netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish Advisories

Browse Source 
GHSA-6528-wvf6-f6qg
GHSA-cq27-v7xp-c356
GHSA-7qqv-r2q4-jxhm
GHSA-7xc5-ggpp-g249
This commit is contained in:
advisory-database[bot]
2024-10-18 22:00:25 +00:00
parent f374fc0719
commit b8af8e6728
4 changed files with 41 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2018/07/GHSA-6528-wvf6-f6qg/GHSA-6528-wvf6-f6qg.json
+9 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6528-wvf6-f6qg",
"modified": "2022-04-26T18:13:29Z",
"modified": "2024-10-18T21:58:31Z",
"published": "2018-07-12T20:29:26Z",
"aliases": [
"CVE-2018-6594"
@@ -12,6 +12,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N"
}
],
"affected": [
@@ -56,6 +60,10 @@
"type": "PACKAGE",
"url": "https://github.com/dlitz/pycrypto"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/pycrypto/PYSEC-2018-97.yaml"
},
{
"type": "WEB",
"url": "https://lists.debian.org/debian-lts-announce/2018/02/msg00018.html"
advisories/github-reviewed/2018/12/GHSA-cq27-v7xp-c356/GHSA-cq27-v7xp-c356.json
+9 -9
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-cq27-v7xp-c356",
"modified": "2022-09-14T22:11:10Z",
"modified": "2024-10-18T21:59:58Z",
"published": "2018-12-14T18:51:38Z",
"aliases": [
"CVE-2013-7459"
@@ -12,6 +12,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
}
],
"affected": [
@@ -60,6 +64,10 @@
"type": "PACKAGE",
"url": "https://github.com/dlitz/pycrypto"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/pycrypto/PYSEC-2017-94.yaml"
},
{
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/C6BWNADPLKDBBQBUT3P75W7HAJCE7M3B"
@@ -68,10 +76,6 @@
"type": "WEB",
"url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RJ37R2YLX56YZABFNAOWV4VTHTGYREAE"
},
{
"type": "WEB",
"url": "https://pony7.fr/ctf:public:32c3:cryptmsg"
},
{
"type": "WEB",
"url": "https://security.gentoo.org/glsa/201702-14"
@@ -79,10 +83,6 @@
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2016/12/27/8"
},
{
"type": "WEB",
"url": "http://www.securityfocus.com/bid/95122"
}
],
"database_specific": {
advisories/github-reviewed/2019/01/GHSA-7qqv-r2q4-jxhm/GHSA-7qqv-r2q4-jxhm.json
+10 -2
View File
@@ -1,17 +1,21 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7qqv-r2q4-jxhm",
"modified": "2021-09-03T21:43:07Z",
"modified": "2024-10-18T21:59:13Z",
"published": "2019-01-14T16:19:31Z",
"aliases": [
"CVE-2018-1000809"
],
"summary": "High severity vulnerability that affects privacyIDEA",
"summary": "privacyIDEA Improper Input Validation vulnerability",
"details": "privacyIDEA version 2.23.1 and earlier contains a Improper Input Validation vulnerability in token validation api that can result in Denial-of-Service. This attack appear to be exploitable via http request with user=<space>&pass= to /validate/check url. This vulnerability appears to have been fixed in 2.23.2.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"
}
],
"affected": [
@@ -55,6 +59,10 @@
{
"type": "PACKAGE",
"url": "https://github.com/privacyidea/privacyidea"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/privacyidea/PYSEC-2018-20.yaml"
}
],
"database_specific": {
advisories/github-reviewed/2021/04/GHSA-7xc5-ggpp-g249/GHSA-7xc5-ggpp-g249.json
+13 -7
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7xc5-ggpp-g249",
"modified": "2023-08-07T11:51:29Z",
"modified": "2024-10-18T21:58:01Z",
"published": "2021-04-20T16:13:24Z",
"aliases": [
"CVE-2020-28468"
@@ -12,6 +12,10 @@
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
},
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"
}
],
"affected": [
@@ -20,12 +24,6 @@
"ecosystem": "PyPI",
"name": "pwntools"
},
"ecosystem_specific": {
"affected_functions": [
"pwnlib.shellcraft.pretty",
"pwnlib.constants.ConstantsModule.eval"
]
},
"ranges": [
{
"type": "ECOSYSTEM",
@@ -62,6 +60,14 @@
"type": "PACKAGE",
"url": "https://github.com/Gallopsled/pwntools"
},
{
"type": "ADVISORY",
"url": "https://github.com/advisories/GHSA-7xc5-ggpp-g249"
},
{
"type": "WEB",
"url": "https://github.com/pypa/advisory-database/tree/main/vulns/pwntools/PYSEC-2021-72.yaml"
},
{
"type": "WEB",
"url": "https://snyk.io/vuln/SNYK-PYTHON-PWNTOOLS-1047345"