netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Advisory Database Sync

Browse Source
This commit is contained in:
advisory-database[bot]
2024-01-30 18:31:38 +00:00
parent 3fcacd7ee3
commit bab026ad09
53 changed files with 619 additions and 110 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/unreviewed/2023/07/GHSA-45c7-642q-qm9m/GHSA-45c7-642q-qm9m.json
+4
View File
@@ -33,6 +33,10 @@
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0423"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0580"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2023-34966"
advisories/unreviewed/2023/07/GHSA-786x-44fx-qqh8/GHSA-786x-44fx-qqh8.json
+4
View File
@@ -29,6 +29,10 @@
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0404"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0569"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2023-3019"
advisories/unreviewed/2023/07/GHSA-7x98-4rw8-872g/GHSA-7x98-4rw8-872g.json
+5 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-7x98-4rw8-872g",
"modified": "2024-01-25T21:32:11Z",
"modified": "2024-01-30T18:30:18Z",
"published": "2023-07-25T18:30:32Z",
"aliases": [
"CVE-2023-3772"
@@ -37,6 +37,10 @@
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0412"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0575"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2023-3772"
advisories/unreviewed/2023/07/GHSA-86p4-vhr6-2vv3/GHSA-86p4-vhr6-2vv3.json
+4
View File
@@ -33,6 +33,10 @@
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0423"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0580"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2023-34967"
advisories/unreviewed/2023/07/GHSA-cfhp-p6xr-24g5/GHSA-cfhp-p6xr-24g5.json
+4
View File
@@ -33,6 +33,10 @@
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0423"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0580"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2023-34968"
advisories/unreviewed/2023/07/GHSA-cgvp-6hhh-fqwh/GHSA-cgvp-6hhh-fqwh.json
+4
View File
@@ -41,6 +41,10 @@
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0448"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0575"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2023-3567"
advisories/unreviewed/2023/07/GHSA-mfwc-hx97-869v/GHSA-mfwc-hx97-869v.json
+4
View File
@@ -33,6 +33,10 @@
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0423"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0580"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2022-2127"
advisories/unreviewed/2023/07/GHSA-v4mv-7g6h-5vh8/GHSA-v4mv-7g6h-5vh8.json
+17 -1
View File
@@ -1,7 +1,7 @@
{
"schema_version": "1.4.0",
"id": "GHSA-v4mv-7g6h-5vh8",
"modified": "2024-01-30T06:30:22Z",
"modified": "2024-01-30T18:30:18Z",
"published": "2023-07-24T18:30:44Z",
"aliases": [
"CVE-2023-3812"
@@ -85,6 +85,22 @@
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0554"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0562"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0563"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0575"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0593"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2023-3812"
advisories/unreviewed/2023/08/GHSA-897q-36v3-jwhm/GHSA-897q-36v3-jwhm.json
+4
View File
@@ -29,6 +29,10 @@
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2023:7077"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0575"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2023-4132"
advisories/unreviewed/2023/09/GHSA-j66v-q82h-4f8h/GHSA-j66v-q82h-4f8h.json
+12
View File
@@ -105,6 +105,18 @@
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0461"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0562"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0563"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0593"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2023-42753"
advisories/unreviewed/2023/11/GHSA-xr9j-c7v6-7542/GHSA-xr9j-c7v6-7542.json
+4
View File
@@ -89,6 +89,10 @@
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0554"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2024:0575"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2023-5178"
advisories/unreviewed/2024/01/GHSA-2m5x-r2g7-72x8/GHSA-2m5x-r2g7-72x8.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-2m5x-r2g7-72x8",
"modified": "2024-01-30T18:30:20Z",
"published": "2024-01-30T18:30:20Z",
"aliases": [
"CVE-2023-46230"
],
"details": "In Splunk Add-on Builder versions below 4.1.4, the app writes sensitive information to internal log files.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-46230"
},
{
"type": "WEB",
"url": "https://advisory.splunk.com/advisories/SVD-2024-0111"
}
],
"database_specific": {
"cwe_ids": [
"CWE-532"
],
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-01-30T17:15:09Z"
}
}
advisories/unreviewed/2024/01/GHSA-33p8-v8q2-mx53/GHSA-33p8-v8q2-mx53.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-33p8-v8q2-mx53",
"modified": "2024-01-23T21:30:20Z",
"modified": "2024-01-30T18:30:19Z",
"published": "2024-01-23T21:30:20Z",
"aliases": [
"CVE-2023-47196"
],
"details": "An origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations.\n\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThis vulnerability is similar to, but not identical to, CVE-2023-47197.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-346"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-01-23T21:15:08Z"
advisories/unreviewed/2024/01/GHSA-3568-h36m-7jmf/GHSA-3568-h36m-7jmf.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3568-h36m-7jmf",
"modified": "2024-01-23T15:30:58Z",
"modified": "2024-01-30T18:30:19Z",
"published": "2024-01-23T15:30:58Z",
"aliases": [
"CVE-2024-0749"
],
"details": "A phishing site could have repurposed an `about:` dialog to show phishing content with an incorrect origin in the address bar. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"
}
],
"affected": [
@@ -41,9 +44,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-346"
],
"severity": null,
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-01-23T14:15:38Z"
advisories/unreviewed/2024/01/GHSA-3h6x-952r-xr8p/GHSA-3h6x-952r-xr8p.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3h6x-952r-xr8p",
"modified": "2024-01-23T03:31:08Z",
"modified": "2024-01-30T18:30:19Z",
"published": "2024-01-23T03:31:08Z",
"aliases": [
"CVE-2024-23213"
],
"details": "The issue was addressed with improved memory handling. This issue is fixed in watchOS 10.3, tvOS 17.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, iOS 16.7.5 and iPadOS 16.7.5, Safari 17.3. Processing web content may lead to arbitrary code execution.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -71,7 +74,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-01-23T01:15:11Z"
advisories/unreviewed/2024/01/GHSA-3rhq-47cj-h9g4/GHSA-3rhq-47cj-h9g4.json
+38
View File
@@ -0,0 +1,38 @@
{
"schema_version": "1.4.0",
"id": "GHSA-3rhq-47cj-h9g4",
"modified": "2024-01-30T18:30:20Z",
"published": "2024-01-30T18:30:20Z",
"aliases": [
"CVE-2024-21388"
],
"details": "Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L"
}
],
"affected": [
],
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-21388"
},
{
"type": "WEB",
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21388"
}
],
"database_specific": {
"cwe_ids": [
],
"severity": "MODERATE",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-01-30T18:15:48Z"
}
}
advisories/unreviewed/2024/01/GHSA-4287-v2hm-q9f2/GHSA-4287-v2hm-q9f2.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-4287-v2hm-q9f2",
"modified": "2024-01-23T03:31:08Z",
"modified": "2024-01-30T18:30:19Z",
"published": "2024-01-23T03:31:08Z",
"aliases": [
"CVE-2024-23214"
],
"details": "Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.3, iOS 16.7.5 and iPadOS 16.7.5, iOS 17.3 and iPadOS 17.3. Processing maliciously crafted web content may lead to arbitrary code execution.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -45,9 +48,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-787"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-01-23T01:15:11Z"
advisories/unreviewed/2024/01/GHSA-46g9-6366-qgqc/GHSA-46g9-6366-qgqc.json
+6 -3
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-46g9-6366-qgqc",
"modified": "2024-01-23T03:31:08Z",
"modified": "2024-01-30T18:30:19Z",
"published": "2024-01-23T03:31:08Z",
"aliases": [
"CVE-2024-23211"
],
"details": "A privacy issue was addressed with improved handling of user preferences. This issue is fixed in watchOS 10.3, iOS 17.3 and iPadOS 17.3, macOS Sonoma 14.3, iOS 16.7.5 and iPadOS 16.7.5, Safari 17.3. A user's private browsing activity may be visible in Settings.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N"
}
],
"affected": [
@@ -63,7 +66,7 @@
"cwe_ids": [
],
"severity": null,
"severity": "LOW",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-01-23T01:15:11Z"
advisories/unreviewed/2024/01/GHSA-4mwf-4888-4x35/GHSA-4mwf-4888-4x35.json
+4
View File
@@ -44,6 +44,10 @@
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2024/01/30/4"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2024/01/30/5"
}
],
"database_specific": {
advisories/unreviewed/2024/01/GHSA-6jhr-xfqr-826m/GHSA-6jhr-xfqr-826m.json
+7 -4
View File
@@ -1,14 +1,17 @@
{
"schema_version": "1.4.0",
"id": "GHSA-6jhr-xfqr-826m",
"modified": "2024-01-23T21:30:21Z",
"modified": "2024-01-30T18:30:19Z",
"published": "2024-01-23T21:30:21Z",
"aliases": [
"CVE-2023-47200"
],
"details": "A plug-in manager origin validation vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalate privileges on affected installations.\n\nPlease note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.\n\nThis vulnerability is similar to, but not identical to, CVE-2023-47201.",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
}
],
"affected": [
@@ -29,9 +32,9 @@
],
"database_specific": {
"cwe_ids": [
"CWE-346"
],
"severity": null,
"severity": "HIGH",
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2024-01-23T21:15:08Z"

Some files were not shown because too many files have changed in this diff Show More