netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-08-14 21:34:34 +00:00
parent b1d24de38e
commit b157f9daff
38 changed files with 615 additions and 78 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/02/GHSA-j6mx-66rf-6rxq/GHSA-j6mx-66rf-6rxq.json
+2 -1
View File
@@ -28,7 +28,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-122",
"CWE-787"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2023/10/GHSA-7997-4r78-h34m/GHSA-7997-4r78-h34m.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-918"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2023/10/GHSA-pj5c-qr29-6746/GHSA-pj5c-qr29-6746.json
+2 -1
View File
@@ -32,7 +32,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-502"
"CWE-502",
"CWE-78"
],
"severity": "CRITICAL",
"github_reviewed": false,
advisories/unreviewed/2023/11/GHSA-3xmr-xg4j-24rr/GHSA-3xmr-xg4j-24rr.json
+1
View File
@@ -28,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-20",
"CWE-476"
],
"severity": "CRITICAL",
advisories/unreviewed/2023/11/GHSA-qm6p-w2qq-fv6f/GHSA-qm6p-w2qq-fv6f.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qm6p-w2qq-fv6f",
"modified": "2023-11-21T21:30:23Z",
"modified": "2024-08-14T21:33:10Z",
"published": "2023-11-15T06:30:29Z",
"aliases": [
"CVE-2023-47580"
advisories/unreviewed/2023/11/GHSA-wvwp-cgr6-m5rx/GHSA-wvwp-cgr6-m5rx.json
+1 -1
View File
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-400"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/02/GHSA-82gg-6vvf-fm37/GHSA-82gg-6vvf-fm37.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-82gg-6vvf-fm37",
"modified": "2024-02-22T15:30:39Z",
"modified": "2024-08-14T21:33:11Z",
"published": "2024-02-22T15:30:39Z",
"aliases": [
"CVE-2024-26352"
],
"details": "flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /core/tools/add_places.php",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-352"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-22T14:15:47Z"
advisories/unreviewed/2024/03/GHSA-6j88-4936-7r36/GHSA-6j88-4936-7r36.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6j88-4936-7r36",
"modified": "2024-03-15T00:30:22Z",
"modified": "2024-08-14T21:33:11Z",
"published": "2024-03-15T00:30:22Z",
"aliases": [
"CVE-2023-50677"
],
"details": "An issue in NETGEAR-DGND4000 v.1.1.00.15_1.00.15 allows a remote attacker to escalate privileges via the next_file parameter to the /setup.cgi component.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-269"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-14T22:15:22Z"
advisories/unreviewed/2024/03/GHSA-8c44-wv8g-r976/GHSA-8c44-wv8g-r976.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8c44-wv8g-r976",
"modified": "2024-03-07T09:30:30Z",
"modified": "2024-08-14T21:33:11Z",
"published": "2024-03-07T09:30:30Z",
"aliases": [
"CVE-2022-46499"
],
"details": "Hospital Management System 1.0 was discovered to contain a SQL injection vulnerability via the pat_number parameter at his_admin_view_single_patient.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-07T09:15:38Z"
advisories/unreviewed/2024/03/GHSA-fr95-rvfm-4wwm/GHSA-fr95-rvfm-4wwm.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-fr95-rvfm-4wwm",
"modified": "2024-03-11T18:31:08Z",
"modified": "2024-08-14T21:33:11Z",
"published": "2024-03-11T18:31:08Z",
"aliases": [
"CVE-2024-0050"
],
"details": "In getConfig of SoftVideoDecoderOMXComponent.cpp, there is a possible out of bounds write due to a missing validation check. This could lead to a local non-security issue with no additional execution privileges needed. User interaction is not needed for exploitation.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-11T17:15:45Z"
advisories/unreviewed/2024/03/GHSA-h54h-77gg-v4vm/GHSA-h54h-77gg-v4vm.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h54h-77gg-v4vm",
"modified": "2024-03-15T18:30:38Z",
"modified": "2024-08-14T21:33:11Z",
"published": "2024-03-15T18:30:38Z",
"aliases": [
"CVE-2024-28404"
],
"details": "TOTOLINK X2000R before V1.0.0-B20231213.1013 contains a Stored Cross-site scripting (XSS) vulnerability in MAC Filtering under the Firewall Page.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-15T17:15:08Z"
advisories/unreviewed/2024/03/GHSA-mw76-72hw-4357/GHSA-mw76-72hw-4357.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mw76-72hw-4357",
"modified": "2024-03-05T18:31:14Z",
"modified": "2024-08-14T21:33:11Z",
"published": "2024-03-05T18:31:14Z",
"aliases": [
"CVE-2024-22254"
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/04/GHSA-2qhf-4crg-6c2w/GHSA-2qhf-4crg-6c2w.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2qhf-4crg-6c2w",
"modified": "2024-04-11T03:34:59Z",
"modified": "2024-08-14T21:33:11Z",
"published": "2024-04-11T03:34:59Z",
"aliases": [
"CVE-2024-27683"
],
"details": "D-Link Go-RT-AC750 GORTAC750_A1_FW_v101b03 contains a stack-based buffer overflow via the function hnap_main. An attacker can send a POST request to trigger the vulnerablilify.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -33,9 +36,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-121"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-11T01:25:05Z"
advisories/unreviewed/2024/04/GHSA-9h58-5xgm-2682/GHSA-9h58-5xgm-2682.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9h58-5xgm-2682",
"modified": "2024-04-03T06:30:47Z",
"modified": "2024-08-14T21:33:11Z",
"published": "2024-04-03T06:30:47Z",
"aliases": [
"CVE-2024-31010"
],
"details": "SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-89"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-03T04:15:12Z"
advisories/unreviewed/2024/04/GHSA-p5q9-4vg3-6x89/GHSA-p5q9-4vg3-6x89.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-p5q9-4vg3-6x89",
"modified": "2024-04-11T21:30:52Z",
"modified": "2024-08-14T21:33:11Z",
"published": "2024-04-11T21:30:52Z",
"aliases": [
"CVE-2024-25852"
],
"details": "Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the \"AccessControlList\" parameter of the access control function point. An attacker can use the vulnerability to obtain device administrator rights.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-11T21:15:07Z"
advisories/unreviewed/2024/04/GHSA-qcfv-94fj-42jc/GHSA-qcfv-94fj-42jc.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qcfv-94fj-42jc",
"modified": "2024-04-07T09:30:29Z",
"modified": "2024-08-14T21:33:11Z",
"published": "2024-04-07T09:30:29Z",
"aliases": [
"CVE-2023-52714"
],
"details": "Vulnerability of defects introduced in the design process in the hwnff module.\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-657"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-07T09:15:08Z"
advisories/unreviewed/2024/04/GHSA-qqpr-fvmc-87j3/GHSA-qqpr-fvmc-87j3.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qqpr-fvmc-87j3",
"modified": "2024-04-23T18:30:38Z",
"modified": "2024-08-14T21:33:11Z",
"published": "2024-04-17T09:30:31Z",
"aliases": [
"CVE-2024-3832"
],
"details": "Object corruption in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -43,7 +46,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-17T08:15:10Z"
advisories/unreviewed/2024/05/GHSA-h37q-x6pv-4p48/GHSA-h37q-x6pv-4p48.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-h37q-x6pv-4p48",
"modified": "2024-05-06T15:30:35Z",
"modified": "2024-08-14T21:33:11Z",
"published": "2024-05-06T15:30:35Z",
"aliases": [
"CVE-2024-33749"
],
"details": "DedeCMS V5.7.114 is vulnerable to deletion of any file via mail_file_manage.php.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-285"
],
"severity": null,
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-06T13:15:49Z"
advisories/unreviewed/2024/05/GHSA-hvhc-8w3j-pf54/GHSA-hvhc-8w3j-pf54.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-hvhc-8w3j-pf54",
"modified": "2024-05-14T18:30:45Z",
"modified": "2024-08-14T21:33:11Z",
"published": "2024-05-14T18:30:45Z",
"aliases": [
"CVE-2022-32509"
],
"details": "An issue was discovered on certain Nuki Home Solutions devices. Lack of certificate validation on HTTP communications allows attackers to intercept and tamper data. This affects Nuki Smart Lock 3.0 before 3.3.5, Nuki Bridge v1 before 1.22.0 and Nuki Bridge v2 before 2.13.2.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-295"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-14T10:43:42Z"
advisories/unreviewed/2024/05/GHSA-jrvv-3x7m-vqjc/GHSA-jrvv-3x7m-vqjc.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jrvv-3x7m-vqjc",
"modified": "2024-05-14T18:30:44Z",
"modified": "2024-08-14T21:33:11Z",
"published": "2024-05-14T18:30:44Z",
"aliases": [
"CVE-2022-32507"
],
"details": "An issue was discovered on certain Nuki Home Solutions devices. Some BLE commands, which should have been designed to be only called from privileged accounts, could also be called from unprivileged accounts. This demonstrates that no access controls were implemented for the different BLE commands across the different accounts. This affects Nuki Smart Lock 3.0 before 3.3.5 and Nuki Smart Lock 2.0 before 2.12.4.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-284"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-14T10:43:41Z"

Some files were not shown because too many files have changed in this diff Show More