netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-10-30 18:32:24 +00:00
parent ccd4f72129
commit b35bef6eb0
108 changed files with 1039 additions and 252 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/10/GHSA-586p-749j-fhwp/GHSA-586p-749j-fhwp.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-586p-749j-fhwp",
"modified": "2024-10-30T09:30:46Z",
"modified": "2024-10-30T18:30:46Z",
"published": "2024-10-09T15:32:21Z",
"aliases": [
"CVE-2024-9675"
@@ -52,6 +52,10 @@
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:8563"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:8675"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2024-9675"
advisories/unreviewed/2023/07/GHSA-jrp6-94m7-j7gw/GHSA-jrp6-94m7-j7gw.json
+1 -1
View File
@@ -32,7 +32,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-362"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/03/GHSA-34g8-74vq-q8mf/GHSA-34g8-74vq-q8mf.json
+1 -1
View File
@@ -44,7 +44,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
advisories/unreviewed/2024/03/GHSA-mq9m-4hg9-c34x/GHSA-mq9m-4hg9-c34x.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mq9m-4hg9-c34x",
"modified": "2024-03-25T18:30:57Z",
"modified": "2024-10-30T18:30:44Z",
"published": "2024-03-19T12:30:41Z",
"aliases": [
"CVE-2024-2610"
],
"details": "Using a markup injection an attacker could have stolen nonce values. This could have been used to bypass strict content security policies. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -47,7 +50,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-19T12:15:08Z"
advisories/unreviewed/2024/03/GHSA-ww69-c6p5-r54m/GHSA-ww69-c6p5-r54m.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-ww69-c6p5-r54m",
"modified": "2024-03-19T12:30:41Z",
"modified": "2024-10-30T18:30:44Z",
"published": "2024-03-19T12:30:41Z",
"aliases": [
"CVE-2024-2606"
],
"details": "Passing invalid data could have led to invalid wasm values being created, such as arbitrary integers turning into pointer values. This vulnerability affects Firefox < 124.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-19T12:15:08Z"
advisories/unreviewed/2024/03/GHSA-xhcj-9vv5-9686/GHSA-xhcj-9vv5-9686.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-xhcj-9vv5-9686",
"modified": "2024-03-28T21:30:31Z",
"modified": "2024-10-30T18:30:44Z",
"published": "2024-03-28T21:30:31Z",
"aliases": [
"CVE-2024-31064"
],
"details": "Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -37,9 +40,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T19:15:49Z"
advisories/unreviewed/2024/04/GHSA-4jfc-fmx7-w96j/GHSA-4jfc-fmx7-w96j.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4jfc-fmx7-w96j",
"modified": "2024-04-25T18:30:39Z",
"modified": "2024-10-30T18:30:44Z",
"published": "2024-04-25T18:30:39Z",
"aliases": [
"CVE-2024-31574"
],
"details": "Cross Site Scripting vulnerability in TWCMS v.2.6 allows a local attacker to execute arbitrary code via a crafted script",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-25T17:15:49Z"
advisories/unreviewed/2024/04/GHSA-7h53-ghp8-m96v/GHSA-7h53-ghp8-m96v.json
+6 -3
View File
File diff suppressed because one or more lines are too long
advisories/unreviewed/2024/04/GHSA-89x5-5cm6-8f6q/GHSA-89x5-5cm6-8f6q.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-89x5-5cm6-8f6q",
"modified": "2024-04-16T06:30:27Z",
"modified": "2024-10-30T18:30:44Z",
"published": "2024-04-16T06:30:27Z",
"aliases": [
"CVE-2024-31634"
],
"details": "Cross Site Scripting (XSS) vulnerability in Xunruicms versions 4.6.3 and before, allows remote attacker to execute arbitrary code via the Security.php file in the catalog \\XunRuiCMS\\dayrui\\Fcms\\Library.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-16T04:15:08Z"
advisories/unreviewed/2024/04/GHSA-9c8r-v4r8-9v3x/GHSA-9c8r-v4r8-9v3x.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-9c8r-v4r8-9v3x",
"modified": "2024-04-15T21:30:47Z",
"modified": "2024-10-30T18:30:44Z",
"published": "2024-04-15T21:30:47Z",
"aliases": [
"CVE-2024-31652"
],
"details": "A cross-site scripting (XSS) in Cosmetics and Beauty Product Online Store v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-15T21:15:07Z"
advisories/unreviewed/2024/04/GHSA-ggqq-32pw-pm22/GHSA-ggqq-32pw-pm22.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-ggqq-32pw-pm22",
"modified": "2024-04-28T15:30:29Z",
"modified": "2024-10-30T18:30:45Z",
"published": "2024-04-28T15:30:29Z",
"aliases": [
"CVE-2022-48638"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncgroup: cgroup_get_from_id() must check the looked-up kn is a directory\n\ncgroup has to be one kernfs dir, otherwise kernel panic is caused,\nespecially cgroup id is provide from userspace.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -35,7 +38,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-28T13:15:06Z"
advisories/unreviewed/2024/04/GHSA-w584-w92p-hx8h/GHSA-w584-w92p-hx8h.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-w584-w92p-hx8h",
"modified": "2024-04-03T18:30:40Z",
"modified": "2024-10-30T18:30:44Z",
"published": "2024-04-03T18:30:40Z",
"aliases": [
"CVE-2024-31392"
],
"details": "If an insecure element was added to a page after a delay, Firefox would not replace the secure icon with a mixed content security status This vulnerability affects Firefox for iOS < 124.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-03T16:15:07Z"
advisories/unreviewed/2024/05/GHSA-556r-646r-vxjp/GHSA-556r-646r-vxjp.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-556r-646r-vxjp",
"modified": "2024-05-03T18:30:36Z",
"modified": "2024-10-30T18:30:45Z",
"published": "2024-05-03T18:30:36Z",
"aliases": [
"CVE-2022-48697"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnvmet: fix a use-after-free\n\nFix the following use-after-free complaint triggered by blktests nvme/004:\n\nBUG: KASAN: user-memory-access in blk_mq_complete_request_remote+0xac/0x350\nRead of size 4 at addr 0000607bd1835943 by task kworker/13:1/460\nWorkqueue: nvmet-wq nvme_loop_execute_work [nvme_loop]\nCall Trace:\n show_stack+0x52/0x58\n dump_stack_lvl+0x49/0x5e\n print_report.cold+0x36/0x1e2\n kasan_report+0xb9/0xf0\n __asan_load4+0x6b/0x80\n blk_mq_complete_request_remote+0xac/0x350\n nvme_loop_queue_response+0x1df/0x275 [nvme_loop]\n __nvmet_req_complete+0x132/0x4f0 [nvmet]\n nvmet_req_complete+0x15/0x40 [nvmet]\n nvmet_execute_io_connect+0x18a/0x1f0 [nvmet]\n nvme_loop_execute_work+0x20/0x30 [nvme_loop]\n process_one_work+0x56e/0xa70\n worker_thread+0x2d1/0x640\n kthread+0x183/0x1c0\n ret_from_fork+0x1f/0x30",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -47,7 +50,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-03T16:15:08Z"
advisories/unreviewed/2024/05/GHSA-5jv6-7953-598p/GHSA-5jv6-7953-598p.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5jv6-7953-598p",
"modified": "2024-05-03T18:30:36Z",
"modified": "2024-10-30T18:30:45Z",
"published": "2024-05-03T18:30:36Z",
"aliases": [
"CVE-2022-48698"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: fix memory leak when using debugfs_lookup()\n\nWhen calling debugfs_lookup() the result must have dput() called on it,\notherwise the memory will leak over time. Fix this up by properly\ncalling dput().",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -35,7 +38,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-03T16:15:08Z"
advisories/unreviewed/2024/05/GHSA-chc5-gj7v-7hf9/GHSA-chc5-gj7v-7hf9.json
+1 -1
View File
@@ -25,7 +25,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"github_reviewed": false,
advisories/unreviewed/2024/05/GHSA-m2qg-6h4j-p422/GHSA-m2qg-6h4j-p422.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-m2qg-6h4j-p422",
"modified": "2024-05-06T06:30:45Z",
"modified": "2024-10-30T18:30:45Z",
"published": "2024-05-06T06:30:45Z",
"aliases": [
"CVE-2024-3752"
],
"details": "The Crelly Slider WordPress plugin through 1.4.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
@@ -25,9 +28,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-06T06:15:07Z"
advisories/unreviewed/2024/06/GHSA-26jw-cv8r-w4pr/GHSA-26jw-cv8r-w4pr.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-26jw-cv8r-w4pr",
"modified": "2024-06-20T12:31:22Z",
"modified": "2024-10-30T18:30:45Z",
"published": "2024-06-20T12:31:22Z",
"aliases": [
"CVE-2022-48767"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nceph: properly put ceph_string reference after async create attempt\n\nThe reference acquired by try_prep_async_create is currently leaked.\nEnsure we put it.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -39,7 +42,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-20T12:15:14Z"
advisories/unreviewed/2024/06/GHSA-783m-7jjf-pmgr/GHSA-783m-7jjf-pmgr.json
+2 -2
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-783m-7jjf-pmgr",
"modified": "2024-06-25T18:31:22Z",
"modified": "2024-10-30T18:30:45Z",
"published": "2024-06-25T18:31:22Z",
"aliases": [
"CVE-2024-6238"
@@ -28,7 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-276"
],
"severity": "HIGH",
"github_reviewed": false,
advisories/unreviewed/2024/06/GHSA-f975-vjfw-7f99/GHSA-f975-vjfw-7f99.json
+6 -3
View File
File diff suppressed because one or more lines are too long
advisories/unreviewed/2024/06/GHSA-v7qr-4h7w-77cm/GHSA-v7qr-4h7w-77cm.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v7qr-4h7w-77cm",
"modified": "2024-06-20T12:31:22Z",
"modified": "2024-10-30T18:30:45Z",
"published": "2024-06-20T12:31:22Z",
"aliases": [
"CVE-2022-48764"
],
"details": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86: Free kvm_cpuid_entry2 array on post-KVM_RUN KVM_SET_CPUID{,2}\n\nFree the \"struct kvm_cpuid_entry2\" array on successful post-KVM_RUN\nKVM_SET_CPUID{,2} to fix a memory leak, the callers of kvm_set_cpuid()\nfree the array only on failure.\n\n BUG: memory leak\n unreferenced object 0xffff88810963a800 (size 2048):\n comm \"syz-executor025\", pid 3610, jiffies 4294944928 (age 8.080s)\n hex dump (first 32 bytes):\n 00 00 00 00 00 00 00 00 00 00 00 00 0d 00 00 00 ................\n 47 65 6e 75 6e 74 65 6c 69 6e 65 49 00 00 00 00 GenuntelineI....\n backtrace:\n [<ffffffff814948ee>] kmalloc_node include/linux/slab.h:604 [inline]\n [<ffffffff814948ee>] kvmalloc_node+0x3e/0x100 mm/util.c:580\n [<ffffffff814950f2>] kvmalloc include/linux/slab.h:732 [inline]\n [<ffffffff814950f2>] vmemdup_user+0x22/0x100 mm/util.c:199\n [<ffffffff8109f5ff>] kvm_vcpu_ioctl_set_cpuid2+0x8f/0xf0 arch/x86/kvm/cpuid.c:423\n [<ffffffff810711b9>] kvm_arch_vcpu_ioctl+0xb99/0x1e60 arch/x86/kvm/x86.c:5251\n [<ffffffff8103e92d>] kvm_vcpu_ioctl+0x4ad/0x950 arch/x86/kvm/../../../virt/kvm/kvm_main.c:4066\n [<ffffffff815afacc>] vfs_ioctl fs/ioctl.c:51 [inline]\n [<ffffffff815afacc>] __do_sys_ioctl fs/ioctl.c:874 [inline]\n [<ffffffff815afacc>] __se_sys_ioctl fs/ioctl.c:860 [inline]\n [<ffffffff815afacc>] __x64_sys_ioctl+0xfc/0x140 fs/ioctl.c:860\n [<ffffffff844a3335>] do_syscall_x64 arch/x86/entry/common.c:50 [inline]\n [<ffffffff844a3335>] do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80\n [<ffffffff84600068>] entry_SYSCALL_64_after_hwframe+0x44/0xae",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
}
],
"affected": [
@@ -31,7 +34,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-06-20T12:15:14Z"

Some files were not shown because too many files have changed in this diff Show More