj9m.json index f91b3b1dc70..7b00dbda109 100644 --- a/advisories/unreviewed/2022/05/GHSA-7fxm-mjcc-cj9m/GHSA-7fxm-mjcc-cj9m.json +++ b/advisories/unreviewed/2022/05/GHSA-7fxm-mjcc-cj9m/GHSA-7fxm-mjcc-cj9m.json @@ -7,12 +7,8 @@ "CVE-2008-1881" ], "details": "Stack-based buffer overflow in the ParseSSA function (modules/demux/subtitle.c) in VLC 0.8.6e allows remote attackers to execute arbitrary code via a long subtitle in an SSA file. NOTE: this issue is due to an incomplete fix for CVE-2007-6681.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7g4p-8hcf-w729/GHSA-7g4p-8hcf-w729.json b/advisories/unreviewed/2022/05/GHSA-7g4p-8hcf-w729/GHSA-7g4p-8hcf-w729.json index 6cb8cd5c64e..c13ec0d9359 100644 --- a/advisories/unreviewed/2022/05/GHSA-7g4p-8hcf-w729/GHSA-7g4p-8hcf-w729.json +++ b/advisories/unreviewed/2022/05/GHSA-7g4p-8hcf-w729/GHSA-7g4p-8hcf-w729.json @@ -7,12 +7,8 @@ "CVE-2008-1650" ], "details": "SQL injection vulnerability in dynamicpages/index.php in EasyNews 4.0 allows remote attackers to execute arbitrary SQL commands via the read parameter in an edp_Help_Internal_News action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7g5p-gwhh-rffh/GHSA-7g5p-gwhh-rffh.json b/advisories/unreviewed/2022/05/GHSA-7g5p-gwhh-rffh/GHSA-7g5p-gwhh-rffh.json index 080428b735b..a7faeeb1b7a 100644 --- a/advisories/unreviewed/2022/05/GHSA-7g5p-gwhh-rffh/GHSA-7g5p-gwhh-rffh.json +++ b/advisories/unreviewed/2022/05/GHSA-7g5p-gwhh-rffh/GHSA-7g5p-gwhh-rffh.json @@ -7,12 +7,8 @@ "CVE-2008-1518" ], "details": "Stack-based buffer overflow in kl1.sys in Kaspersky Anti-Virus 6.0 and 7.0 and Internet Security 6.0 and 7.0 allows local users to gain privileges via an IOCTL 0x800520e8 call.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7gq3-m3h3-hwvp/GHSA-7gq3-m3h3-hwvp.json b/advisories/unreviewed/2022/05/GHSA-7gq3-m3h3-hwvp/GHSA-7gq3-m3h3-hwvp.json index 15342b8cfeb..190be7a57ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-7gq3-m3h3-hwvp/GHSA-7gq3-m3h3-hwvp.json +++ b/advisories/unreviewed/2022/05/GHSA-7gq3-m3h3-hwvp/GHSA-7gq3-m3h3-hwvp.json @@ -7,12 +7,8 @@ "CVE-2020-27150" ], "details": "In multiple versions of NPort IA5000A Series, the result of exporting a device’s configuration contains the passwords of all users on the system and other sensitive data in the original form if “Pre-shared key” doesn’t set.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7h4m-3669-q86j/GHSA-7h4m-3669-q86j.json b/advisories/unreviewed/2022/05/GHSA-7h4m-3669-q86j/GHSA-7h4m-3669-q86j.json index 6467cd64970..7f466a0b1a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-7h4m-3669-q86j/GHSA-7h4m-3669-q86j.json +++ b/advisories/unreviewed/2022/05/GHSA-7h4m-3669-q86j/GHSA-7h4m-3669-q86j.json @@ -7,12 +7,8 @@ "CVE-2008-1709" ], "details": "Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a Studio Solution (.SLN) file with a long malformed Project line beginning with a 'Project(\"{}\") =' sequence, probably a different vector than CVE-2008-0250.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7hmh-f259-p857/GHSA-7hmh-f259-p857.json b/advisories/unreviewed/2022/05/GHSA-7hmh-f259-p857/GHSA-7hmh-f259-p857.json index 7387e0dae5f..b1f575edf39 100644 --- a/advisories/unreviewed/2022/05/GHSA-7hmh-f259-p857/GHSA-7hmh-f259-p857.json +++ b/advisories/unreviewed/2022/05/GHSA-7hmh-f259-p857/GHSA-7hmh-f259-p857.json @@ -7,12 +7,8 @@ "CVE-2008-1973" ], "details": "Heap-based buffer overflow in SubEdit Player build 4056 and 4066 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long subtitle file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7jh5-hw9h-qfqm/GHSA-7jh5-hw9h-qfqm.json b/advisories/unreviewed/2022/05/GHSA-7jh5-hw9h-qfqm/GHSA-7jh5-hw9h-qfqm.json index c226f59fc40..46d9f8c8c28 100644 --- a/advisories/unreviewed/2022/05/GHSA-7jh5-hw9h-qfqm/GHSA-7jh5-hw9h-qfqm.json +++ b/advisories/unreviewed/2022/05/GHSA-7jh5-hw9h-qfqm/GHSA-7jh5-hw9h-qfqm.json @@ -7,12 +7,8 @@ "CVE-2008-1985" ], "details": "Cross-site scripting (XSS) vulnerability in base.php in DigitalHive 2.0 RC2 allows remote attackers to inject arbitrary web script or HTML via the mt parameter, possibly related to membres.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7m8c-v4r6-h2j2/GHSA-7m8c-v4r6-h2j2.json b/advisories/unreviewed/2022/05/GHSA-7m8c-v4r6-h2j2/GHSA-7m8c-v4r6-h2j2.json index 6995905bcce..26fd805579e 100644 --- a/advisories/unreviewed/2022/05/GHSA-7m8c-v4r6-h2j2/GHSA-7m8c-v4r6-h2j2.json +++ b/advisories/unreviewed/2022/05/GHSA-7m8c-v4r6-h2j2/GHSA-7m8c-v4r6-h2j2.json @@ -7,12 +7,8 @@ "CVE-2008-1564" ], "details": "Directory traversal vulnerability in Dan Costin File Transfer before 1.2f allows remote attackers to read arbitrary files via a \"..\\\" (dot dot backslash) in the filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7r8h-pf5c-m2pr/GHSA-7r8h-pf5c-m2pr.json b/advisories/unreviewed/2022/05/GHSA-7r8h-pf5c-m2pr/GHSA-7r8h-pf5c-m2pr.json index dcbfeb147b9..40d03541f35 100644 --- a/advisories/unreviewed/2022/05/GHSA-7r8h-pf5c-m2pr/GHSA-7r8h-pf5c-m2pr.json +++ b/advisories/unreviewed/2022/05/GHSA-7r8h-pf5c-m2pr/GHSA-7r8h-pf5c-m2pr.json @@ -7,12 +7,8 @@ "CVE-2008-1790" ], "details": "Unrestricted file upload vulnerability in iScripts SocialWare allows remote authenticated administrators to upload arbitrary files via a crafted logo file in the \"Manage Settings\" functionality. NOTE: remote exploitation is facilitated by a separate SQL injection vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7rxg-43hm-rxmc/GHSA-7rxg-43hm-rxmc.json b/advisories/unreviewed/2022/05/GHSA-7rxg-43hm-rxmc/GHSA-7rxg-43hm-rxmc.json index 84092f84116..3dd1dc35ec7 100644 --- a/advisories/unreviewed/2022/05/GHSA-7rxg-43hm-rxmc/GHSA-7rxg-43hm-rxmc.json +++ b/advisories/unreviewed/2022/05/GHSA-7rxg-43hm-rxmc/GHSA-7rxg-43hm-rxmc.json @@ -7,12 +7,8 @@ "CVE-2008-1874" ], "details": "SQL injection vulnerability in account/user/mail.html in Xpoze Pro 3.05 and earlier allows remote authenticated users to execute arbitrary SQL commands via the reed parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7vf8-639x-9hxv/GHSA-7vf8-639x-9hxv.json b/advisories/unreviewed/2022/05/GHSA-7vf8-639x-9hxv/GHSA-7vf8-639x-9hxv.json index c01c81dd589..61a59e36ecd 100644 --- a/advisories/unreviewed/2022/05/GHSA-7vf8-639x-9hxv/GHSA-7vf8-639x-9hxv.json +++ b/advisories/unreviewed/2022/05/GHSA-7vf8-639x-9hxv/GHSA-7vf8-639x-9hxv.json @@ -7,12 +7,8 @@ "CVE-2008-1482" ], "details": "Multiple integer overflows in xine-lib 1.1.11 and earlier allow remote attackers to trigger heap-based buffer overflows and possibly execute arbitrary code via (1) a crafted .FLV file, which triggers an overflow in demuxers/demux_flv.c; (2) a crafted .MOV file, which triggers an overflow in demuxers/demux_qt.c; (3) a crafted .RM file, which triggers an overflow in demuxers/demux_real.c; (4) a crafted .MVE file, which triggers an overflow in demuxers/demux_wc3movie.c; (5) a crafted .MKV file, which triggers an overflow in demuxers/ebml.c; or (6) a crafted .CAK file, which triggers an overflow in demuxers/demux_film.c.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7w84-8m96-m73j/GHSA-7w84-8m96-m73j.json b/advisories/unreviewed/2022/05/GHSA-7w84-8m96-m73j/GHSA-7w84-8m96-m73j.json index 17ede461de6..3aa1e552b5d 100644 --- a/advisories/unreviewed/2022/05/GHSA-7w84-8m96-m73j/GHSA-7w84-8m96-m73j.json +++ b/advisories/unreviewed/2022/05/GHSA-7w84-8m96-m73j/GHSA-7w84-8m96-m73j.json @@ -7,12 +7,8 @@ "CVE-2008-1918" ], "details": "SQL injection vulnerability in submit.php in PHP-Fusion 6.01.14 and 6.00.307, when magic_quotes_gpc is disabled and the database table prefix is known, allows remote authenticated users to execute arbitrary SQL commands via the submit_info[] parameter in a link submission action. NOTE: it was later reported that 7.00.2 is also affected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7wpf-hxvv-g844/GHSA-7wpf-hxvv-g844.json b/advisories/unreviewed/2022/05/GHSA-7wpf-hxvv-g844/GHSA-7wpf-hxvv-g844.json index e6503758737..3384f07a52e 100644 --- a/advisories/unreviewed/2022/05/GHSA-7wpf-hxvv-g844/GHSA-7wpf-hxvv-g844.json +++ b/advisories/unreviewed/2022/05/GHSA-7wpf-hxvv-g844/GHSA-7wpf-hxvv-g844.json @@ -7,12 +7,8 @@ "CVE-2008-1733" ], "details": "SQL injection vulnerability in puarcade.class.php 2.2 and earlier in the Pragmatic Utopia PU Arcade (com_puarcade) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the gid parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7xxm-jvv2-rqhg/GHSA-7xxm-jvv2-rqhg.json b/advisories/unreviewed/2022/05/GHSA-7xxm-jvv2-rqhg/GHSA-7xxm-jvv2-rqhg.json index f73474c4a28..b5a8a11fcd0 100644 --- a/advisories/unreviewed/2022/05/GHSA-7xxm-jvv2-rqhg/GHSA-7xxm-jvv2-rqhg.json +++ b/advisories/unreviewed/2022/05/GHSA-7xxm-jvv2-rqhg/GHSA-7xxm-jvv2-rqhg.json @@ -7,12 +7,8 @@ "CVE-2008-1757" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in the ConcoursPhoto module for KwsPHP 1.0 allows remote attackers to inject arbitrary web script or HTML via the VIEW parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8352-xfmv-mmm7/GHSA-8352-xfmv-mmm7.json b/advisories/unreviewed/2022/05/GHSA-8352-xfmv-mmm7/GHSA-8352-xfmv-mmm7.json index 2eb20f685ed..0464b81ecd7 100644 --- a/advisories/unreviewed/2022/05/GHSA-8352-xfmv-mmm7/GHSA-8352-xfmv-mmm7.json +++ b/advisories/unreviewed/2022/05/GHSA-8352-xfmv-mmm7/GHSA-8352-xfmv-mmm7.json @@ -7,12 +7,8 @@ "CVE-2008-1719" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities in Nuke ET 3.2 and 3.4 allow remote attackers to perform actions as administrators, as demonstrated by inserting an XSS sequence into a document.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8399-jxgw-8cvv/GHSA-8399-jxgw-8cvv.json b/advisories/unreviewed/2022/05/GHSA-8399-jxgw-8cvv/GHSA-8399-jxgw-8cvv.json index 54236083d62..ee998d979ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-8399-jxgw-8cvv/GHSA-8399-jxgw-8cvv.json +++ b/advisories/unreviewed/2022/05/GHSA-8399-jxgw-8cvv/GHSA-8399-jxgw-8cvv.json @@ -7,12 +7,8 @@ "CVE-2008-1554" ], "details": "SQL injection vulnerability in account/index.php in TopperMod 2.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via a non-alphanumeric first character the localita parameter, which bypasses a protection mechanism.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-89pv-2c3h-7jxh/GHSA-89pv-2c3h-7jxh.json b/advisories/unreviewed/2022/05/GHSA-89pv-2c3h-7jxh/GHSA-89pv-2c3h-7jxh.json index 4e924f03519..a834a436fb6 100644 --- a/advisories/unreviewed/2022/05/GHSA-89pv-2c3h-7jxh/GHSA-89pv-2c3h-7jxh.json +++ b/advisories/unreviewed/2022/05/GHSA-89pv-2c3h-7jxh/GHSA-89pv-2c3h-7jxh.json @@ -7,12 +7,8 @@ "CVE-2008-1829" ], "details": "Unspecified vulnerability in the PeopleSoft HCM Recruiting component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1 has unknown impact and remote attack vectors, aka PSE02.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8c72-3wxv-57h3/GHSA-8c72-3wxv-57h3.json b/advisories/unreviewed/2022/05/GHSA-8c72-3wxv-57h3/GHSA-8c72-3wxv-57h3.json index 9c09962a445..dc3aacb3d57 100644 --- a/advisories/unreviewed/2022/05/GHSA-8c72-3wxv-57h3/GHSA-8c72-3wxv-57h3.json +++ b/advisories/unreviewed/2022/05/GHSA-8c72-3wxv-57h3/GHSA-8c72-3wxv-57h3.json @@ -7,12 +7,8 @@ "CVE-2008-1638" ], "details": "Nik Sharpener Pro, possibly 2.0, uses world-writable permissions for plug-in files, which allows local users to gain privileges by replacing a plug-in with a Trojan horse.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8cxc-qr4w-j225/GHSA-8cxc-qr4w-j225.json b/advisories/unreviewed/2022/05/GHSA-8cxc-qr4w-j225/GHSA-8cxc-qr4w-j225.json index 7e0438d3ba6..25b66992b03 100644 --- a/advisories/unreviewed/2022/05/GHSA-8cxc-qr4w-j225/GHSA-8cxc-qr4w-j225.json +++ b/advisories/unreviewed/2022/05/GHSA-8cxc-qr4w-j225/GHSA-8cxc-qr4w-j225.json @@ -7,12 +7,8 @@ "CVE-2020-16526" ], "details": "**RESERVED**https://github.com/hacksparrow/safe-eval safe-eval 0.4.1 is affected by: Sandbox Escape. The impact is: execute arbitrary code (remote). The component is: https://github.com/hacksparrow/safe-eval/blob/master/index.js. ¶¶ The safe-eval module describes itself as a safer version of eval. By accessing the object constructors, un-sanitized user input can access the entire standard library and effectively break out of the sandbox.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8g7g-6fxg-j37p/GHSA-8g7g-6fxg-j37p.json b/advisories/unreviewed/2022/05/GHSA-8g7g-6fxg-j37p/GHSA-8g7g-6fxg-j37p.json index bba29ac2ecd..d4d7df98b57 100644 --- a/advisories/unreviewed/2022/05/GHSA-8g7g-6fxg-j37p/GHSA-8g7g-6fxg-j37p.json +++ b/advisories/unreviewed/2022/05/GHSA-8g7g-6fxg-j37p/GHSA-8g7g-6fxg-j37p.json @@ -7,12 +7,8 @@ "CVE-2008-1893" ], "details": "PHP remote file inclusion vulnerability in index.php in W2B Online Banking allows remote attackers to execute arbitrary PHP code via a URL in the ilang parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8g88-pgxv-wmhv/GHSA-8g88-pgxv-wmhv.json b/advisories/unreviewed/2022/05/GHSA-8g88-pgxv-wmhv/GHSA-8g88-pgxv-wmhv.json index 5818c2862cb..fe6b6570e04 100644 --- a/advisories/unreviewed/2022/05/GHSA-8g88-pgxv-wmhv/GHSA-8g88-pgxv-wmhv.json +++ b/advisories/unreviewed/2022/05/GHSA-8g88-pgxv-wmhv/GHSA-8g88-pgxv-wmhv.json @@ -7,12 +7,8 @@ "CVE-2008-1635" ], "details": "Directory traversal vulnerability in view_private.php in Keep It Simple Guest Book (KISGB) 5.0.0 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the tmp_theme parameter. NOTE: 5.1.1 is also reportedly affected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8gpx-73gc-wq7c/GHSA-8gpx-73gc-wq7c.json b/advisories/unreviewed/2022/05/GHSA-8gpx-73gc-wq7c/GHSA-8gpx-73gc-wq7c.json index 1cd59c5f600..2ad7c8ef9e6 100644 --- a/advisories/unreviewed/2022/05/GHSA-8gpx-73gc-wq7c/GHSA-8gpx-73gc-wq7c.json +++ b/advisories/unreviewed/2022/05/GHSA-8gpx-73gc-wq7c/GHSA-8gpx-73gc-wq7c.json @@ -7,12 +7,8 @@ "CVE-2021-34436" ], "details": "In Eclipse Theia 0.1.1 to 0.2.0, it is possible to exploit the default build to obtain remote code execution (and XXE) via the theia-xml-extension. This extension uses lsp4xml (recently renamed to LemMinX) in order to provide language support for XML. This is installed by default.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8hc3-wrhh-6crh/GHSA-8hc3-wrhh-6crh.json b/advisories/unreviewed/2022/05/GHSA-8hc3-wrhh-6crh/GHSA-8hc3-wrhh-6crh.json index f706154960c..271509d5532 100644 --- a/advisories/unreviewed/2022/05/GHSA-8hc3-wrhh-6crh/GHSA-8hc3-wrhh-6crh.json +++ b/advisories/unreviewed/2022/05/GHSA-8hc3-wrhh-6crh/GHSA-8hc3-wrhh-6crh.json @@ -7,12 +7,8 @@ "CVE-2008-1883" ], "details": "The server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided directly by clients, which makes it easier for remote attackers to access accounts via a modified client that skips the javascript/md5.js hash calculation, and instead sends an arbitrary MD5 string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8j4p-vmh5-g8wq/GHSA-8j4p-vmh5-g8wq.json b/advisories/unreviewed/2022/05/GHSA-8j4p-vmh5-g8wq/GHSA-8j4p-vmh5-g8wq.json index 492a57d7da3..1d28c080c83 100644 --- a/advisories/unreviewed/2022/05/GHSA-8j4p-vmh5-g8wq/GHSA-8j4p-vmh5-g8wq.json +++ b/advisories/unreviewed/2022/05/GHSA-8j4p-vmh5-g8wq/GHSA-8j4p-vmh5-g8wq.json @@ -7,12 +7,8 @@ "CVE-2008-1535" ], "details": "SQL injection vulnerability in the Matti Kiviharju rekry (aka com_rekry or rekry!Joom) 1.0.0 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the op_id parameter in a view action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8j68-94qg-c979/GHSA-8j68-94qg-c979.json b/advisories/unreviewed/2022/05/GHSA-8j68-94qg-c979/GHSA-8j68-94qg-c979.json index 6d2b48cc1f8..0318d05b78f 100644 --- a/advisories/unreviewed/2022/05/GHSA-8j68-94qg-c979/GHSA-8j68-94qg-c979.json +++ b/advisories/unreviewed/2022/05/GHSA-8j68-94qg-c979/GHSA-8j68-94qg-c979.json @@ -7,12 +7,8 @@ "CVE-2008-1778" ], "details": "Unspecified vulnerability in the floating point context switch implementation in Sun Solaris 9 and 10 on x86 platforms might allow local users to cause a denial of service (application exit), corrupt data, or trigger incorrect calculations via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8j7c-jhc4-6fcv/GHSA-8j7c-jhc4-6fcv.json b/advisories/unreviewed/2022/05/GHSA-8j7c-jhc4-6fcv/GHSA-8j7c-jhc4-6fcv.json index 1c6fd1d00c8..059c8a2ec93 100644 --- a/advisories/unreviewed/2022/05/GHSA-8j7c-jhc4-6fcv/GHSA-8j7c-jhc4-6fcv.json +++ b/advisories/unreviewed/2022/05/GHSA-8j7c-jhc4-6fcv/GHSA-8j7c-jhc4-6fcv.json @@ -7,12 +7,8 @@ "CVE-2008-1754" ], "details": "Symantec Altiris Deployment Solution before 6.9.164 stores the Deployment Solution Agent (aka AClient) password in cleartext in memory, which allows local users to obtain sensitive information by dumping the AClient.exe process memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8j9m-7jr9-v6q2/GHSA-8j9m-7jr9-v6q2.json b/advisories/unreviewed/2022/05/GHSA-8j9m-7jr9-v6q2/GHSA-8j9m-7jr9-v6q2.json index cd25c9f453a..f282091dc85 100644 --- a/advisories/unreviewed/2022/05/GHSA-8j9m-7jr9-v6q2/GHSA-8j9m-7jr9-v6q2.json +++ b/advisories/unreviewed/2022/05/GHSA-8j9m-7jr9-v6q2/GHSA-8j9m-7jr9-v6q2.json @@ -7,12 +7,8 @@ "CVE-2008-1798" ], "details": "Directory traversal vulnerability in forum/kietu/libs/calendrier.php in Dragoon 0.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the cal[lng] parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8j9x-qhpc-gcg8/GHSA-8j9x-qhpc-gcg8.json b/advisories/unreviewed/2022/05/GHSA-8j9x-qhpc-gcg8/GHSA-8j9x-qhpc-gcg8.json index 6a52748ebe9..cfd42a9a387 100644 --- a/advisories/unreviewed/2022/05/GHSA-8j9x-qhpc-gcg8/GHSA-8j9x-qhpc-gcg8.json +++ b/advisories/unreviewed/2022/05/GHSA-8j9x-qhpc-gcg8/GHSA-8j9x-qhpc-gcg8.json @@ -7,12 +7,8 @@ "CVE-2008-1578" ], "details": "The sso_util program in Single Sign-On in Apple Mac OS X before 10.5.3 places passwords on the command line, which allows local users to obtain sensitive information by listing the process.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8jq2-jwrg-p2pw/GHSA-8jq2-jwrg-p2pw.json b/advisories/unreviewed/2022/05/GHSA-8jq2-jwrg-p2pw/GHSA-8jq2-jwrg-p2pw.json index 1d5fd249720..5842e29198e 100644 --- a/advisories/unreviewed/2022/05/GHSA-8jq2-jwrg-p2pw/GHSA-8jq2-jwrg-p2pw.json +++ b/advisories/unreviewed/2022/05/GHSA-8jq2-jwrg-p2pw/GHSA-8jq2-jwrg-p2pw.json @@ -7,12 +7,8 @@ "CVE-2008-1847" ], "details": "SQL injection vulnerability in view.php in CoronaMatrix phpAddressBook 2.11 allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8jrr-cc6q-29r5/GHSA-8jrr-cc6q-29r5.json b/advisories/unreviewed/2022/05/GHSA-8jrr-cc6q-29r5/GHSA-8jrr-cc6q-29r5.json index 4d12fd12a01..7d204ab1144 100644 --- a/advisories/unreviewed/2022/05/GHSA-8jrr-cc6q-29r5/GHSA-8jrr-cc6q-29r5.json +++ b/advisories/unreviewed/2022/05/GHSA-8jrr-cc6q-29r5/GHSA-8jrr-cc6q-29r5.json @@ -7,12 +7,8 @@ "CVE-2008-1485" ], "details": "Cross-site scripting (XSS) vulnerability in PunBB 1.2.16 and earlier allows remote attackers to inject arbitrary web script or HTML via the get_host parameter to moderate.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8mp7-jhrq-rxgx/GHSA-8mp7-jhrq-rxgx.json b/advisories/unreviewed/2022/05/GHSA-8mp7-jhrq-rxgx/GHSA-8mp7-jhrq-rxgx.json index 24608b6650a..d99fe12ae23 100644 --- a/advisories/unreviewed/2022/05/GHSA-8mp7-jhrq-rxgx/GHSA-8mp7-jhrq-rxgx.json +++ b/advisories/unreviewed/2022/05/GHSA-8mp7-jhrq-rxgx/GHSA-8mp7-jhrq-rxgx.json @@ -7,12 +7,8 @@ "CVE-2008-1589" ], "details": "Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a (1) self-signed or (2) invalid certificate, which makes it easier for remote attackers to spoof web sites.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8pq3-97rg-fvv2/GHSA-8pq3-97rg-fvv2.json b/advisories/unreviewed/2022/05/GHSA-8pq3-97rg-fvv2/GHSA-8pq3-97rg-fvv2.json index 844a654d1d7..92e53be9ed5 100644 --- a/advisories/unreviewed/2022/05/GHSA-8pq3-97rg-fvv2/GHSA-8pq3-97rg-fvv2.json +++ b/advisories/unreviewed/2022/05/GHSA-8pq3-97rg-fvv2/GHSA-8pq3-97rg-fvv2.json @@ -7,12 +7,8 @@ "CVE-2008-1680" ], "details": "PHP-Nuke Platinum 7.6.b.5 allows remote attackers to obtain configuration information via a direct request to maintenance/index.php, which reveals settings such as magic_quotes_gpc.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8pwq-3qrm-7jfv/GHSA-8pwq-3qrm-7jfv.json b/advisories/unreviewed/2022/05/GHSA-8pwq-3qrm-7jfv/GHSA-8pwq-3qrm-7jfv.json index b9be44bac7e..787990e77e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-8pwq-3qrm-7jfv/GHSA-8pwq-3qrm-7jfv.json +++ b/advisories/unreviewed/2022/05/GHSA-8pwq-3qrm-7jfv/GHSA-8pwq-3qrm-7jfv.json @@ -7,12 +7,8 @@ "CVE-2008-1316" ], "details": "SQL injection vulnerability in qtf_ind_search_ov.php in QT-cute QuickTalk Forum 1.6 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8q5j-pq4c-9v79/GHSA-8q5j-pq4c-9v79.json b/advisories/unreviewed/2022/05/GHSA-8q5j-pq4c-9v79/GHSA-8q5j-pq4c-9v79.json index 0415bb89c0e..4c08c2aa427 100644 --- a/advisories/unreviewed/2022/05/GHSA-8q5j-pq4c-9v79/GHSA-8q5j-pq4c-9v79.json +++ b/advisories/unreviewed/2022/05/GHSA-8q5j-pq4c-9v79/GHSA-8q5j-pq4c-9v79.json @@ -7,12 +7,8 @@ "CVE-2008-1686" ], "details": "Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters and Annodex Plugins for Firefox, xine-lib before 1.1.12, and many other products, allows remote attackers to execute arbitrary code via a header structure containing a negative offset, which is used to dereference a function pointer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -252,9 +248,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8q6m-xgq7-pwv5/GHSA-8q6m-xgq7-pwv5.json b/advisories/unreviewed/2022/05/GHSA-8q6m-xgq7-pwv5/GHSA-8q6m-xgq7-pwv5.json index 205d3f2073a..5463631047d 100644 --- a/advisories/unreviewed/2022/05/GHSA-8q6m-xgq7-pwv5/GHSA-8q6m-xgq7-pwv5.json +++ b/advisories/unreviewed/2022/05/GHSA-8q6m-xgq7-pwv5/GHSA-8q6m-xgq7-pwv5.json @@ -7,12 +7,8 @@ "CVE-2008-1904" ], "details": "Cicoandcico CcMail 1.0.1 and earlier does not verify that the this_cookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the \"admin area\" via a modified this_cookie cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8qgp-jwj6-67p7/GHSA-8qgp-jwj6-67p7.json b/advisories/unreviewed/2022/05/GHSA-8qgp-jwj6-67p7/GHSA-8qgp-jwj6-67p7.json index cee2a3c8627..384c0d5b182 100644 --- a/advisories/unreviewed/2022/05/GHSA-8qgp-jwj6-67p7/GHSA-8qgp-jwj6-67p7.json +++ b/advisories/unreviewed/2022/05/GHSA-8qgp-jwj6-67p7/GHSA-8qgp-jwj6-67p7.json @@ -7,12 +7,8 @@ "CVE-2008-1873" ], "details": "Cross-site scripting (XSS) vulnerability in the private message feature in Nuke ET 3.2 and 3.4, when using Internet Explorer, allows remote authenticated users to inject arbitrary web script or HTML via a CSS property in the STYLE attribute of a DIV element in the mensaje parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8r55-w857-fcgj/GHSA-8r55-w857-fcgj.json b/advisories/unreviewed/2022/05/GHSA-8r55-w857-fcgj/GHSA-8r55-w857-fcgj.json index dc0df5a71cd..078ca4a6264 100644 --- a/advisories/unreviewed/2022/05/GHSA-8r55-w857-fcgj/GHSA-8r55-w857-fcgj.json +++ b/advisories/unreviewed/2022/05/GHSA-8r55-w857-fcgj/GHSA-8r55-w857-fcgj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8rf9-8x75-vvg3/GHSA-8rf9-8x75-vvg3.json b/advisories/unreviewed/2022/05/GHSA-8rf9-8x75-vvg3/GHSA-8rf9-8x75-vvg3.json index 7fee63a1ff7..02c81682821 100644 --- a/advisories/unreviewed/2022/05/GHSA-8rf9-8x75-vvg3/GHSA-8rf9-8x75-vvg3.json +++ b/advisories/unreviewed/2022/05/GHSA-8rf9-8x75-vvg3/GHSA-8rf9-8x75-vvg3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8rjw-g6r5-4rp4/GHSA-8rjw-g6r5-4rp4.json b/advisories/unreviewed/2022/05/GHSA-8rjw-g6r5-4rp4/GHSA-8rjw-g6r5-4rp4.json index ec3d364816f..1adf5a6453a 100644 --- a/advisories/unreviewed/2022/05/GHSA-8rjw-g6r5-4rp4/GHSA-8rjw-g6r5-4rp4.json +++ b/advisories/unreviewed/2022/05/GHSA-8rjw-g6r5-4rp4/GHSA-8rjw-g6r5-4rp4.json @@ -7,12 +7,8 @@ "CVE-2008-1872" ], "details": "SQL injection vulnerability in home.news.php in Comdev News Publisher 4.1.2 allows remote attackers to execute arbitrary SQL commands via the arcmonth parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8rrj-779c-jh62/GHSA-8rrj-779c-jh62.json b/advisories/unreviewed/2022/05/GHSA-8rrj-779c-jh62/GHSA-8rrj-779c-jh62.json index 57240fc5bf9..f511f5fcb23 100644 --- a/advisories/unreviewed/2022/05/GHSA-8rrj-779c-jh62/GHSA-8rrj-779c-jh62.json +++ b/advisories/unreviewed/2022/05/GHSA-8rrj-779c-jh62/GHSA-8rrj-779c-jh62.json @@ -7,12 +7,8 @@ "CVE-2008-1965" ], "details": "Argument injection vulnerability in the cai: URI handler in rcplauncher in IBM Lotus Expeditor Client for Desktop 6.1.1 and 6.1.2, as used by Lotus Symphony and possibly other products, allows remote attackers to execute arbitrary code by injecting a -launcher option via a cai: URI, as demonstrated by a reference to a UNC share pathname.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8vcv-wm3x-h37h/GHSA-8vcv-wm3x-h37h.json b/advisories/unreviewed/2022/05/GHSA-8vcv-wm3x-h37h/GHSA-8vcv-wm3x-h37h.json index 99eccdbc5a0..64cd995229b 100644 --- a/advisories/unreviewed/2022/05/GHSA-8vcv-wm3x-h37h/GHSA-8vcv-wm3x-h37h.json +++ b/advisories/unreviewed/2022/05/GHSA-8vcv-wm3x-h37h/GHSA-8vcv-wm3x-h37h.json @@ -7,12 +7,8 @@ "CVE-2008-1838" ], "details": "SQL injection vulnerability in BosClassifieds Classified Ads System 3.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8vpj-3h6g-239r/GHSA-8vpj-3h6g-239r.json b/advisories/unreviewed/2022/05/GHSA-8vpj-3h6g-239r/GHSA-8vpj-3h6g-239r.json index 060d504b340..0b76780aef6 100644 --- a/advisories/unreviewed/2022/05/GHSA-8vpj-3h6g-239r/GHSA-8vpj-3h6g-239r.json +++ b/advisories/unreviewed/2022/05/GHSA-8vpj-3h6g-239r/GHSA-8vpj-3h6g-239r.json @@ -7,12 +7,8 @@ "CVE-2008-1681" ], "details": "Unspecified vulnerability in IBM DB2 Content Manager before 8.3 FP8 has unknown impact and attack vectors related to the AllowedTrustedLogin privilege.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8wrq-vxjw-x3jw/GHSA-8wrq-vxjw-x3jw.json b/advisories/unreviewed/2022/05/GHSA-8wrq-vxjw-x3jw/GHSA-8wrq-vxjw-x3jw.json index 239e1a9524c..3ef654defce 100644 --- a/advisories/unreviewed/2022/05/GHSA-8wrq-vxjw-x3jw/GHSA-8wrq-vxjw-x3jw.json +++ b/advisories/unreviewed/2022/05/GHSA-8wrq-vxjw-x3jw/GHSA-8wrq-vxjw-x3jw.json @@ -7,12 +7,8 @@ "CVE-2008-1609" ], "details": "Multiple PHP remote file inclusion vulnerabilities in just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) website parameter to (a) forum.php, (b) headlines.php, and (c) main.php in forum/, and (2) main_dir parameter to forum/forum.php. NOTE: other main_dir vectors are already covered by CVE-2006-7127.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8xp6-4x45-vm77/GHSA-8xp6-4x45-vm77.json b/advisories/unreviewed/2022/05/GHSA-8xp6-4x45-vm77/GHSA-8xp6-4x45-vm77.json index 1cc0f6a9315..46b24aeafbc 100644 --- a/advisories/unreviewed/2022/05/GHSA-8xp6-4x45-vm77/GHSA-8xp6-4x45-vm77.json +++ b/advisories/unreviewed/2022/05/GHSA-8xp6-4x45-vm77/GHSA-8xp6-4x45-vm77.json @@ -7,12 +7,8 @@ "CVE-2014-4943" ], "details": "The PPPoL2TP feature in net/l2tp/l2tp_ppp.c in the Linux kernel through 3.15.6 allows local users to gain privileges by leveraging data-structure differences between an l2tp socket and an inet socket.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-92r4-4px6-qvvf/GHSA-92r4-4px6-qvvf.json b/advisories/unreviewed/2022/05/GHSA-92r4-4px6-qvvf/GHSA-92r4-4px6-qvvf.json index 59899736135..a535251e839 100644 --- a/advisories/unreviewed/2022/05/GHSA-92r4-4px6-qvvf/GHSA-92r4-4px6-qvvf.json +++ b/advisories/unreviewed/2022/05/GHSA-92r4-4px6-qvvf/GHSA-92r4-4px6-qvvf.json @@ -7,12 +7,8 @@ "CVE-2008-1865" ], "details": "Stack-based buffer overflow in the msx_readnode function in libmosix.c in openmosix-tools (aka userspace-tools) in openMosix might allow local users to cause a denial of service (application crash) via a third-party program that calls this function with a long item argument. NOTE: the vendor does not provide any program that is capable of causing this overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-92r6-qxj6-x858/GHSA-92r6-qxj6-x858.json b/advisories/unreviewed/2022/05/GHSA-92r6-qxj6-x858/GHSA-92r6-qxj6-x858.json index 4dd9809b9aa..d6da6f5b098 100644 --- a/advisories/unreviewed/2022/05/GHSA-92r6-qxj6-x858/GHSA-92r6-qxj6-x858.json +++ b/advisories/unreviewed/2022/05/GHSA-92r6-qxj6-x858/GHSA-92r6-qxj6-x858.json @@ -7,12 +7,8 @@ "CVE-2008-1799" ], "details": "Directory traversal vulnerability in thumbnails.php in sabros.us 1.75 allows remote attackers to read arbitrary files via a .. (dot dot) in the img parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-945f-895q-7822/GHSA-945f-895q-7822.json b/advisories/unreviewed/2022/05/GHSA-945f-895q-7822/GHSA-945f-895q-7822.json index 7e3ef5c1f10..ccf5136e6b7 100644 --- a/advisories/unreviewed/2022/05/GHSA-945f-895q-7822/GHSA-945f-895q-7822.json +++ b/advisories/unreviewed/2022/05/GHSA-945f-895q-7822/GHSA-945f-895q-7822.json @@ -7,12 +7,8 @@ "CVE-2008-1715" ], "details": "SQL injection vulnerability in content/user.php in AuraCMS 2.2.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-94fv-rcjg-wgvq/GHSA-94fv-rcjg-wgvq.json b/advisories/unreviewed/2022/05/GHSA-94fv-rcjg-wgvq/GHSA-94fv-rcjg-wgvq.json index f7e06a94dea..e4030a6e27c 100644 --- a/advisories/unreviewed/2022/05/GHSA-94fv-rcjg-wgvq/GHSA-94fv-rcjg-wgvq.json +++ b/advisories/unreviewed/2022/05/GHSA-94fv-rcjg-wgvq/GHSA-94fv-rcjg-wgvq.json @@ -7,12 +7,8 @@ "CVE-2008-1494" ], "details": "SQL injection vulnerability in inc/module/online.php in Easy-Clanpage 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter in a user details action, a different vector than CVE-2008-1425.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9579-gjv6-gp4c/GHSA-9579-gjv6-gp4c.json b/advisories/unreviewed/2022/05/GHSA-9579-gjv6-gp4c/GHSA-9579-gjv6-gp4c.json index 7f2aa75e6a2..10ef0151925 100644 --- a/advisories/unreviewed/2022/05/GHSA-9579-gjv6-gp4c/GHSA-9579-gjv6-gp4c.json +++ b/advisories/unreviewed/2022/05/GHSA-9579-gjv6-gp4c/GHSA-9579-gjv6-gp4c.json @@ -7,12 +7,8 @@ "CVE-2008-1731" ], "details": "The Simple Access module for Drupal 5.x through 5.x-1.2-2 does not properly handle the privacy information for nodes, which might allow remote attackers to bypass intended access restrictions, and read or modify nodes, in opportunistic circumstances related to interaction between Simple Access and (1) Node clone or (2) Project issue tracking.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-95x2-v953-25mj/GHSA-95x2-v953-25mj.json b/advisories/unreviewed/2022/05/GHSA-95x2-v953-25mj/GHSA-95x2-v953-25mj.json index 27488063e8c..726fa0a920a 100644 --- a/advisories/unreviewed/2022/05/GHSA-95x2-v953-25mj/GHSA-95x2-v953-25mj.json +++ b/advisories/unreviewed/2022/05/GHSA-95x2-v953-25mj/GHSA-95x2-v953-25mj.json @@ -7,12 +7,8 @@ "CVE-2008-1857" ], "details": "Multiple directory traversal vulnerabilities in viewsource.php in Make our Life Easy (Mole) 2.1.0 allow remote attackers to read arbitrary files via directory traversal sequences in the (1) dirn and (2) fname parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-965r-6397-r62h/GHSA-965r-6397-r62h.json b/advisories/unreviewed/2022/05/GHSA-965r-6397-r62h/GHSA-965r-6397-r62h.json index 6afc418efca..982d32f29f1 100644 --- a/advisories/unreviewed/2022/05/GHSA-965r-6397-r62h/GHSA-965r-6397-r62h.json +++ b/advisories/unreviewed/2022/05/GHSA-965r-6397-r62h/GHSA-965r-6397-r62h.json @@ -7,12 +7,8 @@ "CVE-2008-1907" ], "details": "Multiple SQL injection vulnerabilities in functions/display_page.func.php in cpCommerce 1.1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id_product, (2) id_manufacturer, and (3) id_category parameters to unspecified components. NOTE: this probably overlaps CVE-2007-2959 and CVE-2007-2890.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-968q-6552-g54x/GHSA-968q-6552-g54x.json b/advisories/unreviewed/2022/05/GHSA-968q-6552-g54x/GHSA-968q-6552-g54x.json index 932c7bff71e..656259b1097 100644 --- a/advisories/unreviewed/2022/05/GHSA-968q-6552-g54x/GHSA-968q-6552-g54x.json +++ b/advisories/unreviewed/2022/05/GHSA-968q-6552-g54x/GHSA-968q-6552-g54x.json @@ -7,12 +7,8 @@ "CVE-2008-1962" ], "details": "Multiple directory traversal vulnerabilities in Aterr 0.9.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) class parameter to include/functions.inc.php and the (2) file parameter to include/common.inc.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9cc2-8q4w-r852/GHSA-9cc2-8q4w-r852.json b/advisories/unreviewed/2022/05/GHSA-9cc2-8q4w-r852/GHSA-9cc2-8q4w-r852.json index 1a8639324d6..fda056a6883 100644 --- a/advisories/unreviewed/2022/05/GHSA-9cc2-8q4w-r852/GHSA-9cc2-8q4w-r852.json +++ b/advisories/unreviewed/2022/05/GHSA-9cc2-8q4w-r852/GHSA-9cc2-8q4w-r852.json @@ -7,12 +7,8 @@ "CVE-2008-1761" ], "details": "Opera before 9.27 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted newsfeed source, which triggers an invalid memory access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9chg-p5j8-vxvp/GHSA-9chg-p5j8-vxvp.json b/advisories/unreviewed/2022/05/GHSA-9chg-p5j8-vxvp/GHSA-9chg-p5j8-vxvp.json index de6af102b32..c68da4fe2da 100644 --- a/advisories/unreviewed/2022/05/GHSA-9chg-p5j8-vxvp/GHSA-9chg-p5j8-vxvp.json +++ b/advisories/unreviewed/2022/05/GHSA-9chg-p5j8-vxvp/GHSA-9chg-p5j8-vxvp.json @@ -7,12 +7,8 @@ "CVE-2008-1652" ], "details": "Directory traversal vulnerability in the _serve_request_multiple function in lib/Perlbal/ClientHTTPBase.pm in Perlbal before 1.70, when concat get is enabled, allows remote attackers to read arbitrary files in a parent directory via a directory traversal sequence in an unspecified parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9cqg-3v69-gww7/GHSA-9cqg-3v69-gww7.json b/advisories/unreviewed/2022/05/GHSA-9cqg-3v69-gww7/GHSA-9cqg-3v69-gww7.json index 3d1df35a88d..292c39a4e64 100644 --- a/advisories/unreviewed/2022/05/GHSA-9cqg-3v69-gww7/GHSA-9cqg-3v69-gww7.json +++ b/advisories/unreviewed/2022/05/GHSA-9cqg-3v69-gww7/GHSA-9cqg-3v69-gww7.json @@ -7,12 +7,8 @@ "CVE-2008-1939" ], "details": "Multiple SQL injection vulnerabilities in W1L3D4 Philboard 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) id and (2) topic parameters to (a) philboard_reply.asp, and the (3) forumid parameter to (b) philboard_newtopic.asp, different vectors than CVE-2007-2641 and CVE-2007-0920.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9cr8-vxh2-rppg/GHSA-9cr8-vxh2-rppg.json b/advisories/unreviewed/2022/05/GHSA-9cr8-vxh2-rppg/GHSA-9cr8-vxh2-rppg.json index 94bfa058eb1..26065cc2145 100644 --- a/advisories/unreviewed/2022/05/GHSA-9cr8-vxh2-rppg/GHSA-9cr8-vxh2-rppg.json +++ b/advisories/unreviewed/2022/05/GHSA-9cr8-vxh2-rppg/GHSA-9cr8-vxh2-rppg.json @@ -7,12 +7,8 @@ "CVE-2008-1610" ], "details": "Stack-based buffer overflow in TallSoft Quick TFTP Server Pro 2.1 allows remote attackers to cause a denial of service or execute arbitrary code via a long mode field in a read or write request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9cwx-r757-jfpg/GHSA-9cwx-r757-jfpg.json b/advisories/unreviewed/2022/05/GHSA-9cwx-r757-jfpg/GHSA-9cwx-r757-jfpg.json index 4d79e6e080e..87c933cf809 100644 --- a/advisories/unreviewed/2022/05/GHSA-9cwx-r757-jfpg/GHSA-9cwx-r757-jfpg.json +++ b/advisories/unreviewed/2022/05/GHSA-9cwx-r757-jfpg/GHSA-9cwx-r757-jfpg.json @@ -7,12 +7,8 @@ "CVE-2008-1959" ], "details": "Stack-based buffer overflow in the get_remote_video_port_media function in call.cpp in SIPp 3.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted SIP message. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9f79-mxj2-r96m/GHSA-9f79-mxj2-r96m.json b/advisories/unreviewed/2022/05/GHSA-9f79-mxj2-r96m/GHSA-9f79-mxj2-r96m.json index 104502501a9..fce37c53715 100644 --- a/advisories/unreviewed/2022/05/GHSA-9f79-mxj2-r96m/GHSA-9f79-mxj2-r96m.json +++ b/advisories/unreviewed/2022/05/GHSA-9f79-mxj2-r96m/GHSA-9f79-mxj2-r96m.json @@ -7,12 +7,8 @@ "CVE-2008-1463" ], "details": "Cross-site scripting (XSS) vulnerability in the management GUI in Imperva SecureSphere MX Management Server 5.0 allows remote attackers to inject arbitrary web script or HTML via an invalid or prohibited request to a web server protected by SecureSphere, which triggers injection into the \"corrective action\" section of an alert page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9fgp-rhj8-rpp2/GHSA-9fgp-rhj8-rpp2.json b/advisories/unreviewed/2022/05/GHSA-9fgp-rhj8-rpp2/GHSA-9fgp-rhj8-rpp2.json index b56d2b56feb..f440ba0ea01 100644 --- a/advisories/unreviewed/2022/05/GHSA-9fgp-rhj8-rpp2/GHSA-9fgp-rhj8-rpp2.json +++ b/advisories/unreviewed/2022/05/GHSA-9fgp-rhj8-rpp2/GHSA-9fgp-rhj8-rpp2.json @@ -7,12 +7,8 @@ "CVE-2008-1682" ], "details": "PHP remote file inclusion vulnerability in quiz/common/db_config.inc.php in the Online FlashQuiz (com_onlineflashquiz) 1.0.2 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the base_dir parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9fj9-7hv4-wf6g/GHSA-9fj9-7hv4-wf6g.json b/advisories/unreviewed/2022/05/GHSA-9fj9-7hv4-wf6g/GHSA-9fj9-7hv4-wf6g.json index 47d377af337..6f88c8a0e74 100644 --- a/advisories/unreviewed/2022/05/GHSA-9fj9-7hv4-wf6g/GHSA-9fj9-7hv4-wf6g.json +++ b/advisories/unreviewed/2022/05/GHSA-9fj9-7hv4-wf6g/GHSA-9fj9-7hv4-wf6g.json @@ -7,12 +7,8 @@ "CVE-2008-1952" ], "details": "The backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen ioemu does not properly restrict the frame buffer size, which allows attackers to cause a denial of service (crash) by mapping an arbitrary amount of guest memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9g6c-wpcg-gcfv/GHSA-9g6c-wpcg-gcfv.json b/advisories/unreviewed/2022/05/GHSA-9g6c-wpcg-gcfv/GHSA-9g6c-wpcg-gcfv.json index a9b0d4cfb28..7827a239871 100644 --- a/advisories/unreviewed/2022/05/GHSA-9g6c-wpcg-gcfv/GHSA-9g6c-wpcg-gcfv.json +++ b/advisories/unreviewed/2022/05/GHSA-9g6c-wpcg-gcfv/GHSA-9g6c-wpcg-gcfv.json @@ -7,12 +7,8 @@ "CVE-2008-1623" ], "details": "SQL injection vulnerability in admin_view_image.php in Smoothflash allows remote attackers to execute arbitrary SQL commands via the cid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9jrf-fg4x-fj2v/GHSA-9jrf-fg4x-fj2v.json b/advisories/unreviewed/2022/05/GHSA-9jrf-fg4x-fj2v/GHSA-9jrf-fg4x-fj2v.json index 652f98a5268..bf771218084 100644 --- a/advisories/unreviewed/2022/05/GHSA-9jrf-fg4x-fj2v/GHSA-9jrf-fg4x-fj2v.json +++ b/advisories/unreviewed/2022/05/GHSA-9jrf-fg4x-fj2v/GHSA-9jrf-fg4x-fj2v.json @@ -7,12 +7,8 @@ "CVE-2008-1491" ], "details": "Stack-based buffer overflow in the DPC Proxy server (DpcProxy.exe) in ASUS Remote Console (aka ARC or ASMB3) 2.0.0.19 and 2.0.0.24 allows remote attackers to execute arbitrary code via a long string to TCP port 623.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9mx8-5rcr-64g4/GHSA-9mx8-5rcr-64g4.json b/advisories/unreviewed/2022/05/GHSA-9mx8-5rcr-64g4/GHSA-9mx8-5rcr-64g4.json index 395acabb92b..25e871cb279 100644 --- a/advisories/unreviewed/2022/05/GHSA-9mx8-5rcr-64g4/GHSA-9mx8-5rcr-64g4.json +++ b/advisories/unreviewed/2022/05/GHSA-9mx8-5rcr-64g4/GHSA-9mx8-5rcr-64g4.json @@ -7,12 +7,8 @@ "CVE-2008-1594" ], "details": "The kernel in IBM AIX 5.2 and 5.3 does not properly handle resizing JFS2 filesystems on concurrent volume groups spread across multiple nodes, which allows local users of one node to cause a denial of service (remote node crash) by using chfs or lreducelv to reduce a filesystem's size.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9r93-hrx4-h834/GHSA-9r93-hrx4-h834.json b/advisories/unreviewed/2022/05/GHSA-9r93-hrx4-h834/GHSA-9r93-hrx4-h834.json index 024d6e82d27..42f569e35e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-9r93-hrx4-h834/GHSA-9r93-hrx4-h834.json +++ b/advisories/unreviewed/2022/05/GHSA-9r93-hrx4-h834/GHSA-9r93-hrx4-h834.json @@ -7,12 +7,8 @@ "CVE-2008-1530" ], "details": "GnuPG (gpg) 1.4.8 and 2.0.8 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted duplicate keys that are imported from key servers, which triggers \"memory corruption around deduplication of user IDs.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9ww6-3m5v-h28h/GHSA-9ww6-3m5v-h28h.json b/advisories/unreviewed/2022/05/GHSA-9ww6-3m5v-h28h/GHSA-9ww6-3m5v-h28h.json index ece024a051a..b00073686cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-9ww6-3m5v-h28h/GHSA-9ww6-3m5v-h28h.json +++ b/advisories/unreviewed/2022/05/GHSA-9ww6-3m5v-h28h/GHSA-9ww6-3m5v-h28h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c3j5-429m-ph5q/GHSA-c3j5-429m-ph5q.json b/advisories/unreviewed/2022/05/GHSA-c3j5-429m-ph5q/GHSA-c3j5-429m-ph5q.json index 35ba213d13d..a51e6fb20b9 100644 --- a/advisories/unreviewed/2022/05/GHSA-c3j5-429m-ph5q/GHSA-c3j5-429m-ph5q.json +++ b/advisories/unreviewed/2022/05/GHSA-c3j5-429m-ph5q/GHSA-c3j5-429m-ph5q.json @@ -7,12 +7,8 @@ "CVE-2008-1593" ], "details": "The checkpoint and restart feature in the kernel in IBM AIX 5.2, 5.3, and 6.1 does not properly protect kernel memory, which allows local users to read and modify portions of memory and gain privileges via unspecified vectors involving a restart of a 64-bit process, probably related to the as_getadsp64 function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c482-h2ff-rgfw/GHSA-c482-h2ff-rgfw.json b/advisories/unreviewed/2022/05/GHSA-c482-h2ff-rgfw/GHSA-c482-h2ff-rgfw.json index 2859be62d55..3ea8098e647 100644 --- a/advisories/unreviewed/2022/05/GHSA-c482-h2ff-rgfw/GHSA-c482-h2ff-rgfw.json +++ b/advisories/unreviewed/2022/05/GHSA-c482-h2ff-rgfw/GHSA-c482-h2ff-rgfw.json @@ -7,12 +7,8 @@ "CVE-2008-1639" ], "details": "SQL injection vulnerability in index.php in Neat weblog 0.2 allows remote attackers to execute arbitrary SQL commands via the articleId parameter in a show action, probably related to the showArticle function in lib/lib_article.include.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c4q5-fmj5-xm6h/GHSA-c4q5-fmj5-xm6h.json b/advisories/unreviewed/2022/05/GHSA-c4q5-fmj5-xm6h/GHSA-c4q5-fmj5-xm6h.json index cfd50a29dd6..b503d074c2d 100644 --- a/advisories/unreviewed/2022/05/GHSA-c4q5-fmj5-xm6h/GHSA-c4q5-fmj5-xm6h.json +++ b/advisories/unreviewed/2022/05/GHSA-c4q5-fmj5-xm6h/GHSA-c4q5-fmj5-xm6h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c5fh-3q27-g4r5/GHSA-c5fh-3q27-g4r5.json b/advisories/unreviewed/2022/05/GHSA-c5fh-3q27-g4r5/GHSA-c5fh-3q27-g4r5.json index 1919aa1fa35..4a68cef4f64 100644 --- a/advisories/unreviewed/2022/05/GHSA-c5fh-3q27-g4r5/GHSA-c5fh-3q27-g4r5.json +++ b/advisories/unreviewed/2022/05/GHSA-c5fh-3q27-g4r5/GHSA-c5fh-3q27-g4r5.json @@ -7,12 +7,8 @@ "CVE-2021-41033" ], "details": "In all released versions of Eclipse Equinox, at least until version 4.21 (September 2021), installation can be vulnerable to man-in-the-middle attack if using p2 repos that are HTTP; that can then be exploited to serve incorrect p2 metadata and entirely alter the local installation, particularly by installing plug-ins that may then run malicious code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c5gw-57vh-36mj/GHSA-c5gw-57vh-36mj.json b/advisories/unreviewed/2022/05/GHSA-c5gw-57vh-36mj/GHSA-c5gw-57vh-36mj.json index d0b9bb17abc..f929ef86ef2 100644 --- a/advisories/unreviewed/2022/05/GHSA-c5gw-57vh-36mj/GHSA-c5gw-57vh-36mj.json +++ b/advisories/unreviewed/2022/05/GHSA-c5gw-57vh-36mj/GHSA-c5gw-57vh-36mj.json @@ -7,12 +7,8 @@ "CVE-2008-1503" ], "details": "Cross-site scripting (XSS) vulnerability in the web management interface in F5 BIG-IP 9.4.3 allows remote attackers to inject arbitrary web script or HTML via (1) the name of a node object, or the (2) sysContact or (3) sysLocation SNMP configuration field, aka \"Audit Log XSS.\" NOTE: these issues might be resultant from cross-site request forgery (CSRF) vulnerabilities.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c5jc-2g4g-h22j/GHSA-c5jc-2g4g-h22j.json b/advisories/unreviewed/2022/05/GHSA-c5jc-2g4g-h22j/GHSA-c5jc-2g4g-h22j.json index 9a37cb596dd..757984767ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-c5jc-2g4g-h22j/GHSA-c5jc-2g4g-h22j.json +++ b/advisories/unreviewed/2022/05/GHSA-c5jc-2g4g-h22j/GHSA-c5jc-2g4g-h22j.json @@ -7,12 +7,8 @@ "CVE-2008-1811" ], "details": "Unspecified vulnerability in Oracle Application Express 3.0.1 has unspecified impact and remote authenticated attack vectors related to flows_030000.wwv_execute_immediate, aka APEX01. NOTE: the previous information was obtained from the April 2008 CPU. Oracle has not commented on reliable researcher claims that APEX01 is for insufficient authorization checks for SQL commands in the run_ddl function in flows_030000.wwv_execute_immediate, allowing privilege escalation by certain non-DBA remote authenticated users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c5qh-3289-h9w4/GHSA-c5qh-3289-h9w4.json b/advisories/unreviewed/2022/05/GHSA-c5qh-3289-h9w4/GHSA-c5qh-3289-h9w4.json index 256025753e9..1f2d706abf1 100644 --- a/advisories/unreviewed/2022/05/GHSA-c5qh-3289-h9w4/GHSA-c5qh-3289-h9w4.json +++ b/advisories/unreviewed/2022/05/GHSA-c5qh-3289-h9w4/GHSA-c5qh-3289-h9w4.json @@ -7,12 +7,8 @@ "CVE-2008-1637" ], "details": "PowerDNS Recursor before 3.1.5 uses insufficient randomness to calculate (1) TRXID values and (2) UDP source port numbers, which makes it easier for remote attackers to poison a DNS cache, related to (a) algorithmic deficiencies in rand and random functions in external libraries, (b) use of a 32-bit seed value, and (c) choice of the time of day as the sole seeding information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c6xr-3cp2-f7f7/GHSA-c6xr-3cp2-f7f7.json b/advisories/unreviewed/2022/05/GHSA-c6xr-3cp2-f7f7/GHSA-c6xr-3cp2-f7f7.json index aaaf554d8be..f303e2dab18 100644 --- a/advisories/unreviewed/2022/05/GHSA-c6xr-3cp2-f7f7/GHSA-c6xr-3cp2-f7f7.json +++ b/advisories/unreviewed/2022/05/GHSA-c6xr-3cp2-f7f7/GHSA-c6xr-3cp2-f7f7.json @@ -7,12 +7,8 @@ "CVE-2008-2002" ], "details": "Multiple cross-site request forgery (CSRF) vulnerabilities on Motorola Surfboard with software SB5100-2.3.3.0-SCM00-NOSH allow remote attackers to (1) cause a denial of service (device reboot) via the \"Restart Cable Modem\" value in the BUTTON_INPUT parameter to configdata.html, and (2) cause a denial of service (hard reset) via the \"Reset All Defaults\" value in the BUTTON_INPUT parameter to configdata.html.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c77f-4vcc-5w49/GHSA-c77f-4vcc-5w49.json b/advisories/unreviewed/2022/05/GHSA-c77f-4vcc-5w49/GHSA-c77f-4vcc-5w49.json index fa580fcdedb..bc5e44c4a5f 100644 --- a/advisories/unreviewed/2022/05/GHSA-c77f-4vcc-5w49/GHSA-c77f-4vcc-5w49.json +++ b/advisories/unreviewed/2022/05/GHSA-c77f-4vcc-5w49/GHSA-c77f-4vcc-5w49.json @@ -7,12 +7,8 @@ "CVE-2008-1624" ], "details": "Directory traversal vulnerability in v2demo/page.php in Jshop Server 1.x through 2.x allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the xPage parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c7gj-ff3q-v6q8/GHSA-c7gj-ff3q-v6q8.json b/advisories/unreviewed/2022/05/GHSA-c7gj-ff3q-v6q8/GHSA-c7gj-ff3q-v6q8.json index ef2092e0506..979128fd46a 100644 --- a/advisories/unreviewed/2022/05/GHSA-c7gj-ff3q-v6q8/GHSA-c7gj-ff3q-v6q8.json +++ b/advisories/unreviewed/2022/05/GHSA-c7gj-ff3q-v6q8/GHSA-c7gj-ff3q-v6q8.json @@ -7,12 +7,8 @@ "CVE-2008-1747" ], "details": "Unspecified vulnerability in Cisco Unified Communications Manager 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) allows remote attackers to cause a denial of service (CCM service restart) via an unspecified SIP INVITE message, aka Bug ID CSCsk46944.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c8ch-p52f-7rgj/GHSA-c8ch-p52f-7rgj.json b/advisories/unreviewed/2022/05/GHSA-c8ch-p52f-7rgj/GHSA-c8ch-p52f-7rgj.json index d0e6c56f9c6..bf99b11d721 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8ch-p52f-7rgj/GHSA-c8ch-p52f-7rgj.json +++ b/advisories/unreviewed/2022/05/GHSA-c8ch-p52f-7rgj/GHSA-c8ch-p52f-7rgj.json @@ -7,12 +7,8 @@ "CVE-2008-1515" ], "details": "The SOAP interface in OTRS 2.1.x before 2.1.8 and 2.2.x before 2.2.6 allows remote attackers to \"read and modify objects\" via SOAP requests, related to \"Missing security checks.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c8fq-785c-3vm3/GHSA-c8fq-785c-3vm3.json b/advisories/unreviewed/2022/05/GHSA-c8fq-785c-3vm3/GHSA-c8fq-785c-3vm3.json index 3f90f4d0fca..8854ee35b89 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8fq-785c-3vm3/GHSA-c8fq-785c-3vm3.json +++ b/advisories/unreviewed/2022/05/GHSA-c8fq-785c-3vm3/GHSA-c8fq-785c-3vm3.json @@ -7,12 +7,8 @@ "CVE-2008-1858" ], "details": "SQL injection vulnerability in index.php in 724Networks 724CMS 4.01 and earlier allows remote attackers to execute arbitrary SQL commands via the ID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c8wm-gxf7-x75p/GHSA-c8wm-gxf7-x75p.json b/advisories/unreviewed/2022/05/GHSA-c8wm-gxf7-x75p/GHSA-c8wm-gxf7-x75p.json index 8b89e109905..d4aae4e1dae 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8wm-gxf7-x75p/GHSA-c8wm-gxf7-x75p.json +++ b/advisories/unreviewed/2022/05/GHSA-c8wm-gxf7-x75p/GHSA-c8wm-gxf7-x75p.json @@ -7,12 +7,8 @@ "CVE-2008-1628" ], "details": "Stack-based buffer overflow in the audit_log_user_command function in lib/audit_logging.c in Linux Audit before 1.7 might allow remote attackers to execute arbitrary code via a long command argument. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c947-8fx5-pm4w/GHSA-c947-8fx5-pm4w.json b/advisories/unreviewed/2022/05/GHSA-c947-8fx5-pm4w/GHSA-c947-8fx5-pm4w.json index f0df487bc40..c878bc1f5ef 100644 --- a/advisories/unreviewed/2022/05/GHSA-c947-8fx5-pm4w/GHSA-c947-8fx5-pm4w.json +++ b/advisories/unreviewed/2022/05/GHSA-c947-8fx5-pm4w/GHSA-c947-8fx5-pm4w.json @@ -7,12 +7,8 @@ "CVE-2008-1734" ], "details": "Interpretation conflict in PHP Toolkit before 1.0.1 on Gentoo Linux might allow local users to cause a denial of service (PHP outage) and read contents of PHP scripts by creating a file with a one-letter lowercase alphabetic name, which triggers interpretation of a certain unquoted [a-z] argument as a matching shell glob for this name, rather than interpretation as the literal [a-z] regular-expression string, and consequently blocks the launch of the PHP interpreter within the Apache HTTP Server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c95g-rpjx-pm4h/GHSA-c95g-rpjx-pm4h.json b/advisories/unreviewed/2022/05/GHSA-c95g-rpjx-pm4h/GHSA-c95g-rpjx-pm4h.json index 77d6c0f3086..e448c3cba23 100644 --- a/advisories/unreviewed/2022/05/GHSA-c95g-rpjx-pm4h/GHSA-c95g-rpjx-pm4h.json +++ b/advisories/unreviewed/2022/05/GHSA-c95g-rpjx-pm4h/GHSA-c95g-rpjx-pm4h.json @@ -7,12 +7,8 @@ "CVE-2008-1998" ], "details": "The NNSTAT (aka SYSPROC.NNSTAT) procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 on Windows allows remote authenticated users to overwrite arbitrary files via the log file parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cc6w-m3qm-rwmr/GHSA-cc6w-m3qm-rwmr.json b/advisories/unreviewed/2022/05/GHSA-cc6w-m3qm-rwmr/GHSA-cc6w-m3qm-rwmr.json index c57922ec658..bbcebbe1a1b 100644 --- a/advisories/unreviewed/2022/05/GHSA-cc6w-m3qm-rwmr/GHSA-cc6w-m3qm-rwmr.json +++ b/advisories/unreviewed/2022/05/GHSA-cc6w-m3qm-rwmr/GHSA-cc6w-m3qm-rwmr.json @@ -7,12 +7,8 @@ "CVE-2008-1620" ], "details": "Directory traversal vulnerability in 2X TFTP service (TFTPd.exe) 3.2.0.0 and earlier in 2X ThinClientServer 5.0_sp1-r3497 and earlier allows remote attackers to read or overwrite arbitrary files via a ... (dot dot dot) in the filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ccm6-44p7-37q9/GHSA-ccm6-44p7-37q9.json b/advisories/unreviewed/2022/05/GHSA-ccm6-44p7-37q9/GHSA-ccm6-44p7-37q9.json index ac929e46a01..8dfa858ec5b 100644 --- a/advisories/unreviewed/2022/05/GHSA-ccm6-44p7-37q9/GHSA-ccm6-44p7-37q9.json +++ b/advisories/unreviewed/2022/05/GHSA-ccm6-44p7-37q9/GHSA-ccm6-44p7-37q9.json @@ -7,12 +7,8 @@ "CVE-2008-1718" ], "details": "Buffer overflow in mimesr.dll in Autonomy (formerly Verity) KeyView, as used in IBM Lotus Notes before 8.0, might allow user-assisted remote attackers to execute arbitrary code via an e-mail message with a crafted Text mail (MIME) attachment.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cg6q-fccw-g993/GHSA-cg6q-fccw-g993.json b/advisories/unreviewed/2022/05/GHSA-cg6q-fccw-g993/GHSA-cg6q-fccw-g993.json index f0c16054c5e..9b6a8c35f50 100644 --- a/advisories/unreviewed/2022/05/GHSA-cg6q-fccw-g993/GHSA-cg6q-fccw-g993.json +++ b/advisories/unreviewed/2022/05/GHSA-cg6q-fccw-g993/GHSA-cg6q-fccw-g993.json @@ -7,12 +7,8 @@ "CVE-2008-1559" ], "details": "SQL injection vulnerability in the Bernard Gilly AlphaContent (com_alphacontent) 2.5.8 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a view action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-chj7-84jj-c8jf/GHSA-chj7-84jj-c8jf.json b/advisories/unreviewed/2022/05/GHSA-chj7-84jj-c8jf/GHSA-chj7-84jj-c8jf.json index 19d9f580f11..9ff57a3107e 100644 --- a/advisories/unreviewed/2022/05/GHSA-chj7-84jj-c8jf/GHSA-chj7-84jj-c8jf.json +++ b/advisories/unreviewed/2022/05/GHSA-chj7-84jj-c8jf/GHSA-chj7-84jj-c8jf.json @@ -7,12 +7,8 @@ "CVE-2008-1788" ], "details": "SQL injection vulnerability in directory.php in Prozilla Entertainers 1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-chjc-vrcx-99p5/GHSA-chjc-vrcx-99p5.json b/advisories/unreviewed/2022/05/GHSA-chjc-vrcx-99p5/GHSA-chjc-vrcx-99p5.json index 46031d80e5f..8a5f59e9015 100644 --- a/advisories/unreviewed/2022/05/GHSA-chjc-vrcx-99p5/GHSA-chjc-vrcx-99p5.json +++ b/advisories/unreviewed/2022/05/GHSA-chjc-vrcx-99p5/GHSA-chjc-vrcx-99p5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-chpr-g3x2-5jgv/GHSA-chpr-g3x2-5jgv.json b/advisories/unreviewed/2022/05/GHSA-chpr-g3x2-5jgv/GHSA-chpr-g3x2-5jgv.json index e3161303665..74ba160fc02 100644 --- a/advisories/unreviewed/2022/05/GHSA-chpr-g3x2-5jgv/GHSA-chpr-g3x2-5jgv.json +++ b/advisories/unreviewed/2022/05/GHSA-chpr-g3x2-5jgv/GHSA-chpr-g3x2-5jgv.json @@ -7,12 +7,8 @@ "CVE-2008-1534" ], "details": "Multiple directory traversal vulnerabilities in PowerPHPBoard 1.00b allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) settings[footer] parameter to footer.inc.php and the (2) settings[header] parameter to header.inc.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cj9r-8xf4-8975/GHSA-cj9r-8xf4-8975.json b/advisories/unreviewed/2022/05/GHSA-cj9r-8xf4-8975/GHSA-cj9r-8xf4-8975.json index 28aeb726c5a..38af7a98088 100644 --- a/advisories/unreviewed/2022/05/GHSA-cj9r-8xf4-8975/GHSA-cj9r-8xf4-8975.json +++ b/advisories/unreviewed/2022/05/GHSA-cj9r-8xf4-8975/GHSA-cj9r-8xf4-8975.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cjjm-2hw2-c3jx/GHSA-cjjm-2hw2-c3jx.json b/advisories/unreviewed/2022/05/GHSA-cjjm-2hw2-c3jx/GHSA-cjjm-2hw2-c3jx.json index c9a7d3ad8f9..c6e9e544dd1 100644 --- a/advisories/unreviewed/2022/05/GHSA-cjjm-2hw2-c3jx/GHSA-cjjm-2hw2-c3jx.json +++ b/advisories/unreviewed/2022/05/GHSA-cjjm-2hw2-c3jx/GHSA-cjjm-2hw2-c3jx.json @@ -7,12 +7,8 @@ "CVE-2021-41034" ], "details": "The build of some language stacks of Eclipse Che version 6 includes pulling some binaries from an unsecured HTTP endpoint. As a consequence the builds of such stacks are vulnerable to MITM attacks that allow the replacement of the original binaries with arbitrary ones. The stacks involved are Java 8 (alpine and centos), Android and PHP. The vulnerability is not exploitable at runtime but only when building Che.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cjr5-49hf-284r/GHSA-cjr5-49hf-284r.json b/advisories/unreviewed/2022/05/GHSA-cjr5-49hf-284r/GHSA-cjr5-49hf-284r.json index 79eacf41218..cbac6150fc8 100644 --- a/advisories/unreviewed/2022/05/GHSA-cjr5-49hf-284r/GHSA-cjr5-49hf-284r.json +++ b/advisories/unreviewed/2022/05/GHSA-cjr5-49hf-284r/GHSA-cjr5-49hf-284r.json @@ -7,12 +7,8 @@ "CVE-2008-1927" ], "details": "Double free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a crafted regular expression containing UTF8 characters. NOTE: this issue might only be present on certain operating systems.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -180,9 +176,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cpq4-4hfc-23c8/GHSA-cpq4-4hfc-23c8.json b/advisories/unreviewed/2022/05/GHSA-cpq4-4hfc-23c8/GHSA-cpq4-4hfc-23c8.json index 18aeea7dbc4..b82c034e824 100644 --- a/advisories/unreviewed/2022/05/GHSA-cpq4-4hfc-23c8/GHSA-cpq4-4hfc-23c8.json +++ b/advisories/unreviewed/2022/05/GHSA-cpq4-4hfc-23c8/GHSA-cpq4-4hfc-23c8.json @@ -7,12 +7,8 @@ "CVE-2008-1913" ], "details": "SQL injection vulnerability in index.php in Lasernet CMS 1.5 and 1.11, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the new parameter in a new action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cq2h-f697-9p5m/GHSA-cq2h-f697-9p5m.json b/advisories/unreviewed/2022/05/GHSA-cq2h-f697-9p5m/GHSA-cq2h-f697-9p5m.json index 2beb85b7c5d..21f5dab7bd4 100644 --- a/advisories/unreviewed/2022/05/GHSA-cq2h-f697-9p5m/GHSA-cq2h-f697-9p5m.json +++ b/advisories/unreviewed/2022/05/GHSA-cq2h-f697-9p5m/GHSA-cq2h-f697-9p5m.json @@ -7,12 +7,8 @@ "CVE-2008-1651" ], "details": "Directory traversal vulnerability in admin/login.php in EasyNews 4.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cq54-mjwx-5pjw/GHSA-cq54-mjwx-5pjw.json b/advisories/unreviewed/2022/05/GHSA-cq54-mjwx-5pjw/GHSA-cq54-mjwx-5pjw.json index 2b6b4317b87..1e4879005f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-cq54-mjwx-5pjw/GHSA-cq54-mjwx-5pjw.json +++ b/advisories/unreviewed/2022/05/GHSA-cq54-mjwx-5pjw/GHSA-cq54-mjwx-5pjw.json @@ -7,12 +7,8 @@ "CVE-2021-33622" ], "details": "Sylabs Singularity 3.5.x and 3.6.x, and SingularityPRO before 3.5-8, has an Incorrect Check of a Function's Return Value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cr93-5c5c-3ppg/GHSA-cr93-5c5c-3ppg.json b/advisories/unreviewed/2022/05/GHSA-cr93-5c5c-3ppg/GHSA-cr93-5c5c-3ppg.json index 1ced394c6e1..2d5291625c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-cr93-5c5c-3ppg/GHSA-cr93-5c5c-3ppg.json +++ b/advisories/unreviewed/2022/05/GHSA-cr93-5c5c-3ppg/GHSA-cr93-5c5c-3ppg.json @@ -7,12 +7,8 @@ "CVE-2008-1541" ], "details": "Directory traversal vulnerability in cgi-bin/his-webshop.pl in HIS Webshop 2.50 allows remote attackers to read arbitrary files via a .. (dot dot) in the t parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-crv8-9h6w-q3j9/GHSA-crv8-9h6w-q3j9.json b/advisories/unreviewed/2022/05/GHSA-crv8-9h6w-q3j9/GHSA-crv8-9h6w-q3j9.json index a5c57c9a892..fc034b8a06b 100644 --- a/advisories/unreviewed/2022/05/GHSA-crv8-9h6w-q3j9/GHSA-crv8-9h6w-q3j9.json +++ b/advisories/unreviewed/2022/05/GHSA-crv8-9h6w-q3j9/GHSA-crv8-9h6w-q3j9.json @@ -7,12 +7,8 @@ "CVE-2008-1326" ], "details": "Cross-site scripting (XSS) vulnerability in search.php in Gallarific allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-crwc-5cxq-qf6c/GHSA-crwc-5cxq-qf6c.json b/advisories/unreviewed/2022/05/GHSA-crwc-5cxq-qf6c/GHSA-crwc-5cxq-qf6c.json index b1e602af575..11428e8ca15 100644 --- a/advisories/unreviewed/2022/05/GHSA-crwc-5cxq-qf6c/GHSA-crwc-5cxq-qf6c.json +++ b/advisories/unreviewed/2022/05/GHSA-crwc-5cxq-qf6c/GHSA-crwc-5cxq-qf6c.json @@ -7,12 +7,8 @@ "CVE-2008-1603" ], "details": "Cross-site scripting (XSS) vulnerability in GNB DesignForm before 3.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the email form.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cvq8-fwgp-jgv2/GHSA-cvq8-fwgp-jgv2.json b/advisories/unreviewed/2022/05/GHSA-cvq8-fwgp-jgv2/GHSA-cvq8-fwgp-jgv2.json index f4eb3b0d7f9..b2f36ea9a14 100644 --- a/advisories/unreviewed/2022/05/GHSA-cvq8-fwgp-jgv2/GHSA-cvq8-fwgp-jgv2.json +++ b/advisories/unreviewed/2022/05/GHSA-cvq8-fwgp-jgv2/GHSA-cvq8-fwgp-jgv2.json @@ -7,12 +7,8 @@ "CVE-2008-1487" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in LinPHA before 1.3.3 allow remote attackers to inject arbitrary web script or HTML via (1) ftp/index.php, (2) viewer.php, (3) functions/other.php, (4) include/left_menu.class.php, and (5) plugins/stats/stats_view.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cw5r-383w-463h/GHSA-cw5r-383w-463h.json b/advisories/unreviewed/2022/05/GHSA-cw5r-383w-463h/GHSA-cw5r-383w-463h.json index b929cc6515d..225be6d3e03 100644 --- a/advisories/unreviewed/2022/05/GHSA-cw5r-383w-463h/GHSA-cw5r-383w-463h.json +++ b/advisories/unreviewed/2022/05/GHSA-cw5r-383w-463h/GHSA-cw5r-383w-463h.json @@ -7,12 +7,8 @@ "CVE-2008-1800" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in DivXDB 2002 0.94b allow remote attackers to inject arbitrary web script or HTML via the (1) choice, (2) _page_, (3) zone_admin, (4) general_search, and (5) import parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cwx8-54f9-93jq/GHSA-cwx8-54f9-93jq.json b/advisories/unreviewed/2022/05/GHSA-cwx8-54f9-93jq/GHSA-cwx8-54f9-93jq.json index 017d281d169..36860b07da1 100644 --- a/advisories/unreviewed/2022/05/GHSA-cwx8-54f9-93jq/GHSA-cwx8-54f9-93jq.json +++ b/advisories/unreviewed/2022/05/GHSA-cwx8-54f9-93jq/GHSA-cwx8-54f9-93jq.json @@ -7,12 +7,8 @@ "CVE-2008-1911" ], "details": "SQL injection vulnerability in includes/system.php in 1024 CMS 1.4.2 beta and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via a cookpass cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f2g6-m663-wjp3/GHSA-f2g6-m663-wjp3.json b/advisories/unreviewed/2022/05/GHSA-f2g6-m663-wjp3/GHSA-f2g6-m663-wjp3.json index 109fa6eda79..c66c19148fa 100644 --- a/advisories/unreviewed/2022/05/GHSA-f2g6-m663-wjp3/GHSA-f2g6-m663-wjp3.json +++ b/advisories/unreviewed/2022/05/GHSA-f2g6-m663-wjp3/GHSA-f2g6-m663-wjp3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f2vr-vv3c-r59r/GHSA-f2vr-vv3c-r59r.json b/advisories/unreviewed/2022/05/GHSA-f2vr-vv3c-r59r/GHSA-f2vr-vv3c-r59r.json index de8c384fe93..35b3db560bf 100644 --- a/advisories/unreviewed/2022/05/GHSA-f2vr-vv3c-r59r/GHSA-f2vr-vv3c-r59r.json +++ b/advisories/unreviewed/2022/05/GHSA-f2vr-vv3c-r59r/GHSA-f2vr-vv3c-r59r.json @@ -7,12 +7,8 @@ "CVE-2008-1662" ], "details": "Unspecified vulnerability in the HP System Administration Manager (SAM) on HP-UX B.11.11 and B.11.23, when used to configure NFS, might allow remote attackers to read or modify arbitrary files, related to an \"empty systems list.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f5mp-5fgx-mxj6/GHSA-f5mp-5fgx-mxj6.json b/advisories/unreviewed/2022/05/GHSA-f5mp-5fgx-mxj6/GHSA-f5mp-5fgx-mxj6.json index fb6fc77c668..adc8a6196fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-f5mp-5fgx-mxj6/GHSA-f5mp-5fgx-mxj6.json +++ b/advisories/unreviewed/2022/05/GHSA-f5mp-5fgx-mxj6/GHSA-f5mp-5fgx-mxj6.json @@ -7,12 +7,8 @@ "CVE-2008-1508" ], "details": "SQL injection vulnerability in EfesTech E-Kontör and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f5pj-728w-6p4q/GHSA-f5pj-728w-6p4q.json b/advisories/unreviewed/2022/05/GHSA-f5pj-728w-6p4q/GHSA-f5pj-728w-6p4q.json index c948c63589e..5b39c38b6b8 100644 --- a/advisories/unreviewed/2022/05/GHSA-f5pj-728w-6p4q/GHSA-f5pj-728w-6p4q.json +++ b/advisories/unreviewed/2022/05/GHSA-f5pj-728w-6p4q/GHSA-f5pj-728w-6p4q.json @@ -7,12 +7,8 @@ "CVE-2008-1481" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in webSPELL 4.1.2 allows remote attackers to inject arbitrary web script or HTML via the board parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f7hf-98mg-4rpp/GHSA-f7hf-98mg-4rpp.json b/advisories/unreviewed/2022/05/GHSA-f7hf-98mg-4rpp/GHSA-f7hf-98mg-4rpp.json index 323284d31d4..e2be3d166fa 100644 --- a/advisories/unreviewed/2022/05/GHSA-f7hf-98mg-4rpp/GHSA-f7hf-98mg-4rpp.json +++ b/advisories/unreviewed/2022/05/GHSA-f7hf-98mg-4rpp/GHSA-f7hf-98mg-4rpp.json @@ -7,12 +7,8 @@ "CVE-2008-1819" ], "details": "Unspecified vulnerability in the Oracle Net Services component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and local attack vectors, aka DB09.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f857-3xrr-6w3c/GHSA-f857-3xrr-6w3c.json b/advisories/unreviewed/2022/05/GHSA-f857-3xrr-6w3c/GHSA-f857-3xrr-6w3c.json index 88a44e344cc..4c8e741c1b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-f857-3xrr-6w3c/GHSA-f857-3xrr-6w3c.json +++ b/advisories/unreviewed/2022/05/GHSA-f857-3xrr-6w3c/GHSA-f857-3xrr-6w3c.json @@ -7,12 +7,8 @@ "CVE-2008-1320" ], "details": "Multiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers to execute arbitrary code or cause a denial of service (crash) via (1) a long request to FxIAList on TCP port 6162, or (2) an SNMP request with a long community string to FxAgent on UDP port 6161.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f93v-7p8q-wgrc/GHSA-f93v-7p8q-wgrc.json b/advisories/unreviewed/2022/05/GHSA-f93v-7p8q-wgrc/GHSA-f93v-7p8q-wgrc.json index 14d34f2899d..4bd4175dafa 100644 --- a/advisories/unreviewed/2022/05/GHSA-f93v-7p8q-wgrc/GHSA-f93v-7p8q-wgrc.json +++ b/advisories/unreviewed/2022/05/GHSA-f93v-7p8q-wgrc/GHSA-f93v-7p8q-wgrc.json @@ -7,12 +7,8 @@ "CVE-2008-1839" ], "details": "Multgiple cross-site scripting (XSS) vulnerabilities in module/main.php in WORK system e-commerce 4.0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) day, (2) month, and (3) year parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ffq9-j5qv-6r7g/GHSA-ffq9-j5qv-6r7g.json b/advisories/unreviewed/2022/05/GHSA-ffq9-j5qv-6r7g/GHSA-ffq9-j5qv-6r7g.json index 5df37772a15..d3693758a66 100644 --- a/advisories/unreviewed/2022/05/GHSA-ffq9-j5qv-6r7g/GHSA-ffq9-j5qv-6r7g.json +++ b/advisories/unreviewed/2022/05/GHSA-ffq9-j5qv-6r7g/GHSA-ffq9-j5qv-6r7g.json @@ -7,12 +7,8 @@ "CVE-2008-1844" ], "details": "SQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute arbitrary SQL commands via the kind parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fg3q-6gmp-5pqc/GHSA-fg3q-6gmp-5pqc.json b/advisories/unreviewed/2022/05/GHSA-fg3q-6gmp-5pqc/GHSA-fg3q-6gmp-5pqc.json index 592a0a3ba58..512c1c2e1a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-fg3q-6gmp-5pqc/GHSA-fg3q-6gmp-5pqc.json +++ b/advisories/unreviewed/2022/05/GHSA-fg3q-6gmp-5pqc/GHSA-fg3q-6gmp-5pqc.json @@ -7,12 +7,8 @@ "CVE-2008-1914" ], "details": "Stack-based buffer overflow in the AntServer module (AntServer.exe) in BigAnt IM Server in BigAnt Messenger 2.2 allows remote attackers to execute arbitrary code via a long URI in a request to TCP port 6080. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fhhx-mhh2-9hxx/GHSA-fhhx-mhh2-9hxx.json b/advisories/unreviewed/2022/05/GHSA-fhhx-mhh2-9hxx/GHSA-fhhx-mhh2-9hxx.json index f6de0f151ab..6070f679cdc 100644 --- a/advisories/unreviewed/2022/05/GHSA-fhhx-mhh2-9hxx/GHSA-fhhx-mhh2-9hxx.json +++ b/advisories/unreviewed/2022/05/GHSA-fhhx-mhh2-9hxx/GHSA-fhhx-mhh2-9hxx.json @@ -7,12 +7,8 @@ "CVE-2008-1773" ], "details": "PHP remote file inclusion vulnerability in includes/header.inc.php in Dragoon 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fhj4-r329-x788/GHSA-fhj4-r329-x788.json b/advisories/unreviewed/2022/05/GHSA-fhj4-r329-x788/GHSA-fhj4-r329-x788.json index 0c7fe649351..d2469b9a7ef 100644 --- a/advisories/unreviewed/2022/05/GHSA-fhj4-r329-x788/GHSA-fhj4-r329-x788.json +++ b/advisories/unreviewed/2022/05/GHSA-fhj4-r329-x788/GHSA-fhj4-r329-x788.json @@ -7,12 +7,8 @@ "CVE-2008-1698" ], "details": "Cross-site scripting (XSS) vulnerability in gallery.php in Simple Gallery 2.2 allows remote attackers to inject arbitrary web script or HTML via the album parameter to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fhm2-q6vh-p9x9/GHSA-fhm2-q6vh-p9x9.json b/advisories/unreviewed/2022/05/GHSA-fhm2-q6vh-p9x9/GHSA-fhm2-q6vh-p9x9.json index 634f6724c4d..a5ca7c644ee 100644 --- a/advisories/unreviewed/2022/05/GHSA-fhm2-q6vh-p9x9/GHSA-fhm2-q6vh-p9x9.json +++ b/advisories/unreviewed/2022/05/GHSA-fhm2-q6vh-p9x9/GHSA-fhm2-q6vh-p9x9.json @@ -7,12 +7,8 @@ "CVE-2008-1552" ], "details": "The silc_pkcs1_decode function in the silccrypt library (silcpkcs1.c) in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server before 1.1.2 allows remote attackers to execute arbitrary code via a crafted PKCS#1 message, which triggers an integer underflow, signedness error, and a buffer overflow. NOTE: the researcher describes this as an integer overflow, but CVE uses the \"underflow\" term in cases of wraparound from unsigned subtraction.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -96,9 +92,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fhw2-75x3-cgj8/GHSA-fhw2-75x3-cgj8.json b/advisories/unreviewed/2022/05/GHSA-fhw2-75x3-cgj8/GHSA-fhw2-75x3-cgj8.json index 2ce58df87e4..2113d47ca5f 100644 --- a/advisories/unreviewed/2022/05/GHSA-fhw2-75x3-cgj8/GHSA-fhw2-75x3-cgj8.json +++ b/advisories/unreviewed/2022/05/GHSA-fhw2-75x3-cgj8/GHSA-fhw2-75x3-cgj8.json @@ -7,12 +7,8 @@ "CVE-2021-36790" ], "details": "The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows XSS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fm4j-wr6m-32wg/GHSA-fm4j-wr6m-32wg.json b/advisories/unreviewed/2022/05/GHSA-fm4j-wr6m-32wg/GHSA-fm4j-wr6m-32wg.json index 7930ad08aeb..9fc82d982b8 100644 --- a/advisories/unreviewed/2022/05/GHSA-fm4j-wr6m-32wg/GHSA-fm4j-wr6m-32wg.json +++ b/advisories/unreviewed/2022/05/GHSA-fm4j-wr6m-32wg/GHSA-fm4j-wr6m-32wg.json @@ -7,12 +7,8 @@ "CVE-2008-1997" ], "details": "Unspecified vulnerability in the ADMIN_SP_C2 procedure in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 allows remote authenticated users to execute arbitrary code via unknown vectors. NOTE: the ADMIN_SP_C issue is already covered by CVE-2008-0699.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fm6f-cqv9-287v/GHSA-fm6f-cqv9-287v.json b/advisories/unreviewed/2022/05/GHSA-fm6f-cqv9-287v/GHSA-fm6f-cqv9-287v.json index 32e07748e19..6595f61ae58 100644 --- a/advisories/unreviewed/2022/05/GHSA-fm6f-cqv9-287v/GHSA-fm6f-cqv9-287v.json +++ b/advisories/unreviewed/2022/05/GHSA-fm6f-cqv9-287v/GHSA-fm6f-cqv9-287v.json @@ -7,12 +7,8 @@ "CVE-2008-1654" ], "details": "Interaction error between Adobe Flash and multiple Universal Plug and Play (UPnP) services allow remote attackers to perform Cross-Site Request Forgery (CSRF) style attacks by using the Flash navigateToURL function to send a SOAP message to a UPnP control point, as demonstrated by changing the primary DNS server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fmhx-g7fq-9624/GHSA-fmhx-g7fq-9624.json b/advisories/unreviewed/2022/05/GHSA-fmhx-g7fq-9624/GHSA-fmhx-g7fq-9624.json index ac6fbf24785..58504c5bf09 100644 --- a/advisories/unreviewed/2022/05/GHSA-fmhx-g7fq-9624/GHSA-fmhx-g7fq-9624.json +++ b/advisories/unreviewed/2022/05/GHSA-fmhx-g7fq-9624/GHSA-fmhx-g7fq-9624.json @@ -7,12 +7,8 @@ "CVE-2008-1591" ], "details": "The pnVarPrepForStore function in PostNuke 0.764 and earlier skips input sanitization when magic_quotes_runtime is enabled, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via input associated with server variables, as demonstrated by the CLIENT_IP HTTP header (HTTP_CLIENT_IP variable).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fmmp-hrq3-7r3f/GHSA-fmmp-hrq3-7r3f.json b/advisories/unreviewed/2022/05/GHSA-fmmp-hrq3-7r3f/GHSA-fmmp-hrq3-7r3f.json index 0097be3bd51..d08d2b5c3e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-fmmp-hrq3-7r3f/GHSA-fmmp-hrq3-7r3f.json +++ b/advisories/unreviewed/2022/05/GHSA-fmmp-hrq3-7r3f/GHSA-fmmp-hrq3-7r3f.json @@ -7,12 +7,8 @@ "CVE-2008-1801" ], "details": "Integer underflow in the iso_recv_msg function (iso.c) in rdesktop 1.5.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a Remote Desktop Protocol (RDP) request with a small length field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -136,9 +132,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fmwx-3365-q5x9/GHSA-fmwx-3365-q5x9.json b/advisories/unreviewed/2022/05/GHSA-fmwx-3365-q5x9/GHSA-fmwx-3365-q5x9.json index 7eb810b8d08..7bbc381a0bf 100644 --- a/advisories/unreviewed/2022/05/GHSA-fmwx-3365-q5x9/GHSA-fmwx-3365-q5x9.json +++ b/advisories/unreviewed/2022/05/GHSA-fmwx-3365-q5x9/GHSA-fmwx-3365-q5x9.json @@ -7,12 +7,8 @@ "CVE-2008-1557" ], "details": "BolinOS 4.6.1 allows remote attackers to obtain sensitive information via a direct request to system/actionspages/_b/contentFiles/gBphpInfo.php, which calls the phpinfo function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fq5c-5q63-mpv6/GHSA-fq5c-5q63-mpv6.json b/advisories/unreviewed/2022/05/GHSA-fq5c-5q63-mpv6/GHSA-fq5c-5q63-mpv6.json index c6ed5579d47..bfedb4763c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-fq5c-5q63-mpv6/GHSA-fq5c-5q63-mpv6.json +++ b/advisories/unreviewed/2022/05/GHSA-fq5c-5q63-mpv6/GHSA-fq5c-5q63-mpv6.json @@ -7,12 +7,8 @@ "CVE-2008-1850" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in login.php in Omnistar Interactive OSI Affiliate allow remote attackers to inject arbitrary web script or HTML via the (1) login, (2) profile, (3) profile2, and (4) ref parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fqhr-g38x-rg92/GHSA-fqhr-g38x-rg92.json b/advisories/unreviewed/2022/05/GHSA-fqhr-g38x-rg92/GHSA-fqhr-g38x-rg92.json index 5bed9ef9c14..c5f305b3ff9 100644 --- a/advisories/unreviewed/2022/05/GHSA-fqhr-g38x-rg92/GHSA-fqhr-g38x-rg92.json +++ b/advisories/unreviewed/2022/05/GHSA-fqhr-g38x-rg92/GHSA-fqhr-g38x-rg92.json @@ -7,12 +7,8 @@ "CVE-2008-1563" ], "details": "The \"decode as\" feature in packet-bssap.c in the SCCP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -116,9 +112,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fv5h-8h7v-gq2j/GHSA-fv5h-8h7v-gq2j.json b/advisories/unreviewed/2022/05/GHSA-fv5h-8h7v-gq2j/GHSA-fv5h-8h7v-gq2j.json index eb54ae9c7b4..526acd721c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-fv5h-8h7v-gq2j/GHSA-fv5h-8h7v-gq2j.json +++ b/advisories/unreviewed/2022/05/GHSA-fv5h-8h7v-gq2j/GHSA-fv5h-8h7v-gq2j.json @@ -7,12 +7,8 @@ "CVE-2008-1660" ], "details": "Unspecified vulnerability in useradd on HP-UX B.11.11, B.11.23, and B.11.31 allows local users to access arbitrary files and directories via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fw6v-3pqg-v8xr/GHSA-fw6v-3pqg-v8xr.json b/advisories/unreviewed/2022/05/GHSA-fw6v-3pqg-v8xr/GHSA-fw6v-3pqg-v8xr.json index 6c1ea5f8568..c825ca9ca42 100644 --- a/advisories/unreviewed/2022/05/GHSA-fw6v-3pqg-v8xr/GHSA-fw6v-3pqg-v8xr.json +++ b/advisories/unreviewed/2022/05/GHSA-fw6v-3pqg-v8xr/GHSA-fw6v-3pqg-v8xr.json @@ -7,12 +7,8 @@ "CVE-2008-1621" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in GeeCarts allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) show.php, (2) search.php, and (3) view.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fx5q-g4x8-24fp/GHSA-fx5q-g4x8-24fp.json b/advisories/unreviewed/2022/05/GHSA-fx5q-g4x8-24fp/GHSA-fx5q-g4x8-24fp.json index ac695ff8fe6..3d65a5c7d2e 100644 --- a/advisories/unreviewed/2022/05/GHSA-fx5q-g4x8-24fp/GHSA-fx5q-g4x8-24fp.json +++ b/advisories/unreviewed/2022/05/GHSA-fx5q-g4x8-24fp/GHSA-fx5q-g4x8-24fp.json @@ -7,12 +7,8 @@ "CVE-2008-1633" ], "details": "Unspecified vulnerability in Mondo Rescue before 2.2.5 has unknown impact and attack vectors, related to the use of (1) /tmp and (2) MINDI_CACHE.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fx7g-5cqr-67r5/GHSA-fx7g-5cqr-67r5.json b/advisories/unreviewed/2022/05/GHSA-fx7g-5cqr-67r5/GHSA-fx7g-5cqr-67r5.json index fbff1960a7d..5592fce88a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-fx7g-5cqr-67r5/GHSA-fx7g-5cqr-67r5.json +++ b/advisories/unreviewed/2022/05/GHSA-fx7g-5cqr-67r5/GHSA-fx7g-5cqr-67r5.json @@ -7,12 +7,8 @@ "CVE-2008-1912" ], "details": "Stack-based buffer overflow in DivX Player 6.7 build 6.7.0.22 and earlier allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long subtitle in a .SRT file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fxp2-6264-2vm2/GHSA-fxp2-6264-2vm2.json b/advisories/unreviewed/2022/05/GHSA-fxp2-6264-2vm2/GHSA-fxp2-6264-2vm2.json index a6d4368ceb6..636110b0a13 100644 --- a/advisories/unreviewed/2022/05/GHSA-fxp2-6264-2vm2/GHSA-fxp2-6264-2vm2.json +++ b/advisories/unreviewed/2022/05/GHSA-fxp2-6264-2vm2/GHSA-fxp2-6264-2vm2.json @@ -7,12 +7,8 @@ "CVE-2008-1756" ], "details": "Unspecified vulnerability in the Qmaster daemon in Sun N1 Grid Engine 6.1 allows local users to cause a denial of service (daemon crash) via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g26h-2qw9-qc67/GHSA-g26h-2qw9-qc67.json b/advisories/unreviewed/2022/05/GHSA-g26h-2qw9-qc67/GHSA-g26h-2qw9-qc67.json index 88062994844..fcba9e4dc1e 100644 --- a/advisories/unreviewed/2022/05/GHSA-g26h-2qw9-qc67/GHSA-g26h-2qw9-qc67.json +++ b/advisories/unreviewed/2022/05/GHSA-g26h-2qw9-qc67/GHSA-g26h-2qw9-qc67.json @@ -7,12 +7,8 @@ "CVE-2008-1645" ], "details": "Directory traversal vulnerability in body.php in phpSpamManager (phpSM) 0.53 beta allows remote attackers to read arbitrary local files via a .. (dot dot) in the filename parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g43v-pj4j-qgv6/GHSA-g43v-pj4j-qgv6.json b/advisories/unreviewed/2022/05/GHSA-g43v-pj4j-qgv6/GHSA-g43v-pj4j-qgv6.json index ca37aaf66f3..f82481dcd6f 100644 --- a/advisories/unreviewed/2022/05/GHSA-g43v-pj4j-qgv6/GHSA-g43v-pj4j-qgv6.json +++ b/advisories/unreviewed/2022/05/GHSA-g43v-pj4j-qgv6/GHSA-g43v-pj4j-qgv6.json @@ -7,12 +7,8 @@ "CVE-2008-1514" ], "details": "arch/s390/kernel/ptrace.c in Linux kernel 2.6.9, and other versions before 2.6.27-rc6, on s390 platforms allows local users to cause a denial of service (kernel panic) via the user-area-padding test from the ptrace testsuite in 31-bit mode, which triggers an invalid dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g4gp-p23v-jg8v/GHSA-g4gp-p23v-jg8v.json b/advisories/unreviewed/2022/05/GHSA-g4gp-p23v-jg8v/GHSA-g4gp-p23v-jg8v.json index 3fc26c94e7d..05912c7724a 100644 --- a/advisories/unreviewed/2022/05/GHSA-g4gp-p23v-jg8v/GHSA-g4gp-p23v-jg8v.json +++ b/advisories/unreviewed/2022/05/GHSA-g4gp-p23v-jg8v/GHSA-g4gp-p23v-jg8v.json @@ -7,12 +7,8 @@ "CVE-2008-1741" ], "details": "The SIP Proxy (SIPD) service in Cisco Unified Presence before 6.0(3) allows remote attackers to cause a denial of service (core dump and service interruption) via a TCP port scan, aka Bug ID CSCsj64533.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g536-x5vv-fp6h/GHSA-g536-x5vv-fp6h.json b/advisories/unreviewed/2022/05/GHSA-g536-x5vv-fp6h/GHSA-g536-x5vv-fp6h.json index 7e55a29ff51..1fe3d487a22 100644 --- a/advisories/unreviewed/2022/05/GHSA-g536-x5vv-fp6h/GHSA-g536-x5vv-fp6h.json +++ b/advisories/unreviewed/2022/05/GHSA-g536-x5vv-fp6h/GHSA-g536-x5vv-fp6h.json @@ -7,12 +7,8 @@ "CVE-2008-1843" ], "details": "SQL injection vulnerability in browse.php in W2B DatingClub (aka Dating Club) allows remote attackers to execute arbitrary SQL commands via the age_to parameter in a browsebyCat action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g5g9-cj86-gxc8/GHSA-g5g9-cj86-gxc8.json b/advisories/unreviewed/2022/05/GHSA-g5g9-cj86-gxc8/GHSA-g5g9-cj86-gxc8.json index fdb7941e3de..059872aeb77 100644 --- a/advisories/unreviewed/2022/05/GHSA-g5g9-cj86-gxc8/GHSA-g5g9-cj86-gxc8.json +++ b/advisories/unreviewed/2022/05/GHSA-g5g9-cj86-gxc8/GHSA-g5g9-cj86-gxc8.json @@ -7,12 +7,8 @@ "CVE-2008-1946" ], "details": "The default configuration of su in /etc/pam.d/su in GNU coreutils 5.2.1 allows local users to gain the privileges of a (1) locked or (2) expired account by entering the account name on the command line, related to improper use of the pam_succeed_if.so module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g5gj-rfrw-qg5p/GHSA-g5gj-rfrw-qg5p.json b/advisories/unreviewed/2022/05/GHSA-g5gj-rfrw-qg5p/GHSA-g5gj-rfrw-qg5p.json index e9050d5bd20..85d0b773e45 100644 --- a/advisories/unreviewed/2022/05/GHSA-g5gj-rfrw-qg5p/GHSA-g5gj-rfrw-qg5p.json +++ b/advisories/unreviewed/2022/05/GHSA-g5gj-rfrw-qg5p/GHSA-g5gj-rfrw-qg5p.json @@ -7,12 +7,8 @@ "CVE-2008-1511" ], "details": "Multiple PHP remote file inclusion vulnerabilities in ooComments 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the PathToComment parameter for (1) classes/class_admin.php and (2) classes/class_comments.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g78p-5r25-xp2p/GHSA-g78p-5r25-xp2p.json b/advisories/unreviewed/2022/05/GHSA-g78p-5r25-xp2p/GHSA-g78p-5r25-xp2p.json index 400ddec6208..0d9fc462bfb 100644 --- a/advisories/unreviewed/2022/05/GHSA-g78p-5r25-xp2p/GHSA-g78p-5r25-xp2p.json +++ b/advisories/unreviewed/2022/05/GHSA-g78p-5r25-xp2p/GHSA-g78p-5r25-xp2p.json @@ -7,12 +7,8 @@ "CVE-2008-1317" ], "details": "Unspecified vulnerability in the Inter-Process Communication (IPC) message queue subsystem in Sun Solaris 10 allows local users to cause a denial of service (reboot) via blocked I/O message queues.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g7g8-7375-ffc7/GHSA-g7g8-7375-ffc7.json b/advisories/unreviewed/2022/05/GHSA-g7g8-7375-ffc7/GHSA-g7g8-7375-ffc7.json index 1215412f9eb..022fee095d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-g7g8-7375-ffc7/GHSA-g7g8-7375-ffc7.json +++ b/advisories/unreviewed/2022/05/GHSA-g7g8-7375-ffc7/GHSA-g7g8-7375-ffc7.json @@ -7,12 +7,8 @@ "CVE-2008-1318" ], "details": "Unspecified vulnerability in MediaWiki 1.11 before 1.11.2 allows remote attackers to obtain sensitive \"cross-site\" information via the callback parameter in an API call for JavaScript Object Notation (JSON) formatted results.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g7qm-p6rx-c62m/GHSA-g7qm-p6rx-c62m.json b/advisories/unreviewed/2022/05/GHSA-g7qm-p6rx-c62m/GHSA-g7qm-p6rx-c62m.json index 38fc68741a0..487e4bc79d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-g7qm-p6rx-c62m/GHSA-g7qm-p6rx-c62m.json +++ b/advisories/unreviewed/2022/05/GHSA-g7qm-p6rx-c62m/GHSA-g7qm-p6rx-c62m.json @@ -7,12 +7,8 @@ "CVE-2008-2010" ], "details": "Unspecified vulnerability in Apple QuickTime Player on Windows XP SP2 and Vista SP1 allows remote attackers to execute arbitrary code via a crafted QuickTime media file. NOTE: as of 20080429, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gf5m-qr87-2hvm/GHSA-gf5m-qr87-2hvm.json b/advisories/unreviewed/2022/05/GHSA-gf5m-qr87-2hvm/GHSA-gf5m-qr87-2hvm.json index 2561c8813a2..caf926e39a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-gf5m-qr87-2hvm/GHSA-gf5m-qr87-2hvm.json +++ b/advisories/unreviewed/2022/05/GHSA-gf5m-qr87-2hvm/GHSA-gf5m-qr87-2hvm.json @@ -7,12 +7,8 @@ "CVE-2008-1956" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in Wikepage Opus 13 2007.2 allows remote attackers to inject arbitrary web script or HTML via the wiki parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gf8m-2mwv-92mg/GHSA-gf8m-2mwv-92mg.json b/advisories/unreviewed/2022/05/GHSA-gf8m-2mwv-92mg/GHSA-gf8m-2mwv-92mg.json index 00558cf2fda..58dcb6c1f95 100644 --- a/advisories/unreviewed/2022/05/GHSA-gf8m-2mwv-92mg/GHSA-gf8m-2mwv-92mg.json +++ b/advisories/unreviewed/2022/05/GHSA-gf8m-2mwv-92mg/GHSA-gf8m-2mwv-92mg.json @@ -7,12 +7,8 @@ "CVE-2008-1776" ], "details": "PHP remote file inclusion vulnerability in modules/basicfog/basicfogfactory.class.php in PhpBlock A8.4 allows remote attackers to execute arbitrary PHP code via a URL in the PATH_TO_CODE parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gf96-x9wq-hxm3/GHSA-gf96-x9wq-hxm3.json b/advisories/unreviewed/2022/05/GHSA-gf96-x9wq-hxm3/GHSA-gf96-x9wq-hxm3.json index 66e0c8c9f13..ce99d9eee9c 100644 --- a/advisories/unreviewed/2022/05/GHSA-gf96-x9wq-hxm3/GHSA-gf96-x9wq-hxm3.json +++ b/advisories/unreviewed/2022/05/GHSA-gf96-x9wq-hxm3/GHSA-gf96-x9wq-hxm3.json @@ -7,12 +7,8 @@ "CVE-2008-1643" ], "details": "Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.7 SP5 and earlier and 8.8 allows remote attackers to read arbitrary files via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gfch-q4qc-h76w/GHSA-gfch-q4qc-h76w.json b/advisories/unreviewed/2022/05/GHSA-gfch-q4qc-h76w/GHSA-gfch-q4qc-h76w.json index 97482bddac7..80c0946a7e4 100644 --- a/advisories/unreviewed/2022/05/GHSA-gfch-q4qc-h76w/GHSA-gfch-q4qc-h76w.json +++ b/advisories/unreviewed/2022/05/GHSA-gfch-q4qc-h76w/GHSA-gfch-q4qc-h76w.json @@ -7,12 +7,8 @@ "CVE-2008-1327" ], "details": "Gallarific does not require authentication for (1) users.php and (2) index.php, which allows remote attackers to add and edit tasks via a direct request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gfvq-hmw3-p3q3/GHSA-gfvq-hmw3-p3q3.json b/advisories/unreviewed/2022/05/GHSA-gfvq-hmw3-p3q3/GHSA-gfvq-hmw3-p3q3.json index 364e0a8d2a8..94d889c0949 100644 --- a/advisories/unreviewed/2022/05/GHSA-gfvq-hmw3-p3q3/GHSA-gfvq-hmw3-p3q3.json +++ b/advisories/unreviewed/2022/05/GHSA-gfvq-hmw3-p3q3/GHSA-gfvq-hmw3-p3q3.json @@ -7,12 +7,8 @@ "CVE-2008-1614" ], "details": "suPHP before 0.6.3 allows local users to gain privileges via (1) a race condition that involves multiple symlink changes to point a file owned by a different user, or (2) a symlink to the directory of a different user, which is used to determine privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gfxm-8755-8v5r/GHSA-gfxm-8755-8v5r.json b/advisories/unreviewed/2022/05/GHSA-gfxm-8755-8v5r/GHSA-gfxm-8755-8v5r.json index 12083a72cf5..57c44ae50d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-gfxm-8755-8v5r/GHSA-gfxm-8755-8v5r.json +++ b/advisories/unreviewed/2022/05/GHSA-gfxm-8755-8v5r/GHSA-gfxm-8755-8v5r.json @@ -7,12 +7,8 @@ "CVE-2008-1690" ], "details": "WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a long URI in HTTP requests to TCP port 801. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gg62-cc3q-cr2x/GHSA-gg62-cc3q-cr2x.json b/advisories/unreviewed/2022/05/GHSA-gg62-cc3q-cr2x/GHSA-gg62-cc3q-cr2x.json index 770f7d26704..c14ca0849f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-gg62-cc3q-cr2x/GHSA-gg62-cc3q-cr2x.json +++ b/advisories/unreviewed/2022/05/GHSA-gg62-cc3q-cr2x/GHSA-gg62-cc3q-cr2x.json @@ -7,12 +7,8 @@ "CVE-2008-1692" ], "details": "Eterm 0.9.4 opens a terminal window on :0 if -display is not specified and the DISPLAY environment variable is not set, which might allow local users to hijack X11 connections. NOTE: realistic attack scenarios require that the victim enters a command on the wrong machine.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gjcq-x4fx-3742/GHSA-gjcq-x4fx-3742.json b/advisories/unreviewed/2022/05/GHSA-gjcq-x4fx-3742/GHSA-gjcq-x4fx-3742.json index 55074c71c80..5fd1b69c655 100644 --- a/advisories/unreviewed/2022/05/GHSA-gjcq-x4fx-3742/GHSA-gjcq-x4fx-3742.json +++ b/advisories/unreviewed/2022/05/GHSA-gjcq-x4fx-3742/GHSA-gjcq-x4fx-3742.json @@ -7,12 +7,8 @@ "CVE-2008-1586" ], "details": "ImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allow remote attackers to cause a denial of service (memory consumption and device reset) via a crafted TIFF image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gjhx-px95-w5fc/GHSA-gjhx-px95-w5fc.json b/advisories/unreviewed/2022/05/GHSA-gjhx-px95-w5fc/GHSA-gjhx-px95-w5fc.json index ab42e74c3dc..12401739da7 100644 --- a/advisories/unreviewed/2022/05/GHSA-gjhx-px95-w5fc/GHSA-gjhx-px95-w5fc.json +++ b/advisories/unreviewed/2022/05/GHSA-gjhx-px95-w5fc/GHSA-gjhx-px95-w5fc.json @@ -7,12 +7,8 @@ "CVE-2008-1961" ], "details": "SQL injection vulnerability in index.php in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to execute arbitrary SQL commands via the AMG_id parameter in a comments action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gq9w-fffp-q5c2/GHSA-gq9w-fffp-q5c2.json b/advisories/unreviewed/2022/05/GHSA-gq9w-fffp-q5c2/GHSA-gq9w-fffp-q5c2.json index b3517f9cc95..9d168d89b84 100644 --- a/advisories/unreviewed/2022/05/GHSA-gq9w-fffp-q5c2/GHSA-gq9w-fffp-q5c2.json +++ b/advisories/unreviewed/2022/05/GHSA-gq9w-fffp-q5c2/GHSA-gq9w-fffp-q5c2.json @@ -7,12 +7,8 @@ "CVE-2008-1797" ], "details": "Unspecified vulnerability in Secure Computing Webwasher 5.30 before build 3159 and 6.3.0 before build 3150 allows remote attackers to cause a denial of service (freeze) via a crafted URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gx58-6vgh-h446/GHSA-gx58-6vgh-h446.json b/advisories/unreviewed/2022/05/GHSA-gx58-6vgh-h446/GHSA-gx58-6vgh-h446.json index cd08d114036..fb18d780b8a 100644 --- a/advisories/unreviewed/2022/05/GHSA-gx58-6vgh-h446/GHSA-gx58-6vgh-h446.json +++ b/advisories/unreviewed/2022/05/GHSA-gx58-6vgh-h446/GHSA-gx58-6vgh-h446.json @@ -7,12 +7,8 @@ "CVE-2008-1869" ], "details": "SQL injection vulnerability in Site Sift Listings allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. NOTE: this issue might be site-specific.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gxrp-448q-jg35/GHSA-gxrp-448q-jg35.json b/advisories/unreviewed/2022/05/GHSA-gxrp-448q-jg35/GHSA-gxrp-448q-jg35.json index b8b46fe531e..d2c1fc70a61 100644 --- a/advisories/unreviewed/2022/05/GHSA-gxrp-448q-jg35/GHSA-gxrp-448q-jg35.json +++ b/advisories/unreviewed/2022/05/GHSA-gxrp-448q-jg35/GHSA-gxrp-448q-jg35.json @@ -7,12 +7,8 @@ "CVE-2008-1606" ], "details": "Multiple directory traversal vulnerabilities in Elastic Path (EP) 4.1 and 4.1.1 allow remote attackers to (1) download arbitrary files via a .. (dot dot) in the file parameter to manager/getImportFileRedirect.jsp, (2) upload arbitrary files via a \"..\\\" (dot dot backslash) in the file parameter to importData.jsp, and (3) list directory contents via a .. (dot dot) in the dir parameter to manager/fileManager.jsp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h2xg-54w8-c9fx/GHSA-h2xg-54w8-c9fx.json b/advisories/unreviewed/2022/05/GHSA-h2xg-54w8-c9fx/GHSA-h2xg-54w8-c9fx.json index ff7f281d9f1..0b49172a98f 100644 --- a/advisories/unreviewed/2022/05/GHSA-h2xg-54w8-c9fx/GHSA-h2xg-54w8-c9fx.json +++ b/advisories/unreviewed/2022/05/GHSA-h2xg-54w8-c9fx/GHSA-h2xg-54w8-c9fx.json @@ -7,12 +7,8 @@ "CVE-2008-1551" ], "details": "SQL injection vulnerability in viewcat.php in the Photo 3.02 module for RunCMS allows remote attackers to execute arbitrary SQL commands via the cid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h5cv-7559-4wrj/GHSA-h5cv-7559-4wrj.json b/advisories/unreviewed/2022/05/GHSA-h5cv-7559-4wrj/GHSA-h5cv-7559-4wrj.json index cf016e0b873..e906004c4e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-h5cv-7559-4wrj/GHSA-h5cv-7559-4wrj.json +++ b/advisories/unreviewed/2022/05/GHSA-h5cv-7559-4wrj/GHSA-h5cv-7559-4wrj.json @@ -7,12 +7,8 @@ "CVE-2008-1579" ], "details": "Wiki Server in Apple Mac OS X 10.5 before 10.5.3 allows remote attackers to obtain sensitive information (user names) by reading the error message produced upon access to a nonexistent blog.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h5j8-m986-cjrm/GHSA-h5j8-m986-cjrm.json b/advisories/unreviewed/2022/05/GHSA-h5j8-m986-cjrm/GHSA-h5j8-m986-cjrm.json index 79199a609c7..256c2911ff6 100644 --- a/advisories/unreviewed/2022/05/GHSA-h5j8-m986-cjrm/GHSA-h5j8-m986-cjrm.json +++ b/advisories/unreviewed/2022/05/GHSA-h5j8-m986-cjrm/GHSA-h5j8-m986-cjrm.json @@ -7,12 +7,8 @@ "CVE-2008-1906" ], "details": "Cross-site scripting (XSS) vulnerability in calendar.php in cpCommerce 1.1.0 allows remote attackers to inject arbitrary web script or HTML via the year parameter in a view.year action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h668-4g6r-599q/GHSA-h668-4g6r-599q.json b/advisories/unreviewed/2022/05/GHSA-h668-4g6r-599q/GHSA-h668-4g6r-599q.json index f55232c3af4..207e6973989 100644 --- a/advisories/unreviewed/2022/05/GHSA-h668-4g6r-599q/GHSA-h668-4g6r-599q.json +++ b/advisories/unreviewed/2022/05/GHSA-h668-4g6r-599q/GHSA-h668-4g6r-599q.json @@ -7,12 +7,8 @@ "CVE-2008-1771" ], "details": "Integer overflow in the ws_getpostvars function in Firefly Media Server (formerly mt-daapd) 0.2.4.1 (0.9~r1696-1.2 on Debian) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via an HTTP POST request with a large Content-Length.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h6mv-mc2j-c734/GHSA-h6mv-mc2j-c734.json b/advisories/unreviewed/2022/05/GHSA-h6mv-mc2j-c734/GHSA-h6mv-mc2j-c734.json index 4366b8c4343..5abd31f59d8 100644 --- a/advisories/unreviewed/2022/05/GHSA-h6mv-mc2j-c734/GHSA-h6mv-mc2j-c734.json +++ b/advisories/unreviewed/2022/05/GHSA-h6mv-mc2j-c734/GHSA-h6mv-mc2j-c734.json @@ -7,12 +7,8 @@ "CVE-2008-1803" ], "details": "Integer signedness error in the xrealloc function (rdesktop.c) in RDesktop 1.5.0 allows remote attackers to execute arbitrary code via unknown parameters that trigger a heap-based overflow. NOTE: the role of the channel_process function was not specified by the original researcher.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -116,9 +112,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h7h8-mfxg-3g5f/GHSA-h7h8-mfxg-3g5f.json b/advisories/unreviewed/2022/05/GHSA-h7h8-mfxg-3g5f/GHSA-h7h8-mfxg-3g5f.json index 83c7f42fecf..7f90a89017f 100644 --- a/advisories/unreviewed/2022/05/GHSA-h7h8-mfxg-3g5f/GHSA-h7h8-mfxg-3g5f.json +++ b/advisories/unreviewed/2022/05/GHSA-h7h8-mfxg-3g5f/GHSA-h7h8-mfxg-3g5f.json @@ -7,12 +7,8 @@ "CVE-2008-1745" ], "details": "Cisco Unified Communications Manager (CUCM) 5.x before 5.1(2) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (service interruption) via a SIP JOIN message with a malformed header, aka Bug ID CSCsi48115.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h927-jfxh-4j78/GHSA-h927-jfxh-4j78.json b/advisories/unreviewed/2022/05/GHSA-h927-jfxh-4j78/GHSA-h927-jfxh-4j78.json index b6636d68752..f252fef5593 100644 --- a/advisories/unreviewed/2022/05/GHSA-h927-jfxh-4j78/GHSA-h927-jfxh-4j78.json +++ b/advisories/unreviewed/2022/05/GHSA-h927-jfxh-4j78/GHSA-h927-jfxh-4j78.json @@ -7,12 +7,8 @@ "CVE-2008-1767" ], "details": "Buffer overflow in pattern.c in libxslt before 1.1.24 allows context-dependent attackers to cause a denial of service (crash) and possibly execute arbitrary code via an XSL style sheet file with a long XSLT \"transformation match\" condition that triggers a large number of steps.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hc66-4g9p-6242/GHSA-hc66-4g9p-6242.json b/advisories/unreviewed/2022/05/GHSA-hc66-4g9p-6242/GHSA-hc66-4g9p-6242.json index 1f1d450a12f..de07d509512 100644 --- a/advisories/unreviewed/2022/05/GHSA-hc66-4g9p-6242/GHSA-hc66-4g9p-6242.json +++ b/advisories/unreviewed/2022/05/GHSA-hc66-4g9p-6242/GHSA-hc66-4g9p-6242.json @@ -7,12 +7,8 @@ "CVE-2008-1572" ], "details": "Image Capture in Apple Mac OS X before 10.5 does not properly use temporary files, which allows local users to overwrite arbitrary files, and display images that are being resized by this application.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hc93-8cwc-v5c6/GHSA-hc93-8cwc-v5c6.json b/advisories/unreviewed/2022/05/GHSA-hc93-8cwc-v5c6/GHSA-hc93-8cwc-v5c6.json index 729a2b1dadf..ee4ffd592d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-hc93-8cwc-v5c6/GHSA-hc93-8cwc-v5c6.json +++ b/advisories/unreviewed/2022/05/GHSA-hc93-8cwc-v5c6/GHSA-hc93-8cwc-v5c6.json @@ -7,12 +7,8 @@ "CVE-2008-1994" ], "details": "Multiple stack-based buffer overflows in (a) acon.c, (b) menu.c, and (c) child.c in Acon 1.0.5-5 through 1.0.5-7 allow local users to execute arbitrary code via (1) a long HOME environment variable or (2) a large number of terminal columns.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hgr9-5rf8-w5p7/GHSA-hgr9-5rf8-w5p7.json b/advisories/unreviewed/2022/05/GHSA-hgr9-5rf8-w5p7/GHSA-hgr9-5rf8-w5p7.json index c07c0519391..804bea3ccf9 100644 --- a/advisories/unreviewed/2022/05/GHSA-hgr9-5rf8-w5p7/GHSA-hgr9-5rf8-w5p7.json +++ b/advisories/unreviewed/2022/05/GHSA-hgr9-5rf8-w5p7/GHSA-hgr9-5rf8-w5p7.json @@ -7,12 +7,8 @@ "CVE-2008-1763" ], "details": "SQL injection vulnerability in _blogadata/include/sond_result.php in Blogator-script 0.95 allows remote attackers to execute arbitrary SQL commands via the id_art parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hgx6-q7m7-vhv2/GHSA-hgx6-q7m7-vhv2.json b/advisories/unreviewed/2022/05/GHSA-hgx6-q7m7-vhv2/GHSA-hgx6-q7m7-vhv2.json index 4511a814581..c34e79ce709 100644 --- a/advisories/unreviewed/2022/05/GHSA-hgx6-q7m7-vhv2/GHSA-hgx6-q7m7-vhv2.json +++ b/advisories/unreviewed/2022/05/GHSA-hgx6-q7m7-vhv2/GHSA-hgx6-q7m7-vhv2.json @@ -7,12 +7,8 @@ "CVE-2008-1459" ], "details": "SQL injection vulnerability in the Alberghi (com_alberghi) 2.1.3 and earlier component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hhpc-p578-rvg5/GHSA-hhpc-p578-rvg5.json b/advisories/unreviewed/2022/05/GHSA-hhpc-p578-rvg5/GHSA-hhpc-p578-rvg5.json index 6e196941e0a..af7dfedb926 100644 --- a/advisories/unreviewed/2022/05/GHSA-hhpc-p578-rvg5/GHSA-hhpc-p578-rvg5.json +++ b/advisories/unreviewed/2022/05/GHSA-hhpc-p578-rvg5/GHSA-hhpc-p578-rvg5.json @@ -7,12 +7,8 @@ "CVE-2008-1751" ], "details": "Multiple directory traversal vulnerabilities in index.php in Ksemail allow remote attackers to read arbitrary local files via a .. (dot dot) in the (1) language and (2) lang parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hj8j-8885-9jc3/GHSA-hj8j-8885-9jc3.json b/advisories/unreviewed/2022/05/GHSA-hj8j-8885-9jc3/GHSA-hj8j-8885-9jc3.json index d3d192f40e0..ae66b85c321 100644 --- a/advisories/unreviewed/2022/05/GHSA-hj8j-8885-9jc3/GHSA-hj8j-8885-9jc3.json +++ b/advisories/unreviewed/2022/05/GHSA-hj8j-8885-9jc3/GHSA-hj8j-8885-9jc3.json @@ -7,12 +7,8 @@ "CVE-2008-1993" ], "details": "Acidcat CMS 3.4.1 does not restrict access to the FCKEditor component, which allows remote attackers to upload arbitrary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hm5m-xv58-jvph/GHSA-hm5m-xv58-jvph.json b/advisories/unreviewed/2022/05/GHSA-hm5m-xv58-jvph/GHSA-hm5m-xv58-jvph.json index 666e72479fb..8e1cd4def30 100644 --- a/advisories/unreviewed/2022/05/GHSA-hm5m-xv58-jvph/GHSA-hm5m-xv58-jvph.json +++ b/advisories/unreviewed/2022/05/GHSA-hm5m-xv58-jvph/GHSA-hm5m-xv58-jvph.json @@ -7,12 +7,8 @@ "CVE-2008-1464" ], "details": "Multiple SQL injection vulnerabilities in Gallarific Free Edition 1.1 allow remote attackers to execute arbitrary SQL commands via the (1) query parameter to (a) search.php; (2) gusername and (3) gpassword parameters to (b) login.php; and the (4) username and (5) password parameters to (c) gadmin/index.php in a signin action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hmm2-mr2p-f67c/GHSA-hmm2-mr2p-f67c.json b/advisories/unreviewed/2022/05/GHSA-hmm2-mr2p-f67c/GHSA-hmm2-mr2p-f67c.json index 57b3a79f647..7ba2918ec0a 100644 --- a/advisories/unreviewed/2022/05/GHSA-hmm2-mr2p-f67c/GHSA-hmm2-mr2p-f67c.json +++ b/advisories/unreviewed/2022/05/GHSA-hmm2-mr2p-f67c/GHSA-hmm2-mr2p-f67c.json @@ -7,12 +7,8 @@ "CVE-2008-1739" ], "details": "Apple QuickTime before 7.4.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted ftyp atoms in a movie file, which triggers memory corruption.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hmwf-7r86-rjhx/GHSA-hmwf-7r86-rjhx.json b/advisories/unreviewed/2022/05/GHSA-hmwf-7r86-rjhx/GHSA-hmwf-7r86-rjhx.json index 940b3853b66..60776513454 100644 --- a/advisories/unreviewed/2022/05/GHSA-hmwf-7r86-rjhx/GHSA-hmwf-7r86-rjhx.json +++ b/advisories/unreviewed/2022/05/GHSA-hmwf-7r86-rjhx/GHSA-hmwf-7r86-rjhx.json @@ -7,12 +7,8 @@ "CVE-2008-1517" ], "details": "Array index error in the xnu (Mach) kernel in Apple Mac OS X 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (system shutdown) via unspecified vectors related to workqueues.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hqj8-fxpv-8qr3/GHSA-hqj8-fxpv-8qr3.json b/advisories/unreviewed/2022/05/GHSA-hqj8-fxpv-8qr3/GHSA-hqj8-fxpv-8qr3.json index ad4c42835fb..6d64f09743b 100644 --- a/advisories/unreviewed/2022/05/GHSA-hqj8-fxpv-8qr3/GHSA-hqj8-fxpv-8qr3.json +++ b/advisories/unreviewed/2022/05/GHSA-hqj8-fxpv-8qr3/GHSA-hqj8-fxpv-8qr3.json @@ -7,12 +7,8 @@ "CVE-2008-1871" ], "details": "SQL injection vulnerability in links.php in Scriptsagent.com Links Directory 1.1 allows remote authenticated users to execute arbitrary SQL commands via the cat_id parameter in a list action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hr2r-8fhc-5fwr/GHSA-hr2r-8fhc-5fwr.json b/advisories/unreviewed/2022/05/GHSA-hr2r-8fhc-5fwr/GHSA-hr2r-8fhc-5fwr.json index d7889188b4f..6c1cb3bf13a 100644 --- a/advisories/unreviewed/2022/05/GHSA-hr2r-8fhc-5fwr/GHSA-hr2r-8fhc-5fwr.json +++ b/advisories/unreviewed/2022/05/GHSA-hr2r-8fhc-5fwr/GHSA-hr2r-8fhc-5fwr.json @@ -7,12 +7,8 @@ "CVE-2008-1505" ], "details": "PHP remote file inclusion vulnerability in the SSTREAMTV custompages (com_custompages) 1.1 and earlier component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the cpage parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hr5m-ggmx-qvch/GHSA-hr5m-ggmx-qvch.json b/advisories/unreviewed/2022/05/GHSA-hr5m-ggmx-qvch/GHSA-hr5m-ggmx-qvch.json index dd27102edee..20013025d1c 100644 --- a/advisories/unreviewed/2022/05/GHSA-hr5m-ggmx-qvch/GHSA-hr5m-ggmx-qvch.json +++ b/advisories/unreviewed/2022/05/GHSA-hr5m-ggmx-qvch/GHSA-hr5m-ggmx-qvch.json @@ -7,12 +7,8 @@ "CVE-2008-1629" ], "details": "Cross-site scripting (XSS) vulnerability in PHPkrm before 1.5.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hwpq-rvwc-x473/GHSA-hwpq-rvwc-x473.json b/advisories/unreviewed/2022/05/GHSA-hwpq-rvwc-x473/GHSA-hwpq-rvwc-x473.json index 3c769fbc89a..73b712b0d84 100644 --- a/advisories/unreviewed/2022/05/GHSA-hwpq-rvwc-x473/GHSA-hwpq-rvwc-x473.json +++ b/advisories/unreviewed/2022/05/GHSA-hwpq-rvwc-x473/GHSA-hwpq-rvwc-x473.json @@ -7,12 +7,8 @@ "CVE-2008-1521" ], "details": "ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), allow remote authenticated users to gain privileges by accessing administrative URIs, as demonstrated by rpSysAdmin.html.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hwvh-vvw9-932p/GHSA-hwvh-vvw9-932p.json b/advisories/unreviewed/2022/05/GHSA-hwvh-vvw9-932p/GHSA-hwvh-vvw9-932p.json index 8c68bf8dc2f..7f7bb4f4a6c 100644 --- a/advisories/unreviewed/2022/05/GHSA-hwvh-vvw9-932p/GHSA-hwvh-vvw9-932p.json +++ b/advisories/unreviewed/2022/05/GHSA-hwvh-vvw9-932p/GHSA-hwvh-vvw9-932p.json @@ -7,12 +7,8 @@ "CVE-2008-1966" ], "details": "Multiple buffer overflows in the JAR file administration routines in the BSU JAVA subcomponent in IBM DB2 8 before FP16, 9.1 before FP4a, and 9.5 before FP1 allow remote authenticated users to cause a denial of service (instance crash) via a call to the (1) RECOVERJAR or (2) REMOVE_JAR procedure with a crafted parameter, related to (a) sqlj.install_jar and (b) sqlj.replace_jar.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hxf7-pgg4-qhm3/GHSA-hxf7-pgg4-qhm3.json b/advisories/unreviewed/2022/05/GHSA-hxf7-pgg4-qhm3/GHSA-hxf7-pgg4-qhm3.json index e7b08cc10b6..aa202657540 100644 --- a/advisories/unreviewed/2022/05/GHSA-hxf7-pgg4-qhm3/GHSA-hxf7-pgg4-qhm3.json +++ b/advisories/unreviewed/2022/05/GHSA-hxf7-pgg4-qhm3/GHSA-hxf7-pgg4-qhm3.json @@ -7,12 +7,8 @@ "CVE-2008-1322" ], "details": "The File Check Utility (fcheck.exe) in ASG-Sentry Network Manager 7.0.0 and earlier allows remote attackers to cause a denial of service (CPU consumption) or overwrite arbitrary files via a query string that specifies the -b option, probably due to an argument injection vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j233-j8cg-mvrx/GHSA-j233-j8cg-mvrx.json b/advisories/unreviewed/2022/05/GHSA-j233-j8cg-mvrx/GHSA-j233-j8cg-mvrx.json index 7b2ba9f7fb0..ffda1fc7d3c 100644 --- a/advisories/unreviewed/2022/05/GHSA-j233-j8cg-mvrx/GHSA-j233-j8cg-mvrx.json +++ b/advisories/unreviewed/2022/05/GHSA-j233-j8cg-mvrx/GHSA-j233-j8cg-mvrx.json @@ -7,12 +7,8 @@ "CVE-2008-1549" ], "details": "Multiple SQL injection vulnerabilities in Aeries Browser Interface (ABI) 3.8.3.14 in Eagle Software Aries Student Information System allow remote attackers to execute arbitrary SQL commands via the (1) GrdBk parameter to GradebookOptions.asp and the (2) SchlCode variable to loginproc.asp, a different vector than CVE-2008-0942.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j26c-whjw-qqmc/GHSA-j26c-whjw-qqmc.json b/advisories/unreviewed/2022/05/GHSA-j26c-whjw-qqmc/GHSA-j26c-whjw-qqmc.json index 37eccebf721..65e68142d08 100644 --- a/advisories/unreviewed/2022/05/GHSA-j26c-whjw-qqmc/GHSA-j26c-whjw-qqmc.json +++ b/advisories/unreviewed/2022/05/GHSA-j26c-whjw-qqmc/GHSA-j26c-whjw-qqmc.json @@ -7,12 +7,8 @@ "CVE-2008-1706" ], "details": "Uncontrolled array index in IBM solidDB 06.00.1018 and earlier allows remote attackers to cause a denial of service (daemon crash) via a large value in a certain 32-bit field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j397-3vp4-rfx8/GHSA-j397-3vp4-rfx8.json b/advisories/unreviewed/2022/05/GHSA-j397-3vp4-rfx8/GHSA-j397-3vp4-rfx8.json index fe52d0fa3d1..ce9ecb4faa7 100644 --- a/advisories/unreviewed/2022/05/GHSA-j397-3vp4-rfx8/GHSA-j397-3vp4-rfx8.json +++ b/advisories/unreviewed/2022/05/GHSA-j397-3vp4-rfx8/GHSA-j397-3vp4-rfx8.json @@ -7,12 +7,8 @@ "CVE-2008-1972" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the user account creation feature in Exponent CMS 0.96.6-GA20071003 and earlier, when the Allow Registration? configuration option is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) firstname, (3) lastname, and (4) e-mail address fields. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j4cj-vpr3-2688/GHSA-j4cj-vpr3-2688.json b/advisories/unreviewed/2022/05/GHSA-j4cj-vpr3-2688/GHSA-j4cj-vpr3-2688.json index 9857110b778..43bde1e5d03 100644 --- a/advisories/unreviewed/2022/05/GHSA-j4cj-vpr3-2688/GHSA-j4cj-vpr3-2688.json +++ b/advisories/unreviewed/2022/05/GHSA-j4cj-vpr3-2688/GHSA-j4cj-vpr3-2688.json @@ -7,12 +7,8 @@ "CVE-2008-1853" ], "details": "The ovtopmd service in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (exit) by sending a 0x36 packet (exit request).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j4mf-qcfg-hh8j/GHSA-j4mf-qcfg-hh8j.json b/advisories/unreviewed/2022/05/GHSA-j4mf-qcfg-hh8j/GHSA-j4mf-qcfg-hh8j.json index f3f91873a6f..21751e08544 100644 --- a/advisories/unreviewed/2022/05/GHSA-j4mf-qcfg-hh8j/GHSA-j4mf-qcfg-hh8j.json +++ b/advisories/unreviewed/2022/05/GHSA-j4mf-qcfg-hh8j/GHSA-j4mf-qcfg-hh8j.json @@ -7,12 +7,8 @@ "CVE-2008-1584" ], "details": "Stack-based buffer overflow in Indeo.qtx in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via crafted Indeo video codec content in a movie file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j55f-jpf8-gg6v/GHSA-j55f-jpf8-gg6v.json b/advisories/unreviewed/2022/05/GHSA-j55f-jpf8-gg6v/GHSA-j55f-jpf8-gg6v.json index df5b71d91ac..580be50832d 100644 --- a/advisories/unreviewed/2022/05/GHSA-j55f-jpf8-gg6v/GHSA-j55f-jpf8-gg6v.json +++ b/advisories/unreviewed/2022/05/GHSA-j55f-jpf8-gg6v/GHSA-j55f-jpf8-gg6v.json @@ -7,12 +7,8 @@ "CVE-2008-1855" ], "details": "FrameworkService.exe in McAfee Common Management Agent (CMA) 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator (ePO) and ProtectionPilot (PrP), allows remote attackers to corrupt memory and cause a denial of service (CMA Framework service crash) via a long invalid method in requests for the /spin//AVClient//AVClient.csp URI, a different vulnerability than CVE-2006-5274.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j5c8-2583-mcmc/GHSA-j5c8-2583-mcmc.json b/advisories/unreviewed/2022/05/GHSA-j5c8-2583-mcmc/GHSA-j5c8-2583-mcmc.json index 8330b30609d..765ea8767ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-j5c8-2583-mcmc/GHSA-j5c8-2583-mcmc.json +++ b/advisories/unreviewed/2022/05/GHSA-j5c8-2583-mcmc/GHSA-j5c8-2583-mcmc.json @@ -7,12 +7,8 @@ "CVE-2008-1866" ], "details": "admin/modif_config.php in Blog Pixel Motion (aka PixelMotion) does not require admin authentication, which allows remote authenticated users to upload arbitrary PHP scripts in a ZIP archive, which is written to templateZip/ and then automatically extracted under templates/ for execution via a direct request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j65p-mxc9-p293/GHSA-j65p-mxc9-p293.json b/advisories/unreviewed/2022/05/GHSA-j65p-mxc9-p293/GHSA-j65p-mxc9-p293.json index 3f96eb7f3bf..a90de0496dd 100644 --- a/advisories/unreviewed/2022/05/GHSA-j65p-mxc9-p293/GHSA-j65p-mxc9-p293.json +++ b/advisories/unreviewed/2022/05/GHSA-j65p-mxc9-p293/GHSA-j65p-mxc9-p293.json @@ -7,12 +7,8 @@ "CVE-2008-1488" ], "details": "Stack-based buffer overflow in apc.c in Alternative PHP Cache (APC) 3.0.11 through 3.0.16 allows remote attackers to execute arbitrary code via a long filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j68c-c9hg-732g/GHSA-j68c-c9hg-732g.json b/advisories/unreviewed/2022/05/GHSA-j68c-c9hg-732g/GHSA-j68c-c9hg-732g.json index a426ea9e21f..2349ba2468e 100644 --- a/advisories/unreviewed/2022/05/GHSA-j68c-c9hg-732g/GHSA-j68c-c9hg-732g.json +++ b/advisories/unreviewed/2022/05/GHSA-j68c-c9hg-732g/GHSA-j68c-c9hg-732g.json @@ -7,12 +7,8 @@ "CVE-2008-1849" ], "details": "Directory traversal vulnerability in index.php in the joomlaXplorer (com_joomlaxplorer) Mambo/Joomla! component 1.6.2 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in the dir parameter in a show_error action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j6gm-mm8g-qr76/GHSA-j6gm-mm8g-qr76.json b/advisories/unreviewed/2022/05/GHSA-j6gm-mm8g-qr76/GHSA-j6gm-mm8g-qr76.json index 28f086f1095..02064cdc722 100644 --- a/advisories/unreviewed/2022/05/GHSA-j6gm-mm8g-qr76/GHSA-j6gm-mm8g-qr76.json +++ b/advisories/unreviewed/2022/05/GHSA-j6gm-mm8g-qr76/GHSA-j6gm-mm8g-qr76.json @@ -7,12 +7,8 @@ "CVE-2008-1569" ], "details": "policyd-weight 0.1.14 beta-16 and earlier allows local users to modify or delete arbitrary files via a symlink attack on temporary files that are used when creating a socket.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j8q5-wx9w-2f7c/GHSA-j8q5-wx9w-2f7c.json b/advisories/unreviewed/2022/05/GHSA-j8q5-wx9w-2f7c/GHSA-j8q5-wx9w-2f7c.json index 697545d860a..557d146884a 100644 --- a/advisories/unreviewed/2022/05/GHSA-j8q5-wx9w-2f7c/GHSA-j8q5-wx9w-2f7c.json +++ b/advisories/unreviewed/2022/05/GHSA-j8q5-wx9w-2f7c/GHSA-j8q5-wx9w-2f7c.json @@ -7,12 +7,8 @@ "CVE-2008-1325" ], "details": "Multiple directory traversal vulnerabilities in index.php in Uberghey CMS 0.3.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) page_id and (2) language parameters. NOTE: this might be the same issue as CVE-2008-1324.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j8r3-8vrj-j6x6/GHSA-j8r3-8vrj-j6x6.json b/advisories/unreviewed/2022/05/GHSA-j8r3-8vrj-j6x6/GHSA-j8r3-8vrj-j6x6.json index b8655e097c3..c0a697886b2 100644 --- a/advisories/unreviewed/2022/05/GHSA-j8r3-8vrj-j6x6/GHSA-j8r3-8vrj-j6x6.json +++ b/advisories/unreviewed/2022/05/GHSA-j8r3-8vrj-j6x6/GHSA-j8r3-8vrj-j6x6.json @@ -7,12 +7,8 @@ "CVE-2008-1573" ], "details": "The BMP and GIF image decoding engine in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to obtain sensitive information (memory contents) via a crafted (1) BMP or (2) GIF image, which causes an out-of-bounds read.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j9fh-2hxp-jf98/GHSA-j9fh-2hxp-jf98.json b/advisories/unreviewed/2022/05/GHSA-j9fh-2hxp-jf98/GHSA-j9fh-2hxp-jf98.json index ae5558a84c3..60f41a31234 100644 --- a/advisories/unreviewed/2022/05/GHSA-j9fh-2hxp-jf98/GHSA-j9fh-2hxp-jf98.json +++ b/advisories/unreviewed/2022/05/GHSA-j9fh-2hxp-jf98/GHSA-j9fh-2hxp-jf98.json @@ -7,12 +7,8 @@ "CVE-2008-1540" ], "details": "SQL injection vulnerability in the Datsogallery (com_datsogallery) 1.3.1 module for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jcf8-x2r2-7gm2/GHSA-jcf8-x2r2-7gm2.json b/advisories/unreviewed/2022/05/GHSA-jcf8-x2r2-7gm2/GHSA-jcf8-x2r2-7gm2.json index f4c8d5d0a1f..bdbe75fec21 100644 --- a/advisories/unreviewed/2022/05/GHSA-jcf8-x2r2-7gm2/GHSA-jcf8-x2r2-7gm2.json +++ b/advisories/unreviewed/2022/05/GHSA-jcf8-x2r2-7gm2/GHSA-jcf8-x2r2-7gm2.json @@ -7,12 +7,8 @@ "CVE-2008-1885" ], "details": "Directory traversal vulnerability in the NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficient Download allows remote attackers to download arbitrary code onto a client system via a .. (dot dot) in the SkinPath parameter and a .zip URL in the HttpSkin parameter. NOTE: this can be leveraged for code execution by writing to a Startup folder.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jf2p-45mv-vg2m/GHSA-jf2p-45mv-vg2m.json b/advisories/unreviewed/2022/05/GHSA-jf2p-45mv-vg2m/GHSA-jf2p-45mv-vg2m.json index 638ae8492ec..abaf860ba4c 100644 --- a/advisories/unreviewed/2022/05/GHSA-jf2p-45mv-vg2m/GHSA-jf2p-45mv-vg2m.json +++ b/advisories/unreviewed/2022/05/GHSA-jf2p-45mv-vg2m/GHSA-jf2p-45mv-vg2m.json @@ -7,12 +7,8 @@ "CVE-2008-1755" ], "details": "Directory traversal vulnerability in the showSource function in showSource.php in World of Phaos 4.0.1 allows remote attackers to read arbitrary files via directory traversal sequences in the file parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jg6p-8gxh-8h3h/GHSA-jg6p-8gxh-8h3h.json b/advisories/unreviewed/2022/05/GHSA-jg6p-8gxh-8h3h/GHSA-jg6p-8gxh-8h3h.json index 0853df0b96e..cd399078514 100644 --- a/advisories/unreviewed/2022/05/GHSA-jg6p-8gxh-8h3h/GHSA-jg6p-8gxh-8h3h.json +++ b/advisories/unreviewed/2022/05/GHSA-jg6p-8gxh-8h3h/GHSA-jg6p-8gxh-8h3h.json @@ -7,12 +7,8 @@ "CVE-2008-1583" ], "details": "Heap-based buffer overflow in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PICT image, a different vulnerability than CVE-2008-1581.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jgxp-33mm-557f/GHSA-jgxp-33mm-557f.json b/advisories/unreviewed/2022/05/GHSA-jgxp-33mm-557f/GHSA-jgxp-33mm-557f.json index 435feded6c4..895f3828461 100644 --- a/advisories/unreviewed/2022/05/GHSA-jgxp-33mm-557f/GHSA-jgxp-33mm-557f.json +++ b/advisories/unreviewed/2022/05/GHSA-jgxp-33mm-557f/GHSA-jgxp-33mm-557f.json @@ -7,12 +7,8 @@ "CVE-2008-1588" ], "details": "Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to spoof the address bar via Unicode ideographic spaces in the URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jh62-mxwc-r2h9/GHSA-jh62-mxwc-r2h9.json b/advisories/unreviewed/2022/05/GHSA-jh62-mxwc-r2h9/GHSA-jh62-mxwc-r2h9.json index d87cc3fd4ab..d2965a10461 100644 --- a/advisories/unreviewed/2022/05/GHSA-jh62-mxwc-r2h9/GHSA-jh62-mxwc-r2h9.json +++ b/advisories/unreviewed/2022/05/GHSA-jh62-mxwc-r2h9/GHSA-jh62-mxwc-r2h9.json @@ -7,12 +7,8 @@ "CVE-2008-1550" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in CubeCart 4.2.1 allow remote attackers to inject arbitrary web script or HTML via (1) the _a parameter in a searchStr action and the (2) Submit parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jhg3-999m-vxmh/GHSA-jhg3-999m-vxmh.json b/advisories/unreviewed/2022/05/GHSA-jhg3-999m-vxmh/GHSA-jhg3-999m-vxmh.json index 24fe960f389..72122d1e39e 100644 --- a/advisories/unreviewed/2022/05/GHSA-jhg3-999m-vxmh/GHSA-jhg3-999m-vxmh.json +++ b/advisories/unreviewed/2022/05/GHSA-jhg3-999m-vxmh/GHSA-jhg3-999m-vxmh.json @@ -7,12 +7,8 @@ "CVE-2008-1574" ], "details": "Integer overflow in ImageIO in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG2000 image that triggers a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jhm6-mpqp-98gm/GHSA-jhm6-mpqp-98gm.json b/advisories/unreviewed/2022/05/GHSA-jhm6-mpqp-98gm/GHSA-jhm6-mpqp-98gm.json index fa8a2cacebc..e5645992daf 100644 --- a/advisories/unreviewed/2022/05/GHSA-jhm6-mpqp-98gm/GHSA-jhm6-mpqp-98gm.json +++ b/advisories/unreviewed/2022/05/GHSA-jhm6-mpqp-98gm/GHSA-jhm6-mpqp-98gm.json @@ -7,12 +7,8 @@ "CVE-2008-1665" ], "details": "Multiple unspecified vulnerabilities in HP Select Identity (HPSI) Active Directory Bidirectional LDAP Connector 2.20, 2.20.001, 2.20.002, and 2.30 allow remote attackers to execute arbitrary code via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jjgc-j93h-xpjm/GHSA-jjgc-j93h-xpjm.json b/advisories/unreviewed/2022/05/GHSA-jjgc-j93h-xpjm/GHSA-jjgc-j93h-xpjm.json index c3b1f6d8981..f3ce75dac8f 100644 --- a/advisories/unreviewed/2022/05/GHSA-jjgc-j93h-xpjm/GHSA-jjgc-j93h-xpjm.json +++ b/advisories/unreviewed/2022/05/GHSA-jjgc-j93h-xpjm/GHSA-jjgc-j93h-xpjm.json @@ -7,12 +7,8 @@ "CVE-2008-1996" ], "details": "licq before 1.3.6 allows remote attackers to cause a denial of service (file-descriptor exhaustion and application crash) via a large number of connections.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jmgw-798h-3j7f/GHSA-jmgw-798h-3j7f.json b/advisories/unreviewed/2022/05/GHSA-jmgw-798h-3j7f/GHSA-jmgw-798h-3j7f.json index b1b1a2ebfb9..0e5121eab10 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmgw-798h-3j7f/GHSA-jmgw-798h-3j7f.json +++ b/advisories/unreviewed/2022/05/GHSA-jmgw-798h-3j7f/GHSA-jmgw-798h-3j7f.json @@ -7,12 +7,8 @@ "CVE-2008-1977" ], "details": "Cross-site request forgery (CSRF) vulnerability in the Internationalization (i18n) Drupal module 5.x before 5.x-2.3 and 5.x-1.1, and 6.x before 6.x-1.0 beta 1, allows remote attackers to change node translation relationships via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jmvq-hqjp-c8hx/GHSA-jmvq-hqjp-c8hx.json b/advisories/unreviewed/2022/05/GHSA-jmvq-hqjp-c8hx/GHSA-jmvq-hqjp-c8hx.json index 404bb366b4d..c358115232b 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmvq-hqjp-c8hx/GHSA-jmvq-hqjp-c8hx.json +++ b/advisories/unreviewed/2022/05/GHSA-jmvq-hqjp-c8hx/GHSA-jmvq-hqjp-c8hx.json @@ -7,12 +7,8 @@ "CVE-2008-1604" ], "details": "Cross-site scripting (XSS) vulnerability in PerlMailer before 3.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jqr2-37rh-xw5j/GHSA-jqr2-37rh-xw5j.json b/advisories/unreviewed/2022/05/GHSA-jqr2-37rh-xw5j/GHSA-jqr2-37rh-xw5j.json index 77bdf9d6017..0ce6214b0e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-jqr2-37rh-xw5j/GHSA-jqr2-37rh-xw5j.json +++ b/advisories/unreviewed/2022/05/GHSA-jqr2-37rh-xw5j/GHSA-jqr2-37rh-xw5j.json @@ -7,12 +7,8 @@ "CVE-2008-1663" ], "details": "Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) 2.1.10 and 2.1.11 on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jvf2-9v86-52wv/GHSA-jvf2-9v86-52wv.json b/advisories/unreviewed/2022/05/GHSA-jvf2-9v86-52wv/GHSA-jvf2-9v86-52wv.json index cc5c5792931..c6536bb7702 100644 --- a/advisories/unreviewed/2022/05/GHSA-jvf2-9v86-52wv/GHSA-jvf2-9v86-52wv.json +++ b/advisories/unreviewed/2022/05/GHSA-jvf2-9v86-52wv/GHSA-jvf2-9v86-52wv.json @@ -7,12 +7,8 @@ "CVE-2008-1842" ], "details": "Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a long request to TCP port 8886 that begins with a certain negative integer, which passes a signed comparison and triggers a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jvvc-gp79-chwh/GHSA-jvvc-gp79-chwh.json b/advisories/unreviewed/2022/05/GHSA-jvvc-gp79-chwh/GHSA-jvvc-gp79-chwh.json index fe9dab83758..4cd6da29f98 100644 --- a/advisories/unreviewed/2022/05/GHSA-jvvc-gp79-chwh/GHSA-jvvc-gp79-chwh.json +++ b/advisories/unreviewed/2022/05/GHSA-jvvc-gp79-chwh/GHSA-jvvc-gp79-chwh.json @@ -7,12 +7,8 @@ "CVE-2008-1321" ], "details": "The FxIAList service in ASG-Sentry Network Manager 7.0.0 and earlier does require authentication, which allows remote attackers to cause a denial of service (service termination) via the exit command to TCP port 6162, or have other impacts via other commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jwj7-9j2v-5gr3/GHSA-jwj7-9j2v-5gr3.json b/advisories/unreviewed/2022/05/GHSA-jwj7-9j2v-5gr3/GHSA-jwj7-9j2v-5gr3.json index 6a43cee5f76..d2a31a4c4b3 100644 --- a/advisories/unreviewed/2022/05/GHSA-jwj7-9j2v-5gr3/GHSA-jwj7-9j2v-5gr3.json +++ b/advisories/unreviewed/2022/05/GHSA-jwj7-9j2v-5gr3/GHSA-jwj7-9j2v-5gr3.json @@ -7,12 +7,8 @@ "CVE-2008-1851" ], "details": "ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (hang) via certain requests that do not provide all required arguments.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jwjc-hwxr-wmx9/GHSA-jwjc-hwxr-wmx9.json b/advisories/unreviewed/2022/05/GHSA-jwjc-hwxr-wmx9/GHSA-jwjc-hwxr-wmx9.json index d795b21246d..03d473f845c 100644 --- a/advisories/unreviewed/2022/05/GHSA-jwjc-hwxr-wmx9/GHSA-jwjc-hwxr-wmx9.json +++ b/advisories/unreviewed/2022/05/GHSA-jwjc-hwxr-wmx9/GHSA-jwjc-hwxr-wmx9.json @@ -7,12 +7,8 @@ "CVE-2008-1968" ], "details": "Multiple SQL injection vulnerabilities in Cezanne 7 allow remote authenticated users to execute arbitrary SQL commands via the FUNID parameter to (1) CFLookup.asp and (2) CznCommon/CznCustomContainer.asp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jwpf-wj29-5r92/GHSA-jwpf-wj29-5r92.json b/advisories/unreviewed/2022/05/GHSA-jwpf-wj29-5r92/GHSA-jwpf-wj29-5r92.json index 6067beeace7..132f7a49399 100644 --- a/advisories/unreviewed/2022/05/GHSA-jwpf-wj29-5r92/GHSA-jwpf-wj29-5r92.json +++ b/advisories/unreviewed/2022/05/GHSA-jwpf-wj29-5r92/GHSA-jwpf-wj29-5r92.json @@ -7,12 +7,8 @@ "CVE-2008-1640" ], "details": "SQL injection vulnerability in jgs_treffen.php in the JGS-XA JGS-Treffen 2.0.2 and earlier addon for Woltlab Burning Board (wBB) allows remote attackers to execute arbitrary SQL commands via the view_id parameter in an ansicht action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jwvv-p29x-qxcw/GHSA-jwvv-p29x-qxcw.json b/advisories/unreviewed/2022/05/GHSA-jwvv-p29x-qxcw/GHSA-jwvv-p29x-qxcw.json index 6459fcd679c..0a01698cd5c 100644 --- a/advisories/unreviewed/2022/05/GHSA-jwvv-p29x-qxcw/GHSA-jwvv-p29x-qxcw.json +++ b/advisories/unreviewed/2022/05/GHSA-jwvv-p29x-qxcw/GHSA-jwvv-p29x-qxcw.json @@ -7,12 +7,8 @@ "CVE-2008-1493" ], "details": "Directory traversal vulnerability in login.php in Cuteflow Bin 1.5.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jx82-vp7q-c32c/GHSA-jx82-vp7q-c32c.json b/advisories/unreviewed/2022/05/GHSA-jx82-vp7q-c32c/GHSA-jx82-vp7q-c32c.json index bc4b877a2f6..55e0f50d59a 100644 --- a/advisories/unreviewed/2022/05/GHSA-jx82-vp7q-c32c/GHSA-jx82-vp7q-c32c.json +++ b/advisories/unreviewed/2022/05/GHSA-jx82-vp7q-c32c/GHSA-jx82-vp7q-c32c.json @@ -7,12 +7,8 @@ "CVE-2020-23239" ], "details": "Cross Site Scripting (XSS) vulnerability in Textpattern CMS 4.8.1 via Custom fields in the Menu Preferences feature.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m2m9-74wm-9cc3/GHSA-m2m9-74wm-9cc3.json b/advisories/unreviewed/2022/05/GHSA-m2m9-74wm-9cc3/GHSA-m2m9-74wm-9cc3.json index eeea493663e..d9a6c52219c 100644 --- a/advisories/unreviewed/2022/05/GHSA-m2m9-74wm-9cc3/GHSA-m2m9-74wm-9cc3.json +++ b/advisories/unreviewed/2022/05/GHSA-m2m9-74wm-9cc3/GHSA-m2m9-74wm-9cc3.json @@ -7,12 +7,8 @@ "CVE-2008-1922" ], "details": "Multiple stack-based buffer overflows in Sarg might allow attackers to execute arbitrary code via unknown vectors, probably a crafted Squid log file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m39r-vmgh-2hwm/GHSA-m39r-vmgh-2hwm.json b/advisories/unreviewed/2022/05/GHSA-m39r-vmgh-2hwm/GHSA-m39r-vmgh-2hwm.json index 8c1de9820e5..649d8204b68 100644 --- a/advisories/unreviewed/2022/05/GHSA-m39r-vmgh-2hwm/GHSA-m39r-vmgh-2hwm.json +++ b/advisories/unreviewed/2022/05/GHSA-m39r-vmgh-2hwm/GHSA-m39r-vmgh-2hwm.json @@ -7,12 +7,8 @@ "CVE-2008-2000" ], "details": "Unspecified vulnerability in Apple Safari 3.1.1 allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls document.write in an infinite loop.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m3p3-975g-rc2v/GHSA-m3p3-975g-rc2v.json b/advisories/unreviewed/2022/05/GHSA-m3p3-975g-rc2v/GHSA-m3p3-975g-rc2v.json index 344357dfbf0..ac3bdb5eaf1 100644 --- a/advisories/unreviewed/2022/05/GHSA-m3p3-975g-rc2v/GHSA-m3p3-975g-rc2v.json +++ b/advisories/unreviewed/2022/05/GHSA-m3p3-975g-rc2v/GHSA-m3p3-975g-rc2v.json @@ -7,12 +7,8 @@ "CVE-2008-2009" ], "details": "Xiph.org libvorbis before 1.0 does not properly check for underpopulated Huffman trees, which allows remote attackers to cause a denial of service (crash) via a crafted OGG file that triggers memory corruption during execution of the _make_decode_tree function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m4x6-fgw3-74mj/GHSA-m4x6-fgw3-74mj.json b/advisories/unreviewed/2022/05/GHSA-m4x6-fgw3-74mj/GHSA-m4x6-fgw3-74mj.json index 60e64faefb4..d03a6d517cc 100644 --- a/advisories/unreviewed/2022/05/GHSA-m4x6-fgw3-74mj/GHSA-m4x6-fgw3-74mj.json +++ b/advisories/unreviewed/2022/05/GHSA-m4x6-fgw3-74mj/GHSA-m4x6-fgw3-74mj.json @@ -7,12 +7,8 @@ "CVE-2008-1902" ], "details": "The GUI for aptlinex before 0.91 does not sufficiently warn the user of potentially dangerous actions, which allows remote attackers to remove or modify packages via an apt:// URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m5xr-gx48-6q8j/GHSA-m5xr-gx48-6q8j.json b/advisories/unreviewed/2022/05/GHSA-m5xr-gx48-6q8j/GHSA-m5xr-gx48-6q8j.json index 8e957166195..77edf61068f 100644 --- a/advisories/unreviewed/2022/05/GHSA-m5xr-gx48-6q8j/GHSA-m5xr-gx48-6q8j.json +++ b/advisories/unreviewed/2022/05/GHSA-m5xr-gx48-6q8j/GHSA-m5xr-gx48-6q8j.json @@ -7,12 +7,8 @@ "CVE-2008-1529" ], "details": "ZyXEL Prestige routers have a minimum password length for the admin account that is too small, which makes it easier for remote attackers to guess passwords via brute force methods.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m66m-2fx2-x2v3/GHSA-m66m-2fx2-x2v3.json b/advisories/unreviewed/2022/05/GHSA-m66m-2fx2-x2v3/GHSA-m66m-2fx2-x2v3.json index c87850f5169..4983a427302 100644 --- a/advisories/unreviewed/2022/05/GHSA-m66m-2fx2-x2v3/GHSA-m66m-2fx2-x2v3.json +++ b/advisories/unreviewed/2022/05/GHSA-m66m-2fx2-x2v3/GHSA-m66m-2fx2-x2v3.json @@ -7,12 +7,8 @@ "CVE-2008-1862" ], "details": "ExBB Italia 0.22 and earlier only checks GET requests that use the QUERY_STRING for certain path manipulations, which allows remote attackers to bypass this check via (1) POST or (2) COOKIE variables, a different vector than CVE-2006-4488. NOTE: this can be leveraged to conduct PHP remote file inclusion attacks via a URL in the (a) new_exbb[home_path] or (b) exbb[home_path] parameter to modules/threadstop/threadstop.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m77m-mfcm-559j/GHSA-m77m-mfcm-559j.json b/advisories/unreviewed/2022/05/GHSA-m77m-mfcm-559j/GHSA-m77m-mfcm-559j.json index 17cda95bf97..cddf9d44e97 100644 --- a/advisories/unreviewed/2022/05/GHSA-m77m-mfcm-559j/GHSA-m77m-mfcm-559j.json +++ b/advisories/unreviewed/2022/05/GHSA-m77m-mfcm-559j/GHSA-m77m-mfcm-559j.json @@ -7,12 +7,8 @@ "CVE-2008-1780" ], "details": "Unspecified vulnerability in the labeled networking functionality in Solaris 10 Trusted Extensions allows applications in separate labeling zones to bypass labeling restrictions via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m7vg-gwqc-x898/GHSA-m7vg-gwqc-x898.json b/advisories/unreviewed/2022/05/GHSA-m7vg-gwqc-x898/GHSA-m7vg-gwqc-x898.json index 2b93f7ef2d9..f530ad56ac1 100644 --- a/advisories/unreviewed/2022/05/GHSA-m7vg-gwqc-x898/GHSA-m7vg-gwqc-x898.json +++ b/advisories/unreviewed/2022/05/GHSA-m7vg-gwqc-x898/GHSA-m7vg-gwqc-x898.json @@ -7,12 +7,8 @@ "CVE-2008-1543" ], "details": "The Advanced User Interface Pages in the ProST Web Management component on the Airspan WiMAX ProST have a certain default User ID and password, which makes it easier for remote attackers to obtain partial administrative access, a different vulnerability than CVE-2008-1262.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m85x-37p9-8gvv/GHSA-m85x-37p9-8gvv.json b/advisories/unreviewed/2022/05/GHSA-m85x-37p9-8gvv/GHSA-m85x-37p9-8gvv.json index c5abd2cfb4a..0afd64df779 100644 --- a/advisories/unreviewed/2022/05/GHSA-m85x-37p9-8gvv/GHSA-m85x-37p9-8gvv.json +++ b/advisories/unreviewed/2022/05/GHSA-m85x-37p9-8gvv/GHSA-m85x-37p9-8gvv.json @@ -7,12 +7,8 @@ "CVE-2008-1492" ], "details": "Multiple directory traversal vulnerabilities in CoronaMatrix phpAddressBook 2.11 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skin parameter to (1) index.php and (2) install.php. NOTE: it was later reported that vector 1 is also present in 2.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m86r-5c2c-w6rq/GHSA-m86r-5c2c-w6rq.json b/advisories/unreviewed/2022/05/GHSA-m86r-5c2c-w6rq/GHSA-m86r-5c2c-w6rq.json index f0e6b582519..9f6304bafdd 100644 --- a/advisories/unreviewed/2022/05/GHSA-m86r-5c2c-w6rq/GHSA-m86r-5c2c-w6rq.json +++ b/advisories/unreviewed/2022/05/GHSA-m86r-5c2c-w6rq/GHSA-m86r-5c2c-w6rq.json @@ -7,12 +7,8 @@ "CVE-2008-1930" ], "details": "The cookie authentication method in WordPress 2.5 relies on a hash of a concatenated string containing USERNAME and EXPIRY_TIME, which allows remote attackers to forge cookies by registering a username that results in the same concatenated string, as demonstrated by registering usernames beginning with \"admin\" to obtain administrator privileges, aka a \"cryptographic splicing\" issue. NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-6013.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m98m-v26r-q3x5/GHSA-m98m-v26r-q3x5.json b/advisories/unreviewed/2022/05/GHSA-m98m-v26r-q3x5/GHSA-m98m-v26r-q3x5.json index 42bdb307648..fda64a1a9f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-m98m-v26r-q3x5/GHSA-m98m-v26r-q3x5.json +++ b/advisories/unreviewed/2022/05/GHSA-m98m-v26r-q3x5/GHSA-m98m-v26r-q3x5.json @@ -7,12 +7,8 @@ "CVE-2008-1758" ], "details": "SQL injection vulnerability in the ConcoursPhoto module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the C_ID parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m98q-h66m-8mm5/GHSA-m98q-h66m-8mm5.json b/advisories/unreviewed/2022/05/GHSA-m98q-h66m-8mm5/GHSA-m98q-h66m-8mm5.json index 0949dd9922e..3588ff6afbf 100644 --- a/advisories/unreviewed/2022/05/GHSA-m98q-h66m-8mm5/GHSA-m98q-h66m-8mm5.json +++ b/advisories/unreviewed/2022/05/GHSA-m98q-h66m-8mm5/GHSA-m98q-h66m-8mm5.json @@ -7,12 +7,8 @@ "CVE-2008-1768" ], "details": "Multiple integer overflows in VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via the (1) MP4 demuxer, (2) Real demuxer, and (3) Cinepak codec, which triggers a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m9gp-4c57-j4pg/GHSA-m9gp-4c57-j4pg.json b/advisories/unreviewed/2022/05/GHSA-m9gp-4c57-j4pg/GHSA-m9gp-4c57-j4pg.json index 31e1cda3774..5f85d2478e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-m9gp-4c57-j4pg/GHSA-m9gp-4c57-j4pg.json +++ b/advisories/unreviewed/2022/05/GHSA-m9gp-4c57-j4pg/GHSA-m9gp-4c57-j4pg.json @@ -7,12 +7,8 @@ "CVE-2008-1895" ], "details": "Multiple SQL injection vulnerabilities in Carbon Communities 2.4 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ID parameter to events.asp, the (2) UserName parameter to getpassword.asp, and possibly an unspecified parameter to (3) option_Update.asp in an edit action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m9qp-9j2g-69h2/GHSA-m9qp-9j2g-69h2.json b/advisories/unreviewed/2022/05/GHSA-m9qp-9j2g-69h2/GHSA-m9qp-9j2g-69h2.json index 44ae21f68e0..d3b554fa754 100644 --- a/advisories/unreviewed/2022/05/GHSA-m9qp-9j2g-69h2/GHSA-m9qp-9j2g-69h2.json +++ b/advisories/unreviewed/2022/05/GHSA-m9qp-9j2g-69h2/GHSA-m9qp-9j2g-69h2.json @@ -7,12 +7,8 @@ "CVE-2008-1522" ], "details": "ZyXEL Prestige routers, including P-660 and P-661 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), have (1) \"user\" as their default password for the \"user\" account and (2) \"1234\" as their default password for the \"admin\" account, which makes it easier for remote attackers to obtain access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m9v7-rh3h-f7pm/GHSA-m9v7-rh3h-f7pm.json b/advisories/unreviewed/2022/05/GHSA-m9v7-rh3h-f7pm/GHSA-m9v7-rh3h-f7pm.json index 8d4b649eab9..0dcf7e84914 100644 --- a/advisories/unreviewed/2022/05/GHSA-m9v7-rh3h-f7pm/GHSA-m9v7-rh3h-f7pm.json +++ b/advisories/unreviewed/2022/05/GHSA-m9v7-rh3h-f7pm/GHSA-m9v7-rh3h-f7pm.json @@ -7,12 +7,8 @@ "CVE-2008-1892" ], "details": "Cross-site scripting (XSS) vulnerability in bs_auth.php in Blogator-script 0.95 and 1.01 allows remote attackers to inject arbitrary web script or HTML via the msg parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mcg9-wmv9-gjf3/GHSA-mcg9-wmv9-gjf3.json b/advisories/unreviewed/2022/05/GHSA-mcg9-wmv9-gjf3/GHSA-mcg9-wmv9-gjf3.json index 9f1568b3bea..ad62c633476 100644 --- a/advisories/unreviewed/2022/05/GHSA-mcg9-wmv9-gjf3/GHSA-mcg9-wmv9-gjf3.json +++ b/advisories/unreviewed/2022/05/GHSA-mcg9-wmv9-gjf3/GHSA-mcg9-wmv9-gjf3.json @@ -7,12 +7,8 @@ "CVE-2008-1978" ], "details": "Cross-site scripting (XSS) vulnerability in the Ubercart 5.x before 5.x-1.0 rc3 module for Drupal allows remote authenticated users to inject arbitrary web script or HTML via node titles related to unspecified product features, a different vector than CVE-2008-1428.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mff3-qjm2-4xqj/GHSA-mff3-qjm2-4xqj.json b/advisories/unreviewed/2022/05/GHSA-mff3-qjm2-4xqj/GHSA-mff3-qjm2-4xqj.json index e9d1faeb321..5af8f6b0b50 100644 --- a/advisories/unreviewed/2022/05/GHSA-mff3-qjm2-4xqj/GHSA-mff3-qjm2-4xqj.json +++ b/advisories/unreviewed/2022/05/GHSA-mff3-qjm2-4xqj/GHSA-mff3-qjm2-4xqj.json @@ -7,12 +7,8 @@ "CVE-2008-1900" ], "details": "option_Update.asp in Carbon Communities 2.4 and earlier allows remote attackers to edit arbitrary member information via a modified ID field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mfjj-r36m-gvrp/GHSA-mfjj-r36m-gvrp.json b/advisories/unreviewed/2022/05/GHSA-mfjj-r36m-gvrp/GHSA-mfjj-r36m-gvrp.json index 3007b2ab495..fbb7213831e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mfjj-r36m-gvrp/GHSA-mfjj-r36m-gvrp.json +++ b/advisories/unreviewed/2022/05/GHSA-mfjj-r36m-gvrp/GHSA-mfjj-r36m-gvrp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mh3p-5xjf-xj56/GHSA-mh3p-5xjf-xj56.json b/advisories/unreviewed/2022/05/GHSA-mh3p-5xjf-xj56/GHSA-mh3p-5xjf-xj56.json index 852c188fc9c..3c748e9aae9 100644 --- a/advisories/unreviewed/2022/05/GHSA-mh3p-5xjf-xj56/GHSA-mh3p-5xjf-xj56.json +++ b/advisories/unreviewed/2022/05/GHSA-mh3p-5xjf-xj56/GHSA-mh3p-5xjf-xj56.json @@ -7,12 +7,8 @@ "CVE-2008-1765" ], "details": "Buffer overflow in Adobe Photoshop Album Starter Edition 3.2, and possibly After Effects CS3, allows user-assisted remote attackers and physically proximate attackers to execute arbitrary code via a BMP file with an invalid image header. NOTE: the related issue in Photoshop CS3 is already covered by CVE-2007-2244.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mjv2-m972-jpfw/GHSA-mjv2-m972-jpfw.json b/advisories/unreviewed/2022/05/GHSA-mjv2-m972-jpfw/GHSA-mjv2-m972-jpfw.json index 576ca09b6a1..27b5d60839a 100644 --- a/advisories/unreviewed/2022/05/GHSA-mjv2-m972-jpfw/GHSA-mjv2-m972-jpfw.json +++ b/advisories/unreviewed/2022/05/GHSA-mjv2-m972-jpfw/GHSA-mjv2-m972-jpfw.json @@ -7,12 +7,8 @@ "CVE-2008-1792" ], "details": "Cross-site scripting (XSS) vulnerability in the insertion filter in the Flickr Drupal module 5.x before 5.x-1.3 and 6.x before 6.x-1.0-alpha allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mm8m-6ww2-39cc/GHSA-mm8m-6ww2-39cc.json b/advisories/unreviewed/2022/05/GHSA-mm8m-6ww2-39cc/GHSA-mm8m-6ww2-39cc.json index 18a09d09df5..027df497e09 100644 --- a/advisories/unreviewed/2022/05/GHSA-mm8m-6ww2-39cc/GHSA-mm8m-6ww2-39cc.json +++ b/advisories/unreviewed/2022/05/GHSA-mm8m-6ww2-39cc/GHSA-mm8m-6ww2-39cc.json @@ -7,12 +7,8 @@ "CVE-2008-1469" ], "details": "Gallarific Free Edition 1.1 does not require authentication for (1) photos.php, (2) comments.php, and (3) gallery.php in gadmin/, which allows remote attackers to edit objects via a direct request, different vectors than CVE-2008-1327. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mpgc-w69p-hq4f/GHSA-mpgc-w69p-hq4f.json b/advisories/unreviewed/2022/05/GHSA-mpgc-w69p-hq4f/GHSA-mpgc-w69p-hq4f.json index e623da01823..0cb4359b460 100644 --- a/advisories/unreviewed/2022/05/GHSA-mpgc-w69p-hq4f/GHSA-mpgc-w69p-hq4f.json +++ b/advisories/unreviewed/2022/05/GHSA-mpgc-w69p-hq4f/GHSA-mpgc-w69p-hq4f.json @@ -7,12 +7,8 @@ "CVE-2008-1958" ], "details": "Unrestricted file upload vulnerability in the ajout_cat mode in admin/main.php in Tr Script News 2.1 allows remote authenticated users to execute arbitrary code by uploading a file with a .php extension.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mpvx-j3m8-j2hq/GHSA-mpvx-j3m8-j2hq.json b/advisories/unreviewed/2022/05/GHSA-mpvx-j3m8-j2hq/GHSA-mpvx-j3m8-j2hq.json index a1bf69bb0ab..c5e40b04e99 100644 --- a/advisories/unreviewed/2022/05/GHSA-mpvx-j3m8-j2hq/GHSA-mpvx-j3m8-j2hq.json +++ b/advisories/unreviewed/2022/05/GHSA-mpvx-j3m8-j2hq/GHSA-mpvx-j3m8-j2hq.json @@ -7,12 +7,8 @@ "CVE-2008-1704" ], "details": "Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow remote attackers to execute arbitrary code via a crafted message to the EMS server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mq4f-73j7-jxvq/GHSA-mq4f-73j7-jxvq.json b/advisories/unreviewed/2022/05/GHSA-mq4f-73j7-jxvq/GHSA-mq4f-73j7-jxvq.json index d84fb82c2af..f00da365488 100644 --- a/advisories/unreviewed/2022/05/GHSA-mq4f-73j7-jxvq/GHSA-mq4f-73j7-jxvq.json +++ b/advisories/unreviewed/2022/05/GHSA-mq4f-73j7-jxvq/GHSA-mq4f-73j7-jxvq.json @@ -7,12 +7,8 @@ "CVE-2008-1868" ], "details": "admin/sauvBase.php in Blog Pixel Motion (aka Blog PixelMotion) does not require authentication, which allows remote attackers to trigger a database backup dump, and obtain the resulting blogPM.sql file that contains sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mqxg-27cj-85m3/GHSA-mqxg-27cj-85m3.json b/advisories/unreviewed/2022/05/GHSA-mqxg-27cj-85m3/GHSA-mqxg-27cj-85m3.json index da1b42a12fe..f2324c2fe04 100644 --- a/advisories/unreviewed/2022/05/GHSA-mqxg-27cj-85m3/GHSA-mqxg-27cj-85m3.json +++ b/advisories/unreviewed/2022/05/GHSA-mqxg-27cj-85m3/GHSA-mqxg-27cj-85m3.json @@ -7,12 +7,8 @@ "CVE-2008-1545" ], "details": "The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 7 does not restrict the dangerous Transfer-Encoding HTTP request header, which allows remote attackers to conduct HTTP request splitting and HTTP request smuggling attacks via a POST containing a \"Transfer-Encoding: chunked\" header and a request body with an incorrect chunk size.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mrfh-5r6g-9545/GHSA-mrfh-5r6g-9545.json b/advisories/unreviewed/2022/05/GHSA-mrfh-5r6g-9545/GHSA-mrfh-5r6g-9545.json index 2527b0abd15..49dda2be43e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mrfh-5r6g-9545/GHSA-mrfh-5r6g-9545.json +++ b/advisories/unreviewed/2022/05/GHSA-mrfh-5r6g-9545/GHSA-mrfh-5r6g-9545.json @@ -7,12 +7,8 @@ "CVE-2008-1944" ], "details": "Buffer overflow in the backend framebuffer of XenSource Xen Para-Virtualized Framebuffer (PVFB) Message 3.0 through 3.0.3 allows local users to cause a denial of service (SDL crash) and possibly execute arbitrary code via \"bogus screen updates,\" related to missing validation of the \"format of messages.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mrmg-84rj-3v4c/GHSA-mrmg-84rj-3v4c.json b/advisories/unreviewed/2022/05/GHSA-mrmg-84rj-3v4c/GHSA-mrmg-84rj-3v4c.json index a87c4646415..bf2a18c7ca6 100644 --- a/advisories/unreviewed/2022/05/GHSA-mrmg-84rj-3v4c/GHSA-mrmg-84rj-3v4c.json +++ b/advisories/unreviewed/2022/05/GHSA-mrmg-84rj-3v4c/GHSA-mrmg-84rj-3v4c.json @@ -7,12 +7,8 @@ "CVE-2008-1479" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in cyberfrogs.net cfnetgs 0.24 allows remote attackers to inject arbitrary web script or HTML via the directory parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mv22-g92p-cq46/GHSA-mv22-g92p-cq46.json b/advisories/unreviewed/2022/05/GHSA-mv22-g92p-cq46/GHSA-mv22-g92p-cq46.json index 98e711349a1..61eadced5a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-mv22-g92p-cq46/GHSA-mv22-g92p-cq46.json +++ b/advisories/unreviewed/2022/05/GHSA-mv22-g92p-cq46/GHSA-mv22-g92p-cq46.json @@ -7,12 +7,8 @@ "CVE-2008-1669" ], "details": "Linux kernel before 2.6.25.2 does not apply a certain protection mechanism for fcntl functionality, which allows local users to (1) execute code in parallel or (2) exploit a race condition to obtain \"re-ordered access to the descriptor table.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mv73-f6f8-rcwp/GHSA-mv73-f6f8-rcwp.json b/advisories/unreviewed/2022/05/GHSA-mv73-f6f8-rcwp/GHSA-mv73-f6f8-rcwp.json index c4a8f6be06b..587e72bc79f 100644 --- a/advisories/unreviewed/2022/05/GHSA-mv73-f6f8-rcwp/GHSA-mv73-f6f8-rcwp.json +++ b/advisories/unreviewed/2022/05/GHSA-mv73-f6f8-rcwp/GHSA-mv73-f6f8-rcwp.json @@ -7,12 +7,8 @@ "CVE-2008-1590" ], "details": "JavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly perform runtime garbage collection, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger memory corruption, a different vulnerability than CVE-2008-2317.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mw7g-wfcq-49r3/GHSA-mw7g-wfcq-49r3.json b/advisories/unreviewed/2022/05/GHSA-mw7g-wfcq-49r3/GHSA-mw7g-wfcq-49r3.json index 21e0a038dd7..1c8bc2695a6 100644 --- a/advisories/unreviewed/2022/05/GHSA-mw7g-wfcq-49r3/GHSA-mw7g-wfcq-49r3.json +++ b/advisories/unreviewed/2022/05/GHSA-mw7g-wfcq-49r3/GHSA-mw7g-wfcq-49r3.json @@ -7,12 +7,8 @@ "CVE-2008-1658" ], "details": "Format string vulnerability in the grant helper (polkit-grant-helper.c) in PolicyKit 0.7 and earlier allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in a password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mwv5-mpw5-23rm/GHSA-mwv5-mpw5-23rm.json b/advisories/unreviewed/2022/05/GHSA-mwv5-mpw5-23rm/GHSA-mwv5-mpw5-23rm.json index d133a81663a..02ac74ccd43 100644 --- a/advisories/unreviewed/2022/05/GHSA-mwv5-mpw5-23rm/GHSA-mwv5-mpw5-23rm.json +++ b/advisories/unreviewed/2022/05/GHSA-mwv5-mpw5-23rm/GHSA-mwv5-mpw5-23rm.json @@ -7,12 +7,8 @@ "CVE-2008-1536" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in Pictures Pro (aka Tim Grissett) Photo Cart 4.1 allows remote attackers to inject arbitrary web script or HTML via the amessage parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mxxw-w2hq-pvjj/GHSA-mxxw-w2hq-pvjj.json b/advisories/unreviewed/2022/05/GHSA-mxxw-w2hq-pvjj/GHSA-mxxw-w2hq-pvjj.json index d7a330fe04a..c686f84bd97 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxxw-w2hq-pvjj/GHSA-mxxw-w2hq-pvjj.json +++ b/advisories/unreviewed/2022/05/GHSA-mxxw-w2hq-pvjj/GHSA-mxxw-w2hq-pvjj.json @@ -7,12 +7,8 @@ "CVE-2008-1769" ], "details": "VLC before 0.8.6f allow remote attackers to cause a denial of service (crash) via a crafted Cinepak file that triggers an out-of-bounds array access and memory corruption.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p27x-w8mq-85x6/GHSA-p27x-w8mq-85x6.json b/advisories/unreviewed/2022/05/GHSA-p27x-w8mq-85x6/GHSA-p27x-w8mq-85x6.json index 49fde34e8d3..bd6ec73d1d3 100644 --- a/advisories/unreviewed/2022/05/GHSA-p27x-w8mq-85x6/GHSA-p27x-w8mq-85x6.json +++ b/advisories/unreviewed/2022/05/GHSA-p27x-w8mq-85x6/GHSA-p27x-w8mq-85x6.json @@ -7,12 +7,8 @@ "CVE-2008-1647" ], "details": "The ChilkatHttp.ChilkatHttp.1 and ChilkatHttp.ChilkatHttpRequest.1 ActiveX controls in ChilkatHttp.dll 2.4.0.0, 2.3.0.0, and earlier in ChilkatHttp ActiveX expose the unsafe SaveLastError method, which allows remote attackers to overwrite arbitrary files. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p33g-rrvf-2fpx/GHSA-p33g-rrvf-2fpx.json b/advisories/unreviewed/2022/05/GHSA-p33g-rrvf-2fpx/GHSA-p33g-rrvf-2fpx.json index b04ee3184a6..60876d24ea4 100644 --- a/advisories/unreviewed/2022/05/GHSA-p33g-rrvf-2fpx/GHSA-p33g-rrvf-2fpx.json +++ b/advisories/unreviewed/2022/05/GHSA-p33g-rrvf-2fpx/GHSA-p33g-rrvf-2fpx.json @@ -7,12 +7,8 @@ "CVE-2008-1953" ], "details": "Cross-site scripting (XSS) vulnerability in the Sitedesigner before 1.1.5 search template in Magnolia Enterprise Edition allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p45c-4mjh-x6qw/GHSA-p45c-4mjh-x6qw.json b/advisories/unreviewed/2022/05/GHSA-p45c-4mjh-x6qw/GHSA-p45c-4mjh-x6qw.json index 6cd781ad0d1..295670a45ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-p45c-4mjh-x6qw/GHSA-p45c-4mjh-x6qw.json +++ b/advisories/unreviewed/2022/05/GHSA-p45c-4mjh-x6qw/GHSA-p45c-4mjh-x6qw.json @@ -7,12 +7,8 @@ "CVE-2008-1943" ], "details": "Buffer overflow in the backend of XenSource Xen Para Virtualized Frame Buffer (PVFB) 3.0 through 3.1.2 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a crafted description of a shared framebuffer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p49c-76rr-74ww/GHSA-p49c-76rr-74ww.json b/advisories/unreviewed/2022/05/GHSA-p49c-76rr-74ww/GHSA-p49c-76rr-74ww.json index d9c77f7931b..7c6ec456f14 100644 --- a/advisories/unreviewed/2022/05/GHSA-p49c-76rr-74ww/GHSA-p49c-76rr-74ww.json +++ b/advisories/unreviewed/2022/05/GHSA-p49c-76rr-74ww/GHSA-p49c-76rr-74ww.json @@ -7,12 +7,8 @@ "CVE-2008-1332" ], "details": "Unspecified vulnerability in Asterisk Open Source 1.2.x before 1.2.27, 1.4.x before 1.4.18.1 and 1.4.19-rc3; Business Edition A.x.x, B.x.x before B.2.5.1, and C.x.x before C.1.6.2; AsteriskNOW 1.0.x before 1.0.2; Appliance Developer Kit before 1.4 revision 109393; and s800i 1.0.x before 1.1.0.2; allows remote attackers to access the SIP channel driver via a crafted From header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p5rf-j39p-frph/GHSA-p5rf-j39p-frph.json b/advisories/unreviewed/2022/05/GHSA-p5rf-j39p-frph/GHSA-p5rf-j39p-frph.json index df597c83357..5da72b909c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-p5rf-j39p-frph/GHSA-p5rf-j39p-frph.json +++ b/advisories/unreviewed/2022/05/GHSA-p5rf-j39p-frph/GHSA-p5rf-j39p-frph.json @@ -7,12 +7,8 @@ "CVE-2008-1841" ], "details": "SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gallery (CPG) 1.4.17 and earlier allows remote attackers to execute arbitrary SQL commands via an input field associated with the session_id variable, as exploited in the wild in April 2008. NOTE: the fix for CVE-2008-1840 was intended to address this vulnerability, but is actually inapplicable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p677-85fj-wmh5/GHSA-p677-85fj-wmh5.json b/advisories/unreviewed/2022/05/GHSA-p677-85fj-wmh5/GHSA-p677-85fj-wmh5.json index c5977bffcce..9b7e504366c 100644 --- a/advisories/unreviewed/2022/05/GHSA-p677-85fj-wmh5/GHSA-p677-85fj-wmh5.json +++ b/advisories/unreviewed/2022/05/GHSA-p677-85fj-wmh5/GHSA-p677-85fj-wmh5.json @@ -7,12 +7,8 @@ "CVE-2008-1783" ], "details": "Prozilla Reviews 1.0 allows remote attackers to delete arbitrary users via a modified UserID parameter in a direct request to siteadmin/DeleteUser.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p6pv-686x-7v4v/GHSA-p6pv-686x-7v4v.json b/advisories/unreviewed/2022/05/GHSA-p6pv-686x-7v4v/GHSA-p6pv-686x-7v4v.json index bcea9d22cbf..cf5add60aeb 100644 --- a/advisories/unreviewed/2022/05/GHSA-p6pv-686x-7v4v/GHSA-p6pv-686x-7v4v.json +++ b/advisories/unreviewed/2022/05/GHSA-p6pv-686x-7v4v/GHSA-p6pv-686x-7v4v.json @@ -7,12 +7,8 @@ "CVE-2008-1963" ], "details": "PHP remote file inclusion vulnerability in includes/functions.php in Quate Grape Web Statistics 0.2a allows remote attackers to execute arbitrary PHP code via a URL in the location parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pc6g-9pg3-9q52/GHSA-pc6g-9pg3-9q52.json b/advisories/unreviewed/2022/05/GHSA-pc6g-9pg3-9q52/GHSA-pc6g-9pg3-9q52.json index 90509e933e0..fa5a53f4b45 100644 --- a/advisories/unreviewed/2022/05/GHSA-pc6g-9pg3-9q52/GHSA-pc6g-9pg3-9q52.json +++ b/advisories/unreviewed/2022/05/GHSA-pc6g-9pg3-9q52/GHSA-pc6g-9pg3-9q52.json @@ -7,12 +7,8 @@ "CVE-2008-1948" ], "details": "The _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 does not properly calculate the number of Server Names in a TLS 1.0 Client Hello message during extension handling, which allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a zero value for the length of Server Names, which leads to a buffer overflow in session resumption data in the pack_security_parameters function, aka GNUTLS-SA-2008-1-1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -180,9 +176,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pcpf-rc56-2fw5/GHSA-pcpf-rc56-2fw5.json b/advisories/unreviewed/2022/05/GHSA-pcpf-rc56-2fw5/GHSA-pcpf-rc56-2fw5.json index 0584dafebdb..1a4dba7de59 100644 --- a/advisories/unreviewed/2022/05/GHSA-pcpf-rc56-2fw5/GHSA-pcpf-rc56-2fw5.json +++ b/advisories/unreviewed/2022/05/GHSA-pcpf-rc56-2fw5/GHSA-pcpf-rc56-2fw5.json @@ -7,12 +7,8 @@ "CVE-2008-1480" ], "details": "rpc.metad in Sun Solaris 10 allows remote attackers to cause a denial of service (daemon crash) via a malformed RPC request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pcvm-fprq-5ph9/GHSA-pcvm-fprq-5ph9.json b/advisories/unreviewed/2022/05/GHSA-pcvm-fprq-5ph9/GHSA-pcvm-fprq-5ph9.json index 9766a958e4f..28f4e39d25b 100644 --- a/advisories/unreviewed/2022/05/GHSA-pcvm-fprq-5ph9/GHSA-pcvm-fprq-5ph9.json +++ b/advisories/unreviewed/2022/05/GHSA-pcvm-fprq-5ph9/GHSA-pcvm-fprq-5ph9.json @@ -7,12 +7,8 @@ "CVE-2008-1555" ], "details": "Directory traversal vulnerability in system/_b/contentFiles/gbincluder.php in BolinOS 4.6.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the _bFileToInclude parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pfc4-99pq-48xf/GHSA-pfc4-99pq-48xf.json b/advisories/unreviewed/2022/05/GHSA-pfc4-99pq-48xf/GHSA-pfc4-99pq-48xf.json index 2acdd17d713..58946cb8a35 100644 --- a/advisories/unreviewed/2022/05/GHSA-pfc4-99pq-48xf/GHSA-pfc4-99pq-48xf.json +++ b/advisories/unreviewed/2022/05/GHSA-pfc4-99pq-48xf/GHSA-pfc4-99pq-48xf.json @@ -7,12 +7,8 @@ "CVE-2008-2003" ], "details": "BadBlue 2.72 Personal Edition stores multiple programs in the web document root with insufficient access control, which allows remote attackers to (1) cause a denial of service via multiple invocations of uninst.exe, and have an unknown impact via (2) badblue.exe and (3) dyndns.exe. NOTE: this can be leveraged for arbitrary remote code execution in conjunction with CVE-2007-6378.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pfxq-3wfw-4c7m/GHSA-pfxq-3wfw-4c7m.json b/advisories/unreviewed/2022/05/GHSA-pfxq-3wfw-4c7m/GHSA-pfxq-3wfw-4c7m.json index 304360e1ccb..945b5f2d22c 100644 --- a/advisories/unreviewed/2022/05/GHSA-pfxq-3wfw-4c7m/GHSA-pfxq-3wfw-4c7m.json +++ b/advisories/unreviewed/2022/05/GHSA-pfxq-3wfw-4c7m/GHSA-pfxq-3wfw-4c7m.json @@ -7,12 +7,8 @@ "CVE-2008-1924" ], "details": "Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated users with CREATE table permissions to read arbitrary files via a crafted HTTP POST request, related to use of an undefined UploadDir variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pg7h-qxx2-2q2c/GHSA-pg7h-qxx2-2q2c.json b/advisories/unreviewed/2022/05/GHSA-pg7h-qxx2-2q2c/GHSA-pg7h-qxx2-2q2c.json index 5b0c3a952c2..7ed4eb4bca5 100644 --- a/advisories/unreviewed/2022/05/GHSA-pg7h-qxx2-2q2c/GHSA-pg7h-qxx2-2q2c.json +++ b/advisories/unreviewed/2022/05/GHSA-pg7h-qxx2-2q2c/GHSA-pg7h-qxx2-2q2c.json @@ -7,12 +7,8 @@ "CVE-2008-1742" ], "details": "Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) allows remote attackers to cause a denial of service (memory consumption and service interruption) via a series of malformed TCP packets, as demonstrated by TCPFUZZ, aka Bug ID CSCsj80609.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-phc9-wg8m-34wx/GHSA-phc9-wg8m-34wx.json b/advisories/unreviewed/2022/05/GHSA-phc9-wg8m-34wx/GHSA-phc9-wg8m-34wx.json index 6174fe1ba12..c0e430462eb 100644 --- a/advisories/unreviewed/2022/05/GHSA-phc9-wg8m-34wx/GHSA-phc9-wg8m-34wx.json +++ b/advisories/unreviewed/2022/05/GHSA-phc9-wg8m-34wx/GHSA-phc9-wg8m-34wx.json @@ -7,12 +7,8 @@ "CVE-2008-1894" ], "details": "Cross-site scripting (XSS) vulnerability in desktoplaunch/InfoView/logon/logon.object in BusinessObjects InfoView XI R2 SP1, SP2, and SP3 Java version before FixPack 3.5 allows remote attackers to inject arbitrary web script or HTML via the cms parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-phwc-q98v-7w98/GHSA-phwc-q98v-7w98.json b/advisories/unreviewed/2022/05/GHSA-phwc-q98v-7w98/GHSA-phwc-q98v-7w98.json index 98b9ae87832..f054e18d658 100644 --- a/advisories/unreviewed/2022/05/GHSA-phwc-q98v-7w98/GHSA-phwc-q98v-7w98.json +++ b/advisories/unreviewed/2022/05/GHSA-phwc-q98v-7w98/GHSA-phwc-q98v-7w98.json @@ -7,12 +7,8 @@ "CVE-2008-1558" ], "details": "Uncontrolled array index in the sdpplin_parse function in stream/realrtsp/sdpplin.c in MPlayer 1.0 rc2 allows remote attackers to overwrite memory and execute arbitrary code via a large streamid SDP parameter. NOTE: this issue has been referred to as an integer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pm8g-j2pp-65h6/GHSA-pm8g-j2pp-65h6.json b/advisories/unreviewed/2022/05/GHSA-pm8g-j2pp-65h6/GHSA-pm8g-j2pp-65h6.json index dd20f7bfabe..eafe7d589cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-pm8g-j2pp-65h6/GHSA-pm8g-j2pp-65h6.json +++ b/advisories/unreviewed/2022/05/GHSA-pm8g-j2pp-65h6/GHSA-pm8g-j2pp-65h6.json @@ -7,12 +7,8 @@ "CVE-2008-1705" ], "details": "Format string vulnerability in the logging function in IBM solidDB 06.00.1018 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the (1) user name, (2) peer name, and possibly unspecified other fields.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pmc2-8283-xwv9/GHSA-pmc2-8283-xwv9.json b/advisories/unreviewed/2022/05/GHSA-pmc2-8283-xwv9/GHSA-pmc2-8283-xwv9.json index c7850e4ee17..b43603ee4a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-pmc2-8283-xwv9/GHSA-pmc2-8283-xwv9.json +++ b/advisories/unreviewed/2022/05/GHSA-pmc2-8283-xwv9/GHSA-pmc2-8283-xwv9.json @@ -7,12 +7,8 @@ "CVE-2008-1500" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in TinyPortal 0.8.6 and 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ppv7-m4j5-h562/GHSA-ppv7-m4j5-h562.json b/advisories/unreviewed/2022/05/GHSA-ppv7-m4j5-h562/GHSA-ppv7-m4j5-h562.json index 02d9577a9f7..0f191f9b0ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-ppv7-m4j5-h562/GHSA-ppv7-m4j5-h562.json +++ b/advisories/unreviewed/2022/05/GHSA-ppv7-m4j5-h562/GHSA-ppv7-m4j5-h562.json @@ -7,12 +7,8 @@ "CVE-2008-1622" ], "details": "Multiple PHP remote file inclusion vulnerabilities in GeeCarts allow remote attackers to execute arbitrary PHP code via a URL in the id parameter to (1) show.php, (2) search.php, and (3) view.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pv2x-wcxj-xxgg/GHSA-pv2x-wcxj-xxgg.json b/advisories/unreviewed/2022/05/GHSA-pv2x-wcxj-xxgg/GHSA-pv2x-wcxj-xxgg.json index 906245389a9..dd2de73c141 100644 --- a/advisories/unreviewed/2022/05/GHSA-pv2x-wcxj-xxgg/GHSA-pv2x-wcxj-xxgg.json +++ b/advisories/unreviewed/2022/05/GHSA-pv2x-wcxj-xxgg/GHSA-pv2x-wcxj-xxgg.json @@ -7,12 +7,8 @@ "CVE-2008-1823" ], "details": "Unspecified vulnerability in the Oracle Jinitiator component in Oracle Application Server 1.3.1.14 has unknown impact and remote attack vectors, aka AS01.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pv55-3v3p-px8c/GHSA-pv55-3v3p-px8c.json b/advisories/unreviewed/2022/05/GHSA-pv55-3v3p-px8c/GHSA-pv55-3v3p-px8c.json index 7fa9b53f5a7..8f9dc8ab51d 100644 --- a/advisories/unreviewed/2022/05/GHSA-pv55-3v3p-px8c/GHSA-pv55-3v3p-px8c.json +++ b/advisories/unreviewed/2022/05/GHSA-pv55-3v3p-px8c/GHSA-pv55-3v3p-px8c.json @@ -7,12 +7,8 @@ "CVE-2008-1809" ], "details": "Heap-based buffer overflow in Novell eDirectory 8.7.3 before 8.7.3.10b, and 8.8 before 8.8.2 FTF2, allows remote attackers to execute arbitrary code via an LDAP search request containing \"NULL search parameters.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pv8j-6vmm-x69g/GHSA-pv8j-6vmm-x69g.json b/advisories/unreviewed/2022/05/GHSA-pv8j-6vmm-x69g/GHSA-pv8j-6vmm-x69g.json index f904e78468a..797eeec2794 100644 --- a/advisories/unreviewed/2022/05/GHSA-pv8j-6vmm-x69g/GHSA-pv8j-6vmm-x69g.json +++ b/advisories/unreviewed/2022/05/GHSA-pv8j-6vmm-x69g/GHSA-pv8j-6vmm-x69g.json @@ -7,12 +7,8 @@ "CVE-2008-1618" ], "details": "The PPTP VPN service in Watchguard Firebox before 10, when performing the MS-CHAPv2 authentication handshake, generates different error codes depending on whether the username is valid or invalid, which allows remote attackers to enumerate valid usernames.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pvqf-8q6p-rj5j/GHSA-pvqf-8q6p-rj5j.json b/advisories/unreviewed/2022/05/GHSA-pvqf-8q6p-rj5j/GHSA-pvqf-8q6p-rj5j.json index 3c63da6e9b6..c2c558bf5f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-pvqf-8q6p-rj5j/GHSA-pvqf-8q6p-rj5j.json +++ b/advisories/unreviewed/2022/05/GHSA-pvqf-8q6p-rj5j/GHSA-pvqf-8q6p-rj5j.json @@ -7,12 +7,8 @@ "CVE-2008-1886" ], "details": "The NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficient Download uses weak cryptography for a KeyCode that blocks unauthorized use of the control, which allows remote attackers to bypass this protection mechanism by calculating the required KeyCode. NOTE: this can be used by arbitrary web sites to host exploit code that targets this control.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pvw5-f3qv-rx86/GHSA-pvw5-f3qv-rx86.json b/advisories/unreviewed/2022/05/GHSA-pvw5-f3qv-rx86/GHSA-pvw5-f3qv-rx86.json index 3774c3d45c7..c32cf40e2c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-pvw5-f3qv-rx86/GHSA-pvw5-f3qv-rx86.json +++ b/advisories/unreviewed/2022/05/GHSA-pvw5-f3qv-rx86/GHSA-pvw5-f3qv-rx86.json @@ -7,12 +7,8 @@ "CVE-2008-1537" ], "details": "Directory traversal vulnerability in pb_inc/admincenter/index.php in PowerScripts PowerBook 1.21 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q2hr-6wh4-24c8/GHSA-q2hr-6wh4-24c8.json b/advisories/unreviewed/2022/05/GHSA-q2hr-6wh4-24c8/GHSA-q2hr-6wh4-24c8.json index 8f06089fbc5..e500baf9d9f 100644 --- a/advisories/unreviewed/2022/05/GHSA-q2hr-6wh4-24c8/GHSA-q2hr-6wh4-24c8.json +++ b/advisories/unreviewed/2022/05/GHSA-q2hr-6wh4-24c8/GHSA-q2hr-6wh4-24c8.json @@ -7,12 +7,8 @@ "CVE-2008-1496" ], "details": "Multiple SQL injection vulnerabilities in PEEL, possibly 3.x and earlier, allow remote attackers to execute arbitrary SQL commands via the (1) email parameter to (a) membre.php, and the (2) timestamp parameter to (b) the details action in achat/historique_commandes.php and (c) the facture action in factures/facture_html.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q2mj-38pw-w2xc/GHSA-q2mj-38pw-w2xc.json b/advisories/unreviewed/2022/05/GHSA-q2mj-38pw-w2xc/GHSA-q2mj-38pw-w2xc.json index 77eaf9e2e2c..2432c4c73a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-q2mj-38pw-w2xc/GHSA-q2mj-38pw-w2xc.json +++ b/advisories/unreviewed/2022/05/GHSA-q2mj-38pw-w2xc/GHSA-q2mj-38pw-w2xc.json @@ -7,12 +7,8 @@ "CVE-2008-1934" ], "details": "SQL injection vulnerability in commentaires.php in Crazy Goomba 1.2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q2pq-vc75-x6wm/GHSA-q2pq-vc75-x6wm.json b/advisories/unreviewed/2022/05/GHSA-q2pq-vc75-x6wm/GHSA-q2pq-vc75-x6wm.json index 3b7c9ff453d..0bba7b3f130 100644 --- a/advisories/unreviewed/2022/05/GHSA-q2pq-vc75-x6wm/GHSA-q2pq-vc75-x6wm.json +++ b/advisories/unreviewed/2022/05/GHSA-q2pq-vc75-x6wm/GHSA-q2pq-vc75-x6wm.json @@ -7,12 +7,8 @@ "CVE-2008-1827" ], "details": "Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 and 12.0.4 have unknown impact and attack vectors related to (a) Advanced Pricing component, aka (1) APP02, (2) APP03, and (3) APP09; (b) Application Object Library component, aka (4) APP04, (5) APP07, and (6) APP11; (c) Applications Manager component, aka (7) APP06; (d) and Applications Technology Stack component, aka (8) APP08.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q33m-8h5p-4m92/GHSA-q33m-8h5p-4m92.json b/advisories/unreviewed/2022/05/GHSA-q33m-8h5p-4m92/GHSA-q33m-8h5p-4m92.json index c0bb541bb4c..31be854c1b3 100644 --- a/advisories/unreviewed/2022/05/GHSA-q33m-8h5p-4m92/GHSA-q33m-8h5p-4m92.json +++ b/advisories/unreviewed/2022/05/GHSA-q33m-8h5p-4m92/GHSA-q33m-8h5p-4m92.json @@ -7,12 +7,8 @@ "CVE-2008-1576" ], "details": "Mail in Apple Mac OS X before 10.5, when an IPv6 SMTP server is used, does not properly initialize memory, which might allow remote attackers to execute arbitrary code or cause a denial of service (application crash), or obtain sensitive information (memory contents) in opportunistic circumstances, by sending an e-mail message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q3j2-cxwr-pv75/GHSA-q3j2-cxwr-pv75.json b/advisories/unreviewed/2022/05/GHSA-q3j2-cxwr-pv75/GHSA-q3j2-cxwr-pv75.json index 39347f00488..5bd868a475b 100644 --- a/advisories/unreviewed/2022/05/GHSA-q3j2-cxwr-pv75/GHSA-q3j2-cxwr-pv75.json +++ b/advisories/unreviewed/2022/05/GHSA-q3j2-cxwr-pv75/GHSA-q3j2-cxwr-pv75.json @@ -7,12 +7,8 @@ "CVE-2008-1484" ], "details": "The password reset feature in PunBB 1.2.16 and earlier uses predictable random numbers based on the system time, which allows remote authenticated users to determine the new password via a brute force attack on a seed that is based on the approximate creation time of the targeted account. NOTE: this issue might be related to CVE-2006-5737.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q3m9-vxwc-wx34/GHSA-q3m9-vxwc-wx34.json b/advisories/unreviewed/2022/05/GHSA-q3m9-vxwc-wx34/GHSA-q3m9-vxwc-wx34.json index 6227be91417..43ecbb37f36 100644 --- a/advisories/unreviewed/2022/05/GHSA-q3m9-vxwc-wx34/GHSA-q3m9-vxwc-wx34.json +++ b/advisories/unreviewed/2022/05/GHSA-q3m9-vxwc-wx34/GHSA-q3m9-vxwc-wx34.json @@ -7,12 +7,8 @@ "CVE-2008-1659" ], "details": "Unspecified vulnerability in HP LDAP-UX vB.04.10 through vB.04.15 allows local users to gain privileges via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q4c6-vx5p-gw4f/GHSA-q4c6-vx5p-gw4f.json b/advisories/unreviewed/2022/05/GHSA-q4c6-vx5p-gw4f/GHSA-q4c6-vx5p-gw4f.json index beba8eb5477..f1558d0ef1a 100644 --- a/advisories/unreviewed/2022/05/GHSA-q4c6-vx5p-gw4f/GHSA-q4c6-vx5p-gw4f.json +++ b/advisories/unreviewed/2022/05/GHSA-q4c6-vx5p-gw4f/GHSA-q4c6-vx5p-gw4f.json @@ -7,12 +7,8 @@ "CVE-2008-1666" ], "details": "Unspecified vulnerability in HP Oracle for OpenView (OfO) 8.1.7, 9.1.01, 9.2, 9.2.0, 10g, and 10gR2 has unknown impact and attack vectors, possibly related to the July 2008 Oracle Critical Patch Update.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q59r-3f73-73rw/GHSA-q59r-3f73-73rw.json b/advisories/unreviewed/2022/05/GHSA-q59r-3f73-73rw/GHSA-q59r-3f73-73rw.json index 5f43eab0735..ac899648b20 100644 --- a/advisories/unreviewed/2022/05/GHSA-q59r-3f73-73rw/GHSA-q59r-3f73-73rw.json +++ b/advisories/unreviewed/2022/05/GHSA-q59r-3f73-73rw/GHSA-q59r-3f73-73rw.json @@ -7,12 +7,8 @@ "CVE-2008-1476" ], "details": "Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to received trackbacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q5qx-fjp8-q344/GHSA-q5qx-fjp8-q344.json b/advisories/unreviewed/2022/05/GHSA-q5qx-fjp8-q344/GHSA-q5qx-fjp8-q344.json index 2483f4e033f..a1a5010c24b 100644 --- a/advisories/unreviewed/2022/05/GHSA-q5qx-fjp8-q344/GHSA-q5qx-fjp8-q344.json +++ b/advisories/unreviewed/2022/05/GHSA-q5qx-fjp8-q344/GHSA-q5qx-fjp8-q344.json @@ -7,12 +7,8 @@ "CVE-2008-1478" ], "details": "Home FTP Server 1.4.5.89 allows remote attackers to cause a denial of service (crash) by opening a FTP passive mode connection, then closing the original FTP connection. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q672-5r92-fgcr/GHSA-q672-5r92-fgcr.json b/advisories/unreviewed/2022/05/GHSA-q672-5r92-fgcr/GHSA-q672-5r92-fgcr.json index 150ec8d4840..b36ec22d1cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-q672-5r92-fgcr/GHSA-q672-5r92-fgcr.json +++ b/advisories/unreviewed/2022/05/GHSA-q672-5r92-fgcr/GHSA-q672-5r92-fgcr.json @@ -7,12 +7,8 @@ "CVE-2008-1759" ], "details": "SQL injection vulnerability in the jeuxflash module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php, a different vector than CVE-2007-4922.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q695-vwj6-7xc3/GHSA-q695-vwj6-7xc3.json b/advisories/unreviewed/2022/05/GHSA-q695-vwj6-7xc3/GHSA-q695-vwj6-7xc3.json index 444c170a367..945b210bec4 100644 --- a/advisories/unreviewed/2022/05/GHSA-q695-vwj6-7xc3/GHSA-q695-vwj6-7xc3.json +++ b/advisories/unreviewed/2022/05/GHSA-q695-vwj6-7xc3/GHSA-q695-vwj6-7xc3.json @@ -7,12 +7,8 @@ "CVE-2008-1533" ], "details": "Unspecified vulnerability in the XML-RPC Blogger API plugin in Joomla! 1.5 allows remote attackers to perform unauthorized article operations on articles via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q6cq-9948-p468/GHSA-q6cq-9948-p468.json b/advisories/unreviewed/2022/05/GHSA-q6cq-9948-p468/GHSA-q6cq-9948-p468.json index 98b68003dcb..b29f573047e 100644 --- a/advisories/unreviewed/2022/05/GHSA-q6cq-9948-p468/GHSA-q6cq-9948-p468.json +++ b/advisories/unreviewed/2022/05/GHSA-q6cq-9948-p468/GHSA-q6cq-9948-p468.json @@ -7,12 +7,8 @@ "CVE-2008-1732" ], "details": "SQL injection vulnerability in showpredictionsformatch.php in Prediction Football 1.x allows remote attackers to execute arbitrary SQL commands via the matchid parameter in a dupa action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q6mj-4g6g-wvpx/GHSA-q6mj-4g6g-wvpx.json b/advisories/unreviewed/2022/05/GHSA-q6mj-4g6g-wvpx/GHSA-q6mj-4g6g-wvpx.json index 6808e1f989f..1b0be793575 100644 --- a/advisories/unreviewed/2022/05/GHSA-q6mj-4g6g-wvpx/GHSA-q6mj-4g6g-wvpx.json +++ b/advisories/unreviewed/2022/05/GHSA-q6mj-4g6g-wvpx/GHSA-q6mj-4g6g-wvpx.json @@ -7,12 +7,8 @@ "CVE-2008-1636" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in JV2 Quick Gallery 1.1 allows remote attackers to inject arbitrary web script or HTML via the f parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q72q-w9xm-694r/GHSA-q72q-w9xm-694r.json b/advisories/unreviewed/2022/05/GHSA-q72q-w9xm-694r/GHSA-q72q-w9xm-694r.json index 7f75a226214..53f3c25d141 100644 --- a/advisories/unreviewed/2022/05/GHSA-q72q-w9xm-694r/GHSA-q72q-w9xm-694r.json +++ b/advisories/unreviewed/2022/05/GHSA-q72q-w9xm-694r/GHSA-q72q-w9xm-694r.json @@ -7,12 +7,8 @@ "CVE-2008-1627" ], "details": "CDS Invenio 0.92.1 and earlier allows remote authenticated users to delete email notification alerts of arbitrary users via a modified internal UID.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q85g-qvvf-hm5m/GHSA-q85g-qvvf-hm5m.json b/advisories/unreviewed/2022/05/GHSA-q85g-qvvf-hm5m/GHSA-q85g-qvvf-hm5m.json index 7f12dd4e1ee..1202e844a4f 100644 --- a/advisories/unreviewed/2022/05/GHSA-q85g-qvvf-hm5m/GHSA-q85g-qvvf-hm5m.json +++ b/advisories/unreviewed/2022/05/GHSA-q85g-qvvf-hm5m/GHSA-q85g-qvvf-hm5m.json @@ -7,12 +7,8 @@ "CVE-2008-1898" ], "details": "A certain ActiveX control in WkImgSrv.dll 7.03.0616.0, as distributed in Microsoft Works 7 and Microsoft Office 2003 and 2007, allows remote attackers to execute arbitrary code or cause a denial of service (browser crash) via an invalid WksPictureInterface property value, which triggers an improper function call.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q876-9whr-9j9w/GHSA-q876-9whr-9j9w.json b/advisories/unreviewed/2022/05/GHSA-q876-9whr-9j9w/GHSA-q876-9whr-9j9w.json index bd0670d495f..4a950896c36 100644 --- a/advisories/unreviewed/2022/05/GHSA-q876-9whr-9j9w/GHSA-q876-9whr-9j9w.json +++ b/advisories/unreviewed/2022/05/GHSA-q876-9whr-9j9w/GHSA-q876-9whr-9j9w.json @@ -7,12 +7,8 @@ "CVE-2008-1988" ], "details": "Unrestricted file upload vulnerability in the file_upload function in core/misc.class.php in EncapsGallery 2.0.2 allows remote authenticated administrators to upload and execute arbitrary PHP files by uploading a file with an executable extension, then accessing it via a direct request to the file in the rwx_gallery directory. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q8gx-86f5-jmw2/GHSA-q8gx-86f5-jmw2.json b/advisories/unreviewed/2022/05/GHSA-q8gx-86f5-jmw2/GHSA-q8gx-86f5-jmw2.json index 3fd5c4d4def..917b1025656 100644 --- a/advisories/unreviewed/2022/05/GHSA-q8gx-86f5-jmw2/GHSA-q8gx-86f5-jmw2.json +++ b/advisories/unreviewed/2022/05/GHSA-q8gx-86f5-jmw2/GHSA-q8gx-86f5-jmw2.json @@ -7,12 +7,8 @@ "CVE-2008-1955" ], "details": "Cross-site scripting (XSS) vulnerability in rep.php in Martin BOUCHER MyBoard 1.0.12 allows remote attackers to inject arbitrary web script or HTML via the id parameter. information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qcpx-4xgf-735p/GHSA-qcpx-4xgf-735p.json b/advisories/unreviewed/2022/05/GHSA-qcpx-4xgf-735p/GHSA-qcpx-4xgf-735p.json index bb6cd48ed51..1b59355920c 100644 --- a/advisories/unreviewed/2022/05/GHSA-qcpx-4xgf-735p/GHSA-qcpx-4xgf-735p.json +++ b/advisories/unreviewed/2022/05/GHSA-qcpx-4xgf-735p/GHSA-qcpx-4xgf-735p.json @@ -7,12 +7,8 @@ "CVE-2008-1925" ], "details": "Buffer overflow in InspIRCd before 1.1.18, when using the namesx and uhnames modules, allows remote attackers to cause a denial of service (daemon crash) via a large number of channel users with crafted nicknames, idents, and long hostnames.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qgg4-4jc4-qggx/GHSA-qgg4-4jc4-qggx.json b/advisories/unreviewed/2022/05/GHSA-qgg4-4jc4-qggx/GHSA-qgg4-4jc4-qggx.json index 66748eebd93..2c3445dc64b 100644 --- a/advisories/unreviewed/2022/05/GHSA-qgg4-4jc4-qggx/GHSA-qgg4-4jc4-qggx.json +++ b/advisories/unreviewed/2022/05/GHSA-qgg4-4jc4-qggx/GHSA-qgg4-4jc4-qggx.json @@ -7,12 +7,8 @@ "CVE-2008-1696" ], "details": "Directory traversal vulnerability in makepost.php in DaZPHPNews 0.1-1, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the prefixdir parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qjcg-h2hw-4c86/GHSA-qjcg-h2hw-4c86.json b/advisories/unreviewed/2022/05/GHSA-qjcg-h2hw-4c86/GHSA-qjcg-h2hw-4c86.json index f713dea4778..f6f64b4fce5 100644 --- a/advisories/unreviewed/2022/05/GHSA-qjcg-h2hw-4c86/GHSA-qjcg-h2hw-4c86.json +++ b/advisories/unreviewed/2022/05/GHSA-qjcg-h2hw-4c86/GHSA-qjcg-h2hw-4c86.json @@ -7,12 +7,8 @@ "CVE-2008-1677" ], "details": "Buffer overflow in the regular expression handler in Red Hat Directory Server 8.0 and 7.1 before SP6 allows remote attackers to cause a denial of service (slapd crash) and possibly execute arbitrary code via a crafted LDAP query that triggers the overflow during translation to a regular expression.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qjx7-xxpr-c424/GHSA-qjx7-xxpr-c424.json b/advisories/unreviewed/2022/05/GHSA-qjx7-xxpr-c424/GHSA-qjx7-xxpr-c424.json index 4267877ff53..dfc4968ce2e 100644 --- a/advisories/unreviewed/2022/05/GHSA-qjx7-xxpr-c424/GHSA-qjx7-xxpr-c424.json +++ b/advisories/unreviewed/2022/05/GHSA-qjx7-xxpr-c424/GHSA-qjx7-xxpr-c424.json @@ -7,12 +7,8 @@ "CVE-2008-1787" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Poplar Gedcom Viewer 2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) text and (2) ul parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qm2c-vm2q-rmp4/GHSA-qm2c-vm2q-rmp4.json b/advisories/unreviewed/2022/05/GHSA-qm2c-vm2q-rmp4/GHSA-qm2c-vm2q-rmp4.json index 8545a8e38f5..c8354d7f6f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-qm2c-vm2q-rmp4/GHSA-qm2c-vm2q-rmp4.json +++ b/advisories/unreviewed/2022/05/GHSA-qm2c-vm2q-rmp4/GHSA-qm2c-vm2q-rmp4.json @@ -7,12 +7,8 @@ "CVE-2008-1314" ], "details": "SQL injection vulnerability in the Johannes Hass gaestebuch 2.2 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action to modules.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qp3p-jxgq-6c7f/GHSA-qp3p-jxgq-6c7f.json b/advisories/unreviewed/2022/05/GHSA-qp3p-jxgq-6c7f/GHSA-qp3p-jxgq-6c7f.json index a07d3cdce1b..089c570f69b 100644 --- a/advisories/unreviewed/2022/05/GHSA-qp3p-jxgq-6c7f/GHSA-qp3p-jxgq-6c7f.json +++ b/advisories/unreviewed/2022/05/GHSA-qp3p-jxgq-6c7f/GHSA-qp3p-jxgq-6c7f.json @@ -7,12 +7,8 @@ "CVE-2008-1833" ], "details": "Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack compressed PE binary.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qpqx-7x78-ffrj/GHSA-qpqx-7x78-ffrj.json b/advisories/unreviewed/2022/05/GHSA-qpqx-7x78-ffrj/GHSA-qpqx-7x78-ffrj.json index 30ec5ca3cd4..13e902826a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-qpqx-7x78-ffrj/GHSA-qpqx-7x78-ffrj.json +++ b/advisories/unreviewed/2022/05/GHSA-qpqx-7x78-ffrj/GHSA-qpqx-7x78-ffrj.json @@ -7,12 +7,8 @@ "CVE-2008-1504" ], "details": "Cross-site scripting (XSS) vulnerability in setup.php3 in phpHeaven phpMyChat 0.14.5 allows remote attackers to inject arbitrary web script or HTML via the Lang parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qqjg-vfc7-65fc/GHSA-qqjg-vfc7-65fc.json b/advisories/unreviewed/2022/05/GHSA-qqjg-vfc7-65fc/GHSA-qqjg-vfc7-65fc.json index a4ef061af0a..86a40007687 100644 --- a/advisories/unreviewed/2022/05/GHSA-qqjg-vfc7-65fc/GHSA-qqjg-vfc7-65fc.json +++ b/advisories/unreviewed/2022/05/GHSA-qqjg-vfc7-65fc/GHSA-qqjg-vfc7-65fc.json @@ -7,12 +7,8 @@ "CVE-2008-1870" ], "details": "SQL injection vulnerability in getdata.php in PIGMy-SQL 1.4.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qqjh-7v47-6j3v/GHSA-qqjh-7v47-6j3v.json b/advisories/unreviewed/2022/05/GHSA-qqjh-7v47-6j3v/GHSA-qqjh-7v47-6j3v.json index e1c55a7170c..63150261013 100644 --- a/advisories/unreviewed/2022/05/GHSA-qqjh-7v47-6j3v/GHSA-qqjh-7v47-6j3v.json +++ b/advisories/unreviewed/2022/05/GHSA-qqjh-7v47-6j3v/GHSA-qqjh-7v47-6j3v.json @@ -7,12 +7,8 @@ "CVE-2008-1738" ], "details": "Rising Antivirus 2008 before 20.38.20 allows local users to cause a denial of service (system crash) via an invalid pointer to the _CLIENT_ID structure in a call to the NtOpenProcess hooked System Service Descriptor Table (SSDT) function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qqx7-xm28-7wg9/GHSA-qqx7-xm28-7wg9.json b/advisories/unreviewed/2022/05/GHSA-qqx7-xm28-7wg9/GHSA-qqx7-xm28-7wg9.json index cd81139321e..b1871a32347 100644 --- a/advisories/unreviewed/2022/05/GHSA-qqx7-xm28-7wg9/GHSA-qqx7-xm28-7wg9.json +++ b/advisories/unreviewed/2022/05/GHSA-qqx7-xm28-7wg9/GHSA-qqx7-xm28-7wg9.json @@ -7,12 +7,8 @@ "CVE-2008-1644" ], "details": "SQL injection vulnerability in viewlinks.php in Sava's Link Manager 2.0 allows remote attackers to execute arbitrary SQL commands via the category parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qr9h-92cj-24pc/GHSA-qr9h-92cj-24pc.json b/advisories/unreviewed/2022/05/GHSA-qr9h-92cj-24pc/GHSA-qr9h-92cj-24pc.json index 730e90f9b5a..9b5db62a002 100644 --- a/advisories/unreviewed/2022/05/GHSA-qr9h-92cj-24pc/GHSA-qr9h-92cj-24pc.json +++ b/advisories/unreviewed/2022/05/GHSA-qr9h-92cj-24pc/GHSA-qr9h-92cj-24pc.json @@ -7,12 +7,8 @@ "CVE-2008-1592" ], "details": "MQSeries 5.1 in IBM WebSphere MQ 5.1 through 5.3.1 on the HP NonStop and Tandem NSK platforms does not require mqm group membership for execution of administrative tasks, which allows local users to bypass intended access restrictions via the runmqsc program, related to \"Pathway panels.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qrwm-8wjp-r8qf/GHSA-qrwm-8wjp-r8qf.json b/advisories/unreviewed/2022/05/GHSA-qrwm-8wjp-r8qf/GHSA-qrwm-8wjp-r8qf.json index 0d29324af71..1f56e02870f 100644 --- a/advisories/unreviewed/2022/05/GHSA-qrwm-8wjp-r8qf/GHSA-qrwm-8wjp-r8qf.json +++ b/advisories/unreviewed/2022/05/GHSA-qrwm-8wjp-r8qf/GHSA-qrwm-8wjp-r8qf.json @@ -7,12 +7,8 @@ "CVE-2008-1675" ], "details": "The bdx_ioctl_priv function in the tehuti driver (tehuti.c) in Linux kernel 2.6.x before 2.6.25.1 does not properly check certain information related to register size, which has unspecified impact and local attack vectors, probably related to reading or writing kernel memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -104,9 +100,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qvg5-8x82-w6rh/GHSA-qvg5-8x82-w6rh.json b/advisories/unreviewed/2022/05/GHSA-qvg5-8x82-w6rh/GHSA-qvg5-8x82-w6rh.json index 6716fff22bb..190bbd247f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-qvg5-8x82-w6rh/GHSA-qvg5-8x82-w6rh.json +++ b/advisories/unreviewed/2022/05/GHSA-qvg5-8x82-w6rh/GHSA-qvg5-8x82-w6rh.json @@ -7,12 +7,8 @@ "CVE-2008-1932" ], "details": "Integer overflow in Realtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys before 6.0.1.5605 on Windows Vista allows local users to execute arbitrary code via a crafted IOCTL request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qvrx-x8ww-hxgw/GHSA-qvrx-x8ww-hxgw.json b/advisories/unreviewed/2022/05/GHSA-qvrx-x8ww-hxgw/GHSA-qvrx-x8ww-hxgw.json index 520e53f64ef..d6d27105603 100644 --- a/advisories/unreviewed/2022/05/GHSA-qvrx-x8ww-hxgw/GHSA-qvrx-x8ww-hxgw.json +++ b/advisories/unreviewed/2022/05/GHSA-qvrx-x8ww-hxgw/GHSA-qvrx-x8ww-hxgw.json @@ -7,12 +7,8 @@ "CVE-2008-1760" ], "details": "Multiple PHP remote file inclusion vulnerabilities in Blogator-script before 1.01 allow remote attackers to execute arbitrary PHP code via a URL in the incl_page parameter in (1) struct_admin.php, (2) struct_admin_blog.php, and (3) struct_main.php in _blogadata/include.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qw7h-fpr7-xjcp/GHSA-qw7h-fpr7-xjcp.json b/advisories/unreviewed/2022/05/GHSA-qw7h-fpr7-xjcp/GHSA-qw7h-fpr7-xjcp.json index 0e2cfc4a27f..0ef4898c926 100644 --- a/advisories/unreviewed/2022/05/GHSA-qw7h-fpr7-xjcp/GHSA-qw7h-fpr7-xjcp.json +++ b/advisories/unreviewed/2022/05/GHSA-qw7h-fpr7-xjcp/GHSA-qw7h-fpr7-xjcp.json @@ -7,12 +7,8 @@ "CVE-2008-1577" ], "details": "Unspecified vulnerability in the Pixlet codec in Apple Pixlet Video in Apple Mac OS X before 10.5.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file, related to \"multiple memory corruption issues.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qwgw-cfjm-jx5q/GHSA-qwgw-cfjm-jx5q.json b/advisories/unreviewed/2022/05/GHSA-qwgw-cfjm-jx5q/GHSA-qwgw-cfjm-jx5q.json index 2247b889f2e..d731afb336e 100644 --- a/advisories/unreviewed/2022/05/GHSA-qwgw-cfjm-jx5q/GHSA-qwgw-cfjm-jx5q.json +++ b/advisories/unreviewed/2022/05/GHSA-qwgw-cfjm-jx5q/GHSA-qwgw-cfjm-jx5q.json @@ -7,12 +7,8 @@ "CVE-2008-1630" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in CuteFlow 1.5.0 and 2.10.0 allow remote attackers to inject arbitrary web script or HTML via the language parameter to (1) page/showcirculation.php; and (2) edittemplate_step2.php, (3) showfields.php, (4) showuser.php, (5) editmailinglist_step1.php, and (6) showtemplates.php in pages/.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qx2c-v92x-xp4m/GHSA-qx2c-v92x-xp4m.json b/advisories/unreviewed/2022/05/GHSA-qx2c-v92x-xp4m/GHSA-qx2c-v92x-xp4m.json index bdc6da8e71a..e2dabba02b3 100644 --- a/advisories/unreviewed/2022/05/GHSA-qx2c-v92x-xp4m/GHSA-qx2c-v92x-xp4m.json +++ b/advisories/unreviewed/2022/05/GHSA-qx2c-v92x-xp4m/GHSA-qx2c-v92x-xp4m.json @@ -7,12 +7,8 @@ "CVE-2008-1975" ], "details": "SQL injection vulnerability in index.php in E-RESERV 2.1 allows remote attackers to execute arbitrary SQL commands via the ID_loc parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qx8h-8hpp-f9f9/GHSA-qx8h-8hpp-f9f9.json b/advisories/unreviewed/2022/05/GHSA-qx8h-8hpp-f9f9/GHSA-qx8h-8hpp-f9f9.json index 92117b177c2..ef2e8b58df7 100644 --- a/advisories/unreviewed/2022/05/GHSA-qx8h-8hpp-f9f9/GHSA-qx8h-8hpp-f9f9.json +++ b/advisories/unreviewed/2022/05/GHSA-qx8h-8hpp-f9f9/GHSA-qx8h-8hpp-f9f9.json @@ -7,12 +7,8 @@ "CVE-2008-1626" ], "details": "SQL injection vulnerability in eggBlog before 4.0.1 allows remote attackers to execute arbitrary SQL commands via an unspecified cookie. NOTE: this might overlap CVE-2008-0159.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qxph-fqwv-3p7h/GHSA-qxph-fqwv-3p7h.json b/advisories/unreviewed/2022/05/GHSA-qxph-fqwv-3p7h/GHSA-qxph-fqwv-3p7h.json index 87fd7799f1c..21d1c9e691f 100644 --- a/advisories/unreviewed/2022/05/GHSA-qxph-fqwv-3p7h/GHSA-qxph-fqwv-3p7h.json +++ b/advisories/unreviewed/2022/05/GHSA-qxph-fqwv-3p7h/GHSA-qxph-fqwv-3p7h.json @@ -7,12 +7,8 @@ "CVE-2008-1889" ], "details": "SQL injection vulnerability in viewcat.php in XplodPHP AutoTutorials 2.1 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r225-67h8-37wh/GHSA-r225-67h8-37wh.json b/advisories/unreviewed/2022/05/GHSA-r225-67h8-37wh/GHSA-r225-67h8-37wh.json index 0f349f715c8..f8f436a7c58 100644 --- a/advisories/unreviewed/2022/05/GHSA-r225-67h8-37wh/GHSA-r225-67h8-37wh.json +++ b/advisories/unreviewed/2022/05/GHSA-r225-67h8-37wh/GHSA-r225-67h8-37wh.json @@ -7,12 +7,8 @@ "CVE-2008-1334" ], "details": "cgi/b on the BT Home Hub router allows remote attackers to bypass authentication, and read or modify administrative settings or make arbitrary VoIP telephone calls, by placing a character at the end of the PATH_INFO, as demonstrated by (1) %5C (encoded backslash), (2) '%' (percent), and (3) '~' (tilde). NOTE: the '/' (slash) vector is already covered by CVE-2007-5383.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r2mj-3f4v-j8x4/GHSA-r2mj-3f4v-j8x4.json b/advisories/unreviewed/2022/05/GHSA-r2mj-3f4v-j8x4/GHSA-r2mj-3f4v-j8x4.json index 52f2c201699..919d8aaab1c 100644 --- a/advisories/unreviewed/2022/05/GHSA-r2mj-3f4v-j8x4/GHSA-r2mj-3f4v-j8x4.json +++ b/advisories/unreviewed/2022/05/GHSA-r2mj-3f4v-j8x4/GHSA-r2mj-3f4v-j8x4.json @@ -7,12 +7,8 @@ "CVE-2008-1875" ], "details": "SQL injection vulnerability in index.php in Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 allows remote attackers to execute arbitrary SQL commands via the photo_id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r2px-4gvw-fv96/GHSA-r2px-4gvw-fv96.json b/advisories/unreviewed/2022/05/GHSA-r2px-4gvw-fv96/GHSA-r2px-4gvw-fv96.json index d19bcac4632..fd6d7a6504b 100644 --- a/advisories/unreviewed/2022/05/GHSA-r2px-4gvw-fv96/GHSA-r2px-4gvw-fv96.json +++ b/advisories/unreviewed/2022/05/GHSA-r2px-4gvw-fv96/GHSA-r2px-4gvw-fv96.json @@ -7,12 +7,8 @@ "CVE-2008-1323" ], "details": "Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board Lite (wBB) 2 Beta 1 allows remote attackers to delete threads as other users via the ThreadDelete action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r3jx-xw42-5jxc/GHSA-r3jx-xw42-5jxc.json b/advisories/unreviewed/2022/05/GHSA-r3jx-xw42-5jxc/GHSA-r3jx-xw42-5jxc.json index 13a1afd46cc..e7174897d9b 100644 --- a/advisories/unreviewed/2022/05/GHSA-r3jx-xw42-5jxc/GHSA-r3jx-xw42-5jxc.json +++ b/advisories/unreviewed/2022/05/GHSA-r3jx-xw42-5jxc/GHSA-r3jx-xw42-5jxc.json @@ -7,12 +7,8 @@ "CVE-2008-1825" ], "details": "Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 has unknown impact and remote attack vectors, aka AS03.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r527-v52q-x77v/GHSA-r527-v52q-x77v.json b/advisories/unreviewed/2022/05/GHSA-r527-v52q-x77v/GHSA-r527-v52q-x77v.json index 83f12bd496e..f2c2d15674e 100644 --- a/advisories/unreviewed/2022/05/GHSA-r527-v52q-x77v/GHSA-r527-v52q-x77v.json +++ b/advisories/unreviewed/2022/05/GHSA-r527-v52q-x77v/GHSA-r527-v52q-x77v.json @@ -7,12 +7,8 @@ "CVE-2008-1546" ], "details": "servlet/MIMEReceiveServlet in the web controller for Mitsubishi Electric GB-50 and GB-50A air-conditioning control systems allows remote attackers to cause a denial of service (air-conditioning outage) via an XML document containing a setRequest command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r5fm-h248-qf2j/GHSA-r5fm-h248-qf2j.json b/advisories/unreviewed/2022/05/GHSA-r5fm-h248-qf2j/GHSA-r5fm-h248-qf2j.json index 6b86a640910..f90a8eb19a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-r5fm-h248-qf2j/GHSA-r5fm-h248-qf2j.json +++ b/advisories/unreviewed/2022/05/GHSA-r5fm-h248-qf2j/GHSA-r5fm-h248-qf2j.json @@ -7,12 +7,8 @@ "CVE-2008-1746" ], "details": "The SNMP Trap Agent service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR6, 4.2 before 4.2(3)SR3, 4.3 before 4.3(2), 5.x before 5.1(3), and 6.x before 6.1(1) allows remote attackers to cause a denial of service (core dump and service restart) via a series of malformed UDP packets, as demonstrated by the IP Stack Integrity Checker (ISIC), aka Bug ID CSCsj24113.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r846-2cc3-pp99/GHSA-r846-2cc3-pp99.json b/advisories/unreviewed/2022/05/GHSA-r846-2cc3-pp99/GHSA-r846-2cc3-pp99.json index 9e42c3f3f4e..36f45cf079f 100644 --- a/advisories/unreviewed/2022/05/GHSA-r846-2cc3-pp99/GHSA-r846-2cc3-pp99.json +++ b/advisories/unreviewed/2022/05/GHSA-r846-2cc3-pp99/GHSA-r846-2cc3-pp99.json @@ -7,12 +7,8 @@ "CVE-2008-1499" ], "details": "Cross-site scripting (XSS) vulnerability in frontend/x/manpage.html in cPanel 11.18.3 and 11.21.0-BETA allows remote attackers to inject arbitrary web script or HTML via the query string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r852-pwrp-7m33/GHSA-r852-pwrp-7m33.json b/advisories/unreviewed/2022/05/GHSA-r852-pwrp-7m33/GHSA-r852-pwrp-7m33.json index 34e2e24a104..84e08306cb8 100644 --- a/advisories/unreviewed/2022/05/GHSA-r852-pwrp-7m33/GHSA-r852-pwrp-7m33.json +++ b/advisories/unreviewed/2022/05/GHSA-r852-pwrp-7m33/GHSA-r852-pwrp-7m33.json @@ -7,12 +7,8 @@ "CVE-2008-1735" ], "details": "BitDefender Antivirus 2008 20080118 and earlier allows local users to cause a denial of service (system crash) via an invalid pointer to the CLIENT_ID structure in a call to the NtOpenProcess hooked System Service Descriptor Table (SSDT) function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r86c-jfhj-2f8j/GHSA-r86c-jfhj-2f8j.json b/advisories/unreviewed/2022/05/GHSA-r86c-jfhj-2f8j/GHSA-r86c-jfhj-2f8j.json index 12783b7a739..47de94cf882 100644 --- a/advisories/unreviewed/2022/05/GHSA-r86c-jfhj-2f8j/GHSA-r86c-jfhj-2f8j.json +++ b/advisories/unreviewed/2022/05/GHSA-r86c-jfhj-2f8j/GHSA-r86c-jfhj-2f8j.json @@ -7,12 +7,8 @@ "CVE-2008-1687" ], "details": "The (1) maketemp and (2) mkstemp builtin functions in GNU m4 before 1.4.11 do not quote their output when a file is created, which might allow context-dependent attackers to trigger a macro expansion, leading to unspecified use of an incorrect filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r887-hfp4-4397/GHSA-r887-hfp4-4397.json b/advisories/unreviewed/2022/05/GHSA-r887-hfp4-4397/GHSA-r887-hfp4-4397.json index d6a9185a095..09fd85b30f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-r887-hfp4-4397/GHSA-r887-hfp4-4397.json +++ b/advisories/unreviewed/2022/05/GHSA-r887-hfp4-4397/GHSA-r887-hfp4-4397.json @@ -7,12 +7,8 @@ "CVE-2008-2005" ], "details": "The SuiteLink Service (aka slssvc.exe) in WonderWare SuiteLink before 2.0 Patch 01, as used in WonderWare InTouch 8.0, allows remote attackers to cause a denial of service (NULL pointer dereference and service shutdown) and possibly execute arbitrary code via a large length value in a Registration packet to TCP port 5413, which causes a memory allocation failure.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r88h-g29r-792h/GHSA-r88h-g29r-792h.json b/advisories/unreviewed/2022/05/GHSA-r88h-g29r-792h/GHSA-r88h-g29r-792h.json index fb800cafbc5..95c87123b5a 100644 --- a/advisories/unreviewed/2022/05/GHSA-r88h-g29r-792h/GHSA-r88h-g29r-792h.json +++ b/advisories/unreviewed/2022/05/GHSA-r88h-g29r-792h/GHSA-r88h-g29r-792h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r8cv-3fj5-m22g/GHSA-r8cv-3fj5-m22g.json b/advisories/unreviewed/2022/05/GHSA-r8cv-3fj5-m22g/GHSA-r8cv-3fj5-m22g.json index b91e44b4b12..313114d33e6 100644 --- a/advisories/unreviewed/2022/05/GHSA-r8cv-3fj5-m22g/GHSA-r8cv-3fj5-m22g.json +++ b/advisories/unreviewed/2022/05/GHSA-r8cv-3fj5-m22g/GHSA-r8cv-3fj5-m22g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r8wh-xjhh-44p3/GHSA-r8wh-xjhh-44p3.json b/advisories/unreviewed/2022/05/GHSA-r8wh-xjhh-44p3/GHSA-r8wh-xjhh-44p3.json index 06b1c518ee9..a27f30ab153 100644 --- a/advisories/unreviewed/2022/05/GHSA-r8wh-xjhh-44p3/GHSA-r8wh-xjhh-44p3.json +++ b/advisories/unreviewed/2022/05/GHSA-r8wh-xjhh-44p3/GHSA-r8wh-xjhh-44p3.json @@ -7,12 +7,8 @@ "CVE-2008-1490" ], "details": "Buffer overflow in a certain Aurigma ActiveX control in ImageUploader4.ocx 4.1.36.0, as used with Piczo (aka Pizco) and possibly other online services, allows remote attackers to execute arbitrary code via unspecified vectors, possibly involving a long Action property, a different CLSID than CVE-2008-0659.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r92g-hrvw-hhwv/GHSA-r92g-hrvw-hhwv.json b/advisories/unreviewed/2022/05/GHSA-r92g-hrvw-hhwv/GHSA-r92g-hrvw-hhwv.json index 58d9a51dc91..542bfe11322 100644 --- a/advisories/unreviewed/2022/05/GHSA-r92g-hrvw-hhwv/GHSA-r92g-hrvw-hhwv.json +++ b/advisories/unreviewed/2022/05/GHSA-r92g-hrvw-hhwv/GHSA-r92g-hrvw-hhwv.json @@ -7,12 +7,8 @@ "CVE-2008-1812" ], "details": "Unspecified vulnerability in the Oracle Enterprise Manager component in Oracle Database 9.0.1.5 FIPS+; Application Server 1.0.2.2; and Enterprise Manager for AS 1.0.2.2 and Database 9.0.1.5 has unknown impact and local attack vectors, aka EM01.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r9w7-3xm2-f9rp/GHSA-r9w7-3xm2-f9rp.json b/advisories/unreviewed/2022/05/GHSA-r9w7-3xm2-f9rp/GHSA-r9w7-3xm2-f9rp.json index a5c51877388..8f7c16fa019 100644 --- a/advisories/unreviewed/2022/05/GHSA-r9w7-3xm2-f9rp/GHSA-r9w7-3xm2-f9rp.json +++ b/advisories/unreviewed/2022/05/GHSA-r9w7-3xm2-f9rp/GHSA-r9w7-3xm2-f9rp.json @@ -7,12 +7,8 @@ "CVE-2008-1566" ], "details": "Cross-site scripting (XSS) vulnerability in Search.do in ManageEngine Applications Manager 8.x allows remote attackers to inject arbitrary web script or HTML via the query parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rcw9-797j-m4v6/GHSA-rcw9-797j-m4v6.json b/advisories/unreviewed/2022/05/GHSA-rcw9-797j-m4v6/GHSA-rcw9-797j-m4v6.json index 5aa0510cdee..78a5545e110 100644 --- a/advisories/unreviewed/2022/05/GHSA-rcw9-797j-m4v6/GHSA-rcw9-797j-m4v6.json +++ b/advisories/unreviewed/2022/05/GHSA-rcw9-797j-m4v6/GHSA-rcw9-797j-m4v6.json @@ -7,12 +7,8 @@ "CVE-2008-1824" ], "details": "Unspecified vulnerability in the Oracle Dynamic Monitoring Service component in Oracle Application Server 9.0.4.3, 10.1.2.2, and 10.1.3.3 has unknown impact and remote attack vectors, aka AS02.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rf4w-mwgx-jpv4/GHSA-rf4w-mwgx-jpv4.json b/advisories/unreviewed/2022/05/GHSA-rf4w-mwgx-jpv4/GHSA-rf4w-mwgx-jpv4.json index 33c8144d2ca..1d06732b673 100644 --- a/advisories/unreviewed/2022/05/GHSA-rf4w-mwgx-jpv4/GHSA-rf4w-mwgx-jpv4.json +++ b/advisories/unreviewed/2022/05/GHSA-rf4w-mwgx-jpv4/GHSA-rf4w-mwgx-jpv4.json @@ -7,12 +7,8 @@ "CVE-2008-1774" ], "details": "SQL injection vulnerability in editlink.php in Pligg 9.9.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rgj4-4q5m-c8q8/GHSA-rgj4-4q5m-c8q8.json b/advisories/unreviewed/2022/05/GHSA-rgj4-4q5m-c8q8/GHSA-rgj4-4q5m-c8q8.json index 3abe6babca7..c825e181d70 100644 --- a/advisories/unreviewed/2022/05/GHSA-rgj4-4q5m-c8q8/GHSA-rgj4-4q5m-c8q8.json +++ b/advisories/unreviewed/2022/05/GHSA-rgj4-4q5m-c8q8/GHSA-rgj4-4q5m-c8q8.json @@ -7,12 +7,8 @@ "CVE-2008-1834" ], "details": "swfdec_load_object.c in Swfdec before 0.6.4 does not properly restrict local file access from untrusted sandboxes, which allows remote attackers to read arbitrary files via a crafted Flash file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rh5w-4xpg-jvmh/GHSA-rh5w-4xpg-jvmh.json b/advisories/unreviewed/2022/05/GHSA-rh5w-4xpg-jvmh/GHSA-rh5w-4xpg-jvmh.json index 2e29de70330..7fef91719e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-rh5w-4xpg-jvmh/GHSA-rh5w-4xpg-jvmh.json +++ b/advisories/unreviewed/2022/05/GHSA-rh5w-4xpg-jvmh/GHSA-rh5w-4xpg-jvmh.json @@ -7,12 +7,8 @@ "CVE-2008-1779" ], "details": "Sun Solaris 8, 9, and 10 allows \"remote privileged\" users to cause a denial of service (panic) via unknown vectors related to self encapsulated IP packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rhf2-x48g-5wr7/GHSA-rhf2-x48g-5wr7.json b/advisories/unreviewed/2022/05/GHSA-rhf2-x48g-5wr7/GHSA-rhf2-x48g-5wr7.json index ed72a2409ce..a92ef9a3777 100644 --- a/advisories/unreviewed/2022/05/GHSA-rhf2-x48g-5wr7/GHSA-rhf2-x48g-5wr7.json +++ b/advisories/unreviewed/2022/05/GHSA-rhf2-x48g-5wr7/GHSA-rhf2-x48g-5wr7.json @@ -7,12 +7,8 @@ "CVE-2008-1891" ], "details": "Directory traversal vulnerability in WEBrick in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2, when using NTFS or FAT filesystems, allows remote attackers to read arbitrary CGI files via a trailing (1) + (plus), (2) %2b (encoded plus), (3) . (dot), (4) %2e (encoded dot), or (5) %20 (encoded space) character in the URI, possibly related to the WEBrick::HTTPServlet::FileHandler and WEBrick::HTTPServer.new functionality and the :DocumentRoot option.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rhj6-8m2c-87ch/GHSA-rhj6-8m2c-87ch.json b/advisories/unreviewed/2022/05/GHSA-rhj6-8m2c-87ch/GHSA-rhj6-8m2c-87ch.json index 98d5eab6ddc..8b813d6c171 100644 --- a/advisories/unreviewed/2022/05/GHSA-rhj6-8m2c-87ch/GHSA-rhj6-8m2c-87ch.json +++ b/advisories/unreviewed/2022/05/GHSA-rhj6-8m2c-87ch/GHSA-rhj6-8m2c-87ch.json @@ -7,12 +7,8 @@ "CVE-2008-1613" ], "details": "SQL injection vulnerability in ioRD.asp in RedDot CMS 7.5 Build 7.5.0.48, and possibly other versions including 6.5 and 7.0, allows remote attackers to execute arbitrary SQL commands via the LngId parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rhv5-x75f-g9rj/GHSA-rhv5-x75f-g9rj.json b/advisories/unreviewed/2022/05/GHSA-rhv5-x75f-g9rj/GHSA-rhv5-x75f-g9rj.json index 5358be9addb..84386600ab3 100644 --- a/advisories/unreviewed/2022/05/GHSA-rhv5-x75f-g9rj/GHSA-rhv5-x75f-g9rj.json +++ b/advisories/unreviewed/2022/05/GHSA-rhv5-x75f-g9rj/GHSA-rhv5-x75f-g9rj.json @@ -7,12 +7,8 @@ "CVE-2008-1523" ], "details": "ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(AGD.2) through 3.40(AHQ.3), allow remote authenticated users to obtain ISP and Dynamic DNS credentials by sending a direct request for (1) WAN.html, (2) wzPPPOE.html, and (3) rpDyDNS.html, and then reading the HTML source.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rmwx-75rf-hj6q/GHSA-rmwx-75rf-hj6q.json b/advisories/unreviewed/2022/05/GHSA-rmwx-75rf-hj6q/GHSA-rmwx-75rf-hj6q.json index f3b1cc4a834..6be539e117a 100644 --- a/advisories/unreviewed/2022/05/GHSA-rmwx-75rf-hj6q/GHSA-rmwx-75rf-hj6q.json +++ b/advisories/unreviewed/2022/05/GHSA-rmwx-75rf-hj6q/GHSA-rmwx-75rf-hj6q.json @@ -7,12 +7,8 @@ "CVE-2008-1509" ], "details": "SQL injection vulnerability in index.php in XLPortal 2.2.4 and earlier allows remote attackers to execute arbitrary SQL commands via the query parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rpc6-67vh-jrfm/GHSA-rpc6-67vh-jrfm.json b/advisories/unreviewed/2022/05/GHSA-rpc6-67vh-jrfm/GHSA-rpc6-67vh-jrfm.json index 855eb8e70b0..42f7b26c1f3 100644 --- a/advisories/unreviewed/2022/05/GHSA-rpc6-67vh-jrfm/GHSA-rpc6-67vh-jrfm.json +++ b/advisories/unreviewed/2022/05/GHSA-rpc6-67vh-jrfm/GHSA-rpc6-67vh-jrfm.json @@ -7,12 +7,8 @@ "CVE-2008-1976" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the Drupal modules (1) Internationalization (i18n) 5.x before 5.x-2.3 and 5.x-1.1 and 6.x before 6.x-1.0 beta 1; and (2) Localizer 5.x before 5.x-3.4, 5.x-2.1, and 5.x-1.11; allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rq5m-h657-fcmc/GHSA-rq5m-h657-fcmc.json b/advisories/unreviewed/2022/05/GHSA-rq5m-h657-fcmc/GHSA-rq5m-h657-fcmc.json index 5dcdd213fff..17a8786c572 100644 --- a/advisories/unreviewed/2022/05/GHSA-rq5m-h657-fcmc/GHSA-rq5m-h657-fcmc.json +++ b/advisories/unreviewed/2022/05/GHSA-rq5m-h657-fcmc/GHSA-rq5m-h657-fcmc.json @@ -7,12 +7,8 @@ "CVE-2008-1688" ], "details": "Unspecified vulnerability in GNU m4 before 1.4.11 might allow context-dependent attackers to execute arbitrary code, related to improper handling of filenames specified with the -F option. NOTE: it is not clear when this issue crosses privilege boundaries.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rqr6-f773-2wgq/GHSA-rqr6-f773-2wgq.json b/advisories/unreviewed/2022/05/GHSA-rqr6-f773-2wgq/GHSA-rqr6-f773-2wgq.json index 1c439894fed..1c0ebc54495 100644 --- a/advisories/unreviewed/2022/05/GHSA-rqr6-f773-2wgq/GHSA-rqr6-f773-2wgq.json +++ b/advisories/unreviewed/2022/05/GHSA-rqr6-f773-2wgq/GHSA-rqr6-f773-2wgq.json @@ -7,12 +7,8 @@ "CVE-2008-1527" ], "details": "ZyXEL Prestige routers, including P-660, P-661, and P-662 models with firmware 3.40(PE9) and 3.40(AGD.2) through 3.40(AHQ.3), support authentication over HTTP via a hash string in the hiddenPassword field, which allows remote attackers to obtain access via a replay attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rqv6-4w49-x2w4/GHSA-rqv6-4w49-x2w4.json b/advisories/unreviewed/2022/05/GHSA-rqv6-4w49-x2w4/GHSA-rqv6-4w49-x2w4.json index d83b5ff9af4..8b2a9633a08 100644 --- a/advisories/unreviewed/2022/05/GHSA-rqv6-4w49-x2w4/GHSA-rqv6-4w49-x2w4.json +++ b/advisories/unreviewed/2022/05/GHSA-rqv6-4w49-x2w4/GHSA-rqv6-4w49-x2w4.json @@ -7,12 +7,8 @@ "CVE-2008-1313" ], "details": "Multiple SQL injection vulnerabilities in index.php in Bloo 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) post_id, (2) post_category_id, (3) post_year_month, and (4) static_page_id parameters; and unspecified other vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rr7c-gqpv-32w6/GHSA-rr7c-gqpv-32w6.json b/advisories/unreviewed/2022/05/GHSA-rr7c-gqpv-32w6/GHSA-rr7c-gqpv-32w6.json index b2f198003c3..f4c7d909a51 100644 --- a/advisories/unreviewed/2022/05/GHSA-rr7c-gqpv-32w6/GHSA-rr7c-gqpv-32w6.json +++ b/advisories/unreviewed/2022/05/GHSA-rr7c-gqpv-32w6/GHSA-rr7c-gqpv-32w6.json @@ -7,12 +7,8 @@ "CVE-2008-1794" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the Webform Drupal module 5.x before 5.x-1.10, 5.x-2.x before 5.x-2.0-beta3, and 6.x before 6.x-1.0-beta3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rrcf-jjfc-28h5/GHSA-rrcf-jjfc-28h5.json b/advisories/unreviewed/2022/05/GHSA-rrcf-jjfc-28h5/GHSA-rrcf-jjfc-28h5.json index 48c9ca4c485..e9819ccd9f7 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrcf-jjfc-28h5/GHSA-rrcf-jjfc-28h5.json +++ b/advisories/unreviewed/2022/05/GHSA-rrcf-jjfc-28h5/GHSA-rrcf-jjfc-28h5.json @@ -7,12 +7,8 @@ "CVE-2008-1856" ], "details": "plugins/maps/db_handler.php in LinPHA 1.3.3 and earlier does not require authentication for a settings action that modifies the configuration file, which allows remote attackers to conduct directory traversal attacks and execute arbitrary local files by placing directory traversal sequences into the maps_type configuration setting, and then sending a request to maps_view.php, which causes plugins/maps/map.main.class.php to use the modified configuration.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rrvx-mjh3-fgmh/GHSA-rrvx-mjh3-fgmh.json b/advisories/unreviewed/2022/05/GHSA-rrvx-mjh3-fgmh/GHSA-rrvx-mjh3-fgmh.json index 1c668afebc6..c4b3f808972 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrvx-mjh3-fgmh/GHSA-rrvx-mjh3-fgmh.json +++ b/advisories/unreviewed/2022/05/GHSA-rrvx-mjh3-fgmh/GHSA-rrvx-mjh3-fgmh.json @@ -7,12 +7,8 @@ "CVE-2008-1486" ], "details": "SQL injection vulnerability in Phorum before 5.2.6, when mysql_use_ft is disabled, allows remote attackers to execute arbitrary SQL commands via the non-fulltext search.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rrx6-76rv-6pj8/GHSA-rrx6-76rv-6pj8.json b/advisories/unreviewed/2022/05/GHSA-rrx6-76rv-6pj8/GHSA-rrx6-76rv-6pj8.json index 6a5069a9c3a..42368c5ee8e 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrx6-76rv-6pj8/GHSA-rrx6-76rv-6pj8.json +++ b/advisories/unreviewed/2022/05/GHSA-rrx6-76rv-6pj8/GHSA-rrx6-76rv-6pj8.json @@ -7,12 +7,8 @@ "CVE-2008-1942" ], "details": "Foxit Reader 2.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a PDF file with (1) a malformed ExtGState resource containing a /Font resource, or (2) an XObject resource with a Rotate setting, which triggers memory corruption. NOTE: this is probably a different vulnerability than CVE-2007-2186.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rwgf-7h72-9p28/GHSA-rwgf-7h72-9p28.json b/advisories/unreviewed/2022/05/GHSA-rwgf-7h72-9p28/GHSA-rwgf-7h72-9p28.json index a706223be68..3f1e3b2f5e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-rwgf-7h72-9p28/GHSA-rwgf-7h72-9p28.json +++ b/advisories/unreviewed/2022/05/GHSA-rwgf-7h72-9p28/GHSA-rwgf-7h72-9p28.json @@ -7,12 +7,8 @@ "CVE-2008-1560" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Digiappz DigiDomain 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) domain parameter to lookup_result.asp, and the (2) word1 and (3) word2 parameters to suggest_result.asp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rx7x-x8p7-jfcr/GHSA-rx7x-x8p7-jfcr.json b/advisories/unreviewed/2022/05/GHSA-rx7x-x8p7-jfcr/GHSA-rx7x-x8p7-jfcr.json index cfb6c035deb..2b935f3a66a 100644 --- a/advisories/unreviewed/2022/05/GHSA-rx7x-x8p7-jfcr/GHSA-rx7x-x8p7-jfcr.json +++ b/advisories/unreviewed/2022/05/GHSA-rx7x-x8p7-jfcr/GHSA-rx7x-x8p7-jfcr.json @@ -7,12 +7,8 @@ "CVE-2008-2004" ], "details": "The drive_init function in QEMU 0.9.1 determines the format of a raw disk image based on the header, which allows local guest users to read arbitrary files on the host by modifying the header to identify a different format, which is used when the guest is restarted.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v23p-4xpj-h834/GHSA-v23p-4xpj-h834.json b/advisories/unreviewed/2022/05/GHSA-v23p-4xpj-h834/GHSA-v23p-4xpj-h834.json index 567752da5e0..59bfc880e6b 100644 --- a/advisories/unreviewed/2022/05/GHSA-v23p-4xpj-h834/GHSA-v23p-4xpj-h834.json +++ b/advisories/unreviewed/2022/05/GHSA-v23p-4xpj-h834/GHSA-v23p-4xpj-h834.json @@ -7,12 +7,8 @@ "CVE-2008-1722" ], "details": "Multiple integer overflows in (1) filter/image-png.c and (2) filter/image-zoom.c in CUPS 1.3 allow attackers to cause a denial of service (crash) and trigger memory corruption, as demonstrated via a crafted PNG image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v2h7-hrfg-524r/GHSA-v2h7-hrfg-524r.json b/advisories/unreviewed/2022/05/GHSA-v2h7-hrfg-524r/GHSA-v2h7-hrfg-524r.json index e319d49cbb6..054301b6dd2 100644 --- a/advisories/unreviewed/2022/05/GHSA-v2h7-hrfg-524r/GHSA-v2h7-hrfg-524r.json +++ b/advisories/unreviewed/2022/05/GHSA-v2h7-hrfg-524r/GHSA-v2h7-hrfg-524r.json @@ -7,12 +7,8 @@ "CVE-2008-1846" ], "details": "The default configuration of SAP NetWeaver before 7.0 SP15 does not enable the \"Always Use Secure HTML Editor\" (aka Editor Security or Secure Editing) parameter, which allows remote attackers to conduct cross-site scripting (XSS) attacks by entering feedback for a file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v47g-rq9v-p4vr/GHSA-v47g-rq9v-p4vr.json b/advisories/unreviewed/2022/05/GHSA-v47g-rq9v-p4vr/GHSA-v47g-rq9v-p4vr.json index ffccdd3a7f8..f18ba414898 100644 --- a/advisories/unreviewed/2022/05/GHSA-v47g-rq9v-p4vr/GHSA-v47g-rq9v-p4vr.json +++ b/advisories/unreviewed/2022/05/GHSA-v47g-rq9v-p4vr/GHSA-v47g-rq9v-p4vr.json @@ -7,12 +7,8 @@ "CVE-2008-1859" ], "details": "SQL injection vulnerability in events.php in iScripts SocialWare allows remote attackers to execute arbitrary SQL commands via the id parameter in a show action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v69q-ww6r-wqm8/GHSA-v69q-ww6r-wqm8.json b/advisories/unreviewed/2022/05/GHSA-v69q-ww6r-wqm8/GHSA-v69q-ww6r-wqm8.json index b526f888826..d5038c24ca0 100644 --- a/advisories/unreviewed/2022/05/GHSA-v69q-ww6r-wqm8/GHSA-v69q-ww6r-wqm8.json +++ b/advisories/unreviewed/2022/05/GHSA-v69q-ww6r-wqm8/GHSA-v69q-ww6r-wqm8.json @@ -7,12 +7,8 @@ "CVE-2008-1957" ], "details": "SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL commands via the nb parameter in voir mode.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v6m8-qw2g-93xc/GHSA-v6m8-qw2g-93xc.json b/advisories/unreviewed/2022/05/GHSA-v6m8-qw2g-93xc/GHSA-v6m8-qw2g-93xc.json index 3cd328e9c99..fc11ad8d4f8 100644 --- a/advisories/unreviewed/2022/05/GHSA-v6m8-qw2g-93xc/GHSA-v6m8-qw2g-93xc.json +++ b/advisories/unreviewed/2022/05/GHSA-v6m8-qw2g-93xc/GHSA-v6m8-qw2g-93xc.json @@ -7,12 +7,8 @@ "CVE-2008-1938" ], "details": "Sony Mylo COM-2 Japanese model firmware before 1.002 does not properly verify web server SSL certificates, which allows remote attackers to obtain sensitive information and conduct spoofing attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v73f-mw8q-8gfh/GHSA-v73f-mw8q-8gfh.json b/advisories/unreviewed/2022/05/GHSA-v73f-mw8q-8gfh/GHSA-v73f-mw8q-8gfh.json index cc7c32699f7..314f7a0d594 100644 --- a/advisories/unreviewed/2022/05/GHSA-v73f-mw8q-8gfh/GHSA-v73f-mw8q-8gfh.json +++ b/advisories/unreviewed/2022/05/GHSA-v73f-mw8q-8gfh/GHSA-v73f-mw8q-8gfh.json @@ -7,12 +7,8 @@ "CVE-2008-1605" ], "details": "The (1) ltmmCaptureCtrl Class, (2) ltmmConvertCtrl Class, and (3) ltmmPlayCtrl Class ActiveX controls (ltmm15.dll 15.1.0.17 and earlier) in LEADTOOLS Multimedia Toolkit 15 allow attackers to overwrite arbitrary files via the SaveSettingsToFile method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v88h-xvv4-mqxq/GHSA-v88h-xvv4-mqxq.json b/advisories/unreviewed/2022/05/GHSA-v88h-xvv4-mqxq/GHSA-v88h-xvv4-mqxq.json index 09abb5a9e70..75e3abb82ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-v88h-xvv4-mqxq/GHSA-v88h-xvv4-mqxq.json +++ b/advisories/unreviewed/2022/05/GHSA-v88h-xvv4-mqxq/GHSA-v88h-xvv4-mqxq.json @@ -7,12 +7,8 @@ "CVE-2008-1816" ], "details": "Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.3 have unknown impact and remote authenticated attack vectors related to (1) SDO_UTIL in the Oracle Spatial component, aka DB05; or (2) fine grained auditing in the Audit component, aka DB14. NOTE: the previous information was obtained from the Oracle CPU. Oracle has not commented on reliable researcher claims that DB05 is SQL injection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v8fp-2p2f-6r3c/GHSA-v8fp-2p2f-6r3c.json b/advisories/unreviewed/2022/05/GHSA-v8fp-2p2f-6r3c/GHSA-v8fp-2p2f-6r3c.json index 91cfb89ce6d..f65c16e8a08 100644 --- a/advisories/unreviewed/2022/05/GHSA-v8fp-2p2f-6r3c/GHSA-v8fp-2p2f-6r3c.json +++ b/advisories/unreviewed/2022/05/GHSA-v8fp-2p2f-6r3c/GHSA-v8fp-2p2f-6r3c.json @@ -7,12 +7,8 @@ "CVE-2008-1845" ], "details": "The Korn shell (aka mksh) before R33d on MirOS (aka MirBSD) does not flush the tty's I/O when invoking mksh in a new terminal, which allows local users to gain privileges by opening a virtual terminal and entering command sequences, which might later be executed in opportunistic circumstances by a different user who launches mksh and specifies that terminal with the -T option.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v8gg-m84r-hhqc/GHSA-v8gg-m84r-hhqc.json b/advisories/unreviewed/2022/05/GHSA-v8gg-m84r-hhqc/GHSA-v8gg-m84r-hhqc.json index cd601d88334..0e5e7f05a70 100644 --- a/advisories/unreviewed/2022/05/GHSA-v8gg-m84r-hhqc/GHSA-v8gg-m84r-hhqc.json +++ b/advisories/unreviewed/2022/05/GHSA-v8gg-m84r-hhqc/GHSA-v8gg-m84r-hhqc.json @@ -7,12 +7,8 @@ "CVE-2008-1910" ], "details": "Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 SP2 allows remote attackers to execute arbitrary code via a malformed opcode 0x52 request to TCP port 3050. NOTE: this might overlap CVE-2007-5243 or CVE-2007-5244.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v8q7-7qwm-fxx3/GHSA-v8q7-7qwm-fxx3.json b/advisories/unreviewed/2022/05/GHSA-v8q7-7qwm-fxx3/GHSA-v8q7-7qwm-fxx3.json index 1bcefbe9b81..2ac731bf71f 100644 --- a/advisories/unreviewed/2022/05/GHSA-v8q7-7qwm-fxx3/GHSA-v8q7-7qwm-fxx3.json +++ b/advisories/unreviewed/2022/05/GHSA-v8q7-7qwm-fxx3/GHSA-v8q7-7qwm-fxx3.json @@ -7,12 +7,8 @@ "CVE-2008-1837" ], "details": "libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger \"memory problems,\" as demonstrated by the PROTOS GENOME test suite for Archive Formats.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v8w8-xx6j-rvqj/GHSA-v8w8-xx6j-rvqj.json b/advisories/unreviewed/2022/05/GHSA-v8w8-xx6j-rvqj/GHSA-v8w8-xx6j-rvqj.json index 1e5d1fffdf1..6d99fe111db 100644 --- a/advisories/unreviewed/2022/05/GHSA-v8w8-xx6j-rvqj/GHSA-v8w8-xx6j-rvqj.json +++ b/advisories/unreviewed/2022/05/GHSA-v8w8-xx6j-rvqj/GHSA-v8w8-xx6j-rvqj.json @@ -7,12 +7,8 @@ "CVE-2008-1730" ], "details": "Directory traversal vulnerability in download.html in ARWScripts Gallery Script Lite (aka gallery-script-lite or Free Photo Gallery Site Script), as of 20080411, allows remote attackers to read arbitrary local files via directory traversal sequences in the path parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v8wr-f7p7-rffg/GHSA-v8wr-f7p7-rffg.json b/advisories/unreviewed/2022/05/GHSA-v8wr-f7p7-rffg/GHSA-v8wr-f7p7-rffg.json index 07b46e4a063..3ae89a79399 100644 --- a/advisories/unreviewed/2022/05/GHSA-v8wr-f7p7-rffg/GHSA-v8wr-f7p7-rffg.json +++ b/advisories/unreviewed/2022/05/GHSA-v8wr-f7p7-rffg/GHSA-v8wr-f7p7-rffg.json @@ -7,12 +7,8 @@ "CVE-2008-1512" ], "details": "Directory traversal vulnerability in admin/admin_xs.php in eXtreme Styles module (XS-Mod) 2.3.1 and 2.4.0 for phpBB allows remote attackers to include and execute arbitrary files via a .. (dot dot) in the phpEx parameter. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v93m-ww8m-rrff/GHSA-v93m-ww8m-rrff.json b/advisories/unreviewed/2022/05/GHSA-v93m-ww8m-rrff/GHSA-v93m-ww8m-rrff.json index 38610e45775..d12152d077f 100644 --- a/advisories/unreviewed/2022/05/GHSA-v93m-ww8m-rrff/GHSA-v93m-ww8m-rrff.json +++ b/advisories/unreviewed/2022/05/GHSA-v93m-ww8m-rrff/GHSA-v93m-ww8m-rrff.json @@ -7,12 +7,8 @@ "CVE-2008-1770" ], "details": "CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force the download and execution of arbitrary files via a URL parameter containing an encoded LF followed by a malicious target line.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v9cj-6wcq-m4j9/GHSA-v9cj-6wcq-m4j9.json b/advisories/unreviewed/2022/05/GHSA-v9cj-6wcq-m4j9/GHSA-v9cj-6wcq-m4j9.json index 916bd426bb2..2199df0f50a 100644 --- a/advisories/unreviewed/2022/05/GHSA-v9cj-6wcq-m4j9/GHSA-v9cj-6wcq-m4j9.json +++ b/advisories/unreviewed/2022/05/GHSA-v9cj-6wcq-m4j9/GHSA-v9cj-6wcq-m4j9.json @@ -7,12 +7,8 @@ "CVE-2008-1810" ], "details": "Untrusted search path vulnerability in dbmsrv in SAP MaxDB 7.6.03.15 on Linux allows local users to gain privileges via a modified PATH environment variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vcf6-rqgx-fhj7/GHSA-vcf6-rqgx-fhj7.json b/advisories/unreviewed/2022/05/GHSA-vcf6-rqgx-fhj7/GHSA-vcf6-rqgx-fhj7.json index a7e1f6359de..7a2c4816e4b 100644 --- a/advisories/unreviewed/2022/05/GHSA-vcf6-rqgx-fhj7/GHSA-vcf6-rqgx-fhj7.json +++ b/advisories/unreviewed/2022/05/GHSA-vcf6-rqgx-fhj7/GHSA-vcf6-rqgx-fhj7.json @@ -7,12 +7,8 @@ "CVE-2008-1743" ], "details": "Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (memory consumption and service interruption) via a series of malformed TCP packets, aka Bug ID CSCsi98433.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vgg2-rxqr-3f72/GHSA-vgg2-rxqr-3f72.json b/advisories/unreviewed/2022/05/GHSA-vgg2-rxqr-3f72/GHSA-vgg2-rxqr-3f72.json index d78a2e2f4e7..136b9f5fbd1 100644 --- a/advisories/unreviewed/2022/05/GHSA-vgg2-rxqr-3f72/GHSA-vgg2-rxqr-3f72.json +++ b/advisories/unreviewed/2022/05/GHSA-vgg2-rxqr-3f72/GHSA-vgg2-rxqr-3f72.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vgvw-x2pw-8x6h/GHSA-vgvw-x2pw-8x6h.json b/advisories/unreviewed/2022/05/GHSA-vgvw-x2pw-8x6h/GHSA-vgvw-x2pw-8x6h.json index c300e5b9dff..93c59f753ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-vgvw-x2pw-8x6h/GHSA-vgvw-x2pw-8x6h.json +++ b/advisories/unreviewed/2022/05/GHSA-vgvw-x2pw-8x6h/GHSA-vgvw-x2pw-8x6h.json @@ -7,12 +7,8 @@ "CVE-2008-1599" ], "details": "The nddstat programs on IBM AIX 5.2, 5.3, and 6.1 do not properly handle environment variables, which allows local users to gain privileges by invoking (1) atmstat, (2) entstat, (3) fddistat, (4) hdlcstat, or (5) tokstat.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vgwf-r744-xjrh/GHSA-vgwf-r744-xjrh.json b/advisories/unreviewed/2022/05/GHSA-vgwf-r744-xjrh/GHSA-vgwf-r744-xjrh.json index ce8564b0862..6d77167cd78 100644 --- a/advisories/unreviewed/2022/05/GHSA-vgwf-r744-xjrh/GHSA-vgwf-r744-xjrh.json +++ b/advisories/unreviewed/2022/05/GHSA-vgwf-r744-xjrh/GHSA-vgwf-r744-xjrh.json @@ -7,12 +7,8 @@ "CVE-2008-1740" ], "details": "The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump and service interruption) via an unspecified \"stress test,\" aka Bug ID CSCsh20972.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vh5g-c2gv-5655/GHSA-vh5g-c2gv-5655.json b/advisories/unreviewed/2022/05/GHSA-vh5g-c2gv-5655/GHSA-vh5g-c2gv-5655.json index f28e30fac16..59278058179 100644 --- a/advisories/unreviewed/2022/05/GHSA-vh5g-c2gv-5655/GHSA-vh5g-c2gv-5655.json +++ b/advisories/unreviewed/2022/05/GHSA-vh5g-c2gv-5655/GHSA-vh5g-c2gv-5655.json @@ -7,12 +7,8 @@ "CVE-2008-1814" ], "details": "Unspecified vulnerability in the Oracle Secure Enterprise Search or Ultrasearch component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3; Application Server 9.0.4.3 and 10.1.2.2; and Oracle Collaboration Suite 10.1.2; has unknown impact and remote attack vectors, aka DB04.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vhqg-5v8p-7r24/GHSA-vhqg-5v8p-7r24.json b/advisories/unreviewed/2022/05/GHSA-vhqg-5v8p-7r24/GHSA-vhqg-5v8p-7r24.json index 80fe61d6c02..f4d5a570b25 100644 --- a/advisories/unreviewed/2022/05/GHSA-vhqg-5v8p-7r24/GHSA-vhqg-5v8p-7r24.json +++ b/advisories/unreviewed/2022/05/GHSA-vhqg-5v8p-7r24/GHSA-vhqg-5v8p-7r24.json @@ -7,12 +7,8 @@ "CVE-2008-1498" ], "details": "Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated users to execute arbitrary code via a long first argument to the LIST command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vmjp-7grp-j482/GHSA-vmjp-7grp-j482.json b/advisories/unreviewed/2022/05/GHSA-vmjp-7grp-j482/GHSA-vmjp-7grp-j482.json index 5ced80a0841..b5bff9c0b50 100644 --- a/advisories/unreviewed/2022/05/GHSA-vmjp-7grp-j482/GHSA-vmjp-7grp-j482.json +++ b/advisories/unreviewed/2022/05/GHSA-vmjp-7grp-j482/GHSA-vmjp-7grp-j482.json @@ -7,12 +7,8 @@ "CVE-2008-1506" ], "details": "PEEL, possibly 3.x and earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which calls the phpinfo function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vmqv-639r-75pj/GHSA-vmqv-639r-75pj.json b/advisories/unreviewed/2022/05/GHSA-vmqv-639r-75pj/GHSA-vmqv-639r-75pj.json index 906b1376025..4e180032d40 100644 --- a/advisories/unreviewed/2022/05/GHSA-vmqv-639r-75pj/GHSA-vmqv-639r-75pj.json +++ b/advisories/unreviewed/2022/05/GHSA-vmqv-639r-75pj/GHSA-vmqv-639r-75pj.json @@ -7,12 +7,8 @@ "CVE-2008-1884" ], "details": "Directory traversal vulnerability in index.php in Wikepage Opus 13 2007.2 allows remote attackers to read arbitrary files via directory traversal sequences in the wiki parameter, a different vector than CVE-2006-4418.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vqfm-hgcc-mpw9/GHSA-vqfm-hgcc-mpw9.json b/advisories/unreviewed/2022/05/GHSA-vqfm-hgcc-mpw9/GHSA-vqfm-hgcc-mpw9.json index 2ab82e13476..ccc977c3b2e 100644 --- a/advisories/unreviewed/2022/05/GHSA-vqfm-hgcc-mpw9/GHSA-vqfm-hgcc-mpw9.json +++ b/advisories/unreviewed/2022/05/GHSA-vqfm-hgcc-mpw9/GHSA-vqfm-hgcc-mpw9.json @@ -7,12 +7,8 @@ "CVE-2008-1796" ], "details": "Comix 3.6.4 creates temporary directories with predictable names, which allows local users to cause an unspecified denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vvm6-gvx4-5r3v/GHSA-vvm6-gvx4-5r3v.json b/advisories/unreviewed/2022/05/GHSA-vvm6-gvx4-5r3v/GHSA-vvm6-gvx4-5r3v.json index f332e3a22e7..43ee5a07046 100644 --- a/advisories/unreviewed/2022/05/GHSA-vvm6-gvx4-5r3v/GHSA-vvm6-gvx4-5r3v.json +++ b/advisories/unreviewed/2022/05/GHSA-vvm6-gvx4-5r3v/GHSA-vvm6-gvx4-5r3v.json @@ -7,12 +7,8 @@ "CVE-2008-1945" ], "details": "QEMU 0.9.0 does not properly handle changes to removable media, which allows guest OS users to read arbitrary files on the host OS by using the diskformat: parameter in the -usbdevice option to modify the disk-image header to identify a different format, a related issue to CVE-2008-2004.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -76,9 +72,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vw2h-jp7j-6fq2/GHSA-vw2h-jp7j-6fq2.json b/advisories/unreviewed/2022/05/GHSA-vw2h-jp7j-6fq2/GHSA-vw2h-jp7j-6fq2.json index f84da7a1af6..93dfdd56d64 100644 --- a/advisories/unreviewed/2022/05/GHSA-vw2h-jp7j-6fq2/GHSA-vw2h-jp7j-6fq2.json +++ b/advisories/unreviewed/2022/05/GHSA-vw2h-jp7j-6fq2/GHSA-vw2h-jp7j-6fq2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vxg2-3g9q-vq66/GHSA-vxg2-3g9q-vq66.json b/advisories/unreviewed/2022/05/GHSA-vxg2-3g9q-vq66/GHSA-vxg2-3g9q-vq66.json index 14fd08a8a3e..d50339da743 100644 --- a/advisories/unreviewed/2022/05/GHSA-vxg2-3g9q-vq66/GHSA-vxg2-3g9q-vq66.json +++ b/advisories/unreviewed/2022/05/GHSA-vxg2-3g9q-vq66/GHSA-vxg2-3g9q-vq66.json @@ -7,12 +7,8 @@ "CVE-2008-1854" ], "details": "Unspecified vulnerability in SmarterMail Web Server (SMWebSvr.exe) in SmarterMail 5.0.2999 allows remote attackers to cause a denial of service (service termination) via a long HTTP (1) GET, (2) HEAD, (3) PUT, (4) POST, or (5) TRACE request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vxj3-6c9j-vg4h/GHSA-vxj3-6c9j-vg4h.json b/advisories/unreviewed/2022/05/GHSA-vxj3-6c9j-vg4h/GHSA-vxj3-6c9j-vg4h.json index aa88c045cee..d8a254dd9dc 100644 --- a/advisories/unreviewed/2022/05/GHSA-vxj3-6c9j-vg4h/GHSA-vxj3-6c9j-vg4h.json +++ b/advisories/unreviewed/2022/05/GHSA-vxj3-6c9j-vg4h/GHSA-vxj3-6c9j-vg4h.json @@ -7,12 +7,8 @@ "CVE-2008-1840" ], "details": "SQL injection vulnerability in upload.php in Coppermine Photo Gallery (CPG) 1.4.16 and earlier allows remote authenticated users or user-assisted remote HTTP servers to execute arbitrary SQL commands via the Content-Type HTTP response header provided by the HTTP server that is used for an upload.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vxw4-664v-4r54/GHSA-vxw4-664v-4r54.json b/advisories/unreviewed/2022/05/GHSA-vxw4-664v-4r54/GHSA-vxw4-664v-4r54.json index a5befb6fb2e..99459cc677e 100644 --- a/advisories/unreviewed/2022/05/GHSA-vxw4-664v-4r54/GHSA-vxw4-664v-4r54.json +++ b/advisories/unreviewed/2022/05/GHSA-vxw4-664v-4r54/GHSA-vxw4-664v-4r54.json @@ -7,12 +7,8 @@ "CVE-2008-1764" ], "details": "Unspecified vulnerability in Opera before 9.27 has unknown impact and attack vectors related to \"keyboard handling of password inputs.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w256-5j94-xr26/GHSA-w256-5j94-xr26.json b/advisories/unreviewed/2022/05/GHSA-w256-5j94-xr26/GHSA-w256-5j94-xr26.json index ee4946dadce..3d20cf5783c 100644 --- a/advisories/unreviewed/2022/05/GHSA-w256-5j94-xr26/GHSA-w256-5j94-xr26.json +++ b/advisories/unreviewed/2022/05/GHSA-w256-5j94-xr26/GHSA-w256-5j94-xr26.json @@ -7,12 +7,8 @@ "CVE-2008-1941" ], "details": "Cross-site scripting (XSS) vulnerability in the profile update feature in Akiva WebBoard 8.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors in the form field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w28v-87g6-cjr6/GHSA-w28v-87g6-cjr6.json b/advisories/unreviewed/2022/05/GHSA-w28v-87g6-cjr6/GHSA-w28v-87g6-cjr6.json index d87d868c13f..876fa7249d2 100644 --- a/advisories/unreviewed/2022/05/GHSA-w28v-87g6-cjr6/GHSA-w28v-87g6-cjr6.json +++ b/advisories/unreviewed/2022/05/GHSA-w28v-87g6-cjr6/GHSA-w28v-87g6-cjr6.json @@ -7,12 +7,8 @@ "CVE-2021-29049" ], "details": "Cross-site scripting (XSS) vulnerability in the Portal Workflow module's edit process page in Liferay DXP 7.0 before fix pack 99, 7.1 before fix pack 23, 7.2 before fix pack 12 and 7.3 before fix pack 1, allows remote attackers to inject arbitrary web script or HTML via the currentURL parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w43c-692f-vw5x/GHSA-w43c-692f-vw5x.json b/advisories/unreviewed/2022/05/GHSA-w43c-692f-vw5x/GHSA-w43c-692f-vw5x.json index 8d262b2d84b..ff00391f8fd 100644 --- a/advisories/unreviewed/2022/05/GHSA-w43c-692f-vw5x/GHSA-w43c-692f-vw5x.json +++ b/advisories/unreviewed/2022/05/GHSA-w43c-692f-vw5x/GHSA-w43c-692f-vw5x.json @@ -7,12 +7,8 @@ "CVE-2008-1553" ], "details": "Directory traversal vulnerability in mod.php in TopperMod 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the to parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w4g6-x73r-xj28/GHSA-w4g6-x73r-xj28.json b/advisories/unreviewed/2022/05/GHSA-w4g6-x73r-xj28/GHSA-w4g6-x73r-xj28.json index 1fbc8f97c53..dc41cbb1ea4 100644 --- a/advisories/unreviewed/2022/05/GHSA-w4g6-x73r-xj28/GHSA-w4g6-x73r-xj28.json +++ b/advisories/unreviewed/2022/05/GHSA-w4g6-x73r-xj28/GHSA-w4g6-x73r-xj28.json @@ -7,12 +7,8 @@ "CVE-2008-1831" ], "details": "Multiple unspecified vulnerabilities in the Siebel SimBuilder component in Oracle Siebel Enterprise 7.8.2 and 7.8.5 have unknown impact and remote or local attack vectors, aka (1) SEBL01, (2) SEBL02, (3) SEBL03, (4) SEBL04, (5) SEBL05, and (6) SEBL06.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w59h-x8hw-prr7/GHSA-w59h-x8hw-prr7.json b/advisories/unreviewed/2022/05/GHSA-w59h-x8hw-prr7/GHSA-w59h-x8hw-prr7.json index 49dbdee0649..70ff5355906 100644 --- a/advisories/unreviewed/2022/05/GHSA-w59h-x8hw-prr7/GHSA-w59h-x8hw-prr7.json +++ b/advisories/unreviewed/2022/05/GHSA-w59h-x8hw-prr7/GHSA-w59h-x8hw-prr7.json @@ -7,12 +7,8 @@ "CVE-2008-1793" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in view.cgi in Smart Classified ADS Professional, Smart Photo ADS, and Smart Photo ADS Gold allow remote attackers to inject arbitrary web script or HTML via the (1) AdNum and (2) Department parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w5r2-92m6-cg9m/GHSA-w5r2-92m6-cg9m.json b/advisories/unreviewed/2022/05/GHSA-w5r2-92m6-cg9m/GHSA-w5r2-92m6-cg9m.json index 4fa1fd1c38c..c7c22a3a641 100644 --- a/advisories/unreviewed/2022/05/GHSA-w5r2-92m6-cg9m/GHSA-w5r2-92m6-cg9m.json +++ b/advisories/unreviewed/2022/05/GHSA-w5r2-92m6-cg9m/GHSA-w5r2-92m6-cg9m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w62h-8659-5jcf/GHSA-w62h-8659-5jcf.json b/advisories/unreviewed/2022/05/GHSA-w62h-8659-5jcf/GHSA-w62h-8659-5jcf.json index 902f34fb8b8..c5cea129e7a 100644 --- a/advisories/unreviewed/2022/05/GHSA-w62h-8659-5jcf/GHSA-w62h-8659-5jcf.json +++ b/advisories/unreviewed/2022/05/GHSA-w62h-8659-5jcf/GHSA-w62h-8659-5jcf.json @@ -7,12 +7,8 @@ "CVE-2008-1656" ], "details": "Adobe ColdFusion 8 and 8.0.1 does not properly implement the public access level for CFC methods, which allows remote attackers to invoke these methods via Flex 2 remoting, a different vulnerability than CVE-2006-4725.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w649-w4ph-c2g5/GHSA-w649-w4ph-c2g5.json b/advisories/unreviewed/2022/05/GHSA-w649-w4ph-c2g5/GHSA-w649-w4ph-c2g5.json index 8ea86e22000..d0cc63a2573 100644 --- a/advisories/unreviewed/2022/05/GHSA-w649-w4ph-c2g5/GHSA-w649-w4ph-c2g5.json +++ b/advisories/unreviewed/2022/05/GHSA-w649-w4ph-c2g5/GHSA-w649-w4ph-c2g5.json @@ -7,12 +7,8 @@ "CVE-2008-1581" ], "details": "Heap-based buffer overflow in Apple QuickTime before 7.5 on Windows allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted packed scanlines in PixData structures in a PICT image.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w694-c2xq-pqjf/GHSA-w694-c2xq-pqjf.json b/advisories/unreviewed/2022/05/GHSA-w694-c2xq-pqjf/GHSA-w694-c2xq-pqjf.json index 7e52a5cf70b..a68101f3e02 100644 --- a/advisories/unreviewed/2022/05/GHSA-w694-c2xq-pqjf/GHSA-w694-c2xq-pqjf.json +++ b/advisories/unreviewed/2022/05/GHSA-w694-c2xq-pqjf/GHSA-w694-c2xq-pqjf.json @@ -7,12 +7,8 @@ "CVE-2008-1697" ], "details": "Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows remote attackers to execute arbitrary code via a long URI in an HTTP request processed by ovas.exe, as demonstrated by a certain topology/homeBaseView request. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w6wv-6f7r-72hq/GHSA-w6wv-6f7r-72hq.json b/advisories/unreviewed/2022/05/GHSA-w6wv-6f7r-72hq/GHSA-w6wv-6f7r-72hq.json index c46b70268fc..2bbef155bb2 100644 --- a/advisories/unreviewed/2022/05/GHSA-w6wv-6f7r-72hq/GHSA-w6wv-6f7r-72hq.json +++ b/advisories/unreviewed/2022/05/GHSA-w6wv-6f7r-72hq/GHSA-w6wv-6f7r-72hq.json @@ -7,12 +7,8 @@ "CVE-2008-1967" ], "details": "Cross-site scripting (XSS) vulnerability in CFLogon/CFLogon.asp in Cezanne 6.5.1 and 7 allows remote attackers to inject arbitrary web script or HTML via the SleUserName parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w774-4mjh-hp8m/GHSA-w774-4mjh-hp8m.json b/advisories/unreviewed/2022/05/GHSA-w774-4mjh-hp8m/GHSA-w774-4mjh-hp8m.json index 195b82e7d3b..8cba1145d2e 100644 --- a/advisories/unreviewed/2022/05/GHSA-w774-4mjh-hp8m/GHSA-w774-4mjh-hp8m.json +++ b/advisories/unreviewed/2022/05/GHSA-w774-4mjh-hp8m/GHSA-w774-4mjh-hp8m.json @@ -7,12 +7,8 @@ "CVE-2008-1817" ], "details": "Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 have unknown impact and remote attack vectors related to (1) SDO_IDX in the Spatial component, aka DB07; and (2) Core RDBMS, aka DB10. NOTE: the previous information was obtained from the Oracle CPU. Oracle has not commented on reliable researcher claims that DB07 is SQL injection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w7g6-7wgx-8vpf/GHSA-w7g6-7wgx-8vpf.json b/advisories/unreviewed/2022/05/GHSA-w7g6-7wgx-8vpf/GHSA-w7g6-7wgx-8vpf.json index 3718e025a6b..d711ede1662 100644 --- a/advisories/unreviewed/2022/05/GHSA-w7g6-7wgx-8vpf/GHSA-w7g6-7wgx-8vpf.json +++ b/advisories/unreviewed/2022/05/GHSA-w7g6-7wgx-8vpf/GHSA-w7g6-7wgx-8vpf.json @@ -7,12 +7,8 @@ "CVE-2008-1319" ], "details": "Untrusted search path and argument injection vulnerability in the VersantD service in Versant Object Database 7.0.1.3 and earlier, as used in Borland CaliberRM and probably other products, allows remote attackers to execute arbitrary commands via a request to TCP port 5019 with a modified VERSANT_ROOT field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-w8g2-q4x3-fc97/GHSA-w8g2-q4x3-fc97.json b/advisories/unreviewed/2022/05/GHSA-w8g2-q4x3-fc97/GHSA-w8g2-q4x3-fc97.json index 306a1d5c056..e923433d5e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-w8g2-q4x3-fc97/GHSA-w8g2-q4x3-fc97.json +++ b/advisories/unreviewed/2022/05/GHSA-w8g2-q4x3-fc97/GHSA-w8g2-q4x3-fc97.json @@ -7,12 +7,8 @@ "CVE-2021-36789" ], "details": "The dated_news (aka Dated News) extension through 5.1.1 for TYPO3 allows SQL Injection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w8h7-7g46-j9v8/GHSA-w8h7-7g46-j9v8.json b/advisories/unreviewed/2022/05/GHSA-w8h7-7g46-j9v8/GHSA-w8h7-7g46-j9v8.json index dbc924f70db..967bc182676 100644 --- a/advisories/unreviewed/2022/05/GHSA-w8h7-7g46-j9v8/GHSA-w8h7-7g46-j9v8.json +++ b/advisories/unreviewed/2022/05/GHSA-w8h7-7g46-j9v8/GHSA-w8h7-7g46-j9v8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w8p9-6h94-xwwm/GHSA-w8p9-6h94-xwwm.json b/advisories/unreviewed/2022/05/GHSA-w8p9-6h94-xwwm/GHSA-w8p9-6h94-xwwm.json index cf6496fe3e6..08557acb880 100644 --- a/advisories/unreviewed/2022/05/GHSA-w8p9-6h94-xwwm/GHSA-w8p9-6h94-xwwm.json +++ b/advisories/unreviewed/2022/05/GHSA-w8p9-6h94-xwwm/GHSA-w8p9-6h94-xwwm.json @@ -7,12 +7,8 @@ "CVE-2021-26558" ], "details": "Deserialization of Untrusted Data vulnerability of Apache ShardingSphere-UI allows an attacker to inject outer link resources. This issue affects Apache ShardingSphere-UI Apache ShardingSphere-UI version 4.1.1 and later versions; Apache ShardingSphere-UI versions prior to 5.0.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wcfh-qx4h-cjrc/GHSA-wcfh-qx4h-cjrc.json b/advisories/unreviewed/2022/05/GHSA-wcfh-qx4h-cjrc/GHSA-wcfh-qx4h-cjrc.json index bd82927abb1..d95f8d13e88 100644 --- a/advisories/unreviewed/2022/05/GHSA-wcfh-qx4h-cjrc/GHSA-wcfh-qx4h-cjrc.json +++ b/advisories/unreviewed/2022/05/GHSA-wcfh-qx4h-cjrc/GHSA-wcfh-qx4h-cjrc.json @@ -7,12 +7,8 @@ "CVE-2008-1818" ], "details": "Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.6 has unknown impact and remote attack vectors, aka DB08.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wcm4-5593-c777/GHSA-wcm4-5593-c777.json b/advisories/unreviewed/2022/05/GHSA-wcm4-5593-c777/GHSA-wcm4-5593-c777.json index b352f96fc8e..353ed53936e 100644 --- a/advisories/unreviewed/2022/05/GHSA-wcm4-5593-c777/GHSA-wcm4-5593-c777.json +++ b/advisories/unreviewed/2022/05/GHSA-wcm4-5593-c777/GHSA-wcm4-5593-c777.json @@ -7,12 +7,8 @@ "CVE-2008-1712" ], "details": "PHP remote file inclusion vulnerability in includes/functions_weblog.php in mxBB mx_blogs 2.0.0 beta allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_path parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wffq-rvww-vh29/GHSA-wffq-rvww-vh29.json b/advisories/unreviewed/2022/05/GHSA-wffq-rvww-vh29/GHSA-wffq-rvww-vh29.json index 8f8333ffb22..4c67ea50aef 100644 --- a/advisories/unreviewed/2022/05/GHSA-wffq-rvww-vh29/GHSA-wffq-rvww-vh29.json +++ b/advisories/unreviewed/2022/05/GHSA-wffq-rvww-vh29/GHSA-wffq-rvww-vh29.json @@ -7,12 +7,8 @@ "CVE-2008-1795" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Blackboard Academic Suite 7.x and earlier, and possibly some 8.0 versions, allow remote attackers to inject arbitrary web script or HTML via (1) the searchText parameter in a Course action to webapps/blackboard/execute/viewCatalog or (2) the data__announcements___pk1_pk2__subject parameter in an ADD action to bin/common/announcement.pl.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wg7h-v77w-f95g/GHSA-wg7h-v77w-f95g.json b/advisories/unreviewed/2022/05/GHSA-wg7h-v77w-f95g/GHSA-wg7h-v77w-f95g.json index 8a170681188..253683c4daf 100644 --- a/advisories/unreviewed/2022/05/GHSA-wg7h-v77w-f95g/GHSA-wg7h-v77w-f95g.json +++ b/advisories/unreviewed/2022/05/GHSA-wg7h-v77w-f95g/GHSA-wg7h-v77w-f95g.json @@ -7,12 +7,8 @@ "CVE-2008-1562" ], "details": "The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet, a different vulnerability than CVE-2006-5740.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wgq4-5g69-f88h/GHSA-wgq4-5g69-f88h.json b/advisories/unreviewed/2022/05/GHSA-wgq4-5g69-f88h/GHSA-wgq4-5g69-f88h.json index 191628301a2..8502c9eb6ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-wgq4-5g69-f88h/GHSA-wgq4-5g69-f88h.json +++ b/advisories/unreviewed/2022/05/GHSA-wgq4-5g69-f88h/GHSA-wgq4-5g69-f88h.json @@ -7,12 +7,8 @@ "CVE-2008-1990" ], "details": "Multiple SQL injection vulnerabilities in Acidcat CMS 3.4.1 allow remote attackers to execute arbitrary SQL commands via the (1) cID parameter to default.asp and the (2) username parameter to main_login2.asp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-whm2-6mhh-gpg8/GHSA-whm2-6mhh-gpg8.json b/advisories/unreviewed/2022/05/GHSA-whm2-6mhh-gpg8/GHSA-whm2-6mhh-gpg8.json index 631ae843c03..3e3bf13d6c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-whm2-6mhh-gpg8/GHSA-whm2-6mhh-gpg8.json +++ b/advisories/unreviewed/2022/05/GHSA-whm2-6mhh-gpg8/GHSA-whm2-6mhh-gpg8.json @@ -7,12 +7,8 @@ "CVE-2020-20128" ], "details": "LaraCMS v1.0.1 transmits sensitive information in cleartext which can be intercepted by attackers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wj7h-ph98-q7pw/GHSA-wj7h-ph98-q7pw.json b/advisories/unreviewed/2022/05/GHSA-wj7h-ph98-q7pw/GHSA-wj7h-ph98-q7pw.json index 951354e35b4..3726bc4c0f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-wj7h-ph98-q7pw/GHSA-wj7h-ph98-q7pw.json +++ b/advisories/unreviewed/2022/05/GHSA-wj7h-ph98-q7pw/GHSA-wj7h-ph98-q7pw.json @@ -7,12 +7,8 @@ "CVE-2008-1791" ], "details": "SQL injection vulnerability in ladder.php in My Gaming Ladder 7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the ladderid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wj97-45j5-j24v/GHSA-wj97-45j5-j24v.json b/advisories/unreviewed/2022/05/GHSA-wj97-45j5-j24v/GHSA-wj97-45j5-j24v.json index da93c751546..8e8e4d23dbe 100644 --- a/advisories/unreviewed/2022/05/GHSA-wj97-45j5-j24v/GHSA-wj97-45j5-j24v.json +++ b/advisories/unreviewed/2022/05/GHSA-wj97-45j5-j24v/GHSA-wj97-45j5-j24v.json @@ -7,12 +7,8 @@ "CVE-2008-1766" ], "details": "Multiple unspecified vulnerabilities in phpBB before 3.0.1 have unknown impact and attack vectors, related to \"two minor security-related bugs.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wmfv-f2cm-4wp3/GHSA-wmfv-f2cm-4wp3.json b/advisories/unreviewed/2022/05/GHSA-wmfv-f2cm-4wp3/GHSA-wmfv-f2cm-4wp3.json index bb22bb04ef3..90c693e67a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-wmfv-f2cm-4wp3/GHSA-wmfv-f2cm-4wp3.json +++ b/advisories/unreviewed/2022/05/GHSA-wmfv-f2cm-4wp3/GHSA-wmfv-f2cm-4wp3.json @@ -7,12 +7,8 @@ "CVE-2008-1880" ], "details": "The default configuration of Firebird before 2.0.3.12981.0-r6 on Gentoo Linux sets the ISC_PASSWORD environment variable before starting Firebird, which allows remote attackers to bypass SYSDBA authentication and obtain sensitive database information via an empty password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wpxm-3wgf-gv3j/GHSA-wpxm-3wgf-gv3j.json b/advisories/unreviewed/2022/05/GHSA-wpxm-3wgf-gv3j/GHSA-wpxm-3wgf-gv3j.json index 9237f3cb51e..360d8693157 100644 --- a/advisories/unreviewed/2022/05/GHSA-wpxm-3wgf-gv3j/GHSA-wpxm-3wgf-gv3j.json +++ b/advisories/unreviewed/2022/05/GHSA-wpxm-3wgf-gv3j/GHSA-wpxm-3wgf-gv3j.json @@ -7,12 +7,8 @@ "CVE-2008-1931" ], "details": "Realtek HD Audio Codec Drivers RTKVHDA.sys and RTKVHDA64.sys before 6.0.1.5605 on Windows Vista allow local users to create, write, and read registry keys via a crafted IOCTL request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wq78-966f-23g4/GHSA-wq78-966f-23g4.json b/advisories/unreviewed/2022/05/GHSA-wq78-966f-23g4/GHSA-wq78-966f-23g4.json index 0b332c03409..c1eb0b15207 100644 --- a/advisories/unreviewed/2022/05/GHSA-wq78-966f-23g4/GHSA-wq78-966f-23g4.json +++ b/advisories/unreviewed/2022/05/GHSA-wq78-966f-23g4/GHSA-wq78-966f-23g4.json @@ -7,12 +7,8 @@ "CVE-2008-1777" ], "details": "The eDirectory Host Environment service (dhost.exe) in Novell eDirectory 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via a long HTTP HEAD request to TCP port 8028.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wqp9-hqgq-37f9/GHSA-wqp9-hqgq-37f9.json b/advisories/unreviewed/2022/05/GHSA-wqp9-hqgq-37f9/GHSA-wqp9-hqgq-37f9.json index 3e0afe479ae..5fed3e0bf21 100644 --- a/advisories/unreviewed/2022/05/GHSA-wqp9-hqgq-37f9/GHSA-wqp9-hqgq-37f9.json +++ b/advisories/unreviewed/2022/05/GHSA-wqp9-hqgq-37f9/GHSA-wqp9-hqgq-37f9.json @@ -7,12 +7,8 @@ "CVE-2008-1571" ], "details": "Directory traversal vulnerability in the embedded web server in Image Capture in Apple Mac OS X before 10.5 allows remote attackers to read arbitrary files via directory traversal sequences in the URI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wqwh-h7rc-47pq/GHSA-wqwh-h7rc-47pq.json b/advisories/unreviewed/2022/05/GHSA-wqwh-h7rc-47pq/GHSA-wqwh-h7rc-47pq.json index 85e0a272562..747acff198d 100644 --- a/advisories/unreviewed/2022/05/GHSA-wqwh-h7rc-47pq/GHSA-wqwh-h7rc-47pq.json +++ b/advisories/unreviewed/2022/05/GHSA-wqwh-h7rc-47pq/GHSA-wqwh-h7rc-47pq.json @@ -7,12 +7,8 @@ "CVE-2008-1575" ], "details": "Unspecified vulnerability in the Apple Type Services (ATS) server in Apple Mac OS X 10.5 before 10.5.3 allows user-assisted remote attackers to execute arbitrary code via a crafted embedded font in a PDF document, related to memory corruption that occurs during printing.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wr6q-9jvw-7c6w/GHSA-wr6q-9jvw-7c6w.json b/advisories/unreviewed/2022/05/GHSA-wr6q-9jvw-7c6w/GHSA-wr6q-9jvw-7c6w.json index 08b40a242f7..6ac1a06791c 100644 --- a/advisories/unreviewed/2022/05/GHSA-wr6q-9jvw-7c6w/GHSA-wr6q-9jvw-7c6w.json +++ b/advisories/unreviewed/2022/05/GHSA-wr6q-9jvw-7c6w/GHSA-wr6q-9jvw-7c6w.json @@ -7,12 +7,8 @@ "CVE-2008-1625" ], "details": "aavmker4.sys in avast! Home and Professional 4.7 for Windows does not properly validate input to IOCTL 0xb2d60030, which allows local users to gain privileges via certain IOCTL requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wr95-h8f6-c4gf/GHSA-wr95-h8f6-c4gf.json b/advisories/unreviewed/2022/05/GHSA-wr95-h8f6-c4gf/GHSA-wr95-h8f6-c4gf.json index 67a8b62c668..5c6c09005bb 100644 --- a/advisories/unreviewed/2022/05/GHSA-wr95-h8f6-c4gf/GHSA-wr95-h8f6-c4gf.json +++ b/advisories/unreviewed/2022/05/GHSA-wr95-h8f6-c4gf/GHSA-wr95-h8f6-c4gf.json @@ -7,12 +7,8 @@ "CVE-2008-1707" ], "details": "IBM solidDB 06.00.1018 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a packet with an 0x11 value in a certain \"type\" field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wv3q-vh98-3c66/GHSA-wv3q-vh98-3c66.json b/advisories/unreviewed/2022/05/GHSA-wv3q-vh98-3c66/GHSA-wv3q-vh98-3c66.json index dd60a28b5d4..40f2f52312e 100644 --- a/advisories/unreviewed/2022/05/GHSA-wv3q-vh98-3c66/GHSA-wv3q-vh98-3c66.json +++ b/advisories/unreviewed/2022/05/GHSA-wv3q-vh98-3c66/GHSA-wv3q-vh98-3c66.json @@ -7,12 +7,8 @@ "CVE-2008-1598" ], "details": "The kernel in IBM AIX 6.1 allows local users with ProbeVue privileges to read arbitrary kernel memory and obtain sensitive information via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wwvr-rrmg-r6c6/GHSA-wwvr-rrmg-r6c6.json b/advisories/unreviewed/2022/05/GHSA-wwvr-rrmg-r6c6/GHSA-wwvr-rrmg-r6c6.json index 8485bf7143c..79f4928811d 100644 --- a/advisories/unreviewed/2022/05/GHSA-wwvr-rrmg-r6c6/GHSA-wwvr-rrmg-r6c6.json +++ b/advisories/unreviewed/2022/05/GHSA-wwvr-rrmg-r6c6/GHSA-wwvr-rrmg-r6c6.json @@ -7,12 +7,8 @@ "CVE-2008-1596" ], "details": "Trusted Execution in IBM AIX 6.1 uses an incorrect pathname argument in a call to the trustchk_block_write function, which might allow local users to modify trusted files, related to missing checks in the TSD_FILES_LOCK policy for modifications performed via hard links, a different vulnerability than CVE-2007-6680.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wwxr-mf68-5rx2/GHSA-wwxr-mf68-5rx2.json b/advisories/unreviewed/2022/05/GHSA-wwxr-mf68-5rx2/GHSA-wwxr-mf68-5rx2.json index 3bbd023afc3..a69399ee216 100644 --- a/advisories/unreviewed/2022/05/GHSA-wwxr-mf68-5rx2/GHSA-wwxr-mf68-5rx2.json +++ b/advisories/unreviewed/2022/05/GHSA-wwxr-mf68-5rx2/GHSA-wwxr-mf68-5rx2.json @@ -7,12 +7,8 @@ "CVE-2008-1775" ], "details": "Cross-site scripting (XSS) vulnerability in mindex.do in ManageEngine Firewall Analyzer 4.0.3 allows remote attackers to inject arbitrary web script or HTML via the displayName parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wxv9-55x7-48qg/GHSA-wxv9-55x7-48qg.json b/advisories/unreviewed/2022/05/GHSA-wxv9-55x7-48qg/GHSA-wxv9-55x7-48qg.json index 18637e6d206..a3b22cb65e4 100644 --- a/advisories/unreviewed/2022/05/GHSA-wxv9-55x7-48qg/GHSA-wxv9-55x7-48qg.json +++ b/advisories/unreviewed/2022/05/GHSA-wxv9-55x7-48qg/GHSA-wxv9-55x7-48qg.json @@ -7,12 +7,8 @@ "CVE-2008-1619" ], "details": "The ssm_i emulation in Xen 5.1 on IA64 architectures allows attackers to cause a denial of service (dom0 panic) via certain traffic, as demonstrated using an FTP stress test tool.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x26f-cv2q-rg6c/GHSA-x26f-cv2q-rg6c.json b/advisories/unreviewed/2022/05/GHSA-x26f-cv2q-rg6c/GHSA-x26f-cv2q-rg6c.json index d7ad588e401..40b31d9fe93 100644 --- a/advisories/unreviewed/2022/05/GHSA-x26f-cv2q-rg6c/GHSA-x26f-cv2q-rg6c.json +++ b/advisories/unreviewed/2022/05/GHSA-x26f-cv2q-rg6c/GHSA-x26f-cv2q-rg6c.json @@ -7,12 +7,8 @@ "CVE-2008-1920" ], "details": "Heap-based buffer overflow in the boxelyRenderer module in the Personal Status Manager feature in ICQ 6.0 build 6043 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted personal status message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x27j-vxv4-6wrj/GHSA-x27j-vxv4-6wrj.json b/advisories/unreviewed/2022/05/GHSA-x27j-vxv4-6wrj/GHSA-x27j-vxv4-6wrj.json index 3014aedabe7..9687a634e88 100644 --- a/advisories/unreviewed/2022/05/GHSA-x27j-vxv4-6wrj/GHSA-x27j-vxv4-6wrj.json +++ b/advisories/unreviewed/2022/05/GHSA-x27j-vxv4-6wrj/GHSA-x27j-vxv4-6wrj.json @@ -7,12 +7,8 @@ "CVE-2008-1717" ], "details": "WoltLab Community Framework (WCF) 1.0.6 in WoltLab Burning Board 3.0.5 allows remote attackers to obtain the full path via invalid (1) page and (2) form parameters, which leaks the path from an exception handler when a valid class cannot be found.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x2xw-v9gc-w4fr/GHSA-x2xw-v9gc-w4fr.json b/advisories/unreviewed/2022/05/GHSA-x2xw-v9gc-w4fr/GHSA-x2xw-v9gc-w4fr.json index 57c2329d679..279b59f3e46 100644 --- a/advisories/unreviewed/2022/05/GHSA-x2xw-v9gc-w4fr/GHSA-x2xw-v9gc-w4fr.json +++ b/advisories/unreviewed/2022/05/GHSA-x2xw-v9gc-w4fr/GHSA-x2xw-v9gc-w4fr.json @@ -7,12 +7,8 @@ "CVE-2008-1876" ], "details": "PHP remote file inclusion vulnerability in index.php in VisualPic 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the _CONFIG[files][functions_page] parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x4wv-m7fh-33hw/GHSA-x4wv-m7fh-33hw.json b/advisories/unreviewed/2022/05/GHSA-x4wv-m7fh-33hw/GHSA-x4wv-m7fh-33hw.json index 8af7834b74c..3c334f0a848 100644 --- a/advisories/unreviewed/2022/05/GHSA-x4wv-m7fh-33hw/GHSA-x4wv-m7fh-33hw.json +++ b/advisories/unreviewed/2022/05/GHSA-x4wv-m7fh-33hw/GHSA-x4wv-m7fh-33hw.json @@ -7,12 +7,8 @@ "CVE-2008-1808" ], "details": "Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via (1) a crafted table in a Printer Font Binary (PFB) file or (2) a crafted SHC instruction in a TrueType Font (TTF) file, which triggers a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -256,9 +252,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x539-m9wh-c27w/GHSA-x539-m9wh-c27w.json b/advisories/unreviewed/2022/05/GHSA-x539-m9wh-c27w/GHSA-x539-m9wh-c27w.json index 3ef10d2e077..1184b80e3e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-x539-m9wh-c27w/GHSA-x539-m9wh-c27w.json +++ b/advisories/unreviewed/2022/05/GHSA-x539-m9wh-c27w/GHSA-x539-m9wh-c27w.json @@ -7,12 +7,8 @@ "CVE-2008-1852" ], "details": "ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service (crash) via certain requests that specify a large number of sub-arguments, which triggers a NULL pointer dereference due to memory allocation failure.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x64v-3g63-2ccm/GHSA-x64v-3g63-2ccm.json b/advisories/unreviewed/2022/05/GHSA-x64v-3g63-2ccm/GHSA-x64v-3g63-2ccm.json index 728743b8120..5d7a5e12077 100644 --- a/advisories/unreviewed/2022/05/GHSA-x64v-3g63-2ccm/GHSA-x64v-3g63-2ccm.json +++ b/advisories/unreviewed/2022/05/GHSA-x64v-3g63-2ccm/GHSA-x64v-3g63-2ccm.json @@ -7,12 +7,8 @@ "CVE-2008-1786" ], "details": "The DSM gui_cm_ctrls ActiveX control (gui_cm_ctrls.ocx), as used in multiple CA products including BrightStor ARCServe Backup for Laptops and Desktops r11.5, Desktop Management Suite r11.1 through r11.2 C2; Unicenter r11.1 through r11.2 C2; and Desktop and Server Management r11.1 through r11.2 C2 allows remote attackers to execute arbitrary code via crafted function arguments.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x6f7-wjxx-354v/GHSA-x6f7-wjxx-354v.json b/advisories/unreviewed/2022/05/GHSA-x6f7-wjxx-354v/GHSA-x6f7-wjxx-354v.json index c778c7efe86..c5d19951988 100644 --- a/advisories/unreviewed/2022/05/GHSA-x6f7-wjxx-354v/GHSA-x6f7-wjxx-354v.json +++ b/advisories/unreviewed/2022/05/GHSA-x6f7-wjxx-354v/GHSA-x6f7-wjxx-354v.json @@ -7,12 +7,8 @@ "CVE-2008-1468" ], "details": "Cross-site scripting (XSS) vulnerability in namazu.cgi in Namazu before 2.0.18 allows remote attackers to inject arbitrary web script or HTML via UTF-7 encoded input, related to failure to set the charset, a different vector than CVE-2004-1318 and CVE-2001-1350. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x76p-642h-cfgv/GHSA-x76p-642h-cfgv.json b/advisories/unreviewed/2022/05/GHSA-x76p-642h-cfgv/GHSA-x76p-642h-cfgv.json index 363030d46d6..9ebfc1fda10 100644 --- a/advisories/unreviewed/2022/05/GHSA-x76p-642h-cfgv/GHSA-x76p-642h-cfgv.json +++ b/advisories/unreviewed/2022/05/GHSA-x76p-642h-cfgv/GHSA-x76p-642h-cfgv.json @@ -7,12 +7,8 @@ "CVE-2008-1749" ], "details": "Memory leak in Cisco Content Switching Module (CSM) 4.2(3) up to 4.2(8) and Cisco Content Switching Module with SSL (CSM-S) 2.1(2) up to 2.1(7) allows remote attackers to cause a denial of service (memory consumption) via TCP segments with an unspecified combination of TCP flags.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-x8v2-49fm-h484/GHSA-x8v2-49fm-h484.json b/advisories/unreviewed/2022/05/GHSA-x8v2-49fm-h484/GHSA-x8v2-49fm-h484.json index 0b9b4e71d58..14557bcce0a 100644 --- a/advisories/unreviewed/2022/05/GHSA-x8v2-49fm-h484/GHSA-x8v2-49fm-h484.json +++ b/advisories/unreviewed/2022/05/GHSA-x8v2-49fm-h484/GHSA-x8v2-49fm-h484.json @@ -7,12 +7,8 @@ "CVE-2008-1901" ], "details": "aptlinex before 0.91 allows local users to overwrite arbitrary files via a symlink attack on the gambas-apt.lock temporary file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x96h-69xh-hpfv/GHSA-x96h-69xh-hpfv.json b/advisories/unreviewed/2022/05/GHSA-x96h-69xh-hpfv/GHSA-x96h-69xh-hpfv.json index d7b55379d55..86f85879f76 100644 --- a/advisories/unreviewed/2022/05/GHSA-x96h-69xh-hpfv/GHSA-x96h-69xh-hpfv.json +++ b/advisories/unreviewed/2022/05/GHSA-x96h-69xh-hpfv/GHSA-x96h-69xh-hpfv.json @@ -7,12 +7,8 @@ "CVE-2008-1806" ], "details": "Integer overflow in FreeType2 before 2.3.6 allows context-dependent attackers to execute arbitrary code via a crafted set of 16-bit length values within the Private dictionary table in a Printer Font Binary (PFB) file, which triggers a heap-based buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -244,9 +240,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xcfq-6r83-fvm6/GHSA-xcfq-6r83-fvm6.json b/advisories/unreviewed/2022/05/GHSA-xcfq-6r83-fvm6/GHSA-xcfq-6r83-fvm6.json index ba07fb923f1..67a4919b081 100644 --- a/advisories/unreviewed/2022/05/GHSA-xcfq-6r83-fvm6/GHSA-xcfq-6r83-fvm6.json +++ b/advisories/unreviewed/2022/05/GHSA-xcfq-6r83-fvm6/GHSA-xcfq-6r83-fvm6.json @@ -7,12 +7,8 @@ "CVE-2008-1703" ], "details": "Multiple buffer overflows in TIBCO Software Rendezvous before 8.1.0, as used in multiple TIBCO products, allow remote attackers to execute arbitrary code via a crafted message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xfwm-3cfp-v279/GHSA-xfwm-3cfp-v279.json b/advisories/unreviewed/2022/05/GHSA-xfwm-3cfp-v279/GHSA-xfwm-3cfp-v279.json index 5d9b862cf7b..0a13be9b1ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-xfwm-3cfp-v279/GHSA-xfwm-3cfp-v279.json +++ b/advisories/unreviewed/2022/05/GHSA-xfwm-3cfp-v279/GHSA-xfwm-3cfp-v279.json @@ -7,12 +7,8 @@ "CVE-2008-1877" ], "details": "tss 0.8.1 allows local users to read arbitrary files via the -a parameter, which is processed while tss is running with privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xhrr-v9w4-p3m4/GHSA-xhrr-v9w4-p3m4.json b/advisories/unreviewed/2022/05/GHSA-xhrr-v9w4-p3m4/GHSA-xhrr-v9w4-p3m4.json index bb20bfc4ef2..0ecb5834d22 100644 --- a/advisories/unreviewed/2022/05/GHSA-xhrr-v9w4-p3m4/GHSA-xhrr-v9w4-p3m4.json +++ b/advisories/unreviewed/2022/05/GHSA-xhrr-v9w4-p3m4/GHSA-xhrr-v9w4-p3m4.json @@ -7,12 +7,8 @@ "CVE-2008-1641" ], "details": "SQL injection vulnerability in default.asp in EfesTECH Video 5.0 allows remote attackers to execute arbitrary SQL commands via the catID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xj8q-rww9-p266/GHSA-xj8q-rww9-p266.json b/advisories/unreviewed/2022/05/GHSA-xj8q-rww9-p266/GHSA-xj8q-rww9-p266.json index 8adf330b7ba..56fbdf2937b 100644 --- a/advisories/unreviewed/2022/05/GHSA-xj8q-rww9-p266/GHSA-xj8q-rww9-p266.json +++ b/advisories/unreviewed/2022/05/GHSA-xj8q-rww9-p266/GHSA-xj8q-rww9-p266.json @@ -7,12 +7,8 @@ "CVE-2008-1642" ], "details": "Directory traversal vulnerability in index.php in Sava's GuestBook 2.0 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the action parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xmvf-pxpf-9mgp/GHSA-xmvf-pxpf-9mgp.json b/advisories/unreviewed/2022/05/GHSA-xmvf-pxpf-9mgp/GHSA-xmvf-pxpf-9mgp.json index b72e77f6d34..10a63e4ab3e 100644 --- a/advisories/unreviewed/2022/05/GHSA-xmvf-pxpf-9mgp/GHSA-xmvf-pxpf-9mgp.json +++ b/advisories/unreviewed/2022/05/GHSA-xmvf-pxpf-9mgp/GHSA-xmvf-pxpf-9mgp.json @@ -7,12 +7,8 @@ "CVE-2008-1960" ], "details": "Cross-site scripting (XSS) vulnerability in cgi-bin/contray/search.cgi in ContRay 3.x allows remote attackers to inject arbitrary web script or HTML via the search parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xmvh-m2j6-pff4/GHSA-xmvh-m2j6-pff4.json b/advisories/unreviewed/2022/05/GHSA-xmvh-m2j6-pff4/GHSA-xmvh-m2j6-pff4.json index 2c2b2ae2a82..9ed07526f79 100644 --- a/advisories/unreviewed/2022/05/GHSA-xmvh-m2j6-pff4/GHSA-xmvh-m2j6-pff4.json +++ b/advisories/unreviewed/2022/05/GHSA-xmvh-m2j6-pff4/GHSA-xmvh-m2j6-pff4.json @@ -7,12 +7,8 @@ "CVE-2008-1561" ], "details": "Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) 0.99.5 through 0.99.8 allow remote attackers to cause a denial of service (application crash) via a malformed packet to the (1) X.509sat or (2) Roofnet dissectors. NOTE: Vector 2 might also lead to a hang.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -120,9 +116,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xp69-3r8v-65c8/GHSA-xp69-3r8v-65c8.json b/advisories/unreviewed/2022/05/GHSA-xp69-3r8v-65c8/GHSA-xp69-3r8v-65c8.json index 9970cdacc59..808fa062494 100644 --- a/advisories/unreviewed/2022/05/GHSA-xp69-3r8v-65c8/GHSA-xp69-3r8v-65c8.json +++ b/advisories/unreviewed/2022/05/GHSA-xp69-3r8v-65c8/GHSA-xp69-3r8v-65c8.json @@ -7,12 +7,8 @@ "CVE-2008-1867" ], "details": "SQL injection vulnerability in Blog Pixel Motion (aka Blog PixelMotion) allows remote attackers to execute arbitrary SQL commands via the categorie parameter to index.php, possibly related to include/requetesIndex.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xqc3-f6fp-p8x7/GHSA-xqc3-f6fp-p8x7.json b/advisories/unreviewed/2022/05/GHSA-xqc3-f6fp-p8x7/GHSA-xqc3-f6fp-p8x7.json index f67e6a1dff2..b4819a76ddb 100644 --- a/advisories/unreviewed/2022/05/GHSA-xqc3-f6fp-p8x7/GHSA-xqc3-f6fp-p8x7.json +++ b/advisories/unreviewed/2022/05/GHSA-xqc3-f6fp-p8x7/GHSA-xqc3-f6fp-p8x7.json @@ -7,12 +7,8 @@ "CVE-2008-1507" ], "details": "PEEL, possibly 3.x and earlier, has (1) a default info@peel.fr account with password admin, and (2) a default contact@peel.fr account with password cinema, which allows remote attackers to gain administrative access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xqfm-pq35-hw8g/GHSA-xqfm-pq35-hw8g.json b/advisories/unreviewed/2022/05/GHSA-xqfm-pq35-hw8g/GHSA-xqfm-pq35-hw8g.json index 76e6df74c4d..aa6c7cc05cc 100644 --- a/advisories/unreviewed/2022/05/GHSA-xqfm-pq35-hw8g/GHSA-xqfm-pq35-hw8g.json +++ b/advisories/unreviewed/2022/05/GHSA-xqfm-pq35-hw8g/GHSA-xqfm-pq35-hw8g.json @@ -7,12 +7,8 @@ "CVE-2008-1699" ], "details": "SQL injection vulnerability in permalink.php in Desi Quintans Writer's Block CMS 3.8a allows remote attackers to execute arbitrary SQL commands via the PostID parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xqj4-wvm8-f3fq/GHSA-xqj4-wvm8-f3fq.json b/advisories/unreviewed/2022/05/GHSA-xqj4-wvm8-f3fq/GHSA-xqj4-wvm8-f3fq.json index d1abf205aec..b0a65fcacbe 100644 --- a/advisories/unreviewed/2022/05/GHSA-xqj4-wvm8-f3fq/GHSA-xqj4-wvm8-f3fq.json +++ b/advisories/unreviewed/2022/05/GHSA-xqj4-wvm8-f3fq/GHSA-xqj4-wvm8-f3fq.json @@ -7,12 +7,8 @@ "CVE-2008-1329" ], "details": "Unspecified vulnerability in the NetBackup service in CA ARCserve Backup for Laptops and Desktops r11.0 through r11.5, and Suite 11.1 and 11.2, allows remote attackers to execute arbitrary commands, related to \"insufficient verification of file uploads.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xr57-rwcw-5hgw/GHSA-xr57-rwcw-5hgw.json b/advisories/unreviewed/2022/05/GHSA-xr57-rwcw-5hgw/GHSA-xr57-rwcw-5hgw.json index fe542ef5d03..4092da10ac4 100644 --- a/advisories/unreviewed/2022/05/GHSA-xr57-rwcw-5hgw/GHSA-xr57-rwcw-5hgw.json +++ b/advisories/unreviewed/2022/05/GHSA-xr57-rwcw-5hgw/GHSA-xr57-rwcw-5hgw.json @@ -7,12 +7,8 @@ "CVE-2008-1631" ], "details": "SQL injection vulnerability in login.php in CuteFlow 1.5.0 and 2.10.0 allows remote attackers to execute arbitrary SQL commands via the UserId parameter, related to the login form field in index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xrfw-635c-5mwq/GHSA-xrfw-635c-5mwq.json b/advisories/unreviewed/2022/05/GHSA-xrfw-635c-5mwq/GHSA-xrfw-635c-5mwq.json index f82716a2a0e..1a3ed73910e 100644 --- a/advisories/unreviewed/2022/05/GHSA-xrfw-635c-5mwq/GHSA-xrfw-635c-5mwq.json +++ b/advisories/unreviewed/2022/05/GHSA-xrfw-635c-5mwq/GHSA-xrfw-635c-5mwq.json @@ -7,12 +7,8 @@ "CVE-2008-1556" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in BolinOS 4.6.1 allow remote attackers to inject arbitrary web script or HTML via the (1) url parameter to (a) system/actionspages/_b/contentFiles/gBImageViewer.php, (2) ForEditor parameter to (b) system/actionspages/_b/contentFiles/gBselectorContents.php, (3) the PATH_INFO to (c) gBLoginPage.php and (d) gBPassword.php in system/actionspages/_b/contentFiles/, (4) formlogin parameter to system/actionspages/_b/contentFiles/gBLoginPage.php, and the (5) bolini_searchengine46Search parameter to (e) help/index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xrjm-v355-frfj/GHSA-xrjm-v355-frfj.json b/advisories/unreviewed/2022/05/GHSA-xrjm-v355-frfj/GHSA-xrjm-v355-frfj.json index d58acb275b5..36a7f9b4b2e 100644 --- a/advisories/unreviewed/2022/05/GHSA-xrjm-v355-frfj/GHSA-xrjm-v355-frfj.json +++ b/advisories/unreviewed/2022/05/GHSA-xrjm-v355-frfj/GHSA-xrjm-v355-frfj.json @@ -7,12 +7,8 @@ "CVE-2008-1835" ], "details": "ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be parsed by ClamAV but can be extracted by Winrar.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xw8w-2j8r-rmrx/GHSA-xw8w-2j8r-rmrx.json b/advisories/unreviewed/2022/05/GHSA-xw8w-2j8r-rmrx/GHSA-xw8w-2j8r-rmrx.json index d1c5cde992f..3ebffc3e91d 100644 --- a/advisories/unreviewed/2022/05/GHSA-xw8w-2j8r-rmrx/GHSA-xw8w-2j8r-rmrx.json +++ b/advisories/unreviewed/2022/05/GHSA-xw8w-2j8r-rmrx/GHSA-xw8w-2j8r-rmrx.json @@ -7,12 +7,8 @@ "CVE-2008-1607" ], "details": "SQL injection vulnerability in haberoku.php in Serbay Arslanhan Bomba Haber 2.0 allows remote attackers to execute arbitrary SQL commands via the haber parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xwmv-w8ff-6vr2/GHSA-xwmv-w8ff-6vr2.json b/advisories/unreviewed/2022/05/GHSA-xwmv-w8ff-6vr2/GHSA-xwmv-w8ff-6vr2.json index df59c1913ed..3d4929fca00 100644 --- a/advisories/unreviewed/2022/05/GHSA-xwmv-w8ff-6vr2/GHSA-xwmv-w8ff-6vr2.json +++ b/advisories/unreviewed/2022/05/GHSA-xwmv-w8ff-6vr2/GHSA-xwmv-w8ff-6vr2.json @@ -7,12 +7,8 @@ "CVE-2008-1736" ], "details": "Comodo Firewall Pro before 3.0 does not properly validate certain parameters to hooked System Service Descriptor Table (SSDT) functions, which allows local users to cause a denial of service (system crash) via (1) a crafted OBJECT_ATTRIBUTES structure in a call to the NtDeleteFile function, which leads to improper validation of a ZwQueryObject result; and unspecified calls to the (2) NtCreateFile and (3) NtSetThreadContext functions, different vectors than CVE-2007-0709.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xx57-275q-jj4j/GHSA-xx57-275q-jj4j.json b/advisories/unreviewed/2022/05/GHSA-xx57-275q-jj4j/GHSA-xx57-275q-jj4j.json index c88291a816f..0da3646eb94 100644 --- a/advisories/unreviewed/2022/05/GHSA-xx57-275q-jj4j/GHSA-xx57-275q-jj4j.json +++ b/advisories/unreviewed/2022/05/GHSA-xx57-275q-jj4j/GHSA-xx57-275q-jj4j.json @@ -7,12 +7,8 @@ "CVE-2008-1744" ], "details": "The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR7, 4.2 before 4.2(3)SR4, and 4.3 before 4.3(2) allows remote attackers to cause a denial of service (service crash) via malformed network traffic, aka Bug ID CSCsk46770.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xx5p-xxfc-ccvw/GHSA-xx5p-xxfc-ccvw.json b/advisories/unreviewed/2022/05/GHSA-xx5p-xxfc-ccvw/GHSA-xx5p-xxfc-ccvw.json index 91416916e72..c96c6cc96e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-xx5p-xxfc-ccvw/GHSA-xx5p-xxfc-ccvw.json +++ b/advisories/unreviewed/2022/05/GHSA-xx5p-xxfc-ccvw/GHSA-xx5p-xxfc-ccvw.json @@ -7,12 +7,8 @@ "CVE-2008-1495" ], "details": "Unrestricted file upload vulnerability in administrer/produits.php in PEEL, possibly 3.x and earlier, allows remote authenticated administrators to upload and execute arbitrary PHP files via a modified content type in an ajout action, as demonstrated by (1) image/gif and (2) application/pdf.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-2w93-2cv6-8w7c/GHSA-2w93-2cv6-8w7c.json b/advisories/unreviewed/2022/08/GHSA-2w93-2cv6-8w7c/GHSA-2w93-2cv6-8w7c.json index 77d6ad065ca..9f8342671a9 100644 --- a/advisories/unreviewed/2022/08/GHSA-2w93-2cv6-8w7c/GHSA-2w93-2cv6-8w7c.json +++ b/advisories/unreviewed/2022/08/GHSA-2w93-2cv6-8w7c/GHSA-2w93-2cv6-8w7c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-3448-h4p5-g6mc/GHSA-3448-h4p5-g6mc.json b/advisories/unreviewed/2022/08/GHSA-3448-h4p5-g6mc/GHSA-3448-h4p5-g6mc.json index c72f9cb9f7e..34a5f2137c8 100644 --- a/advisories/unreviewed/2022/08/GHSA-3448-h4p5-g6mc/GHSA-3448-h4p5-g6mc.json +++ b/advisories/unreviewed/2022/08/GHSA-3448-h4p5-g6mc/GHSA-3448-h4p5-g6mc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-42qc-mrm5-rf8f/GHSA-42qc-mrm5-rf8f.json b/advisories/unreviewed/2022/08/GHSA-42qc-mrm5-rf8f/GHSA-42qc-mrm5-rf8f.json index 311b4ba1ed2..9a00f1e1893 100644 --- a/advisories/unreviewed/2022/08/GHSA-42qc-mrm5-rf8f/GHSA-42qc-mrm5-rf8f.json +++ b/advisories/unreviewed/2022/08/GHSA-42qc-mrm5-rf8f/GHSA-42qc-mrm5-rf8f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-55qq-wp4m-g5qv/GHSA-55qq-wp4m-g5qv.json b/advisories/unreviewed/2022/08/GHSA-55qq-wp4m-g5qv/GHSA-55qq-wp4m-g5qv.json index 7afeda54b41..e2464200d68 100644 --- a/advisories/unreviewed/2022/08/GHSA-55qq-wp4m-g5qv/GHSA-55qq-wp4m-g5qv.json +++ b/advisories/unreviewed/2022/08/GHSA-55qq-wp4m-g5qv/GHSA-55qq-wp4m-g5qv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-6x3j-fqgg-3hqr/GHSA-6x3j-fqgg-3hqr.json b/advisories/unreviewed/2022/08/GHSA-6x3j-fqgg-3hqr/GHSA-6x3j-fqgg-3hqr.json index 6cf8dc9db88..97c0b9d2ba7 100644 --- a/advisories/unreviewed/2022/08/GHSA-6x3j-fqgg-3hqr/GHSA-6x3j-fqgg-3hqr.json +++ b/advisories/unreviewed/2022/08/GHSA-6x3j-fqgg-3hqr/GHSA-6x3j-fqgg-3hqr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-7jqw-x96f-m5vv/GHSA-7jqw-x96f-m5vv.json b/advisories/unreviewed/2022/08/GHSA-7jqw-x96f-m5vv/GHSA-7jqw-x96f-m5vv.json index 958d1a2b934..c27d5401632 100644 --- a/advisories/unreviewed/2022/08/GHSA-7jqw-x96f-m5vv/GHSA-7jqw-x96f-m5vv.json +++ b/advisories/unreviewed/2022/08/GHSA-7jqw-x96f-m5vv/GHSA-7jqw-x96f-m5vv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-94wg-jjgc-733r/GHSA-94wg-jjgc-733r.json b/advisories/unreviewed/2022/08/GHSA-94wg-jjgc-733r/GHSA-94wg-jjgc-733r.json index 5bf18b5120b..a8394ef941c 100644 --- a/advisories/unreviewed/2022/08/GHSA-94wg-jjgc-733r/GHSA-94wg-jjgc-733r.json +++ b/advisories/unreviewed/2022/08/GHSA-94wg-jjgc-733r/GHSA-94wg-jjgc-733r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-cc4v-q6x7-rcj7/GHSA-cc4v-q6x7-rcj7.json b/advisories/unreviewed/2022/08/GHSA-cc4v-q6x7-rcj7/GHSA-cc4v-q6x7-rcj7.json index 7d52183b0f1..d599800074c 100644 --- a/advisories/unreviewed/2022/08/GHSA-cc4v-q6x7-rcj7/GHSA-cc4v-q6x7-rcj7.json +++ b/advisories/unreviewed/2022/08/GHSA-cc4v-q6x7-rcj7/GHSA-cc4v-q6x7-rcj7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-cmqg-5hgq-7vq9/GHSA-cmqg-5hgq-7vq9.json b/advisories/unreviewed/2022/08/GHSA-cmqg-5hgq-7vq9/GHSA-cmqg-5hgq-7vq9.json index 9926b2a716b..21bbf415dae 100644 --- a/advisories/unreviewed/2022/08/GHSA-cmqg-5hgq-7vq9/GHSA-cmqg-5hgq-7vq9.json +++ b/advisories/unreviewed/2022/08/GHSA-cmqg-5hgq-7vq9/GHSA-cmqg-5hgq-7vq9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-fgx3-vmfh-pjgw/GHSA-fgx3-vmfh-pjgw.json b/advisories/unreviewed/2022/08/GHSA-fgx3-vmfh-pjgw/GHSA-fgx3-vmfh-pjgw.json index e303ecffa76..5a50dd0a194 100644 --- a/advisories/unreviewed/2022/08/GHSA-fgx3-vmfh-pjgw/GHSA-fgx3-vmfh-pjgw.json +++ b/advisories/unreviewed/2022/08/GHSA-fgx3-vmfh-pjgw/GHSA-fgx3-vmfh-pjgw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-gpvr-w6q5-m4cj/GHSA-gpvr-w6q5-m4cj.json b/advisories/unreviewed/2022/08/GHSA-gpvr-w6q5-m4cj/GHSA-gpvr-w6q5-m4cj.json index 9c3c374af0a..6e653378476 100644 --- a/advisories/unreviewed/2022/08/GHSA-gpvr-w6q5-m4cj/GHSA-gpvr-w6q5-m4cj.json +++ b/advisories/unreviewed/2022/08/GHSA-gpvr-w6q5-m4cj/GHSA-gpvr-w6q5-m4cj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-j5h2-937f-wv3w/GHSA-j5h2-937f-wv3w.json b/advisories/unreviewed/2022/08/GHSA-j5h2-937f-wv3w/GHSA-j5h2-937f-wv3w.json index a868dd7c194..80863c3100d 100644 --- a/advisories/unreviewed/2022/08/GHSA-j5h2-937f-wv3w/GHSA-j5h2-937f-wv3w.json +++ b/advisories/unreviewed/2022/08/GHSA-j5h2-937f-wv3w/GHSA-j5h2-937f-wv3w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-j7xr-c5x7-xr2p/GHSA-j7xr-c5x7-xr2p.json b/advisories/unreviewed/2022/08/GHSA-j7xr-c5x7-xr2p/GHSA-j7xr-c5x7-xr2p.json index ef919c60755..8124d9908a9 100644 --- a/advisories/unreviewed/2022/08/GHSA-j7xr-c5x7-xr2p/GHSA-j7xr-c5x7-xr2p.json +++ b/advisories/unreviewed/2022/08/GHSA-j7xr-c5x7-xr2p/GHSA-j7xr-c5x7-xr2p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "WEB", diff --git a/advisories/unreviewed/2022/08/GHSA-mv7j-q5r3-px2w/GHSA-mv7j-q5r3-px2w.json b/advisories/unreviewed/2022/08/GHSA-mv7j-q5r3-px2w/GHSA-mv7j-q5r3-px2w.json index 8837a401aa6..ed020d5dfcc 100644 --- a/advisories/unreviewed/2022/08/GHSA-mv7j-q5r3-px2w/GHSA-mv7j-q5r3-px2w.json +++ b/advisories/unreviewed/2022/08/GHSA-mv7j-q5r3-px2w/GHSA-mv7j-q5r3-px2w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-p553-xq2c-fgrg/GHSA-p553-xq2c-fgrg.json b/advisories/unreviewed/2022/08/GHSA-p553-xq2c-fgrg/GHSA-p553-xq2c-fgrg.json index d6b2142786a..901a80f686c 100644 --- a/advisories/unreviewed/2022/08/GHSA-p553-xq2c-fgrg/GHSA-p553-xq2c-fgrg.json +++ b/advisories/unreviewed/2022/08/GHSA-p553-xq2c-fgrg/GHSA-p553-xq2c-fgrg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-r388-2x2x-393f/GHSA-r388-2x2x-393f.json b/advisories/unreviewed/2022/08/GHSA-r388-2x2x-393f/GHSA-r388-2x2x-393f.json index e69cec2ed02..5be041d92a6 100644 --- a/advisories/unreviewed/2022/08/GHSA-r388-2x2x-393f/GHSA-r388-2x2x-393f.json +++ b/advisories/unreviewed/2022/08/GHSA-r388-2x2x-393f/GHSA-r388-2x2x-393f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-r6rx-hjpf-4xgv/GHSA-r6rx-hjpf-4xgv.json b/advisories/unreviewed/2022/08/GHSA-r6rx-hjpf-4xgv/GHSA-r6rx-hjpf-4xgv.json index c3752b5827a..84f791a92c6 100644 --- a/advisories/unreviewed/2022/08/GHSA-r6rx-hjpf-4xgv/GHSA-r6rx-hjpf-4xgv.json +++ b/advisories/unreviewed/2022/08/GHSA-r6rx-hjpf-4xgv/GHSA-r6rx-hjpf-4xgv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-x7rg-h77w-q9q2/GHSA-x7rg-h77w-q9q2.json b/advisories/unreviewed/2022/08/GHSA-x7rg-h77w-q9q2/GHSA-x7rg-h77w-q9q2.json index 604d5057aaa..46d702c5572 100644 --- a/advisories/unreviewed/2022/08/GHSA-x7rg-h77w-q9q2/GHSA-x7rg-h77w-q9q2.json +++ b/advisories/unreviewed/2022/08/GHSA-x7rg-h77w-q9q2/GHSA-x7rg-h77w-q9q2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-36qp-cqx6-q64f/GHSA-36qp-cqx6-q64f.json b/advisories/unreviewed/2022/09/GHSA-36qp-cqx6-q64f/GHSA-36qp-cqx6-q64f.json index a3b72f7154f..bb06521f83f 100644 --- a/advisories/unreviewed/2022/09/GHSA-36qp-cqx6-q64f/GHSA-36qp-cqx6-q64f.json +++ b/advisories/unreviewed/2022/09/GHSA-36qp-cqx6-q64f/GHSA-36qp-cqx6-q64f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-3hf9-x4q8-q4gg/GHSA-3hf9-x4q8-q4gg.json b/advisories/unreviewed/2022/09/GHSA-3hf9-x4q8-q4gg/GHSA-3hf9-x4q8-q4gg.json index edbd70fa8f6..e609bb39cf2 100644 --- a/advisories/unreviewed/2022/09/GHSA-3hf9-x4q8-q4gg/GHSA-3hf9-x4q8-q4gg.json +++ b/advisories/unreviewed/2022/09/GHSA-3hf9-x4q8-q4gg/GHSA-3hf9-x4q8-q4gg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-3j7x-9g9q-82pp/GHSA-3j7x-9g9q-82pp.json b/advisories/unreviewed/2022/09/GHSA-3j7x-9g9q-82pp/GHSA-3j7x-9g9q-82pp.json index 4cf6a2ec35e..76450444868 100644 --- a/advisories/unreviewed/2022/09/GHSA-3j7x-9g9q-82pp/GHSA-3j7x-9g9q-82pp.json +++ b/advisories/unreviewed/2022/09/GHSA-3j7x-9g9q-82pp/GHSA-3j7x-9g9q-82pp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/09/GHSA-4582-ff6x-w32x/GHSA-4582-ff6x-w32x.json b/advisories/unreviewed/2022/09/GHSA-4582-ff6x-w32x/GHSA-4582-ff6x-w32x.json index 74ffe7263c9..0fa53347f04 100644 --- a/advisories/unreviewed/2022/09/GHSA-4582-ff6x-w32x/GHSA-4582-ff6x-w32x.json +++ b/advisories/unreviewed/2022/09/GHSA-4582-ff6x-w32x/GHSA-4582-ff6x-w32x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-62wv-mf7j-h7rg/GHSA-62wv-mf7j-h7rg.json b/advisories/unreviewed/2022/09/GHSA-62wv-mf7j-h7rg/GHSA-62wv-mf7j-h7rg.json index ff6c608e957..361590fb39a 100644 --- a/advisories/unreviewed/2022/09/GHSA-62wv-mf7j-h7rg/GHSA-62wv-mf7j-h7rg.json +++ b/advisories/unreviewed/2022/09/GHSA-62wv-mf7j-h7rg/GHSA-62wv-mf7j-h7rg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-6m9q-ppfx-8654/GHSA-6m9q-ppfx-8654.json b/advisories/unreviewed/2022/09/GHSA-6m9q-ppfx-8654/GHSA-6m9q-ppfx-8654.json index 1e7c3746edd..75dcac97ce1 100644 --- a/advisories/unreviewed/2022/09/GHSA-6m9q-ppfx-8654/GHSA-6m9q-ppfx-8654.json +++ b/advisories/unreviewed/2022/09/GHSA-6m9q-ppfx-8654/GHSA-6m9q-ppfx-8654.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-7hvp-684m-pr7g/GHSA-7hvp-684m-pr7g.json b/advisories/unreviewed/2022/09/GHSA-7hvp-684m-pr7g/GHSA-7hvp-684m-pr7g.json index 3753eae0508..a8f493e2cad 100644 --- a/advisories/unreviewed/2022/09/GHSA-7hvp-684m-pr7g/GHSA-7hvp-684m-pr7g.json +++ b/advisories/unreviewed/2022/09/GHSA-7hvp-684m-pr7g/GHSA-7hvp-684m-pr7g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-964w-cq8x-3mmg/GHSA-964w-cq8x-3mmg.json b/advisories/unreviewed/2022/09/GHSA-964w-cq8x-3mmg/GHSA-964w-cq8x-3mmg.json index a63124eb460..750177399a3 100644 --- a/advisories/unreviewed/2022/09/GHSA-964w-cq8x-3mmg/GHSA-964w-cq8x-3mmg.json +++ b/advisories/unreviewed/2022/09/GHSA-964w-cq8x-3mmg/GHSA-964w-cq8x-3mmg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-9j36-jg73-vfcw/GHSA-9j36-jg73-vfcw.json b/advisories/unreviewed/2022/09/GHSA-9j36-jg73-vfcw/GHSA-9j36-jg73-vfcw.json index 66590610d8b..afef56cf3d8 100644 --- a/advisories/unreviewed/2022/09/GHSA-9j36-jg73-vfcw/GHSA-9j36-jg73-vfcw.json +++ b/advisories/unreviewed/2022/09/GHSA-9j36-jg73-vfcw/GHSA-9j36-jg73-vfcw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/09/GHSA-9p4q-6wwf-qpr7/GHSA-9p4q-6wwf-qpr7.json b/advisories/unreviewed/2022/09/GHSA-9p4q-6wwf-qpr7/GHSA-9p4q-6wwf-qpr7.json index e24ba184907..8d8c1137989 100644 --- a/advisories/unreviewed/2022/09/GHSA-9p4q-6wwf-qpr7/GHSA-9p4q-6wwf-qpr7.json +++ b/advisories/unreviewed/2022/09/GHSA-9p4q-6wwf-qpr7/GHSA-9p4q-6wwf-qpr7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-9p8r-gmq2-69cr/GHSA-9p8r-gmq2-69cr.json b/advisories/unreviewed/2022/09/GHSA-9p8r-gmq2-69cr/GHSA-9p8r-gmq2-69cr.json index c50a93c5263..10e1fd4fafc 100644 --- a/advisories/unreviewed/2022/09/GHSA-9p8r-gmq2-69cr/GHSA-9p8r-gmq2-69cr.json +++ b/advisories/unreviewed/2022/09/GHSA-9p8r-gmq2-69cr/GHSA-9p8r-gmq2-69cr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/09/GHSA-9pmp-p354-9ch4/GHSA-9pmp-p354-9ch4.json b/advisories/unreviewed/2022/09/GHSA-9pmp-p354-9ch4/GHSA-9pmp-p354-9ch4.json index 46018c59daf..27a0391e3ff 100644 --- a/advisories/unreviewed/2022/09/GHSA-9pmp-p354-9ch4/GHSA-9pmp-p354-9ch4.json +++ b/advisories/unreviewed/2022/09/GHSA-9pmp-p354-9ch4/GHSA-9pmp-p354-9ch4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-c5mq-2wv7-w9f4/GHSA-c5mq-2wv7-w9f4.json b/advisories/unreviewed/2022/09/GHSA-c5mq-2wv7-w9f4/GHSA-c5mq-2wv7-w9f4.json index 8c926fdb2d0..91c7ebe8d0a 100644 --- a/advisories/unreviewed/2022/09/GHSA-c5mq-2wv7-w9f4/GHSA-c5mq-2wv7-w9f4.json +++ b/advisories/unreviewed/2022/09/GHSA-c5mq-2wv7-w9f4/GHSA-c5mq-2wv7-w9f4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-c93m-pvx8-6mc2/GHSA-c93m-pvx8-6mc2.json b/advisories/unreviewed/2022/09/GHSA-c93m-pvx8-6mc2/GHSA-c93m-pvx8-6mc2.json index 59c6914e84b..7c7d4e6cc3f 100644 --- a/advisories/unreviewed/2022/09/GHSA-c93m-pvx8-6mc2/GHSA-c93m-pvx8-6mc2.json +++ b/advisories/unreviewed/2022/09/GHSA-c93m-pvx8-6mc2/GHSA-c93m-pvx8-6mc2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-f4rx-6cwc-qgfm/GHSA-f4rx-6cwc-qgfm.json b/advisories/unreviewed/2022/09/GHSA-f4rx-6cwc-qgfm/GHSA-f4rx-6cwc-qgfm.json index fbb0b411962..b51f2a4cd08 100644 --- a/advisories/unreviewed/2022/09/GHSA-f4rx-6cwc-qgfm/GHSA-f4rx-6cwc-qgfm.json +++ b/advisories/unreviewed/2022/09/GHSA-f4rx-6cwc-qgfm/GHSA-f4rx-6cwc-qgfm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-g5h6-8pvr-fcx7/GHSA-g5h6-8pvr-fcx7.json b/advisories/unreviewed/2022/09/GHSA-g5h6-8pvr-fcx7/GHSA-g5h6-8pvr-fcx7.json index 239128a97d2..9f09bbe1e32 100644 --- a/advisories/unreviewed/2022/09/GHSA-g5h6-8pvr-fcx7/GHSA-g5h6-8pvr-fcx7.json +++ b/advisories/unreviewed/2022/09/GHSA-g5h6-8pvr-fcx7/GHSA-g5h6-8pvr-fcx7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/09/GHSA-gchc-j474-g333/GHSA-gchc-j474-g333.json b/advisories/unreviewed/2022/09/GHSA-gchc-j474-g333/GHSA-gchc-j474-g333.json index 8704eb59ac8..d1b266a56bf 100644 --- a/advisories/unreviewed/2022/09/GHSA-gchc-j474-g333/GHSA-gchc-j474-g333.json +++ b/advisories/unreviewed/2022/09/GHSA-gchc-j474-g333/GHSA-gchc-j474-g333.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-hv4v-wchr-58g4/GHSA-hv4v-wchr-58g4.json b/advisories/unreviewed/2022/09/GHSA-hv4v-wchr-58g4/GHSA-hv4v-wchr-58g4.json index 696ba002473..a8675e1b59e 100644 --- a/advisories/unreviewed/2022/09/GHSA-hv4v-wchr-58g4/GHSA-hv4v-wchr-58g4.json +++ b/advisories/unreviewed/2022/09/GHSA-hv4v-wchr-58g4/GHSA-hv4v-wchr-58g4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-j58c-4rjr-572h/GHSA-j58c-4rjr-572h.json b/advisories/unreviewed/2022/09/GHSA-j58c-4rjr-572h/GHSA-j58c-4rjr-572h.json index c43e3eac6f7..1205175bcd1 100644 --- a/advisories/unreviewed/2022/09/GHSA-j58c-4rjr-572h/GHSA-j58c-4rjr-572h.json +++ b/advisories/unreviewed/2022/09/GHSA-j58c-4rjr-572h/GHSA-j58c-4rjr-572h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-jfwq-pfcr-9f47/GHSA-jfwq-pfcr-9f47.json b/advisories/unreviewed/2022/09/GHSA-jfwq-pfcr-9f47/GHSA-jfwq-pfcr-9f47.json index 72798309321..22b95589aab 100644 --- a/advisories/unreviewed/2022/09/GHSA-jfwq-pfcr-9f47/GHSA-jfwq-pfcr-9f47.json +++ b/advisories/unreviewed/2022/09/GHSA-jfwq-pfcr-9f47/GHSA-jfwq-pfcr-9f47.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-jp9x-px2h-j57p/GHSA-jp9x-px2h-j57p.json b/advisories/unreviewed/2022/09/GHSA-jp9x-px2h-j57p/GHSA-jp9x-px2h-j57p.json index 3ad11682b8c..1a3922ee342 100644 --- a/advisories/unreviewed/2022/09/GHSA-jp9x-px2h-j57p/GHSA-jp9x-px2h-j57p.json +++ b/advisories/unreviewed/2022/09/GHSA-jp9x-px2h-j57p/GHSA-jp9x-px2h-j57p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/09/GHSA-jpf6-5xq2-h3r9/GHSA-jpf6-5xq2-h3r9.json b/advisories/unreviewed/2022/09/GHSA-jpf6-5xq2-h3r9/GHSA-jpf6-5xq2-h3r9.json index bfc70cc2d1d..d429ffdc262 100644 --- a/advisories/unreviewed/2022/09/GHSA-jpf6-5xq2-h3r9/GHSA-jpf6-5xq2-h3r9.json +++ b/advisories/unreviewed/2022/09/GHSA-jpf6-5xq2-h3r9/GHSA-jpf6-5xq2-h3r9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-mh2x-ww3w-3c43/GHSA-mh2x-ww3w-3c43.json b/advisories/unreviewed/2022/09/GHSA-mh2x-ww3w-3c43/GHSA-mh2x-ww3w-3c43.json index ef7e29374ae..4e7d741e41f 100644 --- a/advisories/unreviewed/2022/09/GHSA-mh2x-ww3w-3c43/GHSA-mh2x-ww3w-3c43.json +++ b/advisories/unreviewed/2022/09/GHSA-mh2x-ww3w-3c43/GHSA-mh2x-ww3w-3c43.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/09/GHSA-mwhh-9g6q-2rpj/GHSA-mwhh-9g6q-2rpj.json b/advisories/unreviewed/2022/09/GHSA-mwhh-9g6q-2rpj/GHSA-mwhh-9g6q-2rpj.json index bf37dfdbe2c..6f6473ee85a 100644 --- a/advisories/unreviewed/2022/09/GHSA-mwhh-9g6q-2rpj/GHSA-mwhh-9g6q-2rpj.json +++ b/advisories/unreviewed/2022/09/GHSA-mwhh-9g6q-2rpj/GHSA-mwhh-9g6q-2rpj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-q2r8-hpx9-q4cx/GHSA-q2r8-hpx9-q4cx.json b/advisories/unreviewed/2022/09/GHSA-q2r8-hpx9-q4cx/GHSA-q2r8-hpx9-q4cx.json index 99feb8000ee..1277800a3b8 100644 --- a/advisories/unreviewed/2022/09/GHSA-q2r8-hpx9-q4cx/GHSA-q2r8-hpx9-q4cx.json +++ b/advisories/unreviewed/2022/09/GHSA-q2r8-hpx9-q4cx/GHSA-q2r8-hpx9-q4cx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/09/GHSA-q8rh-9p62-crjj/GHSA-q8rh-9p62-crjj.json b/advisories/unreviewed/2022/09/GHSA-q8rh-9p62-crjj/GHSA-q8rh-9p62-crjj.json index 6aa52ab2d6b..58bf7850ef0 100644 --- a/advisories/unreviewed/2022/09/GHSA-q8rh-9p62-crjj/GHSA-q8rh-9p62-crjj.json +++ b/advisories/unreviewed/2022/09/GHSA-q8rh-9p62-crjj/GHSA-q8rh-9p62-crjj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-qgj3-jh2x-36gf/GHSA-qgj3-jh2x-36gf.json b/advisories/unreviewed/2022/09/GHSA-qgj3-jh2x-36gf/GHSA-qgj3-jh2x-36gf.json index af5a8d0fc1f..3ae478cd1fe 100644 --- a/advisories/unreviewed/2022/09/GHSA-qgj3-jh2x-36gf/GHSA-qgj3-jh2x-36gf.json +++ b/advisories/unreviewed/2022/09/GHSA-qgj3-jh2x-36gf/GHSA-qgj3-jh2x-36gf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/09/GHSA-qq28-5ghx-778p/GHSA-qq28-5ghx-778p.json b/advisories/unreviewed/2022/09/GHSA-qq28-5ghx-778p/GHSA-qq28-5ghx-778p.json index 1312d66dc0e..8acc0c0607d 100644 --- a/advisories/unreviewed/2022/09/GHSA-qq28-5ghx-778p/GHSA-qq28-5ghx-778p.json +++ b/advisories/unreviewed/2022/09/GHSA-qq28-5ghx-778p/GHSA-qq28-5ghx-778p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-r7r4-mjh7-3grr/GHSA-r7r4-mjh7-3grr.json b/advisories/unreviewed/2022/09/GHSA-r7r4-mjh7-3grr/GHSA-r7r4-mjh7-3grr.json index 1c12729ee04..fb03faf675a 100644 --- a/advisories/unreviewed/2022/09/GHSA-r7r4-mjh7-3grr/GHSA-r7r4-mjh7-3grr.json +++ b/advisories/unreviewed/2022/09/GHSA-r7r4-mjh7-3grr/GHSA-r7r4-mjh7-3grr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-r9w6-4crr-3h35/GHSA-r9w6-4crr-3h35.json b/advisories/unreviewed/2022/09/GHSA-r9w6-4crr-3h35/GHSA-r9w6-4crr-3h35.json index e86a7621a13..d094e02e585 100644 --- a/advisories/unreviewed/2022/09/GHSA-r9w6-4crr-3h35/GHSA-r9w6-4crr-3h35.json +++ b/advisories/unreviewed/2022/09/GHSA-r9w6-4crr-3h35/GHSA-r9w6-4crr-3h35.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-rc9v-px69-jr7g/GHSA-rc9v-px69-jr7g.json b/advisories/unreviewed/2022/09/GHSA-rc9v-px69-jr7g/GHSA-rc9v-px69-jr7g.json index fdfced96a42..7c3f424ef1d 100644 --- a/advisories/unreviewed/2022/09/GHSA-rc9v-px69-jr7g/GHSA-rc9v-px69-jr7g.json +++ b/advisories/unreviewed/2022/09/GHSA-rc9v-px69-jr7g/GHSA-rc9v-px69-jr7g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-v5rq-cjqq-8jg9/GHSA-v5rq-cjqq-8jg9.json b/advisories/unreviewed/2022/09/GHSA-v5rq-cjqq-8jg9/GHSA-v5rq-cjqq-8jg9.json index f8662084552..e84b457f99c 100644 --- a/advisories/unreviewed/2022/09/GHSA-v5rq-cjqq-8jg9/GHSA-v5rq-cjqq-8jg9.json +++ b/advisories/unreviewed/2022/09/GHSA-v5rq-cjqq-8jg9/GHSA-v5rq-cjqq-8jg9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-v988-rcvq-pqpr/GHSA-v988-rcvq-pqpr.json b/advisories/unreviewed/2022/09/GHSA-v988-rcvq-pqpr/GHSA-v988-rcvq-pqpr.json index 2188c60cca3..300bcc558e1 100644 --- a/advisories/unreviewed/2022/09/GHSA-v988-rcvq-pqpr/GHSA-v988-rcvq-pqpr.json +++ b/advisories/unreviewed/2022/09/GHSA-v988-rcvq-pqpr/GHSA-v988-rcvq-pqpr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-vgjj-r3h2-cfqm/GHSA-vgjj-r3h2-cfqm.json b/advisories/unreviewed/2022/09/GHSA-vgjj-r3h2-cfqm/GHSA-vgjj-r3h2-cfqm.json index 94e70633b56..e3fbaa95e5a 100644 --- a/advisories/unreviewed/2022/09/GHSA-vgjj-r3h2-cfqm/GHSA-vgjj-r3h2-cfqm.json +++ b/advisories/unreviewed/2022/09/GHSA-vgjj-r3h2-cfqm/GHSA-vgjj-r3h2-cfqm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/09/GHSA-wjr7-x2gv-wqfh/GHSA-wjr7-x2gv-wqfh.json b/advisories/unreviewed/2022/09/GHSA-wjr7-x2gv-wqfh/GHSA-wjr7-x2gv-wqfh.json index 976e8e72f4b..724a37103e9 100644 --- a/advisories/unreviewed/2022/09/GHSA-wjr7-x2gv-wqfh/GHSA-wjr7-x2gv-wqfh.json +++ b/advisories/unreviewed/2022/09/GHSA-wjr7-x2gv-wqfh/GHSA-wjr7-x2gv-wqfh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/10/GHSA-45px-m6q7-hv4p/GHSA-45px-m6q7-hv4p.json b/advisories/unreviewed/2022/10/GHSA-45px-m6q7-hv4p/GHSA-45px-m6q7-hv4p.json index 355b72013cb..32e9d50a686 100644 --- a/advisories/unreviewed/2022/10/GHSA-45px-m6q7-hv4p/GHSA-45px-m6q7-hv4p.json +++ b/advisories/unreviewed/2022/10/GHSA-45px-m6q7-hv4p/GHSA-45px-m6q7-hv4p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/10/GHSA-chg2-rqmj-8f6x/GHSA-chg2-rqmj-8f6x.json b/advisories/unreviewed/2022/10/GHSA-chg2-rqmj-8f6x/GHSA-chg2-rqmj-8f6x.json index 538e12fc662..ccaaf10e7ee 100644 --- a/advisories/unreviewed/2022/10/GHSA-chg2-rqmj-8f6x/GHSA-chg2-rqmj-8f6x.json +++ b/advisories/unreviewed/2022/10/GHSA-chg2-rqmj-8f6x/GHSA-chg2-rqmj-8f6x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/10/GHSA-gqvv-2phg-pg6g/GHSA-gqvv-2phg-pg6g.json b/advisories/unreviewed/2022/10/GHSA-gqvv-2phg-pg6g/GHSA-gqvv-2phg-pg6g.json index 5e3500efb92..b72aca99fd3 100644 --- a/advisories/unreviewed/2022/10/GHSA-gqvv-2phg-pg6g/GHSA-gqvv-2phg-pg6g.json +++ b/advisories/unreviewed/2022/10/GHSA-gqvv-2phg-pg6g/GHSA-gqvv-2phg-pg6g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/10/GHSA-jr8p-xq33-3425/GHSA-jr8p-xq33-3425.json b/advisories/unreviewed/2022/10/GHSA-jr8p-xq33-3425/GHSA-jr8p-xq33-3425.json index 204c2f4bb26..003e5de53fd 100644 --- a/advisories/unreviewed/2022/10/GHSA-jr8p-xq33-3425/GHSA-jr8p-xq33-3425.json +++ b/advisories/unreviewed/2022/10/GHSA-jr8p-xq33-3425/GHSA-jr8p-xq33-3425.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/10/GHSA-vqv6-v97g-wvhj/GHSA-vqv6-v97g-wvhj.json b/advisories/unreviewed/2022/10/GHSA-vqv6-v97g-wvhj/GHSA-vqv6-v97g-wvhj.json index ce0e01c9281..bcb1aabd88d 100644 --- a/advisories/unreviewed/2022/10/GHSA-vqv6-v97g-wvhj/GHSA-vqv6-v97g-wvhj.json +++ b/advisories/unreviewed/2022/10/GHSA-vqv6-v97g-wvhj/GHSA-vqv6-v97g-wvhj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/10/GHSA-w8cr-4wjm-8jwj/GHSA-w8cr-4wjm-8jwj.json b/advisories/unreviewed/2022/10/GHSA-w8cr-4wjm-8jwj/GHSA-w8cr-4wjm-8jwj.json index a9ebba98114..205f8e77686 100644 --- a/advisories/unreviewed/2022/10/GHSA-w8cr-4wjm-8jwj/GHSA-w8cr-4wjm-8jwj.json +++ b/advisories/unreviewed/2022/10/GHSA-w8cr-4wjm-8jwj/GHSA-w8cr-4wjm-8jwj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/10/GHSA-wfh4-6hvv-x93x/GHSA-wfh4-6hvv-x93x.json b/advisories/unreviewed/2022/10/GHSA-wfh4-6hvv-x93x/GHSA-wfh4-6hvv-x93x.json index dfb0887dbf1..0acd27f1680 100644 --- a/advisories/unreviewed/2022/10/GHSA-wfh4-6hvv-x93x/GHSA-wfh4-6hvv-x93x.json +++ b/advisories/unreviewed/2022/10/GHSA-wfh4-6hvv-x93x/GHSA-wfh4-6hvv-x93x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/10/GHSA-wjg3-46v4-3f44/GHSA-wjg3-46v4-3f44.json b/advisories/unreviewed/2022/10/GHSA-wjg3-46v4-3f44/GHSA-wjg3-46v4-3f44.json index 86d388063a0..b5924e95f7d 100644 --- a/advisories/unreviewed/2022/10/GHSA-wjg3-46v4-3f44/GHSA-wjg3-46v4-3f44.json +++ b/advisories/unreviewed/2022/10/GHSA-wjg3-46v4-3f44/GHSA-wjg3-46v4-3f44.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-prcg-jvr3-4cwr/GHSA-prcg-jvr3-4cwr.json b/advisories/unreviewed/2022/11/GHSA-prcg-jvr3-4cwr/GHSA-prcg-jvr3-4cwr.json index de9d7cd8569..9acda68b695 100644 --- a/advisories/unreviewed/2022/11/GHSA-prcg-jvr3-4cwr/GHSA-prcg-jvr3-4cwr.json +++ b/advisories/unreviewed/2022/11/GHSA-prcg-jvr3-4cwr/GHSA-prcg-jvr3-4cwr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/11/GHSA-w3h9-qg85-w3f5/GHSA-w3h9-qg85-w3f5.json b/advisories/unreviewed/2022/11/GHSA-w3h9-qg85-w3f5/GHSA-w3h9-qg85-w3f5.json index d209c2f81f4..2a038becd64 100644 --- a/advisories/unreviewed/2022/11/GHSA-w3h9-qg85-w3f5/GHSA-w3h9-qg85-w3f5.json +++ b/advisories/unreviewed/2022/11/GHSA-w3h9-qg85-w3f5/GHSA-w3h9-qg85-w3f5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-mjpp-wxm2-vx37/GHSA-mjpp-wxm2-vx37.json b/advisories/unreviewed/2022/12/GHSA-mjpp-wxm2-vx37/GHSA-mjpp-wxm2-vx37.json index 66778bf3b32..8ec9ebc3596 100644 --- a/advisories/unreviewed/2022/12/GHSA-mjpp-wxm2-vx37/GHSA-mjpp-wxm2-vx37.json +++ b/advisories/unreviewed/2022/12/GHSA-mjpp-wxm2-vx37/GHSA-mjpp-wxm2-vx37.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-2qpf-65jf-g7q2/GHSA-2qpf-65jf-g7q2.json b/advisories/unreviewed/2023/01/GHSA-2qpf-65jf-g7q2/GHSA-2qpf-65jf-g7q2.json index 1f04c5ecc4f..5aeaf9e72b0 100644 --- a/advisories/unreviewed/2023/01/GHSA-2qpf-65jf-g7q2/GHSA-2qpf-65jf-g7q2.json +++ b/advisories/unreviewed/2023/01/GHSA-2qpf-65jf-g7q2/GHSA-2qpf-65jf-g7q2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-2wx5-x3v9-h4fr/GHSA-2wx5-x3v9-h4fr.json b/advisories/unreviewed/2023/01/GHSA-2wx5-x3v9-h4fr/GHSA-2wx5-x3v9-h4fr.json index 963dc1e1a72..a335faf3e7f 100644 --- a/advisories/unreviewed/2023/01/GHSA-2wx5-x3v9-h4fr/GHSA-2wx5-x3v9-h4fr.json +++ b/advisories/unreviewed/2023/01/GHSA-2wx5-x3v9-h4fr/GHSA-2wx5-x3v9-h4fr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-5w35-cmj6-vc9r/GHSA-5w35-cmj6-vc9r.json b/advisories/unreviewed/2023/01/GHSA-5w35-cmj6-vc9r/GHSA-5w35-cmj6-vc9r.json index 6de236602c1..9673504e77a 100644 --- a/advisories/unreviewed/2023/01/GHSA-5w35-cmj6-vc9r/GHSA-5w35-cmj6-vc9r.json +++ b/advisories/unreviewed/2023/01/GHSA-5w35-cmj6-vc9r/GHSA-5w35-cmj6-vc9r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-hv5w-v9vx-jh7r/GHSA-hv5w-v9vx-jh7r.json b/advisories/unreviewed/2023/01/GHSA-hv5w-v9vx-jh7r/GHSA-hv5w-v9vx-jh7r.json index a129d21c7d4..b8944b3cbf9 100644 --- a/advisories/unreviewed/2023/01/GHSA-hv5w-v9vx-jh7r/GHSA-hv5w-v9vx-jh7r.json +++ b/advisories/unreviewed/2023/01/GHSA-hv5w-v9vx-jh7r/GHSA-hv5w-v9vx-jh7r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-hxq3-6v3r-c86x/GHSA-hxq3-6v3r-c86x.json b/advisories/unreviewed/2023/01/GHSA-hxq3-6v3r-c86x/GHSA-hxq3-6v3r-c86x.json index d5fcfe8db13..cc5a88b66c8 100644 --- a/advisories/unreviewed/2023/01/GHSA-hxq3-6v3r-c86x/GHSA-hxq3-6v3r-c86x.json +++ b/advisories/unreviewed/2023/01/GHSA-hxq3-6v3r-c86x/GHSA-hxq3-6v3r-c86x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-rr97-c769-66wm/GHSA-rr97-c769-66wm.json b/advisories/unreviewed/2023/01/GHSA-rr97-c769-66wm/GHSA-rr97-c769-66wm.json index c8154f9105f..bd706ff328f 100644 --- a/advisories/unreviewed/2023/01/GHSA-rr97-c769-66wm/GHSA-rr97-c769-66wm.json +++ b/advisories/unreviewed/2023/01/GHSA-rr97-c769-66wm/GHSA-rr97-c769-66wm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-rv9f-9w9v-4x2w/GHSA-rv9f-9w9v-4x2w.json b/advisories/unreviewed/2023/01/GHSA-rv9f-9w9v-4x2w/GHSA-rv9f-9w9v-4x2w.json index d7351e1b2ec..4be4fa0e9e9 100644 --- a/advisories/unreviewed/2023/01/GHSA-rv9f-9w9v-4x2w/GHSA-rv9f-9w9v-4x2w.json +++ b/advisories/unreviewed/2023/01/GHSA-rv9f-9w9v-4x2w/GHSA-rv9f-9w9v-4x2w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/01/GHSA-x3gg-m9c9-95rp/GHSA-x3gg-m9c9-95rp.json b/advisories/unreviewed/2023/01/GHSA-x3gg-m9c9-95rp/GHSA-x3gg-m9c9-95rp.json index 6224e78e6f3..1d1a2e1493c 100644 --- a/advisories/unreviewed/2023/01/GHSA-x3gg-m9c9-95rp/GHSA-x3gg-m9c9-95rp.json +++ b/advisories/unreviewed/2023/01/GHSA-x3gg-m9c9-95rp/GHSA-x3gg-m9c9-95rp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-77h4-2fq7-7c25/GHSA-77h4-2fq7-7c25.json b/advisories/unreviewed/2023/02/GHSA-77h4-2fq7-7c25/GHSA-77h4-2fq7-7c25.json index b3ac3e04eee..51db7e8ae99 100644 --- a/advisories/unreviewed/2023/02/GHSA-77h4-2fq7-7c25/GHSA-77h4-2fq7-7c25.json +++ b/advisories/unreviewed/2023/02/GHSA-77h4-2fq7-7c25/GHSA-77h4-2fq7-7c25.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-8379-j3pg-g4h6/GHSA-8379-j3pg-g4h6.json b/advisories/unreviewed/2023/02/GHSA-8379-j3pg-g4h6/GHSA-8379-j3pg-g4h6.json index 21f6266cb6c..fac4fe5dc0d 100644 --- a/advisories/unreviewed/2023/02/GHSA-8379-j3pg-g4h6/GHSA-8379-j3pg-g4h6.json +++ b/advisories/unreviewed/2023/02/GHSA-8379-j3pg-g4h6/GHSA-8379-j3pg-g4h6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-c3mv-p44m-x992/GHSA-c3mv-p44m-x992.json b/advisories/unreviewed/2023/02/GHSA-c3mv-p44m-x992/GHSA-c3mv-p44m-x992.json index b11753fa051..4782bf35e77 100644 --- a/advisories/unreviewed/2023/02/GHSA-c3mv-p44m-x992/GHSA-c3mv-p44m-x992.json +++ b/advisories/unreviewed/2023/02/GHSA-c3mv-p44m-x992/GHSA-c3mv-p44m-x992.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-fx7p-rq94-q4g9/GHSA-fx7p-rq94-q4g9.json b/advisories/unreviewed/2023/02/GHSA-fx7p-rq94-q4g9/GHSA-fx7p-rq94-q4g9.json index b3fcecfdf4d..d202f895196 100644 --- a/advisories/unreviewed/2023/02/GHSA-fx7p-rq94-q4g9/GHSA-fx7p-rq94-q4g9.json +++ b/advisories/unreviewed/2023/02/GHSA-fx7p-rq94-q4g9/GHSA-fx7p-rq94-q4g9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-j2c8-r7mv-6cmv/GHSA-j2c8-r7mv-6cmv.json b/advisories/unreviewed/2023/02/GHSA-j2c8-r7mv-6cmv/GHSA-j2c8-r7mv-6cmv.json index 4b4234c8669..79244681351 100644 --- a/advisories/unreviewed/2023/02/GHSA-j2c8-r7mv-6cmv/GHSA-j2c8-r7mv-6cmv.json +++ b/advisories/unreviewed/2023/02/GHSA-j2c8-r7mv-6cmv/GHSA-j2c8-r7mv-6cmv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-jc3f-vxgp-6jw9/GHSA-jc3f-vxgp-6jw9.json b/advisories/unreviewed/2023/02/GHSA-jc3f-vxgp-6jw9/GHSA-jc3f-vxgp-6jw9.json index 543b402b8c7..f0e1fa5d681 100644 --- a/advisories/unreviewed/2023/02/GHSA-jc3f-vxgp-6jw9/GHSA-jc3f-vxgp-6jw9.json +++ b/advisories/unreviewed/2023/02/GHSA-jc3f-vxgp-6jw9/GHSA-jc3f-vxgp-6jw9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -47,9 +45,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/02/GHSA-jgv6-fxr8-55wj/GHSA-jgv6-fxr8-55wj.json b/advisories/unreviewed/2023/02/GHSA-jgv6-fxr8-55wj/GHSA-jgv6-fxr8-55wj.json index dc1f6d0539a..d5b38ab9fce 100644 --- a/advisories/unreviewed/2023/02/GHSA-jgv6-fxr8-55wj/GHSA-jgv6-fxr8-55wj.json +++ b/advisories/unreviewed/2023/02/GHSA-jgv6-fxr8-55wj/GHSA-jgv6-fxr8-55wj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/02/GHSA-p7wq-886q-gph3/GHSA-p7wq-886q-gph3.json b/advisories/unreviewed/2023/02/GHSA-p7wq-886q-gph3/GHSA-p7wq-886q-gph3.json index 0b97ee3eb53..4c5d7211ee8 100644 --- a/advisories/unreviewed/2023/02/GHSA-p7wq-886q-gph3/GHSA-p7wq-886q-gph3.json +++ b/advisories/unreviewed/2023/02/GHSA-p7wq-886q-gph3/GHSA-p7wq-886q-gph3.json @@ -7,12 +7,8 @@ "CVE-2023-0576" ], "details": "Server-Side Request Forgery (SSRF), Improperly Controlled Modification of Dynamically-Determined Object Attributes, Improper Restriction of Excessive Authentication Attempts vulnerability in Yugabyte DB allows Accessing Functionality Not Properly Constrained by ACLs, Communication Channel Manipulation, Authentication Abuse.This issue affects Yugabyte DB: v2.17.0.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/03/GHSA-wmp3-7qc8-4x9f/GHSA-wmp3-7qc8-4x9f.json b/advisories/unreviewed/2023/03/GHSA-wmp3-7qc8-4x9f/GHSA-wmp3-7qc8-4x9f.json index 38667087ae6..89e8ebe5441 100644 --- a/advisories/unreviewed/2023/03/GHSA-wmp3-7qc8-4x9f/GHSA-wmp3-7qc8-4x9f.json +++ b/advisories/unreviewed/2023/03/GHSA-wmp3-7qc8-4x9f/GHSA-wmp3-7qc8-4x9f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/03/GHSA-wx77-rf27-wqwf/GHSA-wx77-rf27-wqwf.json b/advisories/unreviewed/2023/03/GHSA-wx77-rf27-wqwf/GHSA-wx77-rf27-wqwf.json index ea4a8cab65a..123152dde50 100644 --- a/advisories/unreviewed/2023/03/GHSA-wx77-rf27-wqwf/GHSA-wx77-rf27-wqwf.json +++ b/advisories/unreviewed/2023/03/GHSA-wx77-rf27-wqwf/GHSA-wx77-rf27-wqwf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/06/GHSA-vjvq-rcqj-pwvp/GHSA-vjvq-rcqj-pwvp.json b/advisories/unreviewed/2023/06/GHSA-vjvq-rcqj-pwvp/GHSA-vjvq-rcqj-pwvp.json index be9206a2f91..a8249d05761 100644 --- a/advisories/unreviewed/2023/06/GHSA-vjvq-rcqj-pwvp/GHSA-vjvq-rcqj-pwvp.json +++ b/advisories/unreviewed/2023/06/GHSA-vjvq-rcqj-pwvp/GHSA-vjvq-rcqj-pwvp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-2fmp-mw85-gxqw/GHSA-2fmp-mw85-gxqw.json b/advisories/unreviewed/2023/11/GHSA-2fmp-mw85-gxqw/GHSA-2fmp-mw85-gxqw.json index 9952b75b1db..fb95a81bb45 100644 --- a/advisories/unreviewed/2023/11/GHSA-2fmp-mw85-gxqw/GHSA-2fmp-mw85-gxqw.json +++ b/advisories/unreviewed/2023/11/GHSA-2fmp-mw85-gxqw/GHSA-2fmp-mw85-gxqw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-2fwf-5jpg-282p/GHSA-2fwf-5jpg-282p.json b/advisories/unreviewed/2023/11/GHSA-2fwf-5jpg-282p/GHSA-2fwf-5jpg-282p.json index 2ca1595882e..fd29d0a772f 100644 --- a/advisories/unreviewed/2023/11/GHSA-2fwf-5jpg-282p/GHSA-2fwf-5jpg-282p.json +++ b/advisories/unreviewed/2023/11/GHSA-2fwf-5jpg-282p/GHSA-2fwf-5jpg-282p.json @@ -7,12 +7,8 @@ "CVE-2024-0070" ], "details": "Rejected reason: This CVE ID was unused by the CNA.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/11/GHSA-7pcw-5pmh-x8wr/GHSA-7pcw-5pmh-x8wr.json b/advisories/unreviewed/2023/11/GHSA-7pcw-5pmh-x8wr/GHSA-7pcw-5pmh-x8wr.json index 869d3c05001..d0337dff5ee 100644 --- a/advisories/unreviewed/2023/11/GHSA-7pcw-5pmh-x8wr/GHSA-7pcw-5pmh-x8wr.json +++ b/advisories/unreviewed/2023/11/GHSA-7pcw-5pmh-x8wr/GHSA-7pcw-5pmh-x8wr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-g3gq-2r93-8jv6/GHSA-g3gq-2r93-8jv6.json b/advisories/unreviewed/2023/11/GHSA-g3gq-2r93-8jv6/GHSA-g3gq-2r93-8jv6.json index be3c2ec5cbf..6be184286f6 100644 --- a/advisories/unreviewed/2023/11/GHSA-g3gq-2r93-8jv6/GHSA-g3gq-2r93-8jv6.json +++ b/advisories/unreviewed/2023/11/GHSA-g3gq-2r93-8jv6/GHSA-g3gq-2r93-8jv6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-jqv4-rmqv-7747/GHSA-jqv4-rmqv-7747.json b/advisories/unreviewed/2023/11/GHSA-jqv4-rmqv-7747/GHSA-jqv4-rmqv-7747.json index f1c52a77db7..90f73abeca3 100644 --- a/advisories/unreviewed/2023/11/GHSA-jqv4-rmqv-7747/GHSA-jqv4-rmqv-7747.json +++ b/advisories/unreviewed/2023/11/GHSA-jqv4-rmqv-7747/GHSA-jqv4-rmqv-7747.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-rfqw-q592-fp2h/GHSA-rfqw-q592-fp2h.json b/advisories/unreviewed/2023/11/GHSA-rfqw-q592-fp2h/GHSA-rfqw-q592-fp2h.json index f0f969f21a4..3a1db362c8b 100644 --- a/advisories/unreviewed/2023/11/GHSA-rfqw-q592-fp2h/GHSA-rfqw-q592-fp2h.json +++ b/advisories/unreviewed/2023/11/GHSA-rfqw-q592-fp2h/GHSA-rfqw-q592-fp2h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-rx6q-hj2g-x8wp/GHSA-rx6q-hj2g-x8wp.json b/advisories/unreviewed/2023/11/GHSA-rx6q-hj2g-x8wp/GHSA-rx6q-hj2g-x8wp.json index d2862e24f78..308e3625949 100644 --- a/advisories/unreviewed/2023/11/GHSA-rx6q-hj2g-x8wp/GHSA-rx6q-hj2g-x8wp.json +++ b/advisories/unreviewed/2023/11/GHSA-rx6q-hj2g-x8wp/GHSA-rx6q-hj2g-x8wp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-w6g6-83gc-85hx/GHSA-w6g6-83gc-85hx.json b/advisories/unreviewed/2023/11/GHSA-w6g6-83gc-85hx/GHSA-w6g6-83gc-85hx.json index dcfbfc066b3..95613e4672a 100644 --- a/advisories/unreviewed/2023/11/GHSA-w6g6-83gc-85hx/GHSA-w6g6-83gc-85hx.json +++ b/advisories/unreviewed/2023/11/GHSA-w6g6-83gc-85hx/GHSA-w6g6-83gc-85hx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/11/GHSA-x5q7-jv6g-p5gv/GHSA-x5q7-jv6g-p5gv.json b/advisories/unreviewed/2023/11/GHSA-x5q7-jv6g-p5gv/GHSA-x5q7-jv6g-p5gv.json index ce56da8de3e..d694f3526ef 100644 --- a/advisories/unreviewed/2023/11/GHSA-x5q7-jv6g-p5gv/GHSA-x5q7-jv6g-p5gv.json +++ b/advisories/unreviewed/2023/11/GHSA-x5q7-jv6g-p5gv/GHSA-x5q7-jv6g-p5gv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-fg3v-cqcc-gh8g/GHSA-fg3v-cqcc-gh8g.json b/advisories/unreviewed/2024/05/GHSA-fg3v-cqcc-gh8g/GHSA-fg3v-cqcc-gh8g.json index 20ee115cff7..0b01a5fb295 100644 --- a/advisories/unreviewed/2024/05/GHSA-fg3v-cqcc-gh8g/GHSA-fg3v-cqcc-gh8g.json +++ b/advisories/unreviewed/2024/05/GHSA-fg3v-cqcc-gh8g/GHSA-fg3v-cqcc-gh8g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-gc8p-39g7-4mhp/GHSA-gc8p-39g7-4mhp.json b/advisories/unreviewed/2024/05/GHSA-gc8p-39g7-4mhp/GHSA-gc8p-39g7-4mhp.json index 75c0e5019cf..88c1d622c74 100644 --- a/advisories/unreviewed/2024/05/GHSA-gc8p-39g7-4mhp/GHSA-gc8p-39g7-4mhp.json +++ b/advisories/unreviewed/2024/05/GHSA-gc8p-39g7-4mhp/GHSA-gc8p-39g7-4mhp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-pfmv-h3cf-mr72/GHSA-pfmv-h3cf-mr72.json b/advisories/unreviewed/2024/05/GHSA-pfmv-h3cf-mr72/GHSA-pfmv-h3cf-mr72.json index b9067ce1615..75c05bd522a 100644 --- a/advisories/unreviewed/2024/05/GHSA-pfmv-h3cf-mr72/GHSA-pfmv-h3cf-mr72.json +++ b/advisories/unreviewed/2024/05/GHSA-pfmv-h3cf-mr72/GHSA-pfmv-h3cf-mr72.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-q77q-hx82-96xx/GHSA-q77q-hx82-96xx.json b/advisories/unreviewed/2024/05/GHSA-q77q-hx82-96xx/GHSA-q77q-hx82-96xx.json index 2e1e52a52fe..88a9f3823e2 100644 --- a/advisories/unreviewed/2024/05/GHSA-q77q-hx82-96xx/GHSA-q77q-hx82-96xx.json +++ b/advisories/unreviewed/2024/05/GHSA-q77q-hx82-96xx/GHSA-q77q-hx82-96xx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-2p58-792j-4h9c/GHSA-2p58-792j-4h9c.json b/advisories/unreviewed/2024/06/GHSA-2p58-792j-4h9c/GHSA-2p58-792j-4h9c.json index e8391f87150..895fee4dd2a 100644 --- a/advisories/unreviewed/2024/06/GHSA-2p58-792j-4h9c/GHSA-2p58-792j-4h9c.json +++ b/advisories/unreviewed/2024/06/GHSA-2p58-792j-4h9c/GHSA-2p58-792j-4h9c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-469r-4m5m-6p66/GHSA-469r-4m5m-6p66.json b/advisories/unreviewed/2024/06/GHSA-469r-4m5m-6p66/GHSA-469r-4m5m-6p66.json index 109401a88aa..d13372a7c7e 100644 --- a/advisories/unreviewed/2024/06/GHSA-469r-4m5m-6p66/GHSA-469r-4m5m-6p66.json +++ b/advisories/unreviewed/2024/06/GHSA-469r-4m5m-6p66/GHSA-469r-4m5m-6p66.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-4h2j-p4rj-jr68/GHSA-4h2j-p4rj-jr68.json b/advisories/unreviewed/2024/06/GHSA-4h2j-p4rj-jr68/GHSA-4h2j-p4rj-jr68.json index 90e7c166703..411ec648773 100644 --- a/advisories/unreviewed/2024/06/GHSA-4h2j-p4rj-jr68/GHSA-4h2j-p4rj-jr68.json +++ b/advisories/unreviewed/2024/06/GHSA-4h2j-p4rj-jr68/GHSA-4h2j-p4rj-jr68.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-59x9-wc3w-x8gc/GHSA-59x9-wc3w-x8gc.json b/advisories/unreviewed/2024/06/GHSA-59x9-wc3w-x8gc/GHSA-59x9-wc3w-x8gc.json index bd1fd8d68cc..2066808088a 100644 --- a/advisories/unreviewed/2024/06/GHSA-59x9-wc3w-x8gc/GHSA-59x9-wc3w-x8gc.json +++ b/advisories/unreviewed/2024/06/GHSA-59x9-wc3w-x8gc/GHSA-59x9-wc3w-x8gc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-5v63-xh3j-3cfr/GHSA-5v63-xh3j-3cfr.json b/advisories/unreviewed/2024/06/GHSA-5v63-xh3j-3cfr/GHSA-5v63-xh3j-3cfr.json index 8932a9cc60d..e0fb7500319 100644 --- a/advisories/unreviewed/2024/06/GHSA-5v63-xh3j-3cfr/GHSA-5v63-xh3j-3cfr.json +++ b/advisories/unreviewed/2024/06/GHSA-5v63-xh3j-3cfr/GHSA-5v63-xh3j-3cfr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-62h4-7wfv-fw7q/GHSA-62h4-7wfv-fw7q.json b/advisories/unreviewed/2024/06/GHSA-62h4-7wfv-fw7q/GHSA-62h4-7wfv-fw7q.json index 348616906d4..baa2ff1df44 100644 --- a/advisories/unreviewed/2024/06/GHSA-62h4-7wfv-fw7q/GHSA-62h4-7wfv-fw7q.json +++ b/advisories/unreviewed/2024/06/GHSA-62h4-7wfv-fw7q/GHSA-62h4-7wfv-fw7q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-7j7q-gwmw-x7mr/GHSA-7j7q-gwmw-x7mr.json b/advisories/unreviewed/2024/06/GHSA-7j7q-gwmw-x7mr/GHSA-7j7q-gwmw-x7mr.json index cebd3580c9e..866cd310e4d 100644 --- a/advisories/unreviewed/2024/06/GHSA-7j7q-gwmw-x7mr/GHSA-7j7q-gwmw-x7mr.json +++ b/advisories/unreviewed/2024/06/GHSA-7j7q-gwmw-x7mr/GHSA-7j7q-gwmw-x7mr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-7v7m-797m-7mcc/GHSA-7v7m-797m-7mcc.json b/advisories/unreviewed/2024/06/GHSA-7v7m-797m-7mcc/GHSA-7v7m-797m-7mcc.json index d680e71083a..60bb585473c 100644 --- a/advisories/unreviewed/2024/06/GHSA-7v7m-797m-7mcc/GHSA-7v7m-797m-7mcc.json +++ b/advisories/unreviewed/2024/06/GHSA-7v7m-797m-7mcc/GHSA-7v7m-797m-7mcc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-8p3h-pwhx-f98f/GHSA-8p3h-pwhx-f98f.json b/advisories/unreviewed/2024/06/GHSA-8p3h-pwhx-f98f/GHSA-8p3h-pwhx-f98f.json index 2a79ecab2c7..11bd4937d46 100644 --- a/advisories/unreviewed/2024/06/GHSA-8p3h-pwhx-f98f/GHSA-8p3h-pwhx-f98f.json +++ b/advisories/unreviewed/2024/06/GHSA-8p3h-pwhx-f98f/GHSA-8p3h-pwhx-f98f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-9242-g69w-gf26/GHSA-9242-g69w-gf26.json b/advisories/unreviewed/2024/06/GHSA-9242-g69w-gf26/GHSA-9242-g69w-gf26.json index b40a56d53f5..46268080dd1 100644 --- a/advisories/unreviewed/2024/06/GHSA-9242-g69w-gf26/GHSA-9242-g69w-gf26.json +++ b/advisories/unreviewed/2024/06/GHSA-9242-g69w-gf26/GHSA-9242-g69w-gf26.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-fg4v-424h-r9wv/GHSA-fg4v-424h-r9wv.json b/advisories/unreviewed/2024/06/GHSA-fg4v-424h-r9wv/GHSA-fg4v-424h-r9wv.json index 6a370f8089e..9b825f685bb 100644 --- a/advisories/unreviewed/2024/06/GHSA-fg4v-424h-r9wv/GHSA-fg4v-424h-r9wv.json +++ b/advisories/unreviewed/2024/06/GHSA-fg4v-424h-r9wv/GHSA-fg4v-424h-r9wv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-fp4m-47r9-pq7c/GHSA-fp4m-47r9-pq7c.json b/advisories/unreviewed/2024/06/GHSA-fp4m-47r9-pq7c/GHSA-fp4m-47r9-pq7c.json index 318c6e47a45..cb7d2a8aa62 100644 --- a/advisories/unreviewed/2024/06/GHSA-fp4m-47r9-pq7c/GHSA-fp4m-47r9-pq7c.json +++ b/advisories/unreviewed/2024/06/GHSA-fp4m-47r9-pq7c/GHSA-fp4m-47r9-pq7c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-gf9h-jjwv-57q2/GHSA-gf9h-jjwv-57q2.json b/advisories/unreviewed/2024/06/GHSA-gf9h-jjwv-57q2/GHSA-gf9h-jjwv-57q2.json index a87abca57d4..d4657d6bf81 100644 --- a/advisories/unreviewed/2024/06/GHSA-gf9h-jjwv-57q2/GHSA-gf9h-jjwv-57q2.json +++ b/advisories/unreviewed/2024/06/GHSA-gf9h-jjwv-57q2/GHSA-gf9h-jjwv-57q2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-gj2v-jx3p-28mw/GHSA-gj2v-jx3p-28mw.json b/advisories/unreviewed/2024/06/GHSA-gj2v-jx3p-28mw/GHSA-gj2v-jx3p-28mw.json index 8f3237a3b37..8706cb81a16 100644 --- a/advisories/unreviewed/2024/06/GHSA-gj2v-jx3p-28mw/GHSA-gj2v-jx3p-28mw.json +++ b/advisories/unreviewed/2024/06/GHSA-gj2v-jx3p-28mw/GHSA-gj2v-jx3p-28mw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-hcrh-6hvx-x9f2/GHSA-hcrh-6hvx-x9f2.json b/advisories/unreviewed/2024/06/GHSA-hcrh-6hvx-x9f2/GHSA-hcrh-6hvx-x9f2.json index d214cfbaa10..84c2a91fd22 100644 --- a/advisories/unreviewed/2024/06/GHSA-hcrh-6hvx-x9f2/GHSA-hcrh-6hvx-x9f2.json +++ b/advisories/unreviewed/2024/06/GHSA-hcrh-6hvx-x9f2/GHSA-hcrh-6hvx-x9f2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-hgg3-gv88-82vv/GHSA-hgg3-gv88-82vv.json b/advisories/unreviewed/2024/06/GHSA-hgg3-gv88-82vv/GHSA-hgg3-gv88-82vv.json index 2c83d8c08eb..f57c5392109 100644 --- a/advisories/unreviewed/2024/06/GHSA-hgg3-gv88-82vv/GHSA-hgg3-gv88-82vv.json +++ b/advisories/unreviewed/2024/06/GHSA-hgg3-gv88-82vv/GHSA-hgg3-gv88-82vv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-pc9h-2fg4-m4v8/GHSA-pc9h-2fg4-m4v8.json b/advisories/unreviewed/2024/06/GHSA-pc9h-2fg4-m4v8/GHSA-pc9h-2fg4-m4v8.json index 9eb00c4fbdb..72184921784 100644 --- a/advisories/unreviewed/2024/06/GHSA-pc9h-2fg4-m4v8/GHSA-pc9h-2fg4-m4v8.json +++ b/advisories/unreviewed/2024/06/GHSA-pc9h-2fg4-m4v8/GHSA-pc9h-2fg4-m4v8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-q76q-cwc5-25wv/GHSA-q76q-cwc5-25wv.json b/advisories/unreviewed/2024/06/GHSA-q76q-cwc5-25wv/GHSA-q76q-cwc5-25wv.json index 6e4affaee87..ddafb5fa764 100644 --- a/advisories/unreviewed/2024/06/GHSA-q76q-cwc5-25wv/GHSA-q76q-cwc5-25wv.json +++ b/advisories/unreviewed/2024/06/GHSA-q76q-cwc5-25wv/GHSA-q76q-cwc5-25wv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-qfh9-xg32-rp5p/GHSA-qfh9-xg32-rp5p.json b/advisories/unreviewed/2024/06/GHSA-qfh9-xg32-rp5p/GHSA-qfh9-xg32-rp5p.json index 54097a8ba82..abb866f7e66 100644 --- a/advisories/unreviewed/2024/06/GHSA-qfh9-xg32-rp5p/GHSA-qfh9-xg32-rp5p.json +++ b/advisories/unreviewed/2024/06/GHSA-qfh9-xg32-rp5p/GHSA-qfh9-xg32-rp5p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-qp8m-rc8x-chmj/GHSA-qp8m-rc8x-chmj.json b/advisories/unreviewed/2024/06/GHSA-qp8m-rc8x-chmj/GHSA-qp8m-rc8x-chmj.json index 8387b5dbf9c..8e54457ee7e 100644 --- a/advisories/unreviewed/2024/06/GHSA-qp8m-rc8x-chmj/GHSA-qp8m-rc8x-chmj.json +++ b/advisories/unreviewed/2024/06/GHSA-qp8m-rc8x-chmj/GHSA-qp8m-rc8x-chmj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-r472-qgrg-h4xr/GHSA-r472-qgrg-h4xr.json b/advisories/unreviewed/2024/06/GHSA-r472-qgrg-h4xr/GHSA-r472-qgrg-h4xr.json index 145c81516a1..09cae47938d 100644 --- a/advisories/unreviewed/2024/06/GHSA-r472-qgrg-h4xr/GHSA-r472-qgrg-h4xr.json +++ b/advisories/unreviewed/2024/06/GHSA-r472-qgrg-h4xr/GHSA-r472-qgrg-h4xr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-v327-cwq8-jgw9/GHSA-v327-cwq8-jgw9.json b/advisories/unreviewed/2024/06/GHSA-v327-cwq8-jgw9/GHSA-v327-cwq8-jgw9.json index 641de208a1b..ea8241f2744 100644 --- a/advisories/unreviewed/2024/06/GHSA-v327-cwq8-jgw9/GHSA-v327-cwq8-jgw9.json +++ b/advisories/unreviewed/2024/06/GHSA-v327-cwq8-jgw9/GHSA-v327-cwq8-jgw9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-v37p-fmrv-x297/GHSA-v37p-fmrv-x297.json b/advisories/unreviewed/2024/06/GHSA-v37p-fmrv-x297/GHSA-v37p-fmrv-x297.json index 1c5e3f6cf25..259155dedd5 100644 --- a/advisories/unreviewed/2024/06/GHSA-v37p-fmrv-x297/GHSA-v37p-fmrv-x297.json +++ b/advisories/unreviewed/2024/06/GHSA-v37p-fmrv-x297/GHSA-v37p-fmrv-x297.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-v77q-2fpq-m43m/GHSA-v77q-2fpq-m43m.json b/advisories/unreviewed/2024/06/GHSA-v77q-2fpq-m43m/GHSA-v77q-2fpq-m43m.json index 399a71c1a36..46910b7afa6 100644 --- a/advisories/unreviewed/2024/06/GHSA-v77q-2fpq-m43m/GHSA-v77q-2fpq-m43m.json +++ b/advisories/unreviewed/2024/06/GHSA-v77q-2fpq-m43m/GHSA-v77q-2fpq-m43m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-vfjq-8wxr-2pp6/GHSA-vfjq-8wxr-2pp6.json b/advisories/unreviewed/2024/06/GHSA-vfjq-8wxr-2pp6/GHSA-vfjq-8wxr-2pp6.json index a574672d683..c1a28519ae9 100644 --- a/advisories/unreviewed/2024/06/GHSA-vfjq-8wxr-2pp6/GHSA-vfjq-8wxr-2pp6.json +++ b/advisories/unreviewed/2024/06/GHSA-vfjq-8wxr-2pp6/GHSA-vfjq-8wxr-2pp6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-wjcq-p2hh-4gr7/GHSA-wjcq-p2hh-4gr7.json b/advisories/unreviewed/2024/06/GHSA-wjcq-p2hh-4gr7/GHSA-wjcq-p2hh-4gr7.json index a48afda71bc..910af0e94c9 100644 --- a/advisories/unreviewed/2024/06/GHSA-wjcq-p2hh-4gr7/GHSA-wjcq-p2hh-4gr7.json +++ b/advisories/unreviewed/2024/06/GHSA-wjcq-p2hh-4gr7/GHSA-wjcq-p2hh-4gr7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-xg5f-vpcf-7chx/GHSA-xg5f-vpcf-7chx.json b/advisories/unreviewed/2024/06/GHSA-xg5f-vpcf-7chx/GHSA-xg5f-vpcf-7chx.json index 75cf307ebf9..4aaa22de3be 100644 --- a/advisories/unreviewed/2024/06/GHSA-xg5f-vpcf-7chx/GHSA-xg5f-vpcf-7chx.json +++ b/advisories/unreviewed/2024/06/GHSA-xg5f-vpcf-7chx/GHSA-xg5f-vpcf-7chx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-34qf-4246-phgf/GHSA-34qf-4246-phgf.json b/advisories/unreviewed/2024/07/GHSA-34qf-4246-phgf/GHSA-34qf-4246-phgf.json index d4cb4ef36fd..d7125726add 100644 --- a/advisories/unreviewed/2024/07/GHSA-34qf-4246-phgf/GHSA-34qf-4246-phgf.json +++ b/advisories/unreviewed/2024/07/GHSA-34qf-4246-phgf/GHSA-34qf-4246-phgf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-3h3r-cr3q-43r4/GHSA-3h3r-cr3q-43r4.json b/advisories/unreviewed/2024/07/GHSA-3h3r-cr3q-43r4/GHSA-3h3r-cr3q-43r4.json index e513b153493..5f02dff4c76 100644 --- a/advisories/unreviewed/2024/07/GHSA-3h3r-cr3q-43r4/GHSA-3h3r-cr3q-43r4.json +++ b/advisories/unreviewed/2024/07/GHSA-3h3r-cr3q-43r4/GHSA-3h3r-cr3q-43r4.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-5cpx-cp4v-x9v8/GHSA-5cpx-cp4v-x9v8.json b/advisories/unreviewed/2024/07/GHSA-5cpx-cp4v-x9v8/GHSA-5cpx-cp4v-x9v8.json index b78fcbd732c..6074f13c52f 100644 --- a/advisories/unreviewed/2024/07/GHSA-5cpx-cp4v-x9v8/GHSA-5cpx-cp4v-x9v8.json +++ b/advisories/unreviewed/2024/07/GHSA-5cpx-cp4v-x9v8/GHSA-5cpx-cp4v-x9v8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-68r2-9gg9-pvmv/GHSA-68r2-9gg9-pvmv.json b/advisories/unreviewed/2024/07/GHSA-68r2-9gg9-pvmv/GHSA-68r2-9gg9-pvmv.json index 9e395919ca9..3551b22a10f 100644 --- a/advisories/unreviewed/2024/07/GHSA-68r2-9gg9-pvmv/GHSA-68r2-9gg9-pvmv.json +++ b/advisories/unreviewed/2024/07/GHSA-68r2-9gg9-pvmv/GHSA-68r2-9gg9-pvmv.json @@ -7,12 +7,8 @@ "CVE-2024-6513" ], "details": "Rejected reason: CVE assigned by mistake as a duplicate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-6gjw-r684-5cqg/GHSA-6gjw-r684-5cqg.json b/advisories/unreviewed/2024/07/GHSA-6gjw-r684-5cqg/GHSA-6gjw-r684-5cqg.json index dd7cd8a92c2..902d816b285 100644 --- a/advisories/unreviewed/2024/07/GHSA-6gjw-r684-5cqg/GHSA-6gjw-r684-5cqg.json +++ b/advisories/unreviewed/2024/07/GHSA-6gjw-r684-5cqg/GHSA-6gjw-r684-5cqg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-7637-3fm3-m2q3/GHSA-7637-3fm3-m2q3.json b/advisories/unreviewed/2024/07/GHSA-7637-3fm3-m2q3/GHSA-7637-3fm3-m2q3.json index dcc54eeeab2..22d284e8c7e 100644 --- a/advisories/unreviewed/2024/07/GHSA-7637-3fm3-m2q3/GHSA-7637-3fm3-m2q3.json +++ b/advisories/unreviewed/2024/07/GHSA-7637-3fm3-m2q3/GHSA-7637-3fm3-m2q3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-9569-j547-qg2x/GHSA-9569-j547-qg2x.json b/advisories/unreviewed/2024/07/GHSA-9569-j547-qg2x/GHSA-9569-j547-qg2x.json index 6889dab9e40..dfed3548f0b 100644 --- a/advisories/unreviewed/2024/07/GHSA-9569-j547-qg2x/GHSA-9569-j547-qg2x.json +++ b/advisories/unreviewed/2024/07/GHSA-9569-j547-qg2x/GHSA-9569-j547-qg2x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-h538-6ch9-fvph/GHSA-h538-6ch9-fvph.json b/advisories/unreviewed/2024/07/GHSA-h538-6ch9-fvph/GHSA-h538-6ch9-fvph.json index 869abf65dba..08848e46159 100644 --- a/advisories/unreviewed/2024/07/GHSA-h538-6ch9-fvph/GHSA-h538-6ch9-fvph.json +++ b/advisories/unreviewed/2024/07/GHSA-h538-6ch9-fvph/GHSA-h538-6ch9-fvph.json @@ -7,12 +7,8 @@ "CVE-2024-6488" ], "details": "Rejected reason: REJECTED", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-h5mh-qv58-x2qv/GHSA-h5mh-qv58-x2qv.json b/advisories/unreviewed/2024/07/GHSA-h5mh-qv58-x2qv/GHSA-h5mh-qv58-x2qv.json index 871b5e51365..ded91b900fd 100644 --- a/advisories/unreviewed/2024/07/GHSA-h5mh-qv58-x2qv/GHSA-h5mh-qv58-x2qv.json +++ b/advisories/unreviewed/2024/07/GHSA-h5mh-qv58-x2qv/GHSA-h5mh-qv58-x2qv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-m69w-74qh-cm69/GHSA-m69w-74qh-cm69.json b/advisories/unreviewed/2024/07/GHSA-m69w-74qh-cm69/GHSA-m69w-74qh-cm69.json index dd94d2909c2..13fddd58367 100644 --- a/advisories/unreviewed/2024/07/GHSA-m69w-74qh-cm69/GHSA-m69w-74qh-cm69.json +++ b/advisories/unreviewed/2024/07/GHSA-m69w-74qh-cm69/GHSA-m69w-74qh-cm69.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-m7g5-qwgm-89mc/GHSA-m7g5-qwgm-89mc.json b/advisories/unreviewed/2024/07/GHSA-m7g5-qwgm-89mc/GHSA-m7g5-qwgm-89mc.json index 530634a2d04..0beb232f790 100644 --- a/advisories/unreviewed/2024/07/GHSA-m7g5-qwgm-89mc/GHSA-m7g5-qwgm-89mc.json +++ b/advisories/unreviewed/2024/07/GHSA-m7g5-qwgm-89mc/GHSA-m7g5-qwgm-89mc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY",