netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-08-22 21:32:53 +00:00
parent 0efe75bbcd
commit a679023a73
88 changed files with 1214 additions and 250 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/03/GHSA-89mg-6p9g-4jfj/GHSA-89mg-6p9g-4jfj.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-89mg-6p9g-4jfj",
"modified": "2023-03-24T03:30:18Z",
"modified": "2024-08-22T21:31:27Z",
"published": "2023-03-19T03:30:25Z",
"aliases": [
"CVE-2022-48425"
advisories/unreviewed/2023/07/GHSA-2rq6-85wg-96g4/GHSA-2rq6-85wg-96g4.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2rq6-85wg-96g4",
"modified": "2023-12-22T18:30:28Z",
"modified": "2024-08-22T21:31:27Z",
"published": "2023-07-24T18:30:44Z",
"aliases": [
"CVE-2023-32257"
advisories/unreviewed/2023/07/GHSA-496x-5v3m-gff3/GHSA-496x-5v3m-gff3.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-496x-5v3m-gff3",
"modified": "2023-11-17T18:30:49Z",
"modified": "2024-08-22T21:31:27Z",
"published": "2023-07-24T18:30:44Z",
"aliases": [
"CVE-2023-32258"
advisories/unreviewed/2023/07/GHSA-fcg7-9x44-gx43/GHSA-fcg7-9x44-gx43.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fcg7-9x44-gx43",
"modified": "2023-11-29T15:30:20Z",
"modified": "2024-08-22T21:31:27Z",
"published": "2023-07-21T21:30:33Z",
"aliases": [
"CVE-2023-3776"
advisories/unreviewed/2023/07/GHSA-x5xp-6cpr-4xwx/GHSA-x5xp-6cpr-4xwx.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x5xp-6cpr-4xwx",
"modified": "2024-01-11T21:31:15Z",
"modified": "2024-08-22T21:31:27Z",
"published": "2023-07-21T21:30:33Z",
"aliases": [
"CVE-2023-3611"
advisories/unreviewed/2024/02/GHSA-4w42-hx2p-m2jw/GHSA-4w42-hx2p-m2jw.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4w42-hx2p-m2jw",
"modified": "2024-02-06T12:30:31Z",
"modified": "2024-08-22T21:31:27Z",
"published": "2024-02-06T12:30:31Z",
"aliases": [
"CVE-2024-24938"
advisories/unreviewed/2024/02/GHSA-cq73-wfw9-gvq8/GHSA-cq73-wfw9-gvq8.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cq73-wfw9-gvq8",
"modified": "2024-02-18T06:30:31Z",
"modified": "2024-08-22T21:31:27Z",
"published": "2024-02-18T06:30:31Z",
"aliases": [
"CVE-2023-52366"
],
"details": "Out-of-bounds read vulnerability in the smart activity recognition module.Successful exploitation of this vulnerability may cause features to perform abnormally.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
"CWE-120"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-18T04:15:07Z"
advisories/unreviewed/2024/02/GHSA-jmpf-9fgv-p5cr/GHSA-jmpf-9fgv-p5cr.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jmpf-9fgv-p5cr",
"modified": "2024-02-22T15:30:39Z",
"modified": "2024-08-22T21:31:27Z",
"published": "2024-02-22T15:30:39Z",
"aliases": [
"CVE-2024-25850"
],
"details": "Netis WF2780 v2.1.40144 was discovered to contain a command injection vulnerability via the wps_ap_ssid5g parameter",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-77"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-22T15:15:08Z"
advisories/unreviewed/2024/02/GHSA-pg36-pgm7-px54/GHSA-pg36-pgm7-px54.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pg36-pgm7-px54",
"modified": "2024-02-15T21:31:27Z",
"modified": "2024-08-22T21:31:27Z",
"published": "2024-02-15T21:31:27Z",
"aliases": [
"CVE-2024-25502"
],
"details": "Directory Traversal vulnerability in flusity CMS v.2.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via the download_backup.php component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-15T20:15:45Z"
advisories/unreviewed/2024/02/GHSA-w4cp-wh3g-wgvx/GHSA-w4cp-wh3g-wgvx.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w4cp-wh3g-wgvx",
"modified": "2024-03-23T03:30:24Z",
"modified": "2024-08-22T21:31:27Z",
"published": "2024-02-21T21:30:24Z",
"aliases": [
"CVE-2024-24476"
],
"details": "Buffer Overflow vulnerability in Wireshark team Wireshark before v.4.2.0 allows a remote attacker to cause a denial of service via the pan/addr_resolv.c, and ws_manuf_lookup_str(), size components.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-119"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-21T19:15:09Z"
advisories/unreviewed/2024/02/GHSA-xvhr-3rcv-j8f8/GHSA-xvhr-3rcv-j8f8.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xvhr-3rcv-j8f8",
"modified": "2024-02-22T00:31:01Z",
"modified": "2024-08-22T21:31:27Z",
"published": "2024-02-22T00:31:01Z",
"aliases": [
"CVE-2023-52153"
],
"details": "A SQL Injection vulnerability in /pmb/opac_css/includes/sessions.inc.php in PMB 7.4.7 and earlier allows remote unauthenticated attackers to inject arbitrary SQL commands via the PmbOpac-LOGIN cookie value.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-21T22:15:49Z"
advisories/unreviewed/2024/03/GHSA-5q6f-gm4w-g552/GHSA-5q6f-gm4w-g552.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5q6f-gm4w-g552",
"modified": "2024-03-01T15:31:38Z",
"modified": "2024-08-22T21:31:27Z",
"published": "2024-03-01T15:31:38Z",
"aliases": [
"CVE-2024-27571"
],
"details": "LBT T300-T390 v2.2.1.8 were discovered to contain a stack overflow via the ApCliSsid parameter in the makeCurRemoteApList function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-01T14:15:54Z"
advisories/unreviewed/2024/03/GHSA-9g2f-rcrg-3f74/GHSA-9g2f-rcrg-3f74.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9g2f-rcrg-3f74",
"modified": "2024-03-11T21:31:26Z",
"modified": "2024-08-22T21:31:27Z",
"published": "2024-03-11T21:31:26Z",
"aliases": [
"CVE-2024-27209"
],
"details": "In TBD of TBD, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-122"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-11T19:15:48Z"
advisories/unreviewed/2024/03/GHSA-gm28-rj7w-mj3m/GHSA-gm28-rj7w-mj3m.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gm28-rj7w-mj3m",
"modified": "2024-03-18T21:31:23Z",
"modified": "2024-08-22T21:31:27Z",
"published": "2024-03-18T21:31:23Z",
"aliases": [
"CVE-2024-25657"
],
"details": "An open redirect in the Login/Logout functionality of web management in AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS could allow attackers to redirect authenticated users to malicious websites.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-601"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-18T20:15:09Z"
advisories/unreviewed/2024/03/GHSA-m966-6288-pj94/GHSA-m966-6288-pj94.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m966-6288-pj94",
"modified": "2024-04-24T03:30:45Z",
"modified": "2024-08-22T21:31:27Z",
"published": "2024-03-29T18:30:43Z",
"aliases": [
"CVE-2024-31032"
],
"details": "An issue in Huashi Private Cloud CDN Live Streaming Acceleration Server hgateway-sixport v.1.1.2 allows a remote attacker to execute arbitrary code via the manager/ipping.php component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-29T17:15:20Z"
advisories/unreviewed/2024/03/GHSA-pq5r-rp8m-p9vh/GHSA-pq5r-rp8m-p9vh.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pq5r-rp8m-p9vh",
"modified": "2024-03-29T00:30:35Z",
"modified": "2024-08-22T21:31:27Z",
"published": "2024-03-29T00:30:35Z",
"aliases": [
"CVE-2024-29489"
],
"details": "Jerryscript 2.4.0 has SEGV at ./jerry-core/ecma/base/ecma-helpers.c:238:58 in ecma_get_object_type.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-476"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T23:15:46Z"
advisories/unreviewed/2024/03/GHSA-rxj8-fv7g-cp4v/GHSA-rxj8-fv7g-cp4v.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-rxj8-fv7g-cp4v",
"modified": "2024-03-22T03:30:44Z",
"modified": "2024-08-22T21:31:27Z",
"published": "2024-03-22T03:30:44Z",
"aliases": [
"CVE-2024-28441"
],
"details": "File Upload vulnerability in magicflue v.7.0 and before allows a remote attacker to execute arbitrary code via a crafted request to the messageid parameter of the mail/mailupdate.jsp endpoint.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-434"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-22T02:15:08Z"
advisories/unreviewed/2024/03/GHSA-vj7g-5fj3-rc83/GHSA-vj7g-5fj3-rc83.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vj7g-5fj3-rc83",
"modified": "2024-03-14T03:31:15Z",
"modified": "2024-08-22T21:31:27Z",
"published": "2024-03-14T03:31:15Z",
"aliases": [
"CVE-2024-25651"
],
"details": "User enumeration can occur in the Authentication REST API in Delinea PAM Secret Server 11.4. This allows a remote attacker to determine whether a user is valid because of a difference in responses from the /oauth2/token endpoint.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-203"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-14T03:15:08Z"
advisories/unreviewed/2024/03/GHSA-wxh9-34f7-vmrc/GHSA-wxh9-34f7-vmrc.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wxh9-34f7-vmrc",
"modified": "2024-03-27T06:30:32Z",
"modified": "2024-08-22T21:31:27Z",
"published": "2024-03-27T06:30:32Z",
"aliases": [
"CVE-2023-46047"
],
"details": "An issue in Sane 1.2.1 allows a local attacker to execute arbitrary code via a crafted file to the sanei_configure_attach() function. NOTE: this is disputed because there is no expectation that the product should be starting with an attacker-controlled configuration file.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-27T05:15:47Z"
advisories/unreviewed/2024/03/GHSA-x8xc-vcqw-36qc/GHSA-x8xc-vcqw-36qc.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-x8xc-vcqw-36qc",
"modified": "2024-03-04T03:30:26Z",
"modified": "2024-08-22T21:31:27Z",
"published": "2024-03-04T03:30:26Z",
"aliases": [
"CVE-2024-20037"
],
"details": "In pq, there is a possible write-what-where condition due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08495937; Issue ID: ALPS08495937.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-754"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-04T03:15:07Z"

Some files were not shown because too many files have changed in this diff Show More