diff --git a/advisories/github-reviewed/2019/02/GHSA-4xc9-xhrj-v574/GHSA-4xc9-xhrj-v574.json b/advisories/github-reviewed/2019/02/GHSA-4xc9-xhrj-v574/GHSA-4xc9-xhrj-v574.json index f69dd572895..fe160878686 100644 --- a/advisories/github-reviewed/2019/02/GHSA-4xc9-xhrj-v574/GHSA-4xc9-xhrj-v574.json +++ b/advisories/github-reviewed/2019/02/GHSA-4xc9-xhrj-v574/GHSA-4xc9-xhrj-v574.json @@ -8,9 +8,7 @@ ], "summary": "Prototype Pollution in lodash", "details": "Versions of `lodash` before 4.17.11 are vulnerable to prototype pollution. \n\nThe vulnerable functions are 'defaultsDeep', 'merge', and 'mergeWith' which allow a malicious user to modify the prototype of `Object` via `{constructor: {prototype: {...}}}` causing the addition or modification of an existing property that will exist on all objects.\n\n\n\n\n## Recommendation\n\nUpdate to version 4.17.11 or later.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2020/04/GHSA-pc5p-h8pf-mvwp/GHSA-pc5p-h8pf-mvwp.json b/advisories/github-reviewed/2020/04/GHSA-pc5p-h8pf-mvwp/GHSA-pc5p-h8pf-mvwp.json index 30ab28dfbbf..85fad61ae12 100644 --- a/advisories/github-reviewed/2020/04/GHSA-pc5p-h8pf-mvwp/GHSA-pc5p-h8pf-mvwp.json +++ b/advisories/github-reviewed/2020/04/GHSA-pc5p-h8pf-mvwp/GHSA-pc5p-h8pf-mvwp.json @@ -3,9 +3,7 @@ "id": "GHSA-pc5p-h8pf-mvwp", "modified": "2023-11-01T20:54:11Z", "published": "2020-04-16T03:14:56Z", - "aliases": [ - - ], + "aliases": [], "summary": "Machine-In-The-Middle in https-proxy-agent", "details": "Versions of `https-proxy-agent` prior to 2.2.3 are vulnerable to Machine-In-The-Middle. The package fails to enforce TLS on the socket if the proxy server responds the to the request with a HTTP status different than 200. This allows an attacker with access to the proxy server to intercept unencrypted communications, which may include sensitive information such as credentials.\n\n\n## Recommendation\n\nUpgrade to version 3.0.0 or 2.2.3.", "severity": [ diff --git a/advisories/github-reviewed/2023/09/GHSA-h24c-6p6p-m3vx/GHSA-h24c-6p6p-m3vx.json b/advisories/github-reviewed/2023/09/GHSA-h24c-6p6p-m3vx/GHSA-h24c-6p6p-m3vx.json index 742ba38ac5d..5be13e3f17e 100644 --- a/advisories/github-reviewed/2023/09/GHSA-h24c-6p6p-m3vx/GHSA-h24c-6p6p-m3vx.json +++ b/advisories/github-reviewed/2023/09/GHSA-h24c-6p6p-m3vx/GHSA-h24c-6p6p-m3vx.json @@ -3,14 +3,10 @@ "id": "GHSA-h24c-6p6p-m3vx", "modified": "2023-09-01T20:51:05Z", "published": "2023-09-01T20:51:05Z", - "aliases": [ - - ], + "aliases": [], "summary": "tss-lib leaks secret keys in response to incorrectly constructed Paillier moduli", "details": "### Impact\n\nThe specification of the GG18 threshold ECDSA signature protocol contains a vulnerability allowing an attacker to recover the shared secret key. If a participant generates a Paillier modulus `N` containing small factors (less than `2^100`) they can interact with other participants in the signing protocol to steal their secret key shares in as little as sixteen signing attempts. The master key can then be reconstructed from these shares.\n\n### Patches\n\nThe implementation of GG18 in tss-lib did not prove that `N` is biprime or that it doesn't contain small factors. The fixed implementation adds the following proofs from the CGGMP21 threshold ECDSA protocol to the key generation:\n\n- Paillier-Blum Modulus (`N` is the product of two primes)\n- No Small Factor (both factors of `N` are greater than `2^256`)\n\nThese proofs apply to both the Paillier encryption modulus `N`, and the modulus `NTilde` used in MTA proofs.\n\nTo address the issue in the resharing protocol, an additional round has been added to the end so that participants can confirm that they received valid proofs.\n\n### References\n\n- [GG18](https://eprint.iacr.org/2019/114)\n- [CGGMP21](https://eprint.iacr.org/2021/060)", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2024/01/GHSA-v363-rrf2-5fmj/GHSA-v363-rrf2-5fmj.json b/advisories/github-reviewed/2024/01/GHSA-v363-rrf2-5fmj/GHSA-v363-rrf2-5fmj.json index db5760798db..354a8d03076 100644 --- a/advisories/github-reviewed/2024/01/GHSA-v363-rrf2-5fmj/GHSA-v363-rrf2-5fmj.json +++ b/advisories/github-reviewed/2024/01/GHSA-v363-rrf2-5fmj/GHSA-v363-rrf2-5fmj.json @@ -3,14 +3,10 @@ "id": "GHSA-v363-rrf2-5fmj", "modified": "2024-01-17T20:31:11Z", "published": "2024-01-17T20:31:11Z", - "aliases": [ - - ], + "aliases": [], "summary": "ferris-says has undefined behavior when not using UTF-8", "details": "Affected versions receive a `&[u8]` from the caller through a safe API, and pass it directly to the unsafe `str::from_utf8_unchecked` function.\n\nThe behavior of `ferris_says::say` is undefined if the bytes from the caller don't happen to be valid UTF-8.\n\nThe flaw was corrected in [ferris-says#21] by using the safe `str::from_utf8` instead, and returning an error on invalid input. However this fix has not yet been published to crates.io as a patch version for 0.2.\n\nSeparately, [ferris-says#32] has introduced a different API for version 0.3 which accepts input as `&str` rather than `&[u8]`, so is unaffected by this bug.\n\n[ferris-says#21]: https://github.com/rust-lang/ferris-says/pull/21\n[ferris-says#32]: https://github.com/rust-lang/ferris-says/pull/32", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -70,9 +66,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": true, "github_reviewed_at": "2024-01-17T20:31:11Z", diff --git a/advisories/github-reviewed/2024/05/GHSA-9hfw-cvf4-5x25/GHSA-9hfw-cvf4-5x25.json b/advisories/github-reviewed/2024/05/GHSA-9hfw-cvf4-5x25/GHSA-9hfw-cvf4-5x25.json index eef9b6063c7..5fac6081714 100644 --- a/advisories/github-reviewed/2024/05/GHSA-9hfw-cvf4-5x25/GHSA-9hfw-cvf4-5x25.json +++ b/advisories/github-reviewed/2024/05/GHSA-9hfw-cvf4-5x25/GHSA-9hfw-cvf4-5x25.json @@ -8,9 +8,7 @@ ], "summary": "wangEditor was discovered to contain a cross-site scripting (XSS) vulnerability via the image upload function", "details": "There is a cross-site scripting (XSS) issue in wangEditor via the image upload function in version 4.7.11. This issue has been fixed in version 4.7.12.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -62,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-06-02T22:32:11Z", diff --git a/advisories/unreviewed/2021/11/GHSA-2h85-c54w-28vc/GHSA-2h85-c54w-28vc.json b/advisories/unreviewed/2021/11/GHSA-2h85-c54w-28vc/GHSA-2h85-c54w-28vc.json index 5484a08b247..2a4e0d6bc93 100644 --- a/advisories/unreviewed/2021/11/GHSA-2h85-c54w-28vc/GHSA-2h85-c54w-28vc.json +++ b/advisories/unreviewed/2021/11/GHSA-2h85-c54w-28vc/GHSA-2h85-c54w-28vc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2021/12/GHSA-qj58-grv4-q5px/GHSA-qj58-grv4-q5px.json b/advisories/unreviewed/2021/12/GHSA-qj58-grv4-q5px/GHSA-qj58-grv4-q5px.json index 418ba03c6c9..385762698e1 100644 --- a/advisories/unreviewed/2021/12/GHSA-qj58-grv4-q5px/GHSA-qj58-grv4-q5px.json +++ b/advisories/unreviewed/2021/12/GHSA-qj58-grv4-q5px/GHSA-qj58-grv4-q5px.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/02/GHSA-4r75-vj28-w5c7/GHSA-4r75-vj28-w5c7.json b/advisories/unreviewed/2022/02/GHSA-4r75-vj28-w5c7/GHSA-4r75-vj28-w5c7.json index 6ff710f660c..4168217d5f8 100644 --- a/advisories/unreviewed/2022/02/GHSA-4r75-vj28-w5c7/GHSA-4r75-vj28-w5c7.json +++ b/advisories/unreviewed/2022/02/GHSA-4r75-vj28-w5c7/GHSA-4r75-vj28-w5c7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-gq8r-4g7c-69vw/GHSA-gq8r-4g7c-69vw.json b/advisories/unreviewed/2022/02/GHSA-gq8r-4g7c-69vw/GHSA-gq8r-4g7c-69vw.json index e6b9d617a87..f1c282f4da8 100644 --- a/advisories/unreviewed/2022/02/GHSA-gq8r-4g7c-69vw/GHSA-gq8r-4g7c-69vw.json +++ b/advisories/unreviewed/2022/02/GHSA-gq8r-4g7c-69vw/GHSA-gq8r-4g7c-69vw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-xjhm-2p9h-g3h8/GHSA-xjhm-2p9h-g3h8.json b/advisories/unreviewed/2022/02/GHSA-xjhm-2p9h-g3h8/GHSA-xjhm-2p9h-g3h8.json index 74212730b0d..d54b3eb9b50 100644 --- a/advisories/unreviewed/2022/02/GHSA-xjhm-2p9h-g3h8/GHSA-xjhm-2p9h-g3h8.json +++ b/advisories/unreviewed/2022/02/GHSA-xjhm-2p9h-g3h8/GHSA-xjhm-2p9h-g3h8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-23j3-qh8r-rpx6/GHSA-23j3-qh8r-rpx6.json b/advisories/unreviewed/2022/04/GHSA-23j3-qh8r-rpx6/GHSA-23j3-qh8r-rpx6.json index 9b8ef8b516c..8df18890ea7 100644 --- a/advisories/unreviewed/2022/04/GHSA-23j3-qh8r-rpx6/GHSA-23j3-qh8r-rpx6.json +++ b/advisories/unreviewed/2022/04/GHSA-23j3-qh8r-rpx6/GHSA-23j3-qh8r-rpx6.json @@ -7,12 +7,8 @@ "CVE-2002-1459" ], "details": "Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the \"Enable HTML in messages\" option is off, allows remote attackers to insert arbitrary script or HTML via message fields including (1) From, (2) E-Mail, and (3) Subject.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-23xp-397m-q9rx/GHSA-23xp-397m-q9rx.json b/advisories/unreviewed/2022/04/GHSA-23xp-397m-q9rx/GHSA-23xp-397m-q9rx.json index 1ada39fb7a8..d51974634ba 100644 --- a/advisories/unreviewed/2022/04/GHSA-23xp-397m-q9rx/GHSA-23xp-397m-q9rx.json +++ b/advisories/unreviewed/2022/04/GHSA-23xp-397m-q9rx/GHSA-23xp-397m-q9rx.json @@ -7,12 +7,8 @@ "CVE-2002-1530" ], "details": "The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows users to obtain usernames and plaintext passwords via a request to the userlist.asp program, which includes the passwords in a user editing form.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-24gw-m82p-246p/GHSA-24gw-m82p-246p.json b/advisories/unreviewed/2022/04/GHSA-24gw-m82p-246p/GHSA-24gw-m82p-246p.json index cf15ef20a66..88c83c25940 100644 --- a/advisories/unreviewed/2022/04/GHSA-24gw-m82p-246p/GHSA-24gw-m82p-246p.json +++ b/advisories/unreviewed/2022/04/GHSA-24gw-m82p-246p/GHSA-24gw-m82p-246p.json @@ -7,12 +7,8 @@ "CVE-2002-1848" ], "details": "TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which could allow local users to access passwords.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-253f-6wj2-m9j2/GHSA-253f-6wj2-m9j2.json b/advisories/unreviewed/2022/04/GHSA-253f-6wj2-m9j2/GHSA-253f-6wj2-m9j2.json index 426839ff8f9..2a01a3059cd 100644 --- a/advisories/unreviewed/2022/04/GHSA-253f-6wj2-m9j2/GHSA-253f-6wj2-m9j2.json +++ b/advisories/unreviewed/2022/04/GHSA-253f-6wj2-m9j2/GHSA-253f-6wj2-m9j2.json @@ -7,12 +7,8 @@ "CVE-2002-1554" ], "details": "Cisco ONS15454 and ONS15327 running ONS before 3.4 stores usernames and passwords in cleartext in the image database for the TCC, TCC+ or XTC, which could allow attackers to gain privileges by obtaining the passwords from the image database or a backup.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-25m6-rvg8-32wp/GHSA-25m6-rvg8-32wp.json b/advisories/unreviewed/2022/04/GHSA-25m6-rvg8-32wp/GHSA-25m6-rvg8-32wp.json index 6b092ea862b..560324fd2d2 100644 --- a/advisories/unreviewed/2022/04/GHSA-25m6-rvg8-32wp/GHSA-25m6-rvg8-32wp.json +++ b/advisories/unreviewed/2022/04/GHSA-25m6-rvg8-32wp/GHSA-25m6-rvg8-32wp.json @@ -7,12 +7,8 @@ "CVE-2002-1831" ], "details": "Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an invite request that contains hex-encoded spaces (%20) in the Invitation-Cookie field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-25wv-pf2x-9jpv/GHSA-25wv-pf2x-9jpv.json b/advisories/unreviewed/2022/04/GHSA-25wv-pf2x-9jpv/GHSA-25wv-pf2x-9jpv.json index 7a792a2a236..06beb79a647 100644 --- a/advisories/unreviewed/2022/04/GHSA-25wv-pf2x-9jpv/GHSA-25wv-pf2x-9jpv.json +++ b/advisories/unreviewed/2022/04/GHSA-25wv-pf2x-9jpv/GHSA-25wv-pf2x-9jpv.json @@ -7,12 +7,8 @@ "CVE-2002-1766" ], "details": "Buffer overflow in Composer in Netscape 4.77 allows local users to overwrite process memory and execute arbitrary code via a font tag with a long face attribute.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-262h-5vgm-7f9h/GHSA-262h-5vgm-7f9h.json b/advisories/unreviewed/2022/04/GHSA-262h-5vgm-7f9h/GHSA-262h-5vgm-7f9h.json index 7c0dd317bfb..5a175655f46 100644 --- a/advisories/unreviewed/2022/04/GHSA-262h-5vgm-7f9h/GHSA-262h-5vgm-7f9h.json +++ b/advisories/unreviewed/2022/04/GHSA-262h-5vgm-7f9h/GHSA-262h-5vgm-7f9h.json @@ -7,12 +7,8 @@ "CVE-2002-1642" ], "details": "PostgreSQL 7.2.1 and 7.2.2 allows local users to delete transaction log (pg_clog) data and cause a denial of service (data loss) via the VACUUM command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-269r-2rrv-62mq/GHSA-269r-2rrv-62mq.json b/advisories/unreviewed/2022/04/GHSA-269r-2rrv-62mq/GHSA-269r-2rrv-62mq.json index 051c6210084..da53fa66884 100644 --- a/advisories/unreviewed/2022/04/GHSA-269r-2rrv-62mq/GHSA-269r-2rrv-62mq.json +++ b/advisories/unreviewed/2022/04/GHSA-269r-2rrv-62mq/GHSA-269r-2rrv-62mq.json @@ -7,12 +7,8 @@ "CVE-2002-1433" ], "details": "Kerio MailServer 5.0 allows remote attackers to cause a denial of service (hang) via SYN packets to the supported network services.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-275f-wc6q-wvqf/GHSA-275f-wc6q-wvqf.json b/advisories/unreviewed/2022/04/GHSA-275f-wc6q-wvqf/GHSA-275f-wc6q-wvqf.json index c952b8dc15b..de46f943e76 100644 --- a/advisories/unreviewed/2022/04/GHSA-275f-wc6q-wvqf/GHSA-275f-wc6q-wvqf.json +++ b/advisories/unreviewed/2022/04/GHSA-275f-wc6q-wvqf/GHSA-275f-wc6q-wvqf.json @@ -7,12 +7,8 @@ "CVE-2002-1756" ], "details": "ACDSee 4.0 allows remote attackers to cause a denial of service (crash) via an .ais file with a long file description field, which is not properly handled when the file properties of the file are viewed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-27w3-xhwh-5xw4/GHSA-27w3-xhwh-5xw4.json b/advisories/unreviewed/2022/04/GHSA-27w3-xhwh-5xw4/GHSA-27w3-xhwh-5xw4.json index d388e1c3e4d..ae9928126d7 100644 --- a/advisories/unreviewed/2022/04/GHSA-27w3-xhwh-5xw4/GHSA-27w3-xhwh-5xw4.json +++ b/advisories/unreviewed/2022/04/GHSA-27w3-xhwh-5xw4/GHSA-27w3-xhwh-5xw4.json @@ -7,12 +7,8 @@ "CVE-2002-1931" ], "details": "Cross-site scripting (XSS) vulnerability in PHP Arena paFileDB 1.1.3 and 2.1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the search string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2847-m46v-fqww/GHSA-2847-m46v-fqww.json b/advisories/unreviewed/2022/04/GHSA-2847-m46v-fqww/GHSA-2847-m46v-fqww.json index 7787ed7857d..36f2b080d9a 100644 --- a/advisories/unreviewed/2022/04/GHSA-2847-m46v-fqww/GHSA-2847-m46v-fqww.json +++ b/advisories/unreviewed/2022/04/GHSA-2847-m46v-fqww/GHSA-2847-m46v-fqww.json @@ -7,12 +7,8 @@ "CVE-2002-1793" ], "details": "HTTP Server mod_ssl module running on HP-UX 11.04 with Virtualvault OS (VVOS) 4.5 through 4.6 closes the connection when the Apache server times out during an SSL request, which may allow attackers to cause a denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2f68-gh55-5wgh/GHSA-2f68-gh55-5wgh.json b/advisories/unreviewed/2022/04/GHSA-2f68-gh55-5wgh/GHSA-2f68-gh55-5wgh.json index 7b548846dbd..b9205b4f09c 100644 --- a/advisories/unreviewed/2022/04/GHSA-2f68-gh55-5wgh/GHSA-2f68-gh55-5wgh.json +++ b/advisories/unreviewed/2022/04/GHSA-2f68-gh55-5wgh/GHSA-2f68-gh55-5wgh.json @@ -7,12 +7,8 @@ "CVE-2002-1393" ], "details": "Multiple vulnerabilities in KDE 2 and KDE 3.x through 3.0.5 do not quote certain parameters that are inserted into a shell command, which could allow remote attackers to execute arbitrary commands via (1) URLs, (2) filenames, or (3) e-mail addresses.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -100,9 +96,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2h97-526w-g59p/GHSA-2h97-526w-g59p.json b/advisories/unreviewed/2022/04/GHSA-2h97-526w-g59p/GHSA-2h97-526w-g59p.json index 5fc5e7be429..533759fc1ef 100644 --- a/advisories/unreviewed/2022/04/GHSA-2h97-526w-g59p/GHSA-2h97-526w-g59p.json +++ b/advisories/unreviewed/2022/04/GHSA-2h97-526w-g59p/GHSA-2h97-526w-g59p.json @@ -7,12 +7,8 @@ "CVE-2002-1779" ], "details": "The \"block fragmented IP Packets\" option in Symantec Norton Personal Firewall 2002 (NPW) does not properly protect against certain attacks on Windows vulnerabilities such as jolt2 (CVE-2000-0305).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2pg2-2h5g-ffq5/GHSA-2pg2-2h5g-ffq5.json b/advisories/unreviewed/2022/04/GHSA-2pg2-2h5g-ffq5/GHSA-2pg2-2h5g-ffq5.json index 7e772486be3..8c48d82d810 100644 --- a/advisories/unreviewed/2022/04/GHSA-2pg2-2h5g-ffq5/GHSA-2pg2-2h5g-ffq5.json +++ b/advisories/unreviewed/2022/04/GHSA-2pg2-2h5g-ffq5/GHSA-2pg2-2h5g-ffq5.json @@ -7,12 +7,8 @@ "CVE-2002-1694" ], "details": "Microsoft Internet Information Server (IIS) 4.0 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while IIS is running.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2qpq-mrrj-2hc9/GHSA-2qpq-mrrj-2hc9.json b/advisories/unreviewed/2022/04/GHSA-2qpq-mrrj-2hc9/GHSA-2qpq-mrrj-2hc9.json index cd68fb60f79..6867b12ad83 100644 --- a/advisories/unreviewed/2022/04/GHSA-2qpq-mrrj-2hc9/GHSA-2qpq-mrrj-2hc9.json +++ b/advisories/unreviewed/2022/04/GHSA-2qpq-mrrj-2hc9/GHSA-2qpq-mrrj-2hc9.json @@ -7,12 +7,8 @@ "CVE-2002-1601" ], "details": "The Connectables feature in Adobe PhotoDeluxe 3.1 prepends the Adobe directory to the CLASSPATH environment variable, which allows applets to run with higher privileges and remote attackers to gain privileges via an HTML e-mail message or a web page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2v8j-4895-h2g9/GHSA-2v8j-4895-h2g9.json b/advisories/unreviewed/2022/04/GHSA-2v8j-4895-h2g9/GHSA-2v8j-4895-h2g9.json index 619ebee3655..67680b063ca 100644 --- a/advisories/unreviewed/2022/04/GHSA-2v8j-4895-h2g9/GHSA-2v8j-4895-h2g9.json +++ b/advisories/unreviewed/2022/04/GHSA-2v8j-4895-h2g9/GHSA-2v8j-4895-h2g9.json @@ -7,12 +7,8 @@ "CVE-2002-1478" ], "details": "Cacti before 0.6.8 allows attackers to execute arbitrary commands via the \"Data Input\" option in console mode.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2vcm-6jh2-5h48/GHSA-2vcm-6jh2-5h48.json b/advisories/unreviewed/2022/04/GHSA-2vcm-6jh2-5h48/GHSA-2vcm-6jh2-5h48.json index 0c0f25430a6..da4d0704a0e 100644 --- a/advisories/unreviewed/2022/04/GHSA-2vcm-6jh2-5h48/GHSA-2vcm-6jh2-5h48.json +++ b/advisories/unreviewed/2022/04/GHSA-2vcm-6jh2-5h48/GHSA-2vcm-6jh2-5h48.json @@ -7,12 +7,8 @@ "CVE-2002-1597" ], "details": "Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (halt) via a fragmented packet to the Gigabit interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2wqx-g8cq-9c5p/GHSA-2wqx-g8cq-9c5p.json b/advisories/unreviewed/2022/04/GHSA-2wqx-g8cq-9c5p/GHSA-2wqx-g8cq-9c5p.json index 610c75103f3..97fc8f09101 100644 --- a/advisories/unreviewed/2022/04/GHSA-2wqx-g8cq-9c5p/GHSA-2wqx-g8cq-9c5p.json +++ b/advisories/unreviewed/2022/04/GHSA-2wqx-g8cq-9c5p/GHSA-2wqx-g8cq-9c5p.json @@ -7,12 +7,8 @@ "CVE-2002-1673" ], "details": "The web interface for Webmin 0.92 does not properly quote or filter script code in files that are displayed to the interface, which allows local users to execute script and possibly steal cookies by inserting the script into certain files or fields, such as a real user name entry in the passwd file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-323p-2gfm-rcr4/GHSA-323p-2gfm-rcr4.json b/advisories/unreviewed/2022/04/GHSA-323p-2gfm-rcr4/GHSA-323p-2gfm-rcr4.json index d93f0ab1804..67143008a67 100644 --- a/advisories/unreviewed/2022/04/GHSA-323p-2gfm-rcr4/GHSA-323p-2gfm-rcr4.json +++ b/advisories/unreviewed/2022/04/GHSA-323p-2gfm-rcr4/GHSA-323p-2gfm-rcr4.json @@ -7,12 +7,8 @@ "CVE-2002-1531" ], "details": "The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (crash) via an HTTP request without a Content-Length parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-33mx-q46m-2wfr/GHSA-33mx-q46m-2wfr.json b/advisories/unreviewed/2022/04/GHSA-33mx-q46m-2wfr/GHSA-33mx-q46m-2wfr.json index 88702add4d8..4535cf37380 100644 --- a/advisories/unreviewed/2022/04/GHSA-33mx-q46m-2wfr/GHSA-33mx-q46m-2wfr.json +++ b/advisories/unreviewed/2022/04/GHSA-33mx-q46m-2wfr/GHSA-33mx-q46m-2wfr.json @@ -7,12 +7,8 @@ "CVE-2002-1860" ], "details": "Pramati Server 3.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot (\"WEB-INF.\").", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-34hm-859p-77vj/GHSA-34hm-859p-77vj.json b/advisories/unreviewed/2022/04/GHSA-34hm-859p-77vj/GHSA-34hm-859p-77vj.json index ba10a0f5711..fb4eee5a473 100644 --- a/advisories/unreviewed/2022/04/GHSA-34hm-859p-77vj/GHSA-34hm-859p-77vj.json +++ b/advisories/unreviewed/2022/04/GHSA-34hm-859p-77vj/GHSA-34hm-859p-77vj.json @@ -7,12 +7,8 @@ "CVE-2002-1552" ], "details": "Novell eDirectory (eDir) 8.6.2 and Netware 5.1 eDir 85.x allows users with expired passwords to gain inappropriate permissions when logging in from Remote Manager.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-34v4-g936-9pv9/GHSA-34v4-g936-9pv9.json b/advisories/unreviewed/2022/04/GHSA-34v4-g936-9pv9/GHSA-34v4-g936-9pv9.json index 7ac2454933b..77bb06f33ec 100644 --- a/advisories/unreviewed/2022/04/GHSA-34v4-g936-9pv9/GHSA-34v4-g936-9pv9.json +++ b/advisories/unreviewed/2022/04/GHSA-34v4-g936-9pv9/GHSA-34v4-g936-9pv9.json @@ -7,12 +7,8 @@ "CVE-2002-1647" ], "details": "The quick login feature in Slash Slashcode does not redirect the user to an alternate URL when the wrong password is provided, which makes it easier for remote web sites to guess the proper passwords by reading the username and password from the Referrer URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3626-95rf-mfw3/GHSA-3626-95rf-mfw3.json b/advisories/unreviewed/2022/04/GHSA-3626-95rf-mfw3/GHSA-3626-95rf-mfw3.json index cd78f8829b0..e7ed5645178 100644 --- a/advisories/unreviewed/2022/04/GHSA-3626-95rf-mfw3/GHSA-3626-95rf-mfw3.json +++ b/advisories/unreviewed/2022/04/GHSA-3626-95rf-mfw3/GHSA-3626-95rf-mfw3.json @@ -7,12 +7,8 @@ "CVE-2002-1568" ], "details": "OpenSSL 0.9.6e uses assertions when detecting buffer overflow attacks instead of less severe mechanisms, which allows remote attackers to cause a denial of service (crash) via certain messages that cause OpenSSL to abort from a failed assertion, as demonstrated using SSLv2 CLIENT_MASTER_KEY messages, which are not properly handled in s2_srvr.c.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-37xx-7qg6-2w7h/GHSA-37xx-7qg6-2w7h.json b/advisories/unreviewed/2022/04/GHSA-37xx-7qg6-2w7h/GHSA-37xx-7qg6-2w7h.json index 555d0d7a94b..aae2ea9fe71 100644 --- a/advisories/unreviewed/2022/04/GHSA-37xx-7qg6-2w7h/GHSA-37xx-7qg6-2w7h.json +++ b/advisories/unreviewed/2022/04/GHSA-37xx-7qg6-2w7h/GHSA-37xx-7qg6-2w7h.json @@ -7,12 +7,8 @@ "CVE-2002-1839" ], "details": "Trend Micro InterScan VirusWall for Windows NT 3.52 does not record the sender's IP address in the headers for a mail message when it is passed from VirusWall to the MTA, which allows remote attackers to hide the origin of the message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-389p-g5q7-wj2f/GHSA-389p-g5q7-wj2f.json b/advisories/unreviewed/2022/04/GHSA-389p-g5q7-wj2f/GHSA-389p-g5q7-wj2f.json index 5f02bc36013..17aaffc7a5b 100644 --- a/advisories/unreviewed/2022/04/GHSA-389p-g5q7-wj2f/GHSA-389p-g5q7-wj2f.json +++ b/advisories/unreviewed/2022/04/GHSA-389p-g5q7-wj2f/GHSA-389p-g5q7-wj2f.json @@ -7,12 +7,8 @@ "CVE-2002-1479" ], "details": "Cacti before 0.6.8 stores a MySQL username and password in plaintext in config.php, which has world-readable permissions, which allows local users to modify databases as the Cacti user and possibly gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3924-rc4j-fpvm/GHSA-3924-rc4j-fpvm.json b/advisories/unreviewed/2022/04/GHSA-3924-rc4j-fpvm/GHSA-3924-rc4j-fpvm.json index 9c60a21d4a7..3b90f5a0842 100644 --- a/advisories/unreviewed/2022/04/GHSA-3924-rc4j-fpvm/GHSA-3924-rc4j-fpvm.json +++ b/advisories/unreviewed/2022/04/GHSA-3924-rc4j-fpvm/GHSA-3924-rc4j-fpvm.json @@ -7,12 +7,8 @@ "CVE-2002-1764" ], "details": "acroread in Adobe Acrobat Reader 4.05 on Linux allows local users to overwrite arbitrary files via a symlink attack on temporary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-39h4-m68j-x2g9/GHSA-39h4-m68j-x2g9.json b/advisories/unreviewed/2022/04/GHSA-39h4-m68j-x2g9/GHSA-39h4-m68j-x2g9.json index 89a67a38dc5..16ef8bd147c 100644 --- a/advisories/unreviewed/2022/04/GHSA-39h4-m68j-x2g9/GHSA-39h4-m68j-x2g9.json +++ b/advisories/unreviewed/2022/04/GHSA-39h4-m68j-x2g9/GHSA-39h4-m68j-x2g9.json @@ -7,12 +7,8 @@ "CVE-2002-1572" ], "details": "Signed integer overflow in the bttv_read function in the bttv driver (bttv-driver.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3c7v-vp8q-5xh3/GHSA-3c7v-vp8q-5xh3.json b/advisories/unreviewed/2022/04/GHSA-3c7v-vp8q-5xh3/GHSA-3c7v-vp8q-5xh3.json index dc6aeb16cc1..0e903e324da 100644 --- a/advisories/unreviewed/2022/04/GHSA-3c7v-vp8q-5xh3/GHSA-3c7v-vp8q-5xh3.json +++ b/advisories/unreviewed/2022/04/GHSA-3c7v-vp8q-5xh3/GHSA-3c7v-vp8q-5xh3.json @@ -7,12 +7,8 @@ "CVE-2002-1504" ], "details": "Directory traversal vulnerability in WebServer 4 Everyone 1.22 allows remote attackers to read arbitrary files via \"..\\\" (dot-dot backslash) sequences in a URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3g48-4h8r-fg8c/GHSA-3g48-4h8r-fg8c.json b/advisories/unreviewed/2022/04/GHSA-3g48-4h8r-fg8c/GHSA-3g48-4h8r-fg8c.json index 59fb6530cc5..58a1aa97d9e 100644 --- a/advisories/unreviewed/2022/04/GHSA-3g48-4h8r-fg8c/GHSA-3g48-4h8r-fg8c.json +++ b/advisories/unreviewed/2022/04/GHSA-3g48-4h8r-fg8c/GHSA-3g48-4h8r-fg8c.json @@ -7,12 +7,8 @@ "CVE-2002-1794" ], "details": "Unknown vulnerability in pam_authz in the LDAP-UX Integration product on HP-UX 11.00 and 11.11 allows remote attackers to execute r-commands with privileges of other users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3gjg-222q-cwf6/GHSA-3gjg-222q-cwf6.json b/advisories/unreviewed/2022/04/GHSA-3gjg-222q-cwf6/GHSA-3gjg-222q-cwf6.json index c4f4dd43f88..784caf50922 100644 --- a/advisories/unreviewed/2022/04/GHSA-3gjg-222q-cwf6/GHSA-3gjg-222q-cwf6.json +++ b/advisories/unreviewed/2022/04/GHSA-3gjg-222q-cwf6/GHSA-3gjg-222q-cwf6.json @@ -7,12 +7,8 @@ "CVE-2002-1683" ], "details": "Cross-site scripting (XSS) vulnerability in BadBlue Personal Edition 1.7.3 allows remote attackers to execute arbitrary script as other users by injecting script into the cleanSearchString() function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3gqc-x6xc-59jp/GHSA-3gqc-x6xc-59jp.json b/advisories/unreviewed/2022/04/GHSA-3gqc-x6xc-59jp/GHSA-3gqc-x6xc-59jp.json index e90979735cd..f82fc1faea1 100644 --- a/advisories/unreviewed/2022/04/GHSA-3gqc-x6xc-59jp/GHSA-3gqc-x6xc-59jp.json +++ b/advisories/unreviewed/2022/04/GHSA-3gqc-x6xc-59jp/GHSA-3gqc-x6xc-59jp.json @@ -7,12 +7,8 @@ "CVE-2002-1542" ], "details": "SolarWinds TFTP server 5.0.55 and earlier allows remote attackers to cause a denial of service (crash) via a large UDP datagram, possibly triggering a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3hf6-v3rj-8h44/GHSA-3hf6-v3rj-8h44.json b/advisories/unreviewed/2022/04/GHSA-3hf6-v3rj-8h44/GHSA-3hf6-v3rj-8h44.json index 69a8f6f14e7..eaa96208a5b 100644 --- a/advisories/unreviewed/2022/04/GHSA-3hf6-v3rj-8h44/GHSA-3hf6-v3rj-8h44.json +++ b/advisories/unreviewed/2022/04/GHSA-3hf6-v3rj-8h44/GHSA-3hf6-v3rj-8h44.json @@ -7,12 +7,8 @@ "CVE-2002-1759" ], "details": "The upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables related to uploaded data, which allows remote attackers to cause PHProjekt to process arbitrary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3j55-q2r8-vc2j/GHSA-3j55-q2r8-vc2j.json b/advisories/unreviewed/2022/04/GHSA-3j55-q2r8-vc2j/GHSA-3j55-q2r8-vc2j.json index 81777b4b218..e095995059b 100644 --- a/advisories/unreviewed/2022/04/GHSA-3j55-q2r8-vc2j/GHSA-3j55-q2r8-vc2j.json +++ b/advisories/unreviewed/2022/04/GHSA-3j55-q2r8-vc2j/GHSA-3j55-q2r8-vc2j.json @@ -7,12 +7,8 @@ "CVE-2002-1751" ], "details": "csLiveSupport.cgi in CGIScript.net csLiveSupport allows remote attackers to execute arbitrary Perl code via the setup parameter, which is processed by the Perl eval function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3p6c-8vh9-cf59/GHSA-3p6c-8vh9-cf59.json b/advisories/unreviewed/2022/04/GHSA-3p6c-8vh9-cf59/GHSA-3p6c-8vh9-cf59.json index 156f4318d7f..f285e118bef 100644 --- a/advisories/unreviewed/2022/04/GHSA-3p6c-8vh9-cf59/GHSA-3p6c-8vh9-cf59.json +++ b/advisories/unreviewed/2022/04/GHSA-3p6c-8vh9-cf59/GHSA-3p6c-8vh9-cf59.json @@ -7,12 +7,8 @@ "CVE-2002-1413" ], "details": "RCONAG6 for Novell Netware SP2, while running RconJ in secure mode, allows remote attackers to bypass authentication using the RconJ \"Secure IP\" (SSL) option during a connection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3pv2-59mc-3r57/GHSA-3pv2-59mc-3r57.json b/advisories/unreviewed/2022/04/GHSA-3pv2-59mc-3r57/GHSA-3pv2-59mc-3r57.json index 5b1d9a85964..a6ed0f137ca 100644 --- a/advisories/unreviewed/2022/04/GHSA-3pv2-59mc-3r57/GHSA-3pv2-59mc-3r57.json +++ b/advisories/unreviewed/2022/04/GHSA-3pv2-59mc-3r57/GHSA-3pv2-59mc-3r57.json @@ -7,12 +7,8 @@ "CVE-2002-1532" ], "details": "The administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to cause a denial of service (resource exhaustion) via a GET request without the terminating /r/n/r/n (CRLF) sequence, which causes the interface to wait for the sequence and blocks other users from accessing it.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3qxj-g3qm-3q3r/GHSA-3qxj-g3qm-3q3r.json b/advisories/unreviewed/2022/04/GHSA-3qxj-g3qm-3q3r/GHSA-3qxj-g3qm-3q3r.json index 2e673134a50..a562f306035 100644 --- a/advisories/unreviewed/2022/04/GHSA-3qxj-g3qm-3q3r/GHSA-3qxj-g3qm-3q3r.json +++ b/advisories/unreviewed/2022/04/GHSA-3qxj-g3qm-3q3r/GHSA-3qxj-g3qm-3q3r.json @@ -7,12 +7,8 @@ "CVE-2002-1599" ], "details": "DansGuardian before 2.4.5-1 allows remote attackers to bypass content filtering rules via hex-encoded URLs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3r4f-9rj5-7g3c/GHSA-3r4f-9rj5-7g3c.json b/advisories/unreviewed/2022/04/GHSA-3r4f-9rj5-7g3c/GHSA-3r4f-9rj5-7g3c.json index 93b7289e004..659af2742bf 100644 --- a/advisories/unreviewed/2022/04/GHSA-3r4f-9rj5-7g3c/GHSA-3r4f-9rj5-7g3c.json +++ b/advisories/unreviewed/2022/04/GHSA-3r4f-9rj5-7g3c/GHSA-3r4f-9rj5-7g3c.json @@ -7,12 +7,8 @@ "CVE-2002-1488" ], "details": "The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) via a PART message with (1) a missing channel or (2) a channel that the Trillian user is not in.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3v5h-f93x-83jm/GHSA-3v5h-f93x-83jm.json b/advisories/unreviewed/2022/04/GHSA-3v5h-f93x-83jm/GHSA-3v5h-f93x-83jm.json index aa7f765bb3c..0d918532563 100644 --- a/advisories/unreviewed/2022/04/GHSA-3v5h-f93x-83jm/GHSA-3v5h-f93x-83jm.json +++ b/advisories/unreviewed/2022/04/GHSA-3v5h-f93x-83jm/GHSA-3v5h-f93x-83jm.json @@ -7,12 +7,8 @@ "CVE-2002-1703" ], "details": "Cross-site scripting vulnerability (XSS) in auction.cgi for Mewsoft NetAuction 3.0 allows remote attackers to execute arbitrary script as other users via the Term parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3vh5-5fv5-286r/GHSA-3vh5-5fv5-286r.json b/advisories/unreviewed/2022/04/GHSA-3vh5-5fv5-286r/GHSA-3vh5-5fv5-286r.json index 3511a96e57b..7a356207ddf 100644 --- a/advisories/unreviewed/2022/04/GHSA-3vh5-5fv5-286r/GHSA-3vh5-5fv5-286r.json +++ b/advisories/unreviewed/2022/04/GHSA-3vh5-5fv5-286r/GHSA-3vh5-5fv5-286r.json @@ -7,12 +7,8 @@ "CVE-2002-1746" ], "details": "Vtun 2.5b1 allows remote attackers to inject data into user sessions by sniffing and replaying packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3vhq-cgpj-wx98/GHSA-3vhq-cgpj-wx98.json b/advisories/unreviewed/2022/04/GHSA-3vhq-cgpj-wx98/GHSA-3vhq-cgpj-wx98.json index 4ac9879d0e7..241459b02a1 100644 --- a/advisories/unreviewed/2022/04/GHSA-3vhq-cgpj-wx98/GHSA-3vhq-cgpj-wx98.json +++ b/advisories/unreviewed/2022/04/GHSA-3vhq-cgpj-wx98/GHSA-3vhq-cgpj-wx98.json @@ -7,12 +7,8 @@ "CVE-2002-1833" ], "details": "The default configurations for DocuTech 6110 and DocuTech 6115 have a default administrative password of (1) \"service!\" on Solaris 8.0 or (2) \"administ\" on Windows NT, which allows remote attackers to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3vwx-8478-gm7p/GHSA-3vwx-8478-gm7p.json b/advisories/unreviewed/2022/04/GHSA-3vwx-8478-gm7p/GHSA-3vwx-8478-gm7p.json index 0feb2bee702..a21b2287c5e 100644 --- a/advisories/unreviewed/2022/04/GHSA-3vwx-8478-gm7p/GHSA-3vwx-8478-gm7p.json +++ b/advisories/unreviewed/2022/04/GHSA-3vwx-8478-gm7p/GHSA-3vwx-8478-gm7p.json @@ -7,12 +7,8 @@ "CVE-2002-1487" ], "details": "The IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service (crash) by sending the raw messages (1) 206, (2) 211, (3) 213, (4) 214, (5) 215, (6) 217, (7) 218, (8) 243, (9) 302, (10) 317, (11) 324, (12) 332, (13) 333, (14) 352, and (15) 367.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3w9v-g7vm-2m73/GHSA-3w9v-g7vm-2m73.json b/advisories/unreviewed/2022/04/GHSA-3w9v-g7vm-2m73/GHSA-3w9v-g7vm-2m73.json index 5c6134a885f..d1081a1a921 100644 --- a/advisories/unreviewed/2022/04/GHSA-3w9v-g7vm-2m73/GHSA-3w9v-g7vm-2m73.json +++ b/advisories/unreviewed/2022/04/GHSA-3w9v-g7vm-2m73/GHSA-3w9v-g7vm-2m73.json @@ -7,12 +7,8 @@ "CVE-2002-1711" ], "details": "BasiliX 1.1.0 saves attachments in a world readable /tmp/BasiliX directory, which allows local users to read other users' attachments.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3wmf-hh5m-35jh/GHSA-3wmf-hh5m-35jh.json b/advisories/unreviewed/2022/04/GHSA-3wmf-hh5m-35jh/GHSA-3wmf-hh5m-35jh.json index 4e36cc72592..293d678539f 100644 --- a/advisories/unreviewed/2022/04/GHSA-3wmf-hh5m-35jh/GHSA-3wmf-hh5m-35jh.json +++ b/advisories/unreviewed/2022/04/GHSA-3wmf-hh5m-35jh/GHSA-3wmf-hh5m-35jh.json @@ -7,12 +7,8 @@ "CVE-2002-1936" ], "details": "UTStarcom BAS 1000 3.1.10 creates several default or back door accounts and passwords, which allows remote attackers to gain access via (1) field account with a password of \"*field\", (2) guru account with a password of \"*3noguru\", (3) snmp account with a password of \"snmp\", or (4) dbase account with a password of \"dbase\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-42v4-xpx8-cgxf/GHSA-42v4-xpx8-cgxf.json b/advisories/unreviewed/2022/04/GHSA-42v4-xpx8-cgxf/GHSA-42v4-xpx8-cgxf.json index 514483a31e2..5ecb4432b17 100644 --- a/advisories/unreviewed/2022/04/GHSA-42v4-xpx8-cgxf/GHSA-42v4-xpx8-cgxf.json +++ b/advisories/unreviewed/2022/04/GHSA-42v4-xpx8-cgxf/GHSA-42v4-xpx8-cgxf.json @@ -7,12 +7,8 @@ "CVE-2002-1832" ], "details": "Unknown vulnerability in the \"ipopts decode\" functionality in Firestorm IDS 0.4.0 through 0.4.2 allows remote attackers to cause a denial of service (crash) via certain IP options.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-43w9-3x53-gwvr/GHSA-43w9-3x53-gwvr.json b/advisories/unreviewed/2022/04/GHSA-43w9-3x53-gwvr/GHSA-43w9-3x53-gwvr.json index 8d823e9941a..7e3a1642318 100644 --- a/advisories/unreviewed/2022/04/GHSA-43w9-3x53-gwvr/GHSA-43w9-3x53-gwvr.json +++ b/advisories/unreviewed/2022/04/GHSA-43w9-3x53-gwvr/GHSA-43w9-3x53-gwvr.json @@ -7,12 +7,8 @@ "CVE-2002-1856" ], "details": "HP Application Server 8.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot (\"WEB-INF.\").", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-487j-f8hg-5p28/GHSA-487j-f8hg-5p28.json b/advisories/unreviewed/2022/04/GHSA-487j-f8hg-5p28/GHSA-487j-f8hg-5p28.json index b41e5b2275e..60be0e3e630 100644 --- a/advisories/unreviewed/2022/04/GHSA-487j-f8hg-5p28/GHSA-487j-f8hg-5p28.json +++ b/advisories/unreviewed/2022/04/GHSA-487j-f8hg-5p28/GHSA-487j-f8hg-5p28.json @@ -7,12 +7,8 @@ "CVE-2002-1448" ], "details": "An undocumented SNMP read/write community string ('NoGaH$@!') in Avaya P330, P130, and M770-ATM Cajun products allows remote attackers to gain administrative privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-489v-qc6r-c8fp/GHSA-489v-qc6r-c8fp.json b/advisories/unreviewed/2022/04/GHSA-489v-qc6r-c8fp/GHSA-489v-qc6r-c8fp.json index eaa3bcbb1da..c7d54b8dca5 100644 --- a/advisories/unreviewed/2022/04/GHSA-489v-qc6r-c8fp/GHSA-489v-qc6r-c8fp.json +++ b/advisories/unreviewed/2022/04/GHSA-489v-qc6r-c8fp/GHSA-489v-qc6r-c8fp.json @@ -7,12 +7,8 @@ "CVE-2002-1546" ], "details": "BRS WebWeaver Web Server 1.01 allows remote attackers to bypass password protections for files and directories via an HTTP request containing a \"/./\" sequence.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4c6r-jh44-7f3r/GHSA-4c6r-jh44-7f3r.json b/advisories/unreviewed/2022/04/GHSA-4c6r-jh44-7f3r/GHSA-4c6r-jh44-7f3r.json index 4b443f424aa..ee59a277eef 100644 --- a/advisories/unreviewed/2022/04/GHSA-4c6r-jh44-7f3r/GHSA-4c6r-jh44-7f3r.json +++ b/advisories/unreviewed/2022/04/GHSA-4c6r-jh44-7f3r/GHSA-4c6r-jh44-7f3r.json @@ -7,12 +7,8 @@ "CVE-2002-1828" ], "details": "Savant Webserver 3.1 allows remote attackers to cause a denial of service (crash) via an HTTP GET request with a negative Content-Length value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4h84-pxv3-r3px/GHSA-4h84-pxv3-r3px.json b/advisories/unreviewed/2022/04/GHSA-4h84-pxv3-r3px/GHSA-4h84-pxv3-r3px.json index 7e7373b349c..0d03c578718 100644 --- a/advisories/unreviewed/2022/04/GHSA-4h84-pxv3-r3px/GHSA-4h84-pxv3-r3px.json +++ b/advisories/unreviewed/2022/04/GHSA-4h84-pxv3-r3px/GHSA-4h84-pxv3-r3px.json @@ -7,12 +7,8 @@ "CVE-2002-1573" ], "details": "Unspecified vulnerability in the pcilynx ieee1394 firewire driver (pcilynx.c) in Linux kernel before 2.4.20 has unknown impact and attack vectors, related to \"wrap handling.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4hmm-jrjf-3vg7/GHSA-4hmm-jrjf-3vg7.json b/advisories/unreviewed/2022/04/GHSA-4hmm-jrjf-3vg7/GHSA-4hmm-jrjf-3vg7.json index 3b4473d8f8a..44a7635d59a 100644 --- a/advisories/unreviewed/2022/04/GHSA-4hmm-jrjf-3vg7/GHSA-4hmm-jrjf-3vg7.json +++ b/advisories/unreviewed/2022/04/GHSA-4hmm-jrjf-3vg7/GHSA-4hmm-jrjf-3vg7.json @@ -7,12 +7,8 @@ "CVE-2002-1596" ], "details": "Cisco SN 5420 Storage Router 1.1(5) and earlier allows remote attackers to cause a denial of service (router crash) via an HTTP request with large headers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4j62-p9ff-p8vq/GHSA-4j62-p9ff-p8vq.json b/advisories/unreviewed/2022/04/GHSA-4j62-p9ff-p8vq/GHSA-4j62-p9ff-p8vq.json index f5629e487c7..2203262e676 100644 --- a/advisories/unreviewed/2022/04/GHSA-4j62-p9ff-p8vq/GHSA-4j62-p9ff-p8vq.json +++ b/advisories/unreviewed/2022/04/GHSA-4j62-p9ff-p8vq/GHSA-4j62-p9ff-p8vq.json @@ -7,12 +7,8 @@ "CVE-2002-1792" ], "details": "Buffer overflow in Fake Identd 0.9 through 1.4 allows remote attackers to execute arbitrary code as root via a long request that is split into multiple packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4jvf-32v9-9xxw/GHSA-4jvf-32v9-9xxw.json b/advisories/unreviewed/2022/04/GHSA-4jvf-32v9-9xxw/GHSA-4jvf-32v9-9xxw.json index 49409db2954..5a9ca1de35b 100644 --- a/advisories/unreviewed/2022/04/GHSA-4jvf-32v9-9xxw/GHSA-4jvf-32v9-9xxw.json +++ b/advisories/unreviewed/2022/04/GHSA-4jvf-32v9-9xxw/GHSA-4jvf-32v9-9xxw.json @@ -7,12 +7,8 @@ "CVE-2002-1670" ], "details": "Microsoft Windows XP Professional upgrade edition overwrites previously installed patches for Internet Explorer 6.0, leaving Internet Explorer unpatched.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4mv8-w5x5-hv29/GHSA-4mv8-w5x5-hv29.json b/advisories/unreviewed/2022/04/GHSA-4mv8-w5x5-hv29/GHSA-4mv8-w5x5-hv29.json index 3b475394132..531d2268310 100644 --- a/advisories/unreviewed/2022/04/GHSA-4mv8-w5x5-hv29/GHSA-4mv8-w5x5-hv29.json +++ b/advisories/unreviewed/2022/04/GHSA-4mv8-w5x5-hv29/GHSA-4mv8-w5x5-hv29.json @@ -7,12 +7,8 @@ "CVE-2002-1937" ], "details": "Symantec Firewall/VPN Appliance 100 through 200R hardcodes the administrator's MAC address inside the firewall's configuration, which allows remote attackers to spoof the administrator's MAC address and perform an ARP poisoning man-in-the-middle attack to obtain the administrator's password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4q27-9cff-wvg9/GHSA-4q27-9cff-wvg9.json b/advisories/unreviewed/2022/04/GHSA-4q27-9cff-wvg9/GHSA-4q27-9cff-wvg9.json index 60dcb824e5e..a56a5fee27d 100644 --- a/advisories/unreviewed/2022/04/GHSA-4q27-9cff-wvg9/GHSA-4q27-9cff-wvg9.json +++ b/advisories/unreviewed/2022/04/GHSA-4q27-9cff-wvg9/GHSA-4q27-9cff-wvg9.json @@ -7,12 +7,8 @@ "CVE-2002-1544" ], "details": "Directory traversal vulnerability in CooolSoft Personal FTP Server 2.24 allows remote attackers to read or modify arbitrary files via .. (dot dot) sequences in the commands (1) LIST (ls), (2) mkdir, (3) put, or (4) get.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4q5f-mmpv-8ffr/GHSA-4q5f-mmpv-8ffr.json b/advisories/unreviewed/2022/04/GHSA-4q5f-mmpv-8ffr/GHSA-4q5f-mmpv-8ffr.json index 1b67e8a7f69..ddf08f15e66 100644 --- a/advisories/unreviewed/2022/04/GHSA-4q5f-mmpv-8ffr/GHSA-4q5f-mmpv-8ffr.json +++ b/advisories/unreviewed/2022/04/GHSA-4q5f-mmpv-8ffr/GHSA-4q5f-mmpv-8ffr.json @@ -7,12 +7,8 @@ "CVE-2002-1588" ], "details": "Mailtool for OpenWindows 3.6, 3.6.1, and 3.6.2 allows remote attackers to cause a denial of service (mailtool segmentation violation and crash) via a malformed mail attachment.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4qf2-7vj7-p7mr/GHSA-4qf2-7vj7-p7mr.json b/advisories/unreviewed/2022/04/GHSA-4qf2-7vj7-p7mr/GHSA-4qf2-7vj7-p7mr.json index b6f9e800c88..8587fcb4ff6 100644 --- a/advisories/unreviewed/2022/04/GHSA-4qf2-7vj7-p7mr/GHSA-4qf2-7vj7-p7mr.json +++ b/advisories/unreviewed/2022/04/GHSA-4qf2-7vj7-p7mr/GHSA-4qf2-7vj7-p7mr.json @@ -7,12 +7,8 @@ "CVE-2002-1837" ], "details": "The getAlbumToDisplay function in idsShared.pm for Image Display System (IDS) 0.81 allows remote attackers to determine the existence of arbitrary directories via \"..\" sequences in the album parameter, which generates different error messages depending on whether the directory exists or not.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4vfx-9gfr-xqhm/GHSA-4vfx-9gfr-xqhm.json b/advisories/unreviewed/2022/04/GHSA-4vfx-9gfr-xqhm/GHSA-4vfx-9gfr-xqhm.json index 67335ff11fb..73124b7b14c 100644 --- a/advisories/unreviewed/2022/04/GHSA-4vfx-9gfr-xqhm/GHSA-4vfx-9gfr-xqhm.json +++ b/advisories/unreviewed/2022/04/GHSA-4vfx-9gfr-xqhm/GHSA-4vfx-9gfr-xqhm.json @@ -7,12 +7,8 @@ "CVE-2002-1528" ], "details": "MsmMask.exe in MondoSearch 4.4 allows remote attackers to obtain the source code of scripts via the mask parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4wfh-pfwv-qc24/GHSA-4wfh-pfwv-qc24.json b/advisories/unreviewed/2022/04/GHSA-4wfh-pfwv-qc24/GHSA-4wfh-pfwv-qc24.json index ec9c76eaab5..31c1ef2cf02 100644 --- a/advisories/unreviewed/2022/04/GHSA-4wfh-pfwv-qc24/GHSA-4wfh-pfwv-qc24.json +++ b/advisories/unreviewed/2022/04/GHSA-4wfh-pfwv-qc24/GHSA-4wfh-pfwv-qc24.json @@ -7,12 +7,8 @@ "CVE-2002-1758" ], "details": "PHProjekt 2.0 through 3.1 allows remote attackers to view or modify data via requests to certain scripts that do not verify if the user is logged in.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-533p-6hxj-4rjj/GHSA-533p-6hxj-4rjj.json b/advisories/unreviewed/2022/04/GHSA-533p-6hxj-4rjj/GHSA-533p-6hxj-4rjj.json index ede81e9793c..b5babe05aee 100644 --- a/advisories/unreviewed/2022/04/GHSA-533p-6hxj-4rjj/GHSA-533p-6hxj-4rjj.json +++ b/advisories/unreviewed/2022/04/GHSA-533p-6hxj-4rjj/GHSA-533p-6hxj-4rjj.json @@ -7,12 +7,8 @@ "CVE-2002-1414" ], "details": "Buffer overflow in qmailadmin allows local users to gain privileges via a long QMAILADMIN_TEMPLATEDIR environment variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-54r3-gg3v-7r82/GHSA-54r3-gg3v-7r82.json b/advisories/unreviewed/2022/04/GHSA-54r3-gg3v-7r82/GHSA-54r3-gg3v-7r82.json index 76ed049ab8a..c538356484a 100644 --- a/advisories/unreviewed/2022/04/GHSA-54r3-gg3v-7r82/GHSA-54r3-gg3v-7r82.json +++ b/advisories/unreviewed/2022/04/GHSA-54r3-gg3v-7r82/GHSA-54r3-gg3v-7r82.json @@ -7,12 +7,8 @@ "CVE-2002-1650" ], "details": "The spell checker plugin (check_me.mod.php) for SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary commands via a modified sqspell_command parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-55hp-9phj-gjxc/GHSA-55hp-9phj-gjxc.json b/advisories/unreviewed/2022/04/GHSA-55hp-9phj-gjxc/GHSA-55hp-9phj-gjxc.json index d500965c5b6..26836c656a4 100644 --- a/advisories/unreviewed/2022/04/GHSA-55hp-9phj-gjxc/GHSA-55hp-9phj-gjxc.json +++ b/advisories/unreviewed/2022/04/GHSA-55hp-9phj-gjxc/GHSA-55hp-9phj-gjxc.json @@ -7,12 +7,8 @@ "CVE-2002-1646" ], "details": "SSH Secure Shell for Servers 3.0.0 to 3.1.1 allows remote attackers to override the AllowedAuthentications configuration and use less secure authentication schemes (e.g. password) than configured for the server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-56pm-hfw9-x8hx/GHSA-56pm-hfw9-x8hx.json b/advisories/unreviewed/2022/04/GHSA-56pm-hfw9-x8hx/GHSA-56pm-hfw9-x8hx.json index 6aab95f5d17..18082e284ff 100644 --- a/advisories/unreviewed/2022/04/GHSA-56pm-hfw9-x8hx/GHSA-56pm-hfw9-x8hx.json +++ b/advisories/unreviewed/2022/04/GHSA-56pm-hfw9-x8hx/GHSA-56pm-hfw9-x8hx.json @@ -7,12 +7,8 @@ "CVE-2002-1823" ], "details": "Buffer overflow in the HttpGetRequest function in Zeroo HTTP server 1.5 allows remote attackers to execute arbitrary code via a long HTTP request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5795-f5xp-rfch/GHSA-5795-f5xp-rfch.json b/advisories/unreviewed/2022/04/GHSA-5795-f5xp-rfch/GHSA-5795-f5xp-rfch.json index 1529f74e9a2..cd4b526e9a7 100644 --- a/advisories/unreviewed/2022/04/GHSA-5795-f5xp-rfch/GHSA-5795-f5xp-rfch.json +++ b/advisories/unreviewed/2022/04/GHSA-5795-f5xp-rfch/GHSA-5795-f5xp-rfch.json @@ -7,12 +7,8 @@ "CVE-2002-1732" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Actinic Catalog 4.7.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string argument to certain .pl files, (2) the REFPAGE parameter to ca000007.pl, (3) PRODREF parameter to ss000007.pl, or (4) hop parameter to ca000001.pl.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5887-hhqx-pjgh/GHSA-5887-hhqx-pjgh.json b/advisories/unreviewed/2022/04/GHSA-5887-hhqx-pjgh/GHSA-5887-hhqx-pjgh.json index ac2d005d67f..975b2c13ac5 100644 --- a/advisories/unreviewed/2022/04/GHSA-5887-hhqx-pjgh/GHSA-5887-hhqx-pjgh.json +++ b/advisories/unreviewed/2022/04/GHSA-5887-hhqx-pjgh/GHSA-5887-hhqx-pjgh.json @@ -7,12 +7,8 @@ "CVE-2002-1614" ], "details": "Buffer overflow in HP Tru64 UNIX allows local users to execute arbitrary code via a long argument to /usr/bin/at.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-59xx-m4qv-93v2/GHSA-59xx-m4qv-93v2.json b/advisories/unreviewed/2022/04/GHSA-59xx-m4qv-93v2/GHSA-59xx-m4qv-93v2.json index c888dc5b6d9..201d4a6ff96 100644 --- a/advisories/unreviewed/2022/04/GHSA-59xx-m4qv-93v2/GHSA-59xx-m4qv-93v2.json +++ b/advisories/unreviewed/2022/04/GHSA-59xx-m4qv-93v2/GHSA-59xx-m4qv-93v2.json @@ -7,12 +7,8 @@ "CVE-2002-1617" ], "details": "Multiple buffer overflows in HP Tru64 UNIX 5.x allow local users to execute arbitrary code via (1) a long -contextDir argument to dtaction, (2) a long -p argument to dtprintinfo, (3) a long -customization argument to dxterm, or (4) a long DISPLAY environment variable to dtterm.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5c66-864x-76jc/GHSA-5c66-864x-76jc.json b/advisories/unreviewed/2022/04/GHSA-5c66-864x-76jc/GHSA-5c66-864x-76jc.json index a16a73cc60f..b295b1ab6e0 100644 --- a/advisories/unreviewed/2022/04/GHSA-5c66-864x-76jc/GHSA-5c66-864x-76jc.json +++ b/advisories/unreviewed/2022/04/GHSA-5c66-864x-76jc/GHSA-5c66-864x-76jc.json @@ -7,12 +7,8 @@ "CVE-2002-1569" ], "details": "gv 3.5.8, and possibly earlier versions, allows remote attackers to execute arbitrary commands via shell metacharacters in the filename for (1) a PDF file or (2) a gzip file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5c97-xqfx-qj2f/GHSA-5c97-xqfx-qj2f.json b/advisories/unreviewed/2022/04/GHSA-5c97-xqfx-qj2f/GHSA-5c97-xqfx-qj2f.json index f63c1103a4d..16a4835fd46 100644 --- a/advisories/unreviewed/2022/04/GHSA-5c97-xqfx-qj2f/GHSA-5c97-xqfx-qj2f.json +++ b/advisories/unreviewed/2022/04/GHSA-5c97-xqfx-qj2f/GHSA-5c97-xqfx-qj2f.json @@ -7,12 +7,8 @@ "CVE-2002-1773" ], "details": "Buffer overflow in ICQ 2.6x for MacOS X 10.0 through 10.1.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5cfv-5qf6-jmcq/GHSA-5cfv-5qf6-jmcq.json b/advisories/unreviewed/2022/04/GHSA-5cfv-5qf6-jmcq/GHSA-5cfv-5qf6-jmcq.json index ddf4f74169f..f5ae540ae1d 100644 --- a/advisories/unreviewed/2022/04/GHSA-5cfv-5qf6-jmcq/GHSA-5cfv-5qf6-jmcq.json +++ b/advisories/unreviewed/2022/04/GHSA-5cfv-5qf6-jmcq/GHSA-5cfv-5qf6-jmcq.json @@ -7,12 +7,8 @@ "CVE-2002-1705" ], "details": "Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to cause a denial of service (crash) via a Cascading Style Sheet (CSS) with the p{cssText} element declared and a bold font weight.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5j3g-v6vc-vj66/GHSA-5j3g-v6vc-vj66.json b/advisories/unreviewed/2022/04/GHSA-5j3g-v6vc-vj66/GHSA-5j3g-v6vc-vj66.json index 390b4707c9a..7a4753b47bb 100644 --- a/advisories/unreviewed/2022/04/GHSA-5j3g-v6vc-vj66/GHSA-5j3g-v6vc-vj66.json +++ b/advisories/unreviewed/2022/04/GHSA-5j3g-v6vc-vj66/GHSA-5j3g-v6vc-vj66.json @@ -7,12 +7,8 @@ "CVE-2002-1434" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in the Web mail module of Kerio MailServer 5.0 allow remote attackers to execute HTML script as other users via certain URLs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5m3m-59cv-29g8/GHSA-5m3m-59cv-29g8.json b/advisories/unreviewed/2022/04/GHSA-5m3m-59cv-29g8/GHSA-5m3m-59cv-29g8.json index 5e917578df5..55f8a262492 100644 --- a/advisories/unreviewed/2022/04/GHSA-5m3m-59cv-29g8/GHSA-5m3m-59cv-29g8.json +++ b/advisories/unreviewed/2022/04/GHSA-5m3m-59cv-29g8/GHSA-5m3m-59cv-29g8.json @@ -7,12 +7,8 @@ "CVE-2002-1656" ], "details": "X-News (x_news) 1.1 and earlier allows attackers to authenticate as other users by obtaining the MD5 checksum of the password, e.g. via sniffing or the users.txt data file, and providing it in a cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5m9w-g768-9j73/GHSA-5m9w-g768-9j73.json b/advisories/unreviewed/2022/04/GHSA-5m9w-g768-9j73/GHSA-5m9w-g768-9j73.json index 75a267d0c74..b50c80eedce 100644 --- a/advisories/unreviewed/2022/04/GHSA-5m9w-g768-9j73/GHSA-5m9w-g768-9j73.json +++ b/advisories/unreviewed/2022/04/GHSA-5m9w-g768-9j73/GHSA-5m9w-g768-9j73.json @@ -7,12 +7,8 @@ "CVE-2002-1501" ], "details": "The MPS functionality in Enterasys SSR8000 (Smart Switch Router) before firmware 8.3.0.10 allows remote attackers to cause a denial of service (crash) via multiple port scans to ports 15077 and 15078.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5mpg-wwpc-q4pq/GHSA-5mpg-wwpc-q4pq.json b/advisories/unreviewed/2022/04/GHSA-5mpg-wwpc-q4pq/GHSA-5mpg-wwpc-q4pq.json index 8845da4cfa6..510d6f6e470 100644 --- a/advisories/unreviewed/2022/04/GHSA-5mpg-wwpc-q4pq/GHSA-5mpg-wwpc-q4pq.json +++ b/advisories/unreviewed/2022/04/GHSA-5mpg-wwpc-q4pq/GHSA-5mpg-wwpc-q4pq.json @@ -7,12 +7,8 @@ "CVE-2002-1783" ], "details": "CRLF injection vulnerability in PHP 4.2.1 through 4.2.3, when allow_url_fopen is enabled, allows remote attackers to modify HTTP headers for outgoing requests by causing CRLF sequences to be injected into arguments that are passed to the (1) fopen or (2) file functions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5p84-cvh4-gvvh/GHSA-5p84-cvh4-gvvh.json b/advisories/unreviewed/2022/04/GHSA-5p84-cvh4-gvvh/GHSA-5p84-cvh4-gvvh.json index cd85de86ce8..4d67c83c3c7 100644 --- a/advisories/unreviewed/2022/04/GHSA-5p84-cvh4-gvvh/GHSA-5p84-cvh4-gvvh.json +++ b/advisories/unreviewed/2022/04/GHSA-5p84-cvh4-gvvh/GHSA-5p84-cvh4-gvvh.json @@ -7,12 +7,8 @@ "CVE-2002-1471" ], "details": "The camel component for Ximian Evolution 1.0.x and earlier does not verify certificates when it establishes a new SSL connection after previously verifying a certificate, which could allow remote attackers to monitor or modify sessions via a man-in-the-middle attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5px2-4wrg-vxxc/GHSA-5px2-4wrg-vxxc.json b/advisories/unreviewed/2022/04/GHSA-5px2-4wrg-vxxc/GHSA-5px2-4wrg-vxxc.json index 1446ac64d21..c953af24770 100644 --- a/advisories/unreviewed/2022/04/GHSA-5px2-4wrg-vxxc/GHSA-5px2-4wrg-vxxc.json +++ b/advisories/unreviewed/2022/04/GHSA-5px2-4wrg-vxxc/GHSA-5px2-4wrg-vxxc.json @@ -7,12 +7,8 @@ "CVE-2002-1402" ], "details": "Buffer overflows in the (1) TZ and (2) SET TIME ZONE enivronment variables for PostgreSQL 7.2.1 and earlier allow local users to cause a denial of service and possibly execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5qxh-pvfg-r9qr/GHSA-5qxh-pvfg-r9qr.json b/advisories/unreviewed/2022/04/GHSA-5qxh-pvfg-r9qr/GHSA-5qxh-pvfg-r9qr.json index 2b13f32c247..0f5b40cdec2 100644 --- a/advisories/unreviewed/2022/04/GHSA-5qxh-pvfg-r9qr/GHSA-5qxh-pvfg-r9qr.json +++ b/advisories/unreviewed/2022/04/GHSA-5qxh-pvfg-r9qr/GHSA-5qxh-pvfg-r9qr.json @@ -7,12 +7,8 @@ "CVE-2002-1797" ], "details": "ChaiVM for HP color LaserJet 4500 and 4550 or HP LaserJet 4100 and 8150 does not properly enforce access control restrictions, which could allow local users to add, delete, or modify any services hosted by the ChaiServer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5rvw-86pg-w962/GHSA-5rvw-86pg-w962.json b/advisories/unreviewed/2022/04/GHSA-5rvw-86pg-w962/GHSA-5rvw-86pg-w962.json index a06bbdcb136..3b6599da1ec 100644 --- a/advisories/unreviewed/2022/04/GHSA-5rvw-86pg-w962/GHSA-5rvw-86pg-w962.json +++ b/advisories/unreviewed/2022/04/GHSA-5rvw-86pg-w962/GHSA-5rvw-86pg-w962.json @@ -7,12 +7,8 @@ "CVE-2002-1755" ], "details": "tinc 1.0pre3 and 1.0pre4 VPN does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on CBC.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5x9p-57f3-q2x4/GHSA-5x9p-57f3-q2x4.json b/advisories/unreviewed/2022/04/GHSA-5x9p-57f3-q2x4/GHSA-5x9p-57f3-q2x4.json index 4b0b8e3a9e7..711729e6c24 100644 --- a/advisories/unreviewed/2022/04/GHSA-5x9p-57f3-q2x4/GHSA-5x9p-57f3-q2x4.json +++ b/advisories/unreviewed/2022/04/GHSA-5x9p-57f3-q2x4/GHSA-5x9p-57f3-q2x4.json @@ -7,12 +7,8 @@ "CVE-2002-1761" ], "details": "Directory traversal vulnerability in PHProjekt 2.0 through 3.1 allows remote attackers to read arbitrary files via .. (dot dot) sequences.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5xcv-v8fh-pcrc/GHSA-5xcv-v8fh-pcrc.json b/advisories/unreviewed/2022/04/GHSA-5xcv-v8fh-pcrc/GHSA-5xcv-v8fh-pcrc.json index f0b6ca2722a..c95779915ca 100644 --- a/advisories/unreviewed/2022/04/GHSA-5xcv-v8fh-pcrc/GHSA-5xcv-v8fh-pcrc.json +++ b/advisories/unreviewed/2022/04/GHSA-5xcv-v8fh-pcrc/GHSA-5xcv-v8fh-pcrc.json @@ -7,12 +7,8 @@ "CVE-2002-1580" ], "details": "Integer overflow in imapparse.c for Cyrus IMAP server 1.4 and 2.1.10 allows remote attackers to execute arbitrary code via a large length value that facilitates a buffer overflow attack, a different vulnerability than CVE-2002-1347.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6234-fx93-pwcr/GHSA-6234-fx93-pwcr.json b/advisories/unreviewed/2022/04/GHSA-6234-fx93-pwcr/GHSA-6234-fx93-pwcr.json index 591e9d60297..4ea45a69899 100644 --- a/advisories/unreviewed/2022/04/GHSA-6234-fx93-pwcr/GHSA-6234-fx93-pwcr.json +++ b/advisories/unreviewed/2022/04/GHSA-6234-fx93-pwcr/GHSA-6234-fx93-pwcr.json @@ -7,12 +7,8 @@ "CVE-2002-1563" ], "details": "stunnel 4.0.3 and earlier allows attackers to cause a denial of service (crash) via SIGCHLD signal handler race conditions that cause an inconsistency in the child counter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-623v-x9rh-m33f/GHSA-623v-x9rh-m33f.json b/advisories/unreviewed/2022/04/GHSA-623v-x9rh-m33f/GHSA-623v-x9rh-m33f.json index c7855b3a4f0..48c27929567 100644 --- a/advisories/unreviewed/2022/04/GHSA-623v-x9rh-m33f/GHSA-623v-x9rh-m33f.json +++ b/advisories/unreviewed/2022/04/GHSA-623v-x9rh-m33f/GHSA-623v-x9rh-m33f.json @@ -7,12 +7,8 @@ "CVE-2002-1416" ], "details": "The POP3 service for WebEasyMail 3.4.2.2 and earlier generates diffferent error messages for valid and invalid usernames during authentication, which makes it easier for remote attackers to conduct brute force attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-63f4-84wq-87g5/GHSA-63f4-84wq-87g5.json b/advisories/unreviewed/2022/04/GHSA-63f4-84wq-87g5/GHSA-63f4-84wq-87g5.json index 3b7025a5633..8ec4b8d2e2c 100644 --- a/advisories/unreviewed/2022/04/GHSA-63f4-84wq-87g5/GHSA-63f4-84wq-87g5.json +++ b/advisories/unreviewed/2022/04/GHSA-63f4-84wq-87g5/GHSA-63f4-84wq-87g5.json @@ -7,12 +7,8 @@ "CVE-2002-1420" ], "details": "Integer signedness error in select() on OpenBSD 3.1 and earlier allows local users to overwrite arbitrary kernel memory via a negative value for the size parameter, which satisfies the boundary check as a signed integer, but is later used as an unsigned integer during a data copying operation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-67pm-79gc-7qx9/GHSA-67pm-79gc-7qx9.json b/advisories/unreviewed/2022/04/GHSA-67pm-79gc-7qx9/GHSA-67pm-79gc-7qx9.json index 762501f6667..9dba3ae1ba7 100644 --- a/advisories/unreviewed/2022/04/GHSA-67pm-79gc-7qx9/GHSA-67pm-79gc-7qx9.json +++ b/advisories/unreviewed/2022/04/GHSA-67pm-79gc-7qx9/GHSA-67pm-79gc-7qx9.json @@ -7,12 +7,8 @@ "CVE-2002-1398" ], "details": "Buffer overflow in the date parser for PostgreSQL before 7.2.2 allows attackers to cause a denial of service and possibly execute arbitrary code via a long date string, aka a vulnerability \"in handling long datetime input.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-684w-4359-88q5/GHSA-684w-4359-88q5.json b/advisories/unreviewed/2022/04/GHSA-684w-4359-88q5/GHSA-684w-4359-88q5.json index 4810f0e647e..b59ba8fa475 100644 --- a/advisories/unreviewed/2022/04/GHSA-684w-4359-88q5/GHSA-684w-4359-88q5.json +++ b/advisories/unreviewed/2022/04/GHSA-684w-4359-88q5/GHSA-684w-4359-88q5.json @@ -7,12 +7,8 @@ "CVE-2002-1529" ], "details": "Cross-site scripting (XSS) vulnerability in msgError.asp for the administrative web interface (STEMWADM) for SurfControl SuperScout Email Filter allows remote attackers to insert arbitrary script or HTML via the Reason parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-68h4-xx5h-qc5c/GHSA-68h4-xx5h-qc5c.json b/advisories/unreviewed/2022/04/GHSA-68h4-xx5h-qc5c/GHSA-68h4-xx5h-qc5c.json index 4d18881e982..022e7725059 100644 --- a/advisories/unreviewed/2022/04/GHSA-68h4-xx5h-qc5c/GHSA-68h4-xx5h-qc5c.json +++ b/advisories/unreviewed/2022/04/GHSA-68h4-xx5h-qc5c/GHSA-68h4-xx5h-qc5c.json @@ -7,12 +7,8 @@ "CVE-2002-1939" ], "details": "FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6cvg-289c-g5fj/GHSA-6cvg-289c-g5fj.json b/advisories/unreviewed/2022/04/GHSA-6cvg-289c-g5fj/GHSA-6cvg-289c-g5fj.json index 2ed01320829..a1ccd8af7e4 100644 --- a/advisories/unreviewed/2022/04/GHSA-6cvg-289c-g5fj/GHSA-6cvg-289c-g5fj.json +++ b/advisories/unreviewed/2022/04/GHSA-6cvg-289c-g5fj/GHSA-6cvg-289c-g5fj.json @@ -7,12 +7,8 @@ "CVE-2002-1577" ], "details": "SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the (1) SAP*, (2) SAPCPIC, (3) DDIC, (4) EARLYWATCH, or (5) TMSADM accounts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6f2r-hwc2-w45w/GHSA-6f2r-hwc2-w45w.json b/advisories/unreviewed/2022/04/GHSA-6f2r-hwc2-w45w/GHSA-6f2r-hwc2-w45w.json index d7e4bd01bbd..c8c78943e1d 100644 --- a/advisories/unreviewed/2022/04/GHSA-6f2r-hwc2-w45w/GHSA-6f2r-hwc2-w45w.json +++ b/advisories/unreviewed/2022/04/GHSA-6f2r-hwc2-w45w/GHSA-6f2r-hwc2-w45w.json @@ -7,12 +7,8 @@ "CVE-2002-1605" ], "details": "Buffer overflow in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows attackers to execute arbitrary code via a long _XKB_CHARSET environment variable to (1) dxpause, (2) dxconsole, or (3) dtsession.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6f4c-m3qw-xw3x/GHSA-6f4c-m3qw-xw3x.json b/advisories/unreviewed/2022/04/GHSA-6f4c-m3qw-xw3x/GHSA-6f4c-m3qw-xw3x.json index 3fb3a563ac8..3bebbfede6e 100644 --- a/advisories/unreviewed/2022/04/GHSA-6f4c-m3qw-xw3x/GHSA-6f4c-m3qw-xw3x.json +++ b/advisories/unreviewed/2022/04/GHSA-6f4c-m3qw-xw3x/GHSA-6f4c-m3qw-xw3x.json @@ -7,12 +7,8 @@ "CVE-2002-1802" ], "details": "Cross-site scripting (XSS) vulnerability in Xoops 1.0 RC3 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag when submitting news.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6fwq-57w3-8p7j/GHSA-6fwq-57w3-8p7j.json b/advisories/unreviewed/2022/04/GHSA-6fwq-57w3-8p7j/GHSA-6fwq-57w3-8p7j.json index 1f0958d6578..cbb1ed5c6cc 100644 --- a/advisories/unreviewed/2022/04/GHSA-6fwq-57w3-8p7j/GHSA-6fwq-57w3-8p7j.json +++ b/advisories/unreviewed/2022/04/GHSA-6fwq-57w3-8p7j/GHSA-6fwq-57w3-8p7j.json @@ -7,12 +7,8 @@ "CVE-2002-1415" ], "details": "Format string vulnerability in SMTP service for WebEasyMail 3.4.2.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format strings in SMTP requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6gq7-f83v-vchx/GHSA-6gq7-f83v-vchx.json b/advisories/unreviewed/2022/04/GHSA-6gq7-f83v-vchx/GHSA-6gq7-f83v-vchx.json index 20e1e8d8c6f..62d3d87ab4d 100644 --- a/advisories/unreviewed/2022/04/GHSA-6gq7-f83v-vchx/GHSA-6gq7-f83v-vchx.json +++ b/advisories/unreviewed/2022/04/GHSA-6gq7-f83v-vchx/GHSA-6gq7-f83v-vchx.json @@ -7,12 +7,8 @@ "CVE-2002-1538" ], "details": "Acuma Acusend 4, and possibly earlier versions, allows remote authenticated users to read the reports of other users by inferring the full URL, whose name is easily predictable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6jvf-9896-2hgg/GHSA-6jvf-9896-2hgg.json b/advisories/unreviewed/2022/04/GHSA-6jvf-9896-2hgg/GHSA-6jvf-9896-2hgg.json index 31599417825..3cc0977bf03 100644 --- a/advisories/unreviewed/2022/04/GHSA-6jvf-9896-2hgg/GHSA-6jvf-9896-2hgg.json +++ b/advisories/unreviewed/2022/04/GHSA-6jvf-9896-2hgg/GHSA-6jvf-9896-2hgg.json @@ -7,12 +7,8 @@ "CVE-2002-1636" ], "details": "Cross-site scripting (XSS) vulnerability in the htp PL/SQL package for Oracle 9i Application Server (9iAS) allows remote attackers to inject arbitrary web script or HTML via the cbuf parameter to htp.print.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6mwf-gqgc-72xc/GHSA-6mwf-gqgc-72xc.json b/advisories/unreviewed/2022/04/GHSA-6mwf-gqgc-72xc/GHSA-6mwf-gqgc-72xc.json index ebb476a645f..588ace04801 100644 --- a/advisories/unreviewed/2022/04/GHSA-6mwf-gqgc-72xc/GHSA-6mwf-gqgc-72xc.json +++ b/advisories/unreviewed/2022/04/GHSA-6mwf-gqgc-72xc/GHSA-6mwf-gqgc-72xc.json @@ -7,12 +7,8 @@ "CVE-2002-1496" ], "details": "Heap-based buffer overflow in Null HTTP Server 0.5.0 and earlier allows remote attackers to execute arbitrary code via a negative value in the Content-Length HTTP header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6rq9-vhjr-cg53/GHSA-6rq9-vhjr-cg53.json b/advisories/unreviewed/2022/04/GHSA-6rq9-vhjr-cg53/GHSA-6rq9-vhjr-cg53.json index 6b1dc736433..2f578ad38ad 100644 --- a/advisories/unreviewed/2022/04/GHSA-6rq9-vhjr-cg53/GHSA-6rq9-vhjr-cg53.json +++ b/advisories/unreviewed/2022/04/GHSA-6rq9-vhjr-cg53/GHSA-6rq9-vhjr-cg53.json @@ -7,12 +7,8 @@ "CVE-2002-1692" ], "details": "Buffer overflow in backup utility of Microsoft Windows 95 allows attackers to execute arbitrary code by causing a filename with a long extension to be placed in a folder to be backed up.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6v47-4mgv-qg7f/GHSA-6v47-4mgv-qg7f.json b/advisories/unreviewed/2022/04/GHSA-6v47-4mgv-qg7f/GHSA-6v47-4mgv-qg7f.json index 23ffc352d76..a2667628662 100644 --- a/advisories/unreviewed/2022/04/GHSA-6v47-4mgv-qg7f/GHSA-6v47-4mgv-qg7f.json +++ b/advisories/unreviewed/2022/04/GHSA-6v47-4mgv-qg7f/GHSA-6v47-4mgv-qg7f.json @@ -7,12 +7,8 @@ "CVE-2002-1829" ], "details": "Cross-site scripting (XSS) vulnerability in codeparse.php in Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to inject arbitrary web script or HTML via (1) myhome.php, (2) an onerror attribute in an IMG tag (a variant of CVE-2002-0330), or (3) a glow tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6w5j-8hjp-jhg4/GHSA-6w5j-8hjp-jhg4.json b/advisories/unreviewed/2022/04/GHSA-6w5j-8hjp-jhg4/GHSA-6w5j-8hjp-jhg4.json index a9fba644be7..95d077f52d3 100644 --- a/advisories/unreviewed/2022/04/GHSA-6w5j-8hjp-jhg4/GHSA-6w5j-8hjp-jhg4.json +++ b/advisories/unreviewed/2022/04/GHSA-6w5j-8hjp-jhg4/GHSA-6w5j-8hjp-jhg4.json @@ -7,12 +7,8 @@ "CVE-2002-1422" ], "details": "admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create or delete files via URL-encoded pathnames in the cur and dest parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7224-6w99-8g9v/GHSA-7224-6w99-8g9v.json b/advisories/unreviewed/2022/04/GHSA-7224-6w99-8g9v/GHSA-7224-6w99-8g9v.json index 3c69d570526..c60beccb6ba 100644 --- a/advisories/unreviewed/2022/04/GHSA-7224-6w99-8g9v/GHSA-7224-6w99-8g9v.json +++ b/advisories/unreviewed/2022/04/GHSA-7224-6w99-8g9v/GHSA-7224-6w99-8g9v.json @@ -7,12 +7,8 @@ "CVE-2002-1633" ], "details": "Multiple buffer overflows in QNX 4.25 may allow local users to execute arbitrary code via long command line arguments to (1) sample, (2) ex, (3) du, (4) find, (5) lex, (6) mkdir, (7) rm, (8) serserv, (9) tcpserv, (10) termdef, (11) time, (12) unzip, (13) use, (14) wcc, (15) wcc386, (16) wd, (17) wdisasm, (18) which, (19) wlib, (20) wlink, (21) wpp, (22) wpp386, (23) wprof, (24) write, or (25) wstrip.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-728c-vq25-67f5/GHSA-728c-vq25-67f5.json b/advisories/unreviewed/2022/04/GHSA-728c-vq25-67f5/GHSA-728c-vq25-67f5.json index f1e933e1b52..31b13d0e2a3 100644 --- a/advisories/unreviewed/2022/04/GHSA-728c-vq25-67f5/GHSA-728c-vq25-67f5.json +++ b/advisories/unreviewed/2022/04/GHSA-728c-vq25-67f5/GHSA-728c-vq25-67f5.json @@ -7,12 +7,8 @@ "CVE-2002-1637" ], "details": "Multiple components in Oracle 9i Application Server (9iAS) are installed with over 160 default usernames and passwords, including (1) SYS, (2) SYSTEM, (3) AQJAVA, (4) OWA, (5) IMAGEUSER, (6) USER1, (7) USER2, (8) PLSQL, (9) DEMO, (10) FINANCE, and many others, which allows attackers to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-74m6-3rwg-3rg6/GHSA-74m6-3rwg-3rg6.json b/advisories/unreviewed/2022/04/GHSA-74m6-3rwg-3rg6/GHSA-74m6-3rwg-3rg6.json index b63b30aacd6..f80bc758049 100644 --- a/advisories/unreviewed/2022/04/GHSA-74m6-3rwg-3rg6/GHSA-74m6-3rwg-3rg6.json +++ b/advisories/unreviewed/2022/04/GHSA-74m6-3rwg-3rg6/GHSA-74m6-3rwg-3rg6.json @@ -7,12 +7,8 @@ "CVE-2002-1590" ], "details": "The Web-Based Enterprise Management (WBEM) packages (1) SUNWwbdoc, (2) SUNWwbcou, (3) SUNWwbdev and (4) SUNWmgapp packages, when installed using Solaris 8 Update 1/01 or later, install files with world or group write permissions, which allows local users to gain root privileges or cause a denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-74vw-2cf3-xvjw/GHSA-74vw-2cf3-xvjw.json b/advisories/unreviewed/2022/04/GHSA-74vw-2cf3-xvjw/GHSA-74vw-2cf3-xvjw.json index e4209aa1846..10df88606a2 100644 --- a/advisories/unreviewed/2022/04/GHSA-74vw-2cf3-xvjw/GHSA-74vw-2cf3-xvjw.json +++ b/advisories/unreviewed/2022/04/GHSA-74vw-2cf3-xvjw/GHSA-74vw-2cf3-xvjw.json @@ -7,12 +7,8 @@ "CVE-2002-1815" ], "details": "Directory traversal vulnerability in source.php and source.cgi in Aquonics File Manager 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-76j9-m8j4-74fx/GHSA-76j9-m8j4-74fx.json b/advisories/unreviewed/2022/04/GHSA-76j9-m8j4-74fx/GHSA-76j9-m8j4-74fx.json index 5c5cce6ba95..fb3b0a29f05 100644 --- a/advisories/unreviewed/2022/04/GHSA-76j9-m8j4-74fx/GHSA-76j9-m8j4-74fx.json +++ b/advisories/unreviewed/2022/04/GHSA-76j9-m8j4-74fx/GHSA-76j9-m8j4-74fx.json @@ -7,12 +7,8 @@ "CVE-2002-1480" ], "details": "Cross-site scripting (XSS) vulnerability in phpGB before 1.20 allows remote attackers to inject arbitrary HTML or script into guestbook pages, which is executed when the administrator deletes the entry.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-777c-m2xj-3qhf/GHSA-777c-m2xj-3qhf.json b/advisories/unreviewed/2022/04/GHSA-777c-m2xj-3qhf/GHSA-777c-m2xj-3qhf.json index ade81c1c9ab..6cf60cdc696 100644 --- a/advisories/unreviewed/2022/04/GHSA-777c-m2xj-3qhf/GHSA-777c-m2xj-3qhf.json +++ b/advisories/unreviewed/2022/04/GHSA-777c-m2xj-3qhf/GHSA-777c-m2xj-3qhf.json @@ -7,12 +7,8 @@ "CVE-2002-1648" ], "details": "Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail before 1.2.3 allows remote attackers to send email as other users via an IMG URL with modified send_to and subject parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-779v-24vm-xp59/GHSA-779v-24vm-xp59.json b/advisories/unreviewed/2022/04/GHSA-779v-24vm-xp59/GHSA-779v-24vm-xp59.json index d84d10ba87b..6793320e70c 100644 --- a/advisories/unreviewed/2022/04/GHSA-779v-24vm-xp59/GHSA-779v-24vm-xp59.json +++ b/advisories/unreviewed/2022/04/GHSA-779v-24vm-xp59/GHSA-779v-24vm-xp59.json @@ -7,12 +7,8 @@ "CVE-2002-1430" ], "details": "Unknown vulnerability in Sympoll 1.2 allows remote attackers to read arbitrary files when register_globals is enabled, possibly by modifying certain PHP variables through URL parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-78h8-c9gp-xvfr/GHSA-78h8-c9gp-xvfr.json b/advisories/unreviewed/2022/04/GHSA-78h8-c9gp-xvfr/GHSA-78h8-c9gp-xvfr.json index 048784ed675..83cb3068fda 100644 --- a/advisories/unreviewed/2022/04/GHSA-78h8-c9gp-xvfr/GHSA-78h8-c9gp-xvfr.json +++ b/advisories/unreviewed/2022/04/GHSA-78h8-c9gp-xvfr/GHSA-78h8-c9gp-xvfr.json @@ -7,12 +7,8 @@ "CVE-2002-1778" ], "details": "Symantec Norton Personal Firewall 2002 allows remote attackers to bypass the portscan protection by using a (1) SYN/FIN, (2) SYN/FIN/URG, (3) SYN/FIN/PUSH, or (4) SYN/FIN/URG/PUSH scan.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7fj6-2v77-jm85/GHSA-7fj6-2v77-jm85.json b/advisories/unreviewed/2022/04/GHSA-7fj6-2v77-jm85/GHSA-7fj6-2v77-jm85.json index 186a491f142..967cd1974d1 100644 --- a/advisories/unreviewed/2022/04/GHSA-7fj6-2v77-jm85/GHSA-7fj6-2v77-jm85.json +++ b/advisories/unreviewed/2022/04/GHSA-7fj6-2v77-jm85/GHSA-7fj6-2v77-jm85.json @@ -7,12 +7,8 @@ "CVE-2002-1589" ], "details": "Unknown vulnerability in Solaris 8, when the 0x02 bit (aka TEST, KMF_DEADBEEF, or deadbeef) is set in the kmem_flags kernel parameter, allows local users to cause a denial of service (system panic).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7gv8-xmq6-4qwg/GHSA-7gv8-xmq6-4qwg.json b/advisories/unreviewed/2022/04/GHSA-7gv8-xmq6-4qwg/GHSA-7gv8-xmq6-4qwg.json index 14607e57450..607c63817ff 100644 --- a/advisories/unreviewed/2022/04/GHSA-7gv8-xmq6-4qwg/GHSA-7gv8-xmq6-4qwg.json +++ b/advisories/unreviewed/2022/04/GHSA-7gv8-xmq6-4qwg/GHSA-7gv8-xmq6-4qwg.json @@ -7,12 +7,8 @@ "CVE-2002-1808" ], "details": "Cross-site scripting (XSS) vulnerability in Meunity Community System 1.1 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag when creating a topic.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7mrj-j2vp-hhpc/GHSA-7mrj-j2vp-hhpc.json b/advisories/unreviewed/2022/04/GHSA-7mrj-j2vp-hhpc/GHSA-7mrj-j2vp-hhpc.json index 2550925928f..8d1a5241c11 100644 --- a/advisories/unreviewed/2022/04/GHSA-7mrj-j2vp-hhpc/GHSA-7mrj-j2vp-hhpc.json +++ b/advisories/unreviewed/2022/04/GHSA-7mrj-j2vp-hhpc/GHSA-7mrj-j2vp-hhpc.json @@ -7,12 +7,8 @@ "CVE-2002-1702" ], "details": "Cross-site scripting vulnerability (XSS) in DeltaScripts PHP Classifieds 6.0.5 allows remote attackers to execute arbitrary script as other users via the URL parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7p4w-3rj9-c96j/GHSA-7p4w-3rj9-c96j.json b/advisories/unreviewed/2022/04/GHSA-7p4w-3rj9-c96j/GHSA-7p4w-3rj9-c96j.json index ae9b77492a8..c4eff43e6cc 100644 --- a/advisories/unreviewed/2022/04/GHSA-7p4w-3rj9-c96j/GHSA-7p4w-3rj9-c96j.json +++ b/advisories/unreviewed/2022/04/GHSA-7p4w-3rj9-c96j/GHSA-7p4w-3rj9-c96j.json @@ -7,12 +7,8 @@ "CVE-2002-1515" ], "details": "Directory traversal vulnerability in avatar.php in CoolForum 0.5 beta allows remote attackers to read arbitrary files via .. (dot dot) sequences in the img parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7p7g-qqq4-qx6j/GHSA-7p7g-qqq4-qx6j.json b/advisories/unreviewed/2022/04/GHSA-7p7g-qqq4-qx6j/GHSA-7p7g-qqq4-qx6j.json index 15eb9211df7..1a1eb413160 100644 --- a/advisories/unreviewed/2022/04/GHSA-7p7g-qqq4-qx6j/GHSA-7p7g-qqq4-qx6j.json +++ b/advisories/unreviewed/2022/04/GHSA-7p7g-qqq4-qx6j/GHSA-7p7g-qqq4-qx6j.json @@ -7,12 +7,8 @@ "CVE-2002-1523" ], "details": "Directory traversal vulnerability in Daniel Arenz Mini Server 2.1.6 allows remote attackers to read arbitrary files via (1) ../ (dot-dot slash) or (2) ..\\ (dot-dot backslash) sequences.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7q9p-qhp8-jm83/GHSA-7q9p-qhp8-jm83.json b/advisories/unreviewed/2022/04/GHSA-7q9p-qhp8-jm83/GHSA-7q9p-qhp8-jm83.json index 892b1d0e501..ba5f88318bb 100644 --- a/advisories/unreviewed/2022/04/GHSA-7q9p-qhp8-jm83/GHSA-7q9p-qhp8-jm83.json +++ b/advisories/unreviewed/2022/04/GHSA-7q9p-qhp8-jm83/GHSA-7q9p-qhp8-jm83.json @@ -7,12 +7,8 @@ "CVE-2002-1668" ], "details": "HP-UX 11.11 and earlier allows local users to cause a denial of service (kernel deadlock), due to a \"file system weakness\" that is possibly via an mmap() system call and performing an I/O operation using data from the mapped buffer on the file descriptor for the mapped file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7qjw-2gjj-c57q/GHSA-7qjw-2gjj-c57q.json b/advisories/unreviewed/2022/04/GHSA-7qjw-2gjj-c57q/GHSA-7qjw-2gjj-c57q.json index c0c95c985e5..74e952d7e5f 100644 --- a/advisories/unreviewed/2022/04/GHSA-7qjw-2gjj-c57q/GHSA-7qjw-2gjj-c57q.json +++ b/advisories/unreviewed/2022/04/GHSA-7qjw-2gjj-c57q/GHSA-7qjw-2gjj-c57q.json @@ -7,12 +7,8 @@ "CVE-2002-1762" ], "details": "Microsoft Baseline Security Analyzer (MBSA) 1.0 stores security scans in a known location C:\\Documents and Settings\\username\\SecurityScans in plaintext, which could allow remote attackers to obtain sensitive information about the system via malicious active content such as ActiveX controls or Java.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7rg2-63qq-hhgv/GHSA-7rg2-63qq-hhgv.json b/advisories/unreviewed/2022/04/GHSA-7rg2-63qq-hhgv/GHSA-7rg2-63qq-hhgv.json index 9406380763d..67f37afda68 100644 --- a/advisories/unreviewed/2022/04/GHSA-7rg2-63qq-hhgv/GHSA-7rg2-63qq-hhgv.json +++ b/advisories/unreviewed/2022/04/GHSA-7rg2-63qq-hhgv/GHSA-7rg2-63qq-hhgv.json @@ -7,12 +7,8 @@ "CVE-2002-1852" ], "details": "Cross-site scripting (XSS) vulnerability in Monkey 0.5.0 allows remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) a parameter to test2.pl.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-7vr2-xp79-x43x/GHSA-7vr2-xp79-x43x.json b/advisories/unreviewed/2022/04/GHSA-7vr2-xp79-x43x/GHSA-7vr2-xp79-x43x.json index f9929eb2aca..7ef1169572e 100644 --- a/advisories/unreviewed/2022/04/GHSA-7vr2-xp79-x43x/GHSA-7vr2-xp79-x43x.json +++ b/advisories/unreviewed/2022/04/GHSA-7vr2-xp79-x43x/GHSA-7vr2-xp79-x43x.json @@ -7,12 +7,8 @@ "CVE-2002-1842" ], "details": "Perlbot 1.0 beta allows remote attackers to execute arbitrary commands via shell metacharacters in (1) a word that is being spell checked or (2) an e-mail address.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7xj4-74g3-v7pg/GHSA-7xj4-74g3-v7pg.json b/advisories/unreviewed/2022/04/GHSA-7xj4-74g3-v7pg/GHSA-7xj4-74g3-v7pg.json index e7ff36a11a3..1d31e3f3b7c 100644 --- a/advisories/unreviewed/2022/04/GHSA-7xj4-74g3-v7pg/GHSA-7xj4-74g3-v7pg.json +++ b/advisories/unreviewed/2022/04/GHSA-7xj4-74g3-v7pg/GHSA-7xj4-74g3-v7pg.json @@ -7,12 +7,8 @@ "CVE-2002-1741" ], "details": "Directory traversal vulnerability in WorldClient.cgi in WorldClient for Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to delete arbitrary files via a \"..\" (dot dot) in the Attachments parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7xjv-3wm8-mmc8/GHSA-7xjv-3wm8-mmc8.json b/advisories/unreviewed/2022/04/GHSA-7xjv-3wm8-mmc8/GHSA-7xjv-3wm8-mmc8.json index 946c6bed4bd..fccaa0348ea 100644 --- a/advisories/unreviewed/2022/04/GHSA-7xjv-3wm8-mmc8/GHSA-7xjv-3wm8-mmc8.json +++ b/advisories/unreviewed/2022/04/GHSA-7xjv-3wm8-mmc8/GHSA-7xjv-3wm8-mmc8.json @@ -7,12 +7,8 @@ "CVE-2002-1760" ], "details": "Multiple SQL injection vulnerabilities in PHProjekt 2.0 through 3.1 allow remote attackers to execute arbitrary SQL commands via the unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8262-f9hh-4786/GHSA-8262-f9hh-4786.json b/advisories/unreviewed/2022/04/GHSA-8262-f9hh-4786/GHSA-8262-f9hh-4786.json index 3fe51205e67..6edd8f5a107 100644 --- a/advisories/unreviewed/2022/04/GHSA-8262-f9hh-4786/GHSA-8262-f9hh-4786.json +++ b/advisories/unreviewed/2022/04/GHSA-8262-f9hh-4786/GHSA-8262-f9hh-4786.json @@ -7,12 +7,8 @@ "CVE-2002-1547" ], "details": "Netscreen running ScreenOS 4.0.0r6 and earlier allows remote attackers to cause a denial of service via a malformed SSH packet to the Secure Command Shell (SCS) management interface, as demonstrated via certain CRC32 exploits, a different vulnerability than CVE-2001-0144.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-827r-vc7q-2w7f/GHSA-827r-vc7q-2w7f.json b/advisories/unreviewed/2022/04/GHSA-827r-vc7q-2w7f/GHSA-827r-vc7q-2w7f.json index 0a781d37e0a..c372fe52e67 100644 --- a/advisories/unreviewed/2022/04/GHSA-827r-vc7q-2w7f/GHSA-827r-vc7q-2w7f.json +++ b/advisories/unreviewed/2022/04/GHSA-827r-vc7q-2w7f/GHSA-827r-vc7q-2w7f.json @@ -7,12 +7,8 @@ "CVE-2002-1799" ], "details": "Cross-site scripting (XSS) vulnerability in phpRank 1.8 allows remote attackers to inject arbitrary web script or HTML via the (1) email parameter to add.php or (2) banurl parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-83mr-c9w5-46g4/GHSA-83mr-c9w5-46g4.json b/advisories/unreviewed/2022/04/GHSA-83mr-c9w5-46g4/GHSA-83mr-c9w5-46g4.json index 0cfd0955462..a5668e34423 100644 --- a/advisories/unreviewed/2022/04/GHSA-83mr-c9w5-46g4/GHSA-83mr-c9w5-46g4.json +++ b/advisories/unreviewed/2022/04/GHSA-83mr-c9w5-46g4/GHSA-83mr-c9w5-46g4.json @@ -7,12 +7,8 @@ "CVE-2002-1397" ], "details": "Vulnerability in the cash_words() function for PostgreSQL 7.2 and earlier allows local users to cause a denial of service and possibly execute arbitrary code via a large negative argument, possibly triggering an integer signedness error or buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-84qm-3gwx-632j/GHSA-84qm-3gwx-632j.json b/advisories/unreviewed/2022/04/GHSA-84qm-3gwx-632j/GHSA-84qm-3gwx-632j.json index daa878372da..e7890d18bac 100644 --- a/advisories/unreviewed/2022/04/GHSA-84qm-3gwx-632j/GHSA-84qm-3gwx-632j.json +++ b/advisories/unreviewed/2022/04/GHSA-84qm-3gwx-632j/GHSA-84qm-3gwx-632j.json @@ -7,12 +7,8 @@ "CVE-2002-1438" ], "details": "The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to obtain Perl version information via the -v option.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-84qr-vw46-29x2/GHSA-84qr-vw46-29x2.json b/advisories/unreviewed/2022/04/GHSA-84qr-vw46-29x2/GHSA-84qr-vw46-29x2.json index 88fac182e16..bcaae461a11 100644 --- a/advisories/unreviewed/2022/04/GHSA-84qr-vw46-29x2/GHSA-84qr-vw46-29x2.json +++ b/advisories/unreviewed/2022/04/GHSA-84qr-vw46-29x2/GHSA-84qr-vw46-29x2.json @@ -7,12 +7,8 @@ "CVE-2002-1736" ], "details": "Unknown vulnerability in CGINews before 1.06 allow remote attackers to read arbitrary files via \"unfiltered user input.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-885x-qwwj-5g2h/GHSA-885x-qwwj-5g2h.json b/advisories/unreviewed/2022/04/GHSA-885x-qwwj-5g2h/GHSA-885x-qwwj-5g2h.json index c7e9f0cf8f7..0d147d34fad 100644 --- a/advisories/unreviewed/2022/04/GHSA-885x-qwwj-5g2h/GHSA-885x-qwwj-5g2h.json +++ b/advisories/unreviewed/2022/04/GHSA-885x-qwwj-5g2h/GHSA-885x-qwwj-5g2h.json @@ -7,12 +7,8 @@ "CVE-2002-1691" ], "details": "Alcatel OmniPCX 4400 installs known user accounts and passwords in the /etc/password file by default, which allows remote attackers to gain unauthorized access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-89pr-2h9p-wqmv/GHSA-89pr-2h9p-wqmv.json b/advisories/unreviewed/2022/04/GHSA-89pr-2h9p-wqmv/GHSA-89pr-2h9p-wqmv.json index e8f8553d380..2e64e6ac35e 100644 --- a/advisories/unreviewed/2022/04/GHSA-89pr-2h9p-wqmv/GHSA-89pr-2h9p-wqmv.json +++ b/advisories/unreviewed/2022/04/GHSA-89pr-2h9p-wqmv/GHSA-89pr-2h9p-wqmv.json @@ -7,12 +7,8 @@ "CVE-2002-1570" ], "details": "Heap-based buffer overflow in snmpnetstat for ucd-snmp 4.2.3 and earlier, and net-snmp, allows remote attackers to execute arbitrary code via multiple getnextrequest PDU messages with conflicting ifindex variables, which cause snmpnetstat to write variable data past the end of an array.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-89r6-x49c-h6w2/GHSA-89r6-x49c-h6w2.json b/advisories/unreviewed/2022/04/GHSA-89r6-x49c-h6w2/GHSA-89r6-x49c-h6w2.json index af7d64f0717..b84f0371ce0 100644 --- a/advisories/unreviewed/2022/04/GHSA-89r6-x49c-h6w2/GHSA-89r6-x49c-h6w2.json +++ b/advisories/unreviewed/2022/04/GHSA-89r6-x49c-h6w2/GHSA-89r6-x49c-h6w2.json @@ -7,12 +7,8 @@ "CVE-2002-1477" ], "details": "graphs.php in Cacti before 0.6.8 allows remote authenticated Cacti administrators to execute arbitrary commands via shell metacharacters in the title during edit mode.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8c6w-wcvf-rjjf/GHSA-8c6w-wcvf-rjjf.json b/advisories/unreviewed/2022/04/GHSA-8c6w-wcvf-rjjf/GHSA-8c6w-wcvf-rjjf.json index 905acf1cd6a..86b63efa4f8 100644 --- a/advisories/unreviewed/2022/04/GHSA-8c6w-wcvf-rjjf/GHSA-8c6w-wcvf-rjjf.json +++ b/advisories/unreviewed/2022/04/GHSA-8c6w-wcvf-rjjf/GHSA-8c6w-wcvf-rjjf.json @@ -7,12 +7,8 @@ "CVE-2002-1436" ], "details": "The web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to execute arbitrary Perl code via an HTTP POST request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8cj5-j235-9429/GHSA-8cj5-j235-9429.json b/advisories/unreviewed/2022/04/GHSA-8cj5-j235-9429/GHSA-8cj5-j235-9429.json index 4097b9a3fe5..38060fbf104 100644 --- a/advisories/unreviewed/2022/04/GHSA-8cj5-j235-9429/GHSA-8cj5-j235-9429.json +++ b/advisories/unreviewed/2022/04/GHSA-8cj5-j235-9429/GHSA-8cj5-j235-9429.json @@ -7,12 +7,8 @@ "CVE-2002-1536" ], "details": "Molly IRC bot 0.5 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $host variable for nslookup.pl, (2) the $to, $from, or $message variables in pop.pl, (3) the $words or $text variables in sms.pl, or (4) the $server or $printer variables in hpled.pl.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8f4h-52c3-crrw/GHSA-8f4h-52c3-crrw.json b/advisories/unreviewed/2022/04/GHSA-8f4h-52c3-crrw/GHSA-8f4h-52c3-crrw.json index 70e07672408..b4436ac8e30 100644 --- a/advisories/unreviewed/2022/04/GHSA-8f4h-52c3-crrw/GHSA-8f4h-52c3-crrw.json +++ b/advisories/unreviewed/2022/04/GHSA-8f4h-52c3-crrw/GHSA-8f4h-52c3-crrw.json @@ -7,12 +7,8 @@ "CVE-2002-1566" ], "details": "netris 0.5, and possibly other versions before 0.52, when running with the -w (wait) option, allows remote attackers to cause a denial of service (crash) via a long string to port 9284.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8f5v-q7q5-fhg2/GHSA-8f5v-q7q5-fhg2.json b/advisories/unreviewed/2022/04/GHSA-8f5v-q7q5-fhg2/GHSA-8f5v-q7q5-fhg2.json index cdccd46fba3..81ab360f0d9 100644 --- a/advisories/unreviewed/2022/04/GHSA-8f5v-q7q5-fhg2/GHSA-8f5v-q7q5-fhg2.json +++ b/advisories/unreviewed/2022/04/GHSA-8f5v-q7q5-fhg2/GHSA-8f5v-q7q5-fhg2.json @@ -7,12 +7,8 @@ "CVE-2002-1550" ], "details": "dump_smutil.sh in IBM AIX allows local users to overwrite arbitrary files via a symlink attack on temporary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8h95-5wr6-wv9v/GHSA-8h95-5wr6-wv9v.json b/advisories/unreviewed/2022/04/GHSA-8h95-5wr6-wv9v/GHSA-8h95-5wr6-wv9v.json index 0ea07f023d3..4c432359d15 100644 --- a/advisories/unreviewed/2022/04/GHSA-8h95-5wr6-wv9v/GHSA-8h95-5wr6-wv9v.json +++ b/advisories/unreviewed/2022/04/GHSA-8h95-5wr6-wv9v/GHSA-8h95-5wr6-wv9v.json @@ -7,12 +7,8 @@ "CVE-2002-1733" ], "details": "Cross-site scripting (XSS) vulnerability in the web-based message board in Prospero Technologies allows remote attackers to inject arbitrary web script or HTML via a message board post.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8m5j-4pp3-mr7m/GHSA-8m5j-4pp3-mr7m.json b/advisories/unreviewed/2022/04/GHSA-8m5j-4pp3-mr7m/GHSA-8m5j-4pp3-mr7m.json index 5586b136c39..0bdd64315eb 100644 --- a/advisories/unreviewed/2022/04/GHSA-8m5j-4pp3-mr7m/GHSA-8m5j-4pp3-mr7m.json +++ b/advisories/unreviewed/2022/04/GHSA-8m5j-4pp3-mr7m/GHSA-8m5j-4pp3-mr7m.json @@ -7,12 +7,8 @@ "CVE-2002-1658" ], "details": "Buffer overflow in htdigest in Apache 1.3.26 and 1.3.27 may allow attackers to execute arbitrary code via a long user argument. NOTE: since htdigest is normally only locally accessible and not setuid or setgid, there are few attack vectors which would lead to an escalation of privileges, unless htdigest is executed from a CGI program. Therefore this may not be a vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8vhx-7chf-mprv/GHSA-8vhx-7chf-mprv.json b/advisories/unreviewed/2022/04/GHSA-8vhx-7chf-mprv/GHSA-8vhx-7chf-mprv.json index f1f53563be1..7d218a1b61a 100644 --- a/advisories/unreviewed/2022/04/GHSA-8vhx-7chf-mprv/GHSA-8vhx-7chf-mprv.json +++ b/advisories/unreviewed/2022/04/GHSA-8vhx-7chf-mprv/GHSA-8vhx-7chf-mprv.json @@ -7,12 +7,8 @@ "CVE-2002-1519" ], "details": "Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the password parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8x7g-mp2w-xqjf/GHSA-8x7g-mp2w-xqjf.json b/advisories/unreviewed/2022/04/GHSA-8x7g-mp2w-xqjf/GHSA-8x7g-mp2w-xqjf.json index 885d1040734..7df7594d101 100644 --- a/advisories/unreviewed/2022/04/GHSA-8x7g-mp2w-xqjf/GHSA-8x7g-mp2w-xqjf.json +++ b/advisories/unreviewed/2022/04/GHSA-8x7g-mp2w-xqjf/GHSA-8x7g-mp2w-xqjf.json @@ -7,12 +7,8 @@ "CVE-2002-1678" ], "details": "Cross-site scripting (XSS) vulnerability in memberlist.php in Jelsoft vBulletin 2.0 rc 2 through 2.2.4 allows remote attackers to steal authentication credentials by injecting script into $letterbits.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8xgj-c952-7qhx/GHSA-8xgj-c952-7qhx.json b/advisories/unreviewed/2022/04/GHSA-8xgj-c952-7qhx/GHSA-8xgj-c952-7qhx.json index f88c761bf11..58812c22bf3 100644 --- a/advisories/unreviewed/2022/04/GHSA-8xgj-c952-7qhx/GHSA-8xgj-c952-7qhx.json +++ b/advisories/unreviewed/2022/04/GHSA-8xgj-c952-7qhx/GHSA-8xgj-c952-7qhx.json @@ -7,12 +7,8 @@ "CVE-2002-1511" ], "details": "The vncserver wrapper for vnc before 3.3.3r2-21 uses the rand() function instead of srand(), which causes vncserver to generate weak cookies.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-927p-m539-xhvc/GHSA-927p-m539-xhvc.json b/advisories/unreviewed/2022/04/GHSA-927p-m539-xhvc/GHSA-927p-m539-xhvc.json index a11e5a5ad73..e6fc400cbe6 100644 --- a/advisories/unreviewed/2022/04/GHSA-927p-m539-xhvc/GHSA-927p-m539-xhvc.json +++ b/advisories/unreviewed/2022/04/GHSA-927p-m539-xhvc/GHSA-927p-m539-xhvc.json @@ -7,12 +7,8 @@ "CVE-2002-1834" ], "details": "The default configuration of Xerox DocuTech 6110 and DocuTech 6115 allows remote attackers to connect to the web server and (1) submit print jobs directly into the \"print now\" queue or (2) read the scanner job history.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-927w-qm35-gg94/GHSA-927w-qm35-gg94.json b/advisories/unreviewed/2022/04/GHSA-927w-qm35-gg94/GHSA-927w-qm35-gg94.json index c3e263c83e4..be111c622f5 100644 --- a/advisories/unreviewed/2022/04/GHSA-927w-qm35-gg94/GHSA-927w-qm35-gg94.json +++ b/advisories/unreviewed/2022/04/GHSA-927w-qm35-gg94/GHSA-927w-qm35-gg94.json @@ -7,12 +7,8 @@ "CVE-2002-1399" ], "details": "Unknown vulnerability in cash_out and possibly other functions in PostgreSQL 7.2.1 and earlier, and possibly later versions before 7.2.3, with unknown impact, based on an invalid integer input which is processed as a different data type, as demonstrated using cash_out(2).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-92j3-j87p-v54x/GHSA-92j3-j87p-v54x.json b/advisories/unreviewed/2022/04/GHSA-92j3-j87p-v54x/GHSA-92j3-j87p-v54x.json index e6c2f94c5c9..4bab6df8185 100644 --- a/advisories/unreviewed/2022/04/GHSA-92j3-j87p-v54x/GHSA-92j3-j87p-v54x.json +++ b/advisories/unreviewed/2022/04/GHSA-92j3-j87p-v54x/GHSA-92j3-j87p-v54x.json @@ -7,12 +7,8 @@ "CVE-2002-1615" ], "details": "Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to execute arbitrary code via (1) msgchk or (2) .upd..loader.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-93p7-xqj5-p562/GHSA-93p7-xqj5-p562.json b/advisories/unreviewed/2022/04/GHSA-93p7-xqj5-p562/GHSA-93p7-xqj5-p562.json index c985ed0efba..f159760396f 100644 --- a/advisories/unreviewed/2022/04/GHSA-93p7-xqj5-p562/GHSA-93p7-xqj5-p562.json +++ b/advisories/unreviewed/2022/04/GHSA-93p7-xqj5-p562/GHSA-93p7-xqj5-p562.json @@ -7,12 +7,8 @@ "CVE-2002-1560" ], "details": "index.php in gBook 1.4 allows remote attackers to bypass authentication and gain administrative privileges by setting the login parameter to true.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-94qf-5827-9224/GHSA-94qf-5827-9224.json b/advisories/unreviewed/2022/04/GHSA-94qf-5827-9224/GHSA-94qf-5827-9224.json index 5a324b9cfac..0574e74de64 100644 --- a/advisories/unreviewed/2022/04/GHSA-94qf-5827-9224/GHSA-94qf-5827-9224.json +++ b/advisories/unreviewed/2022/04/GHSA-94qf-5827-9224/GHSA-94qf-5827-9224.json @@ -7,12 +7,8 @@ "CVE-2002-1407" ], "details": "TinySSL 1.02 and earlier does not verify the Basic Constraints for an intermediate CA-signed certificate, which allows remote attackers to spoof the certificates of trusted sites via a man-in-the-middle attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9582-4m3g-fg43/GHSA-9582-4m3g-fg43.json b/advisories/unreviewed/2022/04/GHSA-9582-4m3g-fg43/GHSA-9582-4m3g-fg43.json index b00a9d841e5..ca86698151e 100644 --- a/advisories/unreviewed/2022/04/GHSA-9582-4m3g-fg43/GHSA-9582-4m3g-fg43.json +++ b/advisories/unreviewed/2022/04/GHSA-9582-4m3g-fg43/GHSA-9582-4m3g-fg43.json @@ -7,12 +7,8 @@ "CVE-2002-1672" ], "details": "Webmin 0.92, when installed from an RPM, creates /var/webmin with insecure permissions (world readable), which could allow local users to read the root user's cookie-based authentication credentials and possibly hijack the root user's session using the credentials.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-95xg-r294-q72m/GHSA-95xg-r294-q72m.json b/advisories/unreviewed/2022/04/GHSA-95xg-r294-q72m/GHSA-95xg-r294-q72m.json index 094b8ce77f1..955963b558a 100644 --- a/advisories/unreviewed/2022/04/GHSA-95xg-r294-q72m/GHSA-95xg-r294-q72m.json +++ b/advisories/unreviewed/2022/04/GHSA-95xg-r294-q72m/GHSA-95xg-r294-q72m.json @@ -7,12 +7,8 @@ "CVE-2002-1843" ], "details": "Perlbot 1.9.2 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $text variable in SpelCheck.pm or (2) the $filename variable in HTMLPlog.pm.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-97gv-8325-5xwj/GHSA-97gv-8325-5xwj.json b/advisories/unreviewed/2022/04/GHSA-97gv-8325-5xwj/GHSA-97gv-8325-5xwj.json index ef928e5583b..d55d7120282 100644 --- a/advisories/unreviewed/2022/04/GHSA-97gv-8325-5xwj/GHSA-97gv-8325-5xwj.json +++ b/advisories/unreviewed/2022/04/GHSA-97gv-8325-5xwj/GHSA-97gv-8325-5xwj.json @@ -7,12 +7,8 @@ "CVE-2002-1508" ], "details": "slapd in OpenLDAP2 (OpenLDAP 2) 2.2.0 and earlier allows local users to overwrite arbitrary files via a race condition during the creation of a log file for rejected replication requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-97j4-jf77-v37p/GHSA-97j4-jf77-v37p.json b/advisories/unreviewed/2022/04/GHSA-97j4-jf77-v37p/GHSA-97j4-jf77-v37p.json index f2d8b0c98e4..58a3330a97f 100644 --- a/advisories/unreviewed/2022/04/GHSA-97j4-jf77-v37p/GHSA-97j4-jf77-v37p.json +++ b/advisories/unreviewed/2022/04/GHSA-97j4-jf77-v37p/GHSA-97j4-jf77-v37p.json @@ -7,12 +7,8 @@ "CVE-2002-1396" ], "details": "Heap-based buffer overflow in the wordwrap function in PHP after 4.1.2 and before 4.3.0 may allow attackers to cause a denial of service or execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-97x7-4c95-pxm9/GHSA-97x7-4c95-pxm9.json b/advisories/unreviewed/2022/04/GHSA-97x7-4c95-pxm9/GHSA-97x7-4c95-pxm9.json index 22da22fb57b..ce0ba35ecf5 100644 --- a/advisories/unreviewed/2022/04/GHSA-97x7-4c95-pxm9/GHSA-97x7-4c95-pxm9.json +++ b/advisories/unreviewed/2022/04/GHSA-97x7-4c95-pxm9/GHSA-97x7-4c95-pxm9.json @@ -7,12 +7,8 @@ "CVE-2002-1803" ], "details": "Cross-site scripting (XSS) vulnerability in PHP-Nuke 6.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-986c-mm68-xxx2/GHSA-986c-mm68-xxx2.json b/advisories/unreviewed/2022/04/GHSA-986c-mm68-xxx2/GHSA-986c-mm68-xxx2.json index 7569c22eee8..7bde035f73b 100644 --- a/advisories/unreviewed/2022/04/GHSA-986c-mm68-xxx2/GHSA-986c-mm68-xxx2.json +++ b/advisories/unreviewed/2022/04/GHSA-986c-mm68-xxx2/GHSA-986c-mm68-xxx2.json @@ -7,12 +7,8 @@ "CVE-2002-1526" ], "details": "Cross-site scripting (XSS) vulnerability in emumail.cgi for EMU Webmail 5.0 allows remote attackers to inject arbitrary HTML or script via the email address field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-98v6-784f-9j89/GHSA-98v6-784f-9j89.json b/advisories/unreviewed/2022/04/GHSA-98v6-784f-9j89/GHSA-98v6-784f-9j89.json index 2a53cbe2ca8..28404084732 100644 --- a/advisories/unreviewed/2022/04/GHSA-98v6-784f-9j89/GHSA-98v6-784f-9j89.json +++ b/advisories/unreviewed/2022/04/GHSA-98v6-784f-9j89/GHSA-98v6-784f-9j89.json @@ -7,12 +7,8 @@ "CVE-2002-1575" ], "details": "cgiemail allows remote attackers to use cgiemail as a spam proxy via CRLF injection of encoded newline (%0a) characters in parameters such as \"required-subject,\" which can be used to modify the CC, BCC, and other header fields in the generated email message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9cx3-wq6r-qvm7/GHSA-9cx3-wq6r-qvm7.json b/advisories/unreviewed/2022/04/GHSA-9cx3-wq6r-qvm7/GHSA-9cx3-wq6r-qvm7.json index 3f1d17ca9cb..cf7447174f6 100644 --- a/advisories/unreviewed/2022/04/GHSA-9cx3-wq6r-qvm7/GHSA-9cx3-wq6r-qvm7.json +++ b/advisories/unreviewed/2022/04/GHSA-9cx3-wq6r-qvm7/GHSA-9cx3-wq6r-qvm7.json @@ -7,12 +7,8 @@ "CVE-2002-1772" ], "details": "Novell Netware 5.0 through 5.1 may allow local users to gain \"Domain Admin\" rights by logging into a Novell Directory Services (NDS) account, and executing \"net use\" on an NDS_ADM account that is not in the NT domain but has domain access rights, which allows the user to enter a null password.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9g67-rqhf-383g/GHSA-9g67-rqhf-383g.json b/advisories/unreviewed/2022/04/GHSA-9g67-rqhf-383g/GHSA-9g67-rqhf-383g.json index 3bd5712a97b..6c654066091 100644 --- a/advisories/unreviewed/2022/04/GHSA-9g67-rqhf-383g/GHSA-9g67-rqhf-383g.json +++ b/advisories/unreviewed/2022/04/GHSA-9g67-rqhf-383g/GHSA-9g67-rqhf-383g.json @@ -7,12 +7,8 @@ "CVE-2002-1503" ], "details": "Buffer overflow in Automatic File Distributor (AFD) 1.2.14 and earlier allows local users to gain privileges via a long MON_WORK_DIR environment variable or -w (workdir) argument to (1) afd, (2) afdcmd, (3) afd_ctrl, (4) init_afd, (5) mafd, (6) mon_ctrl, (7) show_olog, or (8) udc.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9g8q-h72g-fp7m/GHSA-9g8q-h72g-fp7m.json b/advisories/unreviewed/2022/04/GHSA-9g8q-h72g-fp7m/GHSA-9g8q-h72g-fp7m.json index b9e4c4ee950..9e7cb9d709b 100644 --- a/advisories/unreviewed/2022/04/GHSA-9g8q-h72g-fp7m/GHSA-9g8q-h72g-fp7m.json +++ b/advisories/unreviewed/2022/04/GHSA-9g8q-h72g-fp7m/GHSA-9g8q-h72g-fp7m.json @@ -7,12 +7,8 @@ "CVE-2002-1768" ], "details": "Cisco IOS 11.1 through 12.2, when HSRP support is not enabled, allows remote attackers to cause a denial of service (CPU consumption) via randomly sized UDP packets to the Hot Standby Routing Protocol (HSRP) port 1985.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9gvv-93c9-r576/GHSA-9gvv-93c9-r576.json b/advisories/unreviewed/2022/04/GHSA-9gvv-93c9-r576/GHSA-9gvv-93c9-r576.json index ff93a46ac31..860565da6ec 100644 --- a/advisories/unreviewed/2022/04/GHSA-9gvv-93c9-r576/GHSA-9gvv-93c9-r576.json +++ b/advisories/unreviewed/2022/04/GHSA-9gvv-93c9-r576/GHSA-9gvv-93c9-r576.json @@ -7,12 +7,8 @@ "CVE-2002-1412" ], "details": "Gallery photo album package before 1.3.1 allows local and possibly remote attackers to execute arbitrary code via a modified GALLERY_BASEDIR variable that points to a directory or URL that contains a Trojan horse init.php script.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9h6q-37xr-75xh/GHSA-9h6q-37xr-75xh.json b/advisories/unreviewed/2022/04/GHSA-9h6q-37xr-75xh/GHSA-9h6q-37xr-75xh.json index ea6f6e8e04d..4de9da6d7cf 100644 --- a/advisories/unreviewed/2022/04/GHSA-9h6q-37xr-75xh/GHSA-9h6q-37xr-75xh.json +++ b/advisories/unreviewed/2022/04/GHSA-9h6q-37xr-75xh/GHSA-9h6q-37xr-75xh.json @@ -7,12 +7,8 @@ "CVE-2002-1784" ], "details": "Unknown vulnerability in inetd in HP Tru64 Unix 4.0f through 5.1a allows remote attackers to cause a denial of service via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9pcm-7prc-jqw3/GHSA-9pcm-7prc-jqw3.json b/advisories/unreviewed/2022/04/GHSA-9pcm-7prc-jqw3/GHSA-9pcm-7prc-jqw3.json index 63a508e12c3..060ce5c9f21 100644 --- a/advisories/unreviewed/2022/04/GHSA-9pcm-7prc-jqw3/GHSA-9pcm-7prc-jqw3.json +++ b/advisories/unreviewed/2022/04/GHSA-9pcm-7prc-jqw3/GHSA-9pcm-7prc-jqw3.json @@ -7,12 +7,8 @@ "CVE-2002-1767" ], "details": "Buffer overflow in tnslsnr of Oracle 8i Database Server 8.1.5 for Linux allows local users to execute arbitrary code as the oracle user via a long command line argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9q5p-xwx7-2xf5/GHSA-9q5p-xwx7-2xf5.json b/advisories/unreviewed/2022/04/GHSA-9q5p-xwx7-2xf5/GHSA-9q5p-xwx7-2xf5.json index 30fb9ad50dd..e22d57572a3 100644 --- a/advisories/unreviewed/2022/04/GHSA-9q5p-xwx7-2xf5/GHSA-9q5p-xwx7-2xf5.json +++ b/advisories/unreviewed/2022/04/GHSA-9q5p-xwx7-2xf5/GHSA-9q5p-xwx7-2xf5.json @@ -7,12 +7,8 @@ "CVE-2002-1632" ], "details": "Oracle 9i Application Server (9iAS) installs multiple sample pages that allow remote attackers to obtain environment variables and other sensitive information via (1) info.jsp, (2) printenv, (3) echo, or (4) echo2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9qv7-qrq7-h43g/GHSA-9qv7-qrq7-h43g.json b/advisories/unreviewed/2022/04/GHSA-9qv7-qrq7-h43g/GHSA-9qv7-qrq7-h43g.json index af398f14794..37596fa8afa 100644 --- a/advisories/unreviewed/2022/04/GHSA-9qv7-qrq7-h43g/GHSA-9qv7-qrq7-h43g.json +++ b/advisories/unreviewed/2022/04/GHSA-9qv7-qrq7-h43g/GHSA-9qv7-qrq7-h43g.json @@ -7,12 +7,8 @@ "CVE-2002-1556" ], "details": "Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset) via an HTTP request to the TCC, TCC+ or XTC, in which the request contains an invalid CORBA Interoperable Object Reference (IOR).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9r86-74vm-r67j/GHSA-9r86-74vm-r67j.json b/advisories/unreviewed/2022/04/GHSA-9r86-74vm-r67j/GHSA-9r86-74vm-r67j.json index 998c88699ce..1548d6a95c3 100644 --- a/advisories/unreviewed/2022/04/GHSA-9r86-74vm-r67j/GHSA-9r86-74vm-r67j.json +++ b/advisories/unreviewed/2022/04/GHSA-9r86-74vm-r67j/GHSA-9r86-74vm-r67j.json @@ -7,12 +7,8 @@ "CVE-2002-1540" ], "details": "The client for Symantec Norton AntiVirus Corporate Edition 7.5.x before 7.5.1 Build 62 and 7.6.x before 7.6.1 Build 35a runs winhlp32 with raised privileges, which allows local users to gain privileges by using certain features of winhlp32.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9vr6-m4vr-8vc9/GHSA-9vr6-m4vr-8vc9.json b/advisories/unreviewed/2022/04/GHSA-9vr6-m4vr-8vc9/GHSA-9vr6-m4vr-8vc9.json index dbe0dcc6889..48e056d72b8 100644 --- a/advisories/unreviewed/2022/04/GHSA-9vr6-m4vr-8vc9/GHSA-9vr6-m4vr-8vc9.json +++ b/advisories/unreviewed/2022/04/GHSA-9vr6-m4vr-8vc9/GHSA-9vr6-m4vr-8vc9.json @@ -7,12 +7,8 @@ "CVE-2002-1795" ], "details": "Cross-site scripting (XSS) vulnerability in connect.asp in Microsoft Terminal Services Advanced Client (TSAC) ActiveX control allows remote attackers to inject arbitrary web script or HTML via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c25w-grpg-cp6j/GHSA-c25w-grpg-cp6j.json b/advisories/unreviewed/2022/04/GHSA-c25w-grpg-cp6j/GHSA-c25w-grpg-cp6j.json index 17f74efbaf5..23aa3134b71 100644 --- a/advisories/unreviewed/2022/04/GHSA-c25w-grpg-cp6j/GHSA-c25w-grpg-cp6j.json +++ b/advisories/unreviewed/2022/04/GHSA-c25w-grpg-cp6j/GHSA-c25w-grpg-cp6j.json @@ -7,12 +7,8 @@ "CVE-2002-1840" ], "details": "irssi IRC client 0.8.4, when downloaded after 14-March-2002, could contain a backdoor in the configuration file, which allows remote attackers to access the system.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c3pr-rr9m-p77p/GHSA-c3pr-rr9m-p77p.json b/advisories/unreviewed/2022/04/GHSA-c3pr-rr9m-p77p/GHSA-c3pr-rr9m-p77p.json index f966306dbc7..208450fa9da 100644 --- a/advisories/unreviewed/2022/04/GHSA-c3pr-rr9m-p77p/GHSA-c3pr-rr9m-p77p.json +++ b/advisories/unreviewed/2022/04/GHSA-c3pr-rr9m-p77p/GHSA-c3pr-rr9m-p77p.json @@ -7,12 +7,8 @@ "CVE-2002-1769" ], "details": "Microsoft Site Server 3.0 prior to SP4 installs a default user, LDAP_Anonymous, with a default password of LdapPassword_1, which allows remote attackers the \"Log on locally\" privilege.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c46v-3gj6-w5h6/GHSA-c46v-3gj6-w5h6.json b/advisories/unreviewed/2022/04/GHSA-c46v-3gj6-w5h6/GHSA-c46v-3gj6-w5h6.json index f613c3b7cd4..c24ec6e9980 100644 --- a/advisories/unreviewed/2022/04/GHSA-c46v-3gj6-w5h6/GHSA-c46v-3gj6-w5h6.json +++ b/advisories/unreviewed/2022/04/GHSA-c46v-3gj6-w5h6/GHSA-c46v-3gj6-w5h6.json @@ -7,12 +7,8 @@ "CVE-2002-1930" ], "details": "Buffer overflow in AN HTTPd 1.38 through 1.4.1c allows remote attackers to execute arbitrary code via a SOCKS4 request with a long username.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c5cf-p4j3-64r8/GHSA-c5cf-p4j3-64r8.json b/advisories/unreviewed/2022/04/GHSA-c5cf-p4j3-64r8/GHSA-c5cf-p4j3-64r8.json index 8561e7f44a7..e5e0c1c2c53 100644 --- a/advisories/unreviewed/2022/04/GHSA-c5cf-p4j3-64r8/GHSA-c5cf-p4j3-64r8.json +++ b/advisories/unreviewed/2022/04/GHSA-c5cf-p4j3-64r8/GHSA-c5cf-p4j3-64r8.json @@ -7,12 +7,8 @@ "CVE-2002-1680" ], "details": "Cross-site scripting (XSS) vulnerability in CGI Online Worldweb Shopping 1.1 (a.k.a. COWS) allows remote attackers to execute arbitrary script as other users by injecting script into (1) diagnose.cgi or (2) compatible.cgi.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c5mr-cvmq-cjvx/GHSA-c5mr-cvmq-cjvx.json b/advisories/unreviewed/2022/04/GHSA-c5mr-cvmq-cjvx/GHSA-c5mr-cvmq-cjvx.json index c98dddf44dd..256d007eaa7 100644 --- a/advisories/unreviewed/2022/04/GHSA-c5mr-cvmq-cjvx/GHSA-c5mr-cvmq-cjvx.json +++ b/advisories/unreviewed/2022/04/GHSA-c5mr-cvmq-cjvx/GHSA-c5mr-cvmq-cjvx.json @@ -7,12 +7,8 @@ "CVE-2002-1453" ], "details": "Cross-site scripting (XSS) vulnerability in MyWebServer 1.0.2 allows remote attackers to insert script and HTML via a long request followed by the malicious script, which is echoed back to the user in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c644-mhwp-h736/GHSA-c644-mhwp-h736.json b/advisories/unreviewed/2022/04/GHSA-c644-mhwp-h736/GHSA-c644-mhwp-h736.json index 3ccfac8f259..f377f70ab0d 100644 --- a/advisories/unreviewed/2022/04/GHSA-c644-mhwp-h736/GHSA-c644-mhwp-h736.json +++ b/advisories/unreviewed/2022/04/GHSA-c644-mhwp-h736/GHSA-c644-mhwp-h736.json @@ -7,12 +7,8 @@ "CVE-2002-1507" ], "details": "Unreal Tournament 2003 (ut2003) clients and servers allow remote attackers to cause a denial of service via malformed messages containing a small number of characters to UDP ports 7778 or 10777.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c999-9vcr-3xmc/GHSA-c999-9vcr-3xmc.json b/advisories/unreviewed/2022/04/GHSA-c999-9vcr-3xmc/GHSA-c999-9vcr-3xmc.json index 3180943720f..e09cbe70ecb 100644 --- a/advisories/unreviewed/2022/04/GHSA-c999-9vcr-3xmc/GHSA-c999-9vcr-3xmc.json +++ b/advisories/unreviewed/2022/04/GHSA-c999-9vcr-3xmc/GHSA-c999-9vcr-3xmc.json @@ -7,12 +7,8 @@ "CVE-2002-1771" ], "details": "Matt Wright FormMail 1.9 and earlier allows remote attackers to send spam or anonymous e-mail by injecting a newline character followed by CC:, BCC:, or additional TO: fields in the email and realname CGI variables.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c9c3-j7mh-wpfm/GHSA-c9c3-j7mh-wpfm.json b/advisories/unreviewed/2022/04/GHSA-c9c3-j7mh-wpfm/GHSA-c9c3-j7mh-wpfm.json index 0ca9102a670..47d1968dee5 100644 --- a/advisories/unreviewed/2022/04/GHSA-c9c3-j7mh-wpfm/GHSA-c9c3-j7mh-wpfm.json +++ b/advisories/unreviewed/2022/04/GHSA-c9c3-j7mh-wpfm/GHSA-c9c3-j7mh-wpfm.json @@ -7,12 +7,8 @@ "CVE-2002-1534" ], "details": "Macromedia Flash Player allows remote attackers to read arbitrary files via XML script in a .swf file that is hosted on a remote SMB share.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c9wx-625j-c7mq/GHSA-c9wx-625j-c7mq.json b/advisories/unreviewed/2022/04/GHSA-c9wx-625j-c7mq/GHSA-c9wx-625j-c7mq.json index 81520b22b02..d00c43e393c 100644 --- a/advisories/unreviewed/2022/04/GHSA-c9wx-625j-c7mq/GHSA-c9wx-625j-c7mq.json +++ b/advisories/unreviewed/2022/04/GHSA-c9wx-625j-c7mq/GHSA-c9wx-625j-c7mq.json @@ -7,12 +7,8 @@ "CVE-2002-1932" ], "details": "Microsoft Windows XP and Windows 2000, when configured to send administrative alerts and the \"Do not overwrite events (clear log manually)\" option is set, does not notify the administrator when the log reaches its maximum size, which allows local users and remote attackers to avoid detection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cc37-8hw4-rj6v/GHSA-cc37-8hw4-rj6v.json b/advisories/unreviewed/2022/04/GHSA-cc37-8hw4-rj6v/GHSA-cc37-8hw4-rj6v.json index 1a8069fdaea..f0be1cea0fc 100644 --- a/advisories/unreviewed/2022/04/GHSA-cc37-8hw4-rj6v/GHSA-cc37-8hw4-rj6v.json +++ b/advisories/unreviewed/2022/04/GHSA-cc37-8hw4-rj6v/GHSA-cc37-8hw4-rj6v.json @@ -7,12 +7,8 @@ "CVE-2002-1738" ], "details": "Alt-N Technologies MDaemon 5.0.5.0 and earlier creates a default MDaemon mail account with a password of MServer, which could allow remote attackers to send anonymous email.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-ccf5-56v8-fmrw/GHSA-ccf5-56v8-fmrw.json b/advisories/unreviewed/2022/04/GHSA-ccf5-56v8-fmrw/GHSA-ccf5-56v8-fmrw.json index ccf19ab728d..b296dd078a1 100644 --- a/advisories/unreviewed/2022/04/GHSA-ccf5-56v8-fmrw/GHSA-ccf5-56v8-fmrw.json +++ b/advisories/unreviewed/2022/04/GHSA-ccf5-56v8-fmrw/GHSA-ccf5-56v8-fmrw.json @@ -7,12 +7,8 @@ "CVE-2002-1641" ], "details": "Multiple buffer overflows in Oracle Web Cache for Oracle 9i Application Server (9iAS) allow remote attackers to execute arbitrary code via unknown vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-ccfp-7gpg-fg7v/GHSA-ccfp-7gpg-fg7v.json b/advisories/unreviewed/2022/04/GHSA-ccfp-7gpg-fg7v/GHSA-ccfp-7gpg-fg7v.json index 04ac82fae4c..c8876267a9b 100644 --- a/advisories/unreviewed/2022/04/GHSA-ccfp-7gpg-fg7v/GHSA-ccfp-7gpg-fg7v.json +++ b/advisories/unreviewed/2022/04/GHSA-ccfp-7gpg-fg7v/GHSA-ccfp-7gpg-fg7v.json @@ -7,12 +7,8 @@ "CVE-2002-1623" ], "details": "The design of the Internet Key Exchange (IKE) protocol, when using Aggressive Mode for shared secret authentication, does not encrypt initiator or responder identities during negotiation, which may allow remote attackers to determine valid usernames by (1) monitoring responses before the password is supplied or (2) sniffing, as originally reported for FireWall-1 SecuRemote.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cf6m-prqc-77x3/GHSA-cf6m-prqc-77x3.json b/advisories/unreviewed/2022/04/GHSA-cf6m-prqc-77x3/GHSA-cf6m-prqc-77x3.json index 84c5dd22f0c..48b962cf64d 100644 --- a/advisories/unreviewed/2022/04/GHSA-cf6m-prqc-77x3/GHSA-cf6m-prqc-77x3.json +++ b/advisories/unreviewed/2022/04/GHSA-cf6m-prqc-77x3/GHSA-cf6m-prqc-77x3.json @@ -7,12 +7,8 @@ "CVE-2002-1649" ], "details": "Cross-site scripting (XSS) vulnerability in read_body.php in SquirrelMail before 1.2.3 allows remote attackers to execute arbitrary Javascript via a javascript: URL in an IMG tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cgp4-wfr7-8prp/GHSA-cgp4-wfr7-8prp.json b/advisories/unreviewed/2022/04/GHSA-cgp4-wfr7-8prp/GHSA-cgp4-wfr7-8prp.json index 7a71acc5b41..29ab5a8002e 100644 --- a/advisories/unreviewed/2022/04/GHSA-cgp4-wfr7-8prp/GHSA-cgp4-wfr7-8prp.json +++ b/advisories/unreviewed/2022/04/GHSA-cgp4-wfr7-8prp/GHSA-cgp4-wfr7-8prp.json @@ -7,12 +7,8 @@ "CVE-2002-1537" ], "details": "admin_ug_auth.php in phpBB 2.0.0 allows local users to gain administrator privileges by directly calling admin_ug_auth.php with modifed form fields such as \"u\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-ch45-xvph-66gf/GHSA-ch45-xvph-66gf.json b/advisories/unreviewed/2022/04/GHSA-ch45-xvph-66gf/GHSA-ch45-xvph-66gf.json index 8f49ec2f05d..5a6aa8cab5f 100644 --- a/advisories/unreviewed/2022/04/GHSA-ch45-xvph-66gf/GHSA-ch45-xvph-66gf.json +++ b/advisories/unreviewed/2022/04/GHSA-ch45-xvph-66gf/GHSA-ch45-xvph-66gf.json @@ -7,12 +7,8 @@ "CVE-2002-1472" ], "details": "Untrusted search path vulnerability in libX11.so in xfree86, when used in setuid or setgid programs, allows local users to gain root privileges via a modified LD_PRELOAD environment variable that points to a malicious module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-chrp-f2pw-4x7x/GHSA-chrp-f2pw-4x7x.json b/advisories/unreviewed/2022/04/GHSA-chrp-f2pw-4x7x/GHSA-chrp-f2pw-4x7x.json index fad3f0e955c..2f3dc190250 100644 --- a/advisories/unreviewed/2022/04/GHSA-chrp-f2pw-4x7x/GHSA-chrp-f2pw-4x7x.json +++ b/advisories/unreviewed/2022/04/GHSA-chrp-f2pw-4x7x/GHSA-chrp-f2pw-4x7x.json @@ -7,12 +7,8 @@ "CVE-2002-1539" ], "details": "Buffer overflow in MDaemon POP server 6.0.7 and earlier allows remote authenticated users to cause a denial of service via long (1) DELE or (2) UIDL arguments.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cjcx-qpgc-qq97/GHSA-cjcx-qpgc-qq97.json b/advisories/unreviewed/2022/04/GHSA-cjcx-qpgc-qq97/GHSA-cjcx-qpgc-qq97.json index 06acdfae9f4..e2e7557ca85 100644 --- a/advisories/unreviewed/2022/04/GHSA-cjcx-qpgc-qq97/GHSA-cjcx-qpgc-qq97.json +++ b/advisories/unreviewed/2022/04/GHSA-cjcx-qpgc-qq97/GHSA-cjcx-qpgc-qq97.json @@ -7,12 +7,8 @@ "CVE-2002-1454" ], "details": "MyWebServer 1.0.2 allows remote attackers to determine the absolute path of the web document root via a request for a directory that does not exist, which leaks the pathname in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cjfx-9fmj-c733/GHSA-cjfx-9fmj-c733.json b/advisories/unreviewed/2022/04/GHSA-cjfx-9fmj-c733/GHSA-cjfx-9fmj-c733.json index f18ceaa0589..76d62599072 100644 --- a/advisories/unreviewed/2022/04/GHSA-cjfx-9fmj-c733/GHSA-cjfx-9fmj-c733.json +++ b/advisories/unreviewed/2022/04/GHSA-cjfx-9fmj-c733/GHSA-cjfx-9fmj-c733.json @@ -7,12 +7,8 @@ "CVE-2002-1493" ], "details": "Cross-site scripting (XSS) vulnerability in Lycos HTMLGear guestbook allows remote attackers to inject arbitrary script via (1) STYLE attributes or (2) SRC attributes in an IMG tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cjrp-qwjv-qwpw/GHSA-cjrp-qwjv-qwpw.json b/advisories/unreviewed/2022/04/GHSA-cjrp-qwjv-qwpw/GHSA-cjrp-qwjv-qwpw.json index 2d14a93c710..ce1000260a6 100644 --- a/advisories/unreviewed/2022/04/GHSA-cjrp-qwjv-qwpw/GHSA-cjrp-qwjv-qwpw.json +++ b/advisories/unreviewed/2022/04/GHSA-cjrp-qwjv-qwpw/GHSA-cjrp-qwjv-qwpw.json @@ -7,12 +7,8 @@ "CVE-2002-1854" ], "details": "Rlaj whois CGI script (whois.cgi) 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain name field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cjv5-r44f-hxgj/GHSA-cjv5-r44f-hxgj.json b/advisories/unreviewed/2022/04/GHSA-cjv5-r44f-hxgj/GHSA-cjv5-r44f-hxgj.json index 097338484a0..04b2855ed06 100644 --- a/advisories/unreviewed/2022/04/GHSA-cjv5-r44f-hxgj/GHSA-cjv5-r44f-hxgj.json +++ b/advisories/unreviewed/2022/04/GHSA-cjv5-r44f-hxgj/GHSA-cjv5-r44f-hxgj.json @@ -7,12 +7,8 @@ "CVE-2002-1403" ], "details": "dhcpcd DHCP client daemon 1.3.22 and earlier allows local users to execute arbitrary code via shell metacharacters that are fed from a dhcpd .info script into a .exe script.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cjw5-wc7c-w2w9/GHSA-cjw5-wc7c-w2w9.json b/advisories/unreviewed/2022/04/GHSA-cjw5-wc7c-w2w9/GHSA-cjw5-wc7c-w2w9.json index 94d2d53bdce..d5b6e6b627e 100644 --- a/advisories/unreviewed/2022/04/GHSA-cjw5-wc7c-w2w9/GHSA-cjw5-wc7c-w2w9.json +++ b/advisories/unreviewed/2022/04/GHSA-cjw5-wc7c-w2w9/GHSA-cjw5-wc7c-w2w9.json @@ -7,12 +7,8 @@ "CVE-2002-1634" ], "details": "Novell NetWare 5.1 installs sample applications that allow remote attackers to obtain sensitive information via (1) ndsobj.nlm, (2) allfield.jse, (3) websinfo.bas, (4) ndslogin.pl, (5) volscgi.pl, (6) lancgi.pl, (7) test.jse, or (8) env.pl.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cm7j-94hg-gxf8/GHSA-cm7j-94hg-gxf8.json b/advisories/unreviewed/2022/04/GHSA-cm7j-94hg-gxf8/GHSA-cm7j-94hg-gxf8.json index a0c8fec89a7..55cded85aef 100644 --- a/advisories/unreviewed/2022/04/GHSA-cm7j-94hg-gxf8/GHSA-cm7j-94hg-gxf8.json +++ b/advisories/unreviewed/2022/04/GHSA-cm7j-94hg-gxf8/GHSA-cm7j-94hg-gxf8.json @@ -7,12 +7,8 @@ "CVE-2002-1604" ], "details": "Multiple buffer overflows in HP Tru64 UNIX allow local and possibly remote attackers to execute arbitrary code via a long NLSPATH environment variable to (1) csh, (2) dtsession, (3) dxsysinfo, (4) imapd, (5) inc, (6) uucp, (7) uux, (8) rdist, or (9) deliver.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cmxc-6vcf-rchp/GHSA-cmxc-6vcf-rchp.json b/advisories/unreviewed/2022/04/GHSA-cmxc-6vcf-rchp/GHSA-cmxc-6vcf-rchp.json index 7a7db2a750e..6c207af4481 100644 --- a/advisories/unreviewed/2022/04/GHSA-cmxc-6vcf-rchp/GHSA-cmxc-6vcf-rchp.json +++ b/advisories/unreviewed/2022/04/GHSA-cmxc-6vcf-rchp/GHSA-cmxc-6vcf-rchp.json @@ -7,12 +7,8 @@ "CVE-2002-1521" ], "details": "Web Server 4D (WS4D) 3.6 stores passwords in plaintext in the Ws4d.4DD file, which allows attackers to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cpc3-jm64-6r82/GHSA-cpc3-jm64-6r82.json b/advisories/unreviewed/2022/04/GHSA-cpc3-jm64-6r82/GHSA-cpc3-jm64-6r82.json index d8e0c71854c..7a2a34958dd 100644 --- a/advisories/unreviewed/2022/04/GHSA-cpc3-jm64-6r82/GHSA-cpc3-jm64-6r82.json +++ b/advisories/unreviewed/2022/04/GHSA-cpc3-jm64-6r82/GHSA-cpc3-jm64-6r82.json @@ -7,12 +7,8 @@ "CVE-2002-1545" ], "details": "CooolSoft Personal FTP Server 2.24 allows remote attackers to obtain the absolute pathname of the FTP root via a PWD command, which includes the full path in the response.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cpmg-jh9h-vghm/GHSA-cpmg-jh9h-vghm.json b/advisories/unreviewed/2022/04/GHSA-cpmg-jh9h-vghm/GHSA-cpmg-jh9h-vghm.json index 8e521388f4b..71a02db89e3 100644 --- a/advisories/unreviewed/2022/04/GHSA-cpmg-jh9h-vghm/GHSA-cpmg-jh9h-vghm.json +++ b/advisories/unreviewed/2022/04/GHSA-cpmg-jh9h-vghm/GHSA-cpmg-jh9h-vghm.json @@ -7,12 +7,8 @@ "CVE-2002-1812" ], "details": "Buffer overflow in gdam123 0.933 and 0.942 allows local users to execute arbitrary code via a long filename parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cqv3-52rp-ccf9/GHSA-cqv3-52rp-ccf9.json b/advisories/unreviewed/2022/04/GHSA-cqv3-52rp-ccf9/GHSA-cqv3-52rp-ccf9.json index 93e12530847..22fe0206c7c 100644 --- a/advisories/unreviewed/2022/04/GHSA-cqv3-52rp-ccf9/GHSA-cqv3-52rp-ccf9.json +++ b/advisories/unreviewed/2022/04/GHSA-cqv3-52rp-ccf9/GHSA-cqv3-52rp-ccf9.json @@ -7,12 +7,8 @@ "CVE-2002-1475" ], "details": "Unknown vulnerability in the ARP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows remote attackers to \"take over packets destined for another host\" and cause a denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cr5q-mgrc-j4qj/GHSA-cr5q-mgrc-j4qj.json b/advisories/unreviewed/2022/04/GHSA-cr5q-mgrc-j4qj/GHSA-cr5q-mgrc-j4qj.json index d5902ef4dec..bda74876f42 100644 --- a/advisories/unreviewed/2022/04/GHSA-cr5q-mgrc-j4qj/GHSA-cr5q-mgrc-j4qj.json +++ b/advisories/unreviewed/2022/04/GHSA-cr5q-mgrc-j4qj/GHSA-cr5q-mgrc-j4qj.json @@ -7,12 +7,8 @@ "CVE-2002-1553" ], "details": "Cisco ONS15454 and ONS15327 running ONS before 3.4 allows remote attackers to modify the system configuration and delete files by establishing an FTP connection to the TCC, TCC+ or XTC using a username and password that does not exist.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-crxp-x2qh-h8xx/GHSA-crxp-x2qh-h8xx.json b/advisories/unreviewed/2022/04/GHSA-crxp-x2qh-h8xx/GHSA-crxp-x2qh-h8xx.json index a3909edd11e..53664871a06 100644 --- a/advisories/unreviewed/2022/04/GHSA-crxp-x2qh-h8xx/GHSA-crxp-x2qh-h8xx.json +++ b/advisories/unreviewed/2022/04/GHSA-crxp-x2qh-h8xx/GHSA-crxp-x2qh-h8xx.json @@ -7,12 +7,8 @@ "CVE-2002-1473" ], "details": "Multiple buffer overflows in lp subsystem for HP-UX 10.20 through 11.11 (11i) allow local users to cause a denial of service and possibly execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cxmh-cjjc-hchp/GHSA-cxmh-cjjc-hchp.json b/advisories/unreviewed/2022/04/GHSA-cxmh-cjjc-hchp/GHSA-cxmh-cjjc-hchp.json index 07173d64ee6..a9bbd580c46 100644 --- a/advisories/unreviewed/2022/04/GHSA-cxmh-cjjc-hchp/GHSA-cxmh-cjjc-hchp.json +++ b/advisories/unreviewed/2022/04/GHSA-cxmh-cjjc-hchp/GHSA-cxmh-cjjc-hchp.json @@ -7,12 +7,8 @@ "CVE-2002-1446" ], "details": "The error checking routine used for the C_Verify call on a symmetric verification key in the nCipher PKCS#11 library 1.2.0 and later returns the CKR_OK status even when it detects an invalid signature, which could allow remote attackers to modify or forge messages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cxwj-pc5r-7752/GHSA-cxwj-pc5r-7752.json b/advisories/unreviewed/2022/04/GHSA-cxwj-pc5r-7752/GHSA-cxwj-pc5r-7752.json index 954784949b1..548130220d0 100644 --- a/advisories/unreviewed/2022/04/GHSA-cxwj-pc5r-7752/GHSA-cxwj-pc5r-7752.json +++ b/advisories/unreviewed/2022/04/GHSA-cxwj-pc5r-7752/GHSA-cxwj-pc5r-7752.json @@ -7,12 +7,8 @@ "CVE-2002-1763" ], "details": "The dtscreen Sun Solaris 8 CDE screensaver crashes when the \"Shift\" and \"Return\" keys are pressed repeatedly and quickly, which allows local users to access the current session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-f5r8-hh53-9mq4/GHSA-f5r8-hh53-9mq4.json b/advisories/unreviewed/2022/04/GHSA-f5r8-hh53-9mq4/GHSA-f5r8-hh53-9mq4.json index 0b6a96f897a..109ac3c9e66 100644 --- a/advisories/unreviewed/2022/04/GHSA-f5r8-hh53-9mq4/GHSA-f5r8-hh53-9mq4.json +++ b/advisories/unreviewed/2022/04/GHSA-f5r8-hh53-9mq4/GHSA-f5r8-hh53-9mq4.json @@ -7,12 +7,8 @@ "CVE-2002-1858" ], "details": "Oracle Oracle9i Application Server 1.0.2.2 and 9.0.2 through 9.0.2.0.1, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot (\"WEB-INF.\").", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-f7rc-95v2-9cjv/GHSA-f7rc-95v2-9cjv.json b/advisories/unreviewed/2022/04/GHSA-f7rc-95v2-9cjv/GHSA-f7rc-95v2-9cjv.json index 87ca07e062d..6c671596578 100644 --- a/advisories/unreviewed/2022/04/GHSA-f7rc-95v2-9cjv/GHSA-f7rc-95v2-9cjv.json +++ b/advisories/unreviewed/2022/04/GHSA-f7rc-95v2-9cjv/GHSA-f7rc-95v2-9cjv.json @@ -7,12 +7,8 @@ "CVE-2002-1587" ], "details": "The libthread library (libthread.so.1) for Solaris 2.5.1 through 8 allows local users to cause a denial of service (hang) of an application that uses libthread by causing the application to wait for a certain mutex.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-f826-fqh7-r9mx/GHSA-f826-fqh7-r9mx.json b/advisories/unreviewed/2022/04/GHSA-f826-fqh7-r9mx/GHSA-f826-fqh7-r9mx.json index 746a216ba11..c9d77e4e700 100644 --- a/advisories/unreviewed/2022/04/GHSA-f826-fqh7-r9mx/GHSA-f826-fqh7-r9mx.json +++ b/advisories/unreviewed/2022/04/GHSA-f826-fqh7-r9mx/GHSA-f826-fqh7-r9mx.json @@ -7,12 +7,8 @@ "CVE-2002-1474" ], "details": "Unknown vulnerability or vulnerabilities in TCP/IP component for HP Tru64 UNIX 4.0f, 4.0g, and 5.0a allows remote attackers to cause a denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-f84x-8jjq-m65g/GHSA-f84x-8jjq-m65g.json b/advisories/unreviewed/2022/04/GHSA-f84x-8jjq-m65g/GHSA-f84x-8jjq-m65g.json index a6106000a3f..c7f7abff7c0 100644 --- a/advisories/unreviewed/2022/04/GHSA-f84x-8jjq-m65g/GHSA-f84x-8jjq-m65g.json +++ b/advisories/unreviewed/2022/04/GHSA-f84x-8jjq-m65g/GHSA-f84x-8jjq-m65g.json @@ -7,12 +7,8 @@ "CVE-2002-1663" ], "details": "The Post_Method function in method.c for Monkey HTTP Daemon before 0.5.1 allows remote attackers to cause a denial of service (crash) via a POST request with an invalid or missing Content-Length header value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-ff2c-v3j3-7xv6/GHSA-ff2c-v3j3-7xv6.json b/advisories/unreviewed/2022/04/GHSA-ff2c-v3j3-7xv6/GHSA-ff2c-v3j3-7xv6.json index ddbc673aed0..ba8dd6a0d40 100644 --- a/advisories/unreviewed/2022/04/GHSA-ff2c-v3j3-7xv6/GHSA-ff2c-v3j3-7xv6.json +++ b/advisories/unreviewed/2022/04/GHSA-ff2c-v3j3-7xv6/GHSA-ff2c-v3j3-7xv6.json @@ -7,12 +7,8 @@ "CVE-2002-1595" ], "details": "Cisco SN 5420 Storage Router 1.1(5) and earlier allows attackers to read configuration files without authorization.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-ff3r-4q22-8fwc/GHSA-ff3r-4q22-8fwc.json b/advisories/unreviewed/2022/04/GHSA-ff3r-4q22-8fwc/GHSA-ff3r-4q22-8fwc.json index 2583bff682c..beaf6dde3c3 100644 --- a/advisories/unreviewed/2022/04/GHSA-ff3r-4q22-8fwc/GHSA-ff3r-4q22-8fwc.json +++ b/advisories/unreviewed/2022/04/GHSA-ff3r-4q22-8fwc/GHSA-ff3r-4q22-8fwc.json @@ -7,12 +7,8 @@ "CVE-2002-1524" ], "details": "Buffer overflow in XML parser in wsabi.dll of Winamp 3 (1.0.0.488) allows remote attackers to execute arbitrary code via a skin file (.wal) with a long include file tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fj4g-f3v5-4vcj/GHSA-fj4g-f3v5-4vcj.json b/advisories/unreviewed/2022/04/GHSA-fj4g-f3v5-4vcj/GHSA-fj4g-f3v5-4vcj.json index e7009c88400..967f5481a96 100644 --- a/advisories/unreviewed/2022/04/GHSA-fj4g-f3v5-4vcj/GHSA-fj4g-f3v5-4vcj.json +++ b/advisories/unreviewed/2022/04/GHSA-fj4g-f3v5-4vcj/GHSA-fj4g-f3v5-4vcj.json @@ -7,12 +7,8 @@ "CVE-2002-1730" ], "details": "ASPjar Guestbook 1.00 allows remote attackers to delete arbitrary messages accessing the delete.asp administrative script with certain cookie values set to \"true\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fp37-6m3m-pxjx/GHSA-fp37-6m3m-pxjx.json b/advisories/unreviewed/2022/04/GHSA-fp37-6m3m-pxjx/GHSA-fp37-6m3m-pxjx.json index 070a30c36dc..bfcc54b9178 100644 --- a/advisories/unreviewed/2022/04/GHSA-fp37-6m3m-pxjx/GHSA-fp37-6m3m-pxjx.json +++ b/advisories/unreviewed/2022/04/GHSA-fp37-6m3m-pxjx/GHSA-fp37-6m3m-pxjx.json @@ -7,12 +7,8 @@ "CVE-2002-1506" ], "details": "Buffer overflow in Linuxconf before 1.28r4 allows local users to execute arbitrary code via a long LINUXCONF_LANG environment variable, which overflows an error string that is generated.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fp3w-c9cj-pcvm/GHSA-fp3w-c9cj-pcvm.json b/advisories/unreviewed/2022/04/GHSA-fp3w-c9cj-pcvm/GHSA-fp3w-c9cj-pcvm.json index a8e6fc087f9..2f61a52a23b 100644 --- a/advisories/unreviewed/2022/04/GHSA-fp3w-c9cj-pcvm/GHSA-fp3w-c9cj-pcvm.json +++ b/advisories/unreviewed/2022/04/GHSA-fp3w-c9cj-pcvm/GHSA-fp3w-c9cj-pcvm.json @@ -7,12 +7,8 @@ "CVE-2002-1564" ], "details": "Internet Explorer 5.5 and 6.0 allows remote attackers to steal potentially sensitive information from cookies via a cookie that contains script which is executed when a page is loaded, aka the \"Script within Cookies Reading Cookies\" vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fq5j-97fp-p9jc/GHSA-fq5j-97fp-p9jc.json b/advisories/unreviewed/2022/04/GHSA-fq5j-97fp-p9jc/GHSA-fq5j-97fp-p9jc.json index f3b024adb94..fb1aba50c63 100644 --- a/advisories/unreviewed/2022/04/GHSA-fq5j-97fp-p9jc/GHSA-fq5j-97fp-p9jc.json +++ b/advisories/unreviewed/2022/04/GHSA-fq5j-97fp-p9jc/GHSA-fq5j-97fp-p9jc.json @@ -7,12 +7,8 @@ "CVE-2002-1780" ], "details": "BPM Studio Pro 4.2 by ALCATech GmbH includes a webserver that allows a remote attacker to cause a denial of service (crash) by sending a URL request for a MS-DOS device such as con. NOTE: it has been disputed that this and possibly other application-level DOS device issues stem from a bug in Windows, and as such, such applications should not be considered vulnerable themselves.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fq5j-g6xv-28f7/GHSA-fq5j-g6xv-28f7.json b/advisories/unreviewed/2022/04/GHSA-fq5j-g6xv-28f7/GHSA-fq5j-g6xv-28f7.json index e97f81d1e5f..31813d434b1 100644 --- a/advisories/unreviewed/2022/04/GHSA-fq5j-g6xv-28f7/GHSA-fq5j-g6xv-28f7.json +++ b/advisories/unreviewed/2022/04/GHSA-fq5j-g6xv-28f7/GHSA-fq5j-g6xv-28f7.json @@ -7,12 +7,8 @@ "CVE-2002-1423" ], "details": "tmp_view.php in FUDforum before 2.2.0 allows remote attackers to read arbitrary files via an absolute pathname in the file parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fxjg-ghw7-4rg3/GHSA-fxjg-ghw7-4rg3.json b/advisories/unreviewed/2022/04/GHSA-fxjg-ghw7-4rg3/GHSA-fxjg-ghw7-4rg3.json index 6d1c4880bec..ee2ce8ed428 100644 --- a/advisories/unreviewed/2022/04/GHSA-fxjg-ghw7-4rg3/GHSA-fxjg-ghw7-4rg3.json +++ b/advisories/unreviewed/2022/04/GHSA-fxjg-ghw7-4rg3/GHSA-fxjg-ghw7-4rg3.json @@ -7,12 +7,8 @@ "CVE-2002-1491" ], "details": "The Cisco VPN 5000 Client for MacOS before 5.2.2 records the most recently used login password in plaintext when saving \"Default Connection\" settings, which could allow local users to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fxwx-9wgp-c8f8/GHSA-fxwx-9wgp-c8f8.json b/advisories/unreviewed/2022/04/GHSA-fxwx-9wgp-c8f8/GHSA-fxwx-9wgp-c8f8.json index a98e96049f2..dea4716311c 100644 --- a/advisories/unreviewed/2022/04/GHSA-fxwx-9wgp-c8f8/GHSA-fxwx-9wgp-c8f8.json +++ b/advisories/unreviewed/2022/04/GHSA-fxwx-9wgp-c8f8/GHSA-fxwx-9wgp-c8f8.json @@ -7,12 +7,8 @@ "CVE-2002-1651" ], "details": "Cross-site scripting (XSS) vulnerability in Verity Search97 allows remote attackers to insert arbitrary web content and steal sensitive information from other clients, possibly due to certain error messages from template pages that use the (1) vformat or (2) vfilter functions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-g373-qj6g-7pg8/GHSA-g373-qj6g-7pg8.json b/advisories/unreviewed/2022/04/GHSA-g373-qj6g-7pg8/GHSA-g373-qj6g-7pg8.json index cb29f7cf675..891770a7ecf 100644 --- a/advisories/unreviewed/2022/04/GHSA-g373-qj6g-7pg8/GHSA-g373-qj6g-7pg8.json +++ b/advisories/unreviewed/2022/04/GHSA-g373-qj6g-7pg8/GHSA-g373-qj6g-7pg8.json @@ -7,12 +7,8 @@ "CVE-2002-1594" ], "details": "Buffer overflow in (1) grpck and (2) pwck, if installed setuid on a system as recommended in some AIX documentation, may allow local users to gain privileges via a long command line argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-g4g9-vhf3-m2x9/GHSA-g4g9-vhf3-m2x9.json b/advisories/unreviewed/2022/04/GHSA-g4g9-vhf3-m2x9/GHSA-g4g9-vhf3-m2x9.json index ac67d7b931a..4f9a59101d7 100644 --- a/advisories/unreviewed/2022/04/GHSA-g4g9-vhf3-m2x9/GHSA-g4g9-vhf3-m2x9.json +++ b/advisories/unreviewed/2022/04/GHSA-g4g9-vhf3-m2x9/GHSA-g4g9-vhf3-m2x9.json @@ -7,12 +7,8 @@ "CVE-2002-1482" ], "details": "SQL injection vulnerability in login.php for phpGB 1.20 and earlier, when magic_quotes_gpc is not enabled, allows remote attackers to gain administrative privileges via SQL code in the password entry.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-g537-q8gc-5484/GHSA-g537-q8gc-5484.json b/advisories/unreviewed/2022/04/GHSA-g537-q8gc-5484/GHSA-g537-q8gc-5484.json index 7a0c2491777..86fbf0e0ebe 100644 --- a/advisories/unreviewed/2022/04/GHSA-g537-q8gc-5484/GHSA-g537-q8gc-5484.json +++ b/advisories/unreviewed/2022/04/GHSA-g537-q8gc-5484/GHSA-g537-q8gc-5484.json @@ -7,12 +7,8 @@ "CVE-2002-1571" ], "details": "The linux 2.4 kernel before 2.4.19 assumes that the fninit instruction clears all registers, which could lead to an information leak on processors that do not clear all relevant SSE registers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-g5hh-6qh3-xw78/GHSA-g5hh-6qh3-xw78.json b/advisories/unreviewed/2022/04/GHSA-g5hh-6qh3-xw78/GHSA-g5hh-6qh3-xw78.json index 0fc6f0bfed6..f9410a4e8c4 100644 --- a/advisories/unreviewed/2022/04/GHSA-g5hh-6qh3-xw78/GHSA-g5hh-6qh3-xw78.json +++ b/advisories/unreviewed/2022/04/GHSA-g5hh-6qh3-xw78/GHSA-g5hh-6qh3-xw78.json @@ -7,12 +7,8 @@ "CVE-2002-1813" ], "details": "Directory traversal vulnerability in AOL Instant Messenger (AIM) 4.8.2790 allows remote attackers to execute arbitrary programs by specifying the program in the href attribute of a link.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-g7jw-7g8q-7f72/GHSA-g7jw-7g8q-7f72.json b/advisories/unreviewed/2022/04/GHSA-g7jw-7g8q-7f72/GHSA-g7jw-7g8q-7f72.json index 895b3baf447..0eeac55218b 100644 --- a/advisories/unreviewed/2022/04/GHSA-g7jw-7g8q-7f72/GHSA-g7jw-7g8q-7f72.json +++ b/advisories/unreviewed/2022/04/GHSA-g7jw-7g8q-7f72/GHSA-g7jw-7g8q-7f72.json @@ -7,12 +7,8 @@ "CVE-2002-1687" ], "details": "Buffer overflow in the diagnostics library in AIX allows local users to \"cause data and instructions to be overwritten\" via a long DIAGNOSTICS environment variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-g942-9jhf-qjgc/GHSA-g942-9jhf-qjgc.json b/advisories/unreviewed/2022/04/GHSA-g942-9jhf-qjgc/GHSA-g942-9jhf-qjgc.json index c6718c2a9e9..0413c67dabc 100644 --- a/advisories/unreviewed/2022/04/GHSA-g942-9jhf-qjgc/GHSA-g942-9jhf-qjgc.json +++ b/advisories/unreviewed/2022/04/GHSA-g942-9jhf-qjgc/GHSA-g942-9jhf-qjgc.json @@ -7,12 +7,8 @@ "CVE-2002-1765" ], "details": "Evolution 1.0.3 and 1.0.4 allows remote attackers to cause a denial of service (memory consumption and crash) via an email with a malformed MIME header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gc8j-4w9j-393f/GHSA-gc8j-4w9j-393f.json b/advisories/unreviewed/2022/04/GHSA-gc8j-4w9j-393f/GHSA-gc8j-4w9j-393f.json index cafdbcbf9d4..92095d5f76c 100644 --- a/advisories/unreviewed/2022/04/GHSA-gc8j-4w9j-393f/GHSA-gc8j-4w9j-393f.json +++ b/advisories/unreviewed/2022/04/GHSA-gc8j-4w9j-393f/GHSA-gc8j-4w9j-393f.json @@ -7,12 +7,8 @@ "CVE-2002-1613" ], "details": "Buffer overflow in ps in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gch4-9vxm-8xcr/GHSA-gch4-9vxm-8xcr.json b/advisories/unreviewed/2022/04/GHSA-gch4-9vxm-8xcr/GHSA-gch4-9vxm-8xcr.json index 8a1d89fc60a..bc1c1bf81aa 100644 --- a/advisories/unreviewed/2022/04/GHSA-gch4-9vxm-8xcr/GHSA-gch4-9vxm-8xcr.json +++ b/advisories/unreviewed/2022/04/GHSA-gch4-9vxm-8xcr/GHSA-gch4-9vxm-8xcr.json @@ -7,12 +7,8 @@ "CVE-2002-1451" ], "details": "Blazix before 1.2.2 allows remote attackers to read source code of JSP scripts or list restricted web directories via an HTTP request that ends in a (1) \"+\" or (2) \"\\\" (backslash) character.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gfqv-2x4h-j842/GHSA-gfqv-2x4h-j842.json b/advisories/unreviewed/2022/04/GHSA-gfqv-2x4h-j842/GHSA-gfqv-2x4h-j842.json index 287d9df49b1..381c260b387 100644 --- a/advisories/unreviewed/2022/04/GHSA-gfqv-2x4h-j842/GHSA-gfqv-2x4h-j842.json +++ b/advisories/unreviewed/2022/04/GHSA-gfqv-2x4h-j842/GHSA-gfqv-2x4h-j842.json @@ -7,12 +7,8 @@ "CVE-2002-1671" ], "details": "Microsoft Internet Explorer 5.0, 5.01, and 5.5 allows remote attackers to monitor the contents of the clipboard via the getData method of the clipboardData object.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gm77-rmm2-2226/GHSA-gm77-rmm2-2226.json b/advisories/unreviewed/2022/04/GHSA-gm77-rmm2-2226/GHSA-gm77-rmm2-2226.json index 8267c07d78f..209bf591d0a 100644 --- a/advisories/unreviewed/2022/04/GHSA-gm77-rmm2-2226/GHSA-gm77-rmm2-2226.json +++ b/advisories/unreviewed/2022/04/GHSA-gm77-rmm2-2226/GHSA-gm77-rmm2-2226.json @@ -7,12 +7,8 @@ "CVE-2002-1676" ], "details": "BindView NetInventory 1.0, when used with NetRC 1.0, allows local users to read sensitive information (passwords) by deleting the HOSTCFG._NI file and forcing an audit, which rewrites the HOSTCFG._NI to HOSTCFG.INI and stores the passwords in cleartext until the audit is complete.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gmvw-7v53-4794/GHSA-gmvw-7v53-4794.json b/advisories/unreviewed/2022/04/GHSA-gmvw-7v53-4794/GHSA-gmvw-7v53-4794.json index 6ed248841e3..3b70d3b834f 100644 --- a/advisories/unreviewed/2022/04/GHSA-gmvw-7v53-4794/GHSA-gmvw-7v53-4794.json +++ b/advisories/unreviewed/2022/04/GHSA-gmvw-7v53-4794/GHSA-gmvw-7v53-4794.json @@ -7,12 +7,8 @@ "CVE-2002-1431" ], "details": "Belkin F5D5230-4 4-Port Cable/DSL Gateway Router 1.20.000 modifies the source IP address of internal packets to that of the router's external interface when forwarding a request from an internal host to an internal web server, which allows remote attackers to hide which host is being used to access the web server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gmx5-v3h7-5j49/GHSA-gmx5-v3h7-5j49.json b/advisories/unreviewed/2022/04/GHSA-gmx5-v3h7-5j49/GHSA-gmx5-v3h7-5j49.json index 3379932e62e..28d5a1ac7b1 100644 --- a/advisories/unreviewed/2022/04/GHSA-gmx5-v3h7-5j49/GHSA-gmx5-v3h7-5j49.json +++ b/advisories/unreviewed/2022/04/GHSA-gmx5-v3h7-5j49/GHSA-gmx5-v3h7-5j49.json @@ -7,12 +7,8 @@ "CVE-2002-1468" ], "details": "Buffer overflow in errpt in AIX 4.3.3 allows local users to execute arbitrary code as root.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gpm8-6j9v-6v7f/GHSA-gpm8-6j9v-6v7f.json b/advisories/unreviewed/2022/04/GHSA-gpm8-6j9v-6v7f/GHSA-gpm8-6j9v-6v7f.json index ab569b680f9..62ff6764aaf 100644 --- a/advisories/unreviewed/2022/04/GHSA-gpm8-6j9v-6v7f/GHSA-gpm8-6j9v-6v7f.json +++ b/advisories/unreviewed/2022/04/GHSA-gpm8-6j9v-6v7f/GHSA-gpm8-6j9v-6v7f.json @@ -7,12 +7,8 @@ "CVE-2002-1578" ], "details": "The default installation of SAP R/3, when using Oracle and SQL*net V2 3.x, 4.x, and 6.10, allows remote attackers to obtain arbitrary, sensitive SAP data by directly connecting to the Oracle database and executing queries against the database, which is not password-protected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gr6m-v99r-wg6v/GHSA-gr6m-v99r-wg6v.json b/advisories/unreviewed/2022/04/GHSA-gr6m-v99r-wg6v/GHSA-gr6m-v99r-wg6v.json index f20867e74a6..fda865cb45f 100644 --- a/advisories/unreviewed/2022/04/GHSA-gr6m-v99r-wg6v/GHSA-gr6m-v99r-wg6v.json +++ b/advisories/unreviewed/2022/04/GHSA-gr6m-v99r-wg6v/GHSA-gr6m-v99r-wg6v.json @@ -7,12 +7,8 @@ "CVE-2002-1395" ], "details": "Internet Message (IM) 141-18 and earlier uses predictable file and directory names, which allows local users to (1) obtain unauthorized directory permissions via a temporary directory used by impwagent, and (2) overwrite and create arbitrary files via immknmz.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gwrv-2q33-6vmr/GHSA-gwrv-2q33-6vmr.json b/advisories/unreviewed/2022/04/GHSA-gwrv-2q33-6vmr/GHSA-gwrv-2q33-6vmr.json index 52b6d1ef82c..2dc13019a27 100644 --- a/advisories/unreviewed/2022/04/GHSA-gwrv-2q33-6vmr/GHSA-gwrv-2q33-6vmr.json +++ b/advisories/unreviewed/2022/04/GHSA-gwrv-2q33-6vmr/GHSA-gwrv-2q33-6vmr.json @@ -7,12 +7,8 @@ "CVE-2002-1629" ], "details": "Multi-Tech ProxyServer products MTPSR1-100, MTPSR1-120, MTPSR1-202ST, MTPSR2-201, and MTPSR3-200 ship with a null password, which allows remote attackers to gain administrative privileges via Telnet or HTTP.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h35x-4m68-cvrj/GHSA-h35x-4m68-cvrj.json b/advisories/unreviewed/2022/04/GHSA-h35x-4m68-cvrj/GHSA-h35x-4m68-cvrj.json index 29a321b34f1..aa5561d658c 100644 --- a/advisories/unreviewed/2022/04/GHSA-h35x-4m68-cvrj/GHSA-h35x-4m68-cvrj.json +++ b/advisories/unreviewed/2022/04/GHSA-h35x-4m68-cvrj/GHSA-h35x-4m68-cvrj.json @@ -7,12 +7,8 @@ "CVE-2002-1409" ], "details": "ptrace on HP-UX 11.00 through 11.11 allows local users to cause a denial of service (data page fault panic) via \"an incorrect reference to thread register state.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h44r-74rh-f8hh/GHSA-h44r-74rh-f8hh.json b/advisories/unreviewed/2022/04/GHSA-h44r-74rh-f8hh/GHSA-h44r-74rh-f8hh.json index a4f10e9b44f..507e62ed3fd 100644 --- a/advisories/unreviewed/2022/04/GHSA-h44r-74rh-f8hh/GHSA-h44r-74rh-f8hh.json +++ b/advisories/unreviewed/2022/04/GHSA-h44r-74rh-f8hh/GHSA-h44r-74rh-f8hh.json @@ -7,12 +7,8 @@ "CVE-2002-1757" ], "details": "PHProjekt 2.0 through 3.1 relies on the $PHP_SELF variable for authentication, which allows remote attackers to bypass authentication for scripts via a request to a .php file with \"sms\" in the URL, which is included in the PATH_INFO portion of the $PHP_SELF variable, as demonstrated using \"mail_send.php/sms\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h4fq-xm38-wf33/GHSA-h4fq-xm38-wf33.json b/advisories/unreviewed/2022/04/GHSA-h4fq-xm38-wf33/GHSA-h4fq-xm38-wf33.json index 77d8e9c499e..1e9cb5313d7 100644 --- a/advisories/unreviewed/2022/04/GHSA-h4fq-xm38-wf33/GHSA-h4fq-xm38-wf33.json +++ b/advisories/unreviewed/2022/04/GHSA-h4fq-xm38-wf33/GHSA-h4fq-xm38-wf33.json @@ -7,12 +7,8 @@ "CVE-2002-1458" ], "details": "Cross-site scripting vulnerability in L-Forum 2.40 and earlier, when the \"Enable HTML in messages\" option is on, allows remote attackers to insert arbitrary script or HTML via message fields including (1) From, (2) E-Mail, (3) Subject and (4) Body.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h56q-pf37-f5g7/GHSA-h56q-pf37-f5g7.json b/advisories/unreviewed/2022/04/GHSA-h56q-pf37-f5g7/GHSA-h56q-pf37-f5g7.json index 7208d165ce4..5019f97a0c0 100644 --- a/advisories/unreviewed/2022/04/GHSA-h56q-pf37-f5g7/GHSA-h56q-pf37-f5g7.json +++ b/advisories/unreviewed/2022/04/GHSA-h56q-pf37-f5g7/GHSA-h56q-pf37-f5g7.json @@ -7,12 +7,8 @@ "CVE-2002-1514" ], "details": "gds_lock_mgr in Borland InterBase allows local users to overwrite files and gain privileges via a symlink attack on a \"isc_init1.X\" temporary file, as demonstrated by modifying the xinetdbd file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h7m9-hhqw-vp2c/GHSA-h7m9-hhqw-vp2c.json b/advisories/unreviewed/2022/04/GHSA-h7m9-hhqw-vp2c/GHSA-h7m9-hhqw-vp2c.json index 2e4d3de32f4..fb1850e2f49 100644 --- a/advisories/unreviewed/2022/04/GHSA-h7m9-hhqw-vp2c/GHSA-h7m9-hhqw-vp2c.json +++ b/advisories/unreviewed/2022/04/GHSA-h7m9-hhqw-vp2c/GHSA-h7m9-hhqw-vp2c.json @@ -7,12 +7,8 @@ "CVE-2002-1940" ], "details": "LCC-Win32 3.2 compiler, when running on Windows 95, 98, or ME, writes portions of previously used memory after the import table, which could allow attackers to gain sensitive information. NOTE: it has been reported that this problem is due to the OS and not the application.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h8j3-gq64-h6q7/GHSA-h8j3-gq64-h6q7.json b/advisories/unreviewed/2022/04/GHSA-h8j3-gq64-h6q7/GHSA-h8j3-gq64-h6q7.json index 638b6ae2173..b9675746772 100644 --- a/advisories/unreviewed/2022/04/GHSA-h8j3-gq64-h6q7/GHSA-h8j3-gq64-h6q7.json +++ b/advisories/unreviewed/2022/04/GHSA-h8j3-gq64-h6q7/GHSA-h8j3-gq64-h6q7.json @@ -7,12 +7,8 @@ "CVE-2002-1535" ], "details": "Secure Webserver 1.1 in Raptor 6.5 and Symantec Enterprise Firewall 6.5.2 allows remote attackers to identify IP addresses of hosts on the internal network via a CONNECT request, which generates different error messages if the host is present.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h9qj-58xf-q7vq/GHSA-h9qj-58xf-q7vq.json b/advisories/unreviewed/2022/04/GHSA-h9qj-58xf-q7vq/GHSA-h9qj-58xf-q7vq.json index 661c6581c7a..170e721785f 100644 --- a/advisories/unreviewed/2022/04/GHSA-h9qj-58xf-q7vq/GHSA-h9qj-58xf-q7vq.json +++ b/advisories/unreviewed/2022/04/GHSA-h9qj-58xf-q7vq/GHSA-h9qj-58xf-q7vq.json @@ -7,12 +7,8 @@ "CVE-2002-1859" ], "details": "Orion Application Server 1.5.3, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot (\"WEB-INF.\").", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h9vf-mxh9-5cxv/GHSA-h9vf-mxh9-5cxv.json b/advisories/unreviewed/2022/04/GHSA-h9vf-mxh9-5cxv/GHSA-h9vf-mxh9-5cxv.json index 6deb58af47d..b4c25a4a920 100644 --- a/advisories/unreviewed/2022/04/GHSA-h9vf-mxh9-5cxv/GHSA-h9vf-mxh9-5cxv.json +++ b/advisories/unreviewed/2022/04/GHSA-h9vf-mxh9-5cxv/GHSA-h9vf-mxh9-5cxv.json @@ -7,12 +7,8 @@ "CVE-2002-1400" ], "details": "Heap-based buffer overflow in the repeat() function for PostgreSQL before 7.2.2 allows attackers to execute arbitrary code by causing repeat() to generate a large string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hf5w-p8q3-x6vf/GHSA-hf5w-p8q3-x6vf.json b/advisories/unreviewed/2022/04/GHSA-hf5w-p8q3-x6vf/GHSA-hf5w-p8q3-x6vf.json index 8a42850204d..786de695ba5 100644 --- a/advisories/unreviewed/2022/04/GHSA-hf5w-p8q3-x6vf/GHSA-hf5w-p8q3-x6vf.json +++ b/advisories/unreviewed/2022/04/GHSA-hf5w-p8q3-x6vf/GHSA-hf5w-p8q3-x6vf.json @@ -7,12 +7,8 @@ "CVE-2002-1445" ], "details": "Cross-site scripting (XSS) vulnerability in CERN Proxy Server allows remote attackers to execute script as other users via a link to a non-existent page whose name contains the script, which is inserted into the resulting error page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hf68-wq7f-gmhq/GHSA-hf68-wq7f-gmhq.json b/advisories/unreviewed/2022/04/GHSA-hf68-wq7f-gmhq/GHSA-hf68-wq7f-gmhq.json index b4a2888db11..6eb61da6d5d 100644 --- a/advisories/unreviewed/2022/04/GHSA-hf68-wq7f-gmhq/GHSA-hf68-wq7f-gmhq.json +++ b/advisories/unreviewed/2022/04/GHSA-hf68-wq7f-gmhq/GHSA-hf68-wq7f-gmhq.json @@ -7,12 +7,8 @@ "CVE-2002-1747" ], "details": "Vtun 2.5b1 does not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on ECB.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hgp2-pwm9-wf73/GHSA-hgp2-pwm9-wf73.json b/advisories/unreviewed/2022/04/GHSA-hgp2-pwm9-wf73/GHSA-hgp2-pwm9-wf73.json index 6662cd6b30e..2c66f602b62 100644 --- a/advisories/unreviewed/2022/04/GHSA-hgp2-pwm9-wf73/GHSA-hgp2-pwm9-wf73.json +++ b/advisories/unreviewed/2022/04/GHSA-hgp2-pwm9-wf73/GHSA-hgp2-pwm9-wf73.json @@ -7,12 +7,8 @@ "CVE-2002-1819" ], "details": "Directory traversal vulnerability in TinyHTTPD 0.1 .0 allows remote attackers to read or execute arbitrary files via a \"..\" (dot dot) in the URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hm6h-57rh-j5fx/GHSA-hm6h-57rh-j5fx.json b/advisories/unreviewed/2022/04/GHSA-hm6h-57rh-j5fx/GHSA-hm6h-57rh-j5fx.json index efee3c7dba9..33b2e70ef55 100644 --- a/advisories/unreviewed/2022/04/GHSA-hm6h-57rh-j5fx/GHSA-hm6h-57rh-j5fx.json +++ b/advisories/unreviewed/2022/04/GHSA-hm6h-57rh-j5fx/GHSA-hm6h-57rh-j5fx.json @@ -7,12 +7,8 @@ "CVE-2002-1527" ], "details": "emumail.cgi in EMU Webmail 5.0 allows remote attackers to determine the full pathname for emumail.cgi via a malformed string containing script, which generates a regular expression matching error that includes the pathname in the resulting error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hmf5-722w-w2h8/GHSA-hmf5-722w-w2h8.json b/advisories/unreviewed/2022/04/GHSA-hmf5-722w-w2h8/GHSA-hmf5-722w-w2h8.json index 10c56fcb1d8..03527db687f 100644 --- a/advisories/unreviewed/2022/04/GHSA-hmf5-722w-w2h8/GHSA-hmf5-722w-w2h8.json +++ b/advisories/unreviewed/2022/04/GHSA-hmf5-722w-w2h8/GHSA-hmf5-722w-w2h8.json @@ -7,12 +7,8 @@ "CVE-2002-1481" ], "details": "savesettings.php in phpGB 1.20 and earlier does not require authentication, which allows remote attackers to cause a denial of service or execute arbitrary PHP code by using savesettings.php to modify config.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hph4-73fg-9q9f/GHSA-hph4-73fg-9q9f.json b/advisories/unreviewed/2022/04/GHSA-hph4-73fg-9q9f/GHSA-hph4-73fg-9q9f.json index b5a9f8f8a68..55d4be53995 100644 --- a/advisories/unreviewed/2022/04/GHSA-hph4-73fg-9q9f/GHSA-hph4-73fg-9q9f.json +++ b/advisories/unreviewed/2022/04/GHSA-hph4-73fg-9q9f/GHSA-hph4-73fg-9q9f.json @@ -7,12 +7,8 @@ "CVE-2002-1847" ], "details": "Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 through 7.1 allows remote attackers to execute arbitrary commands via a long mp3 filename command line argument. NOTE: since the only known attack vector requires command line access, this may not be a vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hrm4-7fcp-grwc/GHSA-hrm4-7fcp-grwc.json b/advisories/unreviewed/2022/04/GHSA-hrm4-7fcp-grwc/GHSA-hrm4-7fcp-grwc.json index de54c77de66..bc85478a9a4 100644 --- a/advisories/unreviewed/2022/04/GHSA-hrm4-7fcp-grwc/GHSA-hrm4-7fcp-grwc.json +++ b/advisories/unreviewed/2022/04/GHSA-hrm4-7fcp-grwc/GHSA-hrm4-7fcp-grwc.json @@ -7,12 +7,8 @@ "CVE-2002-1432" ], "details": "MidiCart stores the midicart.mdb database file under the Web document root, which allows remote attackers to steal sensitive information by directly requesting the database.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-j43c-xqpg-4fxp/GHSA-j43c-xqpg-4fxp.json b/advisories/unreviewed/2022/04/GHSA-j43c-xqpg-4fxp/GHSA-j43c-xqpg-4fxp.json index 9f10d29388d..2930bcadfae 100644 --- a/advisories/unreviewed/2022/04/GHSA-j43c-xqpg-4fxp/GHSA-j43c-xqpg-4fxp.json +++ b/advisories/unreviewed/2022/04/GHSA-j43c-xqpg-4fxp/GHSA-j43c-xqpg-4fxp.json @@ -7,12 +7,8 @@ "CVE-2002-1483" ], "details": "db4web_c and db4web_c.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP request whose argument is a filename of the form (1) C: (drive letter), (2) //absolute/path (double-slash), or (3) .. (dot-dot).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-j4f8-qfhr-gjf7/GHSA-j4f8-qfhr-gjf7.json b/advisories/unreviewed/2022/04/GHSA-j4f8-qfhr-gjf7/GHSA-j4f8-qfhr-gjf7.json index 257ad5622b2..b0cf37659e3 100644 --- a/advisories/unreviewed/2022/04/GHSA-j4f8-qfhr-gjf7/GHSA-j4f8-qfhr-gjf7.json +++ b/advisories/unreviewed/2022/04/GHSA-j4f8-qfhr-gjf7/GHSA-j4f8-qfhr-gjf7.json @@ -7,12 +7,8 @@ "CVE-2002-1935" ], "details": "Pingtel Xpressa 1.2.5 through 2.0.1 uses predictable (1) Call-ID, (2) CSeq, and (3) \"To\" and \"From\" SIP URL values in a Session Identification Protocol (SIP) request, which allows remote attackers to avoid registering with the SIP registrar.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-j4pf-w53q-qqxx/GHSA-j4pf-w53q-qqxx.json b/advisories/unreviewed/2022/04/GHSA-j4pf-w53q-qqxx/GHSA-j4pf-w53q-qqxx.json index 8dd0e1caeb0..1f28bce7d5a 100644 --- a/advisories/unreviewed/2022/04/GHSA-j4pf-w53q-qqxx/GHSA-j4pf-w53q-qqxx.json +++ b/advisories/unreviewed/2022/04/GHSA-j4pf-w53q-qqxx/GHSA-j4pf-w53q-qqxx.json @@ -7,12 +7,8 @@ "CVE-2002-1586" ], "details": "Solaris 2.5.1 through 9 allows local users to cause a denial of service (kernel panic) by setting the sd_struiowrq variable in the struioget function to null, which triggers a null dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-j52j-x5hw-wvjq/GHSA-j52j-x5hw-wvjq.json b/advisories/unreviewed/2022/04/GHSA-j52j-x5hw-wvjq/GHSA-j52j-x5hw-wvjq.json index b5b1af9aa99..dda4f2cd8ae 100644 --- a/advisories/unreviewed/2022/04/GHSA-j52j-x5hw-wvjq/GHSA-j52j-x5hw-wvjq.json +++ b/advisories/unreviewed/2022/04/GHSA-j52j-x5hw-wvjq/GHSA-j52j-x5hw-wvjq.json @@ -7,12 +7,8 @@ "CVE-2002-1486" ], "details": "Multiple buffer overflows in the IRC component of Trillian 0.73 and 0.74 allows remote malicious IRC servers to cause a denial of service and possibly execute arbitrary code via (1) a large response from the server, (2) a JOIN with a long channel name, (3) a long \"raw 221\" message, (4) a PRIVMSG with a long nickname, or (5) a long response from an IDENT server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-j6p7-cw22-m74f/GHSA-j6p7-cw22-m74f.json b/advisories/unreviewed/2022/04/GHSA-j6p7-cw22-m74f/GHSA-j6p7-cw22-m74f.json index a181970920e..9bbb8c94dc3 100644 --- a/advisories/unreviewed/2022/04/GHSA-j6p7-cw22-m74f/GHSA-j6p7-cw22-m74f.json +++ b/advisories/unreviewed/2022/04/GHSA-j6p7-cw22-m74f/GHSA-j6p7-cw22-m74f.json @@ -7,12 +7,8 @@ "CVE-2002-1625" ], "details": "Macromedia Flash Player 6 does not terminate connections when the user leaves the web page, which allows remote attackers to cause a denial of service (bandwidth, resource, and CPU consumption) via the (1) loadMovie or (2) loadSound commands, which continue to execute until the browser is closed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-j7v9-j38h-j943/GHSA-j7v9-j38h-j943.json b/advisories/unreviewed/2022/04/GHSA-j7v9-j38h-j943/GHSA-j7v9-j38h-j943.json index 366296b676c..2a678d4bd24 100644 --- a/advisories/unreviewed/2022/04/GHSA-j7v9-j38h-j943/GHSA-j7v9-j38h-j943.json +++ b/advisories/unreviewed/2022/04/GHSA-j7v9-j38h-j943/GHSA-j7v9-j38h-j943.json @@ -7,12 +7,8 @@ "CVE-2002-1522" ], "details": "Buffer overflow in PowerFTP FTP server 2.24, and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long USER argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-j7w4-w286-7x9h/GHSA-j7w4-w286-7x9h.json b/advisories/unreviewed/2022/04/GHSA-j7w4-w286-7x9h/GHSA-j7w4-w286-7x9h.json index 7d1fb58c2f8..4e81929e705 100644 --- a/advisories/unreviewed/2022/04/GHSA-j7w4-w286-7x9h/GHSA-j7w4-w286-7x9h.json +++ b/advisories/unreviewed/2022/04/GHSA-j7w4-w286-7x9h/GHSA-j7w4-w286-7x9h.json @@ -7,12 +7,8 @@ "CVE-2002-1440" ], "details": "The Gateway GS-400 server has a default root password of \"0001n\" that can not be changed via the administrative interface, which can allow attackers to gain root privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jc98-q59f-rmj3/GHSA-jc98-q59f-rmj3.json b/advisories/unreviewed/2022/04/GHSA-jc98-q59f-rmj3/GHSA-jc98-q59f-rmj3.json index 84557f5f015..0a58b0785a9 100644 --- a/advisories/unreviewed/2022/04/GHSA-jc98-q59f-rmj3/GHSA-jc98-q59f-rmj3.json +++ b/advisories/unreviewed/2022/04/GHSA-jc98-q59f-rmj3/GHSA-jc98-q59f-rmj3.json @@ -7,12 +7,8 @@ "CVE-2002-1735" ], "details": "Buffer overflow in dlogin 1.0a could allow local users to gain privileges via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jg6f-f7v8-2wh4/GHSA-jg6f-f7v8-2wh4.json b/advisories/unreviewed/2022/04/GHSA-jg6f-f7v8-2wh4/GHSA-jg6f-f7v8-2wh4.json index 7f2d8127eca..066e0c07de4 100644 --- a/advisories/unreviewed/2022/04/GHSA-jg6f-f7v8-2wh4/GHSA-jg6f-f7v8-2wh4.json +++ b/advisories/unreviewed/2022/04/GHSA-jg6f-f7v8-2wh4/GHSA-jg6f-f7v8-2wh4.json @@ -7,12 +7,8 @@ "CVE-2002-1644" ], "details": "SSH Secure Shell for Servers and SSH Secure Shell for Workstations 2.0.13 through 3.2.1, when running without a PTY, does not call setsid to remove the child process from the process group of the parent process, which allows attackers to gain certain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jhm6-3h58-crgr/GHSA-jhm6-3h58-crgr.json b/advisories/unreviewed/2022/04/GHSA-jhm6-3h58-crgr/GHSA-jhm6-3h58-crgr.json index 2c0fabeb054..fc2bbd060cb 100644 --- a/advisories/unreviewed/2022/04/GHSA-jhm6-3h58-crgr/GHSA-jhm6-3h58-crgr.json +++ b/advisories/unreviewed/2022/04/GHSA-jhm6-3h58-crgr/GHSA-jhm6-3h58-crgr.json @@ -7,12 +7,8 @@ "CVE-2002-1494" ], "details": "Cross-site scripting (XSS) vulnerabilities in Aestiva HTML/OS allows remote attackers to insert arbitrary HTML or script by inserting the script after a trailing / character, which inserts the script into the resulting error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jmpp-gh5f-rvxp/GHSA-jmpp-gh5f-rvxp.json b/advisories/unreviewed/2022/04/GHSA-jmpp-gh5f-rvxp/GHSA-jmpp-gh5f-rvxp.json index b38c320c252..1a86dddc81d 100644 --- a/advisories/unreviewed/2022/04/GHSA-jmpp-gh5f-rvxp/GHSA-jmpp-gh5f-rvxp.json +++ b/advisories/unreviewed/2022/04/GHSA-jmpp-gh5f-rvxp/GHSA-jmpp-gh5f-rvxp.json @@ -7,12 +7,8 @@ "CVE-2002-1626" ], "details": "Directory traversal vulnerability in Mike Spice My Calendar before 1.5 allows remote attackers to write arbitrary files via .. (dot dot) sequences in a URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jp6h-r2j5-64q6/GHSA-jp6h-r2j5-64q6.json b/advisories/unreviewed/2022/04/GHSA-jp6h-r2j5-64q6/GHSA-jp6h-r2j5-64q6.json index 14444d2361b..14d9656cdaa 100644 --- a/advisories/unreviewed/2022/04/GHSA-jp6h-r2j5-64q6/GHSA-jp6h-r2j5-64q6.json +++ b/advisories/unreviewed/2022/04/GHSA-jp6h-r2j5-64q6/GHSA-jp6h-r2j5-64q6.json @@ -7,12 +7,8 @@ "CVE-2002-1622" ], "details": "Buffer overflow in certain RPC routines in IBM AIX 4.3 may allow attackers to execute arbitrary code, related to a \"variable data type.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jpp8-gpr8-2wc6/GHSA-jpp8-gpr8-2wc6.json b/advisories/unreviewed/2022/04/GHSA-jpp8-gpr8-2wc6/GHSA-jpp8-gpr8-2wc6.json index b89a1fe02d8..a9e8bd5239d 100644 --- a/advisories/unreviewed/2022/04/GHSA-jpp8-gpr8-2wc6/GHSA-jpp8-gpr8-2wc6.json +++ b/advisories/unreviewed/2022/04/GHSA-jpp8-gpr8-2wc6/GHSA-jpp8-gpr8-2wc6.json @@ -7,12 +7,8 @@ "CVE-2002-1380" ], "details": "Linux kernel 2.2.x allows local users to cause a denial of service (crash) by using the mmap() function with a PROT_READ parameter to access non-readable memory pages through the /proc/pid/mem interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jq4q-qcfh-gq3c/GHSA-jq4q-qcfh-gq3c.json b/advisories/unreviewed/2022/04/GHSA-jq4q-qcfh-gq3c/GHSA-jq4q-qcfh-gq3c.json index a248dc57a3a..c1e54533270 100644 --- a/advisories/unreviewed/2022/04/GHSA-jq4q-qcfh-gq3c/GHSA-jq4q-qcfh-gq3c.json +++ b/advisories/unreviewed/2022/04/GHSA-jq4q-qcfh-gq3c/GHSA-jq4q-qcfh-gq3c.json @@ -7,12 +7,8 @@ "CVE-2002-1849" ], "details": "ParaChat Server 4.0 does not log users off if the browser's back button is used, which allows remote attackers to cause a denial of service by repeatedly logging into a chat room, hitting the back button, then logging into the same chat room as a different user, which fills the chat room with invalid users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jr3g-pvj5-w52r/GHSA-jr3g-pvj5-w52r.json b/advisories/unreviewed/2022/04/GHSA-jr3g-pvj5-w52r/GHSA-jr3g-pvj5-w52r.json index 01fa4288530..b8044386c5c 100644 --- a/advisories/unreviewed/2022/04/GHSA-jr3g-pvj5-w52r/GHSA-jr3g-pvj5-w52r.json +++ b/advisories/unreviewed/2022/04/GHSA-jr3g-pvj5-w52r/GHSA-jr3g-pvj5-w52r.json @@ -7,12 +7,8 @@ "CVE-2002-1408" ], "details": "Unknown vulnerability or vulnerabilities in HP OpenView EMANATE 14.2 snmpModules allow the SNMP read-write community name to be exposed, related to (1) \"'read-only' community access,\" and/or (2) an easily guessable community name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jr6h-p784-5rch/GHSA-jr6h-p784-5rch.json b/advisories/unreviewed/2022/04/GHSA-jr6h-p784-5rch/GHSA-jr6h-p784-5rch.json index 2cdba494cd3..05f8aea7c3d 100644 --- a/advisories/unreviewed/2022/04/GHSA-jr6h-p784-5rch/GHSA-jr6h-p784-5rch.json +++ b/advisories/unreviewed/2022/04/GHSA-jr6h-p784-5rch/GHSA-jr6h-p784-5rch.json @@ -7,12 +7,8 @@ "CVE-2002-1933" ], "details": "The terminal services screensaver for Microsoft Windows 2000 does not automatically lock the terminal window if the window is minimized, which could allow local users to gain access to the terminal server window.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jrfw-cw22-5m95/GHSA-jrfw-cw22-5m95.json b/advisories/unreviewed/2022/04/GHSA-jrfw-cw22-5m95/GHSA-jrfw-cw22-5m95.json index 1070d12e53e..2fd7f30363a 100644 --- a/advisories/unreviewed/2022/04/GHSA-jrfw-cw22-5m95/GHSA-jrfw-cw22-5m95.json +++ b/advisories/unreviewed/2022/04/GHSA-jrfw-cw22-5m95/GHSA-jrfw-cw22-5m95.json @@ -7,12 +7,8 @@ "CVE-2002-1497" ], "details": "Cross-site scripting (XSS) vulnerability in Null HTTP Server 0.5.0 and earlier allows remote attackers to insert arbitrary HTML into a \"404 Not Found\" response.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jrx5-x53p-7cg9/GHSA-jrx5-x53p-7cg9.json b/advisories/unreviewed/2022/04/GHSA-jrx5-x53p-7cg9/GHSA-jrx5-x53p-7cg9.json index ac53dc05af7..72b18febaff 100644 --- a/advisories/unreviewed/2022/04/GHSA-jrx5-x53p-7cg9/GHSA-jrx5-x53p-7cg9.json +++ b/advisories/unreviewed/2022/04/GHSA-jrx5-x53p-7cg9/GHSA-jrx5-x53p-7cg9.json @@ -7,12 +7,8 @@ "CVE-2002-1465" ], "details": "SQL injection vulnerability in CafeLog b2 Weblog Tool allows remote attackers to execute arbitrary SQL code via the tablehosts variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jvjp-368w-x44h/GHSA-jvjp-368w-x44h.json b/advisories/unreviewed/2022/04/GHSA-jvjp-368w-x44h/GHSA-jvjp-368w-x44h.json index 8ff8f730c72..a674db45ef0 100644 --- a/advisories/unreviewed/2022/04/GHSA-jvjp-368w-x44h/GHSA-jvjp-368w-x44h.json +++ b/advisories/unreviewed/2022/04/GHSA-jvjp-368w-x44h/GHSA-jvjp-368w-x44h.json @@ -7,12 +7,8 @@ "CVE-2002-1817" ], "details": "Unknown vulnerability in Veritas Cluster Server (VCS) 1.2 for WindowsNT, Cluster Server 1.3.0 for Solaris, and Cluster Server 1.3.1 for HP-UX allows attackers to gain privileges via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jwfr-5jh5-4xg5/GHSA-jwfr-5jh5-4xg5.json b/advisories/unreviewed/2022/04/GHSA-jwfr-5jh5-4xg5/GHSA-jwfr-5jh5-4xg5.json index 15879033149..310b47aa9bd 100644 --- a/advisories/unreviewed/2022/04/GHSA-jwfr-5jh5-4xg5/GHSA-jwfr-5jh5-4xg5.json +++ b/advisories/unreviewed/2022/04/GHSA-jwfr-5jh5-4xg5/GHSA-jwfr-5jh5-4xg5.json @@ -7,12 +7,8 @@ "CVE-2002-1655" ], "details": "The Web Publishing feature in Netscape Enterprise Server 3.x and iPlanet Web Server 4.x allows remote attackers to cause a denial of service (crash) via a wp-html-rend request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m22h-f8jw-65vm/GHSA-m22h-f8jw-65vm.json b/advisories/unreviewed/2022/04/GHSA-m22h-f8jw-65vm/GHSA-m22h-f8jw-65vm.json index 8dec8062802..4969c9a164c 100644 --- a/advisories/unreviewed/2022/04/GHSA-m22h-f8jw-65vm/GHSA-m22h-f8jw-65vm.json +++ b/advisories/unreviewed/2022/04/GHSA-m22h-f8jw-65vm/GHSA-m22h-f8jw-65vm.json @@ -7,12 +7,8 @@ "CVE-2002-1512" ], "details": "xbru in BRU Workstation 17.0 allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the xbru_dscheck.dd temporary file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m2g5-h4j8-wxpx/GHSA-m2g5-h4j8-wxpx.json b/advisories/unreviewed/2022/04/GHSA-m2g5-h4j8-wxpx/GHSA-m2g5-h4j8-wxpx.json index bc6ee882ed7..8e354096459 100644 --- a/advisories/unreviewed/2022/04/GHSA-m2g5-h4j8-wxpx/GHSA-m2g5-h4j8-wxpx.json +++ b/advisories/unreviewed/2022/04/GHSA-m2g5-h4j8-wxpx/GHSA-m2g5-h4j8-wxpx.json @@ -7,12 +7,8 @@ "CVE-2002-1929" ], "details": "Cross-site scripting (XSS) vulnerability in pafiledb.php in PHP Arena paFileDB 1.1.3 through 3.0 allows remote attackers to inject arbitrary web script or HTML via the query string in the (1) rate, (2) email, or (3) download actions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m2rq-3g4p-6p5j/GHSA-m2rq-3g4p-6p5j.json b/advisories/unreviewed/2022/04/GHSA-m2rq-3g4p-6p5j/GHSA-m2rq-3g4p-6p5j.json index 23afeeec482..d4f45dd1a45 100644 --- a/advisories/unreviewed/2022/04/GHSA-m2rq-3g4p-6p5j/GHSA-m2rq-3g4p-6p5j.json +++ b/advisories/unreviewed/2022/04/GHSA-m2rq-3g4p-6p5j/GHSA-m2rq-3g4p-6p5j.json @@ -7,12 +7,8 @@ "CVE-2002-1551" ], "details": "Buffer overflow in nslookup in IBM AIX may allow attackers to cause a denial of service or execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m364-23xr-pwxr/GHSA-m364-23xr-pwxr.json b/advisories/unreviewed/2022/04/GHSA-m364-23xr-pwxr/GHSA-m364-23xr-pwxr.json index 8791c8a61c6..4b666a975db 100644 --- a/advisories/unreviewed/2022/04/GHSA-m364-23xr-pwxr/GHSA-m364-23xr-pwxr.json +++ b/advisories/unreviewed/2022/04/GHSA-m364-23xr-pwxr/GHSA-m364-23xr-pwxr.json @@ -7,12 +7,8 @@ "CVE-2002-1612" ], "details": "Buffer overflow in mailcv in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m3xj-86rx-cfpw/GHSA-m3xj-86rx-cfpw.json b/advisories/unreviewed/2022/04/GHSA-m3xj-86rx-cfpw/GHSA-m3xj-86rx-cfpw.json index eb6e25a2c4f..8a3a9ca9621 100644 --- a/advisories/unreviewed/2022/04/GHSA-m3xj-86rx-cfpw/GHSA-m3xj-86rx-cfpw.json +++ b/advisories/unreviewed/2022/04/GHSA-m3xj-86rx-cfpw/GHSA-m3xj-86rx-cfpw.json @@ -7,12 +7,8 @@ "CVE-2002-1662" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Mambo Site Server 4.0.11 allow remote attackers to execute arbitrary script on other clients via (1) search.php and (2) the \"Your name\" field during account registration.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m54v-h5r2-5m3r/GHSA-m54v-h5r2-5m3r.json b/advisories/unreviewed/2022/04/GHSA-m54v-h5r2-5m3r/GHSA-m54v-h5r2-5m3r.json index 56701932eae..0d9ac11e268 100644 --- a/advisories/unreviewed/2022/04/GHSA-m54v-h5r2-5m3r/GHSA-m54v-h5r2-5m3r.json +++ b/advisories/unreviewed/2022/04/GHSA-m54v-h5r2-5m3r/GHSA-m54v-h5r2-5m3r.json @@ -7,12 +7,8 @@ "CVE-2002-1631" ], "details": "SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote attackers to execute arbitrary code via the sql parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m5w5-3qrh-4g39/GHSA-m5w5-3qrh-4g39.json b/advisories/unreviewed/2022/04/GHSA-m5w5-3qrh-4g39/GHSA-m5w5-3qrh-4g39.json index bce8f6ff552..9462f006316 100644 --- a/advisories/unreviewed/2022/04/GHSA-m5w5-3qrh-4g39/GHSA-m5w5-3qrh-4g39.json +++ b/advisories/unreviewed/2022/04/GHSA-m5w5-3qrh-4g39/GHSA-m5w5-3qrh-4g39.json @@ -7,12 +7,8 @@ "CVE-2002-1628" ], "details": "Directory traversal vulnerability in vote.cgi for Mike Spice Mike's Vote CGI before 1.3 allows remote attackers to write arbitrary files via .. (dot dot) sequences in the type parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m5x5-x628-4373/GHSA-m5x5-x628-4373.json b/advisories/unreviewed/2022/04/GHSA-m5x5-x628-4373/GHSA-m5x5-x628-4373.json index eb750231a8b..87b27cd700e 100644 --- a/advisories/unreviewed/2022/04/GHSA-m5x5-x628-4373/GHSA-m5x5-x628-4373.json +++ b/advisories/unreviewed/2022/04/GHSA-m5x5-x628-4373/GHSA-m5x5-x628-4373.json @@ -7,12 +7,8 @@ "CVE-2002-1608" ], "details": "Buffer overflow in traceroute in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m75v-8wm5-29r8/GHSA-m75v-8wm5-29r8.json b/advisories/unreviewed/2022/04/GHSA-m75v-8wm5-29r8/GHSA-m75v-8wm5-29r8.json index 45558026904..d19ac692515 100644 --- a/advisories/unreviewed/2022/04/GHSA-m75v-8wm5-29r8/GHSA-m75v-8wm5-29r8.json +++ b/advisories/unreviewed/2022/04/GHSA-m75v-8wm5-29r8/GHSA-m75v-8wm5-29r8.json @@ -7,12 +7,8 @@ "CVE-2002-1864" ], "details": "Directory traversal vulnerability in Simple Web Server (SWS) 0.0.4 through 0.1.0 allows remote attackers to read arbitrary files via a \"..\" (dot dot) in an HTTP request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m7g4-2c2j-66xp/GHSA-m7g4-2c2j-66xp.json b/advisories/unreviewed/2022/04/GHSA-m7g4-2c2j-66xp/GHSA-m7g4-2c2j-66xp.json index 537dbba0897..9c908773778 100644 --- a/advisories/unreviewed/2022/04/GHSA-m7g4-2c2j-66xp/GHSA-m7g4-2c2j-66xp.json +++ b/advisories/unreviewed/2022/04/GHSA-m7g4-2c2j-66xp/GHSA-m7g4-2c2j-66xp.json @@ -7,12 +7,8 @@ "CVE-2002-1549" ], "details": "Buffer overflow in Light HTTPd (lhttpd) 0.1 allows remote attackers to execute arbitrary code via a long HTTP GET request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m99v-4cr6-6vfj/GHSA-m99v-4cr6-6vfj.json b/advisories/unreviewed/2022/04/GHSA-m99v-4cr6-6vfj/GHSA-m99v-4cr6-6vfj.json index 93347f369c1..1fb45c1e334 100644 --- a/advisories/unreviewed/2022/04/GHSA-m99v-4cr6-6vfj/GHSA-m99v-4cr6-6vfj.json +++ b/advisories/unreviewed/2022/04/GHSA-m99v-4cr6-6vfj/GHSA-m99v-4cr6-6vfj.json @@ -7,12 +7,8 @@ "CVE-2002-1749" ], "details": "Windows 2000 Terminal Services, when using the disconnect feature of the client, does not properly lock itself if it is left idle until the screen saver activates and the user disconnects, which could allow attackers to gain administrator privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mc53-w4vc-fwf4/GHSA-mc53-w4vc-fwf4.json b/advisories/unreviewed/2022/04/GHSA-mc53-w4vc-fwf4/GHSA-mc53-w4vc-fwf4.json index c27b067f469..c57283314cc 100644 --- a/advisories/unreviewed/2022/04/GHSA-mc53-w4vc-fwf4/GHSA-mc53-w4vc-fwf4.json +++ b/advisories/unreviewed/2022/04/GHSA-mc53-w4vc-fwf4/GHSA-mc53-w4vc-fwf4.json @@ -7,12 +7,8 @@ "CVE-2002-1830" ], "details": "Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to bypass authentication and access modifier options via a direct request to moderator.php with the action and ismod parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mc79-6crr-x58m/GHSA-mc79-6crr-x58m.json b/advisories/unreviewed/2022/04/GHSA-mc79-6crr-x58m/GHSA-mc79-6crr-x58m.json index 41b7c8d3063..94db50dda7f 100644 --- a/advisories/unreviewed/2022/04/GHSA-mc79-6crr-x58m/GHSA-mc79-6crr-x58m.json +++ b/advisories/unreviewed/2022/04/GHSA-mc79-6crr-x58m/GHSA-mc79-6crr-x58m.json @@ -7,12 +7,8 @@ "CVE-2002-1748" ], "details": "Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to gain access to arbitrary accounts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mcp4-8wrr-m2qf/GHSA-mcp4-8wrr-m2qf.json b/advisories/unreviewed/2022/04/GHSA-mcp4-8wrr-m2qf/GHSA-mcp4-8wrr-m2qf.json index 25810e8a2ee..0ebe2fcc72c 100644 --- a/advisories/unreviewed/2022/04/GHSA-mcp4-8wrr-m2qf/GHSA-mcp4-8wrr-m2qf.json +++ b/advisories/unreviewed/2022/04/GHSA-mcp4-8wrr-m2qf/GHSA-mcp4-8wrr-m2qf.json @@ -7,12 +7,8 @@ "CVE-2002-1684" ], "details": "Directory traversal vulnerability in (1) Deerfield D2Gfx 1.0.2 or (2) BadBlue Enterprise Edition 1.5.x and BadBlue Personal Edition 1.5.6 allows remote attackers to read arbitrary files via a ../ (dot dot slash) in the script used to read Microsoft Office documents.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mfmc-mp57-7mm7/GHSA-mfmc-mp57-7mm7.json b/advisories/unreviewed/2022/04/GHSA-mfmc-mp57-7mm7/GHSA-mfmc-mp57-7mm7.json index d54185a6c49..2293cf1b44d 100644 --- a/advisories/unreviewed/2022/04/GHSA-mfmc-mp57-7mm7/GHSA-mfmc-mp57-7mm7.json +++ b/advisories/unreviewed/2022/04/GHSA-mfmc-mp57-7mm7/GHSA-mfmc-mp57-7mm7.json @@ -7,12 +7,8 @@ "CVE-2002-1510" ], "details": "xdm, with the authComplain variable set to false, allows arbitrary attackers to connect to the X server if the xdm auth directory does not exist.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mj9h-6cpw-pvw5/GHSA-mj9h-6cpw-pvw5.json b/advisories/unreviewed/2022/04/GHSA-mj9h-6cpw-pvw5/GHSA-mj9h-6cpw-pvw5.json index 6edaa2f1b09..378ad63b6b2 100644 --- a/advisories/unreviewed/2022/04/GHSA-mj9h-6cpw-pvw5/GHSA-mj9h-6cpw-pvw5.json +++ b/advisories/unreviewed/2022/04/GHSA-mj9h-6cpw-pvw5/GHSA-mj9h-6cpw-pvw5.json @@ -7,12 +7,8 @@ "CVE-2002-1740" ], "details": "Buffer overflow in WorldClient.cgi in WorldClient in Alt-N Technologies MDaemon 5.0.5.0 and earlier allows local users to execute arbitrary code via a long folder name (NewFolder parameter).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mm5g-273g-mjm7/GHSA-mm5g-273g-mjm7.json b/advisories/unreviewed/2022/04/GHSA-mm5g-273g-mjm7/GHSA-mm5g-273g-mjm7.json index d59025373ae..b8de9c87722 100644 --- a/advisories/unreviewed/2022/04/GHSA-mm5g-273g-mjm7/GHSA-mm5g-273g-mjm7.json +++ b/advisories/unreviewed/2022/04/GHSA-mm5g-273g-mjm7/GHSA-mm5g-273g-mjm7.json @@ -7,12 +7,8 @@ "CVE-2002-1675" ], "details": "Format string vulnerability in the Cio_PrintF function of cio_main.c in Unreal IRCd 3.1.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mqr3-hx46-j2rf/GHSA-mqr3-hx46-j2rf.json b/advisories/unreviewed/2022/04/GHSA-mqr3-hx46-j2rf/GHSA-mqr3-hx46-j2rf.json index 340b592b130..12dab3442fe 100644 --- a/advisories/unreviewed/2022/04/GHSA-mqr3-hx46-j2rf/GHSA-mqr3-hx46-j2rf.json +++ b/advisories/unreviewed/2022/04/GHSA-mqr3-hx46-j2rf/GHSA-mqr3-hx46-j2rf.json @@ -7,12 +7,8 @@ "CVE-2002-1639" ], "details": "Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to obtain sensitive information via a request to the oracle.apps.cz.servlet.UiServlet servlet with the test parameter set to \"version\" or \"host\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mrc9-g9w2-j5g5/GHSA-mrc9-g9w2-j5g5.json b/advisories/unreviewed/2022/04/GHSA-mrc9-g9w2-j5g5/GHSA-mrc9-g9w2-j5g5.json index 7f784b53774..ad272498dc4 100644 --- a/advisories/unreviewed/2022/04/GHSA-mrc9-g9w2-j5g5/GHSA-mrc9-g9w2-j5g5.json +++ b/advisories/unreviewed/2022/04/GHSA-mrc9-g9w2-j5g5/GHSA-mrc9-g9w2-j5g5.json @@ -7,12 +7,8 @@ "CVE-2002-1782" ], "details": "The default configuration of University of Washington IMAP daemon (wu-imapd), when running on a system that does not allow shell access, allows a local user with a valid IMAP account to read arbitrary files as that user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mrgr-42xx-2qfx/GHSA-mrgr-42xx-2qfx.json b/advisories/unreviewed/2022/04/GHSA-mrgr-42xx-2qfx/GHSA-mrgr-42xx-2qfx.json index 97e287624f1..4faf0628db1 100644 --- a/advisories/unreviewed/2022/04/GHSA-mrgr-42xx-2qfx/GHSA-mrgr-42xx-2qfx.json +++ b/advisories/unreviewed/2022/04/GHSA-mrgr-42xx-2qfx/GHSA-mrgr-42xx-2qfx.json @@ -7,12 +7,8 @@ "CVE-2002-1457" ], "details": "SQL injection vulnerability in search.php for L-Forum 2.40 allows remote attackers to execute arbitrary SQL statements via the search parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mrj9-4xc2-j5rr/GHSA-mrj9-4xc2-j5rr.json b/advisories/unreviewed/2022/04/GHSA-mrj9-4xc2-j5rr/GHSA-mrj9-4xc2-j5rr.json index c38575f657a..b2e0ffe0304 100644 --- a/advisories/unreviewed/2022/04/GHSA-mrj9-4xc2-j5rr/GHSA-mrj9-4xc2-j5rr.json +++ b/advisories/unreviewed/2022/04/GHSA-mrj9-4xc2-j5rr/GHSA-mrj9-4xc2-j5rr.json @@ -7,12 +7,8 @@ "CVE-2002-1574" ], "details": "Buffer overflow in the ixj telephony card driver in Linux before 2.4.20 has unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mvf9-9gwf-4mp8/GHSA-mvf9-9gwf-4mp8.json b/advisories/unreviewed/2022/04/GHSA-mvf9-9gwf-4mp8/GHSA-mvf9-9gwf-4mp8.json index 95674b67741..39220b50f25 100644 --- a/advisories/unreviewed/2022/04/GHSA-mvf9-9gwf-4mp8/GHSA-mvf9-9gwf-4mp8.json +++ b/advisories/unreviewed/2022/04/GHSA-mvf9-9gwf-4mp8/GHSA-mvf9-9gwf-4mp8.json @@ -7,12 +7,8 @@ "CVE-2002-1743" ], "details": "AOL ICQ 2002a Build 3722 allows remote attackers to cause a denial of service (crash) via a malformed .hpf file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p27r-59wx-jchm/GHSA-p27r-59wx-jchm.json b/advisories/unreviewed/2022/04/GHSA-p27r-59wx-jchm/GHSA-p27r-59wx-jchm.json index 58f9b67ecef..021dca97c9b 100644 --- a/advisories/unreviewed/2022/04/GHSA-p27r-59wx-jchm/GHSA-p27r-59wx-jchm.json +++ b/advisories/unreviewed/2022/04/GHSA-p27r-59wx-jchm/GHSA-p27r-59wx-jchm.json @@ -7,12 +7,8 @@ "CVE-2002-1660" ], "details": "calendar.php in vBulletin before 2.2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the command parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-p2w3-5f32-h6p6/GHSA-p2w3-5f32-h6p6.json b/advisories/unreviewed/2022/04/GHSA-p2w3-5f32-h6p6/GHSA-p2w3-5f32-h6p6.json index 6ce808fb6d7..ea0a9339f40 100644 --- a/advisories/unreviewed/2022/04/GHSA-p2w3-5f32-h6p6/GHSA-p2w3-5f32-h6p6.json +++ b/advisories/unreviewed/2022/04/GHSA-p2w3-5f32-h6p6/GHSA-p2w3-5f32-h6p6.json @@ -7,12 +7,8 @@ "CVE-2002-1616" ], "details": "Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain root privileges via (1) su, (2) chsh, (3) passwd, (4) chfn, (5) dxchpwd, and (6) libc.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -80,9 +76,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p5px-mhvg-p26g/GHSA-p5px-mhvg-p26g.json b/advisories/unreviewed/2022/04/GHSA-p5px-mhvg-p26g/GHSA-p5px-mhvg-p26g.json index 07f884152af..26a49d97532 100644 --- a/advisories/unreviewed/2022/04/GHSA-p5px-mhvg-p26g/GHSA-p5px-mhvg-p26g.json +++ b/advisories/unreviewed/2022/04/GHSA-p5px-mhvg-p26g/GHSA-p5px-mhvg-p26g.json @@ -7,12 +7,8 @@ "CVE-2002-1688" ], "details": "The browser history feature in Microsoft Internet Explorer 5.5 through 6.0 allows remote attackers to execute arbitrary script as other users and steal authentication information via cookies by injecting JavaScript into the URL, which is executed when the user hits the Back button.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p5qv-9mw7-6h8h/GHSA-p5qv-9mw7-6h8h.json b/advisories/unreviewed/2022/04/GHSA-p5qv-9mw7-6h8h/GHSA-p5qv-9mw7-6h8h.json index dfa7318e9d1..8217b87a2eb 100644 --- a/advisories/unreviewed/2022/04/GHSA-p5qv-9mw7-6h8h/GHSA-p5qv-9mw7-6h8h.json +++ b/advisories/unreviewed/2022/04/GHSA-p5qv-9mw7-6h8h/GHSA-p5qv-9mw7-6h8h.json @@ -7,12 +7,8 @@ "CVE-2002-1460" ], "details": "L-Forum 2.40 and earlier does not properly verify whether a file was uploaded or if the associated variables were set by POST (attachment, attachment_name, attachment_size and attachment_type), which allows remote attackers to read arbitrary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p5xx-34m7-j6c4/GHSA-p5xx-34m7-j6c4.json b/advisories/unreviewed/2022/04/GHSA-p5xx-34m7-j6c4/GHSA-p5xx-34m7-j6c4.json index c7d0d2a7fcb..2b73af4da20 100644 --- a/advisories/unreviewed/2022/04/GHSA-p5xx-34m7-j6c4/GHSA-p5xx-34m7-j6c4.json +++ b/advisories/unreviewed/2022/04/GHSA-p5xx-34m7-j6c4/GHSA-p5xx-34m7-j6c4.json @@ -7,12 +7,8 @@ "CVE-2002-1825" ], "details": "Format string vulnerability in PerlRTE_example1.pl in WASD 7.1, 7.2.0 through 7.2.3, and 8.0.0 allows remote attackers to execute arbitrary commands or crash the server via format strings in the $name variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p6v9-h67h-wpqc/GHSA-p6v9-h67h-wpqc.json b/advisories/unreviewed/2022/04/GHSA-p6v9-h67h-wpqc/GHSA-p6v9-h67h-wpqc.json index 42fed11c99c..cab4525ca5a 100644 --- a/advisories/unreviewed/2022/04/GHSA-p6v9-h67h-wpqc/GHSA-p6v9-h67h-wpqc.json +++ b/advisories/unreviewed/2022/04/GHSA-p6v9-h67h-wpqc/GHSA-p6v9-h67h-wpqc.json @@ -7,12 +7,8 @@ "CVE-2002-1428" ], "details": "index.php in dotProject 0.2.1.5 allows remote attackers to bypass authentication via a cookie or URL with the user_cookie parameter set to 1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p6w3-8q63-8668/GHSA-p6w3-8q63-8668.json b/advisories/unreviewed/2022/04/GHSA-p6w3-8q63-8668/GHSA-p6w3-8q63-8668.json index 944c807a3d0..4211ce55621 100644 --- a/advisories/unreviewed/2022/04/GHSA-p6w3-8q63-8668/GHSA-p6w3-8q63-8668.json +++ b/advisories/unreviewed/2022/04/GHSA-p6w3-8q63-8668/GHSA-p6w3-8q63-8668.json @@ -7,12 +7,8 @@ "CVE-2002-1495" ], "details": "Cross-site scripting (XSS) vulnerability in JAWmail 1.0-rc1 allows remote attackers to insert arbitrary script or HTML via (1) attached file names in the Read Mail feature, (2) text/html mails that are displayed in a pop-up window, and (3) certain malicious attributes within otherwise safe tags, such as onMouseOver.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p6wh-j563-f69f/GHSA-p6wh-j563-f69f.json b/advisories/unreviewed/2022/04/GHSA-p6wh-j563-f69f/GHSA-p6wh-j563-f69f.json index 0885fd0d23a..d94b244a58e 100644 --- a/advisories/unreviewed/2022/04/GHSA-p6wh-j563-f69f/GHSA-p6wh-j563-f69f.json +++ b/advisories/unreviewed/2022/04/GHSA-p6wh-j563-f69f/GHSA-p6wh-j563-f69f.json @@ -7,12 +7,8 @@ "CVE-2002-1469" ], "details": "scponly does not properly verify the path when finding the (1) scp or (2) sftp-server programs, which could allow remote authenticated users to bypass access controls by uploading malicious programs and modifying the PATH variable in $HOME/.ssh/environment to locate those programs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p7q9-fxrq-784p/GHSA-p7q9-fxrq-784p.json b/advisories/unreviewed/2022/04/GHSA-p7q9-fxrq-784p/GHSA-p7q9-fxrq-784p.json index b3006ee4f7e..0f69e4bddfa 100644 --- a/advisories/unreviewed/2022/04/GHSA-p7q9-fxrq-784p/GHSA-p7q9-fxrq-784p.json +++ b/advisories/unreviewed/2022/04/GHSA-p7q9-fxrq-784p/GHSA-p7q9-fxrq-784p.json @@ -7,12 +7,8 @@ "CVE-2002-1835" ], "details": "The default configuration of Xerox DocuTech 6110 and DocuTech 6115 running Solaris 8.0 has a large number of unnecessary services enabled such as RPC and sprayd, which could allow remote attackers to obtain access to the device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p8h7-r4qf-mgv5/GHSA-p8h7-r4qf-mgv5.json b/advisories/unreviewed/2022/04/GHSA-p8h7-r4qf-mgv5/GHSA-p8h7-r4qf-mgv5.json index 52c75f41e2c..f27458ef25e 100644 --- a/advisories/unreviewed/2022/04/GHSA-p8h7-r4qf-mgv5/GHSA-p8h7-r4qf-mgv5.json +++ b/advisories/unreviewed/2022/04/GHSA-p8h7-r4qf-mgv5/GHSA-p8h7-r4qf-mgv5.json @@ -7,12 +7,8 @@ "CVE-2002-1426" ], "details": "HP ProCurve Switch 4000M C.07.23 allows remote attackers to cause a denial of service (crash) via an SNMP write request containing 85 characters, possibly triggering a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p8wf-qv3j-jxc7/GHSA-p8wf-qv3j-jxc7.json b/advisories/unreviewed/2022/04/GHSA-p8wf-qv3j-jxc7/GHSA-p8wf-qv3j-jxc7.json index 826f7b20d4c..ae3e52770c6 100644 --- a/advisories/unreviewed/2022/04/GHSA-p8wf-qv3j-jxc7/GHSA-p8wf-qv3j-jxc7.json +++ b/advisories/unreviewed/2022/04/GHSA-p8wf-qv3j-jxc7/GHSA-p8wf-qv3j-jxc7.json @@ -7,12 +7,8 @@ "CVE-2002-1785" ], "details": "Cross-site scripting (XSS) vulnerability in Zeus Administration Server in Zeus Web Server 4.0 through 4.1r2 allows remote authenticated users to inject arbitrary web script or HTML via the section parameter to index.fcgi.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p948-6cw6-xp9q/GHSA-p948-6cw6-xp9q.json b/advisories/unreviewed/2022/04/GHSA-p948-6cw6-xp9q/GHSA-p948-6cw6-xp9q.json index 50345883b1d..67976260356 100644 --- a/advisories/unreviewed/2022/04/GHSA-p948-6cw6-xp9q/GHSA-p948-6cw6-xp9q.json +++ b/advisories/unreviewed/2022/04/GHSA-p948-6cw6-xp9q/GHSA-p948-6cw6-xp9q.json @@ -7,12 +7,8 @@ "CVE-2002-1559" ], "details": "Directory traversal vulnerability in ion-p.exe (aka ion-p) allows remote attackers to read arbitrary files via (1) C: (drive letter) or (2) .. (dot-dot) sequences in the page parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pfh4-23j7-m7vx/GHSA-pfh4-23j7-m7vx.json b/advisories/unreviewed/2022/04/GHSA-pfh4-23j7-m7vx/GHSA-pfh4-23j7-m7vx.json index 74ec112c607..8d232f8736a 100644 --- a/advisories/unreviewed/2022/04/GHSA-pfh4-23j7-m7vx/GHSA-pfh4-23j7-m7vx.json +++ b/advisories/unreviewed/2022/04/GHSA-pfh4-23j7-m7vx/GHSA-pfh4-23j7-m7vx.json @@ -7,12 +7,8 @@ "CVE-2002-1811" ], "details": "Belkin F5D6130 Wireless Network Access Point running firmware AP14G8 allows remote attackers to cause a denial of service (connection loss) by sending several SNMP GetNextRequest requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pgf4-g67j-c3jw/GHSA-pgf4-g67j-c3jw.json b/advisories/unreviewed/2022/04/GHSA-pgf4-g67j-c3jw/GHSA-pgf4-g67j-c3jw.json index df5ce36435e..7d4c8a749fb 100644 --- a/advisories/unreviewed/2022/04/GHSA-pgf4-g67j-c3jw/GHSA-pgf4-g67j-c3jw.json +++ b/advisories/unreviewed/2022/04/GHSA-pgf4-g67j-c3jw/GHSA-pgf4-g67j-c3jw.json @@ -7,12 +7,8 @@ "CVE-2002-1437" ], "details": "Directory traversal vulnerability in the web handler for Perl 5.003 on Novell NetWare 5.1 and NetWare 6 allows remote attackers to read arbitrary files via an HTTP request containing \"..%5c\" (URL-encoded dot-dot backslash) sequences.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pgj6-rx26-xq27/GHSA-pgj6-rx26-xq27.json b/advisories/unreviewed/2022/04/GHSA-pgj6-rx26-xq27/GHSA-pgj6-rx26-xq27.json index 81bd6108326..5a894727a7a 100644 --- a/advisories/unreviewed/2022/04/GHSA-pgj6-rx26-xq27/GHSA-pgj6-rx26-xq27.json +++ b/advisories/unreviewed/2022/04/GHSA-pgj6-rx26-xq27/GHSA-pgj6-rx26-xq27.json @@ -7,12 +7,8 @@ "CVE-2002-1645" ], "details": "Buffer overflow in the URL catcher feature for SSH Secure Shell for Workstations client 3.1 to 3.2.0 allows remote attackers to execute arbitrary code via a long URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-ph64-7g39-3mrm/GHSA-ph64-7g39-3mrm.json b/advisories/unreviewed/2022/04/GHSA-ph64-7g39-3mrm/GHSA-ph64-7g39-3mrm.json index 56f5ef0cf57..d70dc09d176 100644 --- a/advisories/unreviewed/2022/04/GHSA-ph64-7g39-3mrm/GHSA-ph64-7g39-3mrm.json +++ b/advisories/unreviewed/2022/04/GHSA-ph64-7g39-3mrm/GHSA-ph64-7g39-3mrm.json @@ -7,12 +7,8 @@ "CVE-2002-1609" ], "details": "Buffer overflow in binmail in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pj53-rmv6-jh9j/GHSA-pj53-rmv6-jh9j.json b/advisories/unreviewed/2022/04/GHSA-pj53-rmv6-jh9j/GHSA-pj53-rmv6-jh9j.json index e04e30e9cce..d8d05d62878 100644 --- a/advisories/unreviewed/2022/04/GHSA-pj53-rmv6-jh9j/GHSA-pj53-rmv6-jh9j.json +++ b/advisories/unreviewed/2022/04/GHSA-pj53-rmv6-jh9j/GHSA-pj53-rmv6-jh9j.json @@ -7,12 +7,8 @@ "CVE-2002-1464" ], "details": "Cross-site scripting (XSS) vulnerability in CafeLog b2 Weblog Tool allows remote attackers to insert arbitrary HTML or script via the GPC variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pjrq-367x-hmqj/GHSA-pjrq-367x-hmqj.json b/advisories/unreviewed/2022/04/GHSA-pjrq-367x-hmqj/GHSA-pjrq-367x-hmqj.json index a359822e9cd..2645d90079c 100644 --- a/advisories/unreviewed/2022/04/GHSA-pjrq-367x-hmqj/GHSA-pjrq-367x-hmqj.json +++ b/advisories/unreviewed/2022/04/GHSA-pjrq-367x-hmqj/GHSA-pjrq-367x-hmqj.json @@ -7,12 +7,8 @@ "CVE-2002-1627" ], "details": "Directory traversal vulnerability in quiz.cgi for Mike Spice Quiz Me! before 0.6 allows remote attackers to write arbitrary files via .. (dot dot) sequences in the quiz parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pm7c-8g9r-r8ww/GHSA-pm7c-8g9r-r8ww.json b/advisories/unreviewed/2022/04/GHSA-pm7c-8g9r-r8ww/GHSA-pm7c-8g9r-r8ww.json index 8bd3ceaa0ef..7e72e46e37d 100644 --- a/advisories/unreviewed/2022/04/GHSA-pm7c-8g9r-r8ww/GHSA-pm7c-8g9r-r8ww.json +++ b/advisories/unreviewed/2022/04/GHSA-pm7c-8g9r-r8ww/GHSA-pm7c-8g9r-r8ww.json @@ -7,12 +7,8 @@ "CVE-2002-1826" ], "details": "grsecurity 1.9.4 for Linux kernel 2.4.18 allows local users to bypass read-only permissions by using mmap to directly map /dev/mem or /dev/kmem to kernel memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pm7q-72fq-r3c7/GHSA-pm7q-72fq-r3c7.json b/advisories/unreviewed/2022/04/GHSA-pm7q-72fq-r3c7/GHSA-pm7q-72fq-r3c7.json index a3c772a5649..ac67213eabc 100644 --- a/advisories/unreviewed/2022/04/GHSA-pm7q-72fq-r3c7/GHSA-pm7q-72fq-r3c7.json +++ b/advisories/unreviewed/2022/04/GHSA-pm7q-72fq-r3c7/GHSA-pm7q-72fq-r3c7.json @@ -7,12 +7,8 @@ "CVE-2002-1520" ], "details": "The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows remote attackers to access CLI with administrator privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pm95-w2mv-c3q3/GHSA-pm95-w2mv-c3q3.json b/advisories/unreviewed/2022/04/GHSA-pm95-w2mv-c3q3/GHSA-pm95-w2mv-c3q3.json index 7318534024c..1b56eaa58c2 100644 --- a/advisories/unreviewed/2022/04/GHSA-pm95-w2mv-c3q3/GHSA-pm95-w2mv-c3q3.json +++ b/advisories/unreviewed/2022/04/GHSA-pm95-w2mv-c3q3/GHSA-pm95-w2mv-c3q3.json @@ -7,12 +7,8 @@ "CVE-2002-1770" ], "details": "Qualcomm Eudora 5.1 allows remote attackers to execute arbitrary code via an HTML e-mail message that uses a file:// URL in a t:video tag to reference an attached Windows Media Player file containing JavaScript code, which is launched and executed in the My Computer zone by Internet Explorer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pp92-5cx8-mvc6/GHSA-pp92-5cx8-mvc6.json b/advisories/unreviewed/2022/04/GHSA-pp92-5cx8-mvc6/GHSA-pp92-5cx8-mvc6.json index 8c83ee3b40f..fd914afbe81 100644 --- a/advisories/unreviewed/2022/04/GHSA-pp92-5cx8-mvc6/GHSA-pp92-5cx8-mvc6.json +++ b/advisories/unreviewed/2022/04/GHSA-pp92-5cx8-mvc6/GHSA-pp92-5cx8-mvc6.json @@ -7,12 +7,8 @@ "CVE-2002-1845" ], "details": "Cross-site scripting (XSS) vulnerability in index.php in Yet Another Bulletin Board (YaBB) 1.40 and 1.41 allows remote attackers to inject arbitrary web script or HTML via the password (passwrd) parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pq7v-p84f-g866/GHSA-pq7v-p84f-g866.json b/advisories/unreviewed/2022/04/GHSA-pq7v-p84f-g866/GHSA-pq7v-p84f-g866.json index e0a6086fc79..332bb731231 100644 --- a/advisories/unreviewed/2022/04/GHSA-pq7v-p84f-g866/GHSA-pq7v-p84f-g866.json +++ b/advisories/unreviewed/2022/04/GHSA-pq7v-p84f-g866/GHSA-pq7v-p84f-g866.json @@ -7,12 +7,8 @@ "CVE-2002-1624" ], "details": "Buffer overflow in Lotus Domino web server before R5.0.10, when logging to DOMLOG.NSF, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP Authenticate header containing certain non-ASCII characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pvjw-3xm9-4jx8/GHSA-pvjw-3xm9-4jx8.json b/advisories/unreviewed/2022/04/GHSA-pvjw-3xm9-4jx8/GHSA-pvjw-3xm9-4jx8.json index f726d7096b4..6183a71d7aa 100644 --- a/advisories/unreviewed/2022/04/GHSA-pvjw-3xm9-4jx8/GHSA-pvjw-3xm9-4jx8.json +++ b/advisories/unreviewed/2022/04/GHSA-pvjw-3xm9-4jx8/GHSA-pvjw-3xm9-4jx8.json @@ -7,12 +7,8 @@ "CVE-2002-1418" ], "details": "Buffer overflow in the interpreter for Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to cause a denial of service (ABEND) via a long module name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pxxm-mxv8-62ww/GHSA-pxxm-mxv8-62ww.json b/advisories/unreviewed/2022/04/GHSA-pxxm-mxv8-62ww/GHSA-pxxm-mxv8-62ww.json index 246e3d2a5d8..b4ebb70b070 100644 --- a/advisories/unreviewed/2022/04/GHSA-pxxm-mxv8-62ww/GHSA-pxxm-mxv8-62ww.json +++ b/advisories/unreviewed/2022/04/GHSA-pxxm-mxv8-62ww/GHSA-pxxm-mxv8-62ww.json @@ -7,12 +7,8 @@ "CVE-2002-1818" ], "details": "ezhttpbench.php in eZ httpbench 1.1 allows remote attackers to read arbitrary files via a full pathname in the AnalyseSite parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-q23q-7jxp-6c44/GHSA-q23q-7jxp-6c44.json b/advisories/unreviewed/2022/04/GHSA-q23q-7jxp-6c44/GHSA-q23q-7jxp-6c44.json index 0e10e15e1bf..e252dbd8900 100644 --- a/advisories/unreviewed/2022/04/GHSA-q23q-7jxp-6c44/GHSA-q23q-7jxp-6c44.json +++ b/advisories/unreviewed/2022/04/GHSA-q23q-7jxp-6c44/GHSA-q23q-7jxp-6c44.json @@ -7,12 +7,8 @@ "CVE-2002-1600" ], "details": "Directory traversal vulnerability in Mike Spice's My Classifieds (classifieds.cgi) before 1.3 allows remote attackers to overwrite arbitrary files via the category parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-q27r-qgw3-47hx/GHSA-q27r-qgw3-47hx.json b/advisories/unreviewed/2022/04/GHSA-q27r-qgw3-47hx/GHSA-q27r-qgw3-47hx.json index 01747a245b1..8e2958bb57a 100644 --- a/advisories/unreviewed/2022/04/GHSA-q27r-qgw3-47hx/GHSA-q27r-qgw3-47hx.json +++ b/advisories/unreviewed/2022/04/GHSA-q27r-qgw3-47hx/GHSA-q27r-qgw3-47hx.json @@ -7,12 +7,8 @@ "CVE-2002-1790" ], "details": "The SMTP service in Microsoft Internet Information Services (IIS) 4.0 and 5.0 allows remote attackers to bypass anti-relaying rules and send spam or spoofed messages via encapsulated SMTP addresses, a similar vulnerability to CVE-1999-0682.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-q2c2-6fpm-7rqp/GHSA-q2c2-6fpm-7rqp.json b/advisories/unreviewed/2022/04/GHSA-q2c2-6fpm-7rqp/GHSA-q2c2-6fpm-7rqp.json index 5d032963570..702207a73d6 100644 --- a/advisories/unreviewed/2022/04/GHSA-q2c2-6fpm-7rqp/GHSA-q2c2-6fpm-7rqp.json +++ b/advisories/unreviewed/2022/04/GHSA-q2c2-6fpm-7rqp/GHSA-q2c2-6fpm-7rqp.json @@ -7,12 +7,8 @@ "CVE-2002-1455" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in OmniHTTPd allow remote attackers to insert script or HTML into web pages via (1) test.php, (2) test.shtml, or (3) redir.exe.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-q3x3-66rg-vp84/GHSA-q3x3-66rg-vp84.json b/advisories/unreviewed/2022/04/GHSA-q3x3-66rg-vp84/GHSA-q3x3-66rg-vp84.json index dd9fd5f06e4..c608138b9f5 100644 --- a/advisories/unreviewed/2022/04/GHSA-q3x3-66rg-vp84/GHSA-q3x3-66rg-vp84.json +++ b/advisories/unreviewed/2022/04/GHSA-q3x3-66rg-vp84/GHSA-q3x3-66rg-vp84.json @@ -7,12 +7,8 @@ "CVE-2002-1664" ], "details": "Yahoo! Messenger before February 2002 allows remote attackers to add arbitrary users to another user's buddy list and possibly obtain sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-q4pr-x7q7-3537/GHSA-q4pr-x7q7-3537.json b/advisories/unreviewed/2022/04/GHSA-q4pr-x7q7-3537/GHSA-q4pr-x7q7-3537.json index 6d94a13f35d..be6afb0fee4 100644 --- a/advisories/unreviewed/2022/04/GHSA-q4pr-x7q7-3537/GHSA-q4pr-x7q7-3537.json +++ b/advisories/unreviewed/2022/04/GHSA-q4pr-x7q7-3537/GHSA-q4pr-x7q7-3537.json @@ -7,12 +7,8 @@ "CVE-2002-1836" ], "details": "The default configuration of Xerox DocuTech 6110 and DocuTech 6115 exports certain NFS shares to the world with world writable permissions, which may allow remote attackers to modify sensitive files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-q5jv-h4mq-jqrg/GHSA-q5jv-h4mq-jqrg.json b/advisories/unreviewed/2022/04/GHSA-q5jv-h4mq-jqrg/GHSA-q5jv-h4mq-jqrg.json index cbbc8718019..d543555cdf5 100644 --- a/advisories/unreviewed/2022/04/GHSA-q5jv-h4mq-jqrg/GHSA-q5jv-h4mq-jqrg.json +++ b/advisories/unreviewed/2022/04/GHSA-q5jv-h4mq-jqrg/GHSA-q5jv-h4mq-jqrg.json @@ -7,12 +7,8 @@ "CVE-2002-1635" ], "details": "The Apache configuration file (httpd.conf) in Oracle 9i Application Server (9iAS) uses a Location alias for /perl directory instead of a ScriptAlias, which allows remote attackers to read the source code of arbitrary CGI files via a URL containing the /perl directory instead of /cgi-bin.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-q7hj-h944-mxm2/GHSA-q7hj-h944-mxm2.json b/advisories/unreviewed/2022/04/GHSA-q7hj-h944-mxm2/GHSA-q7hj-h944-mxm2.json index d614b8105c0..8fda5749a28 100644 --- a/advisories/unreviewed/2022/04/GHSA-q7hj-h944-mxm2/GHSA-q7hj-h944-mxm2.json +++ b/advisories/unreviewed/2022/04/GHSA-q7hj-h944-mxm2/GHSA-q7hj-h944-mxm2.json @@ -7,12 +7,8 @@ "CVE-2002-1695" ], "details": "Norton Internet Security 2001 opens log files with FILE_SHARE_READ and FILE_SHARE_WRITE permissions, which could allow remote attackers to modify the log file contents while Norton Internet Security is running.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-q8rm-7w2m-69q2/GHSA-q8rm-7w2m-69q2.json b/advisories/unreviewed/2022/04/GHSA-q8rm-7w2m-69q2/GHSA-q8rm-7w2m-69q2.json index 889f1a9de8e..d9c93c685c5 100644 --- a/advisories/unreviewed/2022/04/GHSA-q8rm-7w2m-69q2/GHSA-q8rm-7w2m-69q2.json +++ b/advisories/unreviewed/2022/04/GHSA-q8rm-7w2m-69q2/GHSA-q8rm-7w2m-69q2.json @@ -7,12 +7,8 @@ "CVE-2002-1498" ], "details": "Directory traversal vulnerability in SWServer 2.2 and earlier allows remote attackers to read arbitrary files via a URL containing .. sequences with \"/\" or \"\\\" characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-q9cq-jjwf-68hg/GHSA-q9cq-jjwf-68hg.json b/advisories/unreviewed/2022/04/GHSA-q9cq-jjwf-68hg/GHSA-q9cq-jjwf-68hg.json index 808200d34a0..daadce64837 100644 --- a/advisories/unreviewed/2022/04/GHSA-q9cq-jjwf-68hg/GHSA-q9cq-jjwf-68hg.json +++ b/advisories/unreviewed/2022/04/GHSA-q9cq-jjwf-68hg/GHSA-q9cq-jjwf-68hg.json @@ -7,12 +7,8 @@ "CVE-2002-1838" ], "details": "Charities.cron 1.0.2 through 1.6.0 allows local users to write to arbitrary files via a symlink attack on temporary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qch5-4phg-8jg8/GHSA-qch5-4phg-8jg8.json b/advisories/unreviewed/2022/04/GHSA-qch5-4phg-8jg8/GHSA-qch5-4phg-8jg8.json index d6460398dcb..7dfc1c7eff2 100644 --- a/advisories/unreviewed/2022/04/GHSA-qch5-4phg-8jg8/GHSA-qch5-4phg-8jg8.json +++ b/advisories/unreviewed/2022/04/GHSA-qch5-4phg-8jg8/GHSA-qch5-4phg-8jg8.json @@ -7,12 +7,8 @@ "CVE-2002-1541" ], "details": "BadBlue 1.7 allows remote attackers to bypass password protections for directories and files via an HTTP request containing an extra / (slash).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qf5g-83pc-89x2/GHSA-qf5g-83pc-89x2.json b/advisories/unreviewed/2022/04/GHSA-qf5g-83pc-89x2/GHSA-qf5g-83pc-89x2.json index f4c55ee9d54..e394616572f 100644 --- a/advisories/unreviewed/2022/04/GHSA-qf5g-83pc-89x2/GHSA-qf5g-83pc-89x2.json +++ b/advisories/unreviewed/2022/04/GHSA-qf5g-83pc-89x2/GHSA-qf5g-83pc-89x2.json @@ -7,12 +7,8 @@ "CVE-2002-1665" ], "details": "Buffer overflow in Yahoo! Messenger before February 2002 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long set_buddygrp field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qf96-w4j4-g7jw/GHSA-qf96-w4j4-g7jw.json b/advisories/unreviewed/2022/04/GHSA-qf96-w4j4-g7jw/GHSA-qf96-w4j4-g7jw.json index cba1c0cda51..14c6859fe09 100644 --- a/advisories/unreviewed/2022/04/GHSA-qf96-w4j4-g7jw/GHSA-qf96-w4j4-g7jw.json +++ b/advisories/unreviewed/2022/04/GHSA-qf96-w4j4-g7jw/GHSA-qf96-w4j4-g7jw.json @@ -7,12 +7,8 @@ "CVE-2002-1807" ], "details": "Cross-site scripting (XSS) vulnerability in phpWebSite 0.8.3 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qhx7-w346-73rc/GHSA-qhx7-w346-73rc.json b/advisories/unreviewed/2022/04/GHSA-qhx7-w346-73rc/GHSA-qhx7-w346-73rc.json index b3815cb1e11..21f23babc4d 100644 --- a/advisories/unreviewed/2022/04/GHSA-qhx7-w346-73rc/GHSA-qhx7-w346-73rc.json +++ b/advisories/unreviewed/2022/04/GHSA-qhx7-w346-73rc/GHSA-qhx7-w346-73rc.json @@ -7,12 +7,8 @@ "CVE-2002-1592" ], "details": "The ap_log_rerror function in Apache 2.0 through 2.035, when a CGI application encounters an error, sends error messages to the client that include the full path for the server, which allows remote attackers to obtain sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -84,9 +80,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qjf8-fq87-xrqw/GHSA-qjf8-fq87-xrqw.json b/advisories/unreviewed/2022/04/GHSA-qjf8-fq87-xrqw/GHSA-qjf8-fq87-xrqw.json index bc730fb305b..6b4c9147c33 100644 --- a/advisories/unreviewed/2022/04/GHSA-qjf8-fq87-xrqw/GHSA-qjf8-fq87-xrqw.json +++ b/advisories/unreviewed/2022/04/GHSA-qjf8-fq87-xrqw/GHSA-qjf8-fq87-xrqw.json @@ -7,12 +7,8 @@ "CVE-2002-1485" ], "details": "The AIM component of Trillian 0.73 and 0.74 allows remote attackers to cause a denial of service (crash) via certain strings such as \"P > O < C\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qmx6-x96x-xp97/GHSA-qmx6-x96x-xp97.json b/advisories/unreviewed/2022/04/GHSA-qmx6-x96x-xp97/GHSA-qmx6-x96x-xp97.json index 870a7d764bd..356d9d0429d 100644 --- a/advisories/unreviewed/2022/04/GHSA-qmx6-x96x-xp97/GHSA-qmx6-x96x-xp97.json +++ b/advisories/unreviewed/2022/04/GHSA-qmx6-x96x-xp97/GHSA-qmx6-x96x-xp97.json @@ -7,12 +7,8 @@ "CVE-2002-1463" ], "details": "Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor Models 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 generate easily predictable initial sequence numbers (ISN), which allows remote attackers to spoof connections.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qprv-27jh-fcj9/GHSA-qprv-27jh-fcj9.json b/advisories/unreviewed/2022/04/GHSA-qprv-27jh-fcj9/GHSA-qprv-27jh-fcj9.json index 6c61be9dbce..365d83fbd63 100644 --- a/advisories/unreviewed/2022/04/GHSA-qprv-27jh-fcj9/GHSA-qprv-27jh-fcj9.json +++ b/advisories/unreviewed/2022/04/GHSA-qprv-27jh-fcj9/GHSA-qprv-27jh-fcj9.json @@ -7,12 +7,8 @@ "CVE-2002-1821" ], "details": "Ultimate PHP Board (UPB) 1.0 and 1.0b allows remote authenticated users to gain privileges and perform unauthorized actions via direct requests to (1) admin_members.php, (2) admin_config.php, (3) admin_cat.php, or (4) admin_forum.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qq5x-4fxh-3qvh/GHSA-qq5x-4fxh-3qvh.json b/advisories/unreviewed/2022/04/GHSA-qq5x-4fxh-3qvh/GHSA-qq5x-4fxh-3qvh.json index 573d9b53ddb..b7275386d5c 100644 --- a/advisories/unreviewed/2022/04/GHSA-qq5x-4fxh-3qvh/GHSA-qq5x-4fxh-3qvh.json +++ b/advisories/unreviewed/2022/04/GHSA-qq5x-4fxh-3qvh/GHSA-qq5x-4fxh-3qvh.json @@ -7,12 +7,8 @@ "CVE-2002-1509" ], "details": "A patch for shadow-utils 20000902 causes the useradd command to create a mail spool files with read/write privileges of the new user's group (mode 660), which allows other users in the same group to read or modify the new user's incoming email.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qqgp-cx7r-fh8f/GHSA-qqgp-cx7r-fh8f.json b/advisories/unreviewed/2022/04/GHSA-qqgp-cx7r-fh8f/GHSA-qqgp-cx7r-fh8f.json index f9e438a8de9..f43e3125d2c 100644 --- a/advisories/unreviewed/2022/04/GHSA-qqgp-cx7r-fh8f/GHSA-qqgp-cx7r-fh8f.json +++ b/advisories/unreviewed/2022/04/GHSA-qqgp-cx7r-fh8f/GHSA-qqgp-cx7r-fh8f.json @@ -7,12 +7,8 @@ "CVE-2002-1666" ], "details": "Unknown vulnerability in Oracle E-Business Suite 11i.1 through 11i.6 allows remote attackers to execute unauthorized PL/SQL procedures by modifying the Oracle Applications URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qqrj-v5vx-f7h4/GHSA-qqrj-v5vx-f7h4.json b/advisories/unreviewed/2022/04/GHSA-qqrj-v5vx-f7h4/GHSA-qqrj-v5vx-f7h4.json index 4504b032287..b9591561095 100644 --- a/advisories/unreviewed/2022/04/GHSA-qqrj-v5vx-f7h4/GHSA-qqrj-v5vx-f7h4.json +++ b/advisories/unreviewed/2022/04/GHSA-qqrj-v5vx-f7h4/GHSA-qqrj-v5vx-f7h4.json @@ -7,12 +7,8 @@ "CVE-2002-1712" ], "details": "Microsoft Windows 2000 allows remote attackers to cause a denial of service (memory consumption) by sending a flood of empty TCP/IP packets with the ACK and FIN bits set to the NetBIOS port (TCP/139), as demonstrated by stream3.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qv4w-fx8x-hpw4/GHSA-qv4w-fx8x-hpw4.json b/advisories/unreviewed/2022/04/GHSA-qv4w-fx8x-hpw4/GHSA-qv4w-fx8x-hpw4.json index 68dbe788ce2..dffaaab775f 100644 --- a/advisories/unreviewed/2022/04/GHSA-qv4w-fx8x-hpw4/GHSA-qv4w-fx8x-hpw4.json +++ b/advisories/unreviewed/2022/04/GHSA-qv4w-fx8x-hpw4/GHSA-qv4w-fx8x-hpw4.json @@ -7,12 +7,8 @@ "CVE-2002-1470" ], "details": "SHOUTcast 1.8.9 and earlier allows local users to obtain the cleartext administrative password via a GET request to port 8001, which causes the password to be logged in the world-readable sc_serv.log file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-r224-hmhx-7qwp/GHSA-r224-hmhx-7qwp.json b/advisories/unreviewed/2022/04/GHSA-r224-hmhx-7qwp/GHSA-r224-hmhx-7qwp.json index 602cad4966c..eb980f87e31 100644 --- a/advisories/unreviewed/2022/04/GHSA-r224-hmhx-7qwp/GHSA-r224-hmhx-7qwp.json +++ b/advisories/unreviewed/2022/04/GHSA-r224-hmhx-7qwp/GHSA-r224-hmhx-7qwp.json @@ -7,12 +7,8 @@ "CVE-2002-1685" ], "details": "Cross-site scripting vulnerability (XSS) in BadBlue Enterprise Edition and Personal Edition 1.7 and 1.7.2 allows remote attackers to execute arbitrary script as other users by injecting script into ext.dll ISAPI.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-r4rc-r399-pvjj/GHSA-r4rc-r399-pvjj.json b/advisories/unreviewed/2022/04/GHSA-r4rc-r399-pvjj/GHSA-r4rc-r399-pvjj.json index 77c24f05dd9..18b8eff012c 100644 --- a/advisories/unreviewed/2022/04/GHSA-r4rc-r399-pvjj/GHSA-r4rc-r399-pvjj.json +++ b/advisories/unreviewed/2022/04/GHSA-r4rc-r399-pvjj/GHSA-r4rc-r399-pvjj.json @@ -7,12 +7,8 @@ "CVE-2002-1583" ], "details": "Buffer overflow in sqllib/security/db2ckpw for IBM DB2 Universal Database 6.0 and 7.0 allows local users to execute arbitrary code via a long username that is read from a file descriptor argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-r5qq-xwvj-qfwp/GHSA-r5qq-xwvj-qfwp.json b/advisories/unreviewed/2022/04/GHSA-r5qq-xwvj-qfwp/GHSA-r5qq-xwvj-qfwp.json index e47c87f9607..f937b16528c 100644 --- a/advisories/unreviewed/2022/04/GHSA-r5qq-xwvj-qfwp/GHSA-r5qq-xwvj-qfwp.json +++ b/advisories/unreviewed/2022/04/GHSA-r5qq-xwvj-qfwp/GHSA-r5qq-xwvj-qfwp.json @@ -7,12 +7,8 @@ "CVE-2002-1851" ], "details": "Buffer overflow in WS_FTP Pro 7.5 allows remote attackers to execute code on a client system via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-r66q-2j7h-5j4p/GHSA-r66q-2j7h-5j4p.json b/advisories/unreviewed/2022/04/GHSA-r66q-2j7h-5j4p/GHSA-r66q-2j7h-5j4p.json index 9b9d6348721..37da7adff0b 100644 --- a/advisories/unreviewed/2022/04/GHSA-r66q-2j7h-5j4p/GHSA-r66q-2j7h-5j4p.json +++ b/advisories/unreviewed/2022/04/GHSA-r66q-2j7h-5j4p/GHSA-r66q-2j7h-5j4p.json @@ -7,12 +7,8 @@ "CVE-2002-1640" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in Oracle Configurator before 11.5.7.17.32 and 11.5.6.16.53 allows remote attackers to inject arbitrary web script or HTML via (1) Text Features in the DHTML UI or (2) the test parameter to the oracle.apps.cz.servlet.UiServlet servlet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-r6fc-wwcf-335h/GHSA-r6fc-wwcf-335h.json b/advisories/unreviewed/2022/04/GHSA-r6fc-wwcf-335h/GHSA-r6fc-wwcf-335h.json index 63d01cf2314..57f30e19562 100644 --- a/advisories/unreviewed/2022/04/GHSA-r6fc-wwcf-335h/GHSA-r6fc-wwcf-335h.json +++ b/advisories/unreviewed/2022/04/GHSA-r6fc-wwcf-335h/GHSA-r6fc-wwcf-335h.json @@ -7,12 +7,8 @@ "CVE-2002-1734" ], "details": "NewsPro 1.01 allows remote attackers to gain unauthorized administrator access by setting their authentication cookie to \"logged,true\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-r6hq-58j4-9342/GHSA-r6hq-58j4-9342.json b/advisories/unreviewed/2022/04/GHSA-r6hq-58j4-9342/GHSA-r6hq-58j4-9342.json index 8be5dfad81a..d9865d2be04 100644 --- a/advisories/unreviewed/2022/04/GHSA-r6hq-58j4-9342/GHSA-r6hq-58j4-9342.json +++ b/advisories/unreviewed/2022/04/GHSA-r6hq-58j4-9342/GHSA-r6hq-58j4-9342.json @@ -7,12 +7,8 @@ "CVE-2002-1385" ], "details": "openwebmail_init in Open WebMail 1.81 and earlier allows local users to execute arbitrary code via .. (dot dot) sequences in a login name, such as the name provided in the sessionid parameter for openwebmail-abook.pl, which is used to find a configuration file that specifies additional code to be executed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-r74c-v46j-w38f/GHSA-r74c-v46j-w38f.json b/advisories/unreviewed/2022/04/GHSA-r74c-v46j-w38f/GHSA-r74c-v46j-w38f.json index c249384134f..26cabdd49a5 100644 --- a/advisories/unreviewed/2022/04/GHSA-r74c-v46j-w38f/GHSA-r74c-v46j-w38f.json +++ b/advisories/unreviewed/2022/04/GHSA-r74c-v46j-w38f/GHSA-r74c-v46j-w38f.json @@ -7,12 +7,8 @@ "CVE-2002-1618" ], "details": "JFS (JFS3.1 and OnlineJFS) in HP-UX 10.20, 11.00, and 11.04 does not properly implement the sticky bit functionality, which could allow attackers to bypass intended restrictions on filesystems.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-r7f5-hw5r-5mw8/GHSA-r7f5-hw5r-5mw8.json b/advisories/unreviewed/2022/04/GHSA-r7f5-hw5r-5mw8/GHSA-r7f5-hw5r-5mw8.json index 1681678cb91..866c2cf0e97 100644 --- a/advisories/unreviewed/2022/04/GHSA-r7f5-hw5r-5mw8/GHSA-r7f5-hw5r-5mw8.json +++ b/advisories/unreviewed/2022/04/GHSA-r7f5-hw5r-5mw8/GHSA-r7f5-hw5r-5mw8.json @@ -7,12 +7,8 @@ "CVE-2002-1591" ], "details": "AOL Instant Messenger (AIM) 4.7.2480 adds free.aol.com to the Trusted Sites Zone in Internet Explorer without user approval, which could allow code from free.aol.com to bypass intended access restrictions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-r7hv-r822-rph8/GHSA-r7hv-r822-rph8.json b/advisories/unreviewed/2022/04/GHSA-r7hv-r822-rph8/GHSA-r7hv-r822-rph8.json index 9a5af31ea25..f3cbe6977ef 100644 --- a/advisories/unreviewed/2022/04/GHSA-r7hv-r822-rph8/GHSA-r7hv-r822-rph8.json +++ b/advisories/unreviewed/2022/04/GHSA-r7hv-r822-rph8/GHSA-r7hv-r822-rph8.json @@ -7,12 +7,8 @@ "CVE-2002-1425" ], "details": "Directory traversal vulnerability in munpack in mpack 1.5 and earlier allows remote attackers to create new files in the parent directory via a ../ (dot-dot) sequence in the filename to be extracted.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-r825-m227-647m/GHSA-r825-m227-647m.json b/advisories/unreviewed/2022/04/GHSA-r825-m227-647m/GHSA-r825-m227-647m.json index 4590a4a64ba..bef04c5fe72 100644 --- a/advisories/unreviewed/2022/04/GHSA-r825-m227-647m/GHSA-r825-m227-647m.json +++ b/advisories/unreviewed/2022/04/GHSA-r825-m227-647m/GHSA-r825-m227-647m.json @@ -7,12 +7,8 @@ "CVE-2002-1467" ], "details": "Macromedia Flash Plugin before 6,0,47,0 allows remote attackers to bypass the same-domain restriction and read arbitrary files via (1) an HTTP redirect, (2) a \"file://\" base in a web document, or (3) a relative URL from a web archive (mht file).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-r8f7-hhg3-c763/GHSA-r8f7-hhg3-c763.json b/advisories/unreviewed/2022/04/GHSA-r8f7-hhg3-c763/GHSA-r8f7-hhg3-c763.json index 1979bee2a9e..2a4788c674e 100644 --- a/advisories/unreviewed/2022/04/GHSA-r8f7-hhg3-c763/GHSA-r8f7-hhg3-c763.json +++ b/advisories/unreviewed/2022/04/GHSA-r8f7-hhg3-c763/GHSA-r8f7-hhg3-c763.json @@ -7,12 +7,8 @@ "CVE-2002-1700" ], "details": "Cross-site scripting vulnerability (XSS) in the missing template handler in Macromedia ColdFusion MX allows remote attackers to execute arbitrary script as other users by injecting script into the HTTP request for the name of a template, which is not filtered in the resulting 404 error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-rf3p-79w2-25vp/GHSA-rf3p-79w2-25vp.json b/advisories/unreviewed/2022/04/GHSA-rf3p-79w2-25vp/GHSA-rf3p-79w2-25vp.json index 51322fe69c3..728c2bb1952 100644 --- a/advisories/unreviewed/2022/04/GHSA-rf3p-79w2-25vp/GHSA-rf3p-79w2-25vp.json +++ b/advisories/unreviewed/2022/04/GHSA-rf3p-79w2-25vp/GHSA-rf3p-79w2-25vp.json @@ -7,12 +7,8 @@ "CVE-2002-1576" ], "details": "lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserversrv that is called from a directory that has a symlink to the lserver program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rf6c-qmjq-7g7g/GHSA-rf6c-qmjq-7g7g.json b/advisories/unreviewed/2022/04/GHSA-rf6c-qmjq-7g7g/GHSA-rf6c-qmjq-7g7g.json index 612ad73e96c..54115cc08fc 100644 --- a/advisories/unreviewed/2022/04/GHSA-rf6c-qmjq-7g7g/GHSA-rf6c-qmjq-7g7g.json +++ b/advisories/unreviewed/2022/04/GHSA-rf6c-qmjq-7g7g/GHSA-rf6c-qmjq-7g7g.json @@ -7,12 +7,8 @@ "CVE-2002-1824" ], "details": "Microsoft Internet Explorer 6.0, when handling an expired CA-CERT in a webserver's certificate chain during a SSL/TLS handshake, does not prompt the user before searching for and finding a newer certificate, which may allow attackers to perform a man-in-the-middle attack. NOTE: it is not clear whether this poses a vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rh4g-gwg3-wh8p/GHSA-rh4g-gwg3-wh8p.json b/advisories/unreviewed/2022/04/GHSA-rh4g-gwg3-wh8p/GHSA-rh4g-gwg3-wh8p.json index 2922e0381a7..a06fb7cf7bc 100644 --- a/advisories/unreviewed/2022/04/GHSA-rh4g-gwg3-wh8p/GHSA-rh4g-gwg3-wh8p.json +++ b/advisories/unreviewed/2022/04/GHSA-rh4g-gwg3-wh8p/GHSA-rh4g-gwg3-wh8p.json @@ -7,12 +7,8 @@ "CVE-2002-1938" ], "details": "Virgil CGI Scanner 0.9 allows remote attackers to execute arbitrary commands via the (1) tar (TARGET) or (2) zielport (ZIELPORT) parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rhw2-ffm7-95w9/GHSA-rhw2-ffm7-95w9.json b/advisories/unreviewed/2022/04/GHSA-rhw2-ffm7-95w9/GHSA-rhw2-ffm7-95w9.json index 6120a38fb78..5eb02085503 100644 --- a/advisories/unreviewed/2022/04/GHSA-rhw2-ffm7-95w9/GHSA-rhw2-ffm7-95w9.json +++ b/advisories/unreviewed/2022/04/GHSA-rhw2-ffm7-95w9/GHSA-rhw2-ffm7-95w9.json @@ -7,12 +7,8 @@ "CVE-2002-1853" ], "details": "Cross-site scripting (XSS) vulnerability in MyNewsGroups 0.4 and 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the subject of a newsgroup post, which is not properly handled by (1) myarticles.php, (2) search.php, (3) stats.php, or (4) standard.lib.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rp5q-5rp7-fg23/GHSA-rp5q-5rp7-fg23.json b/advisories/unreviewed/2022/04/GHSA-rp5q-5rp7-fg23/GHSA-rp5q-5rp7-fg23.json index 9442470178e..2b924b4f48f 100644 --- a/advisories/unreviewed/2022/04/GHSA-rp5q-5rp7-fg23/GHSA-rp5q-5rp7-fg23.json +++ b/advisories/unreviewed/2022/04/GHSA-rp5q-5rp7-fg23/GHSA-rp5q-5rp7-fg23.json @@ -7,12 +7,8 @@ "CVE-2002-1846" ], "details": "Yet Another Bulletin Board (YaBB) 1.40 and 1.41 does not require a user to submit the correct password before changing it to a new password, which allows remote attackers to modify passwords by stealing the cookie of another user, modifying the expiretime setting, and submitting the change in a profile2 action to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rq3w-77c5-45p7/GHSA-rq3w-77c5-45p7.json b/advisories/unreviewed/2022/04/GHSA-rq3w-77c5-45p7/GHSA-rq3w-77c5-45p7.json index 156b40bc6a2..42a09a504d0 100644 --- a/advisories/unreviewed/2022/04/GHSA-rq3w-77c5-45p7/GHSA-rq3w-77c5-45p7.json +++ b/advisories/unreviewed/2022/04/GHSA-rq3w-77c5-45p7/GHSA-rq3w-77c5-45p7.json @@ -7,12 +7,8 @@ "CVE-2002-1579" ], "details": "SAP GUI (Sapgui) 4.6D allows remote attackers to cause a denial of service (crash) via a connection to a high-numbered port, which generates an \"unknown connection data\" error.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rqr8-x5cg-g692/GHSA-rqr8-x5cg-g692.json b/advisories/unreviewed/2022/04/GHSA-rqr8-x5cg-g692/GHSA-rqr8-x5cg-g692.json index 1614f0f56e9..abd72f8c6b3 100644 --- a/advisories/unreviewed/2022/04/GHSA-rqr8-x5cg-g692/GHSA-rqr8-x5cg-g692.json +++ b/advisories/unreviewed/2022/04/GHSA-rqr8-x5cg-g692/GHSA-rqr8-x5cg-g692.json @@ -7,12 +7,8 @@ "CVE-2002-1411" ], "details": "Directory traversal vulnerability in update.dpgs in Duma Photo Gallery System (DPGS) 0.99.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rr8v-qm4r-j8fq/GHSA-rr8v-qm4r-j8fq.json b/advisories/unreviewed/2022/04/GHSA-rr8v-qm4r-j8fq/GHSA-rr8v-qm4r-j8fq.json index 71631d981f6..9c3ea49c522 100644 --- a/advisories/unreviewed/2022/04/GHSA-rr8v-qm4r-j8fq/GHSA-rr8v-qm4r-j8fq.json +++ b/advisories/unreviewed/2022/04/GHSA-rr8v-qm4r-j8fq/GHSA-rr8v-qm4r-j8fq.json @@ -7,12 +7,8 @@ "CVE-2002-1606" ], "details": "Multiple buffer overflows in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allow local users to gain privileges via (1) lpc, (2) lpd, (3) lpq, (4) lpr, or (5) lprm.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rrx8-8c33-99fc/GHSA-rrx8-8c33-99fc.json b/advisories/unreviewed/2022/04/GHSA-rrx8-8c33-99fc/GHSA-rrx8-8c33-99fc.json index 0d09f831df3..05456b8018f 100644 --- a/advisories/unreviewed/2022/04/GHSA-rrx8-8c33-99fc/GHSA-rrx8-8c33-99fc.json +++ b/advisories/unreviewed/2022/04/GHSA-rrx8-8c33-99fc/GHSA-rrx8-8c33-99fc.json @@ -7,12 +7,8 @@ "CVE-2002-1827" ], "details": "Sendmail 8.9.0 through 8.12.3 allows local users to cause a denial of service by obtaining an exclusive lock on the (1) alias, (2) map, (3) statistics, and (4) pid files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rrxf-5mr9-mr8f/GHSA-rrxf-5mr9-mr8f.json b/advisories/unreviewed/2022/04/GHSA-rrxf-5mr9-mr8f/GHSA-rrxf-5mr9-mr8f.json index 79d0276ad28..bf92b0a0812 100644 --- a/advisories/unreviewed/2022/04/GHSA-rrxf-5mr9-mr8f/GHSA-rrxf-5mr9-mr8f.json +++ b/advisories/unreviewed/2022/04/GHSA-rrxf-5mr9-mr8f/GHSA-rrxf-5mr9-mr8f.json @@ -7,12 +7,8 @@ "CVE-2002-1620" ], "details": "Unknown vulnerability in IBM AIX Parallel Systems Support Programs (PSSP) 3.1.1, 3.2, and 3.4 allows remote attackers to read arbitrary files from a file collection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rv58-5fwp-m86r/GHSA-rv58-5fwp-m86r.json b/advisories/unreviewed/2022/04/GHSA-rv58-5fwp-m86r/GHSA-rv58-5fwp-m86r.json index c4f2025213a..538304921d6 100644 --- a/advisories/unreviewed/2022/04/GHSA-rv58-5fwp-m86r/GHSA-rv58-5fwp-m86r.json +++ b/advisories/unreviewed/2022/04/GHSA-rv58-5fwp-m86r/GHSA-rv58-5fwp-m86r.json @@ -7,12 +7,8 @@ "CVE-2002-1461" ], "details": "Web Shop Manager 1.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search box.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rvqh-qh4f-c556/GHSA-rvqh-qh4f-c556.json b/advisories/unreviewed/2022/04/GHSA-rvqh-qh4f-c556/GHSA-rvqh-qh4f-c556.json index cad44bad609..01bbd12cc13 100644 --- a/advisories/unreviewed/2022/04/GHSA-rvqh-qh4f-c556/GHSA-rvqh-qh4f-c556.json +++ b/advisories/unreviewed/2022/04/GHSA-rvqh-qh4f-c556/GHSA-rvqh-qh4f-c556.json @@ -7,12 +7,8 @@ "CVE-2002-1557" ], "details": "Cisco ONS15454 and ONS15327 running ONS before 3.4 allows attackers to cause a denial of service (reset to TCC, TCC+, TCCi or XTC) via a malformed HTTP request that does not contain a leading / (slash) character.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rw3w-c7r4-m22q/GHSA-rw3w-c7r4-m22q.json b/advisories/unreviewed/2022/04/GHSA-rw3w-c7r4-m22q/GHSA-rw3w-c7r4-m22q.json index 5c9d95c882b..605073d4926 100644 --- a/advisories/unreviewed/2022/04/GHSA-rw3w-c7r4-m22q/GHSA-rw3w-c7r4-m22q.json +++ b/advisories/unreviewed/2022/04/GHSA-rw3w-c7r4-m22q/GHSA-rw3w-c7r4-m22q.json @@ -7,12 +7,8 @@ "CVE-2002-1653" ], "details": "Farm9 Cryptcat, when started in server mode with the -e option, does not enable encryption, which allows clients to communicate without encryption despite intended configuration, and may allow remote attackers to sniff sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rxj3-5q74-fm8v/GHSA-rxj3-5q74-fm8v.json b/advisories/unreviewed/2022/04/GHSA-rxj3-5q74-fm8v/GHSA-rxj3-5q74-fm8v.json index 51ab07afe29..d015a55eb04 100644 --- a/advisories/unreviewed/2022/04/GHSA-rxj3-5q74-fm8v/GHSA-rxj3-5q74-fm8v.json +++ b/advisories/unreviewed/2022/04/GHSA-rxj3-5q74-fm8v/GHSA-rxj3-5q74-fm8v.json @@ -7,12 +7,8 @@ "CVE-2002-1781" ], "details": "Multiple buffer overflows in DeleGate 7.7.0 through 7.8.1 allow remote attackers to execute arbitrary code, as demonstrated using a long USER command to the POP proxy.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v2f6-jwj8-jv2f/GHSA-v2f6-jwj8-jv2f.json b/advisories/unreviewed/2022/04/GHSA-v2f6-jwj8-jv2f/GHSA-v2f6-jwj8-jv2f.json index 54508e0dabe..e22b4a862a9 100644 --- a/advisories/unreviewed/2022/04/GHSA-v2f6-jwj8-jv2f/GHSA-v2f6-jwj8-jv2f.json +++ b/advisories/unreviewed/2022/04/GHSA-v2f6-jwj8-jv2f/GHSA-v2f6-jwj8-jv2f.json @@ -7,12 +7,8 @@ "CVE-2002-1429" ], "details": "Cross-site scripting vulnerability in board.php of endity.com ShoutBOX allows remote attackers to inject arbitrary HTML into the shoutbox page via the site parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v3fm-mwrc-6x4c/GHSA-v3fm-mwrc-6x4c.json b/advisories/unreviewed/2022/04/GHSA-v3fm-mwrc-6x4c/GHSA-v3fm-mwrc-6x4c.json index 87b5875220b..fbb8463b8fb 100644 --- a/advisories/unreviewed/2022/04/GHSA-v3fm-mwrc-6x4c/GHSA-v3fm-mwrc-6x4c.json +++ b/advisories/unreviewed/2022/04/GHSA-v3fm-mwrc-6x4c/GHSA-v3fm-mwrc-6x4c.json @@ -7,12 +7,8 @@ "CVE-2002-1424" ], "details": "Buffer overflow in munpack in mpack 1.5 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v452-hw9p-xrxq/GHSA-v452-hw9p-xrxq.json b/advisories/unreviewed/2022/04/GHSA-v452-hw9p-xrxq/GHSA-v452-hw9p-xrxq.json index b0f33f6042e..db9da28248b 100644 --- a/advisories/unreviewed/2022/04/GHSA-v452-hw9p-xrxq/GHSA-v452-hw9p-xrxq.json +++ b/advisories/unreviewed/2022/04/GHSA-v452-hw9p-xrxq/GHSA-v452-hw9p-xrxq.json @@ -7,12 +7,8 @@ "CVE-2002-1822" ], "details": "IBM HTTP Server 1.0 on AS/400 allows remote attackers to obtain the path to the web root directory and other sensitive information, which is leaked in an error mesage when a request is made for a non-existent Java Server Page (JSP).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v4vf-x3rr-p95c/GHSA-v4vf-x3rr-p95c.json b/advisories/unreviewed/2022/04/GHSA-v4vf-x3rr-p95c/GHSA-v4vf-x3rr-p95c.json index 565f4d8dbf3..432a4bf4020 100644 --- a/advisories/unreviewed/2022/04/GHSA-v4vf-x3rr-p95c/GHSA-v4vf-x3rr-p95c.json +++ b/advisories/unreviewed/2022/04/GHSA-v4vf-x3rr-p95c/GHSA-v4vf-x3rr-p95c.json @@ -7,12 +7,8 @@ "CVE-2002-1492" ], "details": "Buffer overflows in the Cisco VPN 5000 Client before 5.2.7 for Linux, and VPN 5000 Client before 5.2.8 for Solaris, allow local users to gain root privileges via (1) close_tunnel and (2) open_tunnel.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v573-78hv-qjj4/GHSA-v573-78hv-qjj4.json b/advisories/unreviewed/2022/04/GHSA-v573-78hv-qjj4/GHSA-v573-78hv-qjj4.json index 9012572b0c2..71cf0f2a9db 100644 --- a/advisories/unreviewed/2022/04/GHSA-v573-78hv-qjj4/GHSA-v573-78hv-qjj4.json +++ b/advisories/unreviewed/2022/04/GHSA-v573-78hv-qjj4/GHSA-v573-78hv-qjj4.json @@ -7,12 +7,8 @@ "CVE-2002-1466" ], "details": "CafeLog b2 Weblog Tool 2.06pre4, with allow_fopen_url enabled, allows remote attackers to execute arbitrary PHP code via the b2inc variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v66x-wqh5-mwx3/GHSA-v66x-wqh5-mwx3.json b/advisories/unreviewed/2022/04/GHSA-v66x-wqh5-mwx3/GHSA-v66x-wqh5-mwx3.json index 5cfaa029017..5dfcf72ee1e 100644 --- a/advisories/unreviewed/2022/04/GHSA-v66x-wqh5-mwx3/GHSA-v66x-wqh5-mwx3.json +++ b/advisories/unreviewed/2022/04/GHSA-v66x-wqh5-mwx3/GHSA-v66x-wqh5-mwx3.json @@ -7,12 +7,8 @@ "CVE-2002-1801" ], "details": "ImageFolio 2.23 through 2.27 allows remote attackers to obtain sensitive information via a nonexistent image category, which leaks the web root in the resulting error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v67g-p3w9-wpqc/GHSA-v67g-p3w9-wpqc.json b/advisories/unreviewed/2022/04/GHSA-v67g-p3w9-wpqc/GHSA-v67g-p3w9-wpqc.json index aba9abdc9b7..d321e24735f 100644 --- a/advisories/unreviewed/2022/04/GHSA-v67g-p3w9-wpqc/GHSA-v67g-p3w9-wpqc.json +++ b/advisories/unreviewed/2022/04/GHSA-v67g-p3w9-wpqc/GHSA-v67g-p3w9-wpqc.json @@ -7,12 +7,8 @@ "CVE-2002-1659" ], "details": "user_profile.asp in PortalApp 2.2 allows local users to gain privileges by modifying the user_id variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v67r-p67m-4f23/GHSA-v67r-p67m-4f23.json b/advisories/unreviewed/2022/04/GHSA-v67r-p67m-4f23/GHSA-v67r-p67m-4f23.json index bcb80e56159..115a68efe5a 100644 --- a/advisories/unreviewed/2022/04/GHSA-v67r-p67m-4f23/GHSA-v67r-p67m-4f23.json +++ b/advisories/unreviewed/2022/04/GHSA-v67r-p67m-4f23/GHSA-v67r-p67m-4f23.json @@ -7,12 +7,8 @@ "CVE-2002-1505" ], "details": "SQL injection vulnerability in board.php for WoltLab Burning Board (wBB) 2.0 RC 1 and earlier allows remote attackers to modify the database and possibly gain privileges via the boardid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v962-wpxr-qw8g/GHSA-v962-wpxr-qw8g.json b/advisories/unreviewed/2022/04/GHSA-v962-wpxr-qw8g/GHSA-v962-wpxr-qw8g.json index 93143c41c6b..adccd992b40 100644 --- a/advisories/unreviewed/2022/04/GHSA-v962-wpxr-qw8g/GHSA-v962-wpxr-qw8g.json +++ b/advisories/unreviewed/2022/04/GHSA-v962-wpxr-qw8g/GHSA-v962-wpxr-qw8g.json @@ -7,12 +7,8 @@ "CVE-2002-1737" ], "details": "Astaro Security Linux 2.016 creates world-writable files and directories, which allows local users to overwrite arbitrary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vff3-5vfq-9m5f/GHSA-vff3-5vfq-9m5f.json b/advisories/unreviewed/2022/04/GHSA-vff3-5vfq-9m5f/GHSA-vff3-5vfq-9m5f.json index 9a9b4d9c075..2fea3669df6 100644 --- a/advisories/unreviewed/2022/04/GHSA-vff3-5vfq-9m5f/GHSA-vff3-5vfq-9m5f.json +++ b/advisories/unreviewed/2022/04/GHSA-vff3-5vfq-9m5f/GHSA-vff3-5vfq-9m5f.json @@ -7,12 +7,8 @@ "CVE-2002-1561" ], "details": "The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service) via a malformed packet to the RPC Endpoint Mapper at TCP port 135, which triggers a null pointer dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vg9j-292g-wcf2/GHSA-vg9j-292g-wcf2.json b/advisories/unreviewed/2022/04/GHSA-vg9j-292g-wcf2/GHSA-vg9j-292g-wcf2.json index f20dee062c4..57d76358f2d 100644 --- a/advisories/unreviewed/2022/04/GHSA-vg9j-292g-wcf2/GHSA-vg9j-292g-wcf2.json +++ b/advisories/unreviewed/2022/04/GHSA-vg9j-292g-wcf2/GHSA-vg9j-292g-wcf2.json @@ -7,12 +7,8 @@ "CVE-2002-1652" ], "details": "Buffer overflow in cgicso.c for cgiemail 1.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long query parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vghm-g8g9-w459/GHSA-vghm-g8g9-w459.json b/advisories/unreviewed/2022/04/GHSA-vghm-g8g9-w459/GHSA-vghm-g8g9-w459.json index 6e0e3fb8bc9..e548e5c30ec 100644 --- a/advisories/unreviewed/2022/04/GHSA-vghm-g8g9-w459/GHSA-vghm-g8g9-w459.json +++ b/advisories/unreviewed/2022/04/GHSA-vghm-g8g9-w459/GHSA-vghm-g8g9-w459.json @@ -7,12 +7,8 @@ "CVE-2002-1654" ], "details": "iPlanet Web Server Enterprise Edition and Netscape Enterprise Server 4.0 and 4.1 allows remote attackers to conduct HTTP Basic Authentication via the wp-force-auth Web Publisher command, which provides a distinct attack vector and may make it easier to conduct brute force password guessing without detection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vhj3-hwv9-4r26/GHSA-vhj3-hwv9-4r26.json b/advisories/unreviewed/2022/04/GHSA-vhj3-hwv9-4r26/GHSA-vhj3-hwv9-4r26.json index bf2cbbd6c9b..78f7190d518 100644 --- a/advisories/unreviewed/2022/04/GHSA-vhj3-hwv9-4r26/GHSA-vhj3-hwv9-4r26.json +++ b/advisories/unreviewed/2022/04/GHSA-vhj3-hwv9-4r26/GHSA-vhj3-hwv9-4r26.json @@ -7,12 +7,8 @@ "CVE-2002-1804" ], "details": "Cross-site scripting (XSS) vulnerability in NPDS 4.8 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vj9m-x3xp-f844/GHSA-vj9m-x3xp-f844.json b/advisories/unreviewed/2022/04/GHSA-vj9m-x3xp-f844/GHSA-vj9m-x3xp-f844.json index 68accb5ed16..79c8b570b60 100644 --- a/advisories/unreviewed/2022/04/GHSA-vj9m-x3xp-f844/GHSA-vj9m-x3xp-f844.json +++ b/advisories/unreviewed/2022/04/GHSA-vj9m-x3xp-f844/GHSA-vj9m-x3xp-f844.json @@ -7,12 +7,8 @@ "CVE-2002-1582" ], "details": "compose.cgi in Mailreader.com 2.3.30 and 2.3.31, when using Sendmail as the Mail Transfer Agent, allows remote attackers to execute arbitrary commands via shell metacharacters in the RealEmail configuration variable, which is used to call Sendmail in network.cgi.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vp7p-xxwx-6643/GHSA-vp7p-xxwx-6643.json b/advisories/unreviewed/2022/04/GHSA-vp7p-xxwx-6643/GHSA-vp7p-xxwx-6643.json index b9cdb7aba38..4d0fea5b88f 100644 --- a/advisories/unreviewed/2022/04/GHSA-vp7p-xxwx-6643/GHSA-vp7p-xxwx-6643.json +++ b/advisories/unreviewed/2022/04/GHSA-vp7p-xxwx-6643/GHSA-vp7p-xxwx-6643.json @@ -7,12 +7,8 @@ "CVE-2002-1814" ], "details": "Buffer overflow in efstools in Bonobo, when installed setuid, allows local users to execute arbitrary code via long command line arguments.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vp8m-7j62-cgjp/GHSA-vp8m-7j62-cgjp.json b/advisories/unreviewed/2022/04/GHSA-vp8m-7j62-cgjp/GHSA-vp8m-7j62-cgjp.json index 35b668ca830..352c4398c4f 100644 --- a/advisories/unreviewed/2022/04/GHSA-vp8m-7j62-cgjp/GHSA-vp8m-7j62-cgjp.json +++ b/advisories/unreviewed/2022/04/GHSA-vp8m-7j62-cgjp/GHSA-vp8m-7j62-cgjp.json @@ -7,12 +7,8 @@ "CVE-2002-1788" ], "details": "Format string vulnerability in the nn_exitmsg function in nn 6.6.0 through 6.6.3 allows remote NNTP servers to execute arbitrary code via format strings in server responses.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vq33-xjhq-gcxv/GHSA-vq33-xjhq-gcxv.json b/advisories/unreviewed/2022/04/GHSA-vq33-xjhq-gcxv/GHSA-vq33-xjhq-gcxv.json index bb01786e3ec..5f578632c76 100644 --- a/advisories/unreviewed/2022/04/GHSA-vq33-xjhq-gcxv/GHSA-vq33-xjhq-gcxv.json +++ b/advisories/unreviewed/2022/04/GHSA-vq33-xjhq-gcxv/GHSA-vq33-xjhq-gcxv.json @@ -7,12 +7,8 @@ "CVE-2002-1714" ], "details": "Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to cause a denial of service (crash) via an object of type \"text/html\" with the DATA field that identifies the HTML document that contains the object, which may cause infinite recursion.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vqp8-gm28-c2m6/GHSA-vqp8-gm28-c2m6.json b/advisories/unreviewed/2022/04/GHSA-vqp8-gm28-c2m6/GHSA-vqp8-gm28-c2m6.json index 5d6e3eb2d86..95fb3ab2f10 100644 --- a/advisories/unreviewed/2022/04/GHSA-vqp8-gm28-c2m6/GHSA-vqp8-gm28-c2m6.json +++ b/advisories/unreviewed/2022/04/GHSA-vqp8-gm28-c2m6/GHSA-vqp8-gm28-c2m6.json @@ -7,12 +7,8 @@ "CVE-2002-1525" ], "details": "Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on port (1) 6015 or (2) 6016, or (3) an absolute pathname to port 6017.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vqqq-hq58-3ffc/GHSA-vqqq-hq58-3ffc.json b/advisories/unreviewed/2022/04/GHSA-vqqq-hq58-3ffc/GHSA-vqqq-hq58-3ffc.json index 091d0d86d00..887c1cba924 100644 --- a/advisories/unreviewed/2022/04/GHSA-vqqq-hq58-3ffc/GHSA-vqqq-hq58-3ffc.json +++ b/advisories/unreviewed/2022/04/GHSA-vqqq-hq58-3ffc/GHSA-vqqq-hq58-3ffc.json @@ -7,12 +7,8 @@ "CVE-2002-1406" ], "details": "Unknown vulnerability in passwd for VVOS HP-UX 11.04, with unknown impact, related to \"Unexpected behavior.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vvgm-hmmj-4xv4/GHSA-vvgm-hmmj-4xv4.json b/advisories/unreviewed/2022/04/GHSA-vvgm-hmmj-4xv4/GHSA-vvgm-hmmj-4xv4.json index 6c79bc6399d..665d2f098d8 100644 --- a/advisories/unreviewed/2022/04/GHSA-vvgm-hmmj-4xv4/GHSA-vvgm-hmmj-4xv4.json +++ b/advisories/unreviewed/2022/04/GHSA-vvgm-hmmj-4xv4/GHSA-vvgm-hmmj-4xv4.json @@ -7,12 +7,8 @@ "CVE-2002-1630" ], "details": "The sendmail.jsp sample page in Oracle 9i Application Server (9iAS) allows remote attackers to send arbitrary emails.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vxpv-xpqv-mxm8/GHSA-vxpv-xpqv-mxm8.json b/advisories/unreviewed/2022/04/GHSA-vxpv-xpqv-mxm8/GHSA-vxpv-xpqv-mxm8.json index 25af4f07763..d929302c65c 100644 --- a/advisories/unreviewed/2022/04/GHSA-vxpv-xpqv-mxm8/GHSA-vxpv-xpqv-mxm8.json +++ b/advisories/unreviewed/2022/04/GHSA-vxpv-xpqv-mxm8/GHSA-vxpv-xpqv-mxm8.json @@ -7,12 +7,8 @@ "CVE-2002-1661" ], "details": "The leafnode server in leafnode 1.9.20 to 1.9.29 allows remote attackers to cause a denial of service (infinite loop) when leafnode requests a cross-posted article to one group whose name is a prefix of another group.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vxxw-29j4-cxg2/GHSA-vxxw-29j4-cxg2.json b/advisories/unreviewed/2022/04/GHSA-vxxw-29j4-cxg2/GHSA-vxxw-29j4-cxg2.json index 262e539cc83..25e40382d6f 100644 --- a/advisories/unreviewed/2022/04/GHSA-vxxw-29j4-cxg2/GHSA-vxxw-29j4-cxg2.json +++ b/advisories/unreviewed/2022/04/GHSA-vxxw-29j4-cxg2/GHSA-vxxw-29j4-cxg2.json @@ -7,12 +7,8 @@ "CVE-2002-1681" ], "details": "Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote attackers to execute arbitrary script as other users by injecting script into the paragraph

tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-w33h-97p4-x9vh/GHSA-w33h-97p4-x9vh.json b/advisories/unreviewed/2022/04/GHSA-w33h-97p4-x9vh/GHSA-w33h-97p4-x9vh.json index 3e514d1ebc9..78cf16a04d2 100644 --- a/advisories/unreviewed/2022/04/GHSA-w33h-97p4-x9vh/GHSA-w33h-97p4-x9vh.json +++ b/advisories/unreviewed/2022/04/GHSA-w33h-97p4-x9vh/GHSA-w33h-97p4-x9vh.json @@ -7,12 +7,8 @@ "CVE-2002-1611" ], "details": "Buffer overflow in quot in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-w3gp-frj6-h378/GHSA-w3gp-frj6-h378.json b/advisories/unreviewed/2022/04/GHSA-w3gp-frj6-h378/GHSA-w3gp-frj6-h378.json index 631d982b52e..0192c1c9a2a 100644 --- a/advisories/unreviewed/2022/04/GHSA-w3gp-frj6-h378/GHSA-w3gp-frj6-h378.json +++ b/advisories/unreviewed/2022/04/GHSA-w3gp-frj6-h378/GHSA-w3gp-frj6-h378.json @@ -7,12 +7,8 @@ "CVE-2002-1806" ], "details": "Cross-site scripting (XSS) vulnerability in Drupal 4.0.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-w44x-44mv-xqq6/GHSA-w44x-44mv-xqq6.json b/advisories/unreviewed/2022/04/GHSA-w44x-44mv-xqq6/GHSA-w44x-44mv-xqq6.json index c64c30e9217..77aee21756f 100644 --- a/advisories/unreviewed/2022/04/GHSA-w44x-44mv-xqq6/GHSA-w44x-44mv-xqq6.json +++ b/advisories/unreviewed/2022/04/GHSA-w44x-44mv-xqq6/GHSA-w44x-44mv-xqq6.json @@ -7,12 +7,8 @@ "CVE-2002-1499" ], "details": "Multiple SQL injection vulnerabilities in FactoSystem CMS allows remote attackers to perform unauthorized database actions via (1) the authornumber parameter in author.asp, (2) the discussblurbid parameter in discuss.asp, (3) the name parameter in holdcomment.asp, and (4) the email parameter in holdcomment.asp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-w5rm-f4rv-pp4f/GHSA-w5rm-f4rv-pp4f.json b/advisories/unreviewed/2022/04/GHSA-w5rm-f4rv-pp4f/GHSA-w5rm-f4rv-pp4f.json index 1f311fac109..ffea24a9e81 100644 --- a/advisories/unreviewed/2022/04/GHSA-w5rm-f4rv-pp4f/GHSA-w5rm-f4rv-pp4f.json +++ b/advisories/unreviewed/2022/04/GHSA-w5rm-f4rv-pp4f/GHSA-w5rm-f4rv-pp4f.json @@ -7,12 +7,8 @@ "CVE-2002-1607" ], "details": "Buffer overflow in ypmatch in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-w6xh-hvr7-7x4x/GHSA-w6xh-hvr7-7x4x.json b/advisories/unreviewed/2022/04/GHSA-w6xh-hvr7-7x4x/GHSA-w6xh-hvr7-7x4x.json index 519f38e0055..26f5c531b14 100644 --- a/advisories/unreviewed/2022/04/GHSA-w6xh-hvr7-7x4x/GHSA-w6xh-hvr7-7x4x.json +++ b/advisories/unreviewed/2022/04/GHSA-w6xh-hvr7-7x4x/GHSA-w6xh-hvr7-7x4x.json @@ -7,12 +7,8 @@ "CVE-2002-1744" ], "details": "Directory traversal vulnerability in CodeBrws.asp in Microsoft IIS 5.0 allows remote attackers to view source code and determine the existence of arbitrary files via a hex-encoded \"%c0%ae%c0%ae\" string, which is the Unicode representation for \"..\" (dot dot).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-w7rg-jjfq-fwf2/GHSA-w7rg-jjfq-fwf2.json b/advisories/unreviewed/2022/04/GHSA-w7rg-jjfq-fwf2/GHSA-w7rg-jjfq-fwf2.json index de78436573d..533c8350105 100644 --- a/advisories/unreviewed/2022/04/GHSA-w7rg-jjfq-fwf2/GHSA-w7rg-jjfq-fwf2.json +++ b/advisories/unreviewed/2022/04/GHSA-w7rg-jjfq-fwf2/GHSA-w7rg-jjfq-fwf2.json @@ -7,12 +7,8 @@ "CVE-2002-1502" ], "details": "Symbolic link vulnerability in xbreaky before 0.5.5 allows local users to overwrite arbitrary files via a symlink from the user's .breakyhighscores file to the target file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-w883-jj45-crqg/GHSA-w883-jj45-crqg.json b/advisories/unreviewed/2022/04/GHSA-w883-jj45-crqg/GHSA-w883-jj45-crqg.json index 26f486063f8..8739c8b757b 100644 --- a/advisories/unreviewed/2022/04/GHSA-w883-jj45-crqg/GHSA-w883-jj45-crqg.json +++ b/advisories/unreviewed/2022/04/GHSA-w883-jj45-crqg/GHSA-w883-jj45-crqg.json @@ -7,12 +7,8 @@ "CVE-2002-1602" ], "details": "Buffer overflow in the Braille module for GNU screen 3.9.11, when HAVE_BRAILLE is defined, allows local users to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wfpg-gw9j-p5g3/GHSA-wfpg-gw9j-p5g3.json b/advisories/unreviewed/2022/04/GHSA-wfpg-gw9j-p5g3/GHSA-wfpg-gw9j-p5g3.json index 8ea4f2d5000..b73d7ba1204 100644 --- a/advisories/unreviewed/2022/04/GHSA-wfpg-gw9j-p5g3/GHSA-wfpg-gw9j-p5g3.json +++ b/advisories/unreviewed/2022/04/GHSA-wfpg-gw9j-p5g3/GHSA-wfpg-gw9j-p5g3.json @@ -7,12 +7,8 @@ "CVE-2002-1677" ], "details": "14all.cgi 1.1p15 in mrtgconfig allows remote attackers to determine the physical path to the web root directory via a request with an invalid cfg parameter, which generates an error message that reveals the path.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wgvc-2xvx-3252/GHSA-wgvc-2xvx-3252.json b/advisories/unreviewed/2022/04/GHSA-wgvc-2xvx-3252/GHSA-wgvc-2xvx-3252.json index a4df9ae1e9c..47f4d3df09d 100644 --- a/advisories/unreviewed/2022/04/GHSA-wgvc-2xvx-3252/GHSA-wgvc-2xvx-3252.json +++ b/advisories/unreviewed/2022/04/GHSA-wgvc-2xvx-3252/GHSA-wgvc-2xvx-3252.json @@ -7,12 +7,8 @@ "CVE-2002-1729" ], "details": "Cross-site scripting vulnerability (XSS) in ASPjar Guestbook 1.00 allows remote attackers to execute arbitrary script as other users via the \"web site\" parameter in a guestbook message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-whgf-2jh4-j6w3/GHSA-whgf-2jh4-j6w3.json b/advisories/unreviewed/2022/04/GHSA-whgf-2jh4-j6w3/GHSA-whgf-2jh4-j6w3.json index 955eda94138..d1c800f2746 100644 --- a/advisories/unreviewed/2022/04/GHSA-whgf-2jh4-j6w3/GHSA-whgf-2jh4-j6w3.json +++ b/advisories/unreviewed/2022/04/GHSA-whgf-2jh4-j6w3/GHSA-whgf-2jh4-j6w3.json @@ -7,12 +7,8 @@ "CVE-2002-1704" ], "details": "Zeroboard 4.1, when the \"allow_url_fopen\" and \"register_globals\" variables are enabled, allows remote attackers to execute arbitrary PHP code by modifying the _zb_path parameter to reference a URL on a remote web server that contains the code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-whhr-h6mf-74pw/GHSA-whhr-h6mf-74pw.json b/advisories/unreviewed/2022/04/GHSA-whhr-h6mf-74pw/GHSA-whhr-h6mf-74pw.json index 7bdf77d90e2..3d9a24fb144 100644 --- a/advisories/unreviewed/2022/04/GHSA-whhr-h6mf-74pw/GHSA-whhr-h6mf-74pw.json +++ b/advisories/unreviewed/2022/04/GHSA-whhr-h6mf-74pw/GHSA-whhr-h6mf-74pw.json @@ -7,12 +7,8 @@ "CVE-2002-1585" ], "details": "Unknown vulnerability in Solaris 8 for Intel and Solaris 8 and 9 for SPARC allows remote attackers to cause a denial of service via certain packets that cause some network interfaces to stop responding to TCP traffic.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wm58-j52g-cmxc/GHSA-wm58-j52g-cmxc.json b/advisories/unreviewed/2022/04/GHSA-wm58-j52g-cmxc/GHSA-wm58-j52g-cmxc.json index ebc7b8ae922..11e7dacd9dc 100644 --- a/advisories/unreviewed/2022/04/GHSA-wm58-j52g-cmxc/GHSA-wm58-j52g-cmxc.json +++ b/advisories/unreviewed/2022/04/GHSA-wm58-j52g-cmxc/GHSA-wm58-j52g-cmxc.json @@ -7,12 +7,8 @@ "CVE-2002-1805" ], "details": "Cross-site scripting (XSS) vulnerability in DaCode 1.2.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wmgc-gwrp-pgcv/GHSA-wmgc-gwrp-pgcv.json b/advisories/unreviewed/2022/04/GHSA-wmgc-gwrp-pgcv/GHSA-wmgc-gwrp-pgcv.json index 4ecebcbaad3..1d639ce4498 100644 --- a/advisories/unreviewed/2022/04/GHSA-wmgc-gwrp-pgcv/GHSA-wmgc-gwrp-pgcv.json +++ b/advisories/unreviewed/2022/04/GHSA-wmgc-gwrp-pgcv/GHSA-wmgc-gwrp-pgcv.json @@ -7,12 +7,8 @@ "CVE-2002-1809" ], "details": "The default configuration of the Windows binary release of MySQL 3.23.2 through 3.23.52 has a NULL root password, which could allow remote attackers to gain unauthorized root access to the MySQL database.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wmqv-9v3f-m3pr/GHSA-wmqv-9v3f-m3pr.json b/advisories/unreviewed/2022/04/GHSA-wmqv-9v3f-m3pr/GHSA-wmqv-9v3f-m3pr.json index 6b81f8da1a6..a1b11e0c6e2 100644 --- a/advisories/unreviewed/2022/04/GHSA-wmqv-9v3f-m3pr/GHSA-wmqv-9v3f-m3pr.json +++ b/advisories/unreviewed/2022/04/GHSA-wmqv-9v3f-m3pr/GHSA-wmqv-9v3f-m3pr.json @@ -7,12 +7,8 @@ "CVE-2002-1717" ], "details": "Microsoft Internet Information Server (IIS) 5.1 allows remote attackers to view path information via a GET request to (1) /_vti_pvt/access.cnf, (2) /_vti_pvt/botinfs.cnf, (3) /_vti_pvt/bots.cnf, or (4) /_vti_pvt/linkinfo.cnf.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-wpc7-rpjv-rv8j/GHSA-wpc7-rpjv-rv8j.json b/advisories/unreviewed/2022/04/GHSA-wpc7-rpjv-rv8j/GHSA-wpc7-rpjv-rv8j.json index 12e7f150565..3c1af09eb05 100644 --- a/advisories/unreviewed/2022/04/GHSA-wpc7-rpjv-rv8j/GHSA-wpc7-rpjv-rv8j.json +++ b/advisories/unreviewed/2022/04/GHSA-wpc7-rpjv-rv8j/GHSA-wpc7-rpjv-rv8j.json @@ -7,12 +7,8 @@ "CVE-2002-1731" ], "details": "The System Request menu in IBM AS/400 allows local users to list valid user accounts by viewing the object names that are type USRPRF.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wq97-jr7v-qwxf/GHSA-wq97-jr7v-qwxf.json b/advisories/unreviewed/2022/04/GHSA-wq97-jr7v-qwxf/GHSA-wq97-jr7v-qwxf.json index ee9c7f27007..651361f404d 100644 --- a/advisories/unreviewed/2022/04/GHSA-wq97-jr7v-qwxf/GHSA-wq97-jr7v-qwxf.json +++ b/advisories/unreviewed/2022/04/GHSA-wq97-jr7v-qwxf/GHSA-wq97-jr7v-qwxf.json @@ -7,12 +7,8 @@ "CVE-2002-1562" ], "details": "Directory traversal vulnerability in thttpd, when using virtual hosting, allows remote attackers to read arbitrary files via .. (dot dot) sequences in the Host: header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wrgv-ph75-892c/GHSA-wrgv-ph75-892c.json b/advisories/unreviewed/2022/04/GHSA-wrgv-ph75-892c/GHSA-wrgv-ph75-892c.json index 475eabb5e94..ebf723f35db 100644 --- a/advisories/unreviewed/2022/04/GHSA-wrgv-ph75-892c/GHSA-wrgv-ph75-892c.json +++ b/advisories/unreviewed/2022/04/GHSA-wrgv-ph75-892c/GHSA-wrgv-ph75-892c.json @@ -7,12 +7,8 @@ "CVE-2002-1855" ], "details": "Macromedia JRun 3.0 through 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot (\"WEB-INF.\").", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wrjp-jc2q-pxvq/GHSA-wrjp-jc2q-pxvq.json b/advisories/unreviewed/2022/04/GHSA-wrjp-jc2q-pxvq/GHSA-wrjp-jc2q-pxvq.json index bf23478ba28..7d25313578c 100644 --- a/advisories/unreviewed/2022/04/GHSA-wrjp-jc2q-pxvq/GHSA-wrjp-jc2q-pxvq.json +++ b/advisories/unreviewed/2022/04/GHSA-wrjp-jc2q-pxvq/GHSA-wrjp-jc2q-pxvq.json @@ -7,12 +7,8 @@ "CVE-2002-1417" ], "details": "Directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6, allows remote attackers to read arbitrary files via a URL containing a \"..%5c\" sequence (modified dot-dot), which is mapped to the directory separator.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wrxr-3x37-p3mp/GHSA-wrxr-3x37-p3mp.json b/advisories/unreviewed/2022/04/GHSA-wrxr-3x37-p3mp/GHSA-wrxr-3x37-p3mp.json index 62aa029f0cb..624739b8d38 100644 --- a/advisories/unreviewed/2022/04/GHSA-wrxr-3x37-p3mp/GHSA-wrxr-3x37-p3mp.json +++ b/advisories/unreviewed/2022/04/GHSA-wrxr-3x37-p3mp/GHSA-wrxr-3x37-p3mp.json @@ -7,12 +7,8 @@ "CVE-2002-1679" ], "details": "Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin 2.2.0 allows remote attackers to execute arbitrary script as other users by injecting script into a bulletin board message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wv5m-r3h8-56gx/GHSA-wv5m-r3h8-56gx.json b/advisories/unreviewed/2022/04/GHSA-wv5m-r3h8-56gx/GHSA-wv5m-r3h8-56gx.json index dfd76a04302..5d1cfd08b85 100644 --- a/advisories/unreviewed/2022/04/GHSA-wv5m-r3h8-56gx/GHSA-wv5m-r3h8-56gx.json +++ b/advisories/unreviewed/2022/04/GHSA-wv5m-r3h8-56gx/GHSA-wv5m-r3h8-56gx.json @@ -7,12 +7,8 @@ "CVE-2002-1410" ], "details": "Easy Guestbook CGI programs do not authenticate the administrator, which allows remote attackers to (1) delete entries via direct access of admin.cgi, or (2) reconfigure Guestbook via direct access of config.cgi.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wx48-6h8x-8mw4/GHSA-wx48-6h8x-8mw4.json b/advisories/unreviewed/2022/04/GHSA-wx48-6h8x-8mw4/GHSA-wx48-6h8x-8mw4.json index 11a94299094..dc200a56198 100644 --- a/advisories/unreviewed/2022/04/GHSA-wx48-6h8x-8mw4/GHSA-wx48-6h8x-8mw4.json +++ b/advisories/unreviewed/2022/04/GHSA-wx48-6h8x-8mw4/GHSA-wx48-6h8x-8mw4.json @@ -7,12 +7,8 @@ "CVE-2002-1439" ], "details": "Unknown vulnerability related to stack corruption in the TGA daemon for HP-UX 11.04 (VVOS) Virtualvault 4.0, 4.5, and 4.6 may allow attackers to obtain access to system files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x3rx-vw9q-f2g4/GHSA-x3rx-vw9q-f2g4.json b/advisories/unreviewed/2022/04/GHSA-x3rx-vw9q-f2g4/GHSA-x3rx-vw9q-f2g4.json index fc7e3fa9d65..a01cde3d325 100644 --- a/advisories/unreviewed/2022/04/GHSA-x3rx-vw9q-f2g4/GHSA-x3rx-vw9q-f2g4.json +++ b/advisories/unreviewed/2022/04/GHSA-x3rx-vw9q-f2g4/GHSA-x3rx-vw9q-f2g4.json @@ -7,12 +7,8 @@ "CVE-2002-1427" ], "details": "The print_html_to_file function in edit.cgi for Easy Homepage Creator 1.0 does not check user credentials, which allows remote attackers to modify home pages of other users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x48g-qcqq-65cr/GHSA-x48g-qcqq-65cr.json b/advisories/unreviewed/2022/04/GHSA-x48g-qcqq-65cr/GHSA-x48g-qcqq-65cr.json index 912b4f64ee9..ca5fb756b2b 100644 --- a/advisories/unreviewed/2022/04/GHSA-x48g-qcqq-65cr/GHSA-x48g-qcqq-65cr.json +++ b/advisories/unreviewed/2022/04/GHSA-x48g-qcqq-65cr/GHSA-x48g-qcqq-65cr.json @@ -7,12 +7,8 @@ "CVE-2002-1555" ], "details": "Cisco ONS15454 and ONS15327 running ONS before 3.4 uses a \"public\" SNMP community string that cannot be changed, which allows remote attackers to obtain sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x4hp-q863-hc8m/GHSA-x4hp-q863-hc8m.json b/advisories/unreviewed/2022/04/GHSA-x4hp-q863-hc8m/GHSA-x4hp-q863-hc8m.json index 3ccc3df92f6..b2239e8140a 100644 --- a/advisories/unreviewed/2022/04/GHSA-x4hp-q863-hc8m/GHSA-x4hp-q863-hc8m.json +++ b/advisories/unreviewed/2022/04/GHSA-x4hp-q863-hc8m/GHSA-x4hp-q863-hc8m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-x569-q6m8-549j/GHSA-x569-q6m8-549j.json b/advisories/unreviewed/2022/04/GHSA-x569-q6m8-549j/GHSA-x569-q6m8-549j.json index 46089dce0c3..d0c5a479561 100644 --- a/advisories/unreviewed/2022/04/GHSA-x569-q6m8-549j/GHSA-x569-q6m8-549j.json +++ b/advisories/unreviewed/2022/04/GHSA-x569-q6m8-549j/GHSA-x569-q6m8-549j.json @@ -7,12 +7,8 @@ "CVE-2002-1581" ], "details": "Directory traversal vulnerability in nph-mr.cgi in Mailreader.com 2.3.20 through 2.3.31 allows remote attackers to view arbitrary files via .. (dot dot) sequences and a null byte (%00) in the configLanguage parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x5m2-rcc8-3f3c/GHSA-x5m2-rcc8-3f3c.json b/advisories/unreviewed/2022/04/GHSA-x5m2-rcc8-3f3c/GHSA-x5m2-rcc8-3f3c.json index ccafd9fcdf0..df7a1fdf517 100644 --- a/advisories/unreviewed/2022/04/GHSA-x5m2-rcc8-3f3c/GHSA-x5m2-rcc8-3f3c.json +++ b/advisories/unreviewed/2022/04/GHSA-x5m2-rcc8-3f3c/GHSA-x5m2-rcc8-3f3c.json @@ -7,12 +7,8 @@ "CVE-2002-1610" ], "details": "Unknown vulnerability in ping in HP Tru64 UNIX 5.1a, 5.1, 5.0a, 4.0g, and 4.0f allows local users to cause a denial of service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x68p-r7vw-4j57/GHSA-x68p-r7vw-4j57.json b/advisories/unreviewed/2022/04/GHSA-x68p-r7vw-4j57/GHSA-x68p-r7vw-4j57.json index 84256631805..7ac2d4bcff0 100644 --- a/advisories/unreviewed/2022/04/GHSA-x68p-r7vw-4j57/GHSA-x68p-r7vw-4j57.json +++ b/advisories/unreviewed/2022/04/GHSA-x68p-r7vw-4j57/GHSA-x68p-r7vw-4j57.json @@ -7,12 +7,8 @@ "CVE-2002-1548" ], "details": "Unknown vulnerability in autofs on AIX 4.3.0, when using executable maps, allows attackers to execute arbitrary commands as root, possibly related to \"string handling around how the executable map is called.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x986-xw32-v39g/GHSA-x986-xw32-v39g.json b/advisories/unreviewed/2022/04/GHSA-x986-xw32-v39g/GHSA-x986-xw32-v39g.json index 5def1365444..041b167e666 100644 --- a/advisories/unreviewed/2022/04/GHSA-x986-xw32-v39g/GHSA-x986-xw32-v39g.json +++ b/advisories/unreviewed/2022/04/GHSA-x986-xw32-v39g/GHSA-x986-xw32-v39g.json @@ -7,12 +7,8 @@ "CVE-2002-1619" ], "details": "Buffer overflow in the FC client for IBM AIX 4.3.x allows remote attackers to cause a denial of service (crash and core dump).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xc79-9vgp-q8cm/GHSA-xc79-9vgp-q8cm.json b/advisories/unreviewed/2022/04/GHSA-xc79-9vgp-q8cm/GHSA-xc79-9vgp-q8cm.json index 52225e356cb..3203d7a22fa 100644 --- a/advisories/unreviewed/2022/04/GHSA-xc79-9vgp-q8cm/GHSA-xc79-9vgp-q8cm.json +++ b/advisories/unreviewed/2022/04/GHSA-xc79-9vgp-q8cm/GHSA-xc79-9vgp-q8cm.json @@ -7,12 +7,8 @@ "CVE-2002-1603" ], "details": "GoAhead Web Server 2.1.7 and earlier allows remote attackers to obtain the source code of ASP files via a URL terminated with a /, \\, %2f (encoded /), %20 (encoded space), or %00 (encoded null) character, which returns the ASP source code unparsed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xcqr-pm35-6p88/GHSA-xcqr-pm35-6p88.json b/advisories/unreviewed/2022/04/GHSA-xcqr-pm35-6p88/GHSA-xcqr-pm35-6p88.json index 7635f6fe88d..68a2fe240c2 100644 --- a/advisories/unreviewed/2022/04/GHSA-xcqr-pm35-6p88/GHSA-xcqr-pm35-6p88.json +++ b/advisories/unreviewed/2022/04/GHSA-xcqr-pm35-6p88/GHSA-xcqr-pm35-6p88.json @@ -7,12 +7,8 @@ "CVE-2002-1401" ], "details": "Buffer overflows in (1) circle_poly, (2) path_encode and (3) path_add (also incorrectly identified as path_addr) for PostgreSQL 7.2.3 and earlier allow attackers to cause a denial of service and possibly execute arbitrary code, possibly as a result of an integer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-xf47-834w-q9wp/GHSA-xf47-834w-q9wp.json b/advisories/unreviewed/2022/04/GHSA-xf47-834w-q9wp/GHSA-xf47-834w-q9wp.json index 490a4abe9f1..d8c0c30e3de 100644 --- a/advisories/unreviewed/2022/04/GHSA-xf47-834w-q9wp/GHSA-xf47-834w-q9wp.json +++ b/advisories/unreviewed/2022/04/GHSA-xf47-834w-q9wp/GHSA-xf47-834w-q9wp.json @@ -7,12 +7,8 @@ "CVE-2002-1558" ], "details": "Cisco ONS15454 and ONS15327 running ONS before 3.4 have an account for the VxWorks Operating System in the TCC, TCC+ and XTC that cannot be changed or disabled, which allows remote attackers to gain privileges by connecting to the account via Telnet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xfr5-86r6-8jvf/GHSA-xfr5-86r6-8jvf.json b/advisories/unreviewed/2022/04/GHSA-xfr5-86r6-8jvf/GHSA-xfr5-86r6-8jvf.json index c4e2a9eeb12..419f232b187 100644 --- a/advisories/unreviewed/2022/04/GHSA-xfr5-86r6-8jvf/GHSA-xfr5-86r6-8jvf.json +++ b/advisories/unreviewed/2022/04/GHSA-xfr5-86r6-8jvf/GHSA-xfr5-86r6-8jvf.json @@ -7,12 +7,8 @@ "CVE-2002-1435" ], "details": "class.atkdateattribute.js.php in Achievo 0.7.0 through 0.9.1, except 0.8.2, allows remote attackers to execute arbitrary PHP code when the 'allow_url_fopen' setting is enabled via a URL in the config_atkroot parameter that points to the code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xg9x-3893-67r8/GHSA-xg9x-3893-67r8.json b/advisories/unreviewed/2022/04/GHSA-xg9x-3893-67r8/GHSA-xg9x-3893-67r8.json index 30ec62d912e..e1e8c033aa0 100644 --- a/advisories/unreviewed/2022/04/GHSA-xg9x-3893-67r8/GHSA-xg9x-3893-67r8.json +++ b/advisories/unreviewed/2022/04/GHSA-xg9x-3893-67r8/GHSA-xg9x-3893-67r8.json @@ -7,12 +7,8 @@ "CVE-2002-1421" ], "details": "SQL injection vulnerabilities in FUDforum before 2.2.0 allow remote attackers to perform unauthorized database operations via (1) report.php, (2) selmsg.php, and (3) showposts.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xq9c-7q38-2j2j/GHSA-xq9c-7q38-2j2j.json b/advisories/unreviewed/2022/04/GHSA-xq9c-7q38-2j2j/GHSA-xq9c-7q38-2j2j.json index d00aa733757..e0a3ac35952 100644 --- a/advisories/unreviewed/2022/04/GHSA-xq9c-7q38-2j2j/GHSA-xq9c-7q38-2j2j.json +++ b/advisories/unreviewed/2022/04/GHSA-xq9c-7q38-2j2j/GHSA-xq9c-7q38-2j2j.json @@ -7,12 +7,8 @@ "CVE-2002-1754" ], "details": "Buffer overflow in Novell NetWare Client 4.80 through 4.83 allows local users to cause a denial of service (crash) by using ping, traceroute, or a similar utility to force the client to resolve a large hostname.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xqmh-wj7x-9rxf/GHSA-xqmh-wj7x-9rxf.json b/advisories/unreviewed/2022/04/GHSA-xqmh-wj7x-9rxf/GHSA-xqmh-wj7x-9rxf.json index 3a1e89d975e..6f1781b0884 100644 --- a/advisories/unreviewed/2022/04/GHSA-xqmh-wj7x-9rxf/GHSA-xqmh-wj7x-9rxf.json +++ b/advisories/unreviewed/2022/04/GHSA-xqmh-wj7x-9rxf/GHSA-xqmh-wj7x-9rxf.json @@ -7,12 +7,8 @@ "CVE-2002-1689" ], "details": "Unknown vulnerability in the login program on AIX before 4.0 could allow remote users to specify 100 or more environment variables when logging on, which exceeds the length of a certain string, possibly triggering a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xqwh-8hgm-j77v/GHSA-xqwh-8hgm-j77v.json b/advisories/unreviewed/2022/04/GHSA-xqwh-8hgm-j77v/GHSA-xqwh-8hgm-j77v.json index c82ae8077b3..b1842b5315c 100644 --- a/advisories/unreviewed/2022/04/GHSA-xqwh-8hgm-j77v/GHSA-xqwh-8hgm-j77v.json +++ b/advisories/unreviewed/2022/04/GHSA-xqwh-8hgm-j77v/GHSA-xqwh-8hgm-j77v.json @@ -7,12 +7,8 @@ "CVE-2002-1643" ], "details": "Multiple buffer overflows in RealNetworks Helix Universal Server 9.0 (9.0.2.768) allow remote attackers to execute arbitrary code via (1) a long Transport field in a SETUP RTSP request, (2) a DESCRIBE RTSP request with a long URL argument, or (3) two simultaneous HTTP GET requests with long arguments.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xrcg-gh3c-46m5/GHSA-xrcg-gh3c-46m5.json b/advisories/unreviewed/2022/04/GHSA-xrcg-gh3c-46m5/GHSA-xrcg-gh3c-46m5.json index d7b25df6b8c..f5e21690d17 100644 --- a/advisories/unreviewed/2022/04/GHSA-xrcg-gh3c-46m5/GHSA-xrcg-gh3c-46m5.json +++ b/advisories/unreviewed/2022/04/GHSA-xrcg-gh3c-46m5/GHSA-xrcg-gh3c-46m5.json @@ -7,12 +7,8 @@ "CVE-2002-1489" ], "details": "Buffer overflow in PlanetDNS PlanetWeb 1.14 and earlier allows remote attackers to execute arbitrary code via (1) an HTTP GET request with a long URL or (2) a request with a long method name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xvr5-gpgm-56cv/GHSA-xvr5-gpgm-56cv.json b/advisories/unreviewed/2022/04/GHSA-xvr5-gpgm-56cv/GHSA-xvr5-gpgm-56cv.json index 1a3716380ae..3784eafcd91 100644 --- a/advisories/unreviewed/2022/04/GHSA-xvr5-gpgm-56cv/GHSA-xvr5-gpgm-56cv.json +++ b/advisories/unreviewed/2022/04/GHSA-xvr5-gpgm-56cv/GHSA-xvr5-gpgm-56cv.json @@ -7,12 +7,8 @@ "CVE-2002-1621" ], "details": "Buffer overflow in the file_comp function in rcp for IBM AIX 4.3.x and 5.1 allows remote attackers to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xvvg-qwqf-w23x/GHSA-xvvg-qwqf-w23x.json b/advisories/unreviewed/2022/04/GHSA-xvvg-qwqf-w23x/GHSA-xvvg-qwqf-w23x.json index bc6c27155d7..0706713f53b 100644 --- a/advisories/unreviewed/2022/04/GHSA-xvvg-qwqf-w23x/GHSA-xvvg-qwqf-w23x.json +++ b/advisories/unreviewed/2022/04/GHSA-xvvg-qwqf-w23x/GHSA-xvvg-qwqf-w23x.json @@ -7,12 +7,8 @@ "CVE-2002-1513" ], "details": "The UCX POP server in HP TCP/IP services for OpenVMS 4.2 through 5.3 allows local users to truncate arbitrary files via the -logfile command line option, which overrides file system permissions because the server runs with the SYSPRV and BYPASS privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xxfm-x6r9-cf2j/GHSA-xxfm-x6r9-cf2j.json b/advisories/unreviewed/2022/04/GHSA-xxfm-x6r9-cf2j/GHSA-xxfm-x6r9-cf2j.json index d35cc4cd677..04cfed4a70e 100644 --- a/advisories/unreviewed/2022/04/GHSA-xxfm-x6r9-cf2j/GHSA-xxfm-x6r9-cf2j.json +++ b/advisories/unreviewed/2022/04/GHSA-xxfm-x6r9-cf2j/GHSA-xxfm-x6r9-cf2j.json @@ -7,12 +7,8 @@ "CVE-2002-1456" ], "details": "Buffer overflow in mIRC 6.0.2 and earlier allows remote attackers to execute arbitrary code via a long $asctime value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xxjj-crx8-rwgg/GHSA-xxjj-crx8-rwgg.json b/advisories/unreviewed/2022/04/GHSA-xxjj-crx8-rwgg/GHSA-xxjj-crx8-rwgg.json index 165c7b97e62..656c48d1640 100644 --- a/advisories/unreviewed/2022/04/GHSA-xxjj-crx8-rwgg/GHSA-xxjj-crx8-rwgg.json +++ b/advisories/unreviewed/2022/04/GHSA-xxjj-crx8-rwgg/GHSA-xxjj-crx8-rwgg.json @@ -7,12 +7,8 @@ "CVE-2002-1593" ], "details": "mod_dav in Apache before 2.0.42 does not properly handle versioning hooks, which may allow remote attackers to kill a child process via a null dereference and cause a denial of service (CPU consumption) in a preforked multi-processing module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -88,9 +84,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-239w-4f3w-cfcv/GHSA-239w-4f3w-cfcv.json b/advisories/unreviewed/2022/05/GHSA-239w-4f3w-cfcv/GHSA-239w-4f3w-cfcv.json index 3ee28f1d423..0a26e20d4eb 100644 --- a/advisories/unreviewed/2022/05/GHSA-239w-4f3w-cfcv/GHSA-239w-4f3w-cfcv.json +++ b/advisories/unreviewed/2022/05/GHSA-239w-4f3w-cfcv/GHSA-239w-4f3w-cfcv.json @@ -7,12 +7,8 @@ "CVE-2021-29039" ], "details": "Cross-site scripting (XSS) vulnerability in the Asset module's categories administration page in Liferay Portal 7.3.4 allows remote attackers to inject arbitrary web script or HTML via the site name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-24cc-98rp-8qhg/GHSA-24cc-98rp-8qhg.json b/advisories/unreviewed/2022/05/GHSA-24cc-98rp-8qhg/GHSA-24cc-98rp-8qhg.json index 71f90f349f6..3d968cca6d9 100644 --- a/advisories/unreviewed/2022/05/GHSA-24cc-98rp-8qhg/GHSA-24cc-98rp-8qhg.json +++ b/advisories/unreviewed/2022/05/GHSA-24cc-98rp-8qhg/GHSA-24cc-98rp-8qhg.json @@ -7,12 +7,8 @@ "CVE-2021-31464" ], "details": "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-13574.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-255g-8gjp-2wq6/GHSA-255g-8gjp-2wq6.json b/advisories/unreviewed/2022/05/GHSA-255g-8gjp-2wq6/GHSA-255g-8gjp-2wq6.json index 720da10e4e2..1a47d6e83af 100644 --- a/advisories/unreviewed/2022/05/GHSA-255g-8gjp-2wq6/GHSA-255g-8gjp-2wq6.json +++ b/advisories/unreviewed/2022/05/GHSA-255g-8gjp-2wq6/GHSA-255g-8gjp-2wq6.json @@ -7,12 +7,8 @@ "CVE-2021-27342" ], "details": "An authentication brute-force protection mechanism bypass in telnetd in D-Link Router model DIR-842 firmware version 3.0.2 allows a remote attacker to circumvent the anti-brute-force cool-down delay period via a timing-based side-channel attack", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-279r-fmjg-85qx/GHSA-279r-fmjg-85qx.json b/advisories/unreviewed/2022/05/GHSA-279r-fmjg-85qx/GHSA-279r-fmjg-85qx.json index de4840421c2..96167895dd2 100644 --- a/advisories/unreviewed/2022/05/GHSA-279r-fmjg-85qx/GHSA-279r-fmjg-85qx.json +++ b/advisories/unreviewed/2022/05/GHSA-279r-fmjg-85qx/GHSA-279r-fmjg-85qx.json @@ -7,12 +7,8 @@ "CVE-2021-31469" ], "details": "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-12936.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-27fg-773w-qwfr/GHSA-27fg-773w-qwfr.json b/advisories/unreviewed/2022/05/GHSA-27fg-773w-qwfr/GHSA-27fg-773w-qwfr.json index d70f9ea35c3..47cd982c6d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-27fg-773w-qwfr/GHSA-27fg-773w-qwfr.json +++ b/advisories/unreviewed/2022/05/GHSA-27fg-773w-qwfr/GHSA-27fg-773w-qwfr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-27h4-m228-rwm7/GHSA-27h4-m228-rwm7.json b/advisories/unreviewed/2022/05/GHSA-27h4-m228-rwm7/GHSA-27h4-m228-rwm7.json index 06d7d31fb52..88363b514e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-27h4-m228-rwm7/GHSA-27h4-m228-rwm7.json +++ b/advisories/unreviewed/2022/05/GHSA-27h4-m228-rwm7/GHSA-27h4-m228-rwm7.json @@ -7,12 +7,8 @@ "CVE-2021-25845" ], "details": "Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a NULL pointer dereference via a crafted lldp packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2837-v5j7-qwmh/GHSA-2837-v5j7-qwmh.json b/advisories/unreviewed/2022/05/GHSA-2837-v5j7-qwmh/GHSA-2837-v5j7-qwmh.json index 758e3ffa5d8..2e2561cbecb 100644 --- a/advisories/unreviewed/2022/05/GHSA-2837-v5j7-qwmh/GHSA-2837-v5j7-qwmh.json +++ b/advisories/unreviewed/2022/05/GHSA-2837-v5j7-qwmh/GHSA-2837-v5j7-qwmh.json @@ -7,12 +7,8 @@ "CVE-2021-3423" ], "details": "Uncontrolled Search Path Element vulnerability in the openssl component as used in Bitdefender GravityZone Business Security allows an attacker to load a third party DLL to elevate privileges. This issue affects Bitdefender GravityZone Business Security versions prior to 6.6.23.329.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2c5f-4477-2248/GHSA-2c5f-4477-2248.json b/advisories/unreviewed/2022/05/GHSA-2c5f-4477-2248/GHSA-2c5f-4477-2248.json index 8984bf1c57a..17a0339f9f7 100644 --- a/advisories/unreviewed/2022/05/GHSA-2c5f-4477-2248/GHSA-2c5f-4477-2248.json +++ b/advisories/unreviewed/2022/05/GHSA-2c5f-4477-2248/GHSA-2c5f-4477-2248.json @@ -7,12 +7,8 @@ "CVE-2020-29205" ], "details": "XSS in signup form in Project Worlds Online Examination System 1.0 allows remote attacker to inject arbitrary code via the name field", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2c7q-h8gj-7hgc/GHSA-2c7q-h8gj-7hgc.json b/advisories/unreviewed/2022/05/GHSA-2c7q-h8gj-7hgc/GHSA-2c7q-h8gj-7hgc.json index 33e5a3503d1..b1298c256ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-2c7q-h8gj-7hgc/GHSA-2c7q-h8gj-7hgc.json +++ b/advisories/unreviewed/2022/05/GHSA-2c7q-h8gj-7hgc/GHSA-2c7q-h8gj-7hgc.json @@ -7,12 +7,8 @@ "CVE-2021-3402" ], "details": "An integer overflow and several buffer overflow reads in libyara/modules/macho/macho.c in YARA v4.0.3 and earlier could allow an attacker to either cause denial of service or information disclosure via a malicious Mach-O file. Affects all versions before libyara 4.0.4", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2f39-fqh2-875p/GHSA-2f39-fqh2-875p.json b/advisories/unreviewed/2022/05/GHSA-2f39-fqh2-875p/GHSA-2f39-fqh2-875p.json index 3edf74d2474..6a7a28c3750 100644 --- a/advisories/unreviewed/2022/05/GHSA-2f39-fqh2-875p/GHSA-2f39-fqh2-875p.json +++ b/advisories/unreviewed/2022/05/GHSA-2f39-fqh2-875p/GHSA-2f39-fqh2-875p.json @@ -7,12 +7,8 @@ "CVE-2020-24740" ], "details": "An issue was discovered in Pluck 4.7.10-dev2. There is a CSRF vulnerability that can editpage via a /admin.php?action=editpage", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2gq5-rpfx-46r3/GHSA-2gq5-rpfx-46r3.json b/advisories/unreviewed/2022/05/GHSA-2gq5-rpfx-46r3/GHSA-2gq5-rpfx-46r3.json index ed9bfd2d6a6..4f25113db9b 100644 --- a/advisories/unreviewed/2022/05/GHSA-2gq5-rpfx-46r3/GHSA-2gq5-rpfx-46r3.json +++ b/advisories/unreviewed/2022/05/GHSA-2gq5-rpfx-46r3/GHSA-2gq5-rpfx-46r3.json @@ -7,12 +7,8 @@ "CVE-2021-27383" ], "details": "A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\\\" & 15\\\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels 4\\\" - 22\\\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced (All versions < V16 Update 4). SmartVNC has a heap allocation leak vulnerability in the server Tight encoder, which could result in a Denial-of-Service condition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2hcg-p6j5-29mm/GHSA-2hcg-p6j5-29mm.json b/advisories/unreviewed/2022/05/GHSA-2hcg-p6j5-29mm/GHSA-2hcg-p6j5-29mm.json index 7919fcb3d60..65e98ed2a7e 100644 --- a/advisories/unreviewed/2022/05/GHSA-2hcg-p6j5-29mm/GHSA-2hcg-p6j5-29mm.json +++ b/advisories/unreviewed/2022/05/GHSA-2hcg-p6j5-29mm/GHSA-2hcg-p6j5-29mm.json @@ -7,12 +7,8 @@ "CVE-2021-1358" ], "details": "A vulnerability in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to redirect a user to an undesired web page. This vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to an affected system. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to cause the interface to redirect the user to a specific, malicious URL. This type of vulnerability is known as an open redirect and is used in phishing attacks that get users to unknowingly visit malicious sites.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2p62-w27q-9g83/GHSA-2p62-w27q-9g83.json b/advisories/unreviewed/2022/05/GHSA-2p62-w27q-9g83/GHSA-2p62-w27q-9g83.json index 742405db440..0bc3654d654 100644 --- a/advisories/unreviewed/2022/05/GHSA-2p62-w27q-9g83/GHSA-2p62-w27q-9g83.json +++ b/advisories/unreviewed/2022/05/GHSA-2p62-w27q-9g83/GHSA-2p62-w27q-9g83.json @@ -7,12 +7,8 @@ "CVE-2021-22866" ], "details": "A UI misrepresentation vulnerability was identified in GitHub Enterprise Server that allowed more permissions to be granted during a GitHub App's user-authorization web flow than was displayed to the user during approval. To exploit this vulnerability, an attacker would need to create a GitHub App on the instance and have a user authorize the application through the web authentication flow. All permissions being granted would properly be shown during the first authorization, but in certain circumstances, if the user revisits the authorization flow after the GitHub App has configured additional user-level permissions, those additional permissions may not be shown, leading to more permissions being granted than the user potentially intended. This vulnerability affected GitHub Enterprise Server 3.0.x prior to 3.0.7 and 2.22.x prior to 2.22.13. It was fixed in versions 3.0.7 and 2.22.13. This vulnerability was reported via the GitHub Bug Bounty program.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2qgr-4j3q-qhg6/GHSA-2qgr-4j3q-qhg6.json b/advisories/unreviewed/2022/05/GHSA-2qgr-4j3q-qhg6/GHSA-2qgr-4j3q-qhg6.json index 8e960c17f2e..d0d1e7a759d 100644 --- a/advisories/unreviewed/2022/05/GHSA-2qgr-4j3q-qhg6/GHSA-2qgr-4j3q-qhg6.json +++ b/advisories/unreviewed/2022/05/GHSA-2qgr-4j3q-qhg6/GHSA-2qgr-4j3q-qhg6.json @@ -7,12 +7,8 @@ "CVE-2021-23009" ], "details": "On BIG-IP version 16.0.x before 16.0.1.1 and 15.1.x before 15.1.3, malformed HTTP/2 requests may cause an infinite loop which causes a Denial of Service for Data Plane traffic. TMM takes the configured HA action when the TMM process is aborted. There is no control plane exposure, this is a data plane issue only. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2rmc-f234-xhg3/GHSA-2rmc-f234-xhg3.json b/advisories/unreviewed/2022/05/GHSA-2rmc-f234-xhg3/GHSA-2rmc-f234-xhg3.json index e34a2675084..0eb00492fab 100644 --- a/advisories/unreviewed/2022/05/GHSA-2rmc-f234-xhg3/GHSA-2rmc-f234-xhg3.json +++ b/advisories/unreviewed/2022/05/GHSA-2rmc-f234-xhg3/GHSA-2rmc-f234-xhg3.json @@ -7,12 +7,8 @@ "CVE-2020-21835" ], "details": "A null pointer deference issue exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2337.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2v8q-5wcx-2f5j/GHSA-2v8q-5wcx-2f5j.json b/advisories/unreviewed/2022/05/GHSA-2v8q-5wcx-2f5j/GHSA-2v8q-5wcx-2f5j.json index 4e47c3f3d28..618c287ab26 100644 --- a/advisories/unreviewed/2022/05/GHSA-2v8q-5wcx-2f5j/GHSA-2v8q-5wcx-2f5j.json +++ b/advisories/unreviewed/2022/05/GHSA-2v8q-5wcx-2f5j/GHSA-2v8q-5wcx-2f5j.json @@ -7,12 +7,8 @@ "CVE-2021-26311" ], "details": "In the AMD SEV/SEV-ES feature, memory can be rearranged in the guest address space that is not detected by the attestation mechanism which could be used by a malicious hypervisor to potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2whj-gvjj-j382/GHSA-2whj-gvjj-j382.json b/advisories/unreviewed/2022/05/GHSA-2whj-gvjj-j382/GHSA-2whj-gvjj-j382.json index f5c17e18eb6..ce15009099e 100644 --- a/advisories/unreviewed/2022/05/GHSA-2whj-gvjj-j382/GHSA-2whj-gvjj-j382.json +++ b/advisories/unreviewed/2022/05/GHSA-2whj-gvjj-j382/GHSA-2whj-gvjj-j382.json @@ -7,12 +7,8 @@ "CVE-2020-25409" ], "details": "Projectsworlds College Management System Php 1.0 is vulnerable to SQL injection issues over multiple parameters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2wpc-xq3c-4c33/GHSA-2wpc-xq3c-4c33.json b/advisories/unreviewed/2022/05/GHSA-2wpc-xq3c-4c33/GHSA-2wpc-xq3c-4c33.json index 40a90e53c41..7f8dddf30cd 100644 --- a/advisories/unreviewed/2022/05/GHSA-2wpc-xq3c-4c33/GHSA-2wpc-xq3c-4c33.json +++ b/advisories/unreviewed/2022/05/GHSA-2wpc-xq3c-4c33/GHSA-2wpc-xq3c-4c33.json @@ -7,12 +7,8 @@ "CVE-2020-21842" ], "details": "A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_revhistory ../../src/decode.c:3051.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2x47-7chp-vgf9/GHSA-2x47-7chp-vgf9.json b/advisories/unreviewed/2022/05/GHSA-2x47-7chp-vgf9/GHSA-2x47-7chp-vgf9.json index e767e400f22..ff529c9d627 100644 --- a/advisories/unreviewed/2022/05/GHSA-2x47-7chp-vgf9/GHSA-2x47-7chp-vgf9.json +++ b/advisories/unreviewed/2022/05/GHSA-2x47-7chp-vgf9/GHSA-2x47-7chp-vgf9.json @@ -7,12 +7,8 @@ "CVE-2020-19274" ], "details": "A Cross SIte Scripting (XSS) vulnerability exists in Dhcms 2017-09-18 in guestbook via the message board, which could let a remote malicious user execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2xvp-rr3g-fp69/GHSA-2xvp-rr3g-fp69.json b/advisories/unreviewed/2022/05/GHSA-2xvp-rr3g-fp69/GHSA-2xvp-rr3g-fp69.json index 374feab89a5..7063f8a8e95 100644 --- a/advisories/unreviewed/2022/05/GHSA-2xvp-rr3g-fp69/GHSA-2xvp-rr3g-fp69.json +++ b/advisories/unreviewed/2022/05/GHSA-2xvp-rr3g-fp69/GHSA-2xvp-rr3g-fp69.json @@ -7,12 +7,8 @@ "CVE-2020-4765" ], "details": "IBM Cloud Pak for Multicloud Management prior to 2.3 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 188902.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-322r-7497-6cm7/GHSA-322r-7497-6cm7.json b/advisories/unreviewed/2022/05/GHSA-322r-7497-6cm7/GHSA-322r-7497-6cm7.json index c4f77abd443..f044820a005 100644 --- a/advisories/unreviewed/2022/05/GHSA-322r-7497-6cm7/GHSA-322r-7497-6cm7.json +++ b/advisories/unreviewed/2022/05/GHSA-322r-7497-6cm7/GHSA-322r-7497-6cm7.json @@ -7,12 +7,8 @@ "CVE-2021-23016" ], "details": "On BIG-IP APM versions 15.1.x before 15.1.3, 14.1.x before 14.1.4.1, 13.1.x before 13.1.4, and all versions of 16.0.x, 12.1.x, and 11.6.x, an attacker may be able to bypass APM's internal restrictions and retrieve static content that is hosted within APM by sending specifically crafted requests to an APM Virtual Server. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-326j-j9mx-gf84/GHSA-326j-j9mx-gf84.json b/advisories/unreviewed/2022/05/GHSA-326j-j9mx-gf84/GHSA-326j-j9mx-gf84.json index c7e7a7d5e4f..281767d201f 100644 --- a/advisories/unreviewed/2022/05/GHSA-326j-j9mx-gf84/GHSA-326j-j9mx-gf84.json +++ b/advisories/unreviewed/2022/05/GHSA-326j-j9mx-gf84/GHSA-326j-j9mx-gf84.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-33rm-jrgq-qgx9/GHSA-33rm-jrgq-qgx9.json b/advisories/unreviewed/2022/05/GHSA-33rm-jrgq-qgx9/GHSA-33rm-jrgq-qgx9.json index 2d136b4ea87..1afa767bf23 100644 --- a/advisories/unreviewed/2022/05/GHSA-33rm-jrgq-qgx9/GHSA-33rm-jrgq-qgx9.json +++ b/advisories/unreviewed/2022/05/GHSA-33rm-jrgq-qgx9/GHSA-33rm-jrgq-qgx9.json @@ -7,12 +7,8 @@ "CVE-2021-31827" ], "details": "In Progress MOVEit Transfer before 2021.0 (13.0), a SQL injection vulnerability has been found in the MOVEit Transfer web app that could allow an authenticated attacker to gain unauthorized access to MOVEit Transfer's database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database in addition to executing SQL statements that alter or destroy database elements. This is in MOVEit.DMZ.WebApp in SILHuman.vb.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-344v-jr69-x57c/GHSA-344v-jr69-x57c.json b/advisories/unreviewed/2022/05/GHSA-344v-jr69-x57c/GHSA-344v-jr69-x57c.json index d36b262a2de..b3c20f2d7fc 100644 --- a/advisories/unreviewed/2022/05/GHSA-344v-jr69-x57c/GHSA-344v-jr69-x57c.json +++ b/advisories/unreviewed/2022/05/GHSA-344v-jr69-x57c/GHSA-344v-jr69-x57c.json @@ -7,12 +7,8 @@ "CVE-2021-24279" ], "details": "In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, low level users, such as subscribers, could use the import_from_debug AJAX action to install any plugin from the WordPress repository.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-35p5-4434-v68p/GHSA-35p5-4434-v68p.json b/advisories/unreviewed/2022/05/GHSA-35p5-4434-v68p/GHSA-35p5-4434-v68p.json index 474f95b2d52..1ac987fd665 100644 --- a/advisories/unreviewed/2022/05/GHSA-35p5-4434-v68p/GHSA-35p5-4434-v68p.json +++ b/advisories/unreviewed/2022/05/GHSA-35p5-4434-v68p/GHSA-35p5-4434-v68p.json @@ -7,12 +7,8 @@ "CVE-2020-16632" ], "details": "A XSS Vulnerability in /uploads/dede/action_search.php in DedeCMS V5.7 SP2 allows an authenticated user to execute remote arbitrary code via the keyword parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-367c-j2f5-vj73/GHSA-367c-j2f5-vj73.json b/advisories/unreviewed/2022/05/GHSA-367c-j2f5-vj73/GHSA-367c-j2f5-vj73.json index 9d3dc078f55..3b6bc06f888 100644 --- a/advisories/unreviewed/2022/05/GHSA-367c-j2f5-vj73/GHSA-367c-j2f5-vj73.json +++ b/advisories/unreviewed/2022/05/GHSA-367c-j2f5-vj73/GHSA-367c-j2f5-vj73.json @@ -7,12 +7,8 @@ "CVE-2021-31322" ], "details": "Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LOTGradient::populate function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious animated sticker.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-36x8-2j7w-8439/GHSA-36x8-2j7w-8439.json b/advisories/unreviewed/2022/05/GHSA-36x8-2j7w-8439/GHSA-36x8-2j7w-8439.json index c32eab65beb..bfac41fa56d 100644 --- a/advisories/unreviewed/2022/05/GHSA-36x8-2j7w-8439/GHSA-36x8-2j7w-8439.json +++ b/advisories/unreviewed/2022/05/GHSA-36x8-2j7w-8439/GHSA-36x8-2j7w-8439.json @@ -7,12 +7,8 @@ "CVE-2020-12967" ], "details": "The lack of nested page table protection in the AMD SEV/SEV-ES feature could potentially lead to arbitrary code execution within the guest VM if a malicious administrator has access to compromise the server hypervisor.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-36xh-w73j-574g/GHSA-36xh-w73j-574g.json b/advisories/unreviewed/2022/05/GHSA-36xh-w73j-574g/GHSA-36xh-w73j-574g.json index 90a3f607fcd..dd33f30d68c 100644 --- a/advisories/unreviewed/2022/05/GHSA-36xh-w73j-574g/GHSA-36xh-w73j-574g.json +++ b/advisories/unreviewed/2022/05/GHSA-36xh-w73j-574g/GHSA-36xh-w73j-574g.json @@ -7,12 +7,8 @@ "CVE-2020-27840" ], "details": "A flaw was found in samba. Spaces used in a string around a domain name (DN), while supposed to be ignored, can cause invalid DN strings with spaces to instead write a zero-byte into out-of-bounds memory, resulting in a crash. The highest threat from this vulnerability is to system availability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3897-7ph5-mf8c/GHSA-3897-7ph5-mf8c.json b/advisories/unreviewed/2022/05/GHSA-3897-7ph5-mf8c/GHSA-3897-7ph5-mf8c.json index f180cce3515..0aec02e2d9c 100644 --- a/advisories/unreviewed/2022/05/GHSA-3897-7ph5-mf8c/GHSA-3897-7ph5-mf8c.json +++ b/advisories/unreviewed/2022/05/GHSA-3897-7ph5-mf8c/GHSA-3897-7ph5-mf8c.json @@ -7,12 +7,8 @@ "CVE-2021-24295" ], "details": "It was possible to exploit an Unauthenticated Time-Based Blind SQL Injection vulnerability in the Spam protection, AntiSpam, FireWall by CleanTalk WordPress Plugin before 5.153.4. The update_log function in lib/Cleantalk/ApbctWP/Firewall/SFW.php included a vulnerable query that could be injected via the User-Agent Header by manipulating the cookies set by the Spam protection, AntiSpam, FireWall by CleanTalk WordPress plugin before 5.153.4, sending an initial request to obtain a ct_sfw_pass_key cookie and then manually setting a separate ct_sfw_passed cookie and disallowing it from being reset.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-38ww-hmpv-8hc6/GHSA-38ww-hmpv-8hc6.json b/advisories/unreviewed/2022/05/GHSA-38ww-hmpv-8hc6/GHSA-38ww-hmpv-8hc6.json index 6f6c855942d..74679bb45a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-38ww-hmpv-8hc6/GHSA-38ww-hmpv-8hc6.json +++ b/advisories/unreviewed/2022/05/GHSA-38ww-hmpv-8hc6/GHSA-38ww-hmpv-8hc6.json @@ -7,12 +7,8 @@ "CVE-2020-21830" ], "details": "A heap based buffer overflow vulneraibility exists in GNU LibreDWG 0.10 via bit_calc_CRC ../../src/bits.c:2213.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-39wm-3xfh-4h5j/GHSA-39wm-3xfh-4h5j.json b/advisories/unreviewed/2022/05/GHSA-39wm-3xfh-4h5j/GHSA-39wm-3xfh-4h5j.json index 69d55c8c27a..b379d3e2f9c 100644 --- a/advisories/unreviewed/2022/05/GHSA-39wm-3xfh-4h5j/GHSA-39wm-3xfh-4h5j.json +++ b/advisories/unreviewed/2022/05/GHSA-39wm-3xfh-4h5j/GHSA-39wm-3xfh-4h5j.json @@ -7,12 +7,8 @@ "CVE-2020-18194" ], "details": "Cross Site Scripting (XSS) in emlog v6.0.0 allows remote attackers to execute arbitrary code by adding a crafted script as a link to a new blog post.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3ffh-qhc3-7r9v/GHSA-3ffh-qhc3-7r9v.json b/advisories/unreviewed/2022/05/GHSA-3ffh-qhc3-7r9v/GHSA-3ffh-qhc3-7r9v.json index 22e7e370fd8..920e802431f 100644 --- a/advisories/unreviewed/2022/05/GHSA-3ffh-qhc3-7r9v/GHSA-3ffh-qhc3-7r9v.json +++ b/advisories/unreviewed/2022/05/GHSA-3ffh-qhc3-7r9v/GHSA-3ffh-qhc3-7r9v.json @@ -7,12 +7,8 @@ "CVE-2021-20311" ], "details": "A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero in sRGBTransformImage() in the MagickCore/colorspace.c may trigger undefined behavior via a crafted image file that is submitted by an attacker processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3h5q-gg6w-2g7p/GHSA-3h5q-gg6w-2g7p.json b/advisories/unreviewed/2022/05/GHSA-3h5q-gg6w-2g7p/GHSA-3h5q-gg6w-2g7p.json index 50dff90b8c9..193b65b5b54 100644 --- a/advisories/unreviewed/2022/05/GHSA-3h5q-gg6w-2g7p/GHSA-3h5q-gg6w-2g7p.json +++ b/advisories/unreviewed/2022/05/GHSA-3h5q-gg6w-2g7p/GHSA-3h5q-gg6w-2g7p.json @@ -7,12 +7,8 @@ "CVE-2020-20214" ], "details": "Mikrotik RouterOs 6.44.6 (long-term tree) suffers from an assertion failure vulnerability in the btest process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3hx8-qgvh-chjg/GHSA-3hx8-qgvh-chjg.json b/advisories/unreviewed/2022/05/GHSA-3hx8-qgvh-chjg/GHSA-3hx8-qgvh-chjg.json index 35531c748a1..c3da736be85 100644 --- a/advisories/unreviewed/2022/05/GHSA-3hx8-qgvh-chjg/GHSA-3hx8-qgvh-chjg.json +++ b/advisories/unreviewed/2022/05/GHSA-3hx8-qgvh-chjg/GHSA-3hx8-qgvh-chjg.json @@ -7,12 +7,8 @@ "CVE-2021-30482" ], "details": "In JetBrains UpSource before 2020.1.1883, application passwords were not revoked correctly", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3jp4-jf35-6mq4/GHSA-3jp4-jf35-6mq4.json b/advisories/unreviewed/2022/05/GHSA-3jp4-jf35-6mq4/GHSA-3jp4-jf35-6mq4.json index 84bb10a8dfd..65d8305c602 100644 --- a/advisories/unreviewed/2022/05/GHSA-3jp4-jf35-6mq4/GHSA-3jp4-jf35-6mq4.json +++ b/advisories/unreviewed/2022/05/GHSA-3jp4-jf35-6mq4/GHSA-3jp4-jf35-6mq4.json @@ -7,12 +7,8 @@ "CVE-2021-20428" ], "details": "IBM Security Guardium 11.2 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196315.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3p4j-j4x8-76j4/GHSA-3p4j-j4x8-76j4.json b/advisories/unreviewed/2022/05/GHSA-3p4j-j4x8-76j4/GHSA-3p4j-j4x8-76j4.json index 3dea7fb248f..7569758cf69 100644 --- a/advisories/unreviewed/2022/05/GHSA-3p4j-j4x8-76j4/GHSA-3p4j-j4x8-76j4.json +++ b/advisories/unreviewed/2022/05/GHSA-3p4j-j4x8-76j4/GHSA-3p4j-j4x8-76j4.json @@ -7,12 +7,8 @@ "CVE-2021-27461" ], "details": "A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected webserver applications allow access to stored data that can be obtained by using specially crafted URLs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3q58-8ch7-h333/GHSA-3q58-8ch7-h333.json b/advisories/unreviewed/2022/05/GHSA-3q58-8ch7-h333/GHSA-3q58-8ch7-h333.json index b40c64fa132..74e1fbd26ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-3q58-8ch7-h333/GHSA-3q58-8ch7-h333.json +++ b/advisories/unreviewed/2022/05/GHSA-3q58-8ch7-h333/GHSA-3q58-8ch7-h333.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3qpw-8jg3-xjrh/GHSA-3qpw-8jg3-xjrh.json b/advisories/unreviewed/2022/05/GHSA-3qpw-8jg3-xjrh/GHSA-3qpw-8jg3-xjrh.json index 72ad26045cb..cf96b44ddec 100644 --- a/advisories/unreviewed/2022/05/GHSA-3qpw-8jg3-xjrh/GHSA-3qpw-8jg3-xjrh.json +++ b/advisories/unreviewed/2022/05/GHSA-3qpw-8jg3-xjrh/GHSA-3qpw-8jg3-xjrh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3qr3-52j3-m3gp/GHSA-3qr3-52j3-m3gp.json b/advisories/unreviewed/2022/05/GHSA-3qr3-52j3-m3gp/GHSA-3qr3-52j3-m3gp.json index 1f10c4f0836..f867b730fb6 100644 --- a/advisories/unreviewed/2022/05/GHSA-3qr3-52j3-m3gp/GHSA-3qr3-52j3-m3gp.json +++ b/advisories/unreviewed/2022/05/GHSA-3qr3-52j3-m3gp/GHSA-3qr3-52j3-m3gp.json @@ -7,12 +7,8 @@ "CVE-2021-20559" ], "details": "IBM Control Desk 7.6.1.2 and 7.6.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199228.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3vhj-m86h-3wmf/GHSA-3vhj-m86h-3wmf.json b/advisories/unreviewed/2022/05/GHSA-3vhj-m86h-3wmf/GHSA-3vhj-m86h-3wmf.json index 26e64b263c0..0a7082ad498 100644 --- a/advisories/unreviewed/2022/05/GHSA-3vhj-m86h-3wmf/GHSA-3vhj-m86h-3wmf.json +++ b/advisories/unreviewed/2022/05/GHSA-3vhj-m86h-3wmf/GHSA-3vhj-m86h-3wmf.json @@ -7,12 +7,8 @@ "CVE-2021-20535" ], "details": "IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 198834.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4236-36gg-25m7/GHSA-4236-36gg-25m7.json b/advisories/unreviewed/2022/05/GHSA-4236-36gg-25m7/GHSA-4236-36gg-25m7.json index 355975f6921..5ab225179c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-4236-36gg-25m7/GHSA-4236-36gg-25m7.json +++ b/advisories/unreviewed/2022/05/GHSA-4236-36gg-25m7/GHSA-4236-36gg-25m7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-439g-6pcw-pgj7/GHSA-439g-6pcw-pgj7.json b/advisories/unreviewed/2022/05/GHSA-439g-6pcw-pgj7/GHSA-439g-6pcw-pgj7.json index 025c147b410..8a3123d53e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-439g-6pcw-pgj7/GHSA-439g-6pcw-pgj7.json +++ b/advisories/unreviewed/2022/05/GHSA-439g-6pcw-pgj7/GHSA-439g-6pcw-pgj7.json @@ -7,12 +7,8 @@ "CVE-2021-31915" ], "details": "In JetBrains TeamCity before 2020.2.4, OS command injection leading to remote code execution was possible.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-43xw-wcqh-j8wq/GHSA-43xw-wcqh-j8wq.json b/advisories/unreviewed/2022/05/GHSA-43xw-wcqh-j8wq/GHSA-43xw-wcqh-j8wq.json index 10d5319e8e8..5073df84519 100644 --- a/advisories/unreviewed/2022/05/GHSA-43xw-wcqh-j8wq/GHSA-43xw-wcqh-j8wq.json +++ b/advisories/unreviewed/2022/05/GHSA-43xw-wcqh-j8wq/GHSA-43xw-wcqh-j8wq.json @@ -7,12 +7,8 @@ "CVE-2021-29022" ], "details": "In InvoicePlane 1.5.11, the upload feature discloses the full path of the file upload directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-444h-8mr2-wm66/GHSA-444h-8mr2-wm66.json b/advisories/unreviewed/2022/05/GHSA-444h-8mr2-wm66/GHSA-444h-8mr2-wm66.json index b26fb5b2fcb..c0b506ce28d 100644 --- a/advisories/unreviewed/2022/05/GHSA-444h-8mr2-wm66/GHSA-444h-8mr2-wm66.json +++ b/advisories/unreviewed/2022/05/GHSA-444h-8mr2-wm66/GHSA-444h-8mr2-wm66.json @@ -7,12 +7,8 @@ "CVE-2021-25662" ], "details": "A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\\\" & 15\\\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels 4\\\" - 22\\\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced (All versions < V16 Update 4). SmartVNC client fails to handle an exception properly if the program execution process is modified after sending a packet from the server, which could result in a Denial-of-Service condition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-44p7-qpr4-rgvf/GHSA-44p7-qpr4-rgvf.json b/advisories/unreviewed/2022/05/GHSA-44p7-qpr4-rgvf/GHSA-44p7-qpr4-rgvf.json index 7e7eef23617..3eb90b362c1 100644 --- a/advisories/unreviewed/2022/05/GHSA-44p7-qpr4-rgvf/GHSA-44p7-qpr4-rgvf.json +++ b/advisories/unreviewed/2022/05/GHSA-44p7-qpr4-rgvf/GHSA-44p7-qpr4-rgvf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-473m-ppf7-95wq/GHSA-473m-ppf7-95wq.json b/advisories/unreviewed/2022/05/GHSA-473m-ppf7-95wq/GHSA-473m-ppf7-95wq.json index 206a9303dbe..466de2ff8b5 100644 --- a/advisories/unreviewed/2022/05/GHSA-473m-ppf7-95wq/GHSA-473m-ppf7-95wq.json +++ b/advisories/unreviewed/2022/05/GHSA-473m-ppf7-95wq/GHSA-473m-ppf7-95wq.json @@ -7,12 +7,8 @@ "CVE-2021-20988" ], "details": "In Hilscher rcX RTOS versions prios to V2.1.14.1 the actual UDP packet length is not verified against the length indicated by the packet. This may lead to a denial of service of the affected device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-474g-w58m-p2m4/GHSA-474g-w58m-p2m4.json b/advisories/unreviewed/2022/05/GHSA-474g-w58m-p2m4/GHSA-474g-w58m-p2m4.json index 891d02ee8a1..9f8c207ca7a 100644 --- a/advisories/unreviewed/2022/05/GHSA-474g-w58m-p2m4/GHSA-474g-w58m-p2m4.json +++ b/advisories/unreviewed/2022/05/GHSA-474g-w58m-p2m4/GHSA-474g-w58m-p2m4.json @@ -7,12 +7,8 @@ "CVE-2021-31903" ], "details": "In JetBrains YouTrack before 2021.1.9819, a pull request's title was sanitized insufficiently, leading to XSS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-48rv-q8qm-4x9h/GHSA-48rv-q8qm-4x9h.json b/advisories/unreviewed/2022/05/GHSA-48rv-q8qm-4x9h/GHSA-48rv-q8qm-4x9h.json index a7ed9bb2140..418bf24b120 100644 --- a/advisories/unreviewed/2022/05/GHSA-48rv-q8qm-4x9h/GHSA-48rv-q8qm-4x9h.json +++ b/advisories/unreviewed/2022/05/GHSA-48rv-q8qm-4x9h/GHSA-48rv-q8qm-4x9h.json @@ -7,12 +7,8 @@ "CVE-2021-23910" ], "details": "An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. There is an out-of-bounds array access in RemoteDiagnosisApp.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-49jq-grx2-66xr/GHSA-49jq-grx2-66xr.json b/advisories/unreviewed/2022/05/GHSA-49jq-grx2-66xr/GHSA-49jq-grx2-66xr.json index 7d84818529b..e437a704bbd 100644 --- a/advisories/unreviewed/2022/05/GHSA-49jq-grx2-66xr/GHSA-49jq-grx2-66xr.json +++ b/advisories/unreviewed/2022/05/GHSA-49jq-grx2-66xr/GHSA-49jq-grx2-66xr.json @@ -7,12 +7,8 @@ "CVE-2020-21832" ], "details": "A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_compressed_section ../../src/decode.c:2417.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4c4c-c4fg-2wpp/GHSA-4c4c-c4fg-2wpp.json b/advisories/unreviewed/2022/05/GHSA-4c4c-c4fg-2wpp/GHSA-4c4c-c4fg-2wpp.json index 7340acc76e0..22acac7f910 100644 --- a/advisories/unreviewed/2022/05/GHSA-4c4c-c4fg-2wpp/GHSA-4c4c-c4fg-2wpp.json +++ b/advisories/unreviewed/2022/05/GHSA-4c4c-c4fg-2wpp/GHSA-4c4c-c4fg-2wpp.json @@ -7,12 +7,8 @@ "CVE-2021-32094" ], "details": "U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to upload arbitrary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4f2c-7x9q-gqpq/GHSA-4f2c-7x9q-gqpq.json b/advisories/unreviewed/2022/05/GHSA-4f2c-7x9q-gqpq/GHSA-4f2c-7x9q-gqpq.json index 40f2302dc02..724fbbccb85 100644 --- a/advisories/unreviewed/2022/05/GHSA-4f2c-7x9q-gqpq/GHSA-4f2c-7x9q-gqpq.json +++ b/advisories/unreviewed/2022/05/GHSA-4f2c-7x9q-gqpq/GHSA-4f2c-7x9q-gqpq.json @@ -7,12 +7,8 @@ "CVE-2020-21844" ], "details": "GNU LibreDWG 0.10 is affected by: memcpy-param-overlap. The impact is: execute arbitrary code (remote). The component is: read_2004_section_header ../../src/decode.c:2580.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4f2x-69hh-286c/GHSA-4f2x-69hh-286c.json b/advisories/unreviewed/2022/05/GHSA-4f2x-69hh-286c/GHSA-4f2x-69hh-286c.json index 708deafe3f8..b6095ad7044 100644 --- a/advisories/unreviewed/2022/05/GHSA-4f2x-69hh-286c/GHSA-4f2x-69hh-286c.json +++ b/advisories/unreviewed/2022/05/GHSA-4f2x-69hh-286c/GHSA-4f2x-69hh-286c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4fx8-82f3-xcpc/GHSA-4fx8-82f3-xcpc.json b/advisories/unreviewed/2022/05/GHSA-4fx8-82f3-xcpc/GHSA-4fx8-82f3-xcpc.json index 13127b2e6ff..e2f99b0d7b9 100644 --- a/advisories/unreviewed/2022/05/GHSA-4fx8-82f3-xcpc/GHSA-4fx8-82f3-xcpc.json +++ b/advisories/unreviewed/2022/05/GHSA-4fx8-82f3-xcpc/GHSA-4fx8-82f3-xcpc.json @@ -7,12 +7,8 @@ "CVE-2021-29048" ], "details": "Cross-site scripting (XSS) vulnerability in the Layout module's page administration page in Liferay Portal 7.3.4, 7.3.5 and Liferay DXP 7.2 before fix pack 11 and 7.3 before fix pack 1 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_layout_admin_web_portlet_GroupPagesPortlet_name parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4g2v-w6w3-cwhp/GHSA-4g2v-w6w3-cwhp.json b/advisories/unreviewed/2022/05/GHSA-4g2v-w6w3-cwhp/GHSA-4g2v-w6w3-cwhp.json index b962057b7fc..f061e888487 100644 --- a/advisories/unreviewed/2022/05/GHSA-4g2v-w6w3-cwhp/GHSA-4g2v-w6w3-cwhp.json +++ b/advisories/unreviewed/2022/05/GHSA-4g2v-w6w3-cwhp/GHSA-4g2v-w6w3-cwhp.json @@ -7,12 +7,8 @@ "CVE-2021-24281" ], "details": "In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the delete_action_post AJAX action to delete any post on a target site.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4j78-4g93-cm53/GHSA-4j78-4g93-cm53.json b/advisories/unreviewed/2022/05/GHSA-4j78-4g93-cm53/GHSA-4j78-4g93-cm53.json index 80946041ac6..c18f9fff1c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-4j78-4g93-cm53/GHSA-4j78-4g93-cm53.json +++ b/advisories/unreviewed/2022/05/GHSA-4j78-4g93-cm53/GHSA-4j78-4g93-cm53.json @@ -7,12 +7,8 @@ "CVE-2020-21041" ], "details": "Buffer Overflow vulnerability exists in FFmpeg 4.1 via apng_do_inverse_blend in libavcodec/pngenc.c, which could let a remote malicious user cause a Denial of Service", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4qp5-qxpf-77vm/GHSA-4qp5-qxpf-77vm.json b/advisories/unreviewed/2022/05/GHSA-4qp5-qxpf-77vm/GHSA-4qp5-qxpf-77vm.json index 4897cbfda7a..4daf2794b76 100644 --- a/advisories/unreviewed/2022/05/GHSA-4qp5-qxpf-77vm/GHSA-4qp5-qxpf-77vm.json +++ b/advisories/unreviewed/2022/05/GHSA-4qp5-qxpf-77vm/GHSA-4qp5-qxpf-77vm.json @@ -7,12 +7,8 @@ "CVE-2020-21816" ], "details": "A heab based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:46.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4rw7-393p-x5r2/GHSA-4rw7-393p-x5r2.json b/advisories/unreviewed/2022/05/GHSA-4rw7-393p-x5r2/GHSA-4rw7-393p-x5r2.json index 15e793c61ba..6c83115574f 100644 --- a/advisories/unreviewed/2022/05/GHSA-4rw7-393p-x5r2/GHSA-4rw7-393p-x5r2.json +++ b/advisories/unreviewed/2022/05/GHSA-4rw7-393p-x5r2/GHSA-4rw7-393p-x5r2.json @@ -7,12 +7,8 @@ "CVE-2021-3003" ], "details": "Agenzia delle Entrate Desktop Telematico 1.0.0 contacts the jws.agenziaentrate.it server over cleartext HTTP, which allows man-in-the-middle attackers to spoof product updates.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4v73-g3hv-w298/GHSA-4v73-g3hv-w298.json b/advisories/unreviewed/2022/05/GHSA-4v73-g3hv-w298/GHSA-4v73-g3hv-w298.json index 58d3cef730d..12091e58724 100644 --- a/advisories/unreviewed/2022/05/GHSA-4v73-g3hv-w298/GHSA-4v73-g3hv-w298.json +++ b/advisories/unreviewed/2022/05/GHSA-4v73-g3hv-w298/GHSA-4v73-g3hv-w298.json @@ -7,12 +7,8 @@ "CVE-2020-4536" ], "details": "IBM OpenPages GRC Platform 8.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 182907.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4xjw-g3w3-88q2/GHSA-4xjw-g3w3-88q2.json b/advisories/unreviewed/2022/05/GHSA-4xjw-g3w3-88q2/GHSA-4xjw-g3w3-88q2.json index f3779113d76..66c731ce3f8 100644 --- a/advisories/unreviewed/2022/05/GHSA-4xjw-g3w3-88q2/GHSA-4xjw-g3w3-88q2.json +++ b/advisories/unreviewed/2022/05/GHSA-4xjw-g3w3-88q2/GHSA-4xjw-g3w3-88q2.json @@ -7,12 +7,8 @@ "CVE-2021-31519" ], "details": "An incorrect permission vulnerability in the product installer folders for Trend Micro HouseCall for Home Networks version 5.3.1179 and below could allow an attacker to escalate privileges by placing arbitrary code on a specified folder and have that code be executed by an Administrator who is running a scan. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-539c-2w6v-9rwx/GHSA-539c-2w6v-9rwx.json b/advisories/unreviewed/2022/05/GHSA-539c-2w6v-9rwx/GHSA-539c-2w6v-9rwx.json index ffa4b3f6055..44432f614f7 100644 --- a/advisories/unreviewed/2022/05/GHSA-539c-2w6v-9rwx/GHSA-539c-2w6v-9rwx.json +++ b/advisories/unreviewed/2022/05/GHSA-539c-2w6v-9rwx/GHSA-539c-2w6v-9rwx.json @@ -7,12 +7,8 @@ "CVE-2021-31755" ], "details": "An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setmac allows attackers to execute arbitrary code on the system via a crafted post request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-53xf-f462-gx5v/GHSA-53xf-f462-gx5v.json b/advisories/unreviewed/2022/05/GHSA-53xf-f462-gx5v/GHSA-53xf-f462-gx5v.json index 25badafd321..87de98b1c79 100644 --- a/advisories/unreviewed/2022/05/GHSA-53xf-f462-gx5v/GHSA-53xf-f462-gx5v.json +++ b/advisories/unreviewed/2022/05/GHSA-53xf-f462-gx5v/GHSA-53xf-f462-gx5v.json @@ -7,12 +7,8 @@ "CVE-2020-12526" ], "details": "TwinCAT OPC UA Server in versions up to 2.3.0.12 and IPC Diagnostics UA Server in versions up to 3.1.0.1 from Beckhoff Automation GmbH & Co. KG are vulnerable to denial of service attacks. The attacker needs to send several specifically crafted requests to the running OPC UA server. After some of these requests the OPC UA server is no longer responsive to any client. This is without effect to the real-time functionality of IPCs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5422-w3xr-rj47/GHSA-5422-w3xr-rj47.json b/advisories/unreviewed/2022/05/GHSA-5422-w3xr-rj47/GHSA-5422-w3xr-rj47.json index 6b1ede70b0b..5f48dafcd7e 100644 --- a/advisories/unreviewed/2022/05/GHSA-5422-w3xr-rj47/GHSA-5422-w3xr-rj47.json +++ b/advisories/unreviewed/2022/05/GHSA-5422-w3xr-rj47/GHSA-5422-w3xr-rj47.json @@ -7,12 +7,8 @@ "CVE-2021-31319" ], "details": "Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by an Integer Overflow in the LOTGradient::populate function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious animated sticker.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-558h-hvgq-6v4x/GHSA-558h-hvgq-6v4x.json b/advisories/unreviewed/2022/05/GHSA-558h-hvgq-6v4x/GHSA-558h-hvgq-6v4x.json index bbc27db40cc..d190c5c00fa 100644 --- a/advisories/unreviewed/2022/05/GHSA-558h-hvgq-6v4x/GHSA-558h-hvgq-6v4x.json +++ b/advisories/unreviewed/2022/05/GHSA-558h-hvgq-6v4x/GHSA-558h-hvgq-6v4x.json @@ -7,12 +7,8 @@ "CVE-2021-32403" ], "details": "Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF) due to lack of security mechanisms for token protection and unsafe inputs and modules.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-58qm-mv3r-rg7r/GHSA-58qm-mv3r-rg7r.json b/advisories/unreviewed/2022/05/GHSA-58qm-mv3r-rg7r/GHSA-58qm-mv3r-rg7r.json index b532ac41337..0038f59c092 100644 --- a/advisories/unreviewed/2022/05/GHSA-58qm-mv3r-rg7r/GHSA-58qm-mv3r-rg7r.json +++ b/advisories/unreviewed/2022/05/GHSA-58qm-mv3r-rg7r/GHSA-58qm-mv3r-rg7r.json @@ -7,12 +7,8 @@ "CVE-2021-24305" ], "details": "The Target First WordPress Plugin v2.0, also previously known as Watcheezy, suffers from a critical unauthenticated stored XSS vulnerability. An attacker could change the licence key value through a POST on any URL with the 'weeWzKey' parameter that will be save as the 'weeID option and is not sanitized.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5c9x-w5pw-mh6h/GHSA-5c9x-w5pw-mh6h.json b/advisories/unreviewed/2022/05/GHSA-5c9x-w5pw-mh6h/GHSA-5c9x-w5pw-mh6h.json index 144e001bd47..eb101d727ee 100644 --- a/advisories/unreviewed/2022/05/GHSA-5c9x-w5pw-mh6h/GHSA-5c9x-w5pw-mh6h.json +++ b/advisories/unreviewed/2022/05/GHSA-5c9x-w5pw-mh6h/GHSA-5c9x-w5pw-mh6h.json @@ -7,12 +7,8 @@ "CVE-2020-18198" ], "details": "Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete specific images via the component \" /admin.php?action=images.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5fgw-wpxm-vqq2/GHSA-5fgw-wpxm-vqq2.json b/advisories/unreviewed/2022/05/GHSA-5fgw-wpxm-vqq2/GHSA-5fgw-wpxm-vqq2.json index 13f2176ad10..1d486ff2c13 100644 --- a/advisories/unreviewed/2022/05/GHSA-5fgw-wpxm-vqq2/GHSA-5fgw-wpxm-vqq2.json +++ b/advisories/unreviewed/2022/05/GHSA-5fgw-wpxm-vqq2/GHSA-5fgw-wpxm-vqq2.json @@ -7,12 +7,8 @@ "CVE-2021-24332" ], "details": "The Autoptimize WordPress plugin before 2.8.4 was missing proper escaping and sanitisation in some of its settings, allowing high privilege users to set XSS payloads in them, leading to stored Cross-Site Scripting issues", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5fmc-gg5j-cg5c/GHSA-5fmc-gg5j-cg5c.json b/advisories/unreviewed/2022/05/GHSA-5fmc-gg5j-cg5c/GHSA-5fmc-gg5j-cg5c.json index 7c4590faebd..fc7da89ee08 100644 --- a/advisories/unreviewed/2022/05/GHSA-5fmc-gg5j-cg5c/GHSA-5fmc-gg5j-cg5c.json +++ b/advisories/unreviewed/2022/05/GHSA-5fmc-gg5j-cg5c/GHSA-5fmc-gg5j-cg5c.json @@ -7,12 +7,8 @@ "CVE-2020-4669" ], "details": "IBM Planning Analytics Local 2.0 connects to a MongoDB server. MongoDB, a document-oriented database system, is listening on the remote port, and it is configured to allow connections without password authentication. A remote attacker can gain unauthorized access to the database. IBM X-Force ID: 184600.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5fmf-v8w4-327v/GHSA-5fmf-v8w4-327v.json b/advisories/unreviewed/2022/05/GHSA-5fmf-v8w4-327v/GHSA-5fmf-v8w4-327v.json index 720a7a9b9d0..039e761c57c 100644 --- a/advisories/unreviewed/2022/05/GHSA-5fmf-v8w4-327v/GHSA-5fmf-v8w4-327v.json +++ b/advisories/unreviewed/2022/05/GHSA-5fmf-v8w4-327v/GHSA-5fmf-v8w4-327v.json @@ -7,12 +7,8 @@ "CVE-2020-36365" ], "details": "Smartstore (aka SmartStoreNET) before 4.1.0 allows CommonController.ClearCache, ClearDatabaseCache, RestartApplication, and ScheduleTaskController.Edit open redirect.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5frr-j9x3-j3hg/GHSA-5frr-j9x3-j3hg.json b/advisories/unreviewed/2022/05/GHSA-5frr-j9x3-j3hg/GHSA-5frr-j9x3-j3hg.json index 02684ff1ece..db19d82165e 100644 --- a/advisories/unreviewed/2022/05/GHSA-5frr-j9x3-j3hg/GHSA-5frr-j9x3-j3hg.json +++ b/advisories/unreviewed/2022/05/GHSA-5frr-j9x3-j3hg/GHSA-5frr-j9x3-j3hg.json @@ -7,12 +7,8 @@ "CVE-2021-1487" ], "details": "A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network (EPN) Manager could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The vulnerability is due to insufficient validation of user-supplied input to the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to the interface. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system (OS) with the permissions of a special non-root user. In this way, an attacker could take control of the affected system, which would allow them to obtain and alter sensitive data. The attacker could also affect the devices that are managed by the affected system by pushing arbitrary configuration files, retrieving device credentials and confidential information, and ultimately undermining the stability of the devices, causing a denial of service (DoS) condition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5hwg-793m-rvrv/GHSA-5hwg-793m-rvrv.json b/advisories/unreviewed/2022/05/GHSA-5hwg-793m-rvrv/GHSA-5hwg-793m-rvrv.json index 3f7c31f8355..f9c6196b2ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-5hwg-793m-rvrv/GHSA-5hwg-793m-rvrv.json +++ b/advisories/unreviewed/2022/05/GHSA-5hwg-793m-rvrv/GHSA-5hwg-793m-rvrv.json @@ -7,12 +7,8 @@ "CVE-2021-26310" ], "details": "In the TeamCity IntelliJ plugin before 2020.2.2.85899, DoS was possible.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5vp3-c6x6-5464/GHSA-5vp3-c6x6-5464.json b/advisories/unreviewed/2022/05/GHSA-5vp3-c6x6-5464/GHSA-5vp3-c6x6-5464.json index 7ed564b08d7..6b149e8e703 100644 --- a/advisories/unreviewed/2022/05/GHSA-5vp3-c6x6-5464/GHSA-5vp3-c6x6-5464.json +++ b/advisories/unreviewed/2022/05/GHSA-5vp3-c6x6-5464/GHSA-5vp3-c6x6-5464.json @@ -7,12 +7,8 @@ "CVE-2021-3504" ], "details": "A flaw was found in the hivex library in versions before 1.3.20. It is caused due to a lack of bounds check within the hivex_open function. An attacker could input a specially crafted Windows Registry (hive) file which would cause hivex to read memory beyond its normal bounds or cause the program to crash. The highest threat from this vulnerability is to system availability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5x8c-v227-pcxw/GHSA-5x8c-v227-pcxw.json b/advisories/unreviewed/2022/05/GHSA-5x8c-v227-pcxw/GHSA-5x8c-v227-pcxw.json index ebf21fc231e..f627588ca2c 100644 --- a/advisories/unreviewed/2022/05/GHSA-5x8c-v227-pcxw/GHSA-5x8c-v227-pcxw.json +++ b/advisories/unreviewed/2022/05/GHSA-5x8c-v227-pcxw/GHSA-5x8c-v227-pcxw.json @@ -7,12 +7,8 @@ "CVE-2020-22809" ], "details": "In Windscribe v1.83 Build 20, 'WindscribeService' has an Unquoted Service Path that facilitates privilege escalation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-62g9-cqjr-29mv/GHSA-62g9-cqjr-29mv.json b/advisories/unreviewed/2022/05/GHSA-62g9-cqjr-29mv/GHSA-62g9-cqjr-29mv.json index e294e0ec75e..513c0d2f7c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-62g9-cqjr-29mv/GHSA-62g9-cqjr-29mv.json +++ b/advisories/unreviewed/2022/05/GHSA-62g9-cqjr-29mv/GHSA-62g9-cqjr-29mv.json @@ -7,12 +7,8 @@ "CVE-2021-31906" ], "details": "In JetBrains TeamCity before 2020.2.2, audit logs were not sufficient when an administrator uploaded a file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-633x-8x8r-p3hp/GHSA-633x-8x8r-p3hp.json b/advisories/unreviewed/2022/05/GHSA-633x-8x8r-p3hp/GHSA-633x-8x8r-p3hp.json index 7d810e8a0f9..d2f5e106ab8 100644 --- a/advisories/unreviewed/2022/05/GHSA-633x-8x8r-p3hp/GHSA-633x-8x8r-p3hp.json +++ b/advisories/unreviewed/2022/05/GHSA-633x-8x8r-p3hp/GHSA-633x-8x8r-p3hp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-65cc-qw75-2gw6/GHSA-65cc-qw75-2gw6.json b/advisories/unreviewed/2022/05/GHSA-65cc-qw75-2gw6/GHSA-65cc-qw75-2gw6.json index a6c1e02a46e..881d13a2d44 100644 --- a/advisories/unreviewed/2022/05/GHSA-65cc-qw75-2gw6/GHSA-65cc-qw75-2gw6.json +++ b/advisories/unreviewed/2022/05/GHSA-65cc-qw75-2gw6/GHSA-65cc-qw75-2gw6.json @@ -7,12 +7,8 @@ "CVE-2021-23011" ], "details": "On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and 11.6.x before 11.6.5.3, when the BIG-IP system is buffering packet fragments for reassembly, the Traffic Management Microkernel (TMM) may consume an excessive amount of resources, eventually leading to a restart and failover event. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-66r9-64hr-2999/GHSA-66r9-64hr-2999.json b/advisories/unreviewed/2022/05/GHSA-66r9-64hr-2999/GHSA-66r9-64hr-2999.json index 29d901a8c41..09bb878899e 100644 --- a/advisories/unreviewed/2022/05/GHSA-66r9-64hr-2999/GHSA-66r9-64hr-2999.json +++ b/advisories/unreviewed/2022/05/GHSA-66r9-64hr-2999/GHSA-66r9-64hr-2999.json @@ -7,12 +7,8 @@ "CVE-2021-27398" ], "details": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a stack based buffer overflow, a different vulnerability than CVE-2021-27396. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13290)", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-683q-q5jq-vp5w/GHSA-683q-q5jq-vp5w.json b/advisories/unreviewed/2022/05/GHSA-683q-q5jq-vp5w/GHSA-683q-q5jq-vp5w.json index 08dea822dfe..d50a38d3686 100644 --- a/advisories/unreviewed/2022/05/GHSA-683q-q5jq-vp5w/GHSA-683q-q5jq-vp5w.json +++ b/advisories/unreviewed/2022/05/GHSA-683q-q5jq-vp5w/GHSA-683q-q5jq-vp5w.json @@ -7,12 +7,8 @@ "CVE-2021-32099" ], "details": "A SQL injection vulnerability in the pandora_console component of Artica Pandora FMS 742 allows an unauthenticated attacker to upgrade his unprivileged session via the /include/chart_generator.php session_id parameter, leading to a login bypass.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-69j7-838h-x496/GHSA-69j7-838h-x496.json b/advisories/unreviewed/2022/05/GHSA-69j7-838h-x496/GHSA-69j7-838h-x496.json index b943ac3e5f0..8e8c65bced8 100644 --- a/advisories/unreviewed/2022/05/GHSA-69j7-838h-x496/GHSA-69j7-838h-x496.json +++ b/advisories/unreviewed/2022/05/GHSA-69j7-838h-x496/GHSA-69j7-838h-x496.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6gwh-qx8x-gvw2/GHSA-6gwh-qx8x-gvw2.json b/advisories/unreviewed/2022/05/GHSA-6gwh-qx8x-gvw2/GHSA-6gwh-qx8x-gvw2.json index 53f6e3b4252..5e59da31c2e 100644 --- a/advisories/unreviewed/2022/05/GHSA-6gwh-qx8x-gvw2/GHSA-6gwh-qx8x-gvw2.json +++ b/advisories/unreviewed/2022/05/GHSA-6gwh-qx8x-gvw2/GHSA-6gwh-qx8x-gvw2.json @@ -7,12 +7,8 @@ "CVE-2020-28911" ], "details": "Incorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated users to extract passwords used to manage fused servers via the test_server command in ajaxhelper.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6gx8-4r4f-rfmq/GHSA-6gx8-4r4f-rfmq.json b/advisories/unreviewed/2022/05/GHSA-6gx8-4r4f-rfmq/GHSA-6gx8-4r4f-rfmq.json index 4cbdbb9540b..7fe30200038 100644 --- a/advisories/unreviewed/2022/05/GHSA-6gx8-4r4f-rfmq/GHSA-6gx8-4r4f-rfmq.json +++ b/advisories/unreviewed/2022/05/GHSA-6gx8-4r4f-rfmq/GHSA-6gx8-4r4f-rfmq.json @@ -7,12 +7,8 @@ "CVE-2021-20996" ], "details": "In multiple managed switches by WAGO in different versions special crafted requests can lead to cookies being transferred to third parties.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6hj5-2qm8-82c7/GHSA-6hj5-2qm8-82c7.json b/advisories/unreviewed/2022/05/GHSA-6hj5-2qm8-82c7/GHSA-6hj5-2qm8-82c7.json index 658c07fbb38..caa8a880cd3 100644 --- a/advisories/unreviewed/2022/05/GHSA-6hj5-2qm8-82c7/GHSA-6hj5-2qm8-82c7.json +++ b/advisories/unreviewed/2022/05/GHSA-6hj5-2qm8-82c7/GHSA-6hj5-2qm8-82c7.json @@ -7,12 +7,8 @@ "CVE-2021-25848" ], "details": "Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to using fixed loop counter variable without checking the actual available length via a crafted lldp packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6hrw-8fx7-cp46/GHSA-6hrw-8fx7-cp46.json b/advisories/unreviewed/2022/05/GHSA-6hrw-8fx7-cp46/GHSA-6hrw-8fx7-cp46.json index 05fbf62987e..59fa61ef4f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-6hrw-8fx7-cp46/GHSA-6hrw-8fx7-cp46.json +++ b/advisories/unreviewed/2022/05/GHSA-6hrw-8fx7-cp46/GHSA-6hrw-8fx7-cp46.json @@ -7,12 +7,8 @@ "CVE-2021-31320" ], "details": "Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the VGradientCache::generateGradientColorTable function of their custom fork of the rlottie library. A remote attacker might be able to overwrite heap memory out-of-bounds on a victim device via a malicious animated sticker.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6j6p-6hm2-m4qc/GHSA-6j6p-6hm2-m4qc.json b/advisories/unreviewed/2022/05/GHSA-6j6p-6hm2-m4qc/GHSA-6j6p-6hm2-m4qc.json index b101ed3a3df..a4b025c44b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-6j6p-6hm2-m4qc/GHSA-6j6p-6hm2-m4qc.json +++ b/advisories/unreviewed/2022/05/GHSA-6j6p-6hm2-m4qc/GHSA-6j6p-6hm2-m4qc.json @@ -7,12 +7,8 @@ "CVE-2021-22140" ], "details": "Elastic App Search versions after 7.11.0 and before 7.12.0 contain an XML External Entity Injection issue (XXE) in the App Search web crawler beta feature. Using this vector, an attacker whose website is being crawled by App Search could craft a malicious sitemap.xml to traverse the filesystem of the host running the instance and obtain sensitive files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6jxj-3w8q-47fg/GHSA-6jxj-3w8q-47fg.json b/advisories/unreviewed/2022/05/GHSA-6jxj-3w8q-47fg/GHSA-6jxj-3w8q-47fg.json index 6b775ff76c6..c29e6120c99 100644 --- a/advisories/unreviewed/2022/05/GHSA-6jxj-3w8q-47fg/GHSA-6jxj-3w8q-47fg.json +++ b/advisories/unreviewed/2022/05/GHSA-6jxj-3w8q-47fg/GHSA-6jxj-3w8q-47fg.json @@ -7,12 +7,8 @@ "CVE-2020-28908" ], "details": "Command Injection in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to nagios.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6m54-ffmq-mhh6/GHSA-6m54-ffmq-mhh6.json b/advisories/unreviewed/2022/05/GHSA-6m54-ffmq-mhh6/GHSA-6m54-ffmq-mhh6.json index 0ac281b4202..aa80da02b81 100644 --- a/advisories/unreviewed/2022/05/GHSA-6m54-ffmq-mhh6/GHSA-6m54-ffmq-mhh6.json +++ b/advisories/unreviewed/2022/05/GHSA-6m54-ffmq-mhh6/GHSA-6m54-ffmq-mhh6.json @@ -7,12 +7,8 @@ "CVE-2021-23891" ], "details": "Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.32 allows a local user to gain elevated privileges by impersonating a client token which could lead to the bypassing of MTP self-defense.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6p66-w2jr-5f23/GHSA-6p66-w2jr-5f23.json b/advisories/unreviewed/2022/05/GHSA-6p66-w2jr-5f23/GHSA-6p66-w2jr-5f23.json index 7537cbb642f..5b5058dc8e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-6p66-w2jr-5f23/GHSA-6p66-w2jr-5f23.json +++ b/advisories/unreviewed/2022/05/GHSA-6p66-w2jr-5f23/GHSA-6p66-w2jr-5f23.json @@ -7,12 +7,8 @@ "CVE-2021-32402" ], "details": "Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF) due to lack of validation and insecure configurations in inputs and modules.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6vm3-4hhg-fm4w/GHSA-6vm3-4hhg-fm4w.json b/advisories/unreviewed/2022/05/GHSA-6vm3-4hhg-fm4w/GHSA-6vm3-4hhg-fm4w.json index 045345b6d2f..c043bb34404 100644 --- a/advisories/unreviewed/2022/05/GHSA-6vm3-4hhg-fm4w/GHSA-6vm3-4hhg-fm4w.json +++ b/advisories/unreviewed/2022/05/GHSA-6vm3-4hhg-fm4w/GHSA-6vm3-4hhg-fm4w.json @@ -7,12 +7,8 @@ "CVE-2021-31447" ], "details": "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-13269.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6x77-892j-xm83/GHSA-6x77-892j-xm83.json b/advisories/unreviewed/2022/05/GHSA-6x77-892j-xm83/GHSA-6x77-892j-xm83.json index c1106adfb53..70a07a6146f 100644 --- a/advisories/unreviewed/2022/05/GHSA-6x77-892j-xm83/GHSA-6x77-892j-xm83.json +++ b/advisories/unreviewed/2022/05/GHSA-6x77-892j-xm83/GHSA-6x77-892j-xm83.json @@ -7,12 +7,8 @@ "CVE-2021-23015" ], "details": "On BIG-IP 15.1.x before 15.1.3, 14.1.x before 14.1.4.2, 13.1.0.8 through 13.1.3.6, and all versions of 16.0.x, when running in Appliance Mode, an authenticated user assigned the 'Administrator' role may be able to bypass Appliance Mode restrictions utilizing undisclosed iControl REST endpoints. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6x7c-5jc6-7qc6/GHSA-6x7c-5jc6-7qc6.json b/advisories/unreviewed/2022/05/GHSA-6x7c-5jc6-7qc6/GHSA-6x7c-5jc6-7qc6.json index 625f6470703..6d58759e7fe 100644 --- a/advisories/unreviewed/2022/05/GHSA-6x7c-5jc6-7qc6/GHSA-6x7c-5jc6-7qc6.json +++ b/advisories/unreviewed/2022/05/GHSA-6x7c-5jc6-7qc6/GHSA-6x7c-5jc6-7qc6.json @@ -7,12 +7,8 @@ "CVE-2021-31930" ], "details": "Persistent cross-site scripting (XSS) in the web interface of Concerto through 2.3.6 allows an unauthenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into the First Name or Last Name parameter upon registration. When a privileged user attempts to delete the account, the XSS payload will be executed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-73pj-g97w-qp62/GHSA-73pj-g97w-qp62.json b/advisories/unreviewed/2022/05/GHSA-73pj-g97w-qp62/GHSA-73pj-g97w-qp62.json index 3d2683d55a5..a2b29a34ea9 100644 --- a/advisories/unreviewed/2022/05/GHSA-73pj-g97w-qp62/GHSA-73pj-g97w-qp62.json +++ b/advisories/unreviewed/2022/05/GHSA-73pj-g97w-qp62/GHSA-73pj-g97w-qp62.json @@ -7,12 +7,8 @@ "CVE-2020-25242" ], "details": "A vulnerability has been identified in SIMATIC NET CP 343-1 Advanced (incl. SIPLUS variants) (All versions), SIMATIC NET CP 343-1 Lean (incl. SIPLUS variants) (All versions), SIMATIC NET CP 343-1 Standard (incl. SIPLUS variants) (All versions). Specially crafted packets sent to TCP port 102 could cause a Denial-of-Service condition on the affected devices. A cold restart might be necessary in order to recover.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-742c-94r3-qw76/GHSA-742c-94r3-qw76.json b/advisories/unreviewed/2022/05/GHSA-742c-94r3-qw76/GHSA-742c-94r3-qw76.json index 9d1a5672de0..0edcf77c131 100644 --- a/advisories/unreviewed/2022/05/GHSA-742c-94r3-qw76/GHSA-742c-94r3-qw76.json +++ b/advisories/unreviewed/2022/05/GHSA-742c-94r3-qw76/GHSA-742c-94r3-qw76.json @@ -7,12 +7,8 @@ "CVE-2021-31339" ], "details": "A vulnerability has been identified in Mendix Excel Importer Module (All versions < V9.0.3). Uploading a manipulated XML File results in an exception that could expose information about the Application-Server and the used XML-Framework.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7448-c4vh-2pr5/GHSA-7448-c4vh-2pr5.json b/advisories/unreviewed/2022/05/GHSA-7448-c4vh-2pr5/GHSA-7448-c4vh-2pr5.json index f5a803196e7..a1fb50d27f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-7448-c4vh-2pr5/GHSA-7448-c4vh-2pr5.json +++ b/advisories/unreviewed/2022/05/GHSA-7448-c4vh-2pr5/GHSA-7448-c4vh-2pr5.json @@ -7,12 +7,8 @@ "CVE-2021-3315" ], "details": "In JetBrains TeamCity before 2020.2.2, stored XSS on a tests page was possible.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-75h4-f9wm-hqpr/GHSA-75h4-f9wm-hqpr.json b/advisories/unreviewed/2022/05/GHSA-75h4-f9wm-hqpr/GHSA-75h4-f9wm-hqpr.json index b22ccffc4c0..0383af24cc1 100644 --- a/advisories/unreviewed/2022/05/GHSA-75h4-f9wm-hqpr/GHSA-75h4-f9wm-hqpr.json +++ b/advisories/unreviewed/2022/05/GHSA-75h4-f9wm-hqpr/GHSA-75h4-f9wm-hqpr.json @@ -7,12 +7,8 @@ "CVE-2021-32917" ], "details": "An issue was discovered in Prosody before 0.11.9. The proxy65 component allows open access by default, even if neither of the users has an XMPP account on the local server, allowing unrestricted use of the server's bandwidth.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-76fp-gvvh-3jpj/GHSA-76fp-gvvh-3jpj.json b/advisories/unreviewed/2022/05/GHSA-76fp-gvvh-3jpj/GHSA-76fp-gvvh-3jpj.json index 2b4f25de65b..00bd0f319c0 100644 --- a/advisories/unreviewed/2022/05/GHSA-76fp-gvvh-3jpj/GHSA-76fp-gvvh-3jpj.json +++ b/advisories/unreviewed/2022/05/GHSA-76fp-gvvh-3jpj/GHSA-76fp-gvvh-3jpj.json @@ -7,12 +7,8 @@ "CVE-2020-18167" ], "details": "Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the \"Homepage Introduction\" field of component \"admin/info.php?shuyu\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-76pj-5498-mvc7/GHSA-76pj-5498-mvc7.json b/advisories/unreviewed/2022/05/GHSA-76pj-5498-mvc7/GHSA-76pj-5498-mvc7.json index cf9a9166cff..15c88dfc4cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-76pj-5498-mvc7/GHSA-76pj-5498-mvc7.json +++ b/advisories/unreviewed/2022/05/GHSA-76pj-5498-mvc7/GHSA-76pj-5498-mvc7.json @@ -7,12 +7,8 @@ "CVE-2021-24283" ], "details": "The tab GET parameter of the settings page is not sanitised or escaped when being output back in an HTML attribute, leading to a reflected XSS issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7839-55w4-4gg2/GHSA-7839-55w4-4gg2.json b/advisories/unreviewed/2022/05/GHSA-7839-55w4-4gg2/GHSA-7839-55w4-4gg2.json index 90431fcb24c..c607f952c52 100644 --- a/advisories/unreviewed/2022/05/GHSA-7839-55w4-4gg2/GHSA-7839-55w4-4gg2.json +++ b/advisories/unreviewed/2022/05/GHSA-7839-55w4-4gg2/GHSA-7839-55w4-4gg2.json @@ -7,12 +7,8 @@ "CVE-2021-25847" ], "details": "Improper validation of the length field of LLDP-MED TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows information disclosure to attackers due to controllable loop counter variable via a crafted lldp packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7c44-qggm-pv6g/GHSA-7c44-qggm-pv6g.json b/advisories/unreviewed/2022/05/GHSA-7c44-qggm-pv6g/GHSA-7c44-qggm-pv6g.json index 639af2e980e..a9d4b523ebb 100644 --- a/advisories/unreviewed/2022/05/GHSA-7c44-qggm-pv6g/GHSA-7c44-qggm-pv6g.json +++ b/advisories/unreviewed/2022/05/GHSA-7c44-qggm-pv6g/GHSA-7c44-qggm-pv6g.json @@ -7,12 +7,8 @@ "CVE-2020-28906" ], "details": "Incorrect File Permissions in Nagios XI 5.7.5 and earlier and Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to root. Low-privileged users are able to modify files that are included (aka sourced) by scripts executed by root.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7cgv-mhxc-5m23/GHSA-7cgv-mhxc-5m23.json b/advisories/unreviewed/2022/05/GHSA-7cgv-mhxc-5m23/GHSA-7cgv-mhxc-5m23.json index 40078fed23f..ea6b8246276 100644 --- a/advisories/unreviewed/2022/05/GHSA-7cgv-mhxc-5m23/GHSA-7cgv-mhxc-5m23.json +++ b/advisories/unreviewed/2022/05/GHSA-7cgv-mhxc-5m23/GHSA-7cgv-mhxc-5m23.json @@ -7,12 +7,8 @@ "CVE-2021-20528" ], "details": "IBM Control Center 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198761.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7fqj-v4vw-h2vm/GHSA-7fqj-v4vw-h2vm.json b/advisories/unreviewed/2022/05/GHSA-7fqj-v4vw-h2vm/GHSA-7fqj-v4vw-h2vm.json index f439656a32c..96acf3b0785 100644 --- a/advisories/unreviewed/2022/05/GHSA-7fqj-v4vw-h2vm/GHSA-7fqj-v4vw-h2vm.json +++ b/advisories/unreviewed/2022/05/GHSA-7fqj-v4vw-h2vm/GHSA-7fqj-v4vw-h2vm.json @@ -7,12 +7,8 @@ "CVE-2021-31323" ], "details": "Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Heap Buffer Overflow in the LottieParserImpl::parseDashProperty function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious animated sticker.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7fr5-9gv2-5m47/GHSA-7fr5-9gv2-5m47.json b/advisories/unreviewed/2022/05/GHSA-7fr5-9gv2-5m47/GHSA-7fr5-9gv2-5m47.json index 281ff825ed9..1a4036a515f 100644 --- a/advisories/unreviewed/2022/05/GHSA-7fr5-9gv2-5m47/GHSA-7fr5-9gv2-5m47.json +++ b/advisories/unreviewed/2022/05/GHSA-7fr5-9gv2-5m47/GHSA-7fr5-9gv2-5m47.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7fx5-qf68-qjx6/GHSA-7fx5-qf68-qjx6.json b/advisories/unreviewed/2022/05/GHSA-7fx5-qf68-qjx6/GHSA-7fx5-qf68-qjx6.json index 8b264c5d843..baa071cc5c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-7fx5-qf68-qjx6/GHSA-7fx5-qf68-qjx6.json +++ b/advisories/unreviewed/2022/05/GHSA-7fx5-qf68-qjx6/GHSA-7fx5-qf68-qjx6.json @@ -7,12 +7,8 @@ "CVE-2020-28722" ], "details": "Deskpro Cloud Platform and on-premise 2020.2.3.48207 from 2020-07-30 contains a cross-site scripting (XSS) vulnerability that can lead to an account takeover via custom email templates.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7g2h-82xr-x8jw/GHSA-7g2h-82xr-x8jw.json b/advisories/unreviewed/2022/05/GHSA-7g2h-82xr-x8jw/GHSA-7g2h-82xr-x8jw.json index 44b7499408c..c6ab63910cd 100644 --- a/advisories/unreviewed/2022/05/GHSA-7g2h-82xr-x8jw/GHSA-7g2h-82xr-x8jw.json +++ b/advisories/unreviewed/2022/05/GHSA-7g2h-82xr-x8jw/GHSA-7g2h-82xr-x8jw.json @@ -7,12 +7,8 @@ "CVE-2021-20719" ], "details": "RFNTPS firmware versions System_01000004 and earlier, and Web_01000004 and earlier allow an attacker on the same network segment to execute arbitrary OS commands with a root privilege via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7hqp-x3x5-hp75/GHSA-7hqp-x3x5-hp75.json b/advisories/unreviewed/2022/05/GHSA-7hqp-x3x5-hp75/GHSA-7hqp-x3x5-hp75.json index 23c487af552..a70e60139b6 100644 --- a/advisories/unreviewed/2022/05/GHSA-7hqp-x3x5-hp75/GHSA-7hqp-x3x5-hp75.json +++ b/advisories/unreviewed/2022/05/GHSA-7hqp-x3x5-hp75/GHSA-7hqp-x3x5-hp75.json @@ -7,12 +7,8 @@ "CVE-2020-18178" ], "details": "Path Traversal in HongCMS v4.0.0 allows remote attackers to view, edit, and delete arbitrary files via a crafted POST request to the component \"/hcms/admin/index.php/language/ajax.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7jp2-r62f-6m58/GHSA-7jp2-r62f-6m58.json b/advisories/unreviewed/2022/05/GHSA-7jp2-r62f-6m58/GHSA-7jp2-r62f-6m58.json index 58b3f2b117c..cdfa0432225 100644 --- a/advisories/unreviewed/2022/05/GHSA-7jp2-r62f-6m58/GHSA-7jp2-r62f-6m58.json +++ b/advisories/unreviewed/2022/05/GHSA-7jp2-r62f-6m58/GHSA-7jp2-r62f-6m58.json @@ -7,12 +7,8 @@ "CVE-2021-32454" ], "details": "SITEL CAP/PRX firmware version 5.2.01 makes use of a hardcoded password. An attacker with access to the device could modify these credentials, leaving the administrators of the device without access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7mc6-7xwc-c4wg/GHSA-7mc6-7xwc-c4wg.json b/advisories/unreviewed/2022/05/GHSA-7mc6-7xwc-c4wg/GHSA-7mc6-7xwc-c4wg.json index 09676d00bfd..8daefd0a967 100644 --- a/advisories/unreviewed/2022/05/GHSA-7mc6-7xwc-c4wg/GHSA-7mc6-7xwc-c4wg.json +++ b/advisories/unreviewed/2022/05/GHSA-7mc6-7xwc-c4wg/GHSA-7mc6-7xwc-c4wg.json @@ -7,12 +7,8 @@ "CVE-2020-36197" ], "details": "An improper access control vulnerability has been reported to affect earlier versions of Music Station. If exploited, this vulnerability allows attackers to compromise the security of the software by gaining privileges, reading sensitive information, executing commands, evading detection, etc. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.3.16 on QTS 4.5.2; versions prior to 5.2.10 on QTS 4.3.6; versions prior to 5.1.14 on QTS 4.3.3; versions prior to 5.3.16 on QuTS hero h4.5.2; versions prior to 5.3.16 on QuTScloud c4.5.4.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7mgf-w5v3-5pv4/GHSA-7mgf-w5v3-5pv4.json b/advisories/unreviewed/2022/05/GHSA-7mgf-w5v3-5pv4/GHSA-7mgf-w5v3-5pv4.json index bf0c06b1d91..137c81c28ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-7mgf-w5v3-5pv4/GHSA-7mgf-w5v3-5pv4.json +++ b/advisories/unreviewed/2022/05/GHSA-7mgf-w5v3-5pv4/GHSA-7mgf-w5v3-5pv4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7mr4-xp7p-pcmc/GHSA-7mr4-xp7p-pcmc.json b/advisories/unreviewed/2022/05/GHSA-7mr4-xp7p-pcmc/GHSA-7mr4-xp7p-pcmc.json index 1a4f2c4b2dc..d73d8383a9f 100644 --- a/advisories/unreviewed/2022/05/GHSA-7mr4-xp7p-pcmc/GHSA-7mr4-xp7p-pcmc.json +++ b/advisories/unreviewed/2022/05/GHSA-7mr4-xp7p-pcmc/GHSA-7mr4-xp7p-pcmc.json @@ -7,12 +7,8 @@ "CVE-2021-24294" ], "details": "The dsgvoaio_write_log AJAX action of the DSGVO All in one for WP WordPress plugin before 4.0 did not sanitise or escape some POST parameter submitted before outputting them in the Log page in the administrator dashboard (wp-admin/admin.php?page=dsgvoaiofree-show-log). This could allow unauthenticated attackers to gain unauthorised access by using an XSS payload to create a rogue administrator account, which will be trigged when an administrator will view the logs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7qm6-8g5f-g9v3/GHSA-7qm6-8g5f-g9v3.json b/advisories/unreviewed/2022/05/GHSA-7qm6-8g5f-g9v3/GHSA-7qm6-8g5f-g9v3.json index 0f9aa7dba3c..3e3f7cf705f 100644 --- a/advisories/unreviewed/2022/05/GHSA-7qm6-8g5f-g9v3/GHSA-7qm6-8g5f-g9v3.json +++ b/advisories/unreviewed/2022/05/GHSA-7qm6-8g5f-g9v3/GHSA-7qm6-8g5f-g9v3.json @@ -7,12 +7,8 @@ "CVE-2021-27614" ], "details": "SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install SAP Business One on SAP HANA, allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application thereby highly impacting the integrity and availability of the application.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7v76-9gr6-p8jh/GHSA-7v76-9gr6-p8jh.json b/advisories/unreviewed/2022/05/GHSA-7v76-9gr6-p8jh/GHSA-7v76-9gr6-p8jh.json index aadcff174c1..e07b97acf6d 100644 --- a/advisories/unreviewed/2022/05/GHSA-7v76-9gr6-p8jh/GHSA-7v76-9gr6-p8jh.json +++ b/advisories/unreviewed/2022/05/GHSA-7v76-9gr6-p8jh/GHSA-7v76-9gr6-p8jh.json @@ -7,12 +7,8 @@ "CVE-2021-24299" ], "details": "The ReDi Restaurant Reservation WordPress plugin before 21.0426 provides the functionality to let users make restaurant reservations. These reservations are stored and can be listed on an 'Upcoming' page provided by the plugin. An unauthenticated user can fill in the form to make a restaurant reservation. The form to make a restaurant reservation field called 'Comment' does not use proper input validation and can be used to store XSS payloads. The XSS payloads will be executed when the plugin user goes to the 'Upcoming' page, which is an external website https://upcoming.reservationdiary.eu/ loaded in an iframe, and the stored reservation with XSS payload is loaded.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7wxf-2j8p-f3hw/GHSA-7wxf-2j8p-f3hw.json b/advisories/unreviewed/2022/05/GHSA-7wxf-2j8p-f3hw/GHSA-7wxf-2j8p-f3hw.json index b21821f196c..012a865f3b3 100644 --- a/advisories/unreviewed/2022/05/GHSA-7wxf-2j8p-f3hw/GHSA-7wxf-2j8p-f3hw.json +++ b/advisories/unreviewed/2022/05/GHSA-7wxf-2j8p-f3hw/GHSA-7wxf-2j8p-f3hw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7x92-q8cg-wfh6/GHSA-7x92-q8cg-wfh6.json b/advisories/unreviewed/2022/05/GHSA-7x92-q8cg-wfh6/GHSA-7x92-q8cg-wfh6.json index d8ad21beaeb..cd80ad56b86 100644 --- a/advisories/unreviewed/2022/05/GHSA-7x92-q8cg-wfh6/GHSA-7x92-q8cg-wfh6.json +++ b/advisories/unreviewed/2022/05/GHSA-7x92-q8cg-wfh6/GHSA-7x92-q8cg-wfh6.json @@ -7,12 +7,8 @@ "CVE-2020-28907" ], "details": "Incorrect SSL certificate validation in Nagios Fusion 4.1.8 and earlier allows for Escalation of Privileges or Code Execution as root via vectors related to download of an untrusted update package in upgrade_to_latest.sh.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-823g-p8g4-q559/GHSA-823g-p8g4-q559.json b/advisories/unreviewed/2022/05/GHSA-823g-p8g4-q559/GHSA-823g-p8g4-q559.json index 7a9db02d288..d492b55be92 100644 --- a/advisories/unreviewed/2022/05/GHSA-823g-p8g4-q559/GHSA-823g-p8g4-q559.json +++ b/advisories/unreviewed/2022/05/GHSA-823g-p8g4-q559/GHSA-823g-p8g4-q559.json @@ -7,12 +7,8 @@ "CVE-2021-22139" ], "details": "Kibana versions before 7.12.1 contain a denial of service vulnerability was found in the webhook actions due to a lack of timeout or a limit on the request size. An attacker with permissions to create webhook actions could drain the Kibana host connection pool, making Kibana unavailable for all other users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-82j7-2h3j-hc7f/GHSA-82j7-2h3j-hc7f.json b/advisories/unreviewed/2022/05/GHSA-82j7-2h3j-hc7f/GHSA-82j7-2h3j-hc7f.json index 0f5a1e04a15..62604240e0f 100644 --- a/advisories/unreviewed/2022/05/GHSA-82j7-2h3j-hc7f/GHSA-82j7-2h3j-hc7f.json +++ b/advisories/unreviewed/2022/05/GHSA-82j7-2h3j-hc7f/GHSA-82j7-2h3j-hc7f.json @@ -7,12 +7,8 @@ "CVE-2021-29041" ], "details": "Denial-of-service (DoS) vulnerability in the Multi-Factor Authentication module in Liferay DXP 7.3 before fix pack 1 allows remote authenticated attackers to prevent any user from authenticating by (1) enabling Time-based One-time password (TOTP) on behalf of the other user or (2) modifying the other user's TOTP shared secret.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8438-2753-v3v3/GHSA-8438-2753-v3v3.json b/advisories/unreviewed/2022/05/GHSA-8438-2753-v3v3/GHSA-8438-2753-v3v3.json index 0295a496784..fe0d8a058e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-8438-2753-v3v3/GHSA-8438-2753-v3v3.json +++ b/advisories/unreviewed/2022/05/GHSA-8438-2753-v3v3/GHSA-8438-2753-v3v3.json @@ -7,12 +7,8 @@ "CVE-2021-20721" ], "details": "KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors. If the file contains PHP scripts, arbitrary code may be executed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-84ff-9jv8-gp3m/GHSA-84ff-9jv8-gp3m.json b/advisories/unreviewed/2022/05/GHSA-84ff-9jv8-gp3m/GHSA-84ff-9jv8-gp3m.json index 63ca5d436fc..763c4fbd053 100644 --- a/advisories/unreviewed/2022/05/GHSA-84ff-9jv8-gp3m/GHSA-84ff-9jv8-gp3m.json +++ b/advisories/unreviewed/2022/05/GHSA-84ff-9jv8-gp3m/GHSA-84ff-9jv8-gp3m.json @@ -7,12 +7,8 @@ "CVE-2020-4535" ], "details": "IBM OpenPages GRC Platform 8.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 182906.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-85m7-hcp4-g8x4/GHSA-85m7-hcp4-g8x4.json b/advisories/unreviewed/2022/05/GHSA-85m7-hcp4-g8x4/GHSA-85m7-hcp4-g8x4.json index fc8f92ae0b1..eed93b78173 100644 --- a/advisories/unreviewed/2022/05/GHSA-85m7-hcp4-g8x4/GHSA-85m7-hcp4-g8x4.json +++ b/advisories/unreviewed/2022/05/GHSA-85m7-hcp4-g8x4/GHSA-85m7-hcp4-g8x4.json @@ -7,12 +7,8 @@ "CVE-2021-31315" ], "details": "Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Stack Based Overflow in the blit function of their custom fork of the rlottie library. A remote attacker might be able to access Telegram's stack memory out-of-bounds on a victim device via a malicious animated sticker.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-85q4-jrg3-8hqc/GHSA-85q4-jrg3-8hqc.json b/advisories/unreviewed/2022/05/GHSA-85q4-jrg3-8hqc/GHSA-85q4-jrg3-8hqc.json index cc852f8f34d..4b89b0db10a 100644 --- a/advisories/unreviewed/2022/05/GHSA-85q4-jrg3-8hqc/GHSA-85q4-jrg3-8hqc.json +++ b/advisories/unreviewed/2022/05/GHSA-85q4-jrg3-8hqc/GHSA-85q4-jrg3-8hqc.json @@ -7,12 +7,8 @@ "CVE-2021-25645" ], "details": "An issue was discovered in Couchbase Server before 6.0.5, 6.1.x through 6.5.x before 6.5.2, and 6.6.x before 6.6.1. An internal user with administrator privileges, @ns_server, leaks credentials in cleartext in the cbcollect_info.log, debug.log, ns_couchdb.log, indexer.log, and stats.log files. NOTE: updating the product does not automatically address leaks that occurred in the past.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-86w5-3hcx-wfr7/GHSA-86w5-3hcx-wfr7.json b/advisories/unreviewed/2022/05/GHSA-86w5-3hcx-wfr7/GHSA-86w5-3hcx-wfr7.json index 0ab6b289eda..6005b34f35f 100644 --- a/advisories/unreviewed/2022/05/GHSA-86w5-3hcx-wfr7/GHSA-86w5-3hcx-wfr7.json +++ b/advisories/unreviewed/2022/05/GHSA-86w5-3hcx-wfr7/GHSA-86w5-3hcx-wfr7.json @@ -7,12 +7,8 @@ "CVE-2021-31914" ], "details": "In JetBrains TeamCity before 2020.2.4 on Windows, arbitrary code execution on TeamCity Server was possible.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-87x7-pwrx-jch7/GHSA-87x7-pwrx-jch7.json b/advisories/unreviewed/2022/05/GHSA-87x7-pwrx-jch7/GHSA-87x7-pwrx-jch7.json index b553f60760a..644becc6a66 100644 --- a/advisories/unreviewed/2022/05/GHSA-87x7-pwrx-jch7/GHSA-87x7-pwrx-jch7.json +++ b/advisories/unreviewed/2022/05/GHSA-87x7-pwrx-jch7/GHSA-87x7-pwrx-jch7.json @@ -7,12 +7,8 @@ "CVE-2021-29040" ], "details": "The JSON web services in Liferay Portal 7.3.4 and earlier, and Liferay DXP 7.0 before fix pack 97, 7.1 before fix pack 20 and 7.2 before fix pack 10 may provide overly verbose error messages, which allows remote attackers to use the contents of error messages to help launch another, more focused attacks via crafted inputs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-887c-6389-89qh/GHSA-887c-6389-89qh.json b/advisories/unreviewed/2022/05/GHSA-887c-6389-89qh/GHSA-887c-6389-89qh.json index 12030153aae..cdeed810dc3 100644 --- a/advisories/unreviewed/2022/05/GHSA-887c-6389-89qh/GHSA-887c-6389-89qh.json +++ b/advisories/unreviewed/2022/05/GHSA-887c-6389-89qh/GHSA-887c-6389-89qh.json @@ -7,12 +7,8 @@ "CVE-2021-30504" ], "details": "In JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8885-fhqr-37cx/GHSA-8885-fhqr-37cx.json b/advisories/unreviewed/2022/05/GHSA-8885-fhqr-37cx/GHSA-8885-fhqr-37cx.json index c3900394bf5..bbd2a7267c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-8885-fhqr-37cx/GHSA-8885-fhqr-37cx.json +++ b/advisories/unreviewed/2022/05/GHSA-8885-fhqr-37cx/GHSA-8885-fhqr-37cx.json @@ -7,12 +7,8 @@ "CVE-2021-27384" ], "details": "A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\\\" & 15\\\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels 4\\\" - 22\\\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced (All versions < V16 Update 4). SmartVNC has an out-of-bounds memory access vulnerability in the device layout handler, represented by a binary data stream on client side, which can potentially result in code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-89fj-xvf5-gc78/GHSA-89fj-xvf5-gc78.json b/advisories/unreviewed/2022/05/GHSA-89fj-xvf5-gc78/GHSA-89fj-xvf5-gc78.json index b01b203dab6..0a9c10ff97b 100644 --- a/advisories/unreviewed/2022/05/GHSA-89fj-xvf5-gc78/GHSA-89fj-xvf5-gc78.json +++ b/advisories/unreviewed/2022/05/GHSA-89fj-xvf5-gc78/GHSA-89fj-xvf5-gc78.json @@ -7,12 +7,8 @@ "CVE-2020-26144" ], "details": "An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-89x7-8rj3-46vw/GHSA-89x7-8rj3-46vw.json b/advisories/unreviewed/2022/05/GHSA-89x7-8rj3-46vw/GHSA-89x7-8rj3-46vw.json index fa981958398..2f391c98d8d 100644 --- a/advisories/unreviewed/2022/05/GHSA-89x7-8rj3-46vw/GHSA-89x7-8rj3-46vw.json +++ b/advisories/unreviewed/2022/05/GHSA-89x7-8rj3-46vw/GHSA-89x7-8rj3-46vw.json @@ -7,12 +7,8 @@ "CVE-2021-27612" ], "details": "In specific situations SAP GUI for Windows, versions - 7.60, 7.70 forwards a user to specific malicious website which could contain malware or might lead to phishing attacks to steal credentials of the victim.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8cgq-mf9j-mhpv/GHSA-8cgq-mf9j-mhpv.json b/advisories/unreviewed/2022/05/GHSA-8cgq-mf9j-mhpv/GHSA-8cgq-mf9j-mhpv.json index 589e697fccc..8080e083a2c 100644 --- a/advisories/unreviewed/2022/05/GHSA-8cgq-mf9j-mhpv/GHSA-8cgq-mf9j-mhpv.json +++ b/advisories/unreviewed/2022/05/GHSA-8cgq-mf9j-mhpv/GHSA-8cgq-mf9j-mhpv.json @@ -7,12 +7,8 @@ "CVE-2021-31461" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the the handling of app.media objects. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process Was ZDI-CAN-13333.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8fv5-7m8g-42cx/GHSA-8fv5-7m8g-42cx.json b/advisories/unreviewed/2022/05/GHSA-8fv5-7m8g-42cx/GHSA-8fv5-7m8g-42cx.json index 9fec1ba4175..3020bbc4564 100644 --- a/advisories/unreviewed/2022/05/GHSA-8fv5-7m8g-42cx/GHSA-8fv5-7m8g-42cx.json +++ b/advisories/unreviewed/2022/05/GHSA-8fv5-7m8g-42cx/GHSA-8fv5-7m8g-42cx.json @@ -7,12 +7,8 @@ "CVE-2021-24326" ], "details": "The tab parameter of the settings page of the All 404 Redirect to Homepage WordPress plugin before 1.21 was vulnerable to an authenticated reflected Cross-Site Scripting (XSS) issue as user input was not properly sanitised before being output in an attribute.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8h4g-3vqw-f446/GHSA-8h4g-3vqw-f446.json b/advisories/unreviewed/2022/05/GHSA-8h4g-3vqw-f446/GHSA-8h4g-3vqw-f446.json index b35c46a9ee2..4448bfb0bcb 100644 --- a/advisories/unreviewed/2022/05/GHSA-8h4g-3vqw-f446/GHSA-8h4g-3vqw-f446.json +++ b/advisories/unreviewed/2022/05/GHSA-8h4g-3vqw-f446/GHSA-8h4g-3vqw-f446.json @@ -7,12 +7,8 @@ "CVE-2020-20220" ], "details": "Mikrotik RouterOs prior to stable 6.47 suffers from a memory corruption vulnerability in the /nova/bin/bfd process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8m4h-6f46-9p55/GHSA-8m4h-6f46-9p55.json b/advisories/unreviewed/2022/05/GHSA-8m4h-6f46-9p55/GHSA-8m4h-6f46-9p55.json index 762fc6d614a..ab310bc6457 100644 --- a/advisories/unreviewed/2022/05/GHSA-8m4h-6f46-9p55/GHSA-8m4h-6f46-9p55.json +++ b/advisories/unreviewed/2022/05/GHSA-8m4h-6f46-9p55/GHSA-8m4h-6f46-9p55.json @@ -7,12 +7,8 @@ "CVE-2020-21813" ], "details": "A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8pp7-v75p-mx4p/GHSA-8pp7-v75p-mx4p.json b/advisories/unreviewed/2022/05/GHSA-8pp7-v75p-mx4p/GHSA-8pp7-v75p-mx4p.json index 2ac30ad057f..c48ebd6fab4 100644 --- a/advisories/unreviewed/2022/05/GHSA-8pp7-v75p-mx4p/GHSA-8pp7-v75p-mx4p.json +++ b/advisories/unreviewed/2022/05/GHSA-8pp7-v75p-mx4p/GHSA-8pp7-v75p-mx4p.json @@ -7,12 +7,8 @@ "CVE-2021-32096" ], "details": "The ConsoleAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows a CSRF attack that results in injecting arbitrary Ruby code (for an eval call) via the CONSOLE_COMMAND_STRING parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8q8m-7cq5-cxv7/GHSA-8q8m-7cq5-cxv7.json b/advisories/unreviewed/2022/05/GHSA-8q8m-7cq5-cxv7/GHSA-8q8m-7cq5-cxv7.json index 152ffb49c14..536237b1bcd 100644 --- a/advisories/unreviewed/2022/05/GHSA-8q8m-7cq5-cxv7/GHSA-8q8m-7cq5-cxv7.json +++ b/advisories/unreviewed/2022/05/GHSA-8q8m-7cq5-cxv7/GHSA-8q8m-7cq5-cxv7.json @@ -7,12 +7,8 @@ "CVE-2020-23371" ], "details": "Cross-site scripting (XSS) vulnerability in static/admin/js/kindeditor/plugins/multiimage/images/swfupload.swf in noneCms v1.3.0 allows remote attackers to inject arbitrary web script or HTML via the movieName parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8qgh-c754-3crv/GHSA-8qgh-c754-3crv.json b/advisories/unreviewed/2022/05/GHSA-8qgh-c754-3crv/GHSA-8qgh-c754-3crv.json index 438e1d06342..83f146c6768 100644 --- a/advisories/unreviewed/2022/05/GHSA-8qgh-c754-3crv/GHSA-8qgh-c754-3crv.json +++ b/advisories/unreviewed/2022/05/GHSA-8qgh-c754-3crv/GHSA-8qgh-c754-3crv.json @@ -7,12 +7,8 @@ "CVE-2020-26560" ], "details": "Bluetooth Mesh Provisioning in the Bluetooth Mesh profile 1.0 and 1.0.1 may permit a nearby device, reflecting the authentication evidence from a Provisioner, to complete authentication without possessing the AuthValue, and potentially acquire a NetKey and AppKey.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8rrr-rr37-wgfc/GHSA-8rrr-rr37-wgfc.json b/advisories/unreviewed/2022/05/GHSA-8rrr-rr37-wgfc/GHSA-8rrr-rr37-wgfc.json index 4123af8f319..53d9298c2b9 100644 --- a/advisories/unreviewed/2022/05/GHSA-8rrr-rr37-wgfc/GHSA-8rrr-rr37-wgfc.json +++ b/advisories/unreviewed/2022/05/GHSA-8rrr-rr37-wgfc/GHSA-8rrr-rr37-wgfc.json @@ -7,12 +7,8 @@ "CVE-2021-30211" ], "details": "Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS). An attacker can inject arbitrary web script in '/knowage/restful-services/signup/update' via the 'surname' parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8v9p-2c2c-m8xx/GHSA-8v9p-2c2c-m8xx.json b/advisories/unreviewed/2022/05/GHSA-8v9p-2c2c-m8xx/GHSA-8v9p-2c2c-m8xx.json index b75c1eacc8b..910d9a50a27 100644 --- a/advisories/unreviewed/2022/05/GHSA-8v9p-2c2c-m8xx/GHSA-8v9p-2c2c-m8xx.json +++ b/advisories/unreviewed/2022/05/GHSA-8v9p-2c2c-m8xx/GHSA-8v9p-2c2c-m8xx.json @@ -7,12 +7,8 @@ "CVE-2020-21814" ], "details": "A heap based buffer overflow issue exists in GNU LibreDWG 0.10.2641 via htmlwescape ../../programs/escape.c:97.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8xqw-xjxh-7m7j/GHSA-8xqw-xjxh-7m7j.json b/advisories/unreviewed/2022/05/GHSA-8xqw-xjxh-7m7j/GHSA-8xqw-xjxh-7m7j.json index 3bb2e7f976a..d433aaf7e58 100644 --- a/advisories/unreviewed/2022/05/GHSA-8xqw-xjxh-7m7j/GHSA-8xqw-xjxh-7m7j.json +++ b/advisories/unreviewed/2022/05/GHSA-8xqw-xjxh-7m7j/GHSA-8xqw-xjxh-7m7j.json @@ -7,12 +7,8 @@ "CVE-2021-20993" ], "details": "In multiple managed switches by WAGO in different versions the activated directory listing provides an attacker with the index of the resources located inside the directory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8xwc-4w4g-wpqp/GHSA-8xwc-4w4g-wpqp.json b/advisories/unreviewed/2022/05/GHSA-8xwc-4w4g-wpqp/GHSA-8xwc-4w4g-wpqp.json index 889b15d686c..5885659feb4 100644 --- a/advisories/unreviewed/2022/05/GHSA-8xwc-4w4g-wpqp/GHSA-8xwc-4w4g-wpqp.json +++ b/advisories/unreviewed/2022/05/GHSA-8xwc-4w4g-wpqp/GHSA-8xwc-4w4g-wpqp.json @@ -7,12 +7,8 @@ "CVE-2021-24278" ], "details": "In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, unauthenticated users can use the wpcf7r_get_nonce AJAX action to retrieve a valid nonce for any WordPress action/function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-92g4-6xjf-gvgm/GHSA-92g4-6xjf-gvgm.json b/advisories/unreviewed/2022/05/GHSA-92g4-6xjf-gvgm/GHSA-92g4-6xjf-gvgm.json index 57953e6c653..8518253653a 100644 --- a/advisories/unreviewed/2022/05/GHSA-92g4-6xjf-gvgm/GHSA-92g4-6xjf-gvgm.json +++ b/advisories/unreviewed/2022/05/GHSA-92g4-6xjf-gvgm/GHSA-92g4-6xjf-gvgm.json @@ -7,12 +7,8 @@ "CVE-2021-25694" ], "details": "Teradici PCoIP Graphics Agent for Windows prior to 21.03 does not validate NVENC.dll. An attacker could replace the .dll and redirect pixels elsewhere.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-92mq-hq5f-7rrr/GHSA-92mq-hq5f-7rrr.json b/advisories/unreviewed/2022/05/GHSA-92mq-hq5f-7rrr/GHSA-92mq-hq5f-7rrr.json index 508f90d607e..245c20bd24b 100644 --- a/advisories/unreviewed/2022/05/GHSA-92mq-hq5f-7rrr/GHSA-92mq-hq5f-7rrr.json +++ b/advisories/unreviewed/2022/05/GHSA-92mq-hq5f-7rrr/GHSA-92mq-hq5f-7rrr.json @@ -7,12 +7,8 @@ "CVE-2021-20720" ], "details": "SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-938v-qrv3-mj9q/GHSA-938v-qrv3-mj9q.json b/advisories/unreviewed/2022/05/GHSA-938v-qrv3-mj9q/GHSA-938v-qrv3-mj9q.json index 7efdf5ef664..3d922e2f7d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-938v-qrv3-mj9q/GHSA-938v-qrv3-mj9q.json +++ b/advisories/unreviewed/2022/05/GHSA-938v-qrv3-mj9q/GHSA-938v-qrv3-mj9q.json @@ -7,12 +7,8 @@ "CVE-2020-11254" ], "details": "Memory corruption during buffer allocation due to dereferencing session ctx pointer without checking if pointer is valid in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-93ww-47xf-jrmc/GHSA-93ww-47xf-jrmc.json b/advisories/unreviewed/2022/05/GHSA-93ww-47xf-jrmc/GHSA-93ww-47xf-jrmc.json index 5e7186d2091..ff3c51064e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-93ww-47xf-jrmc/GHSA-93ww-47xf-jrmc.json +++ b/advisories/unreviewed/2022/05/GHSA-93ww-47xf-jrmc/GHSA-93ww-47xf-jrmc.json @@ -7,12 +7,8 @@ "CVE-2021-31907" ], "details": "In JetBrains TeamCity before 2020.2.2, permission checks for changing TeamCity plugins were implemented improperly.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-96rf-g76m-xmx8/GHSA-96rf-g76m-xmx8.json b/advisories/unreviewed/2022/05/GHSA-96rf-g76m-xmx8/GHSA-96rf-g76m-xmx8.json index 20631712ab3..14a2eda2ad2 100644 --- a/advisories/unreviewed/2022/05/GHSA-96rf-g76m-xmx8/GHSA-96rf-g76m-xmx8.json +++ b/advisories/unreviewed/2022/05/GHSA-96rf-g76m-xmx8/GHSA-96rf-g76m-xmx8.json @@ -7,12 +7,8 @@ "CVE-2021-31911" ], "details": "In JetBrains TeamCity before 2020.2.3, reflected XSS was possible on several pages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-97gq-9pf7-vwvc/GHSA-97gq-9pf7-vwvc.json b/advisories/unreviewed/2022/05/GHSA-97gq-9pf7-vwvc/GHSA-97gq-9pf7-vwvc.json index 2d74bf5a7da..17f0118e483 100644 --- a/advisories/unreviewed/2022/05/GHSA-97gq-9pf7-vwvc/GHSA-97gq-9pf7-vwvc.json +++ b/advisories/unreviewed/2022/05/GHSA-97gq-9pf7-vwvc/GHSA-97gq-9pf7-vwvc.json @@ -7,12 +7,8 @@ "CVE-2021-31909" ], "details": "In JetBrains TeamCity before 2020.2.3, argument injection leading to remote code execution was possible.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9894-h296-27h4/GHSA-9894-h296-27h4.json b/advisories/unreviewed/2022/05/GHSA-9894-h296-27h4/GHSA-9894-h296-27h4.json index b7d5be9476b..3875c87b9ff 100644 --- a/advisories/unreviewed/2022/05/GHSA-9894-h296-27h4/GHSA-9894-h296-27h4.json +++ b/advisories/unreviewed/2022/05/GHSA-9894-h296-27h4/GHSA-9894-h296-27h4.json @@ -7,12 +7,8 @@ "CVE-2021-32095" ], "details": "U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to delete arbitrary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-99j4-r9vg-37r9/GHSA-99j4-r9vg-37r9.json b/advisories/unreviewed/2022/05/GHSA-99j4-r9vg-37r9/GHSA-99j4-r9vg-37r9.json index f3b05c87b74..35e5f88e394 100644 --- a/advisories/unreviewed/2022/05/GHSA-99j4-r9vg-37r9/GHSA-99j4-r9vg-37r9.json +++ b/advisories/unreviewed/2022/05/GHSA-99j4-r9vg-37r9/GHSA-99j4-r9vg-37r9.json @@ -7,12 +7,8 @@ "CVE-2021-31341" ], "details": "A vulnerability has been identified in Mendix Database Replication (All versions < V7.0.1). Uploading a table mapping using a manipulated XML File results in an exception that could expose information about the Application-Server and the used XML-Framework.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9fpx-x94f-9v22/GHSA-9fpx-x94f-9v22.json b/advisories/unreviewed/2022/05/GHSA-9fpx-x94f-9v22/GHSA-9fpx-x94f-9v22.json index 29178ff1f98..dae6be393ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-9fpx-x94f-9v22/GHSA-9fpx-x94f-9v22.json +++ b/advisories/unreviewed/2022/05/GHSA-9fpx-x94f-9v22/GHSA-9fpx-x94f-9v22.json @@ -7,12 +7,8 @@ "CVE-2020-18102" ], "details": "Cross Site Scripting (XSS) in Hotels_Server v1.0 allows remote attackers to execute arbitrary code by injecting crafted commands the data fields in the component \"/controller/publishHotel.php\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9g57-m5vf-qp73/GHSA-9g57-m5vf-qp73.json b/advisories/unreviewed/2022/05/GHSA-9g57-m5vf-qp73/GHSA-9g57-m5vf-qp73.json index 9ce156d5d33..843f4ae838d 100644 --- a/advisories/unreviewed/2022/05/GHSA-9g57-m5vf-qp73/GHSA-9g57-m5vf-qp73.json +++ b/advisories/unreviewed/2022/05/GHSA-9g57-m5vf-qp73/GHSA-9g57-m5vf-qp73.json @@ -7,12 +7,8 @@ "CVE-2021-29046" ], "details": "Cross-site scripting (XSS) vulnerability in the Asset module's category selector input field in Liferay Portal 7.3.5 and Liferay DXP 7.3 before fix pack 1, allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_asset_categories_admin_web_portlet_AssetCategoriesAdminPortlet_title parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9g8c-98vh-rgph/GHSA-9g8c-98vh-rgph.json b/advisories/unreviewed/2022/05/GHSA-9g8c-98vh-rgph/GHSA-9g8c-98vh-rgph.json index 9978becd3e3..edd3724592d 100644 --- a/advisories/unreviewed/2022/05/GHSA-9g8c-98vh-rgph/GHSA-9g8c-98vh-rgph.json +++ b/advisories/unreviewed/2022/05/GHSA-9g8c-98vh-rgph/GHSA-9g8c-98vh-rgph.json @@ -7,12 +7,8 @@ "CVE-2021-28649" ], "details": "An incorrect permission vulnerability in the product installer for Trend Micro HouseCall for Home Networks version 5.3.1179 and below could allow an attacker to escalate privileges by placing arbitrary code on a specified folder and have that code be executed by an Administrator who is running a scan. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9gqc-c5m8-vf5q/GHSA-9gqc-c5m8-vf5q.json b/advisories/unreviewed/2022/05/GHSA-9gqc-c5m8-vf5q/GHSA-9gqc-c5m8-vf5q.json index 70905ef4302..a5ee373d747 100644 --- a/advisories/unreviewed/2022/05/GHSA-9gqc-c5m8-vf5q/GHSA-9gqc-c5m8-vf5q.json +++ b/advisories/unreviewed/2022/05/GHSA-9gqc-c5m8-vf5q/GHSA-9gqc-c5m8-vf5q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9mxg-p873-6793/GHSA-9mxg-p873-6793.json b/advisories/unreviewed/2022/05/GHSA-9mxg-p873-6793/GHSA-9mxg-p873-6793.json index 148e044fd2d..03b99033b51 100644 --- a/advisories/unreviewed/2022/05/GHSA-9mxg-p873-6793/GHSA-9mxg-p873-6793.json +++ b/advisories/unreviewed/2022/05/GHSA-9mxg-p873-6793/GHSA-9mxg-p873-6793.json @@ -7,12 +7,8 @@ "CVE-2021-29047" ], "details": "The SimpleCaptcha implementation in Liferay Portal 7.3.4, 7.3.5 and Liferay DXP 7.3 before fix pack 1 does not invalidate CAPTCHA answers after it is used, which allows remote attackers to repeatedly perform actions protected by a CAPTCHA challenge by reusing the same CAPTCHA answer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9p52-q967-6rwj/GHSA-9p52-q967-6rwj.json b/advisories/unreviewed/2022/05/GHSA-9p52-q967-6rwj/GHSA-9p52-q967-6rwj.json index 76116db686e..967a4cc4c50 100644 --- a/advisories/unreviewed/2022/05/GHSA-9p52-q967-6rwj/GHSA-9p52-q967-6rwj.json +++ b/advisories/unreviewed/2022/05/GHSA-9p52-q967-6rwj/GHSA-9p52-q967-6rwj.json @@ -7,12 +7,8 @@ "CVE-2021-32544" ], "details": "Special characters of IGT search function in igt+ are not filtered in specific fields, which allow remote authenticated attackers can inject malicious JavaScript and carry out DOM-based XSS (Cross-site scripting) attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9r7q-rgxm-f2hm/GHSA-9r7q-rgxm-f2hm.json b/advisories/unreviewed/2022/05/GHSA-9r7q-rgxm-f2hm/GHSA-9r7q-rgxm-f2hm.json index de64d8c3a57..80a9ba3e74a 100644 --- a/advisories/unreviewed/2022/05/GHSA-9r7q-rgxm-f2hm/GHSA-9r7q-rgxm-f2hm.json +++ b/advisories/unreviewed/2022/05/GHSA-9r7q-rgxm-f2hm/GHSA-9r7q-rgxm-f2hm.json @@ -7,12 +7,8 @@ "CVE-2019-14827" ], "details": "A vulnerability was found in Moodle where javaScript injection was possible in some Mustache templates via recursive rendering from contexts. Mustache helper tags that were included in template contexts were not being escaped before that context was injected into another Mustache helper, which could result in script injection in some templates. This affects versions 3.7 to 3.7.1, 3.6 to 3.6.5, 3.5 to 3.5.7 and earlier unsupported versions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9v3q-48wp-mx8v/GHSA-9v3q-48wp-mx8v.json b/advisories/unreviewed/2022/05/GHSA-9v3q-48wp-mx8v/GHSA-9v3q-48wp-mx8v.json index 039a9c7feb7..c366464a997 100644 --- a/advisories/unreviewed/2022/05/GHSA-9v3q-48wp-mx8v/GHSA-9v3q-48wp-mx8v.json +++ b/advisories/unreviewed/2022/05/GHSA-9v3q-48wp-mx8v/GHSA-9v3q-48wp-mx8v.json @@ -7,12 +7,8 @@ "CVE-2021-24325" ], "details": "The tab parameter of the settings page of the 404 SEO Redirection WordPress plugin through 1.3 is vulnerable to a reflected Cross-Site Scripting (XSS) issue as user input is not properly sanitised or escaped before being output in an attribute.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9vhc-2c9w-phch/GHSA-9vhc-2c9w-phch.json b/advisories/unreviewed/2022/05/GHSA-9vhc-2c9w-phch/GHSA-9vhc-2c9w-phch.json index 3e1820fba82..7aa98fa815e 100644 --- a/advisories/unreviewed/2022/05/GHSA-9vhc-2c9w-phch/GHSA-9vhc-2c9w-phch.json +++ b/advisories/unreviewed/2022/05/GHSA-9vhc-2c9w-phch/GHSA-9vhc-2c9w-phch.json @@ -7,12 +7,8 @@ "CVE-2020-23369" ], "details": "In YzmCMS 5.6, XSS was discovered in member/member_content/init.html via the SRC attribute of an IFRAME element because of using UEditor 1.4.3.3.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9w62-6mhp-433w/GHSA-9w62-6mhp-433w.json b/advisories/unreviewed/2022/05/GHSA-9w62-6mhp-433w/GHSA-9w62-6mhp-433w.json index 98117c2d032..39ceeb097fe 100644 --- a/advisories/unreviewed/2022/05/GHSA-9w62-6mhp-433w/GHSA-9w62-6mhp-433w.json +++ b/advisories/unreviewed/2022/05/GHSA-9w62-6mhp-433w/GHSA-9w62-6mhp-433w.json @@ -7,12 +7,8 @@ "CVE-2021-20997" ], "details": "In multiple managed switches by WAGO in different versions it is possible to read out the password hashes of all Web-based Management users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c38j-jgpp-72xp/GHSA-c38j-jgpp-72xp.json b/advisories/unreviewed/2022/05/GHSA-c38j-jgpp-72xp/GHSA-c38j-jgpp-72xp.json index 8cbb4ea0eba..65090c6d3c1 100644 --- a/advisories/unreviewed/2022/05/GHSA-c38j-jgpp-72xp/GHSA-c38j-jgpp-72xp.json +++ b/advisories/unreviewed/2022/05/GHSA-c38j-jgpp-72xp/GHSA-c38j-jgpp-72xp.json @@ -7,12 +7,8 @@ "CVE-2021-30083" ], "details": "An issue was discovered in Mediat 1.4.1. There is a Reflected XSS vulnerability which allows remote attackers to inject arbitrary web script or HTML without authentication via the 'return' parameter in login.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c3f6-5x5g-vp36/GHSA-c3f6-5x5g-vp36.json b/advisories/unreviewed/2022/05/GHSA-c3f6-5x5g-vp36/GHSA-c3f6-5x5g-vp36.json index 4136d648898..9400eb7651c 100644 --- a/advisories/unreviewed/2022/05/GHSA-c3f6-5x5g-vp36/GHSA-c3f6-5x5g-vp36.json +++ b/advisories/unreviewed/2022/05/GHSA-c3f6-5x5g-vp36/GHSA-c3f6-5x5g-vp36.json @@ -7,12 +7,8 @@ "CVE-2020-28903" ], "details": "Improper input validation in Nagios Fusion 4.1.8 and earlier allows a remote attacker with control over a fused server to inject arbitrary HTML, aka XSS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c49c-jx24-458g/GHSA-c49c-jx24-458g.json b/advisories/unreviewed/2022/05/GHSA-c49c-jx24-458g/GHSA-c49c-jx24-458g.json index 380882bbfba..787ca802c2f 100644 --- a/advisories/unreviewed/2022/05/GHSA-c49c-jx24-458g/GHSA-c49c-jx24-458g.json +++ b/advisories/unreviewed/2022/05/GHSA-c49c-jx24-458g/GHSA-c49c-jx24-458g.json @@ -7,12 +7,8 @@ "CVE-2020-26143" ], "details": "An issue was discovered in the ALFA Windows 10 driver 1030.36.604 for AWUS036ACH. The WEP, WPA, WPA2, and WPA3 implementations accept fragmented plaintext frames in a protected Wi-Fi network. An adversary can abuse this to inject arbitrary data frames independent of the network configuration.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c6qp-cf89-h54c/GHSA-c6qp-cf89-h54c.json b/advisories/unreviewed/2022/05/GHSA-c6qp-cf89-h54c/GHSA-c6qp-cf89-h54c.json index 7fd49070a2c..41074adb7c0 100644 --- a/advisories/unreviewed/2022/05/GHSA-c6qp-cf89-h54c/GHSA-c6qp-cf89-h54c.json +++ b/advisories/unreviewed/2022/05/GHSA-c6qp-cf89-h54c/GHSA-c6qp-cf89-h54c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c838-pj7m-89q4/GHSA-c838-pj7m-89q4.json b/advisories/unreviewed/2022/05/GHSA-c838-pj7m-89q4/GHSA-c838-pj7m-89q4.json index 9ffebfed63b..8704208d068 100644 --- a/advisories/unreviewed/2022/05/GHSA-c838-pj7m-89q4/GHSA-c838-pj7m-89q4.json +++ b/advisories/unreviewed/2022/05/GHSA-c838-pj7m-89q4/GHSA-c838-pj7m-89q4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c8p5-2vx8-4c5h/GHSA-c8p5-2vx8-4c5h.json b/advisories/unreviewed/2022/05/GHSA-c8p5-2vx8-4c5h/GHSA-c8p5-2vx8-4c5h.json index 4f8b580517c..6e36b57b7cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8p5-2vx8-4c5h/GHSA-c8p5-2vx8-4c5h.json +++ b/advisories/unreviewed/2022/05/GHSA-c8p5-2vx8-4c5h/GHSA-c8p5-2vx8-4c5h.json @@ -7,12 +7,8 @@ "CVE-2021-32092" ], "details": "A Cross-site scripting (XSS) vulnerability in the DocumentAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows remote attackers to inject arbitrary web script or HTML via the uuid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c8wv-q6vg-rc4f/GHSA-c8wv-q6vg-rc4f.json b/advisories/unreviewed/2022/05/GHSA-c8wv-q6vg-rc4f/GHSA-c8wv-q6vg-rc4f.json index 8f491ece358..d9ff9737af1 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8wv-q6vg-rc4f/GHSA-c8wv-q6vg-rc4f.json +++ b/advisories/unreviewed/2022/05/GHSA-c8wv-q6vg-rc4f/GHSA-c8wv-q6vg-rc4f.json @@ -7,12 +7,8 @@ "CVE-2021-32098" ], "details": "Artica Pandora FMS 742 allows unauthenticated attackers to perform Phar deserialization.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c9w5-6v8f-m5c7/GHSA-c9w5-6v8f-m5c7.json b/advisories/unreviewed/2022/05/GHSA-c9w5-6v8f-m5c7/GHSA-c9w5-6v8f-m5c7.json index 3978268a75a..cf0479cadea 100644 --- a/advisories/unreviewed/2022/05/GHSA-c9w5-6v8f-m5c7/GHSA-c9w5-6v8f-m5c7.json +++ b/advisories/unreviewed/2022/05/GHSA-c9w5-6v8f-m5c7/GHSA-c9w5-6v8f-m5c7.json @@ -7,12 +7,8 @@ "CVE-2021-27463" ], "details": "A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications utilize persistent cookies where the session cookie attribute is not properly invalidated, allowing an attacker to intercept the cookies and gain access to sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c9xv-56cc-gjw2/GHSA-c9xv-56cc-gjw2.json b/advisories/unreviewed/2022/05/GHSA-c9xv-56cc-gjw2/GHSA-c9xv-56cc-gjw2.json index 693107a3764..54fcc1ba02a 100644 --- a/advisories/unreviewed/2022/05/GHSA-c9xv-56cc-gjw2/GHSA-c9xv-56cc-gjw2.json +++ b/advisories/unreviewed/2022/05/GHSA-c9xv-56cc-gjw2/GHSA-c9xv-56cc-gjw2.json @@ -7,12 +7,8 @@ "CVE-2021-32919" ], "details": "An issue was discovered in Prosody before 0.11.9. The undocumented dialback_without_dialback option in mod_dialback enables an experimental feature for server-to-server authentication. It does not correctly authenticate remote server certificates, allowing a remote server to impersonate another server (when this option is enabled).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cc5q-pg95-qhwg/GHSA-cc5q-pg95-qhwg.json b/advisories/unreviewed/2022/05/GHSA-cc5q-pg95-qhwg/GHSA-cc5q-pg95-qhwg.json index 883c21c6d76..ab3b1004bda 100644 --- a/advisories/unreviewed/2022/05/GHSA-cc5q-pg95-qhwg/GHSA-cc5q-pg95-qhwg.json +++ b/advisories/unreviewed/2022/05/GHSA-cc5q-pg95-qhwg/GHSA-cc5q-pg95-qhwg.json @@ -7,12 +7,8 @@ "CVE-2020-28902" ], "details": "Command Injection in Nagios Fusion 4.1.8 and earlier allows Privilege Escalation from apache to root in cmd_subsys.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cfp4-66gm-vg4q/GHSA-cfp4-66gm-vg4q.json b/advisories/unreviewed/2022/05/GHSA-cfp4-66gm-vg4q/GHSA-cfp4-66gm-vg4q.json index 92358f79234..d91d3fac494 100644 --- a/advisories/unreviewed/2022/05/GHSA-cfp4-66gm-vg4q/GHSA-cfp4-66gm-vg4q.json +++ b/advisories/unreviewed/2022/05/GHSA-cfp4-66gm-vg4q/GHSA-cfp4-66gm-vg4q.json @@ -7,12 +7,8 @@ "CVE-2021-20374" ], "details": "IBM Maximo Asset Management 7.6.0 and 7.6.1 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195522.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cfx3-c589-x5r7/GHSA-cfx3-c589-x5r7.json b/advisories/unreviewed/2022/05/GHSA-cfx3-c589-x5r7/GHSA-cfx3-c589-x5r7.json index 4289e299dd7..07a5583994f 100644 --- a/advisories/unreviewed/2022/05/GHSA-cfx3-c589-x5r7/GHSA-cfx3-c589-x5r7.json +++ b/advisories/unreviewed/2022/05/GHSA-cfx3-c589-x5r7/GHSA-cfx3-c589-x5r7.json @@ -7,12 +7,8 @@ "CVE-2020-18964" ], "details": "Cross Site Request Forgery (CSRF) Vulnerability in ForestBlog latest version via the website Management background, which could let a remote malicious gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cg8v-pfh8-h2j4/GHSA-cg8v-pfh8-h2j4.json b/advisories/unreviewed/2022/05/GHSA-cg8v-pfh8-h2j4/GHSA-cg8v-pfh8-h2j4.json index f13256628d1..4251f4bc731 100644 --- a/advisories/unreviewed/2022/05/GHSA-cg8v-pfh8-h2j4/GHSA-cg8v-pfh8-h2j4.json +++ b/advisories/unreviewed/2022/05/GHSA-cg8v-pfh8-h2j4/GHSA-cg8v-pfh8-h2j4.json @@ -7,12 +7,8 @@ "CVE-2020-23996" ], "details": "A local file inclusion vulnerability in ILIAS before 5.3.19, 5.4.10 and 6.0 allows remote authenticated attackers to execute arbitrary code via the import of personal data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cjr2-g7qm-xq33/GHSA-cjr2-g7qm-xq33.json b/advisories/unreviewed/2022/05/GHSA-cjr2-g7qm-xq33/GHSA-cjr2-g7qm-xq33.json index 8d56d424a07..be51d8c7f2f 100644 --- a/advisories/unreviewed/2022/05/GHSA-cjr2-g7qm-xq33/GHSA-cjr2-g7qm-xq33.json +++ b/advisories/unreviewed/2022/05/GHSA-cjr2-g7qm-xq33/GHSA-cjr2-g7qm-xq33.json @@ -7,12 +7,8 @@ "CVE-2020-27020" ], "details": "Password generator feature in Kaspersky Password Manager was not completely cryptographically strong and potentially allowed an attacker to predict generated passwords in some cases. An attacker would need to know some additional information (for example, time of password generation).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cm2c-8c7c-974f/GHSA-cm2c-8c7c-974f.json b/advisories/unreviewed/2022/05/GHSA-cm2c-8c7c-974f/GHSA-cm2c-8c7c-974f.json index f8e2a3c39a1..22ff4d0aac5 100644 --- a/advisories/unreviewed/2022/05/GHSA-cm2c-8c7c-974f/GHSA-cm2c-8c7c-974f.json +++ b/advisories/unreviewed/2022/05/GHSA-cm2c-8c7c-974f/GHSA-cm2c-8c7c-974f.json @@ -7,12 +7,8 @@ "CVE-2021-31876" ], "details": "Bitcoin Core 0.12.0 through 0.21.1 does not properly implement the replacement policy specified in BIP125, which makes it easier for attackers to trigger a loss of funds, or a denial of service attack against downstream projects such as Lightning network nodes. An unconfirmed child transaction with nSequence = 0xff_ff_ff_ff, spending an unconfirmed parent with nSequence <= 0xff_ff_ff_fd, should be replaceable because there is inherited signaling by the child transaction. However, the actual PreChecks implementation does not enforce this. Instead, mempool rejects the replacement attempt of the unconfirmed child transaction.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cm66-w4c7-wx9w/GHSA-cm66-w4c7-wx9w.json b/advisories/unreviewed/2022/05/GHSA-cm66-w4c7-wx9w/GHSA-cm66-w4c7-wx9w.json index 5cdec1d8dbb..d0a6c085c2e 100644 --- a/advisories/unreviewed/2022/05/GHSA-cm66-w4c7-wx9w/GHSA-cm66-w4c7-wx9w.json +++ b/advisories/unreviewed/2022/05/GHSA-cm66-w4c7-wx9w/GHSA-cm66-w4c7-wx9w.json @@ -7,12 +7,8 @@ "CVE-2021-31756" ], "details": "An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /gofrom/setwanType allows attackers to execute arbitrary code on the system via a crafted post request. This occurs when input vector controlled by malicious attack get copied to the stack variable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cmgq-fmcq-h3xj/GHSA-cmgq-fmcq-h3xj.json b/advisories/unreviewed/2022/05/GHSA-cmgq-fmcq-h3xj/GHSA-cmgq-fmcq-h3xj.json index 59e03c6f509..c8c005878da 100644 --- a/advisories/unreviewed/2022/05/GHSA-cmgq-fmcq-h3xj/GHSA-cmgq-fmcq-h3xj.json +++ b/advisories/unreviewed/2022/05/GHSA-cmgq-fmcq-h3xj/GHSA-cmgq-fmcq-h3xj.json @@ -7,12 +7,8 @@ "CVE-2020-23370" ], "details": "In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter, which allows remote attackers to upload a swf file. The swf file can be injected with arbitrary web script or HTML.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cmx7-7xm2-m73q/GHSA-cmx7-7xm2-m73q.json b/advisories/unreviewed/2022/05/GHSA-cmx7-7xm2-m73q/GHSA-cmx7-7xm2-m73q.json index 0f2a7864616..3725e954b49 100644 --- a/advisories/unreviewed/2022/05/GHSA-cmx7-7xm2-m73q/GHSA-cmx7-7xm2-m73q.json +++ b/advisories/unreviewed/2022/05/GHSA-cmx7-7xm2-m73q/GHSA-cmx7-7xm2-m73q.json @@ -7,12 +7,8 @@ "CVE-2021-32489" ], "details": "An issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell through 2.0.3. The function does not correctly validate the embedded length field of an authenticated message received from the device because response_msg.st.len=8 can be accepted but triggers an integer overflow, which causes CRYPTO_cbc128_decrypt (in OpenSSL) to encounter an undersized buffer and experience a segmentation fault. The yubihsm-shell project is included in the YubiHSM 2 SDK product.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cphx-qv3m-4vvc/GHSA-cphx-qv3m-4vvc.json b/advisories/unreviewed/2022/05/GHSA-cphx-qv3m-4vvc/GHSA-cphx-qv3m-4vvc.json index 4b980ed7423..ac3f493795c 100644 --- a/advisories/unreviewed/2022/05/GHSA-cphx-qv3m-4vvc/GHSA-cphx-qv3m-4vvc.json +++ b/advisories/unreviewed/2022/05/GHSA-cphx-qv3m-4vvc/GHSA-cphx-qv3m-4vvc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cr9m-89p3-99cj/GHSA-cr9m-89p3-99cj.json b/advisories/unreviewed/2022/05/GHSA-cr9m-89p3-99cj/GHSA-cr9m-89p3-99cj.json index c3f00045403..88eac02e88c 100644 --- a/advisories/unreviewed/2022/05/GHSA-cr9m-89p3-99cj/GHSA-cr9m-89p3-99cj.json +++ b/advisories/unreviewed/2022/05/GHSA-cr9m-89p3-99cj/GHSA-cr9m-89p3-99cj.json @@ -7,12 +7,8 @@ "CVE-2021-32073" ], "details": "DedeCMS V5.7 SP2 contains a CSRF vulnerability that allows a remote attacker to send a malicious request to to the web manager allowing remote code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cv52-p88m-2mj7/GHSA-cv52-p88m-2mj7.json b/advisories/unreviewed/2022/05/GHSA-cv52-p88m-2mj7/GHSA-cv52-p88m-2mj7.json index 21e55dc8d82..942fc231d64 100644 --- a/advisories/unreviewed/2022/05/GHSA-cv52-p88m-2mj7/GHSA-cv52-p88m-2mj7.json +++ b/advisories/unreviewed/2022/05/GHSA-cv52-p88m-2mj7/GHSA-cv52-p88m-2mj7.json @@ -7,12 +7,8 @@ "CVE-2021-21989" ], "details": "VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (TTC Parser). A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading to information disclosure from the TPView process running on the system where Workstation or Horizon Client for Windows is installed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cxhc-5wv5-j4r5/GHSA-cxhc-5wv5-j4r5.json b/advisories/unreviewed/2022/05/GHSA-cxhc-5wv5-j4r5/GHSA-cxhc-5wv5-j4r5.json index bbb41a06fa8..8c56229df76 100644 --- a/advisories/unreviewed/2022/05/GHSA-cxhc-5wv5-j4r5/GHSA-cxhc-5wv5-j4r5.json +++ b/advisories/unreviewed/2022/05/GHSA-cxhc-5wv5-j4r5/GHSA-cxhc-5wv5-j4r5.json @@ -7,12 +7,8 @@ "CVE-2021-20025" ], "details": "SonicWall Email Security Virtual Appliance version 10.0.9 and earlier versions contain a default username and a password that is used at initial setup. An attacker could exploit this transitional/temporary user account from the trusted domain to access the Virtual Appliance remotely only when the device is freshly installed and not connected to Mysonicwall.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cxj4-6hjw-fcm6/GHSA-cxj4-6hjw-fcm6.json b/advisories/unreviewed/2022/05/GHSA-cxj4-6hjw-fcm6/GHSA-cxj4-6hjw-fcm6.json index 8535e6939a4..6baa2dbe6d2 100644 --- a/advisories/unreviewed/2022/05/GHSA-cxj4-6hjw-fcm6/GHSA-cxj4-6hjw-fcm6.json +++ b/advisories/unreviewed/2022/05/GHSA-cxj4-6hjw-fcm6/GHSA-cxj4-6hjw-fcm6.json @@ -7,12 +7,8 @@ "CVE-2020-20092" ], "details": "File Upload vulnerability exists in ArticleCMS 1.0 via the image upload feature at /admin by changing the Content-Type to image/jpeg and placing PHP code after the JPEG data, which could let a remote malicious user execute arbitrary PHP code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cxmw-4jm5-5gx9/GHSA-cxmw-4jm5-5gx9.json b/advisories/unreviewed/2022/05/GHSA-cxmw-4jm5-5gx9/GHSA-cxmw-4jm5-5gx9.json index 4e5de73513b..3c2a761e31a 100644 --- a/advisories/unreviewed/2022/05/GHSA-cxmw-4jm5-5gx9/GHSA-cxmw-4jm5-5gx9.json +++ b/advisories/unreviewed/2022/05/GHSA-cxmw-4jm5-5gx9/GHSA-cxmw-4jm5-5gx9.json @@ -7,12 +7,8 @@ "CVE-2021-31318" ], "details": "Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type Confusion in the LOTCompLayerItem::LOTCompLayerItem function of their custom fork of the rlottie library. A remote attacker might be able to access heap memory out-of-bounds on a victim device via a malicious animated sticker.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cxpp-6q99-2x9x/GHSA-cxpp-6q99-2x9x.json b/advisories/unreviewed/2022/05/GHSA-cxpp-6q99-2x9x/GHSA-cxpp-6q99-2x9x.json index 2531250bcc2..e6aa1a1e697 100644 --- a/advisories/unreviewed/2022/05/GHSA-cxpp-6q99-2x9x/GHSA-cxpp-6q99-2x9x.json +++ b/advisories/unreviewed/2022/05/GHSA-cxpp-6q99-2x9x/GHSA-cxpp-6q99-2x9x.json @@ -7,12 +7,8 @@ "CVE-2021-32104" ], "details": "A SQL injection vulnerability exists (with user privileges) in interface/forms/eye_mag/save.php in OpenEMR 5.0.2.1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f2g3-x645-4qw2/GHSA-f2g3-x645-4qw2.json b/advisories/unreviewed/2022/05/GHSA-f2g3-x645-4qw2/GHSA-f2g3-x645-4qw2.json index 7388c9e9282..0d0b7a5a83c 100644 --- a/advisories/unreviewed/2022/05/GHSA-f2g3-x645-4qw2/GHSA-f2g3-x645-4qw2.json +++ b/advisories/unreviewed/2022/05/GHSA-f2g3-x645-4qw2/GHSA-f2g3-x645-4qw2.json @@ -7,12 +7,8 @@ "CVE-2020-26142" ], "details": "An issue was discovered in the kernel in OpenBSD 6.6. The WEP, WPA, WPA2, and WPA3 implementations treat fragmented frames as full frames. An adversary can abuse this to inject arbitrary network packets, independent of the network configuration.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f33w-qrjh-rwcp/GHSA-f33w-qrjh-rwcp.json b/advisories/unreviewed/2022/05/GHSA-f33w-qrjh-rwcp/GHSA-f33w-qrjh-rwcp.json index 624d4d27af1..f1bd220dd17 100644 --- a/advisories/unreviewed/2022/05/GHSA-f33w-qrjh-rwcp/GHSA-f33w-qrjh-rwcp.json +++ b/advisories/unreviewed/2022/05/GHSA-f33w-qrjh-rwcp/GHSA-f33w-qrjh-rwcp.json @@ -7,12 +7,8 @@ "CVE-2021-31901" ], "details": "In JetBrains Hub before 2021.1.13079, two-factor authentication wasn't enabled properly for the All Users group.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f3jx-m3pv-vm95/GHSA-f3jx-m3pv-vm95.json b/advisories/unreviewed/2022/05/GHSA-f3jx-m3pv-vm95/GHSA-f3jx-m3pv-vm95.json index a5744c15674..63e9b4b19d3 100644 --- a/advisories/unreviewed/2022/05/GHSA-f3jx-m3pv-vm95/GHSA-f3jx-m3pv-vm95.json +++ b/advisories/unreviewed/2022/05/GHSA-f3jx-m3pv-vm95/GHSA-f3jx-m3pv-vm95.json @@ -7,12 +7,8 @@ "CVE-2021-25693" ], "details": "An attacker may cause a Denial of Service (DoS) in multiple versions of Teradici PCoIP Agent via a null pointer dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f3qg-4xjg-25jv/GHSA-f3qg-4xjg-25jv.json b/advisories/unreviewed/2022/05/GHSA-f3qg-4xjg-25jv/GHSA-f3qg-4xjg-25jv.json index 75a10d1102e..eb8a15f0290 100644 --- a/advisories/unreviewed/2022/05/GHSA-f3qg-4xjg-25jv/GHSA-f3qg-4xjg-25jv.json +++ b/advisories/unreviewed/2022/05/GHSA-f3qg-4xjg-25jv/GHSA-f3qg-4xjg-25jv.json @@ -7,12 +7,8 @@ "CVE-2021-20393" ], "details": "IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196001.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f3xh-wj4j-qrg9/GHSA-f3xh-wj4j-qrg9.json b/advisories/unreviewed/2022/05/GHSA-f3xh-wj4j-qrg9/GHSA-f3xh-wj4j-qrg9.json index 01be81ec91d..1029b419c4b 100644 --- a/advisories/unreviewed/2022/05/GHSA-f3xh-wj4j-qrg9/GHSA-f3xh-wj4j-qrg9.json +++ b/advisories/unreviewed/2022/05/GHSA-f3xh-wj4j-qrg9/GHSA-f3xh-wj4j-qrg9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f4cv-895p-vw62/GHSA-f4cv-895p-vw62.json b/advisories/unreviewed/2022/05/GHSA-f4cv-895p-vw62/GHSA-f4cv-895p-vw62.json index 15d7bbfa933..a6cc1779568 100644 --- a/advisories/unreviewed/2022/05/GHSA-f4cv-895p-vw62/GHSA-f4cv-895p-vw62.json +++ b/advisories/unreviewed/2022/05/GHSA-f4cv-895p-vw62/GHSA-f4cv-895p-vw62.json @@ -7,12 +7,8 @@ "CVE-2021-31520" ], "details": "A weak session token authentication bypass vulnerability in Trend Micro IM Security 1.6 and 1.6.5 could allow an remote attacker to guess currently logged-in administrators' session session token in order to gain access to the product's web management interface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f4w3-762f-pwx9/GHSA-f4w3-762f-pwx9.json b/advisories/unreviewed/2022/05/GHSA-f4w3-762f-pwx9/GHSA-f4w3-762f-pwx9.json index 3142c704f8f..966c25d3242 100644 --- a/advisories/unreviewed/2022/05/GHSA-f4w3-762f-pwx9/GHSA-f4w3-762f-pwx9.json +++ b/advisories/unreviewed/2022/05/GHSA-f4w3-762f-pwx9/GHSA-f4w3-762f-pwx9.json @@ -7,12 +7,8 @@ "CVE-2021-23014" ], "details": "On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.3, and 14.1.x before 14.1.4, BIG-IP Advanced WAF and ASM are missing authorization checks for file uploads to a specific directory within the REST API which might allow Authenticated users with guest privileges to upload files. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f847-2v89-88wg/GHSA-f847-2v89-88wg.json b/advisories/unreviewed/2022/05/GHSA-f847-2v89-88wg/GHSA-f847-2v89-88wg.json index e8384a5d1be..733cff06bb4 100644 --- a/advisories/unreviewed/2022/05/GHSA-f847-2v89-88wg/GHSA-f847-2v89-88wg.json +++ b/advisories/unreviewed/2022/05/GHSA-f847-2v89-88wg/GHSA-f847-2v89-88wg.json @@ -7,12 +7,8 @@ "CVE-2021-31757" ], "details": "An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setVLAN allows attackers to execute arbitrary code on the system via a crafted post request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f98p-q24c-xw97/GHSA-f98p-q24c-xw97.json b/advisories/unreviewed/2022/05/GHSA-f98p-q24c-xw97/GHSA-f98p-q24c-xw97.json index 971023b2755..78ffba2dc30 100644 --- a/advisories/unreviewed/2022/05/GHSA-f98p-q24c-xw97/GHSA-f98p-q24c-xw97.json +++ b/advisories/unreviewed/2022/05/GHSA-f98p-q24c-xw97/GHSA-f98p-q24c-xw97.json @@ -7,12 +7,8 @@ "CVE-2021-32611" ], "details": "A NULL pointer dereference vulnerability exists in eXcall_api.c in Antisip eXosip2 through 5.2.0 when handling certain 3xx redirect responses.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f9v3-crj2-qwx2/GHSA-f9v3-crj2-qwx2.json b/advisories/unreviewed/2022/05/GHSA-f9v3-crj2-qwx2/GHSA-f9v3-crj2-qwx2.json index d22903b9aa7..21f81f3f96b 100644 --- a/advisories/unreviewed/2022/05/GHSA-f9v3-crj2-qwx2/GHSA-f9v3-crj2-qwx2.json +++ b/advisories/unreviewed/2022/05/GHSA-f9v3-crj2-qwx2/GHSA-f9v3-crj2-qwx2.json @@ -7,12 +7,8 @@ "CVE-2021-24285" ], "details": "The request_list_request AJAX call of the Car Seller - Auto Classifieds Script WordPress plugin through 2.1.0, available to both authenticated and unauthenticated users, does not sanitise, validate or escape the order_id POST parameter before using it in a SQL statement, leading to a SQL Injection issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f9wj-c5pc-g9rh/GHSA-f9wj-c5pc-g9rh.json b/advisories/unreviewed/2022/05/GHSA-f9wj-c5pc-g9rh/GHSA-f9wj-c5pc-g9rh.json index b4c58bdbd27..b2e3305fae3 100644 --- a/advisories/unreviewed/2022/05/GHSA-f9wj-c5pc-g9rh/GHSA-f9wj-c5pc-g9rh.json +++ b/advisories/unreviewed/2022/05/GHSA-f9wj-c5pc-g9rh/GHSA-f9wj-c5pc-g9rh.json @@ -7,12 +7,8 @@ "CVE-2021-29053" ], "details": "Multiple SQL injection vulnerabilities in Liferay Portal 7.3.5 and Liferay DXP 7.3 before fix pack 1 allow remote authenticated users to execute arbitrary SQL commands via the classPKField parameter to (1) CommerceChannelRelFinder.countByC_C, or (2) CommerceChannelRelFinder.findByC_C.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fh8g-8q9x-xp22/GHSA-fh8g-8q9x-xp22.json b/advisories/unreviewed/2022/05/GHSA-fh8g-8q9x-xp22/GHSA-fh8g-8q9x-xp22.json index 08211fc66dc..5561d1c7060 100644 --- a/advisories/unreviewed/2022/05/GHSA-fh8g-8q9x-xp22/GHSA-fh8g-8q9x-xp22.json +++ b/advisories/unreviewed/2022/05/GHSA-fh8g-8q9x-xp22/GHSA-fh8g-8q9x-xp22.json @@ -7,12 +7,8 @@ "CVE-2021-33514" ], "details": "Certain NETGEAR devices are affected by command injection by an unauthenticated attacker via the vulnerable /sqfs/lib/libsal.so.0.0 library used by a CGI application, as demonstrated by setup.cgi?token=';$HTTP_USER_AGENT;' with an OS command in the User-Agent field. This affects GC108P before 1.0.7.3, GC108PP before 1.0.7.3, GS108Tv3 before 7.0.6.3, GS110TPPv1 before 7.0.6.3, GS110TPv3 before 7.0.6.3, GS110TUPv1 before 1.0.4.3, GS710TUPv1 before 1.0.4.3, GS716TP before 1.0.2.3, GS716TPP before 1.0.2.3, GS724TPPv1 before 2.0.4.3, GS724TPv2 before 2.0.4.3, GS728TPPv2 before 6.0.6.3, GS728TPv2 before 6.0.6.3, GS752TPPv1 before 6.0.6.3, GS752TPv2 before 6.0.6.3, MS510TXM before 1.0.2.3, and MS510TXUP before 1.0.2.3.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fj4q-mmcw-p43v/GHSA-fj4q-mmcw-p43v.json b/advisories/unreviewed/2022/05/GHSA-fj4q-mmcw-p43v/GHSA-fj4q-mmcw-p43v.json index f3638a1df73..7e0d57b58eb 100644 --- a/advisories/unreviewed/2022/05/GHSA-fj4q-mmcw-p43v/GHSA-fj4q-mmcw-p43v.json +++ b/advisories/unreviewed/2022/05/GHSA-fj4q-mmcw-p43v/GHSA-fj4q-mmcw-p43v.json @@ -7,12 +7,8 @@ "CVE-2020-28909" ], "details": "Incorrect File Permissions in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation to root via modification of scripts. Low-privileges users are able to modify files that can be executed by sudo.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fjjw-89w5-r963/GHSA-fjjw-89w5-r963.json b/advisories/unreviewed/2022/05/GHSA-fjjw-89w5-r963/GHSA-fjjw-89w5-r963.json index 4148ebebd25..cd769bd751d 100644 --- a/advisories/unreviewed/2022/05/GHSA-fjjw-89w5-r963/GHSA-fjjw-89w5-r963.json +++ b/advisories/unreviewed/2022/05/GHSA-fjjw-89w5-r963/GHSA-fjjw-89w5-r963.json @@ -7,12 +7,8 @@ "CVE-2021-30174" ], "details": "RiyaLab CloudISO event item is added, special characters in specific field of time management page are not properly filtered, which allow remote authenticated attackers can inject malicious JavaScript and carry out stored XSS (Stored Cross-site scripting) attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fjp4-5vh7-6f5r/GHSA-fjp4-5vh7-6f5r.json b/advisories/unreviewed/2022/05/GHSA-fjp4-5vh7-6f5r/GHSA-fjp4-5vh7-6f5r.json index 4787ded6e40..94824d59ebf 100644 --- a/advisories/unreviewed/2022/05/GHSA-fjp4-5vh7-6f5r/GHSA-fjp4-5vh7-6f5r.json +++ b/advisories/unreviewed/2022/05/GHSA-fjp4-5vh7-6f5r/GHSA-fjp4-5vh7-6f5r.json @@ -7,12 +7,8 @@ "CVE-2021-31455" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA forms. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13100.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fm33-4p7j-3jhr/GHSA-fm33-4p7j-3jhr.json b/advisories/unreviewed/2022/05/GHSA-fm33-4p7j-3jhr/GHSA-fm33-4p7j-3jhr.json index 5ab475a4e3f..ff949d07398 100644 --- a/advisories/unreviewed/2022/05/GHSA-fm33-4p7j-3jhr/GHSA-fm33-4p7j-3jhr.json +++ b/advisories/unreviewed/2022/05/GHSA-fm33-4p7j-3jhr/GHSA-fm33-4p7j-3jhr.json @@ -7,12 +7,8 @@ "CVE-2021-25938" ], "details": "In ArangoDB, versions v2.2.6.2 through v3.7.10 are vulnerable to Cross-Site Scripting (XSS), since there is no validation of the .zip file name and filtering of potential abusive characters which zip files can be named to. There is no X-Frame-Options Header set, which makes it more susceptible for leveraging self XSS by attackers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fq48-p44p-fxj5/GHSA-fq48-p44p-fxj5.json b/advisories/unreviewed/2022/05/GHSA-fq48-p44p-fxj5/GHSA-fq48-p44p-fxj5.json index ebc3a81d7ac..f84d159718a 100644 --- a/advisories/unreviewed/2022/05/GHSA-fq48-p44p-fxj5/GHSA-fq48-p44p-fxj5.json +++ b/advisories/unreviewed/2022/05/GHSA-fq48-p44p-fxj5/GHSA-fq48-p44p-fxj5.json @@ -7,12 +7,8 @@ "CVE-2021-27618" ], "details": "The Integration Builder Framework of SAP Process Integration versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not check the file type extension of the file uploaded from local source. An attacker could craft a malicious file and upload it to the application, which could lead to denial of service and impact the availability of the application.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fqvq-c37v-p4xx/GHSA-fqvq-c37v-p4xx.json b/advisories/unreviewed/2022/05/GHSA-fqvq-c37v-p4xx/GHSA-fqvq-c37v-p4xx.json index 01133cc4637..1c4f89d411e 100644 --- a/advisories/unreviewed/2022/05/GHSA-fqvq-c37v-p4xx/GHSA-fqvq-c37v-p4xx.json +++ b/advisories/unreviewed/2022/05/GHSA-fqvq-c37v-p4xx/GHSA-fqvq-c37v-p4xx.json @@ -7,12 +7,8 @@ "CVE-2021-32093" ], "details": "The ConfigFileAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to read arbitrary files via the ConfigName parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-frj7-v2p3-r97g/GHSA-frj7-v2p3-r97g.json b/advisories/unreviewed/2022/05/GHSA-frj7-v2p3-r97g/GHSA-frj7-v2p3-r97g.json index e0d8bfc83f0..82a2d8e54f8 100644 --- a/advisories/unreviewed/2022/05/GHSA-frj7-v2p3-r97g/GHSA-frj7-v2p3-r97g.json +++ b/advisories/unreviewed/2022/05/GHSA-frj7-v2p3-r97g/GHSA-frj7-v2p3-r97g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-frwv-h5w4-89h8/GHSA-frwv-h5w4-89h8.json b/advisories/unreviewed/2022/05/GHSA-frwv-h5w4-89h8/GHSA-frwv-h5w4-89h8.json index ed7ce23297d..e34bdede070 100644 --- a/advisories/unreviewed/2022/05/GHSA-frwv-h5w4-89h8/GHSA-frwv-h5w4-89h8.json +++ b/advisories/unreviewed/2022/05/GHSA-frwv-h5w4-89h8/GHSA-frwv-h5w4-89h8.json @@ -7,12 +7,8 @@ "CVE-2020-24026" ], "details": "TinyShop, a free and open source mall based on RageFrame2, has a stored XSS vulnerability that affects version 1.2.0. TinyShop allows XSS via the explain_first and again_explain parameters of the /evaluate/index.php page. The vulnerability may be exploited remotely, resulting in cross-site scripting (XSS) or information disclosure.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fvm4-pf5q-h76x/GHSA-fvm4-pf5q-h76x.json b/advisories/unreviewed/2022/05/GHSA-fvm4-pf5q-h76x/GHSA-fvm4-pf5q-h76x.json index ee2b61e9c60..6543db3e24a 100644 --- a/advisories/unreviewed/2022/05/GHSA-fvm4-pf5q-h76x/GHSA-fvm4-pf5q-h76x.json +++ b/advisories/unreviewed/2022/05/GHSA-fvm4-pf5q-h76x/GHSA-fvm4-pf5q-h76x.json @@ -7,12 +7,8 @@ "CVE-2021-20392" ], "details": "IBM QRadar User Behavior Analytics 1.0.0 through 4.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fw8p-8pg5-6cwj/GHSA-fw8p-8pg5-6cwj.json b/advisories/unreviewed/2022/05/GHSA-fw8p-8pg5-6cwj/GHSA-fw8p-8pg5-6cwj.json index d3ed424940a..ed6fd2fbbae 100644 --- a/advisories/unreviewed/2022/05/GHSA-fw8p-8pg5-6cwj/GHSA-fw8p-8pg5-6cwj.json +++ b/advisories/unreviewed/2022/05/GHSA-fw8p-8pg5-6cwj/GHSA-fw8p-8pg5-6cwj.json @@ -7,12 +7,8 @@ "CVE-2020-21818" ], "details": "A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:48.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g234-fq6h-5cqw/GHSA-g234-fq6h-5cqw.json b/advisories/unreviewed/2022/05/GHSA-g234-fq6h-5cqw/GHSA-g234-fq6h-5cqw.json index 326efb8fd25..f0e6d553172 100644 --- a/advisories/unreviewed/2022/05/GHSA-g234-fq6h-5cqw/GHSA-g234-fq6h-5cqw.json +++ b/advisories/unreviewed/2022/05/GHSA-g234-fq6h-5cqw/GHSA-g234-fq6h-5cqw.json @@ -7,12 +7,8 @@ "CVE-2021-31899" ], "details": "In JetBrains Code With Me bundled to the compatible IDEs before version 2021.1, the client could execute code in read-only mode.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g2fh-2pjf-f9ww/GHSA-g2fh-2pjf-f9ww.json b/advisories/unreviewed/2022/05/GHSA-g2fh-2pjf-f9ww/GHSA-g2fh-2pjf-f9ww.json index 4a2397cbc85..f8ae5934613 100644 --- a/advisories/unreviewed/2022/05/GHSA-g2fh-2pjf-f9ww/GHSA-g2fh-2pjf-f9ww.json +++ b/advisories/unreviewed/2022/05/GHSA-g2fh-2pjf-f9ww/GHSA-g2fh-2pjf-f9ww.json @@ -7,12 +7,8 @@ "CVE-2021-24297" ], "details": "The Goto WordPress theme before 2.1 did not properly sanitize the formvalue JSON POST parameter in its tl_filter AJAX action, leading to an unauthenticated Reflected Cross-site Scripting (XSS) vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g2hm-c743-jqff/GHSA-g2hm-c743-jqff.json b/advisories/unreviewed/2022/05/GHSA-g2hm-c743-jqff/GHSA-g2hm-c743-jqff.json index af682a57cbc..fa3d7190724 100644 --- a/advisories/unreviewed/2022/05/GHSA-g2hm-c743-jqff/GHSA-g2hm-c743-jqff.json +++ b/advisories/unreviewed/2022/05/GHSA-g2hm-c743-jqff/GHSA-g2hm-c743-jqff.json @@ -7,12 +7,8 @@ "CVE-2021-31913" ], "details": "In JetBrains TeamCity before 2020.2.3, insufficient checks of the redirect_uri were made during GitHub SSO token exchange.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g344-x9pw-x34q/GHSA-g344-x9pw-x34q.json b/advisories/unreviewed/2022/05/GHSA-g344-x9pw-x34q/GHSA-g344-x9pw-x34q.json index 298afbbe2b0..58d65a072a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-g344-x9pw-x34q/GHSA-g344-x9pw-x34q.json +++ b/advisories/unreviewed/2022/05/GHSA-g344-x9pw-x34q/GHSA-g344-x9pw-x34q.json @@ -7,12 +7,8 @@ "CVE-2020-21836" ], "details": "A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_preview ../../src/decode.c:3175.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g3h3-63v2-pvw6/GHSA-g3h3-63v2-pvw6.json b/advisories/unreviewed/2022/05/GHSA-g3h3-63v2-pvw6/GHSA-g3h3-63v2-pvw6.json index ac4b2a3b359..6423cbf8d7d 100644 --- a/advisories/unreviewed/2022/05/GHSA-g3h3-63v2-pvw6/GHSA-g3h3-63v2-pvw6.json +++ b/advisories/unreviewed/2022/05/GHSA-g3h3-63v2-pvw6/GHSA-g3h3-63v2-pvw6.json @@ -7,12 +7,8 @@ "CVE-2021-30081" ], "details": "An issue was discovered in emlog 6.0.0stable. There is a SQL Injection vulnerability that can execute any SQL statement and query server sensitive data via admin/navbar.php?action=add_page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g4j7-25m5-ppqr/GHSA-g4j7-25m5-ppqr.json b/advisories/unreviewed/2022/05/GHSA-g4j7-25m5-ppqr/GHSA-g4j7-25m5-ppqr.json index e2434b32359..6a3ec710f0e 100644 --- a/advisories/unreviewed/2022/05/GHSA-g4j7-25m5-ppqr/GHSA-g4j7-25m5-ppqr.json +++ b/advisories/unreviewed/2022/05/GHSA-g4j7-25m5-ppqr/GHSA-g4j7-25m5-ppqr.json @@ -7,12 +7,8 @@ "CVE-2021-31460" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing of XFA templates. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13096.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g52j-gj35-mhpv/GHSA-g52j-gj35-mhpv.json b/advisories/unreviewed/2022/05/GHSA-g52j-gj35-mhpv/GHSA-g52j-gj35-mhpv.json index a1a4401f325..3ef7843f6ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-g52j-gj35-mhpv/GHSA-g52j-gj35-mhpv.json +++ b/advisories/unreviewed/2022/05/GHSA-g52j-gj35-mhpv/GHSA-g52j-gj35-mhpv.json @@ -7,12 +7,8 @@ "CVE-2020-23373" ], "details": "Cross-site scripting (XSS) vulnerability in admin/nav/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the name parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g5pg-x77h-xc29/GHSA-g5pg-x77h-xc29.json b/advisories/unreviewed/2022/05/GHSA-g5pg-x77h-xc29/GHSA-g5pg-x77h-xc29.json index be52728fa1d..5ee86ff974a 100644 --- a/advisories/unreviewed/2022/05/GHSA-g5pg-x77h-xc29/GHSA-g5pg-x77h-xc29.json +++ b/advisories/unreviewed/2022/05/GHSA-g5pg-x77h-xc29/GHSA-g5pg-x77h-xc29.json @@ -7,12 +7,8 @@ "CVE-2021-31463" ], "details": "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-13573.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g68g-qfgw-mffh/GHSA-g68g-qfgw-mffh.json b/advisories/unreviewed/2022/05/GHSA-g68g-qfgw-mffh/GHSA-g68g-qfgw-mffh.json index 88c610d2592..a930adce75b 100644 --- a/advisories/unreviewed/2022/05/GHSA-g68g-qfgw-mffh/GHSA-g68g-qfgw-mffh.json +++ b/advisories/unreviewed/2022/05/GHSA-g68g-qfgw-mffh/GHSA-g68g-qfgw-mffh.json @@ -7,12 +7,8 @@ "CVE-2021-20310" ], "details": "A flaw was found in ImageMagick in versions before 7.0.11, where a division by zero ConvertXYZToJzazbz() of MagickCore/colorspace.c may trigger undefined behavior via a crafted image file that is submitted by an attacker and processed by an application using ImageMagick. The highest threat from this vulnerability is to system availability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g83f-4wc9-q7cv/GHSA-g83f-4wc9-q7cv.json b/advisories/unreviewed/2022/05/GHSA-g83f-4wc9-q7cv/GHSA-g83f-4wc9-q7cv.json index 3d31b1885e7..e6cab56e789 100644 --- a/advisories/unreviewed/2022/05/GHSA-g83f-4wc9-q7cv/GHSA-g83f-4wc9-q7cv.json +++ b/advisories/unreviewed/2022/05/GHSA-g83f-4wc9-q7cv/GHSA-g83f-4wc9-q7cv.json @@ -7,12 +7,8 @@ "CVE-2021-32100" ], "details": "A remote file inclusion vulnerability exists in Artica Pandora FMS 742, exploitable by the lowest privileged user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g8ph-56pg-h88p/GHSA-g8ph-56pg-h88p.json b/advisories/unreviewed/2022/05/GHSA-g8ph-56pg-h88p/GHSA-g8ph-56pg-h88p.json index 346217393b4..16259bc834f 100644 --- a/advisories/unreviewed/2022/05/GHSA-g8ph-56pg-h88p/GHSA-g8ph-56pg-h88p.json +++ b/advisories/unreviewed/2022/05/GHSA-g8ph-56pg-h88p/GHSA-g8ph-56pg-h88p.json @@ -7,12 +7,8 @@ "CVE-2021-25846" ], "details": "Improper validation of the ChassisID TLV in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, allows attackers to cause a denial of service due to a negative number passed to the memcpy function via a crafted lldp packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g8v8-2f42-88xv/GHSA-g8v8-2f42-88xv.json b/advisories/unreviewed/2022/05/GHSA-g8v8-2f42-88xv/GHSA-g8v8-2f42-88xv.json index e206458fc85..9b7fe9017b0 100644 --- a/advisories/unreviewed/2022/05/GHSA-g8v8-2f42-88xv/GHSA-g8v8-2f42-88xv.json +++ b/advisories/unreviewed/2022/05/GHSA-g8v8-2f42-88xv/GHSA-g8v8-2f42-88xv.json @@ -7,12 +7,8 @@ "CVE-2020-18165" ], "details": "Cross Site Scripting (XSS) in LAOBANCMS v2.0 allows remote attackers to execute arbitrary code by injecting commands into the \"Website SEO Keywords\" field on the page \"admin/info.php?shuyu\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gc8p-jvx2-7658/GHSA-gc8p-jvx2-7658.json b/advisories/unreviewed/2022/05/GHSA-gc8p-jvx2-7658/GHSA-gc8p-jvx2-7658.json index cbb65f66d4c..ea07e00f57a 100644 --- a/advisories/unreviewed/2022/05/GHSA-gc8p-jvx2-7658/GHSA-gc8p-jvx2-7658.json +++ b/advisories/unreviewed/2022/05/GHSA-gc8p-jvx2-7658/GHSA-gc8p-jvx2-7658.json @@ -7,12 +7,8 @@ "CVE-2020-21815" ], "details": "A null pointer deference issue exists in GNU LibreDWG 0.10.2641 via output_TEXT ../../programs/dwg2SVG.c:114, which causes a denial of service (application crash).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ghg3-3cwf-8cwp/GHSA-ghg3-3cwf-8cwp.json b/advisories/unreviewed/2022/05/GHSA-ghg3-3cwf-8cwp/GHSA-ghg3-3cwf-8cwp.json index 9c8f928664f..221745c591c 100644 --- a/advisories/unreviewed/2022/05/GHSA-ghg3-3cwf-8cwp/GHSA-ghg3-3cwf-8cwp.json +++ b/advisories/unreviewed/2022/05/GHSA-ghg3-3cwf-8cwp/GHSA-ghg3-3cwf-8cwp.json @@ -7,12 +7,8 @@ "CVE-2021-22672" ], "details": "Delta Electronics' CNCSoft ScreenEditor in versions prior to v1.01.30 could allow the corruption of data, a denial-of-service condition, or code execution. The vulnerability may allow an attacker to remotely execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ghq7-3x33-99fm/GHSA-ghq7-3x33-99fm.json b/advisories/unreviewed/2022/05/GHSA-ghq7-3x33-99fm/GHSA-ghq7-3x33-99fm.json index 32691715170..7728eda6fdf 100644 --- a/advisories/unreviewed/2022/05/GHSA-ghq7-3x33-99fm/GHSA-ghq7-3x33-99fm.json +++ b/advisories/unreviewed/2022/05/GHSA-ghq7-3x33-99fm/GHSA-ghq7-3x33-99fm.json @@ -7,12 +7,8 @@ "CVE-2021-31456" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13102.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gm4q-9jx5-3gfv/GHSA-gm4q-9jx5-3gfv.json b/advisories/unreviewed/2022/05/GHSA-gm4q-9jx5-3gfv/GHSA-gm4q-9jx5-3gfv.json index 8552aee85f5..20b63eb16bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-gm4q-9jx5-3gfv/GHSA-gm4q-9jx5-3gfv.json +++ b/advisories/unreviewed/2022/05/GHSA-gm4q-9jx5-3gfv/GHSA-gm4q-9jx5-3gfv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gmqx-945f-m2g6/GHSA-gmqx-945f-m2g6.json b/advisories/unreviewed/2022/05/GHSA-gmqx-945f-m2g6/GHSA-gmqx-945f-m2g6.json index c8d663cdfea..d81318684c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-gmqx-945f-m2g6/GHSA-gmqx-945f-m2g6.json +++ b/advisories/unreviewed/2022/05/GHSA-gmqx-945f-m2g6/GHSA-gmqx-945f-m2g6.json @@ -7,12 +7,8 @@ "CVE-2020-27185" ], "details": "Cleartext transmission of sensitive information via Moxa Service in NPort IA5000A series serial devices. Successfully exploiting the vulnerability could enable attackers to read authentication data, device configuration, and other sensitive data transmitted over Moxa Service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gmr9-5mcv-ccr9/GHSA-gmr9-5mcv-ccr9.json b/advisories/unreviewed/2022/05/GHSA-gmr9-5mcv-ccr9/GHSA-gmr9-5mcv-ccr9.json index 3e0e3defcbd..99dab8c45a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-gmr9-5mcv-ccr9/GHSA-gmr9-5mcv-ccr9.json +++ b/advisories/unreviewed/2022/05/GHSA-gmr9-5mcv-ccr9/GHSA-gmr9-5mcv-ccr9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gvp4-g6f7-f92f/GHSA-gvp4-g6f7-f92f.json b/advisories/unreviewed/2022/05/GHSA-gvp4-g6f7-f92f/GHSA-gvp4-g6f7-f92f.json index 875b3d6af7d..c81cdccf7e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-gvp4-g6f7-f92f/GHSA-gvp4-g6f7-f92f.json +++ b/advisories/unreviewed/2022/05/GHSA-gvp4-g6f7-f92f/GHSA-gvp4-g6f7-f92f.json @@ -7,12 +7,8 @@ "CVE-2021-20557" ], "details": "IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 199184.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gxpm-63fr-38v5/GHSA-gxpm-63fr-38v5.json b/advisories/unreviewed/2022/05/GHSA-gxpm-63fr-38v5/GHSA-gxpm-63fr-38v5.json index 7e5dc5cce17..4bdbaf570e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-gxpm-63fr-38v5/GHSA-gxpm-63fr-38v5.json +++ b/advisories/unreviewed/2022/05/GHSA-gxpm-63fr-38v5/GHSA-gxpm-63fr-38v5.json @@ -7,12 +7,8 @@ "CVE-2021-27924" ], "details": "An issue was discovered in Couchbase Server 6.x through 6.6.1. The Couchbase Server UI is insecurely logging session cookies in the logs. This allows for the impersonation of a user if the log files are obtained by an attacker before a session cookie expires.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h27r-3mr3-p6jv/GHSA-h27r-3mr3-p6jv.json b/advisories/unreviewed/2022/05/GHSA-h27r-3mr3-p6jv/GHSA-h27r-3mr3-p6jv.json index fe2f9a6e9b4..57604b44204 100644 --- a/advisories/unreviewed/2022/05/GHSA-h27r-3mr3-p6jv/GHSA-h27r-3mr3-p6jv.json +++ b/advisories/unreviewed/2022/05/GHSA-h27r-3mr3-p6jv/GHSA-h27r-3mr3-p6jv.json @@ -7,12 +7,8 @@ "CVE-2020-24992" ], "details": "There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when an administrator accesses the content management module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h284-6789-756m/GHSA-h284-6789-756m.json b/advisories/unreviewed/2022/05/GHSA-h284-6789-756m/GHSA-h284-6789-756m.json index dc0a3f5b784..3e22ad405b0 100644 --- a/advisories/unreviewed/2022/05/GHSA-h284-6789-756m/GHSA-h284-6789-756m.json +++ b/advisories/unreviewed/2022/05/GHSA-h284-6789-756m/GHSA-h284-6789-756m.json @@ -7,12 +7,8 @@ "CVE-2021-32238" ], "details": "Epic Games / Psyonix Rocket League <=1.95 is affected by Buffer Overflow. Stack-based buffer overflow occurs when Rocket League handles UPK object files that can result in code execution and denial of service scenario.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h34f-cf95-vh44/GHSA-h34f-cf95-vh44.json b/advisories/unreviewed/2022/05/GHSA-h34f-cf95-vh44/GHSA-h34f-cf95-vh44.json index 16fb63771f0..293ed2dbd48 100644 --- a/advisories/unreviewed/2022/05/GHSA-h34f-cf95-vh44/GHSA-h34f-cf95-vh44.json +++ b/advisories/unreviewed/2022/05/GHSA-h34f-cf95-vh44/GHSA-h34f-cf95-vh44.json @@ -7,12 +7,8 @@ "CVE-2021-23907" ], "details": "An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. The count in MultiSvGet, GetAttributes, and MultiSvSet is not checked in the HiQnet Protocol, leading to remote code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-h3wh-323m-4h77/GHSA-h3wh-323m-4h77.json b/advisories/unreviewed/2022/05/GHSA-h3wh-323m-4h77/GHSA-h3wh-323m-4h77.json index dde05874d1c..e12a1ddf253 100644 --- a/advisories/unreviewed/2022/05/GHSA-h3wh-323m-4h77/GHSA-h3wh-323m-4h77.json +++ b/advisories/unreviewed/2022/05/GHSA-h3wh-323m-4h77/GHSA-h3wh-323m-4h77.json @@ -7,12 +7,8 @@ "CVE-2021-20995" ], "details": "In multiple managed switches by WAGO in different versions the webserver cookies of the web based UI contain user credentials.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h45j-h84g-x6fh/GHSA-h45j-h84g-x6fh.json b/advisories/unreviewed/2022/05/GHSA-h45j-h84g-x6fh/GHSA-h45j-h84g-x6fh.json index bac313cca0b..381394af9e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-h45j-h84g-x6fh/GHSA-h45j-h84g-x6fh.json +++ b/advisories/unreviewed/2022/05/GHSA-h45j-h84g-x6fh/GHSA-h45j-h84g-x6fh.json @@ -7,12 +7,8 @@ "CVE-2020-36364" ], "details": "An issue was discovered in Smartstore (aka SmartStoreNET) before 4.1.0. Administration/Controllers/ImportController.cs allows path traversal (for copy and delete actions) in the ImportController.Create method via a TempFileName field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h5qf-rf3c-vmj5/GHSA-h5qf-rf3c-vmj5.json b/advisories/unreviewed/2022/05/GHSA-h5qf-rf3c-vmj5/GHSA-h5qf-rf3c-vmj5.json index 45272c09761..5e2cb90012f 100644 --- a/advisories/unreviewed/2022/05/GHSA-h5qf-rf3c-vmj5/GHSA-h5qf-rf3c-vmj5.json +++ b/advisories/unreviewed/2022/05/GHSA-h5qf-rf3c-vmj5/GHSA-h5qf-rf3c-vmj5.json @@ -7,12 +7,8 @@ "CVE-2020-23856" ], "details": "Use-after-Free vulnerability in cflow 1.6 in the void call(char *name, int line) function at src/parser.c, which could cause a denial of service via the pointer variable caller->callee.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h5xr-4f4c-mr5x/GHSA-h5xr-4f4c-mr5x.json b/advisories/unreviewed/2022/05/GHSA-h5xr-4f4c-mr5x/GHSA-h5xr-4f4c-mr5x.json index eba278d4804..b8a2bfb1b00 100644 --- a/advisories/unreviewed/2022/05/GHSA-h5xr-4f4c-mr5x/GHSA-h5xr-4f4c-mr5x.json +++ b/advisories/unreviewed/2022/05/GHSA-h5xr-4f4c-mr5x/GHSA-h5xr-4f4c-mr5x.json @@ -7,12 +7,8 @@ "CVE-2020-18195" ], "details": "Cross Site Request Forgery (CSRF) in Pluck CMS v4.7.9 allows remote attackers to execute arbitrary code and delete a specific article via the component \" /admin.php?action=page.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h767-w58v-w95j/GHSA-h767-w58v-w95j.json b/advisories/unreviewed/2022/05/GHSA-h767-w58v-w95j/GHSA-h767-w58v-w95j.json index 2c3a2a0a134..cf59eb01ed5 100644 --- a/advisories/unreviewed/2022/05/GHSA-h767-w58v-w95j/GHSA-h767-w58v-w95j.json +++ b/advisories/unreviewed/2022/05/GHSA-h767-w58v-w95j/GHSA-h767-w58v-w95j.json @@ -7,12 +7,8 @@ "CVE-2021-1254" ], "details": "Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface of the affected software. An attacker could exploit these vulnerabilities by injecting malicious code into the web-based management interface and persuading a user to click a malicious link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. An attacker needs valid administrator credentials to inject the malicious script code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h97j-5ccr-wj2x/GHSA-h97j-5ccr-wj2x.json b/advisories/unreviewed/2022/05/GHSA-h97j-5ccr-wj2x/GHSA-h97j-5ccr-wj2x.json index 6942d742f98..01831df4e4a 100644 --- a/advisories/unreviewed/2022/05/GHSA-h97j-5ccr-wj2x/GHSA-h97j-5ccr-wj2x.json +++ b/advisories/unreviewed/2022/05/GHSA-h97j-5ccr-wj2x/GHSA-h97j-5ccr-wj2x.json @@ -7,12 +7,8 @@ "CVE-2021-32816" ], "details": "ProtonMail Web Client is the official AngularJS web client for the ProtonMail secure email service. ProtonMail Web Client before version 3.16.60 has a regular expression denial-of-service vulnerability. This was fixed in commit 6687fb. There is a full report available in the referenced GHSL-2021-027.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h99q-95g4-99vh/GHSA-h99q-95g4-99vh.json b/advisories/unreviewed/2022/05/GHSA-h99q-95g4-99vh/GHSA-h99q-95g4-99vh.json index 2e8939fe0f8..8e4dbbd7166 100644 --- a/advisories/unreviewed/2022/05/GHSA-h99q-95g4-99vh/GHSA-h99q-95g4-99vh.json +++ b/advisories/unreviewed/2022/05/GHSA-h99q-95g4-99vh/GHSA-h99q-95g4-99vh.json @@ -7,12 +7,8 @@ "CVE-2021-32103" ], "details": "A Stored XSS vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject arbitrary web script or HTML via the lname parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h9g2-m48g-9g25/GHSA-h9g2-m48g-9g25.json b/advisories/unreviewed/2022/05/GHSA-h9g2-m48g-9g25/GHSA-h9g2-m48g-9g25.json index f7b156149b4..32c55339923 100644 --- a/advisories/unreviewed/2022/05/GHSA-h9g2-m48g-9g25/GHSA-h9g2-m48g-9g25.json +++ b/advisories/unreviewed/2022/05/GHSA-h9g2-m48g-9g25/GHSA-h9g2-m48g-9g25.json @@ -7,12 +7,8 @@ "CVE-2020-4811" ], "details": "IBM Cloud Pak for Security (CP4S) 1.4.0.0, 1.5.0.0, 1.5.0.1, 1.6.0.0, and 1.6.0.1 could allow a privileged user to inject inject malicious data using a specially crafted HTTP request due to improper input validation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hgxv-rrp4-4439/GHSA-hgxv-rrp4-4439.json b/advisories/unreviewed/2022/05/GHSA-hgxv-rrp4-4439/GHSA-hgxv-rrp4-4439.json index 1dd3b944541..32ef7b4762e 100644 --- a/advisories/unreviewed/2022/05/GHSA-hgxv-rrp4-4439/GHSA-hgxv-rrp4-4439.json +++ b/advisories/unreviewed/2022/05/GHSA-hgxv-rrp4-4439/GHSA-hgxv-rrp4-4439.json @@ -7,12 +7,8 @@ "CVE-2020-21819" ], "details": "A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10.2641via htmlescape ../../programs/escape.c:51.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hh89-v8x4-q57w/GHSA-hh89-v8x4-q57w.json b/advisories/unreviewed/2022/05/GHSA-hh89-v8x4-q57w/GHSA-hh89-v8x4-q57w.json index 8b67dc787ae..ec54c960bab 100644 --- a/advisories/unreviewed/2022/05/GHSA-hh89-v8x4-q57w/GHSA-hh89-v8x4-q57w.json +++ b/advisories/unreviewed/2022/05/GHSA-hh89-v8x4-q57w/GHSA-hh89-v8x4-q57w.json @@ -7,12 +7,8 @@ "CVE-2020-13873" ], "details": "A SQL Injection vulnerability in get_topic_info() in sys/CODOF/Forum/Topic.php in Codoforum before 4.9 allows remote attackers (pre-authentication) to bypass the admin page via a leaked password-reset token of the admin. (As an admin, an attacker can upload a PHP shell and execute remote code on the operating system.)", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hmm7-39qh-h2pq/GHSA-hmm7-39qh-h2pq.json b/advisories/unreviewed/2022/05/GHSA-hmm7-39qh-h2pq/GHSA-hmm7-39qh-h2pq.json index 9952834d59a..993a60d9a07 100644 --- a/advisories/unreviewed/2022/05/GHSA-hmm7-39qh-h2pq/GHSA-hmm7-39qh-h2pq.json +++ b/advisories/unreviewed/2022/05/GHSA-hmm7-39qh-h2pq/GHSA-hmm7-39qh-h2pq.json @@ -7,12 +7,8 @@ "CVE-2020-26006" ], "details": "Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting (XSS) via account.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hp2v-pv3m-jv9m/GHSA-hp2v-pv3m-jv9m.json b/advisories/unreviewed/2022/05/GHSA-hp2v-pv3m-jv9m/GHSA-hp2v-pv3m-jv9m.json index 93435c8db6f..f0f9ed13f36 100644 --- a/advisories/unreviewed/2022/05/GHSA-hp2v-pv3m-jv9m/GHSA-hp2v-pv3m-jv9m.json +++ b/advisories/unreviewed/2022/05/GHSA-hp2v-pv3m-jv9m/GHSA-hp2v-pv3m-jv9m.json @@ -7,12 +7,8 @@ "CVE-2020-24993" ], "details": "There is a cross site scripting vulnerability on CmsWing 1.3.7. This vulnerability (stored XSS) is triggered when visitors access the article module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hqqh-jq4c-g3w3/GHSA-hqqh-jq4c-g3w3.json b/advisories/unreviewed/2022/05/GHSA-hqqh-jq4c-g3w3/GHSA-hqqh-jq4c-g3w3.json index fd3b531740b..b106c51d7cd 100644 --- a/advisories/unreviewed/2022/05/GHSA-hqqh-jq4c-g3w3/GHSA-hqqh-jq4c-g3w3.json +++ b/advisories/unreviewed/2022/05/GHSA-hqqh-jq4c-g3w3/GHSA-hqqh-jq4c-g3w3.json @@ -7,12 +7,8 @@ "CVE-2021-31321" ], "details": "Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Stack Based Overflow in the gray_split_cubic function of their custom fork of the rlottie library. A remote attacker might be able to overwrite Telegram's stack memory out-of-bounds on a victim device via a malicious animated sticker.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hv9q-h9ff-9wxj/GHSA-hv9q-h9ff-9wxj.json b/advisories/unreviewed/2022/05/GHSA-hv9q-h9ff-9wxj/GHSA-hv9q-h9ff-9wxj.json index 6def1c544c1..7cd8d620ead 100644 --- a/advisories/unreviewed/2022/05/GHSA-hv9q-h9ff-9wxj/GHSA-hv9q-h9ff-9wxj.json +++ b/advisories/unreviewed/2022/05/GHSA-hv9q-h9ff-9wxj/GHSA-hv9q-h9ff-9wxj.json @@ -7,12 +7,8 @@ "CVE-2021-22152" ], "details": "A Denial of Service due to Improper Input Validation vulnerability in the Management Console component of BlackBerry UEM version(s) 12.13.1 QF2 and earlier and 12.12.1a QF6 and earlier could allow an attacker to potentially to prevent any new user connections.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hwrw-j4pc-89pr/GHSA-hwrw-j4pc-89pr.json b/advisories/unreviewed/2022/05/GHSA-hwrw-j4pc-89pr/GHSA-hwrw-j4pc-89pr.json index 37990f433c4..fff24adb153 100644 --- a/advisories/unreviewed/2022/05/GHSA-hwrw-j4pc-89pr/GHSA-hwrw-j4pc-89pr.json +++ b/advisories/unreviewed/2022/05/GHSA-hwrw-j4pc-89pr/GHSA-hwrw-j4pc-89pr.json @@ -7,12 +7,8 @@ "CVE-2021-30214" ], "details": "Knowage Suite 7.3 is vulnerable to Stored Client-Side Template Injection in '/knowage/restful-services/signup/update' via the 'name' parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j35m-3732-37hp/GHSA-j35m-3732-37hp.json b/advisories/unreviewed/2022/05/GHSA-j35m-3732-37hp/GHSA-j35m-3732-37hp.json index 9a477f349ac..bef445ce382 100644 --- a/advisories/unreviewed/2022/05/GHSA-j35m-3732-37hp/GHSA-j35m-3732-37hp.json +++ b/advisories/unreviewed/2022/05/GHSA-j35m-3732-37hp/GHSA-j35m-3732-37hp.json @@ -7,12 +7,8 @@ "CVE-2020-21817" ], "details": "A null pointer dereference issue exists in GNU LibreDWG 0.10.2641 via htmlescape ../../programs/escape.c:29. which causes a denial of service (application crash).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j3pj-94ww-qq3j/GHSA-j3pj-94ww-qq3j.json b/advisories/unreviewed/2022/05/GHSA-j3pj-94ww-qq3j/GHSA-j3pj-94ww-qq3j.json index c182392fed0..9e4f3c13656 100644 --- a/advisories/unreviewed/2022/05/GHSA-j3pj-94ww-qq3j/GHSA-j3pj-94ww-qq3j.json +++ b/advisories/unreviewed/2022/05/GHSA-j3pj-94ww-qq3j/GHSA-j3pj-94ww-qq3j.json @@ -7,12 +7,8 @@ "CVE-2021-27413" ], "details": "Omron CX-One Versions 4.60 and prior, including CX-Server Versions 5.0.29.0 and prior, are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j623-h46r-v5wr/GHSA-j623-h46r-v5wr.json b/advisories/unreviewed/2022/05/GHSA-j623-h46r-v5wr/GHSA-j623-h46r-v5wr.json index 99b71c99b6a..3f792dd3cf2 100644 --- a/advisories/unreviewed/2022/05/GHSA-j623-h46r-v5wr/GHSA-j623-h46r-v5wr.json +++ b/advisories/unreviewed/2022/05/GHSA-j623-h46r-v5wr/GHSA-j623-h46r-v5wr.json @@ -7,12 +7,8 @@ "CVE-2021-32054" ], "details": "Firely/Incendi Spark before 1.5.5-r4 lacks Content-Disposition headers in certain situations, which may cause crafted files to be delivered to clients such that they are rendered directly in a victim's web browser.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j8hg-ph7r-fwmj/GHSA-j8hg-ph7r-fwmj.json b/advisories/unreviewed/2022/05/GHSA-j8hg-ph7r-fwmj/GHSA-j8hg-ph7r-fwmj.json index cdd551a7478..ac1488ded48 100644 --- a/advisories/unreviewed/2022/05/GHSA-j8hg-ph7r-fwmj/GHSA-j8hg-ph7r-fwmj.json +++ b/advisories/unreviewed/2022/05/GHSA-j8hg-ph7r-fwmj/GHSA-j8hg-ph7r-fwmj.json @@ -7,12 +7,8 @@ "CVE-2021-31158" ], "details": "In the Query Engine in Couchbase Server 6.5.x and 6.6.x through 6.6.1, Common Table Expression queries were not correctly checking the user's permissions, allowing read-access to resources beyond what those users were explicitly allowed to access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j8w7-pmfx-jm24/GHSA-j8w7-pmfx-jm24.json b/advisories/unreviewed/2022/05/GHSA-j8w7-pmfx-jm24/GHSA-j8w7-pmfx-jm24.json index bd2f91600c9..771195fdb26 100644 --- a/advisories/unreviewed/2022/05/GHSA-j8w7-pmfx-jm24/GHSA-j8w7-pmfx-jm24.json +++ b/advisories/unreviewed/2022/05/GHSA-j8w7-pmfx-jm24/GHSA-j8w7-pmfx-jm24.json @@ -7,12 +7,8 @@ "CVE-2020-28900" ], "details": "Insufficient Verification of Data Authenticity in Nagios Fusion 4.1.8 and earlier and Nagios XI 5.7.5 and earlier allows for Escalation of Privileges or Code Execution as root via vectors related to an untrusted update package to upgrade_to_latest.sh.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j95v-w48r-jr36/GHSA-j95v-w48r-jr36.json b/advisories/unreviewed/2022/05/GHSA-j95v-w48r-jr36/GHSA-j95v-w48r-jr36.json index d10c4cf0626..e75d80cabb3 100644 --- a/advisories/unreviewed/2022/05/GHSA-j95v-w48r-jr36/GHSA-j95v-w48r-jr36.json +++ b/advisories/unreviewed/2022/05/GHSA-j95v-w48r-jr36/GHSA-j95v-w48r-jr36.json @@ -7,12 +7,8 @@ "CVE-2021-20385" ], "details": "IBM Security Guardium 11.2 could allow a remote authenticated attacker to execute arbitrary commands on the system. By sending a specially-crafted request, an attacker could exploit this vulnerability to execute arbitrary commands on the system. IBM X-Force ID: 195766.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j9c9-wvm3-3jp5/GHSA-j9c9-wvm3-3jp5.json b/advisories/unreviewed/2022/05/GHSA-j9c9-wvm3-3jp5/GHSA-j9c9-wvm3-3jp5.json index 58989fb0f48..dab97bc1eb3 100644 --- a/advisories/unreviewed/2022/05/GHSA-j9c9-wvm3-3jp5/GHSA-j9c9-wvm3-3jp5.json +++ b/advisories/unreviewed/2022/05/GHSA-j9c9-wvm3-3jp5/GHSA-j9c9-wvm3-3jp5.json @@ -7,12 +7,8 @@ "CVE-2021-31462" ], "details": "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-13572.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j9pm-x686-vcvp/GHSA-j9pm-x686-vcvp.json b/advisories/unreviewed/2022/05/GHSA-j9pm-x686-vcvp/GHSA-j9pm-x686-vcvp.json index 17679b790e4..9fba0b2822b 100644 --- a/advisories/unreviewed/2022/05/GHSA-j9pm-x686-vcvp/GHSA-j9pm-x686-vcvp.json +++ b/advisories/unreviewed/2022/05/GHSA-j9pm-x686-vcvp/GHSA-j9pm-x686-vcvp.json @@ -7,12 +7,8 @@ "CVE-2021-27737" ], "details": "Apache Traffic Server 9.0.0 is vulnerable to a remote DOS attack on the experimental Slicer plugin.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jhrw-h349-fv5w/GHSA-jhrw-h349-fv5w.json b/advisories/unreviewed/2022/05/GHSA-jhrw-h349-fv5w/GHSA-jhrw-h349-fv5w.json index c3d6de6db52..b577833fae4 100644 --- a/advisories/unreviewed/2022/05/GHSA-jhrw-h349-fv5w/GHSA-jhrw-h349-fv5w.json +++ b/advisories/unreviewed/2022/05/GHSA-jhrw-h349-fv5w/GHSA-jhrw-h349-fv5w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jm36-c9r2-g7rq/GHSA-jm36-c9r2-g7rq.json b/advisories/unreviewed/2022/05/GHSA-jm36-c9r2-g7rq/GHSA-jm36-c9r2-g7rq.json index 3d4b1ccbfef..776337a36e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-jm36-c9r2-g7rq/GHSA-jm36-c9r2-g7rq.json +++ b/advisories/unreviewed/2022/05/GHSA-jm36-c9r2-g7rq/GHSA-jm36-c9r2-g7rq.json @@ -7,12 +7,8 @@ "CVE-2021-23134" ], "details": "Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.2 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAP_NET_RAW capability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jq43-856v-c3jr/GHSA-jq43-856v-c3jr.json b/advisories/unreviewed/2022/05/GHSA-jq43-856v-c3jr/GHSA-jq43-856v-c3jr.json index ce924dcaa19..8e477864d0a 100644 --- a/advisories/unreviewed/2022/05/GHSA-jq43-856v-c3jr/GHSA-jq43-856v-c3jr.json +++ b/advisories/unreviewed/2022/05/GHSA-jq43-856v-c3jr/GHSA-jq43-856v-c3jr.json @@ -7,12 +7,8 @@ "CVE-2021-24280" ], "details": "In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, any authenticated user, such as a subscriber, could use the import_from_debug AJAX action to inject PHP objects.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jrcf-96j2-jpvh/GHSA-jrcf-96j2-jpvh.json b/advisories/unreviewed/2022/05/GHSA-jrcf-96j2-jpvh/GHSA-jrcf-96j2-jpvh.json index 802eabaf85b..4421088fde9 100644 --- a/advisories/unreviewed/2022/05/GHSA-jrcf-96j2-jpvh/GHSA-jrcf-96j2-jpvh.json +++ b/advisories/unreviewed/2022/05/GHSA-jrcf-96j2-jpvh/GHSA-jrcf-96j2-jpvh.json @@ -7,12 +7,8 @@ "CVE-2021-3445" ], "details": "A flaw was found in libdnf's signature verification functionality in versions before 0.60.1. This flaw allows an attacker to achieve code execution if they can alter the header information of an RPM package and then trick a user or system into installing it. The highest risk of this vulnerability is to confidentiality, integrity, as well as system availability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jv4r-hc9x-r99x/GHSA-jv4r-hc9x-r99x.json b/advisories/unreviewed/2022/05/GHSA-jv4r-hc9x-r99x/GHSA-jv4r-hc9x-r99x.json index c8c938ca885..4aaa5fbd0f3 100644 --- a/advisories/unreviewed/2022/05/GHSA-jv4r-hc9x-r99x/GHSA-jv4r-hc9x-r99x.json +++ b/advisories/unreviewed/2022/05/GHSA-jv4r-hc9x-r99x/GHSA-jv4r-hc9x-r99x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jvpj-x4cx-678c/GHSA-jvpj-x4cx-678c.json b/advisories/unreviewed/2022/05/GHSA-jvpj-x4cx-678c/GHSA-jvpj-x4cx-678c.json index 454a5a59638..eb7358432bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-jvpj-x4cx-678c/GHSA-jvpj-x4cx-678c.json +++ b/advisories/unreviewed/2022/05/GHSA-jvpj-x4cx-678c/GHSA-jvpj-x4cx-678c.json @@ -7,12 +7,8 @@ "CVE-2021-26583" ], "details": "Potential security vulnerabilities have been identified in HPE iLO Amplifier Pack using bootstrap framework. The vulnerabilities could be remotely exploited to allow remote code execution and cross site scripting (XSS). HPE has released a software update to resolve the vulnerabilities in the HPE iLO Amplifier Pack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jvqw-v5h3-ccw4/GHSA-jvqw-v5h3-ccw4.json b/advisories/unreviewed/2022/05/GHSA-jvqw-v5h3-ccw4/GHSA-jvqw-v5h3-ccw4.json index c9a3f270cd8..93b641700f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-jvqw-v5h3-ccw4/GHSA-jvqw-v5h3-ccw4.json +++ b/advisories/unreviewed/2022/05/GHSA-jvqw-v5h3-ccw4/GHSA-jvqw-v5h3-ccw4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jvvx-8g42-9559/GHSA-jvvx-8g42-9559.json b/advisories/unreviewed/2022/05/GHSA-jvvx-8g42-9559/GHSA-jvvx-8g42-9559.json index 94b7b1b4f7f..2912d80a0de 100644 --- a/advisories/unreviewed/2022/05/GHSA-jvvx-8g42-9559/GHSA-jvvx-8g42-9559.json +++ b/advisories/unreviewed/2022/05/GHSA-jvvx-8g42-9559/GHSA-jvvx-8g42-9559.json @@ -7,12 +7,8 @@ "CVE-2021-29051" ], "details": "Cross-site scripting (XSS) vulnerability in the Asset module's Asset Publisher app in Liferay Portal 7.2.1 through 7.3.5, and Liferay DXP 7.1 before fix pack 21, 7.2 before fix pack 10 and 7.3 before fix pack 1 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_asset_publisher_web_portlet_AssetPublisherPortlet_INSTANCE_XXXXXXXXXXXX_assetEntryId parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jw46-grq7-cw4w/GHSA-jw46-grq7-cw4w.json b/advisories/unreviewed/2022/05/GHSA-jw46-grq7-cw4w/GHSA-jw46-grq7-cw4w.json index 9cd3fc90bd5..01bc810f09f 100644 --- a/advisories/unreviewed/2022/05/GHSA-jw46-grq7-cw4w/GHSA-jw46-grq7-cw4w.json +++ b/advisories/unreviewed/2022/05/GHSA-jw46-grq7-cw4w/GHSA-jw46-grq7-cw4w.json @@ -7,12 +7,8 @@ "CVE-2021-24298" ], "details": "The method and share GET parameters of the Giveaway pages were not sanitised, validated or escaped before being output back in the pages, thus leading to reflected XSS", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jx2c-9rxg-v58w/GHSA-jx2c-9rxg-v58w.json b/advisories/unreviewed/2022/05/GHSA-jx2c-9rxg-v58w/GHSA-jx2c-9rxg-v58w.json index 639db5560c9..feb07c22a49 100644 --- a/advisories/unreviewed/2022/05/GHSA-jx2c-9rxg-v58w/GHSA-jx2c-9rxg-v58w.json +++ b/advisories/unreviewed/2022/05/GHSA-jx2c-9rxg-v58w/GHSA-jx2c-9rxg-v58w.json @@ -7,12 +7,8 @@ "CVE-2021-23906" ], "details": "An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A Message Length is not checked in the HiQnet Protocol, leading to remote code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m337-m764-prg6/GHSA-m337-m764-prg6.json b/advisories/unreviewed/2022/05/GHSA-m337-m764-prg6/GHSA-m337-m764-prg6.json index b42631e35f1..fe6e8cf7e5d 100644 --- a/advisories/unreviewed/2022/05/GHSA-m337-m764-prg6/GHSA-m337-m764-prg6.json +++ b/advisories/unreviewed/2022/05/GHSA-m337-m764-prg6/GHSA-m337-m764-prg6.json @@ -7,12 +7,8 @@ "CVE-2021-31910" ], "details": "In JetBrains TeamCity before 2020.2.3, information disclosure via SSRF was possible.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m38j-h682-h2cp/GHSA-m38j-h682-h2cp.json b/advisories/unreviewed/2022/05/GHSA-m38j-h682-h2cp/GHSA-m38j-h682-h2cp.json index 0f51fb7487a..c807f388ef7 100644 --- a/advisories/unreviewed/2022/05/GHSA-m38j-h682-h2cp/GHSA-m38j-h682-h2cp.json +++ b/advisories/unreviewed/2022/05/GHSA-m38j-h682-h2cp/GHSA-m38j-h682-h2cp.json @@ -7,12 +7,8 @@ "CVE-2021-24289" ], "details": "There is functionality in the Store Locator Plus for WordPress plugin through 5.5.14 that made it possible for authenticated users to update their user meta data to become an administrator on any site using the plugin.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m467-x355-47w9/GHSA-m467-x355-47w9.json b/advisories/unreviewed/2022/05/GHSA-m467-x355-47w9/GHSA-m467-x355-47w9.json index bf0fc7ea06f..08e98cd86f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-m467-x355-47w9/GHSA-m467-x355-47w9.json +++ b/advisories/unreviewed/2022/05/GHSA-m467-x355-47w9/GHSA-m467-x355-47w9.json @@ -7,12 +7,8 @@ "CVE-2021-24290" ], "details": "There are several endpoints in the Store Locator Plus for WordPress plugin through 5.5.15 that could allow unauthenticated attackers the ability to inject malicious JavaScript into pages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m4cm-3mg6-8x6j/GHSA-m4cm-3mg6-8x6j.json b/advisories/unreviewed/2022/05/GHSA-m4cm-3mg6-8x6j/GHSA-m4cm-3mg6-8x6j.json index 590bb625d22..57bdb6cc04b 100644 --- a/advisories/unreviewed/2022/05/GHSA-m4cm-3mg6-8x6j/GHSA-m4cm-3mg6-8x6j.json +++ b/advisories/unreviewed/2022/05/GHSA-m4cm-3mg6-8x6j/GHSA-m4cm-3mg6-8x6j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m7r4-7fmr-p48c/GHSA-m7r4-7fmr-p48c.json b/advisories/unreviewed/2022/05/GHSA-m7r4-7fmr-p48c/GHSA-m7r4-7fmr-p48c.json index 97da9775631..a36d197c33f 100644 --- a/advisories/unreviewed/2022/05/GHSA-m7r4-7fmr-p48c/GHSA-m7r4-7fmr-p48c.json +++ b/advisories/unreviewed/2022/05/GHSA-m7r4-7fmr-p48c/GHSA-m7r4-7fmr-p48c.json @@ -7,12 +7,8 @@ "CVE-2021-27386" ], "details": "A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\\\" & 15\\\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels 4\\\" - 22\\\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced (All versions < V16 Update 4). SmartVNC has a heap allocation leak vulnerability in the device layout handler on client side, which could result in a Denial-of-Service condition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m89p-32x5-v23r/GHSA-m89p-32x5-v23r.json b/advisories/unreviewed/2022/05/GHSA-m89p-32x5-v23r/GHSA-m89p-32x5-v23r.json index dd9ddb572c8..9b52819ed11 100644 --- a/advisories/unreviewed/2022/05/GHSA-m89p-32x5-v23r/GHSA-m89p-32x5-v23r.json +++ b/advisories/unreviewed/2022/05/GHSA-m89p-32x5-v23r/GHSA-m89p-32x5-v23r.json @@ -7,12 +7,8 @@ "CVE-2021-21987" ], "details": "VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (TTC Parser). A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading to information disclosure from the TPView process running on the system where Workstation or Horizon Client for Windows is installed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m8vf-6qcj-hmj6/GHSA-m8vf-6qcj-hmj6.json b/advisories/unreviewed/2022/05/GHSA-m8vf-6qcj-hmj6/GHSA-m8vf-6qcj-hmj6.json index 7c31e3ee916..d131d36fc9a 100644 --- a/advisories/unreviewed/2022/05/GHSA-m8vf-6qcj-hmj6/GHSA-m8vf-6qcj-hmj6.json +++ b/advisories/unreviewed/2022/05/GHSA-m8vf-6qcj-hmj6/GHSA-m8vf-6qcj-hmj6.json @@ -7,12 +7,8 @@ "CVE-2021-32615" ], "details": "Piwigo 11.4.0 allows admin/user_list_backend.php order[0][dir] SQL Injection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mf25-jq7f-vx34/GHSA-mf25-jq7f-vx34.json b/advisories/unreviewed/2022/05/GHSA-mf25-jq7f-vx34/GHSA-mf25-jq7f-vx34.json index 20c69af90db..30af2f5db4e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mf25-jq7f-vx34/GHSA-mf25-jq7f-vx34.json +++ b/advisories/unreviewed/2022/05/GHSA-mf25-jq7f-vx34/GHSA-mf25-jq7f-vx34.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mgqg-3547-m3xx/GHSA-mgqg-3547-m3xx.json b/advisories/unreviewed/2022/05/GHSA-mgqg-3547-m3xx/GHSA-mgqg-3547-m3xx.json index 7dec06c17de..8053fbe1e9b 100644 --- a/advisories/unreviewed/2022/05/GHSA-mgqg-3547-m3xx/GHSA-mgqg-3547-m3xx.json +++ b/advisories/unreviewed/2022/05/GHSA-mgqg-3547-m3xx/GHSA-mgqg-3547-m3xx.json @@ -7,12 +7,8 @@ "CVE-2021-31537" ], "details": "SIS SIS-REWE Go before 7.7 SP17 allows XSS: rewe/prod/web/index.php (affected parameters are config, version, win, db, pwd, and user) and /rewe/prod/web/rewe_go_check.php (version and all other parameters).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mgwh-8478-g6wj/GHSA-mgwh-8478-g6wj.json b/advisories/unreviewed/2022/05/GHSA-mgwh-8478-g6wj/GHSA-mgwh-8478-g6wj.json index 905ee12be9c..fb4cc2f68cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-mgwh-8478-g6wj/GHSA-mgwh-8478-g6wj.json +++ b/advisories/unreviewed/2022/05/GHSA-mgwh-8478-g6wj/GHSA-mgwh-8478-g6wj.json @@ -7,12 +7,8 @@ "CVE-2021-20426" ], "details": "IBM Security Guardium 11.2 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 196313.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mpx7-jgr6-823w/GHSA-mpx7-jgr6-823w.json b/advisories/unreviewed/2022/05/GHSA-mpx7-jgr6-823w/GHSA-mpx7-jgr6-823w.json index bad6db3c67f..25703430a04 100644 --- a/advisories/unreviewed/2022/05/GHSA-mpx7-jgr6-823w/GHSA-mpx7-jgr6-823w.json +++ b/advisories/unreviewed/2022/05/GHSA-mpx7-jgr6-823w/GHSA-mpx7-jgr6-823w.json @@ -7,12 +7,8 @@ "CVE-2020-23691" ], "details": "YFCMF v2.3.1 has a Remote Command Execution (RCE) vulnerability in the index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mq8v-785f-4pmx/GHSA-mq8v-785f-4pmx.json b/advisories/unreviewed/2022/05/GHSA-mq8v-785f-4pmx/GHSA-mq8v-785f-4pmx.json index e3056b46069..2e2a98b8620 100644 --- a/advisories/unreviewed/2022/05/GHSA-mq8v-785f-4pmx/GHSA-mq8v-785f-4pmx.json +++ b/advisories/unreviewed/2022/05/GHSA-mq8v-785f-4pmx/GHSA-mq8v-785f-4pmx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mqfp-78r2-wvxg/GHSA-mqfp-78r2-wvxg.json b/advisories/unreviewed/2022/05/GHSA-mqfp-78r2-wvxg/GHSA-mqfp-78r2-wvxg.json index bda1945e84b..9bee6e5be52 100644 --- a/advisories/unreviewed/2022/05/GHSA-mqfp-78r2-wvxg/GHSA-mqfp-78r2-wvxg.json +++ b/advisories/unreviewed/2022/05/GHSA-mqfp-78r2-wvxg/GHSA-mqfp-78r2-wvxg.json @@ -7,12 +7,8 @@ "CVE-2021-24286" ], "details": "The settings page of the Redirect 404 to parent WordPress plugin before 1.3.1 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mqgp-2h56-fx4q/GHSA-mqgp-2h56-fx4q.json b/advisories/unreviewed/2022/05/GHSA-mqgp-2h56-fx4q/GHSA-mqgp-2h56-fx4q.json index 8abe9fb4426..dc77d13f1c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-mqgp-2h56-fx4q/GHSA-mqgp-2h56-fx4q.json +++ b/advisories/unreviewed/2022/05/GHSA-mqgp-2h56-fx4q/GHSA-mqgp-2h56-fx4q.json @@ -7,12 +7,8 @@ "CVE-2021-33516" ], "details": "An issue was discovered in GUPnP before 1.0.7 and 1.1.x and 1.2.x before 1.2.5. It allows DNS rebinding. A remote web server can exploit this vulnerability to trick a victim's browser into triggering actions against local UPnP services implemented using this library. Depending on the affected service, this could be used for data exfiltration, data tempering, etc.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mqr6-pj42-6cfh/GHSA-mqr6-pj42-6cfh.json b/advisories/unreviewed/2022/05/GHSA-mqr6-pj42-6cfh/GHSA-mqr6-pj42-6cfh.json index e9a2b8c7f28..0d53390aa1c 100644 --- a/advisories/unreviewed/2022/05/GHSA-mqr6-pj42-6cfh/GHSA-mqr6-pj42-6cfh.json +++ b/advisories/unreviewed/2022/05/GHSA-mqr6-pj42-6cfh/GHSA-mqr6-pj42-6cfh.json @@ -7,12 +7,8 @@ "CVE-2020-28063" ], "details": "A file upload issue exists in all versions of ArticleCMS which allows malicious users to getshell.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mrcx-3pvh-cm2f/GHSA-mrcx-3pvh-cm2f.json b/advisories/unreviewed/2022/05/GHSA-mrcx-3pvh-cm2f/GHSA-mrcx-3pvh-cm2f.json index 8a0fd1330b6..b4782a22c14 100644 --- a/advisories/unreviewed/2022/05/GHSA-mrcx-3pvh-cm2f/GHSA-mrcx-3pvh-cm2f.json +++ b/advisories/unreviewed/2022/05/GHSA-mrcx-3pvh-cm2f/GHSA-mrcx-3pvh-cm2f.json @@ -7,12 +7,8 @@ "CVE-2021-31897" ], "details": "In JetBrains WebStorm before 2021.1, code execution without user confirmation was possible for untrusted projects.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mrmf-j7c5-8jqr/GHSA-mrmf-j7c5-8jqr.json b/advisories/unreviewed/2022/05/GHSA-mrmf-j7c5-8jqr/GHSA-mrmf-j7c5-8jqr.json index 9bb2f4d321d..b8873cb15ac 100644 --- a/advisories/unreviewed/2022/05/GHSA-mrmf-j7c5-8jqr/GHSA-mrmf-j7c5-8jqr.json +++ b/advisories/unreviewed/2022/05/GHSA-mrmf-j7c5-8jqr/GHSA-mrmf-j7c5-8jqr.json @@ -7,12 +7,8 @@ "CVE-2021-24301" ], "details": "The Hotjar Connecticator WordPress plugin through 1.1.1 is vulnerable to Stored Cross-Site Scripting (XSS) in the 'hotjar script' textarea. The request did include a CSRF nonce that was properly verified by the server and this vulnerability could only be exploited by administrator users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mvmv-3mv8-37fq/GHSA-mvmv-3mv8-37fq.json b/advisories/unreviewed/2022/05/GHSA-mvmv-3mv8-37fq/GHSA-mvmv-3mv8-37fq.json index 5c0b6f80840..0f94a794433 100644 --- a/advisories/unreviewed/2022/05/GHSA-mvmv-3mv8-37fq/GHSA-mvmv-3mv8-37fq.json +++ b/advisories/unreviewed/2022/05/GHSA-mvmv-3mv8-37fq/GHSA-mvmv-3mv8-37fq.json @@ -7,12 +7,8 @@ "CVE-2021-23008" ], "details": "On version 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and all versions of 16.0.x and 11.6.x., BIG-IP APM AD (Active Directory) authentication can be bypassed via a spoofed AS-REP (Kerberos Authentication Service Response) response sent over a hijacked KDC (Kerberos Key Distribution Center) connection or from an AD server compromised by an attacker. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mw35-grpm-83j9/GHSA-mw35-grpm-83j9.json b/advisories/unreviewed/2022/05/GHSA-mw35-grpm-83j9/GHSA-mw35-grpm-83j9.json index 3cf6f906d09..8ab03e57ee5 100644 --- a/advisories/unreviewed/2022/05/GHSA-mw35-grpm-83j9/GHSA-mw35-grpm-83j9.json +++ b/advisories/unreviewed/2022/05/GHSA-mw35-grpm-83j9/GHSA-mw35-grpm-83j9.json @@ -7,12 +7,8 @@ "CVE-2020-24395" ], "details": "The USB firmware update script of homee Brain Cube v2 (2.28.2 and 2.28.4) devices allows an attacker with physical access to install compromised firmware. This occurs because of insufficient validation of the firmware image file and can lead to code execution on the device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mw5r-3vx4-h9cp/GHSA-mw5r-3vx4-h9cp.json b/advisories/unreviewed/2022/05/GHSA-mw5r-3vx4-h9cp/GHSA-mw5r-3vx4-h9cp.json index 2800490eb60..c94f48438e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-mw5r-3vx4-h9cp/GHSA-mw5r-3vx4-h9cp.json +++ b/advisories/unreviewed/2022/05/GHSA-mw5r-3vx4-h9cp/GHSA-mw5r-3vx4-h9cp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mxhm-764h-x229/GHSA-mxhm-764h-x229.json b/advisories/unreviewed/2022/05/GHSA-mxhm-764h-x229/GHSA-mxhm-764h-x229.json index ec43d12c572..2796eae3cc1 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxhm-764h-x229/GHSA-mxhm-764h-x229.json +++ b/advisories/unreviewed/2022/05/GHSA-mxhm-764h-x229/GHSA-mxhm-764h-x229.json @@ -7,12 +7,8 @@ "CVE-2021-29683" ], "details": "IBM Security Identity Manager 7.0.2 stores user credentials in plain clear text which can be read by an authenticated user. IBM X-Force ID: 199998.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p34x-mp69-hv5f/GHSA-p34x-mp69-hv5f.json b/advisories/unreviewed/2022/05/GHSA-p34x-mp69-hv5f/GHSA-p34x-mp69-hv5f.json index 111b43c3d05..bd571e96758 100644 --- a/advisories/unreviewed/2022/05/GHSA-p34x-mp69-hv5f/GHSA-p34x-mp69-hv5f.json +++ b/advisories/unreviewed/2022/05/GHSA-p34x-mp69-hv5f/GHSA-p34x-mp69-hv5f.json @@ -7,12 +7,8 @@ "CVE-2020-23861" ], "details": "A heap-based buffer overflow vulnerability exists in LibreDWG 0.10.1 via the read_system_page function at libredwg-0.10.1/src/decode_r2007.c:666:5, which causes a denial of service by submitting a dwg file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p665-9x5g-hpfh/GHSA-p665-9x5g-hpfh.json b/advisories/unreviewed/2022/05/GHSA-p665-9x5g-hpfh/GHSA-p665-9x5g-hpfh.json index 96fc230bdc1..25f215030c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-p665-9x5g-hpfh/GHSA-p665-9x5g-hpfh.json +++ b/advisories/unreviewed/2022/05/GHSA-p665-9x5g-hpfh/GHSA-p665-9x5g-hpfh.json @@ -7,12 +7,8 @@ "CVE-2021-31470" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects in PDF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12947.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p79w-2wmm-m2hq/GHSA-p79w-2wmm-m2hq.json b/advisories/unreviewed/2022/05/GHSA-p79w-2wmm-m2hq/GHSA-p79w-2wmm-m2hq.json index 5d0f485c912..5e9e4c40696 100644 --- a/advisories/unreviewed/2022/05/GHSA-p79w-2wmm-m2hq/GHSA-p79w-2wmm-m2hq.json +++ b/advisories/unreviewed/2022/05/GHSA-p79w-2wmm-m2hq/GHSA-p79w-2wmm-m2hq.json @@ -7,12 +7,8 @@ "CVE-2021-27465" ], "details": "A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications do not validate webpage input, which could allow an attacker to inject arbitrary HTML code into a webpage. This would allow an attacker to modify the page and display incorrect or undesirable data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p7jw-jxr7-pm98/GHSA-p7jw-jxr7-pm98.json b/advisories/unreviewed/2022/05/GHSA-p7jw-jxr7-pm98/GHSA-p7jw-jxr7-pm98.json index 17c8be6966f..4dc52d2dd2a 100644 --- a/advisories/unreviewed/2022/05/GHSA-p7jw-jxr7-pm98/GHSA-p7jw-jxr7-pm98.json +++ b/advisories/unreviewed/2022/05/GHSA-p7jw-jxr7-pm98/GHSA-p7jw-jxr7-pm98.json @@ -7,12 +7,8 @@ "CVE-2020-28904" ], "details": "Execution with Unnecessary Privileges in Nagios Fusion 4.1.8 and earlier allows for Privilege Escalation as nagios via installation of a malicious component containing PHP code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pc82-3f32-r45v/GHSA-pc82-3f32-r45v.json b/advisories/unreviewed/2022/05/GHSA-pc82-3f32-r45v/GHSA-pc82-3f32-r45v.json index 58fc67c1b97..5ec3abae2db 100644 --- a/advisories/unreviewed/2022/05/GHSA-pc82-3f32-r45v/GHSA-pc82-3f32-r45v.json +++ b/advisories/unreviewed/2022/05/GHSA-pc82-3f32-r45v/GHSA-pc82-3f32-r45v.json @@ -7,12 +7,8 @@ "CVE-2020-23575" ], "details": "A directory traversal vulnerability exists in Kyocera Printer d-COPIA253MF plus. Successful exploitation of this vulnerability could allow an attacker to retrieve or view arbitrary files from the affected server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pcrq-2vxc-q7wj/GHSA-pcrq-2vxc-q7wj.json b/advisories/unreviewed/2022/05/GHSA-pcrq-2vxc-q7wj/GHSA-pcrq-2vxc-q7wj.json index 38432129012..abbdd10e17b 100644 --- a/advisories/unreviewed/2022/05/GHSA-pcrq-2vxc-q7wj/GHSA-pcrq-2vxc-q7wj.json +++ b/advisories/unreviewed/2022/05/GHSA-pcrq-2vxc-q7wj/GHSA-pcrq-2vxc-q7wj.json @@ -7,12 +7,8 @@ "CVE-2021-24189" ], "details": "Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Captchinoo, Google recaptcha for admin login page WordPress plugin before 2.4, to install any plugin (including a specific version) from the WordPress repository, as well as activate arbitrary plugin from then blog, which helps attackers install vulnerable plugins and could lead to more critical vulnerabilities like RCE.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pjv2-crr6-xm2p/GHSA-pjv2-crr6-xm2p.json b/advisories/unreviewed/2022/05/GHSA-pjv2-crr6-xm2p/GHSA-pjv2-crr6-xm2p.json index d7f82e34613..a8b951c4abe 100644 --- a/advisories/unreviewed/2022/05/GHSA-pjv2-crr6-xm2p/GHSA-pjv2-crr6-xm2p.json +++ b/advisories/unreviewed/2022/05/GHSA-pjv2-crr6-xm2p/GHSA-pjv2-crr6-xm2p.json @@ -7,12 +7,8 @@ "CVE-2021-33033" ], "details": "The Linux kernel before 5.11.14 has a use-after-free in cipso_v4_genopt in net/ipv4/cipso_ipv4.c because the CIPSO and CALIPSO refcounting for the DOI definitions is mishandled, aka CID-ad5d07f4a9cd. This leads to writing an arbitrary value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pp43-c4m8-mq4p/GHSA-pp43-c4m8-mq4p.json b/advisories/unreviewed/2022/05/GHSA-pp43-c4m8-mq4p/GHSA-pp43-c4m8-mq4p.json index 5703f4c0561..2439eff4c18 100644 --- a/advisories/unreviewed/2022/05/GHSA-pp43-c4m8-mq4p/GHSA-pp43-c4m8-mq4p.json +++ b/advisories/unreviewed/2022/05/GHSA-pp43-c4m8-mq4p/GHSA-pp43-c4m8-mq4p.json @@ -7,12 +7,8 @@ "CVE-2021-31908" ], "details": "In JetBrains TeamCity before 2020.2.3, stored XSS was possible on several pages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pp62-53mh-6rf2/GHSA-pp62-53mh-6rf2.json b/advisories/unreviewed/2022/05/GHSA-pp62-53mh-6rf2/GHSA-pp62-53mh-6rf2.json index 1d82c5933e3..035ba0dbb6e 100644 --- a/advisories/unreviewed/2022/05/GHSA-pp62-53mh-6rf2/GHSA-pp62-53mh-6rf2.json +++ b/advisories/unreviewed/2022/05/GHSA-pp62-53mh-6rf2/GHSA-pp62-53mh-6rf2.json @@ -7,12 +7,8 @@ "CVE-2020-21840" ], "details": "A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_search_sentinel ../../src/bits.c:1985.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ppjh-5v74-v6qq/GHSA-ppjh-5v74-v6qq.json b/advisories/unreviewed/2022/05/GHSA-ppjh-5v74-v6qq/GHSA-ppjh-5v74-v6qq.json index f9371e2071c..e4814e014e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-ppjh-5v74-v6qq/GHSA-ppjh-5v74-v6qq.json +++ b/advisories/unreviewed/2022/05/GHSA-ppjh-5v74-v6qq/GHSA-ppjh-5v74-v6qq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pq73-4prp-c8qq/GHSA-pq73-4prp-c8qq.json b/advisories/unreviewed/2022/05/GHSA-pq73-4prp-c8qq/GHSA-pq73-4prp-c8qq.json index fdc1253f744..fcbdc2cc2f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-pq73-4prp-c8qq/GHSA-pq73-4prp-c8qq.json +++ b/advisories/unreviewed/2022/05/GHSA-pq73-4prp-c8qq/GHSA-pq73-4prp-c8qq.json @@ -7,12 +7,8 @@ "CVE-2020-21841" ], "details": "A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_B ../../src/bits.c:135.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pr7v-qv65-rp9m/GHSA-pr7v-qv65-rp9m.json b/advisories/unreviewed/2022/05/GHSA-pr7v-qv65-rp9m/GHSA-pr7v-qv65-rp9m.json index fe516afa738..53eb711acdc 100644 --- a/advisories/unreviewed/2022/05/GHSA-pr7v-qv65-rp9m/GHSA-pr7v-qv65-rp9m.json +++ b/advisories/unreviewed/2022/05/GHSA-pr7v-qv65-rp9m/GHSA-pr7v-qv65-rp9m.json @@ -7,12 +7,8 @@ "CVE-2021-29052" ], "details": "The Data Engine module in Liferay Portal 7.3.0 through 7.3.5, and Liferay DXP 7.3 before fix pack 1 does not check permissions in DataDefinitionResourceImpl.getSiteDataDefinitionByContentTypeByDataDefinitionKey, which allows remote authenticated users to view DDMStructures via GET API calls.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pr9v-hc3w-247x/GHSA-pr9v-hc3w-247x.json b/advisories/unreviewed/2022/05/GHSA-pr9v-hc3w-247x/GHSA-pr9v-hc3w-247x.json index 0590c5e7848..cda9b385c2d 100644 --- a/advisories/unreviewed/2022/05/GHSA-pr9v-hc3w-247x/GHSA-pr9v-hc3w-247x.json +++ b/advisories/unreviewed/2022/05/GHSA-pr9v-hc3w-247x/GHSA-pr9v-hc3w-247x.json @@ -7,12 +7,8 @@ "CVE-2021-22668" ], "details": "Delta Industrial Automation CNCSoft ScreenEditor Versions 1.01.28 (with ScreenEditor Version 1.01.2) and prior are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-prqw-hw6q-8hq7/GHSA-prqw-hw6q-8hq7.json b/advisories/unreviewed/2022/05/GHSA-prqw-hw6q-8hq7/GHSA-prqw-hw6q-8hq7.json index 410c7993fcb..5eb51fba6b8 100644 --- a/advisories/unreviewed/2022/05/GHSA-prqw-hw6q-8hq7/GHSA-prqw-hw6q-8hq7.json +++ b/advisories/unreviewed/2022/05/GHSA-prqw-hw6q-8hq7/GHSA-prqw-hw6q-8hq7.json @@ -7,12 +7,8 @@ "CVE-2021-20577" ], "details": "IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199281.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pvcx-jpfw-6gm6/GHSA-pvcx-jpfw-6gm6.json b/advisories/unreviewed/2022/05/GHSA-pvcx-jpfw-6gm6/GHSA-pvcx-jpfw-6gm6.json index 7b686d0eb8c..de76ef7b68f 100644 --- a/advisories/unreviewed/2022/05/GHSA-pvcx-jpfw-6gm6/GHSA-pvcx-jpfw-6gm6.json +++ b/advisories/unreviewed/2022/05/GHSA-pvcx-jpfw-6gm6/GHSA-pvcx-jpfw-6gm6.json @@ -7,12 +7,8 @@ "CVE-2021-20994" ], "details": "In multiple managed switches by WAGO in different versions an attacker may trick a legitimate user to click a link to inject possible malicious code into the Web-Based Management.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pwgj-jw9h-pg74/GHSA-pwgj-jw9h-pg74.json b/advisories/unreviewed/2022/05/GHSA-pwgj-jw9h-pg74/GHSA-pwgj-jw9h-pg74.json index b5dd6b271f3..4d8a92f3690 100644 --- a/advisories/unreviewed/2022/05/GHSA-pwgj-jw9h-pg74/GHSA-pwgj-jw9h-pg74.json +++ b/advisories/unreviewed/2022/05/GHSA-pwgj-jw9h-pg74/GHSA-pwgj-jw9h-pg74.json @@ -7,12 +7,8 @@ "CVE-2020-26146" ], "details": "An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WPA, WPA2, and WPA3 implementations reassemble fragments with non-consecutive packet numbers. An adversary can abuse this to exfiltrate selected fragments. This vulnerability is exploitable when another device sends fragmented frames and the WEP, CCMP, or GCMP data-confidentiality protocol is used. Note that WEP is vulnerable to this attack by design.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pxrf-m294-jqff/GHSA-pxrf-m294-jqff.json b/advisories/unreviewed/2022/05/GHSA-pxrf-m294-jqff/GHSA-pxrf-m294-jqff.json index dcdff730cad..4bb15b764cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-pxrf-m294-jqff/GHSA-pxrf-m294-jqff.json +++ b/advisories/unreviewed/2022/05/GHSA-pxrf-m294-jqff/GHSA-pxrf-m294-jqff.json @@ -7,12 +7,8 @@ "CVE-2021-25644" ], "details": "An issue was discovered in Couchbase Server 5.x and 6.x through 6.6.1 and 7.0.0 Beta. Incorrect commands to the REST API can result in leaked authentication information being stored in cleartext in the debug.log and info.log files, and is also shown in the UI visible to administrators.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q5c9-w6w2-m4fw/GHSA-q5c9-w6w2-m4fw.json b/advisories/unreviewed/2022/05/GHSA-q5c9-w6w2-m4fw/GHSA-q5c9-w6w2-m4fw.json index af7d4871459..60d9048dc36 100644 --- a/advisories/unreviewed/2022/05/GHSA-q5c9-w6w2-m4fw/GHSA-q5c9-w6w2-m4fw.json +++ b/advisories/unreviewed/2022/05/GHSA-q5c9-w6w2-m4fw/GHSA-q5c9-w6w2-m4fw.json @@ -7,12 +7,8 @@ "CVE-2020-28393" ], "details": "A vulnerability has been identified in SCALANCE XM-400 Family (All versions < V6.4), SCALANCE XR-500 Family (All versions < V6.4). The OSPF protocol implementation in affected devices incorrectly handles the number of LSA fields in combination with other modified fields. An unauthenticated remote attacker could create a permanent denial-of-service condition by sending specially crafted OSPF packets. Successful exploitation requires OSPF to be enabled on an affected device.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q5xm-vqjf-r66c/GHSA-q5xm-vqjf-r66c.json b/advisories/unreviewed/2022/05/GHSA-q5xm-vqjf-r66c/GHSA-q5xm-vqjf-r66c.json index 51fe85d65a8..684b173fcd2 100644 --- a/advisories/unreviewed/2022/05/GHSA-q5xm-vqjf-r66c/GHSA-q5xm-vqjf-r66c.json +++ b/advisories/unreviewed/2022/05/GHSA-q5xm-vqjf-r66c/GHSA-q5xm-vqjf-r66c.json @@ -7,12 +7,8 @@ "CVE-2020-21342" ], "details": "Insecure permissions issue in zzcms 201910 via the reset any user password in /one/getpassword.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q938-qrp5-j6hp/GHSA-q938-qrp5-j6hp.json b/advisories/unreviewed/2022/05/GHSA-q938-qrp5-j6hp/GHSA-q938-qrp5-j6hp.json index ad8a3055214..c881d9e91eb 100644 --- a/advisories/unreviewed/2022/05/GHSA-q938-qrp5-j6hp/GHSA-q938-qrp5-j6hp.json +++ b/advisories/unreviewed/2022/05/GHSA-q938-qrp5-j6hp/GHSA-q938-qrp5-j6hp.json @@ -7,12 +7,8 @@ "CVE-2021-20386" ], "details": "IBM Security Guardium 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195767.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q9r4-343r-cphh/GHSA-q9r4-343r-cphh.json b/advisories/unreviewed/2022/05/GHSA-q9r4-343r-cphh/GHSA-q9r4-343r-cphh.json index 43acb26654b..e7d81a6411b 100644 --- a/advisories/unreviewed/2022/05/GHSA-q9r4-343r-cphh/GHSA-q9r4-343r-cphh.json +++ b/advisories/unreviewed/2022/05/GHSA-q9r4-343r-cphh/GHSA-q9r4-343r-cphh.json @@ -7,12 +7,8 @@ "CVE-2021-31468" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D files embedded in PDF documents. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13620.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qcv4-gv43-498v/GHSA-qcv4-gv43-498v.json b/advisories/unreviewed/2022/05/GHSA-qcv4-gv43-498v/GHSA-qcv4-gv43-498v.json index ae62394599c..bea6d4b64a8 100644 --- a/advisories/unreviewed/2022/05/GHSA-qcv4-gv43-498v/GHSA-qcv4-gv43-498v.json +++ b/advisories/unreviewed/2022/05/GHSA-qcv4-gv43-498v/GHSA-qcv4-gv43-498v.json @@ -7,12 +7,8 @@ "CVE-2021-29045" ], "details": "Cross-site scripting (XSS) vulnerability in the Redirect module's redirection administration page in Liferay Portal 7.3.2 through 7.3.5, and Liferay DXP 7.3 before fix pack 1 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_redirect_web_internal_portlet_RedirectPortlet_destinationURL parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qfv2-rjww-px4q/GHSA-qfv2-rjww-px4q.json b/advisories/unreviewed/2022/05/GHSA-qfv2-rjww-px4q/GHSA-qfv2-rjww-px4q.json index 40ac7986b48..0dec8de0c96 100644 --- a/advisories/unreviewed/2022/05/GHSA-qfv2-rjww-px4q/GHSA-qfv2-rjww-px4q.json +++ b/advisories/unreviewed/2022/05/GHSA-qfv2-rjww-px4q/GHSA-qfv2-rjww-px4q.json @@ -7,12 +7,8 @@ "CVE-2021-32051" ], "details": "Hexagon G!nius Auskunftsportal before 5.0.0.0 allows SQL injection via the GiPWorkflow/Service/DownloadPublicFile id parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qgrr-jgc6-3mxq/GHSA-qgrr-jgc6-3mxq.json b/advisories/unreviewed/2022/05/GHSA-qgrr-jgc6-3mxq/GHSA-qgrr-jgc6-3mxq.json index 49c39e93966..1607f8ffef5 100644 --- a/advisories/unreviewed/2022/05/GHSA-qgrr-jgc6-3mxq/GHSA-qgrr-jgc6-3mxq.json +++ b/advisories/unreviewed/2022/05/GHSA-qgrr-jgc6-3mxq/GHSA-qgrr-jgc6-3mxq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qgvr-6q69-88cj/GHSA-qgvr-6q69-88cj.json b/advisories/unreviewed/2022/05/GHSA-qgvr-6q69-88cj/GHSA-qgvr-6q69-88cj.json index af280364fca..f8ab7c3a764 100644 --- a/advisories/unreviewed/2022/05/GHSA-qgvr-6q69-88cj/GHSA-qgvr-6q69-88cj.json +++ b/advisories/unreviewed/2022/05/GHSA-qgvr-6q69-88cj/GHSA-qgvr-6q69-88cj.json @@ -7,12 +7,8 @@ "CVE-2021-31445" ], "details": "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-13244.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qjp3-78p3-g59h/GHSA-qjp3-78p3-g59h.json b/advisories/unreviewed/2022/05/GHSA-qjp3-78p3-g59h/GHSA-qjp3-78p3-g59h.json index 862c112d3f5..54fea7eed17 100644 --- a/advisories/unreviewed/2022/05/GHSA-qjp3-78p3-g59h/GHSA-qjp3-78p3-g59h.json +++ b/advisories/unreviewed/2022/05/GHSA-qjp3-78p3-g59h/GHSA-qjp3-78p3-g59h.json @@ -7,12 +7,8 @@ "CVE-2021-31902" ], "details": "In JetBrains YouTrack before 2020.6.6600, access control during the exporting of issues was implemented improperly.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qjp6-92pc-4mc7/GHSA-qjp6-92pc-4mc7.json b/advisories/unreviewed/2022/05/GHSA-qjp6-92pc-4mc7/GHSA-qjp6-92pc-4mc7.json index 64f0664a04a..102898811d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-qjp6-92pc-4mc7/GHSA-qjp6-92pc-4mc7.json +++ b/advisories/unreviewed/2022/05/GHSA-qjp6-92pc-4mc7/GHSA-qjp6-92pc-4mc7.json @@ -7,12 +7,8 @@ "CVE-2020-21843" ], "details": "A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via bit_read_RC ../../src/bits.c:318.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qm8m-4g9c-j864/GHSA-qm8m-4g9c-j864.json b/advisories/unreviewed/2022/05/GHSA-qm8m-4g9c-j864/GHSA-qm8m-4g9c-j864.json index b49634b1723..08542e119ed 100644 --- a/advisories/unreviewed/2022/05/GHSA-qm8m-4g9c-j864/GHSA-qm8m-4g9c-j864.json +++ b/advisories/unreviewed/2022/05/GHSA-qm8m-4g9c-j864/GHSA-qm8m-4g9c-j864.json @@ -7,12 +7,8 @@ "CVE-2020-20253" ], "details": "Mikrotik RouterOs before 6.47 (stable tree) suffers from a divison by zero vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service due to a divide by zero error.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qpjg-w2cf-62fm/GHSA-qpjg-w2cf-62fm.json b/advisories/unreviewed/2022/05/GHSA-qpjg-w2cf-62fm/GHSA-qpjg-w2cf-62fm.json index 2824eb4d036..821959d7823 100644 --- a/advisories/unreviewed/2022/05/GHSA-qpjg-w2cf-62fm/GHSA-qpjg-w2cf-62fm.json +++ b/advisories/unreviewed/2022/05/GHSA-qpjg-w2cf-62fm/GHSA-qpjg-w2cf-62fm.json @@ -7,12 +7,8 @@ "CVE-2021-32572" ], "details": "Speco Web Viewer through 2021-05-12 allows Directory Traversal via GET request for a URI with /.. at the beginning, as demonstrated by reading the /etc/passwd file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qv38-pj4q-67hh/GHSA-qv38-pj4q-67hh.json b/advisories/unreviewed/2022/05/GHSA-qv38-pj4q-67hh/GHSA-qv38-pj4q-67hh.json index d8e11037fa3..1ff6d7051e5 100644 --- a/advisories/unreviewed/2022/05/GHSA-qv38-pj4q-67hh/GHSA-qv38-pj4q-67hh.json +++ b/advisories/unreviewed/2022/05/GHSA-qv38-pj4q-67hh/GHSA-qv38-pj4q-67hh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qw3r-cgvh-vwp2/GHSA-qw3r-cgvh-vwp2.json b/advisories/unreviewed/2022/05/GHSA-qw3r-cgvh-vwp2/GHSA-qw3r-cgvh-vwp2.json index 32e678c64c3..176b5901cb1 100644 --- a/advisories/unreviewed/2022/05/GHSA-qw3r-cgvh-vwp2/GHSA-qw3r-cgvh-vwp2.json +++ b/advisories/unreviewed/2022/05/GHSA-qw3r-cgvh-vwp2/GHSA-qw3r-cgvh-vwp2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qx62-c3rx-4fhq/GHSA-qx62-c3rx-4fhq.json b/advisories/unreviewed/2022/05/GHSA-qx62-c3rx-4fhq/GHSA-qx62-c3rx-4fhq.json index b91d8dc1273..0ce68ec5a9b 100644 --- a/advisories/unreviewed/2022/05/GHSA-qx62-c3rx-4fhq/GHSA-qx62-c3rx-4fhq.json +++ b/advisories/unreviewed/2022/05/GHSA-qx62-c3rx-4fhq/GHSA-qx62-c3rx-4fhq.json @@ -7,12 +7,8 @@ "CVE-2020-25408" ], "details": "A Cross-Site Request Forgery (CSRF) vulnerability exists in ProjectWorlds College Management System Php 1.0 that allows a remote attacker to modify, delete, or make a new entry of the student, faculty, teacher, subject, scores, location, and article data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r2hx-h58m-4q29/GHSA-r2hx-h58m-4q29.json b/advisories/unreviewed/2022/05/GHSA-r2hx-h58m-4q29/GHSA-r2hx-h58m-4q29.json index 264e6c21f56..8338c106ebd 100644 --- a/advisories/unreviewed/2022/05/GHSA-r2hx-h58m-4q29/GHSA-r2hx-h58m-4q29.json +++ b/advisories/unreviewed/2022/05/GHSA-r2hx-h58m-4q29/GHSA-r2hx-h58m-4q29.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r32j-f8ch-p2h8/GHSA-r32j-f8ch-p2h8.json b/advisories/unreviewed/2022/05/GHSA-r32j-f8ch-p2h8/GHSA-r32j-f8ch-p2h8.json index 69501ccd3b2..763a14d1043 100644 --- a/advisories/unreviewed/2022/05/GHSA-r32j-f8ch-p2h8/GHSA-r32j-f8ch-p2h8.json +++ b/advisories/unreviewed/2022/05/GHSA-r32j-f8ch-p2h8/GHSA-r32j-f8ch-p2h8.json @@ -7,12 +7,8 @@ "CVE-2020-23374" ], "details": "Cross-site scripting (XSS) vulnerability in admin/article/add.html in noneCMS v1.3.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the name parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r433-c7vq-9gp5/GHSA-r433-c7vq-9gp5.json b/advisories/unreviewed/2022/05/GHSA-r433-c7vq-9gp5/GHSA-r433-c7vq-9gp5.json index b4a1692d86d..5d0c7054277 100644 --- a/advisories/unreviewed/2022/05/GHSA-r433-c7vq-9gp5/GHSA-r433-c7vq-9gp5.json +++ b/advisories/unreviewed/2022/05/GHSA-r433-c7vq-9gp5/GHSA-r433-c7vq-9gp5.json @@ -7,12 +7,8 @@ "CVE-2021-27733" ], "details": "In JetBrains YouTrack before 2020.6.6441, stored XSS was possible via an issue attachment.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r449-xcxv-p6m2/GHSA-r449-xcxv-p6m2.json b/advisories/unreviewed/2022/05/GHSA-r449-xcxv-p6m2/GHSA-r449-xcxv-p6m2.json index a85e134caeb..fb7ed9b8c31 100644 --- a/advisories/unreviewed/2022/05/GHSA-r449-xcxv-p6m2/GHSA-r449-xcxv-p6m2.json +++ b/advisories/unreviewed/2022/05/GHSA-r449-xcxv-p6m2/GHSA-r449-xcxv-p6m2.json @@ -7,12 +7,8 @@ "CVE-2021-32101" ], "details": "The Patient Portal of OpenEMR 5.0.2.1 is affected by a incorrect access control system in portal/patient/_machine_config.php. To exploit the vulnerability, an unauthenticated attacker can register an account, bypassing the permission check of this portal's API. Then, the attacker can then manipulate and read data of every registered patient.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r4gj-6qwp-4qrc/GHSA-r4gj-6qwp-4qrc.json b/advisories/unreviewed/2022/05/GHSA-r4gj-6qwp-4qrc/GHSA-r4gj-6qwp-4qrc.json index 4fe5d8e5619..044bc6ade3e 100644 --- a/advisories/unreviewed/2022/05/GHSA-r4gj-6qwp-4qrc/GHSA-r4gj-6qwp-4qrc.json +++ b/advisories/unreviewed/2022/05/GHSA-r4gj-6qwp-4qrc/GHSA-r4gj-6qwp-4qrc.json @@ -7,12 +7,8 @@ "CVE-2020-24755" ], "details": "In Ubiquiti UniFi Video v3.10.13, when the executable starts, its first library validation is in the current directory. This allows the impersonation and modification of the library to execute code on the system. This was tested in (Windows 7 x64/Windows 10 x64).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r4wr-gxj6-v6vf/GHSA-r4wr-gxj6-v6vf.json b/advisories/unreviewed/2022/05/GHSA-r4wr-gxj6-v6vf/GHSA-r4wr-gxj6-v6vf.json index 630853a3bd4..226456b87c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-r4wr-gxj6-v6vf/GHSA-r4wr-gxj6-v6vf.json +++ b/advisories/unreviewed/2022/05/GHSA-r4wr-gxj6-v6vf/GHSA-r4wr-gxj6-v6vf.json @@ -7,12 +7,8 @@ "CVE-2021-20419" ], "details": "IBM Security Guardium 11.2 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196280.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r4xw-2898-q2r3/GHSA-r4xw-2898-q2r3.json b/advisories/unreviewed/2022/05/GHSA-r4xw-2898-q2r3/GHSA-r4xw-2898-q2r3.json index 35f7f6fb449..2424aca51e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-r4xw-2898-q2r3/GHSA-r4xw-2898-q2r3.json +++ b/advisories/unreviewed/2022/05/GHSA-r4xw-2898-q2r3/GHSA-r4xw-2898-q2r3.json @@ -7,12 +7,8 @@ "CVE-2021-20538" ], "details": "IBM Cloud Pak for Security (CP4S) 1.5.0.0 and 1.5.0.1 could allow a user to obtain sensitive information or perform actions they should not have access to due to incorrect authorization mechanisms. IBM X-Force ID: 198919.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r57j-hvj5-9m8v/GHSA-r57j-hvj5-9m8v.json b/advisories/unreviewed/2022/05/GHSA-r57j-hvj5-9m8v/GHSA-r57j-hvj5-9m8v.json index acd91d55fa8..01a8f156c6e 100644 --- a/advisories/unreviewed/2022/05/GHSA-r57j-hvj5-9m8v/GHSA-r57j-hvj5-9m8v.json +++ b/advisories/unreviewed/2022/05/GHSA-r57j-hvj5-9m8v/GHSA-r57j-hvj5-9m8v.json @@ -7,12 +7,8 @@ "CVE-2021-23908" ], "details": "An issue was discovered in the Headunit NTG6 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. A type confusion issue affects MultiSvSetAttributes in the HiQnet Protocol, leading to remote code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r7vx-27c9-pg66/GHSA-r7vx-27c9-pg66.json b/advisories/unreviewed/2022/05/GHSA-r7vx-27c9-pg66/GHSA-r7vx-27c9-pg66.json index 7e46a39cbfa..b9465b09003 100644 --- a/advisories/unreviewed/2022/05/GHSA-r7vx-27c9-pg66/GHSA-r7vx-27c9-pg66.json +++ b/advisories/unreviewed/2022/05/GHSA-r7vx-27c9-pg66/GHSA-r7vx-27c9-pg66.json @@ -7,12 +7,8 @@ "CVE-2021-33525" ], "details": "EyesOfNetwork eonweb through 5.3-11 allows Remote Command Execution (by authenticated users) via shell metacharacters in the nagios_path parameter to lilac/export.php, as demonstrated by %26%26+curl to insert an \"&& curl\" substring for the shell.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r856-wf39-mr22/GHSA-r856-wf39-mr22.json b/advisories/unreviewed/2022/05/GHSA-r856-wf39-mr22/GHSA-r856-wf39-mr22.json index 7d08d063f0d..c352214e4e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-r856-wf39-mr22/GHSA-r856-wf39-mr22.json +++ b/advisories/unreviewed/2022/05/GHSA-r856-wf39-mr22/GHSA-r856-wf39-mr22.json @@ -7,12 +7,8 @@ "CVE-2020-18166" ], "details": "Unrestricted File Upload in LAOBANCMS v2.0 allows remote attackers to upload arbitrary files by attaching a file with a \".jpg.php\" extension to the component \"admin/wenjian.php?wj=../templets/pc\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r8mp-h8qj-rxw2/GHSA-r8mp-h8qj-rxw2.json b/advisories/unreviewed/2022/05/GHSA-r8mp-h8qj-rxw2/GHSA-r8mp-h8qj-rxw2.json index 45d3048d488..61fb7c301b7 100644 --- a/advisories/unreviewed/2022/05/GHSA-r8mp-h8qj-rxw2/GHSA-r8mp-h8qj-rxw2.json +++ b/advisories/unreviewed/2022/05/GHSA-r8mp-h8qj-rxw2/GHSA-r8mp-h8qj-rxw2.json @@ -7,12 +7,8 @@ "CVE-2021-27396" ], "details": "A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V16.0.5). The PlantSimCore.dll library lacks proper validation of user-supplied data when parsing SPP files. This could result in a stack based buffer overflow, a different vulnerability than CVE-2021-27398. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13279)", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rhcp-4p8q-p678/GHSA-rhcp-4p8q-p678.json b/advisories/unreviewed/2022/05/GHSA-rhcp-4p8q-p678/GHSA-rhcp-4p8q-p678.json index 460853bb9f6..000f1eba7a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-rhcp-4p8q-p678/GHSA-rhcp-4p8q-p678.json +++ b/advisories/unreviewed/2022/05/GHSA-rhcp-4p8q-p678/GHSA-rhcp-4p8q-p678.json @@ -7,12 +7,8 @@ "CVE-2021-32102" ], "details": "A SQL injection vulnerability exists (with user privileges) in library/custom_template/ajax_code.php in OpenEMR 5.0.2.1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rhgp-mf49-p5gr/GHSA-rhgp-mf49-p5gr.json b/advisories/unreviewed/2022/05/GHSA-rhgp-mf49-p5gr/GHSA-rhgp-mf49-p5gr.json index b0e442d8724..a58793a33e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-rhgp-mf49-p5gr/GHSA-rhgp-mf49-p5gr.json +++ b/advisories/unreviewed/2022/05/GHSA-rhgp-mf49-p5gr/GHSA-rhgp-mf49-p5gr.json @@ -7,12 +7,8 @@ "CVE-2021-30213" ], "details": "Knowage Suite 7.3 is vulnerable to unauthenticated reflected cross-site scripting (XSS). An attacker can inject arbitrary web script in '/servlet/AdapterHTTP' via the 'targetService' parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rjm8-2c58-4cf4/GHSA-rjm8-2c58-4cf4.json b/advisories/unreviewed/2022/05/GHSA-rjm8-2c58-4cf4/GHSA-rjm8-2c58-4cf4.json index 7e36a68544c..beafab91182 100644 --- a/advisories/unreviewed/2022/05/GHSA-rjm8-2c58-4cf4/GHSA-rjm8-2c58-4cf4.json +++ b/advisories/unreviewed/2022/05/GHSA-rjm8-2c58-4cf4/GHSA-rjm8-2c58-4cf4.json @@ -7,12 +7,8 @@ "CVE-2021-31454" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of the Decimal element. A crafted leadDigits value in a Decimal element can trigger an overflow of a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current process. Was ZDI-CAN-13095.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rm27-5pg4-4jqq/GHSA-rm27-5pg4-4jqq.json b/advisories/unreviewed/2022/05/GHSA-rm27-5pg4-4jqq/GHSA-rm27-5pg4-4jqq.json index 984a56fe0f9..9f449057f55 100644 --- a/advisories/unreviewed/2022/05/GHSA-rm27-5pg4-4jqq/GHSA-rm27-5pg4-4jqq.json +++ b/advisories/unreviewed/2022/05/GHSA-rm27-5pg4-4jqq/GHSA-rm27-5pg4-4jqq.json @@ -7,12 +7,8 @@ "CVE-2021-31900" ], "details": "In JetBrains Code With Me bundled to the compatible IDE versions before 2021.1, a client could open a browser on a host.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rmq3-87p9-r2fp/GHSA-rmq3-87p9-r2fp.json b/advisories/unreviewed/2022/05/GHSA-rmq3-87p9-r2fp/GHSA-rmq3-87p9-r2fp.json index a615a082b5f..8ef212cd9ea 100644 --- a/advisories/unreviewed/2022/05/GHSA-rmq3-87p9-r2fp/GHSA-rmq3-87p9-r2fp.json +++ b/advisories/unreviewed/2022/05/GHSA-rmq3-87p9-r2fp/GHSA-rmq3-87p9-r2fp.json @@ -7,12 +7,8 @@ "CVE-2021-25660" ], "details": "A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\\\" & 15\\\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels 4\\\" - 22\\\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced (All versions < V16 Update 4). SmartVNC has an out-of-bounds memory access vulnerability that could be triggered on the server side when sending data from the client, which could result in a Denial-of-Service condition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rmwr-62c5-fcx4/GHSA-rmwr-62c5-fcx4.json b/advisories/unreviewed/2022/05/GHSA-rmwr-62c5-fcx4/GHSA-rmwr-62c5-fcx4.json index 25c2f5fa337..fce2eb0f912 100644 --- a/advisories/unreviewed/2022/05/GHSA-rmwr-62c5-fcx4/GHSA-rmwr-62c5-fcx4.json +++ b/advisories/unreviewed/2022/05/GHSA-rmwr-62c5-fcx4/GHSA-rmwr-62c5-fcx4.json @@ -7,12 +7,8 @@ "CVE-2020-19924" ], "details": "In Boostnote 0.12.1, exporting to PDF contains opportunities for XSS attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rqp6-mfj6-v759/GHSA-rqp6-mfj6-v759.json b/advisories/unreviewed/2022/05/GHSA-rqp6-mfj6-v759/GHSA-rqp6-mfj6-v759.json index b8374e0b6a5..10ade46d561 100644 --- a/advisories/unreviewed/2022/05/GHSA-rqp6-mfj6-v759/GHSA-rqp6-mfj6-v759.json +++ b/advisories/unreviewed/2022/05/GHSA-rqp6-mfj6-v759/GHSA-rqp6-mfj6-v759.json @@ -7,12 +7,8 @@ "CVE-2021-32305" ], "details": "WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rrx2-h7gv-6jx5/GHSA-rrx2-h7gv-6jx5.json b/advisories/unreviewed/2022/05/GHSA-rrx2-h7gv-6jx5/GHSA-rrx2-h7gv-6jx5.json index 28b5a09296c..7030bfe0385 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrx2-h7gv-6jx5/GHSA-rrx2-h7gv-6jx5.json +++ b/advisories/unreviewed/2022/05/GHSA-rrx2-h7gv-6jx5/GHSA-rrx2-h7gv-6jx5.json @@ -7,12 +7,8 @@ "CVE-2021-24253" ], "details": "The Classyfrieds WordPress plugin through 3.8 does not properly check the uploaded file when an authenticated user adds a listing, only checking the content-type in the request. This allows any authenticated user to upload arbitrary PHP files via the Add Listing feature of the plugin, leading to RCE.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rwr9-36p6-24vw/GHSA-rwr9-36p6-24vw.json b/advisories/unreviewed/2022/05/GHSA-rwr9-36p6-24vw/GHSA-rwr9-36p6-24vw.json index 3113ebd1814..58d6b203d83 100644 --- a/advisories/unreviewed/2022/05/GHSA-rwr9-36p6-24vw/GHSA-rwr9-36p6-24vw.json +++ b/advisories/unreviewed/2022/05/GHSA-rwr9-36p6-24vw/GHSA-rwr9-36p6-24vw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rx8r-92r7-6wg5/GHSA-rx8r-92r7-6wg5.json b/advisories/unreviewed/2022/05/GHSA-rx8r-92r7-6wg5/GHSA-rx8r-92r7-6wg5.json index 77ed6f24778..0f048860959 100644 --- a/advisories/unreviewed/2022/05/GHSA-rx8r-92r7-6wg5/GHSA-rx8r-92r7-6wg5.json +++ b/advisories/unreviewed/2022/05/GHSA-rx8r-92r7-6wg5/GHSA-rx8r-92r7-6wg5.json @@ -7,12 +7,8 @@ "CVE-2020-21831" ], "details": "A heap based buffer overflow vulnerability exists in GNU LibreDWG 0.10 via read_2004_section_handles ../../src/decode.c:2637.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v3j7-7h3r-662c/GHSA-v3j7-7h3r-662c.json b/advisories/unreviewed/2022/05/GHSA-v3j7-7h3r-662c/GHSA-v3j7-7h3r-662c.json index 82887546d9a..3ff5659a292 100644 --- a/advisories/unreviewed/2022/05/GHSA-v3j7-7h3r-662c/GHSA-v3j7-7h3r-662c.json +++ b/advisories/unreviewed/2022/05/GHSA-v3j7-7h3r-662c/GHSA-v3j7-7h3r-662c.json @@ -7,12 +7,8 @@ "CVE-2021-31912" ], "details": "In JetBrains TeamCity before 2020.2.3, account takeover was potentially possible during a password reset.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v3j8-2g92-h2q8/GHSA-v3j8-2g92-h2q8.json b/advisories/unreviewed/2022/05/GHSA-v3j8-2g92-h2q8/GHSA-v3j8-2g92-h2q8.json index 143b31021dd..d102e9f101b 100644 --- a/advisories/unreviewed/2022/05/GHSA-v3j8-2g92-h2q8/GHSA-v3j8-2g92-h2q8.json +++ b/advisories/unreviewed/2022/05/GHSA-v3j8-2g92-h2q8/GHSA-v3j8-2g92-h2q8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v3rq-m7g7-7h66/GHSA-v3rq-m7g7-7h66.json b/advisories/unreviewed/2022/05/GHSA-v3rq-m7g7-7h66/GHSA-v3rq-m7g7-7h66.json index 56b1dd2b9e0..2dee92c0790 100644 --- a/advisories/unreviewed/2022/05/GHSA-v3rq-m7g7-7h66/GHSA-v3rq-m7g7-7h66.json +++ b/advisories/unreviewed/2022/05/GHSA-v3rq-m7g7-7h66/GHSA-v3rq-m7g7-7h66.json @@ -7,12 +7,8 @@ "CVE-2021-31449" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of validating the existence of an object prior to performing further free operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13280.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v5g4-whqh-4265/GHSA-v5g4-whqh-4265.json b/advisories/unreviewed/2022/05/GHSA-v5g4-whqh-4265/GHSA-v5g4-whqh-4265.json index b5c0aab2a57..cbe11ba76e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-v5g4-whqh-4265/GHSA-v5g4-whqh-4265.json +++ b/advisories/unreviewed/2022/05/GHSA-v5g4-whqh-4265/GHSA-v5g4-whqh-4265.json @@ -7,12 +7,8 @@ "CVE-2019-19276" ], "details": "A vulnerability has been identified in SIMATIC HMI Comfort Panels 1st Generation (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels (All versions < V16 Update 4). Specially crafted packets sent to port 161/udp can cause the SNMP service of affected devices to crash. A manual restart of the device is required to resume operation of the service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v764-45vr-f9mp/GHSA-v764-45vr-f9mp.json b/advisories/unreviewed/2022/05/GHSA-v764-45vr-f9mp/GHSA-v764-45vr-f9mp.json index 9d5ae95ffe6..49a12ed86c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-v764-45vr-f9mp/GHSA-v764-45vr-f9mp.json +++ b/advisories/unreviewed/2022/05/GHSA-v764-45vr-f9mp/GHSA-v764-45vr-f9mp.json @@ -7,12 +7,8 @@ "CVE-2021-1306" ], "details": "A vulnerability in the restricted shell of Cisco Evolved Programmable Network (EPN) Manager, Cisco Identity Services Engine (ISE), and Cisco Prime Infrastructure could allow an authenticated, local attacker to identify directories and write arbitrary files to the file system. This vulnerability is due to improper validation of parameters that are sent to a CLI command within the restricted shell. An attacker could exploit this vulnerability by logging in to the device and issuing certain CLI commands. A successful exploit could allow the attacker to identify file directories on the affected device and write arbitrary files to the file system on the affected device. To exploit this vulnerability, the attacker must be an authenticated shell user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v8h9-fmjj-25x9/GHSA-v8h9-fmjj-25x9.json b/advisories/unreviewed/2022/05/GHSA-v8h9-fmjj-25x9/GHSA-v8h9-fmjj-25x9.json index e95f5f72da1..c85afc95ccb 100644 --- a/advisories/unreviewed/2022/05/GHSA-v8h9-fmjj-25x9/GHSA-v8h9-fmjj-25x9.json +++ b/advisories/unreviewed/2022/05/GHSA-v8h9-fmjj-25x9/GHSA-v8h9-fmjj-25x9.json @@ -7,12 +7,8 @@ "CVE-2020-21833" ], "details": "A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_classes ../../src/decode.c:2440.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v955-2jxq-2w4r/GHSA-v955-2jxq-2w4r.json b/advisories/unreviewed/2022/05/GHSA-v955-2jxq-2w4r/GHSA-v955-2jxq-2w4r.json index c008814be98..35ec51e1fd1 100644 --- a/advisories/unreviewed/2022/05/GHSA-v955-2jxq-2w4r/GHSA-v955-2jxq-2w4r.json +++ b/advisories/unreviewed/2022/05/GHSA-v955-2jxq-2w4r/GHSA-v955-2jxq-2w4r.json @@ -7,12 +7,8 @@ "CVE-2020-23689" ], "details": "In YFCMF v2.3.1, there is a stored XSS vulnerability in the comments section of the news page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vcfr-6pgp-8283/GHSA-vcfr-6pgp-8283.json b/advisories/unreviewed/2022/05/GHSA-vcfr-6pgp-8283/GHSA-vcfr-6pgp-8283.json index cc2935d28b0..50e909c5466 100644 --- a/advisories/unreviewed/2022/05/GHSA-vcfr-6pgp-8283/GHSA-vcfr-6pgp-8283.json +++ b/advisories/unreviewed/2022/05/GHSA-vcfr-6pgp-8283/GHSA-vcfr-6pgp-8283.json @@ -7,12 +7,8 @@ "CVE-2017-17677" ], "details": "BMC Remedy 9.1SP3 is affected by authenticated code execution. Authenticated users that have the right to create reports can use BIRT templates to run code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vfhj-mmg9-76p7/GHSA-vfhj-mmg9-76p7.json b/advisories/unreviewed/2022/05/GHSA-vfhj-mmg9-76p7/GHSA-vfhj-mmg9-76p7.json index bdeef34021a..c6304d103ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-vfhj-mmg9-76p7/GHSA-vfhj-mmg9-76p7.json +++ b/advisories/unreviewed/2022/05/GHSA-vfhj-mmg9-76p7/GHSA-vfhj-mmg9-76p7.json @@ -7,12 +7,8 @@ "CVE-2020-19199" ], "details": "A Cross Site Request Forgery (CSRF) vulnerability exists in PHPOK 5.2.060 via admin.php?c=admin&f=save, which could let a remote malicious user execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vh63-h6gp-hw6w/GHSA-vh63-h6gp-hw6w.json b/advisories/unreviewed/2022/05/GHSA-vh63-h6gp-hw6w/GHSA-vh63-h6gp-hw6w.json index b2f4c6f46a4..166cb0931e4 100644 --- a/advisories/unreviewed/2022/05/GHSA-vh63-h6gp-hw6w/GHSA-vh63-h6gp-hw6w.json +++ b/advisories/unreviewed/2022/05/GHSA-vh63-h6gp-hw6w/GHSA-vh63-h6gp-hw6w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vhgq-g2vx-jxpj/GHSA-vhgq-g2vx-jxpj.json b/advisories/unreviewed/2022/05/GHSA-vhgq-g2vx-jxpj/GHSA-vhgq-g2vx-jxpj.json index 48275d6fd52..b681b12150b 100644 --- a/advisories/unreviewed/2022/05/GHSA-vhgq-g2vx-jxpj/GHSA-vhgq-g2vx-jxpj.json +++ b/advisories/unreviewed/2022/05/GHSA-vhgq-g2vx-jxpj/GHSA-vhgq-g2vx-jxpj.json @@ -7,12 +7,8 @@ "CVE-2021-20389" ], "details": "IBM Security Guardium 11.2 stores user credentials in plain clear text which can be read by a local user. IBM X-Force ID: 195770.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vjhx-rh6c-wf22/GHSA-vjhx-rh6c-wf22.json b/advisories/unreviewed/2022/05/GHSA-vjhx-rh6c-wf22/GHSA-vjhx-rh6c-wf22.json index 2a155540cbd..514d02ea411 100644 --- a/advisories/unreviewed/2022/05/GHSA-vjhx-rh6c-wf22/GHSA-vjhx-rh6c-wf22.json +++ b/advisories/unreviewed/2022/05/GHSA-vjhx-rh6c-wf22/GHSA-vjhx-rh6c-wf22.json @@ -7,12 +7,8 @@ "CVE-2021-25661" ], "details": "A vulnerability has been identified in SIMATIC HMI Comfort Outdoor Panels 7\\\" & 15\\\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI Comfort Panels 4\\\" - 22\\\" (incl. SIPLUS variants) (All versions < V16 Update 4), SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 and KTP900F (All versions < V16 Update 4), SIMATIC WinCC Runtime Advanced (All versions < V16 Update 4). SmartVNC has an out-of-bounds memory access vulnerability that could be triggered on the client side when sending data from the server, which could result in a Denial-of-Service condition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vm4h-8w86-xh83/GHSA-vm4h-8w86-xh83.json b/advisories/unreviewed/2022/05/GHSA-vm4h-8w86-xh83/GHSA-vm4h-8w86-xh83.json index fa31d8f959b..29b0b3899c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-vm4h-8w86-xh83/GHSA-vm4h-8w86-xh83.json +++ b/advisories/unreviewed/2022/05/GHSA-vm4h-8w86-xh83/GHSA-vm4h-8w86-xh83.json @@ -7,12 +7,8 @@ "CVE-2021-30082" ], "details": "An issue was discovered in Gris CMS v0.1. There is a Persistent XSS vulnerability which allows remote attackers to inject arbitrary web script or HTML via admin/dashboard.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vmfr-7h39-rx5w/GHSA-vmfr-7h39-rx5w.json b/advisories/unreviewed/2022/05/GHSA-vmfr-7h39-rx5w/GHSA-vmfr-7h39-rx5w.json index 782664aeb1d..1e1951d5b4a 100644 --- a/advisories/unreviewed/2022/05/GHSA-vmfr-7h39-rx5w/GHSA-vmfr-7h39-rx5w.json +++ b/advisories/unreviewed/2022/05/GHSA-vmfr-7h39-rx5w/GHSA-vmfr-7h39-rx5w.json @@ -7,12 +7,8 @@ "CVE-2019-12348" ], "details": "An issue was discovered in zzcms 2019. SQL Injection exists in user/ztconfig.php via the daohang or img POST parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vp34-g74h-95v8/GHSA-vp34-g74h-95v8.json b/advisories/unreviewed/2022/05/GHSA-vp34-g74h-95v8/GHSA-vp34-g74h-95v8.json index cc2bdb1ed61..7b401aa61c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-vp34-g74h-95v8/GHSA-vp34-g74h-95v8.json +++ b/advisories/unreviewed/2022/05/GHSA-vp34-g74h-95v8/GHSA-vp34-g74h-95v8.json @@ -7,12 +7,8 @@ "CVE-2020-17891" ], "details": "TP-Link Archer C1200 firmware version 1.13 Build 2018/01/24 rel.52299 EU has a XSS vulnerability allowing a remote attacker to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vrc7-hfgw-ggv6/GHSA-vrc7-hfgw-ggv6.json b/advisories/unreviewed/2022/05/GHSA-vrc7-hfgw-ggv6/GHSA-vrc7-hfgw-ggv6.json index 94cec1378cb..c3c1b942b42 100644 --- a/advisories/unreviewed/2022/05/GHSA-vrc7-hfgw-ggv6/GHSA-vrc7-hfgw-ggv6.json +++ b/advisories/unreviewed/2022/05/GHSA-vrc7-hfgw-ggv6/GHSA-vrc7-hfgw-ggv6.json @@ -7,12 +7,8 @@ "CVE-2021-31457" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of Annotation objects. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13147.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vrm9-x4ww-qpgw/GHSA-vrm9-x4ww-qpgw.json b/advisories/unreviewed/2022/05/GHSA-vrm9-x4ww-qpgw/GHSA-vrm9-x4ww-qpgw.json index 9ec7312ee23..5310af097f4 100644 --- a/advisories/unreviewed/2022/05/GHSA-vrm9-x4ww-qpgw/GHSA-vrm9-x4ww-qpgw.json +++ b/advisories/unreviewed/2022/05/GHSA-vrm9-x4ww-qpgw/GHSA-vrm9-x4ww-qpgw.json @@ -7,12 +7,8 @@ "CVE-2021-24288" ], "details": "When subscribing using AcyMailing, the 'redirect' parameter isn't properly sanitized. Turning the request from POST to GET, an attacker can craft a link containing a potentially malicious landing page and send it to the victim.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vwhr-cxjh-7vpw/GHSA-vwhr-cxjh-7vpw.json b/advisories/unreviewed/2022/05/GHSA-vwhr-cxjh-7vpw/GHSA-vwhr-cxjh-7vpw.json index a7d8f228912..baccc1eccea 100644 --- a/advisories/unreviewed/2022/05/GHSA-vwhr-cxjh-7vpw/GHSA-vwhr-cxjh-7vpw.json +++ b/advisories/unreviewed/2022/05/GHSA-vwhr-cxjh-7vpw/GHSA-vwhr-cxjh-7vpw.json @@ -7,12 +7,8 @@ "CVE-2021-25849" ], "details": "An integer underflow was discovered in userdisk/vport_lldpd in Moxa Camera VPort 06EC-2V Series, version 1.1, improper validation of the PortID TLV leads to Denial of Service via a crafted lldp packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w2v7-6jjj-cwx5/GHSA-w2v7-6jjj-cwx5.json b/advisories/unreviewed/2022/05/GHSA-w2v7-6jjj-cwx5/GHSA-w2v7-6jjj-cwx5.json index 2538543b837..e456a554e37 100644 --- a/advisories/unreviewed/2022/05/GHSA-w2v7-6jjj-cwx5/GHSA-w2v7-6jjj-cwx5.json +++ b/advisories/unreviewed/2022/05/GHSA-w2v7-6jjj-cwx5/GHSA-w2v7-6jjj-cwx5.json @@ -7,12 +7,8 @@ "CVE-2021-32605" ], "details": "zzzcms zzzphp before 2.0.4 allows remote attackers to execute arbitrary OS commands by placing them in the keys parameter of a ?location=search URI, as demonstrated by an OS command within an \"if\" \"end if\" block.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w2vj-j8wh-3c7w/GHSA-w2vj-j8wh-3c7w.json b/advisories/unreviewed/2022/05/GHSA-w2vj-j8wh-3c7w/GHSA-w2vj-j8wh-3c7w.json index 8903fb74996..49055f83865 100644 --- a/advisories/unreviewed/2022/05/GHSA-w2vj-j8wh-3c7w/GHSA-w2vj-j8wh-3c7w.json +++ b/advisories/unreviewed/2022/05/GHSA-w2vj-j8wh-3c7w/GHSA-w2vj-j8wh-3c7w.json @@ -7,12 +7,8 @@ "CVE-2020-27830" ], "details": "A vulnerability was found in Linux Kernel where in the spk_ttyio_receive_buf2() function, it would dereference spk_ttyio_synth without checking whether it is NULL or not, and may lead to a NULL-ptr deref crash.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w394-4962-55g6/GHSA-w394-4962-55g6.json b/advisories/unreviewed/2022/05/GHSA-w394-4962-55g6/GHSA-w394-4962-55g6.json index e1fff2689ca..564c6fcc91e 100644 --- a/advisories/unreviewed/2022/05/GHSA-w394-4962-55g6/GHSA-w394-4962-55g6.json +++ b/advisories/unreviewed/2022/05/GHSA-w394-4962-55g6/GHSA-w394-4962-55g6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w3m7-v45p-59jq/GHSA-w3m7-v45p-59jq.json b/advisories/unreviewed/2022/05/GHSA-w3m7-v45p-59jq/GHSA-w3m7-v45p-59jq.json index bf04db0d6b4..99bd4a2f423 100644 --- a/advisories/unreviewed/2022/05/GHSA-w3m7-v45p-59jq/GHSA-w3m7-v45p-59jq.json +++ b/advisories/unreviewed/2022/05/GHSA-w3m7-v45p-59jq/GHSA-w3m7-v45p-59jq.json @@ -7,12 +7,8 @@ "CVE-2021-31904" ], "details": "In JetBrains TeamCity before 2020.2.2, XSS was potentially possible on the test history page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w3x7-7p26-r8jv/GHSA-w3x7-7p26-r8jv.json b/advisories/unreviewed/2022/05/GHSA-w3x7-7p26-r8jv/GHSA-w3x7-7p26-r8jv.json index 78e48b2fbfb..fbe3ccd9f04 100644 --- a/advisories/unreviewed/2022/05/GHSA-w3x7-7p26-r8jv/GHSA-w3x7-7p26-r8jv.json +++ b/advisories/unreviewed/2022/05/GHSA-w3x7-7p26-r8jv/GHSA-w3x7-7p26-r8jv.json @@ -7,12 +7,8 @@ "CVE-2020-23790" ], "details": "An Arbitrary File Upload vulnerability was discovered in the Golo Laravel theme v 1.1.5.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w44m-x962-x72w/GHSA-w44m-x962-x72w.json b/advisories/unreviewed/2022/05/GHSA-w44m-x962-x72w/GHSA-w44m-x962-x72w.json index fe66d2f124d..0999214b312 100644 --- a/advisories/unreviewed/2022/05/GHSA-w44m-x962-x72w/GHSA-w44m-x962-x72w.json +++ b/advisories/unreviewed/2022/05/GHSA-w44m-x962-x72w/GHSA-w44m-x962-x72w.json @@ -7,12 +7,8 @@ "CVE-2021-22136" ], "details": "In Kibana versions before 7.12.0 and 6.8.15 a flaw in the session timeout was discovered where the xpack.security.session.idleTimeout setting is not being respected. This was caused by background polling activities unintentionally extending authenticated users sessions, preventing a user session from timing out.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w48f-hvm9-m282/GHSA-w48f-hvm9-m282.json b/advisories/unreviewed/2022/05/GHSA-w48f-hvm9-m282/GHSA-w48f-hvm9-m282.json index 716c4ea301a..c89aaf9eed9 100644 --- a/advisories/unreviewed/2022/05/GHSA-w48f-hvm9-m282/GHSA-w48f-hvm9-m282.json +++ b/advisories/unreviewed/2022/05/GHSA-w48f-hvm9-m282/GHSA-w48f-hvm9-m282.json @@ -7,12 +7,8 @@ "CVE-2021-24287" ], "details": "The settings page of the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin before 1.3.2 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w62f-9gm7-596f/GHSA-w62f-9gm7-596f.json b/advisories/unreviewed/2022/05/GHSA-w62f-9gm7-596f/GHSA-w62f-9gm7-596f.json index 8d0fcc939b2..2388a01e93e 100644 --- a/advisories/unreviewed/2022/05/GHSA-w62f-9gm7-596f/GHSA-w62f-9gm7-596f.json +++ b/advisories/unreviewed/2022/05/GHSA-w62f-9gm7-596f/GHSA-w62f-9gm7-596f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w66c-c28j-vqf3/GHSA-w66c-c28j-vqf3.json b/advisories/unreviewed/2022/05/GHSA-w66c-c28j-vqf3/GHSA-w66c-c28j-vqf3.json index b5cd87ddb7c..76f027c3f2c 100644 --- a/advisories/unreviewed/2022/05/GHSA-w66c-c28j-vqf3/GHSA-w66c-c28j-vqf3.json +++ b/advisories/unreviewed/2022/05/GHSA-w66c-c28j-vqf3/GHSA-w66c-c28j-vqf3.json @@ -7,12 +7,8 @@ "CVE-2021-31446" ], "details": "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-13245.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w67x-r869-xc5q/GHSA-w67x-r869-xc5q.json b/advisories/unreviewed/2022/05/GHSA-w67x-r869-xc5q/GHSA-w67x-r869-xc5q.json index 5ea2c225fb0..03704931c2a 100644 --- a/advisories/unreviewed/2022/05/GHSA-w67x-r869-xc5q/GHSA-w67x-r869-xc5q.json +++ b/advisories/unreviewed/2022/05/GHSA-w67x-r869-xc5q/GHSA-w67x-r869-xc5q.json @@ -7,12 +7,8 @@ "CVE-2021-24314" ], "details": "The Goto WordPress theme before 2.1 did not sanitise, validate of escape the keywords GET parameter from its listing page before using it in a SQL statement, leading to an Unauthenticated SQL injection issue", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w69v-q5pj-q9r2/GHSA-w69v-q5pj-q9r2.json b/advisories/unreviewed/2022/05/GHSA-w69v-q5pj-q9r2/GHSA-w69v-q5pj-q9r2.json index 325d1593fec..66f69ddfb72 100644 --- a/advisories/unreviewed/2022/05/GHSA-w69v-q5pj-q9r2/GHSA-w69v-q5pj-q9r2.json +++ b/advisories/unreviewed/2022/05/GHSA-w69v-q5pj-q9r2/GHSA-w69v-q5pj-q9r2.json @@ -7,12 +7,8 @@ "CVE-2021-21988" ], "details": "VMware Workstation (16.x prior to 16.1.2) and Horizon Client for Windows (5.x prior to 5.5.2) contain out-of-bounds read vulnerability in the Cortado ThinPrint component (JPEG2000 Parser). A malicious actor with access to a virtual machine or remote desktop may be able to exploit these issues leading to information disclosure from the TPView process running on the system where Workstation or Horizon Client for Windows is installed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w852-vpw3-jf4v/GHSA-w852-vpw3-jf4v.json b/advisories/unreviewed/2022/05/GHSA-w852-vpw3-jf4v/GHSA-w852-vpw3-jf4v.json index f5ddd66f1b2..9342327cc3d 100644 --- a/advisories/unreviewed/2022/05/GHSA-w852-vpw3-jf4v/GHSA-w852-vpw3-jf4v.json +++ b/advisories/unreviewed/2022/05/GHSA-w852-vpw3-jf4v/GHSA-w852-vpw3-jf4v.json @@ -7,12 +7,8 @@ "CVE-2021-30212" ], "details": "Knowage Suite 7.3 is vulnerable to Stored Cross-Site Scripting (XSS). An attacker can inject arbitrary web script in '/knowage/restful-services/documentnotes/saveNote' via the 'nota' parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w9xp-gh5g-rf6p/GHSA-w9xp-gh5g-rf6p.json b/advisories/unreviewed/2022/05/GHSA-w9xp-gh5g-rf6p/GHSA-w9xp-gh5g-rf6p.json index f92e12f34c8..23aaa147f4f 100644 --- a/advisories/unreviewed/2022/05/GHSA-w9xp-gh5g-rf6p/GHSA-w9xp-gh5g-rf6p.json +++ b/advisories/unreviewed/2022/05/GHSA-w9xp-gh5g-rf6p/GHSA-w9xp-gh5g-rf6p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wc63-92vq-35gr/GHSA-wc63-92vq-35gr.json b/advisories/unreviewed/2022/05/GHSA-wc63-92vq-35gr/GHSA-wc63-92vq-35gr.json index 842cbcf6db5..dd679d2807b 100644 --- a/advisories/unreviewed/2022/05/GHSA-wc63-92vq-35gr/GHSA-wc63-92vq-35gr.json +++ b/advisories/unreviewed/2022/05/GHSA-wc63-92vq-35gr/GHSA-wc63-92vq-35gr.json @@ -7,12 +7,8 @@ "CVE-2021-30006" ], "details": "In IntelliJ IDEA before 2020.3.3, XXE was possible, leading to information disclosure.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wc66-56fw-mmp9/GHSA-wc66-56fw-mmp9.json b/advisories/unreviewed/2022/05/GHSA-wc66-56fw-mmp9/GHSA-wc66-56fw-mmp9.json index 0196e326423..c98ba8b3fd4 100644 --- a/advisories/unreviewed/2022/05/GHSA-wc66-56fw-mmp9/GHSA-wc66-56fw-mmp9.json +++ b/advisories/unreviewed/2022/05/GHSA-wc66-56fw-mmp9/GHSA-wc66-56fw-mmp9.json @@ -7,12 +7,8 @@ "CVE-2021-3457" ], "details": "An improper authorization handling flaw was found in Foreman. The Shellhooks plugin for the smart-proxy allows Foreman clients to execute actions that should be limited to the Foreman Server. This flaw allows an authenticated local attacker to access and delete limited resources and also causes a denial of service on the Foreman server. The highest threat from this vulnerability is to integrity and system availability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wcr5-3q96-c2gr/GHSA-wcr5-3q96-c2gr.json b/advisories/unreviewed/2022/05/GHSA-wcr5-3q96-c2gr/GHSA-wcr5-3q96-c2gr.json index 3662779e178..eeb7892aba7 100644 --- a/advisories/unreviewed/2022/05/GHSA-wcr5-3q96-c2gr/GHSA-wcr5-3q96-c2gr.json +++ b/advisories/unreviewed/2022/05/GHSA-wcr5-3q96-c2gr/GHSA-wcr5-3q96-c2gr.json @@ -7,12 +7,8 @@ "CVE-2021-29044" ], "details": "Cross-site scripting (XSS) vulnerability in the Site module's membership request administration pages in Liferay Portal 7.0.0 through 7.3.5, and Liferay DXP 7.0 before fix pack 97, 7.1 before fix pack 21, 7.2 before fix pack 10 and 7.3 before fix pack 1 allows remote attackers to inject arbitrary web script or HTML via the _com_liferay_site_my_sites_web_portlet_MySitesPortlet_comments parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wg2q-q9j3-c3v8/GHSA-wg2q-q9j3-c3v8.json b/advisories/unreviewed/2022/05/GHSA-wg2q-q9j3-c3v8/GHSA-wg2q-q9j3-c3v8.json index bfd703d3b9a..3e50e8fa4a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-wg2q-q9j3-c3v8/GHSA-wg2q-q9j3-c3v8.json +++ b/advisories/unreviewed/2022/05/GHSA-wg2q-q9j3-c3v8/GHSA-wg2q-q9j3-c3v8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -43,9 +41,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wj2m-hq5q-2f2g/GHSA-wj2m-hq5q-2f2g.json b/advisories/unreviewed/2022/05/GHSA-wj2m-hq5q-2f2g/GHSA-wj2m-hq5q-2f2g.json index 669bc26d63d..9a042b47b3f 100644 --- a/advisories/unreviewed/2022/05/GHSA-wj2m-hq5q-2f2g/GHSA-wj2m-hq5q-2f2g.json +++ b/advisories/unreviewed/2022/05/GHSA-wj2m-hq5q-2f2g/GHSA-wj2m-hq5q-2f2g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wmmh-xgc6-xjh2/GHSA-wmmh-xgc6-xjh2.json b/advisories/unreviewed/2022/05/GHSA-wmmh-xgc6-xjh2/GHSA-wmmh-xgc6-xjh2.json index 69057cbf964..c4961ba71f3 100644 --- a/advisories/unreviewed/2022/05/GHSA-wmmh-xgc6-xjh2/GHSA-wmmh-xgc6-xjh2.json +++ b/advisories/unreviewed/2022/05/GHSA-wmmh-xgc6-xjh2/GHSA-wmmh-xgc6-xjh2.json @@ -7,12 +7,8 @@ "CVE-2021-31758" ], "details": "An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setportList allows attackers to execute arbitrary code on the system via a crafted post request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wpc8-gx68-f9r6/GHSA-wpc8-gx68-f9r6.json b/advisories/unreviewed/2022/05/GHSA-wpc8-gx68-f9r6/GHSA-wpc8-gx68-f9r6.json index 1bf89152ef7..a1feadeca24 100644 --- a/advisories/unreviewed/2022/05/GHSA-wpc8-gx68-f9r6/GHSA-wpc8-gx68-f9r6.json +++ b/advisories/unreviewed/2022/05/GHSA-wpc8-gx68-f9r6/GHSA-wpc8-gx68-f9r6.json @@ -7,12 +7,8 @@ "CVE-2021-26309" ], "details": "Information disclosure in the TeamCity plugin for IntelliJ before 2020.2.2.85899 was possible because a local temporary file had Insecure Permissions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wqw3-6p9p-84x8/GHSA-wqw3-6p9p-84x8.json b/advisories/unreviewed/2022/05/GHSA-wqw3-6p9p-84x8/GHSA-wqw3-6p9p-84x8.json index bca37118e43..ae065345e6c 100644 --- a/advisories/unreviewed/2022/05/GHSA-wqw3-6p9p-84x8/GHSA-wqw3-6p9p-84x8.json +++ b/advisories/unreviewed/2022/05/GHSA-wqw3-6p9p-84x8/GHSA-wqw3-6p9p-84x8.json @@ -7,12 +7,8 @@ "CVE-2021-32471" ], "details": "Insufficient input validation in the Marvin Minsky 1967 implementation of the Universal Turing Machine allows program users to execute arbitrary code via crafted data. For example, a tape head may have an unexpected location after the processing of input composed of As and Bs (instead of 0s and 1s). NOTE: the discoverer states \"this vulnerability has no real-world implications.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wr3c-mqrf-pcv6/GHSA-wr3c-mqrf-pcv6.json b/advisories/unreviewed/2022/05/GHSA-wr3c-mqrf-pcv6/GHSA-wr3c-mqrf-pcv6.json index 1a54b7e4a31..65223921ea2 100644 --- a/advisories/unreviewed/2022/05/GHSA-wr3c-mqrf-pcv6/GHSA-wr3c-mqrf-pcv6.json +++ b/advisories/unreviewed/2022/05/GHSA-wr3c-mqrf-pcv6/GHSA-wr3c-mqrf-pcv6.json @@ -7,12 +7,8 @@ "CVE-2021-29263" ], "details": "In JetBrains IntelliJ IDEA 2020.3.3, local code execution was possible because of insufficient checks when getting the project from VCS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wvfh-fc5m-v972/GHSA-wvfh-fc5m-v972.json b/advisories/unreviewed/2022/05/GHSA-wvfh-fc5m-v972/GHSA-wvfh-fc5m-v972.json index 4848d3ed275..3ba89ece41e 100644 --- a/advisories/unreviewed/2022/05/GHSA-wvfh-fc5m-v972/GHSA-wvfh-fc5m-v972.json +++ b/advisories/unreviewed/2022/05/GHSA-wvfh-fc5m-v972/GHSA-wvfh-fc5m-v972.json @@ -7,12 +7,8 @@ "CVE-2021-20998" ], "details": "In multiple managed switches by WAGO in different versions without authorization and with specially crafted packets it is possible to create users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x444-25xj-h3x7/GHSA-x444-25xj-h3x7.json b/advisories/unreviewed/2022/05/GHSA-x444-25xj-h3x7/GHSA-x444-25xj-h3x7.json index 193ff4e80dd..6636fcafa5b 100644 --- a/advisories/unreviewed/2022/05/GHSA-x444-25xj-h3x7/GHSA-x444-25xj-h3x7.json +++ b/advisories/unreviewed/2022/05/GHSA-x444-25xj-h3x7/GHSA-x444-25xj-h3x7.json @@ -7,12 +7,8 @@ "CVE-2020-21838" ], "details": "A heap based buffer overflow vulnerability exits in GNU LibreDWG 0.10 via: read_2004_section_appinfo ../../src/decode.c:2842.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x587-fjx5-36pw/GHSA-x587-fjx5-36pw.json b/advisories/unreviewed/2022/05/GHSA-x587-fjx5-36pw/GHSA-x587-fjx5-36pw.json index cb3666326ce..585a6c2da4c 100644 --- a/advisories/unreviewed/2022/05/GHSA-x587-fjx5-36pw/GHSA-x587-fjx5-36pw.json +++ b/advisories/unreviewed/2022/05/GHSA-x587-fjx5-36pw/GHSA-x587-fjx5-36pw.json @@ -7,12 +7,8 @@ "CVE-2021-24324" ], "details": "The 404 SEO Redirection WordPress plugin through 1.3 is lacking CSRF checks in all its settings, allowing attackers to make a logged in user change the plugin's settings. Due to the lack of sanitisation and escaping in some fields, it could also lead to Stored Cross-Site Scripting issues", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x625-mmf4-v9rq/GHSA-x625-mmf4-v9rq.json b/advisories/unreviewed/2022/05/GHSA-x625-mmf4-v9rq/GHSA-x625-mmf4-v9rq.json index 2df9d73e438..cde5435f094 100644 --- a/advisories/unreviewed/2022/05/GHSA-x625-mmf4-v9rq/GHSA-x625-mmf4-v9rq.json +++ b/advisories/unreviewed/2022/05/GHSA-x625-mmf4-v9rq/GHSA-x625-mmf4-v9rq.json @@ -7,12 +7,8 @@ "CVE-2020-20222" ], "details": "Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x864-fcgc-4wg2/GHSA-x864-fcgc-4wg2.json b/advisories/unreviewed/2022/05/GHSA-x864-fcgc-4wg2/GHSA-x864-fcgc-4wg2.json index 07360c2538c..2a40c663a33 100644 --- a/advisories/unreviewed/2022/05/GHSA-x864-fcgc-4wg2/GHSA-x864-fcgc-4wg2.json +++ b/advisories/unreviewed/2022/05/GHSA-x864-fcgc-4wg2/GHSA-x864-fcgc-4wg2.json @@ -7,12 +7,8 @@ "CVE-2020-4990" ], "details": "IBM Security Guardium 11.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 192710.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x8fm-g4f5-mxfv/GHSA-x8fm-g4f5-mxfv.json b/advisories/unreviewed/2022/05/GHSA-x8fm-g4f5-mxfv/GHSA-x8fm-g4f5-mxfv.json index 98c31ddf59a..491acbf9f39 100644 --- a/advisories/unreviewed/2022/05/GHSA-x8fm-g4f5-mxfv/GHSA-x8fm-g4f5-mxfv.json +++ b/advisories/unreviewed/2022/05/GHSA-x8fm-g4f5-mxfv/GHSA-x8fm-g4f5-mxfv.json @@ -7,12 +7,8 @@ "CVE-2021-32918" ], "details": "An issue was discovered in Prosody before 0.11.9. Default settings are susceptible to remote unauthenticated denial-of-service (DoS) attacks via memory exhaustion when running under Lua 5.2 or Lua 5.3.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x9xh-v7jc-6xqh/GHSA-x9xh-v7jc-6xqh.json b/advisories/unreviewed/2022/05/GHSA-x9xh-v7jc-6xqh/GHSA-x9xh-v7jc-6xqh.json index aa3b254ca9b..449d50074f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-x9xh-v7jc-6xqh/GHSA-x9xh-v7jc-6xqh.json +++ b/advisories/unreviewed/2022/05/GHSA-x9xh-v7jc-6xqh/GHSA-x9xh-v7jc-6xqh.json @@ -7,12 +7,8 @@ "CVE-2021-23010" ], "details": "On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and 12.1.x before 12.1.5.3, when the BIG-IP ASM/Advanced WAF system processes WebSocket requests with JSON payloads using the default JSON Content Profile in the ASM Security Policy, the BIG-IP ASM bd process may produce a core file. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xf3x-92j4-vrpc/GHSA-xf3x-92j4-vrpc.json b/advisories/unreviewed/2022/05/GHSA-xf3x-92j4-vrpc/GHSA-xf3x-92j4-vrpc.json index 12c4445ec2e..8aa572d09da 100644 --- a/advisories/unreviewed/2022/05/GHSA-xf3x-92j4-vrpc/GHSA-xf3x-92j4-vrpc.json +++ b/advisories/unreviewed/2022/05/GHSA-xf3x-92j4-vrpc/GHSA-xf3x-92j4-vrpc.json @@ -7,12 +7,8 @@ "CVE-2021-31317" ], "details": "Telegram Android <7.1.0 (2090), Telegram iOS <7.1, and Telegram macOS <7.1 are affected by a Type Confusion in the VDasher constructor of their custom fork of the rlottie library. A remote attacker might be able to access Telegram's heap memory out-of-bounds on a victim device via a malicious animated sticker.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xfq2-689p-9p2m/GHSA-xfq2-689p-9p2m.json b/advisories/unreviewed/2022/05/GHSA-xfq2-689p-9p2m/GHSA-xfq2-689p-9p2m.json index 884ffbe4603..2a96cd5524c 100644 --- a/advisories/unreviewed/2022/05/GHSA-xfq2-689p-9p2m/GHSA-xfq2-689p-9p2m.json +++ b/advisories/unreviewed/2022/05/GHSA-xfq2-689p-9p2m/GHSA-xfq2-689p-9p2m.json @@ -7,12 +7,8 @@ "CVE-2021-20391" ], "details": "IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 195999.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xgjg-42m3-rrw5/GHSA-xgjg-42m3-rrw5.json b/advisories/unreviewed/2022/05/GHSA-xgjg-42m3-rrw5/GHSA-xgjg-42m3-rrw5.json index cd57851c11e..7b1c42e65ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-xgjg-42m3-rrw5/GHSA-xgjg-42m3-rrw5.json +++ b/advisories/unreviewed/2022/05/GHSA-xgjg-42m3-rrw5/GHSA-xgjg-42m3-rrw5.json @@ -7,12 +7,8 @@ "CVE-2021-23909" ], "details": "An issue was discovered in HERMES 2.1 in the MBUX Infotainment System on Mercedes-Benz vehicles through 2021. The SH2 MCU allows remote code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xj46-h769-7fq6/GHSA-xj46-h769-7fq6.json b/advisories/unreviewed/2022/05/GHSA-xj46-h769-7fq6/GHSA-xj46-h769-7fq6.json index 3ed39c7ec52..6951cf64253 100644 --- a/advisories/unreviewed/2022/05/GHSA-xj46-h769-7fq6/GHSA-xj46-h769-7fq6.json +++ b/advisories/unreviewed/2022/05/GHSA-xj46-h769-7fq6/GHSA-xj46-h769-7fq6.json @@ -7,12 +7,8 @@ "CVE-2021-31245" ], "details": "omr-admin.py in openmptcprouter-vps-admin 0.57.3 and earlier compares the user provided password with the original password in a length dependent manner, which allows remote attackers to guess the password via a timing attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xw4j-8m9c-4vwq/GHSA-xw4j-8m9c-4vwq.json b/advisories/unreviewed/2022/05/GHSA-xw4j-8m9c-4vwq/GHSA-xw4j-8m9c-4vwq.json index 7e7c1917cd3..e0877ac0a6e 100644 --- a/advisories/unreviewed/2022/05/GHSA-xw4j-8m9c-4vwq/GHSA-xw4j-8m9c-4vwq.json +++ b/advisories/unreviewed/2022/05/GHSA-xw4j-8m9c-4vwq/GHSA-xw4j-8m9c-4vwq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xx24-9f8q-xh6x/GHSA-xx24-9f8q-xh6x.json b/advisories/unreviewed/2022/05/GHSA-xx24-9f8q-xh6x/GHSA-xx24-9f8q-xh6x.json index 8933ba8ebb6..f53521c9985 100644 --- a/advisories/unreviewed/2022/05/GHSA-xx24-9f8q-xh6x/GHSA-xx24-9f8q-xh6x.json +++ b/advisories/unreviewed/2022/05/GHSA-xx24-9f8q-xh6x/GHSA-xx24-9f8q-xh6x.json @@ -7,12 +7,8 @@ "CVE-2021-32075" ], "details": "Re-Logic Terraria before 1.4.2.3 performs Insecure Deserialization.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xx5f-9pxf-9c8j/GHSA-xx5f-9pxf-9c8j.json b/advisories/unreviewed/2022/05/GHSA-xx5f-9pxf-9c8j/GHSA-xx5f-9pxf-9c8j.json index bc9cda08a7f..fbbd4ab368e 100644 --- a/advisories/unreviewed/2022/05/GHSA-xx5f-9pxf-9c8j/GHSA-xx5f-9pxf-9c8j.json +++ b/advisories/unreviewed/2022/05/GHSA-xx5f-9pxf-9c8j/GHSA-xx5f-9pxf-9c8j.json @@ -7,12 +7,8 @@ "CVE-2021-21549" ], "details": "Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS. A non-privileged attacker could potentially exploit this vulnerability, leading to a privileged victim application user being tricked into sending state-changing requests to the vulnerable application, causing unintended server operations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-792c-8mr7-jjvh/GHSA-792c-8mr7-jjvh.json b/advisories/unreviewed/2022/12/GHSA-792c-8mr7-jjvh/GHSA-792c-8mr7-jjvh.json index 0cd7107d8d2..7180305dfd5 100644 --- a/advisories/unreviewed/2022/12/GHSA-792c-8mr7-jjvh/GHSA-792c-8mr7-jjvh.json +++ b/advisories/unreviewed/2022/12/GHSA-792c-8mr7-jjvh/GHSA-792c-8mr7-jjvh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-8v6r-q522-82mj/GHSA-8v6r-q522-82mj.json b/advisories/unreviewed/2022/12/GHSA-8v6r-q522-82mj/GHSA-8v6r-q522-82mj.json index 5a0b29a5d00..a22621f567c 100644 --- a/advisories/unreviewed/2022/12/GHSA-8v6r-q522-82mj/GHSA-8v6r-q522-82mj.json +++ b/advisories/unreviewed/2022/12/GHSA-8v6r-q522-82mj/GHSA-8v6r-q522-82mj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-9vp3-p6fp-p88f/GHSA-9vp3-p6fp-p88f.json b/advisories/unreviewed/2022/12/GHSA-9vp3-p6fp-p88f/GHSA-9vp3-p6fp-p88f.json index b6bcf6c3017..906dfb910d2 100644 --- a/advisories/unreviewed/2022/12/GHSA-9vp3-p6fp-p88f/GHSA-9vp3-p6fp-p88f.json +++ b/advisories/unreviewed/2022/12/GHSA-9vp3-p6fp-p88f/GHSA-9vp3-p6fp-p88f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-m376-rjrp-x9hg/GHSA-m376-rjrp-x9hg.json b/advisories/unreviewed/2022/12/GHSA-m376-rjrp-x9hg/GHSA-m376-rjrp-x9hg.json index 3f312c0ac18..6d3acddc22d 100644 --- a/advisories/unreviewed/2022/12/GHSA-m376-rjrp-x9hg/GHSA-m376-rjrp-x9hg.json +++ b/advisories/unreviewed/2022/12/GHSA-m376-rjrp-x9hg/GHSA-m376-rjrp-x9hg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-rpqp-56j6-6mjp/GHSA-rpqp-56j6-6mjp.json b/advisories/unreviewed/2022/12/GHSA-rpqp-56j6-6mjp/GHSA-rpqp-56j6-6mjp.json index a924700dce5..f838fbc8137 100644 --- a/advisories/unreviewed/2022/12/GHSA-rpqp-56j6-6mjp/GHSA-rpqp-56j6-6mjp.json +++ b/advisories/unreviewed/2022/12/GHSA-rpqp-56j6-6mjp/GHSA-rpqp-56j6-6mjp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/07/GHSA-vmqj-8947-67ch/GHSA-vmqj-8947-67ch.json b/advisories/unreviewed/2023/07/GHSA-vmqj-8947-67ch/GHSA-vmqj-8947-67ch.json index 52382049c88..3ea50c353ae 100644 --- a/advisories/unreviewed/2023/07/GHSA-vmqj-8947-67ch/GHSA-vmqj-8947-67ch.json +++ b/advisories/unreviewed/2023/07/GHSA-vmqj-8947-67ch/GHSA-vmqj-8947-67ch.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/08/GHSA-2rw7-4xg9-x3cw/GHSA-2rw7-4xg9-x3cw.json b/advisories/unreviewed/2023/08/GHSA-2rw7-4xg9-x3cw/GHSA-2rw7-4xg9-x3cw.json index e9e4c4d9a0a..a8d22ced2dc 100644 --- a/advisories/unreviewed/2023/08/GHSA-2rw7-4xg9-x3cw/GHSA-2rw7-4xg9-x3cw.json +++ b/advisories/unreviewed/2023/08/GHSA-2rw7-4xg9-x3cw/GHSA-2rw7-4xg9-x3cw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/08/GHSA-p3ww-vpp7-fpm5/GHSA-p3ww-vpp7-fpm5.json b/advisories/unreviewed/2023/08/GHSA-p3ww-vpp7-fpm5/GHSA-p3ww-vpp7-fpm5.json index f6723b0cc99..6fb578e5303 100644 --- a/advisories/unreviewed/2023/08/GHSA-p3ww-vpp7-fpm5/GHSA-p3ww-vpp7-fpm5.json +++ b/advisories/unreviewed/2023/08/GHSA-p3ww-vpp7-fpm5/GHSA-p3ww-vpp7-fpm5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/09/GHSA-fwwc-f8hw-qfwf/GHSA-fwwc-f8hw-qfwf.json b/advisories/unreviewed/2023/09/GHSA-fwwc-f8hw-qfwf/GHSA-fwwc-f8hw-qfwf.json index ee4fb62d5e5..3cc611b5f08 100644 --- a/advisories/unreviewed/2023/09/GHSA-fwwc-f8hw-qfwf/GHSA-fwwc-f8hw-qfwf.json +++ b/advisories/unreviewed/2023/09/GHSA-fwwc-f8hw-qfwf/GHSA-fwwc-f8hw-qfwf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/09/GHSA-q9v3-53xg-6f9p/GHSA-q9v3-53xg-6f9p.json b/advisories/unreviewed/2023/09/GHSA-q9v3-53xg-6f9p/GHSA-q9v3-53xg-6f9p.json index 4d7b3acecff..88c6fa888c0 100644 --- a/advisories/unreviewed/2023/09/GHSA-q9v3-53xg-6f9p/GHSA-q9v3-53xg-6f9p.json +++ b/advisories/unreviewed/2023/09/GHSA-q9v3-53xg-6f9p/GHSA-q9v3-53xg-6f9p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/09/GHSA-wwr6-8p5g-fwf7/GHSA-wwr6-8p5g-fwf7.json b/advisories/unreviewed/2023/09/GHSA-wwr6-8p5g-fwf7/GHSA-wwr6-8p5g-fwf7.json index 39b622212a9..170d104a22e 100644 --- a/advisories/unreviewed/2023/09/GHSA-wwr6-8p5g-fwf7/GHSA-wwr6-8p5g-fwf7.json +++ b/advisories/unreviewed/2023/09/GHSA-wwr6-8p5g-fwf7/GHSA-wwr6-8p5g-fwf7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/10/GHSA-j7xf-pgw2-75mr/GHSA-j7xf-pgw2-75mr.json b/advisories/unreviewed/2023/10/GHSA-j7xf-pgw2-75mr/GHSA-j7xf-pgw2-75mr.json index cf14af7fd1b..9e787c4ae36 100644 --- a/advisories/unreviewed/2023/10/GHSA-j7xf-pgw2-75mr/GHSA-j7xf-pgw2-75mr.json +++ b/advisories/unreviewed/2023/10/GHSA-j7xf-pgw2-75mr/GHSA-j7xf-pgw2-75mr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-w6wq-qf7h-3rf7/GHSA-w6wq-qf7h-3rf7.json b/advisories/unreviewed/2023/12/GHSA-w6wq-qf7h-3rf7/GHSA-w6wq-qf7h-3rf7.json index 9712b8489be..32fd9b9fbca 100644 --- a/advisories/unreviewed/2023/12/GHSA-w6wq-qf7h-3rf7/GHSA-w6wq-qf7h-3rf7.json +++ b/advisories/unreviewed/2023/12/GHSA-w6wq-qf7h-3rf7/GHSA-w6wq-qf7h-3rf7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-2227-26ff-8f7g/GHSA-2227-26ff-8f7g.json b/advisories/unreviewed/2024/01/GHSA-2227-26ff-8f7g/GHSA-2227-26ff-8f7g.json index 151c8671476..11a219da7f2 100644 --- a/advisories/unreviewed/2024/01/GHSA-2227-26ff-8f7g/GHSA-2227-26ff-8f7g.json +++ b/advisories/unreviewed/2024/01/GHSA-2227-26ff-8f7g/GHSA-2227-26ff-8f7g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-58c3-hjfx-2gmq/GHSA-58c3-hjfx-2gmq.json b/advisories/unreviewed/2024/01/GHSA-58c3-hjfx-2gmq/GHSA-58c3-hjfx-2gmq.json index 48939b54f12..66eb771ee34 100644 --- a/advisories/unreviewed/2024/01/GHSA-58c3-hjfx-2gmq/GHSA-58c3-hjfx-2gmq.json +++ b/advisories/unreviewed/2024/01/GHSA-58c3-hjfx-2gmq/GHSA-58c3-hjfx-2gmq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-6q8p-xh3p-g84x/GHSA-6q8p-xh3p-g84x.json b/advisories/unreviewed/2024/01/GHSA-6q8p-xh3p-g84x/GHSA-6q8p-xh3p-g84x.json index f0ad5b60d0d..5a46e2198ca 100644 --- a/advisories/unreviewed/2024/01/GHSA-6q8p-xh3p-g84x/GHSA-6q8p-xh3p-g84x.json +++ b/advisories/unreviewed/2024/01/GHSA-6q8p-xh3p-g84x/GHSA-6q8p-xh3p-g84x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-83mf-fxp9-269m/GHSA-83mf-fxp9-269m.json b/advisories/unreviewed/2024/01/GHSA-83mf-fxp9-269m/GHSA-83mf-fxp9-269m.json index e6bd9ff4e6d..f8e7a2c098b 100644 --- a/advisories/unreviewed/2024/01/GHSA-83mf-fxp9-269m/GHSA-83mf-fxp9-269m.json +++ b/advisories/unreviewed/2024/01/GHSA-83mf-fxp9-269m/GHSA-83mf-fxp9-269m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-c2cx-q2qw-h3h8/GHSA-c2cx-q2qw-h3h8.json b/advisories/unreviewed/2024/01/GHSA-c2cx-q2qw-h3h8/GHSA-c2cx-q2qw-h3h8.json index e80d80a39ee..c69fcb5fcbb 100644 --- a/advisories/unreviewed/2024/01/GHSA-c2cx-q2qw-h3h8/GHSA-c2cx-q2qw-h3h8.json +++ b/advisories/unreviewed/2024/01/GHSA-c2cx-q2qw-h3h8/GHSA-c2cx-q2qw-h3h8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-c2fp-7mjg-8pf9/GHSA-c2fp-7mjg-8pf9.json b/advisories/unreviewed/2024/01/GHSA-c2fp-7mjg-8pf9/GHSA-c2fp-7mjg-8pf9.json index 2d65cdd4313..c4e2c52b765 100644 --- a/advisories/unreviewed/2024/01/GHSA-c2fp-7mjg-8pf9/GHSA-c2fp-7mjg-8pf9.json +++ b/advisories/unreviewed/2024/01/GHSA-c2fp-7mjg-8pf9/GHSA-c2fp-7mjg-8pf9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-f487-r7gx-mx7f/GHSA-f487-r7gx-mx7f.json b/advisories/unreviewed/2024/01/GHSA-f487-r7gx-mx7f/GHSA-f487-r7gx-mx7f.json index 367bb5be27a..17da294d8b1 100644 --- a/advisories/unreviewed/2024/01/GHSA-f487-r7gx-mx7f/GHSA-f487-r7gx-mx7f.json +++ b/advisories/unreviewed/2024/01/GHSA-f487-r7gx-mx7f/GHSA-f487-r7gx-mx7f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-fr84-hv36-hj5p/GHSA-fr84-hv36-hj5p.json b/advisories/unreviewed/2024/01/GHSA-fr84-hv36-hj5p/GHSA-fr84-hv36-hj5p.json index 7e0c682905a..04460dd01ec 100644 --- a/advisories/unreviewed/2024/01/GHSA-fr84-hv36-hj5p/GHSA-fr84-hv36-hj5p.json +++ b/advisories/unreviewed/2024/01/GHSA-fr84-hv36-hj5p/GHSA-fr84-hv36-hj5p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-g55w-hc5g-q7ww/GHSA-g55w-hc5g-q7ww.json b/advisories/unreviewed/2024/01/GHSA-g55w-hc5g-q7ww/GHSA-g55w-hc5g-q7ww.json index 254a9d62d41..7664f71cb12 100644 --- a/advisories/unreviewed/2024/01/GHSA-g55w-hc5g-q7ww/GHSA-g55w-hc5g-q7ww.json +++ b/advisories/unreviewed/2024/01/GHSA-g55w-hc5g-q7ww/GHSA-g55w-hc5g-q7ww.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-j7h7-7c79-56qf/GHSA-j7h7-7c79-56qf.json b/advisories/unreviewed/2024/01/GHSA-j7h7-7c79-56qf/GHSA-j7h7-7c79-56qf.json index 0ca95b9c7bd..582e9e24141 100644 --- a/advisories/unreviewed/2024/01/GHSA-j7h7-7c79-56qf/GHSA-j7h7-7c79-56qf.json +++ b/advisories/unreviewed/2024/01/GHSA-j7h7-7c79-56qf/GHSA-j7h7-7c79-56qf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-pj25-wf7q-x8ch/GHSA-pj25-wf7q-x8ch.json b/advisories/unreviewed/2024/01/GHSA-pj25-wf7q-x8ch/GHSA-pj25-wf7q-x8ch.json index 2d13f76078b..14b16a3c953 100644 --- a/advisories/unreviewed/2024/01/GHSA-pj25-wf7q-x8ch/GHSA-pj25-wf7q-x8ch.json +++ b/advisories/unreviewed/2024/01/GHSA-pj25-wf7q-x8ch/GHSA-pj25-wf7q-x8ch.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-r4h6-6pm7-9q3g/GHSA-r4h6-6pm7-9q3g.json b/advisories/unreviewed/2024/01/GHSA-r4h6-6pm7-9q3g/GHSA-r4h6-6pm7-9q3g.json index 7f25a02f1c7..bde9e47d926 100644 --- a/advisories/unreviewed/2024/01/GHSA-r4h6-6pm7-9q3g/GHSA-r4h6-6pm7-9q3g.json +++ b/advisories/unreviewed/2024/01/GHSA-r4h6-6pm7-9q3g/GHSA-r4h6-6pm7-9q3g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-r886-h68c-qmvr/GHSA-r886-h68c-qmvr.json b/advisories/unreviewed/2024/01/GHSA-r886-h68c-qmvr/GHSA-r886-h68c-qmvr.json index dc094c22c7a..01cf0024b20 100644 --- a/advisories/unreviewed/2024/01/GHSA-r886-h68c-qmvr/GHSA-r886-h68c-qmvr.json +++ b/advisories/unreviewed/2024/01/GHSA-r886-h68c-qmvr/GHSA-r886-h68c-qmvr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-wf2c-jwfp-m8jr/GHSA-wf2c-jwfp-m8jr.json b/advisories/unreviewed/2024/01/GHSA-wf2c-jwfp-m8jr/GHSA-wf2c-jwfp-m8jr.json index 9551f721084..518c93469c3 100644 --- a/advisories/unreviewed/2024/01/GHSA-wf2c-jwfp-m8jr/GHSA-wf2c-jwfp-m8jr.json +++ b/advisories/unreviewed/2024/01/GHSA-wf2c-jwfp-m8jr/GHSA-wf2c-jwfp-m8jr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/02/GHSA-3prf-2gpr-5j48/GHSA-3prf-2gpr-5j48.json b/advisories/unreviewed/2024/02/GHSA-3prf-2gpr-5j48/GHSA-3prf-2gpr-5j48.json index 4d2eb0e0f49..115afc50dae 100644 --- a/advisories/unreviewed/2024/02/GHSA-3prf-2gpr-5j48/GHSA-3prf-2gpr-5j48.json +++ b/advisories/unreviewed/2024/02/GHSA-3prf-2gpr-5j48/GHSA-3prf-2gpr-5j48.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/02/GHSA-9m95-x9fm-78hh/GHSA-9m95-x9fm-78hh.json b/advisories/unreviewed/2024/02/GHSA-9m95-x9fm-78hh/GHSA-9m95-x9fm-78hh.json index 250bfb2cfcb..42a35f3ad4b 100644 --- a/advisories/unreviewed/2024/02/GHSA-9m95-x9fm-78hh/GHSA-9m95-x9fm-78hh.json +++ b/advisories/unreviewed/2024/02/GHSA-9m95-x9fm-78hh/GHSA-9m95-x9fm-78hh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/03/GHSA-gc85-62pw-52fp/GHSA-gc85-62pw-52fp.json b/advisories/unreviewed/2024/03/GHSA-gc85-62pw-52fp/GHSA-gc85-62pw-52fp.json index 8b07626e130..ce3a41c63d9 100644 --- a/advisories/unreviewed/2024/03/GHSA-gc85-62pw-52fp/GHSA-gc85-62pw-52fp.json +++ b/advisories/unreviewed/2024/03/GHSA-gc85-62pw-52fp/GHSA-gc85-62pw-52fp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-c72m-9prf-jfxf/GHSA-c72m-9prf-jfxf.json b/advisories/unreviewed/2024/04/GHSA-c72m-9prf-jfxf/GHSA-c72m-9prf-jfxf.json index 233ef07c914..155d88732ab 100644 --- a/advisories/unreviewed/2024/04/GHSA-c72m-9prf-jfxf/GHSA-c72m-9prf-jfxf.json +++ b/advisories/unreviewed/2024/04/GHSA-c72m-9prf-jfxf/GHSA-c72m-9prf-jfxf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-v8qp-w9p6-9xvp/GHSA-v8qp-w9p6-9xvp.json b/advisories/unreviewed/2024/04/GHSA-v8qp-w9p6-9xvp/GHSA-v8qp-w9p6-9xvp.json index 7659c38983d..e5cd9ddebf5 100644 --- a/advisories/unreviewed/2024/04/GHSA-v8qp-w9p6-9xvp/GHSA-v8qp-w9p6-9xvp.json +++ b/advisories/unreviewed/2024/04/GHSA-v8qp-w9p6-9xvp/GHSA-v8qp-w9p6-9xvp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/04/GHSA-xww2-7grc-g9mp/GHSA-xww2-7grc-g9mp.json b/advisories/unreviewed/2024/04/GHSA-xww2-7grc-g9mp/GHSA-xww2-7grc-g9mp.json index f16f5b7c137..fedd32e5794 100644 --- a/advisories/unreviewed/2024/04/GHSA-xww2-7grc-g9mp/GHSA-xww2-7grc-g9mp.json +++ b/advisories/unreviewed/2024/04/GHSA-xww2-7grc-g9mp/GHSA-xww2-7grc-g9mp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-29xq-869p-3chq/GHSA-29xq-869p-3chq.json b/advisories/unreviewed/2024/05/GHSA-29xq-869p-3chq/GHSA-29xq-869p-3chq.json index 177b92890f7..d46022d2009 100644 --- a/advisories/unreviewed/2024/05/GHSA-29xq-869p-3chq/GHSA-29xq-869p-3chq.json +++ b/advisories/unreviewed/2024/05/GHSA-29xq-869p-3chq/GHSA-29xq-869p-3chq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-2qm3-mmvr-v7mm/GHSA-2qm3-mmvr-v7mm.json b/advisories/unreviewed/2024/05/GHSA-2qm3-mmvr-v7mm/GHSA-2qm3-mmvr-v7mm.json index df151783169..ed1bd8cd234 100644 --- a/advisories/unreviewed/2024/05/GHSA-2qm3-mmvr-v7mm/GHSA-2qm3-mmvr-v7mm.json +++ b/advisories/unreviewed/2024/05/GHSA-2qm3-mmvr-v7mm/GHSA-2qm3-mmvr-v7mm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-2w3m-74v7-48pp/GHSA-2w3m-74v7-48pp.json b/advisories/unreviewed/2024/05/GHSA-2w3m-74v7-48pp/GHSA-2w3m-74v7-48pp.json index ebd203a1d5f..bf80debd7dd 100644 --- a/advisories/unreviewed/2024/05/GHSA-2w3m-74v7-48pp/GHSA-2w3m-74v7-48pp.json +++ b/advisories/unreviewed/2024/05/GHSA-2w3m-74v7-48pp/GHSA-2w3m-74v7-48pp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-32qx-x64f-2vp2/GHSA-32qx-x64f-2vp2.json b/advisories/unreviewed/2024/05/GHSA-32qx-x64f-2vp2/GHSA-32qx-x64f-2vp2.json index e0b71949508..717c9b2b8e3 100644 --- a/advisories/unreviewed/2024/05/GHSA-32qx-x64f-2vp2/GHSA-32qx-x64f-2vp2.json +++ b/advisories/unreviewed/2024/05/GHSA-32qx-x64f-2vp2/GHSA-32qx-x64f-2vp2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-37c3-qm4g-jf9g/GHSA-37c3-qm4g-jf9g.json b/advisories/unreviewed/2024/05/GHSA-37c3-qm4g-jf9g/GHSA-37c3-qm4g-jf9g.json index 6c13d73aed5..35abb3143bb 100644 --- a/advisories/unreviewed/2024/05/GHSA-37c3-qm4g-jf9g/GHSA-37c3-qm4g-jf9g.json +++ b/advisories/unreviewed/2024/05/GHSA-37c3-qm4g-jf9g/GHSA-37c3-qm4g-jf9g.json @@ -7,12 +7,8 @@ "CVE-2024-35895" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf, sockmap: Prevent lock inversion deadlock in map delete elem\n\nsyzkaller started using corpuses where a BPF tracing program deletes\nelements from a sockmap/sockhash map. Because BPF tracing programs can be\ninvoked from any interrupt context, locks taken during a map_delete_elem\noperation must be hardirq-safe. Otherwise a deadlock due to lock inversion\nis possible, as reported by lockdep:\n\n CPU0 CPU1\n ---- ----\n lock(&htab->buckets[i].lock);\n local_irq_disable();\n lock(&host->lock);\n lock(&htab->buckets[i].lock);\n \n lock(&host->lock);\n\nLocks in sockmap are hardirq-unsafe by design. We expects elements to be\ndeleted from sockmap/sockhash only in task (normal) context with interrupts\nenabled, or in softirq context.\n\nDetect when map_delete_elem operation is invoked from a context which is\n_not_ hardirq-unsafe, that is interrupts are disabled, and bail out with an\nerror.\n\nNote that map updates are not affected by this issue. BPF verifier does not\nallow updating sockmap/sockhash from a BPF tracing program today.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-37m7-xg97-7h4c/GHSA-37m7-xg97-7h4c.json b/advisories/unreviewed/2024/05/GHSA-37m7-xg97-7h4c/GHSA-37m7-xg97-7h4c.json index 4b52749445f..2a866347a40 100644 --- a/advisories/unreviewed/2024/05/GHSA-37m7-xg97-7h4c/GHSA-37m7-xg97-7h4c.json +++ b/advisories/unreviewed/2024/05/GHSA-37m7-xg97-7h4c/GHSA-37m7-xg97-7h4c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-3832-cq7m-8xc3/GHSA-3832-cq7m-8xc3.json b/advisories/unreviewed/2024/05/GHSA-3832-cq7m-8xc3/GHSA-3832-cq7m-8xc3.json index c6d3f0707a4..8af0821ae0b 100644 --- a/advisories/unreviewed/2024/05/GHSA-3832-cq7m-8xc3/GHSA-3832-cq7m-8xc3.json +++ b/advisories/unreviewed/2024/05/GHSA-3832-cq7m-8xc3/GHSA-3832-cq7m-8xc3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-3qv8-vwg9-439r/GHSA-3qv8-vwg9-439r.json b/advisories/unreviewed/2024/05/GHSA-3qv8-vwg9-439r/GHSA-3qv8-vwg9-439r.json index d985b9f2fc3..5cc1dced711 100644 --- a/advisories/unreviewed/2024/05/GHSA-3qv8-vwg9-439r/GHSA-3qv8-vwg9-439r.json +++ b/advisories/unreviewed/2024/05/GHSA-3qv8-vwg9-439r/GHSA-3qv8-vwg9-439r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-3wmf-459p-g5g2/GHSA-3wmf-459p-g5g2.json b/advisories/unreviewed/2024/05/GHSA-3wmf-459p-g5g2/GHSA-3wmf-459p-g5g2.json index a170e522d79..9dc27b966a8 100644 --- a/advisories/unreviewed/2024/05/GHSA-3wmf-459p-g5g2/GHSA-3wmf-459p-g5g2.json +++ b/advisories/unreviewed/2024/05/GHSA-3wmf-459p-g5g2/GHSA-3wmf-459p-g5g2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-45rj-9f26-3gf5/GHSA-45rj-9f26-3gf5.json b/advisories/unreviewed/2024/05/GHSA-45rj-9f26-3gf5/GHSA-45rj-9f26-3gf5.json index b9dae8c566d..d4e624a717d 100644 --- a/advisories/unreviewed/2024/05/GHSA-45rj-9f26-3gf5/GHSA-45rj-9f26-3gf5.json +++ b/advisories/unreviewed/2024/05/GHSA-45rj-9f26-3gf5/GHSA-45rj-9f26-3gf5.json @@ -7,12 +7,8 @@ "CVE-2024-35937" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nwifi: cfg80211: check A-MSDU format more carefully\n\nIf it looks like there's another subframe in the A-MSDU\nbut the header isn't fully there, we can end up reading\ndata out of bounds, only to discard later. Make this a\nbit more careful and check if the subframe header can\neven be present.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-4h9h-gmj5-8w43/GHSA-4h9h-gmj5-8w43.json b/advisories/unreviewed/2024/05/GHSA-4h9h-gmj5-8w43/GHSA-4h9h-gmj5-8w43.json index 618070d1197..3c9dd2da982 100644 --- a/advisories/unreviewed/2024/05/GHSA-4h9h-gmj5-8w43/GHSA-4h9h-gmj5-8w43.json +++ b/advisories/unreviewed/2024/05/GHSA-4h9h-gmj5-8w43/GHSA-4h9h-gmj5-8w43.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-4prh-h48w-ph58/GHSA-4prh-h48w-ph58.json b/advisories/unreviewed/2024/05/GHSA-4prh-h48w-ph58/GHSA-4prh-h48w-ph58.json index e7450ec091f..7e5da65d171 100644 --- a/advisories/unreviewed/2024/05/GHSA-4prh-h48w-ph58/GHSA-4prh-h48w-ph58.json +++ b/advisories/unreviewed/2024/05/GHSA-4prh-h48w-ph58/GHSA-4prh-h48w-ph58.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-4v3w-hvq5-qxpw/GHSA-4v3w-hvq5-qxpw.json b/advisories/unreviewed/2024/05/GHSA-4v3w-hvq5-qxpw/GHSA-4v3w-hvq5-qxpw.json index 3ac87235c2b..ae515d425f5 100644 --- a/advisories/unreviewed/2024/05/GHSA-4v3w-hvq5-qxpw/GHSA-4v3w-hvq5-qxpw.json +++ b/advisories/unreviewed/2024/05/GHSA-4v3w-hvq5-qxpw/GHSA-4v3w-hvq5-qxpw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-59xg-j66j-wgvc/GHSA-59xg-j66j-wgvc.json b/advisories/unreviewed/2024/05/GHSA-59xg-j66j-wgvc/GHSA-59xg-j66j-wgvc.json index 164cda7918d..3ecb268f268 100644 --- a/advisories/unreviewed/2024/05/GHSA-59xg-j66j-wgvc/GHSA-59xg-j66j-wgvc.json +++ b/advisories/unreviewed/2024/05/GHSA-59xg-j66j-wgvc/GHSA-59xg-j66j-wgvc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-5r9v-8qv6-pf8f/GHSA-5r9v-8qv6-pf8f.json b/advisories/unreviewed/2024/05/GHSA-5r9v-8qv6-pf8f/GHSA-5r9v-8qv6-pf8f.json index 70567edf3b3..51e5bf6cfe8 100644 --- a/advisories/unreviewed/2024/05/GHSA-5r9v-8qv6-pf8f/GHSA-5r9v-8qv6-pf8f.json +++ b/advisories/unreviewed/2024/05/GHSA-5r9v-8qv6-pf8f/GHSA-5r9v-8qv6-pf8f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-5vv5-c3pg-26m2/GHSA-5vv5-c3pg-26m2.json b/advisories/unreviewed/2024/05/GHSA-5vv5-c3pg-26m2/GHSA-5vv5-c3pg-26m2.json index 1d79b9db888..d9bcb0912c3 100644 --- a/advisories/unreviewed/2024/05/GHSA-5vv5-c3pg-26m2/GHSA-5vv5-c3pg-26m2.json +++ b/advisories/unreviewed/2024/05/GHSA-5vv5-c3pg-26m2/GHSA-5vv5-c3pg-26m2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-657j-69g5-mr77/GHSA-657j-69g5-mr77.json b/advisories/unreviewed/2024/05/GHSA-657j-69g5-mr77/GHSA-657j-69g5-mr77.json index c681c2b6016..a319d59fdf3 100644 --- a/advisories/unreviewed/2024/05/GHSA-657j-69g5-mr77/GHSA-657j-69g5-mr77.json +++ b/advisories/unreviewed/2024/05/GHSA-657j-69g5-mr77/GHSA-657j-69g5-mr77.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-6hhx-576r-4c86/GHSA-6hhx-576r-4c86.json b/advisories/unreviewed/2024/05/GHSA-6hhx-576r-4c86/GHSA-6hhx-576r-4c86.json index dd51a9df024..d69806519c7 100644 --- a/advisories/unreviewed/2024/05/GHSA-6hhx-576r-4c86/GHSA-6hhx-576r-4c86.json +++ b/advisories/unreviewed/2024/05/GHSA-6hhx-576r-4c86/GHSA-6hhx-576r-4c86.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-6m2g-9wxv-m6w5/GHSA-6m2g-9wxv-m6w5.json b/advisories/unreviewed/2024/05/GHSA-6m2g-9wxv-m6w5/GHSA-6m2g-9wxv-m6w5.json index b676c1f2433..38cc183d7e2 100644 --- a/advisories/unreviewed/2024/05/GHSA-6m2g-9wxv-m6w5/GHSA-6m2g-9wxv-m6w5.json +++ b/advisories/unreviewed/2024/05/GHSA-6m2g-9wxv-m6w5/GHSA-6m2g-9wxv-m6w5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-6qgg-8c65-w4qp/GHSA-6qgg-8c65-w4qp.json b/advisories/unreviewed/2024/05/GHSA-6qgg-8c65-w4qp/GHSA-6qgg-8c65-w4qp.json index 26c56ea2475..ecbf771d427 100644 --- a/advisories/unreviewed/2024/05/GHSA-6qgg-8c65-w4qp/GHSA-6qgg-8c65-w4qp.json +++ b/advisories/unreviewed/2024/05/GHSA-6qgg-8c65-w4qp/GHSA-6qgg-8c65-w4qp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-6qjg-69hr-2899/GHSA-6qjg-69hr-2899.json b/advisories/unreviewed/2024/05/GHSA-6qjg-69hr-2899/GHSA-6qjg-69hr-2899.json index 5b666759b05..24c5859fe5a 100644 --- a/advisories/unreviewed/2024/05/GHSA-6qjg-69hr-2899/GHSA-6qjg-69hr-2899.json +++ b/advisories/unreviewed/2024/05/GHSA-6qjg-69hr-2899/GHSA-6qjg-69hr-2899.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-6w7h-3cwx-m3mp/GHSA-6w7h-3cwx-m3mp.json b/advisories/unreviewed/2024/05/GHSA-6w7h-3cwx-m3mp/GHSA-6w7h-3cwx-m3mp.json index 1d92bdcd889..f3f1f5a660a 100644 --- a/advisories/unreviewed/2024/05/GHSA-6w7h-3cwx-m3mp/GHSA-6w7h-3cwx-m3mp.json +++ b/advisories/unreviewed/2024/05/GHSA-6w7h-3cwx-m3mp/GHSA-6w7h-3cwx-m3mp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-72pg-72hh-vvpx/GHSA-72pg-72hh-vvpx.json b/advisories/unreviewed/2024/05/GHSA-72pg-72hh-vvpx/GHSA-72pg-72hh-vvpx.json index 86bade6937e..c82466e7c93 100644 --- a/advisories/unreviewed/2024/05/GHSA-72pg-72hh-vvpx/GHSA-72pg-72hh-vvpx.json +++ b/advisories/unreviewed/2024/05/GHSA-72pg-72hh-vvpx/GHSA-72pg-72hh-vvpx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-7ccp-f4gp-c4vq/GHSA-7ccp-f4gp-c4vq.json b/advisories/unreviewed/2024/05/GHSA-7ccp-f4gp-c4vq/GHSA-7ccp-f4gp-c4vq.json index 3014eb0bb62..5a445aed905 100644 --- a/advisories/unreviewed/2024/05/GHSA-7ccp-f4gp-c4vq/GHSA-7ccp-f4gp-c4vq.json +++ b/advisories/unreviewed/2024/05/GHSA-7ccp-f4gp-c4vq/GHSA-7ccp-f4gp-c4vq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-7x4w-fjp3-6fmr/GHSA-7x4w-fjp3-6fmr.json b/advisories/unreviewed/2024/05/GHSA-7x4w-fjp3-6fmr/GHSA-7x4w-fjp3-6fmr.json index 071eae1fa61..f3e00a49311 100644 --- a/advisories/unreviewed/2024/05/GHSA-7x4w-fjp3-6fmr/GHSA-7x4w-fjp3-6fmr.json +++ b/advisories/unreviewed/2024/05/GHSA-7x4w-fjp3-6fmr/GHSA-7x4w-fjp3-6fmr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-7xxh-v6v3-qwgx/GHSA-7xxh-v6v3-qwgx.json b/advisories/unreviewed/2024/05/GHSA-7xxh-v6v3-qwgx/GHSA-7xxh-v6v3-qwgx.json index 8efd0b02d6b..d36c0dbdd43 100644 --- a/advisories/unreviewed/2024/05/GHSA-7xxh-v6v3-qwgx/GHSA-7xxh-v6v3-qwgx.json +++ b/advisories/unreviewed/2024/05/GHSA-7xxh-v6v3-qwgx/GHSA-7xxh-v6v3-qwgx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-897p-94fw-f6m3/GHSA-897p-94fw-f6m3.json b/advisories/unreviewed/2024/05/GHSA-897p-94fw-f6m3/GHSA-897p-94fw-f6m3.json index 0ad3ead45e2..50f3d679442 100644 --- a/advisories/unreviewed/2024/05/GHSA-897p-94fw-f6m3/GHSA-897p-94fw-f6m3.json +++ b/advisories/unreviewed/2024/05/GHSA-897p-94fw-f6m3/GHSA-897p-94fw-f6m3.json @@ -7,12 +7,8 @@ "CVE-2024-36011" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: HCI: Fix potential null-ptr-deref\n\nFix potential null-ptr-deref in hci_le_big_sync_established_evt().", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-8r4g-xwxx-qhqq/GHSA-8r4g-xwxx-qhqq.json b/advisories/unreviewed/2024/05/GHSA-8r4g-xwxx-qhqq/GHSA-8r4g-xwxx-qhqq.json index e9a83ab21da..e75d668332e 100644 --- a/advisories/unreviewed/2024/05/GHSA-8r4g-xwxx-qhqq/GHSA-8r4g-xwxx-qhqq.json +++ b/advisories/unreviewed/2024/05/GHSA-8r4g-xwxx-qhqq/GHSA-8r4g-xwxx-qhqq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-92vx-8h67-43cg/GHSA-92vx-8h67-43cg.json b/advisories/unreviewed/2024/05/GHSA-92vx-8h67-43cg/GHSA-92vx-8h67-43cg.json index 5c4673b6b49..91b5caa6ffe 100644 --- a/advisories/unreviewed/2024/05/GHSA-92vx-8h67-43cg/GHSA-92vx-8h67-43cg.json +++ b/advisories/unreviewed/2024/05/GHSA-92vx-8h67-43cg/GHSA-92vx-8h67-43cg.json @@ -7,12 +7,8 @@ "CVE-2024-34931" ], "details": "A SQL injection vulnerability in /model/update_subject.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-9g56-qqc5-7rw9/GHSA-9g56-qqc5-7rw9.json b/advisories/unreviewed/2024/05/GHSA-9g56-qqc5-7rw9/GHSA-9g56-qqc5-7rw9.json index 9290f364d6b..1565a0999ca 100644 --- a/advisories/unreviewed/2024/05/GHSA-9g56-qqc5-7rw9/GHSA-9g56-qqc5-7rw9.json +++ b/advisories/unreviewed/2024/05/GHSA-9g56-qqc5-7rw9/GHSA-9g56-qqc5-7rw9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-9mc9-j9j6-fvmm/GHSA-9mc9-j9j6-fvmm.json b/advisories/unreviewed/2024/05/GHSA-9mc9-j9j6-fvmm/GHSA-9mc9-j9j6-fvmm.json index 25e80d67b98..69ba5c83b21 100644 --- a/advisories/unreviewed/2024/05/GHSA-9mc9-j9j6-fvmm/GHSA-9mc9-j9j6-fvmm.json +++ b/advisories/unreviewed/2024/05/GHSA-9mc9-j9j6-fvmm/GHSA-9mc9-j9j6-fvmm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-9r4p-g7c7-2c4r/GHSA-9r4p-g7c7-2c4r.json b/advisories/unreviewed/2024/05/GHSA-9r4p-g7c7-2c4r/GHSA-9r4p-g7c7-2c4r.json index e1555f0227a..510e31b35a6 100644 --- a/advisories/unreviewed/2024/05/GHSA-9r4p-g7c7-2c4r/GHSA-9r4p-g7c7-2c4r.json +++ b/advisories/unreviewed/2024/05/GHSA-9r4p-g7c7-2c4r/GHSA-9r4p-g7c7-2c4r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-c9g8-m5fm-mgqm/GHSA-c9g8-m5fm-mgqm.json b/advisories/unreviewed/2024/05/GHSA-c9g8-m5fm-mgqm/GHSA-c9g8-m5fm-mgqm.json index ec737dce796..d5c70f8f675 100644 --- a/advisories/unreviewed/2024/05/GHSA-c9g8-m5fm-mgqm/GHSA-c9g8-m5fm-mgqm.json +++ b/advisories/unreviewed/2024/05/GHSA-c9g8-m5fm-mgqm/GHSA-c9g8-m5fm-mgqm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-cmj5-7h2c-856r/GHSA-cmj5-7h2c-856r.json b/advisories/unreviewed/2024/05/GHSA-cmj5-7h2c-856r/GHSA-cmj5-7h2c-856r.json index f386b850bff..f29ae33d752 100644 --- a/advisories/unreviewed/2024/05/GHSA-cmj5-7h2c-856r/GHSA-cmj5-7h2c-856r.json +++ b/advisories/unreviewed/2024/05/GHSA-cmj5-7h2c-856r/GHSA-cmj5-7h2c-856r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -63,9 +61,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-f767-54f7-4qgq/GHSA-f767-54f7-4qgq.json b/advisories/unreviewed/2024/05/GHSA-f767-54f7-4qgq/GHSA-f767-54f7-4qgq.json index 232e70a6c2f..470d237e99f 100644 --- a/advisories/unreviewed/2024/05/GHSA-f767-54f7-4qgq/GHSA-f767-54f7-4qgq.json +++ b/advisories/unreviewed/2024/05/GHSA-f767-54f7-4qgq/GHSA-f767-54f7-4qgq.json @@ -7,12 +7,8 @@ "CVE-2023-52824" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nkernel: watch_queue: copy user-array safely\n\nCurrently, there is no overflow-check with memdup_user().\n\nUse the new function memdup_array_user() instead of memdup_user() for\nduplicating the user-space array safely.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-fhrg-g7p2-r2f3/GHSA-fhrg-g7p2-r2f3.json b/advisories/unreviewed/2024/05/GHSA-fhrg-g7p2-r2f3/GHSA-fhrg-g7p2-r2f3.json index 8115534ee80..625f70fc07b 100644 --- a/advisories/unreviewed/2024/05/GHSA-fhrg-g7p2-r2f3/GHSA-fhrg-g7p2-r2f3.json +++ b/advisories/unreviewed/2024/05/GHSA-fhrg-g7p2-r2f3/GHSA-fhrg-g7p2-r2f3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-g37v-c843-6cw3/GHSA-g37v-c843-6cw3.json b/advisories/unreviewed/2024/05/GHSA-g37v-c843-6cw3/GHSA-g37v-c843-6cw3.json index 1b22f4f6ae2..5548f66c99d 100644 --- a/advisories/unreviewed/2024/05/GHSA-g37v-c843-6cw3/GHSA-g37v-c843-6cw3.json +++ b/advisories/unreviewed/2024/05/GHSA-g37v-c843-6cw3/GHSA-g37v-c843-6cw3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-g6hx-qvw2-39jx/GHSA-g6hx-qvw2-39jx.json b/advisories/unreviewed/2024/05/GHSA-g6hx-qvw2-39jx/GHSA-g6hx-qvw2-39jx.json index 65036d02c4a..66bb7073e04 100644 --- a/advisories/unreviewed/2024/05/GHSA-g6hx-qvw2-39jx/GHSA-g6hx-qvw2-39jx.json +++ b/advisories/unreviewed/2024/05/GHSA-g6hx-qvw2-39jx/GHSA-g6hx-qvw2-39jx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-gj8m-4ccw-v82h/GHSA-gj8m-4ccw-v82h.json b/advisories/unreviewed/2024/05/GHSA-gj8m-4ccw-v82h/GHSA-gj8m-4ccw-v82h.json index 030b850ed38..0e42780ac66 100644 --- a/advisories/unreviewed/2024/05/GHSA-gj8m-4ccw-v82h/GHSA-gj8m-4ccw-v82h.json +++ b/advisories/unreviewed/2024/05/GHSA-gj8m-4ccw-v82h/GHSA-gj8m-4ccw-v82h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-h8c6-6ff8-4h69/GHSA-h8c6-6ff8-4h69.json b/advisories/unreviewed/2024/05/GHSA-h8c6-6ff8-4h69/GHSA-h8c6-6ff8-4h69.json index f2d9b309528..238b4163508 100644 --- a/advisories/unreviewed/2024/05/GHSA-h8c6-6ff8-4h69/GHSA-h8c6-6ff8-4h69.json +++ b/advisories/unreviewed/2024/05/GHSA-h8c6-6ff8-4h69/GHSA-h8c6-6ff8-4h69.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-hmvr-jmxq-q9hj/GHSA-hmvr-jmxq-q9hj.json b/advisories/unreviewed/2024/05/GHSA-hmvr-jmxq-q9hj/GHSA-hmvr-jmxq-q9hj.json index 35cb1c26ba9..250439beeda 100644 --- a/advisories/unreviewed/2024/05/GHSA-hmvr-jmxq-q9hj/GHSA-hmvr-jmxq-q9hj.json +++ b/advisories/unreviewed/2024/05/GHSA-hmvr-jmxq-q9hj/GHSA-hmvr-jmxq-q9hj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-hpx2-g322-rrch/GHSA-hpx2-g322-rrch.json b/advisories/unreviewed/2024/05/GHSA-hpx2-g322-rrch/GHSA-hpx2-g322-rrch.json index 8785359f613..ed97b1b227a 100644 --- a/advisories/unreviewed/2024/05/GHSA-hpx2-g322-rrch/GHSA-hpx2-g322-rrch.json +++ b/advisories/unreviewed/2024/05/GHSA-hpx2-g322-rrch/GHSA-hpx2-g322-rrch.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-hv56-x76m-qpj5/GHSA-hv56-x76m-qpj5.json b/advisories/unreviewed/2024/05/GHSA-hv56-x76m-qpj5/GHSA-hv56-x76m-qpj5.json index 98783f4b7db..bc5522a0051 100644 --- a/advisories/unreviewed/2024/05/GHSA-hv56-x76m-qpj5/GHSA-hv56-x76m-qpj5.json +++ b/advisories/unreviewed/2024/05/GHSA-hv56-x76m-qpj5/GHSA-hv56-x76m-qpj5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-jffv-rq54-236f/GHSA-jffv-rq54-236f.json b/advisories/unreviewed/2024/05/GHSA-jffv-rq54-236f/GHSA-jffv-rq54-236f.json index 9255ea91ddd..7a0ea0ed250 100644 --- a/advisories/unreviewed/2024/05/GHSA-jffv-rq54-236f/GHSA-jffv-rq54-236f.json +++ b/advisories/unreviewed/2024/05/GHSA-jffv-rq54-236f/GHSA-jffv-rq54-236f.json @@ -7,12 +7,8 @@ "CVE-2023-52822" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm: vmwgfx_surface.c: copy user-array safely\n\nCurrently, there is no overflow-check with memdup_user().\n\nUse the new function memdup_array_user() instead of memdup_user() for\nduplicating the user-space array safely.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-jhvx-96xq-qggm/GHSA-jhvx-96xq-qggm.json b/advisories/unreviewed/2024/05/GHSA-jhvx-96xq-qggm/GHSA-jhvx-96xq-qggm.json index 01e4f579ce9..c63535f860b 100644 --- a/advisories/unreviewed/2024/05/GHSA-jhvx-96xq-qggm/GHSA-jhvx-96xq-qggm.json +++ b/advisories/unreviewed/2024/05/GHSA-jhvx-96xq-qggm/GHSA-jhvx-96xq-qggm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-jrqv-ghx4-fj7f/GHSA-jrqv-ghx4-fj7f.json b/advisories/unreviewed/2024/05/GHSA-jrqv-ghx4-fj7f/GHSA-jrqv-ghx4-fj7f.json index d308757cc94..8663c04b0c8 100644 --- a/advisories/unreviewed/2024/05/GHSA-jrqv-ghx4-fj7f/GHSA-jrqv-ghx4-fj7f.json +++ b/advisories/unreviewed/2024/05/GHSA-jrqv-ghx4-fj7f/GHSA-jrqv-ghx4-fj7f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-jx6r-5h9q-gg9h/GHSA-jx6r-5h9q-gg9h.json b/advisories/unreviewed/2024/05/GHSA-jx6r-5h9q-gg9h/GHSA-jx6r-5h9q-gg9h.json index 3f8d164a49a..ae480d274c5 100644 --- a/advisories/unreviewed/2024/05/GHSA-jx6r-5h9q-gg9h/GHSA-jx6r-5h9q-gg9h.json +++ b/advisories/unreviewed/2024/05/GHSA-jx6r-5h9q-gg9h/GHSA-jx6r-5h9q-gg9h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-m99q-89rr-5mvx/GHSA-m99q-89rr-5mvx.json b/advisories/unreviewed/2024/05/GHSA-m99q-89rr-5mvx/GHSA-m99q-89rr-5mvx.json index 7ecda553f88..a74420a6474 100644 --- a/advisories/unreviewed/2024/05/GHSA-m99q-89rr-5mvx/GHSA-m99q-89rr-5mvx.json +++ b/advisories/unreviewed/2024/05/GHSA-m99q-89rr-5mvx/GHSA-m99q-89rr-5mvx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-mgrf-rx3w-m492/GHSA-mgrf-rx3w-m492.json b/advisories/unreviewed/2024/05/GHSA-mgrf-rx3w-m492/GHSA-mgrf-rx3w-m492.json index 4e6ee302226..70d8766c2da 100644 --- a/advisories/unreviewed/2024/05/GHSA-mgrf-rx3w-m492/GHSA-mgrf-rx3w-m492.json +++ b/advisories/unreviewed/2024/05/GHSA-mgrf-rx3w-m492/GHSA-mgrf-rx3w-m492.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-mmc8-x8mq-826c/GHSA-mmc8-x8mq-826c.json b/advisories/unreviewed/2024/05/GHSA-mmc8-x8mq-826c/GHSA-mmc8-x8mq-826c.json index cb933ea2aca..6a7fe6b4fdd 100644 --- a/advisories/unreviewed/2024/05/GHSA-mmc8-x8mq-826c/GHSA-mmc8-x8mq-826c.json +++ b/advisories/unreviewed/2024/05/GHSA-mmc8-x8mq-826c/GHSA-mmc8-x8mq-826c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-mww2-g4ww-rm9w/GHSA-mww2-g4ww-rm9w.json b/advisories/unreviewed/2024/05/GHSA-mww2-g4ww-rm9w/GHSA-mww2-g4ww-rm9w.json index ca457cd1b38..b3d2ecfde48 100644 --- a/advisories/unreviewed/2024/05/GHSA-mww2-g4ww-rm9w/GHSA-mww2-g4ww-rm9w.json +++ b/advisories/unreviewed/2024/05/GHSA-mww2-g4ww-rm9w/GHSA-mww2-g4ww-rm9w.json @@ -7,12 +7,8 @@ "CVE-2024-2301" ], "details": "Certain HP LaserJet Pro devices are potentially vulnerable to a Cross-Site Scripting (XSS) attack via the web management interface of the device. ", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-mxpc-px8m-2fqc/GHSA-mxpc-px8m-2fqc.json b/advisories/unreviewed/2024/05/GHSA-mxpc-px8m-2fqc/GHSA-mxpc-px8m-2fqc.json index a39bff78491..154935624ca 100644 --- a/advisories/unreviewed/2024/05/GHSA-mxpc-px8m-2fqc/GHSA-mxpc-px8m-2fqc.json +++ b/advisories/unreviewed/2024/05/GHSA-mxpc-px8m-2fqc/GHSA-mxpc-px8m-2fqc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-p45m-mr9q-rx4p/GHSA-p45m-mr9q-rx4p.json b/advisories/unreviewed/2024/05/GHSA-p45m-mr9q-rx4p/GHSA-p45m-mr9q-rx4p.json index 6cf528d0986..657b953b3c9 100644 --- a/advisories/unreviewed/2024/05/GHSA-p45m-mr9q-rx4p/GHSA-p45m-mr9q-rx4p.json +++ b/advisories/unreviewed/2024/05/GHSA-p45m-mr9q-rx4p/GHSA-p45m-mr9q-rx4p.json @@ -7,12 +7,8 @@ "CVE-2024-3918" ], "details": "The Pet Manager WordPress plugin through 1.4 does not sanitise and escape some of its Pet settings, which could allow high privilege users such as Contributor to perform Stored Cross-Site Scripting attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-pww2-7vc4-85mw/GHSA-pww2-7vc4-85mw.json b/advisories/unreviewed/2024/05/GHSA-pww2-7vc4-85mw/GHSA-pww2-7vc4-85mw.json index f4d6ede1642..22e741318a6 100644 --- a/advisories/unreviewed/2024/05/GHSA-pww2-7vc4-85mw/GHSA-pww2-7vc4-85mw.json +++ b/advisories/unreviewed/2024/05/GHSA-pww2-7vc4-85mw/GHSA-pww2-7vc4-85mw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-q3m3-7f4j-8pp7/GHSA-q3m3-7f4j-8pp7.json b/advisories/unreviewed/2024/05/GHSA-q3m3-7f4j-8pp7/GHSA-q3m3-7f4j-8pp7.json index a181205a3fb..80d1237de26 100644 --- a/advisories/unreviewed/2024/05/GHSA-q3m3-7f4j-8pp7/GHSA-q3m3-7f4j-8pp7.json +++ b/advisories/unreviewed/2024/05/GHSA-q3m3-7f4j-8pp7/GHSA-q3m3-7f4j-8pp7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -55,9 +53,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-qcr5-ffr5-4rgc/GHSA-qcr5-ffr5-4rgc.json b/advisories/unreviewed/2024/05/GHSA-qcr5-ffr5-4rgc/GHSA-qcr5-ffr5-4rgc.json index 1c8fb76964b..bb22b7d71d6 100644 --- a/advisories/unreviewed/2024/05/GHSA-qcr5-ffr5-4rgc/GHSA-qcr5-ffr5-4rgc.json +++ b/advisories/unreviewed/2024/05/GHSA-qcr5-ffr5-4rgc/GHSA-qcr5-ffr5-4rgc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-qm69-cr5h-7x64/GHSA-qm69-cr5h-7x64.json b/advisories/unreviewed/2024/05/GHSA-qm69-cr5h-7x64/GHSA-qm69-cr5h-7x64.json index 6f22a30d8a3..546a45c059f 100644 --- a/advisories/unreviewed/2024/05/GHSA-qm69-cr5h-7x64/GHSA-qm69-cr5h-7x64.json +++ b/advisories/unreviewed/2024/05/GHSA-qm69-cr5h-7x64/GHSA-qm69-cr5h-7x64.json @@ -7,12 +7,8 @@ "CVE-2024-36012" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: msft: fix slab-use-after-free in msft_do_close()\n\nTying the msft->data lifetime to hdev by freeing it in\nhci_release_dev() to fix the following case:\n\n[use]\nmsft_do_close()\n msft = hdev->msft_data;\n if (!msft) ...(1) <- passed.\n return;\n mutex_lock(&msft->filter_lock); ...(4) <- used after freed.\n\n[free]\nmsft_unregister()\n msft = hdev->msft_data;\n hdev->msft_data = NULL; ...(2)\n kfree(msft); ...(3) <- msft is freed.\n\n==================================================================\nBUG: KASAN: slab-use-after-free in __mutex_lock_common\nkernel/locking/mutex.c:587 [inline]\nBUG: KASAN: slab-use-after-free in __mutex_lock+0x8f/0xc30\nkernel/locking/mutex.c:752\nRead of size 8 at addr ffff888106cbbca8 by task kworker/u5:2/309", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-qr93-4cq6-4587/GHSA-qr93-4cq6-4587.json b/advisories/unreviewed/2024/05/GHSA-qr93-4cq6-4587/GHSA-qr93-4cq6-4587.json index 594bc72e31e..d8e4cb94c60 100644 --- a/advisories/unreviewed/2024/05/GHSA-qr93-4cq6-4587/GHSA-qr93-4cq6-4587.json +++ b/advisories/unreviewed/2024/05/GHSA-qr93-4cq6-4587/GHSA-qr93-4cq6-4587.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-qw7q-7pgr-v8ph/GHSA-qw7q-7pgr-v8ph.json b/advisories/unreviewed/2024/05/GHSA-qw7q-7pgr-v8ph/GHSA-qw7q-7pgr-v8ph.json index a93d9b2b942..72d483af465 100644 --- a/advisories/unreviewed/2024/05/GHSA-qw7q-7pgr-v8ph/GHSA-qw7q-7pgr-v8ph.json +++ b/advisories/unreviewed/2024/05/GHSA-qw7q-7pgr-v8ph/GHSA-qw7q-7pgr-v8ph.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-rgr9-6xwp-v98f/GHSA-rgr9-6xwp-v98f.json b/advisories/unreviewed/2024/05/GHSA-rgr9-6xwp-v98f/GHSA-rgr9-6xwp-v98f.json index b20c4497397..39249fafec6 100644 --- a/advisories/unreviewed/2024/05/GHSA-rgr9-6xwp-v98f/GHSA-rgr9-6xwp-v98f.json +++ b/advisories/unreviewed/2024/05/GHSA-rgr9-6xwp-v98f/GHSA-rgr9-6xwp-v98f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-rq46-9225-gj4f/GHSA-rq46-9225-gj4f.json b/advisories/unreviewed/2024/05/GHSA-rq46-9225-gj4f/GHSA-rq46-9225-gj4f.json index c19c2e10390..14187bb58c7 100644 --- a/advisories/unreviewed/2024/05/GHSA-rq46-9225-gj4f/GHSA-rq46-9225-gj4f.json +++ b/advisories/unreviewed/2024/05/GHSA-rq46-9225-gj4f/GHSA-rq46-9225-gj4f.json @@ -7,12 +7,8 @@ "CVE-2024-3594" ], "details": "The IDonate WordPress plugin through 1.9.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-rqhf-rjxm-7vcq/GHSA-rqhf-rjxm-7vcq.json b/advisories/unreviewed/2024/05/GHSA-rqhf-rjxm-7vcq/GHSA-rqhf-rjxm-7vcq.json index db75ac61715..94b247610e0 100644 --- a/advisories/unreviewed/2024/05/GHSA-rqhf-rjxm-7vcq/GHSA-rqhf-rjxm-7vcq.json +++ b/advisories/unreviewed/2024/05/GHSA-rqhf-rjxm-7vcq/GHSA-rqhf-rjxm-7vcq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-vm94-m3xr-gvj8/GHSA-vm94-m3xr-gvj8.json b/advisories/unreviewed/2024/05/GHSA-vm94-m3xr-gvj8/GHSA-vm94-m3xr-gvj8.json index ab1cb95b8b6..d71685b5c16 100644 --- a/advisories/unreviewed/2024/05/GHSA-vm94-m3xr-gvj8/GHSA-vm94-m3xr-gvj8.json +++ b/advisories/unreviewed/2024/05/GHSA-vm94-m3xr-gvj8/GHSA-vm94-m3xr-gvj8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-vw34-wv53-96pw/GHSA-vw34-wv53-96pw.json b/advisories/unreviewed/2024/05/GHSA-vw34-wv53-96pw/GHSA-vw34-wv53-96pw.json index 27d298ea6f7..67ba3d5b1c6 100644 --- a/advisories/unreviewed/2024/05/GHSA-vw34-wv53-96pw/GHSA-vw34-wv53-96pw.json +++ b/advisories/unreviewed/2024/05/GHSA-vw34-wv53-96pw/GHSA-vw34-wv53-96pw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-w2rm-x498-v7f9/GHSA-w2rm-x498-v7f9.json b/advisories/unreviewed/2024/05/GHSA-w2rm-x498-v7f9/GHSA-w2rm-x498-v7f9.json index fe4975c7ac7..6ea9acb8967 100644 --- a/advisories/unreviewed/2024/05/GHSA-w2rm-x498-v7f9/GHSA-w2rm-x498-v7f9.json +++ b/advisories/unreviewed/2024/05/GHSA-w2rm-x498-v7f9/GHSA-w2rm-x498-v7f9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-w7qp-vgwj-6g7r/GHSA-w7qp-vgwj-6g7r.json b/advisories/unreviewed/2024/05/GHSA-w7qp-vgwj-6g7r/GHSA-w7qp-vgwj-6g7r.json index b836161a6e4..ee818a2de92 100644 --- a/advisories/unreviewed/2024/05/GHSA-w7qp-vgwj-6g7r/GHSA-w7qp-vgwj-6g7r.json +++ b/advisories/unreviewed/2024/05/GHSA-w7qp-vgwj-6g7r/GHSA-w7qp-vgwj-6g7r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-w9vc-m3rh-pjp8/GHSA-w9vc-m3rh-pjp8.json b/advisories/unreviewed/2024/05/GHSA-w9vc-m3rh-pjp8/GHSA-w9vc-m3rh-pjp8.json index c7a1160a509..fab15a83f17 100644 --- a/advisories/unreviewed/2024/05/GHSA-w9vc-m3rh-pjp8/GHSA-w9vc-m3rh-pjp8.json +++ b/advisories/unreviewed/2024/05/GHSA-w9vc-m3rh-pjp8/GHSA-w9vc-m3rh-pjp8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-wf54-f8v9-v72v/GHSA-wf54-f8v9-v72v.json b/advisories/unreviewed/2024/05/GHSA-wf54-f8v9-v72v/GHSA-wf54-f8v9-v72v.json index aa16ec7793f..06e414d481a 100644 --- a/advisories/unreviewed/2024/05/GHSA-wf54-f8v9-v72v/GHSA-wf54-f8v9-v72v.json +++ b/advisories/unreviewed/2024/05/GHSA-wf54-f8v9-v72v/GHSA-wf54-f8v9-v72v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-wvm8-xgxq-vvhf/GHSA-wvm8-xgxq-vvhf.json b/advisories/unreviewed/2024/05/GHSA-wvm8-xgxq-vvhf/GHSA-wvm8-xgxq-vvhf.json index 8e19b062c1e..b07f8373db3 100644 --- a/advisories/unreviewed/2024/05/GHSA-wvm8-xgxq-vvhf/GHSA-wvm8-xgxq-vvhf.json +++ b/advisories/unreviewed/2024/05/GHSA-wvm8-xgxq-vvhf/GHSA-wvm8-xgxq-vvhf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-wvq2-rqp6-pwmj/GHSA-wvq2-rqp6-pwmj.json b/advisories/unreviewed/2024/05/GHSA-wvq2-rqp6-pwmj/GHSA-wvq2-rqp6-pwmj.json index da59f18cf87..33b3e63a766 100644 --- a/advisories/unreviewed/2024/05/GHSA-wvq2-rqp6-pwmj/GHSA-wvq2-rqp6-pwmj.json +++ b/advisories/unreviewed/2024/05/GHSA-wvq2-rqp6-pwmj/GHSA-wvq2-rqp6-pwmj.json @@ -7,12 +7,8 @@ "CVE-2024-35966" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nBluetooth: RFCOMM: Fix not validating setsockopt user input\n\nsyzbot reported rfcomm_sock_setsockopt_old() is copying data without\nchecking user input length.\n\nBUG: KASAN: slab-out-of-bounds in copy_from_sockptr_offset\ninclude/linux/sockptr.h:49 [inline]\nBUG: KASAN: slab-out-of-bounds in copy_from_sockptr\ninclude/linux/sockptr.h:55 [inline]\nBUG: KASAN: slab-out-of-bounds in rfcomm_sock_setsockopt_old\nnet/bluetooth/rfcomm/sock.c:632 [inline]\nBUG: KASAN: slab-out-of-bounds in rfcomm_sock_setsockopt+0x893/0xa70\nnet/bluetooth/rfcomm/sock.c:673\nRead of size 4 at addr ffff8880209a8bc3 by task syz-executor632/5064", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/05/GHSA-wx68-6699-cj45/GHSA-wx68-6699-cj45.json b/advisories/unreviewed/2024/05/GHSA-wx68-6699-cj45/GHSA-wx68-6699-cj45.json index 77504e0945c..ca9474dfd2f 100644 --- a/advisories/unreviewed/2024/05/GHSA-wx68-6699-cj45/GHSA-wx68-6699-cj45.json +++ b/advisories/unreviewed/2024/05/GHSA-wx68-6699-cj45/GHSA-wx68-6699-cj45.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-x8x2-935g-9qf2/GHSA-x8x2-935g-9qf2.json b/advisories/unreviewed/2024/05/GHSA-x8x2-935g-9qf2/GHSA-x8x2-935g-9qf2.json index df9d5da2cbe..3105c259956 100644 --- a/advisories/unreviewed/2024/05/GHSA-x8x2-935g-9qf2/GHSA-x8x2-935g-9qf2.json +++ b/advisories/unreviewed/2024/05/GHSA-x8x2-935g-9qf2/GHSA-x8x2-935g-9qf2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/05/GHSA-xc3x-fhc6-j363/GHSA-xc3x-fhc6-j363.json b/advisories/unreviewed/2024/05/GHSA-xc3x-fhc6-j363/GHSA-xc3x-fhc6-j363.json index 7baf7c4c193..f390c7f186c 100644 --- a/advisories/unreviewed/2024/05/GHSA-xc3x-fhc6-j363/GHSA-xc3x-fhc6-j363.json +++ b/advisories/unreviewed/2024/05/GHSA-xc3x-fhc6-j363/GHSA-xc3x-fhc6-j363.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/06/GHSA-2w49-w2vv-p84h/GHSA-2w49-w2vv-p84h.json b/advisories/unreviewed/2024/06/GHSA-2w49-w2vv-p84h/GHSA-2w49-w2vv-p84h.json index edc986350b9..ca336685418 100644 --- a/advisories/unreviewed/2024/06/GHSA-2w49-w2vv-p84h/GHSA-2w49-w2vv-p84h.json +++ b/advisories/unreviewed/2024/06/GHSA-2w49-w2vv-p84h/GHSA-2w49-w2vv-p84h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-3qx2-hpvr-h63q/GHSA-3qx2-hpvr-h63q.json b/advisories/unreviewed/2024/06/GHSA-3qx2-hpvr-h63q/GHSA-3qx2-hpvr-h63q.json index 681d9a3b455..f31762f33d9 100644 --- a/advisories/unreviewed/2024/06/GHSA-3qx2-hpvr-h63q/GHSA-3qx2-hpvr-h63q.json +++ b/advisories/unreviewed/2024/06/GHSA-3qx2-hpvr-h63q/GHSA-3qx2-hpvr-h63q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-4gfv-46xr-qrjq/GHSA-4gfv-46xr-qrjq.json b/advisories/unreviewed/2024/06/GHSA-4gfv-46xr-qrjq/GHSA-4gfv-46xr-qrjq.json index 3d17813684f..b8095cf6f91 100644 --- a/advisories/unreviewed/2024/06/GHSA-4gfv-46xr-qrjq/GHSA-4gfv-46xr-qrjq.json +++ b/advisories/unreviewed/2024/06/GHSA-4gfv-46xr-qrjq/GHSA-4gfv-46xr-qrjq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-575m-4r75-7j7m/GHSA-575m-4r75-7j7m.json b/advisories/unreviewed/2024/06/GHSA-575m-4r75-7j7m/GHSA-575m-4r75-7j7m.json index 9654748d14d..ce4cc336611 100644 --- a/advisories/unreviewed/2024/06/GHSA-575m-4r75-7j7m/GHSA-575m-4r75-7j7m.json +++ b/advisories/unreviewed/2024/06/GHSA-575m-4r75-7j7m/GHSA-575m-4r75-7j7m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-79p9-qpmj-8pjv/GHSA-79p9-qpmj-8pjv.json b/advisories/unreviewed/2024/06/GHSA-79p9-qpmj-8pjv/GHSA-79p9-qpmj-8pjv.json index cb5004692b2..d17585e84d8 100644 --- a/advisories/unreviewed/2024/06/GHSA-79p9-qpmj-8pjv/GHSA-79p9-qpmj-8pjv.json +++ b/advisories/unreviewed/2024/06/GHSA-79p9-qpmj-8pjv/GHSA-79p9-qpmj-8pjv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-99q4-g8rv-92g3/GHSA-99q4-g8rv-92g3.json b/advisories/unreviewed/2024/06/GHSA-99q4-g8rv-92g3/GHSA-99q4-g8rv-92g3.json index 061ea549ca9..e84c3bac741 100644 --- a/advisories/unreviewed/2024/06/GHSA-99q4-g8rv-92g3/GHSA-99q4-g8rv-92g3.json +++ b/advisories/unreviewed/2024/06/GHSA-99q4-g8rv-92g3/GHSA-99q4-g8rv-92g3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-9c67-m3v4-35rv/GHSA-9c67-m3v4-35rv.json b/advisories/unreviewed/2024/06/GHSA-9c67-m3v4-35rv/GHSA-9c67-m3v4-35rv.json index fffd0498672..098f06f90a8 100644 --- a/advisories/unreviewed/2024/06/GHSA-9c67-m3v4-35rv/GHSA-9c67-m3v4-35rv.json +++ b/advisories/unreviewed/2024/06/GHSA-9c67-m3v4-35rv/GHSA-9c67-m3v4-35rv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-c457-r8g5-ghjg/GHSA-c457-r8g5-ghjg.json b/advisories/unreviewed/2024/06/GHSA-c457-r8g5-ghjg/GHSA-c457-r8g5-ghjg.json index ffb6ed107ed..2f69b0140db 100644 --- a/advisories/unreviewed/2024/06/GHSA-c457-r8g5-ghjg/GHSA-c457-r8g5-ghjg.json +++ b/advisories/unreviewed/2024/06/GHSA-c457-r8g5-ghjg/GHSA-c457-r8g5-ghjg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-f985-8pr4-6m53/GHSA-f985-8pr4-6m53.json b/advisories/unreviewed/2024/06/GHSA-f985-8pr4-6m53/GHSA-f985-8pr4-6m53.json index 8bf11c822f6..7f3a1636f08 100644 --- a/advisories/unreviewed/2024/06/GHSA-f985-8pr4-6m53/GHSA-f985-8pr4-6m53.json +++ b/advisories/unreviewed/2024/06/GHSA-f985-8pr4-6m53/GHSA-f985-8pr4-6m53.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-fvjx-jp28-6fj3/GHSA-fvjx-jp28-6fj3.json b/advisories/unreviewed/2024/06/GHSA-fvjx-jp28-6fj3/GHSA-fvjx-jp28-6fj3.json index 4d88aed6bc6..36ccda926e9 100644 --- a/advisories/unreviewed/2024/06/GHSA-fvjx-jp28-6fj3/GHSA-fvjx-jp28-6fj3.json +++ b/advisories/unreviewed/2024/06/GHSA-fvjx-jp28-6fj3/GHSA-fvjx-jp28-6fj3.json @@ -7,12 +7,8 @@ "CVE-2024-5214" ], "details": "Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -20,9 +16,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/06/GHSA-qfwh-jrhv-2rg3/GHSA-qfwh-jrhv-2rg3.json b/advisories/unreviewed/2024/06/GHSA-qfwh-jrhv-2rg3/GHSA-qfwh-jrhv-2rg3.json index e7187f13199..3ef6b49722e 100644 --- a/advisories/unreviewed/2024/06/GHSA-qfwh-jrhv-2rg3/GHSA-qfwh-jrhv-2rg3.json +++ b/advisories/unreviewed/2024/06/GHSA-qfwh-jrhv-2rg3/GHSA-qfwh-jrhv-2rg3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-vxr7-mhw4-9577/GHSA-vxr7-mhw4-9577.json b/advisories/unreviewed/2024/06/GHSA-vxr7-mhw4-9577/GHSA-vxr7-mhw4-9577.json index 76c2df1ea09..56a7252caf9 100644 --- a/advisories/unreviewed/2024/06/GHSA-vxr7-mhw4-9577/GHSA-vxr7-mhw4-9577.json +++ b/advisories/unreviewed/2024/06/GHSA-vxr7-mhw4-9577/GHSA-vxr7-mhw4-9577.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/06/GHSA-w7w6-4q7c-7ccc/GHSA-w7w6-4q7c-7ccc.json b/advisories/unreviewed/2024/06/GHSA-w7w6-4q7c-7ccc/GHSA-w7w6-4q7c-7ccc.json index e2902bfb22a..41c1783a819 100644 --- a/advisories/unreviewed/2024/06/GHSA-w7w6-4q7c-7ccc/GHSA-w7w6-4q7c-7ccc.json +++ b/advisories/unreviewed/2024/06/GHSA-w7w6-4q7c-7ccc/GHSA-w7w6-4q7c-7ccc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-37qc-prgq-xwcm/GHSA-37qc-prgq-xwcm.json b/advisories/unreviewed/2024/07/GHSA-37qc-prgq-xwcm/GHSA-37qc-prgq-xwcm.json index 3f6c375821d..f8ebea142df 100644 --- a/advisories/unreviewed/2024/07/GHSA-37qc-prgq-xwcm/GHSA-37qc-prgq-xwcm.json +++ b/advisories/unreviewed/2024/07/GHSA-37qc-prgq-xwcm/GHSA-37qc-prgq-xwcm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-5r86-7p4c-pw27/GHSA-5r86-7p4c-pw27.json b/advisories/unreviewed/2024/07/GHSA-5r86-7p4c-pw27/GHSA-5r86-7p4c-pw27.json index 7483147daea..c25cbe44ce3 100644 --- a/advisories/unreviewed/2024/07/GHSA-5r86-7p4c-pw27/GHSA-5r86-7p4c-pw27.json +++ b/advisories/unreviewed/2024/07/GHSA-5r86-7p4c-pw27/GHSA-5r86-7p4c-pw27.json @@ -7,12 +7,8 @@ "CVE-2024-41024" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmisc: fastrpc: Restrict untrusted app to attach to privileged PD\n\nUntrusted application with access to only non-secure fastrpc device\nnode can attach to root_pd or static PDs if it can make the respective\ninit request. This can cause problems as the untrusted application\ncan send bad requests to root_pd or static PDs. Add changes to reject\nattach to privileged PDs if the request is being made using non-secure\nfastrpc device node.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-66x4-xvv2-2j4j/GHSA-66x4-xvv2-2j4j.json b/advisories/unreviewed/2024/07/GHSA-66x4-xvv2-2j4j/GHSA-66x4-xvv2-2j4j.json index b26ac060a73..4bdd8a1c1b9 100644 --- a/advisories/unreviewed/2024/07/GHSA-66x4-xvv2-2j4j/GHSA-66x4-xvv2-2j4j.json +++ b/advisories/unreviewed/2024/07/GHSA-66x4-xvv2-2j4j/GHSA-66x4-xvv2-2j4j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-6pc8-wjpf-r5vj/GHSA-6pc8-wjpf-r5vj.json b/advisories/unreviewed/2024/07/GHSA-6pc8-wjpf-r5vj/GHSA-6pc8-wjpf-r5vj.json index 099a376caf1..f959609b916 100644 --- a/advisories/unreviewed/2024/07/GHSA-6pc8-wjpf-r5vj/GHSA-6pc8-wjpf-r5vj.json +++ b/advisories/unreviewed/2024/07/GHSA-6pc8-wjpf-r5vj/GHSA-6pc8-wjpf-r5vj.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-8xrm-p372-wx3c/GHSA-8xrm-p372-wx3c.json b/advisories/unreviewed/2024/07/GHSA-8xrm-p372-wx3c/GHSA-8xrm-p372-wx3c.json index f03f332ead8..0f2010e2461 100644 --- a/advisories/unreviewed/2024/07/GHSA-8xrm-p372-wx3c/GHSA-8xrm-p372-wx3c.json +++ b/advisories/unreviewed/2024/07/GHSA-8xrm-p372-wx3c/GHSA-8xrm-p372-wx3c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-934p-m4fh-22q3/GHSA-934p-m4fh-22q3.json b/advisories/unreviewed/2024/07/GHSA-934p-m4fh-22q3/GHSA-934p-m4fh-22q3.json index 8debfdaae29..d1d26051c36 100644 --- a/advisories/unreviewed/2024/07/GHSA-934p-m4fh-22q3/GHSA-934p-m4fh-22q3.json +++ b/advisories/unreviewed/2024/07/GHSA-934p-m4fh-22q3/GHSA-934p-m4fh-22q3.json @@ -7,12 +7,8 @@ "CVE-2024-40972" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: do not create EA inode under buffer lock\n\next4_xattr_set_entry() creates new EA inodes while holding buffer lock\non the external xattr block. This is problematic as it nests all the\nallocation locking (which acquires locks on other buffers) under the\nbuffer lock. This can even deadlock when the filesystem is corrupted and\ne.g. quota file is setup to contain xattr block as data block. Move the\nallocation of EA inode out of ext4_xattr_set_entry() into the callers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-gjhv-rjxp-wwwg/GHSA-gjhv-rjxp-wwwg.json b/advisories/unreviewed/2024/07/GHSA-gjhv-rjxp-wwwg/GHSA-gjhv-rjxp-wwwg.json index aa82c30b7ee..dbcfc8436ff 100644 --- a/advisories/unreviewed/2024/07/GHSA-gjhv-rjxp-wwwg/GHSA-gjhv-rjxp-wwwg.json +++ b/advisories/unreviewed/2024/07/GHSA-gjhv-rjxp-wwwg/GHSA-gjhv-rjxp-wwwg.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-gv3v-qg2j-v72x/GHSA-gv3v-qg2j-v72x.json b/advisories/unreviewed/2024/07/GHSA-gv3v-qg2j-v72x/GHSA-gv3v-qg2j-v72x.json index 107f39dddbd..65c831e4978 100644 --- a/advisories/unreviewed/2024/07/GHSA-gv3v-qg2j-v72x/GHSA-gv3v-qg2j-v72x.json +++ b/advisories/unreviewed/2024/07/GHSA-gv3v-qg2j-v72x/GHSA-gv3v-qg2j-v72x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-jpp6-vjx7-xmp2/GHSA-jpp6-vjx7-xmp2.json b/advisories/unreviewed/2024/07/GHSA-jpp6-vjx7-xmp2/GHSA-jpp6-vjx7-xmp2.json index 9fa2ff7aa69..d612699253c 100644 --- a/advisories/unreviewed/2024/07/GHSA-jpp6-vjx7-xmp2/GHSA-jpp6-vjx7-xmp2.json +++ b/advisories/unreviewed/2024/07/GHSA-jpp6-vjx7-xmp2/GHSA-jpp6-vjx7-xmp2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-qwcv-c594-jh3g/GHSA-qwcv-c594-jh3g.json b/advisories/unreviewed/2024/07/GHSA-qwcv-c594-jh3g/GHSA-qwcv-c594-jh3g.json index 7970dd7a4a3..dbba86b3152 100644 --- a/advisories/unreviewed/2024/07/GHSA-qwcv-c594-jh3g/GHSA-qwcv-c594-jh3g.json +++ b/advisories/unreviewed/2024/07/GHSA-qwcv-c594-jh3g/GHSA-qwcv-c594-jh3g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-r3jw-6ppm-jp54/GHSA-r3jw-6ppm-jp54.json b/advisories/unreviewed/2024/07/GHSA-r3jw-6ppm-jp54/GHSA-r3jw-6ppm-jp54.json index 32460d05376..d3b1bf3f3ad 100644 --- a/advisories/unreviewed/2024/07/GHSA-r3jw-6ppm-jp54/GHSA-r3jw-6ppm-jp54.json +++ b/advisories/unreviewed/2024/07/GHSA-r3jw-6ppm-jp54/GHSA-r3jw-6ppm-jp54.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-r595-x79c-68p4/GHSA-r595-x79c-68p4.json b/advisories/unreviewed/2024/07/GHSA-r595-x79c-68p4/GHSA-r595-x79c-68p4.json index 16afdeb15a1..b2b4d8fc960 100644 --- a/advisories/unreviewed/2024/07/GHSA-r595-x79c-68p4/GHSA-r595-x79c-68p4.json +++ b/advisories/unreviewed/2024/07/GHSA-r595-x79c-68p4/GHSA-r595-x79c-68p4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-v89r-8c65-6vgh/GHSA-v89r-8c65-6vgh.json b/advisories/unreviewed/2024/07/GHSA-v89r-8c65-6vgh/GHSA-v89r-8c65-6vgh.json index 9d568e54741..04c358428cb 100644 --- a/advisories/unreviewed/2024/07/GHSA-v89r-8c65-6vgh/GHSA-v89r-8c65-6vgh.json +++ b/advisories/unreviewed/2024/07/GHSA-v89r-8c65-6vgh/GHSA-v89r-8c65-6vgh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-wmrf-m77q-pc98/GHSA-wmrf-m77q-pc98.json b/advisories/unreviewed/2024/07/GHSA-wmrf-m77q-pc98/GHSA-wmrf-m77q-pc98.json index a57cc958174..a1611f86ebd 100644 --- a/advisories/unreviewed/2024/07/GHSA-wmrf-m77q-pc98/GHSA-wmrf-m77q-pc98.json +++ b/advisories/unreviewed/2024/07/GHSA-wmrf-m77q-pc98/GHSA-wmrf-m77q-pc98.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-2296-mr6j-mwf8/GHSA-2296-mr6j-mwf8.json b/advisories/unreviewed/2024/08/GHSA-2296-mr6j-mwf8/GHSA-2296-mr6j-mwf8.json index 62265aa1425..e5973663c25 100644 --- a/advisories/unreviewed/2024/08/GHSA-2296-mr6j-mwf8/GHSA-2296-mr6j-mwf8.json +++ b/advisories/unreviewed/2024/08/GHSA-2296-mr6j-mwf8/GHSA-2296-mr6j-mwf8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-28pp-675x-rf35/GHSA-28pp-675x-rf35.json b/advisories/unreviewed/2024/08/GHSA-28pp-675x-rf35/GHSA-28pp-675x-rf35.json index c9548e49445..5e4283bdbb5 100644 --- a/advisories/unreviewed/2024/08/GHSA-28pp-675x-rf35/GHSA-28pp-675x-rf35.json +++ b/advisories/unreviewed/2024/08/GHSA-28pp-675x-rf35/GHSA-28pp-675x-rf35.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-2jwq-w78h-4r89/GHSA-2jwq-w78h-4r89.json b/advisories/unreviewed/2024/08/GHSA-2jwq-w78h-4r89/GHSA-2jwq-w78h-4r89.json index 88345ccad2c..5f898e2e425 100644 --- a/advisories/unreviewed/2024/08/GHSA-2jwq-w78h-4r89/GHSA-2jwq-w78h-4r89.json +++ b/advisories/unreviewed/2024/08/GHSA-2jwq-w78h-4r89/GHSA-2jwq-w78h-4r89.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-3949-74rr-85j5/GHSA-3949-74rr-85j5.json b/advisories/unreviewed/2024/08/GHSA-3949-74rr-85j5/GHSA-3949-74rr-85j5.json index 0a909a4beb9..98619acbb85 100644 --- a/advisories/unreviewed/2024/08/GHSA-3949-74rr-85j5/GHSA-3949-74rr-85j5.json +++ b/advisories/unreviewed/2024/08/GHSA-3949-74rr-85j5/GHSA-3949-74rr-85j5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-3cjp-4q2p-v3mg/GHSA-3cjp-4q2p-v3mg.json b/advisories/unreviewed/2024/08/GHSA-3cjp-4q2p-v3mg/GHSA-3cjp-4q2p-v3mg.json index 4b52833f974..e6b12bada4d 100644 --- a/advisories/unreviewed/2024/08/GHSA-3cjp-4q2p-v3mg/GHSA-3cjp-4q2p-v3mg.json +++ b/advisories/unreviewed/2024/08/GHSA-3cjp-4q2p-v3mg/GHSA-3cjp-4q2p-v3mg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-3gcf-28pg-3vm2/GHSA-3gcf-28pg-3vm2.json b/advisories/unreviewed/2024/08/GHSA-3gcf-28pg-3vm2/GHSA-3gcf-28pg-3vm2.json index 97e3cb425e5..2426f78d24b 100644 --- a/advisories/unreviewed/2024/08/GHSA-3gcf-28pg-3vm2/GHSA-3gcf-28pg-3vm2.json +++ b/advisories/unreviewed/2024/08/GHSA-3gcf-28pg-3vm2/GHSA-3gcf-28pg-3vm2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-4fx5-v359-c5hv/GHSA-4fx5-v359-c5hv.json b/advisories/unreviewed/2024/08/GHSA-4fx5-v359-c5hv/GHSA-4fx5-v359-c5hv.json index 9980c3f60a6..7bac91d6de0 100644 --- a/advisories/unreviewed/2024/08/GHSA-4fx5-v359-c5hv/GHSA-4fx5-v359-c5hv.json +++ b/advisories/unreviewed/2024/08/GHSA-4fx5-v359-c5hv/GHSA-4fx5-v359-c5hv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-4mp9-r2w3-x435/GHSA-4mp9-r2w3-x435.json b/advisories/unreviewed/2024/08/GHSA-4mp9-r2w3-x435/GHSA-4mp9-r2w3-x435.json index bc86b3edb40..646ade87f02 100644 --- a/advisories/unreviewed/2024/08/GHSA-4mp9-r2w3-x435/GHSA-4mp9-r2w3-x435.json +++ b/advisories/unreviewed/2024/08/GHSA-4mp9-r2w3-x435/GHSA-4mp9-r2w3-x435.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-4q56-g7vf-vcvc/GHSA-4q56-g7vf-vcvc.json b/advisories/unreviewed/2024/08/GHSA-4q56-g7vf-vcvc/GHSA-4q56-g7vf-vcvc.json index 49b5675c34c..784e67724db 100644 --- a/advisories/unreviewed/2024/08/GHSA-4q56-g7vf-vcvc/GHSA-4q56-g7vf-vcvc.json +++ b/advisories/unreviewed/2024/08/GHSA-4q56-g7vf-vcvc/GHSA-4q56-g7vf-vcvc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-572h-92hg-4mqm/GHSA-572h-92hg-4mqm.json b/advisories/unreviewed/2024/08/GHSA-572h-92hg-4mqm/GHSA-572h-92hg-4mqm.json index fdb6330a3ab..4c9212d9416 100644 --- a/advisories/unreviewed/2024/08/GHSA-572h-92hg-4mqm/GHSA-572h-92hg-4mqm.json +++ b/advisories/unreviewed/2024/08/GHSA-572h-92hg-4mqm/GHSA-572h-92hg-4mqm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-59j7-j82m-4gmq/GHSA-59j7-j82m-4gmq.json b/advisories/unreviewed/2024/08/GHSA-59j7-j82m-4gmq/GHSA-59j7-j82m-4gmq.json index 24356bddec4..a46fae658fb 100644 --- a/advisories/unreviewed/2024/08/GHSA-59j7-j82m-4gmq/GHSA-59j7-j82m-4gmq.json +++ b/advisories/unreviewed/2024/08/GHSA-59j7-j82m-4gmq/GHSA-59j7-j82m-4gmq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-5hc2-jrv8-rj7h/GHSA-5hc2-jrv8-rj7h.json b/advisories/unreviewed/2024/08/GHSA-5hc2-jrv8-rj7h/GHSA-5hc2-jrv8-rj7h.json index 73daacf1683..4f58e7dd3ff 100644 --- a/advisories/unreviewed/2024/08/GHSA-5hc2-jrv8-rj7h/GHSA-5hc2-jrv8-rj7h.json +++ b/advisories/unreviewed/2024/08/GHSA-5hc2-jrv8-rj7h/GHSA-5hc2-jrv8-rj7h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-5mcq-h782-4vg7/GHSA-5mcq-h782-4vg7.json b/advisories/unreviewed/2024/08/GHSA-5mcq-h782-4vg7/GHSA-5mcq-h782-4vg7.json index 771d59be3b1..7e92c05d596 100644 --- a/advisories/unreviewed/2024/08/GHSA-5mcq-h782-4vg7/GHSA-5mcq-h782-4vg7.json +++ b/advisories/unreviewed/2024/08/GHSA-5mcq-h782-4vg7/GHSA-5mcq-h782-4vg7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-5x3f-3wg2-mc2h/GHSA-5x3f-3wg2-mc2h.json b/advisories/unreviewed/2024/08/GHSA-5x3f-3wg2-mc2h/GHSA-5x3f-3wg2-mc2h.json index ea77f18bd56..16ff09f8a5d 100644 --- a/advisories/unreviewed/2024/08/GHSA-5x3f-3wg2-mc2h/GHSA-5x3f-3wg2-mc2h.json +++ b/advisories/unreviewed/2024/08/GHSA-5x3f-3wg2-mc2h/GHSA-5x3f-3wg2-mc2h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-64r8-pw62-6prc/GHSA-64r8-pw62-6prc.json b/advisories/unreviewed/2024/08/GHSA-64r8-pw62-6prc/GHSA-64r8-pw62-6prc.json index b28cc43ecb7..cb649fcf3fd 100644 --- a/advisories/unreviewed/2024/08/GHSA-64r8-pw62-6prc/GHSA-64r8-pw62-6prc.json +++ b/advisories/unreviewed/2024/08/GHSA-64r8-pw62-6prc/GHSA-64r8-pw62-6prc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-7467-fqhh-vvx5/GHSA-7467-fqhh-vvx5.json b/advisories/unreviewed/2024/08/GHSA-7467-fqhh-vvx5/GHSA-7467-fqhh-vvx5.json index bacf9ab26c1..4f71eb98245 100644 --- a/advisories/unreviewed/2024/08/GHSA-7467-fqhh-vvx5/GHSA-7467-fqhh-vvx5.json +++ b/advisories/unreviewed/2024/08/GHSA-7467-fqhh-vvx5/GHSA-7467-fqhh-vvx5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-7m9h-4qg6-4hmh/GHSA-7m9h-4qg6-4hmh.json b/advisories/unreviewed/2024/08/GHSA-7m9h-4qg6-4hmh/GHSA-7m9h-4qg6-4hmh.json index 555e4a64ee5..c88da567a80 100644 --- a/advisories/unreviewed/2024/08/GHSA-7m9h-4qg6-4hmh/GHSA-7m9h-4qg6-4hmh.json +++ b/advisories/unreviewed/2024/08/GHSA-7m9h-4qg6-4hmh/GHSA-7m9h-4qg6-4hmh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-7xcm-586q-jcgq/GHSA-7xcm-586q-jcgq.json b/advisories/unreviewed/2024/08/GHSA-7xcm-586q-jcgq/GHSA-7xcm-586q-jcgq.json index d1af74737bd..8bd53a8fd94 100644 --- a/advisories/unreviewed/2024/08/GHSA-7xcm-586q-jcgq/GHSA-7xcm-586q-jcgq.json +++ b/advisories/unreviewed/2024/08/GHSA-7xcm-586q-jcgq/GHSA-7xcm-586q-jcgq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-8c7h-4cwj-75cp/GHSA-8c7h-4cwj-75cp.json b/advisories/unreviewed/2024/08/GHSA-8c7h-4cwj-75cp/GHSA-8c7h-4cwj-75cp.json index c17cc509364..110d841abec 100644 --- a/advisories/unreviewed/2024/08/GHSA-8c7h-4cwj-75cp/GHSA-8c7h-4cwj-75cp.json +++ b/advisories/unreviewed/2024/08/GHSA-8c7h-4cwj-75cp/GHSA-8c7h-4cwj-75cp.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-8h3p-v5fg-998p/GHSA-8h3p-v5fg-998p.json b/advisories/unreviewed/2024/08/GHSA-8h3p-v5fg-998p/GHSA-8h3p-v5fg-998p.json index 1788d230546..b4ffe5df00e 100644 --- a/advisories/unreviewed/2024/08/GHSA-8h3p-v5fg-998p/GHSA-8h3p-v5fg-998p.json +++ b/advisories/unreviewed/2024/08/GHSA-8h3p-v5fg-998p/GHSA-8h3p-v5fg-998p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-8h54-xh89-c57v/GHSA-8h54-xh89-c57v.json b/advisories/unreviewed/2024/08/GHSA-8h54-xh89-c57v/GHSA-8h54-xh89-c57v.json index bfcc7c50a2c..d659cf31edb 100644 --- a/advisories/unreviewed/2024/08/GHSA-8h54-xh89-c57v/GHSA-8h54-xh89-c57v.json +++ b/advisories/unreviewed/2024/08/GHSA-8h54-xh89-c57v/GHSA-8h54-xh89-c57v.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-8m69-ggwv-26ff/GHSA-8m69-ggwv-26ff.json b/advisories/unreviewed/2024/08/GHSA-8m69-ggwv-26ff/GHSA-8m69-ggwv-26ff.json index d1690e23165..340eb94fa0a 100644 --- a/advisories/unreviewed/2024/08/GHSA-8m69-ggwv-26ff/GHSA-8m69-ggwv-26ff.json +++ b/advisories/unreviewed/2024/08/GHSA-8m69-ggwv-26ff/GHSA-8m69-ggwv-26ff.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-c6g9-x2pg-x53c/GHSA-c6g9-x2pg-x53c.json b/advisories/unreviewed/2024/08/GHSA-c6g9-x2pg-x53c/GHSA-c6g9-x2pg-x53c.json index a0ebb85bfce..6e0cbeef6bf 100644 --- a/advisories/unreviewed/2024/08/GHSA-c6g9-x2pg-x53c/GHSA-c6g9-x2pg-x53c.json +++ b/advisories/unreviewed/2024/08/GHSA-c6g9-x2pg-x53c/GHSA-c6g9-x2pg-x53c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-cr8r-7g9p-hcx6/GHSA-cr8r-7g9p-hcx6.json b/advisories/unreviewed/2024/08/GHSA-cr8r-7g9p-hcx6/GHSA-cr8r-7g9p-hcx6.json index 6288bcdecec..44146e2ee3d 100644 --- a/advisories/unreviewed/2024/08/GHSA-cr8r-7g9p-hcx6/GHSA-cr8r-7g9p-hcx6.json +++ b/advisories/unreviewed/2024/08/GHSA-cr8r-7g9p-hcx6/GHSA-cr8r-7g9p-hcx6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-f24r-9c3w-mjj9/GHSA-f24r-9c3w-mjj9.json b/advisories/unreviewed/2024/08/GHSA-f24r-9c3w-mjj9/GHSA-f24r-9c3w-mjj9.json index 23c3b32d62f..fe553631931 100644 --- a/advisories/unreviewed/2024/08/GHSA-f24r-9c3w-mjj9/GHSA-f24r-9c3w-mjj9.json +++ b/advisories/unreviewed/2024/08/GHSA-f24r-9c3w-mjj9/GHSA-f24r-9c3w-mjj9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-fvfg-7v3r-g9v3/GHSA-fvfg-7v3r-g9v3.json b/advisories/unreviewed/2024/08/GHSA-fvfg-7v3r-g9v3/GHSA-fvfg-7v3r-g9v3.json index 364e79c4771..88638d0f861 100644 --- a/advisories/unreviewed/2024/08/GHSA-fvfg-7v3r-g9v3/GHSA-fvfg-7v3r-g9v3.json +++ b/advisories/unreviewed/2024/08/GHSA-fvfg-7v3r-g9v3/GHSA-fvfg-7v3r-g9v3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-gmfg-97fg-3325/GHSA-gmfg-97fg-3325.json b/advisories/unreviewed/2024/08/GHSA-gmfg-97fg-3325/GHSA-gmfg-97fg-3325.json index f5b745a921f..de6aac98682 100644 --- a/advisories/unreviewed/2024/08/GHSA-gmfg-97fg-3325/GHSA-gmfg-97fg-3325.json +++ b/advisories/unreviewed/2024/08/GHSA-gmfg-97fg-3325/GHSA-gmfg-97fg-3325.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-h7pm-jwh4-cx4r/GHSA-h7pm-jwh4-cx4r.json b/advisories/unreviewed/2024/08/GHSA-h7pm-jwh4-cx4r/GHSA-h7pm-jwh4-cx4r.json index 11d0629588b..4bcf2e67637 100644 --- a/advisories/unreviewed/2024/08/GHSA-h7pm-jwh4-cx4r/GHSA-h7pm-jwh4-cx4r.json +++ b/advisories/unreviewed/2024/08/GHSA-h7pm-jwh4-cx4r/GHSA-h7pm-jwh4-cx4r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-mgmr-5749-9jg6/GHSA-mgmr-5749-9jg6.json b/advisories/unreviewed/2024/08/GHSA-mgmr-5749-9jg6/GHSA-mgmr-5749-9jg6.json index ffd8404026e..0ab0d1f6633 100644 --- a/advisories/unreviewed/2024/08/GHSA-mgmr-5749-9jg6/GHSA-mgmr-5749-9jg6.json +++ b/advisories/unreviewed/2024/08/GHSA-mgmr-5749-9jg6/GHSA-mgmr-5749-9jg6.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-p4vh-gqfx-2p2p/GHSA-p4vh-gqfx-2p2p.json b/advisories/unreviewed/2024/08/GHSA-p4vh-gqfx-2p2p/GHSA-p4vh-gqfx-2p2p.json index f4766436eb0..67b579d5328 100644 --- a/advisories/unreviewed/2024/08/GHSA-p4vh-gqfx-2p2p/GHSA-p4vh-gqfx-2p2p.json +++ b/advisories/unreviewed/2024/08/GHSA-p4vh-gqfx-2p2p/GHSA-p4vh-gqfx-2p2p.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-p7q6-fc7h-j55q/GHSA-p7q6-fc7h-j55q.json b/advisories/unreviewed/2024/08/GHSA-p7q6-fc7h-j55q/GHSA-p7q6-fc7h-j55q.json index 6b2e451dbd9..9bd6704d23e 100644 --- a/advisories/unreviewed/2024/08/GHSA-p7q6-fc7h-j55q/GHSA-p7q6-fc7h-j55q.json +++ b/advisories/unreviewed/2024/08/GHSA-p7q6-fc7h-j55q/GHSA-p7q6-fc7h-j55q.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-p9q4-cppj-78gq/GHSA-p9q4-cppj-78gq.json b/advisories/unreviewed/2024/08/GHSA-p9q4-cppj-78gq/GHSA-p9q4-cppj-78gq.json index 0e42f043c92..7d046e52e73 100644 --- a/advisories/unreviewed/2024/08/GHSA-p9q4-cppj-78gq/GHSA-p9q4-cppj-78gq.json +++ b/advisories/unreviewed/2024/08/GHSA-p9q4-cppj-78gq/GHSA-p9q4-cppj-78gq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-phj6-qr2m-q4vq/GHSA-phj6-qr2m-q4vq.json b/advisories/unreviewed/2024/08/GHSA-phj6-qr2m-q4vq/GHSA-phj6-qr2m-q4vq.json index a3e6abb7b3f..87d850a1644 100644 --- a/advisories/unreviewed/2024/08/GHSA-phj6-qr2m-q4vq/GHSA-phj6-qr2m-q4vq.json +++ b/advisories/unreviewed/2024/08/GHSA-phj6-qr2m-q4vq/GHSA-phj6-qr2m-q4vq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-q664-v9r4-qmrg/GHSA-q664-v9r4-qmrg.json b/advisories/unreviewed/2024/08/GHSA-q664-v9r4-qmrg/GHSA-q664-v9r4-qmrg.json index ddacc11b565..ca4fe180155 100644 --- a/advisories/unreviewed/2024/08/GHSA-q664-v9r4-qmrg/GHSA-q664-v9r4-qmrg.json +++ b/advisories/unreviewed/2024/08/GHSA-q664-v9r4-qmrg/GHSA-q664-v9r4-qmrg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-qr94-6q3v-pgvj/GHSA-qr94-6q3v-pgvj.json b/advisories/unreviewed/2024/08/GHSA-qr94-6q3v-pgvj/GHSA-qr94-6q3v-pgvj.json index 50375aa26a8..d91e27fc38e 100644 --- a/advisories/unreviewed/2024/08/GHSA-qr94-6q3v-pgvj/GHSA-qr94-6q3v-pgvj.json +++ b/advisories/unreviewed/2024/08/GHSA-qr94-6q3v-pgvj/GHSA-qr94-6q3v-pgvj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-v5h9-4559-8f5h/GHSA-v5h9-4559-8f5h.json b/advisories/unreviewed/2024/08/GHSA-v5h9-4559-8f5h/GHSA-v5h9-4559-8f5h.json index 9eff1635f8a..6eee57fbbee 100644 --- a/advisories/unreviewed/2024/08/GHSA-v5h9-4559-8f5h/GHSA-v5h9-4559-8f5h.json +++ b/advisories/unreviewed/2024/08/GHSA-v5h9-4559-8f5h/GHSA-v5h9-4559-8f5h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-w4mc-h5r4-jp4g/GHSA-w4mc-h5r4-jp4g.json b/advisories/unreviewed/2024/08/GHSA-w4mc-h5r4-jp4g/GHSA-w4mc-h5r4-jp4g.json index 5a9b0726f5b..428a11af7cf 100644 --- a/advisories/unreviewed/2024/08/GHSA-w4mc-h5r4-jp4g/GHSA-w4mc-h5r4-jp4g.json +++ b/advisories/unreviewed/2024/08/GHSA-w4mc-h5r4-jp4g/GHSA-w4mc-h5r4-jp4g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-w95j-wcx9-78cv/GHSA-w95j-wcx9-78cv.json b/advisories/unreviewed/2024/08/GHSA-w95j-wcx9-78cv/GHSA-w95j-wcx9-78cv.json index 5fd9fa934b2..4420e47b0a8 100644 --- a/advisories/unreviewed/2024/08/GHSA-w95j-wcx9-78cv/GHSA-w95j-wcx9-78cv.json +++ b/advisories/unreviewed/2024/08/GHSA-w95j-wcx9-78cv/GHSA-w95j-wcx9-78cv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-wqgx-27v7-cr9h/GHSA-wqgx-27v7-cr9h.json b/advisories/unreviewed/2024/08/GHSA-wqgx-27v7-cr9h/GHSA-wqgx-27v7-cr9h.json index 86a79682a29..841ee2fa4b0 100644 --- a/advisories/unreviewed/2024/08/GHSA-wqgx-27v7-cr9h/GHSA-wqgx-27v7-cr9h.json +++ b/advisories/unreviewed/2024/08/GHSA-wqgx-27v7-cr9h/GHSA-wqgx-27v7-cr9h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/08/GHSA-xmm2-x5jc-rvmh/GHSA-xmm2-x5jc-rvmh.json b/advisories/unreviewed/2024/08/GHSA-xmm2-x5jc-rvmh/GHSA-xmm2-x5jc-rvmh.json index 8e195c1dc7b..b8425953f24 100644 --- a/advisories/unreviewed/2024/08/GHSA-xmm2-x5jc-rvmh/GHSA-xmm2-x5jc-rvmh.json +++ b/advisories/unreviewed/2024/08/GHSA-xmm2-x5jc-rvmh/GHSA-xmm2-x5jc-rvmh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY",