From abbf1fd2aa017f84d03a72f970c57b0be0a67e29 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Thu, 5 Dec 2024 00:36:26 +0000 Subject: [PATCH] Advisory Database Sync --- .../GHSA-ffv2-94mg-4j9c.json | 11 +++- .../GHSA-m9x5-g73r-5mcj.json | 1 + .../GHSA-47wp-357w-7g4p.json | 7 +-- .../GHSA-cwx8-r3r4-fr4j.json | 7 +-- .../GHSA-q677-9v9j-jjwq.json | 4 +- .../GHSA-r73p-8gx8-7pvg.json | 4 +- .../GHSA-vm4m-6mf9-8885.json | 1 + .../GHSA-3463-cgm9-fqjg.json | 29 ++++++++++ .../GHSA-42xv-889g-w333.json | 29 ++++++++++ .../GHSA-472m-pprq-9x46.json | 29 ++++++++++ .../GHSA-47hw-v3j9-mmxv.json | 52 +++++++++++++++++ .../GHSA-4x4p-57gw-fhrv.json | 29 ++++++++++ .../GHSA-586f-xjhh-92p4.json | 29 ++++++++++ .../GHSA-5f45-h685-7ww2.json | 56 +++++++++++++++++++ .../GHSA-73cj-343r-hjc2.json | 29 ++++++++++ .../GHSA-8g56-c3fw-gr86.json | 29 ++++++++++ .../GHSA-944x-jgjm-gf7h.json | 36 ++++++++++++ .../GHSA-9p9q-mq5f-p69m.json | 29 ++++++++++ .../GHSA-9r5g-6h8p-6cq5.json | 29 ++++++++++ .../GHSA-ccc5-2pmp-ch3g.json | 29 ++++++++++ .../GHSA-ghcj-4x4h-rvr9.json | 52 +++++++++++++++++ .../GHSA-gjx5-8fp8-5mx8.json | 52 +++++++++++++++++ .../GHSA-hw9c-x445-7wp7.json | 29 ++++++++++ .../GHSA-w6c8-g6h2-vv5g.json | 56 +++++++++++++++++++ .../GHSA-x7qc-9ccg-fgv7.json | 29 ++++++++++ .../GHSA-xh25-q4c4-w86w.json | 34 +++++++++++ .../GHSA-xhfh-rfp8-mr47.json | 29 ++++++++++ .../GHSA-xxqg-57h9-26v8.json | 52 +++++++++++++++++ 28 files changed, 785 insertions(+), 17 deletions(-) create mode 100644 advisories/unreviewed/2024/12/GHSA-3463-cgm9-fqjg/GHSA-3463-cgm9-fqjg.json create mode 100644 advisories/unreviewed/2024/12/GHSA-42xv-889g-w333/GHSA-42xv-889g-w333.json create mode 100644 advisories/unreviewed/2024/12/GHSA-472m-pprq-9x46/GHSA-472m-pprq-9x46.json create mode 100644 advisories/unreviewed/2024/12/GHSA-47hw-v3j9-mmxv/GHSA-47hw-v3j9-mmxv.json create mode 100644 advisories/unreviewed/2024/12/GHSA-4x4p-57gw-fhrv/GHSA-4x4p-57gw-fhrv.json create mode 100644 advisories/unreviewed/2024/12/GHSA-586f-xjhh-92p4/GHSA-586f-xjhh-92p4.json create mode 100644 advisories/unreviewed/2024/12/GHSA-5f45-h685-7ww2/GHSA-5f45-h685-7ww2.json create mode 100644 advisories/unreviewed/2024/12/GHSA-73cj-343r-hjc2/GHSA-73cj-343r-hjc2.json create mode 100644 advisories/unreviewed/2024/12/GHSA-8g56-c3fw-gr86/GHSA-8g56-c3fw-gr86.json create mode 100644 advisories/unreviewed/2024/12/GHSA-944x-jgjm-gf7h/GHSA-944x-jgjm-gf7h.json create mode 100644 advisories/unreviewed/2024/12/GHSA-9p9q-mq5f-p69m/GHSA-9p9q-mq5f-p69m.json create mode 100644 advisories/unreviewed/2024/12/GHSA-9r5g-6h8p-6cq5/GHSA-9r5g-6h8p-6cq5.json create mode 100644 advisories/unreviewed/2024/12/GHSA-ccc5-2pmp-ch3g/GHSA-ccc5-2pmp-ch3g.json create mode 100644 advisories/unreviewed/2024/12/GHSA-ghcj-4x4h-rvr9/GHSA-ghcj-4x4h-rvr9.json create mode 100644 advisories/unreviewed/2024/12/GHSA-gjx5-8fp8-5mx8/GHSA-gjx5-8fp8-5mx8.json create mode 100644 advisories/unreviewed/2024/12/GHSA-hw9c-x445-7wp7/GHSA-hw9c-x445-7wp7.json create mode 100644 advisories/unreviewed/2024/12/GHSA-w6c8-g6h2-vv5g/GHSA-w6c8-g6h2-vv5g.json create mode 100644 advisories/unreviewed/2024/12/GHSA-x7qc-9ccg-fgv7/GHSA-x7qc-9ccg-fgv7.json create mode 100644 advisories/unreviewed/2024/12/GHSA-xh25-q4c4-w86w/GHSA-xh25-q4c4-w86w.json create mode 100644 advisories/unreviewed/2024/12/GHSA-xhfh-rfp8-mr47/GHSA-xhfh-rfp8-mr47.json create mode 100644 advisories/unreviewed/2024/12/GHSA-xxqg-57h9-26v8/GHSA-xxqg-57h9-26v8.json diff --git a/advisories/unreviewed/2024/02/GHSA-ffv2-94mg-4j9c/GHSA-ffv2-94mg-4j9c.json b/advisories/unreviewed/2024/02/GHSA-ffv2-94mg-4j9c/GHSA-ffv2-94mg-4j9c.json index d088df01c35..3d6fed91cbb 100644 --- a/advisories/unreviewed/2024/02/GHSA-ffv2-94mg-4j9c/GHSA-ffv2-94mg-4j9c.json +++ b/advisories/unreviewed/2024/02/GHSA-ffv2-94mg-4j9c/GHSA-ffv2-94mg-4j9c.json @@ -1,13 +1,18 @@ { "schema_version": "1.4.0", "id": "GHSA-ffv2-94mg-4j9c", - "modified": "2024-02-21T09:31:00Z", + "modified": "2024-12-05T00:34:58Z", "published": "2024-02-21T09:31:00Z", "aliases": [ "CVE-2023-42835" ], "details": "A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1. An attacker may be able to access user data.", - "severity": [], + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } + ], "affected": [], "references": [ { @@ -21,7 +26,7 @@ ], "database_specific": { "cwe_ids": [], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-02-21T07:15:48Z" diff --git a/advisories/unreviewed/2024/02/GHSA-m9x5-g73r-5mcj/GHSA-m9x5-g73r-5mcj.json b/advisories/unreviewed/2024/02/GHSA-m9x5-g73r-5mcj/GHSA-m9x5-g73r-5mcj.json index 6f207380f85..ed83eda1edc 100644 --- a/advisories/unreviewed/2024/02/GHSA-m9x5-g73r-5mcj/GHSA-m9x5-g73r-5mcj.json +++ b/advisories/unreviewed/2024/02/GHSA-m9x5-g73r-5mcj/GHSA-m9x5-g73r-5mcj.json @@ -34,6 +34,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-22", "CWE-36" ], "severity": "LOW", diff --git a/advisories/unreviewed/2024/03/GHSA-47wp-357w-7g4p/GHSA-47wp-357w-7g4p.json b/advisories/unreviewed/2024/03/GHSA-47wp-357w-7g4p/GHSA-47wp-357w-7g4p.json index 1f6eace6f67..76b4562fe08 100644 --- a/advisories/unreviewed/2024/03/GHSA-47wp-357w-7g4p/GHSA-47wp-357w-7g4p.json +++ b/advisories/unreviewed/2024/03/GHSA-47wp-357w-7g4p/GHSA-47wp-357w-7g4p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,7 +26,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-122" + "CWE-122", + "CWE-787" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/03/GHSA-cwx8-r3r4-fr4j/GHSA-cwx8-r3r4-fr4j.json b/advisories/unreviewed/2024/03/GHSA-cwx8-r3r4-fr4j/GHSA-cwx8-r3r4-fr4j.json index 0db029fddd3..13e8830bf9a 100644 --- a/advisories/unreviewed/2024/03/GHSA-cwx8-r3r4-fr4j/GHSA-cwx8-r3r4-fr4j.json +++ b/advisories/unreviewed/2024/03/GHSA-cwx8-r3r4-fr4j/GHSA-cwx8-r3r4-fr4j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,7 +26,8 @@ ], "database_specific": { "cwe_ids": [ - "CWE-122" + "CWE-122", + "CWE-787" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/03/GHSA-q677-9v9j-jjwq/GHSA-q677-9v9j-jjwq.json b/advisories/unreviewed/2024/03/GHSA-q677-9v9j-jjwq/GHSA-q677-9v9j-jjwq.json index 23d90e4c599..db8d55fb58e 100644 --- a/advisories/unreviewed/2024/03/GHSA-q677-9v9j-jjwq/GHSA-q677-9v9j-jjwq.json +++ b/advisories/unreviewed/2024/03/GHSA-q677-9v9j-jjwq/GHSA-q677-9v9j-jjwq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-r73p-8gx8-7pvg/GHSA-r73p-8gx8-7pvg.json b/advisories/unreviewed/2024/03/GHSA-r73p-8gx8-7pvg/GHSA-r73p-8gx8-7pvg.json index f028a9be36f..2e14c57d43e 100644 --- a/advisories/unreviewed/2024/03/GHSA-r73p-8gx8-7pvg/GHSA-r73p-8gx8-7pvg.json +++ b/advisories/unreviewed/2024/03/GHSA-r73p-8gx8-7pvg/GHSA-r73p-8gx8-7pvg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-vm4m-6mf9-8885/GHSA-vm4m-6mf9-8885.json b/advisories/unreviewed/2024/04/GHSA-vm4m-6mf9-8885/GHSA-vm4m-6mf9-8885.json index 0f502c18c22..ea5b6276df7 100644 --- a/advisories/unreviewed/2024/04/GHSA-vm4m-6mf9-8885/GHSA-vm4m-6mf9-8885.json +++ b/advisories/unreviewed/2024/04/GHSA-vm4m-6mf9-8885/GHSA-vm4m-6mf9-8885.json @@ -26,6 +26,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-79", "CWE-80" ], "severity": "MODERATE", diff --git a/advisories/unreviewed/2024/12/GHSA-3463-cgm9-fqjg/GHSA-3463-cgm9-fqjg.json b/advisories/unreviewed/2024/12/GHSA-3463-cgm9-fqjg/GHSA-3463-cgm9-fqjg.json new file mode 100644 index 00000000000..958171b4bcb --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-3463-cgm9-fqjg/GHSA-3463-cgm9-fqjg.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3463-cgm9-fqjg", + "modified": "2024-12-05T00:34:59Z", + "published": "2024-12-05T00:34:59Z", + "aliases": [ + "CVE-2018-9398" + ], + "details": "In fm_set_stat of mediatek FM radio driver, there is a possible OOB write\n due to improper input validation. This could lead to local escalation of\n privilege with System execution privileges needed. User interaction is not\n needed for exploitation.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9398" + }, + { + "type": "WEB", + "url": "https://source.android.com/security/bulletin/pixel/2018-06-01" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-05T00:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-42xv-889g-w333/GHSA-42xv-889g-w333.json b/advisories/unreviewed/2024/12/GHSA-42xv-889g-w333/GHSA-42xv-889g-w333.json new file mode 100644 index 00000000000..91204675322 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-42xv-889g-w333/GHSA-42xv-889g-w333.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-42xv-889g-w333", + "modified": "2024-12-05T00:34:59Z", + "published": "2024-12-05T00:34:59Z", + "aliases": [ + "CVE-2018-9408" + ], + "details": "In m3326_gps_write and m3326_gps_read of gps.s, there is a possible Out Of\n Bounds Read due to a missing bounds check. This could lead to a local\n information disclosure with System execution privileges needed. User\n interaction is not needed for exploitation.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9408" + }, + { + "type": "WEB", + "url": "https://source.android.com/security/bulletin/pixel/2018-06-01" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-05T00:15:18Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-472m-pprq-9x46/GHSA-472m-pprq-9x46.json b/advisories/unreviewed/2024/12/GHSA-472m-pprq-9x46/GHSA-472m-pprq-9x46.json new file mode 100644 index 00000000000..9524ae871d7 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-472m-pprq-9x46/GHSA-472m-pprq-9x46.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-472m-pprq-9x46", + "modified": "2024-12-05T00:34:59Z", + "published": "2024-12-05T00:34:59Z", + "aliases": [ + "CVE-2018-9396" + ], + "details": "In rpc_msg_handler and related handlers of drivers/misc/mediatek/eccci/port_rpc.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9396" + }, + { + "type": "WEB", + "url": "https://source.android.com/security/bulletin/pixel/2018-06-01" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-04T22:15:18Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-47hw-v3j9-mmxv/GHSA-47hw-v3j9-mmxv.json b/advisories/unreviewed/2024/12/GHSA-47hw-v3j9-mmxv/GHSA-47hw-v3j9-mmxv.json new file mode 100644 index 00000000000..3e6a7a9e4be --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-47hw-v3j9-mmxv/GHSA-47hw-v3j9-mmxv.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-47hw-v3j9-mmxv", + "modified": "2024-12-05T00:34:59Z", + "published": "2024-12-05T00:34:59Z", + "aliases": [ + "CVE-2024-12180" + ], + "details": "A vulnerability classified as problematic has been found in DedeCMS 5.7.116. Affected is an unknown function of the file /member/article_add.php. The manipulation of the argument body leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12180" + }, + { + "type": "WEB", + "url": "https://github.com/Hebing123/cve/issues/76" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.286902" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.286902" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.452969" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-04T22:15:22Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-4x4p-57gw-fhrv/GHSA-4x4p-57gw-fhrv.json b/advisories/unreviewed/2024/12/GHSA-4x4p-57gw-fhrv/GHSA-4x4p-57gw-fhrv.json new file mode 100644 index 00000000000..ee544143273 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-4x4p-57gw-fhrv/GHSA-4x4p-57gw-fhrv.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4x4p-57gw-fhrv", + "modified": "2024-12-05T00:34:59Z", + "published": "2024-12-05T00:34:59Z", + "aliases": [ + "CVE-2018-9403" + ], + "details": "In the MTK_FLP_MSG_HAL_DIAG_REPORT_DATA_NTF handler of flp2hal_-\n interface.c, there is a possible stack buffer overflow due to a missing\n bounds check. This could lead to local escalation of privilege in a\n privileged process with System execution privileges needed. User interaction\n is not needed for exploitation.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9403" + }, + { + "type": "WEB", + "url": "https://source.android.com/security/bulletin/pixel/2018-06-01" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-05T00:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-586f-xjhh-92p4/GHSA-586f-xjhh-92p4.json b/advisories/unreviewed/2024/12/GHSA-586f-xjhh-92p4/GHSA-586f-xjhh-92p4.json new file mode 100644 index 00000000000..0cd4d78beec --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-586f-xjhh-92p4/GHSA-586f-xjhh-92p4.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-586f-xjhh-92p4", + "modified": "2024-12-05T00:34:59Z", + "published": "2024-12-05T00:34:59Z", + "aliases": [ + "CVE-2018-9463" + ], + "details": "In sw49408_irq_runtime_engine_debug of touch_sw49408.c, there is a possible\n out of bounds write due to an incorrect bounds check. This could lead to\n local escalation of privilege with System execution privileges needed. User\n interaction is not needed for exploitation.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9463" + }, + { + "type": "WEB", + "url": "https://source.android.com/security/bulletin/pixel/2018-08-01" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-05T00:15:18Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-5f45-h685-7ww2/GHSA-5f45-h685-7ww2.json b/advisories/unreviewed/2024/12/GHSA-5f45-h685-7ww2/GHSA-5f45-h685-7ww2.json new file mode 100644 index 00000000000..604eee920d6 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-5f45-h685-7ww2/GHSA-5f45-h685-7ww2.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5f45-h685-7ww2", + "modified": "2024-12-05T00:34:59Z", + "published": "2024-12-05T00:34:59Z", + "aliases": [ + "CVE-2024-12186" + ], + "details": "A vulnerability was found in code-projects Hotel Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file hotelnew.c of the component Available Room Handler. The manipulation of the argument admin_entry leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12186" + }, + { + "type": "WEB", + "url": "https://code-projects.org" + }, + { + "type": "WEB", + "url": "https://github.com/1zzan/cve/blob/main/STACK-OVERFLOW2.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.286907" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.286907" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.454846" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-05T00:15:18Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-73cj-343r-hjc2/GHSA-73cj-343r-hjc2.json b/advisories/unreviewed/2024/12/GHSA-73cj-343r-hjc2/GHSA-73cj-343r-hjc2.json new file mode 100644 index 00000000000..a20e357cce1 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-73cj-343r-hjc2/GHSA-73cj-343r-hjc2.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-73cj-343r-hjc2", + "modified": "2024-12-05T00:34:59Z", + "published": "2024-12-05T00:34:59Z", + "aliases": [ + "CVE-2018-9462" + ], + "details": "In store_cmd of ftm4_pdc.c, there is a possible out of bounds write due to\n an incorrect bounds check. This could lead to local escalation of privilege\n with System execution privileges needed. User interaction is not needed for\n exploitation.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9462" + }, + { + "type": "WEB", + "url": "https://source.android.com/security/bulletin/pixel/2018-08-01" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-05T00:15:18Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-8g56-c3fw-gr86/GHSA-8g56-c3fw-gr86.json b/advisories/unreviewed/2024/12/GHSA-8g56-c3fw-gr86/GHSA-8g56-c3fw-gr86.json new file mode 100644 index 00000000000..54c6de06f30 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-8g56-c3fw-gr86/GHSA-8g56-c3fw-gr86.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8g56-c3fw-gr86", + "modified": "2024-12-05T00:34:59Z", + "published": "2024-12-05T00:34:59Z", + "aliases": [ + "CVE-2018-9407" + ], + "details": "In emmc_rpmb_ioctl of emmc_rpmb.c, there is an Information Disclosure due to a Missing Bounds Check. This could lead to Information Disclosure of kernel data.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9407" + }, + { + "type": "WEB", + "url": "https://source.android.com/security/bulletin/pixel/2018-06-01" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-05T00:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-944x-jgjm-gf7h/GHSA-944x-jgjm-gf7h.json b/advisories/unreviewed/2024/12/GHSA-944x-jgjm-gf7h/GHSA-944x-jgjm-gf7h.json new file mode 100644 index 00000000000..afa7277c9f4 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-944x-jgjm-gf7h/GHSA-944x-jgjm-gf7h.json @@ -0,0 +1,36 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-944x-jgjm-gf7h", + "modified": "2024-12-05T00:35:00Z", + "published": "2024-12-05T00:34:59Z", + "aliases": [ + "CVE-2024-54221" + ], + "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Roninwp FAT Services Booking.This issue affects FAT Services Booking: from n/a through 5.6.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-54221" + }, + { + "type": "WEB", + "url": "https://patchstack.com/database/wordpress/plugin/fat-services-booking/vulnerability/wordpress-fat-services-booking-plugin-5-6-unauthenticated-sql-injection-vulnerability?_s_id=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-89" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-05T00:15:19Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-9p9q-mq5f-p69m/GHSA-9p9q-mq5f-p69m.json b/advisories/unreviewed/2024/12/GHSA-9p9q-mq5f-p69m/GHSA-9p9q-mq5f-p69m.json new file mode 100644 index 00000000000..239d7e8e9f9 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-9p9q-mq5f-p69m/GHSA-9p9q-mq5f-p69m.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9p9q-mq5f-p69m", + "modified": "2024-12-05T00:34:59Z", + "published": "2024-12-05T00:34:59Z", + "aliases": [ + "CVE-2018-9402" + ], + "details": "In multiple functions of gl_proc.c, there is a buffer overwrite due to a missing bounds check. This could lead to escalation of privileges in the kernel.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9402" + }, + { + "type": "WEB", + "url": "https://source.android.com/security/bulletin/pixel/2018-06-01" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-05T00:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-9r5g-6h8p-6cq5/GHSA-9r5g-6h8p-6cq5.json b/advisories/unreviewed/2024/12/GHSA-9r5g-6h8p-6cq5/GHSA-9r5g-6h8p-6cq5.json new file mode 100644 index 00000000000..3724f2c5965 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-9r5g-6h8p-6cq5/GHSA-9r5g-6h8p-6cq5.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9r5g-6h8p-6cq5", + "modified": "2024-12-05T00:34:59Z", + "published": "2024-12-05T00:34:59Z", + "aliases": [ + "CVE-2018-9400" + ], + "details": "In gt1x_debug_write_proc and gt1x_tool_write of\n drivers/input/touchscreen/mediatek/GT1151/gt1x_generic.c and gt1x_tools.c,\n there is a possible out of bounds write due to a missing bounds check. This\n could lead to local escalation of privilege with System execution privileges\n needed. User interaction is not needed for exploitation.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9400" + }, + { + "type": "WEB", + "url": "https://source.android.com/security/bulletin/pixel/2018-06-01" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-05T00:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-ccc5-2pmp-ch3g/GHSA-ccc5-2pmp-ch3g.json b/advisories/unreviewed/2024/12/GHSA-ccc5-2pmp-ch3g/GHSA-ccc5-2pmp-ch3g.json new file mode 100644 index 00000000000..9a8be9a6f8c --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-ccc5-2pmp-ch3g/GHSA-ccc5-2pmp-ch3g.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-ccc5-2pmp-ch3g", + "modified": "2024-12-05T00:34:59Z", + "published": "2024-12-05T00:34:59Z", + "aliases": [ + "CVE-2018-9439" + ], + "details": "In __unregister_prot_hook and packet_release of af_packet.c, there is a\n possible use-after-free due to improper locking. This could lead to local\n escalation of privilege in the kernel with System execution privileges\n needed. User interaction is not needed for exploitation.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9439" + }, + { + "type": "WEB", + "url": "https://source.android.com/security/bulletin/pixel/2018-08-01" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-05T00:15:18Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-ghcj-4x4h-rvr9/GHSA-ghcj-4x4h-rvr9.json b/advisories/unreviewed/2024/12/GHSA-ghcj-4x4h-rvr9/GHSA-ghcj-4x4h-rvr9.json new file mode 100644 index 00000000000..71523af17d3 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-ghcj-4x4h-rvr9/GHSA-ghcj-4x4h-rvr9.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-ghcj-4x4h-rvr9", + "modified": "2024-12-05T00:34:59Z", + "published": "2024-12-05T00:34:59Z", + "aliases": [ + "CVE-2024-12182" + ], + "details": "A vulnerability, which was classified as problematic, has been found in DedeCMS 5.7.116. Affected by this issue is some unknown functionality of the file /member/soft_add.php. The manipulation of the argument body leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12182" + }, + { + "type": "WEB", + "url": "https://github.com/Hebing123/cve/issues/78" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.286904" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.286904" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.453003" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-04T23:15:04Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-gjx5-8fp8-5mx8/GHSA-gjx5-8fp8-5mx8.json b/advisories/unreviewed/2024/12/GHSA-gjx5-8fp8-5mx8/GHSA-gjx5-8fp8-5mx8.json new file mode 100644 index 00000000000..4e8ceaef9f3 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-gjx5-8fp8-5mx8/GHSA-gjx5-8fp8-5mx8.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gjx5-8fp8-5mx8", + "modified": "2024-12-05T00:34:59Z", + "published": "2024-12-05T00:34:59Z", + "aliases": [ + "CVE-2024-12183" + ], + "details": "A vulnerability, which was classified as problematic, was found in DedeCMS 5.7.116. This affects the function RemoveXSS of the file /plus/carbuyaction.php of the component HTTP POST Request Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12183" + }, + { + "type": "WEB", + "url": "https://github.com/Hebing123/cve/issues/79" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.286905" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.286905" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.453374" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-04T23:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-hw9c-x445-7wp7/GHSA-hw9c-x445-7wp7.json b/advisories/unreviewed/2024/12/GHSA-hw9c-x445-7wp7/GHSA-hw9c-x445-7wp7.json new file mode 100644 index 00000000000..006a47b33b8 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-hw9c-x445-7wp7/GHSA-hw9c-x445-7wp7.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-hw9c-x445-7wp7", + "modified": "2024-12-05T00:34:59Z", + "published": "2024-12-05T00:34:59Z", + "aliases": [ + "CVE-2018-9397" + ], + "details": "In WMT_unlocked_ioctl of MTK WMT device driver, there is a possible OOB\n write due to a missing bounds check. This could lead to local escalation of\n privilege with System execution privileges needed. User interaction is not\n needed for exploitation.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9397" + }, + { + "type": "WEB", + "url": "https://source.android.com/security/bulletin/pixel/2018-06-01" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-05T00:15:16Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-w6c8-g6h2-vv5g/GHSA-w6c8-g6h2-vv5g.json b/advisories/unreviewed/2024/12/GHSA-w6c8-g6h2-vv5g/GHSA-w6c8-g6h2-vv5g.json new file mode 100644 index 00000000000..0edbdfb0172 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-w6c8-g6h2-vv5g/GHSA-w6c8-g6h2-vv5g.json @@ -0,0 +1,56 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w6c8-g6h2-vv5g", + "modified": "2024-12-05T00:34:59Z", + "published": "2024-12-05T00:34:59Z", + "aliases": [ + "CVE-2024-12185" + ], + "details": "A vulnerability has been found in code-projects Hotel Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the component Administrator Login Password Handler. The manipulation of the argument Str2 leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12185" + }, + { + "type": "WEB", + "url": "https://code-projects.org" + }, + { + "type": "WEB", + "url": "https://github.com/1zzan/cve/blob/main/STACK-OVERFLOW1.md" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.286906" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.286906" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.454844" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-119" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-05T00:15:18Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-x7qc-9ccg-fgv7/GHSA-x7qc-9ccg-fgv7.json b/advisories/unreviewed/2024/12/GHSA-x7qc-9ccg-fgv7/GHSA-x7qc-9ccg-fgv7.json new file mode 100644 index 00000000000..a1baa0f17a8 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-x7qc-9ccg-fgv7/GHSA-x7qc-9ccg-fgv7.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-x7qc-9ccg-fgv7", + "modified": "2024-12-05T00:34:59Z", + "published": "2024-12-05T00:34:59Z", + "aliases": [ + "CVE-2018-9404" + ], + "details": "In oemCallback of ril.cpp, there is a possible out of bounds write due to an\n integer overflow. This could lead to local escalation of privilege with\n System execution privileges needed. User interaction is not needed for\n exploitation.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9404" + }, + { + "type": "WEB", + "url": "https://source.android.com/security/bulletin/pixel/2018-06-01" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-05T00:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-xh25-q4c4-w86w/GHSA-xh25-q4c4-w86w.json b/advisories/unreviewed/2024/12/GHSA-xh25-q4c4-w86w/GHSA-xh25-q4c4-w86w.json new file mode 100644 index 00000000000..eaf12226318 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-xh25-q4c4-w86w/GHSA-xh25-q4c4-w86w.json @@ -0,0 +1,34 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-xh25-q4c4-w86w", + "modified": "2024-12-05T00:34:59Z", + "published": "2024-12-05T00:34:59Z", + "aliases": [ + "CVE-2018-9416" + ], + "details": "In sg_remove_scat of scsi/sg.c, there is a possible memory corruption due to\n an unusual root cause. This could lead to local escalation of privilege with\n System execution privileges needed. User interaction is not needed for\n exploitation.", + "severity": [ + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9416" + }, + { + "type": "WEB", + "url": "https://source.android.com/security/bulletin/pixel/2018-07-01" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-05T00:15:18Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-xhfh-rfp8-mr47/GHSA-xhfh-rfp8-mr47.json b/advisories/unreviewed/2024/12/GHSA-xhfh-rfp8-mr47/GHSA-xhfh-rfp8-mr47.json new file mode 100644 index 00000000000..56f12c5b6fd --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-xhfh-rfp8-mr47/GHSA-xhfh-rfp8-mr47.json @@ -0,0 +1,29 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-xhfh-rfp8-mr47", + "modified": "2024-12-05T00:34:59Z", + "published": "2024-12-05T00:34:59Z", + "aliases": [ + "CVE-2018-9399" + ], + "details": "In /proc/driver/wmt_dbg driver, there are several possible out of bounds\n writes. These could lead to local escalation of privilege with System\n execution privileges needed. User interaction is not needed for\n exploitation.", + "severity": [], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-9399" + }, + { + "type": "WEB", + "url": "https://source.android.com/security/bulletin/pixel/2018-06-01" + } + ], + "database_specific": { + "cwe_ids": [], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-05T00:15:17Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/12/GHSA-xxqg-57h9-26v8/GHSA-xxqg-57h9-26v8.json b/advisories/unreviewed/2024/12/GHSA-xxqg-57h9-26v8/GHSA-xxqg-57h9-26v8.json new file mode 100644 index 00000000000..f6ee021f690 --- /dev/null +++ b/advisories/unreviewed/2024/12/GHSA-xxqg-57h9-26v8/GHSA-xxqg-57h9-26v8.json @@ -0,0 +1,52 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-xxqg-57h9-26v8", + "modified": "2024-12-05T00:34:59Z", + "published": "2024-12-05T00:34:59Z", + "aliases": [ + "CVE-2024-12181" + ], + "details": "A vulnerability classified as problematic was found in DedeCMS 5.7.116. Affected by this vulnerability is an unknown functionality of the file /member/uploads_add.php of the component SWF File Handler. The manipulation of the argument mediatype leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12181" + }, + { + "type": "WEB", + "url": "https://github.com/Hebing123/cve/issues/77" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?ctiid.286903" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?id.286903" + }, + { + "type": "WEB", + "url": "https://vuldb.com/?submit.452983" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-12-04T22:15:22Z" + } +} \ No newline at end of file