diff --git a/advisories/github-reviewed/2024/05/GHSA-6wvf-f2vw-3425/GHSA-6wvf-f2vw-3425.json b/advisories/github-reviewed/2024/05/GHSA-6wvf-f2vw-3425/GHSA-6wvf-f2vw-3425.json index 22e274afa35..cf2504daeea 100644 --- a/advisories/github-reviewed/2024/05/GHSA-6wvf-f2vw-3425/GHSA-6wvf-f2vw-3425.json +++ b/advisories/github-reviewed/2024/05/GHSA-6wvf-f2vw-3425/GHSA-6wvf-f2vw-3425.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-6wvf-f2vw-3425", - "modified": "2024-10-17T03:31:32Z", + "modified": "2024-10-24T18:30:41Z", "published": "2024-05-14T18:30:52Z", "aliases": [ "CVE-2024-3727" @@ -86,6 +86,10 @@ "type": "WEB", "url": "https://github.com/containers/image/commit/e8948046055060605bd68289d406ce149590c33a" }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:0045" + }, { "type": "WEB", "url": "https://access.redhat.com/security/cve/CVE-2024-3727" @@ -142,10 +146,6 @@ "type": "WEB", "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SFVSMR7TNLO2KPWJSW4CF64C2QMQXCIN" }, - { - "type": "WEB", - "url": "https://access.redhat.com/errata/RHSA-2024:0045" - }, { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2024:3718" @@ -209,6 +209,10 @@ { "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2024:7941" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:8260" } ], "database_specific": { diff --git a/advisories/github-reviewed/2024/10/GHSA-3pg4-qwc8-426r/GHSA-3pg4-qwc8-426r.json b/advisories/github-reviewed/2024/10/GHSA-3pg4-qwc8-426r/GHSA-3pg4-qwc8-426r.json new file mode 100644 index 00000000000..644a06af6c1 --- /dev/null +++ b/advisories/github-reviewed/2024/10/GHSA-3pg4-qwc8-426r/GHSA-3pg4-qwc8-426r.json @@ -0,0 +1,58 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3pg4-qwc8-426r", + "modified": "2024-10-24T18:30:00Z", + "published": "2024-10-24T18:30:00Z", + "aliases": [ + + ], + "summary": "OpenRefine leaks Google API credentials in releases", + "details": "### Impact\n\nOpenRefine releases contain Google API authentication keys (\"client id\" and \"client secret\") which can be extracted from released artifacts. For instance, download the package for OpenRefine 3.8.2 on linux. It contains the file `openrefine-3.8.2/webapp/extensions/gdata/module/MOD-INF/lib/openrefine-gdata.jar`, which can be extracted.\nThis archive then contains the file `com/google/refine/extension/gdata/GoogleAPIExtension.java`, which contains the following lines:\n\n```java\n // For a production release, the second parameter (default value) can be set\n // for the following three properties (client_id, client_secret, and API key) to\n // the production values from the Google API console\n private static final String CLIENT_ID = System.getProperty(\"ext.gdata.clientid\", new String(Base64.getDecoder().decode(\"ODk1NTU1ODQzNjMwLWhkZWwyN3NxMDM5ZjFwMmZ0aGE2M2VvcWFpY2JwamZoLmFwcHMuZ29vZ2xldXNlcmNvbnRlbnQuY29t\")));\n private static final String CLIENT_SECRET = System.getProperty(\"ext.gdata.clientsecret\", new String(Base64.getDecoder().decode(\"R2V2TnZiTnA2a3IxeDd5c3VZNENmYlNo\")));\n```\n\nThe Base64 encoding can then be decoded to obtain the client id and client secret.\nThose credentials can then be used by other applications to request access to Google accounts, pretending they are OpenRefine. This assumes that they also get access to the user access tokens, which this vulnerability doesn't expose by itself.\n\n### Patches\n\nThe bundled credentials should be revoked.\n\n### Workarounds\n\nUsers should revoke access to their Google account if they have connected it to OpenRefine.\n", + "severity": [ + + ], + "affected": [ + { + "package": { + "ecosystem": "Maven", + "name": "org.openrefine:openrefine" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "3.8.3" + } + ] + } + ] + } + ], + "references": [ + { + "type": "WEB", + "url": "https://github.com/OpenRefine/OpenRefine/security/advisories/GHSA-3pg4-qwc8-426r" + }, + { + "type": "WEB", + "url": "https://github.com/OpenRefine/OpenRefine/commit/07dd61e00bb7f472ddcb243631299fba95ad90dd" + }, + { + "type": "PACKAGE", + "url": "https://github.com/OpenRefine/OpenRefine" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-522" + ], + "severity": "HIGH", + "github_reviewed": true, + "github_reviewed_at": "2024-10-24T18:30:00Z", + "nvd_published_at": null + } +} \ No newline at end of file diff --git a/advisories/github-reviewed/2024/10/GHSA-mc76-5925-c5p6/GHSA-mc76-5925-c5p6.json b/advisories/github-reviewed/2024/10/GHSA-mc76-5925-c5p6/GHSA-mc76-5925-c5p6.json index b859dc8110c..4ecb3ee6b87 100644 --- a/advisories/github-reviewed/2024/10/GHSA-mc76-5925-c5p6/GHSA-mc76-5925-c5p6.json +++ b/advisories/github-reviewed/2024/10/GHSA-mc76-5925-c5p6/GHSA-mc76-5925-c5p6.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-mc76-5925-c5p6", - "modified": "2024-10-24T00:33:35Z", + "modified": "2024-10-24T18:30:41Z", "published": "2024-10-01T21:31:34Z", "aliases": [ "CVE-2024-9341" @@ -64,6 +64,10 @@ "type": "WEB", "url": "https://access.redhat.com/errata/RHSA-2024:8238" }, + { + "type": "WEB", + "url": "https://access.redhat.com/errata/RHSA-2024:8263" + }, { "type": "WEB", "url": "https://access.redhat.com/security/cve/CVE-2024-9341" diff --git a/advisories/unreviewed/2023/07/GHSA-23jp-25jg-2qj5/GHSA-23jp-25jg-2qj5.json b/advisories/unreviewed/2023/07/GHSA-23jp-25jg-2qj5/GHSA-23jp-25jg-2qj5.json index 21dd5a53766..29db3824fca 100644 --- a/advisories/unreviewed/2023/07/GHSA-23jp-25jg-2qj5/GHSA-23jp-25jg-2qj5.json +++ b/advisories/unreviewed/2023/07/GHSA-23jp-25jg-2qj5/GHSA-23jp-25jg-2qj5.json @@ -36,7 +36,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-276" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2023/09/GHSA-3g58-gh82-frfm/GHSA-3g58-gh82-frfm.json b/advisories/unreviewed/2023/09/GHSA-3g58-gh82-frfm/GHSA-3g58-gh82-frfm.json index cc2e759325c..fa8d2da62a2 100644 --- a/advisories/unreviewed/2023/09/GHSA-3g58-gh82-frfm/GHSA-3g58-gh82-frfm.json +++ b/advisories/unreviewed/2023/09/GHSA-3g58-gh82-frfm/GHSA-3g58-gh82-frfm.json @@ -28,7 +28,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-284" + "CWE-284", + "CWE-305" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2023/10/GHSA-m6vw-rhwf-xjxq/GHSA-m6vw-rhwf-xjxq.json b/advisories/unreviewed/2023/10/GHSA-m6vw-rhwf-xjxq/GHSA-m6vw-rhwf-xjxq.json index 0999fb8f65a..2a3eabdfacc 100644 --- a/advisories/unreviewed/2023/10/GHSA-m6vw-rhwf-xjxq/GHSA-m6vw-rhwf-xjxq.json +++ b/advisories/unreviewed/2023/10/GHSA-m6vw-rhwf-xjxq/GHSA-m6vw-rhwf-xjxq.json @@ -28,6 +28,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-1295", "CWE-200" ], "severity": "HIGH", diff --git a/advisories/unreviewed/2024/01/GHSA-2cmf-8p7p-w9m7/GHSA-2cmf-8p7p-w9m7.json b/advisories/unreviewed/2024/01/GHSA-2cmf-8p7p-w9m7/GHSA-2cmf-8p7p-w9m7.json index d9d1fe78d9f..f6549587706 100644 --- a/advisories/unreviewed/2024/01/GHSA-2cmf-8p7p-w9m7/GHSA-2cmf-8p7p-w9m7.json +++ b/advisories/unreviewed/2024/01/GHSA-2cmf-8p7p-w9m7/GHSA-2cmf-8p7p-w9m7.json @@ -36,7 +36,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-200" + "CWE-200", + "CWE-532" ], "severity": "LOW", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/01/GHSA-vxvg-fm2c-8444/GHSA-vxvg-fm2c-8444.json b/advisories/unreviewed/2024/01/GHSA-vxvg-fm2c-8444/GHSA-vxvg-fm2c-8444.json index f8b421223a1..5ceada01be2 100644 --- a/advisories/unreviewed/2024/01/GHSA-vxvg-fm2c-8444/GHSA-vxvg-fm2c-8444.json +++ b/advisories/unreviewed/2024/01/GHSA-vxvg-fm2c-8444/GHSA-vxvg-fm2c-8444.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-vxvg-fm2c-8444", - "modified": "2024-01-22T21:31:06Z", + "modified": "2024-10-24T18:30:40Z", "published": "2024-01-13T03:30:17Z", "aliases": [ "CVE-2023-33472" @@ -28,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-94" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/02/GHSA-4639-7gfm-29p2/GHSA-4639-7gfm-29p2.json b/advisories/unreviewed/2024/02/GHSA-4639-7gfm-29p2/GHSA-4639-7gfm-29p2.json index b761f49a8ef..41137e7e49d 100644 --- a/advisories/unreviewed/2024/02/GHSA-4639-7gfm-29p2/GHSA-4639-7gfm-29p2.json +++ b/advisories/unreviewed/2024/02/GHSA-4639-7gfm-29p2/GHSA-4639-7gfm-29p2.json @@ -40,7 +40,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-276" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/07/GHSA-26wc-mjpc-3f8m/GHSA-26wc-mjpc-3f8m.json b/advisories/unreviewed/2024/07/GHSA-26wc-mjpc-3f8m/GHSA-26wc-mjpc-3f8m.json index cf6dcbcb858..a0a671b961b 100644 --- a/advisories/unreviewed/2024/07/GHSA-26wc-mjpc-3f8m/GHSA-26wc-mjpc-3f8m.json +++ b/advisories/unreviewed/2024/07/GHSA-26wc-mjpc-3f8m/GHSA-26wc-mjpc-3f8m.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-26wc-mjpc-3f8m", - "modified": "2024-08-21T18:31:26Z", + "modified": "2024-10-24T18:30:40Z", "published": "2024-07-02T21:32:16Z", "aliases": [ "CVE-2022-25477" @@ -29,6 +29,10 @@ "type": "WEB", "url": "https://www.realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdf" }, + { + "type": "WEB", + "url": "https://zwclose.github.io/2024/10/14/rtsper1.html" + }, { "type": "WEB", "url": "http://realtek.com" diff --git a/advisories/unreviewed/2024/07/GHSA-396g-xc2g-5qhm/GHSA-396g-xc2g-5qhm.json b/advisories/unreviewed/2024/07/GHSA-396g-xc2g-5qhm/GHSA-396g-xc2g-5qhm.json index 9150d2b7e87..c6dc2239421 100644 --- a/advisories/unreviewed/2024/07/GHSA-396g-xc2g-5qhm/GHSA-396g-xc2g-5qhm.json +++ b/advisories/unreviewed/2024/07/GHSA-396g-xc2g-5qhm/GHSA-396g-xc2g-5qhm.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-396g-xc2g-5qhm", - "modified": "2024-07-11T15:30:44Z", + "modified": "2024-10-24T18:30:40Z", "published": "2024-07-09T18:30:53Z", "aliases": [ "CVE-2023-48194" @@ -25,6 +25,10 @@ "type": "WEB", "url": "https://github.com/zt20xx/CVE-2023-48194" }, + { + "type": "WEB", + "url": "https://www.tenda.com.cn/download/detail-3683.html" + }, { "type": "WEB", "url": "http://tenda.com" diff --git a/advisories/unreviewed/2024/07/GHSA-73px-657p-5pqg/GHSA-73px-657p-5pqg.json b/advisories/unreviewed/2024/07/GHSA-73px-657p-5pqg/GHSA-73px-657p-5pqg.json index a3bc5bf4fc0..4c4e171c796 100644 --- a/advisories/unreviewed/2024/07/GHSA-73px-657p-5pqg/GHSA-73px-657p-5pqg.json +++ b/advisories/unreviewed/2024/07/GHSA-73px-657p-5pqg/GHSA-73px-657p-5pqg.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-73px-657p-5pqg", - "modified": "2024-08-21T15:30:49Z", + "modified": "2024-10-24T18:30:40Z", "published": "2024-07-02T21:32:16Z", "aliases": [ "CVE-2022-25480" @@ -29,6 +29,10 @@ "type": "WEB", "url": "https://www.realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdf" }, + { + "type": "WEB", + "url": "https://zwclose.github.io/2024/10/14/rtsper1.html" + }, { "type": "WEB", "url": "http://realtek.com" diff --git a/advisories/unreviewed/2024/07/GHSA-7vph-xj83-rw6v/GHSA-7vph-xj83-rw6v.json b/advisories/unreviewed/2024/07/GHSA-7vph-xj83-rw6v/GHSA-7vph-xj83-rw6v.json index 4c9a3972850..d94717f1e48 100644 --- a/advisories/unreviewed/2024/07/GHSA-7vph-xj83-rw6v/GHSA-7vph-xj83-rw6v.json +++ b/advisories/unreviewed/2024/07/GHSA-7vph-xj83-rw6v/GHSA-7vph-xj83-rw6v.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-7vph-xj83-rw6v", - "modified": "2024-08-21T15:30:49Z", + "modified": "2024-10-24T18:30:40Z", "published": "2024-07-02T21:32:16Z", "aliases": [ "CVE-2022-25479" @@ -29,6 +29,10 @@ "type": "WEB", "url": "https://www.realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdf" }, + { + "type": "WEB", + "url": "https://zwclose.github.io/2024/10/14/rtsper1.html" + }, { "type": "WEB", "url": "http://realtek.com" diff --git a/advisories/unreviewed/2024/07/GHSA-vh56-6f64-v877/GHSA-vh56-6f64-v877.json b/advisories/unreviewed/2024/07/GHSA-vh56-6f64-v877/GHSA-vh56-6f64-v877.json index a610cf06dee..34a9a31e5d5 100644 --- a/advisories/unreviewed/2024/07/GHSA-vh56-6f64-v877/GHSA-vh56-6f64-v877.json +++ b/advisories/unreviewed/2024/07/GHSA-vh56-6f64-v877/GHSA-vh56-6f64-v877.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-vh56-6f64-v877", - "modified": "2024-08-21T18:31:26Z", + "modified": "2024-10-24T18:30:40Z", "published": "2024-07-02T21:32:16Z", "aliases": [ "CVE-2022-25478" @@ -29,6 +29,10 @@ "type": "WEB", "url": "https://www.realtek.com/images/safe-report/Realtek_RtsPer_RtsUer_Security_Advisory_Report.pdf" }, + { + "type": "WEB", + "url": "https://zwclose.github.io/2024/10/14/rtsper1.html" + }, { "type": "WEB", "url": "http://realtek.com" diff --git a/advisories/unreviewed/2024/08/GHSA-4v29-qmg8-wv42/GHSA-4v29-qmg8-wv42.json b/advisories/unreviewed/2024/08/GHSA-4v29-qmg8-wv42/GHSA-4v29-qmg8-wv42.json index fffa3b449a1..a14eb2bcf03 100644 --- a/advisories/unreviewed/2024/08/GHSA-4v29-qmg8-wv42/GHSA-4v29-qmg8-wv42.json +++ b/advisories/unreviewed/2024/08/GHSA-4v29-qmg8-wv42/GHSA-4v29-qmg8-wv42.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-4v29-qmg8-wv42", - "modified": "2024-08-19T06:30:54Z", + "modified": "2024-10-24T18:30:41Z", "published": "2024-08-17T12:30:33Z", "aliases": [ "CVE-2024-43849" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: qcom: pdr: protect locator_addr with the main mutex\n\nIf the service locator server is restarted fast enough, the PDR can\nrewrite locator_addr fields concurrently. Protect them by placing\nmodification of those fields under the main pdr->lock.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" + } ], "affected": [ @@ -45,9 +48,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-667" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-17T10:15:10Z" diff --git a/advisories/unreviewed/2024/08/GHSA-fv6p-j83c-r5q7/GHSA-fv6p-j83c-r5q7.json b/advisories/unreviewed/2024/08/GHSA-fv6p-j83c-r5q7/GHSA-fv6p-j83c-r5q7.json index 8ddcc6feb5b..defa86eff4a 100644 --- a/advisories/unreviewed/2024/08/GHSA-fv6p-j83c-r5q7/GHSA-fv6p-j83c-r5q7.json +++ b/advisories/unreviewed/2024/08/GHSA-fv6p-j83c-r5q7/GHSA-fv6p-j83c-r5q7.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-fv6p-j83c-r5q7", - "modified": "2024-08-17T12:30:33Z", + "modified": "2024-10-24T18:30:41Z", "published": "2024-08-17T12:30:33Z", "aliases": [ "CVE-2024-43851" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nsoc: xilinx: rename cpu_number1 to dummy_cpu_number\n\nThe per cpu variable cpu_number1 is passed to xlnx_event_handler as\nargument \"dev_id\", but it is not used in this function. So drop the\ninitialization of this variable and rename it to dummy_cpu_number.\nThis patch is to fix the following call trace when the kernel option\nCONFIG_DEBUG_ATOMIC_SLEEP is enabled:\n\nBUG: sleeping function called from invalid context at include/linux/sched/mm.h:274\n in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 1, name: swapper/0\n preempt_count: 1, expected: 0\n CPU: 0 PID: 1 Comm: swapper/0 Not tainted 6.1.0 #53\n Hardware name: Xilinx Versal vmk180 Eval board rev1.1 (QSPI) (DT)\n Call trace:\n dump_backtrace+0xd0/0xe0\n show_stack+0x18/0x40\n dump_stack_lvl+0x7c/0xa0\n dump_stack+0x18/0x34\n __might_resched+0x10c/0x140\n __might_sleep+0x4c/0xa0\n __kmem_cache_alloc_node+0xf4/0x168\n kmalloc_trace+0x28/0x38\n __request_percpu_irq+0x74/0x138\n xlnx_event_manager_probe+0xf8/0x298\n platform_probe+0x68/0xd8", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -39,7 +42,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-17T10:15:10Z" diff --git a/advisories/unreviewed/2024/09/GHSA-5rqg-4vpc-fpm2/GHSA-5rqg-4vpc-fpm2.json b/advisories/unreviewed/2024/09/GHSA-5rqg-4vpc-fpm2/GHSA-5rqg-4vpc-fpm2.json index 1bbd4f74ace..ba32471c0e2 100644 --- a/advisories/unreviewed/2024/09/GHSA-5rqg-4vpc-fpm2/GHSA-5rqg-4vpc-fpm2.json +++ b/advisories/unreviewed/2024/09/GHSA-5rqg-4vpc-fpm2/GHSA-5rqg-4vpc-fpm2.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-5rqg-4vpc-fpm2", - "modified": "2024-10-03T18:30:35Z", + "modified": "2024-10-24T18:30:41Z", "published": "2024-09-27T18:32:27Z", "aliases": [ "CVE-2024-46257" @@ -21,6 +21,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46257" }, + { + "type": "WEB", + "url": "https://github.com/NginxProxyManager/nginx-proxy-manager/pull/4073/commits/c39d5433bcd13993def222bbb2b6988bbb810a05" + }, { "type": "WEB", "url": "https://github.com/NginxProxyManager/nginx-proxy-manager/commit/99cce7e2b0da2978411cedd7cac5fffbe15bc466" diff --git a/advisories/unreviewed/2024/09/GHSA-6v48-p2g5-g5g2/GHSA-6v48-p2g5-g5g2.json b/advisories/unreviewed/2024/09/GHSA-6v48-p2g5-g5g2/GHSA-6v48-p2g5-g5g2.json index 8c36cd2d66e..147e11be916 100644 --- a/advisories/unreviewed/2024/09/GHSA-6v48-p2g5-g5g2/GHSA-6v48-p2g5-g5g2.json +++ b/advisories/unreviewed/2024/09/GHSA-6v48-p2g5-g5g2/GHSA-6v48-p2g5-g5g2.json @@ -32,6 +32,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-312", "CWE-313" ], "severity": "CRITICAL", diff --git a/advisories/unreviewed/2024/09/GHSA-mhxx-5693-798f/GHSA-mhxx-5693-798f.json b/advisories/unreviewed/2024/09/GHSA-mhxx-5693-798f/GHSA-mhxx-5693-798f.json index 0a2bfcedbea..4edf48a0074 100644 --- a/advisories/unreviewed/2024/09/GHSA-mhxx-5693-798f/GHSA-mhxx-5693-798f.json +++ b/advisories/unreviewed/2024/09/GHSA-mhxx-5693-798f/GHSA-mhxx-5693-798f.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-mhxx-5693-798f", - "modified": "2024-10-03T21:31:04Z", + "modified": "2024-10-24T18:30:41Z", "published": "2024-09-27T18:32:27Z", "aliases": [ "CVE-2024-46256" @@ -21,6 +21,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46256" }, + { + "type": "WEB", + "url": "https://github.com/NginxProxyManager/nginx-proxy-manager/pull/4073/commits/c39d5433bcd13993def222bbb2b6988bbb810a05" + }, { "type": "WEB", "url": "https://github.com/NginxProxyManager/nginx-proxy-manager/commit/99cce7e2b0da2978411cedd7cac5fffbe15bc466" diff --git a/advisories/unreviewed/2024/10/GHSA-22xm-p789-9hfc/GHSA-22xm-p789-9hfc.json b/advisories/unreviewed/2024/10/GHSA-22xm-p789-9hfc/GHSA-22xm-p789-9hfc.json index ac91eeee878..b4e6f9fc969 100644 --- a/advisories/unreviewed/2024/10/GHSA-22xm-p789-9hfc/GHSA-22xm-p789-9hfc.json +++ b/advisories/unreviewed/2024/10/GHSA-22xm-p789-9hfc/GHSA-22xm-p789-9hfc.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-22xm-p789-9hfc", - "modified": "2024-10-21T21:30:52Z", + "modified": "2024-10-24T18:30:42Z", "published": "2024-10-21T21:30:52Z", "aliases": [ "CVE-2022-49028" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nixgbevf: Fix resource leak in ixgbevf_init_module()\n\nixgbevf_init_module() won't destroy the workqueue created by\ncreate_singlethread_workqueue() when pci_register_driver() failed. Add\ndestroy_workqueue() in fail path to prevent the resource leak.\n\nSimilar to the handling of u132_hcd_init in commit f276e002793c\n(\"usb: u132-hcd: fix resource leak\")", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -37,9 +40,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-459" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-21T20:15:13Z" diff --git a/advisories/unreviewed/2024/10/GHSA-2gq6-q827-5p24/GHSA-2gq6-q827-5p24.json b/advisories/unreviewed/2024/10/GHSA-2gq6-q827-5p24/GHSA-2gq6-q827-5p24.json new file mode 100644 index 00000000000..c6ef9a5368e --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-2gq6-q827-5p24/GHSA-2gq6-q827-5p24.json @@ -0,0 +1,43 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2gq6-q827-5p24", + "modified": "2024-10-24T18:30:42Z", + "published": "2024-10-24T18:30:42Z", + "aliases": [ + "CVE-2024-48538" + ], + "details": "Incorrect access control in the firmware update and download processes of Neye3C v4.5.2.0 allows attackers to access sensitive information by analyzing the code and data within the APK file.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48538" + }, + { + "type": "WEB", + "url": "https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.gooclient.anycam.neye3ctwo/com.gooclient.anycam.neye3ctwo.md" + }, + { + "type": "WEB", + "url": "http://neye3c.com" + }, + { + "type": "WEB", + "url": "http://www.netdvr.cn/page6" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T16:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-2h84-jhpc-6px2/GHSA-2h84-jhpc-6px2.json b/advisories/unreviewed/2024/10/GHSA-2h84-jhpc-6px2/GHSA-2h84-jhpc-6px2.json index c068e1d5c40..e6b505eae39 100644 --- a/advisories/unreviewed/2024/10/GHSA-2h84-jhpc-6px2/GHSA-2h84-jhpc-6px2.json +++ b/advisories/unreviewed/2024/10/GHSA-2h84-jhpc-6px2/GHSA-2h84-jhpc-6px2.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-2h84-jhpc-6px2", - "modified": "2024-10-21T18:30:57Z", + "modified": "2024-10-24T18:30:41Z", "published": "2024-10-21T18:30:57Z", "aliases": [ "CVE-2024-49915" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add NULL check for clk_mgr in dcn32_init_hw\n\nThis commit addresses a potential null pointer dereference issue in the\n`dcn32_init_hw` function. The issue could occur when `dc->clk_mgr` is\nnull.\n\nThe fix adds a check to ensure `dc->clk_mgr` is not null before\naccessing its functions. This prevents a potential null pointer\ndereference.\n\nReported by smatch:\ndrivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn32/dcn32_hwseq.c:961 dcn32_init_hw() error: we previously assumed 'dc->clk_mgr' could be null (see line 782)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -33,9 +36,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-476" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-21T18:15:13Z" diff --git a/advisories/unreviewed/2024/10/GHSA-2q3j-fpjf-8xrm/GHSA-2q3j-fpjf-8xrm.json b/advisories/unreviewed/2024/10/GHSA-2q3j-fpjf-8xrm/GHSA-2q3j-fpjf-8xrm.json new file mode 100644 index 00000000000..7be0cd86e50 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-2q3j-fpjf-8xrm/GHSA-2q3j-fpjf-8xrm.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2q3j-fpjf-8xrm", + "modified": "2024-10-24T18:30:44Z", + "published": "2024-10-24T18:30:44Z", + "aliases": [ + "CVE-2024-48441" + ], + "details": "Wuhan Tianyu Information Industry Co., Ltd Tianyu CPE Router CommonCPExCPETS_v3.2.468.11.04_P4 was discovered to contain a command injection vulnerability via the component at_command.asp.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48441" + }, + { + "type": "WEB", + "url": "https://medium.com/%40sengkyaut/unauthenticated-factory-mode-reset-and-at-command-injection-in-jboneos-or-jbonecloud-firmware-1dec156b7ddd" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T18:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-2x3q-5xpc-rqf8/GHSA-2x3q-5xpc-rqf8.json b/advisories/unreviewed/2024/10/GHSA-2x3q-5xpc-rqf8/GHSA-2x3q-5xpc-rqf8.json index 7f2bf9b99fd..8c683370877 100644 --- a/advisories/unreviewed/2024/10/GHSA-2x3q-5xpc-rqf8/GHSA-2x3q-5xpc-rqf8.json +++ b/advisories/unreviewed/2024/10/GHSA-2x3q-5xpc-rqf8/GHSA-2x3q-5xpc-rqf8.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-2x3q-5xpc-rqf8", - "modified": "2024-10-21T12:30:56Z", + "modified": "2024-10-24T18:30:41Z", "published": "2024-10-21T12:30:55Z", "aliases": [ "CVE-2024-47719" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\niommufd: Protect against overflow of ALIGN() during iova allocation\n\nUserspace can supply an iova and uptr such that the target iova alignment\nbecomes really big and ALIGN() overflows which corrupts the selected area\nrange during allocation. CONFIG_IOMMUFD_TEST can detect this:\n\n WARNING: CPU: 1 PID: 5092 at drivers/iommu/iommufd/io_pagetable.c:268 iopt_alloc_area_pages drivers/iommu/iommufd/io_pagetable.c:268 [inline]\n WARNING: CPU: 1 PID: 5092 at drivers/iommu/iommufd/io_pagetable.c:268 iopt_map_pages+0xf95/0x1050 drivers/iommu/iommufd/io_pagetable.c:352\n Modules linked in:\n CPU: 1 PID: 5092 Comm: syz-executor294 Not tainted 6.10.0-rc5-syzkaller-00294-g3ffea9a7a6f7 #0\n Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024\n RIP: 0010:iopt_alloc_area_pages drivers/iommu/iommufd/io_pagetable.c:268 [inline]\n RIP: 0010:iopt_map_pages+0xf95/0x1050 drivers/iommu/iommufd/io_pagetable.c:352\n Code: fc e9 a4 f3 ff ff e8 1a 8b 4c fc 41 be e4 ff ff ff e9 8a f3 ff ff e8 0a 8b 4c fc 90 0f 0b 90 e9 37 f5 ff ff e8 fc 8a 4c fc 90 <0f> 0b 90 e9 68 f3 ff ff 48 c7 c1 ec 82 ad 8f 80 e1 07 80 c1 03 38\n RSP: 0018:ffffc90003ebf9e0 EFLAGS: 00010293\n RAX: ffffffff85499fa4 RBX: 00000000ffffffef RCX: ffff888079b49e00\n RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000\n RBP: ffffc90003ebfc50 R08: ffffffff85499b30 R09: ffffffff85499942\n R10: 0000000000000002 R11: ffff888079b49e00 R12: ffff8880228e0010\n R13: 0000000000000000 R14: 1ffff920007d7f68 R15: ffffc90003ebfd00\n FS: 000055557d760380(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000\n CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n CR2: 00000000005fdeb8 CR3: 000000007404a000 CR4: 00000000003506f0\n DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000\n DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400\n Call Trace:\n \n iommufd_ioas_copy+0x610/0x7b0 drivers/iommu/iommufd/ioas.c:274\n iommufd_fops_ioctl+0x4d9/0x5a0 drivers/iommu/iommufd/main.c:421\n vfs_ioctl fs/ioctl.c:51 [inline]\n __do_sys_ioctl fs/ioctl.c:907 [inline]\n __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:893\n do_syscall_x64 arch/x86/entry/common.c:52 [inline]\n do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83\n entry_SYSCALL_64_after_hwframe+0x77/0x7f\n\nCap the automatic alignment to the huge page size, which is probably a\nbetter idea overall. Huge automatic alignments can fragment and chew up\nthe available IOVA space without any reason.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -37,9 +40,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-787" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-21T12:15:08Z" diff --git a/advisories/unreviewed/2024/10/GHSA-3hjp-j522-245f/GHSA-3hjp-j522-245f.json b/advisories/unreviewed/2024/10/GHSA-3hjp-j522-245f/GHSA-3hjp-j522-245f.json index b7a8918b7f8..d4efa41e4f1 100644 --- a/advisories/unreviewed/2024/10/GHSA-3hjp-j522-245f/GHSA-3hjp-j522-245f.json +++ b/advisories/unreviewed/2024/10/GHSA-3hjp-j522-245f/GHSA-3hjp-j522-245f.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-3hjp-j522-245f", - "modified": "2024-10-23T00:31:43Z", + "modified": "2024-10-24T18:30:42Z", "published": "2024-10-23T00:31:43Z", "aliases": [ "CVE-2024-10229" ], "details": "Inappropriate implementation in Extensions in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension. (Chromium security severity: High)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-22T22:15:03Z" diff --git a/advisories/unreviewed/2024/10/GHSA-3p3h-j9q4-q239/GHSA-3p3h-j9q4-q239.json b/advisories/unreviewed/2024/10/GHSA-3p3h-j9q4-q239/GHSA-3p3h-j9q4-q239.json new file mode 100644 index 00000000000..0b6237aa7c6 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-3p3h-j9q4-q239/GHSA-3p3h-j9q4-q239.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3p3h-j9q4-q239", + "modified": "2024-10-24T18:30:43Z", + "published": "2024-10-24T18:30:43Z", + "aliases": [ + "CVE-2024-48545" + ], + "details": "Incorrect access control in the firmware update and download processes of IVY Smart v4.5.0 allows attackers to access sensitive information by analyzing the code and data within the APK file.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48545" + }, + { + "type": "WEB", + "url": "https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.ivyiot.IvySmart/com.ivyiot.IvySmart.md" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T17:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-4667-xxv8-3pq6/GHSA-4667-xxv8-3pq6.json b/advisories/unreviewed/2024/10/GHSA-4667-xxv8-3pq6/GHSA-4667-xxv8-3pq6.json index 4872d352d69..d2226b43a07 100644 --- a/advisories/unreviewed/2024/10/GHSA-4667-xxv8-3pq6/GHSA-4667-xxv8-3pq6.json +++ b/advisories/unreviewed/2024/10/GHSA-4667-xxv8-3pq6/GHSA-4667-xxv8-3pq6.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-4667-xxv8-3pq6", - "modified": "2024-10-21T21:30:53Z", + "modified": "2024-10-24T18:30:42Z", "published": "2024-10-21T21:30:52Z", "aliases": [ "CVE-2022-49031" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: health: afe4403: Fix oob read in afe4403_read_raw\n\nKASAN report out-of-bounds read as follows:\n\nBUG: KASAN: global-out-of-bounds in afe4403_read_raw+0x42e/0x4c0\nRead of size 4 at addr ffffffffc02ac638 by task cat/279\n\nCall Trace:\n afe4403_read_raw\n iio_read_channel_info\n dev_attr_show\n\nThe buggy address belongs to the variable:\n afe4403_channel_leds+0x18/0xffffffffffffe9e0\n\nThis issue can be reproduced by singe command:\n\n $ cat /sys/bus/spi/devices/spi0.0/iio\\:device0/in_intensity6_raw\n\nThe array size of afe4403_channel_leds is less than channels, so access\nwith chan->address cause OOB read in afe4403_read_raw. Fix it by moving\naccess before use it.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" + } ], "affected": [ @@ -53,9 +56,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-125" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-21T20:15:13Z" diff --git a/advisories/unreviewed/2024/10/GHSA-5rwv-chpw-9fvf/GHSA-5rwv-chpw-9fvf.json b/advisories/unreviewed/2024/10/GHSA-5rwv-chpw-9fvf/GHSA-5rwv-chpw-9fvf.json index 7e42b775ac1..f728be691e7 100644 --- a/advisories/unreviewed/2024/10/GHSA-5rwv-chpw-9fvf/GHSA-5rwv-chpw-9fvf.json +++ b/advisories/unreviewed/2024/10/GHSA-5rwv-chpw-9fvf/GHSA-5rwv-chpw-9fvf.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-5rwv-chpw-9fvf", - "modified": "2024-10-21T18:30:57Z", + "modified": "2024-10-24T18:30:41Z", "published": "2024-10-21T18:30:57Z", "aliases": [ "CVE-2024-49912" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'\n\nThis commit adds a null check for 'stream_status' in the function\n'planes_changed_for_existing_stream'. Previously, the code assumed\n'stream_status' could be null, but did not handle the case where it was\nactually null. This could lead to a null pointer dereference.\n\nReported by smatch:\ndrivers/gpu/drm/amd/amdgpu/../display/dc/core/dc_resource.c:3784 planes_changed_for_existing_stream() error: we previously assumed 'stream_status' could be null (see line 3774)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -41,9 +44,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-476" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-21T18:15:13Z" diff --git a/advisories/unreviewed/2024/10/GHSA-74x7-28x6-q6gc/GHSA-74x7-28x6-q6gc.json b/advisories/unreviewed/2024/10/GHSA-74x7-28x6-q6gc/GHSA-74x7-28x6-q6gc.json new file mode 100644 index 00000000000..5aa4eb424f9 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-74x7-28x6-q6gc/GHSA-74x7-28x6-q6gc.json @@ -0,0 +1,55 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-74x7-28x6-q6gc", + "modified": "2024-10-24T18:30:43Z", + "published": "2024-10-24T18:30:43Z", + "aliases": [ + "CVE-2024-44206" + ], + "details": "An issue in the handling of URL protocols was addressed with improved logic. This issue is fixed in tvOS 17.6, visionOS 1.3, Safari 17.6, watchOS 10.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. A user may be able to bypass some web content restrictions.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-44206" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120909" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120911" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120913" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120914" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120915" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120916" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T17:15:16Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-76p7-pw4c-r85f/GHSA-76p7-pw4c-r85f.json b/advisories/unreviewed/2024/10/GHSA-76p7-pw4c-r85f/GHSA-76p7-pw4c-r85f.json index b8e57e5df3f..4b1de24619d 100644 --- a/advisories/unreviewed/2024/10/GHSA-76p7-pw4c-r85f/GHSA-76p7-pw4c-r85f.json +++ b/advisories/unreviewed/2024/10/GHSA-76p7-pw4c-r85f/GHSA-76p7-pw4c-r85f.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-76p7-pw4c-r85f", - "modified": "2024-10-21T21:30:53Z", + "modified": "2024-10-24T18:30:42Z", "published": "2024-10-21T21:30:53Z", "aliases": [ "CVE-2022-49032" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: health: afe4404: Fix oob read in afe4404_[read|write]_raw\n\nKASAN report out-of-bounds read as follows:\n\nBUG: KASAN: global-out-of-bounds in afe4404_read_raw+0x2ce/0x380\nRead of size 4 at addr ffffffffc00e4658 by task cat/278\n\nCall Trace:\n afe4404_read_raw\n iio_read_channel_info\n dev_attr_show\n\nThe buggy address belongs to the variable:\n afe4404_channel_leds+0x18/0xffffffffffffe9c0\n\nThis issue can be reproduce by singe command:\n\n $ cat /sys/bus/i2c/devices/0-0058/iio\\:device0/in_intensity6_raw\n\nThe array size of afe4404_channel_leds and afe4404_channel_offdacs\nare less than channels, so access with chan->address cause OOB read\nin afe4404_[read|write]_raw. Fix it by moving access before use them.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" + } ], "affected": [ @@ -53,9 +56,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-125" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-21T20:15:13Z" diff --git a/advisories/unreviewed/2024/10/GHSA-7797-cc95-p257/GHSA-7797-cc95-p257.json b/advisories/unreviewed/2024/10/GHSA-7797-cc95-p257/GHSA-7797-cc95-p257.json index 1cb0f0aca2b..72ceaa4a147 100644 --- a/advisories/unreviewed/2024/10/GHSA-7797-cc95-p257/GHSA-7797-cc95-p257.json +++ b/advisories/unreviewed/2024/10/GHSA-7797-cc95-p257/GHSA-7797-cc95-p257.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-7797-cc95-p257", - "modified": "2024-10-21T18:30:57Z", + "modified": "2024-10-24T18:30:41Z", "published": "2024-10-21T18:30:57Z", "aliases": [ "CVE-2024-49917" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn30_init_hw\n\nThis commit addresses a potential null pointer dereference issue in the\n`dcn30_init_hw` function. The issue could occur when `dc->clk_mgr` or\n`dc->clk_mgr->funcs` is null.\n\nThe fix adds a check to ensure `dc->clk_mgr` and `dc->clk_mgr->funcs` is\nnot null before accessing its functions. This prevents a potential null\npointer dereference.\n\nReported by smatch:\ndrivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn30/dcn30_hwseq.c:789 dcn30_init_hw() error: we previously assumed 'dc->clk_mgr' could be null (see line 628)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -33,9 +36,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-476" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-21T18:15:13Z" diff --git a/advisories/unreviewed/2024/10/GHSA-78cm-f398-h7cf/GHSA-78cm-f398-h7cf.json b/advisories/unreviewed/2024/10/GHSA-78cm-f398-h7cf/GHSA-78cm-f398-h7cf.json index 1819a304a6e..925a27043c9 100644 --- a/advisories/unreviewed/2024/10/GHSA-78cm-f398-h7cf/GHSA-78cm-f398-h7cf.json +++ b/advisories/unreviewed/2024/10/GHSA-78cm-f398-h7cf/GHSA-78cm-f398-h7cf.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-78cm-f398-h7cf", - "modified": "2024-10-21T21:30:54Z", + "modified": "2024-10-24T18:30:42Z", "published": "2024-10-21T21:30:54Z", "aliases": [ "CVE-2024-50057" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nusb: typec: tipd: Free IRQ only if it was requested before\n\nIn polling mode, if no IRQ was requested there is no need to free it.\nCall devm_free_irq() only if client->irq is set. This fixes the warning\ncaused by the tps6598x module removal:\n\nWARNING: CPU: 2 PID: 333 at kernel/irq/devres.c:144 devm_free_irq+0x80/0x8c\n...\n...\nCall trace:\n devm_free_irq+0x80/0x8c\n tps6598x_remove+0x28/0x88 [tps6598x]\n i2c_device_remove+0x2c/0x9c\n device_remove+0x4c/0x80\n device_release_driver_internal+0x1cc/0x228\n driver_detach+0x50/0x98\n bus_remove_driver+0x6c/0xbc\n driver_unregister+0x30/0x60\n i2c_del_driver+0x54/0x64\n tps6598x_i2c_driver_exit+0x18/0xc3c [tps6598x]\n __arm64_sys_delete_module+0x184/0x264\n invoke_syscall+0x48/0x110\n el0_svc_common.constprop.0+0xc8/0xe8\n do_el0_svc+0x20/0x2c\n el0_svc+0x28/0x98\n el0t_64_sync_handler+0x13c/0x158\n el0t_64_sync+0x190/0x194", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" + } ], "affected": [ @@ -33,9 +36,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-763" ], - "severity": null, + "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-21T20:15:17Z" diff --git a/advisories/unreviewed/2024/10/GHSA-873w-h9q5-86gx/GHSA-873w-h9q5-86gx.json b/advisories/unreviewed/2024/10/GHSA-873w-h9q5-86gx/GHSA-873w-h9q5-86gx.json new file mode 100644 index 00000000000..1960a4e5d7f --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-873w-h9q5-86gx/GHSA-873w-h9q5-86gx.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-873w-h9q5-86gx", + "modified": "2024-10-24T18:30:44Z", + "published": "2024-10-24T18:30:44Z", + "aliases": [ + "CVE-2024-48548" + ], + "details": "The APK file in Cloud Smart Lock v2.0.1 has a leaked a URL that can call an API for binding physical devices. This vulnerability allows attackers to arbitrarily construct a request to use the app to bind to unknown devices by finding a valid serial number via a bruteforce attack.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48548" + }, + { + "type": "WEB", + "url": "https://cloudsmartlock.com/m/app.html" + }, + { + "type": "WEB", + "url": "https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.seamooncloud.cloudsmartlock/com.seamooncloud.cloudsmartlock.md" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T17:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-8qg5-7fvg-hrc7/GHSA-8qg5-7fvg-hrc7.json b/advisories/unreviewed/2024/10/GHSA-8qg5-7fvg-hrc7/GHSA-8qg5-7fvg-hrc7.json new file mode 100644 index 00000000000..058f85b5cbe --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-8qg5-7fvg-hrc7/GHSA-8qg5-7fvg-hrc7.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8qg5-7fvg-hrc7", + "modified": "2024-10-24T18:30:43Z", + "published": "2024-10-24T18:30:43Z", + "aliases": [ + "CVE-2024-48542" + ], + "details": "Incorrect access control in the firmware update and download processes of Yamaha Headphones Controller v1.6.7 allows attackers to access sensitive information by analyzing the code and data within the APK file.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48542" + }, + { + "type": "WEB", + "url": "https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.yamaha.sc.hpcontroller/com.yamaha.sc.hpcontroller.md" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T17:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-992g-jf7j-f3wc/GHSA-992g-jf7j-f3wc.json b/advisories/unreviewed/2024/10/GHSA-992g-jf7j-f3wc/GHSA-992g-jf7j-f3wc.json index 95f44153056..8fe857bdbf0 100644 --- a/advisories/unreviewed/2024/10/GHSA-992g-jf7j-f3wc/GHSA-992g-jf7j-f3wc.json +++ b/advisories/unreviewed/2024/10/GHSA-992g-jf7j-f3wc/GHSA-992g-jf7j-f3wc.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-992g-jf7j-f3wc", - "modified": "2024-10-21T12:30:56Z", + "modified": "2024-10-24T18:30:41Z", "published": "2024-10-21T12:30:55Z", "aliases": [ "CVE-2024-47718" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: rtw88: always wait for both firmware loading attempts\n\nIn 'rtw_wait_firmware_completion()', always wait for both (regular and\nwowlan) firmware loading attempts. Otherwise if 'rtw_usb_intf_init()'\nhas failed in 'rtw_usb_probe()', 'rtw_usb_disconnect()' may issue\n'ieee80211_free_hw()' when one of 'rtw_load_firmware_cb()' (usually\nthe wowlan one) is still in progress, causing UAF detected by KASAN.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -49,9 +52,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-416" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-21T12:15:08Z" diff --git a/advisories/unreviewed/2024/10/GHSA-c844-5xj7-6j82/GHSA-c844-5xj7-6j82.json b/advisories/unreviewed/2024/10/GHSA-c844-5xj7-6j82/GHSA-c844-5xj7-6j82.json new file mode 100644 index 00000000000..171c4db5b00 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-c844-5xj7-6j82/GHSA-c844-5xj7-6j82.json @@ -0,0 +1,43 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-c844-5xj7-6j82", + "modified": "2024-10-24T18:30:43Z", + "published": "2024-10-24T18:30:43Z", + "aliases": [ + "CVE-2024-48539" + ], + "details": "Neye3C v4.5.2.0 was discovered to contain a hardcoded encryption key in the firmware update mechanism.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48539" + }, + { + "type": "WEB", + "url": "https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.gooclient.anycam.neye3ctwo/com.gooclient.anycam.neye3ctwo_key.md" + }, + { + "type": "WEB", + "url": "http://neye3c.com" + }, + { + "type": "WEB", + "url": "http://www.netdvr.cn/page6" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T17:15:16Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-cwvq-5588-g9v5/GHSA-cwvq-5588-g9v5.json b/advisories/unreviewed/2024/10/GHSA-cwvq-5588-g9v5/GHSA-cwvq-5588-g9v5.json new file mode 100644 index 00000000000..35fde3072f7 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-cwvq-5588-g9v5/GHSA-cwvq-5588-g9v5.json @@ -0,0 +1,58 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cwvq-5588-g9v5", + "modified": "2024-10-24T18:30:42Z", + "published": "2024-10-24T18:30:42Z", + "aliases": [ + "CVE-2024-10335" + ], + "details": "A vulnerability was found in SourceCodester Garbage Collection Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The initial researcher advisory only mentions the parameter \"username\" to be affected. But it must be assumed that the parameter \"password\" is affected as well.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10335" + }, + { + "type": "WEB", + "url": "https://github.com/tang-0717/VUL/blob/main/Garbage-Collection-Management-System-01.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.281680" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.281680" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.427439" + }, + { + "type": "WEB", + "url": "https://www.sourcecodester.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T17:15:14Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-f3wc-386p-mwc3/GHSA-f3wc-386p-mwc3.json b/advisories/unreviewed/2024/10/GHSA-f3wc-386p-mwc3/GHSA-f3wc-386p-mwc3.json index 2e1637cd4d4..e0db64f137c 100644 --- a/advisories/unreviewed/2024/10/GHSA-f3wc-386p-mwc3/GHSA-f3wc-386p-mwc3.json +++ b/advisories/unreviewed/2024/10/GHSA-f3wc-386p-mwc3/GHSA-f3wc-386p-mwc3.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-f3wc-386p-mwc3", - "modified": "2024-10-21T15:32:26Z", + "modified": "2024-10-24T18:30:41Z", "published": "2024-10-21T15:32:26Z", "aliases": [ "CVE-2024-47723" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: fix out-of-bounds in dbNextAG() and diAlloc()\n\nIn dbNextAG() , there is no check for the case where bmp->db_numag is\ngreater or same than MAXAG due to a polluted image, which causes an\nout-of-bounds. Therefore, a bounds check should be added in dbMount().\n\nAnd in dbNextAG(), a check for the case where agpref is greater than\nbmp->db_numag should be added, so an out-of-bounds exception should be\nprevented.\n\nAdditionally, a check for the case where agno is greater or same than\nMAXAG should be added in diAlloc() to prevent out-of-bounds.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" + } ], "affected": [ @@ -49,9 +52,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-125" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-21T13:15:02Z" diff --git a/advisories/unreviewed/2024/10/GHSA-f475-gxvf-mp72/GHSA-f475-gxvf-mp72.json b/advisories/unreviewed/2024/10/GHSA-f475-gxvf-mp72/GHSA-f475-gxvf-mp72.json new file mode 100644 index 00000000000..1e1d3471c33 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-f475-gxvf-mp72/GHSA-f475-gxvf-mp72.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f475-gxvf-mp72", + "modified": "2024-10-24T18:30:44Z", + "published": "2024-10-24T18:30:44Z", + "aliases": [ + "CVE-2024-48546" + ], + "details": "Incorrect access control in the firmware update and download processes of Wear Sync v1.2.0 allows attackers to access sensitive information by analyzing the code and data within the APK file.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48546" + }, + { + "type": "WEB", + "url": "https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.yingsheng.nadai/com.yingsheng.nadai.md" + }, + { + "type": "WEB", + "url": "https://haylou.com" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T17:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-f6rp-5fm6-qmhw/GHSA-f6rp-5fm6-qmhw.json b/advisories/unreviewed/2024/10/GHSA-f6rp-5fm6-qmhw/GHSA-f6rp-5fm6-qmhw.json new file mode 100644 index 00000000000..8519e2db2ee --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-f6rp-5fm6-qmhw/GHSA-f6rp-5fm6-qmhw.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f6rp-5fm6-qmhw", + "modified": "2024-10-24T18:30:43Z", + "published": "2024-10-24T18:30:43Z", + "aliases": [ + "CVE-2024-48544" + ], + "details": "Incorrect access control in the firmware update and download processes of Sylvania Smart Home v3.0.3 allows attackers to access sensitive information by analyzing the code and data within the APK file.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48544" + }, + { + "type": "WEB", + "url": "https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.ledvance.smartplus/com.ledvance.smartplus.md" + }, + { + "type": "WEB", + "url": "http://sylvania.com" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T17:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-g747-hj2w-g9w7/GHSA-g747-hj2w-g9w7.json b/advisories/unreviewed/2024/10/GHSA-g747-hj2w-g9w7/GHSA-g747-hj2w-g9w7.json index f968c1802d1..3c9933e409a 100644 --- a/advisories/unreviewed/2024/10/GHSA-g747-hj2w-g9w7/GHSA-g747-hj2w-g9w7.json +++ b/advisories/unreviewed/2024/10/GHSA-g747-hj2w-g9w7/GHSA-g747-hj2w-g9w7.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-g747-hj2w-g9w7", - "modified": "2024-10-24T09:31:00Z", + "modified": "2024-10-24T18:30:42Z", "published": "2024-10-24T09:31:00Z", "aliases": [ "CVE-2024-6049" ], "details": "The web server of Lawo AG vsm LTC Time Sync (vTimeSync) is affected by a \"...\" (triple dot) path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacker could download arbitrary files from the operating system. As a limitation, the exploitation is only possible if the requested file has some file extension, e. g. .exe or .txt.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ "CWE-32" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-24T08:15:02Z" diff --git a/advisories/unreviewed/2024/10/GHSA-g8v9-c8m3-942v/GHSA-g8v9-c8m3-942v.json b/advisories/unreviewed/2024/10/GHSA-g8v9-c8m3-942v/GHSA-g8v9-c8m3-942v.json new file mode 100644 index 00000000000..73d8a951d1b --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-g8v9-c8m3-942v/GHSA-g8v9-c8m3-942v.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-g8v9-c8m3-942v", + "modified": "2024-10-24T18:30:44Z", + "published": "2024-10-24T18:30:44Z", + "aliases": [ + "CVE-2024-48514" + ], + "details": "php-heic-to-jpg <= 1.0.5 is vulnerable to remote code execution. An attacker who can upload heic images is able to execute code on the remote server via the file name. As a result, the CIA is no longer guaranteed. This affects php-heic-to-jpg 1.0.5 and below.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48514" + }, + { + "type": "WEB", + "url": "https://github.com/MaestroError/php-heic-to-jpg" + }, + { + "type": "WEB", + "url": "https://github.com/marcoris/CVEs/tree/master/CVE-2024-48514" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T18:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-g9mh-3crx-2qvf/GHSA-g9mh-3crx-2qvf.json b/advisories/unreviewed/2024/10/GHSA-g9mh-3crx-2qvf/GHSA-g9mh-3crx-2qvf.json index b4c4513a4b7..20f28a70695 100644 --- a/advisories/unreviewed/2024/10/GHSA-g9mh-3crx-2qvf/GHSA-g9mh-3crx-2qvf.json +++ b/advisories/unreviewed/2024/10/GHSA-g9mh-3crx-2qvf/GHSA-g9mh-3crx-2qvf.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-g9mh-3crx-2qvf", - "modified": "2024-10-21T18:30:57Z", + "modified": "2024-10-24T18:30:41Z", "published": "2024-10-21T18:30:57Z", "aliases": [ "CVE-2024-49914" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add null check for pipe_ctx->plane_state in dcn20_program_pipe\n\nThis commit addresses a null pointer dereference issue in the\n`dcn20_program_pipe` function. The issue could occur when\n`pipe_ctx->plane_state` is null.\n\nThe fix adds a check to ensure `pipe_ctx->plane_state` is not null\nbefore accessing. This prevents a null pointer dereference.\n\nReported by smatch:\ndrivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn20/dcn20_hwseq.c:1925 dcn20_program_pipe() error: we previously assumed 'pipe_ctx->plane_state' could be null (see line 1877)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-476" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-21T18:15:13Z" diff --git a/advisories/unreviewed/2024/10/GHSA-ghfq-rw9q-gx67/GHSA-ghfq-rw9q-gx67.json b/advisories/unreviewed/2024/10/GHSA-ghfq-rw9q-gx67/GHSA-ghfq-rw9q-gx67.json new file mode 100644 index 00000000000..042de0f08fc --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-ghfq-rw9q-gx67/GHSA-ghfq-rw9q-gx67.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-ghfq-rw9q-gx67", + "modified": "2024-10-24T18:30:42Z", + "published": "2024-10-24T18:30:42Z", + "aliases": [ + "CVE-2024-44141" + ], + "details": "The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.6. A person with physical access to an unlocked Mac may be able to gain root code execution.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-44141" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120911" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T17:15:16Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-hf7q-jwrv-vq2r/GHSA-hf7q-jwrv-vq2r.json b/advisories/unreviewed/2024/10/GHSA-hf7q-jwrv-vq2r/GHSA-hf7q-jwrv-vq2r.json new file mode 100644 index 00000000000..7128614bb5e --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-hf7q-jwrv-vq2r/GHSA-hf7q-jwrv-vq2r.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hf7q-jwrv-vq2r", + "modified": "2024-10-24T18:30:44Z", + "published": "2024-10-24T18:30:44Z", + "aliases": [ + "CVE-2024-9692" + ], + "details": "VIMESA VHF/FM Transmitter Blue Plus is suffering from a Denial-of-Service (DoS) vulnerability. An unauthenticated attacker can issue an unauthorized HTTP GET request to the unprotected endpoint 'doreboot' and restart the transmitter operations.", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-9692" + }, + { + "type": "WEB", + "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-298-01" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-284" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T17:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-hqr5-gxvv-5ff4/GHSA-hqr5-gxvv-5ff4.json b/advisories/unreviewed/2024/10/GHSA-hqr5-gxvv-5ff4/GHSA-hqr5-gxvv-5ff4.json new file mode 100644 index 00000000000..a126c44dcbc --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-hqr5-gxvv-5ff4/GHSA-hqr5-gxvv-5ff4.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hqr5-gxvv-5ff4", + "modified": "2024-10-24T18:30:44Z", + "published": "2024-10-24T18:30:44Z", + "aliases": [ + "CVE-2024-10313" + ], + "details": "iniNet Solutions SpiderControl SCADA PC HMI Editor has a path traversal \nvulnerability. When the software loads a malicious ‘ems' project \ntemplate file constructed by an attacker, it can write files to \narbitrary directories. This can lead to overwriting system files, \ncausing system paralysis, or writing to startup items, resulting in \nremote control.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10313" + }, + { + "type": "WEB", + "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-298-02" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-22" + ], + "severity": "HIGH", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T18:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-m3j4-g8xg-cfh9/GHSA-m3j4-g8xg-cfh9.json b/advisories/unreviewed/2024/10/GHSA-m3j4-g8xg-cfh9/GHSA-m3j4-g8xg-cfh9.json new file mode 100644 index 00000000000..1e26de20d5c --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-m3j4-g8xg-cfh9/GHSA-m3j4-g8xg-cfh9.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-m3j4-g8xg-cfh9", + "modified": "2024-10-24T18:30:44Z", + "published": "2024-10-24T18:30:44Z", + "aliases": [ + "CVE-2024-38314" + ], + "details": "IBM Maximo Application Suite - Monitor Component 8.10, 8.11, and 9.0 could disclose information in the form of the hard-coded cryptographic key to an attacker that has compromised environment.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-38314" + }, + { + "type": "WEB", + "url": "https://www.ibm.com/support/pages/node/7173988" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-321" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T18:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-m584-rmpj-6q5p/GHSA-m584-rmpj-6q5p.json b/advisories/unreviewed/2024/10/GHSA-m584-rmpj-6q5p/GHSA-m584-rmpj-6q5p.json new file mode 100644 index 00000000000..8c575a5226b --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-m584-rmpj-6q5p/GHSA-m584-rmpj-6q5p.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-m584-rmpj-6q5p", + "modified": "2024-10-24T18:30:44Z", + "published": "2024-10-24T18:30:44Z", + "aliases": [ + "CVE-2024-48440" + ], + "details": "Shenzhen Tuoshi Network Communications Co.,Ltd 5G CPE Router NR500-EA RG500UEAABxCOMSLICv3.2.2543.12.18 was discovered to contain a command injection vulnerability via the component at_command.asp.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48440" + }, + { + "type": "WEB", + "url": "https://medium.com/%40sengkyaut/unauthenticated-factory-mode-reset-and-at-command-injection-in-jboneos-or-jbonecloud-firmware-1dec156b7ddd" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T18:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-mx4x-5r76-88fj/GHSA-mx4x-5r76-88fj.json b/advisories/unreviewed/2024/10/GHSA-mx4x-5r76-88fj/GHSA-mx4x-5r76-88fj.json index a989a69e143..f6f8abb72ed 100644 --- a/advisories/unreviewed/2024/10/GHSA-mx4x-5r76-88fj/GHSA-mx4x-5r76-88fj.json +++ b/advisories/unreviewed/2024/10/GHSA-mx4x-5r76-88fj/GHSA-mx4x-5r76-88fj.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-mx4x-5r76-88fj", - "modified": "2024-10-24T00:33:36Z", + "modified": "2024-10-24T18:30:42Z", "published": "2024-10-24T00:33:36Z", "aliases": [ "CVE-2024-40432" ], "details": "A lack of input validation in Realtek SD card reader driver before 10.0.26100.21374 through the implementation of the IOCTL_SFFDISK_DEVICE_COMMAND control of the SD card reader driver allows a privileged attacker to crash the OS.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -27,7 +30,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-23T22:15:02Z" diff --git a/advisories/unreviewed/2024/10/GHSA-p6fr-2gc5-4g3w/GHSA-p6fr-2gc5-4g3w.json b/advisories/unreviewed/2024/10/GHSA-p6fr-2gc5-4g3w/GHSA-p6fr-2gc5-4g3w.json new file mode 100644 index 00000000000..569175b4b2b --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-p6fr-2gc5-4g3w/GHSA-p6fr-2gc5-4g3w.json @@ -0,0 +1,50 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-p6fr-2gc5-4g3w", + "modified": "2024-10-24T18:30:44Z", + "published": "2024-10-24T18:30:44Z", + "aliases": [ + "CVE-2024-10337" + ], + "details": "A vulnerability classified as critical has been found in SourceCodeHero Clothes Recommendation System 1.0. Affected is an unknown function of the file /admin/home.php?con=add. The manipulation of the argument cat/subcat/ t1/t2/text leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10337" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.281682" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.281682" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.427443" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T18:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-p9jh-f6vr-wxj3/GHSA-p9jh-f6vr-wxj3.json b/advisories/unreviewed/2024/10/GHSA-p9jh-f6vr-wxj3/GHSA-p9jh-f6vr-wxj3.json new file mode 100644 index 00000000000..453d1fd6eae --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-p9jh-f6vr-wxj3/GHSA-p9jh-f6vr-wxj3.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-p9jh-f6vr-wxj3", + "modified": "2024-10-24T18:30:44Z", + "published": "2024-10-24T18:30:44Z", + "aliases": [ + "CVE-2024-46478" + ], + "details": "HTMLDOC v1.9.18 contains a buffer overflow in parse_pre function,ps-pdf.cxx:5681.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-46478" + }, + { + "type": "WEB", + "url": "https://github.com/michaelrsweet/htmldoc/issues/529" + }, + { + "type": "WEB", + "url": "https://github.com/michaelrsweet/htmldoc/commit/683bec548e642cf4a17e003fb34f6bbaf2d27b98" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T18:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-pgjc-h8g4-v6j2/GHSA-pgjc-h8g4-v6j2.json b/advisories/unreviewed/2024/10/GHSA-pgjc-h8g4-v6j2/GHSA-pgjc-h8g4-v6j2.json index 021a1bb25bc..d9ac16879a6 100644 --- a/advisories/unreviewed/2024/10/GHSA-pgjc-h8g4-v6j2/GHSA-pgjc-h8g4-v6j2.json +++ b/advisories/unreviewed/2024/10/GHSA-pgjc-h8g4-v6j2/GHSA-pgjc-h8g4-v6j2.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-pgjc-h8g4-v6j2", - "modified": "2024-10-21T18:30:57Z", + "modified": "2024-10-24T18:30:42Z", "published": "2024-10-21T18:30:57Z", "aliases": [ "CVE-2024-49918" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add null check for head_pipe in dcn32_acquire_idle_pipe_for_head_pipe_in_layer\n\nThis commit addresses a potential null pointer dereference issue in the\n`dcn32_acquire_idle_pipe_for_head_pipe_in_layer` function. The issue\ncould occur when `head_pipe` is null.\n\nThe fix adds a check to ensure `head_pipe` is not null before asserting\nit. If `head_pipe` is null, the function returns NULL to prevent a\npotential null pointer dereference.\n\nReported by smatch:\ndrivers/gpu/drm/amd/amdgpu/../display/dc/resource/dcn32/dcn32_resource.c:2690 dcn32_acquire_idle_pipe_for_head_pipe_in_layer() error: we previously assumed 'head_pipe' could be null (see line 2681)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -33,9 +36,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-476" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-21T18:15:14Z" diff --git a/advisories/unreviewed/2024/10/GHSA-pmp7-4p22-ggcc/GHSA-pmp7-4p22-ggcc.json b/advisories/unreviewed/2024/10/GHSA-pmp7-4p22-ggcc/GHSA-pmp7-4p22-ggcc.json new file mode 100644 index 00000000000..66eefafe41e --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-pmp7-4p22-ggcc/GHSA-pmp7-4p22-ggcc.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-pmp7-4p22-ggcc", + "modified": "2024-10-24T18:30:44Z", + "published": "2024-10-24T18:30:43Z", + "aliases": [ + "CVE-2024-48547" + ], + "details": "Incorrect access control in the firmware update and download processes of DreamCatcher Life v1.8.7 allows attackers to access sensitive information by analyzing the code and data within the APK file.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48547" + }, + { + "type": "WEB", + "url": "https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.dc.dreamcatcherlife/com.dc.dreamcatcherlife.md" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T17:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-q5j5-g96w-h2x7/GHSA-q5j5-g96w-h2x7.json b/advisories/unreviewed/2024/10/GHSA-q5j5-g96w-h2x7/GHSA-q5j5-g96w-h2x7.json new file mode 100644 index 00000000000..3dbfe01af86 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-q5j5-g96w-h2x7/GHSA-q5j5-g96w-h2x7.json @@ -0,0 +1,51 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-q5j5-g96w-h2x7", + "modified": "2024-10-24T18:30:43Z", + "published": "2024-10-24T18:30:43Z", + "aliases": [ + "CVE-2024-44205" + ], + "details": "A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.6.8, macOS Monterey 12.7.6, iOS 16.7.9 and iPadOS 16.7.9, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. A sandboxed app may be able to access sensitive user data in system logs.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-44205" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120908" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120909" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120910" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120911" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120912" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T17:15:16Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-q5m4-m8x7-8pj5/GHSA-q5m4-m8x7-8pj5.json b/advisories/unreviewed/2024/10/GHSA-q5m4-m8x7-8pj5/GHSA-q5m4-m8x7-8pj5.json new file mode 100644 index 00000000000..d32867495bd --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-q5m4-m8x7-8pj5/GHSA-q5m4-m8x7-8pj5.json @@ -0,0 +1,50 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-q5m4-m8x7-8pj5", + "modified": "2024-10-24T18:30:44Z", + "published": "2024-10-24T18:30:44Z", + "aliases": [ + "CVE-2024-10338" + ], + "details": "A vulnerability classified as critical was found in SourceCodeHero Clothes Recommendation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/home.php. The manipulation of the argument view/view1 leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10338" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.281683" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.281683" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.427447" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T18:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-qh7g-57ww-6fq4/GHSA-qh7g-57ww-6fq4.json b/advisories/unreviewed/2024/10/GHSA-qh7g-57ww-6fq4/GHSA-qh7g-57ww-6fq4.json new file mode 100644 index 00000000000..7b0ecd56571 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-qh7g-57ww-6fq4/GHSA-qh7g-57ww-6fq4.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qh7g-57ww-6fq4", + "modified": "2024-10-24T18:30:44Z", + "published": "2024-10-24T18:30:44Z", + "aliases": [ + "CVE-2024-10295" + ], + "details": "A flaw was found in Gateway. Sending a non-base64 'basic' auth with special characters can cause APICast to incorrectly authenticate a request. A malformed basic authentication header containing special characters bypasses authentication and allows unauthorized access to the backend. This issue can occur due to a failure in the base64 decoding process, which causes APICast to skip the rest of the authentication checks and proceed with routing the request upstream.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10295" + }, + { + "type": "WEB", + "url": "https://access.redhat.com/security/cve/CVE-2024-10295" + }, + { + "type": "WEB", + "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2321258" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T18:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-qm7g-8chp-cj2j/GHSA-qm7g-8chp-cj2j.json b/advisories/unreviewed/2024/10/GHSA-qm7g-8chp-cj2j/GHSA-qm7g-8chp-cj2j.json index 351d828d641..574041c67a5 100644 --- a/advisories/unreviewed/2024/10/GHSA-qm7g-8chp-cj2j/GHSA-qm7g-8chp-cj2j.json +++ b/advisories/unreviewed/2024/10/GHSA-qm7g-8chp-cj2j/GHSA-qm7g-8chp-cj2j.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-qm7g-8chp-cj2j", - "modified": "2024-10-24T06:30:29Z", + "modified": "2024-10-24T18:30:42Z", "published": "2024-10-24T06:30:29Z", "aliases": [ "CVE-2024-40595" ], "details": "An authentication-bypass issue in the RDP component of One Identity Safeguard for Privileged Sessions (SPS) On Premise before 7.5.1 (and LTS before 7.0.5.1) allows man-in-the-middle attackers to obtain access to privileged sessions on target resources by intercepting cleartext RDP protocol information.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-319" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-24T06:15:11Z" diff --git a/advisories/unreviewed/2024/10/GHSA-r8mm-hp23-g238/GHSA-r8mm-hp23-g238.json b/advisories/unreviewed/2024/10/GHSA-r8mm-hp23-g238/GHSA-r8mm-hp23-g238.json new file mode 100644 index 00000000000..10b4d1ebdb4 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-r8mm-hp23-g238/GHSA-r8mm-hp23-g238.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-r8mm-hp23-g238", + "modified": "2024-10-24T18:30:42Z", + "published": "2024-10-24T18:30:42Z", + "aliases": [ + "CVE-2024-40810" + ], + "details": "An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sonoma 14.6. An app may be able to cause a coprocessor crash.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40810" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120911" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T17:15:16Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-rm44-23mc-xq5w/GHSA-rm44-23mc-xq5w.json b/advisories/unreviewed/2024/10/GHSA-rm44-23mc-xq5w/GHSA-rm44-23mc-xq5w.json index d0592f6b0b0..fd5c9651d21 100644 --- a/advisories/unreviewed/2024/10/GHSA-rm44-23mc-xq5w/GHSA-rm44-23mc-xq5w.json +++ b/advisories/unreviewed/2024/10/GHSA-rm44-23mc-xq5w/GHSA-rm44-23mc-xq5w.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-rm44-23mc-xq5w", - "modified": "2024-10-21T21:30:52Z", + "modified": "2024-10-24T18:30:42Z", "published": "2024-10-21T21:30:52Z", "aliases": [ "CVE-2022-49014" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: tun: Fix use-after-free in tun_detach()\n\nsyzbot reported use-after-free in tun_detach() [1]. This causes call\ntrace like below:\n\n==================================================================\nBUG: KASAN: use-after-free in notifier_call_chain+0x1ee/0x200 kernel/notifier.c:75\nRead of size 8 at addr ffff88807324e2a8 by task syz-executor.0/3673\n\nCPU: 0 PID: 3673 Comm: syz-executor.0 Not tainted 6.1.0-rc5-syzkaller-00044-gcc675d22e422 #0\nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022\nCall Trace:\n \n __dump_stack lib/dump_stack.c:88 [inline]\n dump_stack_lvl+0xd1/0x138 lib/dump_stack.c:106\n print_address_description mm/kasan/report.c:284 [inline]\n print_report+0x15e/0x461 mm/kasan/report.c:395\n kasan_report+0xbf/0x1f0 mm/kasan/report.c:495\n notifier_call_chain+0x1ee/0x200 kernel/notifier.c:75\n call_netdevice_notifiers_info+0x86/0x130 net/core/dev.c:1942\n call_netdevice_notifiers_extack net/core/dev.c:1983 [inline]\n call_netdevice_notifiers net/core/dev.c:1997 [inline]\n netdev_wait_allrefs_any net/core/dev.c:10237 [inline]\n netdev_run_todo+0xbc6/0x1100 net/core/dev.c:10351\n tun_detach drivers/net/tun.c:704 [inline]\n tun_chr_close+0xe4/0x190 drivers/net/tun.c:3467\n __fput+0x27c/0xa90 fs/file_table.c:320\n task_work_run+0x16f/0x270 kernel/task_work.c:179\n exit_task_work include/linux/task_work.h:38 [inline]\n do_exit+0xb3d/0x2a30 kernel/exit.c:820\n do_group_exit+0xd4/0x2a0 kernel/exit.c:950\n get_signal+0x21b1/0x2440 kernel/signal.c:2858\n arch_do_signal_or_restart+0x86/0x2300 arch/x86/kernel/signal.c:869\n exit_to_user_mode_loop kernel/entry/common.c:168 [inline]\n exit_to_user_mode_prepare+0x15f/0x250 kernel/entry/common.c:203\n __syscall_exit_to_user_mode_work kernel/entry/common.c:285 [inline]\n syscall_exit_to_user_mode+0x1d/0x50 kernel/entry/common.c:296\n do_syscall_64+0x46/0xb0 arch/x86/entry/common.c:86\n entry_SYSCALL_64_after_hwframe+0x63/0xcd\n\nThe cause of the issue is that sock_put() from __tun_detach() drops\nlast reference count for struct net, and then notifier_call_chain()\nfrom netdev_state_change() accesses that struct net.\n\nThis patch fixes the issue by calling sock_put() from tun_detach()\nafter all necessary accesses for the struct net has done.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -45,9 +48,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-416" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-21T20:15:12Z" diff --git a/advisories/unreviewed/2024/10/GHSA-rqg9-48mq-4pm8/GHSA-rqg9-48mq-4pm8.json b/advisories/unreviewed/2024/10/GHSA-rqg9-48mq-4pm8/GHSA-rqg9-48mq-4pm8.json index 11a2486d68d..740d7b8354b 100644 --- a/advisories/unreviewed/2024/10/GHSA-rqg9-48mq-4pm8/GHSA-rqg9-48mq-4pm8.json +++ b/advisories/unreviewed/2024/10/GHSA-rqg9-48mq-4pm8/GHSA-rqg9-48mq-4pm8.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-rqg9-48mq-4pm8", - "modified": "2024-10-21T18:30:57Z", + "modified": "2024-10-24T18:30:41Z", "published": "2024-10-21T18:30:57Z", "aliases": [ "CVE-2024-49916" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Add NULL check for clk_mgr and clk_mgr->funcs in dcn401_init_hw\n\nThis commit addresses a potential null pointer dereference issue in the\n`dcn401_init_hw` function. The issue could occur when `dc->clk_mgr` or\n`dc->clk_mgr->funcs` is null.\n\nThe fix adds a check to ensure `dc->clk_mgr` and `dc->clk_mgr->funcs` is\nnot null before accessing its functions. This prevents a potential null\npointer dereference.\n\nReported by smatch:\ndrivers/gpu/drm/amd/amdgpu/../display/dc/hwss/dcn401/dcn401_hwseq.c:416 dcn401_init_hw() error: we previously assumed 'dc->clk_mgr' could be null (see line 225)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-476" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-21T18:15:13Z" diff --git a/advisories/unreviewed/2024/10/GHSA-vj24-j7x3-73cw/GHSA-vj24-j7x3-73cw.json b/advisories/unreviewed/2024/10/GHSA-vj24-j7x3-73cw/GHSA-vj24-j7x3-73cw.json new file mode 100644 index 00000000000..bc11a3e25b6 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-vj24-j7x3-73cw/GHSA-vj24-j7x3-73cw.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-vj24-j7x3-73cw", + "modified": "2024-10-24T18:30:44Z", + "published": "2024-10-24T18:30:44Z", + "aliases": [ + "CVE-2024-48442" + ], + "details": "Incorrect access control in Shenzhen Tuoshi Network Communications Co.,Ltd 5G CPE Router NR500-EA RG500UEAABxCOMSLICv3.2.2543.12.18 allows attackers to access the SSH protocol without authentication.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48442" + }, + { + "type": "WEB", + "url": "https://medium.com/%40sengkyaut/unauthenticated-factory-mode-reset-and-at-command-injection-in-jboneos-or-jbonecloud-firmware-1dec156b7ddd" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T18:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-w33f-jr3x-9vjf/GHSA-w33f-jr3x-9vjf.json b/advisories/unreviewed/2024/10/GHSA-w33f-jr3x-9vjf/GHSA-w33f-jr3x-9vjf.json new file mode 100644 index 00000000000..a4f74ebaa6a --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-w33f-jr3x-9vjf/GHSA-w33f-jr3x-9vjf.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w33f-jr3x-9vjf", + "modified": "2024-10-24T18:30:43Z", + "published": "2024-10-24T18:30:43Z", + "aliases": [ + "CVE-2024-48540" + ], + "details": "Incorrect access control in XIAO HE Smart 4.3.1 allows attackers to access sensitive information by analyzing the code and data within the APK file.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48540" + }, + { + "type": "WEB", + "url": "https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.hle.china.smarthome.xiaohe/com.hle.china.smarthome.xiaohe.md" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T17:15:16Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-wm5f-4g6v-fm7r/GHSA-wm5f-4g6v-fm7r.json b/advisories/unreviewed/2024/10/GHSA-wm5f-4g6v-fm7r/GHSA-wm5f-4g6v-fm7r.json index 8fb2f4ea86f..77373b2c98a 100644 --- a/advisories/unreviewed/2024/10/GHSA-wm5f-4g6v-fm7r/GHSA-wm5f-4g6v-fm7r.json +++ b/advisories/unreviewed/2024/10/GHSA-wm5f-4g6v-fm7r/GHSA-wm5f-4g6v-fm7r.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-wm5f-4g6v-fm7r", - "modified": "2024-10-21T21:30:53Z", + "modified": "2024-10-24T18:30:42Z", "published": "2024-10-21T21:30:52Z", "aliases": [ "CVE-2022-49029" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: (ibmpex) Fix possible UAF when ibmpex_register_bmc() fails\n\nSmatch report warning as follows:\n\ndrivers/hwmon/ibmpex.c:509 ibmpex_register_bmc() warn:\n '&data->list' not removed from list\n\nIf ibmpex_find_sensors() fails in ibmpex_register_bmc(), data will\nbe freed, but data->list will not be removed from driver_data.bmc_data,\nthen list traversal may cause UAF.\n\nFix by removeing it from driver_data.bmc_data before free().", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -53,9 +56,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-416" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-10-21T20:15:13Z" diff --git a/advisories/unreviewed/2024/10/GHSA-wp73-c4gh-8ccr/GHSA-wp73-c4gh-8ccr.json b/advisories/unreviewed/2024/10/GHSA-wp73-c4gh-8ccr/GHSA-wp73-c4gh-8ccr.json new file mode 100644 index 00000000000..2c8a4f7feaa --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-wp73-c4gh-8ccr/GHSA-wp73-c4gh-8ccr.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wp73-c4gh-8ccr", + "modified": "2024-10-24T18:30:43Z", + "published": "2024-10-24T18:30:43Z", + "aliases": [ + "CVE-2024-48541" + ], + "details": "Incorrect access control in the firmware update and download processes of Ruochan Smart v4.4.7 allows attackers to access sensitive information by analyzing the code and data within the APK file.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-48541" + }, + { + "type": "WEB", + "url": "https://github.com/HankJames/Vul-Reports/blob/main/FirmwareLeakage/com.ruochan.dabai/com.ruochan.dabai.md" + }, + { + "type": "WEB", + "url": "http://www.ruochanit.com" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T17:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-wr7g-h8v6-w795/GHSA-wr7g-h8v6-w795.json b/advisories/unreviewed/2024/10/GHSA-wr7g-h8v6-w795/GHSA-wr7g-h8v6-w795.json new file mode 100644 index 00000000000..b80e9ff4a11 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-wr7g-h8v6-w795/GHSA-wr7g-h8v6-w795.json @@ -0,0 +1,50 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-wr7g-h8v6-w795", + "modified": "2024-10-24T18:30:43Z", + "published": "2024-10-24T18:30:42Z", + "aliases": [ + "CVE-2024-10336" + ], + "details": "A vulnerability was found in SourceCodeHero Clothes Recommendation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/index.php of the component Admin Login Page. The manipulation of the argument t1 leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-10336" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.281681" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.281681" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.427442" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T17:15:15Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/10/GHSA-xjj4-3gwf-mwqh/GHSA-xjj4-3gwf-mwqh.json b/advisories/unreviewed/2024/10/GHSA-xjj4-3gwf-mwqh/GHSA-xjj4-3gwf-mwqh.json new file mode 100644 index 00000000000..ab4114e8d99 --- /dev/null +++ b/advisories/unreviewed/2024/10/GHSA-xjj4-3gwf-mwqh/GHSA-xjj4-3gwf-mwqh.json @@ -0,0 +1,55 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-xjj4-3gwf-mwqh", + "modified": "2024-10-24T18:30:43Z", + "published": "2024-10-24T18:30:43Z", + "aliases": [ + "CVE-2024-44185" + ], + "details": "The issue was addressed with improved checks. This issue is fixed in tvOS 17.6, visionOS 1.3, Safari 17.6, watchOS 10.6, iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6. Processing maliciously crafted web content may lead to an unexpected process crash.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-44185" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120909" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120911" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120913" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120914" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120915" + }, + { + "type": "WEB", + "url": "https://support.apple.com/en-us/120916" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-10-24T17:15:16Z" + } +} \ No newline at end of file