netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-03-28 15:32:03 +00:00
parent 5291c63c43
commit b762a3029d
45 changed files with 1595 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2022/05/GHSA-6c6v-jhrm-ff4w/GHSA-6c6v-jhrm-ff4w.json
+9 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6c6v-jhrm-ff4w",
"modified": "2022-05-17T04:56:00Z",
"modified": "2024-03-28T15:30:32Z",
"published": "2022-05-17T04:56:00Z",
"aliases": [
"CVE-2013-4558"
@@ -18,6 +18,14 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2013-4558"
},
{
"type": "WEB",
"url": "https://github.com/apache/subversion/commit/2c77c43e4255555f3b79f761f0d141393a3856cc"
},
{
"type": "WEB",
"url": "https://github.com/apache/subversion/commit/647e3f8365a74831bb915f63793b63e31fae062d"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1033431"
advisories/unreviewed/2023/12/GHSA-96fh-9q43-rmjh/GHSA-96fh-9q43-rmjh.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-96fh-9q43-rmjh",
"modified": "2023-12-30T00:30:23Z",
"modified": "2024-03-28T15:30:32Z",
"published": "2023-12-30T00:30:23Z",
"aliases": [
"CVE-2023-47038"
@@ -36,6 +36,10 @@
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GNEEWAACXQCEEAKSG7XX2D5YDRWLCIZJ"
},
{
"type": "WEB",
"url": "https://perldoc.perl.org/perl5382delta#CVE-2023-47038-Write-past-buffer-end-via-illegal-user-defined-Unicode-property"
}
],
"database_specific": {
advisories/unreviewed/2024/01/GHSA-44qm-928x-6p3g/GHSA-44qm-928x-6p3g.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-44qm-928x-6p3g",
"modified": "2024-02-08T12:30:48Z",
"modified": "2024-03-28T15:30:32Z",
"published": "2024-01-02T06:30:31Z",
"aliases": [
"CVE-2023-47039"
@@ -33,6 +33,10 @@
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2249525"
},
{
"type": "WEB",
"url": "https://perldoc.perl.org/perl5382delta#CVE-2023-47039-Perl-for-Windows-binary-hijacking-vulnerability"
},
{
"type": "WEB",
"url": "https://security.netapp.com/advisory/ntap-20240208-0005"
advisories/unreviewed/2024/03/GHSA-2fjx-8hxj-4456/GHSA-2fjx-8hxj-4456.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2fjx-8hxj-4456",
"modified": "2024-03-28T15:30:34Z",
"published": "2024-03-28T15:30:34Z",
"aliases": [
"CVE-2024-31136"
],
"details": "In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-31136"
},
{
"type": "WEB",
"url": "https://www.jetbrains.com/privacy-security/issues-fixed"
}
],
"database_specific": {
"cwe_ids": [
"CWE-1288"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T15:15:47Z"
}
}
advisories/unreviewed/2024/03/GHSA-33r2-8g93-5hm2/GHSA-33r2-8g93-5hm2.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-33r2-8g93-5hm2",
"modified": "2024-03-28T15:30:33Z",
"published": "2024-03-28T15:30:33Z",
"aliases": [
"CVE-2023-45715"
],
"details": "The console may experience a service interruption when processing file names with invalid characters.\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45715"
},
{
"type": "WEB",
"url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0111972"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T15:15:45Z"
}
}
advisories/unreviewed/2024/03/GHSA-38mw-3mfv-34fc/GHSA-38mw-3mfv-34fc.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-38mw-3mfv-34fc",
"modified": "2024-03-28T15:30:33Z",
"published": "2024-03-28T15:30:33Z",
"aliases": [
"CVE-2023-45706"
],
"details": "An administrative user of WebReports may perform a Cross Site Scripting (XSS) and/or Man in the Middle (MITM) exploit through SAML configuration.\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:N/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45706"
},
{
"type": "WEB",
"url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0111972"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T15:15:45Z"
}
}
advisories/unreviewed/2024/03/GHSA-3rwc-8hqh-2vxh/GHSA-3rwc-8hqh-2vxh.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3rwc-8hqh-2vxh",
"modified": "2024-03-28T15:30:33Z",
"published": "2024-03-28T15:30:33Z",
"aliases": [
"CVE-2024-30587"
],
"details": "Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the urls parameter of the saveParentControlInfo function.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30587"
},
{
"type": "WEB",
"url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1202/saveParentControlInfo_urls.md"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T14:15:15Z"
}
}
advisories/unreviewed/2024/03/GHSA-3x3h-fcc9-p4px/GHSA-3x3h-fcc9-p4px.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3x3h-fcc9-p4px",
"modified": "2024-03-28T15:30:33Z",
"published": "2024-03-28T15:30:33Z",
"aliases": [
"CVE-2023-45705"
],
"details": "An administrative user of WebReports may perform a Server Side Request Forgery (SSRF) exploit through SMTP configuration options.\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-45705"
},
{
"type": "WEB",
"url": "https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0111972"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T15:15:45Z"
}
}
advisories/unreviewed/2024/03/GHSA-45mc-5wq7-gwvh/GHSA-45mc-5wq7-gwvh.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-45mc-5wq7-gwvh",
"modified": "2024-03-28T15:30:33Z",
"published": "2024-03-28T15:30:33Z",
"aliases": [
"CVE-2024-30600"
],
"details": "Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the schedEndTime parameter of the setSchedWifi function.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30600"
},
{
"type": "WEB",
"url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1203/setSchedWifi_end.md"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T15:15:46Z"
}
}
advisories/unreviewed/2024/03/GHSA-4q5q-v9v4-9c33/GHSA-4q5q-v9v4-9c33.json
+42
View File
@@ -0,0 +1,42 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4q5q-v9v4-9c33",
"modified": "2024-03-28T15:30:33Z",
"published": "2024-03-28T15:30:33Z",
"aliases": [
"CVE-2024-0259"
],
"details": "Fortra's Robot Schedule Enterprise Agent for Windows prior to version 3.04 is susceptible to privilege escalation. A low-privileged user can overwrite the service executable. When the service is restarted, the replaced binary runs with local system privileges, allowing a low-privileged user to gain elevated privileges.\n\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-0259"
},
{
"type": "WEB",
"url": "https://hstechdocs.helpsystems.com/releasenotes/Content/_ProductPages/Robot/RobotScheduleEnterprise.htm"
},
{
"type": "WEB",
"url": "https://www.fortra.com/security/advisory/fi-2024-005"
}
],
"database_specific": {
"cwe_ids": [
"CWE-276"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T15:15:46Z"
}
}
advisories/unreviewed/2024/03/GHSA-5gww-24v3-qcfw/GHSA-5gww-24v3-qcfw.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5gww-24v3-qcfw",
"modified": "2024-03-28T15:30:34Z",
"published": "2024-03-28T15:30:34Z",
"aliases": [
"CVE-2024-31134"
],
"details": "In JetBrains TeamCity before 2024.03 authenticated users without administrative permissions could register other users when self-registration was disabled",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-31134"
},
{
"type": "WEB",
"url": "https://www.jetbrains.com/privacy-security/issues-fixed"
}
],
"database_specific": {
"cwe_ids": [
"CWE-863"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T15:15:46Z"
}
}
advisories/unreviewed/2024/03/GHSA-669w-wwp7-2p8m/GHSA-669w-wwp7-2p8m.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-669w-wwp7-2p8m",
"modified": "2024-03-28T15:30:33Z",
"published": "2024-03-28T15:30:33Z",
"aliases": [
"CVE-2024-30606"
],
"details": "Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the page parameter of the fromDhcpListClient function.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30606"
},
{
"type": "WEB",
"url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1203/fromDhcpListClient_page.md"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T14:15:15Z"
}
}
advisories/unreviewed/2024/03/GHSA-6hfg-gc6j-4f52/GHSA-6hfg-gc6j-4f52.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6hfg-gc6j-4f52",
"modified": "2024-03-28T15:30:33Z",
"published": "2024-03-28T15:30:33Z",
"aliases": [
"CVE-2024-30590"
],
"details": "Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the schedEndTime parameter of the setSchedWifi function.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30590"
},
{
"type": "WEB",
"url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1202/setSchedWifi_end.md"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T14:15:15Z"
}
}
advisories/unreviewed/2024/03/GHSA-7rfv-m2fm-w83c/GHSA-7rfv-m2fm-w83c.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7rfv-m2fm-w83c",
"modified": "2024-03-28T15:30:34Z",
"published": "2024-03-28T15:30:34Z",
"aliases": [
"CVE-2024-30612"
],
"details": "Tenda AC10U v15.03.06.48 has a stack overflow vulnerability in the deviceId, limitSpeed, limitSpeedUp parameter from formSetClientState function.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30612"
},
{
"type": "WEB",
"url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/AC10U/v1.V15.03.06.48/more/formSetClientState.md"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T15:15:46Z"
}
}
advisories/unreviewed/2024/03/GHSA-7rm2-x86r-ghpx/GHSA-7rm2-x86r-ghpx.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7rm2-x86r-ghpx",
"modified": "2024-03-28T15:30:32Z",
"published": "2024-03-28T15:30:32Z",
"aliases": [
"CVE-2024-30584"
],
"details": "Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the security parameter of the formWifiBasicSet function.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30584"
},
{
"type": "WEB",
"url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1202/formWifiBasicSet_security.md"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T14:15:15Z"
}
}
advisories/unreviewed/2024/03/GHSA-7w53-4qwf-wfw9/GHSA-7w53-4qwf-wfw9.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7w53-4qwf-wfw9",
"modified": "2024-03-28T15:30:33Z",
"published": "2024-03-28T15:30:33Z",
"aliases": [
"CVE-2024-30588"
],
"details": "Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the schedStartTime parameter of the setSchedWifi function.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30588"
},
{
"type": "WEB",
"url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1202/setSchedWifi_start.md"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T14:15:15Z"
}
}
advisories/unreviewed/2024/03/GHSA-83hv-pm62-wx33/GHSA-83hv-pm62-wx33.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-83hv-pm62-wx33",
"modified": "2024-03-28T15:30:33Z",
"published": "2024-03-28T15:30:33Z",
"aliases": [
"CVE-2024-30599"
],
"details": "Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the deviceMac parameter of the addWifiMacFilter function.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30599"
},
{
"type": "WEB",
"url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1203/addWifiMacFilter_deviceMac.md"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T15:15:46Z"
}
}
advisories/unreviewed/2024/03/GHSA-8h97-3wj9-m4mh/GHSA-8h97-3wj9-m4mh.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8h97-3wj9-m4mh",
"modified": "2024-03-28T15:30:34Z",
"published": "2024-03-28T15:30:34Z",
"aliases": [
"CVE-2024-31137"
],
"details": "In JetBrains TeamCity before 2024.03 reflected XSS was possible via Space connection configuration",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-31137"
},
{
"type": "WEB",
"url": "https://www.jetbrains.com/privacy-security/issues-fixed"
}
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T15:15:47Z"
}
}
advisories/unreviewed/2024/03/GHSA-8hpx-7pm4-9fx9/GHSA-8hpx-7pm4-9fx9.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8hpx-7pm4-9fx9",
"modified": "2024-03-28T15:30:32Z",
"published": "2024-03-28T15:30:32Z",
"aliases": [
"CVE-2024-27775"
],
"details": "\nSysAid before version 23.2.14 b18 - CWE-918: Server-Side Request Forgery (SSRF) may allow exposing the local OS user's NTLMv2 hash\n\n",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-27775"
},
{
"type": "WEB",
"url": "https://www.gov.il/en/Departments/faq/cve_advisories"
}
],
"database_specific": {
"cwe_ids": [
"CWE-918"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T13:15:47Z"
}
}
advisories/unreviewed/2024/03/GHSA-8qf9-7xmg-5frx/GHSA-8qf9-7xmg-5frx.json
+35
View File
@@ -0,0 +1,35 @@
{
"schema_version": "1.4.0",
"id": "GHSA-8qf9-7xmg-5frx",
"modified": "2024-03-28T15:30:33Z",
"published": "2024-03-28T15:30:33Z",
"aliases": [
"CVE-2024-30598"
],
"details": "Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability in the security_5g parameter of the formWifiBasicSet function.",
"severity": [
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-30598"
},
{
"type": "WEB",
"url": "https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/FH/FH1203/formWifiBasicSet_security_5g.md"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-28T15:15:46Z"
}
}

Some files were not shown because too many files have changed in this diff Show More