diff --git a/advisories/unreviewed/2022/04/GHSA-4f3f-7mf9-qrhc/GHSA-4f3f-7mf9-qrhc.json b/advisories/unreviewed/2022/04/GHSA-4f3f-7mf9-qrhc/GHSA-4f3f-7mf9-qrhc.json index 9a3644f3371..39afe0ce240 100644 --- a/advisories/unreviewed/2022/04/GHSA-4f3f-7mf9-qrhc/GHSA-4f3f-7mf9-qrhc.json +++ b/advisories/unreviewed/2022/04/GHSA-4f3f-7mf9-qrhc/GHSA-4f3f-7mf9-qrhc.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-4f3f-7mf9-qrhc", - "modified": "2024-06-15T12:30:26Z", + "modified": "2024-08-22T18:31:18Z", "published": "2022-04-29T01:25:46Z", "aliases": [ "CVE-2003-0063" ], "details": "The xterm terminal emulator in XFree86 4.2.0 and earlier allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's terminal, e.g. when the user views a file containing the malicious sequence, which could allow the attacker to execute arbitrary commands.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" + } ], "affected": [ @@ -61,7 +64,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-150" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/03/GHSA-fpf2-cr84-mrv9/GHSA-fpf2-cr84-mrv9.json b/advisories/unreviewed/2024/03/GHSA-fpf2-cr84-mrv9/GHSA-fpf2-cr84-mrv9.json index 029bc348944..5509d6aff1c 100644 --- a/advisories/unreviewed/2024/03/GHSA-fpf2-cr84-mrv9/GHSA-fpf2-cr84-mrv9.json +++ b/advisories/unreviewed/2024/03/GHSA-fpf2-cr84-mrv9/GHSA-fpf2-cr84-mrv9.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-fpf2-cr84-mrv9", - "modified": "2024-03-22T15:31:07Z", + "modified": "2024-08-22T18:31:18Z", "published": "2024-03-22T15:31:07Z", "aliases": [ "CVE-2023-41099" ], "details": "In the Windows installer in Atos Eviden CardOS API before 5.5.5.2811, Local Privilege Escalation can occur.(from a regular user to SYSTEM).", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-269" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-22T15:15:15Z" diff --git a/advisories/unreviewed/2024/04/GHSA-8vjg-37gr-gvx7/GHSA-8vjg-37gr-gvx7.json b/advisories/unreviewed/2024/04/GHSA-8vjg-37gr-gvx7/GHSA-8vjg-37gr-gvx7.json index 9e583340053..47a8ebb2bc1 100644 --- a/advisories/unreviewed/2024/04/GHSA-8vjg-37gr-gvx7/GHSA-8vjg-37gr-gvx7.json +++ b/advisories/unreviewed/2024/04/GHSA-8vjg-37gr-gvx7/GHSA-8vjg-37gr-gvx7.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-8vjg-37gr-gvx7", - "modified": "2024-04-08T06:31:30Z", + "modified": "2024-08-22T18:31:18Z", "published": "2024-04-08T06:31:30Z", "aliases": [ "CVE-2024-27488" ], "details": "Incorrect Access Control vulnerability in ZLMediaKit versions 1.0 through 8.0, allows remote attackers to escalate privileges and obtain sensitive information. The application system enables the http API interface by default and uses the secret parameter method to authenticate the http restful api interface, but the secret is hardcoded by default.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-259" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-04-08T06:15:07Z" diff --git a/advisories/unreviewed/2024/04/GHSA-hf5c-hjgx-rmrw/GHSA-hf5c-hjgx-rmrw.json b/advisories/unreviewed/2024/04/GHSA-hf5c-hjgx-rmrw/GHSA-hf5c-hjgx-rmrw.json index 487be439431..398e72ac3fe 100644 --- a/advisories/unreviewed/2024/04/GHSA-hf5c-hjgx-rmrw/GHSA-hf5c-hjgx-rmrw.json +++ b/advisories/unreviewed/2024/04/GHSA-hf5c-hjgx-rmrw/GHSA-hf5c-hjgx-rmrw.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-hf5c-hjgx-rmrw", - "modified": "2024-04-16T18:31:35Z", + "modified": "2024-08-22T18:31:19Z", "published": "2024-04-16T18:31:35Z", "aliases": [ "CVE-2024-3858" ], "details": "It was possible to mutate a JavaScript object so that the JIT could crash while tracing it. This vulnerability affects Firefox < 125.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-476" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-04-16T16:15:08Z" diff --git a/advisories/unreviewed/2024/04/GHSA-rq49-j5jp-7mr4/GHSA-rq49-j5jp-7mr4.json b/advisories/unreviewed/2024/04/GHSA-rq49-j5jp-7mr4/GHSA-rq49-j5jp-7mr4.json index 295a493aa69..c905feb0a52 100644 --- a/advisories/unreviewed/2024/04/GHSA-rq49-j5jp-7mr4/GHSA-rq49-j5jp-7mr4.json +++ b/advisories/unreviewed/2024/04/GHSA-rq49-j5jp-7mr4/GHSA-rq49-j5jp-7mr4.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-rq49-j5jp-7mr4", - "modified": "2024-04-07T09:30:29Z", + "modified": "2024-08-22T18:31:18Z", "published": "2024-04-07T09:30:29Z", "aliases": [ "CVE-2024-30418" ], "details": "Vulnerability of insufficient permission verification in the app management module.\nImpact: Successful exploitation of this vulnerability will affect availability.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-280" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-04-07T09:15:08Z" diff --git a/advisories/unreviewed/2024/05/GHSA-cv9w-4mcm-4cc2/GHSA-cv9w-4mcm-4cc2.json b/advisories/unreviewed/2024/05/GHSA-cv9w-4mcm-4cc2/GHSA-cv9w-4mcm-4cc2.json index 47e74a7b007..70987f831be 100644 --- a/advisories/unreviewed/2024/05/GHSA-cv9w-4mcm-4cc2/GHSA-cv9w-4mcm-4cc2.json +++ b/advisories/unreviewed/2024/05/GHSA-cv9w-4mcm-4cc2/GHSA-cv9w-4mcm-4cc2.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-cv9w-4mcm-4cc2", - "modified": "2024-05-14T18:30:52Z", + "modified": "2024-08-22T18:31:19Z", "published": "2024-05-14T18:30:52Z", "aliases": [ "CVE-2024-3016" ], "details": "NEC Platforms DT900 and DT900S Series 5.0.0.0 – v5.3.4.4, v5.4.0.0 – v5.6.0.20 allows an attacker to access a non-documented the system settings to change settings via local network with unauthenticated user.\n\n", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N" + } ], "affected": [ @@ -27,7 +30,7 @@ "cwe_ids": [ "CWE-912" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-05-14T15:39:46Z" diff --git a/advisories/unreviewed/2024/05/GHSA-fmvf-fm6q-vpjg/GHSA-fmvf-fm6q-vpjg.json b/advisories/unreviewed/2024/05/GHSA-fmvf-fm6q-vpjg/GHSA-fmvf-fm6q-vpjg.json index 72859e1aac4..57e8a8cea88 100644 --- a/advisories/unreviewed/2024/05/GHSA-fmvf-fm6q-vpjg/GHSA-fmvf-fm6q-vpjg.json +++ b/advisories/unreviewed/2024/05/GHSA-fmvf-fm6q-vpjg/GHSA-fmvf-fm6q-vpjg.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-fmvf-fm6q-vpjg", - "modified": "2024-05-21T15:31:38Z", + "modified": "2024-08-22T18:31:19Z", "published": "2024-05-21T15:31:38Z", "aliases": [ "CVE-2024-35386" ], "details": "An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_do_gc function in the mjs.c file.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -27,7 +30,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-05-21T14:15:12Z" diff --git a/advisories/unreviewed/2024/05/GHSA-vq2q-wrwm-2ggf/GHSA-vq2q-wrwm-2ggf.json b/advisories/unreviewed/2024/05/GHSA-vq2q-wrwm-2ggf/GHSA-vq2q-wrwm-2ggf.json index 6475ef24dff..160e0dc00fd 100644 --- a/advisories/unreviewed/2024/05/GHSA-vq2q-wrwm-2ggf/GHSA-vq2q-wrwm-2ggf.json +++ b/advisories/unreviewed/2024/05/GHSA-vq2q-wrwm-2ggf/GHSA-vq2q-wrwm-2ggf.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-vq2q-wrwm-2ggf", - "modified": "2024-05-14T18:30:49Z", + "modified": "2024-08-22T18:31:19Z", "published": "2024-05-14T18:30:49Z", "aliases": [ "CVE-2024-34226" ], "details": "SQL injection vulnerability in /php-sqlite-vms/?page=manage_visitor&id=1 in SourceCodester Visitor Management System 1.0 allow attackers to execute arbitrary SQL commands via the id parameters.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-05-14T15:38:36Z" diff --git a/advisories/unreviewed/2024/06/GHSA-gfx2-f362-7f24/GHSA-gfx2-f362-7f24.json b/advisories/unreviewed/2024/06/GHSA-gfx2-f362-7f24/GHSA-gfx2-f362-7f24.json index 579082b5f69..86d75ad1861 100644 --- a/advisories/unreviewed/2024/06/GHSA-gfx2-f362-7f24/GHSA-gfx2-f362-7f24.json +++ b/advisories/unreviewed/2024/06/GHSA-gfx2-f362-7f24/GHSA-gfx2-f362-7f24.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-gfx2-f362-7f24", - "modified": "2024-06-29T06:31:39Z", + "modified": "2024-08-22T18:31:19Z", "published": "2024-06-29T06:31:39Z", "aliases": [ "CVE-2022-27540" ], "details": "A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-367" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-06-28T19:15:03Z" diff --git a/advisories/unreviewed/2024/06/GHSA-qpvg-vp7c-mg9m/GHSA-qpvg-vp7c-mg9m.json b/advisories/unreviewed/2024/06/GHSA-qpvg-vp7c-mg9m/GHSA-qpvg-vp7c-mg9m.json index ea84e124965..dc928a78bb1 100644 --- a/advisories/unreviewed/2024/06/GHSA-qpvg-vp7c-mg9m/GHSA-qpvg-vp7c-mg9m.json +++ b/advisories/unreviewed/2024/06/GHSA-qpvg-vp7c-mg9m/GHSA-qpvg-vp7c-mg9m.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-qpvg-vp7c-mg9m", - "modified": "2024-06-06T21:30:38Z", + "modified": "2024-08-22T18:31:19Z", "published": "2024-06-06T21:30:38Z", "aliases": [ "CVE-2024-36795" ], "details": "Insecure permissions in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to access URLs and directories embedded within the firmware via unspecified vectors.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-22" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-06-06T21:15:48Z" diff --git a/advisories/unreviewed/2024/07/GHSA-2x53-jv7f-c2x5/GHSA-2x53-jv7f-c2x5.json b/advisories/unreviewed/2024/07/GHSA-2x53-jv7f-c2x5/GHSA-2x53-jv7f-c2x5.json index 8f7a9d6c7fa..c7191db11a8 100644 --- a/advisories/unreviewed/2024/07/GHSA-2x53-jv7f-c2x5/GHSA-2x53-jv7f-c2x5.json +++ b/advisories/unreviewed/2024/07/GHSA-2x53-jv7f-c2x5/GHSA-2x53-jv7f-c2x5.json @@ -28,6 +28,7 @@ ], "database_specific": { "cwe_ids": [ + "CWE-22", "CWE-287" ], "severity": "HIGH", diff --git a/advisories/unreviewed/2024/07/GHSA-99jj-f2xq-29qh/GHSA-99jj-f2xq-29qh.json b/advisories/unreviewed/2024/07/GHSA-99jj-f2xq-29qh/GHSA-99jj-f2xq-29qh.json index d0fc4f193cd..35baa9d8b60 100644 --- a/advisories/unreviewed/2024/07/GHSA-99jj-f2xq-29qh/GHSA-99jj-f2xq-29qh.json +++ b/advisories/unreviewed/2024/07/GHSA-99jj-f2xq-29qh/GHSA-99jj-f2xq-29qh.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-99jj-f2xq-29qh", - "modified": "2024-07-18T09:30:51Z", + "modified": "2024-08-22T18:31:19Z", "published": "2024-07-18T09:30:51Z", "aliases": [ "CVE-2024-5554" @@ -36,7 +36,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/07/GHSA-9f75-gjv3-f63r/GHSA-9f75-gjv3-f63r.json b/advisories/unreviewed/2024/07/GHSA-9f75-gjv3-f63r/GHSA-9f75-gjv3-f63r.json index 223961bcd60..90bf0f80240 100644 --- a/advisories/unreviewed/2024/07/GHSA-9f75-gjv3-f63r/GHSA-9f75-gjv3-f63r.json +++ b/advisories/unreviewed/2024/07/GHSA-9f75-gjv3-f63r/GHSA-9f75-gjv3-f63r.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-9f75-gjv3-f63r", - "modified": "2024-07-19T21:31:11Z", + "modified": "2024-08-22T18:31:19Z", "published": "2024-07-19T21:31:11Z", "aliases": [ "CVE-2024-41599" ], "details": "Cross Site Scripting vulnerability in RuoYi v.4.7.9 and before allows a remote attacker to execute arbitrary code via the file upload method", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-07-19T20:15:09Z" diff --git a/advisories/unreviewed/2024/07/GHSA-9g8f-2366-pj88/GHSA-9g8f-2366-pj88.json b/advisories/unreviewed/2024/07/GHSA-9g8f-2366-pj88/GHSA-9g8f-2366-pj88.json index cc18c448825..c027b7367a6 100644 --- a/advisories/unreviewed/2024/07/GHSA-9g8f-2366-pj88/GHSA-9g8f-2366-pj88.json +++ b/advisories/unreviewed/2024/07/GHSA-9g8f-2366-pj88/GHSA-9g8f-2366-pj88.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-9g8f-2366-pj88", - "modified": "2024-07-19T18:31:21Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-07-19T18:31:21Z", "aliases": [ "CVE-2024-41600" ], "details": "Insecure Permissions vulnerability in lin-CMS Springboot v.0.2.1 and before allows a remote attacker to obtain sensitive information via the login method in the UserController.java component.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" + } ], "affected": [ @@ -27,7 +30,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-07-19T18:15:05Z" diff --git a/advisories/unreviewed/2024/07/GHSA-g8mv-cj5h-rwjh/GHSA-g8mv-cj5h-rwjh.json b/advisories/unreviewed/2024/07/GHSA-g8mv-cj5h-rwjh/GHSA-g8mv-cj5h-rwjh.json index 0b3494bd4ce..15aba166aff 100644 --- a/advisories/unreviewed/2024/07/GHSA-g8mv-cj5h-rwjh/GHSA-g8mv-cj5h-rwjh.json +++ b/advisories/unreviewed/2024/07/GHSA-g8mv-cj5h-rwjh/GHSA-g8mv-cj5h-rwjh.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-g8mv-cj5h-rwjh", - "modified": "2024-07-18T09:30:51Z", + "modified": "2024-08-22T18:31:19Z", "published": "2024-07-18T09:30:51Z", "aliases": [ "CVE-2024-5555" @@ -36,7 +36,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/07/GHSA-v8wj-qf3f-5p7v/GHSA-v8wj-qf3f-5p7v.json b/advisories/unreviewed/2024/07/GHSA-v8wj-qf3f-5p7v/GHSA-v8wj-qf3f-5p7v.json index 6a56fa14491..9186a351001 100644 --- a/advisories/unreviewed/2024/07/GHSA-v8wj-qf3f-5p7v/GHSA-v8wj-qf3f-5p7v.json +++ b/advisories/unreviewed/2024/07/GHSA-v8wj-qf3f-5p7v/GHSA-v8wj-qf3f-5p7v.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-v8wj-qf3f-5p7v", - "modified": "2024-07-19T09:32:06Z", + "modified": "2024-08-22T18:31:19Z", "published": "2024-07-19T09:32:06Z", "aliases": [ "CVE-2024-39457" ], "details": "Cybozu Garoon 6.0.0 to 6.0.1 contains a cross-site scripting vulnerability in PDF preview. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user’s web browser.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-07-19T09:15:05Z" diff --git a/advisories/unreviewed/2024/07/GHSA-vwv2-7pwm-39x4/GHSA-vwv2-7pwm-39x4.json b/advisories/unreviewed/2024/07/GHSA-vwv2-7pwm-39x4/GHSA-vwv2-7pwm-39x4.json index 0b53b1ae406..eb01c554763 100644 --- a/advisories/unreviewed/2024/07/GHSA-vwv2-7pwm-39x4/GHSA-vwv2-7pwm-39x4.json +++ b/advisories/unreviewed/2024/07/GHSA-vwv2-7pwm-39x4/GHSA-vwv2-7pwm-39x4.json @@ -28,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-22" ], "severity": "CRITICAL", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/07/GHSA-wx53-7r2h-f7w6/GHSA-wx53-7r2h-f7w6.json b/advisories/unreviewed/2024/07/GHSA-wx53-7r2h-f7w6/GHSA-wx53-7r2h-f7w6.json index f6b92d93a8a..23536d65ce0 100644 --- a/advisories/unreviewed/2024/07/GHSA-wx53-7r2h-f7w6/GHSA-wx53-7r2h-f7w6.json +++ b/advisories/unreviewed/2024/07/GHSA-wx53-7r2h-f7w6/GHSA-wx53-7r2h-f7w6.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-wx53-7r2h-f7w6", - "modified": "2024-07-18T00:31:19Z", + "modified": "2024-08-22T18:31:19Z", "published": "2024-07-18T00:31:19Z", "aliases": [ "CVE-2023-43971" ], "details": "Cross Site Scripting vulnerability in ACG-faka v1.1.7 allows a remote attacker to execute arbitrary code via the encode parameter in Index.php.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-07-17T22:15:03Z" diff --git a/advisories/unreviewed/2024/07/GHSA-x749-289q-pg9q/GHSA-x749-289q-pg9q.json b/advisories/unreviewed/2024/07/GHSA-x749-289q-pg9q/GHSA-x749-289q-pg9q.json index 0111e75b746..3421fcd3120 100644 --- a/advisories/unreviewed/2024/07/GHSA-x749-289q-pg9q/GHSA-x749-289q-pg9q.json +++ b/advisories/unreviewed/2024/07/GHSA-x749-289q-pg9q/GHSA-x749-289q-pg9q.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-x749-289q-pg9q", - "modified": "2024-07-18T12:30:52Z", + "modified": "2024-08-22T18:31:19Z", "published": "2024-07-18T12:30:52Z", "aliases": [ "CVE-2024-40725" ], "details": "A partial fix for  CVE-2024-39884 in the core of Apache HTTP Server 2.4.61 ignores some use of the legacy content-type based configuration of handlers. \"AddType\" and similar configuration, under some circumstances where files are requested indirectly, result in source code disclosure of local content. For example, PHP scripts may be served instead of interpreted.\n\nUsers are recommended to upgrade to version 2.4.62, which fixes this issue.\n\n", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } ], "affected": [ @@ -27,7 +30,7 @@ "cwe_ids": [ "CWE-668" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-07-18T10:15:02Z" diff --git a/advisories/unreviewed/2024/08/GHSA-269x-4f35-gf3h/GHSA-269x-4f35-gf3h.json b/advisories/unreviewed/2024/08/GHSA-269x-4f35-gf3h/GHSA-269x-4f35-gf3h.json index a62422f9061..2f5ece6537c 100644 --- a/advisories/unreviewed/2024/08/GHSA-269x-4f35-gf3h/GHSA-269x-4f35-gf3h.json +++ b/advisories/unreviewed/2024/08/GHSA-269x-4f35-gf3h/GHSA-269x-4f35-gf3h.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-269x-4f35-gf3h", - "modified": "2024-08-17T09:30:25Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-17T09:30:25Z", "aliases": [ "CVE-2024-42315" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nexfat: fix potential deadlock on __exfat_get_dentry_set\n\nWhen accessing a file with more entries than ES_MAX_ENTRY_NUM, the bh-array\nis allocated in __exfat_get_entry_set. The problem is that the bh-array is\nallocated with GFP_KERNEL. It does not make sense. In the following cases,\na deadlock for sbi->s_lock between the two processes may occur.\n\n CPU0 CPU1\n ---- ----\n kswapd\n balance_pgdat\n lock(fs_reclaim)\n exfat_iterate\n lock(&sbi->s_lock)\n exfat_readdir\n exfat_get_uniname_from_ext_entry\n exfat_get_dentry_set\n __exfat_get_dentry_set\n kmalloc_array\n ...\n lock(fs_reclaim)\n ...\n evict\n exfat_evict_inode\n lock(&sbi->s_lock)\n\nTo fix this, let's allocate bh-array with GFP_NOFS.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -33,9 +36,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-667" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-17T09:15:11Z" diff --git a/advisories/unreviewed/2024/08/GHSA-2jhx-w3vc-w59g/GHSA-2jhx-w3vc-w59g.json b/advisories/unreviewed/2024/08/GHSA-2jhx-w3vc-w59g/GHSA-2jhx-w3vc-w59g.json new file mode 100644 index 00000000000..4b844131d39 --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-2jhx-w3vc-w59g/GHSA-2jhx-w3vc-w59g.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-2jhx-w3vc-w59g", + "modified": "2024-08-22T18:31:22Z", + "published": "2024-08-22T18:31:22Z", + "aliases": [ + "CVE-2024-43780" + ], + "details": "Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.0, 9.8.x <= 9.8.2 fail to enforce permissions which allows a guest user with read access to upload files to a channel.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-43780" + }, + { + "type": "WEB", + "url": "https://mattermost.com/security-updates" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-284" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T16:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-2xc5-3f92-ffpr/GHSA-2xc5-3f92-ffpr.json b/advisories/unreviewed/2024/08/GHSA-2xc5-3f92-ffpr/GHSA-2xc5-3f92-ffpr.json index 17aee61485d..8c08ec91017 100644 --- a/advisories/unreviewed/2024/08/GHSA-2xc5-3f92-ffpr/GHSA-2xc5-3f92-ffpr.json +++ b/advisories/unreviewed/2024/08/GHSA-2xc5-3f92-ffpr/GHSA-2xc5-3f92-ffpr.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-2xc5-3f92-ffpr", - "modified": "2024-08-21T21:30:47Z", + "modified": "2024-08-22T18:31:21Z", "published": "2024-08-21T21:30:47Z", "aliases": [ "CVE-2024-7978" ], "details": "Insufficient policy enforcement in Data Transfer in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-21T21:15:09Z" diff --git a/advisories/unreviewed/2024/08/GHSA-3466-hwg6-rp7h/GHSA-3466-hwg6-rp7h.json b/advisories/unreviewed/2024/08/GHSA-3466-hwg6-rp7h/GHSA-3466-hwg6-rp7h.json index 5ccbfd40540..37d6a7f65b4 100644 --- a/advisories/unreviewed/2024/08/GHSA-3466-hwg6-rp7h/GHSA-3466-hwg6-rp7h.json +++ b/advisories/unreviewed/2024/08/GHSA-3466-hwg6-rp7h/GHSA-3466-hwg6-rp7h.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-3466-hwg6-rp7h", - "modified": "2024-08-21T21:30:47Z", + "modified": "2024-08-22T18:31:21Z", "published": "2024-08-21T21:30:47Z", "aliases": [ "CVE-2024-7979" ], "details": "Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a crafted symbolic link. (Chromium security severity: Medium)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-345" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-21T21:15:09Z" diff --git a/advisories/unreviewed/2024/08/GHSA-374f-438q-472r/GHSA-374f-438q-472r.json b/advisories/unreviewed/2024/08/GHSA-374f-438q-472r/GHSA-374f-438q-472r.json index d98127b6a06..85f6b7d7408 100644 --- a/advisories/unreviewed/2024/08/GHSA-374f-438q-472r/GHSA-374f-438q-472r.json +++ b/advisories/unreviewed/2024/08/GHSA-374f-438q-472r/GHSA-374f-438q-472r.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-374f-438q-472r", - "modified": "2024-08-21T21:30:46Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-21T21:30:46Z", "aliases": [ "CVE-2024-7968" ], "details": "Use after free in Autofill in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had convinced the user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ "CWE-416" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-21T21:15:09Z" diff --git a/advisories/unreviewed/2024/08/GHSA-37c4-pj3v-mf79/GHSA-37c4-pj3v-mf79.json b/advisories/unreviewed/2024/08/GHSA-37c4-pj3v-mf79/GHSA-37c4-pj3v-mf79.json index 48f02de53cf..7aa83fa2dee 100644 --- a/advisories/unreviewed/2024/08/GHSA-37c4-pj3v-mf79/GHSA-37c4-pj3v-mf79.json +++ b/advisories/unreviewed/2024/08/GHSA-37c4-pj3v-mf79/GHSA-37c4-pj3v-mf79.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-37c4-pj3v-mf79", - "modified": "2024-08-19T06:30:53Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-17T09:30:24Z", "aliases": [ "CVE-2024-42302" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nPCI/DPC: Fix use-after-free on concurrent DPC and hot-removal\n\nKeith reports a use-after-free when a DPC event occurs concurrently to\nhot-removal of the same portion of the hierarchy:\n\nThe dpc_handler() awaits readiness of the secondary bus below the\nDownstream Port where the DPC event occurred. To do so, it polls the\nconfig space of the first child device on the secondary bus. If that\nchild device is concurrently removed, accesses to its struct pci_dev\ncause the kernel to oops.\n\nThat's because pci_bridge_wait_for_secondary_bus() neglects to hold a\nreference on the child device. Before v6.3, the function was only\ncalled on resume from system sleep or on runtime resume. Holding a\nreference wasn't necessary back then because the pciehp IRQ thread\ncould never run concurrently. (On resume from system sleep, IRQs are\nnot enabled until after the resume_noirq phase. And runtime resume is\nalways awaited before a PCI device is removed.)\n\nHowever starting with v6.3, pci_bridge_wait_for_secondary_bus() is also\ncalled on a DPC event. Commit 53b54ad074de (\"PCI/DPC: Await readiness\nof secondary bus after reset\"), which introduced that, failed to\nappreciate that pci_bridge_wait_for_secondary_bus() now needs to hold a\nreference on the child device because dpc_handler() and pciehp may\nindeed run concurrently. The commit was backported to v5.10+ stable\nkernels, so that's the oldest one affected.\n\nAdd the missing reference acquisition.\n\nAbridged stack trace:\n\n BUG: unable to handle page fault for address: 00000000091400c0\n CPU: 15 PID: 2464 Comm: irq/53-pcie-dpc 6.9.0\n RIP: pci_bus_read_config_dword+0x17/0x50\n pci_dev_wait()\n pci_bridge_wait_for_secondary_bus()\n dpc_reset_link()\n pcie_do_recovery()\n dpc_handler()", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -45,9 +48,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-416" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-17T09:15:10Z" diff --git a/advisories/unreviewed/2024/08/GHSA-3j95-8g47-fpwh/GHSA-3j95-8g47-fpwh.json b/advisories/unreviewed/2024/08/GHSA-3j95-8g47-fpwh/GHSA-3j95-8g47-fpwh.json new file mode 100644 index 00000000000..603410b753b --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-3j95-8g47-fpwh/GHSA-3j95-8g47-fpwh.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3j95-8g47-fpwh", + "modified": "2024-08-22T18:31:21Z", + "published": "2024-08-22T18:31:21Z", + "aliases": [ + "CVE-2024-40884" + ], + "details": "Mattermost versions 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 fail to properly enforce permissions which allows a team admin user without \"Add Team Members\" permission to disable the invite URL.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-40884" + }, + { + "type": "WEB", + "url": "https://mattermost.com/security-updates" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-284" + ], + "severity": "LOW", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T16:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-3r58-6hw4-672v/GHSA-3r58-6hw4-672v.json b/advisories/unreviewed/2024/08/GHSA-3r58-6hw4-672v/GHSA-3r58-6hw4-672v.json index 915c9fa2d4f..891c9547d47 100644 --- a/advisories/unreviewed/2024/08/GHSA-3r58-6hw4-672v/GHSA-3r58-6hw4-672v.json +++ b/advisories/unreviewed/2024/08/GHSA-3r58-6hw4-672v/GHSA-3r58-6hw4-672v.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-3r58-6hw4-672v", - "modified": "2024-08-21T18:31:28Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-21T18:31:28Z", "aliases": [ "CVE-2024-42782" ], "details": "A SQL injection vulnerability in \"/music/ajax.php?action=find_music\" in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the \"search\" parameter.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-21T18:15:10Z" diff --git a/advisories/unreviewed/2024/08/GHSA-42gg-98x6-j389/GHSA-42gg-98x6-j389.json b/advisories/unreviewed/2024/08/GHSA-42gg-98x6-j389/GHSA-42gg-98x6-j389.json index a51954ccb7f..87784cdec3a 100644 --- a/advisories/unreviewed/2024/08/GHSA-42gg-98x6-j389/GHSA-42gg-98x6-j389.json +++ b/advisories/unreviewed/2024/08/GHSA-42gg-98x6-j389/GHSA-42gg-98x6-j389.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-42gg-98x6-j389", - "modified": "2024-08-20T18:31:26Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-20T18:31:26Z", "aliases": [ "CVE-2024-42598" ], "details": "SeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that although admin_editplayer.php imposes restrictions on edited files, attackers can still bypass these restrictions and write code, allowing authenticated attackers to exploit the vulnerability to execute arbitrary commands and gain system privileges.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L" + } ], "affected": [ @@ -18,6 +21,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42598" }, + { + "type": "WEB", + "url": "https://gitee.com/fushuling/cve/blob/master/CVE-2024-42598.md" + }, { "type": "WEB", "url": "https://gitee.com/fushuling/cve/blob/master/SeaCMS%20V13%20admin_editplayer.php%20code%20injection.md" @@ -25,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-94" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-20T16:15:11Z" diff --git a/advisories/unreviewed/2024/08/GHSA-4pj3-wmgx-2h8r/GHSA-4pj3-wmgx-2h8r.json b/advisories/unreviewed/2024/08/GHSA-4pj3-wmgx-2h8r/GHSA-4pj3-wmgx-2h8r.json index f4d93f50134..5a6c851277f 100644 --- a/advisories/unreviewed/2024/08/GHSA-4pj3-wmgx-2h8r/GHSA-4pj3-wmgx-2h8r.json +++ b/advisories/unreviewed/2024/08/GHSA-4pj3-wmgx-2h8r/GHSA-4pj3-wmgx-2h8r.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-4pj3-wmgx-2h8r", - "modified": "2024-08-21T21:30:46Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-21T21:30:46Z", "aliases": [ "CVE-2024-7966" ], "details": "Out of bounds memory access in Skia in Google Chrome prior to 128.0.6613.84 allowed a remote attacker who had compromised the renderer process to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-119" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-21T21:15:09Z" diff --git a/advisories/unreviewed/2024/08/GHSA-565f-cr27-p63x/GHSA-565f-cr27-p63x.json b/advisories/unreviewed/2024/08/GHSA-565f-cr27-p63x/GHSA-565f-cr27-p63x.json index 20ee03481d5..1c567ab923d 100644 --- a/advisories/unreviewed/2024/08/GHSA-565f-cr27-p63x/GHSA-565f-cr27-p63x.json +++ b/advisories/unreviewed/2024/08/GHSA-565f-cr27-p63x/GHSA-565f-cr27-p63x.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-565f-cr27-p63x", - "modified": "2024-08-17T12:30:32Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-17T12:30:32Z", "aliases": [ "CVE-2024-43833" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: v4l: async: Fix NULL pointer dereference in adding ancillary links\n\nIn v4l2_async_create_ancillary_links(), ancillary links are created for\nlens and flash sub-devices. These are sub-device to sub-device links and\nif the async notifier is related to a V4L2 device, the source sub-device\nof the ancillary link is NULL, leading to a NULL pointer dereference.\nCheck the notifier's sd field is non-NULL in\nv4l2_async_create_ancillary_links().\n\n[Sakari Ailus: Reword the subject and commit messages slightly.]", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -37,9 +40,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-476" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-17T10:15:09Z" diff --git a/advisories/unreviewed/2024/08/GHSA-58q5-g3vc-4rgh/GHSA-58q5-g3vc-4rgh.json b/advisories/unreviewed/2024/08/GHSA-58q5-g3vc-4rgh/GHSA-58q5-g3vc-4rgh.json index 1375abad201..ae5afd8f849 100644 --- a/advisories/unreviewed/2024/08/GHSA-58q5-g3vc-4rgh/GHSA-58q5-g3vc-4rgh.json +++ b/advisories/unreviewed/2024/08/GHSA-58q5-g3vc-4rgh/GHSA-58q5-g3vc-4rgh.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-58q5-g3vc-4rgh", - "modified": "2024-08-19T06:30:54Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-17T12:30:33Z", "aliases": [ "CVE-2024-43860" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nremoteproc: imx_rproc: Skip over memory region when node value is NULL\n\nIn imx_rproc_addr_init() \"nph = of_count_phandle_with_args()\" just counts\nnumber of phandles. But phandles may be empty. So of_parse_phandle() in\nthe parsing loop (0 < a < nph) may return NULL which is later dereferenced.\nAdjust this issue by adding NULL-return check.\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.\n\n[Fixed title to fit within the prescribed 70-75 charcters]", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -53,9 +56,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-476" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-17T10:15:10Z" diff --git a/advisories/unreviewed/2024/08/GHSA-5ffp-85mp-h2q2/GHSA-5ffp-85mp-h2q2.json b/advisories/unreviewed/2024/08/GHSA-5ffp-85mp-h2q2/GHSA-5ffp-85mp-h2q2.json index aa7c3694fa5..a4956f8b065 100644 --- a/advisories/unreviewed/2024/08/GHSA-5ffp-85mp-h2q2/GHSA-5ffp-85mp-h2q2.json +++ b/advisories/unreviewed/2024/08/GHSA-5ffp-85mp-h2q2/GHSA-5ffp-85mp-h2q2.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-5ffp-85mp-h2q2", - "modified": "2024-08-17T12:30:33Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-17T12:30:33Z", "aliases": [ "CVE-2024-43855" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmd: fix deadlock between mddev_suspend and flush bio\n\nDeadlock occurs when mddev is being suspended while some flush bio is in\nprogress. It is a complex issue.\n\nT1. the first flush is at the ending stage, it clears 'mddev->flush_bio'\n and tries to submit data, but is blocked because mddev is suspended\n by T4.\nT2. the second flush sets 'mddev->flush_bio', and attempts to queue\n md_submit_flush_data(), which is already running (T1) and won't\n execute again if on the same CPU as T1.\nT3. the third flush inc active_io and tries to flush, but is blocked because\n 'mddev->flush_bio' is not NULL (set by T2).\nT4. mddev_suspend() is called and waits for active_io dec to 0 which is inc\n by T3.\n\n T1\t\tT2\t\tT3\t\tT4\n (flush 1)\t(flush 2)\t(third 3)\t(suspend)\n md_submit_flush_data\n mddev->flush_bio = NULL;\n .\n .\t \tmd_flush_request\n .\t \t mddev->flush_bio = bio\n .\t \t queue submit_flushes\n .\t\t .\n .\t\t .\t\tmd_handle_request\n .\t\t .\t\t active_io + 1\n .\t\t .\t\t md_flush_request\n .\t\t .\t\t wait !mddev->flush_bio\n .\t\t .\n .\t\t .\t\t\t\tmddev_suspend\n .\t\t .\t\t\t\t wait !active_io\n .\t\t .\n .\t\t submit_flushes\n .\t\t queue_work md_submit_flush_data\n .\t\t //md_submit_flush_data is already running (T1)\n .\n md_handle_request\n wait resume\n\nThe root issue is non-atomic inc/dec of active_io during flush process.\nactive_io is dec before md_submit_flush_data is queued, and inc soon\nafter md_submit_flush_data() run.\n md_flush_request\n active_io + 1\n submit_flushes\n active_io - 1\n md_submit_flush_data\n md_handle_request\n active_io + 1\n make_request\n active_io - 1\n\nIf active_io is dec after md_handle_request() instead of within\nsubmit_flushes(), make_request() can be called directly intead of\nmd_handle_request() in md_submit_flush_data(), and active_io will\nonly inc and dec once in the whole flush process. Deadlock will be\nfixed.\n\nAdditionally, the only difference between fixing the issue and before is\nthat there is no return error handling of make_request(). But after\nprevious patch cleaned md_write_start(), make_requst() only return error\nin raid5_make_request() by dm-raid, see commit 41425f96d7aa (\"dm-raid456,\nmd/raid456: fix a deadlock for dm-raid456 while io concurrent with\nreshape)\". Since dm always splits data and flush operation into two\nseparate io, io size of flush submitted by dm always is 0, make_request()\nwill not be called in md_submit_flush_data(). To prevent future\nmodifications from introducing issues, add WARN_ON to ensure\nmake_request() no error is returned in this context.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -37,9 +40,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-476" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-17T10:15:10Z" diff --git a/advisories/unreviewed/2024/08/GHSA-5qxq-95fv-whxm/GHSA-5qxq-95fv-whxm.json b/advisories/unreviewed/2024/08/GHSA-5qxq-95fv-whxm/GHSA-5qxq-95fv-whxm.json new file mode 100644 index 00000000000..0bc45aef42b --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-5qxq-95fv-whxm/GHSA-5qxq-95fv-whxm.json @@ -0,0 +1,47 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5qxq-95fv-whxm", + "modified": "2024-08-22T18:31:22Z", + "published": "2024-08-22T18:31:22Z", + "aliases": [ + "CVE-2024-45192" + ], + "details": "An issue was discovered in Matrix libolm (aka Olm) through 3.2.16. Cache-timing attacks can occur due to use of base64 when decoding group session keys. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45192" + }, + { + "type": "WEB", + "url": "https://gitlab.matrix.org/matrix-org/olm" + }, + { + "type": "WEB", + "url": "https://gitlab.matrix.org/matrix-org/olm/-/commit/6d4b5b07887821a95b144091c8497d09d377f985" + }, + { + "type": "WEB", + "url": "https://news.ycombinator.com/item?id=41249371" + }, + { + "type": "WEB", + "url": "https://soatok.blog/2024/08/14/security-issues-in-matrixs-olm-library" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T16:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-5wfc-h7w4-43mx/GHSA-5wfc-h7w4-43mx.json b/advisories/unreviewed/2024/08/GHSA-5wfc-h7w4-43mx/GHSA-5wfc-h7w4-43mx.json new file mode 100644 index 00000000000..dd98f07aff9 --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-5wfc-h7w4-43mx/GHSA-5wfc-h7w4-43mx.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-5wfc-h7w4-43mx", + "modified": "2024-08-22T18:31:22Z", + "published": "2024-08-22T18:31:22Z", + "aliases": [ + "CVE-2024-42774" + ], + "details": "An Incorrect Access Control vulnerability was found in /admin/delete_room.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to delete valid hotel room entries in the administrator section.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42774" + }, + { + "type": "WEB", + "url": "https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Hotel%20Management%20System%20v1.0/Broken%20Access%20Control%20-%20Delete%20Room%20Entry.pdf" + }, + { + "type": "WEB", + "url": "https://www.kashipara.com" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T17:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-63vm-hcp4-j9j3/GHSA-63vm-hcp4-j9j3.json b/advisories/unreviewed/2024/08/GHSA-63vm-hcp4-j9j3/GHSA-63vm-hcp4-j9j3.json index 7e3bdad0d63..bbac96d2f8c 100644 --- a/advisories/unreviewed/2024/08/GHSA-63vm-hcp4-j9j3/GHSA-63vm-hcp4-j9j3.json +++ b/advisories/unreviewed/2024/08/GHSA-63vm-hcp4-j9j3/GHSA-63vm-hcp4-j9j3.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-63vm-hcp4-j9j3", - "modified": "2024-08-17T12:30:32Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-17T12:30:32Z", "aliases": [ "CVE-2024-43837" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbpf: Fix null pointer dereference in resolve_prog_type() for BPF_PROG_TYPE_EXT\n\nWhen loading a EXT program without specifying `attr->attach_prog_fd`,\nthe `prog->aux->dst_prog` will be null. At this time, calling\nresolve_prog_type() anywhere will result in a null pointer dereference.\n\nExample stack trace:\n\n[ 8.107863] Unable to handle kernel NULL pointer dereference at virtual address 0000000000000004\n[ 8.108262] Mem abort info:\n[ 8.108384] ESR = 0x0000000096000004\n[ 8.108547] EC = 0x25: DABT (current EL), IL = 32 bits\n[ 8.108722] SET = 0, FnV = 0\n[ 8.108827] EA = 0, S1PTW = 0\n[ 8.108939] FSC = 0x04: level 0 translation fault\n[ 8.109102] Data abort info:\n[ 8.109203] ISV = 0, ISS = 0x00000004, ISS2 = 0x00000000\n[ 8.109399] CM = 0, WnR = 0, TnD = 0, TagAccess = 0\n[ 8.109614] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0\n[ 8.109836] user pgtable: 4k pages, 48-bit VAs, pgdp=0000000101354000\n[ 8.110011] [0000000000000004] pgd=0000000000000000, p4d=0000000000000000\n[ 8.112624] Internal error: Oops: 0000000096000004 [#1] PREEMPT SMP\n[ 8.112783] Modules linked in:\n[ 8.113120] CPU: 0 PID: 99 Comm: may_access_dire Not tainted 6.10.0-rc3-next-20240613-dirty #1\n[ 8.113230] Hardware name: linux,dummy-virt (DT)\n[ 8.113390] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--)\n[ 8.113429] pc : may_access_direct_pkt_data+0x24/0xa0\n[ 8.113746] lr : add_subprog_and_kfunc+0x634/0x8e8\n[ 8.113798] sp : ffff80008283b9f0\n[ 8.113813] x29: ffff80008283b9f0 x28: ffff800082795048 x27: 0000000000000001\n[ 8.113881] x26: ffff0000c0bb2600 x25: 0000000000000000 x24: 0000000000000000\n[ 8.113897] x23: ffff0000c1134000 x22: 000000000001864f x21: ffff0000c1138000\n[ 8.113912] x20: 0000000000000001 x19: ffff0000c12b8000 x18: ffffffffffffffff\n[ 8.113929] x17: 0000000000000000 x16: 0000000000000000 x15: 0720072007200720\n[ 8.113944] x14: 0720072007200720 x13: 0720072007200720 x12: 0720072007200720\n[ 8.113958] x11: 0720072007200720 x10: 0000000000f9fca4 x9 : ffff80008021f4e4\n[ 8.113991] x8 : 0101010101010101 x7 : 746f72705f6d656d x6 : 000000001e0e0f5f\n[ 8.114006] x5 : 000000000001864f x4 : ffff0000c12b8000 x3 : 000000000000001c\n[ 8.114020] x2 : 0000000000000002 x1 : 0000000000000000 x0 : 0000000000000000\n[ 8.114126] Call trace:\n[ 8.114159] may_access_direct_pkt_data+0x24/0xa0\n[ 8.114202] bpf_check+0x3bc/0x28c0\n[ 8.114214] bpf_prog_load+0x658/0xa58\n[ 8.114227] __sys_bpf+0xc50/0x2250\n[ 8.114240] __arm64_sys_bpf+0x28/0x40\n[ 8.114254] invoke_syscall.constprop.0+0x54/0xf0\n[ 8.114273] do_el0_svc+0x4c/0xd8\n[ 8.114289] el0_svc+0x3c/0x140\n[ 8.114305] el0t_64_sync_handler+0x134/0x150\n[ 8.114331] el0t_64_sync+0x168/0x170\n[ 8.114477] Code: 7100707f 54000081 f9401c00 f9403800 (b9400403)\n[ 8.118672] ---[ end trace 0000000000000000 ]---\n\nOne way to fix it is by forcing `attach_prog_fd` non-empty when\nbpf_prog_load(). But this will lead to `libbpf_probe_bpf_prog_type`\nAPI broken which use verifier log to probe prog type and will log\nnothing if we reject invalid EXT prog before bpf_check().\n\nAnother way is by adding null check in resolve_prog_type().\n\nThe issue was introduced by commit 4a9c7bbe2ed4 (\"bpf: Resolve to\nprog->aux->dst_prog->type only for BPF_PROG_TYPE_EXT\") which wanted\nto correct type resolution for BPF_PROG_TYPE_TRACING programs. Before\nthat, the type resolution of BPF_PROG_TYPE_EXT prog actually follows\nthe logic below:\n\n prog->aux->dst_prog ? prog->aux->dst_prog->type : prog->type;\n\nIt implies that when EXT program is not yet attached to `dst_prog`,\nthe prog type should be EXT itself. This code worked fine in the past.\nSo just keep using it.\n\nFix this by returning `prog->type` for BPF_PROG_TYPE_EXT if `dst_prog`\nis not present in resolve_prog_type().", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -37,9 +40,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-476" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-17T10:15:09Z" diff --git a/advisories/unreviewed/2024/08/GHSA-6j9j-7v9j-7mf7/GHSA-6j9j-7v9j-7mf7.json b/advisories/unreviewed/2024/08/GHSA-6j9j-7v9j-7mf7/GHSA-6j9j-7v9j-7mf7.json index 58c7a7d37b7..0ed7f12a2cf 100644 --- a/advisories/unreviewed/2024/08/GHSA-6j9j-7v9j-7mf7/GHSA-6j9j-7v9j-7mf7.json +++ b/advisories/unreviewed/2024/08/GHSA-6j9j-7v9j-7mf7/GHSA-6j9j-7v9j-7mf7.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-6j9j-7v9j-7mf7", - "modified": "2024-08-21T21:30:46Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-21T21:30:46Z", "aliases": [ "CVE-2024-7964" ], "details": "Use after free in Passwords in Google Chrome on Android prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ "CWE-416" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-21T21:15:08Z" diff --git a/advisories/unreviewed/2024/08/GHSA-6xgm-r8j8-r5hq/GHSA-6xgm-r8j8-r5hq.json b/advisories/unreviewed/2024/08/GHSA-6xgm-r8j8-r5hq/GHSA-6xgm-r8j8-r5hq.json index 439d6430280..e196856b8f3 100644 --- a/advisories/unreviewed/2024/08/GHSA-6xgm-r8j8-r5hq/GHSA-6xgm-r8j8-r5hq.json +++ b/advisories/unreviewed/2024/08/GHSA-6xgm-r8j8-r5hq/GHSA-6xgm-r8j8-r5hq.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-6xgm-r8j8-r5hq", - "modified": "2024-08-17T12:30:33Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-17T12:30:33Z", "aliases": [ "CVE-2024-43853" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ncgroup/cpuset: Prevent UAF in proc_cpuset_show()\n\nAn UAF can happen when /proc/cpuset is read as reported in [1].\n\nThis can be reproduced by the following methods:\n1.add an mdelay(1000) before acquiring the cgroup_lock In the\n cgroup_path_ns function.\n2.$cat /proc//cpuset repeatly.\n3.$mount -t cgroup -o cpuset cpuset /sys/fs/cgroup/cpuset/\n$umount /sys/fs/cgroup/cpuset/ repeatly.\n\nThe race that cause this bug can be shown as below:\n\n(umount)\t\t|\t(cat /proc//cpuset)\ncss_release\t\t|\tproc_cpuset_show\ncss_release_work_fn\t|\tcss = task_get_css(tsk, cpuset_cgrp_id);\ncss_free_rwork_fn\t|\tcgroup_path_ns(css->cgroup, ...);\ncgroup_destroy_root\t|\tmutex_lock(&cgroup_mutex);\nrebind_subsystems\t|\ncgroup_free_root \t|\n\t\t\t|\t// cgrp was freed, UAF\n\t\t\t|\tcgroup_path_ns_locked(cgrp,..);\n\nWhen the cpuset is initialized, the root node top_cpuset.css.cgrp\nwill point to &cgrp_dfl_root.cgrp. In cgroup v1, the mount operation will\nallocate cgroup_root, and top_cpuset.css.cgrp will point to the allocated\n&cgroup_root.cgrp. When the umount operation is executed,\ntop_cpuset.css.cgrp will be rebound to &cgrp_dfl_root.cgrp.\n\nThe problem is that when rebinding to cgrp_dfl_root, there are cases\nwhere the cgroup_root allocated by setting up the root for cgroup v1\nis cached. This could lead to a Use-After-Free (UAF) if it is\nsubsequently freed. The descendant cgroups of cgroup v1 can only be\nfreed after the css is released. However, the css of the root will never\nbe released, yet the cgroup_root should be freed when it is unmounted.\nThis means that obtaining a reference to the css of the root does\nnot guarantee that css.cgrp->root will not be freed.\n\nFix this problem by using rcu_read_lock in proc_cpuset_show().\nAs cgroup_root is kfree_rcu after commit d23b5c577715\n(\"cgroup: Make operations on the cgroup root_list RCU safe\"),\ncss->cgroup won't be freed during the critical section.\nTo call cgroup_path_ns_locked, css_set_lock is needed, so it is safe to\nreplace task_get_css with task_css.\n\n[1] https://syzkaller.appspot.com/bug?extid=9b1ff7be974a403aa4cd", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -37,9 +40,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-416" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-17T10:15:10Z" diff --git a/advisories/unreviewed/2024/08/GHSA-7pcw-pq39-gmc3/GHSA-7pcw-pq39-gmc3.json b/advisories/unreviewed/2024/08/GHSA-7pcw-pq39-gmc3/GHSA-7pcw-pq39-gmc3.json new file mode 100644 index 00000000000..f7de25c011b --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-7pcw-pq39-gmc3/GHSA-7pcw-pq39-gmc3.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-7pcw-pq39-gmc3", + "modified": "2024-08-22T18:31:22Z", + "published": "2024-08-22T18:31:22Z", + "aliases": [ + "CVE-2024-42775" + ], + "details": "An Incorrect Access Control vulnerability was found in /admin/add_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to add the valid hotel room entries in the administrator section via the direct URL access.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42775" + }, + { + "type": "WEB", + "url": "https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Hotel%20Management%20System%20v1.0/Broken%20Access%20Control%20-%20Add%20New%20Room%20Entry.pdf" + }, + { + "type": "WEB", + "url": "https://www.kashipara.com" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T17:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-85fc-rr25-p568/GHSA-85fc-rr25-p568.json b/advisories/unreviewed/2024/08/GHSA-85fc-rr25-p568/GHSA-85fc-rr25-p568.json new file mode 100644 index 00000000000..fe2ac6127c6 --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-85fc-rr25-p568/GHSA-85fc-rr25-p568.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-85fc-rr25-p568", + "modified": "2024-08-22T18:31:21Z", + "published": "2024-08-22T18:31:21Z", + "aliases": [ + "CVE-2023-6452" + ], + "details": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Forcepoint Web Security (Transaction Viewer) allows Stored XSS.\n\n\n\n\n\nThe\n Forcepoint Web Security portal allows administrators to generate \ndetailed reports on user requests made through the Web proxy. It has \nbeen determined that the \"user agent\" field in the Transaction Viewer is\n vulnerable to a persistent Cross-Site Scripting (XSS) vulnerability, \nwhich can be exploited by any user who can route traffic through the \nForcepoint Web proxy.\n\nThis \nvulnerability enables unauthorized attackers to execute JavaScript \nwithin the browser context of a Forcepoint administrator, thereby \nallowing them to perform actions on the administrator's behalf. Such a \nbreach could lead to unauthorized access or modifications, posing a \nsignificant security risk.\n\n\n\n\n\n\nThis issue affects Web Security: before 8.5.6.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-6452" + }, + { + "type": "WEB", + "url": "https://support.forcepoint.com/s/article/000042212" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "CRITICAL", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T16:15:07Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-8g6r-2qgw-fhv7/GHSA-8g6r-2qgw-fhv7.json b/advisories/unreviewed/2024/08/GHSA-8g6r-2qgw-fhv7/GHSA-8g6r-2qgw-fhv7.json index 2405ba4594f..d7d39c8e5e3 100644 --- a/advisories/unreviewed/2024/08/GHSA-8g6r-2qgw-fhv7/GHSA-8g6r-2qgw-fhv7.json +++ b/advisories/unreviewed/2024/08/GHSA-8g6r-2qgw-fhv7/GHSA-8g6r-2qgw-fhv7.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-8g6r-2qgw-fhv7", - "modified": "2024-08-22T06:30:29Z", + "modified": "2024-08-22T18:31:21Z", "published": "2024-08-22T06:30:29Z", "aliases": [ "CVE-2022-48942" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nhwmon: Handle failure to register sensor with thermal zone correctly\n\nIf an attempt is made to a sensor with a thermal zone and it fails,\nthe call to devm_thermal_zone_of_sensor_register() may return -ENODEV.\nThis may result in crashes similar to the following.\n\nUnable to handle kernel NULL pointer dereference at virtual address 00000000000003cd\n...\nInternal error: Oops: 96000021 [#1] PREEMPT SMP\n...\npstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)\npc : mutex_lock+0x18/0x60\nlr : thermal_zone_device_update+0x40/0x2e0\nsp : ffff800014c4fc60\nx29: ffff800014c4fc60 x28: ffff365ee3f6e000 x27: ffffdde218426790\nx26: ffff365ee3f6e000 x25: 0000000000000000 x24: ffff365ee3f6e000\nx23: ffffdde218426870 x22: ffff365ee3f6e000 x21: 00000000000003cd\nx20: ffff365ee8bf3308 x19: ffffffffffffffed x18: 0000000000000000\nx17: ffffdde21842689c x16: ffffdde1cb7a0b7c x15: 0000000000000040\nx14: ffffdde21a4889a0 x13: 0000000000000228 x12: 0000000000000000\nx11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000\nx8 : 0000000001120000 x7 : 0000000000000001 x6 : 0000000000000000\nx5 : 0068000878e20f07 x4 : 0000000000000000 x3 : 00000000000003cd\nx2 : ffff365ee3f6e000 x1 : 0000000000000000 x0 : 00000000000003cd\nCall trace:\n mutex_lock+0x18/0x60\n hwmon_notify_event+0xfc/0x110\n 0xffffdde1cb7a0a90\n 0xffffdde1cb7a0b7c\n irq_thread_fn+0x2c/0xa0\n irq_thread+0x134/0x240\n kthread+0x178/0x190\n ret_from_fork+0x10/0x20\nCode: d503201f d503201f d2800001 aa0103e4 (c8e47c02)\n\nJon Hunter reports that the exact call sequence is:\n\nhwmon_notify_event()\n --> hwmon_thermal_notify()\n --> thermal_zone_device_update()\n --> update_temperature()\n --> mutex_lock()\n\nThe hwmon core needs to handle all errors returned from calls\nto devm_thermal_zone_of_sensor_register(). If the call fails\nwith -ENODEV, report that the sensor was not attached to a\nthermal zone but continue to register the hwmon device.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -37,9 +40,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-476" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-22T04:15:18Z" diff --git a/advisories/unreviewed/2024/08/GHSA-8p7p-r9xv-w8g4/GHSA-8p7p-r9xv-w8g4.json b/advisories/unreviewed/2024/08/GHSA-8p7p-r9xv-w8g4/GHSA-8p7p-r9xv-w8g4.json index e545c5f5a4f..e458dc4a3cf 100644 --- a/advisories/unreviewed/2024/08/GHSA-8p7p-r9xv-w8g4/GHSA-8p7p-r9xv-w8g4.json +++ b/advisories/unreviewed/2024/08/GHSA-8p7p-r9xv-w8g4/GHSA-8p7p-r9xv-w8g4.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-8p7p-r9xv-w8g4", - "modified": "2024-08-21T21:30:47Z", + "modified": "2024-08-22T18:31:21Z", "published": "2024-08-21T21:30:47Z", "aliases": [ "CVE-2024-7980" ], "details": "Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a crafted symbolic link. (Chromium security severity: Medium)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-20" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-21T21:15:09Z" diff --git a/advisories/unreviewed/2024/08/GHSA-8p8r-qjjp-c996/GHSA-8p8r-qjjp-c996.json b/advisories/unreviewed/2024/08/GHSA-8p8r-qjjp-c996/GHSA-8p8r-qjjp-c996.json new file mode 100644 index 00000000000..e751008d0e8 --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-8p8r-qjjp-c996/GHSA-8p8r-qjjp-c996.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8p8r-qjjp-c996", + "modified": "2024-08-22T18:31:22Z", + "published": "2024-08-22T18:31:22Z", + "aliases": [ + "CVE-2024-42772" + ], + "details": "An Incorrect Access Control vulnerability was found in /admin/rooms.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to view valid hotel room entries in administrator section.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42772" + }, + { + "type": "WEB", + "url": "https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Hotel%20Management%20System%20v1.0/Broken%20Access%20Control%20-%20View%20Room%20Entry.pdf" + }, + { + "type": "WEB", + "url": "https://www.kashipara.com" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T17:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-8v6h-j8r8-9mjq/GHSA-8v6h-j8r8-9mjq.json b/advisories/unreviewed/2024/08/GHSA-8v6h-j8r8-9mjq/GHSA-8v6h-j8r8-9mjq.json index 8c11fb77ff5..f2502ef06bc 100644 --- a/advisories/unreviewed/2024/08/GHSA-8v6h-j8r8-9mjq/GHSA-8v6h-j8r8-9mjq.json +++ b/advisories/unreviewed/2024/08/GHSA-8v6h-j8r8-9mjq/GHSA-8v6h-j8r8-9mjq.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-8v6h-j8r8-9mjq", - "modified": "2024-08-21T21:30:47Z", + "modified": "2024-08-22T18:31:21Z", "published": "2024-08-21T21:30:47Z", "aliases": [ "CVE-2024-8033" ], "details": "Inappropriate implementation in WebApp Installs in Google Chrome on Windows prior to 128.0.6613.84 allowed an attacker who convinced a user to install a malicious application to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-21T21:15:09Z" diff --git a/advisories/unreviewed/2024/08/GHSA-8v9c-gh64-hq64/GHSA-8v9c-gh64-hq64.json b/advisories/unreviewed/2024/08/GHSA-8v9c-gh64-hq64/GHSA-8v9c-gh64-hq64.json new file mode 100644 index 00000000000..443178d27f5 --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-8v9c-gh64-hq64/GHSA-8v9c-gh64-hq64.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-8v9c-gh64-hq64", + "modified": "2024-08-22T18:31:23Z", + "published": "2024-08-22T18:31:23Z", + "aliases": [ + "CVE-2024-42767" + ], + "details": "Kashipara Hotel Management System v1.0 is vulnerable to Unrestricted File Upload RCE via /admin/add_room_controller.php.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42767" + }, + { + "type": "WEB", + "url": "https://cwe.mitre.org/data/definitions/434.html" + }, + { + "type": "WEB", + "url": "https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Hotel%20Management%20System%20v1.0/Unrestricted%20File%20Upload.pdf" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T18:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-96g3-59vf-qvw4/GHSA-96g3-59vf-qvw4.json b/advisories/unreviewed/2024/08/GHSA-96g3-59vf-qvw4/GHSA-96g3-59vf-qvw4.json new file mode 100644 index 00000000000..c26e064d0fc --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-96g3-59vf-qvw4/GHSA-96g3-59vf-qvw4.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-96g3-59vf-qvw4", + "modified": "2024-08-22T18:31:21Z", + "published": "2024-08-22T18:31:21Z", + "aliases": [ + "CVE-2024-42771" + ], + "details": "A Stored Cross Site Scripting (XSS) vulnerability was found in \" /admin/edit_room_controller.php\" of the Kashipara Hotel Management System v1.0, which allows remote attackers to execute arbitrary code via \"room_name\" parameter.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42771" + }, + { + "type": "WEB", + "url": "https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Hotel%20Management%20System%20v1.0/Stored%20XSS%20-%20Edit%20Room.pdf" + }, + { + "type": "WEB", + "url": "https://www.kashipara.com" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T16:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-9c64-9pw3-wh7p/GHSA-9c64-9pw3-wh7p.json b/advisories/unreviewed/2024/08/GHSA-9c64-9pw3-wh7p/GHSA-9c64-9pw3-wh7p.json new file mode 100644 index 00000000000..667bf483449 --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-9c64-9pw3-wh7p/GHSA-9c64-9pw3-wh7p.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-9c64-9pw3-wh7p", + "modified": "2024-08-22T18:31:21Z", + "published": "2024-08-22T18:31:21Z", + "aliases": [ + "CVE-2024-3127" + ], + "details": "An issue has been discovered in GitLab EE affecting all versions starting from 12.5 before 17.1.6, all versions starting from 17.2 before 17.2.4, all versions starting from 17.3 before 17.3.1. Under certain conditions it may be possible to bypass the IP restriction for groups through GraphQL allowing unauthorised users to perform some actions at the group level.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-3127" + }, + { + "type": "WEB", + "url": "https://hackerone.com/reports/2395169" + }, + { + "type": "WEB", + "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/452640" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-284" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T16:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-9p66-4vgq-5fjx/GHSA-9p66-4vgq-5fjx.json b/advisories/unreviewed/2024/08/GHSA-9p66-4vgq-5fjx/GHSA-9p66-4vgq-5fjx.json index 6f8d021456f..8229b30aca1 100644 --- a/advisories/unreviewed/2024/08/GHSA-9p66-4vgq-5fjx/GHSA-9p66-4vgq-5fjx.json +++ b/advisories/unreviewed/2024/08/GHSA-9p66-4vgq-5fjx/GHSA-9p66-4vgq-5fjx.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-9p66-4vgq-5fjx", - "modified": "2024-08-17T12:30:32Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-17T12:30:32Z", "aliases": [ "CVE-2024-43836" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ethtool: pse-pd: Fix possible null-deref\n\nFix a possible null dereference when a PSE supports both c33 and PoDL, but\nonly one of the netlink attributes is specified. The c33 or PoDL PSE\ncapabilities are already validated in the ethnl_set_pse_validate() call.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-476" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-17T10:15:09Z" diff --git a/advisories/unreviewed/2024/08/GHSA-9wpw-58rw-f8gm/GHSA-9wpw-58rw-f8gm.json b/advisories/unreviewed/2024/08/GHSA-9wpw-58rw-f8gm/GHSA-9wpw-58rw-f8gm.json index 6e258ccca8a..3ad9e068748 100644 --- a/advisories/unreviewed/2024/08/GHSA-9wpw-58rw-f8gm/GHSA-9wpw-58rw-f8gm.json +++ b/advisories/unreviewed/2024/08/GHSA-9wpw-58rw-f8gm/GHSA-9wpw-58rw-f8gm.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-9wpw-58rw-f8gm", - "modified": "2024-08-21T21:30:47Z", + "modified": "2024-08-22T18:31:21Z", "published": "2024-08-21T21:30:47Z", "aliases": [ "CVE-2024-7981" ], "details": "Inappropriate implementation in Views in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-21T21:15:09Z" diff --git a/advisories/unreviewed/2024/08/GHSA-c7v6-r97x-ppjq/GHSA-c7v6-r97x-ppjq.json b/advisories/unreviewed/2024/08/GHSA-c7v6-r97x-ppjq/GHSA-c7v6-r97x-ppjq.json index ca72506bed2..63e8d41c1cd 100644 --- a/advisories/unreviewed/2024/08/GHSA-c7v6-r97x-ppjq/GHSA-c7v6-r97x-ppjq.json +++ b/advisories/unreviewed/2024/08/GHSA-c7v6-r97x-ppjq/GHSA-c7v6-r97x-ppjq.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-c7v6-r97x-ppjq", - "modified": "2024-08-21T21:30:47Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-21T21:30:47Z", "aliases": [ "CVE-2024-7974" ], "details": "Insufficient data validation in V8 API in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. (Chromium security severity: Medium)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-21T21:15:09Z" diff --git a/advisories/unreviewed/2024/08/GHSA-cfrq-8q2f-rp46/GHSA-cfrq-8q2f-rp46.json b/advisories/unreviewed/2024/08/GHSA-cfrq-8q2f-rp46/GHSA-cfrq-8q2f-rp46.json new file mode 100644 index 00000000000..6c8487a7280 --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-cfrq-8q2f-rp46/GHSA-cfrq-8q2f-rp46.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-cfrq-8q2f-rp46", + "modified": "2024-08-22T18:31:22Z", + "published": "2024-08-22T18:31:22Z", + "aliases": [ + "CVE-2024-42768" + ], + "details": "A Cross-Site Request Forgery (CSRF) vulnerability was found in Kashipara Hotel Management System v1.0 via /admin/delete_room.php.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42768" + }, + { + "type": "WEB", + "url": "https://cwe.mitre.org/data/definitions/352.html" + }, + { + "type": "WEB", + "url": "https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Hotel%20Management%20System%20v1.0/CSRF.pdf" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T17:15:05Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-cm9m-hp76-grcq/GHSA-cm9m-hp76-grcq.json b/advisories/unreviewed/2024/08/GHSA-cm9m-hp76-grcq/GHSA-cm9m-hp76-grcq.json index 5ff40df6673..d8a85e2b19f 100644 --- a/advisories/unreviewed/2024/08/GHSA-cm9m-hp76-grcq/GHSA-cm9m-hp76-grcq.json +++ b/advisories/unreviewed/2024/08/GHSA-cm9m-hp76-grcq/GHSA-cm9m-hp76-grcq.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-cm9m-hp76-grcq", - "modified": "2024-08-22T06:30:29Z", + "modified": "2024-08-22T18:31:21Z", "published": "2024-08-22T06:30:29Z", "aliases": [ "CVE-2024-45163" ], "details": "The Mirai botnet through 2024-08-19 mishandles simultaneous TCP connections to the CNC (command and control) server. Unauthenticated sessions remain open, causing resource consumption. For example, an attacker can send a recognized username (such as root), or can send arbitrary data.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H" + } ], "affected": [ @@ -33,9 +36,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-400" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-22T04:15:20Z" diff --git a/advisories/unreviewed/2024/08/GHSA-f3px-8f8h-rcxh/GHSA-f3px-8f8h-rcxh.json b/advisories/unreviewed/2024/08/GHSA-f3px-8f8h-rcxh/GHSA-f3px-8f8h-rcxh.json index 868803924f5..999cebca3de 100644 --- a/advisories/unreviewed/2024/08/GHSA-f3px-8f8h-rcxh/GHSA-f3px-8f8h-rcxh.json +++ b/advisories/unreviewed/2024/08/GHSA-f3px-8f8h-rcxh/GHSA-f3px-8f8h-rcxh.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-f3px-8f8h-rcxh", - "modified": "2024-08-19T06:30:54Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-17T09:30:25Z", "aliases": [ "CVE-2024-42310" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/gma500: fix null pointer dereference in cdv_intel_lvds_get_modes\n\nIn cdv_intel_lvds_get_modes(), the return value of drm_mode_duplicate()\nis assigned to mode, which will lead to a NULL pointer dereference on\nfailure of drm_mode_duplicate(). Add a check to avoid npd.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -53,9 +56,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-476" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-17T09:15:11Z" diff --git a/advisories/unreviewed/2024/08/GHSA-f3wr-j648-3c97/GHSA-f3wr-j648-3c97.json b/advisories/unreviewed/2024/08/GHSA-f3wr-j648-3c97/GHSA-f3wr-j648-3c97.json new file mode 100644 index 00000000000..230d8bce6fe --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-f3wr-j648-3c97/GHSA-f3wr-j648-3c97.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-f3wr-j648-3c97", + "modified": "2024-08-22T18:31:23Z", + "published": "2024-08-22T18:31:23Z", + "aliases": [ + "CVE-2024-7634" + ], + "details": "NGINX Agent's \"config_dirs\" restriction feature allows a highly privileged attacker to gain the ability to write/overwrite files outside of the designated secure directory.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N" + }, + { + "type": "CVSS_V4", + "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7634" + }, + { + "type": "WEB", + "url": "https://my.f5.com/manage/s/article/K000140630" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-22" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T18:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-f5h7-3v7h-xww3/GHSA-f5h7-3v7h-xww3.json b/advisories/unreviewed/2024/08/GHSA-f5h7-3v7h-xww3/GHSA-f5h7-3v7h-xww3.json index 2b44a53f81c..a737b732e82 100644 --- a/advisories/unreviewed/2024/08/GHSA-f5h7-3v7h-xww3/GHSA-f5h7-3v7h-xww3.json +++ b/advisories/unreviewed/2024/08/GHSA-f5h7-3v7h-xww3/GHSA-f5h7-3v7h-xww3.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-f5h7-3v7h-xww3", - "modified": "2024-08-17T09:30:25Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-17T09:30:25Z", "aliases": [ "CVE-2024-42316" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmm/mglru: fix div-by-zero in vmpressure_calc_level()\n\nevict_folios() uses a second pass to reclaim folios that have gone through\npage writeback and become clean before it finishes the first pass, since\nfolio_rotate_reclaimable() cannot handle those folios due to the\nisolation.\n\nThe second pass tries to avoid potential double counting by deducting\nscan_control->nr_scanned. However, this can result in underflow of\nnr_scanned, under a condition where shrink_folio_list() does not increment\nnr_scanned, i.e., when folio_trylock() fails.\n\nThe underflow can cause the divisor, i.e., scale=scanned+reclaimed in\nvmpressure_calc_level(), to become zero, resulting in the following crash:\n\n [exception RIP: vmpressure_work_fn+101]\n process_one_work at ffffffffa3313f2b\n\nSince scan_control->nr_scanned has no established semantics, the potential\ndouble counting has minimal risks. Therefore, fix the problem by not\ndeducting scan_control->nr_scanned in evict_folios().", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -37,9 +40,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-369" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-17T09:15:11Z" diff --git a/advisories/unreviewed/2024/08/GHSA-f8mh-6mf7-mh58/GHSA-f8mh-6mf7-mh58.json b/advisories/unreviewed/2024/08/GHSA-f8mh-6mf7-mh58/GHSA-f8mh-6mf7-mh58.json index de2814f4e10..717255a3bbc 100644 --- a/advisories/unreviewed/2024/08/GHSA-f8mh-6mf7-mh58/GHSA-f8mh-6mf7-mh58.json +++ b/advisories/unreviewed/2024/08/GHSA-f8mh-6mf7-mh58/GHSA-f8mh-6mf7-mh58.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-f8mh-6mf7-mh58", - "modified": "2024-08-21T18:31:28Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-21T18:31:28Z", "aliases": [ "CVE-2024-42778" ], "details": "An Unrestricted file upload vulnerability was found in \"/music/ajax.php?action=save_playlist\" in Kashipara Music Management System v1.0. This allows attackers to execute arbitrary code via uploading a crafted PHP file.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-434" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-21T18:15:10Z" diff --git a/advisories/unreviewed/2024/08/GHSA-fr37-hq3w-ch93/GHSA-fr37-hq3w-ch93.json b/advisories/unreviewed/2024/08/GHSA-fr37-hq3w-ch93/GHSA-fr37-hq3w-ch93.json index 60351f002f3..8e0a235fa41 100644 --- a/advisories/unreviewed/2024/08/GHSA-fr37-hq3w-ch93/GHSA-fr37-hq3w-ch93.json +++ b/advisories/unreviewed/2024/08/GHSA-fr37-hq3w-ch93/GHSA-fr37-hq3w-ch93.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-fr37-hq3w-ch93", - "modified": "2024-08-19T06:30:53Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-17T09:30:24Z", "aliases": [ "CVE-2024-42301" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndev/parport: fix the array out-of-bounds risk\n\nFixed array out-of-bounds issues caused by sprintf\nby replacing it with snprintf for safer data copying,\nensuring the destination buffer is not overflowed.\n\nBelow is the stack trace I encountered during the actual issue:\n\n[ 66.575408s] [pid:5118,cpu4,QThread,4]Kernel panic - not syncing: stack-protector:\nKernel stack is corrupted in: do_hardware_base_addr+0xcc/0xd0 [parport]\n[ 66.575408s] [pid:5118,cpu4,QThread,5]CPU: 4 PID: 5118 Comm:\nQThread Tainted: G S W O 5.10.97-arm64-desktop #7100.57021.2\n[ 66.575439s] [pid:5118,cpu4,QThread,6]TGID: 5087 Comm: EFileApp\n[ 66.575439s] [pid:5118,cpu4,QThread,7]Hardware name: HUAWEI HUAWEI QingYun\nPGUX-W515x-B081/SP1PANGUXM, BIOS 1.00.07 04/29/2024\n[ 66.575439s] [pid:5118,cpu4,QThread,8]Call trace:\n[ 66.575469s] [pid:5118,cpu4,QThread,9] dump_backtrace+0x0/0x1c0\n[ 66.575469s] [pid:5118,cpu4,QThread,0] show_stack+0x14/0x20\n[ 66.575469s] [pid:5118,cpu4,QThread,1] dump_stack+0xd4/0x10c\n[ 66.575500s] [pid:5118,cpu4,QThread,2] panic+0x1d8/0x3bc\n[ 66.575500s] [pid:5118,cpu4,QThread,3] __stack_chk_fail+0x2c/0x38\n[ 66.575500s] [pid:5118,cpu4,QThread,4] do_hardware_base_addr+0xcc/0xd0 [parport]", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -53,9 +56,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-129" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-17T09:15:10Z" diff --git a/advisories/unreviewed/2024/08/GHSA-fxq9-6946-34q7/GHSA-fxq9-6946-34q7.json b/advisories/unreviewed/2024/08/GHSA-fxq9-6946-34q7/GHSA-fxq9-6946-34q7.json new file mode 100644 index 00000000000..dd0e6e10c45 --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-fxq9-6946-34q7/GHSA-fxq9-6946-34q7.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-fxq9-6946-34q7", + "modified": "2024-08-22T18:31:22Z", + "published": "2024-08-22T18:31:22Z", + "aliases": [ + "CVE-2024-42497" + ], + "details": "Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0, 9.8.x <= 9.8.2 fail to properly enforce permissions which allows a user with systems manager role with read-only access to teams to perform write operations on teams.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:L" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42497" + }, + { + "type": "WEB", + "url": "https://mattermost.com/security-updates" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-284" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T16:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-g4v9-cgh3-4j6f/GHSA-g4v9-cgh3-4j6f.json b/advisories/unreviewed/2024/08/GHSA-g4v9-cgh3-4j6f/GHSA-g4v9-cgh3-4j6f.json new file mode 100644 index 00000000000..796b1252bcf --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-g4v9-cgh3-4j6f/GHSA-g4v9-cgh3-4j6f.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-g4v9-cgh3-4j6f", + "modified": "2024-08-22T18:31:21Z", + "published": "2024-08-22T18:31:21Z", + "aliases": [ + "CVE-2024-42770" + ], + "details": "A Stored Cross Site Scripting (XSS) vulnerability was found in \"/core/signup_user.php\" of Kashipara Hotel Management System v1.0, which allows remote attackers to execute arbitrary code via the \"user_email\" parameter.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42770" + }, + { + "type": "WEB", + "url": "https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Hotel%20Management%20System%20v1.0/Stored%20XSS%20-%20Sign%20UP.pdf" + }, + { + "type": "WEB", + "url": "https://www.kashipara.com" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-79" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T16:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-g877-jjjq-5fjc/GHSA-g877-jjjq-5fjc.json b/advisories/unreviewed/2024/08/GHSA-g877-jjjq-5fjc/GHSA-g877-jjjq-5fjc.json index 732c3a0789e..1319fa33a1e 100644 --- a/advisories/unreviewed/2024/08/GHSA-g877-jjjq-5fjc/GHSA-g877-jjjq-5fjc.json +++ b/advisories/unreviewed/2024/08/GHSA-g877-jjjq-5fjc/GHSA-g877-jjjq-5fjc.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-g877-jjjq-5fjc", - "modified": "2024-08-19T06:30:54Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-17T12:30:33Z", "aliases": [ "CVE-2024-43856" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndma: fix call order in dmam_free_coherent\n\ndmam_free_coherent() frees a DMA allocation, which makes the\nfreed vaddr available for reuse, then calls devres_destroy()\nto remove and free the data structure used to track the DMA\nallocation. Between the two calls, it is possible for a\nconcurrent task to make an allocation with the same vaddr\nand add it to the devres list.\n\nIf this happens, there will be two entries in the devres list\nwith the same vaddr and devres_destroy() can free the wrong\nentry, triggering the WARN_ON() in dmam_match.\n\nFix by destroying the devres entry before freeing the DMA\nallocation.\n\n kokonut //net/encryption\n http://sponge2/b9145fe6-0f72-4325-ac2f-a84d81075b03", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -53,9 +56,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-770" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-17T10:15:10Z" diff --git a/advisories/unreviewed/2024/08/GHSA-gc66-2jq6-66c6/GHSA-gc66-2jq6-66c6.json b/advisories/unreviewed/2024/08/GHSA-gc66-2jq6-66c6/GHSA-gc66-2jq6-66c6.json new file mode 100644 index 00000000000..d7bb0e38e57 --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-gc66-2jq6-66c6/GHSA-gc66-2jq6-66c6.json @@ -0,0 +1,47 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-gc66-2jq6-66c6", + "modified": "2024-08-22T18:31:22Z", + "published": "2024-08-22T18:31:22Z", + "aliases": [ + "CVE-2024-45191" + ], + "details": "An issue was discovered in Matrix libolm (aka Olm) through 3.2.16. The AES implementation is vulnerable to cache-timing attacks due to use of S-boxes. This is related to software that uses a lookup table for the SubWord step. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45191" + }, + { + "type": "WEB", + "url": "https://gitlab.matrix.org/matrix-org/olm" + }, + { + "type": "WEB", + "url": "https://gitlab.matrix.org/matrix-org/olm/-/commit/6d4b5b07887821a95b144091c8497d09d377f985" + }, + { + "type": "WEB", + "url": "https://news.ycombinator.com/item?id=41249371" + }, + { + "type": "WEB", + "url": "https://soatok.blog/2024/08/14/security-issues-in-matrixs-olm-library" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T16:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-hg5m-x49p-g9h8/GHSA-hg5m-x49p-g9h8.json b/advisories/unreviewed/2024/08/GHSA-hg5m-x49p-g9h8/GHSA-hg5m-x49p-g9h8.json index c3e42832baf..594236c8155 100644 --- a/advisories/unreviewed/2024/08/GHSA-hg5m-x49p-g9h8/GHSA-hg5m-x49p-g9h8.json +++ b/advisories/unreviewed/2024/08/GHSA-hg5m-x49p-g9h8/GHSA-hg5m-x49p-g9h8.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-hg5m-x49p-g9h8", - "modified": "2024-08-21T21:30:47Z", + "modified": "2024-08-22T18:31:21Z", "published": "2024-08-21T21:30:47Z", "aliases": [ "CVE-2024-8035" ], "details": "Inappropriate implementation in Extensions in Google Chrome on Windows prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-21T21:15:10Z" diff --git a/advisories/unreviewed/2024/08/GHSA-hpf9-cfgc-pw67/GHSA-hpf9-cfgc-pw67.json b/advisories/unreviewed/2024/08/GHSA-hpf9-cfgc-pw67/GHSA-hpf9-cfgc-pw67.json index 4a284160876..f008211e83b 100644 --- a/advisories/unreviewed/2024/08/GHSA-hpf9-cfgc-pw67/GHSA-hpf9-cfgc-pw67.json +++ b/advisories/unreviewed/2024/08/GHSA-hpf9-cfgc-pw67/GHSA-hpf9-cfgc-pw67.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-hpf9-cfgc-pw67", - "modified": "2024-08-22T03:31:33Z", + "modified": "2024-08-22T18:31:21Z", "published": "2024-08-22T03:31:33Z", "aliases": [ "CVE-2024-43033" ], "details": "JPress through 5.1.1 on Windows has an arbitrary file upload vulnerability that could cause arbitrary code execution via ::$DATA to AttachmentController, such as a .jsp::$DATA file to io.jpress.web.commons.controller.AttachmentController#upload. NOTE: this is unrelated to the attack vector for CVE-2024-32358.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -33,9 +36,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-69" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-22T01:15:03Z" diff --git a/advisories/unreviewed/2024/08/GHSA-hqfw-8gwg-7r3q/GHSA-hqfw-8gwg-7r3q.json b/advisories/unreviewed/2024/08/GHSA-hqfw-8gwg-7r3q/GHSA-hqfw-8gwg-7r3q.json index e45c886844f..4d6a3b3721a 100644 --- a/advisories/unreviewed/2024/08/GHSA-hqfw-8gwg-7r3q/GHSA-hqfw-8gwg-7r3q.json +++ b/advisories/unreviewed/2024/08/GHSA-hqfw-8gwg-7r3q/GHSA-hqfw-8gwg-7r3q.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-hqfw-8gwg-7r3q", - "modified": "2024-08-19T06:30:54Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-17T12:30:33Z", "aliases": [ "CVE-2024-43854" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nblock: initialize integrity buffer to zero before writing it to media\n\nMetadata added by bio_integrity_prep is using plain kmalloc, which leads\nto random kernel memory being written media. For PI metadata this is\nlimited to the app tag that isn't used by kernel generated metadata,\nbut for non-PI metadata the entire buffer leaks kernel memory.\n\nFix this by adding the __GFP_ZERO flag to allocations for writes.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -41,9 +44,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-401" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-17T10:15:10Z" diff --git a/advisories/unreviewed/2024/08/GHSA-hx96-9f4r-rwcp/GHSA-hx96-9f4r-rwcp.json b/advisories/unreviewed/2024/08/GHSA-hx96-9f4r-rwcp/GHSA-hx96-9f4r-rwcp.json index ee7c885eede..fd85d40b13e 100644 --- a/advisories/unreviewed/2024/08/GHSA-hx96-9f4r-rwcp/GHSA-hx96-9f4r-rwcp.json +++ b/advisories/unreviewed/2024/08/GHSA-hx96-9f4r-rwcp/GHSA-hx96-9f4r-rwcp.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-hx96-9f4r-rwcp", - "modified": "2024-08-19T06:30:54Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-17T12:30:32Z", "aliases": [ "CVE-2024-43828" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\next4: fix infinite loop when replaying fast_commit\n\nWhen doing fast_commit replay an infinite loop may occur due to an\nuninitialized extent_status struct. ext4_ext_determine_insert_hole() does\nnot detect the replay and calls ext4_es_find_extent_range(), which will\nreturn immediately without initializing the 'es' variable.\n\nBecause 'es' contains garbage, an integer overflow may happen causing an\ninfinite loop in this function, easily reproducible using fstest generic/039.\n\nThis commit fixes this issue by unconditionally initializing the structure\nin function ext4_es_find_extent_range().\n\nThanks to Zhang Yi, for figuring out the real problem!", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -45,9 +48,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-835" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-17T10:15:08Z" diff --git a/advisories/unreviewed/2024/08/GHSA-j2gf-fhx6-5xrq/GHSA-j2gf-fhx6-5xrq.json b/advisories/unreviewed/2024/08/GHSA-j2gf-fhx6-5xrq/GHSA-j2gf-fhx6-5xrq.json index 320ef8bb623..8bd0d47b016 100644 --- a/advisories/unreviewed/2024/08/GHSA-j2gf-fhx6-5xrq/GHSA-j2gf-fhx6-5xrq.json +++ b/advisories/unreviewed/2024/08/GHSA-j2gf-fhx6-5xrq/GHSA-j2gf-fhx6-5xrq.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-j2gf-fhx6-5xrq", - "modified": "2024-08-21T21:30:47Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-21T21:30:47Z", "aliases": [ "CVE-2024-7973" ], "details": "Heap buffer overflow in PDFium in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform an out of bounds memory read via a crafted PDF file. (Chromium security severity: Medium)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ "CWE-122" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-21T21:15:09Z" diff --git a/advisories/unreviewed/2024/08/GHSA-j3xp-78w6-p4vh/GHSA-j3xp-78w6-p4vh.json b/advisories/unreviewed/2024/08/GHSA-j3xp-78w6-p4vh/GHSA-j3xp-78w6-p4vh.json index 5f3e3eeba00..84fbdc1e3b1 100644 --- a/advisories/unreviewed/2024/08/GHSA-j3xp-78w6-p4vh/GHSA-j3xp-78w6-p4vh.json +++ b/advisories/unreviewed/2024/08/GHSA-j3xp-78w6-p4vh/GHSA-j3xp-78w6-p4vh.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-j3xp-78w6-p4vh", - "modified": "2024-08-17T09:30:25Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-17T09:30:25Z", "aliases": [ "CVE-2024-42314" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: fix extent map use-after-free when adding pages to compressed bio\n\nAt add_ra_bio_pages() we are accessing the extent map to calculate\n'add_size' after we dropped our reference on the extent map, resulting\nin a use-after-free. Fix this by computing 'add_size' before dropping our\nextent map reference.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -33,9 +36,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-416" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-17T09:15:11Z" diff --git a/advisories/unreviewed/2024/08/GHSA-j5wm-h22f-j8qm/GHSA-j5wm-h22f-j8qm.json b/advisories/unreviewed/2024/08/GHSA-j5wm-h22f-j8qm/GHSA-j5wm-h22f-j8qm.json index 80fe4d0fa5f..943da096271 100644 --- a/advisories/unreviewed/2024/08/GHSA-j5wm-h22f-j8qm/GHSA-j5wm-h22f-j8qm.json +++ b/advisories/unreviewed/2024/08/GHSA-j5wm-h22f-j8qm/GHSA-j5wm-h22f-j8qm.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-j5wm-h22f-j8qm", - "modified": "2024-08-20T15:32:12Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-20T15:32:12Z", "aliases": [ "CVE-2024-42552" ], "details": "Hotel Management System commit 91caab8 was discovered to contain a SQL injection vulnerability via the book_id parameter at admin_room_history.php.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-20T13:15:05Z" diff --git a/advisories/unreviewed/2024/08/GHSA-j5xm-2wp4-36g2/GHSA-j5xm-2wp4-36g2.json b/advisories/unreviewed/2024/08/GHSA-j5xm-2wp4-36g2/GHSA-j5xm-2wp4-36g2.json new file mode 100644 index 00000000000..90850eca062 --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-j5xm-2wp4-36g2/GHSA-j5xm-2wp4-36g2.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-j5xm-2wp4-36g2", + "modified": "2024-08-22T18:31:22Z", + "published": "2024-08-22T18:31:22Z", + "aliases": [ + "CVE-2024-6502" + ], + "details": "An issue was discovered in GitLab CE/EE affecting all versions starting from 8.2 prior to 17.1.6 starting from 17.2 prior to 17.2.4, and starting from 17.3 prior to 17.3.1, which allows an attacker to create a branch with the same name as a deleted tag.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6502" + }, + { + "type": "WEB", + "url": "https://hackerone.com/reports/2574561" + }, + { + "type": "WEB", + "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/470647" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-684" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T16:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-mgj9-j8fg-4qpr/GHSA-mgj9-j8fg-4qpr.json b/advisories/unreviewed/2024/08/GHSA-mgj9-j8fg-4qpr/GHSA-mgj9-j8fg-4qpr.json index 721f1f1a8cb..12e45ba8b35 100644 --- a/advisories/unreviewed/2024/08/GHSA-mgj9-j8fg-4qpr/GHSA-mgj9-j8fg-4qpr.json +++ b/advisories/unreviewed/2024/08/GHSA-mgj9-j8fg-4qpr/GHSA-mgj9-j8fg-4qpr.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-mgj9-j8fg-4qpr", - "modified": "2024-08-19T06:30:53Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-17T09:30:25Z", "aliases": [ "CVE-2024-42309" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/gma500: fix null pointer dereference in psb_intel_lvds_get_modes\n\nIn psb_intel_lvds_get_modes(), the return value of drm_mode_duplicate() is\nassigned to mode, which will lead to a possible NULL pointer dereference\non failure of drm_mode_duplicate(). Add a check to avoid npd.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -53,9 +56,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-476" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-17T09:15:10Z" diff --git a/advisories/unreviewed/2024/08/GHSA-mpg7-9mg3-3974/GHSA-mpg7-9mg3-3974.json b/advisories/unreviewed/2024/08/GHSA-mpg7-9mg3-3974/GHSA-mpg7-9mg3-3974.json new file mode 100644 index 00000000000..ba292e788e5 --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-mpg7-9mg3-3974/GHSA-mpg7-9mg3-3974.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mpg7-9mg3-3974", + "modified": "2024-08-22T18:31:21Z", + "published": "2024-08-22T18:31:21Z", + "aliases": [ + "CVE-2024-42769" + ], + "details": "A Reflected Cross Site Scripting (XSS) vulnerability was found in \"/core/signup_user.php \" of Kashipara Hotel Management System v1.0, which allows remote attackers to execute arbitrary code via \"user_fname\" and \"user_lname\" parameters.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42769" + }, + { + "type": "WEB", + "url": "https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Hotel%20Management%20System%20v1.0/Reflected%20XSS%20-%20Sign%20UP.pdf" + }, + { + "type": "WEB", + "url": "https://www.kashipara.com" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T16:15:09Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-mx8m-2wh5-m3hh/GHSA-mx8m-2wh5-m3hh.json b/advisories/unreviewed/2024/08/GHSA-mx8m-2wh5-m3hh/GHSA-mx8m-2wh5-m3hh.json new file mode 100644 index 00000000000..0d8d690d1f8 --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-mx8m-2wh5-m3hh/GHSA-mx8m-2wh5-m3hh.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-mx8m-2wh5-m3hh", + "modified": "2024-08-22T18:31:21Z", + "published": "2024-08-22T18:31:21Z", + "aliases": [ + "CVE-2024-36441" + ], + "details": "Swissphone DiCal-RED 4009 devices allow an unauthenticated attacker use a port-2101 TCP connection to gain access to operation messages that are received by the device.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-36441" + }, + { + "type": "WEB", + "url": "https://www.swissphone.com/en-us/solutions/components/terminals/radio-data-module-dical-red" + }, + { + "type": "WEB", + "url": "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2024-042.txt" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T16:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-p269-768c-9733/GHSA-p269-768c-9733.json b/advisories/unreviewed/2024/08/GHSA-p269-768c-9733/GHSA-p269-768c-9733.json index 2aea47f00d1..1a30018a1d8 100644 --- a/advisories/unreviewed/2024/08/GHSA-p269-768c-9733/GHSA-p269-768c-9733.json +++ b/advisories/unreviewed/2024/08/GHSA-p269-768c-9733/GHSA-p269-768c-9733.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-p269-768c-9733", - "modified": "2024-08-21T21:30:47Z", + "modified": "2024-08-22T18:31:21Z", "published": "2024-08-21T21:30:47Z", "aliases": [ "CVE-2024-7975" ], "details": "Inappropriate implementation in Permissions in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-21T21:15:09Z" diff --git a/advisories/unreviewed/2024/08/GHSA-p34g-w82h-w82c/GHSA-p34g-w82h-w82c.json b/advisories/unreviewed/2024/08/GHSA-p34g-w82h-w82c/GHSA-p34g-w82h-w82c.json index 608fa785722..5efa5356dda 100644 --- a/advisories/unreviewed/2024/08/GHSA-p34g-w82h-w82c/GHSA-p34g-w82h-w82c.json +++ b/advisories/unreviewed/2024/08/GHSA-p34g-w82h-w82c/GHSA-p34g-w82h-w82c.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-p34g-w82h-w82c", - "modified": "2024-08-21T21:30:47Z", + "modified": "2024-08-22T18:31:21Z", "published": "2024-08-21T21:30:47Z", "aliases": [ "CVE-2024-8034" ], "details": "Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-21T21:15:09Z" diff --git a/advisories/unreviewed/2024/08/GHSA-p6r2-36r4-m6vj/GHSA-p6r2-36r4-m6vj.json b/advisories/unreviewed/2024/08/GHSA-p6r2-36r4-m6vj/GHSA-p6r2-36r4-m6vj.json index b78ef665b62..97a5a7efec0 100644 --- a/advisories/unreviewed/2024/08/GHSA-p6r2-36r4-m6vj/GHSA-p6r2-36r4-m6vj.json +++ b/advisories/unreviewed/2024/08/GHSA-p6r2-36r4-m6vj/GHSA-p6r2-36r4-m6vj.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-p6r2-36r4-m6vj", - "modified": "2024-08-19T06:30:54Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-17T12:30:33Z", "aliases": [ "CVE-2024-43858" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\njfs: Fix array-index-out-of-bounds in diFree", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -53,9 +56,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-129" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-17T10:15:10Z" diff --git a/advisories/unreviewed/2024/08/GHSA-p8h7-64p8-w5pq/GHSA-p8h7-64p8-w5pq.json b/advisories/unreviewed/2024/08/GHSA-p8h7-64p8-w5pq/GHSA-p8h7-64p8-w5pq.json index 0b7ec25eec0..eb82d4f95bf 100644 --- a/advisories/unreviewed/2024/08/GHSA-p8h7-64p8-w5pq/GHSA-p8h7-64p8-w5pq.json +++ b/advisories/unreviewed/2024/08/GHSA-p8h7-64p8-w5pq/GHSA-p8h7-64p8-w5pq.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-p8h7-64p8-w5pq", - "modified": "2024-08-21T21:30:46Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-21T21:30:46Z", "aliases": [ "CVE-2024-7969" ], "details": "Type Confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ "CWE-843" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-21T21:15:09Z" diff --git a/advisories/unreviewed/2024/08/GHSA-prg4-487r-rr8w/GHSA-prg4-487r-rr8w.json b/advisories/unreviewed/2024/08/GHSA-prg4-487r-rr8w/GHSA-prg4-487r-rr8w.json new file mode 100644 index 00000000000..65824ddb3f3 --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-prg4-487r-rr8w/GHSA-prg4-487r-rr8w.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-prg4-487r-rr8w", + "modified": "2024-08-22T18:31:23Z", + "published": "2024-08-22T18:31:23Z", + "aliases": [ + "CVE-2024-42773" + ], + "details": "An Incorrect Access Control vulnerability was found in /admin/edit_room_controller.php in Kashipara Hotel Management System v1.0, which allows an unauthenticated attacker to edit the valid hotel room entries in the administrator section.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42773" + }, + { + "type": "WEB", + "url": "https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Hotel%20Management%20System%20v1.0/Broken%20Access%20Control%20-%20Edit%20Room%20Entry.pdf" + }, + { + "type": "WEB", + "url": "https://www.kashipara.com" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T18:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-px82-82wp-3w57/GHSA-px82-82wp-3w57.json b/advisories/unreviewed/2024/08/GHSA-px82-82wp-3w57/GHSA-px82-82wp-3w57.json new file mode 100644 index 00000000000..fb54edf7601 --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-px82-82wp-3w57/GHSA-px82-82wp-3w57.json @@ -0,0 +1,38 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-px82-82wp-3w57", + "modified": "2024-08-22T18:31:22Z", + "published": "2024-08-22T18:31:22Z", + "aliases": [ + "CVE-2024-7110" + ], + "details": "An issue was discovered in GitLab EE affecting all versions starting 17.0 to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 17.3.1 allows an attacker to execute arbitrary command in a victim's pipeline through prompt injection.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-7110" + }, + { + "type": "WEB", + "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/472603" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-77" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T16:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-q3q8-95m2-545r/GHSA-q3q8-95m2-545r.json b/advisories/unreviewed/2024/08/GHSA-q3q8-95m2-545r/GHSA-q3q8-95m2-545r.json index deb330be9cd..b81fe6fe04a 100644 --- a/advisories/unreviewed/2024/08/GHSA-q3q8-95m2-545r/GHSA-q3q8-95m2-545r.json +++ b/advisories/unreviewed/2024/08/GHSA-q3q8-95m2-545r/GHSA-q3q8-95m2-545r.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-q3q8-95m2-545r", - "modified": "2024-08-21T21:30:46Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-21T21:30:46Z", "aliases": [ "CVE-2024-7972" ], "details": "Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-119" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-21T21:15:09Z" diff --git a/advisories/unreviewed/2024/08/GHSA-q4pc-gw9h-vxg4/GHSA-q4pc-gw9h-vxg4.json b/advisories/unreviewed/2024/08/GHSA-q4pc-gw9h-vxg4/GHSA-q4pc-gw9h-vxg4.json new file mode 100644 index 00000000000..6e4e2a93528 --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-q4pc-gw9h-vxg4/GHSA-q4pc-gw9h-vxg4.json @@ -0,0 +1,39 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-q4pc-gw9h-vxg4", + "modified": "2024-08-22T18:31:22Z", + "published": "2024-08-22T18:31:22Z", + "aliases": [ + "CVE-2024-42776" + ], + "details": "Kashipara Hotel Management System v1.0 is vulnerable to Incorrect Access Control via /admin/users.php.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-42776" + }, + { + "type": "WEB", + "url": "https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Hotel%20Management%20System%20v1.0/Broken%20Access%20Control%20-%20View%20User%20Data.pdf" + }, + { + "type": "WEB", + "url": "https://www.kashipara.com" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T17:15:06Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-qvhh-qrj8-5g7c/GHSA-qvhh-qrj8-5g7c.json b/advisories/unreviewed/2024/08/GHSA-qvhh-qrj8-5g7c/GHSA-qvhh-qrj8-5g7c.json new file mode 100644 index 00000000000..53b64fa762c --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-qvhh-qrj8-5g7c/GHSA-qvhh-qrj8-5g7c.json @@ -0,0 +1,42 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-qvhh-qrj8-5g7c", + "modified": "2024-08-22T18:31:22Z", + "published": "2024-08-22T18:31:22Z", + "aliases": [ + "CVE-2024-8041" + ], + "details": "A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions prior to 17.1.6, 17.2 prior to 17.2.4, and 17.3 prior to 17.3.1. A denial of service could occur upon importing a maliciously crafted repository using the GitHub importer.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8041" + }, + { + "type": "WEB", + "url": "https://hackerone.com/reports/2499070" + }, + { + "type": "WEB", + "url": "https://gitlab.com/gitlab-org/gitlab/-/issues/463092" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-400" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T16:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-r3h8-2v74-r6qj/GHSA-r3h8-2v74-r6qj.json b/advisories/unreviewed/2024/08/GHSA-r3h8-2v74-r6qj/GHSA-r3h8-2v74-r6qj.json index 2550d9845f1..d4a2a786098 100644 --- a/advisories/unreviewed/2024/08/GHSA-r3h8-2v74-r6qj/GHSA-r3h8-2v74-r6qj.json +++ b/advisories/unreviewed/2024/08/GHSA-r3h8-2v74-r6qj/GHSA-r3h8-2v74-r6qj.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-r3h8-2v74-r6qj", - "modified": "2024-08-21T21:30:47Z", + "modified": "2024-08-22T18:31:21Z", "published": "2024-08-21T21:30:47Z", "aliases": [ "CVE-2024-7976" ], "details": "Inappropriate implementation in FedCM in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-21T21:15:09Z" diff --git a/advisories/unreviewed/2024/08/GHSA-r3hw-cxxj-hj9v/GHSA-r3hw-cxxj-hj9v.json b/advisories/unreviewed/2024/08/GHSA-r3hw-cxxj-hj9v/GHSA-r3hw-cxxj-hj9v.json index 818ccf6cf78..f9a91b3a621 100644 --- a/advisories/unreviewed/2024/08/GHSA-r3hw-cxxj-hj9v/GHSA-r3hw-cxxj-hj9v.json +++ b/advisories/unreviewed/2024/08/GHSA-r3hw-cxxj-hj9v/GHSA-r3hw-cxxj-hj9v.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-r3hw-cxxj-hj9v", - "modified": "2024-08-21T18:31:28Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-21T18:31:28Z", "aliases": [ "CVE-2024-42783" ], "details": "Kashipara Music Management System v1.0 is vulnerable to SQL Injection via /music/manage_playlist_items.php. An attacker can execute arbitrary SQL commands via the \"pid\" parameter.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-21T18:15:10Z" diff --git a/advisories/unreviewed/2024/08/GHSA-rhrw-ch52-5vhp/GHSA-rhrw-ch52-5vhp.json b/advisories/unreviewed/2024/08/GHSA-rhrw-ch52-5vhp/GHSA-rhrw-ch52-5vhp.json index 4fc8f0bc334..658bbaa33b2 100644 --- a/advisories/unreviewed/2024/08/GHSA-rhrw-ch52-5vhp/GHSA-rhrw-ch52-5vhp.json +++ b/advisories/unreviewed/2024/08/GHSA-rhrw-ch52-5vhp/GHSA-rhrw-ch52-5vhp.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-rhrw-ch52-5vhp", - "modified": "2024-08-21T18:31:28Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-21T18:31:28Z", "aliases": [ "CVE-2024-42785" ], "details": "A SQL injection vulnerability in /music/index.php?page=view_playlist in Kashipara Music Management System v1.0 allows an attacker to execute arbitrary SQL commands via the \"id\" parameter.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-89" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-21T18:15:10Z" diff --git a/advisories/unreviewed/2024/08/GHSA-v4c3-qgm8-jh35/GHSA-v4c3-qgm8-jh35.json b/advisories/unreviewed/2024/08/GHSA-v4c3-qgm8-jh35/GHSA-v4c3-qgm8-jh35.json index 388ecf59c9c..01cb8f18903 100644 --- a/advisories/unreviewed/2024/08/GHSA-v4c3-qgm8-jh35/GHSA-v4c3-qgm8-jh35.json +++ b/advisories/unreviewed/2024/08/GHSA-v4c3-qgm8-jh35/GHSA-v4c3-qgm8-jh35.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-v4c3-qgm8-jh35", - "modified": "2024-08-21T21:30:47Z", + "modified": "2024-08-22T18:31:21Z", "published": "2024-08-21T21:30:47Z", "aliases": [ "CVE-2024-7977" ], "details": "Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a malicious file. (Chromium security severity: Medium)", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -31,7 +34,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-21T21:15:09Z" diff --git a/advisories/unreviewed/2024/08/GHSA-v5c2-f543-4vhm/GHSA-v5c2-f543-4vhm.json b/advisories/unreviewed/2024/08/GHSA-v5c2-f543-4vhm/GHSA-v5c2-f543-4vhm.json index 9112f32e6ed..6252027d621 100644 --- a/advisories/unreviewed/2024/08/GHSA-v5c2-f543-4vhm/GHSA-v5c2-f543-4vhm.json +++ b/advisories/unreviewed/2024/08/GHSA-v5c2-f543-4vhm/GHSA-v5c2-f543-4vhm.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-v5c2-f543-4vhm", - "modified": "2024-08-17T12:30:33Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-17T12:30:33Z", "aliases": [ "CVE-2024-43857" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix null reference error when checking end of zone\n\nThis patch fixes a potentially null pointer being accessed by\nis_end_zone_blkaddr() that checks the last block of a zone\nwhen f2fs is mounted as a single device.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-476" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-17T10:15:10Z" diff --git a/advisories/unreviewed/2024/08/GHSA-v5xv-g87f-x57w/GHSA-v5xv-g87f-x57w.json b/advisories/unreviewed/2024/08/GHSA-v5xv-g87f-x57w/GHSA-v5xv-g87f-x57w.json index ba2584cf121..0b4046d8927 100644 --- a/advisories/unreviewed/2024/08/GHSA-v5xv-g87f-x57w/GHSA-v5xv-g87f-x57w.json +++ b/advisories/unreviewed/2024/08/GHSA-v5xv-g87f-x57w/GHSA-v5xv-g87f-x57w.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-v5xv-g87f-x57w", - "modified": "2024-08-22T06:30:29Z", + "modified": "2024-08-22T18:31:21Z", "published": "2024-08-22T06:30:29Z", "aliases": [ "CVE-2022-48943" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nKVM: x86/mmu: make apf token non-zero to fix bug\n\nIn current async pagefault logic, when a page is ready, KVM relies on\nkvm_arch_can_dequeue_async_page_present() to determine whether to deliver\na READY event to the Guest. This function test token value of struct\nkvm_vcpu_pv_apf_data, which must be reset to zero by Guest kernel when a\nREADY event is finished by Guest. If value is zero meaning that a READY\nevent is done, so the KVM can deliver another.\nBut the kvm_arch_setup_async_pf() may produce a valid token with zero\nvalue, which is confused with previous mention and may lead the loss of\nthis READY event.\n\nThis bug may cause task blocked forever in Guest:\n INFO: task stress:7532 blocked for more than 1254 seconds.\n Not tainted 5.10.0 #16\n \"echo 0 > /proc/sys/kernel/hung_task_timeout_secs\" disables this message.\n task:stress state:D stack: 0 pid: 7532 ppid: 1409\n flags:0x00000080\n Call Trace:\n __schedule+0x1e7/0x650\n schedule+0x46/0xb0\n kvm_async_pf_task_wait_schedule+0xad/0xe0\n ? exit_to_user_mode_prepare+0x60/0x70\n __kvm_handle_async_pf+0x4f/0xb0\n ? asm_exc_page_fault+0x8/0x30\n exc_page_fault+0x6f/0x110\n ? asm_exc_page_fault+0x8/0x30\n asm_exc_page_fault+0x1e/0x30\n RIP: 0033:0x402d00\n RSP: 002b:00007ffd31912500 EFLAGS: 00010206\n RAX: 0000000000071000 RBX: ffffffffffffffff RCX: 00000000021a32b0\n RDX: 000000000007d011 RSI: 000000000007d000 RDI: 00000000021262b0\n RBP: 00000000021262b0 R08: 0000000000000003 R09: 0000000000000086\n R10: 00000000000000eb R11: 00007fefbdf2baa0 R12: 0000000000000000\n R13: 0000000000000002 R14: 000000000007d000 R15: 0000000000001000", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -39,7 +42,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-22T04:15:19Z" diff --git a/advisories/unreviewed/2024/08/GHSA-vmrv-fwh7-gvm4/GHSA-vmrv-fwh7-gvm4.json b/advisories/unreviewed/2024/08/GHSA-vmrv-fwh7-gvm4/GHSA-vmrv-fwh7-gvm4.json index 107f0d19dde..6a2ce5f2fee 100644 --- a/advisories/unreviewed/2024/08/GHSA-vmrv-fwh7-gvm4/GHSA-vmrv-fwh7-gvm4.json +++ b/advisories/unreviewed/2024/08/GHSA-vmrv-fwh7-gvm4/GHSA-vmrv-fwh7-gvm4.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-vmrv-fwh7-gvm4", - "modified": "2024-08-22T06:30:29Z", + "modified": "2024-08-22T18:31:21Z", "published": "2024-08-22T06:30:29Z", "aliases": [ "CVE-2024-45169" ], "details": "An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service (DoS) attacks and possibly remote code execution via the \\xB0\\x00\\x3c byte sequence.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -41,9 +44,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-119" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-22T04:15:27Z" diff --git a/advisories/unreviewed/2024/08/GHSA-w58g-789j-fj58/GHSA-w58g-789j-fj58.json b/advisories/unreviewed/2024/08/GHSA-w58g-789j-fj58/GHSA-w58g-789j-fj58.json new file mode 100644 index 00000000000..416c501567b --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-w58g-789j-fj58/GHSA-w58g-789j-fj58.json @@ -0,0 +1,47 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-w58g-789j-fj58", + "modified": "2024-08-22T18:31:22Z", + "published": "2024-08-22T18:31:22Z", + "aliases": [ + "CVE-2024-45193" + ], + "details": "An issue was discovered in Matrix libolm (aka Olm) through 3.2.16. There is Ed25519 signature malleability due to lack of validation criteria (does not ensure that S < n). NOTE: This vulnerability only affects products that are no longer supported by the maintainer.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-45193" + }, + { + "type": "WEB", + "url": "https://gitlab.matrix.org/matrix-org/olm" + }, + { + "type": "WEB", + "url": "https://gitlab.matrix.org/matrix-org/olm/-/commit/6d4b5b07887821a95b144091c8497d09d377f985" + }, + { + "type": "WEB", + "url": "https://news.ycombinator.com/item?id=41249371" + }, + { + "type": "WEB", + "url": "https://soatok.blog/2024/08/14/security-issues-in-matrixs-olm-library" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-22T16:15:10Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-xmjj-hrw9-x35m/GHSA-xmjj-hrw9-x35m.json b/advisories/unreviewed/2024/08/GHSA-xmjj-hrw9-x35m/GHSA-xmjj-hrw9-x35m.json index 7202ab3e81d..f69dc6353db 100644 --- a/advisories/unreviewed/2024/08/GHSA-xmjj-hrw9-x35m/GHSA-xmjj-hrw9-x35m.json +++ b/advisories/unreviewed/2024/08/GHSA-xmjj-hrw9-x35m/GHSA-xmjj-hrw9-x35m.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-xmjj-hrw9-x35m", - "modified": "2024-08-19T06:30:54Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-17T09:30:25Z", "aliases": [ "CVE-2024-42313" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: venus: fix use after free in vdec_close\n\nThere appears to be a possible use after free with vdec_close().\nThe firmware will add buffer release work to the work queue through\nHFI callbacks as a normal part of decoding. Randomly closing the\ndecoder device from userspace during normal decoding can incur\na read after free for inst.\n\nFix it by cancelling the work in vdec_close.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -53,9 +56,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-416" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-17T09:15:11Z" diff --git a/advisories/unreviewed/2024/08/GHSA-xw4r-xjqg-mh9q/GHSA-xw4r-xjqg-mh9q.json b/advisories/unreviewed/2024/08/GHSA-xw4r-xjqg-mh9q/GHSA-xw4r-xjqg-mh9q.json index 2b395ff57ba..84b72614884 100644 --- a/advisories/unreviewed/2024/08/GHSA-xw4r-xjqg-mh9q/GHSA-xw4r-xjqg-mh9q.json +++ b/advisories/unreviewed/2024/08/GHSA-xw4r-xjqg-mh9q/GHSA-xw4r-xjqg-mh9q.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-xw4r-xjqg-mh9q", - "modified": "2024-08-17T12:30:33Z", + "modified": "2024-08-22T18:31:20Z", "published": "2024-08-17T12:30:33Z", "aliases": [ "CVE-2024-43859" ], "details": "In the Linux kernel, the following vulnerability has been resolved:\n\nf2fs: fix to truncate preallocated blocks in f2fs_file_open()\n\nchenyuwen reports a f2fs bug as below:\n\nUnable to handle kernel NULL pointer dereference at virtual address 0000000000000011\n fscrypt_set_bio_crypt_ctx+0x78/0x1e8\n f2fs_grab_read_bio+0x78/0x208\n f2fs_submit_page_read+0x44/0x154\n f2fs_get_read_data_page+0x288/0x5f4\n f2fs_get_lock_data_page+0x60/0x190\n truncate_partial_data_page+0x108/0x4fc\n f2fs_do_truncate_blocks+0x344/0x5f0\n f2fs_truncate_blocks+0x6c/0x134\n f2fs_truncate+0xd8/0x200\n f2fs_iget+0x20c/0x5ac\n do_garbage_collect+0x5d0/0xf6c\n f2fs_gc+0x22c/0x6a4\n f2fs_disable_checkpoint+0xc8/0x310\n f2fs_fill_super+0x14bc/0x1764\n mount_bdev+0x1b4/0x21c\n f2fs_mount+0x20/0x30\n legacy_get_tree+0x50/0xbc\n vfs_get_tree+0x5c/0x1b0\n do_new_mount+0x298/0x4cc\n path_mount+0x33c/0x5fc\n __arm64_sys_mount+0xcc/0x15c\n invoke_syscall+0x60/0x150\n el0_svc_common+0xb8/0xf8\n do_el0_svc+0x28/0xa0\n el0_svc+0x24/0x84\n el0t_64_sync_handler+0x88/0xec\n\nIt is because inode.i_crypt_info is not initialized during below path:\n- mount\n - f2fs_fill_super\n - f2fs_disable_checkpoint\n - f2fs_gc\n - f2fs_iget\n - f2fs_truncate\n\nSo, let's relocate truncation of preallocated blocks to f2fs_file_open(),\nafter fscrypt_file_open().", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -33,9 +36,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-476" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-17T10:15:10Z"