netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-fff2-44c8-59c5
GHSA-hw83-24q6-v392
GHSA-vx79-rj6m-r29g
GHSA-344g-jvx4-773r
GHSA-3729-9j52-jqrv
GHSA-4m3r-vc8v-w5x9
GHSA-4v66-fhwx-979j
GHSA-5mcq-h782-4vg7
GHSA-63m7-8wfj-vrjr
GHSA-8qcr-ggrf-g25w
GHSA-8w5x-vc73-8w4j
GHSA-c4v2-g748-rmrp
GHSA-c6cg-7q2c-x256
GHSA-g3g3-23p3-c263
GHSA-gj76-qqq8-xf7w
GHSA-gqg7-4h7v-f4hf
GHSA-hfgc-xxrj-48m3
GHSA-jhjr-vvw5-3rf8
GHSA-p25w-hwv3-vj5q
GHSA-pxph-2m4r-q6cp
GHSA-r67g-69pq-w76x
GHSA-vqhc-8g79-hf73
GHSA-x4w8-rv9m-fp3j
GHSA-x64m-5xw4-43cw
This commit is contained in:
advisory-database[bot]
2024-08-13 03:32:31 +00:00
parent 137be9c35a
commit ac3faba8a2
24 changed files with 368 additions and 66 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2024/06/GHSA-fff2-44c8-59c5/GHSA-fff2-44c8-59c5.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fff2-44c8-59c5",
"modified": "2024-06-26T00:31:43Z",
"modified": "2024-08-13T03:31:16Z",
"published": "2024-06-26T00:31:43Z",
"aliases": [
"CVE-2024-37742"
],
"details": "An issue in Safe Exam Browser for Windows before 3.6 allows an attacker to share clipboard data between the SEB kiosk mode and the underlying system, compromising exam integrity which may lead to arbitrary code execution and obtaining sensitive information via the Clipboard Management component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-25T22:15:35Z"
advisories/unreviewed/2024/07/GHSA-hw83-24q6-v392/GHSA-hw83-24q6-v392.json
+1 -1
View File
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-200"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/07/GHSA-vx79-rj6m-r29g/GHSA-vx79-rj6m-r29g.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vx79-rj6m-r29g",
"modified": "2024-07-31T06:30:34Z",
"modified": "2024-08-13T03:31:16Z",
"published": "2024-07-31T06:30:34Z",
"aliases": [
"CVE-2024-39949"
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-20"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/08/GHSA-344g-jvx4-773r/GHSA-344g-jvx4-773r.json
+58
View File
@@ -0,0 +1,58 @@
{
"schema_version": "1.4.0",
"id": "GHSA-344g-jvx4-773r",
"modified": "2024-08-13T03:31:16Z",
"published": "2024-08-13T03:31:16Z",
"aliases": [
"CVE-2024-7094"
],
"details": "The JS Help Desk – The Ultimate Help Desk & Support Plugin plugin for WordPress is vulnerable to PHP Code Injection leading to Remote Code Execution in all versions up to, and including, 2.8.6 via the 'storeTheme' function. This is due to a lack of sanitization on user-supplied values, which replace values in the style.php file, along with missing capability checks. This makes it possible for unauthenticated attackers to execute code on the server. This issue was partially patched in 2.8.6 when the code injection issue was resolved, and fully patched in 2.8.7 when the missing authorization and cross-site request forgery protection was added.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7094"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/js-support-ticket/tags/2.8.5/includes/css/style.php"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/js-support-ticket/tags/2.8.5/includes/formhandler.php"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/js-support-ticket/tags/2.8.5/modules/themes/controller.php"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/js-support-ticket/tags/2.8.5/modules/themes/model.php"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/browser/js-support-ticket/tags/2.8.5/modules/themes/tpls/admin_themes.php"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/31513f9e-6185-425b-9e7e-36f21f72d0a2?source=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-94"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-13T03:15:04Z"
}
}
advisories/unreviewed/2024/08/GHSA-3729-9j52-jqrv/GHSA-3729-9j52-jqrv.json
+58
View File
@@ -0,0 +1,58 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3729-9j52-jqrv",
"modified": "2024-08-13T03:31:16Z",
"published": "2024-08-13T03:31:16Z",
"aliases": [
"CVE-2024-7709"
],
"details": "A vulnerability, which was classified as problematic, has been found in OcoMon 4.0. This issue affects some unknown processing of the file /includes/common/require_access_recovery.php of the component URL Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.0.1 and 5.0 is able to address this issue. It is recommended to upgrade the affected component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7709"
},
{
"type": "WEB",
"url": "https://ocomon.com.br/site/atualizacao-de-seguranca"
},
{
"type": "WEB",
"url": "https://ocomon.com.br/site/downloads"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.274205"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.274205"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.388843"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-13T01:24:10Z"
}
}
advisories/unreviewed/2024/08/GHSA-4m3r-vc8v-w5x9/GHSA-4m3r-vc8v-w5x9.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4m3r-vc8v-w5x9",
"modified": "2024-08-12T15:30:50Z",
"modified": "2024-08-13T03:31:16Z",
"published": "2024-08-12T15:30:50Z",
"aliases": [
"CVE-2024-40477"
],
"details": "A SQL injection vulnerability in \"/oahms/admin/forgot-password.php\" in PHPGurukul Old Age Home Management System v1.0 allows an attacker to execute arbitrary SQL commands via the \"email\" parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-12T13:38:28Z"
advisories/unreviewed/2024/08/GHSA-4v66-fhwx-979j/GHSA-4v66-fhwx-979j.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4v66-fhwx-979j",
"modified": "2024-08-12T15:30:50Z",
"modified": "2024-08-13T03:31:16Z",
"published": "2024-08-12T15:30:50Z",
"aliases": [
"CVE-2024-40482"
],
"details": "An Unrestricted file upload vulnerability was found in \"/Membership/edit_member.php\" of Kashipara Live Membership System v1.0, which allows attackers to execute arbitrary code via uploading a crafted PHP file.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-12T13:38:29Z"
advisories/unreviewed/2024/08/GHSA-5mcq-h782-4vg7/GHSA-5mcq-h782-4vg7.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5mcq-h782-4vg7",
"modified": "2024-08-12T15:30:50Z",
"modified": "2024-08-13T03:31:16Z",
"published": "2024-08-12T15:30:50Z",
"aliases": [
"CVE-2024-41570"
],
"details": "An Unauthenticated Server-Side Request Forgery (SSRF) in demon callback handling in Havoc 2 0.7 allows attackers to send arbitrary network traffic originating from the team server.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-918"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-12T13:38:31Z"
advisories/unreviewed/2024/08/GHSA-63m7-8wfj-vrjr/GHSA-63m7-8wfj-vrjr.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-63m7-8wfj-vrjr",
"modified": "2024-08-12T15:30:50Z",
"modified": "2024-08-13T03:31:16Z",
"published": "2024-08-12T15:30:50Z",
"aliases": [
"CVE-2024-40481"
],
"details": "A Stored Cross Site Scripting (XSS) vulnerability was found in \"/admin/view-enquiry.php\" in PHPGurukul Old Age Home Management System v1.0, which allows remote attackers to execute arbitrary code via the Contact Us page \"message\" parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-12T13:38:29Z"
advisories/unreviewed/2024/08/GHSA-8qcr-ggrf-g25w/GHSA-8qcr-ggrf-g25w.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8qcr-ggrf-g25w",
"modified": "2024-08-12T15:30:50Z",
"modified": "2024-08-13T03:31:16Z",
"published": "2024-08-12T15:30:50Z",
"aliases": [
"CVE-2024-40484"
],
"details": "A Reflected Cross Site Scripting (XSS) vulnerability was found in \"/oahms/search.php\" in PHPGurukul Old Age Home Management System v1.0, which allows remote attackers to execute arbitrary code via the \"searchdata\" parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-12T13:38:29Z"
advisories/unreviewed/2024/08/GHSA-8w5x-vc73-8w4j/GHSA-8w5x-vc73-8w4j.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8w5x-vc73-8w4j",
"modified": "2024-08-12T15:30:50Z",
"modified": "2024-08-13T03:31:16Z",
"published": "2024-08-12T15:30:50Z",
"aliases": [
"CVE-2024-40479"
],
"details": "A SQL injection vulnerability in \"/admin/quizquestion.php\" in Kashipara Online Exam System v1.0 allows remote attackers to execute arbitrary SQL commands via the \"eid\" parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-12T13:38:28Z"
advisories/unreviewed/2024/08/GHSA-c4v2-g748-rmrp/GHSA-c4v2-g748-rmrp.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c4v2-g748-rmrp",
"modified": "2024-08-12T15:30:51Z",
"modified": "2024-08-13T03:31:16Z",
"published": "2024-08-12T15:30:51Z",
"aliases": [
"CVE-2024-6133"
],
"details": "The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-12T13:38:38Z"
advisories/unreviewed/2024/08/GHSA-c6cg-7q2c-x256/GHSA-c6cg-7q2c-x256.json
+42
View File
@@ -0,0 +1,42 @@
{
"schema_version": "1.4.0",
"id": "GHSA-c6cg-7q2c-x256",
"modified": "2024-08-13T03:31:16Z",
"published": "2024-08-13T03:31:16Z",
"aliases": [
"CVE-2024-7388"
],
"details": "The WP Bannerize Pro plugin for WordPress is vulnerable to Stored Cross-Site Scripting via banner alt data in all versions up to, and including, 1.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with editor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7388"
},
{
"type": "WEB",
"url": "https://plugins.trac.wordpress.org/changeset/3133241/wp-bannerize-pro/trunk/plugin/CustomPostTypes/WPBannerizeCustomPostType.php"
},
{
"type": "WEB",
"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ba08dbad-15f9-43cf-b0d7-a2a4604cb4af?source=cve"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-13T03:15:04Z"
}
}
advisories/unreviewed/2024/08/GHSA-g3g3-23p3-c263/GHSA-g3g3-23p3-c263.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-g3g3-23p3-c263",
"modified": "2024-08-12T15:30:50Z",
"modified": "2024-08-13T03:31:16Z",
"published": "2024-08-12T15:30:50Z",
"aliases": [
"CVE-2024-41332"
],
"details": "Incorrect access control in the delete_category function of Sourcecodester Computer Laboratory Management System v1.0 allows authenticated attackers with low-level privileges to arbitrarily delete categories.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-12T13:38:30Z"
advisories/unreviewed/2024/08/GHSA-gj76-qqq8-xf7w/GHSA-gj76-qqq8-xf7w.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gj76-qqq8-xf7w",
"modified": "2024-08-12T15:30:50Z",
"modified": "2024-08-13T03:31:16Z",
"published": "2024-08-12T15:30:50Z",
"aliases": [
"CVE-2024-40474"
],
"details": "A Reflected Cross Site Scripting (XSS) vulnerability was found in \"edit-cate.php\" in SourceCodester House Rental Management System v1.0.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-12T13:38:28Z"
advisories/unreviewed/2024/08/GHSA-gqg7-4h7v-f4hf/GHSA-gqg7-4h7v-f4hf.json
+54
View File
@@ -0,0 +1,54 @@
{
"schema_version": "1.4.0",
"id": "GHSA-gqg7-4h7v-f4hf",
"modified": "2024-08-13T03:31:16Z",
"published": "2024-08-13T03:31:16Z",
"aliases": [
"CVE-2024-7707"
],
"details": "A vulnerability was found in Tenda FH1206 02.03.01.35 and classified as critical. Affected by this issue is the function formSafeEmailFilter of the file /goform/SafeEmailFilter of the component HTTP POST Request Handler. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7707"
},
{
"type": "WEB",
"url": "https://github.com/VodkaVortex/IoT/blob/main/formSafeEmailFilter.md"
},
{
"type": "WEB",
"url": "https://vuldb.com/?ctiid.274190"
},
{
"type": "WEB",
"url": "https://vuldb.com/?id.274190"
},
{
"type": "WEB",
"url": "https://vuldb.com/?submit.385670"
}
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-13T01:24:09Z"
}
}
advisories/unreviewed/2024/08/GHSA-hfgc-xxrj-48m3/GHSA-hfgc-xxrj-48m3.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hfgc-xxrj-48m3",
"modified": "2024-08-12T15:30:51Z",
"modified": "2024-08-13T03:31:16Z",
"published": "2024-08-12T15:30:51Z",
"aliases": [
"CVE-2024-6136"
],
"details": "The wp-cart-for-digital-products WordPress plugin before 8.5.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -27,7 +30,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-12T13:38:38Z"
advisories/unreviewed/2024/08/GHSA-jhjr-vvw5-3rf8/GHSA-jhjr-vvw5-3rf8.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jhjr-vvw5-3rf8",
"modified": "2024-08-12T15:30:50Z",
"modified": "2024-08-13T03:31:16Z",
"published": "2024-08-12T15:30:50Z",
"aliases": [
"CVE-2024-40472"
],
"details": "Sourcecodester Daily Calories Monitoring Tool v1.0 is vulnerable to SQL Injection via \"delete-calorie.php.\"",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-12T13:38:28Z"
advisories/unreviewed/2024/08/GHSA-p25w-hwv3-vj5q/GHSA-p25w-hwv3-vj5q.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p25w-hwv3-vj5q",
"modified": "2024-08-12T15:30:50Z",
"modified": "2024-08-13T03:31:16Z",
"published": "2024-08-12T15:30:50Z",
"aliases": [
"CVE-2024-40486"
],
"details": "A SQL injection vulnerability in \"/index.php\" of Kashipara Live Membership System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the email or password Login parameters.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-12T13:38:29Z"
advisories/unreviewed/2024/08/GHSA-pxph-2m4r-q6cp/GHSA-pxph-2m4r-q6cp.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pxph-2m4r-q6cp",
"modified": "2024-08-12T15:30:50Z",
"modified": "2024-08-13T03:31:16Z",
"published": "2024-08-12T15:30:50Z",
"aliases": [
"CVE-2024-40475"
],
"details": "SourceCodester Best House Rental Management System v1.0 is vulnerable to Incorrect Access Control via /rental/payment_report.php, /rental/balance_report.php, /rental/invoices.php, /rental/tenants.php, and /rental/users.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-08-12T13:38:28Z"

Some files were not shown because too many files have changed in this diff Show More