netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2022-09-25 00:09:21 +00:00
parent bc24636910
commit b939183245
302 changed files with 8288 additions and 262 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2021/12/GHSA-pv7r-v4qc-v4gq/GHSA-pv7r-v4qc-v4gq.json
+7 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.3.0",
"id": "GHSA-pv7r-v4qc-v4gq",
"modified": "2021-12-14T00:01:38Z",
"modified": "2022-09-25T00:00:18Z",
"published": "2021-12-09T00:00:53Z",
"aliases": [
"CVE-2021-25518"
],
"details": "An improper boundary check in secure_log of LDFW and BL31 prior to SMR Dec-2021 Release 1 allows arbitrary memory write and code execution.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,7 +28,8 @@
],
"database_specific": {
"cwe_ids": [
"CWE-119"
"CWE-119",
"CWE-787"
],
"severity": "MODERATE",
"github_reviewed": false
advisories/unreviewed/2022/03/GHSA-574v-3xxh-gwh5/GHSA-574v-3xxh-gwh5.json
+4
View File
@@ -24,6 +24,10 @@
{
"type": "WEB",
"url": "https://www.incibe-cert.es/en/early-warning/security-advisories/tp-link-tapo-c200-remote-code-execution-vulnerability"
},
{
"type": "WEB",
"url": "http://packetstormsecurity.com/files/168472/TP-Link-Tapo-c200-1.1.15-Remote-Code-Execution.html"
}
],
"database_specific": {
advisories/unreviewed/2022/03/GHSA-q5p3-3mpm-hppr/GHSA-q5p3-3mpm-hppr.json
+1 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.3.0",
"id": "GHSA-q5p3-3mpm-hppr",
"modified": "2022-04-30T00:01:02Z",
"modified": "2022-09-25T00:00:26Z",
"published": "2022-03-26T00:00:29Z",
"aliases": [
"CVE-2022-0995"
advisories/unreviewed/2022/04/GHSA-4v97-3733-h7mw/GHSA-4v97-3733-h7mw.json
+1 -1
View File
@@ -101,7 +101,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-835"
],
"severity": "MODERATE",
"github_reviewed": false
advisories/unreviewed/2022/04/GHSA-9q6c-grq3-7prg/GHSA-9q6c-grq3-7prg.json
+1 -1
View File
@@ -125,7 +125,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-120"
],
"severity": "MODERATE",
"github_reviewed": false
advisories/unreviewed/2022/05/GHSA-25vq-j8q6-c4xv/GHSA-25vq-j8q6-c4xv.json
+5 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.3.0",
"id": "GHSA-25vq-j8q6-c4xv",
"modified": "2022-05-24T19:07:17Z",
"modified": "2022-09-25T00:00:19Z",
"published": "2022-05-24T19:07:17Z",
"aliases": [
"CVE-2021-25426"
],
"details": "Improper component protection vulnerability in SmsViewerActivity of Samsung Message prior to SMR July-2021 Release 1 allows untrusted applications to access Message files.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
advisories/unreviewed/2022/05/GHSA-3xxr-x7rp-pc4x/GHSA-3xxr-x7rp-pc4x.json
+5 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.3.0",
"id": "GHSA-3xxr-x7rp-pc4x",
"modified": "2022-05-24T17:43:41Z",
"modified": "2022-09-25T00:00:18Z",
"published": "2022-05-24T17:43:41Z",
"aliases": [
"CVE-2021-25340"
],
"details": "Improper access control vulnerability in Samsung keyboard version prior to SMR Feb-2021 Release 1 allows physically proximate attackers to change in arbitrary settings during Initialization State.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [
advisories/unreviewed/2022/05/GHSA-42g8-62v3-2jg8/GHSA-42g8-62v3-2jg8.json
+5 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.3.0",
"id": "GHSA-42g8-62v3-2jg8",
"modified": "2022-05-24T17:46:25Z",
"modified": "2022-09-25T00:00:26Z",
"published": "2022-05-24T17:46:25Z",
"aliases": [
"CVE-2021-22200"
],
"details": "An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6. Under a special condition it was possible to access data of an internal repository through a public project fork as an anonymous user.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
advisories/unreviewed/2022/05/GHSA-659h-rq95-r222/GHSA-659h-rq95-r222.json
+5 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.3.0",
"id": "GHSA-659h-rq95-r222",
"modified": "2022-05-24T19:13:56Z",
"modified": "2022-09-25T00:00:18Z",
"published": "2022-05-24T19:13:56Z",
"aliases": [
"CVE-2021-25464"
],
"details": "An improper file management vulnerability in SamsungCapture prior to version 4.8.02 allows sensitive information leak.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"
}
],
"affected": [
advisories/unreviewed/2022/05/GHSA-6gph-499x-vm5j/GHSA-6gph-499x-vm5j.json
+6 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.3.0",
"id": "GHSA-6gph-499x-vm5j",
"modified": "2022-05-24T19:05:10Z",
"modified": "2022-09-25T00:00:19Z",
"published": "2022-05-24T19:05:10Z",
"aliases": [
"CVE-2021-25386"
],
"details": "An improper input validation vulnerability in sdfffd_parse_chunk_FVER() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-119",
"CWE-120"
],
"severity": "CRITICAL",
advisories/unreviewed/2022/05/GHSA-8q2m-9hf9-7qq4/GHSA-8q2m-9hf9-7qq4.json
+5 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.3.0",
"id": "GHSA-8q2m-9hf9-7qq4",
"modified": "2022-05-24T19:16:44Z",
"modified": "2022-09-25T00:00:18Z",
"published": "2022-05-24T19:16:44Z",
"aliases": [
"CVE-2021-25472"
],
"details": "An improper access control vulnerability in BluetoothSettingsProvider prior to SMR Oct-2021 Release 1 allows untrusted application to overwrite some Bluetooth information.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [
advisories/unreviewed/2022/05/GHSA-8vw4-xv4w-x2mf/GHSA-8vw4-xv4w-x2mf.json
+5 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.3.0",
"id": "GHSA-8vw4-xv4w-x2mf",
"modified": "2022-05-24T19:10:57Z",
"modified": "2022-09-25T00:00:20Z",
"published": "2022-05-24T19:10:57Z",
"aliases": [
"CVE-2020-20977"
],
"details": "A stored cross site scripting (XSS) vulnerability in index.php/legend/6.html of UK CMS v1.1.10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Comments section.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N"
}
],
"affected": [
advisories/unreviewed/2022/05/GHSA-95xc-mm75-h3v2/GHSA-95xc-mm75-h3v2.json
+5 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.3.0",
"id": "GHSA-95xc-mm75-h3v2",
"modified": "2022-05-24T17:46:59Z",
"modified": "2022-09-25T00:00:18Z",
"published": "2022-05-24T17:46:59Z",
"aliases": [
"CVE-2021-25361"
],
"details": "An improper access control vulnerability in stickerCenter prior to SMR APR-2021 Release 1 allows local attackers to read or write arbitrary files of system process via untrusted applications.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"
}
],
"affected": [
advisories/unreviewed/2022/05/GHSA-c8h9-xgqx-fc49/GHSA-c8h9-xgqx-fc49.json
+6 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.3.0",
"id": "GHSA-c8h9-xgqx-fc49",
"modified": "2022-05-24T19:05:10Z",
"modified": "2022-09-25T00:00:18Z",
"published": "2022-05-24T19:05:10Z",
"aliases": [
"CVE-2021-25385"
],
"details": "An improper input validation vulnerability in sdfffd_parse_chunk_PROP() in libsdffextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-119",
"CWE-120"
],
"severity": "CRITICAL",
advisories/unreviewed/2022/05/GHSA-ccc3-9cpj-334h/GHSA-ccc3-9cpj-334h.json
+5 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.3.0",
"id": "GHSA-ccc3-9cpj-334h",
"modified": "2022-05-24T19:10:12Z",
"modified": "2022-09-25T00:00:19Z",
"published": "2022-05-24T19:10:12Z",
"aliases": [
"CVE-2021-25446"
],
"details": "Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause arbitrary webpage loading in webview.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [
advisories/unreviewed/2022/05/GHSA-cgwf-g22v-w6c6/GHSA-cgwf-g22v-w6c6.json
+6 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.3.0",
"id": "GHSA-cgwf-g22v-w6c6",
"modified": "2022-05-24T19:05:10Z",
"modified": "2022-09-25T00:00:18Z",
"published": "2022-05-24T19:05:10Z",
"aliases": [
"CVE-2021-25387"
],
"details": "An improper input validation vulnerability in sflacfd_get_frm() in libsflacextractor library prior to SMR MAY-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H"
}
],
"affected": [
@@ -25,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-119",
"CWE-787"
],
"severity": "CRITICAL",
advisories/unreviewed/2022/05/GHSA-cj6h-3w4g-pcm8/GHSA-cj6h-3w4g-pcm8.json
+5 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.3.0",
"id": "GHSA-cj6h-3w4g-pcm8",
"modified": "2022-05-24T19:13:57Z",
"modified": "2022-09-25T00:00:19Z",
"published": "2022-05-24T19:13:57Z",
"aliases": [
"CVE-2021-25463"
],
"details": "Improper access control vulnerability in PENUP prior to version 3.8.00.18 allows arbitrary webpage loading in webview.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [
advisories/unreviewed/2022/05/GHSA-g52j-gcmf-jf6c/GHSA-g52j-gcmf-jf6c.json
+5 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.3.0",
"id": "GHSA-g52j-gcmf-jf6c",
"modified": "2022-05-24T19:10:12Z",
"modified": "2022-09-25T00:00:19Z",
"published": "2022-05-24T19:10:12Z",
"aliases": [
"CVE-2021-25447"
],
"details": "Improper access control vulnerability in SmartThings prior to version 1.7.67.25 allows untrusted applications to cause local file inclusion in webview.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"
}
],
"affected": [
advisories/unreviewed/2022/05/GHSA-g8xw-6mmv-frg4/GHSA-g8xw-6mmv-frg4.json
+5 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.3.0",
"id": "GHSA-g8xw-6mmv-frg4",
"modified": "2022-05-24T17:46:59Z",
"modified": "2022-09-25T00:00:18Z",
"published": "2022-05-24T17:46:59Z",
"aliases": [
"CVE-2021-25360"
],
"details": "An improper input validation vulnerability in libswmfextractor library prior to SMR APR-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
advisories/unreviewed/2022/05/GHSA-hmpv-pvg5-4fpq/GHSA-hmpv-pvg5-4fpq.json
+6 -2
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.3.0",
"id": "GHSA-hmpv-pvg5-4fpq",
"modified": "2022-05-24T19:16:43Z",
"modified": "2022-09-25T00:00:18Z",
"published": "2022-05-24T19:16:43Z",
"aliases": [
"CVE-2021-25489"
],
"details": "Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
}
],
"affected": [
@@ -25,6 +28,7 @@
],
"database_specific": {
"cwe_ids": [
"CWE-134",
"CWE-20"
],
"severity": "MODERATE",

Some files were not shown because too many files have changed in this diff Show More