netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-09-06 18:32:54 +00:00
parent 9fc4f4564a
commit a14f9e5c51
89 changed files with 1581 additions and 140 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/03/GHSA-386g-6xm2-mvq6/GHSA-386g-6xm2-mvq6.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-386g-6xm2-mvq6",
"modified": "2024-03-22T06:30:23Z",
"modified": "2024-09-06T18:31:26Z",
"published": "2024-03-22T06:30:23Z",
"aliases": [
"CVE-2024-25808"
],
"details": "Cross-site Request Forgery (CSRF) vulnerability in Lychee version 3.1.6, allows remote attackers to execute arbitrary code via the create new album function.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-352"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-22T04:15:11Z"
advisories/unreviewed/2024/03/GHSA-94wh-fmx9-8mfh/GHSA-94wh-fmx9-8mfh.json
+1 -1
View File
@@ -25,7 +25,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2024/04/GHSA-qj6m-mjm6-q6qr/GHSA-qj6m-mjm6-q6qr.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qj6m-mjm6-q6qr",
"modified": "2024-04-04T00:33:10Z",
"modified": "2024-09-06T18:31:26Z",
"published": "2024-04-04T00:33:10Z",
"aliases": [
"CVE-2023-52043"
],
"details": "An issue in D-Link COVR 1100, 1102, 1103 AC1200 Dual-Band Whole-Home Mesh Wi-Fi System (Hardware Rev B1) truncates Wireless Access Point Passwords (WPA-PSK) allowing an attacker to gain unauthorized network access via weak authentication controls.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-347"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-03T22:15:06Z"
advisories/unreviewed/2024/06/GHSA-2859-3xrw-r77c/GHSA-2859-3xrw-r77c.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2859-3xrw-r77c",
"modified": "2024-06-13T18:31:59Z",
"modified": "2024-09-06T18:31:27Z",
"published": "2024-06-13T18:31:59Z",
"aliases": [
"CVE-2024-37630"
],
"details": "D-Link DIR-605L v2.13B01 was discovered to contain a hardcoded password vulnerability in /etc/passwd, which allows attackers to log in as root.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-798"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-13T18:15:11Z"
advisories/unreviewed/2024/06/GHSA-2jw4-8qc2-wm33/GHSA-2jw4-8qc2-wm33.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2jw4-8qc2-wm33",
"modified": "2024-06-14T00:33:07Z",
"modified": "2024-09-06T18:31:27Z",
"published": "2024-06-14T00:33:07Z",
"aliases": [
"CVE-2024-31777"
],
"details": "File Upload vulnerability in openeclass v.3.15 and before allows an attacker to execute arbitrary code via a crafted file to the certbadge.php endpoint.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-434"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-13T23:15:50Z"
advisories/unreviewed/2024/06/GHSA-5wqr-8p59-25cc/GHSA-5wqr-8p59-25cc.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5wqr-8p59-25cc",
"modified": "2024-06-12T21:31:19Z",
"modified": "2024-09-06T18:31:26Z",
"published": "2024-06-12T21:31:19Z",
"aliases": [
"CVE-2024-36523"
],
"details": "An access control issue in Wvp GB28181 Pro 2.0 allows users to continue to access information in the application after deleting their own or administrator accounts. This is provided that the users do not log out of their deleted accounts.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-613"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-12T21:15:50Z"
advisories/unreviewed/2024/06/GHSA-6g47-rggg-cg8v/GHSA-6g47-rggg-cg8v.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6g47-rggg-cg8v",
"modified": "2024-06-24T00:34:02Z",
"modified": "2024-09-06T18:31:27Z",
"published": "2024-06-24T00:34:02Z",
"aliases": [
"CVE-2024-6273"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2024/06/GHSA-6v45-98rm-v6wm/GHSA-6v45-98rm-v6wm.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6v45-98rm-v6wm",
"modified": "2024-06-23T09:31:44Z",
"modified": "2024-09-06T18:31:27Z",
"published": "2024-06-23T06:30:50Z",
"aliases": [
"CVE-2024-6267"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2024/06/GHSA-7rq4-qc4c-57j9/GHSA-7rq4-qc4c-57j9.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7rq4-qc4c-57j9",
"modified": "2024-06-22T15:30:40Z",
"modified": "2024-09-06T18:31:27Z",
"published": "2024-06-22T15:30:39Z",
"aliases": [
"CVE-2024-6253"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2024/06/GHSA-gg2f-5qcm-2x9p/GHSA-gg2f-5qcm-2x9p.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gg2f-5qcm-2x9p",
"modified": "2024-06-20T15:31:19Z",
"modified": "2024-09-06T18:31:27Z",
"published": "2024-06-20T15:31:19Z",
"aliases": [
"CVE-2024-6192"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2024/06/GHSA-jvx5-2xrh-qc9f/GHSA-jvx5-2xrh-qc9f.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jvx5-2xrh-qc9f",
"modified": "2024-06-20T15:31:19Z",
"modified": "2024-09-06T18:31:27Z",
"published": "2024-06-20T15:31:19Z",
"aliases": [
"CVE-2024-6191"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2024/06/GHSA-r86x-6xqq-rhq8/GHSA-r86x-6xqq-rhq8.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-r86x-6xqq-rhq8",
"modified": "2024-06-24T03:30:37Z",
"modified": "2024-09-06T18:31:27Z",
"published": "2024-06-24T03:30:37Z",
"aliases": [
"CVE-2024-6280"
@@ -11,6 +11,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
advisories/unreviewed/2024/06/GHSA-xvcq-gm57-37c5/GHSA-xvcq-gm57-37c5.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xvcq-gm57-37c5",
"modified": "2024-06-17T18:31:33Z",
"modified": "2024-09-06T18:31:27Z",
"published": "2024-06-14T15:31:25Z",
"aliases": [
"CVE-2024-33377"
],
"details": "LB-LINK BL-W1210M v2.0 was discovered to contain a clickjacking vulnerability via the Administrator login page. Attackers can cause victim users to perform arbitrary operations via interaction with crafted elements on the web page.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-1021"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-14T15:15:50Z"
advisories/unreviewed/2024/08/GHSA-6cg9-52c8-r76r/GHSA-6cg9-52c8-r76r.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2024/08/GHSA-74rv-62jv-rq8p/GHSA-74rv-62jv-rq8p.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-74rv-62jv-rq8p",
"modified": "2024-08-17T06:30:52Z",
"modified": "2024-09-06T18:31:28Z",
"published": "2024-08-17T06:30:52Z",
"aliases": [
"CVE-2024-6459"
],
"details": "The News Element Elementor Blog Magazine WordPress plugin before 1.0.6 is vulnerable to Local File Inclusion via the template parameter. This makes it possible for unauthenticated attacker to include and execute PHP files on the server, allowing the execution of any PHP code in those files.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-17T06:15:03Z"
advisories/unreviewed/2024/08/GHSA-8736-pr6r-r9hr/GHSA-8736-pr6r-r9hr.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8736-pr6r-r9hr",
"modified": "2024-08-23T09:30:35Z",
"modified": "2024-09-06T18:31:28Z",
"published": "2024-08-23T09:30:35Z",
"aliases": [
"CVE-2024-40766"
],
"details": "An improper access control vulnerability has been identified in the SonicWall SonicOS management access, potentially leading to unauthorized resource access and in specific conditions, causing the firewall to crash. This issue affects SonicWall Firewall Gen 5 and Gen 6 devices, as well as Gen 7 devices running SonicOS 7.0.1-5035 and older versions.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
"CWE-284"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-23T07:15:03Z"
advisories/unreviewed/2024/08/GHSA-9qh5-wwv6-xccg/GHSA-9qh5-wwv6-xccg.json
+1
View File
@@ -32,6 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-22",
"CWE-23"
],
"severity": "HIGH",
advisories/unreviewed/2024/08/GHSA-cg3x-qc2c-6jq2/GHSA-cg3x-qc2c-6jq2.json
+1
View File
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79",
"CWE-81"
],
"severity": "MODERATE",
advisories/unreviewed/2024/08/GHSA-gr6c-f4fc-5x96/GHSA-gr6c-f4fc-5x96.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gr6c-f4fc-5x96",
"modified": "2024-08-20T18:31:26Z",
"modified": "2024-09-06T18:31:28Z",
"published": "2024-08-20T18:31:26Z",
"aliases": [
"CVE-2024-42919"
],
"details": "eScan Management Console 14.0.1400.2281 is vulnerable to Incorrect Access Control via acteScanAVReport.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-20T17:15:19Z"
advisories/unreviewed/2024/08/GHSA-h6c7-598w-v6r5/GHSA-h6c7-598w-v6r5.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h6c7-598w-v6r5",
"modified": "2024-08-20T15:32:12Z",
"modified": "2024-09-06T18:31:28Z",
"published": "2024-08-20T15:32:12Z",
"aliases": [
"CVE-2024-42557"
],
"details": "A Cross-Site Request Forgery (CSRF) in the component admin_modify_room.php of Hotel Management System commit 91caab8 allows attackers to escalate privileges.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-352"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-20T13:15:06Z"

Some files were not shown because too many files have changed in this diff Show More