diff --git a/advisories/github-reviewed/2019/07/GHSA-ffq8-576r-v26g/GHSA-ffq8-576r-v26g.json b/advisories/github-reviewed/2019/07/GHSA-ffq8-576r-v26g/GHSA-ffq8-576r-v26g.json index f9ed222485f..a9d139d5e5f 100644 --- a/advisories/github-reviewed/2019/07/GHSA-ffq8-576r-v26g/GHSA-ffq8-576r-v26g.json +++ b/advisories/github-reviewed/2019/07/GHSA-ffq8-576r-v26g/GHSA-ffq8-576r-v26g.json @@ -70,9 +70,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2020-06-16T21:34:33Z", diff --git a/advisories/github-reviewed/2022/05/GHSA-ch5v-fhg8-7gv9/GHSA-ch5v-fhg8-7gv9.json b/advisories/github-reviewed/2022/05/GHSA-ch5v-fhg8-7gv9/GHSA-ch5v-fhg8-7gv9.json index 90510f90d79..03cfd17e6e4 100644 --- a/advisories/github-reviewed/2022/05/GHSA-ch5v-fhg8-7gv9/GHSA-ch5v-fhg8-7gv9.json +++ b/advisories/github-reviewed/2022/05/GHSA-ch5v-fhg8-7gv9/GHSA-ch5v-fhg8-7gv9.json @@ -58,9 +58,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2023-07-22T00:05:35Z", diff --git a/advisories/github-reviewed/2022/05/GHSA-g5q2-cxgq-h2rw/GHSA-g5q2-cxgq-h2rw.json b/advisories/github-reviewed/2022/05/GHSA-g5q2-cxgq-h2rw/GHSA-g5q2-cxgq-h2rw.json index 076c7899448..a9d74494eaa 100644 --- a/advisories/github-reviewed/2022/05/GHSA-g5q2-cxgq-h2rw/GHSA-g5q2-cxgq-h2rw.json +++ b/advisories/github-reviewed/2022/05/GHSA-g5q2-cxgq-h2rw/GHSA-g5q2-cxgq-h2rw.json @@ -8,9 +8,7 @@ ], "summary": "Information leak in Gerrit", "details": "An information leak vulnerability exists in Gerrit versions prior to 2.14.22, 2.15.21, 2.16.25, 3.0.15, 3.1.10, 3.2.5 where an overoptimization with the FilteredRepository wrapper skips the verification of access on All-Users repositories, allowing an attacker to get read access to all users' personal information associated with their accounts.", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/github-reviewed/2022/10/GHSA-4xqx-pqpj-9fqw/GHSA-4xqx-pqpj-9fqw.json b/advisories/github-reviewed/2022/10/GHSA-4xqx-pqpj-9fqw/GHSA-4xqx-pqpj-9fqw.json index 4a87eaba25d..e1f7037a6d5 100644 --- a/advisories/github-reviewed/2022/10/GHSA-4xqx-pqpj-9fqw/GHSA-4xqx-pqpj-9fqw.json +++ b/advisories/github-reviewed/2022/10/GHSA-4xqx-pqpj-9fqw/GHSA-4xqx-pqpj-9fqw.json @@ -50,9 +50,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2022-10-07T07:20:57Z", diff --git a/advisories/github-reviewed/2022/10/GHSA-8r99-h8j2-rw64/GHSA-8r99-h8j2-rw64.json b/advisories/github-reviewed/2022/10/GHSA-8r99-h8j2-rw64/GHSA-8r99-h8j2-rw64.json index 6c09384a982..31d0a5d2916 100644 --- a/advisories/github-reviewed/2022/10/GHSA-8r99-h8j2-rw64/GHSA-8r99-h8j2-rw64.json +++ b/advisories/github-reviewed/2022/10/GHSA-8r99-h8j2-rw64/GHSA-8r99-h8j2-rw64.json @@ -3,14 +3,10 @@ "id": "GHSA-8r99-h8j2-rw64", "modified": "2022-10-07T07:31:33Z", "published": "2022-10-07T07:31:33Z", - "aliases": [ - - ], + "aliases": [], "summary": "Twisted vulnerable to HTTP Request Smuggling Attacks", "details": "### Impact\nTwisted Web is vulnerable to request smuggling attacks:\n\n1. \"When presented with two content-length headers, Twisted Web ignored the first header. When the second content-length was set to zero this caused Twisted Web to interpret the request body as a pipelined request. According to RFC 7230 Section 3.3.3#4, if a message is received with multiple content-length headers with differing value, then the server must reject the message with a 400 response.\" (Jake Miller of Bishop Fox Security)\n2. \" When presented with a content-length and a chunked encoding header, the content-length took precedence and the remainder of the request body was interpreted by Twisted Web as a pipelined request. According to RFC 7230 Section 3.3.3#3, if a message with both content-length and chunked encoding is accepted, transfer-encoding overrides the content-length.\" (Jake Miller of Bishop Fox Security)\n3. ~\"Twisted should not allow BWS between the filed-name and colon.\" (ZeddYu Lu)~ _closed in 9646_\n4. \"Two CL header with different values is also not allowed.\" (ZeddYu Lu)\n5. \"Only accept identity and chunked Transport-Encoding.\" (ZeddYu Lu)\n\n### Patches\nhttps://github.com/twisted/twisted/commit/20c787a14a09e7cbd5dfd8df08ceff00d1fcc081\nhttps://github.com/twisted/twisted/commit/4a7d22e490bb8ff836892cc99a1f54b85ccb0281\n\n### Workarounds\nN/A\n\n### References\nhttps://portswigger.net/web-security/request-smuggling\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { @@ -51,9 +47,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2022-10-07T07:31:33Z", diff --git a/advisories/github-reviewed/2024/01/GHSA-8f24-6m29-wm2r/GHSA-8f24-6m29-wm2r.json b/advisories/github-reviewed/2024/01/GHSA-8f24-6m29-wm2r/GHSA-8f24-6m29-wm2r.json index 6ef4e416cb0..a4d5b4965c9 100644 --- a/advisories/github-reviewed/2024/01/GHSA-8f24-6m29-wm2r/GHSA-8f24-6m29-wm2r.json +++ b/advisories/github-reviewed/2024/01/GHSA-8f24-6m29-wm2r/GHSA-8f24-6m29-wm2r.json @@ -3,14 +3,10 @@ "id": "GHSA-8f24-6m29-wm2r", "modified": "2024-01-17T20:32:35Z", "published": "2024-01-17T20:32:35Z", - "aliases": [ - - ], + "aliases": [], "summary": "use-after-free in tracing ", "details": "The implementation of the [`Instrumented::into_inner`] method in affected versions of this crate contains undefined behavior due to incorrect use of [`std::mem::forget`] The function creates `*const` pointers to `self`, calls [`mem::forget(self)`][`std::mem::forget`], and then moves values out of those pointers using [`std::ptr::read`].\n\n```rust\n// To manually destructure `Instrumented` without `Drop`, we\n// move it into a ManuallyDrop and use pointers to its fields\nlet span: *const Span = &this.span;\nlet inner: *const ManuallyDrop = &this.inner;\nmem::forget(self);\n// SAFETY: Those pointers are valid for reads, because `Drop` didn't\n// run, and properly aligned, because `Instrumented` isn't\n// `#[repr(packed)]`.\nlet _span = unsafe { span.read() };\nlet inner = unsafe { inner.read() };\n```\n\nHowever, the [`mem::forget` documentation][`std::mem::forget`] states:\n\n> Any resources the value manages, such as heap memory or a file handle, will\n> linger forever in an unreachable state. **However, it does not guarantee that\n> pointers to this memory will remain valid.**\n\nThis means that these pointers are no longer valid. This could result in a stack use-after-free if LLVM chooses to reuse `self`'s stack slot for a rebinding after the call to [`std::mem::forget`].\n\nThis undefined behavior has not been observed to cause miscompilation as of Rust 1.73.0. However, any use of this method with the affected versions of `tracing` are unsound.\n\nThe flaw was corrected in commit [20a1762] ([PR #2765]) by replacing the use of [`std::mem::forget`] with `std::mem::ManuallyDrop`, ensuring that the stack slot is not reused and the pointers remain valid when they are read. The fix is\npublished in `tracing` [v0.1.40]. Affected versions have been yanked from crates.io.\n\nThanks to [Taylor Cramer] and [Manish Goregaokar] for finding and correcting\nthis issue!\n\n[`Instrumented::into_inner`]:\n https://docs.rs/tracing/latest/tracing/instrument/struct.Instrumented.html#method.into_inner\n[`std::mem::forget`]: https://doc.rust-lang.org/std/mem/fn.forget.html\n[`std::ptr::read`]:\n https://doc.rust-lang.org/std/primitive.pointer.html#method.read-1\n[20a1762]:\n https://github.com/tokio-rs/tracing/commit/20a1762b3fd5f1fafead198fd18e469c68683721\n[PR #2765]: https://github.com/tokio-rs/tracing/pull/2765\n[v0.1.40]: https://crates.io/crates/tracing/0.1.40\n[Taylor Cramer]: https://github.com/cramertj\n[Manish Goregaokar]: https://github.com/manishearth\n", - "severity": [ - - ], + "severity": [], "affected": [ { "package": { diff --git a/advisories/unreviewed/2021/11/GHSA-qh78-qfw9-93x9/GHSA-qh78-qfw9-93x9.json b/advisories/unreviewed/2021/11/GHSA-qh78-qfw9-93x9/GHSA-qh78-qfw9-93x9.json index 8d744e2cd08..abb45384b8b 100644 --- a/advisories/unreviewed/2021/11/GHSA-qh78-qfw9-93x9/GHSA-qh78-qfw9-93x9.json +++ b/advisories/unreviewed/2021/11/GHSA-qh78-qfw9-93x9/GHSA-qh78-qfw9-93x9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -43,9 +41,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/02/GHSA-vmm8-82m2-pcp5/GHSA-vmm8-82m2-pcp5.json b/advisories/unreviewed/2022/02/GHSA-vmm8-82m2-pcp5/GHSA-vmm8-82m2-pcp5.json index 76fefa2a241..35f77206828 100644 --- a/advisories/unreviewed/2022/02/GHSA-vmm8-82m2-pcp5/GHSA-vmm8-82m2-pcp5.json +++ b/advisories/unreviewed/2022/02/GHSA-vmm8-82m2-pcp5/GHSA-vmm8-82m2-pcp5.json @@ -14,9 +14,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/02/GHSA-xgxp-9x8p-gcw4/GHSA-xgxp-9x8p-gcw4.json b/advisories/unreviewed/2022/02/GHSA-xgxp-9x8p-gcw4/GHSA-xgxp-9x8p-gcw4.json index c48ab8cd98a..ac6d30b3021 100644 --- a/advisories/unreviewed/2022/02/GHSA-xgxp-9x8p-gcw4/GHSA-xgxp-9x8p-gcw4.json +++ b/advisories/unreviewed/2022/02/GHSA-xgxp-9x8p-gcw4/GHSA-xgxp-9x8p-gcw4.json @@ -14,9 +14,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-2pph-3mjw-53c3/GHSA-2pph-3mjw-53c3.json b/advisories/unreviewed/2022/03/GHSA-2pph-3mjw-53c3/GHSA-2pph-3mjw-53c3.json index 0a7c0d245bb..8143464a1c8 100644 --- a/advisories/unreviewed/2022/03/GHSA-2pph-3mjw-53c3/GHSA-2pph-3mjw-53c3.json +++ b/advisories/unreviewed/2022/03/GHSA-2pph-3mjw-53c3/GHSA-2pph-3mjw-53c3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-5mgm-hh8w-j47p/GHSA-5mgm-hh8w-j47p.json b/advisories/unreviewed/2022/03/GHSA-5mgm-hh8w-j47p/GHSA-5mgm-hh8w-j47p.json index fa8859f980f..7326dd4b912 100644 --- a/advisories/unreviewed/2022/03/GHSA-5mgm-hh8w-j47p/GHSA-5mgm-hh8w-j47p.json +++ b/advisories/unreviewed/2022/03/GHSA-5mgm-hh8w-j47p/GHSA-5mgm-hh8w-j47p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/03/GHSA-v9hh-2rrq-p479/GHSA-v9hh-2rrq-p479.json b/advisories/unreviewed/2022/03/GHSA-v9hh-2rrq-p479/GHSA-v9hh-2rrq-p479.json index ab5de326605..038e359a60f 100644 --- a/advisories/unreviewed/2022/03/GHSA-v9hh-2rrq-p479/GHSA-v9hh-2rrq-p479.json +++ b/advisories/unreviewed/2022/03/GHSA-v9hh-2rrq-p479/GHSA-v9hh-2rrq-p479.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-22mh-26gq-mrqg/GHSA-22mh-26gq-mrqg.json b/advisories/unreviewed/2022/04/GHSA-22mh-26gq-mrqg/GHSA-22mh-26gq-mrqg.json index d8bff9eca30..95e5b7b736c 100644 --- a/advisories/unreviewed/2022/04/GHSA-22mh-26gq-mrqg/GHSA-22mh-26gq-mrqg.json +++ b/advisories/unreviewed/2022/04/GHSA-22mh-26gq-mrqg/GHSA-22mh-26gq-mrqg.json @@ -7,12 +7,8 @@ "CVE-2002-2365" ], "details": "Simple WAIS (SWAIS) 1.11 allows remote attackers to execute arbitrary commands via the shell metacharacters in the search field, as demonstrated using the \"|\" (pipe) character.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-238c-q9xh-vxf4/GHSA-238c-q9xh-vxf4.json b/advisories/unreviewed/2022/04/GHSA-238c-q9xh-vxf4/GHSA-238c-q9xh-vxf4.json index cf32dd494de..ea77d3d8238 100644 --- a/advisories/unreviewed/2022/04/GHSA-238c-q9xh-vxf4/GHSA-238c-q9xh-vxf4.json +++ b/advisories/unreviewed/2022/04/GHSA-238c-q9xh-vxf4/GHSA-238c-q9xh-vxf4.json @@ -7,12 +7,8 @@ "CVE-2002-2204" ], "details": "The default --checksig setting in RPM Package Manager 4.0.4 checks that a package's signature is valid without listing who signed it, which can allow remote attackers to make it appear that a malicious package comes from a trusted source.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-279w-vgm2-2w74/GHSA-279w-vgm2-2w74.json b/advisories/unreviewed/2022/04/GHSA-279w-vgm2-2w74/GHSA-279w-vgm2-2w74.json index 74491090633..8c5a2f03342 100644 --- a/advisories/unreviewed/2022/04/GHSA-279w-vgm2-2w74/GHSA-279w-vgm2-2w74.json +++ b/advisories/unreviewed/2022/04/GHSA-279w-vgm2-2w74/GHSA-279w-vgm2-2w74.json @@ -7,12 +7,8 @@ "CVE-2002-2349" ], "details": "phpinfo.php in phpBBmod 1.3.3 executes the phpinfo function, which allows remote attackers to obtain sensitive environment information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-27c8-ff82-g5pf/GHSA-27c8-ff82-g5pf.json b/advisories/unreviewed/2022/04/GHSA-27c8-ff82-g5pf/GHSA-27c8-ff82-g5pf.json index 6ba740419e7..62c993bd0c9 100644 --- a/advisories/unreviewed/2022/04/GHSA-27c8-ff82-g5pf/GHSA-27c8-ff82-g5pf.json +++ b/advisories/unreviewed/2022/04/GHSA-27c8-ff82-g5pf/GHSA-27c8-ff82-g5pf.json @@ -7,12 +7,8 @@ "CVE-2002-2302" ], "details": "3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying the price in a hidden form field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2f6p-jpgr-wvwc/GHSA-2f6p-jpgr-wvwc.json b/advisories/unreviewed/2022/04/GHSA-2f6p-jpgr-wvwc/GHSA-2f6p-jpgr-wvwc.json index 25bb5a17af2..425fa6a0394 100644 --- a/advisories/unreviewed/2022/04/GHSA-2f6p-jpgr-wvwc/GHSA-2f6p-jpgr-wvwc.json +++ b/advisories/unreviewed/2022/04/GHSA-2f6p-jpgr-wvwc/GHSA-2f6p-jpgr-wvwc.json @@ -7,12 +7,8 @@ "CVE-2002-2372" ], "details": "The telnet server in Infoprint 21 running controller software before 1.056007 allows remote attackers to cause a denial of service (crash) via a long username, possibly due to a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-2fj2-f362-29wp/GHSA-2fj2-f362-29wp.json b/advisories/unreviewed/2022/04/GHSA-2fj2-f362-29wp/GHSA-2fj2-f362-29wp.json index 873b8a52efc..e06b3046b07 100644 --- a/advisories/unreviewed/2022/04/GHSA-2fj2-f362-29wp/GHSA-2fj2-f362-29wp.json +++ b/advisories/unreviewed/2022/04/GHSA-2fj2-f362-29wp/GHSA-2fj2-f362-29wp.json @@ -7,12 +7,8 @@ "CVE-2002-2251" ], "details": "Buffer overflow in the changevalue function in libcgi.h for Marcos Luiz Onisto Lib CGI 0.1 allows remote attackers to execute arbitrary code via a long argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-2gvf-75fw-2r82/GHSA-2gvf-75fw-2r82.json b/advisories/unreviewed/2022/04/GHSA-2gvf-75fw-2r82/GHSA-2gvf-75fw-2r82.json index 001bdbab774..751a14ef2e9 100644 --- a/advisories/unreviewed/2022/04/GHSA-2gvf-75fw-2r82/GHSA-2gvf-75fw-2r82.json +++ b/advisories/unreviewed/2022/04/GHSA-2gvf-75fw-2r82/GHSA-2gvf-75fw-2r82.json @@ -7,12 +7,8 @@ "CVE-2002-2270" ], "details": "Unspecified vulnerability in the ied command in HP-UX 10.10, 10.20, and 11.0 allows local users to view \"normally invisible data\" via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2hhp-r87h-qvgj/GHSA-2hhp-r87h-qvgj.json b/advisories/unreviewed/2022/04/GHSA-2hhp-r87h-qvgj/GHSA-2hhp-r87h-qvgj.json index 469b14d9167..602bd2eb443 100644 --- a/advisories/unreviewed/2022/04/GHSA-2hhp-r87h-qvgj/GHSA-2hhp-r87h-qvgj.json +++ b/advisories/unreviewed/2022/04/GHSA-2hhp-r87h-qvgj/GHSA-2hhp-r87h-qvgj.json @@ -7,12 +7,8 @@ "CVE-2002-2387" ], "details": "Directory traversal vulnerability in Hyperion FTP server 2.8.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the LS command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-2hjq-rgfg-v4rj/GHSA-2hjq-rgfg-v4rj.json b/advisories/unreviewed/2022/04/GHSA-2hjq-rgfg-v4rj/GHSA-2hjq-rgfg-v4rj.json index 62589287db7..d740f9dec40 100644 --- a/advisories/unreviewed/2022/04/GHSA-2hjq-rgfg-v4rj/GHSA-2hjq-rgfg-v4rj.json +++ b/advisories/unreviewed/2022/04/GHSA-2hjq-rgfg-v4rj/GHSA-2hjq-rgfg-v4rj.json @@ -7,12 +7,8 @@ "CVE-2002-2344" ], "details": "Ensim WEBppliance 3.0 and 3.1 allows remote attackers to read mail intended for other users by defining an alias that is the target's email address.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2hpg-vqvj-82fm/GHSA-2hpg-vqvj-82fm.json b/advisories/unreviewed/2022/04/GHSA-2hpg-vqvj-82fm/GHSA-2hpg-vqvj-82fm.json index 53ce619262c..43206132df2 100644 --- a/advisories/unreviewed/2022/04/GHSA-2hpg-vqvj-82fm/GHSA-2hpg-vqvj-82fm.json +++ b/advisories/unreviewed/2022/04/GHSA-2hpg-vqvj-82fm/GHSA-2hpg-vqvj-82fm.json @@ -7,12 +7,8 @@ "CVE-2002-2231" ], "details": "Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web script or HTML via (1) a javascript: URL in a photo URL or (2) an X-Forwarded-For: header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-2mrq-w8h7-cwxm/GHSA-2mrq-w8h7-cwxm.json b/advisories/unreviewed/2022/04/GHSA-2mrq-w8h7-cwxm/GHSA-2mrq-w8h7-cwxm.json index dfa3710ff0f..57dcda1566e 100644 --- a/advisories/unreviewed/2022/04/GHSA-2mrq-w8h7-cwxm/GHSA-2mrq-w8h7-cwxm.json +++ b/advisories/unreviewed/2022/04/GHSA-2mrq-w8h7-cwxm/GHSA-2mrq-w8h7-cwxm.json @@ -7,12 +7,8 @@ "CVE-2002-2430" ], "details": "GoAhead WebServer before 2.1.1 allows remote attackers to cause a denial of service (CPU consumption) by performing a socket disconnect to terminate a request before it has been fully processed by the server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2p5v-37jh-xv37/GHSA-2p5v-37jh-xv37.json b/advisories/unreviewed/2022/04/GHSA-2p5v-37jh-xv37/GHSA-2p5v-37jh-xv37.json index 8c0d9819a7a..d2c8432c72e 100644 --- a/advisories/unreviewed/2022/04/GHSA-2p5v-37jh-xv37/GHSA-2p5v-37jh-xv37.json +++ b/advisories/unreviewed/2022/04/GHSA-2p5v-37jh-xv37/GHSA-2p5v-37jh-xv37.json @@ -7,12 +7,8 @@ "CVE-2002-2334" ], "details": "Joe text editor 2.8 through 2.9.7 does not remove the group and user setuid bits for backup files, which could allow local users to execute arbitrary setuid and setgid root programs when root edits scripts owned by other users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2phv-qp8w-5cv7/GHSA-2phv-qp8w-5cv7.json b/advisories/unreviewed/2022/04/GHSA-2phv-qp8w-5cv7/GHSA-2phv-qp8w-5cv7.json index 8adb1646d65..994087a4da7 100644 --- a/advisories/unreviewed/2022/04/GHSA-2phv-qp8w-5cv7/GHSA-2phv-qp8w-5cv7.json +++ b/advisories/unreviewed/2022/04/GHSA-2phv-qp8w-5cv7/GHSA-2phv-qp8w-5cv7.json @@ -7,12 +7,8 @@ "CVE-2002-2233" ], "details": "Directory traversal vulnerability in Enceladus Server Suite 3.9 allows remote attackers to list arbitrary directories and possibly cause a denial of service via \"@\" (at) characters in a CD (CWD) command, such as (1) \"@/....\\\", (2) \"@@@/..c:\\\", or (3) \"@/..@/..\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-2rvm-9jxc-7f5f/GHSA-2rvm-9jxc-7f5f.json b/advisories/unreviewed/2022/04/GHSA-2rvm-9jxc-7f5f/GHSA-2rvm-9jxc-7f5f.json index e8b0414b986..25b9ef8b090 100644 --- a/advisories/unreviewed/2022/04/GHSA-2rvm-9jxc-7f5f/GHSA-2rvm-9jxc-7f5f.json +++ b/advisories/unreviewed/2022/04/GHSA-2rvm-9jxc-7f5f/GHSA-2rvm-9jxc-7f5f.json @@ -7,12 +7,8 @@ "CVE-2002-2145" ], "details": "Savant Web Server 3.1 and earlier allows remote attackers to bypass authentication for password protected user folders via a URL with a hex encoded space (%20) and a '.' (%2e) at the end of the filename.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-2wxc-mmgg-448w/GHSA-2wxc-mmgg-448w.json b/advisories/unreviewed/2022/04/GHSA-2wxc-mmgg-448w/GHSA-2wxc-mmgg-448w.json index ce1f7cf7744..95b238fb152 100644 --- a/advisories/unreviewed/2022/04/GHSA-2wxc-mmgg-448w/GHSA-2wxc-mmgg-448w.json +++ b/advisories/unreviewed/2022/04/GHSA-2wxc-mmgg-448w/GHSA-2wxc-mmgg-448w.json @@ -7,12 +7,8 @@ "CVE-2002-2287" ], "details": "PHP remote file inclusion vulnerability in quick_reply.php for phpBB Advanced Quick Reply Hack 1.0.0 and 1.1.0 allows remote attackers to execute arbitrary PHP code via the phpbb_root_path parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-324h-8gv8-f3xm/GHSA-324h-8gv8-f3xm.json b/advisories/unreviewed/2022/04/GHSA-324h-8gv8-f3xm/GHSA-324h-8gv8-f3xm.json index 28a64e90ca0..bb50d721220 100644 --- a/advisories/unreviewed/2022/04/GHSA-324h-8gv8-f3xm/GHSA-324h-8gv8-f3xm.json +++ b/advisories/unreviewed/2022/04/GHSA-324h-8gv8-f3xm/GHSA-324h-8gv8-f3xm.json @@ -7,12 +7,8 @@ "CVE-2002-2392" ], "details": "Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote attackers to execute arbitrary code via a URL reference to (1) wsz and (2) wal files that contain embedded code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-326x-r6gv-8vqm/GHSA-326x-r6gv-8vqm.json b/advisories/unreviewed/2022/04/GHSA-326x-r6gv-8vqm/GHSA-326x-r6gv-8vqm.json index 5f55fbd29a9..61683e094c4 100644 --- a/advisories/unreviewed/2022/04/GHSA-326x-r6gv-8vqm/GHSA-326x-r6gv-8vqm.json +++ b/advisories/unreviewed/2022/04/GHSA-326x-r6gv-8vqm/GHSA-326x-r6gv-8vqm.json @@ -7,12 +7,8 @@ "CVE-2002-2282" ], "details": "McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for particular DLLs from the user's home directory, even when browsing the local hard drive, which allows local users to run arbitrary code via malicious versions of those DLLs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3482-8qrw-5xpw/GHSA-3482-8qrw-5xpw.json b/advisories/unreviewed/2022/04/GHSA-3482-8qrw-5xpw/GHSA-3482-8qrw-5xpw.json index d53d72ed9a5..eaf22ab2c4a 100644 --- a/advisories/unreviewed/2022/04/GHSA-3482-8qrw-5xpw/GHSA-3482-8qrw-5xpw.json +++ b/advisories/unreviewed/2022/04/GHSA-3482-8qrw-5xpw/GHSA-3482-8qrw-5xpw.json @@ -7,12 +7,8 @@ "CVE-2002-2203" ], "details": "Unknown vulnerability in the System Serial Console terminal in Solaris 2.5.1, 2.6, and 7 allows local users to monitor keystrokes and possibly steal sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-355p-2w27-27ph/GHSA-355p-2w27-27ph.json b/advisories/unreviewed/2022/04/GHSA-355p-2w27-27ph/GHSA-355p-2w27-27ph.json index d87c9a8819c..a90fefd3a4d 100644 --- a/advisories/unreviewed/2022/04/GHSA-355p-2w27-27ph/GHSA-355p-2w27-27ph.json +++ b/advisories/unreviewed/2022/04/GHSA-355p-2w27-27ph/GHSA-355p-2w27-27ph.json @@ -7,12 +7,8 @@ "CVE-2002-2179" ], "details": "The dynamic initialization feature of the ClearPath MCP environment allows remote attackers to cause a denial of service (crash) via a TCP port scan using a tool such as nmap.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3679-95fg-333v/GHSA-3679-95fg-333v.json b/advisories/unreviewed/2022/04/GHSA-3679-95fg-333v/GHSA-3679-95fg-333v.json index b1ec57a822a..e5abea7b934 100644 --- a/advisories/unreviewed/2022/04/GHSA-3679-95fg-333v/GHSA-3679-95fg-333v.json +++ b/advisories/unreviewed/2022/04/GHSA-3679-95fg-333v/GHSA-3679-95fg-333v.json @@ -7,12 +7,8 @@ "CVE-2002-2353" ], "details": "tftpd32 2.50 and 2.50.2 allows remote attackers to read or write arbitrary files via a full pathname in GET and PUT requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-372j-xq8c-5863/GHSA-372j-xq8c-5863.json b/advisories/unreviewed/2022/04/GHSA-372j-xq8c-5863/GHSA-372j-xq8c-5863.json index 157b04535dc..1bcc05690fe 100644 --- a/advisories/unreviewed/2022/04/GHSA-372j-xq8c-5863/GHSA-372j-xq8c-5863.json +++ b/advisories/unreviewed/2022/04/GHSA-372j-xq8c-5863/GHSA-372j-xq8c-5863.json @@ -7,12 +7,8 @@ "CVE-2002-2393" ], "details": "Serv-U FTP server 3.0, 3.1 and 4.0.0.4 does not accept new connections while validating user folder access rights, which allows remote attackers to cause a denial of service (no new connections) via a series of MKD commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-37gf-vc2r-h3rw/GHSA-37gf-vc2r-h3rw.json b/advisories/unreviewed/2022/04/GHSA-37gf-vc2r-h3rw/GHSA-37gf-vc2r-h3rw.json index aab8a43defc..a22776e786c 100644 --- a/advisories/unreviewed/2022/04/GHSA-37gf-vc2r-h3rw/GHSA-37gf-vc2r-h3rw.json +++ b/advisories/unreviewed/2022/04/GHSA-37gf-vc2r-h3rw/GHSA-37gf-vc2r-h3rw.json @@ -7,12 +7,8 @@ "CVE-2002-2301" ], "details": "Lawson Financials 8.0, when configured to use a third party relational database, stores usernames and passwords in a world-readable file, which allows local users to read the passwords and log onto the database.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-37w5-p3r5-mfjp/GHSA-37w5-p3r5-mfjp.json b/advisories/unreviewed/2022/04/GHSA-37w5-p3r5-mfjp/GHSA-37w5-p3r5-mfjp.json index a5bbd2e522e..cb3d8d06b0f 100644 --- a/advisories/unreviewed/2022/04/GHSA-37w5-p3r5-mfjp/GHSA-37w5-p3r5-mfjp.json +++ b/advisories/unreviewed/2022/04/GHSA-37w5-p3r5-mfjp/GHSA-37w5-p3r5-mfjp.json @@ -7,12 +7,8 @@ "CVE-2002-2290" ], "details": "Mambo Site Server 4.0.11 installs with a default username and password of admin, which allows remote attackers to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3857-6763-x46q/GHSA-3857-6763-x46q.json b/advisories/unreviewed/2022/04/GHSA-3857-6763-x46q/GHSA-3857-6763-x46q.json index ab2471ecf66..5b5b09a0b16 100644 --- a/advisories/unreviewed/2022/04/GHSA-3857-6763-x46q/GHSA-3857-6763-x46q.json +++ b/advisories/unreviewed/2022/04/GHSA-3857-6763-x46q/GHSA-3857-6763-x46q.json @@ -7,12 +7,8 @@ "CVE-2002-2170" ], "details": "Working Resources Inc. BadBlue Enterprise Edition 1.7 through 1.74 attempts to restrict administrator actions to the IP address of the local host, but does not provide additional authentication, which allows remote attackers to execute arbitrary code via a web page containing an HTTP POST request that accesses the dir.hts page on the localhost and adds an entire hard drive to be shared.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-387v-pw76-m864/GHSA-387v-pw76-m864.json b/advisories/unreviewed/2022/04/GHSA-387v-pw76-m864/GHSA-387v-pw76-m864.json index 9a02dc63145..926fe412974 100644 --- a/advisories/unreviewed/2022/04/GHSA-387v-pw76-m864/GHSA-387v-pw76-m864.json +++ b/advisories/unreviewed/2022/04/GHSA-387v-pw76-m864/GHSA-387v-pw76-m864.json @@ -7,12 +7,8 @@ "CVE-2002-2390" ], "details": "Buffer overflow in the IDENT daemon (identd) in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-3g69-x92x-w37w/GHSA-3g69-x92x-w37w.json b/advisories/unreviewed/2022/04/GHSA-3g69-x92x-w37w/GHSA-3g69-x92x-w37w.json index e17aa84a386..216fbe82b0c 100644 --- a/advisories/unreviewed/2022/04/GHSA-3g69-x92x-w37w/GHSA-3g69-x92x-w37w.json +++ b/advisories/unreviewed/2022/04/GHSA-3g69-x92x-w37w/GHSA-3g69-x92x-w37w.json @@ -7,12 +7,8 @@ "CVE-2002-2284" ], "details": "Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute arbitrary Java code via an applet that loads user-supplied Java classes.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3mj8-wjf2-5v9c/GHSA-3mj8-wjf2-5v9c.json b/advisories/unreviewed/2022/04/GHSA-3mj8-wjf2-5v9c/GHSA-3mj8-wjf2-5v9c.json index d04d581f7ad..23077f09408 100644 --- a/advisories/unreviewed/2022/04/GHSA-3mj8-wjf2-5v9c/GHSA-3mj8-wjf2-5v9c.json +++ b/advisories/unreviewed/2022/04/GHSA-3mj8-wjf2-5v9c/GHSA-3mj8-wjf2-5v9c.json @@ -7,12 +7,8 @@ "CVE-2002-2356" ], "details": "HAMweather 2.x allows remote attackers to modify administrative settings and obtain sensitive information via a direct request to hwadmin.cgi.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3rfp-m2ph-m985/GHSA-3rfp-m2ph-m985.json b/advisories/unreviewed/2022/04/GHSA-3rfp-m2ph-m985/GHSA-3rfp-m2ph-m985.json index 96870cf61fc..789a30f3adb 100644 --- a/advisories/unreviewed/2022/04/GHSA-3rfp-m2ph-m985/GHSA-3rfp-m2ph-m985.json +++ b/advisories/unreviewed/2022/04/GHSA-3rfp-m2ph-m985/GHSA-3rfp-m2ph-m985.json @@ -7,12 +7,8 @@ "CVE-2002-2242" ], "details": "The Apple Package Manager in KisMAC 0.02a and earlier modifies file permissions of sensitive files after installation, which could allow attackers to conduct unauthorized activities on those files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-3rgx-xp66-8w52/GHSA-3rgx-xp66-8w52.json b/advisories/unreviewed/2022/04/GHSA-3rgx-xp66-8w52/GHSA-3rgx-xp66-8w52.json index 6649b8e2df7..e94e897cdc8 100644 --- a/advisories/unreviewed/2022/04/GHSA-3rgx-xp66-8w52/GHSA-3rgx-xp66-8w52.json +++ b/advisories/unreviewed/2022/04/GHSA-3rgx-xp66-8w52/GHSA-3rgx-xp66-8w52.json @@ -7,12 +7,8 @@ "CVE-2002-2422" ], "details": "Cross-site scripting (XSS) vulnerability in Compaq Insight Management Agents 2.0, 2.1, 3.6.0, 4.2 and 4.3.7 allows remote attackers to inject arbitrary web script or HTML via a URL, which inserts the script into the resulting error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-3rxc-gcr5-rwcx/GHSA-3rxc-gcr5-rwcx.json b/advisories/unreviewed/2022/04/GHSA-3rxc-gcr5-rwcx/GHSA-3rxc-gcr5-rwcx.json index a63a5717d99..e2378a03718 100644 --- a/advisories/unreviewed/2022/04/GHSA-3rxc-gcr5-rwcx/GHSA-3rxc-gcr5-rwcx.json +++ b/advisories/unreviewed/2022/04/GHSA-3rxc-gcr5-rwcx/GHSA-3rxc-gcr5-rwcx.json @@ -7,12 +7,8 @@ "CVE-2002-2397" ], "details": "Sygate personal firewall 5.0 could allow remote attackers to bypass firewall filters via spoofed (1) source IP address of 127.0.0.1 or (2) network address of 127.0.0.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-3vjv-c88x-5rh5/GHSA-3vjv-c88x-5rh5.json b/advisories/unreviewed/2022/04/GHSA-3vjv-c88x-5rh5/GHSA-3vjv-c88x-5rh5.json index 15051a9b914..d7d3fd2263e 100644 --- a/advisories/unreviewed/2022/04/GHSA-3vjv-c88x-5rh5/GHSA-3vjv-c88x-5rh5.json +++ b/advisories/unreviewed/2022/04/GHSA-3vjv-c88x-5rh5/GHSA-3vjv-c88x-5rh5.json @@ -7,12 +7,8 @@ "CVE-2002-2377" ], "details": "Cross-site scripting (XSS) vulnerability in addentry.cgi in ZAP 1.0.3 allows remote attackers to inject arbitrary SSi directives, web script, and HTML via the entry field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-46fc-9xfj-r45q/GHSA-46fc-9xfj-r45q.json b/advisories/unreviewed/2022/04/GHSA-46fc-9xfj-r45q/GHSA-46fc-9xfj-r45q.json index c25ad7f0112..7d557d7ded9 100644 --- a/advisories/unreviewed/2022/04/GHSA-46fc-9xfj-r45q/GHSA-46fc-9xfj-r45q.json +++ b/advisories/unreviewed/2022/04/GHSA-46fc-9xfj-r45q/GHSA-46fc-9xfj-r45q.json @@ -7,12 +7,8 @@ "CVE-2002-2235" ], "details": "member2.php in vBulletin 2.2.9 and earlier does not properly restrict the $perpage variable to be an integer, which causes an error message to be reflected back to the user without quoting, which facilitates cross-site scripting (XSS) and possibly other attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-46wv-xhr9-cwgq/GHSA-46wv-xhr9-cwgq.json b/advisories/unreviewed/2022/04/GHSA-46wv-xhr9-cwgq/GHSA-46wv-xhr9-cwgq.json index 6971b261211..1a47b598eb4 100644 --- a/advisories/unreviewed/2022/04/GHSA-46wv-xhr9-cwgq/GHSA-46wv-xhr9-cwgq.json +++ b/advisories/unreviewed/2022/04/GHSA-46wv-xhr9-cwgq/GHSA-46wv-xhr9-cwgq.json @@ -7,12 +7,8 @@ "CVE-2002-2358" ], "details": "Cross-site scripting (XSS) vulnerability in the FTP view feature in Opera 6.0 and 6.01 through 6.04 allows remote attackers to inject arbitrary web script or HTML via the title tag of an FTP URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-4cjr-jxj5-8653/GHSA-4cjr-jxj5-8653.json b/advisories/unreviewed/2022/04/GHSA-4cjr-jxj5-8653/GHSA-4cjr-jxj5-8653.json index c40af8c1c83..50f1ee2ffbd 100644 --- a/advisories/unreviewed/2022/04/GHSA-4cjr-jxj5-8653/GHSA-4cjr-jxj5-8653.json +++ b/advisories/unreviewed/2022/04/GHSA-4cjr-jxj5-8653/GHSA-4cjr-jxj5-8653.json @@ -7,12 +7,8 @@ "CVE-2002-2240" ], "details": "Directory traversal vulnerability in MyServer 0.11 and 0.2 allows remote attackers to read arbitrary files via a \"..\" (dot dot) in an HTTP GET request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-4hvf-h7h9-62cm/GHSA-4hvf-h7h9-62cm.json b/advisories/unreviewed/2022/04/GHSA-4hvf-h7h9-62cm/GHSA-4hvf-h7h9-62cm.json index 0b64accb4ab..4f8cf77aa62 100644 --- a/advisories/unreviewed/2022/04/GHSA-4hvf-h7h9-62cm/GHSA-4hvf-h7h9-62cm.json +++ b/advisories/unreviewed/2022/04/GHSA-4hvf-h7h9-62cm/GHSA-4hvf-h7h9-62cm.json @@ -7,12 +7,8 @@ "CVE-2002-2152" ], "details": "The Czech edition of Software602's Web Server before 2002.0.02.0916 allows remote attackers to gain administrator privileges via direct HTTP requests to the /admin/ directory, which is not password protected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4j89-9q64-99mw/GHSA-4j89-9q64-99mw.json b/advisories/unreviewed/2022/04/GHSA-4j89-9q64-99mw/GHSA-4j89-9q64-99mw.json index 57a29c2e51f..9f2e7a37157 100644 --- a/advisories/unreviewed/2022/04/GHSA-4j89-9q64-99mw/GHSA-4j89-9q64-99mw.json +++ b/advisories/unreviewed/2022/04/GHSA-4j89-9q64-99mw/GHSA-4j89-9q64-99mw.json @@ -7,12 +7,8 @@ "CVE-2002-2327" ], "details": "Unspecified vulnerability in the environmental monitoring subsystem in Solaris 8 running on Sun Fire 280R, V480 and V880 allows local users to cause a denial of service by setting volatile properties.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4jjv-8vv6-97v7/GHSA-4jjv-8vv6-97v7.json b/advisories/unreviewed/2022/04/GHSA-4jjv-8vv6-97v7/GHSA-4jjv-8vv6-97v7.json index 3f651f0df8c..c102504b44a 100644 --- a/advisories/unreviewed/2022/04/GHSA-4jjv-8vv6-97v7/GHSA-4jjv-8vv6-97v7.json +++ b/advisories/unreviewed/2022/04/GHSA-4jjv-8vv6-97v7/GHSA-4jjv-8vv6-97v7.json @@ -7,12 +7,8 @@ "CVE-2002-2303" ], "details": "3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shopping cart prices by using the Javascript to decrypt the cookie that contains the data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4p84-3789-98rr/GHSA-4p84-3789-98rr.json b/advisories/unreviewed/2022/04/GHSA-4p84-3789-98rr/GHSA-4p84-3789-98rr.json index 5e80b7c03b0..334816e8ad3 100644 --- a/advisories/unreviewed/2022/04/GHSA-4p84-3789-98rr/GHSA-4p84-3789-98rr.json +++ b/advisories/unreviewed/2022/04/GHSA-4p84-3789-98rr/GHSA-4p84-3789-98rr.json @@ -7,12 +7,8 @@ "CVE-2002-2177" ], "details": "BEA WebLogic Server and Express 6.1 through 7.0.0.1 buffers HTTP requests in a way that can cause BEA to send the same response for two different HTTP requests, which could allow remote attackers to obtain sensitive information that was intended for other users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-4xc7-h5vr-gqmj/GHSA-4xc7-h5vr-gqmj.json b/advisories/unreviewed/2022/04/GHSA-4xc7-h5vr-gqmj/GHSA-4xc7-h5vr-gqmj.json index 86ebc16d0d6..ec725eac326 100644 --- a/advisories/unreviewed/2022/04/GHSA-4xc7-h5vr-gqmj/GHSA-4xc7-h5vr-gqmj.json +++ b/advisories/unreviewed/2022/04/GHSA-4xc7-h5vr-gqmj/GHSA-4xc7-h5vr-gqmj.json @@ -7,12 +7,8 @@ "CVE-2001-1583" ], "details": "lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this might be the same vulnerability as CVE-2000-1220.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-52cg-qjj9-w57f/GHSA-52cg-qjj9-w57f.json b/advisories/unreviewed/2022/04/GHSA-52cg-qjj9-w57f/GHSA-52cg-qjj9-w57f.json index 9ca4775610f..9a70a764246 100644 --- a/advisories/unreviewed/2022/04/GHSA-52cg-qjj9-w57f/GHSA-52cg-qjj9-w57f.json +++ b/advisories/unreviewed/2022/04/GHSA-52cg-qjj9-w57f/GHSA-52cg-qjj9-w57f.json @@ -7,12 +7,8 @@ "CVE-2002-2416" ], "details": "Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL GET request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-566q-9c9p-9jc4/GHSA-566q-9c9p-9jc4.json b/advisories/unreviewed/2022/04/GHSA-566q-9c9p-9jc4/GHSA-566q-9c9p-9jc4.json index c4749ce3495..fff18ffa834 100644 --- a/advisories/unreviewed/2022/04/GHSA-566q-9c9p-9jc4/GHSA-566q-9c9p-9jc4.json +++ b/advisories/unreviewed/2022/04/GHSA-566q-9c9p-9jc4/GHSA-566q-9c9p-9jc4.json @@ -7,12 +7,8 @@ "CVE-2002-2211" ], "details": "BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5835-f96r-f9gv/GHSA-5835-f96r-f9gv.json b/advisories/unreviewed/2022/04/GHSA-5835-f96r-f9gv/GHSA-5835-f96r-f9gv.json index fab87591a33..6270b81970f 100644 --- a/advisories/unreviewed/2022/04/GHSA-5835-f96r-f9gv/GHSA-5835-f96r-f9gv.json +++ b/advisories/unreviewed/2022/04/GHSA-5835-f96r-f9gv/GHSA-5835-f96r-f9gv.json @@ -7,12 +7,8 @@ "CVE-2002-2236" ], "details": "Format string vulnerability in the awp_log function in apt-www-proxy 0.1 allows remote attackers to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-588h-cpr3-x2r9/GHSA-588h-cpr3-x2r9.json b/advisories/unreviewed/2022/04/GHSA-588h-cpr3-x2r9/GHSA-588h-cpr3-x2r9.json index c69c6e01449..615cd6c84ca 100644 --- a/advisories/unreviewed/2022/04/GHSA-588h-cpr3-x2r9/GHSA-588h-cpr3-x2r9.json +++ b/advisories/unreviewed/2022/04/GHSA-588h-cpr3-x2r9/GHSA-588h-cpr3-x2r9.json @@ -7,12 +7,8 @@ "CVE-2002-2297" ], "details": "PHP remote file inclusion vulnerability in artlist.php in Thatware 0.5.2 and 0.5.3 allows remote attackers to execute arbitrary PHP code via the root_path parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-58p5-3cgm-hvjh/GHSA-58p5-3cgm-hvjh.json b/advisories/unreviewed/2022/04/GHSA-58p5-3cgm-hvjh/GHSA-58p5-3cgm-hvjh.json index 1af34e18f2d..63bccfa7579 100644 --- a/advisories/unreviewed/2022/04/GHSA-58p5-3cgm-hvjh/GHSA-58p5-3cgm-hvjh.json +++ b/advisories/unreviewed/2022/04/GHSA-58p5-3cgm-hvjh/GHSA-58p5-3cgm-hvjh.json @@ -7,12 +7,8 @@ "CVE-2002-2174" ], "details": "The Telnet proxy of 602Pro LAN SUITE 2002 does not restrict the number of outstanding connections to the local host, which allows remote attackers to create a denial of service (memory consumption) via a large number of connections.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-596q-fm96-jm8g/GHSA-596q-fm96-jm8g.json b/advisories/unreviewed/2022/04/GHSA-596q-fm96-jm8g/GHSA-596q-fm96-jm8g.json index 03bc00abde2..b56c526ed59 100644 --- a/advisories/unreviewed/2022/04/GHSA-596q-fm96-jm8g/GHSA-596q-fm96-jm8g.json +++ b/advisories/unreviewed/2022/04/GHSA-596q-fm96-jm8g/GHSA-596q-fm96-jm8g.json @@ -7,12 +7,8 @@ "CVE-2002-2167" ], "details": "Directory traversal vulnerability in function_foot_1.inc.php for Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to read arbitrary files via .. (dot dot) sequences terminated by a null character in the $designNo variable, which is part of an \"include\" function call.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5f3j-w3f6-9g93/GHSA-5f3j-w3f6-9g93.json b/advisories/unreviewed/2022/04/GHSA-5f3j-w3f6-9g93/GHSA-5f3j-w3f6-9g93.json index 55836a7435c..2893ed8ca5e 100644 --- a/advisories/unreviewed/2022/04/GHSA-5f3j-w3f6-9g93/GHSA-5f3j-w3f6-9g93.json +++ b/advisories/unreviewed/2022/04/GHSA-5f3j-w3f6-9g93/GHSA-5f3j-w3f6-9g93.json @@ -7,12 +7,8 @@ "CVE-2002-2311" ], "details": "Microsoft Internet Explorer 6.0 and possibly others allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript (1) event.ctrlKey or (2) event.shiftKey onkeydown event contained in a webpage. NOTE: it was reported that the vendor has disputed the severity of this issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5frf-xwh8-76f9/GHSA-5frf-xwh8-76f9.json b/advisories/unreviewed/2022/04/GHSA-5frf-xwh8-76f9/GHSA-5frf-xwh8-76f9.json index 3e5cbebc504..4bc2f29ca8d 100644 --- a/advisories/unreviewed/2022/04/GHSA-5frf-xwh8-76f9/GHSA-5frf-xwh8-76f9.json +++ b/advisories/unreviewed/2022/04/GHSA-5frf-xwh8-76f9/GHSA-5frf-xwh8-76f9.json @@ -7,12 +7,8 @@ "CVE-2002-2317" ], "details": "Memory leak in the (1) httpd, (2) nntpd, and (3) vpn driver in VelociRaptor 1.0 allows remote attackers to cause a denial of service (memory consumption) via an unknown method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-5j7p-qf86-r89c/GHSA-5j7p-qf86-r89c.json b/advisories/unreviewed/2022/04/GHSA-5j7p-qf86-r89c/GHSA-5j7p-qf86-r89c.json index 6a242b7c051..215e25af5f1 100644 --- a/advisories/unreviewed/2022/04/GHSA-5j7p-qf86-r89c/GHSA-5j7p-qf86-r89c.json +++ b/advisories/unreviewed/2022/04/GHSA-5j7p-qf86-r89c/GHSA-5j7p-qf86-r89c.json @@ -7,12 +7,8 @@ "CVE-2002-2294" ], "details": "Multiple buffer overflows in Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor 500/700/1000 and 1100/1200/1300, and Gateway Security 5110/5200/5300 allow remote attackers to cause a denial of service (service termination) via (1) malformed RealAudio (rad) packets that are not properly handled by the RealAudio Proxy, or (2) crafted packets to the statistics service (statsd).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-5p5w-mcjp-jvjv/GHSA-5p5w-mcjp-jvjv.json b/advisories/unreviewed/2022/04/GHSA-5p5w-mcjp-jvjv/GHSA-5p5w-mcjp-jvjv.json index 46d373dbf84..9dea0370ebc 100644 --- a/advisories/unreviewed/2022/04/GHSA-5p5w-mcjp-jvjv/GHSA-5p5w-mcjp-jvjv.json +++ b/advisories/unreviewed/2022/04/GHSA-5p5w-mcjp-jvjv/GHSA-5p5w-mcjp-jvjv.json @@ -7,12 +7,8 @@ "CVE-2002-2216" ], "details": "Soft3304 04WebServer before 1.20 does not properly process URL strings, which allows remote attackers to obtain unspecified sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-5v52-2fm6-v3mj/GHSA-5v52-2fm6-v3mj.json b/advisories/unreviewed/2022/04/GHSA-5v52-2fm6-v3mj/GHSA-5v52-2fm6-v3mj.json index bb6ca1191b1..7817723fe69 100644 --- a/advisories/unreviewed/2022/04/GHSA-5v52-2fm6-v3mj/GHSA-5v52-2fm6-v3mj.json +++ b/advisories/unreviewed/2022/04/GHSA-5v52-2fm6-v3mj/GHSA-5v52-2fm6-v3mj.json @@ -7,12 +7,8 @@ "CVE-2002-2230" ], "details": "Cross-site scripting (XSS) vulnerability in Ikonboard 3.1.1 allows remote attackers to inject arbitrary web script or HTML via a private message with a javascript: URL in the IMG tag, in which the URL ends in a \".gif\" or \".jpg\" string, a variant of CVE-2002-0328.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-5x74-hf78-8w9j/GHSA-5x74-hf78-8w9j.json b/advisories/unreviewed/2022/04/GHSA-5x74-hf78-8w9j/GHSA-5x74-hf78-8w9j.json index 77c7646c83c..3ce800d2967 100644 --- a/advisories/unreviewed/2022/04/GHSA-5x74-hf78-8w9j/GHSA-5x74-hf78-8w9j.json +++ b/advisories/unreviewed/2022/04/GHSA-5x74-hf78-8w9j/GHSA-5x74-hf78-8w9j.json @@ -7,12 +7,8 @@ "CVE-2002-2424" ], "details": "Cross-site scripting (XSS) vulnerability in PHP(Reactor) 1.2.7 pl1 allows remote attackers to inject arbitrary web script or HTML via Javascript in the style attribute of an HTML tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-62gr-x8g8-959r/GHSA-62gr-x8g8-959r.json b/advisories/unreviewed/2022/04/GHSA-62gr-x8g8-959r/GHSA-62gr-x8g8-959r.json index 06caea68d35..289e79e0654 100644 --- a/advisories/unreviewed/2022/04/GHSA-62gr-x8g8-959r/GHSA-62gr-x8g8-959r.json +++ b/advisories/unreviewed/2022/04/GHSA-62gr-x8g8-959r/GHSA-62gr-x8g8-959r.json @@ -7,12 +7,8 @@ "CVE-2002-2417" ], "details": "acFTP 1.4 does not properly handle when an invalid password is provided by the user during authentication, which allows remote attackers to hide or misrepresent certain activity from log files and possibly gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-62m8-f85x-h9p8/GHSA-62m8-f85x-h9p8.json b/advisories/unreviewed/2022/04/GHSA-62m8-f85x-h9p8/GHSA-62m8-f85x-h9p8.json index 0c690e5aec2..572b775614b 100644 --- a/advisories/unreviewed/2022/04/GHSA-62m8-f85x-h9p8/GHSA-62m8-f85x-h9p8.json +++ b/advisories/unreviewed/2022/04/GHSA-62m8-f85x-h9p8/GHSA-62m8-f85x-h9p8.json @@ -7,12 +7,8 @@ "CVE-2002-2195" ], "details": "Buffer overflow in the version update check for Winamp 2.80 and earlier allows remote attackers who can spoof www.winamp.com to execute arbitrary code via a long server response.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-62mq-8v6x-7m34/GHSA-62mq-8v6x-7m34.json b/advisories/unreviewed/2022/04/GHSA-62mq-8v6x-7m34/GHSA-62mq-8v6x-7m34.json index 9ac3f7a51e0..5ada157bedc 100644 --- a/advisories/unreviewed/2022/04/GHSA-62mq-8v6x-7m34/GHSA-62mq-8v6x-7m34.json +++ b/advisories/unreviewed/2022/04/GHSA-62mq-8v6x-7m34/GHSA-62mq-8v6x-7m34.json @@ -7,12 +7,8 @@ "CVE-2002-2218" ], "details": "CRLF injection vulnerability in the setUserValue function in sipssys/code/site.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) before 20020209 has unknown impact, possibly gaining privileges or modifying critical configuration, via a CRLF sequence in a key value.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-63hm-3qvh-mg6x/GHSA-63hm-3qvh-mg6x.json b/advisories/unreviewed/2022/04/GHSA-63hm-3qvh-mg6x/GHSA-63hm-3qvh-mg6x.json index d74645acf16..86226fbf71e 100644 --- a/advisories/unreviewed/2022/04/GHSA-63hm-3qvh-mg6x/GHSA-63hm-3qvh-mg6x.json +++ b/advisories/unreviewed/2022/04/GHSA-63hm-3qvh-mg6x/GHSA-63hm-3qvh-mg6x.json @@ -7,12 +7,8 @@ "CVE-2002-2249" ], "details": "PHP remote file inclusion vulnerability in News Evolution 2.0 allows remote attackers to execute arbitrary PHP commands via the neurl parameter to (1) backend.php, (2) screen.php, or (3) admin/modules/comment.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-64m4-r4gj-jq2g/GHSA-64m4-r4gj-jq2g.json b/advisories/unreviewed/2022/04/GHSA-64m4-r4gj-jq2g/GHSA-64m4-r4gj-jq2g.json index d6198255516..a4e4cc30a66 100644 --- a/advisories/unreviewed/2022/04/GHSA-64m4-r4gj-jq2g/GHSA-64m4-r4gj-jq2g.json +++ b/advisories/unreviewed/2022/04/GHSA-64m4-r4gj-jq2g/GHSA-64m4-r4gj-jq2g.json @@ -7,12 +7,8 @@ "CVE-2002-2183" ], "details": "phpShare.php in phpShare before 0.6 beta 3 allows remote attackers to include and execute arbitrary PHP scripts from remote servers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-65g2-cr83-j42w/GHSA-65g2-cr83-j42w.json b/advisories/unreviewed/2022/04/GHSA-65g2-cr83-j42w/GHSA-65g2-cr83-j42w.json index 10de14f4036..6a58b22e696 100644 --- a/advisories/unreviewed/2022/04/GHSA-65g2-cr83-j42w/GHSA-65g2-cr83-j42w.json +++ b/advisories/unreviewed/2022/04/GHSA-65g2-cr83-j42w/GHSA-65g2-cr83-j42w.json @@ -7,12 +7,8 @@ "CVE-2002-2385" ], "details": "Buffer overflow in hotfoon4.exe in Hotfoon 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL containing a long voice phone number.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-69x7-h4hg-wh8p/GHSA-69x7-h4hg-wh8p.json b/advisories/unreviewed/2022/04/GHSA-69x7-h4hg-wh8p/GHSA-69x7-h4hg-wh8p.json index 3a455ced23d..2b8fd65f04d 100644 --- a/advisories/unreviewed/2022/04/GHSA-69x7-h4hg-wh8p/GHSA-69x7-h4hg-wh8p.json +++ b/advisories/unreviewed/2022/04/GHSA-69x7-h4hg-wh8p/GHSA-69x7-h4hg-wh8p.json @@ -7,12 +7,8 @@ "CVE-2002-2322" ], "details": "Ultimate PHP Board (UPB) 1.0b stores the users.dat data file under the web root with insufficient access control, which allows remote attackers to obtain usernames and passwords.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-6gx2-xj67-r7x9/GHSA-6gx2-xj67-r7x9.json b/advisories/unreviewed/2022/04/GHSA-6gx2-xj67-r7x9/GHSA-6gx2-xj67-r7x9.json index f52f0705834..825a71577c3 100644 --- a/advisories/unreviewed/2022/04/GHSA-6gx2-xj67-r7x9/GHSA-6gx2-xj67-r7x9.json +++ b/advisories/unreviewed/2022/04/GHSA-6gx2-xj67-r7x9/GHSA-6gx2-xj67-r7x9.json @@ -7,12 +7,8 @@ "CVE-2002-2220" ], "details": "Buffer overflow in Pedro Lineu Orso chetcpasswd before 1.12, when configured for access from 0.0.0.0, allows local users to gain privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6m42-6g44-jmj9/GHSA-6m42-6g44-jmj9.json b/advisories/unreviewed/2022/04/GHSA-6m42-6g44-jmj9/GHSA-6m42-6g44-jmj9.json index b941047f6c4..780e08215a5 100644 --- a/advisories/unreviewed/2022/04/GHSA-6m42-6g44-jmj9/GHSA-6m42-6g44-jmj9.json +++ b/advisories/unreviewed/2022/04/GHSA-6m42-6g44-jmj9/GHSA-6m42-6g44-jmj9.json @@ -7,12 +7,8 @@ "CVE-2002-2326" ], "details": "The default configuration of Mail.app in Mac OS X 10.0 through 10.0.4 and 10.1 through 10.1.5 sends iDisk authentication credentials in cleartext when connecting to Mac.com, which could allow remote attackers to obtain passwords by sniffing network traffic.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6vgr-9c82-qw57/GHSA-6vgr-9c82-qw57.json b/advisories/unreviewed/2022/04/GHSA-6vgr-9c82-qw57/GHSA-6vgr-9c82-qw57.json index 042390d5eb4..9df4df67cba 100644 --- a/advisories/unreviewed/2022/04/GHSA-6vgr-9c82-qw57/GHSA-6vgr-9c82-qw57.json +++ b/advisories/unreviewed/2022/04/GHSA-6vgr-9c82-qw57/GHSA-6vgr-9c82-qw57.json @@ -7,12 +7,8 @@ "CVE-2002-2307" ], "details": "The default configuration of BenHur Firewall release 3 update 066 fix 2 allows remote attackers to access arbitrary services by connecting from source port 20.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-6vm7-g298-wfpg/GHSA-6vm7-g298-wfpg.json b/advisories/unreviewed/2022/04/GHSA-6vm7-g298-wfpg/GHSA-6vm7-g298-wfpg.json index f2ef516708d..828ca89a974 100644 --- a/advisories/unreviewed/2022/04/GHSA-6vm7-g298-wfpg/GHSA-6vm7-g298-wfpg.json +++ b/advisories/unreviewed/2022/04/GHSA-6vm7-g298-wfpg/GHSA-6vm7-g298-wfpg.json @@ -7,12 +7,8 @@ "CVE-2002-2256" ], "details": "Directory traversal vulnerability in pWins Webserver 0.2.5 and earlier allows remote attackers to read arbitrary files via Unicode characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-72xx-m6pc-p22h/GHSA-72xx-m6pc-p22h.json b/advisories/unreviewed/2022/04/GHSA-72xx-m6pc-p22h/GHSA-72xx-m6pc-p22h.json index 0d5d98cecf5..8046ef2204e 100644 --- a/advisories/unreviewed/2022/04/GHSA-72xx-m6pc-p22h/GHSA-72xx-m6pc-p22h.json +++ b/advisories/unreviewed/2022/04/GHSA-72xx-m6pc-p22h/GHSA-72xx-m6pc-p22h.json @@ -7,12 +7,8 @@ "CVE-2002-2324" ], "details": "The \"System Restore\" directory and subdirectories, and possibly other subdirectories in the \"System Volume Information\" directory on Windows XP Professional, have insecure access control list (ACL) permissions, which allows local users to access restricted files and modify registry settings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-73xc-5c3p-98hg/GHSA-73xc-5c3p-98hg.json b/advisories/unreviewed/2022/04/GHSA-73xc-5c3p-98hg/GHSA-73xc-5c3p-98hg.json index 44a078c5ae5..47ea11151a8 100644 --- a/advisories/unreviewed/2022/04/GHSA-73xc-5c3p-98hg/GHSA-73xc-5c3p-98hg.json +++ b/advisories/unreviewed/2022/04/GHSA-73xc-5c3p-98hg/GHSA-73xc-5c3p-98hg.json @@ -7,12 +7,8 @@ "CVE-2002-2386" ], "details": "Cross-site scripting (XSS) vulnerability in the Quizz module for XOOPS 1.0, when allowing on-line question development, allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in the SRC attribute of an IMG tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-744g-p3h3-32h2/GHSA-744g-p3h3-32h2.json b/advisories/unreviewed/2022/04/GHSA-744g-p3h3-32h2/GHSA-744g-p3h3-32h2.json index 6e6097d68a7..921ed28f6da 100644 --- a/advisories/unreviewed/2022/04/GHSA-744g-p3h3-32h2/GHSA-744g-p3h3-32h2.json +++ b/advisories/unreviewed/2022/04/GHSA-744g-p3h3-32h2/GHSA-744g-p3h3-32h2.json @@ -7,12 +7,8 @@ "CVE-2002-2268" ], "details": "Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-74qx-gg8g-9m92/GHSA-74qx-gg8g-9m92.json b/advisories/unreviewed/2022/04/GHSA-74qx-gg8g-9m92/GHSA-74qx-gg8g-9m92.json index 4f47c566616..f90365d51e9 100644 --- a/advisories/unreviewed/2022/04/GHSA-74qx-gg8g-9m92/GHSA-74qx-gg8g-9m92.json +++ b/advisories/unreviewed/2022/04/GHSA-74qx-gg8g-9m92/GHSA-74qx-gg8g-9m92.json @@ -7,12 +7,8 @@ "CVE-2002-2375" ], "details": "Directory traversal vulnerability in CommuniGate Pro 4.0b4 and possibly earlier versions allows remote attackers to list the contents of the WebUser directory and its parent directory via a (1) .. (dot dot) or (2) . (dot) in a URL. NOTE: it is not clear whether this issue reveals any more information regarding directory structure than is already available to any CommuniGate Pro user, although there is a possibility that it could be used to infer product version information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-7543-gmwj-3p3m/GHSA-7543-gmwj-3p3m.json b/advisories/unreviewed/2022/04/GHSA-7543-gmwj-3p3m/GHSA-7543-gmwj-3p3m.json index 20542afbf73..0c44fb01d73 100644 --- a/advisories/unreviewed/2022/04/GHSA-7543-gmwj-3p3m/GHSA-7543-gmwj-3p3m.json +++ b/advisories/unreviewed/2022/04/GHSA-7543-gmwj-3p3m/GHSA-7543-gmwj-3p3m.json @@ -7,12 +7,8 @@ "CVE-2002-2360" ], "details": "The RPC module in Webmin 0.21 through 0.99, when installed without root or admin privileges, allows remote attackers to read and write to arbitrary files and execute arbitrary commands via remote_foreign_require and remote_foreign_call requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7598-5638-j333/GHSA-7598-5638-j333.json b/advisories/unreviewed/2022/04/GHSA-7598-5638-j333/GHSA-7598-5638-j333.json index 3abf43b43a8..bc13355a5c0 100644 --- a/advisories/unreviewed/2022/04/GHSA-7598-5638-j333/GHSA-7598-5638-j333.json +++ b/advisories/unreviewed/2022/04/GHSA-7598-5638-j333/GHSA-7598-5638-j333.json @@ -7,12 +7,8 @@ "CVE-2002-2402" ], "details": "SURECOM broadband router EP-4501 uses a default SNMP read community string of \"public\" and a default SNMP read/write community string of \"secret,\" which allows remote attackers to read and modify router configuration information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-75p7-wfvv-gw4f/GHSA-75p7-wfvv-gw4f.json b/advisories/unreviewed/2022/04/GHSA-75p7-wfvv-gw4f/GHSA-75p7-wfvv-gw4f.json index a299467b982..1b558f8d52d 100644 --- a/advisories/unreviewed/2022/04/GHSA-75p7-wfvv-gw4f/GHSA-75p7-wfvv-gw4f.json +++ b/advisories/unreviewed/2022/04/GHSA-75p7-wfvv-gw4f/GHSA-75p7-wfvv-gw4f.json @@ -7,12 +7,8 @@ "CVE-2002-2366" ], "details": "Buffer overflow in the XML parser of Trillian 0.6351, 0.725 and 0.73 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a skin with a long colors file name in trillian.xml.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-794j-jvx4-wrgc/GHSA-794j-jvx4-wrgc.json b/advisories/unreviewed/2022/04/GHSA-794j-jvx4-wrgc/GHSA-794j-jvx4-wrgc.json index c9d813afd73..9cb318a54fb 100644 --- a/advisories/unreviewed/2022/04/GHSA-794j-jvx4-wrgc/GHSA-794j-jvx4-wrgc.json +++ b/advisories/unreviewed/2022/04/GHSA-794j-jvx4-wrgc/GHSA-794j-jvx4-wrgc.json @@ -7,12 +7,8 @@ "CVE-2002-2306" ], "details": "Sharman Networks KaZaA Media Desktop 1.7.1 allows remote attackers to cause a denial of service (CPU consumption) by sending several large messages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7ccr-xp36-pxwq/GHSA-7ccr-xp36-pxwq.json b/advisories/unreviewed/2022/04/GHSA-7ccr-xp36-pxwq/GHSA-7ccr-xp36-pxwq.json index b421cbc72eb..81dbc579267 100644 --- a/advisories/unreviewed/2022/04/GHSA-7ccr-xp36-pxwq/GHSA-7ccr-xp36-pxwq.json +++ b/advisories/unreviewed/2022/04/GHSA-7ccr-xp36-pxwq/GHSA-7ccr-xp36-pxwq.json @@ -7,12 +7,8 @@ "CVE-2002-2239" ], "details": "The Cisco Optical Service Module (OSM) for the Catalyst 6500 and 7600 series running Cisco IOS 12.1(8)E through 12.1(13.4)E allows remote attackers to cause a denial of service (hang) via a malformed packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-7f46-2x92-rq59/GHSA-7f46-2x92-rq59.json b/advisories/unreviewed/2022/04/GHSA-7f46-2x92-rq59/GHSA-7f46-2x92-rq59.json index 71ac33b8884..6d8720bc5c5 100644 --- a/advisories/unreviewed/2022/04/GHSA-7f46-2x92-rq59/GHSA-7f46-2x92-rq59.json +++ b/advisories/unreviewed/2022/04/GHSA-7f46-2x92-rq59/GHSA-7f46-2x92-rq59.json @@ -7,12 +7,8 @@ "CVE-2002-2225" ], "details": "SafeNet VPN client allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly involving buffer overflows using (1) a large Security Parameter Index (SPI) field, (2) a large number of payloads, or (3) a long payload.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7g3j-7rpx-p77m/GHSA-7g3j-7rpx-p77m.json b/advisories/unreviewed/2022/04/GHSA-7g3j-7rpx-p77m/GHSA-7g3j-7rpx-p77m.json index fef2d90956f..b635021ad94 100644 --- a/advisories/unreviewed/2022/04/GHSA-7g3j-7rpx-p77m/GHSA-7g3j-7rpx-p77m.json +++ b/advisories/unreviewed/2022/04/GHSA-7g3j-7rpx-p77m/GHSA-7g3j-7rpx-p77m.json @@ -7,12 +7,8 @@ "CVE-2002-2335" ], "details": "Killer Protection 1.0 stores the vars.inc include file under the web root with insufficient access control, which allows remote attackers to obtain user names and passwords and log in using protection.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-7gp7-q625-569q/GHSA-7gp7-q625-569q.json b/advisories/unreviewed/2022/04/GHSA-7gp7-q625-569q/GHSA-7gp7-q625-569q.json index 9bf69e0b50a..cce43438dd6 100644 --- a/advisories/unreviewed/2022/04/GHSA-7gp7-q625-569q/GHSA-7gp7-q625-569q.json +++ b/advisories/unreviewed/2022/04/GHSA-7gp7-q625-569q/GHSA-7gp7-q625-569q.json @@ -7,12 +7,8 @@ "CVE-2002-2343" ], "details": "Cross-site scripting (XSS) vulnerability in NOCC 0.9 through 0.9.5 allows remote attackers to inject arbitrary web script or HTML via email messages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-7jjr-r62c-qxx7/GHSA-7jjr-r62c-qxx7.json b/advisories/unreviewed/2022/04/GHSA-7jjr-r62c-qxx7/GHSA-7jjr-r62c-qxx7.json index f0359a140f3..3b2df62dfe8 100644 --- a/advisories/unreviewed/2022/04/GHSA-7jjr-r62c-qxx7/GHSA-7jjr-r62c-qxx7.json +++ b/advisories/unreviewed/2022/04/GHSA-7jjr-r62c-qxx7/GHSA-7jjr-r62c-qxx7.json @@ -7,12 +7,8 @@ "CVE-2002-2428" ], "details": "webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP POST request that contains a Content-Length header but no body data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-7m8g-pjh5-7fx3/GHSA-7m8g-pjh5-7fx3.json b/advisories/unreviewed/2022/04/GHSA-7m8g-pjh5-7fx3/GHSA-7m8g-pjh5-7fx3.json index a6300269082..c2f65bca60a 100644 --- a/advisories/unreviewed/2022/04/GHSA-7m8g-pjh5-7fx3/GHSA-7m8g-pjh5-7fx3.json +++ b/advisories/unreviewed/2022/04/GHSA-7m8g-pjh5-7fx3/GHSA-7m8g-pjh5-7fx3.json @@ -7,12 +7,8 @@ "CVE-2002-2371" ], "details": "Linksys WET11 firmware 1.31 and 1.32 allows remote attackers to cause a denial of service (crash) via a packet containing the device's hardware address as the source MAC address in the DLC header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-7q7q-qpjh-vhjf/GHSA-7q7q-qpjh-vhjf.json b/advisories/unreviewed/2022/04/GHSA-7q7q-qpjh-vhjf/GHSA-7q7q-qpjh-vhjf.json index c231e281256..0d959a051df 100644 --- a/advisories/unreviewed/2022/04/GHSA-7q7q-qpjh-vhjf/GHSA-7q7q-qpjh-vhjf.json +++ b/advisories/unreviewed/2022/04/GHSA-7q7q-qpjh-vhjf/GHSA-7q7q-qpjh-vhjf.json @@ -7,12 +7,8 @@ "CVE-2002-2292" ], "details": "Directory traversal vulnerability in Remote Console Applet in Halycon Software iASP 1.0.9 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request to port 9095.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-7rjm-hcwm-8qgg/GHSA-7rjm-hcwm-8qgg.json b/advisories/unreviewed/2022/04/GHSA-7rjm-hcwm-8qgg/GHSA-7rjm-hcwm-8qgg.json index 1e505bd78ce..6e144a6fefb 100644 --- a/advisories/unreviewed/2022/04/GHSA-7rjm-hcwm-8qgg/GHSA-7rjm-hcwm-8qgg.json +++ b/advisories/unreviewed/2022/04/GHSA-7rjm-hcwm-8qgg/GHSA-7rjm-hcwm-8qgg.json @@ -7,12 +7,8 @@ "CVE-2002-2314" ], "details": "Mozilla 1.0 allows remote attackers to steal cookies from other domains via a javascript: URL with a leading \"//\" and ending in a newline, which causes the host/path check to fail.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-7x46-4395-662p/GHSA-7x46-4395-662p.json b/advisories/unreviewed/2022/04/GHSA-7x46-4395-662p/GHSA-7x46-4395-662p.json index 8565b2ddd01..0c46796a1a3 100644 --- a/advisories/unreviewed/2022/04/GHSA-7x46-4395-662p/GHSA-7x46-4395-662p.json +++ b/advisories/unreviewed/2022/04/GHSA-7x46-4395-662p/GHSA-7x46-4395-662p.json @@ -7,12 +7,8 @@ "CVE-2002-2278" ], "details": "Cross-site scripting (XSS) vulnerability in mod_search/index.php in PortailPHP 0.99 allows remote attackers to inject arbitrary web script or HTML via the (1) $App_Theme, (2) $Rub_Search, (3) $Rub_News, (4) $Rub_File, (5) $Rub_Liens, or (6) $Rub_Faq variables.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-83jq-p4c9-7938/GHSA-83jq-p4c9-7938.json b/advisories/unreviewed/2022/04/GHSA-83jq-p4c9-7938/GHSA-83jq-p4c9-7938.json index 677d86e9a7d..0711164df8a 100644 --- a/advisories/unreviewed/2022/04/GHSA-83jq-p4c9-7938/GHSA-83jq-p4c9-7938.json +++ b/advisories/unreviewed/2022/04/GHSA-83jq-p4c9-7938/GHSA-83jq-p4c9-7938.json @@ -7,12 +7,8 @@ "CVE-2002-2191" ], "details": "Lotus Domino 5.0.9a and earlier, even when configured with the 'DominoNoBanner=1' option, allows remote attackers to obtain potential sensitive information such as the version via a request for a non-existent .nsf database, which leaks the version in the HTTP banner.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-83x7-r93g-qwrr/GHSA-83x7-r93g-qwrr.json b/advisories/unreviewed/2022/04/GHSA-83x7-r93g-qwrr/GHSA-83x7-r93g-qwrr.json index 5888ab58e3d..878e484a2e4 100644 --- a/advisories/unreviewed/2022/04/GHSA-83x7-r93g-qwrr/GHSA-83x7-r93g-qwrr.json +++ b/advisories/unreviewed/2022/04/GHSA-83x7-r93g-qwrr/GHSA-83x7-r93g-qwrr.json @@ -7,12 +7,8 @@ "CVE-2002-2264" ], "details": "Unspecified vulnerability in Internet Group Management Protocol (IGMP) of HP Tru64 4.0F through 5.1A allows remote attackers to cause a denial of service via unknown attack vectors. NOTE: this might be the same issue as CVE-2002-2185, but there are insufficient details to be certain.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-868j-8v9v-89vg/GHSA-868j-8v9v-89vg.json b/advisories/unreviewed/2022/04/GHSA-868j-8v9v-89vg/GHSA-868j-8v9v-89vg.json index bfab6bca5f1..53938d69895 100644 --- a/advisories/unreviewed/2022/04/GHSA-868j-8v9v-89vg/GHSA-868j-8v9v-89vg.json +++ b/advisories/unreviewed/2022/04/GHSA-868j-8v9v-89vg/GHSA-868j-8v9v-89vg.json @@ -7,12 +7,8 @@ "CVE-2002-2248" ], "details": "Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the WDefaultFontCharset constructor with a long string and invokes the canConvert method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-87j5-jmqh-4w2x/GHSA-87j5-jmqh-4w2x.json b/advisories/unreviewed/2022/04/GHSA-87j5-jmqh-4w2x/GHSA-87j5-jmqh-4w2x.json index b2b21e50a13..39a49b99333 100644 --- a/advisories/unreviewed/2022/04/GHSA-87j5-jmqh-4w2x/GHSA-87j5-jmqh-4w2x.json +++ b/advisories/unreviewed/2022/04/GHSA-87j5-jmqh-4w2x/GHSA-87j5-jmqh-4w2x.json @@ -7,12 +7,8 @@ "CVE-2002-2214" ], "details": "The php_if_imap_mime_header_decode function in the IMAP functionality in PHP before 4.2.2 allows remote attackers to cause a denial of service (crash) via an e-mail header with a long \"To\" header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-89c4-g57m-vv8w/GHSA-89c4-g57m-vv8w.json b/advisories/unreviewed/2022/04/GHSA-89c4-g57m-vv8w/GHSA-89c4-g57m-vv8w.json index e6e99d944b0..3baecfda4bb 100644 --- a/advisories/unreviewed/2022/04/GHSA-89c4-g57m-vv8w/GHSA-89c4-g57m-vv8w.json +++ b/advisories/unreviewed/2022/04/GHSA-89c4-g57m-vv8w/GHSA-89c4-g57m-vv8w.json @@ -7,12 +7,8 @@ "CVE-2002-2162" ], "details": "Cerulean Studios Trillian 0.73 and earlier use weak encrypttion (XOR) for storing user passwords in .ini files in the Trillian directory, which allows local users to gain access to other user accounts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-89w8-c2hh-36r7/GHSA-89w8-c2hh-36r7.json b/advisories/unreviewed/2022/04/GHSA-89w8-c2hh-36r7/GHSA-89w8-c2hh-36r7.json index 7622ae11479..f1a5ffc37a7 100644 --- a/advisories/unreviewed/2022/04/GHSA-89w8-c2hh-36r7/GHSA-89w8-c2hh-36r7.json +++ b/advisories/unreviewed/2022/04/GHSA-89w8-c2hh-36r7/GHSA-89w8-c2hh-36r7.json @@ -7,12 +7,8 @@ "CVE-2002-2316" ], "details": "Cisco Catalyst 4000 series switches running CatOS 5.5.5, 6.3.5, and 7.1.2 do not always learn MAC addresses from a single initial packet, which causes unicast traffic to be broadcast across the switch and allows remote attackers to obtain sensitive network information by sniffing.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8g23-v7v7-6hqq/GHSA-8g23-v7v7-6hqq.json b/advisories/unreviewed/2022/04/GHSA-8g23-v7v7-6hqq/GHSA-8g23-v7v7-6hqq.json index b00d7d8282b..08ff6d60bd3 100644 --- a/advisories/unreviewed/2022/04/GHSA-8g23-v7v7-6hqq/GHSA-8g23-v7v7-6hqq.json +++ b/advisories/unreviewed/2022/04/GHSA-8g23-v7v7-6hqq/GHSA-8g23-v7v7-6hqq.json @@ -7,12 +7,8 @@ "CVE-2002-2285" ], "details": "eTrust InoculateIT 6.0 with the \"Incremental Scan\" option enabled may certify that a file is free of viruses before the file has been completely downloaded, which allows remote attackers to bypass virus detection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8gc9-hf29-69hg/GHSA-8gc9-hf29-69hg.json b/advisories/unreviewed/2022/04/GHSA-8gc9-hf29-69hg/GHSA-8gc9-hf29-69hg.json index 68ca99ae0aa..58469e02a4f 100644 --- a/advisories/unreviewed/2022/04/GHSA-8gc9-hf29-69hg/GHSA-8gc9-hf29-69hg.json +++ b/advisories/unreviewed/2022/04/GHSA-8gc9-hf29-69hg/GHSA-8gc9-hf29-69hg.json @@ -7,12 +7,8 @@ "CVE-2002-2446" ], "details": "GE Healthcare Millennium MG, NC, and MyoSIGHT has a password of insite.genieacq for the insite account that cannot be changed without disabling product functionality for remote InSite support, which has unspecified impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8hfv-pg8m-25fg/GHSA-8hfv-pg8m-25fg.json b/advisories/unreviewed/2022/04/GHSA-8hfv-pg8m-25fg/GHSA-8hfv-pg8m-25fg.json index 8f1c257dcf0..9edc508bf84 100644 --- a/advisories/unreviewed/2022/04/GHSA-8hfv-pg8m-25fg/GHSA-8hfv-pg8m-25fg.json +++ b/advisories/unreviewed/2022/04/GHSA-8hfv-pg8m-25fg/GHSA-8hfv-pg8m-25fg.json @@ -7,12 +7,8 @@ "CVE-2002-2339" ], "details": "Cross-site scripting (XSS) vulnerability in configure.asp in Script-Shed GuestBook 1.0 allows remote attackers to inject arbitrary web script or HTML via a javascript: URL in (1) image, (2) img, (3) image=right, (4) img=right, (5) image=left, and (6) img=left tags.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-8hp8-p8cx-6gv5/GHSA-8hp8-p8cx-6gv5.json b/advisories/unreviewed/2022/04/GHSA-8hp8-p8cx-6gv5/GHSA-8hp8-p8cx-6gv5.json index 75ff89836b5..d8326b2bed1 100644 --- a/advisories/unreviewed/2022/04/GHSA-8hp8-p8cx-6gv5/GHSA-8hp8-p8cx-6gv5.json +++ b/advisories/unreviewed/2022/04/GHSA-8hp8-p8cx-6gv5/GHSA-8hp8-p8cx-6gv5.json @@ -7,12 +7,8 @@ "CVE-2002-2418" ], "details": "Cross-site scripting (XSS) vulnerability in acFreeProxy (aka acFP) 1.33 beta 7 allows remote attackers to inject arbitrary web script or HTML via the URL, which is inserted into an error page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-8hrm-8f6j-cv72/GHSA-8hrm-8f6j-cv72.json b/advisories/unreviewed/2022/04/GHSA-8hrm-8f6j-cv72/GHSA-8hrm-8f6j-cv72.json index 75afd6b0fe9..27f5dbc2a33 100644 --- a/advisories/unreviewed/2022/04/GHSA-8hrm-8f6j-cv72/GHSA-8hrm-8f6j-cv72.json +++ b/advisories/unreviewed/2022/04/GHSA-8hrm-8f6j-cv72/GHSA-8hrm-8f6j-cv72.json @@ -7,12 +7,8 @@ "CVE-2002-2363" ], "details": "VJE.VJE-RUN in HP-UX 11.00 adds bin to /etc/PATH, which could allow local users to gain privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8hxh-9q2c-67pv/GHSA-8hxh-9q2c-67pv.json b/advisories/unreviewed/2022/04/GHSA-8hxh-9q2c-67pv/GHSA-8hxh-9q2c-67pv.json index f9c36c5ed9e..f5542fdcd37 100644 --- a/advisories/unreviewed/2022/04/GHSA-8hxh-9q2c-67pv/GHSA-8hxh-9q2c-67pv.json +++ b/advisories/unreviewed/2022/04/GHSA-8hxh-9q2c-67pv/GHSA-8hxh-9q2c-67pv.json @@ -7,12 +7,8 @@ "CVE-2002-2175" ], "details": "phpSquidPass before 0.2 uses an incomplete regular expression to find a matching username in its database, which allows remote authenticated attackers to effectively delete other usernames via a short username that matches the end of the targeted username.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8m4h-px38-jwwg/GHSA-8m4h-px38-jwwg.json b/advisories/unreviewed/2022/04/GHSA-8m4h-px38-jwwg/GHSA-8m4h-px38-jwwg.json index 43a534d9f5b..a4b5f559630 100644 --- a/advisories/unreviewed/2022/04/GHSA-8m4h-px38-jwwg/GHSA-8m4h-px38-jwwg.json +++ b/advisories/unreviewed/2022/04/GHSA-8m4h-px38-jwwg/GHSA-8m4h-px38-jwwg.json @@ -7,12 +7,8 @@ "CVE-2002-2212" ], "details": "The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8p93-9r25-g72m/GHSA-8p93-9r25-g72m.json b/advisories/unreviewed/2022/04/GHSA-8p93-9r25-g72m/GHSA-8p93-9r25-g72m.json index d7e46eb608a..e8fc3782be0 100644 --- a/advisories/unreviewed/2022/04/GHSA-8p93-9r25-g72m/GHSA-8p93-9r25-g72m.json +++ b/advisories/unreviewed/2022/04/GHSA-8p93-9r25-g72m/GHSA-8p93-9r25-g72m.json @@ -7,12 +7,8 @@ "CVE-2002-2260" ], "details": "Cross-site scripting (XSS) vulnerability in the quips feature in Mozilla Bugzilla 2.10 through 2.17 allows remote attackers to inject arbitrary web script or HTML via the \"show all quips\" page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-8qr4-8vg8-vqvr/GHSA-8qr4-8vg8-vqvr.json b/advisories/unreviewed/2022/04/GHSA-8qr4-8vg8-vqvr/GHSA-8qr4-8vg8-vqvr.json index de32bcbc962..357eed7a36c 100644 --- a/advisories/unreviewed/2022/04/GHSA-8qr4-8vg8-vqvr/GHSA-8qr4-8vg8-vqvr.json +++ b/advisories/unreviewed/2022/04/GHSA-8qr4-8vg8-vqvr/GHSA-8qr4-8vg8-vqvr.json @@ -7,12 +7,8 @@ "CVE-2002-2243" ], "details": "Akfingerd 0.5 and possibly earlier versions only allows one connection at a time and does not time out connections, which allows remote attackers to cause a denial of service (refused connections) by opening a connection and not closing it.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-8wrm-x7j4-2w7c/GHSA-8wrm-x7j4-2w7c.json b/advisories/unreviewed/2022/04/GHSA-8wrm-x7j4-2w7c/GHSA-8wrm-x7j4-2w7c.json index ced46facd3f..89a55e8b534 100644 --- a/advisories/unreviewed/2022/04/GHSA-8wrm-x7j4-2w7c/GHSA-8wrm-x7j4-2w7c.json +++ b/advisories/unreviewed/2022/04/GHSA-8wrm-x7j4-2w7c/GHSA-8wrm-x7j4-2w7c.json @@ -7,12 +7,8 @@ "CVE-2002-2330" ], "details": "Cross-site scripting (XSS) vulnerability in stat.pl in StatsPlus 1.25 allows remote attackers to inject arbitrary web script or HTML via (1) HTTP_USER_AGENT or (2) HTTP_REFERER, which is written to stats.html and executed in client browsers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-8xm7-h5wr-j4f5/GHSA-8xm7-h5wr-j4f5.json b/advisories/unreviewed/2022/04/GHSA-8xm7-h5wr-j4f5/GHSA-8xm7-h5wr-j4f5.json index 7f176576698..3bd4636a507 100644 --- a/advisories/unreviewed/2022/04/GHSA-8xm7-h5wr-j4f5/GHSA-8xm7-h5wr-j4f5.json +++ b/advisories/unreviewed/2022/04/GHSA-8xm7-h5wr-j4f5/GHSA-8xm7-h5wr-j4f5.json @@ -7,12 +7,8 @@ "CVE-2002-2361" ], "details": "The installer in Yahoo! Messenger 4.0, 5.0 and 5.5 does not verify package signatures which could allow remote attackers to install trojan programs via DNS spoofing.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-96v3-p5jg-44xq/GHSA-96v3-p5jg-44xq.json b/advisories/unreviewed/2022/04/GHSA-96v3-p5jg-44xq/GHSA-96v3-p5jg-44xq.json index 5868d8794f8..07c24a304ae 100644 --- a/advisories/unreviewed/2022/04/GHSA-96v3-p5jg-44xq/GHSA-96v3-p5jg-44xq.json +++ b/advisories/unreviewed/2022/04/GHSA-96v3-p5jg-44xq/GHSA-96v3-p5jg-44xq.json @@ -7,12 +7,8 @@ "CVE-2002-2420" ], "details": "site_searcher.cgi in Super Site Searcher allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-9fm6-mf67-vpm5/GHSA-9fm6-mf67-vpm5.json b/advisories/unreviewed/2022/04/GHSA-9fm6-mf67-vpm5/GHSA-9fm6-mf67-vpm5.json index a96301841c2..16cc0467a69 100644 --- a/advisories/unreviewed/2022/04/GHSA-9fm6-mf67-vpm5/GHSA-9fm6-mf67-vpm5.json +++ b/advisories/unreviewed/2022/04/GHSA-9fm6-mf67-vpm5/GHSA-9fm6-mf67-vpm5.json @@ -7,12 +7,8 @@ "CVE-2002-2289" ], "details": "soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive information including ODBC passwords.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-9fq5-9pvh-4r88/GHSA-9fq5-9pvh-4r88.json b/advisories/unreviewed/2022/04/GHSA-9fq5-9pvh-4r88/GHSA-9fq5-9pvh-4r88.json index dfeed383d10..fcf691b3f9c 100644 --- a/advisories/unreviewed/2022/04/GHSA-9fq5-9pvh-4r88/GHSA-9fq5-9pvh-4r88.json +++ b/advisories/unreviewed/2022/04/GHSA-9fq5-9pvh-4r88/GHSA-9fq5-9pvh-4r88.json @@ -7,12 +7,8 @@ "CVE-2002-2215" ], "details": "The imap_header function in the IMAP functionality for PHP before 4.3.0 allows remote attackers to cause a denial of service via an e-mail message with a large number of \"To\" addresses, which triggers an error in the rfc822_write_address function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9gxv-jh66-5544/GHSA-9gxv-jh66-5544.json b/advisories/unreviewed/2022/04/GHSA-9gxv-jh66-5544/GHSA-9gxv-jh66-5544.json index 1abd76fafb2..d31ee8fe2b1 100644 --- a/advisories/unreviewed/2022/04/GHSA-9gxv-jh66-5544/GHSA-9gxv-jh66-5544.json +++ b/advisories/unreviewed/2022/04/GHSA-9gxv-jh66-5544/GHSA-9gxv-jh66-5544.json @@ -7,12 +7,8 @@ "CVE-2002-2359" ], "details": "Cross-site scripting (XSS) vulnerability in the FTP view feature in Mozilla 1.0 allows remote attackers to inject arbitrary web script or HTML via the title tag of an ftp URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-9h74-fvjc-4388/GHSA-9h74-fvjc-4388.json b/advisories/unreviewed/2022/04/GHSA-9h74-fvjc-4388/GHSA-9h74-fvjc-4388.json index f0cb1e920eb..aa795895e7a 100644 --- a/advisories/unreviewed/2022/04/GHSA-9h74-fvjc-4388/GHSA-9h74-fvjc-4388.json +++ b/advisories/unreviewed/2022/04/GHSA-9h74-fvjc-4388/GHSA-9h74-fvjc-4388.json @@ -7,12 +7,8 @@ "CVE-2002-2414" ], "details": "Opera 6.0.3, when using Squid 2.4 for HTTPS proxying, does not properly handle when accepting a non-global certificate authority (CA) certificate from a site and establishing a subsequent HTTPS connection, which allows remote attackers to cause a denial of service (crash).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9jmx-6wg4-g79h/GHSA-9jmx-6wg4-g79h.json b/advisories/unreviewed/2022/04/GHSA-9jmx-6wg4-g79h/GHSA-9jmx-6wg4-g79h.json index e843626702d..d3456eb185a 100644 --- a/advisories/unreviewed/2022/04/GHSA-9jmx-6wg4-g79h/GHSA-9jmx-6wg4-g79h.json +++ b/advisories/unreviewed/2022/04/GHSA-9jmx-6wg4-g79h/GHSA-9jmx-6wg4-g79h.json @@ -7,12 +7,8 @@ "CVE-2002-2404" ], "details": "Buffer overflow in IISPop email server 1.161 and 1.181 allows remote attackers to cause a denial of service (crash) via a long request to the POP3 port (TCP port 110).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-9pc5-j7h2-rj9p/GHSA-9pc5-j7h2-rj9p.json b/advisories/unreviewed/2022/04/GHSA-9pc5-j7h2-rj9p/GHSA-9pc5-j7h2-rj9p.json index 2a27e7e80d6..d2601d92b77 100644 --- a/advisories/unreviewed/2022/04/GHSA-9pc5-j7h2-rj9p/GHSA-9pc5-j7h2-rj9p.json +++ b/advisories/unreviewed/2022/04/GHSA-9pc5-j7h2-rj9p/GHSA-9pc5-j7h2-rj9p.json @@ -7,12 +7,8 @@ "CVE-2002-2321" ], "details": "Cross-site scripting (XSS) vulnerability in (1) showcat.php and (2) addyoursite.php in phpLinkat 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the catid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-9rg7-64p7-vcr7/GHSA-9rg7-64p7-vcr7.json b/advisories/unreviewed/2022/04/GHSA-9rg7-64p7-vcr7/GHSA-9rg7-64p7-vcr7.json index 64f15c6a13d..cdd89b4c98c 100644 --- a/advisories/unreviewed/2022/04/GHSA-9rg7-64p7-vcr7/GHSA-9rg7-64p7-vcr7.json +++ b/advisories/unreviewed/2022/04/GHSA-9rg7-64p7-vcr7/GHSA-9rg7-64p7-vcr7.json @@ -7,12 +7,8 @@ "CVE-2002-2165" ], "details": "The IMHO Webmail module 0.97.3 and earlier for Roxen leaks the REFERER from the browser's previous login session in an error page, which allows local users to read another user's inbox.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-9vrg-fpvj-37q8/GHSA-9vrg-fpvj-37q8.json b/advisories/unreviewed/2022/04/GHSA-9vrg-fpvj-37q8/GHSA-9vrg-fpvj-37q8.json index 4ce6143bcb8..030653e5b1e 100644 --- a/advisories/unreviewed/2022/04/GHSA-9vrg-fpvj-37q8/GHSA-9vrg-fpvj-37q8.json +++ b/advisories/unreviewed/2022/04/GHSA-9vrg-fpvj-37q8/GHSA-9vrg-fpvj-37q8.json @@ -7,12 +7,8 @@ "CVE-2002-2277" ], "details": "SQL injection vulnerability in mod_search/index.php in PortailPHP 0.99 allows remote attackers to execute arbitrary SQL commands via the (1) $rech, (2) $BD_Tab_docs, (3) $BD_Tab_file, (4) $BD_Tab_liens, (5) $BD_Tab_faq, or (6) $chemin variables.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-9wmv-4775-j46g/GHSA-9wmv-4775-j46g.json b/advisories/unreviewed/2022/04/GHSA-9wmv-4775-j46g/GHSA-9wmv-4775-j46g.json index 43287d70e19..11b9242e137 100644 --- a/advisories/unreviewed/2022/04/GHSA-9wmv-4775-j46g/GHSA-9wmv-4775-j46g.json +++ b/advisories/unreviewed/2022/04/GHSA-9wmv-4775-j46g/GHSA-9wmv-4775-j46g.json @@ -7,12 +7,8 @@ "CVE-2002-2229" ], "details": "Directory traversal vulnerability in Sapio Design Ltd. WebReflex 1.53 allows remote attackers to read arbitrary files via a .. in an HTTP request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-c374-r2q7-33p6/GHSA-c374-r2q7-33p6.json b/advisories/unreviewed/2022/04/GHSA-c374-r2q7-33p6/GHSA-c374-r2q7-33p6.json index 358f1bb4562..e3fb7f8eb43 100644 --- a/advisories/unreviewed/2022/04/GHSA-c374-r2q7-33p6/GHSA-c374-r2q7-33p6.json +++ b/advisories/unreviewed/2022/04/GHSA-c374-r2q7-33p6/GHSA-c374-r2q7-33p6.json @@ -7,12 +7,8 @@ "CVE-2002-2181" ], "details": "SonicWall Content Filtering allows local users to access prohibited web sites via requests to the web site's IP address instead of the domain name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c3r5-qf65-7v57/GHSA-c3r5-qf65-7v57.json b/advisories/unreviewed/2022/04/GHSA-c3r5-qf65-7v57/GHSA-c3r5-qf65-7v57.json index e532e2e09fc..f13e5dd3e70 100644 --- a/advisories/unreviewed/2022/04/GHSA-c3r5-qf65-7v57/GHSA-c3r5-qf65-7v57.json +++ b/advisories/unreviewed/2022/04/GHSA-c3r5-qf65-7v57/GHSA-c3r5-qf65-7v57.json @@ -7,12 +7,8 @@ "CVE-2002-2210" ], "details": "The installation of OpenOffice 1.0.1 allows local users to overwrite files and possibly gain privileges via a symlink attack on the USERNAME_autoresponse.conf temporary file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c5f3-gwwm-46f8/GHSA-c5f3-gwwm-46f8.json b/advisories/unreviewed/2022/04/GHSA-c5f3-gwwm-46f8/GHSA-c5f3-gwwm-46f8.json index 9419ec9b103..2fb1edced87 100644 --- a/advisories/unreviewed/2022/04/GHSA-c5f3-gwwm-46f8/GHSA-c5f3-gwwm-46f8.json +++ b/advisories/unreviewed/2022/04/GHSA-c5f3-gwwm-46f8/GHSA-c5f3-gwwm-46f8.json @@ -7,12 +7,8 @@ "CVE-2002-2380" ], "details": "NetDSL ADSL Modem 800 with Microsoft Network firmware 5.5.11 allows remote attackers to gain access to configuration menus by sniffing undocumented usernames and passwords from network traffic.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-c6p2-r32q-c84p/GHSA-c6p2-r32q-c84p.json b/advisories/unreviewed/2022/04/GHSA-c6p2-r32q-c84p/GHSA-c6p2-r32q-c84p.json index 3942287c010..569839bac88 100644 --- a/advisories/unreviewed/2022/04/GHSA-c6p2-r32q-c84p/GHSA-c6p2-r32q-c84p.json +++ b/advisories/unreviewed/2022/04/GHSA-c6p2-r32q-c84p/GHSA-c6p2-r32q-c84p.json @@ -7,12 +7,8 @@ "CVE-2002-2164" ], "details": "Buffer overflow in Microsoft Outlook Express 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (crash) via a long link.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-c8gx-mmh9-vcg4/GHSA-c8gx-mmh9-vcg4.json b/advisories/unreviewed/2022/04/GHSA-c8gx-mmh9-vcg4/GHSA-c8gx-mmh9-vcg4.json index 6bd407ffe41..2b377501525 100644 --- a/advisories/unreviewed/2022/04/GHSA-c8gx-mmh9-vcg4/GHSA-c8gx-mmh9-vcg4.json +++ b/advisories/unreviewed/2022/04/GHSA-c8gx-mmh9-vcg4/GHSA-c8gx-mmh9-vcg4.json @@ -7,12 +7,8 @@ "CVE-2002-2308" ], "details": "Netscape Communicator 6.2.1 allows remote attackers to cause a denial of service in client browsers via a webpage containing a recursive META refresh tag where the content tag is blank and the URL tag references itself.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cg5m-v8jp-wc2g/GHSA-cg5m-v8jp-wc2g.json b/advisories/unreviewed/2022/04/GHSA-cg5m-v8jp-wc2g/GHSA-cg5m-v8jp-wc2g.json index d0249b1529b..468631baa49 100644 --- a/advisories/unreviewed/2022/04/GHSA-cg5m-v8jp-wc2g/GHSA-cg5m-v8jp-wc2g.json +++ b/advisories/unreviewed/2022/04/GHSA-cg5m-v8jp-wc2g/GHSA-cg5m-v8jp-wc2g.json @@ -7,12 +7,8 @@ "CVE-2002-2265" ], "details": "Unspecified vulnerability in LDAP Module in System Authentication of Open Source Internet Solutions (OSIS) 5.4 running on Tru64 UNIX 4.0G and 4.0F allows remote attackers to gain access to arbitrary files or gain privileges via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cjgf-3j3h-j6hg/GHSA-cjgf-3j3h-j6hg.json b/advisories/unreviewed/2022/04/GHSA-cjgf-3j3h-j6hg/GHSA-cjgf-3j3h-j6hg.json index 5c6f683f269..ce4bae38646 100644 --- a/advisories/unreviewed/2022/04/GHSA-cjgf-3j3h-j6hg/GHSA-cjgf-3j3h-j6hg.json +++ b/advisories/unreviewed/2022/04/GHSA-cjgf-3j3h-j6hg/GHSA-cjgf-3j3h-j6hg.json @@ -7,12 +7,8 @@ "CVE-2002-2276" ], "details": "Ultimate PHP Board (UPB) 1.0 allows remote attackers to view the physical path of the message board via a direct request to add.php, which leaks the path in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-cm2p-xppg-vcmx/GHSA-cm2p-xppg-vcmx.json b/advisories/unreviewed/2022/04/GHSA-cm2p-xppg-vcmx/GHSA-cm2p-xppg-vcmx.json index 10b7e976c50..fb2ec3c01a7 100644 --- a/advisories/unreviewed/2022/04/GHSA-cm2p-xppg-vcmx/GHSA-cm2p-xppg-vcmx.json +++ b/advisories/unreviewed/2022/04/GHSA-cm2p-xppg-vcmx/GHSA-cm2p-xppg-vcmx.json @@ -7,12 +7,8 @@ "CVE-2002-2333" ], "details": "Buffer overflow in konqueror in KDE 2.1 through 3.0 and 3.0.2 allows remote attackers to cause a denial of service (crash) via an IMG tag with large width and height attributes.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-cp55-952w-w99v/GHSA-cp55-952w-w99v.json b/advisories/unreviewed/2022/04/GHSA-cp55-952w-w99v/GHSA-cp55-952w-w99v.json index 83ac3b9b3a8..2fea061218b 100644 --- a/advisories/unreviewed/2022/04/GHSA-cp55-952w-w99v/GHSA-cp55-952w-w99v.json +++ b/advisories/unreviewed/2022/04/GHSA-cp55-952w-w99v/GHSA-cp55-952w-w99v.json @@ -7,12 +7,8 @@ "CVE-2002-2255" ], "details": "Cross-site scripting (XSS) vulnerability in search.php in phpBB 2.0.3 and possibly earlier versions allows remote attackers to inject arbitrary web script or HTML via the search_username parameter in searchuser mode.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-cpf5-582v-c9j9/GHSA-cpf5-582v-c9j9.json b/advisories/unreviewed/2022/04/GHSA-cpf5-582v-c9j9/GHSA-cpf5-582v-c9j9.json index 52f3b6dbda5..04be6e1d9b2 100644 --- a/advisories/unreviewed/2022/04/GHSA-cpf5-582v-c9j9/GHSA-cpf5-582v-c9j9.json +++ b/advisories/unreviewed/2022/04/GHSA-cpf5-582v-c9j9/GHSA-cpf5-582v-c9j9.json @@ -7,12 +7,8 @@ "CVE-2002-2300" ], "details": "Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denial of service (crash) via a long CEL command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-cpg3-5g4r-7vjm/GHSA-cpg3-5g4r-7vjm.json b/advisories/unreviewed/2022/04/GHSA-cpg3-5g4r-7vjm/GHSA-cpg3-5g4r-7vjm.json index 57ff6666b7f..45526a2b6b1 100644 --- a/advisories/unreviewed/2022/04/GHSA-cpg3-5g4r-7vjm/GHSA-cpg3-5g4r-7vjm.json +++ b/advisories/unreviewed/2022/04/GHSA-cpg3-5g4r-7vjm/GHSA-cpg3-5g4r-7vjm.json @@ -7,12 +7,8 @@ "CVE-2002-2357" ], "details": "MailEnable 1.5 015 through 1.5 018 allows remote attackers to cause a denial of service (crash) via a long USER string, possibly due to a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-cqf2-6q6w-6cqw/GHSA-cqf2-6q6w-6cqw.json b/advisories/unreviewed/2022/04/GHSA-cqf2-6q6w-6cqw/GHSA-cqf2-6q6w-6cqw.json index ef797dac2b2..1589754a353 100644 --- a/advisories/unreviewed/2022/04/GHSA-cqf2-6q6w-6cqw/GHSA-cqf2-6q6w-6cqw.json +++ b/advisories/unreviewed/2022/04/GHSA-cqf2-6q6w-6cqw/GHSA-cqf2-6q6w-6cqw.json @@ -7,12 +7,8 @@ "CVE-2002-2443" ], "details": "schpw.c in the kpasswd service in kadmind in MIT Kerberos 5 (aka krb5) before 1.11.3 does not properly validate UDP packets before sending responses, which allows remote attackers to cause a denial of service (CPU and bandwidth consumption) via a forged packet that triggers a communication loop, as demonstrated by krb_pingpong.nasl, a related issue to CVE-1999-0103.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-cvgh-c5gj-9h6g/GHSA-cvgh-c5gj-9h6g.json b/advisories/unreviewed/2022/04/GHSA-cvgh-c5gj-9h6g/GHSA-cvgh-c5gj-9h6g.json index 1ee72ded70c..8f2f035f1ca 100644 --- a/advisories/unreviewed/2022/04/GHSA-cvgh-c5gj-9h6g/GHSA-cvgh-c5gj-9h6g.json +++ b/advisories/unreviewed/2022/04/GHSA-cvgh-c5gj-9h6g/GHSA-cvgh-c5gj-9h6g.json @@ -7,12 +7,8 @@ "CVE-2002-2182" ], "details": "Buffer overflow in Seunghyun Seo's MSN666 MSN Sniffer 1.0 and 1.0.1 allows remote attackers to execute arbitrary code via a long MSN packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-cxx3-573v-vcgm/GHSA-cxx3-573v-vcgm.json b/advisories/unreviewed/2022/04/GHSA-cxx3-573v-vcgm/GHSA-cxx3-573v-vcgm.json index 9c926fbfdc2..d91969de4f5 100644 --- a/advisories/unreviewed/2022/04/GHSA-cxx3-573v-vcgm/GHSA-cxx3-573v-vcgm.json +++ b/advisories/unreviewed/2022/04/GHSA-cxx3-573v-vcgm/GHSA-cxx3-573v-vcgm.json @@ -7,12 +7,8 @@ "CVE-2002-2364" ], "details": "Cross-site scripting (XSS) vulnerability in PHP Ticket 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a help ticket.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-f5f2-44mf-667j/GHSA-f5f2-44mf-667j.json b/advisories/unreviewed/2022/04/GHSA-f5f2-44mf-667j/GHSA-f5f2-44mf-667j.json index 813a820b3b2..b22c202b02f 100644 --- a/advisories/unreviewed/2022/04/GHSA-f5f2-44mf-667j/GHSA-f5f2-44mf-667j.json +++ b/advisories/unreviewed/2022/04/GHSA-f5f2-44mf-667j/GHSA-f5f2-44mf-667j.json @@ -7,12 +7,8 @@ "CVE-2002-2206" ], "details": "The POP3 proxy service (POPROXY.EXE) in Norton AntiVirus 2001 allows local users to cause a denial of service (CPU consumption and crash) via a long username with multiple /localhost entries.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-f884-vg73-f48f/GHSA-f884-vg73-f48f.json b/advisories/unreviewed/2022/04/GHSA-f884-vg73-f48f/GHSA-f884-vg73-f48f.json index 9dce35d07e7..c0c819c5215 100644 --- a/advisories/unreviewed/2022/04/GHSA-f884-vg73-f48f/GHSA-f884-vg73-f48f.json +++ b/advisories/unreviewed/2022/04/GHSA-f884-vg73-f48f/GHSA-f884-vg73-f48f.json @@ -7,12 +7,8 @@ "CVE-2002-2197" ], "details": "Unknown vulnerability in Sun Solaris 8.0 allows local users to cause a denial of service (kernel panic) via a program that uses /dev/poll, triggering a NULL pointer dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-ffpg-p6mg-8vj9/GHSA-ffpg-p6mg-8vj9.json b/advisories/unreviewed/2022/04/GHSA-ffpg-p6mg-8vj9/GHSA-ffpg-p6mg-8vj9.json index 32ce820f6f5..387890d8d12 100644 --- a/advisories/unreviewed/2022/04/GHSA-ffpg-p6mg-8vj9/GHSA-ffpg-p6mg-8vj9.json +++ b/advisories/unreviewed/2022/04/GHSA-ffpg-p6mg-8vj9/GHSA-ffpg-p6mg-8vj9.json @@ -7,12 +7,8 @@ "CVE-2002-2200" ], "details": "Benjamin Lefevre Dobermann FORUM 0.5 and earlier allows remote attackers to remotely include and execute malicious PHP files via the \"subpath\" variablein (1) entete.php, (2) enteteacceuil.php, (3) index.php, or (4) newtopic.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fgvj-fw8g-f65f/GHSA-fgvj-fw8g-f65f.json b/advisories/unreviewed/2022/04/GHSA-fgvj-fw8g-f65f/GHSA-fgvj-fw8g-f65f.json index a586624102e..0ec7e2771e9 100644 --- a/advisories/unreviewed/2022/04/GHSA-fgvj-fw8g-f65f/GHSA-fgvj-fw8g-f65f.json +++ b/advisories/unreviewed/2022/04/GHSA-fgvj-fw8g-f65f/GHSA-fgvj-fw8g-f65f.json @@ -7,12 +7,8 @@ "CVE-2002-2155" ], "details": "Format string vulnerability in the error handling of IRC invite responses for Trillian 0.725 and 0.73 allows remote IRC servers to execute arbitrary code via an invite to a channel with format string specifiers in the name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fjr2-cfrj-vv43/GHSA-fjr2-cfrj-vv43.json b/advisories/unreviewed/2022/04/GHSA-fjr2-cfrj-vv43/GHSA-fjr2-cfrj-vv43.json index 6776fe9bf55..959e730da51 100644 --- a/advisories/unreviewed/2022/04/GHSA-fjr2-cfrj-vv43/GHSA-fjr2-cfrj-vv43.json +++ b/advisories/unreviewed/2022/04/GHSA-fjr2-cfrj-vv43/GHSA-fjr2-cfrj-vv43.json @@ -7,12 +7,8 @@ "CVE-2002-2190" ], "details": "ArtsCore Studios CuteCast Forum 1.2 stores passwords in plaintext under the web document root, which allows remote attackers to obtain the passwords via an HTTP request to a .user file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fvgq-vmrp-gcc4/GHSA-fvgq-vmrp-gcc4.json b/advisories/unreviewed/2022/04/GHSA-fvgq-vmrp-gcc4/GHSA-fvgq-vmrp-gcc4.json index 82cc3b44bf5..b4676d88896 100644 --- a/advisories/unreviewed/2022/04/GHSA-fvgq-vmrp-gcc4/GHSA-fvgq-vmrp-gcc4.json +++ b/advisories/unreviewed/2022/04/GHSA-fvgq-vmrp-gcc4/GHSA-fvgq-vmrp-gcc4.json @@ -7,12 +7,8 @@ "CVE-2002-2241" ], "details": "Buffer overflow in httpd32.exe in Deerfield VisNetic WebSite before 3.5.15 allows remote attackers to cause a denial of service (crash) via a long HTTP OPTIONS request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fw8p-4ww4-73xx/GHSA-fw8p-4ww4-73xx.json b/advisories/unreviewed/2022/04/GHSA-fw8p-4ww4-73xx/GHSA-fw8p-4ww4-73xx.json index 57b3a411c24..6801dffaa8c 100644 --- a/advisories/unreviewed/2022/04/GHSA-fw8p-4ww4-73xx/GHSA-fw8p-4ww4-73xx.json +++ b/advisories/unreviewed/2022/04/GHSA-fw8p-4ww4-73xx/GHSA-fw8p-4ww4-73xx.json @@ -7,12 +7,8 @@ "CVE-2002-2368" ], "details": "Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitrary code via a long username to (1) the GetString function in proxy.c for the SOCKS5 module or (2) the HandleS4Connection function in proxy.c for the SOCKS4 module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-fx46-g8v4-w5fp/GHSA-fx46-g8v4-w5fp.json b/advisories/unreviewed/2022/04/GHSA-fx46-g8v4-w5fp/GHSA-fx46-g8v4-w5fp.json index de0c4e71f7e..eeb1056523d 100644 --- a/advisories/unreviewed/2022/04/GHSA-fx46-g8v4-w5fp/GHSA-fx46-g8v4-w5fp.json +++ b/advisories/unreviewed/2022/04/GHSA-fx46-g8v4-w5fp/GHSA-fx46-g8v4-w5fp.json @@ -7,12 +7,8 @@ "CVE-2002-2313" ], "details": "Eudora email client 5.1.1, with \"use Microsoft viewer\" enabled, allows remote attackers to execute arbitrary programs via an HTML email message containing a META refresh tag that references an embedded .mhtml file with ActiveX controls that execute a second embedded program, which is processed by Internet Explorer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-fxv5-cqrh-qvhc/GHSA-fxv5-cqrh-qvhc.json b/advisories/unreviewed/2022/04/GHSA-fxv5-cqrh-qvhc/GHSA-fxv5-cqrh-qvhc.json index 8e2b86e50d4..9e3da899f3f 100644 --- a/advisories/unreviewed/2022/04/GHSA-fxv5-cqrh-qvhc/GHSA-fxv5-cqrh-qvhc.json +++ b/advisories/unreviewed/2022/04/GHSA-fxv5-cqrh-qvhc/GHSA-fxv5-cqrh-qvhc.json @@ -7,12 +7,8 @@ "CVE-2002-2435" ], "details": "The Cascading Style Sheets (CSS) implementation in Microsoft Internet Explorer 8.0 and earlier does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-g25g-ccv7-8mg3/GHSA-g25g-ccv7-8mg3.json b/advisories/unreviewed/2022/04/GHSA-g25g-ccv7-8mg3/GHSA-g25g-ccv7-8mg3.json index ec5d7f221a9..b9efde2c20d 100644 --- a/advisories/unreviewed/2022/04/GHSA-g25g-ccv7-8mg3/GHSA-g25g-ccv7-8mg3.json +++ b/advisories/unreviewed/2022/04/GHSA-g25g-ccv7-8mg3/GHSA-g25g-ccv7-8mg3.json @@ -7,12 +7,8 @@ "CVE-2002-2192" ], "details": "Cross-site scripting (XSS) vulnerability in Perception LiteServe 2.0.1 allows remote attackers to execute arbitrary web script via (1) a Host: header when DNS wildcards are supported or (2) the query string in a \"dir\" request to indexed folders.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-g2f2-78p6-vp5c/GHSA-g2f2-78p6-vp5c.json b/advisories/unreviewed/2022/04/GHSA-g2f2-78p6-vp5c/GHSA-g2f2-78p6-vp5c.json index f181238390a..5be1bbc2496 100644 --- a/advisories/unreviewed/2022/04/GHSA-g2f2-78p6-vp5c/GHSA-g2f2-78p6-vp5c.json +++ b/advisories/unreviewed/2022/04/GHSA-g2f2-78p6-vp5c/GHSA-g2f2-78p6-vp5c.json @@ -7,12 +7,8 @@ "CVE-2002-2250" ], "details": "Multiple buffer overflows in Sybase Adaptive Server 12.0 and 12.5 allow remote attackers to execute arbitrary code via (1) a long parameter to the xp_freedll extended stored procedure or (2) a long database name argument to the DBCC CHECKVERIFY function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-g7rf-35vv-9pqx/GHSA-g7rf-35vv-9pqx.json b/advisories/unreviewed/2022/04/GHSA-g7rf-35vv-9pqx/GHSA-g7rf-35vv-9pqx.json index da6b58e201a..8b3c23314cc 100644 --- a/advisories/unreviewed/2022/04/GHSA-g7rf-35vv-9pqx/GHSA-g7rf-35vv-9pqx.json +++ b/advisories/unreviewed/2022/04/GHSA-g7rf-35vv-9pqx/GHSA-g7rf-35vv-9pqx.json @@ -7,12 +7,8 @@ "CVE-2002-2279" ], "details": "Unspecified vulnerability in the bind function in config.inc of aldap 0.09 allows remote attackers to authenticate with Manager permissions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-g8x8-2fjc-j776/GHSA-g8x8-2fjc-j776.json b/advisories/unreviewed/2022/04/GHSA-g8x8-2fjc-j776/GHSA-g8x8-2fjc-j776.json index 1ff0238498f..9f30e495647 100644 --- a/advisories/unreviewed/2022/04/GHSA-g8x8-2fjc-j776/GHSA-g8x8-2fjc-j776.json +++ b/advisories/unreviewed/2022/04/GHSA-g8x8-2fjc-j776/GHSA-g8x8-2fjc-j776.json @@ -7,12 +7,8 @@ "CVE-2002-2274" ], "details": "akfingerd 0.5 allows local users to read arbitrary files as the akfingerd user (nobody) via a symlink attack on the .plan file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-g939-xx53-374c/GHSA-g939-xx53-374c.json b/advisories/unreviewed/2022/04/GHSA-g939-xx53-374c/GHSA-g939-xx53-374c.json index dc6e0897abe..b18d3044aaa 100644 --- a/advisories/unreviewed/2022/04/GHSA-g939-xx53-374c/GHSA-g939-xx53-374c.json +++ b/advisories/unreviewed/2022/04/GHSA-g939-xx53-374c/GHSA-g939-xx53-374c.json @@ -7,12 +7,8 @@ "CVE-2002-2331" ], "details": "W3Mail 1.0.2 through 1.0.5 with server side scripting (SSI) enabled in the attachments directory does not properly restrict the types of files that can be uploaded as attachments, which allows remote attackers to execute arbitrary code by sending code in MIME attachments, then requesting the attachments.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-g98v-vmx4-2gqc/GHSA-g98v-vmx4-2gqc.json b/advisories/unreviewed/2022/04/GHSA-g98v-vmx4-2gqc/GHSA-g98v-vmx4-2gqc.json index 214cf4b21d4..1a11aa01c22 100644 --- a/advisories/unreviewed/2022/04/GHSA-g98v-vmx4-2gqc/GHSA-g98v-vmx4-2gqc.json +++ b/advisories/unreviewed/2022/04/GHSA-g98v-vmx4-2gqc/GHSA-g98v-vmx4-2gqc.json @@ -7,12 +7,8 @@ "CVE-2002-2431" ], "details": "Unspecified vulnerability in GoAhead WebServer before 2.1.4 allows remote attackers to cause \"incorrect behavior\" via unknown \"malicious code,\" related to incorrect use of the socketInputBuffered function by sockGen.c.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gc39-q3h7-g7mp/GHSA-gc39-q3h7-g7mp.json b/advisories/unreviewed/2022/04/GHSA-gc39-q3h7-g7mp/GHSA-gc39-q3h7-g7mp.json index 892d3d9d366..bf7b0872c9f 100644 --- a/advisories/unreviewed/2022/04/GHSA-gc39-q3h7-g7mp/GHSA-gc39-q3h7-g7mp.json +++ b/advisories/unreviewed/2022/04/GHSA-gc39-q3h7-g7mp/GHSA-gc39-q3h7-g7mp.json @@ -7,12 +7,8 @@ "CVE-2002-2369" ], "details": "Perception LiteServe 2.0 allows remote attackers to read password protected files via a leading \"/./\" in a URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-gf29-8w4w-2hfm/GHSA-gf29-8w4w-2hfm.json b/advisories/unreviewed/2022/04/GHSA-gf29-8w4w-2hfm/GHSA-gf29-8w4w-2hfm.json index a29d950db55..b181ccfdcae 100644 --- a/advisories/unreviewed/2022/04/GHSA-gf29-8w4w-2hfm/GHSA-gf29-8w4w-2hfm.json +++ b/advisories/unreviewed/2022/04/GHSA-gf29-8w4w-2hfm/GHSA-gf29-8w4w-2hfm.json @@ -7,12 +7,8 @@ "CVE-2002-2395" ], "details": "InterScan VirusWall 3.52 for Windows allows remote attackers to bypass virus protection and possibly execute arbitrary code via HTTP 1.1 gzip content encoding.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gj5j-88f6-8jwm/GHSA-gj5j-88f6-8jwm.json b/advisories/unreviewed/2022/04/GHSA-gj5j-88f6-8jwm/GHSA-gj5j-88f6-8jwm.json index 2b1f1e0e10a..9c60b8b7f06 100644 --- a/advisories/unreviewed/2022/04/GHSA-gj5j-88f6-8jwm/GHSA-gj5j-88f6-8jwm.json +++ b/advisories/unreviewed/2022/04/GHSA-gj5j-88f6-8jwm/GHSA-gj5j-88f6-8jwm.json @@ -7,12 +7,8 @@ "CVE-2002-2163" ], "details": "KvPoll 1.1 allows remote authenticated users to vote more than once by setting the \"already_voted\" cookie by various methods, including a direct call to clear_cookies.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gp53-vg4q-8ghp/GHSA-gp53-vg4q-8ghp.json b/advisories/unreviewed/2022/04/GHSA-gp53-vg4q-8ghp/GHSA-gp53-vg4q-8ghp.json index cd3434de72a..82aa3fd4a4f 100644 --- a/advisories/unreviewed/2022/04/GHSA-gp53-vg4q-8ghp/GHSA-gp53-vg4q-8ghp.json +++ b/advisories/unreviewed/2022/04/GHSA-gp53-vg4q-8ghp/GHSA-gp53-vg4q-8ghp.json @@ -7,12 +7,8 @@ "CVE-2002-2267" ], "details": "bogopass in bogofilter 0.9.0.4 allows local users to overwrite arbitrary files via a symlink attack on the bogopass temporary file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gp5f-5w6g-9rh2/GHSA-gp5f-5w6g-9rh2.json b/advisories/unreviewed/2022/04/GHSA-gp5f-5w6g-9rh2/GHSA-gp5f-5w6g-9rh2.json index be7d1b86126..d60bf98018f 100644 --- a/advisories/unreviewed/2022/04/GHSA-gp5f-5w6g-9rh2/GHSA-gp5f-5w6g-9rh2.json +++ b/advisories/unreviewed/2022/04/GHSA-gp5f-5w6g-9rh2/GHSA-gp5f-5w6g-9rh2.json @@ -7,12 +7,8 @@ "CVE-2002-2295" ], "details": "Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) a 1024-byte TCP stream message, which triggers an off-by-one buffer overflow, or (2) a long method name in an HTTP request, (3) a long version number in an HTTP request, (4) a long User-Agent header, or (5) a long file path.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-gq7c-wvh6-gx5q/GHSA-gq7c-wvh6-gx5q.json b/advisories/unreviewed/2022/04/GHSA-gq7c-wvh6-gx5q/GHSA-gq7c-wvh6-gx5q.json index af1a51ef1f4..f98127db282 100644 --- a/advisories/unreviewed/2022/04/GHSA-gq7c-wvh6-gx5q/GHSA-gq7c-wvh6-gx5q.json +++ b/advisories/unreviewed/2022/04/GHSA-gq7c-wvh6-gx5q/GHSA-gq7c-wvh6-gx5q.json @@ -7,12 +7,8 @@ "CVE-2002-2433" ], "details": "NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote authenticated users to cause a denial of service (abend) via a crafted ABOR command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-gqjj-vwj4-p2mg/GHSA-gqjj-vwj4-p2mg.json b/advisories/unreviewed/2022/04/GHSA-gqjj-vwj4-p2mg/GHSA-gqjj-vwj4-p2mg.json index ae0ae4a0908..99440e54b1f 100644 --- a/advisories/unreviewed/2022/04/GHSA-gqjj-vwj4-p2mg/GHSA-gqjj-vwj4-p2mg.json +++ b/advisories/unreviewed/2022/04/GHSA-gqjj-vwj4-p2mg/GHSA-gqjj-vwj4-p2mg.json @@ -7,12 +7,8 @@ "CVE-2002-2319" ], "details": "Static code injection vulnerability in users.php in MySimpleNews allows remote attackers to inject arbitrary PHP code and HTML via the (1) LOGIN, (2) DATA, and (3) MESS parameters, which are inserted into news.php3.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-gqjw-c3j9-r345/GHSA-gqjw-c3j9-r345.json b/advisories/unreviewed/2022/04/GHSA-gqjw-c3j9-r345/GHSA-gqjw-c3j9-r345.json index 0230d395770..69745a8bcd3 100644 --- a/advisories/unreviewed/2022/04/GHSA-gqjw-c3j9-r345/GHSA-gqjw-c3j9-r345.json +++ b/advisories/unreviewed/2022/04/GHSA-gqjw-c3j9-r345/GHSA-gqjw-c3j9-r345.json @@ -7,12 +7,8 @@ "CVE-2002-2217" ], "details": "Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal (WSC-WebPortal) 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) l parameter to customize.php or the (2) pg parameter to index.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-gvcw-3gfv-mg4v/GHSA-gvcw-3gfv-mg4v.json b/advisories/unreviewed/2022/04/GHSA-gvcw-3gfv-mg4v/GHSA-gvcw-3gfv-mg4v.json index e4579ac7e43..fd30b9d7fc4 100644 --- a/advisories/unreviewed/2022/04/GHSA-gvcw-3gfv-mg4v/GHSA-gvcw-3gfv-mg4v.json +++ b/advisories/unreviewed/2022/04/GHSA-gvcw-3gfv-mg4v/GHSA-gvcw-3gfv-mg4v.json @@ -7,12 +7,8 @@ "CVE-2002-2445" ], "details": "GE Healthcare Millennium MG, NC, and MyoSIGHT has a default password of (1) root.genie for the root user, (2) \"service.\" for the service user, (3) admin.genie for the admin user, (4) reboot for the reboot user, and (5) shutdown for the shutdown user, which has unspecified impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h76m-769p-5qpp/GHSA-h76m-769p-5qpp.json b/advisories/unreviewed/2022/04/GHSA-h76m-769p-5qpp/GHSA-h76m-769p-5qpp.json index 99adbf0022a..74b27e540ca 100644 --- a/advisories/unreviewed/2022/04/GHSA-h76m-769p-5qpp/GHSA-h76m-769p-5qpp.json +++ b/advisories/unreviewed/2022/04/GHSA-h76m-769p-5qpp/GHSA-h76m-769p-5qpp.json @@ -7,12 +7,8 @@ "CVE-2002-2318" ], "details": "Cross-site scripting (XSS) vulnerability in Falcon web server 2.0.0.1009 through 2.0.0.1021 allows remote attackers to inject arbitrary web script or HTML via the URI, which is inserted into 301 error messages and executed by 404 error messages.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-h7j3-4j9c-xrqr/GHSA-h7j3-4j9c-xrqr.json b/advisories/unreviewed/2022/04/GHSA-h7j3-4j9c-xrqr/GHSA-h7j3-4j9c-xrqr.json index ca92445b30d..677c794df08 100644 --- a/advisories/unreviewed/2022/04/GHSA-h7j3-4j9c-xrqr/GHSA-h7j3-4j9c-xrqr.json +++ b/advisories/unreviewed/2022/04/GHSA-h7j3-4j9c-xrqr/GHSA-h7j3-4j9c-xrqr.json @@ -7,12 +7,8 @@ "CVE-2002-2172" ], "details": "Informed (1) Designer and (2) Filler 3.05 does not zero out newly allocated disk blocks as an encrypted file grows in size, which may allow attackers to obtain sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h8c3-8522-vxc6/GHSA-h8c3-8522-vxc6.json b/advisories/unreviewed/2022/04/GHSA-h8c3-8522-vxc6/GHSA-h8c3-8522-vxc6.json index b1200e3f04d..f9ce42937e2 100644 --- a/advisories/unreviewed/2022/04/GHSA-h8c3-8522-vxc6/GHSA-h8c3-8522-vxc6.json +++ b/advisories/unreviewed/2022/04/GHSA-h8c3-8522-vxc6/GHSA-h8c3-8522-vxc6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-h8q3-j36p-rvmm/GHSA-h8q3-j36p-rvmm.json b/advisories/unreviewed/2022/04/GHSA-h8q3-j36p-rvmm/GHSA-h8q3-j36p-rvmm.json index e08270545f7..10a23222aba 100644 --- a/advisories/unreviewed/2022/04/GHSA-h8q3-j36p-rvmm/GHSA-h8q3-j36p-rvmm.json +++ b/advisories/unreviewed/2022/04/GHSA-h8q3-j36p-rvmm/GHSA-h8q3-j36p-rvmm.json @@ -7,12 +7,8 @@ "CVE-2002-2269" ], "details": "Directory traversal vulnerability in Webster HTTP Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-h964-f22q-97h6/GHSA-h964-f22q-97h6.json b/advisories/unreviewed/2022/04/GHSA-h964-f22q-97h6/GHSA-h964-f22q-97h6.json index 338514ec2f9..8497051fea9 100644 --- a/advisories/unreviewed/2022/04/GHSA-h964-f22q-97h6/GHSA-h964-f22q-97h6.json +++ b/advisories/unreviewed/2022/04/GHSA-h964-f22q-97h6/GHSA-h964-f22q-97h6.json @@ -7,12 +7,8 @@ "CVE-2002-2234" ], "details": "NetScreen ScreenOS before 4.0.1 allows remote attackers to bypass the Malicious-URL blocking feature by splitting the URL into fragmented IP requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hcgh-5hrm-xj4g/GHSA-hcgh-5hrm-xj4g.json b/advisories/unreviewed/2022/04/GHSA-hcgh-5hrm-xj4g/GHSA-hcgh-5hrm-xj4g.json index 4b399326ba0..995be4e27a4 100644 --- a/advisories/unreviewed/2022/04/GHSA-hcgh-5hrm-xj4g/GHSA-hcgh-5hrm-xj4g.json +++ b/advisories/unreviewed/2022/04/GHSA-hcgh-5hrm-xj4g/GHSA-hcgh-5hrm-xj4g.json @@ -7,12 +7,8 @@ "CVE-2002-2310" ], "details": "ClickCartPro 4.0 stores the admin_user.db data file under the web document root with insufficient access control on servers other than Apache, which allows remote attackers to obtain usernames and passwords.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hhm6-95hr-m4gf/GHSA-hhm6-95hr-m4gf.json b/advisories/unreviewed/2022/04/GHSA-hhm6-95hr-m4gf/GHSA-hhm6-95hr-m4gf.json index 269c825131f..d243e175935 100644 --- a/advisories/unreviewed/2022/04/GHSA-hhm6-95hr-m4gf/GHSA-hhm6-95hr-m4gf.json +++ b/advisories/unreviewed/2022/04/GHSA-hhm6-95hr-m4gf/GHSA-hhm6-95hr-m4gf.json @@ -7,12 +7,8 @@ "CVE-2002-2184" ], "details": "Digi-Net Technologies DigiChat 3.5 allows chat users to obtain the IP addresses of other chat users via a \"Showip\" parameter in the chat applet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hjm7-rrwp-qw3f/GHSA-hjm7-rrwp-qw3f.json b/advisories/unreviewed/2022/04/GHSA-hjm7-rrwp-qw3f/GHSA-hjm7-rrwp-qw3f.json index 9d841078ac3..d6747e53714 100644 --- a/advisories/unreviewed/2022/04/GHSA-hjm7-rrwp-qw3f/GHSA-hjm7-rrwp-qw3f.json +++ b/advisories/unreviewed/2022/04/GHSA-hjm7-rrwp-qw3f/GHSA-hjm7-rrwp-qw3f.json @@ -7,12 +7,8 @@ "CVE-2002-2299" ], "details": "PHP remote file inclusion vulnerability in thatfile.php in Thatware 0.3 through 0.5.2 allows remote attackers to execute arbitrary PHP code via the root_path parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-hp7p-w4wr-3fxr/GHSA-hp7p-w4wr-3fxr.json b/advisories/unreviewed/2022/04/GHSA-hp7p-w4wr-3fxr/GHSA-hp7p-w4wr-3fxr.json index 9ec78f20da3..7eb364e3adc 100644 --- a/advisories/unreviewed/2022/04/GHSA-hp7p-w4wr-3fxr/GHSA-hp7p-w4wr-3fxr.json +++ b/advisories/unreviewed/2022/04/GHSA-hp7p-w4wr-3fxr/GHSA-hp7p-w4wr-3fxr.json @@ -7,12 +7,8 @@ "CVE-2002-2298" ], "details": "PHP remote file inclusion vulnerability in config.php in Thatware 0.3 through 0.5.3 allows remote attackers to execute arbitrary PHP code via the root_path parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-hpg8-x8xf-fcp2/GHSA-hpg8-x8xf-fcp2.json b/advisories/unreviewed/2022/04/GHSA-hpg8-x8xf-fcp2/GHSA-hpg8-x8xf-fcp2.json index 11fe0fb590b..787ad8bdb35 100644 --- a/advisories/unreviewed/2022/04/GHSA-hpg8-x8xf-fcp2/GHSA-hpg8-x8xf-fcp2.json +++ b/advisories/unreviewed/2022/04/GHSA-hpg8-x8xf-fcp2/GHSA-hpg8-x8xf-fcp2.json @@ -7,12 +7,8 @@ "CVE-2002-2351" ], "details": "Eudora 5.1 allows remote attackers to bypass security warnings and possibly execute arbitrary code via attachments with names containing a trailing \".\" (dot).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-hpv6-fw9f-6844/GHSA-hpv6-fw9f-6844.json b/advisories/unreviewed/2022/04/GHSA-hpv6-fw9f-6844/GHSA-hpv6-fw9f-6844.json index 30eaafe3797..479f9f379b7 100644 --- a/advisories/unreviewed/2022/04/GHSA-hpv6-fw9f-6844/GHSA-hpv6-fw9f-6844.json +++ b/advisories/unreviewed/2022/04/GHSA-hpv6-fw9f-6844/GHSA-hpv6-fw9f-6844.json @@ -7,12 +7,8 @@ "CVE-2002-2309" ], "details": "php.exe in PHP 3.0 through 4.2.2, when running on Apache, does not terminate properly, which allows remote attackers to cause a denial of service via a direct request without arguments.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hq88-727q-3mvw/GHSA-hq88-727q-3mvw.json b/advisories/unreviewed/2022/04/GHSA-hq88-727q-3mvw/GHSA-hq88-727q-3mvw.json index c852949b187..59c9738d0f8 100644 --- a/advisories/unreviewed/2022/04/GHSA-hq88-727q-3mvw/GHSA-hq88-727q-3mvw.json +++ b/advisories/unreviewed/2022/04/GHSA-hq88-727q-3mvw/GHSA-hq88-727q-3mvw.json @@ -7,12 +7,8 @@ "CVE-2002-2173" ], "details": "Buffer overflow in the IRC module of Trillian 0.725 and 0.73 allowing remote attackers to execute arbitrary code via a long DCC Chat message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hqj5-f42j-pmfp/GHSA-hqj5-f42j-pmfp.json b/advisories/unreviewed/2022/04/GHSA-hqj5-f42j-pmfp/GHSA-hqj5-f42j-pmfp.json index 87c84d53712..f0341363422 100644 --- a/advisories/unreviewed/2022/04/GHSA-hqj5-f42j-pmfp/GHSA-hqj5-f42j-pmfp.json +++ b/advisories/unreviewed/2022/04/GHSA-hqj5-f42j-pmfp/GHSA-hqj5-f42j-pmfp.json @@ -7,12 +7,8 @@ "CVE-2002-2373" ], "details": "The default configuration of the TCP/IP printer configuration utility in Apple LaserWriter 12/640 PS printer contains a blank Telnet password, which allows remote attackers to gain access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-hvc7-gmjr-xh38/GHSA-hvc7-gmjr-xh38.json b/advisories/unreviewed/2022/04/GHSA-hvc7-gmjr-xh38/GHSA-hvc7-gmjr-xh38.json index ec6073b2098..ebbdf9b69a7 100644 --- a/advisories/unreviewed/2022/04/GHSA-hvc7-gmjr-xh38/GHSA-hvc7-gmjr-xh38.json +++ b/advisories/unreviewed/2022/04/GHSA-hvc7-gmjr-xh38/GHSA-hvc7-gmjr-xh38.json @@ -7,12 +7,8 @@ "CVE-2002-2254" ], "details": "The experimental IP packet queuing feature in Netfilter / IPTables in Linux kernel 2.4 up to 2.4.19 and 2.5 up to 2.5.31, when a privileged process exits and network traffic is not being queued, may allow a later process with the same Process ID (PID) to access certain network traffic that would otherwise be restricted.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-j5hm-v5hc-jgjr/GHSA-j5hm-v5hc-jgjr.json b/advisories/unreviewed/2022/04/GHSA-j5hm-v5hc-jgjr/GHSA-j5hm-v5hc-jgjr.json index d440017c53f..94d8b095480 100644 --- a/advisories/unreviewed/2022/04/GHSA-j5hm-v5hc-jgjr/GHSA-j5hm-v5hc-jgjr.json +++ b/advisories/unreviewed/2022/04/GHSA-j5hm-v5hc-jgjr/GHSA-j5hm-v5hc-jgjr.json @@ -7,12 +7,8 @@ "CVE-2002-2436" ], "details": "The Cascading Style Sheets (CSS) implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly handle the :visited pseudo-class, which allows remote attackers to obtain sensitive information about visited web pages via a crafted HTML document, a related issue to CVE-2010-2264.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-j6vx-7p4h-4qp4/GHSA-j6vx-7p4h-4qp4.json b/advisories/unreviewed/2022/04/GHSA-j6vx-7p4h-4qp4/GHSA-j6vx-7p4h-4qp4.json index 0d50399e6c9..cb34f07643c 100644 --- a/advisories/unreviewed/2022/04/GHSA-j6vx-7p4h-4qp4/GHSA-j6vx-7p4h-4qp4.json +++ b/advisories/unreviewed/2022/04/GHSA-j6vx-7p4h-4qp4/GHSA-j6vx-7p4h-4qp4.json @@ -7,12 +7,8 @@ "CVE-2002-2237" ], "details": "tftp32 TFTP server 2.21 and earlier allows remote attackers to cause a denial of service via a GET request with a DOS device name such as com1 or aux.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-j6wf-9hrq-mg2h/GHSA-j6wf-9hrq-mg2h.json b/advisories/unreviewed/2022/04/GHSA-j6wf-9hrq-mg2h/GHSA-j6wf-9hrq-mg2h.json index dbe62280fa8..f78628c121c 100644 --- a/advisories/unreviewed/2022/04/GHSA-j6wf-9hrq-mg2h/GHSA-j6wf-9hrq-mg2h.json +++ b/advisories/unreviewed/2022/04/GHSA-j6wf-9hrq-mg2h/GHSA-j6wf-9hrq-mg2h.json @@ -7,12 +7,8 @@ "CVE-2002-2305" ], "details": "SQL injection vulnerability in agentadmin.php in Immobilier allows remote attackers to execute arbitrary SQL commands via the (1) agentname or (2) agentpassword parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-jc89-q7gp-883v/GHSA-jc89-q7gp-883v.json b/advisories/unreviewed/2022/04/GHSA-jc89-q7gp-883v/GHSA-jc89-q7gp-883v.json index f6b65795736..298b4796415 100644 --- a/advisories/unreviewed/2022/04/GHSA-jc89-q7gp-883v/GHSA-jc89-q7gp-883v.json +++ b/advisories/unreviewed/2022/04/GHSA-jc89-q7gp-883v/GHSA-jc89-q7gp-883v.json @@ -7,12 +7,8 @@ "CVE-2002-2350" ], "details": "Cross-site scripting (XSS) vulnerability in z_user_show.php in dbtreelistproperty_method.php in Zorum 2.4 allows remote attackers to inject arbitrary web script or HTML via the class parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-jffx-25jv-j63f/GHSA-jffx-25jv-j63f.json b/advisories/unreviewed/2022/04/GHSA-jffx-25jv-j63f/GHSA-jffx-25jv-j63f.json index 3ca8bcc8cda..5513a26d475 100644 --- a/advisories/unreviewed/2022/04/GHSA-jffx-25jv-j63f/GHSA-jffx-25jv-j63f.json +++ b/advisories/unreviewed/2022/04/GHSA-jffx-25jv-j63f/GHSA-jffx-25jv-j63f.json @@ -7,12 +7,8 @@ "CVE-2002-2337" ], "details": "Kaspersky Anti-Hacker 1.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jfx5-q9mv-5m59/GHSA-jfx5-q9mv-5m59.json b/advisories/unreviewed/2022/04/GHSA-jfx5-q9mv-5m59/GHSA-jfx5-q9mv-5m59.json index 0aeef96570f..4a96ba6a6e5 100644 --- a/advisories/unreviewed/2022/04/GHSA-jfx5-q9mv-5m59/GHSA-jfx5-q9mv-5m59.json +++ b/advisories/unreviewed/2022/04/GHSA-jfx5-q9mv-5m59/GHSA-jfx5-q9mv-5m59.json @@ -7,12 +7,8 @@ "CVE-2002-2347" ], "details": "Cross-site scripting (XSS) vulnerability in Oracle Java Server Page (OJSP) demo files (1) hellouser.jsp, (2) welcomeuser.jsp and (3) usebean.jsp in Oracle 9i Application Server 9.0.2, 1.0.2.2, 1.0.2.1s and 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the text entry field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-jm5c-2v59-m834/GHSA-jm5c-2v59-m834.json b/advisories/unreviewed/2022/04/GHSA-jm5c-2v59-m834/GHSA-jm5c-2v59-m834.json index 9f30e762ddc..0866af726f5 100644 --- a/advisories/unreviewed/2022/04/GHSA-jm5c-2v59-m834/GHSA-jm5c-2v59-m834.json +++ b/advisories/unreviewed/2022/04/GHSA-jm5c-2v59-m834/GHSA-jm5c-2v59-m834.json @@ -7,12 +7,8 @@ "CVE-2002-2336" ], "details": "Norton Personal Firewall 2002 4.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jrh8-qcq7-8h6j/GHSA-jrh8-qcq7-8h6j.json b/advisories/unreviewed/2022/04/GHSA-jrh8-qcq7-8h6j/GHSA-jrh8-qcq7-8h6j.json index 640329837fe..e66fb3c1153 100644 --- a/advisories/unreviewed/2022/04/GHSA-jrh8-qcq7-8h6j/GHSA-jrh8-qcq7-8h6j.json +++ b/advisories/unreviewed/2022/04/GHSA-jrh8-qcq7-8h6j/GHSA-jrh8-qcq7-8h6j.json @@ -7,12 +7,8 @@ "CVE-2002-2384" ], "details": "hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2 registry key, which allows local users to gain access to user accounts and steal phone service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-jx9c-x6x6-hq5m/GHSA-jx9c-x6x6-hq5m.json b/advisories/unreviewed/2022/04/GHSA-jx9c-x6x6-hq5m/GHSA-jx9c-x6x6-hq5m.json index 216a9b98e70..33a85c50370 100644 --- a/advisories/unreviewed/2022/04/GHSA-jx9c-x6x6-hq5m/GHSA-jx9c-x6x6-hq5m.json +++ b/advisories/unreviewed/2022/04/GHSA-jx9c-x6x6-hq5m/GHSA-jx9c-x6x6-hq5m.json @@ -7,12 +7,8 @@ "CVE-2002-2391" ], "details": "SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote attackers to execute arbitrary SQL commands via the roomid parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-jxvg-5rhp-fxpv/GHSA-jxvg-5rhp-fxpv.json b/advisories/unreviewed/2022/04/GHSA-jxvg-5rhp-fxpv/GHSA-jxvg-5rhp-fxpv.json index c63f384dd78..73ae5211479 100644 --- a/advisories/unreviewed/2022/04/GHSA-jxvg-5rhp-fxpv/GHSA-jxvg-5rhp-fxpv.json +++ b/advisories/unreviewed/2022/04/GHSA-jxvg-5rhp-fxpv/GHSA-jxvg-5rhp-fxpv.json @@ -7,12 +7,8 @@ "CVE-2002-2193" ], "details": "Cross-site scripting (XSS) vulnerability in mojo.cgi for Mojo Mail 2.7 allows remote attackers to inject arbitrary web script via the email parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m2mq-qhg4-vp92/GHSA-m2mq-qhg4-vp92.json b/advisories/unreviewed/2022/04/GHSA-m2mq-qhg4-vp92/GHSA-m2mq-qhg4-vp92.json index 51852d749ef..025de41b0c0 100644 --- a/advisories/unreviewed/2022/04/GHSA-m2mq-qhg4-vp92/GHSA-m2mq-qhg4-vp92.json +++ b/advisories/unreviewed/2022/04/GHSA-m2mq-qhg4-vp92/GHSA-m2mq-qhg4-vp92.json @@ -7,12 +7,8 @@ "CVE-2002-2207" ], "details": "Buffer overflow in ssldump 0.9b2 and earlier, when running in decryption mode, allows remote attackers to execute arbitrary code via a long RSA PreMasterSecret.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m5c5-fm3f-3wm7/GHSA-m5c5-fm3f-3wm7.json b/advisories/unreviewed/2022/04/GHSA-m5c5-fm3f-3wm7/GHSA-m5c5-fm3f-3wm7.json index 111e7020c4a..bb62a90b16f 100644 --- a/advisories/unreviewed/2022/04/GHSA-m5c5-fm3f-3wm7/GHSA-m5c5-fm3f-3wm7.json +++ b/advisories/unreviewed/2022/04/GHSA-m5c5-fm3f-3wm7/GHSA-m5c5-fm3f-3wm7.json @@ -7,12 +7,8 @@ "CVE-2002-2352" ], "details": "The NBActiveX.ocx ActiveX control in NeoBook 4 allows remote attackers to install and execute arbitrary programs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m5rc-37f7-4gfg/GHSA-m5rc-37f7-4gfg.json b/advisories/unreviewed/2022/04/GHSA-m5rc-37f7-4gfg/GHSA-m5rc-37f7-4gfg.json index f654d68cb60..57ae1238ce9 100644 --- a/advisories/unreviewed/2022/04/GHSA-m5rc-37f7-4gfg/GHSA-m5rc-37f7-4gfg.json +++ b/advisories/unreviewed/2022/04/GHSA-m5rc-37f7-4gfg/GHSA-m5rc-37f7-4gfg.json @@ -7,12 +7,8 @@ "CVE-2002-2367" ], "details": "Off-by-one buffer overflow in NEC SOCKS5 1.0 r11 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long hostname.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-m733-2g3q-cc5v/GHSA-m733-2g3q-cc5v.json b/advisories/unreviewed/2022/04/GHSA-m733-2g3q-cc5v/GHSA-m733-2g3q-cc5v.json index 0f4533ffa3d..1608523c324 100644 --- a/advisories/unreviewed/2022/04/GHSA-m733-2g3q-cc5v/GHSA-m733-2g3q-cc5v.json +++ b/advisories/unreviewed/2022/04/GHSA-m733-2g3q-cc5v/GHSA-m733-2g3q-cc5v.json @@ -7,12 +7,8 @@ "CVE-2002-2252" ], "details": "SQL injection vulnerability in auth.inc.php in Thatware 0.5.0 and earlier allows remote attackers to execute arbitrary SQL commands via a base64-encoded user parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-m74v-f72c-hfvv/GHSA-m74v-f72c-hfvv.json b/advisories/unreviewed/2022/04/GHSA-m74v-f72c-hfvv/GHSA-m74v-f72c-hfvv.json index 8fc89a3a846..6472efadf3d 100644 --- a/advisories/unreviewed/2022/04/GHSA-m74v-f72c-hfvv/GHSA-m74v-f72c-hfvv.json +++ b/advisories/unreviewed/2022/04/GHSA-m74v-f72c-hfvv/GHSA-m74v-f72c-hfvv.json @@ -7,12 +7,8 @@ "CVE-2002-2346" ], "details": "phpBB 2.0 through 2.0.3 generates names for uploaded avatar files with the hex-encoded IP address of the client system, which allows remote attackers to obtain client IP addresses.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-m82c-hp7m-9pcc/GHSA-m82c-hp7m-9pcc.json b/advisories/unreviewed/2022/04/GHSA-m82c-hp7m-9pcc/GHSA-m82c-hp7m-9pcc.json index 6b794689756..e19cd431b3c 100644 --- a/advisories/unreviewed/2022/04/GHSA-m82c-hp7m-9pcc/GHSA-m82c-hp7m-9pcc.json +++ b/advisories/unreviewed/2022/04/GHSA-m82c-hp7m-9pcc/GHSA-m82c-hp7m-9pcc.json @@ -7,12 +7,8 @@ "CVE-2002-2187" ], "details": "Unknown \"file disclosure\" vulnerability in Macromedia JRun 3.0, 3.1, and 4.0, related to a log file or jrun.ini, with unknown impact.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-m9vh-455f-hcmr/GHSA-m9vh-455f-hcmr.json b/advisories/unreviewed/2022/04/GHSA-m9vh-455f-hcmr/GHSA-m9vh-455f-hcmr.json index b77c30349f0..ae61217ed01 100644 --- a/advisories/unreviewed/2022/04/GHSA-m9vh-455f-hcmr/GHSA-m9vh-455f-hcmr.json +++ b/advisories/unreviewed/2022/04/GHSA-m9vh-455f-hcmr/GHSA-m9vh-455f-hcmr.json @@ -7,12 +7,8 @@ "CVE-2002-2153" ], "details": "Format string vulnerability in the administrative pages of the PL/SQL module for Oracle Application Server 4.0.8 and 4.0.8 2 allows remote attackers to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mfpf-xc5w-rg9v/GHSA-mfpf-xc5w-rg9v.json b/advisories/unreviewed/2022/04/GHSA-mfpf-xc5w-rg9v/GHSA-mfpf-xc5w-rg9v.json index 41139116ec9..bea7e90adac 100644 --- a/advisories/unreviewed/2022/04/GHSA-mfpf-xc5w-rg9v/GHSA-mfpf-xc5w-rg9v.json +++ b/advisories/unreviewed/2022/04/GHSA-mfpf-xc5w-rg9v/GHSA-mfpf-xc5w-rg9v.json @@ -7,12 +7,8 @@ "CVE-2002-2281" ], "details": "Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java commands via an applet that uses a jump call, which is not correctly compiled by the JIT compiler.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-mh8p-3247-42xq/GHSA-mh8p-3247-42xq.json b/advisories/unreviewed/2022/04/GHSA-mh8p-3247-42xq/GHSA-mh8p-3247-42xq.json index b82c2f55ad2..3ee56f5941c 100644 --- a/advisories/unreviewed/2022/04/GHSA-mh8p-3247-42xq/GHSA-mh8p-3247-42xq.json +++ b/advisories/unreviewed/2022/04/GHSA-mh8p-3247-42xq/GHSA-mh8p-3247-42xq.json @@ -7,12 +7,8 @@ "CVE-2002-2296" ], "details": "Cross-site scripting (XSS) vulnerability in YaBB.pl in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 allows remote attackers to inject arbitrary web script or HTML via the num parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-mhxg-442g-whwc/GHSA-mhxg-442g-whwc.json b/advisories/unreviewed/2022/04/GHSA-mhxg-442g-whwc/GHSA-mhxg-442g-whwc.json index 2cf7104e74b..99e1d20263a 100644 --- a/advisories/unreviewed/2022/04/GHSA-mhxg-442g-whwc/GHSA-mhxg-442g-whwc.json +++ b/advisories/unreviewed/2022/04/GHSA-mhxg-442g-whwc/GHSA-mhxg-442g-whwc.json @@ -7,12 +7,8 @@ "CVE-2002-2388" ], "details": "Buffer overflow in INweb POP3 mail server 2.01 allows remote attackers to cause a denial of service (crash) via a long HELO command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-mm4x-29mc-vcvg/GHSA-mm4x-29mc-vcvg.json b/advisories/unreviewed/2022/04/GHSA-mm4x-29mc-vcvg/GHSA-mm4x-29mc-vcvg.json index 36ea32e5623..c9ab75f5006 100644 --- a/advisories/unreviewed/2022/04/GHSA-mm4x-29mc-vcvg/GHSA-mm4x-29mc-vcvg.json +++ b/advisories/unreviewed/2022/04/GHSA-mm4x-29mc-vcvg/GHSA-mm4x-29mc-vcvg.json @@ -7,12 +7,8 @@ "CVE-2002-2376" ], "details": "Cross-site scripting (XSS) vulnerability in E-Guest_sign.pl in E-Guest 1.1 allows remote attackers to inject arbitrary SSI directives, web script, and HTML via the (1) full name, (2) email, (3) homepage, and (4) location parameters. NOTE: this issue might overlap CVE-2005-1605.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-mm5r-mgxw-2wh3/GHSA-mm5r-mgxw-2wh3.json b/advisories/unreviewed/2022/04/GHSA-mm5r-mgxw-2wh3/GHSA-mm5r-mgxw-2wh3.json index ff8fc94560d..9d647100cca 100644 --- a/advisories/unreviewed/2022/04/GHSA-mm5r-mgxw-2wh3/GHSA-mm5r-mgxw-2wh3.json +++ b/advisories/unreviewed/2022/04/GHSA-mm5r-mgxw-2wh3/GHSA-mm5r-mgxw-2wh3.json @@ -7,12 +7,8 @@ "CVE-2002-2232" ], "details": "Buffer overflow in Enceladus Server Suite 3.9 allows remote attackers to execute arbitrary code via a long CD (CWD) command.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-mr76-xgf6-45rq/GHSA-mr76-xgf6-45rq.json b/advisories/unreviewed/2022/04/GHSA-mr76-xgf6-45rq/GHSA-mr76-xgf6-45rq.json index b62ab126544..729332db293 100644 --- a/advisories/unreviewed/2022/04/GHSA-mr76-xgf6-45rq/GHSA-mr76-xgf6-45rq.json +++ b/advisories/unreviewed/2022/04/GHSA-mr76-xgf6-45rq/GHSA-mr76-xgf6-45rq.json @@ -7,12 +7,8 @@ "CVE-2002-2257" ], "details": "Stack-based buffer overflow in the parse_field function in cgi_lib.c for LIBCGI 1.0.2 and 1.0.3 allows remote attackers to execute arbitrary code via a long argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-mx83-g3r8-6vmg/GHSA-mx83-g3r8-6vmg.json b/advisories/unreviewed/2022/04/GHSA-mx83-g3r8-6vmg/GHSA-mx83-g3r8-6vmg.json index 30829b98448..a243b930b38 100644 --- a/advisories/unreviewed/2022/04/GHSA-mx83-g3r8-6vmg/GHSA-mx83-g3r8-6vmg.json +++ b/advisories/unreviewed/2022/04/GHSA-mx83-g3r8-6vmg/GHSA-mx83-g3r8-6vmg.json @@ -7,12 +7,8 @@ "CVE-2002-2221" ], "details": "Untrusted search path vulnerability in Pedro Lineu Orso chetcpasswd 2.4.1 and earlier allows local users to gain privileges via a modified PATH that references a malicious cp binary. NOTE: this issue might overlap CVE-2006-6639.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p2x4-qrwx-cp87/GHSA-p2x4-qrwx-cp87.json b/advisories/unreviewed/2022/04/GHSA-p2x4-qrwx-cp87/GHSA-p2x4-qrwx-cp87.json index 7b6967d9db7..baaade1c536 100644 --- a/advisories/unreviewed/2022/04/GHSA-p2x4-qrwx-cp87/GHSA-p2x4-qrwx-cp87.json +++ b/advisories/unreviewed/2022/04/GHSA-p2x4-qrwx-cp87/GHSA-p2x4-qrwx-cp87.json @@ -7,12 +7,8 @@ "CVE-2002-2291" ], "details": "Calisto Internet Talker 0.04 and earlier allows remote attackers to cause a denial of service (hang) via a long request, possibly triggering a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-p3ww-q6x5-94x9/GHSA-p3ww-q6x5-94x9.json b/advisories/unreviewed/2022/04/GHSA-p3ww-q6x5-94x9/GHSA-p3ww-q6x5-94x9.json index 90880261500..0962986d779 100644 --- a/advisories/unreviewed/2022/04/GHSA-p3ww-q6x5-94x9/GHSA-p3ww-q6x5-94x9.json +++ b/advisories/unreviewed/2022/04/GHSA-p3ww-q6x5-94x9/GHSA-p3ww-q6x5-94x9.json @@ -7,12 +7,8 @@ "CVE-2002-2169" ], "details": "Cross-site scripting vulnerability AOL Instant Messenger (AIM) 4.5 and 4.7 for MacOS and Windows allows remote attackers to conduct unauthorized activities, such as adding buddies and groups to a user's buddy list, via a URL with a META HTTP-EQUIV=\"refresh\" tag to an aim: URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p59r-grfx-737j/GHSA-p59r-grfx-737j.json b/advisories/unreviewed/2022/04/GHSA-p59r-grfx-737j/GHSA-p59r-grfx-737j.json index 3a877ea8ddd..7239c17d564 100644 --- a/advisories/unreviewed/2022/04/GHSA-p59r-grfx-737j/GHSA-p59r-grfx-737j.json +++ b/advisories/unreviewed/2022/04/GHSA-p59r-grfx-737j/GHSA-p59r-grfx-737j.json @@ -7,12 +7,8 @@ "CVE-2002-2383" ], "details": "SQL injection vulnerability in f2html.pl 0.1 through 0.4 allows remote attackers to execute arbitrary SQL commands via file names.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-p5xv-8rq2-6rw3/GHSA-p5xv-8rq2-6rw3.json b/advisories/unreviewed/2022/04/GHSA-p5xv-8rq2-6rw3/GHSA-p5xv-8rq2-6rw3.json index 141437b19d0..549da6a3e9f 100644 --- a/advisories/unreviewed/2022/04/GHSA-p5xv-8rq2-6rw3/GHSA-p5xv-8rq2-6rw3.json +++ b/advisories/unreviewed/2022/04/GHSA-p5xv-8rq2-6rw3/GHSA-p5xv-8rq2-6rw3.json @@ -7,12 +7,8 @@ "CVE-2002-2425" ], "details": "Sun AnswerBook2 1.2 through 1.4.2 allows remote attackers to execute administrative scripts such as (1) AdminViewError and (2) AdminAddadmin via a direct request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p66f-w4wx-5w76/GHSA-p66f-w4wx-5w76.json b/advisories/unreviewed/2022/04/GHSA-p66f-w4wx-5w76/GHSA-p66f-w4wx-5w76.json index c36f1448757..eefd28d77cd 100644 --- a/advisories/unreviewed/2022/04/GHSA-p66f-w4wx-5w76/GHSA-p66f-w4wx-5w76.json +++ b/advisories/unreviewed/2022/04/GHSA-p66f-w4wx-5w76/GHSA-p66f-w4wx-5w76.json @@ -7,12 +7,8 @@ "CVE-2002-2332" ], "details": "Buffer overflow in Opera 6.01 allows remote attackers to cause a denial of service (crash) via an IMG tag with large width and height attributes.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-p7wg-mx4g-rf69/GHSA-p7wg-mx4g-rf69.json b/advisories/unreviewed/2022/04/GHSA-p7wg-mx4g-rf69/GHSA-p7wg-mx4g-rf69.json index 9b349123ae8..75d9a48a02a 100644 --- a/advisories/unreviewed/2022/04/GHSA-p7wg-mx4g-rf69/GHSA-p7wg-mx4g-rf69.json +++ b/advisories/unreviewed/2022/04/GHSA-p7wg-mx4g-rf69/GHSA-p7wg-mx4g-rf69.json @@ -7,12 +7,8 @@ "CVE-2002-2437" ], "details": "The JavaScript implementation in Mozilla Firefox before 4.0, Thunderbird before 3.3, and SeaMonkey before 2.1 does not properly restrict the set of values contained in the object returned by the getComputedStyle method, which allows remote attackers to obtain sensitive information about visited web pages by calling this method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-p95c-48v5-wx94/GHSA-p95c-48v5-wx94.json b/advisories/unreviewed/2022/04/GHSA-p95c-48v5-wx94/GHSA-p95c-48v5-wx94.json index dbd8e8657fb..5e786484eb4 100644 --- a/advisories/unreviewed/2022/04/GHSA-p95c-48v5-wx94/GHSA-p95c-48v5-wx94.json +++ b/advisories/unreviewed/2022/04/GHSA-p95c-48v5-wx94/GHSA-p95c-48v5-wx94.json @@ -7,12 +7,8 @@ "CVE-2002-2259" ], "details": "Buffer overflow in the French documentation patch for Gnuplot 3.7 in SuSE Linux before 8.0 allows local users to execute arbitrary code as root via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-p9xc-7hp9-94ww/GHSA-p9xc-7hp9-94ww.json b/advisories/unreviewed/2022/04/GHSA-p9xc-7hp9-94ww/GHSA-p9xc-7hp9-94ww.json index c05d9f5a82f..233805488b7 100644 --- a/advisories/unreviewed/2022/04/GHSA-p9xc-7hp9-94ww/GHSA-p9xc-7hp9-94ww.json +++ b/advisories/unreviewed/2022/04/GHSA-p9xc-7hp9-94ww/GHSA-p9xc-7hp9-94ww.json @@ -7,12 +7,8 @@ "CVE-2002-2280" ], "details": "syslogd on OpenBSD 2.9 through 3.2 does not change the source IP address of syslog packets when the machine's IP addressed is changed without rebooting, e.g. via ifconfig, which can cause incorrect information to be sent to the syslog server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pfq7-6f2q-pvm6/GHSA-pfq7-6f2q-pvm6.json b/advisories/unreviewed/2022/04/GHSA-pfq7-6f2q-pvm6/GHSA-pfq7-6f2q-pvm6.json index 24cb6198865..d9d91e67e1c 100644 --- a/advisories/unreviewed/2022/04/GHSA-pfq7-6f2q-pvm6/GHSA-pfq7-6f2q-pvm6.json +++ b/advisories/unreviewed/2022/04/GHSA-pfq7-6f2q-pvm6/GHSA-pfq7-6f2q-pvm6.json @@ -7,12 +7,8 @@ "CVE-2002-2168" ], "details": "SQL injection vulnerability in Thorsten Korner 123tkShop before 0.3.1 allows remote attackers to execute arbitrary SQL queries via various programs including function_describe_item1.inc.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pgf7-j693-6p7w/GHSA-pgf7-j693-6p7w.json b/advisories/unreviewed/2022/04/GHSA-pgf7-j693-6p7w/GHSA-pgf7-j693-6p7w.json index 0d0a64da0e0..0ab3dda258a 100644 --- a/advisories/unreviewed/2022/04/GHSA-pgf7-j693-6p7w/GHSA-pgf7-j693-6p7w.json +++ b/advisories/unreviewed/2022/04/GHSA-pgf7-j693-6p7w/GHSA-pgf7-j693-6p7w.json @@ -7,12 +7,8 @@ "CVE-2002-2208" ], "details": "Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service (flood) by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pqc8-h793-q6vj/GHSA-pqc8-h793-q6vj.json b/advisories/unreviewed/2022/04/GHSA-pqc8-h793-q6vj/GHSA-pqc8-h793-q6vj.json index dd06f4d46f7..e5b1c0597e9 100644 --- a/advisories/unreviewed/2022/04/GHSA-pqc8-h793-q6vj/GHSA-pqc8-h793-q6vj.json +++ b/advisories/unreviewed/2022/04/GHSA-pqc8-h793-q6vj/GHSA-pqc8-h793-q6vj.json @@ -7,12 +7,8 @@ "CVE-2002-2434" ], "details": "NWFTPD.nlm before 5.02i in the FTP server in Novell NetWare does not properly listen for data connections, which allows remote attackers to cause a denial of service (abend) via multiple FTP sessions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-pqgf-gxf2-37gf/GHSA-pqgf-gxf2-37gf.json b/advisories/unreviewed/2022/04/GHSA-pqgf-gxf2-37gf/GHSA-pqgf-gxf2-37gf.json index 7d6027c678a..306a7cd1f2c 100644 --- a/advisories/unreviewed/2022/04/GHSA-pqgf-gxf2-37gf/GHSA-pqgf-gxf2-37gf.json +++ b/advisories/unreviewed/2022/04/GHSA-pqgf-gxf2-37gf/GHSA-pqgf-gxf2-37gf.json @@ -7,12 +7,8 @@ "CVE-2002-2328" ], "details": "Active Directory in Windows 2000, when supporting Kerberos V authentication and GSSAPI, allows remote attackers to cause a denial of service (hang) via an LDAP client that sets the page length to zero during a large request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-pw5p-2w3c-9hcx/GHSA-pw5p-2w3c-9hcx.json b/advisories/unreviewed/2022/04/GHSA-pw5p-2w3c-9hcx/GHSA-pw5p-2w3c-9hcx.json index c80bebf1c40..e88e466f655 100644 --- a/advisories/unreviewed/2022/04/GHSA-pw5p-2w3c-9hcx/GHSA-pw5p-2w3c-9hcx.json +++ b/advisories/unreviewed/2022/04/GHSA-pw5p-2w3c-9hcx/GHSA-pw5p-2w3c-9hcx.json @@ -7,12 +7,8 @@ "CVE-2002-2340" ], "details": "Cross-site scripting (XSS) vulnerability in read.php in Phorum 3.3.2a allows remote attackers to inject arbitrary web script or HTML via (1) the t parameter or (2) the body of an email response.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-px78-xv49-wxhw/GHSA-px78-xv49-wxhw.json b/advisories/unreviewed/2022/04/GHSA-px78-xv49-wxhw/GHSA-px78-xv49-wxhw.json index adf602d147d..1be74cfadde 100644 --- a/advisories/unreviewed/2022/04/GHSA-px78-xv49-wxhw/GHSA-px78-xv49-wxhw.json +++ b/advisories/unreviewed/2022/04/GHSA-px78-xv49-wxhw/GHSA-px78-xv49-wxhw.json @@ -7,12 +7,8 @@ "CVE-2002-2320" ], "details": "MySimpleNews 1.0 allows remote attackers to delete arbitrary email messages via a direct request to vider.php3.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-px9g-2p6c-jm7g/GHSA-px9g-2p6c-jm7g.json b/advisories/unreviewed/2022/04/GHSA-px9g-2p6c-jm7g/GHSA-px9g-2p6c-jm7g.json index 40a0c0ebbe1..e97d2ac8470 100644 --- a/advisories/unreviewed/2022/04/GHSA-px9g-2p6c-jm7g/GHSA-px9g-2p6c-jm7g.json +++ b/advisories/unreviewed/2022/04/GHSA-px9g-2p6c-jm7g/GHSA-px9g-2p6c-jm7g.json @@ -7,12 +7,8 @@ "CVE-2002-2429" ], "details": "webs.c in GoAhead WebServer before 2.1.4 allows remote attackers to cause a denial of service (daemon crash) via an HTTP POST request that contains a negative integer in the Content-Length header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-q5gp-3gqr-679m/GHSA-q5gp-3gqr-679m.json b/advisories/unreviewed/2022/04/GHSA-q5gp-3gqr-679m/GHSA-q5gp-3gqr-679m.json index 18656976739..8f487685321 100644 --- a/advisories/unreviewed/2022/04/GHSA-q5gp-3gqr-679m/GHSA-q5gp-3gqr-679m.json +++ b/advisories/unreviewed/2022/04/GHSA-q5gp-3gqr-679m/GHSA-q5gp-3gqr-679m.json @@ -7,12 +7,8 @@ "CVE-2002-2247" ], "details": "The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive information such as the full web root path via phpinfo.php, which calls the phpinfo function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-q94x-hhmw-p4m8/GHSA-q94x-hhmw-p4m8.json b/advisories/unreviewed/2022/04/GHSA-q94x-hhmw-p4m8/GHSA-q94x-hhmw-p4m8.json index 8622e39fb0f..9587b4976c3 100644 --- a/advisories/unreviewed/2022/04/GHSA-q94x-hhmw-p4m8/GHSA-q94x-hhmw-p4m8.json +++ b/advisories/unreviewed/2022/04/GHSA-q94x-hhmw-p4m8/GHSA-q94x-hhmw-p4m8.json @@ -7,12 +7,8 @@ "CVE-2002-2374" ], "details": "Unspecified vulnerability in pprosetup in Sun PatchPro 2.0 has unknown impact and attack vectors related to \"unsafe use of temporary files.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-qcmg-44x7-rjjq/GHSA-qcmg-44x7-rjjq.json b/advisories/unreviewed/2022/04/GHSA-qcmg-44x7-rjjq/GHSA-qcmg-44x7-rjjq.json index 2b31e2e71b4..c0bc5812fcd 100644 --- a/advisories/unreviewed/2022/04/GHSA-qcmg-44x7-rjjq/GHSA-qcmg-44x7-rjjq.json +++ b/advisories/unreviewed/2022/04/GHSA-qcmg-44x7-rjjq/GHSA-qcmg-44x7-rjjq.json @@ -7,12 +7,8 @@ "CVE-2002-2288" ], "details": "Mambo Site Server 4.0.11 allows remote attackers to obtain the physical path of the server via an HTTP request to index.php with a parameter that does not exist, which causes the path to be leaked in an error message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-qg9q-9wrc-h6g7/GHSA-qg9q-9wrc-h6g7.json b/advisories/unreviewed/2022/04/GHSA-qg9q-9wrc-h6g7/GHSA-qg9q-9wrc-h6g7.json index 019965d8dcf..753a3eba3b9 100644 --- a/advisories/unreviewed/2022/04/GHSA-qg9q-9wrc-h6g7/GHSA-qg9q-9wrc-h6g7.json +++ b/advisories/unreviewed/2022/04/GHSA-qg9q-9wrc-h6g7/GHSA-qg9q-9wrc-h6g7.json @@ -7,12 +7,8 @@ "CVE-2002-2354" ], "details": "Netgear FM114P firmware 1.3 wireless firewall allows remote attackers to cause a denial of service (crash or hang) via a large number of TCP connection requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-qggq-h3v8-mh2x/GHSA-qggq-h3v8-mh2x.json b/advisories/unreviewed/2022/04/GHSA-qggq-h3v8-mh2x/GHSA-qggq-h3v8-mh2x.json index 216aaea7e66..683454d866f 100644 --- a/advisories/unreviewed/2022/04/GHSA-qggq-h3v8-mh2x/GHSA-qggq-h3v8-mh2x.json +++ b/advisories/unreviewed/2022/04/GHSA-qggq-h3v8-mh2x/GHSA-qggq-h3v8-mh2x.json @@ -7,12 +7,8 @@ "CVE-2002-2283" ], "details": "Microsoft Windows XP with Fast User Switching (FUS) enabled does not remove the \"show processes from all users\" privilege when the user is removed from the administrator group, which allows that user to view processes of other users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qh9j-cx23-75x5/GHSA-qh9j-cx23-75x5.json b/advisories/unreviewed/2022/04/GHSA-qh9j-cx23-75x5/GHSA-qh9j-cx23-75x5.json index abba785621b..9dcc6d8ec68 100644 --- a/advisories/unreviewed/2022/04/GHSA-qh9j-cx23-75x5/GHSA-qh9j-cx23-75x5.json +++ b/advisories/unreviewed/2022/04/GHSA-qh9j-cx23-75x5/GHSA-qh9j-cx23-75x5.json @@ -7,12 +7,8 @@ "CVE-2002-2342" ], "details": "Bannermatic 1, 2, and 3 stores the (1) ban.log, (2) ban.bak, (3) ban.dat and (4) banmat.pwd data files under the web document root with insufficient access control, which allows attackers to obtain sensitive information via a direct request for the files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-qhwv-rq72-8hq4/GHSA-qhwv-rq72-8hq4.json b/advisories/unreviewed/2022/04/GHSA-qhwv-rq72-8hq4/GHSA-qhwv-rq72-8hq4.json index bf39ac7bdf2..7e418afbcd8 100644 --- a/advisories/unreviewed/2022/04/GHSA-qhwv-rq72-8hq4/GHSA-qhwv-rq72-8hq4.json +++ b/advisories/unreviewed/2022/04/GHSA-qhwv-rq72-8hq4/GHSA-qhwv-rq72-8hq4.json @@ -7,12 +7,8 @@ "CVE-2002-2370" ], "details": "SWS web server 0.0.4, 0.0.3 and 0.1.0 allows remote attackers to cause a denial of service (crash) via a URL request that does not end with a newline.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qr7g-xhqc-4g5r/GHSA-qr7g-xhqc-4g5r.json b/advisories/unreviewed/2022/04/GHSA-qr7g-xhqc-4g5r/GHSA-qr7g-xhqc-4g5r.json index b2accd2496c..8f206a5c5d8 100644 --- a/advisories/unreviewed/2022/04/GHSA-qr7g-xhqc-4g5r/GHSA-qr7g-xhqc-4g5r.json +++ b/advisories/unreviewed/2022/04/GHSA-qr7g-xhqc-4g5r/GHSA-qr7g-xhqc-4g5r.json @@ -7,12 +7,8 @@ "CVE-2002-2432" ], "details": "Unspecified vulnerability in NWFTPD.nlm before 5.03b in the FTP server in Novell NetWare allows remote attackers to cause a denial of service (abend) via a crafted username.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qw9c-69xx-p79v/GHSA-qw9c-69xx-p79v.json b/advisories/unreviewed/2022/04/GHSA-qw9c-69xx-p79v/GHSA-qw9c-69xx-p79v.json index 81862d6e969..5d32397eb9e 100644 --- a/advisories/unreviewed/2022/04/GHSA-qw9c-69xx-p79v/GHSA-qw9c-69xx-p79v.json +++ b/advisories/unreviewed/2022/04/GHSA-qw9c-69xx-p79v/GHSA-qw9c-69xx-p79v.json @@ -7,12 +7,8 @@ "CVE-2002-2238" ], "details": "Directory traversal vulnerability in the Kunani ODBC FTP Server 1.0.10 allows remote attackers to read arbitrary files via a \"..\\\" (dot dot backslash) in a GET request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-qwf2-v6qh-2fq6/GHSA-qwf2-v6qh-2fq6.json b/advisories/unreviewed/2022/04/GHSA-qwf2-v6qh-2fq6/GHSA-qwf2-v6qh-2fq6.json index 8a61c42deff..88412cd5466 100644 --- a/advisories/unreviewed/2022/04/GHSA-qwf2-v6qh-2fq6/GHSA-qwf2-v6qh-2fq6.json +++ b/advisories/unreviewed/2022/04/GHSA-qwf2-v6qh-2fq6/GHSA-qwf2-v6qh-2fq6.json @@ -7,12 +7,8 @@ "CVE-2002-2389" ], "details": "TheServer 1.74 web server stores server.ini under the web document root with insufficient access control, which allows remote attackers to obtain cleartext passwords and gain access to server log files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-qx66-p5pw-67mr/GHSA-qx66-p5pw-67mr.json b/advisories/unreviewed/2022/04/GHSA-qx66-p5pw-67mr/GHSA-qx66-p5pw-67mr.json index c4e782ed3b8..e2e4d99059f 100644 --- a/advisories/unreviewed/2022/04/GHSA-qx66-p5pw-67mr/GHSA-qx66-p5pw-67mr.json +++ b/advisories/unreviewed/2022/04/GHSA-qx66-p5pw-67mr/GHSA-qx66-p5pw-67mr.json @@ -7,12 +7,8 @@ "CVE-2002-2427" ], "details": "The security handler in GoAhead WebServer before 2.1.1 allows remote attackers to bypass authentication and obtain access to protected web content via \"an extra slash in a URL,\" a different vulnerability than CVE-2002-1603.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-r247-3p56-qf3v/GHSA-r247-3p56-qf3v.json b/advisories/unreviewed/2022/04/GHSA-r247-3p56-qf3v/GHSA-r247-3p56-qf3v.json index c131ead6f37..2bcacbf93c6 100644 --- a/advisories/unreviewed/2022/04/GHSA-r247-3p56-qf3v/GHSA-r247-3p56-qf3v.json +++ b/advisories/unreviewed/2022/04/GHSA-r247-3p56-qf3v/GHSA-r247-3p56-qf3v.json @@ -7,12 +7,8 @@ "CVE-2002-2253" ], "details": "Multiple buffer overflows in Cyrus Sieve / libSieve 2.1.2 and earlier allow remote attackers to execute arbitrary code via (1) a long header name, (2) a long IMAP flag, or (3) a script that generates a large number of errors that overflow the resulting error string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-r7jw-vqfm-vw8w/GHSA-r7jw-vqfm-vw8w.json b/advisories/unreviewed/2022/04/GHSA-r7jw-vqfm-vw8w/GHSA-r7jw-vqfm-vw8w.json index fe11962fff2..8e30eb208c9 100644 --- a/advisories/unreviewed/2022/04/GHSA-r7jw-vqfm-vw8w/GHSA-r7jw-vqfm-vw8w.json +++ b/advisories/unreviewed/2022/04/GHSA-r7jw-vqfm-vw8w/GHSA-r7jw-vqfm-vw8w.json @@ -7,12 +7,8 @@ "CVE-2002-2423" ], "details": "Sendmail 8.12.0 through 8.12.6 truncates log messages longer than 100 characters, which allows remote attackers to prevent the IP address from being logged via a long IDENT response.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-r8h8-frgh-vvhh/GHSA-r8h8-frgh-vvhh.json b/advisories/unreviewed/2022/04/GHSA-r8h8-frgh-vvhh/GHSA-r8h8-frgh-vvhh.json index 8c229d59d8b..4cfa0fec340 100644 --- a/advisories/unreviewed/2022/04/GHSA-r8h8-frgh-vvhh/GHSA-r8h8-frgh-vvhh.json +++ b/advisories/unreviewed/2022/04/GHSA-r8h8-frgh-vvhh/GHSA-r8h8-frgh-vvhh.json @@ -7,12 +7,8 @@ "CVE-2002-2325" ], "details": "The c-client library in Internet Message Access Protocol (IMAP) dated before 2002 RC2, as used by Pine 4.20 through 4.44, allows remote attackers to cause a denial of service (client crash) via a MIME-encoded email with Content-Type header containing an empty boundary field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-r948-xfh6-wjrw/GHSA-r948-xfh6-wjrw.json b/advisories/unreviewed/2022/04/GHSA-r948-xfh6-wjrw/GHSA-r948-xfh6-wjrw.json index 7de758f64c2..a67f58c60f5 100644 --- a/advisories/unreviewed/2022/04/GHSA-r948-xfh6-wjrw/GHSA-r948-xfh6-wjrw.json +++ b/advisories/unreviewed/2022/04/GHSA-r948-xfh6-wjrw/GHSA-r948-xfh6-wjrw.json @@ -7,12 +7,8 @@ "CVE-2002-2244" ], "details": "Akfingerd 0.5 and earlier versions allow local users to cause a denial of service (crash) via a .plan with a symlink to /dev/urandom or other device, then disconnecting while data is being transferred, which causes a SIGPIPE error that Akfingerd cannot handle.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-rcfw-xqp3-ffpr/GHSA-rcfw-xqp3-ffpr.json b/advisories/unreviewed/2022/04/GHSA-rcfw-xqp3-ffpr/GHSA-rcfw-xqp3-ffpr.json index 8079aca4f38..ad9d7314ec3 100644 --- a/advisories/unreviewed/2022/04/GHSA-rcfw-xqp3-ffpr/GHSA-rcfw-xqp3-ffpr.json +++ b/advisories/unreviewed/2022/04/GHSA-rcfw-xqp3-ffpr/GHSA-rcfw-xqp3-ffpr.json @@ -7,12 +7,8 @@ "CVE-2002-2263" ], "details": "The installation program for HP-UX Visualize Conference B.11.00.11 running on HP-UX 11.00 and 11.11 installs /etc/dt and its subdirecties with insecure permissions, which allows local users to read or write arbitrary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rg26-fqc8-rw9j/GHSA-rg26-fqc8-rw9j.json b/advisories/unreviewed/2022/04/GHSA-rg26-fqc8-rw9j/GHSA-rg26-fqc8-rw9j.json index 09582d65dda..0e4432a5c45 100644 --- a/advisories/unreviewed/2022/04/GHSA-rg26-fqc8-rw9j/GHSA-rg26-fqc8-rw9j.json +++ b/advisories/unreviewed/2022/04/GHSA-rg26-fqc8-rw9j/GHSA-rg26-fqc8-rw9j.json @@ -7,12 +7,8 @@ "CVE-2002-2341" ], "details": "Cross-site scripting (XSS) vulnerability in content blocking in SonicWALL SOHO3 6.3.0.0 allows remote attackers to inject arbitrary web script or HTML via a blocked URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-rgfv-crmv-gffr/GHSA-rgfv-crmv-gffr.json b/advisories/unreviewed/2022/04/GHSA-rgfv-crmv-gffr/GHSA-rgfv-crmv-gffr.json index f177fdf1f0f..d25e7e0385d 100644 --- a/advisories/unreviewed/2022/04/GHSA-rgfv-crmv-gffr/GHSA-rgfv-crmv-gffr.json +++ b/advisories/unreviewed/2022/04/GHSA-rgfv-crmv-gffr/GHSA-rgfv-crmv-gffr.json @@ -7,12 +7,8 @@ "CVE-2002-2275" ], "details": "Fortres 101 4.1 allows local users to bypass Fortres by pressing the Windows and \"F\" key together for 30 seconds, which opens multiple windows and eventually causes explorer.exe to crash, which then opens an unrestricted explorer.exe.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rhj3-93x7-f829/GHSA-rhj3-93x7-f829.json b/advisories/unreviewed/2022/04/GHSA-rhj3-93x7-f829/GHSA-rhj3-93x7-f829.json index 1f2525511cd..c29a5efa290 100644 --- a/advisories/unreviewed/2022/04/GHSA-rhj3-93x7-f829/GHSA-rhj3-93x7-f829.json +++ b/advisories/unreviewed/2022/04/GHSA-rhj3-93x7-f829/GHSA-rhj3-93x7-f829.json @@ -7,12 +7,8 @@ "CVE-2002-2176" ], "details": "SQL injection vulnerability in Gender MOD 1.1.3 allows remote attackers to gain administrative access via the user_level parameter in the User Profile page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rhp6-27r4-xwgx/GHSA-rhp6-27r4-xwgx.json b/advisories/unreviewed/2022/04/GHSA-rhp6-27r4-xwgx/GHSA-rhp6-27r4-xwgx.json index 309f329b95d..a60f502d2a8 100644 --- a/advisories/unreviewed/2022/04/GHSA-rhp6-27r4-xwgx/GHSA-rhp6-27r4-xwgx.json +++ b/advisories/unreviewed/2022/04/GHSA-rhp6-27r4-xwgx/GHSA-rhp6-27r4-xwgx.json @@ -7,12 +7,8 @@ "CVE-2002-2362" ], "details": "Cross-site scripting (XSS) vulnerability in form_header.php in MyMarket 1.71 allows remote attackers to inject arbitrary web script or HTML via the noticemsg parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-rjg8-7vpm-9hfj/GHSA-rjg8-7vpm-9hfj.json b/advisories/unreviewed/2022/04/GHSA-rjg8-7vpm-9hfj/GHSA-rjg8-7vpm-9hfj.json index 0f685a41269..cdb08182005 100644 --- a/advisories/unreviewed/2022/04/GHSA-rjg8-7vpm-9hfj/GHSA-rjg8-7vpm-9hfj.json +++ b/advisories/unreviewed/2022/04/GHSA-rjg8-7vpm-9hfj/GHSA-rjg8-7vpm-9hfj.json @@ -7,12 +7,8 @@ "CVE-2002-2348" ], "details": "Cross-site scripting (XSS) vulnerability in athcgi.exe in Authoria HR allows remote attackers to inject arbitrary web script or HTML via the command parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-rjx6-77wf-2gx7/GHSA-rjx6-77wf-2gx7.json b/advisories/unreviewed/2022/04/GHSA-rjx6-77wf-2gx7/GHSA-rjx6-77wf-2gx7.json index b897acacaa6..accae35daa3 100644 --- a/advisories/unreviewed/2022/04/GHSA-rjx6-77wf-2gx7/GHSA-rjx6-77wf-2gx7.json +++ b/advisories/unreviewed/2022/04/GHSA-rjx6-77wf-2gx7/GHSA-rjx6-77wf-2gx7.json @@ -7,12 +7,8 @@ "CVE-2002-2228" ], "details": "MailScanner before 4.0 5-1 and before 3.2 6-1 allows remote attackers to bypass protection via attachments with a filename with (1) extra leading spaces, (2) extra trailing spaces, or (3) alternate character encodings that cannot be processed by MailScanner.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-rp8c-pc5p-39jg/GHSA-rp8c-pc5p-39jg.json b/advisories/unreviewed/2022/04/GHSA-rp8c-pc5p-39jg/GHSA-rp8c-pc5p-39jg.json index 32bf97da79c..bd2fdf86c71 100644 --- a/advisories/unreviewed/2022/04/GHSA-rp8c-pc5p-39jg/GHSA-rp8c-pc5p-39jg.json +++ b/advisories/unreviewed/2022/04/GHSA-rp8c-pc5p-39jg/GHSA-rp8c-pc5p-39jg.json @@ -7,12 +7,8 @@ "CVE-2002-2286" ], "details": "The parse-get function in utils.c for apt-www-proxy 0.1 allows remote attackers to cause a denial of service (crash) via an empty HTTP request, which causes a null dereference.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rrh5-w572-52vf/GHSA-rrh5-w572-52vf.json b/advisories/unreviewed/2022/04/GHSA-rrh5-w572-52vf/GHSA-rrh5-w572-52vf.json index 79c5dcdc3be..7021ab7b10a 100644 --- a/advisories/unreviewed/2022/04/GHSA-rrh5-w572-52vf/GHSA-rrh5-w572-52vf.json +++ b/advisories/unreviewed/2022/04/GHSA-rrh5-w572-52vf/GHSA-rrh5-w572-52vf.json @@ -7,12 +7,8 @@ "CVE-2002-2178" ], "details": "Cross-site scripting (XSS) vulnerability in article.php module for phpWebSite 0.8.3 allows remote attackers to execute arbitrary Javascript script via the sid parameter, as demonstrated using an IMG tag.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-rw97-jv7j-3v6x/GHSA-rw97-jv7j-3v6x.json b/advisories/unreviewed/2022/04/GHSA-rw97-jv7j-3v6x/GHSA-rw97-jv7j-3v6x.json index c6d51c79943..10b9c1413e7 100644 --- a/advisories/unreviewed/2022/04/GHSA-rw97-jv7j-3v6x/GHSA-rw97-jv7j-3v6x.json +++ b/advisories/unreviewed/2022/04/GHSA-rw97-jv7j-3v6x/GHSA-rw97-jv7j-3v6x.json @@ -7,12 +7,8 @@ "CVE-2002-2219" ], "details": "chetcpasswd.cgi in Pedro Lineu Orso chetcpasswd before 2.1 allows remote attackers to read the last line of the shadow file via a long user (userid) field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v2w7-2hcc-x4jg/GHSA-v2w7-2hcc-x4jg.json b/advisories/unreviewed/2022/04/GHSA-v2w7-2hcc-x4jg/GHSA-v2w7-2hcc-x4jg.json index 960fd2c34ee..3a2e16156b2 100644 --- a/advisories/unreviewed/2022/04/GHSA-v2w7-2hcc-x4jg/GHSA-v2w7-2hcc-x4jg.json +++ b/advisories/unreviewed/2022/04/GHSA-v2w7-2hcc-x4jg/GHSA-v2w7-2hcc-x4jg.json @@ -7,12 +7,8 @@ "CVE-2002-2355" ], "details": "Netgear FM114P firmware 1.3 wireless firewall, when configured to backup configuration information, stores DDNS (DynDNS) user name and password, MAC address filtering table and possibly other information in cleartext, which could allow local users to obtain sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v42q-m8v6-6rj4/GHSA-v42q-m8v6-6rj4.json b/advisories/unreviewed/2022/04/GHSA-v42q-m8v6-6rj4/GHSA-v42q-m8v6-6rj4.json index 8fc74ed3070..c2eea2c77b7 100644 --- a/advisories/unreviewed/2022/04/GHSA-v42q-m8v6-6rj4/GHSA-v42q-m8v6-6rj4.json +++ b/advisories/unreviewed/2022/04/GHSA-v42q-m8v6-6rj4/GHSA-v42q-m8v6-6rj4.json @@ -7,12 +7,8 @@ "CVE-2002-2271" ], "details": "Buffer overflow in BigFun 1.51b IRC client, when the Direct Client Connection (DCC) option is used, allows remote attackers to cause a denial of service (crash) via a long string.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-v788-jrj9-hgf4/GHSA-v788-jrj9-hgf4.json b/advisories/unreviewed/2022/04/GHSA-v788-jrj9-hgf4/GHSA-v788-jrj9-hgf4.json index a5da4f4e214..ac63a27175e 100644 --- a/advisories/unreviewed/2022/04/GHSA-v788-jrj9-hgf4/GHSA-v788-jrj9-hgf4.json +++ b/advisories/unreviewed/2022/04/GHSA-v788-jrj9-hgf4/GHSA-v788-jrj9-hgf4.json @@ -7,12 +7,8 @@ "CVE-2002-2205" ], "details": "Buffer overflow in Webresolve 0.1.0 and earlier allows remote attackers to execute arbitrary code by connecting to the server from an IP address that resolves to a long hostname.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v7x8-gqgc-pmm6/GHSA-v7x8-gqgc-pmm6.json b/advisories/unreviewed/2022/04/GHSA-v7x8-gqgc-pmm6/GHSA-v7x8-gqgc-pmm6.json index 98c9595983c..7c4260824ca 100644 --- a/advisories/unreviewed/2022/04/GHSA-v7x8-gqgc-pmm6/GHSA-v7x8-gqgc-pmm6.json +++ b/advisories/unreviewed/2022/04/GHSA-v7x8-gqgc-pmm6/GHSA-v7x8-gqgc-pmm6.json @@ -7,12 +7,8 @@ "CVE-2002-2266" ], "details": "NetScreen ScreenOS 2.8 through 4.0, when forwarding H.323 or Netmeeting traffic, allows remote attackers to cause a denial of service (firewall session table consumption) by establishing multiple half-open H.323 sessions, which are not cleaned up on garbage removal and do not time out for 36 hours.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v85h-m5h5-mqgp/GHSA-v85h-m5h5-mqgp.json b/advisories/unreviewed/2022/04/GHSA-v85h-m5h5-mqgp/GHSA-v85h-m5h5-mqgp.json index 567e6c793f9..131d34594ce 100644 --- a/advisories/unreviewed/2022/04/GHSA-v85h-m5h5-mqgp/GHSA-v85h-m5h5-mqgp.json +++ b/advisories/unreviewed/2022/04/GHSA-v85h-m5h5-mqgp/GHSA-v85h-m5h5-mqgp.json @@ -7,12 +7,8 @@ "CVE-2002-2223" ], "details": "Buffer overflow in NetScreen-Remote 8.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) large number of payloads, or (3) a long payload.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v8pm-7824-r9mm/GHSA-v8pm-7824-r9mm.json b/advisories/unreviewed/2022/04/GHSA-v8pm-7824-r9mm/GHSA-v8pm-7824-r9mm.json index 6a1d1179820..db9631dc503 100644 --- a/advisories/unreviewed/2022/04/GHSA-v8pm-7824-r9mm/GHSA-v8pm-7824-r9mm.json +++ b/advisories/unreviewed/2022/04/GHSA-v8pm-7824-r9mm/GHSA-v8pm-7824-r9mm.json @@ -7,12 +7,8 @@ "CVE-2002-2202" ], "details": "Outlook Express 6.0 does not delete messages from dbx files, even when a user empties the Deleted items folder, which allows local users to read other users email.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-v8rc-h93q-rjmm/GHSA-v8rc-h93q-rjmm.json b/advisories/unreviewed/2022/04/GHSA-v8rc-h93q-rjmm/GHSA-v8rc-h93q-rjmm.json index 18094c45c91..6e9692b7b6e 100644 --- a/advisories/unreviewed/2022/04/GHSA-v8rc-h93q-rjmm/GHSA-v8rc-h93q-rjmm.json +++ b/advisories/unreviewed/2022/04/GHSA-v8rc-h93q-rjmm/GHSA-v8rc-h93q-rjmm.json @@ -7,12 +7,8 @@ "CVE-2002-2189" ], "details": "Cross-site scripting (XSS) vulnerability in ActiveXperts Software ActiveWebserver allows remote attackers to execute arbitrary web script via a link.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vcqp-56w5-3qx3/GHSA-vcqp-56w5-3qx3.json b/advisories/unreviewed/2022/04/GHSA-vcqp-56w5-3qx3/GHSA-vcqp-56w5-3qx3.json index c3147af1ac9..aaa4b8618e1 100644 --- a/advisories/unreviewed/2022/04/GHSA-vcqp-56w5-3qx3/GHSA-vcqp-56w5-3qx3.json +++ b/advisories/unreviewed/2022/04/GHSA-vcqp-56w5-3qx3/GHSA-vcqp-56w5-3qx3.json @@ -7,12 +7,8 @@ "CVE-2002-2224" ], "details": "Buffer overflow in PGPFreeware 7.03 running on Windows NT 4.0 SP6 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchange (IKE) response packets, possibly including (1) a large Security Parameter Index (SPI) field, (2) large number of payloads, or (3) a long payload.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vfmc-pv7q-2v59/GHSA-vfmc-pv7q-2v59.json b/advisories/unreviewed/2022/04/GHSA-vfmc-pv7q-2v59/GHSA-vfmc-pv7q-2v59.json index 0cc70fccb5b..703056c7ff5 100644 --- a/advisories/unreviewed/2022/04/GHSA-vfmc-pv7q-2v59/GHSA-vfmc-pv7q-2v59.json +++ b/advisories/unreviewed/2022/04/GHSA-vfmc-pv7q-2v59/GHSA-vfmc-pv7q-2v59.json @@ -7,12 +7,8 @@ "CVE-2002-2262" ], "details": "Unspecified vulnerability in xntpd of HP-UX 10.20 through 11.11 allows remote attackers to cause a denial of service (hang) via unknown attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-vpg6-mh5w-vr83/GHSA-vpg6-mh5w-vr83.json b/advisories/unreviewed/2022/04/GHSA-vpg6-mh5w-vr83/GHSA-vpg6-mh5w-vr83.json index b028b674125..ec6a4ffe17e 100644 --- a/advisories/unreviewed/2022/04/GHSA-vpg6-mh5w-vr83/GHSA-vpg6-mh5w-vr83.json +++ b/advisories/unreviewed/2022/04/GHSA-vpg6-mh5w-vr83/GHSA-vpg6-mh5w-vr83.json @@ -7,12 +7,8 @@ "CVE-2002-2315" ], "details": "Cisco IOS 11.2.x and 12.0.x does not limit the size of its redirect table, which allows remote attackers to cause a denial of service (memory consumption) via spoofed ICMP redirect packets to the router.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-w2mh-pcg2-v2jv/GHSA-w2mh-pcg2-v2jv.json b/advisories/unreviewed/2022/04/GHSA-w2mh-pcg2-v2jv/GHSA-w2mh-pcg2-v2jv.json index f9dff4d7e9b..f79331ae537 100644 --- a/advisories/unreviewed/2022/04/GHSA-w2mh-pcg2-v2jv/GHSA-w2mh-pcg2-v2jv.json +++ b/advisories/unreviewed/2022/04/GHSA-w2mh-pcg2-v2jv/GHSA-w2mh-pcg2-v2jv.json @@ -7,12 +7,8 @@ "CVE-2002-2226" ], "details": "Buffer overflow in tftpd of TFTP32 2.21 and earlier allows remote attackers to execute arbitrary code via a long filename argument.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-w548-c6j4-9jcv/GHSA-w548-c6j4-9jcv.json b/advisories/unreviewed/2022/04/GHSA-w548-c6j4-9jcv/GHSA-w548-c6j4-9jcv.json index e39cda1129b..728d79e96e8 100644 --- a/advisories/unreviewed/2022/04/GHSA-w548-c6j4-9jcv/GHSA-w548-c6j4-9jcv.json +++ b/advisories/unreviewed/2022/04/GHSA-w548-c6j4-9jcv/GHSA-w548-c6j4-9jcv.json @@ -7,12 +7,8 @@ "CVE-2002-2426" ], "details": "Cross-site request forgery (CSRF) vulnerability in Citrix Presentation Server 4.0 and 4.5, MetaFrame Presentation Server 3.0, and Access Essentials 1.0 through 2.0 allows remote attackers to execute arbitrary published applications, and possibly other programs, as authenticated users via the InitialProgram key in an ICA connection. NOTE: some of these details are obtained from third party information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-w5rv-gg7m-gm52/GHSA-w5rv-gg7m-gm52.json b/advisories/unreviewed/2022/04/GHSA-w5rv-gg7m-gm52/GHSA-w5rv-gg7m-gm52.json index 80bdc2a0778..54c7ac6537b 100644 --- a/advisories/unreviewed/2022/04/GHSA-w5rv-gg7m-gm52/GHSA-w5rv-gg7m-gm52.json +++ b/advisories/unreviewed/2022/04/GHSA-w5rv-gg7m-gm52/GHSA-w5rv-gg7m-gm52.json @@ -7,12 +7,8 @@ "CVE-2002-2304" ], "details": "SQL injection vulnerability in admin/auth/checksession.php in MyPHPLinks 2.1.9 and 2.2.0 allows remote attackers to execute arbitrary SQL commands via the idsession parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-w6p5-vm5x-8m2m/GHSA-w6p5-vm5x-8m2m.json b/advisories/unreviewed/2022/04/GHSA-w6p5-vm5x-8m2m/GHSA-w6p5-vm5x-8m2m.json index 4b095a1bdd6..1d23f7a747a 100644 --- a/advisories/unreviewed/2022/04/GHSA-w6p5-vm5x-8m2m/GHSA-w6p5-vm5x-8m2m.json +++ b/advisories/unreviewed/2022/04/GHSA-w6p5-vm5x-8m2m/GHSA-w6p5-vm5x-8m2m.json @@ -7,12 +7,8 @@ "CVE-2002-2338" ], "details": "The POP3 mail client in Mozilla 1.0 and earlier, and Netscape Communicator 4.7 and earlier, allows remote attackers to cause a denial of service (no new mail) via a mail message containing a dot (.) at a newline, which is interpreted as the end of the message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-w932-f265-m42g/GHSA-w932-f265-m42g.json b/advisories/unreviewed/2022/04/GHSA-w932-f265-m42g/GHSA-w932-f265-m42g.json index b2bab2f656b..95cbf2363f1 100644 --- a/advisories/unreviewed/2022/04/GHSA-w932-f265-m42g/GHSA-w932-f265-m42g.json +++ b/advisories/unreviewed/2022/04/GHSA-w932-f265-m42g/GHSA-w932-f265-m42g.json @@ -7,12 +7,8 @@ "CVE-2002-2186" ], "details": "Macromedia JRun 3.0, 3.1, and 4.0 allow remote attackers to view the source code of .JSP files via Unicode encoded character values in a URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wcmh-67fx-99w6/GHSA-wcmh-67fx-99w6.json b/advisories/unreviewed/2022/04/GHSA-wcmh-67fx-99w6/GHSA-wcmh-67fx-99w6.json index 8603762b53f..3643871c058 100644 --- a/advisories/unreviewed/2022/04/GHSA-wcmh-67fx-99w6/GHSA-wcmh-67fx-99w6.json +++ b/advisories/unreviewed/2022/04/GHSA-wcmh-67fx-99w6/GHSA-wcmh-67fx-99w6.json @@ -7,12 +7,8 @@ "CVE-2004-0615" ], "details": "Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wgqp-gcjw-2rh7/GHSA-wgqp-gcjw-2rh7.json b/advisories/unreviewed/2022/04/GHSA-wgqp-gcjw-2rh7/GHSA-wgqp-gcjw-2rh7.json index d752dd3e793..7a9edd07008 100644 --- a/advisories/unreviewed/2022/04/GHSA-wgqp-gcjw-2rh7/GHSA-wgqp-gcjw-2rh7.json +++ b/advisories/unreviewed/2022/04/GHSA-wgqp-gcjw-2rh7/GHSA-wgqp-gcjw-2rh7.json @@ -7,12 +7,8 @@ "CVE-2002-2329" ], "details": "ICQ client 2001b, 2002a and 2002b allows remote attackers to cause a denial of service (CPU consumption or crash) via a message with a large number of emoticons.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-wj8m-rhgj-794c/GHSA-wj8m-rhgj-794c.json b/advisories/unreviewed/2022/04/GHSA-wj8m-rhgj-794c/GHSA-wj8m-rhgj-794c.json index dde83e7d686..1837d6e7ea8 100644 --- a/advisories/unreviewed/2022/04/GHSA-wj8m-rhgj-794c/GHSA-wj8m-rhgj-794c.json +++ b/advisories/unreviewed/2022/04/GHSA-wj8m-rhgj-794c/GHSA-wj8m-rhgj-794c.json @@ -7,12 +7,8 @@ "CVE-2002-2209" ], "details": "Unspecified \"security vulnerability\" in Baby FTP Server versions before November 7, 2002 has unknown impact and attack vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-wmx7-wrrg-r398/GHSA-wmx7-wrrg-r398.json b/advisories/unreviewed/2022/04/GHSA-wmx7-wrrg-r398/GHSA-wmx7-wrrg-r398.json index 54a388140a3..1705129c14e 100644 --- a/advisories/unreviewed/2022/04/GHSA-wmx7-wrrg-r398/GHSA-wmx7-wrrg-r398.json +++ b/advisories/unreviewed/2022/04/GHSA-wmx7-wrrg-r398/GHSA-wmx7-wrrg-r398.json @@ -7,12 +7,8 @@ "CVE-2002-2258" ], "details": "Moby NetSuite allows remote attackers to cause a denial of service (crash) via an HTTP POST request with a (1) large integer or (2) non-numeric value in the Content-Length header, which causes an access violation after a failed atoi function call.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-wp4j-mq44-xx7x/GHSA-wp4j-mq44-xx7x.json b/advisories/unreviewed/2022/04/GHSA-wp4j-mq44-xx7x/GHSA-wp4j-mq44-xx7x.json index 751f2154eb0..641b8e6be3a 100644 --- a/advisories/unreviewed/2022/04/GHSA-wp4j-mq44-xx7x/GHSA-wp4j-mq44-xx7x.json +++ b/advisories/unreviewed/2022/04/GHSA-wp4j-mq44-xx7x/GHSA-wp4j-mq44-xx7x.json @@ -7,12 +7,8 @@ "CVE-2002-2382" ], "details": "cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var/tmp/cvsupd.out.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-wqm6-cw6q-995r/GHSA-wqm6-cw6q-995r.json b/advisories/unreviewed/2022/04/GHSA-wqm6-cw6q-995r/GHSA-wqm6-cw6q-995r.json index 4983a71c775..22a307e3843 100644 --- a/advisories/unreviewed/2022/04/GHSA-wqm6-cw6q-995r/GHSA-wqm6-cw6q-995r.json +++ b/advisories/unreviewed/2022/04/GHSA-wqm6-cw6q-995r/GHSA-wqm6-cw6q-995r.json @@ -7,12 +7,8 @@ "CVE-2002-2166" ], "details": "Cross-site scripting (XSS) vulnerability in FuseTalk 2.0 and 3.0 allows remote attackers to insert arbitrary HTML and web script.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x2fv-2p78-rq82/GHSA-x2fv-2p78-rq82.json b/advisories/unreviewed/2022/04/GHSA-x2fv-2p78-rq82/GHSA-x2fv-2p78-rq82.json index 2ba42c4a6c1..27b4d312d47 100644 --- a/advisories/unreviewed/2022/04/GHSA-x2fv-2p78-rq82/GHSA-x2fv-2p78-rq82.json +++ b/advisories/unreviewed/2022/04/GHSA-x2fv-2p78-rq82/GHSA-x2fv-2p78-rq82.json @@ -7,12 +7,8 @@ "CVE-2002-2345" ], "details": "Oracle 9i Application Server 9.0.2 stores the web cache administrator interface password in plaintext, which allows remote attackers to gain access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x358-wm7h-p4j2/GHSA-x358-wm7h-p4j2.json b/advisories/unreviewed/2022/04/GHSA-x358-wm7h-p4j2/GHSA-x358-wm7h-p4j2.json index a2e3d8ab86c..668dd80f80e 100644 --- a/advisories/unreviewed/2022/04/GHSA-x358-wm7h-p4j2/GHSA-x358-wm7h-p4j2.json +++ b/advisories/unreviewed/2022/04/GHSA-x358-wm7h-p4j2/GHSA-x358-wm7h-p4j2.json @@ -7,12 +7,8 @@ "CVE-2002-2144" ], "details": "Directory traversal vulnerability in BearShare 4.0.5 and 4.0.6 allows remote attackers to read files outside of the web root by hex-encoding the \"/\" (forward slash) or \".\" (dot) characters.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x529-934r-2q9p/GHSA-x529-934r-2q9p.json b/advisories/unreviewed/2022/04/GHSA-x529-934r-2q9p/GHSA-x529-934r-2q9p.json index d6e208dd324..8ab079524b4 100644 --- a/advisories/unreviewed/2022/04/GHSA-x529-934r-2q9p/GHSA-x529-934r-2q9p.json +++ b/advisories/unreviewed/2022/04/GHSA-x529-934r-2q9p/GHSA-x529-934r-2q9p.json @@ -7,12 +7,8 @@ "CVE-2002-2213" ], "details": "The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-x64g-xjfq-w77j/GHSA-x64g-xjfq-w77j.json b/advisories/unreviewed/2022/04/GHSA-x64g-xjfq-w77j/GHSA-x64g-xjfq-w77j.json index 89f95de9ea4..a88565d1796 100644 --- a/advisories/unreviewed/2022/04/GHSA-x64g-xjfq-w77j/GHSA-x64g-xjfq-w77j.json +++ b/advisories/unreviewed/2022/04/GHSA-x64g-xjfq-w77j/GHSA-x64g-xjfq-w77j.json @@ -7,12 +7,8 @@ "CVE-2002-2293" ], "details": "Webshots Desktop screensaver allows local users to bypass the password on the screensaver by pressing CTRL-ALT-DELETE and (1) hitting the cancel button or (2) killing the screensaver from the task manager.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xh58-g4x9-7m2f/GHSA-xh58-g4x9-7m2f.json b/advisories/unreviewed/2022/04/GHSA-xh58-g4x9-7m2f/GHSA-xh58-g4x9-7m2f.json index f3fbfc4e8e0..17ac0e0dff5 100644 --- a/advisories/unreviewed/2022/04/GHSA-xh58-g4x9-7m2f/GHSA-xh58-g4x9-7m2f.json +++ b/advisories/unreviewed/2022/04/GHSA-xh58-g4x9-7m2f/GHSA-xh58-g4x9-7m2f.json @@ -7,12 +7,8 @@ "CVE-2002-2381" ], "details": "Multiple buffer overflows in (1) tetrinet_inmessage, (2) speclist_add and (3) config-getthemeinfo of GTetrinet 0.4.3 and earlier allow remote attackers to casue a denial of service and possibly execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-xmcf-9g6p-h2w6/GHSA-xmcf-9g6p-h2w6.json b/advisories/unreviewed/2022/04/GHSA-xmcf-9g6p-h2w6/GHSA-xmcf-9g6p-h2w6.json index 2cd5857b9ac..734b64a185b 100644 --- a/advisories/unreviewed/2022/04/GHSA-xmcf-9g6p-h2w6/GHSA-xmcf-9g6p-h2w6.json +++ b/advisories/unreviewed/2022/04/GHSA-xmcf-9g6p-h2w6/GHSA-xmcf-9g6p-h2w6.json @@ -7,12 +7,8 @@ "CVE-2002-2273" ], "details": "Cross-site scripting (XSS) vulnerability in Webster HTTP Server allows remote attackers to inject arbitrary web script or HTML via the URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-xv5x-6w3r-qqm9/GHSA-xv5x-6w3r-qqm9.json b/advisories/unreviewed/2022/04/GHSA-xv5x-6w3r-qqm9/GHSA-xv5x-6w3r-qqm9.json index 4f9df45b8be..9663a592c4b 100644 --- a/advisories/unreviewed/2022/04/GHSA-xv5x-6w3r-qqm9/GHSA-xv5x-6w3r-qqm9.json +++ b/advisories/unreviewed/2022/04/GHSA-xv5x-6w3r-qqm9/GHSA-xv5x-6w3r-qqm9.json @@ -7,12 +7,8 @@ "CVE-2002-2312" ], "details": "Opera 6.0.1 allows remote attackers to upload arbitrary file contents when users press a key corresponding to the JavaScript (1) event.ctrlKey or (2) event.shiftKey onkeydown event contained in a webpage.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/04/GHSA-xvf5-q2pw-vpcx/GHSA-xvf5-q2pw-vpcx.json b/advisories/unreviewed/2022/04/GHSA-xvf5-q2pw-vpcx/GHSA-xvf5-q2pw-vpcx.json index fa2ef74f2dd..d72734c08f5 100644 --- a/advisories/unreviewed/2022/04/GHSA-xvf5-q2pw-vpcx/GHSA-xvf5-q2pw-vpcx.json +++ b/advisories/unreviewed/2022/04/GHSA-xvf5-q2pw-vpcx/GHSA-xvf5-q2pw-vpcx.json @@ -7,12 +7,8 @@ "CVE-2002-2246" ], "details": "Cross-site scripting (XSS) vulnerability in VisNetic Website before 3.5.15 allows remote attackers to inject arbitrary web script or HTML via the HTTP referer header (HTTP_REFERER) to a non-existent page, which is injected into the resulting 404 error page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/04/GHSA-xvv4-m3cc-x7cj/GHSA-xvv4-m3cc-x7cj.json b/advisories/unreviewed/2022/04/GHSA-xvv4-m3cc-x7cj/GHSA-xvv4-m3cc-x7cj.json index ff58a69a43a..84607c68c20 100644 --- a/advisories/unreviewed/2022/04/GHSA-xvv4-m3cc-x7cj/GHSA-xvv4-m3cc-x7cj.json +++ b/advisories/unreviewed/2022/04/GHSA-xvv4-m3cc-x7cj/GHSA-xvv4-m3cc-x7cj.json @@ -7,12 +7,8 @@ "CVE-2002-2415" ], "details": "Allied Telesyn AT-8024 1.3.1 and Rapier 24 switches allow remote authenticated users to cause a denial of service in the management interface via a stream of zero (null) bytes sent via UDP to a running service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-222p-ppph-c5v8/GHSA-222p-ppph-c5v8.json b/advisories/unreviewed/2022/05/GHSA-222p-ppph-c5v8/GHSA-222p-ppph-c5v8.json index 48b932e86f5..3c92fc5fbff 100644 --- a/advisories/unreviewed/2022/05/GHSA-222p-ppph-c5v8/GHSA-222p-ppph-c5v8.json +++ b/advisories/unreviewed/2022/05/GHSA-222p-ppph-c5v8/GHSA-222p-ppph-c5v8.json @@ -7,12 +7,8 @@ "CVE-2021-23847" ], "details": "A Missing Authentication in Critical Function in Bosch IP cameras allows an unauthenticated remote attacker to extract sensitive information or change settings of the camera by sending crafted requests to the device. Only devices of the CPP6, CPP7 and CPP7.3 family with firmware 7.70, 7.72, and 7.80 prior to B128 are affected by this vulnerability. Versions 7.62 or lower and INTEOX cameras are not affected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-22j2-mp37-f8p9/GHSA-22j2-mp37-f8p9.json b/advisories/unreviewed/2022/05/GHSA-22j2-mp37-f8p9/GHSA-22j2-mp37-f8p9.json index 6c9022837fe..c27a9ec2392 100644 --- a/advisories/unreviewed/2022/05/GHSA-22j2-mp37-f8p9/GHSA-22j2-mp37-f8p9.json +++ b/advisories/unreviewed/2022/05/GHSA-22j2-mp37-f8p9/GHSA-22j2-mp37-f8p9.json @@ -7,12 +7,8 @@ "CVE-2020-29214" ], "details": "SQL injection vulnerability in SourceCodester Alumni Management System 1.0 allows the user to inject SQL payload to bypass the authentication via admin/login.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-239q-57jm-9rwj/GHSA-239q-57jm-9rwj.json b/advisories/unreviewed/2022/05/GHSA-239q-57jm-9rwj/GHSA-239q-57jm-9rwj.json index 5ca30bfa2fe..6dc3169d58d 100644 --- a/advisories/unreviewed/2022/05/GHSA-239q-57jm-9rwj/GHSA-239q-57jm-9rwj.json +++ b/advisories/unreviewed/2022/05/GHSA-239q-57jm-9rwj/GHSA-239q-57jm-9rwj.json @@ -7,12 +7,8 @@ "CVE-2020-36139" ], "details": "BloofoxCMS 0.5.2.1 allows Reflected Cross-Site Scripting (XSS) vulnerability by inserting a XSS payload within the 'fileurl' parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-23f3-vhq3-gx53/GHSA-23f3-vhq3-gx53.json b/advisories/unreviewed/2022/05/GHSA-23f3-vhq3-gx53/GHSA-23f3-vhq3-gx53.json index 335e288ad7f..87b6ae7a2f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-23f3-vhq3-gx53/GHSA-23f3-vhq3-gx53.json +++ b/advisories/unreviewed/2022/05/GHSA-23f3-vhq3-gx53/GHSA-23f3-vhq3-gx53.json @@ -7,12 +7,8 @@ "CVE-2020-36007" ], "details": "AppCMS 2.0.101 in /admin/template/tpl_app.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-24wm-5mgw-39c9/GHSA-24wm-5mgw-39c9.json b/advisories/unreviewed/2022/05/GHSA-24wm-5mgw-39c9/GHSA-24wm-5mgw-39c9.json index 695d678b8ac..dbd8056cb21 100644 --- a/advisories/unreviewed/2022/05/GHSA-24wm-5mgw-39c9/GHSA-24wm-5mgw-39c9.json +++ b/advisories/unreviewed/2022/05/GHSA-24wm-5mgw-39c9/GHSA-24wm-5mgw-39c9.json @@ -7,12 +7,8 @@ "CVE-2020-23320" ], "details": "There is an Assertion in 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' in parser_parse_function_arguments in JerryScript 2.2.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-25hf-m67j-23hc/GHSA-25hf-m67j-23hc.json b/advisories/unreviewed/2022/05/GHSA-25hf-m67j-23hc/GHSA-25hf-m67j-23hc.json index 6bb4b53a558..ae832c632e3 100644 --- a/advisories/unreviewed/2022/05/GHSA-25hf-m67j-23hc/GHSA-25hf-m67j-23hc.json +++ b/advisories/unreviewed/2022/05/GHSA-25hf-m67j-23hc/GHSA-25hf-m67j-23hc.json @@ -7,12 +7,8 @@ "CVE-2021-33824" ], "details": "An issue was discovered on MOXA Mgate MB3180 Version 2.1 Build 18113012. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-266w-j5c5-474h/GHSA-266w-j5c5-474h.json b/advisories/unreviewed/2022/05/GHSA-266w-j5c5-474h/GHSA-266w-j5c5-474h.json index 442846b2037..917d821c398 100644 --- a/advisories/unreviewed/2022/05/GHSA-266w-j5c5-474h/GHSA-266w-j5c5-474h.json +++ b/advisories/unreviewed/2022/05/GHSA-266w-j5c5-474h/GHSA-266w-j5c5-474h.json @@ -7,12 +7,8 @@ "CVE-2020-36383" ], "details": "PageLayer before 1.3.5 allows reflected XSS via the font-size parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-269w-9hm6-g22q/GHSA-269w-9hm6-g22q.json b/advisories/unreviewed/2022/05/GHSA-269w-9hm6-g22q/GHSA-269w-9hm6-g22q.json index 34cb3252956..76e18b5520e 100644 --- a/advisories/unreviewed/2022/05/GHSA-269w-9hm6-g22q/GHSA-269w-9hm6-g22q.json +++ b/advisories/unreviewed/2022/05/GHSA-269w-9hm6-g22q/GHSA-269w-9hm6-g22q.json @@ -7,12 +7,8 @@ "CVE-2021-34813" ], "details": "Matrix libolm before 3.2.3 allows a malicious Matrix homeserver to crash a client (while it is attempting to retrieve an Olm encrypted room key backup from the homeserver) because olm_pk_decrypt has a stack-based buffer overflow. Remote code execution might be possible for some nonstandard build configurations.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2788-q3c5-xfcj/GHSA-2788-q3c5-xfcj.json b/advisories/unreviewed/2022/05/GHSA-2788-q3c5-xfcj/GHSA-2788-q3c5-xfcj.json index 0b34aa80c68..646d323c877 100644 --- a/advisories/unreviewed/2022/05/GHSA-2788-q3c5-xfcj/GHSA-2788-q3c5-xfcj.json +++ b/advisories/unreviewed/2022/05/GHSA-2788-q3c5-xfcj/GHSA-2788-q3c5-xfcj.json @@ -7,12 +7,8 @@ "CVE-2021-32536" ], "details": "The login page in the MCUsystem does not filter with special characters, which allows remote attackers can inject JavaScript without privilege and thus perform reflected XSS attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-289v-m8x3-jrw2/GHSA-289v-m8x3-jrw2.json b/advisories/unreviewed/2022/05/GHSA-289v-m8x3-jrw2/GHSA-289v-m8x3-jrw2.json index aad703f5522..406c4e2f333 100644 --- a/advisories/unreviewed/2022/05/GHSA-289v-m8x3-jrw2/GHSA-289v-m8x3-jrw2.json +++ b/advisories/unreviewed/2022/05/GHSA-289v-m8x3-jrw2/GHSA-289v-m8x3-jrw2.json @@ -7,12 +7,8 @@ "CVE-2021-33660" ], "details": "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FLI file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-28q6-f58p-4jf2/GHSA-28q6-f58p-4jf2.json b/advisories/unreviewed/2022/05/GHSA-28q6-f58p-4jf2/GHSA-28q6-f58p-4jf2.json index 17ccb9f71b8..8b58fb0faed 100644 --- a/advisories/unreviewed/2022/05/GHSA-28q6-f58p-4jf2/GHSA-28q6-f58p-4jf2.json +++ b/advisories/unreviewed/2022/05/GHSA-28q6-f58p-4jf2/GHSA-28q6-f58p-4jf2.json @@ -7,12 +7,8 @@ "CVE-2020-24667" ], "details": "Trace Financial CRESTBridge <6.3.0.02 contains an authenticated SQL injection vulnerability, which was fixed in 6.3.0.03.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-28w9-vf5c-mw9p/GHSA-28w9-vf5c-mw9p.json b/advisories/unreviewed/2022/05/GHSA-28w9-vf5c-mw9p/GHSA-28w9-vf5c-mw9p.json index d457b9f7649..6b67d039d80 100644 --- a/advisories/unreviewed/2022/05/GHSA-28w9-vf5c-mw9p/GHSA-28w9-vf5c-mw9p.json +++ b/advisories/unreviewed/2022/05/GHSA-28w9-vf5c-mw9p/GHSA-28w9-vf5c-mw9p.json @@ -7,12 +7,8 @@ "CVE-2021-26996" ], "details": "E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to discover system configuration and application information which may aid in crafting more complex attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-29c4-jgxv-3wv5/GHSA-29c4-jgxv-3wv5.json b/advisories/unreviewed/2022/05/GHSA-29c4-jgxv-3wv5/GHSA-29c4-jgxv-3wv5.json index 9101a839af1..f46157317ef 100644 --- a/advisories/unreviewed/2022/05/GHSA-29c4-jgxv-3wv5/GHSA-29c4-jgxv-3wv5.json +++ b/advisories/unreviewed/2022/05/GHSA-29c4-jgxv-3wv5/GHSA-29c4-jgxv-3wv5.json @@ -7,12 +7,8 @@ "CVE-2021-0324" ], "details": "Product: AndroidVersions: Android SoCAndroid ID: A-175402462", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-29fr-w873-4ghj/GHSA-29fr-w873-4ghj.json b/advisories/unreviewed/2022/05/GHSA-29fr-w873-4ghj/GHSA-29fr-w873-4ghj.json index 306abf42241..cee8f75a83f 100644 --- a/advisories/unreviewed/2022/05/GHSA-29fr-w873-4ghj/GHSA-29fr-w873-4ghj.json +++ b/advisories/unreviewed/2022/05/GHSA-29fr-w873-4ghj/GHSA-29fr-w873-4ghj.json @@ -7,12 +7,8 @@ "CVE-2020-5008" ], "details": "IBM DataPower Gateway 10.0.0.0 through 10.0.1.0 and 2018.4.1.0 through 2018.4.1.14 stores sensitive information in GET request parameters. This may lead to information disclosure if unauthorized parties have access to the URLs via server logs, referrer header or browser history. IBM X-Force ID: 193033.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2fwg-qc8c-frhr/GHSA-2fwg-qc8c-frhr.json b/advisories/unreviewed/2022/05/GHSA-2fwg-qc8c-frhr/GHSA-2fwg-qc8c-frhr.json index 19f4a938af1..6560d00d30c 100644 --- a/advisories/unreviewed/2022/05/GHSA-2fwg-qc8c-frhr/GHSA-2fwg-qc8c-frhr.json +++ b/advisories/unreviewed/2022/05/GHSA-2fwg-qc8c-frhr/GHSA-2fwg-qc8c-frhr.json @@ -7,12 +7,8 @@ "CVE-2021-31521" ], "details": "Trend Micro InterScan Web Security Virtual Appliance version 6.5 was found to have a reflected cross-site scripting (XSS) vulnerability in the product's Captive Portal.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2g35-2j4v-hc79/GHSA-2g35-2j4v-hc79.json b/advisories/unreviewed/2022/05/GHSA-2g35-2j4v-hc79/GHSA-2g35-2j4v-hc79.json index d463d101a38..5547bda54ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-2g35-2j4v-hc79/GHSA-2g35-2j4v-hc79.json +++ b/advisories/unreviewed/2022/05/GHSA-2g35-2j4v-hc79/GHSA-2g35-2j4v-hc79.json @@ -7,12 +7,8 @@ "CVE-2005-0018" ], "details": "The f2 shell script in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2hrj-3p9c-p37q/GHSA-2hrj-3p9c-p37q.json b/advisories/unreviewed/2022/05/GHSA-2hrj-3p9c-p37q/GHSA-2hrj-3p9c-p37q.json index 787bc128ff5..ef95e21c335 100644 --- a/advisories/unreviewed/2022/05/GHSA-2hrj-3p9c-p37q/GHSA-2hrj-3p9c-p37q.json +++ b/advisories/unreviewed/2022/05/GHSA-2hrj-3p9c-p37q/GHSA-2hrj-3p9c-p37q.json @@ -7,12 +7,8 @@ "CVE-2020-36141" ], "details": "BloofoxCMS 0.5.2.1 allows Unrestricted File Upload vulnerability via bypass MIME Type validation by inserting 'image/jpeg' within the 'Content-Type' header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2jfr-2v34-hr95/GHSA-2jfr-2v34-hr95.json b/advisories/unreviewed/2022/05/GHSA-2jfr-2v34-hr95/GHSA-2jfr-2v34-hr95.json index b5874db8fa3..84816cd333a 100644 --- a/advisories/unreviewed/2022/05/GHSA-2jfr-2v34-hr95/GHSA-2jfr-2v34-hr95.json +++ b/advisories/unreviewed/2022/05/GHSA-2jfr-2v34-hr95/GHSA-2jfr-2v34-hr95.json @@ -7,12 +7,8 @@ "CVE-2021-30549" ], "details": "Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2jvj-298c-h5x3/GHSA-2jvj-298c-h5x3.json b/advisories/unreviewed/2022/05/GHSA-2jvj-298c-h5x3/GHSA-2jvj-298c-h5x3.json index fc095a7b34c..8864102d71a 100644 --- a/advisories/unreviewed/2022/05/GHSA-2jvj-298c-h5x3/GHSA-2jvj-298c-h5x3.json +++ b/advisories/unreviewed/2022/05/GHSA-2jvj-298c-h5x3/GHSA-2jvj-298c-h5x3.json @@ -7,12 +7,8 @@ "CVE-2021-22754" ], "details": "A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to lack of proper validation of user-supplied data, when a malicious CGF file is imported to IGSS Definition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2m6m-4m28-hxfc/GHSA-2m6m-4m28-hxfc.json b/advisories/unreviewed/2022/05/GHSA-2m6m-4m28-hxfc/GHSA-2m6m-4m28-hxfc.json index 7181f8f0318..3d1271b1bfd 100644 --- a/advisories/unreviewed/2022/05/GHSA-2m6m-4m28-hxfc/GHSA-2m6m-4m28-hxfc.json +++ b/advisories/unreviewed/2022/05/GHSA-2m6m-4m28-hxfc/GHSA-2m6m-4m28-hxfc.json @@ -7,12 +7,8 @@ "CVE-2005-0049" ], "details": "Windows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP redirection query, which allows remote attackers to inject arbitrary HTML and web script via a cross-site scripting (XSS) attack, or to spoof the web cache.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2p89-vr82-6vw5/GHSA-2p89-vr82-6vw5.json b/advisories/unreviewed/2022/05/GHSA-2p89-vr82-6vw5/GHSA-2p89-vr82-6vw5.json index e6094d362d8..923b34c69f8 100644 --- a/advisories/unreviewed/2022/05/GHSA-2p89-vr82-6vw5/GHSA-2p89-vr82-6vw5.json +++ b/advisories/unreviewed/2022/05/GHSA-2p89-vr82-6vw5/GHSA-2p89-vr82-6vw5.json @@ -7,12 +7,8 @@ "CVE-2021-22221" ], "details": "An issue has been discovered in GitLab affecting all versions starting from 12.9.0 before 13.10.5, all versions starting from 13.11.0 before 13.11.5, all versions starting from 13.12.0 before 13.12.2. Insufficient expired password validation in various operations allow user to maintain limited access after their password expired", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2phg-847f-rp75/GHSA-2phg-847f-rp75.json b/advisories/unreviewed/2022/05/GHSA-2phg-847f-rp75/GHSA-2phg-847f-rp75.json index 4044e877a0a..45f791bc968 100644 --- a/advisories/unreviewed/2022/05/GHSA-2phg-847f-rp75/GHSA-2phg-847f-rp75.json +++ b/advisories/unreviewed/2022/05/GHSA-2phg-847f-rp75/GHSA-2phg-847f-rp75.json @@ -7,12 +7,8 @@ "CVE-2021-26995" ], "details": "E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow privileged attackers to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-2px6-897q-9wvw/GHSA-2px6-897q-9wvw.json b/advisories/unreviewed/2022/05/GHSA-2px6-897q-9wvw/GHSA-2px6-897q-9wvw.json index bac3443a802..6e5e54defe6 100644 --- a/advisories/unreviewed/2022/05/GHSA-2px6-897q-9wvw/GHSA-2px6-897q-9wvw.json +++ b/advisories/unreviewed/2022/05/GHSA-2px6-897q-9wvw/GHSA-2px6-897q-9wvw.json @@ -7,12 +7,8 @@ "CVE-2021-27399" ], "details": "A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MP3). The femap.exe application lacks proper validation of user-supplied data when parsing FEMAP files. This could result in an out of bounds write past the end of an allocated structure, a different vulnerability than CVE-2021-27387. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12820)", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2q62-c428-jcwc/GHSA-2q62-c428-jcwc.json b/advisories/unreviewed/2022/05/GHSA-2q62-c428-jcwc/GHSA-2q62-c428-jcwc.json index feb692a513c..390df63331d 100644 --- a/advisories/unreviewed/2022/05/GHSA-2q62-c428-jcwc/GHSA-2q62-c428-jcwc.json +++ b/advisories/unreviewed/2022/05/GHSA-2q62-c428-jcwc/GHSA-2q62-c428-jcwc.json @@ -7,12 +7,8 @@ "CVE-2021-0101" ], "details": "Buffer overflow in the BMC firmware for Intel(R) Server BoardM10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable an escalation of privilege via adjacent access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2w6j-vfmx-4r46/GHSA-2w6j-vfmx-4r46.json b/advisories/unreviewed/2022/05/GHSA-2w6j-vfmx-4r46/GHSA-2w6j-vfmx-4r46.json index 2ec74f1fbfb..f43b9670d22 100644 --- a/advisories/unreviewed/2022/05/GHSA-2w6j-vfmx-4r46/GHSA-2w6j-vfmx-4r46.json +++ b/advisories/unreviewed/2022/05/GHSA-2w6j-vfmx-4r46/GHSA-2w6j-vfmx-4r46.json @@ -7,12 +7,8 @@ "CVE-2021-25422" ], "details": "Improper log management vulnerability in Watch Active PlugIn prior to version 2.2.07.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2w86-3xc7-pmwq/GHSA-2w86-3xc7-pmwq.json b/advisories/unreviewed/2022/05/GHSA-2w86-3xc7-pmwq/GHSA-2w86-3xc7-pmwq.json index 33578307f82..fe7ada246f3 100644 --- a/advisories/unreviewed/2022/05/GHSA-2w86-3xc7-pmwq/GHSA-2w86-3xc7-pmwq.json +++ b/advisories/unreviewed/2022/05/GHSA-2w86-3xc7-pmwq/GHSA-2w86-3xc7-pmwq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2wcp-wj82-j6vw/GHSA-2wcp-wj82-j6vw.json b/advisories/unreviewed/2022/05/GHSA-2wcp-wj82-j6vw/GHSA-2wcp-wj82-j6vw.json index f64e6ea1aae..3e76ff19e38 100644 --- a/advisories/unreviewed/2022/05/GHSA-2wcp-wj82-j6vw/GHSA-2wcp-wj82-j6vw.json +++ b/advisories/unreviewed/2022/05/GHSA-2wcp-wj82-j6vw/GHSA-2wcp-wj82-j6vw.json @@ -7,12 +7,8 @@ "CVE-2020-35759" ], "details": "bloofoxCMS 0.5.2.1 is infected with a CSRF Attack that leads to an attacker editing any file content (Locally/Remotely).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2wg4-jvq7-qmph/GHSA-2wg4-jvq7-qmph.json b/advisories/unreviewed/2022/05/GHSA-2wg4-jvq7-qmph/GHSA-2wg4-jvq7-qmph.json index 707c4319042..49e32c80f8c 100644 --- a/advisories/unreviewed/2022/05/GHSA-2wg4-jvq7-qmph/GHSA-2wg4-jvq7-qmph.json +++ b/advisories/unreviewed/2022/05/GHSA-2wg4-jvq7-qmph/GHSA-2wg4-jvq7-qmph.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2x34-356c-v9qp/GHSA-2x34-356c-v9qp.json b/advisories/unreviewed/2022/05/GHSA-2x34-356c-v9qp/GHSA-2x34-356c-v9qp.json index 06489444291..41adab85774 100644 --- a/advisories/unreviewed/2022/05/GHSA-2x34-356c-v9qp/GHSA-2x34-356c-v9qp.json +++ b/advisories/unreviewed/2022/05/GHSA-2x34-356c-v9qp/GHSA-2x34-356c-v9qp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-2xrj-wrq4-ff74/GHSA-2xrj-wrq4-ff74.json b/advisories/unreviewed/2022/05/GHSA-2xrj-wrq4-ff74/GHSA-2xrj-wrq4-ff74.json index 879b1d0957a..469fe0b6b4a 100644 --- a/advisories/unreviewed/2022/05/GHSA-2xrj-wrq4-ff74/GHSA-2xrj-wrq4-ff74.json +++ b/advisories/unreviewed/2022/05/GHSA-2xrj-wrq4-ff74/GHSA-2xrj-wrq4-ff74.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-335g-mg6r-4m22/GHSA-335g-mg6r-4m22.json b/advisories/unreviewed/2022/05/GHSA-335g-mg6r-4m22/GHSA-335g-mg6r-4m22.json index d1925b2bb60..13131db5a1c 100644 --- a/advisories/unreviewed/2022/05/GHSA-335g-mg6r-4m22/GHSA-335g-mg6r-4m22.json +++ b/advisories/unreviewed/2022/05/GHSA-335g-mg6r-4m22/GHSA-335g-mg6r-4m22.json @@ -7,12 +7,8 @@ "CVE-2021-24351" ], "details": "The theplus_more_post AJAX action of The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.12 did not properly sanitise some of its fields, leading to a reflected Cross-Site Scripting (exploitable on both unauthenticated and authenticated users)", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-34h8-mfmv-f2g5/GHSA-34h8-mfmv-f2g5.json b/advisories/unreviewed/2022/05/GHSA-34h8-mfmv-f2g5/GHSA-34h8-mfmv-f2g5.json index a972ed9e194..e9345abf547 100644 --- a/advisories/unreviewed/2022/05/GHSA-34h8-mfmv-f2g5/GHSA-34h8-mfmv-f2g5.json +++ b/advisories/unreviewed/2022/05/GHSA-34h8-mfmv-f2g5/GHSA-34h8-mfmv-f2g5.json @@ -7,12 +7,8 @@ "CVE-2021-27387" ], "details": "A vulnerability has been identified in Simcenter Femap 2020.2 (All versions < V2020.2.MP3), Simcenter Femap 2021.1 (All versions < V2021.1.MP3). The femap.exe application lacks proper validation of user-supplied data when parsing FEMAP files. This could result in an out of bounds write past the end of an allocated structure, a different vulnerability than CVE-2021-27399. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12819)", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-34hj-xw38-hm2j/GHSA-34hj-xw38-hm2j.json b/advisories/unreviewed/2022/05/GHSA-34hj-xw38-hm2j/GHSA-34hj-xw38-hm2j.json index 123380bd10e..aacd2ac71b3 100644 --- a/advisories/unreviewed/2022/05/GHSA-34hj-xw38-hm2j/GHSA-34hj-xw38-hm2j.json +++ b/advisories/unreviewed/2022/05/GHSA-34hj-xw38-hm2j/GHSA-34hj-xw38-hm2j.json @@ -7,12 +7,8 @@ "CVE-2021-1570" ], "details": "Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for Mac, and Cisco Jabber for mobile platforms could allow an attacker to access sensitive information or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-34qr-5fqg-cj38/GHSA-34qr-5fqg-cj38.json b/advisories/unreviewed/2022/05/GHSA-34qr-5fqg-cj38/GHSA-34qr-5fqg-cj38.json index ffd240e1315..997b7678f01 100644 --- a/advisories/unreviewed/2022/05/GHSA-34qr-5fqg-cj38/GHSA-34qr-5fqg-cj38.json +++ b/advisories/unreviewed/2022/05/GHSA-34qr-5fqg-cj38/GHSA-34qr-5fqg-cj38.json @@ -7,12 +7,8 @@ "CVE-2021-1502" ], "details": "A vulnerability in Cisco Webex Network Recording Player for Windows and MacOS and Cisco Webex Player for Windows and MacOS could allow an attacker to execute arbitrary code on an affected system. The vulnerability is due to insufficient validation of values within Webex recording files formatted as either Advanced Recording Format (ARF) or Webex Recording Format (WRF). An attacker could exploit the vulnerability by sending a user a malicious ARF or WRF file through a link or email attachment and persuading the user to open the file. A successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of the targeted user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-34wx-v4h8-8xh4/GHSA-34wx-v4h8-8xh4.json b/advisories/unreviewed/2022/05/GHSA-34wx-v4h8-8xh4/GHSA-34wx-v4h8-8xh4.json index ab3856812b5..0913857a60d 100644 --- a/advisories/unreviewed/2022/05/GHSA-34wx-v4h8-8xh4/GHSA-34wx-v4h8-8xh4.json +++ b/advisories/unreviewed/2022/05/GHSA-34wx-v4h8-8xh4/GHSA-34wx-v4h8-8xh4.json @@ -7,12 +7,8 @@ "CVE-2021-0131" ], "details": "Use of cryptographically weak pseudo-random number generator (PRNG) in an API for the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentially enable information disclosure via network access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-353p-c73g-8fwc/GHSA-353p-c73g-8fwc.json b/advisories/unreviewed/2022/05/GHSA-353p-c73g-8fwc/GHSA-353p-c73g-8fwc.json index 4ee185883d0..1ea29c1b817 100644 --- a/advisories/unreviewed/2022/05/GHSA-353p-c73g-8fwc/GHSA-353p-c73g-8fwc.json +++ b/advisories/unreviewed/2022/05/GHSA-353p-c73g-8fwc/GHSA-353p-c73g-8fwc.json @@ -7,12 +7,8 @@ "CVE-2021-27635" ], "details": "SAP NetWeaver AS for JAVA, versions - 7.20, 7.30, 7.31, 7.40, 7.50, allows an attacker authenticated as an administrator to connect over a network and submit a specially crafted XML file in the application because of missing XML Validation, this vulnerability enables attacker to fully compromise confidentiality by allowing them to read any file on the filesystem or fully compromise availability by causing the system to crash. The attack cannot be used to change any data so that there is no compromise as to integrity.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-35wj-mf36-r4h7/GHSA-35wj-mf36-r4h7.json b/advisories/unreviewed/2022/05/GHSA-35wj-mf36-r4h7/GHSA-35wj-mf36-r4h7.json index 07d4b04d697..71881dca13a 100644 --- a/advisories/unreviewed/2022/05/GHSA-35wj-mf36-r4h7/GHSA-35wj-mf36-r4h7.json +++ b/advisories/unreviewed/2022/05/GHSA-35wj-mf36-r4h7/GHSA-35wj-mf36-r4h7.json @@ -7,12 +7,8 @@ "CVE-2021-20731" ], "details": "WSR-1166DHP3 firmware Ver.1.16 and prior and WSR-1166DHP4 firmware Ver.1.02 and prior allow an attacker to execute arbitrary OS commands with root privileges via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3657-fjf8-53fm/GHSA-3657-fjf8-53fm.json b/advisories/unreviewed/2022/05/GHSA-3657-fjf8-53fm/GHSA-3657-fjf8-53fm.json index 6634c87d428..147733a812b 100644 --- a/advisories/unreviewed/2022/05/GHSA-3657-fjf8-53fm/GHSA-3657-fjf8-53fm.json +++ b/advisories/unreviewed/2022/05/GHSA-3657-fjf8-53fm/GHSA-3657-fjf8-53fm.json @@ -7,12 +7,8 @@ "CVE-2021-30516" ], "details": "Heap buffer overflow in History in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-37f5-h3rf-vphw/GHSA-37f5-h3rf-vphw.json b/advisories/unreviewed/2022/05/GHSA-37f5-h3rf-vphw/GHSA-37f5-h3rf-vphw.json index 77a124a01ad..b93d79181f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-37f5-h3rf-vphw/GHSA-37f5-h3rf-vphw.json +++ b/advisories/unreviewed/2022/05/GHSA-37f5-h3rf-vphw/GHSA-37f5-h3rf-vphw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-37g9-8cjr-x358/GHSA-37g9-8cjr-x358.json b/advisories/unreviewed/2022/05/GHSA-37g9-8cjr-x358/GHSA-37g9-8cjr-x358.json index 09739bb95ec..f44cf50fedd 100644 --- a/advisories/unreviewed/2022/05/GHSA-37g9-8cjr-x358/GHSA-37g9-8cjr-x358.json +++ b/advisories/unreviewed/2022/05/GHSA-37g9-8cjr-x358/GHSA-37g9-8cjr-x358.json @@ -7,12 +7,8 @@ "CVE-2020-11160" ], "details": "Resource leakage issue during dci client registration due to reference count is not decremented if dci client registration fails in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-37hr-898c-hc2f/GHSA-37hr-898c-hc2f.json b/advisories/unreviewed/2022/05/GHSA-37hr-898c-hc2f/GHSA-37hr-898c-hc2f.json index 35caa8f925f..e79ba76a390 100644 --- a/advisories/unreviewed/2022/05/GHSA-37hr-898c-hc2f/GHSA-37hr-898c-hc2f.json +++ b/advisories/unreviewed/2022/05/GHSA-37hr-898c-hc2f/GHSA-37hr-898c-hc2f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-38cc-hm43-pvfh/GHSA-38cc-hm43-pvfh.json b/advisories/unreviewed/2022/05/GHSA-38cc-hm43-pvfh/GHSA-38cc-hm43-pvfh.json index c65555808cd..e45d160434c 100644 --- a/advisories/unreviewed/2022/05/GHSA-38cc-hm43-pvfh/GHSA-38cc-hm43-pvfh.json +++ b/advisories/unreviewed/2022/05/GHSA-38cc-hm43-pvfh/GHSA-38cc-hm43-pvfh.json @@ -7,12 +7,8 @@ "CVE-2021-1571" ], "details": "Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting (XSS) attack Conduct an HTML injection attack For more information about these vulnerabilities, see the Details section of this advisory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-38gp-jhv5-4hgh/GHSA-38gp-jhv5-4hgh.json b/advisories/unreviewed/2022/05/GHSA-38gp-jhv5-4hgh/GHSA-38gp-jhv5-4hgh.json index 4fd42989065..f7664700e7d 100644 --- a/advisories/unreviewed/2022/05/GHSA-38gp-jhv5-4hgh/GHSA-38gp-jhv5-4hgh.json +++ b/advisories/unreviewed/2022/05/GHSA-38gp-jhv5-4hgh/GHSA-38gp-jhv5-4hgh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-38j3-rhq2-4x2j/GHSA-38j3-rhq2-4x2j.json b/advisories/unreviewed/2022/05/GHSA-38j3-rhq2-4x2j/GHSA-38j3-rhq2-4x2j.json index 3f478a09bac..4050fcc775d 100644 --- a/advisories/unreviewed/2022/05/GHSA-38j3-rhq2-4x2j/GHSA-38j3-rhq2-4x2j.json +++ b/advisories/unreviewed/2022/05/GHSA-38j3-rhq2-4x2j/GHSA-38j3-rhq2-4x2j.json @@ -7,12 +7,8 @@ "CVE-2021-30546" ], "details": "Use after free in Autofill in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-39fw-3cgq-f4qw/GHSA-39fw-3cgq-f4qw.json b/advisories/unreviewed/2022/05/GHSA-39fw-3cgq-f4qw/GHSA-39fw-3cgq-f4qw.json index 34840378794..f3f3170e28e 100644 --- a/advisories/unreviewed/2022/05/GHSA-39fw-3cgq-f4qw/GHSA-39fw-3cgq-f4qw.json +++ b/advisories/unreviewed/2022/05/GHSA-39fw-3cgq-f4qw/GHSA-39fw-3cgq-f4qw.json @@ -7,12 +7,8 @@ "CVE-2005-0043" ], "details": "Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-39gf-rwjm-m5hw/GHSA-39gf-rwjm-m5hw.json b/advisories/unreviewed/2022/05/GHSA-39gf-rwjm-m5hw/GHSA-39gf-rwjm-m5hw.json index 211e3fb15e0..74b68961bc2 100644 --- a/advisories/unreviewed/2022/05/GHSA-39gf-rwjm-m5hw/GHSA-39gf-rwjm-m5hw.json +++ b/advisories/unreviewed/2022/05/GHSA-39gf-rwjm-m5hw/GHSA-39gf-rwjm-m5hw.json @@ -7,12 +7,8 @@ "CVE-2021-24342" ], "details": "The JNews WordPress theme before 8.0.6 did not sanitise the cat_id parameter in the POST request /?ajax-request=jnews (with action=jnews_build_mega_category_*), leading to a Reflected Cross-Site Scripting (XSS) issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-39v2-v4hx-4r39/GHSA-39v2-v4hx-4r39.json b/advisories/unreviewed/2022/05/GHSA-39v2-v4hx-4r39/GHSA-39v2-v4hx-4r39.json index d6b7058e736..d485cc0d24b 100644 --- a/advisories/unreviewed/2022/05/GHSA-39v2-v4hx-4r39/GHSA-39v2-v4hx-4r39.json +++ b/advisories/unreviewed/2022/05/GHSA-39v2-v4hx-4r39/GHSA-39v2-v4hx-4r39.json @@ -7,12 +7,8 @@ "CVE-2005-0035" ], "details": "The Acrobat web control in Adobe Acrobat and Acrobat Reader 7.0 and earlier, when used with Internet Explorer, allows remote attackers to determine the existence of arbitrary files via the LoadFile ActiveX method.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3f59-325x-78rx/GHSA-3f59-325x-78rx.json b/advisories/unreviewed/2022/05/GHSA-3f59-325x-78rx/GHSA-3f59-325x-78rx.json index 0e5c011e31d..8699a7d3581 100644 --- a/advisories/unreviewed/2022/05/GHSA-3f59-325x-78rx/GHSA-3f59-325x-78rx.json +++ b/advisories/unreviewed/2022/05/GHSA-3f59-325x-78rx/GHSA-3f59-325x-78rx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3ffh-3h59-484g/GHSA-3ffh-3h59-484g.json b/advisories/unreviewed/2022/05/GHSA-3ffh-3h59-484g/GHSA-3ffh-3h59-484g.json index ac71a9e5645..6f2484fd96b 100644 --- a/advisories/unreviewed/2022/05/GHSA-3ffh-3h59-484g/GHSA-3ffh-3h59-484g.json +++ b/advisories/unreviewed/2022/05/GHSA-3ffh-3h59-484g/GHSA-3ffh-3h59-484g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3fqr-m8pg-8rw6/GHSA-3fqr-m8pg-8rw6.json b/advisories/unreviewed/2022/05/GHSA-3fqr-m8pg-8rw6/GHSA-3fqr-m8pg-8rw6.json index 87f86b50a4d..daf68533a91 100644 --- a/advisories/unreviewed/2022/05/GHSA-3fqr-m8pg-8rw6/GHSA-3fqr-m8pg-8rw6.json +++ b/advisories/unreviewed/2022/05/GHSA-3fqr-m8pg-8rw6/GHSA-3fqr-m8pg-8rw6.json @@ -7,12 +7,8 @@ "CVE-2021-23024" ], "details": "On version 8.0.x before 8.0.0.1, and all 6.x and 7.x versions, the BIG-IQ Configuration utility has an authenticated remote command execution vulnerability in undisclosed pages. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3g3h-74p9-27c2/GHSA-3g3h-74p9-27c2.json b/advisories/unreviewed/2022/05/GHSA-3g3h-74p9-27c2/GHSA-3g3h-74p9-27c2.json index ee332112a2f..38349f7bbe4 100644 --- a/advisories/unreviewed/2022/05/GHSA-3g3h-74p9-27c2/GHSA-3g3h-74p9-27c2.json +++ b/advisories/unreviewed/2022/05/GHSA-3g3h-74p9-27c2/GHSA-3g3h-74p9-27c2.json @@ -7,12 +7,8 @@ "CVE-2020-12296" ], "details": "Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3gj8-rw59-4xgx/GHSA-3gj8-rw59-4xgx.json b/advisories/unreviewed/2022/05/GHSA-3gj8-rw59-4xgx/GHSA-3gj8-rw59-4xgx.json index d0af8e6ddb2..998a25cc7e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-3gj8-rw59-4xgx/GHSA-3gj8-rw59-4xgx.json +++ b/advisories/unreviewed/2022/05/GHSA-3gj8-rw59-4xgx/GHSA-3gj8-rw59-4xgx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3gpv-5cwr-97p5/GHSA-3gpv-5cwr-97p5.json b/advisories/unreviewed/2022/05/GHSA-3gpv-5cwr-97p5/GHSA-3gpv-5cwr-97p5.json index e5ee7654bc8..ef488b58897 100644 --- a/advisories/unreviewed/2022/05/GHSA-3gpv-5cwr-97p5/GHSA-3gpv-5cwr-97p5.json +++ b/advisories/unreviewed/2022/05/GHSA-3gpv-5cwr-97p5/GHSA-3gpv-5cwr-97p5.json @@ -7,12 +7,8 @@ "CVE-2020-11265" ], "details": "Information disclosure issue due to lack of validation of pointer arguments passed to TZ BSP in Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3h4x-jrvr-p38w/GHSA-3h4x-jrvr-p38w.json b/advisories/unreviewed/2022/05/GHSA-3h4x-jrvr-p38w/GHSA-3h4x-jrvr-p38w.json index 30a1ec7fa95..55f9bc67244 100644 --- a/advisories/unreviewed/2022/05/GHSA-3h4x-jrvr-p38w/GHSA-3h4x-jrvr-p38w.json +++ b/advisories/unreviewed/2022/05/GHSA-3h4x-jrvr-p38w/GHSA-3h4x-jrvr-p38w.json @@ -7,12 +7,8 @@ "CVE-2021-23848" ], "details": "An error in the URL handler Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. An attacker with knowledge of the camera address can send a crafted link to a user, which will execute javascript code in the context of the user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3jrg-h4x2-422g/GHSA-3jrg-h4x2-422g.json b/advisories/unreviewed/2022/05/GHSA-3jrg-h4x2-422g/GHSA-3jrg-h4x2-422g.json index aa57dfd71e1..6efe43ad2e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-3jrg-h4x2-422g/GHSA-3jrg-h4x2-422g.json +++ b/advisories/unreviewed/2022/05/GHSA-3jrg-h4x2-422g/GHSA-3jrg-h4x2-422g.json @@ -7,12 +7,8 @@ "CVE-2020-18268" ], "details": "Open Redirect in Z-BlogPHP v1.5.2 and earlier allows remote attackers to obtain sensitive information via the \"redirect\" parameter in the component \"zb_system/cmd.php.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3px8-7pj4-m3r5/GHSA-3px8-7pj4-m3r5.json b/advisories/unreviewed/2022/05/GHSA-3px8-7pj4-m3r5/GHSA-3px8-7pj4-m3r5.json index 97af7f62720..eb6cec5a72a 100644 --- a/advisories/unreviewed/2022/05/GHSA-3px8-7pj4-m3r5/GHSA-3px8-7pj4-m3r5.json +++ b/advisories/unreviewed/2022/05/GHSA-3px8-7pj4-m3r5/GHSA-3px8-7pj4-m3r5.json @@ -7,12 +7,8 @@ "CVE-2021-25406" ], "details": "Information exposure vulnerability in Gear S Plugin prior to version 2.2.05.20122441 allows unstrusted applications to access connected BT device information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3q28-wqh2-j2f3/GHSA-3q28-wqh2-j2f3.json b/advisories/unreviewed/2022/05/GHSA-3q28-wqh2-j2f3/GHSA-3q28-wqh2-j2f3.json index 046a9a3ec60..d433c2eb0e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-3q28-wqh2-j2f3/GHSA-3q28-wqh2-j2f3.json +++ b/advisories/unreviewed/2022/05/GHSA-3q28-wqh2-j2f3/GHSA-3q28-wqh2-j2f3.json @@ -7,12 +7,8 @@ "CVE-2021-28210" ], "details": "An unlimited recursion in DxeCore in EDK II.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3q2v-fjjf-4p2w/GHSA-3q2v-fjjf-4p2w.json b/advisories/unreviewed/2022/05/GHSA-3q2v-fjjf-4p2w/GHSA-3q2v-fjjf-4p2w.json index 27ac8d47d07..6a3621ee2a9 100644 --- a/advisories/unreviewed/2022/05/GHSA-3q2v-fjjf-4p2w/GHSA-3q2v-fjjf-4p2w.json +++ b/advisories/unreviewed/2022/05/GHSA-3q2v-fjjf-4p2w/GHSA-3q2v-fjjf-4p2w.json @@ -7,12 +7,8 @@ "CVE-2021-3040" ], "details": "An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.139. Checkov 1.0 versions are not impacted.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3q8f-mjcr-w4jg/GHSA-3q8f-mjcr-w4jg.json b/advisories/unreviewed/2022/05/GHSA-3q8f-mjcr-w4jg/GHSA-3q8f-mjcr-w4jg.json index 3742fd158bb..231a266b2a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-3q8f-mjcr-w4jg/GHSA-3q8f-mjcr-w4jg.json +++ b/advisories/unreviewed/2022/05/GHSA-3q8f-mjcr-w4jg/GHSA-3q8f-mjcr-w4jg.json @@ -7,12 +7,8 @@ "CVE-2021-0133" ], "details": "Key exchange without entity authentication in the Intel(R) Security Library before version 3.3 may allow an authenticated user to potentially enable escalation of privilege via network access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-3r8c-rqqr-c7h4/GHSA-3r8c-rqqr-c7h4.json b/advisories/unreviewed/2022/05/GHSA-3r8c-rqqr-c7h4/GHSA-3r8c-rqqr-c7h4.json index cdfda02b289..ed0b50c3e5e 100644 --- a/advisories/unreviewed/2022/05/GHSA-3r8c-rqqr-c7h4/GHSA-3r8c-rqqr-c7h4.json +++ b/advisories/unreviewed/2022/05/GHSA-3r8c-rqqr-c7h4/GHSA-3r8c-rqqr-c7h4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3r8m-hxrx-mrr4/GHSA-3r8m-hxrx-mrr4.json b/advisories/unreviewed/2022/05/GHSA-3r8m-hxrx-mrr4/GHSA-3r8m-hxrx-mrr4.json index 94c90e9426b..4f63578a4f5 100644 --- a/advisories/unreviewed/2022/05/GHSA-3r8m-hxrx-mrr4/GHSA-3r8m-hxrx-mrr4.json +++ b/advisories/unreviewed/2022/05/GHSA-3r8m-hxrx-mrr4/GHSA-3r8m-hxrx-mrr4.json @@ -7,12 +7,8 @@ "CVE-2020-36140" ], "details": "BloofoxCMS 0.5.2.1 allows Cross-Site Request Forgery (CSRF) via 'mode=settings&page=editor', as demonstrated by use of 'mode=settings&page=editor' to change any file content (Locally/Remotely).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3rwv-g3jc-r7cc/GHSA-3rwv-g3jc-r7cc.json b/advisories/unreviewed/2022/05/GHSA-3rwv-g3jc-r7cc/GHSA-3rwv-g3jc-r7cc.json index b77a0c879de..3f73aa68daf 100644 --- a/advisories/unreviewed/2022/05/GHSA-3rwv-g3jc-r7cc/GHSA-3rwv-g3jc-r7cc.json +++ b/advisories/unreviewed/2022/05/GHSA-3rwv-g3jc-r7cc/GHSA-3rwv-g3jc-r7cc.json @@ -7,12 +7,8 @@ "CVE-2021-22550" ], "details": "An attacker can modify the pointers in enclave memory to overwrite arbitrary memory addresses within the secure enclave. It is recommended to update past 0.6.3 or git commit https://github.com/google/asylo/commit/a47ef55db2337d29de19c50cd29b0deb2871d31c", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-3xrp-cm65-f8f5/GHSA-3xrp-cm65-f8f5.json b/advisories/unreviewed/2022/05/GHSA-3xrp-cm65-f8f5/GHSA-3xrp-cm65-f8f5.json index 448976f6f8d..b8de2355841 100644 --- a/advisories/unreviewed/2022/05/GHSA-3xrp-cm65-f8f5/GHSA-3xrp-cm65-f8f5.json +++ b/advisories/unreviewed/2022/05/GHSA-3xrp-cm65-f8f5/GHSA-3xrp-cm65-f8f5.json @@ -7,12 +7,8 @@ "CVE-2021-23230" ], "details": "A SQL Injection vulnerability in the OPCUA interface of Gallagher Command Centre allows a remote unprivileged Command Centre Operator to modify Command Centre databases undetected. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); 8.10 versions prior to 8.10.1284 (MR7); version 8.00 and prior versions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-423w-7xwv-vwqw/GHSA-423w-7xwv-vwqw.json b/advisories/unreviewed/2022/05/GHSA-423w-7xwv-vwqw/GHSA-423w-7xwv-vwqw.json index 3509bb40652..fb460183c6e 100644 --- a/advisories/unreviewed/2022/05/GHSA-423w-7xwv-vwqw/GHSA-423w-7xwv-vwqw.json +++ b/advisories/unreviewed/2022/05/GHSA-423w-7xwv-vwqw/GHSA-423w-7xwv-vwqw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4255-c99r-j52r/GHSA-4255-c99r-j52r.json b/advisories/unreviewed/2022/05/GHSA-4255-c99r-j52r/GHSA-4255-c99r-j52r.json index 47a1a5718ea..48aa4ef4d8c 100644 --- a/advisories/unreviewed/2022/05/GHSA-4255-c99r-j52r/GHSA-4255-c99r-j52r.json +++ b/advisories/unreviewed/2022/05/GHSA-4255-c99r-j52r/GHSA-4255-c99r-j52r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4282-5w9g-6q57/GHSA-4282-5w9g-6q57.json b/advisories/unreviewed/2022/05/GHSA-4282-5w9g-6q57/GHSA-4282-5w9g-6q57.json index d4617687835..7a13179e8d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-4282-5w9g-6q57/GHSA-4282-5w9g-6q57.json +++ b/advisories/unreviewed/2022/05/GHSA-4282-5w9g-6q57/GHSA-4282-5w9g-6q57.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-436w-wv2w-q46v/GHSA-436w-wv2w-q46v.json b/advisories/unreviewed/2022/05/GHSA-436w-wv2w-q46v/GHSA-436w-wv2w-q46v.json index 24f5cbe97b8..214962b828f 100644 --- a/advisories/unreviewed/2022/05/GHSA-436w-wv2w-q46v/GHSA-436w-wv2w-q46v.json +++ b/advisories/unreviewed/2022/05/GHSA-436w-wv2w-q46v/GHSA-436w-wv2w-q46v.json @@ -7,12 +7,8 @@ "CVE-2020-11260" ], "details": "An improper free of uninitialized memory can occur in DIAG services in Snapdragon Compute, Snapdragon Industrial IOT, Snapdragon Mobile", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4444-8mhw-c9m5/GHSA-4444-8mhw-c9m5.json b/advisories/unreviewed/2022/05/GHSA-4444-8mhw-c9m5/GHSA-4444-8mhw-c9m5.json index 12231b06a7b..f40e32a2240 100644 --- a/advisories/unreviewed/2022/05/GHSA-4444-8mhw-c9m5/GHSA-4444-8mhw-c9m5.json +++ b/advisories/unreviewed/2022/05/GHSA-4444-8mhw-c9m5/GHSA-4444-8mhw-c9m5.json @@ -7,12 +7,8 @@ "CVE-2020-23303" ], "details": "There is a heap-buffer-overflow at jmem-poolman.c:165 in jmem_pools_collect_empty in JerryScript 2.2.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4492-2rcf-6chf/GHSA-4492-2rcf-6chf.json b/advisories/unreviewed/2022/05/GHSA-4492-2rcf-6chf/GHSA-4492-2rcf-6chf.json index 73f802413f6..f6f21800789 100644 --- a/advisories/unreviewed/2022/05/GHSA-4492-2rcf-6chf/GHSA-4492-2rcf-6chf.json +++ b/advisories/unreviewed/2022/05/GHSA-4492-2rcf-6chf/GHSA-4492-2rcf-6chf.json @@ -7,12 +7,8 @@ "CVE-2021-30521" ], "details": "Heap buffer overflow in Autofill in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-45vh-fhgx-cr2p/GHSA-45vh-fhgx-cr2p.json b/advisories/unreviewed/2022/05/GHSA-45vh-fhgx-cr2p/GHSA-45vh-fhgx-cr2p.json index 4b775ea66e7..7fb8b4de309 100644 --- a/advisories/unreviewed/2022/05/GHSA-45vh-fhgx-cr2p/GHSA-45vh-fhgx-cr2p.json +++ b/advisories/unreviewed/2022/05/GHSA-45vh-fhgx-cr2p/GHSA-45vh-fhgx-cr2p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-45wv-rq2g-2vvj/GHSA-45wv-rq2g-2vvj.json b/advisories/unreviewed/2022/05/GHSA-45wv-rq2g-2vvj/GHSA-45wv-rq2g-2vvj.json index cf4561114b1..9af8c94e281 100644 --- a/advisories/unreviewed/2022/05/GHSA-45wv-rq2g-2vvj/GHSA-45wv-rq2g-2vvj.json +++ b/advisories/unreviewed/2022/05/GHSA-45wv-rq2g-2vvj/GHSA-45wv-rq2g-2vvj.json @@ -7,12 +7,8 @@ "CVE-2021-3489" ], "details": "The eBPF RINGBUF bpf_ringbuf_reserve() function in the Linux kernel did not check that the allocated size was smaller than the ringbuf size, allowing an attacker to perform out-of-bounds writes within the kernel and therefore, arbitrary code execution. This issue was fixed via commit 4b81ccebaeee (\"bpf, ringbuf: Deny reserve of buffers larger than ringbuf\") (v5.13-rc4) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced via 457f44363a88 (\"bpf: Implement BPF ring buffer and verifier support for it\") (v5.8-rc1).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4786-jhx6-3pjr/GHSA-4786-jhx6-3pjr.json b/advisories/unreviewed/2022/05/GHSA-4786-jhx6-3pjr/GHSA-4786-jhx6-3pjr.json index 4b4acb297bd..97164d10751 100644 --- a/advisories/unreviewed/2022/05/GHSA-4786-jhx6-3pjr/GHSA-4786-jhx6-3pjr.json +++ b/advisories/unreviewed/2022/05/GHSA-4786-jhx6-3pjr/GHSA-4786-jhx6-3pjr.json @@ -7,12 +7,8 @@ "CVE-2021-1395" ], "details": "A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-479q-wh8r-w2j3/GHSA-479q-wh8r-w2j3.json b/advisories/unreviewed/2022/05/GHSA-479q-wh8r-w2j3/GHSA-479q-wh8r-w2j3.json index 8feac8fdcdf..3750cb45dae 100644 --- a/advisories/unreviewed/2022/05/GHSA-479q-wh8r-w2j3/GHSA-479q-wh8r-w2j3.json +++ b/advisories/unreviewed/2022/05/GHSA-479q-wh8r-w2j3/GHSA-479q-wh8r-w2j3.json @@ -7,12 +7,8 @@ "CVE-2021-1900" ], "details": "Possible use after free in Display due to race condition while creating an external display in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-47r2-gqx8-p99j/GHSA-47r2-gqx8-p99j.json b/advisories/unreviewed/2022/05/GHSA-47r2-gqx8-p99j/GHSA-47r2-gqx8-p99j.json index 6cacc78454b..7e136bb91ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-47r2-gqx8-p99j/GHSA-47r2-gqx8-p99j.json +++ b/advisories/unreviewed/2022/05/GHSA-47r2-gqx8-p99j/GHSA-47r2-gqx8-p99j.json @@ -7,12 +7,8 @@ "CVE-2020-24511" ], "details": "Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-486p-jw3h-72gh/GHSA-486p-jw3h-72gh.json b/advisories/unreviewed/2022/05/GHSA-486p-jw3h-72gh/GHSA-486p-jw3h-72gh.json index 472bc5ac579..61e2e7c5819 100644 --- a/advisories/unreviewed/2022/05/GHSA-486p-jw3h-72gh/GHSA-486p-jw3h-72gh.json +++ b/advisories/unreviewed/2022/05/GHSA-486p-jw3h-72gh/GHSA-486p-jw3h-72gh.json @@ -7,12 +7,8 @@ "CVE-2021-22760" ], "details": "A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing checks of user-supplied input data, when a malicious CGF file is imported to IGSS Definition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4f7v-wq2f-4f9q/GHSA-4f7v-wq2f-4f9q.json b/advisories/unreviewed/2022/05/GHSA-4f7v-wq2f-4f9q/GHSA-4f7v-wq2f-4f9q.json index 345b732987c..35da68059af 100644 --- a/advisories/unreviewed/2022/05/GHSA-4f7v-wq2f-4f9q/GHSA-4f7v-wq2f-4f9q.json +++ b/advisories/unreviewed/2022/05/GHSA-4f7v-wq2f-4f9q/GHSA-4f7v-wq2f-4f9q.json @@ -7,12 +7,8 @@ "CVE-2020-18264" ], "details": "Cross Site Request Forgery (CSRF) in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component \"Simple-Log/admin/admin.php?act=act_edit_member\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4fh6-xq85-m4pp/GHSA-4fh6-xq85-m4pp.json b/advisories/unreviewed/2022/05/GHSA-4fh6-xq85-m4pp/GHSA-4fh6-xq85-m4pp.json index 619503fa47f..48293526c3a 100644 --- a/advisories/unreviewed/2022/05/GHSA-4fh6-xq85-m4pp/GHSA-4fh6-xq85-m4pp.json +++ b/advisories/unreviewed/2022/05/GHSA-4fh6-xq85-m4pp/GHSA-4fh6-xq85-m4pp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4fhx-wqc3-cg4x/GHSA-4fhx-wqc3-cg4x.json b/advisories/unreviewed/2022/05/GHSA-4fhx-wqc3-cg4x/GHSA-4fhx-wqc3-cg4x.json index 6d5453acbeb..5b09889ecaa 100644 --- a/advisories/unreviewed/2022/05/GHSA-4fhx-wqc3-cg4x/GHSA-4fhx-wqc3-cg4x.json +++ b/advisories/unreviewed/2022/05/GHSA-4fhx-wqc3-cg4x/GHSA-4fhx-wqc3-cg4x.json @@ -7,12 +7,8 @@ "CVE-2021-33347" ], "details": "An issue was discovered in JPress v3.3.0 and below. There are XSS vulnerabilities in the template module and tag management module. If you log in to the background by means of weak password, the storage XSS vulnerability can occur.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4fvc-h857-qw9g/GHSA-4fvc-h857-qw9g.json b/advisories/unreviewed/2022/05/GHSA-4fvc-h857-qw9g/GHSA-4fvc-h857-qw9g.json index d454d4863d2..9a5baa102bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-4fvc-h857-qw9g/GHSA-4fvc-h857-qw9g.json +++ b/advisories/unreviewed/2022/05/GHSA-4fvc-h857-qw9g/GHSA-4fvc-h857-qw9g.json @@ -7,12 +7,8 @@ "CVE-2021-23845" ], "details": "This vulnerability could allow an attacker to hijack a session while a user is logged in the configuration web page. This vulnerability was discovered by a security researcher in B426 and found during internal product tests in B426-CN/B429-CN, and B426-M and has been fixed already starting from version 3.08 on, which was released on June 2019.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4gm2-v7j4-74p8/GHSA-4gm2-v7j4-74p8.json b/advisories/unreviewed/2022/05/GHSA-4gm2-v7j4-74p8/GHSA-4gm2-v7j4-74p8.json index e3ed8949488..34296f81272 100644 --- a/advisories/unreviewed/2022/05/GHSA-4gm2-v7j4-74p8/GHSA-4gm2-v7j4-74p8.json +++ b/advisories/unreviewed/2022/05/GHSA-4gm2-v7j4-74p8/GHSA-4gm2-v7j4-74p8.json @@ -7,12 +7,8 @@ "CVE-2021-22175" ], "details": "When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is disabled", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4gpf-73j9-3325/GHSA-4gpf-73j9-3325.json b/advisories/unreviewed/2022/05/GHSA-4gpf-73j9-3325/GHSA-4gpf-73j9-3325.json index b94b82d3398..73784581ecb 100644 --- a/advisories/unreviewed/2022/05/GHSA-4gpf-73j9-3325/GHSA-4gpf-73j9-3325.json +++ b/advisories/unreviewed/2022/05/GHSA-4gpf-73j9-3325/GHSA-4gpf-73j9-3325.json @@ -7,12 +7,8 @@ "CVE-2021-31929" ], "details": "Annex Cloud Loyalty Experience Platform <2021.1.0.1 allows any authenticated attacker to modify loyalty campaigns and settings, such as fraud prevention, coupon groups, email templates, or referrals.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4j63-75hf-7942/GHSA-4j63-75hf-7942.json b/advisories/unreviewed/2022/05/GHSA-4j63-75hf-7942/GHSA-4j63-75hf-7942.json index 881b53b0c2e..9bc2267aed4 100644 --- a/advisories/unreviewed/2022/05/GHSA-4j63-75hf-7942/GHSA-4j63-75hf-7942.json +++ b/advisories/unreviewed/2022/05/GHSA-4j63-75hf-7942/GHSA-4j63-75hf-7942.json @@ -7,12 +7,8 @@ "CVE-2020-22200" ], "details": "Directory Traversal vulnerability in phpCMS 9.1.13 via the q parameter to public_get_suggest_keyword.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4jh4-xcv6-j74j/GHSA-4jh4-xcv6-j74j.json b/advisories/unreviewed/2022/05/GHSA-4jh4-xcv6-j74j/GHSA-4jh4-xcv6-j74j.json index 29cc245b69d..6202863de18 100644 --- a/advisories/unreviewed/2022/05/GHSA-4jh4-xcv6-j74j/GHSA-4jh4-xcv6-j74j.json +++ b/advisories/unreviewed/2022/05/GHSA-4jh4-xcv6-j74j/GHSA-4jh4-xcv6-j74j.json @@ -7,12 +7,8 @@ "CVE-2021-0054" ], "details": "Improper buffer restrictions in system firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4jwc-3585-gr33/GHSA-4jwc-3585-gr33.json b/advisories/unreviewed/2022/05/GHSA-4jwc-3585-gr33/GHSA-4jwc-3585-gr33.json index 2f241e766b1..303273106ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-4jwc-3585-gr33/GHSA-4jwc-3585-gr33.json +++ b/advisories/unreviewed/2022/05/GHSA-4jwc-3585-gr33/GHSA-4jwc-3585-gr33.json @@ -7,12 +7,8 @@ "CVE-2005-0048" ], "details": "Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted IP packets with malformed options, aka the \"IP Validation Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4q9j-c8xc-j26g/GHSA-4q9j-c8xc-j26g.json b/advisories/unreviewed/2022/05/GHSA-4q9j-c8xc-j26g/GHSA-4q9j-c8xc-j26g.json index c606f753bd6..c27da71be9a 100644 --- a/advisories/unreviewed/2022/05/GHSA-4q9j-c8xc-j26g/GHSA-4q9j-c8xc-j26g.json +++ b/advisories/unreviewed/2022/05/GHSA-4q9j-c8xc-j26g/GHSA-4q9j-c8xc-j26g.json @@ -7,12 +7,8 @@ "CVE-2005-0047" ], "details": "Windows 2000, XP, and Server 2003 does not properly \"validate the use of memory regions\" for COM structured storage files, which allows attackers to execute arbitrary code, aka the \"COM Structured Storage Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4r52-wvcw-74vw/GHSA-4r52-wvcw-74vw.json b/advisories/unreviewed/2022/05/GHSA-4r52-wvcw-74vw/GHSA-4r52-wvcw-74vw.json index c2dac496905..84a57caa88b 100644 --- a/advisories/unreviewed/2022/05/GHSA-4r52-wvcw-74vw/GHSA-4r52-wvcw-74vw.json +++ b/advisories/unreviewed/2022/05/GHSA-4r52-wvcw-74vw/GHSA-4r52-wvcw-74vw.json @@ -7,12 +7,8 @@ "CVE-2021-26994" ], "details": "Clustered Data ONTAP versions prior to 9.7P13 and 9.8P3 are susceptible to a vulnerability which could allow single workloads to cause a Denial of Service (DoS) on a cluster node.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4r55-xrfw-ffx7/GHSA-4r55-xrfw-ffx7.json b/advisories/unreviewed/2022/05/GHSA-4r55-xrfw-ffx7/GHSA-4r55-xrfw-ffx7.json index 25ec578f8a6..f7faf3b5125 100644 --- a/advisories/unreviewed/2022/05/GHSA-4r55-xrfw-ffx7/GHSA-4r55-xrfw-ffx7.json +++ b/advisories/unreviewed/2022/05/GHSA-4r55-xrfw-ffx7/GHSA-4r55-xrfw-ffx7.json @@ -7,12 +7,8 @@ "CVE-2020-11262" ], "details": "A race between command submission and destroying the context can cause an invalid context being added to the list leads to use after free issue. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4rqc-x67f-x35r/GHSA-4rqc-x67f-x35r.json b/advisories/unreviewed/2022/05/GHSA-4rqc-x67f-x35r/GHSA-4rqc-x67f-x35r.json index 09138b9cabc..aefff35a1d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-4rqc-x67f-x35r/GHSA-4rqc-x67f-x35r.json +++ b/advisories/unreviewed/2022/05/GHSA-4rqc-x67f-x35r/GHSA-4rqc-x67f-x35r.json @@ -7,12 +7,8 @@ "CVE-2020-11259" ], "details": "Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-4v46-4mj5-q2x2/GHSA-4v46-4mj5-q2x2.json b/advisories/unreviewed/2022/05/GHSA-4v46-4mj5-q2x2/GHSA-4v46-4mj5-q2x2.json index ae63a47d2b5..f7b12a75905 100644 --- a/advisories/unreviewed/2022/05/GHSA-4v46-4mj5-q2x2/GHSA-4v46-4mj5-q2x2.json +++ b/advisories/unreviewed/2022/05/GHSA-4v46-4mj5-q2x2/GHSA-4v46-4mj5-q2x2.json @@ -7,12 +7,8 @@ "CVE-2005-0066" ], "details": "The original design of TCP does not check that the TCP Acknowledgement number in an ICMP error message generated by an intermediate router is within the range of possible values for data that has already been acknowledged (aka \"TCP acknowledgement number checking\"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged \"Destination Unreachable\" messages, (2) blind throughput-reduction attacks with forged \"Source Quench\" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced. NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4wq7-f94f-64w2/GHSA-4wq7-f94f-64w2.json b/advisories/unreviewed/2022/05/GHSA-4wq7-f94f-64w2/GHSA-4wq7-f94f-64w2.json index 8b96df014a2..1be63c6239a 100644 --- a/advisories/unreviewed/2022/05/GHSA-4wq7-f94f-64w2/GHSA-4wq7-f94f-64w2.json +++ b/advisories/unreviewed/2022/05/GHSA-4wq7-f94f-64w2/GHSA-4wq7-f94f-64w2.json @@ -7,12 +7,8 @@ "CVE-2005-0021" ], "details": "Multiple buffer overflows in Exim before 4.43 may allow attackers to execute arbitrary code via (1) an IPv6 address with more than 8 components, as demonstrated using the -be command line option, which triggers an overflow in the host_aton function, or (2) the -bh command line option or dnsdb PTR lookup, which triggers an overflow in the dns_build_reverse function.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4x57-pwj6-vr3h/GHSA-4x57-pwj6-vr3h.json b/advisories/unreviewed/2022/05/GHSA-4x57-pwj6-vr3h/GHSA-4x57-pwj6-vr3h.json index 53879e705c8..24019a06069 100644 --- a/advisories/unreviewed/2022/05/GHSA-4x57-pwj6-vr3h/GHSA-4x57-pwj6-vr3h.json +++ b/advisories/unreviewed/2022/05/GHSA-4x57-pwj6-vr3h/GHSA-4x57-pwj6-vr3h.json @@ -7,12 +7,8 @@ "CVE-2005-0036" ], "details": "The DNS implementation in DeleGate 8.10.2 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-4xhm-w228-q98h/GHSA-4xhm-w228-q98h.json b/advisories/unreviewed/2022/05/GHSA-4xhm-w228-q98h/GHSA-4xhm-w228-q98h.json index c82005c5a5f..a3695d72cc5 100644 --- a/advisories/unreviewed/2022/05/GHSA-4xhm-w228-q98h/GHSA-4xhm-w228-q98h.json +++ b/advisories/unreviewed/2022/05/GHSA-4xhm-w228-q98h/GHSA-4xhm-w228-q98h.json @@ -7,12 +7,8 @@ "CVE-2021-0095" ], "details": "Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a denial of service via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-522h-6j82-9c6f/GHSA-522h-6j82-9c6f.json b/advisories/unreviewed/2022/05/GHSA-522h-6j82-9c6f/GHSA-522h-6j82-9c6f.json index 5a2d2ece3c1..492064db172 100644 --- a/advisories/unreviewed/2022/05/GHSA-522h-6j82-9c6f/GHSA-522h-6j82-9c6f.json +++ b/advisories/unreviewed/2022/05/GHSA-522h-6j82-9c6f/GHSA-522h-6j82-9c6f.json @@ -7,12 +7,8 @@ "CVE-2021-32015" ], "details": "In Nuvoton NPCT75x TPM 1.2 firmware 7.4.0.0, a local authenticated malicious user with high privileges could potentially gain unauthorized access to TPM non-volatile memory. NOTE: Upgrading to firmware version 7.4.0.1 will mitigate against the vulnerability, but version 7.4.0.1 is not TCG or Common Criteria (CC) certified. Nuvoton recommends that users apply the NPCT75x TPM 1.2 firmware update.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-52cx-vphc-jmjm/GHSA-52cx-vphc-jmjm.json b/advisories/unreviewed/2022/05/GHSA-52cx-vphc-jmjm/GHSA-52cx-vphc-jmjm.json index bfeb327bc88..b2e3f28fa54 100644 --- a/advisories/unreviewed/2022/05/GHSA-52cx-vphc-jmjm/GHSA-52cx-vphc-jmjm.json +++ b/advisories/unreviewed/2022/05/GHSA-52cx-vphc-jmjm/GHSA-52cx-vphc-jmjm.json @@ -7,12 +7,8 @@ "CVE-2021-33557" ], "details": "An XSS issue was discovered in manage_custom_field_edit_page.php in MantisBT before 2.25.2. Unescaped output of the return parameter allows an attacker to inject code into a hidden input field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-52h9-h2q5-cjwm/GHSA-52h9-h2q5-cjwm.json b/advisories/unreviewed/2022/05/GHSA-52h9-h2q5-cjwm/GHSA-52h9-h2q5-cjwm.json index b29c5029e4b..5ef72b0ec65 100644 --- a/advisories/unreviewed/2022/05/GHSA-52h9-h2q5-cjwm/GHSA-52h9-h2q5-cjwm.json +++ b/advisories/unreviewed/2022/05/GHSA-52h9-h2q5-cjwm/GHSA-52h9-h2q5-cjwm.json @@ -7,12 +7,8 @@ "CVE-2021-1538" ], "details": "A vulnerability in the configuration dashboard of Cisco Common Services Platform Collector (CSPC) could allow an authenticated, remote attacker to execute arbitrary code. This vulnerability is due to insufficient sanitization of configuration entries. An attacker could exploit this vulnerability by logging in as a super admin and entering crafted input to configuration options on the CSPC configuration dashboard. A successful exploit could allow the attacker to execute remote code as root.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-53xj-7mcc-mq3f/GHSA-53xj-7mcc-mq3f.json b/advisories/unreviewed/2022/05/GHSA-53xj-7mcc-mq3f/GHSA-53xj-7mcc-mq3f.json index 92cd5304a1b..10de8dcd790 100644 --- a/advisories/unreviewed/2022/05/GHSA-53xj-7mcc-mq3f/GHSA-53xj-7mcc-mq3f.json +++ b/advisories/unreviewed/2022/05/GHSA-53xj-7mcc-mq3f/GHSA-53xj-7mcc-mq3f.json @@ -7,12 +7,8 @@ "CVE-2005-0037" ], "details": "The DNS implementation of DNRD before 2.10 allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-547x-rqh9-jrg8/GHSA-547x-rqh9-jrg8.json b/advisories/unreviewed/2022/05/GHSA-547x-rqh9-jrg8/GHSA-547x-rqh9-jrg8.json index 32ca55b6be8..2c3424998a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-547x-rqh9-jrg8/GHSA-547x-rqh9-jrg8.json +++ b/advisories/unreviewed/2022/05/GHSA-547x-rqh9-jrg8/GHSA-547x-rqh9-jrg8.json @@ -7,12 +7,8 @@ "CVE-2005-0002" ], "details": "poppassd_pam 1.0 and earlier, when changing a user password, does not verify that the user entered the old password correctly, which allows remote attackers to change passwords for arbitrary users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5499-c686-44mj/GHSA-5499-c686-44mj.json b/advisories/unreviewed/2022/05/GHSA-5499-c686-44mj/GHSA-5499-c686-44mj.json index 11fdf2221c9..549f6584cfa 100644 --- a/advisories/unreviewed/2022/05/GHSA-5499-c686-44mj/GHSA-5499-c686-44mj.json +++ b/advisories/unreviewed/2022/05/GHSA-5499-c686-44mj/GHSA-5499-c686-44mj.json @@ -7,12 +7,8 @@ "CVE-2021-30517" ], "details": "Type confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5579-33mm-x832/GHSA-5579-33mm-x832.json b/advisories/unreviewed/2022/05/GHSA-5579-33mm-x832/GHSA-5579-33mm-x832.json index 3a6bf2cebc0..e0abd1484da 100644 --- a/advisories/unreviewed/2022/05/GHSA-5579-33mm-x832/GHSA-5579-33mm-x832.json +++ b/advisories/unreviewed/2022/05/GHSA-5579-33mm-x832/GHSA-5579-33mm-x832.json @@ -7,12 +7,8 @@ "CVE-2021-22752" ], "details": "A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing size checks, when a malicious WSP (Workspace) file is being parsed by IGSS Definition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-55mp-3vgh-jqm9/GHSA-55mp-3vgh-jqm9.json b/advisories/unreviewed/2022/05/GHSA-55mp-3vgh-jqm9/GHSA-55mp-3vgh-jqm9.json index 86665092f86..da5a852e6c7 100644 --- a/advisories/unreviewed/2022/05/GHSA-55mp-3vgh-jqm9/GHSA-55mp-3vgh-jqm9.json +++ b/advisories/unreviewed/2022/05/GHSA-55mp-3vgh-jqm9/GHSA-55mp-3vgh-jqm9.json @@ -7,12 +7,8 @@ "CVE-2021-30511" ], "details": "Out of bounds read in Tab Groups in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-57c7-hj58-875p/GHSA-57c7-hj58-875p.json b/advisories/unreviewed/2022/05/GHSA-57c7-hj58-875p/GHSA-57c7-hj58-875p.json index 06bbc851770..3fce48f9782 100644 --- a/advisories/unreviewed/2022/05/GHSA-57c7-hj58-875p/GHSA-57c7-hj58-875p.json +++ b/advisories/unreviewed/2022/05/GHSA-57c7-hj58-875p/GHSA-57c7-hj58-875p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-57jg-xr2w-54jg/GHSA-57jg-xr2w-54jg.json b/advisories/unreviewed/2022/05/GHSA-57jg-xr2w-54jg/GHSA-57jg-xr2w-54jg.json index a4efb3e59c4..5778d8daca2 100644 --- a/advisories/unreviewed/2022/05/GHSA-57jg-xr2w-54jg/GHSA-57jg-xr2w-54jg.json +++ b/advisories/unreviewed/2022/05/GHSA-57jg-xr2w-54jg/GHSA-57jg-xr2w-54jg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-57r9-f9gp-9f2x/GHSA-57r9-f9gp-9f2x.json b/advisories/unreviewed/2022/05/GHSA-57r9-f9gp-9f2x/GHSA-57r9-f9gp-9f2x.json index 3aab340fe87..de61802199e 100644 --- a/advisories/unreviewed/2022/05/GHSA-57r9-f9gp-9f2x/GHSA-57r9-f9gp-9f2x.json +++ b/advisories/unreviewed/2022/05/GHSA-57r9-f9gp-9f2x/GHSA-57r9-f9gp-9f2x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-57vf-87qf-8c9c/GHSA-57vf-87qf-8c9c.json b/advisories/unreviewed/2022/05/GHSA-57vf-87qf-8c9c/GHSA-57vf-87qf-8c9c.json index a28f8efdb1d..6dab20da583 100644 --- a/advisories/unreviewed/2022/05/GHSA-57vf-87qf-8c9c/GHSA-57vf-87qf-8c9c.json +++ b/advisories/unreviewed/2022/05/GHSA-57vf-87qf-8c9c/GHSA-57vf-87qf-8c9c.json @@ -7,12 +7,8 @@ "CVE-2021-25419" ], "details": "Non-compliance of recommended secure coding scheme in Samsung Internet prior to version 14.0.1.62 allows attackers to display fake URL in address bar via phising URL link.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-58h6-f6wr-w2hw/GHSA-58h6-f6wr-w2hw.json b/advisories/unreviewed/2022/05/GHSA-58h6-f6wr-w2hw/GHSA-58h6-f6wr-w2hw.json index 50a9697f6a2..f2313c5fe67 100644 --- a/advisories/unreviewed/2022/05/GHSA-58h6-f6wr-w2hw/GHSA-58h6-f6wr-w2hw.json +++ b/advisories/unreviewed/2022/05/GHSA-58h6-f6wr-w2hw/GHSA-58h6-f6wr-w2hw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-59c3-pmvg-hgmm/GHSA-59c3-pmvg-hgmm.json b/advisories/unreviewed/2022/05/GHSA-59c3-pmvg-hgmm/GHSA-59c3-pmvg-hgmm.json index 1e96f1bb541..ff81ac59613 100644 --- a/advisories/unreviewed/2022/05/GHSA-59c3-pmvg-hgmm/GHSA-59c3-pmvg-hgmm.json +++ b/advisories/unreviewed/2022/05/GHSA-59c3-pmvg-hgmm/GHSA-59c3-pmvg-hgmm.json @@ -7,12 +7,8 @@ "CVE-2021-25393" ], "details": "Improper sanitization of incoming intent in SecSettings prior to SMR MAY-2021 Release 1 allows local attackers to get permissions to access system uid data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5cwq-39c4-23v7/GHSA-5cwq-39c4-23v7.json b/advisories/unreviewed/2022/05/GHSA-5cwq-39c4-23v7/GHSA-5cwq-39c4-23v7.json index 578747be756..5203e73562e 100644 --- a/advisories/unreviewed/2022/05/GHSA-5cwq-39c4-23v7/GHSA-5cwq-39c4-23v7.json +++ b/advisories/unreviewed/2022/05/GHSA-5cwq-39c4-23v7/GHSA-5cwq-39c4-23v7.json @@ -7,12 +7,8 @@ "CVE-2020-11261" ], "details": "Memory corruption due to improper check to return error when user application requests memory allocation of a huge size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5fqv-3jfx-5p64/GHSA-5fqv-3jfx-5p64.json b/advisories/unreviewed/2022/05/GHSA-5fqv-3jfx-5p64/GHSA-5fqv-3jfx-5p64.json index c8435f1e0d0..0ddac50b4a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-5fqv-3jfx-5p64/GHSA-5fqv-3jfx-5p64.json +++ b/advisories/unreviewed/2022/05/GHSA-5fqv-3jfx-5p64/GHSA-5fqv-3jfx-5p64.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5g7p-v93f-fjp9/GHSA-5g7p-v93f-fjp9.json b/advisories/unreviewed/2022/05/GHSA-5g7p-v93f-fjp9/GHSA-5g7p-v93f-fjp9.json index 83c1f4e3834..47853a88aa4 100644 --- a/advisories/unreviewed/2022/05/GHSA-5g7p-v93f-fjp9/GHSA-5g7p-v93f-fjp9.json +++ b/advisories/unreviewed/2022/05/GHSA-5g7p-v93f-fjp9/GHSA-5g7p-v93f-fjp9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5gh2-hrf5-9968/GHSA-5gh2-hrf5-9968.json b/advisories/unreviewed/2022/05/GHSA-5gh2-hrf5-9968/GHSA-5gh2-hrf5-9968.json index 4357d4465bb..951d7b6780b 100644 --- a/advisories/unreviewed/2022/05/GHSA-5gh2-hrf5-9968/GHSA-5gh2-hrf5-9968.json +++ b/advisories/unreviewed/2022/05/GHSA-5gh2-hrf5-9968/GHSA-5gh2-hrf5-9968.json @@ -7,12 +7,8 @@ "CVE-2005-0051" ], "details": "The Server service (srvsvc.dll) in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information (users who are accessing resources) via an anonymous logon using a named pipe, which is not properly authenticated, aka the \"Named Pipe Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5hjq-8gx9-79g4/GHSA-5hjq-8gx9-79g4.json b/advisories/unreviewed/2022/05/GHSA-5hjq-8gx9-79g4/GHSA-5hjq-8gx9-79g4.json index 2bb6cd5184f..6a7c19143bc 100644 --- a/advisories/unreviewed/2022/05/GHSA-5hjq-8gx9-79g4/GHSA-5hjq-8gx9-79g4.json +++ b/advisories/unreviewed/2022/05/GHSA-5hjq-8gx9-79g4/GHSA-5hjq-8gx9-79g4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5pgh-h5qw-8mrq/GHSA-5pgh-h5qw-8mrq.json b/advisories/unreviewed/2022/05/GHSA-5pgh-h5qw-8mrq/GHSA-5pgh-h5qw-8mrq.json index 10be1db253a..c3e298e275a 100644 --- a/advisories/unreviewed/2022/05/GHSA-5pgh-h5qw-8mrq/GHSA-5pgh-h5qw-8mrq.json +++ b/advisories/unreviewed/2022/05/GHSA-5pgh-h5qw-8mrq/GHSA-5pgh-h5qw-8mrq.json @@ -7,12 +7,8 @@ "CVE-2021-27638" ], "details": "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5pxh-5p72-wvcm/GHSA-5pxh-5p72-wvcm.json b/advisories/unreviewed/2022/05/GHSA-5pxh-5p72-wvcm/GHSA-5pxh-5p72-wvcm.json index 502298b74e8..bd991bc866f 100644 --- a/advisories/unreviewed/2022/05/GHSA-5pxh-5p72-wvcm/GHSA-5pxh-5p72-wvcm.json +++ b/advisories/unreviewed/2022/05/GHSA-5pxh-5p72-wvcm/GHSA-5pxh-5p72-wvcm.json @@ -7,12 +7,8 @@ "CVE-2021-28091" ], "details": "Lasso all versions prior to 2.7.0 has improper verification of a cryptographic signature.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5q84-q9g2-g3jr/GHSA-5q84-q9g2-g3jr.json b/advisories/unreviewed/2022/05/GHSA-5q84-q9g2-g3jr/GHSA-5q84-q9g2-g3jr.json index 02b75c7e8e1..cd16c60b5ca 100644 --- a/advisories/unreviewed/2022/05/GHSA-5q84-q9g2-g3jr/GHSA-5q84-q9g2-g3jr.json +++ b/advisories/unreviewed/2022/05/GHSA-5q84-q9g2-g3jr/GHSA-5q84-q9g2-g3jr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5rwx-g5rj-4pc2/GHSA-5rwx-g5rj-4pc2.json b/advisories/unreviewed/2022/05/GHSA-5rwx-g5rj-4pc2/GHSA-5rwx-g5rj-4pc2.json index 79548365824..789974f4607 100644 --- a/advisories/unreviewed/2022/05/GHSA-5rwx-g5rj-4pc2/GHSA-5rwx-g5rj-4pc2.json +++ b/advisories/unreviewed/2022/05/GHSA-5rwx-g5rj-4pc2/GHSA-5rwx-g5rj-4pc2.json @@ -7,12 +7,8 @@ "CVE-2021-22755" ], "details": "A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of sanity checks on user-supplied data, when a malicious CGF file is imported to IGSS Definition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5vw5-q63v-r2rf/GHSA-5vw5-q63v-r2rf.json b/advisories/unreviewed/2022/05/GHSA-5vw5-q63v-r2rf/GHSA-5vw5-q63v-r2rf.json index a690283ab1e..873a961e361 100644 --- a/advisories/unreviewed/2022/05/GHSA-5vw5-q63v-r2rf/GHSA-5vw5-q63v-r2rf.json +++ b/advisories/unreviewed/2022/05/GHSA-5vw5-q63v-r2rf/GHSA-5vw5-q63v-r2rf.json @@ -7,12 +7,8 @@ "CVE-2021-25416" ], "details": "Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to create executable kernel page outside code area.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5wpx-42qp-2c7p/GHSA-5wpx-42qp-2c7p.json b/advisories/unreviewed/2022/05/GHSA-5wpx-42qp-2c7p/GHSA-5wpx-42qp-2c7p.json index 755e04fafb2..95f285adf89 100644 --- a/advisories/unreviewed/2022/05/GHSA-5wpx-42qp-2c7p/GHSA-5wpx-42qp-2c7p.json +++ b/advisories/unreviewed/2022/05/GHSA-5wpx-42qp-2c7p/GHSA-5wpx-42qp-2c7p.json @@ -7,12 +7,8 @@ "CVE-2021-25684" ], "details": "It was discovered that apport in data/apport did not properly open a report file to prevent hanging reads on a FIFO.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5wr7-jp9j-74x2/GHSA-5wr7-jp9j-74x2.json b/advisories/unreviewed/2022/05/GHSA-5wr7-jp9j-74x2/GHSA-5wr7-jp9j-74x2.json index 4f19bd63ce4..2cb4468888d 100644 --- a/advisories/unreviewed/2022/05/GHSA-5wr7-jp9j-74x2/GHSA-5wr7-jp9j-74x2.json +++ b/advisories/unreviewed/2022/05/GHSA-5wr7-jp9j-74x2/GHSA-5wr7-jp9j-74x2.json @@ -7,12 +7,8 @@ "CVE-2005-0006" ], "details": "The COPS dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (infinite loop).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-5x4c-vmgh-24rc/GHSA-5x4c-vmgh-24rc.json b/advisories/unreviewed/2022/05/GHSA-5x4c-vmgh-24rc/GHSA-5x4c-vmgh-24rc.json index 4cb1c376c9b..f63503a9722 100644 --- a/advisories/unreviewed/2022/05/GHSA-5x4c-vmgh-24rc/GHSA-5x4c-vmgh-24rc.json +++ b/advisories/unreviewed/2022/05/GHSA-5x4c-vmgh-24rc/GHSA-5x4c-vmgh-24rc.json @@ -7,12 +7,8 @@ "CVE-2020-22206" ], "details": "SQL Injection in ECShop 3.0 via the aid parameter to admin/affiliate_ck.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5x58-gqg4-wfvq/GHSA-5x58-gqg4-wfvq.json b/advisories/unreviewed/2022/05/GHSA-5x58-gqg4-wfvq/GHSA-5x58-gqg4-wfvq.json index 1c1d43d49ff..0f0eaf3b45d 100644 --- a/advisories/unreviewed/2022/05/GHSA-5x58-gqg4-wfvq/GHSA-5x58-gqg4-wfvq.json +++ b/advisories/unreviewed/2022/05/GHSA-5x58-gqg4-wfvq/GHSA-5x58-gqg4-wfvq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5xc3-hrwr-2p8h/GHSA-5xc3-hrwr-2p8h.json b/advisories/unreviewed/2022/05/GHSA-5xc3-hrwr-2p8h/GHSA-5xc3-hrwr-2p8h.json index 4842af50a94..408fd44462b 100644 --- a/advisories/unreviewed/2022/05/GHSA-5xc3-hrwr-2p8h/GHSA-5xc3-hrwr-2p8h.json +++ b/advisories/unreviewed/2022/05/GHSA-5xc3-hrwr-2p8h/GHSA-5xc3-hrwr-2p8h.json @@ -7,12 +7,8 @@ "CVE-2021-33712" ], "details": "A vulnerability has been identified in Mendix SAML Module (All versions < V2.1.2). The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-5xv6-pfqf-7w3j/GHSA-5xv6-pfqf-7w3j.json b/advisories/unreviewed/2022/05/GHSA-5xv6-pfqf-7w3j/GHSA-5xv6-pfqf-7w3j.json index f0675f9af0f..abca2966091 100644 --- a/advisories/unreviewed/2022/05/GHSA-5xv6-pfqf-7w3j/GHSA-5xv6-pfqf-7w3j.json +++ b/advisories/unreviewed/2022/05/GHSA-5xv6-pfqf-7w3j/GHSA-5xv6-pfqf-7w3j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6225-8g6x-mq99/GHSA-6225-8g6x-mq99.json b/advisories/unreviewed/2022/05/GHSA-6225-8g6x-mq99/GHSA-6225-8g6x-mq99.json index 1b3bf5a2beb..8ee8ac0cbad 100644 --- a/advisories/unreviewed/2022/05/GHSA-6225-8g6x-mq99/GHSA-6225-8g6x-mq99.json +++ b/advisories/unreviewed/2022/05/GHSA-6225-8g6x-mq99/GHSA-6225-8g6x-mq99.json @@ -7,12 +7,8 @@ "CVE-2021-0134" ], "details": "Improper input validation in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6237-6j67-rvm2/GHSA-6237-6j67-rvm2.json b/advisories/unreviewed/2022/05/GHSA-6237-6j67-rvm2/GHSA-6237-6j67-rvm2.json index af0c8c9ba88..3539da6b476 100644 --- a/advisories/unreviewed/2022/05/GHSA-6237-6j67-rvm2/GHSA-6237-6j67-rvm2.json +++ b/advisories/unreviewed/2022/05/GHSA-6237-6j67-rvm2/GHSA-6237-6j67-rvm2.json @@ -7,12 +7,8 @@ "CVE-2021-33190" ], "details": "In Apache APISIX Dashboard version 2.6, we changed the default value of listen host to 0.0.0.0 in order to facilitate users to configure external network access. In the IP allowed list restriction, a risky function was used for the IP acquisition, which made it possible to bypass the network limit. At the same time, the default account and password are fixed.Ultimately these factors lead to the issue of security risks. This issue is fixed in APISIX Dashboard 2.6.1", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-626v-45vc-q94p/GHSA-626v-45vc-q94p.json b/advisories/unreviewed/2022/05/GHSA-626v-45vc-q94p/GHSA-626v-45vc-q94p.json index 6f0f6be32fe..dbe95b3b326 100644 --- a/advisories/unreviewed/2022/05/GHSA-626v-45vc-q94p/GHSA-626v-45vc-q94p.json +++ b/advisories/unreviewed/2022/05/GHSA-626v-45vc-q94p/GHSA-626v-45vc-q94p.json @@ -7,12 +7,8 @@ "CVE-2005-0067" ], "details": "The original design of TCP does not require that port numbers be assigned randomly (aka \"Port randomization\"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged \"Destination Unreachable\" messages, (2) blind throughput-reduction attacks with forged \"Source Quench\" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced. NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6295-cc2h-36hh/GHSA-6295-cc2h-36hh.json b/advisories/unreviewed/2022/05/GHSA-6295-cc2h-36hh/GHSA-6295-cc2h-36hh.json index 79363c6f5a7..144f85bc475 100644 --- a/advisories/unreviewed/2022/05/GHSA-6295-cc2h-36hh/GHSA-6295-cc2h-36hh.json +++ b/advisories/unreviewed/2022/05/GHSA-6295-cc2h-36hh/GHSA-6295-cc2h-36hh.json @@ -7,12 +7,8 @@ "CVE-2021-24344" ], "details": "The Easy Preloader WordPress plugin through 1.0.0 does not sanitise its setting fields, leading to authenticated (admin+) Stored Cross-Site scripting issues", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-63fv-xmh7-4xvc/GHSA-63fv-xmh7-4xvc.json b/advisories/unreviewed/2022/05/GHSA-63fv-xmh7-4xvc/GHSA-63fv-xmh7-4xvc.json index 4a576898635..af4cce37c48 100644 --- a/advisories/unreviewed/2022/05/GHSA-63fv-xmh7-4xvc/GHSA-63fv-xmh7-4xvc.json +++ b/advisories/unreviewed/2022/05/GHSA-63fv-xmh7-4xvc/GHSA-63fv-xmh7-4xvc.json @@ -7,12 +7,8 @@ "CVE-2021-0108" ], "details": "Uncontrolled search path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6464-c84h-p8px/GHSA-6464-c84h-p8px.json b/advisories/unreviewed/2022/05/GHSA-6464-c84h-p8px/GHSA-6464-c84h-p8px.json index 602536caf14..34f3ad2c90b 100644 --- a/advisories/unreviewed/2022/05/GHSA-6464-c84h-p8px/GHSA-6464-c84h-p8px.json +++ b/advisories/unreviewed/2022/05/GHSA-6464-c84h-p8px/GHSA-6464-c84h-p8px.json @@ -7,12 +7,8 @@ "CVE-2021-1517" ], "details": "A vulnerability in the multimedia viewer feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to bypass security protections. This vulnerability is due to unsafe handling of shared content within the multimedia viewer feature. An attacker could exploit this vulnerability by sharing a file through the multimedia viewer feature. A successful exploit could allow the attacker to bypass security protections and prevent warning dialogs from appearing before files are offered to other users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-65vv-73xx-xhqx/GHSA-65vv-73xx-xhqx.json b/advisories/unreviewed/2022/05/GHSA-65vv-73xx-xhqx/GHSA-65vv-73xx-xhqx.json index cba123e5a72..f50ee868204 100644 --- a/advisories/unreviewed/2022/05/GHSA-65vv-73xx-xhqx/GHSA-65vv-73xx-xhqx.json +++ b/advisories/unreviewed/2022/05/GHSA-65vv-73xx-xhqx/GHSA-65vv-73xx-xhqx.json @@ -7,12 +7,8 @@ "CVE-2021-27615" ], "details": "SAP Manufacturing Execution versions - 15.1, 1.5.2, 15.3, 15.4, does not contain some HTTP security headers in their HTTP response. The lack of these headers in response can be exploited by the attacker to execute Cross-Site Scripting (XSS) attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-664h-5fq8-8969/GHSA-664h-5fq8-8969.json b/advisories/unreviewed/2022/05/GHSA-664h-5fq8-8969/GHSA-664h-5fq8-8969.json index 0b379dd8cf8..ac949ab9bbf 100644 --- a/advisories/unreviewed/2022/05/GHSA-664h-5fq8-8969/GHSA-664h-5fq8-8969.json +++ b/advisories/unreviewed/2022/05/GHSA-664h-5fq8-8969/GHSA-664h-5fq8-8969.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-66g6-48gr-pwpc/GHSA-66g6-48gr-pwpc.json b/advisories/unreviewed/2022/05/GHSA-66g6-48gr-pwpc/GHSA-66g6-48gr-pwpc.json index 55b54dda1c4..5b63c620b92 100644 --- a/advisories/unreviewed/2022/05/GHSA-66g6-48gr-pwpc/GHSA-66g6-48gr-pwpc.json +++ b/advisories/unreviewed/2022/05/GHSA-66g6-48gr-pwpc/GHSA-66g6-48gr-pwpc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-67f6-6h83-3w53/GHSA-67f6-6h83-3w53.json b/advisories/unreviewed/2022/05/GHSA-67f6-6h83-3w53/GHSA-67f6-6h83-3w53.json index 34f5c391002..f9914a7bc8a 100644 --- a/advisories/unreviewed/2022/05/GHSA-67f6-6h83-3w53/GHSA-67f6-6h83-3w53.json +++ b/advisories/unreviewed/2022/05/GHSA-67f6-6h83-3w53/GHSA-67f6-6h83-3w53.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-67fr-wg95-6gwh/GHSA-67fr-wg95-6gwh.json b/advisories/unreviewed/2022/05/GHSA-67fr-wg95-6gwh/GHSA-67fr-wg95-6gwh.json index 3c9c3cb08f1..df13c08d160 100644 --- a/advisories/unreviewed/2022/05/GHSA-67fr-wg95-6gwh/GHSA-67fr-wg95-6gwh.json +++ b/advisories/unreviewed/2022/05/GHSA-67fr-wg95-6gwh/GHSA-67fr-wg95-6gwh.json @@ -7,12 +7,8 @@ "CVE-2021-28811" ], "details": "If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-68w6-7f8g-crh5/GHSA-68w6-7f8g-crh5.json b/advisories/unreviewed/2022/05/GHSA-68w6-7f8g-crh5/GHSA-68w6-7f8g-crh5.json index d48e162850d..6ec8f59d063 100644 --- a/advisories/unreviewed/2022/05/GHSA-68w6-7f8g-crh5/GHSA-68w6-7f8g-crh5.json +++ b/advisories/unreviewed/2022/05/GHSA-68w6-7f8g-crh5/GHSA-68w6-7f8g-crh5.json @@ -7,12 +7,8 @@ "CVE-2020-35373" ], "details": "In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-69f6-cm42-pjj3/GHSA-69f6-cm42-pjj3.json b/advisories/unreviewed/2022/05/GHSA-69f6-cm42-pjj3/GHSA-69f6-cm42-pjj3.json index b7441cf10a6..bcc5b1e6d8f 100644 --- a/advisories/unreviewed/2022/05/GHSA-69f6-cm42-pjj3/GHSA-69f6-cm42-pjj3.json +++ b/advisories/unreviewed/2022/05/GHSA-69f6-cm42-pjj3/GHSA-69f6-cm42-pjj3.json @@ -7,12 +7,8 @@ "CVE-2021-32932" ], "details": "The affected product is vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information on the iView (versions prior to v5.7.03.6182).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-69fg-3j6f-3w5w/GHSA-69fg-3j6f-3w5w.json b/advisories/unreviewed/2022/05/GHSA-69fg-3j6f-3w5w/GHSA-69fg-3j6f-3w5w.json index 0bf60c6fbdd..1c76ce8c10e 100644 --- a/advisories/unreviewed/2022/05/GHSA-69fg-3j6f-3w5w/GHSA-69fg-3j6f-3w5w.json +++ b/advisories/unreviewed/2022/05/GHSA-69fg-3j6f-3w5w/GHSA-69fg-3j6f-3w5w.json @@ -7,12 +7,8 @@ "CVE-2020-11250" ], "details": "Use after free due to race condition when reopening the device driver repeatedly in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6c25-62ch-w9gq/GHSA-6c25-62ch-w9gq.json b/advisories/unreviewed/2022/05/GHSA-6c25-62ch-w9gq/GHSA-6c25-62ch-w9gq.json index 3dd036e6c2f..f847e58ba28 100644 --- a/advisories/unreviewed/2022/05/GHSA-6c25-62ch-w9gq/GHSA-6c25-62ch-w9gq.json +++ b/advisories/unreviewed/2022/05/GHSA-6c25-62ch-w9gq/GHSA-6c25-62ch-w9gq.json @@ -7,12 +7,8 @@ "CVE-2020-22208" ], "details": "SQL Injection in 74cms 3.2.0 via the x parameter to plus/ajax_street.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6c63-gfx4-f23j/GHSA-6c63-gfx4-f23j.json b/advisories/unreviewed/2022/05/GHSA-6c63-gfx4-f23j/GHSA-6c63-gfx4-f23j.json index ce7add4a5c1..e3990e3d403 100644 --- a/advisories/unreviewed/2022/05/GHSA-6c63-gfx4-f23j/GHSA-6c63-gfx4-f23j.json +++ b/advisories/unreviewed/2022/05/GHSA-6c63-gfx4-f23j/GHSA-6c63-gfx4-f23j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6g22-rpp3-9gm7/GHSA-6g22-rpp3-9gm7.json b/advisories/unreviewed/2022/05/GHSA-6g22-rpp3-9gm7/GHSA-6g22-rpp3-9gm7.json index d1b4afb7099..1f4fe41a056 100644 --- a/advisories/unreviewed/2022/05/GHSA-6g22-rpp3-9gm7/GHSA-6g22-rpp3-9gm7.json +++ b/advisories/unreviewed/2022/05/GHSA-6g22-rpp3-9gm7/GHSA-6g22-rpp3-9gm7.json @@ -7,12 +7,8 @@ "CVE-2021-23846" ], "details": "When using http protocol, the user password is transmitted as a clear text parameter for which it is possible to be obtained by an attacker through a MITM attack. This will be fixed starting from Firmware version 3.11.5, which will be released on the 30th of June, 2021.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6g54-r3q8-8jvq/GHSA-6g54-r3q8-8jvq.json b/advisories/unreviewed/2022/05/GHSA-6g54-r3q8-8jvq/GHSA-6g54-r3q8-8jvq.json index e1a0c79a3aa..f4f0a7e05f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-6g54-r3q8-8jvq/GHSA-6g54-r3q8-8jvq.json +++ b/advisories/unreviewed/2022/05/GHSA-6g54-r3q8-8jvq/GHSA-6g54-r3q8-8jvq.json @@ -7,12 +7,8 @@ "CVE-2017-20005" ], "details": "NGINX before 1.13.6 has a buffer overflow for years that exceed four digits, as demonstrated by a file with a modification date in 1969 that causes an integer overflow (or a false modification date far in the future), when encountered by the autoindex module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6hq6-w9x9-j77g/GHSA-6hq6-w9x9-j77g.json b/advisories/unreviewed/2022/05/GHSA-6hq6-w9x9-j77g/GHSA-6hq6-w9x9-j77g.json index b8e81f435dc..6ac51283316 100644 --- a/advisories/unreviewed/2022/05/GHSA-6hq6-w9x9-j77g/GHSA-6hq6-w9x9-j77g.json +++ b/advisories/unreviewed/2022/05/GHSA-6hq6-w9x9-j77g/GHSA-6hq6-w9x9-j77g.json @@ -7,12 +7,8 @@ "CVE-2021-32556" ], "details": "It was discovered that the get_modified_conffiles() function in backends/packaging-apt-dpkg.py allowed injecting modified package names in a manner that would confuse the dpkg(1) call.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6jpw-pq5v-3x7w/GHSA-6jpw-pq5v-3x7w.json b/advisories/unreviewed/2022/05/GHSA-6jpw-pq5v-3x7w/GHSA-6jpw-pq5v-3x7w.json index 16d262f517d..080a740b26e 100644 --- a/advisories/unreviewed/2022/05/GHSA-6jpw-pq5v-3x7w/GHSA-6jpw-pq5v-3x7w.json +++ b/advisories/unreviewed/2022/05/GHSA-6jpw-pq5v-3x7w/GHSA-6jpw-pq5v-3x7w.json @@ -7,12 +7,8 @@ "CVE-2021-22214" ], "details": "When requests to the internal network for webhooks are enabled, a server-side request forgery vulnerability in GitLab CE/EE affecting all versions starting from 10.5 was possible to exploit for an unauthenticated attacker even on a GitLab instance where registration is limited", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6jwq-g4qf-v7xh/GHSA-6jwq-g4qf-v7xh.json b/advisories/unreviewed/2022/05/GHSA-6jwq-g4qf-v7xh/GHSA-6jwq-g4qf-v7xh.json index f4f641c08bb..7d41867eecc 100644 --- a/advisories/unreviewed/2022/05/GHSA-6jwq-g4qf-v7xh/GHSA-6jwq-g4qf-v7xh.json +++ b/advisories/unreviewed/2022/05/GHSA-6jwq-g4qf-v7xh/GHSA-6jwq-g4qf-v7xh.json @@ -7,12 +7,8 @@ "CVE-2021-26993" ], "details": "E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to cause a partial Denial of Service (DoS) to the web server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6mp8-wq9g-p6q8/GHSA-6mp8-wq9g-p6q8.json b/advisories/unreviewed/2022/05/GHSA-6mp8-wq9g-p6q8/GHSA-6mp8-wq9g-p6q8.json index ef5754983b0..597ea81b114 100644 --- a/advisories/unreviewed/2022/05/GHSA-6mp8-wq9g-p6q8/GHSA-6mp8-wq9g-p6q8.json +++ b/advisories/unreviewed/2022/05/GHSA-6mp8-wq9g-p6q8/GHSA-6mp8-wq9g-p6q8.json @@ -7,12 +7,8 @@ "CVE-2020-24509" ], "details": "Insufficient control flow management in subsystem in Intel(R) SPS versions before SPS_E3_05.01.04.300.0, SPS_SoC-A_05.00.03.091.0, SPS_E5_04.04.04.023.0, or SPS_E5_04.04.03.263.0 may allow a privileged user to potentially enable escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6p88-x6fc-739x/GHSA-6p88-x6fc-739x.json b/advisories/unreviewed/2022/05/GHSA-6p88-x6fc-739x/GHSA-6p88-x6fc-739x.json index 370100cea35..206c8a96629 100644 --- a/advisories/unreviewed/2022/05/GHSA-6p88-x6fc-739x/GHSA-6p88-x6fc-739x.json +++ b/advisories/unreviewed/2022/05/GHSA-6p88-x6fc-739x/GHSA-6p88-x6fc-739x.json @@ -7,12 +7,8 @@ "CVE-2021-28857" ], "details": "TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 username and password are sent via the cookie.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6pvv-xrf9-29m6/GHSA-6pvv-xrf9-29m6.json b/advisories/unreviewed/2022/05/GHSA-6pvv-xrf9-29m6/GHSA-6pvv-xrf9-29m6.json index c7f9c49ee53..7c55dcdc5b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-6pvv-xrf9-29m6/GHSA-6pvv-xrf9-29m6.json +++ b/advisories/unreviewed/2022/05/GHSA-6pvv-xrf9-29m6/GHSA-6pvv-xrf9-29m6.json @@ -7,12 +7,8 @@ "CVE-2021-26829" ], "details": "OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows stored XSS via system_settings.shtm.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6q25-74p4-x9qc/GHSA-6q25-74p4-x9qc.json b/advisories/unreviewed/2022/05/GHSA-6q25-74p4-x9qc/GHSA-6q25-74p4-x9qc.json index 0c1a768ef2c..3514c22bcd4 100644 --- a/advisories/unreviewed/2022/05/GHSA-6q25-74p4-x9qc/GHSA-6q25-74p4-x9qc.json +++ b/advisories/unreviewed/2022/05/GHSA-6q25-74p4-x9qc/GHSA-6q25-74p4-x9qc.json @@ -7,12 +7,8 @@ "CVE-2021-20483" ], "details": "IBM Security Identity Manager 6.0.2 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to obtain sensitive data. IBM X-Force ID: 197591.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6q8h-w49w-rg9j/GHSA-6q8h-w49w-rg9j.json b/advisories/unreviewed/2022/05/GHSA-6q8h-w49w-rg9j/GHSA-6q8h-w49w-rg9j.json index f8e3954c660..9d9b86a5b37 100644 --- a/advisories/unreviewed/2022/05/GHSA-6q8h-w49w-rg9j/GHSA-6q8h-w49w-rg9j.json +++ b/advisories/unreviewed/2022/05/GHSA-6q8h-w49w-rg9j/GHSA-6q8h-w49w-rg9j.json @@ -7,12 +7,8 @@ "CVE-2020-12289" ], "details": "Out-of-bounds write in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6q99-cq2x-vcqr/GHSA-6q99-cq2x-vcqr.json b/advisories/unreviewed/2022/05/GHSA-6q99-cq2x-vcqr/GHSA-6q99-cq2x-vcqr.json index caad6bd4fa4..50435a8e712 100644 --- a/advisories/unreviewed/2022/05/GHSA-6q99-cq2x-vcqr/GHSA-6q99-cq2x-vcqr.json +++ b/advisories/unreviewed/2022/05/GHSA-6q99-cq2x-vcqr/GHSA-6q99-cq2x-vcqr.json @@ -7,12 +7,8 @@ "CVE-2005-0072" ], "details": "zhcon before 0.2 does not drop privileges before reading a user configuration file, which allows local users to read arbitrary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-6qcx-wmcg-gqpq/GHSA-6qcx-wmcg-gqpq.json b/advisories/unreviewed/2022/05/GHSA-6qcx-wmcg-gqpq/GHSA-6qcx-wmcg-gqpq.json index 84c214855df..3d495e13c97 100644 --- a/advisories/unreviewed/2022/05/GHSA-6qcx-wmcg-gqpq/GHSA-6qcx-wmcg-gqpq.json +++ b/advisories/unreviewed/2022/05/GHSA-6qcx-wmcg-gqpq/GHSA-6qcx-wmcg-gqpq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6rmf-32jh-fx45/GHSA-6rmf-32jh-fx45.json b/advisories/unreviewed/2022/05/GHSA-6rmf-32jh-fx45/GHSA-6rmf-32jh-fx45.json index d1d49bb4e45..cb295e14eae 100644 --- a/advisories/unreviewed/2022/05/GHSA-6rmf-32jh-fx45/GHSA-6rmf-32jh-fx45.json +++ b/advisories/unreviewed/2022/05/GHSA-6rmf-32jh-fx45/GHSA-6rmf-32jh-fx45.json @@ -7,12 +7,8 @@ "CVE-2021-22516" ], "details": "Insertion of Sensitive Information into Log File vulnerability in Micro Focus Secure API Manager (SAPIM) product, affecting version 2.0.0. The vulnerability could lead to sensitive information being in a log file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-6vpq-rp42-rr52/GHSA-6vpq-rp42-rr52.json b/advisories/unreviewed/2022/05/GHSA-6vpq-rp42-rr52/GHSA-6vpq-rp42-rr52.json index d0e2bf243e6..07e905edd1f 100644 --- a/advisories/unreviewed/2022/05/GHSA-6vpq-rp42-rr52/GHSA-6vpq-rp42-rr52.json +++ b/advisories/unreviewed/2022/05/GHSA-6vpq-rp42-rr52/GHSA-6vpq-rp42-rr52.json @@ -7,12 +7,8 @@ "CVE-2021-23204" ], "details": "Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gallagher Command Centre Server allows OSDP key material to be exposed to Command Centre Operators. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-729m-r9fv-3cr3/GHSA-729m-r9fv-3cr3.json b/advisories/unreviewed/2022/05/GHSA-729m-r9fv-3cr3/GHSA-729m-r9fv-3cr3.json index d0b8be02a13..d3930bb7858 100644 --- a/advisories/unreviewed/2022/05/GHSA-729m-r9fv-3cr3/GHSA-729m-r9fv-3cr3.json +++ b/advisories/unreviewed/2022/05/GHSA-729m-r9fv-3cr3/GHSA-729m-r9fv-3cr3.json @@ -7,12 +7,8 @@ "CVE-2005-0055" ], "details": "Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote attackers to execute arbitrary code, aka the \"DHTML Method Heap Memory Corruption Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-76g2-m2qr-cq8c/GHSA-76g2-m2qr-cq8c.json b/advisories/unreviewed/2022/05/GHSA-76g2-m2qr-cq8c/GHSA-76g2-m2qr-cq8c.json index b7e52499c24..2d1a8c40ad0 100644 --- a/advisories/unreviewed/2022/05/GHSA-76g2-m2qr-cq8c/GHSA-76g2-m2qr-cq8c.json +++ b/advisories/unreviewed/2022/05/GHSA-76g2-m2qr-cq8c/GHSA-76g2-m2qr-cq8c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-76x6-c49p-vv53/GHSA-76x6-c49p-vv53.json b/advisories/unreviewed/2022/05/GHSA-76x6-c49p-vv53/GHSA-76x6-c49p-vv53.json index 97f099530c1..83af4317c01 100644 --- a/advisories/unreviewed/2022/05/GHSA-76x6-c49p-vv53/GHSA-76x6-c49p-vv53.json +++ b/advisories/unreviewed/2022/05/GHSA-76x6-c49p-vv53/GHSA-76x6-c49p-vv53.json @@ -7,12 +7,8 @@ "CVE-2020-22209" ], "details": "SQL Injection in 74cms 3.2.0 via the query parameter to plus/ajax_common.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-773v-wwj3-9653/GHSA-773v-wwj3-9653.json b/advisories/unreviewed/2022/05/GHSA-773v-wwj3-9653/GHSA-773v-wwj3-9653.json index 49b79620037..463642701d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-773v-wwj3-9653/GHSA-773v-wwj3-9653.json +++ b/advisories/unreviewed/2022/05/GHSA-773v-wwj3-9653/GHSA-773v-wwj3-9653.json @@ -7,12 +7,8 @@ "CVE-2020-15377" ], "details": "Webtools in Brocade SANnav before version 2.1.1 allows unauthenticated users to make requests to arbitrary hosts due to a misconfiguration; this is commonly referred to as Server-Side Request Forgery (SSRF).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-773x-2cfp-99mc/GHSA-773x-2cfp-99mc.json b/advisories/unreviewed/2022/05/GHSA-773x-2cfp-99mc/GHSA-773x-2cfp-99mc.json index 4d7f290ea8a..5821498685c 100644 --- a/advisories/unreviewed/2022/05/GHSA-773x-2cfp-99mc/GHSA-773x-2cfp-99mc.json +++ b/advisories/unreviewed/2022/05/GHSA-773x-2cfp-99mc/GHSA-773x-2cfp-99mc.json @@ -7,12 +7,8 @@ "CVE-2021-1526" ], "details": "A vulnerability in Cisco Webex Player for Windows and MacOS could allow an attacker to execute arbitrary code on an affected system. This vulnerability is due to insufficient validation of values in Webex recording files that are in Webex Recording Format (WRF). An attacker could exploit this vulnerability by sending a user a malicious WRF file through a link or email attachment and persuading the user to open the file with the affected software on the local system. A successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of the targeted user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-77mj-xh9q-fm9j/GHSA-77mj-xh9q-fm9j.json b/advisories/unreviewed/2022/05/GHSA-77mj-xh9q-fm9j/GHSA-77mj-xh9q-fm9j.json index dc6d11a2037..920c3f2f8d0 100644 --- a/advisories/unreviewed/2022/05/GHSA-77mj-xh9q-fm9j/GHSA-77mj-xh9q-fm9j.json +++ b/advisories/unreviewed/2022/05/GHSA-77mj-xh9q-fm9j/GHSA-77mj-xh9q-fm9j.json @@ -7,12 +7,8 @@ "CVE-2020-35452" ], "details": "Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP Server team could create one, though some particular compiler and/or compilation option might make it possible, with limited consequences anyway due to the size (a single byte) and the value (zero byte) of the overflow", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-787v-4g2j-g634/GHSA-787v-4g2j-g634.json b/advisories/unreviewed/2022/05/GHSA-787v-4g2j-g634/GHSA-787v-4g2j-g634.json index b47069d8aa6..6e93e3ca276 100644 --- a/advisories/unreviewed/2022/05/GHSA-787v-4g2j-g634/GHSA-787v-4g2j-g634.json +++ b/advisories/unreviewed/2022/05/GHSA-787v-4g2j-g634/GHSA-787v-4g2j-g634.json @@ -7,12 +7,8 @@ "CVE-2020-8702" ], "details": "Uncontrolled search path element in the Intel(R) Processor Diagnostic Tool before version 4.1.5.37 may allow an authenticated user to potentially enable escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-78jj-chhm-hm82/GHSA-78jj-chhm-hm82.json b/advisories/unreviewed/2022/05/GHSA-78jj-chhm-hm82/GHSA-78jj-chhm-hm82.json index ae79df89730..7b73d27f9d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-78jj-chhm-hm82/GHSA-78jj-chhm-hm82.json +++ b/advisories/unreviewed/2022/05/GHSA-78jj-chhm-hm82/GHSA-78jj-chhm-hm82.json @@ -7,12 +7,8 @@ "CVE-2021-0001" ], "details": "Observable timing discrepancy in Intel(R) IPP before version 2020 update 1 may allow authorized user to potentially enable information disclosure via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-78qg-mvhm-w6r9/GHSA-78qg-mvhm-w6r9.json b/advisories/unreviewed/2022/05/GHSA-78qg-mvhm-w6r9/GHSA-78qg-mvhm-w6r9.json index 03fa6aa3dec..6eab28b0dab 100644 --- a/advisories/unreviewed/2022/05/GHSA-78qg-mvhm-w6r9/GHSA-78qg-mvhm-w6r9.json +++ b/advisories/unreviewed/2022/05/GHSA-78qg-mvhm-w6r9/GHSA-78qg-mvhm-w6r9.json @@ -7,12 +7,8 @@ "CVE-2021-33894" ], "details": "In Progress MOVEit Transfer before 2019.0.6 (11.0.6), 2019.1.x before 2019.1.5 (11.1.5), 2019.2.x before 2019.2.2 (11.2.2), 2020.x before 2020.0.5 (12.0.5), 2020.1.x before 2020.1.4 (12.1.4), and 2021.x before 2021.0.1 (13.0.1), a SQL injection vulnerability exists in SILUtility.vb in MOVEit.DMZ.WebApp in the MOVEit Transfer web app. This could allow an authenticated attacker to gain unauthorized access to the database. Depending on the database engine being used (MySQL, Microsoft SQL Server, or Azure SQL), an attacker may be able to infer information about the structure and contents of the database and/or execute SQL statements that alter or delete database elements.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-78x7-234w-r2hv/GHSA-78x7-234w-r2hv.json b/advisories/unreviewed/2022/05/GHSA-78x7-234w-r2hv/GHSA-78x7-234w-r2hv.json index 9eb97740251..c7f63b305a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-78x7-234w-r2hv/GHSA-78x7-234w-r2hv.json +++ b/advisories/unreviewed/2022/05/GHSA-78x7-234w-r2hv/GHSA-78x7-234w-r2hv.json @@ -7,12 +7,8 @@ "CVE-2021-27388" ], "details": "SINAMICS medium voltage routable products are affected by a vulnerability in the Sm@rtServer component for remote access that could allow an unauthenticated attacker to cause a denial-of-service condition, and/or execution of limited configuration modifications and/or execution of limited control commands on the SINAMICS Medium Voltage Products, Remote Access (SINAMICS SL150: All versions, SINAMICS SM150: All versions, SINAMICS SM150i: All versions).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7ccm-338c-fv4r/GHSA-7ccm-338c-fv4r.json b/advisories/unreviewed/2022/05/GHSA-7ccm-338c-fv4r/GHSA-7ccm-338c-fv4r.json index d162cdaa27c..de8f3e2538c 100644 --- a/advisories/unreviewed/2022/05/GHSA-7ccm-338c-fv4r/GHSA-7ccm-338c-fv4r.json +++ b/advisories/unreviewed/2022/05/GHSA-7ccm-338c-fv4r/GHSA-7ccm-338c-fv4r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7cqc-8qw6-mjp9/GHSA-7cqc-8qw6-mjp9.json b/advisories/unreviewed/2022/05/GHSA-7cqc-8qw6-mjp9/GHSA-7cqc-8qw6-mjp9.json index 2576f062cc6..223eb96d50d 100644 --- a/advisories/unreviewed/2022/05/GHSA-7cqc-8qw6-mjp9/GHSA-7cqc-8qw6-mjp9.json +++ b/advisories/unreviewed/2022/05/GHSA-7cqc-8qw6-mjp9/GHSA-7cqc-8qw6-mjp9.json @@ -7,12 +7,8 @@ "CVE-2020-36384" ], "details": "PageLayer before 1.3.5 allows reflected XSS via color settings.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7f92-c548-3fmj/GHSA-7f92-c548-3fmj.json b/advisories/unreviewed/2022/05/GHSA-7f92-c548-3fmj/GHSA-7f92-c548-3fmj.json index 4c499577c88..05c5d9db12f 100644 --- a/advisories/unreviewed/2022/05/GHSA-7f92-c548-3fmj/GHSA-7f92-c548-3fmj.json +++ b/advisories/unreviewed/2022/05/GHSA-7f92-c548-3fmj/GHSA-7f92-c548-3fmj.json @@ -7,12 +7,8 @@ "CVE-2005-0060" ], "details": "Buffer overflow in the font processing component of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via a specially-designed application.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7fcj-4hc5-mrph/GHSA-7fcj-4hc5-mrph.json b/advisories/unreviewed/2022/05/GHSA-7fcj-4hc5-mrph/GHSA-7fcj-4hc5-mrph.json index d10677124f2..7bced2092cf 100644 --- a/advisories/unreviewed/2022/05/GHSA-7fcj-4hc5-mrph/GHSA-7fcj-4hc5-mrph.json +++ b/advisories/unreviewed/2022/05/GHSA-7fcj-4hc5-mrph/GHSA-7fcj-4hc5-mrph.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7fm8-2jgx-v3jh/GHSA-7fm8-2jgx-v3jh.json b/advisories/unreviewed/2022/05/GHSA-7fm8-2jgx-v3jh/GHSA-7fm8-2jgx-v3jh.json index 99635463153..35f41c0bea8 100644 --- a/advisories/unreviewed/2022/05/GHSA-7fm8-2jgx-v3jh/GHSA-7fm8-2jgx-v3jh.json +++ b/advisories/unreviewed/2022/05/GHSA-7fm8-2jgx-v3jh/GHSA-7fm8-2jgx-v3jh.json @@ -7,12 +7,8 @@ "CVE-2021-34546" ], "details": "An unauthenticated attacker with physical access to a computer with NetSetMan Pro before 5.0 installed, that has the pre-logon profile switch button within the Windows logon screen enabled, is able to drop to an administrative shell and execute arbitrary commands as SYSTEM via the \"save log to file\" feature. To accomplish this, the attacker can navigate to cmd.exe.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7h9p-4h36-3h37/GHSA-7h9p-4h36-3h37.json b/advisories/unreviewed/2022/05/GHSA-7h9p-4h36-3h37/GHSA-7h9p-4h36-3h37.json index b48c9e0d0da..5d13097f6ac 100644 --- a/advisories/unreviewed/2022/05/GHSA-7h9p-4h36-3h37/GHSA-7h9p-4h36-3h37.json +++ b/advisories/unreviewed/2022/05/GHSA-7h9p-4h36-3h37/GHSA-7h9p-4h36-3h37.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7hgj-m3m7-73x6/GHSA-7hgj-m3m7-73x6.json b/advisories/unreviewed/2022/05/GHSA-7hgj-m3m7-73x6/GHSA-7hgj-m3m7-73x6.json index b79a96587ab..5ba75799d30 100644 --- a/advisories/unreviewed/2022/05/GHSA-7hgj-m3m7-73x6/GHSA-7hgj-m3m7-73x6.json +++ b/advisories/unreviewed/2022/05/GHSA-7hgj-m3m7-73x6/GHSA-7hgj-m3m7-73x6.json @@ -7,12 +7,8 @@ "CVE-2021-31659" ], "details": "TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is vulnerable to Cross Site Request Forgery (CSRF). All configuration information is placed in the URL, without any additional token authentication information. A malicious link opened by the switch administrator may cause the password of the switch to be modified and the configuration file to be tampered with.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7hm5-8cp5-vqp5/GHSA-7hm5-8cp5-vqp5.json b/advisories/unreviewed/2022/05/GHSA-7hm5-8cp5-vqp5/GHSA-7hm5-8cp5-vqp5.json index 46a1d8525a1..ccf364b3296 100644 --- a/advisories/unreviewed/2022/05/GHSA-7hm5-8cp5-vqp5/GHSA-7hm5-8cp5-vqp5.json +++ b/advisories/unreviewed/2022/05/GHSA-7hm5-8cp5-vqp5/GHSA-7hm5-8cp5-vqp5.json @@ -7,12 +7,8 @@ "CVE-2020-24512" ], "details": "Observable timing discrepancy in some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7jch-363p-hrf7/GHSA-7jch-363p-hrf7.json b/advisories/unreviewed/2022/05/GHSA-7jch-363p-hrf7/GHSA-7jch-363p-hrf7.json index c5ca89ef40d..7580321e0cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-7jch-363p-hrf7/GHSA-7jch-363p-hrf7.json +++ b/advisories/unreviewed/2022/05/GHSA-7jch-363p-hrf7/GHSA-7jch-363p-hrf7.json @@ -7,12 +7,8 @@ "CVE-2005-0012" ], "details": "Format string vulnerability in the a_Interface_msg function in Dillo before 0.8.3-r4 allows remote attackers to execute arbitrary code via format string specifiers in a web page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7jv7-xxc6-mf32/GHSA-7jv7-xxc6-mf32.json b/advisories/unreviewed/2022/05/GHSA-7jv7-xxc6-mf32/GHSA-7jv7-xxc6-mf32.json index 20175a857eb..1b4e0397f19 100644 --- a/advisories/unreviewed/2022/05/GHSA-7jv7-xxc6-mf32/GHSA-7jv7-xxc6-mf32.json +++ b/advisories/unreviewed/2022/05/GHSA-7jv7-xxc6-mf32/GHSA-7jv7-xxc6-mf32.json @@ -7,12 +7,8 @@ "CVE-2020-23309" ], "details": "There is an Assertion 'context_p->stack_depth == context_p->context_stack_depth' failed at js-parser-statm.c:2756 in parser_parse_statements in JerryScript 2.2.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7m5x-235r-x9r3/GHSA-7m5x-235r-x9r3.json b/advisories/unreviewed/2022/05/GHSA-7m5x-235r-x9r3/GHSA-7m5x-235r-x9r3.json index 662afd18384..8ce2213dd4d 100644 --- a/advisories/unreviewed/2022/05/GHSA-7m5x-235r-x9r3/GHSA-7m5x-235r-x9r3.json +++ b/advisories/unreviewed/2022/05/GHSA-7m5x-235r-x9r3/GHSA-7m5x-235r-x9r3.json @@ -7,12 +7,8 @@ "CVE-2020-11178" ], "details": "Trusted APPS to overwrite the CPZ memory of another use-case as TZ only checks the physical address not overlapping with its memory and its RoT memory in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7p7j-x9w2-xpj5/GHSA-7p7j-x9w2-xpj5.json b/advisories/unreviewed/2022/05/GHSA-7p7j-x9w2-xpj5/GHSA-7p7j-x9w2-xpj5.json index e0f56307c2b..e620760d421 100644 --- a/advisories/unreviewed/2022/05/GHSA-7p7j-x9w2-xpj5/GHSA-7p7j-x9w2-xpj5.json +++ b/advisories/unreviewed/2022/05/GHSA-7p7j-x9w2-xpj5/GHSA-7p7j-x9w2-xpj5.json @@ -7,12 +7,8 @@ "CVE-2021-34540" ], "details": "Advantech WebAccess 8.4.2 and 8.4.4 allows XSS via the username column of the bwRoot.asp page of WADashboard.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7q8v-785j-jc5w/GHSA-7q8v-785j-jc5w.json b/advisories/unreviewed/2022/05/GHSA-7q8v-785j-jc5w/GHSA-7q8v-785j-jc5w.json index 9cc6acf094c..bd7a444e795 100644 --- a/advisories/unreviewed/2022/05/GHSA-7q8v-785j-jc5w/GHSA-7q8v-785j-jc5w.json +++ b/advisories/unreviewed/2022/05/GHSA-7q8v-785j-jc5w/GHSA-7q8v-785j-jc5w.json @@ -7,12 +7,8 @@ "CVE-2021-1525" ], "details": "A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to redirect users to a malicious file. This vulnerability is due to improper validation of URL paths in the application interface. An attacker could exploit this vulnerability by persuading a user to follow a specially crafted URL that is designed to cause Cisco Webex Meetings to include a remote file in the web UI. A successful exploit could allow the attacker to cause the application to offer a remote file to a user, which could allow the attacker to conduct further phishing or spoofing attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7qhq-jq9g-39g4/GHSA-7qhq-jq9g-39g4.json b/advisories/unreviewed/2022/05/GHSA-7qhq-jq9g-39g4/GHSA-7qhq-jq9g-39g4.json index 865b0106d7a..3fdc9ddd1fa 100644 --- a/advisories/unreviewed/2022/05/GHSA-7qhq-jq9g-39g4/GHSA-7qhq-jq9g-39g4.json +++ b/advisories/unreviewed/2022/05/GHSA-7qhq-jq9g-39g4/GHSA-7qhq-jq9g-39g4.json @@ -7,12 +7,8 @@ "CVE-2020-23322" ], "details": "There is an Assertion in 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type == LEXER_ASSIGN || context_p->token.type == LEXER_COMMA' in parser_parse_object_initializer in JerryScript 2.2.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7r3x-r2cv-f72x/GHSA-7r3x-r2cv-f72x.json b/advisories/unreviewed/2022/05/GHSA-7r3x-r2cv-f72x/GHSA-7r3x-r2cv-f72x.json index 0c7f557fa44..6ee3a8d19f7 100644 --- a/advisories/unreviewed/2022/05/GHSA-7r3x-r2cv-f72x/GHSA-7r3x-r2cv-f72x.json +++ b/advisories/unreviewed/2022/05/GHSA-7r3x-r2cv-f72x/GHSA-7r3x-r2cv-f72x.json @@ -7,12 +7,8 @@ "CVE-2020-36009" ], "details": "OBottle 2.0 in \\c\\g.php contains an arbitrary file download vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-7vcw-x89j-vrrc/GHSA-7vcw-x89j-vrrc.json b/advisories/unreviewed/2022/05/GHSA-7vcw-x89j-vrrc/GHSA-7vcw-x89j-vrrc.json index 727a7858c61..c7ee6678291 100644 --- a/advisories/unreviewed/2022/05/GHSA-7vcw-x89j-vrrc/GHSA-7vcw-x89j-vrrc.json +++ b/advisories/unreviewed/2022/05/GHSA-7vcw-x89j-vrrc/GHSA-7vcw-x89j-vrrc.json @@ -7,12 +7,8 @@ "CVE-2021-33175" ], "details": "EMQ X Broker versions prior to 4.2.8 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the handling of untrusted inputs. These inputs cause the message broker to consume large amounts of memory, resulting in the application being terminated by the operating system.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-7xxh-5w72-gmww/GHSA-7xxh-5w72-gmww.json b/advisories/unreviewed/2022/05/GHSA-7xxh-5w72-gmww/GHSA-7xxh-5w72-gmww.json index 786e3983d05..1e4c09f71e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-7xxh-5w72-gmww/GHSA-7xxh-5w72-gmww.json +++ b/advisories/unreviewed/2022/05/GHSA-7xxh-5w72-gmww/GHSA-7xxh-5w72-gmww.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-82vv-qrgm-7g9j/GHSA-82vv-qrgm-7g9j.json b/advisories/unreviewed/2022/05/GHSA-82vv-qrgm-7g9j/GHSA-82vv-qrgm-7g9j.json index e2ec999a384..0b667407f6d 100644 --- a/advisories/unreviewed/2022/05/GHSA-82vv-qrgm-7g9j/GHSA-82vv-qrgm-7g9j.json +++ b/advisories/unreviewed/2022/05/GHSA-82vv-qrgm-7g9j/GHSA-82vv-qrgm-7g9j.json @@ -7,12 +7,8 @@ "CVE-2021-29706" ], "details": "IBM AIX 7.1 could allow a non-privileged local user to exploit a vulnerability in the trace facility to expose sensitive information or cause a denial of service. IBM X-Force ID: 200663.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-83cg-29pr-h246/GHSA-83cg-29pr-h246.json b/advisories/unreviewed/2022/05/GHSA-83cg-29pr-h246/GHSA-83cg-29pr-h246.json index d8bc77acbf2..bcfeee78c3e 100644 --- a/advisories/unreviewed/2022/05/GHSA-83cg-29pr-h246/GHSA-83cg-29pr-h246.json +++ b/advisories/unreviewed/2022/05/GHSA-83cg-29pr-h246/GHSA-83cg-29pr-h246.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-83gc-qhg5-655q/GHSA-83gc-qhg5-655q.json b/advisories/unreviewed/2022/05/GHSA-83gc-qhg5-655q/GHSA-83gc-qhg5-655q.json index 73715fc5567..cf59860dc10 100644 --- a/advisories/unreviewed/2022/05/GHSA-83gc-qhg5-655q/GHSA-83gc-qhg5-655q.json +++ b/advisories/unreviewed/2022/05/GHSA-83gc-qhg5-655q/GHSA-83gc-qhg5-655q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-83pw-wxhw-r33r/GHSA-83pw-wxhw-r33r.json b/advisories/unreviewed/2022/05/GHSA-83pw-wxhw-r33r/GHSA-83pw-wxhw-r33r.json index be335810ddd..6f81bbe756c 100644 --- a/advisories/unreviewed/2022/05/GHSA-83pw-wxhw-r33r/GHSA-83pw-wxhw-r33r.json +++ b/advisories/unreviewed/2022/05/GHSA-83pw-wxhw-r33r/GHSA-83pw-wxhw-r33r.json @@ -7,12 +7,8 @@ "CVE-2021-33576" ], "details": "An issue was discovered in Cleo LexiCom 5.5.0.0. Within the AS2 message, the sender can specify a filename. This filename can include path-traversal characters, allowing the file to be written to an arbitrary location on disk.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-847r-gqjq-x7r2/GHSA-847r-gqjq-x7r2.json b/advisories/unreviewed/2022/05/GHSA-847r-gqjq-x7r2/GHSA-847r-gqjq-x7r2.json index 68078da8d05..1dbcf9de90c 100644 --- a/advisories/unreviewed/2022/05/GHSA-847r-gqjq-x7r2/GHSA-847r-gqjq-x7r2.json +++ b/advisories/unreviewed/2022/05/GHSA-847r-gqjq-x7r2/GHSA-847r-gqjq-x7r2.json @@ -7,12 +7,8 @@ "CVE-2020-26885" ], "details": "An issue was discovered in 2sic 2sxc before 11.22. A XSS vulnerability in the sxcver parameter of dnn/ui.html allows an attacker to craft a malicious URL that executes a JavaScript payload in a victim's browser.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-84r8-qq95-wq5m/GHSA-84r8-qq95-wq5m.json b/advisories/unreviewed/2022/05/GHSA-84r8-qq95-wq5m/GHSA-84r8-qq95-wq5m.json index 6820d3e2331..0d350074147 100644 --- a/advisories/unreviewed/2022/05/GHSA-84r8-qq95-wq5m/GHSA-84r8-qq95-wq5m.json +++ b/advisories/unreviewed/2022/05/GHSA-84r8-qq95-wq5m/GHSA-84r8-qq95-wq5m.json @@ -7,12 +7,8 @@ "CVE-2020-25752" ], "details": "An issue was discovered on Enphase Envoy R3.x and D4.x devices. There are hardcoded web-panel login passwords for the installer and Enphase accounts. The passwords for these accounts are hardcoded values derived from the MD5 hash of the username and serial number mixed with some static strings. The serial number can be retrieved by an unauthenticated user at /info.xml. These passwords can be easily calculated by an attacker; users are unable to change these passwords.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-84vv-m336-cjrf/GHSA-84vv-m336-cjrf.json b/advisories/unreviewed/2022/05/GHSA-84vv-m336-cjrf/GHSA-84vv-m336-cjrf.json index d6f70dfcbc3..1743a836fc8 100644 --- a/advisories/unreviewed/2022/05/GHSA-84vv-m336-cjrf/GHSA-84vv-m336-cjrf.json +++ b/advisories/unreviewed/2022/05/GHSA-84vv-m336-cjrf/GHSA-84vv-m336-cjrf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-85ch-gvj9-wmwc/GHSA-85ch-gvj9-wmwc.json b/advisories/unreviewed/2022/05/GHSA-85ch-gvj9-wmwc/GHSA-85ch-gvj9-wmwc.json index 286721fe34c..3d166686cde 100644 --- a/advisories/unreviewed/2022/05/GHSA-85ch-gvj9-wmwc/GHSA-85ch-gvj9-wmwc.json +++ b/advisories/unreviewed/2022/05/GHSA-85ch-gvj9-wmwc/GHSA-85ch-gvj9-wmwc.json @@ -7,12 +7,8 @@ "CVE-2021-22216" ], "details": "A denial of service vulnerability in all versions of GitLab CE/EE before 13.12.2, 13.11.5 or 13.10.5 allows an attacker to cause uncontrolled resource consumption with a very long issue or merge request description", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-87ff-vvx3-3mr2/GHSA-87ff-vvx3-3mr2.json b/advisories/unreviewed/2022/05/GHSA-87ff-vvx3-3mr2/GHSA-87ff-vvx3-3mr2.json index bcaf82143cd..2a9dc902294 100644 --- a/advisories/unreviewed/2022/05/GHSA-87ff-vvx3-3mr2/GHSA-87ff-vvx3-3mr2.json +++ b/advisories/unreviewed/2022/05/GHSA-87ff-vvx3-3mr2/GHSA-87ff-vvx3-3mr2.json @@ -7,12 +7,8 @@ "CVE-2019-25046" ], "details": "The Web Client in Cerberus FTP Server Enterprise before 10.0.19 and 11.x before 11.0.4 allows XSS via an SVG document.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-88pp-wqr9-8f77/GHSA-88pp-wqr9-8f77.json b/advisories/unreviewed/2022/05/GHSA-88pp-wqr9-8f77/GHSA-88pp-wqr9-8f77.json index d66bddc368a..2caecdc3d03 100644 --- a/advisories/unreviewed/2022/05/GHSA-88pp-wqr9-8f77/GHSA-88pp-wqr9-8f77.json +++ b/advisories/unreviewed/2022/05/GHSA-88pp-wqr9-8f77/GHSA-88pp-wqr9-8f77.json @@ -7,12 +7,8 @@ "CVE-2021-3039" ], "details": "An information exposure through log file vulnerability exists in the Palo Alto Networks Prisma Cloud Compute Console where a secret used to authorize the role of the authenticated user is logged to a debug log file. Authenticated Operator role and Auditor role users with access to the debug log files can use this secret to gain Administrator role access for their active session in Prisma Cloud Compute. Prisma Cloud Compute SaaS versions were automatically upgraded to the fixed release. This issue impacts all Prisma Cloud Compute versions earlier than Prisma Cloud Compute 21.04.412.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-88wv-rh5c-qjc6/GHSA-88wv-rh5c-qjc6.json b/advisories/unreviewed/2022/05/GHSA-88wv-rh5c-qjc6/GHSA-88wv-rh5c-qjc6.json index 7752410fc45..d7bf2ef2c57 100644 --- a/advisories/unreviewed/2022/05/GHSA-88wv-rh5c-qjc6/GHSA-88wv-rh5c-qjc6.json +++ b/advisories/unreviewed/2022/05/GHSA-88wv-rh5c-qjc6/GHSA-88wv-rh5c-qjc6.json @@ -7,12 +7,8 @@ "CVE-2021-25407" ], "details": "A possible out of bounds write vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-89gg-fwfj-q83q/GHSA-89gg-fwfj-q83q.json b/advisories/unreviewed/2022/05/GHSA-89gg-fwfj-q83q/GHSA-89gg-fwfj-q83q.json index 05e2cadb838..73d88fc8559 100644 --- a/advisories/unreviewed/2022/05/GHSA-89gg-fwfj-q83q/GHSA-89gg-fwfj-q83q.json +++ b/advisories/unreviewed/2022/05/GHSA-89gg-fwfj-q83q/GHSA-89gg-fwfj-q83q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8gp7-gq2p-694f/GHSA-8gp7-gq2p-694f.json b/advisories/unreviewed/2022/05/GHSA-8gp7-gq2p-694f/GHSA-8gp7-gq2p-694f.json index 6cd52d2caed..4ce50fc2bef 100644 --- a/advisories/unreviewed/2022/05/GHSA-8gp7-gq2p-694f/GHSA-8gp7-gq2p-694f.json +++ b/advisories/unreviewed/2022/05/GHSA-8gp7-gq2p-694f/GHSA-8gp7-gq2p-694f.json @@ -7,12 +7,8 @@ "CVE-2021-25421" ], "details": "Improper log management vulnerability in Galaxy Watch3 PlugIn prior to version 2.2.09.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8h6x-c8rf-g4xj/GHSA-8h6x-c8rf-g4xj.json b/advisories/unreviewed/2022/05/GHSA-8h6x-c8rf-g4xj/GHSA-8h6x-c8rf-g4xj.json index 9e760476a4d..d821d839f70 100644 --- a/advisories/unreviewed/2022/05/GHSA-8h6x-c8rf-g4xj/GHSA-8h6x-c8rf-g4xj.json +++ b/advisories/unreviewed/2022/05/GHSA-8h6x-c8rf-g4xj/GHSA-8h6x-c8rf-g4xj.json @@ -7,12 +7,8 @@ "CVE-2021-32552" ], "details": "It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-16 package apport hooks, it could expose private data to other local users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8h74-7h77-7f6p/GHSA-8h74-7h77-7f6p.json b/advisories/unreviewed/2022/05/GHSA-8h74-7h77-7f6p/GHSA-8h74-7h77-7f6p.json index 15e094d329b..7033ee38b86 100644 --- a/advisories/unreviewed/2022/05/GHSA-8h74-7h77-7f6p/GHSA-8h74-7h77-7f6p.json +++ b/advisories/unreviewed/2022/05/GHSA-8h74-7h77-7f6p/GHSA-8h74-7h77-7f6p.json @@ -7,12 +7,8 @@ "CVE-2020-27384" ], "details": "The Gw2-64.exe in Guild Wars 2 launcher version 106916 suffers from an elevation of privileges vulnerability which can be used by an \"Authenticated User\" to modify the existing executable file with a binary of his choice. The vulnerability exist due to the improper permissions, with the 'F' flag (Full Control) for 'Everyone' group, making the entire directory 'Guild Wars 2' and its files and sub-dirs world-writable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8hj4-3g8f-gwwq/GHSA-8hj4-3g8f-gwwq.json b/advisories/unreviewed/2022/05/GHSA-8hj4-3g8f-gwwq/GHSA-8hj4-3g8f-gwwq.json index ae5865b23c0..660416b232e 100644 --- a/advisories/unreviewed/2022/05/GHSA-8hj4-3g8f-gwwq/GHSA-8hj4-3g8f-gwwq.json +++ b/advisories/unreviewed/2022/05/GHSA-8hj4-3g8f-gwwq/GHSA-8hj4-3g8f-gwwq.json @@ -7,12 +7,8 @@ "CVE-2021-33659" ], "details": "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8j28-3ggh-xffw/GHSA-8j28-3ggh-xffw.json b/advisories/unreviewed/2022/05/GHSA-8j28-3ggh-xffw/GHSA-8j28-3ggh-xffw.json index b09a333aafa..821cc2f6546 100644 --- a/advisories/unreviewed/2022/05/GHSA-8j28-3ggh-xffw/GHSA-8j28-3ggh-xffw.json +++ b/advisories/unreviewed/2022/05/GHSA-8j28-3ggh-xffw/GHSA-8j28-3ggh-xffw.json @@ -7,12 +7,8 @@ "CVE-2021-33896" ], "details": "Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal (only for creation of new files) via URI-encoded path separators.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8j4v-27x2-wh59/GHSA-8j4v-27x2-wh59.json b/advisories/unreviewed/2022/05/GHSA-8j4v-27x2-wh59/GHSA-8j4v-27x2-wh59.json index 7859d786048..633b14803bf 100644 --- a/advisories/unreviewed/2022/05/GHSA-8j4v-27x2-wh59/GHSA-8j4v-27x2-wh59.json +++ b/advisories/unreviewed/2022/05/GHSA-8j4v-27x2-wh59/GHSA-8j4v-27x2-wh59.json @@ -7,12 +7,8 @@ "CVE-2020-36386" ], "details": "An issue was discovered in the Linux kernel before 5.8.1. net/bluetooth/hci_event.c has a slab out-of-bounds read in hci_extended_inquiry_result_evt, aka CID-51c19bf3d5cf.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8jj4-2q63-pfr7/GHSA-8jj4-2q63-pfr7.json b/advisories/unreviewed/2022/05/GHSA-8jj4-2q63-pfr7/GHSA-8jj4-2q63-pfr7.json index 6fb158a9aaa..d0df9204641 100644 --- a/advisories/unreviewed/2022/05/GHSA-8jj4-2q63-pfr7/GHSA-8jj4-2q63-pfr7.json +++ b/advisories/unreviewed/2022/05/GHSA-8jj4-2q63-pfr7/GHSA-8jj4-2q63-pfr7.json @@ -7,12 +7,8 @@ "CVE-2021-0094" ], "details": "Improper link resolution before file access in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8jrg-rfj7-vq97/GHSA-8jrg-rfj7-vq97.json b/advisories/unreviewed/2022/05/GHSA-8jrg-rfj7-vq97/GHSA-8jrg-rfj7-vq97.json index c252f44488f..2f848a0453e 100644 --- a/advisories/unreviewed/2022/05/GHSA-8jrg-rfj7-vq97/GHSA-8jrg-rfj7-vq97.json +++ b/advisories/unreviewed/2022/05/GHSA-8jrg-rfj7-vq97/GHSA-8jrg-rfj7-vq97.json @@ -7,12 +7,8 @@ "CVE-2020-11304" ], "details": "Possible out of bound read in DRM due to improper buffer length check. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8p2w-38p2-r2jf/GHSA-8p2w-38p2-r2jf.json b/advisories/unreviewed/2022/05/GHSA-8p2w-38p2-r2jf/GHSA-8p2w-38p2-r2jf.json index 399883f1d7c..59a1f532527 100644 --- a/advisories/unreviewed/2022/05/GHSA-8p2w-38p2-r2jf/GHSA-8p2w-38p2-r2jf.json +++ b/advisories/unreviewed/2022/05/GHSA-8p2w-38p2-r2jf/GHSA-8p2w-38p2-r2jf.json @@ -7,12 +7,8 @@ "CVE-2021-20396" ], "details": "IBM QRadar Analyst Workflow App 1.0 through 1.18.0 for IBM QRadar SIEM allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 196009.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8r98-33h6-f6hq/GHSA-8r98-33h6-f6hq.json b/advisories/unreviewed/2022/05/GHSA-8r98-33h6-f6hq/GHSA-8r98-33h6-f6hq.json index da7e323e1da..c814d676985 100644 --- a/advisories/unreviewed/2022/05/GHSA-8r98-33h6-f6hq/GHSA-8r98-33h6-f6hq.json +++ b/advisories/unreviewed/2022/05/GHSA-8r98-33h6-f6hq/GHSA-8r98-33h6-f6hq.json @@ -7,12 +7,8 @@ "CVE-2021-31840" ], "details": "A vulnerability in the preloading mechanism of specific dynamic link libraries in McAfee Agent for Windows prior to 5.7.3 could allow an authenticated, local attacker to perform a DLL preloading attack with unsigned DLLs. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. This would result in the user gaining elevated permissions and being able to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8rrr-mx3h-pww8/GHSA-8rrr-mx3h-pww8.json b/advisories/unreviewed/2022/05/GHSA-8rrr-mx3h-pww8/GHSA-8rrr-mx3h-pww8.json index 51e0370aa5c..3354871586b 100644 --- a/advisories/unreviewed/2022/05/GHSA-8rrr-mx3h-pww8/GHSA-8rrr-mx3h-pww8.json +++ b/advisories/unreviewed/2022/05/GHSA-8rrr-mx3h-pww8/GHSA-8rrr-mx3h-pww8.json @@ -7,12 +7,8 @@ "CVE-2021-25398" ], "details": "Intent redirection vulnerability in Bixby Voice prior to version 3.1.12 allows attacker to access contacts.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8v4m-q3m2-gfw3/GHSA-8v4m-q3m2-gfw3.json b/advisories/unreviewed/2022/05/GHSA-8v4m-q3m2-gfw3/GHSA-8v4m-q3m2-gfw3.json index a10b9a6980e..5892f130991 100644 --- a/advisories/unreviewed/2022/05/GHSA-8v4m-q3m2-gfw3/GHSA-8v4m-q3m2-gfw3.json +++ b/advisories/unreviewed/2022/05/GHSA-8v4m-q3m2-gfw3/GHSA-8v4m-q3m2-gfw3.json @@ -7,12 +7,8 @@ "CVE-2021-0474" ], "details": "In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-177611958", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8wpf-h467-qvv5/GHSA-8wpf-h467-qvv5.json b/advisories/unreviewed/2022/05/GHSA-8wpf-h467-qvv5/GHSA-8wpf-h467-qvv5.json index a3ee20c24f6..ceb29555f82 100644 --- a/advisories/unreviewed/2022/05/GHSA-8wpf-h467-qvv5/GHSA-8wpf-h467-qvv5.json +++ b/advisories/unreviewed/2022/05/GHSA-8wpf-h467-qvv5/GHSA-8wpf-h467-qvv5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8wqc-vgv5-hpgj/GHSA-8wqc-vgv5-hpgj.json b/advisories/unreviewed/2022/05/GHSA-8wqc-vgv5-hpgj/GHSA-8wqc-vgv5-hpgj.json index 2b1a35052b0..d52b87a63d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-8wqc-vgv5-hpgj/GHSA-8wqc-vgv5-hpgj.json +++ b/advisories/unreviewed/2022/05/GHSA-8wqc-vgv5-hpgj/GHSA-8wqc-vgv5-hpgj.json @@ -7,12 +7,8 @@ "CVE-2005-0039" ], "details": "Certain configurations of IPsec, when using Encapsulating Security Payload (ESP) in tunnel mode, integrity protection at a higher layer, or Authentication Header (AH), allow remote attackers to decrypt IPSec communications by modifying the outer packet in ways that cause plaintext data from the inner packet to be returned in ICMP messages, as demonstrated using bit-flipping attacks and (1) Destination Address Rewriting, (2) a modified header length that causes portions of the packet to be interpreted as IP Options, or (3) a modified protocol field and source address.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-8x5p-wwwg-6587/GHSA-8x5p-wwwg-6587.json b/advisories/unreviewed/2022/05/GHSA-8x5p-wwwg-6587/GHSA-8x5p-wwwg-6587.json index 4b1a2cf48b2..610ccb8a695 100644 --- a/advisories/unreviewed/2022/05/GHSA-8x5p-wwwg-6587/GHSA-8x5p-wwwg-6587.json +++ b/advisories/unreviewed/2022/05/GHSA-8x5p-wwwg-6587/GHSA-8x5p-wwwg-6587.json @@ -7,12 +7,8 @@ "CVE-2021-23022" ], "details": "On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, the BIG-IP Edge Client Windows Installer Service's temporary folder has weak file and folder permissions. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-8x7w-j66g-cfqw/GHSA-8x7w-j66g-cfqw.json b/advisories/unreviewed/2022/05/GHSA-8x7w-j66g-cfqw/GHSA-8x7w-j66g-cfqw.json index ff352a47140..f3a31e1c89e 100644 --- a/advisories/unreviewed/2022/05/GHSA-8x7w-j66g-cfqw/GHSA-8x7w-j66g-cfqw.json +++ b/advisories/unreviewed/2022/05/GHSA-8x7w-j66g-cfqw/GHSA-8x7w-j66g-cfqw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-93vf-q5pw-fx2x/GHSA-93vf-q5pw-fx2x.json b/advisories/unreviewed/2022/05/GHSA-93vf-q5pw-fx2x/GHSA-93vf-q5pw-fx2x.json index 074cdb69e69..d44dc823999 100644 --- a/advisories/unreviewed/2022/05/GHSA-93vf-q5pw-fx2x/GHSA-93vf-q5pw-fx2x.json +++ b/advisories/unreviewed/2022/05/GHSA-93vf-q5pw-fx2x/GHSA-93vf-q5pw-fx2x.json @@ -7,12 +7,8 @@ "CVE-2021-26198" ], "details": "An issue was discovered in JerryScript 2.4.0. There is a SEVG in ecma_deref_bigint in ecma-helpers.c file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-93wm-fh6p-4cpf/GHSA-93wm-fh6p-4cpf.json b/advisories/unreviewed/2022/05/GHSA-93wm-fh6p-4cpf/GHSA-93wm-fh6p-4cpf.json index 22f54487a03..b5f2b68dbba 100644 --- a/advisories/unreviewed/2022/05/GHSA-93wm-fh6p-4cpf/GHSA-93wm-fh6p-4cpf.json +++ b/advisories/unreviewed/2022/05/GHSA-93wm-fh6p-4cpf/GHSA-93wm-fh6p-4cpf.json @@ -7,12 +7,8 @@ "CVE-2021-31250" ], "details": "Multiple storage XSS vulnerabilities were discovered on BF-430, BF-431 and BF-450M TCP/IP Converter devices from CHIYU Technology Inc due to a lack of sanitization of the input on the components man.cgi, if.cgi, dhcpc.cgi, ppp.cgi.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-949w-8pph-6gmh/GHSA-949w-8pph-6gmh.json b/advisories/unreviewed/2022/05/GHSA-949w-8pph-6gmh/GHSA-949w-8pph-6gmh.json index fe3d5f3859d..d0aabb6bcdf 100644 --- a/advisories/unreviewed/2022/05/GHSA-949w-8pph-6gmh/GHSA-949w-8pph-6gmh.json +++ b/advisories/unreviewed/2022/05/GHSA-949w-8pph-6gmh/GHSA-949w-8pph-6gmh.json @@ -7,12 +7,8 @@ "CVE-2021-25388" ], "details": "Improper caller check vulnerability in Knox Core prior to SMR MAY-2021 Release 1 allows attackers to install arbitrary app.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-94vj-9xx8-7g9f/GHSA-94vj-9xx8-7g9f.json b/advisories/unreviewed/2022/05/GHSA-94vj-9xx8-7g9f/GHSA-94vj-9xx8-7g9f.json index e22207e4632..5cf5fc7cf2a 100644 --- a/advisories/unreviewed/2022/05/GHSA-94vj-9xx8-7g9f/GHSA-94vj-9xx8-7g9f.json +++ b/advisories/unreviewed/2022/05/GHSA-94vj-9xx8-7g9f/GHSA-94vj-9xx8-7g9f.json @@ -7,12 +7,8 @@ "CVE-2021-23854" ], "details": "An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. This issue only affects versions 7.7x and 7.6x. All other versions are not affected.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-96v3-r8hc-334h/GHSA-96v3-r8hc-334h.json b/advisories/unreviewed/2022/05/GHSA-96v3-r8hc-334h/GHSA-96v3-r8hc-334h.json index d995ab524d8..3ff85a11aa4 100644 --- a/advisories/unreviewed/2022/05/GHSA-96v3-r8hc-334h/GHSA-96v3-r8hc-334h.json +++ b/advisories/unreviewed/2022/05/GHSA-96v3-r8hc-334h/GHSA-96v3-r8hc-334h.json @@ -7,12 +7,8 @@ "CVE-2020-12295" ], "details": "Improper input validation in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9774-4j5q-whvj/GHSA-9774-4j5q-whvj.json b/advisories/unreviewed/2022/05/GHSA-9774-4j5q-whvj/GHSA-9774-4j5q-whvj.json index 0b20d596520..2a5b2e1b27e 100644 --- a/advisories/unreviewed/2022/05/GHSA-9774-4j5q-whvj/GHSA-9774-4j5q-whvj.json +++ b/advisories/unreviewed/2022/05/GHSA-9774-4j5q-whvj/GHSA-9774-4j5q-whvj.json @@ -7,12 +7,8 @@ "CVE-2021-34555" ], "details": "OpenDMARC 1.4.1 and 1.4.1.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a multi-value From header field.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-98c2-3mpw-gw7c/GHSA-98c2-3mpw-gw7c.json b/advisories/unreviewed/2022/05/GHSA-98c2-3mpw-gw7c/GHSA-98c2-3mpw-gw7c.json index 77e0993a7b0..7445ca91a7c 100644 --- a/advisories/unreviewed/2022/05/GHSA-98c2-3mpw-gw7c/GHSA-98c2-3mpw-gw7c.json +++ b/advisories/unreviewed/2022/05/GHSA-98c2-3mpw-gw7c/GHSA-98c2-3mpw-gw7c.json @@ -7,12 +7,8 @@ "CVE-2021-24350" ], "details": "The Visitors WordPress plugin through 0.3 is affected by an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. The plugin would display the user's user agent string without validation or encoding within the WordPress admin panel.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-98rw-2pmp-f995/GHSA-98rw-2pmp-f995.json b/advisories/unreviewed/2022/05/GHSA-98rw-2pmp-f995/GHSA-98rw-2pmp-f995.json index e59e2f6819a..e7040e5677d 100644 --- a/advisories/unreviewed/2022/05/GHSA-98rw-2pmp-f995/GHSA-98rw-2pmp-f995.json +++ b/advisories/unreviewed/2022/05/GHSA-98rw-2pmp-f995/GHSA-98rw-2pmp-f995.json @@ -7,12 +7,8 @@ "CVE-2020-24514" ], "details": "Improper authentication in some Intel(R) RealSense(TM) IDs may allow an unauthenticated user to potentially enable escalation of privilege via physical access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9947-x7wp-628p/GHSA-9947-x7wp-628p.json b/advisories/unreviewed/2022/05/GHSA-9947-x7wp-628p/GHSA-9947-x7wp-628p.json index 72be38a3284..7f65e0680a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-9947-x7wp-628p/GHSA-9947-x7wp-628p.json +++ b/advisories/unreviewed/2022/05/GHSA-9947-x7wp-628p/GHSA-9947-x7wp-628p.json @@ -7,12 +7,8 @@ "CVE-2021-30524" ], "details": "Use after free in TabStrip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-99cp-gp26-qmx7/GHSA-99cp-gp26-qmx7.json b/advisories/unreviewed/2022/05/GHSA-99cp-gp26-qmx7/GHSA-99cp-gp26-qmx7.json index 4d5ed61215f..71372e0a7a3 100644 --- a/advisories/unreviewed/2022/05/GHSA-99cp-gp26-qmx7/GHSA-99cp-gp26-qmx7.json +++ b/advisories/unreviewed/2022/05/GHSA-99cp-gp26-qmx7/GHSA-99cp-gp26-qmx7.json @@ -7,12 +7,8 @@ "CVE-2021-22750" ], "details": "A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21041 and prior that could result in loss of data or remote code execution due to missing length checks, when a malicious CGF file is imported to IGSS Definition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9cph-jfv5-gqcp/GHSA-9cph-jfv5-gqcp.json b/advisories/unreviewed/2022/05/GHSA-9cph-jfv5-gqcp/GHSA-9cph-jfv5-gqcp.json index dbf83f94add..fb2abd32cb9 100644 --- a/advisories/unreviewed/2022/05/GHSA-9cph-jfv5-gqcp/GHSA-9cph-jfv5-gqcp.json +++ b/advisories/unreviewed/2022/05/GHSA-9cph-jfv5-gqcp/GHSA-9cph-jfv5-gqcp.json @@ -7,12 +7,8 @@ "CVE-2021-34170" ], "details": "Bandai Namco FromSoftware Dark Souls III allows remote attackers to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9f38-8856-g696/GHSA-9f38-8856-g696.json b/advisories/unreviewed/2022/05/GHSA-9f38-8856-g696/GHSA-9f38-8856-g696.json index bb296ba3e01..c1e8cf21cc0 100644 --- a/advisories/unreviewed/2022/05/GHSA-9f38-8856-g696/GHSA-9f38-8856-g696.json +++ b/advisories/unreviewed/2022/05/GHSA-9f38-8856-g696/GHSA-9f38-8856-g696.json @@ -7,12 +7,8 @@ "CVE-2021-23853" ], "details": "In Bosch IP cameras, improper validation of the HTTP header allows an attacker to inject arbitrary HTTP headers through crafted URLs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9f4w-c8mj-53r3/GHSA-9f4w-c8mj-53r3.json b/advisories/unreviewed/2022/05/GHSA-9f4w-c8mj-53r3/GHSA-9f4w-c8mj-53r3.json index ab81199288f..f9c2a3ed01a 100644 --- a/advisories/unreviewed/2022/05/GHSA-9f4w-c8mj-53r3/GHSA-9f4w-c8mj-53r3.json +++ b/advisories/unreviewed/2022/05/GHSA-9f4w-c8mj-53r3/GHSA-9f4w-c8mj-53r3.json @@ -7,12 +7,8 @@ "CVE-2021-28810" ], "details": "If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without proper authentication. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9f7r-6p3j-j5wj/GHSA-9f7r-6p3j-j5wj.json b/advisories/unreviewed/2022/05/GHSA-9f7r-6p3j-j5wj/GHSA-9f7r-6p3j-j5wj.json index 7a3bb336b93..03b5d3c99ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-9f7r-6p3j-j5wj/GHSA-9f7r-6p3j-j5wj.json +++ b/advisories/unreviewed/2022/05/GHSA-9f7r-6p3j-j5wj/GHSA-9f7r-6p3j-j5wj.json @@ -7,12 +7,8 @@ "CVE-2021-28211" ], "details": "A heap overflow in LzmaUefiDecompressGetInfo function in EDK II.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9fc4-hxq5-hwj6/GHSA-9fc4-hxq5-hwj6.json b/advisories/unreviewed/2022/05/GHSA-9fc4-hxq5-hwj6/GHSA-9fc4-hxq5-hwj6.json index c115bf2199e..116131f25c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-9fc4-hxq5-hwj6/GHSA-9fc4-hxq5-hwj6.json +++ b/advisories/unreviewed/2022/05/GHSA-9fc4-hxq5-hwj6/GHSA-9fc4-hxq5-hwj6.json @@ -7,12 +7,8 @@ "CVE-2021-21556" ], "details": "Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a stack-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9fq9-6j74-rp43/GHSA-9fq9-6j74-rp43.json b/advisories/unreviewed/2022/05/GHSA-9fq9-6j74-rp43/GHSA-9fq9-6j74-rp43.json index d5d9c03c75f..49c51213e83 100644 --- a/advisories/unreviewed/2022/05/GHSA-9fq9-6j74-rp43/GHSA-9fq9-6j74-rp43.json +++ b/advisories/unreviewed/2022/05/GHSA-9fq9-6j74-rp43/GHSA-9fq9-6j74-rp43.json @@ -7,12 +7,8 @@ "CVE-2021-33661" ], "details": "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9g58-r8r8-66hp/GHSA-9g58-r8r8-66hp.json b/advisories/unreviewed/2022/05/GHSA-9g58-r8r8-66hp/GHSA-9g58-r8r8-66hp.json index d74f1a0695e..711a2c40ad6 100644 --- a/advisories/unreviewed/2022/05/GHSA-9g58-r8r8-66hp/GHSA-9g58-r8r8-66hp.json +++ b/advisories/unreviewed/2022/05/GHSA-9g58-r8r8-66hp/GHSA-9g58-r8r8-66hp.json @@ -7,12 +7,8 @@ "CVE-2021-1544" ], "details": "A vulnerability in logging mechanisms of Cisco Webex Meetings client software could allow an authenticated, local attacker to gain access to sensitive information. This vulnerability is due to unsafe logging of application actions. An attacker could exploit this vulnerability by logging onto the local system and accessing files containing the logged details. A successful exploit could allow the attacker to gain access to sensitive information, including meeting data and recorded meeting transcriptions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9h8m-8m65-p47h/GHSA-9h8m-8m65-p47h.json b/advisories/unreviewed/2022/05/GHSA-9h8m-8m65-p47h/GHSA-9h8m-8m65-p47h.json index d6376838652..d3f3ecb6451 100644 --- a/advisories/unreviewed/2022/05/GHSA-9h8m-8m65-p47h/GHSA-9h8m-8m65-p47h.json +++ b/advisories/unreviewed/2022/05/GHSA-9h8m-8m65-p47h/GHSA-9h8m-8m65-p47h.json @@ -7,12 +7,8 @@ "CVE-2021-33887" ], "details": "Insufficient verification of data authenticity in Peloton TTR01 up to and including PTV55G allows an attacker with physical access to boot into a modified kernel/ramdisk without unlocking the bootloader.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9h9p-7pmj-4jfg/GHSA-9h9p-7pmj-4jfg.json b/advisories/unreviewed/2022/05/GHSA-9h9p-7pmj-4jfg/GHSA-9h9p-7pmj-4jfg.json index 60c347d81b2..cab9c9eacef 100644 --- a/advisories/unreviewed/2022/05/GHSA-9h9p-7pmj-4jfg/GHSA-9h9p-7pmj-4jfg.json +++ b/advisories/unreviewed/2022/05/GHSA-9h9p-7pmj-4jfg/GHSA-9h9p-7pmj-4jfg.json @@ -7,12 +7,8 @@ "CVE-2021-0052" ], "details": "Incorrect default privileges in the Intel(R) Computing Improvement Program before version 2.4.6522 may allow an authenticated user to potentially enable an escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9j75-pp4f-64p7/GHSA-9j75-pp4f-64p7.json b/advisories/unreviewed/2022/05/GHSA-9j75-pp4f-64p7/GHSA-9j75-pp4f-64p7.json index ff99d0d76f2..03d2d2cf8a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-9j75-pp4f-64p7/GHSA-9j75-pp4f-64p7.json +++ b/advisories/unreviewed/2022/05/GHSA-9j75-pp4f-64p7/GHSA-9j75-pp4f-64p7.json @@ -7,12 +7,8 @@ "CVE-2021-27481" ], "details": "ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded. This could allow an attacker to gain access to sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9j8p-g942-2m9h/GHSA-9j8p-g942-2m9h.json b/advisories/unreviewed/2022/05/GHSA-9j8p-g942-2m9h/GHSA-9j8p-g942-2m9h.json index c14e54aa916..566778b3336 100644 --- a/advisories/unreviewed/2022/05/GHSA-9j8p-g942-2m9h/GHSA-9j8p-g942-2m9h.json +++ b/advisories/unreviewed/2022/05/GHSA-9j8p-g942-2m9h/GHSA-9j8p-g942-2m9h.json @@ -7,12 +7,8 @@ "CVE-2021-0086" ], "details": "Improper permissions in the installer for the Intel(R) Brand Verification Tool before version 11.0.0.1225 may allow an authenticated user to potentially enable escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9jc3-jwwp-h9mw/GHSA-9jc3-jwwp-h9mw.json b/advisories/unreviewed/2022/05/GHSA-9jc3-jwwp-h9mw/GHSA-9jc3-jwwp-h9mw.json index 8a72210a79a..32c3bd1a48b 100644 --- a/advisories/unreviewed/2022/05/GHSA-9jc3-jwwp-h9mw/GHSA-9jc3-jwwp-h9mw.json +++ b/advisories/unreviewed/2022/05/GHSA-9jc3-jwwp-h9mw/GHSA-9jc3-jwwp-h9mw.json @@ -7,12 +7,8 @@ "CVE-2021-20732" ], "details": "The ATOM (ATOM - Smart life App for Android versions prior to 1.8.1 and ATOM - Smart life App for iOS versions prior to 1.8.2) does not verify server certificate properly, which allows man-in-the-middle attackers to eavesdrop on encrypted communication via a crafted certificate.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9mcv-r5rj-7f62/GHSA-9mcv-r5rj-7f62.json b/advisories/unreviewed/2022/05/GHSA-9mcv-r5rj-7f62/GHSA-9mcv-r5rj-7f62.json index bcc9f66d60a..c63a551a8da 100644 --- a/advisories/unreviewed/2022/05/GHSA-9mcv-r5rj-7f62/GHSA-9mcv-r5rj-7f62.json +++ b/advisories/unreviewed/2022/05/GHSA-9mcv-r5rj-7f62/GHSA-9mcv-r5rj-7f62.json @@ -7,12 +7,8 @@ "CVE-2021-3196" ], "details": "An issue was discovered in Hitachi ID Bravura Security Fabric 11.0.0 through 11.1.3, 12.0.0 through 12.0.2, and 12.1.0. When using federated identity management (authenticating via SAML through a third-party identity provider), an attacker can inject additional data into a signed SAML response being transmitted to the service provider (ID Bravura Security Fabric). The application successfully validates the signed values but uses the unsigned malicious values. An attacker with lower-privilege access to the application can inject the username of a high-privilege user to impersonate that user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9mj4-xv45-qwq2/GHSA-9mj4-xv45-qwq2.json b/advisories/unreviewed/2022/05/GHSA-9mj4-xv45-qwq2/GHSA-9mj4-xv45-qwq2.json index fd71efa2009..5600d0567e1 100644 --- a/advisories/unreviewed/2022/05/GHSA-9mj4-xv45-qwq2/GHSA-9mj4-xv45-qwq2.json +++ b/advisories/unreviewed/2022/05/GHSA-9mj4-xv45-qwq2/GHSA-9mj4-xv45-qwq2.json @@ -7,12 +7,8 @@ "CVE-2021-24340" ], "details": "The WP Statistics WordPress plugin before 13.0.8 relied on using the WordPress esc_sql() function on a field not delimited by quotes and did not first prepare the query. Additionally, the page, which should have been accessible to administrator only, was also available to any visitor, including unauthenticated ones.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9mrf-w63c-fxfh/GHSA-9mrf-w63c-fxfh.json b/advisories/unreviewed/2022/05/GHSA-9mrf-w63c-fxfh/GHSA-9mrf-w63c-fxfh.json index 662964393a1..63a01a70119 100644 --- a/advisories/unreviewed/2022/05/GHSA-9mrf-w63c-fxfh/GHSA-9mrf-w63c-fxfh.json +++ b/advisories/unreviewed/2022/05/GHSA-9mrf-w63c-fxfh/GHSA-9mrf-w63c-fxfh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9pg8-7479-p4jw/GHSA-9pg8-7479-p4jw.json b/advisories/unreviewed/2022/05/GHSA-9pg8-7479-p4jw/GHSA-9pg8-7479-p4jw.json index 7823c57dd22..a9e362f4085 100644 --- a/advisories/unreviewed/2022/05/GHSA-9pg8-7479-p4jw/GHSA-9pg8-7479-p4jw.json +++ b/advisories/unreviewed/2022/05/GHSA-9pg8-7479-p4jw/GHSA-9pg8-7479-p4jw.json @@ -7,12 +7,8 @@ "CVE-2021-1566" ], "details": "A vulnerability in the Cisco Advanced Malware Protection (AMP) for Endpoints integration of Cisco AsyncOS for Cisco Email Security Appliance (ESA) and Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to intercept traffic between an affected device and the AMP servers. This vulnerability is due to improper certificate validation when an affected device establishes TLS connections. A man-in-the-middle attacker could exploit this vulnerability by sending a crafted TLS packet to an affected device. A successful exploit could allow the attacker to spoof a trusted host and then extract sensitive information or alter certain API requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9q27-4g2j-x3q6/GHSA-9q27-4g2j-x3q6.json b/advisories/unreviewed/2022/05/GHSA-9q27-4g2j-x3q6/GHSA-9q27-4g2j-x3q6.json index c8556dd27e4..6951ea7a7b1 100644 --- a/advisories/unreviewed/2022/05/GHSA-9q27-4g2j-x3q6/GHSA-9q27-4g2j-x3q6.json +++ b/advisories/unreviewed/2022/05/GHSA-9q27-4g2j-x3q6/GHSA-9q27-4g2j-x3q6.json @@ -7,12 +7,8 @@ "CVE-2021-30508" ], "details": "Heap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to enable certain features in Chrome to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9q8f-8ccc-g96c/GHSA-9q8f-8ccc-g96c.json b/advisories/unreviewed/2022/05/GHSA-9q8f-8ccc-g96c/GHSA-9q8f-8ccc-g96c.json index cda2c1cb47d..849971af604 100644 --- a/advisories/unreviewed/2022/05/GHSA-9q8f-8ccc-g96c/GHSA-9q8f-8ccc-g96c.json +++ b/advisories/unreviewed/2022/05/GHSA-9q8f-8ccc-g96c/GHSA-9q8f-8ccc-g96c.json @@ -7,12 +7,8 @@ "CVE-2021-30536" ], "details": "Out of bounds read in V8 in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9qv7-83w4-8jmw/GHSA-9qv7-83w4-8jmw.json b/advisories/unreviewed/2022/05/GHSA-9qv7-83w4-8jmw/GHSA-9qv7-83w4-8jmw.json index 3c4642f301e..50ae00fb8c6 100644 --- a/advisories/unreviewed/2022/05/GHSA-9qv7-83w4-8jmw/GHSA-9qv7-83w4-8jmw.json +++ b/advisories/unreviewed/2022/05/GHSA-9qv7-83w4-8jmw/GHSA-9qv7-83w4-8jmw.json @@ -7,12 +7,8 @@ "CVE-2020-23314" ], "details": "There is an Assertion 'block_found' failed at js-parser-statm.c:2003 parser_parse_try_statement_end in JerryScript 2.2.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9r6g-wcvh-p5j6/GHSA-9r6g-wcvh-p5j6.json b/advisories/unreviewed/2022/05/GHSA-9r6g-wcvh-p5j6/GHSA-9r6g-wcvh-p5j6.json index a40a77c0786..5b4cdb7de63 100644 --- a/advisories/unreviewed/2022/05/GHSA-9r6g-wcvh-p5j6/GHSA-9r6g-wcvh-p5j6.json +++ b/advisories/unreviewed/2022/05/GHSA-9r6g-wcvh-p5j6/GHSA-9r6g-wcvh-p5j6.json @@ -7,12 +7,8 @@ "CVE-2021-24337" ], "details": "The id GET parameter of one of the Video Embed WordPress plugin through 1.0's page (available via forced browsing) is not sanitised, validated or escaped before being used in a SQL statement, allowing low privilege users, such as subscribers, to perform SQL injection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9vrp-vjf9-xh3r/GHSA-9vrp-vjf9-xh3r.json b/advisories/unreviewed/2022/05/GHSA-9vrp-vjf9-xh3r/GHSA-9vrp-vjf9-xh3r.json index f8f110f8102..8541cd6d5a0 100644 --- a/advisories/unreviewed/2022/05/GHSA-9vrp-vjf9-xh3r/GHSA-9vrp-vjf9-xh3r.json +++ b/advisories/unreviewed/2022/05/GHSA-9vrp-vjf9-xh3r/GHSA-9vrp-vjf9-xh3r.json @@ -7,12 +7,8 @@ "CVE-2020-23310" ], "details": "There is an Assertion 'context_p->next_scanner_info_p->type == SCANNER_TYPE_FUNCTION' failed at js-parser-statm.c:733 in parser_parse_function_statement in JerryScript 2.2.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9w67-r7qm-ccv3/GHSA-9w67-r7qm-ccv3.json b/advisories/unreviewed/2022/05/GHSA-9w67-r7qm-ccv3/GHSA-9w67-r7qm-ccv3.json index f8ed038b39e..3d9c8764afc 100644 --- a/advisories/unreviewed/2022/05/GHSA-9w67-r7qm-ccv3/GHSA-9w67-r7qm-ccv3.json +++ b/advisories/unreviewed/2022/05/GHSA-9w67-r7qm-ccv3/GHSA-9w67-r7qm-ccv3.json @@ -7,12 +7,8 @@ "CVE-2020-35441" ], "details": "FDCMS (aka Fangfa Content Management System) 4.0 contains a front-end SQL injection via Admin/Lib/Action/FloginAction.class.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9wfm-q59x-qc3x/GHSA-9wfm-q59x-qc3x.json b/advisories/unreviewed/2022/05/GHSA-9wfm-q59x-qc3x/GHSA-9wfm-q59x-qc3x.json index 41caf4a8b44..bb3abebaa34 100644 --- a/advisories/unreviewed/2022/05/GHSA-9wfm-q59x-qc3x/GHSA-9wfm-q59x-qc3x.json +++ b/advisories/unreviewed/2022/05/GHSA-9wfm-q59x-qc3x/GHSA-9wfm-q59x-qc3x.json @@ -7,12 +7,8 @@ "CVE-2021-3490" ], "details": "The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue was fixed via commit 049c4e13714e (\"bpf: Fix alu32 const subreg bound tracking on bitwise operations\") (v5.13-rc4) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. The AND/OR issues were introduced by commit 3f50f132d840 (\"bpf: Verifier, do explicit ALU32 bounds tracking\") (5.7-rc1) and the XOR variant was introduced by 2921c90d4718 (\"bpf:Fix a verifier failure with xor\") ( 5.10-rc1).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-9wjx-vxh5-8xrx/GHSA-9wjx-vxh5-8xrx.json b/advisories/unreviewed/2022/05/GHSA-9wjx-vxh5-8xrx/GHSA-9wjx-vxh5-8xrx.json index e9b3aed6d9c..537d859cf6b 100644 --- a/advisories/unreviewed/2022/05/GHSA-9wjx-vxh5-8xrx/GHSA-9wjx-vxh5-8xrx.json +++ b/advisories/unreviewed/2022/05/GHSA-9wjx-vxh5-8xrx/GHSA-9wjx-vxh5-8xrx.json @@ -7,12 +7,8 @@ "CVE-2005-0020" ], "details": "Buffer overflow in playmidi before 2.4 allows local users to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-9x92-m3f9-q66r/GHSA-9x92-m3f9-q66r.json b/advisories/unreviewed/2022/05/GHSA-9x92-m3f9-q66r/GHSA-9x92-m3f9-q66r.json index 06d82d41222..14b7c5c92c6 100644 --- a/advisories/unreviewed/2022/05/GHSA-9x92-m3f9-q66r/GHSA-9x92-m3f9-q66r.json +++ b/advisories/unreviewed/2022/05/GHSA-9x92-m3f9-q66r/GHSA-9x92-m3f9-q66r.json @@ -7,12 +7,8 @@ "CVE-2020-22205" ], "details": "SQL Injection in ECShop 3.0 via the id parameter to admin/shophelp.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c28q-7hxm-794g/GHSA-c28q-7hxm-794g.json b/advisories/unreviewed/2022/05/GHSA-c28q-7hxm-794g/GHSA-c28q-7hxm-794g.json index f33591ec80c..55ddce72fdc 100644 --- a/advisories/unreviewed/2022/05/GHSA-c28q-7hxm-794g/GHSA-c28q-7hxm-794g.json +++ b/advisories/unreviewed/2022/05/GHSA-c28q-7hxm-794g/GHSA-c28q-7hxm-794g.json @@ -7,12 +7,8 @@ "CVE-2021-3535" ], "details": "Rapid7 Nexpose is vulnerable to a non-persistent cross-site scripting vulnerability affecting the Security Console's Filtered Asset Search feature. A specific search criterion and operator combination in Filtered Asset Search could have allowed a user to pass code through the provided search field. This issue affects version 6.6.80 and prior, and is fixed in 6.6.81. If your Security Console currently falls on or within this affected version range, ensure that you update your Security Console to the latest version.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c2m2-5c82-2prj/GHSA-c2m2-5c82-2prj.json b/advisories/unreviewed/2022/05/GHSA-c2m2-5c82-2prj/GHSA-c2m2-5c82-2prj.json index 638069149ea..529bc21c836 100644 --- a/advisories/unreviewed/2022/05/GHSA-c2m2-5c82-2prj/GHSA-c2m2-5c82-2prj.json +++ b/advisories/unreviewed/2022/05/GHSA-c2m2-5c82-2prj/GHSA-c2m2-5c82-2prj.json @@ -7,12 +7,8 @@ "CVE-2020-12288" ], "details": "Protection mechanism failure in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c328-xf5g-2939/GHSA-c328-xf5g-2939.json b/advisories/unreviewed/2022/05/GHSA-c328-xf5g-2939/GHSA-c328-xf5g-2939.json index 543a3ef5edc..6093e50607f 100644 --- a/advisories/unreviewed/2022/05/GHSA-c328-xf5g-2939/GHSA-c328-xf5g-2939.json +++ b/advisories/unreviewed/2022/05/GHSA-c328-xf5g-2939/GHSA-c328-xf5g-2939.json @@ -7,12 +7,8 @@ "CVE-2021-34280" ], "details": "Polaris Office v9.103.83.44230 is affected by a Uninitialized Pointer Vulnerability in PolarisOffice.exe and EngineDLL.dll that may cause a Remote Code Execution. To exploit the vulnerability, someone must open a crafted PDF file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c3m9-37ff-ff9r/GHSA-c3m9-37ff-ff9r.json b/advisories/unreviewed/2022/05/GHSA-c3m9-37ff-ff9r/GHSA-c3m9-37ff-ff9r.json index e6610224b55..412b23c041e 100644 --- a/advisories/unreviewed/2022/05/GHSA-c3m9-37ff-ff9r/GHSA-c3m9-37ff-ff9r.json +++ b/advisories/unreviewed/2022/05/GHSA-c3m9-37ff-ff9r/GHSA-c3m9-37ff-ff9r.json @@ -7,12 +7,8 @@ "CVE-2020-23312" ], "details": "There is an Assertion 'context.status_flags & PARSER_SCANNING_SUCCESSFUL' failed at js-parser.c:2185 in parser_parse_source in JerryScript 2.2.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c4jf-j43f-g3ff/GHSA-c4jf-j43f-g3ff.json b/advisories/unreviewed/2022/05/GHSA-c4jf-j43f-g3ff/GHSA-c4jf-j43f-g3ff.json index 1097063f935..8dfa9cace23 100644 --- a/advisories/unreviewed/2022/05/GHSA-c4jf-j43f-g3ff/GHSA-c4jf-j43f-g3ff.json +++ b/advisories/unreviewed/2022/05/GHSA-c4jf-j43f-g3ff/GHSA-c4jf-j43f-g3ff.json @@ -7,12 +7,8 @@ "CVE-2020-15378" ], "details": "The OVA version of Brocade SANnav before version 2.1.1 installation with IPv6 networking exposes the docker container ports to the network, increasing the potential attack surface.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-c7hv-342m-6j93/GHSA-c7hv-342m-6j93.json b/advisories/unreviewed/2022/05/GHSA-c7hv-342m-6j93/GHSA-c7hv-342m-6j93.json index f22e330cf5e..d5f2d20ae2b 100644 --- a/advisories/unreviewed/2022/05/GHSA-c7hv-342m-6j93/GHSA-c7hv-342m-6j93.json +++ b/advisories/unreviewed/2022/05/GHSA-c7hv-342m-6j93/GHSA-c7hv-342m-6j93.json @@ -7,12 +7,8 @@ "CVE-2020-11239" ], "details": "Use after free issue when importing a DMA buffer by using the CPU address of the buffer due to attachment is not cleaned up properly in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c8v2-crvq-95rh/GHSA-c8v2-crvq-95rh.json b/advisories/unreviewed/2022/05/GHSA-c8v2-crvq-95rh/GHSA-c8v2-crvq-95rh.json index f0d30269e02..584821557a1 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8v2-crvq-95rh/GHSA-c8v2-crvq-95rh.json +++ b/advisories/unreviewed/2022/05/GHSA-c8v2-crvq-95rh/GHSA-c8v2-crvq-95rh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-c8xh-56x7-jw67/GHSA-c8xh-56x7-jw67.json b/advisories/unreviewed/2022/05/GHSA-c8xh-56x7-jw67/GHSA-c8xh-56x7-jw67.json index e7d9c711945..45a77a9dfc3 100644 --- a/advisories/unreviewed/2022/05/GHSA-c8xh-56x7-jw67/GHSA-c8xh-56x7-jw67.json +++ b/advisories/unreviewed/2022/05/GHSA-c8xh-56x7-jw67/GHSA-c8xh-56x7-jw67.json @@ -7,12 +7,8 @@ "CVE-2021-27390" ], "details": "A vulnerability has been identified in JT2Go (All versions < V13.1.0.3), Teamcenter Visualization (All versions < V13.1.0.3). The TIFF_loader.dll library in affected applications lacks proper validation of user-supplied data when parsing TIFF files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13131)", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cf3f-rp6x-2rc7/GHSA-cf3f-rp6x-2rc7.json b/advisories/unreviewed/2022/05/GHSA-cf3f-rp6x-2rc7/GHSA-cf3f-rp6x-2rc7.json index f560bdd5f67..b71da8f7688 100644 --- a/advisories/unreviewed/2022/05/GHSA-cf3f-rp6x-2rc7/GHSA-cf3f-rp6x-2rc7.json +++ b/advisories/unreviewed/2022/05/GHSA-cf3f-rp6x-2rc7/GHSA-cf3f-rp6x-2rc7.json @@ -7,12 +7,8 @@ "CVE-2021-27641" ], "details": "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cg4x-3743-j4cc/GHSA-cg4x-3743-j4cc.json b/advisories/unreviewed/2022/05/GHSA-cg4x-3743-j4cc/GHSA-cg4x-3743-j4cc.json index a46356e2704..3d143914034 100644 --- a/advisories/unreviewed/2022/05/GHSA-cg4x-3743-j4cc/GHSA-cg4x-3743-j4cc.json +++ b/advisories/unreviewed/2022/05/GHSA-cg4x-3743-j4cc/GHSA-cg4x-3743-j4cc.json @@ -7,12 +7,8 @@ "CVE-2005-0058" ], "details": "Buffer overflow in the Telephony Application Programming Interface (TAPI) for Microsoft Windows 98, Windows 98 SE, Windows ME, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to elevate privileges or execute arbitrary code via a crafted message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cgmc-8g68-rvhg/GHSA-cgmc-8g68-rvhg.json b/advisories/unreviewed/2022/05/GHSA-cgmc-8g68-rvhg/GHSA-cgmc-8g68-rvhg.json index ef61f834981..45548eae4f6 100644 --- a/advisories/unreviewed/2022/05/GHSA-cgmc-8g68-rvhg/GHSA-cgmc-8g68-rvhg.json +++ b/advisories/unreviewed/2022/05/GHSA-cgmc-8g68-rvhg/GHSA-cgmc-8g68-rvhg.json @@ -7,12 +7,8 @@ "CVE-2021-0493" ], "details": "In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-183461317", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-chrg-5pr2-gqgj/GHSA-chrg-5pr2-gqgj.json b/advisories/unreviewed/2022/05/GHSA-chrg-5pr2-gqgj/GHSA-chrg-5pr2-gqgj.json index 6f36f528dd5..ed0c914cc4b 100644 --- a/advisories/unreviewed/2022/05/GHSA-chrg-5pr2-gqgj/GHSA-chrg-5pr2-gqgj.json +++ b/advisories/unreviewed/2022/05/GHSA-chrg-5pr2-gqgj/GHSA-chrg-5pr2-gqgj.json @@ -7,12 +7,8 @@ "CVE-2021-33805" ], "details": "In the reference implementation of FUSE before 2.9.8 and 3.x before 3.2.5, local attackers were able to specify the allow_other option even if forbidden in /etc/fuse.conf, leading to exposure of FUSE filesystems to other users. This issue only affects systems with SELinux active.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cjpg-cxh5-9f23/GHSA-cjpg-cxh5-9f23.json b/advisories/unreviewed/2022/05/GHSA-cjpg-cxh5-9f23/GHSA-cjpg-cxh5-9f23.json index c882f29c8f1..a57eeb80a27 100644 --- a/advisories/unreviewed/2022/05/GHSA-cjpg-cxh5-9f23/GHSA-cjpg-cxh5-9f23.json +++ b/advisories/unreviewed/2022/05/GHSA-cjpg-cxh5-9f23/GHSA-cjpg-cxh5-9f23.json @@ -7,12 +7,8 @@ "CVE-2005-0016" ], "details": "Buffer overflow in the exported_display function in xatitv in gatos before 0.0.5 allows local users to execute arbitrary code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-cpcp-xp6m-fv6g/GHSA-cpcp-xp6m-fv6g.json b/advisories/unreviewed/2022/05/GHSA-cpcp-xp6m-fv6g/GHSA-cpcp-xp6m-fv6g.json index b4bec2a1ab5..9c3e5b1ff6a 100644 --- a/advisories/unreviewed/2022/05/GHSA-cpcp-xp6m-fv6g/GHSA-cpcp-xp6m-fv6g.json +++ b/advisories/unreviewed/2022/05/GHSA-cpcp-xp6m-fv6g/GHSA-cpcp-xp6m-fv6g.json @@ -7,12 +7,8 @@ "CVE-2021-24341" ], "details": "When deleting a date in the Xllentech English Islamic Calendar WordPress plugin before 2.6.8, the year_number and month_number POST parameters are not sanitised, escaped or validated before being used in a SQL statement, leading to SQL injection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cq4j-2685-h9rw/GHSA-cq4j-2685-h9rw.json b/advisories/unreviewed/2022/05/GHSA-cq4j-2685-h9rw/GHSA-cq4j-2685-h9rw.json index 0fe25c2d1c4..431bee39310 100644 --- a/advisories/unreviewed/2022/05/GHSA-cq4j-2685-h9rw/GHSA-cq4j-2685-h9rw.json +++ b/advisories/unreviewed/2022/05/GHSA-cq4j-2685-h9rw/GHSA-cq4j-2685-h9rw.json @@ -7,12 +7,8 @@ "CVE-2020-25754" ], "details": "An issue was discovered on Enphase Envoy R3.x and D4.x devices. There is a custom PAM module for user authentication that circumvents traditional user authentication. This module uses a password derived from the MD5 hash of the username and serial number. The serial number can be retrieved by an unauthenticated user at /info.xml. Attempts to change the user password via passwd or other tools have no effect.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cqqf-7hc8-ww46/GHSA-cqqf-7hc8-ww46.json b/advisories/unreviewed/2022/05/GHSA-cqqf-7hc8-ww46/GHSA-cqqf-7hc8-ww46.json index 847b6fdd345..62dc8defcce 100644 --- a/advisories/unreviewed/2022/05/GHSA-cqqf-7hc8-ww46/GHSA-cqqf-7hc8-ww46.json +++ b/advisories/unreviewed/2022/05/GHSA-cqqf-7hc8-ww46/GHSA-cqqf-7hc8-ww46.json @@ -7,12 +7,8 @@ "CVE-2021-1524" ], "details": "A vulnerability in the API of Cisco Meeting Server could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because requests that are sent to the API are not properly validated. An attacker could exploit this vulnerability by sending a malicious request to the API. A successful exploit could allow the attacker to cause all participants on a call to be disconnected, resulting in a DoS condition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cr6c-2fj6-gjp2/GHSA-cr6c-2fj6-gjp2.json b/advisories/unreviewed/2022/05/GHSA-cr6c-2fj6-gjp2/GHSA-cr6c-2fj6-gjp2.json index 40fdbb86a20..67539cb3d8e 100644 --- a/advisories/unreviewed/2022/05/GHSA-cr6c-2fj6-gjp2/GHSA-cr6c-2fj6-gjp2.json +++ b/advisories/unreviewed/2022/05/GHSA-cr6c-2fj6-gjp2/GHSA-cr6c-2fj6-gjp2.json @@ -7,12 +7,8 @@ "CVE-2020-11161" ], "details": "Out-of-bounds memory access can occur while calculating alignment requirements for a negative width from external components in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cv5v-qfpj-5pm3/GHSA-cv5v-qfpj-5pm3.json b/advisories/unreviewed/2022/05/GHSA-cv5v-qfpj-5pm3/GHSA-cv5v-qfpj-5pm3.json index 51e444c5994..c0510ecdfa5 100644 --- a/advisories/unreviewed/2022/05/GHSA-cv5v-qfpj-5pm3/GHSA-cv5v-qfpj-5pm3.json +++ b/advisories/unreviewed/2022/05/GHSA-cv5v-qfpj-5pm3/GHSA-cv5v-qfpj-5pm3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cvv8-c328-24g2/GHSA-cvv8-c328-24g2.json b/advisories/unreviewed/2022/05/GHSA-cvv8-c328-24g2/GHSA-cvv8-c328-24g2.json index 24f185ce818..cf2cd49b7bf 100644 --- a/advisories/unreviewed/2022/05/GHSA-cvv8-c328-24g2/GHSA-cvv8-c328-24g2.json +++ b/advisories/unreviewed/2022/05/GHSA-cvv8-c328-24g2/GHSA-cvv8-c328-24g2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cwvq-w8fq-x88c/GHSA-cwvq-w8fq-x88c.json b/advisories/unreviewed/2022/05/GHSA-cwvq-w8fq-x88c/GHSA-cwvq-w8fq-x88c.json index 6c7209133a2..0fbed98110f 100644 --- a/advisories/unreviewed/2022/05/GHSA-cwvq-w8fq-x88c/GHSA-cwvq-w8fq-x88c.json +++ b/advisories/unreviewed/2022/05/GHSA-cwvq-w8fq-x88c/GHSA-cwvq-w8fq-x88c.json @@ -7,12 +7,8 @@ "CVE-2021-26195" ], "details": "An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexer_parse_number in js-lexer.c file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-cxxf-mg7m-vpfq/GHSA-cxxf-mg7m-vpfq.json b/advisories/unreviewed/2022/05/GHSA-cxxf-mg7m-vpfq/GHSA-cxxf-mg7m-vpfq.json index 33cb42ae579..5d152a729c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-cxxf-mg7m-vpfq/GHSA-cxxf-mg7m-vpfq.json +++ b/advisories/unreviewed/2022/05/GHSA-cxxf-mg7m-vpfq/GHSA-cxxf-mg7m-vpfq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f3pg-chcp-5ff8/GHSA-f3pg-chcp-5ff8.json b/advisories/unreviewed/2022/05/GHSA-f3pg-chcp-5ff8/GHSA-f3pg-chcp-5ff8.json index d00f7943bd5..8a79d9d2c9f 100644 --- a/advisories/unreviewed/2022/05/GHSA-f3pg-chcp-5ff8/GHSA-f3pg-chcp-5ff8.json +++ b/advisories/unreviewed/2022/05/GHSA-f3pg-chcp-5ff8/GHSA-f3pg-chcp-5ff8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f3wg-x6pw-j7fx/GHSA-f3wg-x6pw-j7fx.json b/advisories/unreviewed/2022/05/GHSA-f3wg-x6pw-j7fx/GHSA-f3wg-x6pw-j7fx.json index f1b8a6efb8b..3184520c390 100644 --- a/advisories/unreviewed/2022/05/GHSA-f3wg-x6pw-j7fx/GHSA-f3wg-x6pw-j7fx.json +++ b/advisories/unreviewed/2022/05/GHSA-f3wg-x6pw-j7fx/GHSA-f3wg-x6pw-j7fx.json @@ -7,12 +7,8 @@ "CVE-2021-25402" ], "details": "Information Exposure vulnerability in Samsung Notes prior to version 4.2.04.27 allows attacker to access s pen latency information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f4ff-8cq5-xhf7/GHSA-f4ff-8cq5-xhf7.json b/advisories/unreviewed/2022/05/GHSA-f4ff-8cq5-xhf7/GHSA-f4ff-8cq5-xhf7.json index 9c71d91fa92..b1cd5248f3b 100644 --- a/advisories/unreviewed/2022/05/GHSA-f4ff-8cq5-xhf7/GHSA-f4ff-8cq5-xhf7.json +++ b/advisories/unreviewed/2022/05/GHSA-f4ff-8cq5-xhf7/GHSA-f4ff-8cq5-xhf7.json @@ -7,12 +7,8 @@ "CVE-2021-0104" ], "details": "Uncontrolled search path element in the installer for the Intel(R) Rapid Storage Technology software, before versions 17.9.0.34, 18.0.0.640 and 18.1.0.24, may allow an authenticated user to potentially enable escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f5pc-m8jm-j5w6/GHSA-f5pc-m8jm-j5w6.json b/advisories/unreviewed/2022/05/GHSA-f5pc-m8jm-j5w6/GHSA-f5pc-m8jm-j5w6.json index e32db473d67..20c24fe69c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-f5pc-m8jm-j5w6/GHSA-f5pc-m8jm-j5w6.json +++ b/advisories/unreviewed/2022/05/GHSA-f5pc-m8jm-j5w6/GHSA-f5pc-m8jm-j5w6.json @@ -7,12 +7,8 @@ "CVE-2021-32555" ], "details": "It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg-hwe-18.04 package apport hooks, it could expose private data to other local users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f65j-5m47-6qgq/GHSA-f65j-5m47-6qgq.json b/advisories/unreviewed/2022/05/GHSA-f65j-5m47-6qgq/GHSA-f65j-5m47-6qgq.json index 08e819eb4a2..c585fc6a9c2 100644 --- a/advisories/unreviewed/2022/05/GHSA-f65j-5m47-6qgq/GHSA-f65j-5m47-6qgq.json +++ b/advisories/unreviewed/2022/05/GHSA-f65j-5m47-6qgq/GHSA-f65j-5m47-6qgq.json @@ -7,12 +7,8 @@ "CVE-2021-28801" ], "details": "An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read sensitive information on the system. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.2 build 20210122 on QSW-M2108-2C; versions prior to 1.0.2 build 20210122 on QSW-M2108-2S; versions prior to 1.0.2 build 20210122 on QSW-M2108R-2C.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f669-j28w-pjvg/GHSA-f669-j28w-pjvg.json b/advisories/unreviewed/2022/05/GHSA-f669-j28w-pjvg/GHSA-f669-j28w-pjvg.json index 0a58b25148a..c2ce37bb700 100644 --- a/advisories/unreviewed/2022/05/GHSA-f669-j28w-pjvg/GHSA-f669-j28w-pjvg.json +++ b/advisories/unreviewed/2022/05/GHSA-f669-j28w-pjvg/GHSA-f669-j28w-pjvg.json @@ -7,12 +7,8 @@ "CVE-2021-26690" ], "details": "Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f6gp-7xm9-vqm8/GHSA-f6gp-7xm9-vqm8.json b/advisories/unreviewed/2022/05/GHSA-f6gp-7xm9-vqm8/GHSA-f6gp-7xm9-vqm8.json index aa53a2f601f..e8aa5e0da27 100644 --- a/advisories/unreviewed/2022/05/GHSA-f6gp-7xm9-vqm8/GHSA-f6gp-7xm9-vqm8.json +++ b/advisories/unreviewed/2022/05/GHSA-f6gp-7xm9-vqm8/GHSA-f6gp-7xm9-vqm8.json @@ -7,12 +7,8 @@ "CVE-2021-24358" ], "details": "The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.10 did not validate a redirect parameter on a specifically crafted URL before redirecting the user to it, leading to an Open Redirect issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f7r6-p65c-88rw/GHSA-f7r6-p65c-88rw.json b/advisories/unreviewed/2022/05/GHSA-f7r6-p65c-88rw/GHSA-f7r6-p65c-88rw.json index 92483720554..bbc3d6f0c0e 100644 --- a/advisories/unreviewed/2022/05/GHSA-f7r6-p65c-88rw/GHSA-f7r6-p65c-88rw.json +++ b/advisories/unreviewed/2022/05/GHSA-f7r6-p65c-88rw/GHSA-f7r6-p65c-88rw.json @@ -7,12 +7,8 @@ "CVE-2021-22758" ], "details": "A CWE-824: Access of uninitialized pointer vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to lack validation of user-supplied input data, when a malicious CGF file is imported to IGSS Definition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f834-hxf4-wmxm/GHSA-f834-hxf4-wmxm.json b/advisories/unreviewed/2022/05/GHSA-f834-hxf4-wmxm/GHSA-f834-hxf4-wmxm.json index 0cd29d4926e..58560bc6bf0 100644 --- a/advisories/unreviewed/2022/05/GHSA-f834-hxf4-wmxm/GHSA-f834-hxf4-wmxm.json +++ b/advisories/unreviewed/2022/05/GHSA-f834-hxf4-wmxm/GHSA-f834-hxf4-wmxm.json @@ -7,12 +7,8 @@ "CVE-2021-1540" ], "details": "Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f83q-56p3-cg37/GHSA-f83q-56p3-cg37.json b/advisories/unreviewed/2022/05/GHSA-f83q-56p3-cg37/GHSA-f83q-56p3-cg37.json index 316d4927d6a..d7c86a83cea 100644 --- a/advisories/unreviewed/2022/05/GHSA-f83q-56p3-cg37/GHSA-f83q-56p3-cg37.json +++ b/advisories/unreviewed/2022/05/GHSA-f83q-56p3-cg37/GHSA-f83q-56p3-cg37.json @@ -7,12 +7,8 @@ "CVE-2021-25413" ], "details": "Improper sanitization of incoming intent in Samsung Contacts prior to SMR JUN-2021 Release 1 allows local attackers to get permissions to access arbitrary data with Samsung Contacts privilege.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-f8g3-gxq4-xqv7/GHSA-f8g3-gxq4-xqv7.json b/advisories/unreviewed/2022/05/GHSA-f8g3-gxq4-xqv7/GHSA-f8g3-gxq4-xqv7.json index 3f7dcd5c1a2..403770cfaf8 100644 --- a/advisories/unreviewed/2022/05/GHSA-f8g3-gxq4-xqv7/GHSA-f8g3-gxq4-xqv7.json +++ b/advisories/unreviewed/2022/05/GHSA-f8g3-gxq4-xqv7/GHSA-f8g3-gxq4-xqv7.json @@ -7,12 +7,8 @@ "CVE-2021-28687" ], "details": "HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of them. When the \"soft reset\" feature was implemented, the libxl__domain_suspend_state structure didn't require any initialization or disposal. At some point later, an initialization function was introduced for the structure; but the \"soft reset\" path wasn't refactored to call the initialization function. When a guest nwo initiates a \"soft reboot\", uninitialized data structure leads to an assert() when later code finds the structure in an unexpected state. The effect of this is to crash the process monitoring the guest. How this affects the system depends on the structure of the toolstack. For xl, this will have no security-relevant effect: every VM has its own independent monitoring process, which contains no state. The domain in question will hang in a crashed state, but can be destroyed by `xl destroy` just like any other non-cooperating domain. For daemon-based toolstacks linked against libxl, such as libvirt, this will crash the toolstack, losing the state of any in-progress operations (localized DoS), and preventing further administrator operations unless the daemon is configured to restart automatically (system-wide DoS). If crashes \"leak\" resources, then repeated crashes could use up resources, also causing a system-wide DoS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f9vw-cmmw-4r6w/GHSA-f9vw-cmmw-4r6w.json b/advisories/unreviewed/2022/05/GHSA-f9vw-cmmw-4r6w/GHSA-f9vw-cmmw-4r6w.json index cc0e6ce626e..876b232861d 100644 --- a/advisories/unreviewed/2022/05/GHSA-f9vw-cmmw-4r6w/GHSA-f9vw-cmmw-4r6w.json +++ b/advisories/unreviewed/2022/05/GHSA-f9vw-cmmw-4r6w/GHSA-f9vw-cmmw-4r6w.json @@ -7,12 +7,8 @@ "CVE-2021-30515" ], "details": "Use after free in File API in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-f9wq-7pg8-8r2r/GHSA-f9wq-7pg8-8r2r.json b/advisories/unreviewed/2022/05/GHSA-f9wq-7pg8-8r2r/GHSA-f9wq-7pg8-8r2r.json index ea49fdb338d..fac08157ab5 100644 --- a/advisories/unreviewed/2022/05/GHSA-f9wq-7pg8-8r2r/GHSA-f9wq-7pg8-8r2r.json +++ b/advisories/unreviewed/2022/05/GHSA-f9wq-7pg8-8r2r/GHSA-f9wq-7pg8-8r2r.json @@ -7,12 +7,8 @@ "CVE-2021-25424" ], "details": "Improper authentication vulnerability in Tizen bluetooth-frwk prior to Firmware update JUN-2021 Release allows bluetooth attacker to take over the user's bluetooth device without user awareness.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fc8w-ppfg-5247/GHSA-fc8w-ppfg-5247.json b/advisories/unreviewed/2022/05/GHSA-fc8w-ppfg-5247/GHSA-fc8w-ppfg-5247.json index f67f1dc5b11..2fe017c6f22 100644 --- a/advisories/unreviewed/2022/05/GHSA-fc8w-ppfg-5247/GHSA-fc8w-ppfg-5247.json +++ b/advisories/unreviewed/2022/05/GHSA-fc8w-ppfg-5247/GHSA-fc8w-ppfg-5247.json @@ -7,12 +7,8 @@ "CVE-2021-32547" ], "details": "It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-lts package apport hooks, it could expose private data to other local users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fcgj-qg8m-28wx/GHSA-fcgj-qg8m-28wx.json b/advisories/unreviewed/2022/05/GHSA-fcgj-qg8m-28wx/GHSA-fcgj-qg8m-28wx.json index 3ee206a0466..609cfef27fb 100644 --- a/advisories/unreviewed/2022/05/GHSA-fcgj-qg8m-28wx/GHSA-fcgj-qg8m-28wx.json +++ b/advisories/unreviewed/2022/05/GHSA-fcgj-qg8m-28wx/GHSA-fcgj-qg8m-28wx.json @@ -7,12 +7,8 @@ "CVE-2021-30543" ], "details": "Use after free in Tab Strip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fcqq-4m6p-m4jx/GHSA-fcqq-4m6p-m4jx.json b/advisories/unreviewed/2022/05/GHSA-fcqq-4m6p-m4jx/GHSA-fcqq-4m6p-m4jx.json index 850c589f07e..325255c45b7 100644 --- a/advisories/unreviewed/2022/05/GHSA-fcqq-4m6p-m4jx/GHSA-fcqq-4m6p-m4jx.json +++ b/advisories/unreviewed/2022/05/GHSA-fcqq-4m6p-m4jx/GHSA-fcqq-4m6p-m4jx.json @@ -7,12 +7,8 @@ "CVE-2021-24336" ], "details": "The FlightLog WordPress plugin through 3.0.2 does not sanitise, validate or escape various POST parameters before using them a SQL statement, leading to SQL injections exploitable by editor and administrator users", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ff6q-8852-cwpp/GHSA-ff6q-8852-cwpp.json b/advisories/unreviewed/2022/05/GHSA-ff6q-8852-cwpp/GHSA-ff6q-8852-cwpp.json index a558b4103d9..36ba297e2c1 100644 --- a/advisories/unreviewed/2022/05/GHSA-ff6q-8852-cwpp/GHSA-ff6q-8852-cwpp.json +++ b/advisories/unreviewed/2022/05/GHSA-ff6q-8852-cwpp/GHSA-ff6q-8852-cwpp.json @@ -7,12 +7,8 @@ "CVE-2021-1541" ], "details": "Multiple vulnerabilities in the web-based management interface of Cisco Small Business 220 Series Smart Switches could allow an attacker to do the following: Hijack a user session Execute arbitrary commands as a root user on the underlying operating system Conduct a cross-site scripting (XSS) attack Conduct an HTML injection attack For more information about these vulnerabilities, see the Details section of this advisory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fg9g-84vm-38p5/GHSA-fg9g-84vm-38p5.json b/advisories/unreviewed/2022/05/GHSA-fg9g-84vm-38p5/GHSA-fg9g-84vm-38p5.json index 1d90f250ae2..0701e0a9898 100644 --- a/advisories/unreviewed/2022/05/GHSA-fg9g-84vm-38p5/GHSA-fg9g-84vm-38p5.json +++ b/advisories/unreviewed/2022/05/GHSA-fg9g-84vm-38p5/GHSA-fg9g-84vm-38p5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fgfw-fhxh-8r43/GHSA-fgfw-fhxh-8r43.json b/advisories/unreviewed/2022/05/GHSA-fgfw-fhxh-8r43/GHSA-fgfw-fhxh-8r43.json index b12c7e35fcf..0823229098b 100644 --- a/advisories/unreviewed/2022/05/GHSA-fgfw-fhxh-8r43/GHSA-fgfw-fhxh-8r43.json +++ b/advisories/unreviewed/2022/05/GHSA-fgfw-fhxh-8r43/GHSA-fgfw-fhxh-8r43.json @@ -7,12 +7,8 @@ "CVE-2021-34129" ], "details": "LaikeTui 3.5.0 allows remote authenticated users to delete arbitrary files, as demonstrated by deleting install.lock in order to reinstall the product in an attacker-controlled manner. This deletion is possible via directory traversal in the uploadImg, oldpic, or imgurl parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fgqv-m3rf-r6h9/GHSA-fgqv-m3rf-r6h9.json b/advisories/unreviewed/2022/05/GHSA-fgqv-m3rf-r6h9/GHSA-fgqv-m3rf-r6h9.json index 5eae59b68a2..7bb6fc062bf 100644 --- a/advisories/unreviewed/2022/05/GHSA-fgqv-m3rf-r6h9/GHSA-fgqv-m3rf-r6h9.json +++ b/advisories/unreviewed/2022/05/GHSA-fgqv-m3rf-r6h9/GHSA-fgqv-m3rf-r6h9.json @@ -7,12 +7,8 @@ "CVE-2020-35761" ], "details": "bloofoxCMS 0.5.2.1 is infected with XSS that allows remote attackers to execute arbitrary JS/HTML Code.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fhqp-v95c-jh5f/GHSA-fhqp-v95c-jh5f.json b/advisories/unreviewed/2022/05/GHSA-fhqp-v95c-jh5f/GHSA-fhqp-v95c-jh5f.json index 25c1ff48617..700432d30d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-fhqp-v95c-jh5f/GHSA-fhqp-v95c-jh5f.json +++ b/advisories/unreviewed/2022/05/GHSA-fhqp-v95c-jh5f/GHSA-fhqp-v95c-jh5f.json @@ -7,12 +7,8 @@ "CVE-2020-11241" ], "details": "Out of bound read will happen if EAPOL Key length is less than expected while processing NAN shared key descriptor attribute in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fj4w-55pf-m8j9/GHSA-fj4w-55pf-m8j9.json b/advisories/unreviewed/2022/05/GHSA-fj4w-55pf-m8j9/GHSA-fj4w-55pf-m8j9.json index ec07a19677f..c0824201ccf 100644 --- a/advisories/unreviewed/2022/05/GHSA-fj4w-55pf-m8j9/GHSA-fj4w-55pf-m8j9.json +++ b/advisories/unreviewed/2022/05/GHSA-fj4w-55pf-m8j9/GHSA-fj4w-55pf-m8j9.json @@ -7,12 +7,8 @@ "CVE-2021-25395" ], "details": "A race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows local attackers to bypass signature check given a radio privilege is compromised.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fm8v-xp26-8h3q/GHSA-fm8v-xp26-8h3q.json b/advisories/unreviewed/2022/05/GHSA-fm8v-xp26-8h3q/GHSA-fm8v-xp26-8h3q.json index b76b2c963ad..d81d282a8d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-fm8v-xp26-8h3q/GHSA-fm8v-xp26-8h3q.json +++ b/advisories/unreviewed/2022/05/GHSA-fm8v-xp26-8h3q/GHSA-fm8v-xp26-8h3q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fmxr-r9xc-q869/GHSA-fmxr-r9xc-q869.json b/advisories/unreviewed/2022/05/GHSA-fmxr-r9xc-q869/GHSA-fmxr-r9xc-q869.json index 1b72d47a199..05f4815da08 100644 --- a/advisories/unreviewed/2022/05/GHSA-fmxr-r9xc-q869/GHSA-fmxr-r9xc-q869.json +++ b/advisories/unreviewed/2022/05/GHSA-fmxr-r9xc-q869/GHSA-fmxr-r9xc-q869.json @@ -7,12 +7,8 @@ "CVE-2020-24663" ], "details": "Trace Financial CRESTBridge <6.3.0.02 contains a stored XSS vulnerability, which was fixed in 6.3.0.03.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fp44-79vr-grcq/GHSA-fp44-79vr-grcq.json b/advisories/unreviewed/2022/05/GHSA-fp44-79vr-grcq/GHSA-fp44-79vr-grcq.json index acbb492c114..222856b4992 100644 --- a/advisories/unreviewed/2022/05/GHSA-fp44-79vr-grcq/GHSA-fp44-79vr-grcq.json +++ b/advisories/unreviewed/2022/05/GHSA-fp44-79vr-grcq/GHSA-fp44-79vr-grcq.json @@ -7,12 +7,8 @@ "CVE-2005-0015" ], "details": "diatheke.pl in Sword 1.5.7a allows remote attackers to execute arbitrary commands via shell metacharacters in a URL.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fp7c-mmff-jw5x/GHSA-fp7c-mmff-jw5x.json b/advisories/unreviewed/2022/05/GHSA-fp7c-mmff-jw5x/GHSA-fp7c-mmff-jw5x.json index 66b64c3540e..da1a070e3a1 100644 --- a/advisories/unreviewed/2022/05/GHSA-fp7c-mmff-jw5x/GHSA-fp7c-mmff-jw5x.json +++ b/advisories/unreviewed/2022/05/GHSA-fp7c-mmff-jw5x/GHSA-fp7c-mmff-jw5x.json @@ -7,12 +7,8 @@ "CVE-2021-0106" ], "details": "Incorrect default permissions in the Intel(R) Optane(TM) DC Persistent Memory for Windows software versions before 2.00.00.3842 or 1.00.00.3515 may allow an authenticated user to potentially enable escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fppj-frvc-63q2/GHSA-fppj-frvc-63q2.json b/advisories/unreviewed/2022/05/GHSA-fppj-frvc-63q2/GHSA-fppj-frvc-63q2.json index fbcab6afefa..37acc27ae79 100644 --- a/advisories/unreviewed/2022/05/GHSA-fppj-frvc-63q2/GHSA-fppj-frvc-63q2.json +++ b/advisories/unreviewed/2022/05/GHSA-fppj-frvc-63q2/GHSA-fppj-frvc-63q2.json @@ -7,12 +7,8 @@ "CVE-2021-20517" ], "details": "IBM WebSphere Application Server Network Deployment 8.5 and 9.0 could allow a remote authenticated attacker to traverse directories. An attacker could send a specially-crafted URL request containing \"dot dot\" sequences (/../) to read and delete arbitrary files on the system. IBM X-Force ID: 198435.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fq2w-xw9r-7fh3/GHSA-fq2w-xw9r-7fh3.json b/advisories/unreviewed/2022/05/GHSA-fq2w-xw9r-7fh3/GHSA-fq2w-xw9r-7fh3.json index 1c48c46db65..b720c6f8152 100644 --- a/advisories/unreviewed/2022/05/GHSA-fq2w-xw9r-7fh3/GHSA-fq2w-xw9r-7fh3.json +++ b/advisories/unreviewed/2022/05/GHSA-fq2w-xw9r-7fh3/GHSA-fq2w-xw9r-7fh3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fq4g-mg2m-p666/GHSA-fq4g-mg2m-p666.json b/advisories/unreviewed/2022/05/GHSA-fq4g-mg2m-p666/GHSA-fq4g-mg2m-p666.json index b96e964ea36..72ae4a23025 100644 --- a/advisories/unreviewed/2022/05/GHSA-fq4g-mg2m-p666/GHSA-fq4g-mg2m-p666.json +++ b/advisories/unreviewed/2022/05/GHSA-fq4g-mg2m-p666/GHSA-fq4g-mg2m-p666.json @@ -7,12 +7,8 @@ "CVE-2021-0132" ], "details": "Missing release of resource after effective lifetime in an API for the Intel(R) Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fq53-qq54-mggp/GHSA-fq53-qq54-mggp.json b/advisories/unreviewed/2022/05/GHSA-fq53-qq54-mggp/GHSA-fq53-qq54-mggp.json index 586a66fe597..eb80160143e 100644 --- a/advisories/unreviewed/2022/05/GHSA-fq53-qq54-mggp/GHSA-fq53-qq54-mggp.json +++ b/advisories/unreviewed/2022/05/GHSA-fq53-qq54-mggp/GHSA-fq53-qq54-mggp.json @@ -7,12 +7,8 @@ "CVE-2021-0484" ], "details": "In readVector of IMediaPlayer.cpp, there is a possible read of uninitialized heap data due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-173720767", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-frfx-jmh3-hg3q/GHSA-frfx-jmh3-hg3q.json b/advisories/unreviewed/2022/05/GHSA-frfx-jmh3-hg3q/GHSA-frfx-jmh3-hg3q.json index 011224dc2cf..ce698d78f9e 100644 --- a/advisories/unreviewed/2022/05/GHSA-frfx-jmh3-hg3q/GHSA-frfx-jmh3-hg3q.json +++ b/advisories/unreviewed/2022/05/GHSA-frfx-jmh3-hg3q/GHSA-frfx-jmh3-hg3q.json @@ -7,12 +7,8 @@ "CVE-2005-0008" ], "details": "Unknown vulnerability in the DNP dissector in Ethereal 0.10.5 through 0.10.8 allows remote attackers to cause \"memory corruption.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-fv97-w6hf-pqjv/GHSA-fv97-w6hf-pqjv.json b/advisories/unreviewed/2022/05/GHSA-fv97-w6hf-pqjv/GHSA-fv97-w6hf-pqjv.json index 19fe93c9ec4..1e9a546f5ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-fv97-w6hf-pqjv/GHSA-fv97-w6hf-pqjv.json +++ b/advisories/unreviewed/2022/05/GHSA-fv97-w6hf-pqjv/GHSA-fv97-w6hf-pqjv.json @@ -7,12 +7,8 @@ "CVE-2021-25410" ], "details": "Improper access control of a component in CallBGProvider prior to SMR JUN-2021 Release 1 allows local attackers to access arbitrary files with an escalated privilege.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fvfg-j5pp-h8xx/GHSA-fvfg-j5pp-h8xx.json b/advisories/unreviewed/2022/05/GHSA-fvfg-j5pp-h8xx/GHSA-fvfg-j5pp-h8xx.json index 6aed0bc6ac4..4ce0a069d9d 100644 --- a/advisories/unreviewed/2022/05/GHSA-fvfg-j5pp-h8xx/GHSA-fvfg-j5pp-h8xx.json +++ b/advisories/unreviewed/2022/05/GHSA-fvfg-j5pp-h8xx/GHSA-fvfg-j5pp-h8xx.json @@ -7,12 +7,8 @@ "CVE-2020-24671" ], "details": "Trace Financial CRESTBridge <6.3.0.02 contains an authenticated SQL injection vulnerability, which was fixed in 6.3.0.03.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-fw8f-w2g8-q74w/GHSA-fw8f-w2g8-q74w.json b/advisories/unreviewed/2022/05/GHSA-fw8f-w2g8-q74w/GHSA-fw8f-w2g8-q74w.json index 5d5d5bcfe03..77d2514e9c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-fw8f-w2g8-q74w/GHSA-fw8f-w2g8-q74w.json +++ b/advisories/unreviewed/2022/05/GHSA-fw8f-w2g8-q74w/GHSA-fw8f-w2g8-q74w.json @@ -7,12 +7,8 @@ "CVE-2021-0494" ], "details": "In memory management driver, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-183461318", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g2w2-2g9v-p7fp/GHSA-g2w2-2g9v-p7fp.json b/advisories/unreviewed/2022/05/GHSA-g2w2-2g9v-p7fp/GHSA-g2w2-2g9v-p7fp.json index eab7927d23c..738baa7e20e 100644 --- a/advisories/unreviewed/2022/05/GHSA-g2w2-2g9v-p7fp/GHSA-g2w2-2g9v-p7fp.json +++ b/advisories/unreviewed/2022/05/GHSA-g2w2-2g9v-p7fp/GHSA-g2w2-2g9v-p7fp.json @@ -7,12 +7,8 @@ "CVE-2020-18442" ], "details": "Infinite Loop in zziplib v0.13.69 allows remote attackers to cause a denial of service via the return value \"zzip_file_read\" in the function \"unzzip_cat_file\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g3gv-gq3r-m3m6/GHSA-g3gv-gq3r-m3m6.json b/advisories/unreviewed/2022/05/GHSA-g3gv-gq3r-m3m6/GHSA-g3gv-gq3r-m3m6.json index 3accafb177e..5de50fa0780 100644 --- a/advisories/unreviewed/2022/05/GHSA-g3gv-gq3r-m3m6/GHSA-g3gv-gq3r-m3m6.json +++ b/advisories/unreviewed/2022/05/GHSA-g3gv-gq3r-m3m6/GHSA-g3gv-gq3r-m3m6.json @@ -7,12 +7,8 @@ "CVE-2021-27657" ], "details": "Successful exploitation of this vulnerability could give an authenticated Metasys user an unintended level of access to the server file system, allowing them to access or modify system files by sending specifically crafted web messages to the Metasys system. This issue affects: Johnson Controls Metasys version 11.0 and prior versions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g4rm-cj97-hgg6/GHSA-g4rm-cj97-hgg6.json b/advisories/unreviewed/2022/05/GHSA-g4rm-cj97-hgg6/GHSA-g4rm-cj97-hgg6.json index b6af680cee9..5a22070af1c 100644 --- a/advisories/unreviewed/2022/05/GHSA-g4rm-cj97-hgg6/GHSA-g4rm-cj97-hgg6.json +++ b/advisories/unreviewed/2022/05/GHSA-g4rm-cj97-hgg6/GHSA-g4rm-cj97-hgg6.json @@ -7,12 +7,8 @@ "CVE-2021-33664" ], "details": "SAP NetWeaver Application Server ABAP (Applications based on Web Dynpro ABAP), versions - SAP_UI - 750,752,753,754,755, SAP_BASIS - 702, 731 does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g6hg-4jxh-87cr/GHSA-g6hg-4jxh-87cr.json b/advisories/unreviewed/2022/05/GHSA-g6hg-4jxh-87cr/GHSA-g6hg-4jxh-87cr.json index 31a832c980d..e62ee6e2961 100644 --- a/advisories/unreviewed/2022/05/GHSA-g6hg-4jxh-87cr/GHSA-g6hg-4jxh-87cr.json +++ b/advisories/unreviewed/2022/05/GHSA-g6hg-4jxh-87cr/GHSA-g6hg-4jxh-87cr.json @@ -7,12 +7,8 @@ "CVE-2021-25420" ], "details": "Improper log management vulnerability in Galaxy Watch PlugIn prior to version 2.2.05.21033151 allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone within log.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g748-jrj6-5689/GHSA-g748-jrj6-5689.json b/advisories/unreviewed/2022/05/GHSA-g748-jrj6-5689/GHSA-g748-jrj6-5689.json index 500b3b587ff..f33ac6173b9 100644 --- a/advisories/unreviewed/2022/05/GHSA-g748-jrj6-5689/GHSA-g748-jrj6-5689.json +++ b/advisories/unreviewed/2022/05/GHSA-g748-jrj6-5689/GHSA-g748-jrj6-5689.json @@ -7,12 +7,8 @@ "CVE-2021-0112" ], "details": "Unquoted service path in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g778-f9q3-xr94/GHSA-g778-f9q3-xr94.json b/advisories/unreviewed/2022/05/GHSA-g778-f9q3-xr94/GHSA-g778-f9q3-xr94.json index b37787e10b6..218eacb3c38 100644 --- a/advisories/unreviewed/2022/05/GHSA-g778-f9q3-xr94/GHSA-g778-f9q3-xr94.json +++ b/advisories/unreviewed/2022/05/GHSA-g778-f9q3-xr94/GHSA-g778-f9q3-xr94.json @@ -7,12 +7,8 @@ "CVE-2021-27639" ], "details": "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated JT file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g8cj-67cm-c5wm/GHSA-g8cj-67cm-c5wm.json b/advisories/unreviewed/2022/05/GHSA-g8cj-67cm-c5wm/GHSA-g8cj-67cm-c5wm.json index 9b0ee067e4d..992fb509020 100644 --- a/advisories/unreviewed/2022/05/GHSA-g8cj-67cm-c5wm/GHSA-g8cj-67cm-c5wm.json +++ b/advisories/unreviewed/2022/05/GHSA-g8cj-67cm-c5wm/GHSA-g8cj-67cm-c5wm.json @@ -7,12 +7,8 @@ "CVE-2020-24516" ], "details": "Modification of assumed-immutable data in subsystem in Intel(R) CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32, 15.0.22 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-g8xr-f823-cr6v/GHSA-g8xr-f823-cr6v.json b/advisories/unreviewed/2022/05/GHSA-g8xr-f823-cr6v/GHSA-g8xr-f823-cr6v.json index 0899d192f45..5568299fc0a 100644 --- a/advisories/unreviewed/2022/05/GHSA-g8xr-f823-cr6v/GHSA-g8xr-f823-cr6v.json +++ b/advisories/unreviewed/2022/05/GHSA-g8xr-f823-cr6v/GHSA-g8xr-f823-cr6v.json @@ -7,12 +7,8 @@ "CVE-2020-7864" ], "details": "Parameter manipulation can bypass authentication to cause file upload and execution. This will execute the remote code. This issue affects: Raonwiz DEXT5Editor versions prior to 3.5.1405747.1100.03.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-g9p5-p7h5-p2wg/GHSA-g9p5-p7h5-p2wg.json b/advisories/unreviewed/2022/05/GHSA-g9p5-p7h5-p2wg/GHSA-g9p5-p7h5-p2wg.json index a7342df0b8a..495f1d9fe8d 100644 --- a/advisories/unreviewed/2022/05/GHSA-g9p5-p7h5-p2wg/GHSA-g9p5-p7h5-p2wg.json +++ b/advisories/unreviewed/2022/05/GHSA-g9p5-p7h5-p2wg/GHSA-g9p5-p7h5-p2wg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gc5f-x55x-474w/GHSA-gc5f-x55x-474w.json b/advisories/unreviewed/2022/05/GHSA-gc5f-x55x-474w/GHSA-gc5f-x55x-474w.json index c01bab41853..8fc5e8bbe6a 100644 --- a/advisories/unreviewed/2022/05/GHSA-gc5f-x55x-474w/GHSA-gc5f-x55x-474w.json +++ b/advisories/unreviewed/2022/05/GHSA-gc5f-x55x-474w/GHSA-gc5f-x55x-474w.json @@ -7,12 +7,8 @@ "CVE-2005-0040" ], "details": "Multiple cross-site scripting (XSS) vulnerabilities in DotNetNuke before 3.0.12 allow remote attackers to inject arbitrary web script or HTML via the (1) register a new user page, (2) User-Agent, or (3) Username, which is not properly quoted before sending to the error log.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -44,9 +40,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gfq6-mjrf-7jp5/GHSA-gfq6-mjrf-7jp5.json b/advisories/unreviewed/2022/05/GHSA-gfq6-mjrf-7jp5/GHSA-gfq6-mjrf-7jp5.json index 2c85c0c9735..0b6d7b75a16 100644 --- a/advisories/unreviewed/2022/05/GHSA-gfq6-mjrf-7jp5/GHSA-gfq6-mjrf-7jp5.json +++ b/advisories/unreviewed/2022/05/GHSA-gfq6-mjrf-7jp5/GHSA-gfq6-mjrf-7jp5.json @@ -7,12 +7,8 @@ "CVE-2005-0022" ], "details": "Buffer overflow in the spa_base64_to_bits function in Exim before 4.43, as originally obtained from Samba code, and as called by the auth_spa_client function, may allow attackers to execute arbitrary code during SPA authentication.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gg2x-4f8g-8499/GHSA-gg2x-4f8g-8499.json b/advisories/unreviewed/2022/05/GHSA-gg2x-4f8g-8499/GHSA-gg2x-4f8g-8499.json index 8a3adfc5d56..5af0ac4d7eb 100644 --- a/advisories/unreviewed/2022/05/GHSA-gg2x-4f8g-8499/GHSA-gg2x-4f8g-8499.json +++ b/advisories/unreviewed/2022/05/GHSA-gg2x-4f8g-8499/GHSA-gg2x-4f8g-8499.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gg3f-7vx7-q9qc/GHSA-gg3f-7vx7-q9qc.json b/advisories/unreviewed/2022/05/GHSA-gg3f-7vx7-q9qc/GHSA-gg3f-7vx7-q9qc.json index 2ba8ab3248d..a22f2c3ccd9 100644 --- a/advisories/unreviewed/2022/05/GHSA-gg3f-7vx7-q9qc/GHSA-gg3f-7vx7-q9qc.json +++ b/advisories/unreviewed/2022/05/GHSA-gg3f-7vx7-q9qc/GHSA-gg3f-7vx7-q9qc.json @@ -7,12 +7,8 @@ "CVE-2021-1537" ], "details": "A vulnerability in the installer software of Cisco ThousandEyes Recorder could allow an unauthenticated, local attacker to access sensitive information that is contained in the ThousandEyes Recorder installer software. This vulnerability exists because sensitive information is included in the application installer. An attacker could exploit this vulnerability by downloading the installer and extracting its contents. A successful exploit could allow the attacker to access sensitive information that is included in the application installer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ggh9-6q6m-3fh2/GHSA-ggh9-6q6m-3fh2.json b/advisories/unreviewed/2022/05/GHSA-ggh9-6q6m-3fh2/GHSA-ggh9-6q6m-3fh2.json index 51a18638d5b..d1de8e62e8e 100644 --- a/advisories/unreviewed/2022/05/GHSA-ggh9-6q6m-3fh2/GHSA-ggh9-6q6m-3fh2.json +++ b/advisories/unreviewed/2022/05/GHSA-ggh9-6q6m-3fh2/GHSA-ggh9-6q6m-3fh2.json @@ -7,12 +7,8 @@ "CVE-2021-32557" ], "details": "It was discovered that the process_report() function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gh8f-r8vf-7vqv/GHSA-gh8f-r8vf-7vqv.json b/advisories/unreviewed/2022/05/GHSA-gh8f-r8vf-7vqv/GHSA-gh8f-r8vf-7vqv.json index 9c4ac19ccda..834b2f1898e 100644 --- a/advisories/unreviewed/2022/05/GHSA-gh8f-r8vf-7vqv/GHSA-gh8f-r8vf-7vqv.json +++ b/advisories/unreviewed/2022/05/GHSA-gh8f-r8vf-7vqv/GHSA-gh8f-r8vf-7vqv.json @@ -7,12 +7,8 @@ "CVE-2021-30534" ], "details": "Insufficient policy enforcement in iFrameSandbox in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gj5x-v4qh-3c2g/GHSA-gj5x-v4qh-3c2g.json b/advisories/unreviewed/2022/05/GHSA-gj5x-v4qh-3c2g/GHSA-gj5x-v4qh-3c2g.json index 05dd63ab134..4bde2ca487c 100644 --- a/advisories/unreviewed/2022/05/GHSA-gj5x-v4qh-3c2g/GHSA-gj5x-v4qh-3c2g.json +++ b/advisories/unreviewed/2022/05/GHSA-gj5x-v4qh-3c2g/GHSA-gj5x-v4qh-3c2g.json @@ -7,12 +7,8 @@ "CVE-2021-0057" ], "details": "Uncontrolled search path in the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gjgg-945p-c7vc/GHSA-gjgg-945p-c7vc.json b/advisories/unreviewed/2022/05/GHSA-gjgg-945p-c7vc/GHSA-gjgg-945p-c7vc.json index 0cd961b4f68..317b1a01913 100644 --- a/advisories/unreviewed/2022/05/GHSA-gjgg-945p-c7vc/GHSA-gjgg-945p-c7vc.json +++ b/advisories/unreviewed/2022/05/GHSA-gjgg-945p-c7vc/GHSA-gjgg-945p-c7vc.json @@ -7,12 +7,8 @@ "CVE-2020-11292" ], "details": "Possible buffer overflow in voice service due to lack of input validation of parameters in QMI Voice API in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gm9g-wrw9-grgh/GHSA-gm9g-wrw9-grgh.json b/advisories/unreviewed/2022/05/GHSA-gm9g-wrw9-grgh/GHSA-gm9g-wrw9-grgh.json index fa10979d078..de4ec89443b 100644 --- a/advisories/unreviewed/2022/05/GHSA-gm9g-wrw9-grgh/GHSA-gm9g-wrw9-grgh.json +++ b/advisories/unreviewed/2022/05/GHSA-gm9g-wrw9-grgh/GHSA-gm9g-wrw9-grgh.json @@ -7,12 +7,8 @@ "CVE-2021-30550" ], "details": "Use after free in Accessibility in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gp2g-7h42-c9p9/GHSA-gp2g-7h42-c9p9.json b/advisories/unreviewed/2022/05/GHSA-gp2g-7h42-c9p9/GHSA-gp2g-7h42-c9p9.json index 08f63585e66..0b89d2b0080 100644 --- a/advisories/unreviewed/2022/05/GHSA-gp2g-7h42-c9p9/GHSA-gp2g-7h42-c9p9.json +++ b/advisories/unreviewed/2022/05/GHSA-gp2g-7h42-c9p9/GHSA-gp2g-7h42-c9p9.json @@ -7,12 +7,8 @@ "CVE-2005-0023" ], "details": "gnome-pty-helper in GNOME libzvt2 and libvte4 allows local users to spoof the logon hostname via a modified DISPLAY environment variable. NOTE: the severity of this issue has been disputed.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gppj-jgfq-6wcp/GHSA-gppj-jgfq-6wcp.json b/advisories/unreviewed/2022/05/GHSA-gppj-jgfq-6wcp/GHSA-gppj-jgfq-6wcp.json index a873f049ee5..af874988636 100644 --- a/advisories/unreviewed/2022/05/GHSA-gppj-jgfq-6wcp/GHSA-gppj-jgfq-6wcp.json +++ b/advisories/unreviewed/2022/05/GHSA-gppj-jgfq-6wcp/GHSA-gppj-jgfq-6wcp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gpvw-6hc6-pq63/GHSA-gpvw-6hc6-pq63.json b/advisories/unreviewed/2022/05/GHSA-gpvw-6hc6-pq63/GHSA-gpvw-6hc6-pq63.json index 1cb5333a1a5..4df17c08c82 100644 --- a/advisories/unreviewed/2022/05/GHSA-gpvw-6hc6-pq63/GHSA-gpvw-6hc6-pq63.json +++ b/advisories/unreviewed/2022/05/GHSA-gpvw-6hc6-pq63/GHSA-gpvw-6hc6-pq63.json @@ -7,12 +7,8 @@ "CVE-2021-25391" ], "details": "Intent redirection vulnerability in Secure Folder prior to SMR MAY-2021 Release 1 allows attackers to execute privileged action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-gpxj-hxrf-jj37/GHSA-gpxj-hxrf-jj37.json b/advisories/unreviewed/2022/05/GHSA-gpxj-hxrf-jj37/GHSA-gpxj-hxrf-jj37.json index 3e666bb57d7..49efd207242 100644 --- a/advisories/unreviewed/2022/05/GHSA-gpxj-hxrf-jj37/GHSA-gpxj-hxrf-jj37.json +++ b/advisories/unreviewed/2022/05/GHSA-gpxj-hxrf-jj37/GHSA-gpxj-hxrf-jj37.json @@ -7,12 +7,8 @@ "CVE-2021-30538" ], "details": "Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gq2c-wh9x-4gqh/GHSA-gq2c-wh9x-4gqh.json b/advisories/unreviewed/2022/05/GHSA-gq2c-wh9x-4gqh/GHSA-gq2c-wh9x-4gqh.json index 7a7e8ccf8eb..f82150104da 100644 --- a/advisories/unreviewed/2022/05/GHSA-gq2c-wh9x-4gqh/GHSA-gq2c-wh9x-4gqh.json +++ b/advisories/unreviewed/2022/05/GHSA-gq2c-wh9x-4gqh/GHSA-gq2c-wh9x-4gqh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gq77-wfp4-xgg9/GHSA-gq77-wfp4-xgg9.json b/advisories/unreviewed/2022/05/GHSA-gq77-wfp4-xgg9/GHSA-gq77-wfp4-xgg9.json index f3996b2d0ee..73bb202d5fa 100644 --- a/advisories/unreviewed/2022/05/GHSA-gq77-wfp4-xgg9/GHSA-gq77-wfp4-xgg9.json +++ b/advisories/unreviewed/2022/05/GHSA-gq77-wfp4-xgg9/GHSA-gq77-wfp4-xgg9.json @@ -7,12 +7,8 @@ "CVE-2005-0056" ], "details": "Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote attackers to obtain sensitive information or execute arbitrary code, aka the \"Channel Definition Format (CDF) Cross Domain Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-grfp-8c8p-564v/GHSA-grfp-8c8p-564v.json b/advisories/unreviewed/2022/05/GHSA-grfp-8c8p-564v/GHSA-grfp-8c8p-564v.json index 59afc52ff9d..f3882866ce9 100644 --- a/advisories/unreviewed/2022/05/GHSA-grfp-8c8p-564v/GHSA-grfp-8c8p-564v.json +++ b/advisories/unreviewed/2022/05/GHSA-grfp-8c8p-564v/GHSA-grfp-8c8p-564v.json @@ -7,12 +7,8 @@ "CVE-2021-25392" ], "details": "Improper protection of backup path configuration in Samsung Dex prior to SMR MAY-2021 Release 1 allows local attackers to get sensitive information via changing the path.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-grw6-5m6r-8892/GHSA-grw6-5m6r-8892.json b/advisories/unreviewed/2022/05/GHSA-grw6-5m6r-8892/GHSA-grw6-5m6r-8892.json index 51d83842630..ea734b5113c 100644 --- a/advisories/unreviewed/2022/05/GHSA-grw6-5m6r-8892/GHSA-grw6-5m6r-8892.json +++ b/advisories/unreviewed/2022/05/GHSA-grw6-5m6r-8892/GHSA-grw6-5m6r-8892.json @@ -7,12 +7,8 @@ "CVE-2021-27640" ], "details": "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gvxw-2m7p-wc8h/GHSA-gvxw-2m7p-wc8h.json b/advisories/unreviewed/2022/05/GHSA-gvxw-2m7p-wc8h/GHSA-gvxw-2m7p-wc8h.json index 8f973ed4c36..3faa9a05fe9 100644 --- a/advisories/unreviewed/2022/05/GHSA-gvxw-2m7p-wc8h/GHSA-gvxw-2m7p-wc8h.json +++ b/advisories/unreviewed/2022/05/GHSA-gvxw-2m7p-wc8h/GHSA-gvxw-2m7p-wc8h.json @@ -7,12 +7,8 @@ "CVE-2021-3041" ], "details": "A local privilege escalation vulnerability exists in the Palo Alto Networks Cortex XDR agent on Windows platforms that enables an authenticated local Windows user to execute programs with SYSTEM privileges. This requires the user to have the privilege to create files in the Windows root directory or to manipulate key registry values. This issue impacts: Cortex XDR agent 5.0 versions earlier than Cortex XDR agent 5.0.11; Cortex XDR agent 6.1 versions earlier than Cortex XDR agent 6.1.8; Cortex XDR agent 7.2 versions earlier than Cortex XDR agent 7.2.3; All versions of Cortex XDR agent 7.2 without content update release 171 or a later version.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gw43-96jv-6qgq/GHSA-gw43-96jv-6qgq.json b/advisories/unreviewed/2022/05/GHSA-gw43-96jv-6qgq/GHSA-gw43-96jv-6qgq.json index e3637433598..c963dfecaef 100644 --- a/advisories/unreviewed/2022/05/GHSA-gw43-96jv-6qgq/GHSA-gw43-96jv-6qgq.json +++ b/advisories/unreviewed/2022/05/GHSA-gw43-96jv-6qgq/GHSA-gw43-96jv-6qgq.json @@ -7,12 +7,8 @@ "CVE-2021-28382" ], "details": "Zoho ManageEngine Key Manager Plus before 6001 allows Stored XSS on the user-management page while importing malicious user details from AD.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-gwp9-m42j-2f54/GHSA-gwp9-m42j-2f54.json b/advisories/unreviewed/2022/05/GHSA-gwp9-m42j-2f54/GHSA-gwp9-m42j-2f54.json index 9105d895cef..bd5979a3a65 100644 --- a/advisories/unreviewed/2022/05/GHSA-gwp9-m42j-2f54/GHSA-gwp9-m42j-2f54.json +++ b/advisories/unreviewed/2022/05/GHSA-gwp9-m42j-2f54/GHSA-gwp9-m42j-2f54.json @@ -7,12 +7,8 @@ "CVE-2021-1503" ], "details": "A vulnerability in Cisco Webex Network Recording Player for Windows and MacOS and Cisco Webex Player for Windows and MacOS could allow an attacker to execute arbitrary code on an affected system. This vulnerability is due to insufficient validation of values in Webex recording files that are in either Advanced Recording Format (ARF) or Webex Recording Format (WRF). An attacker could exploit this vulnerability by sending a user a malicious ARF or WRF file through a link or email attachment and persuading the user to open the file with the affected software on the local system. A successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of the targeted user.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h3c6-pc9c-gf82/GHSA-h3c6-pc9c-gf82.json b/advisories/unreviewed/2022/05/GHSA-h3c6-pc9c-gf82/GHSA-h3c6-pc9c-gf82.json index c8c23d4f0c2..499e641b6e8 100644 --- a/advisories/unreviewed/2022/05/GHSA-h3c6-pc9c-gf82/GHSA-h3c6-pc9c-gf82.json +++ b/advisories/unreviewed/2022/05/GHSA-h3c6-pc9c-gf82/GHSA-h3c6-pc9c-gf82.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h3f5-rfr9-579v/GHSA-h3f5-rfr9-579v.json b/advisories/unreviewed/2022/05/GHSA-h3f5-rfr9-579v/GHSA-h3f5-rfr9-579v.json index f2382de5ea8..ae11381a487 100644 --- a/advisories/unreviewed/2022/05/GHSA-h3f5-rfr9-579v/GHSA-h3f5-rfr9-579v.json +++ b/advisories/unreviewed/2022/05/GHSA-h3f5-rfr9-579v/GHSA-h3f5-rfr9-579v.json @@ -7,12 +7,8 @@ "CVE-2020-24668" ], "details": "Trace Financial Crest Bridge <6.3.0.02 contains a stored XSS vulnerability, which was fixed in 6.3.0.03.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h3fj-fmw7-cphp/GHSA-h3fj-fmw7-cphp.json b/advisories/unreviewed/2022/05/GHSA-h3fj-fmw7-cphp/GHSA-h3fj-fmw7-cphp.json index 5c1776e9c85..e9d8f2fa720 100644 --- a/advisories/unreviewed/2022/05/GHSA-h3fj-fmw7-cphp/GHSA-h3fj-fmw7-cphp.json +++ b/advisories/unreviewed/2022/05/GHSA-h3fj-fmw7-cphp/GHSA-h3fj-fmw7-cphp.json @@ -7,12 +7,8 @@ "CVE-2020-22198" ], "details": "SQL Injection vulnerability in DedeCMS 5.7 via mdescription parameter to member/ajax_membergroup.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h44q-8m75-8x46/GHSA-h44q-8m75-8x46.json b/advisories/unreviewed/2022/05/GHSA-h44q-8m75-8x46/GHSA-h44q-8m75-8x46.json index dd19bacfc07..5c1c75d7f7e 100644 --- a/advisories/unreviewed/2022/05/GHSA-h44q-8m75-8x46/GHSA-h44q-8m75-8x46.json +++ b/advisories/unreviewed/2022/05/GHSA-h44q-8m75-8x46/GHSA-h44q-8m75-8x46.json @@ -7,12 +7,8 @@ "CVE-2021-33176" ], "details": "VerneMQ MQTT Broker versions prior to 1.12.0 are vulnerable to a denial of service attack as a result of excessive memory consumption due to the handling of untrusted inputs. These inputs cause the message broker to consume large amounts of memory, resulting in the application being terminated by the operating system.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h4g6-6xx4-6g88/GHSA-h4g6-6xx4-6g88.json b/advisories/unreviewed/2022/05/GHSA-h4g6-6xx4-6g88/GHSA-h4g6-6xx4-6g88.json index cdabb17fe8c..bf0fed14a08 100644 --- a/advisories/unreviewed/2022/05/GHSA-h4g6-6xx4-6g88/GHSA-h4g6-6xx4-6g88.json +++ b/advisories/unreviewed/2022/05/GHSA-h4g6-6xx4-6g88/GHSA-h4g6-6xx4-6g88.json @@ -7,12 +7,8 @@ "CVE-2021-33833" ], "details": "ConnMan (aka Connection Manager) 1.30 through 1.39 has a stack-based buffer overflow in uncompress in dnsproxy.c via NAME, RDATA, or RDLENGTH (for A or AAAA).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h4xg-pg5p-4qf7/GHSA-h4xg-pg5p-4qf7.json b/advisories/unreviewed/2022/05/GHSA-h4xg-pg5p-4qf7/GHSA-h4xg-pg5p-4qf7.json index e781bc2790f..b8e0fa11b00 100644 --- a/advisories/unreviewed/2022/05/GHSA-h4xg-pg5p-4qf7/GHSA-h4xg-pg5p-4qf7.json +++ b/advisories/unreviewed/2022/05/GHSA-h4xg-pg5p-4qf7/GHSA-h4xg-pg5p-4qf7.json @@ -7,12 +7,8 @@ "CVE-2021-26194" ], "details": "An issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in ecma_is_lexical_environment in the ecma-helpers.c file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h52q-725p-338m/GHSA-h52q-725p-338m.json b/advisories/unreviewed/2022/05/GHSA-h52q-725p-338m/GHSA-h52q-725p-338m.json index abc9e376543..3b0d10da7b3 100644 --- a/advisories/unreviewed/2022/05/GHSA-h52q-725p-338m/GHSA-h52q-725p-338m.json +++ b/advisories/unreviewed/2022/05/GHSA-h52q-725p-338m/GHSA-h52q-725p-338m.json @@ -7,12 +7,8 @@ "CVE-2021-33359" ], "details": "A vulnerability exists in gowitness < 2.3.6 that allows an unauthenticated attacker to perform an arbitrary file read using the file:// scheme in the url parameter to get an image of any file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h83r-q9jr-5cxw/GHSA-h83r-q9jr-5cxw.json b/advisories/unreviewed/2022/05/GHSA-h83r-q9jr-5cxw/GHSA-h83r-q9jr-5cxw.json index c4ad8ec892a..2a07d86a3e0 100644 --- a/advisories/unreviewed/2022/05/GHSA-h83r-q9jr-5cxw/GHSA-h83r-q9jr-5cxw.json +++ b/advisories/unreviewed/2022/05/GHSA-h83r-q9jr-5cxw/GHSA-h83r-q9jr-5cxw.json @@ -7,12 +7,8 @@ "CVE-2021-20566" ], "details": "IBM Resilient SOAR V38.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 199238.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h8gx-qmvv-cjw4/GHSA-h8gx-qmvv-cjw4.json b/advisories/unreviewed/2022/05/GHSA-h8gx-qmvv-cjw4/GHSA-h8gx-qmvv-cjw4.json index 9e98ea1c4db..c4c49c4c73e 100644 --- a/advisories/unreviewed/2022/05/GHSA-h8gx-qmvv-cjw4/GHSA-h8gx-qmvv-cjw4.json +++ b/advisories/unreviewed/2022/05/GHSA-h8gx-qmvv-cjw4/GHSA-h8gx-qmvv-cjw4.json @@ -7,12 +7,8 @@ "CVE-2021-34364" ], "details": "The Refined GitHub browser extension before 21.6.8 might allow XSS via a link in a document. NOTE: github.com sends Content-Security-Policy headers to, in general, address XSS and other concerns.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-h929-cx4c-g62q/GHSA-h929-cx4c-g62q.json b/advisories/unreviewed/2022/05/GHSA-h929-cx4c-g62q/GHSA-h929-cx4c-g62q.json index 04499fb929b..9a251a01793 100644 --- a/advisories/unreviewed/2022/05/GHSA-h929-cx4c-g62q/GHSA-h929-cx4c-g62q.json +++ b/advisories/unreviewed/2022/05/GHSA-h929-cx4c-g62q/GHSA-h929-cx4c-g62q.json @@ -7,12 +7,8 @@ "CVE-2020-11258" ], "details": "Memory corruption due to lack of validation of pointer arguments passed to Trustzone BSP in Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hc9m-qx5w-ggwv/GHSA-hc9m-qx5w-ggwv.json b/advisories/unreviewed/2022/05/GHSA-hc9m-qx5w-ggwv/GHSA-hc9m-qx5w-ggwv.json index eaa04d96734..45ea8d4cb38 100644 --- a/advisories/unreviewed/2022/05/GHSA-hc9m-qx5w-ggwv/GHSA-hc9m-qx5w-ggwv.json +++ b/advisories/unreviewed/2022/05/GHSA-hc9m-qx5w-ggwv/GHSA-hc9m-qx5w-ggwv.json @@ -7,12 +7,8 @@ "CVE-2021-0490" ], "details": "In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-183464868", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hccg-5m3q-4vwv/GHSA-hccg-5m3q-4vwv.json b/advisories/unreviewed/2022/05/GHSA-hccg-5m3q-4vwv/GHSA-hccg-5m3q-4vwv.json index 194a4df9a62..c78b39305b2 100644 --- a/advisories/unreviewed/2022/05/GHSA-hccg-5m3q-4vwv/GHSA-hccg-5m3q-4vwv.json +++ b/advisories/unreviewed/2022/05/GHSA-hccg-5m3q-4vwv/GHSA-hccg-5m3q-4vwv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hcg3-p22c-cw6r/GHSA-hcg3-p22c-cw6r.json b/advisories/unreviewed/2022/05/GHSA-hcg3-p22c-cw6r/GHSA-hcg3-p22c-cw6r.json index 7f669ccb1de..b65f8f408f8 100644 --- a/advisories/unreviewed/2022/05/GHSA-hcg3-p22c-cw6r/GHSA-hcg3-p22c-cw6r.json +++ b/advisories/unreviewed/2022/05/GHSA-hcg3-p22c-cw6r/GHSA-hcg3-p22c-cw6r.json @@ -7,12 +7,8 @@ "CVE-2021-30535" ], "details": "Double free in ICU in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hcgx-vxrq-6c93/GHSA-hcgx-vxrq-6c93.json b/advisories/unreviewed/2022/05/GHSA-hcgx-vxrq-6c93/GHSA-hcgx-vxrq-6c93.json index c86f27a5746..047f5172e58 100644 --- a/advisories/unreviewed/2022/05/GHSA-hcgx-vxrq-6c93/GHSA-hcgx-vxrq-6c93.json +++ b/advisories/unreviewed/2022/05/GHSA-hcgx-vxrq-6c93/GHSA-hcgx-vxrq-6c93.json @@ -7,12 +7,8 @@ "CVE-2021-32198" ], "details": "EmTec ZOC before 8.02.2 allows \\e[201~ pastes.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hfq8-78jw-m3g4/GHSA-hfq8-78jw-m3g4.json b/advisories/unreviewed/2022/05/GHSA-hfq8-78jw-m3g4/GHSA-hfq8-78jw-m3g4.json index a6bf210e1b9..0dac8071a38 100644 --- a/advisories/unreviewed/2022/05/GHSA-hfq8-78jw-m3g4/GHSA-hfq8-78jw-m3g4.json +++ b/advisories/unreviewed/2022/05/GHSA-hfq8-78jw-m3g4/GHSA-hfq8-78jw-m3g4.json @@ -7,12 +7,8 @@ "CVE-2021-0070" ], "details": "Improper input validation in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable an escalation of privilege via adjacent access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hfr9-8v78-pwqw/GHSA-hfr9-8v78-pwqw.json b/advisories/unreviewed/2022/05/GHSA-hfr9-8v78-pwqw/GHSA-hfr9-8v78-pwqw.json index b3c4f5609d5..90d0abcef33 100644 --- a/advisories/unreviewed/2022/05/GHSA-hfr9-8v78-pwqw/GHSA-hfr9-8v78-pwqw.json +++ b/advisories/unreviewed/2022/05/GHSA-hfr9-8v78-pwqw/GHSA-hfr9-8v78-pwqw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hhfw-pf2r-pqwh/GHSA-hhfw-pf2r-pqwh.json b/advisories/unreviewed/2022/05/GHSA-hhfw-pf2r-pqwh/GHSA-hhfw-pf2r-pqwh.json index ff86a4827e3..b9c113739f3 100644 --- a/advisories/unreviewed/2022/05/GHSA-hhfw-pf2r-pqwh/GHSA-hhfw-pf2r-pqwh.json +++ b/advisories/unreviewed/2022/05/GHSA-hhfw-pf2r-pqwh/GHSA-hhfw-pf2r-pqwh.json @@ -7,12 +7,8 @@ "CVE-2021-32612" ], "details": "The VeryFitPro (com.veryfit2hr.second) application 3.2.8 for Android does all communication with the backend API over cleartext HTTP. This includes logins, registrations, and password change requests. This allows information theft and account takeover via network sniffing.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hhg2-c4p3-h55x/GHSA-hhg2-c4p3-h55x.json b/advisories/unreviewed/2022/05/GHSA-hhg2-c4p3-h55x/GHSA-hhg2-c4p3-h55x.json index 0f91e75210b..95f7083e5c3 100644 --- a/advisories/unreviewed/2022/05/GHSA-hhg2-c4p3-h55x/GHSA-hhg2-c4p3-h55x.json +++ b/advisories/unreviewed/2022/05/GHSA-hhg2-c4p3-h55x/GHSA-hhg2-c4p3-h55x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hhhf-rv92-pq4q/GHSA-hhhf-rv92-pq4q.json b/advisories/unreviewed/2022/05/GHSA-hhhf-rv92-pq4q/GHSA-hhhf-rv92-pq4q.json index 556f16d83dd..23851dc0e96 100644 --- a/advisories/unreviewed/2022/05/GHSA-hhhf-rv92-pq4q/GHSA-hhhf-rv92-pq4q.json +++ b/advisories/unreviewed/2022/05/GHSA-hhhf-rv92-pq4q/GHSA-hhhf-rv92-pq4q.json @@ -7,12 +7,8 @@ "CVE-2005-0003" ], "details": "The 64 bit ELF support in Linux kernel 2.6 before 2.6.10, on 64-bit architectures, does not properly check for overlapping VMA (virtual memory address) allocations, which allows local users to cause a denial of service (system crash) or execute arbitrary code via a crafted ELF or a.out file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -92,9 +88,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-hj64-hw39-vg8c/GHSA-hj64-hw39-vg8c.json b/advisories/unreviewed/2022/05/GHSA-hj64-hw39-vg8c/GHSA-hj64-hw39-vg8c.json index 56303be34fb..c0fab04735f 100644 --- a/advisories/unreviewed/2022/05/GHSA-hj64-hw39-vg8c/GHSA-hj64-hw39-vg8c.json +++ b/advisories/unreviewed/2022/05/GHSA-hj64-hw39-vg8c/GHSA-hj64-hw39-vg8c.json @@ -7,12 +7,8 @@ "CVE-2021-25389" ], "details": "Improper running task check in S Secure prior to SMR MAY-2021 Release 1 allows attackers to use locked app without authentication.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hjxf-6qxm-x8qg/GHSA-hjxf-6qxm-x8qg.json b/advisories/unreviewed/2022/05/GHSA-hjxf-6qxm-x8qg/GHSA-hjxf-6qxm-x8qg.json index f7d34049592..532083745ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-hjxf-6qxm-x8qg/GHSA-hjxf-6qxm-x8qg.json +++ b/advisories/unreviewed/2022/05/GHSA-hjxf-6qxm-x8qg/GHSA-hjxf-6qxm-x8qg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hmg5-2fm4-j8w9/GHSA-hmg5-2fm4-j8w9.json b/advisories/unreviewed/2022/05/GHSA-hmg5-2fm4-j8w9/GHSA-hmg5-2fm4-j8w9.json index 965eba268ed..acde2978fc3 100644 --- a/advisories/unreviewed/2022/05/GHSA-hmg5-2fm4-j8w9/GHSA-hmg5-2fm4-j8w9.json +++ b/advisories/unreviewed/2022/05/GHSA-hmg5-2fm4-j8w9/GHSA-hmg5-2fm4-j8w9.json @@ -7,12 +7,8 @@ "CVE-2021-24345" ], "details": "The page lists-management feature of the Sendit WP Newsletter WordPress plugin through 2.5.1, available to Administrator users does not sanitise, validate or escape the id_lista POST parameter before using it in SQL statement, therefore leading to Blind SQL Injection.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hpvh-2wc7-fq52/GHSA-hpvh-2wc7-fq52.json b/advisories/unreviewed/2022/05/GHSA-hpvh-2wc7-fq52/GHSA-hpvh-2wc7-fq52.json index ed9b072f98c..ac0b6a5b164 100644 --- a/advisories/unreviewed/2022/05/GHSA-hpvh-2wc7-fq52/GHSA-hpvh-2wc7-fq52.json +++ b/advisories/unreviewed/2022/05/GHSA-hpvh-2wc7-fq52/GHSA-hpvh-2wc7-fq52.json @@ -7,12 +7,8 @@ "CVE-2021-30523" ], "details": "Use after free in WebRTC in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hqgh-3qh7-j5f2/GHSA-hqgh-3qh7-j5f2.json b/advisories/unreviewed/2022/05/GHSA-hqgh-3qh7-j5f2/GHSA-hqgh-3qh7-j5f2.json index 1b67d8ac211..da8233eb01a 100644 --- a/advisories/unreviewed/2022/05/GHSA-hqgh-3qh7-j5f2/GHSA-hqgh-3qh7-j5f2.json +++ b/advisories/unreviewed/2022/05/GHSA-hqgh-3qh7-j5f2/GHSA-hqgh-3qh7-j5f2.json @@ -7,12 +7,8 @@ "CVE-2021-0051" ], "details": "Improper input validation in the Intel(R) SPS versions before SPS_E5_04.04.04.023.0, SPS_E5_04.04.03.228.0 or SPS_SoC-A_05.00.03.098.0 may allow a privileged user to potentially enable denial of service via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hr85-6mv6-mcm7/GHSA-hr85-6mv6-mcm7.json b/advisories/unreviewed/2022/05/GHSA-hr85-6mv6-mcm7/GHSA-hr85-6mv6-mcm7.json index eec1c17296d..94da837ff7e 100644 --- a/advisories/unreviewed/2022/05/GHSA-hr85-6mv6-mcm7/GHSA-hr85-6mv6-mcm7.json +++ b/advisories/unreviewed/2022/05/GHSA-hr85-6mv6-mcm7/GHSA-hr85-6mv6-mcm7.json @@ -7,12 +7,8 @@ "CVE-2021-23852" ], "details": "An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that causes the camera to become unresponsive for a few seconds and cause a Denial of Service (DoS).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hrm8-gqcw-5xw2/GHSA-hrm8-gqcw-5xw2.json b/advisories/unreviewed/2022/05/GHSA-hrm8-gqcw-5xw2/GHSA-hrm8-gqcw-5xw2.json index 6f8a99260ca..f881fcfc052 100644 --- a/advisories/unreviewed/2022/05/GHSA-hrm8-gqcw-5xw2/GHSA-hrm8-gqcw-5xw2.json +++ b/advisories/unreviewed/2022/05/GHSA-hrm8-gqcw-5xw2/GHSA-hrm8-gqcw-5xw2.json @@ -7,12 +7,8 @@ "CVE-2020-22203" ], "details": "SQL Injection in phpCMS 2008 sp4 via the genre parameter to yp/job.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hrwv-325w-f6ch/GHSA-hrwv-325w-f6ch.json b/advisories/unreviewed/2022/05/GHSA-hrwv-325w-f6ch/GHSA-hrwv-325w-f6ch.json index 820ab0ea3b3..8d1be09c03a 100644 --- a/advisories/unreviewed/2022/05/GHSA-hrwv-325w-f6ch/GHSA-hrwv-325w-f6ch.json +++ b/advisories/unreviewed/2022/05/GHSA-hrwv-325w-f6ch/GHSA-hrwv-325w-f6ch.json @@ -7,12 +7,8 @@ "CVE-2021-34557" ], "details": "XScreenSaver 5.45 can be bypassed if the machine has more than ten disconnectable video outputs. A buffer overflow in update_screen_layout() allows an attacker to bypass the standard screen lock authentication mechanism by crashing XScreenSaver. The attacker must physically disconnect many video outputs.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hv36-vqw3-9r27/GHSA-hv36-vqw3-9r27.json b/advisories/unreviewed/2022/05/GHSA-hv36-vqw3-9r27/GHSA-hv36-vqw3-9r27.json index 627c2db33de..b6dcfea13a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-hv36-vqw3-9r27/GHSA-hv36-vqw3-9r27.json +++ b/advisories/unreviewed/2022/05/GHSA-hv36-vqw3-9r27/GHSA-hv36-vqw3-9r27.json @@ -7,12 +7,8 @@ "CVE-2021-30542" ], "details": "Use after free in Tab Strip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hv8h-j8f9-3rg8/GHSA-hv8h-j8f9-3rg8.json b/advisories/unreviewed/2022/05/GHSA-hv8h-j8f9-3rg8/GHSA-hv8h-j8f9-3rg8.json index 656f8fb690f..d116e18621c 100644 --- a/advisories/unreviewed/2022/05/GHSA-hv8h-j8f9-3rg8/GHSA-hv8h-j8f9-3rg8.json +++ b/advisories/unreviewed/2022/05/GHSA-hv8h-j8f9-3rg8/GHSA-hv8h-j8f9-3rg8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hwgc-9p3v-8ffx/GHSA-hwgc-9p3v-8ffx.json b/advisories/unreviewed/2022/05/GHSA-hwgc-9p3v-8ffx/GHSA-hwgc-9p3v-8ffx.json index 24e951f5dd8..34071f28c41 100644 --- a/advisories/unreviewed/2022/05/GHSA-hwgc-9p3v-8ffx/GHSA-hwgc-9p3v-8ffx.json +++ b/advisories/unreviewed/2022/05/GHSA-hwgc-9p3v-8ffx/GHSA-hwgc-9p3v-8ffx.json @@ -7,12 +7,8 @@ "CVE-2021-1536" ], "details": "A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This vulnerability is due to incorrect handling of directory paths at run time. An attacker could exploit this vulnerability by inserting a configuration file in a specific path in the system, which can cause a malicious DLL file to be loaded when the application starts. A successful exploit could allow the attacker to execute arbitrary code on the affected system with the privileges of another user account.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-hwvj-32c7-gf4p/GHSA-hwvj-32c7-gf4p.json b/advisories/unreviewed/2022/05/GHSA-hwvj-32c7-gf4p/GHSA-hwvj-32c7-gf4p.json index cf55823d8ab..588741456d1 100644 --- a/advisories/unreviewed/2022/05/GHSA-hwvj-32c7-gf4p/GHSA-hwvj-32c7-gf4p.json +++ b/advisories/unreviewed/2022/05/GHSA-hwvj-32c7-gf4p/GHSA-hwvj-32c7-gf4p.json @@ -7,12 +7,8 @@ "CVE-2021-30539" ], "details": "Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j2f2-fj3p-8c94/GHSA-j2f2-fj3p-8c94.json b/advisories/unreviewed/2022/05/GHSA-j2f2-fj3p-8c94/GHSA-j2f2-fj3p-8c94.json index ca43c546250..c1231a04b44 100644 --- a/advisories/unreviewed/2022/05/GHSA-j2f2-fj3p-8c94/GHSA-j2f2-fj3p-8c94.json +++ b/advisories/unreviewed/2022/05/GHSA-j2f2-fj3p-8c94/GHSA-j2f2-fj3p-8c94.json @@ -7,12 +7,8 @@ "CVE-2021-20027" ], "details": "A buffer overflow vulnerability in SonicOS allows a remote attacker to cause a Denial of Service (DoS) by sending a specially crafted request. This vulnerability affects SonicOS Gen5, Gen6, Gen7 platforms, and SonicOSv virtual firewalls.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j34c-6692-hx97/GHSA-j34c-6692-hx97.json b/advisories/unreviewed/2022/05/GHSA-j34c-6692-hx97/GHSA-j34c-6692-hx97.json index 2f7850e3242..38c4eacff2a 100644 --- a/advisories/unreviewed/2022/05/GHSA-j34c-6692-hx97/GHSA-j34c-6692-hx97.json +++ b/advisories/unreviewed/2022/05/GHSA-j34c-6692-hx97/GHSA-j34c-6692-hx97.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j3rv-rh4f-4rf6/GHSA-j3rv-rh4f-4rf6.json b/advisories/unreviewed/2022/05/GHSA-j3rv-rh4f-4rf6/GHSA-j3rv-rh4f-4rf6.json index d4e3ca90980..5ea7c0856bb 100644 --- a/advisories/unreviewed/2022/05/GHSA-j3rv-rh4f-4rf6/GHSA-j3rv-rh4f-4rf6.json +++ b/advisories/unreviewed/2022/05/GHSA-j3rv-rh4f-4rf6/GHSA-j3rv-rh4f-4rf6.json @@ -7,12 +7,8 @@ "CVE-2021-21735" ], "details": "A ZTE product has an information leak vulnerability. Due to improper permission settings, an attacker with ordinary user permissions could exploit this vulnerability to obtain some sensitive user information through the wizard page without authentication. This affects ZXHN H168N all versions up to V3.5.0_EG1T4_TE.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j3ww-p97m-gh9x/GHSA-j3ww-p97m-gh9x.json b/advisories/unreviewed/2022/05/GHSA-j3ww-p97m-gh9x/GHSA-j3ww-p97m-gh9x.json index fa03b68c7c5..02d2121e07f 100644 --- a/advisories/unreviewed/2022/05/GHSA-j3ww-p97m-gh9x/GHSA-j3ww-p97m-gh9x.json +++ b/advisories/unreviewed/2022/05/GHSA-j3ww-p97m-gh9x/GHSA-j3ww-p97m-gh9x.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j42g-3m6p-674j/GHSA-j42g-3m6p-674j.json b/advisories/unreviewed/2022/05/GHSA-j42g-3m6p-674j/GHSA-j42g-3m6p-674j.json index b09c5b126ee..a873783dfd7 100644 --- a/advisories/unreviewed/2022/05/GHSA-j42g-3m6p-674j/GHSA-j42g-3m6p-674j.json +++ b/advisories/unreviewed/2022/05/GHSA-j42g-3m6p-674j/GHSA-j42g-3m6p-674j.json @@ -7,12 +7,8 @@ "CVE-2021-22548" ], "details": "An attacker can change the pointer to untrusted memory to point to trusted memory region which causes copying trusted memory to trusted memory, if the latter is later copied out, it allows for reading of memory regions from the trusted region. It is recommended to update past 0.6.2 or git commit https://github.com/google/asylo/commit/53ed5d8fd8118ced1466e509606dd2f473707a5c", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-j439-pxmh-qqfx/GHSA-j439-pxmh-qqfx.json b/advisories/unreviewed/2022/05/GHSA-j439-pxmh-qqfx/GHSA-j439-pxmh-qqfx.json index e94bc6b9922..c95856453b9 100644 --- a/advisories/unreviewed/2022/05/GHSA-j439-pxmh-qqfx/GHSA-j439-pxmh-qqfx.json +++ b/advisories/unreviewed/2022/05/GHSA-j439-pxmh-qqfx/GHSA-j439-pxmh-qqfx.json @@ -7,12 +7,8 @@ "CVE-2020-12292" ], "details": "Improper conditions check in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j4vv-pj3g-5523/GHSA-j4vv-pj3g-5523.json b/advisories/unreviewed/2022/05/GHSA-j4vv-pj3g-5523/GHSA-j4vv-pj3g-5523.json index f54981adecd..01479b4b478 100644 --- a/advisories/unreviewed/2022/05/GHSA-j4vv-pj3g-5523/GHSA-j4vv-pj3g-5523.json +++ b/advisories/unreviewed/2022/05/GHSA-j4vv-pj3g-5523/GHSA-j4vv-pj3g-5523.json @@ -7,12 +7,8 @@ "CVE-2021-32549" ], "details": "It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-13 package apport hooks, it could expose private data to other local users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j56v-m9w9-5r65/GHSA-j56v-m9w9-5r65.json b/advisories/unreviewed/2022/05/GHSA-j56v-m9w9-5r65/GHSA-j56v-m9w9-5r65.json index 4af6a1285fd..d500e04aa8d 100644 --- a/advisories/unreviewed/2022/05/GHSA-j56v-m9w9-5r65/GHSA-j56v-m9w9-5r65.json +++ b/advisories/unreviewed/2022/05/GHSA-j56v-m9w9-5r65/GHSA-j56v-m9w9-5r65.json @@ -7,12 +7,8 @@ "CVE-2021-21736" ], "details": "A smart camera product of ZTE is impacted by a permission and access control vulnerability. Due to the defect of user permission management by the cloud-end app, users whose sharing permissions have been revoked can still control the camera, such as restarting the camera, restoring factory settings, etc.. This affects ZXHN HS562 V1.0.0.0B2.0000, V1.0.0.0B3.0000E", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j6mq-crhw-3j24/GHSA-j6mq-crhw-3j24.json b/advisories/unreviewed/2022/05/GHSA-j6mq-crhw-3j24/GHSA-j6mq-crhw-3j24.json index c2b0e906483..bc58f739544 100644 --- a/advisories/unreviewed/2022/05/GHSA-j6mq-crhw-3j24/GHSA-j6mq-crhw-3j24.json +++ b/advisories/unreviewed/2022/05/GHSA-j6mq-crhw-3j24/GHSA-j6mq-crhw-3j24.json @@ -7,12 +7,8 @@ "CVE-2020-23323" ], "details": "There is a heap-buffer-overflow at re-parser.c in re_parse_char_escape in JerryScript 2.2.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j87g-5g8x-jjxc/GHSA-j87g-5g8x-jjxc.json b/advisories/unreviewed/2022/05/GHSA-j87g-5g8x-jjxc/GHSA-j87g-5g8x-jjxc.json index 21373321359..76021f790e9 100644 --- a/advisories/unreviewed/2022/05/GHSA-j87g-5g8x-jjxc/GHSA-j87g-5g8x-jjxc.json +++ b/advisories/unreviewed/2022/05/GHSA-j87g-5g8x-jjxc/GHSA-j87g-5g8x-jjxc.json @@ -7,12 +7,8 @@ "CVE-2021-26828" ], "details": "OpenPLC ScadaBR through 0.9.1 on Linux and through 1.12.4 on Windows allows remote authenticated users to upload and execute arbitrary JSP files via view_edit.shtm.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-j8xc-43rr-f4pf/GHSA-j8xc-43rr-f4pf.json b/advisories/unreviewed/2022/05/GHSA-j8xc-43rr-f4pf/GHSA-j8xc-43rr-f4pf.json index 26dd72cff1c..7f11e8b0ef2 100644 --- a/advisories/unreviewed/2022/05/GHSA-j8xc-43rr-f4pf/GHSA-j8xc-43rr-f4pf.json +++ b/advisories/unreviewed/2022/05/GHSA-j8xc-43rr-f4pf/GHSA-j8xc-43rr-f4pf.json @@ -7,12 +7,8 @@ "CVE-2021-33358" ], "details": "Multiple vulnerabilities exist in RaspAP 2.3 to 2.6.5 in the \"interface\", \"ssid\" and \"wpa_passphrase\" POST parameters in /hostapd, when the parameter values contain special characters such as \";\" or \"$()\" which enables an authenticated attacker to execute arbitrary OS commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jc27-7v58-6287/GHSA-jc27-7v58-6287.json b/advisories/unreviewed/2022/05/GHSA-jc27-7v58-6287/GHSA-jc27-7v58-6287.json index ed91f497b4b..5841b0c8632 100644 --- a/advisories/unreviewed/2022/05/GHSA-jc27-7v58-6287/GHSA-jc27-7v58-6287.json +++ b/advisories/unreviewed/2022/05/GHSA-jc27-7v58-6287/GHSA-jc27-7v58-6287.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jc74-hgwv-gc6j/GHSA-jc74-hgwv-gc6j.json b/advisories/unreviewed/2022/05/GHSA-jc74-hgwv-gc6j/GHSA-jc74-hgwv-gc6j.json index 6ebe26b9a2c..5d73526e626 100644 --- a/advisories/unreviewed/2022/05/GHSA-jc74-hgwv-gc6j/GHSA-jc74-hgwv-gc6j.json +++ b/advisories/unreviewed/2022/05/GHSA-jc74-hgwv-gc6j/GHSA-jc74-hgwv-gc6j.json @@ -7,12 +7,8 @@ "CVE-2020-12291" ], "details": "Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jfgv-4796-2jw7/GHSA-jfgv-4796-2jw7.json b/advisories/unreviewed/2022/05/GHSA-jfgv-4796-2jw7/GHSA-jfgv-4796-2jw7.json index 77e7e167038..8f3558f0c8a 100644 --- a/advisories/unreviewed/2022/05/GHSA-jfgv-4796-2jw7/GHSA-jfgv-4796-2jw7.json +++ b/advisories/unreviewed/2022/05/GHSA-jfgv-4796-2jw7/GHSA-jfgv-4796-2jw7.json @@ -7,12 +7,8 @@ "CVE-2021-30641" ], "details": "Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF'", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jfgv-77w2-93rx/GHSA-jfgv-77w2-93rx.json b/advisories/unreviewed/2022/05/GHSA-jfgv-77w2-93rx/GHSA-jfgv-77w2-93rx.json index 26de039e4b0..5e9daccc2dd 100644 --- a/advisories/unreviewed/2022/05/GHSA-jfgv-77w2-93rx/GHSA-jfgv-77w2-93rx.json +++ b/advisories/unreviewed/2022/05/GHSA-jfgv-77w2-93rx/GHSA-jfgv-77w2-93rx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jfh5-68jv-jpmr/GHSA-jfh5-68jv-jpmr.json b/advisories/unreviewed/2022/05/GHSA-jfh5-68jv-jpmr/GHSA-jfh5-68jv-jpmr.json index fc69fd137be..0f1b41e513e 100644 --- a/advisories/unreviewed/2022/05/GHSA-jfh5-68jv-jpmr/GHSA-jfh5-68jv-jpmr.json +++ b/advisories/unreviewed/2022/05/GHSA-jfh5-68jv-jpmr/GHSA-jfh5-68jv-jpmr.json @@ -7,12 +7,8 @@ "CVE-2021-0475" ], "details": "In on_l2cap_data_ind of btif_sock_l2cap.cc, there is possible memory corruption due to a use after free. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-175686168", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jg2r-w2w3-cg2m/GHSA-jg2r-w2w3-cg2m.json b/advisories/unreviewed/2022/05/GHSA-jg2r-w2w3-cg2m/GHSA-jg2r-w2w3-cg2m.json index db61e2c55a9..971d951c246 100644 --- a/advisories/unreviewed/2022/05/GHSA-jg2r-w2w3-cg2m/GHSA-jg2r-w2w3-cg2m.json +++ b/advisories/unreviewed/2022/05/GHSA-jg2r-w2w3-cg2m/GHSA-jg2r-w2w3-cg2m.json @@ -7,12 +7,8 @@ "CVE-2020-22204" ], "details": "SQL Injection in ECShop 2.7.6 via the goods_number parameter to flow.php. .", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jh87-7j82-9cr2/GHSA-jh87-7j82-9cr2.json b/advisories/unreviewed/2022/05/GHSA-jh87-7j82-9cr2/GHSA-jh87-7j82-9cr2.json index 4ac3b1f3197..e679c1bf298 100644 --- a/advisories/unreviewed/2022/05/GHSA-jh87-7j82-9cr2/GHSA-jh87-7j82-9cr2.json +++ b/advisories/unreviewed/2022/05/GHSA-jh87-7j82-9cr2/GHSA-jh87-7j82-9cr2.json @@ -7,12 +7,8 @@ "CVE-2021-34815" ], "details": "CheckSec Canopy before 3.5.2 allows XSS attacks against the login page via the LOGIN_PAGE_DISCLAIMER parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jhg6-6fpm-5p2r/GHSA-jhg6-6fpm-5p2r.json b/advisories/unreviewed/2022/05/GHSA-jhg6-6fpm-5p2r/GHSA-jhg6-6fpm-5p2r.json index ae6a06c6283..4a4829b4217 100644 --- a/advisories/unreviewed/2022/05/GHSA-jhg6-6fpm-5p2r/GHSA-jhg6-6fpm-5p2r.json +++ b/advisories/unreviewed/2022/05/GHSA-jhg6-6fpm-5p2r/GHSA-jhg6-6fpm-5p2r.json @@ -7,12 +7,8 @@ "CVE-2021-22181" ], "details": "A denial of service vulnerability in GitLab CE/EE affecting all versions since 11.8 allows an attacker to create a recursive pipeline relationship and exhaust resources.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jmcf-qq6f-fgvg/GHSA-jmcf-qq6f-fgvg.json b/advisories/unreviewed/2022/05/GHSA-jmcf-qq6f-fgvg/GHSA-jmcf-qq6f-fgvg.json index 02f82a5bf99..6b3074dc86e 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmcf-qq6f-fgvg/GHSA-jmcf-qq6f-fgvg.json +++ b/advisories/unreviewed/2022/05/GHSA-jmcf-qq6f-fgvg/GHSA-jmcf-qq6f-fgvg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jmcw-mhj9-cqjg/GHSA-jmcw-mhj9-cqjg.json b/advisories/unreviewed/2022/05/GHSA-jmcw-mhj9-cqjg/GHSA-jmcw-mhj9-cqjg.json index d041c9f2203..4d5984de860 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmcw-mhj9-cqjg/GHSA-jmcw-mhj9-cqjg.json +++ b/advisories/unreviewed/2022/05/GHSA-jmcw-mhj9-cqjg/GHSA-jmcw-mhj9-cqjg.json @@ -7,12 +7,8 @@ "CVE-2021-30506" ], "details": "Incorrect security UI in Web App Installs in Google Chrome on Android prior to 90.0.4430.212 allowed an attacker who convinced a user to install a web application to inject scripts or HTML into a privileged page via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jmp3-rj28-rcjj/GHSA-jmp3-rj28-rcjj.json b/advisories/unreviewed/2022/05/GHSA-jmp3-rj28-rcjj/GHSA-jmp3-rj28-rcjj.json index 6a0c547ed1c..e3763eae22d 100644 --- a/advisories/unreviewed/2022/05/GHSA-jmp3-rj28-rcjj/GHSA-jmp3-rj28-rcjj.json +++ b/advisories/unreviewed/2022/05/GHSA-jmp3-rj28-rcjj/GHSA-jmp3-rj28-rcjj.json @@ -7,12 +7,8 @@ "CVE-2020-11134" ], "details": "Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup attribute inside a NAN management frame are not Properly validated in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jpc8-v624-5p2h/GHSA-jpc8-v624-5p2h.json b/advisories/unreviewed/2022/05/GHSA-jpc8-v624-5p2h/GHSA-jpc8-v624-5p2h.json index 35ad9360246..19567d78290 100644 --- a/advisories/unreviewed/2022/05/GHSA-jpc8-v624-5p2h/GHSA-jpc8-v624-5p2h.json +++ b/advisories/unreviewed/2022/05/GHSA-jpc8-v624-5p2h/GHSA-jpc8-v624-5p2h.json @@ -7,12 +7,8 @@ "CVE-2021-25415" ], "details": "Assuming EL1 is compromised, an improper address validation in RKP prior to SMR JUN-2021 Release 1 allows local attackers to remap EL2 memory as writable.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jpq9-r35r-969q/GHSA-jpq9-r35r-969q.json b/advisories/unreviewed/2022/05/GHSA-jpq9-r35r-969q/GHSA-jpq9-r35r-969q.json index 1ce0005fe74..c91c7bfb33e 100644 --- a/advisories/unreviewed/2022/05/GHSA-jpq9-r35r-969q/GHSA-jpq9-r35r-969q.json +++ b/advisories/unreviewed/2022/05/GHSA-jpq9-r35r-969q/GHSA-jpq9-r35r-969q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jq87-fwpf-7pr3/GHSA-jq87-fwpf-7pr3.json b/advisories/unreviewed/2022/05/GHSA-jq87-fwpf-7pr3/GHSA-jq87-fwpf-7pr3.json index e32b8125243..3f98f4f0745 100644 --- a/advisories/unreviewed/2022/05/GHSA-jq87-fwpf-7pr3/GHSA-jq87-fwpf-7pr3.json +++ b/advisories/unreviewed/2022/05/GHSA-jq87-fwpf-7pr3/GHSA-jq87-fwpf-7pr3.json @@ -7,12 +7,8 @@ "CVE-2021-0102" ], "details": "Insecure inherited permissions in the Intel Unite(R) Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jqfx-r8vc-qw5m/GHSA-jqfx-r8vc-qw5m.json b/advisories/unreviewed/2022/05/GHSA-jqfx-r8vc-qw5m/GHSA-jqfx-r8vc-qw5m.json index 4be34301de4..f6faf679a10 100644 --- a/advisories/unreviewed/2022/05/GHSA-jqfx-r8vc-qw5m/GHSA-jqfx-r8vc-qw5m.json +++ b/advisories/unreviewed/2022/05/GHSA-jqfx-r8vc-qw5m/GHSA-jqfx-r8vc-qw5m.json @@ -7,12 +7,8 @@ "CVE-2021-21559" ], "details": "Dell EMC NetWorker, versions 18.x, 19.1.x, 19.2.x 19.3.x, 19.4, and 19.4.0.1 contain an Improper Certificate Validation vulnerability in the client (NetWorker Management Console) components which uses SSL encrypted connection in order to communicate with the application server. An unauthenticated attacker in the same network collision domain as the NetWorker Management Console client could potentially exploit this vulnerability to perform man-in-the-middle attacks to intercept and tamper the traffic between the client and the application server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jr4h-pv5f-qr33/GHSA-jr4h-pv5f-qr33.json b/advisories/unreviewed/2022/05/GHSA-jr4h-pv5f-qr33/GHSA-jr4h-pv5f-qr33.json index 7ca08953543..dc8e70f9c9e 100644 --- a/advisories/unreviewed/2022/05/GHSA-jr4h-pv5f-qr33/GHSA-jr4h-pv5f-qr33.json +++ b/advisories/unreviewed/2022/05/GHSA-jr4h-pv5f-qr33/GHSA-jr4h-pv5f-qr33.json @@ -7,12 +7,8 @@ "CVE-2021-22220" ], "details": "An issue has been discovered in GitLab affecting all versions starting with 13.10. GitLab was vulnerable to a stored XSS in blob viewer of notebooks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jv76-23h2-c485/GHSA-jv76-23h2-c485.json b/advisories/unreviewed/2022/05/GHSA-jv76-23h2-c485/GHSA-jv76-23h2-c485.json index 5be8351caf5..85e647d93c5 100644 --- a/advisories/unreviewed/2022/05/GHSA-jv76-23h2-c485/GHSA-jv76-23h2-c485.json +++ b/advisories/unreviewed/2022/05/GHSA-jv76-23h2-c485/GHSA-jv76-23h2-c485.json @@ -7,12 +7,8 @@ "CVE-2021-22759" ], "details": "A CWE-416: Use after free vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to use of unchecked input data, when a malicious CGF file is imported to IGSS Definition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jvj9-7hf6-7fr7/GHSA-jvj9-7hf6-7fr7.json b/advisories/unreviewed/2022/05/GHSA-jvj9-7hf6-7fr7/GHSA-jvj9-7hf6-7fr7.json index fef999d65c3..6eb331acf1d 100644 --- a/advisories/unreviewed/2022/05/GHSA-jvj9-7hf6-7fr7/GHSA-jvj9-7hf6-7fr7.json +++ b/advisories/unreviewed/2022/05/GHSA-jvj9-7hf6-7fr7/GHSA-jvj9-7hf6-7fr7.json @@ -7,12 +7,8 @@ "CVE-2020-11235" ], "details": "Buffer overflow might occur while parsing unified command due to lack of check of input data received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jx4p-xvh9-mcqx/GHSA-jx4p-xvh9-mcqx.json b/advisories/unreviewed/2022/05/GHSA-jx4p-xvh9-mcqx/GHSA-jx4p-xvh9-mcqx.json index a20d643cd76..b2cee38212d 100644 --- a/advisories/unreviewed/2022/05/GHSA-jx4p-xvh9-mcqx/GHSA-jx4p-xvh9-mcqx.json +++ b/advisories/unreviewed/2022/05/GHSA-jx4p-xvh9-mcqx/GHSA-jx4p-xvh9-mcqx.json @@ -7,12 +7,8 @@ "CVE-2021-24360" ], "details": "The Yes/No Chart WordPress plugin before 1.0.12 did not sanitise its sid shortcode parameter before using it in a SQL statement, allowing medium privilege users (contributor+) to perform Blind SQL Injection attacks", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jx94-cc76-x227/GHSA-jx94-cc76-x227.json b/advisories/unreviewed/2022/05/GHSA-jx94-cc76-x227/GHSA-jx94-cc76-x227.json index 2274263c9eb..bd786095ce5 100644 --- a/advisories/unreviewed/2022/05/GHSA-jx94-cc76-x227/GHSA-jx94-cc76-x227.json +++ b/advisories/unreviewed/2022/05/GHSA-jx94-cc76-x227/GHSA-jx94-cc76-x227.json @@ -7,12 +7,8 @@ "CVE-2005-0011" ], "details": "Multiple vulnerabilities in fliccd, when installed setuid root as part of the kdeedu Kstars support for Instrument Neutral Distributed Interface (INDI) in KDE 3.3 to 3.3.2, allow local users and remote attackers to execute arbitrary code via stack-based buffer overflows.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-jxf8-g6gq-m62f/GHSA-jxf8-g6gq-m62f.json b/advisories/unreviewed/2022/05/GHSA-jxf8-g6gq-m62f/GHSA-jxf8-g6gq-m62f.json index 708e2863844..10af8d35956 100644 --- a/advisories/unreviewed/2022/05/GHSA-jxf8-g6gq-m62f/GHSA-jxf8-g6gq-m62f.json +++ b/advisories/unreviewed/2022/05/GHSA-jxf8-g6gq-m62f/GHSA-jxf8-g6gq-m62f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-jxhq-r9c5-f85p/GHSA-jxhq-r9c5-f85p.json b/advisories/unreviewed/2022/05/GHSA-jxhq-r9c5-f85p/GHSA-jxhq-r9c5-f85p.json index 86b9a36b377..8ca97baa568 100644 --- a/advisories/unreviewed/2022/05/GHSA-jxhq-r9c5-f85p/GHSA-jxhq-r9c5-f85p.json +++ b/advisories/unreviewed/2022/05/GHSA-jxhq-r9c5-f85p/GHSA-jxhq-r9c5-f85p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m28v-7rqj-vxq5/GHSA-m28v-7rqj-vxq5.json b/advisories/unreviewed/2022/05/GHSA-m28v-7rqj-vxq5/GHSA-m28v-7rqj-vxq5.json index 728908ff544..8d1774fb9bf 100644 --- a/advisories/unreviewed/2022/05/GHSA-m28v-7rqj-vxq5/GHSA-m28v-7rqj-vxq5.json +++ b/advisories/unreviewed/2022/05/GHSA-m28v-7rqj-vxq5/GHSA-m28v-7rqj-vxq5.json @@ -7,12 +7,8 @@ "CVE-2021-30519" ], "details": "Use after free in Payments in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious payments app to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m328-rxh6-xc7w/GHSA-m328-rxh6-xc7w.json b/advisories/unreviewed/2022/05/GHSA-m328-rxh6-xc7w/GHSA-m328-rxh6-xc7w.json index 6883960c7c2..25b4cb70422 100644 --- a/advisories/unreviewed/2022/05/GHSA-m328-rxh6-xc7w/GHSA-m328-rxh6-xc7w.json +++ b/advisories/unreviewed/2022/05/GHSA-m328-rxh6-xc7w/GHSA-m328-rxh6-xc7w.json @@ -7,12 +7,8 @@ "CVE-2020-23306" ], "details": "There is a stack-overflow at ecma-regexp-object.c:535 in ecma_regexp_match in JerryScript 2.2.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m3xj-mr5q-ch25/GHSA-m3xj-mr5q-ch25.json b/advisories/unreviewed/2022/05/GHSA-m3xj-mr5q-ch25/GHSA-m3xj-mr5q-ch25.json index cb0306a9ef3..8402324a50a 100644 --- a/advisories/unreviewed/2022/05/GHSA-m3xj-mr5q-ch25/GHSA-m3xj-mr5q-ch25.json +++ b/advisories/unreviewed/2022/05/GHSA-m3xj-mr5q-ch25/GHSA-m3xj-mr5q-ch25.json @@ -7,12 +7,8 @@ "CVE-2021-32553" ], "details": "It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-17 package apport hooks, it could expose private data to other local users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m45q-r6x2-5q77/GHSA-m45q-r6x2-5q77.json b/advisories/unreviewed/2022/05/GHSA-m45q-r6x2-5q77/GHSA-m45q-r6x2-5q77.json index bdb63ebd6ba..40828fe0e9d 100644 --- a/advisories/unreviewed/2022/05/GHSA-m45q-r6x2-5q77/GHSA-m45q-r6x2-5q77.json +++ b/advisories/unreviewed/2022/05/GHSA-m45q-r6x2-5q77/GHSA-m45q-r6x2-5q77.json @@ -7,12 +7,8 @@ "CVE-2021-34204" ], "details": "D-Link DIR-2640-US 1.01B04 is affected by Insufficiently Protected Credentials. D-Link AC2600(DIR-2640) stores the device system account password in plain text. It does not use linux user management. In addition, the passwords of all devices are the same, and they cannot be modified by normal users. An attacker can easily log in to the target router through the serial port and obtain root privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m4hh-q8q7-hhmv/GHSA-m4hh-q8q7-hhmv.json b/advisories/unreviewed/2022/05/GHSA-m4hh-q8q7-hhmv/GHSA-m4hh-q8q7-hhmv.json index 245597a0f9c..7b7fba92c3e 100644 --- a/advisories/unreviewed/2022/05/GHSA-m4hh-q8q7-hhmv/GHSA-m4hh-q8q7-hhmv.json +++ b/advisories/unreviewed/2022/05/GHSA-m4hh-q8q7-hhmv/GHSA-m4hh-q8q7-hhmv.json @@ -7,12 +7,8 @@ "CVE-2021-26835" ], "details": "No filtering of cross-site scripting (XSS) payloads in the markdown-editor in Zettlr 1.8.7 allows attackers to perform remote code execution via a crafted file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m4w4-9m3w-pg34/GHSA-m4w4-9m3w-pg34.json b/advisories/unreviewed/2022/05/GHSA-m4w4-9m3w-pg34/GHSA-m4w4-9m3w-pg34.json index 372efb1369b..fa31a73b6a4 100644 --- a/advisories/unreviewed/2022/05/GHSA-m4w4-9m3w-pg34/GHSA-m4w4-9m3w-pg34.json +++ b/advisories/unreviewed/2022/05/GHSA-m4w4-9m3w-pg34/GHSA-m4w4-9m3w-pg34.json @@ -7,12 +7,8 @@ "CVE-2005-0044" ], "details": "The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of messages for certain OLE data, which allows remote attackers to execute arbitrary code, aka the \"Input Validation Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -52,9 +48,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-m797-g8f3-8vq7/GHSA-m797-g8f3-8vq7.json b/advisories/unreviewed/2022/05/GHSA-m797-g8f3-8vq7/GHSA-m797-g8f3-8vq7.json index 3064df4bbae..b73139fec15 100644 --- a/advisories/unreviewed/2022/05/GHSA-m797-g8f3-8vq7/GHSA-m797-g8f3-8vq7.json +++ b/advisories/unreviewed/2022/05/GHSA-m797-g8f3-8vq7/GHSA-m797-g8f3-8vq7.json @@ -7,12 +7,8 @@ "CVE-2020-15384" ], "details": "Brocade SANNav before version 2.1.1 contains an information disclosure vulnerability. Successful exploitation of internal server information in the initial login response header.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m85c-f3q8-mx62/GHSA-m85c-f3q8-mx62.json b/advisories/unreviewed/2022/05/GHSA-m85c-f3q8-mx62/GHSA-m85c-f3q8-mx62.json index 06f0fbe968c..a295e51b688 100644 --- a/advisories/unreviewed/2022/05/GHSA-m85c-f3q8-mx62/GHSA-m85c-f3q8-mx62.json +++ b/advisories/unreviewed/2022/05/GHSA-m85c-f3q8-mx62/GHSA-m85c-f3q8-mx62.json @@ -7,12 +7,8 @@ "CVE-2021-33356" ], "details": "Multiple privilege escalation vulnerabilities in RaspAP 1.5 to 2.6.5 could allow an authenticated remote attacker to inject arbitrary commands to /installers/common.sh component that can result in remote command execution with root privileges.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m973-fp7m-pq93/GHSA-m973-fp7m-pq93.json b/advisories/unreviewed/2022/05/GHSA-m973-fp7m-pq93/GHSA-m973-fp7m-pq93.json index 059841dbcbc..806bc5083e7 100644 --- a/advisories/unreviewed/2022/05/GHSA-m973-fp7m-pq93/GHSA-m973-fp7m-pq93.json +++ b/advisories/unreviewed/2022/05/GHSA-m973-fp7m-pq93/GHSA-m973-fp7m-pq93.json @@ -7,12 +7,8 @@ "CVE-2021-30507" ], "details": "Inappropriate implementation in Offline in Google Chrome on Android prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m9mw-87c3-2c57/GHSA-m9mw-87c3-2c57.json b/advisories/unreviewed/2022/05/GHSA-m9mw-87c3-2c57/GHSA-m9mw-87c3-2c57.json index cc03d6bfa4f..bc73363e1af 100644 --- a/advisories/unreviewed/2022/05/GHSA-m9mw-87c3-2c57/GHSA-m9mw-87c3-2c57.json +++ b/advisories/unreviewed/2022/05/GHSA-m9mw-87c3-2c57/GHSA-m9mw-87c3-2c57.json @@ -7,12 +7,8 @@ "CVE-2021-31477" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of GE Reason RPV311 14A03. Authentication is not required to exploit this vulnerability. The specific flaw exists within the firmware and filesystem of the device. The firmware and filesystem contain hard-coded default credentials. An attacker can leverage this vulnerability to execute code in the context of the download user. Was ZDI-CAN-11852.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-m9xj-cg7r-3q86/GHSA-m9xj-cg7r-3q86.json b/advisories/unreviewed/2022/05/GHSA-m9xj-cg7r-3q86/GHSA-m9xj-cg7r-3q86.json index a59f85a22f4..f0e995f562d 100644 --- a/advisories/unreviewed/2022/05/GHSA-m9xj-cg7r-3q86/GHSA-m9xj-cg7r-3q86.json +++ b/advisories/unreviewed/2022/05/GHSA-m9xj-cg7r-3q86/GHSA-m9xj-cg7r-3q86.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mcm4-9m83-86m6/GHSA-mcm4-9m83-86m6.json b/advisories/unreviewed/2022/05/GHSA-mcm4-9m83-86m6/GHSA-mcm4-9m83-86m6.json index 55fad5c6739..8885647fb46 100644 --- a/advisories/unreviewed/2022/05/GHSA-mcm4-9m83-86m6/GHSA-mcm4-9m83-86m6.json +++ b/advisories/unreviewed/2022/05/GHSA-mcm4-9m83-86m6/GHSA-mcm4-9m83-86m6.json @@ -7,12 +7,8 @@ "CVE-2021-0074" ], "details": "Improper permissions in the installer for the Intel(R) Computing Improvement Program software before version 2.4.5982 may allow an authenticated user to potentially enable escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mf3h-4jjh-89fr/GHSA-mf3h-4jjh-89fr.json b/advisories/unreviewed/2022/05/GHSA-mf3h-4jjh-89fr/GHSA-mf3h-4jjh-89fr.json index c6cd9f51e16..426d7248073 100644 --- a/advisories/unreviewed/2022/05/GHSA-mf3h-4jjh-89fr/GHSA-mf3h-4jjh-89fr.json +++ b/advisories/unreviewed/2022/05/GHSA-mf3h-4jjh-89fr/GHSA-mf3h-4jjh-89fr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mgq8-5xmq-672x/GHSA-mgq8-5xmq-672x.json b/advisories/unreviewed/2022/05/GHSA-mgq8-5xmq-672x/GHSA-mgq8-5xmq-672x.json index f3831ed1507..015b78afbd4 100644 --- a/advisories/unreviewed/2022/05/GHSA-mgq8-5xmq-672x/GHSA-mgq8-5xmq-672x.json +++ b/advisories/unreviewed/2022/05/GHSA-mgq8-5xmq-672x/GHSA-mgq8-5xmq-672x.json @@ -7,12 +7,8 @@ "CVE-2021-22753" ], "details": "A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing length checks, when a malicious WSP file is being parsed by IGSS Definition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mh6v-rgfm-g694/GHSA-mh6v-rgfm-g694.json b/advisories/unreviewed/2022/05/GHSA-mh6v-rgfm-g694/GHSA-mh6v-rgfm-g694.json index a3293b77cae..ec5e80b0c49 100644 --- a/advisories/unreviewed/2022/05/GHSA-mh6v-rgfm-g694/GHSA-mh6v-rgfm-g694.json +++ b/advisories/unreviewed/2022/05/GHSA-mh6v-rgfm-g694/GHSA-mh6v-rgfm-g694.json @@ -7,12 +7,8 @@ "CVE-2005-0038" ], "details": "The DNS implementation of PowerDNS 2.9.16 and earlier allows remote attackers to cause a denial of service via a compressed DNS packet with a label length byte with an incorrect offset, which could trigger an infinite loop.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -36,9 +32,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mh7q-v46c-8vpg/GHSA-mh7q-v46c-8vpg.json b/advisories/unreviewed/2022/05/GHSA-mh7q-v46c-8vpg/GHSA-mh7q-v46c-8vpg.json index e136675b627..936a3a3e7d7 100644 --- a/advisories/unreviewed/2022/05/GHSA-mh7q-v46c-8vpg/GHSA-mh7q-v46c-8vpg.json +++ b/advisories/unreviewed/2022/05/GHSA-mh7q-v46c-8vpg/GHSA-mh7q-v46c-8vpg.json @@ -7,12 +7,8 @@ "CVE-2021-23205" ], "details": "Improper Encoding or Escaping in Gallagher Command Centre Server allows a Command Centre Operator to alter the configuration of Controllers and other hardware items beyond their privilege. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); version 8.10 and prior versions.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mhpv-hfp2-2648/GHSA-mhpv-hfp2-2648.json b/advisories/unreviewed/2022/05/GHSA-mhpv-hfp2-2648/GHSA-mhpv-hfp2-2648.json index 5e3dbf73d0f..f5c8f016f9e 100644 --- a/advisories/unreviewed/2022/05/GHSA-mhpv-hfp2-2648/GHSA-mhpv-hfp2-2648.json +++ b/advisories/unreviewed/2022/05/GHSA-mhpv-hfp2-2648/GHSA-mhpv-hfp2-2648.json @@ -7,12 +7,8 @@ "CVE-2021-20591" ], "details": "Uncontrolled Resource Consumption vulnerability in Mitsubishi Electric MELSEC iQ-R series CPU modules (R00/01/02CPU all versions, R04/08/16/32/120(EN)CPU all versions, R08/16/32/120SFCPU all versions, R08/16/32/120PCPU all versions, R08/16/32/120PSFCPU all versions) allows a remote unauthenticated attacker to prevent legitimate clients from connecting to the MELSOFT transmission port (TCP/IP) by not closing a connection properly, which may lead to a denial of service (DoS) condition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mj3q-p8fw-g73r/GHSA-mj3q-p8fw-g73r.json b/advisories/unreviewed/2022/05/GHSA-mj3q-p8fw-g73r/GHSA-mj3q-p8fw-g73r.json index 77deadac085..677d6c90a0c 100644 --- a/advisories/unreviewed/2022/05/GHSA-mj3q-p8fw-g73r/GHSA-mj3q-p8fw-g73r.json +++ b/advisories/unreviewed/2022/05/GHSA-mj3q-p8fw-g73r/GHSA-mj3q-p8fw-g73r.json @@ -7,12 +7,8 @@ "CVE-2021-25408" ], "details": "A possible buffer overflow vulnerability in NPU driver prior to SMR JUN-2021 Release 1 allows arbitrary memory write and code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mj6w-hpf8-f9q2/GHSA-mj6w-hpf8-f9q2.json b/advisories/unreviewed/2022/05/GHSA-mj6w-hpf8-f9q2/GHSA-mj6w-hpf8-f9q2.json index f795eedf72d..b69de625449 100644 --- a/advisories/unreviewed/2022/05/GHSA-mj6w-hpf8-f9q2/GHSA-mj6w-hpf8-f9q2.json +++ b/advisories/unreviewed/2022/05/GHSA-mj6w-hpf8-f9q2/GHSA-mj6w-hpf8-f9q2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mm7c-32r5-jf4j/GHSA-mm7c-32r5-jf4j.json b/advisories/unreviewed/2022/05/GHSA-mm7c-32r5-jf4j/GHSA-mm7c-32r5-jf4j.json index 579aa610f53..ab13c20fc23 100644 --- a/advisories/unreviewed/2022/05/GHSA-mm7c-32r5-jf4j/GHSA-mm7c-32r5-jf4j.json +++ b/advisories/unreviewed/2022/05/GHSA-mm7c-32r5-jf4j/GHSA-mm7c-32r5-jf4j.json @@ -7,12 +7,8 @@ "CVE-2021-33357" ], "details": "A vulnerability exists in RaspAP 2.6 to 2.6.5 in the \"iface\" GET parameter in /ajax/networking/get_netcfg.php, when the \"iface\" parameter value contains special characters such as \";\" which enables an unauthenticated attacker to execute arbitrary OS commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mm8x-4c8c-wh5g/GHSA-mm8x-4c8c-wh5g.json b/advisories/unreviewed/2022/05/GHSA-mm8x-4c8c-wh5g/GHSA-mm8x-4c8c-wh5g.json index 85a4756762f..49f78dfbef7 100644 --- a/advisories/unreviewed/2022/05/GHSA-mm8x-4c8c-wh5g/GHSA-mm8x-4c8c-wh5g.json +++ b/advisories/unreviewed/2022/05/GHSA-mm8x-4c8c-wh5g/GHSA-mm8x-4c8c-wh5g.json @@ -7,12 +7,8 @@ "CVE-2021-0090" ], "details": "Uncontrolled search path element in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mmm7-3gcg-h332/GHSA-mmm7-3gcg-h332.json b/advisories/unreviewed/2022/05/GHSA-mmm7-3gcg-h332/GHSA-mmm7-3gcg-h332.json index 50b97a4d38a..97d1a17968c 100644 --- a/advisories/unreviewed/2022/05/GHSA-mmm7-3gcg-h332/GHSA-mmm7-3gcg-h332.json +++ b/advisories/unreviewed/2022/05/GHSA-mmm7-3gcg-h332/GHSA-mmm7-3gcg-h332.json @@ -7,12 +7,8 @@ "CVE-2021-1539" ], "details": "Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow an authenticated, remote attacker to bypass authorization and execute a subset of CLI commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mmq4-v89p-rv4m/GHSA-mmq4-v89p-rv4m.json b/advisories/unreviewed/2022/05/GHSA-mmq4-v89p-rv4m/GHSA-mmq4-v89p-rv4m.json index d72138d7aa2..d6ecb6110be 100644 --- a/advisories/unreviewed/2022/05/GHSA-mmq4-v89p-rv4m/GHSA-mmq4-v89p-rv4m.json +++ b/advisories/unreviewed/2022/05/GHSA-mmq4-v89p-rv4m/GHSA-mmq4-v89p-rv4m.json @@ -7,12 +7,8 @@ "CVE-2021-32548" ], "details": "It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-8 package apport hooks, it could expose private data to other local users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mp65-cj4x-x9fq/GHSA-mp65-cj4x-x9fq.json b/advisories/unreviewed/2022/05/GHSA-mp65-cj4x-x9fq/GHSA-mp65-cj4x-x9fq.json index 920f9459b1a..532def4d6c0 100644 --- a/advisories/unreviewed/2022/05/GHSA-mp65-cj4x-x9fq/GHSA-mp65-cj4x-x9fq.json +++ b/advisories/unreviewed/2022/05/GHSA-mp65-cj4x-x9fq/GHSA-mp65-cj4x-x9fq.json @@ -7,12 +7,8 @@ "CVE-2021-21558" ], "details": "Dell EMC NetWorker, 18.x, 19.1.x, 19.2.x 19.3.x, 19.4 and 19.4.0.1, contains an Information Disclosure vulnerability. A local administrator of the gstd system may potentially exploit this vulnerability to read LDAP credentials from local logs and use the stolen credentials to make changes to the network domain.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mp9c-hcmq-rrcj/GHSA-mp9c-hcmq-rrcj.json b/advisories/unreviewed/2022/05/GHSA-mp9c-hcmq-rrcj/GHSA-mp9c-hcmq-rrcj.json index 7dbab4484fa..f8c060fe16b 100644 --- a/advisories/unreviewed/2022/05/GHSA-mp9c-hcmq-rrcj/GHSA-mp9c-hcmq-rrcj.json +++ b/advisories/unreviewed/2022/05/GHSA-mp9c-hcmq-rrcj/GHSA-mp9c-hcmq-rrcj.json @@ -7,12 +7,8 @@ "CVE-2005-0071" ], "details": "vdr before 1.2.6 does not securely create files, which allows attackers to overwrite arbitrary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-mqmr-qq67-c6hj/GHSA-mqmr-qq67-c6hj.json b/advisories/unreviewed/2022/05/GHSA-mqmr-qq67-c6hj/GHSA-mqmr-qq67-c6hj.json index 8ae6fcb6a10..20a4bf46c00 100644 --- a/advisories/unreviewed/2022/05/GHSA-mqmr-qq67-c6hj/GHSA-mqmr-qq67-c6hj.json +++ b/advisories/unreviewed/2022/05/GHSA-mqmr-qq67-c6hj/GHSA-mqmr-qq67-c6hj.json @@ -7,12 +7,8 @@ "CVE-2020-27383" ], "details": "Battle.net.exe in Battle.Net 1.27.1.12428 suffers from an elevation of privileges vulnerability which can be used by an \"Authenticated User\" to modify the existing executable file with a binary of his choice. The vulnerability exist due to weak set of permissions being granted to the \"Authenticated Users Group\" which grants the (F) Flag aka \"Full Control\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mr4q-c5gm-372q/GHSA-mr4q-c5gm-372q.json b/advisories/unreviewed/2022/05/GHSA-mr4q-c5gm-372q/GHSA-mr4q-c5gm-372q.json index 72fd79c30ca..b3d287b02b9 100644 --- a/advisories/unreviewed/2022/05/GHSA-mr4q-c5gm-372q/GHSA-mr4q-c5gm-372q.json +++ b/advisories/unreviewed/2022/05/GHSA-mr4q-c5gm-372q/GHSA-mr4q-c5gm-372q.json @@ -7,12 +7,8 @@ "CVE-2020-11256" ], "details": "Memory corruption due to lack of check of validation of pointer to buffer passed to trustzone in Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mrfp-7m85-53j8/GHSA-mrfp-7m85-53j8.json b/advisories/unreviewed/2022/05/GHSA-mrfp-7m85-53j8/GHSA-mrfp-7m85-53j8.json index 1adb7aa368e..e67d5f281ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-mrfp-7m85-53j8/GHSA-mrfp-7m85-53j8.json +++ b/advisories/unreviewed/2022/05/GHSA-mrfp-7m85-53j8/GHSA-mrfp-7m85-53j8.json @@ -7,12 +7,8 @@ "CVE-2021-25404" ], "details": "Information Exposure vulnerability in SmartThings prior to version 1.7.64.21 allows attacker to access user information via log.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mv9f-rw8q-hv5f/GHSA-mv9f-rw8q-hv5f.json b/advisories/unreviewed/2022/05/GHSA-mv9f-rw8q-hv5f/GHSA-mv9f-rw8q-hv5f.json index 52278d84da6..09bdf4e06ee 100644 --- a/advisories/unreviewed/2022/05/GHSA-mv9f-rw8q-hv5f/GHSA-mv9f-rw8q-hv5f.json +++ b/advisories/unreviewed/2022/05/GHSA-mv9f-rw8q-hv5f/GHSA-mv9f-rw8q-hv5f.json @@ -7,12 +7,8 @@ "CVE-2021-0467" ], "details": "In Chromecast bootROM, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege in the bootloader, with physical USB access, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-174490700", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mvwx-m8xx-54c6/GHSA-mvwx-m8xx-54c6.json b/advisories/unreviewed/2022/05/GHSA-mvwx-m8xx-54c6/GHSA-mvwx-m8xx-54c6.json index 26485b7eb83..e143ae69747 100644 --- a/advisories/unreviewed/2022/05/GHSA-mvwx-m8xx-54c6/GHSA-mvwx-m8xx-54c6.json +++ b/advisories/unreviewed/2022/05/GHSA-mvwx-m8xx-54c6/GHSA-mvwx-m8xx-54c6.json @@ -7,12 +7,8 @@ "CVE-2021-22914" ], "details": "Citrix Cloud Connector before 6.31.0.62192 suffers from insecure storage of sensitive information due to sensitive information being stored in the Citrix Cloud Connector installation log files. Such information could be used by an malicious actor to access a Citrix Cloud environment. This issue affects all versions of Citrix Cloud Connector that were installed by passing secure client parameters for installation via the command line. The issue does not affect Citrix Cloud Connector if it was installed using the interactive installer or where a parameter file was used with the command-line installer.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mxfq-2f4m-ph69/GHSA-mxfq-2f4m-ph69.json b/advisories/unreviewed/2022/05/GHSA-mxfq-2f4m-ph69/GHSA-mxfq-2f4m-ph69.json index 8db0faab999..19d21e6b8ba 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxfq-2f4m-ph69/GHSA-mxfq-2f4m-ph69.json +++ b/advisories/unreviewed/2022/05/GHSA-mxfq-2f4m-ph69/GHSA-mxfq-2f4m-ph69.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mxjq-42m3-vg3c/GHSA-mxjq-42m3-vg3c.json b/advisories/unreviewed/2022/05/GHSA-mxjq-42m3-vg3c/GHSA-mxjq-42m3-vg3c.json index 7404849881d..41392da6b7a 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxjq-42m3-vg3c/GHSA-mxjq-42m3-vg3c.json +++ b/advisories/unreviewed/2022/05/GHSA-mxjq-42m3-vg3c/GHSA-mxjq-42m3-vg3c.json @@ -7,12 +7,8 @@ "CVE-2020-15379" ], "details": "Brocade SANnav before v.2.1.0a could allow remote attackers cause a denial-of-service condition due to a lack of proper validation, of the length of user-supplied data as name for custom field name.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-mxmq-w35f-5fr4/GHSA-mxmq-w35f-5fr4.json b/advisories/unreviewed/2022/05/GHSA-mxmq-w35f-5fr4/GHSA-mxmq-w35f-5fr4.json index 65d9a94fb1f..5d33a483810 100644 --- a/advisories/unreviewed/2022/05/GHSA-mxmq-w35f-5fr4/GHSA-mxmq-w35f-5fr4.json +++ b/advisories/unreviewed/2022/05/GHSA-mxmq-w35f-5fr4/GHSA-mxmq-w35f-5fr4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p246-m8pm-4pjp/GHSA-p246-m8pm-4pjp.json b/advisories/unreviewed/2022/05/GHSA-p246-m8pm-4pjp/GHSA-p246-m8pm-4pjp.json index 6d3d3ddff79..89a1e0ca56e 100644 --- a/advisories/unreviewed/2022/05/GHSA-p246-m8pm-4pjp/GHSA-p246-m8pm-4pjp.json +++ b/advisories/unreviewed/2022/05/GHSA-p246-m8pm-4pjp/GHSA-p246-m8pm-4pjp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p368-c945-f4gq/GHSA-p368-c945-f4gq.json b/advisories/unreviewed/2022/05/GHSA-p368-c945-f4gq/GHSA-p368-c945-f4gq.json index 8d517d88575..9970546f6d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-p368-c945-f4gq/GHSA-p368-c945-f4gq.json +++ b/advisories/unreviewed/2022/05/GHSA-p368-c945-f4gq/GHSA-p368-c945-f4gq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p3j7-5j28-hvpx/GHSA-p3j7-5j28-hvpx.json b/advisories/unreviewed/2022/05/GHSA-p3j7-5j28-hvpx/GHSA-p3j7-5j28-hvpx.json index 544144fb687..7c7e4ece4a7 100644 --- a/advisories/unreviewed/2022/05/GHSA-p3j7-5j28-hvpx/GHSA-p3j7-5j28-hvpx.json +++ b/advisories/unreviewed/2022/05/GHSA-p3j7-5j28-hvpx/GHSA-p3j7-5j28-hvpx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p4hj-vwj4-2jj3/GHSA-p4hj-vwj4-2jj3.json b/advisories/unreviewed/2022/05/GHSA-p4hj-vwj4-2jj3/GHSA-p4hj-vwj4-2jj3.json index 8039b2f6f14..8c6ababe0a5 100644 --- a/advisories/unreviewed/2022/05/GHSA-p4hj-vwj4-2jj3/GHSA-p4hj-vwj4-2jj3.json +++ b/advisories/unreviewed/2022/05/GHSA-p4hj-vwj4-2jj3/GHSA-p4hj-vwj4-2jj3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p4mj-wj62-mjr9/GHSA-p4mj-wj62-mjr9.json b/advisories/unreviewed/2022/05/GHSA-p4mj-wj62-mjr9/GHSA-p4mj-wj62-mjr9.json index c1d8c17a0ec..187c11288ac 100644 --- a/advisories/unreviewed/2022/05/GHSA-p4mj-wj62-mjr9/GHSA-p4mj-wj62-mjr9.json +++ b/advisories/unreviewed/2022/05/GHSA-p4mj-wj62-mjr9/GHSA-p4mj-wj62-mjr9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p52r-cj24-79f7/GHSA-p52r-cj24-79f7.json b/advisories/unreviewed/2022/05/GHSA-p52r-cj24-79f7/GHSA-p52r-cj24-79f7.json index b9893c51528..75dbc55e153 100644 --- a/advisories/unreviewed/2022/05/GHSA-p52r-cj24-79f7/GHSA-p52r-cj24-79f7.json +++ b/advisories/unreviewed/2022/05/GHSA-p52r-cj24-79f7/GHSA-p52r-cj24-79f7.json @@ -7,12 +7,8 @@ "CVE-2021-33879" ], "details": "Tencent GameLoop before 4.1.21.90 downloaded updates over an insecure HTTP connection. A malicious attacker in an MITM position could spoof the contents of an XML document describing an update package, replacing a download URL with one pointing to an arbitrary Windows executable. Because the only integrity check would be a comparison of the downloaded file's MD5 checksum to the one contained within the XML document, the downloaded executable would then be executed on the victim's machine.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p679-9868-rrq6/GHSA-p679-9868-rrq6.json b/advisories/unreviewed/2022/05/GHSA-p679-9868-rrq6/GHSA-p679-9868-rrq6.json index 2ee8c9d3547..ea5ad03bc86 100644 --- a/advisories/unreviewed/2022/05/GHSA-p679-9868-rrq6/GHSA-p679-9868-rrq6.json +++ b/advisories/unreviewed/2022/05/GHSA-p679-9868-rrq6/GHSA-p679-9868-rrq6.json @@ -7,12 +7,8 @@ "CVE-2021-23023" ], "details": "On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, a DLL hijacking issue exists in cachecleaner.dll included in the BIG-IP Edge Client Windows Installer. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p6gj-r775-94g2/GHSA-p6gj-r775-94g2.json b/advisories/unreviewed/2022/05/GHSA-p6gj-r775-94g2/GHSA-p6gj-r775-94g2.json index 471ea2caa34..084507703c2 100644 --- a/advisories/unreviewed/2022/05/GHSA-p6gj-r775-94g2/GHSA-p6gj-r775-94g2.json +++ b/advisories/unreviewed/2022/05/GHSA-p6gj-r775-94g2/GHSA-p6gj-r775-94g2.json @@ -7,12 +7,8 @@ "CVE-2020-22199" ], "details": "SQL Injection vulnerability in phpCMS 2007 SP6 build 0805 via the digg_mod parameter to digg_add.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p74c-jf66-6rw3/GHSA-p74c-jf66-6rw3.json b/advisories/unreviewed/2022/05/GHSA-p74c-jf66-6rw3/GHSA-p74c-jf66-6rw3.json index 38b785624d8..30da6ad3d76 100644 --- a/advisories/unreviewed/2022/05/GHSA-p74c-jf66-6rw3/GHSA-p74c-jf66-6rw3.json +++ b/advisories/unreviewed/2022/05/GHSA-p74c-jf66-6rw3/GHSA-p74c-jf66-6rw3.json @@ -7,12 +7,8 @@ "CVE-2021-26997" ], "details": "E-Series SANtricity OS Controller Software 11.x versions prior to 11.70.1 are susceptible to a vulnerability which when successfully exploited could allow a remote attacker to discover information via error messaging which may aid in crafting more complex attacks.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p75q-98c9-c3h5/GHSA-p75q-98c9-c3h5.json b/advisories/unreviewed/2022/05/GHSA-p75q-98c9-c3h5/GHSA-p75q-98c9-c3h5.json index 6c280b01d52..56e8846eacc 100644 --- a/advisories/unreviewed/2022/05/GHSA-p75q-98c9-c3h5/GHSA-p75q-98c9-c3h5.json +++ b/advisories/unreviewed/2022/05/GHSA-p75q-98c9-c3h5/GHSA-p75q-98c9-c3h5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p7m7-5qjr-xf2q/GHSA-p7m7-5qjr-xf2q.json b/advisories/unreviewed/2022/05/GHSA-p7m7-5qjr-xf2q/GHSA-p7m7-5qjr-xf2q.json index a2fc7a560c8..edd9bd4ca77 100644 --- a/advisories/unreviewed/2022/05/GHSA-p7m7-5qjr-xf2q/GHSA-p7m7-5qjr-xf2q.json +++ b/advisories/unreviewed/2022/05/GHSA-p7m7-5qjr-xf2q/GHSA-p7m7-5qjr-xf2q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p7qp-6j49-x7mq/GHSA-p7qp-6j49-x7mq.json b/advisories/unreviewed/2022/05/GHSA-p7qp-6j49-x7mq/GHSA-p7qp-6j49-x7mq.json index 48345521480..27bbc6448d4 100644 --- a/advisories/unreviewed/2022/05/GHSA-p7qp-6j49-x7mq/GHSA-p7qp-6j49-x7mq.json +++ b/advisories/unreviewed/2022/05/GHSA-p7qp-6j49-x7mq/GHSA-p7qp-6j49-x7mq.json @@ -7,12 +7,8 @@ "CVE-2021-0073" ], "details": "Insufficient control flow management in Intel(R) DSA before version 20.11.50.9 may allow an authenticated user to potentially enable escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p8mp-r47x-w6xp/GHSA-p8mp-r47x-w6xp.json b/advisories/unreviewed/2022/05/GHSA-p8mp-r47x-w6xp/GHSA-p8mp-r47x-w6xp.json index ab141c6f0d3..69ca087e638 100644 --- a/advisories/unreviewed/2022/05/GHSA-p8mp-r47x-w6xp/GHSA-p8mp-r47x-w6xp.json +++ b/advisories/unreviewed/2022/05/GHSA-p8mp-r47x-w6xp/GHSA-p8mp-r47x-w6xp.json @@ -7,12 +7,8 @@ "CVE-2020-12293" ], "details": "Improper control of a resource through its lifetime in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-p96m-fvpc-xvp3/GHSA-p96m-fvpc-xvp3.json b/advisories/unreviewed/2022/05/GHSA-p96m-fvpc-xvp3/GHSA-p96m-fvpc-xvp3.json index 93563face74..a2d51c03783 100644 --- a/advisories/unreviewed/2022/05/GHSA-p96m-fvpc-xvp3/GHSA-p96m-fvpc-xvp3.json +++ b/advisories/unreviewed/2022/05/GHSA-p96m-fvpc-xvp3/GHSA-p96m-fvpc-xvp3.json @@ -7,12 +7,8 @@ "CVE-2019-9475" ], "details": "In /proc/net of the kernel filesystem, there is a possible information leak due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-9496886", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-p9qp-995j-9pxx/GHSA-p9qp-995j-9pxx.json b/advisories/unreviewed/2022/05/GHSA-p9qp-995j-9pxx/GHSA-p9qp-995j-9pxx.json index 346e4fba233..6e391ea8e31 100644 --- a/advisories/unreviewed/2022/05/GHSA-p9qp-995j-9pxx/GHSA-p9qp-995j-9pxx.json +++ b/advisories/unreviewed/2022/05/GHSA-p9qp-995j-9pxx/GHSA-p9qp-995j-9pxx.json @@ -7,12 +7,8 @@ "CVE-2021-31159" ], "details": "Zoho ManageEngine ServiceDesk Plus MSP before 10519 is vulnerable to a User Enumeration bug due to improper error-message generation in the Forgot Password functionality, aka SDPMSP-15732.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pcxr-3rxm-vvmx/GHSA-pcxr-3rxm-vvmx.json b/advisories/unreviewed/2022/05/GHSA-pcxr-3rxm-vvmx/GHSA-pcxr-3rxm-vvmx.json index 7160a0f07c1..2c240453546 100644 --- a/advisories/unreviewed/2022/05/GHSA-pcxr-3rxm-vvmx/GHSA-pcxr-3rxm-vvmx.json +++ b/advisories/unreviewed/2022/05/GHSA-pcxr-3rxm-vvmx/GHSA-pcxr-3rxm-vvmx.json @@ -7,12 +7,8 @@ "CVE-2021-21555" ], "details": "Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a heap-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-ph4h-6428-vj3w/GHSA-ph4h-6428-vj3w.json b/advisories/unreviewed/2022/05/GHSA-ph4h-6428-vj3w/GHSA-ph4h-6428-vj3w.json index 4103df5ce43..6bcf00c8d7d 100644 --- a/advisories/unreviewed/2022/05/GHSA-ph4h-6428-vj3w/GHSA-ph4h-6428-vj3w.json +++ b/advisories/unreviewed/2022/05/GHSA-ph4h-6428-vj3w/GHSA-ph4h-6428-vj3w.json @@ -7,12 +7,8 @@ "CVE-2005-0059" ], "details": "Buffer overflow in the Message Queuing component of Microsoft Windows 2000 and Windows XP SP1 allows remote attackers to execute arbitrary code via a crafted message.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pj47-jf4r-p87v/GHSA-pj47-jf4r-p87v.json b/advisories/unreviewed/2022/05/GHSA-pj47-jf4r-p87v/GHSA-pj47-jf4r-p87v.json index 3fcd62f68f5..ca51d029b1d 100644 --- a/advisories/unreviewed/2022/05/GHSA-pj47-jf4r-p87v/GHSA-pj47-jf4r-p87v.json +++ b/advisories/unreviewed/2022/05/GHSA-pj47-jf4r-p87v/GHSA-pj47-jf4r-p87v.json @@ -7,12 +7,8 @@ "CVE-2021-30529" ], "details": "Use after free in Bookmarks in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pj6h-7x9c-qrff/GHSA-pj6h-7x9c-qrff.json b/advisories/unreviewed/2022/05/GHSA-pj6h-7x9c-qrff/GHSA-pj6h-7x9c-qrff.json index 6872ec174e2..25a77b1f9a1 100644 --- a/advisories/unreviewed/2022/05/GHSA-pj6h-7x9c-qrff/GHSA-pj6h-7x9c-qrff.json +++ b/advisories/unreviewed/2022/05/GHSA-pj6h-7x9c-qrff/GHSA-pj6h-7x9c-qrff.json @@ -7,12 +7,8 @@ "CVE-2021-30526" ], "details": "Out of bounds write in TabStrip in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory write via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pmcv-f6x3-9656/GHSA-pmcv-f6x3-9656.json b/advisories/unreviewed/2022/05/GHSA-pmcv-f6x3-9656/GHSA-pmcv-f6x3-9656.json index 11358a2ef31..d783649c242 100644 --- a/advisories/unreviewed/2022/05/GHSA-pmcv-f6x3-9656/GHSA-pmcv-f6x3-9656.json +++ b/advisories/unreviewed/2022/05/GHSA-pmcv-f6x3-9656/GHSA-pmcv-f6x3-9656.json @@ -7,12 +7,8 @@ "CVE-2005-0034" ], "details": "An \"incorrect assumption\" in the authvalidated validator function in BIND 9.3.0, when DNSSEC is enabled, allows remote attackers to cause a denial of service (named server exit) via crafted DNS packets that cause an internal consistency test (self-check) to fail.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -56,9 +52,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pmg4-2wpj-3r7p/GHSA-pmg4-2wpj-3r7p.json b/advisories/unreviewed/2022/05/GHSA-pmg4-2wpj-3r7p/GHSA-pmg4-2wpj-3r7p.json index a2fb1a52ee8..ecfd8d68b9a 100644 --- a/advisories/unreviewed/2022/05/GHSA-pmg4-2wpj-3r7p/GHSA-pmg4-2wpj-3r7p.json +++ b/advisories/unreviewed/2022/05/GHSA-pmg4-2wpj-3r7p/GHSA-pmg4-2wpj-3r7p.json @@ -7,12 +7,8 @@ "CVE-2020-11306" ], "details": "Possible integer overflow in RPMB counter due to lack of length check on user provided data in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pq9h-r27q-j5px/GHSA-pq9h-r27q-j5px.json b/advisories/unreviewed/2022/05/GHSA-pq9h-r27q-j5px/GHSA-pq9h-r27q-j5px.json index 58a61d87f29..8778139c041 100644 --- a/advisories/unreviewed/2022/05/GHSA-pq9h-r27q-j5px/GHSA-pq9h-r27q-j5px.json +++ b/advisories/unreviewed/2022/05/GHSA-pq9h-r27q-j5px/GHSA-pq9h-r27q-j5px.json @@ -7,12 +7,8 @@ "CVE-2020-12294" ], "details": "Insufficient control flow management in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable denial of service via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-pq9q-4fcv-7rvj/GHSA-pq9q-4fcv-7rvj.json b/advisories/unreviewed/2022/05/GHSA-pq9q-4fcv-7rvj/GHSA-pq9q-4fcv-7rvj.json index 0c7e6e29f57..57668507989 100644 --- a/advisories/unreviewed/2022/05/GHSA-pq9q-4fcv-7rvj/GHSA-pq9q-4fcv-7rvj.json +++ b/advisories/unreviewed/2022/05/GHSA-pq9q-4fcv-7rvj/GHSA-pq9q-4fcv-7rvj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pqc6-p826-c5qw/GHSA-pqc6-p826-c5qw.json b/advisories/unreviewed/2022/05/GHSA-pqc6-p826-c5qw/GHSA-pqc6-p826-c5qw.json index df292487f9b..e487c871580 100644 --- a/advisories/unreviewed/2022/05/GHSA-pqc6-p826-c5qw/GHSA-pqc6-p826-c5qw.json +++ b/advisories/unreviewed/2022/05/GHSA-pqc6-p826-c5qw/GHSA-pqc6-p826-c5qw.json @@ -7,12 +7,8 @@ "CVE-2020-13950" ], "details": "Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-prp9-9gxw-38j8/GHSA-prp9-9gxw-38j8.json b/advisories/unreviewed/2022/05/GHSA-prp9-9gxw-38j8/GHSA-prp9-9gxw-38j8.json index 421e2924a03..5223d5b8a7e 100644 --- a/advisories/unreviewed/2022/05/GHSA-prp9-9gxw-38j8/GHSA-prp9-9gxw-38j8.json +++ b/advisories/unreviewed/2022/05/GHSA-prp9-9gxw-38j8/GHSA-prp9-9gxw-38j8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pw5j-488m-r5q3/GHSA-pw5j-488m-r5q3.json b/advisories/unreviewed/2022/05/GHSA-pw5j-488m-r5q3/GHSA-pw5j-488m-r5q3.json index 85463a63191..55e99410d95 100644 --- a/advisories/unreviewed/2022/05/GHSA-pw5j-488m-r5q3/GHSA-pw5j-488m-r5q3.json +++ b/advisories/unreviewed/2022/05/GHSA-pw5j-488m-r5q3/GHSA-pw5j-488m-r5q3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pw5m-jppf-2qrr/GHSA-pw5m-jppf-2qrr.json b/advisories/unreviewed/2022/05/GHSA-pw5m-jppf-2qrr/GHSA-pw5m-jppf-2qrr.json index fee90251c1a..b4b96dc8446 100644 --- a/advisories/unreviewed/2022/05/GHSA-pw5m-jppf-2qrr/GHSA-pw5m-jppf-2qrr.json +++ b/advisories/unreviewed/2022/05/GHSA-pw5m-jppf-2qrr/GHSA-pw5m-jppf-2qrr.json @@ -7,12 +7,8 @@ "CVE-2020-24662" ], "details": "SmartStream Transaction Lifecycle Management (TLM) Reconciliation Premium (RP) <3.1.0 allows XSS. This was fixed in TLM RP 3.1.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-pxmv-jcw9-ccw9/GHSA-pxmv-jcw9-ccw9.json b/advisories/unreviewed/2022/05/GHSA-pxmv-jcw9-ccw9/GHSA-pxmv-jcw9-ccw9.json index 981d6341462..4d636b6059e 100644 --- a/advisories/unreviewed/2022/05/GHSA-pxmv-jcw9-ccw9/GHSA-pxmv-jcw9-ccw9.json +++ b/advisories/unreviewed/2022/05/GHSA-pxmv-jcw9-ccw9/GHSA-pxmv-jcw9-ccw9.json @@ -7,12 +7,8 @@ "CVE-2021-20380" ], "details": "IBM QRadar Advisor With Watson App 1.1 through 2.5 as used on IBM QRadar SIEM 7.4 could allow a remote user to obtain sensitive information from HTTP requests that could aid in further attacks against the system. IBM X-Force ID: 195712.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q2gq-c3qg-rmqq/GHSA-q2gq-c3qg-rmqq.json b/advisories/unreviewed/2022/05/GHSA-q2gq-c3qg-rmqq/GHSA-q2gq-c3qg-rmqq.json index e7ef152edea..d03f0801073 100644 --- a/advisories/unreviewed/2022/05/GHSA-q2gq-c3qg-rmqq/GHSA-q2gq-c3qg-rmqq.json +++ b/advisories/unreviewed/2022/05/GHSA-q2gq-c3qg-rmqq/GHSA-q2gq-c3qg-rmqq.json @@ -7,12 +7,8 @@ "CVE-2021-31701" ], "details": "Mintty before 3.4.7 mishandles Bracketed Paste Mode.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q33p-c64w-m225/GHSA-q33p-c64w-m225.json b/advisories/unreviewed/2022/05/GHSA-q33p-c64w-m225/GHSA-q33p-c64w-m225.json index d1d5740acd7..f12f0d6e85c 100644 --- a/advisories/unreviewed/2022/05/GHSA-q33p-c64w-m225/GHSA-q33p-c64w-m225.json +++ b/advisories/unreviewed/2022/05/GHSA-q33p-c64w-m225/GHSA-q33p-c64w-m225.json @@ -7,12 +7,8 @@ "CVE-2021-30545" ], "details": "Use after free in Extensions in Google Chrome prior to 91.0.4472.101 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q3qc-r35h-g8rv/GHSA-q3qc-r35h-g8rv.json b/advisories/unreviewed/2022/05/GHSA-q3qc-r35h-g8rv/GHSA-q3qc-r35h-g8rv.json index ea022fe2729..0b4c8094ccd 100644 --- a/advisories/unreviewed/2022/05/GHSA-q3qc-r35h-g8rv/GHSA-q3qc-r35h-g8rv.json +++ b/advisories/unreviewed/2022/05/GHSA-q3qc-r35h-g8rv/GHSA-q3qc-r35h-g8rv.json @@ -7,12 +7,8 @@ "CVE-2021-29702" ], "details": "Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1.4 and 11.5.5 is vulnerable to a denial of service as the server terminates abnormally when executing a specially crafted SELECT statement. IBM X-Force ID: 200658.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q3wq-vgfp-h826/GHSA-q3wq-vgfp-h826.json b/advisories/unreviewed/2022/05/GHSA-q3wq-vgfp-h826/GHSA-q3wq-vgfp-h826.json index 627d28508e3..9fa418e75ba 100644 --- a/advisories/unreviewed/2022/05/GHSA-q3wq-vgfp-h826/GHSA-q3wq-vgfp-h826.json +++ b/advisories/unreviewed/2022/05/GHSA-q3wq-vgfp-h826/GHSA-q3wq-vgfp-h826.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q434-rcg9-v539/GHSA-q434-rcg9-v539.json b/advisories/unreviewed/2022/05/GHSA-q434-rcg9-v539/GHSA-q434-rcg9-v539.json index 844708b3683..a66250582cc 100644 --- a/advisories/unreviewed/2022/05/GHSA-q434-rcg9-v539/GHSA-q434-rcg9-v539.json +++ b/advisories/unreviewed/2022/05/GHSA-q434-rcg9-v539/GHSA-q434-rcg9-v539.json @@ -7,12 +7,8 @@ "CVE-2021-27485" ], "details": "ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could allow an attacker to retrieve the credentials from the web browser.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q4c9-gg27-f3pq/GHSA-q4c9-gg27-f3pq.json b/advisories/unreviewed/2022/05/GHSA-q4c9-gg27-f3pq/GHSA-q4c9-gg27-f3pq.json index 181556ca9b7..fcc96741e44 100644 --- a/advisories/unreviewed/2022/05/GHSA-q4c9-gg27-f3pq/GHSA-q4c9-gg27-f3pq.json +++ b/advisories/unreviewed/2022/05/GHSA-q4c9-gg27-f3pq/GHSA-q4c9-gg27-f3pq.json @@ -7,12 +7,8 @@ "CVE-2021-3491" ], "details": "The io_uring subsystem in the Linux kernel allowed the MAX_RW_COUNT limit to be bypassed in the PROVIDE_BUFFERS operation, which led to negative values being usedin mem_rw when reading /proc//mem. This could be used to create a heap overflow leading to arbitrary code execution in the kernel. It was addressed via commit d1f82808877b (\"io_uring: truncate lengths larger than MAX_RW_COUNT on provide buffers\") (v5.13-rc1) and backported to the stable kernels in v5.12.4, v5.11.21, and v5.10.37. It was introduced in ddf0322db79c (\"io_uring: add IORING_OP_PROVIDE_BUFFERS\") (v5.7-rc1).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q4jj-x7h4-55rf/GHSA-q4jj-x7h4-55rf.json b/advisories/unreviewed/2022/05/GHSA-q4jj-x7h4-55rf/GHSA-q4jj-x7h4-55rf.json index 6510f5988fd..d19ac017ffd 100644 --- a/advisories/unreviewed/2022/05/GHSA-q4jj-x7h4-55rf/GHSA-q4jj-x7h4-55rf.json +++ b/advisories/unreviewed/2022/05/GHSA-q4jj-x7h4-55rf/GHSA-q4jj-x7h4-55rf.json @@ -7,12 +7,8 @@ "CVE-2021-34128" ], "details": "LaikeTui 3.5.0 allows remote authenticated users to execute arbitrary PHP code by using index.php?module=system&action=pay to upload a ZIP archive containing a .php file, as demonstrated by the ../../../../phpinfo.php pathname.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q4x8-j3qf-qc2q/GHSA-q4x8-j3qf-qc2q.json b/advisories/unreviewed/2022/05/GHSA-q4x8-j3qf-qc2q/GHSA-q4x8-j3qf-qc2q.json index 29149de6641..e31ca2b9e0e 100644 --- a/advisories/unreviewed/2022/05/GHSA-q4x8-j3qf-qc2q/GHSA-q4x8-j3qf-qc2q.json +++ b/advisories/unreviewed/2022/05/GHSA-q4x8-j3qf-qc2q/GHSA-q4x8-j3qf-qc2q.json @@ -7,12 +7,8 @@ "CVE-2020-36142" ], "details": "BloofoxCMS 0.5.2.1 allows Directory traversal vulnerability by inserting '../' payloads within the 'fileurl' parameter.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q5v7-h3m6-ch7h/GHSA-q5v7-h3m6-ch7h.json b/advisories/unreviewed/2022/05/GHSA-q5v7-h3m6-ch7h/GHSA-q5v7-h3m6-ch7h.json index d73f5865c5c..04498c4f9b8 100644 --- a/advisories/unreviewed/2022/05/GHSA-q5v7-h3m6-ch7h/GHSA-q5v7-h3m6-ch7h.json +++ b/advisories/unreviewed/2022/05/GHSA-q5v7-h3m6-ch7h/GHSA-q5v7-h3m6-ch7h.json @@ -7,12 +7,8 @@ "CVE-2021-32582" ], "details": "An issue was discovered in ConnectWise Automate before 2021.5. A blind SQL injection vulnerability exists in core agent inventory communication that can enable an attacker to extract database information or administrative credentials from an instance via crafted monitor status responses.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q6cq-2jc2-cpx5/GHSA-q6cq-2jc2-cpx5.json b/advisories/unreviewed/2022/05/GHSA-q6cq-2jc2-cpx5/GHSA-q6cq-2jc2-cpx5.json index 37bdcd6b509..07af2cf206f 100644 --- a/advisories/unreviewed/2022/05/GHSA-q6cq-2jc2-cpx5/GHSA-q6cq-2jc2-cpx5.json +++ b/advisories/unreviewed/2022/05/GHSA-q6cq-2jc2-cpx5/GHSA-q6cq-2jc2-cpx5.json @@ -7,12 +7,8 @@ "CVE-2020-23321" ], "details": "There is a heap-buffer-overflow at lit-strings.c:431 in lit_read_code_unit_from_utf8 in JerryScript 2.2.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q7qj-9xh3-f579/GHSA-q7qj-9xh3-f579.json b/advisories/unreviewed/2022/05/GHSA-q7qj-9xh3-f579/GHSA-q7qj-9xh3-f579.json index d16a7a42575..787d51f58d6 100644 --- a/advisories/unreviewed/2022/05/GHSA-q7qj-9xh3-f579/GHSA-q7qj-9xh3-f579.json +++ b/advisories/unreviewed/2022/05/GHSA-q7qj-9xh3-f579/GHSA-q7qj-9xh3-f579.json @@ -7,12 +7,8 @@ "CVE-2005-0005" ], "details": "Heap-based buffer overflow in psd.c for ImageMagick 6.1.0, 6.1.7, and possibly earlier versions allows remote attackers to execute arbitrary code via a .PSD image file with a large number of layers.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-q7xh-6r4h-f39f/GHSA-q7xh-6r4h-f39f.json b/advisories/unreviewed/2022/05/GHSA-q7xh-6r4h-f39f/GHSA-q7xh-6r4h-f39f.json index 205a6b106a5..a65098faeca 100644 --- a/advisories/unreviewed/2022/05/GHSA-q7xh-6r4h-f39f/GHSA-q7xh-6r4h-f39f.json +++ b/advisories/unreviewed/2022/05/GHSA-q7xh-6r4h-f39f/GHSA-q7xh-6r4h-f39f.json @@ -7,12 +7,8 @@ "CVE-2021-30530" ], "details": "Out of bounds memory access in WebAudio in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q89m-78v7-wxvj/GHSA-q89m-78v7-wxvj.json b/advisories/unreviewed/2022/05/GHSA-q89m-78v7-wxvj/GHSA-q89m-78v7-wxvj.json index 8ad7c17d90c..92956d74930 100644 --- a/advisories/unreviewed/2022/05/GHSA-q89m-78v7-wxvj/GHSA-q89m-78v7-wxvj.json +++ b/advisories/unreviewed/2022/05/GHSA-q89m-78v7-wxvj/GHSA-q89m-78v7-wxvj.json @@ -7,12 +7,8 @@ "CVE-2021-32554" ], "details": "It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg package apport hooks, it could expose private data to other local users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q9cq-5mrc-rfmq/GHSA-q9cq-5mrc-rfmq.json b/advisories/unreviewed/2022/05/GHSA-q9cq-5mrc-rfmq/GHSA-q9cq-5mrc-rfmq.json index 6a457570cb2..db2344d90be 100644 --- a/advisories/unreviewed/2022/05/GHSA-q9cq-5mrc-rfmq/GHSA-q9cq-5mrc-rfmq.json +++ b/advisories/unreviewed/2022/05/GHSA-q9cq-5mrc-rfmq/GHSA-q9cq-5mrc-rfmq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q9w3-4qx4-v262/GHSA-q9w3-4qx4-v262.json b/advisories/unreviewed/2022/05/GHSA-q9w3-4qx4-v262/GHSA-q9w3-4qx4-v262.json index 3e2d6522e05..3a32cc7af8b 100644 --- a/advisories/unreviewed/2022/05/GHSA-q9w3-4qx4-v262/GHSA-q9w3-4qx4-v262.json +++ b/advisories/unreviewed/2022/05/GHSA-q9w3-4qx4-v262/GHSA-q9w3-4qx4-v262.json @@ -7,12 +7,8 @@ "CVE-2021-28858" ], "details": "TP-Link's TL-WPA4220 4.0.2 Build 20180308 Rel.37064 does not use SSL by default. Attacker on the local network can monitor traffic and capture the cookie and other sensitive information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-q9xq-p65j-27m8/GHSA-q9xq-p65j-27m8.json b/advisories/unreviewed/2022/05/GHSA-q9xq-p65j-27m8/GHSA-q9xq-p65j-27m8.json index a7f324253ea..e54c4912d48 100644 --- a/advisories/unreviewed/2022/05/GHSA-q9xq-p65j-27m8/GHSA-q9xq-p65j-27m8.json +++ b/advisories/unreviewed/2022/05/GHSA-q9xq-p65j-27m8/GHSA-q9xq-p65j-27m8.json @@ -7,12 +7,8 @@ "CVE-2021-25418" ], "details": "Improper component protection vulnerability in Samsung Internet prior to version 14.0.1.62 allows untrusted applications to execute arbitrary activity in specific condition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qfqg-fwpj-f3c6/GHSA-qfqg-fwpj-f3c6.json b/advisories/unreviewed/2022/05/GHSA-qfqg-fwpj-f3c6/GHSA-qfqg-fwpj-f3c6.json index 478881f95ee..fb74862b8be 100644 --- a/advisories/unreviewed/2022/05/GHSA-qfqg-fwpj-f3c6/GHSA-qfqg-fwpj-f3c6.json +++ b/advisories/unreviewed/2022/05/GHSA-qfqg-fwpj-f3c6/GHSA-qfqg-fwpj-f3c6.json @@ -7,12 +7,8 @@ "CVE-2021-0497" ], "details": "In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-183461320", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qg22-34xc-h6jh/GHSA-qg22-34xc-h6jh.json b/advisories/unreviewed/2022/05/GHSA-qg22-34xc-h6jh/GHSA-qg22-34xc-h6jh.json index 99cab236a99..b636aa49f2e 100644 --- a/advisories/unreviewed/2022/05/GHSA-qg22-34xc-h6jh/GHSA-qg22-34xc-h6jh.json +++ b/advisories/unreviewed/2022/05/GHSA-qg22-34xc-h6jh/GHSA-qg22-34xc-h6jh.json @@ -7,12 +7,8 @@ "CVE-2021-30133" ], "details": "A cross-site scripting (XSS) vulnerability in CloverDX Server 5.9.0, CloverDX 5.8.1, CloverDX 5.7.0, and earlier allows remote attackers to inject arbitrary web script or HTML via the sessionToken parameter of multiple methods in Simple HTTP API. This is resolved in 5.9.1 and 5.10.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qg5v-4jvf-974x/GHSA-qg5v-4jvf-974x.json b/advisories/unreviewed/2022/05/GHSA-qg5v-4jvf-974x/GHSA-qg5v-4jvf-974x.json index 51f935f1221..af270917037 100644 --- a/advisories/unreviewed/2022/05/GHSA-qg5v-4jvf-974x/GHSA-qg5v-4jvf-974x.json +++ b/advisories/unreviewed/2022/05/GHSA-qg5v-4jvf-974x/GHSA-qg5v-4jvf-974x.json @@ -7,12 +7,8 @@ "CVE-2021-0492" ], "details": "In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-183459078", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qgwp-8g6g-jgww/GHSA-qgwp-8g6g-jgww.json b/advisories/unreviewed/2022/05/GHSA-qgwp-8g6g-jgww/GHSA-qgwp-8g6g-jgww.json index 7ec597f3e93..e9147c930d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-qgwp-8g6g-jgww/GHSA-qgwp-8g6g-jgww.json +++ b/advisories/unreviewed/2022/05/GHSA-qgwp-8g6g-jgww/GHSA-qgwp-8g6g-jgww.json @@ -7,12 +7,8 @@ "CVE-2020-35762" ], "details": "bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows attackers to read local files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qgwp-x6h8-qx34/GHSA-qgwp-x6h8-qx34.json b/advisories/unreviewed/2022/05/GHSA-qgwp-x6h8-qx34/GHSA-qgwp-x6h8-qx34.json index 9d75d51ac20..5154a460b70 100644 --- a/advisories/unreviewed/2022/05/GHSA-qgwp-x6h8-qx34/GHSA-qgwp-x6h8-qx34.json +++ b/advisories/unreviewed/2022/05/GHSA-qgwp-x6h8-qx34/GHSA-qgwp-x6h8-qx34.json @@ -7,12 +7,8 @@ "CVE-2021-25423" ], "details": "Improper log management vulnerability in Watch Active2 PlugIn prior to 2.2.08.21033151 version allows attacker with log permissions to leak Wi-Fi password connected to the user smartphone via log.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qh5w-3vpm-wqgv/GHSA-qh5w-3vpm-wqgv.json b/advisories/unreviewed/2022/05/GHSA-qh5w-3vpm-wqgv/GHSA-qh5w-3vpm-wqgv.json index 20910dac8ea..e8fcbb6fb89 100644 --- a/advisories/unreviewed/2022/05/GHSA-qh5w-3vpm-wqgv/GHSA-qh5w-3vpm-wqgv.json +++ b/advisories/unreviewed/2022/05/GHSA-qh5w-3vpm-wqgv/GHSA-qh5w-3vpm-wqgv.json @@ -7,12 +7,8 @@ "CVE-2021-30525" ], "details": "Use after free in TabGroups in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qjr8-78q2-542w/GHSA-qjr8-78q2-542w.json b/advisories/unreviewed/2022/05/GHSA-qjr8-78q2-542w/GHSA-qjr8-78q2-542w.json index dda13ff2c4d..df6454c3548 100644 --- a/advisories/unreviewed/2022/05/GHSA-qjr8-78q2-542w/GHSA-qjr8-78q2-542w.json +++ b/advisories/unreviewed/2022/05/GHSA-qjr8-78q2-542w/GHSA-qjr8-78q2-542w.json @@ -7,12 +7,8 @@ "CVE-2021-30537" ], "details": "Insufficient policy enforcement in cookies in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass cookie policy via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qm7x-9fq5-8rg4/GHSA-qm7x-9fq5-8rg4.json b/advisories/unreviewed/2022/05/GHSA-qm7x-9fq5-8rg4/GHSA-qm7x-9fq5-8rg4.json index cf4fb368b5d..862f2654443 100644 --- a/advisories/unreviewed/2022/05/GHSA-qm7x-9fq5-8rg4/GHSA-qm7x-9fq5-8rg4.json +++ b/advisories/unreviewed/2022/05/GHSA-qm7x-9fq5-8rg4/GHSA-qm7x-9fq5-8rg4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qmwm-89j5-97f5/GHSA-qmwm-89j5-97f5.json b/advisories/unreviewed/2022/05/GHSA-qmwm-89j5-97f5/GHSA-qmwm-89j5-97f5.json index 06f28a75acc..d311e042893 100644 --- a/advisories/unreviewed/2022/05/GHSA-qmwm-89j5-97f5/GHSA-qmwm-89j5-97f5.json +++ b/advisories/unreviewed/2022/05/GHSA-qmwm-89j5-97f5/GHSA-qmwm-89j5-97f5.json @@ -7,12 +7,8 @@ "CVE-2021-0496" ], "details": "In memory management driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-183467912", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qpcj-526h-j78r/GHSA-qpcj-526h-j78r.json b/advisories/unreviewed/2022/05/GHSA-qpcj-526h-j78r/GHSA-qpcj-526h-j78r.json index ca991534992..fed13c6902a 100644 --- a/advisories/unreviewed/2022/05/GHSA-qpcj-526h-j78r/GHSA-qpcj-526h-j78r.json +++ b/advisories/unreviewed/2022/05/GHSA-qpcj-526h-j78r/GHSA-qpcj-526h-j78r.json @@ -7,12 +7,8 @@ "CVE-2021-30548" ], "details": "Use after free in Loader in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qpjh-j88q-xpmv/GHSA-qpjh-j88q-xpmv.json b/advisories/unreviewed/2022/05/GHSA-qpjh-j88q-xpmv/GHSA-qpjh-j88q-xpmv.json index 48d8129fc3c..6fbc2c46b88 100644 --- a/advisories/unreviewed/2022/05/GHSA-qpjh-j88q-xpmv/GHSA-qpjh-j88q-xpmv.json +++ b/advisories/unreviewed/2022/05/GHSA-qpjh-j88q-xpmv/GHSA-qpjh-j88q-xpmv.json @@ -7,12 +7,8 @@ "CVE-2020-25753" ], "details": "An issue was discovered on Enphase Envoy R3.x and D4.x devices with v3 software. The default admin password is set to the last 6 digits of the serial number. The serial number can be retrieved by an unauthenticated user at /info.xml.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -32,9 +28,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qvx2-v283-5hp3/GHSA-qvx2-v283-5hp3.json b/advisories/unreviewed/2022/05/GHSA-qvx2-v283-5hp3/GHSA-qvx2-v283-5hp3.json index 10ea7269851..f52ca0e6445 100644 --- a/advisories/unreviewed/2022/05/GHSA-qvx2-v283-5hp3/GHSA-qvx2-v283-5hp3.json +++ b/advisories/unreviewed/2022/05/GHSA-qvx2-v283-5hp3/GHSA-qvx2-v283-5hp3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qw47-6jqp-wg7r/GHSA-qw47-6jqp-wg7r.json b/advisories/unreviewed/2022/05/GHSA-qw47-6jqp-wg7r/GHSA-qw47-6jqp-wg7r.json index 0a167e2e68e..022ed73f0ce 100644 --- a/advisories/unreviewed/2022/05/GHSA-qw47-6jqp-wg7r/GHSA-qw47-6jqp-wg7r.json +++ b/advisories/unreviewed/2022/05/GHSA-qw47-6jqp-wg7r/GHSA-qw47-6jqp-wg7r.json @@ -7,12 +7,8 @@ "CVE-2005-0061" ], "details": "The kernel of Microsoft Windows 2000, Windows XP SP1 and SP2, and Windows Server 2003 allows local users to gain privileges via certain access requests.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-qw85-9jj4-rw5g/GHSA-qw85-9jj4-rw5g.json b/advisories/unreviewed/2022/05/GHSA-qw85-9jj4-rw5g/GHSA-qw85-9jj4-rw5g.json index 6b1c608b660..b8028263cae 100644 --- a/advisories/unreviewed/2022/05/GHSA-qw85-9jj4-rw5g/GHSA-qw85-9jj4-rw5g.json +++ b/advisories/unreviewed/2022/05/GHSA-qw85-9jj4-rw5g/GHSA-qw85-9jj4-rw5g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qw8g-gg9h-f9g7/GHSA-qw8g-gg9h-f9g7.json b/advisories/unreviewed/2022/05/GHSA-qw8g-gg9h-f9g7/GHSA-qw8g-gg9h-f9g7.json index eda24289efb..6acb0fa78cb 100644 --- a/advisories/unreviewed/2022/05/GHSA-qw8g-gg9h-f9g7/GHSA-qw8g-gg9h-f9g7.json +++ b/advisories/unreviewed/2022/05/GHSA-qw8g-gg9h-f9g7/GHSA-qw8g-gg9h-f9g7.json @@ -7,12 +7,8 @@ "CVE-2020-11257" ], "details": "Memory corruption due to lack of validation of pointer arguments passed to TrustZone BSP in Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qwg3-2x2m-xw4g/GHSA-qwg3-2x2m-xw4g.json b/advisories/unreviewed/2022/05/GHSA-qwg3-2x2m-xw4g/GHSA-qwg3-2x2m-xw4g.json index 5255358bf2f..9850643070b 100644 --- a/advisories/unreviewed/2022/05/GHSA-qwg3-2x2m-xw4g/GHSA-qwg3-2x2m-xw4g.json +++ b/advisories/unreviewed/2022/05/GHSA-qwg3-2x2m-xw4g/GHSA-qwg3-2x2m-xw4g.json @@ -7,12 +7,8 @@ "CVE-2021-32956" ], "details": "Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to redirection, which may allow an attacker to send a maliciously crafted URL that could result in redirecting a user to a malicious webpage.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qx3w-ghxg-3cm3/GHSA-qx3w-ghxg-3cm3.json b/advisories/unreviewed/2022/05/GHSA-qx3w-ghxg-3cm3/GHSA-qx3w-ghxg-3cm3.json index 1ceafa6181f..481e25266df 100644 --- a/advisories/unreviewed/2022/05/GHSA-qx3w-ghxg-3cm3/GHSA-qx3w-ghxg-3cm3.json +++ b/advisories/unreviewed/2022/05/GHSA-qx3w-ghxg-3cm3/GHSA-qx3w-ghxg-3cm3.json @@ -7,12 +7,8 @@ "CVE-2021-0143" ], "details": "Improper permissions in the installer for the Intel(R) Brand Verification Tool before version 11.0.0.1225 may allow an authenticated user to potentially enable escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qx4x-4grx-47v5/GHSA-qx4x-4grx-47v5.json b/advisories/unreviewed/2022/05/GHSA-qx4x-4grx-47v5/GHSA-qx4x-4grx-47v5.json index 84d93478ff3..a5b47c3ab29 100644 --- a/advisories/unreviewed/2022/05/GHSA-qx4x-4grx-47v5/GHSA-qx4x-4grx-47v5.json +++ b/advisories/unreviewed/2022/05/GHSA-qx4x-4grx-47v5/GHSA-qx4x-4grx-47v5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-qxp7-w377-c4f4/GHSA-qxp7-w377-c4f4.json b/advisories/unreviewed/2022/05/GHSA-qxp7-w377-c4f4/GHSA-qxp7-w377-c4f4.json index 5388b0ad9bf..553e88e2319 100644 --- a/advisories/unreviewed/2022/05/GHSA-qxp7-w377-c4f4/GHSA-qxp7-w377-c4f4.json +++ b/advisories/unreviewed/2022/05/GHSA-qxp7-w377-c4f4/GHSA-qxp7-w377-c4f4.json @@ -7,12 +7,8 @@ "CVE-2021-31343" ], "details": "A vulnerability has been identified in Solid Edge SE2020 (All Versions < 2020MP14), Solid Edge SE2021 (All Versions < SE2021MP5). The jutil.dll library lacks proper validation of user-supplied data when parsing DFT files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12994)", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r22f-gqr9-p5h9/GHSA-r22f-gqr9-p5h9.json b/advisories/unreviewed/2022/05/GHSA-r22f-gqr9-p5h9/GHSA-r22f-gqr9-p5h9.json index 584cefa0755..4e35fa7361c 100644 --- a/advisories/unreviewed/2022/05/GHSA-r22f-gqr9-p5h9/GHSA-r22f-gqr9-p5h9.json +++ b/advisories/unreviewed/2022/05/GHSA-r22f-gqr9-p5h9/GHSA-r22f-gqr9-p5h9.json @@ -7,12 +7,8 @@ "CVE-2021-26197" ], "details": "An issue was discovered in JerryScript 2.4.0. There is a SEGV in main_print_unhandled_exception in main-utils.c file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r26h-xpx8-fmx6/GHSA-r26h-xpx8-fmx6.json b/advisories/unreviewed/2022/05/GHSA-r26h-xpx8-fmx6/GHSA-r26h-xpx8-fmx6.json index 0a12fe8f340..07e523fde8c 100644 --- a/advisories/unreviewed/2022/05/GHSA-r26h-xpx8-fmx6/GHSA-r26h-xpx8-fmx6.json +++ b/advisories/unreviewed/2022/05/GHSA-r26h-xpx8-fmx6/GHSA-r26h-xpx8-fmx6.json @@ -7,12 +7,8 @@ "CVE-2020-24475" ], "details": "Improper initialization in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable denial of service via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r32j-74x2-fg32/GHSA-r32j-74x2-fg32.json b/advisories/unreviewed/2022/05/GHSA-r32j-74x2-fg32/GHSA-r32j-74x2-fg32.json index 542f761a5ea..6bc836f4325 100644 --- a/advisories/unreviewed/2022/05/GHSA-r32j-74x2-fg32/GHSA-r32j-74x2-fg32.json +++ b/advisories/unreviewed/2022/05/GHSA-r32j-74x2-fg32/GHSA-r32j-74x2-fg32.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r3mg-9gmj-rf3j/GHSA-r3mg-9gmj-rf3j.json b/advisories/unreviewed/2022/05/GHSA-r3mg-9gmj-rf3j/GHSA-r3mg-9gmj-rf3j.json index 1be633ce123..b82aee26e97 100644 --- a/advisories/unreviewed/2022/05/GHSA-r3mg-9gmj-rf3j/GHSA-r3mg-9gmj-rf3j.json +++ b/advisories/unreviewed/2022/05/GHSA-r3mg-9gmj-rf3j/GHSA-r3mg-9gmj-rf3j.json @@ -7,12 +7,8 @@ "CVE-2020-11159" ], "details": "Buffer over-read can happen while processing WPA,RSN IE of beacon and response frames if IE length is less than length of frame pointer being accessed in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r55x-5rqx-xv6c/GHSA-r55x-5rqx-xv6c.json b/advisories/unreviewed/2022/05/GHSA-r55x-5rqx-xv6c/GHSA-r55x-5rqx-xv6c.json index 3c4d310086e..fd5f97b4469 100644 --- a/advisories/unreviewed/2022/05/GHSA-r55x-5rqx-xv6c/GHSA-r55x-5rqx-xv6c.json +++ b/advisories/unreviewed/2022/05/GHSA-r55x-5rqx-xv6c/GHSA-r55x-5rqx-xv6c.json @@ -7,12 +7,8 @@ "CVE-2021-30520" ], "details": "Use after free in Tab Strip in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r579-4369-crhp/GHSA-r579-4369-crhp.json b/advisories/unreviewed/2022/05/GHSA-r579-4369-crhp/GHSA-r579-4369-crhp.json index 08820d1ba89..6fab8d5f16b 100644 --- a/advisories/unreviewed/2022/05/GHSA-r579-4369-crhp/GHSA-r579-4369-crhp.json +++ b/advisories/unreviewed/2022/05/GHSA-r579-4369-crhp/GHSA-r579-4369-crhp.json @@ -7,12 +7,8 @@ "CVE-2021-20567" ], "details": "IBM Resilient SOAR V38.0 could allow a local privileged attacker to obtain sensitive information due to improper or nonexisting encryption.IBM X-Force ID: 199239.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r5gj-58j5-98hh/GHSA-r5gj-58j5-98hh.json b/advisories/unreviewed/2022/05/GHSA-r5gj-58j5-98hh/GHSA-r5gj-58j5-98hh.json index af1659bf0e6..dc653af9c3f 100644 --- a/advisories/unreviewed/2022/05/GHSA-r5gj-58j5-98hh/GHSA-r5gj-58j5-98hh.json +++ b/advisories/unreviewed/2022/05/GHSA-r5gj-58j5-98hh/GHSA-r5gj-58j5-98hh.json @@ -7,12 +7,8 @@ "CVE-2020-15381" ], "details": "Brocade SANnav before version 2.1.1 contains an Improper Authentication vulnerability that allows cleartext transmission of authentication credentials of the jmx server.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r5q9-wmfc-68m2/GHSA-r5q9-wmfc-68m2.json b/advisories/unreviewed/2022/05/GHSA-r5q9-wmfc-68m2/GHSA-r5q9-wmfc-68m2.json index c0d5576aaad..74d79f9f855 100644 --- a/advisories/unreviewed/2022/05/GHSA-r5q9-wmfc-68m2/GHSA-r5q9-wmfc-68m2.json +++ b/advisories/unreviewed/2022/05/GHSA-r5q9-wmfc-68m2/GHSA-r5q9-wmfc-68m2.json @@ -7,12 +7,8 @@ "CVE-2021-33898" ], "details": "In Invoice Ninja before 4.4.0, there is an unsafe call to unserialize() in app/Ninja/Repositories/AccountRepository.php that may allow an attacker to deserialize arbitrary PHP classes. In certain contexts, this can result in remote code execution. The attacker's input must be hosted at http://www.geoplugin.net (cleartext HTTP), and thus a successful attack requires spoofing that site or obtaining control of it.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r695-r662-34g4/GHSA-r695-r662-34g4.json b/advisories/unreviewed/2022/05/GHSA-r695-r662-34g4/GHSA-r695-r662-34g4.json index c2860bd267a..f91cce4c64d 100644 --- a/advisories/unreviewed/2022/05/GHSA-r695-r662-34g4/GHSA-r695-r662-34g4.json +++ b/advisories/unreviewed/2022/05/GHSA-r695-r662-34g4/GHSA-r695-r662-34g4.json @@ -7,12 +7,8 @@ "CVE-2021-22751" ], "details": "A CWE-787: Out-of-bounds write vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or execution of arbitrary code due to lack of input validation, when a malicious CGF (Configuration Group File) file is imported to IGSS Definition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r6mr-fq3c-f6ff/GHSA-r6mr-fq3c-f6ff.json b/advisories/unreviewed/2022/05/GHSA-r6mr-fq3c-f6ff/GHSA-r6mr-fq3c-f6ff.json index 62e6fa52a66..e79978daec5 100644 --- a/advisories/unreviewed/2022/05/GHSA-r6mr-fq3c-f6ff/GHSA-r6mr-fq3c-f6ff.json +++ b/advisories/unreviewed/2022/05/GHSA-r6mr-fq3c-f6ff/GHSA-r6mr-fq3c-f6ff.json @@ -7,12 +7,8 @@ "CVE-2021-31538" ], "details": "LANCOM R&S Unified Firewall (UF) devices running LCOS FX 10.5 allow Relative Path Traversal.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r7g6-pgxg-j883/GHSA-r7g6-pgxg-j883.json b/advisories/unreviewed/2022/05/GHSA-r7g6-pgxg-j883/GHSA-r7g6-pgxg-j883.json index f38bb9c5ce2..8f29074dbee 100644 --- a/advisories/unreviewed/2022/05/GHSA-r7g6-pgxg-j883/GHSA-r7g6-pgxg-j883.json +++ b/advisories/unreviewed/2022/05/GHSA-r7g6-pgxg-j883/GHSA-r7g6-pgxg-j883.json @@ -7,12 +7,8 @@ "CVE-2020-18265" ], "details": "Cross Site Request Forgery (CSRF) in Simple-Log v1.6 allows remote attackers to gain privilege and execute arbitrary code via the component \"Simple-Log/admin/admin.php?act=act_add_member\".", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r7gc-9hr7-cjj8/GHSA-r7gc-9hr7-cjj8.json b/advisories/unreviewed/2022/05/GHSA-r7gc-9hr7-cjj8/GHSA-r7gc-9hr7-cjj8.json index f67dee86dca..3f586fe2105 100644 --- a/advisories/unreviewed/2022/05/GHSA-r7gc-9hr7-cjj8/GHSA-r7gc-9hr7-cjj8.json +++ b/advisories/unreviewed/2022/05/GHSA-r7gc-9hr7-cjj8/GHSA-r7gc-9hr7-cjj8.json @@ -7,12 +7,8 @@ "CVE-2005-0057" ], "details": "The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link that triggers an \"unchecked buffer\" in the library, possibly due to a buffer overflow.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-r7pq-69h8-pg3g/GHSA-r7pq-69h8-pg3g.json b/advisories/unreviewed/2022/05/GHSA-r7pq-69h8-pg3g/GHSA-r7pq-69h8-pg3g.json index cd653c8113d..a8e0489b77f 100644 --- a/advisories/unreviewed/2022/05/GHSA-r7pq-69h8-pg3g/GHSA-r7pq-69h8-pg3g.json +++ b/advisories/unreviewed/2022/05/GHSA-r7pq-69h8-pg3g/GHSA-r7pq-69h8-pg3g.json @@ -7,12 +7,8 @@ "CVE-2021-33818" ], "details": "An issue was discovered in UniFi Protect G3 FLEX Camera Version UVC.v4.30.0.67. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-r7rp-hvpm-hqc7/GHSA-r7rp-hvpm-hqc7.json b/advisories/unreviewed/2022/05/GHSA-r7rp-hvpm-hqc7/GHSA-r7rp-hvpm-hqc7.json index 3cb2c6e3fb2..04fbb958c9a 100644 --- a/advisories/unreviewed/2022/05/GHSA-r7rp-hvpm-hqc7/GHSA-r7rp-hvpm-hqc7.json +++ b/advisories/unreviewed/2022/05/GHSA-r7rp-hvpm-hqc7/GHSA-r7rp-hvpm-hqc7.json @@ -7,12 +7,8 @@ "CVE-2020-11126" ], "details": "Possible out of bound read while WLAN frame parsing due to lack of check for body and header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rc2p-cr9j-xgqc/GHSA-rc2p-cr9j-xgqc.json b/advisories/unreviewed/2022/05/GHSA-rc2p-cr9j-xgqc/GHSA-rc2p-cr9j-xgqc.json index 9e6ae8f796e..f0b18cece15 100644 --- a/advisories/unreviewed/2022/05/GHSA-rc2p-cr9j-xgqc/GHSA-rc2p-cr9j-xgqc.json +++ b/advisories/unreviewed/2022/05/GHSA-rc2p-cr9j-xgqc/GHSA-rc2p-cr9j-xgqc.json @@ -7,12 +7,8 @@ "CVE-2021-1937" ], "details": "Reachable assertion is possible while processing peer association WLAN message from host and nonstandard incoming packet in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rf77-wj86-6w9h/GHSA-rf77-wj86-6w9h.json b/advisories/unreviewed/2022/05/GHSA-rf77-wj86-6w9h/GHSA-rf77-wj86-6w9h.json index f0994c248dd..60f4550269b 100644 --- a/advisories/unreviewed/2022/05/GHSA-rf77-wj86-6w9h/GHSA-rf77-wj86-6w9h.json +++ b/advisories/unreviewed/2022/05/GHSA-rf77-wj86-6w9h/GHSA-rf77-wj86-6w9h.json @@ -7,12 +7,8 @@ "CVE-2005-0007" ], "details": "Unknown vulnerability in the DLSw dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (application crash from assertion).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rffw-7gxg-mhhc/GHSA-rffw-7gxg-mhhc.json b/advisories/unreviewed/2022/05/GHSA-rffw-7gxg-mhhc/GHSA-rffw-7gxg-mhhc.json index 80b4afb4887..f322ec47743 100644 --- a/advisories/unreviewed/2022/05/GHSA-rffw-7gxg-mhhc/GHSA-rffw-7gxg-mhhc.json +++ b/advisories/unreviewed/2022/05/GHSA-rffw-7gxg-mhhc/GHSA-rffw-7gxg-mhhc.json @@ -7,12 +7,8 @@ "CVE-2020-11298" ], "details": "While waiting for a response to a callback or listener request, non-secure clients can change permissions to shared memory buffers used by HLOS Invoke Call to secure kernel in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rg35-h597-g86q/GHSA-rg35-h597-g86q.json b/advisories/unreviewed/2022/05/GHSA-rg35-h597-g86q/GHSA-rg35-h597-g86q.json index 17aefaff631..860346bc4c4 100644 --- a/advisories/unreviewed/2022/05/GHSA-rg35-h597-g86q/GHSA-rg35-h597-g86q.json +++ b/advisories/unreviewed/2022/05/GHSA-rg35-h597-g86q/GHSA-rg35-h597-g86q.json @@ -7,12 +7,8 @@ "CVE-2021-30518" ], "details": "Heap buffer overflow in Reader Mode in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rgg4-cq58-9g4h/GHSA-rgg4-cq58-9g4h.json b/advisories/unreviewed/2022/05/GHSA-rgg4-cq58-9g4h/GHSA-rgg4-cq58-9g4h.json index 65f41b46ddf..577fca7f5ac 100644 --- a/advisories/unreviewed/2022/05/GHSA-rgg4-cq58-9g4h/GHSA-rgg4-cq58-9g4h.json +++ b/advisories/unreviewed/2022/05/GHSA-rgg4-cq58-9g4h/GHSA-rgg4-cq58-9g4h.json @@ -7,12 +7,8 @@ "CVE-2021-31252" ], "details": "An open redirect vulnerability exists in BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W, Webpass, and SEMAC devices from CHIYU Technology that can be exploited by sending a link that has a specially crafted URL to convince the user to click on it.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rh4f-mp79-c7jh/GHSA-rh4f-mp79-c7jh.json b/advisories/unreviewed/2022/05/GHSA-rh4f-mp79-c7jh/GHSA-rh4f-mp79-c7jh.json index 4cdc729b968..cb107a5408a 100644 --- a/advisories/unreviewed/2022/05/GHSA-rh4f-mp79-c7jh/GHSA-rh4f-mp79-c7jh.json +++ b/advisories/unreviewed/2022/05/GHSA-rh4f-mp79-c7jh/GHSA-rh4f-mp79-c7jh.json @@ -7,12 +7,8 @@ "CVE-2021-30357" ], "details": "SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rhgv-wgvh-x64j/GHSA-rhgv-wgvh-x64j.json b/advisories/unreviewed/2022/05/GHSA-rhgv-wgvh-x64j/GHSA-rhgv-wgvh-x64j.json index 389d5118201..3bf55aed8b2 100644 --- a/advisories/unreviewed/2022/05/GHSA-rhgv-wgvh-x64j/GHSA-rhgv-wgvh-x64j.json +++ b/advisories/unreviewed/2022/05/GHSA-rhgv-wgvh-x64j/GHSA-rhgv-wgvh-x64j.json @@ -7,12 +7,8 @@ "CVE-2021-0482" ], "details": "In BinderDiedCallback of MediaCodec.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-173791720", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rhmh-v4vm-7q2m/GHSA-rhmh-v4vm-7q2m.json b/advisories/unreviewed/2022/05/GHSA-rhmh-v4vm-7q2m/GHSA-rhmh-v4vm-7q2m.json index fbef85d3cbc..ca329eb527e 100644 --- a/advisories/unreviewed/2022/05/GHSA-rhmh-v4vm-7q2m/GHSA-rhmh-v4vm-7q2m.json +++ b/advisories/unreviewed/2022/05/GHSA-rhmh-v4vm-7q2m/GHSA-rhmh-v4vm-7q2m.json @@ -7,12 +7,8 @@ "CVE-2005-0068" ], "details": "The original design of ICMP does not require authentication for host-generated ICMP error messages, which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged \"Destination Unreachable\" messages, (2) blind throughput-reduction attacks with forged \"Source Quench\" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced. NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rj5v-43f2-c55m/GHSA-rj5v-43f2-c55m.json b/advisories/unreviewed/2022/05/GHSA-rj5v-43f2-c55m/GHSA-rj5v-43f2-c55m.json index ae67e0303aa..b8921dfaf42 100644 --- a/advisories/unreviewed/2022/05/GHSA-rj5v-43f2-c55m/GHSA-rj5v-43f2-c55m.json +++ b/advisories/unreviewed/2022/05/GHSA-rj5v-43f2-c55m/GHSA-rj5v-43f2-c55m.json @@ -7,12 +7,8 @@ "CVE-2020-11233" ], "details": "Time-of-check time-of-use race condition While processing partition entries due to newly created buffer was read again from mmc without validation in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rjr2-7fwp-m54q/GHSA-rjr2-7fwp-m54q.json b/advisories/unreviewed/2022/05/GHSA-rjr2-7fwp-m54q/GHSA-rjr2-7fwp-m54q.json index 7bc21f0e141..c2b1974a264 100644 --- a/advisories/unreviewed/2022/05/GHSA-rjr2-7fwp-m54q/GHSA-rjr2-7fwp-m54q.json +++ b/advisories/unreviewed/2022/05/GHSA-rjr2-7fwp-m54q/GHSA-rjr2-7fwp-m54q.json @@ -7,12 +7,8 @@ "CVE-2020-23308" ], "details": "There is an Assertion 'context_p->stack_top_uint8 == LEXER_EXPRESSION_START' at js-parser-expr.c:3565 in parser_parse_expression in JerryScript 2.2.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rm56-645j-pf84/GHSA-rm56-645j-pf84.json b/advisories/unreviewed/2022/05/GHSA-rm56-645j-pf84/GHSA-rm56-645j-pf84.json index 8b12aefd486..e1bdf778365 100644 --- a/advisories/unreviewed/2022/05/GHSA-rm56-645j-pf84/GHSA-rm56-645j-pf84.json +++ b/advisories/unreviewed/2022/05/GHSA-rm56-645j-pf84/GHSA-rm56-645j-pf84.json @@ -7,12 +7,8 @@ "CVE-2021-34202" ], "details": "There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600(DIR-2640) 1.01B04. Ordinary permissions can be elevated to administrator permissions, resulting in local arbitrary code execution. An attacker can combine other vulnerabilities to further achieve the purpose of remote code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rmmh-2222-6j4v/GHSA-rmmh-2222-6j4v.json b/advisories/unreviewed/2022/05/GHSA-rmmh-2222-6j4v/GHSA-rmmh-2222-6j4v.json index bbe3f1d9356..6aa8e15c688 100644 --- a/advisories/unreviewed/2022/05/GHSA-rmmh-2222-6j4v/GHSA-rmmh-2222-6j4v.json +++ b/advisories/unreviewed/2022/05/GHSA-rmmh-2222-6j4v/GHSA-rmmh-2222-6j4v.json @@ -7,12 +7,8 @@ "CVE-2021-24346" ], "details": "The Stock in & out WordPress plugin through 1.0.4 has a search functionality, the lowest accessible level to it being contributor. The srch POST parameter is not validated, sanitised or escaped before using it in the echo statement, leading to a reflected XSS issue", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rpcc-jvgm-8vrr/GHSA-rpcc-jvgm-8vrr.json b/advisories/unreviewed/2022/05/GHSA-rpcc-jvgm-8vrr/GHSA-rpcc-jvgm-8vrr.json index 1026e91e6e5..87f25719ca8 100644 --- a/advisories/unreviewed/2022/05/GHSA-rpcc-jvgm-8vrr/GHSA-rpcc-jvgm-8vrr.json +++ b/advisories/unreviewed/2022/05/GHSA-rpcc-jvgm-8vrr/GHSA-rpcc-jvgm-8vrr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -43,9 +41,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-rq38-43xh-2f3p/GHSA-rq38-43xh-2f3p.json b/advisories/unreviewed/2022/05/GHSA-rq38-43xh-2f3p/GHSA-rq38-43xh-2f3p.json index 2a45da1a919..827d35136d8 100644 --- a/advisories/unreviewed/2022/05/GHSA-rq38-43xh-2f3p/GHSA-rq38-43xh-2f3p.json +++ b/advisories/unreviewed/2022/05/GHSA-rq38-43xh-2f3p/GHSA-rq38-43xh-2f3p.json @@ -7,12 +7,8 @@ "CVE-2021-1527" ], "details": "A vulnerability in Cisco Webex Player for Windows and MacOS could allow an attacker to cause the affected software to terminate or to gain access to memory state information that is related to the vulnerable application. The vulnerability is due to insufficient validation of values in Webex recording files that are stored in Webex Recording Format (WRF). An attacker could exploit this vulnerability by sending a malicious WRF file to a user as a link or email attachment and then persuading the user to open the file with the affected software on the local system. A successful exploit could allow the attacker to crash the affected software and view memory state information.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rqc9-fff3-q983/GHSA-rqc9-fff3-q983.json b/advisories/unreviewed/2022/05/GHSA-rqc9-fff3-q983/GHSA-rqc9-fff3-q983.json index d6ff51aa26b..37fd187f9bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-rqc9-fff3-q983/GHSA-rqc9-fff3-q983.json +++ b/advisories/unreviewed/2022/05/GHSA-rqc9-fff3-q983/GHSA-rqc9-fff3-q983.json @@ -7,12 +7,8 @@ "CVE-2021-3604" ], "details": "Secure 8 (Evalos) does not validate user input data correctly, allowing a remote attacker to perform a Blind SQL Injection. An attacker could exploit this vulnerability in order to extract information of users and administrator accounts stored in the database.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rqpg-j7j6-g58g/GHSA-rqpg-j7j6-g58g.json b/advisories/unreviewed/2022/05/GHSA-rqpg-j7j6-g58g/GHSA-rqpg-j7j6-g58g.json index 1fadb1dfce4..78a474c66fd 100644 --- a/advisories/unreviewed/2022/05/GHSA-rqpg-j7j6-g58g/GHSA-rqpg-j7j6-g58g.json +++ b/advisories/unreviewed/2022/05/GHSA-rqpg-j7j6-g58g/GHSA-rqpg-j7j6-g58g.json @@ -7,12 +7,8 @@ "CVE-2021-31998" ], "details": "A Incorrect Default Permissions vulnerability in the packaging of inn of SUSE Linux Enterprise Server 11-SP3; openSUSE Backports SLE-15-SP2, openSUSE Leap 15.2 allows local attackers to escalate their privileges from the news user to root. This issue affects: SUSE Linux Enterprise Server 11-SP3 inn version inn-2.4.2-170.21.3.1 and prior versions. openSUSE Backports SLE-15-SP2 inn versions prior to 2.6.2. openSUSE Leap 15.2 inn versions prior to 2.6.2.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rr34-2qgv-579h/GHSA-rr34-2qgv-579h.json b/advisories/unreviewed/2022/05/GHSA-rr34-2qgv-579h/GHSA-rr34-2qgv-579h.json index 41eb5f5330e..0f42818d5ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-rr34-2qgv-579h/GHSA-rr34-2qgv-579h.json +++ b/advisories/unreviewed/2022/05/GHSA-rr34-2qgv-579h/GHSA-rr34-2qgv-579h.json @@ -7,12 +7,8 @@ "CVE-2020-29324" ], "details": "The DLink Router DIR-895L MFC v1.21b05 is vulnerable to credentials disclosure in telnet service through decompilation of firmware, that allows an unauthenticated attacker to gain access to the firmware and to extract sensitive data.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rrg4-28hx-w289/GHSA-rrg4-28hx-w289.json b/advisories/unreviewed/2022/05/GHSA-rrg4-28hx-w289/GHSA-rrg4-28hx-w289.json index b09ed02ffec..ec33c650def 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrg4-28hx-w289/GHSA-rrg4-28hx-w289.json +++ b/advisories/unreviewed/2022/05/GHSA-rrg4-28hx-w289/GHSA-rrg4-28hx-w289.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rrj9-g495-q8w7/GHSA-rrj9-g495-q8w7.json b/advisories/unreviewed/2022/05/GHSA-rrj9-g495-q8w7/GHSA-rrj9-g495-q8w7.json index 01f09302d44..6dd22c12e9c 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrj9-g495-q8w7/GHSA-rrj9-g495-q8w7.json +++ b/advisories/unreviewed/2022/05/GHSA-rrj9-g495-q8w7/GHSA-rrj9-g495-q8w7.json @@ -7,12 +7,8 @@ "CVE-2021-25425" ], "details": "Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to read internal cache data via exported component.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rrqf-rmhw-fr5m/GHSA-rrqf-rmhw-fr5m.json b/advisories/unreviewed/2022/05/GHSA-rrqf-rmhw-fr5m/GHSA-rrqf-rmhw-fr5m.json index 7896e8b7b37..6208d5398b0 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrqf-rmhw-fr5m/GHSA-rrqf-rmhw-fr5m.json +++ b/advisories/unreviewed/2022/05/GHSA-rrqf-rmhw-fr5m/GHSA-rrqf-rmhw-fr5m.json @@ -7,12 +7,8 @@ "CVE-2021-34201" ], "details": "D-Link DIR-2640-US 1.01B04 is vulnerable to Buffer Overflow. There are multiple out-of-bounds vulnerabilities in some processes of D-Link AC2600(DIR-2640). Local ordinary users can overwrite the global variables in the .bss section, causing the process crashes or changes.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rrv8-x3gg-xhjg/GHSA-rrv8-x3gg-xhjg.json b/advisories/unreviewed/2022/05/GHSA-rrv8-x3gg-xhjg/GHSA-rrv8-x3gg-xhjg.json index 289b64fcaf3..e364b71f8be 100644 --- a/advisories/unreviewed/2022/05/GHSA-rrv8-x3gg-xhjg/GHSA-rrv8-x3gg-xhjg.json +++ b/advisories/unreviewed/2022/05/GHSA-rrv8-x3gg-xhjg/GHSA-rrv8-x3gg-xhjg.json @@ -7,12 +7,8 @@ "CVE-2021-24035" ], "details": "A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed path traversal attacks that overwrite WhatsApp files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rw26-jjg5-m83g/GHSA-rw26-jjg5-m83g.json b/advisories/unreviewed/2022/05/GHSA-rw26-jjg5-m83g/GHSA-rw26-jjg5-m83g.json index 1e52c8abb1b..1e4e8505232 100644 --- a/advisories/unreviewed/2022/05/GHSA-rw26-jjg5-m83g/GHSA-rw26-jjg5-m83g.json +++ b/advisories/unreviewed/2022/05/GHSA-rw26-jjg5-m83g/GHSA-rw26-jjg5-m83g.json @@ -7,12 +7,8 @@ "CVE-2021-0097" ], "details": "Path traversal in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable a denial of service via adjacent access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rwrg-4798-hg93/GHSA-rwrg-4798-hg93.json b/advisories/unreviewed/2022/05/GHSA-rwrg-4798-hg93/GHSA-rwrg-4798-hg93.json index 4d26a96d889..5a4538fedad 100644 --- a/advisories/unreviewed/2022/05/GHSA-rwrg-4798-hg93/GHSA-rwrg-4798-hg93.json +++ b/advisories/unreviewed/2022/05/GHSA-rwrg-4798-hg93/GHSA-rwrg-4798-hg93.json @@ -7,12 +7,8 @@ "CVE-2018-25015" ], "details": "An issue was discovered in the Linux kernel before 4.14.16. There is a use-after-free in net/sctp/socket.c for a held lock after a peel off, aka CID-a0ff660058b8.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-rxh2-vw4h-qg4p/GHSA-rxh2-vw4h-qg4p.json b/advisories/unreviewed/2022/05/GHSA-rxh2-vw4h-qg4p/GHSA-rxh2-vw4h-qg4p.json index ab0f06f091a..955edff658c 100644 --- a/advisories/unreviewed/2022/05/GHSA-rxh2-vw4h-qg4p/GHSA-rxh2-vw4h-qg4p.json +++ b/advisories/unreviewed/2022/05/GHSA-rxh2-vw4h-qg4p/GHSA-rxh2-vw4h-qg4p.json @@ -7,12 +7,8 @@ "CVE-2020-1750" ], "details": "A flaw was found in the machine-config-operator that causes an OpenShift node to become unresponsive when a container consumes a large amount of memory. An attacker could use this flaw to deny access to schedule new pods in the OpenShift cluster. This was fixed in openshift/machine-config-operator 4.4.3, openshift/machine-config-operator 4.3.25, openshift/machine-config-operator 4.2.36.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v28h-rmrc-pjvq/GHSA-v28h-rmrc-pjvq.json b/advisories/unreviewed/2022/05/GHSA-v28h-rmrc-pjvq/GHSA-v28h-rmrc-pjvq.json index 5e408432d50..45f903a327a 100644 --- a/advisories/unreviewed/2022/05/GHSA-v28h-rmrc-pjvq/GHSA-v28h-rmrc-pjvq.json +++ b/advisories/unreviewed/2022/05/GHSA-v28h-rmrc-pjvq/GHSA-v28h-rmrc-pjvq.json @@ -7,12 +7,8 @@ "CVE-2021-0489" ], "details": "In memory management driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-183464866", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v32f-c32x-pgfp/GHSA-v32f-c32x-pgfp.json b/advisories/unreviewed/2022/05/GHSA-v32f-c32x-pgfp/GHSA-v32f-c32x-pgfp.json index 091f1ee060a..8fdd53048b0 100644 --- a/advisories/unreviewed/2022/05/GHSA-v32f-c32x-pgfp/GHSA-v32f-c32x-pgfp.json +++ b/advisories/unreviewed/2022/05/GHSA-v32f-c32x-pgfp/GHSA-v32f-c32x-pgfp.json @@ -7,12 +7,8 @@ "CVE-2021-25394" ], "details": "A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v4cx-83wh-93gr/GHSA-v4cx-83wh-93gr.json b/advisories/unreviewed/2022/05/GHSA-v4cx-83wh-93gr/GHSA-v4cx-83wh-93gr.json index f0b1926789e..c06f0610187 100644 --- a/advisories/unreviewed/2022/05/GHSA-v4cx-83wh-93gr/GHSA-v4cx-83wh-93gr.json +++ b/advisories/unreviewed/2022/05/GHSA-v4cx-83wh-93gr/GHSA-v4cx-83wh-93gr.json @@ -7,12 +7,8 @@ "CVE-2021-30522" ], "details": "Use after free in WebAudio in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v4qm-pgvq-h44p/GHSA-v4qm-pgvq-h44p.json b/advisories/unreviewed/2022/05/GHSA-v4qm-pgvq-h44p/GHSA-v4qm-pgvq-h44p.json index 663bbd1d7c0..2b179410d6f 100644 --- a/advisories/unreviewed/2022/05/GHSA-v4qm-pgvq-h44p/GHSA-v4qm-pgvq-h44p.json +++ b/advisories/unreviewed/2022/05/GHSA-v4qm-pgvq-h44p/GHSA-v4qm-pgvq-h44p.json @@ -7,12 +7,8 @@ "CVE-2005-0019" ], "details": "Unknown vulnerability in hztty 2.0 and earlier allows local users to execute arbitrary commands.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -40,9 +36,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v4xf-4525-wqq9/GHSA-v4xf-4525-wqq9.json b/advisories/unreviewed/2022/05/GHSA-v4xf-4525-wqq9/GHSA-v4xf-4525-wqq9.json index 9e449f6425f..2dfcde34260 100644 --- a/advisories/unreviewed/2022/05/GHSA-v4xf-4525-wqq9/GHSA-v4xf-4525-wqq9.json +++ b/advisories/unreviewed/2022/05/GHSA-v4xf-4525-wqq9/GHSA-v4xf-4525-wqq9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v57c-67jc-mg6g/GHSA-v57c-67jc-mg6g.json b/advisories/unreviewed/2022/05/GHSA-v57c-67jc-mg6g/GHSA-v57c-67jc-mg6g.json index 6bdad139131..bc347508421 100644 --- a/advisories/unreviewed/2022/05/GHSA-v57c-67jc-mg6g/GHSA-v57c-67jc-mg6g.json +++ b/advisories/unreviewed/2022/05/GHSA-v57c-67jc-mg6g/GHSA-v57c-67jc-mg6g.json @@ -7,12 +7,8 @@ "CVE-2021-33666" ], "details": "When SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME sniffing, which, in certain circumstances, could be used to facilitate an XSS attack or malware proliferation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v5cq-cqrx-4rpr/GHSA-v5cq-cqrx-4rpr.json b/advisories/unreviewed/2022/05/GHSA-v5cq-cqrx-4rpr/GHSA-v5cq-cqrx-4rpr.json index 282eeb114cb..70d9ab590ae 100644 --- a/advisories/unreviewed/2022/05/GHSA-v5cq-cqrx-4rpr/GHSA-v5cq-cqrx-4rpr.json +++ b/advisories/unreviewed/2022/05/GHSA-v5cq-cqrx-4rpr/GHSA-v5cq-cqrx-4rpr.json @@ -7,12 +7,8 @@ "CVE-2021-25683" ], "details": "It was discovered that the get_starttime() function in data/apport did not properly parse the /proc/pid/stat file from the kernel.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v63x-mvcc-j8h6/GHSA-v63x-mvcc-j8h6.json b/advisories/unreviewed/2022/05/GHSA-v63x-mvcc-j8h6/GHSA-v63x-mvcc-j8h6.json index 3f57f8c1811..7c81fa9b28c 100644 --- a/advisories/unreviewed/2022/05/GHSA-v63x-mvcc-j8h6/GHSA-v63x-mvcc-j8h6.json +++ b/advisories/unreviewed/2022/05/GHSA-v63x-mvcc-j8h6/GHSA-v63x-mvcc-j8h6.json @@ -7,12 +7,8 @@ "CVE-2021-33665" ], "details": "SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML), versions - KRNL64NUC - 7.49, KRNL64UC - 7.49,7.53, KERNEL - 7.49,7.53,7.77,7.81,7.84, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v6rx-85h6-26mf/GHSA-v6rx-85h6-26mf.json b/advisories/unreviewed/2022/05/GHSA-v6rx-85h6-26mf/GHSA-v6rx-85h6-26mf.json index 85d2d2a2809..9753ce3c1a2 100644 --- a/advisories/unreviewed/2022/05/GHSA-v6rx-85h6-26mf/GHSA-v6rx-85h6-26mf.json +++ b/advisories/unreviewed/2022/05/GHSA-v6rx-85h6-26mf/GHSA-v6rx-85h6-26mf.json @@ -7,12 +7,8 @@ "CVE-2021-30509" ], "details": "Out of bounds write in Tab Strip in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory write via a crafted HTML page and a crafted Chrome extension.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v72r-p5gp-cmjm/GHSA-v72r-p5gp-cmjm.json b/advisories/unreviewed/2022/05/GHSA-v72r-p5gp-cmjm/GHSA-v72r-p5gp-cmjm.json index c9160818e6e..5b1aa0aa398 100644 --- a/advisories/unreviewed/2022/05/GHSA-v72r-p5gp-cmjm/GHSA-v72r-p5gp-cmjm.json +++ b/advisories/unreviewed/2022/05/GHSA-v72r-p5gp-cmjm/GHSA-v72r-p5gp-cmjm.json @@ -7,12 +7,8 @@ "CVE-2021-30514" ], "details": "Use after free in Autofill in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v8p8-4vxj-fh58/GHSA-v8p8-4vxj-fh58.json b/advisories/unreviewed/2022/05/GHSA-v8p8-4vxj-fh58/GHSA-v8p8-4vxj-fh58.json index 2c9035c9087..9809b6cb8dc 100644 --- a/advisories/unreviewed/2022/05/GHSA-v8p8-4vxj-fh58/GHSA-v8p8-4vxj-fh58.json +++ b/advisories/unreviewed/2022/05/GHSA-v8p8-4vxj-fh58/GHSA-v8p8-4vxj-fh58.json @@ -7,12 +7,8 @@ "CVE-2020-19202" ], "details": "An authenticated Stored XSS (Cross-site Scripting) exists in the \"captive.cgi\" Captive Portal via the \"Title of Login Page\" text box or \"TITLE\" parameter in IPFire 2.21 (x86_64) - Core Update 130. It allows an authenticated WebGUI user with privileges for the affected page to execute Stored Cross-site Scripting in the Captive Portal page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-v9p7-8r6w-35xh/GHSA-v9p7-8r6w-35xh.json b/advisories/unreviewed/2022/05/GHSA-v9p7-8r6w-35xh/GHSA-v9p7-8r6w-35xh.json index 4a530bf4df9..526ecab16d5 100644 --- a/advisories/unreviewed/2022/05/GHSA-v9p7-8r6w-35xh/GHSA-v9p7-8r6w-35xh.json +++ b/advisories/unreviewed/2022/05/GHSA-v9p7-8r6w-35xh/GHSA-v9p7-8r6w-35xh.json @@ -7,12 +7,8 @@ "CVE-2005-0009" ], "details": "Unknown vulnerability in the Gnutella dissector in Ethereal 0.10.6 through 0.10.8 allows remote attackers to cause a denial of service (application crash).", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-v9xf-fr6m-f93p/GHSA-v9xf-fr6m-f93p.json b/advisories/unreviewed/2022/05/GHSA-v9xf-fr6m-f93p/GHSA-v9xf-fr6m-f93p.json index d38b0790642..e22d4ad14cc 100644 --- a/advisories/unreviewed/2022/05/GHSA-v9xf-fr6m-f93p/GHSA-v9xf-fr6m-f93p.json +++ b/advisories/unreviewed/2022/05/GHSA-v9xf-fr6m-f93p/GHSA-v9xf-fr6m-f93p.json @@ -7,12 +7,8 @@ "CVE-2021-1568" ], "details": "A vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected system. This vulnerability is due to uncontrolled memory allocation. An attacker could exploit this vulnerability by copying a crafted file to a specific folder on the system. A successful exploit could allow the attacker to crash the VPN Agent service when the affected application is launched, causing it to be unavailable to all users of the system. To exploit this vulnerability, the attacker must have valid credentials on a multiuser Windows system.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vc5w-q8wp-g83c/GHSA-vc5w-q8wp-g83c.json b/advisories/unreviewed/2022/05/GHSA-vc5w-q8wp-g83c/GHSA-vc5w-q8wp-g83c.json index 7a7b76f8656..84975528504 100644 --- a/advisories/unreviewed/2022/05/GHSA-vc5w-q8wp-g83c/GHSA-vc5w-q8wp-g83c.json +++ b/advisories/unreviewed/2022/05/GHSA-vc5w-q8wp-g83c/GHSA-vc5w-q8wp-g83c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vj4f-pw6h-mxv3/GHSA-vj4f-pw6h-mxv3.json b/advisories/unreviewed/2022/05/GHSA-vj4f-pw6h-mxv3/GHSA-vj4f-pw6h-mxv3.json index 5e5373aa7eb..58388cb77e7 100644 --- a/advisories/unreviewed/2022/05/GHSA-vj4f-pw6h-mxv3/GHSA-vj4f-pw6h-mxv3.json +++ b/advisories/unreviewed/2022/05/GHSA-vj4f-pw6h-mxv3/GHSA-vj4f-pw6h-mxv3.json @@ -7,12 +7,8 @@ "CVE-2020-23311" ], "details": "There is an Assertion 'context_p->token.type == LEXER_RIGHT_BRACE || context_p->token.type == LEXER_ASSIGN || context_p->token.type == LEXER_COMMA' failed at js-parser-expr.c:3230 in parser_parse_object_initializer in JerryScript 2.2.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vj4w-gfgg-xvgv/GHSA-vj4w-gfgg-xvgv.json b/advisories/unreviewed/2022/05/GHSA-vj4w-gfgg-xvgv/GHSA-vj4w-gfgg-xvgv.json index 11bf56bc372..baa8dd04418 100644 --- a/advisories/unreviewed/2022/05/GHSA-vj4w-gfgg-xvgv/GHSA-vj4w-gfgg-xvgv.json +++ b/advisories/unreviewed/2022/05/GHSA-vj4w-gfgg-xvgv/GHSA-vj4w-gfgg-xvgv.json @@ -7,12 +7,8 @@ "CVE-2021-22756" ], "details": "A CWE-125: Out-of-bounds read vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code execution due to lack of user-supplied data validation, when a malicious CGF file is imported to IGSS Definition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vjg6-2q25-fqrp/GHSA-vjg6-2q25-fqrp.json b/advisories/unreviewed/2022/05/GHSA-vjg6-2q25-fqrp/GHSA-vjg6-2q25-fqrp.json index 21d7ce4bb94..9970fcd08e2 100644 --- a/advisories/unreviewed/2022/05/GHSA-vjg6-2q25-fqrp/GHSA-vjg6-2q25-fqrp.json +++ b/advisories/unreviewed/2022/05/GHSA-vjg6-2q25-fqrp/GHSA-vjg6-2q25-fqrp.json @@ -7,12 +7,8 @@ "CVE-2020-22210" ], "details": "SQL Injection in 74cms 3.2.0 via the x parameter to ajax_officebuilding.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vjmf-6gjx-f4f7/GHSA-vjmf-6gjx-f4f7.json b/advisories/unreviewed/2022/05/GHSA-vjmf-6gjx-f4f7/GHSA-vjmf-6gjx-f4f7.json index cc6f6952f3c..9785e6a169f 100644 --- a/advisories/unreviewed/2022/05/GHSA-vjmf-6gjx-f4f7/GHSA-vjmf-6gjx-f4f7.json +++ b/advisories/unreviewed/2022/05/GHSA-vjmf-6gjx-f4f7/GHSA-vjmf-6gjx-f4f7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vjxr-86p5-m8xc/GHSA-vjxr-86p5-m8xc.json b/advisories/unreviewed/2022/05/GHSA-vjxr-86p5-m8xc/GHSA-vjxr-86p5-m8xc.json index 18915f409bb..4499ea7b5bd 100644 --- a/advisories/unreviewed/2022/05/GHSA-vjxr-86p5-m8xc/GHSA-vjxr-86p5-m8xc.json +++ b/advisories/unreviewed/2022/05/GHSA-vjxr-86p5-m8xc/GHSA-vjxr-86p5-m8xc.json @@ -7,12 +7,8 @@ "CVE-2005-0010" ], "details": "Unknown vulnerability in the MMSE dissector in Ethereal 0.10.4 through 0.10.8 allows remote attackers to cause a denial of service by triggering a free of statically allocated memory.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -64,9 +60,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-vm77-qrc9-gfj5/GHSA-vm77-qrc9-gfj5.json b/advisories/unreviewed/2022/05/GHSA-vm77-qrc9-gfj5/GHSA-vm77-qrc9-gfj5.json index 50585bad48f..fa17858d5ad 100644 --- a/advisories/unreviewed/2022/05/GHSA-vm77-qrc9-gfj5/GHSA-vm77-qrc9-gfj5.json +++ b/advisories/unreviewed/2022/05/GHSA-vm77-qrc9-gfj5/GHSA-vm77-qrc9-gfj5.json @@ -7,12 +7,8 @@ "CVE-2021-30510" ], "details": "Use after free in Aura in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vmf6-w6c6-596g/GHSA-vmf6-w6c6-596g.json b/advisories/unreviewed/2022/05/GHSA-vmf6-w6c6-596g/GHSA-vmf6-w6c6-596g.json index ed8fc6413d5..e7179e1d036 100644 --- a/advisories/unreviewed/2022/05/GHSA-vmf6-w6c6-596g/GHSA-vmf6-w6c6-596g.json +++ b/advisories/unreviewed/2022/05/GHSA-vmf6-w6c6-596g/GHSA-vmf6-w6c6-596g.json @@ -7,12 +7,8 @@ "CVE-2021-33031" ], "details": "In LabCup before > CBC_STACK_ADJUST_SHIFT) >= CBC_STACK_ADJUST_BASE || (CBC_STACK_ADJUST_BASE - (flags >> CBC_STACK_ADJUST_SHIFT)) <= context_p->stack_depth' in parser_emit_cbc_backward_branch in JerryScript 2.2.0.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vwrx-c7f2-w23m/GHSA-vwrx-c7f2-w23m.json b/advisories/unreviewed/2022/05/GHSA-vwrx-c7f2-w23m/GHSA-vwrx-c7f2-w23m.json index 2272246a698..b809ee3bfc2 100644 --- a/advisories/unreviewed/2022/05/GHSA-vwrx-c7f2-w23m/GHSA-vwrx-c7f2-w23m.json +++ b/advisories/unreviewed/2022/05/GHSA-vwrx-c7f2-w23m/GHSA-vwrx-c7f2-w23m.json @@ -7,12 +7,8 @@ "CVE-2021-3256" ], "details": "KuaiFanCMS V5.x contains an arbitrary file read vulnerability in the html_url parameter of the chakanhtml.module.php file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-vxhv-56jq-g8cw/GHSA-vxhv-56jq-g8cw.json b/advisories/unreviewed/2022/05/GHSA-vxhv-56jq-g8cw/GHSA-vxhv-56jq-g8cw.json index 2bcfb7030f2..459c3623998 100644 --- a/advisories/unreviewed/2022/05/GHSA-vxhv-56jq-g8cw/GHSA-vxhv-56jq-g8cw.json +++ b/advisories/unreviewed/2022/05/GHSA-vxhv-56jq-g8cw/GHSA-vxhv-56jq-g8cw.json @@ -7,12 +7,8 @@ "CVE-2021-22761" ], "details": "A CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in disclosure of information or remote code e+F15xecution due to missing length check on user supplied data, when a malicious CGF file is imported to IGSS Definition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w25p-p2xw-87xp/GHSA-w25p-p2xw-87xp.json b/advisories/unreviewed/2022/05/GHSA-w25p-p2xw-87xp/GHSA-w25p-p2xw-87xp.json index 79c1c036b03..a8a72196847 100644 --- a/advisories/unreviewed/2022/05/GHSA-w25p-p2xw-87xp/GHSA-w25p-p2xw-87xp.json +++ b/advisories/unreviewed/2022/05/GHSA-w25p-p2xw-87xp/GHSA-w25p-p2xw-87xp.json @@ -7,12 +7,8 @@ "CVE-2021-34547" ], "details": "PRTG Network Monitor 20.1.55.1775 allows /editsettings CSRF for user account creation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w273-hj4m-f2f7/GHSA-w273-hj4m-f2f7.json b/advisories/unreviewed/2022/05/GHSA-w273-hj4m-f2f7/GHSA-w273-hj4m-f2f7.json index 4321a484903..ea6878c4ab3 100644 --- a/advisories/unreviewed/2022/05/GHSA-w273-hj4m-f2f7/GHSA-w273-hj4m-f2f7.json +++ b/advisories/unreviewed/2022/05/GHSA-w273-hj4m-f2f7/GHSA-w273-hj4m-f2f7.json @@ -7,12 +7,8 @@ "CVE-2020-28713" ], "details": "Incorrect access control in push notification service in Night Owl Smart Doorbell FW version 20190505 allows remote users to send push notification events via an exposed PNS server. A remote attacker can passively record push notification events which are sent over an insecure web request. The web service does not authenticate requests, and allows attackers to send an indefinite amount of motion or doorbell events to a user's mobile application by either replaying or deliberately crafting false events.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w3f5-2mqc-5c62/GHSA-w3f5-2mqc-5c62.json b/advisories/unreviewed/2022/05/GHSA-w3f5-2mqc-5c62/GHSA-w3f5-2mqc-5c62.json index 73948b63042..aa34cbe350f 100644 --- a/advisories/unreviewed/2022/05/GHSA-w3f5-2mqc-5c62/GHSA-w3f5-2mqc-5c62.json +++ b/advisories/unreviewed/2022/05/GHSA-w3f5-2mqc-5c62/GHSA-w3f5-2mqc-5c62.json @@ -7,12 +7,8 @@ "CVE-2021-34812" ], "details": "Use of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0-0761 allows remote attackers to obtain sensitive information via unspecified vectors.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w3x9-635p-2982/GHSA-w3x9-635p-2982.json b/advisories/unreviewed/2022/05/GHSA-w3x9-635p-2982/GHSA-w3x9-635p-2982.json index 48e3c3c2f9b..f747475643c 100644 --- a/advisories/unreviewed/2022/05/GHSA-w3x9-635p-2982/GHSA-w3x9-635p-2982.json +++ b/advisories/unreviewed/2022/05/GHSA-w3x9-635p-2982/GHSA-w3x9-635p-2982.json @@ -7,12 +7,8 @@ "CVE-2021-31658" ], "details": "TP-Link TL-SG2005, TL-SG2008, etc. 1.0.0 Build 20180529 Rel.40524 is affected by an Array index error. The interface that provides the \"device description\" function only judges the length of the received data, and does not filter special characters. This vulnerability will cause the application to crash, and all device configuration information will be erased.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w53g-3x4g-6vhq/GHSA-w53g-3x4g-6vhq.json b/advisories/unreviewed/2022/05/GHSA-w53g-3x4g-6vhq/GHSA-w53g-3x4g-6vhq.json index ba1fa71be8c..cfb0b3d3d9e 100644 --- a/advisories/unreviewed/2022/05/GHSA-w53g-3x4g-6vhq/GHSA-w53g-3x4g-6vhq.json +++ b/advisories/unreviewed/2022/05/GHSA-w53g-3x4g-6vhq/GHSA-w53g-3x4g-6vhq.json @@ -7,12 +7,8 @@ "CVE-2020-11291" ], "details": "Possible buffer overflow while updating ikev2 parameters for delete payloads received during informational exchange due to lack of check of input validation for certain parameters received from the ePDG server in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w57v-wqq6-mfw3/GHSA-w57v-wqq6-mfw3.json b/advisories/unreviewed/2022/05/GHSA-w57v-wqq6-mfw3/GHSA-w57v-wqq6-mfw3.json index 4a85464d51d..e303292a62c 100644 --- a/advisories/unreviewed/2022/05/GHSA-w57v-wqq6-mfw3/GHSA-w57v-wqq6-mfw3.json +++ b/advisories/unreviewed/2022/05/GHSA-w57v-wqq6-mfw3/GHSA-w57v-wqq6-mfw3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w5mw-4w5v-8mgj/GHSA-w5mw-4w5v-8mgj.json b/advisories/unreviewed/2022/05/GHSA-w5mw-4w5v-8mgj/GHSA-w5mw-4w5v-8mgj.json index 8ecf8146980..fa1ae1caf2f 100644 --- a/advisories/unreviewed/2022/05/GHSA-w5mw-4w5v-8mgj/GHSA-w5mw-4w5v-8mgj.json +++ b/advisories/unreviewed/2022/05/GHSA-w5mw-4w5v-8mgj/GHSA-w5mw-4w5v-8mgj.json @@ -7,12 +7,8 @@ "CVE-2021-0498" ], "details": "In memory management driver, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-183461321", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w7f6-m3xq-9982/GHSA-w7f6-m3xq-9982.json b/advisories/unreviewed/2022/05/GHSA-w7f6-m3xq-9982/GHSA-w7f6-m3xq-9982.json index e9dff980c73..9d94e5fddb2 100644 --- a/advisories/unreviewed/2022/05/GHSA-w7f6-m3xq-9982/GHSA-w7f6-m3xq-9982.json +++ b/advisories/unreviewed/2022/05/GHSA-w7f6-m3xq-9982/GHSA-w7f6-m3xq-9982.json @@ -7,12 +7,8 @@ "CVE-2021-24329" ], "details": "The WP Super Cache WordPress plugin before 1.7.3 did not properly sanitise its wp_cache_location parameter in its settings, which could lead to a Stored Cross-Site Scripting issue.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w7rc-w5hg-2vgh/GHSA-w7rc-w5hg-2vgh.json b/advisories/unreviewed/2022/05/GHSA-w7rc-w5hg-2vgh/GHSA-w7rc-w5hg-2vgh.json index e55902c9493..040ceaafe96 100644 --- a/advisories/unreviewed/2022/05/GHSA-w7rc-w5hg-2vgh/GHSA-w7rc-w5hg-2vgh.json +++ b/advisories/unreviewed/2022/05/GHSA-w7rc-w5hg-2vgh/GHSA-w7rc-w5hg-2vgh.json @@ -7,12 +7,8 @@ "CVE-2021-25396" ], "details": "An improper input validation vulnerability in NPU firmware prior to SMR MAY-2021 Release 1 allows arbitrary memory write and code execution.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w84g-hcgf-wmjw/GHSA-w84g-hcgf-wmjw.json b/advisories/unreviewed/2022/05/GHSA-w84g-hcgf-wmjw/GHSA-w84g-hcgf-wmjw.json index 84d67194a96..3326264ac3d 100644 --- a/advisories/unreviewed/2022/05/GHSA-w84g-hcgf-wmjw/GHSA-w84g-hcgf-wmjw.json +++ b/advisories/unreviewed/2022/05/GHSA-w84g-hcgf-wmjw/GHSA-w84g-hcgf-wmjw.json @@ -7,12 +7,8 @@ "CVE-2021-30512" ], "details": "Use after free in Notifications in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-w8m5-fm5h-5qjj/GHSA-w8m5-fm5h-5qjj.json b/advisories/unreviewed/2022/05/GHSA-w8m5-fm5h-5qjj/GHSA-w8m5-fm5h-5qjj.json index c920d4aacd6..abcb0b40d00 100644 --- a/advisories/unreviewed/2022/05/GHSA-w8m5-fm5h-5qjj/GHSA-w8m5-fm5h-5qjj.json +++ b/advisories/unreviewed/2022/05/GHSA-w8m5-fm5h-5qjj/GHSA-w8m5-fm5h-5qjj.json @@ -7,12 +7,8 @@ "CVE-2021-25414" ], "details": "Improper sanitization of incoming intent in Samsung Contacts prior to SMR JUN-2021 Release 1 allows local attackers to copy or overwrite arbitrary files with Samsung Contacts privilege.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wcv3-6q72-gcx7/GHSA-wcv3-6q72-gcx7.json b/advisories/unreviewed/2022/05/GHSA-wcv3-6q72-gcx7/GHSA-wcv3-6q72-gcx7.json index a149241fcc8..8bbfe0c514b 100644 --- a/advisories/unreviewed/2022/05/GHSA-wcv3-6q72-gcx7/GHSA-wcv3-6q72-gcx7.json +++ b/advisories/unreviewed/2022/05/GHSA-wcv3-6q72-gcx7/GHSA-wcv3-6q72-gcx7.json @@ -7,12 +7,8 @@ "CVE-2020-7860" ], "details": "UnEGG v0.5 and eariler versions have a Integer overflow vulnerability, triggered when the user opens a malformed specific file that is mishandled by UnEGG. Attackers could exploit this and arbitrary code execution. This issue affects: Estsoft UnEGG 0.5 versions prior to 1.0 on linux.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wfw6-x9m5-6g55/GHSA-wfw6-x9m5-6g55.json b/advisories/unreviewed/2022/05/GHSA-wfw6-x9m5-6g55/GHSA-wfw6-x9m5-6g55.json index e378e1082cf..d5d115cb583 100644 --- a/advisories/unreviewed/2022/05/GHSA-wfw6-x9m5-6g55/GHSA-wfw6-x9m5-6g55.json +++ b/advisories/unreviewed/2022/05/GHSA-wfw6-x9m5-6g55/GHSA-wfw6-x9m5-6g55.json @@ -7,12 +7,8 @@ "CVE-2020-11266" ], "details": "Image address is dereferenced before validating its range which can cause potential QSEE information leakage in Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -24,9 +20,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wg5j-74wp-pwp4/GHSA-wg5j-74wp-pwp4.json b/advisories/unreviewed/2022/05/GHSA-wg5j-74wp-pwp4/GHSA-wg5j-74wp-pwp4.json index 322d21bef7a..59ef846794a 100644 --- a/advisories/unreviewed/2022/05/GHSA-wg5j-74wp-pwp4/GHSA-wg5j-74wp-pwp4.json +++ b/advisories/unreviewed/2022/05/GHSA-wg5j-74wp-pwp4/GHSA-wg5j-74wp-pwp4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wh2j-wj4x-j48f/GHSA-wh2j-wj4x-j48f.json b/advisories/unreviewed/2022/05/GHSA-wh2j-wj4x-j48f/GHSA-wh2j-wj4x-j48f.json index 6fef729293a..80174dfcabf 100644 --- a/advisories/unreviewed/2022/05/GHSA-wh2j-wj4x-j48f/GHSA-wh2j-wj4x-j48f.json +++ b/advisories/unreviewed/2022/05/GHSA-wh2j-wj4x-j48f/GHSA-wh2j-wj4x-j48f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wh2q-ff35-69g7/GHSA-wh2q-ff35-69g7.json b/advisories/unreviewed/2022/05/GHSA-wh2q-ff35-69g7/GHSA-wh2q-ff35-69g7.json index 7a69c91a9db..143023abd32 100644 --- a/advisories/unreviewed/2022/05/GHSA-wh2q-ff35-69g7/GHSA-wh2q-ff35-69g7.json +++ b/advisories/unreviewed/2022/05/GHSA-wh2q-ff35-69g7/GHSA-wh2q-ff35-69g7.json @@ -7,12 +7,8 @@ "CVE-2021-30544" ], "details": "Use after free in BFCache in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wh39-vjw6-gm9j/GHSA-wh39-vjw6-gm9j.json b/advisories/unreviewed/2022/05/GHSA-wh39-vjw6-gm9j/GHSA-wh39-vjw6-gm9j.json index 479fa57d848..62efe2026f9 100644 --- a/advisories/unreviewed/2022/05/GHSA-wh39-vjw6-gm9j/GHSA-wh39-vjw6-gm9j.json +++ b/advisories/unreviewed/2022/05/GHSA-wh39-vjw6-gm9j/GHSA-wh39-vjw6-gm9j.json @@ -7,12 +7,8 @@ "CVE-2021-0058" ], "details": "Incorrect default permissions in the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wh9m-qrv8-6mfm/GHSA-wh9m-qrv8-6mfm.json b/advisories/unreviewed/2022/05/GHSA-wh9m-qrv8-6mfm/GHSA-wh9m-qrv8-6mfm.json index 573dd1f3b6d..32b714d8bd8 100644 --- a/advisories/unreviewed/2022/05/GHSA-wh9m-qrv8-6mfm/GHSA-wh9m-qrv8-6mfm.json +++ b/advisories/unreviewed/2022/05/GHSA-wh9m-qrv8-6mfm/GHSA-wh9m-qrv8-6mfm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-whr2-cjwc-wj5g/GHSA-whr2-cjwc-wj5g.json b/advisories/unreviewed/2022/05/GHSA-whr2-cjwc-wj5g/GHSA-whr2-cjwc-wj5g.json index f30789824b6..0e24620473b 100644 --- a/advisories/unreviewed/2022/05/GHSA-whr2-cjwc-wj5g/GHSA-whr2-cjwc-wj5g.json +++ b/advisories/unreviewed/2022/05/GHSA-whr2-cjwc-wj5g/GHSA-whr2-cjwc-wj5g.json @@ -7,12 +7,8 @@ "CVE-2005-0065" ], "details": "The original design of TCP does not check that the TCP sequence number in an ICMP error message is within the range of sequence numbers for data that has been sent but not acknowledged (aka \"TCP sequence number checking\"), which makes it easier for attackers to forge ICMP error messages for specific TCP connections and cause a denial of service, as demonstrated using (1) blind connection-reset attacks with forged \"Destination Unreachable\" messages, (2) blind throughput-reduction attacks with forged \"Source Quench\" messages, or (3) blind throughput-reduction attacks with forged ICMP messages that cause the Path MTU to be reduced. NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wm9f-fxpg-mf37/GHSA-wm9f-fxpg-mf37.json b/advisories/unreviewed/2022/05/GHSA-wm9f-fxpg-mf37/GHSA-wm9f-fxpg-mf37.json index aa602bf2e4a..073de894c1f 100644 --- a/advisories/unreviewed/2022/05/GHSA-wm9f-fxpg-mf37/GHSA-wm9f-fxpg-mf37.json +++ b/advisories/unreviewed/2022/05/GHSA-wm9f-fxpg-mf37/GHSA-wm9f-fxpg-mf37.json @@ -7,12 +7,8 @@ "CVE-2005-0063" ], "details": "The document processing application used by the Windows Shell in Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by modifying the CLSID stored in a file so that it is processed by HTML Application Host (MSHTA), as demonstrated using a Microsoft Word document.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wmxv-cm6v-5x65/GHSA-wmxv-cm6v-5x65.json b/advisories/unreviewed/2022/05/GHSA-wmxv-cm6v-5x65/GHSA-wmxv-cm6v-5x65.json index 725d6d03213..0bc57d587c8 100644 --- a/advisories/unreviewed/2022/05/GHSA-wmxv-cm6v-5x65/GHSA-wmxv-cm6v-5x65.json +++ b/advisories/unreviewed/2022/05/GHSA-wmxv-cm6v-5x65/GHSA-wmxv-cm6v-5x65.json @@ -7,12 +7,8 @@ "CVE-2021-31738" ], "details": "Adiscon LogAnalyzer 4.1.10 and 4.1.11 allow login.php XSS.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wr8v-pmcm-77gw/GHSA-wr8v-pmcm-77gw.json b/advisories/unreviewed/2022/05/GHSA-wr8v-pmcm-77gw/GHSA-wr8v-pmcm-77gw.json index 3e54bd15f87..d0610f32c66 100644 --- a/advisories/unreviewed/2022/05/GHSA-wr8v-pmcm-77gw/GHSA-wr8v-pmcm-77gw.json +++ b/advisories/unreviewed/2022/05/GHSA-wr8v-pmcm-77gw/GHSA-wr8v-pmcm-77gw.json @@ -7,12 +7,8 @@ "CVE-2021-32551" ], "details": "It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-15 package apport hooks, it could expose private data to other local users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wrff-x8vj-pq59/GHSA-wrff-x8vj-pq59.json b/advisories/unreviewed/2022/05/GHSA-wrff-x8vj-pq59/GHSA-wrff-x8vj-pq59.json index a2e4c5f8c67..5bee00d087f 100644 --- a/advisories/unreviewed/2022/05/GHSA-wrff-x8vj-pq59/GHSA-wrff-x8vj-pq59.json +++ b/advisories/unreviewed/2022/05/GHSA-wrff-x8vj-pq59/GHSA-wrff-x8vj-pq59.json @@ -7,12 +7,8 @@ "CVE-2021-0055" ], "details": "Insecure inherited permissions for some Intel(R) NUC 9 Extreme Laptop Kit LAN Drivers before version 10.42 may allow an authenticated user to potentially enable escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wrr4-g9p3-q8gw/GHSA-wrr4-g9p3-q8gw.json b/advisories/unreviewed/2022/05/GHSA-wrr4-g9p3-q8gw/GHSA-wrr4-g9p3-q8gw.json index 33924bb8e94..62d98d59a10 100644 --- a/advisories/unreviewed/2022/05/GHSA-wrr4-g9p3-q8gw/GHSA-wrr4-g9p3-q8gw.json +++ b/advisories/unreviewed/2022/05/GHSA-wrr4-g9p3-q8gw/GHSA-wrr4-g9p3-q8gw.json @@ -7,12 +7,8 @@ "CVE-2005-0045" ], "details": "The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing (1) Trans or (2) Trans2 commands, aka the \"Server Message Block Vulnerability,\" and as demonstrated using Trans2 FIND_FIRST2 responses with large file name length fields.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -68,9 +64,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wv2h-444w-8xv6/GHSA-wv2h-444w-8xv6.json b/advisories/unreviewed/2022/05/GHSA-wv2h-444w-8xv6/GHSA-wv2h-444w-8xv6.json index 7ee6c9e72a2..1ec91004d9b 100644 --- a/advisories/unreviewed/2022/05/GHSA-wv2h-444w-8xv6/GHSA-wv2h-444w-8xv6.json +++ b/advisories/unreviewed/2022/05/GHSA-wv2h-444w-8xv6/GHSA-wv2h-444w-8xv6.json @@ -7,12 +7,8 @@ "CVE-2020-15387" ], "details": "The host SSH servers of Brocade Fabric OS before Brocade Fabric OS v7.4.2h, v8.2.1c, v8.2.2, v9.0.0, and Brocade SANnav before v2.1.1 utilize keys of less than 2048 bits, which may be vulnerable to man-in-the-middle attacks and/or insecure SSH communications.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wv2p-5j7g-h596/GHSA-wv2p-5j7g-h596.json b/advisories/unreviewed/2022/05/GHSA-wv2p-5j7g-h596/GHSA-wv2p-5j7g-h596.json index 0962632a014..bf7dd81f6ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-wv2p-5j7g-h596/GHSA-wv2p-5j7g-h596.json +++ b/advisories/unreviewed/2022/05/GHSA-wv2p-5j7g-h596/GHSA-wv2p-5j7g-h596.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wv7x-gv33-fgrm/GHSA-wv7x-gv33-fgrm.json b/advisories/unreviewed/2022/05/GHSA-wv7x-gv33-fgrm/GHSA-wv7x-gv33-fgrm.json index d3dc47f55ec..a212f7f6d0e 100644 --- a/advisories/unreviewed/2022/05/GHSA-wv7x-gv33-fgrm/GHSA-wv7x-gv33-fgrm.json +++ b/advisories/unreviewed/2022/05/GHSA-wv7x-gv33-fgrm/GHSA-wv7x-gv33-fgrm.json @@ -7,12 +7,8 @@ "CVE-2020-11240" ], "details": "Memory corruption due to ioctl command size was incorrectly set to the size of a pointer and not enough storage is allocated for the copy of the user argument in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wvr8-9gpp-pgm5/GHSA-wvr8-9gpp-pgm5.json b/advisories/unreviewed/2022/05/GHSA-wvr8-9gpp-pgm5/GHSA-wvr8-9gpp-pgm5.json index 1680a5e64b9..81f29802e39 100644 --- a/advisories/unreviewed/2022/05/GHSA-wvr8-9gpp-pgm5/GHSA-wvr8-9gpp-pgm5.json +++ b/advisories/unreviewed/2022/05/GHSA-wvr8-9gpp-pgm5/GHSA-wvr8-9gpp-pgm5.json @@ -7,12 +7,8 @@ "CVE-2005-0017" ], "details": "The f2c translator in the f2c package 3.1 allows local users to read arbitrary files via a symlink attack on temporary files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -48,9 +44,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-wvw2-928h-x7m8/GHSA-wvw2-928h-x7m8.json b/advisories/unreviewed/2022/05/GHSA-wvw2-928h-x7m8/GHSA-wvw2-928h-x7m8.json index c5bc0d55c39..a92e233d268 100644 --- a/advisories/unreviewed/2022/05/GHSA-wvw2-928h-x7m8/GHSA-wvw2-928h-x7m8.json +++ b/advisories/unreviewed/2022/05/GHSA-wvw2-928h-x7m8/GHSA-wvw2-928h-x7m8.json @@ -7,12 +7,8 @@ "CVE-2020-27301" ], "details": "A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the \"AES_UnWRAP\" function, when an attacker in Wi-Fi range sends a crafted \"Encrypted GTK\" value as part of the WPA2 4-way-handshake.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wwjr-5j85-98m8/GHSA-wwjr-5j85-98m8.json b/advisories/unreviewed/2022/05/GHSA-wwjr-5j85-98m8/GHSA-wwjr-5j85-98m8.json index 535f6ffe187..b172443760e 100644 --- a/advisories/unreviewed/2022/05/GHSA-wwjr-5j85-98m8/GHSA-wwjr-5j85-98m8.json +++ b/advisories/unreviewed/2022/05/GHSA-wwjr-5j85-98m8/GHSA-wwjr-5j85-98m8.json @@ -7,12 +7,8 @@ "CVE-2020-22212" ], "details": "SQL Injection in 74cms 3.2.0 via the id parameter to wap/wap-company-show.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wxh8-5w54-6c6f/GHSA-wxh8-5w54-6c6f.json b/advisories/unreviewed/2022/05/GHSA-wxh8-5w54-6c6f/GHSA-wxh8-5w54-6c6f.json index 83c6cd628b0..f897e71efe5 100644 --- a/advisories/unreviewed/2022/05/GHSA-wxh8-5w54-6c6f/GHSA-wxh8-5w54-6c6f.json +++ b/advisories/unreviewed/2022/05/GHSA-wxh8-5w54-6c6f/GHSA-wxh8-5w54-6c6f.json @@ -7,12 +7,8 @@ "CVE-2020-23313" ], "details": "There is an Assertion 'scope_stack_p > context_p->scope_stack_p' failed at js-scanner-util.c:2510 in scanner_literal_is_created in JerryScript 2.2.0", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-wxhc-fh86-qq4h/GHSA-wxhc-fh86-qq4h.json b/advisories/unreviewed/2022/05/GHSA-wxhc-fh86-qq4h/GHSA-wxhc-fh86-qq4h.json index 452b9ab30ee..c0f26bcdd81 100644 --- a/advisories/unreviewed/2022/05/GHSA-wxhc-fh86-qq4h/GHSA-wxhc-fh86-qq4h.json +++ b/advisories/unreviewed/2022/05/GHSA-wxhc-fh86-qq4h/GHSA-wxhc-fh86-qq4h.json @@ -7,12 +7,8 @@ "CVE-2021-0100" ], "details": "Incorrect default permissions in the installer for the Intel(R) SSD Data Center Tool, versions downloaded before 12/31/2020, may allow an authenticated user to potentially enable escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x27g-gchh-mgqc/GHSA-x27g-gchh-mgqc.json b/advisories/unreviewed/2022/05/GHSA-x27g-gchh-mgqc/GHSA-x27g-gchh-mgqc.json index 3f7c466ec91..9b7446efe4c 100644 --- a/advisories/unreviewed/2022/05/GHSA-x27g-gchh-mgqc/GHSA-x27g-gchh-mgqc.json +++ b/advisories/unreviewed/2022/05/GHSA-x27g-gchh-mgqc/GHSA-x27g-gchh-mgqc.json @@ -7,12 +7,8 @@ "CVE-2021-30527" ], "details": "Use after free in WebUI in Google Chrome prior to 91.0.4472.77 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x29p-m96j-g32x/GHSA-x29p-m96j-g32x.json b/advisories/unreviewed/2022/05/GHSA-x29p-m96j-g32x/GHSA-x29p-m96j-g32x.json index 9b8ce2febfb..0667b94fe25 100644 --- a/advisories/unreviewed/2022/05/GHSA-x29p-m96j-g32x/GHSA-x29p-m96j-g32x.json +++ b/advisories/unreviewed/2022/05/GHSA-x29p-m96j-g32x/GHSA-x29p-m96j-g32x.json @@ -7,12 +7,8 @@ "CVE-2021-32078" ], "details": "An Out-of-Bounds Read was discovered in arch/arm/mach-footbridge/personal-pci.c in the Linux kernel through 5.12.11 because of the lack of a check for a value that shouldn't be negative, e.g., access to element -2 of an array, aka CID-298a58e165e4.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x332-fj8r-4r62/GHSA-x332-fj8r-4r62.json b/advisories/unreviewed/2022/05/GHSA-x332-fj8r-4r62/GHSA-x332-fj8r-4r62.json index 5958d42fced..ee77d8e2660 100644 --- a/advisories/unreviewed/2022/05/GHSA-x332-fj8r-4r62/GHSA-x332-fj8r-4r62.json +++ b/advisories/unreviewed/2022/05/GHSA-x332-fj8r-4r62/GHSA-x332-fj8r-4r62.json @@ -7,12 +7,8 @@ "CVE-2020-11238" ], "details": "Possible Buffer over-read in ARP/NS parsing due to lack of check of packet length received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x4fx-g8rh-wxj5/GHSA-x4fx-g8rh-wxj5.json b/advisories/unreviewed/2022/05/GHSA-x4fx-g8rh-wxj5/GHSA-x4fx-g8rh-wxj5.json index 29b4bbafed5..1c7dcf3a835 100644 --- a/advisories/unreviewed/2022/05/GHSA-x4fx-g8rh-wxj5/GHSA-x4fx-g8rh-wxj5.json +++ b/advisories/unreviewed/2022/05/GHSA-x4fx-g8rh-wxj5/GHSA-x4fx-g8rh-wxj5.json @@ -7,12 +7,8 @@ "CVE-2021-32550" ], "details": "It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-14 package apport hooks, it could expose private data to other local users.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x6fg-pgp3-2g2v/GHSA-x6fg-pgp3-2g2v.json b/advisories/unreviewed/2022/05/GHSA-x6fg-pgp3-2g2v/GHSA-x6fg-pgp3-2g2v.json index 9f4887661ad..61cff340396 100644 --- a/advisories/unreviewed/2022/05/GHSA-x6fg-pgp3-2g2v/GHSA-x6fg-pgp3-2g2v.json +++ b/advisories/unreviewed/2022/05/GHSA-x6fg-pgp3-2g2v/GHSA-x6fg-pgp3-2g2v.json @@ -7,12 +7,8 @@ "CVE-2021-33822" ], "details": "An issue was discovered on 4GEE ROUTER HH70VB Version HH70_E1_02.00_22. Attackers can use slowhttptest tool to send incomplete HTTP request, which could make server keep waiting for the packet to finish the connection, until its resource exhausted. Then the web server is denial-of-service.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x6x9-fjmw-h495/GHSA-x6x9-fjmw-h495.json b/advisories/unreviewed/2022/05/GHSA-x6x9-fjmw-h495/GHSA-x6x9-fjmw-h495.json index c88c1a420a1..4238b1f00ab 100644 --- a/advisories/unreviewed/2022/05/GHSA-x6x9-fjmw-h495/GHSA-x6x9-fjmw-h495.json +++ b/advisories/unreviewed/2022/05/GHSA-x6x9-fjmw-h495/GHSA-x6x9-fjmw-h495.json @@ -7,12 +7,8 @@ "CVE-2020-11267" ], "details": "Stack out-of-bounds write occurs while setting up a cipher device if the provided IV length exceeds the max limit value in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x77m-cq63-hf34/GHSA-x77m-cq63-hf34.json b/advisories/unreviewed/2022/05/GHSA-x77m-cq63-hf34/GHSA-x77m-cq63-hf34.json index 3b99b9951a0..c3bafc5910f 100644 --- a/advisories/unreviewed/2022/05/GHSA-x77m-cq63-hf34/GHSA-x77m-cq63-hf34.json +++ b/advisories/unreviewed/2022/05/GHSA-x77m-cq63-hf34/GHSA-x77m-cq63-hf34.json @@ -7,12 +7,8 @@ "CVE-2020-24473" ], "details": "Out of bounds write in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before version 2.48.ce3e3bd2 may allow an authenticated user to potentially enable escalation of privilege via local access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x7vq-mpj3-3xg4/GHSA-x7vq-mpj3-3xg4.json b/advisories/unreviewed/2022/05/GHSA-x7vq-mpj3-3xg4/GHSA-x7vq-mpj3-3xg4.json index 0ee9582a2f4..75b60e5f98e 100644 --- a/advisories/unreviewed/2022/05/GHSA-x7vq-mpj3-3xg4/GHSA-x7vq-mpj3-3xg4.json +++ b/advisories/unreviewed/2022/05/GHSA-x7vq-mpj3-3xg4/GHSA-x7vq-mpj3-3xg4.json @@ -7,12 +7,8 @@ "CVE-2021-31476" ], "details": "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.3.37598. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of XFA templates. The issue results from the lack of proper validation of user-supplied data, which can result in a type confusion condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-13531.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x87v-6qg8-4jhm/GHSA-x87v-6qg8-4jhm.json b/advisories/unreviewed/2022/05/GHSA-x87v-6qg8-4jhm/GHSA-x87v-6qg8-4jhm.json index 94001c65a35..f19c114f830 100644 --- a/advisories/unreviewed/2022/05/GHSA-x87v-6qg8-4jhm/GHSA-x87v-6qg8-4jhm.json +++ b/advisories/unreviewed/2022/05/GHSA-x87v-6qg8-4jhm/GHSA-x87v-6qg8-4jhm.json @@ -7,12 +7,8 @@ "CVE-2020-23302" ], "details": "There is a heap-use-after-free at ecma-helpers-string.c:772 in ecma_ref_ecma_string in JerryScript 2.2.0", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x8rx-53qq-29mq/GHSA-x8rx-53qq-29mq.json b/advisories/unreviewed/2022/05/GHSA-x8rx-53qq-29mq/GHSA-x8rx-53qq-29mq.json index e73ddab7aea..6f99c873b77 100644 --- a/advisories/unreviewed/2022/05/GHSA-x8rx-53qq-29mq/GHSA-x8rx-53qq-29mq.json +++ b/advisories/unreviewed/2022/05/GHSA-x8rx-53qq-29mq/GHSA-x8rx-53qq-29mq.json @@ -7,12 +7,8 @@ "CVE-2020-27302" ], "details": "A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the \"memcpy\" function, when an attacker in Wi-Fi range sends a crafted \"Encrypted GTK\" value as part of the WPA2 4-way-handshake.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x988-8hhc-g6v9/GHSA-x988-8hhc-g6v9.json b/advisories/unreviewed/2022/05/GHSA-x988-8hhc-g6v9/GHSA-x988-8hhc-g6v9.json index c713ab2178c..55ee59c3db8 100644 --- a/advisories/unreviewed/2022/05/GHSA-x988-8hhc-g6v9/GHSA-x988-8hhc-g6v9.json +++ b/advisories/unreviewed/2022/05/GHSA-x988-8hhc-g6v9/GHSA-x988-8hhc-g6v9.json @@ -7,12 +7,8 @@ "CVE-2020-22211" ], "details": "SQL Injection in 74cms 3.2.0 via the key parameter to plus/ajax_street.php.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x9m7-2c2j-xp5p/GHSA-x9m7-2c2j-xp5p.json b/advisories/unreviewed/2022/05/GHSA-x9m7-2c2j-xp5p/GHSA-x9m7-2c2j-xp5p.json index 5ffea4c8455..839558b1342 100644 --- a/advisories/unreviewed/2022/05/GHSA-x9m7-2c2j-xp5p/GHSA-x9m7-2c2j-xp5p.json +++ b/advisories/unreviewed/2022/05/GHSA-x9m7-2c2j-xp5p/GHSA-x9m7-2c2j-xp5p.json @@ -7,12 +7,8 @@ "CVE-2021-27642" ], "details": "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-x9rc-cq72-9564/GHSA-x9rc-cq72-9564.json b/advisories/unreviewed/2022/05/GHSA-x9rc-cq72-9564/GHSA-x9rc-cq72-9564.json index 483da08bba2..b8110c2c4b4 100644 --- a/advisories/unreviewed/2022/05/GHSA-x9rc-cq72-9564/GHSA-x9rc-cq72-9564.json +++ b/advisories/unreviewed/2022/05/GHSA-x9rc-cq72-9564/GHSA-x9rc-cq72-9564.json @@ -7,12 +7,8 @@ "CVE-2021-25390" ], "details": "Intent redirection vulnerability in PhotoTable prior to SMR MAY-2021 Release 1 allows attackers to execute privileged action.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xg7p-g635-vrg9/GHSA-xg7p-g635-vrg9.json b/advisories/unreviewed/2022/05/GHSA-xg7p-g635-vrg9/GHSA-xg7p-g635-vrg9.json index 72f911c19fc..655de13b39b 100644 --- a/advisories/unreviewed/2022/05/GHSA-xg7p-g635-vrg9/GHSA-xg7p-g635-vrg9.json +++ b/advisories/unreviewed/2022/05/GHSA-xg7p-g635-vrg9/GHSA-xg7p-g635-vrg9.json @@ -7,12 +7,8 @@ "CVE-2021-26199" ], "details": "An issue was discovered in JerryScript 2.4.0. There is a heap-use-after-free in ecma_bytecode_ref in ecma-helpers.c file.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xg83-g9fg-rfhv/GHSA-xg83-g9fg-rfhv.json b/advisories/unreviewed/2022/05/GHSA-xg83-g9fg-rfhv/GHSA-xg83-g9fg-rfhv.json index 25cc5b4ad88..7275685d1cd 100644 --- a/advisories/unreviewed/2022/05/GHSA-xg83-g9fg-rfhv/GHSA-xg83-g9fg-rfhv.json +++ b/advisories/unreviewed/2022/05/GHSA-xg83-g9fg-rfhv/GHSA-xg83-g9fg-rfhv.json @@ -7,12 +7,8 @@ "CVE-2021-30513" ], "details": "Type confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xh34-wfjw-6gjr/GHSA-xh34-wfjw-6gjr.json b/advisories/unreviewed/2022/05/GHSA-xh34-wfjw-6gjr/GHSA-xh34-wfjw-6gjr.json index 53066aeccf1..6584ce196f2 100644 --- a/advisories/unreviewed/2022/05/GHSA-xh34-wfjw-6gjr/GHSA-xh34-wfjw-6gjr.json +++ b/advisories/unreviewed/2022/05/GHSA-xh34-wfjw-6gjr/GHSA-xh34-wfjw-6gjr.json @@ -7,12 +7,8 @@ "CVE-2021-0113" ], "details": "Out of bounds write in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable a denial of service via adjacent access.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xh84-5f5q-96wv/GHSA-xh84-5f5q-96wv.json b/advisories/unreviewed/2022/05/GHSA-xh84-5f5q-96wv/GHSA-xh84-5f5q-96wv.json index 527f0bfd47e..37c4bdc5a42 100644 --- a/advisories/unreviewed/2022/05/GHSA-xh84-5f5q-96wv/GHSA-xh84-5f5q-96wv.json +++ b/advisories/unreviewed/2022/05/GHSA-xh84-5f5q-96wv/GHSA-xh84-5f5q-96wv.json @@ -7,12 +7,8 @@ "CVE-2005-0050" ], "details": "The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of messages, which leads to an \"unchecked buffer\" and allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, aka the \"License Logging Service Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xh9g-5fg8-p3wh/GHSA-xh9g-5fg8-p3wh.json b/advisories/unreviewed/2022/05/GHSA-xh9g-5fg8-p3wh/GHSA-xh9g-5fg8-p3wh.json index c2a2cd28173..7e3a57110c9 100644 --- a/advisories/unreviewed/2022/05/GHSA-xh9g-5fg8-p3wh/GHSA-xh9g-5fg8-p3wh.json +++ b/advisories/unreviewed/2022/05/GHSA-xh9g-5fg8-p3wh/GHSA-xh9g-5fg8-p3wh.json @@ -7,12 +7,8 @@ "CVE-2021-22762" ], "details": "A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could result in remote code execution, when a malicious CGF or WSP file is being parsed by IGSS Definition.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xj59-9vch-c6qw/GHSA-xj59-9vch-c6qw.json b/advisories/unreviewed/2022/05/GHSA-xj59-9vch-c6qw/GHSA-xj59-9vch-c6qw.json index 3bb366dbf65..4400b264480 100644 --- a/advisories/unreviewed/2022/05/GHSA-xj59-9vch-c6qw/GHSA-xj59-9vch-c6qw.json +++ b/advisories/unreviewed/2022/05/GHSA-xj59-9vch-c6qw/GHSA-xj59-9vch-c6qw.json @@ -7,12 +7,8 @@ "CVE-2005-0053" ], "details": "Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the \"Drag-and-Drop Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -72,9 +68,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xj6h-r3q8-7cmf/GHSA-xj6h-r3q8-7cmf.json b/advisories/unreviewed/2022/05/GHSA-xj6h-r3q8-7cmf/GHSA-xj6h-r3q8-7cmf.json index fee2e1efacf..ceb5396cf2d 100644 --- a/advisories/unreviewed/2022/05/GHSA-xj6h-r3q8-7cmf/GHSA-xj6h-r3q8-7cmf.json +++ b/advisories/unreviewed/2022/05/GHSA-xj6h-r3q8-7cmf/GHSA-xj6h-r3q8-7cmf.json @@ -7,12 +7,8 @@ "CVE-2021-3277" ], "details": "Nagios XI 5.7.5 and earlier allows authenticated admins to upload arbitrary files due to improper validation of the rename functionality in custom-includes component, which leads to remote code execution by uploading php files.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xj8m-2h9p-p8wm/GHSA-xj8m-2h9p-p8wm.json b/advisories/unreviewed/2022/05/GHSA-xj8m-2h9p-p8wm/GHSA-xj8m-2h9p-p8wm.json index 11d38263fd6..01f94936275 100644 --- a/advisories/unreviewed/2022/05/GHSA-xj8m-2h9p-p8wm/GHSA-xj8m-2h9p-p8wm.json +++ b/advisories/unreviewed/2022/05/GHSA-xj8m-2h9p-p8wm/GHSA-xj8m-2h9p-p8wm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xjvr-8p9x-8pr9/GHSA-xjvr-8p9x-8pr9.json b/advisories/unreviewed/2022/05/GHSA-xjvr-8p9x-8pr9/GHSA-xjvr-8p9x-8pr9.json index 726f91584c6..9b6f7b647ec 100644 --- a/advisories/unreviewed/2022/05/GHSA-xjvr-8p9x-8pr9/GHSA-xjvr-8p9x-8pr9.json +++ b/advisories/unreviewed/2022/05/GHSA-xjvr-8p9x-8pr9/GHSA-xjvr-8p9x-8pr9.json @@ -7,12 +7,8 @@ "CVE-2021-27643" ], "details": "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xmrj-wjpx-qx78/GHSA-xmrj-wjpx-qx78.json b/advisories/unreviewed/2022/05/GHSA-xmrj-wjpx-qx78/GHSA-xmrj-wjpx-qx78.json index 0fe5934bd08..4690b49df6d 100644 --- a/advisories/unreviewed/2022/05/GHSA-xmrj-wjpx-qx78/GHSA-xmrj-wjpx-qx78.json +++ b/advisories/unreviewed/2022/05/GHSA-xmrj-wjpx-qx78/GHSA-xmrj-wjpx-qx78.json @@ -7,12 +7,8 @@ "CVE-2021-22749" ], "details": "A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Modicon X80 BMXNOR0200H RTU SV1.70 IR22 and prior that could cause information leak concerning the current RTU configuration including communication parameters dedicated to telemetry, when a specially crafted HTTP request is sent to the web server of the module.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xphh-j59m-3cvp/GHSA-xphh-j59m-3cvp.json b/advisories/unreviewed/2022/05/GHSA-xphh-j59m-3cvp/GHSA-xphh-j59m-3cvp.json index 9f3431a727a..faaa961a95c 100644 --- a/advisories/unreviewed/2022/05/GHSA-xphh-j59m-3cvp/GHSA-xphh-j59m-3cvp.json +++ b/advisories/unreviewed/2022/05/GHSA-xphh-j59m-3cvp/GHSA-xphh-j59m-3cvp.json @@ -7,12 +7,8 @@ "CVE-2021-31342" ], "details": "A vulnerability has been identified in Solid Edge SE2020 (All Versions < 2020MP14), Solid Edge SE2021 (All Versions < SE2021MP5). The ugeom2d.dll library lacks proper validation of user-supplied data when parsing DFT files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12993)", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xq7g-73w7-qcm8/GHSA-xq7g-73w7-qcm8.json b/advisories/unreviewed/2022/05/GHSA-xq7g-73w7-qcm8/GHSA-xq7g-73w7-qcm8.json index d93a6730a70..24ea4ef30f0 100644 --- a/advisories/unreviewed/2022/05/GHSA-xq7g-73w7-qcm8/GHSA-xq7g-73w7-qcm8.json +++ b/advisories/unreviewed/2022/05/GHSA-xq7g-73w7-qcm8/GHSA-xq7g-73w7-qcm8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xqx5-9rjr-cjq9/GHSA-xqx5-9rjr-cjq9.json b/advisories/unreviewed/2022/05/GHSA-xqx5-9rjr-cjq9/GHSA-xqx5-9rjr-cjq9.json index 38f42f24c41..ae48c54ccd4 100644 --- a/advisories/unreviewed/2022/05/GHSA-xqx5-9rjr-cjq9/GHSA-xqx5-9rjr-cjq9.json +++ b/advisories/unreviewed/2022/05/GHSA-xqx5-9rjr-cjq9/GHSA-xqx5-9rjr-cjq9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xrf6-29c3-gghc/GHSA-xrf6-29c3-gghc.json b/advisories/unreviewed/2022/05/GHSA-xrf6-29c3-gghc/GHSA-xrf6-29c3-gghc.json index 60aa6ef1f51..9b3178a9189 100644 --- a/advisories/unreviewed/2022/05/GHSA-xrf6-29c3-gghc/GHSA-xrf6-29c3-gghc.json +++ b/advisories/unreviewed/2022/05/GHSA-xrf6-29c3-gghc/GHSA-xrf6-29c3-gghc.json @@ -7,12 +7,8 @@ "CVE-2005-0001" ], "details": "Race condition in the page fault handler (fault.c) for Linux kernel 2.2.x to 2.2.7, 2.4 to 2.4.29, and 2.6 to 2.6.10, when running on multiprocessor machines, allows local users to execute arbitrary code via concurrent threads that share the same virtual memory space and simultaneously request stack expansion.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -116,9 +112,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/05/GHSA-xrhw-gpgr-r7cm/GHSA-xrhw-gpgr-r7cm.json b/advisories/unreviewed/2022/05/GHSA-xrhw-gpgr-r7cm/GHSA-xrhw-gpgr-r7cm.json index 00d475ff32d..c721e4c6232 100644 --- a/advisories/unreviewed/2022/05/GHSA-xrhw-gpgr-r7cm/GHSA-xrhw-gpgr-r7cm.json +++ b/advisories/unreviewed/2022/05/GHSA-xrhw-gpgr-r7cm/GHSA-xrhw-gpgr-r7cm.json @@ -7,12 +7,8 @@ "CVE-2020-5003" ], "details": "IBM Financial Transaction Manager 3.2.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 192956.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xvx2-hw78-h573/GHSA-xvx2-hw78-h573.json b/advisories/unreviewed/2022/05/GHSA-xvx2-hw78-h573/GHSA-xvx2-hw78-h573.json index 34fe77b251c..30520c7cb4d 100644 --- a/advisories/unreviewed/2022/05/GHSA-xvx2-hw78-h573/GHSA-xvx2-hw78-h573.json +++ b/advisories/unreviewed/2022/05/GHSA-xvx2-hw78-h573/GHSA-xvx2-hw78-h573.json @@ -7,12 +7,8 @@ "CVE-2020-8299" ], "details": "Citrix ADC and Citrix/NetScaler Gateway 13.0 before 13.0-76.29, 12.1-61.18, 11.1-65.20, Citrix ADC 12.1-FIPS before 12.1-55.238, and Citrix SD-WAN WANOP Edition before 11.4.0, 11.3.2, 11.3.1a, 11.2.3a, 11.1.2c, 10.2.9a suffers from uncontrolled resource consumption by way of a network-based denial-of-service from within the same Layer 2 network segment. Note that the attacker must be in the same Layer 2 network segment as the vulnerable appliance.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/05/GHSA-xx2h-39g7-5x2c/GHSA-xx2h-39g7-5x2c.json b/advisories/unreviewed/2022/05/GHSA-xx2h-39g7-5x2c/GHSA-xx2h-39g7-5x2c.json index 94d5c9db6f6..0eccb853bb4 100644 --- a/advisories/unreviewed/2022/05/GHSA-xx2h-39g7-5x2c/GHSA-xx2h-39g7-5x2c.json +++ b/advisories/unreviewed/2022/05/GHSA-xx2h-39g7-5x2c/GHSA-xx2h-39g7-5x2c.json @@ -7,12 +7,8 @@ "CVE-2005-0054" ], "details": "Internet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security zone and execute arbitrary code via an HTML page containing URLs that contain hostnames that have been double hex encoded, which are decoded twice to generate a malicious hostname, aka the \"URL Decoding Zone Spoofing Vulnerability.\"", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -60,9 +56,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/08/GHSA-27xr-j3f5-jw66/GHSA-27xr-j3f5-jw66.json b/advisories/unreviewed/2022/08/GHSA-27xr-j3f5-jw66/GHSA-27xr-j3f5-jw66.json index f336f5bb239..f5c3ba206ec 100644 --- a/advisories/unreviewed/2022/08/GHSA-27xr-j3f5-jw66/GHSA-27xr-j3f5-jw66.json +++ b/advisories/unreviewed/2022/08/GHSA-27xr-j3f5-jw66/GHSA-27xr-j3f5-jw66.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-2jpv-47cx-7mgq/GHSA-2jpv-47cx-7mgq.json b/advisories/unreviewed/2022/08/GHSA-2jpv-47cx-7mgq/GHSA-2jpv-47cx-7mgq.json index eb3d020ff68..184d94fa039 100644 --- a/advisories/unreviewed/2022/08/GHSA-2jpv-47cx-7mgq/GHSA-2jpv-47cx-7mgq.json +++ b/advisories/unreviewed/2022/08/GHSA-2jpv-47cx-7mgq/GHSA-2jpv-47cx-7mgq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-2qgc-gr4q-7mjq/GHSA-2qgc-gr4q-7mjq.json b/advisories/unreviewed/2022/08/GHSA-2qgc-gr4q-7mjq/GHSA-2qgc-gr4q-7mjq.json index 2b0dc029a33..3a266920ec6 100644 --- a/advisories/unreviewed/2022/08/GHSA-2qgc-gr4q-7mjq/GHSA-2qgc-gr4q-7mjq.json +++ b/advisories/unreviewed/2022/08/GHSA-2qgc-gr4q-7mjq/GHSA-2qgc-gr4q-7mjq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-3v9w-qp9v-wq29/GHSA-3v9w-qp9v-wq29.json b/advisories/unreviewed/2022/08/GHSA-3v9w-qp9v-wq29/GHSA-3v9w-qp9v-wq29.json index b745fdcea11..ecad7c0636f 100644 --- a/advisories/unreviewed/2022/08/GHSA-3v9w-qp9v-wq29/GHSA-3v9w-qp9v-wq29.json +++ b/advisories/unreviewed/2022/08/GHSA-3v9w-qp9v-wq29/GHSA-3v9w-qp9v-wq29.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-48mv-8mq9-rhmf/GHSA-48mv-8mq9-rhmf.json b/advisories/unreviewed/2022/08/GHSA-48mv-8mq9-rhmf/GHSA-48mv-8mq9-rhmf.json index 075a30fa728..f4324e36fc9 100644 --- a/advisories/unreviewed/2022/08/GHSA-48mv-8mq9-rhmf/GHSA-48mv-8mq9-rhmf.json +++ b/advisories/unreviewed/2022/08/GHSA-48mv-8mq9-rhmf/GHSA-48mv-8mq9-rhmf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-52q3-7jvx-7p47/GHSA-52q3-7jvx-7p47.json b/advisories/unreviewed/2022/08/GHSA-52q3-7jvx-7p47/GHSA-52q3-7jvx-7p47.json index b42200924fb..6885f60b698 100644 --- a/advisories/unreviewed/2022/08/GHSA-52q3-7jvx-7p47/GHSA-52q3-7jvx-7p47.json +++ b/advisories/unreviewed/2022/08/GHSA-52q3-7jvx-7p47/GHSA-52q3-7jvx-7p47.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-59f8-xcc4-9vgv/GHSA-59f8-xcc4-9vgv.json b/advisories/unreviewed/2022/08/GHSA-59f8-xcc4-9vgv/GHSA-59f8-xcc4-9vgv.json index c70df4b2b5a..aa4b695d55e 100644 --- a/advisories/unreviewed/2022/08/GHSA-59f8-xcc4-9vgv/GHSA-59f8-xcc4-9vgv.json +++ b/advisories/unreviewed/2022/08/GHSA-59f8-xcc4-9vgv/GHSA-59f8-xcc4-9vgv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-5cmx-5c5j-hc3f/GHSA-5cmx-5c5j-hc3f.json b/advisories/unreviewed/2022/08/GHSA-5cmx-5c5j-hc3f/GHSA-5cmx-5c5j-hc3f.json index 60b62af17ed..9659d974dc3 100644 --- a/advisories/unreviewed/2022/08/GHSA-5cmx-5c5j-hc3f/GHSA-5cmx-5c5j-hc3f.json +++ b/advisories/unreviewed/2022/08/GHSA-5cmx-5c5j-hc3f/GHSA-5cmx-5c5j-hc3f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-5qww-32pm-m8vq/GHSA-5qww-32pm-m8vq.json b/advisories/unreviewed/2022/08/GHSA-5qww-32pm-m8vq/GHSA-5qww-32pm-m8vq.json index 5112121c2df..587cec800bd 100644 --- a/advisories/unreviewed/2022/08/GHSA-5qww-32pm-m8vq/GHSA-5qww-32pm-m8vq.json +++ b/advisories/unreviewed/2022/08/GHSA-5qww-32pm-m8vq/GHSA-5qww-32pm-m8vq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-6qj5-cmpw-fvpq/GHSA-6qj5-cmpw-fvpq.json b/advisories/unreviewed/2022/08/GHSA-6qj5-cmpw-fvpq/GHSA-6qj5-cmpw-fvpq.json index bad835cd259..aec0c55bfb3 100644 --- a/advisories/unreviewed/2022/08/GHSA-6qj5-cmpw-fvpq/GHSA-6qj5-cmpw-fvpq.json +++ b/advisories/unreviewed/2022/08/GHSA-6qj5-cmpw-fvpq/GHSA-6qj5-cmpw-fvpq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-74w5-v2mx-3497/GHSA-74w5-v2mx-3497.json b/advisories/unreviewed/2022/08/GHSA-74w5-v2mx-3497/GHSA-74w5-v2mx-3497.json index 86c26ba5f22..c79ec651d66 100644 --- a/advisories/unreviewed/2022/08/GHSA-74w5-v2mx-3497/GHSA-74w5-v2mx-3497.json +++ b/advisories/unreviewed/2022/08/GHSA-74w5-v2mx-3497/GHSA-74w5-v2mx-3497.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-8v6p-6pr9-m4fx/GHSA-8v6p-6pr9-m4fx.json b/advisories/unreviewed/2022/08/GHSA-8v6p-6pr9-m4fx/GHSA-8v6p-6pr9-m4fx.json index baf10e71204..3cf8d3d5752 100644 --- a/advisories/unreviewed/2022/08/GHSA-8v6p-6pr9-m4fx/GHSA-8v6p-6pr9-m4fx.json +++ b/advisories/unreviewed/2022/08/GHSA-8v6p-6pr9-m4fx/GHSA-8v6p-6pr9-m4fx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-938j-25px-7rch/GHSA-938j-25px-7rch.json b/advisories/unreviewed/2022/08/GHSA-938j-25px-7rch/GHSA-938j-25px-7rch.json index 7eaa0ad3708..f323f5dfdd9 100644 --- a/advisories/unreviewed/2022/08/GHSA-938j-25px-7rch/GHSA-938j-25px-7rch.json +++ b/advisories/unreviewed/2022/08/GHSA-938j-25px-7rch/GHSA-938j-25px-7rch.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-9f9w-hjr3-hm53/GHSA-9f9w-hjr3-hm53.json b/advisories/unreviewed/2022/08/GHSA-9f9w-hjr3-hm53/GHSA-9f9w-hjr3-hm53.json index 0d944d7e788..094315d583e 100644 --- a/advisories/unreviewed/2022/08/GHSA-9f9w-hjr3-hm53/GHSA-9f9w-hjr3-hm53.json +++ b/advisories/unreviewed/2022/08/GHSA-9f9w-hjr3-hm53/GHSA-9f9w-hjr3-hm53.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-cq32-wxcc-5r67/GHSA-cq32-wxcc-5r67.json b/advisories/unreviewed/2022/08/GHSA-cq32-wxcc-5r67/GHSA-cq32-wxcc-5r67.json index 7a9bc55f4b2..bf7644cbf61 100644 --- a/advisories/unreviewed/2022/08/GHSA-cq32-wxcc-5r67/GHSA-cq32-wxcc-5r67.json +++ b/advisories/unreviewed/2022/08/GHSA-cq32-wxcc-5r67/GHSA-cq32-wxcc-5r67.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-f624-83xq-9xr8/GHSA-f624-83xq-9xr8.json b/advisories/unreviewed/2022/08/GHSA-f624-83xq-9xr8/GHSA-f624-83xq-9xr8.json index 53821f5faab..35606b9d401 100644 --- a/advisories/unreviewed/2022/08/GHSA-f624-83xq-9xr8/GHSA-f624-83xq-9xr8.json +++ b/advisories/unreviewed/2022/08/GHSA-f624-83xq-9xr8/GHSA-f624-83xq-9xr8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-f9c5-w6cg-h9jq/GHSA-f9c5-w6cg-h9jq.json b/advisories/unreviewed/2022/08/GHSA-f9c5-w6cg-h9jq/GHSA-f9c5-w6cg-h9jq.json index ca9d74a9506..35559c083e6 100644 --- a/advisories/unreviewed/2022/08/GHSA-f9c5-w6cg-h9jq/GHSA-f9c5-w6cg-h9jq.json +++ b/advisories/unreviewed/2022/08/GHSA-f9c5-w6cg-h9jq/GHSA-f9c5-w6cg-h9jq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-h4xp-387r-72m5/GHSA-h4xp-387r-72m5.json b/advisories/unreviewed/2022/08/GHSA-h4xp-387r-72m5/GHSA-h4xp-387r-72m5.json index 36d34872449..1dbd277e151 100644 --- a/advisories/unreviewed/2022/08/GHSA-h4xp-387r-72m5/GHSA-h4xp-387r-72m5.json +++ b/advisories/unreviewed/2022/08/GHSA-h4xp-387r-72m5/GHSA-h4xp-387r-72m5.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-hqrj-cgf9-r6v8/GHSA-hqrj-cgf9-r6v8.json b/advisories/unreviewed/2022/08/GHSA-hqrj-cgf9-r6v8/GHSA-hqrj-cgf9-r6v8.json index 8682cb55a32..633f87199f4 100644 --- a/advisories/unreviewed/2022/08/GHSA-hqrj-cgf9-r6v8/GHSA-hqrj-cgf9-r6v8.json +++ b/advisories/unreviewed/2022/08/GHSA-hqrj-cgf9-r6v8/GHSA-hqrj-cgf9-r6v8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-jw3r-c5v3-9p9r/GHSA-jw3r-c5v3-9p9r.json b/advisories/unreviewed/2022/08/GHSA-jw3r-c5v3-9p9r/GHSA-jw3r-c5v3-9p9r.json index 8b366da09b7..1d20f2673ba 100644 --- a/advisories/unreviewed/2022/08/GHSA-jw3r-c5v3-9p9r/GHSA-jw3r-c5v3-9p9r.json +++ b/advisories/unreviewed/2022/08/GHSA-jw3r-c5v3-9p9r/GHSA-jw3r-c5v3-9p9r.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-m2ch-7c7w-q32h/GHSA-m2ch-7c7w-q32h.json b/advisories/unreviewed/2022/08/GHSA-m2ch-7c7w-q32h/GHSA-m2ch-7c7w-q32h.json index 0a2960f3b30..1a9ef22808c 100644 --- a/advisories/unreviewed/2022/08/GHSA-m2ch-7c7w-q32h/GHSA-m2ch-7c7w-q32h.json +++ b/advisories/unreviewed/2022/08/GHSA-m2ch-7c7w-q32h/GHSA-m2ch-7c7w-q32h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-m366-qhcj-gfw3/GHSA-m366-qhcj-gfw3.json b/advisories/unreviewed/2022/08/GHSA-m366-qhcj-gfw3/GHSA-m366-qhcj-gfw3.json index 8fc653b4ef7..72683eabe67 100644 --- a/advisories/unreviewed/2022/08/GHSA-m366-qhcj-gfw3/GHSA-m366-qhcj-gfw3.json +++ b/advisories/unreviewed/2022/08/GHSA-m366-qhcj-gfw3/GHSA-m366-qhcj-gfw3.json @@ -7,12 +7,8 @@ "CVE-2022-2734" ], "details": "Improper Restriction of Rendered UI Layers or Frames in GitHub repository openemr/openemr prior to 7.0.0.1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-mhmr-r8c4-xx83/GHSA-mhmr-r8c4-xx83.json b/advisories/unreviewed/2022/08/GHSA-mhmr-r8c4-xx83/GHSA-mhmr-r8c4-xx83.json index 3289783c498..45ad4012d49 100644 --- a/advisories/unreviewed/2022/08/GHSA-mhmr-r8c4-xx83/GHSA-mhmr-r8c4-xx83.json +++ b/advisories/unreviewed/2022/08/GHSA-mhmr-r8c4-xx83/GHSA-mhmr-r8c4-xx83.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-mv2v-9q68-4c8h/GHSA-mv2v-9q68-4c8h.json b/advisories/unreviewed/2022/08/GHSA-mv2v-9q68-4c8h/GHSA-mv2v-9q68-4c8h.json index 6308fee8841..03127fefe75 100644 --- a/advisories/unreviewed/2022/08/GHSA-mv2v-9q68-4c8h/GHSA-mv2v-9q68-4c8h.json +++ b/advisories/unreviewed/2022/08/GHSA-mv2v-9q68-4c8h/GHSA-mv2v-9q68-4c8h.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-mxph-pm8g-2q9m/GHSA-mxph-pm8g-2q9m.json b/advisories/unreviewed/2022/08/GHSA-mxph-pm8g-2q9m/GHSA-mxph-pm8g-2q9m.json index 3b8379cb822..993a66163f8 100644 --- a/advisories/unreviewed/2022/08/GHSA-mxph-pm8g-2q9m/GHSA-mxph-pm8g-2q9m.json +++ b/advisories/unreviewed/2022/08/GHSA-mxph-pm8g-2q9m/GHSA-mxph-pm8g-2q9m.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-p93h-7cc6-w63v/GHSA-p93h-7cc6-w63v.json b/advisories/unreviewed/2022/08/GHSA-p93h-7cc6-w63v/GHSA-p93h-7cc6-w63v.json index da1b85516c5..f3c858653f7 100644 --- a/advisories/unreviewed/2022/08/GHSA-p93h-7cc6-w63v/GHSA-p93h-7cc6-w63v.json +++ b/advisories/unreviewed/2022/08/GHSA-p93h-7cc6-w63v/GHSA-p93h-7cc6-w63v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-prf5-97wh-vpmp/GHSA-prf5-97wh-vpmp.json b/advisories/unreviewed/2022/08/GHSA-prf5-97wh-vpmp/GHSA-prf5-97wh-vpmp.json index 3d8c265fc68..435399a0d23 100644 --- a/advisories/unreviewed/2022/08/GHSA-prf5-97wh-vpmp/GHSA-prf5-97wh-vpmp.json +++ b/advisories/unreviewed/2022/08/GHSA-prf5-97wh-vpmp/GHSA-prf5-97wh-vpmp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-qgx7-f9jh-h598/GHSA-qgx7-f9jh-h598.json b/advisories/unreviewed/2022/08/GHSA-qgx7-f9jh-h598/GHSA-qgx7-f9jh-h598.json index c776ec8a8db..2202062885e 100644 --- a/advisories/unreviewed/2022/08/GHSA-qgx7-f9jh-h598/GHSA-qgx7-f9jh-h598.json +++ b/advisories/unreviewed/2022/08/GHSA-qgx7-f9jh-h598/GHSA-qgx7-f9jh-h598.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/08/GHSA-qx85-vjrv-f6r8/GHSA-qx85-vjrv-f6r8.json b/advisories/unreviewed/2022/08/GHSA-qx85-vjrv-f6r8/GHSA-qx85-vjrv-f6r8.json index a52d22813cc..50aef54cdc8 100644 --- a/advisories/unreviewed/2022/08/GHSA-qx85-vjrv-f6r8/GHSA-qx85-vjrv-f6r8.json +++ b/advisories/unreviewed/2022/08/GHSA-qx85-vjrv-f6r8/GHSA-qx85-vjrv-f6r8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-r6fm-wphr-4f88/GHSA-r6fm-wphr-4f88.json b/advisories/unreviewed/2022/08/GHSA-r6fm-wphr-4f88/GHSA-r6fm-wphr-4f88.json index 9aeab7e7857..f2e80180576 100644 --- a/advisories/unreviewed/2022/08/GHSA-r6fm-wphr-4f88/GHSA-r6fm-wphr-4f88.json +++ b/advisories/unreviewed/2022/08/GHSA-r6fm-wphr-4f88/GHSA-r6fm-wphr-4f88.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-rw9q-5p4j-cc4j/GHSA-rw9q-5p4j-cc4j.json b/advisories/unreviewed/2022/08/GHSA-rw9q-5p4j-cc4j/GHSA-rw9q-5p4j-cc4j.json index 2ca0e8ca09f..f6d6273b955 100644 --- a/advisories/unreviewed/2022/08/GHSA-rw9q-5p4j-cc4j/GHSA-rw9q-5p4j-cc4j.json +++ b/advisories/unreviewed/2022/08/GHSA-rw9q-5p4j-cc4j/GHSA-rw9q-5p4j-cc4j.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -39,9 +37,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/08/GHSA-vgpw-v682-5grc/GHSA-vgpw-v682-5grc.json b/advisories/unreviewed/2022/08/GHSA-vgpw-v682-5grc/GHSA-vgpw-v682-5grc.json index 70e9ff0a8cf..223764889af 100644 --- a/advisories/unreviewed/2022/08/GHSA-vgpw-v682-5grc/GHSA-vgpw-v682-5grc.json +++ b/advisories/unreviewed/2022/08/GHSA-vgpw-v682-5grc/GHSA-vgpw-v682-5grc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-w653-2g89-6682/GHSA-w653-2g89-6682.json b/advisories/unreviewed/2022/08/GHSA-w653-2g89-6682/GHSA-w653-2g89-6682.json index 928fc4dec2e..f76c6d785f1 100644 --- a/advisories/unreviewed/2022/08/GHSA-w653-2g89-6682/GHSA-w653-2g89-6682.json +++ b/advisories/unreviewed/2022/08/GHSA-w653-2g89-6682/GHSA-w653-2g89-6682.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-whjh-pf6x-5rxq/GHSA-whjh-pf6x-5rxq.json b/advisories/unreviewed/2022/08/GHSA-whjh-pf6x-5rxq/GHSA-whjh-pf6x-5rxq.json index 4f1b391a70c..e702ba59f17 100644 --- a/advisories/unreviewed/2022/08/GHSA-whjh-pf6x-5rxq/GHSA-whjh-pf6x-5rxq.json +++ b/advisories/unreviewed/2022/08/GHSA-whjh-pf6x-5rxq/GHSA-whjh-pf6x-5rxq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-wv2j-j29v-4252/GHSA-wv2j-j29v-4252.json b/advisories/unreviewed/2022/08/GHSA-wv2j-j29v-4252/GHSA-wv2j-j29v-4252.json index d79e8a292ce..dd4a5399a67 100644 --- a/advisories/unreviewed/2022/08/GHSA-wv2j-j29v-4252/GHSA-wv2j-j29v-4252.json +++ b/advisories/unreviewed/2022/08/GHSA-wv2j-j29v-4252/GHSA-wv2j-j29v-4252.json @@ -7,12 +7,8 @@ "CVE-2022-2731" ], "details": "Cross-site Scripting (XSS) - Reflected in GitHub repository openemr/openemr prior to 7.0.0.1.", - "severity": [ - - ], - "affected": [ - - ], + "severity": [], + "affected": [], "references": [ { "type": "ADVISORY", @@ -28,9 +24,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": null, "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/08/GHSA-xchc-g683-qhhp/GHSA-xchc-g683-qhhp.json b/advisories/unreviewed/2022/08/GHSA-xchc-g683-qhhp/GHSA-xchc-g683-qhhp.json index fb52ed82e8d..b7328e0a96b 100644 --- a/advisories/unreviewed/2022/08/GHSA-xchc-g683-qhhp/GHSA-xchc-g683-qhhp.json +++ b/advisories/unreviewed/2022/08/GHSA-xchc-g683-qhhp/GHSA-xchc-g683-qhhp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/08/GHSA-xjvg-m3fg-m9f8/GHSA-xjvg-m3fg-m9f8.json b/advisories/unreviewed/2022/08/GHSA-xjvg-m3fg-m9f8/GHSA-xjvg-m3fg-m9f8.json index b9376f16ab2..1d700a0029e 100644 --- a/advisories/unreviewed/2022/08/GHSA-xjvg-m3fg-m9f8/GHSA-xjvg-m3fg-m9f8.json +++ b/advisories/unreviewed/2022/08/GHSA-xjvg-m3fg-m9f8/GHSA-xjvg-m3fg-m9f8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/10/GHSA-26v8-q35j-h6q9/GHSA-26v8-q35j-h6q9.json b/advisories/unreviewed/2022/10/GHSA-26v8-q35j-h6q9/GHSA-26v8-q35j-h6q9.json index 62a52e555d1..e676f41cd69 100644 --- a/advisories/unreviewed/2022/10/GHSA-26v8-q35j-h6q9/GHSA-26v8-q35j-h6q9.json +++ b/advisories/unreviewed/2022/10/GHSA-26v8-q35j-h6q9/GHSA-26v8-q35j-h6q9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/10/GHSA-86vw-9pcv-q267/GHSA-86vw-9pcv-q267.json b/advisories/unreviewed/2022/10/GHSA-86vw-9pcv-q267/GHSA-86vw-9pcv-q267.json index e186a01434c..994b20c06de 100644 --- a/advisories/unreviewed/2022/10/GHSA-86vw-9pcv-q267/GHSA-86vw-9pcv-q267.json +++ b/advisories/unreviewed/2022/10/GHSA-86vw-9pcv-q267/GHSA-86vw-9pcv-q267.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/10/GHSA-8c7m-p9hj-2j62/GHSA-8c7m-p9hj-2j62.json b/advisories/unreviewed/2022/10/GHSA-8c7m-p9hj-2j62/GHSA-8c7m-p9hj-2j62.json index f6883711046..6d5e5156633 100644 --- a/advisories/unreviewed/2022/10/GHSA-8c7m-p9hj-2j62/GHSA-8c7m-p9hj-2j62.json +++ b/advisories/unreviewed/2022/10/GHSA-8c7m-p9hj-2j62/GHSA-8c7m-p9hj-2j62.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/10/GHSA-9v8q-97m7-4x6q/GHSA-9v8q-97m7-4x6q.json b/advisories/unreviewed/2022/10/GHSA-9v8q-97m7-4x6q/GHSA-9v8q-97m7-4x6q.json index 76df415e389..5fd3c8e186f 100644 --- a/advisories/unreviewed/2022/10/GHSA-9v8q-97m7-4x6q/GHSA-9v8q-97m7-4x6q.json +++ b/advisories/unreviewed/2022/10/GHSA-9v8q-97m7-4x6q/GHSA-9v8q-97m7-4x6q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/10/GHSA-f5gp-3w6p-wgx9/GHSA-f5gp-3w6p-wgx9.json b/advisories/unreviewed/2022/10/GHSA-f5gp-3w6p-wgx9/GHSA-f5gp-3w6p-wgx9.json index 1b21cbb9528..96bcc1764ac 100644 --- a/advisories/unreviewed/2022/10/GHSA-f5gp-3w6p-wgx9/GHSA-f5gp-3w6p-wgx9.json +++ b/advisories/unreviewed/2022/10/GHSA-f5gp-3w6p-wgx9/GHSA-f5gp-3w6p-wgx9.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/10/GHSA-g348-x9h5-9m9g/GHSA-g348-x9h5-9m9g.json b/advisories/unreviewed/2022/10/GHSA-g348-x9h5-9m9g/GHSA-g348-x9h5-9m9g.json index 7c905fbd250..550e17c79b3 100644 --- a/advisories/unreviewed/2022/10/GHSA-g348-x9h5-9m9g/GHSA-g348-x9h5-9m9g.json +++ b/advisories/unreviewed/2022/10/GHSA-g348-x9h5-9m9g/GHSA-g348-x9h5-9m9g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/10/GHSA-hm95-wj5x-jfqm/GHSA-hm95-wj5x-jfqm.json b/advisories/unreviewed/2022/10/GHSA-hm95-wj5x-jfqm/GHSA-hm95-wj5x-jfqm.json index 7c449cdcb0a..c2c28f8caf5 100644 --- a/advisories/unreviewed/2022/10/GHSA-hm95-wj5x-jfqm/GHSA-hm95-wj5x-jfqm.json +++ b/advisories/unreviewed/2022/10/GHSA-hm95-wj5x-jfqm/GHSA-hm95-wj5x-jfqm.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/10/GHSA-hr65-wxm7-w4jv/GHSA-hr65-wxm7-w4jv.json b/advisories/unreviewed/2022/10/GHSA-hr65-wxm7-w4jv/GHSA-hr65-wxm7-w4jv.json index 3993dd754d8..11e7e820be4 100644 --- a/advisories/unreviewed/2022/10/GHSA-hr65-wxm7-w4jv/GHSA-hr65-wxm7-w4jv.json +++ b/advisories/unreviewed/2022/10/GHSA-hr65-wxm7-w4jv/GHSA-hr65-wxm7-w4jv.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/10/GHSA-mq4p-28ww-vqj8/GHSA-mq4p-28ww-vqj8.json b/advisories/unreviewed/2022/10/GHSA-mq4p-28ww-vqj8/GHSA-mq4p-28ww-vqj8.json index 7159458ca77..e9d4c19a12a 100644 --- a/advisories/unreviewed/2022/10/GHSA-mq4p-28ww-vqj8/GHSA-mq4p-28ww-vqj8.json +++ b/advisories/unreviewed/2022/10/GHSA-mq4p-28ww-vqj8/GHSA-mq4p-28ww-vqj8.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/10/GHSA-r43q-fm6x-4jgq/GHSA-r43q-fm6x-4jgq.json b/advisories/unreviewed/2022/10/GHSA-r43q-fm6x-4jgq/GHSA-r43q-fm6x-4jgq.json index c970d5fcdb6..db4782f01ca 100644 --- a/advisories/unreviewed/2022/10/GHSA-r43q-fm6x-4jgq/GHSA-r43q-fm6x-4jgq.json +++ b/advisories/unreviewed/2022/10/GHSA-r43q-fm6x-4jgq/GHSA-r43q-fm6x-4jgq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-69wp-h9cx-p58w/GHSA-69wp-h9cx-p58w.json b/advisories/unreviewed/2022/12/GHSA-69wp-h9cx-p58w/GHSA-69wp-h9cx-p58w.json index a7527f2de54..b452516137e 100644 --- a/advisories/unreviewed/2022/12/GHSA-69wp-h9cx-p58w/GHSA-69wp-h9cx-p58w.json +++ b/advisories/unreviewed/2022/12/GHSA-69wp-h9cx-p58w/GHSA-69wp-h9cx-p58w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2022/12/GHSA-g926-w7v4-4r3q/GHSA-g926-w7v4-4r3q.json b/advisories/unreviewed/2022/12/GHSA-g926-w7v4-4r3q/GHSA-g926-w7v4-4r3q.json index a36a86fedab..f9a48620e95 100644 --- a/advisories/unreviewed/2022/12/GHSA-g926-w7v4-4r3q/GHSA-g926-w7v4-4r3q.json +++ b/advisories/unreviewed/2022/12/GHSA-g926-w7v4-4r3q/GHSA-g926-w7v4-4r3q.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2022/12/GHSA-r33g-3864-p55f/GHSA-r33g-3864-p55f.json b/advisories/unreviewed/2022/12/GHSA-r33g-3864-p55f/GHSA-r33g-3864-p55f.json index 46478a32c7d..a5ba3dd667a 100644 --- a/advisories/unreviewed/2022/12/GHSA-r33g-3864-p55f/GHSA-r33g-3864-p55f.json +++ b/advisories/unreviewed/2022/12/GHSA-r33g-3864-p55f/GHSA-r33g-3864-p55f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/04/GHSA-vwwv-x3c6-975c/GHSA-vwwv-x3c6-975c.json b/advisories/unreviewed/2023/04/GHSA-vwwv-x3c6-975c/GHSA-vwwv-x3c6-975c.json index 48d2efd3ce9..c226fcdbc2c 100644 --- a/advisories/unreviewed/2023/04/GHSA-vwwv-x3c6-975c/GHSA-vwwv-x3c6-975c.json +++ b/advisories/unreviewed/2023/04/GHSA-vwwv-x3c6-975c/GHSA-vwwv-x3c6-975c.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/08/GHSA-6384-2m2x-45v7/GHSA-6384-2m2x-45v7.json b/advisories/unreviewed/2023/08/GHSA-6384-2m2x-45v7/GHSA-6384-2m2x-45v7.json index 7d90ffb6b2b..b3f1dd46b68 100644 --- a/advisories/unreviewed/2023/08/GHSA-6384-2m2x-45v7/GHSA-6384-2m2x-45v7.json +++ b/advisories/unreviewed/2023/08/GHSA-6384-2m2x-45v7/GHSA-6384-2m2x-45v7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-23qf-mx2g-p3gq/GHSA-23qf-mx2g-p3gq.json b/advisories/unreviewed/2023/12/GHSA-23qf-mx2g-p3gq/GHSA-23qf-mx2g-p3gq.json index 373dcc49e34..7e545b0f4a8 100644 --- a/advisories/unreviewed/2023/12/GHSA-23qf-mx2g-p3gq/GHSA-23qf-mx2g-p3gq.json +++ b/advisories/unreviewed/2023/12/GHSA-23qf-mx2g-p3gq/GHSA-23qf-mx2g-p3gq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2023/12/GHSA-8mcm-x93w-7g6w/GHSA-8mcm-x93w-7g6w.json b/advisories/unreviewed/2023/12/GHSA-8mcm-x93w-7g6w/GHSA-8mcm-x93w-7g6w.json index f594b33b123..b6d62951748 100644 --- a/advisories/unreviewed/2023/12/GHSA-8mcm-x93w-7g6w/GHSA-8mcm-x93w-7g6w.json +++ b/advisories/unreviewed/2023/12/GHSA-8mcm-x93w-7g6w/GHSA-8mcm-x93w-7g6w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "WEB", @@ -43,9 +41,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2023/12/GHSA-cv25-rx3c-9hpp/GHSA-cv25-rx3c-9hpp.json b/advisories/unreviewed/2023/12/GHSA-cv25-rx3c-9hpp/GHSA-cv25-rx3c-9hpp.json index 388d46e1a23..397a1dc0238 100644 --- a/advisories/unreviewed/2023/12/GHSA-cv25-rx3c-9hpp/GHSA-cv25-rx3c-9hpp.json +++ b/advisories/unreviewed/2023/12/GHSA-cv25-rx3c-9hpp/GHSA-cv25-rx3c-9hpp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "WEB", @@ -51,9 +49,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-2v7f-pv27-cjfx/GHSA-2v7f-pv27-cjfx.json b/advisories/unreviewed/2024/01/GHSA-2v7f-pv27-cjfx/GHSA-2v7f-pv27-cjfx.json index aebbf866849..bcd7ead03c8 100644 --- a/advisories/unreviewed/2024/01/GHSA-2v7f-pv27-cjfx/GHSA-2v7f-pv27-cjfx.json +++ b/advisories/unreviewed/2024/01/GHSA-2v7f-pv27-cjfx/GHSA-2v7f-pv27-cjfx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-3c6g-c26j-3686/GHSA-3c6g-c26j-3686.json b/advisories/unreviewed/2024/01/GHSA-3c6g-c26j-3686/GHSA-3c6g-c26j-3686.json index bb4f88ae55e..8d184c7655f 100644 --- a/advisories/unreviewed/2024/01/GHSA-3c6g-c26j-3686/GHSA-3c6g-c26j-3686.json +++ b/advisories/unreviewed/2024/01/GHSA-3c6g-c26j-3686/GHSA-3c6g-c26j-3686.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-3w6w-q6rh-xhgj/GHSA-3w6w-q6rh-xhgj.json b/advisories/unreviewed/2024/01/GHSA-3w6w-q6rh-xhgj/GHSA-3w6w-q6rh-xhgj.json index dbca2a59e8b..f5640a6ce43 100644 --- a/advisories/unreviewed/2024/01/GHSA-3w6w-q6rh-xhgj/GHSA-3w6w-q6rh-xhgj.json +++ b/advisories/unreviewed/2024/01/GHSA-3w6w-q6rh-xhgj/GHSA-3w6w-q6rh-xhgj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-4j5c-h5v2-vwp3/GHSA-4j5c-h5v2-vwp3.json b/advisories/unreviewed/2024/01/GHSA-4j5c-h5v2-vwp3/GHSA-4j5c-h5v2-vwp3.json index 7e977117d75..840c808f15d 100644 --- a/advisories/unreviewed/2024/01/GHSA-4j5c-h5v2-vwp3/GHSA-4j5c-h5v2-vwp3.json +++ b/advisories/unreviewed/2024/01/GHSA-4j5c-h5v2-vwp3/GHSA-4j5c-h5v2-vwp3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-4m5w-jr92-m987/GHSA-4m5w-jr92-m987.json b/advisories/unreviewed/2024/01/GHSA-4m5w-jr92-m987/GHSA-4m5w-jr92-m987.json index 977c23a2966..bae12b93c1b 100644 --- a/advisories/unreviewed/2024/01/GHSA-4m5w-jr92-m987/GHSA-4m5w-jr92-m987.json +++ b/advisories/unreviewed/2024/01/GHSA-4m5w-jr92-m987/GHSA-4m5w-jr92-m987.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-5237-rpq3-h2pw/GHSA-5237-rpq3-h2pw.json b/advisories/unreviewed/2024/01/GHSA-5237-rpq3-h2pw/GHSA-5237-rpq3-h2pw.json index 240bbe8537c..daec8cc85bd 100644 --- a/advisories/unreviewed/2024/01/GHSA-5237-rpq3-h2pw/GHSA-5237-rpq3-h2pw.json +++ b/advisories/unreviewed/2024/01/GHSA-5237-rpq3-h2pw/GHSA-5237-rpq3-h2pw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-5h84-92m9-v9r6/GHSA-5h84-92m9-v9r6.json b/advisories/unreviewed/2024/01/GHSA-5h84-92m9-v9r6/GHSA-5h84-92m9-v9r6.json index 9c8049519ac..3e7dd201c2b 100644 --- a/advisories/unreviewed/2024/01/GHSA-5h84-92m9-v9r6/GHSA-5h84-92m9-v9r6.json +++ b/advisories/unreviewed/2024/01/GHSA-5h84-92m9-v9r6/GHSA-5h84-92m9-v9r6.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-7fj6-ch6w-c47g/GHSA-7fj6-ch6w-c47g.json b/advisories/unreviewed/2024/01/GHSA-7fj6-ch6w-c47g/GHSA-7fj6-ch6w-c47g.json index 9b430b5d70b..0901cbab0ff 100644 --- a/advisories/unreviewed/2024/01/GHSA-7fj6-ch6w-c47g/GHSA-7fj6-ch6w-c47g.json +++ b/advisories/unreviewed/2024/01/GHSA-7fj6-ch6w-c47g/GHSA-7fj6-ch6w-c47g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-7vr7-mpg5-798f/GHSA-7vr7-mpg5-798f.json b/advisories/unreviewed/2024/01/GHSA-7vr7-mpg5-798f/GHSA-7vr7-mpg5-798f.json index b36f6336bed..01763e73633 100644 --- a/advisories/unreviewed/2024/01/GHSA-7vr7-mpg5-798f/GHSA-7vr7-mpg5-798f.json +++ b/advisories/unreviewed/2024/01/GHSA-7vr7-mpg5-798f/GHSA-7vr7-mpg5-798f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-823h-79qw-hp52/GHSA-823h-79qw-hp52.json b/advisories/unreviewed/2024/01/GHSA-823h-79qw-hp52/GHSA-823h-79qw-hp52.json index 2e6c7f6325d..473be99d1ab 100644 --- a/advisories/unreviewed/2024/01/GHSA-823h-79qw-hp52/GHSA-823h-79qw-hp52.json +++ b/advisories/unreviewed/2024/01/GHSA-823h-79qw-hp52/GHSA-823h-79qw-hp52.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-8h58-w45f-mg3g/GHSA-8h58-w45f-mg3g.json b/advisories/unreviewed/2024/01/GHSA-8h58-w45f-mg3g/GHSA-8h58-w45f-mg3g.json index 1313120a18e..3c770d04e90 100644 --- a/advisories/unreviewed/2024/01/GHSA-8h58-w45f-mg3g/GHSA-8h58-w45f-mg3g.json +++ b/advisories/unreviewed/2024/01/GHSA-8h58-w45f-mg3g/GHSA-8h58-w45f-mg3g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-cxrr-h279-673f/GHSA-cxrr-h279-673f.json b/advisories/unreviewed/2024/01/GHSA-cxrr-h279-673f/GHSA-cxrr-h279-673f.json index 400417abd8d..646464ad760 100644 --- a/advisories/unreviewed/2024/01/GHSA-cxrr-h279-673f/GHSA-cxrr-h279-673f.json +++ b/advisories/unreviewed/2024/01/GHSA-cxrr-h279-673f/GHSA-cxrr-h279-673f.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -31,9 +29,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-f5cc-cq8v-8vmj/GHSA-f5cc-cq8v-8vmj.json b/advisories/unreviewed/2024/01/GHSA-f5cc-cq8v-8vmj/GHSA-f5cc-cq8v-8vmj.json index 47f5a977a2b..1a291c46e82 100644 --- a/advisories/unreviewed/2024/01/GHSA-f5cc-cq8v-8vmj/GHSA-f5cc-cq8v-8vmj.json +++ b/advisories/unreviewed/2024/01/GHSA-f5cc-cq8v-8vmj/GHSA-f5cc-cq8v-8vmj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-fc3m-xrgg-2fxh/GHSA-fc3m-xrgg-2fxh.json b/advisories/unreviewed/2024/01/GHSA-fc3m-xrgg-2fxh/GHSA-fc3m-xrgg-2fxh.json index 62fe3fe4ffa..6ddd81ffc91 100644 --- a/advisories/unreviewed/2024/01/GHSA-fc3m-xrgg-2fxh/GHSA-fc3m-xrgg-2fxh.json +++ b/advisories/unreviewed/2024/01/GHSA-fc3m-xrgg-2fxh/GHSA-fc3m-xrgg-2fxh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "LOW", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-fpgw-7jq3-8qjp/GHSA-fpgw-7jq3-8qjp.json b/advisories/unreviewed/2024/01/GHSA-fpgw-7jq3-8qjp/GHSA-fpgw-7jq3-8qjp.json index 4690853d861..19ae8f447cb 100644 --- a/advisories/unreviewed/2024/01/GHSA-fpgw-7jq3-8qjp/GHSA-fpgw-7jq3-8qjp.json +++ b/advisories/unreviewed/2024/01/GHSA-fpgw-7jq3-8qjp/GHSA-fpgw-7jq3-8qjp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-g8fq-v6rj-5rf4/GHSA-g8fq-v6rj-5rf4.json b/advisories/unreviewed/2024/01/GHSA-g8fq-v6rj-5rf4/GHSA-g8fq-v6rj-5rf4.json index 741807f460a..6a92be62bd1 100644 --- a/advisories/unreviewed/2024/01/GHSA-g8fq-v6rj-5rf4/GHSA-g8fq-v6rj-5rf4.json +++ b/advisories/unreviewed/2024/01/GHSA-g8fq-v6rj-5rf4/GHSA-g8fq-v6rj-5rf4.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-gpqq-m4hf-76xj/GHSA-gpqq-m4hf-76xj.json b/advisories/unreviewed/2024/01/GHSA-gpqq-m4hf-76xj/GHSA-gpqq-m4hf-76xj.json index 9048541be0f..4a5b888e2ee 100644 --- a/advisories/unreviewed/2024/01/GHSA-gpqq-m4hf-76xj/GHSA-gpqq-m4hf-76xj.json +++ b/advisories/unreviewed/2024/01/GHSA-gpqq-m4hf-76xj/GHSA-gpqq-m4hf-76xj.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-h4qf-xv53-x532/GHSA-h4qf-xv53-x532.json b/advisories/unreviewed/2024/01/GHSA-h4qf-xv53-x532/GHSA-h4qf-xv53-x532.json index da743afff45..d2ffb987141 100644 --- a/advisories/unreviewed/2024/01/GHSA-h4qf-xv53-x532/GHSA-h4qf-xv53-x532.json +++ b/advisories/unreviewed/2024/01/GHSA-h4qf-xv53-x532/GHSA-h4qf-xv53-x532.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-jcc9-p6r7-vjxg/GHSA-jcc9-p6r7-vjxg.json b/advisories/unreviewed/2024/01/GHSA-jcc9-p6r7-vjxg/GHSA-jcc9-p6r7-vjxg.json index c1746c82f13..ed43114e486 100644 --- a/advisories/unreviewed/2024/01/GHSA-jcc9-p6r7-vjxg/GHSA-jcc9-p6r7-vjxg.json +++ b/advisories/unreviewed/2024/01/GHSA-jcc9-p6r7-vjxg/GHSA-jcc9-p6r7-vjxg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-m9rv-cpgh-2jv7/GHSA-m9rv-cpgh-2jv7.json b/advisories/unreviewed/2024/01/GHSA-m9rv-cpgh-2jv7/GHSA-m9rv-cpgh-2jv7.json index 050d48a5f6f..69a9bac65d0 100644 --- a/advisories/unreviewed/2024/01/GHSA-m9rv-cpgh-2jv7/GHSA-m9rv-cpgh-2jv7.json +++ b/advisories/unreviewed/2024/01/GHSA-m9rv-cpgh-2jv7/GHSA-m9rv-cpgh-2jv7.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-p45m-r94f-7mf2/GHSA-p45m-r94f-7mf2.json b/advisories/unreviewed/2024/01/GHSA-p45m-r94f-7mf2/GHSA-p45m-r94f-7mf2.json index 6cb00219432..142154ee1bd 100644 --- a/advisories/unreviewed/2024/01/GHSA-p45m-r94f-7mf2/GHSA-p45m-r94f-7mf2.json +++ b/advisories/unreviewed/2024/01/GHSA-p45m-r94f-7mf2/GHSA-p45m-r94f-7mf2.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-p534-v8jq-5487/GHSA-p534-v8jq-5487.json b/advisories/unreviewed/2024/01/GHSA-p534-v8jq-5487/GHSA-p534-v8jq-5487.json index ce46c7bf1d1..510f7240056 100644 --- a/advisories/unreviewed/2024/01/GHSA-p534-v8jq-5487/GHSA-p534-v8jq-5487.json +++ b/advisories/unreviewed/2024/01/GHSA-p534-v8jq-5487/GHSA-p534-v8jq-5487.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-q2qc-2pfg-hfvg/GHSA-q2qc-2pfg-hfvg.json b/advisories/unreviewed/2024/01/GHSA-q2qc-2pfg-hfvg/GHSA-q2qc-2pfg-hfvg.json index 8d63c2adee7..bfaa43a0448 100644 --- a/advisories/unreviewed/2024/01/GHSA-q2qc-2pfg-hfvg/GHSA-q2qc-2pfg-hfvg.json +++ b/advisories/unreviewed/2024/01/GHSA-q2qc-2pfg-hfvg/GHSA-q2qc-2pfg-hfvg.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-qx9h-jjqr-gjwq/GHSA-qx9h-jjqr-gjwq.json b/advisories/unreviewed/2024/01/GHSA-qx9h-jjqr-gjwq/GHSA-qx9h-jjqr-gjwq.json index 227cd767a81..f50c1d0e518 100644 --- a/advisories/unreviewed/2024/01/GHSA-qx9h-jjqr-gjwq/GHSA-qx9h-jjqr-gjwq.json +++ b/advisories/unreviewed/2024/01/GHSA-qx9h-jjqr-gjwq/GHSA-qx9h-jjqr-gjwq.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-rx22-xr85-fqfw/GHSA-rx22-xr85-fqfw.json b/advisories/unreviewed/2024/01/GHSA-rx22-xr85-fqfw/GHSA-rx22-xr85-fqfw.json index 2fc585950d0..4db07862a09 100644 --- a/advisories/unreviewed/2024/01/GHSA-rx22-xr85-fqfw/GHSA-rx22-xr85-fqfw.json +++ b/advisories/unreviewed/2024/01/GHSA-rx22-xr85-fqfw/GHSA-rx22-xr85-fqfw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-v2hh-gf42-8pxh/GHSA-v2hh-gf42-8pxh.json b/advisories/unreviewed/2024/01/GHSA-v2hh-gf42-8pxh/GHSA-v2hh-gf42-8pxh.json index 870d1f8789a..0d06f97ebfb 100644 --- a/advisories/unreviewed/2024/01/GHSA-v2hh-gf42-8pxh/GHSA-v2hh-gf42-8pxh.json +++ b/advisories/unreviewed/2024/01/GHSA-v2hh-gf42-8pxh/GHSA-v2hh-gf42-8pxh.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-vv3f-2v3m-g822/GHSA-vv3f-2v3m-g822.json b/advisories/unreviewed/2024/01/GHSA-vv3f-2v3m-g822/GHSA-vv3f-2v3m-g822.json index 0a27706407b..33e908d2be4 100644 --- a/advisories/unreviewed/2024/01/GHSA-vv3f-2v3m-g822/GHSA-vv3f-2v3m-g822.json +++ b/advisories/unreviewed/2024/01/GHSA-vv3f-2v3m-g822/GHSA-vv3f-2v3m-g822.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-wfm7-x67v-8f9v/GHSA-wfm7-x67v-8f9v.json b/advisories/unreviewed/2024/01/GHSA-wfm7-x67v-8f9v/GHSA-wfm7-x67v-8f9v.json index 48de4aa02bf..31568db4795 100644 --- a/advisories/unreviewed/2024/01/GHSA-wfm7-x67v-8f9v/GHSA-wfm7-x67v-8f9v.json +++ b/advisories/unreviewed/2024/01/GHSA-wfm7-x67v-8f9v/GHSA-wfm7-x67v-8f9v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-wm6f-h624-5wvx/GHSA-wm6f-h624-5wvx.json b/advisories/unreviewed/2024/01/GHSA-wm6f-h624-5wvx/GHSA-wm6f-h624-5wvx.json index bbd17e29d03..63c112b159a 100644 --- a/advisories/unreviewed/2024/01/GHSA-wm6f-h624-5wvx/GHSA-wm6f-h624-5wvx.json +++ b/advisories/unreviewed/2024/01/GHSA-wm6f-h624-5wvx/GHSA-wm6f-h624-5wvx.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -35,9 +33,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-wv3w-qq6q-g9j3/GHSA-wv3w-qq6q-g9j3.json b/advisories/unreviewed/2024/01/GHSA-wv3w-qq6q-g9j3/GHSA-wv3w-qq6q-g9j3.json index 3c0923df0da..372e9fc6ce7 100644 --- a/advisories/unreviewed/2024/01/GHSA-wv3w-qq6q-g9j3/GHSA-wv3w-qq6q-g9j3.json +++ b/advisories/unreviewed/2024/01/GHSA-wv3w-qq6q-g9j3/GHSA-wv3w-qq6q-g9j3.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/01/GHSA-x557-c5mg-5g2g/GHSA-x557-c5mg-5g2g.json b/advisories/unreviewed/2024/01/GHSA-x557-c5mg-5g2g/GHSA-x557-c5mg-5g2g.json index 0da6e521c0a..702e87e10a2 100644 --- a/advisories/unreviewed/2024/01/GHSA-x557-c5mg-5g2g/GHSA-x557-c5mg-5g2g.json +++ b/advisories/unreviewed/2024/01/GHSA-x557-c5mg-5g2g/GHSA-x557-c5mg-5g2g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/01/GHSA-xrgf-qp7c-883g/GHSA-xrgf-qp7c-883g.json b/advisories/unreviewed/2024/01/GHSA-xrgf-qp7c-883g/GHSA-xrgf-qp7c-883g.json index f4c37bda31a..9ea33da3f62 100644 --- a/advisories/unreviewed/2024/01/GHSA-xrgf-qp7c-883g/GHSA-xrgf-qp7c-883g.json +++ b/advisories/unreviewed/2024/01/GHSA-xrgf-qp7c-883g/GHSA-xrgf-qp7c-883g.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", @@ -27,9 +25,7 @@ } ], "database_specific": { - "cwe_ids": [ - - ], + "cwe_ids": [], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, diff --git a/advisories/unreviewed/2024/07/GHSA-2mh7-fwqw-352w/GHSA-2mh7-fwqw-352w.json b/advisories/unreviewed/2024/07/GHSA-2mh7-fwqw-352w/GHSA-2mh7-fwqw-352w.json index a032556fb78..50eb6ddd2ee 100644 --- a/advisories/unreviewed/2024/07/GHSA-2mh7-fwqw-352w/GHSA-2mh7-fwqw-352w.json +++ b/advisories/unreviewed/2024/07/GHSA-2mh7-fwqw-352w/GHSA-2mh7-fwqw-352w.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-2q4c-rgm8-v3rp/GHSA-2q4c-rgm8-v3rp.json b/advisories/unreviewed/2024/07/GHSA-2q4c-rgm8-v3rp/GHSA-2q4c-rgm8-v3rp.json index 443482a0cc5..a234c87545c 100644 --- a/advisories/unreviewed/2024/07/GHSA-2q4c-rgm8-v3rp/GHSA-2q4c-rgm8-v3rp.json +++ b/advisories/unreviewed/2024/07/GHSA-2q4c-rgm8-v3rp/GHSA-2q4c-rgm8-v3rp.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-5pw4-4x9f-5r64/GHSA-5pw4-4x9f-5r64.json b/advisories/unreviewed/2024/07/GHSA-5pw4-4x9f-5r64/GHSA-5pw4-4x9f-5r64.json index 472d479ab83..86d27b2c91b 100644 --- a/advisories/unreviewed/2024/07/GHSA-5pw4-4x9f-5r64/GHSA-5pw4-4x9f-5r64.json +++ b/advisories/unreviewed/2024/07/GHSA-5pw4-4x9f-5r64/GHSA-5pw4-4x9f-5r64.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-67rr-crq7-mcjf/GHSA-67rr-crq7-mcjf.json b/advisories/unreviewed/2024/07/GHSA-67rr-crq7-mcjf/GHSA-67rr-crq7-mcjf.json index ce753e44caf..8e3d2a7eba4 100644 --- a/advisories/unreviewed/2024/07/GHSA-67rr-crq7-mcjf/GHSA-67rr-crq7-mcjf.json +++ b/advisories/unreviewed/2024/07/GHSA-67rr-crq7-mcjf/GHSA-67rr-crq7-mcjf.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-96pw-49rf-gj7p/GHSA-96pw-49rf-gj7p.json b/advisories/unreviewed/2024/07/GHSA-96pw-49rf-gj7p/GHSA-96pw-49rf-gj7p.json index 8e2aa2360df..dee32999889 100644 --- a/advisories/unreviewed/2024/07/GHSA-96pw-49rf-gj7p/GHSA-96pw-49rf-gj7p.json +++ b/advisories/unreviewed/2024/07/GHSA-96pw-49rf-gj7p/GHSA-96pw-49rf-gj7p.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-fp89-pm7x-6gcq/GHSA-fp89-pm7x-6gcq.json b/advisories/unreviewed/2024/07/GHSA-fp89-pm7x-6gcq/GHSA-fp89-pm7x-6gcq.json index fe9f9559f10..8c027e6f9ff 100644 --- a/advisories/unreviewed/2024/07/GHSA-fp89-pm7x-6gcq/GHSA-fp89-pm7x-6gcq.json +++ b/advisories/unreviewed/2024/07/GHSA-fp89-pm7x-6gcq/GHSA-fp89-pm7x-6gcq.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-gqgv-9xf4-x7vw/GHSA-gqgv-9xf4-x7vw.json b/advisories/unreviewed/2024/07/GHSA-gqgv-9xf4-x7vw/GHSA-gqgv-9xf4-x7vw.json index aa4fe97d997..e9cd3de389b 100644 --- a/advisories/unreviewed/2024/07/GHSA-gqgv-9xf4-x7vw/GHSA-gqgv-9xf4-x7vw.json +++ b/advisories/unreviewed/2024/07/GHSA-gqgv-9xf4-x7vw/GHSA-gqgv-9xf4-x7vw.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-mxpm-gmqp-66xc/GHSA-mxpm-gmqp-66xc.json b/advisories/unreviewed/2024/07/GHSA-mxpm-gmqp-66xc/GHSA-mxpm-gmqp-66xc.json index 4167b641e35..35e6d1ce97e 100644 --- a/advisories/unreviewed/2024/07/GHSA-mxpm-gmqp-66xc/GHSA-mxpm-gmqp-66xc.json +++ b/advisories/unreviewed/2024/07/GHSA-mxpm-gmqp-66xc/GHSA-mxpm-gmqp-66xc.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-p5wv-3rjg-mp4m/GHSA-p5wv-3rjg-mp4m.json b/advisories/unreviewed/2024/07/GHSA-p5wv-3rjg-mp4m/GHSA-p5wv-3rjg-mp4m.json index 079517d891e..b202c52a6ca 100644 --- a/advisories/unreviewed/2024/07/GHSA-p5wv-3rjg-mp4m/GHSA-p5wv-3rjg-mp4m.json +++ b/advisories/unreviewed/2024/07/GHSA-p5wv-3rjg-mp4m/GHSA-p5wv-3rjg-mp4m.json @@ -17,9 +17,7 @@ "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-ww2r-cpjx-g6vr/GHSA-ww2r-cpjx-g6vr.json b/advisories/unreviewed/2024/07/GHSA-ww2r-cpjx-g6vr/GHSA-ww2r-cpjx-g6vr.json index 427da25806a..cb3c8539219 100644 --- a/advisories/unreviewed/2024/07/GHSA-ww2r-cpjx-g6vr/GHSA-ww2r-cpjx-g6vr.json +++ b/advisories/unreviewed/2024/07/GHSA-ww2r-cpjx-g6vr/GHSA-ww2r-cpjx-g6vr.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY", diff --git a/advisories/unreviewed/2024/07/GHSA-xjrj-g448-3p5v/GHSA-xjrj-g448-3p5v.json b/advisories/unreviewed/2024/07/GHSA-xjrj-g448-3p5v/GHSA-xjrj-g448-3p5v.json index 6aa064da5a5..45e5533dbd9 100644 --- a/advisories/unreviewed/2024/07/GHSA-xjrj-g448-3p5v/GHSA-xjrj-g448-3p5v.json +++ b/advisories/unreviewed/2024/07/GHSA-xjrj-g448-3p5v/GHSA-xjrj-g448-3p5v.json @@ -13,9 +13,7 @@ "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L" } ], - "affected": [ - - ], + "affected": [], "references": [ { "type": "ADVISORY",