netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-08-13 18:32:24 +00:00
parent d084c75b50
commit a0a4fa8919
168 changed files with 4928 additions and 134 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/03/GHSA-78hx-gp6g-7mj6/GHSA-78hx-gp6g-7mj6.json
+10 -6
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-78hx-gp6g-7mj6",
"modified": "2024-08-07T18:30:39Z",
"modified": "2024-08-13T18:31:14Z",
"published": "2024-03-20T18:10:36Z",
"aliases": [
"CVE-2024-1394"
@@ -136,7 +136,7 @@
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:4146"
"url": "https://access.redhat.com/errata/RHSA-2024:1462"
},
{
"type": "WEB",
@@ -182,6 +182,10 @@
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:4960"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:5258"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2024-1394"
@@ -210,10 +214,6 @@
"type": "WEB",
"url": "https://vuln.go.dev/ID/GO-2024-2660.json"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:1462"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:1468"
@@ -301,6 +301,10 @@
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:3352"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:4146"
}
],
"database_specific": {
advisories/github-reviewed/2024/05/GHSA-6wvf-f2vw-3425/GHSA-6wvf-f2vw-3425.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6wvf-f2vw-3425",
"modified": "2024-08-07T18:30:38Z",
"modified": "2024-08-13T18:31:13Z",
"published": "2024-05-14T18:30:52Z",
"aliases": [
"CVE-2024-3727"
@@ -142,6 +142,10 @@
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2024-3727"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:5258"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:4960"
advisories/unreviewed/2024/03/GHSA-cg45-vc5v-xqq7/GHSA-cg45-vc5v-xqq7.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cg45-vc5v-xqq7",
"modified": "2024-03-18T06:30:51Z",
"modified": "2024-08-13T18:31:13Z",
"published": "2024-03-18T06:30:51Z",
"aliases": [
"CVE-2024-29151"
],
"details": "Rocket.Chat.Audit through 5ad78e8 depends on filecachetools, which does not exist in PyPI.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-311"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-18T06:15:05Z"
advisories/unreviewed/2024/03/GHSA-g692-j8f5-g9xf/GHSA-g692-j8f5-g9xf.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g692-j8f5-g9xf",
"modified": "2024-03-29T15:30:29Z",
"modified": "2024-08-13T18:31:13Z",
"published": "2024-03-29T15:30:29Z",
"aliases": [
"CVE-2024-30622"
],
"details": "Tenda FH1205 v2.0.0.7(775) has a stack overflow vulnerability in the mitInterface parameter from fromAddressNat function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-29T13:15:15Z"
advisories/unreviewed/2024/03/GHSA-g8xv-jmgw-wfcj/GHSA-g8xv-jmgw-wfcj.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g8xv-jmgw-wfcj",
"modified": "2024-03-28T15:30:33Z",
"modified": "2024-08-13T18:31:13Z",
"published": "2024-03-28T15:30:33Z",
"aliases": [
"CVE-2024-30589"
],
"details": "Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability in the entrys parameter of the fromAddressNat function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T14:15:15Z"
advisories/unreviewed/2024/04/GHSA-cpff-vh9v-hmch/GHSA-cpff-vh9v-hmch.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cpff-vh9v-hmch",
"modified": "2024-04-08T15:30:32Z",
"modified": "2024-08-13T18:31:13Z",
"published": "2024-04-08T15:30:32Z",
"aliases": [
"CVE-2024-31807"
],
"details": "TOTOLINK EX200 V4.0.3c.7646_B20201211 was discovered to contain a remote code execution (RCE) vulnerability via the hostTime parameter in the NTPSyncWithHost function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-08T13:15:08Z"
advisories/unreviewed/2024/05/GHSA-85xr-ghj6-6m46/GHSA-85xr-ghj6-6m46.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-85xr-ghj6-6m46",
"modified": "2024-06-21T21:33:58Z",
"modified": "2024-08-13T18:31:13Z",
"published": "2024-05-16T18:30:32Z",
"aliases": [
"CVE-2024-4603"
],
"details": "Issue summary: Checking excessively long DSA keys or parameters may be very\nslow.\n\nImpact summary: Applications that use the functions EVP_PKEY_param_check()\nor EVP_PKEY_public_check() to check a DSA public key or DSA parameters may\nexperience long delays. Where the key or parameters that are being checked\nhave been obtained from an untrusted source this may lead to a Denial of\nService.\n\nThe functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform\nvarious checks on DSA parameters. Some of those computations take a long time\nif the modulus (`p` parameter) is too large.\n\nTrying to use a very large modulus is slow and OpenSSL will not allow using\npublic keys with a modulus which is over 10,000 bits in length for signature\nverification. However the key and parameter check functions do not limit\nthe modulus size when performing the checks.\n\nAn application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()\nand supplies a key or parameters obtained from an untrusted source could be\nvulnerable to a Denial of Service attack.\n\nThese functions are not called by OpenSSL itself on untrusted DSA keys so\nonly applications that directly call these functions may be vulnerable.\n\nAlso vulnerable are the OpenSSL pkey and pkeyparam command line applications\nwhen using the `-check` option.\n\nThe OpenSSL SSL/TLS implementation is not affected by this issue.\n\nThe OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
}
],
"affected": [
@@ -49,9 +52,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-834"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-16T16:15:10Z"
advisories/unreviewed/2024/06/GHSA-c8xv-94wg-v5h7/GHSA-c8xv-94wg-v5h7.json
+2 -1
View File
@@ -28,7 +28,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
"CWE-120",
"CWE-121"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2024/07/GHSA-4645-h4xp-pj82/GHSA-4645-h4xp-pj82.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4645-h4xp-pj82",
"modified": "2024-07-30T03:30:52Z",
"modified": "2024-08-13T18:31:13Z",
"published": "2024-07-30T00:34:26Z",
"aliases": [
"CVE-2024-40776"
@@ -46,6 +46,10 @@
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214124"
},
{
"type": "WEB",
"url": "https://www.secpod.com/blog/apple-fixes-multiple-security-vulnerabilities-in-july-2024-updates"
},
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2024/Jul/15"
advisories/unreviewed/2024/07/GHSA-5697-p67m-73p6/GHSA-5697-p67m-73p6.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5697-p67m-73p6",
"modified": "2024-07-17T18:31:00Z",
"modified": "2024-08-13T18:31:13Z",
"published": "2024-07-17T18:31:00Z",
"aliases": [
"CVE-2024-20419"
@@ -24,6 +24,10 @@
{
"type": "WEB",
"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-auth-sLw3uhUy"
},
{
"type": "WEB",
"url": "https://www.secpod.com/blog/critical-flaw-in-ciscos-secure-email-gateways-allows-attackers-to-control-the-device-completely"
}
],
"database_specific": {
advisories/unreviewed/2024/07/GHSA-7j6x-9hgr-mv7c/GHSA-7j6x-9hgr-mv7c.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7j6x-9hgr-mv7c",
"modified": "2024-07-30T03:30:52Z",
"modified": "2024-08-13T18:31:13Z",
"published": "2024-07-30T00:34:26Z",
"aliases": [
"CVE-2024-40779"
@@ -46,6 +46,10 @@
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214124"
},
{
"type": "WEB",
"url": "https://www.secpod.com/blog/apple-fixes-multiple-security-vulnerabilities-in-july-2024-updates"
},
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2024/Jul/15"
advisories/unreviewed/2024/07/GHSA-j573-cwg3-wh35/GHSA-j573-cwg3-wh35.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-j573-cwg3-wh35",
"modified": "2024-07-30T03:30:52Z",
"modified": "2024-08-13T18:31:13Z",
"published": "2024-07-30T00:34:26Z",
"aliases": [
"CVE-2024-40780"
@@ -46,6 +46,10 @@
"type": "WEB",
"url": "https://support.apple.com/en-us/HT214124"
},
{
"type": "WEB",
"url": "https://www.secpod.com/blog/apple-fixes-multiple-security-vulnerabilities-in-july-2024-updates"
},
{
"type": "WEB",
"url": "http://seclists.org/fulldisclosure/2024/Jul/15"
advisories/unreviewed/2024/08/GHSA-2crp-qj3p-4444/GHSA-2crp-qj3p-4444.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2crp-qj3p-4444",
"modified": "2024-08-13T18:31:15Z",
"published": "2024-08-13T18:31:15Z",
"aliases": [
"CVE-2024-37968"
],
"details": "Windows DNS Spoofing Vulnerability",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-37968"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-37968"
}
],
"database_specific": {
"cwe_ids": [
"CWE-345"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-13T18:15:09Z"
}
}
advisories/unreviewed/2024/08/GHSA-2rhx-838f-x5jw/GHSA-2rhx-838f-x5jw.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2rhx-838f-x5jw",
"modified": "2024-08-13T18:31:15Z",
"published": "2024-08-13T18:31:15Z",
"aliases": [
"CVE-2023-31310"
],
"details": "Improper input validation in Power Management Firmware (PMFW) may allow an attacker with privileges to send a malformed input for the \"set temperature input selection\" command, potentially resulting in a loss of integrity and/or availability.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-31310"
},
{
"type": "WEB",
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6005.html"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-13T17:15:20Z"
}
}
advisories/unreviewed/2024/08/GHSA-2rmf-3rpp-rfgh/GHSA-2rmf-3rpp-rfgh.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2rmf-3rpp-rfgh",
"modified": "2024-08-13T18:31:16Z",
"published": "2024-08-13T18:31:16Z",
"aliases": [
"CVE-2024-38121"
],
"details": "Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38121"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38121"
}
],
"database_specific": {
"cwe_ids": [
"CWE-122"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-13T18:15:13Z"
}
}
advisories/unreviewed/2024/08/GHSA-2rw9-g27f-ppp3/GHSA-2rw9-g27f-ppp3.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2rw9-g27f-ppp3",
"modified": "2024-08-13T18:31:16Z",
"published": "2024-08-13T18:31:16Z",
"aliases": [
"CVE-2024-38127"
],
"details": "Windows Hyper-V Elevation of Privilege Vulnerability",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38127"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38127"
}
],
"database_specific": {
"cwe_ids": [
"CWE-126"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-13T18:15:14Z"
}
}
advisories/unreviewed/2024/08/GHSA-2xmp-f94r-wqm9/GHSA-2xmp-f94r-wqm9.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2xmp-f94r-wqm9",
"modified": "2024-08-13T18:31:15Z",
"published": "2024-08-13T18:31:15Z",
"aliases": [
"CVE-2022-27486"
],
"details": "A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiDDoS version 5.5.0 through 5.5.1, 5.4.2 through 5.4.0, 5.3.0 through 5.3.1, 5.2.0, 5.1.0, 5.0.0, 4.7.0, 4.6.0 and 4.5.0 and FortiDDoS-F version 6.3.0 through 6.3.1, 6.2.0 through 6.2.2, 6.1.0 through 6.1.4 allows an authenticated attacker to execute shell code as `root` via `execute` CLI commands.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2022-27486"
},
{
"type": "WEB",
"url": "https://fortiguard.com/psirt/FG-IR-22-047"
}
],
"database_specific": {
"cwe_ids": [
"CWE-78"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-13T16:15:07Z"
}
}
advisories/unreviewed/2024/08/GHSA-2xq4-823c-q5v9/GHSA-2xq4-823c-q5v9.json
+42
View File
@@ -0,0 +1,42 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2xq4-823c-q5v9",
"modified": "2024-08-13T18:31:15Z",
"published": "2024-08-13T18:31:15Z",
"aliases": [
"CVE-2021-26367"
],
"details": "A malicious attacker in x86 can misconfigure the Trusted Memory Regions (TMRs), which may allow the attacker to set an arbitrary address range for the TMR, potentially leading to a loss of integrity and availability.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26367"
},
{
"type": "WEB",
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-4004.html"
},
{
"type": "WEB",
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6005.html"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-13T17:15:17Z"
}
}
advisories/unreviewed/2024/08/GHSA-356h-6p87-pgw2/GHSA-356h-6p87-pgw2.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-356h-6p87-pgw2",
"modified": "2024-08-13T18:31:16Z",
"published": "2024-08-13T18:31:16Z",
"aliases": [
"CVE-2024-38160"
],
"details": "Windows Network Virtualization Remote Code Execution Vulnerability",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38160"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38160"
}
],
"database_specific": {
"cwe_ids": [
"CWE-122"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-13T18:15:23Z"
}
}
advisories/unreviewed/2024/08/GHSA-3763-pmwr-w4qp/GHSA-3763-pmwr-w4qp.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3763-pmwr-w4qp",
"modified": "2024-08-13T18:31:15Z",
"published": "2024-08-13T18:31:15Z",
"aliases": [
"CVE-2023-20509"
],
"details": "An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid DRAM address to SRAM, potentially resulting in loss of data integrity.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-20509"
},
{
"type": "WEB",
"url": "https://www.amd.com/en/resources/product-security/bulletin/amd-sb-6005.html"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-13T17:15:18Z"
}
}

Some files were not shown because too many files have changed in this diff Show More