Publish Advisories

GHSA-g636-8hgg-7gx9 GHSA-gc8r-pxj9-hhx3 GHSA-rvm7-rc5g-c98q GHSA-5cwv-6xqx-92m5 GHSA-8w3c-2jv9-vpm4 GHSA-hw49-2p59-3mhj GHSA-xc32-hpgq-2336
2026-05-22 18:04:22 -07:00 · 2024-07-03 00:35:37 +00:00
parent 5ee3a0b700
commit b8c3490537
7 changed files with 175 additions and 4 deletions
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-g636-8hgg-7gx9",
-  "modified": "2024-03-18T15:30:48Z",
+  "modified": "2024-07-03T00:34:09Z",
  "published": "2024-03-18T15:30:48Z",
  "aliases": [
    "CVE-2023-7250"
@@ -21,6 +21,10 @@
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-7250"
    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2024:4241"
+    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2023-7250"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-gc8r-pxj9-hhx3",
-  "modified": "2024-06-05T18:30:37Z",
+  "modified": "2024-07-03T00:34:10Z",
  "published": "2024-06-05T18:30:37Z",
  "aliases": [
    "CVE-2024-5037"
@@ -25,6 +25,10 @@
      "type": "WEB",
      "url": "https://github.com/kubernetes/kubernetes/pull/123540"
    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2024:4151"
+    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2024-5037"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-rvm7-rc5g-c98q",
-  "modified": "2024-07-01T06:31:16Z",
+  "modified": "2024-07-03T00:34:10Z",
  "published": "2024-06-11T21:32:17Z",
  "aliases": [
    "CVE-2023-4727"
@@ -41,6 +41,10 @@
      "type": "WEB",
      "url": "https://access.redhat.com/errata/RHSA-2024:4179"
    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2024:4222"
+    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2023-4727"
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-5cwv-6xqx-92m5",
-  "modified": "2024-07-02T21:32:15Z",
+  "modified": "2024-07-03T00:34:11Z",
  "published": "2024-07-02T21:32:15Z",
  "aliases": [
    "CVE-2024-4467"
@@ -21,6 +21,18 @@
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4467"
    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2024:4276"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2024:4277"
+    },
+    {
+      "type": "WEB",
+      "url": "https://access.redhat.com/errata/RHSA-2024:4278"
+    },
    {
      "type": "WEB",
      "url": "https://access.redhat.com/security/cve/CVE-2024-4467"
@@ -0,0 +1,46 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8w3c-2jv9-vpm4",
+  "modified": "2024-07-03T00:34:11Z",
+  "published": "2024-07-03T00:34:11Z",
+  "aliases": [
+    "CVE-2024-4708"
+  ],
+  "details": "mySCADA myPRO \n\nuses a hard-coded password which could allow an attacker to remotely execute code on the affected device.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4708"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.cisa.gov/news-events/ics-advisories/icsa-24-184-02"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.myscada.org/mypro"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-259"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-07-02T23:15:10Z"
+  }
+}
@@ -0,0 +1,47 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-hw49-2p59-3mhj",
+  "modified": "2024-07-03T00:34:11Z",
+  "published": "2024-07-03T00:34:10Z",
+  "aliases": [
+    "CVE-2024-24791"
+  ],
+  "details": "The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an \"Expect: 100-continue\" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next request sent on the connection will fail. An attacker sending a request to a net/http/httputil.ReverseProxy proxy can exploit this mishandling to cause a denial of service by sending \"Expect: 100-continue\" requests which elicit a non-informational response from the backend. Each such request leaves the proxy with an invalid connection, and causes one subsequent request using that connection to fail.",
+  "severity": [
+
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-24791"
+    },
+    {
+      "type": "WEB",
+      "url": "https://go.dev/cl/591255"
+    },
+    {
+      "type": "WEB",
+      "url": "https://go.dev/issue/67555"
+    },
+    {
+      "type": "WEB",
+      "url": "https://groups.google.com/g/golang-dev/c/t0rK-qHBqzY/m/6MMoAZkMAgAJ"
+    },
+    {
+      "type": "WEB",
+      "url": "https://pkg.go.dev/vuln/GO-2024-2963"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+
+    ],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-07-02T22:15:04Z"
+  }
+}
@@ -0,0 +1,54 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-xc32-hpgq-2336",
+  "modified": "2024-07-03T00:34:11Z",
+  "published": "2024-07-03T00:34:11Z",
+  "aliases": [
+    "CVE-2024-6453"
+  ],
+  "details": "A vulnerability was found in itsourcecode Farm Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /quarantine.php?id=3. The manipulation of the argument pigno/breed/reason leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-270241 was assigned to this vulnerability. NOTE: Original submission mentioned parameter pigno only but the VulDB data analysis team determined two additional parameters to be affected as well.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-6453"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/7u7777/cve/issues/3"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.270241"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.270241"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.367626"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-89"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-07-02T22:15:05Z"
+  }
+}