netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-12-03 18:32:48 +00:00
parent 2f4f1d9c8f
commit b7bcac9d33
76 changed files with 990 additions and 204 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/09/GHSA-jpxc-vmjf-9fcj/GHSA-jpxc-vmjf-9fcj.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-jpxc-vmjf-9fcj",
"modified": "2024-11-21T21:33:31Z",
"modified": "2024-12-03T18:31:02Z",
"published": "2024-09-16T14:37:26Z",
"aliases": [
"CVE-2024-8775"
@@ -44,6 +44,10 @@
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8775"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:10762"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:8969"
advisories/github-reviewed/2024/11/GHSA-32p4-gm2c-wmch/GHSA-32p4-gm2c-wmch.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-32p4-gm2c-wmch",
"modified": "2024-11-25T00:31:54Z",
"modified": "2024-12-03T18:31:02Z",
"published": "2024-11-06T12:31:32Z",
"aliases": [
"CVE-2024-9902"
@@ -140,6 +140,10 @@
"type": "WEB",
"url": "https://github.com/ansible/ansible/commit/f7be90626da3035c697623dcf9c90b7a0bc91c92"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:10762"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:8969"
advisories/unreviewed/2024/02/GHSA-66jj-h4cx-53pq/GHSA-66jj-h4cx-53pq.json
+8 -3
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-66jj-h4cx-53pq",
"modified": "2024-02-15T21:31:27Z",
"modified": "2024-12-03T18:30:59Z",
"published": "2024-02-15T21:31:27Z",
"aliases": [
"CVE-2024-21728"
],
"details": "An Open Redirect vulnerability was found in osTicky2 below 2.2.8. osTicky (osTicket Bridge) by SmartCalc is a Joomla 3.x extension that provides Joomla fronted integration with osTicket, a popular Support ticket system. The Open Redirect vulnerability allows attackers to control the return parameter in the URL to a base64 malicious URL.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
@@ -23,7 +28,7 @@
"cwe_ids": [
"CWE-601"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-15T21:15:09Z"
advisories/unreviewed/2024/02/GHSA-h3cg-9jm8-7468/GHSA-h3cg-9jm8-7468.json
+2 -6
View File
@@ -13,9 +13,7 @@
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
],
"affected": [],
"references": [
{
"type": "ADVISORY",
@@ -35,9 +33,7 @@
}
],
"database_specific": {
"cwe_ids": [
],
"cwe_ids": [],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/02/GHSA-pq5h-mphr-9wrg/GHSA-pq5h-mphr-9wrg.json
+8 -9
View File
@@ -1,18 +1,19 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pq5h-mphr-9wrg",
"modified": "2024-02-17T06:30:34Z",
"modified": "2024-12-03T18:31:01Z",
"published": "2024-02-17T06:30:34Z",
"aliases": [
"CVE-2024-22727"
],
"details": "Teltonika TRB1-series devices with firmware before TRB1_R_00.07.05.2 allow attackers to exploit a firmware vulnerability via Ethernet LAN or USB.",
"severity": [
],
"affected": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
@@ -24,10 +25,8 @@
}
],
"database_specific": {
"cwe_ids": [
],
"severity": null,
"cwe_ids": [],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-17T04:15:07Z"
advisories/unreviewed/2024/02/GHSA-pvgw-2qh3-cj63/GHSA-pvgw-2qh3-cj63.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-pvgw-2qh3-cj63",
"modified": "2024-02-21T09:31:01Z",
"modified": "2024-12-03T18:31:01Z",
"published": "2024-02-21T09:31:01Z",
"aliases": [
"CVE-2023-42878"
],
"details": "A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"
}
],
"affected": [],
"references": [
{
@@ -28,8 +33,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-922"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-02-21T07:15:50Z"
advisories/unreviewed/2024/02/GHSA-qwff-3j78-f8jm/GHSA-qwff-3j78-f8jm.json
+1 -3
View File
@@ -13,9 +13,7 @@
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
],
"affected": [
],
"affected": [],
"references": [
{
"type": "ADVISORY",
advisories/unreviewed/2024/03/GHSA-f5pr-p2jr-pvpx/GHSA-f5pr-p2jr-pvpx.json
+2 -4
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-f5pr-p2jr-pvpx",
"modified": "2024-03-18T18:32:21Z",
"modified": "2024-12-03T18:31:01Z",
"published": "2024-03-18T18:32:21Z",
"aliases": [
"CVE-2024-26051"
@@ -13,9 +13,7 @@
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:N/A:N"
}
],
"affected": [
],
"affected": [],
"references": [
{
"type": "ADVISORY",
advisories/unreviewed/2024/03/GHSA-vxx9-qwhq-hgf4/GHSA-vxx9-qwhq-hgf4.json
+8 -7
View File
@@ -1,18 +1,19 @@
{
"schema_version": "1.4.0",
"id": "GHSA-vxx9-qwhq-hgf4",
"modified": "2024-05-01T18:30:37Z",
"modified": "2024-12-03T18:31:01Z",
"published": "2024-03-25T15:30:43Z",
"aliases": [
"CVE-2024-30205"
],
"details": "In Emacs before 29.3, Org mode considers contents of remote files to be trusted. This affects Org Mode before 9.6.23.",
"severity": [
],
"affected": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
@@ -45,9 +46,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-494"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-03-25T15:15:52Z"
advisories/unreviewed/2024/04/GHSA-3jpw-p5mr-c3q9/GHSA-3jpw-p5mr-c3q9.json
+3 -1
View File
@@ -29,7 +29,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-404"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/04/GHSA-5g37-8p7x-w23g/GHSA-5g37-8p7x-w23g.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-5g37-8p7x-w23g",
"modified": "2024-04-16T18:31:36Z",
"modified": "2024-12-03T18:31:01Z",
"published": "2024-04-16T18:31:36Z",
"aliases": [
"CVE-2024-32256"
],
"details": "Phpgurukul Tourism Management System v2.0 is vulnerable to Unrestricted Upload of File with Dangerous Type via /tms/admin/change-image.php. When updating a current package, there are no checks for what types of files are uploaded from the image.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-434"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-16T17:15:11Z"
advisories/unreviewed/2024/04/GHSA-63p3-gmh7-933m/GHSA-63p3-gmh7-933m.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-352"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/04/GHSA-734v-mgwp-5gmw/GHSA-734v-mgwp-5gmw.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-404"
],
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/04/GHSA-g77x-hh5w-qpw7/GHSA-g77x-hh5w-qpw7.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-922"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/04/GHSA-wr7f-w7qw-m8x2/GHSA-wr7f-w7qw-m8x2.json
+8 -7
View File
@@ -1,18 +1,19 @@
{
"schema_version": "1.4.0",
"id": "GHSA-wr7f-w7qw-m8x2",
"modified": "2024-04-12T06:33:24Z",
"modified": "2024-12-03T18:31:01Z",
"published": "2024-04-12T06:33:24Z",
"aliases": [
"CVE-2023-44854"
],
"details": "Cross Site Scripting (XSS) vulnerability in Cobham SAILOR VSAT Ku v.164B019, allows a remote attacker to execute arbitrary code via a crafted script to the c_set_rslog_decode function in the acu_web file.",
"severity": [
],
"affected": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [],
"references": [
{
"type": "ADVISORY",
@@ -25,9 +26,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-79"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-04-12T04:15:09Z"
advisories/unreviewed/2024/04/GHSA-x49r-f7f3-ghcf/GHSA-x49r-f7f3-ghcf.json
+3 -1
View File
@@ -25,7 +25,9 @@
}
],
"database_specific": {
"cwe_ids": [],
"cwe_ids": [
"CWE-732"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
advisories/unreviewed/2024/05/GHSA-3r68-84rw-29ww/GHSA-3r68-84rw-29ww.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3r68-84rw-29ww",
"modified": "2024-05-14T18:30:46Z",
"modified": "2024-12-03T18:31:01Z",
"published": "2024-05-14T18:30:46Z",
"aliases": [
"CVE-2024-32610"
],
"details": "HDF5 Library through 1.14.3 has a SEGV in H5T_close_real in H5T.c, resulting in a corrupted instruction pointer.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-416"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-14T15:36:45Z"
advisories/unreviewed/2024/05/GHSA-92vx-8h67-43cg/GHSA-92vx-8h67-43cg.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-92vx-8h67-43cg",
"modified": "2024-05-23T18:30:55Z",
"modified": "2024-12-03T18:31:01Z",
"published": "2024-05-23T18:30:55Z",
"aliases": [
"CVE-2024-34931"
],
"details": "A SQL injection vulnerability in /model/update_subject.php in Campcodes Complete Web-Based School Management System 1.0 allows an attacker to execute arbitrary SQL commands via the name parameter.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [],
"references": [
{
@@ -20,8 +25,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-89"
],
"severity": "CRITICAL",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-05-23T17:15:29Z"
advisories/unreviewed/2024/07/GHSA-mjm5-gj95-f347/GHSA-mjm5-gj95-f347.json
+11 -4
View File
@@ -1,13 +1,18 @@
{
"schema_version": "1.4.0",
"id": "GHSA-mjm5-gj95-f347",
"modified": "2024-07-03T21:39:43Z",
"modified": "2024-12-03T18:31:01Z",
"published": "2024-07-03T21:39:43Z",
"aliases": [
"CVE-2024-29507"
],
"details": "Artifex Ghostscript before 10.03.0 sometimes has a stack-based buffer overflow via the CIDFSubstPath and CIDFSubstFont parameters.",
"severity": [],
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L"
}
],
"affected": [],
"references": [
{
@@ -28,8 +33,10 @@
}
],
"database_specific": {
"cwe_ids": [],
"severity": null,
"cwe_ids": [
"CWE-120"
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-07-03T19:15:03Z"
advisories/unreviewed/2024/08/GHSA-27rm-pvpp-228f/GHSA-27rm-pvpp-228f.json
+6 -4
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-27rm-pvpp-228f",
"modified": "2024-09-12T21:32:00Z",
"modified": "2024-12-03T18:31:01Z",
"published": "2024-08-23T21:30:42Z",
"aliases": [
"CVE-2024-37392"
@@ -13,9 +13,7 @@
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
],
"affected": [],
"references": [
{
"type": "ADVISORY",
@@ -24,6 +22,10 @@
{
"type": "WEB",
"url": "https://www.smseagle.eu/2024/08/21/resolved-xss-in-smseagle-software-cve-2024-37392"
},
{
"type": "WEB",
"url": "https://www.smseagle.eu/security-advisory/resolved-xss-in-smseagle-software-cve-2024-37392"
}
],
"database_specific": {

Some files were not shown because too many files have changed in this diff Show More