netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-09-03 21:32:39 +00:00
parent aa565e7684
commit a37ad751fe
47 changed files with 538 additions and 74 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2018/10/GHSA-cmwx-9m2h-x7v4/GHSA-cmwx-9m2h-x7v4.json
+43 -3
View File
@@ -1,17 +1,21 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cmwx-9m2h-x7v4",
"modified": "2022-04-26T18:41:32Z",
"modified": "2024-09-03T21:31:19Z",
"published": "2018-10-10T17:23:26Z",
"aliases": [
"CVE-2016-8614"
],
"summary": "Ansible apt_key module does not properly verify key fingerprint",
"details": "A flaw was found in Ansible before version 2.2.0. The apt_key module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key.",
"details": "A flaw was found in Ansible before version 2.2.0.0. The `apt_key` module does not properly verify key fingerprints, allowing remote adversary to create an OpenPGP key which matches the short key ID and inject this key instead of the correct key.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N"
}
],
"affected": [
@@ -28,7 +32,7 @@
"introduced": "0"
},
{
"fixed": "2.2.0"
"fixed": "2.2.0.0"
}
]
}
@@ -40,9 +44,45 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-8614"
},
{
"type": "WEB",
"url": "https://github.com/ansible/ansible-modules-core/issues/5237"
},
{
"type": "WEB",
"url": "https://github.com/ansible/ansible-modules-core/pull/5353"
},
{
"type": "WEB",
"url": "https://github.com/ansible/ansible-modules-core/pull/5357"
},
{
"type": "WEB",
"url": "https://github.com/ansible/ansible-modules-core/commit/1182d1f0b76d56f3667e27987a10b9ec8f03357d"
},
{
"type": "WEB",
"url": "https://github.com/ansible/ansible-modules-core/commit/66d47c8149d84e52f64b7c4d1f340d45dca94d9c"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2016-8614"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-cmwx-9m2h-x7v4"
},
{
"type": "PACKAGE",
"url": "https://github.com/ansible/ansible"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/ansible/PYSEC-2018-37.yaml"
},
{
"type": "WEB",
"url": "https://web.archive.org/web/20200227214450/https://www.securityfocus.com/bid/94108"
}
],
"database_specific": {
advisories/unreviewed/2023/11/GHSA-7mw5-v379-5f57/GHSA-7mw5-v379-5f57.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7mw5-v379-5f57",
"modified": "2023-11-14T21:30:54Z",
"modified": "2024-09-03T21:31:08Z",
"published": "2023-11-08T09:30:25Z",
"aliases": [
"CVE-2023-46483"
advisories/unreviewed/2023/11/GHSA-f2gq-74f6-v2f7/GHSA-f2gq-74f6-v2f7.json
+2 -1
View File
@@ -36,7 +36,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-20"
"CWE-20",
"CWE-400"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/01/GHSA-5cg7-xxf6-84x2/GHSA-5cg7-xxf6-84x2.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/01/GHSA-mmx8-j2r4-x8r6/GHSA-mmx8-j2r4-x8r6.json
+1 -1
View File
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/01/GHSA-rvgj-6xhm-fmfh/GHSA-rvgj-6xhm-fmfh.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rvgj-6xhm-fmfh",
"modified": "2024-01-19T18:30:25Z",
"modified": "2024-09-03T21:31:11Z",
"published": "2024-01-16T09:30:18Z",
"aliases": [
"CVE-2023-44112"
advisories/unreviewed/2024/01/GHSA-wj2p-g4wr-m64x/GHSA-wj2p-g4wr-m64x.json
+1 -1
View File
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-755"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/05/GHSA-m4gv-x9wg-r7pw/GHSA-m4gv-x9wg-r7pw.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m4gv-x9wg-r7pw",
"modified": "2024-05-14T18:30:49Z",
"modified": "2024-09-03T21:31:11Z",
"published": "2024-05-14T18:30:49Z",
"aliases": [
"CVE-2024-34224"
],
"details": "Cross Site Scripting vulnerability in /php-lms/classes/Users.php?f=save in Computer Laboratory Management System using PHP and MySQL 1.0 allow remote attackers to inject arbitrary web script or HTML via the firstname, middlename, lastname parameters.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-14T15:38:36Z"
advisories/unreviewed/2024/05/GHSA-ppc9-9hjq-rfh7/GHSA-ppc9-9hjq-rfh7.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-ppc9-9hjq-rfh7",
"modified": "2024-05-14T18:30:48Z",
"modified": "2024-09-03T21:31:11Z",
"published": "2024-05-14T18:30:48Z",
"aliases": [
"CVE-2024-33773"
],
"details": "A buffer overflow vulnerability in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 via formWlanGuestSetup allows remote authenticated users to trigger a denial of service (DoS) through the parameter \"webpage.\"",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-14T15:38:05Z"
advisories/unreviewed/2024/07/GHSA-2hqg-m6wm-qjm5/GHSA-2hqg-m6wm-qjm5.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2hqg-m6wm-qjm5",
"modified": "2024-07-25T18:32:36Z",
"modified": "2024-09-03T21:31:11Z",
"published": "2024-07-24T18:31:16Z",
"aliases": [
"CVE-2024-31970"
@@ -28,6 +28,10 @@
{
"type": "WEB",
"url": "https://github.com/actuator/cve/blob/main/AdTran/SRG-834-5"
},
{
"type": "WEB",
"url": "https://supportcommunity.adtran.com/t5/Security-Advisories/ADTSA-2024001-Multiple-vulnerabilities-in-Service-Delivery-Gateway-products/ta-p/39332"
}
],
"database_specific": {
advisories/unreviewed/2024/07/GHSA-4pmv-jg56-hh93/GHSA-4pmv-jg56-hh93.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4pmv-jg56-hh93",
"modified": "2024-07-21T09:30:32Z",
"modified": "2024-09-03T21:31:11Z",
"published": "2024-07-21T09:30:32Z",
"aliases": [
"CVE-2024-37550"
advisories/unreviewed/2024/07/GHSA-4r38-rqh5-3fvr/GHSA-4r38-rqh5-3fvr.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4r38-rqh5-3fvr",
"modified": "2024-07-26T15:31:50Z",
"modified": "2024-09-03T21:31:11Z",
"published": "2024-07-24T15:31:28Z",
"aliases": [
"CVE-2024-31977"
@@ -32,6 +32,10 @@
{
"type": "WEB",
"url": "https://github.com/actuator/cve/tree/main/AdTran/834-5"
},
{
"type": "WEB",
"url": "https://supportcommunity.adtran.com/t5/Security-Advisories/ADTSA-2024001-Multiple-vulnerabilities-in-Service-Delivery-Gateway-products/ta-p/39332"
}
],
"database_specific": {
advisories/unreviewed/2024/08/GHSA-2m5g-p4h5-r9jp/GHSA-2m5g-p4h5-r9jp.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2m5g-p4h5-r9jp",
"modified": "2024-08-12T18:30:45Z",
"modified": "2024-09-03T21:31:11Z",
"published": "2024-08-02T18:31:11Z",
"aliases": [
"CVE-2024-33895"
],
"details": "Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 use a unique key to encrypt the configuration parameters. This is fixed in version 21.2s10 and 22.1s3, the key is now unique per device.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-798"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-02T18:16:18Z"
advisories/unreviewed/2024/08/GHSA-2q7v-x8xx-mpjx/GHSA-2q7v-x8xx-mpjx.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2q7v-x8xx-mpjx",
"modified": "2024-08-20T12:30:28Z",
"modified": "2024-09-03T21:31:12Z",
"published": "2024-08-20T12:30:28Z",
"aliases": [
"CVE-2024-41699"
advisories/unreviewed/2024/08/GHSA-4rf2-x7fh-vgpg/GHSA-4rf2-x7fh-vgpg.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4rf2-x7fh-vgpg",
"modified": "2024-08-21T15:30:50Z",
"modified": "2024-09-03T21:31:12Z",
"published": "2024-08-19T21:35:11Z",
"aliases": [
"CVE-2024-42815"
@@ -24,6 +24,10 @@
{
"type": "WEB",
"url": "https://gist.github.com/XiaoCurry/14d46e0becd79d9bb9907f2fbe147cfe"
},
{
"type": "WEB",
"url": "https://securityonline.info/cve-2024-42815-cvss-9-8-buffer-overflow-flaw-in-tp-link-routers-opens-door-to-rce"
}
],
"database_specific": {
advisories/unreviewed/2024/08/GHSA-6q66-f3v9-mwr7/GHSA-6q66-f3v9-mwr7.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6q66-f3v9-mwr7",
"modified": "2024-08-29T18:31:36Z",
"modified": "2024-09-03T21:31:12Z",
"published": "2024-08-29T18:31:35Z",
"aliases": [
"CVE-2024-44776"
],
"details": "An Open Redirect vulnerability in the page parameter of vTiger CRM v7.4.0 allows attackers to redirect users to a malicious site via a crafted URL.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-601"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-29T18:15:14Z"
advisories/unreviewed/2024/08/GHSA-765j-3jm5-8cf6/GHSA-765j-3jm5-8cf6.json
+1
View File
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121",
"CWE-787"
],
"severity": "HIGH",
advisories/unreviewed/2024/08/GHSA-7pp9-59r6-x3f6/GHSA-7pp9-59r6-x3f6.json
+9 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7pp9-59r6-x3f6",
"modified": "2024-08-07T18:30:41Z",
"modified": "2024-09-03T21:31:11Z",
"published": "2024-08-02T18:31:10Z",
"aliases": [
"CVE-2024-41518"
@@ -29,9 +29,17 @@
"type": "WEB",
"url": "http://feripro.com"
},
{
"type": "WEB",
"url": "http://feripro.de"
},
{
"type": "WEB",
"url": "http://mecodia.com"
},
{
"type": "WEB",
"url": "http://mecodia.de"
}
],
"database_specific": {
advisories/unreviewed/2024/08/GHSA-8547-j8j2-79v8/GHSA-8547-j8j2-79v8.json
+1
View File
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121",
"CWE-787"
],
"severity": "HIGH",
advisories/unreviewed/2024/08/GHSA-9q4j-4jmg-xr2j/GHSA-9q4j-4jmg-xr2j.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9q4j-4jmg-xr2j",
"modified": "2024-08-12T18:30:45Z",
"modified": "2024-09-03T21:31:11Z",
"published": "2024-08-02T18:31:10Z",
"aliases": [
"CVE-2024-33893"
],
"details": "Cosy+ devices running a firmware 21.x below 21.2s10 or a firmware 22.x below 22.1s3 are vulnerable to XSS when displaying the logs due to improper input sanitization. This is fixed in version 21.2s10 and 22.1s3.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-02T18:16:18Z"

Some files were not shown because too many files have changed in this diff Show More