Advisory Database Sync

2026-05-22 18:04:22 -07:00 · 2024-12-05 00:36:26 +00:00
parent 5092b95853
commit abbf1fd2aa
28 changed files with 785 additions and 17 deletions
@@ -1,13 +1,18 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-ffv2-94mg-4j9c",
-  "modified": "2024-02-21T09:31:00Z",
+  "modified": "2024-12-05T00:34:58Z",
  "published": "2024-02-21T09:31:00Z",
  "aliases": [
    "CVE-2023-42835"
  ],
  "details": "A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1. An attacker may be able to access user data.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
+    }
+  ],
  "affected": [],
  "references": [
    {
@@ -21,7 +26,7 @@
  ],
  "database_specific": {
    "cwe_ids": [],
-    "severity": null,
+    "severity": "HIGH",
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2024-02-21T07:15:48Z"
@@ -34,6 +34,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-22",
      "CWE-36"
    ],
    "severity": "LOW",
@@ -13,9 +13,7 @@
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
    }
  ],
-  "affected": [
-
-  ],
+  "affected": [],
  "references": [
    {
      "type": "ADVISORY",
@@ -28,7 +26,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-122"
+      "CWE-122",
+      "CWE-787"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -13,9 +13,7 @@
      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
    }
  ],
-  "affected": [
-
-  ],
+  "affected": [],
  "references": [
    {
      "type": "ADVISORY",
@@ -28,7 +26,8 @@
  ],
  "database_specific": {
    "cwe_ids": [
-      "CWE-122"
+      "CWE-122",
+      "CWE-787"
    ],
    "severity": "HIGH",
    "github_reviewed": false,
@@ -13,9 +13,7 @@
      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H"
    }
  ],
-  "affected": [
-
-  ],
+  "affected": [],
  "references": [
    {
      "type": "ADVISORY",
@@ -13,9 +13,7 @@
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N"
    }
  ],
-  "affected": [
-
-  ],
+  "affected": [],
  "references": [
    {
      "type": "ADVISORY",
@@ -26,6 +26,7 @@
  ],
  "database_specific": {
    "cwe_ids": [
+      "CWE-79",
      "CWE-80"
    ],
    "severity": "MODERATE",
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3463-cgm9-fqjg",
+  "modified": "2024-12-05T00:34:59Z",
+  "published": "2024-12-05T00:34:59Z",
+  "aliases": [
+    "CVE-2018-9398"
+  ],
+  "details": "In fm_set_stat of mediatek FM radio driver, there is a possible OOB write\n    due to improper input validation. This could lead to local escalation of\n    privilege with System execution privileges needed. User interaction is not\n    needed for exploitation.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9398"
+    },
+    {
+      "type": "WEB",
+      "url": "https://source.android.com/security/bulletin/pixel/2018-06-01"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-05T00:15:17Z"
+  }
+}
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-42xv-889g-w333",
+  "modified": "2024-12-05T00:34:59Z",
+  "published": "2024-12-05T00:34:59Z",
+  "aliases": [
+    "CVE-2018-9408"
+  ],
+  "details": "In m3326_gps_write and m3326_gps_read of gps.s, there is a possible Out Of\n    Bounds Read due to a missing bounds check. This could lead to a local\n    information disclosure with System execution privileges needed. User\n    interaction is not needed for exploitation.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9408"
+    },
+    {
+      "type": "WEB",
+      "url": "https://source.android.com/security/bulletin/pixel/2018-06-01"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-05T00:15:18Z"
+  }
+}
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-472m-pprq-9x46",
+  "modified": "2024-12-05T00:34:59Z",
+  "published": "2024-12-05T00:34:59Z",
+  "aliases": [
+    "CVE-2018-9396"
+  ],
+  "details": "In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9396"
+    },
+    {
+      "type": "WEB",
+      "url": "https://source.android.com/security/bulletin/pixel/2018-06-01"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-04T22:15:18Z"
+  }
+}
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-47hw-v3j9-mmxv",
+  "modified": "2024-12-05T00:34:59Z",
+  "published": "2024-12-05T00:34:59Z",
+  "aliases": [
+    "CVE-2024-12180"
+  ],
+  "details": "A vulnerability classified as problematic has been found in DedeCMS 5.7.116. Affected is an unknown function of the file /member/article_add.php. The manipulation of the argument body leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12180"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Hebing123/cve/issues/76"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.286902"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.286902"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.452969"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-79"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-04T22:15:22Z"
+  }
+}
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4x4p-57gw-fhrv",
+  "modified": "2024-12-05T00:34:59Z",
+  "published": "2024-12-05T00:34:59Z",
+  "aliases": [
+    "CVE-2018-9403"
+  ],
+  "details": "In the MTK_FLP_MSG_HAL_DIAG_REPORT_DATA_NTF handler of flp2hal_-\n    interface.c, there is a possible stack buffer overflow due to a missing\n    bounds check. This could lead to local escalation of privilege in a\n    privileged process with System execution privileges needed. User interaction\n    is not needed for exploitation.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9403"
+    },
+    {
+      "type": "WEB",
+      "url": "https://source.android.com/security/bulletin/pixel/2018-06-01"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-05T00:15:17Z"
+  }
+}
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-586f-xjhh-92p4",
+  "modified": "2024-12-05T00:34:59Z",
+  "published": "2024-12-05T00:34:59Z",
+  "aliases": [
+    "CVE-2018-9463"
+  ],
+  "details": "In sw49408_irq_runtime_engine_debug of touch_sw49408.c, there is a possible\n    out of bounds write due to an incorrect bounds check. This could lead to\n    local escalation of privilege with System execution privileges needed. User\n    interaction is not needed for exploitation.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9463"
+    },
+    {
+      "type": "WEB",
+      "url": "https://source.android.com/security/bulletin/pixel/2018-08-01"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-05T00:15:18Z"
+  }
+}
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5f45-h685-7ww2",
+  "modified": "2024-12-05T00:34:59Z",
+  "published": "2024-12-05T00:34:59Z",
+  "aliases": [
+    "CVE-2024-12186"
+  ],
+  "details": "A vulnerability was found in code-projects Hotel Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file hotelnew.c of the component Available Room Handler. The manipulation of the argument admin_entry leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12186"
+    },
+    {
+      "type": "WEB",
+      "url": "https://code-projects.org"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/1zzan/cve/blob/main/STACK-OVERFLOW2.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.286907"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.286907"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.454846"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-119"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-05T00:15:18Z"
+  }
+}
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-73cj-343r-hjc2",
+  "modified": "2024-12-05T00:34:59Z",
+  "published": "2024-12-05T00:34:59Z",
+  "aliases": [
+    "CVE-2018-9462"
+  ],
+  "details": "In store_cmd of ftm4_pdc.c, there is a possible out of bounds write due to\n    an incorrect bounds check. This could lead to local escalation of privilege\n    with System execution privileges needed. User interaction is not needed for\n    exploitation.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9462"
+    },
+    {
+      "type": "WEB",
+      "url": "https://source.android.com/security/bulletin/pixel/2018-08-01"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-05T00:15:18Z"
+  }
+}
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8g56-c3fw-gr86",
+  "modified": "2024-12-05T00:34:59Z",
+  "published": "2024-12-05T00:34:59Z",
+  "aliases": [
+    "CVE-2018-9407"
+  ],
+  "details": "In emmc_rpmb_ioctl of emmc_rpmb.c, there is an Information Disclosure due to a Missing Bounds Check. This could lead to  Information Disclosure of kernel data.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9407"
+    },
+    {
+      "type": "WEB",
+      "url": "https://source.android.com/security/bulletin/pixel/2018-06-01"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-05T00:15:17Z"
+  }
+}
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-944x-jgjm-gf7h",
+  "modified": "2024-12-05T00:35:00Z",
+  "published": "2024-12-05T00:34:59Z",
+  "aliases": [
+    "CVE-2024-54221"
+  ],
+  "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Roninwp FAT Services Booking.This issue affects FAT Services Booking: from n/a through 5.6.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54221"
+    },
+    {
+      "type": "WEB",
+      "url": "https://patchstack.com/database/wordpress/plugin/fat-services-booking/vulnerability/wordpress-fat-services-booking-plugin-5-6-unauthenticated-sql-injection-vulnerability?_s_id=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-05T00:15:19Z"
+  }
+}
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9p9q-mq5f-p69m",
+  "modified": "2024-12-05T00:34:59Z",
+  "published": "2024-12-05T00:34:59Z",
+  "aliases": [
+    "CVE-2018-9402"
+  ],
+  "details": "In multiple functions of gl_proc.c, there is a buffer overwrite due to a missing bounds check. This could lead to escalation of privileges in the kernel.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9402"
+    },
+    {
+      "type": "WEB",
+      "url": "https://source.android.com/security/bulletin/pixel/2018-06-01"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-05T00:15:17Z"
+  }
+}
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-9r5g-6h8p-6cq5",
+  "modified": "2024-12-05T00:34:59Z",
+  "published": "2024-12-05T00:34:59Z",
+  "aliases": [
+    "CVE-2018-9400"
+  ],
+  "details": "In gt1x_debug_write_proc and gt1x_tool_write of\n    drivers/input/touchscreen/mediatek/GT1151/gt1x_generic.c and gt1x_tools.c,\n    there is a possible out of bounds write due to a missing bounds check. This\n    could lead to local escalation of privilege with System execution privileges\n    needed. User interaction is not needed for exploitation.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9400"
+    },
+    {
+      "type": "WEB",
+      "url": "https://source.android.com/security/bulletin/pixel/2018-06-01"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-05T00:15:17Z"
+  }
+}
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-ccc5-2pmp-ch3g",
+  "modified": "2024-12-05T00:34:59Z",
+  "published": "2024-12-05T00:34:59Z",
+  "aliases": [
+    "CVE-2018-9439"
+  ],
+  "details": "In __unregister_prot_hook and packet_release of af_packet.c, there is a\n    possible use-after-free due to improper locking. This could lead to local\n    escalation of privilege in the kernel with System execution privileges\n    needed. User interaction is not needed for exploitation.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9439"
+    },
+    {
+      "type": "WEB",
+      "url": "https://source.android.com/security/bulletin/pixel/2018-08-01"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-12-05T00:15:18Z"
+  }
+}
--- a/Show More
+++ b/Show More