From b900f1d96524c4fb3bcda9e8451bb5cef7f47230 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Wed, 28 Aug 2024 15:32:42 +0000 Subject: [PATCH] Publish Advisories GHSA-69g2-mv93-2xq7 GHSA-6fc3-8g79-3f39 GHSA-6pww-pf77-29vx GHSA-cqfh-c4c5-c2hg GHSA-j697-hfvp-rhxg GHSA-pc95-3wgm-x28p GHSA-q8g7-2p5j-49jv GHSA-vjqq-2qj5-4qr7 GHSA-vrcc-m4x7-8j47 GHSA-g8hw-gxg5-v62g GHSA-pwfh-2pj9-f3rc GHSA-rj29-jj8r-f77v GHSA-3vvg-gmfw-pmm4 GHSA-4j37-x4vf-9p6c GHSA-fp9x-9r68-jr5q GHSA-gp65-r3h2-m7mh GHSA-px8f-pf56-946w GHSA-q632-7v8j-586g GHSA-q98g-hxg3-268c GHSA-wm5r-jw2j-wfcp GHSA-xmm6-6gqm-6vjq --- .../GHSA-69g2-mv93-2xq7.json | 2 +- .../GHSA-6fc3-8g79-3f39.json | 9 ++-- .../GHSA-6pww-pf77-29vx.json | 11 +++-- .../GHSA-cqfh-c4c5-c2hg.json | 9 ++-- .../GHSA-j697-hfvp-rhxg.json | 11 +++-- .../GHSA-pc95-3wgm-x28p.json | 11 +++-- .../GHSA-q8g7-2p5j-49jv.json | 11 +++-- .../GHSA-vjqq-2qj5-4qr7.json | 11 +++-- .../GHSA-vrcc-m4x7-8j47.json | 11 +++-- .../GHSA-g8hw-gxg5-v62g.json | 6 ++- .../GHSA-pwfh-2pj9-f3rc.json | 6 ++- .../GHSA-rj29-jj8r-f77v.json | 14 +++++- .../GHSA-3vvg-gmfw-pmm4.json | 46 +++++++++++++++++++ .../GHSA-4j37-x4vf-9p6c.json | 35 ++++++++++++++ .../GHSA-fp9x-9r68-jr5q.json | 2 +- .../GHSA-gp65-r3h2-m7mh.json | 11 +++-- .../GHSA-px8f-pf56-946w.json | 11 +++-- .../GHSA-q632-7v8j-586g.json | 6 ++- .../GHSA-q98g-hxg3-268c.json | 6 ++- .../GHSA-wm5r-jw2j-wfcp.json | 2 +- .../GHSA-xmm6-6gqm-6vjq.json | 2 +- 21 files changed, 186 insertions(+), 47 deletions(-) create mode 100644 advisories/unreviewed/2024/08/GHSA-3vvg-gmfw-pmm4/GHSA-3vvg-gmfw-pmm4.json create mode 100644 advisories/unreviewed/2024/08/GHSA-4j37-x4vf-9p6c/GHSA-4j37-x4vf-9p6c.json diff --git a/advisories/unreviewed/2024/03/GHSA-69g2-mv93-2xq7/GHSA-69g2-mv93-2xq7.json b/advisories/unreviewed/2024/03/GHSA-69g2-mv93-2xq7/GHSA-69g2-mv93-2xq7.json index 58839500d0a..a9231d36a9d 100644 --- a/advisories/unreviewed/2024/03/GHSA-69g2-mv93-2xq7/GHSA-69g2-mv93-2xq7.json +++ b/advisories/unreviewed/2024/03/GHSA-69g2-mv93-2xq7/GHSA-69g2-mv93-2xq7.json @@ -32,7 +32,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-125" ], "severity": "MODERATE", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/03/GHSA-6fc3-8g79-3f39/GHSA-6fc3-8g79-3f39.json b/advisories/unreviewed/2024/03/GHSA-6fc3-8g79-3f39/GHSA-6fc3-8g79-3f39.json index cd31a16a4a6..806e9d51fbc 100644 --- a/advisories/unreviewed/2024/03/GHSA-6fc3-8g79-3f39/GHSA-6fc3-8g79-3f39.json +++ b/advisories/unreviewed/2024/03/GHSA-6fc3-8g79-3f39/GHSA-6fc3-8g79-3f39.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-6fc3-8g79-3f39", - "modified": "2024-03-25T06:30:24Z", + "modified": "2024-08-28T15:31:13Z", "published": "2024-03-25T06:30:24Z", "aliases": [ "CVE-2024-1962" ], "details": "The CM Download Manager WordPress plugin before 2.9.1 does not have CSRF checks in some places, which could allow attackers to make logged in admins edit downloads via a CSRF attack", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -27,7 +30,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-25T05:15:50Z" diff --git a/advisories/unreviewed/2024/03/GHSA-6pww-pf77-29vx/GHSA-6pww-pf77-29vx.json b/advisories/unreviewed/2024/03/GHSA-6pww-pf77-29vx/GHSA-6pww-pf77-29vx.json index 5b071a893bc..247e7ac760e 100644 --- a/advisories/unreviewed/2024/03/GHSA-6pww-pf77-29vx/GHSA-6pww-pf77-29vx.json +++ b/advisories/unreviewed/2024/03/GHSA-6pww-pf77-29vx/GHSA-6pww-pf77-29vx.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-6pww-pf77-29vx", - "modified": "2024-03-14T00:31:04Z", + "modified": "2024-08-28T15:31:12Z", "published": "2024-03-08T03:31:24Z", "aliases": [ "CVE-2024-23216" ], "details": "A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.4, macOS Monterey 12.7.4, macOS Ventura 13.6.5. An app may be able to overwrite arbitrary files.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -45,9 +48,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-22" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-08T02:15:47Z" diff --git a/advisories/unreviewed/2024/03/GHSA-cqfh-c4c5-c2hg/GHSA-cqfh-c4c5-c2hg.json b/advisories/unreviewed/2024/03/GHSA-cqfh-c4c5-c2hg/GHSA-cqfh-c4c5-c2hg.json index 6097546c0bb..e50577b253c 100644 --- a/advisories/unreviewed/2024/03/GHSA-cqfh-c4c5-c2hg/GHSA-cqfh-c4c5-c2hg.json +++ b/advisories/unreviewed/2024/03/GHSA-cqfh-c4c5-c2hg/GHSA-cqfh-c4c5-c2hg.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-cqfh-c4c5-c2hg", - "modified": "2024-03-28T00:31:40Z", + "modified": "2024-08-28T15:31:13Z", "published": "2024-03-28T00:31:40Z", "aliases": [ "CVE-2024-25354" ], "details": "RegEx Denial of Service in domain-suffix 1.0.8 allows attackers to crash the application via crafted input to the parse function.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" + } ], "affected": [ @@ -27,7 +30,7 @@ "cwe_ids": [ ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-27T22:15:10Z" diff --git a/advisories/unreviewed/2024/03/GHSA-j697-hfvp-rhxg/GHSA-j697-hfvp-rhxg.json b/advisories/unreviewed/2024/03/GHSA-j697-hfvp-rhxg/GHSA-j697-hfvp-rhxg.json index c12b45a217b..9730ef6fe4c 100644 --- a/advisories/unreviewed/2024/03/GHSA-j697-hfvp-rhxg/GHSA-j697-hfvp-rhxg.json +++ b/advisories/unreviewed/2024/03/GHSA-j697-hfvp-rhxg/GHSA-j697-hfvp-rhxg.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-j697-hfvp-rhxg", - "modified": "2024-03-13T18:31:34Z", + "modified": "2024-08-28T15:31:12Z", "published": "2024-03-13T18:31:34Z", "aliases": [ "CVE-2024-28669" ], "details": "DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/freelist_edit.php.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-352" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-13T16:15:30Z" diff --git a/advisories/unreviewed/2024/03/GHSA-pc95-3wgm-x28p/GHSA-pc95-3wgm-x28p.json b/advisories/unreviewed/2024/03/GHSA-pc95-3wgm-x28p/GHSA-pc95-3wgm-x28p.json index a6a52dd2e5c..9770d0d83b6 100644 --- a/advisories/unreviewed/2024/03/GHSA-pc95-3wgm-x28p/GHSA-pc95-3wgm-x28p.json +++ b/advisories/unreviewed/2024/03/GHSA-pc95-3wgm-x28p/GHSA-pc95-3wgm-x28p.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-pc95-3wgm-x28p", - "modified": "2024-03-22T06:30:23Z", + "modified": "2024-08-28T15:31:13Z", "published": "2024-03-22T06:30:23Z", "aliases": [ "CVE-2024-29271" ], "details": "Reflected Cross-Site Scripting (XSS) vulnerability in VvvebJs before version 1.7.7, allows remote attackers to execute arbitrary code and obtain sensitive information via the action parameter in save.php.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-79" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-22T04:15:11Z" diff --git a/advisories/unreviewed/2024/03/GHSA-q8g7-2p5j-49jv/GHSA-q8g7-2p5j-49jv.json b/advisories/unreviewed/2024/03/GHSA-q8g7-2p5j-49jv/GHSA-q8g7-2p5j-49jv.json index 6b58da08e5a..5eb811414ae 100644 --- a/advisories/unreviewed/2024/03/GHSA-q8g7-2p5j-49jv/GHSA-q8g7-2p5j-49jv.json +++ b/advisories/unreviewed/2024/03/GHSA-q8g7-2p5j-49jv/GHSA-q8g7-2p5j-49jv.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-q8g7-2p5j-49jv", - "modified": "2024-03-09T06:30:41Z", + "modified": "2024-08-28T15:31:12Z", "published": "2024-03-09T06:30:41Z", "aliases": [ "CVE-2023-46427" ], "details": "An issue was discovered in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), and obtain sensitive information via null pointer deference in gf_dash_setup_period component in media_tools/dash_client.c.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-476" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-09T06:15:50Z" diff --git a/advisories/unreviewed/2024/03/GHSA-vjqq-2qj5-4qr7/GHSA-vjqq-2qj5-4qr7.json b/advisories/unreviewed/2024/03/GHSA-vjqq-2qj5-4qr7/GHSA-vjqq-2qj5-4qr7.json index 4700fbce2d2..812306f76dd 100644 --- a/advisories/unreviewed/2024/03/GHSA-vjqq-2qj5-4qr7/GHSA-vjqq-2qj5-4qr7.json +++ b/advisories/unreviewed/2024/03/GHSA-vjqq-2qj5-4qr7/GHSA-vjqq-2qj5-4qr7.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-vjqq-2qj5-4qr7", - "modified": "2024-03-13T18:31:35Z", + "modified": "2024-08-28T15:31:12Z", "published": "2024-03-13T18:31:35Z", "aliases": [ "CVE-2024-28682" ], "details": "DedeCMS v5.7 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /dede/sys_cache_up.php.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-352" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-13T16:15:30Z" diff --git a/advisories/unreviewed/2024/03/GHSA-vrcc-m4x7-8j47/GHSA-vrcc-m4x7-8j47.json b/advisories/unreviewed/2024/03/GHSA-vrcc-m4x7-8j47/GHSA-vrcc-m4x7-8j47.json index d658a4f5802..3e98db72385 100644 --- a/advisories/unreviewed/2024/03/GHSA-vrcc-m4x7-8j47/GHSA-vrcc-m4x7-8j47.json +++ b/advisories/unreviewed/2024/03/GHSA-vrcc-m4x7-8j47/GHSA-vrcc-m4x7-8j47.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-vrcc-m4x7-8j47", - "modified": "2024-03-12T18:31:14Z", + "modified": "2024-08-28T15:31:12Z", "published": "2024-03-12T18:31:14Z", "aliases": [ "CVE-2024-28339" ], "details": "An information leak in the debuginfo.htm component of Netgear CBR40 2.5.0.28, Netgear CBK40 2.5.0.28, and Netgear CBK43 2.5.0.28 allows attackers to obtain sensitive information without any authentication required.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-200" ], - "severity": null, + "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-03-12T17:15:59Z" diff --git a/advisories/unreviewed/2024/06/GHSA-g8hw-gxg5-v62g/GHSA-g8hw-gxg5-v62g.json b/advisories/unreviewed/2024/06/GHSA-g8hw-gxg5-v62g/GHSA-g8hw-gxg5-v62g.json index fe8002e9130..dec2eed7cab 100644 --- a/advisories/unreviewed/2024/06/GHSA-g8hw-gxg5-v62g/GHSA-g8hw-gxg5-v62g.json +++ b/advisories/unreviewed/2024/06/GHSA-g8hw-gxg5-v62g/GHSA-g8hw-gxg5-v62g.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-g8hw-gxg5-v62g", - "modified": "2024-08-23T18:32:57Z", + "modified": "2024-08-28T15:31:13Z", "published": "2024-06-13T18:31:58Z", "aliases": [ "CVE-2024-35325" @@ -24,6 +24,10 @@ { "type": "WEB", "url": "https://github.com/idhyt/pocs/blob/main/libyaml/CVE-2024-35325.c" + }, + { + "type": "WEB", + "url": "https://github.com/idhyt/pocs/tree/main/libyaml" } ], "database_specific": { diff --git a/advisories/unreviewed/2024/06/GHSA-pwfh-2pj9-f3rc/GHSA-pwfh-2pj9-f3rc.json b/advisories/unreviewed/2024/06/GHSA-pwfh-2pj9-f3rc/GHSA-pwfh-2pj9-f3rc.json index fb32066330b..97dc5550572 100644 --- a/advisories/unreviewed/2024/06/GHSA-pwfh-2pj9-f3rc/GHSA-pwfh-2pj9-f3rc.json +++ b/advisories/unreviewed/2024/06/GHSA-pwfh-2pj9-f3rc/GHSA-pwfh-2pj9-f3rc.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-pwfh-2pj9-f3rc", - "modified": "2024-07-19T15:31:46Z", + "modified": "2024-08-28T15:31:13Z", "published": "2024-06-13T18:31:58Z", "aliases": [ "CVE-2024-35328" @@ -24,6 +24,10 @@ { "type": "WEB", "url": "https://github.com/idhyt/pocs/blob/main/libyaml/CVE-2024-35328.c" + }, + { + "type": "WEB", + "url": "https://github.com/idhyt/pocs/tree/main/libyaml" } ], "database_specific": { diff --git a/advisories/unreviewed/2024/06/GHSA-rj29-jj8r-f77v/GHSA-rj29-jj8r-f77v.json b/advisories/unreviewed/2024/06/GHSA-rj29-jj8r-f77v/GHSA-rj29-jj8r-f77v.json index 527aa1d5a3d..4e754ad047c 100644 --- a/advisories/unreviewed/2024/06/GHSA-rj29-jj8r-f77v/GHSA-rj29-jj8r-f77v.json +++ b/advisories/unreviewed/2024/06/GHSA-rj29-jj8r-f77v/GHSA-rj29-jj8r-f77v.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-rj29-jj8r-f77v", - "modified": "2024-08-06T18:30:50Z", + "modified": "2024-08-28T15:31:13Z", "published": "2024-06-13T18:31:58Z", "aliases": [ "CVE-2024-35326" @@ -21,9 +21,21 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-35326" }, + { + "type": "WEB", + "url": "https://github.com/yaml/libyaml/issues/298" + }, + { + "type": "WEB", + "url": "https://github.com/yaml/libyaml/issues/302" + }, { "type": "WEB", "url": "https://github.com/idhyt/pocs/blob/main/libyaml/CVE-2024-35326.c" + }, + { + "type": "WEB", + "url": "https://github.com/idhyt/pocs/tree/main/libyaml" } ], "database_specific": { diff --git a/advisories/unreviewed/2024/08/GHSA-3vvg-gmfw-pmm4/GHSA-3vvg-gmfw-pmm4.json b/advisories/unreviewed/2024/08/GHSA-3vvg-gmfw-pmm4/GHSA-3vvg-gmfw-pmm4.json new file mode 100644 index 00000000000..32fd6babe73 --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-3vvg-gmfw-pmm4/GHSA-3vvg-gmfw-pmm4.json @@ -0,0 +1,46 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-3vvg-gmfw-pmm4", + "modified": "2024-08-28T15:31:13Z", + "published": "2024-08-28T15:31:13Z", + "aliases": [ + "CVE-2024-8195" + ], + "details": "The Permalink Manager Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'debug_data', 'debug_query', and 'debug_redirect' functions in all versions up to, and including, 2.4.4. This makes it possible for unauthenticated attackers to extract sensitive data including password, title, and content of password-protected posts.", + "severity": [ + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" + } + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-8195" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/browser/permalink-manager/tags/2.4.4/includes/core/permalink-manager-debug.php#L70" + }, + { + "type": "WEB", + "url": "https://plugins.trac.wordpress.org/changeset/3142479" + }, + { + "type": "WEB", + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/aadf1d59-60ba-4da2-adbb-4e84d587a34d?source=cve" + } + ], + "database_specific": { + "cwe_ids": [ + "CWE-862" + ], + "severity": "MODERATE", + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-28T14:15:08Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-4j37-x4vf-9p6c/GHSA-4j37-x4vf-9p6c.json b/advisories/unreviewed/2024/08/GHSA-4j37-x4vf-9p6c/GHSA-4j37-x4vf-9p6c.json new file mode 100644 index 00000000000..0ed82d5d0a2 --- /dev/null +++ b/advisories/unreviewed/2024/08/GHSA-4j37-x4vf-9p6c/GHSA-4j37-x4vf-9p6c.json @@ -0,0 +1,35 @@ +{ + "schema_version": "1.4.0", + "id": "GHSA-4j37-x4vf-9p6c", + "modified": "2024-08-28T15:31:13Z", + "published": "2024-08-28T15:31:13Z", + "aliases": [ + "CVE-2024-34198" + ], + "details": "TOTOLINK AC1200 Wireless Router A3002RU V2.1.1-B20230720.1011 is vulnerable to Buffer Overflow. The formWlEncrypt CGI handler in the boa program fails to limit the length of the wlan_ssid field from user input. This allows attackers to craft malicious HTTP requests by supplying an excessively long value for the wlan_ssid field, leading to a stack overflow. This can be further exploited to execute arbitrary commands or launch denial-of-service attacks.", + "severity": [ + + ], + "affected": [ + + ], + "references": [ + { + "type": "ADVISORY", + "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-34198" + }, + { + "type": "WEB", + "url": "https://gist.github.com/Swind1er/02f6cb414e440c34878f20fef756e286" + } + ], + "database_specific": { + "cwe_ids": [ + + ], + "severity": null, + "github_reviewed": false, + "github_reviewed_at": null, + "nvd_published_at": "2024-08-28T15:15:16Z" + } +} \ No newline at end of file diff --git a/advisories/unreviewed/2024/08/GHSA-fp9x-9r68-jr5q/GHSA-fp9x-9r68-jr5q.json b/advisories/unreviewed/2024/08/GHSA-fp9x-9r68-jr5q/GHSA-fp9x-9r68-jr5q.json index 9ffc965e2de..bf5b1dc4a1d 100644 --- a/advisories/unreviewed/2024/08/GHSA-fp9x-9r68-jr5q/GHSA-fp9x-9r68-jr5q.json +++ b/advisories/unreviewed/2024/08/GHSA-fp9x-9r68-jr5q/GHSA-fp9x-9r68-jr5q.json @@ -28,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-94" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/08/GHSA-gp65-r3h2-m7mh/GHSA-gp65-r3h2-m7mh.json b/advisories/unreviewed/2024/08/GHSA-gp65-r3h2-m7mh/GHSA-gp65-r3h2-m7mh.json index 6d4beee7bf9..e939e9d37f4 100644 --- a/advisories/unreviewed/2024/08/GHSA-gp65-r3h2-m7mh/GHSA-gp65-r3h2-m7mh.json +++ b/advisories/unreviewed/2024/08/GHSA-gp65-r3h2-m7mh/GHSA-gp65-r3h2-m7mh.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-gp65-r3h2-m7mh", - "modified": "2024-08-27T21:31:13Z", + "modified": "2024-08-28T15:31:13Z", "published": "2024-08-27T21:31:13Z", "aliases": [ "CVE-2022-39997" ], "details": "A weak password requirement issue was discovered in Teldats Router RS123, RS123w allows a remote attacker to escalate privileges", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -29,9 +32,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-521" ], - "severity": null, + "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-27T19:15:15Z" diff --git a/advisories/unreviewed/2024/08/GHSA-px8f-pf56-946w/GHSA-px8f-pf56-946w.json b/advisories/unreviewed/2024/08/GHSA-px8f-pf56-946w/GHSA-px8f-pf56-946w.json index 6a3b54ea1c6..48dbcd58cc4 100644 --- a/advisories/unreviewed/2024/08/GHSA-px8f-pf56-946w/GHSA-px8f-pf56-946w.json +++ b/advisories/unreviewed/2024/08/GHSA-px8f-pf56-946w/GHSA-px8f-pf56-946w.json @@ -1,14 +1,17 @@ { "schema_version": "1.4.0", "id": "GHSA-px8f-pf56-946w", - "modified": "2024-08-27T18:31:38Z", + "modified": "2024-08-28T15:31:13Z", "published": "2024-08-27T18:31:38Z", "aliases": [ "CVE-2024-7720" ], "details": "HP Security Manager is potentially vulnerable to Remote Code Execution as a result of code vulnerability within the product's solution open-source libraries.", "severity": [ - + { + "type": "CVSS_V3", + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } ], "affected": [ @@ -25,9 +28,9 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-94" ], - "severity": null, + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2024-08-27T18:15:15Z" diff --git a/advisories/unreviewed/2024/08/GHSA-q632-7v8j-586g/GHSA-q632-7v8j-586g.json b/advisories/unreviewed/2024/08/GHSA-q632-7v8j-586g/GHSA-q632-7v8j-586g.json index e50dc862801..349e7bd3174 100644 --- a/advisories/unreviewed/2024/08/GHSA-q632-7v8j-586g/GHSA-q632-7v8j-586g.json +++ b/advisories/unreviewed/2024/08/GHSA-q632-7v8j-586g/GHSA-q632-7v8j-586g.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-q632-7v8j-586g", - "modified": "2024-08-19T18:32:07Z", + "modified": "2024-08-28T15:31:13Z", "published": "2024-08-19T06:30:54Z", "aliases": [ "CVE-2024-44083" @@ -21,6 +21,10 @@ "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-44083" }, + { + "type": "WEB", + "url": "https://github.com/Azvanzed/CVE-2024-44083" + }, { "type": "WEB", "url": "https://github.com/Azvanzed/IdaMeme" diff --git a/advisories/unreviewed/2024/08/GHSA-q98g-hxg3-268c/GHSA-q98g-hxg3-268c.json b/advisories/unreviewed/2024/08/GHSA-q98g-hxg3-268c/GHSA-q98g-hxg3-268c.json index 85739f0c25b..220f9edc763 100644 --- a/advisories/unreviewed/2024/08/GHSA-q98g-hxg3-268c/GHSA-q98g-hxg3-268c.json +++ b/advisories/unreviewed/2024/08/GHSA-q98g-hxg3-268c/GHSA-q98g-hxg3-268c.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-q98g-hxg3-268c", - "modified": "2024-08-23T18:33:00Z", + "modified": "2024-08-28T15:31:13Z", "published": "2024-08-22T21:31:29Z", "aliases": [ "CVE-2024-8088" @@ -29,6 +29,10 @@ "type": "WEB", "url": "https://github.com/python/cpython/issues/122905" }, + { + "type": "WEB", + "url": "https://github.com/python/cpython/issues/123270" + }, { "type": "WEB", "url": "https://github.com/python/cpython/pull/122906" diff --git a/advisories/unreviewed/2024/08/GHSA-wm5r-jw2j-wfcp/GHSA-wm5r-jw2j-wfcp.json b/advisories/unreviewed/2024/08/GHSA-wm5r-jw2j-wfcp/GHSA-wm5r-jw2j-wfcp.json index 5dd23e9a645..75300f11d82 100644 --- a/advisories/unreviewed/2024/08/GHSA-wm5r-jw2j-wfcp/GHSA-wm5r-jw2j-wfcp.json +++ b/advisories/unreviewed/2024/08/GHSA-wm5r-jw2j-wfcp/GHSA-wm5r-jw2j-wfcp.json @@ -28,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-94" ], "severity": "HIGH", "github_reviewed": false, diff --git a/advisories/unreviewed/2024/08/GHSA-xmm6-6gqm-6vjq/GHSA-xmm6-6gqm-6vjq.json b/advisories/unreviewed/2024/08/GHSA-xmm6-6gqm-6vjq/GHSA-xmm6-6gqm-6vjq.json index 4ce41ae6297..8ca0cebd99e 100644 --- a/advisories/unreviewed/2024/08/GHSA-xmm6-6gqm-6vjq/GHSA-xmm6-6gqm-6vjq.json +++ b/advisories/unreviewed/2024/08/GHSA-xmm6-6gqm-6vjq/GHSA-xmm6-6gqm-6vjq.json @@ -28,7 +28,7 @@ ], "database_specific": { "cwe_ids": [ - + "CWE-94" ], "severity": "HIGH", "github_reviewed": false,